# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=713

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 714

---

## [Is there a tool to rebalance shards across multiple path.data paths?](https://discuss.elastic.co/t/is-there-a-tool-to-rebalance-shards-across-multiple-path-data-paths/262853)

<div class="topic-metadata">

**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\
**Replies:** 4\
**Last updated:** [February 2, 2021, 8:24am UTC](https://discuss.elastic.co/t/is-there-a-tool-to-rebalance-shards-across-multiple-path-data-paths/262853 "2021-02-02T08:24:09Z")

</div>

I have 5 data nodes in my cluster, all of them split the data across two disks. There should be plenty of space for my data, but because elasticsearch allocates shards to disks based on shard count rather than size (and …

---

## [Performance issues on shared Kubernetes cluster](https://discuss.elastic.co/t/performance-issues-on-shared-kubernetes-cluster/262846)

<div class="topic-metadata">

**Author:** [@Konrad\_Moskal](https://discuss.elastic.co/u/Konrad_Moskal)\
**Replies:** 2\
**Last updated:** [February 2, 2021, 6:57am UTC](https://discuss.elastic.co/t/performance-issues-on-shared-kubernetes-cluster/262846 "2021-02-02T06:57:23Z")

</div>

Hey! I have an issue with performance on a shared K8s cluster. When there is no load on the cluster, performance is great but for reason when activity increases my ES performance declines a lot. I have 20 indices, ~ 1GB…

---

## [Kill error](https://discuss.elastic.co/t/kill-error/262786)

<div class="topic-metadata">

**Author:** [@peyman\_peymani](https://discuss.elastic.co/u/peyman_peymani)\
**Replies:** 4\
**Last updated:** [February 2, 2021, 6:30am UTC](https://discuss.elastic.co/t/kill-error/262786 "2021-02-02T06:30:10Z")

</div>

Hi dear our server after works 6 or 7 hours we have kill in process ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendo …

---

## [How to append index level information to documents when returning search results](https://discuss.elastic.co/t/how-to-append-index-level-information-to-documents-when-returning-search-results/262923)

<div class="topic-metadata">

**Author:** [@ali\_wetrill](https://discuss.elastic.co/u/ali_wetrill)\
**Replies:** 1\
**Last updated:** [February 2, 2021, 6:12am UTC](https://discuss.elastic.co/t/how-to-append-index-level-information-to-documents-when-returning-search-results/262923 "2021-02-02T06:12:09Z")

</div>

Hi! Relatively simple question -- I want to append index-level information onto each document when returning those documents. I do not want to copy that information into each document (makes it harder to adjust that info…

---

## [Index Life cycle Policy indexes not roll overing](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102)

<div class="topic-metadata">

**Author:** [@Anu6006](https://discuss.elastic.co/u/Anu6006)\
**Replies:** 12\
**Last updated:** [February 2, 2021, 5:22am UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102 "2021-02-02T05:22:31Z")

</div>

Hi, I'm facing some problem in Index life cycle policy in which indexes are not roll overing and delete phase is not working. Is there is a best practice to do so?

---

## [Can I delete the source index that's been split into a new one?](https://discuss.elastic.co/t/can-i-delete-the-source-index-thats-been-split-into-a-new-one/262740)

<div class="topic-metadata">

**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\
**Replies:** 2\
**Last updated:** [February 2, 2021, 4:35am UTC](https://discuss.elastic.co/t/can-i-delete-the-source-index-thats-been-split-into-a-new-one/262740 "2021-02-02T04:35:27Z")

</div>

Hello everyone! I have an index which has been split into a target index with more shards. Can I delete the source index now? Will there be any problems? I'd appreciate if anyone could explain this to me. Thanks in advan…

---

## [QueryShardException: No mapping found for \[sortOrder\] in order to sort on](https://discuss.elastic.co/t/queryshardexception-no-mapping-found-for-sortorder-in-order-to-sort-on/262927)

<div class="topic-metadata">

**Author:** [@Haunh](https://discuss.elastic.co/u/Haunh)\
**Replies:** 2\
**Last updated:** [February 2, 2021, 3:56am UTC](https://discuss.elastic.co/t/queryshardexception-no-mapping-found-for-sortorder-in-order-to-sort-on/262927 "2021-02-02T03:56:18Z")

</div>

Hi Everyone! I connect Fess to external Elastic then have error after created index of fess : QueryShardException: No mapping found for \[sortOrder\] in order to sort on Below is version of Fess & Elastic Elastic : { …

---

## [Snapshot Restore](https://discuss.elastic.co/t/snapshot-restore/262889)

<div class="topic-metadata">

**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\
**Replies:** 3\
**Last updated:** [February 2, 2021, 1:37am UTC](https://discuss.elastic.co/t/snapshot-restore/262889 "2021-02-02T01:37:29Z")

</div>

when trying to do a snapshot and restore for 10 indices of each 50GB in size, the cluster gets loaded and causes lots of rejections during that time. Is there anything that needs to be configured on the cluster side?

---

## [Disallowing to specify number of shards & replicas at index creation time?](https://discuss.elastic.co/t/disallowing-to-specify-number-of-shards-replicas-at-index-creation-time/262915)

<div class="topic-metadata">

**Author:** [@mucius](https://discuss.elastic.co/u/mucius)\
**Replies:** 1\
**Last updated:** [February 2, 2021, 1:10am UTC](https://discuss.elastic.co/t/disallowing-to-specify-number-of-shards-replicas-at-index-creation-time/262915 "2021-02-02T01:10:46Z")

</div>

Good day, Is it possible to make Elasticsearch ignore number of replicas & number of shards specified by user during index creation? I'm interested to control these parameters on Elasticsearch side only (using templates…

---

## [Painless:Cannot invoke \\”Object.getClass()\\” because \\”callArgs\[0\]\\” is null](https://discuss.elastic.co/t/painless-cannot-invoke-object-getclass-because-callargs-0-is-null/261506)

<div class="topic-metadata">

**Author:** [@carpeDiem](https://discuss.elastic.co/u/carpeDiem)\
**Replies:** 1\
**Last updated:** [February 1, 2021, 11:44pm UTC](https://discuss.elastic.co/t/painless-cannot-invoke-object-getclass-because-callargs-0-is-null/261506 "2021-02-01T23:44:55Z")

</div>

Hello experts, I am using a painless scripting language to query,but the hit of result is empty. This is my query body. POST test\_script-0/\_search { "\_source":true, "aggs":{}, "from":0, …

---

## [Question in elastic search to get specific records with specific date and time range](https://discuss.elastic.co/t/question-in-elastic-search-to-get-specific-records-with-specific-date-and-time-range/262804)

<div class="topic-metadata">

**Author:** [@Kin\_Wan](https://discuss.elastic.co/u/Kin_Wan)\
**Replies:** 1\
**Last updated:** [February 1, 2021, 11:11pm UTC](https://discuss.elastic.co/t/question-in-elastic-search-to-get-specific-records-with-specific-date-and-time-range/262804 "2021-02-01T23:11:39Z")

</div>

I would like to grep all the records that match "successLoginID" between 2021-01-07 to 2021-01-13 with time range from 09:00 to 18:00 but no records found with the below code. Can advise what's the problem? Thanks. GET…

---

## [Elasticsearch NEST upgrade strategies](https://discuss.elastic.co/t/elasticsearch-nest-upgrade-strategies/262873)

<div class="topic-metadata">

**Author:** [@MS\_Maverick](https://discuss.elastic.co/u/MS_Maverick)\
**Replies:** 0\
**Last updated:** [February 1, 2021, 5:35pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-upgrade-strategies/262873 "2021-02-01T17:35:05Z")

</div>

Hi, We have multiple ETL jobs and multiple microservices which talk with Elasticsearch. We use NEST client to library for this. With rapid upgrades to Elasticsearch and new versions coming in rapid succession, we have t…

---

## [Bool OR term quey does not match any document](https://discuss.elastic.co/t/bool-or-term-quey-does-not-match-any-document/262908)

<div class="topic-metadata">

**Author:** [@JackMaarek](https://discuss.elastic.co/u/JackMaarek)\
**Replies:** 0\
**Last updated:** [February 1, 2021, 9:18pm UTC](https://discuss.elastic.co/t/bool-or-term-quey-does-not-match-any-document/262908 "2021-02-01T21:18:58Z")

</div>

Hello guys, I am trying to dive into DDD architecture by implement CQRS and event sourcing pattern into my app. The app is a simple blog api with article management and user authentication. I'm using elastic to store my…

---

## [Api Key](https://discuss.elastic.co/t/api-key/262907)

<div class="topic-metadata">

**Author:** [@ukuleleplayer](https://discuss.elastic.co/u/ukuleleplayer)\
**Replies:** 0\
**Last updated:** [February 1, 2021, 9:03pm UTC](https://discuss.elastic.co/t/api-key/262907 "2021-02-01T21:03:19Z")

</div>

I'm trying to see if there's a way to replace the cloud.auth variable in the auditbeat.yml file with an api-key. Is there any way to do this?

---

## [Filter in ids query](https://discuss.elastic.co/t/filter-in-ids-query/262902)

<div class="topic-metadata">

**Author:** [@yish-yish](https://discuss.elastic.co/u/yish-yish)\
**Replies:** 0\
**Last updated:** [February 1, 2021, 8:40pm UTC](https://discuss.elastic.co/t/filter-in-ids-query/262902 "2021-02-01T20:40:29Z")

</div>

Hi elastic wizards. I have in my code base an ids query, and I need to add filtering capabilities to the query i.e. in addition to the ids filter, I need to be able to add additional term based filters. Is there a way …

---

## [Allowing multiple mappings in Elastic Search 6](https://discuss.elastic.co/t/allowing-multiple-mappings-in-elastic-search-6/262864)

<div class="topic-metadata">

**Author:** [@Jack4](https://discuss.elastic.co/u/Jack4)\
**Replies:** 5\
**Last updated:** [February 1, 2021, 8:14pm UTC](https://discuss.elastic.co/t/allowing-multiple-mappings-in-elastic-search-6/262864 "2021-02-01T20:14:44Z")

</div>

Hi All, I am upgrading from Elastic 5.6.16 to 6.8.13 and it's complaining about "Rejecting mapping update to...as the final mapping would have more than 1 type" Without switching to single mapping, is there a workarou…

---

## [Adding A New Field in Elasticsearch Ingest Pipeline](https://discuss.elastic.co/t/adding-a-new-field-in-elasticsearch-ingest-pipeline/262891)

<div class="topic-metadata">

**Author:** [@PRODIPTO](https://discuss.elastic.co/u/PRODIPTO)\
**Replies:** 0\
**Last updated:** [February 1, 2021, 7:55pm UTC](https://discuss.elastic.co/t/adding-a-new-field-in-elasticsearch-ingest-pipeline/262891 "2021-02-01T19:55:39Z")

</div>

Hi I am working on a migration activity where we are moving from a OSS version of Elastic Stack to Platinum version. We were using Logstash in the OSS cluster to parse the logs but in the Platinum cluster we are going t…

---

## [Snapshots are failing](https://discuss.elastic.co/t/snapshots-are-failing/262769)

<div class="topic-metadata">

**Author:** [@SteveHodges](https://discuss.elastic.co/u/SteveHodges)\
**Replies:** 4\
**Last updated:** [February 1, 2021, 7:52pm UTC](https://discuss.elastic.co/t/snapshots-are-failing/262769 "2021-02-01T19:52:46Z")

</div>

After a network outage, the elasticsearch snapshot is failing. After I restored the connection to the NAS I am getting errors when I try to take a snapshot. The error is access\_denied\_exception Here is the command I r…

---

## [Instrument elasticsearch search with Jaeger (or elastic APM)](https://discuss.elastic.co/t/instrument-elasticsearch-search-with-jaeger-or-elastic-apm/262869)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 0\
**Last updated:** [February 1, 2021, 5:12pm UTC](https://discuss.elastic.co/t/instrument-elasticsearch-search-with-jaeger-or-elastic-apm/262869 "2021-02-01T17:12:23Z")

</div>

In order to tune our cluster, we want to understand what elasticsearch do when a query arrive. Usually we use jaeger for that , (I am a big fan of elasticAPM too), is it possible to profile elasticsearch like that? So …

---

## [Scaling\_factor is missing in generated template using ECS Tooling 1.7.0](https://discuss.elastic.co/t/scaling-factor-is-missing-in-generated-template-using-ecs-tooling-1-7-0/262511)

<div class="topic-metadata">

**Author:** [@mxu](https://discuss.elastic.co/u/mxu)\
**Replies:** 3\
**Last updated:** [February 1, 2021, 3:37pm UTC](https://discuss.elastic.co/t/scaling-factor-is-missing-in-generated-template-using-ecs-tooling-1-7-0/262511 "2021-02-01T15:37:58Z")

</div>

Hi, I am adding a custom schema for CPU Usage, configured as following. The ECS Tooling 1.7.0 generated template without "scaling\_factor" field. - name: 1MinAvg.Pct level: custom type: scaled\_float s…

---

## [Terms Aggregation not returning keys](https://discuss.elastic.co/t/terms-aggregation-not-returning-keys/262634)

<div class="topic-metadata">

**Author:** [@gabe.ks11](https://discuss.elastic.co/u/gabe.ks11)\
**Replies:** 15\
**Last updated:** [February 1, 2021, 2:59pm UTC](https://discuss.elastic.co/t/terms-aggregation-not-returning-keys/262634 "2021-02-01T14:59:06Z")

</div>

Hi everyone, So recently we ran into a problem using elastic, we are attempting to detect records which have a duplicate value (hash) and to patch them with a flag so that we iterate all records as we go. (27 million re…

---

## [Auto create DataStream by writing to it](https://discuss.elastic.co/t/auto-create-datastream-by-writing-to-it/262848)

<div class="topic-metadata">

**Author:** [@gkman](https://discuss.elastic.co/u/gkman)\
**Replies:** 0\
**Last updated:** [February 1, 2021, 2:29pm UTC](https://discuss.elastic.co/t/auto-create-datastream-by-writing-to-it/262848 "2021-02-01T14:29:28Z")

</div>

Hi. Is it possible to create a DataStream by attempting to writing to it? (similarly to the way index can be created by attempting to write to it.)

---

## [Updating non-file synonyms](https://discuss.elastic.co/t/updating-non-file-synonyms/262364)

<div class="topic-metadata">

**Author:** [@Henr1k](https://discuss.elastic.co/u/Henr1k)\
**Replies:** 6\
**Last updated:** [February 1, 2021, 2:17pm UTC](https://discuss.elastic.co/t/updating-non-file-synonyms/262364 "2021-02-01T14:17:52Z")

</div>

Hi, I was trying to do updates on non-file synonyms, but it fails. Do I have to use a file or am I doing it wrong? Files isn't that well supported in Elasticsearch Cloud. It is only via Cloud UI or have I missed an AP…

---

## [How much heap memory need for elasticsearch data nodes](https://discuss.elastic.co/t/how-much-heap-memory-need-for-elasticsearch-data-nodes/262773)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 4\
**Last updated:** [February 1, 2021, 1:07pm UTC](https://discuss.elastic.co/t/how-much-heap-memory-need-for-elasticsearch-data-nodes/262773 "2021-02-01T13:07:40Z")

</div>

I am runnig 8 node cluster (3 Master+3 data+2 coordinate) data\_node 1 contains 714 shards and heap memory is 10gb data\_node 2 contains 715 shards and heap memory is 10gb data\_node 3 contains 715 shards and heap memory …

---

## [How ElasticSearch compare with GeoMesa](https://discuss.elastic.co/t/how-elasticsearch-compare-with-geomesa/262569)

<div class="topic-metadata">

**Author:** [@nico44000](https://discuss.elastic.co/u/nico44000)\
**Replies:** 2\
**Last updated:** [February 1, 2021, 12:52pm UTC](https://discuss.elastic.co/t/how-elasticsearch-compare-with-geomesa/262569 "2021-02-01T12:52:37Z")

</div>

It's unclear for me how ElasticSearch 8 compare with GeoMesa, for geo-spatial queries. With ElasticSearch, I can index and query Point/Line/Polygon/MultiPolygon with very high performance. Since few years, ElasticSearc…

---

## [Snapshot Kibana 6.8 under Windows](https://discuss.elastic.co/t/snapshot-kibana-6-8-under-windows/261537)

<div class="topic-metadata">

**Author:** [@dumitrao](https://discuss.elastic.co/u/dumitrao)\
**Replies:** 13\
**Last updated:** [February 1, 2021, 12:25pm UTC](https://discuss.elastic.co/t/snapshot-kibana-6-8-under-windows/261537 "2021-02-01T12:25:21Z")

</div>

Hello, I am trying to setup Kibana to create a snapshot but I am missing the setting - Register a repository - in Kibana 6.8 I add already in the elasticsearch.yml - path.repo: E:\\Program Files\\Elastic\\\\Elasticsearch …

---

## [Payload score for block-max WAND](https://discuss.elastic.co/t/payload-score-for-block-max-wand/262790)

<div class="topic-metadata">

**Author:** [@robert-007](https://discuss.elastic.co/u/robert-007)\
**Replies:** 0\
**Last updated:** [February 1, 2021, 6:34am UTC](https://discuss.elastic.co/t/payload-score-for-block-max-wand/262790 "2021-02-01T06:34:07Z")

</div>

As I read the papper "\[Optimizing Top-k Document Retrieval Strategies for Block-Max Indexes\](http://engineering.nyu.edu/~suel/papers/bmm.pdf)", i see that each block of posting list stores one max score using to skip th…

---

## [Find all documents with a missing field (“index”: false, “store”: true)](https://discuss.elastic.co/t/find-all-documents-with-a-missing-field-index-false-store-true/262626)

<div class="topic-metadata">

**Author:** [@tworogue](https://discuss.elastic.co/u/tworogue)\
**Replies:** 1\
**Last updated:** [February 1, 2021, 11:04am UTC](https://discuss.elastic.co/t/find-all-documents-with-a-missing-field-index-false-store-true/262626 "2021-02-01T11:04:33Z")

</div>

ElasticSearch version: 6.8.2 Index metadata fragment: { "my\_index": { "mappings": { "type": { "properties": { "my\_field": { "typ…

---

## [Most Recent Trend, Most Searchable keyword with ElasticSearch API](https://discuss.elastic.co/t/most-recent-trend-most-searchable-keyword-with-elasticsearch-api/262783)

<div class="topic-metadata">

**Author:** [@het](https://discuss.elastic.co/u/het)\
**Replies:** 3\
**Last updated:** [February 1, 2021, 10:41am UTC](https://discuss.elastic.co/t/most-recent-trend-most-searchable-keyword-with-elasticsearch-api/262783 "2021-02-01T10:41:16Z")

</div>

Hi Team, Does Elasticsearch provide an API that gives the Most searched words, new search words, and so on? For example like google, top 10 recently searched items, top 10 most searched items? Can we achieve something…

---

## [Elasticsearch security warning when i connect to cluster from outside](https://discuss.elastic.co/t/elasticsearch-security-warning-when-i-connect-to-cluster-from-outside/262768)

<div class="topic-metadata">

**Author:** [@first100](https://discuss.elastic.co/u/first100)\
**Replies:** 2\
**Last updated:** [February 1, 2021, 10:32am UTC](https://discuss.elastic.co/t/elasticsearch-security-warning-when-i-connect-to-cluster-from-outside/262768 "2021-02-01T10:32:50Z")

</div>

Hello, i was able to secure my elastic cluster with certificates generated from elasticsearch-certutil command, but i f try to open my node : https://elk-001:9200 from outside , receive warning from browser, about the c…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=712)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=714)
