# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=718

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 719

---

## [Timestamp update](https://discuss.elastic.co/t/timestamp-update/262110)

<div class="topic-metadata">

**Author:** [@Makss39](https://discuss.elastic.co/u/Makss39)\
**Replies:** 2\
**Last updated:** [January 25, 2021, 3:21pm UTC](https://discuss.elastic.co/t/timestamp-update/262110 "2021-01-25T15:21:15Z")

</div>

Hello ! I would like to update my timestamp field, but all the info that i've found are not working... Probably a synthax error but i'm not able to figure out where it stucks... I already tried several option... POST …

---

## [Nodes crashed and kNN questions](https://discuss.elastic.co/t/nodes-crashed-and-knn-questions/262097)

<div class="topic-metadata">

**Author:** [@doc113](https://discuss.elastic.co/u/doc113)\
**Replies:** 2\
**Last updated:** [January 25, 2021, 1:44pm UTC](https://discuss.elastic.co/t/nodes-crashed-and-knn-questions/262097 "2021-01-25T13:44:00Z")

</div>

Good time of day! Faced with an inexplicable thing - during the kNN search, the servers fall (in different order and not always (e.g. two success searches, one fail etc). Cluster: master 4cpu, 4gb coordinator 8cpu, 8…

---

## [Mapping defined in templates merges incorrectly ( multi-fields )](https://discuss.elastic.co/t/mapping-defined-in-templates-merges-incorrectly-multi-fields/262109)

<div class="topic-metadata">

**Author:** [@korali](https://discuss.elastic.co/u/korali)\
**Replies:** 0\
**Last updated:** [January 25, 2021, 1:23pm UTC](https://discuss.elastic.co/t/mapping-defined-in-templates-merges-incorrectly-multi-fields/262109 "2021-01-25T13:23:34Z")

</div>

Elasticsearch version : 7.10.0 When I create an index that matched two templates(templates -\> index patterns) (A field in a mapping defined in the two templates that have a multi-fields defined) and trying to insert a d…

---

## [Data Type changes after Lifecycle creation](https://discuss.elastic.co/t/data-type-changes-after-lifecycle-creation/262103)

<div class="topic-metadata">

**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\
**Replies:** 0\
**Last updated:** [January 25, 2021, 12:33pm UTC](https://discuss.elastic.co/t/data-type-changes-after-lifecycle-creation/262103 "2021-01-25T12:33:22Z")

</div>

Good morning, I have syslog with special fields. These logs are being processed by Elastic-Agent (Filebeat). I created some extra fields in the datastream with numeric data type. These fields are being filled by a KV-pr…

---

## [Strange index size](https://discuss.elastic.co/t/strange-index-size/261703)

<div class="topic-metadata">

**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\
**Replies:** 14\
**Last updated:** [January 25, 2021, 12:18pm UTC](https://discuss.elastic.co/t/strange-index-size/261703 "2021-01-25T12:18:31Z")

</div>

Hi, I have 2 clusters, running, 7.10 on different locations. They index the same kind of logging so are set up identically. I conduct searches via kibana on local as well as remote indices in those 2 clusters. Now here…

---

## [OIDC with Elasticsearch](https://discuss.elastic.co/t/oidc-with-elasticsearch/261946)

<div class="topic-metadata">

**Author:** [@oliverlucas](https://discuss.elastic.co/u/oliverlucas)\
**Replies:** 2\
**Last updated:** [January 25, 2021, 11:32am UTC](https://discuss.elastic.co/t/oidc-with-elasticsearch/261946 "2021-01-25T11:32:20Z")

</div>

It seems every bit of documentation that I read has conflicting advice, and I'm stumped on this one. First of, I've never worked with OIDC or SAML before so this is my first exploration. I'm trying to configure SSO so i…

---

## [javax.net.ssl.SSLHandshakeException](https://discuss.elastic.co/t/javax-net-ssl-sslhandshakeexception/262065)

<div class="topic-metadata">

**Author:** [@borna\_talebi](https://discuss.elastic.co/u/borna_talebi)\
**Replies:** 1\
**Last updated:** [January 25, 2021, 11:10am UTC](https://discuss.elastic.co/t/javax-net-ssl-sslhandshakeexception/262065 "2021-01-25T11:10:38Z")

</div>

Hi, Recently I'm receiving this warning(caught exception while handling client http traffic) in my elasticsearch logs. The cluster health is green and there are no unassigned shards. Here are my Logs.

---

## [Folder shared for elastcisearch logs](https://discuss.elastic.co/t/folder-shared-for-elastcisearch-logs/261634)

<div class="topic-metadata">

**Author:** [@Costi](https://discuss.elastic.co/u/Costi)\
**Replies:** 5\
**Last updated:** [January 25, 2021, 10:34am UTC](https://discuss.elastic.co/t/folder-shared-for-elastcisearch-logs/261634 "2021-01-25T10:34:13Z")

</div>

Hi! I want to store elasticsearch, kibana and logstash logs in a shared folder. Is that possible? I need to have a certain structure for the folder path? I am using 6.5 ELK version. Thanks for your help!

---

## [Elasticsearch Query with dynamic filters](https://discuss.elastic.co/t/elasticsearch-query-with-dynamic-filters/262072)

<div class="topic-metadata">

**Author:** [@shoaib\_akram](https://discuss.elastic.co/u/shoaib_akram)\
**Replies:** 0\
**Last updated:** [January 25, 2021, 9:20am UTC](https://discuss.elastic.co/t/elasticsearch-query-with-dynamic-filters/262072 "2021-01-25T09:20:41Z")

</div>

hi I need your help to build a query to use multiple dynamic filter. like if i provide a filter "a" on Field "A" it search on the basis of "a" else do nothing if i provide a filter "b" on Field "B" it search on the ba…

---

## [Restore of elasticsearch data fails with CorruptIndexException\[checksum failed (hardware problem?)](https://discuss.elastic.co/t/restore-of-elasticsearch-data-fails-with-corruptindexexception-checksum-failed-hardware-problem/261619)

<div class="topic-metadata">

**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\
**Replies:** 5\
**Last updated:** [January 25, 2021, 9:00am UTC](https://discuss.elastic.co/t/restore-of-elasticsearch-data-fails-with-corruptindexexception-checksum-failed-hardware-problem/261619 "2021-01-25T09:00:41Z")

</div>

Hi Team, We trying to restore a backup that we had taken a couple of days ago on a freshly installed elasticsearch cluster. The steps we followed are mentioned below: Installed an elasticsearch chart and pushed some d…

---

## [Aggregating entities from transaction documents using transforms](https://discuss.elastic.co/t/aggregating-entities-from-transaction-documents-using-transforms/261828)

<div class="topic-metadata">

**Author:** [@kbirk](https://discuss.elastic.co/u/kbirk)\
**Replies:** 1\
**Last updated:** [January 25, 2021, 8:37am UTC](https://discuss.elastic.co/t/aggregating-entities-from-transaction-documents-using-transforms/261828 "2021-01-25T08:37:00Z")

</div>

Hello, We have an application that models transactional data. Each document describes a single transaction between two entities. Our current import process is done in two phases. First we ingest all the transactions in…

---

## [Index randomly fetches wrong results and wrong numeric type](https://discuss.elastic.co/t/index-randomly-fetches-wrong-results-and-wrong-numeric-type/261893)

<div class="topic-metadata">

**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\
**Replies:** 3\
**Last updated:** [January 25, 2021, 8:16am UTC](https://discuss.elastic.co/t/index-randomly-fetches-wrong-results-and-wrong-numeric-type/261893 "2021-01-25T08:16:34Z")

</div>

Hi, I have a situation I have not seen before... In my test index I have just 25 records. I am noticing the following inconsistent problems upon a simple search request to the alias (which is pointing to this single in…

---

## [Sink data from hive to es](https://discuss.elastic.co/t/sink-data-from-hive-to-es/262062)

<div class="topic-metadata">

**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\
**Replies:** 0\
**Last updated:** [January 25, 2021, 7:37am UTC](https://discuss.elastic.co/t/sink-data-from-hive-to-es/262062 "2021-01-25T07:37:35Z")

</div>

Hi guys, I want to sink my data from hive to es. data in hive just like this: CREATE TABLE \`dwd\_ddjk\_hospital\`( \`orgid\` bigint, \`orgcode\` string, …

---

## [Cold phase staying in data/data\_hot node](https://discuss.elastic.co/t/cold-phase-staying-in-data-data-hot-node/262052)

<div class="topic-metadata">

**Author:** [@Finley](https://discuss.elastic.co/u/Finley)\
**Replies:** 2\
**Last updated:** [January 25, 2021, 4:42am UTC](https://discuss.elastic.co/t/cold-phase-staying-in-data-data-hot-node/262052 "2021-01-25T04:42:34Z")

</div>

Hello, I am trying to setup an elasticsearch cluster. I setted up 9 nodes with these roles : master-1 \[master\] master-2 \[master\] master-3 \[master\] data-1 \[data, data\_hot\] data-2 \[data\_warm\] data-3 \[data\_warm\] da…

---

## [Conditional update based on priority in Elasticsearch](https://discuss.elastic.co/t/conditional-update-based-on-priority-in-elasticsearch/262036)

<div class="topic-metadata">

**Author:** [@Ahmed\_Sharara](https://discuss.elastic.co/u/Ahmed_Sharara)\
**Replies:** 8\
**Last updated:** [January 25, 2021, 4:15am UTC](https://discuss.elastic.co/t/conditional-update-based-on-priority-in-elasticsearch/262036 "2021-01-25T04:15:54Z")

</div>

Hello, I'm using logstash to index data from Kafka to Elasticsearch. There are multiple events with the same id. I'm using upsert in logstash to update existing documents with the new values based on the \_id. sample in…

---

## [Is it safe to delete SLM history indexes](https://discuss.elastic.co/t/is-it-safe-to-delete-slm-history-indexes/261965)

<div class="topic-metadata">

**Author:** [@robbyku](https://discuss.elastic.co/u/robbyku)\
**Replies:** 2\
**Last updated:** [January 25, 2021, 4:10am UTC](https://discuss.elastic.co/t/is-it-safe-to-delete-slm-history-indexes/261965 "2021-01-25T04:10:29Z")

</div>

Hi, I have added a new master-eligible node (say node04) and was decommissioning another master-eligible node (say node03), due to a different es version, from the cluster of 3 nodes. So I used the cluster allocation fi…

---

## [How to get a better performance to load ElasticSearch data into Hive?](https://discuss.elastic.co/t/how-to-get-a-better-performance-to-load-elasticsearch-data-into-hive/262051)

<div class="topic-metadata">

**Author:** [@Sean\_Han](https://discuss.elastic.co/u/Sean_Han)\
**Replies:** 0\
**Last updated:** [January 25, 2021, 3:40am UTC](https://discuss.elastic.co/t/how-to-get-a-better-performance-to-load-elasticsearch-data-into-hive/262051 "2021-01-25T03:40:28Z")

</div>

We created the Hive external table using ElasticSearch StorageHandler as shown below: CREATE EXTERNAL TABLE DEFAULT.ES\_TEST ( REG\_DATE STRING , STR1 STRING , STR2 STRING , STR3 STRING , STR4 STRING , S…

---

## [Installing Elastic Search on shared webhosting](https://discuss.elastic.co/t/installing-elastic-search-on-shared-webhosting/262046)

<div class="topic-metadata">

**Author:** [@MyGIS](https://discuss.elastic.co/u/MyGIS)\
**Replies:** 3\
**Last updated:** [January 25, 2021, 1:54am UTC](https://discuss.elastic.co/t/installing-elastic-search-on-shared-webhosting/262046 "2021-01-25T01:54:36Z")

</div>

Hello, Is it possible to installed Elasticsearch on a shared web hosting such as Hostgator or Bluehost? Thanks.

---

## [What are the possible values of type in task](https://discuss.elastic.co/t/what-are-the-possible-values-of-type-in-task/261534)

<div class="topic-metadata">

**Author:** [@kender1314](https://discuss.elastic.co/u/kender1314)\
**Replies:** 5\
**Last updated:** [January 25, 2021, 1:33am UTC](https://discuss.elastic.co/t/what-are-the-possible-values-of-type-in-task/261534 "2021-01-25T01:33:12Z")

</div>

As the documentation says，when I execute command GET \_tasks?actions=\*search&detailed return result { "nodes" : { "oTUltX4IQMOUUVeiohTt8A" : { "name" : "H5dfFeA", "transport\_address" : "127.0.0.1:9300", "host" : "…

---

## [NEST client always using PUT http method instead of POST](https://discuss.elastic.co/t/nest-client-always-using-put-http-method-instead-of-post/261552)

<div class="topic-metadata">

**Author:** [@Izzy](https://discuss.elastic.co/u/Izzy)\
**Replies:** 0\
**Last updated:** [January 19, 2021, 1:56pm UTC](https://discuss.elastic.co/t/nest-client-always-using-put-http-method-instead-of-post/261552 "2021-01-19T13:56:39Z")

</div>

I'm trying to index my documents and expect them to have unique Ids, for doing that I'm using pipeline processor in order to remove the Id field from my model. However, Id always stored as 0 in elastic side. I noticed …

---

## [Best practices for managing application logs](https://discuss.elastic.co/t/best-practices-for-managing-application-logs/261824)

<div class="topic-metadata">

**Author:** [@pampua84](https://discuss.elastic.co/u/pampua84)\
**Replies:** 1\
**Last updated:** [January 25, 2021, 12:07am UTC](https://discuss.elastic.co/t/best-practices-for-managing-application-logs/261824 "2021-01-25T00:07:17Z")

</div>

Hello boys and girls, I have a few questions about best practices for managing my application logs on elastic: Is it a good idea to create an index by app and day to improve search performance? I have logs in Json for…

---

## [Problem with centos 7 install](https://discuss.elastic.co/t/problem-with-centos-7-install/261941)

<div class="topic-metadata">

**Author:** [@cyrduf](https://discuss.elastic.co/u/cyrduf)\
**Replies:** 1\
**Last updated:** [January 24, 2021, 11:56pm UTC](https://discuss.elastic.co/t/problem-with-centos-7-install/261941 "2021-01-24T23:56:41Z")

</div>

Hello, I have some problems after elasticsearch installation on centos 7 VM. There is the log and if you can help me to solve. Best Regards \[root@localhost log\]# sudo yum install -y elasticsearch Modules complémenta…

---

## [Bitnami Elasticsearch in Azure(X-Pack)](https://discuss.elastic.co/t/bitnami-elasticsearch-in-azure-x-pack/261727)

<div class="topic-metadata">

**Author:** [@roman.pavliuk](https://discuss.elastic.co/u/roman.pavliuk)\
**Replies:** 6\
**Last updated:** [January 24, 2021, 11:52pm UTC](https://discuss.elastic.co/t/bitnami-elasticsearch-in-azure-x-pack/261727 "2021-01-24T23:52:27Z")

</div>

Hi all. I want to use Bitnami Elasticsearch in Azure portal, but I don't need X-Pack. How I can disable it or install Bitnami Elk without X-Pack? When I starting to create in from Marketplace, I don't see any setting ho…

---

## [Data node is not reporting CPU](https://discuss.elastic.co/t/data-node-is-not-reporting-cpu/261697)

<div class="topic-metadata">

**Author:** [@Mike\_Connor](https://discuss.elastic.co/u/Mike_Connor)\
**Replies:** 3\
**Last updated:** [January 24, 2021, 10:06pm UTC](https://discuss.elastic.co/t/data-node-is-not-reporting-cpu/261697 "2021-01-24T22:06:49Z")

</div>

Hello, I have a cloud.elastic.co deployment with some hot and warm nodes. One of the hot nodes has not been reporting CPU usage since it was launched. Was hoping it would sort itself out, even tried a restart. I hav…

---

## [Canvas SQL: Unexpected result of an SQL query](https://discuss.elastic.co/t/canvas-sql-unexpected-result-of-an-sql-query/259386)

<div class="topic-metadata">

**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\
**Replies:** 14\
**Last updated:** [January 24, 2021, 2:49pm UTC](https://discuss.elastic.co/t/canvas-sql-unexpected-result-of-an-sql-query/259386 "2021-01-24T14:49:31Z")

</div>

Hello everybody, I am trying to display in canvas the users that have more than 10 authentication failed, so I am using this SQL query: SELECT COUNT(\*) as result\_count FROM ( SELECT user.name, COUNT(\*) as result FROM…

---

## [Bad Request - Specifying types in document get requests is deprecated](https://discuss.elastic.co/t/bad-request-specifying-types-in-document-get-requests-is-deprecated/262024)

<div class="topic-metadata">

**Author:** [@shlomys](https://discuss.elastic.co/u/shlomys)\
**Replies:** 2\
**Last updated:** [January 24, 2021, 12:39pm UTC](https://discuss.elastic.co/t/bad-request-specifying-types-in-document-get-requests-is-deprecated/262024 "2021-01-24T12:39:48Z")

</div>

Hi, Since upgrading elastic stack docker containers to 7.10.2 I get the following error whenever trying to open a new transaction with the .net Elastic.Apm 1.7.1 : StatusCode: 400, ReasonPhrase: 'Bad Request', Version:…

---

## [How to manage data with high update rate?](https://discuss.elastic.co/t/how-to-manage-data-with-high-update-rate/261995)

<div class="topic-metadata">

**Author:** [@alireza\_jazayerei](https://discuss.elastic.co/u/alireza_jazayerei)\
**Replies:** 4\
**Last updated:** [January 24, 2021, 5:34am UTC](https://discuss.elastic.co/t/how-to-manage-data-with-high-update-rate/261995 "2021-01-24T05:34:34Z")

</div>

hello everyone I want to implement an advanced search system that has the ability to sort results by their popularity. I feel that update operation is expensive in elastic search. what is the best way to store user like…

---

## [Errors ("type" : "security\_exception") in running ElasticSearch](https://discuss.elastic.co/t/errors-type-security-exception-in-running-elasticsearch/262004)

<div class="topic-metadata">

**Author:** [@SMH](https://discuss.elastic.co/u/SMH)\
**Replies:** 5\
**Last updated:** [January 24, 2021, 2:17am UTC](https://discuss.elastic.co/t/errors-type-security-exception-in-running-elasticsearch/262004 "2021-01-24T02:17:33Z")

</div>

Hi, I have some difficulties when I run the elasticsearch on Windows. I wonder if you could help me in this process to solve the error. My Java version is: java version "1.8.0\_271" I installed elasticsearch, successf…

---

## [License Expiry issue in Elasticsearch 7.10.2](https://discuss.elastic.co/t/license-expiry-issue-in-elasticsearch-7-10-2/261982)

<div class="topic-metadata">

**Author:** [@Pritheka](https://discuss.elastic.co/u/Pritheka)\
**Replies:** 1\
**Last updated:** [January 23, 2021, 6:11pm UTC](https://discuss.elastic.co/t/license-expiry-issue-in-elasticsearch-7-10-2/261982 "2021-01-23T18:11:16Z")

</div>

I installed 'Elasticsearch-7.10.2' recently. When i run it, i get the below error in the logs. \[ERROR\]\[o.e.x.s.a.f.SecurityActionFilter\] \[LAPTOP-05GRP0LP\] blocking \[cluster:monitor/nodes/stats\] operation due to expired …

---

## [ElasticSearch Stream NEW INCOMING documents to clients](https://discuss.elastic.co/t/elasticsearch-stream-new-incoming-documents-to-clients/261763)

<div class="topic-metadata">

**Author:** [@schubec](https://discuss.elastic.co/u/schubec)\
**Replies:** 6\
**Last updated:** [January 23, 2021, 1:18pm UTC](https://discuss.elastic.co/t/elasticsearch-stream-new-incoming-documents-to-clients/261763 "2021-01-23T13:18:16Z")

</div>

Hi! I have this usecase: I receive ca 500 documents of cars (brand, model, color, airbag yes/no, etc.) per second and I am storing these in ElasticSearch. It works perfectly. Then, I have a webclient, which searches f…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=717)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=719)
