# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=722

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 723

---

## [Elasticsearch threadpool and index settings in ECK](https://discuss.elastic.co/t/elasticsearch-threadpool-and-index-settings-in-eck/261272)

<div class="topic-metadata">

**Author:** [@zohaib](https://discuss.elastic.co/u/zohaib)\
**Replies:** 5\
**Last updated:** [January 18, 2021, 9:53am UTC](https://discuss.elastic.co/t/elasticsearch-threadpool-and-index-settings-in-eck/261272 "2021-01-18T09:53:55Z")

</div>

We are using ECK operator 1.2 and ElasticSearch 7.4.0 for a 3 node cluster with the default settings on Azure Kubernetes Services. We need to update the following ElasticSearch configuration in our cluster: threadpool.…

---

## [How can I stop cluster from filling my cold nodes with hot data?](https://discuss.elastic.co/t/how-can-i-stop-cluster-from-filling-my-cold-nodes-with-hot-data/261044)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 5\
**Last updated:** [January 19, 2021, 1:11am UTC](https://discuss.elastic.co/t/how-can-i-stop-cluster-from-filling-my-cold-nodes-with-hot-data/261044 "2021-01-19T01:11:56Z")

</div>

title really says it all. I just added two cold nodes to my cluster -- these have slow disks and I don't want active indexes on them but I find that ES is treating them the same as the other nodes. both nodes have node…

---

## [I can't edit my deployment because I have too many shards in my cluster](https://discuss.elastic.co/t/i-cant-edit-my-deployment-because-i-have-too-many-shards-in-my-cluster/260774)

<div class="topic-metadata">

**Author:** [@daniel\_at\_gus](https://discuss.elastic.co/u/daniel_at_gus)\
**Replies:** 7\
**Last updated:** [January 19, 2021, 12:32am UTC](https://discuss.elastic.co/t/i-cant-edit-my-deployment-because-i-have-too-many-shards-in-my-cluster/260774 "2021-01-19T00:32:21Z")

</div>

Hi, community. Recently I have talked to Elastic Cloud support team and they told me that my cluster fails to edit my deployment because I have too many shards in my cluster. They suggested me to delete unused indexes. …

---

## [Query on multiple indices and covariance using NEST 7.9+](https://discuss.elastic.co/t/query-on-multiple-indices-and-covariance-using-nest-7-9/261474)

<div class="topic-metadata">

**Author:** [@bramford](https://discuss.elastic.co/u/bramford)\
**Replies:** 0\
**Last updated:** [January 18, 2021, 9:09pm UTC](https://discuss.elastic.co/t/query-on-multiple-indices-and-covariance-using-nest-7-9/261474 "2021-01-18T21:09:00Z")

</div>

I'm attempting to search multiple indices using NEST while providing covariance in the same way this topic describes: Query on multiple index using NEST Unfortunately the .Type() method no longer exists in the SearchDes…

---

## [How many RAM does lucene occupy](https://discuss.elastic.co/t/how-many-ram-does-lucene-occupy/261437)

<div class="topic-metadata">

**Author:** [@Hungming\_Chiu](https://discuss.elastic.co/u/Hungming_Chiu)\
**Replies:** 1\
**Last updated:** [January 18, 2021, 10:15pm UTC](https://discuss.elastic.co/t/how-many-ram-does-lucene-occupy/261437 "2021-01-18T22:15:00Z")

</div>

Hi there, Any way to know how many RAM does lucene occupy? Thank you

---

## [SQL to ElasticSearch, only new rows?](https://discuss.elastic.co/t/sql-to-elasticsearch-only-new-rows/261476)

<div class="topic-metadata">

**Author:** [@sath](https://discuss.elastic.co/u/sath)\
**Replies:** 2\
**Last updated:** [January 18, 2021, 9:43pm UTC](https://discuss.elastic.co/t/sql-to-elasticsearch-only-new-rows/261476 "2021-01-18T21:43:28Z")

</div>

Hello, I'm relatively new to the ELK stack. I'm wondering how I could send data from a SQL table to Elasticsearch in a way that every time it runs, it only sends the rows that are new since the last time it ran. The SQL…

---

## [How to change index status from warm to hot](https://discuss.elastic.co/t/how-to-change-index-status-from-warm-to-hot/261398)

<div class="topic-metadata">

**Author:** [@opouwels](https://discuss.elastic.co/u/opouwels)\
**Replies:** 2\
**Last updated:** [January 18, 2021, 9:24pm UTC](https://discuss.elastic.co/t/how-to-change-index-status-from-warm-to-hot/261398 "2021-01-18T21:24:38Z")

</div>

Hi How can I change the index from warm to hot? Regards Oscar

---

## [Delete old Elasticsearch Data Automatically](https://discuss.elastic.co/t/delete-old-elasticsearch-data-automatically/261464)

<div class="topic-metadata">

**Author:** [@Amantha](https://discuss.elastic.co/u/Amantha)\
**Replies:** 1\
**Last updated:** [January 18, 2021, 9:20pm UTC](https://discuss.elastic.co/t/delete-old-elasticsearch-data-automatically/261464 "2021-01-18T21:20:43Z")

</div>

I want to delete old elasticserach data automatically. Is there any proper method to do it? Can we delete those data within a preferred time period?

---

## [Elasticsearch repository-azure kubernetes](https://discuss.elastic.co/t/elasticsearch-repository-azure-kubernetes/261473)

<div class="topic-metadata">

**Author:** [@Pmoraes13](https://discuss.elastic.co/u/Pmoraes13)\
**Replies:** 0\
**Last updated:** [January 18, 2021, 8:44pm UTC](https://discuss.elastic.co/t/elasticsearch-repository-azure-kubernetes/261473 "2021-01-18T20:44:51Z")

</div>

Hello, someone has using Elasticsearch with repository-azure or Azure storage account for backup the snapshots? I'm trying to configure my kubernetes yml to install azure plugin before pod start but not success. All good…

---

## [Multi match equal both fields](https://discuss.elastic.co/t/multi-match-equal-both-fields/261463)

<div class="topic-metadata">

**Author:** [@seefor](https://discuss.elastic.co/u/seefor)\
**Replies:** 1\
**Last updated:** [January 18, 2021, 7:32pm UTC](https://discuss.elastic.co/t/multi-match-equal-both-fields/261463 "2021-01-18T19:32:20Z")

</div>

New to elastic search I have the following search, which works great but I would like to only return when both "result.confidence", "result.severity" = HIGH instead of when either equal HIGH { "size": 10000, …

---

## [Update of field created by ruby script](https://discuss.elastic.co/t/update-of-field-created-by-ruby-script/261459)

<div class="topic-metadata">

**Author:** [@ggab31](https://discuss.elastic.co/u/ggab31)\
**Replies:** 3\
**Last updated:** [January 18, 2021, 6:24pm UTC](https://discuss.elastic.co/t/update-of-field-created-by-ruby-script/261459 "2021-01-18T18:24:33Z")

</div>

Hi, I have a logstash ruby filter that creates a few fields composed of two parts in a heartbeat index, this way : ruby { code =\> " temp=Time.new; event.set('time.second', temp.localtime.strftime('%S')); …

---

## [Getting multi-word synonyms used in the search for display](https://discuss.elastic.co/t/getting-multi-word-synonyms-used-in-the-search-for-display/261460)

<div class="topic-metadata">

**Author:** [@julioz](https://discuss.elastic.co/u/julioz)\
**Replies:** 0\
**Last updated:** [January 18, 2021, 6:17pm UTC](https://discuss.elastic.co/t/getting-multi-word-synonyms-used-in-the-search-for-display/261460 "2021-01-18T18:17:20Z")

</div>

I am developing a search system using Elasticsearch. In this system, users can register synonyms. When performing a search, in addition to the return of the documents, it is also necessary to display which of the synony…

---

## [High level rest client aggregations naming](https://discuss.elastic.co/t/high-level-rest-client-aggregations-naming/261458)

<div class="topic-metadata">

**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\
**Replies:** 0\
**Last updated:** [January 18, 2021, 5:46pm UTC](https://discuss.elastic.co/t/high-level-rest-client-aggregations-naming/261458 "2021-01-18T17:46:25Z")

</div>

I am building a spring boot query builder for my end users. It looks like from the discussions that I am going to have to unpack the search response before sending. It appears the client appends the class info on the agg…

---

## [(2021) Can't cURL 9200 from some hosts in network](https://discuss.elastic.co/t/2021-cant-curl-9200-from-some-hosts-in-network/260388)

<div class="topic-metadata">

**Author:** [@brett.b](https://discuss.elastic.co/u/brett.b)\
**Replies:** 8\
**Last updated:** [January 18, 2021, 3:54pm UTC](https://discuss.elastic.co/t/2021-cant-curl-9200-from-some-hosts-in-network/260388 "2021-01-18T15:54:35Z")

</div>

Hello everyone, I have seen this question posted in other ways, but a lot of them were about Elasticsearch inside of a docker container. I hope this question is not truly a duplicate. My situation is that I have a DMZ …

---

## [Elasticsearch error](https://discuss.elastic.co/t/elasticsearch-error/260488)

<div class="topic-metadata">

**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\
**Replies:** 1\
**Last updated:** [January 9, 2021, 7:08am UTC](https://discuss.elastic.co/t/elasticsearch-error/260488 "2021-01-09T07:08:44Z")

</div>

Hello there, I have three node cluster implementation and I have noticed some error when I started elasticsearch for master node. \[2021-01-07T16:07:35,341\]\[WARN \]\[o.e.x.m.e.l.LocalExporter\] \[master\] unexpected error w…

---

## [Need help in configuring TLS/SSL for ELK with 3rd party certificates (comodo)](https://discuss.elastic.co/t/need-help-in-configuring-tls-ssl-for-elk-with-3rd-party-certificates-comodo/259745)

<div class="topic-metadata">

**Author:** [@Suddhasil\_Sarkar](https://discuss.elastic.co/u/Suddhasil_Sarkar)\
**Replies:** 2\
**Last updated:** [January 18, 2021, 3:04pm UTC](https://discuss.elastic.co/t/need-help-in-configuring-tls-ssl-for-elk-with-3rd-party-certificates-comodo/259745 "2021-01-18T15:04:47Z")

</div>

Hi Team, Need your help, I was successfully able to manage/configure TLS/SSL with self signed pk12 certs. Now I purchased cert(pem) single pem file with SAN ( having 43 hosts DNS and ips) .I have pem format cert, cert f…

---

## [CircuitBreakingException: \[parent\] Data too large](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large/260792)

<div class="topic-metadata">

**Author:** [@chaitra\_hegde](https://discuss.elastic.co/u/chaitra_hegde)\
**Replies:** 4\
**Last updated:** [January 18, 2021, 3:00pm UTC](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large/260792 "2021-01-18T15:00:34Z")

</div>

Hi, I am using Elasticsearch 7.8.0 in k8s environment. I have 3 master, 2 data and 3 ingest nodes. I am getting circuit breaker exception on one of the data node. Below are the details: java -version openjdk version…

---

## [Could not index '1' records: listener timeout after waiting for \[30000\] ms in Single node](https://discuss.elastic.co/t/could-not-index-1-records-listener-timeout-after-waiting-for-30000-ms-in-single-node/261425)

<div class="topic-metadata">

**Author:** [@ARULAMUTHAN](https://discuss.elastic.co/u/ARULAMUTHAN)\
**Replies:** 2\
**Last updated:** [January 18, 2021, 2:10pm UTC](https://discuss.elastic.co/t/could-not-index-1-records-listener-timeout-after-waiting-for-30000-ms-in-single-node/261425 "2021-01-18T14:10:33Z")

</div>

Getting below ERROR in the single node ELK. Configuration of elasticsearch.yml cluster.name: \*\*\*\*\*\*-elasticsearch node.name: \*\*\*\*\*\*Elastic-1 path.data: /data00/\*\*\*\*\*Elastic/data path.logs: /data00/\*\*\*\*\*Elastic/log netw…

---

## [The Sort Script of ES 7.4.2 is very poor](https://discuss.elastic.co/t/the-sort-script-of-es-7-4-2-is-very-poor/261418)

<div class="topic-metadata">

**Author:** [@PandaXu](https://discuss.elastic.co/u/PandaXu)\
**Replies:** 0\
**Last updated:** [January 18, 2021, 11:46am UTC](https://discuss.elastic.co/t/the-sort-script-of-es-7-4-2-is-very-poor/261418 "2021-01-18T11:46:57Z")

</div>

hi , all, Our ES has been upgraded from ES 5.3.2 to 7.4.2. When you encounter a script performance problem, the execution of the same script in 7.4.2 is at least twice as slow as that in ES 5.3.2. The main method is t…

---

## [Remove Deprecation warnings in Elasticsearch nodejs client](https://discuss.elastic.co/t/remove-deprecation-warnings-in-elasticsearch-nodejs-client/260385)

<div class="topic-metadata">

**Author:** [@Vincent\_Maury](https://discuss.elastic.co/u/Vincent_Maury)\
**Replies:** 4\
**Last updated:** [January 18, 2021, 10:14am UTC](https://discuss.elastic.co/t/remove-deprecation-warnings-in-elasticsearch-nodejs-client/260385 "2021-01-18T10:14:59Z")

</div>

Hi I'm using node10 (in AWS Lambda), the 7.9 nodejs client version and a 7.9.3 ES cluster (in Elasticsearch service from cloud.elastic.co). Every time I'm calling Elasticsearch I get this in the error log: (node:8) De…

---

## [Rank Feature vs. Decay](https://discuss.elastic.co/t/rank-feature-vs-decay/261403)

<div class="topic-metadata">

**Author:** [@shaigbdb](https://discuss.elastic.co/u/shaigbdb)\
**Replies:** 0\
**Last updated:** [January 18, 2021, 10:10am UTC](https://discuss.elastic.co/t/rank-feature-vs-decay/261403 "2021-01-18T10:10:05Z")

</div>

Hi, I'm trying rank feature for a rank field, and comparing the results to a function score using a gauss decay function on a similarly-valued float field. The results are pre-filtered with a geo\_distance query in both …

---

## [Update Dataset with Information comming delayed](https://discuss.elastic.co/t/update-dataset-with-information-comming-delayed/261397)

<div class="topic-metadata">

**Author:** [@michaelpietzsch](https://discuss.elastic.co/u/michaelpietzsch)\
**Replies:** 4\
**Last updated:** [January 18, 2021, 10:07am UTC](https://discuss.elastic.co/t/update-dataset-with-information-comming-delayed/261397 "2021-01-18T10:07:21Z")

</div>

Hello dear elastic users, im currently having an issue implementing a logic which updates fields after they have been stored in the elastic. Let me try to explain this to the best of my ability: Theres a log entrance …

---

## [Aggregate on a sequence item in EQL](https://discuss.elastic.co/t/aggregate-on-a-sequence-item-in-eql/259116)

<div class="topic-metadata">

**Author:** [@jayden.mckay](https://discuss.elastic.co/u/jayden.mckay)\
**Replies:** 1\
**Last updated:** [January 18, 2021, 8:48am UTC](https://discuss.elastic.co/t/aggregate-on-a-sequence-item-in-eql/259116 "2021-01-18T08:48:44Z")

</div>

Hi all :slight\_smile: I am trying to run an EQL search where the first item must occur X amount of times or more before the second item in the sequence will be ran. Anyone know how I can do this? AKA for the example be…

---

## [Getting the message Failed to update shard information for ClusterInfoUpdateJob in the es master logs](https://discuss.elastic.co/t/getting-the-message-failed-to-update-shard-information-for-clusterinfoupdatejob-in-the-es-master-logs/261274)

<div class="topic-metadata">

**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\
**Replies:** 2\
**Last updated:** [January 18, 2021, 7:33am UTC](https://discuss.elastic.co/t/getting-the-message-failed-to-update-shard-information-for-clusterinfoupdatejob-in-the-es-master-logs/261274 "2021-01-18T07:33:18Z")

</div>

We are using elasticsearch 7.8.0 on centos 7. There are three data pods in the cluster we are restarting one of the data pod. Suddenly, elasticsearch curl to service stopped working and the following error observes in th…

---

## [How to insert data in index-pattern for field with 'Keyword' type using Index API](https://discuss.elastic.co/t/how-to-insert-data-in-index-pattern-for-field-with-keyword-type-using-index-api/261381)

<div class="topic-metadata">

**Author:** [@savan.chovatiya](https://discuss.elastic.co/u/savan.chovatiya)\
**Replies:** 0\
**Last updated:** [January 18, 2021, 5:58am UTC](https://discuss.elastic.co/t/how-to-insert-data-in-index-pattern-for-field-with-keyword-type-using-index-api/261381 "2021-01-18T05:58:33Z")

</div>

Hello, Index-pattern contains two fields like below. {"name":"aws\_region","type":"string","count":11,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":false},{"name":"aws\_region.keyword","type"…

---

## [The performance of Script Based Sorting in ES 7.4.2 verison is very poor](https://discuss.elastic.co/t/the-performance-of-script-based-sorting-in-es-7-4-2-verison-is-very-poor/261241)

<div class="topic-metadata">

**Author:** [@PandaXu](https://discuss.elastic.co/u/PandaXu)\
**Replies:** 2\
**Last updated:** [January 18, 2021, 5:55am UTC](https://discuss.elastic.co/t/the-performance-of-script-based-sorting-in-es-7-4-2-verison-is-very-poor/261241 "2021-01-18T05:55:09Z")

</div>

Hello, all, Recently , We compare the query performance of two versions of ES cluster. One is 5.3.2, and the other is 7.4.2. The index settings, mapping and the amout of data , is exactly the same.I find that the que…

---

## [Elasticsearch7.x have serious performance problems](https://discuss.elastic.co/t/elasticsearch7-x-have-serious-performance-problems/261362)

<div class="topic-metadata">

**Author:** [@gaocx2000cn](https://discuss.elastic.co/u/gaocx2000cn)\
**Replies:** 2\
**Last updated:** [January 18, 2021, 12:47am UTC](https://discuss.elastic.co/t/elasticsearch7-x-have-serious-performance-problems/261362 "2021-01-18T00:47:05Z")

</div>

Elasticsearch7.x have serious performance problems. We have a indexes set which have total 3800M doc, 5000G bytes. 1. Searching performance We run a lot of queries against Elasticsearch6.2.1 and Elasticsearch7.9.2 clu…

---

## [I want to add more nodes in my existing cluster](https://discuss.elastic.co/t/i-want-to-add-more-nodes-in-my-existing-cluster/261233)

<div class="topic-metadata">

**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\
**Replies:** 7\
**Last updated:** [January 17, 2021, 10:50pm UTC](https://discuss.elastic.co/t/i-want-to-add-more-nodes-in-my-existing-cluster/261233 "2021-01-17T22:50:26Z")

</div>

Hi, I have 3 Node cluster (7.9.2) with elasticsearch license. I want to add more 5 Data nodes on my existing cluster. Do I need to have License for extra nodes also? Please Help me with this situation Thanks Regard…

---

## [Seamingly sporadic increases in indexing latency](https://discuss.elastic.co/t/seamingly-sporadic-increases-in-indexing-latency/261166)

<div class="topic-metadata">

**Author:** [@rex-remind](https://discuss.elastic.co/u/rex-remind)\
**Replies:** 21\
**Last updated:** [January 17, 2021, 10:29pm UTC](https://discuss.elastic.co/t/seamingly-sporadic-increases-in-indexing-latency/261166 "2021-01-17T22:29:30Z")

</div>

We have a setup where Flink is writing to Elasticsearch, and at sporadic moments latency increases due to volume of IOPS. Looking for suggestions. Attached are some graphs, when IOPS are high, indexing latency is high, …

---

## [Need help regarding relevancy score sorting in elastic search](https://discuss.elastic.co/t/need-help-regarding-relevancy-score-sorting-in-elastic-search/261361)

<div class="topic-metadata">

**Author:** [@Soumya\_Ranjan\_Sahoo](https://discuss.elastic.co/u/Soumya_Ranjan_Sahoo)\
**Replies:** 0\
**Last updated:** [January 17, 2021, 9:57pm UTC](https://discuss.elastic.co/t/need-help-regarding-relevancy-score-sorting-in-elastic-search/261361 "2021-01-17T21:57:25Z")

</div>

\### Settings for Indexing ### import requests import json import logging settings = { 'settings': { 'index': { 'number\_of\_shards': 1, 'number\_of\_replicas': 1, …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=721)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=723)
