# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=727 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 728 --- ## [\[BUG?\] date\_histogram hard\_bounds returns unknown\_field](https://discuss.elastic.co/t/bug-date-histogram-hard-bounds-returns-unknown-field/260825)
**Author:** [@demasie](https://discuss.elastic.co/u/demasie)\ **Replies:** 2\ **Last updated:** [January 12, 2021, 4:45pm UTC](https://discuss.elastic.co/t/bug-date-histogram-hard-bounds-returns-unknown-field/260825 "2021-01-12T16:45:09Z")
The following snippet returns error reason \[date\_histogram\] unknown field \[hard\_bounds\] did you mean \[extended\_bounds\]? { date\_histogram: { field: 'date', calendar\_interval: 'day', hard\_bounds: { min: '2020-11… --- ## [Elasticsearch fails to start on VM Boot](https://discuss.elastic.co/t/elasticsearch-fails-to-start-on-vm-boot/260645)
**Author:** [@droidus](https://discuss.elastic.co/u/droidus)\ **Replies:** 5\ **Last updated:** [January 12, 2021, 4:37pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-on-vm-boot/260645 "2021-01-12T16:37:34Z")
I am running Ubuntu 20. Upon starting my machine, kibana fails, saying it can't connect to localhost:9200. I check on Elasticsearch, and I see this: ● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/sy… --- ## [Access to elastic.co cluster Kibana error](https://discuss.elastic.co/t/access-to-elastic-co-cluster-kibana-error/260856)
**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 3:48pm UTC](https://discuss.elastic.co/t/access-to-elastic-co-cluster-kibana-error/260856 "2021-01-12T15:48:44Z")
Hello, We have a cluster hosted on elastic.co, every time i access the Kiban dashboard I get the following error \[instance-\*\*\*\*\] failed to execute \[script\] transform for \[disVcG\_pRUaBuOK\_EkrBpw\_elasticsearch\_cluster\_st… --- ## [Issue with max\_determinized\_states while selecting 1500+ columns](https://discuss.elastic.co/t/issue-with-max-determinized-states-while-selecting-1500-columns/260853)
**Author:** [@kavipadm](https://discuss.elastic.co/u/kavipadm)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 3:33pm UTC](https://discuss.elastic.co/t/issue-with-max-determinized-states-while-selecting-1500-columns/260853 "2021-01-12T15:33:55Z")
Hi Team, I am trying to query elasticsearch from spark - However, running into the below error while selecting 1500+ columns: org.elasticsearch.hadoop.rest.EsHadoopInvalidRequest: org.elasticsearch.hadoop.rest.EsHadoop… --- ## [Is there any way to aggregate an average without outliers?](https://discuss.elastic.co/t/is-there-any-way-to-aggregate-an-average-without-outliers/259940)
**Author:** [@ofir\_y](https://discuss.elastic.co/u/ofir_y)\ **Replies:** 1\ **Last updated:** [January 12, 2021, 2:33pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-aggregate-an-average-without-outliers/259940 "2021-01-12T14:33:01Z")
I need a way to create a transform that will aggregate the average of a field but without the outliers (let's say all values that falls between 10%-90% percentiles). for example if I have the following values: \[1,2,3,4,… --- ## [Repository\_verification\_exception](https://discuss.elastic.co/t/repository-verification-exception/260805)
**Author:** [@Luca\_P](https://discuss.elastic.co/u/Luca_P)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 9:43am UTC](https://discuss.elastic.co/t/repository-verification-exception/260805 "2021-01-12T09:43:34Z")
Hi All. I manage few ES clusters that perform snapshots on S3 bucket without issues, they are all configured with master nodes and hot-data nodes. Now, I have 1 cluster where we configured also warm nodes, and it seems… --- ## [Amount of replica's](https://discuss.elastic.co/t/amount-of-replicas/260801)
**Author:** [@opouwels](https://discuss.elastic.co/u/opouwels)\ **Replies:** 1\ **Last updated:** [January 12, 2021, 9:22am UTC](https://discuss.elastic.co/t/amount-of-replicas/260801 "2021-01-12T09:22:55Z")
we have redundant elastic stack setup in 2 datacenters with CCR and redundant storage in each DC. as a lot of TB of data we want to set replica from 1 to 0 to save storage. is their any othe reason to keep the replica … --- ## [Elasticsearch : circuit\_breaking\_exception Data too large, data for \[\\] would be \[419575260/400.1mb\], which is larger than the limit of \[408420352/389.5mb\], real usage](https://discuss.elastic.co/t/elasticsearch-circuit-breaking-exception-data-too-large-data-for-http-request-would-be-419575260-400-1mb-which-is-larger-than-the-limit-of-408420352-389-5mb-real-usage/260685)
**Author:** [@Sathish\_Shanmugam](https://discuss.elastic.co/u/Sathish_Shanmugam)\ **Replies:** 2\ **Last updated:** [January 12, 2021, 9:18am UTC](https://discuss.elastic.co/t/elasticsearch-circuit-breaking-exception-data-too-large-data-for-http-request-would-be-419575260-400-1mb-which-is-larger-than-the-limit-of-408420352-389-5mb-real-usage/260685 "2021-01-12T09:18:18Z")
We are experiencing an issue while running elastic search bulk API on to elastic cloud 7.8.1 below is the exception when we get when we increase the batch size \> 100, The stack trace from NodeJS library @elastic/elasti… --- ## [Installing Elasticsearch plugins when ES is running as Kubernetes pod](https://discuss.elastic.co/t/installing-elasticsearch-plugins-when-es-is-running-as-kubernetes-pod/260799)
**Author:** [@sun24](https://discuss.elastic.co/u/sun24)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 8:47am UTC](https://discuss.elastic.co/t/installing-elasticsearch-plugins-when-es-is-running-as-kubernetes-pod/260799 "2021-01-12T08:47:33Z")
I understand that one method is to use the containers: command: Required command But this data is not retained once the pod restarts and the command is run again and again resulting in a crashloopbackoff. How to res… --- ## [Ingest pipe line grok pattern with field name having spaces](https://discuss.elastic.co/t/ingest-pipe-line-grok-pattern-with-field-name-having-spaces/259840)
**Author:** [@Bo\_Koralage](https://discuss.elastic.co/u/Bo_Koralage)\ **Replies:** 10\ **Last updated:** [January 12, 2021, 9:00am UTC](https://discuss.elastic.co/t/ingest-pipe-line-grok-pattern-with-field-name-having-spaces/259840 "2021-01-12T09:00:09Z")
I am using a ingest pipeline to parse a tab separated log message coming from filebeat. One of the fields can have spaces. In the example below "Gui Process" should be parsed to the SourceName field. However, what happen… --- ## [High CPU usage 100%](https://discuss.elastic.co/t/high-cpu-usage-100/260750)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 4\ **Last updated:** [January 12, 2021, 8:12am UTC](https://discuss.elastic.co/t/high-cpu-usage-100/260750 "2021-01-12T08:12:22Z")
Hello, I am using ELasticsearch and Kibana version 7.10.1 Since 3 days, I am noticing that my data nodes are using high CPU, 100% in my cluster I have: 3 master nodes ( 2 CPU, 4 Go RAM, 100 Go HDD) node.roles: \[ mas… --- ## [Index mapping at startup](https://discuss.elastic.co/t/index-mapping-at-startup/260741)
**Author:** [@hyunsoo](https://discuss.elastic.co/u/hyunsoo)\ **Replies:** 1\ **Last updated:** [January 12, 2021, 7:22am UTC](https://discuss.elastic.co/t/index-mapping-at-startup/260741 "2021-01-12T07:22:25Z")
Hi all, This question is about launching elasticsearch with kubernetes. If I run k8s like below, ... containers: - name: elasticsearch image: docker.elastic.co/elasticsearch/elasticsearch:7.10.1 … --- ## [How to reset my mail ID used in trial and start using in paid account](https://discuss.elastic.co/t/how-to-reset-my-mail-id-used-in-trial-and-start-using-in-paid-account/258863)
**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\ **Replies:** 3\ **Last updated:** [January 12, 2021, 7:13am UTC](https://discuss.elastic.co/t/how-to-reset-my-mail-id-used-in-trial-and-start-using-in-paid-account/258863 "2021-01-12T07:13:01Z")
Hi, I used my business email in a trial account for POC purposes. But with the paid account (set up using Azure Marketplace), I am not able to use my same business email. Am I following wrong approach? --- ## [Elasticsearch Cluster version 7.7 is not stable](https://discuss.elastic.co/t/elasticsearch-cluster-version-7-7-is-not-stable/259565)
**Author:** [@dat\_le](https://discuss.elastic.co/u/dat_le)\ **Replies:** 8\ **Last updated:** [January 12, 2021, 6:54am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-version-7-7-is-not-stable/259565 "2021-01-12T06:54:28Z")
Hello guys, Can anyone help me on this problem? My Cluster: I have a ES cluster with 3 nodes version 7.7. Every node have 2 vCPU and 16GB Ram. I have 2 index: Index 1: 121 MB (1.9M Doc, 2 Primary Shards, 1 Replica Sh… --- ## [Elasticsearch bulk index request failing with error “if \_id is specified it must not be empty”](https://discuss.elastic.co/t/elasticsearch-bulk-index-request-failing-with-error-if-id-is-specified-it-must-not-be-empty/260778)
**Author:** [@surenraju](https://discuss.elastic.co/u/surenraju)\ **Replies:** 3\ **Last updated:** [January 12, 2021, 6:29am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-index-request-failing-with-error-if-id-is-specified-it-must-not-be-empty/260778 "2021-01-12T06:29:47Z")
I am trying to bulk insert records to index asset\_inventory\_dev index. Elastic search is returning error saying “if \_id is specified it must not be empty”. Following is the request i tried from Kibana dev tools. I can… --- ## [Migrate from 6.8 to 7.10](https://discuss.elastic.co/t/migrate-from-6-8-to-7-10/260498)
**Author:** [@blukit](https://discuss.elastic.co/u/blukit)\ **Replies:** 6\ **Last updated:** [January 12, 2021, 3:19am UTC](https://discuss.elastic.co/t/migrate-from-6-8-to-7-10/260498 "2021-01-12T03:19:19Z")
Hi folks... Need to know whats the proper way to migrate & upgrade from our current ELK 6.8 cluster to our new ELK 7.10 cluster. Should I first do rolling upgrade in our current cluster then rsync to 7.10 cluster? Or … --- ## [Can you query for elements between multiple children in a parent-child join?](https://discuss.elastic.co/t/can-you-query-for-elements-between-multiple-children-in-a-parent-child-join/260775)
**Author:** [@Aidan\_Tan](https://discuss.elastic.co/u/Aidan_Tan)\ **Replies:** 0\ **Last updated:** [January 12, 2021, 2:44am UTC](https://discuss.elastic.co/t/can-you-query-for-elements-between-multiple-children-in-a-parent-child-join/260775 "2021-01-12T02:44:28Z")
Is it possible to query among the elements of children and return the parent. So if one child has a gender of male and age of 17 and another has a gender of female and age of 21. Is it possible to return the parents if a… --- ## [Signed certificates for transport SSL](https://discuss.elastic.co/t/signed-certificates-for-transport-ssl/260772)
**Author:** [@surphix](https://discuss.elastic.co/u/surphix)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 10:31pm UTC](https://discuss.elastic.co/t/signed-certificates-for-transport-ssl/260772 "2021-01-11T22:31:25Z")
Hey everyone. I'm trying to understand how I go from once my CSR is sign by a CA to using it for remote clustering via transport SSL settings. I've gotten my certificate signed and received a .cer file. I'm a little con… --- ## [Logstash and Ingest Nodes](https://discuss.elastic.co/t/logstash-and-ingest-nodes/260350)
**Author:** [@jalaine](https://discuss.elastic.co/u/jalaine)\ **Replies:** 8\ **Last updated:** [January 11, 2021, 9:43pm UTC](https://discuss.elastic.co/t/logstash-and-ingest-nodes/260350 "2021-01-11T21:43:23Z")
Good Morning, My team and I are trying to improve a cluster that we inherited. I apologize for the following vagueness, but due to the location of the cluster I will give as much detail as possible. We currently are wor… --- ## [Query to return only doc with max value of one field, grouped by another field](https://discuss.elastic.co/t/query-to-return-only-doc-with-max-value-of-one-field-grouped-by-another-field/260764)
**Author:** [@aidanoc15](https://discuss.elastic.co/u/aidanoc15)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 8:25pm UTC](https://discuss.elastic.co/t/query-to-return-only-doc-with-max-value-of-one-field-grouped-by-another-field/260764 "2021-01-11T20:25:10Z")
So to be specific with what we are trying to accomplish, we are using Elastic Security's detections and have a few rules set up. We then have a logstash pipeline that queries the index our detections go into every minute… --- ## [Unable to start ElasticSearch after install on CENTOS 8](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-install-on-centos-8/259650)
**Author:** [@Shariq\_Tejar](https://discuss.elastic.co/u/Shariq_Tejar)\ **Replies:** 4\ **Last updated:** [January 11, 2021, 8:23pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-install-on-centos-8/259650 "2021-01-11T20:23:36Z")
elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Sat 2020-12-26 01:45:20 PKT; 10s ago … --- ## [Millions of closed indices?](https://discuss.elastic.co/t/millions-of-closed-indices/260758)
**Author:** [@cjbottaro](https://discuss.elastic.co/u/cjbottaro)\ **Replies:** 1\ **Last updated:** [January 11, 2021, 8:02pm UTC](https://discuss.elastic.co/t/millions-of-closed-indices/260758 "2021-01-11T20:02:26Z")
Hello. We're toying with the idea of using Es for some type of "cold storage". Basically archival of our clients' data. The data grows indefinitely over time. The idea is to have an index for each piece of archived data… --- ## [Mixed storage within a cluster question](https://discuss.elastic.co/t/mixed-storage-within-a-cluster-question/260757)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 7:05pm UTC](https://discuss.elastic.co/t/mixed-storage-within-a-cluster-question/260757 "2021-01-11T19:05:55Z")
I have a cluster of ES nodes on AWS. Let's say 20 nodes using EBS and 3 using i3en (local disks). I am testing with i3en nodes to improve IO. But I am still seeing slow indexing and search logs showing up (up to tens … --- ## [Master not discovered or elected yet, an election requires two nodes with ids](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-two-nodes-with-ids/260755)
**Author:** [@Sean\_Tisdale](https://discuss.elastic.co/u/Sean_Tisdale)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 5:43pm UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-two-nodes-with-ids/260755 "2021-01-11T17:43:02Z")
I'm am currently trying to set up a cluster with 3 nodes in total. 1 master node and 2 data nodes. I am currently just trying to get the the first two nodes to connect. My master node runs fine when I start it but my dat… --- ## [Inconsistent results for the same query on an index with 0 replicas](https://discuss.elastic.co/t/inconsistent-results-for-the-same-query-on-an-index-with-0-replicas/258715)
**Author:** [@Marten](https://discuss.elastic.co/u/Marten)\ **Replies:** 6\ **Last updated:** [January 11, 2021, 4:28pm UTC](https://discuss.elastic.co/t/inconsistent-results-for-the-same-query-on-an-index-with-0-replicas/258715 "2021-01-11T16:28:00Z")
Hi there, I have a problem with inconsistent ranking of the results when submitting the same query multiple times. I'm using ES 5.6.8 on an index with 5 primary shards. I have set the number of replicas from 1 to 0 to… --- ## [Aggregation problem with timeseries - terms / sum](https://discuss.elastic.co/t/aggregation-problem-with-timeseries-terms-sum/260729)
**Author:** [@Thomas74](https://discuss.elastic.co/u/Thomas74)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 2:08pm UTC](https://discuss.elastic.co/t/aggregation-problem-with-timeseries-terms-sum/260729 "2021-01-11T14:08:13Z")
Hi, I'm collecting metrics of my cluster via prometheus and metricbeat. Documents received are timeseries. That's mean I have multiple document for the same timestamp. Each 10s I have a list of all index with their con… --- ## [High cpu usage 100% on elastic search servers](https://discuss.elastic.co/t/high-cpu-usage-100-on-elastic-search-servers/260442)
**Author:** [@ghl1l0](https://discuss.elastic.co/u/ghl1l0)\ **Replies:** 5\ **Last updated:** [January 11, 2021, 1:41pm UTC](https://discuss.elastic.co/t/high-cpu-usage-100-on-elastic-search-servers/260442 "2021-01-11T13:41:12Z")
Hello, I've a problem with elastic search that it use100% of CPU; with ES 7.9.3.: 3 nodes. 6 CPU(s) -Xms8g -Xmx8g Kibana run slowly and nodes states is yellow ! Thanks for helping Regards, Rali --- ## [My ELK Cluster is slow indexing Why? Please Help](https://discuss.elastic.co/t/my-elk-cluster-is-slow-indexing-why-please-help/260542)
**Author:** [@HKN\_MZ](https://discuss.elastic.co/u/HKN_MZ)\ **Replies:** 5\ **Last updated:** [January 11, 2021, 1:39pm UTC](https://discuss.elastic.co/t/my-elk-cluster-is-slow-indexing-why-please-help/260542 "2021-01-11T13:39:34Z")
I am trying to send data to Elasticsearch, but elasticsearch indexing is soo slow. Some usefull outputs on below. GET \_/nodes/hot\_threads?pretty is the output; GET \_cluster/stats is the output; --- ## [How to search string containing hypen?](https://discuss.elastic.co/t/how-to-search-string-containing-hypen/260713)
**Author:** [@Sahil\_Kumar](https://discuss.elastic.co/u/Sahil_Kumar)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 12:08pm UTC](https://discuss.elastic.co/t/how-to-search-string-containing-hypen/260713 "2021-01-11T12:08:42Z")
Hi, I want to index text that contains hyphens, for example MiddleEaton-Byers but I am unable to because with the regular expression \*{seachparams}\* the results are not coming? Below is the query string: "query": { "q… --- ## [Curl: (52) Empty reply from server When trying to restart cluster ( given user/password )](https://discuss.elastic.co/t/curl-52-empty-reply-from-server-when-trying-to-restart-cluster-given-user-password/260717)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 0\ **Last updated:** [January 11, 2021, 12:19pm UTC](https://discuss.elastic.co/t/curl-52-empty-reply-from-server-when-trying-to-restart-cluster-given-user-password/260717 "2021-01-11T12:19:22Z")
i try to restart the cluster with the put command as stated in the docs: curl -u "elastic:xxxxxxxxx" -k -X PUT "localhost:9200/\_cluster/settings?pretty" -H 'Content-Type: application/json' -d' { "persistent": { … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=726) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=728)