# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=749

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 750

---

## [Search on the same field multiple times with different filters and intersect the results](https://discuss.elastic.co/t/search-on-the-same-field-multiple-times-with-different-filters-and-intersect-the-results/257312)

<div class="topic-metadata">

**Author:** [@Amir\_Mirahmady](https://discuss.elastic.co/u/Amir_Mirahmady)\
**Replies:** 1\
**Last updated:** [December 6, 2020, 8:43am UTC](https://discuss.elastic.co/t/search-on-the-same-field-multiple-times-with-different-filters-and-intersect-the-results/257312 "2020-12-06T08:43:20Z")

</div>

Hi . I'm working on a project that records in my index have dynamic values . I mean I have a field named fieldvalue that can be a date or a text or a number and every record is piece of data from each user . The reason w…

---

## [Delete\_by\_query number of documents Error](https://discuss.elastic.co/t/delete-by-query-number-of-documents-error/257737)

<div class="topic-metadata">

**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\
**Replies:** 3\
**Last updated:** [December 6, 2020, 8:31am UTC](https://discuss.elastic.co/t/delete-by-query-number-of-documents-error/257737 "2020-12-06T08:31:59Z")

</div>

Hi, I run this code: POST topf/\_delete\_by\_query?conflicts=proceed&max\_docs=500000 { "query": { "range": { "time": { "gte": "2020-09-18T03:00:00", "lte": "2020-09-18T04:00:00" } } …

---

## [Difference between latency and service\_time in esrally](https://discuss.elastic.co/t/difference-between-latency-and-service-time-in-esrally/257446)

<div class="topic-metadata">

**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\
**Replies:** 2\
**Last updated:** [December 6, 2020, 8:22am UTC](https://discuss.elastic.co/t/difference-between-latency-and-service-time-in-esrally/257446 "2020-12-06T08:22:58Z")

</div>

Hi, It wasn't clear to me the difference between latency and service\_time mentioned here If I understand this correctly, service\_time sounds like a representation of "took" that ES returns in responses, or is it ev…

---

## [Transportclient 502 after Added nodes in cluster](https://discuss.elastic.co/t/transportclient-502-after-added-nodes-in-cluster/257492)

<div class="topic-metadata">

**Author:** [@arthurxx](https://discuss.elastic.co/u/arthurxx)\
**Replies:** 5\
**Last updated:** [December 5, 2020, 2:15pm UTC](https://discuss.elastic.co/t/transportclient-502-after-added-nodes-in-cluster/257492 "2020-12-05T14:15:23Z")

</div>

there is a elasticsearch cluster which version is 2.4.6 in our company. We met a strange problem recently. After Added nodes into this cluster, the client will met a large of number requests status become 499 or 502( now…

---

## [Setting Up Snapshot - Repository (What to set for Path.Repo)](https://discuss.elastic.co/t/setting-up-snapshot-repository-what-to-set-for-path-repo/257717)

<div class="topic-metadata">

**Author:** [@Sampson\_Light](https://discuss.elastic.co/u/Sampson_Light)\
**Replies:** 4\
**Last updated:** [December 5, 2020, 9:37am UTC](https://discuss.elastic.co/t/setting-up-snapshot-repository-what-to-set-for-path-repo/257717 "2020-12-05T09:37:35Z")

</div>

Hi All, So I am currently setting up my path.repo repository to enable Snapshot onto my linux server. I understand that I am suppose to create something new like a path.repo inside my elasticsearch.yml. Something like…

---

## [Error 503 on server post unblocking the index on a proxy](https://discuss.elastic.co/t/error-503-on-server-post-unblocking-the-index-on-a-proxy/257720)

<div class="topic-metadata">

**Author:** [@Anuradha12](https://discuss.elastic.co/u/Anuradha12)\
**Replies:** 7\
**Last updated:** [December 5, 2020, 8:14am UTC](https://discuss.elastic.co/t/error-503-on-server-post-unblocking-the-index-on-a-proxy/257720 "2020-12-05T08:14:45Z")

</div>

Could not save: {'index': {'\_index': 'prj\_1a9c0440af7f4ed297736cffa5591082\_connector', '\_type': '\_doc', '\_id': 'model\_d25q7003720200', 'status': 503, 'error': {'type': 'unavailable\_shards\_exception', 'reason': '\[prj\_1a9c…

---

## [Longest prefix match](https://discuss.elastic.co/t/longest-prefix-match/257722)

<div class="topic-metadata">

**Author:** [@sumanthmitra](https://discuss.elastic.co/u/sumanthmitra)\
**Replies:** 0\
**Last updated:** [December 5, 2020, 8:13am UTC](https://discuss.elastic.co/t/longest-prefix-match/257722 "2020-12-05T08:13:09Z")

</div>

Hi, I am not able to figure out how to achieve the longest prefix match between the search query and the stored doc values. Say we have the below doc values indexed. "ababab" "ab" "a" and if the input query is "ab…

---

## [Elastic: Problem with decimal format when indexing from the 64th document (document not indexed)](https://discuss.elastic.co/t/elastic-problem-with-decimal-format-when-indexing-from-the-64th-document-document-not-indexed/257588)

<div class="topic-metadata">

**Author:** [@oldiequattro](https://discuss.elastic.co/u/oldiequattro)\
**Replies:** 5\
**Last updated:** [December 5, 2020, 4:43am UTC](https://discuss.elastic.co/t/elastic-problem-with-decimal-format-when-indexing-from-the-64th-document-document-not-indexed/257588 "2020-12-05T04:43:40Z")

</div>

Hello, I am showing you here a problem encountered in our environments with the indexing of a row in Elasticsearch which is not done as soon as the decimal value contained in the key exceeds 64 (side effect of a base 64…

---

## [Temp downtimes, OptionalDataException (500) on ALL APIs (AWS)](https://discuss.elastic.co/t/temp-downtimes-optionaldataexception-500-on-all-apis-aws/257571)

<div class="topic-metadata">

**Author:** [@aviau](https://discuss.elastic.co/u/aviau)\
**Replies:** 9\
**Last updated:** [December 5, 2020, 4:41am UTC](https://discuss.elastic.co/t/temp-downtimes-optionaldataexception-500-on-all-apis-aws/257571 "2020-12-05T04:41:59Z")

</div>

Hello! I am currently running ElasticSearch 7.9.1 on the AWS ElasticSerach service. I have successfully restored a snapshot that I have made on my self-managed 7.2 instance. The cluster works well, can easily ingest t…

---

## [ILM Hot, Warm, Cold?](https://discuss.elastic.co/t/ilm-hot-warm-cold/256958)

<div class="topic-metadata">

**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\
**Replies:** 8\
**Last updated:** [December 4, 2020, 11:41pm UTC](https://discuss.elastic.co/t/ilm-hot-warm-cold/256958 "2020-12-04T23:41:09Z")

</div>

Hello, When I try to setup ILM to make an index to become "Warm" after 30 days, then "Cold" after 60 days, and deleted after 90 days, I get the following: You can't control shard allocation without node attributes. Ca…

---

## [Elastic don´t start after set xpack.security.enabled to true](https://discuss.elastic.co/t/elastic-don-t-start-after-set-xpack-security-enabled-to-true/257596)

<div class="topic-metadata">

**Author:** [@jh0mil](https://discuss.elastic.co/u/jh0mil)\
**Replies:** 19\
**Last updated:** [December 4, 2020, 9:14pm UTC](https://discuss.elastic.co/t/elastic-don-t-start-after-set-xpack-security-enabled-to-true/257596 "2020-12-04T21:14:01Z")

</div>

I tried activate elastic security, but when i add the line xpack.security.enabled: true if send command systemctl restart elasticsearch this crashes.

---

## [Geohash Aggregation Question](https://discuss.elastic.co/t/geohash-aggregation-question/257681)

<div class="topic-metadata">

**Author:** [@johnrodey](https://discuss.elastic.co/u/johnrodey)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 5:08pm UTC](https://discuss.elastic.co/t/geohash-aggregation-question/257681 "2020-12-04T17:08:11Z")

</div>

Is there a way to create a geohash aggregation with counts for subtypes/numeric ranges within that geohash. For example if I have a collection of buildings and I want to know for each geohash, what is the count of offic…

---

## [Validation Failed: 1: this action would add \[2\] total shards, but this cluster currently has \[2122\]/\[2000\] maximum shards open](https://discuss.elastic.co/t/validation-failed-1-this-action-would-add-2-total-shards-but-this-cluster-currently-has-2122-2000-maximum-shards-open/257678)

<div class="topic-metadata">

**Author:** [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 4:59pm UTC](https://discuss.elastic.co/t/validation-failed-1-this-action-would-add-2-total-shards-but-this-cluster-currently-has-2122-2000-maximum-shards-open/257678 "2020-12-04T16:59:27Z")

</div>

How can I solve this problem? \[2020-12-04T10:10:41,540\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>"e45d58acd2b072154d7ac57ceb05491db728…

---

## [\`-Infinity\` Scores during rolling upgrade](https://discuss.elastic.co/t/infinity-scores-during-rolling-upgrade/257667)

<div class="topic-metadata">

**Author:** [@ggdd](https://discuss.elastic.co/u/ggdd)\
**Replies:** 0\
**Last updated:** [December 4, 2020, 2:35pm UTC](https://discuss.elastic.co/t/infinity-scores-during-rolling-upgrade/257667 "2020-12-04T14:35:57Z")

</div>

Hi, We are performing a rolling upgrade from ES6 to ES7 and we have 3 types of nodes: Coordinators Data-only Master eligible-only As recommended, we start the upgrade with the non-master-eligible nodes, in our case t…

---

## [Azure Marketplace Elasticsearch (self managed) installation failed with VMExtensionProvisioningError](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-self-managed-installation-failed-with-vmextensionprovisioningerror/257657)

<div class="topic-metadata">

**Author:** [@uhikram](https://discuss.elastic.co/u/uhikram)\
**Replies:** 0\
**Last updated:** [December 4, 2020, 1:57pm UTC](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-self-managed-installation-failed-with-vmextensionprovisioningerror/257657 "2020-12-04T13:57:12Z")

</div>

Deployed the Elasticsearch (Self-Managed) from Azure Marketplace, it is failing every time. Tried on multiple subscription as well. Version: 7.9.0 Deployment Erorr: {"code":"DeploymentFailed","message":"At least one r…

---

## [Question about default refresh\_interval and upsert](https://discuss.elastic.co/t/question-about-default-refresh-interval-and-upsert/257581)

<div class="topic-metadata">

**Author:** [@dbrt](https://discuss.elastic.co/u/dbrt)\
**Replies:** 6\
**Last updated:** [December 4, 2020, 12:17pm UTC](https://discuss.elastic.co/t/question-about-default-refresh-interval-and-upsert/257581 "2020-12-04T12:17:40Z")

</div>

Hello everyone, First of all, I am pretty new to ElasticSearch; please forgive me if the answer to my questions are obvious. We have switched to ElasticSearch 7.x from ElasticSearch 6.8 and I was very interested by the…

---

## [Helm Chart - existingClaim](https://discuss.elastic.co/t/helm-chart-existingclaim/255887)

<div class="topic-metadata">

**Author:** [@voipas](https://discuss.elastic.co/u/voipas)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 10:48am UTC](https://discuss.elastic.co/t/helm-chart-existingclaim/255887 "2020-12-04T10:48:37Z")

</div>

Hey, I would like to ask if there are any option to use existingClaim setting to install elasticsearch using helm? I was not able to find this information here: https://github.com/elastic/helm-charts/tree/master/elastics…

---

## [Rollover exact definition in ILM policy](https://discuss.elastic.co/t/rollover-exact-definition-in-ilm-policy/257542)

<div class="topic-metadata">

**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\
**Replies:** 2\
**Last updated:** [December 4, 2020, 9:14am UTC](https://discuss.elastic.co/t/rollover-exact-definition-in-ilm-policy/257542 "2020-12-04T09:14:47Z")

</div>

Hello all ! In the delete phase of the ILM policy, we can delete x days or x hours from rollover. But what is exactly this "rollover" ? : Is it the date when index has been renewed as he reached max size (or documen…

---

## [Highlight and complex search](https://discuss.elastic.co/t/highlight-and-complex-search/257633)

<div class="topic-metadata">

**Author:** [@FABIAN\_HUTIN](https://discuss.elastic.co/u/FABIAN_HUTIN)\
**Replies:** 0\
**Last updated:** [December 4, 2020, 9:10am UTC](https://discuss.elastic.co/t/highlight-and-complex-search/257633 "2020-12-04T09:10:35Z")

</div>

Hey guys, Newbie Elastic user here. I'd like to share with you an issue I have while using the highlight feature in a complex search operation. What I want to achieve is to get the list of fields that match my search …

---

## [Two Index pattern with different time filter field names](https://discuss.elastic.co/t/two-index-pattern-with-different-time-filter-field-names/257503)

<div class="topic-metadata">

**Author:** [@pskhanapur](https://discuss.elastic.co/u/pskhanapur)\
**Replies:** 2\
**Last updated:** [December 4, 2020, 8:55am UTC](https://discuss.elastic.co/t/two-index-pattern-with-different-time-filter-field-names/257503 "2020-12-04T08:55:19Z")

</div>

I have one index and I want to visualize my data using two different time filters (i.e. two different fields). Do I need to create two index patterns? Is it even possible to create two index pattern on same index? I tho…

---

## [Node count doesn't match](https://discuss.elastic.co/t/node-count-doesnt-match/257623)

<div class="topic-metadata">

**Author:** [@Nicolaegis](https://discuss.elastic.co/u/Nicolaegis)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 8:33am UTC](https://discuss.elastic.co/t/node-count-doesnt-match/257623 "2020-12-04T08:33:11Z")

</div>

Hello, I manage a big Elasticsearch cluster with the following details: Elasticsearch version 5.6.6 Dedicated Master nodes - 3 Data nodes - 56 Total nodes - 59 Data nodes details : baremetal; 31 GB jvm heap; 4 x …

---

## [X-Pack / Elastic - Cannot read security-version string in index .security](https://discuss.elastic.co/t/x-pack-elastic-cannot-read-security-version-string-in-index-security/257595)

<div class="topic-metadata">

**Author:** [@luffy937](https://discuss.elastic.co/u/luffy937)\
**Replies:** 2\
**Last updated:** [December 4, 2020, 8:28am UTC](https://discuss.elastic.co/t/x-pack-elastic-cannot-read-security-version-string-in-index-security/257595 "2020-12-04T08:28:15Z")

</div>

Hello All, I'm coming to you because I think I checked all possibilities to correct my issue... I run an Elastic stack in a docker-compose file, the stack run well but I have a lot of error message in my docker-compose…

---

## [Connection Reset By Peer IOException](https://discuss.elastic.co/t/connection-reset-by-peer-ioexception/257457)

<div class="topic-metadata">

**Author:** [@surabhi11](https://discuss.elastic.co/u/surabhi11)\
**Replies:** 4\
**Last updated:** [December 4, 2020, 8:06am UTC](https://discuss.elastic.co/t/connection-reset-by-peer-ioexception/257457 "2020-12-04T08:06:04Z")

</div>

Hi All, We are getting Connection reset by peer issue with ElasticSearch Rest Client connection. Below issue is faced with both single & multi node cluster setup. Can someone please help in resolving this issue? Than…

---

## [Can't do rolling upgrade from 7.6.2 to 7.10.0](https://discuss.elastic.co/t/cant-do-rolling-upgrade-from-7-6-2-to-7-10-0/257549)

<div class="topic-metadata">

**Author:** [@rambling](https://discuss.elastic.co/u/rambling)\
**Replies:** 2\
**Last updated:** [December 4, 2020, 7:07am UTC](https://discuss.elastic.co/t/cant-do-rolling-upgrade-from-7-6-2-to-7-10-0/257549 "2020-12-04T07:07:43Z")

</div>

Hello. I was trying to do rolling update data node from 7.6.2 to 7.10.0 on Ubuntu 18.04. I followed the instructions: but after the update Elasticsearch can't start with next outputs: Dec 03 17:15:21 test-es-data-…

---

## [No handler for type \[multi\_field\] declared on field,I am using es 7.9.1](https://discuss.elastic.co/t/no-handler-for-type-multi-field-declared-on-field-i-am-using-es-7-9-1/257570)

<div class="topic-metadata">

**Author:** [@sanyoja\_sagare](https://discuss.elastic.co/u/sanyoja_sagare)\
**Replies:** 2\
**Last updated:** [December 4, 2020, 6:19am UTC](https://discuss.elastic.co/t/no-handler-for-type-multi-field-declared-on-field-i-am-using-es-7-9-1/257570 "2020-12-04T06:19:48Z")

</div>

No handler for type \[multi\_field\] declared on the field, I am using es 7.9.1

---

## [Elasticsearch Reads](https://discuss.elastic.co/t/elasticsearch-reads/257613)

<div class="topic-metadata">

**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\
**Replies:** 0\
**Last updated:** [December 4, 2020, 6:15am UTC](https://discuss.elastic.co/t/elasticsearch-reads/257613 "2020-12-04T06:15:21Z")

</div>

Is there a setting in elasticsearch such that reads should be routed to replicas only and if replica isn't available then only it should be directed to primary? I know we have a option \_replica\_first in request body bu…

---

## [Applying platinum license in Kubernetes](https://discuss.elastic.co/t/applying-platinum-license-in-kubernetes/257554)

<div class="topic-metadata">

**Author:** [@ngilmore](https://discuss.elastic.co/u/ngilmore)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 4:51am UTC](https://discuss.elastic.co/t/applying-platinum-license-in-kubernetes/257554 "2020-12-04T04:51:19Z")

</div>

Hello, I am trying to apply the platinum license in code versus adding it through Kibana. How is this done? I know the standard of setting up the trial license first is - xpack.license.self\_generated.type: trial I wa…

---

## [ES snapshot fails on Azure - even though repository is fine and working](https://discuss.elastic.co/t/es-snapshot-fails-on-azure-even-though-repository-is-fine-and-working/257393)

<div class="topic-metadata">

**Author:** [@spdoes](https://discuss.elastic.co/u/spdoes)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 2:02am UTC](https://discuss.elastic.co/t/es-snapshot-fails-on-azure-even-though-repository-is-fine-and-working/257393 "2020-12-04T02:02:32Z")

</div>

Verification status says connected I already did clean up When I try to list the repo in DevTools (in Kibana), it gives me timeout All directories and files permission are fine (I am comparing to another worki…

---

## [Kibana Elasticsearch does not recognize repository snapshots created for retrieval](https://discuss.elastic.co/t/kibana-elasticsearch-does-not-recognize-repository-snapshots-created-for-retrieval/257518)

<div class="topic-metadata">

**Author:** [@Nacho\_Revilla](https://discuss.elastic.co/u/Nacho_Revilla)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 1:53am UTC](https://discuss.elastic.co/t/kibana-elasticsearch-does-not-recognize-repository-snapshots-created-for-retrieval/257518 "2020-12-04T01:53:38Z")

</div>

Hello everybody, I have a problem when recovering a snapshot from kibana, apparently it does not recognize the repository for its recovery. somebody could help me? Thanks a lot

---

## [One ES container with n search threads is slower than two containers with n/2 search threads](https://discuss.elastic.co/t/one-es-container-with-n-search-threads-is-slower-than-two-containers-with-n-2-search-threads/256965)

<div class="topic-metadata">

**Author:** [@alexklibisz](https://discuss.elastic.co/u/alexklibisz)\
**Replies:** 18\
**Last updated:** [December 4, 2020, 12:42am UTC](https://discuss.elastic.co/t/one-es-container-with-n-search-threads-is-slower-than-two-containers-with-n-2-search-threads/256965 "2020-12-04T00:42:46Z")

</div>

I'm running a benchmark to optimize for search throughput (i.e. queries/second). The query I'm profiling is a custom query in an Elasticsearch plugin. The query is very similar to the Terms Set Query. I tried one setup …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=748)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=750)
