# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=753 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 754 --- ## [Close Index Api warning in ES version 6.8](https://discuss.elastic.co/t/close-index-api-warning-in-es-version-6-8/256662)
**Author:** [@mrudrego](https://discuss.elastic.co/u/mrudrego)\ **Replies:** 5\ **Last updated:** [November 30, 2020, 7:24pm UTC](https://discuss.elastic.co/t/close-index-api-warning-in-es-version-6-8/256662 "2020-11-30T19:24:29Z")
Hi, There is a warning in Elasticsearch 6.8 version document about Close index api which states To reduce the risk of data loss, avoid keeping closed indices in your cluster for long periods of time. When a node leave… --- ## [Is there a SIMILAR TO in Elasticsearch SQL?](https://discuss.elastic.co/t/is-there-a-similar-to-in-elasticsearch-sql/256595)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [November 30, 2020, 7:10pm UTC](https://discuss.elastic.co/t/is-there-a-similar-to-in-elasticsearch-sql/256595 "2020-11-30T19:10:42Z")
Hi, I want to match several values in a Elasticsearch SQL query, is there something like "SIMILAR TO" to do this? WHERE items SIMILAR TO 'CPU Porcentual|CPU Utilization' --- ## [Ensuring uniqueness of IDs across indices during insertion](https://discuss.elastic.co/t/ensuring-uniqueness-of-ids-across-indices-during-insertion/257113)
**Author:** [@jmaharjan](https://discuss.elastic.co/u/jmaharjan)\ **Replies:** 1\ **Last updated:** [November 30, 2020, 6:44pm UTC](https://discuss.elastic.co/t/ensuring-uniqueness-of-ids-across-indices-during-insertion/257113 "2020-11-30T18:44:01Z")
From what I understand, if we assign explicit ids to documents we might end up with multiple documents with the same id in different indices. Is there a way to ensure, when using explicit document ids, that a document id… --- ## [Searching terms in Inverted index](https://discuss.elastic.co/t/searching-terms-in-inverted-index/257111)
**Author:** [@prasad.deshpande](https://discuss.elastic.co/u/prasad.deshpande)\ **Replies:** 0\ **Last updated:** [November 30, 2020, 6:16pm UTC](https://discuss.elastic.co/t/searching-terms-in-inverted-index/257111 "2020-11-30T18:16:06Z")
Is there a way in Elasticsearch in which I can search all the terms in the inverted index? So say, if I want to find all the terms (Not the documents..) starting with au and ending with o. I know that there is a \_termve… --- ## [Strange behavior with date histogram aggregation in a field that is inside a nested object (Elasticsearch 7.10.0)](https://discuss.elastic.co/t/strange-behavior-with-date-histogram-aggregation-in-a-field-that-is-inside-a-nested-object-elasticsearch-7-10-0/256823)
**Author:** [@tberne](https://discuss.elastic.co/u/tberne)\ **Replies:** 7\ **Last updated:** [November 30, 2020, 6:11pm UTC](https://discuss.elastic.co/t/strange-behavior-with-date-histogram-aggregation-in-a-field-that-is-inside-a-nested-object-elasticsearch-7-10-0/256823 "2020-11-30T18:11:54Z")
Hi! I'm in the middle of an upgrade process to the 7.10.0 Elasticsearch (changing the client from TransportClient to JavaRestHighLevelClient also) and I've noticed a strange behavior of Date Histogram Aggregation when i… --- ## [Locating rogue clients with authentication errors](https://discuss.elastic.co/t/locating-rogue-clients-with-authentication-errors/257102)
**Author:** [@franco-martin](https://discuss.elastic.co/u/franco-martin)\ **Replies:** 0\ **Last updated:** [November 30, 2020, 4:51pm UTC](https://discuss.elastic.co/t/locating-rogue-clients-with-authentication-errors/257102 "2020-11-30T16:51:07Z")
Im using filebeat to export elasticsearch logs to well... elasticsearch. I get the authentication errors but not where they come from. I tried changing the log level to TRACE for the rest package but no luck. Is there a… --- ## [How to get MappingMetadata per type using Rest High Level Client?](https://discuss.elastic.co/t/how-to-get-mappingmetadata-per-type-using-rest-high-level-client/257082)
**Author:** [@amishar](https://discuss.elastic.co/u/amishar)\ **Replies:** 3\ **Last updated:** [November 30, 2020, 3:31pm UTC](https://discuss.elastic.co/t/how-to-get-mappingmetadata-per-type-using-rest-high-level-client/257082 "2020-11-30T15:31:47Z")
We are migrating from Transport Client to High Level Rest Client. We have a piece of code that get indices, mappings and settings using GetIndex call. For transport client, we use this code to obtain the index informati… --- ## [ML Datafeed lookback retrieved no data](https://discuss.elastic.co/t/ml-datafeed-lookback-retrieved-no-data/256864)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 5\ **Last updated:** [November 30, 2020, 2:40pm UTC](https://discuss.elastic.co/t/ml-datafeed-lookback-retrieved-no-data/256864 "2020-11-30T14:40:15Z")
Hello, I am trying to run the job "windows\_rare\_user\_type10\_remote\_login" in my cluster and It process no data, and I am getting ML Datafeed lookback retrieved no data Knowing that I already installed winlogbeat in s… --- ## [Slowness in ES bulk inserts](https://discuss.elastic.co/t/slowness-in-es-bulk-inserts/256886)
**Author:** [@Chirag\_Patwa](https://discuss.elastic.co/u/Chirag_Patwa)\ **Replies:** 10\ **Last updated:** [November 30, 2020, 2:32pm UTC](https://discuss.elastic.co/t/slowness-in-es-bulk-inserts/256886 "2020-11-30T14:32:50Z")
We are running behind the schedule to achieve something and we need help. Please take a look and suggest something. Issue: Slowness on bulk Indexing. For 10000 records its taking 27560 ms For 500 records its taking ab… --- ## [Elasticsearch Shards problem](https://discuss.elastic.co/t/elasticsearch-shards-problem/256998)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 0\ **Last updated:** [November 29, 2020, 5:48pm UTC](https://discuss.elastic.co/t/elasticsearch-shards-problem/256998 "2020-11-29T17:48:55Z")
I have set-up elasticsearch 8 node cluster 3 master 3 data(500gb total 1.5 tb) +2 coordinate nodes each node have 16gb ram and 4 CPUs and it uses only 2 cpu. In client side we have packbeat and winlogbeat pointing to ka… --- ## [ElasticSearch - Sort by another field which is not mentioned in field section aggregation query](https://discuss.elastic.co/t/elasticsearch-sort-by-another-field-which-is-not-mentioned-in-field-section-aggregation-query/257080)
**Author:** [@Mamta\_Shettigar](https://discuss.elastic.co/u/Mamta_Shettigar)\ **Replies:** 0\ **Last updated:** [November 30, 2020, 2:27pm UTC](https://discuss.elastic.co/t/elasticsearch-sort-by-another-field-which-is-not-mentioned-in-field-section-aggregation-query/257080 "2020-11-30T14:27:12Z")
I want to perform aggregation on a certain results and then sort it. While aggregation query works fine. We want to sort the results based on another parameter and not the aggregated field. Say for example I want to aggr… --- ## [ILM policy to transform index](https://discuss.elastic.co/t/ilm-policy-to-transform-index/256974)
**Author:** [@fadjar340](https://discuss.elastic.co/u/fadjar340)\ **Replies:** 1\ **Last updated:** [November 30, 2020, 2:10pm UTC](https://discuss.elastic.co/t/ilm-policy-to-transform-index/256974 "2020-11-30T14:10:39Z")
Is it possible to use ILM policy to the transform index result? I tried to the transform index and added alias into it, but the ILM not works as expected for transform indices. Is there any workaround to do this? Rega… --- ## [Categorizing similar values](https://discuss.elastic.co/t/categorizing-similar-values/257071)
**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\ **Replies:** 1\ **Last updated:** [November 30, 2020, 2:04pm UTC](https://discuss.elastic.co/t/categorizing-similar-values/257071 "2020-11-30T14:04:21Z")
Hi, Is there a way to categorize similar values of specific field, during the query time ? for example, suppose I have these documents: {..., message: "this is message no 1",...} {..., message: "this is message no 2"… --- ## [Http 400 query crashes elastic search cluster](https://discuss.elastic.co/t/http-400-query-crashes-elastic-search-cluster/256228)
**Author:** [@sebastienf](https://discuss.elastic.co/u/sebastienf)\ **Replies:** 2\ **Last updated:** [November 30, 2020, 1:54pm UTC](https://discuss.elastic.co/t/http-400-query-crashes-elastic-search-cluster/256228 "2020-11-30T13:54:37Z")
on a 5.6 ES cluster that i don't administrate, i noticed, when a query gives an error HTTP 400 such as {"error":{"root\_cause":\[{"type":"action\_request\_validation\_exception","reason":"Validation Failed: 1: template is mi… --- ## [Elasticsearch single node "cluster" fails with "incoming term X does not match current term Y"](https://discuss.elastic.co/t/elasticsearch-single-node-cluster-fails-with-incoming-term-x-does-not-match-current-term-y/256857)
**Author:** [@tobal](https://discuss.elastic.co/u/tobal)\ **Replies:** 6\ **Last updated:** [November 30, 2020, 1:22pm UTC](https://discuss.elastic.co/t/elasticsearch-single-node-cluster-fails-with-incoming-term-x-does-not-match-current-term-y/256857 "2020-11-30T13:22:58Z")
Hi there, We have a recurring error in our test environment, where elasticsearch fails to boot up. We have logs from two occurrence, but sadly we can't reproduce the error consistently to help determine what the problem… --- ## [Elasticesearch 7.6.2 translog overflow issue](https://discuss.elastic.co/t/elasticesearch-7-6-2-translog-overflow-issue/256776)
**Author:** [@rambling](https://discuss.elastic.co/u/rambling)\ **Replies:** 9\ **Last updated:** [November 30, 2020, 1:08pm UTC](https://discuss.elastic.co/t/elasticesearch-7-6-2-translog-overflow-issue/256776 "2020-11-30T13:08:58Z")
Hi, recently I caught very strange behavior of translog in my cluster: I noticed that one node was executing task for 3 days like: "node" : "PAHpy641TPqLYhPOKPnAvQ", "id" : 1336600606, "type" : "trans… --- ## [Taking several snapshots in parallell](https://discuss.elastic.co/t/taking-several-snapshots-in-parallell/257054)
**Author:** [@johanhaugland](https://discuss.elastic.co/u/johanhaugland)\ **Replies:** 3\ **Last updated:** [November 30, 2020, 1:07pm UTC](https://discuss.elastic.co/t/taking-several-snapshots-in-parallell/257054 "2020-11-30T13:07:51Z")
As discussed in https://github.com/elastic/elasticsearch/issues/27353 it is desirable to either queue snapshots, or even better, take several snapshots in parallell. I have not been able to find documentation on how thi… --- ## [Elasticsearch perform slow process intermittently](https://discuss.elastic.co/t/elasticsearch-perform-slow-process-intermittently/255510)
**Author:** [@fardhana](https://discuss.elastic.co/u/fardhana)\ **Replies:** 12\ **Last updated:** [November 30, 2020, 10:59am UTC](https://discuss.elastic.co/t/elasticsearch-perform-slow-process-intermittently/255510 "2020-11-30T10:59:48Z")
Hi, i have nodejs consumer using rabbitmq that doing one of this two thing. simple Indexing into elasticsearch using predifined \_id (using INDEX API) search using specific id then if the doc exists it will running upda… --- ## [ES datanode can't join the cluster since disconnected from master](https://discuss.elastic.co/t/es-datanode-cant-join-the-cluster-since-disconnected-from-master/257023)
**Author:** [@AngryCookie](https://discuss.elastic.co/u/AngryCookie)\ **Replies:** 6\ **Last updated:** [November 30, 2020, 10:16am UTC](https://discuss.elastic.co/t/es-datanode-cant-join-the-cluster-since-disconnected-from-master/257023 "2020-11-30T10:16:20Z")
​ Hi, we are faced with a huge problem that is random nodes started disconnecting from the master and can't join to the cluster again util i restart it. First, the messages from master node.The master detects that a nod… --- ## [Bulk indexing requests are mostly queued on one node in the cluster](https://discuss.elastic.co/t/bulk-indexing-requests-are-mostly-queued-on-one-node-in-the-cluster/256652)
**Author:** [@swafa](https://discuss.elastic.co/u/swafa)\ **Replies:** 2\ **Last updated:** [November 30, 2020, 9:53am UTC](https://discuss.elastic.co/t/bulk-indexing-requests-are-mostly-queued-on-one-node-in-the-cluster/256652 "2020-11-30T09:53:07Z")
Hi, I'm noticing something peculiar when running our bulk indexing job against our Elasticsearch cluster (version 7.6.1). Our client uses 48 cores in total to bulk index into Elasticsearch. Each request contains a batc… --- ## [Index template not match for logs](https://discuss.elastic.co/t/index-template-not-match-for-logs/257008)
**Author:** [@zakabluk](https://discuss.elastic.co/u/zakabluk)\ **Replies:** 2\ **Last updated:** [November 30, 2020, 8:39am UTC](https://discuss.elastic.co/t/index-template-not-match-for-logs/257008 "2020-11-30T08:39:55Z")
I tride create index template with ilm policy. My logsatsh output has index =\> "logstash-logs-lb-%{+YYYY.MM.dd}" Index template with config PUT \_template/logstash-logs-lb { "order": 0, "index\_patterns": \[ "lo… --- ## [New Elastic search cluster is not detecting other seed nodes](https://discuss.elastic.co/t/new-elastic-search-cluster-is-not-detecting-other-seed-nodes/255902)
**Author:** [@hello5346](https://discuss.elastic.co/u/hello5346)\ **Replies:** 4\ **Last updated:** [November 30, 2020, 7:05am UTC](https://discuss.elastic.co/t/new-elastic-search-cluster-is-not-detecting-other-seed-nodes/255902 "2020-11-30T07:05:10Z")
Hello All, I'm setting up a new Elasticsearch cluster with 3 nodes out of which 3 are master nodes and data nodes as well. The following is the config of the ES # ======================== Elasticsearch Configuration … --- ## [Is ElasticSearch supports CephRBD or CephRBD-fast with RWO access?](https://discuss.elastic.co/t/is-elasticsearch-supports-cephrbd-or-cephrbd-fast-with-rwo-access/256759)
**Author:** [@sarthaksahu](https://discuss.elastic.co/u/sarthaksahu)\ **Replies:** 3\ **Last updated:** [November 30, 2020, 4:59am UTC](https://discuss.elastic.co/t/is-elasticsearch-supports-cephrbd-or-cephrbd-fast-with-rwo-access/256759 "2020-11-30T04:59:18Z")
Is ElasticSearch supports CephRBD or CephRBD-fast with RWO access ? --- ## [Error after setting up xpack security , elasticsearch is not starting after anbaling xpack](https://discuss.elastic.co/t/error-after-setting-up-xpack-security-elasticsearch-is-not-starting-after-anbaling-xpack/256699)
**Author:** [@siddesh\_patke](https://discuss.elastic.co/u/siddesh_patke)\ **Replies:** 1\ **Last updated:** [November 30, 2020, 4:50am UTC](https://discuss.elastic.co/t/error-after-setting-up-xpack-security-elasticsearch-is-not-starting-after-anbaling-xpack/256699 "2020-11-30T04:50:57Z")
tail -30 /var/log/elasticsearch/elkstack.log ---- LOg Error at org.elasticsearch.bootstrap.Bootstrap$5.\(Bootstrap.java:227) ~\[ … --- ## [Can't start elasticsearch systemctl](https://discuss.elastic.co/t/cant-start-elasticsearch-systemctl/256725)
**Author:** [@yowies\_lintar](https://discuss.elastic.co/u/yowies_lintar)\ **Replies:** 1\ **Last updated:** [November 30, 2020, 4:49am UTC](https://discuss.elastic.co/t/cant-start-elasticsearch-systemctl/256725 "2020-11-30T04:49:33Z")
elasticsearch\]# systemctl start elasticsearch Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticsearch.service" and "journalctl -xe" for details. elas… --- ## [Elasticsearch auto delete my data](https://discuss.elastic.co/t/elasticsearch-auto-delete-my-data/256980)
**Author:** [@Quang\_Quy](https://discuss.elastic.co/u/Quang_Quy)\ **Replies:** 6\ **Last updated:** [November 30, 2020, 4:39am UTC](https://discuss.elastic.co/t/elasticsearch-auto-delete-my-data/256980 "2020-11-30T04:39:52Z")
Hi everyone! I'm having a problem that after a while, the elastic automatically deletes all the data even though I didn't configure anything to automatically delete, this is the log. Is there a way to disable the elasti… --- ## [Parse Exception NoMethodDefined](https://discuss.elastic.co/t/parse-exception-nomethoddefined/256997)
**Author:** [@shani](https://discuss.elastic.co/u/shani)\ **Replies:** 0\ **Last updated:** [November 29, 2020, 5:41pm UTC](https://discuss.elastic.co/t/parse-exception-nomethoddefined/256997 "2020-11-29T17:41:51Z")
What should we do if raw xml log contains nil value, logstash throws exception like \> \[\[main\]\>worker0\] xml - Error parsing xml with XmlSimple {:source=\>"message", :value=\>"\