# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=760 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 761 --- ## [How to Restore snapshop from 5 node cluster to single node host?](https://discuss.elastic.co/t/how-to-restore-snapshop-from-5-node-cluster-to-single-node-host/255761)
**Author:** [@elkdummy](https://discuss.elastic.co/u/elkdummy)\ **Replies:** 21\ **Last updated:** [November 19, 2020, 5:24pm UTC](https://discuss.elastic.co/t/how-to-restore-snapshop-from-5-node-cluster-to-single-node-host/255761 "2020-11-19T17:24:22Z")
Hello all, I am trying to restore a snapshot from a 5 node v6.8 to a single v7.9 host. When restoring the snapshot it finishes almost instantly. So no data was imported as its 166gb snapshot. My status goes red and sho… --- ## [ILM isn’t it working properly](https://discuss.elastic.co/t/ilm-isn-t-it-working-properly/253248)
**Author:** [@Armen\_Khachikyan](https://discuss.elastic.co/u/Armen_Khachikyan)\ **Replies:** 2\ **Last updated:** [November 19, 2020, 12:51pm UTC](https://discuss.elastic.co/t/ilm-isn-t-it-working-properly/253248 "2020-11-19T12:51:44Z")
Hey guys, I have a question about ILM... I am working on devices logs, have Logstash pipeline for logs, and all of them work correctly. After Installing ILM policy, I have added the policy to my logstash’s elasticsearc… --- ## [What is the replacement for "index.mapper.dynamic":"true" in ES version 6.8.0 to ES version 7.9.3](https://discuss.elastic.co/t/what-is-the-replacement-for-index-mapper-dynamic-true-in-es-version-6-8-0-to-es-version-7-9-3/255968)
**Author:** [@Tamil\_Selvan](https://discuss.elastic.co/u/Tamil_Selvan)\ **Replies:** 1\ **Last updated:** [November 19, 2020, 12:14pm UTC](https://discuss.elastic.co/t/what-is-the-replacement-for-index-mapper-dynamic-true-in-es-version-6-8-0-to-es-version-7-9-3/255968 "2020-11-19T12:14:46Z")
What is the replacement for "index.mapper.dynamic":"true" in ES version 6.8.0 to ES version 7.9.3 --- ## [Does DELETE /\_all actually erase data from disk?](https://discuss.elastic.co/t/does-delete-all-actually-erase-data-from-disk/255973)
**Author:** [@mahalabobis](https://discuss.elastic.co/u/mahalabobis)\ **Replies:** 1\ **Last updated:** [November 19, 2020, 12:13pm UTC](https://discuss.elastic.co/t/does-delete-all-actually-erase-data-from-disk/255973 "2020-11-19T12:13:43Z")
What does the below request mean? curl -X DELETE http://elasticsearch:9200/\_all Does it erase data from disk? If not how can I achieve this? --- ## [Spring StringQuery not working while actual query directly works on postman](https://discuss.elastic.co/t/spring-stringquery-not-working-while-actual-query-directly-works-on-postman/255882)
**Author:** [@satyarajp](https://discuss.elastic.co/u/satyarajp)\ **Replies:** 2\ **Last updated:** [November 19, 2020, 12:07pm UTC](https://discuss.elastic.co/t/spring-stringquery-not-working-while-actual-query-directly-works-on-postman/255882 "2020-11-19T12:07:19Z")
I'm migrating our native to springboot+java and am stuck here with this search. Didn't find much examples around web also. { "query": output in log below} I'm getting output in postman. Yet the actual java code retu… --- ## [How to search without punctuations when the document has punctuations](https://discuss.elastic.co/t/how-to-search-without-punctuations-when-the-document-has-punctuations/255983)
**Author:** [@Trupti\_Shet](https://discuss.elastic.co/u/Trupti_Shet)\ **Replies:** 0\ **Last updated:** [November 19, 2020, 12:03pm UTC](https://discuss.elastic.co/t/how-to-search-without-punctuations-when-the-document-has-punctuations/255983 "2020-11-19T12:03:51Z")
When I search for Brother's I can see the exact document in suggestions I am searching for. What do I do if I wish to see the exact same suggestion after typing Brother or Brothers. --- ## [Upgrading from Basic to Gold license](https://discuss.elastic.co/t/upgrading-from-basic-to-gold-license/255975)
**Author:** [@linfordwoode](https://discuss.elastic.co/u/linfordwoode)\ **Replies:** 1\ **Last updated:** [November 19, 2020, 11:44am UTC](https://discuss.elastic.co/t/upgrading-from-basic-to-gold-license/255975 "2020-11-19T11:44:59Z")
Hello Community, I have an elk stack with 1 node each for Elasticsearch, Logstash, and Kibana with a basic license. I am thinking of upgrading from a basic license to gold. Are there any prerequisites or requirements th… --- ## [Audit file is empty](https://discuss.elastic.co/t/audit-file-is-empty/255865)
**Author:** [@Andex](https://discuss.elastic.co/u/Andex)\ **Replies:** 5\ **Last updated:** [November 19, 2020, 11:20am UTC](https://discuss.elastic.co/t/audit-file-is-empty/255865 "2020-11-19T11:20:29Z")
Hi, i enabled Audit on all my elasticsearch.yml : xpack.security.audit.enabled: true I have already enabled https and transport inside my cluster. I don't know why my \_audit.json file is empty . The owner - group to t… --- ## [Unable to get X-Forwarded-For to display](https://discuss.elastic.co/t/unable-to-get-x-forwarded-for-to-display/255176)
**Author:** [@computerbart](https://discuss.elastic.co/u/computerbart)\ **Replies:** 6\ **Last updated:** [November 19, 2020, 9:24am UTC](https://discuss.elastic.co/t/unable-to-get-x-forwarded-for-to-display/255176 "2020-11-19T09:24:29Z")
Hi All, New user here. I set out to try Elastic Stack for some more visibility/search-ability for our IIS logs. Unfortunately I have bumped into something I cannot get to work. I set up a 3 node Elastic cluster + Kiban… --- ## [After adding new mapping half way through re-indexing fails](https://discuss.elastic.co/t/after-adding-new-mapping-half-way-through-re-indexing-fails/255951)
**Author:** [@NutaN\_Shrivastava](https://discuss.elastic.co/u/NutaN_Shrivastava)\ **Replies:** 2\ **Last updated:** [November 19, 2020, 9:17am UTC](https://discuss.elastic.co/t/after-adding-new-mapping-half-way-through-re-indexing-fails/255951 "2020-11-19T09:17:50Z")
I used the below code to add new mapping to a new index PUT \_index\_template/engage-logs { "index\_patterns": \[ "engage-log-reindexed-\*" \], "template": { "mappings": { "dynamic\_… --- ## [.ml-anomalies-\* indices not listed in \_cat/indices/\_all but it is listed in \_cat/indices/.ml-anomalies-\*?](https://discuss.elastic.co/t/ml-anomalies-indices-not-listed-in-cat-indices-all-but-it-is-listed-in-cat-indices-ml-anomalies/255949)
**Author:** [@bertr](https://discuss.elastic.co/u/bertr)\ **Replies:** 1\ **Last updated:** [November 19, 2020, 8:59am UTC](https://discuss.elastic.co/t/ml-anomalies-indices-not-listed-in-cat-indices-all-but-it-is-listed-in-cat-indices-ml-anomalies/255949 "2020-11-19T08:59:06Z")
Version 7.8.1 ML is working properly, but I don't see the .ml-anomalies-\* indices listed when running \_cat/indices/\_all? The indices also dont show in Index Management screen, but I can/could create an index pattern .ml… --- ## [Aggregation with significant\_text on wildcard fields](https://discuss.elastic.co/t/aggregation-with-significant-text-on-wildcard-fields/255921)
**Author:** [@newman\_chiang](https://discuss.elastic.co/u/newman_chiang)\ **Replies:** 1\ **Last updated:** [November 19, 2020, 8:39am UTC](https://discuss.elastic.co/t/aggregation-with-significant-text-on-wildcard-fields/255921 "2020-11-19T08:39:07Z")
Hi, everyone I have query below GET contract/\_search { "query": { "bool": { "should": \[ { "query\_string": { "fields": \[ … --- ## [How to setup 2 Node Cluster](https://discuss.elastic.co/t/how-to-setup-2-node-cluster/255937)
**Author:** [@azeiner](https://discuss.elastic.co/u/azeiner)\ **Replies:** 4\ **Last updated:** [November 19, 2020, 8:20am UTC](https://discuss.elastic.co/t/how-to-setup-2-node-cluster/255937 "2020-11-19T08:20:03Z")
Hi everybody, i've got a question concerning a project we're doing currently where the customer is only willing to use his existing 2 VM's for an Elastic cluster which concerns me a little bit - normally we use 3+ nodes … --- ## [Indexing and reindexing index with single shard take too much time](https://discuss.elastic.co/t/indexing-and-reindexing-index-with-single-shard-take-too-much-time/255942)
**Author:** [@Dahea\_Moon](https://discuss.elastic.co/u/Dahea_Moon)\ **Replies:** 7\ **Last updated:** [November 19, 2020, 8:15am UTC](https://discuss.elastic.co/t/indexing-and-reindexing-index-with-single-shard-take-too-much-time/255942 "2020-11-19T08:15:06Z")
Hi, Elastic Team I cannot understand why indexing and reindexing my index takes too much time. I'm using Elasticsearch 7.9.0 with two nodes. (Nodes have default setting; both can be master and data.) There is only one… --- ## [3 hour time difference between Kibana reports and PostgreSQL database](https://discuss.elastic.co/t/3-hour-time-difference-between-kibana-reports-and-postgresql-database/254551)
**Author:** [@bogdan.oproescu](https://discuss.elastic.co/u/bogdan.oproescu)\ **Replies:** 31\ **Last updated:** [November 19, 2020, 8:12am UTC](https://discuss.elastic.co/t/3-hour-time-difference-between-kibana-reports-and-postgresql-database/254551 "2020-11-19T08:12:10Z")
hello Elastic forum, We have noticed a 3-hour time difference in our results, when comparing the output of our PostgreSQL database and our Kibana reports, and various requests to the \_search endpoint with Query DSL. For… --- ## [Scaleup (adding CPU) of ES node](https://discuss.elastic.co/t/scaleup-adding-cpu-of-es-node/255812)
**Author:** [@Shilpa\_S\_Shetty](https://discuss.elastic.co/u/Shilpa_S_Shetty)\ **Replies:** 8\ **Last updated:** [November 19, 2020, 8:02am UTC](https://discuss.elastic.co/t/scaleup-adding-cpu-of-es-node/255812 "2020-11-19T08:02:03Z")
I have requirement to add CPU to elastic search ,was looking into the specific document.Is it possible to add CPU to exisiting elastic search .New to elastic search but concepts are saying NO.Am I right or can v add more… --- ## [Generate .csv using Elasticsearch API](https://discuss.elastic.co/t/generate-csv-using-elasticsearch-api/255841)
**Author:** [@Aniket\_Salvi](https://discuss.elastic.co/u/Aniket_Salvi)\ **Replies:** 5\ **Last updated:** [November 19, 2020, 7:48am UTC](https://discuss.elastic.co/t/generate-csv-using-elasticsearch-api/255841 "2020-11-19T07:48:45Z")
Hi team, Can I create .csv file using Elasticsearch REST API. Because I want automatic .csv file generation mechanism. Thanks --- ## [Failed to find action \[org.elasticsearch.script.mustache.SearchTemplateAction@76440dba\] to execute](https://discuss.elastic.co/t/failed-to-find-action-org-elasticsearch-script-mustache-searchtemplateaction-76440dba-to-execute/255644)
**Author:** [@rakeshdkaatkar](https://discuss.elastic.co/u/rakeshdkaatkar)\ **Replies:** 6\ **Last updated:** [November 19, 2020, 7:24am UTC](https://discuss.elastic.co/t/failed-to-find-action-org-elasticsearch-script-mustache-searchtemplateaction-76440dba-to-execute/255644 "2020-11-19T07:24:29Z")
Im getting below exception when im trying to use mustache template. failed to find action \[org.elasticsearch.script.mustache.SearchTemplateAction@76440dba\] to execute --- ## [ElasticSearch7.9.3 can't start successfully as a window service in win10 system](https://discuss.elastic.co/t/elasticsearch7-9-3-cant-start-successfully-as-a-window-service-in-win10-system/255784)
**Author:** [@sunweiconfidence](https://discuss.elastic.co/u/sunweiconfidence)\ **Replies:** 3\ **Last updated:** [November 19, 2020, 7:23am UTC](https://discuss.elastic.co/t/elasticsearch7-9-3-cant-start-successfully-as-a-window-service-in-win10-system/255784 "2020-11-19T07:23:09Z")
hi, i coonfigure the elasticsearch.yml and jvm.option, can work normally in cmd window, but when i put it as a window service, it can start and running, after several seconds, it stop the service, error log as below, i … --- ## [When I upgrade ES from 7.0.0 to 7.9.0 my custom plugin(which contain mustache) is not working](https://discuss.elastic.co/t/when-i-upgrade-es-from-7-0-0-to-7-9-0-my-custom-plugin-which-contain-mustache-is-not-working/255936)
**Author:** [@rakeshdkaatkar](https://discuss.elastic.co/u/rakeshdkaatkar)\ **Replies:** 0\ **Last updated:** [November 19, 2020, 7:21am UTC](https://discuss.elastic.co/t/when-i-upgrade-es-from-7-0-0-to-7-9-0-my-custom-plugin-which-contain-mustache-is-not-working/255936 "2020-11-19T07:21:38Z")
I have placed lang-mustache-client-7.9.0.jar to libs and deleted lang-mustache folder from modules.But im getting below error. TenantNull failed to find action \[org.elasticsearch.script.mustache.SearchTemplateAction@764… --- ## [Using reindex to clean up a series of indexes (6.8.12)](https://discuss.elastic.co/t/using-reindex-to-clean-up-a-series-of-indexes-6-8-12/255917)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [November 19, 2020, 2:27am UTC](https://discuss.elastic.co/t/using-reindex-to-clean-up-a-series-of-indexes-6-8-12/255917 "2020-11-19T02:27:54Z")
Background: I am attempting to get a series of indexes into a consistent form -- the indexes span two years and over that time I have learnt a lot and there have been incremental improvements in the data quality. The i… --- ## [Bulk-update challenge tuning](https://discuss.elastic.co/t/bulk-update-challenge-tuning/255686)
**Author:** [@Oleg\_Ruchovets](https://discuss.elastic.co/u/Oleg_Ruchovets)\ **Replies:** 2\ **Last updated:** [November 19, 2020, 1:43am UTC](https://discuss.elastic.co/t/bulk-update-challenge-tuning/255686 "2020-11-19T01:43:55Z")
Hello, I run the bulk-update challenge: esrally --pipeline=benchmark-only --track=eventdata --track-repository=eventdata --challenge=bulk-update --track-params=bulk\_size:10000,bulk\_indexing\_clients:64 --target-hosts=10.… --- ## [CCR within On-premises and Cloud](https://discuss.elastic.co/t/ccr-within-on-premises-and-cloud/255894)
**Author:** [@valleram](https://discuss.elastic.co/u/valleram)\ **Replies:** 2\ **Last updated:** [November 19, 2020, 1:42am UTC](https://discuss.elastic.co/t/ccr-within-on-premises-and-cloud/255894 "2020-11-19T01:42:55Z")
Hi All, Is there a way using CCR to replicate ES data from my on premise cluster to cloud using the AWS Elasticsearch Service? Any suggestion/idea would be much appreciate it. Thanks --- ## [Update\_by\_query/delete\_by\_query conflicts=proceed doesn't actually perform the operation?](https://discuss.elastic.co/t/update-by-query-delete-by-query-conflicts-proceed-doesnt-actually-perform-the-operation/255907)
**Author:** [@redec](https://discuss.elastic.co/u/redec)\ **Replies:** 1\ **Last updated:** [November 18, 2020, 10:28pm UTC](https://discuss.elastic.co/t/update-by-query-delete-by-query-conflicts-proceed-doesnt-actually-perform-the-operation/255907 "2020-11-18T22:28:08Z")
I just discovered that conflicts=proceed doesn't mean "proceed with the requested operation when a conflict occurs"...instead it apparently means "just skip doing the requested operation on that document". I really wish… --- ## [What user role do I need need for shipping logs from fluentd to elastic search](https://discuss.elastic.co/t/what-user-role-do-i-need-need-for-shipping-logs-from-fluentd-to-elastic-search/255910)
**Author:** [@FASUGBA\_boluwatife](https://discuss.elastic.co/u/FASUGBA_boluwatife)\ **Replies:** 1\ **Last updated:** [November 18, 2020, 10:20pm UTC](https://discuss.elastic.co/t/what-user-role-do-i-need-need-for-shipping-logs-from-fluentd-to-elastic-search/255910 "2020-11-18T22:20:38Z")
Hi guys, please what user role do I need to assign to a user I created in my elastic cloud cluster to be able to forward logs from fluentd to elastic search? Thanks --- ## [Schedule Aggregate Alerts Won't Stop Alerting](https://discuss.elastic.co/t/schedule-aggregate-alerts-wont-stop-alerting/255847)
**Author:** [@joabrb22](https://discuss.elastic.co/u/joabrb22)\ **Replies:** 1\ **Last updated:** [November 18, 2020, 10:02pm UTC](https://discuss.elastic.co/t/schedule-aggregate-alerts-wont-stop-alerting/255847 "2020-11-18T22:02:17Z")
Please excuse me if this is listed in the wrong categories. I have setup Elastalert to send out a set of scheduled alerts each day at a certain time using the aggregation scheduling. The alerts usually send at the righ… --- ## [Multiple publish\_host for nodes communication behind a firewall](https://discuss.elastic.co/t/multiple-publish-host-for-nodes-communication-behind-a-firewall/255821)
**Author:** [@Vincent\_DOS\_SANTOS](https://discuss.elastic.co/u/Vincent_DOS_SANTOS)\ **Replies:** 3\ **Last updated:** [November 18, 2020, 9:48pm UTC](https://discuss.elastic.co/t/multiple-publish-host-for-nodes-communication-behind-a-firewall/255821 "2020-11-18T21:48:15Z")
Hi, we currently have a cluster in version 7.6.0, composed of 28 nodes spread over 2 datacenters : 14 in datacenter A (named es1-A, es2-A, ..., es14-A) 14 in datacenter B (named es1-B, es2-B, ..., es14-B) 3 nodes are… --- ## [Impact if disabling shards rebalancing](https://discuss.elastic.co/t/impact-if-disabling-shards-rebalancing/255831)
**Author:** [@Shubham](https://discuss.elastic.co/u/Shubham)\ **Replies:** 2\ **Last updated:** [November 18, 2020, 9:46pm UTC](https://discuss.elastic.co/t/impact-if-disabling-shards-rebalancing/255831 "2020-11-18T21:46:18Z")
Hi , Will there be any negative impact if I disallow shards rebalancing? I want to disable rebalancing because my cluster is going into yellow state too frequently as some shards become unassigned. --- ## [ElasticSearch partial word search](https://discuss.elastic.co/t/elasticsearch-partial-word-search/255888)
**Author:** [@gilleo24](https://discuss.elastic.co/u/gilleo24)\ **Replies:** 1\ **Last updated:** [November 18, 2020, 9:41pm UTC](https://discuss.elastic.co/t/elasticsearch-partial-word-search/255888 "2020-11-18T21:41:39Z")
I'm trying to search for a result by using part of a word and not getting a result. i.e. Bob's Wood Fried Pizzaeria The term "Pizza" in my search application does not bring this result back. Neither does "Woo". But … --- ## [Can anyone please explain me a query hierarchy?](https://discuss.elastic.co/t/can-anyone-please-explain-me-a-query-hierarchy/255904)
**Author:** [@lessless](https://discuss.elastic.co/u/lessless)\ **Replies:** 0\ **Last updated:** [November 18, 2020, 9:41pm UTC](https://discuss.elastic.co/t/can-anyone-please-explain-me-a-query-hierarchy/255904 "2020-11-18T21:41:36Z")
Hi, today I faced a situation when putting filters in query -\> bool -\> filter -\> bool -\> should and query -\> bool -\> filter lead to completely different results. Can anyone explain to me why is that and also please t… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=759) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=761)