# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=789 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 790 --- ## [How to update index template](https://discuss.elastic.co/t/how-to-update-index-template/251491)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 4\ **Last updated:** [October 10, 2020, 4:54pm UTC](https://discuss.elastic.co/t/how-to-update-index-template/251491 "2020-10-10T16:54:43Z")
Our cluster have about 170 index templates. I need to update all templates , include the settings: PUT \_template/testovaci { "settings": { "index.routing.allocation.include.data": "hot" } } but this syntax doe… --- ## [Need help with aggregation query](https://discuss.elastic.co/t/need-help-with-aggregation-query/251640)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 0\ **Last updated:** [October 10, 2020, 10:22am UTC](https://discuss.elastic.co/t/need-help-with-aggregation-query/251640 "2020-10-10T10:22:30Z")
Hi All, I am trying to write a query to get host and max cpu usage from metric beat data but i was not able to write exact query to get max cpu along with host name. for example below is the data "hostname:"hos… --- ## [Getting “master not discovered or elected yet” causing cluster not up in version 7.9.1](https://discuss.elastic.co/t/getting-master-not-discovered-or-elected-yet-causing-cluster-not-up-in-version-7-9-1/250269)
**Author:** [@Jinlian\_Chen](https://discuss.elastic.co/u/Jinlian_Chen)\ **Replies:** 20\ **Last updated:** [October 10, 2020, 8:43am UTC](https://discuss.elastic.co/t/getting-master-not-discovered-or-elected-yet-causing-cluster-not-up-in-version-7-9-1/250269 "2020-10-10T08:43:35Z")
Hi, I am building a 5 nodes cluster using k8s, 3 master nodes, and 2 data nodes. When restart 3 masters orderly, got error "master not discovered or elected yet", the cluster can't work. This situation last several hours… --- ## [Unable to create raw field in index template in elk6](https://discuss.elastic.co/t/unable-to-create-raw-field-in-index-template-in-elk6/250703)
**Author:** [@rajkumar.m](https://discuss.elastic.co/u/rajkumar.m)\ **Replies:** 2\ **Last updated:** [October 9, 2020, 8:50pm UTC](https://discuss.elastic.co/t/unable-to-create-raw-field-in-index-template-in-elk6/250703 "2020-10-09T20:50:31Z")
\# vi XXXX.json { "template" : "XXXXX\*", "settings" : { "index" : { "number\_of\_shards" : "2", "number\_of\_replicas" : "1", "refresh\_interval" : "5s" } }, "mappings": { … --- ## [Reindexing Elasticsearch creates a mapping which cannot be searched](https://discuss.elastic.co/t/reindexing-elasticsearch-creates-a-mapping-which-cannot-be-searched/251559)
**Author:** [@Leon\_Roy](https://discuss.elastic.co/u/Leon_Roy)\ **Replies:** 3\ **Last updated:** [October 9, 2020, 7:14pm UTC](https://discuss.elastic.co/t/reindexing-elasticsearch-creates-a-mapping-which-cannot-be-searched/251559 "2020-10-09T19:14:00Z")
Bit of an odd one or I'm missing something. We reindexed an AWS Elasticsearch index from old\_index to new\_index but for some reason searches on the new index return no results. The steps we took are: Reindex curl -H … --- ## [Elasticsearch xpack security using basic license](https://discuss.elastic.co/t/elasticsearch-xpack-security-using-basic-license/251594)
**Author:** [@ksaha](https://discuss.elastic.co/u/ksaha)\ **Replies:** 6\ **Last updated:** [October 9, 2020, 5:27pm UTC](https://discuss.elastic.co/t/elasticsearch-xpack-security-using-basic-license/251594 "2020-10-09T17:27:04Z")
Hi Team, Can we use Elasticsearch xpack security for multinode Elasticsearch cluster using Basic License? Thanks --- ## [Parent child not working consistently](https://discuss.elastic.co/t/parent-child-not-working-consistently/251044)
**Author:** [@askids](https://discuss.elastic.co/u/askids)\ **Replies:** 1\ **Last updated:** [October 9, 2020, 7:03am UTC](https://discuss.elastic.co/t/parent-child-not-working-consistently/251044 "2020-10-09T07:03:42Z")
hi All, We have been using parent child structure since v5 and migrated to v7.2 earlier in Jan and now upgrading to 7.8.1. After moving to v7.2, we have been seeing inconsistency when using parent-child relationship. W… --- ## [Would a node failure take down the cluster?](https://discuss.elastic.co/t/would-a-node-failure-take-down-the-cluster/251513)
**Author:** [@Jtomage](https://discuss.elastic.co/u/Jtomage)\ **Replies:** 2\ **Last updated:** [October 9, 2020, 3:57pm UTC](https://discuss.elastic.co/t/would-a-node-failure-take-down-the-cluster/251513 "2020-10-09T15:57:33Z")
Trying to troubleshoot why a 3 Node Master-data cluster would go down. Mainly looking for direction on where to look for issues and any possible solutions Currently running version 7.0.1 Indices - 19 Max Memory - 38.8… --- ## [Percolator not matching queries it should, reindex the query fixes the problem](https://discuss.elastic.co/t/percolator-not-matching-queries-it-should-reindex-the-query-fixes-the-problem/251586)
**Author:** [@jacob.holmes](https://discuss.elastic.co/u/jacob.holmes)\ **Replies:** 0\ **Last updated:** [October 9, 2020, 3:18pm UTC](https://discuss.elastic.co/t/percolator-not-matching-queries-it-should-reindex-the-query-fixes-the-problem/251586 "2020-10-09T15:18:48Z")
Hello, My team recently launched an application that uses Percolate. We are running ES 6.4 in AWS and are seeing a very strange issue where percolate is not matching queries that it should match. Those queries exist in… --- ## [How to grant access for specefic data in elastic cluster](https://discuss.elastic.co/t/how-to-grant-access-for-specefic-data-in-elastic-cluster/251575)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 4\ **Last updated:** [October 9, 2020, 3:04pm UTC](https://discuss.elastic.co/t/how-to-grant-access-for-specefic-data-in-elastic-cluster/251575 "2020-10-09T15:04:57Z")
Hello everybody, let's suppose I have 2 machines where I run the same agent (packetbeat for example), how can I do to create 2 users where each user can only access data that has been created from one machine ? so user… --- ## [Elasticsearch synonym\_graph filter not giving all tokens](https://discuss.elastic.co/t/elasticsearch-synonym-graph-filter-not-giving-all-tokens/251583)
**Author:** [@Dhiru9895](https://discuss.elastic.co/u/Dhiru9895)\ **Replies:** 0\ **Last updated:** [October 9, 2020, 2:59pm UTC](https://discuss.elastic.co/t/elasticsearch-synonym-graph-filter-not-giving-all-tokens/251583 "2020-10-09T14:59:29Z")
I'm trying to use synonym\_graph filter in the analyzer but it is not generating the result we need. This is my curl command to analyze text: curl -X GET "localhost:9200/\_analyze?pretty" -H 'Content-Type: application/js… --- ## [Questions regardings ports and network flows](https://discuss.elastic.co/t/questions-regardings-ports-and-network-flows/251440)
**Author:** [@Juicy45](https://discuss.elastic.co/u/Juicy45)\ **Replies:** 2\ **Last updated:** [October 9, 2020, 1:58pm UTC](https://discuss.elastic.co/t/questions-regardings-ports-and-network-flows/251440 "2020-10-09T13:58:48Z")
Hi, I have some questions regardings the network flows and ports. I already know that elasticsearch is using 9200 and 9300 ports. 9200 for the requests 9300 for the communication between nodes Which port is using el… --- ## [Log4j2.properties](https://discuss.elastic.co/t/log4j2-properties/251568)
**Author:** [@abhinav\_elk](https://discuss.elastic.co/u/abhinav_elk)\ **Replies:** 0\ **Last updated:** [October 9, 2020, 1:08pm UTC](https://discuss.elastic.co/t/log4j2-properties/251568 "2020-10-09T13:08:25Z")
Can someone please explain theses two things in the Log4j.2 properties file in ElasticSearch \`appender.index\_search\_slowlog\_rolling.policies.time.type=TimeBasedTriggeringPolicy appender.index\_search\_slowlog\_rolling.pol… --- ## [How to calculate Request Rate](https://discuss.elastic.co/t/how-to-calculate-request-rate/251571)
**Author:** [@Pooja\_Nair](https://discuss.elastic.co/u/Pooja_Nair)\ **Replies:** 0\ **Last updated:** [October 9, 2020, 1:13pm UTC](https://discuss.elastic.co/t/how-to-calculate-request-rate/251571 "2020-10-09T13:13:21Z")
Hello everyone, I am trying to setup monitoring for elasticsearch cluster using an external monitoring tool called Logic Monitor. I am trying to replicate a dashboard similar to Kibana, would like to know how to calcula… --- ## [Elasticsearch Rolling Restart](https://discuss.elastic.co/t/elasticsearch-rolling-restart/251566)
**Author:** [@elasticus3r](https://discuss.elastic.co/u/elasticus3r)\ **Replies:** 0\ **Last updated:** [October 9, 2020, 1:01pm UTC](https://discuss.elastic.co/t/elasticsearch-rolling-restart/251566 "2020-10-09T13:01:45Z")
Hello, I need to perform a rolling restart of my elasticsearch cluster which contains 3 master nodes and 7 data nodes. I believe a rolling restart is the best approach for patching and also cert renewals. From this docu… --- ## [Non writable elasticsearch.keystore path - Elasticsearch 6.8](https://discuss.elastic.co/t/non-writable-elasticsearch-keystore-path-elasticsearch-6-8/251563)
**Author:** [@BTh0mas](https://discuss.elastic.co/u/BTh0mas)\ **Replies:** 0\ **Last updated:** [October 9, 2020, 12:50pm UTC](https://discuss.elastic.co/t/non-writable-elasticsearch-keystore-path-elasticsearch-6-8/251563 "2020-10-09T12:50:15Z")
Hi I am trying to create a custom docker container and use it in a Kubernetes cluster. I would like my build and deployment scripts to create custom Elasticsearch configuration file and mount them into the docker contai… --- ## [Datafeed query for Machine Learning, Got more than 10000 patitions](https://discuss.elastic.co/t/datafeed-query-for-machine-learning-got-more-than-10000-patitions/251504)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [October 9, 2020, 12:44pm UTC](https://discuss.elastic.co/t/datafeed-query-for-machine-learning-got-more-than-10000-patitions/251504 "2020-10-09T12:44:09Z")
Hi, Im currently using this query in the datafeed of my jobs in ML: { "bool": { "filter": \[ { "bool": { "should": \[ { "exists": { "field": "cpu\_per… --- ## [Automatic snapshot delete on Elasticsearch 2.4](https://discuss.elastic.co/t/automatic-snapshot-delete-on-elasticsearch-2-4/251273)
**Author:** [@Silas-91](https://discuss.elastic.co/u/Silas-91)\ **Replies:** 2\ **Last updated:** [October 9, 2020, 11:42am UTC](https://discuss.elastic.co/t/automatic-snapshot-delete-on-elasticsearch-2-4/251273 "2020-10-09T11:42:45Z")
Hello together, i´am new to elasticsearch and i have some question about version 2.4. We take snapshots every day but now there are so many that we have to delete them. I don´t want to delete them one by one. So does a… --- ## [Re-Index to new date format. getting parse\_exception](https://discuss.elastic.co/t/re-index-to-new-date-format-getting-parse-exception/251390)
**Author:** [@ahmadsayeed3](https://discuss.elastic.co/u/ahmadsayeed3)\ **Replies:** 0\ **Last updated:** [October 8, 2020, 7:51am UTC](https://discuss.elastic.co/t/re-index-to-new-date-format-getting-parse-exception/251390 "2020-10-08T07:51:09Z")
POST \_reindex { "source": { "index": "source" }, "dest": { "index": "dest" }, "script": { "source": """ SimpleDateFormat format = new SimpleDateFormat(… --- ## [Delay to initialize elasticsearch](https://discuss.elastic.co/t/delay-to-initialize-elasticsearch/251558)
**Author:** [@Douglas\_Ribeiro](https://discuss.elastic.co/u/Douglas_Ribeiro)\ **Replies:** 0\ **Last updated:** [October 9, 2020, 11:38am UTC](https://discuss.elastic.co/t/delay-to-initialize-elasticsearch/251558 "2020-10-09T11:38:29Z")
Hi guys, next I use the SKELS ISO, one of the services I need is ElasticSearch, but he has a problem with Boot. Before it didn't start, now I changed the timeout time to 3 minutes, now it starts, but it takes 2 minutes. … --- ## [Сopies of shards](https://discuss.elastic.co/t/opies-of-shards/248857)
**Author:** [@djuwa4](https://discuss.elastic.co/u/djuwa4)\ **Replies:** 4\ **Last updated:** [October 9, 2020, 11:31am UTC](https://discuss.elastic.co/t/opies-of-shards/248857 "2020-10-09T11:31:29Z")
Good day! I have an elasticsearch cluster configured. Can you please tell me if copies of shards are created by default? Or does it need to be configured separately? --- ## [How to support pagination in aggregation](https://discuss.elastic.co/t/how-to-support-pagination-in-aggregation/251413)
**Author:** [@Raj3](https://discuss.elastic.co/u/Raj3)\ **Replies:** 5\ **Last updated:** [October 9, 2020, 11:16am UTC](https://discuss.elastic.co/t/how-to-support-pagination-in-aggregation/251413 "2020-10-09T11:16:09Z")
{ "aggs": { "thread": { "terms": { "field": "session\_id" } } } } i want to add pagination in field session\_id how can it? --- ## [Setting up replica shards](https://discuss.elastic.co/t/setting-up-replica-shards/251551)
**Author:** [@djuwa4](https://discuss.elastic.co/u/djuwa4)\ **Replies:** 2\ **Last updated:** [October 9, 2020, 10:55am UTC](https://discuss.elastic.co/t/setting-up-replica-shards/251551 "2020-10-09T10:55:13Z")
How can I increase the number of shard replicas? I have five nodes in the cluster, I want each node to have a copy of each shards. I found this option on the net, is it correct? curl -X PUT http://localhost:9200/\_templ… --- ## [How does Re-index API works?](https://discuss.elastic.co/t/how-does-re-index-api-works/251293)
**Author:** [@srbhklkrn](https://discuss.elastic.co/u/srbhklkrn)\ **Replies:** 3\ **Last updated:** [October 9, 2020, 6:30am UTC](https://discuss.elastic.co/t/how-does-re-index-api-works/251293 "2020-10-09T06:30:25Z")
We are in the process of migrating from ES 6.4 to 7.9, and around 3 TB of data. I'm looking into reindex API to start the process and do testing. My question is does reindex API will delete the original indexes? for now,… --- ## [Token Service could not get token document](https://discuss.elastic.co/t/token-service-could-not-get-token-document/251533)
**Author:** [@nitin7](https://discuss.elastic.co/u/nitin7)\ **Replies:** 0\ **Last updated:** [October 9, 2020, 6:23am UTC](https://discuss.elastic.co/t/token-service-could-not-get-token-document/251533 "2020-10-09T06:23:15Z")
Hi all, In the cluster there has been info message \[2020-10-09T11:49:34,157\]\[INFO \]\[o.e.x.s.a.TokenService \] \[\] could not get token document \[token\_ChHbqugJxSEN47zQ-DgsvlzZXyPdPly1yRA\_VnPasUM\] that should have been c… --- ## [Which schema to use with Elasticsearch](https://discuss.elastic.co/t/which-schema-to-use-with-elasticsearch/251430)
**Author:** [@chabow](https://discuss.elastic.co/u/chabow)\ **Replies:** 3\ **Last updated:** [October 8, 2020, 9:15pm UTC](https://discuss.elastic.co/t/which-schema-to-use-with-elasticsearch/251430 "2020-10-08T21:15:07Z")
This is hopefully an easy question for the experts. We just started with an instance of Elasticsearch. And we need to add metadata to a big part of our content. Now the question is: which schema to use? We are aware that… --- ## [Need @timestamp value where the maximum aggregation result occurred](https://discuss.elastic.co/t/need-timestamp-value-where-the-maximum-aggregation-result-occurred/249993)
**Author:** [@silentfilm](https://discuss.elastic.co/u/silentfilm)\ **Replies:** 1\ **Last updated:** [October 8, 2020, 6:30pm UTC](https://discuss.elastic.co/t/need-timestamp-value-where-the-maximum-aggregation-result-occurred/249993 "2020-10-08T18:30:30Z")
I'm using an Elasticsearch query (6.7) to find the maximum number of records returned for a particular service. My aggregation query is working great, but I need to also find the time when this maximum occurred. If I s… --- ## [Script\_fields in MultiSearchRequest](https://discuss.elastic.co/t/script-fields-in-multisearchrequest/251495)
**Author:** [@Nick\_Name](https://discuss.elastic.co/u/Nick_Name)\ **Replies:** 0\ **Last updated:** [October 8, 2020, 6:22pm UTC](https://discuss.elastic.co/t/script-fields-in-multisearchrequest/251495 "2020-10-08T18:22:07Z")
Can I use script\_fields from one query in another query script when I create multisearch request? I have this error, can anyone help me? This my request in Postman: {"index" : "core\_event\_usvc\_provided"} {"que… --- ## [Histogram aggregation over unique IDs: possible with nested aggregations?](https://discuss.elastic.co/t/histogram-aggregation-over-unique-ids-possible-with-nested-aggregations/250539)
**Author:** [@sandbender](https://discuss.elastic.co/u/sandbender)\ **Replies:** 1\ **Last updated:** [October 8, 2020, 6:07pm UTC](https://discuss.elastic.co/t/histogram-aggregation-over-unique-ids-possible-with-nested-aggregations/250539 "2020-10-08T18:07:55Z")
Hello, I am trying to aggregate data for a heatmap visualisation in Vega-Lite. It is supposed to show the volume of communication (color) in volume ranges (y-axis) over time (x-axis). Where I'm stuck at right now is: t… --- ## [Removing parent object names with ingest pipeline](https://discuss.elastic.co/t/removing-parent-object-names-with-ingest-pipeline/251492)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 0\ **Last updated:** [October 8, 2020, 5:27pm UTC](https://discuss.elastic.co/t/removing-parent-object-names-with-ingest-pipeline/251492 "2020-10-08T17:27:38Z")
I'm trying to figure out how to clean up my fields and remove some of the top level parents in my documents. I want to turn Properties.Status and Properties.Status.StatusName into Status and Status.StatusName, respective… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=788) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=790)