# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=791 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 792 --- ## [\[Elastic Cloud\] Logs are shipped without ILM policy](https://discuss.elastic.co/t/elastic-cloud-logs-are-shipped-without-ilm-policy/251377)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 0\ **Last updated:** [October 8, 2020, 6:41am UTC](https://discuss.elastic.co/t/elastic-cloud-logs-are-shipped-without-ilm-policy/251377 "2020-10-08T06:41:45Z")
Recently, Elastic Cloud has added the ability to also ship logs to a remote monitoring cluster. Enabling that feature worked great, except for one single thing. The index called elastic-cloud-logs-7-2020.10.08-000001 wa… --- ## [Reporting on Multiple Indices in elastic](https://discuss.elastic.co/t/reporting-on-multiple-indices-in-elastic/251376)
**Author:** [@Khushboo2908](https://discuss.elastic.co/u/Khushboo2908)\ **Replies:** 0\ **Last updated:** [October 8, 2020, 6:37am UTC](https://discuss.elastic.co/t/reporting-on-multiple-indices-in-elastic/251376 "2020-10-08T06:37:28Z")
I have multiple indices in elastic and I need to generate reports using all of them. Description of indices: Ticket: Fields: Ticket\_id, campaign\_id, customer\_id, \ Campaign Fields: campaign\_id… --- ## [Pipeline name in body of \_update\_by\_query request](https://discuss.elastic.co/t/pipeline-name-in-body-of-update-by-query-request/251128)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 6\ **Last updated:** [October 8, 2020, 6:20am UTC](https://discuss.elastic.co/t/pipeline-name-in-body-of-update-by-query-request/251128 "2020-10-08T06:20:42Z")
Hello, is it possible to specify id/name of pipeline in body of \_update\_by\_query request? POST \_update\_by\_query?pipeline=id\_of\_pipeline { # How to specify pipeline here? Is it possible? } --- ## [Combine two queries](https://discuss.elastic.co/t/combine-two-queries/251346)
**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\ **Replies:** 1\ **Last updated:** [October 8, 2020, 6:19am UTC](https://discuss.elastic.co/t/combine-two-queries/251346 "2020-10-08T06:19:43Z")
Hello, I want to combine two queries into one: query 1: { "query": { "match\_phrase": { "m09-event-id.keyword": "DELIVER" } } } query 2: { "query": { "match\_phrase": { "m23-directionalit… --- ## [Delete index automatically after particular days](https://discuss.elastic.co/t/delete-index-automatically-after-particular-days/251289)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [October 8, 2020, 5:16am UTC](https://discuss.elastic.co/t/delete-index-automatically-after-particular-days/251289 "2020-10-08T05:16:59Z")
Hi, I am using Logstash to ingest log data to elasticsearch, Indices are created daily, that every day's index has a unique name like index\_name-YYYY-MM-DD. So, after 30 days, there will be 30 indices. On day 31st, I wa… --- ## [Basic Auth without SSL](https://discuss.elastic.co/t/basic-auth-without-ssl/251323)
**Author:** [@aaaaahaaaaa](https://discuss.elastic.co/u/aaaaahaaaaa)\ **Replies:** 3\ **Last updated:** [October 8, 2020, 4:25am UTC](https://discuss.elastic.co/t/basic-auth-without-ssl/251323 "2020-10-08T04:25:23Z")
Hi. Is it possible to enable Basic Auth on ES without SSL? I couldn't find that info. We're configuring SSL at the edge of our cluster and enabling SSL beyond that between services is not a requirement for us. --- ## [Elastic Search performance degraded after veriosn update from ES 1.4.2 to ES 7.9](https://discuss.elastic.co/t/elastic-search-performance-degraded-after-veriosn-update-from-es-1-4-2-to-es-7-9/251367)
**Author:** [@GauriA](https://discuss.elastic.co/u/GauriA)\ **Replies:** 0\ **Last updated:** [October 8, 2020, 4:23am UTC](https://discuss.elastic.co/t/elastic-search-performance-degraded-after-veriosn-update-from-es-1-4-2-to-es-7-9/251367 "2020-10-08T04:23:20Z")
We want to upgrade the OLD ES 1.4.2 setup to new ES 7.9. For that we are testing the search performance. I am testing the search performance by querying the search queries returning different no. of documents simultaneou… --- ## [Best way to index user specific products on store index](https://discuss.elastic.co/t/best-way-to-index-user-specific-products-on-store-index/251364)
**Author:** [@roman731](https://discuss.elastic.co/u/roman731)\ **Replies:** 0\ **Last updated:** [October 8, 2020, 3:49am UTC](https://discuss.elastic.co/t/best-way-to-index-user-specific-products-on-store-index/251364 "2020-10-08T03:49:14Z")
I have an index with ~20000 products for an e-commerce website. I would like to implement a "previously purchased feature" for specific users.. so only specific products will return for specific users in this case... but… --- ## [AWS CloudWatch Log Subscription to AWS Elasticsearch Service](https://discuss.elastic.co/t/aws-cloudwatch-log-subscription-to-aws-elasticsearch-service/251363)
**Author:** [@neldreth](https://discuss.elastic.co/u/neldreth)\ **Replies:** 0\ **Last updated:** [October 8, 2020, 3:44am UTC](https://discuss.elastic.co/t/aws-cloudwatch-log-subscription-to-aws-elasticsearch-service/251363 "2020-10-08T03:44:43Z")
For the past couple days I have been trying to identify how to code for an AWS CloudWatch subscription to my ES domain in AWS. My subscription passes into a Lambda function (written in node.js) that POSTs to the endpoint… --- ## [Elasticsearch Engineer 1 - Lab 1.4 - can not find Java](https://discuss.elastic.co/t/elasticsearch-engineer-1-lab-1-4-can-not-find-java/251362)
**Author:** [@justing](https://discuss.elastic.co/u/justing)\ **Replies:** 0\ **Last updated:** [October 8, 2020, 2:31am UTC](https://discuss.elastic.co/t/elasticsearch-engineer-1-lab-1-4-can-not-find-java/251362 "2020-10-08T02:31:08Z")
I’m currently attempting to take ElasticSearch Engineer 1 (On-Demand) training and am stuck at Lab 1.4 in the Lab Environment (Strigo). When attempting to run the logstash command, I get the following error: \[elastic@s… --- ## [Bulk loading with different fields for update](https://discuss.elastic.co/t/bulk-loading-with-different-fields-for-update/251350)
**Author:** [@dxunix](https://discuss.elastic.co/u/dxunix)\ **Replies:** 1\ **Last updated:** [October 8, 2020, 12:09am UTC](https://discuss.elastic.co/t/bulk-loading-with-different-fields-for-update/251350 "2020-10-08T00:09:40Z")
So I have a requirement to index some data repeatedly. Each time the data might have different data fields. I want to keep the superset of the fields in the index. I.e. initial load the document like {"\_id": 100, "f… --- ## [Using "partial" terms aggregation](https://discuss.elastic.co/t/using-partial-terms-aggregation/251347)
**Author:** [@angauber](https://discuss.elastic.co/u/angauber)\ **Replies:** 0\ **Last updated:** [October 7, 2020, 10:24pm UTC](https://discuss.elastic.co/t/using-partial-terms-aggregation/251347 "2020-10-07T22:24:06Z")
I have populate a test index with the following data: /test/\_bulk {"index": {}} {"types": \[1, 2, 4\]} {"index": {}} {"types": \[3\]} {"index": {}} {"types": \[1, 4\]} On that index I'm trying to a build a query where I filt… --- ## [Shard allocation not working](https://discuss.elastic.co/t/shard-allocation-not-working/250720)
**Author:** [@jdambly](https://discuss.elastic.co/u/jdambly)\ **Replies:** 2\ **Last updated:** [October 7, 2020, 7:05pm UTC](https://discuss.elastic.co/t/shard-allocation-not-working/250720 "2020-10-07T19:05:20Z")
ECK Version: 1.2.1 ElasticSearch Version: 7.9.2 I'm trying to tier my storage in my ES clusters, I have 12 data nodes, 6 are label hot (node.attr.data: hot) and 6 are labeled warm (node.attr.data: warm) I set the shar… --- ## [All data nodes are visible in the elasticHQ](https://discuss.elastic.co/t/all-data-nodes-are-visible-in-the-elastichq/250830)
**Author:** [@keraghu](https://discuss.elastic.co/u/keraghu)\ **Replies:** 1\ **Last updated:** [October 7, 2020, 6:51pm UTC](https://discuss.elastic.co/t/all-data-nodes-are-visible-in-the-elastichq/250830 "2020-10-07T18:51:43Z")
As in the portainer i can see that there 3 data nodes and 1 master nodes are running, but when i see in the elasticHQ, it is showing only 1 master and 1 data node.. Can you please help me how to make it visible all the… --- ## [Stateful or cached search](https://discuss.elastic.co/t/stateful-or-cached-search/250872)
**Author:** [@vadben](https://discuss.elastic.co/u/vadben)\ **Replies:** 4\ **Last updated:** [October 7, 2020, 6:35pm UTC](https://discuss.elastic.co/t/stateful-or-cached-search/250872 "2020-10-07T18:35:44Z")
hi all, I wondering if there is some possibility to store (cache) a result set under some name or ID and use it in further queries, combining with new constraints? We use only the filter context and the index is relative… --- ## [Does increase refresh\_rate effect indexing time?](https://discuss.elastic.co/t/does-increase-refresh-rate-effect-indexing-time/251058)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 7\ **Last updated:** [October 7, 2020, 2:44pm UTC](https://discuss.elastic.co/t/does-increase-refresh-rate-effect-indexing-time/251058 "2020-10-07T14:44:15Z")
Like the title states. I am seeing indexing time on certain writes jump to close 30 seconds. I have configure all my index's refresh rate to 30 seconds. Is this normal? I have also bump machine by doubling the CPU fr… --- ## [Query for matching and not matching at same level](https://discuss.elastic.co/t/query-for-matching-and-not-matching-at-same-level/251331)
**Author:** [@Gopal\_Chauhan](https://discuss.elastic.co/u/Gopal_Chauhan)\ **Replies:** 1\ **Last updated:** [October 7, 2020, 6:15pm UTC](https://discuss.elastic.co/t/query-for-matching-and-not-matching-at-same-level/251331 "2020-10-07T18:15:42Z")
Hi , I have kind of below data in ES (version 6.2). I am trying to write a query with below condition Addresses.Type="Home" and Addresses.Suspended \<\> "B" and Addresses.Suspended \<\> "Y". these three condition should … --- ## [Watcher case unit alert](https://discuss.elastic.co/t/watcher-case-unit-alert/251330)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 0\ **Last updated:** [October 7, 2020, 6:07pm UTC](https://discuss.elastic.co/t/watcher-case-unit-alert/251330 "2020-10-07T18:07:47Z")
Good afternoon I'm trying to configure an alert in a unitary way, I mean, that from a field, I get out or equal to a term that I define; what I need is a term that I ask from the field "monitor.name.keyword" to get from … --- ## [Would Data Too Large CiricuitBreakingException cause a node to go down?](https://discuss.elastic.co/t/would-data-too-large-ciricuitbreakingexception-cause-a-node-to-go-down/251315)
**Author:** [@Jtomage](https://discuss.elastic.co/u/Jtomage)\ **Replies:** 0\ **Last updated:** [October 7, 2020, 4:44pm UTC](https://discuss.elastic.co/t/would-data-too-large-ciricuitbreakingexception-cause-a-node-to-go-down/251315 "2020-10-07T16:44:53Z")
Currently running Elasticsearch 7.0.1 Going through some logging data after being reported that a node has failed / the search application is not working. I m currently seeing a lot of CircuitBreakingException, Data too… --- ## [ES 7.9.2 showing wrong results for \_cat/allocation API](https://discuss.elastic.co/t/es-7-9-2-showing-wrong-results-for-cat-allocation-api/251324)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 0\ **Last updated:** [October 7, 2020, 5:28pm UTC](https://discuss.elastic.co/t/es-7-9-2-showing-wrong-results-for-cat-allocation-api/251324 "2020-10-07T17:28:00Z")
Hi Team, We have recently installed ES 7.9.2, When i look at the \_cat/allocation API it is showing wrong results for disk.used column. Below are the details shards disk.indices disk.used disk.avail disk.total 6 … --- ## [Error - No handler for type \[wildcard\]](https://discuss.elastic.co/t/error-no-handler-for-type-wildcard/251157)
**Author:** [@ojoaquin](https://discuss.elastic.co/u/ojoaquin)\ **Replies:** 5\ **Last updated:** [October 7, 2020, 4:54pm UTC](https://discuss.elastic.co/t/error-no-handler-for-type-wildcard/251157 "2020-10-07T16:54:56Z")
Hi, I'm trying to experiment with the wildcard field since i'm trying to perform queries over text fields that seem to fit perfectly with the description in this article: https://www.elastic.co/blog/find-strings-within-s… --- ## [Email Domain Normalizer](https://discuss.elastic.co/t/email-domain-normalizer/251316)
**Author:** [@Si\_Si](https://discuss.elastic.co/u/Si_Si)\ **Replies:** 0\ **Last updated:** [October 7, 2020, 4:45pm UTC](https://discuss.elastic.co/t/email-domain-normalizer/251316 "2020-10-07T16:45:30Z")
Anyone know how i would add a searchable domain keyword field in elasticsearch, i tried using patterns but had no luck with it. --- ## [Snaphost Creation to S3 for huge indexes](https://discuss.elastic.co/t/snaphost-creation-to-s3-for-huge-indexes/251299)
**Author:** [@awstrain34](https://discuss.elastic.co/u/awstrain34)\ **Replies:** 0\ **Last updated:** [October 7, 2020, 3:47pm UTC](https://discuss.elastic.co/t/snaphost-creation-to-s3-for-huge-indexes/251299 "2020-10-07T15:47:37Z")
Hello All, Looking for suggestions! We have multiple indices in ES with size greater than 8TB. We are trying to create a snapshot of the indices to s3 and then restore it to another cluster. From initial tests, we esti… --- ## [Query Optimization](https://discuss.elastic.co/t/query-optimization/251258)
**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\ **Replies:** 1\ **Last updated:** [October 7, 2020, 2:41pm UTC](https://discuss.elastic.co/t/query-optimization/251258 "2020-10-07T14:41:20Z")
We have Elastic v 7.8.0 We have monthly indices for each client, i.e: client\_data\_{cliendId}\_2020-09. 1 primary shard, 1 replica for each index. One of the queries are taking too much time, and I'm trying understand w… --- ## [Searching word with special characters](https://discuss.elastic.co/t/searching-word-with-special-characters/251244)
**Author:** [@Kevin\_Juliano](https://discuss.elastic.co/u/Kevin_Juliano)\ **Replies:** 6\ **Last updated:** [October 7, 2020, 2:33pm UTC](https://discuss.elastic.co/t/searching-word-with-special-characters/251244 "2020-10-07T14:33:32Z")
Hi! I am having a little problem, I wanted to search a word on elasticsearch but the result that I am expecting is not coming up because it has a tailing special character. Here’s an example: The result that I want to … --- ## [Index Block Read - Elasticsearch](https://discuss.elastic.co/t/index-block-read-elasticsearch/251280)
**Author:** [@Luan\_Souza](https://discuss.elastic.co/u/Luan_Souza)\ **Replies:** 0\ **Last updated:** [October 7, 2020, 1:50pm UTC](https://discuss.elastic.co/t/index-block-read-elasticsearch/251280 "2020-10-07T13:50:09Z")
Hello everyone I was trying to apply a case to elasticsearch by manipulating the index.block.read settings. The idea is the following, as long as the logstash is loading data into a new index, this index remains blocke… --- ## [Issues with GeopIP resolution](https://discuss.elastic.co/t/issues-with-geopip-resolution/251192)
**Author:** [@Roman\_Kournjaev](https://discuss.elastic.co/u/Roman_Kournjaev)\ **Replies:** 4\ **Last updated:** [October 7, 2020, 12:57pm UTC](https://discuss.elastic.co/t/issues-with-geopip-resolution/251192 "2020-10-07T12:57:27Z")
I have issues with GeoIP resolution I have a Google Cloud IP address that resolves in Elasticsearch to "geo" : { "continent\_name" : "North America", "country\_iso\_code" : "US", "location" : { … --- ## [Add policy to indextemplate index templates names are unsorted and not easy to use](https://discuss.elastic.co/t/add-policy-to-indextemplate-index-templates-names-are-unsorted-and-not-easy-to-use/251272)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 0\ **Last updated:** [October 7, 2020, 12:52pm UTC](https://discuss.elastic.co/t/add-policy-to-indextemplate-index-templates-names-are-unsorted-and-not-easy-to-use/251272 "2020-10-07T12:52:55Z")
I have elastic and kibana v"7.9.2" When I want to add ILM to index template by going to ILM-\>action-\>add\_policy\_to\_index button I receive the screen - see attached screenshot the index templates are in unsorted order … --- ## [User password](https://discuss.elastic.co/t/user-password/251268)
**Author:** [@WLM](https://discuss.elastic.co/u/WLM)\ **Replies:** 0\ **Last updated:** [October 7, 2020, 12:22pm UTC](https://discuss.elastic.co/t/user-password/251268 "2020-10-07T12:22:11Z")
How can I prevent a user from changing his password through curl in elasticsearch? How to track from what height the password in elasticsearch was changed using curl? --- ## [Snapshot Repositories are all unwriteable when created in Elasticsearch, they do not inherit parent permissions and have a weird owner](https://discuss.elastic.co/t/snapshot-repositories-are-all-unwriteable-when-created-in-elasticsearch-they-do-not-inherit-parent-permissions-and-have-a-weird-owner/251257)
**Author:** [@c1jt](https://discuss.elastic.co/u/c1jt)\ **Replies:** 0\ **Last updated:** [October 7, 2020, 11:21am UTC](https://discuss.elastic.co/t/snapshot-repositories-are-all-unwriteable-when-created-in-elasticsearch-they-do-not-inherit-parent-permissions-and-have-a-weird-owner/251257 "2020-10-07T11:21:13Z")
Hello! Here's a riddle: I have two Dockered Elastic stacks on two different networks: Stack A and Stack B. Both have a CIFS backup mounted with the same /etc/fstab line. Both use the same docker-compose lines to mount… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=790) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=792)