# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=819

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 820

---

## [\[SOLVED\] High Network Traffic on Master Nodes after change from Transport Client to REST Client (ElasticSearch 6.8)](https://discuss.elastic.co/t/solved-high-network-traffic-on-master-nodes-after-change-from-transport-client-to-rest-client-elasticsearch-6-8/247209)

<div class="topic-metadata">

**Author:** [@gotenks82](https://discuss.elastic.co/u/gotenks82)\
**Replies:** 2\
**Last updated:** [September 2, 2020, 10:21pm UTC](https://discuss.elastic.co/t/solved-high-network-traffic-on-master-nodes-after-change-from-transport-client-to-rest-client-elasticsearch-6-8/247209 "2020-09-02T22:21:09Z")

</div>

Hi Everyone! We are trying to migrate from the transport client to the high level rest client in our application, but we noticed a strange network load on the master node. Here's our setup: ElasticSearch 6.8 OSS (no x…

---

## [Failed updating index template when updating to 7.8](https://discuss.elastic.co/t/failed-updating-index-template-when-updating-to-7-8/247247)

<div class="topic-metadata">

**Author:** [@Hernan\_Paszel](https://discuss.elastic.co/u/Hernan_Paszel)\
**Replies:** 1\
**Last updated:** [September 2, 2020, 10:18pm UTC](https://discuss.elastic.co/t/failed-updating-index-template-when-updating-to-7-8/247247 "2020-09-02T22:18:45Z")

</div>

Hi! Recently we updated the stack from 7.5 to 7.8 and everything went smooth. However today we tried to update our index template through Kibana's ui and when saving the changes we got the following message. If I rec…

---

## [Unable to restore snapshots in Elasticsearch](https://discuss.elastic.co/t/unable-to-restore-snapshots-in-elasticsearch/247179)

<div class="topic-metadata">

**Author:** [@Ayush\_Agrahari](https://discuss.elastic.co/u/Ayush_Agrahari)\
**Replies:** 3\
**Last updated:** [September 2, 2020, 9:18pm UTC](https://discuss.elastic.co/t/unable-to-restore-snapshots-in-elasticsearch/247179 "2020-09-02T21:18:50Z")

</div>

I am getting error while restoring Snapshot. Details are mentioned below API Call: 'POST /\_snapshot/elkSnapshots/snapshot-20200830-sdfs/\_restore? { "indices": "\*" }' Error: { "error" : { "root\_cause" : \[ { …

---

## [Curator - create\_index - skip if index already exists](https://discuss.elastic.co/t/curator-create-index-skip-if-index-already-exists/247267)

<div class="topic-metadata">

**Author:** [@Bruceclegg](https://discuss.elastic.co/u/Bruceclegg)\
**Replies:** 0\
**Last updated:** [September 2, 2020, 5:16pm UTC](https://discuss.elastic.co/t/curator-create-index-skip-if-index-already-exists/247267 "2020-09-02T17:16:54Z")

</div>

Periodically I use cron and curator to create indices. Is there a way to build into the action.yml file a mechanism to skip the create\_index action if the named index already exists?

---

## [Elasticsearch installation and configuration issue](https://discuss.elastic.co/t/elasticsearch-installation-and-configuration-issue/247130)

<div class="topic-metadata">

**Author:** [@bogdan.oproescu](https://discuss.elastic.co/u/bogdan.oproescu)\
**Replies:** 24\
**Last updated:** [September 2, 2020, 5:02pm UTC](https://discuss.elastic.co/t/elasticsearch-installation-and-configuration-issue/247130 "2020-09-02T17:02:31Z")

</div>

Hello Elasticsearch forum, My name is Bogdan Oproescu and I am senior data architect for EasyDO Digital Technologies in Bucharest. I am writing you today, to report an issue with our initial Elasticsearch engine configu…

---

## [ELK-log full with errors](https://discuss.elastic.co/t/elk-log-full-with-errors/247017)

<div class="topic-metadata">

**Author:** [@NogNeetMachinaal](https://discuss.elastic.co/u/NogNeetMachinaal)\
**Replies:** 4\
**Last updated:** [September 2, 2020, 4:43pm UTC](https://discuss.elastic.co/t/elk-log-full-with-errors/247017 "2020-09-02T16:43:40Z")

</div>

Team - The log of ElasticSearch is full with errors (see below). Most likely, because of this the system is not working as expected. Any idea what is happening and how to fix this? It is version 7.9 for Elastic and Ki…

---

## [Not able to do sum operation (Sum operation getting error)](https://discuss.elastic.co/t/not-able-to-do-sum-operation-sum-operation-getting-error/247262)

<div class="topic-metadata">

**Author:** [@Moksha20](https://discuss.elastic.co/u/Moksha20)\
**Replies:** 0\
**Last updated:** [September 2, 2020, 4:07pm UTC](https://discuss.elastic.co/t/not-able-to-do-sum-operation-sum-operation-getting-error/247262 "2020-09-02T16:07:54Z")

</div>

Hi , Recently I have migrated to grafana 7.0+ .The same query I used to run previously is not running now. Sample JSON LOG: \<2020-07-31 06:31:56\>:\<Item\_Des\_doc\_id\>:\<High\>:\<Pen\>:\<Datbase\>:\<location\>:\<Item\_Des\>:\<Item\_Id\>…

---

## [Elasticsearch composite aggregate query on nested fields](https://discuss.elastic.co/t/elasticsearch-composite-aggregate-query-on-nested-fields/247260)

<div class="topic-metadata">

**Author:** [@MCRj](https://discuss.elastic.co/u/MCRj)\
**Replies:** 0\
**Last updated:** [September 2, 2020, 3:47pm UTC](https://discuss.elastic.co/t/elasticsearch-composite-aggregate-query-on-nested-fields/247260 "2020-09-02T15:47:21Z")

</div>

I've a question on an aggregation on nested objects. Document is like: { "features": \[{ "key": "key1", "values": \["A", "B"\] }, { "key": "key2", "values…

---

## [Can't access index](https://discuss.elastic.co/t/cant-access-index/247253)

<div class="topic-metadata">

**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\
**Replies:** 2\
**Last updated:** [September 2, 2020, 3:43pm UTC](https://discuss.elastic.co/t/cant-access-index/247253 "2020-09-02T15:43:35Z")

</div>

I can't seem to access my filebeat-\* index. I gets this message which once expanded says: "type": "illegal\_argument\_exception", "reason": "Field \[Date\] of type \[keyword\] does not support custom formats" i T…

---

## [Java RestHighLevelClient missing get single task](https://discuss.elastic.co/t/java-resthighlevelclient-missing-get-single-task/247243)

<div class="topic-metadata">

**Author:** [@Leynch](https://discuss.elastic.co/u/Leynch)\
**Replies:** 2\
**Last updated:** [September 2, 2020, 2:27pm UTC](https://discuss.elastic.co/t/java-resthighlevelclient-missing-get-single-task/247243 "2020-09-02T14:27:15Z")

</div>

Which is the preferred way to get a single running task by ID? I'm looking at these two documentations (v7.9) for using Tasks: REST API Java Client but i can't find a way to get a single Task through the Java client.…

---

## [When adding a script\_field to a result, it results in not being able to compile](https://discuss.elastic.co/t/when-adding-a-script-field-to-a-result-it-results-in-not-being-able-to-compile/247119)

<div class="topic-metadata">

**Author:** [@meadows.120](https://discuss.elastic.co/u/meadows.120)\
**Replies:** 2\
**Last updated:** [September 2, 2020, 2:23pm UTC](https://discuss.elastic.co/t/when-adding-a-script-field-to-a-result-it-results-in-not-being-able-to-compile/247119 "2020-09-02T14:23:43Z")

</div>

ES Version: 7.8 I am trying to use the following to check if a value is present in an array of strings, but I get a runtime error every time: { "script": { "source": "doc\['mediaDetails.tags'\].values.contains('Hig…

---

## [Elasticsearch with ingress received plaintext http traffic on an https channel](https://discuss.elastic.co/t/elasticsearch-with-ingress-received-plaintext-http-traffic-on-an-https-channel/246549)

<div class="topic-metadata">

**Author:** [@dcanales](https://discuss.elastic.co/u/dcanales)\
**Replies:** 2\
**Last updated:** [September 2, 2020, 1:47pm UTC](https://discuss.elastic.co/t/elasticsearch-with-ingress-received-plaintext-http-traffic-on-an-https-channel/246549 "2020-09-02T13:47:56Z")

</div>

Hi, i have the config from https://github.com/elastic/helm-charts/tree/7.9/elasticsearch/examples/security with the next ingress in my values.yaml: ingress: enabled: true annotations: kubernetes.io/ingress.clas…

---

## [Need advice on shards for my index](https://discuss.elastic.co/t/need-advice-on-shards-for-my-index/247143)

<div class="topic-metadata">

**Author:** [@jcannell](https://discuss.elastic.co/u/jcannell)\
**Replies:** 14\
**Last updated:** [September 2, 2020, 1:29pm UTC](https://discuss.elastic.co/t/need-advice-on-shards-for-my-index/247143 "2020-09-02T13:29:27Z")

</div>

Hello all, Setting up an elasticsearch cluster for the first time here. I need some advice on creating my index. This index will store information about emails. The plan is to retain about 10 years worth of message dat…

---

## [InitiatingHeapOccupancyPercent tuning parameter value modification ( 75 to 30 )from 7.0.1 version to 7.8.0 in G1GC for elasticsearch](https://discuss.elastic.co/t/initiatingheapoccupancypercent-tuning-parameter-value-modification-75-to-30-from-7-0-1-version-to-7-8-0-in-g1gc-for-elasticsearch/245760)

<div class="topic-metadata">

**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\
**Replies:** 2\
**Last updated:** [September 2, 2020, 12:22pm UTC](https://discuss.elastic.co/t/initiatingheapoccupancypercent-tuning-parameter-value-modification-75-to-30-from-7-0-1-version-to-7-8-0-in-g1gc-for-elasticsearch/245760 "2020-09-02T12:22:32Z")

</div>

"InitiatingHeapOccupancyPercent" parameter is set to 75 for elasticsearch 7.0.1, which is now updated to 30. Please state the reason why was it changed and what effect did it have. 7.0.1 version's jvm.options snippet: #…

---

## [How can I get old archive of : analysis-icu-linux-x86\_64-6.8.12.zip](https://discuss.elastic.co/t/how-can-i-get-old-archive-of-analysis-icu-linux-x86-64-6-8-12-zip/247216)

<div class="topic-metadata">

**Author:** [@narutobaka1](https://discuss.elastic.co/u/narutobaka1)\
**Replies:** 1\
**Last updated:** [September 2, 2020, 11:37am UTC](https://discuss.elastic.co/t/how-can-i-get-old-archive-of-analysis-icu-linux-x86-64-6-8-12-zip/247216 "2020-09-02T11:37:04Z")

</div>

Hi I'm installing an old version of Elasticsearch : Blockquote \[root@pod2 elasticsearch\]# /usr/share/elasticsearch/bin/elasticsearch --version Version: 6.8.12, Build: default/rpm/7a15d2a/2020-08-12T07:27:20.804867Z, …

---

## [Primary Indices replicating to Warm Node](https://discuss.elastic.co/t/primary-indices-replicating-to-warm-node/246029)

<div class="topic-metadata">

**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\
**Replies:** 9\
**Last updated:** [September 2, 2020, 11:15am UTC](https://discuss.elastic.co/t/primary-indices-replicating-to-warm-node/246029 "2020-09-02T11:15:23Z")

</div>

Hi There, Our current Elasticsearch stack is a 3 node testing cluster with 2 Data and 1 Warm node. All three are master. As per the cluster re-balancing policy its creating index replicas (Primary and replica) on the Wa…

---

## [Deleting Snapshots very slow after update](https://discuss.elastic.co/t/deleting-snapshots-very-slow-after-update/247025)

<div class="topic-metadata">

**Author:** [@Andrew\_DS](https://discuss.elastic.co/u/Andrew_DS)\
**Replies:** 6\
**Last updated:** [September 2, 2020, 11:13am UTC](https://discuss.elastic.co/t/deleting-snapshots-very-slow-after-update/247025 "2020-09-02T11:13:27Z")

</div>

Has anyone else had any issues deleting snapshots after upgrading? I upgraded from 7.5.1 -\> 7.9.0, and now REST calls to DELETE /snapshot/repo-name/snapshot-name take exactly 3 minutes to return. If I call GET /snapsh…

---

## [Lost data on docker](https://discuss.elastic.co/t/lost-data-on-docker/246924)

<div class="topic-metadata">

**Author:** [@alireza\_Rahmani\_khal](https://discuss.elastic.co/u/alireza_Rahmani_khal)\
**Replies:** 7\
**Last updated:** [September 2, 2020, 10:07am UTC](https://discuss.elastic.co/t/lost-data-on-docker/246924 "2020-09-02T10:07:47Z")

</div>

hello this my docker-compose : search: image: docker.elastic.co/elasticsearch/elasticsearch:7.8.1 environment: - container\_name:es01 - bootstrap.memory\_lock:true - "ES\_JAVA\_OPTS=-Xms2g -Xmx2…

---

## [Reindexing elastic search does not return all documents](https://discuss.elastic.co/t/reindexing-elastic-search-does-not-return-all-documents/246687)

<div class="topic-metadata">

**Author:** [@byc-art](https://discuss.elastic.co/u/byc-art)\
**Replies:** 1\
**Last updated:** [September 2, 2020, 9:44am UTC](https://discuss.elastic.co/t/reindexing-elastic-search-does-not-return-all-documents/246687 "2020-09-02T09:44:01Z")

</div>

0 I have about 1.5 million documents in my elastic search. I'm hoping to reindex them so that each index filters documents containing certain keywords, and one ( null index ) that do not contain any of the keywords I sp…

---

## [How can I disable x-pack on ECK](https://discuss.elastic.co/t/how-can-i-disable-x-pack-on-eck/247186)

<div class="topic-metadata">

**Author:** [@packy](https://discuss.elastic.co/u/packy)\
**Replies:** 4\
**Last updated:** [September 2, 2020, 9:06am UTC](https://discuss.elastic.co/t/how-can-i-disable-x-pack-on-eck/247186 "2020-09-02T09:06:33Z")

</div>

Hi , I am using ECK on mips64el platform. However the x-pack does not support mips64el. How can I disable x-pack module ?

---

## [Elasticsearch fuzzy search not working properly with simpleQueryStringQuery](https://discuss.elastic.co/t/elasticsearch-fuzzy-search-not-working-properly-with-simplequerystringquery/247182)

<div class="topic-metadata">

**Author:** [@vaibhavind](https://discuss.elastic.co/u/vaibhavind)\
**Replies:** 1\
**Last updated:** [September 2, 2020, 8:14am UTC](https://discuss.elastic.co/t/elasticsearch-fuzzy-search-not-working-properly-with-simplequerystringquery/247182 "2020-09-02T08:14:58Z")

</div>

I am using ES 7.8 with dependency 7.1.1 in pom.xml with JDK 1.8. I am trying to perform the search on the whole document rather than on specific fields. So I am not using QueryBuilders.matchQuery or QueryBuilders.multiMa…

---

## [Combine ingest and coordinating role at 7.9](https://discuss.elastic.co/t/combine-ingest-and-coordinating-role-at-7-9/246773)

<div class="topic-metadata">

**Author:** [@zakabluk](https://discuss.elastic.co/u/zakabluk)\
**Replies:** 1\
**Last updated:** [September 2, 2020, 8:05am UTC](https://discuss.elastic.co/t/combine-ingest-and-coordinating-role-at-7-9/246773 "2020-09-02T08:05:47Z")

</div>

At 7.8 elastic version I use one node as coordinator only + ingest. But now I want update to 7.9 version. And now I am not able set node.ingest: true for coordinator node. Because I getting error can not explicitly co…

---

## [Authentication settings for active directory: sAMAccountName instead of userPrincipalName](https://discuss.elastic.co/t/authentication-settings-for-active-directory-samaccountname-instead-of-userprincipalname/247105)

<div class="topic-metadata">

**Author:** [@Stanvv](https://discuss.elastic.co/u/Stanvv)\
**Replies:** 2\
**Last updated:** [September 2, 2020, 7:40am UTC](https://discuss.elastic.co/t/authentication-settings-for-active-directory-samaccountname-instead-of-userprincipalname/247105 "2020-09-02T07:40:16Z")

</div>

How can I configure logging in with sAMAccountName instead of userPrincipalName ? We used the LDAP realm before, but due to the lack of support on nested groups switched to active\_directory realm with the following set…

---

## [Elastic Search with Docker compose](https://discuss.elastic.co/t/elastic-search-with-docker-compose/247172)

<div class="topic-metadata">

**Author:** [@nages](https://discuss.elastic.co/u/nages)\
**Replies:** 0\
**Last updated:** [September 2, 2020, 6:00am UTC](https://discuss.elastic.co/t/elastic-search-with-docker-compose/247172 "2020-09-02T06:00:43Z")

</div>

I tried to bring up ES cluster with one node by ingesting some variables,it seems all the variables are not ingested. Is it issue with the syntax or that is how it works ? Here is the compose file ( stripped down versio…

---

## [I'm still able to define a document type in 7.9. Is this a bug?](https://discuss.elastic.co/t/im-still-able-to-define-a-document-type-in-7-9-is-this-a-bug/247125)

<div class="topic-metadata">

**Author:** [@Vitaly\_il](https://discuss.elastic.co/u/Vitaly_il)\
**Replies:** 1\
**Last updated:** [September 2, 2020, 1:48am UTC](https://discuss.elastic.co/t/im-still-able-to-define-a-document-type-in-7-9-is-this-a-bug/247125 "2020-09-02T01:48:27Z")

</div>

By adding a new document this way curl --location --request PUT 'http://localhost:9200/example1/product/1' \\ --header 'Content-Type: application/json' \\ --data-raw '{ "title": "example title", "a…

---

## [Misunderstood ILM](https://discuss.elastic.co/t/misunderstood-ilm/247057)

<div class="topic-metadata">

**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\
**Replies:** 9\
**Last updated:** [September 1, 2020, 8:49pm UTC](https://discuss.elastic.co/t/misunderstood-ilm/247057 "2020-09-01T20:49:48Z")

</div>

I was looking at a solution to delete old logs and I was suggested to set up ILM. I only now realize that ILM rolls over the entire index rather than old entries. If I understand correctly if I set up ILM to 3 months an…

---

## [Watcher Email Configuration not able to send mail:](https://discuss.elastic.co/t/watcher-email-configuration-not-able-to-send-mail/246850)

<div class="topic-metadata">

**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\
**Replies:** 6\
**Last updated:** [September 1, 2020, 8:38pm UTC](https://discuss.elastic.co/t/watcher-email-configuration-not-able-to-send-mail/246850 "2020-09-01T20:38:39Z")

</div>

Continuing the discussion from Watcher email configuration: 1)I am facing this Issue while testing Mail through watcher: 2)This is yml configuration: 3)Secure Password: For the Email Configuration i have do…

---

## [How to ingest old logs into slow storage and newer logs into fast storage](https://discuss.elastic.co/t/how-to-ingest-old-logs-into-slow-storage-and-newer-logs-into-fast-storage/247009)

<div class="topic-metadata">

**Author:** [@ManjaroBlack](https://discuss.elastic.co/u/ManjaroBlack)\
**Replies:** 4\
**Last updated:** [September 1, 2020, 8:23pm UTC](https://discuss.elastic.co/t/how-to-ingest-old-logs-into-slow-storage-and-newer-logs-into-fast-storage/247009 "2020-09-01T20:23:16Z")

</div>

I am experimenting with the Elastic Stack on my laptop. I need to ingest a bunch of logs dating back a few years up to current time. I am using logstash to process the logs and send them to elasticsearch. I have limited …

---

## [Hot-cold setup](https://discuss.elastic.co/t/hot-cold-setup/246858)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 3\
**Last updated:** [September 1, 2020, 7:53pm UTC](https://discuss.elastic.co/t/hot-cold-setup/246858 "2020-09-01T19:53:07Z")

</div>

I have running cluster, five data node with node.attr.box\_type: hot now I would like to introduce cold storage as well I have a node which I will be using as cold storage node.attr.box\_type: cold but most all my i…

---

## [Elasctisearch warning failed to add documents to export bulks](https://discuss.elastic.co/t/elasctisearch-warning-failed-to-add-documents-to-export-bulks/247142)

<div class="topic-metadata">

**Author:** [@chen\_levi1](https://discuss.elastic.co/u/chen_levi1)\
**Replies:** 1\
**Last updated:** [September 1, 2020, 7:20pm UTC](https://discuss.elastic.co/t/elasctisearch-warning-failed-to-add-documents-to-export-bulks/247142 "2020-09-01T19:20:57Z")

</div>

Hi Elasticsearch log is full with the following warning message: \[instance-0000000057\] monitoring execution failed org.elasticsearch.xpack.monitoring.exporter.ExportException: failed to add documents to export bulks at…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=818)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=820)
