# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=822 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 823 --- ## [ES 7.8.0 showing some component vulnerabilities](https://discuss.elastic.co/t/es-7-8-0-showing-some-component-vulnerabilities/246787)
**Author:** [@SudhaPottipati](https://discuss.elastic.co/u/SudhaPottipati)\ **Replies:** 0\ **Last updated:** [August 28, 2020, 3:45pm UTC](https://discuss.elastic.co/t/es-7-8-0-showing-some-component-vulnerabilities/246787 "2020-08-28T15:45:13Z")
When scanned with OSS tool, we are getting some vulnerabilities with few components. Opendistro is upgraded to 1.9.0 which is latest version is any higher version with these fixes? --- ## [Find updated documents](https://discuss.elastic.co/t/find-updated-documents/246789)
**Author:** [@mohdidriskj](https://discuss.elastic.co/u/mohdidriskj)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 2:10am UTC](https://discuss.elastic.co/t/find-updated-documents/246789 "2020-08-31T02:10:36Z")
Hi, Is there a way in elastic search to trigger an alert or the entire document, whenever INSERT/UPDATE is performed on the document? --- ## [Elastic search failed to start](https://discuss.elastic.co/t/elastic-search-failed-to-start/246845)
**Author:** [@cosmin\_purcarea](https://discuss.elastic.co/u/cosmin_purcarea)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 2:05am UTC](https://discuss.elastic.co/t/elastic-search-failed-to-start/246845 "2020-08-31T02:05:05Z")
Hi I just try to install elasticsearch on my server but not start. ' yum info elasticsearch Loaded plugins: fastestmirror, universal-hooks Loading mirror speeds from cached hostfile \* EA4: 208.74.123.61 \* cpanel-ad… --- ## [Automatically delete month old indices every month](https://discuss.elastic.co/t/automatically-delete-month-old-indices-every-month/246535)
**Author:** [@mark.santos](https://discuss.elastic.co/u/mark.santos)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 1:44am UTC](https://discuss.elastic.co/t/automatically-delete-month-old-indices-every-month/246535 "2020-08-31T01:44:35Z")
Hi everyone, I am new to Elasticsearch. I received an email notification that says " Your cluster is near its limit for storage space.". Btw, I am using function beat to transport logs from AWS Cloudwatch to Kibana. I wa… --- ## [Incomprehensible Elasticsearch behaviour](https://discuss.elastic.co/t/incomprehensible-elasticsearch-behaviour/246397)
**Author:** [@Hristo\_Angelov](https://discuss.elastic.co/u/Hristo_Angelov)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 1:43am UTC](https://discuss.elastic.co/t/incomprehensible-elasticsearch-behaviour/246397 "2020-08-31T01:43:33Z")
I'm running a two nodes elasticsearch cluster(v. 5.6.10) which I monitor and I notice some interesting graphs which I can't understand. The first one is a graph of merge operations over time: As far as I can see it's … --- ## [Minimum\_should\_match ignored when match only produces 1 term?](https://discuss.elastic.co/t/minimum-should-match-ignored-when-match-only-produces-1-term/246313)
**Author:** [@Altiano\_Gerung](https://discuss.elastic.co/u/Altiano_Gerung)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 1:18am UTC](https://discuss.elastic.co/t/minimum-should-match-ignored-when-match-only-produces-1-term/246313 "2020-08-31T01:18:42Z")
"match": { "product.name.full": { "query": "chicken", "minimum\_should\_match": 3 } } will always match, but if I provide it with input that can produce \>2 terms like this: "match": { "product.name.full": … --- ## [Elastic is\_write\_index vs index\_routing in alias](https://discuss.elastic.co/t/elastic-is-write-index-vs-index-routing-in-alias/246017)
**Author:** [@Altiano\_Gerung](https://discuss.elastic.co/u/Altiano_Gerung)\ **Replies:** 5\ **Last updated:** [August 31, 2020, 1:17am UTC](https://discuss.elastic.co/t/elastic-is-write-index-vs-index-routing-in-alias/246017 "2020-08-31T01:17:55Z")
It seems like alias has the same feature with two different names, What is the different between this two actually? When to use one over the other? --- ## [Which nodes should be provided in logstash](https://discuss.elastic.co/t/which-nodes-should-be-provided-in-logstash/246868)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 1\ **Last updated:** [August 30, 2020, 11:24am UTC](https://discuss.elastic.co/t/which-nodes-should-be-provided-in-logstash/246868 "2020-08-30T11:24:41Z")
Hi All, We have a cluster 6 nodes (1 coordinating node, 5 data node out of which 3 are master node) Can you please suggest which node needs to be provided in logstash file, should we give all the nodes of cluster or on… --- ## [Elastic Aggregation: How to analyze the aggregation within an analyzed aggregation](https://discuss.elastic.co/t/elastic-aggregation-how-to-analyze-the-aggregation-within-an-analyzed-aggregation/246871)
**Author:** [@Ubeta](https://discuss.elastic.co/u/Ubeta)\ **Replies:** 0\ **Last updated:** [August 30, 2020, 10:13am UTC](https://discuss.elastic.co/t/elastic-aggregation-how-to-analyze-the-aggregation-within-an-analyzed-aggregation/246871 "2020-08-30T10:13:52Z")
I am trying to use an analyzer within a analzyer on a field and get it's aggregation if that makes sense. eg. Field1.value: 'A01/00 | A02/01 | B01/00' Field2.value: 'A01/01 | C02/01 | D01/00' Currently, I have a custo… --- ## [Is it safe to expose Elasticsearch to the Internet?](https://discuss.elastic.co/t/is-it-safe-to-expose-elasticsearch-to-the-internet/246862)
**Author:** [@dansei](https://discuss.elastic.co/u/dansei)\ **Replies:** 4\ **Last updated:** [August 30, 2020, 7:26am UTC](https://discuss.elastic.co/t/is-it-safe-to-expose-elasticsearch-to-the-internet/246862 "2020-08-30T07:26:55Z")
If you search the web for info on publicly-accessible Elasticsearch instances, you'll find a lot of articles about ransomware attacks in which databases were hijacked. You'll find this DZone article from 2017 that says … --- ## [Elasticsearch configuration is Failing](https://discuss.elastic.co/t/elasticsearch-configuration-is-failing/246863)
**Author:** [@Vinit\_Kumar](https://discuss.elastic.co/u/Vinit_Kumar)\ **Replies:** 0\ **Last updated:** [August 30, 2020, 5:01am UTC](https://discuss.elastic.co/t/elasticsearch-configuration-is-failing/246863 "2020-08-30T05:01:15Z")
Hi all, Need your help. I have integrated Camunda BPM in my spring boot application with MySQL (to store Camunda varibales and data) and elasticsearch (to store real business application data), and it was working file. … --- ## [Snapshot delete understanding](https://discuss.elastic.co/t/snapshot-delete-understanding/246783)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 6\ **Last updated:** [August 30, 2020, 2:11am UTC](https://discuss.elastic.co/t/snapshot-delete-understanding/246783 "2020-08-30T02:11:57Z")
Lets say when I run first snapshot it creates full backup and my snapshot name is 08-29-2020 now I created another one tomorrow and by default it will do incremental named 8-30-2020 now I created third one which will … --- ## [Elastic dump creates index, but index not found in elastic search](https://discuss.elastic.co/t/elastic-dump-creates-index-but-index-not-found-in-elastic-search/246830)
**Author:** [@Rahul\_Seetharaman](https://discuss.elastic.co/u/Rahul_Seetharaman)\ **Replies:** 2\ **Last updated:** [August 29, 2020, 10:55pm UTC](https://discuss.elastic.co/t/elastic-dump-creates-index-but-index-not-found-in-elastic-search/246830 "2020-08-29T22:55:11Z")
I am using the elastic dump command to push my data to Elasticsearch running locally on port 9200. While elasticdump command itself does not give any error, while doing curl localhost:9200/{index\_name} I get the follo… --- ## [Elastic search entry has JSON escaped in the message field](https://discuss.elastic.co/t/elastic-search-entry-has-json-escaped-in-the-message-field/246856)
**Author:** [@jordanr](https://discuss.elastic.co/u/jordanr)\ **Replies:** 0\ **Last updated:** [August 29, 2020, 8:43pm UTC](https://discuss.elastic.co/t/elastic-search-entry-has-json-escaped-in-the-message-field/246856 "2020-08-29T20:43:27Z")
Good afternoon, we are configuring our elastic search stack and struggling with getting the message inside elastic search to reflect the format we desire. We have php logs going to standard out, and the message is corre… --- ## [Updating document in elasticsearch](https://discuss.elastic.co/t/updating-document-in-elasticsearch/246587)
**Author:** [@pksinghal](https://discuss.elastic.co/u/pksinghal)\ **Replies:** 1\ **Last updated:** [August 29, 2020, 2:55pm UTC](https://discuss.elastic.co/t/updating-document-in-elasticsearch/246587 "2020-08-29T14:55:35Z")
Hi, We are indexing user profile data to elasticsearch. We are creating monthly index and indexing user to a particular index based on user last visit. So whenever a user visits, we first check user data in elasticsear… --- ## [How to write in query](https://discuss.elastic.co/t/how-to-write-in-query/246844)
**Author:** [@zellu\_rakib](https://discuss.elastic.co/u/zellu_rakib)\ **Replies:** 1\ **Last updated:** [August 29, 2020, 2:00pm UTC](https://discuss.elastic.co/t/how-to-write-in-query/246844 "2020-08-29T14:00:35Z")
I want to write this mysql query on my ES. select c.\* ,u.name as createrName,cj.job\_title as Jobtitle,u.avathar,u.avatar\_color,u.email as createrEmail from candidates as c inner join candidate\_jobs as cj on cj.candidate… --- ## [Index creation in Elastic Search using Python in 5.4 Version](https://discuss.elastic.co/t/index-creation-in-elastic-search-using-python-in-5-4-version/246674)
**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\ **Replies:** 2\ **Last updated:** [August 29, 2020, 10:32am UTC](https://discuss.elastic.co/t/index-creation-in-elastic-search-using-python-in-5-4-version/246674 "2020-08-29T10:32:43Z")
I am not able to create index in Elastic Search for version 5.4. Same code i am able to do it for 7.8 Version --- ## [New node high cpu](https://discuss.elastic.co/t/new-node-high-cpu/246839)
**Author:** [@12\_auqf](https://discuss.elastic.co/u/12_auqf)\ **Replies:** 1\ **Last updated:** [August 29, 2020, 10:23am UTC](https://discuss.elastic.co/t/new-node-high-cpu/246839 "2020-08-29T10:23:35Z")
my es(6.7) cluster add a new node, and the new node's CPU is very high, by the hot\_threads, I found the thread "Lucene Merge" is occupy the cpu, and the other's no, why? --- ## [Limitation of ISM feature](https://discuss.elastic.co/t/limitation-of-ism-feature/246824)
**Author:** [@pinakinab](https://discuss.elastic.co/u/pinakinab)\ **Replies:** 1\ **Last updated:** [August 29, 2020, 8:04am UTC](https://discuss.elastic.co/t/limitation-of-ism-feature/246824 "2020-08-29T08:04:37Z")
As per ES Pricing documentation, basic version of elasticsearch also has a feature of Index Lifecycle Management. If we have a basic security for ES, then do we need to have special permissions to enable Index Lifecycle … --- ## [Master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster/246411)
**Author:** [@galvin1234](https://discuss.elastic.co/u/galvin1234)\ **Replies:** 2\ **Last updated:** [August 29, 2020, 7:39am UTC](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster/246411 "2020-08-29T07:39:33Z")
ES V7.9.0 I had used ES V7.6.0 with default configuration, but in V7.9.0 I am facing above mentioned issue. I looked into output of both the versions and found that V7.6.0 was able to generate "cluster\_uuid" : "7PaoDB… --- ## [Illegal Argument Eeption](https://discuss.elastic.co/t/illegal-argument-eeption/245334)
**Author:** [@TomWBM](https://discuss.elastic.co/u/TomWBM)\ **Replies:** 18\ **Last updated:** [August 29, 2020, 2:00am UTC](https://discuss.elastic.co/t/illegal-argument-eeption/245334 "2020-08-29T02:00:21Z")
Opening my Kibana Dashboard on my standalone ELK implementation I get the referenced error, detailed ouput below: { "took": 906, "timed\_out": false, "num\_reduce\_phases": 8, "\_shards": { "total": 74, "suc… --- ## [Performance weird stuff](https://discuss.elastic.co/t/performance-weird-stuff/246117)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 12\ **Last updated:** [August 28, 2020, 9:57pm UTC](https://discuss.elastic.co/t/performance-weird-stuff/246117 "2020-08-28T21:57:51Z")
Hello, I have this cluster with 6 ES nodes, 3 logstashes and numbers of servers shippings logs with filebeat. Versions are 6.8.1 for filebeat, 6.6.1for logstash and 6.7.1for ES . Clusterstate is green. The load on … --- ## [I want to get the exact distinct count and the docs in query](https://discuss.elastic.co/t/i-want-to-get-the-exact-distinct-count-and-the-docs-in-query/246330)
**Author:** [@nandalapadu\_shamriya](https://discuss.elastic.co/u/nandalapadu_shamriya)\ **Replies:** 7\ **Last updated:** [August 28, 2020, 5:49pm UTC](https://discuss.elastic.co/t/i-want-to-get-the-exact-distinct-count-and-the-docs-in-query/246330 "2020-08-28T17:49:16Z")
I am new to ES,i have a requirement where i need to get the distinct values and distinct exact count of records till 60000 from elastic search query but my query is always returning the approximate counts only.Can some o… --- ## [Script sorting retun type exception](https://discuss.elastic.co/t/script-sorting-retun-type-exception/246660)
**Author:** [@Muhammad\_Zeeshan](https://discuss.elastic.co/u/Muhammad_Zeeshan)\ **Replies:** 3\ **Last updated:** [August 28, 2020, 5:00pm UTC](https://discuss.elastic.co/t/script-sorting-retun-type-exception/246660 "2020-08-28T17:00:25Z")
I'm trying to sort query results based on script. As nested \_script has type number, for missing value return null throwing exception and return 0 or -1 are useless. Here is error message "Cannot cast null to a primitiv… --- ## [When relocating/initializing 3 or more shards, ES is overloaded, REST API is very slow, Kibana and es-exporter cannot reach ES](https://discuss.elastic.co/t/when-relocating-initializing-3-or-more-shards-es-is-overloaded-rest-api-is-very-slow-kibana-and-es-exporter-cannot-reach-es/246323)
**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\ **Replies:** 5\ **Last updated:** [August 28, 2020, 3:52pm UTC](https://discuss.elastic.co/t/when-relocating-initializing-3-or-more-shards-es-is-overloaded-rest-api-is-very-slow-kibana-and-es-exporter-cannot-reach-es/246323 "2020-08-28T15:52:36Z")
Hello, I am running a TLS-enabled Elastic Stack 7.6.2 (currently running on EKS with kubernetes nodes on AWS m5.4xlarge machines 16CPUs 64GB - these are NOT SSD s) and whenever Elasticsearch relocates/initia… --- ## [Multisearch in order to use the first query result as parameters to the second query](https://discuss.elastic.co/t/multisearch-in-order-to-use-the-first-query-result-as-parameters-to-the-second-query/246751)
**Author:** [@ricardomaximino](https://discuss.elastic.co/u/ricardomaximino)\ **Replies:** 2\ **Last updated:** [August 28, 2020, 1:58pm UTC](https://discuss.elastic.co/t/multisearch-in-order-to-use-the-first-query-result-as-parameters-to-the-second-query/246751 "2020-08-28T13:58:37Z")
If I have an index PEOPLE with personid, name, birthday, relation where the relation is a list that contains the personid of the linked person. How can I use a \_msearch to search for a person and get only the documents … --- ## [ML Population Analysis](https://discuss.elastic.co/t/ml-population-analysis/246697)
**Author:** [@saraKM](https://discuss.elastic.co/u/saraKM)\ **Replies:** 1\ **Last updated:** [August 28, 2020, 1:27pm UTC](https://discuss.elastic.co/t/ml-population-analysis/246697 "2020-08-28T13:27:00Z")
Hi all, I have a population model created as per recipes with configuration as follow: "high\_info\_content(destination.subdomain) over destination.domain" I'm trying to understand how the model is working for this spec… --- ## [Search for documents which does not contains nested items with some condition](https://discuss.elastic.co/t/search-for-documents-which-does-not-contains-nested-items-with-some-condition/246634)
**Author:** [@Filozofer](https://discuss.elastic.co/u/Filozofer)\ **Replies:** 2\ **Last updated:** [August 28, 2020, 1:11pm UTC](https://discuss.elastic.co/t/search-for-documents-which-does-not-contains-nested-items-with-some-condition/246634 "2020-08-28T13:11:42Z")
Hello there ! :slight\_smile: I cannot found a way to retrieve documents which do not have a nested item corresponding to some condition. Let me explain this : I've got an index which contain employees. All employees go… --- ## [Unallocated shards when restoring index from snapshot](https://discuss.elastic.co/t/unallocated-shards-when-restoring-index-from-snapshot/245892)
**Author:** [@vchalmel](https://discuss.elastic.co/u/vchalmel)\ **Replies:** 2\ **Last updated:** [August 28, 2020, 1:02pm UTC](https://discuss.elastic.co/t/unallocated-shards-when-restoring-index-from-snapshot/245892 "2020-08-28T13:02:02Z")
I'm trying to create an index by restoring a custom S3 repo snapshot. (on an elastic cloud deployment) but it doesn't work, The restored index is created but on an unassigned shard. How to either prevent or fix this ? --- ## ["remote certificate is invalid" when attempting to connect through custom Azure function](https://discuss.elastic.co/t/remote-certificate-is-invalid-when-attempting-to-connect-through-custom-azure-function/246762)
**Author:** [@Dennis\_Whalen](https://discuss.elastic.co/u/Dennis_Whalen)\ **Replies:** 0\ **Last updated:** [August 28, 2020, 12:51pm UTC](https://discuss.elastic.co/t/remote-certificate-is-invalid-when-attempting-to-connect-through-custom-azure-function/246762 "2020-08-28T12:51:34Z")
We are running into an issue and thought I might get some help here. We have deployed Elastic into Azure using the marketplace template and are able to establish encrypted connection between Kibana and the cluster with … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=821) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=823)