# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=823 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 824 --- ## [Search multiple indexes and nested](https://discuss.elastic.co/t/search-multiple-indexes-and-nested/246735)
**Author:** [@chomenko](https://discuss.elastic.co/u/chomenko)\ **Replies:** 1\ **Last updated:** [August 28, 2020, 10:36am UTC](https://discuss.elastic.co/t/search-multiple-indexes-and-nested/246735 "2020-08-28T10:36:21Z")
Is possible to nested query add name index when searching across multiple indexes ? I have this question: query: { bool: { should: \[ { filter: { term: { \_index: "index1" } }, bool: { … --- ## [Routing bug: no routing document get doc id not found, while set specific routing param found the docs](https://discuss.elastic.co/t/routing-bug-no-routing-document-get-doc-id-not-found-while-set-specific-routing-param-found-the-docs/246714)
**Author:** [@hackerwin7](https://discuss.elastic.co/u/hackerwin7)\ **Replies:** 7\ **Last updated:** [August 28, 2020, 10:35am UTC](https://discuss.elastic.co/t/routing-bug-no-routing-document-get-doc-id-not-found-while-set-specific-routing-param-found-the-docs/246714 "2020-08-28T10:35:21Z")
version : 7.6.2 we search the docs: curl xxx.xxx.xxx.xx:9200/index-1/\_search?pretty -H'Content-type: application/json' -d' { "query": { "terms": { "field-1": \["xxxxxxx"\] } } } ' the response body l… --- ## [Need connection pooling sample for node js package (@elatic/elasticsearch)](https://discuss.elastic.co/t/need-connection-pooling-sample-for-node-js-package-elatic-elasticsearch/246739)
**Author:** [@Soumarshi](https://discuss.elastic.co/u/Soumarshi)\ **Replies:** 0\ **Last updated:** [August 28, 2020, 10:32am UTC](https://discuss.elastic.co/t/need-connection-pooling-sample-for-node-js-package-elatic-elasticsearch/246739 "2020-08-28T10:32:08Z")
Is it possible to initiate a connection and add it to a connection pool on startup on node js server? Once it's there, can we re-use the connection for all the API calls. If yes, can anyone please share a sample implemen… --- ## [Forbid primary shard on some node](https://discuss.elastic.co/t/forbid-primary-shard-on-some-node/245078)
**Author:** [@Mathmarc](https://discuss.elastic.co/u/Mathmarc)\ **Replies:** 3\ **Last updated:** [August 28, 2020, 10:31am UTC](https://discuss.elastic.co/t/forbid-primary-shard-on-some-node/245078 "2020-08-28T10:31:50Z")
Hi there, We are deploying a elasticsearch cluster, on kubernetes (using the official helm chart). However, we have an unresolved issue. Our usage of elasticsearch has huge variations in usage. During night, we can hav… --- ## [Latency time increase when switched Elastic Search from Heroku env addon to elastic cloud env](https://discuss.elastic.co/t/latency-time-increase-when-switched-elastic-search-from-heroku-env-addon-to-elastic-cloud-env/245550)
**Author:** [@Soumarshi](https://discuss.elastic.co/u/Soumarshi)\ **Replies:** 4\ **Last updated:** [August 28, 2020, 10:25am UTC](https://discuss.elastic.co/t/latency-time-increase-when-switched-elastic-search-from-heroku-env-addon-to-elastic-cloud-env/245550 "2020-08-28T10:25:30Z")
Our search API is hosted on the AWS environment. Previously we had an add-on on Heroku env for elastic search (v6.7.2) DB. The latency time for the query execution from the search API was less than 500 ms. When we moved … --- ## [Kibana query to find the latest snapshot](https://discuss.elastic.co/t/kibana-query-to-find-the-latest-snapshot/246738)
**Author:** [@sash16](https://discuss.elastic.co/u/sash16)\ **Replies:** 0\ **Last updated:** [August 28, 2020, 10:23am UTC](https://discuss.elastic.co/t/kibana-query-to-find-the-latest-snapshot/246738 "2020-08-28T10:23:43Z")
what would be the kibana query to find the latest snapshot based on start\_epoch. I only need name of the snapshot. other columns can be removed from the output --- ## [Unable to setup PKI Authentication](https://discuss.elastic.co/t/unable-to-setup-pki-authentication/246672)
**Author:** [@filiph](https://discuss.elastic.co/u/filiph)\ **Replies:** 5\ **Last updated:** [August 28, 2020, 10:12am UTC](https://discuss.elastic.co/t/unable-to-setup-pki-authentication/246672 "2020-08-28T10:12:10Z")
Hi, I'm trying to setup PKI authentication on my on-premises cluster. However, I can't make it work no matter what I try to do. Setup: elasticsearch-7.5.2, Linux testing this out with 3 nodes, all on my host all nodes… --- ## [Filter on multiple terms with OR](https://discuss.elastic.co/t/filter-on-multiple-terms-with-or/246731)
**Author:** [@guruprasadkk](https://discuss.elastic.co/u/guruprasadkk)\ **Replies:** 0\ **Last updated:** [August 28, 2020, 9:22am UTC](https://discuss.elastic.co/t/filter-on-multiple-terms-with-or/246731 "2020-08-28T09:22:44Z")
Is there any way in elastic search to filter on multiple terms. One of the field in our elastic document is language\_code. I want to set the filter in boolqueryfilter something like below boolQueryBuilder.filter(langua… --- ## [Deux versions elasticsearch sur la même machine](https://discuss.elastic.co/t/deux-versions-elasticsearch-sur-la-meme-machine/246638)
**Author:** [@EAmel](https://discuss.elastic.co/u/EAmel)\ **Replies:** 2\ **Last updated:** [August 28, 2020, 9:10am UTC](https://discuss.elastic.co/t/deux-versions-elasticsearch-sur-la-meme-machine/246638 "2020-08-28T09:10:15Z")
Bonjour, Est-il possible d'installer deux versions ES (5.6.x et 6.8.x)sur la même machine ? Si oui comment? sachant que la version 6.8 est déjà installé via le package debian. Je vous remercie de votre aide. --- ## [After Upgrade to 7.9, all documents getting deleted daily in specific Index](https://discuss.elastic.co/t/after-upgrade-to-7-9-all-documents-getting-deleted-daily-in-specific-index/246395)
**Author:** [@NashSLX](https://discuss.elastic.co/u/NashSLX)\ **Replies:** 6\ **Last updated:** [August 28, 2020, 6:41am UTC](https://discuss.elastic.co/t/after-upgrade-to-7-9-all-documents-getting-deleted-daily-in-specific-index/246395 "2020-08-28T06:41:22Z")
Hi everyone! I upgraded our servers to elastic 7.9 recently, but have been unable to index our full dataset ever since then. In fact, every morning at exactly 4AM, all data gets deleted from that, and only that, index. … --- ## [Elasticsearch and Guice](https://discuss.elastic.co/t/elasticsearch-and-guice/246712)
**Author:** [@bhargavkn](https://discuss.elastic.co/u/bhargavkn)\ **Replies:** 0\ **Last updated:** [August 28, 2020, 4:21am UTC](https://discuss.elastic.co/t/elasticsearch-and-guice/246712 "2020-08-28T04:21:53Z")
Hi, I was recently going through elasticsearch's codebase and saw that a using a fork of Guice is being used for dependency injection. With a little more search on the internet (here, and here), it seems that there are … --- ## [Elasticsearch cluster replace ca file](https://discuss.elastic.co/t/elasticsearch-cluster-replace-ca-file/246703)
**Author:** [@ZMMWMY](https://discuss.elastic.co/u/ZMMWMY)\ **Replies:** 0\ **Last updated:** [August 28, 2020, 2:45am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-replace-ca-file/246703 "2020-08-28T02:45:55Z")
How to replace CA files in cluster without downtime I referred to this article Encrypting communications in an Elasticsearch Docker Containeredit when building a cluster Now that I have a new node that wants to join th… --- ## [Index get bigger when indexing or updating](https://discuss.elastic.co/t/index-get-bigger-when-indexing-or-updating/244767)
**Author:** [@mateusd24](https://discuss.elastic.co/u/mateusd24)\ **Replies:** 19\ **Last updated:** [August 27, 2020, 9:49pm UTC](https://discuss.elastic.co/t/index-get-bigger-when-indexing-or-updating/244767 "2020-08-27T21:49:29Z")
Hi people! When i make index/update for many document the elasticsearch index get so much bigger and took 30minutes to get small if no operations is made. some \_settings that i use: "number\_of\_replicas" : 0 "requests… --- ## [Rounding aggregate value](https://discuss.elastic.co/t/rounding-aggregate-value/246678)
**Author:** [@newKibanaUser](https://discuss.elastic.co/u/newKibanaUser)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 6:56pm UTC](https://discuss.elastic.co/t/rounding-aggregate-value/246678 "2020-08-27T18:56:36Z")
I have this query and want "avg\_disk\_usage" to have two decimal values. I am on Elasticsearch version 7.8. Can someone give me a workable fix? Thanks ! GET .monitoring-es\*/\_search { "query": { "bool": { "mus… --- ## [Completion suggester not working as expected for field with array of strings](https://discuss.elastic.co/t/completion-suggester-not-working-as-expected-for-field-with-array-of-strings/246676)
**Author:** [@Srinivasan\_Ramaswamy](https://discuss.elastic.co/u/Srinivasan_Ramaswamy)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 6:29pm UTC](https://discuss.elastic.co/t/completion-suggester-not-working-as-expected-for-field-with-array-of-strings/246676 "2020-08-27T18:29:29Z")
Here is the mapping and how i index the documents PUT http://localhost:9200/tag\_completion/ { "mappings": { "properties": { "title": { "type": "text" }, "tags": { "type": "complet… --- ## [How to ungroup related items from a query](https://discuss.elastic.co/t/how-to-ungroup-related-items-from-a-query/246670)
**Author:** [@ClubberLang](https://discuss.elastic.co/u/ClubberLang)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 5:34pm UTC](https://discuss.elastic.co/t/how-to-ungroup-related-items-from-a-query/246670 "2020-08-27T17:34:13Z")
Hi, I contact you because we are 3 guys trying to solve this problem, without result since weeks :frowning: Maybe you will have some ideas ? suggestions ? Anything :wink: Here is the situation, I have the following bu… --- ## [Elastic not using all RAM](https://discuss.elastic.co/t/elastic-not-using-all-ram/246580)
**Author:** [@Turotakun98](https://discuss.elastic.co/u/Turotakun98)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 4:28pm UTC](https://discuss.elastic.co/t/elastic-not-using-all-ram/246580 "2020-08-27T16:28:15Z")
I have a Ubuntu server with 4GB RAM. After starting kibana and logstash the server have 2.5GB of available RAM. When i try to start elasticsearch service with -Xms1g -Xmx1g it wont start and log the following error The… --- ## [Send delete request only when inserted documents have been persisted](https://discuss.elastic.co/t/send-delete-request-only-when-inserted-documents-have-been-persisted/246456)
**Author:** [@makons](https://discuss.elastic.co/u/makons)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 3:36pm UTC](https://discuss.elastic.co/t/send-delete-request-only-when-inserted-documents-have-been-persisted/246456 "2020-08-27T15:36:28Z")
I'm running upsert, and right after that delete by query, however, some of the documents upserted should be picked up by the following delete request. Is there a chance to send/execute the delete request only after the d… --- ## [Balancing disk usage on large clusters?](https://discuss.elastic.co/t/balancing-disk-usage-on-large-clusters/246477)
**Author:** [@akrzos](https://discuss.elastic.co/u/akrzos)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 2:56pm UTC](https://discuss.elastic.co/t/balancing-disk-usage-on-large-clusters/246477 "2020-08-27T14:56:41Z")
We have a relatively large cluster and one consistent issue we have seen from time to time is inconsistent disk usage balancing because ElasticSearch is balancing by shard count rather than shard resource consumption. B… --- ## [Could not index event to Elasticsearch..cluster currently has \[1000\]/\[1000\] maximum shards open](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-cluster-currently-has-1000-1000-maximum-shards-open/246620)
**Author:** [@ksaha](https://discuss.elastic.co/u/ksaha)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 1:16pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-cluster-currently-has-1000-1000-maximum-shards-open/246620 "2020-08-27T13:16:21Z")
Hi, I have an Elasticsearch cluster with single node. Metricbeat and Filebeat are creating daily new index. The ELK Stack have been working properly from last few months. But from today I am getting the below error: \[2… --- ## [Elasticsearch 7.8 does not stat Java problem](https://discuss.elastic.co/t/elasticsearch-7-8-does-not-stat-java-problem/245902)
**Author:** [@aurimas](https://discuss.elastic.co/u/aurimas)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 12:18pm UTC](https://discuss.elastic.co/t/elasticsearch-7-8-does-not-stat-java-problem/245902 "2020-08-27T12:18:49Z")
Hi, I am trying to fresh install and launch Elasticsearch 7.8 on RHEL 7.8 but I am getting into some kind of Java problems. I want it to run standalone. Tried various ways I found on internet to fix it. But none helpe… --- ## [Logstash cannot send data to elasticsearch](https://discuss.elastic.co/t/logstash-cannot-send-data-to-elasticsearch/246391)
**Author:** [@pranayv66](https://discuss.elastic.co/u/pranayv66)\ **Replies:** 16\ **Last updated:** [August 26, 2020, 11:34am UTC](https://discuss.elastic.co/t/logstash-cannot-send-data-to-elasticsearch/246391 "2020-08-26T11:34:36Z")
Hi Community, I'm trying to push some data from a data directory from filebeat to logstash and then elasticsearch. The server runs on Centos7 with the installations of all 4 components. I've pasted below the config file… --- ## [First query is slow after every short period of time](https://discuss.elastic.co/t/first-query-is-slow-after-every-short-period-of-time/246591)
**Author:** [@Abhishek\_Chauhan](https://discuss.elastic.co/u/Abhishek_Chauhan)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 9:32am UTC](https://discuss.elastic.co/t/first-query-is-slow-after-every-short-period-of-time/246591 "2020-08-27T09:32:35Z")
Hi, I am using Elasticsearch version 7.6.2 inside a docker container and i use logstash to index data to my ES Node but when i query the ES indexes after a short amount of time, it takes a significant time to return sea… --- ## [Any endpoint could update synonyms files for es cluster](https://discuss.elastic.co/t/any-endpoint-could-update-synonyms-files-for-es-cluster/246590)
**Author:** [@cindy](https://discuss.elastic.co/u/cindy)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 9:28am UTC](https://discuss.elastic.co/t/any-endpoint-could-update-synonyms-files-for-es-cluster/246590 "2020-08-27T09:28:03Z")
Is there any API in es for updating synonyms files or any plan to provide such API interface? API caller only provide synonyms content list, API could update synonyms file on each ES cluster nodes and return update resu… --- ## [How to connect elastic from public address](https://discuss.elastic.co/t/how-to-connect-elastic-from-public-address/245918)
**Author:** [@mmax](https://discuss.elastic.co/u/mmax)\ **Replies:** 6\ **Last updated:** [August 27, 2020, 8:22am UTC](https://discuss.elastic.co/t/how-to-connect-elastic-from-public-address/245918 "2020-08-27T08:22:16Z")
Hi, I have an infrastructure of 20 servers , standalones, no lan, only public ip behind firewall. I would like monitoring them with elk using metricbeats & winlogsbeats My cluster is ok, i tested metricbeats from a vm… --- ## [How to select data from multiple indicess](https://discuss.elastic.co/t/how-to-select-data-from-multiple-indicess/245772)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 7\ **Last updated:** [August 27, 2020, 8:04am UTC](https://discuss.elastic.co/t/how-to-select-data-from-multiple-indicess/245772 "2020-08-27T08:04:40Z")
Hi Everyone, I am new to ELK stack, and I am facing an issue with searching data from multiple indices in single query. I am able to do this from Dev tool but not from Discover or visualization. Can anyone please help … --- ## [NPE for Average based on Scripted Field with missing values](https://discuss.elastic.co/t/npe-for-average-based-on-scripted-field-with-missing-values/246572)
**Author:** [@weand](https://discuss.elastic.co/u/weand)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 7:50am UTC](https://discuss.elastic.co/t/npe-for-average-based-on-scripted-field-with-missing-values/246572 "2020-08-27T07:50:15Z")
Hi, in a kibana data table, we want add an 'average' metric, based on a scripted field. As we want to calculate the average only for a part of the dataset, we tried to rely on the default of the missing field behavior f… --- ## [\[circuit\_breaking\_exception\] \[parent\] Data too large](https://discuss.elastic.co/t/circuit-breaking-exception-parent-data-too-large/246512)
**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\ **Replies:** 13\ **Last updated:** [August 27, 2020, 7:06am UTC](https://discuss.elastic.co/t/circuit-breaking-exception-parent-data-too-large/246512 "2020-08-27T07:06:48Z")
Hi all, since this morning I am getting the following errors from time to time in my ECK elasticsearch 7.9.0 cluster. Version: 7.9.0 Build: 33813 Error at Fetch.\_callee3$ (https://kibana.problem.cluster/33813/bundl… --- ## [Elasticsearch circuit break when snapshot is being taken](https://discuss.elastic.co/t/elasticsearch-circuit-break-when-snapshot-is-being-taken/246552)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 3\ **Last updated:** [August 27, 2020, 6:07am UTC](https://discuss.elastic.co/t/elasticsearch-circuit-break-when-snapshot-is-being-taken/246552 "2020-08-27T06:07:30Z")
We have a 10 node elasticsearch cluster (7.2.0) with the following config -Xms8gb -- (16gb RAM) -Xmx8gb -XX:+UseG1GC -XX:G1ReservePercent=25 -XX:InitiatingHeapOccupancyPercent=30 What we are observing is, occassionally… --- ## [How to push csv data from filebeat to elasticsearch](https://discuss.elastic.co/t/how-to-push-csv-data-from-filebeat-to-elasticsearch/246447)
**Author:** [@singhmac](https://discuss.elastic.co/u/singhmac)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 4:38am UTC](https://discuss.elastic.co/t/how-to-push-csv-data-from-filebeat-to-elasticsearch/246447 "2020-08-27T04:38:24Z")
I am new to elasticsearch , i have csv file data which i need to push into elasticsearch via filebeat. how can i do that? ex: planname1, sunday 5pm, done, 123 planname2, sunday 6pm, pending, 123 when we try this we g… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=822) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=824)