# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=845 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 846 --- ## [Use envoy proxy between elasticsearch nodes](https://discuss.elastic.co/t/use-envoy-proxy-between-elasticsearch-nodes/243433)
**Author:** [@junhuangli](https://discuss.elastic.co/u/junhuangli)\ **Replies:** 3\ **Last updated:** [August 3, 2020, 8:38pm UTC](https://discuss.elastic.co/t/use-envoy-proxy-between-elasticsearch-nodes/243433 "2020-08-03T20:38:45Z")
Is it possible to use envoy proxy between elasticsearch nodes? The purpose is to enable tls verifications for any communication between nodes through envoy proxy. I am still in the early stage of this task, but would li… --- ## [Updating node certificate on existing cluster](https://discuss.elastic.co/t/updating-node-certificate-on-existing-cluster/243413)
**Author:** [@TonyLuc](https://discuss.elastic.co/u/TonyLuc)\ **Replies:** 2\ **Last updated:** [August 3, 2020, 5:52pm UTC](https://discuss.elastic.co/t/updating-node-certificate-on-existing-cluster/243413 "2020-08-03T17:52:34Z")
Hello there, How to Update node certificate on existing cluster? On-Premise using Version 7.8.0 Node certificate about to expiry. The trusted chain (CAs) remains the same just new node certificate being issued. Where… --- ## [ILM Policy poll interval](https://discuss.elastic.co/t/ilm-policy-poll-interval/243211)
**Author:** [@hemanth49841](https://discuss.elastic.co/u/hemanth49841)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 5:22pm UTC](https://discuss.elastic.co/t/ilm-policy-poll-interval/243211 "2020-08-03T17:22:44Z")
Hi all, In our project environment, we have changed the Cluster ILM poll interval from default (10m) to "1s". Does we face anyindices performance related issues on clusters ? Note : Our cluster size is 3 node. Also ne… --- ## [Looking for systemd startup script examples for Elasticsearch 7.7.0, etc... CentOS 7](https://discuss.elastic.co/t/looking-for-systemd-startup-script-examples-for-elasticsearch-7-7-0-etc-centos-7/243405)
**Author:** [@uf0undzach](https://discuss.elastic.co/u/uf0undzach)\ **Replies:** 3\ **Last updated:** [August 3, 2020, 5:08pm UTC](https://discuss.elastic.co/t/looking-for-systemd-startup-script-examples-for-elasticsearch-7-7-0-etc-centos-7/243405 "2020-08-03T17:08:42Z")
Relatively new to ELK... I inherited this ELK server from another admin, and it appears that it was not installed via conventional means, as there are no x.services files in /systemd/system, etc.. The ELK processes work… --- ## [Continuous index policy targeting specific data](https://discuss.elastic.co/t/continuous-index-policy-targeting-specific-data/243561)
**Author:** [@nickgregz](https://discuss.elastic.co/u/nickgregz)\ **Replies:** 8\ **Last updated:** [August 3, 2020, 3:01pm UTC](https://discuss.elastic.co/t/continuous-index-policy-targeting-specific-data/243561 "2020-08-03T15:01:20Z")
Hello, is it possibly to create an index policy that will continuously delete index data that is older than a certain time frame. Something like the TTL which was deprecated but enabled individual documents to be delet… --- ## [Syncing Mongodb with Elasticsearch](https://discuss.elastic.co/t/syncing-mongodb-with-elasticsearch/243328)
**Author:** [@sandeepsingh](https://discuss.elastic.co/u/sandeepsingh)\ **Replies:** 2\ **Last updated:** [August 3, 2020, 2:15pm UTC](https://discuss.elastic.co/t/syncing-mongodb-with-elasticsearch/243328 "2020-08-03T14:15:06Z")
Hi, I wish to transfer data from Elasticsearch into a Mongodb instance. The data in Elasticsearch is nearly 120 GBs and is continuoly updating with nearly 4GB per day. How do I do it? What I have tried: Logstash is ve… --- ## [How to Replace a failed node with new node with same name and IP](https://discuss.elastic.co/t/how-to-replace-a-failed-node-with-new-node-with-same-name-and-ip/243518)
**Author:** [@Shoaib\_Rashid](https://discuss.elastic.co/u/Shoaib_Rashid)\ **Replies:** 6\ **Last updated:** [August 3, 2020, 1:18pm UTC](https://discuss.elastic.co/t/how-to-replace-a-failed-node-with-new-node-with-same-name-and-ip/243518 "2020-08-03T13:18:51Z")
Hello Everyone I Just want to know is there any way to replace an elasticsearch node with a new node having same name and IP in case of node failure. I have 3 dedicated master nodes and 3 Separate data nodes with repil… --- ## [Winlogbeat not writing all events to Elasticsearch](https://discuss.elastic.co/t/winlogbeat-not-writing-all-events-to-elasticsearch/243559)
**Author:** [@mozam](https://discuss.elastic.co/u/mozam)\ **Replies:** 2\ **Last updated:** [August 3, 2020, 12:42pm UTC](https://discuss.elastic.co/t/winlogbeat-not-writing-all-events-to-elasticsearch/243559 "2020-08-03T12:42:24Z")
Hello, I'm using the Elastic Stack version 7.8.0 ( Winlogbeat -\> Elasticsearch pipeline) in Windows 10 Operating System . Issue : Winlogbeat not capturing all the events generated in Windows Machine. For eg: (Audit tri… --- ## [Using snapshots for replication](https://discuss.elastic.co/t/using-snapshots-for-replication/243520)
**Author:** [@eaa](https://discuss.elastic.co/u/eaa)\ **Replies:** 5\ **Last updated:** [August 3, 2020, 12:20pm UTC](https://discuss.elastic.co/t/using-snapshots-for-replication/243520 "2020-08-03T12:20:58Z")
Hi everyone, Say I can't afford the license required for the CCR feature (https://www.elastic.co/guide/en/elasticsearch/reference/current/xpack-ccr.html) but have two Elasticsearch dbs and need to replicate one into ano… --- ## [Failed to execute \[SearchRequest](https://discuss.elastic.co/t/failed-to-execute-searchrequest/243149)
**Author:** [@jie.li](https://discuss.elastic.co/u/jie.li)\ **Replies:** 5\ **Last updated:** [August 3, 2020, 12:19pm UTC](https://discuss.elastic.co/t/failed-to-execute-searchrequest/243149 "2020-08-03T12:19:02Z")
Hi Guys, i hava issues with qurrey, client is timed out. I am still new to Elasticsearch, please correct me if any wrong. Thanks \[2020-07-30T03:40:04,998\]\[DEBUG\]\[o.e.a.s.TransportSearchAction\] \[node-02\] \[goods04\]\[3\], … --- ## [Can't send csv with watcher](https://discuss.elastic.co/t/cant-send-csv-with-watcher/243323)
**Author:** [@Marvin66](https://discuss.elastic.co/u/Marvin66)\ **Replies:** 3\ **Last updated:** [August 3, 2020, 11:46am UTC](https://discuss.elastic.co/t/cant-send-csv-with-watcher/243323 "2020-08-03T11:46:25Z")
Hi, I've just created my first watcher for sending a pdf report via email and it works fine. When I replace the URL for the pdf report with an URL for a csv file I get the following response: {"statusCode":502,"error":"… --- ## [Timeout exception when connecting to the Elastic search deployed in K8s cluster](https://discuss.elastic.co/t/timeout-exception-when-connecting-to-the-elastic-search-deployed-in-k8s-cluster/243498)
**Author:** [@vanikr](https://discuss.elastic.co/u/vanikr)\ **Replies:** 5\ **Last updated:** [August 3, 2020, 11:12am UTC](https://discuss.elastic.co/t/timeout-exception-when-connecting-to-the-elastic-search-deployed-in-k8s-cluster/243498 "2020-08-03T11:12:52Z")
Error 'Exception in thread "main" java.net.ConnectException: Timeout connecting to \[/IP:80\] at org.elasticsearch.client.RestClient.extractAndWrapCause(RestClient.java:823) at org.elasticsearch.client.RestClient.perfor… --- ## [Does early termination (sorted index) kick in in this case?](https://discuss.elastic.co/t/does-early-termination-sorted-index-kick-in-in-this-case/243370)
**Author:** [@jmlucjav](https://discuss.elastic.co/u/jmlucjav)\ **Replies:** 2\ **Last updated:** [August 3, 2020, 11:27am UTC](https://discuss.elastic.co/t/does-early-termination-sorted-index-kick-in-in-this-case/243370 "2020-08-03T11:27:34Z")
I have such an index (ES 7.4): "index": { "sort.field": "date", "sort.order": "desc", And I query like this: { "sort": \[ "\_score", { "date": { "o… --- ## [How to access ES from hosts other than localhost?](https://discuss.elastic.co/t/how-to-access-es-from-hosts-other-than-localhost/243513)
**Author:** [@Aj\_t](https://discuss.elastic.co/u/Aj_t)\ **Replies:** 2\ **Last updated:** [August 3, 2020, 11:09am UTC](https://discuss.elastic.co/t/how-to-access-es-from-hosts-other-than-localhost/243513 "2020-08-03T11:09:26Z")
I just have one node where I am running ES and Kibana. In addition to the localhost, I would like to access ES from another host (remote\_ip1) as well. But, I would like to avoid setting the network.host to 0.0.0.0. When … --- ## [How to select only one branch in bool query](https://discuss.elastic.co/t/how-to-select-only-one-branch-in-bool-query/242877)
**Author:** [@gitterhh](https://discuss.elastic.co/u/gitterhh)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 11:02am UTC](https://discuss.elastic.co/t/how-to-select-only-one-branch-in-bool-query/242877 "2020-08-03T11:02:20Z")
I have a list of documents \[ { "shortName": "CA", "longName": "California" }, { "shortName": "New York", "longName": "New York" }, \] How to configure the query to select only the first field tha… --- ## [How to filter docs by text field length?](https://discuss.elastic.co/t/how-to-filter-docs-by-text-field-length/242941)
**Author:** [@IlyaEvseev](https://discuss.elastic.co/u/IlyaEvseev)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 10:55am UTC](https://discuss.elastic.co/t/how-to-filter-docs-by-text-field-length/242941 "2020-08-03T10:55:01Z")
There is an ElasticSearch 7.3.2 instance, with index containing "message" field of text type. I need to get all docs with message length longer than 100000 chars (1million): curl -XPOST -H 'Content-Type: application/js… --- ## [java.io.IOException: An established connection was aborted by the software in your host machine](https://discuss.elastic.co/t/java-io-ioexception-an-established-connection-was-aborted-by-the-software-in-your-host-machine/242658)
**Author:** [@chelawatankit](https://discuss.elastic.co/u/chelawatankit)\ **Replies:** 4\ **Last updated:** [August 3, 2020, 10:35am UTC](https://discuss.elastic.co/t/java-io-ioexception-an-established-connection-was-aborted-by-the-software-in-your-host-machine/242658 "2020-08-03T10:35:10Z")
Hi Team, We are using single node cluster of elasticsearch 7.1.1 version on one of our machine. System details as follow OS : windows server 2012 R2 Xmx : 6GB System RAM : 64 GB We are getting following error freque… --- ## [How do i close async high level rest client](https://discuss.elastic.co/t/how-do-i-close-async-high-level-rest-client/243289)
**Author:** [@prutum](https://discuss.elastic.co/u/prutum)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 10:31am UTC](https://discuss.elastic.co/t/how-do-i-close-async-high-level-rest-client/243289 "2020-08-03T10:31:42Z")
Hi, I am using Async high level rest client. I am pushing 400 requests to elastic search using async client. It is performant and gives me good parallelization. However I am not able to figure out how to close the clien… --- ## [\[HADOOP\]Connection and configuration Elastic- Hadoop](https://discuss.elastic.co/t/hadoop-connection-and-configuration-elastic-hadoop/242888)
**Author:** [@LeonardoC](https://discuss.elastic.co/u/LeonardoC)\ **Replies:** 2\ **Last updated:** [August 3, 2020, 10:25am UTC](https://discuss.elastic.co/t/hadoop-connection-and-configuration-elastic-hadoop/242888 "2020-08-03T10:25:30Z")
Hi all, This is my first message on the elastic community. I'm also new to elasticsearch, and little bit more skilled on Hadoop-Spark system. Now, I need to bind Elasticsearch and logstash wth the Hadoop ecosystem, and… --- ## [Analysis of identifiers with dashes](https://discuss.elastic.co/t/analysis-of-identifiers-with-dashes/243350)
**Author:** [@romansitina](https://discuss.elastic.co/u/romansitina)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 10:11am UTC](https://discuss.elastic.co/t/analysis-of-identifiers-with-dashes/243350 "2020-08-03T10:11:54Z")
Hello, I'm trying to solve this issue: I have text Information about CD-3568 can be found in document DKF-98346-B-261 and I need to get it analysed as information about cd-3568 can be found in document dkf 98346 … --- ## [Newbie question - need suggestion - NFS share + 1 node](https://discuss.elastic.co/t/newbie-question-need-suggestion-nfs-share-1-node/243534)
**Author:** [@dan00bielb](https://discuss.elastic.co/u/dan00bielb)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 10:00am UTC](https://discuss.elastic.co/t/newbie-question-need-suggestion-nfs-share-1-node/243534 "2020-08-03T10:00:17Z")
Good morning community, i am a newnubbie to ES and i would like a design suggestion from you. We need to index 5 years old logs taken from a SIEM from a subset of applications, we have one server (system spec should be… --- ## [Master not discovered exception for two node cluster](https://discuss.elastic.co/t/master-not-discovered-exception-for-two-node-cluster/243452)
**Author:** [@abi.mc](https://discuss.elastic.co/u/abi.mc)\ **Replies:** 4\ **Last updated:** [August 3, 2020, 9:56am UTC](https://discuss.elastic.co/t/master-not-discovered-exception-for-two-node-cluster/243452 "2020-08-03T09:56:01Z")
I have setup a two node production ELK cluster using 7.8.0 using docker on two hosts VMs. Transport and HTTP encryption has been enabled. Current master node \[elastic@pelk01 ~\]$ curl -k https://127.0.0.1:9200/\_cat/mast… --- ## [Automatic backup like SLM in 6.8 version](https://discuss.elastic.co/t/automatic-backup-like-slm-in-6-8-version/243344)
**Author:** [@Agzem](https://discuss.elastic.co/u/Agzem)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 9:54am UTC](https://discuss.elastic.co/t/automatic-backup-like-slm-in-6-8-version/243344 "2020-08-03T09:54:08Z")
Hi, I'm playing around with snapshot and restore in elasticsearch trying to do automatic backup, but I noticed that in 6.8 version, SLM policy is not available. Is there any methods to automatically take snapshot other… --- ## [ILM Rollover Alias Issues](https://discuss.elastic.co/t/ilm-rollover-alias-issues/243342)
**Author:** [@snolfi](https://discuss.elastic.co/u/snolfi)\ **Replies:** 0\ **Last updated:** [July 31, 2020, 11:22am UTC](https://discuss.elastic.co/t/ilm-rollover-alias-issues/243342 "2020-07-31T11:22:47Z")
Hi all, i discovered a strange error on elk, regarding ILM. Sometimes it happens that on index-management section i see errors logged in this way: illegal\_argument\_exception: index.lifecycle.rollover\_alias \[metric… --- ## [Avg Aggregation Histogram fields](https://discuss.elastic.co/t/avg-aggregation-histogram-fields/243333)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 9:51am UTC](https://discuss.elastic.co/t/avg-aggregation-histogram-fields/243333 "2020-08-03T09:51:18Z")
Hi I'm working on Elasticsearch since 2015 . Today when I'm going through the documentation I found some interesting stuff i.e PUT metrics\_index/\_doc/1 { "network.name" : "net-1", "latency\_histo" : { "values" : \[0.… --- ## [Using environment variables in elasticsearch config file](https://discuss.elastic.co/t/using-environment-variables-in-elasticsearch-config-file/243390)
**Author:** [@cms95](https://discuss.elastic.co/u/cms95)\ **Replies:** 3\ **Last updated:** [August 3, 2020, 9:37am UTC](https://discuss.elastic.co/t/using-environment-variables-in-elasticsearch-config-file/243390 "2020-08-03T09:37:44Z")
Im trying to use environment variables to define network.host. Ive tried ${var}, var, "{var}", etc all with no luck. ive tried doing whats mentioned here too: https://www.elastic.co/guide/en/elasticsearch/reference/curr… --- ## [Search results returned are incomplete](https://discuss.elastic.co/t/search-results-returned-are-incomplete/243519)
**Author:** [@Phil795](https://discuss.elastic.co/u/Phil795)\ **Replies:** 5\ **Last updated:** [August 3, 2020, 9:31am UTC](https://discuss.elastic.co/t/search-results-returned-are-incomplete/243519 "2020-08-03T09:31:18Z")
I use ES7 to search PDF files. When I search something with match\_phrase, I get 2 word occurrences, even though the document has 59 occurrences. What can be the reason for this? How can I optimize the query? { … --- ## [Performance Optimization for Multi-Index Search on Small Data Set](https://discuss.elastic.co/t/performance-optimization-for-multi-index-search-on-small-data-set/243378)
**Author:** [@Piyush\_Gupta](https://discuss.elastic.co/u/Piyush_Gupta)\ **Replies:** 2\ **Last updated:** [August 3, 2020, 6:29am UTC](https://discuss.elastic.co/t/performance-optimization-for-multi-index-search-on-small-data-set/243378 "2020-08-03T06:29:46Z")
We have different document structures/schema that we on-board into different indices. We have ~50 such indices, and one of our primary use cases is to perform search across all these document types i.e. across all 50 ind… --- ## [Creating a raw field mapping searchable by regexes with spaces](https://discuss.elastic.co/t/creating-a-raw-field-mapping-searchable-by-regexes-with-spaces/243117)
**Author:** [@Supermathie](https://discuss.elastic.co/u/Supermathie)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 8:59am UTC](https://discuss.elastic.co/t/creating-a-raw-field-mapping-searchable-by-regexes-with-spaces/243117 "2020-08-03T08:59:26Z")
On Elastic 6.6, I'm trying to create an index that supports a regex search when the regex has spaces in it. I see older references to not\_analyzed that no longer apply to modern versions of Elasticsearch. I've tried, f… --- ## [Documents with date (epoch\_millis) sent in bursts and not in time-increasing order are indexed stragely](https://discuss.elastic.co/t/documents-with-date-epoch-millis-sent-in-bursts-and-not-in-time-increasing-order-are-indexed-stragely/243332)
**Author:** [@mujina93](https://discuss.elastic.co/u/mujina93)\ **Replies:** 2\ **Last updated:** [August 3, 2020, 7:47am UTC](https://discuss.elastic.co/t/documents-with-date-epoch-millis-sent-in-bursts-and-not-in-time-increasing-order-are-indexed-stragely/243332 "2020-08-03T07:47:56Z")
Does elasticsearch expect the date field to be in increasing order? I am sending docs from python using elasticsearch-py. The documents I send are sent in bursts (think sending some documents every random interval, like… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=844) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=846)