# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=86

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 87

---

## [Elasticsearch-7.4.2 getting stuck at having thousands of close\_wait connections with logstash-7.4.3](https://discuss.elastic.co/t/elasticsearch-7-4-2-getting-stuck-at-having-thousands-of-close-wait-connections-with-logstash-7-4-3/364766)

<div class="topic-metadata">

**Author:** [@anshulvika360](https://discuss.elastic.co/u/anshulvika360)\
**Replies:** 1\
**Last updated:** [August 13, 2024, 7:36am UTC](https://discuss.elastic.co/t/elasticsearch-7-4-2-getting-stuck-at-having-thousands-of-close-wait-connections-with-logstash-7-4-3/364766 "2024-08-13T07:36:37Z")

</div>

We are running elasticsearch cluster with two nodes and sending logs from 7 different machines using logstash. Elasticsearch keeps working fine for one or two days until we start seeing close\_wait connections on master n…

---

## [Support for Azure Managed Identity](https://discuss.elastic.co/t/support-for-azure-managed-identity/364787)

<div class="topic-metadata">

**Author:** [@piyushkp](https://discuss.elastic.co/u/piyushkp)\
**Replies:** 3\
**Last updated:** [August 12, 2024, 6:47pm UTC](https://discuss.elastic.co/t/support-for-azure-managed-identity/364787 "2024-08-12T18:47:37Z")

</div>

based on this PR, the support for Azure managed identity is added to the main branch and about to be release in 8.16.0. What is the release date for the 8.16.0 ? also can, you provide the clear instructions or the sampl…

---

## [Fleet Server Private Certificates Error](https://discuss.elastic.co/t/fleet-server-private-certificates-error/363586)

<div class="topic-metadata">

**Author:** [@Nick5](https://discuss.elastic.co/u/Nick5)\
**Replies:** 7\
**Last updated:** [August 12, 2024, 2:45pm UTC](https://discuss.elastic.co/t/fleet-server-private-certificates-error/363586 "2024-08-12T14:45:03Z")

</div>

I have a 3 node Elasticsearch cluster with certificates configured like this: xpack.security.http.ssl: enabled: true key: certs/es1fqdn.key certificate: certs/es1fqdn.cer verification\_mode: certificate certifi…

---

## [Boolean Queries in Net Client](https://discuss.elastic.co/t/boolean-queries-in-net-client/364337)

<div class="topic-metadata">

**Author:** [@alikleitcr7](https://discuss.elastic.co/u/alikleitcr7)\
**Replies:** 5\
**Last updated:** [August 12, 2024, 11:07am UTC](https://discuss.elastic.co/t/boolean-queries-in-net-client/364337 "2024-08-12T11:07:59Z")

</div>

Hello, As pointed out by @flobernd in my Github Issue related to working with the latest net client that the documentation for the latest is very sparse. Therefore, I'm trying to manage the AND operator in the Bool que…

---

## [Elasticsearch 8.14 Upgrade: Resource Already exists exception](https://discuss.elastic.co/t/elasticsearch-8-14-upgrade-resource-already-exists-exception/364765)

<div class="topic-metadata">

**Author:** [@Abhishek\_Soni1](https://discuss.elastic.co/u/Abhishek_Soni1)\
**Replies:** 3\
**Last updated:** [August 12, 2024, 9:34am UTC](https://discuss.elastic.co/t/elasticsearch-8-14-upgrade-resource-already-exists-exception/364765 "2024-08-12T09:34:17Z")

</div>

Hi I am trying to upgrade elasticsearch from 7.17 to 8.14.3, during upgrade, I found these exceptions, I don't know how to solve it. \[2024-08-12T03:31:11,986\]\[DEBUG\]\[o.e.a.s.m.TransportMasterNodeAction\] \[achillelheel01\]…

---

## [Very slow aggregate query with 15 M of records](https://discuss.elastic.co/t/very-slow-aggregate-query-with-15-m-of-records/364742)

<div class="topic-metadata">

**Author:** [@DevYSM](https://discuss.elastic.co/u/DevYSM)\
**Replies:** 6\
**Last updated:** [August 12, 2024, 8:21am UTC](https://discuss.elastic.co/t/very-slow-aggregate-query-with-15-m-of-records/364742 "2024-08-12T08:21:35Z")

</div>

Hello, I have an index that has more than 15M records of website logs but while I'm trying to do an aggregation to sum the total of some fields the request takes a long time more than 10 seconds and after that gives me a…

---

## [Elastic Search Regex are not working as expected](https://discuss.elastic.co/t/elastic-search-regex-are-not-working-as-expected/364651)

<div class="topic-metadata">

**Author:** [@Akesh\_Jadhav](https://discuss.elastic.co/u/Akesh_Jadhav)\
**Replies:** 5\
**Last updated:** [August 12, 2024, 5:02am UTC](https://discuss.elastic.co/t/elastic-search-regex-are-not-working-as-expected/364651 "2024-08-12T05:02:38Z")

</div>

have go the problem in making Elasticsearch regex work. I have a document that looks like this: {"content": "My name is Akesh Jadhav."} I have tried the following regex "Akesh\\sJadhav" to match the Akesh Jadhav with th…

---

## [Phrase prefix query is not working with pagination](https://discuss.elastic.co/t/phrase-prefix-query-is-not-working-with-pagination/364657)

<div class="topic-metadata">

**Author:** [@Aryan11](https://discuss.elastic.co/u/Aryan11)\
**Replies:** 2\
**Last updated:** [August 12, 2024, 4:39am UTC](https://discuss.elastic.co/t/phrase-prefix-query-is-not-working-with-pagination/364657 "2024-08-12T04:39:09Z")

</div>

The following query does not give any results when the from parameter is greater than 50. The number of hits also reduces as this parameter is gradulaly increased from 0. This works as expected if the query type is bool\_…

---

## [Unable to set \_id in bulk index with raw source documents](https://discuss.elastic.co/t/unable-to-set-id-in-bulk-index-with-raw-source-documents/364737)

<div class="topic-metadata">

**Author:** [@VenkatSana](https://discuss.elastic.co/u/VenkatSana)\
**Replies:** 3\
**Last updated:** [August 12, 2024, 2:34am UTC](https://discuss.elastic.co/t/unable-to-set-id-in-bulk-index-with-raw-source-documents/364737 "2024-08-12T02:34:42Z")

</div>

I've tried to bulk index a bunch of JSON raw records into ES, and I needed to set custom \_id values for them. Individual indexing works by calling "IndexQueryBuilder().withId(some\_id\_value)" and then calling the individu…

---

## [Examples for Elastic Span compression](https://discuss.elastic.co/t/examples-for-elastic-span-compression/364186)

<div class="topic-metadata">

**Author:** [@navya\_k](https://discuss.elastic.co/u/navya_k)\
**Replies:** 2\
**Last updated:** [August 12, 2024, 1:48am UTC](https://discuss.elastic.co/t/examples-for-elastic-span-compression/364186 "2024-08-12T01:48:24Z")

</div>

Hello Team, Need help on span compression.currently we are using 8.13 and would like to understand span compression as it reduce overhead on cluster. As part of eligibility I read exit spans are eligible. In elastic h…

---

## [Elasticsearch service not strated](https://discuss.elastic.co/t/elasticsearch-service-not-strated/364699)

<div class="topic-metadata">

**Author:** [@SAMY-ELK](https://discuss.elastic.co/u/SAMY-ELK)\
**Replies:** 1\
**Last updated:** [August 11, 2024, 5:54pm UTC](https://discuss.elastic.co/t/elasticsearch-service-not-strated/364699 "2024-08-11T17:54:27Z")

</div>

hello, i cannot start service elasticsearch after unpatch/uninstall readonlyrest Plugin. log Error : Aug 09 10:26:57 SRV027 systemd-entrypoint\[660337\]: Error: Could not find or load main class org.elasticsearch.common…

---

## [How can I use stopFilter for english and french words in a unique match query?](https://discuss.elastic.co/t/how-can-i-use-stopfilter-for-english-and-french-words-in-a-unique-match-query/364741)

<div class="topic-metadata">

**Author:** [@Yoann\_Buzenet](https://discuss.elastic.co/u/Yoann_Buzenet)\
**Replies:** 4\
**Last updated:** [August 11, 2024, 1:56pm UTC](https://discuss.elastic.co/t/how-can-i-use-stopfilter-for-english-and-french-words-in-a-unique-match-query/364741 "2024-08-11T13:56:02Z")

</div>

Hello, In my match query, { "query": { "match": { "message": { "query": "Quick foxes", "analyzer": "stop" } } } } I would like to use a stop filter for English AND french words …

---

## [Why ES doesn't have search-failure-rate metric?](https://discuss.elastic.co/t/why-es-doesnt-have-search-failure-rate-metric/363936)

<div class="topic-metadata">

**Author:** [@Ferrari248](https://discuss.elastic.co/u/Ferrari248)\
**Replies:** 1\
**Last updated:** [August 10, 2024, 4:48am UTC](https://discuss.elastic.co/t/why-es-doesnt-have-search-failure-rate-metric/363936 "2024-08-10T04:48:58Z")

</div>

Now I have a requirement: to get the real-time indexing and search statistics of failure rate, prefer to call ES server API. I have tried ES 7.X and 8.X, found that we have indexing-failure-rate metric, but doesn't have…

---

## [Not send logs to elasticsearch](https://discuss.elastic.co/t/not-send-logs-to-elasticsearch/363017)

<div class="topic-metadata">

**Author:** [@Prabhath\_samarasingh](https://discuss.elastic.co/u/Prabhath_samarasingh)\
**Replies:** 9\
**Last updated:** [August 9, 2024, 10:53pm UTC](https://discuss.elastic.co/t/not-send-logs-to-elasticsearch/363017 "2024-08-09T22:53:19Z")

</div>

filebeat.yml filebeat.inputs: - type: container enabled: true paths: - /var/lib/docker/containers/\*/\*.log processors: - add\_docker\_metadata: ~ output.elasticsearch: hosts: \["172.20.111.199:9200"\] pipe…

---

## [Consistent Query Impact on Sharding and Health in Elasticsearch](https://discuss.elastic.co/t/consistent-query-impact-on-sharding-and-health-in-elasticsearch/364707)

<div class="topic-metadata">

**Author:** [@sanjaygorur](https://discuss.elastic.co/u/sanjaygorur)\
**Replies:** 4\
**Last updated:** [August 9, 2024, 6:21pm UTC](https://discuss.elastic.co/t/consistent-query-impact-on-sharding-and-health-in-elasticsearch/364707 "2024-08-09T18:21:30Z")

</div>

We are using elasticsearch version 1.4, and have a looping pagination query used to collect docs from one index. How does querying an entry in elasticsearch repeatedly have an impact on sharding, and why would it have a…

---

## [No search context found for id](https://discuss.elastic.co/t/no-search-context-found-for-id/364655)

<div class="topic-metadata">

**Author:** [@yaowenfeng998](https://discuss.elastic.co/u/yaowenfeng998)\
**Replies:** 1\
**Last updated:** [August 9, 2024, 5:19pm UTC](https://discuss.elastic.co/t/no-search-context-found-for-id/364655 "2024-08-09T17:19:21Z")

</div>

I have a problem. elasticsearch queries data in batches by scroll. no matter how big the batch number is, only the data of the first batch can be queried. no search context found for id... Is the timeout period of the co…

---

## [Rename processor throwing error when trying to rename "level" to "log.level"](https://discuss.elastic.co/t/rename-processor-throwing-error-when-trying-to-rename-level-to-log-level/364639)

<div class="topic-metadata">

**Author:** [@chsing](https://discuss.elastic.co/u/chsing)\
**Replies:** 5\
**Last updated:** [August 9, 2024, 1:57pm UTC](https://discuss.elastic.co/t/rename-processor-throwing-error-when-trying-to-rename-level-to-log-level/364639 "2024-08-09T13:57:49Z")

</div>

I am trying to use the rename processor with field: "level" and target\_field: "log.level." I am getting this error: "error": { "type": "illegal\_argument\_exception", "reason": "cannot set \[level\] with…

---

## [A question for the "Stopping watcher service" message](https://discuss.elastic.co/t/a-question-for-the-stopping-watcher-service-message/364642)

<div class="topic-metadata">

**Author:** [@chulkim](https://discuss.elastic.co/u/chulkim)\
**Replies:** 2\
**Last updated:** [August 9, 2024, 1:57pm UTC](https://discuss.elastic.co/t/a-question-for-the-stopping-watcher-service-message/364642 "2024-08-09T13:57:44Z")

</div>

Does anyone know what could cause the following message in the log? stopping watch service, reason \[watcher manually marked to shutdown by cluster state update\] The service looks like stopped but not sure what could ca…

---

## [Automate SLM](https://discuss.elastic.co/t/automate-slm/364683)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 0\
**Last updated:** [August 9, 2024, 1:52pm UTC](https://discuss.elastic.co/t/automate-slm/364683 "2024-08-09T13:52:02Z")

</div>

Hi Teams We can take backup of daily indices using SLM. Till now we were doing this manually, like daily-backup-2024-08-01 snapshot is taking backup of indices 2024-08-01, daily-backup-2024-08-02 snapshot is taking back…

---

## [Completion suggester failed: org.elasticsearch.common.io.stream.NotSerializableExceptionWrapper: no\_such\_element\_exception: null](https://discuss.elastic.co/t/completion-suggester-failed-org-elasticsearch-common-io-stream-notserializableexceptionwrapper-no-such-element-exception-null/364671)

<div class="topic-metadata">

**Author:** [@hanbj](https://discuss.elastic.co/u/hanbj)\
**Replies:** 0\
**Last updated:** [August 9, 2024, 12:19pm UTC](https://discuss.elastic.co/t/completion-suggester-failed-org-elasticsearch-common-io-stream-notserializableexceptionwrapper-no-such-element-exception-null/364671 "2024-08-09T12:19:27Z")

</div>

Elasticsearch version: 6.8.2 completion field mapping： "query": { "type": "completion", "analyzer": "standard", "preserve\_separators": true, "preserve\_position\_increment…

---

## [Add second Node to Cluster (Windows)](https://discuss.elastic.co/t/add-second-node-to-cluster-windows/364286)

<div class="topic-metadata">

**Author:** [@Shaakxuur](https://discuss.elastic.co/u/Shaakxuur)\
**Replies:** 2\
**Last updated:** [August 9, 2024, 1:08pm UTC](https://discuss.elastic.co/t/add-second-node-to-cluster-windows/364286 "2024-08-09T13:08:48Z")

</div>

Hello I'm stuck at the moment, maybe someone can help me. I am reading through the instructions step by step and am trying to recreate this on my Windows system. https://www.elastic.co/guide/en/elastic-stack/8.14/inst…

---

## [How does Elastic compare with DuckDB?](https://discuss.elastic.co/t/how-does-elastic-compare-with-duckdb/364660)

<div class="topic-metadata">

**Author:** [@jeanpl](https://discuss.elastic.co/u/jeanpl)\
**Replies:** 1\
**Last updated:** [August 9, 2024, 12:10pm UTC](https://discuss.elastic.co/t/how-does-elastic-compare-with-duckdb/364660 "2024-08-09T12:10:11Z")

</div>

I know that Elastic is still the most downloaded search engine. However, I see some users on Medium trying to replace Elastic by DuckDB ... It is kind of anti-pattern ? Or may be it is relevant approach only for very …

---

## [Elastic mapping Issue](https://discuss.elastic.co/t/elastic-mapping-issue/364426)

<div class="topic-metadata">

**Author:** [@linux\_admin](https://discuss.elastic.co/u/linux_admin)\
**Replies:** 4\
**Last updated:** [August 9, 2024, 6:25am UTC](https://discuss.elastic.co/t/elastic-mapping-issue/364426 "2024-08-09T06:25:49Z")

</div>

I am using ELK version 8.12.0. I have a field called 'request.querystring.username' and that field has different data types keyword and boolean in different indices. Why the same field has the same different data t…

---

## [How Debug custom elasticsearch8.14 plugin in Intellij](https://discuss.elastic.co/t/how-debug-custom-elasticsearch8-14-plugin-in-intellij/364269)

<div class="topic-metadata">

**Author:** [@dean\_winchester](https://discuss.elastic.co/u/dean_winchester)\
**Replies:** 6\
**Last updated:** [August 9, 2024, 3:34am UTC](https://discuss.elastic.co/t/how-debug-custom-elasticsearch8-14-plugin-in-intellij/364269 "2024-08-09T03:34:10Z")

</div>

Hello everyone, I am an elasticsearch developer. Due to business needs, I need to develop a plug-in. The logic of this plug-in is relatively complex. I need the degbug plug-in source code. I can debug the plug-in locally…

---

## [CVE-2021-44832](https://discuss.elastic.co/t/cve-2021-44832/364592)

<div class="topic-metadata">

**Author:** [@nishant\_goyal](https://discuss.elastic.co/u/nishant_goyal)\
**Replies:** 4\
**Last updated:** [August 9, 2024, 12:15am UTC](https://discuss.elastic.co/t/cve-2021-44832/364592 "2024-08-09T00:15:26Z")

</div>

HI I am using Elasticsearch v 7.16.2 version and found CVE-2021-44832 Vurn. Please help me to update jar file Plugin Output: Path : /usr/share/elasticsearch/lib/elasticsearch-log4j-7.16.2.jar Installed …

---

## [ELSER v2 model inference getting stuck while inferencing](https://discuss.elastic.co/t/elser-v2-model-inference-getting-stuck-while-inferencing/364602)

<div class="topic-metadata">

**Author:** [@rakesh\_nayak\_1](https://discuss.elastic.co/u/rakesh_nayak_1)\
**Replies:** 2\
**Last updated:** [August 9, 2024, 12:03am UTC](https://discuss.elastic.co/t/elser-v2-model-inference-getting-stuck-while-inferencing/364602 "2024-08-09T00:03:06Z")

</div>

Hello Team, We need your expert advice on the issue of ELSER v2 inference getting stuck. Elasticsearch version: 8.11.1 ML nodes: 2 Allocations are attached below We have two separate deployment models for query a…

---

## [Elasticsearch fscrawler laravel](https://discuss.elastic.co/t/elasticsearch-fscrawler-laravel/364234)

<div class="topic-metadata">

**Author:** [@Yemboaro](https://discuss.elastic.co/u/Yemboaro)\
**Replies:** 1\
**Last updated:** [August 8, 2024, 9:08pm UTC](https://discuss.elastic.co/t/elasticsearch-fscrawler-laravel/364234 "2024-08-08T21:08:36Z")

</div>

Hello elastic community I have a problem I developed a laravel project that I integrated elasticsearch and fscrawler for searching indexed files then I deployed the project on an ubuntu server system with an nginx serv…

---

## [How to restore one index from a multi index snapshot](https://discuss.elastic.co/t/how-to-restore-one-index-from-a-multi-index-snapshot/364608)

<div class="topic-metadata">

**Author:** [@shrm](https://discuss.elastic.co/u/shrm)\
**Replies:** 2\
**Last updated:** [August 8, 2024, 9:04pm UTC](https://discuss.elastic.co/t/how-to-restore-one-index-from-a-multi-index-snapshot/364608 "2024-08-08T21:04:45Z")

</div>

Hi, I have a weekly backup from all of the indexes. I lost one of the indexes and want to restore it but not all of the indexes. I will make the separate index snapshots later. But now I need to restore this index only n…

---

## [Azure snapshot error: Unable to find client with name \[abc\]](https://discuss.elastic.co/t/azure-snapshot-error-unable-to-find-client-with-name-abc/364231)

<div class="topic-metadata">

**Author:** [@pjd](https://discuss.elastic.co/u/pjd)\
**Replies:** 9\
**Last updated:** [August 8, 2024, 7:45pm UTC](https://discuss.elastic.co/t/azure-snapshot-error-unable-to-find-client-with-name-abc/364231 "2024-08-08T19:45:27Z")

</div>

Running elasticsearch as a kubernetes pod. Here are the steps followed. added keystore entries ./bin/elasticsearch-keystore add azure.client.default.account ./bin/elasticsearch-keystore add azure.client.default.key …

---

## [Incremental sync for Postgres and MySQL connectors](https://discuss.elastic.co/t/incremental-sync-for-postgres-and-mysql-connectors/364609)

<div class="topic-metadata">

**Author:** [@andrej.peplinski](https://discuss.elastic.co/u/andrej.peplinski)\
**Replies:** 3\
**Last updated:** [August 8, 2024, 7:23pm UTC](https://discuss.elastic.co/t/incremental-sync-for-postgres-and-mysql-connectors/364609 "2024-08-08T19:23:53Z")

</div>

Are there any plans to support incremental syncs for Postgres and MySQL database connectors?

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=85)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=87)
