# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=892 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 893 --- ## [Is there a node limit on the Basic licence? of 7.7](https://discuss.elastic.co/t/is-there-a-node-limit-on-the-basic-licence-of-7-7/236885)
**Author:** [@Anthony\_Whitehead](https://discuss.elastic.co/u/Anthony_Whitehead)\ **Replies:** 4\ **Last updated:** [June 12, 2020, 2:31pm UTC](https://discuss.elastic.co/t/is-there-a-node-limit-on-the-basic-licence-of-7-7/236885 "2020-06-12T14:31:28Z")
A colleague told me that when moving from Elastic 5.6 to 6.8 that the basic licence didn't work as we had more than 100 nodes (on premise). I don't have access to the actual message. Is this correct as I'm investigating… --- ## [Multiple Grok Processors in pipeline: "\[processors\] required property is missing"](https://discuss.elastic.co/t/multiple-grok-processors-in-pipeline-processors-required-property-is-missing/236741)
**Author:** [@KookieMeister](https://discuss.elastic.co/u/KookieMeister)\ **Replies:** 1\ **Last updated:** [June 12, 2020, 1:28pm UTC](https://discuss.elastic.co/t/multiple-grok-processors-in-pipeline-processors-required-property-is-missing/236741 "2020-06-12T13:28:47Z")
Hi there, I'm currently using the following pipeline with success: { "ingestpipeline" : { "description" : "...", "processors" : \[ { "grok" : { "field" : "message", … --- ## [We had a Elasticsearch cluster when i check the nodes its is showing 3 nodes active but in the logs it is saying one node is not active](https://discuss.elastic.co/t/we-had-a-elasticsearch-cluster-when-i-check-the-nodes-its-is-showing-3-nodes-active-but-in-the-logs-it-is-saying-one-node-is-not-active/236862)
**Author:** [@hello5346](https://discuss.elastic.co/u/hello5346)\ **Replies:** 3\ **Last updated:** [June 12, 2020, 12:05pm UTC](https://discuss.elastic.co/t/we-had-a-elasticsearch-cluster-when-i-check-the-nodes-its-is-showing-3-nodes-active-but-in-the-logs-it-is-saying-one-node-is-not-active/236862 "2020-06-12T12:05:13Z")
we had a elasticsearch cluster with 3 nodes and all the nodes are running i checked that by using \[root@ip-10-0-0-170 elasticsearch\]# curl --user elastic:yLwz4s2yRGiUQsXyFkXw -X GET "10.0.0.170:9200/\_cat/nodes?pretty"… --- ## [Bulk load data to elasticsearch cluster](https://discuss.elastic.co/t/bulk-load-data-to-elasticsearch-cluster/236883)
**Author:** [@elasticyu](https://discuss.elastic.co/u/elasticyu)\ **Replies:** 0\ **Last updated:** [June 12, 2020, 11:46am UTC](https://discuss.elastic.co/t/bulk-load-data-to-elasticsearch-cluster/236883 "2020-06-12T11:46:29Z")
Currently everyday we write data to es with 8 datanodes, the wps is 50,000 , total 400 million records, during the writing process, there is hign burden for both cpu and io, and it affects the applications which read d… --- ## [Elastic still logs into defaut log file and path](https://discuss.elastic.co/t/elastic-still-logs-into-defaut-log-file-and-path/236877)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [June 12, 2020, 11:23am UTC](https://discuss.elastic.co/t/elastic-still-logs-into-defaut-log-file-and-path/236877 "2020-06-12T11:23:06Z")
Hi guys, I have set in the elasticsearch.yml: path.logs: /home/user/var/log/elasticsearch Now elastic does the logs twice! In the var/log/elasticsearch folder i have all the log files and in the /bin/elasticsearch/log… --- ## [Data is getting lost between Jmeter and ElasticSearch](https://discuss.elastic.co/t/data-is-getting-lost-between-jmeter-and-elasticsearch/236876)
**Author:** [@sGhosh86](https://discuss.elastic.co/u/sGhosh86)\ **Replies:** 0\ **Last updated:** [June 12, 2020, 11:15am UTC](https://discuss.elastic.co/t/data-is-getting-lost-between-jmeter-and-elasticsearch/236876 "2020-06-12T11:15:50Z")
Hi, I am facing an issue related to ElasticSearch. I am executing load test using JMeter and pushing test result into ElasticSearch using backend listener. The problem I am facing is that while running load test 5%-10%… --- ## [I am Receiving Data in Elasticsearch BUT my Logstash is Stopped](https://discuss.elastic.co/t/i-am-receiving-data-in-elasticsearch-but-my-logstash-is-stopped/236828)
**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\ **Replies:** 0\ **Last updated:** [June 12, 2020, 6:25am UTC](https://discuss.elastic.co/t/i-am-receiving-data-in-elasticsearch-but-my-logstash-is-stopped/236828 "2020-06-12T06:25:11Z")
Hi, I am receiving logs from UDP port, I shutted down my logstash about an hour ago still live data from 1 port is coming continuously in elasticsearch. I checked logstash is Stopped, I chescked with ps -ef | grep log… --- ## [Getting Exception: Request cannot be executed; I/O reactor status: STOPPED](https://discuss.elastic.co/t/getting-exception-request-cannot-be-executed-i-o-reactor-status-stopped/236038)
**Author:** [@Satyam\_Anand](https://discuss.elastic.co/u/Satyam_Anand)\ **Replies:** 1\ **Last updated:** [June 12, 2020, 5:57am UTC](https://discuss.elastic.co/t/getting-exception-request-cannot-be-executed-i-o-reactor-status-stopped/236038 "2020-06-12T05:57:16Z")
I am getting this exception. I am throwing an exception from my afterBulk method of listener which causes the exception to be caught in catch of BulkRequestHandler. catch (Exception e) { logger.warn(() -\> … --- ## [Elastic-Search upgrade from 5.3 to 7.7](https://discuss.elastic.co/t/elastic-search-upgrade-from-5-3-to-7-7/236121)
**Author:** [@het](https://discuss.elastic.co/u/het)\ **Replies:** 4\ **Last updated:** [June 12, 2020, 5:04am UTC](https://discuss.elastic.co/t/elastic-search-upgrade-from-5-3-to-7-7/236121 "2020-06-12T05:04:51Z")
Hey team, I am using elastic-search 5.3. I wanted to upgrade it to the latest ES version say 7.7. Which is the best way to upgrade from 5.3 to 7.X with the minimum number of downtime or minimum time required? I have a … --- ## [Regarding X-Pack Alerting feature](https://discuss.elastic.co/t/regarding-x-pack-alerting-feature/236662)
**Author:** [@bdn](https://discuss.elastic.co/u/bdn)\ **Replies:** 3\ **Last updated:** [June 12, 2020, 3:55am UTC](https://discuss.elastic.co/t/regarding-x-pack-alerting-feature/236662 "2020-06-12T03:55:27Z")
Hi, X-Pack features provide security, alerting, monitoring, reporting, machine learning, and many other capabilities. I tried some of them and like alerting features a lot more. Can I pay only for alerting feature on my … --- ## [How can i speed up getting all document in an index](https://discuss.elastic.co/t/how-can-i-speed-up-getting-all-document-in-an-index/236805)
**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\ **Replies:** 1\ **Last updated:** [June 12, 2020, 3:37am UTC](https://discuss.elastic.co/t/how-can-i-speed-up-getting-all-document-in-an-index/236805 "2020-06-12T03:37:45Z")
Hello, I have a question. In my index, 50,000,000 documents in there. I want to get all documents by python like below code import elasticsearch import json body\_str = {"query": {"match\_all": {}}} es\_c… --- ## [Null reference error in scripted field](https://discuss.elastic.co/t/null-reference-error-in-scripted-field/236800)
**Author:** [@maxtotaljunk](https://discuss.elastic.co/u/maxtotaljunk)\ **Replies:** 2\ **Last updated:** [June 12, 2020, 3:26am UTC](https://discuss.elastic.co/t/null-reference-error-in-scripted-field/236800 "2020-06-12T03:26:57Z")
My error is this: \[esaggs\] \> Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"null\_pointer\_exception","reason":null}\],"type":"search\_phase\_execution\_exception","reason":"all shards failed","phase":"quer… --- ## [How to specify custom /etc/default file in elasticsearch 7](https://discuss.elastic.co/t/how-to-specify-custom-etc-default-file-in-elasticsearch-7/236540)
**Author:** [@Nestor\_Manrique](https://discuss.elastic.co/u/Nestor_Manrique)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 11:36pm UTC](https://discuss.elastic.co/t/how-to-specify-custom-etc-default-file-in-elasticsearch-7/236540 "2020-06-11T23:36:42Z")
In the documentation it says explicitly For the package distributions, the config directory location defaults to /etc/elasticsearch . The location of the config directory can also be changed via the ES\_PATH\_CONF env… --- ## [Swap, elasticsearch and docker](https://discuss.elastic.co/t/swap-elasticsearch-and-docker/236427)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [June 11, 2020, 11:08pm UTC](https://discuss.elastic.co/t/swap-elasticsearch-and-docker/236427 "2020-06-11T23:08:38Z")
Its recommended to disable swap in the elasticsearch machine, but I was wandering if I have three elastic nodes on docker, is still recommended to disable swap? --- ## [6.8.10 binares seems down](https://discuss.elastic.co/t/6-8-10-binares-seems-down/236565)
**Author:** [@Roger\_9](https://discuss.elastic.co/u/Roger_9)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 10:46pm UTC](https://discuss.elastic.co/t/6-8-10-binares-seems-down/236565 "2020-06-11T22:46:09Z")
hello, seems like 6.8.10 are down https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-6.8.10-linux-x86\_64.tar.gz --- ## [ES7 - how to model 1-n parent-child relations - different ES types](https://discuss.elastic.co/t/es7-how-to-model-1-n-parent-child-relations-different-es-types/236792)
**Author:** [@kcris](https://discuss.elastic.co/u/kcris)\ **Replies:** 0\ **Last updated:** [June 11, 2020, 10:01pm UTC](https://discuss.elastic.co/t/es7-how-to-model-1-n-parent-child-relations-different-es-types/236792 "2020-06-11T22:01:50Z")
Hi, I am migrating an old ES instance to ES7. We need 1-n parent-child relations. We used to have multiple types in the same index and it was easy. Some types were related to their parent via \_parent . But ES7 will on… --- ## [How to Enable Alerting With Basic License?](https://discuss.elastic.co/t/how-to-enable-alerting-with-basic-license/236764)
**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\ **Replies:** 4\ **Last updated:** [June 11, 2020, 9:05pm UTC](https://discuss.elastic.co/t/how-to-enable-alerting-with-basic-license/236764 "2020-06-11T21:05:31Z")
According to elastic licensing page alerting is available with basic free license. We have 6 node cluster (with TLS/security enabled) and we are unable to see any alerting options on cluster monitoring dashboards in Kib… --- ## [Indexes not being rotated/removed using the Index Lifecycle Management](https://discuss.elastic.co/t/indexes-not-being-rotated-removed-using-the-index-lifecycle-management/236777)
**Author:** [@jbalaguero](https://discuss.elastic.co/u/jbalaguero)\ **Replies:** 3\ **Last updated:** [June 11, 2020, 8:42pm UTC](https://discuss.elastic.co/t/indexes-not-being-rotated-removed-using-the-index-lifecycle-management/236777 "2020-06-11T20:42:59Z")
Hello, I’m trying to use the Index Lifecycle Management in Elastic 7.7, but I’m not able to rotate indexes every 1 minute and delete indexes older than 3 minutes. This is my policy: \[root@elasticmysql ~\]# curl -GET ht… --- ## [How to update ElasticSearch search\_analyzer mapping without conflict on analyzer?](https://discuss.elastic.co/t/how-to-update-elasticsearch-search-analyzer-mapping-without-conflict-on-analyzer/236533)
**Author:** [@waynebloss](https://discuss.elastic.co/u/waynebloss)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 8:27pm UTC](https://discuss.elastic.co/t/how-to-update-elasticsearch-search-analyzer-mapping-without-conflict-on-analyzer/236533 "2020-06-11T20:27:35Z")
Also asked on StackOverflow I'm using version 7.7 of ElasticSearch, LogStash and Kibana and trying to update an index mapping for a field is resulting in one of 2 errors: mapper\_parsing\_exception: analyzer on field \[t… --- ## [Elasticsearch as a primary Mysql database](https://discuss.elastic.co/t/elasticsearch-as-a-primary-mysql-database/236757)
**Author:** [@Arash\_Soft](https://discuss.elastic.co/u/Arash_Soft)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 7:38pm UTC](https://discuss.elastic.co/t/elasticsearch-as-a-primary-mysql-database/236757 "2020-06-11T19:38:07Z")
hi there is a past topic like this but i want to know what is the solution after 4 years now i use mysql and i have like 6000000 row per table and high request per second and i use slim framework to build my app becau… --- ## [Corrent use of numeric type Long without losing precision](https://discuss.elastic.co/t/corrent-use-of-numeric-type-long-without-losing-precision/236774)
**Author:** [@mmu](https://discuss.elastic.co/u/mmu)\ **Replies:** 0\ **Last updated:** [June 11, 2020, 7:01pm UTC](https://discuss.elastic.co/t/corrent-use-of-numeric-type-long-without-losing-precision/236774 "2020-06-11T19:01:12Z")
What is the correct use of the numeric datatype long? It seems that there are some pitfalls with values greater than +/- 2^53. (see https://stackoverflow.com/questions/38952262/elasticsearch-max-length-of-mapping-type-lo… --- ## [System memory increase when upgrading from 5.6 to 6](https://discuss.elastic.co/t/system-memory-increase-when-upgrading-from-5-6-to-6/236773)
**Author:** [@Travis\_Andelin](https://discuss.elastic.co/u/Travis_Andelin)\ **Replies:** 0\ **Last updated:** [June 11, 2020, 6:53pm UTC](https://discuss.elastic.co/t/system-memory-increase-when-upgrading-from-5-6-to-6/236773 "2020-06-11T18:53:08Z")
When upgrading from 5.6 to 6.1 (and then to 6.8), we have noticed an increase in memory usage. Before and after the upgrade, JVM heap size was configured at 3GB. After the upgrade, overall system memory usage jumped from… --- ## [All data is lost after restarting elasticseach](https://discuss.elastic.co/t/all-data-is-lost-after-restarting-elasticseach/235940)
**Author:** [@ahmed75](https://discuss.elastic.co/u/ahmed75)\ **Replies:** 0\ **Last updated:** [June 5, 2020, 11:09am UTC](https://discuss.elastic.co/t/all-data-is-lost-after-restarting-elasticseach/235940 "2020-06-05T11:09:09Z")
I'm running EFK stack in my EKS cluster however when i restart elasticsearch and access kibana all my previous data are lost including index-pattern and saved objects Here is my elasticsearch file : apiVersion: v1 kind… --- ## [How to find the pending indexes from Restore?](https://discuss.elastic.co/t/how-to-find-the-pending-indexes-from-restore/236751)
**Author:** [@bhuvaneshdct](https://discuss.elastic.co/u/bhuvaneshdct)\ **Replies:** 0\ **Last updated:** [June 11, 2020, 4:41pm UTC](https://discuss.elastic.co/t/how-to-find-the-pending-indexes-from-restore/236751 "2020-06-11T16:41:03Z")
Once the restore started, I don't know the status, I tried the \_cat/recovery and GET /\_snapshot/my\_backup/snapshot\_1/\_status but is there any way to find These indices are restored These indices are yet to restore T… --- ## [ILM Delete Only Phase](https://discuss.elastic.co/t/ilm-delete-only-phase/236743)
**Author:** [@ckough](https://discuss.elastic.co/u/ckough)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 4:36pm UTC](https://discuss.elastic.co/t/ilm-delete-only-phase/236743 "2020-06-11T16:36:45Z")
Hi there, I'm running ELK 7.6. I create daily indexes with names like logstash-yyyy.mm.dd every 24hrs. I need to delete indices greater than 30 days. Besides using curator, can I use the following settings in ILM inste… --- ## [Cross token fuzziness?](https://discuss.elastic.co/t/cross-token-fuzziness/236732)
**Author:** [@ivanibash](https://discuss.elastic.co/u/ivanibash)\ **Replies:** 4\ **Last updated:** [June 11, 2020, 4:31pm UTC](https://discuss.elastic.co/t/cross-token-fuzziness/236732 "2020-06-11T16:31:28Z")
I have some records in my db which are stored both as "A B company" and "AB company". Is there a way to fire off a query "A B company" and get both? I looked into fuzziness parameter but it seems like it won't do that, i… --- ## [Remote reindex -- entity content is too long \[127862838\] for the configured buffer limit \[104857600\]](https://discuss.elastic.co/t/remote-reindex-entity-content-is-too-long-127862838-for-the-configured-buffer-limit-104857600/236652)
**Author:** [@jwcw](https://discuss.elastic.co/u/jwcw)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 4:13pm UTC](https://discuss.elastic.co/t/remote-reindex-entity-content-is-too-long-127862838-for-the-configured-buffer-limit-104857600/236652 "2020-06-11T16:13:37Z")
I'm trying to migrate and index from elastic search 5.5 to 6.8 using remote reindex. The index is 226 GB in size, has 212m documents, and has 10 primary shards (20 total). I am initiating the reindex using the reindex AP… --- ## [Date format issue when reading data from ElasticSearch](https://discuss.elastic.co/t/date-format-issue-when-reading-data-from-elasticsearch/236739)
**Author:** [@samargh](https://discuss.elastic.co/u/samargh)\ **Replies:** 0\ **Last updated:** [June 11, 2020, 3:54pm UTC](https://discuss.elastic.co/t/date-format-issue-when-reading-data-from-elasticsearch/236739 "2020-06-11T15:54:01Z")
i'm reading data from elasticsearch . when i visualize date format on kibana it shows Date Aug 5, 2020 @ 23:00:00.000 =\> so it's correct but when i'm reading it from elasticsearch to do some machine learning , i n… --- ## [\_update\_by\_query is consuming a lot of disk space](https://discuss.elastic.co/t/update-by-query-is-consuming-a-lot-of-disk-space/232886)
**Author:** [@ivanibash](https://discuss.elastic.co/u/ivanibash)\ **Replies:** 2\ **Last updated:** [June 11, 2020, 3:25pm UTC](https://discuss.elastic.co/t/update-by-query-is-consuming-a-lot-of-disk-space/232886 "2020-06-11T15:25:21Z")
Hi, I created a new field for my indices and running an update\_by\_query where I'm basically populating that field by aggrigating values from other fields: { "script": { "source": "ctx.\_source.all\_names = \[\]… --- ## [Elasticsearch 7.4 unable to read truststore file](https://discuss.elastic.co/t/elasticsearch-7-4-unable-to-read-truststore-file/236504)
**Author:** [@bytemedwb](https://discuss.elastic.co/u/bytemedwb)\ **Replies:** 3\ **Last updated:** [June 11, 2020, 3:17pm UTC](https://discuss.elastic.co/t/elasticsearch-7-4-unable-to-read-truststore-file/236504 "2020-06-11T15:17:15Z")
All: I am having the same error as described in this post: In my log file I get the following: Caused by: org.elasticsearch.ElasticsearchException: failed to initialize SSL TrustManager - access to read truststore fi… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=891) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=893)