# Modify the max bucket to report an error

**URL:** <https://discuss.elastic.co/t/modify-the-max-bucket-to-report-an-error/320414>\
**Category:** Elasticsearch\
**Created:** [December 3, 2022, 1:14pm UTC](https://discuss.elastic.co/t/modify-the-max-bucket-to-report-an-error/320414 "2022-12-03T13:14:38Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tonyhu\_T](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tonyhu_t/32/99289_2.png) [@Tonyhu\_T](https://discuss.elastic.co/u/Tonyhu_T)\
**Post date:** [December 3, 2022, 1:14pm UTC](https://discuss.elastic.co/t/modify-the-max-bucket-to-report-an-error/320414/1 "2022-12-03T13:14:38Z")

</div>

I use the following command to modify max bucket:

```auto
PUT _cluster/settings
{
  "persistent": {
    "search.max_buckets": 500000
  }
}

```

But received the following error message:

```auto
{
  "error" : {
    "root_cause" : [
      {
        "type" : "illegal_argument_exception",
        "reason" : "unknown setting [archived.opendistro.index_state_management.metadata_migration.status] please check that any required plugins are installed, or check the breaking changes documentation for removed settings"
      }
    ],
    "type" : "illegal_argument_exception",
    "reason" : "unknown setting [archived.opendistro.index_state_management.metadata_migration.status] please check that any required plugins are installed, or check the breaking changes documentation for removed settings",
    "suppressed" : [
      {
        "type" : "illegal_argument_exception",
        "reason" : "unknown setting [archived.opendistro.index_state_management.template_migration.control] please check that any required plugins are installed, or check the breaking changes documentation for removed settings"
      }
    ]
  },
  "status" : 400
}

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 3, 2022, 1:14pm UTC](https://discuss.elastic.co/t/modify-the-max-bucket-to-report-an-error/320414/2 "2022-12-03T13:14:38Z")

</div>

OpenSearch/OpenDistro are AWS run products and differ from the original Elasticsearch and Kibana products that Elastic builds and maintains. You may need to contact them directly for further assistance.

(This is an automated response from your friendly Elastic bot. Please report this post if you have any suggestions or concerns :elasticheart: )

---

<div class="post-metadata">

**Author:** ![Tonyhu\_T](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tonyhu_t/32/99289_2.png) [@Tonyhu\_T](https://discuss.elastic.co/u/Tonyhu_T)\
**Post date:** [December 3, 2022, 1:21pm UTC](https://discuss.elastic.co/t/modify-the-max-bucket-to-report-an-error/320414/3 "2022-12-03T13:21:44Z")

</div>

I'm not using an aws product, this is my es cluster info:

```auto
{
  "name" : "xy",
  "cluster_name" : "z",
  "cluster_uuid" : "Q9u-VrpcQqC0DisbxMgQjw",
  "version" : {
    "number" : "7.16.0",
    "build_flavor" : "default",
    "build_type" : "deb",
    "build_hash" : "6fc81662312141fe7691d7c1c91b8658ac17aa0d",
    "build_date" : "2021-12-02T15:46:35.697268109Z",
    "build_snapshot" : false,
    "lucene_version" : "8.10.1",
    "minimum_wire_compatibility_version" : "6.8.0",
    "minimum_index_compatibility_version" : "6.0.0-beta1"
  },
  "tagline" : "You Know, for Search"
}

```

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [December 3, 2022, 1:26pm UTC](https://discuss.elastic.co/t/modify-the-max-bucket-to-report-an-error/320414/4 "2022-12-03T13:26:33Z")

</div>

> [@Tonyhu\_T](#):
>
> `archived.opendistro.index_state_management.metadata_migration.status`

This seems to indicate that you either are running a different version compared to what you are reporting or have third-party plugins installed that are causing this error. Installed plugin should be included in the [cluster stats API](https://www.elastic.co/guide/en/elasticsearch/reference/current/cluster-stats.html), so you may want to check that.

---

<div class="post-metadata">

**Author:** ![Tonyhu\_T](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tonyhu_t/32/99289_2.png) [@Tonyhu\_T](https://discuss.elastic.co/u/Tonyhu_T)\
**Post date:** [December 3, 2022, 2:06pm UTC](https://discuss.elastic.co/t/modify-the-max-bucket-to-report-an-error/320414/5 "2022-12-03T14:06:20Z")

</div>

cluster stats:

```auto
{
  "_nodes" : {
    "total" : 5,
    "successful" : 5,
    "failed" : 0
  },
  "cluster_name" : "z",
  "cluster_uuid" : "Q9u-VrpcQqC0DisbxMgQjw",
  "timestamp" : 1670074628649,
  "status" : "green",
  "indices" : {
    "count" : 945,
    "shards" : {
      "total" : 1890,
      "primaries" : 945,
      "replication" : 1.0,
      "index" : {
        "shards" : {
          "min" : 2,
          "max" : 2,
          "avg" : 2.0
        },
        "primaries" : {
          "min" : 1,
          "max" : 1,
          "avg" : 1.0
        },
        "replication" : {
          "min" : 1.0,
          "max" : 1.0,
          "avg" : 1.0
        }
      }
    },
   
...

    "analysis" : {
      "char_filter_types" : [],
      "tokenizer_types" : [],
      "filter_types" : [],
      "analyzer_types" : [],
      "built_in_char_filters" : [],
      "built_in_tokenizers" : [],
      "built_in_filters" : [],
      "built_in_analyzers" : []
    },
    "versions" : [
      {
        "version" : "7.10.2",
        "index_count" : 401,
        "primary_shard_count" : 401,
        "total_primary_bytes" : 870673664
      },
      {
        "version" : "7.16.0",
        "index_count" : 544,
        "primary_shard_count" : 544,
        "total_primary_bytes" : ...
      }
    ]
  },
  "nodes" : {
    "count" : {
      "total" : 5,
      "coordinating_only" : 0,
      "data" : 2,
      "data_cold" : 0,
      "data_content" : 0,
      "data_frozen" : 0,
      "data_hot" : 0,
      "data_warm" : 0,
      "ingest" : 0,
      "master" : 3,
      "ml" : 0,
      "remote_cluster_client" : 0,
      "transform" : 0,
      "voting_only" : 0
    },
    "versions" : [
      "7.16.0"
    ],
    "os" : {
      "available_processors" : 22,
      "allocated_processors" : 22,
      "names" : [
        {
          "name" : "Linux",
          "count" : 5
        }
      ],
      "pretty_names" : [
        {
          "pretty_name" : "Ubuntu 20.04.3 LTS",
          "count" : 5
        }
      ],
      "architectures" : [
        {
          "arch" : "amd64",
          "count" : 5
        }
      ],
      "mem" : {
        "total_in_bytes" : 78764953600,
        "free_in_bytes" : 1518587904,
        "used_in_bytes" : 77246365696,
        "free_percent" : 2,
        "used_percent" : 98
      }
    },
    "process" : {
      "cpu" : {
        "percent" : 21
      },
      "open_file_descriptors" : {
        "min" : 403,
        "max" : 7966,
        "avg" : 3425
      }
    },
    "jvm" : {
      "max_uptime_in_millis" : 30684532577,
      "versions" : [
        {
          "version" : "17.0.1",
          "vm_name" : "OpenJDK 64-Bit Server VM",
          "vm_version" : "17.0.1+12",
          "vm_vendor" : "Eclipse Adoptium",
          "bundled_jdk" : true,
          "using_bundled_jdk" : true,
          "count" : 5
        }
      ],
      "mem" : {
        "heap_used_in_bytes" : 15521692360,
        "heap_max_in_bytes" : 40613445632
      },
      "threads" : 467
    },
    "fs" : {
      "total_in_bytes" : 1210521587712,
      "free_in_bytes" : 919984099328,
      "available_in_bytes" : 866213122048
    },
    "plugins" : [
      {
        "name" : "repository-s3",
        "version" : "7.16.0",
        "elasticsearch_version" : "7.16.0",
        "java_version" : "1.8",
        "description" : "The S3 repository plugin adds S3 repositories",
        "classname" : "org.elasticsearch.repositories.s3.S3RepositoryPlugin",
        "extended_plugins" : [],
        "has_native_controller" : false,
        "licensed" : false,
        "type" : "isolated"
      }
    ],
    "network_types" : {
      "transport_types" : {
        "security4" : 5
      },
      "http_types" : {
        "security4" : 5
      }
    },
    "discovery_types" : {
      "zen" : 5
    },
    "packaging_types" : [
      {
        "flavor" : "default",
        "type" : "deb",
        "count" : 5
      }
    ],
    "ingest" : {
      "number_of_pipelines" : 2,
      "processor_stats" : {
        "gsub" : {
          "count" : 0,
          "failed" : 0,
          "current" : 0,
          "time_in_millis" : 0
        },
        "script" : {
          "count" : 0,
          "failed" : 0,
          "current" : 0,
          "time_in_millis" : 0
        }
      }
    }
  }
}

```

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [December 3, 2022, 2:51pm UTC](https://discuss.elastic.co/t/modify-the-max-bucket-to-report-an-error/320414/6 "2022-12-03T14:51:00Z")

</div>

Has this cluster been migrated from a cluster that had third party plugins installed?

---

<div class="post-metadata">

**Author:** ![Tonyhu\_T](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tonyhu_t/32/99289_2.png) [@Tonyhu\_T](https://discuss.elastic.co/u/Tonyhu_T)\
**Post date:** [December 3, 2022, 2:56pm UTC](https://discuss.elastic.co/t/modify-the-max-bucket-to-report-an-error/320414/7 "2022-12-03T14:56:09Z")

</div>

yes, this cluster was migrated from AWS OpenSearch.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [December 3, 2022, 2:58pm UTC](https://discuss.elastic.co/t/modify-the-max-bucket-to-report-an-error/320414/8 "2022-12-03T14:58:19Z")

</div>

Exactly which version was it migrated from? Exactly how was it migrated?

---

<div class="post-metadata">

**Author:** ![Tonyhu\_T](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tonyhu_t/32/99289_2.png) [@Tonyhu\_T](https://discuss.elastic.co/u/Tonyhu_T)\
**Post date:** [December 3, 2022, 3:10pm UTC](https://discuss.elastic.co/t/modify-the-max-bucket-to-report-an-error/320414/9 "2022-12-03T15:10:54Z")

</div>

This was migrated from aws opensearch a year ago. I can’t remember the details, but it seems to be using the snapshot and restore tools. Something like this method:

> **[Migrate from Amazon OpenSearch Service (formerly Amazon Elasticsearch Service)...](https://www.elastic.co/guide/en/cloud/current/ec-migrate-from-aws.html)**

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [December 3, 2022, 3:24pm UTC](https://discuss.elastic.co/t/modify-the-max-bucket-to-report-an-error/320414/10 "2022-12-03T15:24:44Z")

</div>

Can you please run the [get cluster settings API](https://www.elastic.co/guide/en/elasticsearch/reference/7.17/cluster-get-settings.html) and post the output here? I now see there are indices from version 7.10.2, which could very well be an OpenDistro cluster. I wonder if the migration may have snapshotted and restored cluster settings and not just data.

---

<div class="post-metadata">

**Author:** ![Tonyhu\_T](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tonyhu_t/32/99289_2.png) [@Tonyhu\_T](https://discuss.elastic.co/u/Tonyhu_T)\
**Post date:** [December 4, 2022, 12:19pm UTC](https://discuss.elastic.co/t/modify-the-max-bucket-to-report-an-error/320414/11 "2022-12-04T12:19:18Z")

</div>

Thank you very much for your reply.

The cluster settings are as follows, there are indeed OpenDistro(OpenSearch) related settings:

```auto
{
  "persistent" : {
    "archived" : {
      "opendistro" : {
        "index_state_management" : {
          "metadata_migration" : {
            "status" : "1"
          },
          "template_migration" : {
            "control" : "-1"
          }
        }
      }
    },
    "cluster" : {
      "routing" : {
        "allocation" : {
          "cluster_concurrent_rebalance" : "2",
          "disk" : {
            "watermark" : {
              "low" : "25.0gb",
              "flood_stage" : "1.0gb",
              "high" : "22.0gb"
            }
          }
        }
      }
    },
    "search" : {
      "max_buckets" : "100000"
    }
  },
  "transient" : { }
}

```

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [December 4, 2022, 12:33pm UTC](https://discuss.elastic.co/t/modify-the-max-bucket-to-report-an-error/320414/12 "2022-12-04T12:33:18Z")

</div>

That seems to be the problem. Am not sure how to get rid of them. Maybe someone else has a suggestion.

---

<div class="post-metadata">

**Author:** ![Tonyhu\_T](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tonyhu_t/32/99289_2.png) [@Tonyhu\_T](https://discuss.elastic.co/u/Tonyhu_T)\
**Post date:** [December 4, 2022, 12:51pm UTC](https://discuss.elastic.co/t/modify-the-max-bucket-to-report-an-error/320414/13 "2022-12-04T12:51:05Z")

</div>

When I removed all settings of opendistro, everything worked fine.  
Thanks again.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 1, 2023, 12:51pm UTC](https://discuss.elastic.co/t/modify-the-max-bucket-to-report-an-error/320414/14 "2023-01-01T12:51:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.