# \#ccs-cross-cluster-search **URL:** https://discuss.elastic.co/tag/ccs-cross-cluster-search/27.md [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) --- ## [Elasticsearch](https://discuss.elastic.co/t/elasticsearch/383028)
**Author:** [@Varinder](https://discuss.elastic.co/u/Varinder)\ **Replies:** 44\ **Last updated:** [November 4, 2025, 7:16pm UTC](https://discuss.elastic.co/t/elasticsearch/383028 "2025-11-04T19:16:09Z")
‘‘‘ Hi Folks, #lasticsearch.yml file of node ip ending in 17 ( 8.15.2) still not upgraded ’’’ path.data: /var/lib/elasticsearch/data path.logs: /var/log/elasticsearch/logs xpack.security.enabled: false xpack.secur… --- ## [Cross Cluster Search](https://discuss.elastic.co/t/cross-cluster-search/375665)
**Author:** [@jmello31](https://discuss.elastic.co/u/jmello31)\ **Replies:** 0\ **Last updated:** [March 10, 2025, 5:48pm UTC](https://discuss.elastic.co/t/cross-cluster-search/375665 "2025-03-10T17:48:00Z")
I am trying to configure cross cluster search within my ECK stack and I am having a hard time with the documentation. I am trying to configure with the API key related route and I am confused where to set the requisite … --- ## [Cross Cluster Replication / Search between Self Managed and ECK](https://discuss.elastic.co/t/cross-cluster-replication-search-between-self-managed-and-eck/374298)
**Author:** [@stroes](https://discuss.elastic.co/u/stroes)\ **Replies:** 2\ **Last updated:** [March 1, 2025, 4:02pm UTC](https://discuss.elastic.co/t/cross-cluster-replication-search-between-self-managed-and-eck/374298 "2025-03-01T16:02:55Z")
Okay I need some help here. I am trying to set up Cross Cluster Search / Replication on our clusters but just not getting there. Quick overview I have an on Prem Cluster sitting in our datacenters and trying to connect … --- ## [Searching against runtime mapped fields](https://discuss.elastic.co/t/searching-against-runtime-mapped-fields/361597)
**Author:** [@John\_Schoonover](https://discuss.elastic.co/u/John_Schoonover)\ **Replies:** 2\ **Last updated:** [October 15, 2024, 6:11pm UTC](https://discuss.elastic.co/t/searching-against-runtime-mapped-fields/361597 "2024-10-15T18:11:13Z")
Hey all! Long-time user, first-time poster! I've been trying to figure out a problem we're seeing with some unique search behavior on runtime fields when using CCS. REF: Runtime fields in a search request When done o… --- ## [CCR KSPM Data](https://discuss.elastic.co/t/ccr-kspm-data/368541)
**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\ **Replies:** 0\ **Last updated:** [October 9, 2024, 2:53pm UTC](https://discuss.elastic.co/t/ccr-kspm-data/368541 "2024-10-09T14:53:11Z")
As suggested in the past, for using the KSPM on the SIEM Module, we need to use the Elastic Agent integration for our k8s clusters. Now if in case this data is read over CCR, what changes needs to be done other than map… --- ## [Check Remote Cluster Health from Kibana for a Cluster where CCS is enabled](https://discuss.elastic.co/t/check-remote-cluster-health-from-kibana-for-a-cluster-where-ccs-is-enabled/364014)
**Author:** [@Albatross](https://discuss.elastic.co/u/Albatross)\ **Replies:** 0\ **Last updated:** [July 29, 2024, 11:05pm UTC](https://discuss.elastic.co/t/check-remote-cluster-health-from-kibana-for-a-cluster-where-ccs-is-enabled/364014 "2024-07-29T23:05:33Z")
We have Cross Cluster Search enabled and kibana connected to one of the clusters. I am unable to run a health API to check health of a diff remote cluster. Ex : GET /remote\_cluster2:\_cluster/state?pretty=true I get the… --- ## [\[6.7.1\]how to set ccs with kerberos](https://discuss.elastic.co/t/6-7-1-how-to-set-ccs-with-kerberos/363546)
**Author:** [@lammm4](https://discuss.elastic.co/u/lammm4)\ **Replies:** 9\ **Last updated:** [July 23, 2024, 3:25am UTC](https://discuss.elastic.co/t/6-7-1-how-to-set-ccs-with-kerberos/363546 "2024-07-23T03:25:17Z")
we use es 6.7.1 with kerberos, but after set remote cluster, the state connect is always false, and the seeds is empty. does it support ccs with using kerberos? --- ## [Connect remote cluster between a cluster disabled TLS/SSL and a cluster enabled TLS/SSL](https://discuss.elastic.co/t/connect-remote-cluster-between-a-cluster-disabled-tls-ssl-and-a-cluster-enabled-tls-ssl/361005)
**Author:** [@Huy\_Nguyen](https://discuss.elastic.co/u/Huy_Nguyen)\ **Replies:** 5\ **Last updated:** [June 7, 2024, 12:18pm UTC](https://discuss.elastic.co/t/connect-remote-cluster-between-a-cluster-disabled-tls-ssl-and-a-cluster-enabled-tls-ssl/361005 "2024-06-07T12:18:00Z")
I have a task migrate Elasticsearch from v7 to v8. I'd like new cluster add old cluster as a remote cluster. A cluster Elasticsearch v8 require enable https ssl/tls, however a cluster Elasticsearch v7 in prod environment… --- ## [Date\_histogram returning duplicates in multi-cluster after upgrade](https://discuss.elastic.co/t/date-histogram-returning-duplicates-in-multi-cluster-after-upgrade/358569)
**Author:** [@Doc\_Kaos](https://discuss.elastic.co/u/Doc_Kaos)\ **Replies:** 2\ **Last updated:** [May 3, 2024, 1:29pm UTC](https://discuss.elastic.co/t/date-histogram-returning-duplicates-in-multi-cluster-after-upgrade/358569 "2024-05-03T13:29:28Z")
Hey all, we recently upgraded clusters from 8.10.2 to 8.13.2. Our cross-cluster search cluster is still running 7.17. We noticed we are receiving duplicate keys in buckets after the remote clusters upgraded. If we reduce… --- ## [Unable to establish the connection between two clusters](https://discuss.elastic.co/t/unable-to-establish-the-connection-between-two-clusters/354499)
**Author:** [@Subrahmanyam\_Veerank](https://discuss.elastic.co/u/Subrahmanyam_Veerank)\ **Replies:** 14\ **Last updated:** [March 27, 2024, 12:06pm UTC](https://discuss.elastic.co/t/unable-to-establish-the-connection-between-two-clusters/354499 "2024-03-27T12:06:51Z")
Hi sir, im trying to establish the connection between the two clusters (local and remote) and i have used the same CA of local cluster to generate the certificates of the remote cluster node. In kibana remote clusters, … --- ## [Does Cross Cluster Search Performance varies with number of clusters](https://discuss.elastic.co/t/does-cross-cluster-search-performance-varies-with-number-of-clusters/348954)
**Author:** [@siddhartha\_c](https://discuss.elastic.co/u/siddhartha_c)\ **Replies:** 3\ **Last updated:** [December 12, 2023, 11:19am UTC](https://discuss.elastic.co/t/does-cross-cluster-search-performance-varies-with-number-of-clusters/348954 "2023-12-12T11:19:08Z")
Hi Team, I have a query. We have around 5000 Nodes in our setup. If I distribute the Nodes across 30 different Clusters will the cross cluster search performance be significantly be faster as compared to if I have nod… --- ## [Limit on number of remote clusters in Cross-cluster search](https://discuss.elastic.co/t/limit-on-number-of-remote-clusters-in-cross-cluster-search/348395)
**Author:** [@Naveen\_Kumar\_S](https://discuss.elastic.co/u/Naveen_Kumar_S)\ **Replies:** 0\ **Last updated:** [December 1, 2023, 5:52am UTC](https://discuss.elastic.co/t/limit-on-number-of-remote-clusters-in-cross-cluster-search/348395 "2023-12-01T05:52:03Z")
Brief Info: I am planning to create a multi-cluster (around 50 clusters) Elasticsearch setup to store a large amount of data (around 7 years of enterprise data). This number is based on thorough planning considering the… --- ## [CCS requires wildcard after index name to search or always returns 404](https://discuss.elastic.co/t/ccs-requires-wildcard-after-index-name-to-search-or-always-returns-404/348091)
**Author:** [@Doc\_Kaos](https://discuss.elastic.co/u/Doc_Kaos)\ **Replies:** 1\ **Last updated:** [November 28, 2023, 2:12pm UTC](https://discuss.elastic.co/t/ccs-requires-wildcard-after-index-name-to-search-or-always-returns-404/348091 "2023-11-28T14:12:31Z")
Quick bit about the setup: Dedicated CCS cluster (no local indices, except for monitoring) v7.17.10 Two clusters clusterA and clusterB are connected as remote clusters v7.4.1 All of these searches are performed on the… --- ## [Cross Cluster Search - 7.17 on EC2 to 8.8 on Kubernetes](https://discuss.elastic.co/t/cross-cluster-search-7-17-on-ec2-to-8-8-on-kubernetes/341391)
**Author:** [@Doc\_Kaos](https://discuss.elastic.co/u/Doc_Kaos)\ **Replies:** 2\ **Last updated:** [August 23, 2023, 1:59pm UTC](https://discuss.elastic.co/t/cross-cluster-search-7-17-on-ec2-to-8-8-on-kubernetes/341391 "2023-08-23T13:59:10Z")
I have a 7.17 cluster running on EC2 nodes in AWS. No security enabled. I'm trying to connect it to an 8.8 cluster on K8s with security enabled. Is this even possible? Having no issues connecting to other 7.17 clusters … --- ## [Limit on number of Clusters supported by Cross cluster search (CCS)](https://discuss.elastic.co/t/limit-on-number-of-clusters-supported-by-cross-cluster-search-ccs/339525)
**Author:** [@siddhartha\_c](https://discuss.elastic.co/u/siddhartha_c)\ **Replies:** 0\ **Last updated:** [July 28, 2023, 9:52am UTC](https://discuss.elastic.co/t/limit-on-number-of-clusters-supported-by-cross-cluster-search-ccs/339525 "2023-07-28T09:52:55Z")
Can I have a Architectural design where in we have around 100 clusters of Elastic. Where in each cluster is basically a small set of Master Node and Data Nodes . Using Cross Cluster Search if we send the search queries… --- ## [Ccs query without log content in Table tab page](https://discuss.elastic.co/t/ccs-query-without-log-content-in-table-tab-page/326816)
**Author:** [@zhangzhuzi](https://discuss.elastic.co/u/zhangzhuzi)\ **Replies:** 0\ **Last updated:** [March 2, 2023, 2:27am UTC](https://discuss.elastic.co/t/ccs-query-without-log-content-in-table-tab-page/326816 "2023-03-02T02:27:53Z")
Kibana Discover CCS query results do not display log content on the table tab page. Switching to the JSON tab page display the log content, but I can directly query the log content through the command line. What is the r… --- ## [Use of Indicator Match Rules using Cross Cluster Search](https://discuss.elastic.co/t/use-of-indicator-match-rules-using-cross-cluster-search/323163)
**Author:** [@jcruz](https://discuss.elastic.co/u/jcruz)\ **Replies:** 7\ **Last updated:** [February 7, 2023, 8:44pm UTC](https://discuss.elastic.co/t/use-of-indicator-match-rules-using-cross-cluster-search/323163 "2023-02-07T20:44:02Z")
Hello! We have set up an infrastrucure of SIEM using Elastic Security and we are using multiple elasticsearch clusters distributed in different locations (multiples datacenters) and we have configured CCS (Cross Cluster… --- ## [Connect to remote cluster](https://discuss.elastic.co/t/connect-to-remote-cluster/320952)
**Author:** [@Cheroufa](https://discuss.elastic.co/u/Cheroufa)\ **Replies:** 2\ **Last updated:** [December 12, 2022, 5:23am UTC](https://discuss.elastic.co/t/connect-to-remote-cluster/320952 "2022-12-12T05:23:26Z")
hi guys i want to connect two clusters elasticsearch for cross search this is my query : PUT /\_cluster/settings { "persistent" : { "cluster" : { "remote" : { "c2" : { "seeds" : \[ "\*\*\*\*\*\*\*\*\*\*\*\*\*.westeurope.azure… --- ## [CCS results sorting](https://discuss.elastic.co/t/ccs-results-sorting/316285)
**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\ **Replies:** 0\ **Last updated:** [October 11, 2022, 8:29am UTC](https://discuss.elastic.co/t/ccs-results-sorting/316285 "2022-10-11T08:29:35Z")
I am setting up CCS with a remote cluster that contains 2 indexes using Kibana's data (kibana\_sample\_data\_ecommerce and kibana\_sample\_data\_flights). When performing a search across these 2 indexes, I noticed that the da… --- ## [Uptime in Cross-Cluster Search](https://discuss.elastic.co/t/uptime-in-cross-cluster-search/316256)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 1\ **Last updated:** [October 11, 2022, 12:02am UTC](https://discuss.elastic.co/t/uptime-in-cross-cluster-search/316256 "2022-10-11T00:02:46Z")
We recently set-up Heartbeat for two ES clusters (everything running version 8.3.2). However, data from these clusters are viewed from a Cross-Cluster Search (CCS) instance. When I view Uptime from the local cluster Kiba… --- ## [Cross Cluster Search(CCS) or Cross Cluster Replication?](https://discuss.elastic.co/t/cross-cluster-search-ccs-or-cross-cluster-replication/313031)
**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\ **Replies:** 2\ **Last updated:** [August 31, 2022, 3:19pm UTC](https://discuss.elastic.co/t/cross-cluster-search-ccs-or-cross-cluster-replication/313031 "2022-08-31T15:19:47Z")
Hi there: We have a client, they sell goods over the world. They wanted to build a search engine so anyone over the world would be able to use the search engine to find their needs. The database for their goods informat… --- ## [\[Elastic Cloud\] Configuring trust with clusters in a self-managed environment](https://discuss.elastic.co/t/elastic-cloud-configuring-trust-with-clusters-in-a-self-managed-environment/311035)
**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\ **Replies:** 8\ **Last updated:** [August 18, 2022, 12:52pm UTC](https://discuss.elastic.co/t/elastic-cloud-configuring-trust-with-clusters-in-a-self-managed-environment/311035 "2022-08-18T12:52:33Z")
I have two ES clusters: Elastic Cloud (all the data is here) Self-managed cluster (no data, will use for cross-cluster-search in Elastic Cloud) I want the cluster #1 to trust #2, so I can use CSS. So I'm following you… --- ## [Cross Cluster Search - port 9300 - need to open flow in bidirectional way](https://discuss.elastic.co/t/cross-cluster-search-port-9300-need-to-open-flow-in-bidirectional-way/305168)
**Author:** [@federica.forti](https://discuss.elastic.co/u/federica.forti)\ **Replies:** 3\ **Last updated:** [May 19, 2022, 11:03pm UTC](https://discuss.elastic.co/t/cross-cluster-search-port-9300-need-to-open-flow-in-bidirectional-way/305168 "2022-05-19T23:03:02Z")
Hi, i'd like to use Cross Cluster Search between two clusters (ES version: 5.6). For example i'd like to see data from cluster A to cluster B; I'd like to know if there is the need to open the flow in bidirectional way… --- ## [Cross Cluster Search Not Caching](https://discuss.elastic.co/t/cross-cluster-search-not-caching/304504)
**Author:** [@Liam\_B](https://discuss.elastic.co/u/Liam_B)\ **Replies:** 1\ **Last updated:** [May 19, 2022, 9:13am UTC](https://discuss.elastic.co/t/cross-cluster-search-not-caching/304504 "2022-05-19T09:13:22Z")
Hi If I have a couple of clusters, both connected to each other as remote clusters. If I perform a search against a single cluster, I get the benefit of caching of search results within a refresh interval window, if I … --- ## [Cross cluster search](https://discuss.elastic.co/t/cross-cluster-search/303484)
**Author:** [@InJong\_Park](https://discuss.elastic.co/u/InJong_Park)\ **Replies:** 6\ **Last updated:** [May 10, 2022, 6:50am UTC](https://discuss.elastic.co/t/cross-cluster-search/303484 "2022-05-10T06:50:18Z")
Hello. I’m InJong. I have a short question. Is it possible connect es-7.2.1(self) to es-7.17(elastic-cloud) for cross cluster search. --- ## [Cross Cluster Indices on in Index Management tab](https://discuss.elastic.co/t/cross-cluster-indices-on-in-index-management-tab/302768)
**Author:** [@subham](https://discuss.elastic.co/u/subham)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 3:43pm UTC](https://discuss.elastic.co/t/cross-cluster-indices-on-in-index-management-tab/302768 "2022-04-20T15:43:55Z")
Hi, I am not able to find my indices from remote cluster in Index Management tab. However, I am able to create index patterns using pattern cluster-name:index-name. Can someone tell if it's possible to search remote clu… --- ## [Weird behavior with cross cluster settings search.remote vs cluster.remote (elastic v6.5.4)](https://discuss.elastic.co/t/weird-behavior-with-cross-cluster-settings-search-remote-vs-cluster-remote-elastic-v6-5-4/301980)
**Author:** [@dcausse](https://discuss.elastic.co/u/dcausse)\ **Replies:** 1\ **Last updated:** [April 8, 2022, 2:16pm UTC](https://discuss.elastic.co/t/weird-behavior-with-cross-cluster-settings-search-remote-vs-cluster-remote-elastic-v6-5-4/301980 "2022-04-08T14:16:18Z")
Hi, we are running Elasticsearch 6.5.4 and we started to use cross cluster search since 6.3. Our settings were using the search.remote section in the cluster settings and since 6.5 we started using the new preferred clu… --- ## [Cross cluster index in kibana](https://discuss.elastic.co/t/cross-cluster-index-in-kibana/301833)
**Author:** [@subham](https://discuss.elastic.co/u/subham)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 6:21am UTC](https://discuss.elastic.co/t/cross-cluster-index-in-kibana/301833 "2022-04-07T06:21:11Z")
Hi All, Can someone tell whether we can get indices from cross cluster in Index Management. I am able to get the data of new index from remote cluster in dev tools but not able to see the same index in kibana. Please … --- ## [Cross Cluster Search Issue - index\_not\_found\_exception](https://discuss.elastic.co/t/cross-cluster-search-issue-index-not-found-exception/298296)
**Author:** [@lmariselvam](https://discuss.elastic.co/u/lmariselvam)\ **Replies:** 0\ **Last updated:** [February 25, 2022, 3:25pm UTC](https://discuss.elastic.co/t/cross-cluster-search-issue-index-not-found-exception/298296 "2022-02-25T15:25:45Z")
To perform a cross cluster search, I've added the remote cluster using cluster settings API and also confirmed the transport port(9300) of remote cluster seeds are reachable from the search request origin cluster. Below … --- ## [Can i use http communication in ccs (remote cluster)?](https://discuss.elastic.co/t/can-i-use-http-communication-in-ccs-remote-cluster/297559)
**Author:** [@hyuil](https://discuss.elastic.co/u/hyuil)\ **Replies:** 1\ **Last updated:** [February 21, 2022, 2:13am UTC](https://discuss.elastic.co/t/can-i-use-http-communication-in-ccs-remote-cluster/297559 "2022-02-21T02:13:21Z")
hi I'm asking this question because I don't know much even if I read the official document. What is the difference between sniff mode and proxy mode in the remote cluster? Does remote cluster connection only support t… [Next page](https://discuss.elastic.co/tag/ccs-cross-cluster-search/27.md?match_all_tags=true&page=1&tags%5B%5D=ccs-cross-cluster-search)