# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1211 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1212 --- ## [After enabling SAML Role mapping not working](https://discuss.elastic.co/t/after-enabling-saml-role-mapping-not-working/286041)
**Author:** [@muralikri32](https://discuss.elastic.co/u/muralikri32)\ **Replies:** 3\ **Last updated:** [October 7, 2021, 12:30pm UTC](https://discuss.elastic.co/t/after-enabling-saml-role-mapping-not-working/286041 "2021-10-07T12:30:56Z")
Hi Chaps, I am trying to configure SSO in On-premises Elasticsearch setup. After configuring SAML (Azure AD) users are able to login to domain password. But users are not been restricted based the roles which i defined.… --- ## [How can I find the query that is eating up my memory?](https://discuss.elastic.co/t/how-can-i-find-the-query-that-is-eating-up-my-memory/285930)
**Author:** [@spdoes](https://discuss.elastic.co/u/spdoes)\ **Replies:** 1\ **Last updated:** [October 7, 2021, 12:29pm UTC](https://discuss.elastic.co/t/how-can-i-find-the-query-that-is-eating-up-my-memory/285930 "2021-10-07T12:29:17Z")
Hello guys, I did set the slowlogs to minimum time but when I read it all and try to find pattern by timestamp, all queries seems lightweight and are taking less than 500ms. is there a way to know the effect of each qu… --- ## [Unable to deploy functionbeat on S3](https://discuss.elastic.co/t/unable-to-deploy-functionbeat-on-s3/285621)
**Author:** [@Priyam\_Maheshwari](https://discuss.elastic.co/u/Priyam_Maheshwari)\ **Replies:** 1\ **Last updated:** [October 7, 2021, 12:28pm UTC](https://discuss.elastic.co/t/unable-to-deploy-functionbeat-on-s3/285621 "2021-10-07T12:28:32Z")
I keep getting the following error Function: cloudwatchlogging, could not deploy, error: bucket 'functionbeat-advertising' already exist and you don't have permission to access it: unknown endpoint, could not resolve en… --- ## [Elasticsearch Match phrase prefix query remove parameter zero\_terms\_query](https://discuss.elastic.co/t/elasticsearch-match-phrase-prefix-query-remove-parameter-zero-terms-query/286127)
**Author:** [@ijaxahmed](https://discuss.elastic.co/u/ijaxahmed)\ **Replies:** 0\ **Last updated:** [October 7, 2021, 12:06pm UTC](https://discuss.elastic.co/t/elasticsearch-match-phrase-prefix-query-remove-parameter-zero-terms-query/286127 "2021-10-07T12:06:53Z")
I am using Elasticsearch 6.2.4 with JEST client. using following library "org.elasticsearch" % "elasticsearch" % "6.2.4" But now i updated the library to 7.15 as "org.elasticsearch" % "elasticsearch" % "7.15.0" u… --- ## [Getting task status in painless script](https://discuss.elastic.co/t/getting-task-status-in-painless-script/286123)
**Author:** [@Himanshu\_Mishra1](https://discuss.elastic.co/u/Himanshu_Mishra1)\ **Replies:** 0\ **Last updated:** [October 7, 2021, 11:51am UTC](https://discuss.elastic.co/t/getting-task-status-in-painless-script/286123 "2021-10-07T11:51:14Z")
Hi Team, I am using ES 6.8.7. I am trying to avoid parallel execution of long running \_update\_by\_query requests in Elasticsearch as they are CPU and Memory intensive. I want to make sure that the next task is kept in s… --- ## [A question on ILM behaviour on restored indices](https://discuss.elastic.co/t/a-question-on-ilm-behaviour-on-restored-indices/284593)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 1\ **Last updated:** [October 7, 2021, 11:49am UTC](https://discuss.elastic.co/t/a-question-on-ilm-behaviour-on-restored-indices/284593 "2021-10-07T11:49:01Z")
Hi, I have configured ILM policy to store the data for one month. We create indices daily and after they are a month old we put them as a snapshot in a S3 bucket. Sometimes there is need for older logs. I can easily re… --- ## [Integrate dynatrace with ELK to fetch real time data](https://discuss.elastic.co/t/integrate-dynatrace-with-elk-to-fetch-real-time-data/286122)
**Author:** [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\ **Replies:** 0\ **Last updated:** [October 7, 2021, 11:40am UTC](https://discuss.elastic.co/t/integrate-dynatrace-with-elk-to-fetch-real-time-data/286122 "2021-10-07T11:40:34Z")
can anyone provide with the options to integrate dynatrace with ELK to fetch the real time data? All the metrics from dynatrace could be seen in elk in a particular index. --- ## [What is the default password for elasticsearch 8 alpha2](https://discuss.elastic.co/t/what-is-the-default-password-for-elasticsearch-8-alpha2/286119)
**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\ **Replies:** 2\ **Last updated:** [October 7, 2021, 11:40am UTC](https://discuss.elastic.co/t/what-is-the-default-password-for-elasticsearch-8-alpha2/286119 "2021-10-07T11:40:03Z")
Hi, I am trying Elasticsearch 8 alpha release 2 version in docker container. can anyone provide me the default password/doc on this. Thanks found myself.. posting with variable like docker run --rm -d -e ELASTIC\_P… --- ## [Analyzer and Fuzzy](https://discuss.elastic.co/t/analyzer-and-fuzzy/286115)
**Author:** [@RabBit\_BR](https://discuss.elastic.co/u/RabBit_BR)\ **Replies:** 0\ **Last updated:** [October 7, 2021, 10:33am UTC](https://discuss.elastic.co/t/analyzer-and-fuzzy/286115 "2021-10-07T10:33:38Z")
Hi. In need of a second opinion. I created an analyzer that generates the tokens by reducing the term to its radical. Ex (I'm using a Brazilian analyzer, my language is Portuguese): confeitaria -\> confeit conflito -\>… --- ## [Logstash date filter don't parse time](https://discuss.elastic.co/t/logstash-date-filter-dont-parse-time/286064)
**Author:** [@AlexG](https://discuss.elastic.co/u/AlexG)\ **Replies:** 2\ **Last updated:** [October 7, 2021, 10:17am UTC](https://discuss.elastic.co/t/logstash-date-filter-dont-parse-time/286064 "2021-10-07T10:17:19Z")
I have a log in msi installer format (time only, without date): MSI (c) (F0:8C) \[09:00:05:007\]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (F0:8C) \[09:00:05:007\]: Grabbed executio… --- ## [Spammed by deprication warnings on scripted fields](https://discuss.elastic.co/t/spammed-by-deprication-warnings-on-scripted-fields/286032)
**Author:** [@flalar](https://discuss.elastic.co/u/flalar)\ **Replies:** 5\ **Last updated:** [October 7, 2021, 9:44am UTC](https://discuss.elastic.co/t/spammed-by-deprication-warnings-on-scripted-fields/286032 "2021-10-07T09:44:32Z")
We' getting spammed in kibana dashboards with following deprecation messages Warning: 299 Elasticsearch-7.15.0-79d65f6e357953a5b3cbcc5e2c7c21073d89aa29 "\[script\]\[1:1019\] Deprecated field \[inline\] used, expected \[source\]… --- ## [Number of indices while reworking general architecture](https://discuss.elastic.co/t/number-of-indices-while-reworking-general-architecture/285600)
**Author:** [@GCosta](https://discuss.elastic.co/u/GCosta)\ **Replies:** 3\ **Last updated:** [October 7, 2021, 9:58am UTC](https://discuss.elastic.co/t/number-of-indices-while-reworking-general-architecture/285600 "2021-10-07T09:58:37Z")
Hello everyone, In our ES 6.8, we're planning to rethink our current indices partition as we acknowledged, month after month, that the starting decisions about indices was not properly planned. We now got 3 TB of data … --- ## [Elasticsearch Java API async/sync calls timeout issue](https://discuss.elastic.co/t/elasticsearch-java-api-async-sync-calls-timeout-issue/286112)
**Author:** [@pkulyk](https://discuss.elastic.co/u/pkulyk)\ **Replies:** 0\ **Last updated:** [October 7, 2021, 9:41am UTC](https://discuss.elastic.co/t/elasticsearch-java-api-async-sync-calls-timeout-issue/286112 "2021-10-07T09:41:19Z")
Hi all! I have a question regarding some king of locking in ES (Java API). There should be one async call that start a process and send a response to user that process is in on progress, but all other method can be not … --- ## [Problem with elasticsearch on single-node cluster](https://discuss.elastic.co/t/problem-with-elasticsearch-on-single-node-cluster/286068)
**Author:** [@vasilev](https://discuss.elastic.co/u/vasilev)\ **Replies:** 2\ **Last updated:** [October 7, 2021, 9:22am UTC](https://discuss.elastic.co/t/problem-with-elasticsearch-on-single-node-cluster/286068 "2021-10-07T09:22:37Z")
Hello, I have one single node Elasticsearch cluster that was working for months. yesterday I have restarted the virtual server and after that it has problems. now I have redeployed again the kubernetes configuration a… --- ## [Table and sub-aggregation buckets result](https://discuss.elastic.co/t/table-and-sub-aggregation-buckets-result/286104)
**Author:** [@Vladimir\_Pavlovsky](https://discuss.elastic.co/u/Vladimir_Pavlovsky)\ **Replies:** 0\ **Last updated:** [October 7, 2021, 7:56am UTC](https://discuss.elastic.co/t/table-and-sub-aggregation-buckets-result/286104 "2021-10-07T07:56:42Z")
Hello! I have documents with ip and login. Every user can connecting with different ip address. Anyway i have this query: Result: I need to get all ip addresses to each login like this response: | LOGIN | IP1,… --- ## [Logstash json messages on tcp-input truncated under high load](https://discuss.elastic.co/t/logstash-json-messages-on-tcp-input-truncated-under-high-load/286102)
**Author:** [@hajeve](https://discuss.elastic.co/u/hajeve)\ **Replies:** 0\ **Last updated:** [October 7, 2021, 7:41am UTC](https://discuss.elastic.co/t/logstash-json-messages-on-tcp-input-truncated-under-high-load/286102 "2021-10-07T07:41:20Z")
We are receiving BIG IP F5 request-logs in Logstash on a tcp-input (with codec =\> "json\_lines") in our production environment. We see that a lot of messages (json) are truncated and result in many (thousands per hour) js… --- ## [Which structure of nested field is more efficient?](https://discuss.elastic.co/t/which-structure-of-nested-field-is-more-efficient/286096)
**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\ **Replies:** 0\ **Last updated:** [October 7, 2021, 6:58am UTC](https://discuss.elastic.co/t/which-structure-of-nested-field-is-more-efficient/286096 "2021-10-07T06:58:39Z")
I'm using Elasticsearch 7.10 and I have an ES index which includes about 3M documents. I am going to add nested field (I call it items) which has fields as below: store\_id (long) big\_category\_id (integer / there are o… --- ## [Query\_string query length limit](https://discuss.elastic.co/t/query-string-query-length-limit/286095)
**Author:** [@lc\_l](https://discuss.elastic.co/u/lc_l)\ **Replies:** 0\ **Last updated:** [October 7, 2021, 6:55am UTC](https://discuss.elastic.co/t/query-string-query-length-limit/286095 "2021-10-07T06:55:35Z")
Hi , I've seen an old post of similar question Query string length limit and the answer "max\_clause\_count" seems to belong to DSL ? But what I concern is the exact character count in query.query\_string.query { "quer… --- ## [Is Specific license required to use elastic search ODBC driver](https://discuss.elastic.co/t/is-specific-license-required-to-use-elastic-search-odbc-driver/286089)
**Author:** [@Magesh\_02](https://discuss.elastic.co/u/Magesh_02)\ **Replies:** 1\ **Last updated:** [October 7, 2021, 6:02am UTC](https://discuss.elastic.co/t/is-specific-license-required-to-use-elastic-search-odbc-driver/286089 "2021-10-07T06:02:12Z")
I thought to use Elasticsearch odbc driver with power bi tool. is there any Specific license required to use ODBC driver? --- ## [Curl to single node elasticsearch cluster gets timed out from within the AKS cluster](https://discuss.elastic.co/t/curl-to-single-node-elasticsearch-cluster-gets-timed-out-from-within-the-aks-cluster/285326)
**Author:** [@Manish\_Bilung](https://discuss.elastic.co/u/Manish_Bilung)\ **Replies:** 1\ **Last updated:** [October 7, 2021, 4:50am UTC](https://discuss.elastic.co/t/curl-to-single-node-elasticsearch-cluster-gets-timed-out-from-within-the-aks-cluster/285326 "2021-10-07T04:50:35Z")
I have a single node Elasticsearch cluster which is deployed using a kubernetes deployment object. The Elasticsearch pod's port are exposed using a kubernetes service object. K8s Deployment and Service yaml: apiVersion… --- ## [Need example of indexing GeoJson string with NEST](https://discuss.elastic.co/t/need-example-of-indexing-geojson-string-with-nest/286077)
**Author:** [@chm](https://discuss.elastic.co/u/chm)\ **Replies:** 0\ **Last updated:** [October 6, 2021, 10:50pm UTC](https://discuss.elastic.co/t/need-example-of-indexing-geojson-string-with-nest/286077 "2021-10-06T22:50:42Z")
Hi, Are there any current examples or documentation about how to index a GeoJson format string into a document field with the NEST library? I'd also be keen to know whether using GeoJson with Elasticsearch is supported/… --- ## [NEST Geo shape filter to shapes containing a point](https://discuss.elastic.co/t/nest-geo-shape-filter-to-shapes-containing-a-point/285414)
**Author:** [@chm](https://discuss.elastic.co/u/chm)\ **Replies:** 1\ **Last updated:** [October 6, 2021, 11:05pm UTC](https://discuss.elastic.co/t/nest-geo-shape-filter-to-shapes-containing-a-point/285414 "2021-10-06T23:05:27Z")
Hi, I'm trying to filter based on location with NEST using the docs here and post here. But I think my use case is different to those examples in two ways. I want to filter based on a point being Within a polygon/shap… --- ## [Can't get \_reload\_search\_analyzers to reload search analyzers](https://discuss.elastic.co/t/cant-get-reload-search-analyzers-to-reload-search-analyzers/286074)
**Author:** [@nahh](https://discuss.elastic.co/u/nahh)\ **Replies:** 0\ **Last updated:** [October 6, 2021, 9:39pm UTC](https://discuss.elastic.co/t/cant-get-reload-search-analyzers-to-reload-search-analyzers/286074 "2021-10-06T21:39:09Z")
I'm trying to update my synonyms file and I'm using the \_reload\_search\_analyzers API as documented here: However, it doesn't seem to be reloading my search analyzer. I see a reload log entry but nothing that reference… --- ## [Error: Cannot invoke "java.lang.CharSequence.length()" because "this.wrapped" is null](https://discuss.elastic.co/t/error-cannot-invoke-java-lang-charsequence-length-because-this-wrapped-is-null/286076)
**Author:** [@Thanura\_Kannangara](https://discuss.elastic.co/u/Thanura_Kannangara)\ **Replies:** 1\ **Last updated:** [October 6, 2021, 11:14pm UTC](https://discuss.elastic.co/t/error-cannot-invoke-java-lang-charsequence-length-because-this-wrapped-is-null/286076 "2021-10-06T23:14:22Z")
Hey Folks, I ran into this error when I tried to run my logstash pipeline \[2021-10-06T21:41:34,176\]\[WARN \]\[logstash.outputs.elasticsearch\]\[logstash\_pipeline\_2\]\[e957447bf4995516c816dfcbd573d1dabd794c31f242e6642bc68deb57… --- ## [HyperThreading vs performance](https://discuss.elastic.co/t/hyperthreading-vs-performance/286072)
**Author:** [@Vadym](https://discuss.elastic.co/u/Vadym)\ **Replies:** 0\ **Last updated:** [October 6, 2021, 8:54pm UTC](https://discuss.elastic.co/t/hyperthreading-vs-performance/286072 "2021-10-06T20:54:49Z")
Hi guys, We have 15x ES servers with 20 physical cores and 500Gb ram each. Will we benefit from leaving HT on on ES Data nodes in all cases or can it affect performance negatively in some cases? Can it affect query res… --- ## [Filter out dot prefix indices from kibana?](https://discuss.elastic.co/t/filter-out-dot-prefix-indices-from-kibana/286066)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 2\ **Last updated:** [October 6, 2021, 8:20pm UTC](https://discuss.elastic.co/t/filter-out-dot-prefix-indices-from-kibana/286066 "2021-10-06T20:20:19Z")
Is there an easy way to show all indices except those dot prefix internal ones? I often use GET \_cat/indices?v to list all my indices. It's kind of annoying to include those system ones I don't care for my use case. --- ## [Kibana email connector issues](https://discuss.elastic.co/t/kibana-email-connector-issues/284502)
**Author:** [@morgan.atwood](https://discuss.elastic.co/u/morgan.atwood)\ **Replies:** 2\ **Last updated:** [October 6, 2021, 7:51pm UTC](https://discuss.elastic.co/t/kibana-email-connector-issues/284502 "2021-10-06T19:51:48Z")
Hey y'all :wave: Wondering if anyone has experienced the same issue as me with setting up a email connector in Kibana while using the "secure" switch? I'm used to using just watchers and setting up alerts through that m… --- ## [File structure cannot be determined](https://discuss.elastic.co/t/file-structure-cannot-be-determined/286065)
**Author:** [@Surya\_Raviraj](https://discuss.elastic.co/u/Surya_Raviraj)\ **Replies:** 1\ **Last updated:** [October 6, 2021, 7:45pm UTC](https://discuss.elastic.co/t/file-structure-cannot-be-determined/286065 "2021-10-06T19:45:55Z")
I am trying to upload a very basic csv file, however elastic keeps throwing me the "File structure cannot be determined" error. I'm attaching a picture of my csv file here. I've made sure all the time formats are the sam… --- ## [Docker swarm - create a single service elasticsearch 3 node cluster](https://discuss.elastic.co/t/docker-swarm-create-a-single-service-elasticsearch-3-node-cluster/286027)
**Author:** [@Bieniek](https://discuss.elastic.co/u/Bieniek)\ **Replies:** 1\ **Last updated:** [October 6, 2021, 6:12pm UTC](https://discuss.elastic.co/t/docker-swarm-create-a-single-service-elasticsearch-3-node-cluster/286027 "2021-10-06T18:12:40Z")
I’m trying to create a single service Elasticsearch 3 node cluster. I cannot set the cluster.initial\_master\_nodes environment variable appropriately. I’m using: redhat 7 server docker Version: 17.09.0-ce The below EFK… --- ## [Problema with italian analyzer](https://discuss.elastic.co/t/problema-with-italian-analyzer/286052)
**Author:** [@Giovanni\_Montobbio](https://discuss.elastic.co/u/Giovanni_Montobbio)\ **Replies:** 0\ **Last updated:** [October 6, 2021, 4:16pm UTC](https://discuss.elastic.co/t/problema-with-italian-analyzer/286052 "2021-10-06T16:16:30Z")
Hi guys, I noticed that the default Elasticsearch italian analyzer does not stem words long less than 6 characters and this obviously creates a problem for my work. Do you know how can I solve this problem? Thanks in adv… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1210) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1212)