# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=749

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 750

---

## [How to disable score calculation to improve performance (fuzzy queries)](https://discuss.elastic.co/t/how-to-disable-score-calculation-to-improve-performance-fuzzy-queries/317729)

<div class="topic-metadata">

**Author:** [@Giorgos\_Katiforis](https://discuss.elastic.co/u/Giorgos_Katiforis)\
**Replies:** 0\
**Last updated:** [October 29, 2022, 1:20pm UTC](https://discuss.elastic.co/t/how-to-disable-score-calculation-to-improve-performance-fuzzy-queries/317729 "2022-10-29T13:20:50Z")

</div>

Hello, I would like to know if there is a way to disable the score calculation in Elasticsearch. I am running match queries with fuzziness 2 and I have noticed (using profile )it consumes a lot of time in build\_scorer. …

---

## [Is JavaDoc on the way?](https://discuss.elastic.co/t/is-javadoc-on-the-way/317589)

<div class="topic-metadata">

**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\
**Replies:** 10\
**Last updated:** [October 29, 2022, 5:45am UTC](https://discuss.elastic.co/t/is-javadoc-on-the-way/317589 "2022-10-29T05:45:04Z")

</div>

Hi, is this only me who thinks that Elasticsearch Java API Client is not well documented? All we get from javadoc is basic information about names of methods. The short less than 10 words sentences als explainations for…

---

## [Does forcing/manually setting the id of the document makes the shards unevenly distributed?](https://discuss.elastic.co/t/does-forcing-manually-setting-the-id-of-the-document-makes-the-shards-unevenly-distributed/317372)

<div class="topic-metadata">

**Author:** [@Java2avaj](https://discuss.elastic.co/u/Java2avaj)\
**Replies:** 7\
**Last updated:** [October 29, 2022, 5:32am UTC](https://discuss.elastic.co/t/does-forcing-manually-setting-the-id-of-the-document-makes-the-shards-unevenly-distributed/317372 "2022-10-29T05:32:29Z")

</div>

Does forcing/manually setting the id of the document makes the shards unevenly distributed? Currently, we are forcing the values of id when storing documents in the index. Is this a bad practice? Does it make the shar…

---

## [Multi\_match phrase\_prefix is giving different results for Elastic versions 6.6 and 8.4](https://discuss.elastic.co/t/multi-match-phrase-prefix-is-giving-different-results-for-elastic-versions-6-6-and-8-4/315979)

<div class="topic-metadata">

**Author:** [@Hariprasad4118](https://discuss.elastic.co/u/Hariprasad4118)\
**Replies:** 1\
**Last updated:** [October 29, 2022, 5:03am UTC](https://discuss.elastic.co/t/multi-match-phrase-prefix-is-giving-different-results-for-elastic-versions-6-6-and-8-4/315979 "2022-10-29T05:03:04Z")

</div>

Team, Please help me, I am using same max expansion and same ES Query on Elastic versions 6.6 and 8.4, with same set of data. but giving different results. so, can some one clearly confirms what is the major differenc…

---

## [Metric aggregation on composite buckets not working with nested fields](https://discuss.elastic.co/t/metric-aggregation-on-composite-buckets-not-working-with-nested-fields/317712)

<div class="topic-metadata">

**Author:** [@Ahmed\_Syed](https://discuss.elastic.co/u/Ahmed_Syed)\
**Replies:** 0\
**Last updated:** [October 28, 2022, 8:30pm UTC](https://discuss.elastic.co/t/metric-aggregation-on-composite-buckets-not-working-with-nested-fields/317712 "2022-10-28T20:30:02Z")

</div>

I am able to create buckets from different sources (one of them being a nested field) successfully. However when I do a metric aggregation, the metric aggregation is not applied on the composite bucket. For example: I c…

---

## [Ignore\_case doesn't work for elastic search stop token filter](https://discuss.elastic.co/t/ignore-case-doesnt-work-for-elastic-search-stop-token-filter/317706)

<div class="topic-metadata">

**Author:** [@taugusti](https://discuss.elastic.co/u/taugusti)\
**Replies:** 0\
**Last updated:** [October 28, 2022, 6:23pm UTC](https://discuss.elastic.co/t/ignore-case-doesnt-work-for-elastic-search-stop-token-filter/317706 "2022-10-28T18:23:22Z")

</div>

Trying to follow the example from the URL below to ignore case for stop words. However it doesn't seem to stop case insensitive stop words. for eg it stop "the", but not "The" PUT /my-index-000001 { "settings": { …

---

## [Elastic Search Query performance when source is disabled](https://discuss.elastic.co/t/elastic-search-query-performance-when-source-is-disabled/317348)

<div class="topic-metadata">

**Author:** [@prateek\_shekhar](https://discuss.elastic.co/u/prateek_shekhar)\
**Replies:** 11\
**Last updated:** [October 28, 2022, 6:14pm UTC](https://discuss.elastic.co/t/elastic-search-query-performance-when-source-is-disabled/317348 "2022-10-28T18:14:40Z")

</div>

Hi Everyone, we have an Elasticsearch index with 100 million documents (with replicas it's about 400 million). The index contains nested documents as well. We have a use case where we have to boost the score of the docu…

---

## [Elastic Agent vs Logstash/Elasticsearch output](https://discuss.elastic.co/t/elastic-agent-vs-logstash-elasticsearch-output/316345)

<div class="topic-metadata">

**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\
**Replies:** 1\
**Last updated:** [October 28, 2022, 3:46pm UTC](https://discuss.elastic.co/t/elastic-agent-vs-logstash-elasticsearch-output/316345 "2022-10-28T15:46:46Z")

</div>

Hello, We are thinking of replacing Beats with Elastic Agent and would like to send metrics to Elasticsearch directly and custom logs via Logstash. Is this even possible with Elastic Agent? Looking at Fleet settings the…

---

## [Watcher aggregation transform painless question](https://discuss.elastic.co/t/watcher-aggregation-transform-painless-question/317697)

<div class="topic-metadata">

**Author:** [@joe0228](https://discuss.elastic.co/u/joe0228)\
**Replies:** 0\
**Last updated:** [October 28, 2022, 3:44pm UTC](https://discuss.elastic.co/t/watcher-aggregation-transform-painless-question/317697 "2022-10-28T15:44:42Z")

</div>

Trying to get the result from bucket\_script to use in the transform section - specifically v = params.value // { "trigger": { "schedule": { "intervel": "15m" } }, "input": { "search": { "request": { "search\_ty…

---

## [Metricbeat 7.17.7 generate a network overload on our Kubernetes nodes and API](https://discuss.elastic.co/t/metricbeat-7-17-7-generate-a-network-overload-on-our-kubernetes-nodes-and-api/317681)

<div class="topic-metadata">

**Author:** [@sebglon](https://discuss.elastic.co/u/sebglon)\
**Replies:** 0\
**Last updated:** [October 28, 2022, 12:12pm UTC](https://discuss.elastic.co/t/metricbeat-7-17-7-generate-a-network-overload-on-our-kubernetes-nodes-and-api/317681 "2022-10-28T12:12:02Z")

</div>

After upgrading from Metricbeat 7.10 to 7.17.7, we have a production outage due to network overload on our kubernetes nodes network and API. After deleting the MetricBean daemonset, we have no more issue. We have not i…

---

## [Have Months displayed in chronological order](https://discuss.elastic.co/t/have-months-displayed-in-chronological-order/317346)

<div class="topic-metadata">

**Author:** [@wido](https://discuss.elastic.co/u/wido)\
**Replies:** 7\
**Last updated:** [October 28, 2022, 11:59am UTC](https://discuss.elastic.co/t/have-months-displayed-in-chronological-order/317346 "2022-10-28T11:59:02Z")

</div>

Hi there! We are indexing data in ES to create dashboards using Kibana. There is a field named Month that contains the names of the months indexed as strings to both text and keyword data types. Each month is represent…

---

## [Lost indice without any warning](https://discuss.elastic.co/t/lost-indice-without-any-warning/317668)

<div class="topic-metadata">

**Author:** [@Henri\_L](https://discuss.elastic.co/u/Henri_L)\
**Replies:** 9\
**Last updated:** [October 28, 2022, 10:24am UTC](https://discuss.elastic.co/t/lost-indice-without-any-warning/317668 "2022-10-28T10:24:12Z")

</div>

Hi there I just notice that I lost my indice and this is a bit strange. Could you please help me with the log file below? The command curl -X GET "localhost:9200/\_cat/indices?v" only give me that health status index…

---

## [Create a pattern\_index kibana 7.6.2 api](https://discuss.elastic.co/t/create-a-pattern-index-kibana-7-6-2-api/317619)

<div class="topic-metadata">

**Author:** [@kimo1](https://discuss.elastic.co/u/kimo1)\
**Replies:** 2\
**Last updated:** [October 28, 2022, 7:43am UTC](https://discuss.elastic.co/t/create-a-pattern-index-kibana-7-6-2-api/317619 "2022-10-28T07:43:53Z")

</div>

I have created a dashboard in kibana for monitoring, and I want to create an index\_pattern already exist in elasticsearch with name (idx-traces). I did the following request curl: curl -X POST host:port/api/index\_patte…

---

## [Prepended Term Search is Faster than Term Search for Nested Field](https://discuss.elastic.co/t/prepended-term-search-is-faster-than-term-search-for-nested-field/317567)

<div class="topic-metadata">

**Author:** [@aschattopadhyay](https://discuss.elastic.co/u/aschattopadhyay)\
**Replies:** 2\
**Last updated:** [October 28, 2022, 6:11am UTC](https://discuss.elastic.co/t/prepended-term-search-is-faster-than-term-search-for-nested-field/317567 "2022-10-28T06:11:23Z")

</div>

Hi there: I am very new to Elasticsearch implementation and luckily I got this forum. Just wondering if I can get some help please regarding a scenario that we are facing for our Elasticsearch instance. We have got lik…

---

## [Customized sort in ElasticSearch](https://discuss.elastic.co/t/customized-sort-in-elasticsearch/317198)

<div class="topic-metadata">

**Author:** [@Apurba](https://discuss.elastic.co/u/Apurba)\
**Replies:** 5\
**Last updated:** [October 28, 2022, 5:02am UTC](https://discuss.elastic.co/t/customized-sort-in-elasticsearch/317198 "2022-10-28T05:02:57Z")

</div>

Can I use custom sort in ES? Like, in my ES data, one field values are -\> "A", "A", "B", "B", "C", "C", "C", "D" Can I sort this like -\> "D", "B", "B", "C", "C", "C", "A", "A" If we can sort like this, how the query s…

---

## [Why is .doc() missing in UpdateOperation?](https://discuss.elastic.co/t/why-is-doc-missing-in-updateoperation/317587)

<div class="topic-metadata">

**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\
**Replies:** 1\
**Last updated:** [October 28, 2022, 4:15am UTC](https://discuss.elastic.co/t/why-is-doc-missing-in-updateoperation/317587 "2022-10-28T04:15:25Z")

</div>

Hi, as an junior Java developer try to understand the things by using the "easy way". I actually don't understand what requirements like this mean and can't write code from the scratch with that information: update(Fun…

---

## [java.lang.IllegalArgumentException: Class class co.elastic.clients.elasticsearch.core.bulk.UpdateOperation cannot be read from JSON](https://discuss.elastic.co/t/java-lang-illegalargumentexception-class-class-co-elastic-clients-elasticsearch-core-bulk-updateoperation-cannot-be-read-from-json/317609)

<div class="topic-metadata">

**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\
**Replies:** 1\
**Last updated:** [October 28, 2022, 4:14am UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-class-class-co-elastic-clients-elasticsearch-core-bulk-updateoperation-cannot-be-read-from-json/317609 "2022-10-28T04:14:44Z")

</div>

BulkRequest.Builder brb = new BulkRequest.Builder().index("foo"); //first try Rechnung r6 = new Rechnung(); r6.Rechnungsbetrag = 49.99f; ObjectMapper mapper = new ObjectMapper(); String myjson = mapper.writeValueAsString…

---

## ["Race condition" in Java](https://discuss.elastic.co/t/race-condition-in-java/317615)

<div class="topic-metadata">

**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\
**Replies:** 3\
**Last updated:** [October 28, 2022, 4:09am UTC](https://discuss.elastic.co/t/race-condition-in-java/317615 "2022-10-28T04:09:15Z")

</div>

Hi, what i am experiencing right now is that a document that should be already deleted will be still listet if a search is done directly after the deletion. a) indexing the document xyz b) doing other Elastic-related …

---

## [State changed to FAILED: Missed two check-ins - type: 'ERROR' - sub\_type: 'FAILED'](https://discuss.elastic.co/t/state-changed-to-failed-missed-two-check-ins-type-error-sub-type-failed/317158)

<div class="topic-metadata">

**Author:** [@safuanmansor](https://discuss.elastic.co/u/safuanmansor)\
**Replies:** 1\
**Last updated:** [October 28, 2022, 2:43am UTC](https://discuss.elastic.co/t/state-changed-to-failed-missed-two-check-ins-type-error-sub-type-failed/317158 "2022-10-28T02:43:02Z")

</div>

Hi Elastic Team, Appreciate if you can point me the issue as my elastic-agent installed status change to unhealthy after couple of hours without any configuration change. The logs file are as per the link.

---

## [How can I convert @timestamp from logstash to encoded format as YYYY-MM-DDThh:mm:ss.sss+/-hh:mm](https://discuss.elastic.co/t/how-can-i-convert-timestamp-from-logstash-to-encoded-format-as-yyyy-mm-ddthhss-sss-hh-mm/317608)

<div class="topic-metadata">

**Author:** [@teja\_tata](https://discuss.elastic.co/u/teja_tata)\
**Replies:** 11\
**Last updated:** [October 28, 2022, 1:50am UTC](https://discuss.elastic.co/t/how-can-i-convert-timestamp-from-logstash-to-encoded-format-as-yyyy-mm-ddthhss-sss-hh-mm/317608 "2022-10-28T01:50:18Z")

</div>

I have tried using date filter match option but didn't work. It would be great if someone can help me here.

---

## [Elasticsearch: how the exact matches can rank higher than fuzzy match and phrase match in the elastic search?](https://discuss.elastic.co/t/elasticsearch-how-the-exact-matches-can-rank-higher-than-fuzzy-match-and-phrase-match-in-the-elastic-search/317653)

<div class="topic-metadata">

**Author:** [@paris1](https://discuss.elastic.co/u/paris1)\
**Replies:** 0\
**Last updated:** [October 28, 2022, 12:46am UTC](https://discuss.elastic.co/t/elasticsearch-how-the-exact-matches-can-rank-higher-than-fuzzy-match-and-phrase-match-in-the-elastic-search/317653 "2022-10-28T00:46:44Z")

</div>

0 I'm trying to configure Elasticsearch to give me both exact matches and fuzzy matches and also phrase matches.I'm using Elasticsearch to search namesof foods in a database, and I want it to be fuzzy to allow for minor…

---

## [Logstash can't index into ES: \`action \[indices:admin/auto\_create\] is unauthorized for user\`](https://discuss.elastic.co/t/logstash-cant-index-into-es-action-indices-admin-auto-create-is-unauthorized-for-user/317650)

<div class="topic-metadata">

**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\
**Replies:** 1\
**Last updated:** [October 27, 2022, 11:14pm UTC](https://discuss.elastic.co/t/logstash-cant-index-into-es-action-indices-admin-auto-create-is-unauthorized-for-user/317650 "2022-10-27T23:14:48Z")

</div>

I created a user demoTester with the following roles: /usr/share/elasticsearch/bin/elasticsearch-users useradd demoTester -p demoTester -r kibana\_admin,logstash\_admin,beats\_admin,logstash\_system,monitoring\_user,watcher\_…

---

## [Trying to change filebeat index](https://discuss.elastic.co/t/trying-to-change-filebeat-index/317564)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 4\
**Last updated:** [October 27, 2022, 9:21pm UTC](https://discuss.elastic.co/t/trying-to-change-filebeat-index/317564 "2022-10-27T21:21:26Z")

</div>

I am trying to change the index filebeat writes to from the default "filebeat..." to "suricata..." I have the following in my filebeat.yml: # ======================= Elasticsearch template setting ====================…

---

## [Hanging shutdown with multiple pipelines. Shutdown of pipelines in wrong order](https://discuss.elastic.co/t/hanging-shutdown-with-multiple-pipelines-shutdown-of-pipelines-in-wrong-order/316354)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 2\
**Last updated:** [October 12, 2022, 7:17am UTC](https://discuss.elastic.co/t/hanging-shutdown-with-multiple-pipelines-shutdown-of-pipelines-in-wrong-order/316354 "2022-10-12T07:17:29Z")

</div>

Hi, I have a logstash config with multiple pipelines. One of the pipeline is a central output which ships to elasticsearch. The other pipelines have their own inputs and filters and having that central output pipeline a…

---

## [Logstash : How to extract a nested field from Json log and only index the content of the nested field](https://discuss.elastic.co/t/logstash-how-to-extract-a-nested-field-from-json-log-and-only-index-the-content-of-the-nested-field/317617)

<div class="topic-metadata">

**Author:** [@Ranjith\_kk](https://discuss.elastic.co/u/Ranjith_kk)\
**Replies:** 5\
**Last updated:** [October 27, 2022, 6:38pm UTC](https://discuss.elastic.co/t/logstash-how-to-extract-a-nested-field-from-json-log-and-only-index-the-content-of-the-nested-field/317617 "2022-10-27T18:38:57Z")

</div>

We have some logs in JSON format with a nested field called "data". We are looking for an option to extract only the content of this nested field and send it for indexing with ES. Actual log format: {"field1":"value1",…

---

## [How to Config Elastic Agent in Windows Form .NET framework 4.8 without System variables](https://discuss.elastic.co/t/how-to-config-elastic-agent-in-windows-form-net-framework-4-8-without-system-variables/317639)

<div class="topic-metadata">

**Author:** [@AUnkownS](https://discuss.elastic.co/u/AUnkownS)\
**Replies:** 0\
**Last updated:** [October 27, 2022, 6:28pm UTC](https://discuss.elastic.co/t/how-to-config-elastic-agent-in-windows-form-net-framework-4-8-without-system-variables/317639 "2022-10-27T18:28:14Z")

</div>

Hello, I am trying to config a elastic agent in a windows desktop application(winforms) in the .NET framework 4.8. My goal is to change the Agents Url and Service name, without having to use environment variables. I tri…

---

## [List all indices using Java rest client](https://discuss.elastic.co/t/list-all-indices-using-java-rest-client/317629)

<div class="topic-metadata">

**Author:** [@PV2000](https://discuss.elastic.co/u/PV2000)\
**Replies:** 1\
**Last updated:** [October 27, 2022, 6:00pm UTC](https://discuss.elastic.co/t/list-all-indices-using-java-rest-client/317629 "2022-10-27T18:00:31Z")

</div>

Hi, What is the best way to get a list of all indices in Elastic Search using Java ? I am using RestHighLevelClient. Also, is there a way to get only those indices that match a prefix ? I see cat indices REST endpoin…

---

## [@timestamp missing exception for datastream](https://discuss.elastic.co/t/timestamp-missing-exception-for-datastream/317633)

<div class="topic-metadata">

**Author:** [@Sankar\_S](https://discuss.elastic.co/u/Sankar_S)\
**Replies:** 0\
**Last updated:** [October 27, 2022, 5:24pm UTC](https://discuss.elastic.co/t/timestamp-missing-exception-for-datastream/317633 "2022-10-27T17:24:20Z")

</div>

Getting the below exception while indexing the document into datastream org.elasticsearch.ElasticsearchException: Elasticsearch exception \[type=illegal\_argument\_exception, reason=data stream timestamp field \[@timestamp\]…

---

## [How can I set up autodiscovery for Dockerized mysql metrics and logs using Elastic Agent managed by Fleet?](https://discuss.elastic.co/t/how-can-i-set-up-autodiscovery-for-dockerized-mysql-metrics-and-logs-using-elastic-agent-managed-by-fleet/317632)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 0\
**Last updated:** [October 27, 2022, 5:14pm UTC](https://discuss.elastic.co/t/how-can-i-set-up-autodiscovery-for-dockerized-mysql-metrics-and-logs-using-elastic-agent-managed-by-fleet/317632 "2022-10-27T17:14:08Z")

</div>

Judging from Can I monitor apache inside a docker container? and Autodiscover | Metricbeat Reference \[8.4\] | Elastic there should be a way to configure autodiscovery of my MySQL/MariaDB containers. When I try adding a M…

---

## [What is APM Latency Threshold Alert?](https://discuss.elastic.co/t/what-is-apm-latency-threshold-alert/317627)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 5\
**Last updated:** [October 27, 2022, 4:38pm UTC](https://discuss.elastic.co/t/what-is-apm-latency-threshold-alert/317627 "2022-10-27T16:38:20Z")

</div>

I'm trying to learn what the Latency Threshold Alert is as shown in this picture for Kibana 8.4 But the rule above never seems to fire at all, even though my node-app-1 service averages latency of 10 seconds, which i…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=748)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=750)
