# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1009

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1010

---

## [Erro ODBC Elastic](https://discuss.elastic.co/t/erro-odbc-elastic/220240)

<div class="topic-metadata">

**Author:** [@FernandoMOTA](https://discuss.elastic.co/u/FernandoMOTA)\
**Replies:** 1\
**Last updated:** [February 21, 2020, 4:59pm UTC](https://discuss.elastic.co/t/erro-odbc-elastic/220240 "2020-02-21T16:59:48Z")

</div>

ODBC DSN error when trying to authenticate locally even though I don't try password and username

---

## [Running Multiple nodes on localhost, but Kibana shows number\_of\_nodes=1](https://discuss.elastic.co/t/running-multiple-nodes-on-localhost-but-kibana-shows-number-of-nodes-1/220388)

<div class="topic-metadata">

**Author:** [@karlpy](https://discuss.elastic.co/u/karlpy)\
**Replies:** 3\
**Last updated:** [February 21, 2020, 4:24pm UTC](https://discuss.elastic.co/t/running-multiple-nodes-on-localhost-but-kibana-shows-number-of-nodes-1/220388 "2020-02-21T16:24:39Z")

</div>

I'm running 2 nodes on my localhost. The nodes found each other successfully as shown in the log of the second node below. But when running GET /\_cluster/health in kibana, it shows only 1 node. { "cluster\_name" : "elas…

---

## [Installing Opendistro ES on Amazon Linux - ES running but empty reply form server](https://discuss.elastic.co/t/installing-opendistro-es-on-amazon-linux-es-running-but-empty-reply-form-server/220318)

<div class="topic-metadata">

**Author:** [@reshma\_ramakrishnan](https://discuss.elastic.co/u/reshma_ramakrishnan)\
**Replies:** 1\
**Last updated:** [February 21, 2020, 3:14pm UTC](https://discuss.elastic.co/t/installing-opendistro-es-on-amazon-linux-es-running-but-empty-reply-form-server/220318 "2020-02-21T15:14:27Z")

</div>

I am installing Opendistro Elasticsearch using RPM into Amazon Linux based EC2 instance. I see my ES is running but when I do curl http://localhost:9200/ it returns the below error: curl: (52) Empty reply from server …

---

## [Store Documents in Elastic Search with Edit and Search options](https://discuss.elastic.co/t/store-documents-in-elastic-search-with-edit-and-search-options/220394)

<div class="topic-metadata">

**Author:** [@vijaykrishnach1](https://discuss.elastic.co/u/vijaykrishnach1)\
**Replies:** 1\
**Last updated:** [February 21, 2020, 3:09pm UTC](https://discuss.elastic.co/t/store-documents-in-elastic-search-with-edit-and-search-options/220394 "2020-02-21T15:09:27Z")

</div>

Want to check if we can store word documents in in Elastic Search with Edit and Search options features? search by content in document, pull up the document and edit that document

---

## [Adding data rows to existing index transactionally](https://discuss.elastic.co/t/adding-data-rows-to-existing-index-transactionally/220385)

<div class="topic-metadata">

**Author:** [@vmanohar1](https://discuss.elastic.co/u/vmanohar1)\
**Replies:** 2\
**Last updated:** [February 21, 2020, 2:21pm UTC](https://discuss.elastic.co/t/adding-data-rows-to-existing-index-transactionally/220385 "2020-02-21T14:21:13Z")

</div>

Hi.. If I want to do - Begin DELETE one specific row (I guess by key). Update another specific row. Update yet another specific row. End Is that possible with ElasticSearch 7.6?? Please let me know. Thanks.

---

## [Netty4TcpChannel Negative longs unsupported - repeated in logs](https://discuss.elastic.co/t/netty4tcpchannel-negative-longs-unsupported-repeated-in-logs/219235)

<div class="topic-metadata">

**Author:** [@Fangy](https://discuss.elastic.co/u/Fangy)\
**Replies:** 7\
**Last updated:** [February 21, 2020, 2:05pm UTC](https://discuss.elastic.co/t/netty4tcpchannel-negative-longs-unsupported-repeated-in-logs/219235 "2020-02-21T14:05:42Z")

</div>

Hello, after cluster update to 7.6.0 I have these messages repeated in plain.log. \[2020-02-13T15:56:52,878\]\[WARN \]\[o.e.t.OutboundHandler \] \[ela3\] send message failed \[channel: Netty4TcpChannel{localAddress=/A.B.C.95:…

---

## [GET returns only 10000 documents](https://discuss.elastic.co/t/get-returns-only-10000-documents/220377)

<div class="topic-metadata">

**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\
**Replies:** 1\
**Last updated:** [February 21, 2020, 1:55pm UTC](https://discuss.elastic.co/t/get-returns-only-10000-documents/220377 "2020-02-21T13:55:58Z")

</div>

hello, i have the following: GET /analytics-staging-2019.02.\*/\_search { "size": 0 } i have specified size but this is still returning only: { "took" : 7, "timed\_out" : false, "\_shards" : { "total" : 150, …

---

## [Info on slowlog](https://discuss.elastic.co/t/info-on-slowlog/219948)

<div class="topic-metadata">

**Author:** [@dantonag](https://discuss.elastic.co/u/dantonag)\
**Replies:** 2\
**Last updated:** [February 21, 2020, 1:44pm UTC](https://discuss.elastic.co/t/info-on-slowlog/219948 "2020-02-21T13:44:58Z")

</div>

Hello, we are on ES6.8 with a big cluster (many terabytes indexed per day), and sometimes the search thread pool fills up (currently the len is set to 1000). We would like to know which queries are filling our search q…

---

## [About parent-child datatypes](https://discuss.elastic.co/t/about-parent-child-datatypes/220375)

<div class="topic-metadata">

**Author:** [@critskiy](https://discuss.elastic.co/u/critskiy)\
**Replies:** 1\
**Last updated:** [February 21, 2020, 1:39pm UTC](https://discuss.elastic.co/t/about-parent-child-datatypes/220375 "2020-02-21T13:39:13Z")

</div>

Hello there! I was experimenting around parent-child relationships and I found interesting thing, but, I'd be glad if anyone would point out what needs to be done correctly. Let's suppose we have an index with parent-c…

---

## [How to parse snapshot .dat file?](https://discuss.elastic.co/t/how-to-parse-snapshot-dat-file/218888)

<div class="topic-metadata">

**Author:** [@Sheraz\_Tariq](https://discuss.elastic.co/u/Sheraz_Tariq)\
**Replies:** 12\
**Last updated:** [February 21, 2020, 1:36pm UTC](https://discuss.elastic.co/t/how-to-parse-snapshot-dat-file/218888 "2020-02-21T13:36:29Z")

</div>

I want to store all of the documents added to shards since the last snapshot to a database table and I don't want to restore an entire cluster for this. I've downloaded the snap-{uuid}.dat, meta-{uuid}.dat and relevant i…

---

## [No logs after enabling Xpack in Kibana and Orchestrator](https://discuss.elastic.co/t/no-logs-after-enabling-xpack-in-kibana-and-orchestrator/220354)

<div class="topic-metadata">

**Author:** [@domer](https://discuss.elastic.co/u/domer)\
**Replies:** 0\
**Last updated:** [February 21, 2020, 12:32pm UTC](https://discuss.elastic.co/t/no-logs-after-enabling-xpack-in-kibana-and-orchestrator/220354 "2020-02-21T12:32:28Z")

</div>

Hi Guys, I'm new on a forum, so if I'm writing in a wrong subforum, please let me know where I should do it. We have decided to use ElasticSearch and Kibana to read our logs from Orchestrator. After doing fresh instala…

---

## [How to reduce respone time of elasticsearch](https://discuss.elastic.co/t/how-to-reduce-respone-time-of-elasticsearch/220283)

<div class="topic-metadata">

**Author:** [@nathlee](https://discuss.elastic.co/u/nathlee)\
**Replies:** 3\
**Last updated:** [February 21, 2020, 12:26pm UTC](https://discuss.elastic.co/t/how-to-reduce-respone-time-of-elasticsearch/220283 "2020-02-21T12:26:50Z")

</div>

I use elasticsearch to store event logs per day like this . I use one node with 16gb ram 8core, sometimes the response time of my server is too slow. I know I shouldn't use too many shards but I must save one event in o…

---

## [How to Save/Analyze queries made to elasticsearch endpoint?](https://discuss.elastic.co/t/how-to-save-analyze-queries-made-to-elasticsearch-endpoint/220183)

<div class="topic-metadata">

**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\
**Replies:** 4\
**Last updated:** [February 21, 2020, 12:26pm UTC](https://discuss.elastic.co/t/how-to-save-analyze-queries-made-to-elasticsearch-endpoint/220183 "2020-02-21T12:26:04Z")

</div>

Hi, I have an elasticsearch cluster hosted on AWS. What I would like to know if there are any ways to save what the user searches via the endpoint and then analyze it?

---

## [Autocomplete based on past user searches](https://discuss.elastic.co/t/autocomplete-based-on-past-user-searches/220180)

<div class="topic-metadata">

**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\
**Replies:** 2\
**Last updated:** [February 21, 2020, 12:01pm UTC](https://discuss.elastic.co/t/autocomplete-based-on-past-user-searches/220180 "2020-02-21T12:01:26Z")

</div>

I am trying to add autocomplete based on what the user searches. Currently, I have the following mapping: { "courts\_2": { "mappings": { "properties": { "author": { "type": "text", …

---

## [Docker elaticsearch is not working](https://discuss.elastic.co/t/docker-elaticsearch-is-not-working/220346)

<div class="topic-metadata">

**Author:** [@anmol27katyani](https://discuss.elastic.co/u/anmol27katyani)\
**Replies:** 0\
**Last updated:** [February 21, 2020, 11:52am UTC](https://discuss.elastic.co/t/docker-elaticsearch-is-not-working/220346 "2020-02-21T11:52:05Z")

</div>

Situation: I have a Linux system and creating a cluster of 3 nodes inside of docker but it is not working fluently Looking for help,Target is to get 3 nodes running and I have access to elasticsearch.yml of individual y…

---

## [Elasticsearch 2.4 reject documents that has multiple datatypes in particular value](https://discuss.elastic.co/t/elasticsearch-2-4-reject-documents-that-has-multiple-datatypes-in-particular-value/220294)

<div class="topic-metadata">

**Author:** [@shagun](https://discuss.elastic.co/u/shagun)\
**Replies:** 5\
**Last updated:** [February 21, 2020, 11:26am UTC](https://discuss.elastic.co/t/elasticsearch-2-4-reject-documents-that-has-multiple-datatypes-in-particular-value/220294 "2020-02-21T11:26:13Z")

</div>

I am using elastic search 2.4 and when I put documents on elasticsearch, the documents that contain different data types for some field are rejected by ES. This is because of the mapping I guess. I need to insert all the…

---

## [Create an index pattern from a xpack monitornig index?](https://discuss.elastic.co/t/create-an-index-pattern-from-a-xpack-monitornig-index/220335)

<div class="topic-metadata">

**Author:** [@Mattness](https://discuss.elastic.co/u/Mattness)\
**Replies:** 0\
**Last updated:** [February 21, 2020, 11:15am UTC](https://discuss.elastic.co/t/create-an-index-pattern-from-a-xpack-monitornig-index/220335 "2020-02-21T11:15:37Z")

</div>

Is it possible to create an index pattern from an index that collects the xpack.monitoring data? Can I configure xpack.monitoring to output all its data to one specified index? Regards

---

## [Python/Elasticsearch Bulk problem](https://discuss.elastic.co/t/python-elasticsearch-bulk-problem/220219)

<div class="topic-metadata">

**Author:** [@Ivan\_Devic](https://discuss.elastic.co/u/Ivan_Devic)\
**Replies:** 2\
**Last updated:** [February 21, 2020, 9:20am UTC](https://discuss.elastic.co/t/python-elasticsearch-bulk-problem/220219 "2020-02-21T09:20:28Z")

</div>

Hi all, I would like to perform bulk request of next action. I want to create document if it does not exist, but I would like to update it, if it does exist. Within the update, I append new values (new\_a and new\_b) to a…

---

## [\[plugin-development\] Custom X-Pack action plugin](https://discuss.elastic.co/t/plugin-development-custom-x-pack-action-plugin/220179)

<div class="topic-metadata">

**Author:** [@klashxx](https://discuss.elastic.co/u/klashxx)\
**Replies:** 4\
**Last updated:** [February 21, 2020, 10:44am UTC](https://discuss.elastic.co/t/plugin-development-custom-x-pack-action-plugin/220179 "2020-02-21T10:44:33Z")

</div>

Hi every one. This is the situation, I want to develop a new X-Pack action plugin to implement some missing functionality in the default catalog (https://www.elastic.co/guide/en/x-pack/6.2/actions.html). The documentat…

---

## [Replicated index with masked fields](https://discuss.elastic.co/t/replicated-index-with-masked-fields/220329)

<div class="topic-metadata">

**Author:** [@paulcarey](https://discuss.elastic.co/u/paulcarey)\
**Replies:** 0\
**Last updated:** [February 21, 2020, 10:09am UTC](https://discuss.elastic.co/t/replicated-index-with-masked-fields/220329 "2020-02-21T10:09:35Z")

</div>

Hi I'd like to replicate an index to a remote cluster, but with the source documents modified by either masking or removing a small selection of fields. Combining CCR with an pre-processing pipeline / ingest node looks…

---

## [Search for startsWith and contains combined with sorting](https://discuss.elastic.co/t/search-for-startswith-and-contains-combined-with-sorting/220323)

<div class="topic-metadata">

**Author:** [@krisbude](https://discuss.elastic.co/u/krisbude)\
**Replies:** 0\
**Last updated:** [February 21, 2020, 9:40am UTC](https://discuss.elastic.co/t/search-for-startswith-and-contains-combined-with-sorting/220323 "2020-02-21T09:40:28Z")

</div>

Hello, I have a query that looks like the following: { "sort": \[ { "\_score": "DESC", "name.sort": "ASC" } \], "size": "250", "query": { "bool": { …

---

## [SAML Elasticsearch](https://discuss.elastic.co/t/saml-elasticsearch/220165)

<div class="topic-metadata">

**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\
**Replies:** 2\
**Last updated:** [February 21, 2020, 7:37am UTC](https://discuss.elastic.co/t/saml-elasticsearch/220165 "2020-02-21T07:37:21Z")

</div>

Hi, Suppose my identity provider does not know what is SAML metadata file or how to generate it . How can i generate SAML metadata file for identity provider. Also can elasticsearch work as identity provider

---

## [Rollup terms aggregation giving wrong result with array fields](https://discuss.elastic.co/t/rollup-terms-aggregation-giving-wrong-result-with-array-fields/220300)

<div class="topic-metadata">

**Author:** [@darkwarrior](https://discuss.elastic.co/u/darkwarrior)\
**Replies:** 0\
**Last updated:** [February 21, 2020, 7:15am UTC](https://discuss.elastic.co/t/rollup-terms-aggregation-giving-wrong-result-with-array-fields/220300 "2020-02-21T07:15:32Z")

</div>

Hello, I am trying to do rollup on array fields but when I use terms aggregation on that field I am getting wrong data in rollup query result. My index template looks like this : { "subjects" : { …

---

## [Is the HighLevelRestClient no supported in the Java Testing Framework?](https://discuss.elastic.co/t/is-the-highlevelrestclient-no-supported-in-the-java-testing-framework/218083)

<div class="topic-metadata">

**Author:** [@dg1](https://discuss.elastic.co/u/dg1)\
**Replies:** 12\
**Last updated:** [February 21, 2020, 7:05am UTC](https://discuss.elastic.co/t/is-the-highlevelrestclient-no-supported-in-the-java-testing-framework/218083 "2020-02-21T07:05:56Z")

</div>

After spending quite a bit of time fighting jar hell issues trying to setup the java testing framework, and tweaking intellij settings to accommodate it, I ended up not being able to get my HighLevelRestClient to connect…

---

## [Snapshot and restore to different disks](https://discuss.elastic.co/t/snapshot-and-restore-to-different-disks/220293)

<div class="topic-metadata">

**Author:** [@samiujan](https://discuss.elastic.co/u/samiujan)\
**Replies:** 1\
**Last updated:** [February 21, 2020, 7:00am UTC](https://discuss.elastic.co/t/snapshot-and-restore-to-different-disks/220293 "2020-02-21T07:00:28Z")

</div>

Hi I want to set up Elasticsearch 7.5 offline backups and I found the "Snapshot and Restore" functionality in Kibana (https://www.elastic.co/guide/en/elasticsearch/reference/7.5/snapshot-restore.html) This tells me tha…

---

## [Can we remove trace of data from elastic search query response](https://discuss.elastic.co/t/can-we-remove-trace-of-data-from-elastic-search-query-response/220199)

<div class="topic-metadata">

**Author:** [@Vishal\_Aggarwal](https://discuss.elastic.co/u/Vishal_Aggarwal)\
**Replies:** 2\
**Last updated:** [February 21, 2020, 6:30am UTC](https://discuss.elastic.co/t/can-we-remove-trace-of-data-from-elastic-search-query-response/220199 "2020-02-21T06:30:46Z")

</div>

I want to remove the search trace from elastic query response as below: Elastic query: curl -u username:password elasticURL/elastic\_index\_name/\_search?pretty&filter\_path=hits.hits.\_source,agggregations.\*\*.hits.hits.\_so…

---

## [How Update Type of field or Update all values of field](https://discuss.elastic.co/t/how-update-type-of-field-or-update-all-values-of-field/218760)

<div class="topic-metadata">

**Author:** [@thewasta](https://discuss.elastic.co/u/thewasta)\
**Replies:** 4\
**Last updated:** [February 21, 2020, 5:16am UTC](https://discuss.elastic.co/t/how-update-type-of-field-or-update-all-values-of-field/218760 "2020-02-21T05:16:21Z")

</div>

Hello there! This is the current mappings for a index, and I want to update/edit date field from text to date GET testing/\_search "mappings" : { "inventory" : { "properties" : { "date…

---

## [Need help with xpack security authentication in 6.3.1](https://discuss.elastic.co/t/need-help-with-xpack-security-authentication-in-6-3-1/220286)

<div class="topic-metadata">

**Author:** [@fory](https://discuss.elastic.co/u/fory)\
**Replies:** 1\
**Last updated:** [February 21, 2020, 3:48am UTC](https://discuss.elastic.co/t/need-help-with-xpack-security-authentication-in-6-3-1/220286 "2020-02-21T03:48:45Z")

</div>

I have two ElasticSearch server nodes configuration with "xpack.security.enabled: true" Created a transport\_client role user called "esi". When the ES server startup everything works fine as a single node, accessing r…

---

## [How to set up the initial jwkset\_path in an OpenID Connection in Elasticsearch](https://discuss.elastic.co/t/how-to-set-up-the-initial-jwkset-path-in-an-openid-connection-in-elasticsearch/220133)

<div class="topic-metadata">

**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\
**Replies:** 2\
**Last updated:** [February 21, 2020, 1:23am UTC](https://discuss.elastic.co/t/how-to-set-up-the-initial-jwkset-path-in-an-openid-connection-in-elasticsearch/220133 "2020-02-21T01:23:00Z")

</div>

I try to implement SSO function using OpenID Connect(using google api). So I add configuration in elasticsearch.yml by referring to the URL below. https://www.elastic.co/guide/en/elasticsearch/reference/current/oidc-gu…

---

## [Finding a sequence of events](https://discuss.elastic.co/t/finding-a-sequence-of-events/220269)

<div class="topic-metadata">

**Author:** [@Jeremy\_A](https://discuss.elastic.co/u/Jeremy_A)\
**Replies:** 3\
**Last updated:** [February 20, 2020, 9:42pm UTC](https://discuss.elastic.co/t/finding-a-sequence-of-events/220269 "2020-02-20T21:42:25Z")

</div>

Hi, I've seen some info online about this but much of it was a few years old so I was wondering what the best solution would be to this problem of finding a sequence of events from discreet logs. We have an index with a…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1008)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1010)
