# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1044

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1045

---

## [Sort by nested values "across" all documents (duplicate parent documents)](https://discuss.elastic.co/t/sort-by-nested-values-across-all-documents-duplicate-parent-documents/213257)

<div class="topic-metadata">

**Author:** [@awagner](https://discuss.elastic.co/u/awagner)\
**Replies:** 2\
**Last updated:** [January 16, 2020, 4:06pm UTC](https://discuss.elastic.co/t/sort-by-nested-values-across-all-documents-duplicate-parent-documents/213257 "2020-01-16T16:06:28Z")

</div>

Hi all, First question, please forgive me if I'm ignorant of some essentials. Here is the issue: Among other options, I want to offer an ordering of query results based on the values of nested fields. That is, if a doc…

---

## [FORBIDDEN/12/index read-only](https://discuss.elastic.co/t/forbidden-12-index-read-only/215301)

<div class="topic-metadata">

**Author:** [@johnkary](https://discuss.elastic.co/u/johnkary)\
**Replies:** 6\
**Last updated:** [January 16, 2020, 3:51pm UTC](https://discuss.elastic.co/t/forbidden-12-index-read-only/215301 "2020-01-16T15:51:29Z")

</div>

Hi team! I often encounter the following error when i insert documents to my index. elasticsearch.exceptions.AuthorizationException: AuthorizationException(403, 'cluster\_block\_exception', 'blocked by: \[FORBIDDEN/12/ind…

---

## [Suggester doesn't suggest as expected, based on beginning of word](https://discuss.elastic.co/t/suggester-doesnt-suggest-as-expected-based-on-beginning-of-word/214715)

<div class="topic-metadata">

**Author:** [@Casper\_Thrane](https://discuss.elastic.co/u/Casper_Thrane)\
**Replies:** 4\
**Last updated:** [January 16, 2020, 3:06pm UTC](https://discuss.elastic.co/t/suggester-doesnt-suggest-as-expected-based-on-beginning-of-word/214715 "2020-01-16T15:06:05Z")

</div>

I want ElasticSearch to suggest more words, based on the beginning of a word. My example is the following. I have these titles: affaldsregister affaldsdatasystem - Import af indberetninger anmod om ændring af affaldso…

---

## [org.apache.lucene.store.AlreadyClosedException: Underlying file changed by an external force](https://discuss.elastic.co/t/org-apache-lucene-store-alreadyclosedexception-underlying-file-changed-by-an-external-force/215311)

<div class="topic-metadata">

**Author:** [@rdl](https://discuss.elastic.co/u/rdl)\
**Replies:** 3\
**Last updated:** [January 16, 2020, 2:52pm UTC](https://discuss.elastic.co/t/org-apache-lucene-store-alreadyclosedexception-underlying-file-changed-by-an-external-force/215311 "2020-01-16T14:52:24Z")

</div>

Environment: GlusterFS 6.0 OpenShift 3.11 ES 6 Hi, while deploying sonarqube which in turn uses ES6 in a POD I encounter the following error: 2020.01.16 12:16:19 WARN es\[o.e.c.r.a.AllocationService\] failing shard \[…

---

## [Elasticsearch cluster architecture](https://discuss.elastic.co/t/elasticsearch-cluster-architecture/215320)

<div class="topic-metadata">

**Author:** [@Ged](https://discuss.elastic.co/u/Ged)\
**Replies:** 0\
**Last updated:** [January 16, 2020, 1:47pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-architecture/215320 "2020-01-16T13:47:25Z")

</div>

Hi guys, As per attached diagram I've 8 application servers in 2 data centers (4 per each DC) and 4 monitoring servers przezn for ELK Stack (2 per DC). 4 app servers (1-4) push their log data to Logstash placed on Moni…

---

## [Foreach index action error](https://discuss.elastic.co/t/foreach-index-action-error/215107)

<div class="topic-metadata">

**Author:** [@grumo35](https://discuss.elastic.co/u/grumo35)\
**Replies:** 8\
**Last updated:** [January 16, 2020, 1:42pm UTC](https://discuss.elastic.co/t/foreach-index-action-error/215107 "2020-01-16T13:42:52Z")

</div>

Hi, As i was trying to index multiple hits using the foreach action and index action, i'm getting an error similar to this post When reading the documentation it says it support multiple documents and since \_doc field…

---

## [Unable to comunicate elastic search server 6.2.3 usingrest high level client](https://discuss.elastic.co/t/unable-to-comunicate-elastic-search-server-6-2-3-usingrest-high-level-client/215316)

<div class="topic-metadata">

**Author:** [@chubb123](https://discuss.elastic.co/u/chubb123)\
**Replies:** 0\
**Last updated:** [January 16, 2020, 1:19pm UTC](https://discuss.elastic.co/t/unable-to-comunicate-elastic-search-server-6-2-3-usingrest-high-level-client/215316 "2020-01-16T13:19:59Z")

</div>

Hi Team, We have elastic search server 6.2.3 it is installed in MDM 10.3 .we have certificates for elastic search server it is working fine in browser. when I try to call the rest high level client it is not work…

---

## [CPU utilization always high](https://discuss.elastic.co/t/cpu-utilization-always-high/215274)

<div class="topic-metadata">

**Author:** [@Ankit\_Kumar](https://discuss.elastic.co/u/Ankit_Kumar)\
**Replies:** 1\
**Last updated:** [January 16, 2020, 12:34pm UTC](https://discuss.elastic.co/t/cpu-utilization-always-high/215274 "2020-01-16T12:34:04Z")

</div>

HI guys, I have around 20 index and 5 shards for each index, each shard takes bout 80-100 mb, data will grow exponentially in future, how many nodes should i have? Currently i have only 1 node and i am doing many searc…

---

## [Does esrally cheating?Big difference between the two measurements](https://discuss.elastic.co/t/does-esrally-cheating-big-difference-between-the-two-measurements/215070)

<div class="topic-metadata">

**Author:** [@Liujinan](https://discuss.elastic.co/u/Liujinan)\
**Replies:** 4\
**Last updated:** [January 16, 2020, 12:27pm UTC](https://discuss.elastic.co/t/does-esrally-cheating-big-difference-between-the-two-measurements/215070 "2020-01-16T12:27:15Z")

</div>

Problems: I run twice esrally testings(each testing only perform “index-append”), but the result are very different. Step: 1.create the index geonames manually 2.First test: esrally race --pipeline=benchmark-only --…

---

## [Not able to Install Elastic Search as windows](https://discuss.elastic.co/t/not-able-to-install-elastic-search-as-windows/215309)

<div class="topic-metadata">

**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\
**Replies:** 0\
**Last updated:** [January 16, 2020, 12:18pm UTC](https://discuss.elastic.co/t/not-able-to-install-elastic-search-as-windows/215309 "2020-01-16T12:18:41Z")

</div>

Hello , I was trying to install Elastic search as windows service with the below steps. When i try to start the service I am receiving the attached error ? I tried with nssm.exe utility as well , Uninstall and install a…

---

## [Configurable retention lease period when it comes to CCR](https://discuss.elastic.co/t/configurable-retention-lease-period-when-it-comes-to-ccr/215276)

<div class="topic-metadata">

**Author:** [@kley](https://discuss.elastic.co/u/kley)\
**Replies:** 5\
**Last updated:** [January 16, 2020, 11:15am UTC](https://discuss.elastic.co/t/configurable-retention-lease-period-when-it-comes-to-ccr/215276 "2020-01-16T11:15:07Z")

</div>

Hello everyone! I have a question regarding the retention lease period when it comes to CCR. So, usually the proper way to set this lease period is to do it on index creation time. Recently we noticed, that this prope…

---

## [Unbalanced primary shards affects search queries?](https://discuss.elastic.co/t/unbalanced-primary-shards-affects-search-queries/215293)

<div class="topic-metadata">

**Author:** [@ragian](https://discuss.elastic.co/u/ragian)\
**Replies:** 1\
**Last updated:** [January 16, 2020, 10:54am UTC](https://discuss.elastic.co/t/unbalanced-primary-shards-affects-search-queries/215293 "2020-01-16T10:54:34Z")

</div>

In a lot of topic is said that we shouldn't worry about balancing primary shards across all nodes. Currently my primaries are highly unbalanced in my elasticsearch cluster (3 nodes with elastic 6.4.0). On the cluster…

---

## [APM AGENT Issue](https://discuss.elastic.co/t/apm-agent-issue/215271)

<div class="topic-metadata">

**Author:** [@Peter\_Versan\_Setier](https://discuss.elastic.co/u/Peter_Versan_Setier)\
**Replies:** 1\
**Last updated:** [January 16, 2020, 10:36am UTC](https://discuss.elastic.co/t/apm-agent-issue/215271 "2020-01-16T10:36:51Z")

</div>

I have tried the version elastic-apm-agent-1.11 and 1.12 \[apm-reporter\] ERROR co.elastic.apm.agent.report.IntakeV2ReportingEventHandler - Error sending data to APM server: Server returned HTTP response code: 400 for UR…

---

## [Can't parse boolean value](https://discuss.elastic.co/t/cant-parse-boolean-value/215273)

<div class="topic-metadata">

**Author:** [@Valentin\_Hirson](https://discuss.elastic.co/u/Valentin_Hirson)\
**Replies:** 2\
**Last updated:** [January 16, 2020, 10:14am UTC](https://discuss.elastic.co/t/cant-parse-boolean-value/215273 "2020-01-16T10:14:51Z")

</div>

Hello, I have got the following issue on my production environnement : 2020-01-15 16:26:54\] report.ERROR: {"error":{"root\_cause":\[{"type":"query\_shard\_exception","reason":"failed to create query: { "terms" : { "spt\_t…

---

## [Date field type problem in reindexing](https://discuss.elastic.co/t/date-field-type-problem-in-reindexing/212865)

<div class="topic-metadata">

**Author:** [@Sina\_Gholami](https://discuss.elastic.co/u/Sina_Gholami)\
**Replies:** 6\
**Last updated:** [January 16, 2020, 8:08am UTC](https://discuss.elastic.co/t/date-field-type-problem-in-reindexing/212865 "2020-01-16T08:08:43Z")

</div>

I am trying to merge multiple indices with same fields in Elasticsearch by using \_reindex API as follow: POST \_reindex { "source": { "index": \["a","b"\] }, "dest": { "index": "ab" } } my problem is the date fiel…

---

## [Is Open Java with Elasticsearch is suggestable?](https://discuss.elastic.co/t/is-open-java-with-elasticsearch-is-suggestable/215260)

<div class="topic-metadata">

**Author:** [@Sanjeev\_Kumar](https://discuss.elastic.co/u/Sanjeev_Kumar)\
**Replies:** 1\
**Last updated:** [January 16, 2020, 7:51am UTC](https://discuss.elastic.co/t/is-open-java-with-elasticsearch-is-suggestable/215260 "2020-01-16T07:51:16Z")

</div>

Is Open Java with Elasticsearch is suggestable? I mean, is there any limitations in terms of features and usage? Also is the latest OravleJava version is included in OpenJava that impacts Elasticsearch operations?

---

## [Accessing elastic search from a network](https://discuss.elastic.co/t/accessing-elastic-search-from-a-network/215116)

<div class="topic-metadata">

**Author:** [@fekade](https://discuss.elastic.co/u/fekade)\
**Replies:** 12\
**Last updated:** [January 16, 2020, 7:35am UTC](https://discuss.elastic.co/t/accessing-elastic-search-from-a-network/215116 "2020-01-16T07:35:43Z")

</div>

I configured Elasticsearch and kibana 7.5.1 in windows server 2016 and working successfully. I need to access elasticsearch from the network but I couldn't please any one have some idea. kibana is accessible from the n…

---

## [Passing the security credentials in REST Search API](https://discuss.elastic.co/t/passing-the-security-credentials-in-rest-search-api/214944)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 2\
**Last updated:** [January 16, 2020, 6:29am UTC](https://discuss.elastic.co/t/passing-the-security-credentials-in-rest-search-api/214944 "2020-01-16T06:29:33Z")

</div>

I am looking for the way to transfer the credential details for the REST Search API request. Checked the API specification and haven't found any fields. Would like to know how the authentication and authorization is …

---

## [Is there a way to set security based on value-level of field](https://discuss.elastic.co/t/is-there-a-way-to-set-security-based-on-value-level-of-field/215246)

<div class="topic-metadata">

**Author:** [@Tennis](https://discuss.elastic.co/u/Tennis)\
**Replies:** 0\
**Last updated:** [January 16, 2020, 6:14am UTC](https://discuss.elastic.co/t/is-there-a-way-to-set-security-based-on-value-level-of-field/215246 "2020-01-16T06:14:39Z")

</div>

Data Framework: Category: A, number: 1 Category: B, number: 2 Category: A, number: 3 Category: C, number: 4 Category: B, number: 5 As we can set the filed level security as official mentioned. (Field level securi…

---

## [How to use dm\_crypt with elasticsearch](https://discuss.elastic.co/t/how-to-use-dm-crypt-with-elasticsearch/214781)

<div class="topic-metadata">

**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\
**Replies:** 3\
**Last updated:** [January 16, 2020, 5:41am UTC](https://discuss.elastic.co/t/how-to-use-dm-crypt-with-elasticsearch/214781 "2020-01-16T05:41:38Z")

</div>

In my case, the data stored in elasticsearch must be encrypted. So i will use dm\_crypt + LUKS. Here is my file system. elasticsearch.yml In the current state, inserting and searching data using kibana dev tools w…

---

## [Newly added keyword field is not searchable](https://discuss.elastic.co/t/newly-added-keyword-field-is-not-searchable/215239)

<div class="topic-metadata">

**Author:** [@tamjid](https://discuss.elastic.co/u/tamjid)\
**Replies:** 0\
**Last updated:** [January 16, 2020, 5:25am UTC](https://discuss.elastic.co/t/newly-added-keyword-field-is-not-searchable/215239 "2020-01-16T05:25:07Z")

</div>

ES version: 6.8.x Hi, I added 2 new keyword fields to some of my documents (10%) in an index. But those 2 new fields are not searchable. I refreshed the field list from kibana (management -\> index pattern -\> Refresh bu…

---

## [Elasticsearch with LDAP Authentication XPack Security](https://discuss.elastic.co/t/elasticsearch-with-ldap-authentication-xpack-security/215072)

<div class="topic-metadata">

**Author:** [@anjalo](https://discuss.elastic.co/u/anjalo)\
**Replies:** 5\
**Last updated:** [January 16, 2020, 5:14am UTC](https://discuss.elastic.co/t/elasticsearch-with-ldap-authentication-xpack-security/215072 "2020-01-16T05:14:22Z")

</div>

Hi, My name is Halim. I am trying to connect the elasticsearch using LDAP user authentication. I follow the documentation here \[https://www.elastic.co/guide/en/elasticsearch/reference/current/ldap-realm.html\] I am alr…

---

## [Ingest pipeline for nested type](https://discuss.elastic.co/t/ingest-pipeline-for-nested-type/215235)

<div class="topic-metadata">

**Author:** [@shaileshgaikwad](https://discuss.elastic.co/u/shaileshgaikwad)\
**Replies:** 0\
**Last updated:** [January 16, 2020, 4:43am UTC](https://discuss.elastic.co/t/ingest-pipeline-for-nested-type/215235 "2020-01-16T04:43:10Z")

</div>

I am trying to use Ingest pipeline for nested object and I am getting error. "type" : "ingest\_processor\_exception", "reason" : "java.lang.IllegalArgumentException: field \[content\] not present as part of …

---

## [Elasticsearch version 6.8.6 oss unable to start](https://discuss.elastic.co/t/elasticsearch-version-6-8-6-oss-unable-to-start/214918)

<div class="topic-metadata">

**Author:** [@mrnguuyen](https://discuss.elastic.co/u/mrnguuyen)\
**Replies:** 4\
**Last updated:** [January 15, 2020, 11:12pm UTC](https://discuss.elastic.co/t/elasticsearch-version-6-8-6-oss-unable-to-start/214918 "2020-01-15T23:12:24Z")

</div>

Hi all, I am trying to do a fresh install of elasticsearch-oss-6.8.6 with OpenJDK version 1.8.0\_181. An elasticsearch-oss-6.5 was able to successfully install before but I am receiving errors related to the keystore and…

---

## [Scripted Field for elements inside JSON objects](https://discuss.elastic.co/t/scripted-field-for-elements-inside-json-objects/215224)

<div class="topic-metadata">

**Author:** [@yishaihl](https://discuss.elastic.co/u/yishaihl)\
**Replies:** 0\
**Last updated:** [January 15, 2020, 10:54pm UTC](https://discuss.elastic.co/t/scripted-field-for-elements-inside-json-objects/215224 "2020-01-15T22:54:39Z")

</div>

Hey Guys, I'm using FluentD (deployed as DaemonSet) to stream k8s app (containers) logs to elasticsearch. i want to extract specific keys from the 'log' key string (see attached) in elastic such as logKey: ... or status…

---

## [Cannot join nodes to master](https://discuss.elastic.co/t/cannot-join-nodes-to-master/215166)

<div class="topic-metadata">

**Author:** [@Julio\_Edel\_Salas\_Dia](https://discuss.elastic.co/u/Julio_Edel_Salas_Dia)\
**Replies:** 3\
**Last updated:** [January 15, 2020, 9:53pm UTC](https://discuss.elastic.co/t/cannot-join-nodes-to-master/215166 "2020-01-15T21:53:32Z")

</div>

I am trying to create an elasticsearch cluster with several nodes, I have 3 master nodes, but every time they try to join it gives this error. \[2020-01-15T15:37:21,421\]\[WARN \]\[o.e.c.c.Coordinator \] \[emc-master-03\] …

---

## [How to get the recent snapshot of my dashboard as a picture/pdf to send to Slack?](https://discuss.elastic.co/t/how-to-get-the-recent-snapshot-of-my-dashboard-as-a-picture-pdf-to-send-to-slack/210585)

<div class="topic-metadata">

**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\
**Replies:** 7\
**Last updated:** [January 15, 2020, 8:58pm UTC](https://discuss.elastic.co/t/how-to-get-the-recent-snapshot-of-my-dashboard-as-a-picture-pdf-to-send-to-slack/210585 "2020-01-15T20:58:23Z")

</div>

I would like to receive the recent picture of my graphs (not manually; automated) and post the image URL to my slack for my team to view. Is that possible to do using Elasticsearch Watcher? I am also working with Slack …

---

## [How to aggregate and sum the data grouped by some fields](https://discuss.elastic.co/t/how-to-aggregate-and-sum-the-data-grouped-by-some-fields/215207)

<div class="topic-metadata">

**Author:** [@Mihir\_Kothari](https://discuss.elastic.co/u/Mihir_Kothari)\
**Replies:** 0\
**Last updated:** [January 15, 2020, 8:54pm UTC](https://discuss.elastic.co/t/how-to-aggregate-and-sum-the-data-grouped-by-some-fields/215207 "2020-01-15T20:54:24Z")

</div>

Based on below 2 messages, I need to aggregate the data based on: granularity (MyHeader.granularity) myType (MyHeader.myType) Currency. { "\_source": { "MyData": { "MyH…

---

## [How to ignore missing fields while reindexing in Elasticsearch](https://discuss.elastic.co/t/how-to-ignore-missing-fields-while-reindexing-in-elasticsearch/215200)

<div class="topic-metadata">

**Author:** [@OliverWu](https://discuss.elastic.co/u/OliverWu)\
**Replies:** 0\
**Last updated:** [January 15, 2020, 8:14pm UTC](https://discuss.elastic.co/t/how-to-ignore-missing-fields-while-reindexing-in-elasticsearch/215200 "2020-01-15T20:14:49Z")

</div>

If I have a destination index with only portion of source index, and I only want to reindex these fields from source index to destination index, Can I still using the reindex API or what should I do with this situation? …

---

## [Autosuggest in 7.5.1](https://discuss.elastic.co/t/autosuggest-in-7-5-1/215190)

<div class="topic-metadata">

**Author:** [@PatOPaiar](https://discuss.elastic.co/u/PatOPaiar)\
**Replies:** 0\
**Last updated:** [January 15, 2020, 7:05pm UTC](https://discuss.elastic.co/t/autosuggest-in-7-5-1/215190 "2020-01-15T19:05:48Z")

</div>

We have a working integration running a 5.6 ElasticSearch deployment on elastic.co connected to a site using the elasticsearch-php Branch 5.0 as suggested in the Version Matrix Everything works fine here, including our…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1043)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1045)
