# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1059

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1060

---

## [Multi-field query with query string and a right to left language](https://discuss.elastic.co/t/multi-field-query-with-query-string-and-a-right-to-left-language/212972)

<div class="topic-metadata">

**Author:** [@jocky](https://discuss.elastic.co/u/jocky)\
**Replies:** 0\
**Last updated:** [December 24, 2019, 4:35pm UTC](https://discuss.elastic.co/t/multi-field-query-with-query-string-and-a-right-to-left-language/212972 "2019-12-24T16:35:38Z")

</div>

I'm trying to execute a simple query string which has a date query and a term in Hebrew. Unfortunately, Elastic fails to parse it and gets the Hebrew term and the date field name confused. Here's the query: (פסנתר) AND s…

---

## [Specifying an elasticsearch index from fscrawler rest api](https://discuss.elastic.co/t/specifying-an-elasticsearch-index-from-fscrawler-rest-api/212481)

<div class="topic-metadata">

**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\
**Replies:** 13\
**Last updated:** [December 24, 2019, 3:25pm UTC](https://discuss.elastic.co/t/specifying-an-elasticsearch-index-from-fscrawler-rest-api/212481 "2019-12-24T15:25:17Z")

</div>

Hi I using fscrawler rest API to index PDF,Word,and text files. I have requirement to provide index name , when i making HTTP request but seems that it taking default \_settings.json configuration to index document. i…

---

## [Master not discovered or elected yet, an election requires 2 nodes with](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-2-nodes-with/212932)

<div class="topic-metadata">

**Author:** [@Arman\_Ajdani](https://discuss.elastic.co/u/Arman_Ajdani)\
**Replies:** 0\
**Last updated:** [December 24, 2019, 9:38am UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-2-nodes-with/212932 "2019-12-24T09:38:11Z")

</div>

I have 3 elastic nodes with this config in all of them: discovery.seed\_hosts: \[ "185.208.174.244" , "130.185.76.40" , "185.208.174.90" \] , but when start all of them print: \[2019-12-24T09:36:18,377\]\[WARN \]\[o.e.c.c.Clu…

---

## [Completion suggester without context in query for elasticsearch 7.X](https://discuss.elastic.co/t/completion-suggester-without-context-in-query-for-elasticsearch-7-x/212952)

<div class="topic-metadata">

**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\
**Replies:** 0\
**Last updated:** [December 24, 2019, 12:02pm UTC](https://discuss.elastic.co/t/completion-suggester-without-context-in-query-for-elasticsearch-7-x/212952 "2019-12-24T12:02:49Z")

</div>

Hi Team, I am using elasticsearch 6.8 where i have fields in schema with autocomplete analyzer with contexts. and its working fine when i query with completion suggester without context. But issue is that when i do the…

---

## [APM Server unable to get data](https://discuss.elastic.co/t/apm-server-unable-to-get-data/212950)

<div class="topic-metadata">

**Author:** [@Maheswari](https://discuss.elastic.co/u/Maheswari)\
**Replies:** 0\
**Last updated:** [December 24, 2019, 11:53am UTC](https://discuss.elastic.co/t/apm-server-unable-to-get-data/212950 "2019-12-24T11:53:58Z")

</div>

Hello, I have installed elasticsearch and kibana of version 7.0.0 and then attached apm server of version 7.5.0. I have a servlet based application running on tomcat server on windows(This is a third party application s…

---

## [LDAP connection to elastic search](https://discuss.elastic.co/t/ldap-connection-to-elastic-search/212667)

<div class="topic-metadata">

**Author:** [@tanvi.m.gundalwar](https://discuss.elastic.co/u/tanvi.m.gundalwar)\
**Replies:** 3\
**Last updated:** [December 24, 2019, 11:28am UTC](https://discuss.elastic.co/t/ldap-connection-to-elastic-search/212667 "2019-12-24T11:28:35Z")

</div>

We are using Elasticsearch 6.6.1 and configuring an Active Directory realm. in elasticsearch.yml, we have following entries: xpack: security: authc: realms: active\_directory: type: active\_directory order: 0 doma…

---

## [After Installing X-pack security in elasticsearch 7.2 .My default password "changeme" not working](https://discuss.elastic.co/t/after-installing-x-pack-security-in-elasticsearch-7-2-my-default-password-changeme-not-working/212930)

<div class="topic-metadata">

**Author:** [@viveknagar](https://discuss.elastic.co/u/viveknagar)\
**Replies:** 1\
**Last updated:** [December 24, 2019, 10:57am UTC](https://discuss.elastic.co/t/after-installing-x-pack-security-in-elasticsearch-7-2-my-default-password-changeme-not-working/212930 "2019-12-24T10:57:13Z")

</div>

Hello, I am using elastic search 7.2.0. I have installed xpack successfully from the below configurations. But I am unable to use my default password "changeme" .Or is there any way to set a default password in configm…

---

## [Using "xpack.security.enabled: true" on Windows](https://discuss.elastic.co/t/using-xpack-security-enabled-true-on-windows/212829)

<div class="topic-metadata">

**Author:** [@JY\_DT](https://discuss.elastic.co/u/JY_DT)\
**Replies:** 4\
**Last updated:** [December 24, 2019, 10:35am UTC](https://discuss.elastic.co/t/using-xpack-security-enabled-true-on-windows/212829 "2019-12-24T10:35:33Z")

</div>

Hi, I have ElasticSearch setup on a Windows Server, and I'm trying to use XPack security in a Basic version of the product. I need to set this value in the elasticsearch.yml file on the Server, "xpack.security.enabled…

---

## [Need all distinct values .. Elasticsearch returns 1000 only](https://discuss.elastic.co/t/need-all-distinct-values-elasticsearch-returns-1000-only/212940)

<div class="topic-metadata">

**Author:** [@amkaran](https://discuss.elastic.co/u/amkaran)\
**Replies:** 0\
**Last updated:** [December 24, 2019, 10:10am UTC](https://discuss.elastic.co/t/need-all-distinct-values-elasticsearch-returns-1000-only/212940 "2019-12-24T10:10:40Z")

</div>

Hi Team, ES Version -- 7.5 am trying to get all the unique values of the particular field by using "aggs" method . it only allow size value lesser than 1000. is there any way I can get all values .. and I tried using…

---

## [\[version 7.1.1\] When I set the type of some fields to 'keyword' by ES mapping , it doesn't work](https://discuss.elastic.co/t/version-7-1-1-when-i-set-the-type-of-some-fields-to-keyword-by-es-mapping-it-doesnt-work/212874)

<div class="topic-metadata">

**Author:** [@francis-oyc](https://discuss.elastic.co/u/francis-oyc)\
**Replies:** 4\
**Last updated:** [December 24, 2019, 9:34am UTC](https://discuss.elastic.co/t/version-7-1-1-when-i-set-the-type-of-some-fields-to-keyword-by-es-mapping-it-doesnt-work/212874 "2019-12-24T09:34:55Z")

</div>

Recently, I have built an ELK system, I wat to set the type of some fields to 'keyword' by ES mapping , but it doesn't work.Here is my ES mapping : PUT /\_template/francis-template { "index\_patterns": \[""\], "version"…

---

## [Faield to parse geo\_point](https://discuss.elastic.co/t/faield-to-parse-geo-point/212816)

<div class="topic-metadata">

**Author:** [@AsfK](https://discuss.elastic.co/u/AsfK)\
**Replies:** 5\
**Last updated:** [December 24, 2019, 9:25am UTC](https://discuss.elastic.co/t/faield-to-parse-geo-point/212816 "2019-12-24T09:25:54Z")

</div>

EDIT: ES version: 7.4.2 I have a mapping contains a coordinate of type geo\_point, like this: "coordinates": { "type": "geo\_point" } I'm sending a POST command (using Postman) with correct syntex: "coordinates": \[…

---

## [Can we merge two similar structure indices in elasticsearch?](https://discuss.elastic.co/t/can-we-merge-two-similar-structure-indices-in-elasticsearch/212920)

<div class="topic-metadata">

**Author:** [@Amit\_Chauhan](https://discuss.elastic.co/u/Amit_Chauhan)\
**Replies:** 1\
**Last updated:** [December 24, 2019, 8:36am UTC](https://discuss.elastic.co/t/can-we-merge-two-similar-structure-indices-in-elasticsearch/212920 "2019-12-24T08:36:22Z")

</div>

I want to merge similar structure indices in elasticsearch. For example I have 10 indices . 5 are same structure and another 5 are another structure indices. each indices have 100 rows . So I need only two indices with 5…

---

## [ElasticSearch Red Health - Red Indices](https://discuss.elastic.co/t/elasticsearch-red-health-red-indices/212927)

<div class="topic-metadata">

**Author:** [@antonopo](https://discuss.elastic.co/u/antonopo)\
**Replies:** 1\
**Last updated:** [December 24, 2019, 8:22am UTC](https://discuss.elastic.co/t/elasticsearch-red-health-red-indices/212927 "2019-12-24T08:22:10Z")

</div>

Hi, Day by day i am facing red status on the Elasticsearch due to some indices that are also red. On my ELK we have 7 nodes and 44 primary, 44 replica shards. I am keeping 7 indices for each beat (filebeat - winloagbe…

---

## [Invalid NEST response built from a unsuccessful () low level call on PUT:](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-unsuccessful-low-level-call-on-put/212202)

<div class="topic-metadata">

**Author:** [@Ilyoskhuja](https://discuss.elastic.co/u/Ilyoskhuja)\
**Replies:** 9\
**Last updated:** [December 24, 2019, 6:23am UTC](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-unsuccessful-low-level-call-on-put/212202 "2019-12-24T06:23:35Z")

</div>

I have this error "Invalid NEST response built from a unsuccessful () low level call on PUT:/ nameOfIndex". I use Elasticsearch.Net/7.1.0 and ElasticSearch Cloud 7.5 BadRequest: Node: https://f3bf622c3-----------------a…

---

## [How to create tokens from the text data](https://discuss.elastic.co/t/how-to-create-tokens-from-the-text-data/212824)

<div class="topic-metadata">

**Author:** [@Pratik\_Hulji](https://discuss.elastic.co/u/Pratik_Hulji)\
**Replies:** 8\
**Last updated:** [December 24, 2019, 6:19am UTC](https://discuss.elastic.co/t/how-to-create-tokens-from-the-text-data/212824 "2019-12-24T06:19:11Z")

</div>

Hi guys, I have converted the pdf into base64 format and now i want to convert the text data into tokens. Can you please guide me.

---

## [Monitoring PFSense with ELK](https://discuss.elastic.co/t/monitoring-pfsense-with-elk/212912)

<div class="topic-metadata">

**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\
**Replies:** 0\
**Last updated:** [December 24, 2019, 4:17am UTC](https://discuss.elastic.co/t/monitoring-pfsense-with-elk/212912 "2019-12-24T04:17:42Z")

</div>

Hello Team, We are using ELK6.4 and PFSense2.4, everything is working as expected but now we want to monitor the logs of PFSense using ELK. Can you please help me how we can monitor it? Is Elasticsaerch/Kibana have an…

---

## [Issue with integrating watcher webhook with ServiceNow](https://discuss.elastic.co/t/issue-with-integrating-watcher-webhook-with-servicenow/211536)

<div class="topic-metadata">

**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\
**Replies:** 19\
**Last updated:** [December 24, 2019, 4:16am UTC](https://discuss.elastic.co/t/issue-with-integrating-watcher-webhook-with-servicenow/211536 "2019-12-24T04:16:32Z")

</div>

Hello there: We face issue when integrating watcher webhook to integrate with ServiceNow. Here is what we did and got…. If possible we’d prefer to set up a session so I may show you the details and learn from you. We …

---

## [Can we use basic license of kibana in our product?](https://discuss.elastic.co/t/can-we-use-basic-license-of-kibana-in-our-product/212899)

<div class="topic-metadata">

**Author:** [@tae\_won\_Han](https://discuss.elastic.co/u/tae_won_Han)\
**Replies:** 1\
**Last updated:** [December 24, 2019, 2:58am UTC](https://discuss.elastic.co/t/can-we-use-basic-license-of-kibana-in-our-product/212899 "2019-12-24T02:58:45Z")

</div>

Hi. We want to use canvas of Kibana as visualization tool in our product. We just want to canvas to visualize but should we buy gold license? Is there other way to only use canvas without buying gold license?

---

## [Timezone issue DHT11 sensor](https://discuss.elastic.co/t/timezone-issue-dht11-sensor/212906)

<div class="topic-metadata">

**Author:** [@f1wing](https://discuss.elastic.co/u/f1wing)\
**Replies:** 0\
**Last updated:** [December 24, 2019, 2:24am UTC](https://discuss.elastic.co/t/timezone-issue-dht11-sensor/212906 "2019-12-24T02:24:52Z")

</div>

Hi everyone, I am a network specialist and my work consist of configuring switches and firewalls to allows communication between two endpoints. Now, I am playing with Elastic stack and I like it as it may help me to an…

---

## [There are some way to fix is\_write\_index=false for all my indexes?](https://discuss.elastic.co/t/there-are-some-way-to-fix-is-write-index-false-for-all-my-indexes/212823)

<div class="topic-metadata">

**Author:** [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\
**Replies:** 1\
**Last updated:** [December 23, 2019, 11:55pm UTC](https://discuss.elastic.co/t/there-are-some-way-to-fix-is-write-index-false-for-all-my-indexes/212823 "2019-12-23T23:55:36Z")

</div>

Hi, I found the cluster unhealthy due to a space problem. I have deleted some old indexes and restarted the elastic and now it is healthy However, my filebeat agents when they try to write tells them 2019-12-23T0…

---

## [Compress request with php client](https://discuss.elastic.co/t/compress-request-with-php-client/212892)

<div class="topic-metadata">

**Author:** [@simplesmente](https://discuss.elastic.co/u/simplesmente)\
**Replies:** 0\
**Last updated:** [December 23, 2019, 7:55pm UTC](https://discuss.elastic.co/t/compress-request-with-php-client/212892 "2019-12-23T19:55:23Z")

</div>

Hello, all. Have any of you tried to compress http request using oficial php client? I’ve been trying to debug the client but couldn’t find any way to do it. Can anybody help me with this matter? Thanks in advance. C…

---

## [\[Errno 111\] Connection refused): ConnectionError elasticsearch](https://discuss.elastic.co/t/errno-111-connection-refused-connectionerror-elasticsearch/212873)

<div class="topic-metadata">

**Author:** [@urketadic](https://discuss.elastic.co/u/urketadic)\
**Replies:** 1\
**Last updated:** [December 23, 2019, 5:42pm UTC](https://discuss.elastic.co/t/errno-111-connection-refused-connectionerror-elasticsearch/212873 "2019-12-23T17:42:42Z")

</div>

I was following this tutorial: It all works fine but the part where lambda pushes data from S3 to Elasticsearch fails. This is the error and some warnings: On top of this it used to also say Error loading data in…

---

## [Can't find in query but can find in filter](https://discuss.elastic.co/t/cant-find-in-query-but-can-find-in-filter/212882)

<div class="topic-metadata">

**Author:** [@Dmitry1](https://discuss.elastic.co/u/Dmitry1)\
**Replies:** 0\
**Last updated:** [December 23, 2019, 6:34pm UTC](https://discuss.elastic.co/t/cant-find-in-query-but-can-find-in-filter/212882 "2019-12-23T18:34:48Z")

</div>

Hello, I have 7.5.0 ELK stack. And see very strange situation. I have index with "message" field and for example this line in it: \[comgId:1773182151883136235;expired:false;delivered:true;secured:false;querySecured:true\]…

---

## [Authentication issue while accessing elastic search(It is launched via azure elastic marketplace option)](https://discuss.elastic.co/t/authentication-issue-while-accessing-elastic-search-it-is-launched-via-azure-elastic-marketplace-option/212867)

<div class="topic-metadata">

**Author:** [@jinalptl1993](https://discuss.elastic.co/u/jinalptl1993)\
**Replies:** 0\
**Last updated:** [December 23, 2019, 4:12pm UTC](https://discuss.elastic.co/t/authentication-issue-while-accessing-elastic-search-it-is-launched-via-azure-elastic-marketplace-option/212867 "2019-12-23T16:12:17Z")

</div>

I have launched an elastic search server using elastic marketplace option over azure. I am not able to access the elastic search. It is asking me username and password. I have tried with default elastic user and passwor…

---

## [Cant restore the 6.1.1 snapshot to 7.5.1 latest version of elasticsearch](https://discuss.elastic.co/t/cant-restore-the-6-1-1-snapshot-to-7-5-1-latest-version-of-elasticsearch/212655)

<div class="topic-metadata">

**Author:** [@venugrd](https://discuss.elastic.co/u/venugrd)\
**Replies:** 3\
**Last updated:** [December 23, 2019, 12:58pm UTC](https://discuss.elastic.co/t/cant-restore-the-6-1-1-snapshot-to-7-5-1-latest-version-of-elasticsearch/212655 "2019-12-23T12:58:39Z")

</div>

When i restored the elastic older version 6.1.1 snapshot to 7.5.1 latest version, I got the below error. Could you please anyone help me ? OS : Centos 8 Error: {"error":{"root\_cause":\[{"type":"snapshot\_restore\_excepti…

---

## [Maximum number of open files](https://discuss.elastic.co/t/maximum-number-of-open-files/212841)

<div class="topic-metadata">

**Author:** [@Aditya\_Kar](https://discuss.elastic.co/u/Aditya_Kar)\
**Replies:** 0\
**Last updated:** [December 23, 2019, 12:02pm UTC](https://discuss.elastic.co/t/maximum-number-of-open-files/212841 "2019-12-23T12:02:21Z")

</div>

Hi all, I am using node js client to search for data from elastic search. I have already set - nofile: soft: 65535 hard: 65535 .when the maximum number of the open files exceeds my elastic search stop responding. aft…

---

## [How to change 'termFreq' in BM25?](https://discuss.elastic.co/t/how-to-change-termfreq-in-bm25/212302)

<div class="topic-metadata">

**Author:** [@Ricardo\_Z](https://discuss.elastic.co/u/Ricardo_Z)\
**Replies:** 1\
**Last updated:** [December 23, 2019, 11:52am UTC](https://discuss.elastic.co/t/how-to-change-termfreq-in-bm25/212302 "2019-12-23T11:52:42Z")

</div>

Hello, I use elasticsearch 5.6. I am trying to reconstruct the Okapi BM25 default similarity in Elasticsearch. Some of our document have repeat words in the database, such as "you are a good boy boy boy". so, the 'te…

---

## [Log/Debug Full RBAC Query in Elasticsearch](https://discuss.elastic.co/t/log-debug-full-rbac-query-in-elasticsearch/212838)

<div class="topic-metadata">

**Author:** [@leewadhams](https://discuss.elastic.co/u/leewadhams)\
**Replies:** 0\
**Last updated:** [December 23, 2019, 11:30am UTC](https://discuss.elastic.co/t/log-debug-full-rbac-query-in-elasticsearch/212838 "2019-12-23T11:30:38Z")

</div>

Hi, We're trying to use RBAC to limit access to an index for a given user. Is there a way to view the full query that gets generated when a user submits a query? Lee

---

## [Cross cluster replication clarification](https://discuss.elastic.co/t/cross-cluster-replication-clarification/212815)

<div class="topic-metadata">

**Author:** [@irfan1](https://discuss.elastic.co/u/irfan1)\
**Replies:** 4\
**Last updated:** [December 23, 2019, 11:14am UTC](https://discuss.elastic.co/t/cross-cluster-replication-clarification/212815 "2019-12-23T11:14:24Z")

</div>

Hello All, Im new to elastic search and i want to implement the cross cluster replication in our project i have some questions regarding the ccr. i have gone through the documentation in elastic search websites. Kindly …

---

## [How to determine the list of indices that being queried more](https://discuss.elastic.co/t/how-to-determine-the-list-of-indices-that-being-queried-more/212836)

<div class="topic-metadata">

**Author:** [@Sumit\_Kumar1](https://discuss.elastic.co/u/Sumit_Kumar1)\
**Replies:** 0\
**Last updated:** [December 23, 2019, 11:12am UTC](https://discuss.elastic.co/t/how-to-determine-the-list-of-indices-that-being-queried-more/212836 "2019-12-23T11:12:37Z")

</div>

I have a requirement of having a list of indices which are being queried more or used for search . Is there any API ? or something that would ease our job in order to find the indices which are being using elasticsearch…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1058)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1060)
