# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1090 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1091 --- ## [Trying to create user in elastic but getting error](https://discuss.elastic.co/t/trying-to-create-user-in-elastic-but-getting-error/208425)
**Author:** [@Seetharaman\_K](https://discuss.elastic.co/u/Seetharaman_K)\ **Replies:** 1\ **Last updated:** [November 19, 2019, 10:50am UTC](https://discuss.elastic.co/t/trying-to-create-user-in-elastic-but-getting-error/208425 "2019-11-19T10:50:02Z")
Error saving user: \[cluster\_block\_exception\] index \[.security-7\] blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\]; seems there is a block on one of the index (system related) not sure how to lift . tri… --- ## [Elasticsearch cluster design thoughts](https://discuss.elastic.co/t/elasticsearch-cluster-design-thoughts/206629)
**Author:** [@cyril.r](https://discuss.elastic.co/u/cyril.r)\ **Replies:** 8\ **Last updated:** [November 19, 2019, 10:41am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-design-thoughts/206629 "2019-11-19T10:41:44Z")
Hi there, I have a perfectly running cluster on AWS (not managed), that is composed of 6x M5D instances. So we have local ssd storage (we got rid of EBS since this has caused troubles), 2 CPU cores and some RAM. For c… --- ## [How can elasticsearch automatically index documents?](https://discuss.elastic.co/t/how-can-elasticsearch-automatically-index-documents/208464)
**Author:** [@Vo\_Van\_Huy](https://discuss.elastic.co/u/Vo_Van_Huy)\ **Replies:** 0\ **Last updated:** [November 19, 2019, 9:20am UTC](https://discuss.elastic.co/t/how-can-elasticsearch-automatically-index-documents/208464 "2019-11-19T09:20:25Z")
I frequently change data, so my json files inside fscrawler's tmp / es directory are constantly changing. may be deleting, may be changing the data inside a json file, or changing the json file name. I am currently havi… --- ## [Mapping with allow\_malformed doesn't seem to be applied](https://discuss.elastic.co/t/mapping-with-allow-malformed-doesnt-seem-to-be-applied/208320)
**Author:** [@aspyct](https://discuss.elastic.co/u/aspyct)\ **Replies:** 3\ **Last updated:** [November 19, 2019, 9:54am UTC](https://discuss.elastic.co/t/mapping-with-allow-malformed-doesnt-seem-to-be-applied/208320 "2019-11-19T09:54:09Z")
Hi, The mapping on my index doesn't seem to be respected. One of the properties, bytes\_read is defined as an integer in the mapping. But I have also enabled allow\_malformed in the index settings, in the hope of salvagin… --- ## [Search.max\_buckets and JVM memory pressure](https://discuss.elastic.co/t/search-max-buckets-and-jvm-memory-pressure/208467)
**Author:** [@klaus82](https://discuss.elastic.co/u/klaus82)\ **Replies:** 0\ **Last updated:** [November 19, 2019, 9:28am UTC](https://discuss.elastic.co/t/search-max-buckets-and-jvm-memory-pressure/208467 "2019-11-19T09:28:37Z")
I'm using Elastic 7.1.0 cluster on Elastic Cloud with 2 zones and GCP.DATA.HIGHIO.1 with 16 GB RAM. I set the search.max\_buckets at 1000000 and after an aggregation with search.max\_buckets overflow error, I noticed ad i… --- ## [How delete scroll\_id in elasticsearch-php api?](https://discuss.elastic.co/t/how-delete-scroll-id-in-elasticsearch-php-api/208460)
**Author:** [@AndriyImp](https://discuss.elastic.co/u/AndriyImp)\ **Replies:** 1\ **Last updated:** [November 19, 2019, 9:12am UTC](https://discuss.elastic.co/t/how-delete-scroll-id-in-elasticsearch-php-api/208460 "2019-11-19T09:12:19Z")
Hi all! can any know how to delete scroll\_id ? In my case i have toons of data, so in update process i delte doc (per 10), but after some count of records I got error: {"error":{"root\_cause":\[{"type":"exception","reas… --- ## [Impact of adding multi-field to existing field with PUT mapping API in PROD](https://discuss.elastic.co/t/impact-of-adding-multi-field-to-existing-field-with-put-mapping-api-in-prod/208438)
**Author:** [@ShilpiRachna](https://discuss.elastic.co/u/ShilpiRachna)\ **Replies:** 1\ **Last updated:** [November 19, 2019, 8:23am UTC](https://discuss.elastic.co/t/impact-of-adding-multi-field-to-existing-field-with-put-mapping-api-in-prod/208438 "2019-11-19T08:23:27Z")
Hi, We are using Elasticsearch 6.2.4 in production. Due to a new requirement, we need to add a new multi-field to an existing date field. We are using PUT mapping API for the same. PUT {index name}/\_mapping/{type name… --- ## [Can not build source code without suitable jdk](https://discuss.elastic.co/t/can-not-build-source-code-without-suitable-jdk/208325)
**Author:** [@JasonJay](https://discuss.elastic.co/u/JasonJay)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 8:16am UTC](https://discuss.elastic.co/t/can-not-build-source-code-without-suitable-jdk/208325 "2019-11-19T08:16:38Z")
ES 7.2 jdk 11 command: ./gradlew assemble os: macOS error message the compiler java.home must be set to a JDK installation directory for Java 12 but is \[/Library/Java/JavaVirtualMachines/jdk-11.0.5.jdk/Contents/Home… --- ## [Elasticsearch7.4.2 takes too long to form a cluster](https://discuss.elastic.co/t/elasticsearch7-4-2-takes-too-long-to-form-a-cluster/207911)
**Author:** [@weekyuan](https://discuss.elastic.co/u/weekyuan)\ **Replies:** 3\ **Last updated:** [November 19, 2019, 7:35am UTC](https://discuss.elastic.co/t/elasticsearch7-4-2-takes-too-long-to-form-a-cluster/207911 "2019-11-19T07:35:19Z")
hi，all： When I deploy a brand new ealsticsearch cluster, it's always difficult to quickly form a whole.After some nodes form a cluster, other individual nodes wait for several hours and have not yet joined them.This has… --- ## [Concept of Elasticsearch cluster](https://discuss.elastic.co/t/concept-of-elasticsearch-cluster/201376)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 74\ **Last updated:** [November 19, 2019, 7:24am UTC](https://discuss.elastic.co/t/concept-of-elasticsearch-cluster/201376 "2019-11-19T07:24:42Z")
Hello, I want to apply elasticsearch cluster on my environment. I have done some changes in elasticsearch.yaml file like: cluster.name: Test node.name: node-1 node.data: true node.master: true what values we have t… --- ## [Indexing lose data](https://discuss.elastic.co/t/indexing-lose-data/208262)
**Author:** [@hyhong](https://discuss.elastic.co/u/hyhong)\ **Replies:** 3\ **Last updated:** [November 19, 2019, 6:49am UTC](https://discuss.elastic.co/t/indexing-lose-data/208262 "2019-11-19T06:49:57Z")
My index pattern is index-\*(eg.index-2019.11.17,index-2019.11.18),create index every day.But I find every day of 23:59:00 to next day 00:01:00,the index data will lose. --- ## [Query string with wild card not returning the expected results , all the times](https://discuss.elastic.co/t/query-string-with-wild-card-not-returning-the-expected-results-all-the-times/207883)
**Author:** [@sngs1](https://discuss.elastic.co/u/sngs1)\ **Replies:** 4\ **Last updated:** [November 19, 2019, 6:14am UTC](https://discuss.elastic.co/t/query-string-with-wild-card-not-returning-the-expected-results-all-the-times/207883 "2019-11-19T06:14:38Z")
I am using ES 6.4 . When I tried GET /\_search?size=10&from=0 { "\_source":\["name"\], "query":{ "query\_string" : { "query" : "(some1.some.string.test.query.1234.test) AND (status:active) AND NOT (xyz OR abc)", "fiel… --- ## [Changing the value of log entry in old index](https://discuss.elastic.co/t/changing-the-value-of-log-entry-in-old-index/207835)
**Author:** [@Seetharaman\_K](https://discuss.elastic.co/u/Seetharaman_K)\ **Replies:** 6\ **Last updated:** [November 19, 2019, 5:10am UTC](https://discuss.elastic.co/t/changing-the-value-of-log-entry-in-old-index/207835 "2019-11-19T05:10:53Z")
Hi All , i have an artifact which is sending logs in elastic for about 5 months. (every month one index) . now all of a sudden business is saying one of the values in the old logs is wrong. say eg: the log field nam… --- ## [Elastic search query to return documents matching all elements in an array](https://discuss.elastic.co/t/elastic-search-query-to-return-documents-matching-all-elements-in-an-array/208424)
**Author:** [@achand45](https://discuss.elastic.co/u/achand45)\ **Replies:** 0\ **Last updated:** [November 19, 2019, 5:08am UTC](https://discuss.elastic.co/t/elastic-search-query-to-return-documents-matching-all-elements-in-an-array/208424 "2019-11-19T05:08:40Z")
I have a structure similar to this: Document 1: nestedobject: { uniqueid: "12345", field: \[ {id: 1, color: blue, fruit:banana}, {id: 2, color: red, fruit:apple}, \] } Document 2: (in same inde… --- ## [Index become readonly for unknown reason](https://discuss.elastic.co/t/index-become-readonly-for-unknown-reason/206586)
**Author:** [@tomeri](https://discuss.elastic.co/u/tomeri)\ **Replies:** 6\ **Last updated:** [November 19, 2019, 3:28am UTC](https://discuss.elastic.co/t/index-become-readonly-for-unknown-reason/206586 "2019-11-19T03:28:19Z")
I am using ILM via Logstash to manage my indices I have a new index that was created in 31/10 and for some unknown reason, it has become read-only, I noticed it has block.write=true on it. My ILM policy shouldn't do th… --- ## [Is it possible to write a ES script plugin that processes all document belongs to each bucket?](https://discuss.elastic.co/t/is-it-possible-to-write-a-es-script-plugin-that-processes-all-document-belongs-to-each-bucket/207188)
**Author:** [@wenhoujx](https://discuss.elastic.co/u/wenhoujx)\ **Replies:** 2\ **Last updated:** [November 18, 2019, 10:33pm UTC](https://discuss.elastic.co/t/is-it-possible-to-write-a-es-script-plugin-that-processes-all-document-belongs-to-each-bucket/207188 "2019-11-18T22:33:28Z")
Similar to the ES scripted metric aggregation that processes documents in each bucket, my use case is bit complicated and requires flexibility, i am wondering if it's possible to write a ES script plugin that summaries d… --- ## [Unable to start Elasticsearch after clean installation (CentOS or Ubuntu)](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-clean-installation-centos-or-ubuntu/208181)
**Author:** [@theo1](https://discuss.elastic.co/u/theo1)\ **Replies:** 21\ **Last updated:** [November 19, 2019, 1:52am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-clean-installation-centos-or-ubuntu/208181 "2019-11-19T01:52:37Z")
I've installed Elasticsearch on a clean, new, updated build of CentOS (7.7.1908). This installation is in support of a Wazuh installation using instructions found here: https://documentation.wazuh.com/3.10/installation-… --- ## [ES 5.0+ geo\_point type field not work with Grafana worldmap](https://discuss.elastic.co/t/es-5-0-geo-point-type-field-not-work-with-grafana-worldmap/208194)
**Author:** [@Kevin\_Kuei](https://discuss.elastic.co/u/Kevin_Kuei)\ **Replies:** 1\ **Last updated:** [November 19, 2019, 1:04am UTC](https://discuss.elastic.co/t/es-5-0-geo-point-type-field-not-work-with-grafana-worldmap/208194 "2019-11-19T01:04:05Z")
I would like to use ES document with geo\_point type field as data source to draw points in Grafana worldmap panel. To work with Grafana worldmap, we need to set "geohash: true" option in geo\_point type mapping. Grafan… --- ## [Java Heap Space Error (Elastic cluster or Client application)](https://discuss.elastic.co/t/java-heap-space-error-elastic-cluster-or-client-application/208402)
**Author:** [@hym](https://discuss.elastic.co/u/hym)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 11:41pm UTC](https://discuss.elastic.co/t/java-heap-space-error-elastic-cluster-or-client-application/208402 "2019-11-18T23:41:51Z")
I have an application that sends too many queries to ELS (elastic search) cluster (both search and multi-search and sometimes scroll). I use java transport client for connection. Now I am getting this into the logfile of… --- ## [How to create index alias with a filter on a nested field?](https://discuss.elastic.co/t/how-to-create-index-alias-with-a-filter-on-a-nested-field/208396)
**Author:** [@yungnvn](https://discuss.elastic.co/u/yungnvn)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 10:36pm UTC](https://discuss.elastic.co/t/how-to-create-index-alias-with-a-filter-on-a-nested-field/208396 "2019-11-18T22:36:50Z")
Hello all, I am trying to create an index alias with a filter clause. The field that i would like to filter on is a nested field named "fields.app\_id". I would like to create an alias based on the value set in fields.ap… --- ## [Python working with elastic watch objects and triple quotes](https://discuss.elastic.co/t/python-working-with-elastic-watch-objects-and-triple-quotes/208393)
**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 10:02pm UTC](https://discuss.elastic.co/t/python-working-with-elastic-watch-objects-and-triple-quotes/208393 "2019-11-18T22:02:09Z")
Hi, I have an application that I use to store our Elastic configuration objects (template, pipelines, users, roles, watches) in a github repo. With my program, we allow code changes to the repo via a PR and then the ch… --- ## [High disk watermark](https://discuss.elastic.co/t/high-disk-watermark/208130)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 4\ **Last updated:** [November 18, 2019, 8:19pm UTC](https://discuss.elastic.co/t/high-disk-watermark/208130 "2019-11-18T20:19:59Z")
I deleted indexes in Kibana the first time I got this error and then my console showed me low disk watermark. But with 800000 docs on index, I keep getting high disk watermark! How can I fix this for future as I intend o… --- ## [New index not forminga nd ending up with High disk watermark](https://discuss.elastic.co/t/new-index-not-forminga-nd-ending-up-with-high-disk-watermark/208386)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 8:07pm UTC](https://discuss.elastic.co/t/new-index-not-forminga-nd-ending-up-with-high-disk-watermark/208386 "2019-11-18T20:07:42Z")
When I run ES, Kibana, Filebeats my logs are getting collected and passed in real time as I want, but they are all getting collected under an old index- yellow open filebeat-7.4.0-2019.11.08-000001 lMcCHhWuT9ecTfsI4Oy… --- ## [Improve scoring of search results for a multi-field, weighted Elasticsearch query](https://discuss.elastic.co/t/improve-scoring-of-search-results-for-a-multi-field-weighted-elasticsearch-query/208380)
**Author:** [@Chintan\_Tank](https://discuss.elastic.co/u/Chintan_Tank)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 7:39pm UTC](https://discuss.elastic.co/t/improve-scoring-of-search-results-for-a-multi-field-weighted-elasticsearch-query/208380 "2019-11-18T19:39:48Z")
I am using Elasticsearch in an app & I am trying to understand the scoring for search relevancy because I am getting some interesting results. Some of the fields, # (this is a search only field and is composed of first… --- ## [Fuzzy matching using Jaro Winkler?](https://discuss.elastic.co/t/fuzzy-matching-using-jaro-winkler/208377)
**Author:** [@AmoghM](https://discuss.elastic.co/u/AmoghM)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 7:34pm UTC](https://discuss.elastic.co/t/fuzzy-matching-using-jaro-winkler/208377 "2019-11-18T19:34:01Z")
Can we choose Jaro-Winkler as our algorithm for fuzzy matching instead of Levenshtein distance? If not, then is there a way we can implement our own custom way of doing it? --- ## [Database query using select provide erratic results](https://discuss.elastic.co/t/database-query-using-select-provide-erratic-results/208367)
**Author:** [@saxojp](https://discuss.elastic.co/u/saxojp)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 6:10pm UTC](https://discuss.elastic.co/t/database-query-using-select-provide-erratic-results/208367 "2019-11-18T18:10:22Z")
Hi, I have issues with the erratic behavior of select statements were the result of a first request will return nothing. But if I run the same statement immediately the database return the correct result. Here is an e… --- ## [Cannot backup Elastic to Google Cloud Storage](https://discuss.elastic.co/t/cannot-backup-elastic-to-google-cloud-storage/208361)
**Author:** [@Victor\_Guimaraes](https://discuss.elastic.co/u/Victor_Guimaraes)\ **Replies:** 2\ **Last updated:** [November 18, 2019, 5:42pm UTC](https://discuss.elastic.co/t/cannot-backup-elastic-to-google-cloud-storage/208361 "2019-11-18T17:42:48Z")
Hello, I'm using Elasticsearch 6.4.3 and I'm trying to perform a cluster backup to Google Cloud Storage. I had installed the plugin describe in this link Google Cloud Storage Repository Plugin | Elasticsearch Plugins an… --- ## [Elasticsearch returns empty json-objects](https://discuss.elastic.co/t/elasticsearch-returns-empty-json-objects/208362)
**Author:** [@william\_ganrot](https://discuss.elastic.co/u/william_ganrot)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 5:33pm UTC](https://discuss.elastic.co/t/elasticsearch-returns-empty-json-objects/208362 "2019-11-18T17:33:25Z")
I'm just getting started with elasticsearch with spring which is both technologies wich are completly new to me. I have uploaded data to an elasticseach index with logstash and I can search it successfully using kebana. … --- ## [Upgrading The Elastic Stack from 7.3 to 7.4](https://discuss.elastic.co/t/upgrading-the-elastic-stack-from-7-3-to-7-4/208347)
**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 3:59pm UTC](https://discuss.elastic.co/t/upgrading-the-elastic-stack-from-7-3-to-7-4/208347 "2019-11-18T15:59:53Z")
I am wanting to upgrade my 7.3 Elastic Stack to 7.4 But I'm not sure the best way to do it. I have a test 7.3 ELK system running on a Windows box I am going to experiment with before moving on the the production instanc… --- ## [Ranking in count API](https://discuss.elastic.co/t/ranking-in-count-api/208342)
**Author:** [@woutermostard](https://discuss.elastic.co/u/woutermostard)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 3:38pm UTC](https://discuss.elastic.co/t/ranking-in-count-api/208342 "2019-11-18T15:38:56Z")
Does the count API perform any sorts of ranking? I thought that it wouldn't in order to improve performance but in the documentation it says that there is a min\_score parameter. if the count API does perform ranking, wha… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1089) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1091)