# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1124

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1125

---

## [How to keep separate documents for each client](https://discuss.elastic.co/t/how-to-keep-separate-documents-for-each-client/203787)

<div class="topic-metadata">

**Author:** [@gurjit\_buck](https://discuss.elastic.co/u/gurjit_buck)\
**Replies:** 0\
**Last updated:** [October 16, 2019, 8:51am UTC](https://discuss.elastic.co/t/how-to-keep-separate-documents-for-each-client/203787 "2019-10-16T08:51:42Z")

</div>

Hi, I am using c# Nest to work with Elasticsearch As per my requirement I require to keep the documents separate for every client So I require to specify the path while creating and searching index. I get exception of…

---

## [Database dump with Helm charts](https://discuss.elastic.co/t/database-dump-with-helm-charts/203569)

<div class="topic-metadata">

**Author:** [@Kvin](https://discuss.elastic.co/u/Kvin)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 8:41am UTC](https://discuss.elastic.co/t/database-dump-with-helm-charts/203569 "2019-10-16T08:41:43Z")

</div>

I'm trying to set up an Elasticsearch environment with Kubernetes-Helm-Docker etc. I'm going to enable xpack later on. I want the setup of this environment as automatic as possible. I would like to have some basic data …

---

## [How do I use Index Lifecycle Management without rollover action?](https://discuss.elastic.co/t/how-do-i-use-index-lifecycle-management-without-rollover-action/203010)

<div class="topic-metadata">

**Author:** [@anilozyurt](https://discuss.elastic.co/u/anilozyurt)\
**Replies:** 3\
**Last updated:** [October 16, 2019, 8:07am UTC](https://discuss.elastic.co/t/how-do-i-use-index-lifecycle-management-without-rollover-action/203010 "2019-10-16T08:07:16Z")

</div>

I'm working on ELK stack about 3 months and collecting logs from various systems like servers, network devices etc. Working with 3 nodes. I'm using monthly indices to keep the logs like "xserver-2019.10", "xswitch-2019.…

---

## [Can we execute the search template without using client from frontend such as react?](https://discuss.elastic.co/t/can-we-execute-the-search-template-without-using-client-from-frontend-such-as-react/203676)

<div class="topic-metadata">

**Author:** [@decodeit](https://discuss.elastic.co/u/decodeit)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 5:48am UTC](https://discuss.elastic.co/t/can-we-execute-the-search-template-without-using-client-from-frontend-such-as-react/203676 "2019-10-16T05:48:55Z")

</div>

I have created a search template following docs like: POST \_scripts/\<templateid\> { "script": { "lang": "mustache", "source": { "query": { "match": { "title": "{{query\_string}}" } } } } } but now i want to access this s…

---

## [How to create multiple nodes with c#](https://discuss.elastic.co/t/how-to-create-multiple-nodes-with-c/203643)

<div class="topic-metadata">

**Author:** [@gurjit\_buck](https://discuss.elastic.co/u/gurjit_buck)\
**Replies:** 2\
**Last updated:** [October 15, 2019, 1:05pm UTC](https://discuss.elastic.co/t/how-to-create-multiple-nodes-with-c/203643 "2019-10-15T13:05:00Z")

</div>

Hi, as per my requirement I require to keep the data per client, so I am planning to create a separate node for every client (In same cluster), Please share How I can create new node with c# How to search data in part…

---

## [Hardware requirements for Elasticsearch](https://discuss.elastic.co/t/hardware-requirements-for-elasticsearch/203648)

<div class="topic-metadata">

**Author:** [@ganesh2](https://discuss.elastic.co/u/ganesh2)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 4:35am UTC](https://discuss.elastic.co/t/hardware-requirements-for-elasticsearch/203648 "2019-10-16T04:35:26Z")

</div>

Dear Support Team, Are there any limitations that the Elasticsearch can monitor only these many servers? My understanding is, there are no limitations and it really depends on the Nodes configuration. Please let me kno…

---

## [Multiple scripts within script\_score](https://discuss.elastic.co/t/multiple-scripts-within-script-score/203698)

<div class="topic-metadata">

**Author:** [@sgTextSearch](https://discuss.elastic.co/u/sgTextSearch)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 2:33am UTC](https://discuss.elastic.co/t/multiple-scripts-within-script-score/203698 "2019-10-16T02:33:31Z")

</div>

How can I use multiple scripts within script\_score query in 7.4? I need to apply a filter on the result set and then define corresponding scripts. The function\_score query currently being used has the following format: …

---

## [Bucket\_selector aggregation and size. optimizations](https://discuss.elastic.co/t/bucket-selector-aggregation-and-size-optimizations/203719)

<div class="topic-metadata">

**Author:** [@andrx](https://discuss.elastic.co/u/andrx)\
**Replies:** 0\
**Last updated:** [October 15, 2019, 10:53pm UTC](https://discuss.elastic.co/t/bucket-selector-aggregation-and-size-optimizations/203719 "2019-10-15T22:53:24Z")

</div>

I have question about bucket\_selector aggregation. (Environment tested: ES6.8 and ES7 basic on centos7) In my use case I need to drop documents if there are dupes by selected property. Index is not big about 2mln recor…

---

## [Dynamic alias creation via template](https://discuss.elastic.co/t/dynamic-alias-creation-via-template/203547)

<div class="topic-metadata">

**Author:** [@Ennui](https://discuss.elastic.co/u/Ennui)\
**Replies:** 2\
**Last updated:** [October 15, 2019, 10:31pm UTC](https://discuss.elastic.co/t/dynamic-alias-creation-via-template/203547 "2019-10-15T22:31:45Z")

</div>

Hi, I have indices created by users, where the index name always matches the pattern "xyz.helloworld" (the variable part is xyz) Is there a way to use a template to automatically create an alias xyz for "xyz.helloworld…

---

## [SAML with Onelogin](https://discuss.elastic.co/t/saml-with-onelogin/203524)

<div class="topic-metadata">

**Author:** [@jakobant](https://discuss.elastic.co/u/jakobant)\
**Replies:** 5\
**Last updated:** [October 15, 2019, 10:12pm UTC](https://discuss.elastic.co/t/saml-with-onelogin/203524 "2019-10-15T22:12:23Z")

</div>

I am currently trying to get SAML auth working with OneLogin . Version : Elastic Cloud Cluster 7.4 {"statusCode":401,"error":"Unauthorized","message":"\[security\_exception\] unable to authenticate user \[\<unauthenticated…

---

## [Node configuration of elasticsesarch cluster](https://discuss.elastic.co/t/node-configuration-of-elasticsesarch-cluster/203707)

<div class="topic-metadata">

**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\
**Replies:** 2\
**Last updated:** [October 15, 2019, 8:51pm UTC](https://discuss.elastic.co/t/node-configuration-of-elasticsesarch-cluster/203707 "2019-10-15T20:51:25Z")

</div>

Hi, i'm starting getting into elasticsearch cluster, and i have read many time the recomendation to have 3 master eligible nodes to have high availability. I've also read that if you have dedicated master nodes should …

---

## [Auto importing dangled indices](https://discuss.elastic.co/t/auto-importing-dangled-indices/203684)

<div class="topic-metadata">

**Author:** [@J\_Warner](https://discuss.elastic.co/u/J_Warner)\
**Replies:** 9\
**Last updated:** [October 15, 2019, 8:43pm UTC](https://discuss.elastic.co/t/auto-importing-dangled-indices/203684 "2019-10-15T20:43:33Z")

</div>

Hey hoping I could get some more insight on the issue. I'm currently running ELK stack inside GKE client/master/data I've recently updated the cluster from version 1.13.X.X to 1.14.X.X during the upgrade my process ELK c…

---

## [Parallel Iterations of Bulk](https://discuss.elastic.co/t/parallel-iterations-of-bulk/202271)

<div class="topic-metadata">

**Author:** [@David\_Samokovlisky](https://discuss.elastic.co/u/David_Samokovlisky)\
**Replies:** 5\
**Last updated:** [October 15, 2019, 6:31pm UTC](https://discuss.elastic.co/t/parallel-iterations-of-bulk/202271 "2019-10-15T18:31:06Z")

</div>

Hi! I'm trying to have iterations to a parallel bulk operations, basically each operation is ~100K docs, and it's finishing too soon, I want to load it for a longer period of time So I tried iterations and also target-…

---

## [Installation on Elastic Search](https://discuss.elastic.co/t/installation-on-elastic-search/203700)

<div class="topic-metadata">

**Author:** [@ranganathan8929](https://discuss.elastic.co/u/ranganathan8929)\
**Replies:** 0\
**Last updated:** [October 15, 2019, 6:00pm UTC](https://discuss.elastic.co/t/installation-on-elastic-search/203700 "2019-10-15T18:00:42Z")

</div>

Hi , After installation on elastic search, we are able to find the below error message . help us to resolve the issue "type": "server", "timestamp": "2019-10-14T12:53:47,728-07:00", "level": "WARN", "component": "o.e.b…

---

## [Life Cycle Policy with Filter rules?](https://discuss.elastic.co/t/life-cycle-policy-with-filter-rules/203675)

<div class="topic-metadata">

**Author:** [@Change\_Shell](https://discuss.elastic.co/u/Change_Shell)\
**Replies:** 3\
**Last updated:** [October 15, 2019, 5:11pm UTC](https://discuss.elastic.co/t/life-cycle-policy-with-filter-rules/203675 "2019-10-15T17:11:39Z")

</div>

I can set size and age, to remove documents. But I want to skip someone if has special field, for example Postpayment: true never remove docs with field Postpayment, It\`s possible?

---

## [Reason to keep message field?](https://discuss.elastic.co/t/reason-to-keep-message-field/203665)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 2\
**Last updated:** [October 15, 2019, 4:51pm UTC](https://discuss.elastic.co/t/reason-to-keep-message-field/203665 "2019-10-15T16:51:39Z")

</div>

Collecting windows logs via winlogbeats, removing the message field via logstash before the output phase, so far my daily beats shards are 80% smaller. With all of the fields parsed and indexed correctly are there any r…

---

## [Is refresh in Elasticsearch atomic?](https://discuss.elastic.co/t/is-refresh-in-elasticsearch-atomic/203647)

<div class="topic-metadata">

**Author:** [@drd](https://discuss.elastic.co/u/drd)\
**Replies:** 5\
**Last updated:** [October 15, 2019, 3:11pm UTC](https://discuss.elastic.co/t/is-refresh-in-elasticsearch-atomic/203647 "2019-10-15T15:11:43Z")

</div>

Scenario: I have my index refresh interval set to -1 (no automatic refresh). I add 20 documents to index using bulk with refresh=true. Are all documents visible at same time? The question is are Elasticsearch refreshes a…

---

## [ElasticSearch Index Life Cycle Policy](https://discuss.elastic.co/t/elasticsearch-index-life-cycle-policy/203670)

<div class="topic-metadata">

**Author:** [@premkumar](https://discuss.elastic.co/u/premkumar)\
**Replies:** 0\
**Last updated:** [October 15, 2019, 2:22pm UTC](https://discuss.elastic.co/t/elasticsearch-index-life-cycle-policy/203670 "2019-10-15T14:22:32Z")

</div>

Hi All, I have an Elastic cluster with 3 nodes. 1 master and 2 data nodes. Each node has 1TB storage. I need to set up a rollback policy for the indexes. Per day around 100GB data could be forwarded via beats -\> logsta…

---

## [Filebeat to Elastic (7.4): connection refused](https://discuss.elastic.co/t/filebeat-to-elastic-7-4-connection-refused/203604)

<div class="topic-metadata">

**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\
**Replies:** 4\
**Last updated:** [October 15, 2019, 12:32pm UTC](https://discuss.elastic.co/t/filebeat-to-elastic-7-4-connection-refused/203604 "2019-10-15T12:32:26Z")

</div>

Hi, I installed Elastic, Kibana and Heartbeat as instructed. All 7.4, Ubuntu 18.04 and all working fine. With Filebeat, on another Ubuntu I installed Filebeat and this is can't connect to Elastic: "Connection refused".…

---

## [What a happen? Please help me](https://discuss.elastic.co/t/what-a-happen-please-help-me/203590)

<div class="topic-metadata">

**Author:** [@Wathit\_Chantree](https://discuss.elastic.co/u/Wathit_Chantree)\
**Replies:** 6\
**Last updated:** [October 15, 2019, 12:17pm UTC](https://discuss.elastic.co/t/what-a-happen-please-help-me/203590 "2019-10-15T12:17:55Z")

</div>

i can't use elasticsearch check service elasticsearch and kibana status active {"error":{"root\_cause":\[{"type":"circuit\_breaking\_exception","reason":"\[parent\] Data too large, data for \[\<http\_request\>\] would be \[2985537…

---

## [How to secure ES API access deployed as docker on AWS](https://discuss.elastic.co/t/how-to-secure-es-api-access-deployed-as-docker-on-aws/202512)

<div class="topic-metadata">

**Author:** [@Nir\_Sharabi](https://discuss.elastic.co/u/Nir_Sharabi)\
**Replies:** 2\
**Last updated:** [October 15, 2019, 11:46am UTC](https://discuss.elastic.co/t/how-to-secure-es-api-access-deployed-as-docker-on-aws/202512 "2019-10-15T11:46:43Z")

</div>

Hi, Lately we deployed ES docker in our AWS account and currently we are figure out how can we secure the API access considering the fact we are using basic licence of ES. We are using version 7.2 Best Regards, Nir S…

---

## [Can I fire multiple queries together and get results as different data sets for particular query?](https://discuss.elastic.co/t/can-i-fire-multiple-queries-together-and-get-results-as-different-data-sets-for-particular-query/203061)

<div class="topic-metadata">

**Author:** [@Vijay\_Gupta](https://discuss.elastic.co/u/Vijay_Gupta)\
**Replies:** 2\
**Last updated:** [October 15, 2019, 10:14am UTC](https://discuss.elastic.co/t/can-i-fire-multiple-queries-together-and-get-results-as-different-data-sets-for-particular-query/203061 "2019-10-15T10:14:12Z")

</div>

Is there a way to fire multiple queries together and get results for each query differently? Means, suppose I have 3 mobile numbers, and I want to query each mobile number and store its data against that mobile number a…

---

## [Exactly which documents are used for vector calculation](https://discuss.elastic.co/t/exactly-which-documents-are-used-for-vector-calculation/202270)

<div class="topic-metadata">

**Author:** [@ray1](https://discuss.elastic.co/u/ray1)\
**Replies:** 2\
**Last updated:** [October 15, 2019, 9:32am UTC](https://discuss.elastic.co/t/exactly-which-documents-are-used-for-vector-calculation/202270 "2019-10-15T09:32:31Z")

</div>

I have read some of elastic search blogs and documents to understand how the vector calculation works. However it seems confusing for me about the range of documents that is used for the vector calculation. https://www…

---

## [Track\_total\_hits and approximate hit count](https://discuss.elastic.co/t/track-total-hits-and-approximate-hit-count/203598)

<div class="topic-metadata">

**Author:** [@ctombaugh](https://discuss.elastic.co/u/ctombaugh)\
**Replies:** 1\
**Last updated:** [October 15, 2019, 9:18am UTC](https://discuss.elastic.co/t/track-total-hits-and-approximate-hit-count/203598 "2019-10-15T09:18:54Z")

</div>

Assuming that track\_total\_hits=true performs an accurate hit count, is there any way to have an approximate hit count and somewhat better performance? E.g. for 123,456 documents I would like to know that I have approxima…

---

## [Plan about supporting org.wikimedia.search:extra for 7.4.0?](https://discuss.elastic.co/t/plan-about-supporting-org-wikimedia-search-extra-for-7-4-0/203585)

<div class="topic-metadata">

**Author:** [@Vimos](https://discuss.elastic.co/u/Vimos)\
**Replies:** 0\
**Last updated:** [October 15, 2019, 8:22am UTC](https://discuss.elastic.co/t/plan-about-supporting-org-wikimedia-search-extra-for-7-4-0/203585 "2019-10-15T08:22:12Z")

</div>

I am trying to load enwiki-20191007-cirrussearch-content.json.gz into elasticsearch 7.4.0. But I find the plugin org.wikimedia.search:extra does not have a version supporting 7.4.0. I am getting this error for Kibana: U…

---

## [Appy Apache 2.0 license in elasticsearch](https://discuss.elastic.co/t/appy-apache-2-0-license-in-elasticsearch/203571)

<div class="topic-metadata">

**Author:** [@ranjeet.tiwari](https://discuss.elastic.co/u/ranjeet.tiwari)\
**Replies:** 1\
**Last updated:** [October 15, 2019, 8:00am UTC](https://discuss.elastic.co/t/appy-apache-2-0-license-in-elasticsearch/203571 "2019-10-15T08:00:37Z")

</div>

I have installed elasticsearch in docker and it is under basic License by default. I want to use elasticsearch under Apache 2.0 (open source version) license. Please let me know way to use elasticsearch with Apache …

---

## [High level rest client facing Connection refused when running docker image](https://discuss.elastic.co/t/high-level-rest-client-facing-connection-refused-when-running-docker-image/203187)

<div class="topic-metadata">

**Author:** [@tutorj](https://discuss.elastic.co/u/tutorj)\
**Replies:** 1\
**Last updated:** [October 15, 2019, 7:20am UTC](https://discuss.elastic.co/t/high-level-rest-client-facing-connection-refused-when-running-docker-image/203187 "2019-10-15T07:20:19Z")

</div>

Dear community, I'm new to elastic & i'm trying to cloud-ize my application via docker then kubernetes. I've built the same Springboot app as: To test this app: 1. Pull docker image a. docker pull docker.elastic.…

---

## [Custom format isn't supported cannot open any dashboards](https://discuss.elastic.co/t/custom-format-isnt-supported-cannot-open-any-dashboards/203551)

<div class="topic-metadata">

**Author:** [@Trevorp](https://discuss.elastic.co/u/Trevorp)\
**Replies:** 0\
**Last updated:** [October 15, 2019, 2:53am UTC](https://discuss.elastic.co/t/custom-format-isnt-supported-cannot-open-any-dashboards/203551 "2019-10-15T02:53:49Z")

</div>

This has been working fin up until this week Now i get the above error when i try to open a dashboard. And this is what is showing in Elastic search \[2019-10-15 10:13:20,066\]\[WARN \]\[rest.suppressed \] path: /log…

---

## [Delete S3 snapshots through API to minimize the size of s3 bucket](https://discuss.elastic.co/t/delete-s3-snapshots-through-api-to-minimize-the-size-of-s3-bucket/202751)

<div class="topic-metadata">

**Author:** [@areddy7021](https://discuss.elastic.co/u/areddy7021)\
**Replies:** 14\
**Last updated:** [October 15, 2019, 4:08am UTC](https://discuss.elastic.co/t/delete-s3-snapshots-through-api-to-minimize-the-size-of-s3-bucket/202751 "2019-10-15T04:08:38Z")

</div>

Hello Everyone , I am currently having issues in managing the old snapshots in s3 as the bucket size is getting increased if i have to store old snapshots. We have tried the option of s3 lifecycle policies and that is n…

---

## [I would like to ask a question about the multi-value field taking the previous one according to the matching degree](https://discuss.elastic.co/t/i-would-like-to-ask-a-question-about-the-multi-value-field-taking-the-previous-one-according-to-the-matching-degree/203555)

<div class="topic-metadata">

**Author:** [@yanglingqiang](https://discuss.elastic.co/u/yanglingqiang)\
**Replies:** 0\
**Last updated:** [October 15, 2019, 3:32am UTC](https://discuss.elastic.co/t/i-would-like-to-ask-a-question-about-the-multi-value-field-taking-the-previous-one-according-to-the-matching-degree/203555 "2019-10-15T03:32:02Z")

</div>

The field "descript" as shown is a multi-value. Then type "led light" to query, then what I want is that the data in the "descript" field in the returned result has only one of the most matching data; as shown in the f…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1123)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1125)
