# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1125

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1126

---

## [Elasticsearch is not using memory resources available](https://discuss.elastic.co/t/elasticsearch-is-not-using-memory-resources-available/200215)

<div class="topic-metadata">

**Author:** [@Luis\_Alejandro\_Galan](https://discuss.elastic.co/u/Luis_Alejandro_Galan)\
**Replies:** 2\
**Last updated:** [October 14, 2019, 11:11pm UTC](https://discuss.elastic.co/t/elasticsearch-is-not-using-memory-resources-available/200215 "2019-10-14T23:11:52Z")

</div>

hello! I am trying to troubleshoot elasticsearch, we noticed that it was having memory issues and crashing. We have added 4gbs of memory onto the server but notice that it is not using the additional resources, is there …

---

## [NPE ES 7.4 Script score](https://discuss.elastic.co/t/npe-es-7-4-script-score/203525)

<div class="topic-metadata">

**Author:** [@sgTextSearch](https://discuss.elastic.co/u/sgTextSearch)\
**Replies:** 0\
**Last updated:** [October 14, 2019, 9:24pm UTC](https://discuss.elastic.co/t/npe-es-7-4-script-score/203525 "2019-10-14T21:24:23Z")

</div>

NPE when using script scores query across multiple indices. When a range clause is written on a field that exists in just one index, the other indices throw NPE. org.elasticsearch.transport.RemoteTransportException: \[M…

---

## [Fscrawler is failed to connect to ES with HTTPS enabled](https://discuss.elastic.co/t/fscrawler-is-failed-to-connect-to-es-with-https-enabled/203366)

<div class="topic-metadata">

**Author:** [@Nee\_Defeng](https://discuss.elastic.co/u/Nee_Defeng)\
**Replies:** 6\
**Last updated:** [October 14, 2019, 10:21pm UTC](https://discuss.elastic.co/t/fscrawler-is-failed-to-connect-to-es-with-https-enabled/203366 "2019-10-14T22:21:52Z")

</div>

I have configured the Kibana being connected to ES 7.3.0 with HTTPS enabled. But I got this error "java.io.IOException: Host name 'localhost' does not match the certificate subject provided by the peer (CN=Elastic Certif…

---

## [Filter is not working while using @log\_group in AWS](https://discuss.elastic.co/t/filter-is-not-working-while-using-log-group-in-aws/203510)

<div class="topic-metadata">

**Author:** [@mfolivas](https://discuss.elastic.co/u/mfolivas)\
**Replies:** 1\
**Last updated:** [October 14, 2019, 9:41pm UTC](https://discuss.elastic.co/t/filter-is-not-working-while-using-log-group-in-aws/203510 "2019-10-14T21:41:47Z")

</div>

I need to be able to do a filter on the @log\_group but I get zero hits when doing it. When I do it with the filter, I do get hits. I figured that I am probably not this in this correct. The @log\_group is set to be: "@…

---

## [Having unindexed fields](https://discuss.elastic.co/t/having-unindexed-fields/203526)

<div class="topic-metadata">

**Author:** [@Joyce](https://discuss.elastic.co/u/Joyce)\
**Replies:** 0\
**Last updated:** [October 14, 2019, 9:35pm UTC](https://discuss.elastic.co/t/having-unindexed-fields/203526 "2019-10-14T21:35:48Z")

</div>

Hello, I have index file send from UiPath server with Robot logs. There are certain fields only appear in some log entries. In Kibana dev tool they are showing as unindexed. When check on the mapping on the index those …

---

## [ElasticSearch 7.3 basic authentication giving 403 Forbidden](https://discuss.elastic.co/t/elasticsearch-7-3-basic-authentication-giving-403-forbidden/203367)

<div class="topic-metadata">

**Author:** [@vinodres](https://discuss.elastic.co/u/vinodres)\
**Replies:** 3\
**Last updated:** [October 14, 2019, 9:20pm UTC](https://discuss.elastic.co/t/elasticsearch-7-3-basic-authentication-giving-403-forbidden/203367 "2019-10-14T21:20:36Z")

</div>

I have recently installed ElasticSearch 7.3 basic on single instance of CentOS 7. Before enabling basic security I verified that I was able to access both ElasticSearch and Kibana UI. Later I followed the exact steps sp…

---

## [Weekly ilm pattern](https://discuss.elastic.co/t/weekly-ilm-pattern/203199)

<div class="topic-metadata">

**Author:** [@wedkarz014](https://discuss.elastic.co/u/wedkarz014)\
**Replies:** 1\
**Last updated:** [October 14, 2019, 8:39pm UTC](https://discuss.elastic.co/t/weekly-ilm-pattern/203199 "2019-10-14T20:39:10Z")

</div>

Hi, I have a problem with ILM configuration. I'd like to set up an ilm policy to create index like that: index\_name-yyyy.ww-000001. When i set it with default format- index\_name-yyyy.MM.dd-000001, it works good but with…

---

## [Help me modify this query so that it can find out the matches which contain N terms in a specific order as opposed to all matches possible which contain the N terms](https://discuss.elastic.co/t/help-me-modify-this-query-so-that-it-can-find-out-the-matches-which-contain-n-terms-in-a-specific-order-as-opposed-to-all-matches-possible-which-contain-the-n-terms/203507)

<div class="topic-metadata">

**Author:** [@hjiop\_oop](https://discuss.elastic.co/u/hjiop_oop)\
**Replies:** 8\
**Last updated:** [October 14, 2019, 8:28pm UTC](https://discuss.elastic.co/t/help-me-modify-this-query-so-that-it-can-find-out-the-matches-which-contain-n-terms-in-a-specific-order-as-opposed-to-all-matches-possible-which-contain-the-n-terms/203507 "2019-10-14T20:28:57Z")

</div>

This is what I had, this can query for phrases but they will always be in any order {'query': {'bool': {'should': \[{'bool': {'must': \[{'match\_phrase': {'data': 'word1'}}, {'match\_phrase': {'data': 'word2'}}\]}}\]}}, 'from…

---

## [Script Score](https://discuss.elastic.co/t/script-score/203517)

<div class="topic-metadata">

**Author:** [@sgTextSearch](https://discuss.elastic.co/u/sgTextSearch)\
**Replies:** 0\
**Last updated:** [October 14, 2019, 8:25pm UTC](https://discuss.elastic.co/t/script-score/203517 "2019-10-14T20:25:02Z")

</div>

Script Score in place of function score queries. I have been using function score queries to write custom boost scripts. I am trying to replace them with script score queries in 7.4. Is there a way to achieve score\_mode…

---

## [Branding/customization in Elasticsearch Service (SaaS)](https://discuss.elastic.co/t/branding-customization-in-elasticsearch-service-saas/203512)

<div class="topic-metadata">

**Author:** [@Craig\_Boman](https://discuss.elastic.co/u/Craig_Boman)\
**Replies:** 0\
**Last updated:** [October 14, 2019, 7:05pm UTC](https://discuss.elastic.co/t/branding-customization-in-elasticsearch-service-saas/203512 "2019-10-14T19:05:12Z")

</div>

We are getting conflicting support information about the level of branding or customization available in the hosted Elasticsearch Service (Saas) in the Elastic Cloud. Has anyone been able to change the logos and overall …

---

## [Watcher mutilple actions and conditions](https://discuss.elastic.co/t/watcher-mutilple-actions-and-conditions/202951)

<div class="topic-metadata">

**Author:** [@Sajal](https://discuss.elastic.co/u/Sajal)\
**Replies:** 7\
**Last updated:** [October 14, 2019, 6:57pm UTC](https://discuss.elastic.co/t/watcher-mutilple-actions-and-conditions/202951 "2019-10-14T18:57:31Z")

</div>

Hi Team , I am using watcher for calling webhook and email , it is working perfectly fine . But i need to apply one more condition and depending on that condition i want to call different email which is different from …

---

## [Can we incorporate Curator in ILM](https://discuss.elastic.co/t/can-we-incorporate-curator-in-ilm/203234)

<div class="topic-metadata">

**Author:** [@Anikesh\_Paul](https://discuss.elastic.co/u/Anikesh_Paul)\
**Replies:** 5\
**Last updated:** [October 14, 2019, 6:53pm UTC](https://discuss.elastic.co/t/can-we-incorporate-curator-in-ilm/203234 "2019-10-14T18:53:28Z")

</div>

Hi, I want to know how can we incorporate curator in ILM so that I can take a backup of an index when it's rolled over.

---

## [Any grok pattern to extract only uppercase from a string?](https://discuss.elastic.co/t/any-grok-pattern-to-extract-only-uppercase-from-a-string/203504)

<div class="topic-metadata">

**Author:** [@ashadp](https://discuss.elastic.co/u/ashadp)\
**Replies:** 0\
**Last updated:** [October 14, 2019, 6:04pm UTC](https://discuss.elastic.co/t/any-grok-pattern-to-extract-only-uppercase-from-a-string/203504 "2019-10-14T18:04:56Z")

</div>

For example, I would like to get only ERROR, HINT, and STATEMENT from below strings postgresERROR postgresHINT postgresSTATEMENT If use "%{WORD:log\_type}", then I get full string as below, but I am interested in only…

---

## [SQL INTERVAL question](https://discuss.elastic.co/t/sql-interval-question/203485)

<div class="topic-metadata">

**Author:** [@rdesanno](https://discuss.elastic.co/u/rdesanno)\
**Replies:** 2\
**Last updated:** [October 14, 2019, 5:58pm UTC](https://discuss.elastic.co/t/sql-interval-question/203485 "2019-10-14T17:58:03Z")

</div>

I'm trying to write a simple Elastic SQL that polls the temperature value in the last 3 minutes but i'm not able to select such a small timeframe. It should be as simple as NOW() - INTERVAL 3 MINUTES but that returns not…

---

## [How can I fix error: ConfigurationError: Missing node(s) option for winston-elasticsearch?](https://discuss.elastic.co/t/how-can-i-fix-error-configurationerror-missing-node-s-option-for-winston-elasticsearch/203478)

<div class="topic-metadata">

**Author:** [@steinko](https://discuss.elastic.co/u/steinko)\
**Replies:** 1\
**Last updated:** [October 14, 2019, 5:51pm UTC](https://discuss.elastic.co/t/how-can-i-fix-error-configurationerror-missing-node-s-option-for-winston-elasticsearch/203478 "2019-10-14T17:51:59Z")

</div>

How do I fix an error ConfigurationError: Missing node(s) option . Se the discripton here https://stackoverflow.com/q/58371284/8236354

---

## ["Find all entries that don't contain values from an array"](https://discuss.elastic.co/t/find-all-entries-that-dont-contain-values-from-an-array/203500)

<div class="topic-metadata">

**Author:** [@BonesyWonesy](https://discuss.elastic.co/u/BonesyWonesy)\
**Replies:** 0\
**Last updated:** [October 14, 2019, 5:41pm UTC](https://discuss.elastic.co/t/find-all-entries-that-dont-contain-values-from-an-array/203500 "2019-10-14T17:41:19Z")

</div>

I have a list of magazines for sale and each of them has a unique 'magazineId'. I also have an array of ids like \[ 123, 456, 789 \] representing which ids for magazines a user has already purchased. Is there a way to qu…

---

## [Adding a new field to \_source using scripts](https://discuss.elastic.co/t/adding-a-new-field-to-source-using-scripts/203311)

<div class="topic-metadata">

**Author:** [@460](https://discuss.elastic.co/u/460)\
**Replies:** 2\
**Last updated:** [October 14, 2019, 5:38pm UTC](https://discuss.elastic.co/t/adding-a-new-field-to-source-using-scripts/203311 "2019-10-14T17:38:31Z")

</div>

HI, I am trying to add a new field while reindexing the data if a particular condition is satisfied. Can anyone solve this problem. Thanks and Regards, Likhith

---

## [Java 11 Support in ES Rest High level client](https://discuss.elastic.co/t/java-11-support-in-es-rest-high-level-client/203350)

<div class="topic-metadata">

**Author:** [@premreddy](https://discuss.elastic.co/u/premreddy)\
**Replies:** 2\
**Last updated:** [October 14, 2019, 3:09pm UTC](https://discuss.elastic.co/t/java-11-support-in-es-rest-high-level-client/203350 "2019-10-14T15:09:56Z")

</div>

Hi, Can you please let us know if Java 11 can be used to communicate with ES (V7.2) using Rest High level client. As per documentation it's not clear if Java 8 is the only version supported by Rest High level Client. h…

---

## [Setting up Rollover Index](https://discuss.elastic.co/t/setting-up-rollover-index/203477)

<div class="topic-metadata">

**Author:** [@edster](https://discuss.elastic.co/u/edster)\
**Replies:** 0\
**Last updated:** [October 14, 2019, 2:34pm UTC](https://discuss.elastic.co/t/setting-up-rollover-index/203477 "2019-10-14T14:34:42Z")

</div>

Hello, we keep running into issues trying to setup rollover index. I am not sure how to go about setting up the rollover. We have already have a template added to the elastic servers. curl -XPUT "hostname:9200/\_templa…

---

## [Elastic wouldn't start when changing network.host ip](https://discuss.elastic.co/t/elastic-wouldnt-start-when-changing-network-host-ip/203443)

<div class="topic-metadata">

**Author:** [@mouna\_boujrad](https://discuss.elastic.co/u/mouna_boujrad)\
**Replies:** 20\
**Last updated:** [October 14, 2019, 2:21pm UTC](https://discuss.elastic.co/t/elastic-wouldnt-start-when-changing-network-host-ip/203443 "2019-10-14T14:21:38Z")

</div>

Hello, I have problem with the elastic configuration, when I run the elastic under the default configuration with : # Set the bind address to a specific IP (IPv4 or IPv6): # network.host: localhost # # Set a custom po…

---

## [Indice rollower duplicte docs](https://discuss.elastic.co/t/indice-rollower-duplicte-docs/202214)

<div class="topic-metadata">

**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\
**Replies:** 4\
**Last updated:** [October 14, 2019, 1:57pm UTC](https://discuss.elastic.co/t/indice-rollower-duplicte-docs/202214 "2019-10-14T13:57:05Z")

</div>

during the rollover - we notice the document count is already in the old index and when updating during that second the document count gets to the newly created indices as well. is there any way to prevent the duplicatio…

---

## [Get scores for two parts of bool query](https://discuss.elastic.co/t/get-scores-for-two-parts-of-bool-query/203471)

<div class="topic-metadata">

**Author:** [@zwirni](https://discuss.elastic.co/u/zwirni)\
**Replies:** 0\
**Last updated:** [October 14, 2019, 1:50pm UTC](https://discuss.elastic.co/t/get-scores-for-two-parts-of-bool-query/203471 "2019-10-14T13:50:47Z")

</div>

Hello there, Right now I'm struggling finding out how to obtain relevant results for two parts of my query. My documents are basically some millions of text documents with a "content" field. What would be an appropriate…

---

## [Support for CRL/OCSP in PKI realm?](https://discuss.elastic.co/t/support-for-crl-ocsp-in-pki-realm/201858)

<div class="topic-metadata">

**Author:** [@cozbone43](https://discuss.elastic.co/u/cozbone43)\
**Replies:** 2\
**Last updated:** [October 14, 2019, 1:45pm UTC](https://discuss.elastic.co/t/support-for-crl-ocsp-in-pki-realm/201858 "2019-10-14T13:45:01Z")

</div>

We are looking to start using PKI authentication in our cluster and I'm wondering what options are available to check revocation for client certificates. Are there are any config options in the PKI realm (or even in the…

---

## [ssl.SSLError: \[SSL\] PEM lib (\_ssl.c:3845)](https://discuss.elastic.co/t/ssl-sslerror-ssl-pem-lib-ssl-c-3845/203392)

<div class="topic-metadata">

**Author:** [@lioramilbaum](https://discuss.elastic.co/u/lioramilbaum)\
**Replies:** 1\
**Last updated:** [October 14, 2019, 1:38pm UTC](https://discuss.elastic.co/t/ssl-sslerror-ssl-pem-lib-ssl-c-3845/203392 "2019-10-14T13:38:13Z")

</div>

The following function execution throws an error. The same command in bash works like a charm. def set\_kibana\_password(): headers = {"Content-Type": "application/json"} payload = {"password": os.getenv('ELASTIC\_PASSWORD…

---

## [Sort query returns order of record without ignoring case](https://discuss.elastic.co/t/sort-query-returns-order-of-record-without-ignoring-case/203466)

<div class="topic-metadata">

**Author:** [@Vinayak\_Chauhan](https://discuss.elastic.co/u/Vinayak_Chauhan)\
**Replies:** 0\
**Last updated:** [October 14, 2019, 1:30pm UTC](https://discuss.elastic.co/t/sort-query-returns-order-of-record-without-ignoring-case/203466 "2019-10-14T13:30:20Z")

</div>

Hello All, I am trying to sort the search result on title field for example, but result shows order with title case first then small letter. Same to descending order, small letter results comes first and then title/capi…

---

## [How to search in particular node when running multiple nodes](https://discuss.elastic.co/t/how-to-search-in-particular-node-when-running-multiple-nodes/203462)

<div class="topic-metadata">

**Author:** [@gurjit\_buck](https://discuss.elastic.co/u/gurjit_buck)\
**Replies:** 0\
**Last updated:** [October 14, 2019, 1:16pm UTC](https://discuss.elastic.co/t/how-to-search-in-particular-node-when-running-multiple-nodes/203462 "2019-10-14T13:16:23Z")

</div>

Hi, I am able to create multiple nodes (actually data folders) by following solution mentioned on this link Create multiple nodes elasticsearch 5.4 - #5 by pjayramkumar I am a .Net developer and I am struggling to find…

---

## [Replica shard unassigned while performing shrink action through ILM policy](https://discuss.elastic.co/t/replica-shard-unassigned-while-performing-shrink-action-through-ilm-policy/203432)

<div class="topic-metadata">

**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\
**Replies:** 8\
**Last updated:** [October 14, 2019, 1:16pm UTC](https://discuss.elastic.co/t/replica-shard-unassigned-while-performing-shrink-action-through-ilm-policy/203432 "2019-10-14T13:16:08Z")

</div>

Hi The Health of my Index has turned yellow, seemingly because a replica shard cannot be allocated. This index has been created as part of the "shrink" action as defined in my ILM policy. The desired result is that the …

---

## [Highlight - Break words and highlight](https://discuss.elastic.co/t/highlight-break-words-and-highlight/203457)

<div class="topic-metadata">

**Author:** [@Ilamparithi\_Karthike](https://discuss.elastic.co/u/Ilamparithi_Karthike)\
**Replies:** 0\
**Last updated:** [October 14, 2019, 1:04pm UTC](https://discuss.elastic.co/t/highlight-break-words-and-highlight/203457 "2019-10-14T13:04:45Z")

</div>

I have a document { "field1": "Que a raíz de la emisión del Decreto Ley 2 de 22 de febrero de 2008, el Órgano Ejecutivo elaboró una ordenación sistemática en forma de Texto Único del Decreto Ley 9 de 1998 y todas sus …

---

## [How to combine properties of multiple sibling level nested objects in a single terms aggregations, Elasticsearch](https://discuss.elastic.co/t/how-to-combine-properties-of-multiple-sibling-level-nested-objects-in-a-single-terms-aggregations-elasticsearch/203456)

<div class="topic-metadata">

**Author:** [@rohit\_IM](https://discuss.elastic.co/u/rohit_IM)\
**Replies:** 0\
**Last updated:** [October 14, 2019, 1:01pm UTC](https://discuss.elastic.co/t/how-to-combine-properties-of-multiple-sibling-level-nested-objects-in-a-single-terms-aggregations-elasticsearch/203456 "2019-10-14T13:01:01Z")

</div>

We Have a use case with Elasticsearch, for an index structure, we have multiple nested objects at sibling level, and for our use case: we need to combine more than one properties of nested objects in a terms aggregation…

---

## [Trouble setting up an elasticsearch cluster](https://discuss.elastic.co/t/trouble-setting-up-an-elasticsearch-cluster/203245)

<div class="topic-metadata">

**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\
**Replies:** 6\
**Last updated:** [October 14, 2019, 12:31pm UTC](https://discuss.elastic.co/t/trouble-setting-up-an-elasticsearch-cluster/203245 "2019-10-14T12:31:16Z")

</div>

Hi, i'm trying to set up a cluster with 3 nodes es-node1 es-node2 es-node3 installed elasticsearch 7.4 on 3 nodes con configure elasticsearch.yml with the following: cluster.name: es-cluster node.name: es-node1 node…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1124)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1126)
