# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1133

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1134

---

## [Not an SSL/TLS record when Enable SSL/TLS for HTTP](https://discuss.elastic.co/t/not-an-ssl-tls-record-when-enable-ssl-tls-for-http/202477)

<div class="topic-metadata">

**Author:** [@rambo](https://discuss.elastic.co/u/rambo)\
**Replies:** 7\
**Last updated:** [October 7, 2019, 8:55am UTC](https://discuss.elastic.co/t/not-an-ssl-tls-record-when-enable-ssl-tls-for-http/202477 "2019-10-07T08:55:17Z")

</div>

Hi team, I want to configure Elasticsearch for SAML authentication when I follow below official link: https://www.elastic.co/guide/en/elastic-stack-overview/6.7/saml-guide-authentication.html#saml-guide-authentication, …

---

## [Calculating time diff between @timestamp and document date field](https://discuss.elastic.co/t/calculating-time-diff-between-timestamp-and-document-date-field/201918)

<div class="topic-metadata">

**Author:** [@Josip\_Cagalj](https://discuss.elastic.co/u/Josip_Cagalj)\
**Replies:** 2\
**Last updated:** [October 7, 2019, 8:28am UTC](https://discuss.elastic.co/t/calculating-time-diff-between-timestamp-and-document-date-field/201918 "2019-10-07T08:28:58Z")

</div>

HI, I'm having trouble calculating time diff (in seconds) between @timestamp and 'eventTime' date field using script field inside search query. My mappings for 'eventTime' field is: "mapping": { "dynamic": "fa…

---

## [ElasticSearch Sql aggregation query bugs with SUM function](https://discuss.elastic.co/t/elasticsearch-sql-aggregation-query-bugs-with-sum-function/200996)

<div class="topic-metadata">

**Author:** [@Johna](https://discuss.elastic.co/u/Johna)\
**Replies:** 3\
**Last updated:** [October 7, 2019, 7:14am UTC](https://discuss.elastic.co/t/elasticsearch-sql-aggregation-query-bugs-with-sum-function/200996 "2019-10-07T07:14:08Z")

</div>

HI there, Sql query is a very fantastic tool offered by EL 7.3. However i cant explain that bug : When i use SUM with Match , 1 condition, query below works well POST \_xpack/sql?format=txt { "query":"SELECT SUM(Fl…

---

## [ES 7.4 3nodes cluster to setup](https://discuss.elastic.co/t/es-7-4-3nodes-cluster-to-setup/202422)

<div class="topic-metadata">

**Author:** [@oqto](https://discuss.elastic.co/u/oqto)\
**Replies:** 2\
**Last updated:** [October 7, 2019, 5:44am UTC](https://discuss.elastic.co/t/es-7-4-3nodes-cluster-to-setup/202422 "2019-10-07T05:44:57Z")

</div>

Hi,I try to 3 nodes cluster for ES7.4. but only one node found in cluster and not specific error after restart ES. Configurations and node list data are below, node1 cluster.name: my\_cluster node.name: {HOSTNAME} …

---

## [Best practice for shard rebalancing when adding nodes](https://discuss.elastic.co/t/best-practice-for-shard-rebalancing-when-adding-nodes/202429)

<div class="topic-metadata">

**Author:** [@yuecong](https://discuss.elastic.co/u/yuecong)\
**Replies:** 2\
**Last updated:** [October 7, 2019, 5:40am UTC](https://discuss.elastic.co/t/best-practice-for-shard-rebalancing-when-adding-nodes/202429 "2019-10-07T05:40:52Z")

</div>

I added two new data nodes into a 4-node cluster. But I noticed that after I added the two new nodes, the new index (5 shards) is only allocated to the two new nodes. As meanwhile, it is balancing the old indices as well…

---

## [How to check, when replicas are really created](https://discuss.elastic.co/t/how-to-check-when-replicas-are-really-created/202335)

<div class="topic-metadata">

**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\
**Replies:** 1\
**Last updated:** [October 7, 2019, 5:30am UTC](https://discuss.elastic.co/t/how-to-check-when-replicas-are-really-created/202335 "2019-10-07T05:30:34Z")

</div>

I use ElasticSeach 6.5 To change index mappings I am issuing reindexing operation. For faster reindexing, I set number\_of\_replicas to 0 for a new index (that I am reindexing into). After reindexing is finished I set n…

---

## [Condition in aggregation does not filter the hit result](https://discuss.elastic.co/t/condition-in-aggregation-does-not-filter-the-hit-result/201606)

<div class="topic-metadata">

**Author:** [@Quang\_D\_Tr\_n](https://discuss.elastic.co/u/Quang_D_Tr_n)\
**Replies:** 2\
**Last updated:** [October 7, 2019, 4:28am UTC](https://discuss.elastic.co/t/condition-in-aggregation-does-not-filter-the-hit-result/201606 "2019-10-07T04:28:50Z")

</div>

Hi guys. I am trying to get all the record having the latest created time so I come up with this query: { "query": { "term": { "username": "xxx" } }, "aggs": { "sessions": { "terms" : { "field" …

---

## [Querying Date Range Data Type](https://discuss.elastic.co/t/querying-date-range-data-type/202394)

<div class="topic-metadata">

**Author:** [@ajohnson10209](https://discuss.elastic.co/u/ajohnson10209)\
**Replies:** 1\
**Last updated:** [October 7, 2019, 4:17am UTC](https://discuss.elastic.co/t/querying-date-range-data-type/202394 "2019-10-07T04:17:29Z")

</div>

Hey guys, Very basic question. I have a date-range mapping for a field with gte : 7pm and lte :10pm (in epoch\_millis) for example. I want to make a query that looks at the current server time (with now) and will return …

---

## [ES\_Spark read time out](https://discuss.elastic.co/t/es-spark-read-time-out/202471)

<div class="topic-metadata">

**Author:** [@ydshi](https://discuss.elastic.co/u/ydshi)\
**Replies:** 0\
**Last updated:** [October 7, 2019, 4:12am UTC](https://discuss.elastic.co/t/es-spark-read-time-out/202471 "2019-10-07T04:12:09Z")

</div>

when using es-spark to read data from tencent es cluster ,i recieved an error like node failed (read time out), no other nodes left what should i do? thanks

---

## [Nest client. How to serialize date field to a custom format?](https://discuss.elastic.co/t/nest-client-how-to-serialize-date-field-to-a-custom-format/201562)

<div class="topic-metadata">

**Author:** [@einfoman](https://discuss.elastic.co/u/einfoman)\
**Replies:** 2\
**Last updated:** [October 6, 2019, 7:44pm UTC](https://discuss.elastic.co/t/nest-client-how-to-serialize-date-field-to-a-custom-format/201562 "2019-10-06T19:44:21Z")

</div>

Hi! I use Nest 7.3 and a default serializer. And I have a problem with date serialization. Suppose we have a model: public class SearchEntity { \[Date(Format = "date\_time\_no\_millis")\] public DateTime Timestamp …

---

## [RestHighLevelClient SocketTimeoutException](https://discuss.elastic.co/t/resthighlevelclient-sockettimeoutexception/202443)

<div class="topic-metadata">

**Author:** [@zharenkov](https://discuss.elastic.co/u/zharenkov)\
**Replies:** 0\
**Last updated:** [October 6, 2019, 10:27am UTC](https://discuss.elastic.co/t/resthighlevelclient-sockettimeoutexception/202443 "2019-10-06T10:27:10Z")

</div>

I've got ES cluster on Azure, and communicate with it from Spring Boot app using elasticsearch RestHighLevelClient. The bean in spring is the follow @Bean public RestHighLevelClient elasticsearchRestClient() { Cred…

---

## [Match Strings Exactly Within A BOOL](https://discuss.elastic.co/t/match-strings-exactly-within-a-bool/202398)

<div class="topic-metadata">

**Author:** [@drabid200](https://discuss.elastic.co/u/drabid200)\
**Replies:** 3\
**Last updated:** [October 6, 2019, 5:42am UTC](https://discuss.elastic.co/t/match-strings-exactly-within-a-bool/202398 "2019-10-06T05:42:34Z")

</div>

I very much struggle with the elasticsearch synatx. I have a query that almost works except for exact string matching on the labels.system\_id values in the below example. Specifying "West-1-a" returns records for "Nort…

---

## [Node config for split-brain avoidance](https://discuss.elastic.co/t/node-config-for-split-brain-avoidance/202386)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 2\
**Last updated:** [October 5, 2019, 12:53pm UTC](https://discuss.elastic.co/t/node-config-for-split-brain-avoidance/202386 "2019-10-05T12:53:49Z")

</div>

We are currently running an ES cluster with 5 nodes in this config, with minimum\_master\_node sets to 2 and having only 3 nodes be master-eligible A: Master + Data B: Master + Data C: Master + Data D: Data E: Data As w…

---

## [Search query on elasticsearch returning different output every time](https://discuss.elastic.co/t/search-query-on-elasticsearch-returning-different-output-every-time/199818)

<div class="topic-metadata">

**Author:** [@amol\_sonawane1](https://discuss.elastic.co/u/amol_sonawane1)\
**Replies:** 3\
**Last updated:** [October 5, 2019, 9:28am UTC](https://discuss.elastic.co/t/search-query-on-elasticsearch-returning-different-output-every-time/199818 "2019-10-05T09:28:34Z")

</div>

Hi, I am facing weird issue on Elasticsearch 6.7.0 Our Elasticsearch cluster is a two-node cluster. which is refreshed daily through automation. The ES nodes are created daily and pushed data to ES from java app. Some…

---

## [Elastic Cloud and SAML Authentication Help](https://discuss.elastic.co/t/elastic-cloud-and-saml-authentication-help/202407)

<div class="topic-metadata">

**Author:** [@aerstelle](https://discuss.elastic.co/u/aerstelle)\
**Replies:** 1\
**Last updated:** [October 5, 2019, 7:40am UTC](https://discuss.elastic.co/t/elastic-cloud-and-saml-authentication-help/202407 "2019-10-05T07:40:59Z")

</div>

I've struggled getting information from the documentation and support (which isn't really their wheelhouse but thought I'd try anyways). The particular piece I'm having trouble getting is the SAML Service Provider Metad…

---

## [Successfully indexing but not seeing on Kibana](https://discuss.elastic.co/t/successfully-indexing-but-not-seeing-on-kibana/202403)

<div class="topic-metadata">

**Author:** [@dalakada](https://discuss.elastic.co/u/dalakada)\
**Replies:** 1\
**Last updated:** [October 5, 2019, 1:21am UTC](https://discuss.elastic.co/t/successfully-indexing-but-not-seeing-on-kibana/202403 "2019-10-05T01:21:17Z")

</div>

I'm using this snipped of code \> from datetime import datetime from elasticsearch import Elasticsearch es = Elasticsearch("#MY ES ENDPOINT") doc = { 'author': 'kimchy', 'text': 'Elasticsearch: cool. bonsai cool.…

---

## [Is there a docker image for elasticsearch OSS version?](https://discuss.elastic.co/t/is-there-a-docker-image-for-elasticsearch-oss-version/201299)

<div class="topic-metadata">

**Author:** [@cooldude30](https://discuss.elastic.co/u/cooldude30)\
**Replies:** 2\
**Last updated:** [October 4, 2019, 9:43pm UTC](https://discuss.elastic.co/t/is-there-a-docker-image-for-elasticsearch-oss-version/201299 "2019-10-04T21:43:14Z")

</div>

Is there a docker image for elasticsearch OSS version? If yes, can someone please provide the link for the same. I was not able to find one after my half an hour search.

---

## [Cannot delete documents with "!" in the \_id](https://discuss.elastic.co/t/cannot-delete-documents-with-in-the-id/201446)

<div class="topic-metadata">

**Author:** [@milleka2](https://discuss.elastic.co/u/milleka2)\
**Replies:** 4\
**Last updated:** [October 4, 2019, 6:09pm UTC](https://discuss.elastic.co/t/cannot-delete-documents-with-in-the-id/201446 "2019-10-04T18:09:49Z")

</div>

I have some records that I'm trying to either update or delete. All of them have an "!" in the \_id field, something I'd have never done if I were here when it was created :slight\_smile: The \_id looks like this: category…

---

## [Simple Address Matching Application](https://discuss.elastic.co/t/simple-address-matching-application/202169)

<div class="topic-metadata">

**Author:** [@han1](https://discuss.elastic.co/u/han1)\
**Replies:** 6\
**Last updated:** [October 4, 2019, 5:35pm UTC](https://discuss.elastic.co/t/simple-address-matching-application/202169 "2019-10-04T17:35:08Z")

</div>

Does anyone know anyone that can help us create an address matching indexing solution i.e. matching partial addresses to full official addresses. We have searched the globe but very few do this in .NET using the NEST A…

---

## [Trouble creating my first cluster with X-pack](https://discuss.elastic.co/t/trouble-creating-my-first-cluster-with-x-pack/202044)

<div class="topic-metadata">

**Author:** [@drtrask](https://discuss.elastic.co/u/drtrask)\
**Replies:** 2\
**Last updated:** [October 4, 2019, 5:16pm UTC](https://discuss.elastic.co/t/trouble-creating-my-first-cluster-with-x-pack/202044 "2019-10-04T17:16:27Z")

</div>

Hello All! I am very new to elastic and have been given the job of upgrading our 3 sites from 6.6.1 to 7.4 To start I tried to create a cluster that mimics our sites. Just 3 master/data nodes with Kibana and Logstash. …

---

## [Curator using ssl to connect to Elasticsearch though use\_ssl is false](https://discuss.elastic.co/t/curator-using-ssl-to-connect-to-elasticsearch-though-use-ssl-is-false/202343)

<div class="topic-metadata">

**Author:** [@Sandeep\_Gupta](https://discuss.elastic.co/u/Sandeep_Gupta)\
**Replies:** 2\
**Last updated:** [October 4, 2019, 4:49pm UTC](https://discuss.elastic.co/t/curator-using-ssl-to-connect-to-elasticsearch-though-use-ssl-is-false/202343 "2019-10-04T16:49:39Z")

</div>

I have elasticsearch configured without SSL. I am able to access it using curl http://localhost:9200/ Here are the versions Elasticsearch: 6.2.2 Curator: 5.8.1 I have installed plugin repository-s3 I am trying to ta…

---

## [ElasticSearch Dies After 40 Seconds](https://discuss.elastic.co/t/elasticsearch-dies-after-40-seconds/195510)

<div class="topic-metadata">

**Author:** [@jboyes](https://discuss.elastic.co/u/jboyes)\
**Replies:** 19\
**Last updated:** [October 4, 2019, 4:27pm UTC](https://discuss.elastic.co/t/elasticsearch-dies-after-40-seconds/195510 "2019-10-04T16:27:08Z")

</div>

I was having issues with an installation of ElasticSearch, so I uninstalled and re-installed the service using yum (v5.6.16). Now, when I start the service, it runs for 40 seconds and then dies. There is nothing in the e…

---

## [Bash: ./bin/elasticsearch: Permission denied](https://discuss.elastic.co/t/bash-bin-elasticsearch-permission-denied/202129)

<div class="topic-metadata">

**Author:** [@listan](https://discuss.elastic.co/u/listan)\
**Replies:** 1\
**Last updated:** [October 4, 2019, 4:17pm UTC](https://discuss.elastic.co/t/bash-bin-elasticsearch-permission-denied/202129 "2019-10-04T16:17:49Z")

</div>

Hi. I try to run Elasticsearch in Hortonworks Data Platform. I got error "bash: ./bin/elasticsearch: Permission denied ". Below you can see part of the script. Could you help me? Thanks in advance. \[root@sandbox-hd…

---

## [Indexing and querying large text documents with multiple term occurences](https://discuss.elastic.co/t/indexing-and-querying-large-text-documents-with-multiple-term-occurences/202360)

<div class="topic-metadata">

**Author:** [@vstevenson](https://discuss.elastic.co/u/vstevenson)\
**Replies:** 1\
**Last updated:** [October 4, 2019, 3:03pm UTC](https://discuss.elastic.co/t/indexing-and-querying-large-text-documents-with-multiple-term-occurences/202360 "2019-10-04T15:03:19Z")

</div>

Hi, I am indexing books and some long web pages in ElasticSearch. My ElasticSearch documents have a field 'content' that is extremely long with multiple occurrences of my search terms. Using the highlight tool of Elasti…

---

## [Index turing out RED from YELLOW](https://discuss.elastic.co/t/index-turing-out-red-from-yellow/202353)

<div class="topic-metadata">

**Author:** [@Nilesh\_Pasalkar](https://discuss.elastic.co/u/Nilesh_Pasalkar)\
**Replies:** 0\
**Last updated:** [October 4, 2019, 1:46pm UTC](https://discuss.elastic.co/t/index-turing-out-red-from-yellow/202353 "2019-10-04T13:46:37Z")

</div>

Hello Guys, I am facing issue while indexing multiple documents in batches. The document count is more than 20000. while indexing this many document i randomly receive the error like below... org.apache.lucene.index.Me…

---

## [Index status changed from yellow to red](https://discuss.elastic.co/t/index-status-changed-from-yellow-to-red/202349)

<div class="topic-metadata">

**Author:** [@Nilesh\_Pasalkar](https://discuss.elastic.co/u/Nilesh_Pasalkar)\
**Replies:** 0\
**Last updated:** [October 4, 2019, 1:38pm UTC](https://discuss.elastic.co/t/index-status-changed-from-yellow-to-red/202349 "2019-10-04T13:38:59Z")

</div>

Hello Guys, I am creating one application where I am inserting large number of documents in batches into index. initially it starts ok but after some time randomly it gives me error like below.... org.apache.lucene.ind…

---

## [Annotated text highlighting not working for wildcard fields](https://discuss.elastic.co/t/annotated-text-highlighting-not-working-for-wildcard-fields/201803)

<div class="topic-metadata">

**Author:** [@robmartin11](https://discuss.elastic.co/u/robmartin11)\
**Replies:** 2\
**Last updated:** [October 4, 2019, 1:29pm UTC](https://discuss.elastic.co/t/annotated-text-highlighting-not-working-for-wildcard-fields/201803 "2019-10-04T13:29:43Z")

</div>

Im indexing some text using the annotated text plugin eg DELETE test1 PUT test { "settings": { "number\_of\_shards": 1 }, "mappings": { "properties":{ "text":{ "type":"annotated\_text" …

---

## [Depricated logs regarding Bulk Request Parser](https://discuss.elastic.co/t/depricated-logs-regarding-bulk-request-parser/202347)

<div class="topic-metadata">

**Author:** [@as50790](https://discuss.elastic.co/u/as50790)\
**Replies:** 0\
**Last updated:** [October 4, 2019, 1:27pm UTC](https://discuss.elastic.co/t/depricated-logs-regarding-bulk-request-parser/202347 "2019-10-04T13:27:47Z")

</div>

Hi All, Could you please help me figuring out how to get rid of these deprecation warnings? Elasticsearch Version : 7.3.1 Logstash Version : 7.3.1 Kibana Version : 7.3.1 Metricbeat Version: 7.3.1 \[WARN \]\[o.e.d.a.b.…

---

## [ES 7.4 - Xpack](https://discuss.elastic.co/t/es-7-4-xpack/202241)

<div class="topic-metadata">

**Author:** [@NewmazN24](https://discuss.elastic.co/u/NewmazN24)\
**Replies:** 2\
**Last updated:** [October 4, 2019, 1:24pm UTC](https://discuss.elastic.co/t/es-7-4-xpack/202241 "2019-10-04T13:24:11Z")

</div>

Hello folks, I have 3 nodes in my cluster. I can start and reach them without issue when I have not enabled xpack. When I enable security to do elasticsearch-setup-passwords auto, I have an error when it tries to reach …

---

## [Combining two documents within the same index](https://discuss.elastic.co/t/combining-two-documents-within-the-same-index/201857)

<div class="topic-metadata">

**Author:** [@vishal\_M](https://discuss.elastic.co/u/vishal_M)\
**Replies:** 2\
**Last updated:** [October 4, 2019, 1:18pm UTC](https://discuss.elastic.co/t/combining-two-documents-within-the-same-index/201857 "2019-10-04T13:18:04Z")

</div>

Hello Team, I have a use-case of combining two documents (which has a similar timestamp for both the records) based on a value of a particular field. Please go through the data pic in detail. If you observe the data …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1132)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1134)
