# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1138 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1139 --- ## [Document contains at least one immense term in field .. again](https://discuss.elastic.co/t/document-contains-at-least-one-immense-term-in-field-again/201814)
**Author:** [@Peter\_Vanleeuwen](https://discuss.elastic.co/u/Peter_Vanleeuwen)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 1:43pm UTC](https://discuss.elastic.co/t/document-contains-at-least-one-immense-term-in-field-again/201814 "2019-10-01T13:43:29Z")
I have my mapping for my field setup properly I thought... "myField" : { "type" : "text", "fields" : { "keyword" : { "type" : "keyword", "ignore\_above" : 256 … --- ## [Important system configuration for Windows](https://discuss.elastic.co/t/important-system-configuration-for-windows/201812)
**Author:** [@j.elastic](https://discuss.elastic.co/u/j.elastic)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 1:31pm UTC](https://discuss.elastic.co/t/important-system-configuration-for-windows/201812 "2019-10-01T13:31:21Z")
In https://www.elastic.co/guide/en/elasticsearch/reference/current/system-config.html, I found an overview of settings that need to be considered for production usage. For some of these settings I see a note saying they'… --- ## [Unable to run elasticsearch 7.2 with weblogic 12c](https://discuss.elastic.co/t/unable-to-run-elasticsearch-7-2-with-weblogic-12c/201368)
**Author:** [@Shubham\_Mittal](https://discuss.elastic.co/u/Shubham_Mittal)\ **Replies:** 6\ **Last updated:** [October 1, 2019, 1:26pm UTC](https://discuss.elastic.co/t/unable-to-run-elasticsearch-7-2-with-weblogic-12c/201368 "2019-10-01T13:26:39Z")
java.lang.IncompatibleClassChangeError: Implementing class at java.lang.ClassLoader.defineClass1(Native Method) at java.lang.ClassLoader.defineClass(ClassLoader.java:763) at java.security.SecureClassLoader.defineClass… --- ## [Couldn't find any Elasticsearch data - new install](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data-new-install/201810)
**Author:** [@vigster72](https://discuss.elastic.co/u/vigster72)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 1:26pm UTC](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data-new-install/201810 "2019-10-01T13:26:34Z")
This was my first setup on a server. Followed the following article https://docs.fluentd.org/how-to-guides/free-alternative-to-splunk-by-fluentd rsyslog -\>FLuentd-\>eleastic search-\>Kibina curl -X GET http://localhost:… --- ## [No rollover info found for \[filebeat-7.1.1\] with alias , the index has not yet rolled over with that alias](https://discuss.elastic.co/t/no-rollover-info-found-for-filebeat-7-1-1-with-alias-the-index-has-not-yet-rolled-over-with-that-alias/201808)
**Author:** [@krish2](https://discuss.elastic.co/u/krish2)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 1:21pm UTC](https://discuss.elastic.co/t/no-rollover-info-found-for-filebeat-7-1-1-with-alias-the-index-has-not-yet-rolled-over-with-that-alias/201808 "2019-10-01T13:21:16Z")
When I run the command "GET filebeat-7.1.1/\_ilm/explain" in Kibana console I am getting the below error . { "indices" : { "filebeat-7.1.1" : { "index" : "filebeat-7.1.1", "managed" : true, "policy" : "new\_policy\_1"… --- ## [How to apply filter in a watcher query? "\[boosting\] query does not support \[filter\]"](https://discuss.elastic.co/t/how-to-apply-filter-in-a-watcher-query-boosting-query-does-not-support-filter/201740)
**Author:** [@sonal\_singh](https://discuss.elastic.co/u/sonal_singh)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 7:20am UTC](https://discuss.elastic.co/t/how-to-apply-filter-in-a-watcher-query-boosting-query-does-not-support-filter/201740 "2019-10-01T07:20:12Z")
Hi Gurus, Here is a scenario: I have set up an alert based upon a keyword " Spamhaus", to check logs every hour. It is working fine. BUT, I want exclude any logs if Keywords comes in with "(Spamhaus/Invaluement/Retu… --- ## [Partial update vs Index](https://discuss.elastic.co/t/partial-update-vs-index/201793)
**Author:** [@111211](https://discuss.elastic.co/u/111211)\ **Replies:** 1\ **Last updated:** [October 1, 2019, 12:18pm UTC](https://discuss.elastic.co/t/partial-update-vs-index/201793 "2019-10-01T12:18:18Z")
I currently have a document of Elastic Search. My document has approximately 12000 fields. I'll try to update partially. Currently I am using Rest High level Client in Spring Framework. Just Push all data to POST … --- ## [How to enable elasticsearch audit logs in containers ES cluster (docker)](https://discuss.elastic.co/t/how-to-enable-elasticsearch-audit-logs-in-containers-es-cluster-docker/201790)
**Author:** [@arun.kumar92](https://discuss.elastic.co/u/arun.kumar92)\ **Replies:** 1\ **Last updated:** [October 1, 2019, 12:11pm UTC](https://discuss.elastic.co/t/how-to-enable-elasticsearch-audit-logs-in-containers-es-cluster-docker/201790 "2019-10-01T12:11:28Z")
Hi Could you please help me to enable audit logs in elastcisearch (dockerized cluster)? ENV details 4 node cluster 1 node act like load balancing --- ## [How Replica from one node to another will move?](https://discuss.elastic.co/t/how-replica-from-one-node-to-another-will-move/201771)
**Author:** [@Saptha\_AD](https://discuss.elastic.co/u/Saptha_AD)\ **Replies:** 1\ **Last updated:** [October 1, 2019, 11:15am UTC](https://discuss.elastic.co/t/how-replica-from-one-node-to-another-will-move/201771 "2019-10-01T11:15:30Z")
I have a 3 node cluster with 2 master eligible and all are data node & ingest node. Setting is 1 Primary Shard and 1 Replica shard. I have one index "nginx-2019.09" For example Node "A" is master node and haves a Prim… --- ## [Elasticsearch https error](https://discuss.elastic.co/t/elasticsearch-https-error/201723)
**Author:** [@Vikas\_Yadav](https://discuss.elastic.co/u/Vikas_Yadav)\ **Replies:** 3\ **Last updated:** [October 1, 2019, 10:59am UTC](https://discuss.elastic.co/t/elasticsearch-https-error/201723 "2019-10-01T10:59:04Z")
this error occured while configuring elasticsearch for https Caused by: java.security.AccessControlException: access denied ("java.io.FilePermission" "/usr/share/elasticsearch/config/certs/elastic-certificates.p12" "rea… --- ## [Elassticsearch restart policy](https://discuss.elastic.co/t/elassticsearch-restart-policy/199996)
**Author:** [@arun.kumar92](https://discuss.elastic.co/u/arun.kumar92)\ **Replies:** 2\ **Last updated:** [October 1, 2019, 10:47am UTC](https://discuss.elastic.co/t/elassticsearch-restart-policy/199996 "2019-10-01T10:47:57Z")
Hi folks In my current is clustered to have 10 thousand plus shards available. Suppose I need to restart one node. Is there any restart policy for recovering all shards quickly? --- ## [Bucket sort on nested field](https://discuss.elastic.co/t/bucket-sort-on-nested-field/201774)
**Author:** [@klaus82](https://discuss.elastic.co/u/klaus82)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 10:28am UTC](https://discuss.elastic.co/t/bucket-sort-on-nested-field/201774 "2019-10-01T10:28:19Z")
I have a problem with a bucket sort on nested field on Elastic 7.1.0: My index has the following mapping: { "mapping": { "dynamic": "strict", "properties": { "created\_at\_timestamp": { "type": "date" }, "url": { … --- ## [First time query operations are pretty slow](https://discuss.elastic.co/t/first-time-query-operations-are-pretty-slow/201760)
**Author:** [@sudheervarmam](https://discuss.elastic.co/u/sudheervarmam)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 9:06am UTC](https://discuss.elastic.co/t/first-time-query-operations-are-pretty-slow/201760 "2019-10-01T09:06:26Z")
For the first time elasticsearch query time is too long on a collection with 400+ million documents.The problem basically is "first time query operations are pretty slow". However, we want to understand the ROOT CAUSE a… --- ## [Error nested exception is java.lang.NoSuchMethodError: org.elasticsearch.search.SearchHits.getTotalHits()](https://discuss.elastic.co/t/error-nested-exception-is-java-lang-nosuchmethoderror-org-elasticsearch-search-searchhits-gettotalhits/200774)
**Author:** [@luongky06](https://discuss.elastic.co/u/luongky06)\ **Replies:** 3\ **Last updated:** [October 1, 2019, 8:57am UTC](https://discuss.elastic.co/t/error-nested-exception-is-java-lang-nosuchmethoderror-org-elasticsearch-search-searchhits-gettotalhits/200774 "2019-10-01T08:57:10Z")
Hi guys, I'm using spring boot 2.1.1 connect to Elasticsearch 7.3.4 (elastic was run on docker). Spring application startup and connected to the Elasticsearch but when I try to search may document on Elastic I got the … --- ## [Files from MongoDB GridFS to elastic search](https://discuss.elastic.co/t/files-from-mongodb-gridfs-to-elastic-search/201753)
**Author:** [@jay.dumbali](https://discuss.elastic.co/u/jay.dumbali)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 8:30am UTC](https://discuss.elastic.co/t/files-from-mongodb-gridfs-to-elastic-search/201753 "2019-10-01T08:30:42Z")
Hi, I want to send logs files which are stored using MongoDB GridFS into elastic search. How can i do it efficiently? Thanks --- ## [Mapping for a field which will not be searched at all](https://discuss.elastic.co/t/mapping-for-a-field-which-will-not-be-searched-at-all/201389)
**Author:** [@nahiko2000](https://discuss.elastic.co/u/nahiko2000)\ **Replies:** 4\ **Last updated:** [October 1, 2019, 8:01am UTC](https://discuss.elastic.co/t/mapping-for-a-field-which-will-not-be-searched-at-all/201389 "2019-10-01T08:01:53Z")
Hi! I have some data (xml like formatted data) which before saving it to Elasticsearch, I am going to LZ4 compress and then convert to Base64, so it will be just a long non-spaced string. I want to set this data in an … --- ## [Mapping type is missing](https://discuss.elastic.co/t/mapping-type-is-missing/201577)
**Author:** [@Reena\_Raghavan](https://discuss.elastic.co/u/Reena_Raghavan)\ **Replies:** 8\ **Last updated:** [October 1, 2019, 7:40am UTC](https://discuss.elastic.co/t/mapping-type-is-missing/201577 "2019-10-01T07:40:21Z")
--- ## [Any way to get String Response from performRequest call?](https://discuss.elastic.co/t/any-way-to-get-string-response-from-performrequest-call/201735)
**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 6:39am UTC](https://discuss.elastic.co/t/any-way-to-get-string-response-from-performrequest-call/201735 "2019-10-01T06:39:48Z")
Right now are using below call and then converting response to String as below. Response response = restClient.performRequest(new Request("GET", "/")); String responseBody = EntityUtils.toString(response.getEntity()); … --- ## [Highlight - Number of fragments not working](https://discuss.elastic.co/t/highlight-number-of-fragments-not-working/201726)
**Author:** [@Ilamparithi\_Karthike](https://discuss.elastic.co/u/Ilamparithi_Karthike)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 5:42am UTC](https://discuss.elastic.co/t/highlight-number-of-fragments-not-working/201726 "2019-10-01T05:42:14Z")
Hi All, Following is my mappings, mappings I am highlighting option for highlighting the results. It highlights only 5 occurrences of the keyword but in the JSON, I have 7+ keyword. I have gone through the docs, it s… --- ## [Elasticsearch on AW ECS](https://discuss.elastic.co/t/elasticsearch-on-aw-ecs/201690)
**Author:** [@dhruvbakshi](https://discuss.elastic.co/u/dhruvbakshi)\ **Replies:** 2\ **Last updated:** [October 1, 2019, 5:36am UTC](https://discuss.elastic.co/t/elasticsearch-on-aw-ecs/201690 "2019-10-01T05:36:23Z")
Hi @DavidTurner, I have a couple of cases logged in with elasticsearch. This one was created recently (00390065) but still ties into the other ticket I have logged and we don't seem to be reaching anywhere. I'm not sure… --- ## [Snapshot data based on query](https://discuss.elastic.co/t/snapshot-data-based-on-query/200559)
**Author:** [@sanju\_yadav](https://discuss.elastic.co/u/sanju_yadav)\ **Replies:** 5\ **Last updated:** [October 1, 2019, 5:16am UTC](https://discuss.elastic.co/t/snapshot-data-based-on-query/200559 "2019-10-01T05:16:31Z")
I have a big index containing data of last 3 years, now I want to implement snapshot to solve and data mishap, I want to include only last 3 months data in snapshot and after that move to incremental snapshot, can I do t… --- ## [Cross cluster search timing out ; reconnect automatically after random duration](https://discuss.elastic.co/t/cross-cluster-search-timing-out-reconnect-automatically-after-random-duration/198348)
**Author:** [@srirama](https://discuss.elastic.co/u/srirama)\ **Replies:** 5\ **Last updated:** [October 1, 2019, 4:45am UTC](https://discuss.elastic.co/t/cross-cluster-search-timing-out-reconnect-automatically-after-random-duration/198348 "2019-10-01T04:45:37Z")
Hi All, The remote cluster search is enabled in my production environment. It is working well, however some times below is error is observed in elastic-search logs. org.elasticsearch.transport.RemoteTransportException… --- ## [Django elasticsearch not displaying data](https://discuss.elastic.co/t/django-elasticsearch-not-displaying-data/201713)
**Author:** [@winghang97](https://discuss.elastic.co/u/winghang97)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 2:38am UTC](https://discuss.elastic.co/t/django-elasticsearch-not-displaying-data/201713 "2019-10-01T02:38:28Z")
I have asked the same question in stackoverflow but no one was able to answer my questions. Below is the link to the question. summary of question: My current problem is that it is only displaying one data (the latest… --- ## [Elastic stack subscription with existing product](https://discuss.elastic.co/t/elastic-stack-subscription-with-existing-product/201708)
**Author:** [@bobin](https://discuss.elastic.co/u/bobin)\ **Replies:** 1\ **Last updated:** [October 1, 2019, 1:22am UTC](https://discuss.elastic.co/t/elastic-stack-subscription-with-existing-product/201708 "2019-10-01T01:22:18Z")
Hi all, We have an on-premise software product, which will be provided to our customer. This software product will use / integrate with ELK features. We would like to inquire below two cases : We will use Elastic su… --- ## [Elasticsearch and logstash inside docker - connection refused](https://discuss.elastic.co/t/elasticsearch-and-logstash-inside-docker-connection-refused/201703)
**Author:** [@nxns1](https://discuss.elastic.co/u/nxns1)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 12:29am UTC](https://discuss.elastic.co/t/elasticsearch-and-logstash-inside-docker-connection-refused/201703 "2019-10-01T00:29:10Z")
Hello, I have a logstash image on a docker container, and elasticsearch on a different host (xx.xx.xx.xx). My config files look like this: docker-compose.yml version: '3.7' services: logstash: image:… --- ## [How to store software version numbers?](https://discuss.elastic.co/t/how-to-store-software-version-numbers/201537)
**Author:** [@bruce289](https://discuss.elastic.co/u/bruce289)\ **Replies:** 2\ **Last updated:** [September 30, 2019, 9:30pm UTC](https://discuss.elastic.co/t/how-to-store-software-version-numbers/201537 "2019-09-30T21:30:54Z")
Hi, What is the best practice for storing software version numbers like 6.3.1 or 4.10.2? None of the field datatypes seem to fit the bill, so my current thinking is to store the major, minor, and patch versions as sepa… --- ## [Normalize a script\_score based on returned doc fields](https://discuss.elastic.co/t/normalize-a-script-score-based-on-returned-doc-fields/201693)
**Author:** [@rpanczer](https://discuss.elastic.co/u/rpanczer)\ **Replies:** 0\ **Last updated:** [September 30, 2019, 7:29pm UTC](https://discuss.elastic.co/t/normalize-a-script-score-based-on-returned-doc-fields/201693 "2019-09-30T19:29:00Z")
I am trying to change the \_score of documents by normalizing all returned doc\['relevancy'\].value fields by the max doc\['relevancy'\].value of the result set. I also would like to multiple this result by the Max Elastic Se… --- ## [Timestamp Range Not Working vs. Date Format Range Working](https://discuss.elastic.co/t/timestamp-range-not-working-vs-date-format-range-working/200909)
**Author:** [@RAMichel](https://discuss.elastic.co/u/RAMichel)\ **Replies:** 1\ **Last updated:** [September 25, 2019, 12:27pm UTC](https://discuss.elastic.co/t/timestamp-range-not-working-vs-date-format-range-working/200909 "2019-09-25T12:27:07Z")
Hopefully this makes sense. I have a document with two fields storing the same data, but one is in an epoch\_millis timestamp format, and the other is in a readable format. The mapping for these two fields is: "latest\_da… --- ## [Index.merge.policy.reclaim\_deletes\_weight can we set this parameter at cluster level or index level](https://discuss.elastic.co/t/index-merge-policy-reclaim-deletes-weight-can-we-set-this-parameter-at-cluster-level-or-index-level/201687)
**Author:** [@Sagar\_Cs](https://discuss.elastic.co/u/Sagar_Cs)\ **Replies:** 0\ **Last updated:** [September 30, 2019, 5:31pm UTC](https://discuss.elastic.co/t/index-merge-policy-reclaim-deletes-weight-can-we-set-this-parameter-at-cluster-level-or-index-level/201687 "2019-09-30T17:31:59Z")
Hii Can some one tell me if we can set above param at cluster level or index level --- ## [Elasticsearch Percolate Query Search Score](https://discuss.elastic.co/t/elasticsearch-percolate-query-search-score/200310)
**Author:** [@niketpatel2525](https://discuss.elastic.co/u/niketpatel2525)\ **Replies:** 4\ **Last updated:** [September 30, 2019, 5:29pm UTC](https://discuss.elastic.co/t/elasticsearch-percolate-query-search-score/200310 "2019-09-30T17:29:35Z")
How to interpret score value return from the percolate query search? What is the difference between score received on single document search vs multiple document search on percolate index? [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1137) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1139)