# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1182 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1183 --- ## [Why match query is not working with elastic-search 7.3](https://discuss.elastic.co/t/why-match-query-is-not-working-with-elastic-search-7-3/196469)
**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\ **Replies:** 0\ **Last updated:** [August 23, 2019, 8:20am UTC](https://discuss.elastic.co/t/why-match-query-is-not-working-with-elastic-search-7-3/196469 "2019-08-23T08:20:41Z")
Dear All. I have written query on elastic search 2.4 that is working match as like %g% operator:- when i passed only 'g' then it display all firstname with 'g' \` { "query": { "bool": { "must": { "bool" : { "shoul… --- ## [Failed to obtain node locks, t multiple nodes were started without increasing](https://discuss.elastic.co/t/failed-to-obtain-node-locks-t-multiple-nodes-were-started-without-increasing/196457)
**Author:** [@sadeshdrj](https://discuss.elastic.co/u/sadeshdrj)\ **Replies:** 5\ **Last updated:** [August 23, 2019, 8:01am UTC](https://discuss.elastic.co/t/failed-to-obtain-node-locks-t-multiple-nodes-were-started-without-increasing/196457 "2019-08-23T08:01:30Z")
i have a downloaded and installing Elasticsearch security for the basic version of kibana and elasticsearch. but i do get the following error, i did follow some threads and changed the chown user from root user to profi… --- ## [AD security realm: unknown setting "...metadata"](https://discuss.elastic.co/t/ad-security-realm-unknown-setting-metadata/196341)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 4\ **Last updated:** [August 23, 2019, 7:58am UTC](https://discuss.elastic.co/t/ad-security-realm-unknown-setting-metadata/196341 "2019-08-23T07:58:33Z")
The following configuration in ES 7.3 stopped working after adding the metadata parameter: xpack.security.authc: realms: file.file1: order: 0 native.native1: order: 1 ac… --- ## [SSL installation](https://discuss.elastic.co/t/ssl-installation/196321)
**Author:** [@gsece](https://discuss.elastic.co/u/gsece)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 7:23am UTC](https://discuss.elastic.co/t/ssl-installation/196321 "2019-08-23T07:23:58Z")
If I have 3 node cluster, do I need to get 3 separate node specific CA certificate or can I get one CA certificate and apply in all three servers? which one is the best practice.. --- ## [Apply order: Template vs mapping](https://discuss.elastic.co/t/apply-order-template-vs-mapping/196414)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 7:16am UTC](https://discuss.elastic.co/t/apply-order-template-vs-mapping/196414 "2019-08-23T07:16:42Z")
Does anybody know the order in which a new index's mapping is created? You can create a new Index with mapping. If there's a template applicable for the index, what's the order? The official doc only describe the orde… --- ## [.NET Core elastic not working in server](https://discuss.elastic.co/t/net-core-elastic-not-working-in-server/196443)
**Author:** [@DotNetLoper](https://discuss.elastic.co/u/DotNetLoper)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 7:12am UTC](https://discuss.elastic.co/t/net-core-elastic-not-working-in-server/196443 "2019-08-23T07:12:20Z")
I have tested ElasticSearch in my localhost, it is working fine. But when I deployed to hosting server, it is not working. I use asphostportal.com. This is my code: {public static class ElasticsearchExtensio… --- ## [\_search request. Get only objects / elements inside hits?](https://discuss.elastic.co/t/search-request-get-only-objects-elements-inside-hits/196456)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 7:07am UTC](https://discuss.elastic.co/t/search-request-get-only-objects-elements-inside-hits/196456 "2019-08-23T07:07:31Z")
Hi, I want to query elasticsearch for exporting a subset of data to be able to import it into a separate elasticsearch instance, which is not connected. Also I need to export as plain text, that the exporter is able to … --- ## [How does coordinator nodes in docker and master node in physical server interacts, i have ES 6.3 installed](https://discuss.elastic.co/t/how-does-coordinator-nodes-in-docker-and-master-node-in-physical-server-interacts-i-have-es-6-3-installed/196455)
**Author:** [@sakthivel](https://discuss.elastic.co/u/sakthivel)\ **Replies:** 0\ **Last updated:** [August 23, 2019, 6:51am UTC](https://discuss.elastic.co/t/how-does-coordinator-nodes-in-docker-and-master-node-in-physical-server-interacts-i-have-es-6-3-installed/196455 "2019-08-23T06:51:06Z")
How does coordinator nodes in docker and master node in physical server interacts, i have ES 6.3 installed. I have 2 coordinator nodes in docker and 3 master nodes in physical server. Both coordinator nodes and master … --- ## [Passing value of Variables at runtime in Percolate API](https://discuss.elastic.co/t/passing-value-of-variables-at-runtime-in-percolate-api/196433)
**Author:** [@nehacv](https://discuss.elastic.co/u/nehacv)\ **Replies:** 0\ **Last updated:** [August 23, 2019, 3:33am UTC](https://discuss.elastic.co/t/passing-value-of-variables-at-runtime-in-percolate-api/196433 "2019-08-23T03:33:43Z")
I have some documents with type percolate, with queries defined in them. Each query has a custom script score. I want the script score to be configurable and have a variable which will be passed when searching for the do… --- ## [Saving queries, with nested ANDs and ORs, in Elastic Search for runtime evaluation](https://discuss.elastic.co/t/saving-queries-with-nested-ands-and-ors-in-elastic-search-for-runtime-evaluation/196436)
**Author:** [@nehacv](https://discuss.elastic.co/u/nehacv)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 5:59am UTC](https://discuss.elastic.co/t/saving-queries-with-nested-ands-and-ors-in-elastic-search-for-runtime-evaluation/196436 "2019-08-23T05:59:15Z")
Problem statement: I have a few hundred entities with certain criteria associated with them. These criteria can be nested with ANDs and ORs. For a given input, entities which satisfy the conditions would be filtered ou… --- ## [Merge search results into single document?](https://discuss.elastic.co/t/merge-search-results-into-single-document/196238)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 5:29am UTC](https://discuss.elastic.co/t/merge-search-results-into-single-document/196238 "2019-08-23T05:29:05Z")
Hi, I have data the looks like this: { "name":"John" "limit":"100" } { "name":"John" "Spent":150" } { "name":"Ray" "limit":"200" } { "name":"Ray" "Spent":250" } But those are four separate documents. Is it possible… --- ## [Details related to the index](https://discuss.elastic.co/t/details-related-to-the-index/195879)
**Author:** [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\ **Replies:** 7\ **Last updated:** [August 23, 2019, 5:17am UTC](https://discuss.elastic.co/t/details-related-to-the-index/195879 "2019-08-23T05:17:23Z")
Hi, I have created many users and i want details regarding which user has updated/created the index. How to find out all the actions performed on the index by the user ? We need to any changes in elastic yml file ? R… --- ## [How elasticsearch query should be written for the following SQL statement?](https://discuss.elastic.co/t/how-elasticsearch-query-should-be-written-for-the-following-sql-statement/196288)
**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\ **Replies:** 12\ **Last updated:** [August 23, 2019, 3:27am UTC](https://discuss.elastic.co/t/how-elasticsearch-query-should-be-written-for-the-following-sql-statement/196288 "2019-08-23T03:27:02Z")
Hello all, I have a SQL statement as below: select min(a.datetime),accname,year from CWLC\_PC a group by accname,year; I have tried many times using agg and max but I cannot get the result as the SQL statement. Please… --- ## [Could not index event to Elasticsearch: Maximum shards open](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-maximum-shards-open/196402)
**Author:** [@Don\_Withanage](https://discuss.elastic.co/u/Don_Withanage)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 1:18am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-maximum-shards-open/196402 "2019-08-23T01:18:23Z")
I am creating indexes on Elasticsearch daily from metricbeat, auditbeat, winlogbeat, and other logs. I have run into the issue of getting an error on the logstash saying "Validation Failed: this action would add \[2\] tota… --- ## [Elasticsearch/Kibana Authentication of \[elastic\] was terminated by realm \[reserved\] - failed to authenticate user \[elastic\]](https://discuss.elastic.co/t/elasticsearch-kibana-authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/196139)
**Author:** [@zavalazi](https://discuss.elastic.co/u/zavalazi)\ **Replies:** 7\ **Last updated:** [August 23, 2019, 1:07am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/196139 "2019-08-23T01:07:25Z")
I am configuring an EFK-stack (Elasticsearch - Fluentd - Kibana) running under Docker containers to allow LDAP authentication with my AD (Active Directory) realm. I am getting the error... Authentication of \[elastic\] … --- ## [How to handle partial updates concurrency](https://discuss.elastic.co/t/how-to-handle-partial-updates-concurrency/196374)
**Author:** [@vncsalencar](https://discuss.elastic.co/u/vncsalencar)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 9:59pm UTC](https://discuss.elastic.co/t/how-to-handle-partial-updates-concurrency/196374 "2019-08-22T21:59:51Z")
Hi there! I've got a problem. How should one deal with partial updates concurrency? I mean... what if, for instance, update the same field of a document and my request arrives unorderly (at the wrong order, meaning a o… --- ## [Hive not working with Elasticsearch](https://discuss.elastic.co/t/hive-not-working-with-elasticsearch/192894)
**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\ **Replies:** 4\ **Last updated:** [August 22, 2019, 8:40pm UTC](https://discuss.elastic.co/t/hive-not-working-with-elasticsearch/192894 "2019-08-22T20:40:49Z")
I am trying to bring Hive table data to Elasticsearch but it's failing to get this through, any help will be appreciated. The error I get is "Unable to find class: org.elasticsearch.hadoop.hive.EsHiveInputFormat" and "F… --- ## [Not able to create index(with geo\_point mapping) in elasticsearch 7.3.0](https://discuss.elastic.co/t/not-able-to-create-index-with-geo-point-mapping-in-elasticsearch-7-3-0/196002)
**Author:** [@Hs\_Kishore](https://discuss.elastic.co/u/Hs_Kishore)\ **Replies:** 3\ **Last updated:** [August 22, 2019, 7:00pm UTC](https://discuss.elastic.co/t/not-able-to-create-index-with-geo-point-mapping-in-elasticsearch-7-3-0/196002 "2019-08-22T19:00:48Z")
Hi, Here is the curl command that I'm using to create an index with geo\_point mapping in elasticsearch. The command works fine in elasticsearch 6.8.2, but fails to execute in 7.3.0. command: curl -H "Content-Type: app… --- ## [Build security-example-spi-extension in 7.2.0 version](https://discuss.elastic.co/t/build-security-example-spi-extension-in-7-2-0-version/196215)
**Author:** [@Fernando\_Reiz](https://discuss.elastic.co/u/Fernando_Reiz)\ **Replies:** 2\ **Last updated:** [August 22, 2019, 3:47pm UTC](https://discuss.elastic.co/t/build-security-example-spi-extension-in-7-2-0-version/196215 "2019-08-22T15:47:53Z")
Hi all, I tried built project security-example-spi-extension in version 7.2.0 using the branch 7.2, but the generated file is spi-extension-7.2.2-SNAPSHOT.zip, and when I try to install in ElasticSearch version 7.2.0 I … --- ## [ElasticSearch: What is the param limit in painless scripting?](https://discuss.elastic.co/t/elasticsearch-what-is-the-param-limit-in-painless-scripting/196282)
**Author:** [@aniruddha.raje](https://discuss.elastic.co/u/aniruddha.raje)\ **Replies:** 0\ **Last updated:** [August 22, 2019, 9:24am UTC](https://discuss.elastic.co/t/elasticsearch-what-is-the-param-limit-in-painless-scripting/196282 "2019-08-22T09:24:55Z")
I will have documents with the following data - id user\_id online\_hr offline\_hr My use case is the following - I wish to sort the users who are active using online\_hr field, While I want to sort the users wh… --- ## [Disk space is increasing](https://discuss.elastic.co/t/disk-space-is-increasing/195056)
**Author:** [@Rajeev\_Prakash](https://discuss.elastic.co/u/Rajeev_Prakash)\ **Replies:** 10\ **Last updated:** [August 22, 2019, 2:16pm UTC](https://discuss.elastic.co/t/disk-space-is-increasing/195056 "2019-08-22T14:16:17Z")
Our Elasticsearch servers are configured with multiple nodes in a single cluster. But for only one elastisearch node diskspace is increasing more when compared with other nodes in cluster. We were clearing the old indi… --- ## [Why the number of anomalies in the plot differ from the one in the page("Rows per page")?](https://discuss.elastic.co/t/why-the-number-of-anomalies-in-the-plot-differ-from-the-one-in-the-page-rows-per-page/196335)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 2:03pm UTC](https://discuss.elastic.co/t/why-the-number-of-anomalies-in-the-plot-differ-from-the-one-in-the-page-rows-per-page/196335 "2019-08-22T14:03:49Z")
Hi I am using the X-Pack. Why there are 5 anomalies in the plot and only 2 in the page ("Rows per page")? What do the red circles mean and what do the red addition symbols mean? By the way, the 2 anomalies that are s… --- ## [Setting up Elastic on Ubuntu 18.04, cant display \[local host\]:9200](https://discuss.elastic.co/t/setting-up-elastic-on-ubuntu-18-04-cant-display-local-host-9200/196313)
**Author:** [@jhmariscal](https://discuss.elastic.co/u/jhmariscal)\ **Replies:** 2\ **Last updated:** [August 22, 2019, 2:01pm UTC](https://discuss.elastic.co/t/setting-up-elastic-on-ubuntu-18-04-cant-display-local-host-9200/196313 "2019-08-22T14:01:08Z")
I am OK at ubuntu. I am trying to learn and explore Elastic and Kibana as a SIEM. I have tried this with fresh 18.04 and 19 Ubuntu server with the same results. Basically, I follow the directions here https://www.elast… --- ## [Benchmark our own Cluster and Data](https://discuss.elastic.co/t/benchmark-our-own-cluster-and-data/196317)
**Author:** [@sancroth](https://discuss.elastic.co/u/sancroth)\ **Replies:** 1\ **Last updated:** [August 22, 2019, 1:30pm UTC](https://discuss.elastic.co/t/benchmark-our-own-cluster-and-data/196317 "2019-08-22T13:30:46Z")
I would like to run some benchmarks against our own machines and data. This means that i don't want to create new indices etc. I only wish to run search queries and benchmark the response times. We are using elasticsea… --- ## [Rally for aggregations on existing ES cluster](https://discuss.elastic.co/t/rally-for-aggregations-on-existing-es-cluster/195019)
**Author:** [@rajgurinder](https://discuss.elastic.co/u/rajgurinder)\ **Replies:** 6\ **Last updated:** [August 22, 2019, 1:26pm UTC](https://discuss.elastic.co/t/rally-for-aggregations-on-existing-es-cluster/195019 "2019-08-22T13:26:50Z")
Hi I have an existing ElasticSearch Cluster with 36 Data Nodes and 5 Masters. Our Main Use case is search + aggregations(alot) It frequency goes to RED state with some concurrent requests. After reading many blogs, I… --- ## [Elastic search went unavailable in Bitbucket](https://discuss.elastic.co/t/elastic-search-went-unavailable-in-bitbucket/196166)
**Author:** [@vnagana](https://discuss.elastic.co/u/vnagana)\ **Replies:** 2\ **Last updated:** [August 22, 2019, 1:25pm UTC](https://discuss.elastic.co/t/elastic-search-went-unavailable-in-bitbucket/196166 "2019-08-22T13:25:54Z")
Hi Team, Elastic search is completely broke in Bitbucket. Getting error that " Search is currently unavailable . Refresh the page and try again" . Error in logs: 2019-08-20 03:16:19,574 ERROR \[search-indexing:thread-1… --- ## [ES 6.8.2 on Mac OS 14.0.6 and Java JDK 12.0.2 ERROR](https://discuss.elastic.co/t/es-6-8-2-on-mac-os-14-0-6-and-java-jdk-12-0-2-error/195852)
**Author:** [@Mike\_Fritzsche](https://discuss.elastic.co/u/Mike_Fritzsche)\ **Replies:** 19\ **Last updated:** [August 22, 2019, 12:59pm UTC](https://discuss.elastic.co/t/es-6-8-2-on-mac-os-14-0-6-and-java-jdk-12-0-2-error/195852 "2019-08-22T12:59:50Z")
I installed on my Mac OS 14.0.6 Elasticsearch with brew. It must be ES V 6 - not 7. But I tied to install 7 too - same error. So must be problem with the jdk? After installation was running well, I start with command ela… --- ## [Validation failed because of missing type with hl rest client bulk API](https://discuss.elastic.co/t/validation-failed-because-of-missing-type-with-hl-rest-client-bulk-api/196060)
**Author:** [@zhaozeyang](https://discuss.elastic.co/u/zhaozeyang)\ **Replies:** 3\ **Last updated:** [August 22, 2019, 12:47pm UTC](https://discuss.elastic.co/t/validation-failed-because-of-missing-type-with-hl-rest-client-bulk-api/196060 "2019-08-22T12:47:18Z")
hello : this is my code: BulkRequest request = new BulkRequest(); for (DataInfo dataInfo : dataInfos) { String index = getCurrentIndex(dataInfo.getIndexPrefix()); String id = dataInfo.getId(); … --- ## [Migrating from ES 5.6 to ES 7.3](https://discuss.elastic.co/t/migrating-from-es-5-6-to-es-7-3/196324)
**Author:** [@udit\_kumar](https://discuss.elastic.co/u/udit_kumar)\ **Replies:** 0\ **Last updated:** [August 22, 2019, 12:38pm UTC](https://discuss.elastic.co/t/migrating-from-es-5-6-to-es-7-3/196324 "2019-08-22T12:38:13Z")
mapping\_data = json.dumps({ MAPPING\_NAME: { "properties": { "file": { "type": "attachment", "fields": { "content": {"store": "yes"}, "name": {"store": "yes"}, "title": {"store": "yes"}, "date": {"store": "yes"}, … --- ## [Elasticsearch Nest - JsonParsingException expected:'{',](https://discuss.elastic.co/t/elasticsearch-nest-jsonparsingexception-expected/195801)
**Author:** [@Airn5475](https://discuss.elastic.co/u/Airn5475)\ **Replies:** 10\ **Last updated:** [August 22, 2019, 12:36pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-jsonparsingexception-expected/195801 "2019-08-22T12:36:46Z")
I am in the process of updating my application to use Elasticsearch 7.3. I updated my mappings { "mappings": { "properties": { "location": { "type": "geo\_point" } } } } Here's part of a… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1181) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1183)