# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=305

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 306

---

## [Convert string field to geo\_point field for map visualisation](https://discuss.elastic.co/t/convert-string-field-to-geo-point-field-for-map-visualisation/324397)

<div class="topic-metadata">

**Author:** [@cf4455](https://discuss.elastic.co/u/cf4455)\
**Replies:** 4\
**Last updated:** [February 6, 2023, 2:42pm UTC](https://discuss.elastic.co/t/convert-string-field-to-geo-point-field-for-map-visualisation/324397 "2023-02-06T14:42:59Z")

</div>

Hello, We collect in our logs, among other things, geo-coordinates and their accuracy in 2 "string" fields. Currently there are over 3,200,000 logs since the beginning of 2021. Now we want to display these coordinates o…

---

## [BERTopic en ElasticSearch](https://discuss.elastic.co/t/bertopic-en-elasticsearch/324790)

<div class="topic-metadata">

**Author:** [@alvaro\_ing](https://discuss.elastic.co/u/alvaro_ing)\
**Replies:** 0\
**Last updated:** [February 6, 2023, 12:17pm UTC](https://discuss.elastic.co/t/bertopic-en-elasticsearch/324790 "2023-02-06T12:17:16Z")

</div>

Buenas, Me gustaría poder importar un modelo entrenado con BERTopic dentro de Elasticsearch. Como es de la familia de los BERT entiendo que deberia poder importarse pero no se como una vez tengo el modelo entrenado pued…

---

## [Enable Cross Cluster Search vs Monitoring](https://discuss.elastic.co/t/enable-cross-cluster-search-vs-monitoring/324749)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 2\
**Last updated:** [February 6, 2023, 11:16am UTC](https://discuss.elastic.co/t/enable-cross-cluster-search-vs-monitoring/324749 "2023-02-06T11:16:24Z")

</div>

Just installed a ES cluster 8.6.1 and a Kibana 8.6.1, trying to enable cluster monitoring, but attempting to access monitoring app from kibana, it just tells me that my cluster has monitoring.ui.ccs.enabled=true. Dunno h…

---

## [Elasticsearch boolean term query latency increases with zero match terms](https://discuss.elastic.co/t/elasticsearch-boolean-term-query-latency-increases-with-zero-match-terms/324619)

<div class="topic-metadata">

**Author:** [@vikcher123](https://discuss.elastic.co/u/vikcher123)\
**Replies:** 3\
**Last updated:** [February 6, 2023, 10:41am UTC](https://discuss.elastic.co/t/elasticsearch-boolean-term-query-latency-increases-with-zero-match-terms/324619 "2023-02-06T10:41:56Z")

</div>

I'm observing some interesting behavior with boolean term queries on Elasticsearch that I'd like to understand further. Each document in the index has several terms under the section ev\_tags. I'm issuing queries like b…

---

## [New Java API updateRequest as String](https://discuss.elastic.co/t/new-java-api-updaterequest-as-string/324783)

<div class="topic-metadata">

**Author:** [@schmermeister](https://discuss.elastic.co/u/schmermeister)\
**Replies:** 1\
**Last updated:** [February 6, 2023, 10:38am UTC](https://discuss.elastic.co/t/new-java-api-updaterequest-as-string/324783 "2023-02-06T10:38:10Z")

</div>

Is there a way with the new Java API to update a document as JSON-String? Problem is, i have a Object which i want to update and this contains null value which must be serialized. By default jackson ignores null value t…

---

## [\[URGENT\] Corpora Definiton , no base-url defined || Indexing Local dump.json](https://discuss.elastic.co/t/urgent-corpora-definiton-no-base-url-defined-indexing-local-dump-json/324515)

<div class="topic-metadata">

**Author:** [@Sriram\_Kumar](https://discuss.elastic.co/u/Sriram_Kumar)\
**Replies:** 6\
**Last updated:** [February 6, 2023, 9:32am UTC](https://discuss.elastic.co/t/urgent-corpora-definiton-no-base-url-defined-indexing-local-dump-json/324515 "2023-02-06T09:32:29Z")

</div>

Hi I am very new to esRally , I tried finding the similar topic but couldn't . Any help would be really appreciated. So , I have hosted a local es on docker. version : 8.5.2 , single node . I want to do benchmarking us…

---

## [java.security.AccessControlException: access denied (\\"java.net.SocketPermission\\" \\"localhost:0\\" \\"listen,resolve\\")](https://discuss.elastic.co/t/java-security-accesscontrolexception-access-denied-java-net-socketpermission-localhost-0-listen-resolve/324777)

<div class="topic-metadata">

**Author:** [@hitlll](https://discuss.elastic.co/u/hitlll)\
**Replies:** 0\
**Last updated:** [February 6, 2023, 9:08am UTC](https://discuss.elastic.co/t/java-security-accesscontrolexception-access-denied-java-net-socketpermission-localhost-0-listen-resolve/324777 "2023-02-06T09:08:35Z")

</div>

I have configured SocketPermission ("localhost: 0", "listen, resolve"), but this error will still be reported. Please help me solve it. Thanks!

---

## [Audit logs stop on certain nodes in cluster](https://discuss.elastic.co/t/audit-logs-stop-on-certain-nodes-in-cluster/324519)

<div class="topic-metadata">

**Author:** [@ryuujin](https://discuss.elastic.co/u/ryuujin)\
**Replies:** 7\
**Last updated:** [February 6, 2023, 8:19am UTC](https://discuss.elastic.co/t/audit-logs-stop-on-certain-nodes-in-cluster/324519 "2023-02-06T08:19:39Z")

</div>

Hello! I have a production cluster running 20 nodes that I would like to configure audit logs for. Everything seems to be running correctly on 3 nodes, on the rest it stops logging events. When I restart the service on …

---

## [Snapshot issue when running policy using Alibaba cloud S3](https://discuss.elastic.co/t/snapshot-issue-when-running-policy-using-alibaba-cloud-s3/324731)

<div class="topic-metadata">

**Author:** [@h.allaoui](https://discuss.elastic.co/u/h.allaoui)\
**Replies:** 2\
**Last updated:** [February 6, 2023, 6:41am UTC](https://discuss.elastic.co/t/snapshot-issue-when-running-policy-using-alibaba-cloud-s3/324731 "2023-02-06T06:41:35Z")

</div>

Hi Community, I setup a repo using Alibaba cloud S3 storage and when I run an immediate snapshot it is working but when I run a snapshot policy based on that repo I am getting below error. { "type": "repository\_excep…

---

## [Copy only Index Mapping from one cluster to another without the data](https://discuss.elastic.co/t/copy-only-index-mapping-from-one-cluster-to-another-without-the-data/324411)

<div class="topic-metadata">

**Author:** [@dadiasish](https://discuss.elastic.co/u/dadiasish)\
**Replies:** 2\
**Last updated:** [February 6, 2023, 6:37am UTC](https://discuss.elastic.co/t/copy-only-index-mapping-from-one-cluster-to-another-without-the-data/324411 "2023-02-06T06:37:11Z")

</div>

Hi, I have a cluster which has index mappings and data in it. I'm currently creating a new cluster where I have different set of data which need to be ingested with the same mappings like in the previous cluster. So, …

---

## [Can I search elastic keys with wildcard or substring](https://discuss.elastic.co/t/can-i-search-elastic-keys-with-wildcard-or-substring/324754)

<div class="topic-metadata">

**Author:** [@sarthik](https://discuss.elastic.co/u/sarthik)\
**Replies:** 1\
**Last updated:** [February 6, 2023, 6:32am UTC](https://discuss.elastic.co/t/can-i-search-elastic-keys-with-wildcard-or-substring/324754 "2023-02-06T06:32:15Z")

</div>

I have the following patterns as keys in my data stored in elk indexes: \* Name \* \_name \* preffered\_name \* first\_name \* last\_name I need to query these keys, but the key names are not fixed, so need to search keys based…

---

## [Getting cluster security error after login](https://discuss.elastic.co/t/getting-cluster-security-error-after-login/324463)

<div class="topic-metadata">

**Author:** [@Kamal\_Khandelwal](https://discuss.elastic.co/u/Kamal_Khandelwal)\
**Replies:** 2\
**Last updated:** [February 6, 2023, 6:05am UTC](https://discuss.elastic.co/t/getting-cluster-security-error-after-login/324463 "2023-02-06T06:05:03Z")

</div>

getting this error whenever i try to login, can someone please help me action \[cluster:monitor/main\] is unauthorized for user \[kamal\] with effective roles (assigned roles \[monitoring,network\] were not found), this a…

---

## [Content archival and retrieval app built on ELK](https://discuss.elastic.co/t/content-archival-and-retrieval-app-built-on-elk/324695)

<div class="topic-metadata">

**Author:** [@ryendluri](https://discuss.elastic.co/u/ryendluri)\
**Replies:** 1\
**Last updated:** [February 5, 2023, 11:11pm UTC](https://discuss.elastic.co/t/content-archival-and-retrieval-app-built-on-elk/324695 "2023-02-05T23:11:58Z")

</div>

is there an existing application that supports archiving data and retrieving data in a non-profit context? Thanks

---

## [ElasticSearch Snapshotting using Azure Repository Plugin - Storage Account with Azure DNS Zone](https://discuss.elastic.co/t/elasticsearch-snapshotting-using-azure-repository-plugin-storage-account-with-azure-dns-zone/324421)

<div class="topic-metadata">

**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\
**Replies:** 0\
**Last updated:** [February 1, 2023, 12:17pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshotting-using-azure-repository-plugin-storage-account-with-azure-dns-zone/324421 "2023-02-01T12:17:03Z")

</div>

I'm using the Azure Repository plugin to take snapshot backups. I created a new Storage Account with the "Azure DNS Zone" option in the networking tab as shown :- If we select this option, then snapshot registration…

---

## [Elasticsearch-reconfigure-node errors and aborts](https://discuss.elastic.co/t/elasticsearch-reconfigure-node-errors-and-aborts/324724)

<div class="topic-metadata">

**Author:** [@H\_K7](https://discuss.elastic.co/u/H_K7)\
**Replies:** 1\
**Last updated:** [February 5, 2023, 10:20pm UTC](https://discuss.elastic.co/t/elasticsearch-reconfigure-node-errors-and-aborts/324724 "2023-02-05T22:20:06Z")

</div>

it errored on the 4th node I ran, previous 3 nodes when I ran reconfigure node with the token it didn't error out. error message ERROR: Aborting enrolling to cluster. Could not communicate with the node on any of the a…

---

## [401 Error : missing authentication credentials : elasticsearch version 7.6.2](https://discuss.elastic.co/t/401-error-missing-authentication-credentials-elasticsearch-version-7-6-2/324618)

<div class="topic-metadata">

**Author:** [@abhay14](https://discuss.elastic.co/u/abhay14)\
**Replies:** 2\
**Last updated:** [February 5, 2023, 10:18pm UTC](https://discuss.elastic.co/t/401-error-missing-authentication-credentials-elasticsearch-version-7-6-2/324618 "2023-02-05T22:18:30Z")

</div>

I have followed the below wiki to enable the basic authentication Elastic verion 7.6 I am not sure how to configure default the username and password so But I am getting the error , curl -s --cacert config/certs/ca/c…

---

## [DEV TOOLS - Group indexes into 1](https://discuss.elastic.co/t/dev-tools-group-indexes-into-1/324666)

<div class="topic-metadata">

**Author:** [@vfeydel](https://discuss.elastic.co/u/vfeydel)\
**Replies:** 2\
**Last updated:** [February 5, 2023, 10:15pm UTC](https://discuss.elastic.co/t/dev-tools-group-indexes-into-1/324666 "2023-02-05T22:15:22Z")

</div>

Hi, I have 66 index with a similar structure ike for example : abc\_1, abc\_2, abc\_3 .... abc\_n. They have a commun field name "identifiant". The id 1 may be in 1 or 2 or n index or only one and the same for the other id.…

---

## [Backward Pagination with Elasticsearch Aggregation with Spring data Elasticsearch](https://discuss.elastic.co/t/backward-pagination-with-elasticsearch-aggregation-with-spring-data-elasticsearch/324607)

<div class="topic-metadata">

**Author:** [@Anuja\_Brahmankar](https://discuss.elastic.co/u/Anuja_Brahmankar)\
**Replies:** 1\
**Last updated:** [February 5, 2023, 4:36pm UTC](https://discuss.elastic.co/t/backward-pagination-with-elasticsearch-aggregation-with-spring-data-elasticsearch/324607 "2023-02-05T16:36:47Z")

</div>

Hi , I have aggregation Query with Composite Aggregation builder with spring data elasticsearch which provides after\_key value,which return last aggregated count with That I am able do forward pagination. Sample Query: …

---

## [Can you get different results from replica and primary if queried at the same time?](https://discuss.elastic.co/t/can-you-get-different-results-from-replica-and-primary-if-queried-at-the-same-time/324732)

<div class="topic-metadata">

**Author:** [@Diya\_Al\_Mahameed](https://discuss.elastic.co/u/Diya_Al_Mahameed)\
**Replies:** 6\
**Last updated:** [February 5, 2023, 4:20pm UTC](https://discuss.elastic.co/t/can-you-get-different-results-from-replica-and-primary-if-queried-at-the-same-time/324732 "2023-02-05T16:20:14Z")

</div>

in our system we get different responses and I speculate it caused by "Adaptive Replica Selection". the two queries are different but they should fetch the same document . The first query check if the document have bee…

---

## [Query nested array having n matching elements](https://discuss.elastic.co/t/query-nested-array-having-n-matching-elements/324744)

<div class="topic-metadata">

**Author:** [@Frankk](https://discuss.elastic.co/u/Frankk)\
**Replies:** 0\
**Last updated:** [February 5, 2023, 4:00pm UTC](https://discuss.elastic.co/t/query-nested-array-having-n-matching-elements/324744 "2023-02-05T16:00:24Z")

</div>

Is this possible? I am indexing web site user activity focusing on user comments across multiple web sites and databases. I am "fairly" new to ES and am addressing quite a large problem. So basic question... Along wi…

---

## [Blocked by: \[TOO\_MANY\_REQUESTS/12/disk usage exceeded flood-stage watermark, index has read-only-allow-delete block\]](https://discuss.elastic.co/t/blocked-by-too-many-requests-12-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/324725)

<div class="topic-metadata">

**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\
**Replies:** 2\
**Last updated:** [February 5, 2023, 5:31am UTC](https://discuss.elastic.co/t/blocked-by-too-many-requests-12-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/324725 "2023-02-05T05:31:13Z")

</div>

Hi, I reached disk usage of 90%. I increased the disk space and now have 80% usage: /dev/root 562G 445G 118G 80% / I've tried to run the commands to remove the read only blocker: PUT \_cluster/settings { "…

---

## [Possible Bug: Unable to fetch term vectors after applying filter on ingested document](https://discuss.elastic.co/t/possible-bug-unable-to-fetch-term-vectors-after-applying-filter-on-ingested-document/324662)

<div class="topic-metadata">

**Author:** [@Ancel](https://discuss.elastic.co/u/Ancel)\
**Replies:** 1\
**Last updated:** [February 4, 2023, 5:19pm UTC](https://discuss.elastic.co/t/possible-bug-unable-to-fetch-term-vectors-after-applying-filter-on-ingested-document/324662 "2023-02-04T17:19:36Z")

</div>

Hi all. Situation: I am using Elasticsearch 8.4.1. I am ingesting a document, then via applying the apostrophe token filter, I want to remove every character from the apostrophe to the end of the term, apply a couple of…

---

## [ILM: empty indices didn't age-out](https://discuss.elastic.co/t/ilm-empty-indices-didnt-age-out/322980)

<div class="topic-metadata">

**Author:** [@Adam\_Lin](https://discuss.elastic.co/u/Adam_Lin)\
**Replies:** 7\
**Last updated:** [February 4, 2023, 2:40pm UTC](https://discuss.elastic.co/t/ilm-empty-indices-didnt-age-out/322980 "2023-02-04T14:40:29Z")

</div>

Hi, I create an ILM policy and apply it to my index template, everything works fine at first until after a day, there will be an empty index left Here is my ILM policy { "test-policy" : { "version" : 4, "mod…

---

## [Can eland (python) filter on datetime64 fields?](https://discuss.elastic.co/t/can-eland-python-filter-on-datetime64-fields/324698)

<div class="topic-metadata">

**Author:** [@mike\_haberman](https://discuss.elastic.co/u/mike_haberman)\
**Replies:** 0\
**Last updated:** [February 4, 2023, 2:07am UTC](https://discuss.elastic.co/t/can-eland-python-filter-on-datetime64-fields/324698 "2023-02-04T02:07:32Z")

</div>

I get a NotImplementedError error for when I try to mask a field that's a datetime field: s\_t = pd.to\_datetime("2023-02-03T23:28:00", utc=True) # UTC t\_m = (df\['start'\] \>= s\_t) File /opt/conda/lib/python3.9/site-packag…

---

## [Create generic BoolQueryDescriptor with a generic type](https://discuss.elastic.co/t/create-generic-boolquerydescriptor-with-a-generic-type/324696)

<div class="topic-metadata">

**Author:** [@chachew](https://discuss.elastic.co/u/chachew)\
**Replies:** 0\
**Last updated:** [February 4, 2023, 12:43am UTC](https://discuss.elastic.co/t/create-generic-boolquerydescriptor-with-a-generic-type/324696 "2023-02-04T00:43:31Z")

</div>

Forgive me im new to Elasticsearch, NEST and dont really code in C# much. Im looking to create a helper class that i can store all my NEST descriptor helper functions in but im getting some errors in the code format. Its…

---

## [One index by dataset?](https://discuss.elastic.co/t/one-index-by-dataset/324684)

<div class="topic-metadata">

**Author:** [@m4rk](https://discuss.elastic.co/u/m4rk)\
**Replies:** 4\
**Last updated:** [February 3, 2023, 7:31pm UTC](https://discuss.elastic.co/t/one-index-by-dataset/324684 "2023-02-03T19:31:22Z")

</div>

I need to store multiple datasets in Elasticsearch, each containing a high number of documents (something between 100,000 and 1,000,000). They have essentially the same structure. Since I use /analyze only one dataset at…

---

## [How make a master node in a 3 node cluster?](https://discuss.elastic.co/t/how-make-a-master-node-in-a-3-node-cluster/324656)

<div class="topic-metadata">

**Author:** [@H\_K7](https://discuss.elastic.co/u/H_K7)\
**Replies:** 5\
**Last updated:** [February 3, 2023, 7:26pm UTC](https://discuss.elastic.co/t/how-make-a-master-node-in-a-3-node-cluster/324656 "2023-02-03T19:26:52Z")

</div>

Current 3 node cluster setup I have setup 3 node cluster { "cluster\_name" : "DEMOCLUSTER", "status" : "green", "timed\_out" : false, "number\_of\_nodes" : 3, "number\_of\_data\_nodes" : 3, "active\_primary\_shards"…

---

## [Python Search on Data Stream](https://discuss.elastic.co/t/python-search-on-data-stream/324680)

<div class="topic-metadata">

**Author:** [@yeppazu](https://discuss.elastic.co/u/yeppazu)\
**Replies:** 0\
**Last updated:** [February 3, 2023, 5:33pm UTC](https://discuss.elastic.co/t/python-search-on-data-stream/324680 "2023-02-03T17:33:49Z")

</div>

Hello, we migrate from an Elasticsearch 7.17 with indeces to Elasticsearch 8.6.0 with data stream. In the past we had develop a python script to search inside indices with pattern "myname-\*". Because now beats use dat…

---

## [Elastic Version Moves very fast](https://discuss.elastic.co/t/elastic-version-moves-very-fast/323338)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 12\
**Last updated:** [February 3, 2023, 4:22pm UTC](https://discuss.elastic.co/t/elastic-version-moves-very-fast/323338 "2023-02-03T16:22:19Z")

</div>

What is the reason Elastic introduce and release different version at fast pace? it is very hard to keep up with it. And if you fall too much behind version then upgrade process gets harder and harder. for example I w…

---

## [Using Dell ECS s3 for snapshots](https://discuss.elastic.co/t/using-dell-ecs-s3-for-snapshots/324658)

<div class="topic-metadata">

**Author:** [@trwillis](https://discuss.elastic.co/u/trwillis)\
**Replies:** 5\
**Last updated:** [February 3, 2023, 4:16pm UTC](https://discuss.elastic.co/t/using-dell-ecs-s3-for-snapshots/324658 "2023-02-03T16:16:18Z")

</div>

I am trying to configure a snapshot repository to use an on-premise s3 compatible solution - Dell ECS. When I issue the command to add the repository with our internal endpoint, ES still is attempting to connect to AWS …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=304)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=306)
