# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=312 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 313 --- ## [C# client 8.4 filter by date range](https://discuss.elastic.co/t/c-client-8-4-filter-by-date-range/323411)
**Author:** [@matres](https://discuss.elastic.co/u/matres)\ **Replies:** 3\ **Last updated:** [January 23, 2023, 9:12am UTC](https://discuss.elastic.co/t/c-client-8-4-filter-by-date-range/323411 "2023-01-23T09:12:31Z")
Hi. How can I filter results by date range using .net client v8.4? I can't find that option --- ## [Run multi-vectors kNN search](https://discuss.elastic.co/t/run-multi-vectors-knn-search/299958)
**Author:** [@rporcu](https://discuss.elastic.co/u/rporcu)\ **Replies:** 2\ **Last updated:** [January 23, 2023, 7:48am UTC](https://discuss.elastic.co/t/run-multi-vectors-knn-search/299958 "2023-01-23T07:48:05Z")
Hello everyone! I’m really interested by the new kNN search functionality of Elasticsearch v8. Is there any way to run an approximate kNN search on multiple dense\_vectors? I checked the docs but, as of version 8.1.0, … --- ## [How to take a snapshot using SSE-C](https://discuss.elastic.co/t/how-to-take-a-snapshot-using-sse-c/323704)
**Author:** [@iamraashokkumar](https://discuss.elastic.co/u/iamraashokkumar)\ **Replies:** 0\ **Last updated:** [January 23, 2023, 6:32am UTC](https://discuss.elastic.co/t/how-to-take-a-snapshot-using-sse-c/323704 "2023-01-23T06:32:21Z")
Hi All, I’m able to encrypt the snapshot using SSE-S3(SSE managed by AWS) by adding the configuration “server-side-encryption: true” in the snapshot repository. However, I’m trying to encrypt the snapshot using SSE-C(Se… --- ## [How to execute exists query for a enabled false property fields](https://discuss.elastic.co/t/how-to-execute-exists-query-for-a-enabled-false-property-fields/323652)
**Author:** [@sriteja\_chebrolu](https://discuss.elastic.co/u/sriteja_chebrolu)\ **Replies:** 5\ **Last updated:** [January 23, 2023, 6:44am UTC](https://discuss.elastic.co/t/how-to-execute-exists-query-for-a-enabled-false-property-fields/323652 "2023-01-23T06:44:27Z")
How to execute exists query for a enabled false property fields --- ## [Having Issue with Data indexing](https://discuss.elastic.co/t/having-issue-with-data-indexing/323581)
**Author:** [@Danish\_Ibrar](https://discuss.elastic.co/u/Danish_Ibrar)\ **Replies:** 3\ **Last updated:** [January 23, 2023, 6:13am UTC](https://discuss.elastic.co/t/having-issue-with-data-indexing/323581 "2023-01-23T06:13:32Z")
I'm Having an issue I've just deployed the Custom decoders and rules they being triggered but data is not indexed to elastic default alerts are indexed but not for custom rules --- ## [ILM deleted indices before reaching min\_age](https://discuss.elastic.co/t/ilm-deleted-indices-before-reaching-min-age/323696)
**Author:** [@RapTvin](https://discuss.elastic.co/u/RapTvin)\ **Replies:** 0\ **Last updated:** [January 23, 2023, 4:36am UTC](https://discuss.elastic.co/t/ilm-deleted-indices-before-reaching-min-age/323696 "2023-01-23T04:36:12Z")
Problem We have set the following index management policy for indices, which moves the index to delete phase after 32 days & then once the snapshot is completed the index will be deleted. { "policy": { "phases": {… --- ## [Execute policy synchronously without a \`sleep\` in my bash scripts](https://discuss.elastic.co/t/execute-policy-synchronously-without-a-sleep-in-my-bash-scripts/323695)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 0\ **Last updated:** [January 23, 2023, 2:44am UTC](https://discuss.elastic.co/t/execute-policy-synchronously-without-a-sleep-in-my-bash-scripts/323695 "2023-01-23T02:44:41Z")
I've been following this guide to learn how to use enrich processor and ingestion pipelines: I've got most things working so I tried a more realistic workflow that goes something like this: #!/bin/bash /usr/share/l… --- ## [Nodejs (typescript) communication error with elastic](https://discuss.elastic.co/t/nodejs-typescript-communication-error-with-elastic/323687)
**Author:** [@David\_Robles](https://discuss.elastic.co/u/David_Robles)\ **Replies:** 0\ **Last updated:** [January 22, 2023, 5:00pm UTC](https://discuss.elastic.co/t/nodejs-typescript-communication-error-with-elastic/323687 "2023-01-22T17:00:13Z")
I have a problem connecting nodejs with elasticsearch, at this moment I have dockerized the version of Elasticsearch 8.6.0 as the documentation comes, the communication between kibana and elastic is correct since I have … --- ## [Shard Allocation](https://discuss.elastic.co/t/shard-allocation/323683)
**Author:** [@kajal\_sri](https://discuss.elastic.co/u/kajal_sri)\ **Replies:** 2\ **Last updated:** [January 22, 2023, 7:18pm UTC](https://discuss.elastic.co/t/shard-allocation/323683 "2023-01-22T19:18:11Z")
Getting Shard allocation issues. Able to see some partial indices as well and those are reported under UNASSIGNED shards. Any specific reason why am getting this issue and how to fix this? --- ## [As a result of my queries, only one result should be returned, but irrelevant results are coming](https://discuss.elastic.co/t/as-a-result-of-my-queries-only-one-result-should-be-returned-but-irrelevant-results-are-coming/323669)
**Author:** [@yasmin1991](https://discuss.elastic.co/u/yasmin1991)\ **Replies:** 8\ **Last updated:** [January 22, 2023, 6:54pm UTC](https://discuss.elastic.co/t/as-a-result-of-my-queries-only-one-result-should-be-returned-but-irrelevant-results-are-coming/323669 "2023-01-22T18:54:08Z")
Hello I have a question that I expect to return only one result. GET /cvlist/\_search { "query": { "match": { "cvID": "17411189" } } } As a result of the query, another result with a similar cvID is r… --- ## [403 on Discover Tab](https://discuss.elastic.co/t/403-on-discover-tab/323690)
**Author:** [@Akash\_Sethiya](https://discuss.elastic.co/u/Akash_Sethiya)\ **Replies:** 0\ **Last updated:** [January 22, 2023, 6:31pm UTC](https://discuss.elastic.co/t/403-on-discover-tab/323690 "2023-01-22T18:31:45Z")
Kibana version - 8.5.3 on k8s Elasticsearch version - 8.5.3 on VM On opening discover tab I keep getting Error: Batch request failed with status 403 at search\_interceptor\_SearchInterceptor.handleSearchError Look… --- ## [Use persian calendar in date\_histogram](https://discuss.elastic.co/t/use-persian-calendar-in-date-histogram/323678)
**Author:** [@masoud\_darvishi](https://discuss.elastic.co/u/masoud_darvishi)\ **Replies:** 0\ **Last updated:** [January 22, 2023, 2:08pm UTC](https://discuss.elastic.co/t/use-persian-calendar-in-date-histogram/323678 "2023-01-22T14:08:49Z")
hi i'm using date histogram with monthly interval aggregation "date\_histogram": { "field": "events.create", "calendar\_interval": "month", "format": "yyyy-MM-dd" } and this is the result { "key\_as\_… --- ## [Designing elasticsearch cluster for a SOC](https://discuss.elastic.co/t/designing-elasticsearch-cluster-for-a-soc/323647)
**Author:** [@TomSLV](https://discuss.elastic.co/u/TomSLV)\ **Replies:** 4\ **Last updated:** [January 22, 2023, 1:09pm UTC](https://discuss.elastic.co/t/designing-elasticsearch-cluster-for-a-soc/323647 "2023-01-22T13:09:13Z")
Hi everyone, I'm Tom, i'm a soc analyst since 4 years and i'm actually working for a company who want to put a SIEM. I've read many blog post on how to designing/sizing an elasticsearch cluster but i want to have your f… --- ## [Does NFS Server (remote source) exported in ELK?](https://discuss.elastic.co/t/does-nfs-server-remote-source-exported-in-elk/323667)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 0\ **Last updated:** [January 22, 2023, 8:43am UTC](https://discuss.elastic.co/t/does-nfs-server-remote-source-exported-in-elk/323667 "2023-01-22T08:43:52Z")
I have a remote source (NFS server) and I want to use the file systems to visualize the row data in elastic and use the search engine (kibana). is there supporting in elastic with NFS? --- ## [Add\_kubernetes\_metadata processor does not seem to work. Filebeat Data indexed to Elastic does not have any fields relevant to kubernetes](https://discuss.elastic.co/t/add-kubernetes-metadata-processor-does-not-seem-to-work-filebeat-data-indexed-to-elastic-does-not-have-any-fields-relevant-to-kubernetes/323596)
**Author:** [@sunil\_s](https://discuss.elastic.co/u/sunil_s)\ **Replies:** 2\ **Last updated:** [January 21, 2023, 9:10pm UTC](https://discuss.elastic.co/t/add-kubernetes-metadata-processor-does-not-seem-to-work-filebeat-data-indexed-to-elastic-does-not-have-any-fields-relevant-to-kubernetes/323596 "2023-01-21T21:10:29Z")
PFB filebeat.yaml filebeat.inputs: - type: container paths: - '/var/log/containers/\*.log' processors: - add\_kubernetes\_metadata: host: ${NODE\_NAME} matchers: - logs\_path: … --- ## [Unassigned missng shards after node failure](https://discuss.elastic.co/t/unassigned-missng-shards-after-node-failure/323649)
**Author:** [@EthanJ1999](https://discuss.elastic.co/u/EthanJ1999)\ **Replies:** 0\ **Last updated:** [January 21, 2023, 1:59pm UTC](https://discuss.elastic.co/t/unassigned-missng-shards-after-node-failure/323649 "2023-01-21T13:59:43Z")
Hi how's going every body. the proble is one of the shards of an specific index on a cluster is unassigned. the problem occures when a cluster node left, after rejoining to the cluster the shard reamain unassigned so we … --- ## [Segment size/ merge policy for large indices](https://discuss.elastic.co/t/segment-size-merge-policy-for-large-indices/323623)
**Author:** [@GregoryJC](https://discuss.elastic.co/u/GregoryJC)\ **Replies:** 7\ **Last updated:** [January 21, 2023, 6:44am UTC](https://discuss.elastic.co/t/segment-size-merge-policy-for-large-indices/323623 "2023-01-21T06:44:19Z")
I am new to Elastic, I started learning about it in depth a month ago as I moved into a position to take over the more or less unmanaged cloud install we had. We have quite a few indices with segment counts ranging from… --- ## [Elasticsearch search response time / latency metrics](https://discuss.elastic.co/t/elasticsearch-search-response-time-latency-metrics/323613)
**Author:** [@jaykb77](https://discuss.elastic.co/u/jaykb77)\ **Replies:** 1\ **Last updated:** [January 20, 2023, 9:55pm UTC](https://discuss.elastic.co/t/elasticsearch-search-response-time-latency-metrics/323613 "2023-01-20T21:55:33Z")
We are trying to use elasticsearch-exporter (GitHub - prometheus-community/elasticsearch\_exporter: Elasticsearch stats exporter for Prometheus) for monitoring our clusters(v7.17) and we want to monitor the cluster perfor… --- ## [151209 (4) - OpenJDK 7 \<= 7u281 / 8 \<= 8u272 / 11.0.0 \<= 11.0.9 / 13.0.0 \<= 13.0.5 / 15.0.0 \<= 15.0.1 Vulnerability (2021-01-19)](https://discuss.elastic.co/t/151209-4-openjdk-7-7u281-8-8u272-11-0-0-11-0-9-13-0-0-13-0-5-15-0-0-15-0-1-vulnerability-2021-01-19/323620)
**Author:** [@khadija70](https://discuss.elastic.co/u/khadija70)\ **Replies:** 7\ **Last updated:** [January 20, 2023, 10:04pm UTC](https://discuss.elastic.co/t/151209-4-openjdk-7-7u281-8-8u272-11-0-0-11-0-9-13-0-0-13-0-5-15-0-0-15-0-1-vulnerability-2021-01-19/323620 "2023-01-20T22:04:22Z")
Hi , We have receive vulnerabilities affecting elasticksearch servers : 151209 (4) - OpenJDK 7 \<= 7u281 / 8 \<= 8u272 / 11.0.0 \<= 11.0.9 / 13.0.0 \<= 13.0.5 / 15.0.0 \<= 15.0.1 Vulnerability (2021-01-19) The solution pr… --- ## [Java.io.tmpdir](https://discuss.elastic.co/t/java-io-tmpdir/323534)
**Author:** [@chuck1](https://discuss.elastic.co/u/chuck1)\ **Replies:** 10\ **Last updated:** [January 20, 2023, 9:35pm UTC](https://discuss.elastic.co/t/java-io-tmpdir/323534 "2023-01-20T21:35:27Z")
Hello, My elasticsearch version is 8.5.3-1 I have a hardened RHEL 8 system which requires that /tmp be mounted with the "noexec" option. I have tried to adjust my jvm.options file in /etc/elasticsearch/jvm.options to s… --- ## [Apache Log4j 2.0 \< 2.3.2 / 2.4 \< 2.12.4 / 2.13 \< 2.17.1 RCE](https://discuss.elastic.co/t/apache-log4j-2-0-2-3-2-2-4-2-12-4-2-13-2-17-1-rce/323614)
**Author:** [@khadija70](https://discuss.elastic.co/u/khadija70)\ **Replies:** 6\ **Last updated:** [January 20, 2023, 6:51pm UTC](https://discuss.elastic.co/t/apache-log4j-2-0-2-3-2-2-4-2-12-4-2-13-2-17-1-rce/323614 "2023-01-20T18:51:19Z")
Hi , We have recently receive security vulnerabilities related to Log4j , as solution proposed is to Upgrade to Apache Log4j version 2.17.1, 2.12.4, or 2.3.2 or later. Could you please confirm if there is a patch to … --- ## [How to sum fieds of collapsed results?](https://discuss.elastic.co/t/how-to-sum-fieds-of-collapsed-results/323617)
**Author:** [@denise.castagna](https://discuss.elastic.co/u/denise.castagna)\ **Replies:** 0\ **Last updated:** [January 20, 2023, 5:04pm UTC](https://discuss.elastic.co/t/how-to-sum-fieds-of-collapsed-results/323617 "2023-01-20T17:04:54Z")
Hi, I need to do a sum aggregation on a collapsed result. I know that collapse does not effect on aggregation but there are other ways? For example: Field1 = A, Field2 = 50, Order = 1 Field1 = A, Field2 = 30, Order =… --- ## [Calculations inside ES Query](https://discuss.elastic.co/t/calculations-inside-es-query/323610)
**Author:** [@bpax51](https://discuss.elastic.co/u/bpax51)\ **Replies:** 1\ **Last updated:** [January 20, 2023, 4:43pm UTC](https://discuss.elastic.co/t/calculations-inside-es-query/323610 "2023-01-20T16:43:07Z")
So I have to following query that gives me to count of successful and failed http queries using aggregations. { "size": 0, "query": { "bool": { "filter": \[ { … --- ## [Elastic cluster is getting overloaded by incorrect shard allocation](https://discuss.elastic.co/t/elastic-cluster-is-getting-overloaded-by-incorrect-shard-allocation/323595)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 2\ **Last updated:** [January 20, 2023, 2:12pm UTC](https://discuss.elastic.co/t/elastic-cluster-is-getting-overloaded-by-incorrect-shard-allocation/323595 "2023-01-20T14:12:55Z")
Hi Community, May I ask for help: We have elastic v7.17.0 with 43 nodes. Sizing 2TB SSD, 8cores, 32GB RAM, 16GB Heap. Currently about 2400 indices and 6400shards. some nodes have less shards but have disk full which … --- ## [Using LDAP to set up Users and Roles in elasticsearch.yml file](https://discuss.elastic.co/t/using-ldap-to-set-up-users-and-roles-in-elasticsearch-yml-file/323440)
**Author:** [@sswilley88](https://discuss.elastic.co/u/sswilley88)\ **Replies:** 15\ **Last updated:** [January 20, 2023, 2:06pm UTC](https://discuss.elastic.co/t/using-ldap-to-set-up-users-and-roles-in-elasticsearch-yml-file/323440 "2023-01-20T14:06:44Z")
I am trying to set up user/role details in the elasticsearch.yaml file with LDAP settings, and need some support. I have followed elastic documentation, but it’s not working. I have added below details (with our own deta… --- ## [I am getting below error while setting elastic search](https://discuss.elastic.co/t/i-am-getting-below-error-while-setting-elastic-search/323019)
**Author:** [@devdev7711](https://discuss.elastic.co/u/devdev7711)\ **Replies:** 9\ **Last updated:** [January 20, 2023, 1:50pm UTC](https://discuss.elastic.co/t/i-am-getting-below-error-while-setting-elastic-search/323019 "2023-01-20T13:50:20Z")
I am installing 8.5.3 elastic. after yml file change I am double clicking elasticsearch.bat file and service is not starting looks like. \[2023-01-12T14:38:25,268\]\[INFO \]\[o.e.n.Node \] \[node-1\] node name \[… --- ## [Privileged containers should be avoided](https://discuss.elastic.co/t/privileged-containers-should-be-avoided/323382)
**Author:** [@ddhote](https://discuss.elastic.co/u/ddhote)\ **Replies:** 2\ **Last updated:** [January 20, 2023, 11:52am UTC](https://discuss.elastic.co/t/privileged-containers-should-be-avoided/323382 "2023-01-20T11:52:44Z")
Hello Team, We have Elasticsearch containers in AKS where initial container has "Privileged= True" which is against our security policy. But, init container is failing with "Privileged=False", can someone please help ho… --- ## [Indexing Kibana visualization](https://discuss.elastic.co/t/indexing-kibana-visualization/323568)
**Author:** [@Chirag\_Gupta](https://discuss.elastic.co/u/Chirag_Gupta)\ **Replies:** 5\ **Last updated:** [January 20, 2023, 9:57am UTC](https://discuss.elastic.co/t/indexing-kibana-visualization/323568 "2023-01-20T09:57:21Z")
Is there any method through which we can directly create a bar-graph with supplied data in spring code in kibana. Without using any kibana interface. --- ## [Reading APM and Uptime data in C#](https://discuss.elastic.co/t/reading-apm-and-uptime-data-in-c/323575)
**Author:** [@basavaraja\_c\_n](https://discuss.elastic.co/u/basavaraja_c_n)\ **Replies:** 0\ **Last updated:** [January 20, 2023, 9:20am UTC](https://discuss.elastic.co/t/reading-apm-and-uptime-data-in-c/323575 "2023-01-20T09:20:15Z")
I want to read the uptime and APM services data in a C# Application, Not seeing any api's exposed or i am not getting how to read? Any clue?? --- ## [Elastic index template and ilm policy configuracion reset by no reason](https://discuss.elastic.co/t/elastic-index-template-and-ilm-policy-configuracion-reset-by-no-reason/323566)
**Author:** [@Samuel\_Ruiz](https://discuss.elastic.co/u/Samuel_Ruiz)\ **Replies:** 0\ **Last updated:** [January 20, 2023, 7:38am UTC](https://discuss.elastic.co/t/elastic-index-template-and-ilm-policy-configuracion-reset-by-no-reason/323566 "2023-01-20T07:38:41Z")
Hey. We have a docker cluster deploy of various nodes of elasticsearch (7.17.6) and a kibana node (7.17.6). In addition we have two Wazuh nodes, master-worker. This ELK-Wazuh implementation don't let us update the cluste… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=311) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=313)