# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=315 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 316 --- ## [Can we control file/location where index data is stored in Elasticsearch?](https://discuss.elastic.co/t/can-we-control-file-location-where-index-data-is-stored-in-elasticsearch/322587)
**Author:** [@sundar.s](https://discuss.elastic.co/u/sundar.s)\ **Replies:** 4\ **Last updated:** [January 17, 2023, 11:04am UTC](https://discuss.elastic.co/t/can-we-control-file-location-where-index-data-is-stored-in-elasticsearch/322587 "2023-01-17T11:04:49Z")
Hi, Can we control the file or location where the index data of particular index is stored in Elasticsearch? That is, let say, I have multiple indices in my Elasticsearch indices and one of which is called index1 Can … --- ## [Count the number of documents that contain two values in one field](https://discuss.elastic.co/t/count-the-number-of-documents-that-contain-two-values-in-one-field/323140)
**Author:** [@steve10](https://discuss.elastic.co/u/steve10)\ **Replies:** 0\ **Last updated:** [January 13, 2023, 2:10pm UTC](https://discuss.elastic.co/t/count-the-number-of-documents-that-contain-two-values-in-one-field/323140 "2023-01-13T14:10:15Z")
Hi, I have a number of documents like this in Elastic Search database: Document 1: { “Id”: 6000, “customerName”: GT, “customerValue”: 10 } Document 2: { “Id”: 6001, “customerName”: MX, “customerValue”: 10 } Documen… --- ## [Same query convert string to int gives different result for nested fields](https://discuss.elastic.co/t/same-query-convert-string-to-int-gives-different-result-for-nested-fields/322598)
**Author:** [@Kanwardeep\_Singh](https://discuss.elastic.co/u/Kanwardeep_Singh)\ **Replies:** 0\ **Last updated:** [January 6, 2023, 7:13am UTC](https://discuss.elastic.co/t/same-query-convert-string-to-int-gives-different-result-for-nested-fields/322598 "2023-01-06T07:13:54Z")
I created new index and copy mapping from old index but After elasticdump running same query convert string to int gives different result for nested fields. --- ## [How to restrict search to selected fields when using q param](https://discuss.elastic.co/t/how-to-restrict-search-to-selected-fields-when-using-q-param/323263)
**Author:** [@nn14](https://discuss.elastic.co/u/nn14)\ **Replies:** 3\ **Last updated:** [January 17, 2023, 9:58am UTC](https://discuss.elastic.co/t/how-to-restrict-search-to-selected-fields-when-using-q-param/323263 "2023-01-17T09:58:26Z")
Hi team, Our users generally use q param to search people. E.g. q="Matthew North" or just q="North". This results in our ES searching across all our 100+ fields defined in the schema and chances are it returns even thos… --- ## [How to optimize elasticsearch query dsl to improve the query performance？](https://discuss.elastic.co/t/how-to-optimize-elasticsearch-query-dsl-to-improve-the-query-performance/323213)
**Author:** [@yeoman](https://discuss.elastic.co/u/yeoman)\ **Replies:** 8\ **Last updated:** [January 17, 2023, 9:53am UTC](https://discuss.elastic.co/t/how-to-optimize-elasticsearch-query-dsl-to-improve-the-query-performance/323213 "2023-01-17T09:53:16Z")
Dear elasticsearch technology experts,I have a elasticsearch index which size is almost 18Gb,and the amount of documents is about 400000.There are 3 nodes in the elasticserch cluster,and each nodes server is 2Cpu 4Gb mem… --- ## [Occasionally missing data when making both gt + lte queries with a single isoformatted date](https://discuss.elastic.co/t/occasionally-missing-data-when-making-both-gt-lte-queries-with-a-single-isoformatted-date/323284)
**Author:** [@jsun-m](https://discuss.elastic.co/u/jsun-m)\ **Replies:** 9\ **Last updated:** [January 17, 2023, 8:45am UTC](https://discuss.elastic.co/t/occasionally-missing-data-when-making-both-gt-lte-queries-with-a-single-isoformatted-date/323284 "2023-01-17T08:45:34Z")
Use case: I'm trying to build a realtime logging client that allows the user to search old logs as well as see new logs come in realtime. So far everything mostly functions as expected except when the first queries are … --- ## [How to use elasticsearch 8.x ingest-attachment with Python](https://discuss.elastic.co/t/how-to-use-elasticsearch-8-x-ingest-attachment-with-python/323286)
**Author:** [@garami](https://discuss.elastic.co/u/garami)\ **Replies:** 2\ **Last updated:** [January 17, 2023, 7:45am UTC](https://discuss.elastic.co/t/how-to-use-elasticsearch-8-x-ingest-attachment-with-python/323286 "2023-01-17T07:45:34Z")
I am trying to read a pdf from python and send it to elasticsearch. I tried to use ingest-attachment to help with that, but I don't know how. When I followed the official documentation, it worked. However, there doesn… --- ## [TSDS - manual rollover](https://discuss.elastic.co/t/tsds-manual-rollover/323227)
**Author:** [@Sako](https://discuss.elastic.co/u/Sako)\ **Replies:** 0\ **Last updated:** [January 16, 2023, 8:17am UTC](https://discuss.elastic.co/t/tsds-manual-rollover/323227 "2023-01-16T08:17:18Z")
Hi, I try to use Timeseries Data Streams (TSDS) for telemetry data from network devices to use the new downsampling features later on. I also use ILM to automate the rollover and lifecycle for the TSDS. Under certain c… --- ## [Can I create a index in the WARM Phase directly with Elastic ILM](https://discuss.elastic.co/t/can-i-create-a-index-in-the-warm-phase-directly-with-elastic-ilm/323224)
**Author:** [@siddhartha\_c](https://discuss.elastic.co/u/siddhartha_c)\ **Replies:** 2\ **Last updated:** [January 17, 2023, 5:00am UTC](https://discuss.elastic.co/t/can-i-create-a-index-in-the-warm-phase-directly-with-elastic-ilm/323224 "2023-01-17T05:00:20Z")
I am indexing my data using ILM Policy and Indexing Template. So, the index moves from one Phase to another(Hot, Warm , Cold and Delete) after the completion of assigned time period for that Phase. Now, I got a requirem… --- ## [E-Commerce Search Engine - Per User Data](https://discuss.elastic.co/t/e-commerce-search-engine-per-user-data/323265)
**Author:** [@panko](https://discuss.elastic.co/u/panko)\ **Replies:** 3\ **Last updated:** [January 17, 2023, 4:15am UTC](https://discuss.elastic.co/t/e-commerce-search-engine-per-user-data/323265 "2023-01-17T04:15:30Z")
Hello, We do something like a typical e-commerce platform with custom product search based on Elasticsearch (a service which simply send queries to Elasticsearch). Our product search service worked flawlessly, but recen… --- ## [How use disk-aware allocator setting?](https://discuss.elastic.co/t/how-use-disk-aware-allocator-setting/323190)
**Author:** [@RichiCoder](https://discuss.elastic.co/u/RichiCoder)\ **Replies:** 4\ **Last updated:** [January 17, 2023, 12:26am UTC](https://discuss.elastic.co/t/how-use-disk-aware-allocator-setting/323190 "2023-01-17T00:26:06Z")
Howdy! I'd love to use the recently added support for disk usage in the desired balance allocator as I just upgraded to 8.6 in Elastic Cloud. However, it looks like by default cluster.routing.allocation.balance.disk\_usa… --- ## [Err Empty Response From Kibana](https://discuss.elastic.co/t/err-empty-response-from-kibana/322677)
**Author:** [@Surendra\_Gupta](https://discuss.elastic.co/u/Surendra_Gupta)\ **Replies:** 3\ **Last updated:** [January 16, 2023, 11:28pm UTC](https://discuss.elastic.co/t/err-empty-response-from-kibana/322677 "2023-01-16T23:28:42Z")
Hi @xeraa I am getting Err Empty Response from Kibana after multiple refresh i am getting elk screen and after that while fetching apm i am getting this issue can you please hlep me to solve this we have 16 gb ram … --- ## [Garbage Collection of my java/spring application keeps spiking](https://discuss.elastic.co/t/garbage-collection-of-my-java-spring-application-keeps-spiking/323277)
**Author:** [@RuchikG](https://discuss.elastic.co/u/RuchikG)\ **Replies:** 2\ **Last updated:** [January 16, 2023, 10:40pm UTC](https://discuss.elastic.co/t/garbage-collection-of-my-java-spring-application-keeps-spiking/323277 "2023-01-16T22:40:56Z")
We have a java application built on java and spring which connects to Elastic Search cluster with version 7.6.1. We are using spring-data-elasticsearch dependency with version 4.0.0 RELEASE and elasticsearch dependecy wi… --- ## [Is it possible to delete security index and then create it automatically on restart of Elasticsearch](https://discuss.elastic.co/t/is-it-possible-to-delete-security-index-and-then-create-it-automatically-on-restart-of-elasticsearch/322434)
**Author:** [@smiley\_tamy](https://discuss.elastic.co/u/smiley_tamy)\ **Replies:** 9\ **Last updated:** [January 16, 2023, 7:57pm UTC](https://discuss.elastic.co/t/is-it-possible-to-delete-security-index-and-then-create-it-automatically-on-restart-of-elasticsearch/322434 "2023-01-16T19:57:34Z")
x pack is enabled and now I want to delete security index. Then will it be automatically created on restart of Elasticsearch and will all the built users be created? --- ## [Generate xpack SSL certificates with longer expiry date](https://discuss.elastic.co/t/generate-xpack-ssl-certificates-with-longer-expiry-date/323275)
**Author:** [@smiley\_tamy](https://discuss.elastic.co/u/smiley_tamy)\ **Replies:** 2\ **Last updated:** [January 16, 2023, 7:56pm UTC](https://discuss.elastic.co/t/generate-xpack-ssl-certificates-with-longer-expiry-date/323275 "2023-01-16T19:56:39Z")
When we generate SSL certificates with elasticsearch-certutil, we get them with the expiry of 3 years Is there a way that we can generate the certificates with longer expiry date such as 5 years or so. Is it possible t… --- ## [Cant seem to connect to Elastic Search or Kibana](https://discuss.elastic.co/t/cant-seem-to-connect-to-elastic-search-or-kibana/323200)
**Author:** [@jrp30506](https://discuss.elastic.co/u/jrp30506)\ **Replies:** 7\ **Last updated:** [January 16, 2023, 7:24pm UTC](https://discuss.elastic.co/t/cant-seem-to-connect-to-elastic-search-or-kibana/323200 "2023-01-16T19:24:05Z")
Afternoon everyone. I recently built an ELK stack on Ubuntu 22.04 by following instructions I found by searching for the installation procedure. I followed the article to the letter and after completion, when trying to c… --- ## [Increased Search Latency post enabling writes to index](https://discuss.elastic.co/t/increased-search-latency-post-enabling-writes-to-index/323258)
**Author:** [@zeus7](https://discuss.elastic.co/u/zeus7)\ **Replies:** 3\ **Last updated:** [January 16, 2023, 4:01pm UTC](https://discuss.elastic.co/t/increased-search-latency-post-enabling-writes-to-index/323258 "2023-01-16T16:01:32Z")
Hi, I m observing high search latency (8x-10x) post enabling writes on an index. I m having an index on production having continuous writes (avg write operations/sec = ~5k) and it is having search latency of 2-4sec. I… --- ## [Failed to start Elasticsearch on windows](https://discuss.elastic.co/t/failed-to-start-elasticsearch-on-windows/323211)
**Author:** [@FoamQuicksand](https://discuss.elastic.co/u/FoamQuicksand)\ **Replies:** 5\ **Last updated:** [January 16, 2023, 3:26pm UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-on-windows/323211 "2023-01-16T15:26:36Z")
I failed to start Elasticsearch8.5.1 and 8.6.0 locally, but 8.2.2 and 8.4.1 can start normally. anyone know what the problem？ report errors: warning: ignoring JAVA\_HOME=C:\\Program Files\\Java\\jdk-17.0.4.1; using bundle… --- ## [How to add new node to Elasticsearch cluster with Https](https://discuss.elastic.co/t/how-to-add-new-node-to-elasticsearch-cluster-with-https/322942)
**Author:** [@makkaroni8](https://discuss.elastic.co/u/makkaroni8)\ **Replies:** 7\ **Last updated:** [January 16, 2023, 2:00pm UTC](https://discuss.elastic.co/t/how-to-add-new-node-to-elasticsearch-cluster-with-https/322942 "2023-01-16T14:00:19Z")
Hi, I'm using a single-node Elasticsearch instance. I want to add another node to my cluster by Enrolling the new node. But I have the same Issue: ERROR: Failed to determine the health of the cluster with elasticsearc… --- ## [Query dsl span\_or vs bool should](https://discuss.elastic.co/t/query-dsl-span-or-vs-bool-should/323254)
**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\ **Replies:** 0\ **Last updated:** [January 16, 2023, 1:34pm UTC](https://discuss.elastic.co/t/query-dsl-span-or-vs-bool-should/323254 "2023-01-16T13:34:13Z")
Hi! I have two "span\_near" queries. What's the difference between bool-\>should and span\_or? Does it affect on "index.query.bool.max\_clause\_count" limit or query performance? { "span\_or": { "clauses": \[ … --- ## [Elasticearch and Power BI](https://discuss.elastic.co/t/elasticearch-and-power-bi/323250)
**Author:** [@palko.balazs](https://discuss.elastic.co/u/palko.balazs)\ **Replies:** 0\ **Last updated:** [January 16, 2023, 12:35pm UTC](https://discuss.elastic.co/t/elasticearch-and-power-bi/323250 "2023-01-16T12:35:02Z")
Hi, I'm trying to import our data stored in Elasticsearch into a BI Tool. I tried Power BI with ODBC using this guide and this guide for Tableau. I was able to get our data into both PowerBi and Tableau, however I'm st… --- ## [Using wildcard and must\_not to search](https://discuss.elastic.co/t/using-wildcard-and-must-not-to-search/323236)
**Author:** [@geeky\_human](https://discuss.elastic.co/u/geeky_human)\ **Replies:** 1\ **Last updated:** [January 16, 2023, 11:12am UTC](https://discuss.elastic.co/t/using-wildcard-and-must-not-to-search/323236 "2023-01-16T11:12:27Z")
Hi, I’m new to ELK. For searching, I’m using dev tools in kibana. I want to find all the results that do not match a wildcard term. "must\_not": \[ {"wildcard": { "agent.keyword": {"value":"python\*"} }}\] I… --- ## [Elasticsearch DSL Query - Field is not null or not empty](https://discuss.elastic.co/t/elasticsearch-dsl-query-field-is-not-null-or-not-empty/323005)
**Author:** [@Java2avaj](https://discuss.elastic.co/u/Java2avaj)\ **Replies:** 8\ **Last updated:** [January 16, 2023, 10:49am UTC](https://discuss.elastic.co/t/elasticsearch-dsl-query-field-is-not-null-or-not-empty/323005 "2023-01-16T10:49:18Z")
I have an existing DSL query that needs to modify such that the id "12345" should be not null or not empty: { "bool":{ "must":\[ { "bool":{ "should":\[ { … --- ## [Cache tunning for cardinality](https://discuss.elastic.co/t/cache-tunning-for-cardinality/323015)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 5\ **Last updated:** [January 16, 2023, 10:41am UTC](https://discuss.elastic.co/t/cache-tunning-for-cardinality/323015 "2023-01-16T10:41:25Z")
Hi I'm troubleshooting some wired case related to maybe cache ... so when I'm using simple query by curl for the first shoot I got something like below {"detail":"3,000 milliseconds timeout on connection http-outgoing-… --- ## [This node is locked](https://discuss.elastic.co/t/this-node-is-locked/323040)
**Author:** [@Randomize](https://discuss.elastic.co/u/Randomize)\ **Replies:** 11\ **Last updated:** [January 16, 2023, 10:25am UTC](https://discuss.elastic.co/t/this-node-is-locked/323040 "2023-01-16T10:25:02Z")
Hello I updated elasticsearch to version 8.4.1 Now im trying to start elasticsearch using discovery.type: single-node in config file. But its does not starting. I can see status activating in systemctl status. In elast… --- ## [Gsub processor in ingest pipeline cannot substitute a pattern into newline](https://discuss.elastic.co/t/gsub-processor-in-ingest-pipeline-cannot-substitute-a-pattern-into-newline/323151)
**Author:** [@andreatera](https://discuss.elastic.co/u/andreatera)\ **Replies:** 4\ **Last updated:** [January 16, 2023, 9:39am UTC](https://discuss.elastic.co/t/gsub-processor-in-ingest-pipeline-cannot-substitute-a-pattern-into-newline/323151 "2023-01-16T09:39:17Z")
Hello there, since we are moving from logstash pipeline into ingest pipeline we had to rewrite our gsub pattern from logstash into ingest processors. Our use case is simple, replace the unicode \\u2028 into a newline ch… --- ## [How to apply search on special characters when search is limited to specific fields?](https://discuss.elastic.co/t/how-to-apply-search-on-special-characters-when-search-is-limited-to-specific-fields/323220)
**Author:** [@Moazzam\_Saleem](https://discuss.elastic.co/u/Moazzam_Saleem)\ **Replies:** 0\ **Last updated:** [January 16, 2023, 6:58am UTC](https://discuss.elastic.co/t/how-to-apply-search-on-special-characters-when-search-is-limited-to-specific-fields/323220 "2023-01-16T06:58:49Z")
I'm new to elasticsearch, I'm trying to give global search but when I limited my search to apply of specific fields by giving fields param in query, search doesn't apply on special characters Here is my JSON query: { … --- ## [How to mask card number of xml message](https://discuss.elastic.co/t/how-to-mask-card-number-of-xml-message/322925)
**Author:** [@Anil0110](https://discuss.elastic.co/u/Anil0110)\ **Replies:** 5\ **Last updated:** [January 16, 2023, 7:19am UTC](https://discuss.elastic.co/t/how-to-mask-card-number-of-xml-message/322925 "2023-01-16T07:19:27Z")
Hello the requirement is we need to mask the cardnumber of xml message our input message looks like : message : output message expected --- ## [Cluter removed timeout Coordinating node](https://discuss.elastic.co/t/cluter-removed-timeout-coordinating-node/323208)
**Author:** [@chengdihua](https://discuss.elastic.co/u/chengdihua)\ **Replies:** 1\ **Last updated:** [January 16, 2023, 6:45am UTC](https://discuss.elastic.co/t/cluter-removed-timeout-coordinating-node/323208 "2023-01-16T06:45:25Z")
Hello, everyone! We have 15 nodes in our ES cluster, including 3 master nodes, 9 data nodes, and 3 coordinate/client nodes. There are 3 physical hosts in the cluster, and 5 ES nodes are deployed on each host. (1 master… --- ## [Path does not chain with any of the trust anchors](https://discuss.elastic.co/t/path-does-not-chain-with-any-of-the-trust-anchors/322688)
**Author:** [@chris3](https://discuss.elastic.co/u/chris3)\ **Replies:** 3\ **Last updated:** [January 15, 2023, 11:37pm UTC](https://discuss.elastic.co/t/path-does-not-chain-with-any-of-the-trust-anchors/322688 "2023-01-15T23:37:00Z")
Hi All, Appreciate if you could help. I have tried to follow the elastic documentation here to setup internode communication using certificates: https://www.elastic.co/guide/en/elasticsearch/reference/current/security-… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=314) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=316)