# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=325

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 326

---

## [Elasticsearch install error on MAC](https://discuss.elastic.co/t/elasticsearch-install-error-on-mac/321693)

<div class="topic-metadata">

**Author:** [@mail2shanth](https://discuss.elastic.co/u/mail2shanth)\
**Replies:** 6\
**Last updated:** [December 21, 2022, 2:31pm UTC](https://discuss.elastic.co/t/elasticsearch-install-error-on-mac/321693 "2022-12-21T14:31:23Z")

</div>

Hi, I am new to Elasticsearch, tried to install, when I try to hit the URL "http://localhost:9200/", it works fine. However when I need to reset a password it gives an error. ./elasticsearch-reset-password -u kibana\_sy…

---

## [Aggregation with additional document fields? (Like a SQL inner join to nested group by)](https://discuss.elastic.co/t/aggregation-with-additional-document-fields-like-a-sql-inner-join-to-nested-group-by/321767)

<div class="topic-metadata">

**Author:** [@rd8388](https://discuss.elastic.co/u/rd8388)\
**Replies:** 0\
**Last updated:** [December 21, 2022, 12:43pm UTC](https://discuss.elastic.co/t/aggregation-with-additional-document-fields-like-a-sql-inner-join-to-nested-group-by/321767 "2022-12-21T12:43:23Z")

</div>

Thanks in advance for any help with achieving our goal or on the terminology I may use to find an example in Elasticsearch documentation and/or forum. When performing a Max Terms aggregation to get the date of the newes…

---

## [Elastic Agent for Android devices](https://discuss.elastic.co/t/elastic-agent-for-android-devices/321766)

<div class="topic-metadata">

**Author:** [@Jesus\_Arellano](https://discuss.elastic.co/u/Jesus_Arellano)\
**Replies:** 0\
**Last updated:** [December 21, 2022, 12:41pm UTC](https://discuss.elastic.co/t/elastic-agent-for-android-devices/321766 "2022-12-21T12:41:15Z")

</div>

Hi, I was wondering if there is an Elastic agent for Android devices. The idea would be an agent similar to metricbeat that would allow to monitor CPU, RAM, processes, battery usage... Do you know any alternative? I f…

---

## [Stack Monitoring](https://discuss.elastic.co/t/stack-monitoring/321760)

<div class="topic-metadata">

**Author:** [@tejal\_kubde](https://discuss.elastic.co/u/tejal_kubde)\
**Replies:** 4\
**Last updated:** [December 21, 2022, 12:40pm UTC](https://discuss.elastic.co/t/stack-monitoring/321760 "2022-12-21T12:40:08Z")

</div>

Hi, I'm new to elasticsearch. I'm currently trying to enable stack monitoring on my dev setup. Hence, can someone tell me which is the best possible way to enable it.

---

## [Elasticsearch shard allocation, uneven distribution of shards among nodes](https://discuss.elastic.co/t/elasticsearch-shard-allocation-uneven-distribution-of-shards-among-nodes/321621)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 2\
**Last updated:** [December 21, 2022, 12:35pm UTC](https://discuss.elastic.co/t/elasticsearch-shard-allocation-uneven-distribution-of-shards-among-nodes/321621 "2022-12-21T12:35:53Z")

</div>

Hi, May I ask you for help with The problem with uneven allocation of shards on the elatsic cluster is repeated again. This condition is causes the full nodes consumes 90% CPUs and the whole cluster starts to refuse th…

---

## [Scrape metrics from elastic search 8](https://discuss.elastic.co/t/scrape-metrics-from-elastic-search-8/321758)

<div class="topic-metadata">

**Author:** [@smiley\_tamy](https://discuss.elastic.co/u/smiley_tamy)\
**Replies:** 0\
**Last updated:** [December 21, 2022, 12:17pm UTC](https://discuss.elastic.co/t/scrape-metrics-from-elastic-search-8/321758 "2022-12-21T12:17:42Z")

</div>

elasticsearch-prometheus-exporter is used to collect all relevant metrics and makes them available to Prometheus via the Elasticsearch REST API. http://:9200/\_prometheus/metrics This plugin supports till 7.17.7 version …

---

## [Cluster yellow after upgrade from 7.16.2 to 7.17.7](https://discuss.elastic.co/t/cluster-yellow-after-upgrade-from-7-16-2-to-7-17-7/321412)

<div class="topic-metadata">

**Author:** [@duckasylum](https://discuss.elastic.co/u/duckasylum)\
**Replies:** 2\
**Last updated:** [December 21, 2022, 10:04am UTC](https://discuss.elastic.co/t/cluster-yellow-after-upgrade-from-7-16-2-to-7-17-7/321412 "2022-12-21T10:04:24Z")

</div>

Hi, I started a rolling upgrade as per directions from the guide. I have 6 data nodes (n1 and n2 are also ingest nodes) and after successfully upgrading n4 I upgraded n6 and the cluster is unable to get from yellow to gr…

---

## [Average size of data indices](https://discuss.elastic.co/t/average-size-of-data-indices/321625)

<div class="topic-metadata">

**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\
**Replies:** 5\
**Last updated:** [December 21, 2022, 10:03am UTC](https://discuss.elastic.co/t/average-size-of-data-indices/321625 "2022-12-21T10:03:36Z")

</div>

I have more of questions regarding size of data. what is average of data can Elasticsearch store par second? if there is 1M document of data in log file and volume 1G after storing in elastic database what is the new …

---

## [How to index text files (pdf, doc, txt...) in Java?](https://discuss.elastic.co/t/how-to-index-text-files-pdf-doc-txt-in-java/321678)

<div class="topic-metadata">

**Author:** [@gagidza](https://discuss.elastic.co/u/gagidza)\
**Replies:** 5\
**Last updated:** [December 21, 2022, 9:48am UTC](https://discuss.elastic.co/t/how-to-index-text-files-pdf-doc-txt-in-java/321678 "2022-12-21T09:48:53Z")

</div>

Hello everyone, some time ago I started to deal with Elasticsearch. Now I am faced with the task of indexing various text files from a certain directory for subsequent search by their contents. Since Elasticsearch uses …

---

## [Elastic search transform not working on nested fields](https://discuss.elastic.co/t/elastic-search-transform-not-working-on-nested-fields/321649)

<div class="topic-metadata">

**Author:** [@pranay\_jain](https://discuss.elastic.co/u/pranay_jain)\
**Replies:** 2\
**Last updated:** [December 21, 2022, 9:45am UTC](https://discuss.elastic.co/t/elastic-search-transform-not-working-on-nested-fields/321649 "2022-12-21T09:45:31Z")

</div>

Hi, I have an index which looks like below "properties": { "employee\_id": { "type": "long" }, "employee\_details": { "type": "nested", "dynamic": "false", "properties": { "city": { "t…

---

## [Java BulkProcessor](https://discuss.elastic.co/t/java-bulkprocessor/321733)

<div class="topic-metadata">

**Author:** [@Atefeh](https://discuss.elastic.co/u/Atefeh)\
**Replies:** 1\
**Last updated:** [December 21, 2022, 9:43am UTC](https://discuss.elastic.co/t/java-bulkprocessor/321733 "2022-12-21T09:43:18Z")

</div>

Bulk Java API supported adding a payload to each request in ES version 6.8 : public BulkProcessor add(DocWriteRequest request, @Nullable Object payload) { internalAdd(request, payload); return this; …

---

## [How to connect es cluster](https://discuss.elastic.co/t/how-to-connect-es-cluster/321712)

<div class="topic-metadata">

**Author:** [@duocoding](https://discuss.elastic.co/u/duocoding)\
**Replies:** 1\
**Last updated:** [December 21, 2022, 8:39am UTC](https://discuss.elastic.co/t/how-to-connect-es-cluster/321712 "2022-12-21T08:39:27Z")

</div>

// Create the low-level client RestClient restClient = RestClient.builder( new HttpHost("localhost", 9200)).build(); // Create the transport with a Jackson mapper ElasticsearchTransport transport = new RestClientTra…

---

## [javax.security.auth.login.LoginException: Could not login: the client is being asked for a password, but the Kafka client code does not currently support obtaining a password from the user. not available to garner authentication information from the user](https://discuss.elastic.co/t/javax-security-auth-login-loginexception-could-not-login-the-client-is-being-asked-for-a-password-but-the-kafka-client-code-does-not-currently-support-obtaining-a-password-from-the-user-not-available-to-garner-authentication-information-from-the-user/321723)

<div class="topic-metadata">

**Author:** [@Balaganesh\_G](https://discuss.elastic.co/u/Balaganesh_G)\
**Replies:** 0\
**Last updated:** [December 21, 2022, 7:19am UTC](https://discuss.elastic.co/t/javax-security-auth-login-loginexception-could-not-login-the-client-is-being-asked-for-a-password-but-the-kafka-client-code-does-not-currently-support-obtaining-a-password-from-the-user-not-available-to-garner-authentication-information-from-the-user/321723 "2022-12-21T07:19:49Z")

</div>

Hi Team, I have using logstash 8.3.3 and migirated to new Logstash 8.5.3 facing below error. javax.security.auth.login.LoginException: Could not login: the client is being asked for a password, but the Kafka client cod…

---

## [Storage upgrade | new disk added | how to extend storage for ELK](https://discuss.elastic.co/t/storage-upgrade-new-disk-added-how-to-extend-storage-for-elk/321715)

<div class="topic-metadata">

**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\
**Replies:** 1\
**Last updated:** [December 21, 2022, 6:42am UTC](https://discuss.elastic.co/t/storage-upgrade-new-disk-added-how-to-extend-storage-for-elk/321715 "2022-12-21T06:42:55Z")

</div>

Hi! I've added a new disk for storage upgrade and I want to retain data for 45 day then move it to new disk but that data should still be searchable after 45 days. can someone brief me on how to get this done. I've al…

---

## [Upgrade from Transport Client to HLRC / JAVA API Client? Which to choose?](https://discuss.elastic.co/t/upgrade-from-transport-client-to-hlrc-java-api-client-which-to-choose/320869)

<div class="topic-metadata">

**Author:** [@Umang\_Pachaury](https://discuss.elastic.co/u/Umang_Pachaury)\
**Replies:** 6\
**Last updated:** [December 21, 2022, 6:30am UTC](https://discuss.elastic.co/t/upgrade-from-transport-client-to-hlrc-java-api-client-which-to-choose/320869 "2022-12-21T06:30:08Z")

</div>

Hello Team, I am fairly new to Elasticsearch and I have project in which we use Java Client provided by Elasticsearch to fetch logs from Elasticsearch and use those logs in our Application. The thing is that the project …

---

## [Delete by query error (version conflict)](https://discuss.elastic.co/t/delete-by-query-error-version-conflict/321365)

<div class="topic-metadata">

**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\
**Replies:** 1\
**Last updated:** [December 21, 2022, 4:57am UTC](https://discuss.elastic.co/t/delete-by-query-error-version-conflict/321365 "2022-12-21T04:57:17Z")

</div>

I'm trying to delete some specific documents from an index with a query POST /.ds-logs-system.syslog-default-2022.10.30-000004/\_delete\_by\_query?pretty { "query": { "match": { "process.name": "install.sh" …

---

## [Keytool asking for password for keystore , none applied ever](https://discuss.elastic.co/t/keytool-asking-for-password-for-keystore-none-applied-ever/321713)

<div class="topic-metadata">

**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\
**Replies:** 0\
**Last updated:** [December 21, 2022, 3:57am UTC](https://discuss.elastic.co/t/keytool-asking-for-password-for-keystore-none-applied-ever/321713 "2022-12-21T03:57:27Z")

</div>

We are on ES version 7.17 and trying to setting up cross cluster ( remote ). I am trying to add cert from one node to remote in the elastic-certificates.p12 file using below command keytool -importcert -noprompt -keysto…

---

## [How to replace "and" operator inside "must\_not" to group clauses. Query migration to ES 7.6.1](https://discuss.elastic.co/t/how-to-replace-and-operator-inside-must-not-to-group-clauses-query-migration-to-es-7-6-1/321706)

<div class="topic-metadata">

**Author:** [@aanaya](https://discuss.elastic.co/u/aanaya)\
**Replies:** 2\
**Last updated:** [December 21, 2022, 12:51am UTC](https://discuss.elastic.co/t/how-to-replace-and-operator-inside-must-not-to-group-clauses-query-migration-to-es-7-6-1/321706 "2022-12-21T00:51:31Z")

</div>

Hi guys, I'm trying to migrate following query to ES 7.6.1, but not sure how to replace "and" functionality cause it looks like it's not longer supported in ES 7.6.1. ... "must\_not": \[ { "and": \[ { …

---

## [Error 403 Forbidden when trying to install a plugin](https://discuss.elastic.co/t/error-403-forbidden-when-trying-to-install-a-plugin/321707)

<div class="topic-metadata">

**Author:** [@vadd98](https://discuss.elastic.co/u/vadd98)\
**Replies:** 1\
**Last updated:** [December 21, 2022, 12:50am UTC](https://discuss.elastic.co/t/error-403-forbidden-when-trying-to-install-a-plugin/321707 "2022-12-21T00:50:48Z")

</div>

Hi, I'm running a Dockerized Elasticsearch cluster on multiple Italian servers, but one of those is always getting a 403 http response from Elasticsearch servers. This is the exception I'm getting: Exception in thread …

---

## [Internal monitoring indices shards in UNASSIGNED state](https://discuss.elastic.co/t/internal-monitoring-indices-shards-in-unassigned-state/321247)

<div class="topic-metadata">

**Author:** [@ppine7](https://discuss.elastic.co/u/ppine7)\
**Replies:** 8\
**Last updated:** [December 20, 2022, 11:14pm UTC](https://discuss.elastic.co/t/internal-monitoring-indices-shards-in-unassigned-state/321247 "2022-12-20T23:14:52Z")

</div>

Hi, We have an 8.x ES cluster running on Elastic cloud, All seems to be working ok except that a few internal monitoring indices have one shard marked as UNASSIGNED and this causes the cluster state to be YELLOW, all th…

---

## [Fleet server and agents unable to write data to Elasticsearch - Bad Certificate](https://discuss.elastic.co/t/fleet-server-and-agents-unable-to-write-data-to-elasticsearch-bad-certificate/321675)

<div class="topic-metadata">

**Author:** [@rude](https://discuss.elastic.co/u/rude)\
**Replies:** 1\
**Last updated:** [December 20, 2022, 10:59pm UTC](https://discuss.elastic.co/t/fleet-server-and-agents-unable-to-write-data-to-elasticsearch-bad-certificate/321675 "2022-12-20T22:59:30Z")

</div>

I'm getting an error when Fleet agents are sending data to Elastic. On Kibana, at the fleet tab I can see Server and Agent are reporting correctly. If I change any of the policies they get redeployed. However, no data is…

---

## [Change field format in response](https://discuss.elastic.co/t/change-field-format-in-response/321702)

<div class="topic-metadata">

**Author:** [@rybak.yuriy.m](https://discuss.elastic.co/u/rybak.yuriy.m)\
**Replies:** 0\
**Last updated:** [December 20, 2022, 10:54pm UTC](https://discuss.elastic.co/t/change-field-format-in-response/321702 "2022-12-20T22:54:40Z")

</div>

I do some aggregattion with search api and in my response sum field looks like: "value": 9.34467409269E11" How do I can to change format to long without exponential format?

---

## [Index-append into data-stream](https://discuss.elastic.co/t/index-append-into-data-stream/320930)

<div class="topic-metadata">

**Author:** [@Safty](https://discuss.elastic.co/u/Safty)\
**Replies:** 5\
**Last updated:** [December 20, 2022, 4:39pm UTC](https://discuss.elastic.co/t/index-append-into-data-stream/320930 "2022-12-20T16:39:37Z")

</div>

Hello, Does Rally 2.7.0 support index-append (bulk) into a data-stream? I am able to generate a data-stream using component templates and a composable index template without issue, but the index-append is not writing d…

---

## [How to set timerange query to -15min from now?](https://discuss.elastic.co/t/how-to-set-timerange-query-to-15min-from-now/321662)

<div class="topic-metadata">

**Author:** [@ElasticUser11](https://discuss.elastic.co/u/ElasticUser11)\
**Replies:** 0\
**Last updated:** [December 20, 2022, 2:33pm UTC](https://discuss.elastic.co/t/how-to-set-timerange-query-to-15min-from-now/321662 "2022-12-20T14:33:55Z")

</div>

I need to check to see if two distinct logs are being generated every 15 min and every hour, so I'm trying to create two timeranges for two different indices -- one that checks for logs in the past 15 min and returns the…

---

## [Is it possible to trigger an alert when a new index is created](https://discuss.elastic.co/t/is-it-possible-to-trigger-an-alert-when-a-new-index-is-created/321605)

<div class="topic-metadata">

**Author:** [@Krishna\_Teja](https://discuss.elastic.co/u/Krishna_Teja)\
**Replies:** 3\
**Last updated:** [December 20, 2022, 7:43pm UTC](https://discuss.elastic.co/t/is-it-possible-to-trigger-an-alert-when-a-new-index-is-created/321605 "2022-12-20T19:43:55Z")

</div>

I have an ILM which creates indices every 10 days for a datastream. I need to update the mapping for the newly created index on creation. Is it possible to get an alert or trigger a webhook once a new index is created?

---

## [How to Deboost the final Score of the results when it matches set of Term/Range Filters](https://discuss.elastic.co/t/how-to-deboost-the-final-score-of-the-results-when-it-matches-set-of-term-range-filters/321490)

<div class="topic-metadata">

**Author:** [@Lakshman\_Raj\_Vasudev](https://discuss.elastic.co/u/Lakshman_Raj_Vasudev)\
**Replies:** 2\
**Last updated:** [December 20, 2022, 7:42pm UTC](https://discuss.elastic.co/t/how-to-deboost-the-final-score-of-the-results-when-it-matches-set-of-term-range-filters/321490 "2022-12-20T19:42:21Z")

</div>

Hi, We have an Scenario,When the query matches certain Set of Term/Range Filter,Deboost the Relevancy Score of those matching documents with a boost Factor,as the usage of negative boosts were not permitted in the Lates…

---

## [Trouble with suggestions](https://discuss.elastic.co/t/trouble-with-suggestions/321673)

<div class="topic-metadata">

**Author:** [@Mihai\_Raulea](https://discuss.elastic.co/u/Mihai_Raulea)\
**Replies:** 4\
**Last updated:** [December 20, 2022, 7:16pm UTC](https://discuss.elastic.co/t/trouble-with-suggestions/321673 "2022-12-20T19:16:06Z")

</div>

i have a skills index with the following mapping: { "skills" : { "mappings" : { "properties" : { "skill" : { "type" : "completion", "analyzer" : "simple", "preserve\_sepa…

---

## [KNN Search super slow](https://discuss.elastic.co/t/knn-search-super-slow/321631)

<div class="topic-metadata">

**Author:** [@TopTea1](https://discuss.elastic.co/u/TopTea1)\
**Replies:** 2\
**Last updated:** [December 20, 2022, 5:57pm UTC](https://discuss.elastic.co/t/knn-search-super-slow/321631 "2022-12-20T17:57:03Z")

</div>

Hi, I'm using ES v8.1.3 in a dockerized env with 4 shards. In my database I have around ~90M documents, and for each I have a dense vector with a dim of 768. But when I'm trying to perform a search using ANN (with cosine…

---

## [ERROR: Failed to determine the health of the cluster](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster/321332)

<div class="topic-metadata">

**Author:** [@mikes1962](https://discuss.elastic.co/u/mikes1962)\
**Replies:** 2\
**Last updated:** [December 20, 2022, 5:13pm UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster/321332 "2022-12-20T17:13:53Z")

</div>

I'm trying to install elasticsearch on RedHat 8.5 with SELinux enabled and enforcing. Additionally, the account I'm using has very limited sudo privileges so I run a python script to execute the commands. So I am executi…

---

## [ALLOCATION\_FAILED after restore from snapshot](https://discuss.elastic.co/t/allocation-failed-after-restore-from-snapshot/321659)

<div class="topic-metadata">

**Author:** [@wish\_wei](https://discuss.elastic.co/u/wish_wei)\
**Replies:** 0\
**Last updated:** [December 20, 2022, 2:12pm UTC](https://discuss.elastic.co/t/allocation-failed-after-restore-from-snapshot/321659 "2022-12-20T14:12:21Z")

</div>

Hi I tried to restore index from snapshot download from s3 repository, the origin index's primary shard is about 110GB large.After restore finished， it shows that all shards is ALLOCATION\_FAILED，detail is： sdk\_client\_…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=324)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=326)
