# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=340 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 341 --- ## [Hierarchical-facets](https://discuss.elastic.co/t/hierarchical-facets/319512)
**Author:** [@athiraaravindan](https://discuss.elastic.co/u/athiraaravindan)\ **Replies:** 0\ **Last updated:** [November 22, 2022, 6:11am UTC](https://discuss.elastic.co/t/hierarchical-facets/319512 "2022-11-22T06:11:20Z")
ho to create a nested facets like the picture below using elastic app-search-ui --- ## [Data nodes unable to see the data in path.data](https://discuss.elastic.co/t/data-nodes-unable-to-see-the-data-in-path-data/319385)
**Author:** [@Joseph\_Khoury](https://discuss.elastic.co/u/Joseph_Khoury)\ **Replies:** 9\ **Last updated:** [November 22, 2022, 1:40am UTC](https://discuss.elastic.co/t/data-nodes-unable-to-see-the-data-in-path-data/319385 "2022-11-22T01:40:38Z")
Hello all, Initially my Elastic cluster was down after a trial license expired. I was able to successfully delete the license and revert back to the basic one. After that, all the nodes are up with a master. Nonethele… --- ## [Dynamic template vs Index template with explicit mapping in terms of performance](https://discuss.elastic.co/t/dynamic-template-vs-index-template-with-explicit-mapping-in-terms-of-performance/319399)
**Author:** [@2019240081](https://discuss.elastic.co/u/2019240081)\ **Replies:** 4\ **Last updated:** [November 22, 2022, 12:42am UTC](https://discuss.elastic.co/t/dynamic-template-vs-index-template-with-explicit-mapping-in-terms-of-performance/319399 "2022-11-22T00:42:01Z")
Considering both search response speed and indexing rate (in my case the latter is more important ), which is more efficient? Dynamic template or Index template with explicit mapping ? It depends on my environment? --- ## [About the dense vector compression](https://discuss.elastic.co/t/about-the-dense-vector-compression/319398)
**Author:** [@myazi](https://discuss.elastic.co/u/myazi)\ **Replies:** 1\ **Last updated:** [November 22, 2022, 12:00am UTC](https://discuss.elastic.co/t/about-the-dense-vector-compression/319398 "2022-11-22T00:00:18Z")
Does elasticsearch have plans to support product quantization and SQ8 quantization? we have close to 10 Billion semantic vector index. The dense vector is 768 dimensional. --- ## [Elastic 8.0 refuses connections using hostname instead of localhost](https://discuss.elastic.co/t/elastic-8-0-refuses-connections-using-hostname-instead-of-localhost/319416)
**Author:** [@Rudolf\_Reddy\_Macejka](https://discuss.elastic.co/u/Rudolf_Reddy_Macejka)\ **Replies:** 1\ **Last updated:** [November 21, 2022, 10:51pm UTC](https://discuss.elastic.co/t/elastic-8-0-refuses-connections-using-hostname-instead-of-localhost/319416 "2022-11-21T22:51:59Z")
Hello team, I would like to ask you for your expertized advice. After an one of Elastic restart WITHOUT TOUCHING CONFIG :slight\_smile: it started refuse connections using hostname:9200. I have tried variations found … --- ## [Elasticsearch 7.17.7 ReadOnly Root FileSystem/Privileged Container](https://discuss.elastic.co/t/elasticsearch-7-17-7-readonly-root-filesystem-privileged-container/319473)
**Author:** [@rsoares82](https://discuss.elastic.co/u/rsoares82)\ **Replies:** 0\ **Last updated:** [November 21, 2022, 3:37pm UTC](https://discuss.elastic.co/t/elasticsearch-7-17-7-readonly-root-filesystem-privileged-container/319473 "2022-11-21T15:37:23Z")
Hi all, I am using elasticsearch on version 7.17.7 we deploy to kubernetes using helm charts, it happens that our containers are marked vulnerable because they don't have a read only root file system and the containers … --- ## [Deleting document by query](https://discuss.elastic.co/t/deleting-document-by-query/318570)
**Author:** [@sssamant](https://discuss.elastic.co/u/sssamant)\ **Replies:** 4\ **Last updated:** [November 21, 2022, 12:09am UTC](https://discuss.elastic.co/t/deleting-document-by-query/318570 "2022-11-21T00:09:00Z")
I am trying to use delete\_by\_query to delete some documents for a particular index. But it fails with illegal version value and I read that delete\_by\_query cannot be used to delete documents with index version zero. Is t… --- ## [Elasticsearch refreshing indices, but documents still don't show up in search](https://discuss.elastic.co/t/elasticsearch-refreshing-indices-but-documents-still-dont-show-up-in-search/319325)
**Author:** [@Ivo\_Tavares](https://discuss.elastic.co/u/Ivo_Tavares)\ **Replies:** 2\ **Last updated:** [November 21, 2022, 8:51pm UTC](https://discuss.elastic.co/t/elasticsearch-refreshing-indices-but-documents-still-dont-show-up-in-search/319325 "2022-11-21T20:51:45Z")
I'm creating some documents on an index, using bulk. I can access them using get or mget. When I did a search, those documents didn't show up. So, I decided to refresh the indices. However, in some cases, it still happen… --- ## [Problem bringing string part in ElasticSearch](https://discuss.elastic.co/t/problem-bringing-string-part-in-elasticsearch/319492)
**Author:** [@Diego\_Souza](https://discuss.elastic.co/u/Diego_Souza)\ **Replies:** 0\ **Last updated:** [November 21, 2022, 8:04pm UTC](https://discuss.elastic.co/t/problem-bringing-string-part-in-elasticsearch/319492 "2022-11-21T20:04:55Z")
I'm having a problem getting string part in Elasticsearch. Below is the configuration of index. PUT exemplo { "settings": { "analysis": { "analyzer": { "portuguese\_br": { "type": "portugu… --- ## [Error setup passwords](https://discuss.elastic.co/t/error-setup-passwords/319370)
**Author:** [@ardue](https://discuss.elastic.co/u/ardue)\ **Replies:** 6\ **Last updated:** [November 21, 2022, 6:38pm UTC](https://discuss.elastic.co/t/error-setup-passwords/319370 "2022-11-21T18:38:47Z")
Hello, I am currently trying to connect two nodes to make a cluster Here is the configuration for node1 cluster.name: underpass node.name: node-01 path.data: /var/lib/elasticsearch path.logs: /var/log/elasticsearch … --- ## [\[Java\] new equivalent of boolQuery.hasClauses() in ES 8 Java client?](https://discuss.elastic.co/t/java-new-equivalent-of-boolquery-hasclauses-in-es-8-java-client/319485)
**Author:** [@toto12214](https://discuss.elastic.co/u/toto12214)\ **Replies:** 0\ **Last updated:** [November 21, 2022, 5:44pm UTC](https://discuss.elastic.co/t/java-new-equivalent-of-boolquery-hasclauses-in-es-8-java-client/319485 "2022-11-21T17:44:59Z")
Hello, I'm looking for the new equivalent of the old BoolQueryBuilder.hasClauses() for Elasticsearch 8 Java client. It seems to have completely dissapear ? Any workaround about ? --- ## [Request for help/direction to create node certificates/keys using own CA certificates in place](https://discuss.elastic.co/t/request-for-help-direction-to-create-node-certificates-keys-using-own-ca-certificates-in-place/317884)
**Author:** [@arunhk3](https://discuss.elastic.co/u/arunhk3)\ **Replies:** 3\ **Last updated:** [November 21, 2022, 5:05pm UTC](https://discuss.elastic.co/t/request-for-help-direction-to-create-node-certificates-keys-using-own-ca-certificates-in-place/317884 "2022-11-21T17:05:22Z")
Hi All, We have our OWN CA certificates namely: ABC-Issuing-CA.crt ABC-Root-CA.crt With this we would like to create new Elasticsearch node certificates where we could not find any resource online for it. I am new t… --- ## [Elasticsearch does not start CentOS7](https://discuss.elastic.co/t/elasticsearch-does-not-start-centos7/318373)
**Author:** [@vassiliy.vins](https://discuss.elastic.co/u/vassiliy.vins)\ **Replies:** 36\ **Last updated:** [November 21, 2022, 4:54pm UTC](https://discuss.elastic.co/t/elasticsearch-does-not-start-centos7/318373 "2022-11-21T16:54:38Z")
Hi! Installed Elasticsearch as mentioned in Elastic Docs Generated certificates and keys - followed this link - How to install Elasticsearch and Kibana 8.0 on Centos 7 puppet here in the log - just name of the serve… --- ## [Parsing errors in Winlogbeat Powershell module](https://discuss.elastic.co/t/parsing-errors-in-winlogbeat-powershell-module/319468)
**Author:** [@amitypete](https://discuss.elastic.co/u/amitypete)\ **Replies:** 0\ **Last updated:** [November 21, 2022, 2:49pm UTC](https://discuss.elastic.co/t/parsing-errors-in-winlogbeat-powershell-module/319468 "2022-11-21T14:49:26Z")
I am trying to determine why I am getting so many Powershell parsing errors for event.code 800 events when ingesting with winlogbeat v 7.17.5. I'm seeing more than 50% of these ingested events being tagged with "\_js\_exc… --- ## [Aggregate on multiple data fields from time series data](https://discuss.elastic.co/t/aggregate-on-multiple-data-fields-from-time-series-data/319466)
**Author:** [@rvadiga](https://discuss.elastic.co/u/rvadiga)\ **Replies:** 0\ **Last updated:** [November 21, 2022, 2:40pm UTC](https://discuss.elastic.co/t/aggregate-on-multiple-data-fields-from-time-series-data/319466 "2022-11-21T14:40:10Z")
Dear Team, I am a newbie to ELK world so far. Please bear with my question. I have a time-series data which has many numeric data fields, needs a way to define an aggregation of those fields across time-series period. … --- ## [Rarest term filter](https://discuss.elastic.co/t/rarest-term-filter/319455)
**Author:** [@Karel\_Haerens](https://discuss.elastic.co/u/Karel_Haerens)\ **Replies:** 0\ **Last updated:** [November 21, 2022, 1:20pm UTC](https://discuss.elastic.co/t/rarest-term-filter/319455 "2022-11-21T13:20:22Z")
Hi all, would there be a way to filter matches to a query in such a way that only matches are accepted where (at least) the rarest term in the result occurs in the query. worded differently: there cannot be any unmatch… --- ## [Fleet server & integrations does not provide log/data](https://discuss.elastic.co/t/fleet-server-integrations-does-not-provide-log-data/316473)
**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\ **Replies:** 3\ **Last updated:** [November 21, 2022, 1:23pm UTC](https://discuss.elastic.co/t/fleet-server-integrations-does-not-provide-log-data/316473 "2022-11-21T13:23:03Z")
Need help on fleet I have recently installed a cluster (8.4.0 docker) and facing issues with fleet/APM integration. Fleet container is running in the same elk server and getting registered with healthy status. However,… --- ## [Script painless use regex match not found](https://discuss.elastic.co/t/script-painless-use-regex-match-not-found/319433)
**Author:** [@wnn](https://discuss.elastic.co/u/wnn)\ **Replies:** 1\ **Last updated:** [November 21, 2022, 12:25pm UTC](https://discuss.elastic.co/t/script-painless-use-regex-match-not-found/319433 "2022-11-21T12:25:37Z")
i want find a word from my filed.i use the filed.keyword .but match not found def m=/.\*\[0-9\]+/.matcher("2020年11月"); i want get a result = 202011，but the true result is not match； so，my friend，please help me；thank you … --- ## [Elastic log Events ingest rate optimization](https://discuss.elastic.co/t/elastic-log-events-ingest-rate-optimization/319440)
**Author:** [@abkonred](https://discuss.elastic.co/u/abkonred)\ **Replies:** 0\ **Last updated:** [November 21, 2022, 12:11pm UTC](https://discuss.elastic.co/t/elastic-log-events-ingest-rate-optimization/319440 "2022-11-21T12:11:56Z")
Hello Team, I have ingested the data around 14.7GB, it took me around 29 minutes (From Filebeat-Logstash-Elasticsearch)to load the complete data. and later on next day the shard has been compressed to 10.5 GB. could yo… --- ## [Check if index pattern exists using curl](https://discuss.elastic.co/t/check-if-index-pattern-exists-using-curl/319408)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 0\ **Last updated:** [November 21, 2022, 9:24am UTC](https://discuss.elastic.co/t/check-if-index-pattern-exists-using-curl/319408 "2022-11-21T09:24:56Z")
Hi i am using ansible to create index patterns and data views in elk. Before creating a data view for a index pattern i would want to check if index pattern exists. Currently using this command curl -I -XHEAD --write-o… --- ## [Script\_exception - runtime error - Illegal list shortcut value](https://discuss.elastic.co/t/script-exception-runtime-error-illegal-list-shortcut-value/319297)
**Author:** [@JuanCarPC](https://discuss.elastic.co/u/JuanCarPC)\ **Replies:** 1\ **Last updated:** [November 21, 2022, 8:09am UTC](https://discuss.elastic.co/t/script-exception-runtime-error-illegal-list-shortcut-value/319297 "2022-11-21T08:09:29Z")
Hi, I made this update by query POST documento2/\_update\_by\_query { "script": { "source": """ for (int i = 0; i \< ctx.\_source.innResultado.innResultadoEfectos.size(); i++) { if(ctx.\_source.innResul… --- ## [Cloudflare Logpush Elasticsearch](https://discuss.elastic.co/t/cloudflare-logpush-elasticsearch/319393)
**Author:** [@tomikoooo](https://discuss.elastic.co/u/tomikoooo)\ **Replies:** 1\ **Last updated:** [November 21, 2022, 7:18am UTC](https://discuss.elastic.co/t/cloudflare-logpush-elasticsearch/319393 "2022-11-21T07:18:59Z")
Im trying to connect elasticsearch to cloudflare via logpush. I have no choice to use ssl since cloudflare does not accept http. Whenever I tried to use the SSL configuration it does not start. I tried running netstat -… --- ## [Elasticsearch m1 macbook arm64 xpack.ml](https://discuss.elastic.co/t/elasticsearch-m1-macbook-arm64-xpack-ml/319387)
**Author:** [@zzdntjd](https://discuss.elastic.co/u/zzdntjd)\ **Replies:** 1\ **Last updated:** [November 21, 2022, 6:59am UTC](https://discuss.elastic.co/t/elasticsearch-m1-macbook-arm64-xpack-ml/319387 "2022-11-21T06:59:51Z")
hello! os : (apple silicon m1 macbook) mac os ventura elasticsearch version : 7.10.1 problem i start elasticsearch on m1 macbook air. suddenly, error to log on term. error is need to (xpack.ml.enabled: false) setti… --- ## [\[ERROR\] Cannot race. pid file not available after 60 seconds! in rally](https://discuss.elastic.co/t/error-cannot-race-pid-file-not-available-after-60-seconds-in-rally/319367)
**Author:** [@qksjdhi1212](https://discuss.elastic.co/u/qksjdhi1212)\ **Replies:** 2\ **Last updated:** [November 21, 2022, 6:42am UTC](https://discuss.elastic.co/t/error-cannot-race-pid-file-not-available-after-60-seconds-in-rally/319367 "2022-11-21T06:42:51Z")
I tried to run rally with following command esrally race --distribution-version=8.4.0 --track=geonames --challenge=append-no-conflicts but I got this error message \[ERROR\] Cannot race. pid file not available after 60… --- ## [Cluster with all system indices in RED status](https://discuss.elastic.co/t/cluster-with-all-system-indices-in-red-status/319285)
**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\ **Replies:** 2\ **Last updated:** [November 21, 2022, 6:26am UTC](https://discuss.elastic.co/t/cluster-with-all-system-indices-in-red-status/319285 "2022-11-21T06:26:14Z")
Hello, I have a cluster where i lost some nodes that are storing primaries & replicas of all system indices. index shard prirep state .reporting-2022-09-18 0 p UNASSIGNED .reporting-2022-09-18 0 r UNASSIGNED … --- ## [Elasticsearch & Kibana Audit logs](https://discuss.elastic.co/t/elasticsearch-kibana-audit-logs/319151)
**Author:** [@syed0510](https://discuss.elastic.co/u/syed0510)\ **Replies:** 11\ **Last updated:** [November 21, 2022, 5:47am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-audit-logs/319151 "2022-11-21T05:47:37Z")
Hi Team, Elasticsearch audit logs is taking 20 gb size everyday. Can you please help me to minimize the size of audit log file. Regards, Syed --- ## [Trying to connect to elasticsearch using jenkins logstash plugin](https://discuss.elastic.co/t/trying-to-connect-to-elasticsearch-using-jenkins-logstash-plugin/319264)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 2\ **Last updated:** [November 21, 2022, 5:35am UTC](https://discuss.elastic.co/t/trying-to-connect-to-elasticsearch-using-jenkins-logstash-plugin/319264 "2022-11-21T05:35:39Z")
Hi I've installed logstash plugin on jenkins. and elk stack 8.5.1 with authentication. I can access elasticsearch only using https with -k flag. How can i configure logstash to access elasticsaearch. when i enter onl… --- ## [Elasticsearch cluster migration from 7.12 to 8.5](https://discuss.elastic.co/t/elasticsearch-cluster-migration-from-7-12-to-8-5/319271)
**Author:** [@satendra1987](https://discuss.elastic.co/u/satendra1987)\ **Replies:** 10\ **Last updated:** [November 21, 2022, 5:02am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-migration-from-7-12-to-8-5/319271 "2022-11-21T05:02:30Z")
Hi, we are running an 1 node elasticsearch cluster on 7.12. we want to setup a 3 node cluster on 8.5. can someone let me know how to migrate the existing indexes to new cluster. Thanks Satendra --- ## [Delete Resources on Elastic Cloud using REST API](https://discuss.elastic.co/t/delete-resources-on-elastic-cloud-using-rest-api/319221)
**Author:** [@Ofir\_Edi](https://discuss.elastic.co/u/Ofir_Edi)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 4:29pm UTC](https://discuss.elastic.co/t/delete-resources-on-elastic-cloud-using-rest-api/319221 "2022-11-17T16:29:44Z")
Hi, This is regarding Elastic cloud (cloud.elastic.co/api/v1) - there is no matching tag. It seems like there is no option to delete resources/deployments. when using the shutdown API it says that resources are hidden… --- ## [Failed to determine the health of the cluster](https://discuss.elastic.co/t/failed-to-determine-the-health-of-the-cluster/318818)
**Author:** [@richardvk](https://discuss.elastic.co/u/richardvk)\ **Replies:** 1\ **Last updated:** [November 20, 2022, 11:33pm UTC](https://discuss.elastic.co/t/failed-to-determine-the-health-of-the-cluster/318818 "2022-11-20T23:33:16Z")
Im trying to enable clustering as per: I get this when creating a token: root@elk-1 ~ # /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s node ERROR: Failed to determine the health of the cluster… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=339) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=341)