# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=352

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 353

---

## [java.lang.IllegalArgumentException: Class class co.elastic.clients.elasticsearch.core.bulk.UpdateOperation cannot be read from JSON](https://discuss.elastic.co/t/java-lang-illegalargumentexception-class-class-co-elastic-clients-elasticsearch-core-bulk-updateoperation-cannot-be-read-from-json/317609)

<div class="topic-metadata">

**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\
**Replies:** 1\
**Last updated:** [October 28, 2022, 4:14am UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-class-class-co-elastic-clients-elasticsearch-core-bulk-updateoperation-cannot-be-read-from-json/317609 "2022-10-28T04:14:44Z")

</div>

BulkRequest.Builder brb = new BulkRequest.Builder().index("foo"); //first try Rechnung r6 = new Rechnung(); r6.Rechnungsbetrag = 49.99f; ObjectMapper mapper = new ObjectMapper(); String myjson = mapper.writeValueAsString…

---

## ["Race condition" in Java](https://discuss.elastic.co/t/race-condition-in-java/317615)

<div class="topic-metadata">

**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\
**Replies:** 3\
**Last updated:** [October 28, 2022, 4:09am UTC](https://discuss.elastic.co/t/race-condition-in-java/317615 "2022-10-28T04:09:15Z")

</div>

Hi, what i am experiencing right now is that a document that should be already deleted will be still listet if a search is done directly after the deletion. a) indexing the document xyz b) doing other Elastic-related …

---

## [Elasticsearch: how the exact matches can rank higher than fuzzy match and phrase match in the elastic search?](https://discuss.elastic.co/t/elasticsearch-how-the-exact-matches-can-rank-higher-than-fuzzy-match-and-phrase-match-in-the-elastic-search/317653)

<div class="topic-metadata">

**Author:** [@paris1](https://discuss.elastic.co/u/paris1)\
**Replies:** 0\
**Last updated:** [October 28, 2022, 12:46am UTC](https://discuss.elastic.co/t/elasticsearch-how-the-exact-matches-can-rank-higher-than-fuzzy-match-and-phrase-match-in-the-elastic-search/317653 "2022-10-28T00:46:44Z")

</div>

0 I'm trying to configure Elasticsearch to give me both exact matches and fuzzy matches and also phrase matches.I'm using Elasticsearch to search namesof foods in a database, and I want it to be fuzzy to allow for minor…

---

## [Logstash can't index into ES: \`action \[indices:admin/auto\_create\] is unauthorized for user\`](https://discuss.elastic.co/t/logstash-cant-index-into-es-action-indices-admin-auto-create-is-unauthorized-for-user/317650)

<div class="topic-metadata">

**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\
**Replies:** 1\
**Last updated:** [October 27, 2022, 11:14pm UTC](https://discuss.elastic.co/t/logstash-cant-index-into-es-action-indices-admin-auto-create-is-unauthorized-for-user/317650 "2022-10-27T23:14:48Z")

</div>

I created a user demoTester with the following roles: /usr/share/elasticsearch/bin/elasticsearch-users useradd demoTester -p demoTester -r kibana\_admin,logstash\_admin,beats\_admin,logstash\_system,monitoring\_user,watcher\_…

---

## [List all indices using Java rest client](https://discuss.elastic.co/t/list-all-indices-using-java-rest-client/317629)

<div class="topic-metadata">

**Author:** [@PV2000](https://discuss.elastic.co/u/PV2000)\
**Replies:** 1\
**Last updated:** [October 27, 2022, 6:00pm UTC](https://discuss.elastic.co/t/list-all-indices-using-java-rest-client/317629 "2022-10-27T18:00:31Z")

</div>

Hi, What is the best way to get a list of all indices in Elastic Search using Java ? I am using RestHighLevelClient. Also, is there a way to get only those indices that match a prefix ? I see cat indices REST endpoin…

---

## [@timestamp missing exception for datastream](https://discuss.elastic.co/t/timestamp-missing-exception-for-datastream/317633)

<div class="topic-metadata">

**Author:** [@Sankar\_S](https://discuss.elastic.co/u/Sankar_S)\
**Replies:** 0\
**Last updated:** [October 27, 2022, 5:24pm UTC](https://discuss.elastic.co/t/timestamp-missing-exception-for-datastream/317633 "2022-10-27T17:24:20Z")

</div>

Getting the below exception while indexing the document into datastream org.elasticsearch.ElasticsearchException: Elasticsearch exception \[type=illegal\_argument\_exception, reason=data stream timestamp field \[@timestamp\]…

---

## [Dynamic Elasticsearch query execution from Node JS](https://discuss.elastic.co/t/dynamic-elasticsearch-query-execution-from-node-js/317602)

<div class="topic-metadata">

**Author:** [@pravu](https://discuss.elastic.co/u/pravu)\
**Replies:** 0\
**Last updated:** [October 27, 2022, 10:55am UTC](https://discuss.elastic.co/t/dynamic-elasticsearch-query-execution-from-node-js/317602 "2022-10-27T10:55:43Z")

</div>

I need to execute dynamic queries from Node JS . I tried the following script and getting error. async function executeDynamicTest (){ const querySrting= "{index: 'entity\_index', query: { match: { amount: '1819' }}}"; …

---

## [Elasticsearch snapshot restoration error for system indices](https://discuss.elastic.co/t/elasticsearch-snapshot-restoration-error-for-system-indices/317138)

<div class="topic-metadata">

**Author:** [@jaykb77](https://discuss.elastic.co/u/jaykb77)\
**Replies:** 5\
**Last updated:** [October 27, 2022, 8:49am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-restoration-error-for-system-indices/317138 "2022-10-27T08:49:29Z")

</div>

Im trying to restore a snapshot(snapshot of entire cluster) and exclude internal indices as recommended in documentation (Restore a snapshot | Elasticsearch Guide \[7.17\] | Elastic ) Although this method is supposed to b…

---

## [Impossible to set password for elastic builtin superuser](https://discuss.elastic.co/t/impossible-to-set-password-for-elastic-builtin-superuser/317305)

<div class="topic-metadata">

**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\
**Replies:** 13\
**Last updated:** [October 27, 2022, 7:11am UTC](https://discuss.elastic.co/t/impossible-to-set-password-for-elastic-builtin-superuser/317305 "2022-10-27T07:11:51Z")

</div>

Hi, I just install elasticsearch 8.4.1 from elasticsearch-8.4.1-1.x86\_64 RPM on a Red Hat Enterprise Linux release 8.6 (Ootpa) server. Everything looks ok, elastic service is running. But I cannot find the elastic use…

---

## [Create enrollment for kibana impossible with certificate Lets Encript](https://discuss.elastic.co/t/create-enrollment-for-kibana-impossible-with-certificate-lets-encript/317294)

<div class="topic-metadata">

**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\
**Replies:** 3\
**Last updated:** [October 27, 2022, 6:54am UTC](https://discuss.elastic.co/t/create-enrollment-for-kibana-impossible-with-certificate-lets-encript/317294 "2022-10-27T06:54:42Z")

</div>

After the problem I indicated in the post I can't get Elastic and Kibana to work with real certificates I was finally able to understand the issue of needing to pass the --url in the command. But now when I want to gene…

---

## [Oracle cloud instances logs in elk siem](https://discuss.elastic.co/t/oracle-cloud-instances-logs-in-elk-siem/317207)

<div class="topic-metadata">

**Author:** [@Sarala\_C](https://discuss.elastic.co/u/Sarala_C)\
**Replies:** 1\
**Last updated:** [October 27, 2022, 6:50am UTC](https://discuss.elastic.co/t/oracle-cloud-instances-logs-in-elk-siem/317207 "2022-10-27T06:50:53Z")

</div>

Hello, Our requirement is to ingest oracle cloud instances logs into ELK SIEM that is hosted on azure cloud. Is this possible? if yes then please can you guide. Waiting for any solution. Thanks Sarala

---

## [ELK & APIs calls](https://discuss.elastic.co/t/elk-apis-calls/317116)

<div class="topic-metadata">

**Author:** [@noshell](https://discuss.elastic.co/u/noshell)\
**Replies:** 3\
**Last updated:** [October 27, 2022, 6:28am UTC](https://discuss.elastic.co/t/elk-apis-calls/317116 "2022-10-27T06:28:46Z")

</div>

Hello, I have a design / architecture question. In a project i wish you to implement REST APIs with custom dashboards but i want to segreagte network flows. I would like to know if i used a distributed archietcture wh…

---

## [Create a conditional mapping (enabled = false) on a single field based on field value](https://discuss.elastic.co/t/create-a-conditional-mapping-enabled-false-on-a-single-field-based-on-field-value/317572)

<div class="topic-metadata">

**Author:** [@JerryKumar](https://discuss.elastic.co/u/JerryKumar)\
**Replies:** 1\
**Last updated:** [October 27, 2022, 5:57am UTC](https://discuss.elastic.co/t/create-a-conditional-mapping-enabled-false-on-a-single-field-based-on-field-value/317572 "2022-10-27T05:57:24Z")

</div>

Hey team, I have a use case in my application where a list of items called Descriptors are generated. These are filtered for a specific prefix "descsearch" and only these are being sent to the index and everything work…

---

## [How to use XContentBuilder in Elasticsearch 8.0](https://discuss.elastic.co/t/how-to-use-xcontentbuilder-in-elasticsearch-8-0/317256)

<div class="topic-metadata">

**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\
**Replies:** 8\
**Last updated:** [October 27, 2022, 5:56am UTC](https://discuss.elastic.co/t/how-to-use-xcontentbuilder-in-elasticsearch-8-0/317256 "2022-10-27T05:56:59Z")

</div>

Hi, i found some examples how to use XContentBuilder in Elasticsearch 7.x but these examples do not work any more since ESJAC is completely new programmed. But as XContentBuilder still exists: XContentBuilder (elasticse…

---

## [Elasticsearch Multi-word synonyms and stopword issue](https://discuss.elastic.co/t/elasticsearch-multi-word-synonyms-and-stopword-issue/317585)

<div class="topic-metadata">

**Author:** [@sudheesh](https://discuss.elastic.co/u/sudheesh)\
**Replies:** 0\
**Last updated:** [October 27, 2022, 5:54am UTC](https://discuss.elastic.co/t/elasticsearch-multi-word-synonyms-and-stopword-issue/317585 "2022-10-27T05:54:33Z")

</div>

I have created an index as follows PUT /wordforms\_example { "mappings": { "dynamic": "strict", "properties": { "test\_field": { "type": "text", "analyzer": "synonym\_words\_analyzer\_…

---

## [Question about statistics delayed too long](https://discuss.elastic.co/t/question-about-statistics-delayed-too-long/317577)

<div class="topic-metadata">

**Author:** [@315386775](https://discuss.elastic.co/u/315386775)\
**Replies:** 2\
**Last updated:** [October 27, 2022, 5:54am UTC](https://discuss.elastic.co/t/question-about-statistics-delayed-too-long/317577 "2022-10-27T05:54:11Z")

</div>

i use the kibana with CVAT GitHub - opencv/cvat: Annotate better with CVAT, the industry-leading data engine for machine learning. Used and trusted by teams at any scale, for data of any scale. Question in Kibana. I ca…

---

## [Elasticsearch and Kibana Url says "your connection to this site is not secure "](https://discuss.elastic.co/t/elasticsearch-and-kibana-url-says-your-connection-to-this-site-is-not-secure/317562)

<div class="topic-metadata">

**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\
**Replies:** 7\
**Last updated:** [October 27, 2022, 4:28am UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-url-says-your-connection-to-this-site-is-not-secure/317562 "2022-10-27T04:28:35Z")

</div>

I am running elastic 8.4. From the documentation, it says that the security is automatically enabled and configured. But when I get my elasticsearch running and visit https:localhost:9200 I get the message: Your connect…

---

## [Config dir ownership mismatch error on windows 1809 container for elasticsearch](https://discuss.elastic.co/t/config-dir-ownership-mismatch-error-on-windows-1809-container-for-elasticsearch/317568)

<div class="topic-metadata">

**Author:** [@Maleki](https://discuss.elastic.co/u/Maleki)\
**Replies:** 0\
**Last updated:** [October 27, 2022, 1:23am UTC](https://discuss.elastic.co/t/config-dir-ownership-mismatch-error-on-windows-1809-container-for-elasticsearch/317568 "2022-10-27T01:23:24Z")

</div>

Due to some restrictions at my company we are not allowed to use linux based containers. I am therefore creating a windows container based ELK stack. My dockerfile is heavily inspired by diamol/Dockerfile at master · s…

---

## [Automate Elasticsearch-reset-password in bash script](https://discuss.elastic.co/t/automate-elasticsearch-reset-password-in-bash-script/317429)

<div class="topic-metadata">

**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\
**Replies:** 10\
**Last updated:** [October 27, 2022, 12:20am UTC](https://discuss.elastic.co/t/automate-elasticsearch-reset-password-in-bash-script/317429 "2022-10-27T00:20:45Z")

</div>

I am running the latest elasticsearch version via a script, and I am trying to automate the reset password process via this method recommended @TimV back in 2018, but it seems to no longer work with the latest version: H…

---

## [System integration doesn't populate ECS Fields -\> Predefined Dashboards not usable anymore](https://discuss.elastic.co/t/system-integration-doesnt-populate-ecs-fields-predefined-dashboards-not-usable-anymore/317559)

<div class="topic-metadata">

**Author:** [@matled](https://discuss.elastic.co/u/matled)\
**Replies:** 0\
**Last updated:** [October 26, 2022, 9:09pm UTC](https://discuss.elastic.co/t/system-integration-doesnt-populate-ecs-fields-predefined-dashboards-not-usable-anymore/317559 "2022-10-26T21:09:33Z")

</div>

Hey there We've observed a change in the populated fields from the system integration. Since about two weeks we have very different fields populated (or not) therefore leading to missing fields in our own and the predef…

---

## [Elasticdump never dumps data](https://discuss.elastic.co/t/elasticdump-never-dumps-data/317558)

<div class="topic-metadata">

**Author:** [@mpky](https://discuss.elastic.co/u/mpky)\
**Replies:** 0\
**Last updated:** [October 26, 2022, 8:37pm UTC](https://discuss.elastic.co/t/elasticdump-never-dumps-data/317558 "2022-10-26T20:37:00Z")

</div>

elasticdump \\ --input=http://\<myuser\>:\<mypass\>@\<myelasticsearchurl\>/news\_headlines \\ --output=./news\_data.json \\ --type=data \\ the above outputs "starting dump" and then times out. i'm on the default settings for …

---

## [Index template with only one field across multiple indices](https://discuss.elastic.co/t/index-template-with-only-one-field-across-multiple-indices/317315)

<div class="topic-metadata">

**Author:** [@not\_correct](https://discuss.elastic.co/u/not_correct)\
**Replies:** 14\
**Last updated:** [October 26, 2022, 6:03pm UTC](https://discuss.elastic.co/t/index-template-with-only-one-field-across-multiple-indices/317315 "2022-10-26T18:03:36Z")

</div>

Hi, I have multiple indices like mailbox-xx- xxxx .The xx-xxxx values are assigned dynamically. Each index contains various fields with date as a common field. The problem that date field has been read as long type by …

---

## [Data Path Change](https://discuss.elastic.co/t/data-path-change/317430)

<div class="topic-metadata">

**Author:** [@Safty](https://discuss.elastic.co/u/Safty)\
**Replies:** 4\
**Last updated:** [October 26, 2022, 4:19pm UTC](https://discuss.elastic.co/t/data-path-change/317430 "2022-10-26T16:19:13Z")

</div>

Hello, I am interested in best practices for changing the default data and log path in the elasticsearch.yml file. I have found various references on the web about how this is done (a simple copy of the data as well as…

---

## [Illegal\_argument\_exception: index \[cwl-data-2022.10.14-0001\] is not the write index for alias \[cwl-data\]](https://discuss.elastic.co/t/illegal-argument-exception-index-cwl-data-2022-10-14-0001-is-not-the-write-index-for-alias-cwl-data/316910)

<div class="topic-metadata">

**Author:** [@waleedkh](https://discuss.elastic.co/u/waleedkh)\
**Replies:** 0\
**Last updated:** [October 18, 2022, 3:10pm UTC](https://discuss.elastic.co/t/illegal-argument-exception-index-cwl-data-2022-10-14-0001-is-not-the-write-index-for-alias-cwl-data/316910 "2022-10-18T15:10:30Z")

</div>

Hi there, I have an issue where this error is coming up. I see there are two other posts in the forums with similar issues but there have been no replies. Here is my policy { "policy": "cwl-data", "phase\_definition…

---

## [Highlight produce unexpected invalid results on multivalue fields copied from other fields](https://discuss.elastic.co/t/highlight-produce-unexpected-invalid-results-on-multivalue-fields-copied-from-other-fields/317394)

<div class="topic-metadata">

**Author:** [@Maxim\_Kollegov](https://discuss.elastic.co/u/Maxim_Kollegov)\
**Replies:** 1\
**Last updated:** [October 26, 2022, 12:24pm UTC](https://discuss.elastic.co/t/highlight-produce-unexpected-invalid-results-on-multivalue-fields-copied-from-other-fields/317394 "2022-10-26T12:24:27Z")

</div>

Steps to reproduce create mapping post /test/\_mapping { "properties": { "family": { "type": "text", "index": true, "term\_vector": "with\_positions\_offsets", …

---

## [Searching two terms inside array of object](https://discuss.elastic.co/t/searching-two-terms-inside-array-of-object/317507)

<div class="topic-metadata">

**Author:** [@yashveer](https://discuss.elastic.co/u/yashveer)\
**Replies:** 4\
**Last updated:** [October 26, 2022, 12:23pm UTC](https://discuss.elastic.co/t/searching-two-terms-inside-array-of-object/317507 "2022-10-26T12:23:07Z")

</div>

"rno" : 1, "narratives": \[ { "compl": "call drop", "ts": "2015-05-01" }, { "compl": "internet connection lost ", "ts": "2016-01-…

---

## [\_update\_by\_query with PHP API](https://discuss.elastic.co/t/update-by-query-with-php-api/317500)

<div class="topic-metadata">

**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\
**Replies:** 2\
**Last updated:** [October 26, 2022, 11:56am UTC](https://discuss.elastic.co/t/update-by-query-with-php-api/317500 "2022-10-26T11:56:17Z")

</div>

I am looking for some examples or documentation to help me know if it is possible to do a \_update\_by\_query with the PHP API. I have seen examples in the JS section, but I can't find anything on the subject in PHP Using …

---

## [Sort both hits and inner hits](https://discuss.elastic.co/t/sort-both-hits-and-inner-hits/317493)

<div class="topic-metadata">

**Author:** [@BrunoSkoon](https://discuss.elastic.co/u/BrunoSkoon)\
**Replies:** 1\
**Last updated:** [October 26, 2022, 11:00am UTC](https://discuss.elastic.co/t/sort-both-hits-and-inner-hits/317493 "2022-10-26T11:00:26Z")

</div>

Hello. I'm using Elasticsearch 8.4.3 and I need help to sort both the hits and inner hits. My data set is a list of product types, each containing a list of products. Each product then contains a price object with field…

---

## [Filter on nested object to return all fields under nested object with value zero](https://discuss.elastic.co/t/filter-on-nested-object-to-return-all-fields-under-nested-object-with-value-zero/317488)

<div class="topic-metadata">

**Author:** [@monaadelrabea](https://discuss.elastic.co/u/monaadelrabea)\
**Replies:** 0\
**Last updated:** [October 26, 2022, 9:07am UTC](https://discuss.elastic.co/t/filter-on-nested-object-to-return-all-fields-under-nested-object-with-value-zero/317488 "2022-10-26T09:07:01Z")

</div>

I need to filter on an index that have nested object called params, this object contains dynamic fields how to return only docs that contain fields with zero value under params nesetd object Ex: "params": { "ePwrV":\[ …

---

## [No new data in Kibana - elastic fails to create shard](https://discuss.elastic.co/t/no-new-data-in-kibana-elastic-fails-to-create-shard/316318)

<div class="topic-metadata">

**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\
**Replies:** 1\
**Last updated:** [October 26, 2022, 9:33am UTC](https://discuss.elastic.co/t/no-new-data-in-kibana-elastic-fails-to-create-shard/316318 "2022-10-26T09:33:21Z")

</div>

Hi All, from time to time i see that kibana stops showing new data, its always the same, i have daily index (naming from LS) in ES that gets unassigned on both shard when its created, the logs i can find: obtaining sh…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=351)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=353)
