# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=366

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 367

---

## [LDAP doubt](https://discuss.elastic.co/t/ldap-doubt/315671)

<div class="topic-metadata">

**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\
**Replies:** 1\
**Last updated:** [October 3, 2022, 1:23pm UTC](https://discuss.elastic.co/t/ldap-doubt/315671 "2022-10-03T13:23:51Z")

</div>

Hello! im integrating elk with ldap. when i enable ldap at config im not able to login kibana with my old users. Can't be both enable ? im going to be able to log in only with ldap users ?

---

## [Example of a 3 node production ready docker-compose for Elasticsearch?](https://discuss.elastic.co/t/example-of-a-3-node-production-ready-docker-compose-for-elasticsearch/315647)

<div class="topic-metadata">

**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\
**Replies:** 2\
**Last updated:** [October 3, 2022, 4:26am UTC](https://discuss.elastic.co/t/example-of-a-3-node-production-ready-docker-compose-for-elasticsearch/315647 "2022-10-03T04:26:56Z")

</div>

Hello, I was wondering if anyone had or can point to an example of a multi-node production ready docker-compose yaml file for Elasticsearch. I've started with the docker-compose example from the elastic documentation …

---

## [How to suggest queries to user](https://discuss.elastic.co/t/how-to-suggest-queries-to-user/315685)

<div class="topic-metadata">

**Author:** [@Guilherme\_Mello](https://discuss.elastic.co/u/Guilherme_Mello)\
**Replies:** 0\
**Last updated:** [October 3, 2022, 12:27pm UTC](https://discuss.elastic.co/t/how-to-suggest-queries-to-user/315685 "2022-10-03T12:27:16Z")

</div>

Hi, is there a way to suggest queries to the user based on terms? This feature is common in searches to suggest other queries to the user. I saw that there is appsearch, is that the only way to make it work?

---

## [Elasticsearch Restore Problem](https://discuss.elastic.co/t/elasticsearch-restore-problem/315669)

<div class="topic-metadata">

**Author:** [@rkazak07](https://discuss.elastic.co/u/rkazak07)\
**Replies:** 1\
**Last updated:** [October 3, 2022, 9:17am UTC](https://discuss.elastic.co/t/elasticsearch-restore-problem/315669 "2022-10-03T09:17:46Z")

</div>

Hello, I have a Cluster running in Elasticsearch 7.10.2 version. I have added a new server to this Cluster. I use it with Graylog. I get the following Log while restoring the index without a replica. and it falls into t…

---

## [Elastic cluster issue!](https://discuss.elastic.co/t/elastic-cluster-issue/314953)

<div class="topic-metadata">

**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\
**Replies:** 19\
**Last updated:** [October 2, 2022, 5:38pm UTC](https://discuss.elastic.co/t/elastic-cluster-issue/314953 "2022-10-02T17:38:41Z")

</div>

We are seeing CPU spikes for our Elastic cluster and in logs we see this error continuously. We also get a circuit breaker exception in kibana when CPU spikes up. What could be wrong with our cluster \[2022-09-22T13:40:3…

---

## [\_delete\_by\_query documentation suggestion](https://discuss.elastic.co/t/delete-by-query-documentation-suggestion/315642)

<div class="topic-metadata">

**Author:** [@MarcBT](https://discuss.elastic.co/u/MarcBT)\
**Replies:** 1\
**Last updated:** [October 3, 2022, 5:40am UTC](https://discuss.elastic.co/t/delete-by-query-documentation-suggestion/315642 "2022-10-03T05:40:48Z")

</div>

IMO, the \_delete\_by\_query page should mention that if an index is moved out of 'hot' phase by ILM, the delete will fail with "FORBIDDEN/8/index write (api)".

---

## [Custom Similarity for Percolate Query](https://discuss.elastic.co/t/custom-similarity-for-percolate-query/315654)

<div class="topic-metadata">

**Author:** [@aneeshkoya](https://discuss.elastic.co/u/aneeshkoya)\
**Replies:** 0\
**Last updated:** [October 3, 2022, 5:37am UTC](https://discuss.elastic.co/t/custom-similarity-for-percolate-query/315654 "2022-10-03T05:37:12Z")

</div>

I created a percolation index with a custom similarity in its settings and a mapping to use this custom similarity: { "my-index": { "settings": { "index": { "similarity": { "idfless": { …

---

## [Manually configure security, divergence in the documentation](https://discuss.elastic.co/t/manually-configure-security-divergence-in-the-documentation/315601)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 1\
**Last updated:** [October 3, 2022, 2:38am UTC](https://discuss.elastic.co/t/manually-configure-security-divergence-in-the-documentation/315601 "2022-10-03T02:38:35Z")

</div>

Hello, I'm creating a new cluster using 8.4 and configuring the security features manually. I've created the certificates for the transport and http protocol and everything works as expected, the cluster starts up and …

---

## [What's the cause of this problem and what's the solution?](https://discuss.elastic.co/t/whats-the-cause-of-this-problem-and-whats-the-solution/315641)

<div class="topic-metadata">

**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\
**Replies:** 0\
**Last updated:** [October 2, 2022, 8:59pm UTC](https://discuss.elastic.co/t/whats-the-cause-of-this-problem-and-whats-the-solution/315641 "2022-10-02T20:59:57Z")

</div>

i installed elastic and kibana 8.4.1 in ubuntu 22.04 and when i try to do sudo apt update or sudo apt install unzip i get this error E: Conflicting values set for option Signed-By regarding source https://artif…

---

## [Problems with installing/starting current Elasticsearch on ubuntu](https://discuss.elastic.co/t/problems-with-installing-starting-current-elasticsearch-on-ubuntu/315632)

<div class="topic-metadata">

**Author:** [@besucher80](https://discuss.elastic.co/u/besucher80)\
**Replies:** 3\
**Last updated:** [October 2, 2022, 3:22pm UTC](https://discuss.elastic.co/t/problems-with-installing-starting-current-elasticsearch-on-ubuntu/315632 "2022-10-02T15:22:10Z")

</div>

hi, i have installed elasticsearch like here: https://www.elastic.co/guide/en/elasticsearch/reference/current/deb.html Now i want to start it with: sudo systemctl start elasticsearch.service But this always fail. In t…

---

## [Pushing data through python to elastic search](https://discuss.elastic.co/t/pushing-data-through-python-to-elastic-search/315489)

<div class="topic-metadata">

**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\
**Replies:** 6\
**Last updated:** [October 2, 2022, 3:06am UTC](https://discuss.elastic.co/t/pushing-data-through-python-to-elastic-search/315489 "2022-10-02T03:06:33Z")

</div>

I'm trying to push some data that I've collected through Python into Elasticsearch but it's showing this error:- "ValueError: Can't specify the options 'http\_auth' via a dictionary in 'hosts', only 'host', 'path\_prefix',…

---

## [How to connect Google Colab to Elasticsearch](https://discuss.elastic.co/t/how-to-connect-google-colab-to-elasticsearch/315618)

<div class="topic-metadata">

**Author:** [@shivang.ahd](https://discuss.elastic.co/u/shivang.ahd)\
**Replies:** 2\
**Last updated:** [October 1, 2022, 6:21pm UTC](https://discuss.elastic.co/t/how-to-connect-google-colab-to-elasticsearch/315618 "2022-10-01T18:21:29Z")

</div>

Hi, How to connect Google Colab to Elasticsearch. I have followed few ways, but getting error for all the ways. One of the code is as below:- !pip install Elasticsearch -q # download elasticsearch !wget https://arti…

---

## [Adding Site Alternate Name (SAN) to the docker run command](https://discuss.elastic.co/t/adding-site-alternate-name-san-to-the-docker-run-command/315497)

<div class="topic-metadata">

**Author:** [@Mark\_Parrish](https://discuss.elastic.co/u/Mark_Parrish)\
**Replies:** 1\
**Last updated:** [October 1, 2022, 3:36pm UTC](https://discuss.elastic.co/t/adding-site-alternate-name-san-to-the-docker-run-command/315497 "2022-10-01T15:36:35Z")

</div>

I used the following command to bring up a elasticsearch node. It is straight out of the instructions (link). docker run -d / --name es01 / --net elastic / -p 9200:9200 -p 9300:9300 / -it / docker.elast…

---

## [Can Replica shards be used for Disaster Recovery](https://discuss.elastic.co/t/can-replica-shards-be-used-for-disaster-recovery/315620)

<div class="topic-metadata">

**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\
**Replies:** 1\
**Last updated:** [October 1, 2022, 3:14pm UTC](https://discuss.elastic.co/t/can-replica-shards-be-used-for-disaster-recovery/315620 "2022-10-01T15:14:48Z")

</div>

Hi, We don't have backup in our cluster. Can we you replicas for disaster recovery purpose..? Elasticsearch version: 8.12 Thank you...!

---

## [Additional java process in ES8.4](https://discuss.elastic.co/t/additional-java-process-in-es8-4/315619)

<div class="topic-metadata">

**Author:** [@frankshad](https://discuss.elastic.co/u/frankshad)\
**Replies:** 0\
**Last updated:** [October 1, 2022, 2:25pm UTC](https://discuss.elastic.co/t/additional-java-process-in-es8-4/315619 "2022-10-01T14:25:41Z")

</div>

I'm trying a fresh install of ES8.4 on Debian 11, starting using systemctl start elasticsearch. I notice that there are now two Java processes permanently running, where on all previous versions I have used (up to 8.2) t…

---

## [How to mock an index?](https://discuss.elastic.co/t/how-to-mock-an-index/315580)

<div class="topic-metadata">

**Author:** [@sajidb](https://discuss.elastic.co/u/sajidb)\
**Replies:** 1\
**Last updated:** [October 1, 2022, 12:08am UTC](https://discuss.elastic.co/t/how-to-mock-an-index/315580 "2022-10-01T00:08:08Z")

</div>

I want to create an integration test in C#10 (.NET 6) that does some tests on the Elasticsearch index but I can't do it with the real data. I want to mock an index or create an index with dummy data and then test it by g…

---

## [Extending multi-match for nested Object objects in MongoDB](https://discuss.elastic.co/t/extending-multi-match-for-nested-object-objects-in-mongodb/315471)

<div class="topic-metadata">

**Author:** [@scheung38](https://discuss.elastic.co/u/scheung38)\
**Replies:** 7\
**Last updated:** [September 30, 2022, 6:23pm UTC](https://discuss.elastic.co/t/extending-multi-match-for-nested-object-objects-in-mongodb/315471 "2022-09-30T18:23:16Z")

</div>

Given this works, but how to extend this multi\_match to nested ObjectID objects in a MongoDB database: GET address\*/\_search/ { "query": { "multi\_match" : { "query": "york", "fields": \[ "outward\_code"…

---

## [Stuck on \[Bucket max\] cardinality estimate required for \[influencers\] \[response\_time\_cat\] but not supplied](https://discuss.elastic.co/t/stuck-on-bucket-max-cardinality-estimate-required-for-influencers-response-time-cat-but-not-supplied/315533)

<div class="topic-metadata">

**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\
**Replies:** 3\
**Last updated:** [September 30, 2022, 5:22pm UTC](https://discuss.elastic.co/t/stuck-on-bucket-max-cardinality-estimate-required-for-influencers-response-time-cat-but-not-supplied/315533 "2022-09-30T17:22:39Z")

</div>

Hi team, I have created a runtime field (categorical field) in the Datafeed of ml job to use it as an influencer for the anomalies. I am able to find the field in the influencer section but after that when I tried to fi…

---

## [Watcher, how to create and compare arrays](https://discuss.elastic.co/t/watcher-how-to-create-and-compare-arrays/315597)

<div class="topic-metadata">

**Author:** [@sguerrero](https://discuss.elastic.co/u/sguerrero)\
**Replies:** 0\
**Last updated:** [September 30, 2022, 4:46pm UTC](https://discuss.elastic.co/t/watcher-how-to-create-and-compare-arrays/315597 "2022-09-30T16:46:14Z")

</div>

Hi. We're trying to perform an alarm with a watcher alarm but we don't know how. We have two different indices, index-1 and index-2, we need to search all events of index-1 and find all unique values of a field called f…

---

## [Custom Term Vectors](https://discuss.elastic.co/t/custom-term-vectors/315593)

<div class="topic-metadata">

**Author:** [@Tobias\_Fink](https://discuss.elastic.co/u/Tobias_Fink)\
**Replies:** 0\
**Last updated:** [September 30, 2022, 3:54pm UTC](https://discuss.elastic.co/t/custom-term-vectors/315593 "2022-09-30T15:54:22Z")

</div>

Hello, I'm trying to create custom term frequencies for terms in my documents, independent of the actual term frequencies in the document and including expansion terms that are not in the original document. Position and…

---

## [ELK Snapshots Fail:](https://discuss.elastic.co/t/elk-snapshots-fail/315474)

<div class="topic-metadata">

**Author:** [@NJMitchell](https://discuss.elastic.co/u/NJMitchell)\
**Replies:** 3\
**Last updated:** [September 30, 2022, 3:22pm UTC](https://discuss.elastic.co/t/elk-snapshots-fail/315474 "2022-09-30T15:22:04Z")

</div>

Hi elastic community, I’m have some new problems with snapshots failing. A little background: We are required to archive our log data and keep it for a long time. What we do is create a single snapshot policy per indic…

---

## [Not able to install Elasticsearch 8.4.1](https://discuss.elastic.co/t/not-able-to-install-elasticsearch-8-4-1/314650)

<div class="topic-metadata">

**Author:** [@shivang.ahd](https://discuss.elastic.co/u/shivang.ahd)\
**Replies:** 17\
**Last updated:** [September 30, 2022, 3:10pm UTC](https://discuss.elastic.co/t/not-able-to-install-elasticsearch-8-4-1/314650 "2022-09-30T15:10:39Z")

</div>

Hi, I am not able to install elasticsearch 8.4.1 I am getting the below mentioned error. will not overwrite keystore at \[C:\\ProgramData\\Elastic\\Elasticsearch\\config\\elasticsearch.keystore\], because this incurs changi…

---

## [Fleet Server not connecting to Elastic after install, x509 error](https://discuss.elastic.co/t/fleet-server-not-connecting-to-elastic-after-install-x509-error/315560)

<div class="topic-metadata">

**Author:** [@marchias](https://discuss.elastic.co/u/marchias)\
**Replies:** 0\
**Last updated:** [September 30, 2022, 1:21pm UTC](https://discuss.elastic.co/t/fleet-server-not-connecting-to-elastic-after-install-x509-error/315560 "2022-09-30T13:21:19Z")

</div>

I have deployed two Docker containers for elastic and kibana. Those two are talking to each other and working fine. I am now trying to deploy Fleet Server and have followed all the documentation and the Fleet Server and …

---

## [Missing records when using BulkProcessor (Java High Level Rest Client)](https://discuss.elastic.co/t/missing-records-when-using-bulkprocessor-java-high-level-rest-client/315576)

<div class="topic-metadata">

**Author:** [@F\_Jx](https://discuss.elastic.co/u/F_Jx)\
**Replies:** 1\
**Last updated:** [September 30, 2022, 2:29pm UTC](https://discuss.elastic.co/t/missing-records-when-using-bulkprocessor-java-high-level-rest-client/315576 "2022-09-30T14:29:45Z")

</div>

Missing records when using BulkProcessor (Java High Level Rest Client) I had exactly the same problem I use spring-boot-starter-data-elasticsearch client (elasticsearch-rest-high-level-client 7.6.2) My English not goo…

---

## [Elastic SearchSearch API - default\_allow\_partial\_results parameter](https://discuss.elastic.co/t/elastic-searchsearch-api-default-allow-partial-results-parameter/315553)

<div class="topic-metadata">

**Author:** [@edsonma](https://discuss.elastic.co/u/edsonma)\
**Replies:** 0\
**Last updated:** [September 30, 2022, 12:30pm UTC](https://discuss.elastic.co/t/elastic-searchsearch-api-default-allow-partial-results-parameter/315553 "2022-09-30T12:30:22Z")

</div>

I am working on a project and looking at ES documentation I found a query parameter allow\_partial\_search\_results. (Optional, Boolean) If true, returns partial results if there are shard request timeouts or shard failur…

---

## [Malformed action/metadata line \[1\], expected START\_OBJECT but found \[START\_ARRAY\]](https://discuss.elastic.co/t/malformed-action-metadata-line-1-expected-start-object-but-found-start-array/315528)

<div class="topic-metadata">

**Author:** [@Hemabh\_Ravee\_Fox](https://discuss.elastic.co/u/Hemabh_Ravee_Fox)\
**Replies:** 5\
**Last updated:** [September 30, 2022, 10:56am UTC](https://discuss.elastic.co/t/malformed-action-metadata-line-1-expected-start-object-but-found-start-array/315528 "2022-09-30T10:56:03Z")

</div>

I've been trying to use the bulk api to insert a large number of documents to an index. I followed the documentation and came up with the following API call - POST https://localhost:9200/index/\_bulk \[ {"create":{}}…

---

## [ElasticSearch HighLevel Rest client returns java.net.SocketTimeoutException](https://discuss.elastic.co/t/elasticsearch-highlevel-rest-client-returns-java-net-sockettimeoutexception/315537)

<div class="topic-metadata">

**Author:** [@ilBepi](https://discuss.elastic.co/u/ilBepi)\
**Replies:** 0\
**Last updated:** [September 30, 2022, 9:28am UTC](https://discuss.elastic.co/t/elasticsearch-highlevel-rest-client-returns-java-net-sockettimeoutexception/315537 "2022-09-30T09:28:41Z")

</div>

Hello, I am updating Elasticsearch from version 7.4 to 7.17. My code instantiates an ElasticSearchNode, starts it, and then creates a HighLevel Rest client to make calls to that node. The node is local to the machine,…

---

## [Send logs to specific elasic node in kubernetes](https://discuss.elastic.co/t/send-logs-to-specific-elasic-node-in-kubernetes/315534)

<div class="topic-metadata">

**Author:** [@theodor](https://discuss.elastic.co/u/theodor)\
**Replies:** 0\
**Last updated:** [September 30, 2022, 8:51am UTC](https://discuss.elastic.co/t/send-logs-to-specific-elasic-node-in-kubernetes/315534 "2022-09-30T08:51:38Z")

</div>

Hi! I have 3 nodes of Elasticsearch (el-0, el-1, el-2) each on 3 nodes of kubernetes (k8node-0, k8node-1, k8node2) . All of them master-node. Also i have 3 instance of Filebeat (fb-0, fb-1, fb-2) each on the same 3 nod…

---

## [Boost based on value of sum two fields](https://discuss.elastic.co/t/boost-based-on-value-of-sum-two-fields/314567)

<div class="topic-metadata">

**Author:** [@Ismet](https://discuss.elastic.co/u/Ismet)\
**Replies:** 5\
**Last updated:** [September 30, 2022, 8:42am UTC](https://discuss.elastic.co/t/boost-based-on-value-of-sum-two-fields/314567 "2022-09-30T08:42:14Z")

</div>

Hi, I have two inventory fields: inventory.warehouse1.availableInventory: 10 inventory.warehouse2.availableInventory: 20 I need to make a query with sum of these two fields and make a boost if total \> 0. I try to mak…

---

## [Collapse dense\_vector field in search results](https://discuss.elastic.co/t/collapse-dense-vector-field-in-search-results/315517)

<div class="topic-metadata">

**Author:** [@ruslaniv](https://discuss.elastic.co/u/ruslaniv)\
**Replies:** 1\
**Last updated:** [September 30, 2022, 8:00am UTC](https://discuss.elastic.co/t/collapse-dense-vector-field-in-search-results/315517 "2022-09-30T08:00:57Z")

</div>

Hi! Is it possible to collapse or hide a dense\_vector field in the results returned by ES? When developing, I have to send a lot of queries to ES and then inspect the results and it is getting really tiresome to scroll…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=365)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=367)
