# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=371

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 372

---

## [Dividing buckets values](https://discuss.elastic.co/t/dividing-buckets-values/314938)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 2\
**Last updated:** [September 22, 2022, 3:13pm UTC](https://discuss.elastic.co/t/dividing-buckets-values/314938 "2022-09-22T15:13:33Z")

</div>

Hi Community, Below is my query. It is performing count no. of response\_code and total no. of response\_code using filters aggregation. I want to divide response\_code by total no of response\_code For dividing i used bu…

---

## [Data Storage](https://discuss.elastic.co/t/data-storage/314846)

<div class="topic-metadata">

**Author:** [@ibtissem\_Ben\_lafi](https://discuss.elastic.co/u/ibtissem_Ben_lafi)\
**Replies:** 12\
**Last updated:** [September 22, 2022, 2:01pm UTC](https://discuss.elastic.co/t/data-storage/314846 "2022-09-22T14:01:19Z")

</div>

Hello eveyone, I have an issue: The size of the data is not the same in MySQL and Elasticsearch . What can I do for this problem? Someone help me, please

---

## [Elasticsearch cluster doesn't work when docker on machine is installed](https://discuss.elastic.co/t/elasticsearch-cluster-doesnt-work-when-docker-on-machine-is-installed/314952)

<div class="topic-metadata">

**Author:** [@simo385](https://discuss.elastic.co/u/simo385)\
**Replies:** 0\
**Last updated:** [September 22, 2022, 1:57pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-doesnt-work-when-docker-on-machine-is-installed/314952 "2022-09-22T13:57:10Z")

</div>

Hi Everybody, I have setup an Elasticsearch\[8.4\] cluster (2 nodes) in my aws ec2 machines as follows: EC2\_1 (private IP: 172.31.1.1/32, docker-bridge range: 172.17.0.1/16) --\> in this ec2 I've installed Kubernetes mas…

---

## [Elasticsearch filter plugin for data enrichment](https://discuss.elastic.co/t/elasticsearch-filter-plugin-for-data-enrichment/314944)

<div class="topic-metadata">

**Author:** [@Hamza\_Khalid](https://discuss.elastic.co/u/Hamza_Khalid)\
**Replies:** 0\
**Last updated:** [September 22, 2022, 12:35pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-plugin-for-data-enrichment/314944 "2022-09-22T12:35:27Z")

</div>

i have indexed 2 tables from mysql to elasticsearch: user\_index: { id : 1, name : user\_name, hobbies : 1,2 } hobbies\_index: { id : 1, name : hobby1 } id : 2, name : hobby2 } i want to enrich my document a…

---

## [Deep Hierarchy with Count](https://discuss.elastic.co/t/deep-hierarchy-with-count/314943)

<div class="topic-metadata">

**Author:** [@m-dot-jung](https://discuss.elastic.co/u/m-dot-jung)\
**Replies:** 0\
**Last updated:** [September 22, 2022, 12:28pm UTC](https://discuss.elastic.co/t/deep-hierarchy-with-count/314943 "2022-09-22T12:28:06Z")

</div>

Hi, I tried modelling a document hierarchy where each record might have a parent record. The maximum depth of this hierarchy is variable. Now, I want to query for certain documents by ID the number of children - best w…

---

## [Authentication failed for Elasticsearch and Kibana](https://discuss.elastic.co/t/authentication-failed-for-elasticsearch-and-kibana/314931)

<div class="topic-metadata">

**Author:** [@Ahsan\_Yazdani](https://discuss.elastic.co/u/Ahsan_Yazdani)\
**Replies:** 0\
**Last updated:** [September 22, 2022, 9:45am UTC](https://discuss.elastic.co/t/authentication-failed-for-elasticsearch-and-kibana/314931 "2022-09-22T09:45:45Z")

</div>

I have download Kibana from git clone directory according to the instructions mentioned in a question on elastic.co like this: git clone https://github.com/\[YOUR\_USERNAME\]/kibana.git kibana cd kibana git fetch origin …

---

## [Elastic Search Not Reflecting Database Changes](https://discuss.elastic.co/t/elastic-search-not-reflecting-database-changes/314916)

<div class="topic-metadata">

**Author:** [@Binish\_Shams](https://discuss.elastic.co/u/Binish_Shams)\
**Replies:** 3\
**Last updated:** [September 22, 2022, 8:54am UTC](https://discuss.elastic.co/t/elastic-search-not-reflecting-database-changes/314916 "2022-09-22T08:54:12Z")

</div>

Hello we are using Elasticsearch version 7.16.2. We having synced our Elasticsearch with database using listeners. Usually the Elasticsearch reflects the database changes within no time but once it happened that it took …

---

## [Getting count using aggregation](https://discuss.elastic.co/t/getting-count-using-aggregation/314837)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 4\
**Last updated:** [September 22, 2022, 8:19am UTC](https://discuss.elastic.co/t/getting-count-using-aggregation/314837 "2022-09-22T08:19:59Z")

</div>

Hi Team, { "query": { "bool": { "filter": \[ { "bool": { "should":{ "range": { "@timestamp": { "gte": "now-15m" } } …

---

## [RDBMS Query transforms to Elasticsearch Query DSL](https://discuss.elastic.co/t/rdbms-query-transforms-to-elasticsearch-query-dsl/314907)

<div class="topic-metadata">

**Author:** [@Pranjal\_Sett](https://discuss.elastic.co/u/Pranjal_Sett)\
**Replies:** 1\
**Last updated:** [September 22, 2022, 7:26am UTC](https://discuss.elastic.co/t/rdbms-query-transforms-to-elasticsearch-query-dsl/314907 "2022-09-22T07:26:48Z")

</div>

Hi, I wanted to transform the RDBMS query into elasticsearch query DSL. So the RDBMS query is like below: sum(1) where \<art1\> = TODAY() and \<atr2\> = ’K’ and \<atr3\> \<\> 0 and \<atr4\> = 0 And I have transformed that abov…

---

## [How to use offset in DateHistogram.Builder from new java api client](https://discuss.elastic.co/t/how-to-use-offset-in-datehistogram-builder-from-new-java-api-client/314921)

<div class="topic-metadata">

**Author:** [@Raghunandan](https://discuss.elastic.co/u/Raghunandan)\
**Replies:** 0\
**Last updated:** [September 22, 2022, 7:25am UTC](https://discuss.elastic.co/t/how-to-use-offset-in-datehistogram-builder-from-new-java-api-client/314921 "2022-09-22T07:25:35Z")

</div>

in old implementation of DateHistogramAggregationBuilder we could pass offset as string, dateHistogramAggregationBuilder.offset(configurationManagementProxy.getStartDayOfWeek() - 1) + "d"); now it requires the offset v…

---

## [How to limit data from source index when rollup data at first time](https://discuss.elastic.co/t/how-to-limit-data-from-source-index-when-rollup-data-at-first-time/314917)

<div class="topic-metadata">

**Author:** [@Be-poz](https://discuss.elastic.co/u/Be-poz)\
**Replies:** 0\
**Last updated:** [September 22, 2022, 6:51am UTC](https://discuss.elastic.co/t/how-to-limit-data-from-source-index-when-rollup-data-at-first-time/314917 "2022-09-22T06:51:34Z")

</div>

hi, i'm now using rollup to summary my own data. problem is that the data i'm trying to rollup is too big. it takes a lot of time to rollup and also it affects the performance of es cluster. so i wonder if there is any…

---

## [Unable connect to a .Net 5 project using cloudconnectionpool](https://discuss.elastic.co/t/unable-connect-to-a-net-5-project-using-cloudconnectionpool/314910)

<div class="topic-metadata">

**Author:** [@shrimdog](https://discuss.elastic.co/u/shrimdog)\
**Replies:** 0\
**Last updated:** [September 22, 2022, 4:33am UTC](https://discuss.elastic.co/t/unable-connect-to-a-net-5-project-using-cloudconnectionpool/314910 "2022-09-22T04:33:28Z")

</div>

Hi Everyone I wanted to use cloudconnectionpool to connect my local .Net 5 project using NEST API since I have deployed elastic cloud. I have posted some sample data into the Elasticsearch using postman and it works wh…

---

## [Search multiple fields using multiple text values](https://discuss.elastic.co/t/search-multiple-fields-using-multiple-text-values/314903)

<div class="topic-metadata">

**Author:** [@sadiki-dev](https://discuss.elastic.co/u/sadiki-dev)\
**Replies:** 2\
**Last updated:** [September 22, 2022, 1:28am UTC](https://discuss.elastic.co/t/search-multiple-fields-using-multiple-text-values/314903 "2022-09-22T01:28:50Z")

</div>

I work with address searching. and I want to search with two formats (multiple values) of an adress using multiple fields. adress is a text input not a keyword. For example : user\_address = 88 South East Street Raeford…

---

## [I have installed a Search guard Plugin in ELK 7.17.3 VERSION IN Windows, but the ELK Cluster is not starting up](https://discuss.elastic.co/t/i-have-installed-a-search-guard-plugin-in-elk-7-17-3-version-in-windows-but-the-elk-cluster-is-not-starting-up/314882)

<div class="topic-metadata">

**Author:** [@AKCG23](https://discuss.elastic.co/u/AKCG23)\
**Replies:** 3\
**Last updated:** [September 22, 2022, 12:15am UTC](https://discuss.elastic.co/t/i-have-installed-a-search-guard-plugin-in-elk-7-17-3-version-in-windows-but-the-elk-cluster-is-not-starting-up/314882 "2022-09-22T00:15:35Z")

</div>

I have the ELK Cluster(7.17.3)\* on the Windows 2019 Server. I have installed Search Guard Plugin. But after the plugin install the ELK Cluster nodes will not start up. It gives an error \`\`\` Javalang Illegalstateexcep…

---

## [ElasticsearchStatusException\[Unable to parse response body\] \[HTTP/1.1 301 Moved Permanently\]](https://discuss.elastic.co/t/elasticsearchstatusexception-unable-to-parse-response-body-http-1-1-301-moved-permanently/314888)

<div class="topic-metadata">

**Author:** [@Jai\_Tripathi](https://discuss.elastic.co/u/Jai_Tripathi)\
**Replies:** 3\
**Last updated:** [September 21, 2022, 8:13pm UTC](https://discuss.elastic.co/t/elasticsearchstatusexception-unable-to-parse-response-body-http-1-1-301-moved-permanently/314888 "2022-09-21T20:13:59Z")

</div>

Hello Everyone, Key Points: I am able to get response from Elastic search (deployed on AWS) using postman at my machine. However when I am trying to use elasticsearch API to get the response, I am getting Elasticsearc…

---

## [Tips on mirroring Elasticsearch plugin repos?](https://discuss.elastic.co/t/tips-on-mirroring-elasticsearch-plugin-repos/314893)

<div class="topic-metadata">

**Author:** [@clueless\_chris](https://discuss.elastic.co/u/clueless_chris)\
**Replies:** 0\
**Last updated:** [September 21, 2022, 7:45pm UTC](https://discuss.elastic.co/t/tips-on-mirroring-elasticsearch-plugin-repos/314893 "2022-09-21T19:45:25Z")

</div>

Hello, I've seen some similar questions on the forum, but wanted to see if I could get any official input on this. Is there any way to properly mirror the Elasticsearch plugins that are in: https://artifacts.elastic.co/…

---

## [Error migrating legacy index templates to composable](https://discuss.elastic.co/t/error-migrating-legacy-index-templates-to-composable/314885)

<div class="topic-metadata">

**Author:** [@Bob\_Penrod](https://discuss.elastic.co/u/Bob_Penrod)\
**Replies:** 0\
**Last updated:** [September 21, 2022, 5:15pm UTC](https://discuss.elastic.co/t/error-migrating-legacy-index-templates-to-composable/314885 "2022-09-21T17:15:16Z")

</div>

I'm running into errors on ES 7.17 migrating "legacy" index templates to the new composable style. Given the following two templates, creating the 2nd gets an error: PUT \_index\_template/test\_template\_1 { "index\_patte…

---

## [Sliced scroll returning more hits than normal search (without slice)](https://discuss.elastic.co/t/sliced-scroll-returning-more-hits-than-normal-search-without-slice/314599)

<div class="topic-metadata">

**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\
**Replies:** 3\
**Last updated:** [September 21, 2022, 2:36pm UTC](https://discuss.elastic.co/t/sliced-scroll-returning-more-hits-than-normal-search-without-slice/314599 "2022-09-21T14:36:03Z")

</div>

In short, normal search hits \< scroll slice 1 hits + scroll slice 2 hits When I add up sliced scroll hits, it is more than total no of documents returned from single search. Normal search query GET index\*/\_search { …

---

## [Real estate property likes and views](https://discuss.elastic.co/t/real-estate-property-likes-and-views/314758)

<div class="topic-metadata">

**Author:** [@mohammedsajidkhaleel](https://discuss.elastic.co/u/mohammedsajidkhaleel)\
**Replies:** 3\
**Last updated:** [September 21, 2022, 2:20pm UTC](https://discuss.elastic.co/t/real-estate-property-likes-and-views/314758 "2022-09-21T14:20:06Z")

</div>

Am working on a property finder project. We are using Elasticsearch to enable flexibility for user to search property. We have option in our app to show whether a user viewed a property before or no while its listed and …

---

## [Java API Client - GetResponse source null values converted to String "null"](https://discuss.elastic.co/t/java-api-client-getresponse-source-null-values-converted-to-string-null/314808)

<div class="topic-metadata">

**Author:** [@nsorauf](https://discuss.elastic.co/u/nsorauf)\
**Replies:** 2\
**Last updated:** [September 21, 2022, 1:32pm UTC](https://discuss.elastic.co/t/java-api-client-getresponse-source-null-values-converted-to-string-null/314808 "2022-09-21T13:32:25Z")

</div>

Hi, I'm working with the new Java client, v8.3.3. I'm trying to do the following: take a source from a GetResponse\<JsonData\> create a Jakarta JsonObjectBuilder from that JsonData source use an ObjectMapper to convert…

---

## [S3 snapshot failing with error Member must have length greater than or equal to 20](https://discuss.elastic.co/t/s3-snapshot-failing-with-error-member-must-have-length-greater-than-or-equal-to-20/314866)

<div class="topic-metadata">

**Author:** [@Maksym\_Postument](https://discuss.elastic.co/u/Maksym_Postument)\
**Replies:** 1\
**Last updated:** [September 21, 2022, 12:29pm UTC](https://discuss.elastic.co/t/s3-snapshot-failing-with-error-member-must-have-length-greater-than-or-equal-to-20/314866 "2022-09-21T12:29:39Z")

</div>

Hello, i m trying to configure s3 backup on cluster created with eck. I createad iam role and service account. Specified pods to use this service account. Then i added initcontainer initContainers: …

---

## [Using Java api client with json method not found error in 7.17.1](https://discuss.elastic.co/t/using-java-api-client-with-json-method-not-found-error-in-7-17-1/314825)

<div class="topic-metadata">

**Author:** [@Raghunandan](https://discuss.elastic.co/u/Raghunandan)\
**Replies:** 3\
**Last updated:** [September 21, 2022, 12:29pm UTC](https://discuss.elastic.co/t/using-java-api-client-with-json-method-not-found-error-in-7-17-1/314825 "2022-09-21T12:29:04Z")

</div>

Not able to find withJson method in any of elasticsearch request and response in version 7.17.1 where it is mentioned in all documentation. If there is no way to use it , what alternative can be used in 7.17.1 to use jso…

---

## ["No mapping found for \[@timestamp\] in order to sort on"](https://discuss.elastic.co/t/no-mapping-found-for-timestamp-in-order-to-sort-on/314855)

<div class="topic-metadata">

**Author:** [@Sarindra\_Therese](https://discuss.elastic.co/u/Sarindra_Therese)\
**Replies:** 4\
**Last updated:** [September 21, 2022, 11:56am UTC](https://discuss.elastic.co/t/no-mapping-found-for-timestamp-in-order-to-sort-on/314855 "2022-09-21T11:56:24Z")

</div>

Hey, I have this error: {"error":{"root\_cause":\[{"type":"query\_shard\_exception","reason":"No mapping found for \[@timestamp\] in order to sort on","index\_uuid":"0qKrRe3tQbKYhi5ps\_WcCw","index":"products"}\],"type":"search\_…

---

## [Failed on parsing mappings on index creation \[nyc\_taxis\]](https://discuss.elastic.co/t/failed-on-parsing-mappings-on-index-creation-nyc-taxis/313977)

<div class="topic-metadata">

**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\
**Replies:** 8\
**Last updated:** [September 21, 2022, 11:03am UTC](https://discuss.elastic.co/t/failed-on-parsing-mappings-on-index-creation-nyc-taxis/313977 "2022-09-21T11:03:49Z")

</div>

Hi All, I got below error while running benchmarking with nyc\_taxis track. failed on parsing mappings on index creation \[nyc\_taxis\]", "ecs.version": "1.2.0","service.name":"ES\_ECS","event.dataset":"elasticsearch.server…

---

## [Unbalanced Cluster I/O Operations](https://discuss.elastic.co/t/unbalanced-cluster-i-o-operations/313661)

<div class="topic-metadata">

**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\
**Replies:** 3\
**Last updated:** [September 21, 2022, 10:42am UTC](https://discuss.elastic.co/t/unbalanced-cluster-i-o-operations/313661 "2022-09-21T10:42:51Z")

</div>

Hello, I have a 3 master/data nodes cluster + 1 kibana client node using elasticsearch version 7.17.4 The cluster is deployed on Nutanix. I'm using auditbeat, packetbeat, filebeat and elastic agent as sources of data. …

---

## [Security index is unavailable](https://discuss.elastic.co/t/security-index-is-unavailable/314824)

<div class="topic-metadata">

**Author:** [@rkulanga](https://discuss.elastic.co/u/rkulanga)\
**Replies:** 12\
**Last updated:** [September 21, 2022, 10:32am UTC](https://discuss.elastic.co/t/security-index-is-unavailable/314824 "2022-09-21T10:32:02Z")

</div>

Hi, Due to the low disk space (95% used) on my system goes down. Then I have removed some files from the indices directory and restart both Kibana and Elasticsearch service. But system is not working now. According to…

---

## [How to filter the results based on a condition if there is a whole word match from y attribute in x attribute](https://discuss.elastic.co/t/how-to-filter-the-results-based-on-a-condition-if-there-is-a-whole-word-match-from-y-attribute-in-x-attribute/314843)

<div class="topic-metadata">

**Author:** [@arsoni20](https://discuss.elastic.co/u/arsoni20)\
**Replies:** 0\
**Last updated:** [September 21, 2022, 8:46am UTC](https://discuss.elastic.co/t/how-to-filter-the-results-based-on-a-condition-if-there-is-a-whole-word-match-from-y-attribute-in-x-attribute/314843 "2022-09-21T08:46:07Z")

</div>

I want to do filtering based on a whole word match in Elasticsearch. e.g. POST /company/1 { "name": "Hemani", "age" : 23, "experienceInYears" : 2, "role" : "Python developer", "object" :{ "link":"Python, Scala, R" } …

---

## [Elastic Timeout not working](https://discuss.elastic.co/t/elastic-timeout-not-working/314791)

<div class="topic-metadata">

**Author:** [@painless\_elastic](https://discuss.elastic.co/u/painless_elastic)\
**Replies:** 5\
**Last updated:** [September 21, 2022, 7:18am UTC](https://discuss.elastic.co/t/elastic-timeout-not-working/314791 "2022-09-21T07:18:47Z")

</div>

When I am passing the timeout value 1ms in the request, still the result is coming with took value being more than 1ms. How does this timeout value work? Request - GET dco-preview/\_search { "timeout": "10ms", "qu…

---

## [For exporting data shoud we use scroll or pit with search after?](https://discuss.elastic.co/t/for-exporting-data-shoud-we-use-scroll-or-pit-with-search-after/314475)

<div class="topic-metadata">

**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\
**Replies:** 4\
**Last updated:** [September 21, 2022, 7:13am UTC](https://discuss.elastic.co/t/for-exporting-data-shoud-we-use-scroll-or-pit-with-search-after/314475 "2022-09-21T07:13:32Z")

</div>

For exporting data shoud we use scroll or pit with search after? Documentation says not to use scroll for deep pagination. Assume that the data which we are querying would not change.

---

## [Unknown key for a START\_OBJECT in \[3\]](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-3/314777)

<div class="topic-metadata">

**Author:** [@Rain\_Water](https://discuss.elastic.co/u/Rain_Water)\
**Replies:** 3\
**Last updated:** [September 21, 2022, 6:31am UTC](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-3/314777 "2022-09-21T06:31:24Z")

</div>

Hi all, im getting this error on aggs query and i want to do multiple aggregation can you pls help here. { "error" : { "root\_cause" : \[ { "type" : "parsing\_exception", "reason" : "Unknown ke…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=370)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=372)
