# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=372 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 373 --- ## [How to get aggregation bucket of certain field values use as a key](https://discuss.elastic.co/t/how-to-get-aggregation-bucket-of-certain-field-values-use-as-a-key/314829)
**Author:** [@yuvraj.singh](https://discuss.elastic.co/u/yuvraj.singh)\ **Replies:** 0\ **Last updated:** [September 21, 2022, 6:10am UTC](https://discuss.elastic.co/t/how-to-get-aggregation-bucket-of-certain-field-values-use-as-a-key/314829 "2022-09-21T06:10:09Z")
\let suppose , I have some data like\ document 1 : "\_source": { "custom\_behavior": \[ { "key": "Brand", "value": "HP" … --- ## [Error to start elastic search](https://discuss.elastic.co/t/error-to-start-elastic-search/314771)
**Author:** [@tariqali250](https://discuss.elastic.co/u/tariqali250)\ **Replies:** 2\ **Last updated:** [September 21, 2022, 1:06am UTC](https://discuss.elastic.co/t/error-to-start-elastic-search/314771 "2022-09-21T01:06:26Z")
sudo journalctl -f --unit elasticsearch \<-- Logs begin at Tue 2022-09-20 06:33:24 EDT. -- Sep 20 07:11:10 localhost.localdomain systemd-entrypoint\[3613\]: at io.netty.util.concurrent.AbstractEventExecutor.safeExe… --- ## [Cannot connect to the Elasticsearch cluster](https://discuss.elastic.co/t/cannot-connect-to-the-elasticsearch-cluster/314786)
**Author:** [@jjimenez](https://discuss.elastic.co/u/jjimenez)\ **Replies:** 2\ **Last updated:** [September 20, 2022, 10:30pm UTC](https://discuss.elastic.co/t/cannot-connect-to-the-elasticsearch-cluster/314786 "2022-09-20T22:30:11Z")
Hi Everyone, I new with Kibana and Elasticsearch, I have a trouble with Kibana, when the users open Kibana show the error "Cannot connect to the Elasticsearch cluster", I search the error in the log of elasticsearch and … --- ## [How to guarantee percentage of result in multi\_match search](https://discuss.elastic.co/t/how-to-guarantee-percentage-of-result-in-multi-match-search/314792)
**Author:** [@Guilherme\_Mello](https://discuss.elastic.co/u/Guilherme_Mello)\ **Replies:** 1\ **Last updated:** [September 20, 2022, 10:28pm UTC](https://discuss.elastic.co/t/how-to-guarantee-percentage-of-result-in-multi-match-search/314792 "2022-09-20T22:28:31Z")
I have a search using multi\_match that returns products from multiple stores there is a business logic that i need to implement, which is: ensure that products from certain stores must appear on each pagination (30 ite… --- ## [JavaScript Client](https://discuss.elastic.co/t/javascript-client/314803)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 0\ **Last updated:** [September 20, 2022, 6:26pm UTC](https://discuss.elastic.co/t/javascript-client/314803 "2022-09-20T18:26:46Z")
Hi we have ELK on a server running 7.17.1 I am trying to use the JavaScript Client. I am following the instructions but I am getting this error Where buffer.constants is undefined in file 'webpack:///node\_modules/@e… --- ## [Rollover actions over custom field](https://discuss.elastic.co/t/rollover-actions-over-custom-field/314784)
**Author:** [@Nicolaegis](https://discuss.elastic.co/u/Nicolaegis)\ **Replies:** 5\ **Last updated:** [September 20, 2022, 3:50pm UTC](https://discuss.elastic.co/t/rollover-actions-over-custom-field/314784 "2022-09-20T15:50:11Z")
Hello, I would like to know if it is possible to make a rollover action for a custom date field, if not, it is possible to write a custom plugin to achieve this? Thank you --- ## [Watcher Query with filter](https://discuss.elastic.co/t/watcher-query-with-filter/314600)
**Author:** [@lchan](https://discuss.elastic.co/u/lchan)\ **Replies:** 2\ **Last updated:** [September 20, 2022, 1:45pm UTC](https://discuss.elastic.co/t/watcher-query-with-filter/314600 "2022-09-20T13:45:07Z")
Hi all, I am new and testing Watcher but for some reason I am not getting any hits count from this search. I am trying to search "Authentication failure" in the syslog index, get alerted if any hits are found in the la… --- ## [Query time increased after upgrade to ES version 8.3](https://discuss.elastic.co/t/query-time-increased-after-upgrade-to-es-version-8-3/314778)
**Author:** [@pratikshatiwari](https://discuss.elastic.co/u/pratikshatiwari)\ **Replies:** 0\ **Last updated:** [September 20, 2022, 1:33pm UTC](https://discuss.elastic.co/t/query-time-increased-after-upgrade-to-es-version-8-3/314778 "2022-09-20T13:33:49Z")
Hello We are facing an issue with elasticsearch query performance where we are trying to query elasticsearch index it is recording more than 5 second for most of the queries, we are testing through jmeter Before versio… --- ## [Documents are no longer saved after high disk watermark exceeded on an elasticsearch cluster](https://discuss.elastic.co/t/documents-are-no-longer-saved-after-high-disk-watermark-exceeded-on-an-elasticsearch-cluster/313975)
**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\ **Replies:** 9\ **Last updated:** [September 19, 2022, 2:53pm UTC](https://discuss.elastic.co/t/documents-are-no-longer-saved-after-high-disk-watermark-exceeded-on-an-elasticsearch-cluster/313975 "2022-09-19T14:53:28Z")
Hi everyone, I have a question about how load balance work on an elasticsearch servers cluster. The cluster is composed by : 4 "master, data" nodes, 2 "data" nodes 1 "coordinator" node The warning "high disk waterma… --- ## [Slow querying of elasticsearch logs](https://discuss.elastic.co/t/slow-querying-of-elasticsearch-logs/314751)
**Author:** [@Faisal\_Umer](https://discuss.elastic.co/u/Faisal_Umer)\ **Replies:** 5\ **Last updated:** [September 20, 2022, 10:44am UTC](https://discuss.elastic.co/t/slow-querying-of-elasticsearch-logs/314751 "2022-09-20T10:44:35Z")
We have an index with 90 primaries & 0 replicas and a new index is created each day. The volume grows up to 7-8TB per day. We have lifecycle policies where the index is moved from hot to warm nodes after 3 days and then … --- ## [Creating alert for low disk space (any server had less than 200mb free space for the /mount/logs mount point))](https://discuss.elastic.co/t/creating-alert-for-low-disk-space-any-server-had-less-than-200mb-free-space-for-the-mount-logs-mount-point/314769)
**Author:** [@Madhu24](https://discuss.elastic.co/u/Madhu24)\ **Replies:** 0\ **Last updated:** [September 20, 2022, 10:23am UTC](https://discuss.elastic.co/t/creating-alert-for-low-disk-space-any-server-had-less-than-200mb-free-space-for-the-mount-logs-mount-point/314769 "2022-09-20T10:23:45Z")
Can anyome help to write how can write a scrit to trigger notification to a slack channel using below sample and how to add aggregations for this and conditon as well. Thanks { "trigger": { "schedule": "60m" } }, "… --- ## [ElasticSearch: DSL Query](https://discuss.elastic.co/t/elasticsearch-dsl-query/314767)
**Author:** [@SalvoDM91](https://discuss.elastic.co/u/SalvoDM91)\ **Replies:** 0\ **Last updated:** [September 20, 2022, 9:58am UTC](https://discuss.elastic.co/t/elasticsearch-dsl-query/314767 "2022-09-20T09:58:49Z")
Hi guys, I am opening this topic because I have a problem with a large amount of data (14M). My dataset is composed as follows: {"h":{"id":"AA001","process":"AK01","update-timestamp":1663665372171}} {"h":{"id":"AA002",… --- ## [Cluster ElasticSearch Red](https://discuss.elastic.co/t/cluster-elasticsearch-red/314757)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 5\ **Last updated:** [September 20, 2022, 9:10am UTC](https://discuss.elastic.co/t/cluster-elasticsearch-red/314757 "2022-09-20T09:10:10Z")
Hello everyone, here is my problem, I have my elastic cluster with a red status. I used this api : http://localhost:9200/\_cluster/health Answer: { cluster\_name : "elasticsearch", status : "red", timed\_out : false, num… --- ## [Datastream rollover without dated](https://discuss.elastic.co/t/datastream-rollover-without-dated/314710)
**Author:** [@talShtark](https://discuss.elastic.co/u/talShtark)\ **Replies:** 2\ **Last updated:** [September 20, 2022, 8:41am UTC](https://discuss.elastic.co/t/datastream-rollover-without-dated/314710 "2022-09-20T08:41:30Z")
Hello, Im completely new to ES :slight\_smile: I create some indices and index template - "logs", with a datastream. The index template is attached to an Index Lifecycle Policy with automatic rollover (default settings… --- ## [Elasticsearch snapshot how it works](https://discuss.elastic.co/t/elasticsearch-snapshot-how-it-works/314711)
**Author:** [@xalastoi](https://discuss.elastic.co/u/xalastoi)\ **Replies:** 4\ **Last updated:** [September 20, 2022, 8:39am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-how-it-works/314711 "2022-09-20T08:39:29Z")
i want to understand how snapshot works in elasticsearch case1 snapshots are taken every day and snapshots older than 1 month are deleted I have an index cities and for example there are 3 documents { barcelona, ​​madrid… --- ## [Fetch Last 15 minute of data](https://discuss.elastic.co/t/fetch-last-15-minute-of-data/314695)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 4\ **Last updated:** [September 20, 2022, 6:56am UTC](https://discuss.elastic.co/t/fetch-last-15-minute-of-data/314695 "2022-09-20T06:56:58Z")
Here is my query for fetching the result of today last 15 minutes { "query": { "bool": { "filter": \[ { "bool": { "should": \[ { "match\_phrase": { … --- ## [8.2 S3 SETUP](https://discuss.elastic.co/t/8-2-s3-setup/314345)
**Author:** [@Harper\_S1](https://discuss.elastic.co/u/Harper_S1)\ **Replies:** 6\ **Last updated:** [September 20, 2022, 6:56am UTC](https://discuss.elastic.co/t/8-2-s3-setup/314345 "2022-09-20T06:56:25Z")
Hi Everyone, I have installed the ELK 8.2 stack but getting issue while setting up the s3 repo. Its our internal repo which works as a S3 and it worked fine till 7.16 version. but for this 8.2 version getting the follo… --- ## [Access aggregation key inside script](https://discuss.elastic.co/t/access-aggregation-key-inside-script/314739)
**Author:** [@WeiJun0827](https://discuss.elastic.co/u/WeiJun0827)\ **Replies:** 0\ **Last updated:** [September 20, 2022, 6:20am UTC](https://discuss.elastic.co/t/access-aggregation-key-inside-script/314739 "2022-09-20T06:20:16Z")
Hello, I'm working on Elasticsearch v7.10. I stored the result of each game as a doc. The players and their scores were stored in users and scores arrays. Sample data : \[ { "gameId": "game01", "users": \[ … --- ## [ODBC failed connection to remote ES server](https://discuss.elastic.co/t/odbc-failed-connection-to-remote-es-server/314659)
**Author:** [@jimmykathuria](https://discuss.elastic.co/u/jimmykathuria)\ **Replies:** 1\ **Last updated:** [September 20, 2022, 2:04am UTC](https://discuss.elastic.co/t/odbc-failed-connection-to-remote-es-server/314659 "2022-09-20T02:04:57Z")
security\_exception: current license is non-compliant for \[odbc\] --- ## [Connection refused errror for python elasticsearch client 6.8.22](https://discuss.elastic.co/t/connection-refused-errror-for-python-elasticsearch-client-6-8-22/314504)
**Author:** [@febryjose](https://discuss.elastic.co/u/febryjose)\ **Replies:** 1\ **Last updated:** [September 20, 2022, 12:03am UTC](https://discuss.elastic.co/t/connection-refused-errror-for-python-elasticsearch-client-6-8-22/314504 "2022-09-20T00:03:06Z")
Hello Team, I am facing issues related to python elasticsearch client, we have 3 VMs where elasticsearch is installed and we are using python to create elasticsearch client with host \[ip1,ip2,ip3\]. But connection refuse… --- ## [How to achieve Elasticsearch aggregation by grids of specific size?](https://discuss.elastic.co/t/how-to-achieve-elasticsearch-aggregation-by-grids-of-specific-size/314725)
**Author:** [@Daniel\_Garcia](https://discuss.elastic.co/u/Daniel_Garcia)\ **Replies:** 0\ **Last updated:** [September 19, 2022, 10:02pm UTC](https://discuss.elastic.co/t/how-to-achieve-elasticsearch-aggregation-by-grids-of-specific-size/314725 "2022-09-19T22:02:40Z")
Basically, what I have is a polygon that I use to filter my data through a Geoshape query. What I would like to achieve is to apply an Elasticsearch aggregation to that query that gives me a bucket for every grid of an s… --- ## [Aggregating an index with parent-child runs forever](https://discuss.elastic.co/t/aggregating-an-index-with-parent-child-runs-forever/313624)
**Author:** [@t0mer](https://discuss.elastic.co/u/t0mer)\ **Replies:** 3\ **Last updated:** [September 19, 2022, 4:45pm UTC](https://discuss.elastic.co/t/aggregating-an-index-with-parent-child-runs-forever/313624 "2022-09-19T16:45:52Z")
Hi, I've recently decided to make an attempt to reindex an existing denormalized index to a new index with parent-chid relation. I've around 14M parent docs, each parent has up to 400 children. (total of around 270M do… --- ## [Elasticsearch 6 to 7 scoring change](https://discuss.elastic.co/t/elasticsearch-6-to-7-scoring-change/314709)
**Author:** [@mask](https://discuss.elastic.co/u/mask)\ **Replies:** 1\ **Last updated:** [September 19, 2022, 3:40pm UTC](https://discuss.elastic.co/t/elasticsearch-6-to-7-scoring-change/314709 "2022-09-19T15:40:47Z")
My service which run with Elasticsearch 6.4 has a function score query with boost and weight to find the most match document for user. After migrate to Elasticsearch 7.10 (same mapping, number of shards, data count) I fo… --- ## [Certificate error -javax.net.ssl.SSLHandshakeException: Received fatal alert: decrypt\_error](https://discuss.elastic.co/t/certificate-error-javax-net-ssl-sslhandshakeexception-received-fatal-alert-decrypt-error/314524)
**Author:** [@elkstack1](https://discuss.elastic.co/u/elkstack1)\ **Replies:** 1\ **Last updated:** [September 19, 2022, 3:19pm UTC](https://discuss.elastic.co/t/certificate-error-javax-net-ssl-sslhandshakeexception-received-fatal-alert-decrypt-error/314524 "2022-09-19T15:19:13Z")
Getting the below error while trying to access elasticsearch https://\/9200 and it says connection is not secure DecoderException: javax.net.ssl.SSLHandshakeException: Received fatal alert: decrypt\_error … --- ## [ES 2.14 search query upgrade to ES 8.x](https://discuss.elastic.co/t/es-2-14-search-query-upgrade-to-es-8-x/314701)
**Author:** [@VV1002](https://discuss.elastic.co/u/VV1002)\ **Replies:** 0\ **Last updated:** [September 19, 2022, 2:13pm UTC](https://discuss.elastic.co/t/es-2-14-search-query-upgrade-to-es-8-x/314701 "2022-09-19T14:13:58Z")
Hi ES Team, I have a search query which is written in ES 2.14. How do I upgrade that query to version 8.X ? I am confused about how to alter the filter bool query(2.14) because its now filter context and not sure how to… --- ## [Sorting by Fields After Text Score](https://discuss.elastic.co/t/sorting-by-fields-after-text-score/314673)
**Author:** [@AymanHamdoun](https://discuss.elastic.co/u/AymanHamdoun)\ **Replies:** 1\ **Last updated:** [September 19, 2022, 12:37pm UTC](https://discuss.elastic.co/t/sorting-by-fields-after-text-score/314673 "2022-09-19T12:37:35Z")
Hello, I was wondering if elastic has the ability to sort by certain indexed fields in a document but not prioritize them over the textual match... For instance, lets say i have an index of products that has the follow… --- ## [How to store documents (word/ppt/excel/pdf) and search its content using elastic search](https://discuss.elastic.co/t/how-to-store-documents-word-ppt-excel-pdf-and-search-its-content-using-elastic-search/314674)
**Author:** [@avinash.parameswaran](https://discuss.elastic.co/u/avinash.parameswaran)\ **Replies:** 1\ **Last updated:** [September 19, 2022, 10:26am UTC](https://discuss.elastic.co/t/how-to-store-documents-word-ppt-excel-pdf-and-search-its-content-using-elastic-search/314674 "2022-09-19T10:26:15Z")
How to store document as blob to create indexes and search document content as full text search?Any suggestion on above approach to proceed would be helpful Thanks. --- ## [High CPU usage caused by Lucene merge thread](https://discuss.elastic.co/t/high-cpu-usage-caused-by-lucene-merge-thread/314664)
**Author:** [@kent010341](https://discuss.elastic.co/u/kent010341)\ **Replies:** 5\ **Last updated:** [September 19, 2022, 9:07am UTC](https://discuss.elastic.co/t/high-cpu-usage-caused-by-lucene-merge-thread/314664 "2022-09-19T09:07:20Z")
I run ELK stack, APM server, and Metricbeat (Docker and System module) with Docker. The Logstash is used for reading log files, and both the APM server and Metricbeat are for monitoring with a period of 10 seconds. Som… --- ## [Show number as percentile in elasticsearch DSL](https://discuss.elastic.co/t/show-number-as-percentile-in-elasticsearch-dsl/314506)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 5\ **Last updated:** [September 19, 2022, 9:01am UTC](https://discuss.elastic.co/t/show-number-as-percentile-in-elasticsearch-dsl/314506 "2022-09-19T09:01:38Z")
Sample data Name response\_code abc 6780 abc2 9999 abc3 1000 abc4 3456 . . . abc20 9700 I want two perform following task Show those response\_code whoes value is greater than 3000 Sh… --- ## [Post\_filter on aggregated results](https://discuss.elastic.co/t/post-filter-on-aggregated-results/314671)
**Author:** [@Emna\_Jaoua](https://discuss.elastic.co/u/Emna_Jaoua)\ **Replies:** 0\ **Last updated:** [September 19, 2022, 7:58am UTC](https://discuss.elastic.co/t/post-filter-on-aggregated-results/314671 "2022-09-19T07:58:18Z")
Hello everyone, I have some trouble filtering on aggregated results although the post\_filter is applied on the nested path. To give some context, I m aggregating on nested path aggregationTr.subField.countryId using thi… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=371) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=373)