# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=382 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 383 --- ## [How to add additional timestamp field in an index](https://discuss.elastic.co/t/how-to-add-additional-timestamp-field-in-an-index/313346)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 10:38am UTC](https://discuss.elastic.co/t/how-to-add-additional-timestamp-field-in-an-index/313346 "2022-08-31T10:38:25Z")
pipeline file date { match =\>\["\[event\]\[time\]","YYYY-MM-dd HH:mm:ss.SSS"\] target =\> "time" } however when i do GET my\_index/\_mapping there is no time field , my objective is two have two field one is @timestamp defaul… --- ## [NEST: inference derived class into base class using condition with automapping](https://discuss.elastic.co/t/nest-inference-derived-class-into-base-class-using-condition-with-automapping/313348)
**Author:** [@Alex83](https://discuss.elastic.co/u/Alex83)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 10:48am UTC](https://discuss.elastic.co/t/nest-inference-derived-class-into-base-class-using-condition-with-automapping/313348 "2022-08-31T10:48:47Z")
Hi, i have in my model an object type "Order" that it contains a property of type "Customer". Customer is a base class with some tipically fields (customerType, name, surname, etc.) and its a base class because customer… --- ## [What's the cause of this prob and what's the solution](https://discuss.elastic.co/t/whats-the-cause-of-this-prob-and-whats-the-solution/313086)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 12\ **Last updated:** [August 31, 2022, 10:32am UTC](https://discuss.elastic.co/t/whats-the-cause-of-this-prob-and-whats-the-solution/313086 "2022-08-31T10:32:13Z")
what's the cause of this prob and what's the solution when i want to create a token for kibana ileged$0(SocketAccess.java:42) ~\[?:?\] at java.security.AccessController.doPrivileged(AccessController.java:569) ~\[?:… --- ## [Elastic certificates](https://discuss.elastic.co/t/elastic-certificates/313340)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 9:55am UTC](https://discuss.elastic.co/t/elastic-certificates/313340 "2022-08-31T09:55:03Z")
Hello, it's is necessary when i install Elasticsearch and Kibana i should configure the elastic certificates in this doc ici : elasticsearch-certutil | Elasticsearch Guide \[8.4\] | Elastic thanks. --- ## [Elasticsearch disk usage issue](https://discuss.elastic.co/t/elasticsearch-disk-usage-issue/313338)
**Author:** [@xalastoi](https://discuss.elastic.co/u/xalastoi)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 9:39am UTC](https://discuss.elastic.co/t/elasticsearch-disk-usage-issue/313338 "2022-08-31T09:39:36Z")
Hello! i have a strange issue in my elasticsearch cluster so i have 5 nodes ( 4 data and masters and 1 master only node ) so each node has 5.7 tb disk space on it but on the first node my disk is almost completely ful… --- ## [Inquiry about the configuration of network.host in elasticsearch.yml](https://discuss.elastic.co/t/inquiry-about-the-configuration-of-network-host-in-elasticsearch-yml/313329)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 3\ **Last updated:** [August 31, 2022, 9:06am UTC](https://discuss.elastic.co/t/inquiry-about-the-configuration-of-network-host-in-elasticsearch-yml/313329 "2022-08-31T09:06:40Z")
I already installed Elasticsearch 8.4.0 in ubuntu and I find in the elasticsearch.yml file that the HTTP.host: 0.0.0.0 and #transport.host: 0.0.0.0 is that mean that I should put the network.host also 0.0.0.0 ?? than… --- ## [What's the cause and the solution of this problem plz](https://discuss.elastic.co/t/whats-the-cause-and-the-solution-of-this-problem-plz/313269)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 3\ **Last updated:** [August 31, 2022, 9:05am UTC](https://discuss.elastic.co/t/whats-the-cause-and-the-solution-of-this-problem-plz/313269 "2022-08-31T09:05:05Z")
I installed elasticsearch and kibana 8.4.0 in the same ubuntu 22.04 VM and i try to connect them by token and when i try to create a token i get this error help plz and thanks kibana@kibana:/usr/share/elasticsearch/bin$… --- ## [Getting aggregate statistics about a dense\_vector field](https://discuss.elastic.co/t/getting-aggregate-statistics-about-a-dense-vector-field/268694)
**Author:** [@MaJaHa95](https://discuss.elastic.co/u/MaJaHa95)\ **Replies:** 2\ **Last updated:** [August 31, 2022, 8:04am UTC](https://discuss.elastic.co/t/getting-aggregate-statistics-about-a-dense-vector-field/268694 "2022-08-31T08:04:51Z")
Hey, I'm making lots of great use of the dense\_vector field type, but I've hit a bit of a wall now. Is there any way I can get the "average" from a vector field? Context My real use-case is a bit more complex, but imag… --- ## [Doing a significant text aggregation with a custom analyzer](https://discuss.elastic.co/t/doing-a-significant-text-aggregation-with-a-custom-analyzer/313059)
**Author:** [@Ivo\_Tavares](https://discuss.elastic.co/u/Ivo_Tavares)\ **Replies:** 5\ **Last updated:** [August 31, 2022, 7:09am UTC](https://discuss.elastic.co/t/doing-a-significant-text-aggregation-with-a-custom-analyzer/313059 "2022-08-31T07:09:51Z")
I have an ES index with a mapping like this: {'texts-temp': {'aliases': {}, 'mappings': {'properties': {'data': {'properties': (...) 'user\_text': {'type': 'text', 'fields… --- ## [I can't find logs on elasticsearch](https://discuss.elastic.co/t/i-cant-find-logs-on-elasticsearch/313224)
**Author:** [@mammodde](https://discuss.elastic.co/u/mammodde)\ **Replies:** 8\ **Last updated:** [August 31, 2022, 6:49am UTC](https://discuss.elastic.co/t/i-cant-find-logs-on-elasticsearch/313224 "2022-08-31T06:49:30Z")
Hi, I have a problem on finding the logs on the elasticsearch docker. I can see them on kibana but I don't know where to find them. this is the docker-compose.yml that I used in order to create all the containers versi… --- ## [Java api client - range query](https://discuss.elastic.co/t/java-api-client-range-query/313317)
**Author:** [@Deepa\_Das](https://discuss.elastic.co/u/Deepa_Das)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 6:53am UTC](https://discuss.elastic.co/t/java-api-client-range-query/313317 "2022-08-31T06:53:10Z")
Hi, I am migrating a java application from Elasticsearch high level client to java api client. There is a range query like this in the code. QueryBuilders.rangeQuery("startDate").lte(dateUtils.today()) Need to change t… --- ## [How to change indexing\_pressure.memory.limit configuration](https://discuss.elastic.co/t/how-to-change-indexing-pressure-memory-limit-configuration/312444)
**Author:** [@DesireWithin](https://discuss.elastic.co/u/DesireWithin)\ **Replies:** 5\ **Last updated:** [August 31, 2022, 5:56am UTC](https://discuss.elastic.co/t/how-to-change-indexing-pressure-memory-limit-configuration/312444 "2022-08-31T05:56:22Z")
My es version is 7.17.5, single node. I notice that my fluent-bit return following error log: {"log":"{\\"error\\":{\\"root\_cause\\":\[{\\"type\\":\\"es\_rejected\_execution\_exception\\",\\"reason\\":\\"rejected execution of coordin… --- ## [\_update Object filed with json or flattened](https://discuss.elastic.co/t/update-object-filed-with-json-or-flattened/313308)
**Author:** [@liurui](https://discuss.elastic.co/u/liurui)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 4:57am UTC](https://discuss.elastic.co/t/update-object-filed-with-json-or-flattened/313308 "2022-08-31T04:57:13Z")
hello~ I have an index with mapping like this: "test" : { "aliases" : { }, "mappings" : { "properties" : { "out" : { "properties" : { "in" : { "type" : "keywor… --- ## [Upgrade ELK on docker from 7.10 to 7.17](https://discuss.elastic.co/t/upgrade-elk-on-docker-from-7-10-to-7-17/312839)
**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\ **Replies:** 9\ **Last updated:** [August 31, 2022, 3:30am UTC](https://discuss.elastic.co/t/upgrade-elk-on-docker-from-7-10-to-7-17/312839 "2022-08-31T03:30:51Z")
Need to upgrade Elasticsearch , Kibana installed with docker compose from 7.10 to 7.17 This document shares other methods but not containers installed/started with docker compose - swarm. Is their a steps by step docu… --- ## [Version conflict (409) question](https://discuss.elastic.co/t/version-conflict-409-question/311335)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 10\ **Last updated:** [August 30, 2022, 11:43pm UTC](https://discuss.elastic.co/t/version-conflict-409-question/311335 "2022-08-30T23:43:48Z")
Is version conflict bulk write error (409) only occur when I'm updating the same document from 2 different writers? I am starting to see this error more often in our system and trying to figure out if our data pattern h… --- ## [New cluster -\> single node to cluster](https://discuss.elastic.co/t/new-cluster-single-node-to-cluster/313035)
**Author:** [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\ **Replies:** 4\ **Last updated:** [August 30, 2022, 10:14pm UTC](https://discuss.elastic.co/t/new-cluster-single-node-to-cluster/313035 "2022-08-30T22:14:47Z")
Hi all, This has been bugging me for ages. I've never been able to get a cluster built using a internal ca. I've used certutil to make the car's. Signed them using my ca. Put all of the certs on the clusters. But n… --- ## [JOIN two indexes using ElasticSearch Node.js client](https://discuss.elastic.co/t/join-two-indexes-using-elasticsearch-node-js-client/313283)
**Author:** [@sadiki-dev](https://discuss.elastic.co/u/sadiki-dev)\ **Replies:** 1\ **Last updated:** [August 30, 2022, 9:36pm UTC](https://discuss.elastic.co/t/join-two-indexes-using-elasticsearch-node-js-client/313283 "2022-08-30T21:36:31Z")
I have two indexes (two collections) , products index and reviews index. The two is linked by productId. The structure of both are : // products.json \[ { "id": 1, "name": "IPhone 11", "quanti… --- ## [Inconsistent first result when changing \`size\` in script sorted search](https://discuss.elastic.co/t/inconsistent-first-result-when-changing-size-in-script-sorted-search/313282)
**Author:** [@\_Matthew\_Pavlinsky](https://discuss.elastic.co/u/_Matthew_Pavlinsky)\ **Replies:** 2\ **Last updated:** [August 30, 2022, 9:31pm UTC](https://discuss.elastic.co/t/inconsistent-first-result-when-changing-size-in-script-sorted-search/313282 "2022-08-30T21:31:55Z")
I am trying to use a painless script sort and am experiencing different results when I change the size value of the query, I would expect that since sort happens before paging that the same query with a different size wo… --- ## [ElasticSearchClient Search function](https://discuss.elastic.co/t/elasticsearchclient-search-function/313290)
**Author:** [@rayyanalbaz1](https://discuss.elastic.co/u/rayyanalbaz1)\ **Replies:** 0\ **Last updated:** [August 30, 2022, 8:22pm UTC](https://discuss.elastic.co/t/elasticsearchclient-search-function/313290 "2022-08-30T20:22:51Z")
Hello, We are trying to implement nested queries like this provided example: And was wondering if it is possible that we can add the query objects dynamically depending on the number of the query objects created. For … --- ## [Deep search, Searching by number](https://discuss.elastic.co/t/deep-search-searching-by-number/313281)
**Author:** [@sadiki-dev](https://discuss.elastic.co/u/sadiki-dev)\ **Replies:** 1\ **Last updated:** [August 30, 2022, 7:42pm UTC](https://discuss.elastic.co/t/deep-search-searching-by-number/313281 "2022-08-30T19:42:50Z")
I have a products index. Its structure is : \[ { "id": 1, "name": "IPhone 11", "quantity\_stock": 100, "description": "description of IPhone 11", "manufacturing": { … --- ## [Ingest Pipeline is not applying tag, what am I missing?](https://discuss.elastic.co/t/ingest-pipeline-is-not-applying-tag-what-am-i-missing/313272)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 1\ **Last updated:** [August 30, 2022, 6:43pm UTC](https://discuss.elastic.co/t/ingest-pipeline-is-not-applying-tag-what-am-i-missing/313272 "2022-08-30T18:43:03Z")
I've set up an ingest pipeline that sends my docker container logs through the appropriate built-in pipeline for the kind of logs the container is outputting. (See: Making Docker container logs go through the right beat… --- ## [How to create a webhook endpoint url in ELK](https://discuss.elastic.co/t/how-to-create-a-webhook-endpoint-url-in-elk/313271)
**Author:** [@srek3502](https://discuss.elastic.co/u/srek3502)\ **Replies:** 1\ **Last updated:** [August 30, 2022, 6:34pm UTC](https://discuss.elastic.co/t/how-to-create-a-webhook-endpoint-url-in-elk/313271 "2022-08-30T18:34:25Z")
Hi, Can anyone please share the relevant document for ELK to create a webhook endpoint url. ? I need to configure this ELK webhook endpoint url to be used in other application to POST a payload. Any useful information … --- ## [Problem with similar terms](https://discuss.elastic.co/t/problem-with-similar-terms/313276)
**Author:** [@Guilherme\_Mello](https://discuss.elastic.co/u/Guilherme_Mello)\ **Replies:** 1\ **Last updated:** [August 30, 2022, 6:22pm UTC](https://discuss.elastic.co/t/problem-with-similar-terms/313276 "2022-08-30T18:22:01Z")
I have a search using term "calca" but the result list contains "calce" Is there a way to avoid this type of behavior? Thanks --- ## [Performance issue running on ECK vs EC2 on AWS](https://discuss.elastic.co/t/performance-issue-running-on-eck-vs-ec2-on-aws/313263)
**Author:** [@PascalB](https://discuss.elastic.co/u/PascalB)\ **Replies:** 2\ **Last updated:** [August 30, 2022, 5:18pm UTC](https://discuss.elastic.co/t/performance-issue-running-on-eck-vs-ec2-on-aws/313263 "2022-08-30T17:18:32Z")
Hello, I am new here and I am trying to understand performance issues. I am running an index on two different deployments of Elasticsearch. The index is the same (I've used the backup/restore operation to make sure I ha… --- ## [ILM alias errors - illegal\_argument\_exception: index.lifecycle.rollover\_alias](https://discuss.elastic.co/t/ilm-alias-errors-illegal-argument-exception-index-lifecycle-rollover-alias/313167)
**Author:** [@vee](https://discuss.elastic.co/u/vee)\ **Replies:** 2\ **Last updated:** [August 30, 2022, 4:31pm UTC](https://discuss.elastic.co/t/ilm-alias-errors-illegal-argument-exception-index-lifecycle-rollover-alias/313167 "2022-08-30T16:31:46Z")
Hi, am seeing this issue even though I believe the seed index was created with the correct write index: illegal\_argument\_exception: index.lifecycle.rollover\_alias \[test-logs\] does not point to index \[test-logs-2022.08.1… --- ## [Query\_string query with asterisk and escaped char not working](https://discuss.elastic.co/t/query-string-query-with-asterisk-and-escaped-char-not-working/313181)
**Author:** [@Nick\_Lipnyagov](https://discuss.elastic.co/u/Nick_Lipnyagov)\ **Replies:** 2\ **Last updated:** [August 30, 2022, 2:41pm UTC](https://discuss.elastic.co/t/query-string-query-with-asterisk-and-escaped-char-not-working/313181 "2022-08-30T14:41:25Z")
Hi everyone! Could you please help me on how to use query\_string with \* and escaped characters? For example: Mapping: { "index": "test\_user\_name", "mappings": { "properties": { "userId": { "type… --- ## [Multiple fields ranking sorting](https://discuss.elastic.co/t/multiple-fields-ranking-sorting/313163)
**Author:** [@maxim-pushchinskiy](https://discuss.elastic.co/u/maxim-pushchinskiy)\ **Replies:** 1\ **Last updated:** [August 30, 2022, 2:17pm UTC](https://discuss.elastic.co/t/multiple-fields-ranking-sorting/313163 "2022-08-30T14:17:07Z")
Hi everyone. I have business needs to create multiple fields ranking sorting. What does it mean? It means that I want to be able to sort by several fields with custom boost and different order. test dataset : interfac… --- ## [Design Validation](https://discuss.elastic.co/t/design-validation/313252)
**Author:** [@zain](https://discuss.elastic.co/u/zain)\ **Replies:** 3\ **Last updated:** [August 30, 2022, 2:04pm UTC](https://discuss.elastic.co/t/design-validation/313252 "2022-08-30T14:04:20Z")
Hello, Hierarchy: parent { child { grandchild { grandgrandchild { ....grandgrandgrandchildren } grandgrandchild { ....grandgrandgrandchild } } } } User { } Rules: User having access of … --- ## [Hdfs file missing (snapshot)](https://discuss.elastic.co/t/hdfs-file-missing-snapshot/311983)
**Author:** [@yousanghz](https://discuss.elastic.co/u/yousanghz)\ **Replies:** 3\ **Last updated:** [August 30, 2022, 1:37pm UTC](https://discuss.elastic.co/t/hdfs-file-missing-snapshot/311983 "2022-08-30T13:37:21Z")
my snapshot: { "hdfs\_repository\_ccres": { "type": "hdfs", "settings": { "path": "/user/elasticsearch/snapshots", "uri": "hdfs://master1:8020/" } } } when i use GET \_snapshot/hdfs\_repository… --- ## [Problem: Switching from a cluster to a single node ES](https://discuss.elastic.co/t/problem-switching-from-a-cluster-to-a-single-node-es/313225)
**Author:** [@ASRLO](https://discuss.elastic.co/u/ASRLO)\ **Replies:** 2\ **Last updated:** [August 30, 2022, 12:26pm UTC](https://discuss.elastic.co/t/problem-switching-from-a-cluster-to-a-single-node-es/313225 "2022-08-30T12:26:33Z")
Hi there, My ES infrastructure is composed of 2 servers: An ELK server and another server only with Elasticsearch. So there were 2 elasticsearch nodes. However for internal needs. The second server with only elasticse… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=381) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=383)