# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=387

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 388

---

## [Can only use wildcard queries on keyword, text and wildcard fields](https://discuss.elastic.co/t/can-only-use-wildcard-queries-on-keyword-text-and-wildcard-fields/312591)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 0\
**Last updated:** [August 22, 2022, 9:36am UTC](https://discuss.elastic.co/t/can-only-use-wildcard-queries-on-keyword-text-and-wildcard-fields/312591 "2022-08-22T09:36:07Z")

</div>

Hi, I have defined mappings for my index when i am doing wildcard search ipaddress i am getting an error Can only use wildcard queries on keyword, text and wildcard fields - not on \[scan\_iteration\] which is of type \[i…

---

## [Can't connect with elasticsearch because of https or SSL security](https://discuss.elastic.co/t/cant-connect-with-elasticsearch-because-of-https-or-ssl-security/312581)

<div class="topic-metadata">

**Author:** [@Sarindra\_Therese](https://discuss.elastic.co/u/Sarindra_Therese)\
**Replies:** 2\
**Last updated:** [August 22, 2022, 7:34am UTC](https://discuss.elastic.co/t/cant-connect-with-elasticsearch-because-of-https-or-ssl-security/312581 "2022-08-22T07:34:04Z")

</div>

Hey, I have some problems when i want to connect elasticsearch port, for example i can't connect python to elasticsearch because of ssl, the https, the same for kafka confluent, I've already use some technique like ad…

---

## [Need to upgrade to ES 8](https://discuss.elastic.co/t/need-to-upgrade-to-es-8/312579)

<div class="topic-metadata">

**Author:** [@Jana03](https://discuss.elastic.co/u/Jana03)\
**Replies:** 1\
**Last updated:** [August 22, 2022, 6:50am UTC](https://discuss.elastic.co/t/need-to-upgrade-to-es-8/312579 "2022-08-22T06:50:52Z")

</div>

Hi, We need to upgrade ES to 8+ version, for that i need the compatible fluentd and fluentd es plugin versions. can you please help

---

## [Creating an enrollment token in Elastic fails due to PrivateKey error](https://discuss.elastic.co/t/creating-an-enrollment-token-in-elastic-fails-due-to-privatekey-error/312461)

<div class="topic-metadata">

**Author:** [@Mostafa\_Talebi](https://discuss.elastic.co/u/Mostafa_Talebi)\
**Replies:** 4\
**Last updated:** [August 22, 2022, 5:49am UTC](https://discuss.elastic.co/t/creating-an-enrollment-token-in-elastic-fails-due-to-privatekey-error/312461 "2022-08-22T05:49:17Z")

</div>

I have created a three nodes elastic cluster, with two being master nodes. I have created CS, CERT and http.p12 files manually, all placed in their respective machines and when I run elastic, everything boots successful…

---

## [Can't run curl in terminal](https://discuss.elastic.co/t/cant-run-curl-in-terminal/312469)

<div class="topic-metadata">

**Author:** [@Sarindra\_Therese](https://discuss.elastic.co/u/Sarindra_Therese)\
**Replies:** 0\
**Last updated:** [August 19, 2022, 12:43pm UTC](https://discuss.elastic.co/t/cant-run-curl-in-terminal/312469 "2022-08-19T12:43:56Z")

</div>

Hi Everyone, I don't know what's happen, but i can't run curl cmd in terminal, I've already ran curl -GET https://127.0.0.1:9200 and the response is: curl: (58) could not load PEM client certificate, OpenSSL error e…

---

## [How to fix vulnerability(CVE-2001-1199)](https://discuss.elastic.co/t/how-to-fix-vulnerability-cve-2001-1199/312441)

<div class="topic-metadata">

**Author:** [@wilsonyy](https://discuss.elastic.co/u/wilsonyy)\
**Replies:** 5\
**Last updated:** [August 22, 2022, 12:26am UTC](https://discuss.elastic.co/t/how-to-fix-vulnerability-cve-2001-1199/312441 "2022-08-22T00:26:50Z")

</div>

A cross-site scripting vulnerability（ CVE-2001-1199） was found in Elasticsearch:9200，I've never seen it before，so how to fix it, anybody helps?

---

## [Elasticsearch -not starting after boot on ubuntu server 22.04.1](https://discuss.elastic.co/t/elasticsearch-not-starting-after-boot-on-ubuntu-server-22-04-1/312528)

<div class="topic-metadata">

**Author:** [@bezder](https://discuss.elastic.co/u/bezder)\
**Replies:** 1\
**Last updated:** [August 22, 2022, 12:24am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-after-boot-on-ubuntu-server-22-04-1/312528 "2022-08-22T00:24:35Z")

</div>

Hello, when i reboot my ubuntu server and run systemctl status elasticsearch i am getting errror as below, when i execute afterward systemctl restart elasticsearch; all works okay ... any idea why its not starting p…

---

## [How to return hour by hour average for the last X days?](https://discuss.elastic.co/t/how-to-return-hour-by-hour-average-for-the-last-x-days/312560)

<div class="topic-metadata">

**Author:** [@Yi\_HAN](https://discuss.elastic.co/u/Yi_HAN)\
**Replies:** 0\
**Last updated:** [August 21, 2022, 10:03pm UTC](https://discuss.elastic.co/t/how-to-return-hour-by-hour-average-for-the-last-x-days/312560 "2022-08-21T22:03:34Z")

</div>

I have the following script to return an aggregation hour by hour of last x days on ExecNom: GET /mkt-with-time/\_search { "size": 0, "query": { "range": { "@timestamp": { "gte": "now-7d/d", …

---

## [\[Solved\] Cast/Map IP Field to IP Type](https://discuss.elastic.co/t/solved-cast-map-ip-field-to-ip-type/312558)

<div class="topic-metadata">

**Author:** [@snkhan](https://discuss.elastic.co/u/snkhan)\
**Replies:** 1\
**Last updated:** [August 21, 2022, 9:59pm UTC](https://discuss.elastic.co/t/solved-cast-map-ip-field-to-ip-type/312558 "2022-08-21T21:59:15Z")

</div>

Hello, I am a new ELK user, and am trying in vain to cast an existing field containing an IP address to an IP data type. From the copious searches it is clear that I must use mappings, but my attempts to do so have fail…

---

## [Add Runtime Field By UpdateQueryAsync](https://discuss.elastic.co/t/add-runtime-field-by-updatequeryasync/312532)

<div class="topic-metadata">

**Author:** [@Rahma\_Boughale](https://discuss.elastic.co/u/Rahma_Boughale)\
**Replies:** 2\
**Last updated:** [August 21, 2022, 12:19pm UTC](https://discuss.elastic.co/t/add-runtime-field-by-updatequeryasync/312532 "2022-08-21T12:19:45Z")

</div>

Hello all, i am new to elasticsearch, i am trying to add a new field(runtime field) by UpdateByQueryAsync in my index(it already created), i did some research and i saw that we can add a new fiel by this syntax : var u…

---

## [How to set up 'allow\_custom\_routing' for data streams?](https://discuss.elastic.co/t/how-to-set-up-allow-custom-routing-for-data-streams/312544)

<div class="topic-metadata">

**Author:** [@dkosenko](https://discuss.elastic.co/u/dkosenko)\
**Replies:** 0\
**Last updated:** [August 21, 2022, 11:43am UTC](https://discuss.elastic.co/t/how-to-set-up-allow-custom-routing-for-data-streams/312544 "2022-08-21T11:43:29Z")

</div>

Hi, How do I create a stream with "allow\_custom\_routing": true? I cannot find any documention on it. I have specified: "mappings": { "dynamic": "true", "\_routing": { "required": true }, but it has n…

---

## [Elasticsearch not coming up after restart](https://discuss.elastic.co/t/elasticsearch-not-coming-up-after-restart/310718)

<div class="topic-metadata">

**Author:** [@samee\_alam](https://discuss.elastic.co/u/samee_alam)\
**Replies:** 4\
**Last updated:** [August 20, 2022, 11:51pm UTC](https://discuss.elastic.co/t/elasticsearch-not-coming-up-after-restart/310718 "2022-08-20T23:51:34Z")

</div>

After deleting elasticsearch pod, it is not able to come up. (Ready state 0/1) Cluster health is yellow. fluentd is not able to connect to ES. elasticsearch@elasticsearch-master-0:~$ curl -XGET 'http://localhost:9200/…

---

## [How to append the nested fields in already created elasticsearch index using ES API](https://discuss.elastic.co/t/how-to-append-the-nested-fields-in-already-created-elasticsearch-index-using-es-api/312525)

<div class="topic-metadata">

**Author:** [@Sabaridass10](https://discuss.elastic.co/u/Sabaridass10)\
**Replies:** 0\
**Last updated:** [August 20, 2022, 7:51pm UTC](https://discuss.elastic.co/t/how-to-append-the-nested-fields-in-already-created-elasticsearch-index-using-es-api/312525 "2022-08-20T19:51:48Z")

</div>

I tried to append the nested field using below syntax but showing some error. Can anyone please help me on this? PUT url : es\_index/\_mappings { "properties": { "assignee": { "properties": { "components": { "proper…

---

## [Fiels does not contain any data after loading data using bulk](https://discuss.elastic.co/t/fiels-does-not-contain-any-data-after-loading-data-using-bulk/312510)

<div class="topic-metadata">

**Author:** [@SofiaContreras](https://discuss.elastic.co/u/SofiaContreras)\
**Replies:** 5\
**Last updated:** [August 20, 2022, 6:14pm UTC](https://discuss.elastic.co/t/fiels-does-not-contain-any-data-after-loading-data-using-bulk/312510 "2022-08-20T18:14:44Z")

</div>

I'm trying to make some visualizations using kibana, but the fields have any data. I thought that if I fill up an index in dev ops using bulk, then I would be able to interact with the data using kibana. Here is the cod…

---

## [Right structure for index](https://discuss.elastic.co/t/right-structure-for-index/312515)

<div class="topic-metadata">

**Author:** [@Kimblis](https://discuss.elastic.co/u/Kimblis)\
**Replies:** 3\
**Last updated:** [August 20, 2022, 3:28pm UTC](https://discuss.elastic.co/t/right-structure-for-index/312515 "2022-08-20T15:28:04Z")

</div>

Hello, in my application I have registered users (Users), unregistered users (Guests) and service providers (Providers). Provider can have clients, it's either Users or Guests. I want to have autosuggest and search for s…

---

## [Is it possible to pass a large amount of parameters to painless script to perform sort?](https://discuss.elastic.co/t/is-it-possible-to-pass-a-large-amount-of-parameters-to-painless-script-to-perform-sort/312519)

<div class="topic-metadata">

**Author:** [@Lee\_JW](https://discuss.elastic.co/u/Lee_JW)\
**Replies:** 0\
**Last updated:** [August 20, 2022, 12:23pm UTC](https://discuss.elastic.co/t/is-it-possible-to-pass-a-large-amount-of-parameters-to-painless-script-to-perform-sort/312519 "2022-08-20T12:23:08Z")

</div>

Say there is a field that can be one of 200 distinct values (keyword). Every 2 different values are associated by a custom relevant score (it is a statistical data that cannot be mathematically calculted). For example, …

---

## [Shard reroute and exchange Primary and Replica on a node](https://discuss.elastic.co/t/shard-reroute-and-exchange-primary-and-replica-on-a-node/312514)

<div class="topic-metadata">

**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Replies:** 1\
**Last updated:** [August 20, 2022, 10:45am UTC](https://discuss.elastic.co/t/shard-reroute-and-exchange-primary-and-replica-on-a-node/312514 "2022-08-20T10:45:30Z")

</div>

Hi dears I have a cluster with 2 nodes. one of them is master and another is replica Bellow is all shards in monitor-node-01 : As you see, all of shards in this node is "Primary" and all "Replica" shards are on m…

---

## [Search across different indices with consistent ranking](https://discuss.elastic.co/t/search-across-different-indices-with-consistent-ranking/311916)

<div class="topic-metadata">

**Author:** [@stelitz](https://discuss.elastic.co/u/stelitz)\
**Replies:** 5\
**Last updated:** [August 19, 2022, 8:21pm UTC](https://discuss.elastic.co/t/search-across-different-indices-with-consistent-ranking/311916 "2022-08-19T20:21:32Z")

</div>

Hi everyone, I just got started with Elasticsearch and it's really awesome! I am, however, struggling with implementing one specific use case. Let's say I have different logical entities like books and authors and I wan…

---

## [I'm using "match-Boolean-prefix query but I can't get the exact match of the query](https://discuss.elastic.co/t/im-using-match-boolean-prefix-query-but-i-cant-get-the-exact-match-of-the-query/312492)

<div class="topic-metadata">

**Author:** [@paris1](https://discuss.elastic.co/u/paris1)\
**Replies:** 0\
**Last updated:** [August 19, 2022, 6:18pm UTC](https://discuss.elastic.co/t/im-using-match-boolean-prefix-query-but-i-cant-get-the-exact-match-of-the-query/312492 "2022-08-19T18:18:57Z")

</div>

I'm using "match-Boolean-prefix query but I can't get the exact match of the query.I can't use prefix queries because I also need "not exact match" results and I also need the fuzziness and word completion.I get every th…

---

## [How can I generate lat long fields into geo point in elasticsearch](https://discuss.elastic.co/t/how-can-i-generate-lat-long-fields-into-geo-point-in-elasticsearch/312329)

<div class="topic-metadata">

**Author:** [@paris1](https://discuss.elastic.co/u/paris1)\
**Replies:** 4\
**Last updated:** [August 19, 2022, 6:06pm UTC](https://discuss.elastic.co/t/how-can-i-generate-lat-long-fields-into-geo-point-in-elasticsearch/312329 "2022-08-19T18:06:56Z")

</div>

0 I've ingested CSV data via pgsync from postgres RDS to elasticsearch.my index contains "lat" and "lng" "lat" : { "type" : "float" }, "lng" : { "type" : "float" How would I convert this into an ac…

---

## [Proper maintenance of the Elastic Stack](https://discuss.elastic.co/t/proper-maintenance-of-the-elastic-stack/312030)

<div class="topic-metadata">

**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\
**Replies:** 3\
**Last updated:** [August 19, 2022, 4:53pm UTC](https://discuss.elastic.co/t/proper-maintenance-of-the-elastic-stack/312030 "2022-08-19T16:53:45Z")

</div>

Good Afternoon Elasticsearch Guru's I have been running my ELK SIEM for a few months now, almost a year actually and my syslogs stopped being shown. I have them coming in again now, but I need to clean up my indices so…

---

## [Elasticsearch better settings, mapping and queries to match with regular and nested fields](https://discuss.elastic.co/t/elasticsearch-better-settings-mapping-and-queries-to-match-with-regular-and-nested-fields/312475)

<div class="topic-metadata">

**Author:** [@babuzrb](https://discuss.elastic.co/u/babuzrb)\
**Replies:** 0\
**Last updated:** [August 19, 2022, 2:28pm UTC](https://discuss.elastic.co/t/elasticsearch-better-settings-mapping-and-queries-to-match-with-regular-and-nested-fields/312475 "2022-08-19T14:28:25Z")

</div>

I have multi level nested list of objects along with regular fields to index in elasticsearch. For example here is a document: { "main\_field\_1" : { "level\_1" : \[ "inner\_level\_1\_field\_1": "test-2", …

---

## [Scoring issue with copy\_to](https://discuss.elastic.co/t/scoring-issue-with-copy-to/312472)

<div class="topic-metadata">

**Author:** [@lucie-wartelle](https://discuss.elastic.co/u/lucie-wartelle)\
**Replies:** 0\
**Last updated:** [August 19, 2022, 2:06pm UTC](https://discuss.elastic.co/t/scoring-issue-with-copy-to/312472 "2022-08-19T14:06:40Z")

</div>

Hello ! I'm facing an issue with elasticsearch 8. I have an index that contains companies and I use a copy\_to parameters to group searchable fields of these companies. However, some fields can be null, and some can cont…

---

## [Elasticsearch v8 Java API client boost Query](https://discuss.elastic.co/t/elasticsearch-v8-java-api-client-boost-query/312410)

<div class="topic-metadata">

**Author:** [@ijaxahmed](https://discuss.elastic.co/u/ijaxahmed)\
**Replies:** 4\
**Last updated:** [August 19, 2022, 1:48pm UTC](https://discuss.elastic.co/t/elasticsearch-v8-java-api-client-boost-query/312410 "2022-08-19T13:48:40Z")

</div>

I am using new Java API client . I have a method in my code which returns Query of multiple types e.g bool, range public Query createQuery(String field, String value) { if(something) return Query.of(query-\>query.ra…

---

## [Restore data from data folder](https://discuss.elastic.co/t/restore-data-from-data-folder/312448)

<div class="topic-metadata">

**Author:** [@meternich](https://discuss.elastic.co/u/meternich)\
**Replies:** 3\
**Last updated:** [August 19, 2022, 1:31pm UTC](https://discuss.elastic.co/t/restore-data-from-data-folder/312448 "2022-08-19T13:31:00Z")

</div>

I've messed up something with my backups an I accidently deleted few indexes. I have a file system copy of an index (from elastic data folder), but I have deleted index in elastic. When I copy the files into elastic data…

---

## [Inconsistency in Security setup notes for Kubernetes (TLS), autogenerated keys missing?](https://discuss.elastic.co/t/inconsistency-in-security-setup-notes-for-kubernetes-tls-autogenerated-keys-missing/312468)

<div class="topic-metadata">

**Author:** [@FreshMike](https://discuss.elastic.co/u/FreshMike)\
**Replies:** 1\
**Last updated:** [August 19, 2022, 1:11pm UTC](https://discuss.elastic.co/t/inconsistency-in-security-setup-notes-for-kubernetes-tls-autogenerated-keys-missing/312468 "2022-08-19T13:11:05Z")

</div>

Hi All, Elastic 7.17.3 via Helm Chart I have trouble with the following: This Helm chart can generate a \[Kubernetes Secret\] or use an existing one to setup Elastic credentials. This chart is setting TLS and creating …

---

## [Index lifecycle management (cleanup) based on document fields](https://discuss.elastic.co/t/index-lifecycle-management-cleanup-based-on-document-fields/312465)

<div class="topic-metadata">

**Author:** [@joeripeeters](https://discuss.elastic.co/u/joeripeeters)\
**Replies:** 1\
**Last updated:** [August 19, 2022, 12:38pm UTC](https://discuss.elastic.co/t/index-lifecycle-management-cleanup-based-on-document-fields/312465 "2022-08-19T12:38:01Z")

</div>

Hi all, I have an index with data that contains a start-date and end-date. Documents that have an end-date past today, are not valuable anymore. So ideally, I want them out of the index. Is there a way to have index li…

---

## [How to get logs of multiple hostnames using scoll api](https://discuss.elastic.co/t/how-to-get-logs-of-multiple-hostnames-using-scoll-api/312453)

<div class="topic-metadata">

**Author:** [@Gojo](https://discuss.elastic.co/u/Gojo)\
**Replies:** 1\
**Last updated:** [August 19, 2022, 10:08am UTC](https://discuss.elastic.co/t/how-to-get-logs-of-multiple-hostnames-using-scoll-api/312453 "2022-08-19T10:08:33Z")

</div>

hi all , is it possible to pass multiple hosts in scroll api , i want to get multiple logs from multiple hosts using scroll request url = '{0}/{1}/\_search?scroll=1m&ignore\_unavailable=true'.format( …

---

## [Static Mappings Ignored by Some Fields While Others Work](https://discuss.elastic.co/t/static-mappings-ignored-by-some-fields-while-others-work/312415)

<div class="topic-metadata">

**Author:** [@othman](https://discuss.elastic.co/u/othman)\
**Replies:** 2\
**Last updated:** [August 19, 2022, 7:41am UTC](https://discuss.elastic.co/t/static-mappings-ignored-by-some-fields-while-others-work/312415 "2022-08-19T07:41:56Z")

</div>

I'm fairly new to ELK stack so most likely I'm just doing something dumb. I've failed to find suitable Google results hence this post. I have an Index Template configured with mappings, and I create a fresh index and st…

---

## [What are the Vulnerabilities of elk 7.17.3v?](https://discuss.elastic.co/t/what-are-the-vulnerabilities-of-elk-7-17-3v/312421)

<div class="topic-metadata">

**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\
**Replies:** 4\
**Last updated:** [August 19, 2022, 7:39am UTC](https://discuss.elastic.co/t/what-are-the-vulnerabilities-of-elk-7-17-3v/312421 "2022-08-19T07:39:02Z")

</div>

what are the Vulnerabilities of elk 7.17.3v ? what are the Solutions to fix those vulnerabilities?

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=386)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=388)
