# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=391 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 392 --- ## [Searching with lithuanian letters](https://discuss.elastic.co/t/searching-with-lithuanian-letters/311980)
**Author:** [@Kimblis](https://discuss.elastic.co/u/Kimblis)\ **Replies:** 3\ **Last updated:** [August 12, 2022, 10:21am UTC](https://discuss.elastic.co/t/searching-with-lithuanian-letters/311980 "2022-08-12T10:21:23Z")
Hey y'all, I need some help- I'm implementing search which is being mainly used by Lithuanians (but not only), and as you probably know we have letters like ą, č, ž and etc, which a lot of us don't always use haha, we of… --- ## [Please help with querying geospatial data -- geopoint and geoshape with NEST API](https://discuss.elastic.co/t/please-help-with-querying-geospatial-data-geopoint-and-geoshape-with-nest-api/311546)
**Author:** [@Dragana](https://discuss.elastic.co/u/Dragana)\ **Replies:** 3\ **Last updated:** [August 12, 2022, 9:31am UTC](https://discuss.elastic.co/t/please-help-with-querying-geospatial-data-geopoint-and-geoshape-with-nest-api/311546 "2022-08-12T09:31:19Z")
I am working with data ingested via Logstash, which has these fields among others: "location\_center": \[ 20.4222935, 44.815367 \], "location": { "type": "envelope", "coordinates": \[ … --- ## [Delete function not working since update 8.0](https://discuss.elastic.co/t/delete-function-not-working-since-update-8-0/311987)
**Author:** [@JoasFastory](https://discuss.elastic.co/u/JoasFastory)\ **Replies:** 0\ **Last updated:** [August 12, 2022, 7:58am UTC](https://discuss.elastic.co/t/delete-function-not-working-since-update-8-0/311987 "2022-08-12T07:58:39Z")
Hi, In our React project, we use the npm package "@elastic/elasticsearch". Since 8.0 migration, delete function is not working. We implement it this way: // 1) Declaration of client instance import { Client } from '@… --- ## [Reducing heap size increases query speed](https://discuss.elastic.co/t/reducing-heap-size-increases-query-speed/311850)
**Author:** [@sbruinsje](https://discuss.elastic.co/u/sbruinsje)\ **Replies:** 6\ **Last updated:** [August 12, 2022, 8:43am UTC](https://discuss.elastic.co/t/reducing-heap-size-increases-query-speed/311850 "2022-08-12T08:43:30Z")
I have recently upgraded from ES 6.8 to ES 8.3. One of the queries with heavy aggregations take significantly longer now compared to before. After some searching I found that in the new version ES sets the heap size auto… --- ## [Implicit versus explicit definition of the fast vector highlighter](https://discuss.elastic.co/t/implicit-versus-explicit-definition-of-the-fast-vector-highlighter/311990)
**Author:** [@sbruinsje](https://discuss.elastic.co/u/sbruinsje)\ **Replies:** 0\ **Last updated:** [August 12, 2022, 8:40am UTC](https://discuss.elastic.co/t/implicit-versus-explicit-definition-of-the-fast-vector-highlighter/311990 "2022-08-12T08:40:31Z")
Hi there, I was under the impression that if the mappings of a field set the term\_vector to term\_vector: 'with\_positions\_offsets', that for that field the fast vector highlighter will be used automatically. I thought so… --- ## [Ship Cloudwatch logs to Self hosted elastic stack](https://discuss.elastic.co/t/ship-cloudwatch-logs-to-self-hosted-elastic-stack/311982)
**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\ **Replies:** 0\ **Last updated:** [August 12, 2022, 6:46am UTC](https://discuss.elastic.co/t/ship-cloudwatch-logs-to-self-hosted-elastic-stack/311982 "2022-08-12T06:46:29Z")
Want to ship AWS cloudwatch logs to our self-hosted Elastic Stack. How can i achieve this? --- ## [How to move data from cold to warm tier](https://discuss.elastic.co/t/how-to-move-data-from-cold-to-warm-tier/311767)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 7\ **Last updated:** [August 12, 2022, 6:35am UTC](https://discuss.elastic.co/t/how-to-move-data-from-cold-to-warm-tier/311767 "2022-08-12T06:35:22Z")
Hi I need to remove cold data tiers, then in this action I thought about shifting data tier from cold to warm? How I can handle such case? --- ## [Cluster Level Replica settings](https://discuss.elastic.co/t/cluster-level-replica-settings/311976)
**Author:** [@benedictDTony](https://discuss.elastic.co/u/benedictDTony)\ **Replies:** 0\ **Last updated:** [August 12, 2022, 5:12am UTC](https://discuss.elastic.co/t/cluster-level-replica-settings/311976 "2022-08-12T05:12:48Z")
Hi, I would like to set replica settings at the cluster level instead of index level. Despite the template settings I would like my indices to be created with 0 replicas. Could someone help me how to achieve this, h… --- ## [Geo\_bounds aggregation returns empty data for Multi-Polygon Country Geometries](https://discuss.elastic.co/t/geo-bounds-aggregation-returns-empty-data-for-multi-polygon-country-geometries/311886)
**Author:** [@corndog](https://discuss.elastic.co/u/corndog)\ **Replies:** 1\ **Last updated:** [August 12, 2022, 5:04am UTC](https://discuss.elastic.co/t/geo-bounds-aggregation-returns-empty-data-for-multi-polygon-country-geometries/311886 "2022-08-12T05:04:03Z")
geo\_bounds aggregation fails to generate geo\_bounds for SOME countries (large countries?) in my dataset, how can I fix this\>? My example query against a country "New Zealand" GET countries/\_search { "query": { … --- ## [Issue after migration from geo\_shape pre-fix based to geo\_shape based bkd tree mapping](https://discuss.elastic.co/t/issue-after-migration-from-geo-shape-pre-fix-based-to-geo-shape-based-bkd-tree-mapping/311406)
**Author:** [@Abhilash\_Venkatesh](https://discuss.elastic.co/u/Abhilash_Venkatesh)\ **Replies:** 9\ **Last updated:** [August 12, 2022, 3:54am UTC](https://discuss.elastic.co/t/issue-after-migration-from-geo-shape-pre-fix-based-to-geo-shape-based-bkd-tree-mapping/311406 "2022-08-12T03:54:46Z")
Hi Problem Description We want to migrate from elastic 7.x to 8. Migrated to 7.17.5 and resolved issues. One of it was was location field with geo\_shape mapping, we used strategy : recursive . To resolve took backup … --- ## [Export results from query that is more than the default maxClauseCount](https://discuss.elastic.co/t/export-results-from-query-that-is-more-than-the-default-maxclausecount/311925)
**Author:** [@xynobob](https://discuss.elastic.co/u/xynobob)\ **Replies:** 0\ **Last updated:** [August 11, 2022, 12:21pm UTC](https://discuss.elastic.co/t/export-results-from-query-that-is-more-than-the-default-maxclausecount/311925 "2022-08-11T12:21:05Z")
Hi, I have this issue where for my needs, I am required to export all the rules from Elastic Security and keep it locally which I use this command to achieve it - POST api/detection\_engine/rules/\_export. However the mai… --- ## [Analyze the logs in Storage utilization](https://discuss.elastic.co/t/analyze-the-logs-in-storage-utilization/311848)
**Author:** [@Aravind1](https://discuss.elastic.co/u/Aravind1)\ **Replies:** 1\ **Last updated:** [August 12, 2022, 1:44am UTC](https://discuss.elastic.co/t/analyze-the-logs-in-storage-utilization/311848 "2022-08-12T01:44:16Z")
Hi, We are having a few queries on Elasticsearch logs optimization, we are doing the cost optimization and we want to know how to analyze the logs based on the storage utilization and also to know more about how many u… --- ## [Elasticsearch not starting with IOException error when using p12 files from outside CA](https://discuss.elastic.co/t/elasticsearch-not-starting-with-ioexception-error-when-using-p12-files-from-outside-ca/311855)
**Author:** [@jamesp](https://discuss.elastic.co/u/jamesp)\ **Replies:** 2\ **Last updated:** [August 11, 2022, 8:46pm UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-with-ioexception-error-when-using-p12-files-from-outside-ca/311855 "2022-08-11T20:46:46Z")
Hello, I successfully set up xpack basic security when I used self-signed certificates using Elasticsearch tools. When I had an internal authority create the p12 files for me following information from the Elasticsearch… --- ## [Issue/Error while reading data from Elastic index with Spark including Custom schema](https://discuss.elastic.co/t/issue-error-while-reading-data-from-elastic-index-with-spark-including-custom-schema/311930)
**Author:** [@ashit\_pupu](https://discuss.elastic.co/u/ashit_pupu)\ **Replies:** 1\ **Last updated:** [August 11, 2022, 7:00pm UTC](https://discuss.elastic.co/t/issue-error-while-reading-data-from-elastic-index-with-spark-including-custom-schema/311930 "2022-08-11T19:00:06Z")
I am trying the read data from a given Elasticsearch index including a custom schema while reading. The data is populated by another spark application in which the same schema is being used this has been done keeping in… --- ## [Rally: customize behaviour of each client](https://discuss.elastic.co/t/rally-customize-behaviour-of-each-client/311919)
**Author:** [@jmlucjav](https://discuss.elastic.co/u/jmlucjav)\ **Replies:** 4\ **Last updated:** [August 11, 2022, 6:41pm UTC](https://discuss.elastic.co/t/rally-customize-behaviour-of-each-client/311919 "2022-08-11T18:41:23Z")
Hi! I have my track like this (snippet from challenges/operations) { "operation": "replay-listing-query", "clients": 4, "warmup-iterations": 10, "iterations": 100… --- ## [Adding Kibana, Fleet, Ingest node to cluster](https://discuss.elastic.co/t/adding-kibana-fleet-ingest-node-to-cluster/311958)
**Author:** [@BRosenberg](https://discuss.elastic.co/u/BRosenberg)\ **Replies:** 0\ **Last updated:** [August 11, 2022, 5:51pm UTC](https://discuss.elastic.co/t/adding-kibana-fleet-ingest-node-to-cluster/311958 "2022-08-11T17:51:39Z")
Hello. I'm attempting to add a 4th node to my cluster. Nodes: \[elastic-node-01\] \[elastic-79\] \[elastic-180\] Roles: master, data \[kibana-primary\] Roles: ingest, ml, remote\_cluster\_client, transform I'm trying to instal… --- ## [Documentation for dynamic template mappings?](https://discuss.elastic.co/t/documentation-for-dynamic-template-mappings/311746)
**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\ **Replies:** 3\ **Last updated:** [August 11, 2022, 8:55am UTC](https://discuss.elastic.co/t/documentation-for-dynamic-template-mappings/311746 "2022-08-11T08:55:47Z")
Hello, I have trouble finding API documentation for setting dynamic templates. I expected this to be documented at Update mapping API | Elasticsearch Guide \[8.3\] | Elastic , but this just points to "mapping object" (A … --- ## [Connecting to ElasticSearch from Tableau Desktop](https://discuss.elastic.co/t/connecting-to-elasticsearch-from-tableau-desktop/311906)
**Author:** [@Naresh\_Vadla](https://discuss.elastic.co/u/Naresh_Vadla)\ **Replies:** 1\ **Last updated:** [August 11, 2022, 8:22am UTC](https://discuss.elastic.co/t/connecting-to-elasticsearch-from-tableau-desktop/311906 "2022-08-11T08:22:36Z")
I am trying to connect to Elasticsearch from Tableau Desktop. I am using Tableau Desktop 2021.x, Tableau Desktop 2022.x versions. My Elastic search version is 7.11.2. I have followed everything mentioned in But It is … --- ## [Does elasticsearch not support nfs as data directory?](https://discuss.elastic.co/t/does-elasticsearch-not-support-nfs-as-data-directory/311692)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 7\ **Last updated:** [August 11, 2022, 6:30am UTC](https://discuss.elastic.co/t/does-elasticsearch-not-support-nfs-as-data-directory/311692 "2022-08-11T06:30:37Z")
es: 7.17.3 I mount the nfs path locally, and then point the es data directory to the location of the nfs, but the es startup fails, if I change the es data directory to a local partition (var/lib/elasticsearch) , then e… --- ## [Esrally: error: --target-hosts and --client-options must define the same keys for multi cluster setups](https://discuss.elastic.co/t/esrally-error-target-hosts-and-client-options-must-define-the-same-keys-for-multi-cluster-setups/311780)
**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\ **Replies:** 8\ **Last updated:** [August 11, 2022, 4:58am UTC](https://discuss.elastic.co/t/esrally-error-target-hosts-and-client-options-must-define-the-same-keys-for-multi-cluster-setups/311780 "2022-08-11T04:58:58Z")
Rally version elastic/rally latest version The command is as shown above. Because the destination elasticsearch uses xpack, I use client-options to prevent a security exception. Even after looking at the official … --- ## [Reset elastic user password in docker container](https://discuss.elastic.co/t/reset-elastic-user-password-in-docker-container/311884)
**Author:** [@single.track.mind](https://discuss.elastic.co/u/single.track.mind)\ **Replies:** 3\ **Last updated:** [August 11, 2022, 12:30am UTC](https://discuss.elastic.co/t/reset-elastic-user-password-in-docker-container/311884 "2022-08-11T00:30:55Z")
I have inherited a 7.16.2 elastic cluster with Basic license, running in docker containers(using docker-compose) and am trying to add xpack.security.enabled=true as an intermediate step to configure internal user passwo… --- ## [Change type character varying to date elasticsearch](https://discuss.elastic.co/t/change-type-character-varying-to-date-elasticsearch/311885)
**Author:** [@5k\_pwc](https://discuss.elastic.co/u/5k_pwc)\ **Replies:** 1\ **Last updated:** [August 10, 2022, 10:52pm UTC](https://discuss.elastic.co/t/change-type-character-varying-to-date-elasticsearch/311885 "2022-08-10T22:52:11Z")
hi , anyone know how to changed data from char to date, i have inserted this code but she doesnt work . "datecons" : { "type" : "date" "format": "yyyy-MM-dd HH:mm:ss.SSSSSS" }, and my data like this: --- ## [Cant access API. Get unauthorized message](https://discuss.elastic.co/t/cant-access-api-get-unauthorized-message/311876)
**Author:** [@MK817664](https://discuss.elastic.co/u/MK817664)\ **Replies:** 0\ **Last updated:** [August 10, 2022, 8:38pm UTC](https://discuss.elastic.co/t/cant-access-api-get-unauthorized-message/311876 "2022-08-10T20:38:25Z")
So I'm very new and green to ES, I was trying to run over some online docs to try and get the connected to the API and do a insert of an attachment (PDF) When I attempted to run the put command I get back action \[indic… --- ## [Analysis the Logs of the Elastic](https://discuss.elastic.co/t/analysis-the-logs-of-the-elastic/311845)
**Author:** [@Aravind1](https://discuss.elastic.co/u/Aravind1)\ **Replies:** 1\ **Last updated:** [August 10, 2022, 9:40pm UTC](https://discuss.elastic.co/t/analysis-the-logs-of-the-elastic/311845 "2022-08-10T21:40:41Z")
Hi, We are having a few queries on Elasticsearch logs optimization, we are doing the cost optimization and analyzing the consumed resources logs and breakups for each and every resource. As per the developer's perspec… --- ## [Scaling of the Elastic](https://discuss.elastic.co/t/scaling-of-the-elastic/311846)
**Author:** [@Aravind1](https://discuss.elastic.co/u/Aravind1)\ **Replies:** 1\ **Last updated:** [August 10, 2022, 9:40pm UTC](https://discuss.elastic.co/t/scaling-of-the-elastic/311846 "2022-08-10T21:40:04Z")
Hi, How to check the current usage of the Elasticsearch and is there any possibility to do the scaling of the elastic --- ## [Apply "doesn't equal" with nested query](https://discuss.elastic.co/t/apply-doesnt-equal-with-nested-query/311821)
**Author:** [@Anh\_Le](https://discuss.elastic.co/u/Anh_Le)\ **Replies:** 1\ **Last updated:** [August 10, 2022, 9:13pm UTC](https://discuss.elastic.co/t/apply-doesnt-equal-with-nested-query/311821 "2022-08-10T21:13:56Z")
Hi there! Please help to suggest queries to get data. How to get documents that don't have FilterFields. ContentFieldUseID = 20 and FilterFields.ContentFieldValues = "aaaa@gmail.com". Expected result: I want to get two… --- ## [Connection error with ssh and pem file (FSCrawler)](https://discuss.elastic.co/t/connection-error-with-ssh-and-pem-file-fscrawler/311878)
**Author:** [@Doddy\_Joel](https://discuss.elastic.co/u/Doddy_Joel)\ **Replies:** 0\ **Last updated:** [August 10, 2022, 9:02pm UTC](https://discuss.elastic.co/t/connection-error-with-ssh-and-pem-file-fscrawler/311878 "2022-08-10T21:02:39Z")
I'm using FSCrawler by @dadoonet and I'm trying to connect directory with ssh. I have ssh configured on my server so I can access a directory and use FSCrawler. The steps I have followed are as follows: Create a publ… --- ## [Match Query for 2 Fields from 2 Indices (Like SQL Inner Join)](https://discuss.elastic.co/t/match-query-for-2-fields-from-2-indices-like-sql-inner-join/310990)
**Author:** [@codewriterguy](https://discuss.elastic.co/u/codewriterguy)\ **Replies:** 2\ **Last updated:** [August 10, 2022, 7:40pm UTC](https://discuss.elastic.co/t/match-query-for-2-fields-from-2-indices-like-sql-inner-join/310990 "2022-08-10T19:40:45Z")
Hi, I am wondering if it is possible to query ES for matches on values in 2 fields from 2 indexes, so that I can use resulting values from both events in visualizations. I've set up indicator match rules via Kibana and… --- ## [Creating success rate based on boolean field](https://discuss.elastic.co/t/creating-success-rate-based-on-boolean-field/311812)
**Author:** [@frederico](https://discuss.elastic.co/u/frederico)\ **Replies:** 0\ **Last updated:** [August 10, 2022, 9:36am UTC](https://discuss.elastic.co/t/creating-success-rate-based-on-boolean-field/311812 "2022-08-10T09:36:30Z")
Hello, I'm using elk 7.11.2 I want to do a line chart where I plot a ratio over time of a certain boolean field. Ie, i want aggregate by time (minutes or hours) and plot the percentage of records where the boolean fie… --- ## [Extract value from message field ( runtime fields)](https://discuss.elastic.co/t/extract-value-from-message-field-runtime-fields/311679)
**Author:** [@jplopezy](https://discuss.elastic.co/u/jplopezy)\ **Replies:** 16\ **Last updated:** [August 10, 2022, 2:23pm UTC](https://discuss.elastic.co/t/extract-value-from-message-field-runtime-fields/311679 "2022-08-10T14:23:44Z")
Hello everyone, Currently, I have an OpenVPN log that is sent from the server to elastic... from what I see the fields are pretty generic and the most important one is "message", it has all the information and I can't p… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=390) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=392)