# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=395 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 396 --- ## [Compare two indexes different field value](https://discuss.elastic.co/t/compare-two-indexes-different-field-value/311303)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 2\ **Last updated:** [August 4, 2022, 8:40am UTC](https://discuss.elastic.co/t/compare-two-indexes-different-field-value/311303 "2022-08-04T08:40:11Z")
Hi, i would like to know if it is possible to compare field.value with different indexes i mean for example i have index1 and index2 and each index has fields so i want to compare field value of index1 with field value … --- ## [Query returns empty result when filtering on labels and timestamp](https://discuss.elastic.co/t/query-returns-empty-result-when-filtering-on-labels-and-timestamp/311305)
**Author:** [@ithline](https://discuss.elastic.co/u/ithline)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 8:38am UTC](https://discuss.elastic.co/t/query-returns-empty-result-when-filtering-on-labels-and-timestamp/311305 "2022-08-04T08:38:11Z")
Hello there, I'm having some problems with querying in Kibana, so I tried to create manual query using the /\_search API. My index template is composed of .alerts-ecs-mappings, logs-mappings and logs-settings component … --- ## [How to filter only specific objects from nested array in elasticsearch?](https://discuss.elastic.co/t/how-to-filter-only-specific-objects-from-nested-array-in-elasticsearch/310691)
**Author:** [@Munam\_Tariq](https://discuss.elastic.co/u/Munam_Tariq)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 7:08am UTC](https://discuss.elastic.co/t/how-to-filter-only-specific-objects-from-nested-array-in-elasticsearch/310691 "2022-08-04T07:08:07Z")
{ "sku\_id": 12, "product\_id": 1, "product\_name": "coca-cola 1.5 L", "category\_name": "beverages", "brand\_name": "coca cola", "sellers": \[ { "seller": 1, "price": 50 }, { "seller"… --- ## [Task limitations](https://discuss.elastic.co/t/task-limitations/311271)
**Author:** [@Spyros\_Giannopulos](https://discuss.elastic.co/u/Spyros_Giannopulos)\ **Replies:** 2\ **Last updated:** [August 4, 2022, 6:57am UTC](https://discuss.elastic.co/t/task-limitations/311271 "2022-08-04T06:57:48Z")
Hello, I am planning to push in a cluster without limits tasks in low priority that may take time from seconds to maybe sometimes minutes to finish. The number of tasks can vary without protecting it with limits. I trie… --- ## [Datastream index name](https://discuss.elastic.co/t/datastream-index-name/310985)
**Author:** [@Viktor\_Avramovski](https://discuss.elastic.co/u/Viktor_Avramovski)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 6:56am UTC](https://discuss.elastic.co/t/datastream-index-name/310985 "2022-08-04T06:56:55Z")
Hey I was reading the documentation here: Data streams | Elasticsearch Guide \[7.17\] | Elastic I read that the index name is generated with the following format .ds-\-\-\ This means … --- ## [Need to migrate data from Single Node Elastic Search Cluster to new Multi Node Elastic Search Cluster](https://discuss.elastic.co/t/need-to-migrate-data-from-single-node-elastic-search-cluster-to-new-multi-node-elastic-search-cluster/311324)
**Author:** [@Sidd\_Sach](https://discuss.elastic.co/u/Sidd_Sach)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 6:51am UTC](https://discuss.elastic.co/t/need-to-migrate-data-from-single-node-elastic-search-cluster-to-new-multi-node-elastic-search-cluster/311324 "2022-08-04T06:51:06Z")
We have a single node Elastic Search cluster (v7.17.1) running. We are creating a new multi node Master-Data-Client Elastic Search (v7.17.1) cluster for high-availability. We are using Kubernetes and helm charts for dep… --- ## [Combined fields error](https://discuss.elastic.co/t/combined-fields-error/311364)
**Author:** [@renxu](https://discuss.elastic.co/u/renxu)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 6:50am UTC](https://discuss.elastic.co/t/combined-fields-error/311364 "2022-08-04T06:50:47Z")
{ "query": { "combined\_fields" : { "query": "database systems", "fields": \[ "title", "abstract", "body"\], "operator": "and" } } } { "error": { "root\_cause": \[ { "type": "parsing\_exception", "reas… --- ## [Why is retry\_on\_conflict necessary?](https://discuss.elastic.co/t/why-is-retry-on-conflict-necessary/311177)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 6:50am UTC](https://discuss.elastic.co/t/why-is-retry-on-conflict-necessary/311177 "2022-08-04T06:50:09Z")
We are battling to understand why version conflicts occur and why retry\_on\_conflict is a sensible strategy to resolving them. Consider Document \_id: 1 which has value foo: 1 and \_version: 1. If several processes try to … --- ## [ES VersionConflictEngineException current version \[-1\]](https://discuss.elastic.co/t/es-versionconflictengineexception-current-version-1/311282)
**Author:** [@zhcwang](https://discuss.elastic.co/u/zhcwang)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 6:33am UTC](https://discuss.elastic.co/t/es-versionconflictengineexception-current-version-1/311282 "2022-08-04T06:33:23Z")
I am using ElasticSearch Cluster backed by 3 nodes and batch update several items in one run. It reports version conflicts of one item, and the raw log is VersionConflictEngineException\[\[informationObjects\]\[BTRB3H7GNVG… --- ## [No support for distance between a term and an exact term with slop](https://discuss.elastic.co/t/no-support-for-distance-between-a-term-and-an-exact-term-with-slop/311309)
**Author:** [@Savi\_Ifraimov](https://discuss.elastic.co/u/Savi_Ifraimov)\ **Replies:** 2\ **Last updated:** [August 4, 2022, 6:16am UTC](https://discuss.elastic.co/t/no-support-for-distance-between-a-term-and-an-exact-term-with-slop/311309 "2022-08-04T06:16:59Z")
Hello, I am trying to use the 'simple query string query' (as well as other query options) to give me certain results and wonder about my options / if it is possible. The challenge: to search for a term1 within distanc… --- ## [Elasticsearch: Nested JSON object parsing and aggregation](https://discuss.elastic.co/t/elasticsearch-nested-json-object-parsing-and-aggregation/311340)
**Author:** [@Josh\_Thatcher](https://discuss.elastic.co/u/Josh_Thatcher)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 6:12am UTC](https://discuss.elastic.co/t/elasticsearch-nested-json-object-parsing-and-aggregation/311340 "2022-08-04T06:12:33Z")
I am currently working on a project that takes GitLab Security Scanner artifacts, curls the JSON artifact files to ElasticSearch, and then visualizes certain information from said artifacts. In this scenario, I am trying… --- ## [Transport Error 503](https://discuss.elastic.co/t/transport-error-503/311201)
**Author:** [@RohitBR\_K](https://discuss.elastic.co/u/RohitBR_K)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 2:00am UTC](https://discuss.elastic.co/t/transport-error-503/311201 "2022-08-04T02:00:21Z")
Traceback (most recent call last): File "/usr/lib/python3.8/code.py", line 90, in runcode exec(code, self.locals) File "", line 1, in File "/usr/local/lib/python3.8/dist-packages/elasticsearch/client/utils.py", line… --- ## [Failed to put mappings on indices](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices/311224)
**Author:** [@davekang](https://discuss.elastic.co/u/davekang)\ **Replies:** 2\ **Last updated:** [August 4, 2022, 1:59am UTC](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices/311224 "2022-08-04T01:59:59Z")
hi I created a new index for re-indexing and tried re-indexing, but I get the following error: \[DEBUG\]\[o.e.a.a.i.m.p.TransportPutMappingAction\] \[node-01\] failed to put mappings on indices \[\[\[ma\_2022/mmRNrJPwRfutlNQs8L… --- ## [LICENSE \[EXPIRED\]?](https://discuss.elastic.co/t/license-expired/311279)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 1:57am UTC](https://discuss.elastic.co/t/license-expired/311279 "2022-08-04T01:57:16Z")
HELLO, I used elasticsearch + kibana for a 30 day trial on mars so LICENSE \[EXPIRED\] ON \[WEDNESDAY, APRIL 20, 2022\]. so i reinstalled another elasticsearch+kibana and i start using normally. yesterday i created new inde… --- ## [Elastalert certification on ELK 8](https://discuss.elastic.co/t/elastalert-certification-on-elk-8/311350)
**Author:** [@Mohamed\_Alawami](https://discuss.elastic.co/u/Mohamed_Alawami)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 12:04am UTC](https://discuss.elastic.co/t/elastalert-certification-on-elk-8/311350 "2022-08-04T00:04:54Z")
I am having an error and not ebale to setup the certification for pem in ELK. The certification comes end with. . 12 not pem. I tired to generate it using ELK tools but it did not work --- ## [Watcher Rule](https://discuss.elastic.co/t/watcher-rule/311153)
**Author:** [@Elk\_huh](https://discuss.elastic.co/u/Elk_huh)\ **Replies:** 7\ **Last updated:** [August 3, 2022, 7:44pm UTC](https://discuss.elastic.co/t/watcher-rule/311153 "2022-08-03T19:44:29Z")
I want to do a universal Rule for if All indices fall below a certain threshold , then alert on specific index at question. How do i specify the Index name in the Body of this watcher request ? --- ## [Installing Elastic License using Helm charts 7.x](https://discuss.elastic.co/t/installing-elastic-license-using-helm-charts-7-x/311319)
**Author:** [@AndreRosendo](https://discuss.elastic.co/u/AndreRosendo)\ **Replies:** 0\ **Last updated:** [August 3, 2022, 2:45pm UTC](https://discuss.elastic.co/t/installing-elastic-license-using-helm-charts-7-x/311319 "2022-08-03T14:45:16Z")
I've just acquired a license for the elastic stack and I'm trying to install it using helm charts. It is implied by the charts that you can install the license by mounting a secret but nowhere in the documentation I was… --- ## [JSON indexing in kibana](https://discuss.elastic.co/t/json-indexing-in-kibana/311265)
**Author:** [@Ritikapawar](https://discuss.elastic.co/u/Ritikapawar)\ **Replies:** 1\ **Last updated:** [August 3, 2022, 2:01pm UTC](https://discuss.elastic.co/t/json-indexing-in-kibana/311265 "2022-08-03T14:01:02Z")
I have created a index using kibana console the sample JSON data format - \[{ "id":1, "Data":"{'patient\_name':'Amey','gender':'Male'}", "added\_on":"2021-09-28 17:58:16", "added\_by":0, "status":1 }, { "id":2, "Data":"{… --- ## [Elasticsearch masters not discovering each other on Docker Swarm](https://discuss.elastic.co/t/elasticsearch-masters-not-discovering-each-other-on-docker-swarm/311230)
**Author:** [@bushwhacker](https://discuss.elastic.co/u/bushwhacker)\ **Replies:** 5\ **Last updated:** [August 3, 2022, 1:12pm UTC](https://discuss.elastic.co/t/elasticsearch-masters-not-discovering-each-other-on-docker-swarm/311230 "2022-08-03T13:12:36Z")
I am trying to set up an elasticsearch stack using docker swarm (Don't really need swarm functionality, but the .yml has been written now) The problem I seem to be getting is that when i start up the stack, the two mast… --- ## [Hardening elasticsearch using certificate from sectigo](https://discuss.elastic.co/t/hardening-elasticsearch-using-certificate-from-sectigo/311296)
**Author:** [@xalastoi](https://discuss.elastic.co/u/xalastoi)\ **Replies:** 3\ **Last updated:** [August 3, 2022, 11:47am UTC](https://discuss.elastic.co/t/hardening-elasticsearch-using-certificate-from-sectigo/311296 "2022-08-03T11:47:04Z")
0 Due to auditing requirements, it is necessary to encrypt all connections between the application and the elasticsearch cluster after a little googling, I realized that the elasticsearch cluster protection looks like t… --- ## [Custom log4j2.propoerties for Elasticsearch in docker](https://discuss.elastic.co/t/custom-log4j2-propoerties-for-elasticsearch-in-docker/310321)
**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\ **Replies:** 3\ **Last updated:** [August 3, 2022, 11:38am UTC](https://discuss.elastic.co/t/custom-log4j2-propoerties-for-elasticsearch-in-docker/310321 "2022-08-03T11:38:51Z")
Hello, On docker, log messages go to the console and are handled by the configured Docker logging driver. To access logs we need to run docker logs $container\_name. I would like to change this behavior, and ask Elastic… --- ## [Elasticsearch data nodes](https://discuss.elastic.co/t/elasticsearch-data-nodes/311206)
**Author:** [@Farah\_Bhr](https://discuss.elastic.co/u/Farah_Bhr)\ **Replies:** 1\ **Last updated:** [August 3, 2022, 11:11am UTC](https://discuss.elastic.co/t/elasticsearch-data-nodes/311206 "2022-08-03T11:11:49Z")
Hello I am a beginner at elastic , I want to ask you what is the criteria to add another elasticsearch data node , meaning how to know if my elasticsearch node needs another node to perform better , is there a percentage… --- ## [date.toString() doesn't work after upgrading to ES 8.3](https://discuss.elastic.co/t/date-tostring-doesnt-work-after-upgrading-to-es-8-3/311290)
**Author:** [@Joao\_Silva](https://discuss.elastic.co/u/Joao_Silva)\ **Replies:** 1\ **Last updated:** [August 3, 2022, 10:50am UTC](https://discuss.elastic.co/t/date-tostring-doesnt-work-after-upgrading-to-es-8-3/311290 "2022-08-03T10:50:55Z")
After updating the ES to the newest version some of my runtime fields stop working, basically, the date.toString() doesn't work anymore to convert a date to a string. Is there any option for this? I have been searching … --- ## [How to sort buckets in Elasticsearch on their first occurrence in a search?](https://discuss.elastic.co/t/how-to-sort-buckets-in-elasticsearch-on-their-first-occurrence-in-a-search/311288)
**Author:** [@Peter\_Dewachtere](https://discuss.elastic.co/u/Peter_Dewachtere)\ **Replies:** 0\ **Last updated:** [August 3, 2022, 10:08am UTC](https://discuss.elastic.co/t/how-to-sort-buckets-in-elasticsearch-on-their-first-occurrence-in-a-search/311288 "2022-08-03T10:08:33Z")
I have an Elasticsearch query (version 7) that returns a paged result of products. The query has a specific sort on multiple fields: Product A - image 1 Product B - image 1 Product C - image 2 Product D - image 2 Prod… --- ## [How to run multiple indexing threads on a single machine?](https://discuss.elastic.co/t/how-to-run-multiple-indexing-threads-on-a-single-machine/311058)
**Author:** [@Niels\_Basjes](https://discuss.elastic.co/u/Niels_Basjes)\ **Replies:** 2\ **Last updated:** [August 3, 2022, 8:44am UTC](https://discuss.elastic.co/t/how-to-run-multiple-indexing-threads-on-a-single-machine/311058 "2022-08-03T08:44:54Z")
I have written an Elasticsearch plugin ( analyzes the UserAgent string ) that works the way I have in mind when I put it in a pipeline. (see Elastic Search | Yauaa - Yet Another UserAgent Analyzer ) Now on my laptop I w… --- ## [Elastic Search query with "+" prefix character escape not working](https://discuss.elastic.co/t/elastic-search-query-with-prefix-character-escape-not-working/311274)
**Author:** [@tobi\_owolawi](https://discuss.elastic.co/u/tobi_owolawi)\ **Replies:** 0\ **Last updated:** [August 3, 2022, 8:10am UTC](https://discuss.elastic.co/t/elastic-search-query-with-prefix-character-escape-not-working/311274 "2022-08-03T08:10:18Z")
I have this issue currently with my elastic search not working suddenly. trying either of the following shows no hits when they are escaped. GET /policies/\_search { "query" : { "simple\_query\_string" : { "que… --- ## [Problem with indexing Cisco Logfiles](https://discuss.elastic.co/t/problem-with-indexing-cisco-logfiles/309724)
**Author:** [@MADxHAWK](https://discuss.elastic.co/u/MADxHAWK)\ **Replies:** 5\ **Last updated:** [August 3, 2022, 7:40am UTC](https://discuss.elastic.co/t/problem-with-indexing-cisco-logfiles/309724 "2022-08-03T07:40:18Z")
Hello Community, i am quite new to ELK-Stack and i ran into some problems with indexing Cisco Logfiles to make them searchable in Kibana. Background informations: Server A: xx.xxx.xxx.102 (Loghost) Running syslog-ng… --- ## [Unable to start elasticsearch after upgrade 7.17 -\> 8.2 timeout was exceeded](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-upgrade-7-17-8-2-timeout-was-exceeded/310960)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 13\ **Last updated:** [August 3, 2022, 6:02am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-upgrade-7-17-8-2-timeout-was-exceeded/310960 "2022-08-03T06:02:40Z")
Can you please direct me how to solve the problem when starting elasticsearch node after its upgrade to 8.2 system startup timeouts despite the fact that I adjusted the timeout to 3 minutes i followed this procedure i… --- ## [Regexp with DSL query](https://discuss.elastic.co/t/regexp-with-dsl-query/311249)
**Author:** [@antonisnyc94](https://discuss.elastic.co/u/antonisnyc94)\ **Replies:** 0\ **Last updated:** [August 3, 2022, 12:44am UTC](https://discuss.elastic.co/t/regexp-with-dsl-query/311249 "2022-08-03T00:44:21Z")
Hello, Im trying to run a regexp query for the below string but I keep getting Bad String error.. Any ideas? Actual substring i want to match within a string is "verbs"=\>\["\*"\] { "query": { "regexp": { "dat… --- ## [ElasticSearch restart problem (Lucene Version mismatch)](https://discuss.elastic.co/t/elasticsearch-restart-problem-lucene-version-mismatch/310944)
**Author:** [@JUN\_HO\_CHOI\_KR\_SEL](https://discuss.elastic.co/u/JUN_HO_CHOI_KR_SEL)\ **Replies:** 6\ **Last updated:** [August 2, 2022, 11:55pm UTC](https://discuss.elastic.co/t/elasticsearch-restart-problem-lucene-version-mismatch/310944 "2022-08-02T23:55:50Z")
Hi I using Azure Vm and Elastic & Kibana I restart the vm and i Encounterd the error when i restart the Elasticsearch the error message is Job for elasticsearch.service failed because the control process exited with … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=394) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=396)