# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=401

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 402

---

## [Is it possible to create a proxy between elasticsearch and kibana v2?](https://discuss.elastic.co/t/is-it-possible-to-create-a-proxy-between-elasticsearch-and-kibana-v2/310433)

<div class="topic-metadata">

**Author:** [@aarbs](https://discuss.elastic.co/u/aarbs)\
**Replies:** 3\
**Last updated:** [July 23, 2022, 3:29am UTC](https://discuss.elastic.co/t/is-it-possible-to-create-a-proxy-between-elasticsearch-and-kibana-v2/310433 "2022-07-23T03:29:40Z")

</div>

Hi Elastisearch team, I'm wondering if it's possible to create a proxy server between elasticsearch and kibana? The goal is to build a caching layer that stores queries and results for recent alerts. This will allow de…

---

## [Elastic start but after 30sec stop](https://discuss.elastic.co/t/elastic-start-but-after-30sec-stop/308200)

<div class="topic-metadata">

**Author:** [@linuxpitjo](https://discuss.elastic.co/u/linuxpitjo)\
**Replies:** 4\
**Last updated:** [July 23, 2022, 2:18am UTC](https://discuss.elastic.co/t/elastic-start-but-after-30sec-stop/308200 "2022-07-23T02:18:25Z")

</div>

Hello everybody, I need help for a problem than i can't resolv myself i have already install Elasticsearch with tutorial i follow instruction of this website Tutorial link but strangely i have an error when i start …

---

## [Cannot start Elasticsearch service when installing Elasticsearch with Debian package on Linux Mint localhost](https://discuss.elastic.co/t/cannot-start-elasticsearch-service-when-installing-elasticsearch-with-debian-package-on-linux-mint-localhost/309604)

<div class="topic-metadata">

**Author:** [@marius03](https://discuss.elastic.co/u/marius03)\
**Replies:** 6\
**Last updated:** [July 23, 2022, 12:17am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-service-when-installing-elasticsearch-with-debian-package-on-linux-mint-localhost/309604 "2022-07-23T00:17:00Z")

</div>

I installed Eleasticsearch following the tutorial: Install Elasticsearch with Debian Package | Elasticsearch Guide \[8.3\] | Elastic Everything installs perfectly: Unpacking elasticsearch (8.3.2) ... Setting up elasticse…

---

## [Cannot configure Elasticsearch / Kibana](https://discuss.elastic.co/t/cannot-configure-elasticsearch-kibana/310434)

<div class="topic-metadata">

**Author:** [@vnkasturi](https://discuss.elastic.co/u/vnkasturi)\
**Replies:** 1\
**Last updated:** [July 23, 2022, 12:13am UTC](https://discuss.elastic.co/t/cannot-configure-elasticsearch-kibana/310434 "2022-07-23T00:13:36Z")

</div>

After multiple tries finally able to load Kibana page, it is asking me to configure Elasticsearch. I generated Token and provided it then asked me for Kibana verification code, when I tried to provide that code it is not…

---

## [Script Returning Unexpected Result](https://discuss.elastic.co/t/script-returning-unexpected-result/310415)

<div class="topic-metadata">

**Author:** [@cj\_hillbrand](https://discuss.elastic.co/u/cj_hillbrand)\
**Replies:** 7\
**Last updated:** [July 22, 2022, 6:41pm UTC](https://discuss.elastic.co/t/script-returning-unexpected-result/310415 "2022-07-22T18:41:16Z")

</div>

Hello Elastic Community, I am beginning to write some server side scripts, and was running into a few issues. I think it stems from my fundamental understanding of the data structures and objects that are handled in the…

---

## [Shard Configuration](https://discuss.elastic.co/t/shard-configuration/310406)

<div class="topic-metadata">

**Author:** [@shinobu](https://discuss.elastic.co/u/shinobu)\
**Replies:** 1\
**Last updated:** [July 22, 2022, 4:51pm UTC](https://discuss.elastic.co/t/shard-configuration/310406 "2022-07-22T16:51:03Z")

</div>

Hello, i'm using ILM for managing my indexes. Currently I have set the max size for shards to 30gb til the next index is written. Since ILM is automatically creating new Indexes with 1 shard of up to 30gb properly size…

---

## [Sort with limiting consecutive amount of hits by field value](https://discuss.elastic.co/t/sort-with-limiting-consecutive-amount-of-hits-by-field-value/310154)

<div class="topic-metadata">

**Author:** [@vitalyiegorov](https://discuss.elastic.co/u/vitalyiegorov)\
**Replies:** 1\
**Last updated:** [July 22, 2022, 4:09pm UTC](https://discuss.elastic.co/t/sort-with-limiting-consecutive-amount-of-hits-by-field-value/310154 "2022-07-22T16:09:36Z")

</div>

We have an ecommerce products index, which has Brand field(keyword) and a PublishDate field(date). We need a New items sort, which should sort results by returning no more than 5 consecutive products of each brand sort…

---

## [Error in elasticsearch Backup via HMAC](https://discuss.elastic.co/t/error-in-elasticsearch-backup-via-hmac/310297)

<div class="topic-metadata">

**Author:** [@Sagar\_Shivani](https://discuss.elastic.co/u/Sagar_Shivani)\
**Replies:** 1\
**Last updated:** [July 22, 2022, 2:44pm UTC](https://discuss.elastic.co/t/error-in-elasticsearch-backup-via-hmac/310297 "2022-07-22T14:44:54Z")

</div>

I was trying using s3 for uploading to data on to GCP via HMAC keys..I am getting this error Register Repository Response: {"error":{"root\_cause":\[{"type":"repository\_verification\_exception","reason":"\[dev--110425--elas…

---

## [Ingest pipeline date processor - text could not be parsed at index 0](https://discuss.elastic.co/t/ingest-pipeline-date-processor-text-could-not-be-parsed-at-index-0/310374)

<div class="topic-metadata">

**Author:** [@Vladi](https://discuss.elastic.co/u/Vladi)\
**Replies:** 4\
**Last updated:** [July 22, 2022, 2:17pm UTC](https://discuss.elastic.co/t/ingest-pipeline-date-processor-text-could-not-be-parsed-at-index-0/310374 "2022-07-22T14:17:09Z")

</div>

Hi, I am trying to parse the 5 digits date 2022611 with a pattern yyyyMdd. POST /\_ingest/pipeline/\_simulate { "pipeline" : { "description": "\_description", "processors": \[ { "date" : { …

---

## [Elasticsearch logs params](https://discuss.elastic.co/t/elasticsearch-logs-params/310403)

<div class="topic-metadata">

**Author:** [@mirisu2](https://discuss.elastic.co/u/mirisu2)\
**Replies:** 0\
**Last updated:** [July 22, 2022, 12:47pm UTC](https://discuss.elastic.co/t/elasticsearch-logs-params/310403 "2022-07-22T12:47:38Z")

</div>

Hi, elasticsearch logs settings have many params like "logger.org.elasticsearch.index.reindex" : "logger.org.elasticsearch.transport": "logger.org.elasticsearch.discovery": I would like to find all possible params l…

---

## [Elastic cluster destroyes SSD's?](https://discuss.elastic.co/t/elastic-cluster-destroyes-ssds/308985)

<div class="topic-metadata">

**Author:** [@azeiner](https://discuss.elastic.co/u/azeiner)\
**Replies:** 12\
**Last updated:** [July 22, 2022, 12:11pm UTC](https://discuss.elastic.co/t/elastic-cluster-destroyes-ssds/308985 "2022-07-22T12:11:49Z")

</div>

I'm using Elastic 7.17.3 in a 3 Node Cluster on Windows - we have Redis as a ingest and cache database and running logstash to transfer daten from redis to the cluster - so far so good. Now i'm encoutering issues like …

---

## [SentinelOne Integration](https://discuss.elastic.co/t/sentinelone-integration/310378)

<div class="topic-metadata">

**Author:** [@Medel](https://discuss.elastic.co/u/Medel)\
**Replies:** 3\
**Last updated:** [July 22, 2022, 11:20am UTC](https://discuss.elastic.co/t/sentinelone-integration/310378 "2022-07-22T11:20:21Z")

</div>

Hello , I'm trying to integrate SentinelOne API to Elastic for the purpose of collecting logs but unfortunatly i can't find any tutorial or information on how to use the API token generated from the used and integrate i…

---

## [Theory question: How to recover data from 3 node cluster after 2 nodes failed](https://discuss.elastic.co/t/theory-question-how-to-recover-data-from-3-node-cluster-after-2-nodes-failed/310262)

<div class="topic-metadata">

**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\
**Replies:** 3\
**Last updated:** [July 22, 2022, 8:07am UTC](https://discuss.elastic.co/t/theory-question-how-to-recover-data-from-3-node-cluster-after-2-nodes-failed/310262 "2022-07-22T08:07:54Z")

</div>

Long time no see, but hello again. We had a 3 Node cluster running very well till it stopped running very well. The SSD's of 2 Nodes failed in a timespan of 4 hours. This was in the middle of the night so no actions cou…

---

## [The content of the field is not shown in alert](https://discuss.elastic.co/t/the-content-of-the-field-is-not-shown-in-alert/309637)

<div class="topic-metadata">

**Author:** [@csaba.g](https://discuss.elastic.co/u/csaba.g)\
**Replies:** 10\
**Last updated:** [July 22, 2022, 9:21am UTC](https://discuss.elastic.co/t/the-content-of-the-field-is-not-shown-in-alert/309637 "2022-07-22T09:21:50Z")

</div>

Hello, I defined an Alert Rule with Connector email. I would like to have in the received email the particular message, for which we defined the condition. The field which I would like to see is message. I tried differe…

---

## [How to recreate shard failure](https://discuss.elastic.co/t/how-to-recreate-shard-failure/310114)

<div class="topic-metadata">

**Author:** [@vel](https://discuss.elastic.co/u/vel)\
**Replies:** 3\
**Last updated:** [July 22, 2022, 6:03am UTC](https://discuss.elastic.co/t/how-to-recreate-shard-failure/310114 "2022-07-22T06:03:50Z")

</div>

I am trying to find a way for recreating the shard failure in Elasticsearch When querying ES can return a 200 response , even if one of the shards had failed to respond. how do I recreate error, for testing. { "too…

---

## [Query for end date greater than now or doesn't exist not working](https://discuss.elastic.co/t/query-for-end-date-greater-than-now-or-doesnt-exist-not-working/310361)

<div class="topic-metadata">

**Author:** [@Ellie\_Y](https://discuss.elastic.co/u/Ellie_Y)\
**Replies:** 0\
**Last updated:** [July 22, 2022, 3:43am UTC](https://discuss.elastic.co/t/query-for-end-date-greater-than-now-or-doesnt-exist-not-working/310361 "2022-07-22T03:43:40Z")

</div>

My 'must' query works fine but the should returns the following error: "No query registered for \[exists\]" I want to find documents that either do not have a stopPublishDate or if they do have one the date must be in th…

---

## [Esrally benchmarking elastic cluster running on kubernetes on AWS](https://discuss.elastic.co/t/esrally-benchmarking-elastic-cluster-running-on-kubernetes-on-aws/309641)

<div class="topic-metadata">

**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\
**Replies:** 7\
**Last updated:** [July 22, 2022, 3:10am UTC](https://discuss.elastic.co/t/esrally-benchmarking-elastic-cluster-running-on-kubernetes-on-aws/309641 "2022-07-22T03:10:38Z")

</div>

Hi All, 1 esrally pods 1 master es pod 1 data es pod All these are running on separate ec2 instances. I am using i4i.16xLarge instance type. i4i.16xLarge 64 vCPUs 512 gb ram BULK SIZE 1000 BULK INDEXING CLIENT …

---

## [Does the new elasticsearch Java API client BulkOperation, BulkRequest, BulkResponse works similarly with HLRC BulkProcessor?](https://discuss.elastic.co/t/does-the-new-elasticsearch-java-api-client-bulkoperation-bulkrequest-bulkresponse-works-similarly-with-hlrc-bulkprocessor/310356)

<div class="topic-metadata">

**Author:** [@ALX\_DM](https://discuss.elastic.co/u/ALX_DM)\
**Replies:** 2\
**Last updated:** [July 22, 2022, 2:16am UTC](https://discuss.elastic.co/t/does-the-new-elasticsearch-java-api-client-bulkoperation-bulkrequest-bulkresponse-works-similarly-with-hlrc-bulkprocessor/310356 "2022-07-22T02:16:58Z")

</div>

It was said that there is no equivalent to HLRC BulkProcessor in the new elasticsearch Java API client BUT there are these BulkOperation, BulkRequest, BulkResponse...are they similar in a way?

---

## [Search template: Only aggregate with param condition](https://discuss.elastic.co/t/search-template-only-aggregate-with-param-condition/310350)

<div class="topic-metadata">

**Author:** [@Emporea](https://discuss.elastic.co/u/Emporea)\
**Replies:** 0\
**Last updated:** [July 21, 2022, 11:00pm UTC](https://discuss.elastic.co/t/search-template-only-aggregate-with-param-condition/310350 "2022-07-21T23:00:59Z")

</div>

Maybe I am misunderstanding the obvious. But how am i able to use a search template (mustache) and only aggregate certain aggs if a param is set to true? For example I have this search template { id: "test\_template",…

---

## [How can I 'start over' from scratch with a clean installation of ES?](https://discuss.elastic.co/t/how-can-i-start-over-from-scratch-with-a-clean-installation-of-es/310349)

<div class="topic-metadata">

**Author:** [@KKora](https://discuss.elastic.co/u/KKora)\
**Replies:** 2\
**Last updated:** [July 21, 2022, 10:55pm UTC](https://discuss.elastic.co/t/how-can-i-start-over-from-scratch-with-a-clean-installation-of-es/310349 "2022-07-21T22:55:18Z")

</div>

I installed ES and deleted the Elasticsearch folder. When I 'start over' from scratch with a clean installation, It does not creating certificate files? How to clean ES installation from my machine ?

---

## [elasticsearch.AuthenticationException: AuthenticationException(401, 'security\_exception', 'unable to authenticate user \[elastic\] for REST request \[/\]')](https://discuss.elastic.co/t/elasticsearch-authenticationexception-authenticationexception-401-security-exception-unable-to-authenticate-user-elastic-for-rest-request/310353)

<div class="topic-metadata">

**Author:** [@pivotallifesciences](https://discuss.elastic.co/u/pivotallifesciences)\
**Replies:** 0\
**Last updated:** [July 21, 2022, 11:38pm UTC](https://discuss.elastic.co/t/elasticsearch-authenticationexception-authenticationexception-401-security-exception-unable-to-authenticate-user-elastic-for-rest-request/310353 "2022-07-21T23:38:52Z")

</div>

from query\_patents.patents\_query\_tools import query\_big\_query from elasticsearch import Elasticsearch, helpers import configparser config = configparser.ConfigParser() config.read('tools/patent\_scraper/google\_patents/ex…

---

## [ELK bin modules don't work - x.pack,security issues?](https://discuss.elastic.co/t/elk-bin-modules-dont-work-x-pack-security-issues/310344)

<div class="topic-metadata">

**Author:** [@Nate\_F](https://discuss.elastic.co/u/Nate_F)\
**Replies:** 1\
**Last updated:** [July 21, 2022, 10:48pm UTC](https://discuss.elastic.co/t/elk-bin-modules-dont-work-x-pack-security-issues/310344 "2022-07-21T22:48:14Z")

</div>

I could be very wrong here as I have not deployed ELK in years. I opted to use the bitnami image to speed things up but I'm not sure if I should just scrap what I have and do the install manually. I'm trying to set perm…

---

## [Strategy for keeping multiple indices in the same cluster synchronized](https://discuss.elastic.co/t/strategy-for-keeping-multiple-indices-in-the-same-cluster-synchronized/310329)

<div class="topic-metadata">

**Author:** [@mbklein](https://discuss.elastic.co/u/mbklein)\
**Replies:** 1\
**Last updated:** [July 21, 2022, 10:44pm UTC](https://discuss.elastic.co/t/strategy-for-keeping-multiple-indices-in-the-same-cluster-synchronized/310329 "2022-07-21T22:44:44Z")

</div>

I have four indices in the same cluster (running ES v7.17, in case that matters) with different mappings and settings. For reasons that will soon become clear, we can call them v1 and v2-a, v2-b, and v2-c. v1 contains t…

---

## [Do you want live notifications when people reply to your posts? Enable Notifications Delays in updates in Opensearch](https://discuss.elastic.co/t/do-you-want-live-notifications-when-people-reply-to-your-posts-enable-notifications-delays-in-updates-in-opensearch/310342)

<div class="topic-metadata">

**Author:** [@Abdullah\_Jaffer](https://discuss.elastic.co/u/Abdullah_Jaffer)\
**Replies:** 1\
**Last updated:** [July 21, 2022, 9:43pm UTC](https://discuss.elastic.co/t/do-you-want-live-notifications-when-people-reply-to-your-posts-enable-notifications-delays-in-updates-in-opensearch/310342 "2022-07-21T21:43:41Z")

</div>

We are using AWS Opensearch 1.0 as a document database to serve our retail users. We use Apache Kafka to sync Opensearch. This use-case requires Opensearch documents to be refreshed near real time for searching. We have …

---

## [Aggregation with script](https://discuss.elastic.co/t/aggregation-with-script/310216)

<div class="topic-metadata">

**Author:** [@Jason\_Yu1](https://discuss.elastic.co/u/Jason_Yu1)\
**Replies:** 4\
**Last updated:** [July 21, 2022, 5:53pm UTC](https://discuss.elastic.co/t/aggregation-with-script/310216 "2022-07-21T17:53:56Z")

</div>

I have some containers like those "\_source": { "testId": "test001", "containers": \[ { "name": "containers1", …

---

## [Jaccard similarities](https://discuss.elastic.co/t/jaccard-similarities/310324)

<div class="topic-metadata">

**Author:** [@vsaraph](https://discuss.elastic.co/u/vsaraph)\
**Replies:** 0\
**Last updated:** [July 21, 2022, 4:58pm UTC](https://discuss.elastic.co/t/jaccard-similarities/310324 "2022-07-21T16:58:20Z")

</div>

I have an index, say attributes, whose documents all have a field, say items, which is an array of strings. I want to be able to take an array of strings, and write an elasticsearch query that gives me back all documents…

---

## [Index is empty using Transform](https://discuss.elastic.co/t/index-is-empty-using-transform/310181)

<div class="topic-metadata">

**Author:** [@Ruben\_Marinho](https://discuss.elastic.co/u/Ruben_Marinho)\
**Replies:** 4\
**Last updated:** [July 21, 2022, 4:33pm UTC](https://discuss.elastic.co/t/index-is-empty-using-transform/310181 "2022-07-21T16:33:16Z")

</div>

Hi all, I'm trying to create a transform on ElasticSearch. I started by creating this using console and got the expected results. In the console I use: POST \_transform/\_preview { "source": { "index": "test", …

---

## [How to build a JsonData object (JsonGenerator, etc.) to be used in new elasticsearch java api](https://discuss.elastic.co/t/how-to-build-a-jsondata-object-jsongenerator-etc-to-be-used-in-new-elasticsearch-java-api/310224)

<div class="topic-metadata">

**Author:** [@ALX\_DM](https://discuss.elastic.co/u/ALX_DM)\
**Replies:** 3\
**Last updated:** [July 21, 2022, 2:29pm UTC](https://discuss.elastic.co/t/how-to-build-a-jsondata-object-jsongenerator-etc-to-be-used-in-new-elasticsearch-java-api/310224 "2022-07-21T14:29:53Z")

</div>

Anybody here encountered RHLC XContentBuilder? How is it in migrating to new ElasticSearch java API client?... Particular implementation is when creating an index. In RHLC, we use XContentBuilder to get information fr…

---

## [Set up basic security for the Elastic Stack plus secured HTTPS traffic |](https://discuss.elastic.co/t/set-up-basic-security-for-the-elastic-stack-plus-secured-https-traffic/309857)

<div class="topic-metadata">

**Author:** [@AGiles102](https://discuss.elastic.co/u/AGiles102)\
**Replies:** 4\
**Last updated:** [July 21, 2022, 1:18pm UTC](https://discuss.elastic.co/t/set-up-basic-security-for-the-elastic-stack-plus-secured-https-traffic/309857 "2022-07-21T13:18:28Z")

</div>

Hi all, I have set up two of the three security layers of Elasticsearch. I am now trying to implement HTTPS, and after speaking to our in-house infrastructure, they can't offer us "Sign certificates with a central CA"…

---

## [Reaching elasticsearch from jupyter notebook](https://discuss.elastic.co/t/reaching-elasticsearch-from-jupyter-notebook/310290)

<div class="topic-metadata">

**Author:** [@kosmylo](https://discuss.elastic.co/u/kosmylo)\
**Replies:** 0\
**Last updated:** [July 21, 2022, 12:51pm UTC](https://discuss.elastic.co/t/reaching-elasticsearch-from-jupyter-notebook/310290 "2022-07-21T12:51:25Z")

</div>

I am running elasticsearch from docker-compose and I want to connect python to it and test it. The docker-compose has the following form: version: '3.2' services: elasticsearch: container\_name: elasticsearch …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=400)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=402)
