# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=421

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 422

---

## [Index Last Modified date and time](https://discuss.elastic.co/t/index-last-modified-date-and-time/307756)

<div class="topic-metadata">

**Author:** [@kavirajansakthivel](https://discuss.elastic.co/u/kavirajansakthivel)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 1:46pm UTC](https://discuss.elastic.co/t/index-last-modified-date-and-time/307756 "2022-06-21T13:46:37Z")

</div>

Hi Team, Is there any way to find out the last modified date and time of the particular index ? we are using 7.17 version. Thanks, Kavi

---

## [Bucket sort may be wrong](https://discuss.elastic.co/t/bucket-sort-may-be-wrong/307745)

<div class="topic-metadata">

**Author:** [@NathBabs](https://discuss.elastic.co/u/NathBabs)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 1:39pm UTC](https://discuss.elastic.co/t/bucket-sort-may-be-wrong/307745 "2022-06-21T13:39:35Z")

</div>

I am trying to use bucket\_sort, but i am not sure if it's working correctly. "aggs": { "group\_by\_phone": { "terms": { "field": "phoneNumber.keyword" }, "aggs": { "totalTnxAmount": { "sum…

---

## [Python, Elasticsearch and Apache Spark, Simple data reading](https://discuss.elastic.co/t/python-elasticsearch-and-apache-spark-simple-data-reading/307715)

<div class="topic-metadata">

**Author:** [@Silver137](https://discuss.elastic.co/u/Silver137)\
**Replies:** 1\
**Last updated:** [June 21, 2022, 1:14pm UTC](https://discuss.elastic.co/t/python-elasticsearch-and-apache-spark-simple-data-reading/307715 "2022-06-21T13:14:50Z")

</div>

I'm trying to read data from Elasticsearch using Apache Spark, the Hadoop conector and Python language. And it's give me a really true headache. The Python Code is: conf = SparkConf() conf.setMaster("local") conf.setAp…

---

## [Huge fields - Mapping best practice](https://discuss.elastic.co/t/huge-fields-mapping-best-practice/307261)

<div class="topic-metadata">

**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\
**Replies:** 6\
**Last updated:** [June 21, 2022, 1:08pm UTC](https://discuss.elastic.co/t/huge-fields-mapping-best-practice/307261 "2022-06-21T13:08:05Z")

</div>

Hey all :wave: I'm wondering what the best practice and recommendation would be for handling huge fields at scale? The situation I have is that I need to include an XML document (which is almost always massive) in the K…

---

## [Master and data nodes have different cluster UUIDs](https://discuss.elastic.co/t/master-and-data-nodes-have-different-cluster-uuids/307652)

<div class="topic-metadata">

**Author:** [@Faisal\_Umer](https://discuss.elastic.co/u/Faisal_Umer)\
**Replies:** 4\
**Last updated:** [June 21, 2022, 12:06pm UTC](https://discuss.elastic.co/t/master-and-data-nodes-have-different-cluster-uuids/307652 "2022-06-21T12:06:32Z")

</div>

Hi team, We have a cluster hosted on AWS EC2 instances having 1 kibana (8GB root volume, non persistent) 3 master (8GB root volume, non-persistent) 12 data nodes (200GB persistent disk is attached per node) We are u…

---

## [Multilingual Search](https://discuss.elastic.co/t/multilingual-search/307734)

<div class="topic-metadata">

**Author:** [@ts90](https://discuss.elastic.co/u/ts90)\
**Replies:** 0\
**Last updated:** [June 21, 2022, 8:38am UTC](https://discuss.elastic.co/t/multilingual-search/307734 "2022-06-21T08:38:53Z")

</div>

Hi, I am working on a project to perform multilingual full-text search using Elasticsearch. one field can contain a word combination of different languages or transliteration. for example in the English text may contain…

---

## [How to express the logic to let nested field match multiple groups condition](https://discuss.elastic.co/t/how-to-express-the-logic-to-let-nested-field-match-multiple-groups-condition/307614)

<div class="topic-metadata">

**Author:** [@Bruce\_Zu](https://discuss.elastic.co/u/Bruce_Zu)\
**Replies:** 1\
**Last updated:** [June 21, 2022, 7:11am UTC](https://discuss.elastic.co/t/how-to-express-the-logic-to-let-nested-field-match-multiple-groups-condition/307614 "2022-06-21T07:11:54Z")

</div>

Elasticsearch version 6.8.0 mappings like { "properties": { "id": { "type": "long" }, "authentication\_worker": { "type": "nested", "properties": { "authorized\_id": { "t…

---

## [The instance rejected the connection](https://discuss.elastic.co/t/the-instance-rejected-the-connection/307722)

<div class="topic-metadata">

**Author:** [@Ventsislav\_Kyorovski](https://discuss.elastic.co/u/Ventsislav_Kyorovski)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 7:08am UTC](https://discuss.elastic.co/t/the-instance-rejected-the-connection/307722 "2022-06-21T07:08:54Z")

</div>

Hello everyone, We use Elastic Cloud hosted on GCP, our production cluster is 1.41 TB storage, 32 GB RAM, 8 vCPU split in 2 zones. We have a Java application which uses the ES as a database and yesterday, when we hit 2…

---

## [Processors Configuration taking the processors from the resource request of kubernetes](https://discuss.elastic.co/t/processors-configuration-taking-the-processors-from-the-resource-request-of-kubernetes/307707)

<div class="topic-metadata">

**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\
**Replies:** 0\
**Last updated:** [June 21, 2022, 4:50am UTC](https://discuss.elastic.co/t/processors-configuration-taking-the-processors-from-the-resource-request-of-kubernetes/307707 "2022-06-21T04:50:36Z")

</div>

Hi All, I am running es-cluster on kubernetes with below resources request on container. resources: requests: cpu: 8 memory: "64Gi" I have not put limit on the resources. I have 224 VCPUs(HT on) on my host machine…

---

## [Maxtimeout Reached](https://discuss.elastic.co/t/maxtimeout-reached/307486)

<div class="topic-metadata">

**Author:** [@Balaji\_Arun](https://discuss.elastic.co/u/Balaji_Arun)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 4:31am UTC](https://discuss.elastic.co/t/maxtimeout-reached/307486 "2022-06-21T04:31:42Z")

</div>

Hi Everyone, recently when I try to index a document. The request, response with max-timeout reached after a certain point in time, and it starts indexing again. Now, I'm trying to find the root cause of that issue. T…

---

## [Watcher alert for capture the defined kubernetes pod resource limit](https://discuss.elastic.co/t/watcher-alert-for-capture-the-defined-kubernetes-pod-resource-limit/307281)

<div class="topic-metadata">

**Author:** [@dkumar89](https://discuss.elastic.co/u/dkumar89)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 2:05am UTC](https://discuss.elastic.co/t/watcher-alert-for-capture-the-defined-kubernetes-pod-resource-limit/307281 "2022-06-21T02:05:03Z")

</div>

Hi Team, we would like to know the defined resource limit for all the kubernetes pod for which we have enabled monitoring. Is there a field that can give us resource(CPU, Memory) limit values that we defined in pod dep…

---

## [Monitor roles for the user](https://discuss.elastic.co/t/monitor-roles-for-the-user/307272)

<div class="topic-metadata">

**Author:** [@abhi.logs](https://discuss.elastic.co/u/abhi.logs)\
**Replies:** 0\
**Last updated:** [June 15, 2022, 12:24pm UTC](https://discuss.elastic.co/t/monitor-roles-for-the-user/307272 "2022-06-15T12:24:41Z")

</div>

Hello, I have elastisearch exporter for getting cluster metrics to Prometheus, But we have to add a username and Password in the service file, Which roles will be okay for getting cluster details?

---

## [Fetching Documents with alias](https://discuss.elastic.co/t/fetching-documents-with-alias/307285)

<div class="topic-metadata">

**Author:** [@Skeldren](https://discuss.elastic.co/u/Skeldren)\
**Replies:** 1\
**Last updated:** [June 21, 2022, 1:56am UTC](https://discuss.elastic.co/t/fetching-documents-with-alias/307285 "2022-06-21T01:56:24Z")

</div>

Hey all :wave: I have a question regarding alias. Basically was performing some tests to check how it worked. I created two Alias for the same Index with different routing keys and filters. Let's say the Index is cal…

---

## [Finding documents with "too many fields"](https://discuss.elastic.co/t/finding-documents-with-too-many-fields/307313)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 1\
**Last updated:** [June 21, 2022, 1:53am UTC](https://discuss.elastic.co/t/finding-documents-with-too-many-fields/307313 "2022-06-21T01:53:58Z")

</div>

What's the easiest way to find documents from an index that appears to have too many fields. I want to delete those documents, but there doesn't seem to be a way to easily find them. The background to how I get here. …

---

## [Getting login prompt after configuring elasticsearch LDAP integration](https://discuss.elastic.co/t/getting-login-prompt-after-configuring-elasticsearch-ldap-integration/307310)

<div class="topic-metadata">

**Author:** [@wes.campbell](https://discuss.elastic.co/u/wes.campbell)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 1:46am UTC](https://discuss.elastic.co/t/getting-login-prompt-after-configuring-elasticsearch-ldap-integration/307310 "2022-06-21T01:46:48Z")

</div>

I have attached the login prompt. Not sure if the message is an indication of the issue. I have also attached the security section of the elasticsearch.yml

---

## [Question about Elastic Search: In Elastic Search, can we store data on a local machine and allow other machines to access the data stored on the local machine?](https://discuss.elastic.co/t/question-about-elastic-search-in-elastic-search-can-we-store-data-on-a-local-machine-and-allow-other-machines-to-access-the-data-stored-on-the-local-machine/307704)

<div class="topic-metadata">

**Author:** [@DataStorageMuse](https://discuss.elastic.co/u/DataStorageMuse)\
**Replies:** 1\
**Last updated:** [June 21, 2022, 1:38am UTC](https://discuss.elastic.co/t/question-about-elastic-search-in-elastic-search-can-we-store-data-on-a-local-machine-and-allow-other-machines-to-access-the-data-stored-on-the-local-machine/307704 "2022-06-21T01:38:09Z")

</div>

In Microsoft SQL server, we can store data on a local machine, deploy the server, and allow other machines to access that data. How would this be analogous to Elasticsearch? I've been sifting through the documentation an…

---

## [Trouble Installing and Configuring Elastic Search on Windows Virtual Machine](https://discuss.elastic.co/t/trouble-installing-and-configuring-elastic-search-on-windows-virtual-machine/307694)

<div class="topic-metadata">

**Author:** [@DataStorageMuse](https://discuss.elastic.co/u/DataStorageMuse)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 11:52pm UTC](https://discuss.elastic.co/t/trouble-installing-and-configuring-elastic-search-on-windows-virtual-machine/307694 "2022-06-20T23:52:09Z")

</div>

I am following the documentation on this webpage: Install Elasticsearch with .zip on Windows | Elasticsearch Guide \[8.2\] | Elastic. Essentially, when I run bin\\elasticsearch-create-enrollment-token -s node while having E…

---

## [What is the best model to save data on elasticsearch?](https://discuss.elastic.co/t/what-is-the-best-model-to-save-data-on-elasticsearch/307560)

<div class="topic-metadata">

**Author:** [@hadii](https://discuss.elastic.co/u/hadii)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 9:50pm UTC](https://discuss.elastic.co/t/what-is-the-best-model-to-save-data-on-elasticsearch/307560 "2022-06-20T21:50:20Z")

</div>

I have a rails application and use Elasticsearch as a search engine in my rails app. this app collects data from the mobile application and could collect from any kind of mobile app. mobile app sends two types of data us…

---

## [Azure Marketplace Elasticsearch service failed](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-service-failed/307697)

<div class="topic-metadata">

**Author:** [@Patricio\_Merino](https://discuss.elastic.co/u/Patricio_Merino)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 9:05pm UTC](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-service-failed/307697 "2022-06-20T21:05:32Z")

</div>

Hi all, In our application we are using Azure Marketplace Elasticsearch. Around two weeks ago, the service is failed: And in the application we can´t connect to this: {"name":"TimeoutError","meta":{"body":null,"s…

---

## [New install - error setting certificate verify locations](https://discuss.elastic.co/t/new-install-error-setting-certificate-verify-locations/307455)

<div class="topic-metadata">

**Author:** [@BRosenberg](https://discuss.elastic.co/u/BRosenberg)\
**Replies:** 8\
**Last updated:** [June 20, 2022, 8:05pm UTC](https://discuss.elastic.co/t/new-install-error-setting-certificate-verify-locations/307455 "2022-06-20T20:05:30Z")

</div>

Following the instructions here: Install Elasticsearch with Debian Package | Elasticsearch Guide \[8.2\] | Elastic Installing from apt on Ubuntu server 20.04 wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch …

---

## [Multi-fields vs Nested data type](https://discuss.elastic.co/t/multi-fields-vs-nested-data-type/307664)

<div class="topic-metadata">

**Author:** [@Illidan](https://discuss.elastic.co/u/Illidan)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 7:38pm UTC](https://discuss.elastic.co/t/multi-fields-vs-nested-data-type/307664 "2022-06-20T19:38:07Z")

</div>

Hey, Trying to understand difference between "fields" and "nested". For example, I have an array of objects, each one having the following fields: name name\_hash First (and probably obvious) option is to map this as …

---

## [Make a string query with a range](https://discuss.elastic.co/t/make-a-string-query-with-a-range/307571)

<div class="topic-metadata">

**Author:** [@Dorian](https://discuss.elastic.co/u/Dorian)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 5:13pm UTC](https://discuss.elastic.co/t/make-a-string-query-with-a-range/307571 "2022-06-20T17:13:36Z")

</div>

I try to make a query string but i only want documents that have a field between a certain range. How can i do that ?

---

## [Elasticsearch Keep Stopping](https://discuss.elastic.co/t/elasticsearch-keep-stopping/306422)

<div class="topic-metadata">

**Author:** [@w0lfxpunk](https://discuss.elastic.co/u/w0lfxpunk)\
**Replies:** 22\
**Last updated:** [June 20, 2022, 3:31pm UTC](https://discuss.elastic.co/t/elasticsearch-keep-stopping/306422 "2022-06-20T15:31:21Z")

</div>

I am running Elasticsearch 8 on a server with 300gb hard drive and 16gb RAM. The Elasticsearch keep stopping in few hours. I tried restarting it using systemctl and got below message ● elasticsearch.service - Elasticse…

---

## [Elastic mapping improper integer coercion to decimal/float](https://discuss.elastic.co/t/elastic-mapping-improper-integer-coercion-to-decimal-float/307165)

<div class="topic-metadata">

**Author:** [@VenkateshD](https://discuss.elastic.co/u/VenkateshD)\
**Replies:** 5\
**Last updated:** [June 20, 2022, 3:26pm UTC](https://discuss.elastic.co/t/elastic-mapping-improper-integer-coercion-to-decimal-float/307165 "2022-06-20T15:26:42Z")

</div>

Input document {"warrantyMiles":65000,"loadIndex":95} Index mapping "loadIndex": { "type": "integer", "fields": { "keyword": { "type": "keyword", "ignore\_above": 256 } } }, "warrantyMiles": { "type": "integer", "fiel…

---

## [Snapshot for cluster size TB](https://discuss.elastic.co/t/snapshot-for-cluster-size-tb/307493)

<div class="topic-metadata">

**Author:** [@christians](https://discuss.elastic.co/u/christians)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 3:17pm UTC](https://discuss.elastic.co/t/snapshot-for-cluster-size-tb/307493 "2022-06-20T15:17:50Z")

</div>

Hi, In the actuallity i have the policy slm for snapshot daily with cluster size 2-5 GB the snapshot are corrects. I have a question for an cluster size 9TB. We need implement a snapshot daily optim. Please Could you …

---

## [Elasticsearch master node failover](https://discuss.elastic.co/t/elasticsearch-master-node-failover/307504)

<div class="topic-metadata">

**Author:** [@artem.zikov](https://discuss.elastic.co/u/artem.zikov)\
**Replies:** 4\
**Last updated:** [June 20, 2022, 2:29pm UTC](https://discuss.elastic.co/t/elasticsearch-master-node-failover/307504 "2022-06-20T14:29:11Z")

</div>

Hello. I have Elasticsearch cluster (for graylog) with Elasticsearch-oss 7.10.2 Cluster has 3 nodes: 2 data/master and 1 master # curl -XGET 'localhost:9200/\_cat/nodes?v&pretty' ip heap.percent ram.percent cp…

---

## [Create nested object mapping using logstash unloading from postgres](https://discuss.elastic.co/t/create-nested-object-mapping-using-logstash-unloading-from-postgres/307661)

<div class="topic-metadata">

**Author:** [@anand\_tripathi](https://discuss.elastic.co/u/anand_tripathi)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 2:24pm UTC](https://discuss.elastic.co/t/create-nested-object-mapping-using-logstash-unloading-from-postgres/307661 "2022-06-20T14:24:35Z")

</div>

Hi, I am unloading data from Postgres to Elasticsearch using logstash. In this case if the index is not there in Elasticsearch logstash is creating an index with the predefined mapping. The mapping is perfect for all th…

---

## [Backfill Rollup indices from external Sources](https://discuss.elastic.co/t/backfill-rollup-indices-from-external-sources/307667)

<div class="topic-metadata">

**Author:** [@smueller](https://discuss.elastic.co/u/smueller)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 2:08pm UTC](https://discuss.elastic.co/t/backfill-rollup-indices-from-external-sources/307667 "2022-06-20T14:08:18Z")

</div>

hi there, we have a legacy selwritten data retention solution which i want to migrate into pure elastic. it contains daily averages(weighted) af some metrics over the last 5 years. The Rollup off the latest metric alr…

---

## [Inability to retrieve data set when sorted on multivalued date field](https://discuss.elastic.co/t/inability-to-retrieve-data-set-when-sorted-on-multivalued-date-field/307660)

<div class="topic-metadata">

**Author:** [@rand0m86](https://discuss.elastic.co/u/rand0m86)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 1:40pm UTC](https://discuss.elastic.co/t/inability-to-retrieve-data-set-when-sorted-on-multivalued-date-field/307660 "2022-06-20T13:40:27Z")

</div>

We have a data set of 40M+ records in one of the indices in Elasticsearch v6.8.18. Data is added/updated/removed daily at a given time (no ad-hoc changes happen during the day). In the application which uses ES we have …

---

## [Highlight not working properly](https://discuss.elastic.co/t/highlight-not-working-properly/307128)

<div class="topic-metadata">

**Author:** [@Sahil5](https://discuss.elastic.co/u/Sahil5)\
**Replies:** 6\
**Last updated:** [June 20, 2022, 12:23pm UTC](https://discuss.elastic.co/t/highlight-not-working-properly/307128 "2022-06-20T12:23:52Z")

</div>

Hi Team, Can anyone please explain me the flow of highlight in Elasticsearch? When i am adding multiple queries in should condition then highlight is not returning expected values and when i am trying with single query…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=420)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=422)
