# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=422

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 423

---

## [Spring-boot-starter-data-elasticsearch 2.4.4 gives results and 2.5.13 and above versions don't give results for query](https://discuss.elastic.co/t/spring-boot-starter-data-elasticsearch-2-4-4-gives-results-and-2-5-13-and-above-versions-dont-give-results-for-query/307621)

<div class="topic-metadata">

**Author:** [@Naveena1](https://discuss.elastic.co/u/Naveena1)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 8:50am UTC](https://discuss.elastic.co/t/spring-boot-starter-data-elasticsearch-2-4-4-gives-results-and-2-5-13-and-above-versions-dont-give-results-for-query/307621 "2022-06-20T08:50:12Z")

</div>

@Query("{"terms":{"id": ?0}}") public Page findById(List id) Spring-boot-starter-data-Elasticsearch 2.4.4 generates a query with wrapper inside that is encrypted during debug and I get matching results from index When…

---

## [Benchmarking es-cluster on AWS](https://discuss.elastic.co/t/benchmarking-es-cluster-on-aws/307636)

<div class="topic-metadata">

**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 12:01pm UTC](https://discuss.elastic.co/t/benchmarking-es-cluster-on-aws/307636 "2022-06-20T12:01:22Z")

</div>

Hi All, I am running my es-cluster on kubernetes on AWS instance x2iedn(memory optimized) and i4i(Storage optimized). I tried benchmarking the es cluster on both instance type. I have 3 data nodes and 1 master node. …

---

## [Creating Analyzer Query in Java API Client Elasticsearch version 7.16.3](https://discuss.elastic.co/t/creating-analyzer-query-in-java-api-client-elasticsearch-version-7-16-3/307620)

<div class="topic-metadata">

**Author:** [@Aadi](https://discuss.elastic.co/u/Aadi)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 12:00pm UTC](https://discuss.elastic.co/t/creating-analyzer-query-in-java-api-client-elasticsearch-version-7-16-3/307620 "2022-06-20T12:00:30Z")

</div>

Hi everyone, I have a java application in which ElasticSearchClient is used for establishing connection with Elasticsearch server. The application uses BulkRequest for indexing documents. Following code index the docum…

---

## [How can I get my kibana and elasticsearch url? for the filebeat?](https://discuss.elastic.co/t/how-can-i-get-my-kibana-and-elasticsearch-url-for-the-filebeat/307623)

<div class="topic-metadata">

**Author:** [@Frida](https://discuss.elastic.co/u/Frida)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 11:31am UTC](https://discuss.elastic.co/t/how-can-i-get-my-kibana-and-elasticsearch-url-for-the-filebeat/307623 "2022-06-20T11:31:38Z")

</div>

Thanks, How can I know my kibana and Elasticsearch url? output.elasticsearch: hosts: \["\<es\_url\>"\] username: "elastic" password: "\<password\>" setup.kibana: host: "\<kibana\_url\>" how can I get these? thanks

---

## [Reorder results to ensure the closest match returns first](https://discuss.elastic.co/t/reorder-results-to-ensure-the-closest-match-returns-first/307635)

<div class="topic-metadata">

**Author:** [@Thomas\_Gibbs](https://discuss.elastic.co/u/Thomas_Gibbs)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 10:57am UTC](https://discuss.elastic.co/t/reorder-results-to-ensure-the-closest-match-returns-first/307635 "2022-06-20T10:57:15Z")

</div>

I'd like to make a single rescore query that pushes the closest metadata match to what someone searched (before applying the function score), but then have the function score as a much larger factor afterwards, in order…

---

## [Copy some fields from one index to another](https://discuss.elastic.co/t/copy-some-fields-from-one-index-to-another/307421)

<div class="topic-metadata">

**Author:** [@lubosvr](https://discuss.elastic.co/u/lubosvr)\
**Replies:** 9\
**Last updated:** [June 20, 2022, 11:24am UTC](https://discuss.elastic.co/t/copy-some-fields-from-one-index-to-another/307421 "2022-06-20T11:24:48Z")

</div>

I am thinking if it's possible to merge two indices to holt my data first\_index: PUT first\_index { "mappings": { "dynamic": "false", "\_source": { "excludes": \["content"\] }, "properties": { …

---

## [Write logs from wordpress in the elasticsearch](https://discuss.elastic.co/t/write-logs-from-wordpress-in-the-elasticsearch/307587)

<div class="topic-metadata">

**Author:** [@Frida](https://discuss.elastic.co/u/Frida)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 9:22am UTC](https://discuss.elastic.co/t/write-logs-from-wordpress-in-the-elasticsearch/307587 "2022-06-20T09:22:37Z")

</div>

Hi, If possible- I ave a question: I have a elk cluster. this is my mysql deployment: apiVersion: apps/v1 kind: Deployment metadata: name: mysql namespace: database labels: app: mysql spec: replicas: 1 …

---

## [In docker(docker-compose), I got some errors](https://discuss.elastic.co/t/in-docker-docker-compose-i-got-some-errors/307489)

<div class="topic-metadata">

**Author:** [@StartMenu](https://discuss.elastic.co/u/StartMenu)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 9:22am UTC](https://discuss.elastic.co/t/in-docker-docker-compose-i-got-some-errors/307489 "2022-06-20T09:22:36Z")

</div>

I used this files to up dockers I changed log4j2.properties file for less logs to watch clearly : rootLogger.level = info to rootLogger.level = warn then ,mounted it into docker container: -./Elasticsearch/config…

---

## [Vulnerability CVE-2020-13956 reported on Elasticsearch 7.17.4](https://discuss.elastic.co/t/vulnerability-cve-2020-13956-reported-on-elasticsearch-7-17-4/306854)

<div class="topic-metadata">

**Author:** [@sbrunot](https://discuss.elastic.co/u/sbrunot)\
**Replies:** 4\
**Last updated:** [June 20, 2022, 9:11am UTC](https://discuss.elastic.co/t/vulnerability-cve-2020-13956-reported-on-elasticsearch-7-17-4/306854 "2022-06-20T09:11:20Z")

</div>

Hello, vulnerability CVE-2020-13956 is reported on the httpclient-4.5.10.jar libraries of the reindex module of Elasticsearch (modules/reindex/httpclient-4.5.10.jar). Are there any official statements regarding if this…

---

## [Error could not read configuration file /var/lib/elastic-agent/elastic-agent.yml](https://discuss.elastic.co/t/error-could-not-read-configuration-file-var-lib-elastic-agent-elastic-agent-yml/307612)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 7:06am UTC](https://discuss.elastic.co/t/error-could-not-read-configuration-file-var-lib-elastic-agent-elastic-agent-yml/307612 "2022-06-20T07:06:28Z")

</div>

how to install elastic-agent properly in centos? i just installed using rpm in my host is fine. and when i want to enroll in other agent has an error could not read configuration file /var/lib/elastic-agent/elastic-agent…

---

## [Issue with using Role that has Document level security enabled in indexing operation](https://discuss.elastic.co/t/issue-with-using-role-that-has-document-level-security-enabled-in-indexing-operation/307609)

<div class="topic-metadata">

**Author:** [@swapnil\_vaidya](https://discuss.elastic.co/u/swapnil_vaidya)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 6:48am UTC](https://discuss.elastic.co/t/issue-with-using-role-that-has-document-level-security-enabled-in-indexing-operation/307609 "2022-06-20T06:48:59Z")

</div>

Hi, I have scenario where multiple tenants are writing data into same index. I want to achieve data isolation for tenant using document level security. I have created role by adding query for document level security. …

---

## [Pls Help me I'm stuck over here](https://discuss.elastic.co/t/pls-help-me-im-stuck-over-here/307601)

<div class="topic-metadata">

**Author:** [@Draco\_King](https://discuss.elastic.co/u/Draco_King)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 5:53am UTC](https://discuss.elastic.co/t/pls-help-me-im-stuck-over-here/307601 "2022-06-20T05:53:04Z")

</div>

{"error":{"root\_cause":\[{"type":"not\_x\_content\_exception","reason":"Compressor detection can only be called on some xcontent bytes or compressed xcontent bytes"}\],"type":"not\_x\_content\_exception","reason":"Compressor det…

---

## [Rally error when bulk-size=1](https://discuss.elastic.co/t/rally-error-when-bulk-size-1/306880)

<div class="topic-metadata">

**Author:** [@Gsqsf](https://discuss.elastic.co/u/Gsqsf)\
**Replies:** 3\
**Last updated:** [June 20, 2022, 5:46am UTC](https://discuss.elastic.co/t/rally-error-when-bulk-size-1/306880 "2022-06-20T05:46:37Z")

</div>

I'm using Rally to simulate an Elasticsearch single node receiving logs on by one. The following parameter of track.json: "bulk-size": 1, "ingest-percentage": {{ingest\_percentage | default(100.0)}} Sho…

---

## [Ingest Pipeline location](https://discuss.elastic.co/t/ingest-pipeline-location/307588)

<div class="topic-metadata">

**Author:** [@sera123k](https://discuss.elastic.co/u/sera123k)\
**Replies:** 2\
**Last updated:** [June 20, 2022, 4:10am UTC](https://discuss.elastic.co/t/ingest-pipeline-location/307588 "2022-06-20T04:10:50Z")

</div>

Sorry if this should be in Kibana but I am looking to restore an earlier version of an ingest pipeline to compare it to the current but I cannot seem to figure out where it would have been stored. Are they kept in an ind…

---

## [Hunspell russian language. Problem with some grammar cases](https://discuss.elastic.co/t/hunspell-russian-language-problem-with-some-grammar-cases/307575)

<div class="topic-metadata">

**Author:** [@GrigoriyKrasovskiy](https://discuss.elastic.co/u/GrigoriyKrasovskiy)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 2:13am UTC](https://discuss.elastic.co/t/hunspell-russian-language-problem-with-some-grammar-cases/307575 "2022-06-20T02:13:36Z")

</div>

I use Elasticsearch 7.17.4 with docker and hunspell for russian language. My settings for index analysis: "analysis": { "filter": { "my\_stemmer": { "type": "stemmer", "language…

---

## [Merging / Moving two different data paths on the same node](https://discuss.elastic.co/t/merging-moving-two-different-data-paths-on-the-same-node/307555)

<div class="topic-metadata">

**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 12:32am UTC](https://discuss.elastic.co/t/merging-moving-two-different-data-paths-on-the-same-node/307555 "2022-06-20T00:32:05Z")

</div>

When configuring a node, you can put multiple data paths in the configuration to spread the data across multiple drives, etc. If we were to upgrade our storage to a faster NVMe drive, how can we merge the two different …

---

## [DSL - How to calculate a percentage value?](https://discuss.elastic.co/t/dsl-how-to-calculate-a-percentage-value/307584)

<div class="topic-metadata">

**Author:** [@Ely\_96](https://discuss.elastic.co/u/Ely_96)\
**Replies:** 1\
**Last updated:** [June 19, 2022, 3:53pm UTC](https://discuss.elastic.co/t/dsl-how-to-calculate-a-percentage-value/307584 "2022-06-19T15:53:42Z")

</div>

Hi guys, i'm trying to caclulate the relationship between two values, but i can't get the desired value. This is my (DSL) \_search: { "size": 0, "query": { "bool": { "filter": \[ {"term": {"h.cat": "o…

---

## [Elasticsearch index on blob](https://discuss.elastic.co/t/elasticsearch-index-on-blob/306951)

<div class="topic-metadata">

**Author:** [@Harsh\_Agarwal](https://discuss.elastic.co/u/Harsh_Agarwal)\
**Replies:** 5\
**Last updated:** [June 19, 2022, 11:48am UTC](https://discuss.elastic.co/t/elasticsearch-index-on-blob/306951 "2022-06-19T11:48:11Z")

</div>

Is it possible to make a blob which is a compressed binary representation of a string, searchable?

---

## [Elastic Search Add Ingest Timestamp and Calculate Lag](https://discuss.elastic.co/t/elastic-search-add-ingest-timestamp-and-calculate-lag/307576)

<div class="topic-metadata">

**Author:** [@divyank.gupta](https://discuss.elastic.co/u/divyank.gupta)\
**Replies:** 1\
**Last updated:** [June 18, 2022, 9:25pm UTC](https://discuss.elastic.co/t/elastic-search-add-ingest-timestamp-and-calculate-lag/307576 "2022-06-18T21:25:35Z")

</div>

Elasticsearch Experts, need your help to achieve below mention goal. Goal: Try to find a way to calculate lag between the time, log message was generated at application end (@timestamp field) and the time, it was ingest…

---

## [ElasticSearch on AWS EC2](https://discuss.elastic.co/t/elasticsearch-on-aws-ec2/307565)

<div class="topic-metadata">

**Author:** [@chandramouli\_ravi](https://discuss.elastic.co/u/chandramouli_ravi)\
**Replies:** 2\
**Last updated:** [June 18, 2022, 7:58pm UTC](https://discuss.elastic.co/t/elasticsearch-on-aws-ec2/307565 "2022-06-18T19:58:45Z")

</div>

Hi, My project is having Elasticsearch running on few EC2 Machines. I want to do 2 things Check ES Query's executed in last 5 minutes or 1 hour Have a tool where i can run SQL on top of Elasticsearch. If user is fro…

---

## [Ingest-attachment plugin in elassandra](https://discuss.elastic.co/t/ingest-attachment-plugin-in-elassandra/307566)

<div class="topic-metadata">

**Author:** [@Harsh\_Agarwal](https://discuss.elastic.co/u/Harsh_Agarwal)\
**Replies:** 3\
**Last updated:** [June 18, 2022, 4:16pm UTC](https://discuss.elastic.co/t/ingest-attachment-plugin-in-elassandra/307566 "2022-06-18T16:16:35Z")

</div>

In elassandra: bin/elasticsearch-plugin install ingest-attachment I see: org.elasticsearch.plugins.PluginCli.main(PluginCli.java:48) Caused by: java.lang.IllegalStateException: jar hell! class: org.slf4j.helpers.Bas…

---

## [New FileBeat Version required new "Ingest Pipeline"](https://discuss.elastic.co/t/new-filebeat-version-required-new-ingest-pipeline/307497)

<div class="topic-metadata">

**Author:** [@joshn](https://discuss.elastic.co/u/joshn)\
**Replies:** 1\
**Last updated:** [June 18, 2022, 3:50pm UTC](https://discuss.elastic.co/t/new-filebeat-version-required-new-ingest-pipeline/307497 "2022-06-18T15:50:22Z")

</div>

hey, So I updated filebeat on a couple machines and got an error: "reason"=\>"pipeline with id \[filebeat-7.17.4-system-syslog-pipeline\] does not exist" After doing some digging, this was because I was previosuly using …

---

## [How yo make a fuzzy query with the new java api](https://discuss.elastic.co/t/how-yo-make-a-fuzzy-query-with-the-new-java-api/307563)

<div class="topic-metadata">

**Author:** [@Dorian](https://discuss.elastic.co/u/Dorian)\
**Replies:** 2\
**Last updated:** [June 18, 2022, 2:38pm UTC](https://discuss.elastic.co/t/how-yo-make-a-fuzzy-query-with-the-new-java-api/307563 "2022-06-18T14:38:21Z")

</div>

I try to make a fuzzy query but it doesn't work. Can someone help ?

---

## [Assigning specific indices to specific storage devices / data tiers within a node](https://discuss.elastic.co/t/assigning-specific-indices-to-specific-storage-devices-data-tiers-within-a-node/306943)

<div class="topic-metadata">

**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\
**Replies:** 2\
**Last updated:** [June 18, 2022, 12:05am UTC](https://discuss.elastic.co/t/assigning-specific-indices-to-specific-storage-devices-data-tiers-within-a-node/306943 "2022-06-18T00:05:19Z")

</div>

I know it is possible to add multiple drives as data locations on a specific node but I am curious if it is possible to assign specific indices to a data tier within the same node. We are indexing a lot of data but we ha…

---

## [Painless Script to calculate time difference between 2 dates](https://discuss.elastic.co/t/painless-script-to-calculate-time-difference-between-2-dates/307335)

<div class="topic-metadata">

**Author:** [@Avnish\_Singh](https://discuss.elastic.co/u/Avnish_Singh)\
**Replies:** 1\
**Last updated:** [June 17, 2022, 10:46pm UTC](https://discuss.elastic.co/t/painless-script-to-calculate-time-difference-between-2-dates/307335 "2022-06-17T22:46:38Z")

</div>

Hi I have 2 columns as date datatype in my Kibana Index Pattern and I want to add a third column as the difference between the 2 columns: Here is sample and format of the columns: Col1: Jun 16, 2022 , 09:00:00.000 Col2…

---

## [Regular expression query](https://discuss.elastic.co/t/regular-expression-query/307252)

<div class="topic-metadata">

**Author:** [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\
**Replies:** 1\
**Last updated:** [June 17, 2022, 10:19pm UTC](https://discuss.elastic.co/t/regular-expression-query/307252 "2022-06-17T22:19:02Z")

</div>

I have a text like this "10-year-old", how can i search this using regular expression query. How can we search over special characters in Elasticsearch. I am using the below query, it is not returning the output. GET …

---

## [Pipeline aggregation | Cumulative sum aggregation on a nested field](https://discuss.elastic.co/t/pipeline-aggregation-cumulative-sum-aggregation-on-a-nested-field/307539)

<div class="topic-metadata">

**Author:** [@mehtaanshul](https://discuss.elastic.co/u/mehtaanshul)\
**Replies:** 0\
**Last updated:** [June 17, 2022, 7:13pm UTC](https://discuss.elastic.co/t/pipeline-aggregation-cumulative-sum-aggregation-on-a-nested-field/307539 "2022-06-17T19:13:08Z")

</div>

My Elasticsearch index mappings - { "mappings": { "properties": { "timestamp": { "type": "date" }, "detail": { "type": "nested", …

---

## [Elasticsearch mapping - Different types of data in same field](https://discuss.elastic.co/t/elasticsearch-mapping-different-types-of-data-in-same-field/307526)

<div class="topic-metadata">

**Author:** [@Elie](https://discuss.elastic.co/u/Elie)\
**Replies:** 2\
**Last updated:** [June 17, 2022, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-mapping-different-types-of-data-in-same-field/307526 "2022-06-17T16:21:45Z")

</div>

I am trying to create a mapping for my Elasticsearch that would make me insert both an array and a string into my field "value". The following shows the data I want inserted: { "Data": \[{ "key": "keyNa…

---

## [Unable to join the node in a cluster, elasticsearch 8.2](https://discuss.elastic.co/t/unable-to-join-the-node-in-a-cluster-elasticsearch-8-2/307222)

<div class="topic-metadata">

**Author:** [@Aman\_Kasot](https://discuss.elastic.co/u/Aman_Kasot)\
**Replies:** 4\
**Last updated:** [June 17, 2022, 3:25pm UTC](https://discuss.elastic.co/t/unable-to-join-the-node-in-a-cluster-elasticsearch-8-2/307222 "2022-06-17T15:25:35Z")

</div>

closing connection Netty4TcpChannel{localAddress=/xx.xx.xx.xx:9300, remoteAddress=/xx.xx.xx.xx:port, profile=default} \[2022-06-15T11:51:04,468\]\[WARN \]\[o.e.x.c.s.t.n.SecurityNetty4Transport\] \[es-master-1\] client did not …

---

## [Datastream speed](https://discuss.elastic.co/t/datastream-speed/306969)

<div class="topic-metadata">

**Author:** [@dmitry.chanturiya](https://discuss.elastic.co/u/dmitry.chanturiya)\
**Replies:** 5\
**Last updated:** [June 17, 2022, 2:47pm UTC](https://discuss.elastic.co/t/datastream-speed/306969 "2022-06-17T14:47:15Z")

</div>

Hello. Can U help me to understand why datastream search are slower then index search. I have one Index: size: 572 GB shards: 30 primary shards There are stored some data by one mounth. I have create datastream wit…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=421)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=423)
