# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=426 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 427 --- ## [Optimization of function\_score's functions clause to adjust scores for a range of specific fields](https://discuss.elastic.co/t/optimization-of-function-scores-functions-clause-to-adjust-scores-for-a-range-of-specific-fields/307015)
**Author:** [@Yuki\_Akano](https://discuss.elastic.co/u/Yuki_Akano)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 10:29am UTC](https://discuss.elastic.co/t/optimization-of-function-scores-functions-clause-to-adjust-scores-for-a-range-of-specific-fields/307015 "2022-06-13T10:29:53Z")
Hi everyone, I want to adjust the score according to the range of a particular field in function\_score. For example, I have the following query in mind. { "query":{ "function\_score":{ "query": { ...… --- ## [Jsonp Mapping Exception](https://discuss.elastic.co/t/jsonp-mapping-exception/306992)
**Author:** [@gagidza](https://discuss.elastic.co/u/gagidza)\ **Replies:** 1\ **Last updated:** [June 13, 2022, 8:07am UTC](https://discuss.elastic.co/t/jsonp-mapping-exception/306992 "2022-06-13T08:07:22Z")
Hi all. I work on Java 8 and Elastic 8.2. I'm trying to set up a search for various fields, SearchResponse\ response = esClient.search(s -\> s .index(index) .query(q -\>… --- ## [Vulnerability CVE-2020-25649 reported on Elasticsearch 7.17.4](https://discuss.elastic.co/t/vulnerability-cve-2020-25649-reported-on-elasticsearch-7-17-4/306855)
**Author:** [@sbrunot](https://discuss.elastic.co/u/sbrunot)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 7:36am UTC](https://discuss.elastic.co/t/vulnerability-cve-2020-25649-reported-on-elasticsearch-7-17-4/306855 "2022-06-13T07:36:39Z")
Hello, vulnerability CVE-2020-25649 is reported on the jackson-databind-2.10.4.jar library of the ingest-geoip module of Elasticsearch (modules/ingest-geoip/jackson-databind-2.10.4.jar). Are there any official statemen… --- ## [Vulnerability CVE-2020-28491 reported on Elasticsearch 7.17.4](https://discuss.elastic.co/t/vulnerability-cve-2020-28491-reported-on-elasticsearch-7-17-4/306856)
**Author:** [@sbrunot](https://discuss.elastic.co/u/sbrunot)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 7:35am UTC](https://discuss.elastic.co/t/vulnerability-cve-2020-28491-reported-on-elasticsearch-7-17-4/306856 "2022-06-13T07:35:47Z")
Hello, vulnerability CVE-2020-28491 is reported on the jackson-dataformat-cbor-2.10.4.jar library of Elasticsearch (lib/jackson-dataformat-cbor-2.10.4.jar). Are there any official statements regarding if this vulnerabi… --- ## [Problem with my Elasticsearch](https://discuss.elastic.co/t/problem-with-my-elasticsearch/306994)
**Author:** [@Frida](https://discuss.elastic.co/u/Frida)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 7:25am UTC](https://discuss.elastic.co/t/problem-with-my-elasticsearch/306994 "2022-06-13T07:25:33Z")
Hi! If possible- I have a question: This is my cluster: # Source: eck-operator/templates/statefulset.yaml apiVersion: apps/v1 kind: StatefulSet metadata: name: elastic-operator namespace: button8 labels: con… --- ## [Problems with match\_phrase](https://discuss.elastic.co/t/problems-with-match-phrase/306934)
**Author:** [@Nicolai\_Jee](https://discuss.elastic.co/u/Nicolai_Jee)\ **Replies:** 7\ **Last updated:** [June 13, 2022, 4:12am UTC](https://discuss.elastic.co/t/problems-with-match-phrase/306934 "2022-06-13T04:12:43Z")
Hi I have a query that looks like this: { "query": { "bool": { "must": \[ { "match\_phrase": { "fullAddress": "To-Bjerg 2" } } \] } }, "from": 0, … --- ## [Deploy an ECK on another namespace](https://discuss.elastic.co/t/deploy-an-eck-on-another-namespace/306958)
**Author:** [@Frida](https://discuss.elastic.co/u/Frida)\ **Replies:** 2\ **Last updated:** [June 12, 2022, 9:16pm UTC](https://discuss.elastic.co/t/deploy-an-eck-on-another-namespace/306958 "2022-06-12T21:16:52Z")
Hi, I tried deploy an ECK in GKE in nemespace I created and what I got: kubectl apply -f https://download.elastic.co/downloads/eck/2.2.0/operator.yaml -n ns2 W0612 12:52:31.559080 1136 gcp.go:120\] WARNING: the g… --- ## [\[ERROR\]\[elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes. getaddrinfo ENOTFOUND poem](https://discuss.elastic.co/t/error-elasticsearch-service-unable-to-retrieve-version-information-from-elasticsearch-nodes-getaddrinfo-enotfound-poem/306962)
**Author:** [@Tony\_Cheng](https://discuss.elastic.co/u/Tony_Cheng)\ **Replies:** 1\ **Last updated:** [June 12, 2022, 3:03pm UTC](https://discuss.elastic.co/t/error-elasticsearch-service-unable-to-retrieve-version-information-from-elasticsearch-nodes-getaddrinfo-enotfound-poem/306962 "2022-06-12T15:03:12Z")
Hi all. I tried to install elastic stack 8.2.2 with docker following the instruction in document. But Kibana server just cannot be ready. Could anybody help me please... My docker-compose: version: "3" services: ela… --- ## [Kibana ingress show 404 server not found](https://discuss.elastic.co/t/kibana-ingress-show-404-server-not-found/306939)
**Author:** [@mohamed\_atef](https://discuss.elastic.co/u/mohamed_atef)\ **Replies:** 3\ **Last updated:** [June 12, 2022, 9:04am UTC](https://discuss.elastic.co/t/kibana-ingress-show-404-server-not-found/306939 "2022-06-12T09:04:37Z")
--- ## [First boot after install fails to display password, token, etc](https://discuss.elastic.co/t/first-boot-after-install-fails-to-display-password-token-etc/306949)
**Author:** [@Jack\_Park](https://discuss.elastic.co/u/Jack_Park)\ **Replies:** 11\ **Last updated:** [June 12, 2022, 2:33am UTC](https://discuss.elastic.co/t/first-boot-after-install-fails-to-display-password-token-etc/306949 "2022-06-12T02:33:11Z")
Version 8.2.2 Since I installed before but failed to grab those values, I started over. What this is telling me is that ES maintains a hidden record, which I cannot find. This is on a Mac. There is no ~/.elastic fie a… --- ## [ELK 8.2 using our ca certifiate for enrolling elastics node](https://discuss.elastic.co/t/elk-8-2-using-our-ca-certifiate-for-enrolling-elastics-node/306390)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 2\ **Last updated:** [June 11, 2022, 7:21pm UTC](https://discuss.elastic.co/t/elk-8-2-using-our-ca-certifiate-for-enrolling-elastics-node/306390 "2022-06-11T19:21:03Z")
Hello, I want to use my own CA certificate in enrolling elastic nodes in the same cluster. What are the steps to follow? Thanks. --- ## [IP enrichment to Hostname](https://discuss.elastic.co/t/ip-enrichment-to-hostname/306944)
**Author:** [@xfaith](https://discuss.elastic.co/u/xfaith)\ **Replies:** 0\ **Last updated:** [June 11, 2022, 7:16pm UTC](https://discuss.elastic.co/t/ip-enrichment-to-hostname/306944 "2022-06-11T19:16:30Z")
Trying to figure how to provide hostname based off the IP, issue is system is reading information out of band so no DNS or anything to tie back to. I could do a basic file/hostfile for majority of IP --\> hostname, or co… --- ## [What should I do if I need special analyzer in ElasticSearch?](https://discuss.elastic.co/t/what-should-i-do-if-i-need-special-analyzer-in-elasticsearch/306941)
**Author:** [@Gresmir](https://discuss.elastic.co/u/Gresmir)\ **Replies:** 1\ **Last updated:** [June 11, 2022, 7:00pm UTC](https://discuss.elastic.co/t/what-should-i-do-if-i-need-special-analyzer-in-elasticsearch/306941 "2022-06-11T19:00:50Z")
In my textual data, I have structures like this: ст. ст. 40, 131, 132, 176-178, 183, ч. 2 ст. 187, 188, 184, 189, 194 KK Where KK is the name of a codex, ст. ст., or ст. mean article, ч. mean part. I want Elasticsear… --- ## [Snapshots Compression](https://discuss.elastic.co/t/snapshots-compression/306932)
**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\ **Replies:** 2\ **Last updated:** [June 11, 2022, 12:58pm UTC](https://discuss.elastic.co/t/snapshots-compression/306932 "2022-06-11T12:58:03Z")
What is the difference if I toggle switch On the Snapshot Compression? What's the difference when I leave it as Off? Does it any make sense? --- ## [Unable to Parse response from elastic search in Java Spring Data Elasticsearch](https://discuss.elastic.co/t/unable-to-parse-response-from-elastic-search-in-java-spring-data-elasticsearch/306225)
**Author:** [@Waqas\_Rana](https://discuss.elastic.co/u/Waqas_Rana)\ **Replies:** 1\ **Last updated:** [June 11, 2022, 8:30am UTC](https://discuss.elastic.co/t/unable-to-parse-response-from-elastic-search-in-java-spring-data-elasticsearch/306225 "2022-06-11T08:30:27Z")
I am just creating/posting new entry that is created successful but while responding its getting issue of parsing . testRepository.save(application); I am not using any client because JavaHighlevel Rest client… --- ## [Cluster health changing from GREEN to RED](https://discuss.elastic.co/t/cluster-health-changing-from-green-to-red/306929)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 0\ **Last updated:** [June 11, 2022, 6:56am UTC](https://discuss.elastic.co/t/cluster-health-changing-from-green-to-red/306929 "2022-06-11T06:56:39Z")
I am running elastic cluster on kubernetes Master Logs {"@timestamp":"2022-06-11T06:31:02.487Z", "log.level": "INFO", "message":"transport connection to \[{es-data}{NZYIeN70Qzypz7Oh3rAuHQ}{fuY88RvWS3eSlb\_g7GXQyQ}{10.244.… --- ## [Possible to redirect Data Visualizer to existing ingest pipeline for import?](https://discuss.elastic.co/t/possible-to-redirect-data-visualizer-to-existing-ingest-pipeline-for-import/306063)
**Author:** [@fl33t](https://discuss.elastic.co/u/fl33t)\ **Replies:** 1\ **Last updated:** [June 10, 2022, 7:51pm UTC](https://discuss.elastic.co/t/possible-to-redirect-data-visualizer-to-existing-ingest-pipeline-for-import/306063 "2022-06-10T19:51:41Z")
In the ML section, if we know the type of log file that we want to upload for visualization and analysis, would it be possible to redirect it to an existing ingest pipeline (with associated mappings and index settings) i… --- ## [Case insensitive wildcard search in 7.17.0](https://discuss.elastic.co/t/case-insensitive-wildcard-search-in-7-17-0/306903)
**Author:** [@mej101](https://discuss.elastic.co/u/mej101)\ **Replies:** 2\ **Last updated:** [June 10, 2022, 6:33pm UTC](https://discuss.elastic.co/t/case-insensitive-wildcard-search-in-7-17-0/306903 "2022-06-10T18:33:27Z")
I'm running Elasticsearch 7.17.0, and when I try to run the following query: GET index\_name/\_search { "query": { "wildcard": { "fieldName.subfield": "\*view", "case\_insensitive": true } } } I get… --- ## ["Unable to lock JVM Memory: error=12, reason=Cannot allocate memory"](https://discuss.elastic.co/t/unable-to-lock-jvm-memory-error-12-reason-cannot-allocate-memory/306000)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 7\ **Last updated:** [June 10, 2022, 3:40pm UTC](https://discuss.elastic.co/t/unable-to-lock-jvm-memory-error-12-reason-cannot-allocate-memory/306000 "2022-06-10T15:40:37Z")
I have enabled bootstrap.memory\_lock: true ERROR: \[1\] bootstrap checks failed. You must address the points described in the following \[1\] lines before starting Elasticsearch. bootstrap check failure \[1\] of \[1\]: memory… --- ## [ILM policy: Document count reduced but Index count unchanged](https://discuss.elastic.co/t/ilm-policy-document-count-reduced-but-index-count-unchanged/306899)
**Author:** [@Chris\_Stone](https://discuss.elastic.co/u/Chris_Stone)\ **Replies:** 0\ **Last updated:** [June 10, 2022, 3:15pm UTC](https://discuss.elastic.co/t/ilm-policy-document-count-reduced-but-index-count-unchanged/306899 "2022-06-10T15:15:12Z")
A timeline of events: At some point, I inadvertently changed max index size changed from 50GB to 1GB. After some time, I began getting circuit-breaker errors about maxing out the Java heap (31GB on each of the 4 nodes)… --- ## [How to get the time a query spends in the queue before the shards receives the query](https://discuss.elastic.co/t/how-to-get-the-time-a-query-spends-in-the-queue-before-the-shards-receives-the-query/306897)
**Author:** [@shivam\_agrawal1](https://discuss.elastic.co/u/shivam_agrawal1)\ **Replies:** 0\ **Last updated:** [June 10, 2022, 1:58pm UTC](https://discuss.elastic.co/t/how-to-get-the-time-a-query-spends-in-the-queue-before-the-shards-receives-the-query/306897 "2022-06-10T13:58:34Z")
The took\_millis in Elasticsearch slow logs tells the time it takes on execution on the shard level, it does not encounter the time it spends in the queue. How to get the time. a query spends in the queue before it is pas… --- ## [Persistent Volume / Docker installation](https://discuss.elastic.co/t/persistent-volume-docker-installation/306886)
**Author:** [@Phildefer](https://discuss.elastic.co/u/Phildefer)\ **Replies:** 0\ **Last updated:** [June 10, 2022, 12:26pm UTC](https://discuss.elastic.co/t/persistent-volume-docker-installation/306886 "2022-06-10T12:26:10Z")
Hi, I would like how to install Elasticsearch with a persistent volume for the data in order to be able to upgrade Elasticsearch without loosing the indexes. Thank you --- ## [Need to remove first 10 characters using grok](https://discuss.elastic.co/t/need-to-remove-first-10-characters-using-grok/306864)
**Author:** [@Giuse\_Esse](https://discuss.elastic.co/u/Giuse_Esse)\ **Replies:** 0\ **Last updated:** [June 10, 2022, 9:43am UTC](https://discuss.elastic.co/t/need-to-remove-first-10-characters-using-grok/306864 "2022-06-10T09:43:06Z")
Hello i need to remove first 10 char in the grok, I can get first 10 but not exclude... grok { match =\> { "message" =\> "(?\^.{-10})" … --- ## [GeoDistanceQuery Not Working](https://discuss.elastic.co/t/geodistancequery-not-working/306780)
**Author:** [@cugo](https://discuss.elastic.co/u/cugo)\ **Replies:** 1\ **Last updated:** [June 9, 2022, 2:23pm UTC](https://discuss.elastic.co/t/geodistancequery-not-working/306780 "2022-06-09T14:23:05Z")
I am trying to create a Geo Distance filter using Spring Data Elasticsearch like the one below which is a working example created by JSON. "filter":{ "geo\_distance":{ "distance":"32.42742km", … --- ## [Show search result based on keywords](https://discuss.elastic.co/t/show-search-result-based-on-keywords/305617)
**Author:** [@silvermanoj](https://discuss.elastic.co/u/silvermanoj)\ **Replies:** 7\ **Last updated:** [June 10, 2022, 8:48am UTC](https://discuss.elastic.co/t/show-search-result-based-on-keywords/305617 "2022-06-10T08:48:36Z")
I am using Elasticsearch version 8. When I try to query a combination of two words that are stored in two different attributes, I get the search result but the record match with post\_title are not coming first For examp… --- ## [BitSet.or took high cpu usage](https://discuss.elastic.co/t/bitset-or-took-high-cpu-usage/306786)
**Author:** [@chembohuang](https://discuss.elastic.co/u/chembohuang)\ **Replies:** 2\ **Last updated:** [June 10, 2022, 8:35am UTC](https://discuss.elastic.co/t/bitset-or-took-high-cpu-usage/306786 "2022-06-10T08:35:14Z")
Continuing the discussion from BitSet.or consumes almost 60% cpu: We found sth. new here. In fact , we ran into this problem twice after the topic was closed. And We found some similarities in these cases: this proble… --- ## [Getting an idea for resources required to locally deploy the ELK stack](https://discuss.elastic.co/t/getting-an-idea-for-resources-required-to-locally-deploy-the-elk-stack/306853)
**Author:** [@ahamza](https://discuss.elastic.co/u/ahamza)\ **Replies:** 0\ **Last updated:** [June 10, 2022, 8:12am UTC](https://discuss.elastic.co/t/getting-an-idea-for-resources-required-to-locally-deploy-the-elk-stack/306853 "2022-06-10T08:12:56Z")
Hey, I've recently started reading up on the ELK stack and I want to understand what sort of hardware requirements I would have to do an on-premise deployment. I have about 9.5GB + 3.5GB (~13GB total) of log data comi… --- ## [Elasticsearch + Kibana on Docker](https://discuss.elastic.co/t/elasticsearch-kibana-on-docker/306849)
**Author:** [@dandago](https://discuss.elastic.co/u/dandago)\ **Replies:** 0\ **Last updated:** [June 10, 2022, 6:59am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-on-docker/306849 "2022-06-10T06:59:17Z")
I'd like to just quickly run an instance of Elasticsearch and Kibana together using Docker. Having to set up all this seems overkill. Is there an easier way? --- ## [Exception in Ingest using NEST.Attachment after upgrade to 8.2.2](https://discuss.elastic.co/t/exception-in-ingest-using-nest-attachment-after-upgrade-to-8-2-2/306800)
**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\ **Replies:** 6\ **Last updated:** [June 10, 2022, 6:23am UTC](https://discuss.elastic.co/t/exception-in-ingest-using-nest-attachment-after-upgrade-to-8-2-2/306800 "2022-06-10T06:23:29Z")
Hi! I have upgraded Elasticsearch to 8.2.2 from 7.17.3, we are still using Elasticsearch.Net and NEST 7.17.2. To this we use Ingest for file search and we have a field of type NEST.Attachment on our model. Then we have… --- ## [How to configure NEST for separate Elastic and Kibana hosts?](https://discuss.elastic.co/t/how-to-configure-nest-for-separate-elastic-and-kibana-hosts/306834)
**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\ **Replies:** 1\ **Last updated:** [June 10, 2022, 6:04am UTC](https://discuss.elastic.co/t/how-to-configure-nest-for-separate-elastic-and-kibana-hosts/306834 "2022-06-10T06:04:46Z")
In Filebeat and Winlogbeat, the configuration files have separate sections for output.Elasticsearch and setup.kibana. It was easy to figure out where to put the Elasticsearch host and the Kibana host - which are 2 dif… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=425) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=427)