# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=437 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 438 --- ## [Sort in Java API client](https://discuss.elastic.co/t/sort-in-java-api-client/305368)
**Author:** [@vishalop0993](https://discuss.elastic.co/u/vishalop0993)\ **Replies:** 0\ **Last updated:** [May 23, 2022, 4:59am UTC](https://discuss.elastic.co/t/sort-in-java-api-client/305368 "2022-05-23T04:59:21Z")
Hi Experts, I am using new java API client to connect with Elasticsearch. My requirement is to search documents in sorted order of given parameters. I have written the below code to search and sort by "customer". … --- ## [S3 snapshot repository cooldown period unnecessary?](https://discuss.elastic.co/t/s3-snapshot-repository-cooldown-period-unnecessary/304297)
**Author:** [@bpiper](https://discuss.elastic.co/u/bpiper)\ **Replies:** 5\ **Last updated:** [May 23, 2022, 3:36am UTC](https://discuss.elastic.co/t/s3-snapshot-repository-cooldown-period-unnecessary/304297 "2022-05-23T03:36:18Z")
I'm currently looking at upgrading some 6.8 clusters to 7.17, and noticed the artificial 3 minute wait on create/delete snapshot operations on an S3 repository that appears to have been added sometime in early 2020. I d… --- ## [Recommendations on new setup](https://discuss.elastic.co/t/recommendations-on-new-setup/305330)
**Author:** [@tru64gurus](https://discuss.elastic.co/u/tru64gurus)\ **Replies:** 3\ **Last updated:** [May 21, 2022, 7:57pm UTC](https://discuss.elastic.co/t/recommendations-on-new-setup/305330 "2022-05-21T19:57:34Z")
Hello, I am building new ES cluster using free ES offering. I have three physical servers with 1TB each , expected log volume is 20-30 million per hour. I am looking for best practice on how to setup the cluster and t… --- ## [Elastic Machine Learning - Pre Built Rules](https://discuss.elastic.co/t/elastic-machine-learning-pre-built-rules/305178)
**Author:** [@geetika\_gopi](https://discuss.elastic.co/u/geetika_gopi)\ **Replies:** 4\ **Last updated:** [May 21, 2022, 10:45am UTC](https://discuss.elastic.co/t/elastic-machine-learning-pre-built-rules/305178 "2022-05-21T10:45:46Z")
Hello, For some of the windows pre-built ML jobs, we noticed the datafeed configured was as follows: { "bool": { "filter": \[ { "term": { "destination.ip": "169.254.169.254" } … --- ## [How to index short sentences for similarity search?](https://discuss.elastic.co/t/how-to-index-short-sentences-for-similarity-search/305302)
**Author:** [@jimw](https://discuss.elastic.co/u/jimw)\ **Replies:** 1\ **Last updated:** [May 21, 2022, 8:22am UTC](https://discuss.elastic.co/t/how-to-index-short-sentences-for-similarity-search/305302 "2022-05-21T08:22:45Z")
I have a huge dataset, each document is the dataset contains some lines of short sentences. My problem is: Given a document, I need search similar documents based on the threshold of how many percentage of short sentenc… --- ## [Packebeat Docker Host](https://discuss.elastic.co/t/packebeat-docker-host/305325)
**Author:** [@jam\_mahmoudi](https://discuss.elastic.co/u/jam_mahmoudi)\ **Replies:** 0\ **Last updated:** [May 21, 2022, 5:39am UTC](https://discuss.elastic.co/t/packebeat-docker-host/305325 "2022-05-21T05:39:29Z")
Hi guys I have a question I have 10 containers published on the Internet on one of my Docker hosts and I have to check the traffic of all these 10 containers with one Packetbeat. But I have no idea to run. Thanks for… --- ## [ES version 1.7](https://discuss.elastic.co/t/es-version-1-7/305312)
**Author:** [@buddi009](https://discuss.elastic.co/u/buddi009)\ **Replies:** 4\ **Last updated:** [May 21, 2022, 2:00am UTC](https://discuss.elastic.co/t/es-version-1-7/305312 "2022-05-21T02:00:04Z")
Hello, we are on really old version of ES, am trying rehydrate ec2 running, i see only one node from ASG joining ES cluster. validated ES running on each instance My ASG have 3 instances. any help is appreciated {"cl… --- ## [Stopping watch service, reason \[shutdown initiated\]](https://discuss.elastic.co/t/stopping-watch-service-reason-shutdown-initiated/304902)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 4\ **Last updated:** [May 21, 2022, 1:01am UTC](https://discuss.elastic.co/t/stopping-watch-service-reason-shutdown-initiated/304902 "2022-05-21T01:01:25Z")
{"@timestamp":"2022-05-17T07:20:24.445Z", "log.level": "INFO", "message":"license mode is \[basic\], currently licensed security realms are \[reserved/reserved,file/default\_file,native/default\_native\]", "ecs.version": "1.2.… --- ## [Error: unrecognized arguments: refresh\_interval: -1](https://discuss.elastic.co/t/error-unrecognized-arguments-refresh-interval-1/305058)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 6\ **Last updated:** [May 21, 2022, 1:00am UTC](https://discuss.elastic.co/t/error-unrecognized-arguments-refresh-interval-1/305058 "2022-05-21T01:00:41Z")
getting below error while benchmarking with geonames track esrally: error: unrecognized arguments: refresh\_interval: -1}} esrally race --offline --track-params=number\_of\_shards:${ES\_NO\_OF\_SHARDS} --track-params=number\_… --- ## [ILM with existing indices](https://discuss.elastic.co/t/ilm-with-existing-indices/305316)
**Author:** [@lchan](https://discuss.elastic.co/u/lchan)\ **Replies:** 1\ **Last updated:** [May 20, 2022, 7:54pm UTC](https://discuss.elastic.co/t/ilm-with-existing-indices/305316 "2022-05-20T19:54:22Z")
I am following Manage existing indices | Elasticsearch Guide \[8.2\] | Elastic and I am trying to apply all existing indices (that are in hot node) with policy "existing-indices" so it can go through ilm but it the step is… --- ## [Custom Authorization Engine issue](https://discuss.elastic.co/t/custom-authorization-engine-issue/305024)
**Author:** [@ash\_n](https://discuss.elastic.co/u/ash_n)\ **Replies:** 8\ **Last updated:** [May 20, 2022, 7:25pm UTC](https://discuss.elastic.co/t/custom-authorization-engine-issue/305024 "2022-05-20T19:25:49Z")
I'm working on an implementation of a custom authorization engine by following the instructions on this page and using this sample. I'm using Elasticsearch v8.2.0. I've been able to generate the single zip file for my c… --- ## [Setting Index.max\_result\_window to less than default value](https://discuss.elastic.co/t/setting-index-max-result-window-to-less-than-default-value/305305)
**Author:** [@Kishore\_Pothireddy](https://discuss.elastic.co/u/Kishore_Pothireddy)\ **Replies:** 0\ **Last updated:** [May 20, 2022, 5:25pm UTC](https://discuss.elastic.co/t/setting-index-max-result-window-to-less-than-default-value/305305 "2022-05-20T17:25:53Z")
Hi, I would like to know if there will be any performance improvement if we set the Index.max\_result\_window to 5000 upfront and adverse effects if any in doing so. Can someone pls explain? Thank you. --- ## [How to find data anomalies?](https://discuss.elastic.co/t/how-to-find-data-anomalies/305238)
**Author:** [@AdamYS](https://discuss.elastic.co/u/AdamYS)\ **Replies:** 9\ **Last updated:** [May 20, 2022, 3:58pm UTC](https://discuss.elastic.co/t/how-to-find-data-anomalies/305238 "2022-05-20T15:58:50Z")
We have various indexes in Elasticsearch and I wonder if it'd be possible to find anomalies in the data? For example: We have a document for each test we run. The document has the test name as one field and the result … --- ## [The offline installation with esrally-dist-2.4.0 give incompatible error](https://discuss.elastic.co/t/the-offline-installation-with-esrally-dist-2-4-0-give-incompatible-error/304362)
**Author:** [@keylane\_sbaas](https://discuss.elastic.co/u/keylane_sbaas)\ **Replies:** 3\ **Last updated:** [May 20, 2022, 3:28pm UTC](https://discuss.elastic.co/t/the-offline-installation-with-esrally-dist-2-4-0-give-incompatible-error/304362 "2022-05-20T15:28:37Z")
I was installing esrally on RHEL7 machine. At the point of installing there was an problem, that not enough dependencies where installed at the time. That is not the problem for this topic, but the ERROR while installing… --- ## [Select only one element inside an object](https://discuss.elastic.co/t/select-only-one-element-inside-an-object/305296)
**Author:** [@mmoreram](https://discuss.elastic.co/u/mmoreram)\ **Replies:** 3\ **Last updated:** [May 20, 2022, 3:09pm UTC](https://discuss.elastic.co/t/select-only-one-element-inside-an-object/305296 "2022-05-20T15:09:43Z")
Let's say I have an object with N fields, and I only want to return one of them. How can I do that? Can I exclude the whole object and then include one of their childs? Thanks. --- ## [Populating User Information From AD Authentication](https://discuss.elastic.co/t/populating-user-information-from-ad-authentication/305236)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [May 20, 2022, 3:05pm UTC](https://discuss.elastic.co/t/populating-user-information-from-ad-authentication/305236 "2022-05-20T15:05:54Z")
Is it possible to populate a user's Elasticsearch/Kibana fields when authenticated against AD? I'm guessing it's through the use of the xpack.security.authc.realms.activedirectory.metadata setting, but I'm not sure what … --- ## [Snapshot repository missing after remounting network disk](https://discuss.elastic.co/t/snapshot-repository-missing-after-remounting-network-disk/304921)
**Author:** [@elaskibuser](https://discuss.elastic.co/u/elaskibuser)\ **Replies:** 9\ **Last updated:** [May 20, 2022, 12:50pm UTC](https://discuss.elastic.co/t/snapshot-repository-missing-after-remounting-network-disk/304921 "2022-05-20T12:50:45Z")
Hi All, We decided to increase the amount of storage we have for snapshots On a three node cluster elastic cluster v7. We did that by copying the contents of the old disk to the bigger disk. When copying was done, we u… --- ## [Corrupt indexes](https://discuss.elastic.co/t/corrupt-indexes/305277)
**Author:** [@frankshad](https://discuss.elastic.co/u/frankshad)\ **Replies:** 0\ **Last updated:** [May 20, 2022, 10:27am UTC](https://discuss.elastic.co/t/corrupt-indexes/305277 "2022-05-20T10:27:17Z")
The NFS server that stores ES indices got disconnected from my server while my provider was doing some maintenance. This corrupted two indices: .kibana\_task\_manager\_7.12.1\_001 and a custom one called applications. The fo… --- ## [Elastic Performance is slow](https://discuss.elastic.co/t/elastic-performance-is-slow/304927)
**Author:** [@nagrgk](https://discuss.elastic.co/u/nagrgk)\ **Replies:** 15\ **Last updated:** [May 20, 2022, 10:22am UTC](https://discuss.elastic.co/t/elastic-performance-is-slow/304927 "2022-05-20T10:22:06Z")
Hi Team I have custom cluster built with 3 nodes and all of them are master and data nodes. (at any point only one can master) we have seen very quick data pull and push with response time is around 150ms to 250ms, but… --- ## [Error downloading GeoIP behind proxy in Elasticsearch](https://discuss.elastic.co/t/error-downloading-geoip-behind-proxy-in-elasticsearch/297152)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 1\ **Last updated:** [May 20, 2022, 9:49am UTC](https://discuss.elastic.co/t/error-downloading-geoip-behind-proxy-in-elasticsearch/297152 "2022-05-20T09:49:50Z")
Hi, everyone I have just installed Elasticsearch 7.16.3 in Red Hat 7.9. This virtual machine is behind a proxy. Looking over Elasticsearch's log, I have found an error related to GeoIP: \[2022-02-14T15:14:29,056\]\[ERROR\]… --- ## [Faster/easier way to secure a v7 production-mode Cluster without loosing data](https://discuss.elastic.co/t/faster-easier-way-to-secure-a-v7-production-mode-cluster-without-loosing-data/305258)
**Author:** [@hulaux](https://discuss.elastic.co/u/hulaux)\ **Replies:** 4\ **Last updated:** [May 20, 2022, 9:37am UTC](https://discuss.elastic.co/t/faster-easier-way-to-secure-a-v7-production-mode-cluster-without-loosing-data/305258 "2022-05-20T09:37:19Z")
Fact is one cannot use Elasticsearch-setup-passwords in a unsecure production-mode Elasticsearch 7.17 Cluster. I know some people turned each possible master node into a single dev-mode cluster with data apart (so Elast… --- ## [Question: Non-Productive Licence?](https://discuss.elastic.co/t/question-non-productive-licence/305260)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 3\ **Last updated:** [May 20, 2022, 8:39am UTC](https://discuss.elastic.co/t/question-non-productive-licence/305260 "2022-05-20T08:39:26Z")
Dear Elastic, what is the common proceedings in such cases related to licences: We will (again) buy a bunch of licences (this time platinum ones) for our production environments. In the past we also got non-production l… --- ## [Unassigned shards/indexes](https://discuss.elastic.co/t/unassigned-shards-indexes/305159)
**Author:** [@Jan\_Engelbrecht](https://discuss.elastic.co/u/Jan_Engelbrecht)\ **Replies:** 3\ **Last updated:** [May 20, 2022, 6:55am UTC](https://discuss.elastic.co/t/unassigned-shards-indexes/305159 "2022-05-20T06:55:43Z")
Hi, I'm quite new to Elastic, we're running 7.15.1 (Centos 7)on our production servers. We have 3 nodes currently and the following happened when I added a 4th one. After the 4th Node joined the cluster replication st… --- ## [LDAP Authentication Case Sensitive](https://discuss.elastic.co/t/ldap-authentication-case-sensitive/305224)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [May 20, 2022, 6:50am UTC](https://discuss.elastic.co/t/ldap-authentication-case-sensitive/305224 "2022-05-20T06:50:35Z")
I've recently enabled LDAP authentication and used the Kibana GUI to configure role mappings. Unfortunately, it appears usernames are case sensitive. So if I enter a role mapping for user example123, and the user enter… --- ## [Failure to backup ElasticSearch Using Velero](https://discuss.elastic.co/t/failure-to-backup-elasticsearch-using-velero/305212)
**Author:** [@decipher27](https://discuss.elastic.co/u/decipher27)\ **Replies:** 3\ **Last updated:** [May 20, 2022, 6:24am UTC](https://discuss.elastic.co/t/failure-to-backup-elasticsearch-using-velero/305212 "2022-05-20T06:24:42Z")
Hi Folks! We are running Elasticsearch cluster on our EKS cluster and using Velero to backup Elasticsearch. Elasticsearch version: 7.16.2 Number of ES Nodes: 3 We noticed that Velero partially fails to fetch the inde… --- ## [Create ssl certs and place them inside elasticsearch yml](https://discuss.elastic.co/t/create-ssl-certs-and-place-them-inside-elasticsearch-yml/305204)
**Author:** [@Nikos\_Kostis](https://discuss.elastic.co/u/Nikos_Kostis)\ **Replies:** 0\ **Last updated:** [May 19, 2022, 2:50pm UTC](https://discuss.elastic.co/t/create-ssl-certs-and-place-them-inside-elasticsearch-yml/305204 "2022-05-19T14:50:52Z")
Hi I have created an es cluster inside an existing k8s cluster. Cluster is up but when i try login initially to the page of kibana it asks for the "enrolment token" that i have to create with ... --scope kibana. For t… --- ## [Elasticsearch - nested field with geo\_point type returns unsupported symbol in search](https://discuss.elastic.co/t/elasticsearch-nested-field-with-geo-point-type-returns-unsupported-symbol-in-search/304415)
**Author:** [@Pazhaniyappan](https://discuss.elastic.co/u/Pazhaniyappan)\ **Replies:** 7\ **Last updated:** [May 20, 2022, 5:14am UTC](https://discuss.elastic.co/t/elasticsearch-nested-field-with-geo-point-type-returns-unsupported-symbol-in-search/304415 "2022-05-20T05:14:13Z")
Mapping for the index: PUT /my\_locations { "mappings": { "properties": { "pin": { "type":"nested", "properties": { "location": { "type": "geo\_point" } … --- ## [I want to send this log in json without logstash](https://discuss.elastic.co/t/i-want-to-send-this-log-in-json-without-logstash/305188)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 5\ **Last updated:** [May 20, 2022, 4:27am UTC](https://discuss.elastic.co/t/i-want-to-send-this-log-in-json-without-logstash/305188 "2022-05-20T04:27:59Z")
Hello Everyone I have following log sample data I want send this log as json in Elasticsearch without using logstash any one having Idea ? sample logs "TableName": "CouponProducts","SchemaName": "dbo","RowCounts": … --- ## [\_update\_by\_query for non-refreshed documents](https://discuss.elastic.co/t/update-by-query-for-non-refreshed-documents/305210)
**Author:** [@grzyboo](https://discuss.elastic.co/u/grzyboo)\ **Replies:** 1\ **Last updated:** [May 19, 2022, 11:49pm UTC](https://discuss.elastic.co/t/update-by-query-for-non-refreshed-documents/305210 "2022-05-19T23:49:38Z")
Hi! I have an index products. What I need is to update categoryDisplayName for all products with given categoryName. Whenever my application gets an event to update categoryName the app saves it and fills it into newly … --- ## [ElasticSearch keeps restarting in kubernetes](https://discuss.elastic.co/t/elasticsearch-keeps-restarting-in-kubernetes/305148)
**Author:** [@EngineerDollery](https://discuss.elastic.co/u/EngineerDollery)\ **Replies:** 1\ **Last updated:** [May 19, 2022, 11:10pm UTC](https://discuss.elastic.co/t/elasticsearch-keeps-restarting-in-kubernetes/305148 "2022-05-19T23:10:39Z")
Elasticsearch keeps restarting, despite being in a ready state. I've installed it using the official Elasticsearch chart, with default settings. I raised this question on the chart's github project and have been redirect… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=436) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=438)