# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=448

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 449

---

## [Log ES inserts / operations](https://discuss.elastic.co/t/log-es-inserts-operations/303738)

<div class="topic-metadata">

**Author:** [@webfr](https://discuss.elastic.co/u/webfr)\
**Replies:** 0\
**Last updated:** [May 2, 2022, 10:55am UTC](https://discuss.elastic.co/t/log-es-inserts-operations/303738 "2022-05-02T10:55:21Z")

</div>

Hello guys, I would like to know how to log Elasticsearch operations like inserts with parameters for URL called, Ex: http://cloud:9200/myindex/\_doc Using free ES 7.15.1 Thanks.

---

## [Hunspell fails to stem correctly](https://discuss.elastic.co/t/hunspell-fails-to-stem-correctly/303739)

<div class="topic-metadata">

**Author:** [@mekanix](https://discuss.elastic.co/u/mekanix)\
**Replies:** 0\
**Last updated:** [May 2, 2022, 10:56am UTC](https://discuss.elastic.co/t/hunspell-fails-to-stem-correctly/303739 "2022-05-02T10:56:02Z")

</div>

We are a bit puzzled about some shortcomings when using hunspell for stemming and can't figure out why it fails. Examples: gulerod (singular), gulerødder (plural) mand (singular), mænd (plural) mønster (singular), møns…

---

## [Elasticsearch login](https://discuss.elastic.co/t/elasticsearch-login/303527)

<div class="topic-metadata">

**Author:** [@Roshan1](https://discuss.elastic.co/u/Roshan1)\
**Replies:** 4\
**Last updated:** [May 2, 2022, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-login/303527 "2022-05-02T10:23:32Z")

</div>

Hello Team, kindly advise why I am being prompted to enter username/password when accessing ES. PLease find attached image. I have installed latest version of Kibana and ES 8.1 Thanks, Roshan

---

## [Can I compare Two SearchRequest Object](https://discuss.elastic.co/t/can-i-compare-two-searchrequest-object/303487)

<div class="topic-metadata">

**Author:** [@good\_Royale](https://discuss.elastic.co/u/good_Royale)\
**Replies:** 6\
**Last updated:** [May 2, 2022, 9:37am UTC](https://discuss.elastic.co/t/can-i-compare-two-searchrequest-object/303487 "2022-05-02T09:37:03Z")

</div>

I want to compare two SearchRequest, kind a like to see if both SearchRequest object's query are same or not. for Example: Reader queryJson = new StringReader( "{" + " \\"query\\": {" + …

---

## [Changing snapshot repo from standard to standard-ia](https://discuss.elastic.co/t/changing-snapshot-repo-from-standard-to-standard-ia/303479)

<div class="topic-metadata">

**Author:** [@curiousmind](https://discuss.elastic.co/u/curiousmind)\
**Replies:** 1\
**Last updated:** [May 2, 2022, 9:32am UTC](https://discuss.elastic.co/t/changing-snapshot-repo-from-standard-to-standard-ia/303479 "2022-05-02T09:32:24Z")

</div>

Hi all, I created a bucket in AWS s3 bucket, named "backup-s3-bucket" Then I created a snapshot repo like below: PUT \_snapshot/aws\_repo { "type": "s3", "settings": { "bucket": "backup-s3-bucket", "endp…

---

## [Tab character in json input message is not validated and complete message gets wrapped in the message field in elastic search](https://discuss.elastic.co/t/tab-character-in-json-input-message-is-not-validated-and-complete-message-gets-wrapped-in-the-message-field-in-elastic-search/303727)

<div class="topic-metadata">

**Author:** [@Nikhitha](https://discuss.elastic.co/u/Nikhitha)\
**Replies:** 0\
**Last updated:** [May 2, 2022, 9:23am UTC](https://discuss.elastic.co/t/tab-character-in-json-input-message-is-not-validated-and-complete-message-gets-wrapped-in-the-message-field-in-elastic-search/303727 "2022-05-02T09:23:40Z")

</div>

input json message to logstash via filebeat is "{"version":"1.0.0","timestamp":"2022-01-19T12:24:10+00:00","severity":"debug","service\_id":"logger","message":"(tab space)shaaaaaaaaa222aaaaw1111wwaaaaj3322222jj1"}" oupt…

---

## [How do I setup a cluster with secure enabled? (Version 8)](https://discuss.elastic.co/t/how-do-i-setup-a-cluster-with-secure-enabled-version-8/303579)

<div class="topic-metadata">

**Author:** [@McLaine](https://discuss.elastic.co/u/McLaine)\
**Replies:** 1\
**Last updated:** [May 2, 2022, 7:49am UTC](https://discuss.elastic.co/t/how-do-i-setup-a-cluster-with-secure-enabled-version-8/303579 "2022-05-02T07:49:48Z")

</div>

Hello! When I try to connect a new to the cluster, I am only getting this message: \[WARN \]\[o.e.x.c.s.t.n.SecurityNetty4Transport\] \[node-1\] client did not trust this server's certificate, closing connection Netty4TcpCh…

---

## [Hints for use of Ingest pipeline? To map IP address to Region+City and never store IP address](https://discuss.elastic.co/t/hints-for-use-of-ingest-pipeline-to-map-ip-address-to-region-city-and-never-store-ip-address/303712)

<div class="topic-metadata">

**Author:** [@Bevaldss](https://discuss.elastic.co/u/Bevaldss)\
**Replies:** 1\
**Last updated:** [May 2, 2022, 7:38am UTC](https://discuss.elastic.co/t/hints-for-use-of-ingest-pipeline-to-map-ip-address-to-region-city-and-never-store-ip-address/303712 "2022-05-02T07:38:52Z")

</div>

Due to compliance with DPA we cannot store client IP addresses. I want to on-the-fly map client IP address to its' Region+City and also at same time make sure the IP address is never stored in any document. Looks like …

---

## [Helm Chart support for Hot-Warm-Cold Architecture with Index Lifecycle Management](https://discuss.elastic.co/t/helm-chart-support-for-hot-warm-cold-architecture-with-index-lifecycle-management/303701)

<div class="topic-metadata">

**Author:** [@Vijendhar](https://discuss.elastic.co/u/Vijendhar)\
**Replies:** 0\
**Last updated:** [May 2, 2022, 2:30am UTC](https://discuss.elastic.co/t/helm-chart-support-for-hot-warm-cold-architecture-with-index-lifecycle-management/303701 "2022-05-02T02:30:14Z")

</div>

Is there a plan to support Hot-Warm-Cold Architecture with Index Lifecycle Management with the Helm chart for this issue ?

---

## [Upgrade ELK from 6.8.9 to latest stable version](https://discuss.elastic.co/t/upgrade-elk-from-6-8-9-to-latest-stable-version/303703)

<div class="topic-metadata">

**Author:** [@rajdevworks](https://discuss.elastic.co/u/rajdevworks)\
**Replies:** 1\
**Last updated:** [May 2, 2022, 6:41am UTC](https://discuss.elastic.co/t/upgrade-elk-from-6-8-9-to-latest-stable-version/303703 "2022-05-02T06:41:02Z")

</div>

What to consider when upgrading ELK from 6.8.9 to latest stable version? I understand that I should be doing a rolling upgrade from 6.8.9 to 7.16.3 and from 7.16.3 to 8.x How can I reindex the existing indices? I also…

---

## [Elastic Cloud don't see events from NXLog](https://discuss.elastic.co/t/elastic-cloud-dont-see-events-from-nxlog/303677)

<div class="topic-metadata">

**Author:** [@vasjab](https://discuss.elastic.co/u/vasjab)\
**Replies:** 4\
**Last updated:** [May 2, 2022, 6:20am UTC](https://discuss.elastic.co/t/elastic-cloud-dont-see-events-from-nxlog/303677 "2022-05-02T06:20:05Z")

</div>

Hello. I'm trying to configure nxlog with Elastic cloud instance but Elastic don't see events. Can you please help how I can read events on Elastic cloud? Thanks.

---

## [Conda Overriding Pip-Installed Elasticsearch Version](https://discuss.elastic.co/t/conda-overriding-pip-installed-elasticsearch-version/303684)

<div class="topic-metadata">

**Author:** [@KatePearce](https://discuss.elastic.co/u/KatePearce)\
**Replies:** 2\
**Last updated:** [May 2, 2022, 2:22am UTC](https://discuss.elastic.co/t/conda-overriding-pip-installed-elasticsearch-version/303684 "2022-05-02T02:22:51Z")

</div>

I'm currently working on a project that requires me to use Elasticsearch version 7.0.2; however, though the pip-installed version of Elasticsearch is 7.0.2, when I check the version in my Jupyter notebook, it still says …

---

## [Problem to connect kibana with elasticsearch](https://discuss.elastic.co/t/problem-to-connect-kibana-with-elasticsearch/303581)

<div class="topic-metadata">

**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\
**Replies:** 3\
**Last updated:** [May 2, 2022, 1:55am UTC](https://discuss.elastic.co/t/problem-to-connect-kibana-with-elasticsearch/303581 "2022-05-02T01:55:11Z")

</div>

Hello , i have two virtuel machines in vmware ESXI , I installed Elasticsearch in the first machine and kibana without Elasticsearch in the second machine and i try to cennect them this is my Elasticsearch.yml and kiban…

---

## [ElasticSearch Java Client 8.1.2 - Entity content is too large for the configured buffer limit](https://discuss.elastic.co/t/elasticsearch-java-client-8-1-2-entity-content-is-too-large-for-the-configured-buffer-limit/303690)

<div class="topic-metadata">

**Author:** [@pipedreamer007](https://discuss.elastic.co/u/pipedreamer007)\
**Replies:** 2\
**Last updated:** [May 2, 2022, 12:34am UTC](https://discuss.elastic.co/t/elasticsearch-java-client-8-1-2-entity-content-is-too-large-for-the-configured-buffer-limit/303690 "2022-05-02T00:34:20Z")

</div>

Hi everyone - I'm trying to index a large amount of data into my Elasticsearch 8.1 Docker container. I've already changed the setting http.max\_content\_length in the Elasticsearch.yml file so I no longer encounter the 41…

---

## [ESM tool migration](https://discuss.elastic.co/t/esm-tool-migration/303521)

<div class="topic-metadata">

**Author:** [@iliyab09](https://discuss.elastic.co/u/iliyab09)\
**Replies:** 3\
**Last updated:** [May 2, 2022, 12:12am UTC](https://discuss.elastic.co/t/esm-tool-migration/303521 "2022-05-02T00:12:22Z")

</div>

Hello I have couple questions about migration, can't find the information nowhere. When the migration is in progress do I need to stop read write to my old cluster? When the migration is done I can just connect to…

---

## [Number of vCPUS vs Number of Shards](https://discuss.elastic.co/t/number-of-vcpus-vs-number-of-shards/303651)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 3\
**Last updated:** [April 30, 2022, 11:11pm UTC](https://discuss.elastic.co/t/number-of-vcpus-vs-number-of-shards/303651 "2022-04-30T23:11:32Z")

</div>

I have an on-premise server with Elasticsearch 6.8 that was created years ago, and at the time I only had one vCPU and now I have 4 vCPU on that server. It happens that when I mapped the indexes I defined the code below…

---

## [Unclear setup for the documented "Migration from the High Level Rest Client" topic](https://discuss.elastic.co/t/unclear-setup-for-the-documented-migration-from-the-high-level-rest-client-topic/303474)

<div class="topic-metadata">

**Author:** [@patrikjetzer](https://discuss.elastic.co/u/patrikjetzer)\
**Replies:** 3\
**Last updated:** [April 30, 2022, 8:43am UTC](https://discuss.elastic.co/t/unclear-setup-for-the-documented-migration-from-the-high-level-rest-client-topic/303474 "2022-04-30T08:43:37Z")

</div>

The current java api client documentation contains a chapter regarding migration. This describes the usage of High Level Rest Client in combination with the Java API Client: But there are no information provided how t…

---

## [Migrate Elastic Cloud Regions](https://discuss.elastic.co/t/migrate-elastic-cloud-regions/303636)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 4\
**Last updated:** [April 30, 2022, 3:14am UTC](https://discuss.elastic.co/t/migrate-elastic-cloud-regions/303636 "2022-04-30T03:14:54Z")

</div>

Using Elastic Cloud with GCP, can I start using it in one region, eg North Virginia, and then change the region of this implementation to another GCP region?

---

## [Using ElasticSerach 8 via Docker without certificate](https://discuss.elastic.co/t/using-elasticserach-8-via-docker-without-certificate/303617)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 1\
**Last updated:** [April 30, 2022, 12:38am UTC](https://discuss.elastic.co/t/using-elasticserach-8-via-docker-without-certificate/303617 "2022-04-30T00:38:02Z")

</div>

Today my team works with Elasticsearch (6.8) through a Docker machine, connecting via HTTP (php curl), just to test our system and the integration with Elasticsearch. We tried to use the Elasticsearch 8 image on Docker,…

---

## [Combine different fields for percentile](https://discuss.elastic.co/t/combine-different-fields-for-percentile/303634)

<div class="topic-metadata">

**Author:** [@sweeper42](https://discuss.elastic.co/u/sweeper42)\
**Replies:** 0\
**Last updated:** [April 29, 2022, 9:50pm UTC](https://discuss.elastic.co/t/combine-different-fields-for-percentile/303634 "2022-04-29T21:50:03Z")

</div>

I have a situation where I have documents with multiple histogram fields. I would sometimes like to get the percentile of combined fields. Here is a sample mapping PUT /t1 { "settings": { "index": { "number…

---

## [Change path cluster](https://discuss.elastic.co/t/change-path-cluster/303610)

<div class="topic-metadata">

**Author:** [@bekk777](https://discuss.elastic.co/u/bekk777)\
**Replies:** 1\
**Last updated:** [April 29, 2022, 3:39pm UTC](https://discuss.elastic.co/t/change-path-cluster/303610 "2022-04-29T15:39:14Z")

</div>

Hi everyone. Just one question about editing disk usage on Elasticsearch. On the existing server ELK, we added a newly attached disk and want to change disk usage, is it possible to use this new attached disk path or n…

---

## [Update by query, values from another index](https://discuss.elastic.co/t/update-by-query-values-from-another-index/303608)

<div class="topic-metadata">

**Author:** [@save4elastic](https://discuss.elastic.co/u/save4elastic)\
**Replies:** 1\
**Last updated:** [April 29, 2022, 3:34pm UTC](https://discuss.elastic.co/t/update-by-query-values-from-another-index/303608 "2022-04-29T15:34:45Z")

</div>

I have an index with values like FIRST\_INDEX (10 billion entries) { id: 123, car: "Volvo" }, { id: 124, car: "Vaneo" } The goal is to fill the above FIRST\_INDEX with values from the SECOND\_INDEX. SECOND\_INDEX (1 milli…

---

## [Search timeout not working](https://discuss.elastic.co/t/search-timeout-not-working/303044)

<div class="topic-metadata">

**Author:** [@MrFantastic2022](https://discuss.elastic.co/u/MrFantastic2022)\
**Replies:** 14\
**Last updated:** [April 29, 2022, 2:28pm UTC](https://discuss.elastic.co/t/search-timeout-not-working/303044 "2022-04-29T14:28:19Z")

</div>

Hello. I have a small index (~10000 documents) and have specified 1000 as the argument to the size() method of SearchSourceBuilder. When I inspect the totalHits value for some of my searches, that number is in excess o…

---

## [Can I add document data in aggregated group?](https://discuss.elastic.co/t/can-i-add-document-data-in-aggregated-group/303571)

<div class="topic-metadata">

**Author:** [@marauderbro](https://discuss.elastic.co/u/marauderbro)\
**Replies:** 1\
**Last updated:** [April 29, 2022, 12:08pm UTC](https://discuss.elastic.co/t/can-i-add-document-data-in-aggregated-group/303571 "2022-04-29T12:08:00Z")

</div>

I'm totally new to Elasticsearch, And I'm now logging our product view log to serve "popular product" to client side. Our logic is below.... User clicks product Client request product data to server When serving produ…

---

## [Elasticsearch async bulkprocess using low level client](https://discuss.elastic.co/t/elasticsearch-async-bulkprocess-using-low-level-client/303588)

<div class="topic-metadata">

**Author:** [@yelururao](https://discuss.elastic.co/u/yelururao)\
**Replies:** 1\
**Last updated:** [April 29, 2022, 12:06pm UTC](https://discuss.elastic.co/t/elasticsearch-async-bulkprocess-using-low-level-client/303588 "2022-04-29T12:06:34Z")

</div>

Hi, I'm using Low-level rest-client version 8.0.0. how to do async bulk process ? Thanks & Regads, Venkat

---

## [Apply Access Control on single field](https://discuss.elastic.co/t/apply-access-control-on-single-field/303369)

<div class="topic-metadata">

**Author:** [@hamedheidarian](https://discuss.elastic.co/u/hamedheidarian)\
**Replies:** 3\
**Last updated:** [April 29, 2022, 10:23am UTC](https://discuss.elastic.co/t/apply-access-control-on-single-field/303369 "2022-04-29T10:23:39Z")

</div>

Hi, All field-level security documentation examples, apply access control on field of an index. But is there any way to apply it on field of a specific document?

---

## [Adding certificates to Fleet Server](https://discuss.elastic.co/t/adding-certificates-to-fleet-server/303586)

<div class="topic-metadata">

**Author:** [@mhoward](https://discuss.elastic.co/u/mhoward)\
**Replies:** 0\
**Last updated:** [April 29, 2022, 9:06am UTC](https://discuss.elastic.co/t/adding-certificates-to-fleet-server/303586 "2022-04-29T09:06:30Z")

</div>

I'm in the process of getting Fleet added to my Elastic cluster. I have a Fleet server and have enrolled the Fleet server using Quick Start for handling certificates when enrolling because I was having issues with certu…

---

## [After match, get next lines in a watcher alert](https://discuss.elastic.co/t/after-match-get-next-lines-in-a-watcher-alert/303583)

<div class="topic-metadata">

**Author:** [@sree3](https://discuss.elastic.co/u/sree3)\
**Replies:** 0\
**Last updated:** [April 29, 2022, 8:23am UTC](https://discuss.elastic.co/t/after-match-get-next-lines-in-a-watcher-alert/303583 "2022-04-29T08:23:12Z")

</div>

Hi All, I have configured a watcher alert that will search a particular query pattern. This is working fine and what i'm trying to achieve is to get the next 4 lines also added to notifications, if the above match is fo…

---

## [Merge fields between documents](https://discuss.elastic.co/t/merge-fields-between-documents/303525)

<div class="topic-metadata">

**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\
**Replies:** 2\
**Last updated:** [April 29, 2022, 8:01am UTC](https://discuss.elastic.co/t/merge-fields-between-documents/303525 "2022-04-29T08:01:45Z")

</div>

Hi everyone, I have 2 kinds of docments in an Elasticsearch index. Document 1: { "\_id": "xxxxxxx", "internal\_id": "123456", "message": "LOREM IPSUM" } Document 2: { "\_id": "yyyyyyy", "internal\_id": "123456", "…

---

## [The soft link of the ElasticSearch data directory is faulty](https://discuss.elastic.co/t/the-soft-link-of-the-elasticsearch-data-directory-is-faulty/303099)

<div class="topic-metadata">

**Author:** [@Yisay](https://discuss.elastic.co/u/Yisay)\
**Replies:** 4\
**Last updated:** [April 29, 2022, 1:44am UTC](https://discuss.elastic.co/t/the-soft-link-of-the-elasticsearch-data-directory-is-faulty/303099 "2022-04-29T01:44:03Z")

</div>

I want to move the Elasticsearch data file to another directory, Here is my command to operate cp -ar aa/node/0/indices/indices\_name bb/indices\_name rm -rm aa/node/0/indices/indices\_name ln -s bb/indices\_name aa/node…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=447)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=449)
