# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=452

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 453

---

## [Elastic CORS Problem ....disappear after a refresh](https://discuss.elastic.co/t/elastic-cors-problem-disappear-after-a-refresh/303132)

<div class="topic-metadata">

**Author:** [@Avinash\_123](https://discuss.elastic.co/u/Avinash_123)\
**Replies:** 0\
**Last updated:** [April 25, 2022, 8:48am UTC](https://discuss.elastic.co/t/elastic-cors-problem-disappear-after-a-refresh/303132 "2022-04-25T08:48:24Z")

</div>

Hi Team, We have enabled the CORS with below configuration in Elastic cloud environment which we are using for production. http.cors.enabled: true http.cors.allow-origin: /^(https?://).\*?(websitename).\\w+(.\\w+)?$/ ht…

---

## [Trying to make all the fields as Dynamic false](https://discuss.elastic.co/t/trying-to-make-all-the-fields-as-dynamic-false/303117)

<div class="topic-metadata">

**Author:** [@Shaiju\_Sam](https://discuss.elastic.co/u/Shaiju_Sam)\
**Replies:** 1\
**Last updated:** [April 25, 2022, 7:51am UTC](https://discuss.elastic.co/t/trying-to-make-all-the-fields-as-dynamic-false/303117 "2022-04-25T07:51:02Z")

</div>

Hi Team, I am getting an error in logstash from an index since the total fields crossed 2000. I am trying to make all the fields as dynamic=false so there wont be additional fields adding up. Can someone pls let me know…

---

## [Resource management with Ingest and Transform](https://discuss.elastic.co/t/resource-management-with-ingest-and-transform/302239)

<div class="topic-metadata">

**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\
**Replies:** 7\
**Last updated:** [April 25, 2022, 7:23am UTC](https://discuss.elastic.co/t/resource-management-with-ingest-and-transform/302239 "2022-04-25T07:23:13Z")

</div>

Hi, I currently have a running pipeline like this: Filebeat -\> Logstash -\> Elasticsearch \> Elasticsearch Transform I'm trying to process 10GB of logs. The data ingestion (Logstash -\> Elasticsearch) takes 30 mins, use…

---

## [Two Transform jobs overwrite result doc ID of each other (duplicate \_id)](https://discuss.elastic.co/t/two-transform-jobs-overwrite-result-doc-id-of-each-other-duplicate-id/303064)

<div class="topic-metadata">

**Author:** [@goldsky](https://discuss.elastic.co/u/goldsky)\
**Replies:** 1\
**Last updated:** [April 25, 2022, 6:14am UTC](https://discuss.elastic.co/t/two-transform-jobs-overwrite-result-doc-id-of-each-other-duplicate-id/303064 "2022-04-25T06:14:10Z")

</div>

Hello, during my journey with migration of existing, "home-made" transformations to Transform API (continuous mode), I faced one minor issue - ability to add static fields into result documents, on the beginning I tried…

---

## [DSL query not working post upgrade](https://discuss.elastic.co/t/dsl-query-not-working-post-upgrade/303095)

<div class="topic-metadata">

**Author:** [@Ankit\_Chauhan1](https://discuss.elastic.co/u/Ankit_Chauhan1)\
**Replies:** 3\
**Last updated:** [April 24, 2022, 6:55pm UTC](https://discuss.elastic.co/t/dsl-query-not-working-post-upgrade/303095 "2022-04-24T18:55:08Z")

</div>

Earlier below query was working well in the DSL query mode. but the same has stopped working post elastic upgrade to 7.17.1 {"query":{"bool":{"must":\[{"match":{"eT.keyword":"TRANSFER"}},{"nested": {"path": "actions","qu…

---

## [Tuning ranking in search result](https://discuss.elastic.co/t/tuning-ranking-in-search-result/303097)

<div class="topic-metadata">

**Author:** [@kentoto](https://discuss.elastic.co/u/kentoto)\
**Replies:** 1\
**Last updated:** [April 24, 2022, 1:12pm UTC](https://discuss.elastic.co/t/tuning-ranking-in-search-result/303097 "2022-04-24T13:12:00Z")

</div>

doc1 = {"id":1,"text":"tonight"} doc2 = {"id":2,"text":"tonight tonight"} doc3 = {"id":3,"text":"tonight tonight tonight"} doc4 = {"id":4,"text":"tonight and something else"} doc5 = {"id":5,"text":"tonight and you"} es.…

---

## [How to solve index millions of files content with scalable approach?](https://discuss.elastic.co/t/how-to-solve-index-millions-of-files-content-with-scalable-approach/303084)

<div class="topic-metadata">

**Author:** [@sushilprj](https://discuss.elastic.co/u/sushilprj)\
**Replies:** 5\
**Last updated:** [April 24, 2022, 11:49am UTC](https://discuss.elastic.co/t/how-to-solve-index-millions-of-files-content-with-scalable-approach/303084 "2022-04-24T11:49:02Z")

</div>

I am working with an application that requires indexing thousands of files' content to make the content searchable. I use tika to extract the file content and then index it to Elasticsearch. I also tried to ingest pipeli…

---

## [Sub-aggregations in bucket Aggregation's Terms return 0 as Value](https://discuss.elastic.co/t/sub-aggregations-in-bucket-aggregations-terms-return-0-as-value/303053)

<div class="topic-metadata">

**Author:** [@Draken](https://discuss.elastic.co/u/Draken)\
**Replies:** 5\
**Last updated:** [April 24, 2022, 1:28am UTC](https://discuss.elastic.co/t/sub-aggregations-in-bucket-aggregations-terms-return-0-as-value/303053 "2022-04-24T01:28:57Z")

</div>

Hello, I'm recently introduced to Elasticsearch and currently trying to build a Monitoring application on top of it, at first everything went smoothly as we worked on elastic version 6.5.4, then we decided to move on to …

---

## [How do I match by all objects in an array of objects in Elasticsearch?](https://discuss.elastic.co/t/how-do-i-match-by-all-objects-in-an-array-of-objects-in-elasticsearch/303074)

<div class="topic-metadata">

**Author:** [@codinges](https://discuss.elastic.co/u/codinges)\
**Replies:** 2\
**Last updated:** [April 23, 2022, 3:51pm UTC](https://discuss.elastic.co/t/how-do-i-match-by-all-objects-in-an-array-of-objects-in-elasticsearch/303074 "2022-04-23T15:51:03Z")

</div>

I want to get documents like below with match from Elasticsearch. { "configurationId": "dp4wb8kpw4k1s2z", "type": 1, "items": \[ { "text": "car", "rank": 1 }, { "text": "ship", "…

---

## [How to divide new index shard in all nodes](https://discuss.elastic.co/t/how-to-divide-new-index-shard-in-all-nodes/303070)

<div class="topic-metadata">

**Author:** [@DJ\_Zhu](https://discuss.elastic.co/u/DJ_Zhu)\
**Replies:** 1\
**Last updated:** [April 23, 2022, 2:19pm UTC](https://discuss.elastic.co/t/how-to-divide-new-index-shard-in-all-nodes/303070 "2022-04-23T14:19:02Z")

</div>

Thanks for your read first. I use Elasticsearch to store app logs which contains about 100 TB data in a single cluster. The data is store in a new index per 4 hours and old index will be deleted after 7 days. Since the …

---

## [Understanding the java code (Pattern Capture token filter)](https://discuss.elastic.co/t/understanding-the-java-code-pattern-capture-token-filter/303072)

<div class="topic-metadata">

**Author:** [@dishant.sharma](https://discuss.elastic.co/u/dishant.sharma)\
**Replies:** 0\
**Last updated:** [April 23, 2022, 11:41am UTC](https://discuss.elastic.co/t/understanding-the-java-code-pattern-capture-token-filter/303072 "2022-04-23T11:41:11Z")

</div>

---

## [Node failed to run](https://discuss.elastic.co/t/node-failed-to-run/303066)

<div class="topic-metadata">

**Author:** [@korjavin](https://discuss.elastic.co/u/korjavin)\
**Replies:** 3\
**Last updated:** [April 23, 2022, 7:30am UTC](https://discuss.elastic.co/t/node-failed-to-run/303066 "2022-04-23T07:30:50Z")

</div>

Node has been restarted and then \[2022-04-23T05:04:36,452\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[elastic-elasticsearch-data-2\] fatal error in thread \[elasticsearch\[elastic-elasticsearch-data-2\]\[generic\]\[T…

---

## [How to replace Security Certificate sign by Elastic CA](https://discuss.elastic.co/t/how-to-replace-security-certificate-sign-by-elastic-ca/302840)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 4\
**Last updated:** [April 22, 2022, 6:30pm UTC](https://discuss.elastic.co/t/how-to-replace-security-certificate-sign-by-elastic-ca/302840 "2022-04-22T18:30:34Z")

</div>

I had created certificate with following command in past. and it is going to expire now. bin/elasticsearch-certutil cert -out /etc/elasticsearch/config/elastic-certificates.p12 -pass "" I would like to replace that bef…

---

## [java.net.NetPermission "specifyStreamHandler" not allowed for custom plugin](https://discuss.elastic.co/t/java-net-netpermission-specifystreamhandler-not-allowed-for-custom-plugin/301392)

<div class="topic-metadata">

**Author:** [@poanse](https://discuss.elastic.co/u/poanse)\
**Replies:** 2\
**Last updated:** [April 22, 2022, 3:50pm UTC](https://discuss.elastic.co/t/java-net-netpermission-specifystreamhandler-not-allowed-for-custom-plugin/301392 "2022-04-22T15:50:22Z")

</div>

I presume this issue is analogous to java.io.FilePermission is no longer allowed for custom plug-in. · Issue #69464 · elastic/elasticsearch · GitHub, but dealing with java.net.NetPermission "specifyStreamHandler" permiss…

---

## [How to implement this ES curl into Java](https://discuss.elastic.co/t/how-to-implement-this-es-curl-into-java/303008)

<div class="topic-metadata">

**Author:** [@aboli](https://discuss.elastic.co/u/aboli)\
**Replies:** 1\
**Last updated:** [April 22, 2022, 1:55pm UTC](https://discuss.elastic.co/t/how-to-implement-this-es-curl-into-java/303008 "2022-04-22T13:55:57Z")

</div>

Hi, I want to translate this curl into working java code in spring - curl -XGET 'localhost:9200/catalog/\_search?pretty' -H 'Content-Type: application/json' -d' { "size": 0, "aggs": { "types": { "terms": { "field":…

---

## [Failed to parse date field](https://discuss.elastic.co/t/failed-to-parse-date-field/302812)

<div class="topic-metadata">

**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\
**Replies:** 4\
**Last updated:** [April 22, 2022, 1:48pm UTC](https://discuss.elastic.co/t/failed-to-parse-date-field/302812 "2022-04-22T13:48:22Z")

</div>

Blockquote I am having little problem regarding the date. What is the solution to change the date format, if i am having date format like wed 11:32 , fri 4:52, I cant able to do mapping in elasticsearch. So i got this …

---

## [Elastic - restoring index from snapshots does not work](https://discuss.elastic.co/t/elastic-restoring-index-from-snapshots-does-not-work/303001)

<div class="topic-metadata">

**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\
**Replies:** 1\
**Last updated:** [April 22, 2022, 1:46pm UTC](https://discuss.elastic.co/t/elastic-restoring-index-from-snapshots-does-not-work/303001 "2022-04-22T13:46:52Z")

</div>

running Elastic stack 7.12.0. I configured a repository to snapshot indices. The system takes a snapshot on a daily basis and keeps 7 days. All snapshots seem to be okay. States are all "Snapshot complete". I tried …

---

## [Failed to create query - maxClauseCount is set to 1024](https://discuss.elastic.co/t/failed-to-create-query-maxclausecount-is-set-to-1024/302898)

<div class="topic-metadata">

**Author:** [@Sowmiya](https://discuss.elastic.co/u/Sowmiya)\
**Replies:** 3\
**Last updated:** [April 22, 2022, 1:39pm UTC](https://discuss.elastic.co/t/failed-to-create-query-maxclausecount-is-set-to-1024/302898 "2022-04-22T13:39:39Z")

</div>

Hi Team, I am using Elasticsearch version 7.16.2. Have set up the search on the domain-specific data around 20k records. When I am searching for a particular query, I am getting the below error. RequestError(400, 'sear…

---

## [Securing elastic using elastic ansible playbook](https://discuss.elastic.co/t/securing-elastic-using-elastic-ansible-playbook/303029)

<div class="topic-metadata">

**Author:** [@sligade](https://discuss.elastic.co/u/sligade)\
**Replies:** 0\
**Last updated:** [April 22, 2022, 12:12pm UTC](https://discuss.elastic.co/t/securing-elastic-using-elastic-ansible-playbook/303029 "2022-04-22T12:12:19Z")

</div>

Hello I am new to elastic, and trying to use ansible playbook to install set it up I was able to setup a test cluster without any issue, and now I want to secure using X-Pack security SSL/TLS setup as identified ansibl…

---

## [EQL sequence performance issue](https://discuss.elastic.co/t/eql-sequence-performance-issue/300601)

<div class="topic-metadata">

**Author:** [@eufe](https://discuss.elastic.co/u/eufe)\
**Replies:** 3\
**Last updated:** [April 22, 2022, 9:16am UTC](https://discuss.elastic.co/t/eql-sequence-performance-issue/300601 "2022-04-22T09:16:35Z")

</div>

Environnement : V7.16.2 JVM : 31g (one node) RAM : 64G Hello, I'm trying to use EQL to detect some changes on a specific field. A concrete usecase would be to detect a regression on the administrative protocol on a…

---

## [How to update fields in nested document without script](https://discuss.elastic.co/t/how-to-update-fields-in-nested-document-without-script/302999)

<div class="topic-metadata">

**Author:** [@martin\_wun](https://discuss.elastic.co/u/martin_wun)\
**Replies:** 0\
**Last updated:** [April 22, 2022, 9:00am UTC](https://discuss.elastic.co/t/how-to-update-fields-in-nested-document-without-script/302999 "2022-04-22T09:00:18Z")

</div>

Hi all, Is there a way to update an individual field in a nested document without having to use a script? I have found some answers here, but they all use a painless script in some form. E.g.: For example, say I have…

---

## [Randomly xml tags are not showing in the elasticsearch 7.14](https://discuss.elastic.co/t/randomly-xml-tags-are-not-showing-in-the-elasticsearch-7-14/302994)

<div class="topic-metadata">

**Author:** [@Lakshani\_Gamage](https://discuss.elastic.co/u/Lakshani_Gamage)\
**Replies:** 0\
**Last updated:** [April 22, 2022, 8:06am UTC](https://discuss.elastic.co/t/randomly-xml-tags-are-not-showing-in-the-elasticsearch-7-14/302994 "2022-04-22T08:06:23Z")

</div>

I'm using Elasticsearch 7.14. When I check the JSON format of a message in the Elasticsearch, I can see below. "agent": { "ephemeral\_id": "2a4c1cb3-b7d6-4a1b-b244-0e669f1d7686", "type": "filebeat", "id": "3dfa6feb…

---

## [Elasticsearch 7.16.2 failed to start when switching from Java 8 to Java 11](https://discuss.elastic.co/t/elasticsearch-7-16-2-failed-to-start-when-switching-from-java-8-to-java-11/301404)

<div class="topic-metadata">

**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\
**Replies:** 9\
**Last updated:** [April 22, 2022, 8:16am UTC](https://discuss.elastic.co/t/elasticsearch-7-16-2-failed-to-start-when-switching-from-java-8-to-java-11/301404 "2022-04-22T08:16:03Z")

</div>

I'm testing Elasticsearch (ES) single node cluster with Java 8 and Java 11 Java 8 and Java 11 are installed on Linux server RHEL release 7.9 in directories: /usr/java/jdk1.8.0\_281-amd64 includes subdirectories bin, inc…

---

## [How can I use kerberos under python elasticsearch?](https://discuss.elastic.co/t/how-can-i-use-kerberos-under-python-elasticsearch/302981)

<div class="topic-metadata">

**Author:** [@papi1992](https://discuss.elastic.co/u/papi1992)\
**Replies:** 1\
**Last updated:** [April 22, 2022, 8:06am UTC](https://discuss.elastic.co/t/how-can-i-use-kerberos-under-python-elasticsearch/302981 "2022-04-22T08:06:35Z")

</div>

I checked the documentation of elasticsearch:7.x but still didn't find the way how I can force the python ES package to use my kerberos token. I can reach the ES through a browser, curl ( curl --negotiate -u ) and reque…

---

## [Compound score computation details](https://discuss.elastic.co/t/compound-score-computation-details/302940)

<div class="topic-metadata">

**Author:** [@med\_rgn](https://discuss.elastic.co/u/med_rgn)\
**Replies:** 0\
**Last updated:** [April 21, 2022, 3:48pm UTC](https://discuss.elastic.co/t/compound-score-computation-details/302940 "2022-04-21T15:48:25Z")

</div>

Hello context In my use case I rank documents regarding an input request relying on a compound score used for the ranking. This compound score is a weighted sum of 3 text similarity scores as follow: score = weight1 \*…

---

## [Unexpected result from Synonym Filter if Char Filter is also used](https://discuss.elastic.co/t/unexpected-result-from-synonym-filter-if-char-filter-is-also-used/302896)

<div class="topic-metadata">

**Author:** [@Patrick\_N](https://discuss.elastic.co/u/Patrick_N)\
**Replies:** 0\
**Last updated:** [April 21, 2022, 10:29am UTC](https://discuss.elastic.co/t/unexpected-result-from-synonym-filter-if-char-filter-is-also-used/302896 "2022-04-21T10:29:18Z")

</div>

I have a field which uses both a char filter (it converts Chinese words to some separator text) and a synonym filter. PUT test { "mappings": { "properties": { "description": { "an…

---

## [Why contexts?](https://discuss.elastic.co/t/why-contexts/302957)

<div class="topic-metadata">

**Author:** [@aleding](https://discuss.elastic.co/u/aleding)\
**Replies:** 7\
**Last updated:** [April 21, 2022, 8:32pm UTC](https://discuss.elastic.co/t/why-contexts/302957 "2022-04-21T20:32:42Z")

</div>

In debugging a Filebeat module, I have had to dig into Painless scripts & contexts which has led to several questions: Why contexts? Can the same data not be accessed via \_doc? (I've also seen this asked in other …

---

## ["Unable to retrieve version information from Elasticsearch nodes. "](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/302852)

<div class="topic-metadata">

**Author:** [@Bruceclegg](https://discuss.elastic.co/u/Bruceclegg)\
**Replies:** 5\
**Last updated:** [April 21, 2022, 3:49pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/302852 "2022-04-21T15:49:41Z")

</div>

Trying to set up a small barebones (for now) 3 node cluster in Centos 7. Cluster appears to be up, but I can't connect kibana to it. I have installed kibana on one of the Elasticsearch nodes. Elasticsearch is running …

---

## [Correct way to use aliases?](https://discuss.elastic.co/t/correct-way-to-use-aliases/302931)

<div class="topic-metadata">

**Author:** [@caseydm](https://discuss.elastic.co/u/caseydm)\
**Replies:** 0\
**Last updated:** [April 21, 2022, 3:06pm UTC](https://discuss.elastic.co/t/correct-way-to-use-aliases/302931 "2022-04-21T15:06:57Z")

</div>

I am trying to improve the way I manage my indexes in Elasticsearch and am considering using aliases. But I want to make sure I understand the pattern properly. Right now I have some indexes that are grouped by year, and…

---

## [Watcher reporting mail attachment: Visualizations in PDF report not fully loaded](https://discuss.elastic.co/t/watcher-reporting-mail-attachment-visualizations-in-pdf-report-not-fully-loaded/302930)

<div class="topic-metadata">

**Author:** [@patricia\_kraft](https://discuss.elastic.co/u/patricia_kraft)\
**Replies:** 0\
**Last updated:** [April 21, 2022, 3:05pm UTC](https://discuss.elastic.co/t/watcher-reporting-mail-attachment-visualizations-in-pdf-report-not-fully-loaded/302930 "2022-04-21T15:05:53Z")

</div>

Hi there, we are using automatically generated PDF reports to send out an email once a day with the PDF report (from one dashboard) as an attachment. This worked fine in version 7.5.2, but since we upgraded to 7.16.3 so…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=451)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=453)
