# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=492 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 493 --- ## [Separating HTTPJSON array to separate log entries](https://discuss.elastic.co/t/separating-httpjson-array-to-separate-log-entries/297030)
**Author:** [@isa\_slngr](https://discuss.elastic.co/u/isa_slngr)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 12:37am UTC](https://discuss.elastic.co/t/separating-httpjson-array-to-separate-log-entries/297030 "2022-02-16T00:37:33Z")
Good evening all, Does anyone in the community know how I can create separate log entries using an ingest pipeline for JSON results pulled via the HTTPJSON integration? We are pulling events via an API and the results … --- ## [Question about Reading Flattened Field from ES Index to Pyspark](https://discuss.elastic.co/t/question-about-reading-flattened-field-from-es-index-to-pyspark/297189)
**Author:** [@musku](https://discuss.elastic.co/u/musku)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 11:37pm UTC](https://discuss.elastic.co/t/question-about-reading-flattened-field-from-es-index-to-pyspark/297189 "2022-02-15T23:37:14Z")
Hi , I am trying to read flattened Filed from Elasticsearch . I will be able to read all filed from Index except Flattened Datatype filed. Could you please let me know how to read that filed from Spark. Any option th… --- ## [Is it possible to call REST API call to elastic using JAVA](https://discuss.elastic.co/t/is-it-possible-to-call-rest-api-call-to-elastic-using-java/297278)
**Author:** [@ranju](https://discuss.elastic.co/u/ranju)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 10:22pm UTC](https://discuss.elastic.co/t/is-it-possible-to-call-rest-api-call-to-elastic-using-java/297278 "2022-02-15T22:22:45Z")
Need to call this type of query via REST API String query = "{"bool": {"must": \[{"match\_phrase": {"countryName": "INDIA"}}\], "must\_not": \[\], "should": \[\]}}"; --- ## [How to use curl API curl -X GET -u elastic:elastic http://elasticsearchprd.vbox.com/\_cat/shards | grep -i "UNASSIGNED" from the REST client tool](https://discuss.elastic.co/t/how-to-use-curl-api-curl-x-get-u-elastic-elastic-http-elasticsearchprd-vbox-com-cat-shards-grep-i-unassigned-from-the-rest-client-tool/297052)
**Author:** [@chinmoy\_padhi](https://discuss.elastic.co/u/chinmoy_padhi)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 10:05pm UTC](https://discuss.elastic.co/t/how-to-use-curl-api-curl-x-get-u-elastic-elastic-http-elasticsearchprd-vbox-com-cat-shards-grep-i-unassigned-from-the-rest-client-tool/297052 "2022-02-15T22:05:08Z")
Hi, How can I use this curl command curl -X GET -u elastic:elastic http://elasticsearchprd.vbox.com/\_cat/shards | grep -i "UNASSIGNED" in any of the REST client tool such as POSTMAN or anything else. If any one come acr… --- ## [Multimetric ML job Question](https://discuss.elastic.co/t/multimetric-ml-job-question/297292)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 8:41pm UTC](https://discuss.elastic.co/t/multimetric-ml-job-question/297292 "2022-02-15T20:41:49Z")
I have an index with data of throughput of multiples interfaces, those interfaces have different capacities: 1Gbps, 800Mbps, 500Mbps, 50Mbps. It will be allright if I mix all those interfaces in a single multimetric ML … --- ## [Elasticsearch: Create API Key based on role?](https://discuss.elastic.co/t/elasticsearch-create-api-key-based-on-role/297188)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 3:31pm UTC](https://discuss.elastic.co/t/elasticsearch-create-api-key-based-on-role/297188 "2022-02-15T15:31:46Z")
In the Create API key API documentation, it shows the complete role definition for the API key being included in the /\_security/api\_key request. However, in the example shown, supposed I already have role-a and role-b d… --- ## [Match only?](https://discuss.elastic.co/t/match-only/296888)
**Author:** [@ntak](https://discuss.elastic.co/u/ntak)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 6:40pm UTC](https://discuss.elastic.co/t/match-only/296888 "2022-02-15T18:40:58Z")
Hello! I'm new to ES and I'm trying to figure out how to make a query which asserts the following: All given tokens are present in the field - regardless of the order No other token are present. Ideally, I'd also be … --- ## [Ingest pipeline: run uri\_parts on all fields ending in "url"](https://discuss.elastic.co/t/ingest-pipeline-run-uri-parts-on-all-fields-ending-in-url/297231)
**Author:** [@louic](https://discuss.elastic.co/u/louic)\ **Replies:** 0\ **Last updated:** [February 15, 2022, 10:52am UTC](https://discuss.elastic.co/t/ingest-pipeline-run-uri-parts-on-all-fields-ending-in-url/297231 "2022-02-15T10:52:11Z")
How to define an ingest pipeline that runs the uri\_parts processor on all fields that match "\*.url" and output to "\*.parsed\_url" ? (without using logstash or beats) The URI parts documentation does not list any support … --- ## [Upgrading elasticsearch through Helm](https://discuss.elastic.co/t/upgrading-elasticsearch-through-helm/297274)
**Author:** [@tom4](https://discuss.elastic.co/u/tom4)\ **Replies:** 0\ **Last updated:** [February 15, 2022, 4:53pm UTC](https://discuss.elastic.co/t/upgrading-elasticsearch-through-helm/297274 "2022-02-15T16:53:19Z")
Hi Guys, Is there a way to upgrade Elasticsearch via rolling upgrade if deployed in k8s using helm? --- ## [Query\_string query operator precedence](https://discuss.elastic.co/t/query-string-query-operator-precedence/297183)
**Author:** [@MrFantastic2022](https://discuss.elastic.co/u/MrFantastic2022)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 2:56pm UTC](https://discuss.elastic.co/t/query-string-query-operator-precedence/297183 "2022-02-15T14:56:49Z")
Hello. When constructing a query\_string query, what is the precedence of the operators? For instance, the example given is this AND that OR thus. So does it AND this/that, then OR with thus? Or does it OR then AND? … --- ## [URI parts processor does not process "domain" part containing special letters (öüõä, cyrillic)](https://discuss.elastic.co/t/uri-parts-processor-does-not-process-domain-part-containing-special-letters-ouoa-cyrillic/297261)
**Author:** [@heikis](https://discuss.elastic.co/u/heikis)\ **Replies:** 0\ **Last updated:** [February 15, 2022, 2:56pm UTC](https://discuss.elastic.co/t/uri-parts-processor-does-not-process-domain-part-containing-special-letters-ouoa-cyrillic/297261 "2022-02-15T14:56:36Z")
Hello. What would be the solution to my problem that the ingest pipeline "uri\_parts" does not process the "domain" part of the URL if the domain contains some special letters like öäüõ or letters in cyrillic. What could… --- ## [Snapshot creation to external fs runs into open file limit](https://discuss.elastic.co/t/snapshot-creation-to-external-fs-runs-into-open-file-limit/297132)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 11\ **Last updated:** [February 15, 2022, 2:51pm UTC](https://discuss.elastic.co/t/snapshot-creation-to-external-fs-runs-into-open-file-limit/297132 "2022-02-15T14:51:20Z")
Hi Elastic 7.16 How can I limit open file descriptors while creating snapshots..? My issue is, the external file share (hpe storeonce nfs share), we are using where to put our snapshots, it has open file handle limit.… --- ## [ElasticSearch 7.16.3 throwing error on shape that is valid geojson](https://discuss.elastic.co/t/elasticsearch-7-16-3-throwing-error-on-shape-that-is-valid-geojson/297161)
**Author:** [@jstone\_b3insight](https://discuss.elastic.co/u/jstone_b3insight)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 2:22pm UTC](https://discuss.elastic.co/t/elasticsearch-7-16-3-throwing-error-on-shape-that-is-valid-geojson/297161 "2022-02-15T14:22:25Z")
Hello, We recently upgraded from ES version 6 to 7.16.3. One of the shapes we have in our index worked fine in version 6 and is currently working fine in version 7 in the index we migrated over from 6, but when trying … --- ## [How to calculate gauss value](https://discuss.elastic.co/t/how-to-calculate-gauss-value/297106)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 11:13am UTC](https://discuss.elastic.co/t/how-to-calculate-gauss-value/297106 "2022-02-15T11:13:13Z")
I want to know how this gauss value is calculated. POST sneaker/\_search { "query": { "function\_score": { "functions": \[ { "gauss": { "price": { "origin": "300", … --- ## [Configuring Elasticsearch on K8s](https://discuss.elastic.co/t/configuring-elasticsearch-on-k8s/297229)
**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\ **Replies:** 0\ **Last updated:** [February 15, 2022, 10:25am UTC](https://discuss.elastic.co/t/configuring-elasticsearch-on-k8s/297229 "2022-02-15T10:25:54Z")
I'm trying to create 3-node Elasticsearch cluster in K8s. Tried create with helm but it created 3-replicas with same Elasticsearch roles instead 3 pods in K8s. I want to create 1-master and 2-data nodes with 1-replica ea… --- ## [Api python for update with ?pipeline=opennlp-pipeline parameter](https://discuss.elastic.co/t/api-python-for-update-with-pipeline-opennlp-pipeline-parameter/297228)
**Author:** [@zabitelasticsearch](https://discuss.elastic.co/u/zabitelasticsearch)\ **Replies:** 0\ **Last updated:** [February 15, 2022, 10:25am UTC](https://discuss.elastic.co/t/api-python-for-update-with-pipeline-opennlp-pipeline-parameter/297228 "2022-02-15T10:25:29Z")
Hi, I use python library to query Elasticsearch. from elasticsearch import Elasticsearch clearedText = "Kobe Bryant was one of the best basketball players of all times. Not even Michael Jordan has ever scored 81 poin… --- ## [How to pass params into script as HashSet](https://discuss.elastic.co/t/how-to-pass-params-into-script-as-hashset/297224)
**Author:** [@megatron90000](https://discuss.elastic.co/u/megatron90000)\ **Replies:** 0\ **Last updated:** [February 15, 2022, 10:00am UTC](https://discuss.elastic.co/t/how-to-pass-params-into-script-as-hashset/297224 "2022-02-15T10:00:39Z")
I want to pass params in my script function as HashSet for fast contains check with complexity O(1). As I know, standart params list is ArrayList. How can I do this? Can I use ScriptEngine java? --- ## [Elastic fork/commit in github, how to apply?](https://discuss.elastic.co/t/elastic-fork-commit-in-github-how-to-apply/297217)
**Author:** [@b.kaliuzhnyi](https://discuss.elastic.co/u/b.kaliuzhnyi)\ **Replies:** 0\ **Last updated:** [February 15, 2022, 9:26am UTC](https://discuss.elastic.co/t/elastic-fork-commit-in-github-how-to-apply/297217 "2022-02-15T09:26:07Z")
Hello! I need a function to add a rollup to ILM. Found something on github: https://github.com/elastic/elasticsearch/issues/48003 . I've never worked with git, I don't know where to start. Is there an instruction to … --- ## [Closed indices do not release shards](https://discuss.elastic.co/t/closed-indices-do-not-release-shards/297142)
**Author:** [@gjulianm](https://discuss.elastic.co/u/gjulianm)\ **Replies:** 4\ **Last updated:** [February 15, 2022, 8:58am UTC](https://discuss.elastic.co/t/closed-indices-do-not-release-shards/297142 "2022-02-15T08:58:06Z")
I am having a problem where closed indices are not releasing shards. I am not sure if this is a configuration problem or a change with respect to previous versions (I am using 7.17.0 right now), because I have been able … --- ## [ILM rollover on inconsistent docs count rather than configured configuration](https://discuss.elastic.co/t/ilm-rollover-on-inconsistent-docs-count-rather-than-configured-configuration/296432)
**Author:** [@pratikdandavate](https://discuss.elastic.co/u/pratikdandavate)\ **Replies:** 4\ **Last updated:** [February 15, 2022, 8:25am UTC](https://discuss.elastic.co/t/ilm-rollover-on-inconsistent-docs-count-rather-than-configured-configuration/296432 "2022-02-15T08:25:26Z")
I have created ILM policy with following configuration : { "policy": { "phases": { "hot": { "actions": { "rollover": { "max\_docs": 1500… --- ## [Error while executing painless script : Cannot invoke \\"Object.getClass()\\" because \\"receiver\\" is null". Same script is working fine in Dev tools](https://discuss.elastic.co/t/error-while-executing-painless-script-cannot-invoke-object-getclass-because-receiver-is-null-same-script-is-working-fine-in-dev-tools/297128)
**Author:** [@KabirAli07](https://discuss.elastic.co/u/KabirAli07)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 6:29am UTC](https://discuss.elastic.co/t/error-while-executing-painless-script-cannot-invoke-object-getclass-because-receiver-is-null-same-script-is-working-fine-in-dev-tools/297128 "2022-02-15T06:29:35Z")
{ "trigger": { "schedule": { "interval": "30m" } }, "input": { "chain": { "inputs": \[ { "first": { "search": { "request": { "searc… --- ## [Out of memorry Error When Using Java Client API](https://discuss.elastic.co/t/out-of-memorry-error-when-using-java-client-api/297038)
**Author:** [@Gandalf](https://discuss.elastic.co/u/Gandalf)\ **Replies:** 3\ **Last updated:** [February 15, 2022, 6:03am UTC](https://discuss.elastic.co/t/out-of-memorry-error-when-using-java-client-api/297038 "2022-02-15T06:03:04Z")
I'm migrating my code from Java Rest High Level API to Java Client API 7.16 version. Everything goes all right in my local enviroment but got the OutOfMemoryError: Direct buffer memory error when I pull it to the Test E… --- ## [Elasticsearch upgrade with indexing](https://discuss.elastic.co/t/elasticsearch-upgrade-with-indexing/297149)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 12:26am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-with-indexing/297149 "2022-02-15T00:26:36Z")
Im using Elasticsearch 7.4.2 with three cluserted nodes. Im upgrading node 1 to 7.10.2 and then I want to update some KIbana Objects inside Elasticsearch. At that time, other nodes will be in 7.4.2 and still running. Can… --- ## [How to use filters in a query](https://discuss.elastic.co/t/how-to-use-filters-in-a-query/296990)
**Author:** [@MrFantastic2022](https://discuss.elastic.co/u/MrFantastic2022)\ **Replies:** 10\ **Last updated:** [February 14, 2022, 11:01pm UTC](https://discuss.elastic.co/t/how-to-use-filters-in-a-query/296990 "2022-02-14T23:01:38Z")
Hello. I am working with Elasticsearch 6.8.0 and am trying to follow the example on this page filter but cannot get the filter clause to produce the results I want. I am working with the sample dataset in the bank inde… --- ## [Audit logs on ES 7.16.3](https://discuss.elastic.co/t/audit-logs-on-es-7-16-3/297190)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 2\ **Last updated:** [February 14, 2022, 9:30pm UTC](https://discuss.elastic.co/t/audit-logs-on-es-7-16-3/297190 "2022-02-14T21:30:24Z")
Hello, Last time I upgraded ES to latest version 7.16.3, The problem which I have is define audit logs, I have below config: xpack.security.audit.enabled: true xpack.security.audit.logfile.emit\_node\_name: true … --- ## [Readiness probe failed waiting for cluster to become ready](https://discuss.elastic.co/t/readiness-probe-failed-waiting-for-cluster-to-become-ready/297192)
**Author:** [@cloudnative](https://discuss.elastic.co/u/cloudnative)\ **Replies:** 0\ **Last updated:** [February 14, 2022, 9:02pm UTC](https://discuss.elastic.co/t/readiness-probe-failed-waiting-for-cluster-to-become-ready/297192 "2022-02-14T21:02:20Z")
Hi, I am currently experiencing the above error after initially experiencing a crashloopbackup error due to a wrong container repo. We were trying to create an a new user account with "bin/Elasticsearch-user ". While thi… --- ## [Master-Eligible node cluster resiliency for ElasticSearch 7.x](https://discuss.elastic.co/t/master-eligible-node-cluster-resiliency-for-elasticsearch-7-x/297125)
**Author:** [@crossdelena12](https://discuss.elastic.co/u/crossdelena12)\ **Replies:** 7\ **Last updated:** [February 14, 2022, 7:22pm UTC](https://discuss.elastic.co/t/master-eligible-node-cluster-resiliency-for-elasticsearch-7-x/297125 "2022-02-14T19:22:51Z")
Hello, I am using Elasticsearch v7.17.0. Here is my configuration that I am testing the new version with, I have dedicated master node (3) and data node (1). This sets up my cluster and am in business. However, when I … --- ## [Finding message length](https://discuss.elastic.co/t/finding-message-length/296604)
**Author:** [@makudu](https://discuss.elastic.co/u/makudu)\ **Replies:** 3\ **Last updated:** [February 14, 2022, 6:32pm UTC](https://discuss.elastic.co/t/finding-message-length/296604 "2022-02-14T18:32:16Z")
this giving runtime error. Please advice. GET logstash-2022.01.25/\_doc/\_search { "query": { "match\_all": {} }, "script\_fields": { "log\_size": { "script": { "lang": "painless", "source": "doc\['message.keyword'\].… --- ## [Prefix query with multiple terms in sequence](https://discuss.elastic.co/t/prefix-query-with-multiple-terms-in-sequence/297175)
**Author:** [@FelipeGXavier](https://discuss.elastic.co/u/FelipeGXavier)\ **Replies:** 0\ **Last updated:** [February 14, 2022, 5:44pm UTC](https://discuss.elastic.co/t/prefix-query-with-multiple-terms-in-sequence/297175 "2022-02-14T17:44:04Z")
I'm looking for a way to make a query with multiple terms with prefix that preserve the order they're showed. Using match\_phrase\_prefix only the last term is the prefix. I can combine prefix with multiple match\_phrase … --- ## [First deploy elastic stack over docker swarm](https://discuss.elastic.co/t/first-deploy-elastic-stack-over-docker-swarm/295313)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [February 14, 2022, 5:55pm UTC](https://discuss.elastic.co/t/first-deploy-elastic-stack-over-docker-swarm/295313 "2022-02-14T17:55:32Z")
Hi Probably some of you have already deployed an elastic stack via docker swarm. I in my case will be the first time doing it on bare metal. Please give me examples of configurations, what to pay attention to? [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=491) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=493)