# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=496 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 497 --- ## [How to filter nested objects in nested aggregation](https://discuss.elastic.co/t/how-to-filter-nested-objects-in-nested-aggregation/296669)
**Author:** [@jstone\_b3insight](https://discuss.elastic.co/u/jstone_b3insight)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 2:25pm UTC](https://discuss.elastic.co/t/how-to-filter-nested-objects-in-nested-aggregation/296669 "2022-02-09T14:25:39Z")
Hello, I am having a minor issue with an "aggregation" query I have been using for a couple years. My scenario: I have an index of documents that have a "searchByName" nested property. The "searchByName" property is … --- ## [APT fails to install elasticsearch 2.x](https://discuss.elastic.co/t/apt-fails-to-install-elasticsearch-2-x/296707)
**Author:** [@Viktor\_Habchak](https://discuss.elastic.co/u/Viktor_Habchak)\ **Replies:** 4\ **Last updated:** [February 9, 2022, 2:21pm UTC](https://discuss.elastic.co/t/apt-fails-to-install-elasticsearch-2-x/296707 "2022-02-09T14:21:37Z")
Hello, I have trouble installing Elasticsearch v2.x on ubuntu 18.04. Here's the output I get with the simplest case: vik@ubuntu:~$ curl -fsSL https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add - OK vi… --- ## [Auto\_date\_histogram and extended\_bounds](https://discuss.elastic.co/t/auto-date-histogram-and-extended-bounds/296733)
**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 2:14pm UTC](https://discuss.elastic.co/t/auto-date-histogram-and-extended-bounds/296733 "2022-02-09T14:14:58Z")
Hello, I am trying to make a query using auto\_date\_histogram and extended\_bounds but i get the error: \[auto\_date\_histogram\] unknown field \[extended\_bounds\] the documentation for auto\_date\_histogram does mention exte… --- ## [Elasticsearch request failed: 28 - Operation timed out after 1000 milliseconds with 0 bytes received](https://discuss.elastic.co/t/elasticsearch-request-failed-28-operation-timed-out-after-1000-milliseconds-with-0-bytes-received/294284)
**Author:** [@zeleniy](https://discuss.elastic.co/u/zeleniy)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 1:31pm UTC](https://discuss.elastic.co/t/elasticsearch-request-failed-28-operation-timed-out-after-1000-milliseconds-with-0-bytes-received/294284 "2022-02-09T13:31:48Z")
I have PHP web app which interacts with Elasticsearch. It worked well but recently i got error with next text: 2022-01-13 16:43:59 \[95.161.173.18\]\[4669\]\[1tjhk618ubj7tjniq1utjpbntj\]\[error\]\[application\] delete elastic 202… --- ## [Does adding new fields to an existing document works like updating?](https://discuss.elastic.co/t/does-adding-new-fields-to-an-existing-document-works-like-updating/296720)
**Author:** [@Ilia](https://discuss.elastic.co/u/Ilia)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 1:11pm UTC](https://discuss.elastic.co/t/does-adding-new-fields-to-an-existing-document-works-like-updating/296720 "2022-02-09T13:11:33Z")
I know the structure of inverted index data structure and worked with inverted index compression algorithms. So, I know why updating a document is not possible in inverted index and why this is simulated by inserting new… --- ## [Date\_histogram - extended bounds, converting null to 0](https://discuss.elastic.co/t/date-histogram-extended-bounds-converting-null-to-0/296719)
**Author:** [@elasticshane](https://discuss.elastic.co/u/elasticshane)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 12:49pm UTC](https://discuss.elastic.co/t/date-histogram-extended-bounds-converting-null-to-0/296719 "2022-02-09T12:49:11Z")
Hello, I have a collection of rooms in Elasticsearch 7.11.0, where each room has a data and a capacity for that date: PUT /capacities\_index { "mappings": { "properties": { "date": { "type": "date" … --- ## [Add second elasticsearch node](https://discuss.elastic.co/t/add-second-elasticsearch-node/296721)
**Author:** [@Vitalii\_Kulinich](https://discuss.elastic.co/u/Vitalii_Kulinich)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 12:25pm UTC](https://discuss.elastic.co/t/add-second-elasticsearch-node/296721 "2022-02-09T12:25:08Z")
Hi, please help to understand how can I add second Elasticsearch node. So we have run Elasticsearch + kibana as docker containers. Elasticsearch in config - "discovery.type=single-node", I want to add one more node as … --- ## [Calculating duration](https://discuss.elastic.co/t/calculating-duration/296472)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 12:16pm UTC](https://discuss.elastic.co/t/calculating-duration/296472 "2022-02-09T12:16:19Z")
Hi, I am not sure if this can be achieved, I have the following query: GET /winlogbeat-7.14.0-2022.02.03-000001/\_search { "query": { "match\_all": {} }, "aggs": { "bulks": { "terms": { "field… --- ## [Help for extra large load](https://discuss.elastic.co/t/help-for-extra-large-load/296380)
**Author:** [@Milad\_Akhlaghi](https://discuss.elastic.co/u/Milad_Akhlaghi)\ **Replies:** 4\ **Last updated:** [February 9, 2022, 11:49am UTC](https://discuss.elastic.co/t/help-for-extra-large-load/296380 "2022-02-09T11:49:37Z")
Hi Everybody, I have 20 machines that each one has about 100,000 logs per minute, I'm using elk right now but the problem is sometimes logs are not showing real-time in kibana discovery. I used tuning, performance got b… --- ## [Possible ELK merges](https://discuss.elastic.co/t/possible-elk-merges/296715)
**Author:** [@marc0069urca](https://discuss.elastic.co/u/marc0069urca)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 11:25am UTC](https://discuss.elastic.co/t/possible-elk-merges/296715 "2022-02-09T11:25:07Z")
Hello community, I wanted to know which possibility was better for SQL data merging in ELK? Also I find myself with hundred of resource to aggregate, is it better to do aggregates or jbc streaming between 2 data entrie… --- ## [Indices and Shard count impact on performance](https://discuss.elastic.co/t/indices-and-shard-count-impact-on-performance/296714)
**Author:** [@Ankur\_Mahajan](https://discuss.elastic.co/u/Ankur_Mahajan)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 11:10am UTC](https://discuss.elastic.co/t/indices-and-shard-count-impact-on-performance/296714 "2022-02-09T11:10:14Z")
I know that the shard count and size has a significant impact on the search performance (speed) and cluster recovery. Does the total number of shard count impact the search speed? Let me simplify it assume I have 5 indi… --- ## [How can I search in all fields?](https://discuss.elastic.co/t/how-can-i-search-in-all-fields/296249)
**Author:** [@sramana235](https://discuss.elastic.co/u/sramana235)\ **Replies:** 2\ **Last updated:** [February 9, 2022, 10:53am UTC](https://discuss.elastic.co/t/how-can-i-search-in-all-fields/296249 "2022-02-09T10:53:11Z")
Hello, I've been asking a lot of questions lately. Is it impossible to search in all fields from the Elasticsearch 7.0.0 version now? Can't I use \_all anymore? If I can't use it, is there any other way? Or I wonder i… --- ## [FSCrawler excludes, Windows server](https://discuss.elastic.co/t/fscrawler-excludes-windows-server/296689)
**Author:** [@newschapmj1](https://discuss.elastic.co/u/newschapmj1)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 9:57am UTC](https://discuss.elastic.co/t/fscrawler-excludes-windows-server/296689 "2022-02-09T09:57:29Z")
Has anyone had success with using excludes in FSCrawler on Windows servers? Are there are any known limitations? e.g. can you exclude only top level folders or can you exclude deeper folder s eg folder1\\sub1\\sub2\\sub3\*… --- ## [Elastic Search Unrestricted Information Disclosure Vulnerability](https://discuss.elastic.co/t/elastic-search-unrestricted-information-disclosure-vulnerability/296688)
**Author:** [@kshi](https://discuss.elastic.co/u/kshi)\ **Replies:** 4\ **Last updated:** [February 9, 2022, 9:53am UTC](https://discuss.elastic.co/t/elastic-search-unrestricted-information-disclosure-vulnerability/296688 "2022-02-09T09:53:16Z")
Hi Team, We are using Elasticsearch version 1.6.1 for one of our product Recovery Manger. Where it is just used for message finding and indexing. Customer is using the Nessus Vulnerability scanner and is coming out wi… --- ## [Issue in index mapping](https://discuss.elastic.co/t/issue-in-index-mapping/296025)
**Author:** [@mostafa\_khedri](https://discuss.elastic.co/u/mostafa_khedri)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 9:06am UTC](https://discuss.elastic.co/t/issue-in-index-mapping/296025 "2022-02-09T09:06:21Z")
Hi guys. I have some log in JSON format as below: {"message":"new activity:","context":{"request.headers":{"x-user-data":\["xxxx"\],"x-real-ip":\["xxxx"\],"x-forwarded-via":\["xxx/0.1"\],"x-forwarded-proto":\["http"\],"x-forwar… --- ## [Error: Could not find or load main class org.elasticsearch.tools.JavaVersionChecker](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-tools-javaversionchecker/296695)
**Author:** [@nadler](https://discuss.elastic.co/u/nadler)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 9:02am UTC](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-tools-javaversionchecker/296695 "2022-02-09T09:02:10Z")
Hi, I have implemented an new cluster of elasticearch v7.12.0 with 6 nodes and two masters. After the servers were installed i saw that all of the Elasticsearch services are dead. When starting them i got: Error: Could… --- ## [Some Error in nori tokenizer](https://discuss.elastic.co/t/some-error-in-nori-tokenizer/296686)
**Author:** [@jug1215](https://discuss.elastic.co/u/jug1215)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 7:08am UTC](https://discuss.elastic.co/t/some-error-in-nori-tokenizer/296686 "2022-02-09T07:08:52Z")
Hi I'm using Nori tokenizer in Elasticsearch(7.16.1) for analyzing korean comments and i think i found some errors in nori tokenizer. input : GET \_analyze { "tokenizer": "nori\_tokenizer", "explain": "true", "text"… --- ## [Understanding elasticsearch filter context](https://discuss.elastic.co/t/understanding-elasticsearch-filter-context/296250)
**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\ **Replies:** 4\ **Last updated:** [February 9, 2022, 6:52am UTC](https://discuss.elastic.co/t/understanding-elasticsearch-filter-context/296250 "2022-02-09T06:52:04Z")
I have some doubts about how the filter context works in Elasticsearch/Lucene ecosystem which I would be grateful if someone can clear up. This is related to another problem which I have been recently facing. I have an … --- ## [Do term vectors accelerate phrase queries?](https://discuss.elastic.co/t/do-term-vectors-accelerate-phrase-queries/296674)
**Author:** [@conwaytext](https://discuss.elastic.co/u/conwaytext)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 12:53am UTC](https://discuss.elastic.co/t/do-term-vectors-accelerate-phrase-queries/296674 "2022-02-09T00:53:23Z")
If a field's term vectors are stored, will phrase queries against it be faster? For example, if a field has "term\_vector": "with\_positions", will "match\_phrase" queries take advantage of those, and execute faster than i… --- ## [How to export an entire Elastic Search index to a csv file](https://discuss.elastic.co/t/how-to-export-an-entire-elastic-search-index-to-a-csv-file/296655)
**Author:** [@mwalk](https://discuss.elastic.co/u/mwalk)\ **Replies:** 3\ **Last updated:** [February 8, 2022, 10:51pm UTC](https://discuss.elastic.co/t/how-to-export-an-entire-elastic-search-index-to-a-csv-file/296655 "2022-02-08T22:51:22Z")
Hello, We have an Elasticsearch index that has approximately 1 million records in it. We'd like to export only two fields from it, and ID (int) and a Value (string) for auditing purposes. We've tried using es2csv, but… --- ## [Unable to locate data ingestion logs to debug GCP Dataflow errors](https://discuss.elastic.co/t/unable-to-locate-data-ingestion-logs-to-debug-gcp-dataflow-errors/296667)
**Author:** [@reza1](https://discuss.elastic.co/u/reza1)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 10:36pm UTC](https://discuss.elastic.co/t/unable-to-locate-data-ingestion-logs-to-debug-gcp-dataflow-errors/296667 "2022-02-08T22:36:28Z")
Hello, I'm trying to debug an issue with a GCP Dataflow job which inserts documents into an index. I get the following errors from GCP Dataflow: java.io.IOException: Error writing to Elasticsearch, some elements could … --- ## [Max\_bytes\_length\_exceeded\_exception Reason](https://discuss.elastic.co/t/max-bytes-length-exceeded-exception-reason/296640)
**Author:** [@Ahmed\_El\_bendary](https://discuss.elastic.co/u/Ahmed_El_bendary)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 5:03pm UTC](https://discuss.elastic.co/t/max-bytes-length-exceeded-exception-reason/296640 "2022-02-08T17:03:36Z")
error =\> index returned 400 \_index: \_doc \_id: 20142 \_version: 0 error: Type: illegal\_argument\_exception Reason: "Document contains at least one immense term in field="form" (whose UTF8 encoding is longer than the max l… --- ## [JAVA\_HOME and ES\_JAVA\_HOME](https://discuss.elastic.co/t/java-home-and-es-java-home/296651)
**Author:** [@holobolo0815](https://discuss.elastic.co/u/holobolo0815)\ **Replies:** 1\ **Last updated:** [February 8, 2022, 9:46pm UTC](https://discuss.elastic.co/t/java-home-and-es-java-home/296651 "2022-02-08T21:46:08Z")
Hello, As I understand JAVA\_HOME should not be set, and ES\_JAVA\_HOME should only be set if I want to use another JDK than the bundled one. Alright, so my system just sets JAVA\_HOME for generic use and I don't care, and… --- ## [ECK Deployment on Openshift using https://www.elastic.co/guide/en/cloud-on-k8s/1.9/k8s-openshift-deploy-elasticsearch.html](https://discuss.elastic.co/t/eck-deployment-on-openshift-using-https-www-elastic-co-guide-en-cloud-on-k8s-1-9-k8s-openshift-deploy-elasticsearch-html/296644)
**Author:** [@Ganesh\_Sharma](https://discuss.elastic.co/u/Ganesh_Sharma)\ **Replies:** 2\ **Last updated:** [February 8, 2022, 6:35pm UTC](https://discuss.elastic.co/t/eck-deployment-on-openshift-using-https-www-elastic-co-guide-en-cloud-on-k8s-1-9-k8s-openshift-deploy-elasticsearch-html/296644 "2022-02-08T18:35:37Z")
Please can someone confirm if this is a valid Elasticsearch deployment for Openshift? Please advise as I am stuck since couple of days. --- apiVersion: route.openshift.io/v1 kind: Route metadata: name: elasticsearch … --- ## [I am trying to create a custom function, how to multiply and sum two vectors in painless](https://discuss.elastic.co/t/i-am-trying-to-create-a-custom-function-how-to-multiply-and-sum-two-vectors-in-painless/296647)
**Author:** [@Marco\_Ramos](https://discuss.elastic.co/u/Marco_Ramos)\ **Replies:** 0\ **Last updated:** [February 8, 2022, 5:46pm UTC](https://discuss.elastic.co/t/i-am-trying-to-create-a-custom-function-how-to-multiply-and-sum-two-vectors-in-painless/296647 "2022-02-08T17:46:44Z")
vector a = \[1,2,3,4,5\] vector b=\[2,2,2,2,2\] result =sum(a\*b) --- ## [How to run fleet server in insecure mode?](https://discuss.elastic.co/t/how-to-run-fleet-server-in-insecure-mode/296610)
**Author:** [@gabrielfsousa](https://discuss.elastic.co/u/gabrielfsousa)\ **Replies:** 1\ **Last updated:** [February 8, 2022, 4:48pm UTC](https://discuss.elastic.co/t/how-to-run-fleet-server-in-insecure-mode/296610 "2022-02-08T16:48:12Z")
Im running fleet server in docker with this env --env FLEET\_ENROLL=1\\ --env FLEET\_SERVER\_ENABLE=1\\ --env FLEET\_SERVER\_ELASTICSEARCH\_HOST=$(ELASTICSEARCHHOST)\\ --env FLEET\_SERVER\_SERVICE\_TOKEN=$(SERVICETOKEN)\\ --env FLEE… --- ## [Server Requirements](https://discuss.elastic.co/t/server-requirements/296341)
**Author:** [@mstarkie](https://discuss.elastic.co/u/mstarkie)\ **Replies:** 2\ **Last updated:** [February 8, 2022, 3:33pm UTC](https://discuss.elastic.co/t/server-requirements/296341 "2022-02-08T15:33:31Z")
Hi, I am new to Elasticsearch and we are planning on using it to capture all of our order flow for analytics purposes. I anticipate a data rate of about 2.1 to 3 mb/seconds with a total of 5 to 7 gb/day of data. I wan… --- ## [Filter documents that contain array with empty string](https://discuss.elastic.co/t/filter-documents-that-contain-array-with-empty-string/296562)
**Author:** [@Muhammad\_Ahmad](https://discuss.elastic.co/u/Muhammad_Ahmad)\ **Replies:** 5\ **Last updated:** [February 8, 2022, 3:54pm UTC](https://discuss.elastic.co/t/filter-documents-that-contain-array-with-empty-string/296562 "2022-02-08T15:54:14Z")
I've documents in Elasticsearch and I want to filter out the documents that contain an array of only empty strings or have nothing / empty array. #doc 1 { "\_index": "my-index-000001", "\_type": "\_doc", "\_id": "0", … --- ## [Elasticsearch-certutil http command not founds](https://discuss.elastic.co/t/elasticsearch-certutil-http-command-not-founds/296626)
**Author:** [@legos765](https://discuss.elastic.co/u/legos765)\ **Replies:** 1\ **Last updated:** [February 8, 2022, 3:45pm UTC](https://discuss.elastic.co/t/elasticsearch-certutil-http-command-not-founds/296626 "2022-02-08T15:45:25Z")
Hello, Following this instruction: I should be able to run command /bin/Elasticsearch-certutil http but it says, that only 3 commands are available: adam@ubuntu1:/etc/elasticsearch$ sudo /usr/share/elasticsearch/bin/… --- ## [Use Case : Records are more than 10000 with pagination](https://discuss.elastic.co/t/use-case-records-are-more-than-10000-with-pagination/296207)
**Author:** [@Swapnil\_Javal](https://discuss.elastic.co/u/Swapnil_Javal)\ **Replies:** 1\ **Last updated:** [February 8, 2022, 2:03pm UTC](https://discuss.elastic.co/t/use-case-records-are-more-than-10000-with-pagination/296207 "2022-02-08T14:03:28Z")
In My use case, We are implementing pagination with Elasticsearch. If the user clicks on any page number then he will get that set of records on UI. e.g. there is page size is 10 and we click on Page number 2 then 11 to… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=495) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=497)