# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=517

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 518

---

## [BadRequest400Exception latitude must be a number](https://discuss.elastic.co/t/badrequest400exception-latitude-must-be-a-number/293169)

<div class="topic-metadata">

**Author:** [@rayuth](https://discuss.elastic.co/u/rayuth)\
**Replies:** 3\
**Last updated:** [January 4, 2022, 5:48am UTC](https://discuss.elastic.co/t/badrequest400exception-latitude-must-be-a-number/293169 "2022-01-04T05:48:52Z")

</div>

Hi All, I got an error: Elasticsearch\\Common\\Exceptions\\BadRequest400Exception: {"error":{"root\_cause":\[{"type":"parse\_exception","reason":"latitude must be a number"}\],"type":"mapper\_parsing\_exception","reason":"faile…

---

## [Docker - Upgrade elasticsearch from 7.15.2 to 7.16.2](https://discuss.elastic.co/t/docker-upgrade-elasticsearch-from-7-15-2-to-7-16-2/293360)

<div class="topic-metadata">

**Author:** [@aza-zil](https://discuss.elastic.co/u/aza-zil)\
**Replies:** 1\
**Last updated:** [January 4, 2022, 5:37am UTC](https://discuss.elastic.co/t/docker-upgrade-elasticsearch-from-7-15-2-to-7-16-2/293360 "2022-01-04T05:37:17Z")

</div>

Hey, I have ES 7.15.2 running in docker, and I want to upgrade it to 7.16.2. How can I do that? The only solution I can see is this Rolling upgrades but I believe it does not work in Docker.

---

## [How to calculate EXCEPT SET from one to another?](https://discuss.elastic.co/t/how-to-calculate-except-set-from-one-to-another/293244)

<div class="topic-metadata">

**Author:** [@hiteny](https://discuss.elastic.co/u/hiteny)\
**Replies:** 2\
**Last updated:** [December 31, 2021, 11:05am UTC](https://discuss.elastic.co/t/how-to-calculate-except-set-from-one-to-another/293244 "2021-12-31T11:05:31Z")

</div>

I want to get the keys which only appears in bucket2\>metric2 Here is the code : POST testa/\_search?size=0 { "size": 0, "query": { "term": { "create\_date": { "value": "2021-12-25" } } …

---

## [Generating A Certificate From The CA I Made Through Elasticsearch](https://discuss.elastic.co/t/generating-a-certificate-from-the-ca-i-made-through-elasticsearch/293236)

<div class="topic-metadata">

**Author:** [@Jared9922](https://discuss.elastic.co/u/Jared9922)\
**Replies:** 3\
**Last updated:** [January 4, 2022, 2:53am UTC](https://discuss.elastic.co/t/generating-a-certificate-from-the-ca-i-made-through-elasticsearch/293236 "2022-01-04T02:53:10Z")

</div>

Hello, I am about done setting up security going through this tutorial: I am getting stuck here: Send the kibana-server.csr certificate signing request to your internal CA or trusted CA for signing to obtain a signed…

---

## [Can we rename any index?](https://discuss.elastic.co/t/can-we-rename-any-index/293377)

<div class="topic-metadata">

**Author:** [@yash\_196](https://discuss.elastic.co/u/yash_196)\
**Replies:** 3\
**Last updated:** [January 3, 2022, 6:11pm UTC](https://discuss.elastic.co/t/can-we-rename-any-index/293377 "2022-01-03T18:11:46Z")

</div>

Is there any way to rename an index without the need of copying data to another index ?

---

## [Sort on object part that exist](https://discuss.elastic.co/t/sort-on-object-part-that-exist/293354)

<div class="topic-metadata">

**Author:** [@MrDeliK](https://discuss.elastic.co/u/MrDeliK)\
**Replies:** 3\
**Last updated:** [January 3, 2022, 5:18pm UTC](https://discuss.elastic.co/t/sort-on-object-part-that-exist/293354 "2022-01-03T17:18:39Z")

</div>

Hi guys, sorry i have another question but this time concerning the sorting of a request. Considering this mapping { "sample\_data": { "mappings": { "properties": { "title": { …

---

## [Completion Suggester not showing results if value is already in previous field](https://discuss.elastic.co/t/completion-suggester-not-showing-results-if-value-is-already-in-previous-field/293370)

<div class="topic-metadata">

**Author:** [@javaman](https://discuss.elastic.co/u/javaman)\
**Replies:** 0\
**Last updated:** [January 3, 2022, 4:12pm UTC](https://discuss.elastic.co/t/completion-suggester-not-showing-results-if-value-is-already-in-previous-field/293370 "2022-01-03T16:12:13Z")

</div>

I experience a problem with the completion suggester in Elasticsearch 7.9.1 (also present in 6.7) If I have more than one suggest input with the same value for different contexts it will only find a completion for the f…

---

## [Is it worse to have very large documents/indices with a ton of data, or split that data into smaller documents/indices using a relational paradigm?](https://discuss.elastic.co/t/is-it-worse-to-have-very-large-documents-indices-with-a-ton-of-data-or-split-that-data-into-smaller-documents-indices-using-a-relational-paradigm/293284)

<div class="topic-metadata">

**Author:** [@annmarie-switzer](https://discuss.elastic.co/u/annmarie-switzer)\
**Replies:** 1\
**Last updated:** [January 3, 2022, 3:59pm UTC](https://discuss.elastic.co/t/is-it-worse-to-have-very-large-documents-indices-with-a-ton-of-data-or-split-that-data-into-smaller-documents-indices-using-a-relational-paradigm/293284 "2022-01-03T15:59:23Z")

</div>

Say I have a store and each product I sell has a document in Elasticsearch: { id: "abc", name: "mittens", price: "$10.00" }, { id: "def", name: "hat", price: "$13.00" } My store's website allows…

---

## [Search text part in object](https://discuss.elastic.co/t/search-text-part-in-object/293332)

<div class="topic-metadata">

**Author:** [@MrDeliK](https://discuss.elastic.co/u/MrDeliK)\
**Replies:** 3\
**Last updated:** [January 3, 2022, 3:19pm UTC](https://discuss.elastic.co/t/search-text-part-in-object/293332 "2022-01-03T15:19:42Z")

</div>

Hi guys, new here and had some trouble for this basic search. In the database, we have objects containing strings like this. {fr: "french string", en: "english string", nl: "nl string"} for generic purpose (defined in…

---

## [Java API requires GPL code](https://discuss.elastic.co/t/java-api-requires-gpl-code/292936)

<div class="topic-metadata">

**Author:** [@Alain\_Desilets](https://discuss.elastic.co/u/Alain_Desilets)\
**Replies:** 3\
**Last updated:** [January 3, 2022, 2:11pm UTC](https://discuss.elastic.co/t/java-api-requires-gpl-code/292936 "2022-01-03T14:11:28Z")

</div>

I would like to use the new Java API described here: But when I include it in my pom and try to generate a JAR with all dependencies included, licensescan-maven-plugin tells me that there are two GPL dependencies: \[W…

---

## [Making doc \_version searchable](https://discuss.elastic.co/t/making-doc-version-searchable/293198)

<div class="topic-metadata">

**Author:** [@Metalmacher](https://discuss.elastic.co/u/Metalmacher)\
**Replies:** 1\
**Last updated:** [January 3, 2022, 10:34am UTC](https://discuss.elastic.co/t/making-doc-version-searchable/293198 "2022-01-03T10:34:37Z")

</div>

Hello. I would like to query my documents in my index based on their \_version. I have tried a couple of solutions but none of them worked, hopefully you might be able to assist me with this. My attempts are: Executin…

---

## ["Sub-iterators of ConjunctionDISI are not on the same document!" error](https://discuss.elastic.co/t/sub-iterators-of-conjunctiondisi-are-not-on-the-same-document-error/292743)

<div class="topic-metadata">

**Author:** [@bperalta](https://discuss.elastic.co/u/bperalta)\
**Replies:** 1\
**Last updated:** [January 3, 2022, 10:04am UTC](https://discuss.elastic.co/t/sub-iterators-of-conjunctiondisi-are-not-on-the-same-document-error/292743 "2022-01-03T10:04:57Z")

</div>

Using an index containing a nested field, we get the "Sub-iterators of ConjunctionDISI are not on the same document!" error if the search use intervals query and the searched value is empty (after filtering for example). …

---

## [Ideal blocksize for elasticsearch](https://discuss.elastic.co/t/ideal-blocksize-for-elasticsearch/292588)

<div class="topic-metadata">

**Author:** [@pedromgsanches](https://discuss.elastic.co/u/pedromgsanches)\
**Replies:** 2\
**Last updated:** [January 2, 2022, 10:08pm UTC](https://discuss.elastic.co/t/ideal-blocksize-for-elasticsearch/292588 "2022-01-02T22:08:01Z")

</div>

Hi, When configuring storage for Elasticsearch (7.16.2): Do we have any recommended disk Block Size or way to do the math around it? I can't find anything related in documentation. What should I consider? Thanks, B…

---

## [How to specify routing for index transform job](https://discuss.elastic.co/t/how-to-specify-routing-for-index-transform-job/292393)

<div class="topic-metadata">

**Author:** [@Assaf\_Cohen](https://discuss.elastic.co/u/Assaf_Cohen)\
**Replies:** 4\
**Last updated:** [January 2, 2022, 2:45pm UTC](https://discuss.elastic.co/t/how-to-specify-routing-for-index-transform-job/292393 "2022-01-02T14:45:22Z")

</div>

Hello, we have an index transform job, created as below (shortened for the sake of brevity) PUT /\_plugins/\_transform/my\_test\_transform { "transform": { "enabled": true, "schedule": { "interval": { …

---

## [Safely repair (remove/add-back) a data node in cluster](https://discuss.elastic.co/t/safely-repair-remove-add-back-a-data-node-in-cluster/293272)

<div class="topic-metadata">

**Author:** [@David\_Copperfield](https://discuss.elastic.co/u/David_Copperfield)\
**Replies:** 1\
**Last updated:** [January 1, 2022, 5:29pm UTC](https://discuss.elastic.co/t/safely-repair-remove-add-back-a-data-node-in-cluster/293272 "2022-01-01T17:29:47Z")

</div>

we have an Elasticsearch cluster running with a few data nodes. Recently one of the data nodes have some disk issues and we'll fix it. To preserve indexes, I've excluded the faulty data node out from cluster, with curl…

---

## [Elasticsearch-Hadoop Integration Issue: cannot find class definition](https://discuss.elastic.co/t/elasticsearch-hadoop-integration-issue-cannot-find-class-definition/293070)

<div class="topic-metadata">

**Author:** [@scheung3](https://discuss.elastic.co/u/scheung3)\
**Replies:** 7\
**Last updated:** [December 31, 2021, 4:38pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-integration-issue-cannot-find-class-definition/293070 "2021-12-31T16:38:27Z")

</div>

Hi helpful community! I am trying to load data from hive to Elasticsearch through a JDBC driver connection. I was able to execute my create index query and load index query without errors. However, I got java errors abo…

---

## [How to filter two fields based on a list of values](https://discuss.elastic.co/t/how-to-filter-two-fields-based-on-a-list-of-values/292846)

<div class="topic-metadata">

**Author:** [@Muharez](https://discuss.elastic.co/u/Muharez)\
**Replies:** 2\
**Last updated:** [December 31, 2021, 3:03pm UTC](https://discuss.elastic.co/t/how-to-filter-two-fields-based-on-a-list-of-values/292846 "2021-12-31T15:03:34Z")

</div>

Hi there! I have just started learning Elasticsearch. I created an index with four fields that contain information on distances between pairs of postcodes. { "distances" : { "mappings" : { "properties" : {…

---

## [Collecting Elasticsearch monitoring data with Metricbeat in docker deployment](https://discuss.elastic.co/t/collecting-elasticsearch-monitoring-data-with-metricbeat-in-docker-deployment/293246)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 0\
**Last updated:** [December 31, 2021, 9:26am UTC](https://discuss.elastic.co/t/collecting-elasticsearch-monitoring-data-with-metricbeat-in-docker-deployment/293246 "2021-12-31T09:26:43Z")

</div>

What is the best practice to switch from legacy to metricbeat monitoring for clusters deployed in docker.? How should I modify our docker compose file to incorporate metricbeat for internal Elasticsearch monitoring. Is…

---

## [Subsecond precision in Elasticsearch/Opensearch](https://discuss.elastic.co/t/subsecond-precision-in-elasticsearch-opensearch/293215)

<div class="topic-metadata">

**Author:** [@rizvaughan](https://discuss.elastic.co/u/rizvaughan)\
**Replies:** 3\
**Last updated:** [December 31, 2021, 8:08am UTC](https://discuss.elastic.co/t/subsecond-precision-in-elasticsearch-opensearch/293215 "2021-12-31T08:08:38Z")

</div>

Hello all, I had opened a similar issue before to get sub second precision in Elasticsearch. I wasn't able to send logs in epoch millseconds to Elasticsearch which now I have figured out how to do. Now I have two issue…

---

## [Error on installing Elastic Search](https://discuss.elastic.co/t/error-on-installing-elastic-search/293239)

<div class="topic-metadata">

**Author:** [@syahmi](https://discuss.elastic.co/u/syahmi)\
**Replies:** 0\
**Last updated:** [December 31, 2021, 2:56am UTC](https://discuss.elastic.co/t/error-on-installing-elastic-search/293239 "2021-12-31T02:56:15Z")

</div>

Hello, I'm trying to install Elasticsearch on my windows 10 virtual machine. I installed JDK, and already set the environment path. I downloaded the Elasticsearch and run the cli commands for installation as given in th…

---

## [How can we apply ILM to Stack Monitoring indices?](https://discuss.elastic.co/t/how-can-we-apply-ilm-to-stack-monitoring-indices/293231)

<div class="topic-metadata">

**Author:** [@Laurent\_Gauthier](https://discuss.elastic.co/u/Laurent_Gauthier)\
**Replies:** 0\
**Last updated:** [December 30, 2021, 10:20pm UTC](https://discuss.elastic.co/t/how-can-we-apply-ilm-to-stack-monitoring-indices/293231 "2021-12-30T22:20:22Z")

</div>

We are using Stack Monitoring on our Elastic Cloud clusters and this is proving very helpful. However, by default, the Stack Monitoring creates new indexes everyday (.monitoring-\*) and we have not found and easy way to c…

---

## [Indexing Performance drop after a few hours](https://discuss.elastic.co/t/indexing-performance-drop-after-a-few-hours/293223)

<div class="topic-metadata">

**Author:** [@stretchy](https://discuss.elastic.co/u/stretchy)\
**Replies:** 8\
**Last updated:** [December 30, 2021, 9:16pm UTC](https://discuss.elastic.co/t/indexing-performance-drop-after-a-few-hours/293223 "2021-12-30T21:16:19Z")

</div>

Hi, I'm having an issue with the Elasticsearch after a few hours (2-3 hours). There is a massive performance drop (50%-60%) but no symptoms as to why. Setup: Three nodes: 1 master two data nodes Elasticsearch version…

---

## [New header field in my ElasticSearch log dashboard](https://discuss.elastic.co/t/new-header-field-in-my-elasticsearch-log-dashboard/293191)

<div class="topic-metadata">

**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\
**Replies:** 0\
**Last updated:** [December 30, 2021, 9:38am UTC](https://discuss.elastic.co/t/new-header-field-in-my-elasticsearch-log-dashboard/293191 "2021-12-30T09:38:54Z")

</div>

Hello, i describe you the scenario. The system involved are: reverse proxy; elastic; kibana suricata logstash Actually i only see, on the kibana dashboard monitoring, traffic incoming with the reverse proxy ip to th…

---

## [Runtime field just stopped returning a value sometime around 4 AM this morning](https://discuss.elastic.co/t/runtime-field-just-stopped-returning-a-value-sometime-around-4-am-this-morning/293224)

<div class="topic-metadata">

**Author:** [@kossde](https://discuss.elastic.co/u/kossde)\
**Replies:** 3\
**Last updated:** [December 30, 2021, 7:03pm UTC](https://discuss.elastic.co/t/runtime-field-just-stopped-returning-a-value-sometime-around-4-am-this-morning/293224 "2021-12-30T19:03:34Z")

</div>

I created the following runtime field a couple of days ago and it was working fine. This morning, however it just stopped. The field is blank for all log entries that came in after around 4 AM this morning. Any idea…

---

## [How data will be distributed among the data nodes](https://discuss.elastic.co/t/how-data-will-be-distributed-among-the-data-nodes/293099)

<div class="topic-metadata">

**Author:** [@NK2812](https://discuss.elastic.co/u/NK2812)\
**Replies:** 8\
**Last updated:** [December 30, 2021, 5:09pm UTC](https://discuss.elastic.co/t/how-data-will-be-distributed-among-the-data-nodes/293099 "2021-12-30T17:09:23Z")

</div>

Hi, I have cluster with 3 master nodes and 3 data nodes and when I am trying to add the documents/data to cluster it seems only 2 data nodes are used. I have only one index and it is same for all the data nodes. if yo…

---

## [Ability to change self passsword](https://discuss.elastic.co/t/ability-to-change-self-passsword/293086)

<div class="topic-metadata">

**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\
**Replies:** 4\
**Last updated:** [December 30, 2021, 3:51pm UTC](https://discuss.elastic.co/t/ability-to-change-self-passsword/293086 "2021-12-30T15:51:24Z")

</div>

I am setting up file based auth for the users using the below link , however it appears the user is not able to update the password by self. Am i missing anything ?

---

## [Enabling SSL Security between Elasticsearch & Kibana when both are on the same server](https://discuss.elastic.co/t/enabling-ssl-security-between-elasticsearch-kibana-when-both-are-on-the-same-server/293141)

<div class="topic-metadata">

**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\
**Replies:** 5\
**Last updated:** [December 30, 2021, 3:41pm UTC](https://discuss.elastic.co/t/enabling-ssl-security-between-elasticsearch-kibana-when-both-are-on-the-same-server/293141 "2021-12-30T15:41:49Z")

</div>

I am trying to enable security and SSL for my Elastic Stack so that I can't take advantage of the additional functionality and protection that this affords us (e.g. Endpoint Security, Fleet, Integration, etc.) Earlier i…

---

## [Mlcategory -1 in 7.12](https://discuss.elastic.co/t/mlcategory-1-in-7-12/293212)

<div class="topic-metadata">

**Author:** [@evan2424](https://discuss.elastic.co/u/evan2424)\
**Replies:** 1\
**Last updated:** [December 30, 2021, 3:36pm UTC](https://discuss.elastic.co/t/mlcategory-1-in-7-12/293212 "2021-12-30T15:36:32Z")

</div>

We are using Elastic Stack 7.12, and have set up some machine learning jobs. When we visit the Anomaly Explorer for one of these jobs, there is a mlcategory -1 that does not have any category examples. I have tried runni…

---

## [Completion suggester high memory usage](https://discuss.elastic.co/t/completion-suggester-high-memory-usage/293209)

<div class="topic-metadata">

**Author:** [@caseydm](https://discuss.elastic.co/u/caseydm)\
**Replies:** 0\
**Last updated:** [December 30, 2021, 2:26pm UTC](https://discuss.elastic.co/t/completion-suggester-high-memory-usage/293209 "2021-12-30T14:26:51Z")

</div>

I am trying to add autocomplete to a field in Elasticsearch. The dataset is 260 million journal articles and I want to autocomplete based off of the title of the article. However, when I get to around 100 million indexed…

---

## [Hi is there any difference between match\_phrase and match\_phrase\_prefix?](https://discuss.elastic.co/t/hi-is-there-any-difference-between-match-phrase-and-match-phrase-prefix/293009)

<div class="topic-metadata">

**Author:** [@cnwdoug23](https://discuss.elastic.co/u/cnwdoug23)\
**Replies:** 3\
**Last updated:** [December 30, 2021, 12:11pm UTC](https://discuss.elastic.co/t/hi-is-there-any-difference-between-match-phrase-and-match-phrase-prefix/293009 "2021-12-30T12:11:25Z")

</div>

HI is there a difference between using match\_phrase and match\_phrase\_prefix? When do we use one over the other? thanks in advance.

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=516)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=518)
