# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=529

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 530

---

## [Geoshape query with pre-indexed shape and other fields?](https://discuss.elastic.co/t/geoshape-query-with-pre-indexed-shape-and-other-fields/291192)

<div class="topic-metadata">

**Author:** [@GavinBeattie](https://discuss.elastic.co/u/GavinBeattie)\
**Replies:** 0\
**Last updated:** [December 8, 2021, 8:32am UTC](https://discuss.elastic.co/t/geoshape-query-with-pre-indexed-shape-and-other-fields/291192 "2021-12-08T08:32:07Z")

</div>

From the reference guide, it is possible to search geopoints by shapes contained in another index. This has a certain appeal for some analysis that I am trying to do akin to geofencing. I would like to know if it is po…

---

## [Nested Vs. Parent/Child](https://discuss.elastic.co/t/nested-vs-parent-child/291189)

<div class="topic-metadata">

**Author:** [@dev\_test](https://discuss.elastic.co/u/dev_test)\
**Replies:** 0\
**Last updated:** [December 8, 2021, 7:39am UTC](https://discuss.elastic.co/t/nested-vs-parent-child/291189 "2021-12-08T07:39:12Z")

</div>

Hi, i am assigned to work on a people-to-follow suggestion list in a social media app. The list will be based on user contacts, facebook friends, people the user is interacting with, and nearby people according to geo-l…

---

## [Elasticsearch keystore file regenerate](https://discuss.elastic.co/t/elasticsearch-keystore-file-regenerate/291185)

<div class="topic-metadata">

**Author:** [@suvro](https://discuss.elastic.co/u/suvro)\
**Replies:** 2\
**Last updated:** [December 8, 2021, 6:44am UTC](https://discuss.elastic.co/t/elasticsearch-keystore-file-regenerate/291185 "2021-12-08T06:44:55Z")

</div>

is there any way to regenerate Elasticsearch.keystore file? I have deleted it by mistake.

---

## [How to add custom index using ingest node pipeline?](https://discuss.elastic.co/t/how-to-add-custom-index-using-ingest-node-pipeline/291176)

<div class="topic-metadata">

**Author:** [@sidharth\_vijayakumar](https://discuss.elastic.co/u/sidharth_vijayakumar)\
**Replies:** 0\
**Last updated:** [December 8, 2021, 3:25am UTC](https://discuss.elastic.co/t/how-to-add-custom-index-using-ingest-node-pipeline/291176 "2021-12-08T03:25:38Z")

</div>

Is it possible to create conditional indexing by using ingest node pipelines? I feel this could be done by the script processor but can someone tell if this is possible? I am in a scenario where I should decide which is…

---

## [Connecting elastic search through pyspark](https://discuss.elastic.co/t/connecting-elastic-search-through-pyspark/283170)

<div class="topic-metadata">

**Author:** [@Destructord007](https://discuss.elastic.co/u/Destructord007)\
**Replies:** 1\
**Last updated:** [December 7, 2021, 6:56pm UTC](https://discuss.elastic.co/t/connecting-elastic-search-through-pyspark/283170 "2021-12-07T18:56:32Z")

</div>

def main(): es\_read\_conf = { "es.nodes": "ES\_LINK", "es.port": "9200", "es.net.http.auth.user": 'ES\_USERNAME', "es.net.http.auth.pass":'ES\_PASSWORD', } print("ES\_CONF\_START") …

---

## [Writing Spark Dataframe into ElasticSeach- Runs Successfully but Not all Data dumped](https://discuss.elastic.co/t/writing-spark-dataframe-into-elasticseach-runs-successfully-but-not-all-data-dumped/290051)

<div class="topic-metadata">

**Author:** [@Cloud11](https://discuss.elastic.co/u/Cloud11)\
**Replies:** 1\
**Last updated:** [December 7, 2021, 6:38pm UTC](https://discuss.elastic.co/t/writing-spark-dataframe-into-elasticseach-runs-successfully-but-not-all-data-dumped/290051 "2021-12-07T18:38:54Z")

</div>

I am writing data from my spark-dataframe into ES. i did print the schema and the total count of records and it seems all ok until the dump gets started. Job runs successfully and no issue /error raised in spark job but …

---

## [Error GETting document](https://discuss.elastic.co/t/error-getting-document/291143)

<div class="topic-metadata">

**Author:** [@iamtheschmitzer](https://discuss.elastic.co/u/iamtheschmitzer)\
**Replies:** 1\
**Last updated:** [December 7, 2021, 5:54pm UTC](https://discuss.elastic.co/t/error-getting-document/291143 "2021-12-07T17:54:07Z")

</div>

I PUT a document to index foo\_multi\_import\_20211207, and it results in an id of IGzLlX0B4Xv88DkYMDQL Then I GET the document with GET foo\_multi\_import\_20211207/IGzLlX0B4Xv88DkYMDQL, but get the error { "error" : "Inc…

---

## [Watcher condition setup](https://discuss.elastic.co/t/watcher-condition-setup/291151)

<div class="topic-metadata">

**Author:** [@Luis\_P](https://discuss.elastic.co/u/Luis_P)\
**Replies:** 0\
**Last updated:** [December 7, 2021, 5:40pm UTC](https://discuss.elastic.co/t/watcher-condition-setup/291151 "2021-12-07T17:40:06Z")

</div>

Hello, I've been having trouble creating a watcher. My query has a terms aggregation to aggregate by process, this aggregation has a date\_histogram sub-aggregation, which itself has other sub-aggregations for metrics. M…

---

## [ECK and xpack.security.authc.api\_key.enabled with no TLS....workaround or next release?](https://discuss.elastic.co/t/eck-and-xpack-security-authc-api-key-enabled-with-no-tls-workaround-or-next-release/291138)

<div class="topic-metadata">

**Author:** [@trudesea](https://discuss.elastic.co/u/trudesea)\
**Replies:** 0\
**Last updated:** [December 7, 2021, 3:25pm UTC](https://discuss.elastic.co/t/eck-and-xpack-security-authc-api-key-enabled-with-no-tls-workaround-or-next-release/291138 "2021-12-07T15:25:05Z")

</div>

Hi, I realize that this is being worked on, but is there any work around for this? Since I cannot enable the api service, I am unable to add agents to the fleet. If I have to wait until the next release, I assume it w…

---

## [Adding and removing a node fixed our latency issues](https://discuss.elastic.co/t/adding-and-removing-a-node-fixed-our-latency-issues/291059)

<div class="topic-metadata">

**Author:** [@alsyia](https://discuss.elastic.co/u/alsyia)\
**Replies:** 2\
**Last updated:** [December 7, 2021, 2:14pm UTC](https://discuss.elastic.co/t/adding-and-removing-a-node-fixed-our-latency-issues/291059 "2021-12-07T14:14:27Z")

</div>

Dear all, I'm observing a very strange behaviour in my Elasticsearch cluster. It has ~35 nodes and stores dozens of Terabytes of data. We are running ES 5.5.3. We recently recreated all of our warm nodes so that they u…

---

## [Why setting \`inflight\_requests.type\` is not supported?](https://discuss.elastic.co/t/why-setting-inflight-requests-type-is-not-supported/291002)

<div class="topic-metadata">

**Author:** [@ViggoC](https://discuss.elastic.co/u/ViggoC)\
**Replies:** 3\
**Last updated:** [December 7, 2021, 2:00pm UTC](https://discuss.elastic.co/t/why-setting-inflight-requests-type-is-not-supported/291002 "2021-12-07T14:00:05Z")

</div>

I found out that add inflight\_requests.type in elasticsearch.yml is not supported, but request.type is ok. uncaught exception in thread \[main\] java.lang.IllegalArgumentException: unknown setting \[network.breaker.infligh…

---

## [\[7.15.1\] Allow GET \_security/user avoiding permission bloat](https://discuss.elastic.co/t/7-15-1-allow-get-security-user-avoiding-permission-bloat/289064)

<div class="topic-metadata">

**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\
**Replies:** 2\
**Last updated:** [December 7, 2021, 1:57pm UTC](https://discuss.elastic.co/t/7-15-1-allow-get-security-user-avoiding-permission-bloat/289064 "2021-12-07T13:57:25Z")

</div>

Hi there, I'd need to create a role which allows a user to make the following call GET \_security/user in order to list all the users of a cluster. Unfortunately, according to the API doc it seems to need the manage\_s…

---

## [Exact Match Term Query Filter](https://discuss.elastic.co/t/exact-match-term-query-filter/291123)

<div class="topic-metadata">

**Author:** [@Lockhead](https://discuss.elastic.co/u/Lockhead)\
**Replies:** 0\
**Last updated:** [December 7, 2021, 1:29pm UTC](https://discuss.elastic.co/t/exact-match-term-query-filter/291123 "2021-12-07T13:29:09Z")

</div>

I have a Keyword field, which can contain multiple values, is there a way to query only for documents that contain "only" a specific Keyword? Let's imagine I have an Index with the following 4 documents: {"tags": "a"} …

---

## [ILM policiy](https://discuss.elastic.co/t/ilm-policiy/290863)

<div class="topic-metadata">

**Author:** [@mrchile](https://discuss.elastic.co/u/mrchile)\
**Replies:** 2\
**Last updated:** [December 7, 2021, 12:50pm UTC](https://discuss.elastic.co/t/ilm-policiy/290863 "2021-12-07T12:50:47Z")

</div>

I have hot and warm. I want to move indexes that are more than one day old to a warm node. How can I achieve this - what steps should I follow? Logstash writes data to index =\> "name {date}" , not to datastreem

---

## [Rollovers always done on the same node](https://discuss.elastic.co/t/rollovers-always-done-on-the-same-node/291056)

<div class="topic-metadata">

**Author:** [@PEB](https://discuss.elastic.co/u/PEB)\
**Replies:** 2\
**Last updated:** [December 7, 2021, 12:23pm UTC](https://discuss.elastic.co/t/rollovers-always-done-on-the-same-node/291056 "2021-12-07T12:23:22Z")

</div>

Hi, I'm working on a small 7.15 cluster (8 data nodes named data-node-X), and for some time, I've observed an abnormal behaviour I can't find the origin of. Indeed, all new rollovers of major indexes (ILM managed) are …

---

## [Elasticstac 40min Data dealy](https://discuss.elastic.co/t/elasticstac-40min-data-dealy/291040)

<div class="topic-metadata">

**Author:** [@HannoKuegler](https://discuss.elastic.co/u/HannoKuegler)\
**Replies:** 4\
**Last updated:** [December 7, 2021, 10:23am UTC](https://discuss.elastic.co/t/elasticstac-40min-data-dealy/291040 "2021-12-07T10:23:23Z")

</div>

Hey there, We have currently running a Netflow setup with Elasticsearch. Data is collected on the Netflow router. Unfortunately it pops up at the Kibana dashboards 40 min later. What could be the Problem there? I'm lo…

---

## [How to Build a Role with Java API for indices privileges](https://discuss.elastic.co/t/how-to-build-a-role-with-java-api-for-indices-privileges/290974)

<div class="topic-metadata">

**Author:** [@David\_Sheard](https://discuss.elastic.co/u/David_Sheard)\
**Replies:** 5\
**Last updated:** [December 7, 2021, 9:43am UTC](https://discuss.elastic.co/t/how-to-build-a-role-with-java-api-for-indices-privileges/290974 "2021-12-07T09:43:00Z")

</div>

Hi, I'm trying tp create an Indices Role using the Java API. Such as below: Role role = Role.builder() .name("testPutRole") .indicesPrivileges(???) .build(); The example in the doco shows it for a…

---

## [About QueryContainerDescriptor function](https://discuss.elastic.co/t/about-querycontainerdescriptor-function/291103)

<div class="topic-metadata">

**Author:** [@Suki\_Yua](https://discuss.elastic.co/u/Suki_Yua)\
**Replies:** 0\
**Last updated:** [December 7, 2021, 9:22am UTC](https://discuss.elastic.co/t/about-querycontainerdescriptor-function/291103 "2021-12-07T09:22:42Z")

</div>

Hi I have a search document as below { "total": 1, "results": \[ { "id": 1346282, "studentname": "Casey", "studentnumber" :"YT2021" "favourbooks": \[ { "id": 1, …

---

## [Junit test for High level rest client query](https://discuss.elastic.co/t/junit-test-for-high-level-rest-client-query/291099)

<div class="topic-metadata">

**Author:** [@111505](https://discuss.elastic.co/u/111505)\
**Replies:** 0\
**Last updated:** [December 7, 2021, 7:58am UTC](https://discuss.elastic.co/t/junit-test-for-high-level-rest-client-query/291099 "2021-12-07T07:58:56Z")

</div>

Hello. I want to test Elasticsearch query in java Junit. It seems to be possible to use a test container, but the Elasticsearch documentation does not seem to provide it officially. doc: https://www.elastic.co/guide/e…

---

## [Elasticsearch rescore plugin how to get query object from context?](https://discuss.elastic.co/t/elasticsearch-rescore-plugin-how-to-get-query-object-from-context/291094)

<div class="topic-metadata">

**Author:** [@oni7uka](https://discuss.elastic.co/u/oni7uka)\
**Replies:** 0\
**Last updated:** [December 7, 2021, 6:44am UTC](https://discuss.elastic.co/t/elasticsearch-rescore-plugin-how-to-get-query-object-from-context/291094 "2021-12-07T06:44:32Z")

</div>

I want to write a custom Elasticsearch rescore plugin, Similar to using Levenshtein algorithm to calculate the similarity between the original query string and the query result. But how do I get the query object? It seem…

---

## [Single word suggester or autocomplete single word](https://discuss.elastic.co/t/single-word-suggester-or-autocomplete-single-word/290754)

<div class="topic-metadata">

**Author:** [@pranjali\_dhumal](https://discuss.elastic.co/u/pranjali_dhumal)\
**Replies:** 8\
**Last updated:** [December 7, 2021, 6:27am UTC](https://discuss.elastic.co/t/single-word-suggester-or-autocomplete-single-word/290754 "2021-12-07T06:27:20Z")

</div>

Hello Everyone, Problem: Lets consider I have a index for books And I have following book documents with name "Manage your time" "Improvement management skills" "The making of manager" "How to manage people" "Man…

---

## [Search\_phase\_execution\_error with script\_Score n cosine similarity ES 7.15.2](https://discuss.elastic.co/t/search-phase-execution-error-with-script-score-n-cosine-similarity-es-7-15-2/291068)

<div class="topic-metadata">

**Author:** [@Nikkie](https://discuss.elastic.co/u/Nikkie)\
**Replies:** 0\
**Last updated:** [December 6, 2021, 3:53pm UTC](https://discuss.elastic.co/t/search-phase-execution-error-with-script-score-n-cosine-similarity-es-7-15-2/291068 "2021-12-06T15:53:11Z")

</div>

Greetings! I had started with my Elasticsearch journey with 7.10.1 and could successfully run script\_score queries with cosine\_similarity earlier. But now when I am using 7.15 I get stuck with this error "Elasticsearch.e…

---

## [Zendesk to elastic](https://discuss.elastic.co/t/zendesk-to-elastic/291026)

<div class="topic-metadata">

**Author:** [@travlest](https://discuss.elastic.co/u/travlest)\
**Replies:** 1\
**Last updated:** [December 6, 2021, 9:59pm UTC](https://discuss.elastic.co/t/zendesk-to-elastic/291026 "2021-12-06T21:59:17Z")

</div>

Hi, is there any documentation on how to send data from zendesk to elastic? what I mean is, I want to display every ticket that has been closed/open from zendesk into kibana. thank you

---

## [Fast copy indexes between two deployments](https://discuss.elastic.co/t/fast-copy-indexes-between-two-deployments/291051)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 1\
**Last updated:** [December 6, 2021, 9:58pm UTC](https://discuss.elastic.co/t/fast-copy-indexes-between-two-deployments/291051 "2021-12-06T21:58:22Z")

</div>

Hi I've tried to copy in the fast way indexes (of count 25 per ~40GB each of them) I see that copy it over elasticdump it goes too very slow. How can I increase performance??? another thing is how to use a wildcard f…

---

## [Elastic access via PHP](https://discuss.elastic.co/t/elastic-access-via-php/291083)

<div class="topic-metadata">

**Author:** [@Franke2u](https://discuss.elastic.co/u/Franke2u)\
**Replies:** 0\
**Last updated:** [December 6, 2021, 8:53pm UTC](https://discuss.elastic.co/t/elastic-access-via-php/291083 "2021-12-06T20:53:38Z")

</div>

Using PHP I can search and find data using the below command: $obj = $client-\>search($params); I add data using Logstash. But unable to use other commands like get and update: $obj = $client-\>get($params2); $obj = $…

---

## [Search\_after performance compared to querying with \_search](https://discuss.elastic.co/t/search-after-performance-compared-to-querying-with-search/291080)

<div class="topic-metadata">

**Author:** [@Praveen\_Balaji](https://discuss.elastic.co/u/Praveen_Balaji)\
**Replies:** 0\
**Last updated:** [December 6, 2021, 8:24pm UTC](https://discuss.elastic.co/t/search-after-performance-compared-to-querying-with-search/291080 "2021-12-06T20:24:39Z")

</div>

Our code switches over to search\_after past a threshold (10\_000). I'm considering switching to using search\_after always, irrespective of the size. Is there a loss in performance between plain search and search\_after? P…

---

## [org.elasticsearch.ElasticsearchStatusException: Unable to parse response body](https://discuss.elastic.co/t/org-elasticsearch-elasticsearchstatusexception-unable-to-parse-response-body/291075)

<div class="topic-metadata">

**Author:** [@ksmamta](https://discuss.elastic.co/u/ksmamta)\
**Replies:** 0\
**Last updated:** [December 6, 2021, 6:07pm UTC](https://discuss.elastic.co/t/org-elasticsearch-elasticsearchstatusexception-unable-to-parse-response-body/291075 "2021-12-06T18:07:02Z")

</div>

Hi, Facing the below error quite frequently with Rest High level client. version of rest client and Elasticsearch jar is 7.3.2 and ES cluster version is 7.5.2. Any clue to find the root cause? why this error comes? o…

---

## [How to set network.host to listen to IPv6 as well?](https://discuss.elastic.co/t/how-to-set-network-host-to-listen-to-ipv6-as-well/290923)

<div class="topic-metadata">

**Author:** [@houmie](https://discuss.elastic.co/u/houmie)\
**Replies:** 3\
**Last updated:** [December 6, 2021, 3:59pm UTC](https://discuss.elastic.co/t/how-to-set-network-host-to-listen-to-ipv6-as-well/290923 "2021-12-06T15:59:53Z")

</div>

Hello, After struggling for hours why Filebeat can't connect to ES, I realised that this setting in elasticsearch.yaml is the culprit. It is only listening to IPv4 and not IPv6. network.host: 0.0.0.0 I tried many d…

---

## [How to know which GeoPoint is hit while sorting on GeoPoint field containing multiple points](https://discuss.elastic.co/t/how-to-know-which-geopoint-is-hit-while-sorting-on-geopoint-field-containing-multiple-points/291052)

<div class="topic-metadata">

**Author:** [@Asif\_Mahmood](https://discuss.elastic.co/u/Asif_Mahmood)\
**Replies:** 0\
**Last updated:** [December 6, 2021, 2:08pm UTC](https://discuss.elastic.co/t/how-to-know-which-geopoint-is-hit-while-sorting-on-geopoint-field-containing-multiple-points/291052 "2021-12-06T14:08:14Z")

</div>

HI, I am new at using Elasticsearch. I have an index which has the GeoPoint field "Location" and each document can contains multiple points which are stored in GeoPoint field as array. Now, when I sort on the basis of t…

---

## [Prometheus queries fail if a source only snapshot was restored](https://discuss.elastic.co/t/prometheus-queries-fail-if-a-source-only-snapshot-was-restored/291046)

<div class="topic-metadata">

**Author:** [@str8y](https://discuss.elastic.co/u/str8y)\
**Replies:** 0\
**Last updated:** [December 6, 2021, 1:30pm UTC](https://discuss.elastic.co/t/prometheus-queries-fail-if-a-source-only-snapshot-was-restored/291046 "2021-12-06T13:30:00Z")

</div>

As part of our backup strategy, we are using source only repos and snapshots. As soon as such a snapshot is restored, the prometheus queries fail. Is there any chance to filter / skip these indices for the metrics? \[2…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=528)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=530)
