# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=544 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 545 --- ## [A way better than rollup and transform](https://discuss.elastic.co/t/a-way-better-than-rollup-and-transform/288747)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 1\ **Last updated:** [November 10, 2021, 6:50am UTC](https://discuss.elastic.co/t/a-way-better-than-rollup-and-transform/288747 "2021-11-10T06:50:29Z")
Hi there, Thanks a lot for your great and wonderful support team! At first step we use rollup jobs for create hourly and daily aggregation of our data, but rollup indices dont support ILM! unfortunately. At second st… --- ## [Curator is running but not deleting any index in elastic search and not printing any logs](https://discuss.elastic.co/t/curator-is-running-but-not-deleting-any-index-in-elastic-search-and-not-printing-any-logs/288800)
**Author:** [@Kumar\_Reddy](https://discuss.elastic.co/u/Kumar_Reddy)\ **Replies:** 3\ **Last updated:** [November 10, 2021, 4:00am UTC](https://discuss.elastic.co/t/curator-is-running-but-not-deleting-any-index-in-elastic-search-and-not-printing-any-logs/288800 "2021-11-10T04:00:04Z")
Hi, I am using docker-compose to run Elasticsearch with curator. Elasticsearch is working fine but curator is running but not deleting any index and not printing any logs. This is my docker-compose yml file :- version… --- ## [CPU at 100% with XPACK security Enabled - ES 7.9.0](https://discuss.elastic.co/t/cpu-at-100-with-xpack-security-enabled-es-7-9-0/288820)
**Author:** [@ilavajuthy](https://discuss.elastic.co/u/ilavajuthy)\ **Replies:** 2\ **Last updated:** [November 9, 2021, 11:29pm UTC](https://discuss.elastic.co/t/cpu-at-100-with-xpack-security-enabled-es-7-9-0/288820 "2021-11-09T23:29:11Z")
Hi, We are noticing high CPU after upgrading to 7.9.0 with XPACK security. Earlier we had 6.8.7 version without XPACK auth. We are using ECK deployment. I see few posts on this issue, but none of the topic has resoluti… --- ## [Elasticsearch return empty list of objects to spark](https://discuss.elastic.co/t/elasticsearch-return-empty-list-of-objects-to-spark/288052)
**Author:** [@mohsen\_mortezapour](https://discuss.elastic.co/u/mohsen_mortezapour)\ **Replies:** 1\ **Last updated:** [November 9, 2021, 10:58pm UTC](https://discuss.elastic.co/t/elasticsearch-return-empty-list-of-objects-to-spark/288052 "2021-11-09T22:58:29Z")
I have a problem with Elasticsearch . I want to read data from Elasticsearch index with Pyspark . my data look like as below: user\_id: 123, features: { hashtags: \[ { text: "hello", c… --- ## [OIDC token\_type issue, Token type must be Bearer](https://discuss.elastic.co/t/oidc-token-type-issue-token-type-must-be-bearer/288655)
**Author:** [@ibrooes](https://discuss.elastic.co/u/ibrooes)\ **Replies:** 2\ **Last updated:** [November 9, 2021, 10:31pm UTC](https://discuss.elastic.co/t/oidc-token-type-issue-token-type-must-be-bearer/288655 "2021-11-09T22:31:34Z")
Hi, I am trying to setup OIDC Authentication. Open ID Connect Provider I am using sends id\_token, access token, etc. All tokens are JWT. The issue I am facing is token\_type field sent from Open ID Connect provider. The v… --- ## [Elasticsearch Storage Distribution](https://discuss.elastic.co/t/elasticsearch-storage-distribution/288774)
**Author:** [@gutierrezfj](https://discuss.elastic.co/u/gutierrezfj)\ **Replies:** 1\ **Last updated:** [November 9, 2021, 9:34pm UTC](https://discuss.elastic.co/t/elasticsearch-storage-distribution/288774 "2021-11-09T21:34:01Z")
Hi dear community, a doubt: for a small cluster: is it better to centralize the data of all nodes in a single storage unit or file system? Or is it better for each node on a dedicated host to store its own data? Tha… --- ## [Cross cluster replication Data streams](https://discuss.elastic.co/t/cross-cluster-replication-data-streams/288803)
**Author:** [@iasenzaniro](https://discuss.elastic.co/u/iasenzaniro)\ **Replies:** 0\ **Last updated:** [November 9, 2021, 5:41pm UTC](https://discuss.elastic.co/t/cross-cluster-replication-data-streams/288803 "2021-11-09T17:41:12Z")
Hi, here is the environment i am working with. Local cluster : running elastic stack. My local cluster is connected to the remote cluster. Remote cluster: vm running elk stack in aws cloud. This a single node cluster w… --- ## [How to handle this error](https://discuss.elastic.co/t/how-to-handle-this-error/288726)
**Author:** [@Mahrukh\_Malik](https://discuss.elastic.co/u/Mahrukh_Malik)\ **Replies:** 1\ **Last updated:** [November 9, 2021, 9:08pm UTC](https://discuss.elastic.co/t/how-to-handle-this-error/288726 "2021-11-09T21:08:01Z")
elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Tue 2021-11-09 13:38:12 PKT; 11s ago … --- ## [How to loop through nested field in painless script](https://discuss.elastic.co/t/how-to-loop-through-nested-field-in-painless-script/288695)
**Author:** [@Agnivesh\_Sharma](https://discuss.elastic.co/u/Agnivesh_Sharma)\ **Replies:** 1\ **Last updated:** [November 9, 2021, 8:44pm UTC](https://discuss.elastic.co/t/how-to-loop-through-nested-field-in-painless-script/288695 "2021-11-09T20:44:01Z")
I have following nested type mapping: "visitor\_data": { "type": "nested", "dynamic": "false", "properties": { "checkin\_time": { "type": "date", … --- ## ["Too small maximum heap"](https://discuss.elastic.co/t/too-small-maximum-heap/288816)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 2\ **Last updated:** [November 9, 2021, 7:53pm UTC](https://discuss.elastic.co/t/too-small-maximum-heap/288816 "2021-11-09T19:53:42Z")
I have installed 7.14 on a new machine running ubuntu 18.04. This machine has 48 GB of memory and is identical to another machine that I am currently running ES 7.14 on. The Elasticsearch.yml is identical and jvm.opti… --- ## [Unexpected file read error while reading index](https://discuss.elastic.co/t/unexpected-file-read-error-while-reading-index/288795)
**Author:** [@tropically](https://discuss.elastic.co/u/tropically)\ **Replies:** 2\ **Last updated:** [November 9, 2021, 7:23pm UTC](https://discuss.elastic.co/t/unexpected-file-read-error-while-reading-index/288795 "2021-11-09T19:23:58Z")
Hi We are running elastisearch on Openshift. Currently there are 3 nodes configured. We received the below error on one of the 3 nodes that we have : ElasticsearchException\[failed to load metadata\]; nested: CorruptI… --- ## [How elasticsearch index Geo-points?](https://discuss.elastic.co/t/how-elasticsearch-index-geo-points/288813)
**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\ **Replies:** 0\ **Last updated:** [November 9, 2021, 7:19pm UTC](https://discuss.elastic.co/t/how-elasticsearch-index-geo-points/288813 "2021-11-09T19:19:31Z")
I can't imagine how Elasteicsearch index Geo-points. Suppose I have 1 million records/documents in my table/index and each document has a geo point (Lat/Lon). In sql , if I want to find the 10 nearest docs, I need to … --- ## [\_update\_by\_query with substring](https://discuss.elastic.co/t/update-by-query-with-substring/288777)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 3\ **Last updated:** [November 9, 2021, 6:45pm UTC](https://discuss.elastic.co/t/update-by-query-with-substring/288777 "2021-11-09T18:45:12Z")
Hi I wand to update specific fields with its substring value MSISDN: "444123456" replace with MSISDN: "123456" is there a way how to write update query ? What is the best way to do such thing. thank you P POST t… --- ## [Generate Series of Days with ElasticSearch](https://discuss.elastic.co/t/generate-series-of-days-with-elasticsearch/288804)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 0\ **Last updated:** [November 9, 2021, 5:47pm UTC](https://discuss.elastic.co/t/generate-series-of-days-with-elasticsearch/288804 "2021-11-09T17:47:40Z")
With PostgreSQL I can use the generate\_series feature to generate a list of days between two dates, and with a little effort, even generate a list of sales made by day within that range, even if there are no sales for th… --- ## [Elasticsearch Mapping field for Multiple languages Search](https://discuss.elastic.co/t/elasticsearch-mapping-field-for-multiple-languages-search/288762)
**Author:** [@faizan.gulzar](https://discuss.elastic.co/u/faizan.gulzar)\ **Replies:** 1\ **Last updated:** [November 9, 2021, 5:09pm UTC](https://discuss.elastic.co/t/elasticsearch-mapping-field-for-multiple-languages-search/288762 "2021-11-09T17:09:00Z")
We are using Elasticsearch (Version 2.3.1) to Search on our website. Company Names are different in different languages like English, German, Polisch, Turkish, etc. When we search Company Name using English characters, … --- ## [Elastic search with Springboot connection error](https://discuss.elastic.co/t/elastic-search-with-springboot-connection-error/288789)
**Author:** [@adeybabs](https://discuss.elastic.co/u/adeybabs)\ **Replies:** 1\ **Last updated:** [November 9, 2021, 5:03pm UTC](https://discuss.elastic.co/t/elastic-search-with-springboot-connection-error/288789 "2021-11-09T17:03:11Z")
I keep getting this error when I try to load my spring application connected to Elasticsearch --- ## [Index data as nested and flattened to improve aggregation performance?](https://discuss.elastic.co/t/index-data-as-nested-and-flattened-to-improve-aggregation-performance/288799)
**Author:** [@caseydm](https://discuss.elastic.co/u/caseydm)\ **Replies:** 0\ **Last updated:** [November 9, 2021, 4:51pm UTC](https://discuss.elastic.co/t/index-data-as-nested-and-flattened-to-improve-aggregation-performance/288799 "2021-11-09T16:51:39Z")
I am indexing academic papers that have a list of authors. Right now, I index the authors as a nested field type, because we want to query within the list, such as author\_sequence\_number: 1 and author\_display\_name: torre… --- ## [Can't enroll agent to fleet: (Fail to enroll: fail to execute request to fleet-server)](https://discuss.elastic.co/t/cant-enroll-agent-to-fleet-fail-to-enroll-fail-to-execute-request-to-fleet-server/285682)
**Author:** [@John9](https://discuss.elastic.co/u/John9)\ **Replies:** 4\ **Last updated:** [November 9, 2021, 4:29pm UTC](https://discuss.elastic.co/t/cant-enroll-agent-to-fleet-fail-to-enroll-fail-to-execute-request-to-fleet-server/285682 "2021-11-09T16:29:34Z")
Hello, I've been trying to setup a testing ELK stack environment for learning purposes. I am running: VM1 = Ubuntu Server 20.04 running Elasticsearch / Kibana with IP 172.16.0.27. Minimal Security is on. VM2 = Ubuntu … --- ## [TypeScript + elasticSearch search has\_child filter](https://discuss.elastic.co/t/typescript-elasticsearch-search-has-child-filter/288775)
**Author:** [@Francisco\_Ferreira](https://discuss.elastic.co/u/Francisco_Ferreira)\ **Replies:** 1\ **Last updated:** [November 9, 2021, 3:01pm UTC](https://discuss.elastic.co/t/typescript-elasticsearch-search-has-child-filter/288775 "2021-11-09T15:01:47Z")
Hey guys, i'm been building a search endpoint to my api. and when i try to filter the ''has\_child'' query with a match\\term query it returns me all the employees that have childs or none at all here i have the way i'm i… --- ## [ELK Licencing question](https://discuss.elastic.co/t/elk-licencing-question/288681)
**Author:** [@Eduard\_Abril](https://discuss.elastic.co/u/Eduard_Abril)\ **Replies:** 4\ **Last updated:** [November 9, 2021, 2:44pm UTC](https://discuss.elastic.co/t/elk-licencing-question/288681 "2021-11-09T14:44:39Z")
Hello guys, We are planning to deploy an ELK architecture with enterprise features, our though is to deploy 9 Elasticsearch nodes with different roles, 1 kibana node and 2 logstash nodes, my question is How many nodes d… --- ## [Elastisearch snapshots error - Can not find an azure client for account](https://discuss.elastic.co/t/elastisearch-snapshots-error-can-not-find-an-azure-client-for-account/288754)
**Author:** [@Cian](https://discuss.elastic.co/u/Cian)\ **Replies:** 0\ **Last updated:** [November 9, 2021, 11:57am UTC](https://discuss.elastic.co/t/elastisearch-snapshots-error-can-not-find-an-azure-client-for-account/288754 "2021-11-09T11:57:57Z")
Hi Elasticsearch, I want to update the Azure storage account that we upload snapshots to but I get the below error: "Can not find an azure client for account \[null\]\]" this is only happening when I change the storage ac… --- ## [Unable to retrieve version information from Elasticsearch node](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-node/288717)
**Author:** [@slashlinux](https://discuss.elastic.co/u/slashlinux)\ **Replies:** 1\ **Last updated:** [November 9, 2021, 1:39pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-node/288717 "2021-11-09T13:39:33Z")
After I've enabled the xpack security for integrating the Keycloak SSO on Kibana/Elasticsearch, now my kibana says - Kibana server is not ready yet and the kibana logs showing :slight\_smile: {"type":"log","@timestamp":"… --- ## [Is searches faster with more match queries?](https://discuss.elastic.co/t/is-searches-faster-with-more-match-queries/287867)
**Author:** [@MinwooKim](https://discuss.elastic.co/u/MinwooKim)\ **Replies:** 3\ **Last updated:** [November 9, 2021, 1:06pm UTC](https://discuss.elastic.co/t/is-searches-faster-with-more-match-queries/287867 "2021-11-09T13:06:37Z")
I have two queries. And in the index all of the data have collectHour as 10. if I request both queries, the one with more match statements was faster.... I am curious, if all fields are inspected as columns that are in… --- ## [ElasticSearch \_bulk and \_update got bad performance](https://discuss.elastic.co/t/elasticsearch-bulk-and-update-got-bad-performance/288746)
**Author:** [@Hunter\_Tr\_n](https://discuss.elastic.co/u/Hunter_Tr_n)\ **Replies:** 1\ **Last updated:** [November 9, 2021, 11:41am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-and-update-got-bad-performance/288746 "2021-11-09T11:41:04Z")
I'm using \_bulk request and updating documents by doc. However, some complex cases need to apply script for updating. However, the performance in case script is very bad. It affects search side and index side latency. I… --- ## [Coordinate converting issue!](https://discuss.elastic.co/t/coordinate-converting-issue/288733)
**Author:** [@FURKAN\_KURT](https://discuss.elastic.co/u/FURKAN_KURT)\ **Replies:** 0\ **Last updated:** [November 9, 2021, 9:26am UTC](https://discuss.elastic.co/t/coordinate-converting-issue/288733 "2021-11-09T09:26:56Z")
Hello. I am stuck in this issue for days. I send the bounding box and get this response: { "took": 2, "timed\_out": false, "\_shards": { "total": 5, "successful": 5, "skipped": 0, "failed": 0 }, … --- ## [Is an issue with AD](https://discuss.elastic.co/t/is-an-issue-with-ad/288558)
**Author:** [@tbs575](https://discuss.elastic.co/u/tbs575)\ **Replies:** 2\ **Last updated:** [November 9, 2021, 9:10am UTC](https://discuss.elastic.co/t/is-an-issue-with-ad/288558 "2021-11-09T09:10:26Z")
set Elasticsearch 7.15 using Windows AD to verify account, and mapping AD group into xinc\_user role, and it is working, but now I met problem, not sure if it is issue. login with AD account by kibana check account pr… --- ## [Is there any way to change the precision\_threshold when use es-sql?](https://discuss.elastic.co/t/is-there-any-way-to-change-the-precision-threshold-when-use-es-sql/288729)
**Author:** [@danielduan](https://discuss.elastic.co/u/danielduan)\ **Replies:** 0\ **Last updated:** [November 9, 2021, 9:08am UTC](https://discuss.elastic.co/t/is-there-any-way-to-change-the-precision-threshold-when-use-es-sql/288729 "2021-11-09T09:08:09Z")
We know that when use es api we can setting the value of precision\_threshold , is there any way to overwrite the default value when use es-sql? if the answer is no , could you please tell us how to modify the default v… --- ## [\_bulk request with routing parameter](https://discuss.elastic.co/t/bulk-request-with-routing-parameter/288723)
**Author:** [@Hunter\_Tr\_n](https://discuss.elastic.co/u/Hunter_Tr_n)\ **Replies:** 2\ **Last updated:** [November 9, 2021, 9:00am UTC](https://discuss.elastic.co/t/bulk-request-with-routing-parameter/288723 "2021-11-09T09:00:01Z")
Currently, I am applying \_bulk requests for reindexing. Each \_bulk request contains a ton of reindex requests ( creating, updating, or deleting). Each document already has its own routing. I wonder if I apply routing on… --- ## [Elasticsearch can't restart and join the cluster](https://discuss.elastic.co/t/elasticsearch-cant-restart-and-join-the-cluster/288630)
**Author:** [@songfj](https://discuss.elastic.co/u/songfj)\ **Replies:** 3\ **Last updated:** [November 9, 2021, 8:22am UTC](https://discuss.elastic.co/t/elasticsearch-cant-restart-and-join-the-cluster/288630 "2021-11-09T08:22:02Z")
Hello everyone, when I restart one node from Elasticsearch cluster, the node can't join cluster,I 'm sure I have config the security.I can't start my node, when I start it , my kibana can't login in with my old username … --- ## [ML: difference between partition\_field\_name and by\_field\_name in a population job?](https://discuss.elastic.co/t/ml-difference-between-partition-field-name-and-by-field-name-in-a-population-job/287792)
**Author:** [@shabnam](https://discuss.elastic.co/u/shabnam)\ **Replies:** 8\ **Last updated:** [November 9, 2021, 7:29am UTC](https://discuss.elastic.co/t/ml-difference-between-partition-field-name-and-by-field-name-in-a-population-job/287792 "2021-11-09T07:29:35Z")
Hi, I want to know the difference of this two ml advance jobs: a. func(x), by\_field(y), over\_field(z), partition\_field(-) b. func(x), by\_field(-), over\_field(z), partition\_field(y) , two tests performed: I created… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=543) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=545)