# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=571

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 572

---

## [Date histogram with different Timezones with Elasticsearch v.7.13.3](https://discuss.elastic.co/t/date-histogram-with-different-timezones-with-elasticsearch-v-7-13-3/280639)

<div class="topic-metadata">

**Author:** [@scorona85](https://discuss.elastic.co/u/scorona85)\
**Replies:** 9\
**Last updated:** [September 22, 2021, 5:09am UTC](https://discuss.elastic.co/t/date-histogram-with-different-timezones-with-elasticsearch-v-7-13-3/280639 "2021-09-22T05:09:33Z")

</div>

I have to acquire datas from different part of Timezones (example New York -6.00 and Rome +2.00). In the document I have a field 'timestamp' defined as "data" and I have for example create a "date\_histogram" for example …

---

## [Vm.max\_map\_count can we have any workaround without setting this value](https://discuss.elastic.co/t/vm-max-map-count-can-we-have-any-workaround-without-setting-this-value/284798)

<div class="topic-metadata">

**Author:** [@Sammeta\_David\_Raju](https://discuss.elastic.co/u/Sammeta_David_Raju)\
**Replies:** 2\
**Last updated:** [September 22, 2021, 4:46am UTC](https://discuss.elastic.co/t/vm-max-map-count-can-we-have-any-workaround-without-setting-this-value/284798 "2021-09-22T04:46:48Z")

</div>

Hi , I am using fargate and Elasticsearch version as 7.3.2 can i have any workaround to bypass vm.max\_map\_count issue \[65530\] is too low increase to atleast \[262144\] 1.Fargate environment is mandatory .we cannot switc…

---

## [Cannot download older versions of elastic?](https://discuss.elastic.co/t/cannot-download-older-versions-of-elastic/284787)

<div class="topic-metadata">

**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\
**Replies:** 1\
**Last updated:** [September 22, 2021, 2:05am UTC](https://discuss.elastic.co/t/cannot-download-older-versions-of-elastic/284787 "2021-09-22T02:05:09Z")

</div>

I'm trying to download an older version of Elasticsearch here: https://www.elastic.co/downloads/past-releases/elasticsearch-7-10-0 But it's not working, instead throwing a 504 timeout. Is there another way to download …

---

## [What is the difference between boost and weight](https://discuss.elastic.co/t/what-is-the-difference-between-boost-and-weight/284714)

<div class="topic-metadata">

**Author:** [@Deepti](https://discuss.elastic.co/u/Deepti)\
**Replies:** 5\
**Last updated:** [September 22, 2021, 1:54am UTC](https://discuss.elastic.co/t/what-is-the-difference-between-boost-and-weight/284714 "2021-09-22T01:54:08Z")

</div>

Boost parameter is used in the below example wildcard": { "City": { "wildcard": "M", "boost": 10 } Can I use similar query for weight?

---

## [How to make doc which has more different words score higher?](https://discuss.elastic.co/t/how-to-make-doc-which-has-more-different-words-score-higher/284546)

<div class="topic-metadata">

**Author:** [@Bowen\_Liu](https://discuss.elastic.co/u/Bowen_Liu)\
**Replies:** 1\
**Last updated:** [September 22, 2021, 12:58am UTC](https://discuss.elastic.co/t/how-to-make-doc-which-has-more-different-words-score-higher/284546 "2021-09-22T00:58:39Z")

</div>

Hi everyone, I have a problem about scoring in es. The thing is that I use multi\_match to do full text search in muti-fields and use the type "best\_fields", say, user\_name, biz\_type, account\_name, content... When I use,…

---

## [Extracting values from text messages and summing them in real time queries](https://discuss.elastic.co/t/extracting-values-from-text-messages-and-summing-them-in-real-time-queries/284699)

<div class="topic-metadata">

**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\
**Replies:** 0\
**Last updated:** [September 21, 2021, 10:06am UTC](https://discuss.elastic.co/t/extracting-values-from-text-messages-and-summing-them-in-real-time-queries/284699 "2021-09-21T10:06:36Z")

</div>

Hi, I have event description fields that look this way: "User1 have executed 3 actions" "User2 have executed 5 actions" .... And then many unnstructured message descriptions around. I'm trying to select only mess…

---

## [Nest path is not nested, but definition says it is](https://discuss.elastic.co/t/nest-path-is-not-nested-but-definition-says-it-is/284775)

<div class="topic-metadata">

**Author:** [@James.Gray](https://discuss.elastic.co/u/James.Gray)\
**Replies:** 0\
**Last updated:** [September 21, 2021, 11:05pm UTC](https://discuss.elastic.co/t/nest-path-is-not-nested-but-definition-says-it-is/284775 "2021-09-21T23:05:32Z")

</div>

I'm getting an aggregation\_execution\_exception from a query with elasticsearch server 7.x with a reason of: \[nested\] nested path \[productCategories\] is not nested. The equivalent code previously worked in server 5.5.1 wi…

---

## [Check version of Nest?](https://discuss.elastic.co/t/check-version-of-nest/284776)

<div class="topic-metadata">

**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\
**Replies:** 0\
**Last updated:** [September 21, 2021, 11:06pm UTC](https://discuss.elastic.co/t/check-version-of-nest/284776 "2021-09-21T23:06:40Z")

</div>

I'd like to check was version of the Nest client I am using, and if possible, downgrade it to version 7.13. Is this possible?

---

## [Directly query ES cluster through .NET without using Client?](https://discuss.elastic.co/t/directly-query-es-cluster-through-net-without-using-client/284772)

<div class="topic-metadata">

**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\
**Replies:** 1\
**Last updated:** [September 21, 2021, 10:42pm UTC](https://discuss.elastic.co/t/directly-query-es-cluster-through-net-without-using-client/284772 "2021-09-21T22:42:35Z")

</div>

I'm trying to run some ElasticSearch queries from my C# code. Is it possible to do this without the low-level or high-level clients?

---

## [Downgrade ElasticSearch Nest version?](https://discuss.elastic.co/t/downgrade-elasticsearch-nest-version/284771)

<div class="topic-metadata">

**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\
**Replies:** 1\
**Last updated:** [September 21, 2021, 10:22pm UTC](https://discuss.elastic.co/t/downgrade-elasticsearch-nest-version/284771 "2021-09-21T22:22:53Z")

</div>

I am currently using the Nest client that comes with ElasticSearch. My ES version is 7.14.1. I would like to downgrade to an older version of ElasticSearch so that I can continue to use the client with other ElasticSearc…

---

## [Failed to create snapshot](https://discuss.elastic.co/t/failed-to-create-snapshot/284754)

<div class="topic-metadata">

**Author:** [@X\_T](https://discuss.elastic.co/u/X_T)\
**Replies:** 3\
**Last updated:** [September 21, 2021, 10:20pm UTC](https://discuss.elastic.co/t/failed-to-create-snapshot/284754 "2021-09-21T22:20:08Z")

</div>

Hi team, I'm trying to create a snapshot from the cluster and i am getting some errors. ELK Stack: 7.14.1 Elasticsearch Nodes: 4 First i created the snapshot repository: PUT /\_snapshot/backup\_1 { "type": "fs", "…

---

## [Nested documents Sorting & faceting](https://discuss.elastic.co/t/nested-documents-sorting-faceting/284757)

<div class="topic-metadata">

**Author:** [@jai\_H](https://discuss.elastic.co/u/jai_H)\
**Replies:** 0\
**Last updated:** [September 21, 2021, 6:33pm UTC](https://discuss.elastic.co/t/nested-documents-sorting-faceting/284757 "2021-09-21T18:33:35Z")

</div>

I am working on an E-Commerce application. Catalog Data is being served by Elastic Search. I have document's for Product which is already indexed in Elastic Search. Document Looks something like this (Excluded few fiel…

---

## [ES 6.4.0 repository S3 issue](https://discuss.elastic.co/t/es-6-4-0-repository-s3-issue/284238)

<div class="topic-metadata">

**Author:** [@theMike](https://discuss.elastic.co/u/theMike)\
**Replies:** 2\
**Last updated:** [September 21, 2021, 6:32pm UTC](https://discuss.elastic.co/t/es-6-4-0-repository-s3-issue/284238 "2021-09-21T18:32:55Z")

</div>

Hi, I'm trying to use repository-s3 to snapshot a single node ELK instance to our StorageGrid via S3 api. { "type": "s3", "settings": { "endpoint": "objectstore.xxxx.xxx:xxxx", "bucket": "our-elk-backup" } } …

---

## [Invalid NEST response built from a unsuccessful () low level call on POST using .NET Nest](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-unsuccessful-low-level-call-on-post-using-net-nest/284583)

<div class="topic-metadata">

**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\
**Replies:** 2\
**Last updated:** [September 21, 2021, 5:16pm UTC](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-unsuccessful-low-level-call-on-post-using-net-nest/284583 "2021-09-21T17:16:47Z")

</div>

New to ElasticSearch. I've seen a couple posts with similar titles but didn't seem to apply to me. I'm having trouble querying my ES cluster for the first time. Someone else creaed the cluster and gave me login info. My…

---

## ["Result window is too large" http response depends on the presence of the sort field](https://discuss.elastic.co/t/result-window-is-too-large-http-response-depends-on-the-presence-of-the-sort-field/284738)

<div class="topic-metadata">

**Author:** [@franck.valentin](https://discuss.elastic.co/u/franck.valentin)\
**Replies:** 2\
**Last updated:** [September 21, 2021, 5:14pm UTC](https://discuss.elastic.co/t/result-window-is-too-large-http-response-depends-on-the-presence-of-the-sort-field/284738 "2021-09-21T17:14:04Z")

</div>

Hi, I'm facing a strange behaviour on Elasticsearch 7.7 when I perform a search on several indexes and the result window is too large. If the query is: GET /\_search { "size": 500, "from": 10000, "query": { "…

---

## [Correlating Documents Based On Unique Field](https://discuss.elastic.co/t/correlating-documents-based-on-unique-field/283571)

<div class="topic-metadata">

**Author:** [@Nico\_Pampaloni](https://discuss.elastic.co/u/Nico_Pampaloni)\
**Replies:** 1\
**Last updated:** [September 21, 2021, 4:12pm UTC](https://discuss.elastic.co/t/correlating-documents-based-on-unique-field/283571 "2021-09-21T16:12:07Z")

</div>

Good Afternoon, I have a question about correlating documents based on a search term that only exists in some of the results. Our data has two unique identifiers. The first one (X) exists throughout the lifetime of the …

---

## [CircuitBreakingException: \[parent\] Data too large](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large/284747)

<div class="topic-metadata">

**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\
**Replies:** 4\
**Last updated:** [September 21, 2021, 3:59pm UTC](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large/284747 "2021-09-21T15:59:29Z")

</div>

we upgraded a cluster from 6.8.8 to 7.8.1. ever since this, we are having elastic nodes die with the below error. everything was working fine before the upgrade. i've googled and haven't found anything to really point…

---

## [How to calculate the difference between two web sessions in seconds](https://discuss.elastic.co/t/how-to-calculate-the-difference-between-two-web-sessions-in-seconds/284624)

<div class="topic-metadata">

**Author:** [@marone](https://discuss.elastic.co/u/marone)\
**Replies:** 2\
**Last updated:** [September 21, 2021, 3:57pm UTC](https://discuss.elastic.co/t/how-to-calculate-the-difference-between-two-web-sessions-in-seconds/284624 "2021-09-21T15:57:21Z")

</div>

Hey I am trying to understand how this transformation work: Getting duration by using bucket script. Before applying it to my use-case I am trying to know how to get the difference between two sessions in seconds? and th…

---

## [Explain the function score of match\_phrase\_prefix](https://discuss.elastic.co/t/explain-the-function-score-of-match-phrase-prefix/283348)

<div class="topic-metadata">

**Author:** [@LazyMonster](https://discuss.elastic.co/u/LazyMonster)\
**Replies:** 1\
**Last updated:** [September 21, 2021, 2:37pm UTC](https://discuss.elastic.co/t/explain-the-function-score-of-match-phrase-prefix/283348 "2021-09-21T14:37:59Z")

</div>

I have a problem with match\_phrase\_prefix query. Let me elaborate my case: I use a script similarity like this: { "similarity": { "custom\_tfidf": { "type": "scripted", "script": { "sou…

---

## [Storage size of an event](https://discuss.elastic.co/t/storage-size-of-an-event/284724)

<div class="topic-metadata">

**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\
**Replies:** 0\
**Last updated:** [September 21, 2021, 12:40pm UTC](https://discuss.elastic.co/t/storage-size-of-an-event/284724 "2021-09-21T12:40:54Z")

</div>

Hello every body, Is there an estimate of the storage size of an event? Example sshd authentication event. Best regards

---

## [Using certificates with ElasticSearch Nest client?](https://discuss.elastic.co/t/using-certificates-with-elasticsearch-nest-client/284656)

<div class="topic-metadata">

**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\
**Replies:** 1\
**Last updated:** [September 21, 2021, 12:14pm UTC](https://discuss.elastic.co/t/using-certificates-with-elasticsearch-nest-client/284656 "2021-09-21T12:14:20Z")

</div>

I am attempting to connect to an ElasticSearch cluster using a set of certificates given to me and a username + password. I have ca-chain public certificate private key I started my code out like this: var settings …

---

## [\[Error v7.12.1\] High Level Rest Client async search doesn't work](https://discuss.elastic.co/t/error-v7-12-1-high-level-rest-client-async-search-doesnt-work/283745)

<div class="topic-metadata">

**Author:** [@str8y](https://discuss.elastic.co/u/str8y)\
**Replies:** 3\
**Last updated:** [September 21, 2021, 11:04am UTC](https://discuss.elastic.co/t/error-v7-12-1-high-level-rest-client-async-search-doesnt-work/283745 "2021-09-21T11:04:37Z")

</div>

When using asyncSearch for long running queries, results that I get from asyncSearch.get requests can't be parsed. It looks like the aggregation types are missing in the result, which leads to errors like: java.io.IOEx…

---

## [Elasticsearch 7.13.4 and 7.14.1 request memory higher than actual heap size](https://discuss.elastic.co/t/elasticsearch-7-13-4-and-7-14-1-request-memory-higher-than-actual-heap-size/284614)

<div class="topic-metadata">

**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\
**Replies:** 2\
**Last updated:** [September 21, 2021, 11:02am UTC](https://discuss.elastic.co/t/elasticsearch-7-13-4-and-7-14-1-request-memory-higher-than-actual-heap-size/284614 "2021-09-21T11:02:27Z")

</div>

Hi All, Is there a case that the memory is consumed by elasticsearch requests (and the circuit breaker kicks in) but it is not shown in heap usage? The circuit breaker is 70% of the JVM heap and what we see makes no sen…

---

## [How to set Thread Pool settings for all data nodes in 7.14 Elastic cloud](https://discuss.elastic.co/t/how-to-set-thread-pool-settings-for-all-data-nodes-in-7-14-elastic-cloud/284473)

<div class="topic-metadata">

**Author:** [@rohitnagarro](https://discuss.elastic.co/u/rohitnagarro)\
**Replies:** 10\
**Last updated:** [September 21, 2021, 10:49am UTC](https://discuss.elastic.co/t/how-to-set-thread-pool-settings-for-all-data-nodes-in-7-14-elastic-cloud/284473 "2021-09-21T10:49:34Z")

</div>

Hi, We have 200K video assets on Elastic cloud, consuming 500mb of space on single node. Configuration wise we have 32 GB RAM Elasticsearch in 3 Zone Dedicated Master with 1GB RAM | 8 vCPU | 3 Zone Coordinating nod…

---

## [Massive queue in "refresh" thread pool on a single node, causing timeouts](https://discuss.elastic.co/t/massive-queue-in-refresh-thread-pool-on-a-single-node-causing-timeouts/280732)

<div class="topic-metadata">

**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\
**Replies:** 18\
**Last updated:** [September 21, 2021, 10:34am UTC](https://discuss.elastic.co/t/massive-queue-in-refresh-thread-pool-on-a-single-node-causing-timeouts/280732 "2021-09-21T10:34:03Z")

</div>

This is a difficult one because it only happens randomly, I can't figure out a way to reproduce it consistently. What happens is I'll notice a lot of timeouts trying to index to the cluster, and what I've found that s…

---

## [HTTP request in Ingest Pipeline](https://discuss.elastic.co/t/http-request-in-ingest-pipeline/284698)

<div class="topic-metadata">

**Author:** [@painless\_elastic](https://discuss.elastic.co/u/painless_elastic)\
**Replies:** 1\
**Last updated:** [September 21, 2021, 10:24am UTC](https://discuss.elastic.co/t/http-request-in-ingest-pipeline/284698 "2021-09-21T10:24:46Z")

</div>

Hi, I have a document like the below, { "result":{ "id":"1", "date":"2020-03-31", "title":"Wait for It", "artist":"Leslie Odom Jr.", "spotify\_url":"https://open.spotify.com/track/7EqpEB…

---

## [Painless Scripting](https://discuss.elastic.co/t/painless-scripting/284366)

<div class="topic-metadata">

**Author:** [@painless\_elastic](https://discuss.elastic.co/u/painless_elastic)\
**Replies:** 2\
**Last updated:** [September 21, 2021, 9:53am UTC](https://discuss.elastic.co/t/painless-scripting/284366 "2021-09-21T09:53:54Z")

</div>

Hi All, I am new to elastic search and trying to use ingest pipeline for modifying documents. I have a field in the document as JSON Array, I want to convert that into a string (Stringify JSON) and then save it into a …

---

## [Pro and cons between using daily and monthly indexes?](https://discuss.elastic.co/t/pro-and-cons-between-using-daily-and-monthly-indexes/284613)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 11\
**Last updated:** [September 21, 2021, 8:47am UTC](https://discuss.elastic.co/t/pro-and-cons-between-using-daily-and-monthly-indexes/284613 "2021-09-21T08:47:32Z")

</div>

Hello Following the advice given here (thank you), in a few months, Ill be able to reduce the total shards in my Elastic Stack single node from aprox 5000 to 160. This will generally give it better performance and not …

---

## [Could Not Index event to Elasticsearch](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/284295)

<div class="topic-metadata">

**Author:** [@dayajamal](https://discuss.elastic.co/u/dayajamal)\
**Replies:** 3\
**Last updated:** [September 21, 2021, 8:27am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/284295 "2021-09-21T08:27:17Z")

</div>

Hello, I am running Logstash with 11 pipelines for 9 different log types, when I send those logs from Filebeat to Logstash, I tail the Logstash logs and get this error. Nonetheless, in Elasticsearch and Kibana I receive …

---

## [Search working only for case sensitive data while using SQL-ES LIKE](https://discuss.elastic.co/t/search-working-only-for-case-sensitive-data-while-using-sql-es-like/284646)

<div class="topic-metadata">

**Author:** [@Sammeta\_David\_Raju](https://discuss.elastic.co/u/Sammeta_David_Raju)\
**Replies:** 2\
**Last updated:** [September 21, 2021, 7:19am UTC](https://discuss.elastic.co/t/search-working-only-for-case-sensitive-data-while-using-sql-es-like/284646 "2021-09-21T07:19:13Z")

</div>

Hi , I am trying to search a Text field using SQL-ES with LIKE here is the sample code GET /\_sql { "query":""select \* from indexname where customer LIKE '%AR-D'" } here I am getting resultset only AR-D ,but i want a…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=570)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=572)
