# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=574 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 575 --- ## [Failed to authenticate user \[elastic\] AND received plaintext http traffic on an https channel, closing connection](https://discuss.elastic.co/t/failed-to-authenticate-user-elastic-and-received-plaintext-http-traffic-on-an-https-channel-closing-connection/284062)
**Author:** [@smam](https://discuss.elastic.co/u/smam)\ **Replies:** 2\ **Last updated:** [September 17, 2021, 8:01am UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-elastic-and-received-plaintext-http-traffic-on-an-https-channel-closing-connection/284062 "2021-09-17T08:01:29Z")
Hello everyone, while setting up the highest security possible I am encountering multiple Problems. The first one is: \[2021-09-13T13:01:54,594\]\[INFO \]\[o.e.x.s.a.AuthenticationService\] \[elasticsearch\] Authentication of… --- ## [How do I combine multiple filters with OR without affecting the score?](https://discuss.elastic.co/t/how-do-i-combine-multiple-filters-with-or-without-affecting-the-score/284349)
**Author:** [@chm](https://discuss.elastic.co/u/chm)\ **Replies:** 2\ **Last updated:** [September 17, 2021, 4:22am UTC](https://discuss.elastic.co/t/how-do-i-combine-multiple-filters-with-or-without-affecting-the-score/284349 "2021-09-17T04:22:18Z")
I want to filter my results with two different clauses aggregated with OR e.g. return documents with PropertyA=true OR PropertyB=true. I've been trying to do this using a bool query. My base query is just a text search … --- ## [QueryContainer is not populated from json passed in to WebApi via \[FromBody\]](https://discuss.elastic.co/t/querycontainer-is-not-populated-from-json-passed-in-to-webapi-via-frombody/283723)
**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\ **Replies:** 1\ **Last updated:** [September 17, 2021, 2:16am UTC](https://discuss.elastic.co/t/querycontainer-is-not-populated-from-json-passed-in-to-webapi-via-frombody/283723 "2021-09-17T02:16:18Z")
We are in the process of upgrading Elasticsearch from v 5.0 to v.6.8. We have a webApi that uses Nest (which we also just upgraded). We have an API that has this: \[HttpPost\] \[Route("\_cluster/{indices}")\]… --- ## [Elasticsearch not starting on Cuckoo](https://discuss.elastic.co/t/elasticsearch-not-starting-on-cuckoo/284392)
**Author:** [@brendon04](https://discuss.elastic.co/u/brendon04)\ **Replies:** 1\ **Last updated:** [September 17, 2021, 12:57am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-on-cuckoo/284392 "2021-09-17T00:57:31Z")
Running elasticsearch on Cuckoo Sandbox. After the installation elastic search not able to start. curl -X GET 'http://localhost:9200' returns with connection refused. Firewall is already off. This are the errors appe… --- ## [Alert for derivative on accumulative value](https://discuss.elastic.co/t/alert-for-derivative-on-accumulative-value/284352)
**Author:** [@NightSpark](https://discuss.elastic.co/u/NightSpark)\ **Replies:** 0\ **Last updated:** [September 16, 2021, 4:12am UTC](https://discuss.elastic.co/t/alert-for-derivative-on-accumulative-value/284352 "2021-09-16T04:12:10Z")
Hi all, I would like to create an alert if the garbage collection time on a JVM takes longer then 20 seconds over any given minute. I have created the below query to work out the derivative however I am struggling to w… --- ## [How to convert elasticsearch index creation date to normal date format](https://discuss.elastic.co/t/how-to-convert-elasticsearch-index-creation-date-to-normal-date-format/284417)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 1\ **Last updated:** [September 16, 2021, 9:14pm UTC](https://discuss.elastic.co/t/how-to-convert-elasticsearch-index-creation-date-to-normal-date-format/284417 "2021-09-16T21:14:39Z")
Hi, Index creation date: 'creation\_date': '1631169602514' how to convert this into a readable format?using python? What is this datetime format? Thank You! --- ## [ElasticSearch / Solr dis\_max query skipping matching clauses](https://discuss.elastic.co/t/elasticsearch-solr-dis-max-query-skipping-matching-clauses/284427)
**Author:** [@andreaschiffo](https://discuss.elastic.co/u/andreaschiffo)\ **Replies:** 0\ **Last updated:** [September 16, 2021, 5:43pm UTC](https://discuss.elastic.co/t/elasticsearch-solr-dis-max-query-skipping-matching-clauses/284427 "2021-09-16T17:43:22Z")
I have an Elasticsearch index on one shard, for which I'm running a \[dis\_max\]\[4\] query that, given some user details (First Name, Last Name, Date of Birth, Address, Phone, Username, Email etc.) queries users from an in… --- ## [ElasticSearch pick one product from each category with top score](https://discuss.elastic.co/t/elasticsearch-pick-one-product-from-each-category-with-top-score/283977)
**Author:** [@dilkash\_manghani](https://discuss.elastic.co/u/dilkash_manghani)\ **Replies:** 5\ **Last updated:** [September 16, 2021, 5:22pm UTC](https://discuss.elastic.co/t/elasticsearch-pick-one-product-from-each-category-with-top-score/283977 "2021-09-16T17:22:51Z")
I am trying to query ES index which contains product information, having product\_id, category\_id and variant\_id fields. Each product belong to certain category and variant: { "product\_id" : "PRODUCT\_12345", "cat… --- ## [Upgrade Path for very old version](https://discuss.elastic.co/t/upgrade-path-for-very-old-version/284309)
**Author:** [@AlanM](https://discuss.elastic.co/u/AlanM)\ **Replies:** 3\ **Last updated:** [September 16, 2021, 4:56pm UTC](https://discuss.elastic.co/t/upgrade-path-for-very-old-version/284309 "2021-09-16T16:56:57Z")
Hi, I have recently inherited an ELK stack 1.3.2/1.4.2/3.01 which will be moved to new platforms and upgraded at the same time. Is there any documentation around upgrading something so old ? Also, I'd want to remove a… --- ## [Watcher: How can I send email alert only when the difference of actual and typical is greater than X](https://discuss.elastic.co/t/watcher-how-can-i-send-email-alert-only-when-the-difference-of-actual-and-typical-is-greater-than-x/284304)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 3\ **Last updated:** [September 16, 2021, 4:17pm UTC](https://discuss.elastic.co/t/watcher-how-can-i-send-email-alert-only-when-the-difference-of-actual-and-typical-is-greater-than-x/284304 "2021-09-16T16:17:59Z")
How can I send email alert only when the difference of actual and typical is greater than X? this is my watch: { "trigger": { "schedule": { "interval": "5m" } }, "input": { "search… --- ## [Encryption between filebeat and Elastic Service?](https://discuss.elastic.co/t/encryption-between-filebeat-and-elastic-service/284060)
**Author:** [@Chinnu](https://discuss.elastic.co/u/Chinnu)\ **Replies:** 10\ **Last updated:** [September 16, 2021, 2:33pm UTC](https://discuss.elastic.co/t/encryption-between-filebeat-and-elastic-service/284060 "2021-09-16T14:33:32Z")
Hello, When filebeat uses cloud.id and api\_key fields, is the connection between filebeat and ElasticCloud encrypted ? Has anyone already checked this before ? It would be helpful if you can point me to related documen… --- ## [Connect via SSH with client through PuTTy](https://discuss.elastic.co/t/connect-via-ssh-with-client-through-putty/284339)
**Author:** [@twang](https://discuss.elastic.co/u/twang)\ **Replies:** 2\ **Last updated:** [September 16, 2021, 2:21pm UTC](https://discuss.elastic.co/t/connect-via-ssh-with-client-through-putty/284339 "2021-09-16T14:21:10Z")
I am new to Elasticsearch. I have Elasticsearch (Self-Managed) deployed on Azure. esdata0 and esdata1 Azure Linux VM. I am able to connect esdata0 via SSH through PuTTy on my pc. Because esdata0 has a public IP. I cannot… --- ## [Cluster Health status is Red](https://discuss.elastic.co/t/cluster-health-status-is-red/284320)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 3\ **Last updated:** [September 16, 2021, 1:19pm UTC](https://discuss.elastic.co/t/cluster-health-status-is-red/284320 "2021-09-16T13:19:40Z")
I am establishing a cluster: 1 master node + 1 backup node. The cluster health status is red. curl -X GET "localhost:9200/\_cluster/health?pretty" { "cluster\_name" : "Elasticsearch", "status" : "red", "timed\_out" : f… --- ## [The default\_operator=AND not working with multi queries in elasticsearch](https://discuss.elastic.co/t/the-default-operator-and-not-working-with-multi-queries-in-elasticsearch/284151)
**Author:** [@Drsaud](https://discuss.elastic.co/u/Drsaud)\ **Replies:** 11\ **Last updated:** [September 15, 2021, 12:06pm UTC](https://discuss.elastic.co/t/the-default-operator-and-not-working-with-multi-queries-in-elasticsearch/284151 "2021-09-15T12:06:04Z")
I want to search for 2 queries in different fields using elasticsearch like this: http://localhost:9200/ncar\_index/ncar/\_search?q=approvetool:مرسوم ملكي AND category:الأنظمة&size=100&sort=date:desc&default\_operator=AND … --- ## [How to figure what what is using so much CPU and memory in Elastic Search?](https://discuss.elastic.co/t/how-to-figure-what-what-is-using-so-much-cpu-and-memory-in-elastic-search/282202)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 41\ **Last updated:** [September 16, 2021, 7:59am UTC](https://discuss.elastic.co/t/how-to-figure-what-what-is-using-so-much-cpu-and-memory-in-elastic-search/282202 "2021-09-16T07:59:47Z")
Hello Im looking at the logs and such but nothing really calls out why my Elastic is running out of memory and CPU. There is nothing huge size wise and nothing consuming ALL of the CPU. Where would be a good log to vi… --- ## [Es nodes configuration](https://discuss.elastic.co/t/es-nodes-configuration/284362)
**Author:** [@v\_kumar](https://discuss.elastic.co/u/v_kumar)\ **Replies:** 2\ **Last updated:** [September 16, 2021, 7:34am UTC](https://discuss.elastic.co/t/es-nodes-configuration/284362 "2021-09-16T07:34:58Z")
Hi Team, Currently, in our cluster, this is the configuration, Nodes - 7 nodes(3master, 4datanodes, write happens 1 month once, so mostly read cluster) ES - 6.4 Memory - 128 GB(ES - 32 GB) Cores - 16 Shards - 13… --- ## [Index UNASSIGNED CLUSTER\_RECOVERED](https://discuss.elastic.co/t/index-unassigned-cluster-recovered/284307)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 2\ **Last updated:** [September 16, 2021, 6:19am UTC](https://discuss.elastic.co/t/index-unassigned-cluster-recovered/284307 "2021-09-16T06:19:38Z")
I have a single node cluster with 1 replica on all my indices. Somehow however I have 2 indices unallocated bin-dev and ilm-history-1-000004. GET /\_cat/shards?h=index,shard,prirep,state,unassigned.reason ilm-history-1-0… --- ## [High level REST client backwards compatibility](https://discuss.elastic.co/t/high-level-rest-client-backwards-compatibility/284345)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 3\ **Last updated:** [September 16, 2021, 6:17am UTC](https://discuss.elastic.co/t/high-level-rest-client-backwards-compatibility/284345 "2021-09-16T06:17:58Z")
In the transport client documentation I see this statement: The client must have the same major version (e.g. 2.x , or 5.x ) as the nodes in the cluster. Clients may connect to clusters which have a different minor ver… --- ## ["ServiceConfigurationError: NamedXContentProvider: MatrixStatsNamedXContentProvider not a subtype;" in Elasticsearch Kafka Connect Transform that uses Elasticsearch high level rest client](https://discuss.elastic.co/t/serviceconfigurationerror-namedxcontentprovider-matrixstatsnamedxcontentprovider-not-a-subtype-in-elasticsearch-kafka-connect-transform-that-uses-elasticsearch-high-level-rest-client/284315)
**Author:** [@lalithkota](https://discuss.elastic.co/u/lalithkota)\ **Replies:** 0\ **Last updated:** [September 15, 2021, 6:11pm UTC](https://discuss.elastic.co/t/serviceconfigurationerror-namedxcontentprovider-matrixstatsnamedxcontentprovider-not-a-subtype-in-elasticsearch-kafka-connect-transform-that-uses-elasticsearch-high-level-rest-client/284315 "2021-09-15T18:11:33Z")
I am trying to develop an Kafka Connect Transform for the Confluent's Elasticsearch Sink connector The transform has to take a preexisting index document data and insert it as a field to the current document. I want to… --- ## [Full-text search in the Rollup index](https://discuss.elastic.co/t/full-text-search-in-the-rollup-index/284283)
**Author:** [@IliaIsakhin](https://discuss.elastic.co/u/IliaIsakhin)\ **Replies:** 2\ **Last updated:** [September 16, 2021, 5:47am UTC](https://discuss.elastic.co/t/full-text-search-in-the-rollup-index/284283 "2021-09-16T05:47:21Z")
Greetings! I've configured roll-up jobs for my Elasticsearch cluster. As I see from docs, roll-up index by default contains fields with types keyword or numeric. I want to perform full-text search by certain fields in … --- ## [Combine two fields in search](https://discuss.elastic.co/t/combine-two-fields-in-search/284277)
**Author:** [@markuso](https://discuss.elastic.co/u/markuso)\ **Replies:** 1\ **Last updated:** [September 15, 2021, 10:29pm UTC](https://discuss.elastic.co/t/combine-two-fields-in-search/284277 "2021-09-15T22:29:30Z")
Hey, I have the JSON data in elasticsearch as { "prefix": "+46", "number":"123456789" } So this is a phone number, together with the country code prefix. And searching for them as separate prefix: +46 number: 1… --- ## [Elastic Search SQL JDBC driver maps each index to a table](https://discuss.elastic.co/t/elastic-search-sql-jdbc-driver-maps-each-index-to-a-table/284334)
**Author:** [@saiyamlui](https://discuss.elastic.co/u/saiyamlui)\ **Replies:** 1\ **Last updated:** [September 15, 2021, 9:34pm UTC](https://discuss.elastic.co/t/elastic-search-sql-jdbc-driver-maps-each-index-to-a-table/284334 "2021-09-15T21:34:10Z")
I am trying to use Elastic Search SQL JDBC driver to connect to ES cluster. Our indices are partition by date dynamically, for example, we have testdata\_2021-0914, testdata\_2021-0915, etc. It appears each of these i… --- ## [Setting default operator to AND in elasticsearch when using SearchSourceBuilder and XContentParser](https://discuss.elastic.co/t/setting-default-operator-to-and-in-elasticsearch-when-using-searchsourcebuilder-and-xcontentparser/284326)
**Author:** [@taugusti](https://discuss.elastic.co/u/taugusti)\ **Replies:** 0\ **Last updated:** [September 15, 2021, 7:32pm UTC](https://discuss.elastic.co/t/setting-default-operator-to-and-in-elasticsearch-when-using-searchsourcebuilder-and-xcontentparser/284326 "2021-09-15T19:32:55Z")
I have the below sample code to query elasticsearch. It receives the user query and uses XContentParser and SearchSourceBuilder. I don't want to tweak a lot on the existing code as it is has been in production for a whil… --- ## [Using indexes to simplify user access](https://discuss.elastic.co/t/using-indexes-to-simplify-user-access/284184)
**Author:** [@blackge](https://discuss.elastic.co/u/blackge)\ **Replies:** 3\ **Last updated:** [September 15, 2021, 9:21pm UTC](https://discuss.elastic.co/t/using-indexes-to-simplify-user-access/284184 "2021-09-15T21:21:20Z")
I'm building a solution that controls access to documents by library. Users gain access to libraries through subscriptions. We want our users to run searches across all of the libraries that they have access to, but not … --- ## [PointInTime api and SearchAfter in Nest](https://discuss.elastic.co/t/pointintime-api-and-searchafter-in-nest/283908)
**Author:** [@rizhaider](https://discuss.elastic.co/u/rizhaider)\ **Replies:** 6\ **Last updated:** [September 15, 2021, 8:28pm UTC](https://discuss.elastic.co/t/pointintime-api-and-searchafter-in-nest/283908 "2021-09-15T20:28:27Z")
I am working on a task in which I have to search a large number of documents in Elasticsearch using Nest client. I implemented ScrollAPI that works fine but need to use SearchAPI with SearchAfter and PointInTime as recom… --- ## [Caching Elasticsearch vs Redis](https://discuss.elastic.co/t/caching-elasticsearch-vs-redis/284289)
**Author:** [@Clayton\_D](https://discuss.elastic.co/u/Clayton_D)\ **Replies:** 3\ **Last updated:** [September 15, 2021, 4:59pm UTC](https://discuss.elastic.co/t/caching-elasticsearch-vs-redis/284289 "2021-09-15T16:59:39Z")
Architecture to support 2D GeoQuery As a background, I’m attempting to test a database to power backend of an app that matches users with other users based on time and coordinates (with preference for geoproximity but a… --- ## [How to do a multi match that sorts all matches of one field before another field?](https://discuss.elastic.co/t/how-to-do-a-multi-match-that-sorts-all-matches-of-one-field-before-another-field/284313)
**Author:** [@maurienvy](https://discuss.elastic.co/u/maurienvy)\ **Replies:** 0\ **Last updated:** [September 15, 2021, 4:52pm UTC](https://discuss.elastic.co/t/how-to-do-a-multi-match-that-sorts-all-matches-of-one-field-before-another-field/284313 "2021-09-15T16:52:56Z")
Hello everyone! I am trying to build a search query for an e commerce, I have two requests that I will explain to detail: A) I want to sort results depending on if a search term is on one field or another. The use case… --- ## [Fleet API vs Fleet UI](https://discuss.elastic.co/t/fleet-api-vs-fleet-ui/283918)
**Author:** [@weberr13](https://discuss.elastic.co/u/weberr13)\ **Replies:** 6\ **Last updated:** [September 15, 2021, 3:15pm UTC](https://discuss.elastic.co/t/fleet-api-vs-fleet-ui/283918 "2021-09-15T15:15:35Z")
I have been using the fleet openapi spec (Swagger UI) to programmatically control our agent polices. I have seen 2 issues (I found a work around for one, at a loss for the second). creating an Endpoint policy ignores … --- ## [Is removing cluster.initial\_master\_nodes still necessary?](https://discuss.elastic.co/t/is-removing-cluster-initial-master-nodes-still-necessary/284298)
**Author:** [@MSN](https://discuss.elastic.co/u/MSN)\ **Replies:** 2\ **Last updated:** [September 15, 2021, 3:00pm UTC](https://discuss.elastic.co/t/is-removing-cluster-initial-master-nodes-still-necessary/284298 "2021-09-15T15:00:27Z")
Hi, The documentation for elasticsearch 7.14 states, that the configuration setting cluster.initial\_master\_nodes has to be removed from the configuration file after a cluster has formed sucessfully and should be absent … --- ## [Passing location (geopoint) to stored scripts from java](https://discuss.elastic.co/t/passing-location-geopoint-to-stored-scripts-from-java/284297)
**Author:** [@Madhu\_Dasa](https://discuss.elastic.co/u/Madhu_Dasa)\ **Replies:** 0\ **Last updated:** [September 15, 2021, 2:39pm UTC](https://discuss.elastic.co/t/passing-location-geopoint-to-stored-scripts-from-java/284297 "2021-09-15T14:39:59Z")
I have a field "location : {"type":"geopoint"} in ES mapping. I wrote a script to get documents based on location. But how do I pass values to this field from Java? I used below way, but seems not working GeoPoint loca… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=573) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=575)