# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=586 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 587 --- ## [Elasticsearch/Kibana "authentication\_failed"](https://discuss.elastic.co/t/elasticsearch-kibana-authentication-failed/282355)
**Author:** [@IlyaZ](https://discuss.elastic.co/u/IlyaZ)\ **Replies:** 4\ **Last updated:** [August 25, 2021, 5:33pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-authentication-failed/282355 "2021-08-25T17:33:38Z")
I am configuring an Elasticsearch/Kibana running under Docker-compose. And I am have some problems with authentication. When running docker-compose build: version: '3.7' services: create\_cert: image: docker.ela… --- ## [Pipeline aggs with more than one level depth](https://discuss.elastic.co/t/pipeline-aggs-with-more-than-one-level-depth/282502)
**Author:** [@caraboy](https://discuss.elastic.co/u/caraboy)\ **Replies:** 0\ **Last updated:** [August 25, 2021, 3:02pm UTC](https://discuss.elastic.co/t/pipeline-aggs-with-more-than-one-level-depth/282502 "2021-08-25T15:02:20Z")
Hi everyone, I'm trying to make an avg\_bucket agg that goes more than one level deep like this ... "aggs": { "group\_by\_implementation\_waiting": { "terms": { "field": "implementation.keyword", … --- ## [Yii2 and nested objects](https://discuss.elastic.co/t/yii2-and-nested-objects/282268)
**Author:** [@Web\_Hildus](https://discuss.elastic.co/u/Web_Hildus)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 4:58pm UTC](https://discuss.elastic.co/t/yii2-and-nested-objects/282268 "2021-08-25T16:58:10Z")
Hi. I'm totally new in ElasticSearch. I'm using "Yii2 Framework" and stalked on. Elastic not works with nested field. Is here specialist in Yii2 & Elasticsearch? Or where I can find the answer? Documents in index are lik… --- ## [Elastic cluster sizing estimator : why I am not having 2 data nodes](https://discuss.elastic.co/t/elastic-cluster-sizing-estimator-why-i-am-not-having-2-data-nodes/282378)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 3\ **Last updated:** [August 25, 2021, 3:39pm UTC](https://discuss.elastic.co/t/elastic-cluster-sizing-estimator-why-i-am-not-having-2-data-nodes/282378 "2021-08-25T15:39:14Z")
I am trying to estimate my cluster size based on an excel sheet provided by elastic.co in a webinar in 20/05/2021 about "elastic sizing", I filled the daily volume data but I see that it gives me only 1 data not for "Ho… --- ## [Data tier problem - New Indices not allocating in data\_hot](https://discuss.elastic.co/t/data-tier-problem-new-indices-not-allocating-in-data-hot/282498)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 3\ **Last updated:** [August 25, 2021, 3:37pm UTC](https://discuss.elastic.co/t/data-tier-problem-new-indices-not-allocating-in-data-hot/282498 "2021-08-25T15:37:30Z")
Hi, I'm (trying) to implement a hot/warm architecture using the concept of data tiers. I have several clusters with a hot/warm/cold architecture working perfectly but the implementation was done based on node.attr. No… --- ## [All of a sudden Elastic Search, 100% CPU usage and high memory usage](https://discuss.elastic.co/t/all-of-a-sudden-elastic-search-100-cpu-usage-and-high-memory-usage/281915)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 2:59pm UTC](https://discuss.elastic.co/t/all-of-a-sudden-elastic-search-100-cpu-usage-and-high-memory-usage/281915 "2021-08-25T14:59:38Z")
Hello I havent touched any configuration on the Elastic Stack in about a month and all of a sudden, we are seeing the CPU at 100% and the memory usage very high. Im surprised that this has been going on for about 8 hou… --- ## [Mappings restore errors](https://discuss.elastic.co/t/mappings-restore-errors/282417)
**Author:** [@Leonardo\_De\_Oliveira](https://discuss.elastic.co/u/Leonardo_De_Oliveira)\ **Replies:** 3\ **Last updated:** [August 25, 2021, 2:37pm UTC](https://discuss.elastic.co/t/mappings-restore-errors/282417 "2021-08-25T14:37:35Z")
Hello Folks! I am currently running Elasticsearch v5.5.2 in production, and I am setting up a downsized version in our Staging environment. I used elasticdump v6.67.1 to dump our mappings and a subset of our data which… --- ## [Search\_after query doesn't return correct results for pagination](https://discuss.elastic.co/t/search-after-query-doesnt-return-correct-results-for-pagination/281999)
**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 1:45pm UTC](https://discuss.elastic.co/t/search-after-query-doesnt-return-correct-results-for-pagination/281999 "2021-08-25T13:45:03Z")
I have a process that queries the watcher-history indices for a specified time, and the amount of results is over 10000 docs, which is the limit. So I tried to use the search\_after query, after adding a sort value, but t… --- ## [Fields, keywords and text](https://discuss.elastic.co/t/fields-keywords-and-text/282422)
**Author:** [@iLemming](https://discuss.elastic.co/u/iLemming)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 11:37am UTC](https://discuss.elastic.co/t/fields-keywords-and-text/282422 "2021-08-25T11:37:40Z")
I'm dealing with a headache where it seems I can't find the correct set of parameters for the analyzer. So here's the problem: I have an index where some fields are type of text and some fields are "type": "keyword". L… --- ## [Limiting the number of documents for each bucket in term aggregation](https://discuss.elastic.co/t/limiting-the-number-of-documents-for-each-bucket-in-term-aggregation/281818)
**Author:** [@menshenin](https://discuss.elastic.co/u/menshenin)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 10:37am UTC](https://discuss.elastic.co/t/limiting-the-number-of-documents-for-each-bucket-in-term-aggregation/281818 "2021-08-25T10:37:34Z")
Hi, There is a set of terms. I want to know which ones are present in the search results and I use term aggregation for this purpose. Is there some way to limit the number of documents for each bucket in term aggregati… --- ## [How can I disable or uninstall x-pack in Elasticsearch 7.14](https://discuss.elastic.co/t/how-can-i-disable-or-uninstall-x-pack-in-elasticsearch-7-14/282472)
**Author:** [@peterhajdu](https://discuss.elastic.co/u/peterhajdu)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 10:34am UTC](https://discuss.elastic.co/t/how-can-i-disable-or-uninstall-x-pack-in-elasticsearch-7-14/282472 "2021-08-25T10:34:06Z")
Hi, we are about to switch from elasticsearch-oss 7.7 to elasticsearch 7.14. Elasticsearch 7.14 contains x-pack by default but we do not intend to use any functionality that the oss version did not contain. Is it poss… --- ## [Restful API query string has http 500 error code](https://discuss.elastic.co/t/restful-api-query-string-has-http-500-error-code/281808)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 10:15am UTC](https://discuss.elastic.co/t/restful-api-query-string-has-http-500-error-code/281808 "2021-08-25T10:15:17Z")
The query String in Kibana is : system:APC AND host: F12\*R2R\* AND message:"Turn to Phase \[F12P7\]", and I want to query through Restful API like below: String bodycontent="{" +" \\"\_source\\": \[\\"@timestamp\\",\\"eqp… --- ## [Routing with Java Client UpdateRequests not working](https://discuss.elastic.co/t/routing-with-java-client-updaterequests-not-working/281819)
**Author:** [@redbow](https://discuss.elastic.co/u/redbow)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 10:09am UTC](https://discuss.elastic.co/t/routing-with-java-client-updaterequests-not-working/281819 "2021-08-25T10:09:10Z")
Hey dear Elasticsearch community, I would like to send an UpdateRequest with the Java REST Client (7.13) to Elasticsearch using the .routing() request parameter, because I am updating a join field. It seems, using this … --- ## [Elasticsearch.Net, search gets really slow when one of three nodes are shut down](https://discuss.elastic.co/t/elasticsearch-net-search-gets-really-slow-when-one-of-three-nodes-are-shut-down/281855)
**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\ **Replies:** 0\ **Last updated:** [August 18, 2021, 3:52pm UTC](https://discuss.elastic.co/t/elasticsearch-net-search-gets-really-slow-when-one-of-three-nodes-are-shut-down/281855 "2021-08-18T15:52:09Z")
Hi! I have a three node cluster on a 7.11.1 Elastic and then I have a .net website doing searches against the index. Everything works just fine but when I shut down one node the search takes about 60 seconds. It feels l… --- ## [Date Histogram Aggregation with predefined number of buckets possible?](https://discuss.elastic.co/t/date-histogram-aggregation-with-predefined-number-of-buckets-possible/281880)
**Author:** [@johnrodey](https://discuss.elastic.co/u/johnrodey)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 10:03am UTC](https://discuss.elastic.co/t/date-histogram-aggregation-with-predefined-number-of-buckets-possible/281880 "2021-08-25T10:03:22Z")
I would like to get an aggregation to build a histogram off of a date field, but I would like to predefine the EXACT number of buckets to use. So for example if I have data indexed for June 1st and I ask for 10 buckets … --- ## [Wordpress installation with elasticsearch](https://discuss.elastic.co/t/wordpress-installation-with-elasticsearch/281907)
**Author:** [@Arman\_Ali\_Fokir](https://discuss.elastic.co/u/Arman_Ali_Fokir)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 10:02am UTC](https://discuss.elastic.co/t/wordpress-installation-with-elasticsearch/281907 "2021-08-25T10:02:20Z")
Sir, I create an elastic search cluster using three nodes. There I set up a master node. Now my question is where do I install the WordPress website? Should I install websites on master nodes or data nodes or all nodes… --- ## [Create an index if not exist and add a document to it](https://discuss.elastic.co/t/create-an-index-if-not-exist-and-add-a-document-to-it/281945)
**Author:** [@ChenChuang](https://discuss.elastic.co/u/ChenChuang)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 10:00am UTC](https://discuss.elastic.co/t/create-an-index-if-not-exist-and-add-a-document-to-it/281945 "2021-08-25T10:00:15Z")
I tried to dynamically create an index (if not exist) with static mapping, then added a document to it immediately. After that, I checked mapping of the index and found that the mapping is not what I described in request… --- ## [Filter on 2 indices](https://discuss.elastic.co/t/filter-on-2-indices/282098)
**Author:** [@dgastudio](https://discuss.elastic.co/u/dgastudio)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 9:51am UTC](https://discuss.elastic.co/t/filter-on-2-indices/282098 "2021-08-25T09:51:48Z")
Hello! i have 2 indices, users and employee\_shift users "created": "1618153891", "changed": null, "uuid": "", "uid:uuid": "1629cbdf-e7fa-41e6-b3a2-ab29a1a77401", "acc": 57, "name": "spashogolut", "role": "Genera… --- ## [Search by datetime range query](https://discuss.elastic.co/t/search-by-datetime-range-query/282463)
**Author:** [@rehannali](https://discuss.elastic.co/u/rehannali)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 9:51am UTC](https://discuss.elastic.co/t/search-by-datetime-range-query/282463 "2021-08-25T09:51:21Z")
Hi, I have issue related to search through datetime range query. I tried to search some data which is oldest after a certain period. I read documentation and try to make query and I'm unable to get any of the data. GET … --- ## [ElasticSearch adjacent words for nested queries](https://discuss.elastic.co/t/elasticsearch-adjacent-words-for-nested-queries/282242)
**Author:** [@Loreto\_Parisi1](https://discuss.elastic.co/u/Loreto_Parisi1)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 9:46am UTC](https://discuss.elastic.co/t/elasticsearch-adjacent-words-for-nested-queries/282242 "2021-08-25T09:46:17Z")
I'm using ES 7.14/Kibana 7.10, I have to search for adjacent words (any order), hence I'm using this query: { "query":{ "bool":{ "must":\[ { "query\_string":{ "… --- ## [Using aggregation in anomaly detection jobs](https://discuss.elastic.co/t/using-aggregation-in-anomaly-detection-jobs/282237)
**Author:** [@one](https://discuss.elastic.co/u/one)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 9:06am UTC](https://discuss.elastic.co/t/using-aggregation-in-anomaly-detection-jobs/282237 "2021-08-25T09:06:51Z")
I guess I did not understand the use of aggregation in anomaly detection. I was expecting that the same aggregation with different time intervals will not affect the results, however, it seems that this is not the case. … --- ## [Determining 'size' in \[\_source \] \[includes\] query](https://discuss.elastic.co/t/determining-size-in-source-includes-query/282451)
**Author:** [@clawrencia](https://discuss.elastic.co/u/clawrencia)\ **Replies:** 8\ **Last updated:** [August 25, 2021, 7:41am UTC](https://discuss.elastic.co/t/determining-size-in-source-includes-query/282451 "2021-08-25T07:41:04Z")
Hi guys, I am just wondering if it possible to set the size for a particular field when we query. The following here is my query. (Apologies for the mess, the query is done in the python elasticsearch API). GET /index\_… --- ## [How to Capture user's activity in Elasticsearch](https://discuss.elastic.co/t/how-to-capture-users-activity-in-elasticsearch/282346)
**Author:** [@ravi-shanker](https://discuss.elastic.co/u/ravi-shanker)\ **Replies:** 6\ **Last updated:** [August 25, 2021, 5:35am UTC](https://discuss.elastic.co/t/how-to-capture-users-activity-in-elasticsearch/282346 "2021-08-25T05:35:44Z")
Dear Elastic Users, I am working on an Elasticsearch POC and as part of that i need to capture below details -- What users are searching for -- Which links users are clicking In short i want to capture users activity… --- ## [Which node to apply Active Directory configuration](https://discuss.elastic.co/t/which-node-to-apply-active-directory-configuration/282365)
**Author:** [@roh](https://discuss.elastic.co/u/roh)\ **Replies:** 4\ **Last updated:** [August 25, 2021, 5:16am UTC](https://discuss.elastic.co/t/which-node-to-apply-active-directory-configuration/282365 "2021-08-25T05:16:54Z")
Hi all! I'm working on Elasticsearch Cluster with 10 ES nodes for my client's project on production and already created cluster with 3 ES nodes on development . Nodes are like below: Production 6 Hot (3 of them incl… --- ## [Best practices for indexing documents](https://discuss.elastic.co/t/best-practices-for-indexing-documents/282347)
**Author:** [@TheHunter](https://discuss.elastic.co/u/TheHunter)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 4:43am UTC](https://discuss.elastic.co/t/best-practices-for-indexing-documents/282347 "2021-08-25T04:43:46Z")
Hi all, I’m trying to get info about best practices to define indices, mainly in microservices environment. The question is, inside each our microservices we have many “schemas”, so in order to use in a right way shard… --- ## [Change machine learning algorithms](https://discuss.elastic.co/t/change-machine-learning-algorithms/282343)
**Author:** [@Hartinah](https://discuss.elastic.co/u/Hartinah)\ **Replies:** 5\ **Last updated:** [August 25, 2021, 4:37am UTC](https://discuss.elastic.co/t/change-machine-learning-algorithms/282343 "2021-08-25T04:37:01Z")
Sorry, I've only been learning about elastics for a few years...And I happen to want to do some research with Wazuh and Elastic...I noticed that there are machine learning features in elastic in data analysis. Is it pos… --- ## [Elastic cloud deployment issue](https://discuss.elastic.co/t/elastic-cloud-deployment-issue/282366)
**Author:** [@kadiveti](https://discuss.elastic.co/u/kadiveti)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 4:08am UTC](https://discuss.elastic.co/t/elastic-cloud-deployment-issue/282366 "2021-08-25T04:08:39Z")
Hi Team, My kibana console is showing This site can’t be reached even after trying for multiple edits in 14 days cloud trial. Thanks, Sai --- ## [NVMe storage with Helm charts](https://discuss.elastic.co/t/nvme-storage-with-helm-charts/282428)
**Author:** [@porscheme](https://discuss.elastic.co/u/porscheme)\ **Replies:** 0\ **Last updated:** [August 25, 2021, 2:37am UTC](https://discuss.elastic.co/t/nvme-storage-with-helm-charts/282428 "2021-08-25T02:37:56Z")
Does ES helm charts support using NVMe storage? Any hep is really appreciated!. --- ## [Index not displaying expected log values](https://discuss.elastic.co/t/index-not-displaying-expected-log-values/282314)
**Author:** [@flenoir](https://discuss.elastic.co/u/flenoir)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 1:20am UTC](https://discuss.elastic.co/t/index-not-displaying-expected-log-values/282314 "2021-08-25T01:20:46Z")
Hi, I'm struggling with filebeat and logstash because, i want to handle different logs ( logs and json file) as inputs and i want to have a dedicated index for all logs (first\_index and another one for json datas ( on s… --- ## [Mappings missing after rollover](https://discuss.elastic.co/t/mappings-missing-after-rollover/282295)
**Author:** [@Shashankdevaraj](https://discuss.elastic.co/u/Shashankdevaraj)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 12:56am UTC](https://discuss.elastic.co/t/mappings-missing-after-rollover/282295 "2021-08-25T00:56:28Z")
Hi, After a rollover through ILM, recent additions to the mappings of the index, will not reflect in the latest rolled over one This will result in 'status': 400, 'error': {'type': 'strict\_dynamic\_mapping\_exception', '… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=585) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=587)