# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=590 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 591 --- ## [Ignore anomalies if the bucket count is lower than some threshold](https://discuss.elastic.co/t/ignore-anomalies-if-the-bucket-count-is-lower-than-some-threshold/281836)
**Author:** [@one](https://discuss.elastic.co/u/one)\ **Replies:** 0\ **Last updated:** [August 18, 2021, 2:41pm UTC](https://discuss.elastic.co/t/ignore-anomalies-if-the-bucket-count-is-lower-than-some-threshold/281836 "2021-08-18T14:41:08Z")
I am investigating anomalies as the mean value of a field over buckets. So far, the results seem to be correct. However, in the domain I am working with, if the number of documents in the buckets is lower than some thres… --- ## [Complex bucket aggregation](https://discuss.elastic.co/t/complex-bucket-aggregation/281689)
**Author:** [@Tkachleo](https://discuss.elastic.co/u/Tkachleo)\ **Replies:** 3\ **Last updated:** [August 18, 2021, 1:13pm UTC](https://discuss.elastic.co/t/complex-bucket-aggregation/281689 "2021-08-18T13:13:37Z")
Hi, I need some help with a complex aggregation. I have these 3 documents: { "id": 1, "@timestamp": "2021-08-17 12:00:00", "result": "FAIL" }, { "id": 2, "@timestamp": "2021-08-17 12:05:00", "result": "PAS… --- ## [Elasticsearch Net, "all shards failed" when one node is shut down, 7.11.1](https://discuss.elastic.co/t/elasticsearch-net-all-shards-failed-when-one-node-is-shut-down-7-11-1/281712)
**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\ **Replies:** 7\ **Last updated:** [August 18, 2021, 10:19am UTC](https://discuss.elastic.co/t/elasticsearch-net-all-shards-failed-when-one-node-is-shut-down-7-11-1/281712 "2021-08-18T10:19:08Z")
Hi! I have a three nodes cluster setup on version 7.11.1, with this configuration file: bootstrap.memory\_lock: false cluster.initial\_master\_nodes: - STHLM-04 - STHLM-05 - STHLM-06 cluster.name: ELASTIC-TEST disco… --- ## [Property totalHits always 0](https://discuss.elastic.co/t/property-totalhits-always-0/281789)
**Author:** [@Christophe\_NOWOSAD](https://discuss.elastic.co/u/Christophe_NOWOSAD)\ **Replies:** 1\ **Last updated:** [August 18, 2021, 9:09am UTC](https://discuss.elastic.co/t/property-totalhits-always-0/281789 "2021-08-18T09:09:09Z")
Hello, I am using Elastic client in our Springboot API (client version 6.5.4). My application is using 2 different indexes, one is on version 6, the second on version 7. For the version 6, everything is working fine, … --- ## [Having issues translating query dsl to NEST](https://discuss.elastic.co/t/having-issues-translating-query-dsl-to-nest/281585)
**Author:** [@woal\_idal](https://discuss.elastic.co/u/woal_idal)\ **Replies:** 5\ **Last updated:** [August 18, 2021, 9:05am UTC](https://discuss.elastic.co/t/having-issues-translating-query-dsl-to-nest/281585 "2021-08-18T09:05:01Z")
I have a console application that will read the logs from elasticsearch and insert those logs to a database. However I am having an issue with the count api implementation in NEST. Whenever, I type the following in the C… --- ## [Create a custom ECS settings via github repo](https://discuss.elastic.co/t/create-a-custom-ecs-settings-via-github-repo/280769)
**Author:** [@Thomas74](https://discuss.elastic.co/u/Thomas74)\ **Replies:** 2\ **Last updated:** [August 18, 2021, 7:41am UTC](https://discuss.elastic.co/t/create-a-custom-ecs-settings-via-github-repo/280769 "2021-08-18T07:41:41Z")
Hi, I'm trying to generate ecs template with custom settings. For that, I used this repo GitHub - elastic/ecs: Elastic Common Schema. Command used : python scripts/generator.py --template-settings template.json --ref … --- ## ["Precomputed hashes" on client side](https://discuss.elastic.co/t/precomputed-hashes-on-client-side/281774)
**Author:** [@jidetashuo](https://discuss.elastic.co/u/jidetashuo)\ **Replies:** 0\ **Last updated:** [August 18, 2021, 6:46am UTC](https://discuss.elastic.co/t/precomputed-hashes-on-client-side/281774 "2021-08-18T06:46:55Z")
I found documentation on "Precomputed hashes" on client side but it does not mention how,how I can generate murmur hash outside of ElasticSearch and later use that to find cardinality --- ## [Elasticsearch Restful API query string](https://discuss.elastic.co/t/elasticsearch-restful-api-query-string/281707)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 1\ **Last updated:** [August 18, 2021, 6:16am UTC](https://discuss.elastic.co/t/elasticsearch-restful-api-query-string/281707 "2021-08-18T06:16:46Z")
The query String in Kibana is : system:APC AND host: F12\*R2R\* AND message:"Turn to Phase \[F12P7\]" , and I want to query through Restful API like below: String bodycontent="{" +" \\"\_source\\": \[\\"@timest… --- ## [Secondary rollup of existing rollup index](https://discuss.elastic.co/t/secondary-rollup-of-existing-rollup-index/281706)
**Author:** [@pavan\_v](https://discuss.elastic.co/u/pavan_v)\ **Replies:** 0\ **Last updated:** [August 17, 2021, 2:51pm UTC](https://discuss.elastic.co/t/secondary-rollup-of-existing-rollup-index/281706 "2021-08-17T14:51:24Z")
Hi, I have an index which is created from a Rollup job. Its content is as follows: "hits": { "total": 4, "max\_score": 1, "hits": \[ { "\_index": "my\_rollup\_1m\_2021.08.17", "\_type": "\_doc… --- ## [Percolate query performance optimization](https://discuss.elastic.co/t/percolate-query-performance-optimization/281750)
**Author:** [@jesse\_c](https://discuss.elastic.co/u/jesse_c)\ **Replies:** 0\ **Last updated:** [August 17, 2021, 9:41pm UTC](https://discuss.elastic.co/t/percolate-query-performance-optimization/281750 "2021-08-17T21:41:58Z")
We're on Elasticsearch 7.9. We have a percolate index that hosts about 120 queries. The index has 5 shards, each of which has two replicas. We started to encounter performance issues after adding around 10 queries that … --- ## [What happens to unampped fields? What are the performance disadvantage of not mapping a field?](https://discuss.elastic.co/t/what-happens-to-unampped-fields-what-are-the-performance-disadvantage-of-not-mapping-a-field/281746)
**Author:** [@Vaibhav\_Singal](https://discuss.elastic.co/u/Vaibhav_Singal)\ **Replies:** 1\ **Last updated:** [August 17, 2021, 9:59pm UTC](https://discuss.elastic.co/t/what-happens-to-unampped-fields-what-are-the-performance-disadvantage-of-not-mapping-a-field/281746 "2021-08-17T21:59:37Z")
I have an index with dynamic mapping set to false. PUT index\_a { "mappings": { "\_doc": { "dynamic": false, "properties": { "\_doc": { "properties": { "id": { … --- ## [Restore multiple snapshot](https://discuss.elastic.co/t/restore-multiple-snapshot/281686)
**Author:** [@Abhinav\_Shrivastava](https://discuss.elastic.co/u/Abhinav_Shrivastava)\ **Replies:** 1\ **Last updated:** [August 17, 2021, 9:56pm UTC](https://discuss.elastic.co/t/restore-multiple-snapshot/281686 "2021-08-17T21:56:00Z")
Hi all, We are taking daily snapshots for elasticsearch. I want to restore the snapshot for last 10 days. I don't want to run API for each snapshot. can someone help me to restore last 10 days snapshot in one go ? --- ## [Add nodes or add CPU](https://discuss.elastic.co/t/add-nodes-or-add-cpu/281744)
**Author:** [@terrainc](https://discuss.elastic.co/u/terrainc)\ **Replies:** 1\ **Last updated:** [August 17, 2021, 9:08pm UTC](https://discuss.elastic.co/t/add-nodes-or-add-cpu/281744 "2021-08-17T21:08:46Z")
Hi! I have 3 nodes cluster (build on virtual machines 24 cores 72Gb mem each). 120k/s messages. Cpu usage about 75-80% so, probably, I need to add more CPU. Also I want to add more disk space (x2 more). So I have two w… --- ## [Can I get BM25 score as part of script field?](https://discuss.elastic.co/t/can-i-get-bm25-score-as-part-of-script-field/281747)
**Author:** [@12minutes](https://discuss.elastic.co/u/12minutes)\ **Replies:** 0\ **Last updated:** [August 17, 2021, 7:59pm UTC](https://discuss.elastic.co/t/can-i-get-bm25-score-as-part-of-script-field/281747 "2021-08-17T19:59:30Z")
The default score will be calculated in a different way. Just wondering is there any easy way to get default bm25 score as part of script function/script field? --- ## [Change indices.memory.index\_buffer\_size on a working elasticsearch cluster](https://discuss.elastic.co/t/change-indices-memory-index-buffer-size-on-a-working-elasticsearch-cluster/281737)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 3\ **Last updated:** [August 17, 2021, 6:43pm UTC](https://discuss.elastic.co/t/change-indices-memory-index-buffer-size-on-a-working-elasticsearch-cluster/281737 "2021-08-17T18:43:42Z")
Hi, Is there any way to change indices.memory.index\_buffer\_size on a working elasticsearch cluster? Is that possible through an API? Thank you in advance. --- ## [Esrally failing with \[ERROR\] Cannot race. Error in race control (NotFoundError(404, 'Not Found', 'Not Found'))](https://discuss.elastic.co/t/esrally-failing-with-error-cannot-race-error-in-race-control-notfounderror-404-not-found-not-found/281731)
**Author:** [@sadhana.durge](https://discuss.elastic.co/u/sadhana.durge)\ **Replies:** 3\ **Last updated:** [August 17, 2021, 5:54pm UTC](https://discuss.elastic.co/t/esrally-failing-with-error-cannot-race-error-in-race-control-notfounderror-404-not-found-not-found/281731 "2021-08-17T17:54:35Z")
Trying to run esrally race --track=pmc --target-hosts=\*\*\*\*\*\*\*.kb.us-west1.gcp.cloud.es.io:9243 --p ipeline=benchmark-only --client-options="timeout:60,use\_ssl:true,verify\_certs:true,basic\_auth\_user:'elastic',basic \_aut… --- ## [Run in Docker with TLS enabled - does not successfully launch, fix found](https://discuss.elastic.co/t/run-in-docker-with-tls-enabled-does-not-successfully-launch-fix-found/281728)
**Author:** [@newschapmj1](https://discuss.elastic.co/u/newschapmj1)\ **Replies:** 0\ **Last updated:** [August 17, 2021, 4:55pm UTC](https://discuss.elastic.co/t/run-in-docker-with-tls-enabled-does-not-successfully-launch-fix-found/281728 "2021-08-17T16:55:49Z")
Hope this helps someone, or me when I forget! I was running this on Docker Desktop, on Win 11 Part II, Run in Docker with TLS enabled Step 3 worked normally Step 4 \`docker-compose -f elastic-docker-tls.yml up -d C… --- ## [Get task ids after executing search query](https://discuss.elastic.co/t/get-task-ids-after-executing-search-query/281719)
**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\ **Replies:** 1\ **Last updated:** [August 17, 2021, 4:46pm UTC](https://discuss.elastic.co/t/get-task-ids-after-executing-search-query/281719 "2021-08-17T16:46:37Z")
I need to give a user an ability to terminate a query initiated by Elasticsearch-DSL or Elasticsearch-py. I know how to get a list of tasks running on the server but I can't just terminate all of them since there is a ch… --- ## [Elasticsearch pods are not ready when xpack.security.enabled is configured](https://discuss.elastic.co/t/elasticsearch-pods-are-not-ready-when-xpack-security-enabled-is-configured/281709)
**Author:** [@etrpchevska](https://discuss.elastic.co/u/etrpchevska)\ **Replies:** 0\ **Last updated:** [August 17, 2021, 2:58pm UTC](https://discuss.elastic.co/t/elasticsearch-pods-are-not-ready-when-xpack-security-enabled-is-configured/281709 "2021-08-17T14:58:56Z")
Hello, I am trying to enable minimal and then basic security on our Elasticsearch cluster following these guidelines: This is the Elasticsearch config file: elasticsearch.yml: | cluster.name: dev-observability … --- ## [Docker-compose -f elastic-docker-tls.yml up -d](https://discuss.elastic.co/t/docker-compose-f-elastic-docker-tls-yml-up-d/281695)
**Author:** [@newschapmj1](https://discuss.elastic.co/u/newschapmj1)\ **Replies:** 2\ **Last updated:** [August 17, 2021, 2:05pm UTC](https://discuss.elastic.co/t/docker-compose-f-elastic-docker-tls-yml-up-d/281695 "2021-08-17T14:05:18Z")
Docs 7.14 "Running the Elastic Stack on Docker" In step 4 Docker-compose -f elastic-docker-tls.yml up -d What does the -d parameter mean? --- ## [Sort not works on string field](https://discuss.elastic.co/t/sort-not-works-on-string-field/281685)
**Author:** [@rahmatzadeh\_mofid](https://discuss.elastic.co/u/rahmatzadeh_mofid)\ **Replies:** 0\ **Last updated:** [August 17, 2021, 1:26pm UTC](https://discuss.elastic.co/t/sort-not-works-on-string-field/281685 "2021-08-17T13:26:45Z")
Sort() function not working on string fields of the document. this is my query: (I use the latest version of Nest client in c# dotnet 5) var res = await elasticClient.SearchAsync\(s =\> s.Index("customers"… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/280518)
**Author:** [@smam](https://discuss.elastic.co/u/smam)\ **Replies:** 16\ **Last updated:** [August 17, 2021, 1:15pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/280518 "2021-08-17T13:15:25Z")
I am confronting the above error while trying to set up minimalistic security for elasticsearch. I know there are multiple forum contributions, but none of them helped me. elasticsearch.yml: # ======================== … --- ## [Need help to figure out what functionality is free](https://discuss.elastic.co/t/need-help-to-figure-out-what-functionality-is-free/281683)
**Author:** [@Maria\_Mikhalska](https://discuss.elastic.co/u/Maria_Mikhalska)\ **Replies:** 1\ **Last updated:** [August 17, 2021, 1:01pm UTC](https://discuss.elastic.co/t/need-help-to-figure-out-what-functionality-is-free/281683 "2021-08-17T13:01:19Z")
Hi! I'm confused a lot that there are oss version &. non-oss version of elasticsearch (v. 7.10). I understand that one is open source version. But what does it change for me? For example, can it be situation that I use f… --- ## [High cpu usage (90-100%) on elastic search servers](https://discuss.elastic.co/t/high-cpu-usage-90-100-on-elastic-search-servers/12268)
**Author:** [@Han\_2](https://discuss.elastic.co/u/Han_2)\ **Replies:** 21\ **Last updated:** [August 17, 2021, 12:36pm UTC](https://discuss.elastic.co/t/high-cpu-usage-90-100-on-elastic-search-servers/12268 "2021-08-17T12:36:25Z")
we are going live with elasticsearch and as soon as we put production load cpu spikes to 90-100%.. wondering whats causing the issue. here is cluster info: es version: 0.90.0 5 nodes each with following config: … --- ## [When i am running this query without filter then it is running fine but when i am putting the filter context with time range of 10 minute i am not getting any value in hits. I have to filter and get the events of last 10 minutes](https://discuss.elastic.co/t/when-i-am-running-this-query-without-filter-then-it-is-running-fine-but-when-i-am-putting-the-filter-context-with-time-range-of-10-minute-i-am-not-getting-any-value-in-hits-i-have-to-filter-and-get-the-events-of-last-10-minutes/281679)
**Author:** [@ashurajchandra](https://discuss.elastic.co/u/ashurajchandra)\ **Replies:** 0\ **Last updated:** [August 17, 2021, 12:08pm UTC](https://discuss.elastic.co/t/when-i-am-running-this-query-without-filter-then-it-is-running-fine-but-when-i-am-putting-the-filter-context-with-time-range-of-10-minute-i-am-not-getting-any-value-in-hits-i-have-to-filter-and-get-the-events-of-last-10-minutes/281679 "2021-08-17T12:08:03Z")
{ "sort": \[{ "date": { "order": "desc" } }\], "from": 0, "size": 3, "track\_total\_hits": true, "query": { "bool": { "must": \[ … --- ## [Help reindexing one domain to another](https://discuss.elastic.co/t/help-reindexing-one-domain-to-another/281603)
**Author:** [@ViniciusSPaiva](https://discuss.elastic.co/u/ViniciusSPaiva)\ **Replies:** 3\ **Last updated:** [August 17, 2021, 11:39am UTC](https://discuss.elastic.co/t/help-reindexing-one-domain-to-another/281603 "2021-08-17T11:39:38Z")
Hello, I am trying to reindex one domain that has almost 10 million documents to another. The reason I am doing that is that I made a change in the analyzer, to split the dots, ignore leading zeroes and so forth. I'm g… --- ## [Alert in single node](https://discuss.elastic.co/t/alert-in-single-node/281595)
**Author:** [@quyennguyen](https://discuss.elastic.co/u/quyennguyen)\ **Replies:** 13\ **Last updated:** [August 16, 2021, 11:36pm UTC](https://discuss.elastic.co/t/alert-in-single-node/281595 "2021-08-16T23:36:46Z")
I'm using Machine learning 7.13 and planning to create alert rule for warning. But I saw this After searching I found these steps to enable TLS. But I saw in Set up minimal security for Elasticsearch | Elasticsearch … --- ## [Update given indices by index template](https://discuss.elastic.co/t/update-given-indices-by-index-template/281645)
**Author:** [@Rammi22](https://discuss.elastic.co/u/Rammi22)\ **Replies:** 3\ **Last updated:** [August 17, 2021, 8:57am UTC](https://discuss.elastic.co/t/update-given-indices-by-index-template/281645 "2021-08-17T08:57:05Z")
Hi, i've created a index\_template. There exist a lot of indices with more than 40 million documents. Is it possible update existing index by the template instaed to reindex all? The \_update\_by\_query doesn't do the jo… --- ## [Nest always maps values in Dictionary to string](https://discuss.elastic.co/t/nest-always-maps-values-in-dictionary-to-string/281652)
**Author:** [@AaronAlluyn](https://discuss.elastic.co/u/AaronAlluyn)\ **Replies:** 0\ **Last updated:** [August 17, 2021, 8:56am UTC](https://discuss.elastic.co/t/nest-always-maps-values-in-dictionary-to-string/281652 "2021-08-17T08:56:16Z")
I've been trying to figure out how the dynamic mapping and templates work but not having much luck. I have a simple app that loads in data file and maps it to a Dictionary\ the values are all technically… --- ## [Rollover policy with date math not work.Date stay "old" and not changed to next day](https://discuss.elastic.co/t/rollover-policy-with-date-math-not-work-date-stay-old-and-not-changed-to-next-day/281158)
**Author:** [@anna.kuranda](https://discuss.elastic.co/u/anna.kuranda)\ **Replies:** 3\ **Last updated:** [August 17, 2021, 8:23am UTC](https://discuss.elastic.co/t/rollover-policy-with-date-math-not-work-date-stay-old-and-not-changed-to-next-day/281158 "2021-08-17T08:23:35Z")
I have issue with rollover using date math Elastic ver 7.13. Tried all recommendations from this site but it still not rollover using new date.Please tell me what wrong configured? My configuration: Template: Preforma… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=589) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=591)