# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=601

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 602

---

## [How to setup xpack On elasticsearch-oss-6.5.4](https://discuss.elastic.co/t/how-to-setup-xpack-on-elasticsearch-oss-6-5-4/279887)

<div class="topic-metadata">

**Author:** [@xujun738](https://discuss.elastic.co/u/xujun738)\
**Replies:** 3\
**Last updated:** [July 28, 2021, 9:45pm UTC](https://discuss.elastic.co/t/how-to-setup-xpack-on-elasticsearch-oss-6-5-4/279887 "2021-07-28T21:45:56Z")

</div>

How to setup xpack On elasticsearch-oss-6.5.4,before 6.3 ,we can install xpack by the plugin form,after 6.3,it was installed in basic version by default but not in OSS

---

## [Alternatives to the Dev Tools Console](https://discuss.elastic.co/t/alternatives-to-the-dev-tools-console/279911)

<div class="topic-metadata">

**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\
**Replies:** 0\
**Last updated:** [July 28, 2021, 8:56pm UTC](https://discuss.elastic.co/t/alternatives-to-the-dev-tools-console/279911 "2021-07-28T20:56:07Z")

</div>

The Dev Tools Console is nice but very basic. I am trying to find an alternative that retains all the niceties of the Console (e.g auto-highlight, intellisense, etc...), but also provide other features such as ability t…

---

## [Logstash to external elasticsearch failed to connect](https://discuss.elastic.co/t/logstash-to-external-elasticsearch-failed-to-connect/279902)

<div class="topic-metadata">

**Author:** [@Aaron\_Phillips](https://discuss.elastic.co/u/Aaron_Phillips)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 7:35pm UTC](https://discuss.elastic.co/t/logstash-to-external-elasticsearch-failed-to-connect/279902 "2021-07-28T19:35:37Z")

</div>

Running two separate elasticsearch one for an elk install and another for a network analysis toolset. The plan was to ship the network logs from the network tool to elk for further AI capabilities. However, the logstash…

---

## [Cannot create snapshot repository](https://discuss.elastic.co/t/cannot-create-snapshot-repository/279833)

<div class="topic-metadata">

**Author:** [@Nicole\_Hirshler](https://discuss.elastic.co/u/Nicole_Hirshler)\
**Replies:** 12\
**Last updated:** [July 28, 2021, 1:47pm UTC](https://discuss.elastic.co/t/cannot-create-snapshot-repository/279833 "2021-07-28T13:47:05Z")

</div>

I have ELK running in a docker. Directory in my home dir is mounted as volume in the docker and was defined as repo\_path in elasticsearch. The permissions are set correctly and folder owner is elasticsearch. When I try…

---

## [Index command raises timeout error](https://discuss.elastic.co/t/index-command-raises-timeout-error/279761)

<div class="topic-metadata">

**Author:** [@MKH](https://discuss.elastic.co/u/MKH)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 8:25am UTC](https://discuss.elastic.co/t/index-command-raises-timeout-error/279761 "2021-07-28T08:25:04Z")

</div>

I am new to elasticsearch and I have some problem when I try to index a document (a python dictionary) into elasticsearch. Could someone please help? I used this command to create and instance of Elasticsearch in my code…

---

## [Replicas](https://discuss.elastic.co/t/replicas/279727)

<div class="topic-metadata">

**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 8:21am UTC](https://discuss.elastic.co/t/replicas/279727 "2021-07-28T08:21:39Z")

</div>

setup.template.settings: index.number\_of\_shards: 3 index.number\_of\_replicas: 3 If i use above configuration in beats, is it create 3 replicas for each shards. or one replica for each shards. I used 3 shards an…

---

## [Using wildcard in must\_not is not working](https://discuss.elastic.co/t/using-wildcard-in-must-not-is-not-working/279812)

<div class="topic-metadata">

**Author:** [@tux\_boi](https://discuss.elastic.co/u/tux_boi)\
**Replies:** 0\
**Last updated:** [July 28, 2021, 7:08am UTC](https://discuss.elastic.co/t/using-wildcard-in-must-not-is-not-working/279812 "2021-07-28T07:08:08Z")

</div>

Hi I am new to elasticsearch, i am having issues using wildcard with must\_not clause. I tried to put it in both query and filter context. Example to text I am trying to exclude is "Error reported by EQRMS for GetSwaps(.…

---

## [Exact match query not returning expected results](https://discuss.elastic.co/t/exact-match-query-not-returning-expected-results/279668)

<div class="topic-metadata">

**Author:** [@muns](https://discuss.elastic.co/u/muns)\
**Replies:** 7\
**Last updated:** [July 28, 2021, 8:01am UTC](https://discuss.elastic.co/t/exact-match-query-not-returning-expected-results/279668 "2021-07-28T08:01:50Z")

</div>

I am trying to implement an exact match query with NEST for ElasticSearch. My expected results are to retrieve owner names that exactly matches the search criteria. However, that actual results of my query are partial ma…

---

## [Error while starting Elasticsearch on windows 10](https://discuss.elastic.co/t/error-while-starting-elasticsearch-on-windows-10/279809)

<div class="topic-metadata">

**Author:** [@Ekta\_Thakur](https://discuss.elastic.co/u/Ekta_Thakur)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 7:16am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch-on-windows-10/279809 "2021-07-28T07:16:20Z")

</div>

Hi, I have installed elasticsearch - 7.13.4 on my windows 10 machine with Openjdk and trying to start it but getting error of "null pointer exception"

---

## [Path\_style\_acces option for V6.2](https://discuss.elastic.co/t/path-style-acces-option-for-v6-2/279586)

<div class="topic-metadata">

**Author:** [@sonujatav35](https://discuss.elastic.co/u/sonujatav35)\
**Replies:** 4\
**Last updated:** [July 28, 2021, 7:00am UTC](https://discuss.elastic.co/t/path-style-acces-option-for-v6-2/279586 "2021-07-28T07:00:13Z")

</div>

Hi, Any work around for Elasticsearch v6.2. My s3 compatible storage only accept path\_style\_access request and this option does not exist in ES v6. How can i make it work so s3 plugin can use path\_style\_access instead o…

---

## [ECS recommended data types](https://discuss.elastic.co/t/ecs-recommended-data-types/279707)

<div class="topic-metadata">

**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\
**Replies:** 4\
**Last updated:** [July 28, 2021, 6:49am UTC](https://discuss.elastic.co/t/ecs-recommended-data-types/279707 "2021-07-28T06:49:22Z")

</div>

Hi, What will be the impact if i change the ECS recommended data type for ECS fields. For example what if i map the event.action field as 'text' datatype instead of keyword. I am receiving the following values in event…

---

## [User Account Details](https://discuss.elastic.co/t/user-account-details/279636)

<div class="topic-metadata">

**Author:** [@pradeepvj](https://discuss.elastic.co/u/pradeepvj)\
**Replies:** 6\
**Last updated:** [July 28, 2021, 3:48am UTC](https://discuss.elastic.co/t/user-account-details/279636 "2021-07-28T03:48:07Z")

</div>

Hi All, I'm new to ELK...how to we get information about user accounts like user account creation or expiration? something similar to a table in Database I can see \_security/user api has only username,fullname,email and…

---

## [Elasticsearch snapshot repository fails validation](https://discuss.elastic.co/t/elasticsearch-snapshot-repository-fails-validation/279638)

<div class="topic-metadata">

**Author:** [@amfournda](https://discuss.elastic.co/u/amfournda)\
**Replies:** 24\
**Last updated:** [July 27, 2021, 8:07pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-repository-fails-validation/279638 "2021-07-27T20:07:53Z")

</div>

I have a three node Elasticsearch cluster with a shared NFS volume. I have set a path.repo value in elasticsearch.yml and restarted elasticsearch (one node at a time, my cluster needs to stay up). I have confirmed all th…

---

## [Use all incoming document fields as param for Upsert operation](https://discuss.elastic.co/t/use-all-incoming-document-fields-as-param-for-upsert-operation/279771)

<div class="topic-metadata">

**Author:** [@Ehbraheem](https://discuss.elastic.co/u/Ehbraheem)\
**Replies:** 0\
**Last updated:** [July 27, 2021, 7:25pm UTC](https://discuss.elastic.co/t/use-all-incoming-document-fields-as-param-for-upsert-operation/279771 "2021-07-27T19:25:47Z")

</div>

I am using the elasticsearch Hadoop driver to do an upsert operation. I need all the fields of my incoming document in my painless script. How do I specify wildcard operator that will copy the values from the incoming do…

---

## [File permissions on ES certificate files in Docker](https://discuss.elastic.co/t/file-permissions-on-es-certificate-files-in-docker/279764)

<div class="topic-metadata">

**Author:** [@braddre](https://discuss.elastic.co/u/braddre)\
**Replies:** 0\
**Last updated:** [July 27, 2021, 5:31pm UTC](https://discuss.elastic.co/t/file-permissions-on-es-certificate-files-in-docker/279764 "2021-07-27T17:31:36Z")

</div>

I've set up a three node ES cluster under Docker using these instructions: Encrypting communications in an Elasticsearch Docker Container | Elasticsearch Guide \[7.13\] | Elastic I'm using ES 7.6.2 In this set up, the ce…

---

## [No 'Access-Control-Allow-Origin' header is present on the requested resource](https://discuss.elastic.co/t/no-access-control-allow-origin-header-is-present-on-the-requested-resource/279763)

<div class="topic-metadata">

**Author:** [@JBianchi](https://discuss.elastic.co/u/JBianchi)\
**Replies:** 0\
**Last updated:** [July 27, 2021, 5:25pm UTC](https://discuss.elastic.co/t/no-access-control-allow-origin-header-is-present-on-the-requested-resource/279763 "2021-07-27T17:25:48Z")

</div>

Hello, I'm trying to connect to an third party API so I don't have access to the API code. I have this CORS issue. I tried everthing that I looked at google but I really don't know how to fix this. I know some Chrome plu…

---

## [Elastic High Response Time](https://discuss.elastic.co/t/elastic-high-response-time/279650)

<div class="topic-metadata">

**Author:** [@mrjayarajj](https://discuss.elastic.co/u/mrjayarajj)\
**Replies:** 2\
**Last updated:** [July 27, 2021, 4:19pm UTC](https://discuss.elastic.co/t/elastic-high-response-time/279650 "2021-07-27T16:19:47Z")

</div>

I see often average response time was going beyond 1 second , the traffic coming is only10 hits i couldn't able find the root cause yet, Need some guidance to point out where i am going wrong if i execute the same re…

---

## [Do multiple nested fields create exponential performance impact?](https://discuss.elastic.co/t/do-multiple-nested-fields-create-exponential-performance-impact/279752)

<div class="topic-metadata">

**Author:** [@weryouasdf](https://discuss.elastic.co/u/weryouasdf)\
**Replies:** 0\
**Last updated:** [July 27, 2021, 3:56pm UTC](https://discuss.elastic.co/t/do-multiple-nested-fields-create-exponential-performance-impact/279752 "2021-07-27T15:56:15Z")

</div>

Hi there! If i have a nested object that contains its own nested object, will my cluster have exponential costs to performance? As in, if I have a single document with a nested field with 5 values, but each nested value…

---

## [Not able to create ILM for Zipkin indeces in Elasticsearch](https://discuss.elastic.co/t/not-able-to-create-ilm-for-zipkin-indeces-in-elasticsearch/279746)

<div class="topic-metadata">

**Author:** [@SreekanthOM](https://discuss.elastic.co/u/SreekanthOM)\
**Replies:** 0\
**Last updated:** [July 27, 2021, 3:11pm UTC](https://discuss.elastic.co/t/not-able-to-create-ilm-for-zipkin-indeces-in-elasticsearch/279746 "2021-07-27T15:11:34Z")

</div>

Zipkin is deployed in K8s and traces are working and index "zipkin-span-2021-07-27" created in ES, creating ILM has issue with without alias throwing error from zipkin pod "Text fields are not optimised for operations th…

---

## [Failed to derive xcontent - status 400 & path.log is empty errors!](https://discuss.elastic.co/t/failed-to-derive-xcontent-status-400-path-log-is-empty-errors/279393)

<div class="topic-metadata">

**Author:** [@Luca\_Desmond](https://discuss.elastic.co/u/Luca_Desmond)\
**Replies:** 9\
**Last updated:** [July 27, 2021, 3:01pm UTC](https://discuss.elastic.co/t/failed-to-derive-xcontent-status-400-path-log-is-empty-errors/279393 "2021-07-27T15:01:30Z")

</div>

Fun one for you all : so I'm trying to take a snapshot of a version 1.7 elastic (yes... 1.7) environment using the following command: curl -XPUT 'http://localhost:9200/\_snapshot/elasticrepo' But i keep getting this e…

---

## [Elasticsearch module is not parsing one particular type of log using filebeat](https://discuss.elastic.co/t/elasticsearch-module-is-not-parsing-one-particular-type-of-log-using-filebeat/279739)

<div class="topic-metadata">

**Author:** [@ranvijaysanu](https://discuss.elastic.co/u/ranvijaysanu)\
**Replies:** 0\
**Last updated:** [July 27, 2021, 2:25pm UTC](https://discuss.elastic.co/t/elasticsearch-module-is-not-parsing-one-particular-type-of-log-using-filebeat/279739 "2021-07-27T14:25:04Z")

</div>

Hi Team, I am using elasticsearch module using hint based autodiscover to parse elasticsearch log. Without using the elasticsearch module and after using it makes no difference .I want to parse the below elasticsearch l…

---

## [Create a rollup index with double instead of default float](https://discuss.elastic.co/t/create-a-rollup-index-with-double-instead-of-default-float/279732)

<div class="topic-metadata">

**Author:** [@save4elastic](https://discuss.elastic.co/u/save4elastic)\
**Replies:** 0\
**Last updated:** [July 27, 2021, 1:34pm UTC](https://discuss.elastic.co/t/create-a-rollup-index-with-double-instead-of-default-float/279732 "2021-07-27T13:34:52Z")

</div>

We have an index which uses double. However creating a rollup with the interface uses a float value instead of double and it causes the numbers not to tally up correctly. Is there a way to create a rollup job/index and …

---

## [Translog file doesn't exist with generation: 44 lastCommitted: -1 checkpoint: 45 - translog ids must be consecutive](https://discuss.elastic.co/t/translog-file-doesnt-exist-with-generation-44-lastcommitted-1-checkpoint-45-translog-ids-must-be-consecutive/279725)

<div class="topic-metadata">

**Author:** [@Krzysztof\_Bak](https://discuss.elastic.co/u/Krzysztof_Bak)\
**Replies:** 0\
**Last updated:** [July 27, 2021, 12:26pm UTC](https://discuss.elastic.co/t/translog-file-doesnt-exist-with-generation-44-lastcommitted-1-checkpoint-45-translog-ids-must-be-consecutive/279725 "2021-07-27T12:26:56Z")

</div>

Hi community I have issue after dirty shutdown of Elasticsearch. I've tried to start but without success. I tried to find resolution on this community but other cases don't have comments. Maybe someone can help me to r…

---

## [Elasticsearch-setup-passwords connection issue](https://discuss.elastic.co/t/elasticsearch-setup-passwords-connection-issue/279254)

<div class="topic-metadata">

**Author:** [@Aboli\_77](https://discuss.elastic.co/u/Aboli_77)\
**Replies:** 6\
**Last updated:** [July 27, 2021, 11:46am UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords-connection-issue/279254 "2021-07-27T11:46:25Z")

</div>

Hello Team, I tried to run the following command: ./elasticsearch-setup-passwords auto -u "https://XXXXXXX:9200" But got the following error: Connection failure to: https://XXXXXXX:9200/\_xpack/security/\_authenticate?…

---

## [Elasticsearch - NEST - Creating mappings for types (.NET)](https://discuss.elastic.co/t/elasticsearch-nest-creating-mappings-for-types-net/277671)

<div class="topic-metadata">

**Author:** [@bsharma](https://discuss.elastic.co/u/bsharma)\
**Replies:** 1\
**Last updated:** [July 27, 2021, 11:19am UTC](https://discuss.elastic.co/t/elasticsearch-nest-creating-mappings-for-types-net/277671 "2021-07-27T11:19:50Z")

</div>

I am using NEST for interacting with Elasticsearch. I am creating mappings for the types dynamically based on System.Type, using: settings.DefaultMappingFor(type, d =\> { d.IndexName(indexName); d…

---

## [How to return document field for NEST client with search?](https://discuss.elastic.co/t/how-to-return-document-field-for-nest-client-with-search/278175)

<div class="topic-metadata">

**Author:** [@dreic](https://discuss.elastic.co/u/dreic)\
**Replies:** 2\
**Last updated:** [July 27, 2021, 10:56am UTC](https://discuss.elastic.co/t/how-to-return-document-field-for-nest-client-with-search/278175 "2021-07-27T10:56:13Z")

</div>

I have following mappings: { "mappings": { "properties" : { "CompletionTime" : { "type" : "date", "format": "date\_hour\_minute\_second", "fields" : { "keyword" : {…

---

## [Point in Time API and Search After .net NEST](https://discuss.elastic.co/t/point-in-time-api-and-search-after-net-nest/278572)

<div class="topic-metadata">

**Author:** [@NoviceESCoder](https://discuss.elastic.co/u/NoviceESCoder)\
**Replies:** 1\
**Last updated:** [July 27, 2021, 10:54am UTC](https://discuss.elastic.co/t/point-in-time-api-and-search-after-net-nest/278572 "2021-07-27T10:54:40Z")

</div>

I have been reading up on Point in time API and wanted to implement it using NEST in my .net application. However, when reading that article (.net application hyperlink), I saw the Fluent DSL example as shown below. Is t…

---

## [Couldn't find any Elasticsearch data](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data/279698)

<div class="topic-metadata">

**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\
**Replies:** 3\
**Last updated:** [July 27, 2021, 10:20am UTC](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data/279698 "2021-07-27T10:20:21Z")

</div>

Hi All, i have issue in kibana where Elasticsearch data is not showing below are the details I have deploy through docker compose http://52.xxx.xxx.xxx::9200/\_cat/indices?v health status index uuid …

---

## [Combine \`should\` with \`filter\` search API](https://discuss.elastic.co/t/combine-should-with-filter-search-api/278696)

<div class="topic-metadata">

**Author:** [@NoviceESCoder](https://discuss.elastic.co/u/NoviceESCoder)\
**Replies:** 1\
**Last updated:** [July 27, 2021, 10:11am UTC](https://discuss.elastic.co/t/combine-should-with-filter-search-api/278696 "2021-07-27T10:11:08Z")

</div>

I wanted to translate my DSL query search that will return the results I am looking for, but when I translated my DSL query to NEST when I hit the end point it just shows \[\]. Documentation that I read: Bool query usage …

---

## [Fetching results beyond 10k - scroll/searchAfter](https://discuss.elastic.co/t/fetching-results-beyond-10k-scroll-searchafter/279702)

<div class="topic-metadata">

**Author:** [@mouli\_99](https://discuss.elastic.co/u/mouli_99)\
**Replies:** 4\
**Last updated:** [July 27, 2021, 10:02am UTC](https://discuss.elastic.co/t/fetching-results-beyond-10k-scroll-searchafter/279702 "2021-07-27T10:02:23Z")

</div>

We are on elastic 7.8, we have use case to fetch beyond 10k results are in interactive mode from users on pretty decent scale (say ~40 concurrent hits) We have stumbled upon scroll (everytime open a scroll, retrieve a…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=600)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=602)
