# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=605 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 606 --- ## [Having hard time matching queries with forward slash & ampersand](https://discuss.elastic.co/t/having-hard-time-matching-queries-with-forward-slash-ampersand/279303)
**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 7:05pm UTC](https://discuss.elastic.co/t/having-hard-time-matching-queries-with-forward-slash-ampersand/279303 "2021-07-21T19:05:10Z")
I want to identify urls like this from our elastic index http://example.com/?a=1&c=1&s1=1 where the domain name can change. So, I have to rely on matching using the query pattern. In a nutshell, something like this \*/?… --- ## [Elastic Transform Error](https://discuss.elastic.co/t/elastic-transform-error/279199)
**Author:** [@IWannaDance](https://discuss.elastic.co/u/IWannaDance)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 6:35pm UTC](https://discuss.elastic.co/t/elastic-transform-error/279199 "2021-07-21T18:35:38Z")
\[ERROR\]\[o.e.x.t.t.TransformPersistentTasksExecutor\] \[node-1\] Failed to start task \[endpoint.metadata\_current-default-0.19.1\] in node operation org.elasticsearch.ElasticsearchStatusException: Unable to start transform \[en… --- ## [Getting 400 "request does not support \[aggs\]" Error](https://discuss.elastic.co/t/getting-400-request-does-not-support-aggs-error/279253)
**Author:** [@thejusjose-mindcurv](https://discuss.elastic.co/u/thejusjose-mindcurv)\ **Replies:** 2\ **Last updated:** [July 21, 2021, 5:47pm UTC](https://discuss.elastic.co/t/getting-400-request-does-not-support-aggs-error/279253 "2021-07-21T17:47:25Z")
Hi all, Getting a 400 Error while trying to fetch the total count of IP connecting to our system and then sort the IP list based on the top 5. We have Kibana version 7.8 installed. Requirement :: Get the list of top … --- ## [Elasticsearch Query Error : Unknown key for a START\_OBJECT in \[range\]](https://discuss.elastic.co/t/elasticsearch-query-error-unknown-key-for-a-start-object-in-range/279290)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 0\ **Last updated:** [July 21, 2021, 5:15pm UTC](https://discuss.elastic.co/t/elasticsearch-query-error-unknown-key-for-a-start-object-in-range/279290 "2021-07-21T17:15:05Z")
I am trying to fetch the last 24 hour data by the following query. while running this queries individually, it works perfect, but when combined it gives the following error : Query: { "size": 0, "aggs": { "perc… --- ## [\[FS-Repository\] Path is not accessible on master node](https://discuss.elastic.co/t/fs-repository-path-is-not-accessible-on-master-node/278219)
**Author:** [@Jonatha](https://discuss.elastic.co/u/Jonatha)\ **Replies:** 1\ **Last updated:** [July 9, 2021, 1:16am UTC](https://discuss.elastic.co/t/fs-repository-path-is-not-accessible-on-master-node/278219 "2021-07-09T01:16:26Z")
I tried to config a repository to save snapshot, but show this error: PUT \_snapshot/bkp-test { "type": "fs", "settings": { "location": "/media/test" } } { "error" : { "root\_cause" : \[ { "type" : "… --- ## [Shards per node, Heap, 100% CPU....help please](https://discuss.elastic.co/t/shards-per-node-heap-100-cpu-help-please/279109)
**Author:** [@kk123](https://discuss.elastic.co/u/kk123)\ **Replies:** 4\ **Last updated:** [July 21, 2021, 4:24pm UTC](https://discuss.elastic.co/t/shards-per-node-heap-100-cpu-help-please/279109 "2021-07-21T16:24:06Z")
Hi, I have a 2 node cluster with 1500 indices. Indices persist over time. This was set up by a third party... but now I am having the problem that the master node becomes unresponsive (100% CPU) and the only way to reco… --- ## [Where to see all the executed queries ran against my ES](https://discuss.elastic.co/t/where-to-see-all-the-executed-queries-ran-against-my-es/279235)
**Author:** [@hello5346](https://discuss.elastic.co/u/hello5346)\ **Replies:** 3\ **Last updated:** [July 21, 2021, 3:58pm UTC](https://discuss.elastic.co/t/where-to-see-all-the-executed-queries-ran-against-my-es/279235 "2021-07-21T15:58:01Z")
Hello all, Where can I see all the queries ran against my elastic search cluster. Thanks --- ## [Connecting UiPath to Elastic](https://discuss.elastic.co/t/connecting-uipath-to-elastic/278288)
**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 3:03pm UTC](https://discuss.elastic.co/t/connecting-uipath-to-elastic/278288 "2021-07-21T15:03:22Z")
Hi, I've been struggling for a while now trying to connect UiPath/Orchestrator to Elastic. On their documentation they explicitly say that it's possible to output logs to Elastic. Unfortunately i still did not managed … --- ## [Compile Errors - Using Painless](https://discuss.elastic.co/t/compile-errors-using-painless/279265)
**Author:** [@dshonubi](https://discuss.elastic.co/u/dshonubi)\ **Replies:** 2\ **Last updated:** [July 21, 2021, 3:03pm UTC](https://discuss.elastic.co/t/compile-errors-using-painless/279265 "2021-07-21T15:03:18Z")
I keep getting this error of a script exception, but I'm not sure what the root cause is. \[script\_exception\] compile error, with { script\_stack={ 0="... tx.payload.aggregations.4XXerror.buckets.size(); i ..." & 1=" ^---… --- ## [Forcing an index to rolleout to warm phase](https://discuss.elastic.co/t/forcing-an-index-to-rolleout-to-warm-phase/279258)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 4\ **Last updated:** [July 21, 2021, 2:23pm UTC](https://discuss.elastic.co/t/forcing-an-index-to-rolleout-to-warm-phase/279258 "2021-07-21T14:23:21Z")
Hello, I have an index which is 4.2GB large and at the moment I have upgraded the filebeat a new index was created. Now the ILM rolleout settings is for 10G therefore this index will never meet the threshold required for… --- ## [Filtering, sorting and paginate nested object list](https://discuss.elastic.co/t/filtering-sorting-and-paginate-nested-object-list/279078)
**Author:** [@nickcigna](https://discuss.elastic.co/u/nickcigna)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 2:20pm UTC](https://discuss.elastic.co/t/filtering-sorting-and-paginate-nested-object-list/279078 "2021-07-21T14:20:02Z")
Hello everybody, I have an index that contains documents with the following structure. ///SHOWS INDEX { "\_id", "artists":\[ -----\> NESTED OBJECT LIST { "id": "1", "name": "text" }, { "id": "2", "… --- ## [Multiple field names into single field name in elasticsearch](https://discuss.elastic.co/t/multiple-field-names-into-single-field-name-in-elasticsearch/279237)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 2:05pm UTC](https://discuss.elastic.co/t/multiple-field-names-into-single-field-name-in-elasticsearch/279237 "2021-07-21T14:05:29Z")
Hi all, I'm working on a project where we need to a field to read multiple field names as same field name. Is there a way where we can configure multiple field names into one field using some method? For example, we h… --- ## [Elasticsearch ingest pipeline - not extract data passed from filebeat](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-not-extract-data-passed-from-filebeat/279039)
**Author:** [@samiusan](https://discuss.elastic.co/u/samiusan)\ **Replies:** 12\ **Last updated:** [July 21, 2021, 1:55pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-not-extract-data-passed-from-filebeat/279039 "2021-07-21T13:55:19Z")
Hi, I'm slowly teaching myself the Elastic stack. Current project is attempting to ingest and modelling alerts from snort3 against the elastic common schema. I've run into an issue where an ingest pipeline is not correc… --- ## [Filter to select lines that contain a certain word which begins with "ANS" and which can end with a series of numbers or letters](https://discuss.elastic.co/t/filter-to-select-lines-that-contain-a-certain-word-which-begins-with-ans-and-which-can-end-with-a-series-of-numbers-or-letters/279259)
**Author:** [@boubou](https://discuss.elastic.co/u/boubou)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 1:31pm UTC](https://discuss.elastic.co/t/filter-to-select-lines-that-contain-a-certain-word-which-begins-with-ans-and-which-can-end-with-a-series-of-numbers-or-letters/279259 "2021-07-21T13:31:02Z")
Hello everybody, I would like to create a filter who select lines that contain a certain word which begins with "ANS" and which can end with a series of numbers or letters. For example, I have a Tag who contains these … --- ## [Install specific version of ES on homebrew](https://discuss.elastic.co/t/install-specific-version-of-es-on-homebrew/279234)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [July 21, 2021, 1:15pm UTC](https://discuss.elastic.co/t/install-specific-version-of-es-on-homebrew/279234 "2021-07-21T13:15:11Z")
Hi all, I'm working in a project where we are using previous version of Elasticsearch i.e 7.11.1 . I'm supposed to use same version. When I try to download Elasticsearch on my MAC using homebrew services, I download la… --- ## [Esrally running the same track by giving multiple laps not working](https://discuss.elastic.co/t/esrally-running-the-same-track-by-giving-multiple-laps-not-working/279035)
**Author:** [@Sameera\_De\_Silva](https://discuss.elastic.co/u/Sameera_De_Silva)\ **Replies:** 7\ **Last updated:** [July 21, 2021, 10:22am UTC](https://discuss.elastic.co/t/esrally-running-the-same-track-by-giving-multiple-laps-not-working/279035 "2021-07-21T10:22:11Z")
I want to run the same track repeatedly in a loop , because I want to do the benchmark performance testing for 3 hours. When I ran without lap count, it get completed within 30 minutes. However, even when I ran with… --- ## [Mapper\_parsing\_exception when trying to append object to array](https://discuss.elastic.co/t/mapper-parsing-exception-when-trying-to-append-object-to-array/279071)
**Author:** [@sandbender](https://discuss.elastic.co/u/sandbender)\ **Replies:** 5\ **Last updated:** [July 21, 2021, 9:55am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-when-trying-to-append-object-to-array/279071 "2021-07-21T09:55:25Z")
Hello, I'm having trouble to append objects resulting from an enrich processor to a field, so that I'm ending up with an array of objects. This question seems to have been asked a lot but still I couldn't make it work s… --- ## [How to search \\t \\r \\n in elasticsearch?](https://discuss.elastic.co/t/how-to-search-t-r-n-in-elasticsearch/278984)
**Author:** [@MarvinLiu](https://discuss.elastic.co/u/MarvinLiu)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 9:14am UTC](https://discuss.elastic.co/t/how-to-search-t-r-n-in-elasticsearch/278984 "2021-07-19T09:14:23Z")
I want to search \\t \\r \\n in my doc, how to input in query string syntax. It seems "\\n" can work , "\\n","\\n" not work , Is there any other choises? POST /test6/\_doc/2 { "id": 1002, "name": "test1", "desc"… --- ## [CCR user permission issue. action \[cluster:admin/settings/update\] is unauthorized for user \[my-certificate-cn\]](https://discuss.elastic.co/t/ccr-user-permission-issue-action-cluster-admin-settings-update-is-unauthorized-for-user-my-certificate-cn/279055)
**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\ **Replies:** 4\ **Last updated:** [July 21, 2021, 7:35am UTC](https://discuss.elastic.co/t/ccr-user-permission-issue-action-cluster-admin-settings-update-is-unauthorized-for-user-my-certificate-cn/279055 "2021-07-21T07:35:49Z")
I have deployed Elasticsearch 7.7.1. I have created certificate which includes CN=my-certificate-cn and configured transport layer with it. I have created two roles - ccr\_leader and ccr\_follower in accordance with the d… --- ## [Elastic search Data fetch](https://discuss.elastic.co/t/elastic-search-data-fetch/279231)
**Author:** [@Hamendra\_Sunthwal](https://discuss.elastic.co/u/Hamendra_Sunthwal)\ **Replies:** 0\ **Last updated:** [July 21, 2021, 7:19am UTC](https://discuss.elastic.co/t/elastic-search-data-fetch/279231 "2021-07-21T07:19:07Z")
I am using below script to fetch data from Elastic search, I want to know how the data is being fetched from Magento to ES. This script get me product details in Output, but for some product the data is incorrect i need… --- ## [\[ES v7.5.1\] Speed up snapshot restore from GCS Snapshot Repository](https://discuss.elastic.co/t/es-v7-5-1-speed-up-snapshot-restore-from-gcs-snapshot-repository/278974)
**Author:** [@amitsh728](https://discuss.elastic.co/u/amitsh728)\ **Replies:** 8\ **Last updated:** [July 21, 2021, 5:54am UTC](https://discuss.elastic.co/t/es-v7-5-1-speed-up-snapshot-restore-from-gcs-snapshot-repository/278974 "2021-07-21T05:54:44Z")
Hello, We are trying to speed up our snapshot restoration speed in our ES cluster hosted on GCP Compute instances. TL;DR: Current Performance: 56 MBps per data node Infra Capable of 500 MBps We want to improve our re… --- ## [Date processor error](https://discuss.elastic.co/t/date-processor-error/279173)
**Author:** [@omurad](https://discuss.elastic.co/u/omurad)\ **Replies:** 3\ **Last updated:** [July 20, 2021, 9:36pm UTC](https://discuss.elastic.co/t/date-processor-error/279173 "2021-07-20T21:36:04Z")
I'm looking to parse the following date using the "Date" ingest processor 20/Jul/2021:07:28:46 --0400 I tried doing so using these formats dd/MMM/yyyy:HH:mm:ss -ZZZZZ dd/MMM/yyyy:HH:mm:ss '-'ZZZZZ However, I get the… --- ## [Watcher is not returning any hit and returns Null](https://discuss.elastic.co/t/watcher-is-not-returning-any-hit-and-returns-null/278676)
**Author:** [@Mojahid\_Ahmad](https://discuss.elastic.co/u/Mojahid_Ahmad)\ **Replies:** 7\ **Last updated:** [July 20, 2021, 7:25pm UTC](https://discuss.elastic.co/t/watcher-is-not-returning-any-hit-and-returns-null/278676 "2021-07-20T19:25:45Z")
Hi, I created one watcher but the condition is not getting successful and returning hit =0, and finally, it is returning a null value. When I built the dashboard using the same condition value is getting displayed there,… --- ## [Advice on Scaling writes](https://discuss.elastic.co/t/advice-on-scaling-writes/278518)
**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 22\ **Last updated:** [July 20, 2021, 3:29pm UTC](https://discuss.elastic.co/t/advice-on-scaling-writes/278518 "2021-07-20T15:29:13Z")
Hi, Our systems are generating CSV files containing all events that happened during the past hour. There are about 15.000 CSV files generated every hour, containing thousand of events each. A quick estimate would mean… --- ## [Edge N-gram at word level](https://discuss.elastic.co/t/edge-n-gram-at-word-level/279166)
**Author:** [@mmoreram](https://discuss.elastic.co/u/mmoreram)\ **Replies:** 2\ **Last updated:** [July 20, 2021, 1:47pm UTC](https://discuss.elastic.co/t/edge-n-gram-at-word-level/279166 "2021-07-20T13:47:38Z")
In Elasticsearch, edge n-gram divides a word into progressive tokens, starting from the begining, and adding a new letter per each token. Is there a way to add the same logic at word level? "This is a sentence" \["T… --- ## [Wildcard search only returns partial results](https://discuss.elastic.co/t/wildcard-search-only-returns-partial-results/279069)
**Author:** [@muns](https://discuss.elastic.co/u/muns)\ **Replies:** 4\ **Last updated:** [July 20, 2021, 12:54pm UTC](https://discuss.elastic.co/t/wildcard-search-only-returns-partial-results/279069 "2021-07-20T12:54:03Z")
Hello, i have the following NEST query and my issue is that the wildcard search is only performed on the last field, "title". It ignores the author and subject fields, even though it should be returning data because ther… --- ## [IO Reactor errors closing connection](https://discuss.elastic.co/t/io-reactor-errors-closing-connection/279148)
**Author:** [@Mariusz\_Pala](https://discuss.elastic.co/u/Mariusz_Pala)\ **Replies:** 11\ **Last updated:** [July 20, 2021, 12:18pm UTC](https://discuss.elastic.co/t/io-reactor-errors-closing-connection/279148 "2021-07-20T12:18:22Z")
Hi, I asked ES about the IOReactor connection issues(Request cannot be executed; I/O reactor status: STOPPED) and as per an answer in my ticket RestHighLevelClient disconnection issues · Issue #75364 · elastic/elasticse… --- ## [ES 2.4 GC time % unmanageable. Any tip?](https://discuss.elastic.co/t/es-2-4-gc-time-unmanageable-any-tip/279124)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 4\ **Last updated:** [July 20, 2021, 9:37am UTC](https://discuss.elastic.co/t/es-2-4-gc-time-unmanageable-any-tip/279124 "2021-07-20T09:37:04Z")
Hey there, I am trying to find the sweet spot for my application. I got these results: DATA nodes 8cpu-32gb ram with 16gb heap size and 8gb young heap size GC time % is generally around 5% (this is in case the limit) … --- ## [Getting "too many scroll contexts" when re-indexing](https://discuss.elastic.co/t/getting-too-many-scroll-contexts-when-re-indexing/279065)
**Author:** [@malsioufi](https://discuss.elastic.co/u/malsioufi)\ **Replies:** 3\ **Last updated:** [July 20, 2021, 8:47am UTC](https://discuss.elastic.co/t/getting-too-many-scroll-contexts-when-re-indexing/279065 "2021-07-20T08:47:46Z")
Hi, I have a task where I need to sort by the field "\_id" I knew that I should not use this field for sorting and that instead it is better to add an extra field the has the same value as \_id and then I can use that fie… --- ## [Can an Elasticsearch Search plugin filter results post-search?](https://discuss.elastic.co/t/can-an-elasticsearch-search-plugin-filter-results-post-search/278503)
**Author:** [@Dor\_Levi](https://discuss.elastic.co/u/Dor_Levi)\ **Replies:** 4\ **Last updated:** [July 20, 2021, 6:42am UTC](https://discuss.elastic.co/t/can-an-elasticsearch-search-plugin-filter-results-post-search/278503 "2021-07-20T06:42:42Z")
Hi, I'm trying to figure out a way to have the default search done by ES to filter out some of the hits after getting back from the core engine, before passing them as a result to the rest caller. The actual filtering … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=604) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=606)