# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=628 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 629 --- ## [Best proxy for Elasticsearch rate limiting](https://discuss.elastic.co/t/best-proxy-for-elasticsearch-rate-limiting/275664)
**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\ **Replies:** 2\ **Last updated:** [June 15, 2021, 3:54am UTC](https://discuss.elastic.co/t/best-proxy-for-elasticsearch-rate-limiting/275664 "2021-06-15T03:54:01Z")
Hi Is there rate limiting feature for elasticsearch basic license? Not the cloud version If not, what is the best way to perform rate limiting on users' query? My elasticsearch cluster have TLS authentication setup an… --- ## [Note able use bool followed by must followed by should](https://discuss.elastic.co/t/note-able-use-bool-followed-by-must-followed-by-should/275865)
**Author:** [@Anurag\_Mishra2](https://discuss.elastic.co/u/Anurag_Mishra2)\ **Replies:** 1\ **Last updated:** [June 15, 2021, 3:36am UTC](https://discuss.elastic.co/t/note-able-use-bool-followed-by-must-followed-by-should/275865 "2021-06-15T03:36:19Z")
Hi I am trying to search but not getting desired result. I have condition like this detail '--\>' account '--\>' List '--\>' credential '--\>' active also detail '--\>' List '--\>' List '--\> 'credential '--\>' active if(de… --- ## [Problems with Part 4 of the Crash Course](https://discuss.elastic.co/t/problems-with-part-4-of-the-crash-course/275888)
**Author:** [@alejohnny](https://discuss.elastic.co/u/alejohnny)\ **Replies:** 6\ **Last updated:** [June 15, 2021, 1:25am UTC](https://discuss.elastic.co/t/problems-with-part-4-of-the-crash-course/275888 "2021-06-15T01:25:15Z")
Hi, I'm new to Elasticsearch and I'm starting with it watching the Crash Course, and in the part 4, when I run the first command to setup data within Elasticsearch, I'm returing a error 400 and couldn't figure out whats … --- ## [If query contains \*word\* then the document must contain \*word\*](https://discuss.elastic.co/t/if-query-contains-word-then-the-document-must-contain-word/275911)
**Author:** [@Gabriel\_Nicolae](https://discuss.elastic.co/u/Gabriel_Nicolae)\ **Replies:** 1\ **Last updated:** [June 15, 2021, 12:46am UTC](https://discuss.elastic.co/t/if-query-contains-word-then-the-document-must-contain-word/275911 "2021-06-15T00:46:09Z")
Hi, I am trying to search on how to do the next thing: if my query contains a certain word, let's say "covid" then the documents returned must also contain "covid". Is there a way to do it directly in elasticsearch? The … --- ## [Failed to load plugin class \[org.elasticsearch.xpack.security.Security](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-security-security/275701)
**Author:** [@hershkoy](https://discuss.elastic.co/u/hershkoy)\ **Replies:** 2\ **Last updated:** [June 14, 2021, 11:40pm UTC](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-security-security/275701 "2021-06-14T23:40:27Z")
Hi, I am completely new to elastic, trying to use it inside a magento store on kubernetes. (It worked with 6.8.5). I tried to upgrade to 7.9.0, and I am getting an error: failed to load plugin class \[org.elasticsearch… --- ## [Why does heap memory increase?](https://discuss.elastic.co/t/why-does-heap-memory-increase/275768)
**Author:** [@jaeho](https://discuss.elastic.co/u/jaeho)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 9:49pm UTC](https://discuss.elastic.co/t/why-does-heap-memory-increase/275768 "2021-06-14T21:49:03Z")
Hello. I am curious about the increase in memory usage even though the query traffic is low and the number of documents is small, and I would like expert opinions on how to tune the GC. \[Servers (Nodes)\] Total: 4 Nod… --- ## [High disk.used with low disk.indices](https://discuss.elastic.co/t/high-disk-used-with-low-disk-indices/275771)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 9:46pm UTC](https://discuss.elastic.co/t/high-disk-used-with-low-disk-indices/275771 "2021-06-14T21:46:40Z")
I am trying to figure out what is consuming disk space on my hot data node. When I run GET \_cat/allocation, the output shows that disk.indices is only consuming 80.4gb, whereas disk.used is 648.4gb. On my other hot data … --- ## [Limit of total fields \[1000\] has been exceeded- elasticsearch\_metrics](https://discuss.elastic.co/t/limit-of-total-fields-1000-has-been-exceeded-elasticsearch-metrics/275848)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 0\ **Last updated:** [June 14, 2021, 2:05pm UTC](https://discuss.elastic.co/t/limit-of-total-fields-1000-has-been-exceeded-elasticsearch-metrics/275848 "2021-06-14T14:05:42Z")
Im attempting to reroute elasticsearch metrics (via metricbeat) from my primary cluster to a monitoring cluster. Monitoring cluster is running 7.13.1 on Centos 8 - main is 7.11.1. Hitting this error when I restart metri… --- ## [Log reg scoring with nested fields, use case for multiply score in should clauses?](https://discuss.elastic.co/t/log-reg-scoring-with-nested-fields-use-case-for-multiply-score-in-should-clauses/275028)
**Author:** [@nihaux](https://discuss.elastic.co/u/nihaux)\ **Replies:** 3\ **Last updated:** [June 14, 2021, 9:25pm UTC](https://discuss.elastic.co/t/log-reg-scoring-with-nested-fields-use-case-for-multiply-score-in-should-clauses/275028 "2021-06-14T21:25:40Z")
Hello everyone this might be a semi-long post. My use case is the following. We have a stack that makes use of a logistic regression on different features in python to rank documents. I am POCing a version on ES to be… --- ## [How to send proxmox logs to ELK](https://discuss.elastic.co/t/how-to-send-proxmox-logs-to-elk/275153)
**Author:** [@jubin03](https://discuss.elastic.co/u/jubin03)\ **Replies:** 3\ **Last updated:** [June 14, 2021, 9:03pm UTC](https://discuss.elastic.co/t/how-to-send-proxmox-logs-to-elk/275153 "2021-06-14T21:03:10Z")
How can we configure proxmox logs to ELK. I have already using Grok for pfsense logs. Is there any way to configure log settings on proxmox --- ## [Kibana DevTools autocomplete refresh cause circuit breaker\\ OOM on coordinators nodes](https://discuss.elastic.co/t/kibana-devtools-autocomplete-refresh-cause-circuit-breaker-oom-on-coordinators-nodes/275723)
**Author:** [@val16384](https://discuss.elastic.co/u/val16384)\ **Replies:** 7\ **Last updated:** [June 14, 2021, 8:19pm UTC](https://discuss.elastic.co/t/kibana-devtools-autocomplete-refresh-cause-circuit-breaker-oom-on-coordinators-nodes/275723 "2021-06-14T20:19:21Z")
Hey guys, We have issue with constantly increasing of Old gen part in JVM heap on coordinator nodes till OOM. As I can understand the issue - memory leaking\\OOM precisely correlated with requests to ES that gene… --- ## [Elastic Search 7.13.1 Cluster bootstrapping error](https://discuss.elastic.co/t/elastic-search-7-13-1-cluster-bootstrapping-error/275858)
**Author:** [@prithvirajsivarajan](https://discuss.elastic.co/u/prithvirajsivarajan)\ **Replies:** 3\ **Last updated:** [June 14, 2021, 5:19pm UTC](https://discuss.elastic.co/t/elastic-search-7-13-1-cluster-bootstrapping-error/275858 "2021-06-14T17:19:01Z")
I configured two nodes on two Linux VMs and it is working. Currently trying to setup a third node on the cluster in my local windows machine. Getting the errors below \[node-3\] failed to join {node-1}{3eMmu1kVQtuB95A1KX… --- ## [Unable to replicate to local Harbor registry](https://discuss.elastic.co/t/unable-to-replicate-to-local-harbor-registry/275869)
**Author:** [@JulioHM](https://discuss.elastic.co/u/JulioHM)\ **Replies:** 0\ **Last updated:** [June 14, 2021, 4:00pm UTC](https://discuss.elastic.co/t/unable-to-replicate-to-local-harbor-registry/275869 "2021-06-14T16:00:10Z")
We are trying to replicate some images from the official docker.elastic.co into our local Harbor registry. But we get a 401 unauthorized message from docker.elastic.co. failed to fetch artifacts: failed to fetch artifac… --- ## [Elasticsearch cluster performance looks not enough?](https://discuss.elastic.co/t/elasticsearch-cluster-performance-looks-not-enough/274498)
**Author:** [@arvanMalian](https://discuss.elastic.co/u/arvanMalian)\ **Replies:** 4\ **Last updated:** [June 14, 2021, 3:44pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-performance-looks-not-enough/274498 "2021-06-14T15:44:46Z")
Hi, I'm using elasticserach stack version 7.10.1 for all components. on my elasticsearch cluster, I have daily about 108 870 033 documents. filter on discovery section (24h) 82 620 778 hits filebeat 26 249 255 hits… --- ## [Watcher with multiple Trigger Schedules](https://discuss.elastic.co/t/watcher-with-multiple-trigger-schedules/275812)
**Author:** [@G.M](https://discuss.elastic.co/u/G.M)\ **Replies:** 2\ **Last updated:** [June 14, 2021, 2:46pm UTC](https://discuss.elastic.co/t/watcher-with-multiple-trigger-schedules/275812 "2021-06-14T14:46:16Z")
I am currently setting up watchers for my Elasticsearch indices. When trying to setup the trigger schedule, I tried to add multiple different schedules, e.g. a weekly schedule and a monthly schedule. However, after savin… --- ## [How to set the LIMIT with FROM and TO in ES Sql query?](https://discuss.elastic.co/t/how-to-set-the-limit-with-from-and-to-in-es-sql-query/275559)
**Author:** [@Resington\_R](https://discuss.elastic.co/u/Resington_R)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 1:58pm UTC](https://discuss.elastic.co/t/how-to-set-the-limit-with-from-and-to-in-es-sql-query/275559 "2021-06-14T13:58:33Z")
Hi... Can anyone please tell me how to set the Limit with FROM and TO. The below query returns more than 10 thousand records, where I would like to Paginate 50 records in a page. Is there any possibility to set limit wi… --- ## [Percentage of total calculation](https://discuss.elastic.co/t/percentage-of-total-calculation/275661)
**Author:** [@didiViking](https://discuss.elastic.co/u/didiViking)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 1:51pm UTC](https://discuss.elastic.co/t/percentage-of-total-calculation/275661 "2021-06-14T13:51:08Z")
Hi there, I'm filtering the requests by request\_length in order to get specific categories (request\_length between 0 and 3mb etc). The next step is to calculate how much of the total (in percentage) that specific catego… --- ## [Elasticsearch aggregation from springboot](https://discuss.elastic.co/t/elasticsearch-aggregation-from-springboot/275689)
**Author:** [@saiteja](https://discuss.elastic.co/u/saiteja)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 1:48pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-from-springboot/275689 "2021-06-14T13:48:46Z")
Hello, I am trying to get all the values for a filed with count using Aggregation Here is my code Query searchQuery = new NativeSearchQueryBuilder() .withQuery(QueryBuilders.matchAllQuery()) … --- ## [Connecting to S3 Unable to execute HTTP request: PKIX path building failed](https://discuss.elastic.co/t/connecting-to-s3-unable-to-execute-http-request-pkix-path-building-failed/275827)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 12:20pm UTC](https://discuss.elastic.co/t/connecting-to-s3-unable-to-execute-http-request-pkix-path-building-failed/275827 "2021-06-14T12:20:43Z")
Dear team, I have imported certificate for the S3 custom bucket to the java cacerts. But still got a following issue on verifying repository: { "error": { "root\_cause": \[ { "type": "repository\_veri… --- ## [Getting the value of a doc field inside FilterScript plugin](https://discuss.elastic.co/t/getting-the-value-of-a-doc-field-inside-filterscript-plugin/275819)
**Author:** [@lsena](https://discuss.elastic.co/u/lsena)\ **Replies:** 0\ **Last updated:** [June 14, 2021, 10:20am UTC](https://discuss.elastic.co/t/getting-the-value-of-a-doc-field-inside-filterscript-plugin/275819 "2021-06-14T10:20:49Z")
Hi! I need to fetch the value of the \_id (or other doc fields). Currently, I'm doing it like this: Is this the proper way to do it? It feels wrong. Especially fetching \_id since it even throws a warning about the dep… --- ## [ElasticSearch escape special character](https://discuss.elastic.co/t/elasticsearch-escape-special-character/275765)
**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\ **Replies:** 3\ **Last updated:** [June 14, 2021, 9:34am UTC](https://discuss.elastic.co/t/elasticsearch-escape-special-character/275765 "2021-06-14T09:34:24Z")
How I escape Unicode characters using a query\_string query? For example, my documents consist of the following data: { "title":"Sachin$tendular" } I am using the query\_string query in the following way: { … --- ## [Can we restrict users to read last n days of data](https://discuss.elastic.co/t/can-we-restrict-users-to-read-last-n-days-of-data/275804)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 5\ **Last updated:** [June 14, 2021, 9:27am UTC](https://discuss.elastic.co/t/can-we-restrict-users-to-read-last-n-days-of-data/275804 "2021-06-14T09:27:15Z")
we are running Elasticsearch 7.9.0 with basic liecense and we need to put some restriction on users to read the document not more than 2 days. is it possible to add range query in roles? --- ## [ES NEST - How to Create an index and Bulk index dynamic objects with geometry (geo\_point or geo\_shape)?](https://discuss.elastic.co/t/es-nest-how-to-create-an-index-and-bulk-index-dynamic-objects-with-geometry-geo-point-or-geo-shape/275608)
**Author:** [@Florin\_Virdol](https://discuss.elastic.co/u/Florin_Virdol)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 8:59am UTC](https://discuss.elastic.co/t/es-nest-how-to-create-an-index-and-bulk-index-dynamic-objects-with-geometry-geo-point-or-geo-shape/275608 "2021-06-14T08:59:30Z")
Hi, guys! I have a Dataset for which I don't know or have the type in advance, nor the number of properties or their type. On execution, I obtain for that Dataset a DatasetSchema that contain the names, types and some … --- ## [Undo index to searchable snapshot conversion](https://discuss.elastic.co/t/undo-index-to-searchable-snapshot-conversion/275073)
**Author:** [@alexs1](https://discuss.elastic.co/u/alexs1)\ **Replies:** 7\ **Last updated:** [June 14, 2021, 8:44am UTC](https://discuss.elastic.co/t/undo-index-to-searchable-snapshot-conversion/275073 "2021-06-14T08:44:29Z")
Hello My question is: Once I checked the searchable snapshot in the ILM cold phase, the index settings, ilm settings and more have changed (as expected) Is there a way to "undo" this step, and return it to be a regul… --- ## [ILM issue](https://discuss.elastic.co/t/ilm-issue/274507)
**Author:** [@Saishantan\_goli](https://discuss.elastic.co/u/Saishantan_goli)\ **Replies:** 3\ **Last updated:** [June 14, 2021, 8:25am UTC](https://discuss.elastic.co/t/ilm-issue/274507 "2021-06-14T08:25:31Z")
Hi, I am trying to set up an ILM policy for the data I am having in my ES. I am getting the below exception. illegal\_argument\_exception: index name \[logstash\] does not match pattern '^.\*-\\d+$'. when I do GET /\_alias… --- ## [Created new index which is supposed to receive and collect logs from our endpoint solution however on Kibana it appears to list all the other index logs but expected?](https://discuss.elastic.co/t/created-new-index-which-is-supposed-to-receive-and-collect-logs-from-our-endpoint-solution-however-on-kibana-it-appears-to-list-all-the-other-index-logs-but-expected/275514)
**Author:** [@devashishsingh](https://discuss.elastic.co/u/devashishsingh)\ **Replies:** 2\ **Last updated:** [June 14, 2021, 7:57am UTC](https://discuss.elastic.co/t/created-new-index-which-is-supposed-to-receive-and-collect-logs-from-our-endpoint-solution-however-on-kibana-it-appears-to-list-all-the-other-index-logs-but-expected/275514 "2021-06-14T07:57:51Z")
Hello Friends, I have created a new logstash conf file for a new TCP syslogs collector and defined to send them to a new index. However on kibana the index pattern seems to have all but endpoint logs? Have I missed ay s… --- ## [Loadtesting on elasticsearch](https://discuss.elastic.co/t/loadtesting-on-elasticsearch/275788)
**Author:** [@purushothamkdr143](https://discuss.elastic.co/u/purushothamkdr143)\ **Replies:** 2\ **Last updated:** [June 14, 2021, 6:33am UTC](https://discuss.elastic.co/t/loadtesting-on-elasticsearch/275788 "2021-06-14T06:33:19Z")
Hi All, I am new to elasticsearch. usecase is to do loadtest on Elasticsearch cluster so that KPI can be monitored(for ex: documents indexed per second, repilcation etc etc). What are the available solutions for this? --- ## [Warnings shown in Rally benchmarking for bulk request](https://discuss.elastic.co/t/warnings-shown-in-rally-benchmarking-for-bulk-request/275649)
**Author:** [@DEEPTHI\_SONA\_G](https://discuss.elastic.co/u/DEEPTHI_SONA_G)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 6:03am UTC](https://discuss.elastic.co/t/warnings-shown-in-rally-benchmarking-for-bulk-request/275649 "2021-06-14T06:03:04Z")
\[WARNING\] merges\_total\_time is 4362 ms indicating that the cluster is not in a defined clean state. Recorded index time metrics may be misleading. \[WARNING\] indexing\_total\_time is 423514 ms indicating that the cluster is… --- ## [Problems getting new node to join cluster](https://discuss.elastic.co/t/problems-getting-new-node-to-join-cluster/275776)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 5:58am UTC](https://discuss.elastic.co/t/problems-getting-new-node-to-join-cluster/275776 "2021-06-14T05:58:42Z")
I am trying to add a couple of nodes to an existing cluster of 3 nodes. These "new" nodes have been in the cluster in the past but were taken out for "refurbishment" and now I am having issues getting them back in. see… --- ## [Search using misspelled querys?](https://discuss.elastic.co/t/search-using-misspelled-querys/275783)
**Author:** [@Sebastian\_Marroquin](https://discuss.elastic.co/u/Sebastian_Marroquin)\ **Replies:** 0\ **Last updated:** [June 14, 2021, 4:18am UTC](https://discuss.elastic.co/t/search-using-misspelled-querys/275783 "2021-06-14T04:18:46Z")
Hi there, I'm working with elasticsearch version 6.2.4 along with the MEN stack. I was wondering if there is any way for elasticsearch to do searches even when the query is misspelled. I'll put it in Spanish to see if I … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=627) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=629)