# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=658

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 659

---

## [Making cURL PUT, POST and DELETE requests?](https://discuss.elastic.co/t/making-curl-put-post-and-delete-requests/271235)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 3\
**Last updated:** [April 26, 2021, 10:46am UTC](https://discuss.elastic.co/t/making-curl-put-post-and-delete-requests/271235 "2021-04-26T10:46:44Z")

</div>

Sometimes Kibana times out when making certain large requests so I think I am forced to do it thru CLI. Issue is that I do not know how to currently make the sintaxis. I already generated a api key. For the sake of a e…

---

## [Adding additional weight without matching](https://discuss.elastic.co/t/adding-additional-weight-without-matching/270865)

<div class="topic-metadata">

**Author:** [@Silas\_Hansen](https://discuss.elastic.co/u/Silas_Hansen)\
**Replies:** 4\
**Last updated:** [April 26, 2021, 10:07am UTC](https://discuss.elastic.co/t/adding-additional-weight-without-matching/270865 "2021-04-26T10:07:14Z")

</div>

I want to be able to Match a subset of the index with a query\_string query. Add additional weight to documents that match a set of post-evaluated criterias. Example: Let's say I have these two documents: \[ { …

---

## [Shard allocation awareness implementation in elasticsarch](https://discuss.elastic.co/t/shard-allocation-awareness-implementation-in-elasticsarch/271193)

<div class="topic-metadata">

**Author:** [@722826c085cfc824006d](https://discuss.elastic.co/u/722826c085cfc824006d)\
**Replies:** 3\
**Last updated:** [April 26, 2021, 9:55am UTC](https://discuss.elastic.co/t/shard-allocation-awareness-implementation-in-elasticsarch/271193 "2021-04-26T09:55:25Z")

</div>

we are using open source elasticsearch 5.6.10 from last 2 years in AWS cloud, but didn't implement shard allocation awareness in the clusters. Since the lack of shard allocation of awareness, the shards are distributed i…

---

## [Logging DELETE query in logs](https://discuss.elastic.co/t/logging-delete-query-in-logs/271229)

<div class="topic-metadata">

**Author:** [@Kunal\_Salvi](https://discuss.elastic.co/u/Kunal_Salvi)\
**Replies:** 0\
**Last updated:** [April 26, 2021, 8:07am UTC](https://discuss.elastic.co/t/logging-delete-query-in-logs/271229 "2021-04-26T08:07:40Z")

</div>

Hello Elasticsearch team, Is there any place where Elasticsearch logs DELETE query action. Is any feature in BASIC license where I can trace the DELETE action happing on Elasticsearch? I understand the audit events can …

---

## [Missing authentication credentials for REST request](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/271215)

<div class="topic-metadata">

**Author:** [@jojbapsaekki](https://discuss.elastic.co/u/jojbapsaekki)\
**Replies:** 1\
**Last updated:** [April 26, 2021, 5:51am UTC](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/271215 "2021-04-26T05:51:17Z")

</div>

xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification\_mode: certificate xpack.security.transport.ssl.keystore.path: elastic-certificates.p12 xpack.security.tran…

---

## [Watcher does not show results in the mail message](https://discuss.elastic.co/t/watcher-does-not-show-results-in-the-mail-message/271106)

<div class="topic-metadata">

**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\
**Replies:** 2\
**Last updated:** [April 26, 2021, 2:59am UTC](https://discuss.elastic.co/t/watcher-does-not-show-results-in-the-mail-message/271106 "2021-04-26T02:59:15Z")

</div>

Hello good day, I have a problem with the action of a watch, it does not show me the results in the email message it sends, I use {{ctx.payload.hits.total}} and also {{ctx.payload.aggregations.heartbeat\_count}} to show t…

---

## [Query about number of CPU cores](https://discuss.elastic.co/t/query-about-number-of-cpu-cores/271144)

<div class="topic-metadata">

**Author:** [@Yash\_Srivastava](https://discuss.elastic.co/u/Yash_Srivastava)\
**Replies:** 3\
**Last updated:** [April 25, 2021, 7:52pm UTC](https://discuss.elastic.co/t/query-about-number-of-cpu-cores/271144 "2021-04-25T19:52:44Z")

</div>

I want to know Number of cpu cores used in Elastic Cloud for IO/Intensive and Compute-Intensive hardware profiles for 4 GB RAM setup. Any idea?

---

## [Is using "filter" inside "aggs" more efficient than "query" at the top level of an aggregation body?](https://discuss.elastic.co/t/is-using-filter-inside-aggs-more-efficient-than-query-at-the-top-level-of-an-aggregation-body/271153)

<div class="topic-metadata">

**Author:** [@mattwelke](https://discuss.elastic.co/u/mattwelke)\
**Replies:** 5\
**Last updated:** [April 25, 2021, 1:02pm UTC](https://discuss.elastic.co/t/is-using-filter-inside-aggs-more-efficient-than-query-at-the-top-level-of-an-aggregation-body/271153 "2021-04-25T13:02:02Z")

</div>

I'm working in a legacy code base and I think I've uncovered an inefficient way of doing a filter aggregation based on what I read in the docs. These are my assumptions: Using filters to eliminate documents from searc…

---

## [Non-nested query on copy\_to fields performs worse then a nested query](https://discuss.elastic.co/t/non-nested-query-on-copy-to-fields-performs-worse-then-a-nested-query/271186)

<div class="topic-metadata">

**Author:** [@Ron\_lusha](https://discuss.elastic.co/u/Ron_lusha)\
**Replies:** 0\
**Last updated:** [April 25, 2021, 11:50am UTC](https://discuss.elastic.co/t/non-nested-query-on-copy-to-fields-performs-worse-then-a-nested-query/271186 "2021-04-25T11:50:37Z")

</div>

Our service uses a lot of nested queries/data, in order to improve our response time I tried to rewrite our heaviest query and use copy\_to to copy the fields I need from inside the nested docs to the root doc and query t…

---

## [Aggregation on latest n records](https://discuss.elastic.co/t/aggregation-on-latest-n-records/271169)

<div class="topic-metadata">

**Author:** [@behzad\_dadashpour](https://discuss.elastic.co/u/behzad_dadashpour)\
**Replies:** 2\
**Last updated:** [April 25, 2021, 9:32am UTC](https://discuss.elastic.co/t/aggregation-on-latest-n-records/271169 "2021-04-25T09:32:14Z")

</div>

Hi Is there any way to do aggregation on latest N records? this solution didn't work { "query": {...}, "size": N, "order": ..., "aggs": { .... } } for more detail: I want to get last 10 records …

---

## [How to delete by query](https://discuss.elastic.co/t/how-to-delete-by-query/271170)

<div class="topic-metadata">

**Author:** [@Champion\_Xie](https://discuss.elastic.co/u/Champion_Xie)\
**Replies:** 1\
**Last updated:** [April 25, 2021, 9:15am UTC](https://discuss.elastic.co/t/how-to-delete-by-query/271170 "2021-04-25T09:15:05Z")

</div>

how to delete by query current index\_name :logstash-2021.04.23 actually Data entered the index of the current timestamp because of index definition error. How to delete contain 2021.04.22 in the index(logstash-2021.04.…

---

## [Perform a clear cache operation with no significant change in memory](https://discuss.elastic.co/t/perform-a-clear-cache-operation-with-no-significant-change-in-memory/271165)

<div class="topic-metadata">

**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\
**Replies:** 4\
**Last updated:** [April 25, 2021, 9:10am UTC](https://discuss.elastic.co/t/perform-a-clear-cache-operation-with-no-significant-change-in-memory/271165 "2021-04-25T09:10:55Z")

</div>

I executed the following request to clear the cache, but when I look at the percentage of memory used by the process on top, there is no change。What is the reason for this? curl -XPOST 'http://172.18.141.39:19200/\_cache…

---

## [How do you increase the GB storage without increasing the RAM and CPU. Is there a way?](https://discuss.elastic.co/t/how-do-you-increase-the-gb-storage-without-increasing-the-ram-and-cpu-is-there-a-way/271146)

<div class="topic-metadata">

**Author:** [@Yash\_Srivastava](https://discuss.elastic.co/u/Yash_Srivastava)\
**Replies:** 3\
**Last updated:** [April 24, 2021, 7:41pm UTC](https://discuss.elastic.co/t/how-do-you-increase-the-gb-storage-without-increasing-the-ram-and-cpu-is-there-a-way/271146 "2021-04-24T19:41:56Z")

</div>

how do you increase the GB storage without increasing the RAM and CPU. Is there a way?

---

## [Get previous docs and following docs at innerHits](https://discuss.elastic.co/t/get-previous-docs-and-following-docs-at-innerhits/271156)

<div class="topic-metadata">

**Author:** [@Benjamin\_S](https://discuss.elastic.co/u/Benjamin_S)\
**Replies:** 0\
**Last updated:** [April 24, 2021, 4:29pm UTC](https://discuss.elastic.co/t/get-previous-docs-and-following-docs-at-innerhits/271156 "2021-04-24T16:29:44Z")

</div>

Hello, I have an index for comments. Comments can also get sub-comments. If I search my InnerHits query for the most popular one (most likes etc). Can I somehow get the information at which position this comment is. So …

---

## [Data transfer rates costs in ElasticCloud direct purchased and Azure Marketplace enabled purchase](https://discuss.elastic.co/t/data-transfer-rates-costs-in-elasticcloud-direct-purchased-and-azure-marketplace-enabled-purchase/271145)

<div class="topic-metadata">

**Author:** [@Yash\_Srivastava](https://discuss.elastic.co/u/Yash_Srivastava)\
**Replies:** 1\
**Last updated:** [April 24, 2021, 3:10pm UTC](https://discuss.elastic.co/t/data-transfer-rates-costs-in-elasticcloud-direct-purchased-and-azure-marketplace-enabled-purchase/271145 "2021-04-24T15:10:17Z")

</div>

data transfer rates costs in ElasticCloud direct purchased and Azure Marketplace enabled purchase

---

## [java.io.StreamCorruptedException: invalid internal transport message format](https://discuss.elastic.co/t/java-io-streamcorruptedexception-invalid-internal-transport-message-format/269899)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 6\
**Last updated:** [April 24, 2021, 9:21am UTC](https://discuss.elastic.co/t/java-io-streamcorruptedexception-invalid-internal-transport-message-format/269899 "2021-04-24T09:21:45Z")

</div>

Hi all, I have a three node ES cluster with IP (10.0.1.10,10.0.1.11,10.0.1.12), following WARN has been found in the log. in the following log, a remote address has been mentioned which is not a member of cluster (10.0…

---

## [Can not add a node](https://discuss.elastic.co/t/can-not-add-a-node/271131)

<div class="topic-metadata">

**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Replies:** 2\
**Last updated:** [April 24, 2021, 9:18am UTC](https://discuss.elastic.co/t/can-not-add-a-node/271131 "2021-04-24T09:18:24Z")

</div>

Hi there Unfortunately, I can not add another node to my single node cluster. The elasticsearch.yml of master node is: cluster.name: logServer node.name: elk1 node.master: true node.data: true path.data: /var/lib/elas…

---

## [Watcher that counts the documents that arrive to an index in kibana](https://discuss.elastic.co/t/watcher-that-counts-the-documents-that-arrive-to-an-index-in-kibana/270609)

<div class="topic-metadata">

**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\
**Replies:** 45\
**Last updated:** [April 24, 2021, 2:06am UTC](https://discuss.elastic.co/t/watcher-that-counts-the-documents-that-arrive-to-an-index-in-kibana/270609 "2021-04-24T02:06:21Z")

</div>

I have a problem with this watcher, I need to get the number of samples of an index, that is, the count of the documents sent by heartbeat to kibana and send an email every day with the number of documents that arrived t…

---

## [How to register a new S3 bucket as a snapshot repository to my existing elastic cloud?](https://discuss.elastic.co/t/how-to-register-a-new-s3-bucket-as-a-snapshot-repository-to-my-existing-elastic-cloud/271093)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 3\
**Last updated:** [April 23, 2021, 10:18pm UTC](https://discuss.elastic.co/t/how-to-register-a-new-s3-bucket-as-a-snapshot-repository-to-my-existing-elastic-cloud/271093 "2021-04-23T22:18:18Z")

</div>

Hello, I want to use my own S3 bucket as a snapshot repository in case we sometime decide to not use elastic cloud for some reason we don't loose the data ingested until that moment. Is there a way to easily add one? In…

---

## [Set up minimal security elasticsearch failed](https://discuss.elastic.co/t/set-up-minimal-security-elasticsearch-failed/270356)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 15\
**Last updated:** [April 23, 2021, 9:36pm UTC](https://discuss.elastic.co/t/set-up-minimal-security-elasticsearch-failed/270356 "2021-04-23T21:36:08Z")

</div>

i try setup minimal security in here Set up minimal security for Elasticsearch | Elasticsearch Guide \[7.12\] | Elastic but still failed, and this the complete log i had. i will separate in 7 parts. please help why? \[20…

---

## [Change the certificates](https://discuss.elastic.co/t/change-the-certificates/268158)

<div class="topic-metadata">

**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\
**Replies:** 5\
**Last updated:** [April 23, 2021, 4:39pm UTC](https://discuss.elastic.co/t/change-the-certificates/268158 "2021-04-23T16:39:44Z")

</div>

Hello Team, I have an ELK stack running with hot warm architecture. Everything is fine until I was asked to add new nodes to the stack... How am I supposed to add new nodes and how can I create new certificates for the…

---

## [Recommendation from ElasticSearch : Jest vs Elastic Search's Rest client](https://discuss.elastic.co/t/recommendation-from-elasticsearch-jest-vs-elastic-searchs-rest-client/271102)

<div class="topic-metadata">

**Author:** [@gaurav](https://discuss.elastic.co/u/gaurav)\
**Replies:** 1\
**Last updated:** [April 23, 2021, 2:58pm UTC](https://discuss.elastic.co/t/recommendation-from-elasticsearch-jest-vs-elastic-searchs-rest-client/271102 "2021-04-23T14:58:24Z")

</div>

We use ES via AWS ES cluster. For the project, we have to 2 choices to connect to ES, 1. Jest and 2. Elastic search's own REST client Looking for official recommendation on which client to use for querying our ES cluste…

---

## [Authentication to realm ldap1 failed - authenticate failed](https://discuss.elastic.co/t/authentication-to-realm-ldap1-failed-authenticate-failed/270907)

<div class="topic-metadata">

**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\
**Replies:** 3\
**Last updated:** [April 23, 2021, 2:53pm UTC](https://discuss.elastic.co/t/authentication-to-realm-ldap1-failed-authenticate-failed/270907 "2021-04-23T14:53:38Z")

</div>

Hello All, I am trying to configure the LDAP realm in my elasticsearch using the document mentioned in the elastic site and having some issue. I am getting invalid user name and password message on kibana GUI. My Ldap …

---

## [Ingest Pipeline](https://discuss.elastic.co/t/ingest-pipeline/271089)

<div class="topic-metadata">

**Author:** [@spike83](https://discuss.elastic.co/u/spike83)\
**Replies:** 6\
**Last updated:** [April 23, 2021, 2:25pm UTC](https://discuss.elastic.co/t/ingest-pipeline/271089 "2021-04-23T14:25:37Z")

</div>

Hi, I have am ingest pipeline that set within Elasticsearch ingest node, that takes the message field from a log file and splits it out. During this I pull out the date which looks fine when it hits the document, but t…

---

## [Slow Cluster in Elastic Cloud since updating to 7.12](https://discuss.elastic.co/t/slow-cluster-in-elastic-cloud-since-updating-to-7-12/268844)

<div class="topic-metadata">

**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\
**Replies:** 25\
**Last updated:** [April 23, 2021, 2:18pm UTC](https://discuss.elastic.co/t/slow-cluster-in-elastic-cloud-since-updating-to-7-12/268844 "2021-04-23T14:18:24Z")

</div>

Hi guys, Since we updated our cluster we noticed that it's very slow, and we didn't increase the data volume or the number of shards. In my logs in Elastic Cloud one kind of message keeps repeating: \[instance-00000000…

---

## [Painless script that takes values from nested object and turns it into a field](https://discuss.elastic.co/t/painless-script-that-takes-values-from-nested-object-and-turns-it-into-a-field/271099)

<div class="topic-metadata">

**Author:** [@Sander\_Marx](https://discuss.elastic.co/u/Sander_Marx)\
**Replies:** 0\
**Last updated:** [April 23, 2021, 2:03pm UTC](https://discuss.elastic.co/t/painless-script-that-takes-values-from-nested-object-and-turns-it-into-a-field/271099 "2021-04-23T14:03:44Z")

</div>

I Have a customFields nested object "customFields" : \[ { "description" : "Description", "Name" : "Document Author" }, { "descrip…

---

## [Detach node from a cluster in docker](https://discuss.elastic.co/t/detach-node-from-a-cluster-in-docker/270896)

<div class="topic-metadata">

**Author:** [@bentleg1](https://discuss.elastic.co/u/bentleg1)\
**Replies:** 10\
**Last updated:** [April 23, 2021, 1:26pm UTC](https://discuss.elastic.co/t/detach-node-from-a-cluster-in-docker/270896 "2021-04-23T13:26:51Z")

</div>

Hello everyone! I have a little question about the elasticsearch-node tool: Is it possible to use it in any way to detach a node from a cluster that exists in a docker container? So far the tool throws an exception tha…

---

## [Elasticsearch gives Read timed out. (read timeout=10)) on sql queries](https://discuss.elastic.co/t/elasticsearch-gives-read-timed-out-read-timeout-10-on-sql-queries/270351)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 5\
**Last updated:** [April 23, 2021, 11:34am UTC](https://discuss.elastic.co/t/elasticsearch-gives-read-timed-out-read-timeout-10-on-sql-queries/270351 "2021-04-23T11:34:19Z")

</div>

Hello, We have some queries that are executed using SQL and they sometimes produce a read timeout reach. Is there a way to globally increase the timeout value? We are running elasticsearch version 7.7.1.

---

## [Agg count with range count](https://discuss.elastic.co/t/agg-count-with-range-count/271070)

<div class="topic-metadata">

**Author:** [@Charley\_Maillot](https://discuss.elastic.co/u/Charley_Maillot)\
**Replies:** 0\
**Last updated:** [April 23, 2021, 10:24am UTC](https://discuss.elastic.co/t/agg-count-with-range-count/271070 "2021-04-23T10:24:46Z")

</div>

Hello, My doc look like { "path": "/foo/bar", "userId" : "33", } I would like to have the number of userId who have more than 100 docs between 50 and 100 docs less than 100 docs I try to…

---

## [Unexplained failure java.lang.OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/unexplained-failure-java-lang-outofmemoryerror-java-heap-space/270100)

<div class="topic-metadata">

**Author:** [@Bertram\_van\_de\_Ven](https://discuss.elastic.co/u/Bertram_van_de_Ven)\
**Replies:** 14\
**Last updated:** [April 23, 2021, 8:37am UTC](https://discuss.elastic.co/t/unexplained-failure-java-lang-outofmemoryerror-java-heap-space/270100 "2021-04-23T08:37:20Z")

</div>

Dear, We've encounter 'random' out of memory errors that we can't explain. When we see the error occur we don't see an increase of Heap, system load, CPU or I/O. So I don't know where to search for the explanation why t…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=657)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=659)
