# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=670 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 671 --- ## [Elasticsearch plugin error while installing analysis-icu,zenity and analysis-phonetic](https://discuss.elastic.co/t/elasticsearch-plugin-error-while-installing-analysis-icu-zenity-and-analysis-phonetic/269237)
**Author:** [@ishan2](https://discuss.elastic.co/u/ishan2)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 4:09pm UTC](https://discuss.elastic.co/t/elasticsearch-plugin-error-while-installing-analysis-icu-zenity-and-analysis-phonetic/269237 "2021-04-06T16:09:01Z")
Elastic search plugin error while installing analysis-icu: $bin/elasticsearch-plugin install analysis-icu Error: Could not find or load main class org.elasticsearch.plugins.PluginCli Caused by: java.lang.ClassNotFoundEx… --- ## [Logstash or Spark -- Elasticsearch](https://discuss.elastic.co/t/logstash-or-spark-elasticsearch/269313)
**Author:** [@alvgoro](https://discuss.elastic.co/u/alvgoro)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 4:05pm UTC](https://discuss.elastic.co/t/logstash-or-spark-elasticsearch/269313 "2021-04-06T16:05:13Z")
Hi there! I was searching on Google and this forum but I am still undecided. I would like to develop a system which collects logs from several servers and then analyze them. I thinked about Beats to collect logs (and … --- ## [Data Transfer from Sql Server to Elasticsearch with SSIS and CData](https://discuss.elastic.co/t/data-transfer-from-sql-server-to-elasticsearch-with-ssis-and-cdata/269307)
**Author:** [@HKN\_MZ](https://discuss.elastic.co/u/HKN_MZ)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 3:42pm UTC](https://discuss.elastic.co/t/data-transfer-from-sql-server-to-elasticsearch-with-ssis-and-cdata/269307 "2021-04-06T15:42:14Z")
I am trying to data transfer from Sql Server to Elasticsearch with SSIS (Microsoft SQL Server Integration Services) application using CData Elasticsearch Destination tool. What I am successfully for now. Using SSIS I … --- ## [Elasticsearch - Forcemerge to merge several shards](https://discuss.elastic.co/t/elasticsearch-forcemerge-to-merge-several-shards/269310)
**Author:** [@Miguel\_BA](https://discuss.elastic.co/u/Miguel_BA)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 3:40pm UTC](https://discuss.elastic.co/t/elasticsearch-forcemerge-to-merge-several-shards/269310 "2021-04-06T15:40:48Z")
I have indexes that are created weekly, associated to an allias. The indexes were configured for two shards, and one replica per shard. The shards are very low space, around 50 mb, so I think those could be converted to … --- ## [Server Company and Developer Company keep passing the buck](https://discuss.elastic.co/t/server-company-and-developer-company-keep-passing-the-buck/269343)
**Author:** [@Joanchka](https://discuss.elastic.co/u/Joanchka)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 3:36pm UTC](https://discuss.elastic.co/t/server-company-and-developer-company-keep-passing-the-buck/269343 "2021-04-06T15:36:05Z")
I want to upgrade my Magento to 2.4.2. The Developer Company who is doing this upgrade asked me to ensure my server has ElasticSearch 7.9.2 The Server Company installed ElasticSearch 7.9.2 on my server (I can see this … --- ## [Fix for CVE-2021-22134 in 7.10.X version](https://discuss.elastic.co/t/fix-for-cve-2021-22134-in-7-10-x-version/269340)
**Author:** [@Ruslan\_Kovpey](https://discuss.elastic.co/u/Ruslan_Kovpey)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 2:53pm UTC](https://discuss.elastic.co/t/fix-for-cve-2021-22134-in-7-10-x-version/269340 "2021-04-06T14:53:55Z")
Hello, do exist any plans to create a security patch for CVE-2021-22134 NVD - CVE-2021-22134 in 7.10.x version, if yes then when? Thanks --- ## [Export all records from 12M index](https://discuss.elastic.co/t/export-all-records-from-12m-index/269221)
**Author:** [@YaronB](https://discuss.elastic.co/u/YaronB)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 10:44am UTC](https://discuss.elastic.co/t/export-all-records-from-12m-index/269221 "2021-04-06T10:44:18Z")
the problem is with the index.max\_result\_window, we have an index of 12M records , how can we query/get all data using a script? (logstash not relevant) --- ## [1 Hour Difference on showing Logs in ELK/Kibana](https://discuss.elastic.co/t/1-hour-difference-on-showing-logs-in-elk-kibana/268744)
**Author:** [@radu990](https://discuss.elastic.co/u/radu990)\ **Replies:** 11\ **Last updated:** [April 6, 2021, 8:24am UTC](https://discuss.elastic.co/t/1-hour-difference-on-showing-logs-in-elk-kibana/268744 "2021-04-06T08:24:14Z")
Hello, I have set a Filebeat agent on a server for Apache logs (using apache module), and observed that the logs are appearing on Kibana/ELK with 1 hour delay. Any idea what can be the problem? The time/timezone settin… --- ## [Count matched words](https://discuss.elastic.co/t/count-matched-words/269294)
**Author:** [@ndkmath1](https://discuss.elastic.co/u/ndkmath1)\ **Replies:** 0\ **Last updated:** [April 6, 2021, 7:51am UTC](https://discuss.elastic.co/t/count-matched-words/269294 "2021-04-06T07:51:33Z")
I'm doing something with ES Learning to rank. I want to count how many words in a query matched with a document and take it as a feature (number\_of\_matched\_words) for LTR. Ex: q = "iphone 11", d = "iphone 11 64gb". In t… --- ## [Creating multiple indexes or just one?](https://discuss.elastic.co/t/creating-multiple-indexes-or-just-one/268346)
**Author:** [@Andrea92](https://discuss.elastic.co/u/Andrea92)\ **Replies:** 4\ **Last updated:** [April 6, 2021, 7:18am UTC](https://discuss.elastic.co/t/creating-multiple-indexes-or-just-one/268346 "2021-04-06T07:18:40Z")
Good morning everyone, I have a question about the creation of a single index or multiple indexes. I am dealing with computer vulnerabilities, so I save the information of the files in a single index and then I compare… --- ## [Doing periodic searches via API](https://discuss.elastic.co/t/doing-periodic-searches-via-api/269268)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 6\ **Last updated:** [April 6, 2021, 4:04am UTC](https://discuss.elastic.co/t/doing-periodic-searches-via-api/269268 "2021-04-06T04:04:31Z")
I have an application where I need to run searches on an index periodically picking up "new" entries from the index and I am wondering the best way of doing this. I assume that \_id is serial and simply saving the \_id of… --- ## [Slow search and tiny segments memory\_in\_bytes after upgrade \>= es7.9](https://discuss.elastic.co/t/slow-search-and-tiny-segments-memory-in-bytes-after-upgrade-es7-9/269174)
**Author:** [@MihaylovNikitos](https://discuss.elastic.co/u/MihaylovNikitos)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 3:57am UTC](https://discuss.elastic.co/t/slow-search-and-tiny-segments-memory-in-bytes-after-upgrade-es7-9/269174 "2021-04-06T03:57:11Z")
Hi After upgrading from ES 7.8.x to ES \>=7.9, I noticed that segments \*\_memory\_in\_bytes became very small and search is very slow It is seen by stats: ES 7.8.1 /\_nodes/stats segments: { count: 7, memory\_in\_bytes: 2… --- ## [ECE On premise 7.12 Fleet failure to Enroll, windows 10 system](https://discuss.elastic.co/t/ece-on-premise-7-12-fleet-failure-to-enroll-windows-10-system/268929)
**Author:** [@Nicholas\_Rowe](https://discuss.elastic.co/u/Nicholas_Rowe)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 3:00am UTC](https://discuss.elastic.co/t/ece-on-premise-7-12-fleet-failure-to-enroll-windows-10-system/268929 "2021-04-06T03:00:09Z")
I just setup an ECE instance using 7.9 (which I believe is the latest) and spun up a cluster for security using version 7.12. I setup a new agent and tried to enroll a windows 10 target workstation as outlined, but an ge… --- ## [Elasticsearch node js search\_after](https://discuss.elastic.co/t/elasticsearch-node-js-search-after/268880)
**Author:** [@111452](https://discuss.elastic.co/u/111452)\ **Replies:** 0\ **Last updated:** [March 31, 2021, 8:53am UTC](https://discuss.elastic.co/t/elasticsearch-node-js-search-after/268880 "2021-03-31T08:53:32Z")
Hello everyone! Does anyone know how to properly use search\_after in the elastic query in node js? I've tried like : '''const body = { "query": { "geo\_shape": { "geometry": { "relation": "within", … --- ## [ILM using custom Logstash indices](https://discuss.elastic.co/t/ilm-using-custom-logstash-indices/269239)
**Author:** [@Danilo\_PC](https://discuss.elastic.co/u/Danilo_PC)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 1:06am UTC](https://discuss.elastic.co/t/ilm-using-custom-logstash-indices/269239 "2021-04-06T01:06:23Z")
Hi, I’m using logstash to ingest data into my elasticloud ES. I’m using custom index names, such as “client\_name-winlogbeat-2021.03.05” and “client\_name-o365-2021.03.05” for windows and office 365 logs respectively. B… --- ## [Catch 22 with creating passwords](https://discuss.elastic.co/t/catch-22-with-creating-passwords/268416)
**Author:** [@ricwhitney](https://discuss.elastic.co/u/ricwhitney)\ **Replies:** 22\ **Last updated:** [April 6, 2021, 12:34am UTC](https://discuss.elastic.co/t/catch-22-with-creating-passwords/268416 "2021-04-06T00:34:44Z")
Running Elastic 7.12 Basic (I assume) I'm stuck in a Catch 22 - when I enable x-pack security I cannot connect to elastic for setting passwords. When I disable x-pack security, and go to set passwords, it tells me secu… --- ## [Float value accepted as date during initial document indexing, but fails on update/re-index](https://discuss.elastic.co/t/float-value-accepted-as-date-during-initial-document-indexing-but-fails-on-update-re-index/268417)
**Author:** [@Brooke\_Babcock](https://discuss.elastic.co/u/Brooke_Babcock)\ **Replies:** 3\ **Last updated:** [April 5, 2021, 8:06pm UTC](https://discuss.elastic.co/t/float-value-accepted-as-date-during-initial-document-indexing-but-fails-on-update-re-index/268417 "2021-04-05T20:06:22Z")
I encountered what appears to be a "gotcha" with dates. Wondering if this is expected behavior, or potentially room for improvement. If you index a float value into a date field, by default Elasticsearch allows it. And… --- ## [All primary shards of some indices keep getting assigned to 1 of 14 data nodes](https://discuss.elastic.co/t/all-primary-shards-of-some-indices-keep-getting-assigned-to-1-of-14-data-nodes/267726)
**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\ **Replies:** 2\ **Last updated:** [April 5, 2021, 7:58pm UTC](https://discuss.elastic.co/t/all-primary-shards-of-some-indices-keep-getting-assigned-to-1-of-14-data-nodes/267726 "2021-04-05T19:58:20Z")
ES: 7.6.x 3 coordinator, 3 master, 14 data 6 shards, 1 replica All primary shards of some indices keep getting assigned to only 1 of 14 data nodes. So data node 12 has 6 primary shards of index x, y, z, etc. The other… --- ## [Find Trending topics without background set](https://discuss.elastic.co/t/find-trending-topics-without-background-set/269207)
**Author:** [@sj12345](https://discuss.elastic.co/u/sj12345)\ **Replies:** 5\ **Last updated:** [April 5, 2021, 5:34pm UTC](https://discuss.elastic.co/t/find-trending-topics-without-background-set/269207 "2021-04-05T17:34:25Z")
i have read this article Find trending article Referring to Mark Harwood's comment on that page : " maybe it’s failing to find anything statistically significant in the sample of 100 headlines that differs materially fr… --- ## [How to secure the default elastic username and password in elasticsearch.yml, logstash.yml and kibana.yml files?](https://discuss.elastic.co/t/how-to-secure-the-default-elastic-username-and-password-in-elasticsearch-yml-logstash-yml-and-kibana-yml-files/269133)
**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\ **Replies:** 4\ **Last updated:** [April 5, 2021, 4:24pm UTC](https://discuss.elastic.co/t/how-to-secure-the-default-elastic-username-and-password-in-elasticsearch-yml-logstash-yml-and-kibana-yml-files/269133 "2021-04-05T16:24:29Z")
I want to secure the username and password which are in plaintext in my elasticsearch.yml, logstash.yml and kibana.yml files. How can I do it? My ELK stack version is 7.10.2. --- ## [Esrally bulk testing error with missing type](https://discuss.elastic.co/t/esrally-bulk-testing-error-with-missing-type/269091)
**Author:** [@Ellie\_Bird](https://discuss.elastic.co/u/Ellie_Bird)\ **Replies:** 1\ **Last updated:** [April 5, 2021, 1:48pm UTC](https://discuss.elastic.co/t/esrally-bulk-testing-error-with-missing-type/269091 "2021-04-05T13:48:41Z")
I created the track from existing cluster and want to race with rally at my local host. But Running bulk, it failed with missing type error. During creating track, did I miss out any parameter to generate correct mappi… --- ## [Maven Packages](https://discuss.elastic.co/t/maven-packages/268748)
**Author:** [@nmalocic](https://discuss.elastic.co/u/nmalocic)\ **Replies:** 5\ **Last updated:** [April 5, 2021, 11:50am UTC](https://discuss.elastic.co/t/maven-packages/268748 "2021-04-05T11:50:16Z")
Hi everyone, Is it possible to load maven package to use Json Processor from code? I am writing plugin, and I need to use Json Processor to parse data. Thanks, Nemanja --- ## [Return specific search results](https://discuss.elastic.co/t/return-specific-search-results/269220)
**Author:** [@Jay\_Timbadia](https://discuss.elastic.co/u/Jay_Timbadia)\ **Replies:** 0\ **Last updated:** [April 5, 2021, 10:01am UTC](https://discuss.elastic.co/t/return-specific-search-results/269220 "2021-04-05T10:01:53Z")
I have these structures of my index. { "\_index" : "sentences", "\_type" : "\_doc", "\_id" : "PHhYoXgBJv8cgfRDHSag", "\_score" : 11.336952, "\_source" : { "word" : "acacia", … --- ## [New Elasticsearch node does not sync with existing cluster](https://discuss.elastic.co/t/new-elasticsearch-node-does-not-sync-with-existing-cluster/268994)
**Author:** [@runchranda](https://discuss.elastic.co/u/runchranda)\ **Replies:** 7\ **Last updated:** [April 5, 2021, 7:37am UTC](https://discuss.elastic.co/t/new-elasticsearch-node-does-not-sync-with-existing-cluster/268994 "2021-04-05T07:37:59Z")
Hi, I previously had 3 elasticsearch nodes consisting of node 1, node 2 and node 3, but my node 2 encountered some OS related issues so it had to be formatted. So I reinstalled and reconfigured node 2 as before it is fo… --- ## [Elasticsearch-certutil](https://discuss.elastic.co/t/elasticsearch-certutil/268988)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 8\ **Last updated:** [April 5, 2021, 7:34am UTC](https://discuss.elastic.co/t/elasticsearch-certutil/268988 "2021-04-05T07:34:48Z")
why i dont have elasticsearch-certutil in my /bin ? is it because my elastic is basic -free and open? --- ## [Completion Suggester](https://discuss.elastic.co/t/completion-suggester/269002)
**Author:** [@Lamees\_Mahmoud](https://discuss.elastic.co/u/Lamees_Mahmoud)\ **Replies:** 0\ **Last updated:** [April 1, 2021, 9:04am UTC](https://discuss.elastic.co/t/completion-suggester/269002 "2021-04-01T09:04:45Z")
Why elastic search auto completion suggester doesn't return all matching documents? --- ## [Authentication of \[elastic\] was terminated by realm \[reserved\]](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/268307)
**Author:** [@Divyanshu\_Tyagi](https://discuss.elastic.co/u/Divyanshu_Tyagi)\ **Replies:** 3\ **Last updated:** [April 5, 2021, 5:51am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/268307 "2021-04-05T05:51:01Z")
My ELK stack is udpated with same version Elasticsearch version 7.11.1 logstash version 7.11.1 filebeat version 7.11.1 And in elasticsearch.log only thing i am seeing is \[INFO \]\[o.e.x.s.a.AuthenticationService\] \[inlxd… --- ## [Slowness in elastic search - optimization of query and score against individual values of the field](https://discuss.elastic.co/t/slowness-in-elastic-search-optimization-of-query-and-score-against-individual-values-of-the-field/269199)
**Author:** [@Nisar\_Ansari](https://discuss.elastic.co/u/Nisar_Ansari)\ **Replies:** 0\ **Last updated:** [April 5, 2021, 12:07am UTC](https://discuss.elastic.co/t/slowness-in-elastic-search-optimization-of-query-and-score-against-individual-values-of-the-field/269199 "2021-04-05T00:07:06Z")
Dear All, We have documents in below format , the number of documents is more than 5 million. {"\_index":"Testinlive","\_type":"\_doc","\_id":"vxYmiHgBWrQelERu5MPg","\_score":1.0,"\_source":{"GID":"433444","aLIASES":"Kishor… --- ## [How to do ES fault drills](https://discuss.elastic.co/t/how-to-do-es-fault-drills/269186)
**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\ **Replies:** 1\ **Last updated:** [April 4, 2021, 6:05pm UTC](https://discuss.elastic.co/t/how-to-do-es-fault-drills/269186 "2021-04-04T18:05:41Z")
We want to do elasticsearch failure exercises, but currently we can only simulate some simple failures, such as network interruption and process death. The remaining deep-level failures are not well simulated. I would li… --- ## [Restore from S3 repository\_exception](https://discuss.elastic.co/t/restore-from-s3-repository-exception/268848)
**Author:** [@twilight](https://discuss.elastic.co/u/twilight)\ **Replies:** 9\ **Last updated:** [April 4, 2021, 1:38pm UTC](https://discuss.elastic.co/t/restore-from-s3-repository-exception/268848 "2021-04-04T13:38:27Z")
Hello, This is about restoring on self-managed from a snapshot created by managed stack. I have ES and Kibana 7.12 installed on Amazon Linux AMI. I have a cloud based cluster too which has created a number of snapshot… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=669) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=671)