# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=681 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 682 --- ## [How to use case\_insensitive option in DSL Terms Query](https://discuss.elastic.co/t/how-to-use-case-insensitive-option-in-dsl-terms-query/267371)
**Author:** [@Sangeetha-Murugesan](https://discuss.elastic.co/u/Sangeetha-Murugesan)\ **Replies:** 2\ **Last updated:** [March 18, 2021, 4:42am UTC](https://discuss.elastic.co/t/how-to-use-case-insensitive-option-in-dsl-terms-query/267371 "2021-03-18T04:42:50Z")
In elastic we have Term and Terms level query .Term will be used for matching the field with exact value whereas Terms query is an equivalent to SQL IN Clause operation and tried to implement like: Term Query: { "q… --- ## [How to see how many times a shard has failed to be allocated currently](https://discuss.elastic.co/t/how-to-see-how-many-times-a-shard-has-failed-to-be-allocated-currently/267592)
**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 3:13am UTC](https://discuss.elastic.co/t/how-to-see-how-many-times-a-shard-has-failed-to-be-allocated-currently/267592 "2021-03-18T03:13:48Z")
I want to see how many times a shard has failed to be allocated, so I can speculate whether the unsuccessful allocation of previous shards is related to the index.allocation.max\_retries limit being reached. --- ## [ERROR: Failed to set password for user \[apm\_system\] on Master Node. (1 Master, 1 Data)](https://discuss.elastic.co/t/error-failed-to-set-password-for-user-apm-system-on-master-node-1-master-1-data/267590)
**Author:** [@JRA](https://discuss.elastic.co/u/JRA)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 2:46am UTC](https://discuss.elastic.co/t/error-failed-to-set-password-for-user-apm-system-on-master-node-1-master-1-data/267590 "2021-03-18T02:46:11Z")
Hi, I'm having trouble trying to setup my passwords in the Master Node of my cluster. Im trying to setup a test cluster with 1 dedicated Master Node and 1 dedicated Data Node. Master-node config node.master: true nod… --- ## [Percentile Rank query giving unexpected results](https://discuss.elastic.co/t/percentile-rank-query-giving-unexpected-results/265260)
**Author:** [@Jonathan\_Tan](https://discuss.elastic.co/u/Jonathan_Tan)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 12:17am UTC](https://discuss.elastic.co/t/percentile-rank-query-giving-unexpected-results/265260 "2021-03-18T00:17:56Z")
Hi, I'm getting unexpected results for the percentile\_rank aggregation, and was looking for some help/clarification. I've got 9 documents, all of which have a position field. The position values for the 9 documents ar… --- ## [Speeding up \_updates on docs with many small fields and 1 large field](https://discuss.elastic.co/t/speeding-up-updates-on-docs-with-many-small-fields-and-1-large-field/267574)
**Author:** [@jeshort2](https://discuss.elastic.co/u/jeshort2)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 9:18pm UTC](https://discuss.elastic.co/t/speeding-up-updates-on-docs-with-many-small-fields-and-1-large-field/267574 "2021-03-17T21:18:20Z")
Hi, Representative Index: PUT test\_index { "mappings": { "\_source": { "excludes": \[ "bigtext" \] }, "properties": { "bigtext": { "type": "text" }, "orgids… --- ## [Spring Boot with Native Query does not return Nested Objects](https://discuss.elastic.co/t/spring-boot-with-native-query-does-not-return-nested-objects/267565)
**Author:** [@Philip2020](https://discuss.elastic.co/u/Philip2020)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 7:17pm UTC](https://discuss.elastic.co/t/spring-boot-with-native-query-does-not-return-nested-objects/267565 "2021-03-17T19:17:47Z")
Hi There, Fairly new to ES and I'm hoping someone can help me and stop me from pulling my hair out :slight\_smile: I have a fairly basic Rest API which allows users to store college projects details, once created I stor… --- ## [Elasticsearch Memory Consumption Spikes in Kubernetes Deployments](https://discuss.elastic.co/t/elasticsearch-memory-consumption-spikes-in-kubernetes-deployments/267564)
**Author:** [@ben-charles](https://discuss.elastic.co/u/ben-charles)\ **Replies:** 0\ **Last updated:** [March 17, 2021, 7:01pm UTC](https://discuss.elastic.co/t/elasticsearch-memory-consumption-spikes-in-kubernetes-deployments/267564 "2021-03-17T19:01:10Z")
We are deploying the open source version of Elasticsearch 7.9.3 in an HA configuration in kubernetes. The cluster is using the default configuration of 1 GB of heap, and there is no data currently in the cluster. When th… --- ## [Data Loss/Unavailability in Elastic Search for querying after the ilm policy execution](https://discuss.elastic.co/t/data-loss-unavailability-in-elastic-search-for-querying-after-the-ilm-policy-execution/267548)
**Author:** [@manofjoy](https://discuss.elastic.co/u/manofjoy)\ **Replies:** 0\ **Last updated:** [March 17, 2021, 4:36pm UTC](https://discuss.elastic.co/t/data-loss-unavailability-in-elastic-search-for-querying-after-the-ilm-policy-execution/267548 "2021-03-17T16:36:57Z")
I see there are documents in the index and writes are happening, yet I can't query. (attached image). ilm policy: attached to indices. PUT \_ilm/policy/livestream\_delete\_policy { "policy": { "phases": { "hot": { "min… --- ## [Geo type not working with es 7](https://discuss.elastic.co/t/geo-type-not-working-with-es-7/267518)
**Author:** [@cwei](https://discuss.elastic.co/u/cwei)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 4:06pm UTC](https://discuss.elastic.co/t/geo-type-not-working-with-es-7/267518 "2021-03-17T16:06:50Z")
We have an open source elasticsearch (7.10.1) deployed along with some custom plugs-ins and modules. And the geo type is not working with it. curl.sh -X PUT "https://\:9200/example?pretty" -H 'C… --- ## [Elasticsearch/Lucene Segment Count and Merge Settings](https://discuss.elastic.co/t/elasticsearch-lucene-segment-count-and-merge-settings/267540)
**Author:** [@Bikas\_Chhetri](https://discuss.elastic.co/u/Bikas_Chhetri)\ **Replies:** 0\ **Last updated:** [March 17, 2021, 3:36pm UTC](https://discuss.elastic.co/t/elasticsearch-lucene-segment-count-and-merge-settings/267540 "2021-03-17T15:36:38Z")
I have a couple of questions on elastic search segment size, count, and disk flush/write. Scheduled Merge policy Settings We have about 16 GB of data in a single shard and a total of 1458014 documents across 3 shards. … --- ## [Apply ILM Policy to existing DataStream Index](https://discuss.elastic.co/t/apply-ilm-policy-to-existing-datastream-index/267422)
**Author:** [@Karl\_Falconer](https://discuss.elastic.co/u/Karl_Falconer)\ **Replies:** 4\ **Last updated:** [March 17, 2021, 3:26pm UTC](https://discuss.elastic.co/t/apply-ilm-policy-to-existing-datastream-index/267422 "2021-03-17T15:26:27Z")
We have an exiting datastream foo-stream and two backing indices .foo-stream-000001 and .foo-stream-000002. Our application is writing/reading to the index foo-stream and the overall expectation is that ILM would automa… --- ## [Failed to obtain in-memory shard lock](https://discuss.elastic.co/t/failed-to-obtain-in-memory-shard-lock/267477)
**Author:** [@nishant\_jain](https://discuss.elastic.co/u/nishant_jain)\ **Replies:** 4\ **Last updated:** [March 17, 2021, 12:36pm UTC](https://discuss.elastic.co/t/failed-to-obtain-in-memory-shard-lock/267477 "2021-03-17T12:36:48Z")
I am using elastic search 7.10.2 in kubernetes but I get ShardLockObtainFailedException at random moments but mostly when there are some search or index operation is going on. the log is following: Data node {"type":… --- ## [Global Temporary Tables](https://discuss.elastic.co/t/global-temporary-tables/267228)
**Author:** [@onkark](https://discuss.elastic.co/u/onkark)\ **Replies:** 3\ **Last updated:** [March 17, 2021, 1:03pm UTC](https://discuss.elastic.co/t/global-temporary-tables/267228 "2021-03-17T13:03:31Z")
Is there something like global temporary tables/session tables we can use in elasticsearch ? The info about global temp tables can be looked here https://oracle-base.com/articles/misc/temporary-tables. Thanks in advan… --- ## [Painless script regex](https://discuss.elastic.co/t/painless-script-regex/267419)
**Author:** [@Boris\_Boris](https://discuss.elastic.co/u/Boris_Boris)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 12:32pm UTC](https://discuss.elastic.co/t/painless-script-regex/267419 "2021-03-17T12:32:14Z")
I have a event.original field -\> type String. "2021-03-15T16:11:12.333659+00:00 10.10.252.2 id=firewall sn=xx time=2021-03-15 16:11:12 UTC fw=8.8.8.8 pri=5 c=256 m=38 msg=ICMP packet dropped due to Policy proto=icmp… --- ## [SSL connection between Kibana and Elasticsearch](https://discuss.elastic.co/t/ssl-connection-between-kibana-and-elasticsearch/266978)
**Author:** [@sk1f](https://discuss.elastic.co/u/sk1f)\ **Replies:** 10\ **Last updated:** [March 17, 2021, 9:52am UTC](https://discuss.elastic.co/t/ssl-connection-between-kibana-and-elasticsearch/266978 "2021-03-17T09:52:22Z")
Hello, would like to ask for help in configuring SSL connection. When using https: i get this error: Error code: SSL\_ERROR\_RX\_RECORD\_TOO\_LONG. If I try curl --cacert /etc/kibana/elasticsearch-ca.pem https://localhost:… --- ## [Theoretical limit on number of boolean queries](https://discuss.elastic.co/t/theoretical-limit-on-number-of-boolean-queries/267487)
**Author:** [@sarthi2395](https://discuss.elastic.co/u/sarthi2395)\ **Replies:** 0\ **Last updated:** [March 17, 2021, 11:24am UTC](https://discuss.elastic.co/t/theoretical-limit-on-number-of-boolean-queries/267487 "2021-03-17T11:24:15Z")
Is there a upper limit on how many boolean 'should' queries that I can run on an single API call? Say I have my query as { "query": { "bool": { "should": \[{ "prefix": { "key1": \ } }, … --- ## [How to resolve elasticsearch status red](https://discuss.elastic.co/t/how-to-resolve-elasticsearch-status-red/267266)
**Author:** [@asan](https://discuss.elastic.co/u/asan)\ **Replies:** 3\ **Last updated:** [March 17, 2021, 11:01am UTC](https://discuss.elastic.co/t/how-to-resolve-elasticsearch-status-red/267266 "2021-03-17T11:01:08Z")
hi I've got problem with elasticasearch which get in red status as you can see in bellow : curl -XGET localhost:9200/\_cluster/allocation/explain {"index":".async-search","shard":0,"primary":true,"current\_state":"unass… --- ## [License expired](https://discuss.elastic.co/t/license-expired/267400)
**Author:** [@DENMODSupport](https://discuss.elastic.co/u/DENMODSupport)\ **Replies:** 4\ **Last updated:** [March 17, 2021, 10:45am UTC](https://discuss.elastic.co/t/license-expired/267400 "2021-03-17T10:45:23Z")
We are getting below License expired error from Elastic search logs. We are using the version 5.3.1. Please let us know what we should do to resolve this error? Error: \[2021-03-16T12:24:04,454\]\[WARN \]\[o.e.l.LicenseServi… --- ## [ElasticSearch Watcher Webhook and SSL trust issue](https://discuss.elastic.co/t/elasticsearch-watcher-webhook-and-ssl-trust-issue/267303)
**Author:** [@rubans](https://discuss.elastic.co/u/rubans)\ **Replies:** 3\ **Last updated:** [March 17, 2021, 9:30am UTC](https://discuss.elastic.co/t/elasticsearch-watcher-webhook-and-ssl-trust-issue/267303 "2021-03-17T09:30:28Z")
I'm running v7.8.1 ELK stack on GKE. I have setup a watcher alert which on action is supposed to POST to a URL externally using webhook to https://alertapi-uat.systems.uk.foo/api/do However, when it tries to fire the w… --- ## [Question regarding the timeout option in search query](https://discuss.elastic.co/t/question-regarding-the-timeout-option-in-search-query/267460)
**Author:** [@iverson1407](https://discuss.elastic.co/u/iverson1407)\ **Replies:** 0\ **Last updated:** [March 17, 2021, 9:17am UTC](https://discuss.elastic.co/t/question-regarding-the-timeout-option-in-search-query/267460 "2021-03-17T09:17:19Z")
When we set up the timeout in a search query, it will timeout if it goes beyond the threshold. ( I know it is kinda best effort value). My question about this is that, once the search query gets timeout, will the execut… --- ## [Discovery.seed\_hosts](https://discuss.elastic.co/t/discovery-seed-hosts/267454)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 8:47am UTC](https://discuss.elastic.co/t/discovery-seed-hosts/267454 "2021-03-17T08:47:45Z")
Hi there, just a quick one: In discovery.seed\_hosts do I only mnetion / list the master nodes? coming from the old zen right now in production I do have listed all the nodes where an elasticsearch deamon is runnig. So … --- ## [Is it possible to count tokens which matched documents?](https://discuss.elastic.co/t/is-it-possible-to-count-tokens-which-matched-documents/267338)
**Author:** [@kwang\_hee\_Han](https://discuss.elastic.co/u/kwang_hee_Han)\ **Replies:** 3\ **Last updated:** [March 17, 2021, 8:18am UTC](https://discuss.elastic.co/t/is-it-possible-to-count-tokens-which-matched-documents/267338 "2021-03-17T08:18:34Z")
Hello, I want to find which term matched on documents that results of query. I tried to using "highlight" but it does responsed with poor results.(I need more digging time to with them) I want to know alternative way t… --- ## [Cross referencing from multiple indexes](https://discuss.elastic.co/t/cross-referencing-from-multiple-indexes/267164)
**Author:** [@kevvvlar](https://discuss.elastic.co/u/kevvvlar)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 8:18am UTC](https://discuss.elastic.co/t/cross-referencing-from-multiple-indexes/267164 "2021-03-17T08:18:22Z")
I am building an app where I need to match users based on several parameters. I have two elastic search indexes, one with the user's likes and dislikes, one with some metadata about the user. /user\_profile/abc12345 { "… --- ## [Error 500 while creating s3 snapshot repo](https://discuss.elastic.co/t/error-500-while-creating-s3-snapshot-repo/267239)
**Author:** [@aditiparnami](https://discuss.elastic.co/u/aditiparnami)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 8:16am UTC](https://discuss.elastic.co/t/error-500-while-creating-s3-snapshot-repo/267239 "2021-03-17T08:16:59Z")
I'm getting HTTP 500 status whenever I try to create the snapshot repository on an AWS S3 bucket. I have updated the AWS access key, secret key, and session token into the elasticsearch-keystore and reloaded the secure … --- ## [Questions about index.allocation.max\_retries?](https://discuss.elastic.co/t/questions-about-index-allocation-max-retries/267437)
**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\ **Replies:** 2\ **Last updated:** [March 17, 2021, 5:39am UTC](https://discuss.elastic.co/t/questions-about-index-allocation-max-retries/267437 "2021-03-17T05:39:15Z")
Yesterday we had a cluster node status that turned yellow with an unsuccessful allocation of a shard of an index, when a colleague found the following exception in the logs: \[2021-03-16T17:34:24,934\]\[WARN \]\[o.e.a.b.Tran… --- ## [What can I include in a webhook body/playload?](https://discuss.elastic.co/t/what-can-i-include-in-a-webhook-body-playload/267430)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 0\ **Last updated:** [March 17, 2021, 12:26am UTC](https://discuss.elastic.co/t/what-can-i-include-in-a-webhook-body-playload/267430 "2021-03-17T00:26:09Z")
Dear all =) When setting up an Elastic watcher that triggers a webhook, how do I know what info I can include in the body/payload? Does there exist a list of all info I can include? Hugs, Sandra =) --- ## [How to exclude fields from being indexed in ElasticSearch?](https://discuss.elastic.co/t/how-to-exclude-fields-from-being-indexed-in-elasticsearch/267427)
**Author:** [@jay2021](https://discuss.elastic.co/u/jay2021)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 11:54pm UTC](https://discuss.elastic.co/t/how-to-exclude-fields-from-being-indexed-in-elasticsearch/267427 "2021-03-16T23:54:50Z")
I am trying to utilize ElasticSearch to store large sets of data. Most of the data will be searchable, however, there are some field that will be there just so the data is stored and returned upon request. Here is my ma… --- ## [Range query through custom window time](https://discuss.elastic.co/t/range-query-through-custom-window-time/267428)
**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 11:48pm UTC](https://discuss.elastic.co/t/range-query-through-custom-window-time/267428 "2021-03-16T23:48:14Z")
I have this query in Dev Tools that I do when my boss asks that counts how many cards were used in 90 days window: GET transactions/\_search { "size": 0, "query": { "range": { "timestamp": { "gte": "now-90d/d",… --- ## [Elasticsearch service stops right after running](https://discuss.elastic.co/t/elasticsearch-service-stops-right-after-running/267219)
**Author:** [@liorh](https://discuss.elastic.co/u/liorh)\ **Replies:** 4\ **Last updated:** [March 16, 2021, 11:10pm UTC](https://discuss.elastic.co/t/elasticsearch-service-stops-right-after-running/267219 "2021-03-16T23:10:00Z")
Hi all Elastic is very new to me. I've installed elastic 7.11.1. Once I start the service, it seem to be running but another refresh and it's not :confused: Could you help me solve it? Thank you very much Lior --- ## [Ingest pipeline error when accessing a field](https://discuss.elastic.co/t/ingest-pipeline-error-when-accessing-a-field/265847)
**Author:** [@maheshe](https://discuss.elastic.co/u/maheshe)\ **Replies:** 10\ **Last updated:** [March 16, 2021, 10:06pm UTC](https://discuss.elastic.co/t/ingest-pipeline-error-when-accessing-a-field/265847 "2021-03-16T22:06:12Z")
I get this error message for the last Renameprocessor (Refer the last rule in Ingest Template). Iam running the Testpipeline. What is the right way to access the targetResources\[userPrincipalName\] in json. "error": { … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=680) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=682)