# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=682 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 683 --- ## [How to apply filter using NEST (.NET)](https://discuss.elastic.co/t/how-to-apply-filter-using-nest-net/267423)
**Author:** [@jay2021](https://discuss.elastic.co/u/jay2021)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 9:44pm UTC](https://discuss.elastic.co/t/how-to-apply-filter-using-nest-net/267423 "2021-03-16T21:44:06Z")
I am trying to query my server using the .NET library NEST (GitHub - elastic/elasticsearch-net: Elasticsearch.Net & NEST) I want my query to find any data where source = "abc" and source\_id in (" 123","145","158m") I e… --- ## [ILM with Python Client](https://discuss.elastic.co/t/ilm-with-python-client/261469)
**Author:** [@valleram](https://discuss.elastic.co/u/valleram)\ **Replies:** 2\ **Last updated:** [March 16, 2021, 9:37pm UTC](https://discuss.elastic.co/t/ilm-with-python-client/261469 "2021-03-16T21:37:35Z")
Hi All, I'm currently using Elasticsearch client for Python 3. I'm trying to import IlmClient module, but I received following error. \>\>\> from elasticsearch.client import IlmClient Traceback (most recent call last): … --- ## [Automatic IP reputation check](https://discuss.elastic.co/t/automatic-ip-reputation-check/265215)
**Author:** [@sbathla](https://discuss.elastic.co/u/sbathla)\ **Replies:** 3\ **Last updated:** [March 16, 2021, 8:45pm UTC](https://discuss.elastic.co/t/automatic-ip-reputation-check/265215 "2021-03-16T20:45:12Z")
Hi All, Is there any way to do ip reputation check automatically with logstash or elasticsearch without manually effort for checking reputation against each ip? --- ## [Create repository ONLY if no other repo exists with the same name](https://discuss.elastic.co/t/create-repository-only-if-no-other-repo-exists-with-the-same-name/267409)
**Author:** [@Kevin\_Gonzalez](https://discuss.elastic.co/u/Kevin_Gonzalez)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 6:17pm UTC](https://discuss.elastic.co/t/create-repository-only-if-no-other-repo-exists-with-the-same-name/267409 "2021-03-16T18:17:36Z")
Maybe this could be an enhancement request, or could already be implemented on newest versions of elasticsearch (+7.6.2) idk.. Here is the thing: When I create a repository everything works fine, BUT elasticsearch allo… --- ## [How can I bulk insert data?](https://discuss.elastic.co/t/how-can-i-bulk-insert-data/267311)
**Author:** [@jay2021](https://discuss.elastic.co/u/jay2021)\ **Replies:** 3\ **Last updated:** [March 16, 2021, 5:50pm UTC](https://discuss.elastic.co/t/how-can-i-bulk-insert-data/267311 "2021-03-16T17:50:18Z")
Hello, I have the following json data that I like to post to the server using the \_bulk API. { "price": 274000.00, "original\_price": 277900.00, "summary": "WHAT A FANTASTIC PROPERTY!! GREAT LOCATION IN DESE… --- ## [Cross-cluster search on-premise remote cluster from Elastic Cloud Deployment](https://discuss.elastic.co/t/cross-cluster-search-on-premise-remote-cluster-from-elastic-cloud-deployment/267273)
**Author:** [@cvanhalt](https://discuss.elastic.co/u/cvanhalt)\ **Replies:** 2\ **Last updated:** [March 16, 2021, 4:06pm UTC](https://discuss.elastic.co/t/cross-cluster-search-on-premise-remote-cluster-from-elastic-cloud-deployment/267273 "2021-03-16T16:06:06Z")
Is it possible to use the cross-cluster search feature to query a Elastic Cloud Deployment in Azure and an on-premise remote Cluster? Both with the Basic/Standard License. Connection should be made through a VPN. I'm … --- ## [Primary store size showing wrong info while using \_cat/indices](https://discuss.elastic.co/t/primary-store-size-showing-wrong-info-while-using-cat-indices/267361)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 6\ **Last updated:** [March 16, 2021, 3:41pm UTC](https://discuss.elastic.co/t/primary-store-size-showing-wrong-info-while-using-cat-indices/267361 "2021-03-16T15:41:02Z")
I somehow doubt \_cat/indices is showing me wrong information regarding store size. I have two indices - giitran\_with\_message and giitran\_without\_message. Now both have have almost the same document. Each one has 1000 … --- ## [How you deal with ILM for kubernetes cluster applications?](https://discuss.elastic.co/t/how-you-deal-with-ilm-for-kubernetes-cluster-applications/267391)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 3:08pm UTC](https://discuss.elastic.co/t/how-you-deal-with-ilm-for-kubernetes-cluster-applications/267391 "2021-03-16T15:08:33Z")
Hi, I am collecting logs from kubernetes cluster using filebeat, which is deployed as daemonset I ship logs using logstash to my elasticsearch cluster in one index I am using ILM for controlling the retention time for … --- ## [CCR between 2 Elastic clusters in different K8s clusters](https://discuss.elastic.co/t/ccr-between-2-elastic-clusters-in-different-k8s-clusters/267287)
**Author:** [@jcobb48](https://discuss.elastic.co/u/jcobb48)\ **Replies:** 0\ **Last updated:** [March 15, 2021, 4:11pm UTC](https://discuss.elastic.co/t/ccr-between-2-elastic-clusters-in-different-k8s-clusters/267287 "2021-03-15T16:11:39Z")
Hi everyone, wanted to get some advice to implement cross-cluster replication between 2 Elasticsearch clusters that are deployed in different Kubernetes clusters. Both ES clusters are healthy and running with version 6.… --- ## [Data Reports not working without change](https://discuss.elastic.co/t/data-reports-not-working-without-change/265976)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 2\ **Last updated:** [March 16, 2021, 2:10pm UTC](https://discuss.elastic.co/t/data-reports-not-working-without-change/265976 "2021-03-16T14:10:46Z")
One of the environments on 7.6 has stopped reporting total number of hosts on a fixed pattern without any change. It was working fine before the weekend The data for the index pattern is coming in fine and i am able t… --- ## [Plugin questions](https://discuss.elastic.co/t/plugin-questions/267378)
**Author:** [@nmalocic](https://discuss.elastic.co/u/nmalocic)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 1:37pm UTC](https://discuss.elastic.co/t/plugin-questions/267378 "2021-03-16T13:37:01Z")
Hi everyone, I have few questions related to plugins. Is it possible to log actions inside my processor plugin? What is the best way to ensure all existing documents are processed with new plugin and processor that us… --- ## [How to check if the data is coming in last 30 min](https://discuss.elastic.co/t/how-to-check-if-the-data-is-coming-in-last-30-min/267341)
**Author:** [@jyothsna](https://discuss.elastic.co/u/jyothsna)\ **Replies:** 2\ **Last updated:** [March 16, 2021, 1:10pm UTC](https://discuss.elastic.co/t/how-to-check-if-the-data-is-coming-in-last-30-min/267341 "2021-03-16T13:10:26Z")
Hi, I am ingesting data from sql to elastic through logstash. Now I want to check whether the data is coming or not in last30 min .if not coming so that i can trap as missing data in elasticsearch. how to achieve this. … --- ## [Bad dates in names after rolling with ILM](https://discuss.elastic.co/t/bad-dates-in-names-after-rolling-with-ilm/267270)
**Author:** [@Jiri\_Petak](https://discuss.elastic.co/u/Jiri_Petak)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 11:55am UTC](https://discuss.elastic.co/t/bad-dates-in-names-after-rolling-with-ilm/267270 "2021-03-16T11:55:30Z")
Hi, i am working on Elasticsearch version 7.7.0 with logstash and creating indices with ILM and rolling index aliases. I have defined ILM like: { "weekly\_rollover-4w\_retention" : { "version" : 2, … --- ## [Process Rejection Question](https://discuss.elastic.co/t/process-rejection-question/267325)
**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\ **Replies:** 4\ **Last updated:** [March 16, 2021, 10:52am UTC](https://discuss.elastic.co/t/process-rejection-question/267325 "2021-03-16T10:52:36Z")
Hi, we're operating an ELK cluster on a single host. The current setup includes: 3 node ( 1 master-nodata, 2 master-data) containers 2 logstash containers (for app and for container logs) 2 kibana containers(1 for adm… --- ## [Rollup: Deleted index but cannot stop/delete job](https://discuss.elastic.co/t/rollup-deleted-index-but-cannot-stop-delete-job/265930)
**Author:** [@tg295](https://discuss.elastic.co/u/tg295)\ **Replies:** 3\ **Last updated:** [March 16, 2021, 10:48am UTC](https://discuss.elastic.co/t/rollup-deleted-index-but-cannot-stop-delete-job/265930 "2021-03-16T10:48:06Z")
I have a rollup job in state "Indexing". I cannot stop nor delete the job - stopping is not an option and deleting brings up the following error: 400: Bad Request. Could not delete job \[index-blah\] because indexer state… --- ## [Elasticsearch security use ldap how to config role](https://discuss.elastic.co/t/elasticsearch-security-use-ldap-how-to-config-role/267347)
**Author:** [@taoyantu](https://discuss.elastic.co/u/taoyantu)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 10:30am UTC](https://discuss.elastic.co/t/elasticsearch-security-use-ldap-how-to-config-role/267347 "2021-03-16T10:30:18Z")
hello master ,please help me ,i use the elasticsearch realms ldap ,the elasticsearch.yml like realms: ldap: ldap1: follow\_referrals:false order: 10 url: "xxxxx" bind\_dn: "xxxx" bind\_pasword: "xxxx" user\_search: … --- ## [Problem adding company certificate in Elasticsearch](https://discuss.elastic.co/t/problem-adding-company-certificate-in-elasticsearch/267344)
**Author:** [@Andrea92](https://discuss.elastic.co/u/Andrea92)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 9:46am UTC](https://discuss.elastic.co/t/problem-adding-company-certificate-in-elasticsearch/267344 "2021-03-16T09:46:14Z")
Buenos días a tod@s, Tengo un problema con el certificado de mi empresa. Cuando le incorporo la ruta a las variables de docker de Elasticsearch para que los lea y los compruebe pero me dice que el certificado de interca… --- ## [Creating a transform with must\_not bool not working as expected](https://discuss.elastic.co/t/creating-a-transform-with-must-not-bool-not-working-as-expected/267330)
**Author:** [@vigneshr35](https://discuss.elastic.co/u/vigneshr35)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 9:26am UTC](https://discuss.elastic.co/t/creating-a-transform-with-must-not-bool-not-working-as-expected/267330 "2021-03-16T09:26:32Z")
Hi everyone, I am trying to create a transform and facing some issues with using the must\_not for a specific condition I have. Here are the details: Source index sample document: { "app.status": "COMPLETED", "@ti… --- ## [Received plaintext http traffic on an https channel, closing connection Netty4HttpChannel](https://discuss.elastic.co/t/received-plaintext-http-traffic-on-an-https-channel-closing-connection-netty4httpchannel/266957)
**Author:** [@Andrea92](https://discuss.elastic.co/u/Andrea92)\ **Replies:** 9\ **Last updated:** [March 16, 2021, 9:26am UTC](https://discuss.elastic.co/t/received-plaintext-http-traffic-on-an-https-channel-closing-connection-netty4httpchannel/266957 "2021-03-16T09:26:04Z")
Buenas tardes, Soy nueva en estos foros, pero he visto que la mayoría de los problemas que me he encontrado con ELK los he podido solucionar gracias a este foro. Pero este problema lo llevo arrastrando ya más de 1 mes … --- ## [High CPU (cgroup) usage/utilization](https://discuss.elastic.co/t/high-cpu-cgroup-usage-utilization/258964)
**Author:** [@NejcK](https://discuss.elastic.co/u/NejcK)\ **Replies:** 19\ **Last updated:** [March 16, 2021, 8:34am UTC](https://discuss.elastic.co/t/high-cpu-cgroup-usage-utilization/258964 "2021-03-16T08:34:09Z")
Hi. We have only one node in our cluster (hosted on Elastic cloud, v7.10.0) with Kibana (for filebeat and metricbeat) and everything was working fine until about last week. I'm pretty new to all this, but I've set up al… --- ## [Why does an enrich policy get executed on the master node?](https://discuss.elastic.co/t/why-does-an-enrich-policy-get-executed-on-the-master-node/263241)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 29\ **Last updated:** [March 16, 2021, 7:56am UTC](https://discuss.elastic.co/t/why-does-an-enrich-policy-get-executed-on-the-master-node/263241 "2021-03-16T07:56:36Z")
I'm trying to create a geo\_match enrich policy based on a not-so-big source index (10GB). The match field is a geo\_shape and there are about half a dozen single-term enrich fields. So nothing extraordinary. When the ind… --- ## [Elasticsearch : Return the value of a field in the latest document created each day for the last one month](https://discuss.elastic.co/t/elasticsearch-return-the-value-of-a-field-in-the-latest-document-created-each-day-for-the-last-one-month/267327)
**Author:** [@Bengagi\_Foued](https://discuss.elastic.co/u/Bengagi_Foued)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 7:51am UTC](https://discuss.elastic.co/t/elasticsearch-return-the-value-of-a-field-in-the-latest-document-created-each-day-for-the-last-one-month/267327 "2021-03-16T07:51:10Z")
I have a collection with documents updating everyday. Can someone provide me some suggestion for returning the value of a field in the latest document for each day for the last one month my document is like the one bello… --- ## [Could'nt set case\_insensitive option in Nest](https://discuss.elastic.co/t/couldnt-set-case-insensitive-option-in-nest/267227)
**Author:** [@Sangeetha-Murugesan](https://discuss.elastic.co/u/Sangeetha-Murugesan)\ **Replies:** 0\ **Last updated:** [March 15, 2021, 8:00am UTC](https://discuss.elastic.co/t/couldnt-set-case-insensitive-option-in-nest/267227 "2021-03-15T08:00:25Z")
Hi, I am using ElasticSearch version 7.11. My TermQuery only returns case-sensitive matching results,to avoid that I set case\_insensitive as true in DSL term query like below and it returns data as expected. { "qu… --- ## [Rally in kubernetes with docker image](https://discuss.elastic.co/t/rally-in-kubernetes-with-docker-image/267234)
**Author:** [@Vineeth\_varma](https://discuss.elastic.co/u/Vineeth_varma)\ **Replies:** 1\ **Last updated:** [March 16, 2021, 6:02am UTC](https://discuss.elastic.co/t/rally-in-kubernetes-with-docker-image/267234 "2021-03-16T06:02:06Z")
Hi Elastic Team, I would like to perform benchmark Testing for Elasticsearch, I have few questions regarding this: Can we use rally as a Kubernetes Deployment. https://github.com/elastic/rally/tree/master/docker - I… --- ## [Elasticsearch as source of Apache Flink?](https://discuss.elastic.co/t/elasticsearch-as-source-of-apache-flink/267317)
**Author:** [@wangqinghuan](https://discuss.elastic.co/u/wangqinghuan)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 3:15am UTC](https://discuss.elastic.co/t/elasticsearch-as-source-of-apache-flink/267317 "2021-03-16T03:15:46Z")
With es-hadoop plugin, we can regard Elasticsearch as source of Hadoop/Spark. Do we have any plugin helping Elasticsearch as source of Apache Flink? --- ## [\[Highlight\] Highlight query doesn't work properly in should query](https://discuss.elastic.co/t/highlight-highlight-query-doesnt-work-properly-in-should-query/267314)
**Author:** [@kwang\_hee\_Han](https://discuss.elastic.co/u/kwang_hee_Han)\ **Replies:** 0\ **Last updated:** [March 16, 2021, 2:34am UTC](https://discuss.elastic.co/t/highlight-highlight-query-doesnt-work-properly-in-should-query/267314 "2021-03-16T02:34:52Z")
GET naver\_article/\_search { "size": 100, "query" : { "function\_score": { "functions": \[ { "weight": 1.8, "gauss": { "format\_date": { "scale": "1d" … --- ## [Artifacts.elastic.co intermittently fails (404, "no longer has a Release file.")](https://discuss.elastic.co/t/artifacts-elastic-co-intermittently-fails-404-no-longer-has-a-release-file/266151)
**Author:** [@tedder](https://discuss.elastic.co/u/tedder)\ **Replies:** 3\ **Last updated:** [March 16, 2021, 1:32am UTC](https://discuss.elastic.co/t/artifacts-elastic-co-intermittently-fails-404-no-longer-has-a-release-file/266151 "2021-03-16T01:32:18Z")
It seems that there are transient failures with artifacts.elastic.co, perhaps servers that are out of sync. We sometimes see this when running apt-get -q update: bad $ sudo apt-get -q update ... Ign:5 https://artifacts… --- ## [Elasticsearch to Google sheets](https://discuss.elastic.co/t/elasticsearch-to-google-sheets/267173)
**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\ **Replies:** 1\ **Last updated:** [March 15, 2021, 10:10pm UTC](https://discuss.elastic.co/t/elasticsearch-to-google-sheets/267173 "2021-03-15T22:10:26Z")
Hi All, Is there any direct way to export data from the Elasticsearch index to Googlesheets (not from google sheets to elasticsearch) based on a defined iterval without using any ETL tool or script? Something like G-conn… --- ## [Send value aggregation.payload with kibana watcher](https://discuss.elastic.co/t/send-value-aggregation-payload-with-kibana-watcher/267124)
**Author:** [@Eyler\_Rodrigues](https://discuss.elastic.co/u/Eyler_Rodrigues)\ **Replies:** 0\ **Last updated:** [March 12, 2021, 8:53pm UTC](https://discuss.elastic.co/t/send-value-aggregation-payload-with-kibana-watcher/267124 "2021-03-12T20:53:47Z")
Dear, I need help to resolve a question related to the watcher. I created a script with an aggregation and based on a value it sends a message to a webhook. The result of my script is an example below: "aggregations": … --- ## [Detecting date from string input](https://discuss.elastic.co/t/detecting-date-from-string-input/267305)
**Author:** [@macctown](https://discuss.elastic.co/u/macctown)\ **Replies:** 0\ **Last updated:** [March 15, 2021, 7:58pm UTC](https://discuss.elastic.co/t/detecting-date-from-string-input/267305 "2021-03-15T19:58:10Z")
Hi I'm trying to find a way to get possible "date" information from user input string. Input - a string that may contain date information, for example: "UK basketball", "US sports 2019", "sports 2019/12/23" After sendi… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=681) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=683)