# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=699

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 700

---

## [ElasticSearch.NET query serialization](https://discuss.elastic.co/t/elasticsearch-net-query-serialization/264891)

<div class="topic-metadata">

**Author:** [@yongkeecho](https://discuss.elastic.co/u/yongkeecho)\
**Replies:** 0\
**Last updated:** [February 19, 2021, 5:02pm UTC](https://discuss.elastic.co/t/elasticsearch-net-query-serialization/264891 "2021-02-19T17:02:37Z")

</div>

Hi, I wonder if there is a public serializer or converter for QueryContainer object. var query = Query\<Project\>.DateRange(r =\> r .Field(f =\> f.StartedOn) .GreaterThanOrEquals(new …

---

## [Elastic search using more RAM and not release](https://discuss.elastic.co/t/elastic-search-using-more-ram-and-not-release/264928)

<div class="topic-metadata">

**Author:** [@xgx](https://discuss.elastic.co/u/xgx)\
**Replies:** 1\
**Last updated:** [February 21, 2021, 9:45pm UTC](https://discuss.elastic.co/t/elastic-search-using-more-ram-and-not-release/264928 "2021-02-21T21:45:52Z")

</div>

Hi, I have a problem with elastic search uses a lot of os memory (non buff / cache).Here are some details： 1.I am using a 64 GB Ram machine . 2.I have allocated 26gb as ES heap size. 3.only elasticsearch service runn…

---

## [Perform aggregation on small set of documents](https://discuss.elastic.co/t/perform-aggregation-on-small-set-of-documents/264515)

<div class="topic-metadata">

**Author:** [@Madhu\_Dasa](https://discuss.elastic.co/u/Madhu_Dasa)\
**Replies:** 3\
**Last updated:** [February 21, 2021, 9:26pm UTC](https://discuss.elastic.co/t/perform-aggregation-on-small-set-of-documents/264515 "2021-02-21T21:26:50Z")

</div>

I have a query which returns 100 documents. While performing aggregation it considers all the documents . But I want to apply aggregation only on top 5 documents. Is there a way to achieve this?

---

## [Data directory on remort serever](https://discuss.elastic.co/t/data-directory-on-remort-serever/264972)

<div class="topic-metadata">

**Author:** [@Ankur\_Mahajan](https://discuss.elastic.co/u/Ankur_Mahajan)\
**Replies:** 4\
**Last updated:** [February 21, 2021, 9:18pm UTC](https://discuss.elastic.co/t/data-directory-on-remort-serever/264972 "2021-02-21T21:18:53Z")

</div>

Is there any possibility where I can put the data directory to a remort cloud instance? Cloud instance 1 Public IP: 1:11:11:111 (Dummy) Elasticsearch data directory path: /home/elasticsearch/data Cloud instance 2 El…

---

## [Updated to 7.11.00 - Resource is under maintenance / recovery](https://discuss.elastic.co/t/updated-to-7-11-00-resource-is-under-maintenance-recovery/264782)

<div class="topic-metadata">

**Author:** [@austinsonger](https://discuss.elastic.co/u/austinsonger)\
**Replies:** 3\
**Last updated:** [February 21, 2021, 9:17pm UTC](https://discuss.elastic.co/t/updated-to-7-11-00-resource-is-under-maintenance-recovery/264782 "2021-02-21T21:17:52Z")

</div>

Upgraded to 7.11.0 and now have the following error {"ok":false,"message":"Resource is under maintenance / recovery."}

---

## [How can we add dynamic templates in existing elastic index](https://discuss.elastic.co/t/how-can-we-add-dynamic-templates-in-existing-elastic-index/264282)

<div class="topic-metadata">

**Author:** [@prakhara](https://discuss.elastic.co/u/prakhara)\
**Replies:** 5\
**Last updated:** [February 21, 2021, 9:16pm UTC](https://discuss.elastic.co/t/how-can-we-add-dynamic-templates-in-existing-elastic-index/264282 "2021-02-21T21:16:22Z")

</div>

I have a need to add more dynamic templates in my existing index mappings, how can I do that Tried doing below, but it didn't worked PUT {$indexname}\_mappings { "mappings" : { "dynamic\_templates" : \[ { "strings"…

---

## [Change analyzer into an existing index](https://discuss.elastic.co/t/change-analyzer-into-an-existing-index/264746)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 3\
**Last updated:** [February 21, 2021, 9:15pm UTC](https://discuss.elastic.co/t/change-analyzer-into-an-existing-index/264746 "2021-02-21T21:15:05Z")

</div>

Hey there, I have an existing index without any custom setting or mapping for any field, so everything is by default. Into the docs I have a field named category which contains words like Women's or Womens. POST my\_in…

---

## [Case Sensitive Query for Text fields in Elasticsearch](https://discuss.elastic.co/t/case-sensitive-query-for-text-fields-in-elasticsearch/264015)

<div class="topic-metadata">

**Author:** [@pathfinder225](https://discuss.elastic.co/u/pathfinder225)\
**Replies:** 6\
**Last updated:** [February 21, 2021, 9:01pm UTC](https://discuss.elastic.co/t/case-sensitive-query-for-text-fields-in-elasticsearch/264015 "2021-02-21T21:01:44Z")

</div>

I have a requirement of case sensitive search where I need to search for particular word(case sensitive ) in message field which is of type text. I am using Java Rest High level client. My search word is ERROR , query…

---

## [Alerting creating](https://discuss.elastic.co/t/alerting-creating/261939)

<div class="topic-metadata">

**Author:** [@alfredo.deluca](https://discuss.elastic.co/u/alfredo.deluca)\
**Replies:** 3\
**Last updated:** [February 21, 2021, 8:27pm UTC](https://discuss.elastic.co/t/alerting-creating/261939 "2021-02-21T20:27:01Z")

</div>

Hi all. I am using for test purpose elastic on cloud and I'd like to create an alert/watcher (not sure which one is the best option) to send an alert when a POD on K8S goes down. That d be easy but I want to send the al…

---

## [Hot warm architecture elasticsearch](https://discuss.elastic.co/t/hot-warm-architecture-elasticsearch/264935)

<div class="topic-metadata">

**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\
**Replies:** 5\
**Last updated:** [February 21, 2021, 6:49pm UTC](https://discuss.elastic.co/t/hot-warm-architecture-elasticsearch/264935 "2021-02-21T18:49:11Z")

</div>

Hi, I have 7 node cluster, master nodes - 3 hot nodes -2 warm nodes-2 An application creates daily indexes and sends indexes to a cluster. I want to use hot warm architecture for this cluster. I want to know how t…

---

## [Machine Lerning Tab giving error](https://discuss.elastic.co/t/machine-lerning-tab-giving-error/264990)

<div class="topic-metadata">

**Author:** [@Tombal](https://discuss.elastic.co/u/Tombal)\
**Replies:** 4\
**Last updated:** [February 21, 2021, 6:25pm UTC](https://discuss.elastic.co/t/machine-lerning-tab-giving-error/264990 "2021-02-21T18:25:29Z")

</div>

Hello, After i seperated my ml nodes, i realised my machine learning tab at kibana not working as expected. Probably it is about some other reason but couldn't find out how to fix this. I don't know whether something i…

---

## [Connection error to a secured Elasticsearch: unable to authenticate user](https://discuss.elastic.co/t/connection-error-to-a-secured-elasticsearch-unable-to-authenticate-user/264919)

<div class="topic-metadata">

**Author:** [@oferbar00](https://discuss.elastic.co/u/oferbar00)\
**Replies:** 4\
**Last updated:** [February 21, 2021, 4:07pm UTC](https://discuss.elastic.co/t/connection-error-to-a-secured-elasticsearch-unable-to-authenticate-user/264919 "2021-02-21T16:07:24Z")

</div>

Hello, I am trying to create a track from an Elasticsearch node (v7.5.2) that is running on a Windows server 2019 VM and using TLS with basic authentication. From the rally (v2.0.4) machine I am able to curl to it jus…

---

## [Recover Elastic Cluster password](https://discuss.elastic.co/t/recover-elastic-cluster-password/264669)

<div class="topic-metadata">

**Author:** [@thewasta](https://discuss.elastic.co/u/thewasta)\
**Replies:** 6\
**Last updated:** [February 21, 2021, 6:20am UTC](https://discuss.elastic.co/t/recover-elastic-cluster-password/264669 "2021-02-21T06:20:35Z")

</div>

Hello! For some reason, password/user doesn't work on my cluster, it used to work but now it doesn't. I don't know if it is because I had to reboot all servers (working with 3 servers). Now I would like to reset all pas…

---

## [Is it possible to connect Elasticsearch with App Engine with flexible environment via VPC Connector in Google Cloud Platform?](https://discuss.elastic.co/t/is-it-possible-to-connect-elasticsearch-with-app-engine-with-flexible-environment-via-vpc-connector-in-google-cloud-platform/264961)

<div class="topic-metadata">

**Author:** [@white\_rabbit](https://discuss.elastic.co/u/white_rabbit)\
**Replies:** 3\
**Last updated:** [February 21, 2021, 1:31am UTC](https://discuss.elastic.co/t/is-it-possible-to-connect-elasticsearch-with-app-engine-with-flexible-environment-via-vpc-connector-in-google-cloud-platform/264961 "2021-02-21T01:31:57Z")

</div>

I have deployed my Django API in the App Engine with flexible environment. I have also created PostgreSQL instance in the Virtual Private Cloud and I connected my database with my Django App deployed in the App Engine us…

---

## [Percolator: Best Practice for Boost/Customizing Relevance Scoring](https://discuss.elastic.co/t/percolator-best-practice-for-boost-customizing-relevance-scoring/262164)

<div class="topic-metadata">

**Author:** [@jordannb](https://discuss.elastic.co/u/jordannb)\
**Replies:** 1\
**Last updated:** [February 21, 2021, 12:38am UTC](https://discuss.elastic.co/t/percolator-best-practice-for-boost-customizing-relevance-scoring/262164 "2021-02-21T00:38:45Z")

</div>

Per documentation, index-time boosting was replaced with query-time boosting in a previous release. This makes sense - here an explanation is given which explains that index time boost requires re-indexing, so it's bette…

---

## [Issue with elasticsearch query - dot in field values](https://discuss.elastic.co/t/issue-with-elasticsearch-query-dot-in-field-values/264943)

<div class="topic-metadata">

**Author:** [@Sampson\_Light](https://discuss.elastic.co/u/Sampson_Light)\
**Replies:** 5\
**Last updated:** [February 20, 2021, 5:11pm UTC](https://discuss.elastic.co/t/issue-with-elasticsearch-query-dot-in-field-values/264943 "2021-02-20T17:11:45Z")

</div>

Hello, There's an issue with the use of . in my field value. The sample below is a 'valid' query that returns some hits Copy to clipboard { "query": { "bool": { "must": \[ { "wildcard": {…

---

## [Python ElasticSearch - How to increase query size limit](https://discuss.elastic.co/t/python-elasticsearch-how-to-increase-query-size-limit/264944)

<div class="topic-metadata">

**Author:** [@test\_tester](https://discuss.elastic.co/u/test_tester)\
**Replies:** 4\
**Last updated:** [February 20, 2021, 1:54pm UTC](https://discuss.elastic.co/t/python-elasticsearch-how-to-increase-query-size-limit/264944 "2021-02-20T13:54:31Z")

</div>

Hi, I'm currently writing a python script to extract out my elasticsearch documents and the following are my ES parameters that involves the sizing Copy to clipboard response = es.search(index= es\_index\_list,scroll='5…

---

## [Can we setup TLS encryption on an existing cluster without losing index data](https://discuss.elastic.co/t/can-we-setup-tls-encryption-on-an-existing-cluster-without-losing-index-data/264848)

<div class="topic-metadata">

**Author:** [@Arvind\_Ks](https://discuss.elastic.co/u/Arvind_Ks)\
**Replies:** 2\
**Last updated:** [February 20, 2021, 11:43am UTC](https://discuss.elastic.co/t/can-we-setup-tls-encryption-on-an-existing-cluster-without-losing-index-data/264848 "2021-02-20T11:43:52Z")

</div>

Hi Team, Can we setup TLS encryption on existing cluster with data, without losing it? I have a 40 node cluster with lots of indices. I see that to setup TLS we need to disable "cluster.initial\_master\_nodes" in elasti…

---

## [Cost of searchable fields](https://discuss.elastic.co/t/cost-of-searchable-fields/264913)

<div class="topic-metadata">

**Author:** [@abhishekc92](https://discuss.elastic.co/u/abhishekc92)\
**Replies:** 1\
**Last updated:** [February 20, 2021, 3:06am UTC](https://discuss.elastic.co/t/cost-of-searchable-fields/264913 "2021-02-20T03:06:46Z")

</div>

I'm very new to Elastic. I am thinking of a document structure of a reasonable size, with quite a few fields, which I don't necessarily need to be able to search on. What I could not find in the documentation is the exac…

---

## [Why elk requires a privilege container permission in Openshift](https://discuss.elastic.co/t/why-elk-requires-a-privilege-container-permission-in-openshift/264923)

<div class="topic-metadata">

**Author:** [@Roberto\_Ramirez](https://discuss.elastic.co/u/Roberto_Ramirez)\
**Replies:** 0\
**Last updated:** [February 19, 2021, 11:26pm UTC](https://discuss.elastic.co/t/why-elk-requires-a-privilege-container-permission-in-openshift/264923 "2021-02-19T23:26:14Z")

</div>

I am trying to deploy elk in openshift 4.6 and i am getting the following error create Pod elksaastest-master-0 in StatefulSet elktest-master failed error: pods elkstest-master-0 is forbidden: unable to validate against…

---

## [Snapshot Recovery fails due to connection issues with GCS repository](https://discuss.elastic.co/t/snapshot-recovery-fails-due-to-connection-issues-with-gcs-repository/264756)

<div class="topic-metadata">

**Author:** [@proton](https://discuss.elastic.co/u/proton)\
**Replies:** 1\
**Last updated:** [February 19, 2021, 8:01pm UTC](https://discuss.elastic.co/t/snapshot-recovery-fails-due-to-connection-issues-with-gcs-repository/264756 "2021-02-19T20:01:11Z")

</div>

Hello, I've been running into connection issues while trying to restore a snapshot from GCS repository. We have multiple clusters and other ES clusters can connect to a GCS bucket within same project on google cloud but…

---

## [Syntax issue with customized query](https://discuss.elastic.co/t/syntax-issue-with-customized-query/264899)

<div class="topic-metadata">

**Author:** [@Shahsha\_21](https://discuss.elastic.co/u/Shahsha_21)\
**Replies:** 0\
**Last updated:** [February 19, 2021, 6:11pm UTC](https://discuss.elastic.co/t/syntax-issue-with-customized-query/264899 "2021-02-19T18:11:08Z")

</div>

I am trying to create a Boolean query which takes in user input(stored in a variable) and appends it with an existing string for e.g. User enters: "ABC" AND "CDE" which will be stored in a temporary variable: var input…

---

## [Unable to index a json string (array of json objects) to elastic search](https://discuss.elastic.co/t/unable-to-index-a-json-string-array-of-json-objects-to-elastic-search/264851)

<div class="topic-metadata">

**Author:** [@schawla](https://discuss.elastic.co/u/schawla)\
**Replies:** 7\
**Last updated:** [February 19, 2021, 5:47pm UTC](https://discuss.elastic.co/t/unable-to-index-a-json-string-array-of-json-objects-to-elastic-search/264851 "2021-02-19T17:47:10Z")

</div>

I have an array of objects in the form of a single json string something like "\[{"id": 1, "name":"test"}, {"id": 2, "name":"test2"}\]" I want to be able to bulk index this json string directly to elastic search without …

---

## [Incrementing param value within a script](https://discuss.elastic.co/t/incrementing-param-value-within-a-script/264888)

<div class="topic-metadata">

**Author:** [@Marc\_Pereira](https://discuss.elastic.co/u/Marc_Pereira)\
**Replies:** 2\
**Last updated:** [February 19, 2021, 5:42pm UTC](https://discuss.elastic.co/t/incrementing-param-value-within-a-script/264888 "2021-02-19T17:42:27Z")

</div>

This is a simplified version of the problem. "should": \[ { "script\_score": { "query": { "match\_all": {} }, "script": { "source": ""…

---

## [How to map list of values correctly to show them in Grafana?](https://discuss.elastic.co/t/how-to-map-list-of-values-correctly-to-show-them-in-grafana/264895)

<div class="topic-metadata">

**Author:** [@dewell](https://discuss.elastic.co/u/dewell)\
**Replies:** 0\
**Last updated:** [February 19, 2021, 5:34pm UTC](https://discuss.elastic.co/t/how-to-map-list-of-values-correctly-to-show-them-in-grafana/264895 "2021-02-19T17:34:44Z")

</div>

Hello, I try to keep it simple. I receive a variable number of float values embedded in a communication protocol via logstash and created a mapping for an elasticsearch index. Via Grafana I connect to the index and I get…

---

## [Nest .Sort() doesnt seem to except a list? Any work arounds?](https://discuss.elastic.co/t/nest-sort-doesnt-seem-to-except-a-list-any-work-arounds/264603)

<div class="topic-metadata">

**Author:** [@Adam\_Whittaker](https://discuss.elastic.co/u/Adam_Whittaker)\
**Replies:** 1\
**Last updated:** [February 19, 2021, 4:15pm UTC](https://discuss.elastic.co/t/nest-sort-doesnt-seem-to-except-a-list-any-work-arounds/264603 "2021-02-19T16:15:46Z")

</div>

Hello, I am using ElasticSearch Nest Fluent DSL and cant seem to figure out how to create a list of Sorts that the .Sort() accepts. I have an array of sorts and i want to convert them to work with Nest a bit like you c…

---

## [DSL Query, Multiple conditions for must\_not, 'or, and'](https://discuss.elastic.co/t/dsl-query-multiple-conditions-for-must-not-or-and/264876)

<div class="topic-metadata">

**Author:** [@gneves](https://discuss.elastic.co/u/gneves)\
**Replies:** 0\
**Last updated:** [February 19, 2021, 3:31pm UTC](https://discuss.elastic.co/t/dsl-query-multiple-conditions-for-must-not-or-and/264876 "2021-02-19T15:31:25Z")

</div>

Hello guys im having some trouble to create multiple conditions. Ill give some pseudo examples in order to show my idea. "must\_not": \[ { "match": { …

---

## [Turn on and off elastic nodes in non business hours](https://discuss.elastic.co/t/turn-on-and-off-elastic-nodes-in-non-business-hours/264703)

<div class="topic-metadata">

**Author:** [@Todor\_Popov](https://discuss.elastic.co/u/Todor_Popov)\
**Replies:** 3\
**Last updated:** [February 19, 2021, 3:27pm UTC](https://discuss.elastic.co/t/turn-on-and-off-elastic-nodes-in-non-business-hours/264703 "2021-02-19T15:27:17Z")

</div>

Hi, is it possible to have the elastic cloud stopped for non business hours? Completely to avoid charges? I guess alternative to that may be to resize it to smaller node size when there is no traffic? Thanx.

---

## [Elasticsearch 7.3.1 - Help on three nodes cluster - Master not discovered yet](https://discuss.elastic.co/t/elasticsearch-7-3-1-help-on-three-nodes-cluster-master-not-discovered-yet/264706)

<div class="topic-metadata">

**Author:** [@dcenaculo](https://discuss.elastic.co/u/dcenaculo)\
**Replies:** 3\
**Last updated:** [February 19, 2021, 12:57pm UTC](https://discuss.elastic.co/t/elasticsearch-7-3-1-help-on-three-nodes-cluster-master-not-discovered-yet/264706 "2021-02-19T12:57:55Z")

</div>

Hi, I had Elasticsearch working well on the PORSCHE node. Then I tried to add two more nodes, OPEL and MORRIS. All on the same subnet. PORSCHE: 10.146.114.66 MORRIS: 10.146.114.89 OPEL: 10.146.114.88 This …

---

## [Xpack without SSL/Certificates](https://discuss.elastic.co/t/xpack-without-ssl-certificates/264773)

<div class="topic-metadata">

**Author:** [@madduck](https://discuss.elastic.co/u/madduck)\
**Replies:** 4\
**Last updated:** [February 19, 2021, 12:51pm UTC](https://discuss.elastic.co/t/xpack-without-ssl-certificates/264773 "2021-02-19T12:51:48Z")

</div>

Hi gang, with upgrading our environments to 7.11 I tackled an old issue of mine: Trying to get our dev. cluster running with the xpack features active but without the need for those pesky certificates all the time. The…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=698)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=700)
