# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=702 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 703 --- ## [Java API ping operation hangs the application on Elasticsearch 7.11.0](https://discuss.elastic.co/t/java-api-ping-operation-hangs-the-application-on-elasticsearch-7-11-0/264351)
**Author:** [@marcgise](https://discuss.elastic.co/u/marcgise)\ **Replies:** 20\ **Last updated:** [February 17, 2021, 8:23am UTC](https://discuss.elastic.co/t/java-api-ping-operation-hangs-the-application-on-elasticsearch-7-11-0/264351 "2021-02-17T08:23:12Z")
I have 3 Java applications (using RestHighLevelClient 7.11.0 client API) connected to the same ElasticSearch server version 7.11.0, and periodically I check the connection to ElasticSearch with ping operation, using clie… --- ## [Get the filtered response in Elasticsearch cat APIs](https://discuss.elastic.co/t/get-the-filtered-response-in-elasticsearch-cat-apis/264522)
**Author:** [@bhavya](https://discuss.elastic.co/u/bhavya)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 7:36am UTC](https://discuss.elastic.co/t/get-the-filtered-response-in-elasticsearch-cat-apis/264522 "2021-02-17T07:36:05Z")
I am planning to get the information of all the primary shards in my ES cluster using \_cat/shards API, but I don't see any option to get only the primary shards in the API response, I tried using prirep:p in the h=index,… --- ## [Elasticsearch multi-tenancy encryption](https://discuss.elastic.co/t/elasticsearch-multi-tenancy-encryption/264518)
**Author:** [@orenwin](https://discuss.elastic.co/u/orenwin)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 7:25am UTC](https://discuss.elastic.co/t/elasticsearch-multi-tenancy-encryption/264518 "2021-02-17T07:25:19Z")
Hi, I am trying to figure out a way to encrypt Elasticsearch data files per tenant. I came across this plugin: elasticsearch/IndexStorePlugin.java at 985ae9a1ae9abbe110a1fb7333da013b25413edf · elastic/elasticsearch · … --- ## [Add a node to an existing cluster](https://discuss.elastic.co/t/add-a-node-to-an-existing-cluster/264432)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 3\ **Last updated:** [February 17, 2021, 5:07am UTC](https://discuss.elastic.co/t/add-a-node-to-an-existing-cluster/264432 "2021-02-17T05:07:33Z")
Hello! Can someone please help me with adding a new node to an existing cluster? I get the "Master\_not\_discovered\_exception" and I have tried different solutions such as removing path.data (on node 2) , setting up discov… --- ## [Can Elastic work with Windows certificates?](https://discuss.elastic.co/t/can-elastic-work-with-windows-certificates/263964)
**Author:** [@lachezar.uzunov](https://discuss.elastic.co/u/lachezar.uzunov)\ **Replies:** 4\ **Last updated:** [February 17, 2021, 2:32am UTC](https://discuss.elastic.co/t/can-elastic-work-with-windows-certificates/263964 "2021-02-17T02:32:22Z")
Hello everyone. I created elastic stack of 3 nodes and it was working pretty fine until I have to replace the elastic generated certificate with one from windows server CA. I do not seem to find information of rather it… --- ## [Unable to find source.geo.location in index pattern logstash-\*](https://discuss.elastic.co/t/unable-to-find-source-geo-location-in-index-pattern-logstash/264496)
**Author:** [@Ronnie\_Raraihuru](https://discuss.elastic.co/u/Ronnie_Raraihuru)\ **Replies:** 4\ **Last updated:** [February 17, 2021, 1:53am UTC](https://discuss.elastic.co/t/unable-to-find-source-geo-location-in-index-pattern-logstash/264496 "2021-02-17T01:53:42Z")
Got the above error when trying to view map under Security\>Network in Elastic. Index mapping "mappings" : { "geoip" : { "dynamic" : "true", "properties" : { "city\_name" : { … --- ## [ILM Shrink - All primary on same node fails](https://discuss.elastic.co/t/ilm-shrink-all-primary-on-same-node-fails/264309)
**Author:** [@cwiechmann](https://discuss.elastic.co/u/cwiechmann)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 12:38am UTC](https://discuss.elastic.co/t/ilm-shrink-all-primary-on-same-node-fails/264309 "2021-02-17T00:38:17Z")
Hi All, I'm using ILM-Policies in order to automate the Index-Lifecycle. As part of the Warm-Phase indices should be shrinked. I'm currently running into the following problem reported by: GET /\_cluster/allocation/expl… --- ## [Python3 + elasticsearch\_dsl good resources/examples simple query problem](https://discuss.elastic.co/t/python3-elasticsearch-dsl-good-resources-examples-simple-query-problem/264199)
**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\ **Replies:** 3\ **Last updated:** [February 16, 2021, 10:57pm UTC](https://discuss.elastic.co/t/python3-elasticsearch-dsl-good-resources-examples-simple-query-problem/264199 "2021-02-16T22:57:21Z")
i'm fighting to get over the hump of gaining competence with elasticsearch\_dsl for python. i'm trying to do my end of the year (2020) reports.. and i have a set of indexes that total about 3/4 of a billion records. i ne… --- ## [Elasticsearch Alerting Watcher count mismatch](https://discuss.elastic.co/t/elasticsearch-alerting-watcher-count-mismatch/264417)
**Author:** [@srajus](https://discuss.elastic.co/u/srajus)\ **Replies:** 1\ **Last updated:** [February 16, 2021, 10:00pm UTC](https://discuss.elastic.co/t/elasticsearch-alerting-watcher-count-mismatch/264417 "2021-02-16T22:00:26Z")
Hi I am setting up watcher alerts with multi match criteria .I am getting more than 2400+ count but when use the same multi filter criteria in the discover log section i am getting 113 count. not sure where exactly i a… --- ## [Security scans report version of Jackson-dataformat-cobr 2.10.4](https://discuss.elastic.co/t/security-scans-report-version-of-jackson-dataformat-cobr-2-10-4/264439)
**Author:** [@avifmontier](https://discuss.elastic.co/u/avifmontier)\ **Replies:** 1\ **Last updated:** [February 16, 2021, 9:46pm UTC](https://discuss.elastic.co/t/security-scans-report-version-of-jackson-dataformat-cobr-2-10-4/264439 "2021-02-16T21:46:02Z")
Jackson-dataformat-cobr 2.10.4 used by elasticsearch-x-content 7.9.x seems to have security issues: CVE-2020-28491 CVE-2020-25649 Those issue seems to be fixed in later version of Jackson. Is there an intention to up… --- ## [Update Aliases API](https://discuss.elastic.co/t/update-aliases-api/264369)
**Author:** [@Oscar\_Lopez](https://discuss.elastic.co/u/Oscar_Lopez)\ **Replies:** 5\ **Last updated:** [February 16, 2021, 9:19pm UTC](https://discuss.elastic.co/t/update-aliases-api/264369 "2021-02-16T21:19:56Z")
I have an index\_pattern called metricbeat- \* which I create an alias called alias\_metricbeat. Through the elasticsearch API I want to condition so that certain users do not perform filters of more than three months in th… --- ## [Threads stuck waiting for response](https://discuss.elastic.co/t/threads-stuck-waiting-for-response/264189)
**Author:** [@aouji](https://discuss.elastic.co/u/aouji)\ **Replies:** 5\ **Last updated:** [February 16, 2021, 8:19pm UTC](https://discuss.elastic.co/t/threads-stuck-waiting-for-response/264189 "2021-02-16T20:19:58Z")
Hi, We are running a ES cluster 7.7 and have a service accessing it through the Java rest client (7.7.0). The service is a high traffic springboot application deployed in our organization's kubernetes clusters. From ti… --- ## [Elastic stores string in numeric (long) field](https://discuss.elastic.co/t/elastic-stores-string-in-numeric-long-field/264102)
**Author:** [@Yaniv\_Bogdanov](https://discuss.elastic.co/u/Yaniv_Bogdanov)\ **Replies:** 6\ **Last updated:** [February 16, 2021, 7:31pm UTC](https://discuss.elastic.co/t/elastic-stores-string-in-numeric-long-field/264102 "2021-02-16T19:31:02Z")
Hello, I noticed that elastic allows to store a string value in a numeric field that was mapped as long (as the string can be parsed as a number). I'm not sure if this is a bug or a feature (and if it has a setting to … --- ## [Best way to export data do SQL database](https://discuss.elastic.co/t/best-way-to-export-data-do-sql-database/264462)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 1\ **Last updated:** [February 16, 2021, 7:16pm UTC](https://discuss.elastic.co/t/best-way-to-export-data-do-sql-database/264462 "2021-02-16T19:16:22Z")
Hi, could you help me advice What tools/techniques do you recommend to export data to SQL Database. (PostgreSQL/Oracle or any other) I need aggregations results export to SQL database (continuous query). I supposed… --- ## [Storm and ElasticStack with external ZooKeeper Server](https://discuss.elastic.co/t/storm-and-elasticstack-with-external-zookeeper-server/264363)
**Author:** [@AaronNGray](https://discuss.elastic.co/u/AaronNGray)\ **Replies:** 1\ **Last updated:** [February 16, 2021, 6:32pm UTC](https://discuss.elastic.co/t/storm-and-elasticstack-with-external-zookeeper-server/264363 "2021-02-16T18:32:44Z")
I am trying to create a docker-compose script that marries ElasticStack with Storm for the purposes of StormCrawler development. I have a storm script that includes a ZooKeeper server. I tried combining this with the… --- ## [Difference between aggregating on analyzed text field (using field data), compared to aggregating on high cardinality non-analyzed field](https://discuss.elastic.co/t/difference-between-aggregating-on-analyzed-text-field-using-field-data-compared-to-aggregating-on-high-cardinality-non-analyzed-field/264444)
**Author:** [@bagge](https://discuss.elastic.co/u/bagge)\ **Replies:** 3\ **Last updated:** [February 16, 2021, 6:06pm UTC](https://discuss.elastic.co/t/difference-between-aggregating-on-analyzed-text-field-using-field-data-compared-to-aggregating-on-high-cardinality-non-analyzed-field/264444 "2021-02-16T18:06:08Z")
Hi, We are seeing performance problems with our elasticsearch cluster. Our setup is running ES 6.6 with 6 nodes total where 2 are master and 4 are data. Each data node has 32GB memory and 16 available to the heap. We h… --- ## [Elasticsearch - How to start the instance/cluster with Gold or Platinum license](https://discuss.elastic.co/t/elasticsearch-how-to-start-the-instance-cluster-with-gold-or-platinum-license/264337)
**Author:** [@Pramodh\_Bettadapura](https://discuss.elastic.co/u/Pramodh_Bettadapura)\ **Replies:** 2\ **Last updated:** [February 16, 2021, 5:32pm UTC](https://discuss.elastic.co/t/elasticsearch-how-to-start-the-instance-cluster-with-gold-or-platinum-license/264337 "2021-02-16T17:32:10Z")
Is their a way to statically start the Elasticsearch instances with Gold or Platinum license. or is it only enabled on calling "PUT \_license" API with license JSON --- ## [Conditional N-gram token filter?](https://discuss.elastic.co/t/conditional-n-gram-token-filter/264460)
**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\ **Replies:** 0\ **Last updated:** [February 16, 2021, 5:21pm UTC](https://discuss.elastic.co/t/conditional-n-gram-token-filter/264460 "2021-02-16T17:21:19Z")
Could we have conditional N-gram token filter? Tell me yes or no ? More explanation : I have a text "The animal is cute" I want to know if it is possible to have min\_gram=3 if word.length\>=3 and min\_gram=2 if word.len… --- ## [How to prevent query execution within certain hours of the day?](https://discuss.elastic.co/t/how-to-prevent-query-execution-within-certain-hours-of-the-day/264456)
**Author:** [@mattinVS](https://discuss.elastic.co/u/mattinVS)\ **Replies:** 0\ **Last updated:** [February 16, 2021, 4:23pm UTC](https://discuss.elastic.co/t/how-to-prevent-query-execution-within-certain-hours-of-the-day/264456 "2021-02-16T16:23:49Z")
Hi, I'd like to prevent the execution of a query within certain hours of the day. The solution that comes into my mind is to use a painless script filter for this like "query": { "bool": { "filter": \[ … --- ## [Can I conditionally trigger a processor based on the current nested iteration or execute a plugin in script?](https://discuss.elastic.co/t/can-i-conditionally-trigger-a-processor-based-on-the-current-nested-iteration-or-execute-a-plugin-in-script/262288)
**Author:** [@dswitzer](https://discuss.elastic.co/u/dswitzer)\ **Replies:** 3\ **Last updated:** [February 16, 2021, 4:17pm UTC](https://discuss.elastic.co/t/can-i-conditionally-trigger-a-processor-based-on-the-current-nested-iteration-or-execute-a-plugin-in-script/262288 "2021-02-16T16:17:48Z")
Is there a way to process an attachment conditionally for a nested object that's represented by an array? I looked into the foreach processor with a conditional if, but the ctx object does not appear to hold a reference… --- ## [Can I delete a data-stream backing index?](https://discuss.elastic.co/t/can-i-delete-a-data-stream-backing-index/264449)
**Author:** [@gkman](https://discuss.elastic.co/u/gkman)\ **Replies:** 0\ **Last updated:** [February 16, 2021, 3:00pm UTC](https://discuss.elastic.co/t/can-i-delete-a-data-stream-backing-index/264449 "2021-02-16T15:00:53Z")
I have a few data-streams configured in my Elasticsearch cluster (with ILM policy). Suppose I run into storage problems and etc. and I want to prematurely delete a few backing indices of the data-streams- Is it possible… --- ## [Panic: runtime error: invalid memory address or nil pointer dereference in ecctl 1.1.0](https://discuss.elastic.co/t/panic-runtime-error-invalid-memory-address-or-nil-pointer-dereference-in-ecctl-1-1-0/263808)
**Author:** [@bbaronas](https://discuss.elastic.co/u/bbaronas)\ **Replies:** 1\ **Last updated:** [February 16, 2021, 2:18pm UTC](https://discuss.elastic.co/t/panic-runtime-error-invalid-memory-address-or-nil-pointer-dereference-in-ecctl-1-1-0/263808 "2021-02-16T14:18:29Z")
I am trying to output an upload template for my Elastic Cloud deployment using ecctl. However, when I run ecctl deployment show \ --generate-update-payload \> update.json using my actual deployment id I get … --- ## [Highlight query in URI](https://discuss.elastic.co/t/highlight-query-in-uri/263543)
**Author:** [@vikram\_singh](https://discuss.elastic.co/u/vikram_singh)\ **Replies:** 2\ **Last updated:** [February 16, 2021, 1:39pm UTC](https://discuss.elastic.co/t/highlight-query-in-uri/263543 "2021-02-16T13:39:11Z")
Hi, I want to use highlight in URI query. Ex. http://myservername.com:9200/myindex/\_search?q=myfieldname:searchvalue&highlight=myfieldname But this is not working. I want to use URI search with highlight but not get… --- ## [Elasticsearch backup & restore issue](https://discuss.elastic.co/t/elasticsearch-backup-restore-issue/264324)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 3\ **Last updated:** [February 16, 2021, 1:07pm UTC](https://discuss.elastic.co/t/elasticsearch-backup-restore-issue/264324 "2021-02-16T13:07:25Z")
Hi all, I'm trying to do backup and restore of elasticsearch data. I have taken backup of my elasticsearch data. But when i try to restore my backup, it gives errror that "cannot restore index \[ilm-history-3-000001\] b… --- ## [Dead letter queue not printing logs for events failed to get indexed in Elasticsearch](https://discuss.elastic.co/t/dead-letter-queue-not-printing-logs-for-events-failed-to-get-indexed-in-elasticsearch/263967)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 1\ **Last updated:** [February 16, 2021, 12:42pm UTC](https://discuss.elastic.co/t/dead-letter-queue-not-printing-logs-for-events-failed-to-get-indexed-in-elasticsearch/263967 "2021-02-16T12:42:30Z")
Objective: print log/event in a log file which are failed to index in Elasticsearch. I am ingesting logs via SQS input and few messages are getting failed to index in Elasticsearch. I have debug logs and it shows the fo… --- ## [It seems mapping update for "date\_range" field type is not idempotent](https://discuss.elastic.co/t/it-seems-mapping-update-for-date-range-field-type-is-not-idempotent/263034)
**Author:** [@0bivan](https://discuss.elastic.co/u/0bivan)\ **Replies:** 1\ **Last updated:** [February 16, 2021, 12:21pm UTC](https://discuss.elastic.co/t/it-seems-mapping-update-for-date-range-field-type-is-not-idempotent/263034 "2021-02-16T12:21:49Z")
Hi. Want to confirm the issue before posting it on github. ES does not allow to update date\_range field with exact same mapping settings and responds with 500. Tried with docker container (https://hub.docker.com/\_/elasti… --- ## [Create new field from query](https://discuss.elastic.co/t/create-new-field-from-query/263892)
**Author:** [@paasi6666](https://discuss.elastic.co/u/paasi6666)\ **Replies:** 17\ **Last updated:** [February 16, 2021, 11:57am UTC](https://discuss.elastic.co/t/create-new-field-from-query/263892 "2021-02-16T11:57:03Z")
I got a query which creates a new field sophos.utm.to.domain. That query extracts the full mail domain. The mail address which is stored in sophos.utm.to. My Question: How do I create a new field out of this query? --- ## [Aggregating sequence of connected events](https://discuss.elastic.co/t/aggregating-sequence-of-connected-events/264421)
**Author:** [@steff1](https://discuss.elastic.co/u/steff1)\ **Replies:** 0\ **Last updated:** [February 16, 2021, 11:25am UTC](https://discuss.elastic.co/t/aggregating-sequence-of-connected-events/264421 "2021-02-16T11:25:48Z")
Lets say I have events like this in my log {type:"approval\_revokation", approval\_id=22} {type:"approval", request\_id=12, approval\_id=22} {type:"control3", request\_id=12} {type:"control2", request\_id=12} {type:"control1"… --- ## [How to debug suggest queries](https://discuss.elastic.co/t/how-to-debug-suggest-queries/264396)
**Author:** [@Fabrizio\_Fortino](https://discuss.elastic.co/u/Fabrizio_Fortino)\ **Replies:** 0\ **Last updated:** [February 16, 2021, 9:16am UTC](https://discuss.elastic.co/t/how-to-debug-suggest-queries/264396 "2021-02-16T09:16:27Z")
I have a suggest query that is not returning a document and I would like to understand the reason. Is there any way to debug why this happens? I tried using the explain API but this does not return back any useful inform… --- ## [How to setup XPack for role based acess to kibana using the offical helm charts](https://discuss.elastic.co/t/how-to-setup-xpack-for-role-based-acess-to-kibana-using-the-offical-helm-charts/264415)
**Author:** [@ThePreMan](https://discuss.elastic.co/u/ThePreMan)\ **Replies:** 0\ **Last updated:** [February 16, 2021, 11:06am UTC](https://discuss.elastic.co/t/how-to-setup-xpack-for-role-based-acess-to-kibana-using-the-offical-helm-charts/264415 "2021-02-16T11:06:50Z")
Hello there, We are trying to setup xpack using the official helm chart for rolebased authentification. We don´t have access to our host machiene other than kubectl. Is it possible to do so ? Thanks in advance … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=701) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=703)