# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=729 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 730 --- ## [Nested fields & strict dynamic mapping](https://discuss.elastic.co/t/nested-fields-strict-dynamic-mapping/260533)
**Author:** [@loldebyte](https://discuss.elastic.co/u/loldebyte)\ **Replies:** 0\ **Last updated:** [January 8, 2021, 11:27am UTC](https://discuss.elastic.co/t/nested-fields-strict-dynamic-mapping/260533 "2021-01-08T11:27:54Z")
Hello, Following this stackoverlow question, i came here before opening an issue on github. An indice with the following mapping: { "test2": { "mappings": { "dynamic": "strict", "properties"… --- ## [Elasticsearch cluster - please review my configuration and advise](https://discuss.elastic.co/t/elasticsearch-cluster-please-review-my-configuration-and-advise/259502)
**Author:** [@Ged](https://discuss.elastic.co/u/Ged)\ **Replies:** 2\ **Last updated:** [January 8, 2021, 11:07am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-please-review-my-configuration-and-advise/259502 "2021-01-08T11:07:37Z")
Hi Team, I want to share my ELK stack cluster configuration shown below asking you to review it and share your thoughts and answer some questions. Elasticsearch nodes configuration for ELK SERVER A1 and ELK SERVER B1… --- ## [Sort documents and reduce overlapping ranges](https://discuss.elastic.co/t/sort-documents-and-reduce-overlapping-ranges/260526)
**Author:** [@lucre](https://discuss.elastic.co/u/lucre)\ **Replies:** 0\ **Last updated:** [January 8, 2021, 9:50am UTC](https://discuss.elastic.co/t/sort-documents-and-reduce-overlapping-ranges/260526 "2021-01-08T09:50:42Z")
Hello, apologies if the query may be trivial, I am just starting using Elasticsearch. I have an index with usage docs (not nested) with a datetime\_start, datetime\_end, company\_id, user\_id, product\_id, range\_start, range… --- ## [Query multiple fields with and](https://discuss.elastic.co/t/query-multiple-fields-with-and/260021)
**Author:** [@bastimm](https://discuss.elastic.co/u/bastimm)\ **Replies:** 4\ **Last updated:** [January 8, 2021, 8:57am UTC](https://discuss.elastic.co/t/query-multiple-fields-with-and/260021 "2021-01-08T08:57:53Z")
Hello back again! Last time I wrote queries is about 3 years ago, so I am not sure wether something changed for my case ,-) I have multiple fields in my Index, like MPN (manufacturernumber), manufacturer, title, descri… --- ## [About the test of indicators.breaker.total.limit parameters](https://discuss.elastic.co/t/about-the-test-of-indicators-breaker-total-limit-parameters/260513)
**Author:** [@liwanjie](https://discuss.elastic.co/u/liwanjie)\ **Replies:** 1\ **Last updated:** [January 8, 2021, 8:50am UTC](https://discuss.elastic.co/t/about-the-test-of-indicators-breaker-total-limit-parameters/260513 "2021-01-08T08:50:31Z")
I want to test the test cluster. I want to see what the threshold of the indices.breaker.total.limit parameter is set to, the cluster can reject the request to ensure that it does not crash. So 20 requests were issued at… --- ## [\[java high level client 7.9.1\] highlight in inner hit is null](https://discuss.elastic.co/t/java-high-level-client-7-9-1-highlight-in-inner-hit-is-null/260497)
**Author:** [@jaru\_kim](https://discuss.elastic.co/u/jaru_kim)\ **Replies:** 1\ **Last updated:** [January 8, 2021, 6:09am UTC](https://discuss.elastic.co/t/java-high-level-client-7-9-1-highlight-in-inner-hit-is-null/260497 "2021-01-08T06:09:31Z")
I want to get highlight data in inner hit. in response, but, highlight in inner hit is null. did I miss something? portion of class file: //-- innerHit's Highlight HighlightBuilder enHighlightBuilder = new HighlightB… --- ## [Basic License unable to enable xpack](https://discuss.elastic.co/t/basic-license-unable-to-enable-xpack/260461)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 4\ **Last updated:** [January 8, 2021, 5:30am UTC](https://discuss.elastic.co/t/basic-license-unable-to-enable-xpack/260461 "2021-01-08T05:30:27Z")
Hi, i perform yum install in my centos 7 elk. When i configure security i hitting the error below. I am using basic license. Is basic license not allowed for xpack security as i want allow user to login rather than hav… --- ## [Search query based of number of values a field contains](https://discuss.elastic.co/t/search-query-based-of-number-of-values-a-field-contains/260408)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 2\ **Last updated:** [January 8, 2021, 2:34am UTC](https://discuss.elastic.co/t/search-query-based-of-number-of-values-a-field-contains/260408 "2021-01-08T02:34:14Z")
Hi, I was wondering whether you can point me at any documentation, or let me know if this is not possible for the following. I am trying to write a query of a fields called result\_code. Some of my documents contain mul… --- ## [Name saved in disk when taking snapshot](https://discuss.elastic.co/t/name-saved-in-disk-when-taking-snapshot/260429)
**Author:** [@khzied](https://discuss.elastic.co/u/khzied)\ **Replies:** 1\ **Last updated:** [January 7, 2021, 9:34pm UTC](https://discuss.elastic.co/t/name-saved-in-disk-when-taking-snapshot/260429 "2021-01-07T21:34:22Z")
Hello, I have Elasticsearch 5.6 and I have a question when making snapshot: it's possible to find the same name of directory like index name after making snap. Now the directory generated is random name like this lMTV… --- ## ["simple\_query\_string" with "default\_operator": "AND" doesn't imply "analyzer": "default"](https://discuss.elastic.co/t/simple-query-string-with-default-operator-and-doesnt-imply-analyzer-default/260485)
**Author:** [@Luke\_Nezda](https://discuss.elastic.co/u/Luke_Nezda)\ **Replies:** 0\ **Last updated:** [January 7, 2021, 7:59pm UTC](https://discuss.elastic.co/t/simple-query-string-with-default-operator-and-doesnt-imply-analyzer-default/260485 "2021-01-07T19:59:38Z")
Hello, all - I went to convert some code using query\_string to simple\_query\_string (using "default\_operator": "AND" for both) and was surprised to find I needed to explicitly say "analyzer": "default" despite the analyz… --- ## [Matching Documents by Hour](https://discuss.elastic.co/t/matching-documents-by-hour/260480)
**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\ **Replies:** 0\ **Last updated:** [January 7, 2021, 6:57pm UTC](https://discuss.elastic.co/t/matching-documents-by-hour/260480 "2021-01-07T18:57:31Z")
I have an issue with a dataset that we imported. The source marked the midnight timestamps as 2400 on the previous day. After ingestion, that time has been adjusted to 0000 but the day is still the previous day. So, I… --- ## [Service based on elasticsearch basic license the terms of agreement](https://discuss.elastic.co/t/service-based-on-elasticsearch-basic-license-the-terms-of-agreement/260476)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 1\ **Last updated:** [January 7, 2021, 6:12pm UTC](https://discuss.elastic.co/t/service-based-on-elasticsearch-basic-license-the-terms-of-agreement/260476 "2021-01-07T18:12:42Z")
Hello, from my understanding, It would not be a violation of the terms of basic license agreement to provide a paid monitoring service based on ELK stack as long as I do not grant access to kibana dashboards for custome… --- ## [Handling unmounted data volume](https://discuss.elastic.co/t/handling-unmounted-data-volume/260478)
**Author:** [@a06ced31bae02498a46d](https://discuss.elastic.co/u/a06ced31bae02498a46d)\ **Replies:** 1\ **Last updated:** [January 7, 2021, 5:59pm UTC](https://discuss.elastic.co/t/handling-unmounted-data-volume/260478 "2021-01-07T17:59:32Z")
Hello! We are facing an issue with the store volume hardware on a given data node which results in full production outage. While the problem is clearly lies in the system/hardware level there might be some Elasticsearch… --- ## [Search\_after With Collapse Pagination Alternative](https://discuss.elastic.co/t/search-after-with-collapse-pagination-alternative/260451)
**Author:** [@MilanGatyas](https://discuss.elastic.co/u/MilanGatyas)\ **Replies:** 1\ **Last updated:** [January 7, 2021, 3:35pm UTC](https://discuss.elastic.co/t/search-after-with-collapse-pagination-alternative/260451 "2021-01-07T15:35:32Z")
We want to utilize the search\_after pagination strategy rather than from-size pagination strategy as we understood that search\_after has better performance for high pagination numbers. At the same time, we do collapse o… --- ## [Philosophy behind ignore\_above mapping parameter](https://discuss.elastic.co/t/philosophy-behind-ignore-above-mapping-parameter/260438)
**Author:** [@agx](https://discuss.elastic.co/u/agx)\ **Replies:** 5\ **Last updated:** [January 7, 2021, 3:08pm UTC](https://discuss.elastic.co/t/philosophy-behind-ignore-above-mapping-parameter/260438 "2021-01-07T15:08:31Z")
we're using serilog to send logs to elastic. it's default mapping parameter is to ignore fields above 256 characters (which might also be an elastic default?). this has been fine for us, but recently one of our devs want… --- ## [Nested terms aggregation performance](https://discuss.elastic.co/t/nested-terms-aggregation-performance/260446)
**Author:** [@shusson](https://discuss.elastic.co/u/shusson)\ **Replies:** 0\ **Last updated:** [January 7, 2021, 1:42pm UTC](https://discuss.elastic.co/t/nested-terms-aggregation-performance/260446 "2021-01-07T13:42:47Z")
I'm trying to optimize nested term aggregations for an autocomplete use case. More info on the query and mapping here: https://stackoverflow.com/questions/65613335/improve-performance-of-a-nested-term-aggregation. Based… --- ## [Need to alert if nested aggregation returns more than 3 results](https://discuss.elastic.co/t/need-to-alert-if-nested-aggregation-returns-more-than-3-results/260433)
**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\ **Replies:** 0\ **Last updated:** [January 7, 2021, 12:13pm UTC](https://discuss.elastic.co/t/need-to-alert-if-nested-aggregation-returns-more-than-3-results/260433 "2021-01-07T12:13:57Z")
Hi, I have the following watch: { "trigger": { "schedule": { "interval": "5m" } }, "input": { "search": { "request": { "search\_type": "query\_then\_fetch", "indices": \[ … --- ## [ES Cloud - Running ingest pipelines on warm nodes?](https://discuss.elastic.co/t/es-cloud-running-ingest-pipelines-on-warm-nodes/259054)
**Author:** [@Alain\_St\_Pierre](https://discuss.elastic.co/u/Alain_St_Pierre)\ **Replies:** 40\ **Last updated:** [January 7, 2021, 8:15am UTC](https://discuss.elastic.co/t/es-cloud-running-ingest-pipelines-on-warm-nodes/259054 "2021-01-07T08:15:52Z")
Hi there, I have a hot/warm cluster running on ES cloud with the following setup: 2x 29Gb hot nodes 2x 29Gb warm nodes time series data ingest rate: 2500/s (350 bytes each) ~75Gb/day enrich pipeline (with enrich snaps… --- ## [Accessing API Without User Credentials](https://discuss.elastic.co/t/accessing-api-without-user-credentials/259528)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 6\ **Last updated:** [January 7, 2021, 6:30am UTC](https://discuss.elastic.co/t/accessing-api-without-user-credentials/259528 "2021-01-07T06:30:56Z")
I am trying to build a service monitor and am at the point where I would be making a call to change an index setting in Elasticsearch. Elasticsearch 7.10.0 running and secured with HTTPS. I have the following running: … --- ## [How to know the ES configuration details for benchmark testing?](https://discuss.elastic.co/t/how-to-know-the-es-configuration-details-for-benchmark-testing/260094)
**Author:** [@zj27](https://discuss.elastic.co/u/zj27)\ **Replies:** 2\ **Last updated:** [January 7, 2021, 5:25am UTC](https://discuss.elastic.co/t/how-to-know-the-es-configuration-details-for-benchmark-testing/260094 "2021-01-07T05:25:22Z")
Hello, I'm really interested in the benchmark data here: https://elasticsearch-benchmarks.elastic.co/# Just curious where could I find more details about the ES configuration and index configuration? Or is there all use… --- ## [Disable automatic index creation in elasticsearch](https://discuss.elastic.co/t/disable-automatic-index-creation-in-elasticsearch/260276)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 2\ **Last updated:** [January 7, 2021, 4:42am UTC](https://discuss.elastic.co/t/disable-automatic-index-creation-in-elasticsearch/260276 "2021-01-07T04:42:09Z")
Hi, I have a setup of ELK 7.10v . I want to know is there a way to configure elasticsearch not to automatically create indexes. I tried adding this to my "elasticsearch.yml" action.auto\_create\_index: 0 also tried … --- ## [Where is the password stored?](https://discuss.elastic.co/t/where-is-the-password-stored/260402)
**Author:** [@suntopo](https://discuss.elastic.co/u/suntopo)\ **Replies:** 2\ **Last updated:** [January 7, 2021, 3:49am UTC](https://discuss.elastic.co/t/where-is-the-password-stored/260402 "2021-01-07T03:49:17Z")
as a root user, i could get all elasticsearch data files, but origin elasticsearch had password auth settings. Could i process the data file, remove the password relatived files and get the elasticsearch data without aut… --- ## [Combining ILM and snapshoot](https://discuss.elastic.co/t/combining-ilm-and-snapshoot/260398)
**Author:** [@Kambing](https://discuss.elastic.co/u/Kambing)\ **Replies:** 1\ **Last updated:** [January 7, 2021, 3:24am UTC](https://discuss.elastic.co/t/combining-ilm-and-snapshoot/260398 "2021-01-07T03:24:43Z")
Hi, is it possible to combine ILM and automatic snapshoot? for example, I have an ILM which store the index for 14 days in hot node, then the index goes to warm node for day 15 until day 90. after day 90, can I set up … --- ## [Index name does not match pattern](https://discuss.elastic.co/t/index-name-does-not-match-pattern/260351)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 3\ **Last updated:** [January 7, 2021, 3:19am UTC](https://discuss.elastic.co/t/index-name-does-not-match-pattern/260351 "2021-01-07T03:19:54Z")
we have an index named drivers-history, by default this index doesn't have an alias so i created one as drivers\_history using update index alias api. later i created an ILM policy and attached it to this index but i am g… --- ## [How to compare the response of elasticsearch query with a list and show final data](https://discuss.elastic.co/t/how-to-compare-the-response-of-elasticsearch-query-with-a-list-and-show-final-data/260353)
**Author:** [@abhinav3](https://discuss.elastic.co/u/abhinav3)\ **Replies:** 3\ **Last updated:** [January 7, 2021, 2:46am UTC](https://discuss.elastic.co/t/how-to-compare-the-response-of-elasticsearch-query-with-a-list-and-show-final-data/260353 "2021-01-07T02:46:07Z")
I some Json data in elasticsearch. This json data has customer and device in it. I have 2 customer which have multiple devices. I have below query which gives the data for the devices and their customer name: { "aggs"… --- ## [Elasticsearch copy\_to field type](https://discuss.elastic.co/t/elasticsearch-copy-to-field-type/260333)
**Author:** [@Ryze](https://discuss.elastic.co/u/Ryze)\ **Replies:** 2\ **Last updated:** [January 7, 2021, 2:29am UTC](https://discuss.elastic.co/t/elasticsearch-copy-to-field-type/260333 "2021-01-07T02:29:17Z")
I wonder that if the type of destination field of copy\_to must be text type. I have not find the description in the official document. https://www.elastic.co/guide/en/elasticsearch/reference/current/copy-to.html In othe… --- ## [HSTS configuration for ElasticSearch](https://discuss.elastic.co/t/hsts-configuration-for-elasticsearch/260304)
**Author:** [@Ravi\_GH](https://discuss.elastic.co/u/Ravi_GH)\ **Replies:** 1\ **Last updated:** [January 7, 2021, 12:13am UTC](https://discuss.elastic.co/t/hsts-configuration-for-elasticsearch/260304 "2021-01-07T00:13:20Z")
We have HSTS vulnerability for Elasticsearch server (v7.5.2 & v6.8.6) as mentioned @ https://www.tenable.com/plugins/nessus/142960 How to enable HSTS for the elasticsearch server. --- ## [Solving aggregating/sorting on numerical fields](https://discuss.elastic.co/t/solving-aggregating-sorting-on-numerical-fields/259099)
**Author:** [@remydela](https://discuss.elastic.co/u/remydela)\ **Replies:** 1\ **Last updated:** [January 6, 2021, 11:29pm UTC](https://discuss.elastic.co/t/solving-aggregating-sorting-on-numerical-fields/259099 "2021-01-06T23:29:24Z")
Hi there, It's my first post here and I'm still a beginner regarding ES, so please feel free to help with guidelines I might have forgotten when posting this :slight\_smile: I took over a rather old project (late 2017) … --- ## [Test coverage for Java API](https://discuss.elastic.co/t/test-coverage-for-java-api/260392)
**Author:** [@chenqi0805](https://discuss.elastic.co/u/chenqi0805)\ **Replies:** 0\ **Last updated:** [January 6, 2021, 11:13pm UTC](https://discuss.elastic.co/t/test-coverage-for-java-api/260392 "2021-01-06T23:13:28Z")
I noticed that test coverage analysis by jacoco is no longer supported for ES test framework through Is there any plan to restore coverage analysis tool applicability as it will be helpful for plugin development? … --- ## [How can I get filtered unique values?](https://discuss.elastic.co/t/how-can-i-get-filtered-unique-values/260024)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [January 6, 2021, 10:12pm UTC](https://discuss.elastic.co/t/how-can-i-get-filtered-unique-values/260024 "2021-01-06T22:12:11Z")
Hi I've been trying to get unique values of node whose utilization is greater than 1, but I cant get it working, below is one of the ways I have tried without success. GET metrics\*/\_search { "size": "0", "aggs": { … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=728) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=730)