# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=733

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 734

---

## [Image recognition issue on elastic search](https://discuss.elastic.co/t/image-recognition-issue-on-elastic-search/259868)

<div class="topic-metadata">

**Author:** [@prasad.nueve](https://discuss.elastic.co/u/prasad.nueve)\
**Replies:** 1\
**Last updated:** [December 31, 2020, 7:37am UTC](https://discuss.elastic.co/t/image-recognition-issue-on-elastic-search/259868 "2020-12-31T07:37:39Z")

</div>

Hi We have used elastic search apis for image recognition purpose. There are a set of images data from AWS Image Recognition and saved in ElasticSearch. The image with frame was in ElasticSearch. I am using the secon…

---

## [Need the vCPU requirement for GCP](https://discuss.elastic.co/t/need-the-vcpu-requirement-for-gcp/259148)

<div class="topic-metadata">

**Author:** [@Siva\_Karan](https://discuss.elastic.co/u/Siva_Karan)\
**Replies:** 12\
**Last updated:** [December 31, 2020, 7:34am UTC](https://discuss.elastic.co/t/need-the-vcpu-requirement-for-gcp/259148 "2020-12-31T07:34:00Z")

</div>

Hi Team, we are plan to move our Elasticsearch environment to Google cloud platform, our cluster have 3 master nodes+ 5 data nodes having 423 indices,2100 shards How many vCPU need to allocate for each node, please…

---

## [Configure xpack basic authentication](https://discuss.elastic.co/t/configure-xpack-basic-authentication/259916)

<div class="topic-metadata">

**Author:** [@dis](https://discuss.elastic.co/u/dis)\
**Replies:** 5\
**Last updated:** [December 31, 2020, 6:01am UTC](https://discuss.elastic.co/t/configure-xpack-basic-authentication/259916 "2020-12-31T06:01:23Z")

</div>

ES: 7.10.2-SNAPSHOT with basic/trial license. I want to run elasticsearch with xpack enabled as basic authentication. xpack.security.enabled: true xpack.security.authc.realms: native.realm1: order: 0 running in…

---

## [Get and modify \_system internal user permissions](https://discuss.elastic.co/t/get-and-modify-system-internal-user-permissions/259574)

<div class="topic-metadata">

**Author:** [@Ahmad\_Al-Masry](https://discuss.elastic.co/u/Ahmad_Al-Masry)\
**Replies:** 3\
**Last updated:** [December 31, 2020, 2:47am UTC](https://discuss.elastic.co/t/get-and-modify-system-internal-user-permissions/259574 "2020-12-31T02:47:41Z")

</div>

Hi; Can I get what \_system internal user can do when xpack-security is enabled? Also, can I modify what it can do or give it extra permissions?

---

## [Sanity check on ILM](https://discuss.elastic.co/t/sanity-check-on-ilm/259306)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 2\
**Last updated:** [December 31, 2020, 1:26am UTC](https://discuss.elastic.co/t/sanity-check-on-ilm/259306 "2020-12-31T01:26:50Z")

</div>

I have spent the last 3 weeks off and on trying to get ILM to work. I have datastreams going but one client I am using (syslog-ng) does not yet know about datastreams and uses index in the \_bulk rather than create. I f…

---

## [Cross cluster search](https://discuss.elastic.co/t/cross-cluster-search/259788)

<div class="topic-metadata">

**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\
**Replies:** 2\
**Last updated:** [December 30, 2020, 10:29pm UTC](https://discuss.elastic.co/t/cross-cluster-search/259788 "2020-12-30T22:29:28Z")

</div>

we have more than 20 elasticsearch cluster and we are planning to use cross cluster search for searching the data across all the cluster. could you please let me know that is there any limitation for adding remote clust…

---

## [Elastic stack 7.9.2 - my /var/lib/docker is heavy](https://discuss.elastic.co/t/elastic-stack-7-9-2-my-var-lib-docker-is-heavy/259880)

<div class="topic-metadata">

**Author:** [@Waxman](https://discuss.elastic.co/u/Waxman)\
**Replies:** 0\
**Last updated:** [December 30, 2020, 12:30pm UTC](https://discuss.elastic.co/t/elastic-stack-7-9-2-my-var-lib-docker-is-heavy/259880 "2020-12-30T12:30:27Z")

</div>

Hi Everyone, I've noticed that my folder /var/lib/docker is pretty huge for all ELK nodes. It's from 2GB up to 6GB (depending on how many dockers is running on a virtual server). When I stop running dockers (let's say o…

---

## [\[o.e.x.s.t.n.securityNetty4ServerTransport\] Send message failed NettyTcpchannel](https://discuss.elastic.co/t/o-e-x-s-t-n-securitynetty4servertransport-send-message-failed-nettytcpchannel/259921)

<div class="topic-metadata">

**Author:** [@anil\_sunkesula](https://discuss.elastic.co/u/anil_sunkesula)\
**Replies:** 0\
**Last updated:** [December 30, 2020, 9:26pm UTC](https://discuss.elastic.co/t/o-e-x-s-t-n-securitynetty4servertransport-send-message-failed-nettytcpchannel/259921 "2020-12-30T21:26:35Z")

</div>

I am getting below warning in my Elasticsearch cluster logs. \[Warn\] \[o.e.x.s.t.n.securityNetty4ServerTransport\] Send message failed send message failed \[Channel: NettyTcpchannel{localAddress=0.0.0/0.0.0.0:9300}, remot…

---

## [Issue with too little memory, running several docker container (including Elasticsearch)](https://discuss.elastic.co/t/issue-with-too-little-memory-running-several-docker-container-including-elasticsearch/259913)

<div class="topic-metadata">

**Author:** [@lochr](https://discuss.elastic.co/u/lochr)\
**Replies:** 4\
**Last updated:** [December 30, 2020, 8:37pm UTC](https://discuss.elastic.co/t/issue-with-too-little-memory-running-several-docker-container-including-elasticsearch/259913 "2020-12-30T20:37:25Z")

</div>

Hello everyone, I have an issue with the environment variable discovery.type=single-node when spinning up an Elasticsearch container via docker-compose: Sample docker-compose file as follows: elasticsearch: …

---

## [Different results on same query once a document is updated](https://discuss.elastic.co/t/different-results-on-same-query-once-a-document-is-updated/259874)

<div class="topic-metadata">

**Author:** [@Gaurav\_Sharma2](https://discuss.elastic.co/u/Gaurav_Sharma2)\
**Replies:** 1\
**Last updated:** [December 30, 2020, 8:26pm UTC](https://discuss.elastic.co/t/different-results-on-same-query-once-a-document-is-updated/259874 "2020-12-30T20:26:43Z")

</div>

Hi, When I perform a search query, it gives me same result every time. But as soon as I update any document (fields which are not used in search query), the result of the same query changes and score of that particular …

---

## [Querying a file path field by just the basename](https://discuss.elastic.co/t/querying-a-file-path-field-by-just-the-basename/257582)

<div class="topic-metadata">

**Author:** [@dansei](https://discuss.elastic.co/u/dansei)\
**Replies:** 6\
**Last updated:** [December 30, 2020, 7:02pm UTC](https://discuss.elastic.co/t/querying-a-file-path-field-by-just-the-basename/257582 "2020-12-30T19:02:25Z")

</div>

I have a field that stores the full path of a file on disk. The file's basename is unique and I'd like to be able to query for just the basename as well. The simplest solution is to add a second field which contains the…

---

## [Data Node Hardware Failure](https://discuss.elastic.co/t/data-node-hardware-failure/259887)

<div class="topic-metadata">

**Author:** [@jalaine](https://discuss.elastic.co/u/jalaine)\
**Replies:** 16\
**Last updated:** [December 30, 2020, 6:22pm UTC](https://discuss.elastic.co/t/data-node-hardware-failure/259887 "2020-12-30T18:22:58Z")

</div>

Hi there, Unfortunately, due to the circumstances of where I work I can't be to specific or share screen shots, but hopefully I can get you guys in the ballpark. We have a cluster that is made up of 7 data nodes (dell r…

---

## [Prioritise a "should" query](https://discuss.elastic.co/t/prioritise-a-should-query/259907)

<div class="topic-metadata">

**Author:** [@ivanibash](https://discuss.elastic.co/u/ivanibash)\
**Replies:** 0\
**Last updated:** [December 30, 2020, 6:19pm UTC](https://discuss.elastic.co/t/prioritise-a-should-query/259907 "2020-12-30T18:19:02Z")

</div>

I have a should query like query: { bool: { should: \[ { match: { name: value, } }, { …

---

## [Help with installing elastic stack](https://discuss.elastic.co/t/help-with-installing-elastic-stack/259831)

<div class="topic-metadata">

**Author:** [@Grant1999](https://discuss.elastic.co/u/Grant1999)\
**Replies:** 2\
**Last updated:** [December 30, 2020, 5:32pm UTC](https://discuss.elastic.co/t/help-with-installing-elastic-stack/259831 "2020-12-30T17:32:10Z")

</div>

I have downloaded elastic search and kibana, extracted them both into a folder called elastic stack and when trying to run elastic search in the command prompt it comes up with this error. Any ideas how to resolve this?.…

---

## [How can I include specific facet values in an aggregation?](https://discuss.elastic.co/t/how-can-i-include-specific-facet-values-in-an-aggregation/259819)

<div class="topic-metadata">

**Author:** [@Catalin](https://discuss.elastic.co/u/Catalin)\
**Replies:** 3\
**Last updated:** [December 30, 2020, 3:37pm UTC](https://discuss.elastic.co/t/how-can-i-include-specific-facet-values-in-an-aggregation/259819 "2020-12-30T15:37:20Z")

</div>

I have the following field and values for my documents: publication\_year : 2000, 2001, 2002, ..., 2020 I'd like to aggregate by publication\_year , return the top 5 buckets, but also add specific buckets to the result (…

---

## [Physical replication in Elasticsearch](https://discuss.elastic.co/t/physical-replication-in-elasticsearch/259886)

<div class="topic-metadata">

**Author:** [@itiyamas](https://discuss.elastic.co/u/itiyamas)\
**Replies:** 0\
**Last updated:** [December 30, 2020, 2:10pm UTC](https://discuss.elastic.co/t/physical-replication-in-elasticsearch/259886 "2020-12-30T14:10:59Z")

</div>

I know that this has been discussed earlier, but not all advantages were discussed in the earlier post. Also, the earlier discussion happened really long back and I would like to understand if you still feel that it does…

---

## [Magento 2.4.1 with Elasticsearch 7.10](https://discuss.elastic.co/t/magento-2-4-1-with-elasticsearch-7-10/257585)

<div class="topic-metadata">

**Author:** [@ioannigz](https://discuss.elastic.co/u/ioannigz)\
**Replies:** 4\
**Last updated:** [December 30, 2020, 11:35am UTC](https://discuss.elastic.co/t/magento-2-4-1-with-elasticsearch-7-10/257585 "2020-12-30T11:35:17Z")

</div>

Hi....If anyone has experience with Magento and Elasticsearch please? We have this strange issue which came up latest days. We use magento 2.4.1 and elasticsearch 7.10 Our catalog contains about 600 categories with 20…

---

## [Elasticsearch keystore - question on password protection](https://discuss.elastic.co/t/elasticsearch-keystore-question-on-password-protection/259607)

<div class="topic-metadata">

**Author:** [@Knipmans](https://discuss.elastic.co/u/Knipmans)\
**Replies:** 2\
**Last updated:** [December 30, 2020, 6:01am UTC](https://discuss.elastic.co/t/elasticsearch-keystore-question-on-password-protection/259607 "2020-12-30T06:01:27Z")

</div>

Hi Elastic experts! A small question on the Elastic keystore: Is it possible to use —stdin to provide the password? Something like: echo “mySecret” | bin/elasticsearch-keystore passwd —stdin Also, another questio…

---

## [Regular IO peak in Elasticsearch data disk](https://discuss.elastic.co/t/regular-io-peak-in-elasticsearch-data-disk/259771)

<div class="topic-metadata">

**Author:** [@zhiweiv](https://discuss.elastic.co/u/zhiweiv)\
**Replies:** 7\
**Last updated:** [December 30, 2020, 2:47am UTC](https://discuss.elastic.co/t/regular-io-peak-in-elasticsearch-data-disk/259771 "2020-12-30T02:47:44Z")

</div>

We observed regular IO peak in Elasticsearch data disk, it is triggered every 10 minutes. How can I find which function triggered this? There is nothing in ES log.

---

## [How to Get Disk Usage by Search or Query Terms?](https://discuss.elastic.co/t/how-to-get-disk-usage-by-search-or-query-terms/259836)

<div class="topic-metadata">

**Author:** [@bbek](https://discuss.elastic.co/u/bbek)\
**Replies:** 1\
**Last updated:** [December 29, 2020, 11:07pm UTC](https://discuss.elastic.co/t/how-to-get-disk-usage-by-search-or-query-terms/259836 "2020-12-29T23:07:05Z")

</div>

I have multiple systems feeding a single index. What is the best approach to find size on disk, specific to search results? I'm trying to allocate by actual storage to get each 'department' cost. For instance mixing: …

---

## [Help with unassigned shards / CircuitBreakingException / Values less than -1 bytes are not supported](https://discuss.elastic.co/t/help-with-unassigned-shards-circuitbreakingexception-values-less-than-1-bytes-are-not-supported/257441)

<div class="topic-metadata">

**Author:** [@DevFullStack](https://discuss.elastic.co/u/DevFullStack)\
**Replies:** 31\
**Last updated:** [December 29, 2020, 10:04pm UTC](https://discuss.elastic.co/t/help-with-unassigned-shards-circuitbreakingexception-values-less-than-1-bytes-are-not-supported/257441 "2020-12-29T22:04:09Z")

</div>

Hi Elasticians, I'm looking for help fixing an issue (or family of issues) that causes a Elasticsearch v7.8.1 cluster to go consistently to yellow state due to unassigned shard(s) that sometimes cannot "auto-heal". This …

---

## [Event Correlation](https://discuss.elastic.co/t/event-correlation/259144)

<div class="topic-metadata">

**Author:** [@escrimaglia](https://discuss.elastic.co/u/escrimaglia)\
**Replies:** 3\
**Last updated:** [December 29, 2020, 9:17pm UTC](https://discuss.elastic.co/t/event-correlation/259144 "2020-12-29T21:17:09Z")

</div>

Hi, I’m testing ELK. So far it’s been very well sending logs from different platforms to elastic as well as indexing and creating views or graphs. My interest now is correlate event using all those logs entries. For exa…

---

## [Set custom document ids on bulk insert](https://discuss.elastic.co/t/set-custom-document-ids-on-bulk-insert/258455)

<div class="topic-metadata">

**Author:** [@dmabuada](https://discuss.elastic.co/u/dmabuada)\
**Replies:** 6\
**Last updated:** [December 29, 2020, 8:22pm UTC](https://discuss.elastic.co/t/set-custom-document-ids-on-bulk-insert/258455 "2020-12-29T20:22:53Z")

</div>

I'm attempting to bulk insert generated data from the track generator (I created my own custom track), but I'd like to disable auto-generated IDs on insert. I modified my data files to include the \_id prop on each docume…

---

## [Issue Magento 2.4.1 and Elasticsearch](https://discuss.elastic.co/t/issue-magento-2-4-1-and-elasticsearch/259801)

<div class="topic-metadata">

**Author:** [@trotlix](https://discuss.elastic.co/u/trotlix)\
**Replies:** 1\
**Last updated:** [December 29, 2020, 8:12pm UTC](https://discuss.elastic.co/t/issue-magento-2-4-1-and-elasticsearch/259801 "2020-12-29T20:12:01Z")

</div>

Hello guys, I am still facing the issue which probably related with Magento 2 (2.4.1) and Elastic search. You can see the error page here: http://mage2.kouzloloutek.cz/loutky-spejbl-hurvinek I read in another discussi…

---

## [Flexible search nested documents](https://discuss.elastic.co/t/flexible-search-nested-documents/259802)

<div class="topic-metadata">

**Author:** [@Maksym1](https://discuss.elastic.co/u/Maksym1)\
**Replies:** 1\
**Last updated:** [December 29, 2020, 6:37pm UTC](https://discuss.elastic.co/t/flexible-search-nested-documents/259802 "2020-12-29T18:37:43Z")

</div>

Maybe somebody has implemented such a search in nested documents. Here is my mapping: { "my-index": { "aliases": {}, "mappings": { "properties": { "customer": { …

---

## [ElasticSearch - Filter Buckets](https://discuss.elastic.co/t/elasticsearch-filter-buckets/259758)

<div class="topic-metadata">

**Author:** [@FuSsA](https://discuss.elastic.co/u/FuSsA)\
**Replies:** 1\
**Last updated:** [December 29, 2020, 3:47pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-buckets/259758 "2020-12-29T15:47:29Z")

</div>

Hey ES community, My elasticSearch query is like: { "size": 0, "aggs": { "group\_by\_id": { "terms": { "field": "Infos.InstanceInfo.ID.keyword", "size": 1000 …

---

## [Can we point to elasticsearch Masternodes as input to Logstash?](https://discuss.elastic.co/t/can-we-point-to-elasticsearch-masternodes-as-input-to-logstash/259806)

<div class="topic-metadata">

**Author:** [@Pooja](https://discuss.elastic.co/u/Pooja)\
**Replies:** 2\
**Last updated:** [December 29, 2020, 3:08pm UTC](https://discuss.elastic.co/t/can-we-point-to-elasticsearch-masternodes-as-input-to-logstash/259806 "2020-12-29T15:08:38Z")

</div>

Can we point to elasticsearch Masternodes as input to Logstash? We see delay(2-3days) in data extraction from elsaticsearch while using Co-ordinating nodes as input in logstash to send data to Qradar.

---

## [Elasticsearch and Magento 2.4.1 "No mapping found for position category"](https://discuss.elastic.co/t/elasticsearch-and-magento-2-4-1-no-mapping-found-for-position-category/253891)

<div class="topic-metadata">

**Author:** [@dani1](https://discuss.elastic.co/u/dani1)\
**Replies:** 5\
**Last updated:** [December 29, 2020, 11:59am UTC](https://discuss.elastic.co/t/elasticsearch-and-magento-2-4-1-no-mapping-found-for-position-category/253891 "2020-12-29T11:59:01Z")

</div>

Hello there, I'm facing this issue with Elasticsearch 7.6.2 with Magento 2.4. Anyone have an idea? \[2020-10-31 07:34:29\] main.CRITICAL: {"error":{"root\_cause":\[{"type":"query\_shard\_exception","reason":"No mapping found…

---

## [Index documents with autogenerated ID and custom routing](https://discuss.elastic.co/t/index-documents-with-autogenerated-id-and-custom-routing/259287)

<div class="topic-metadata">

**Author:** [@Maksym1](https://discuss.elastic.co/u/Maksym1)\
**Replies:** 3\
**Last updated:** [December 29, 2020, 11:14am UTC](https://discuss.elastic.co/t/index-documents-with-autogenerated-id-and-custom-routing/259287 "2020-12-29T11:14:29Z")

</div>

I want to index documents with an autogenerated ID and a Routing. The ID field is autogenerated, so I want to link a parent to a child by ExternalId. I use NEST client for .NET and have such a piece of code: await \_e…

---

## [Elasticsearch Wildcard fieldtype has slow performance for wildcard queries](https://discuss.elastic.co/t/elasticsearch-wildcard-fieldtype-has-slow-performance-for-wildcard-queries/259662)

<div class="topic-metadata">

**Author:** [@Chris\_Doman](https://discuss.elastic.co/u/Chris_Doman)\
**Replies:** 4\
**Last updated:** [December 29, 2020, 9:31am UTC](https://discuss.elastic.co/t/elasticsearch-wildcard-fieldtype-has-slow-performance-for-wildcard-queries/259662 "2020-12-29T09:31:42Z")

</div>

I'm testing the new ElasticSearch WildCard field type (https://www.elastic.co/blog/find-strings-within-strings-faster-with-the-new-elasticsearch-wildcard-field) that is supposed to offer better wildcard queries. Strange…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=732)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=734)
