# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=740 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 741 --- ## [How to have an attribute value to really make a difference in score? (help with rank\_feature needed)](https://discuss.elastic.co/t/how-to-have-an-attribute-value-to-really-make-a-difference-in-score-help-with-rank-feature-needed/258927)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 11:33pm UTC](https://discuss.elastic.co/t/how-to-have-an-attribute-value-to-really-make-a-difference-in-score-help-with-rank-feature-needed/258927 "2020-12-16T23:33:29Z")
Hello we have an attribute in our documents called "popularity", which is a number between 0 and 100. Our goal is to boost the relevance of the results in such a way that the results will look ordered by popularity and … --- ## [Elasticsearch 7.7.1 Increasing index.mapping.total\_fields.limit](https://discuss.elastic.co/t/elasticsearch-7-7-1-increasing-index-mapping-total-fields-limit/258871)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 10:34pm UTC](https://discuss.elastic.co/t/elasticsearch-7-7-1-increasing-index-mapping-total-fields-limit/258871 "2020-12-16T22:34:16Z")
I have read the below discussions https://discuss.elastic.co/t/index-mapping-total-fields-limit-is-important-only-for-query-operations/218217 https://discuss.elastic.co/t/what-is-the-downside-of-increasing-index-mappin… --- ## [Can i get via API info about indicies but like pattern(index1\*,index2\*)?](https://discuss.elastic.co/t/can-i-get-via-api-info-about-indicies-but-like-pattern-index1-index2/258877)
**Author:** [@Andrew\_Foxis](https://discuss.elastic.co/u/Andrew_Foxis)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 10:07pm UTC](https://discuss.elastic.co/t/can-i-get-via-api-info-about-indicies-but-like-pattern-index1-index2/258877 "2020-12-16T22:07:10Z")
Hi all! Can i get via API info about indicies but like pattern (index1\*,index2\*)? I get info by API "GET /\_cat/indices?h=index,store.size&bytes=kb&format=json" and result like: \[ { "index" : "index1-2020.12.16", "s… --- ## [Elasticsearch Windows Manager GUI](https://discuss.elastic.co/t/elasticsearch-windows-manager-gui/258887)
**Author:** [@chintushah46](https://discuss.elastic.co/u/chintushah46)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 10:05pm UTC](https://discuss.elastic.co/t/elasticsearch-windows-manager-gui/258887 "2020-12-16T22:05:17Z")
Hello, I am looking more details about the Manager GUI feature, which can be triggered through elasticsearch-service.bat manager For example, From "Java" tab, where all the details related to Java options are b… --- ## [As of 7.x log4j2 no longer supports "IfLastModified"](https://discuss.elastic.co/t/as-of-7-x-log4j2-no-longer-supports-iflastmodified/258918)
**Author:** [@Eric\_Bates](https://discuss.elastic.co/u/Eric_Bates)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 10:01pm UTC](https://discuss.elastic.co/t/as-of-7-x-log4j2-no-longer-supports-iflastmodified/258918 "2020-12-16T22:01:39Z")
There is an example given on Logging to rotate logs every 7 days instead of waiting for 2G of logs to accumulate. This example worked well for ELK 6.x, but as of upgrading to 7.x, it now produces the error: Dec 16 16:42… --- ## [Elasticsearch 7.10 : How to safely remove a node and free up space?](https://discuss.elastic.co/t/elasticsearch-7-10-how-to-safely-remove-a-node-and-free-up-space/258624)
**Author:** [@Soumya\_Ranjan\_Sahoo](https://discuss.elastic.co/u/Soumya_Ranjan_Sahoo)\ **Replies:** 3\ **Last updated:** [December 16, 2020, 9:24pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-how-to-safely-remove-a-node-and-free-up-space/258624 "2020-12-16T21:24:28Z")
As I am running out of my disk space, I want to remove all the indices from the node. Note that I have just one node, and I am running the elastic server on my local machine. Basically, when I start the elastic server, … --- ## [Upgrade issue from 5.6.8 to 6.0](https://discuss.elastic.co/t/upgrade-issue-from-5-6-8-to-6-0/258784)
**Author:** [@acchaulk](https://discuss.elastic.co/u/acchaulk)\ **Replies:** 3\ **Last updated:** [December 16, 2020, 9:20pm UTC](https://discuss.elastic.co/t/upgrade-issue-from-5-6-8-to-6-0/258784 "2020-12-16T21:20:39Z")
Similar to this issue, I cannot set the suggested script.allowed\_types setting. I am using Elastic Cloud and have tried disabling Disable inline/file/stored script and Enabling sandboxed inline/file/stored scripts. None … --- ## [Dynamic\_templates are not working as expected](https://discuss.elastic.co/t/dynamic-templates-are-not-working-as-expected/258193)
**Author:** [@Liat](https://discuss.elastic.co/u/Liat)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 6:54pm UTC](https://discuss.elastic.co/t/dynamic-templates-are-not-working-as-expected/258193 "2020-12-16T18:54:01Z")
I am trying ot have dynamic mapping for these objects: { participant\_1{ "role" : "role1" }, participant\_2{ "role" : "role2" }. participant\_3{ "role" : "role3" } } My mapping looks like that: "mappings": { … --- ## [Elastic Cluster restart with one master node](https://discuss.elastic.co/t/elastic-cluster-restart-with-one-master-node/258278)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 9\ **Last updated:** [December 16, 2020, 6:47pm UTC](https://discuss.elastic.co/t/elastic-cluster-restart-with-one-master-node/258278 "2020-12-16T18:47:46Z")
I have 6 nodes elastic cluster. node1 - master node2 - master node3 - data node4 - data node5 - data node6 - master, data node1,2,3,4 and node5 are primary nodes node6 is DR node I want to all primary nodes and … --- ## [Date/Timestamp showing wrong in Discover](https://discuss.elastic.co/t/date-timestamp-showing-wrong-in-discover/258897)
**Author:** [@fastxl](https://discuss.elastic.co/u/fastxl)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 6:05pm UTC](https://discuss.elastic.co/t/date-timestamp-showing-wrong-in-discover/258897 "2020-12-16T18:05:26Z")
New to Elasticsearch and trying to learn how things work. When I input the following in Dev Tools PUT /ptest-1/\_doc/1 { "timestamp": "2020-12-16T10:53:01.358062", "computer\_name": "HP-8740W", "UserName": "Eric", "Active… --- ## [Three-node Elasticsearch Cluster with docker-compose failing with stacktrace--\["org.elasticsearch.bootstrap.StartupException: ElasticsearchException\[failed to bind service\]; nested: AccessDeniedException\[/usr/share/elasticsearch/data/nodes](https://discuss.elastic.co/t/three-node-elasticsearch-cluster-with-docker-compose-failing-with-stacktrace-org-elasticsearch-bootstrap-startupexception-elasticsearchexception-failed-to-bind-service-nested-accessdeniedexception-usr-share-elasticsearch-data-nodes/258619)
**Author:** [@kommineni24](https://discuss.elastic.co/u/kommineni24)\ **Replies:** 6\ **Last updated:** [December 16, 2020, 5:34pm UTC](https://discuss.elastic.co/t/three-node-elasticsearch-cluster-with-docker-compose-failing-with-stacktrace-org-elasticsearch-bootstrap-startupexception-elasticsearchexception-failed-to-bind-service-nested-accessdeniedexception-usr-share-elasticsearch-data-nodes/258619 "2020-12-16T17:34:35Z")
Hi, I am trying to spin up a three node Elasticsearch cluster with a docker-compose file. While spinning up the cluster only one Elasticsearch container is coming up whereas other two containers on different nodes are f… --- ## [Longer search queue when we have low search thread utilization](https://discuss.elastic.co/t/longer-search-queue-when-we-have-low-search-thread-utilization/258857)
**Author:** [@amishar](https://discuss.elastic.co/u/amishar)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 5:22pm UTC](https://discuss.elastic.co/t/longer-search-queue-when-we-have-low-search-thread-utilization/258857 "2020-12-16T17:22:03Z")
We are seeing slow query performance on elastic-search. This coincide with increase in search queue size but at the same time active search threads as a percentage of search thread pool size is pretty low. This indicate … --- ## [Elasticsearch.service problem](https://discuss.elastic.co/t/elasticsearch-service-problem/258831)
**Author:** [@salva12](https://discuss.elastic.co/u/salva12)\ **Replies:** 3\ **Last updated:** [December 16, 2020, 3:44pm UTC](https://discuss.elastic.co/t/elasticsearch-service-problem/258831 "2020-12-16T15:44:43Z")
Dec 16 08:49:58 104-45-22-197.cprapid.com systemd-entrypoint\[18969\]: at org.elasticsearch.core.internal.io.IOUtils.close(IOUtils.java:99) Dec 16 08:49:58 104-45-22-197.cprapid.com systemd-entrypoint\[18969\]: at org.elasti… --- ## [Aggregation over a paginated query](https://discuss.elastic.co/t/aggregation-over-a-paginated-query/258792)
**Author:** [@solenom85](https://discuss.elastic.co/u/solenom85)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 3:41pm UTC](https://discuss.elastic.co/t/aggregation-over-a-paginated-query/258792 "2020-12-16T15:41:47Z")
Hi. I have a question regarding to running an aggregation on a paginated query. For example, this query: { "size": 0, "from": 100, "query": { "match\_all": {} }, … --- ## [Index lifecycle error, security\_exception: Adding an alias is not allowed when the alias has more permissions than any of the indices](https://discuss.elastic.co/t/index-lifecycle-error-security-exception-adding-an-alias-is-not-allowed-when-the-alias-has-more-permissions-than-any-of-the-indices/258275)
**Author:** [@SergiiZagrunnyi](https://discuss.elastic.co/u/SergiiZagrunnyi)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 3:22pm UTC](https://discuss.elastic.co/t/index-lifecycle-error-security-exception-adding-an-alias-is-not-allowed-when-the-alias-has-more-permissions-than-any-of-the-indices/258275 "2020-12-16T15:22:00Z")
Hi here We have elastic cloud deployment and configured ILM for the APM indexes The policy fails on shrink action, failed step - aliases Its not clear why that happens and what can we do with that? ILM policy "apm… --- ## [Aggregates on collapse](https://discuss.elastic.co/t/aggregates-on-collapse/258883)
**Author:** [@Philh-gbg](https://discuss.elastic.co/u/Philh-gbg)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 3:17pm UTC](https://discuss.elastic.co/t/aggregates-on-collapse/258883 "2020-12-16T15:17:33Z")
New user looking for help, I know that aggregates don't work on the collapse results but I can't seem to find a way to achieve the same affect directly. We have a relatively simple dataset that contains multiple entries … --- ## [Watcher Schedule](https://discuss.elastic.co/t/watcher-schedule/258874)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 2:36pm UTC](https://discuss.elastic.co/t/watcher-schedule/258874 "2020-12-16T14:36:07Z")
Hi I wrote a watcher with this trigger: "trigger": { "schedule": { "daily": { "at": \[ "06:35" \] } } }, I just want this watcher run at 06:35 everyday morning. But whe… --- ## [ELK 791 Docker compose and security](https://discuss.elastic.co/t/elk-791-docker-compose-and-security/258821)
**Author:** [@vincent2mots](https://discuss.elastic.co/u/vincent2mots)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 12:57pm UTC](https://discuss.elastic.co/t/elk-791-docker-compose-and-security/258821 "2020-12-16T12:57:37Z")
Hi there! I would like to test the security functionnalities within a docker-compose stack. Here is my stack : version: '2' services: # Noeud nodeB1 nodeToutSeul: image: docker.elastic.co/elasticsearch/elastics… --- ## [ServiceNow Ticket data to ElasticSearch](https://discuss.elastic.co/t/servicenow-ticket-data-to-elasticsearch/258817)
**Author:** [@nottyheadedboss](https://discuss.elastic.co/u/nottyheadedboss)\ **Replies:** 4\ **Last updated:** [December 16, 2020, 10:59am UTC](https://discuss.elastic.co/t/servicenow-ticket-data-to-elasticsearch/258817 "2020-12-16T10:59:15Z")
Hi All I am a ElasticSearch noob... I am trying to upload data from ServiceNow to ElasticSearch... I am facing some issues with the data and the conf file I tried to take assistance from @Gauti who assisted me with the… --- ## [Machine learning "actual" value doesn't match values displayed in a vizualization](https://discuss.elastic.co/t/machine-learning-actual-value-doesnt-match-values-displayed-in-a-vizualization/258658)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 7\ **Last updated:** [December 16, 2020, 12:27pm UTC](https://discuss.elastic.co/t/machine-learning-actual-value-doesnt-match-values-displayed-in-a-vizualization/258658 "2020-12-16T12:27:09Z")
In amonaly detection I get an actual value of "75.0" when I go to a visualization of the raw data I cant find that actual value, I was thinking that maybe the agregation was blurring the value, but I choose a smaller int… --- ## [Recover index from ../nodes/0/indices/ to new cluster](https://discuss.elastic.co/t/recover-index-from-nodes-0-indices-to-new-cluster/258836)
**Author:** [@heikis](https://discuss.elastic.co/u/heikis)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 11:10am UTC](https://discuss.elastic.co/t/recover-index-from-nodes-0-indices-to-new-cluster/258836 "2020-12-16T11:10:15Z")
Hello. How complicated is it to recover an index that exists in ../nodes/0/indices/ ? For example I have the index data but the cluster that the index was related to is gone? Could I create a new cluster and reindex the… --- ## [How to do match multiple nested object in one document with inner hits highlighted in elasticsearch](https://discuss.elastic.co/t/how-to-do-match-multiple-nested-object-in-one-document-with-inner-hits-highlighted-in-elasticsearch/258842)
**Author:** [@Code\_Wizard](https://discuss.elastic.co/u/Code_Wizard)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 10:42am UTC](https://discuss.elastic.co/t/how-to-do-match-multiple-nested-object-in-one-document-with-inner-hits-highlighted-in-elasticsearch/258842 "2020-12-16T10:42:07Z")
How do I write a query with two search terms which matches nested objects with inner hits highlighted. Below is the sample usecase: I have a mapping: "mappings": { "properties": { "grocery\_name": { … --- ## [Chain of nodes - api call](https://discuss.elastic.co/t/chain-of-nodes-api-call/258804)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 10:40am UTC](https://discuss.elastic.co/t/chain-of-nodes-api-call/258804 "2020-12-16T10:40:24Z")
Hi there, can someone give me an insight: If in Kibana I make a search, this query is transformed in a elasticsearch API call. My cluster has dedicated data nodes, dedicated master nodes, dedicated ingest nodes and ded… --- ## [Filter by ID without providing ID (turn 2 queries into one)](https://discuss.elastic.co/t/filter-by-id-without-providing-id-turn-2-queries-into-one/258837)
**Author:** [@mekanix](https://discuss.elastic.co/u/mekanix)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 10:36am UTC](https://discuss.elastic.co/t/filter-by-id-without-providing-id-turn-2-queries-into-one/258837 "2020-12-16T10:36:08Z")
My problem can be distilled and exemplified by these 4 documents: { "\_id": 1, "owner": "A", "distance": 1, "age": 2 }, { "\_id": 2, "owner": "A", "distance": 2, "age": 1 }, { "\_id": 3,… --- ## [Trouble to write a query making two counts on a relative period of time and dividing the counts](https://discuss.elastic.co/t/trouble-to-write-a-query-making-two-counts-on-a-relative-period-of-time-and-dividing-the-counts/258827)
**Author:** [@Cedric\_Remond](https://discuss.elastic.co/u/Cedric_Remond)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 9:14am UTC](https://discuss.elastic.co/t/trouble-to-write-a-query-making-two-counts-on-a-relative-period-of-time-and-dividing-the-counts/258827 "2020-12-16T09:14:03Z")
I have been trying to write a query for a few days now, and I began to worry it won't be possible. My goal is two make two counts (full-text queries) over a relative period of time (ie the last 24 hours), and my final r… --- ## [Possible to change mapping of field in datastream from text to float](https://discuss.elastic.co/t/possible-to-change-mapping-of-field-in-datastream-from-text-to-float/258834)
**Author:** [@hugohendriks](https://discuss.elastic.co/u/hugohendriks)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 9:58am UTC](https://discuss.elastic.co/t/possible-to-change-mapping-of-field-in-datastream-from-text-to-float/258834 "2020-12-16T09:58:06Z")
hi, I have created a datastream and pushing data into it for a while. Recently I started filling a field which was original created as a text but the data are all floats. Can I change the mapping of the string field in … --- ## [Error adding nodes to the cluster = Master not discovered yet: have discovered](https://discuss.elastic.co/t/error-adding-nodes-to-the-cluster-master-not-discovered-yet-have-discovered/258815)
**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 8:04am UTC](https://discuss.elastic.co/t/error-adding-nodes-to-the-cluster-master-not-discovered-yet-have-discovered/258815 "2020-12-16T08:04:00Z")
Hi everyone, I am trying to re-add a node that I previously removed from the cluster to the cluster. But I am getting this error. Checking in Elasticsearch.yml file but no problem. \[2020-12-16T10:20:28,770\]\[WARN \]… --- ## [Index Helath stay red over 1hour when restore snapshot](https://discuss.elastic.co/t/index-helath-stay-red-over-1hour-when-restore-snapshot/258558)
**Author:** [@fujitalon](https://discuss.elastic.co/u/fujitalon)\ **Replies:** 8\ **Last updated:** [December 16, 2020, 9:25am UTC](https://discuss.elastic.co/t/index-helath-stay-red-over-1hour-when-restore-snapshot/258558 "2020-12-16T09:25:15Z")
I have 2 ElasticCloud on Azure japaneast and southeastasia. Try to test failover, I want make snapshot on japaneast, then restore on southeastasia. I know direct restore didn't support between regions, So I make script… --- ## [XPack Security Enabled TLS/SSL configured, still not working!](https://discuss.elastic.co/t/xpack-security-enabled-tls-ssl-configured-still-not-working/258716)
**Author:** [@S3l3ct3d](https://discuss.elastic.co/u/S3l3ct3d)\ **Replies:** 4\ **Last updated:** [December 16, 2020, 4:11am UTC](https://discuss.elastic.co/t/xpack-security-enabled-tls-ssl-configured-still-not-working/258716 "2020-12-16T04:11:41Z")
Good morning, We are putting ELK through a POC and have configure and 5 node cluster in the MS Azure space. Currently we have 3 ES nodes, 1 Kibana node and 1 Logstash node. I have been trying to work on getting the xpack… --- ## [Trouble querying for exact date with range query](https://discuss.elastic.co/t/trouble-querying-for-exact-date-with-range-query/258750)
**Author:** [@Matthew\_Ehinger](https://discuss.elastic.co/u/Matthew_Ehinger)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 4:05am UTC](https://discuss.elastic.co/t/trouble-querying-for-exact-date-with-range-query/258750 "2020-12-16T04:05:41Z")
Hello, I have the following mapping definition in my events index: { "events": { "mappings": { "properties": { "data": { "properties": { "reportDate": { "type": "d… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=739) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=741)