# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=744 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 745 --- ## [Elasticsearch python client expand\_action\_callback function question](https://discuss.elastic.co/t/elasticsearch-python-client-expand-action-callback-function-question/258372)
**Author:** [@Safak\_Kaya](https://discuss.elastic.co/u/Safak_Kaya)\ **Replies:** 0\ **Last updated:** [December 11, 2020, 6:04am UTC](https://discuss.elastic.co/t/elasticsearch-python-client-expand-action-callback-function-question/258372 "2020-12-11T06:04:43Z")
Hi all, I'm trying to use expand\_action\_callback function to get back one of the action fields from the streaming\_bulk response. There is "\_id" but I need to access another field which is in the original action. Am I o… --- ## [What is the field count for the below mapping?](https://discuss.elastic.co/t/what-is-the-field-count-for-the-below-mapping/258280)
**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\ **Replies:** 2\ **Last updated:** [December 11, 2020, 4:14am UTC](https://discuss.elastic.co/t/what-is-the-field-count-for-the-below-mapping/258280 "2020-12-11T04:14:43Z")
Hi Team, Greetings...!!!. Hope everyone is safe. Consider the following mapping for an index and kindly tell me how many fields are there. I have added the keyword mapping for the field "my\_string". So my doubt is the… --- ## [Index Lifecycle Policy understanding](https://discuss.elastic.co/t/index-lifecycle-policy-understanding/258355)
**Author:** [@FBergeron](https://discuss.elastic.co/u/FBergeron)\ **Replies:** 0\ **Last updated:** [December 11, 2020, 3:01am UTC](https://discuss.elastic.co/t/index-lifecycle-policy-understanding/258355 "2020-12-11T03:01:13Z")
Hi, I have a question about Index Lifecycle Policy. What I want is as follow: A hot phase that is no longer than 14 days. A warm phase for older records. No cold phase. The data older than 28 days should be deleted… --- ## [Data Normalization](https://discuss.elastic.co/t/data-normalization/258335)
**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\ **Replies:** 0\ **Last updated:** [December 10, 2020, 9:07pm UTC](https://discuss.elastic.co/t/data-normalization/258335 "2020-12-10T21:07:46Z")
We have a dataset with 110 million documents, 20 million of which have a reading of "0". We suspect some hourly readings have been lost due to totals running 10% to 30% lower than expected and unfortunately it seems the… --- ## [Compressing and forcemerging past time-based indices](https://discuss.elastic.co/t/compressing-and-forcemerging-past-time-based-indices/256060)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 28\ **Last updated:** [December 10, 2020, 8:32pm UTC](https://discuss.elastic.co/t/compressing-and-forcemerging-past-time-based-indices/256060 "2020-12-10T20:32:45Z")
I have a bunch of past monthly indices that are read-only since no data is being indexed to them. I was thinking of applying best\_compression on them and then invoke the \_forcemerge api to reduce the num\_segments to 1. I… --- ## [Getting "security\_exception: action \[indices:admin/settings/update\] is unauthorized" on indexes with policies updated by a new user](https://discuss.elastic.co/t/getting-security-exception-action-indices-admin-settings-update-is-unauthorized-on-indexes-with-policies-updated-by-a-new-user/258198)
**Author:** [@prolbrakels](https://discuss.elastic.co/u/prolbrakels)\ **Replies:** 2\ **Last updated:** [December 10, 2020, 7:58pm UTC](https://discuss.elastic.co/t/getting-security-exception-action-indices-admin-settings-update-is-unauthorized-on-indexes-with-policies-updated-by-a-new-user/258198 "2020-12-10T19:58:18Z")
This is for an ES cluster running v7.8.1. I'm trying to automate pushing updates to our ILM policies and (legacy) templates, so I have a shell script that curls the appropriate json via a new ES user called "template\_ma… --- ## [Wildcard search for exact phrase](https://discuss.elastic.co/t/wildcard-search-for-exact-phrase/258022)
**Author:** [@vadim-permakoff](https://discuss.elastic.co/u/vadim-permakoff)\ **Replies:** 3\ **Last updated:** [December 10, 2020, 7:48pm UTC](https://discuss.elastic.co/t/wildcard-search-for-exact-phrase/258022 "2020-12-10T19:48:41Z")
We want to migrate from Solr to Elasticsearch and everything looks fine, but there is one task we are doing in Solr for which I cannot find a solution using Elasticsearch. I need to find exactly matching text in a conten… --- ## [Dense\_vector becomes type "float"](https://discuss.elastic.co/t/dense-vector-becomes-type-float/258330)
**Author:** [@miya2](https://discuss.elastic.co/u/miya2)\ **Replies:** 0\ **Last updated:** [December 10, 2020, 7:31pm UTC](https://discuss.elastic.co/t/dense-vector-becomes-type-float/258330 "2020-12-10T19:31:53Z")
Hi, I'm trying to load vector\_value into elastic search, and loading finished without any error. But the result of mapping shows type "float", not "dense\_vector". The version of Elasticsearch is 7.5.0. { "test" : … --- ## [I can't figure out what I should be setting rollover\_alias to](https://discuss.elastic.co/t/i-cant-figure-out-what-i-should-be-setting-rollover-alias-to/258329)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 0\ **Last updated:** [December 10, 2020, 7:21pm UTC](https://discuss.elastic.co/t/i-cant-figure-out-what-i-should-be-setting-rollover-alias-to/258329 "2020-12-10T19:21:19Z")
put another way I don't understand the function of rollover\_alias and I can't find an explanation in the docs. My managed indices keep failing with errors like this: illegal\_argument\_exception: index.lifecycle.rollove… --- ## [Optimisation of scripted aggregation](https://discuss.elastic.co/t/optimisation-of-scripted-aggregation/258324)
**Author:** [@drewblin](https://discuss.elastic.co/u/drewblin)\ **Replies:** 0\ **Last updated:** [December 10, 2020, 6:59pm UTC](https://discuss.elastic.co/t/optimisation-of-scripted-aggregation/258324 "2020-12-10T18:59:40Z")
Hello! I have such aggregation. "aggs":{ "child\_id":{ "terms":{ "script":{ "lang":"painless", "source":"params\['\_source'\]\['prod\_list'\]\[params\['\_source'\]\['prod\_list'\].indexOf(params.prod) + 1\]", … --- ## [Notification when alert ended](https://discuss.elastic.co/t/notification-when-alert-ended/255962)
**Author:** [@user007](https://discuss.elastic.co/u/user007)\ **Replies:** 1\ **Last updated:** [December 10, 2020, 6:17pm UTC](https://discuss.elastic.co/t/notification-when-alert-ended/255962 "2020-12-10T18:17:37Z")
Is it possible to get a notification when the alert is ended? At the moment i only get notifications when the alert is ongoing. Thanks for your help! --- ## [Alert Notification just once](https://discuss.elastic.co/t/alert-notification-just-once/256030)
**Author:** [@user007](https://discuss.elastic.co/u/user007)\ **Replies:** 1\ **Last updated:** [December 10, 2020, 6:11pm UTC](https://discuss.elastic.co/t/alert-notification-just-once/256030 "2020-12-10T18:11:14Z")
Is it possible to send an alert notification only once (when the alert starts) and not repeatedly within a certain time frame? Thanks for your help! --- ## [Distinct values of one field based on date range](https://discuss.elastic.co/t/distinct-values-of-one-field-based-on-date-range/257176)
**Author:** [@Rohlik](https://discuss.elastic.co/u/Rohlik)\ **Replies:** 1\ **Last updated:** [December 10, 2020, 5:33pm UTC](https://discuss.elastic.co/t/distinct-values-of-one-field-based-on-date-range/257176 "2020-12-10T17:33:41Z")
Hello community :wave: , I struggling with Elasticsearch query and sadly I cannot get correct response. :unamused: What I want is get unique/disctinct values for specific field in last X minutes. I have something like… --- ## [Rally](https://discuss.elastic.co/t/rally/255661)
**Author:** [@ahmedloai](https://discuss.elastic.co/u/ahmedloai)\ **Replies:** 5\ **Last updated:** [December 10, 2020, 5:20pm UTC](https://discuss.elastic.co/t/rally/255661 "2020-12-10T17:20:25Z")
Hello I am using rally as a Benchmarking tool for elastic. I have actually 2 issues: Index-name: is there a way to change or add prefix for the indices created during a race? I tried index\_settings but it does not w… --- ## [Keep data synchronize with Indices](https://discuss.elastic.co/t/keep-data-synchronize-with-indices/258257)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 2\ **Last updated:** [December 10, 2020, 5:12pm UTC](https://discuss.elastic.co/t/keep-data-synchronize-with-indices/258257 "2020-12-10T17:12:01Z")
I'm using Elasticsearch 7.9.0. and using ingress to process and enrich data. I want to share data in indices Elasticsearch with another app. This app have api to collect data. Have any way to keep sync data in indices … --- ## [Queuing tasks and snapshot operation not working](https://discuss.elastic.co/t/queuing-tasks-and-snapshot-operation-not-working/258286)
**Author:** [@afonsoavr](https://discuss.elastic.co/u/afonsoavr)\ **Replies:** 8\ **Last updated:** [December 10, 2020, 5:02pm UTC](https://discuss.elastic.co/t/queuing-tasks-and-snapshot-operation-not-working/258286 "2020-12-10T17:02:17Z")
Hi, I has the cluster elasticsearch with 6 data nodes and 3 master. When execute the snapshot I receive the error "process\_cluster\_event\_timeout\_exception". I look in my cluster "/\_cat/pending\_tasks" it has 69 tasks w… --- ## [Elasticsearch issue](https://discuss.elastic.co/t/elasticsearch-issue/258182)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 6\ **Last updated:** [December 10, 2020, 4:46pm UTC](https://discuss.elastic.co/t/elasticsearch-issue/258182 "2020-12-10T16:46:24Z")
Hello there, I am using ELK 7.9.2 and I see following issue with elasticsearch and kibana. \*\*Elasticsearch\*\* \[2020-12-09T15:13:39,596\]\[WARN \]\[o.e.c.r.a.AllocationService\] \[master\] \[.kibana\_1\]\[0\] marking unavailable sh… --- ## [How to downgrade elasticsearch single node from 7.9.2 to 7.9.1 with out any data loss](https://discuss.elastic.co/t/how-to-downgrade-elasticsearch-single-node-from-7-9-2-to-7-9-1-with-out-any-data-loss/258207)
**Author:** [@Vinay\_Kumar2](https://discuss.elastic.co/u/Vinay_Kumar2)\ **Replies:** 9\ **Last updated:** [December 10, 2020, 3:21pm UTC](https://discuss.elastic.co/t/how-to-downgrade-elasticsearch-single-node-from-7-9-2-to-7-9-1-with-out-any-data-loss/258207 "2020-12-10T15:21:22Z")
We are planning to downgrade elasticsearch 7.9.2 to 7.9.1. Please let us know how it will works with out any data loss along with the details. --- ## [API limited search results](https://discuss.elastic.co/t/api-limited-search-results/258300)
**Author:** [@hohooss](https://discuss.elastic.co/u/hohooss)\ **Replies:** 0\ **Last updated:** [December 10, 2020, 3:18pm UTC](https://discuss.elastic.co/t/api-limited-search-results/258300 "2020-12-10T15:18:13Z")
Hello, I trying to do an elasticsearch API call that will retrieve results more than 200,000 hits, as it was confirmed by Kibana GUI search, but I always get the following message, i.e. 10000 hits: "took": 102, "ti… --- ## [Multi field search with wildcard expression in query](https://discuss.elastic.co/t/multi-field-search-with-wildcard-expression-in-query/258001)
**Author:** [@sreedhar1](https://discuss.elastic.co/u/sreedhar1)\ **Replies:** 5\ **Last updated:** [December 10, 2020, 3:12pm UTC](https://discuss.elastic.co/t/multi-field-search-with-wildcard-expression-in-query/258001 "2020-12-10T15:12:04Z")
Expecting text "abc" search against field1 or field2 to get the results. what is wrong in below query? s =\> s .Query(q =\> q .DisMax(d =\> d .Queries(q1 =\> q1 .Wildcard(w =\> w .Field(f =\> f.field1).Value("abc\*") .F… --- ## [Elasticsearch - update existing documents in different index](https://discuss.elastic.co/t/elasticsearch-update-existing-documents-in-different-index/258295)
**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\ **Replies:** 0\ **Last updated:** [December 10, 2020, 3:05pm UTC](https://discuss.elastic.co/t/elasticsearch-update-existing-documents-in-different-index/258295 "2020-12-10T15:05:16Z")
Here is my data set ticket\_id: T100 ticket\_status: open ticket\_updated\_date: 20201201T10:10:22 ticket\_id: T101 ticket\_status: open ticket\_updated\_date: 20201201T11:10:22 ticket\_id: T101 ticket\_status: closed ticket\_up… --- ## [How can i took all Hit values record in python?](https://discuss.elastic.co/t/how-can-i-took-all-hit-values-record-in-python/258273)
**Author:** [@subham\_p](https://discuss.elastic.co/u/subham_p)\ **Replies:** 1\ **Last updated:** [December 10, 2020, 3:00pm UTC](https://discuss.elastic.co/t/how-can-i-took-all-hit-values-record-in-python/258273 "2020-12-10T15:00:20Z")
'took': 14, 'timed\_out': False, '\_shards': {'total': 1, 'successful': 1, 'skipped': 0, 'failed': 0}, 'hits': {'total': {'value': 99, 'relation': 'eq'}, 'max\_score': 1.0,\`Preformatted text\` when I am trying with thi… --- ## [Timezone problem/question again](https://discuss.elastic.co/t/timezone-problem-question-again/258180)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [December 10, 2020, 2:40pm UTC](https://discuss.elastic.co/t/timezone-problem-question-again/258180 "2020-12-10T14:40:22Z")
In past I had problem with datestamp field but resolve by using this same index read data from source -\> logstash -\> send Field1 to ELK as is and it will be converted to UTC and convert it back to local time via Kibana … --- ## [Shards are UNASSIGNED state in ES 7.7 version](https://discuss.elastic.co/t/shards-are-unassigned-state-in-es-7-7-version/256808)
**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\ **Replies:** 3\ **Last updated:** [December 10, 2020, 12:45pm UTC](https://discuss.elastic.co/t/shards-are-unassigned-state-in-es-7-7-version/256808 "2020-12-10T12:45:55Z")
Hi Team, Frequently, i can see the some shards are unassigned state. can any please help me how to fix the issue? Thanks Nikhilesh Gade --- ## [NEST Elasticsearch Query](https://discuss.elastic.co/t/nest-elasticsearch-query/258254)
**Author:** [@SergioRodenas](https://discuss.elastic.co/u/SergioRodenas)\ **Replies:** 0\ **Last updated:** [December 10, 2020, 10:52am UTC](https://discuss.elastic.co/t/nest-elasticsearch-query/258254 "2020-12-10T10:52:55Z")
Hi, I would like to replicate this query using .NET Core 3.1, Nest 7.10.0 and Elasticsearch 7.9.3 SELECT name, lat, lon, (6371 \* acos(cos(radians(41.671958)) \* cos(radians(lat)) \* cos(radians(lon) - radians(-3.685049)) … --- ## [Elasticsearch 7.9.3 - exceptions of data insertions](https://discuss.elastic.co/t/elasticsearch-7-9-3-exceptions-of-data-insertions/257052)
**Author:** [@Lior\_Yakobov](https://discuss.elastic.co/u/Lior_Yakobov)\ **Replies:** 8\ **Last updated:** [December 10, 2020, 11:22am UTC](https://discuss.elastic.co/t/elasticsearch-7-9-3-exceptions-of-data-insertions/257052 "2020-12-10T11:22:01Z")
Hello, Recently I have upgraded our cluster from 7.5.2 to 7.9.3, and I noticed that there are some exceptions which were available in the elasticsearch log before the upgrade but now are gone. Some examples: \[2020-11-… --- ## [Authentication is not working after it got enabled](https://discuss.elastic.co/t/authentication-is-not-working-after-it-got-enabled/257611)
**Author:** [@luok0](https://discuss.elastic.co/u/luok0)\ **Replies:** 7\ **Last updated:** [December 10, 2020, 9:53am UTC](https://discuss.elastic.co/t/authentication-is-not-working-after-it-got-enabled/257611 "2020-12-10T09:53:48Z")
I enabled the authentication in elasticsearch.yml as below: # http.enabled: false xpack.security.enabled: true It worked well with below: curl -u elastic:xxoo 'http://localhost:9200/?pretty' { "name" : "kkj6-5Y", … --- ## [Could I move legacy indexes data to data stream](https://discuss.elastic.co/t/could-i-move-legacy-indexes-data-to-data-stream/257951)
**Author:** [@zakabluk](https://discuss.elastic.co/u/zakabluk)\ **Replies:** 4\ **Last updated:** [December 10, 2020, 7:37am UTC](https://discuss.elastic.co/t/could-i-move-legacy-indexes-data-to-data-stream/257951 "2020-12-10T07:37:45Z")
I have ELK in aws elasticsearch 6.8. Now a created new ELK cluster 7.9. I want move some indexes by snapshots to cluster 7.9 . But new cluster use data stream for store indexes. How I can did it? Why? I have indexes whic… --- ## [How to set week start day in elastic Aggregation](https://discuss.elastic.co/t/how-to-set-week-start-day-in-elastic-aggregation/258226)
**Author:** [@hyonee](https://discuss.elastic.co/u/hyonee)\ **Replies:** 0\ **Last updated:** [December 10, 2020, 7:32am UTC](https://discuss.elastic.co/t/how-to-set-week-start-day-in-elastic-aggregation/258226 "2020-12-10T07:32:57Z")
I want to set Sunday as the first of the week.... request { "size":0, "query":{ "bool":{ "filter":\[ { "range":{ "@timestamp":{ … --- ## [Why tags has different behavior in version 6.8 and 7.10](https://discuss.elastic.co/t/why-tags-has-different-behavior-in-version-6-8-and-7-10/258218)
**Author:** [@AmitC](https://discuss.elastic.co/u/AmitC)\ **Replies:** 4\ **Last updated:** [December 10, 2020, 7:21am UTC](https://discuss.elastic.co/t/why-tags-has-different-behavior-in-version-6-8-and-7-10/258218 "2020-12-10T07:21:05Z")
When I inserted below json in 6.8 and 7.10 PUT zipkin-span-2020-12-11/\_doc/123 { "traceId": "6ba4cc20cc46a65b", "duration": 1665151, "remoteEndpoint": { "ipv4": "127.0.0.1",… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=743) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=745)