# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=747 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 748 --- ## [AD/LDAP Authentication failure](https://discuss.elastic.co/t/ad-ldap-authentication-failure/258040)
**Author:** [@Chay\_Chait](https://discuss.elastic.co/u/Chay_Chait)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 7:14pm UTC](https://discuss.elastic.co/t/ad-ldap-authentication-failure/258040 "2020-12-08T19:14:44Z")
Hi Team, We have configured the required settings as shown in the documents for elastic search integration with AD authentication and created all the required groups and users at AD end but when I try to login with the … --- ## [Elasticsearch Vulnerabilities](https://discuss.elastic.co/t/elasticsearch-vulnerabilities/258021)
**Author:** [@TerryQ](https://discuss.elastic.co/u/TerryQ)\ **Replies:** 6\ **Last updated:** [December 8, 2020, 4:55pm UTC](https://discuss.elastic.co/t/elasticsearch-vulnerabilities/258021 "2020-12-08T16:55:03Z")
Do these security vulnerabilities apply to the OSS distributions of Elasticsearch? From https://www.elastic.co/community/security/ Thanks --- ## [Inconsistency in no of total hits in results](https://discuss.elastic.co/t/inconsistency-in-no-of-total-hits-in-results/258023)
**Author:** [@Paresh\_Vaniya](https://discuss.elastic.co/u/Paresh_Vaniya)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 4:47pm UTC](https://discuss.elastic.co/t/inconsistency-in-no-of-total-hits-in-results/258023 "2020-12-08T16:47:34Z")
Hi All, I am using below query for one of the our use cases & we are observing weird thing on total hits count - means assume I hit the below request first time then total hits in result would be 64 and if I hit second … --- ## [Elasticsearch Index with INDEX\_CREATED status progress](https://discuss.elastic.co/t/elasticsearch-index-with-index-created-status-progress/257872)
**Author:** [@mohamedshokry](https://discuss.elastic.co/u/mohamedshokry)\ **Replies:** 7\ **Last updated:** [December 8, 2020, 4:30pm UTC](https://discuss.elastic.co/t/elasticsearch-index-with-index-created-status-progress/257872 "2020-12-08T16:30:42Z")
Hello, I have a simple question: Is there an API to show current progress on an Elasticsearch index during different phases like 'INDEX\_CREATED'? I know that there is an API to check current recovery, but since the ind… --- ## [Do search templates improve performance?](https://discuss.elastic.co/t/do-search-templates-improve-performance/258018)
**Author:** [@kartoffelsack](https://discuss.elastic.co/u/kartoffelsack)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 4:08pm UTC](https://discuss.elastic.co/t/do-search-templates-improve-performance/258018 "2020-12-08T16:08:16Z")
Coming from a relational background I know that using precompiled queries can also help boosting database query performance. To my understanding search templates are the the equivalent to precompiled queries. Though al… --- ## [Hive table with Elasticsearch](https://discuss.elastic.co/t/hive-table-with-elasticsearch/257736)
**Author:** [@irfangk1](https://discuss.elastic.co/u/irfangk1)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 3:33pm UTC](https://discuss.elastic.co/t/hive-table-with-elasticsearch/257736 "2020-12-08T15:33:55Z")
Need help in connecting or synchronised hive table with Elasticsearch.can any one share steps --- ## [Version mismatch between Elasticsearch and Logstash, beats](https://discuss.elastic.co/t/version-mismatch-between-elasticsearch-and-logstash-beats/257982)
**Author:** [@ksaha](https://discuss.elastic.co/u/ksaha)\ **Replies:** 4\ **Last updated:** [December 8, 2020, 1:53pm UTC](https://discuss.elastic.co/t/version-mismatch-between-elasticsearch-and-logstash-beats/257982 "2020-12-08T13:53:23Z")
Hi, We have AWS Elasticsearch service with version 7.4 We want to make it centralized Elasticsearch. We have one standalone ELK stack (version: 7.6.2) with filebeat, metricbeat configured. We are planning to point th… --- ## [Do I need a Gold license if I am using the Elastic Cloud Gold Subscription?](https://discuss.elastic.co/t/do-i-need-a-gold-license-if-i-am-using-the-elastic-cloud-gold-subscription/257998)
**Author:** [@kunalyadav](https://discuss.elastic.co/u/kunalyadav)\ **Replies:** 3\ **Last updated:** [December 8, 2020, 1:47pm UTC](https://discuss.elastic.co/t/do-i-need-a-gold-license-if-i-am-using-the-elastic-cloud-gold-subscription/257998 "2020-12-08T13:47:38Z")
Is it possible to run an ELK deployment on Elastic Cloud with the Gold subscription without having the Gold license? I have seen that for self-managed ELK we need to get the Gold license. Is that the same case with Ela… --- ## [Way to send dictionary file to multiple nodes in multiple server machines](https://discuss.elastic.co/t/way-to-send-dictionary-file-to-multiple-nodes-in-multiple-server-machines/257948)
**Author:** [@Dahea\_Moon](https://discuss.elastic.co/u/Dahea_Moon)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 1:38pm UTC](https://discuss.elastic.co/t/way-to-send-dictionary-file-to-multiple-nodes-in-multiple-server-machines/257948 "2020-12-08T13:38:00Z")
Hello, Elastic Team. I'm using one cluster with three nodes in two server machines. Is there any method to update user / synonym dictionary file at once? Unfortunately, machines cannot use shared folder. For now, we … --- ## [Elasticsearch query search sort return null](https://discuss.elastic.co/t/elasticsearch-query-search-sort-return-null/256064)
**Author:** [@magesh\_kumar](https://discuss.elastic.co/u/magesh_kumar)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 10:19am UTC](https://discuss.elastic.co/t/elasticsearch-query-search-sort-return-null/256064 "2020-12-08T10:19:25Z")
I'm recently upgrade elasticsearch to 7.9.3 version. All are good but sort not working in one of my index called user\_products. searched query curl -X GET "localhost:9200/user\_products/\_search?pretty" -H 'Content-Typ… --- ## [Machine Learning - Categorization status changed to warn](https://discuss.elastic.co/t/machine-learning-categorization-status-changed-to-warn/257841)
**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 10:27am UTC](https://discuss.elastic.co/t/machine-learning-categorization-status-changed-to-warn/257841 "2020-12-08T10:27:13Z")
Hi, I created a categorization ml job, and I get this message a lot: Categorization status changed to 'warn' for 'client\_event\_key' '\*\*\*\*' after 1186 buckets I quote the following from the documentation If the cate… --- ## [Improving search query time](https://discuss.elastic.co/t/improving-search-query-time/257880)
**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 8:39am UTC](https://discuss.elastic.co/t/improving-search-query-time/257880 "2020-12-08T08:39:19Z")
Hi, Setup: Elasticseach 6.3.0, 2 shards, 4 replicas on 5 dedicated data nodes. I have a 10,000,000 products feed index - each document represent a product and look like: { "id": 123, "active": true… --- ## [Elasticsearch take snapshot then clean indices which older than 7 days](https://discuss.elastic.co/t/elasticsearch-take-snapshot-then-clean-indices-which-older-than-7-days/257957)
**Author:** [@KA3AXCTAH](https://discuss.elastic.co/u/KA3AXCTAH)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 9:09am UTC](https://discuss.elastic.co/t/elasticsearch-take-snapshot-then-clean-indices-which-older-than-7-days/257957 "2020-12-08T09:09:15Z")
I have Elasticsearch 7.4.1 cluster for storing logs, and i have this SLM pattern applied in my cluster curl -X PUT "afghanistan-01.elastic:9200/\_slm/policy/nightly-snapshots?pretty" -H 'Content-Type: application/json' -… --- ## [Unbalanced disk usage ES 7.9.2](https://discuss.elastic.co/t/unbalanced-disk-usage-es-7-9-2/257955)
**Author:** [@111266](https://discuss.elastic.co/u/111266)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 8:53am UTC](https://discuss.elastic.co/t/unbalanced-disk-usage-es-7-9-2/257955 "2020-12-08T08:53:17Z")
Hello. Have cluster with 3 nodes and on each node the disk is busy in different ways: node1 - free space 955.8gb node3 - free space 1.9tb node2 - free space 581.9gb All nodes have 5tb disk space and equal resourc… --- ## [Elastic search stack upgradation on Kubernetes](https://discuss.elastic.co/t/elastic-search-stack-upgradation-on-kubernetes/257952)
**Author:** [@anand\_kumar2](https://discuss.elastic.co/u/anand_kumar2)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 8:15am UTC](https://discuss.elastic.co/t/elastic-search-stack-upgradation-on-kubernetes/257952 "2020-12-08T08:15:49Z")
Dear Techies, I am planning to upgrade EFK stack to upgrade on Kubernetes, while reading the blogs before upgradation I get to know about EFK stack should be upgrade on same version. At present version we are running … --- ## [Elasticsearch unwanted lowercase when indexing](https://discuss.elastic.co/t/elasticsearch-unwanted-lowercase-when-indexing/257954)
**Author:** [@bogdan\_copocean](https://discuss.elastic.co/u/bogdan_copocean)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 8:42am UTC](https://discuss.elastic.co/t/elasticsearch-unwanted-lowercase-when-indexing/257954 "2020-12-08T08:42:02Z")
Hi there, I have an indexing problem with Elasticsearch. I have a field with the type "text" that makes its value lowercase. I'm using Hot-Warm-Architecture policy with index templates where I specify shard settings an… --- ## [ElasticSerach Not Working](https://discuss.elastic.co/t/elasticserach-not-working/257950)
**Author:** [@Shashank\_Tripathi](https://discuss.elastic.co/u/Shashank_Tripathi)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 8:36am UTC](https://discuss.elastic.co/t/elasticserach-not-working/257950 "2020-12-08T08:36:52Z")
running : /opt/elk/elasticsearch-7.10.0/bin/elasticsearch on RHEL Instance. I Have tried all possible ways to run elastic search on my RHEL instance but still i am not getting the desired result. when i hit elk server… --- ## [Span\_near fails to work as expected](https://discuss.elastic.co/t/span-near-fails-to-work-as-expected/257171)
**Author:** [@Kasper\_Kooijman](https://discuss.elastic.co/u/Kasper_Kooijman)\ **Replies:** 3\ **Last updated:** [December 8, 2020, 8:34am UTC](https://discuss.elastic.co/t/span-near-fails-to-work-as-expected/257171 "2020-12-08T08:34:57Z")
I have an Elasticsearch index structured as follows: Example entry: { 'ID': '1', 'creator': 'Sam', 'instance': 'court of cassation', 'text': \[ { 'depth': 0, 'role': 'introduction', 'caseText… --- ## [Elasticsearch Cluster - Difference is storage usage between nodes](https://discuss.elastic.co/t/elasticsearch-cluster-difference-is-storage-usage-between-nodes/257934)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 7\ **Last updated:** [December 8, 2020, 7:20am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-difference-is-storage-usage-between-nodes/257934 "2020-12-08T07:20:53Z")
Hi Im having 3 node cluster with / partition has 32 GB. ES data folder is /var/lib/elasticsearch which is below / partition. Before I run load testing, I had 8 Million records and "used storage" details is below node … --- ## [How to get index to refresh automatically, even when not receiving queries?](https://discuss.elastic.co/t/how-to-get-index-to-refresh-automatically-even-when-not-receiving-queries/257929)
**Author:** [@redec](https://discuss.elastic.co/u/redec)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 2:49am UTC](https://discuss.elastic.co/t/how-to-get-index-to-refresh-automatically-even-when-not-receiving-queries/257929 "2020-12-08T02:49:45Z")
Is there any way to get elasticsearch to automatically refresh an index even if it never gets any queries? The reason I need to do this is I have a process which is constantly running, updating my index with delta updat… --- ## [Is there a snapshot limit for your hosted solution?](https://discuss.elastic.co/t/is-there-a-snapshot-limit-for-your-hosted-solution/257925)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 2:00am UTC](https://discuss.elastic.co/t/is-there-a-snapshot-limit-for-your-hosted-solution/257925 "2020-12-08T02:00:54Z")
I have ES installed on your cloud enterprise service. Previously there was a snapshot tab that yo could choose how frequently to create snapshots (and there was a max limit of the total amount of snapshots you could have… --- ## [Integer cannot be casted to long bis](https://discuss.elastic.co/t/integer-cannot-be-casted-to-long-bis/257799)
**Author:** [@gabriel\_tessier](https://discuss.elastic.co/u/gabriel_tessier)\ **Replies:** 3\ **Last updated:** [December 8, 2020, 1:20am UTC](https://discuss.elastic.co/t/integer-cannot-be-casted-to-long-bis/257799 "2020-12-08T01:20:32Z")
Hi, Following this topic that had no replies: I made more tests against several available version of elastic I have. Using this code: POST \_ingest/pipeline/\_simulate { "pipeline" : { "description": "test", … --- ## [Store enum as keyword VS integer](https://discuss.elastic.co/t/store-enum-as-keyword-vs-integer/257903)
**Author:** [@lang1991](https://discuss.elastic.co/u/lang1991)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 12:53am UTC](https://discuss.elastic.co/t/store-enum-as-keyword-vs-integer/257903 "2020-12-08T00:53:27Z")
We have a layer on top of Elasticsearch to translate enums into their numeric values before querying and indexing, but I am wondering if that's necessary at all for storage savings and query performance when compared wit… --- ## [7.9 -\> 7.10 ECK experience](https://discuss.elastic.co/t/7-9-7-10-eck-experience/257510)
**Author:** [@3266miles](https://discuss.elastic.co/u/3266miles)\ **Replies:** 5\ **Last updated:** [December 7, 2020, 11:38pm UTC](https://discuss.elastic.co/t/7-9-7-10-eck-experience/257510 "2020-12-07T23:38:31Z")
So I've recently migrated our observability cluster from Elastic 7.9 to Elastic 7.10, and noticed some interesting gotchas that are worthy of discussion. I don't think these are bugs per say but there is definitely some … --- ## [Limit on # of data nodes?](https://discuss.elastic.co/t/limit-on-of-data-nodes/257912)
**Author:** [@Jesbourne](https://discuss.elastic.co/u/Jesbourne)\ **Replies:** 10\ **Last updated:** [December 7, 2020, 10:41pm UTC](https://discuss.elastic.co/t/limit-on-of-data-nodes/257912 "2020-12-07T22:41:17Z")
Is there a limit on the number of data nodes or overall amount of data we can have in a cluster? How can we tell when we're nearing that limit? We've been told a few times by elastic employees that our limit is probably… --- ## [Indexing to index2](https://discuss.elastic.co/t/indexing-to-index2/257919)
**Author:** [@Eddie\_Adams](https://discuss.elastic.co/u/Eddie_Adams)\ **Replies:** 3\ **Last updated:** [December 7, 2020, 10:36pm UTC](https://discuss.elastic.co/t/indexing-to-index2/257919 "2020-12-07T22:36:49Z")
Is it possible to make an index1 readonly and index documents not present in index1 to index2? --- ## [Ingest pipeline grok processor on\_failure](https://discuss.elastic.co/t/ingest-pipeline-grok-processor-on-failure/257755)
**Author:** [@vsv0001](https://discuss.elastic.co/u/vsv0001)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 8:36pm UTC](https://discuss.elastic.co/t/ingest-pipeline-grok-processor-on-failure/257755 "2020-12-07T20:36:12Z")
Hi, I have an elastic ingest pipeline with grok processor defined along with error handling { "my\_ingest" : { "description" : "parse multiple patterns", "processors" : \[ { "grok" : { "… --- ## [Elasticsearch Ingest Node or Filebeats processors or Logstash to add fields to my logs](https://discuss.elastic.co/t/elasticsearch-ingest-node-or-filebeats-processors-or-logstash-to-add-fields-to-my-logs/257709)
**Author:** [@ghettosamson](https://discuss.elastic.co/u/ghettosamson)\ **Replies:** 2\ **Last updated:** [December 7, 2020, 8:12pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-node-or-filebeats-processors-or-logstash-to-add-fields-to-my-logs/257709 "2020-12-07T20:12:45Z")
I am running Dockerized Elastic Stack on a single AWS EC2 instance, with Packetbeats, Filebeats, Metricbeats, Kibana and Elasticsearch. I've been reading the documentation over this past week and I need help determining … --- ## [Including dynamic templates for the elastic index](https://discuss.elastic.co/t/including-dynamic-templates-for-the-elastic-index/257784)
**Author:** [@radhika](https://discuss.elastic.co/u/radhika)\ **Replies:** 3\ **Last updated:** [December 7, 2020, 8:03pm UTC](https://discuss.elastic.co/t/including-dynamic-templates-for-the-elastic-index/257784 "2020-12-07T20:03:42Z")
Hello everyone, I have an elastic index with the mappings set to strict except for one field which is dynamic. I would also like to set the mapping of the dynamic field using dynamic templates PUT trial { "mappings"… --- ## [Help with \`docCount\`](https://discuss.elastic.co/t/help-with-doccount/257894)
**Author:** [@tiagokalinke](https://discuss.elastic.co/u/tiagokalinke)\ **Replies:** 0\ **Last updated:** [December 7, 2020, 6:57pm UTC](https://discuss.elastic.co/t/help-with-doccount/257894 "2020-12-07T18:57:55Z")
Hi. I am using the Explain API to understand the relevance of a result. However, for each request the docCount is varying. { "size": 6, "query": { "bool": { "must": \[ … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=746) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=748)