# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=751 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 752 --- ## [Can I do an OR logic Filter?](https://discuss.elastic.co/t/can-i-do-an-or-logic-filter/257395)
**Author:** [@spyderman4g63](https://discuss.elastic.co/u/spyderman4g63)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 5:03pm UTC](https://discuss.elastic.co/t/can-i-do-an-or-logic-filter/257395 "2020-12-02T17:03:49Z")
I'm trying to build an OR logic facet (aggregation). From what I understand the best way to filter a query for an aggregation value is to use the filter clause. That is because a filter limits the results without having … --- ## [How to sort by distance in aggregation?](https://discuss.elastic.co/t/how-to-sort-by-distance-in-aggregation/257391)
**Author:** [@isma-el](https://discuss.elastic.co/u/isma-el)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 4:47pm UTC](https://discuss.elastic.co/t/how-to-sort-by-distance-in-aggregation/257391 "2020-12-02T16:47:34Z")
Hello, is it possible to sort by geodistance in an aggregation ? I can't find a way to achieve this. I need aggregations to remove duplicates according to multiple terms, bu I need to sort the results by geodistance. … --- ## [Use rank feature query as multiplier to the relevance score](https://discuss.elastic.co/t/use-rank-feature-query-as-multiplier-to-the-relevance-score/257388)
**Author:** [@praveshjain1991](https://discuss.elastic.co/u/praveshjain1991)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 4:32pm UTC](https://discuss.elastic.co/t/use-rank-feature-query-as-multiplier-to-the-relevance-score/257388 "2020-12-02T16:32:51Z")
As per the documentation, the rank feature query score is added to the overall query score. Since the relevance score itself is not bounded - the actual store depends on the data in your indices - how do I make the rank… --- ## [Concat String results in aggregation](https://discuss.elastic.co/t/concat-string-results-in-aggregation/257385)
**Author:** [@Yoandy\_Perez\_Villazo](https://discuss.elastic.co/u/Yoandy_Perez_Villazo)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 4:04pm UTC](https://discuss.elastic.co/t/concat-string-results-in-aggregation/257385 "2020-12-02T16:04:02Z")
He, I'm trying build a query with aggregation included, the aggregation define a sum of numeric values and i need further retrieve the \_ids list of items concatenated ... this is part of my aggregation ... "aggs": … --- ## [DSL query works with search but not update\_by\_query](https://discuss.elastic.co/t/dsl-query-works-with-search-but-not-update-by-query/257378)
**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 3:36pm UTC](https://discuss.elastic.co/t/dsl-query-works-with-search-but-not-update-by-query/257378 "2020-12-02T15:36:59Z")
Hi, If i run the following search query i get back the documents i expect, def get\_results(): search = es.search( index = "logs-\*", body = { "from": 0, "size": 10000, "query"… --- ## [Weird validation behaviour with allow\_leading\_wildcard](https://discuss.elastic.co/t/weird-validation-behaviour-with-allow-leading-wildcard/257374)
**Author:** [@barakm](https://discuss.elastic.co/u/barakm)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 3:09pm UTC](https://discuss.elastic.co/t/weird-validation-behaviour-with-allow-leading-wildcard/257374 "2020-12-02T15:09:38Z")
The following query: { "query": { "bool": { "must": \[ { "query\_string": { "query": "\*Created", "allow\_leading\_w… --- ## [Does LDAP Active Directory Authentication works with Basic License](https://discuss.elastic.co/t/does-ldap-active-directory-authentication-works-with-basic-license/257369)
**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 2:58pm UTC](https://discuss.elastic.co/t/does-ldap-active-directory-authentication-works-with-basic-license/257369 "2020-12-02T14:58:55Z")
Hi Team, Does the LDAP Active Directory Authentication works with Basic license? Thanks, Ajesh --- ## [ES 7.9.2 and mail notification](https://discuss.elastic.co/t/es-7-9-2-and-mail-notification/257360)
**Author:** [@Waxman](https://discuss.elastic.co/u/Waxman)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 1:33pm UTC](https://discuss.elastic.co/t/es-7-9-2-and-mail-notification/257360 "2020-12-02T13:33:51Z")
HI Folks, I would like to test mail notification. here is the part of my elk.yml: xpack.notification.email: default\_account: exchange\_account account.exchange\_account.profile: outlook account.exchange\_account.ema… --- ## [Index management](https://discuss.elastic.co/t/index-management/254724)
**Author:** [@antoteo](https://discuss.elastic.co/u/antoteo)\ **Replies:** 7\ **Last updated:** [December 2, 2020, 12:00pm UTC](https://discuss.elastic.co/t/index-management/254724 "2020-12-02T12:00:38Z")
Hello i have a case that people will upload their dataset excels csvs and other with python. their data will have different types, i want them to be able to search from all data. I know create one index in every upload b… --- ## [Does interval query work with Fast Vector Highlight?](https://discuss.elastic.co/t/does-interval-query-work-with-fast-vector-highlight/257262)
**Author:** [@zeusfsx](https://discuss.elastic.co/u/zeusfsx)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 6:26pm UTC](https://discuss.elastic.co/t/does-interval-query-work-with-fast-vector-highlight/257262 "2020-12-01T18:26:03Z")
I have a document, for example: { "text": "Index Down Jones", "title": "Index Down Jones" } And my mapping for text and title the same: "mappings": { "properties": { "text": { "type": "text… --- ## [Elasticsearch snapshot supported on a non-shared filesystem?](https://discuss.elastic.co/t/elasticsearch-snapshot-supported-on-a-non-shared-filesystem/257317)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 4\ **Last updated:** [December 2, 2020, 10:44am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-supported-on-a-non-shared-filesystem/257317 "2020-12-02T10:44:10Z")
Acc to elastic 6.8 docs - https://www.elastic.co/guide/en/elasticsearch/reference/6.8/modules-snapshots.html, it is mentioned that - "we can take a snapshot of individual indices or of the entire cluster and store it in … --- ## [Delete by query returns version\_conflict\_engine\_exception](https://discuss.elastic.co/t/delete-by-query-returns-version-conflict-engine-exception/257338)
**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 10:26am UTC](https://discuss.elastic.co/t/delete-by-query-returns-version-conflict-engine-exception/257338 "2020-12-02T10:26:26Z")
Hello, I am trying to delete some old documents which are no longer needed using the https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-delete-by-query.html POST /aws-elb-2019.01/\_delete\_by\_query?requ… --- ## [Elasticsearch startup failure](https://discuss.elastic.co/t/elasticsearch-startup-failure/257335)
**Author:** [@Sreekanth\_Ragi](https://discuss.elastic.co/u/Sreekanth_Ragi)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 10:16am UTC](https://discuss.elastic.co/t/elasticsearch-startup-failure/257335 "2020-12-02T10:16:50Z")
Hello Team, I'm facing a very peculiar issue starting up ES cluster on Openshift install running on Azure. Please note that this is more like BYO cluster set up of Openshift on Azure. We are using Azure disks for the mo… --- ## [Basic question about: Elasticsearch.hosts and discovery.seed.hosts](https://discuss.elastic.co/t/basic-question-about-elasticsearch-hosts-and-discovery-seed-hosts/257326)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 10:00am UTC](https://discuss.elastic.co/t/basic-question-about-elasticsearch-hosts-and-discovery-seed-hosts/257326 "2020-12-02T10:00:56Z")
Hello, I have 2 basic questions about Elastic stack. in the elasticsearch.yml file in the field discovery.seed.hosts should I write the IP address of all the nodes \[master, data ...\], or just master nodes ? (in my case… --- ## [How to reset elastic user default password](https://discuss.elastic.co/t/how-to-reset-elastic-user-default-password/256761)
**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\ **Replies:** 14\ **Last updated:** [December 2, 2020, 9:02am UTC](https://discuss.elastic.co/t/how-to-reset-elastic-user-default-password/256761 "2020-12-02T09:02:21Z")
Hi I have a question. How to reset the default password? I have no idea why this suddenly became restricted account? Previously was working fine with tis predefine account. Now have this Connection refused error too to… --- ## [Elasticsearch error: curl: (7) Failed to connect to localhost port 9200: Connection refused](https://discuss.elastic.co/t/elasticsearch-error-curl-7-failed-to-connect-to-localhost-port-9200-connection-refused/257313)
**Author:** [@webapps](https://discuss.elastic.co/u/webapps)\ **Replies:** 6\ **Last updated:** [December 2, 2020, 9:01am UTC](https://discuss.elastic.co/t/elasticsearch-error-curl-7-failed-to-connect-to-localhost-port-9200-connection-refused/257313 "2020-12-02T09:01:40Z")
I installed the elasticsearch in my local but when I tried to access this command curl -X GET http://localhost:9200/ it's giving me the error that the connection was refused. curl: (7) Failed to connect to localhost por… --- ## [Create Index using RestHighLevelClient](https://discuss.elastic.co/t/create-index-using-resthighlevelclient/257302)
**Author:** [@Pete\_Watcharawit](https://discuss.elastic.co/u/Pete_Watcharawit)\ **Replies:** 3\ **Last updated:** [December 2, 2020, 7:42am UTC](https://discuss.elastic.co/t/create-index-using-resthighlevelclient/257302 "2020-12-02T07:42:34Z")
IndexRequest indexRequest = new IndexRequest("my\_index"); indexRequest.create(true); indexRequest.source("{\\n" + " \\"settings\\" : {\\n" + " \\"number\_of\_shards\\" : … --- ## [Is there a curator operation order?](https://discuss.elastic.co/t/is-there-a-curator-operation-order/257308)
**Author:** [@kwonsoonwoo](https://discuss.elastic.co/u/kwonsoonwoo)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 6:49am UTC](https://discuss.elastic.co/t/is-there-a-curator-operation-order/257308 "2020-12-02T06:49:30Z")
Hello. Currently, elasticsearch distributed as bosh release is in operation. As you can see I have a cluster\_monitor and maintenance vm inside logsearch Deployment. Deployment 'logsearch' Instance VM Type … --- ## [How to upgrade the elastic cluster deployed by docker?](https://discuss.elastic.co/t/how-to-upgrade-the-elastic-cluster-deployed-by-docker/256986)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 7\ **Last updated:** [December 2, 2020, 6:41am UTC](https://discuss.elastic.co/t/how-to-upgrade-the-elastic-cluster-deployed-by-docker/256986 "2020-12-02T06:41:19Z")
I started the elasticsearch cluster with docker-compose, and I wanted to upgrade from 7.9.1 to 7.10.0. There is already some data(Advanced Settings,Spaces,Saved Objects) on kibana. How to upgrade the cluster without losi… --- ## [Why is the discover graph only available for 30 days?](https://discuss.elastic.co/t/why-is-the-discover-graph-only-available-for-30-days/256431)
**Author:** [@kwonsoonwoo](https://discuss.elastic.co/u/kwonsoonwoo)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 6:29am UTC](https://discuss.elastic.co/t/why-is-the-discover-graph-only-available-for-30-days/256431 "2020-12-02T06:29:13Z")
In curator config.yml, indexes after 90 days of creation are to be deleted. --- actions: 2: action: delete\_indices description: \>- Delete indices older than 90 days (based on index name), for logs- … --- ## ["Index" of Elasticserach](https://discuss.elastic.co/t/index-of-elasticserach/257304)
**Author:** [@qohelet](https://discuss.elastic.co/u/qohelet)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 4:26am UTC](https://discuss.elastic.co/t/index-of-elasticserach/257304 "2020-12-02T04:26:05Z")
I'm a beginner but the more I deal with Elasticsearch the more I'd like to dig deeper. Just I struggle a little to find the "Index" of Elasticsearch which is supposed to evaluate and process the REST-Queries. I have be… --- ## [How to configure beat to automatically rotate indices without ILM (7.9.1)](https://discuss.elastic.co/t/how-to-configure-beat-to-automatically-rotate-indices-without-ilm-7-9-1/257211)
**Author:** [@igorid70](https://discuss.elastic.co/u/igorid70)\ **Replies:** 3\ **Last updated:** [December 2, 2020, 5:49am UTC](https://discuss.elastic.co/t/how-to-configure-beat-to-automatically-rotate-indices-without-ilm-7-9-1/257211 "2020-12-02T05:49:03Z")
Hi I am trying to implement an automatic indices rollover based on their size while ILM is disabled. So, in beats configuration yml (e.g. metricbeat.yml) I specified the following: setup.ilm.enabled: false output.ela… --- ## [Connect with certificate to elasticsearch](https://discuss.elastic.co/t/connect-with-certificate-to-elasticsearch/257047)
**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 4:11am UTC](https://discuss.elastic.co/t/connect-with-certificate-to-elasticsearch/257047 "2020-12-02T04:11:38Z")
I'm trying to connect to elasticsearch on localhost machine with certificate and key but when I try to connect I have this error: curl --cacert /etc/elasticsearch/cert/node\_testuserCA.pem --cert /etc/elasticsearch/cert… --- ## [Format alert and action email](https://discuss.elastic.co/t/format-alert-and-action-email/257300)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 3:31am UTC](https://discuss.elastic.co/t/format-alert-and-action-email/257300 "2020-12-02T03:31:03Z")
Hi all I want to format the mail that when SIEM or system monitor send mail there will be some information that i can see so i dont really have to access SIEM app to see them. From what i know the watcher has that form… --- ## [ELK sizing guidance](https://discuss.elastic.co/t/elk-sizing-guidance/256999)
**Author:** [@Raghava\_Reddy\_Kapu\_V](https://discuss.elastic.co/u/Raghava_Reddy_Kapu_V)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 2:48am UTC](https://discuss.elastic.co/t/elk-sizing-guidance/256999 "2020-12-02T02:48:47Z")
Hi, I am considering the ELK stack in a large telco opportunity in the MEA region as the propsosed log management solutions (Humio, Splunk Enterprise, etc,.) are turning out to be expensive in the overall solution approa… --- ## [A question from newbie about an index structure](https://discuss.elastic.co/t/a-question-from-newbie-about-an-index-structure/256993)
**Author:** [@awer1967](https://discuss.elastic.co/u/awer1967)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 1:02am UTC](https://discuss.elastic.co/t/a-question-from-newbie-about-an-index-structure/256993 "2020-12-02T01:02:58Z")
Hi there ! I am completely new in Elasticsearch so I want to query about the things unclear to me. My first question is about amount of indices. Basically I am going to get a lot of a different data from different so… --- ## [Upgrading ELK stack to 7.10 along with filebeat](https://discuss.elastic.co/t/upgrading-elk-stack-to-7-10-along-with-filebeat/257099)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 12:44am UTC](https://discuss.elastic.co/t/upgrading-elk-stack-to-7-10-along-with-filebeat/257099 "2020-12-02T00:44:34Z")
Hi, currently we are using ELK stack version 7.8.0 and to push the logs to ES we are using filebeat(7.8.0). we are planning to upgrade our ELK stack to 7.10. so my doubts are 1) after upgrading ELK to 7.10 should we al… --- ## [Reindex: how to limit number of docs for testing:](https://discuss.elastic.co/t/reindex-how-to-limit-number-of-docs-for-testing/257137)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [December 1, 2020, 6:44pm UTC](https://discuss.elastic.co/t/reindex-how-to-limit-number-of-docs-for-testing/257137 "2020-12-01T18:44:14Z")
I am having problem getting reindex to do what I want and the indexes I have available for testing have over 100,000 docs and when things fail this is 100.000 tracebacks in the logs! I see from the docs that there is a … --- ## [Watcher: How to execute "condition" after "transform"?](https://discuss.elastic.co/t/watcher-how-to-execute-condition-after-transform/257232)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 3:52pm UTC](https://discuss.elastic.co/t/watcher-how-to-execute-condition-after-transform/257232 "2020-12-01T15:52:48Z")
in Elastic Watcher, we have a situation whereby I need to do some transform and calculate some value. Once calculating these values, I need to do the condition logic But it seems like condition is executed BEFORE transf… --- ## [Edge\_ngram tokenizer and edge\_ngram filter don't behave the same?](https://discuss.elastic.co/t/edge-ngram-tokenizer-and-edge-ngram-filter-dont-behave-the-same/257291)
**Author:** [@redec](https://discuss.elastic.co/u/redec)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 12:10am UTC](https://discuss.elastic.co/t/edge-ngram-tokenizer-and-edge-ngram-filter-dont-behave-the-same/257291 "2020-12-02T00:10:57Z")
I'm trying to convert a field which currently uses the edge\_ngram tokenizer to use the edge\_ngram filter instead, and tokens created by the edge\_ngram filter are not scoring the same as the same tokens created by the edg… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=750) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=752)