# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=792

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 793

---

## [Elastic Search - Load balancer - AWS Cloud](https://discuss.elastic.co/t/elastic-search-load-balancer-aws-cloud/251123)

<div class="topic-metadata">

**Author:** [@Learner4](https://discuss.elastic.co/u/Learner4)\
**Replies:** 1\
**Last updated:** [October 7, 2020, 1:52am UTC](https://discuss.elastic.co/t/elastic-search-load-balancer-aws-cloud/251123 "2020-10-07T01:52:06Z")

</div>

Assuming there are two ACTIVE CLUSTERS in two different REGIONS in Elastic Search and both are receiving data and both the Regions having GSLB Configuration in place. I want to switch the network to Active Region automa…

---

## [\_source always zero in cardinality aggregation](https://discuss.elastic.co/t/source-always-zero-in-cardinality-aggregation/250677)

<div class="topic-metadata">

**Author:** [@autogenerated\_id](https://discuss.elastic.co/u/autogenerated_id)\
**Replies:** 11\
**Last updated:** [October 7, 2020, 10:59am UTC](https://discuss.elastic.co/t/source-always-zero-in-cardinality-aggregation/250677 "2020-10-07T10:59:02Z")

</div>

Hi! I've come across something that looks like a bug. When \_score is used in a cardinality aggregation, it always returns 0, no matter what the actual document scores are. Here's an example that illustrates it. A funct…

---

## [Get large amount of data from elastic by fastest way](https://discuss.elastic.co/t/get-large-amount-of-data-from-elastic-by-fastest-way/251252)

<div class="topic-metadata">

**Author:** [@Nick\_Name](https://discuss.elastic.co/u/Nick_Name)\
**Replies:** 2\
**Last updated:** [October 7, 2020, 10:58am UTC](https://discuss.elastic.co/t/get-large-amount-of-data-from-elastic-by-fastest-way/251252 "2020-10-07T10:58:51Z")

</div>

I need to update all documents in my elastic index by adding new field for every doc. I need to get all docs from index by fastes way. My update method get all docs -\> save to Java Map.class -\> get every doc from Map -\> …

---

## [ES crash with fatal error on search thread](https://discuss.elastic.co/t/es-crash-with-fatal-error-on-search-thread/251125)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 3\
**Last updated:** [October 7, 2020, 10:58am UTC](https://discuss.elastic.co/t/es-crash-with-fatal-error-on-search-thread/251125 "2020-10-07T10:58:12Z")

</div>

hi, I tried a query with AND operator but ES crashed everytime with the following stacktrace error: \[2020-10-06T14:45:54,221\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[node1\] fatal error in thread \[elasticse…

---

## [Compactiability of NGNIX version for elasticsearch](https://discuss.elastic.co/t/compactiability-of-ngnix-version-for-elasticsearch/251238)

<div class="topic-metadata">

**Author:** [@amp](https://discuss.elastic.co/u/amp)\
**Replies:** 1\
**Last updated:** [October 7, 2020, 9:33am UTC](https://discuss.elastic.co/t/compactiability-of-ngnix-version-for-elasticsearch/251238 "2020-10-07T09:33:25Z")

</div>

Hi, We are using elasticsearch (5.3)as datastore of app and NGNIX(1.10.2 ) used as revere proxy in the setup. Planning upgrade elasticsearch to 6.3 and is it compactable with NGNIX(1.10.2 ) ? Regards, AMP

---

## [How can I get rid off "org.elasticsearch.ElasticsearchException: Security must be explicitly enabled when using a \[basic\] license" message](https://discuss.elastic.co/t/how-can-i-get-rid-off-org-elasticsearch-elasticsearchexception-security-must-be-explicitly-enabled-when-using-a-basic-license-message/250647)

<div class="topic-metadata">

**Author:** [@masber](https://discuss.elastic.co/u/masber)\
**Replies:** 6\
**Last updated:** [October 7, 2020, 9:19am UTC](https://discuss.elastic.co/t/how-can-i-get-rid-off-org-elasticsearch-elasticsearchexception-security-must-be-explicitly-enabled-when-using-a-basic-license-message/250647 "2020-10-07T09:19:43Z")

</div>

Hi, I am testing elasticsearch in a test environment (no production) and I see this message in the logs: org.elasticsearch.ElasticsearchException: Security must be explicitly enabled when using a \[basic\] license How …

---

## [Multiword Search With Stemming](https://discuss.elastic.co/t/multiword-search-with-stemming/251195)

<div class="topic-metadata">

**Author:** [@toddsiegel](https://discuss.elastic.co/u/toddsiegel)\
**Replies:** 3\
**Last updated:** [October 7, 2020, 8:14am UTC](https://discuss.elastic.co/t/multiword-search-with-stemming/251195 "2020-10-07T08:14:33Z")

</div>

Hi all, I am new to ES (on Version: 7.9.0) and I have a case there I am searching with string that has more than one word, and I want the returned docs have all the contained words in the search phrase including stemmed…

---

## [Elasticsearch not showing data to Kibana on Centos 8](https://discuss.elastic.co/t/elasticsearch-not-showing-data-to-kibana-on-centos-8/251202)

<div class="topic-metadata">

**Author:** [@Taufik\_Maulana](https://discuss.elastic.co/u/Taufik_Maulana)\
**Replies:** 8\
**Last updated:** [October 7, 2020, 7:43am UTC](https://discuss.elastic.co/t/elasticsearch-not-showing-data-to-kibana-on-centos-8/251202 "2020-10-07T07:43:12Z")

</div>

Hello everyone, I've just install my Elasticsearch, Kibana, and FIlebeat on my Centos 8 (fresh minimal install). I also have configured xpack basic on each node. But when i wanted to see data on Discover tab on Kibana,…

---

## [Timezone conversion in ingest node date processor](https://discuss.elastic.co/t/timezone-conversion-in-ingest-node-date-processor/250810)

<div class="topic-metadata">

**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\
**Replies:** 8\
**Last updated:** [October 7, 2020, 7:11am UTC](https://discuss.elastic.co/t/timezone-conversion-in-ingest-node-date-processor/250810 "2020-10-07T07:11:41Z")

</div>

Hi, I have logs with a timestamp coming in a format like this. \[9/21/20 10:38:02:681 EEST\] In Logstash, I've used the translate filter plugin to convert EEST to +03:00, I can't find a similar functionality with the in…

---

## [Mapper error on bulk insert, keyword vs text](https://discuss.elastic.co/t/mapper-error-on-bulk-insert-keyword-vs-text/251181)

<div class="topic-metadata">

**Author:** [@Andrew\_DS](https://discuss.elastic.co/u/Andrew_DS)\
**Replies:** 1\
**Last updated:** [October 7, 2020, 7:06am UTC](https://discuss.elastic.co/t/mapper-error-on-bulk-insert-keyword-vs-text/251181 "2020-10-07T07:06:19Z")

</div>

I'm getting the following error message when bulk-indexing into a new index: \[2020-10-06T00:00:00,977\]\[DEBUG\]\[o.e.a.b.TransportShardBulkAction\] \[my-node\] \[my-idx\]\[1\] failed to execute bulk item (index) index {\[my-idx\]\[…

---

## [Want to check check if Elastic search “read\_only\_allow\_delete” is true](https://discuss.elastic.co/t/want-to-check-check-if-elastic-search-read-only-allow-delete-is-true/251184)

<div class="topic-metadata">

**Author:** [@bob35](https://discuss.elastic.co/u/bob35)\
**Replies:** 1\
**Last updated:** [October 7, 2020, 1:55am UTC](https://discuss.elastic.co/t/want-to-check-check-if-elastic-search-read-only-allow-delete-is-true/251184 "2020-10-07T01:55:59Z")

</div>

Elastic 6.8 I want to write something (Python) that check if the “read\_only\_allow\_delete” is true, and if it’s true to do something(notify) Is it possible to write something that run all the indices and check the status …

---

## [Different behavior between POST \_add and \_update endpoints on documents with epoch\_millis dates as strings or int/float](https://discuss.elastic.co/t/different-behavior-between-post-add-and-update-endpoints-on-documents-with-epoch-millis-dates-as-strings-or-int-float/251194)

<div class="topic-metadata">

**Author:** [@ljak](https://discuss.elastic.co/u/ljak)\
**Replies:** 0\
**Last updated:** [October 6, 2020, 10:45pm UTC](https://discuss.elastic.co/t/different-behavior-between-post-add-and-update-endpoints-on-documents-with-epoch-millis-dates-as-strings-or-int-float/251194 "2020-10-06T22:45:51Z")

</div>

Hello everyone, According to documentation https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping-date-format.html#mapping-date-format ; Elasticsearch parses dates from Strings ... and such, even where …

---

## [ElasticSearch Benchmarking and stress testing](https://discuss.elastic.co/t/elasticsearch-benchmarking-and-stress-testing/251179)

<div class="topic-metadata">

**Author:** [@kagrahar](https://discuss.elastic.co/u/kagrahar)\
**Replies:** 0\
**Last updated:** [October 6, 2020, 7:16pm UTC](https://discuss.elastic.co/t/elasticsearch-benchmarking-and-stress-testing/251179 "2020-10-06T19:16:54Z")

</div>

Is there a tool other than esrally to benchmark elasticsearch? I need to generate atleast a TB of data. The goal is to see the backend storage performance on different disk media. Thanks in advance

---

## [Okta integration with Elasticsearch](https://discuss.elastic.co/t/okta-integration-with-elasticsearch/249734)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 3\
**Last updated:** [October 6, 2020, 6:03pm UTC](https://discuss.elastic.co/t/okta-integration-with-elasticsearch/249734 "2020-10-06T18:03:54Z")

</div>

Hi All, We are trying to do an integration of elasticsearch with Okta, we have succeded the integration for our development box, where we have not enabled any TLS/SSL. But when do the integration for production setup, …

---

## [Unable to install elasticsearch in RHEL 7 due to polkit error](https://discuss.elastic.co/t/unable-to-install-elasticsearch-in-rhel-7-due-to-polkit-error/249845)

<div class="topic-metadata">

**Author:** [@aknraj](https://discuss.elastic.co/u/aknraj)\
**Replies:** 12\
**Last updated:** [October 6, 2020, 4:26pm UTC](https://discuss.elastic.co/t/unable-to-install-elasticsearch-in-rhel-7-due-to-polkit-error/249845 "2020-10-06T16:26:21Z")

</div>

Trying to install elasticsearch in RHEL 7, but it has been failed with polkit error (please refer below for the detailed error) - I tried to reinstall and also with full permissions on the file as recommended in other to…

---

## [ELK Platinum : Active Directory error](https://discuss.elastic.co/t/elk-platinum-active-directory-error/250780)

<div class="topic-metadata">

**Author:** [@nityaraj06](https://discuss.elastic.co/u/nityaraj06)\
**Replies:** 1\
**Last updated:** [October 6, 2020, 3:34pm UTC](https://discuss.elastic.co/t/elk-platinum-active-directory-error/250780 "2020-10-06T15:34:26Z")

</div>

Hi I have added the following config in elasticsearch.yml xpack: security: authc: realms: active\_directory: my\_ad: order: 0 domain\_name: abcd.xyz.org url: ldap://abcd.xyz.org:389 bind\_dn: nitya.raj@abcd.xyz.or…

---

## [How to implement forked path pattern pipeline](https://discuss.elastic.co/t/how-to-implement-forked-path-pattern-pipeline/251154)

<div class="topic-metadata">

**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\
**Replies:** 0\
**Last updated:** [October 6, 2020, 3:04pm UTC](https://discuss.elastic.co/t/how-to-implement-forked-path-pattern-pipeline/251154 "2020-10-06T15:04:21Z")

</div>

Hi, I need some guidance understanding how to implement a forked path pattern pipeline as described here. I'm running Logstash in a Kubernetes environment and have the following configured in my logstash.yml file: xpa…

---

## [Unrecognized VM option 'UseConcMarkSweepGC'](https://discuss.elastic.co/t/unrecognized-vm-option-useconcmarksweepgc/251109)

<div class="topic-metadata">

**Author:** [@dewell](https://discuss.elastic.co/u/dewell)\
**Replies:** 1\
**Last updated:** [October 6, 2020, 2:30pm UTC](https://discuss.elastic.co/t/unrecognized-vm-option-useconcmarksweepgc/251109 "2020-10-06T14:30:07Z")

</div>

Hello, in my work I got access to a virtual machine with elasticsearch. It used to be running so I didn't have to change something myself. For some reason it stopped and when I try to restart it I get the following erro…

---

## [Java High Level Rest Client to Elasicsearch](https://discuss.elastic.co/t/java-high-level-rest-client-to-elasicsearch/250929)

<div class="topic-metadata">

**Author:** [@pathfinder225](https://discuss.elastic.co/u/pathfinder225)\
**Replies:** 4\
**Last updated:** [October 6, 2020, 2:17pm UTC](https://discuss.elastic.co/t/java-high-level-rest-client-to-elasicsearch/250929 "2020-10-06T14:17:18Z")

</div>

Hi I am using Java High Level Rest client on Spring boot to perform Search API operations. Our Elasticsearch is protected with https and basic(user/pwd) authentication. I'm receiving below exception , javax.net.ssl.S…

---

## [Elasticsearch use case and implementation approach](https://discuss.elastic.co/t/elasticsearch-use-case-and-implementation-approach/251082)

<div class="topic-metadata">

**Author:** [@ocmvin](https://discuss.elastic.co/u/ocmvin)\
**Replies:** 0\
**Last updated:** [October 6, 2020, 7:57am UTC](https://discuss.elastic.co/t/elasticsearch-use-case-and-implementation-approach/251082 "2020-10-06T07:57:12Z")

</div>

Problem Statement : Relational DB schema as below Employee 1 ---\> Many --Contact (e.g. Mobile Phone number,email id ,Office Phone number,Home Phone Number) Contact Description 1 -\>Many Contact (Contact Description Mas…

---

## [ElasticSearch Query Range with timezone is not working](https://discuss.elastic.co/t/elasticsearch-query-range-with-timezone-is-not-working/250877)

<div class="topic-metadata">

**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\
**Replies:** 9\
**Last updated:** [October 6, 2020, 2:07pm UTC](https://discuss.elastic.co/t/elasticsearch-query-range-with-timezone-is-not-working/250877 "2020-10-06T14:07:46Z")

</div>

Hi, I am currently facing a weird issue, when I am include timezone, the elastic search is returning zero hits: { "took" : 0, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1, "skipped"…

---

## [Alerting In AWS Elasticsearch Kibana](https://discuss.elastic.co/t/alerting-in-aws-elasticsearch-kibana/251127)

<div class="topic-metadata">

**Author:** [@kennedy](https://discuss.elastic.co/u/kennedy)\
**Replies:** 1\
**Last updated:** [October 6, 2020, 1:24pm UTC](https://discuss.elastic.co/t/alerting-in-aws-elasticsearch-kibana/251127 "2020-10-06T13:24:08Z")

</div>

Hi Everyone, So here is the scenario , I have metricbeat installed on 2 different servers. The feed is going from the logstash to the AWS Elasticsearch. Now , I'm setting up the alerting in kibana for cpu utilization. {…

---

## [Create index pattern from C# Nest](https://discuss.elastic.co/t/create-index-pattern-from-c-nest/249113)

<div class="topic-metadata">

**Author:** [@Alder](https://discuss.elastic.co/u/Alder)\
**Replies:** 2\
**Last updated:** [October 6, 2020, 1:09pm UTC](https://discuss.elastic.co/t/create-index-pattern-from-c-nest/249113 "2020-10-06T13:09:22Z")

</div>

Hello everyone. I need to create an index pattern using C # Nest, without using kibana. I searched the Nest API but didn't find it. Is possible create index pattern using the Nest API? Regards, Alder

---

## [Configuration of ELK using iscsi LUNs instead of NFS](https://discuss.elastic.co/t/configuration-of-elk-using-iscsi-luns-instead-of-nfs/251112)

<div class="topic-metadata">

**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\
**Replies:** 0\
**Last updated:** [October 6, 2020, 11:46am UTC](https://discuss.elastic.co/t/configuration-of-elk-using-iscsi-luns-instead-of-nfs/251112 "2020-10-06T11:46:59Z")

</div>

We have a running ELK setup on NFS storage (3 ELS share the same NFS mount) and due to space crunch we need to migrate to iscsi mounts (LUN with unique initiator name), that will be specific to ELS server(s) Also, we wi…

---

## [Mapper\_parsing\_exception when migrating index from 5.6 to 7.9](https://discuss.elastic.co/t/mapper-parsing-exception-when-migrating-index-from-5-6-to-7-9/249116)

<div class="topic-metadata">

**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\
**Replies:** 2\
**Last updated:** [October 6, 2020, 11:43am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-when-migrating-index-from-5-6-to-7-9/249116 "2020-10-06T11:43:12Z")

</div>

I am trying to migrate the index from version 5.6 to 7.9 and seeing the below error reason" : "failed to parse field \[fields\] of type \[text\] in document with id 'AXQd0YETZkyCPebFFOUB'. Preview of field's value: '{servic…

---

## [Increasing bandwidth for Rally results](https://discuss.elastic.co/t/increasing-bandwidth-for-rally-results/250434)

<div class="topic-metadata">

**Author:** [@Kailas](https://discuss.elastic.co/u/Kailas)\
**Replies:** 7\
**Last updated:** [October 6, 2020, 11:12am UTC](https://discuss.elastic.co/t/increasing-bandwidth-for-rally-results/250434 "2020-10-06T11:12:05Z")

</div>

Hi, I have my Rally instance on a different host ( not part of my ECK 1.2 ). When I run http\_logs using below command '''esrally --pipeline benchmark-only --track=http\_logs --challenge append-no-conflicts-index-only --t…

---

## [How to return only the matched object in a nested field, instead of the whole object?](https://discuss.elastic.co/t/how-to-return-only-the-matched-object-in-a-nested-field-instead-of-the-whole-object/251073)

<div class="topic-metadata">

**Author:** [@Bart\_de\_Man](https://discuss.elastic.co/u/Bart_de_Man)\
**Replies:** 2\
**Last updated:** [October 6, 2020, 10:16am UTC](https://discuss.elastic.co/t/how-to-return-only-the-matched-object-in-a-nested-field-instead-of-the-whole-object/251073 "2020-10-06T10:16:59Z")

</div>

Elasticsearch version ( bin/elasticsearch --version ): 5.6.11 Plugins installed : JVM version ( java -version ): openjdk version "1.8.0\_222" OpenJDK Runtime Environment (build 1.8.0\_222-8u222-b10-1ubuntu1~16.04.1-b1…

---

## [How to disable xpack.monitoring?](https://discuss.elastic.co/t/how-to-disable-xpack-monitoring/251096)

<div class="topic-metadata">

**Author:** [@kamolhasan](https://discuss.elastic.co/u/kamolhasan)\
**Replies:** 0\
**Last updated:** [October 6, 2020, 10:01am UTC](https://discuss.elastic.co/t/how-to-disable-xpack-monitoring/251096 "2020-10-06T10:01:45Z")

</div>

Hi, I have enabled xpack.monitoring with "elasticsearch.yml" file: ... ... ... xpack.monitoring.enabled: true xpack.monitoring.collection.enabled: true xpack.monitoring.exporters: my-http-exporter: type: http …

---

## [Searchquery using timestamp in "and" condition issue](https://discuss.elastic.co/t/searchquery-using-timestamp-in-and-condition-issue/251094)

<div class="topic-metadata">

**Author:** [@tomaszde](https://discuss.elastic.co/u/tomaszde)\
**Replies:** 1\
**Last updated:** [October 6, 2020, 9:49am UTC](https://discuss.elastic.co/t/searchquery-using-timestamp-in-and-condition-issue/251094 "2020-10-06T09:49:31Z")

</div>

hi, I'm getting more hits with more exclusive search using "and" with timestamp. is it a bug or the query syntax is wrong ? query1 GET /myindex-\*/\_search?\_source=true&track\_total\_hits=true { "query": { …

---

## [Aggregation returning contradictory results](https://discuss.elastic.co/t/aggregation-returning-contradictory-results/249058)

<div class="topic-metadata">

**Author:** [@Xavier\_Marti\_Bofill](https://discuss.elastic.co/u/Xavier_Marti_Bofill)\
**Replies:** 2\
**Last updated:** [October 6, 2020, 9:43am UTC](https://discuss.elastic.co/t/aggregation-returning-contradictory-results/249058 "2020-10-06T09:43:43Z")

</div>

Our elasticsearch cluster is returning is contradictory results. We execute the following query, searching for values below 480 (that would mean we have a problem): { "aggs": { "2": { "terms": { "fie…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=791)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=793)
