# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=798 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 799 --- ## [ElasticSearch connection to Tableau in open source ELK](https://discuss.elastic.co/t/elasticsearch-connection-to-tableau-in-open-source-elk/250273)
**Author:** [@DG13](https://discuss.elastic.co/u/DG13)\ **Replies:** 3\ **Last updated:** [September 29, 2020, 2:52am UTC](https://discuss.elastic.co/t/elasticsearch-connection-to-tableau-in-open-source-elk/250273 "2020-09-29T02:52:46Z")
Hi , ElasticSearch Tableau connectivity enabled in open sourceELK stack as well ? I am following this link - https://www.elastic.co/guide/en/elasticsearch/reference/7.9/sql-client-apps-tableau-desktop.html However get… --- ## [Problem with EQL queries](https://discuss.elastic.co/t/problem-with-eql-queries/250266)
**Author:** [@Yenii\_Ceri](https://discuss.elastic.co/u/Yenii_Ceri)\ **Replies:** 0\ **Last updated:** [September 28, 2020, 11:22pm UTC](https://discuss.elastic.co/t/problem-with-eql-queries/250266 "2020-09-28T23:22:17Z")
Hey I have an issue with EQL queries on Elasticsearch. I have a basic ES license with xpack enabled, in addition to some Winlogbeat indexes with ECS syntax. However, I don't get any hit when I execute some EQL queries… --- ## [How to see the requests that will come to elasticsearch?](https://discuss.elastic.co/t/how-to-see-the-requests-that-will-come-to-elasticsearch/250172)
**Author:** [@aleksandr555](https://discuss.elastic.co/u/aleksandr555)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 11:20pm UTC](https://discuss.elastic.co/t/how-to-see-the-requests-that-will-come-to-elasticsearch/250172 "2020-09-28T23:20:33Z")
Hello, at the moment we are using an elasticsearch cluster consisting of 3 master nodes and 15 data nodes, elasticsearch version 7.5.2, kibana version 7.5.2, please tell me if it is possible to monitor requests coming to… --- ## [Infor required](https://discuss.elastic.co/t/infor-required/250185)
**Author:** [@balajiduddu](https://discuss.elastic.co/u/balajiduddu)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 11:04pm UTC](https://discuss.elastic.co/t/infor-required/250185 "2020-09-28T23:04:11Z")
Hi , We are planning to update Elastic search to 7.9.1. So can we use the JAVA API of version 2.4.0 to perform operations on EL if not which version of JAVA API we have to use to perform operations of EL Thanks, Balaj… --- ## [Get index mapping from a snapshot](https://discuss.elastic.co/t/get-index-mapping-from-a-snapshot/250216)
**Author:** [@Robert\_Ga](https://discuss.elastic.co/u/Robert_Ga)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 10:58pm UTC](https://discuss.elastic.co/t/get-index-mapping-from-a-snapshot/250216 "2020-09-28T22:58:44Z")
Hi everyone! I am curious if I can retrieve only the mapping of an index which is present inside a cluster snapshot without restoring that snapshot. I know that I can restore only one index and then get the mapping for … --- ## [Exact match with multiple names from OSM elements](https://discuss.elastic.co/t/exact-match-with-multiple-names-from-osm-elements/250257)
**Author:** [@HarelM](https://discuss.elastic.co/u/HarelM)\ **Replies:** 0\ **Last updated:** [September 28, 2020, 7:17pm UTC](https://discuss.elastic.co/t/exact-match-with-multiple-names-from-osm-elements/250257 "2020-09-28T19:17:29Z")
OK, so this might be a long intro but stay with me... I've built a OSM names search engine, a bit like Nominatim, but better (at least for my site's needs). I'm basically indexing everything that has a name in OSM. Th… --- ## [Questions about upgrading ES 6 -\> 7](https://discuss.elastic.co/t/questions-about-upgrading-es-6-7/250238)
**Author:** [@rdragan](https://discuss.elastic.co/u/rdragan)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 5:53pm UTC](https://discuss.elastic.co/t/questions-about-upgrading-es-6-7/250238 "2020-09-28T17:53:51Z")
Hey, We are planning to do an online 6-\>7 upgrade for our ES clusters, and we are looking into ways of rolling back safely from 7 to 6 in case something bad happens. The ES docs state that once the upgrade starts, the E… --- ## [Exception in thread "main" java.nio.file.AccessDeniedException](https://discuss.elastic.co/t/exception-in-thread-main-java-nio-file-accessdeniedexception/249849)
**Author:** [@Elastic-Noob](https://discuss.elastic.co/u/Elastic-Noob)\ **Replies:** 2\ **Last updated:** [September 28, 2020, 2:02pm UTC](https://discuss.elastic.co/t/exception-in-thread-main-java-nio-file-accessdeniedexception/249849 "2020-09-28T14:02:36Z")
I'm getting the following error when running elasticsearch.bat C:\\Program Files\\Elastic\\Elasticsearch\\7.7.0\\bin\> .\\elasticsearch.bat Exception in thread "main" java.nio.file.AccessDeniedException: C:\\ProgramData\\Elasti… --- ## [Current recommendations for large heaps (64GB+)](https://discuss.elastic.co/t/current-recommendations-for-large-heaps-64gb/249827)
**Author:** [@lechuck](https://discuss.elastic.co/u/lechuck)\ **Replies:** 4\ **Last updated:** [September 28, 2020, 3:55pm UTC](https://discuss.elastic.co/t/current-recommendations-for-large-heaps-64gb/249827 "2020-09-28T15:55:55Z")
Hey folks, I'd like to get an opinion on current recommendations for running Elasticsearch with large heaps (64-128GB) please. I understand ~30GB is generally recommended for most installs in order to benefit from com… --- ## [Matching with analyzer](https://discuss.elastic.co/t/matching-with-analyzer/250214)
**Author:** [@st1nc1ty](https://discuss.elastic.co/u/st1nc1ty)\ **Replies:** 0\ **Last updated:** [September 28, 2020, 3:00pm UTC](https://discuss.elastic.co/t/matching-with-analyzer/250214 "2020-09-28T15:00:52Z")
I've got a fairly simple index that has a first and last name that are both have an ngram analyzer attached. It's working well as I can search "ali" and get "alice" among others. I probably already know the answer but … --- ## [Is my scenario a good candidate to use ElasticSearch?](https://discuss.elastic.co/t/is-my-scenario-a-good-candidate-to-use-elasticsearch/250034)
**Author:** [@coderberry](https://discuss.elastic.co/u/coderberry)\ **Replies:** 2\ **Last updated:** [September 28, 2020, 1:43pm UTC](https://discuss.elastic.co/t/is-my-scenario-a-good-candidate-to-use-elasticsearch/250034 "2020-09-28T13:43:26Z")
I work for a real estate company that pulls MLS data from over 500 different sources. We are currently storing the listing property data as a flat jsonb document within Postgres. For example, one MLS might have the follo… --- ## [How to restore an index](https://discuss.elastic.co/t/how-to-restore-an-index/250173)
**Author:** [@DENMODSupport](https://discuss.elastic.co/u/DENMODSupport)\ **Replies:** 6\ **Last updated:** [September 28, 2020, 1:13pm UTC](https://discuss.elastic.co/t/how-to-restore-an-index/250173 "2020-09-28T13:13:48Z")
We have accidentally deleted an index through Cerebro. But we have backup of that deleted index folder from server backup. Could you please let me know how to restore that deleted index from that server backup? --- ## [Does Text Analysis increaase CPU utilization](https://discuss.elastic.co/t/does-text-analysis-increaase-cpu-utilization/249078)
**Author:** [@dimm](https://discuss.elastic.co/u/dimm)\ **Replies:** 5\ **Last updated:** [September 28, 2020, 12:43pm UTC](https://discuss.elastic.co/t/does-text-analysis-increaase-cpu-utilization/249078 "2020-09-28T12:43:54Z")
Hi, I want to add some analyzer to tokenize text fields in some specific way, will it have impact to ES cluster resourses utilization (CPU, ... )? If yes, how significant? thanks --- ## [ELK Setup in AWS EKS](https://discuss.elastic.co/t/elk-setup-in-aws-eks/250183)
**Author:** [@vamsikrishna\_medeti](https://discuss.elastic.co/u/vamsikrishna_medeti)\ **Replies:** 0\ **Last updated:** [September 28, 2020, 12:30pm UTC](https://discuss.elastic.co/t/elk-setup-in-aws-eks/250183 "2020-09-28T12:30:12Z")
Hi, We are planning to go for on premise ELK setup on AWS ELK (Kubernetes) for Infra/APM/Log Monitoring. I would like to know which EC2 slave machines are best suited for this. And which storage type is suited for this… --- ## [Watcher last\_checked](https://discuss.elastic.co/t/watcher-last-checked/250138)
**Author:** [@JHM](https://discuss.elastic.co/u/JHM)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 11:48am UTC](https://discuss.elastic.co/t/watcher-last-checked/250138 "2020-09-28T11:48:40Z")
I have following code for the range of my watcher. However, I instead of the now I would like to use the last\_checked value that you get when the watcher is executed. Is there any possibility to do that? … --- ## [To which type of elasticsearch node should I send x-pack messages (from Elasticsearch, Logstash, Kibana, and Beats), and normal messages (from Logstash)?](https://discuss.elastic.co/t/to-which-type-of-elasticsearch-node-should-i-send-x-pack-messages-from-elasticsearch-logstash-kibana-and-beats-and-normal-messages-from-logstash/250096)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 0\ **Last updated:** [September 27, 2020, 5:03pm UTC](https://discuss.elastic.co/t/to-which-type-of-elasticsearch-node-should-i-send-x-pack-messages-from-elasticsearch-logstash-kibana-and-beats-and-normal-messages-from-logstash/250096 "2020-09-27T17:03:47Z")
Hi folks, I am using Elastic Stack 7.9, and I have 11 VMs like below; 1 - Elasticsearch Client Node (also injest) + Kibana 2,3 - Elasticsearch Master Nodes 4 - Elasticsearch Voting-only Master Node 5,6,7 - Elasticse… --- ## [Mapping not respected](https://discuss.elastic.co/t/mapping-not-respected/249670)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 4\ **Last updated:** [September 28, 2020, 9:55am UTC](https://discuss.elastic.co/t/mapping-not-respected/249670 "2020-09-28T09:55:35Z")
Hi, In Elastic 7.9.1I have this template (which is considered 'legacy' for some reason) which has several mappings like for example this one: However, when I look at the actual index I see everything is mapped as te… --- ## [Elasticsearch can't execute watcher due to hooks.slack not being resolved](https://discuss.elastic.co/t/elasticsearch-cant-execute-watcher-due-to-hooks-slack-not-being-resolved/249835)
**Author:** [@cctk](https://discuss.elastic.co/u/cctk)\ **Replies:** 2\ **Last updated:** [September 28, 2020, 9:19am UTC](https://discuss.elastic.co/t/elasticsearch-cant-execute-watcher-due-to-hooks-slack-not-being-resolved/249835 "2020-09-28T09:19:44Z")
I Have elasticsearch v7.9.1 Kibana v7.9.1 unfortunately the watchers have stopped working after I set up x-pack security. I cannot curl hooks.slack.com , this is my result. curl -v https://hooks.slack.com \* Could no… --- ## [Range query input type string vs numeric](https://discuss.elastic.co/t/range-query-input-type-string-vs-numeric/249211)
**Author:** [@bnarang](https://discuss.elastic.co/u/bnarang)\ **Replies:** 4\ **Last updated:** [September 28, 2020, 9:15am UTC](https://discuss.elastic.co/t/range-query-input-type-string-vs-numeric/249211 "2020-09-28T09:15:06Z")
Is there a negative impact on using a string input type vs numeric input type on the search query? For e.g. below in second example, quoted 10 { "query": { "range": { "age": { "gte": 10 } … --- ## [Async query not returning results + search context failures](https://discuss.elastic.co/t/async-query-not-returning-results-search-context-failures/248746)
**Author:** [@csewack\_asym](https://discuss.elastic.co/u/csewack_asym)\ **Replies:** 13\ **Last updated:** [September 28, 2020, 9:08am UTC](https://discuss.elastic.co/t/async-query-not-returning-results-search-context-failures/248746 "2020-09-28T09:08:15Z")
We recently added many frozen indices to our cluster. We have been having trouble querying them using the regular search api, with a frequent error that there is no search context found. We believe this is because some s… --- ## [Max Agg on lowest value inside a list property of the document](https://discuss.elastic.co/t/max-agg-on-lowest-value-inside-a-list-property-of-the-document/249875)
**Author:** [@thevu](https://discuss.elastic.co/u/thevu)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 9:07am UTC](https://discuss.elastic.co/t/max-agg-on-lowest-value-inside-a-list-property-of-the-document/249875 "2020-09-28T09:07:06Z")
I'm looking to do a Max aggregation on a value of the property under my document, the property is a list of complex object (key and value). Here's my data: \[{ "id" : "1", "listItems" : \[ { … --- ## [Field Collapsing & Pagination](https://discuss.elastic.co/t/field-collapsing-pagination/249936)
**Author:** [@Prahalad\_Rathod](https://discuss.elastic.co/u/Prahalad_Rathod)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 9:00am UTC](https://discuss.elastic.co/t/field-collapsing-pagination/249936 "2020-09-28T09:00:18Z")
I just want to know how pagination works with collapsing. I have below index data: {'departmentNo': 1, 'departmentName': 'Food', 'departmentLoc': "I1", "departmentScore": "5", "employeeid" : 1, "employeeName": "vij… --- ## [Pass Data to Elasticsearch from a Remote Server](https://discuss.elastic.co/t/pass-data-to-elasticsearch-from-a-remote-server/249945)
**Author:** [@Amantha](https://discuss.elastic.co/u/Amantha)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 8:58am UTC](https://discuss.elastic.co/t/pass-data-to-elasticsearch-from-a-remote-server/249945 "2020-09-28T08:58:10Z")
I have two PCs. Assueme that they are Server1 and Server2. Logstash is installed in Server2 and Elasticsearch is configured in Server1. I want to send filtered logstash data from Server2 to Server1. Which configuration… --- ## [Elasticsearch.js client objects are all empty](https://discuss.elastic.co/t/elasticsearch-js-client-objects-are-all-empty/249961)
**Author:** [@JLobato](https://discuss.elastic.co/u/JLobato)\ **Replies:** 0\ **Last updated:** [September 25, 2020, 10:34am UTC](https://discuss.elastic.co/t/elasticsearch-js-client-objects-are-all-empty/249961 "2020-09-25T10:34:47Z")
Hi All, I am trying to create a rest API with the NodeJS client so that I can retrieve data from Elastic cloud. Now when I create the client in node and return the client everything is empty. So client.cat for example … --- ## [How to transform a json object into flat fields in watcher?](https://discuss.elastic.co/t/how-to-transform-a-json-object-into-flat-fields-in-watcher/250044)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 8:48am UTC](https://discuss.elastic.co/t/how-to-transform-a-json-object-into-flat-fields-in-watcher/250044 "2020-09-28T08:48:59Z")
we got a watcher to capture certain payload in json format. for example "host": "myserver": { "jvm": { { "version": "14.0.1", "vm\_name": "OpenJDK", … --- ## [LDAP authentication error](https://discuss.elastic.co/t/ldap-authentication-error/250118)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 6\ **Last updated:** [September 28, 2020, 8:36am UTC](https://discuss.elastic.co/t/ldap-authentication-error/250118 "2020-09-28T08:36:32Z")
Hi all I have a little problems with authenticate to ldap server, i set it to work already but sometime the authen give me an error timeout, and all the time all of our account have to wait for some time to log in the… --- ## [Watch is stuck at error, always needs a manual restart](https://discuss.elastic.co/t/watch-is-stuck-at-error-always-needs-a-manual-restart/249778)
**Author:** [@Shubhangi](https://discuss.elastic.co/u/Shubhangi)\ **Replies:** 4\ **Last updated:** [September 28, 2020, 8:13am UTC](https://discuss.elastic.co/t/watch-is-stuck-at-error-always-needs-a-manual-restart/249778 "2020-09-28T08:13:11Z")
Hi, I'm using Elastic Stack 7.8. I've enable a watcher. Every night it shows error: connection timeout for webhook action. And the action status in But only when I edit the watch(I'm not actually changing any thing, rea… --- ## [How to search when there are 2 fields with dense vectors](https://discuss.elastic.co/t/how-to-search-when-there-are-2-fields-with-dense-vectors/248630)
**Author:** [@Chetan\_Ambi](https://discuss.elastic.co/u/Chetan_Ambi)\ **Replies:** 2\ **Last updated:** [September 28, 2020, 6:23am UTC](https://discuss.elastic.co/t/how-to-search-when-there-are-2-fields-with-dense-vectors/248630 "2020-09-28T06:23:08Z")
I am working on implementing semantic search. I was able to implement where there is only one text field for which we can create dense vector. Can anyone please suggest how to achieve when there are more than one text fi… --- ## [How to increase replicas for .kibana index](https://discuss.elastic.co/t/how-to-increase-replicas-for-kibana-index/250124)
**Author:** [@shubhamblackstratus](https://discuss.elastic.co/u/shubhamblackstratus)\ **Replies:** 7\ **Last updated:** [September 28, 2020, 5:28am UTC](https://discuss.elastic.co/t/how-to-increase-replicas-for-kibana-index/250124 "2020-09-28T05:28:48Z")
Hi Team, In my cluster, I've found that by default every new index created with 1 shard and 1 replica; So I also changed default settings with 2 primary and 2 replica successfully for every new indices, which was found … --- ## [Workload Profile](https://discuss.elastic.co/t/workload-profile/249858)
**Author:** [@cdale](https://discuss.elastic.co/u/cdale)\ **Replies:** 2\ **Last updated:** [September 28, 2020, 5:20am UTC](https://discuss.elastic.co/t/workload-profile/249858 "2020-09-28T05:20:16Z")
What are typical read/write ratio% for Elasticsearch solution for log analytics? 80% read and 20% write for Elasticsearch, Logstash, Machine Learning and Kibana? Thank you. [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=797) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=799)