# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=811 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 812 --- ## [Alternative to filtered index alias](https://discuss.elastic.co/t/alternative-to-filtered-index-alias/248388)
**Author:** [@ilya.rybak](https://discuss.elastic.co/u/ilya.rybak)\ **Replies:** 3\ **Last updated:** [September 12, 2020, 8:31pm UTC](https://discuss.elastic.co/t/alternative-to-filtered-index-alias/248388 "2020-09-12T20:31:27Z")
As with many solutions that require retention policy for data stored in elasticsearch, we’ve implemented the commonly used pattern of having a single index per day. With this pattern removing the old data would be as sim… --- ## [Issue with rollover](https://discuss.elastic.co/t/issue-with-rollover/246488)
**Author:** [@sbk-elk](https://discuss.elastic.co/u/sbk-elk)\ **Replies:** 13\ **Last updated:** [September 12, 2020, 7:44pm UTC](https://discuss.elastic.co/t/issue-with-rollover/246488 "2020-09-12T19:44:57Z")
Hi, I am trying to bootstrap an index to write after and getting the below error: { "error" : { "root\_cause" : \[ { "type" : "resource\_already\_exists\_exception", "reason" : "index \[logs-sbk-000001/qa4ur3ZUQCmqugKN9… --- ## [What's the performance difference between \`ids query\` and \`terms query\`?](https://discuss.elastic.co/t/whats-the-performance-difference-between-ids-query-and-terms-query/248398)
**Author:** [@Morriaty](https://discuss.elastic.co/u/Morriaty)\ **Replies:** 1\ **Last updated:** [September 12, 2020, 8:54am UTC](https://discuss.elastic.co/t/whats-the-performance-difference-between-ids-query-and-terms-query/248398 "2020-09-12T08:54:46Z")
Say we got a large id set, then which query would be the best choice? # ids query { "query": { "bool": { "filter": \[ { "ids" : { "values" : \["1", "2", ....,"100000"\] }… --- ## [Can I create an Elastic Search index manually against an existing mongodb collection?](https://discuss.elastic.co/t/can-i-create-an-elastic-search-index-manually-against-an-existing-mongodb-collection/248383)
**Author:** [@Juan\_Pablo\_Realini](https://discuss.elastic.co/u/Juan_Pablo_Realini)\ **Replies:** 1\ **Last updated:** [September 12, 2020, 8:00am UTC](https://discuss.elastic.co/t/can-i-create-an-elastic-search-index-manually-against-an-existing-mongodb-collection/248383 "2020-09-12T08:00:36Z")
Hi.. I am new to ES, and have some very specific scenario I would like to achieve. I am an SDET testing a web app (Blazor / Mongo). For one of my tests I need to seed the db with 5000 records... before they implemented … --- ## [Elasticsearch could not run on public ip on AWS](https://discuss.elastic.co/t/elasticsearch-could-not-run-on-public-ip-on-aws/248354)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 2\ **Last updated:** [September 12, 2020, 7:42am UTC](https://discuss.elastic.co/t/elasticsearch-could-not-run-on-public-ip-on-aws/248354 "2020-09-12T07:42:05Z")
I am trying to bind my public ip on Elasticsearch but it does not working. however, it is working ok while doing curl from localhost, but giving connection timed out on browser. I read almost every article here in commu… --- ## [No space left on device](https://discuss.elastic.co/t/no-space-left-on-device/248400)
**Author:** [@Sarang\_Dharmapurikar](https://discuss.elastic.co/u/Sarang_Dharmapurikar)\ **Replies:** 2\ **Last updated:** [September 12, 2020, 5:01am UTC](https://discuss.elastic.co/t/no-space-left-on-device/248400 "2020-09-12T05:01:54Z")
Hi folks, I'm using elasticsearch docker image but unable to run it on my Mac. It used to be fine. $ docker run -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" docker.elastic.co/elasticsearch/elasticsearch:7.… --- ## [Elasticsearch Ports apart from 9200 and 9300](https://discuss.elastic.co/t/elasticsearch-ports-apart-from-9200-and-9300/248312)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 3\ **Last updated:** [September 12, 2020, 4:11am UTC](https://discuss.elastic.co/t/elasticsearch-ports-apart-from-9200-and-9300/248312 "2020-09-12T04:11:15Z")
Which other ports do elasticsearch uses apart from 9200 and 9300? Can I use 9201 for kibana assuming that Elasticsearch won't use other port in 920\* ranges? What issues it could create? --- ## [ILM Issue](https://discuss.elastic.co/t/ilm-issue/245798)
**Author:** [@sbk-elk](https://discuss.elastic.co/u/sbk-elk)\ **Replies:** 4\ **Last updated:** [September 12, 2020, 3:33am UTC](https://discuss.elastic.co/t/ilm-issue/245798 "2020-09-12T03:33:43Z")
Hi, I am facing an issue with my index management setup. Below is the error i see when getting the policy set for my index and the patterns listed in my index templates. Steps: Created LifeCycle policies logging\_smal… --- ## [Elastic Mapping Question for Nested List of Objects](https://discuss.elastic.co/t/elastic-mapping-question-for-nested-list-of-objects/248397)
**Author:** [@vastevenson](https://discuss.elastic.co/u/vastevenson)\ **Replies:** 0\ **Last updated:** [September 12, 2020, 1:16am UTC](https://discuss.elastic.co/t/elastic-mapping-question-for-nested-list-of-objects/248397 "2020-09-12T01:16:48Z")
Hi, I am trying to upload data to an Elastic index. The each document can have many authors associated with it. How should I structure the mapping for this index so that authors will contain a list of first and last nam… --- ## [License requirements to implement ILM](https://discuss.elastic.co/t/license-requirements-to-implement-ilm/248380)
**Author:** [@olg32](https://discuss.elastic.co/u/olg32)\ **Replies:** 1\ **Last updated:** [September 11, 2020, 8:44pm UTC](https://discuss.elastic.co/t/license-requirements-to-implement-ilm/248380 "2020-09-11T20:44:30Z")
In order to evaluate its potential to help on our daily operations, I have deployed Elastic Search and Kibana (7.7.1 with BASIC license) and created an index template for Ntopng (our monitoring platform). So far so good… --- ## [I want to configure threshold alert if totaltime exceeds 500 then mail should sent to the User](https://discuss.elastic.co/t/i-want-to-configure-threshold-alert-if-totaltime-exceeds-500-then-mail-should-sent-to-the-user/248136)
**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\ **Replies:** 7\ **Last updated:** [September 11, 2020, 6:27pm UTC](https://discuss.elastic.co/t/i-want-to-configure-threshold-alert-if-totaltime-exceeds-500-then-mail-should-sent-to-the-user/248136 "2020-09-11T18:27:02Z")
I am able to send mail with some information but Particular data i want to fetch in table. Alert Configuration i pasted in this link:https://pastebin.com/A6fDZYKY Field Name and index name as follows: --- ## [Upgrade Assistant API Not Responding](https://discuss.elastic.co/t/upgrade-assistant-api-not-responding/247138)
**Author:** [@ajrvester](https://discuss.elastic.co/u/ajrvester)\ **Replies:** 3\ **Last updated:** [September 11, 2020, 5:45pm UTC](https://discuss.elastic.co/t/upgrade-assistant-api-not-responding/247138 "2020-09-11T17:45:42Z")
Hello, I'm attempting to resolve an issue with one of our indexes before we perform an upgrade. We're currently running v6.8.8 of Elastic Cloud. I'm following the docs here to add a default field to our index to resolv… --- ## [Dynamic template for complex types](https://discuss.elastic.co/t/dynamic-template-for-complex-types/205059)
**Author:** [@parosio](https://discuss.elastic.co/u/parosio)\ **Replies:** 5\ **Last updated:** [September 11, 2020, 2:58pm UTC](https://discuss.elastic.co/t/dynamic-template-for-complex-types/205059 "2020-09-11T14:58:27Z")
Hello, is it possible to have a complex type (like a geopoint) dinamically recognized using the dynamic\_templates section of a template/index mapping? Sort of: PUT test\_loc/doc/1 { "position" : \[-64, -19.4\] } resu… --- ## [Is LDAP connectivity open forever? How to close connection to LDAP server after authentication is done?](https://discuss.elastic.co/t/is-ldap-connectivity-open-forever-how-to-close-connection-to-ldap-server-after-authentication-is-done/248338)
**Author:** [@adarsh.venugopal](https://discuss.elastic.co/u/adarsh.venugopal)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 2:19pm UTC](https://discuss.elastic.co/t/is-ldap-connectivity-open-forever-how-to-close-connection-to-ldap-server-after-authentication-is-done/248338 "2020-09-11T14:19:13Z")
We are expecting that the LDAP connection closes after the authentication search but it is not happening. This is what we would want to see in the logs:- \[logs\]$grep conn=1138167 access CONNECT conn=1138167 fr… --- ## [Search as you type field, best practice](https://discuss.elastic.co/t/search-as-you-type-field-best-practice/248289)
**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\ **Replies:** 1\ **Last updated:** [September 11, 2020, 2:03pm UTC](https://discuss.elastic.co/t/search-as-you-type-field-best-practice/248289 "2020-09-11T14:03:34Z")
Hi, I made some tests with search as you type field: https://www.elastic.co/guide/en/elasticsearch/reference/7.x/search-as-you-type.html I've an index containing products. Each product(document) have many fields like: … --- ## [Composite query and filter agregation on a .ml-anomalies index](https://discuss.elastic.co/t/composite-query-and-filter-agregation-on-a-ml-anomalies-index/248201)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 6\ **Last updated:** [September 11, 2020, 1:56pm UTC](https://discuss.elastic.co/t/composite-query-and-filter-agregation-on-a-ml-anomalies-index/248201 "2020-09-11T13:56:17Z")
HI, Im trying to query the ML anomalies index with a composite query and a filter aggregation, but the filter aggs is not working, I want to get a specific job but it gets me others jobs in the index. Any ideas what is… --- ## [How to have CURL command equivalent of triple quotes?](https://discuss.elastic.co/t/how-to-have-curl-command-equivalent-of-triple-quotes/248332)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 1:27pm UTC](https://discuss.elastic.co/t/how-to-have-curl-command-equivalent-of-triple-quotes/248332 "2020-09-11T13:27:49Z")
hi, we have a watcher code which contains "actions": { "index\_alert": { "transform": { "script": { "source": """ return \[ 'watch\_id': ctx.watch\_id, … --- ## [Does eager\_global\_ordinals speed up metrics calcaulations on high cardinality keyword fields?](https://discuss.elastic.co/t/does-eager-global-ordinals-speed-up-metrics-calcaulations-on-high-cardinality-keyword-fields/248330)
**Author:** [@Peter\_Steenbergen](https://discuss.elastic.co/u/Peter_Steenbergen)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 1:19pm UTC](https://discuss.elastic.co/t/does-eager-global-ordinals-speed-up-metrics-calcaulations-on-high-cardinality-keyword-fields/248330 "2020-09-11T13:19:43Z")
Hi, I was wondering if people have tested with a dataset with around 1.5M records with 40k of unique terms in a particular field to do metric calculations on or a regex filtering. I know there is a wildcard field (does … --- ## [Not able to start elasticsearch service](https://discuss.elastic.co/t/not-able-to-start-elasticsearch-service/246761)
**Author:** [@nidhi1](https://discuss.elastic.co/u/nidhi1)\ **Replies:** 4\ **Last updated:** [September 11, 2020, 12:53pm UTC](https://discuss.elastic.co/t/not-able-to-start-elasticsearch-service/246761 "2020-09-11T12:53:08Z")
Unit elasticsearch.service entered failed state. systemd\[1\]: elasticsearch.service failed. Unregistered Authentication Agent for u (system bus name :1.89340, object path /org/freedesktop/Po polkitd\[1243\]: Registere… --- ## [How to create new User in Kibana by using nginx](https://discuss.elastic.co/t/how-to-create-new-user-in-kibana-by-using-nginx/248317)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 1\ **Last updated:** [September 11, 2020, 12:39pm UTC](https://discuss.elastic.co/t/how-to-create-new-user-in-kibana-by-using-nginx/248317 "2020-09-11T12:39:54Z")
ELK is very old version 4.2 :frowning: So, unable to find anything on internet or without nginx also fine --- ## [Authentication through Nginx on Kibana 7.9](https://discuss.elastic.co/t/authentication-through-nginx-on-kibana-7-9/248318)
**Author:** [@barbarad](https://discuss.elastic.co/u/barbarad)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 12:27pm UTC](https://discuss.elastic.co/t/authentication-through-nginx-on-kibana-7-9/248318 "2020-09-11T12:27:44Z")
Hi, I'm try to automatically authenticate in kibana 7.9 using nginx but it's not working. I'm using native default users define in elasticsearch. This is my nginx configuration running in docker, kibana is also deploy… --- ## [Filter search results with same ID using different indices](https://discuss.elastic.co/t/filter-search-results-with-same-id-using-different-indices/248316)
**Author:** [@tim\_cgn](https://discuss.elastic.co/u/tim_cgn)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 12:18pm UTC](https://discuss.elastic.co/t/filter-search-results-with-same-id-using-different-indices/248316 "2020-09-11T12:18:01Z")
Hello together, i have a simple query that performs a search on an alias. This alias contains several indices. Documents are stored in the different indexes with the same id, but have a different status, so they differ… --- ## [Cluster Yellow - Heap size overload](https://discuss.elastic.co/t/cluster-yellow-heap-size-overload/248292)
**Author:** [@Thomas74](https://discuss.elastic.co/u/Thomas74)\ **Replies:** 1\ **Last updated:** [September 11, 2020, 12:15pm UTC](https://discuss.elastic.co/t/cluster-yellow-heap-size-overload/248292 "2020-09-11T12:15:16Z")
Hi, An ILM policy had a conflict with curator last night. It wasn't working because of closed index. I reopen it and retry ilm policy and seems ok. But my cluster still yellow and cannot reallocate shard because of th… --- ## [Elasticsearch Docker: flood stage disk watermark \[95%\] exceeded](https://discuss.elastic.co/t/elasticsearch-docker-flood-stage-disk-watermark-95-exceeded/248300)
**Author:** [@Stimmot](https://discuss.elastic.co/u/Stimmot)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-docker-flood-stage-disk-watermark-95-exceeded/248300 "2020-09-11T10:23:39Z")
I have a similar issue to the one posted here: https://stackoverflow.com/questions/50609417/elasticsearch-error-cluster-block-exception-forbidden-12-index-read-only-all I'm running Elasticsearch and Kibana with docker-c… --- ## [Adding new element to list of objects with the new name of field](https://discuss.elastic.co/t/adding-new-element-to-list-of-objects-with-the-new-name-of-field/248275)
**Author:** [@charvi23](https://discuss.elastic.co/u/charvi23)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 7:10am UTC](https://discuss.elastic.co/t/adding-new-element-to-list-of-objects-with-the-new-name-of-field/248275 "2020-09-11T07:10:33Z")
I am trying to add new object to list of object in an elastic search index with java HighLevelRestClient. I know I can do it with following query: String query = "ctx.\_source.custom\_analysis.custom\_analysis\_list.add(par… --- ## [Ingestion from ES-Spark to Ingestion node](https://discuss.elastic.co/t/ingestion-from-es-spark-to-ingestion-node/247812)
**Author:** [@snambu5878](https://discuss.elastic.co/u/snambu5878)\ **Replies:** 7\ **Last updated:** [September 11, 2020, 8:36am UTC](https://discuss.elastic.co/t/ingestion-from-es-spark-to-ingestion-node/247812 "2020-09-11T08:36:26Z")
Hi Everyone, We have 12 node cluster, 1 ingestion, 3 master, 3 hot data, 2 warm data, 2 kibana (same for coordinating) nodes and 1 monitoring node. We are trying to ingestion data from Hadoop environment using ES-Spar… --- ## [ElasticSearch 7 nest 7 return attribute from result all result](https://discuss.elastic.co/t/elasticsearch-7-nest-7-return-attribute-from-result-all-result/247834)
**Author:** [@Isanka\_Thalagala](https://discuss.elastic.co/u/Isanka_Thalagala)\ **Replies:** 2\ **Last updated:** [September 11, 2020, 8:24am UTC](https://discuss.elastic.co/t/elasticsearch-7-nest-7-return-attribute-from-result-all-result/247834 "2020-09-11T08:24:06Z")
I'm using ElarsticSearch 7.7 & NEST 7.7 and on my web page, I'm getting 9 search result documents per page. Even I'm showing the first 9 results on the page, I need to return some property values from all the results for… --- ## [Restrict node that can join cluster](https://discuss.elastic.co/t/restrict-node-that-can-join-cluster/248175)
**Author:** [@nitin7](https://discuss.elastic.co/u/nitin7)\ **Replies:** 2\ **Last updated:** [September 11, 2020, 7:49am UTC](https://discuss.elastic.co/t/restrict-node-that-can-join-cluster/248175 "2020-09-11T07:49:25Z")
Hi all, Is there a way to define or restrict the host names which can join a specific cluster in the enterprise network on the same domain. --- ## [Problem indexing ES with batches](https://discuss.elastic.co/t/problem-indexing-es-with-batches/247961)
**Author:** [@magorbe](https://discuss.elastic.co/u/magorbe)\ **Replies:** 2\ **Last updated:** [September 11, 2020, 7:36am UTC](https://discuss.elastic.co/t/problem-indexing-es-with-batches/247961 "2020-09-11T07:36:29Z")
Hello. I am doing reindexing in ES with the next command : nohup curl -XPOST http:/bla:9200/\_reindex -d '{ "source": { "index": "origin\_index", "size": 5000 }, "dest": {"index": "dest\_index" }}' \> reindex\_100\_21.out … --- ## [ES performance reliablity issue](https://discuss.elastic.co/t/es-performance-reliablity-issue/247974)
**Author:** [@wangxr1985](https://discuss.elastic.co/u/wangxr1985)\ **Replies:** 6\ **Last updated:** [September 11, 2020, 7:27am UTC](https://discuss.elastic.co/t/es-performance-reliablity-issue/247974 "2020-09-11T07:27:31Z")
My query is very simple, just like this: { "query": {"bool": { "filter": {"term": {"user\_guid": "xxxx" }}}}} the user\_guid is equal to document id, and the query contains routing argument. If I do this query sever… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=810) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=812)