# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=815

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 816

---

## [Inconsistent Results/Doc Scores on Query](https://discuss.elastic.co/t/inconsistent-results-doc-scores-on-query/247418)

<div class="topic-metadata">

**Author:** [@Karl\_Kevilus](https://discuss.elastic.co/u/Karl_Kevilus)\
**Replies:** 3\
**Last updated:** [September 8, 2020, 2:09pm UTC](https://discuss.elastic.co/t/inconsistent-results-doc-scores-on-query/247418 "2020-09-08T14:09:34Z")

</div>

I'm running the same query back to back on an index and the score and results come back different when I look at explain: { …

---

## [Elasticsearch CURL Query](https://discuss.elastic.co/t/elasticsearch-curl-query/247537)

<div class="topic-metadata">

**Author:** [@Cyril\_Guiet](https://discuss.elastic.co/u/Cyril_Guiet)\
**Replies:** 6\
**Last updated:** [September 8, 2020, 12:19pm UTC](https://discuss.elastic.co/t/elasticsearch-curl-query/247537 "2020-09-08T12:19:52Z")

</div>

Hi all ! I'm trying to merge multiple search query in ES but the result had no enough informations to match searched objects with results. How can I do that ? Thanks :slight\_smile: query sample: curl -X GET "localho…

---

## [Does not contain a definition for 'Type' in ASP.NET MVC Elasticsearch](https://discuss.elastic.co/t/does-not-contain-a-definition-for-type-in-asp-net-mvc-elasticsearch/247830)

<div class="topic-metadata">

**Author:** [@Zylne](https://discuss.elastic.co/u/Zylne)\
**Replies:** 1\
**Last updated:** [September 8, 2020, 12:10pm UTC](https://discuss.elastic.co/t/does-not-contain-a-definition-for-type-in-asp-net-mvc-elasticsearch/247830 "2020-09-08T12:10:09Z")

</div>

I want to create a search on "user" index with ASP.NET MVC. DataSearch Action Method: public JsonResult DataSearch(string name) { var responsedata = \_connectionToEs.EsClient().Search\<User\>(s =\> s …

---

## [Field boost changes in ElasticSearch version7.6.2](https://discuss.elastic.co/t/field-boost-changes-in-elasticsearch-version7-6-2/247882)

<div class="topic-metadata">

**Author:** [@Barkha\_Jain](https://discuss.elastic.co/u/Barkha_Jain)\
**Replies:** 0\
**Last updated:** [September 8, 2020, 11:39am UTC](https://discuss.elastic.co/t/field-boost-changes-in-elasticsearch-version7-6-2/247882 "2020-09-08T11:39:49Z")

</div>

We recently moved to ElasticSearch version 7.6.2 from version 6.2.3 The search query that we use has field boosts applied in different match queries. I was looking into the changes related to scoring of docs in the new …

---

## [Match nested and search another value inside with more data](https://discuss.elastic.co/t/match-nested-and-search-another-value-inside-with-more-data/246743)

<div class="topic-metadata">

**Author:** [@pkly](https://discuss.elastic.co/u/pkly)\
**Replies:** 1\
**Last updated:** [September 8, 2020, 10:07am UTC](https://discuss.elastic.co/t/match-nested-and-search-another-value-inside-with-more-data/246743 "2020-09-08T10:07:46Z")

</div>

Hi, sorry if you get this question a lot but I don't think my queries are working the way I'd expect them to. I have a nested object (let's call it tags) that looks like this: \[{"index":"en", "data": "tag\_1"}, {"index"…

---

## [Optimal configuration of the ES cluster](https://discuss.elastic.co/t/optimal-configuration-of-the-es-cluster/247825)

<div class="topic-metadata">

**Author:** [@IliaIsakhin](https://discuss.elastic.co/u/IliaIsakhin)\
**Replies:** 7\
**Last updated:** [September 8, 2020, 9:36am UTC](https://discuss.elastic.co/t/optimal-configuration-of-the-es-cluster/247825 "2020-09-08T09:36:40Z")

</div>

Hello! My ES 7.8.0 cluster contains 5 nodes with 120 GB heap memory and 32 CPU in it. Also, I have pretty large index with 6.6kk docs and, according to \_cat/indices/ API, with store.size 59.8gb and pri.store.size 30.1gb…

---

## [Email reporting Attachment](https://discuss.elastic.co/t/email-reporting-attachment/247676)

<div class="topic-metadata">

**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\
**Replies:** 4\
**Last updated:** [September 8, 2020, 9:32am UTC](https://discuss.elastic.co/t/email-reporting-attachment/247676 "2020-09-08T09:32:36Z")

</div>

Hi everyone!!! I'm working with elasticCloud and I have been created alerts but in the documentation appears that I can attach a report from Kibana, but in the email action not appears the option, is normal? I can modi…

---

## [Increased heap usage after updating from 7.2.0 =\> 7.8.0](https://discuss.elastic.co/t/increased-heap-usage-after-updating-from-7-2-0-7-8-0/247510)

<div class="topic-metadata">

**Author:** [@7ca884569f2642e2c488](https://discuss.elastic.co/u/7ca884569f2642e2c488)\
**Replies:** 2\
**Last updated:** [September 8, 2020, 8:53am UTC](https://discuss.elastic.co/t/increased-heap-usage-after-updating-from-7-2-0-7-8-0/247510 "2020-09-08T08:53:31Z")

</div>

We updated our elastic (5 servers, two nodes each) from 7.2.0 to 7.8.0 and noticed that from this moment some new errors of type CircuitBreakingException started to occure and heap size can touch now 90-100% of available…

---

## [Query String with Fuzzy search using ~ operator](https://discuss.elastic.co/t/query-string-with-fuzzy-search-using-operator/247844)

<div class="topic-metadata">

**Author:** [@learning21](https://discuss.elastic.co/u/learning21)\
**Replies:** 0\
**Last updated:** [September 8, 2020, 8:20am UTC](https://discuss.elastic.co/t/query-string-with-fuzzy-search-using-operator/247844 "2020-09-08T08:20:08Z")

</div>

Hi, I am referring to this and am able to perform a fuzzy search with query\_string in kibana. In kibana "salry~" is being searched and it returns results with "salary" due to ~ operator for fuzziness. GET help/\_se…

---

## [ClassCastException MappingMetaData - Java](https://discuss.elastic.co/t/classcastexception-mappingmetadata-java/247747)

<div class="topic-metadata">

**Author:** [@dinit](https://discuss.elastic.co/u/dinit)\
**Replies:** 1\
**Last updated:** [September 8, 2020, 6:17am UTC](https://discuss.elastic.co/t/classcastexception-mappingmetadata-java/247747 "2020-09-08T06:17:20Z")

</div>

Hey, I'm writing a Java application wicht reads all fields from my index at startup. Since I updated to EL 7.6.1 I get the following error: java.lang.ClassCastException: org.elasticsearch.cluster.metadata.MappingMetad…

---

## [Security configuration](https://discuss.elastic.co/t/security-configuration/247821)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 2\
**Last updated:** [September 8, 2020, 6:06am UTC](https://discuss.elastic.co/t/security-configuration/247821 "2020-09-08T06:06:43Z")

</div>

Hi All, I have enabled security (premium license) wich is working fine. My cluster consists of: 2 kibana nodes 3 master nodes 4 coordinator nodes 20 data nodes Current I have the same security configuration deploye…

---

## [How to prevent shards of new index from assigning on only a few nodes and spread it?](https://discuss.elastic.co/t/how-to-prevent-shards-of-new-index-from-assigning-on-only-a-few-nodes-and-spread-it/247816)

<div class="topic-metadata">

**Author:** [@Lee\_Sun\_Ro](https://discuss.elastic.co/u/Lee_Sun_Ro)\
**Replies:** 6\
**Last updated:** [September 8, 2020, 5:52am UTC](https://discuss.elastic.co/t/how-to-prevent-shards-of-new-index-from-assigning-on-only-a-few-nodes-and-spread-it/247816 "2020-09-08T05:52:01Z")

</div>

When a new daily index is created, shards tend to be allocated only to a few nodes with sufficient capacity. It occurs rejected operation because these nodes take every incoming request. I want to prevent shards from…

---

## [java.lang.ClassCastException: org.elasticsearch.search.aggregations.bucket.terms.ParsedStringTerms cannot be cast to org.elasticsearch.search.aggregations.bucket.terms.StringTerms](https://discuss.elastic.co/t/java-lang-classcastexception-org-elasticsearch-search-aggregations-bucket-terms-parsedstringterms-cannot-be-cast-to-org-elasticsearch-search-aggregations-bucket-terms-stringterms/247615)

<div class="topic-metadata">

**Author:** [@elastic78](https://discuss.elastic.co/u/elastic78)\
**Replies:** 1\
**Last updated:** [September 8, 2020, 5:12am UTC](https://discuss.elastic.co/t/java-lang-classcastexception-org-elasticsearch-search-aggregations-bucket-terms-parsedstringterms-cannot-be-cast-to-org-elasticsearch-search-aggregations-bucket-terms-stringterms/247615 "2020-09-08T05:12:30Z")

</div>

I am trying to get aggregations using GROUP By of an attributename and getting the below error. StringTerms strAggs = response.getAggregations().get(TermsAggregation.AGGREGATION\_PREFIX + attributeName); java.lang.Class…

---

## [Limit of total fields \[1000\] in index exceeded and nested json](https://discuss.elastic.co/t/limit-of-total-fields-1000-in-index-exceeded-and-nested-json/247774)

<div class="topic-metadata">

**Author:** [@Luca\_P](https://discuss.elastic.co/u/Luca_P)\
**Replies:** 2\
**Last updated:** [September 8, 2020, 5:04am UTC](https://discuss.elastic.co/t/limit-of-total-fields-1000-in-index-exceeded-and-nested-json/247774 "2020-09-08T05:04:12Z")

</div>

Hi All, I need some help to avoid the well known 'Limit of total fields \[1000\] in index exceeded' problem. I don't consider to raise the default in the settings above 1000. The culprit seems to be a field with a json v…

---

## [Security audit with basic licence](https://discuss.elastic.co/t/security-audit-with-basic-licence/247814)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 0\
**Last updated:** [September 8, 2020, 4:49am UTC](https://discuss.elastic.co/t/security-audit-with-basic-licence/247814 "2020-09-08T04:49:57Z")

</div>

Hi is there a way how I can observe user activity in Kibana without having Gold Subscription? Is there a log or any solution? thank u

---

## [Search API of elasticsearch not working](https://discuss.elastic.co/t/search-api-of-elasticsearch-not-working/247748)

<div class="topic-metadata">

**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\
**Replies:** 2\
**Last updated:** [September 8, 2020, 4:45am UTC](https://discuss.elastic.co/t/search-api-of-elasticsearch-not-working/247748 "2020-09-08T04:45:06Z")

</div>

Hi All, I am trying to use elasticsearch from SOAP ui. DELETE and POST are working fine, however, GET is throwing error. Can someone please suggest POST http://ip:9200/test\_token/\_doc/TestService { "ServiceName" : …

---

## [Comparison of two different fields in two indexes](https://discuss.elastic.co/t/comparison-of-two-different-fields-in-two-indexes/246605)

<div class="topic-metadata">

**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\
**Replies:** 2\
**Last updated:** [September 8, 2020, 4:43am UTC](https://discuss.elastic.co/t/comparison-of-two-different-fields-in-two-indexes/246605 "2020-09-08T04:43:50Z")

</div>

Hi All, We have a scenario where we need to check whether this account number exists in both the indexes , is there a way or query to check the same.

---

## [Elastic cloud and Google Authentication](https://discuss.elastic.co/t/elastic-cloud-and-google-authentication/246966)

<div class="topic-metadata">

**Author:** [@Den1](https://discuss.elastic.co/u/Den1)\
**Replies:** 1\
**Last updated:** [September 8, 2020, 4:34am UTC](https://discuss.elastic.co/t/elastic-cloud-and-google-authentication/246966 "2020-09-08T04:34:32Z")

</div>

Hello, is it possible to grand access fro google account and make access with google authentication? Or active directory with AD Federation Service? :slight\_smile: Thank you!

---

## [Is there anyother auth method for SSO in Elasticsearch other than X-Pack](https://discuss.elastic.co/t/is-there-anyother-auth-method-for-sso-in-elasticsearch-other-than-x-pack/247169)

<div class="topic-metadata">

**Author:** [@Keerthi](https://discuss.elastic.co/u/Keerthi)\
**Replies:** 1\
**Last updated:** [September 8, 2020, 4:32am UTC](https://discuss.elastic.co/t/is-there-anyother-auth-method-for-sso-in-elasticsearch-other-than-x-pack/247169 "2020-09-08T04:32:26Z")

</div>

I Need help in setting up SSO for Elasticsearch

---

## [Search API is not working from other server](https://discuss.elastic.co/t/search-api-is-not-working-from-other-server/247773)

<div class="topic-metadata">

**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\
**Replies:** 1\
**Last updated:** [September 7, 2020, 10:01pm UTC](https://discuss.elastic.co/t/search-api-is-not-working-from-other-server/247773 "2020-09-07T22:01:29Z")

</div>

Hi All, When I am trying to call elasticsearch URL from SOAP UI. POST and DELETE call is working, however GET is throwing connection reset error. Can anyone please suggest , how to resolve it. PS: search is not workin…

---

## [CircuitBreakingException: \[parent\] Data too large - troubleshoot](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-troubleshoot/247796)

<div class="topic-metadata">

**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\
**Replies:** 2\
**Last updated:** [September 7, 2020, 8:57pm UTC](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-troubleshoot/247796 "2020-09-07T20:57:54Z")

</div>

Hi all, from time to time (not that far apart) i can see error CircuitBreakingException: \[parent\] Data too large. I can see a lot of similar topics but i can't find a conclusion. The exception tell us that we reached …

---

## [Specifying http.max\_content\_length](https://discuss.elastic.co/t/specifying-http-max-content-length/247804)

<div class="topic-metadata">

**Author:** [@jcannell](https://discuss.elastic.co/u/jcannell)\
**Replies:** 1\
**Last updated:** [September 7, 2020, 8:56pm UTC](https://discuss.elastic.co/t/specifying-http-max-content-length/247804 "2020-09-07T20:56:33Z")

</div>

Hello, When specifying http.max\_content\_length, do i need to do this for all nodes in my cluster? I have a lot of data to index and I'm trying to see if increasing this value might make indexing faster. I see the ques…

---

## [java.io.IOException: Une connexion existante a d¹ Ûtre fermÚe par lÆh¶te distant](https://discuss.elastic.co/t/java-io-ioexception-une-connexion-existante-a-d-utre-fermue-par-laeh-te-distant/247786)

<div class="topic-metadata">

**Author:** [@Torjmen](https://discuss.elastic.co/u/Torjmen)\
**Replies:** 0\
**Last updated:** [September 7, 2020, 3:50pm UTC](https://discuss.elastic.co/t/java-io-ioexception-une-connexion-existante-a-d-utre-fermue-par-laeh-te-distant/247786 "2020-09-07T15:50:13Z")

</div>

hello , i'm trying to create a plugin for openEdge form SonarQube API , its' work well . I have programmes written in progress 4gl , for that i had created an AppServer using the Openedge explorer to put my program…

---

## [ILM policy "cold" phase cannot freeze if index is read\_only](https://discuss.elastic.co/t/ilm-policy-cold-phase-cannot-freeze-if-index-is-read-only/247597)

<div class="topic-metadata">

**Author:** [@mhoydis\_datto](https://discuss.elastic.co/u/mhoydis_datto)\
**Replies:** 1\
**Last updated:** [September 7, 2020, 3:30pm UTC](https://discuss.elastic.co/t/ilm-policy-cold-phase-cannot-freeze-if-index-is-read-only/247597 "2020-09-07T15:30:02Z")

</div>

Hello. I have a separate management tool which is handling what ILM would refer to as my "hot" and "warm" phases. I'm looking to invoke an ILM policy to only handle my "cold" phase - which would freeze my indices after…

---

## [How to properly delete index?](https://discuss.elastic.co/t/how-to-properly-delete-index/247391)

<div class="topic-metadata">

**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\
**Replies:** 7\
**Last updated:** [September 7, 2020, 2:54pm UTC](https://discuss.elastic.co/t/how-to-properly-delete-index/247391 "2020-09-07T14:54:58Z")

</div>

Hi guys. I was very happy playing with my filebeat / netflow platform untill today. There was nothing to see and founded following message at log file: high disk watermark \[90%\] exceeded on \[NX79WFORStGfAdCq26XLaw\]\[ub…

---

## [Elasticsearch cluster uneven distribution of data](https://discuss.elastic.co/t/elasticsearch-cluster-uneven-distribution-of-data/247737)

<div class="topic-metadata">

**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Replies:** 5\
**Last updated:** [September 7, 2020, 1:11pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-uneven-distribution-of-data/247737 "2020-09-07T13:11:09Z")

</div>

Dears, How to explain uneven distribution of data between cluster nodes? GET \_cat/allocation?v&pretty shards disk.indices disk.used disk.avail disk.total disk.percent host ip node 63 375gb …

---

## [Error fetching fields for index pattern winlogbeat-\* (ID: winlogbeat-\*)](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-winlogbeat-id-winlogbeat/247673)

<div class="topic-metadata">

**Author:** [@talaatkamal](https://discuss.elastic.co/u/talaatkamal)\
**Replies:** 3\
**Last updated:** [September 7, 2020, 12:56pm UTC](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-winlogbeat-id-winlogbeat/247673 "2020-09-07T12:56:13Z")

</div>

Error fetching fields for index pattern winlogbeat-\* (ID: winlogbeat-\*) Not Found Error: Not Found at Anonymous function (http://10.1.106.5:5601/bundles/commons.bundle.js:1:842554) at Anonymous function (http://10.1.…

---

## [Elasticsearch Index shards per nodes](https://discuss.elastic.co/t/elasticsearch-index-shards-per-nodes/247445)

<div class="topic-metadata">

**Author:** [@Sergio\_Bortsov](https://discuss.elastic.co/u/Sergio_Bortsov)\
**Replies:** 12\
**Last updated:** [September 7, 2020, 12:44pm UTC](https://discuss.elastic.co/t/elasticsearch-index-shards-per-nodes/247445 "2020-09-07T12:44:32Z")

</div>

Hi! I have the cluster with 3 masters and 10 data nodes. Settings per index include 5 shards and 2 replicas. From what I see the data nodes are loaded unevenly. I can see that shards for the same nodes are not located o…

---

## [Conditional update to the document](https://discuss.elastic.co/t/conditional-update-to-the-document/64964)

<div class="topic-metadata">

**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\
**Replies:** 22\
**Last updated:** [September 7, 2020, 11:56am UTC](https://discuss.elastic.co/t/conditional-update-to-the-document/64964 "2020-09-07T11:56:25Z")

</div>

Hello, If I wanted to update an existing document completely (not partially), if it satisfies the condition. See an example below: Index: Twitter Type: tweet Add tweet and lastupdated fields to document 1 as below.…

---

## [Bucket Script Aggregation - Filter Ratio with STDEV](https://discuss.elastic.co/t/bucket-script-aggregation-filter-ratio-with-stdev/247746)

<div class="topic-metadata">

**Author:** [@shiko](https://discuss.elastic.co/u/shiko)\
**Replies:** 0\
**Last updated:** [September 7, 2020, 9:44am UTC](https://discuss.elastic.co/t/bucket-script-aggregation-filter-ratio-with-stdev/247746 "2020-09-07T09:44:39Z")

</div>

Hello, I'm kind of new to ES. I'm searching for the possibilities to do some high level aggregation with ES. I want to know if I could do this on ES : AVG ( Bucket X ) - AVG ( Bucket Y) …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=814)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=816)
