# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=828 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 829 --- ## [E-commerce products with prices per customer](https://discuss.elastic.co/t/e-commerce-products-with-prices-per-customer/245832)
**Author:** [@dndeus](https://discuss.elastic.co/u/dndeus)\ **Replies:** 8\ **Last updated:** [August 21, 2020, 4:15pm UTC](https://discuss.elastic.co/t/e-commerce-products-with-prices-per-customer/245832 "2020-08-21T16:15:19Z")
Hello there! Let me give you the use case. I need to build this b2b commerce where the prices for each product is different for every logged in customer. One of the functionalities is, the customer should be able to fi… --- ## [Combine terms of multiple fields into one bucket aggregation](https://discuss.elastic.co/t/combine-terms-of-multiple-fields-into-one-bucket-aggregation/245935)
**Author:** [@tiptobi](https://discuss.elastic.co/u/tiptobi)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 3:37pm UTC](https://discuss.elastic.co/t/combine-terms-of-multiple-fields-into-one-bucket-aggregation/245935 "2020-08-21T15:37:29Z")
Hi community, Given the following index which contains media and its related products (simplified): { "media": { "mappings": { "doc": { "properties": { "color": { "type"… --- ## [Filebeat NGINX-Plugin sending multiples separate lines as one event](https://discuss.elastic.co/t/filebeat-nginx-plugin-sending-multiples-separate-lines-as-one-event/245933)
**Author:** [@iceman91176](https://discuss.elastic.co/u/iceman91176)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 3:33pm UTC](https://discuss.elastic.co/t/filebeat-nginx-plugin-sending-multiples-separate-lines-as-one-event/245933 "2020-08-21T15:33:27Z")
We have deployed filebeat as kubernetes daemon set and are using hint based configuration to send logs to logstash. Here is the filebeat configuration filebeat.autodiscover: providers: - type: kubernetes host:… --- ## [Ingestion performance issues - where to start?](https://discuss.elastic.co/t/ingestion-performance-issues-where-to-start/245849)
**Author:** [@wardallen](https://discuss.elastic.co/u/wardallen)\ **Replies:** 5\ **Last updated:** [August 21, 2020, 1:35pm UTC](https://discuss.elastic.co/t/ingestion-performance-issues-where-to-start/245849 "2020-08-21T13:35:04Z")
Hi all, I'm having ingestion performance issues that I haven't gotten to the bottom of, and I'm quite new to the elastic stack, so I thought I'd seek advice here. I have a cluster of 3 VMs (4 CPU/64GB RAM/500GB disk). … --- ## [Fluentd not connected to elasticsearch](https://discuss.elastic.co/t/fluentd-not-connected-to-elasticsearch/245919)
**Author:** [@samra1810](https://discuss.elastic.co/u/samra1810)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 12:49pm UTC](https://discuss.elastic.co/t/fluentd-not-connected-to-elasticsearch/245919 "2020-08-21T12:49:04Z")
I have installed td-agent rpm on linux and trying to connect to elastic search. but however when i am starting td-agent, it is not getting connected to elasticsearch. Elastic Search service is up and running. Error on l… --- ## [Parse\_origination\_date phase transition](https://discuss.elastic.co/t/parse-origination-date-phase-transition/245910)
**Author:** [@samaresh\_kirtania](https://discuss.elastic.co/u/samaresh_kirtania)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 10:43am UTC](https://discuss.elastic.co/t/parse-origination-date-phase-transition/245910 "2020-08-21T10:43:32Z")
I am trying to use origination\_date with ILM phases and need some help. I am creating the indexes manually of the format shipdetails-2020.08.19. We can create 7 indexes on a given date. Now the events will be stored acc… --- ## [Elastic search throwing unknown setting error](https://discuss.elastic.co/t/elastic-search-throwing-unknown-setting-error/245887)
**Author:** [@Pradeep\_K\_S](https://discuss.elastic.co/u/Pradeep_K_S)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 9:18am UTC](https://discuss.elastic.co/t/elastic-search-throwing-unknown-setting-error/245887 "2020-08-21T09:18:22Z")
Hi, I am trying to create index with my schema mapping but i am getting unknown setting error for some tag. Attached the error below. {"error":{"root\_cause":\[{"type":"remote\_transport\_exception","reason":"\[ip-20-124-… --- ## [Watcher using filter range with time does not fire](https://discuss.elastic.co/t/watcher-using-filter-range-with-time-does-not-fire/244998)
**Author:** [@ajazam](https://discuss.elastic.co/u/ajazam)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 8:37am UTC](https://discuss.elastic.co/t/watcher-using-filter-range-with-time-does-not-fire/244998 "2020-08-21T08:37:53Z")
Hello. I have been trying to write a Watcher that looks for specific conditions in data and then send out an email, but it doesn't work. I have managed to shrink the Watcher down to a bare minimum and have found out that… --- ## [Sporadic unable to authenticate user OIDC errors](https://discuss.elastic.co/t/sporadic-unable-to-authenticate-user-oidc-errors/245788)
**Author:** [@Eugene\_Marcotte](https://discuss.elastic.co/u/Eugene_Marcotte)\ **Replies:** 5\ **Last updated:** [August 21, 2020, 8:33am UTC](https://discuss.elastic.co/t/sporadic-unable-to-authenticate-user-oidc-errors/245788 "2020-08-21T08:33:27Z")
Hey there, I've been working on setting up a elastic cloud hosted deployment (currently running v7.8.0) with OIDC pointed at Okta. I've run into this error sporadically with various users: "\[security\_exception\] unable … --- ## [How to apply filters in elasticsearch NEST functionscore function](https://discuss.elastic.co/t/how-to-apply-filters-in-elasticsearch-nest-functionscore-function/245839)
**Author:** [@learning21](https://discuss.elastic.co/u/learning21)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 7:15am UTC](https://discuss.elastic.co/t/how-to-apply-filters-in-elasticsearch-nest-functionscore-function/245839 "2020-08-21T07:15:30Z")
To control the score of documents based on a field value, I am using filter with function\_score in my DSL query and this gets the results ordered as I expect. However on implementing this in NEST, the results are differ… --- ## [Filebeat json to Elasticsearch, error processing pipeline](https://discuss.elastic.co/t/filebeat-json-to-elasticsearch-error-processing-pipeline/245767)
**Author:** [@felixbarbeira](https://discuss.elastic.co/u/felixbarbeira)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 6:37am UTC](https://discuss.elastic.co/t/filebeat-json-to-elasticsearch-error-processing-pipeline/245767 "2020-08-21T06:37:17Z")
Hi, I'm sending a json log file with filebeat to an Elasticsearch cluster. When I try to parse the ip field with geoip filter it shows the following error in the ingestError field: field \[client\] not present as part of… --- ## [GeoIP Troubles](https://discuss.elastic.co/t/geoip-troubles/245824)
**Author:** [@Midnigh7](https://discuss.elastic.co/u/Midnigh7)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 5:25am UTC](https://discuss.elastic.co/t/geoip-troubles/245824 "2020-08-21T05:25:49Z")
Trying to get geoip working from IIS log ingestion. Current setup; Elasticsearch v.7.9.0 Kibana v.7.9.0 Filebeat v.7.9.0 Output is set to Elasticsearch with geoip pipeline; output.elasticsearch: # Array of… --- ## [Use query parameters to change token filter behavior for the given query](https://discuss.elastic.co/t/use-query-parameters-to-change-token-filter-behavior-for-the-given-query/245851)
**Author:** [@dtchesno](https://discuss.elastic.co/u/dtchesno)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 4:46am UTC](https://discuss.elastic.co/t/use-query-parameters-to-change-token-filter-behavior-for-the-given-query/245851 "2020-08-21T04:46:38Z")
I understand it's not what normally happens. But I'm curious, is there a pattern to pass config to token filter for the given query? E.g. I could have plugin with custom query builder and analyzer/filters. I want to app… --- ## [Failed to install The Japanese (kuromoji) Analysis plugin to Elasticsearch 7.8.1](https://discuss.elastic.co/t/failed-to-install-the-japanese-kuromoji-analysis-plugin-to-elasticsearch-7-8-1/245630)
**Author:** [@masapon](https://discuss.elastic.co/u/masapon)\ **Replies:** 0\ **Last updated:** [August 19, 2020, 3:09pm UTC](https://discuss.elastic.co/t/failed-to-install-the-japanese-kuromoji-analysis-plugin-to-elasticsearch-7-8-1/245630 "2020-08-19T15:09:39Z")
ERROR message is as follows: Downloading file: https://artifacts.elastic.co/downloads/elasticsearch-plugins/analysis-kuromoji/analysis-kuromoji-7.8.1.zip Downloading \[===================================================… --- ## [Index creation issues after removing ILM Policy](https://discuss.elastic.co/t/index-creation-issues-after-removing-ilm-policy/244607)
**Author:** [@srk1](https://discuss.elastic.co/u/srk1)\ **Replies:** 5\ **Last updated:** [August 21, 2020, 1:10am UTC](https://discuss.elastic.co/t/index-creation-issues-after-removing-ilm-policy/244607 "2020-08-21T01:10:37Z")
Hi, I have an issue regarding writing to a daily metricbeat index after removing ILM policy from index template. Below are the steps i followed: Created ILM policy to delete the index after 7 days (no rollup, cold, wa… --- ## [Elastic Password reset](https://discuss.elastic.co/t/elastic-password-reset/245578)
**Author:** [@bhargav\_bharat](https://discuss.elastic.co/u/bhargav_bharat)\ **Replies:** 4\ **Last updated:** [August 21, 2020, 12:27am UTC](https://discuss.elastic.co/t/elastic-password-reset/245578 "2020-08-21T00:27:45Z")
Whenever I try to reset password of elastic, I am getting bellow mention error: Request: curl -u user:Password -XPUT 'http://localhost:9200/\_xpack/security/user/elastic/\_password?pretty' -H 'Content-Type: application/j… --- ## [Only insert json objects that are not in elasticsearch](https://discuss.elastic.co/t/only-insert-json-objects-that-are-not-in-elasticsearch/245712)
**Author:** [@jmaharjan](https://discuss.elastic.co/u/jmaharjan)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 6:25am UTC](https://discuss.elastic.co/t/only-insert-json-objects-that-are-not-in-elasticsearch/245712 "2020-08-20T06:25:20Z")
Hello. Very new to elasticsearch. I am trying to use the ELK stack to provide a tool for viewing records obtain from an external API. The setup is: Get new records from external API Add them to elasticsearch if they do… --- ## [Custom term dictionary](https://discuss.elastic.co/t/custom-term-dictionary/245820)
**Author:** [@sbt](https://discuss.elastic.co/u/sbt)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 8:35pm UTC](https://discuss.elastic.co/t/custom-term-dictionary/245820 "2020-08-20T20:35:49Z")
I have a use case where I want to get latest record for a terms filter. I am not interested in its score so its okay even if its not scored. I want this on 5 fields in an index. One option is to have 5 indexes with th… --- ## [Send Logstash events to secure Elasticsearch cluster](https://discuss.elastic.co/t/send-logstash-events-to-secure-elasticsearch-cluster/245810)
**Author:** [@panwarsagar](https://discuss.elastic.co/u/panwarsagar)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 6:57pm UTC](https://discuss.elastic.co/t/send-logstash-events-to-secure-elasticsearch-cluster/245810 "2020-08-20T18:57:30Z")
Hi, I have a 6 node Elasticsearch cluster deployed at two center with two Zone configuration. There are two master nodes (Master-1 & Master-2) at two locations. Both Master nodes are configured to use different certific… --- ## [Enabling features on air gapped network](https://discuss.elastic.co/t/enabling-features-on-air-gapped-network/245795)
**Author:** [@ave19](https://discuss.elastic.co/u/ave19)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 4:29pm UTC](https://discuss.elastic.co/t/enabling-features-on-air-gapped-network/245795 "2020-08-20T16:29:43Z")
I've just upgraded to 7.9.0 on an air gapped cluster. I cannot use the Ingest Manager because it cannot get to external repositories. Is there a way for me to get these packages and install them manually? Will these f… --- ## [Composite aggregation after\_key](https://discuss.elastic.co/t/composite-aggregation-after-key/245789)
**Author:** [@Robert\_Pofuk](https://discuss.elastic.co/u/Robert_Pofuk)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 3:14pm UTC](https://discuss.elastic.co/t/composite-aggregation-after-key/245789 "2020-08-20T15:14:45Z")
Hi all! I have question. If I use histogram composite aggregation with setting size. For example I have integer range. Each number bucket in aggregation represents 1 day (Using integer for date is not important). If I… --- ## [Detecting bottleneck in Elasticsearch indexing](https://discuss.elastic.co/t/detecting-bottleneck-in-elasticsearch-indexing/242060)
**Author:** [@Merlin\_Nunez](https://discuss.elastic.co/u/Merlin_Nunez)\ **Replies:** 17\ **Last updated:** [August 20, 2020, 2:04pm UTC](https://discuss.elastic.co/t/detecting-bottleneck-in-elasticsearch-indexing/242060 "2020-08-20T14:04:48Z")
I posted about this same issue before but did not get an answer, I continued investigating but I´m still unable to get to the root cause of this. I have the following configuration in docker containers: 3 ES data nodes… --- ## [Open source Elasticsearch does not use template in index creation](https://discuss.elastic.co/t/open-source-elasticsearch-does-not-use-template-in-index-creation/245673)
**Author:** [@hweber](https://discuss.elastic.co/u/hweber)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 1:42pm UTC](https://discuss.elastic.co/t/open-source-elasticsearch-does-not-use-template-in-index-creation/245673 "2020-08-20T13:42:32Z")
I am using an open source build of Elasticsearch, version 7.8.0. I executed curl -ivvk -H "Content-Type: application/json" -H "Accept: application/json" -u username:password -X PUT "https://localhost:9200/\_template/tes… --- ## [Elasticsearch : JNA native support library not loading](https://discuss.elastic.co/t/elasticsearch-jna-native-support-library-not-loading/245492)
**Author:** [@FREDDIE2020](https://discuss.elastic.co/u/FREDDIE2020)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 1:32pm UTC](https://discuss.elastic.co/t/elasticsearch-jna-native-support-library-not-loading/245492 "2020-08-20T13:32:52Z")
SO after I performed the “git clone” command and updated the yml files with correct artifactory location, when I run the master deployment I get these BELOW. Any ideas? :blush: lmk ty \[lewellf\_adm@awva-pclif03001 ela… --- ## [\[function\_score\] malformed query, expected \[END\_OBJECT\] but found \[FIELD\_NAME\]](https://discuss.elastic.co/t/function-score-malformed-query-expected-end-object-but-found-field-name/245759)
**Author:** [@abhijeet\_sinha](https://discuss.elastic.co/u/abhijeet_sinha)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 12:12pm UTC](https://discuss.elastic.co/t/function-score-malformed-query-expected-end-object-but-found-field-name/245759 "2020-08-20T12:12:50Z")
What's wrong with this query? GET /catalog/\_search {"query": { "function\_score": { "boost\_mode": "multiply", "functions": \[ { "field\_value\_factor": { "field": "boostFactor", "factor"… --- ## [Reverse keyword vs new Wildcard data type](https://discuss.elastic.co/t/reverse-keyword-vs-new-wildcard-data-type/245751)
**Author:** [@TheWorkingDeveloper](https://discuss.elastic.co/u/TheWorkingDeveloper)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 11:28am UTC](https://discuss.elastic.co/t/reverse-keyword-vs-new-wildcard-data-type/245751 "2020-08-20T11:28:09Z")
In email wildcard searching: user\_email\* \*@domain.com Would reverse keyword be faster in searching than wildcard given a single wildcard? moc.niamod@\* on reverse keyword vs \*@domain.com on wildcard For example. So… --- ## [Multi search API: Getting more than 500 hits](https://discuss.elastic.co/t/multi-search-api-getting-more-than-500-hits/245752)
**Author:** [@MartaB](https://discuss.elastic.co/u/MartaB)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 10:51am UTC](https://discuss.elastic.co/t/multi-search-api-getting-more-than-500-hits/245752 "2020-08-20T10:51:06Z")
Hello guys! I kindly need your help with something. I'm building a script using groovy. The main goal is to retrieve all the logs we have on our server so I can use that logs, apply some logic (e.g., regex, conditional… --- ## [How to handle "cannot parse empty date"?](https://discuss.elastic.co/t/how-to-handle-cannot-parse-empty-date/245749)
**Author:** [@Rachana\_Pole](https://discuss.elastic.co/u/Rachana_Pole)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 10:43am UTC](https://discuss.elastic.co/t/how-to-handle-cannot-parse-empty-date/245749 "2020-08-20T10:43:33Z")
Hi all, I had a field that provides date information in String format. I converted it to Date type format using mappings as shown in the below mapping sample. Ex: "stats" : { "properties" : { … --- ## [Template wildcard data type, normalizer/analyzer for case insensitive search](https://discuss.elastic.co/t/template-wildcard-data-type-normalizer-analyzer-for-case-insensitive-search/245743)
**Author:** [@TheWorkingDeveloper](https://discuss.elastic.co/u/TheWorkingDeveloper)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 10:36am UTC](https://discuss.elastic.co/t/template-wildcard-data-type-normalizer-analyzer-for-case-insensitive-search/245743 "2020-08-20T10:36:07Z")
I have a data ingest that contains user input and want to wildcard search it. But I need the search to be case insensitive. "normalizer": { "lowercase\_normalizer": { "type": "custom", "char\_filter": \[\], … --- ## [CCR: deleted follower index without unfollow](https://discuss.elastic.co/t/ccr-deleted-follower-index-without-unfollow/245548)
**Author:** [@pravinpr](https://discuss.elastic.co/u/pravinpr)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 9:04am UTC](https://discuss.elastic.co/t/ccr-deleted-follower-index-without-unfollow/245548 "2020-08-20T09:04:30Z")
Hi, I have deleted an index on follower cluster without unfollowing it. I need to create a follower with same index name. However, unable to do that. Can you please suggest? [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=827) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=829)