# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=843

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 844

---

## [Is dense\_vector field available in AWS Elasticsearch Service?](https://discuss.elastic.co/t/is-dense-vector-field-available-in-aws-elasticsearch-service/243845)

<div class="topic-metadata">

**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\
**Replies:** 3\
**Last updated:** [August 5, 2020, 10:34am UTC](https://discuss.elastic.co/t/is-dense-vector-field-available-in-aws-elasticsearch-service/243845 "2020-08-05T10:34:14Z")

</div>

I would like to use dense\_vector field (https://www.elastic.co/guide/en/elasticsearch/reference/current/dense-vector.html) while it seems to be contained in X-Pack. Is it available in AWS Elasticsearch Service too? P.S…

---

## [Plugin to modify "get" and "search" action results](https://discuss.elastic.co/t/plugin-to-modify-get-and-search-action-results/243837)

<div class="topic-metadata">

**Author:** [@zyx\_0312](https://discuss.elastic.co/u/zyx_0312)\
**Replies:** 0\
**Last updated:** [August 5, 2020, 9:33am UTC](https://discuss.elastic.co/t/plugin-to-modify-get-and-search-action-results/243837 "2020-08-05T09:33:28Z")

</div>

I want to implement a elasticsearch plugin, which could modify the get and search action results, such as modify the field's value of docs, then return the modified docs result to users. I want to know which kind of plu…

---

## [Using ILM rollover with multiple indices](https://discuss.elastic.co/t/using-ilm-rollover-with-multiple-indices/243443)

<div class="topic-metadata">

**Author:** [@SaigyoujiYuyuko233](https://discuss.elastic.co/u/SaigyoujiYuyuko233)\
**Replies:** 5\
**Last updated:** [August 5, 2020, 9:26am UTC](https://discuss.elastic.co/t/using-ilm-rollover-with-multiple-indices/243443 "2020-08-05T09:26:06Z")

</div>

Enviroment ES: 7.8.1 Kibana: 7.8.1 Run in docker: 19.03.8, build afacb8b Using docker image: docker.elastic.co/elasticsearch/elasticsearch:7.8.1 Hi everybody, I'm having a hard time with using ILM rollover with mult…

---

## [Issue with strating Elastic Search on Ples Onyx with CentOS 7](https://discuss.elastic.co/t/issue-with-strating-elastic-search-on-ples-onyx-with-centos-7/243761)

<div class="topic-metadata">

**Author:** [@kootjoo](https://discuss.elastic.co/u/kootjoo)\
**Replies:** 2\
**Last updated:** [August 5, 2020, 8:43am UTC](https://discuss.elastic.co/t/issue-with-strating-elastic-search-on-ples-onyx-with-centos-7/243761 "2020-08-05T08:43:22Z")

</div>

Hi, I am struggling to get things working on my Plesk server. I have succesfully installed Elasticsearch and see this error in te log: \[2020-08-04T19:38:31,728\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[www.…

---

## [Will my LDAP integration stop working when my Platinum license expires and enters in degraded mode?](https://discuss.elastic.co/t/will-my-ldap-integration-stop-working-when-my-platinum-license-expires-and-enters-in-degraded-mode/238940)

<div class="topic-metadata">

**Author:** [@alexmm](https://discuss.elastic.co/u/alexmm)\
**Replies:** 6\
**Last updated:** [August 5, 2020, 8:03am UTC](https://discuss.elastic.co/t/will-my-ldap-integration-stop-working-when-my-platinum-license-expires-and-enters-in-degraded-mode/238940 "2020-08-05T08:03:58Z")

</div>

In in this topic I asked about if my LDAP integration would stop working if my Platinum license expires. I got a good answer but actually, I think it was not what I expected. The answer was more about what would happen…

---

## [Why can't the mapping field be deleted](https://discuss.elastic.co/t/why-cant-the-mapping-field-be-deleted/243685)

<div class="topic-metadata">

**Author:** [@RunAsOnehhb](https://discuss.elastic.co/u/RunAsOnehhb)\
**Replies:** 3\
**Last updated:** [August 5, 2020, 7:54am UTC](https://discuss.elastic.co/t/why-cant-the-mapping-field-be-deleted/243685 "2020-08-05T07:54:25Z")

</div>

Why can't the mapping field be deleted？

---

## [Performance problem in Percolator fetch phase classes](https://discuss.elastic.co/t/performance-problem-in-percolator-fetch-phase-classes/243748)

<div class="topic-metadata">

**Author:** [@apeteri](https://discuss.elastic.co/u/apeteri)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 7:46am UTC](https://discuss.elastic.co/t/performance-problem-in-percolator-fetch-phase-classes/243748 "2020-08-05T07:46:49Z")

</div>

Hi, We are using Elasticsearch 7.8.0 and seem to be encountering a performance issue that we traced back to the method PercolatorHighlightSubFetchPhase#locatePercolatorQuery. Lucene 8.6 introduced a change to QueryVisit…

---

## [Cat shards API param "local" does not apply](https://discuss.elastic.co/t/cat-shards-api-param-local-does-not-apply/243679)

<div class="topic-metadata">

**Author:** [@CHU\_XU](https://discuss.elastic.co/u/CHU_XU)\
**Replies:** 3\
**Last updated:** [August 5, 2020, 7:44am UTC](https://discuss.elastic.co/t/cat-shards-api-param-local-does-not-apply/243679 "2020-08-05T07:44:25Z")

</div>

Hi there, I'm using the api \_cat/shards to monitor my shards' info. Since I may have a large cluster and many shards, I would like to collect the info from each node instead of collecting them by one call. As described…

---

## [How to have the aggregate query in multi match query](https://discuss.elastic.co/t/how-to-have-the-aggregate-query-in-multi-match-query/243810)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 0\
**Last updated:** [August 5, 2020, 6:29am UTC](https://discuss.elastic.co/t/how-to-have-the-aggregate-query-in-multi-match-query/243810 "2020-08-05T06:29:03Z")

</div>

How to have the aggregate query in a multi match query ? I would like to have few facets returned as part of the search. I am looking for the aggregate functionality in multi\_match query which supports search in many f…

---

## [Elasticsearch and Snapshots?](https://discuss.elastic.co/t/elasticsearch-and-snapshots/243717)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 5\
**Last updated:** [August 5, 2020, 4:44am UTC](https://discuss.elastic.co/t/elasticsearch-and-snapshots/243717 "2020-08-05T04:44:11Z")

</div>

Hi, I have very quick information about making snapshots at Elasticsearch. The documentation is here: https://www.elastic.co/guide/en/elasticsearch/reference/current/snapshots-register-repository.html However, I have…

---

## [Elastic cluster metrics](https://discuss.elastic.co/t/elastic-cluster-metrics/241259)

<div class="topic-metadata">

**Author:** [@ash2](https://discuss.elastic.co/u/ash2)\
**Replies:** 10\
**Last updated:** [August 5, 2020, 4:43am UTC](https://discuss.elastic.co/t/elastic-cluster-metrics/241259 "2020-08-05T04:43:00Z")

</div>

I want to create the dashboards in my application showing the elastic cluster data and metrics as it is shown in Kibana app monitoring. For getting most of the data I can use cluster health apis. But I not getting much o…

---

## [Enabling xpack causes errors](https://discuss.elastic.co/t/enabling-xpack-causes-errors/243601)

<div class="topic-metadata">

**Author:** [@jLemmings](https://discuss.elastic.co/u/jLemmings)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 4:35am UTC](https://discuss.elastic.co/t/enabling-xpack-causes-errors/243601 "2020-08-05T04:35:32Z")

</div>

Hello I am trying to set up a simple ELK stack using docker. While I disable xpack security it starts fine and I can access the Kibana interface. If xpack security is enabled I get an "Kibana server is not ready yet" er…

---

## [ES 7.8 X-Pack not returning whole cert chain root ca, intermediate and server cert](https://discuss.elastic.co/t/es-7-8-x-pack-not-returning-whole-cert-chain-root-ca-intermediate-and-server-cert/243475)

<div class="topic-metadata">

**Author:** [@mankuuuuu](https://discuss.elastic.co/u/mankuuuuu)\
**Replies:** 4\
**Last updated:** [August 5, 2020, 4:27am UTC](https://discuss.elastic.co/t/es-7-8-x-pack-not-returning-whole-cert-chain-root-ca-intermediate-and-server-cert/243475 "2020-08-05T04:27:56Z")

</div>

I am trying to enable TLS on the elasticsearch http layer but not able to get all the certificates in the certificate chain. Settings - xpack.security.enabled: true xpack.security.http.ssl.enabled: true xpa…

---

## [Want to aggregate and search multiple route\_path as same function](https://discuss.elastic.co/t/want-to-aggregate-and-search-multiple-route-path-as-same-function/243804)

<div class="topic-metadata">

**Author:** [@hanase](https://discuss.elastic.co/u/hanase)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 3:42am UTC](https://discuss.elastic.co/t/want-to-aggregate-and-search-multiple-route-path-as-same-function/243804 "2020-08-05T03:42:34Z")

</div>

Hi, here is my DSL, GET access-2020.07.29/\_search { "query": { "match": { "route": "PIDInterface" } }, "aggs": { "route\_path": { "terms": { "field": "route\_path.keyword", "…

---

## [Ask about the usage of negative query\_string](https://discuss.elastic.co/t/ask-about-the-usage-of-negative-query-string/243412)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 2\
**Last updated:** [August 5, 2020, 1:01am UTC](https://discuss.elastic.co/t/ask-about-the-usage-of-negative-query-string/243412 "2020-08-05T01:01:21Z")

</div>

I've read the latest documentation and am sure I can't answer my question. https://www.elastic.co/guide/en/elasticsearch/reference/7.8/query-dsl-query-string-query.html#query-string-syntax The first DSL syntax succeede…

---

## [NEST Bulk API Validation Error: type is missing](https://discuss.elastic.co/t/nest-bulk-api-validation-error-type-is-missing/243752)

<div class="topic-metadata">

**Author:** [@lmattingly](https://discuss.elastic.co/u/lmattingly)\
**Replies:** 3\
**Last updated:** [August 5, 2020, 12:13am UTC](https://discuss.elastic.co/t/nest-bulk-api-validation-error-type-is-missing/243752 "2020-08-05T00:13:03Z")

</div>

Hi, I'm experiencing "Invalid NEST response built from a unsuccessful (400) low level call on POST: /indexname/\_bulk" Bad Request with '{Type: action\_request\_validation\_exception Reason: "Validation Failed: 1: type is…

---

## [Calculating Disk Space being used](https://discuss.elastic.co/t/calculating-disk-space-being-used/243778)

<div class="topic-metadata">

**Author:** [@The-Nebertcher](https://discuss.elastic.co/u/The-Nebertcher)\
**Replies:** 3\
**Last updated:** [August 4, 2020, 11:24pm UTC](https://discuss.elastic.co/t/calculating-disk-space-being-used/243778 "2020-08-04T23:24:48Z")

</div>

Hello All I am working on a potential upgrade for our Elk stack and need to find a few things. One is how much space is being taken up just by Elk indexing new logs as they come in. For example if I am taking in ~10gb …

---

## [Query\_string is not returning expected result ES 5.x vs ES 7.7](https://discuss.elastic.co/t/query-string-is-not-returning-expected-result-es-5-x-vs-es-7-7/243783)

<div class="topic-metadata">

**Author:** [@pappukhode](https://discuss.elastic.co/u/pappukhode)\
**Replies:** 1\
**Last updated:** [August 4, 2020, 9:05pm UTC](https://discuss.elastic.co/t/query-string-is-not-returning-expected-result-es-5-x-vs-es-7-7/243783 "2020-08-04T21:05:11Z")

</div>

Hi, I have upgraded my elasticsearch recently from 5.5 to 7.7. While running my automation test suite, I found that query\_string in ES 5.5 was returning me expected document but ES 7.7 is returning empty results. I no…

---

## [Regex Kibana Filter with backslash](https://discuss.elastic.co/t/regex-kibana-filter-with-backslash/243686)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 1\
**Last updated:** [August 4, 2020, 8:30pm UTC](https://discuss.elastic.co/t/regex-kibana-filter-with-backslash/243686 "2020-08-04T20:30:51Z")

</div>

Hello, How can I create a regex filter in Kibana containing an escaped dollar? When I double backslash, the regex does not work as expected. My goal is to exclude computer accounts (which end with a dollar). Grtz W…

---

## [How to do a match\_phrase query on all searchable fields instead of on a single field?](https://discuss.elastic.co/t/how-to-do-a-match-phrase-query-on-all-searchable-fields-instead-of-on-a-single-field/243760)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 1\
**Last updated:** [August 4, 2020, 8:13pm UTC](https://discuss.elastic.co/t/how-to-do-a-match-phrase-query-on-all-searchable-fields-instead-of-on-a-single-field/243760 "2020-08-04T20:13:45Z")

</div>

How to do a match\_phrase query on all searchable fields instead of on a single field? I do see in the documentation as mentioned below where search can be done on only specific field. GET /\_search { "query": { "matc…

---

## [Supplying the After key to search template with aggregation](https://discuss.elastic.co/t/supplying-the-after-key-to-search-template-with-aggregation/243575)

<div class="topic-metadata">

**Author:** [@l570](https://discuss.elastic.co/u/l570)\
**Replies:** 1\
**Last updated:** [August 4, 2020, 7:41pm UTC](https://discuss.elastic.co/t/supplying-the-after-key-to-search-template-with-aggregation/243575 "2020-08-04T19:41:15Z")

</div>

I'm new to using search templates and aggregations. In previous queries using aggregations, I've used the "after" key to advance my search through the aggregations. Is it possible to do this with search templates? A…

---

## [Starting ES-7.8.0 hung up CLI](https://discuss.elastic.co/t/starting-es-7-8-0-hung-up-cli/241768)

<div class="topic-metadata">

**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\
**Replies:** 10\
**Last updated:** [August 4, 2020, 3:37pm UTC](https://discuss.elastic.co/t/starting-es-7-8-0-hung-up-cli/241768 "2020-08-04T15:37:43Z")

</div>

Hello, I setup ES-7.8.0 cluster on 2 hosts (Linux), 2 master and 2 data nodes on each host. I'm able to start all 4 nodes, the cluster health=GREEN and I can see all nodes joined the cluster. Environment: ES-7.8.0 (el…

---

## [Ingest manager without security enabled](https://discuss.elastic.co/t/ingest-manager-without-security-enabled/243756)

<div class="topic-metadata">

**Author:** [@Sc7565](https://discuss.elastic.co/u/Sc7565)\
**Replies:** 1\
**Last updated:** [August 4, 2020, 5:37pm UTC](https://discuss.elastic.co/t/ingest-manager-without-security-enabled/243756 "2020-08-04T17:37:33Z")

</div>

Can ingest manager work without security enabled?

---

## [NewRelic not showing JVM node after upgrade to 6.8.10](https://discuss.elastic.co/t/newrelic-not-showing-jvm-node-after-upgrade-to-6-8-10/243549)

<div class="topic-metadata">

**Author:** [@het](https://discuss.elastic.co/u/het)\
**Replies:** 2\
**Last updated:** [August 4, 2020, 5:18pm UTC](https://discuss.elastic.co/t/newrelic-not-showing-jvm-node-after-upgrade-to-6-8-10/243549 "2020-08-04T17:18:45Z")

</div>

Hi team, I have upgraded the Elastic-Search cluster from 5.3 to 6.8.10. When I am on 5.3 Version of ES, I have added the below the line in my jvm.option. -javaagent:$NEW\_RELIC\_HOME/newrelic.jar So with this, I can show…

---

## [POST adding new keys](https://discuss.elastic.co/t/post-adding-new-keys/243753)

<div class="topic-metadata">

**Author:** [@gdiaz](https://discuss.elastic.co/u/gdiaz)\
**Replies:** 0\
**Last updated:** [August 4, 2020, 5:15pm UTC](https://discuss.elastic.co/t/post-adding-new-keys/243753 "2020-08-04T17:15:17Z")

</div>

Hi all, I'm writing a service where other services can CRUD ElasticSearch. I'm have a schema that I stick to it to create POST body. I'm testing the service with Postman and I notice something unexpected. Just for giggl…

---

## [How to make range filter on a multi-field field?](https://discuss.elastic.co/t/how-to-make-range-filter-on-a-multi-field-field/243653)

<div class="topic-metadata">

**Author:** [@opsuthar](https://discuss.elastic.co/u/opsuthar)\
**Replies:** 7\
**Last updated:** [August 4, 2020, 4:34pm UTC](https://discuss.elastic.co/t/how-to-make-range-filter-on-a-multi-field-field/243653 "2020-08-04T16:34:27Z")

</div>

Here is the mapping file, I am using: { "settings": { "number\_of\_shards": 2 }, "mappings": { "properties": { "SensitiveInfoTypeData": { "type": "nested", …

---

## [Update mapping index parameter of existing field](https://discuss.elastic.co/t/update-mapping-index-parameter-of-existing-field/243749)

<div class="topic-metadata">

**Author:** [@gitterhh](https://discuss.elastic.co/u/gitterhh)\
**Replies:** 0\
**Last updated:** [August 4, 2020, 4:00pm UTC](https://discuss.elastic.co/t/update-mapping-index-parameter-of-existing-field/243749 "2020-08-04T16:00:38Z")

</div>

I have the mapping { "test" : { "mappings" : { "properties" : { "description" : { "type" : "text" }, "location" : { "type" : "keyword", "index" : false …

---

## [Create one new index for eah type of entry](https://discuss.elastic.co/t/create-one-new-index-for-eah-type-of-entry/243743)

<div class="topic-metadata">

**Author:** [@robertitox](https://discuss.elastic.co/u/robertitox)\
**Replies:** 0\
**Last updated:** [August 4, 2020, 3:36pm UTC](https://discuss.elastic.co/t/create-one-new-index-for-eah-type-of-entry/243743 "2020-08-04T15:36:13Z")

</div>

Dear all, I have an ELK 7.8.0 server with syslog and cisco module enabled from Filebeat. At the moment I'm receiving data from: Linux servers (syslog) Cisco ASA (filebeat, cisco module, asa data set) Cisco IOS (filebe…

---

## [ElasticSearch query to filter out distinct results](https://discuss.elastic.co/t/elasticsearch-query-to-filter-out-distinct-results/243622)

<div class="topic-metadata">

**Author:** [@karna98](https://discuss.elastic.co/u/karna98)\
**Replies:** 2\
**Last updated:** [August 4, 2020, 3:30pm UTC](https://discuss.elastic.co/t/elasticsearch-query-to-filter-out-distinct-results/243622 "2020-08-04T15:30:21Z")

</div>

Consider a table, where artifacts are mapped to publications. ------------------------------------------------------------------ id | artifact\_id | publication\_id | A | B | C | --------------------…

---

## [Boolean should and proximity?](https://discuss.elastic.co/t/boolean-should-and-proximity/243734)

<div class="topic-metadata">

**Author:** [@flm](https://discuss.elastic.co/u/flm)\
**Replies:** 0\
**Last updated:** [August 4, 2020, 2:41pm UTC](https://discuss.elastic.co/t/boolean-should-and-proximity/243734 "2020-08-04T14:41:41Z")

</div>

Is there a way to mix boolean should and span or proximity queries? I want to match documents that contain X% of a group of terms in any order but not further apart from each other than distance D. Is this possible?

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=842)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=844)
