# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=877

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 878

---

## [Monitoring UI can't find cluster data - 2h delay](https://discuss.elastic.co/t/monitoring-ui-cant-find-cluster-data-2h-delay/236055)

<div class="topic-metadata">

**Author:** [@rsustic](https://discuss.elastic.co/u/rsustic)\
**Replies:** 6\
**Last updated:** [June 29, 2020, 1:10pm UTC](https://discuss.elastic.co/t/monitoring-ui-cant-find-cluster-data-2h-delay/236055 "2020-06-29T13:10:24Z")

</div>

Hello guys, I am using ELK v6.8.5 and I recently came upon a problem with the Monitoring UI. It work just fine when I set the time to Today as seen in the image below. However, when I change the time to a smaller pe…

---

## [Can't setup active-directory auth](https://discuss.elastic.co/t/cant-setup-active-directory-auth/239082)

<div class="topic-metadata">

**Author:** [@parrabol](https://discuss.elastic.co/u/parrabol)\
**Replies:** 0\
**Last updated:** [June 29, 2020, 9:08am UTC](https://discuss.elastic.co/t/cant-setup-active-directory-auth/239082 "2020-06-29T09:08:16Z")

</div>

Hi all. I'm stuck with this active-directory auth to kibana via AD creds. When I'm trying to enable auth in kibana, after login i got a message - {"statusCode":403,"error":"Forbidden","message":"Forbidden"}. I added my…

---

## [Learning ES and Mapper Parsing Exception](https://discuss.elastic.co/t/learning-es-and-mapper-parsing-exception/239044)

<div class="topic-metadata">

**Author:** [@gdiaz](https://discuss.elastic.co/u/gdiaz)\
**Replies:** 3\
**Last updated:** [June 29, 2020, 12:10pm UTC](https://discuss.elastic.co/t/learning-es-and-mapper-parsing-exception/239044 "2020-06-29T12:10:09Z")

</div>

Hi to all, I'm learning ES. I have ES-7.8 in a docker container and started to play around with it. I have created mappings and loaded data already. Now, I'm following a course and I'm trying to create a mapping before …

---

## [Elasticsearch does not start because of a graylog-server error](https://discuss.elastic.co/t/elasticsearch-does-not-start-because-of-a-graylog-server-error/237495)

<div class="topic-metadata">

**Author:** [@uek](https://discuss.elastic.co/u/uek)\
**Replies:** 13\
**Last updated:** [June 29, 2020, 12:05pm UTC](https://discuss.elastic.co/t/elasticsearch-does-not-start-because-of-a-graylog-server-error/237495 "2020-06-29T12:05:13Z")

</div>

Hello there, my elasticsearch-oss I would like to use in combination with prometheus and grafana does not start on my centos8 machine because of theese errors : Automatic restarting of the unit graylog-server.service…

---

## [CentOs vs Ubuntu for elastic](https://discuss.elastic.co/t/centos-vs-ubuntu-for-elastic/238865)

<div class="topic-metadata">

**Author:** [@KrishK](https://discuss.elastic.co/u/KrishK)\
**Replies:** 2\
**Last updated:** [June 29, 2020, 10:53am UTC](https://discuss.elastic.co/t/centos-vs-ubuntu-for-elastic/238865 "2020-06-29T10:53:27Z")

</div>

Hi Support, I just need to confirm that, is there any difference / any issue/performance-related issue between CentOs - 7 and Ubuntu 18.04 LTS. UAT Testing was on CentOs, now the Production setup is in Ubuntu. So will…

---

## [No error thrown to RestClient on MappingParsingException](https://discuss.elastic.co/t/no-error-thrown-to-restclient-on-mappingparsingexception/239093)

<div class="topic-metadata">

**Author:** [@dancerjohn](https://discuss.elastic.co/u/dancerjohn)\
**Replies:** 0\
**Last updated:** [June 29, 2020, 10:46am UTC](https://discuss.elastic.co/t/no-error-thrown-to-restclient-on-mappingparsingexception/239093 "2020-06-29T10:46:46Z")

</div>

I am seeing MappingParsingException logged in the elasticsearch log and I find that it is correct. My code has a bug for a field. The issue is that no error was thrown to my RestHighLevelClient. I want my application to …

---

## [Params per terms aggreations](https://discuss.elastic.co/t/params-per-terms-aggreations/239086)

<div class="topic-metadata">

**Author:** [@Eftikhar\_Abu\_Libdeh](https://discuss.elastic.co/u/Eftikhar_Abu_Libdeh)\
**Replies:** 0\
**Last updated:** [June 29, 2020, 9:45am UTC](https://discuss.elastic.co/t/params-per-terms-aggreations/239086 "2020-06-29T09:45:49Z")

</div>

I have terms aggregation just after date histogram aggregation, each sub-bucket should apply filter on extra params based on nested bucket keys. since I can't access the bucket keys I just make it as array of aggregati…

---

## [Elastic Search Query on Two Documents](https://discuss.elastic.co/t/elastic-search-query-on-two-documents/238479)

<div class="topic-metadata">

**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\
**Replies:** 9\
**Last updated:** [June 29, 2020, 9:40am UTC](https://discuss.elastic.co/t/elastic-search-query-on-two-documents/238479 "2020-06-29T09:40:37Z")

</div>

Hi, I have created the index PUT ten2 { "mappings": { "documents": { "properties": { "title": { "type": "text", "fields": { "raw": { "type": "keyword" } } }, "publish…

---

## [Exact match on fields of type "text" (beginning and end "anchored")](https://discuss.elastic.co/t/exact-match-on-fields-of-type-text-beginning-and-end-anchored/238435)

<div class="topic-metadata">

**Author:** [@ypid-geberit](https://discuss.elastic.co/u/ypid-geberit)\
**Replies:** 2\
**Last updated:** [June 29, 2020, 9:13am UTC](https://discuss.elastic.co/t/exact-match-on-fields-of-type-text-beginning-and-end-anchored/238435 "2020-06-29T09:13:51Z")

</div>

Hi Is there a way to do an exact match on fields of type "text"? I mean ensure that all tokens are matched in the order specified and no additional tokens are contained in search result documents (no partial match)? I k…

---

## [Crashed when bulk write in high concurrency](https://discuss.elastic.co/t/crashed-when-bulk-write-in-high-concurrency/239083)

<div class="topic-metadata">

**Author:** [@JackYangzg](https://discuss.elastic.co/u/JackYangzg)\
**Replies:** 0\
**Last updated:** [June 29, 2020, 9:12am UTC](https://discuss.elastic.co/t/crashed-when-bulk-write-in-high-concurrency/239083 "2020-06-29T09:12:19Z")

</div>

when bulk write in high concurrency, sometimes I got stacktrace like: 2020-06-29 16:04:50.735 ERROR xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx java.lang.NullPointerException: null at org.elasti…

---

## [Can I search for special characters highlight in Elastic?](https://discuss.elastic.co/t/can-i-search-for-special-characters-highlight-in-elastic/239073)

<div class="topic-metadata">

**Author:** [@111349](https://discuss.elastic.co/u/111349)\
**Replies:** 0\
**Last updated:** [June 29, 2020, 8:28am UTC](https://discuss.elastic.co/t/can-i-search-for-special-characters-highlight-in-elastic/239073 "2020-06-29T08:28:23Z")

</div>

I am using ElasticSearch RestHighLevelCilent api in java. Among them, use QueryStringQueryBuilder to input the string I want to search. Then, the matched string is wrapped around the tag with HighlightBuilder. Everyth…

---

## [Export logs from Azure event Hub to Elastic Cloud managed elastic search](https://discuss.elastic.co/t/export-logs-from-azure-event-hub-to-elastic-cloud-managed-elastic-search/239065)

<div class="topic-metadata">

**Author:** [@Kanthu\_Canty](https://discuss.elastic.co/u/Kanthu_Canty)\
**Replies:** 0\
**Last updated:** [June 29, 2020, 7:35am UTC](https://discuss.elastic.co/t/export-logs-from-azure-event-hub-to-elastic-cloud-managed-elastic-search/239065 "2020-06-29T07:35:39Z")

</div>

Hell Team, I am working on a solution, where we are using Azure Managed resources and these Azure managed resource logs need to be sent/export to elastic cloud managed elastic search and Kibana. How can we achieve this …

---

## [Convert text field containg xml string](https://discuss.elastic.co/t/convert-text-field-containg-xml-string/238856)

<div class="topic-metadata">

**Author:** [@Mips128](https://discuss.elastic.co/u/Mips128)\
**Replies:** 5\
**Last updated:** [June 29, 2020, 6:57am UTC](https://discuss.elastic.co/t/convert-text-field-containg-xml-string/238856 "2020-06-29T06:57:54Z")

</div>

Hi, I am pretty new to elasticsearch and I have a problem that I can't even solve using google. Therefore, I really appreciate any help. I use a tool (log2timeline) to create an Index and add data to it. I am not able …

---

## [Potential race condition in ChildMemoryCircuitBreaker.limit()](https://discuss.elastic.co/t/potential-race-condition-in-childmemorycircuitbreaker-limit/238996)

<div class="topic-metadata">

**Author:** [@hackerwin7](https://discuss.elastic.co/u/hackerwin7)\
**Replies:** 0\
**Last updated:** [June 28, 2020, 9:51am UTC](https://discuss.elastic.co/t/potential-race-condition-in-childmemorycircuitbreaker-limit/238996 "2020-06-28T09:51:15Z")

</div>

In the method of ChildMemoryCircuitBreaker.addEstimateBytesAndMaybeBreak(), the limit() method would atomically compare and set the used value. when we test the high qps query to ES-node, the major cost is ChildMemoryCi…

---

## [Is there a performance issue if all the primary shards are located on a single node?](https://discuss.elastic.co/t/is-there-a-performance-issue-if-all-the-primary-shards-are-located-on-a-single-node/239035)

<div class="topic-metadata">

**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\
**Replies:** 1\
**Last updated:** [June 29, 2020, 6:55am UTC](https://discuss.elastic.co/t/is-there-a-performance-issue-if-all-the-primary-shards-are-located-on-a-single-node/239035 "2020-06-29T06:55:36Z")

</div>

We have a 3 node data cluster that contains index with 3 primary shards and 2 replica Initially, each data node had 1 primary shard but when we had to replace one of the data nodes recently, all the primary shards are n…

---

## [Negating filter (RestHighLevelClient)](https://discuss.elastic.co/t/negating-filter-resthighlevelclient/239061)

<div class="topic-metadata">

**Author:** [@Thomas\_E](https://discuss.elastic.co/u/Thomas_E)\
**Replies:** 1\
**Last updated:** [June 29, 2020, 6:51am UTC](https://discuss.elastic.co/t/negating-filter-resthighlevelclient/239061 "2020-06-29T06:51:59Z")

</div>

I have BoolQueryBuilder queryBuilder = boolQuery(); queryBuilder.filter(termQuery(...)) and now want to add a filter with a negated condition. With BoolQueryBuilder queryBuilder = boolQuery(); queryBuilder.filter(ter…

---

## [Is it possible to JOIN different indexes? Or is there a way to achieve an equivalent effect?](https://discuss.elastic.co/t/is-it-possible-to-join-different-indexes-or-is-there-a-way-to-achieve-an-equivalent-effect/239059)

<div class="topic-metadata">

**Author:** [@fuqda](https://discuss.elastic.co/u/fuqda)\
**Replies:** 2\
**Last updated:** [June 29, 2020, 6:31am UTC](https://discuss.elastic.co/t/is-it-possible-to-join-different-indexes-or-is-there-a-way-to-achieve-an-equivalent-effect/239059 "2020-06-29T06:31:48Z")

</div>

Is it possible to JOIN different indexes? Or is there a way to achieve an equivalent effect? If you change the existing mapping, I think you will have to re-populate the index with data again. I would like to create a …

---

## [Slowlog not created on all nodes](https://discuss.elastic.co/t/slowlog-not-created-on-all-nodes/239050)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 0\
**Last updated:** [June 29, 2020, 4:25am UTC](https://discuss.elastic.co/t/slowlog-not-created-on-all-nodes/239050 "2020-06-29T04:25:07Z")

</div>

Hello, I am trying to create and monitor slowlogs. I have configured for testing purposes PUT /index\*/\_settings { "index.search.slowlog.threshold.query.warn": "0s", "index.search.slowlog.threshold.query.info":…

---

## [SSL Transport setup with Ansible](https://discuss.elastic.co/t/ssl-transport-setup-with-ansible/237993)

<div class="topic-metadata">

**Author:** [@biggtimber](https://discuss.elastic.co/u/biggtimber)\
**Replies:** 2\
**Last updated:** [June 29, 2020, 3:54am UTC](https://discuss.elastic.co/t/ssl-transport-setup-with-ansible/237993 "2020-06-29T03:54:06Z")

</div>

How do normal installations of the elasticstack work with SSL Transport/HTTP when using Ansible? I'm using the github ansible role setup. From the documentation, it shows the cert setup using elasticsearch-certutil to g…

---

## [Elasticsearch failed when i try to setup x-pack](https://discuss.elastic.co/t/elasticsearch-failed-when-i-try-to-setup-x-pack/238984)

<div class="topic-metadata">

**Author:** [@Amine\_Aloui](https://discuss.elastic.co/u/Amine_Aloui)\
**Replies:** 6\
**Last updated:** [June 29, 2020, 12:30am UTC](https://discuss.elastic.co/t/elasticsearch-failed-when-i-try-to-setup-x-pack/238984 "2020-06-29T00:30:56Z")

</div>

when i try to setup x-pack in remote server i have some issues (in my local ,it works perfectly) ,but it dosn't in remote sever first : vi /etc/elasticsearch/elasticsearch.yml i add this option: xpack.security.enabl…

---

## [Mapping for object with dynamic keys](https://discuss.elastic.co/t/mapping-for-object-with-dynamic-keys/238993)

<div class="topic-metadata">

**Author:** [@luckyb56](https://discuss.elastic.co/u/luckyb56)\
**Replies:** 1\
**Last updated:** [June 28, 2020, 11:56pm UTC](https://discuss.elastic.co/t/mapping-for-object-with-dynamic-keys/238993 "2020-06-28T23:56:59Z")

</div>

Have a document like this: { "stats": { "fruits.v:apple": 30, "fruits.v:orange": 150, "vegetables.v: broccoli": 40 } } Can I keep the key name as is? What kind of dynami…

---

## [Support for Spark 3.0 connector](https://discuss.elastic.co/t/support-for-spark-3-0-connector/239029)

<div class="topic-metadata">

**Author:** [@Swapnil\_Nawale](https://discuss.elastic.co/u/Swapnil_Nawale)\
**Replies:** 0\
**Last updated:** [June 28, 2020, 8:10pm UTC](https://discuss.elastic.co/t/support-for-spark-3-0-connector/239029 "2020-06-28T20:10:40Z")

</div>

Is there a plan to support elasticsearch-spark connector for Apache Spark 3.0 ? If yes, is there an ETA on the same ?

---

## [Org.elsticsearch -- trying to run scripted upserts, written in painless language, from Spark -- {type=null\_pointer\_exception, reason=null}](https://discuss.elastic.co/t/org-elsticsearch-trying-to-run-scripted-upserts-written-in-painless-language-from-spark-type-null-pointer-exception-reason-null/238968)

<div class="topic-metadata">

**Author:** [@Eman\_Mughal](https://discuss.elastic.co/u/Eman_Mughal)\
**Replies:** 1\
**Last updated:** [June 28, 2020, 7:34pm UTC](https://discuss.elastic.co/t/org-elsticsearch-trying-to-run-scripted-upserts-written-in-painless-language-from-spark-type-null-pointer-exception-reason-null/238968 "2020-06-28T19:34:59Z")

</div>

Hi There, I am trying to run the following code df.write .format("org.elasticsearch.spark.sql") .option("es.nodes.wan.only","true") // .option("es.nodes.discovery", "false") // .option("es.nodes.client.only", "fa…

---

## [Transform doesn't recognize all the documents](https://discuss.elastic.co/t/transform-doesnt-recognize-all-the-documents/237591)

<div class="topic-metadata">

**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\
**Replies:** 9\
**Last updated:** [June 28, 2020, 6:51pm UTC](https://discuss.elastic.co/t/transform-doesnt-recognize-all-the-documents/237591 "2020-06-28T18:51:49Z")

</div>

Hi, I created a new transform and It doesn't recognize all the documents in source index. The source index name is user\_data. The destination index name is session\_data. The transform is so simple: runs on the last …

---

## [Error Elasticsearch Unreachable](https://discuss.elastic.co/t/error-elasticsearch-unreachable/238964)

<div class="topic-metadata">

**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\
**Replies:** 1\
**Last updated:** [June 27, 2020, 10:49pm UTC](https://discuss.elastic.co/t/error-elasticsearch-unreachable/238964 "2020-06-27T22:49:29Z")

</div>

I use logstash to ingest a csv file in elastic i have this error \[2020-06-27T18:46:09,043\]\[WARN \]\[logstash.outputs.elasticsearch\] Marking url as dead. Last error: \[LogStash::Outputs::ElasticSearch::HttpClient::Pool::Hos…

---

## [Top 10 doc of a User get changed when i insert data in another user's space](https://discuss.elastic.co/t/top-10-doc-of-a-user-get-changed-when-i-insert-data-in-another-users-space/238939)

<div class="topic-metadata">

**Author:** [@RAHUL\_PATEL](https://discuss.elastic.co/u/RAHUL_PATEL)\
**Replies:** 3\
**Last updated:** [June 27, 2020, 10:00pm UTC](https://discuss.elastic.co/t/top-10-doc-of-a-user-get-changed-when-i-insert-data-in-another-users-space/238939 "2020-06-27T22:00:05Z")

</div>

Problem Statement: I have 1000 users in my index when I use this query { "query": { "bool": { "must": \[ { "match": { "keywords": { "query":…

---

## [Can i connect aws elasticsearch data to swift engine?](https://discuss.elastic.co/t/can-i-connect-aws-elasticsearch-data-to-swift-engine/238944)

<div class="topic-metadata">

**Author:** [@Sagar\_jain](https://discuss.elastic.co/u/Sagar_jain)\
**Replies:** 1\
**Last updated:** [June 27, 2020, 2:34pm UTC](https://discuss.elastic.co/t/can-i-connect-aws-elasticsearch-data-to-swift-engine/238944 "2020-06-27T14:34:45Z")

</div>

Can i connect aws elasticsearch data to swift engine?

---

## [I need help! elastic doesn't get my mapping!](https://discuss.elastic.co/t/i-need-help-elastic-doesnt-get-my-mapping/238932)

<div class="topic-metadata">

**Author:** [@sina12](https://discuss.elastic.co/u/sina12)\
**Replies:** 3\
**Last updated:** [June 27, 2020, 2:18pm UTC](https://discuss.elastic.co/t/i-need-help-elastic-doesnt-get-my-mapping/238932 "2020-06-27T14:18:20Z")

</div>

Hi Guys! I am in trouble. I need to visualize my data but elasticsearch doesn't accept my mapping. I edited the mapping like that: PUT /my\_example/\_mappings { "properties" : { "id" :{ "type": "boolean" }, …

---

## [API Integration with Elastic + KIBANA](https://discuss.elastic.co/t/api-integration-with-elastic-kibana/238951)

<div class="topic-metadata">

**Author:** [@get2saravanan](https://discuss.elastic.co/u/get2saravanan)\
**Replies:** 0\
**Last updated:** [June 27, 2020, 1:15pm UTC](https://discuss.elastic.co/t/api-integration-with-elastic-kibana/238951 "2020-06-27T13:15:37Z")

</div>

Hi Team, I have a requirement to display the Currency rates in the Kibana dashboard. I have few restAPI which serve data for the Currency. I couldn't understand how to load this live data in Elastic. Kindly share your …

---

## [Wildcard in a match\_phrase query](https://discuss.elastic.co/t/wildcard-in-a-match-phrase-query/238775)

<div class="topic-metadata">

**Author:** [@Manjunath\_Venkatram](https://discuss.elastic.co/u/Manjunath_Venkatram)\
**Replies:** 3\
**Last updated:** [June 27, 2020, 12:25pm UTC](https://discuss.elastic.co/t/wildcard-in-a-match-phrase-query/238775 "2020-06-27T12:25:49Z")

</div>

Hi I am trying to do a wildcard query on a field as below, {"clientPort":{"query":"\*"}}, my intention is for the query to bring any/all values associated with clientPort, is this possible ? currently i dont get anythin…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=876)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=878)
