# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=880 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 881 --- ## [OSS Version to Basic Version](https://discuss.elastic.co/t/oss-version-to-basic-version/238652)
**Author:** [@Anthony\_Whitehead](https://discuss.elastic.co/u/Anthony_Whitehead)\ **Replies:** 5\ **Last updated:** [June 25, 2020, 1:22pm UTC](https://discuss.elastic.co/t/oss-version-to-basic-version/238652 "2020-06-25T13:22:27Z")
Hi, I've been tasked with deciding where we move with Elastic & Kibana, we're currently on 6.8 and have an OSS version, we also have an aweful lot of data and we will NOT be able to reingest this. Having just watched Ela… --- ## [Unable to connect between elastic search and kibana](https://discuss.elastic.co/t/unable-to-connect-between-elastic-search-and-kibana/238667)
**Author:** [@neelbasu](https://discuss.elastic.co/u/neelbasu)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 12:35pm UTC](https://discuss.elastic.co/t/unable-to-connect-between-elastic-search-and-kibana/238667 "2020-06-25T12:35:55Z")
We have elastic search on a VM and Kibana on the server. We have changed the yml file in elastic search - server IP and port of elastic search. Eg 10.142.425.3:9200 But we are unable to connect to the server Error :: U… --- ## [Not able to perform exact search](https://discuss.elastic.co/t/not-able-to-perform-exact-search/238654)
**Author:** [@aravinda](https://discuss.elastic.co/u/aravinda)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 12:09pm UTC](https://discuss.elastic.co/t/not-able-to-perform-exact-search/238654 "2020-06-25T12:09:25Z")
Iam not able to perform the exact search with the below json query. "query":{ "match":{ "fieldName":"metaData.domainName", "value" :"Business Resiliency" } } Iam getting all the record like "Transaction Resiliency… --- ## [Elastic search 2.3.2 set Domain name with Https](https://discuss.elastic.co/t/elastic-search-2-3-2-set-domain-name-with-https/238590)
**Author:** [@Manikandan\_Selvaraj](https://discuss.elastic.co/u/Manikandan_Selvaraj)\ **Replies:** 5\ **Last updated:** [June 25, 2020, 10:45am UTC](https://discuss.elastic.co/t/elastic-search-2-3-2-set-domain-name-with-https/238590 "2020-06-25T10:45:32Z")
Hi Team, We are using Elastic search 2.3.2 version. We plan to configure SSL for elastic search URL instead of HTTP to HTTPS as well mention in subDomain also password protect. We have installed Elastic search in Windo… --- ## [Elasticsearch 7.4.2 returning pinned-query not supported?](https://discuss.elastic.co/t/elasticsearch-7-4-2-returning-pinned-query-not-supported/238629)
**Author:** [@Dave\_Russell](https://discuss.elastic.co/u/Dave_Russell)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 10:26am UTC](https://discuss.elastic.co/t/elasticsearch-7-4-2-returning-pinned-query-not-supported/238629 "2020-06-25T10:26:08Z")
{ "name" : "node-test-1", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "5BDsy2RNQwioVSKUe5ZJrg", "version" : { "number" : "7.4.2", "build\_flavor" : "oss", "build\_type" : "deb", "build\_hash"… --- ## [Memory distribution on different nodes](https://discuss.elastic.co/t/memory-distribution-on-different-nodes/238477)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 9\ **Last updated:** [June 25, 2020, 10:25am UTC](https://discuss.elastic.co/t/memory-distribution-on-different-nodes/238477 "2020-06-25T10:25:37Z")
Hi All, I am new to ELK cluster model and facing few issues with it and need your help on this. Currently elasticsearch is running on 6 different nodes but memory is getting used mostly in 2 nodes. Can someone suggest ,… --- ## [How thread pool is calculated, in a cluster with different cpu core count?](https://discuss.elastic.co/t/how-thread-pool-is-calculated-in-a-cluster-with-different-cpu-core-count/238638)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 0\ **Last updated:** [June 25, 2020, 10:11am UTC](https://discuss.elastic.co/t/how-thread-pool-is-calculated-in-a-cluster-with-different-cpu-core-count/238638 "2020-06-25T10:11:50Z")
We are running a cluster, with 6 data nodes (24 cpu cores), and 2 http nodes (8 cpu cores) (receive http traffic). I can see ("/\_nodes"), each node have a a different thread pool "write" (24 max for data nodes, and 8 ma… --- ## [Most efficient way to count entries with specific fields](https://discuss.elastic.co/t/most-efficient-way-to-count-entries-with-specific-fields/237366)
**Author:** [@Jeremy\_LHEZ](https://discuss.elastic.co/u/Jeremy_LHEZ)\ **Replies:** 7\ **Last updated:** [June 25, 2020, 9:49am UTC](https://discuss.elastic.co/t/most-efficient-way-to-count-entries-with-specific-fields/237366 "2020-06-25T09:49:01Z")
Hello everyone, I am currently working on a program and I need to count the number of entries in an index containing some specific fields. I work in JAVA with a RestHighLevelClient, and I use PutStoredScriptRequest to … --- ## [Split JSON array into multiple events using ingest pipelines?](https://discuss.elastic.co/t/split-json-array-into-multiple-events-using-ingest-pipelines/238519)
**Author:** [@ianmuscat](https://discuss.elastic.co/u/ianmuscat)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 9:33am UTC](https://discuss.elastic.co/t/split-json-array-into-multiple-events-using-ingest-pipelines/238519 "2020-06-25T09:33:46Z")
I have some logs being forwarded using Filebeat to Elasticsearch which contain a JSON array. { "docs": \[ { "\_source": { ... "snapshot": \[ { "address": "127.0.0.1", … --- ## [Document lost or not indexed during bulk index](https://discuss.elastic.co/t/document-lost-or-not-indexed-during-bulk-index/236795)
**Author:** [@nerd2000](https://discuss.elastic.co/u/nerd2000)\ **Replies:** 3\ **Last updated:** [June 25, 2020, 9:23am UTC](https://discuss.elastic.co/t/document-lost-or-not-indexed-during-bulk-index/236795 "2020-06-25T09:23:09Z")
Hi, Here's the context: I have a database with 1.5M rows of data with unique ids The elastic cluster has 3 nodes on elasticsearch 7.7 The index has 9 shards with1 replica I have a python script that get the data from… --- ## [Mapping recommendations](https://discuss.elastic.co/t/mapping-recommendations/238619)
**Author:** [@111302](https://discuss.elastic.co/u/111302)\ **Replies:** 4\ **Last updated:** [June 25, 2020, 8:53am UTC](https://discuss.elastic.co/t/mapping-recommendations/238619 "2020-06-25T08:53:23Z")
Hi, I have several question regarding ES mapping. Should all the fields of the document be included in the mapping? or only those that i will search on? Are fields without mapping even searchable? if they are, how much… --- ## [Expand search result from a document id](https://discuss.elastic.co/t/expand-search-result-from-a-document-id/238616)
**Author:** [@Thomas\_Ardal](https://discuss.elastic.co/u/Thomas_Ardal)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 8:48am UTC](https://discuss.elastic.co/t/expand-search-result-from-a-document-id/238616 "2020-06-25T08:48:48Z")
I have an index of time-based data. I want to be able to expand a search result for a document with an id. Something like "show the 10 documents before and the 10 documents after document with id x". I have a couple of i… --- ## [Search froma a pdf file content](https://discuss.elastic.co/t/search-froma-a-pdf-file-content/238254)
**Author:** [@Romy\_Bobby](https://discuss.elastic.co/u/Romy_Bobby)\ **Replies:** 8\ **Last updated:** [June 25, 2020, 8:28am UTC](https://discuss.elastic.co/t/search-froma-a-pdf-file-content/238254 "2020-06-25T08:28:54Z")
Hi, I have created a trail account in ES ,installed the elastic search package and configured it. to Insert the file i have converted it to base64 format and indexed and created a type . the file can be retrieved fro… --- ## [Transforms - enabling filters as group\_by](https://discuss.elastic.co/t/transforms-enabling-filters-as-group-by/238218)
**Author:** [@Xavier\_Marti\_Bofill](https://discuss.elastic.co/u/Xavier_Marti_Bofill)\ **Replies:** 4\ **Last updated:** [June 25, 2020, 8:19am UTC](https://discuss.elastic.co/t/transforms-enabling-filters-as-group-by/238218 "2020-06-25T08:19:52Z")
Right now options for grouping by in transforms are terms, histogram and date\_histogram. Is the plan adding filters anytime soon? If not, I guess best option would be to create different transforms (one for each filter… --- ## [Ingest Node capability in heavy load of docs](https://discuss.elastic.co/t/ingest-node-capability-in-heavy-load-of-docs/238038)
**Author:** [@Jalpesh1](https://discuss.elastic.co/u/Jalpesh1)\ **Replies:** 3\ **Last updated:** [June 25, 2020, 8:11am UTC](https://discuss.elastic.co/t/ingest-node-capability-in-heavy-load-of-docs/238038 "2020-06-25T08:11:29Z")
Hi Team, I want to know capability of Ingest Node to handle heavy load of docs. Here we have 12,00,000 docs per minute will be index through Ingest Pipeline . Will Ingest Node handle this load ? Please suggest. Than… --- ## [Spark ES SSL handshake issue](https://discuss.elastic.co/t/spark-es-ssl-handshake-issue/238602)
**Author:** [@shirley](https://discuss.elastic.co/u/shirley)\ **Replies:** 0\ **Last updated:** [June 25, 2020, 6:14am UTC](https://discuss.elastic.co/t/spark-es-ssl-handshake-issue/238602 "2020-06-25T06:14:38Z")
Issue description I have Elasticsearch 6.8 enable XPack SSL. Both trust and client certificate are generated and verified through java elastic search RESTAPI client. However, when I try same trust/client certificate con… --- ## [Is the X-Pack free for user authentication?](https://discuss.elastic.co/t/is-the-x-pack-free-for-user-authentication/238605)
**Author:** [@azteker](https://discuss.elastic.co/u/azteker)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 7:18am UTC](https://discuss.elastic.co/t/is-the-x-pack-free-for-user-authentication/238605 "2020-06-25T07:18:39Z")
I just need a feature to do a user authentication with password for my ELK. Is this feature completely free now? --- ## [Querying with more than 1024 filters using an alias](https://discuss.elastic.co/t/querying-with-more-than-1024-filters-using-an-alias/238608)
**Author:** [@111302](https://discuss.elastic.co/u/111302)\ **Replies:** 0\ **Last updated:** [June 25, 2020, 6:46am UTC](https://discuss.elastic.co/t/querying-with-more-than-1024-filters-using-an-alias/238608 "2020-06-25T06:46:35Z")
Hi guys I'm performance-testing queries with a lot of filters. Since the configured value of max filters is 1024, I've increased indices.query.bool.max\_clause\_count to 10,000. So, regular queries are working fine (tak… --- ## [Unable to login via oidc azure](https://discuss.elastic.co/t/unable-to-login-via-oidc-azure/238582)
**Author:** [@clonelab](https://discuss.elastic.co/u/clonelab)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 6:35am UTC](https://discuss.elastic.co/t/unable-to-login-via-oidc-azure/238582 "2020-06-25T06:35:13Z")
Hi, I am having an issue with azuread oidc authentication to my elasticsearch. It works well but when it required to /api/security/v1/oidc? with the code it seems to have an issue and displays this error in the UI. {"s… --- ## [Open source commercial usage](https://discuss.elastic.co/t/open-source-commercial-usage/238566)
**Author:** [@Elastan](https://discuss.elastic.co/u/Elastan)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 6:21am UTC](https://discuss.elastic.co/t/open-source-commercial-usage/238566 "2020-06-25T06:21:49Z")
Is this free fully to use open source version or have any license limitations business (not talking about technicals and lack of features) --- ## [Does the Elastic Enterprise license count K8s node memory or container memory?](https://discuss.elastic.co/t/does-the-elastic-enterprise-license-count-k8s-node-memory-or-container-memory/238458)
**Author:** [@Anton\_H](https://discuss.elastic.co/u/Anton_H)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 6:20am UTC](https://discuss.elastic.co/t/does-the-elastic-enterprise-license-count-k8s-node-memory-or-container-memory/238458 "2020-06-25T06:20:02Z")
Hi, We have a Elastic Enterprise license and want to use K8s. Does de license count the node memory for licensing or the container memory for licensing? Tnx! --- ## [How much memory does single elastic search instance need for 200MB of document?](https://discuss.elastic.co/t/how-much-memory-does-single-elastic-search-instance-need-for-200mb-of-document/238217)
**Author:** [@shahidcodes](https://discuss.elastic.co/u/shahidcodes)\ **Replies:** 5\ **Last updated:** [June 25, 2020, 6:01am UTC](https://discuss.elastic.co/t/how-much-memory-does-single-elastic-search-instance-need-for-200mb-of-document/238217 "2020-06-25T06:01:10Z")
Hi, I am running a single elastic search instance, the ram consumption is always above 90% of total 4GB ram. Does elasticsearch needs alot of ram by default? --- ## [Audit logging in elasticsearch](https://discuss.elastic.co/t/audit-logging-in-elasticsearch/238550)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 6\ **Last updated:** [June 25, 2020, 5:45am UTC](https://discuss.elastic.co/t/audit-logging-in-elasticsearch/238550 "2020-06-25T05:45:16Z")
Hi, I'm trying to enable audit loging in elasticsearch, i have a 3 node cluster and on each elasticsearch.yml i added: xpack.security.audit.enabled: true xpack.security.audit.logfile.emit\_node\_host\_address: true Then … --- ## [Elasticsearch data type](https://discuss.elastic.co/t/elasticsearch-data-type/238517)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 3\ **Last updated:** [June 25, 2020, 5:40am UTC](https://discuss.elastic.co/t/elasticsearch-data-type/238517 "2020-06-25T05:40:27Z")
I have an index named users and i have a provided a field called user\_id which is int type.The question is it is accepting floating value and string value.This is the index i have created PUT /users { "mappings" : { … --- ## [java.lang.IllegalStateException: Unable to access 'path.data' (/var/lib/elasticsearch)](https://discuss.elastic.co/t/java-lang-illegalstateexception-unable-to-access-path-data-var-lib-elasticsearch/238456)
**Author:** [@natarajjk](https://discuss.elastic.co/u/natarajjk)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 4:35am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-unable-to-access-path-data-var-lib-elasticsearch/238456 "2020-06-25T04:35:54Z")
Can some let me know why i am getting this error on ELK 7.8.0 Jun 24 08:59:02 nagiosclient.sg.com systemd\[1\]: Starting Elasticsearch... Jun 24 08:59:06 nagiosclient.sg.com systemd-entrypoint\[11107\]: uncaught exception … --- ## [How to get a continuous transform to write to multiple indexes](https://discuss.elastic.co/t/how-to-get-a-continuous-transform-to-write-to-multiple-indexes/238391)
**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 3:35am UTC](https://discuss.elastic.co/t/how-to-get-a-continuous-transform-to-write-to-multiple-indexes/238391 "2020-06-25T03:35:11Z")
When I load my data through logstash I specify an index name pattern, to split the index up by time. I now have a continuous transform running, grouping by a 1 hour date histogram, against that data. Problem is it's wr… --- ## [Complex Elastic Search Query](https://discuss.elastic.co/t/complex-elastic-search-query/238587)
**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\ **Replies:** 0\ **Last updated:** [June 25, 2020, 2:35am UTC](https://discuss.elastic.co/t/complex-elastic-search-query/238587 "2020-06-25T02:35:46Z")
I have the following documents in the elastic search index. \[{ "\_index": "ten2", "\_type": "documents", "\_id": "c323c2244a4a4c22\_en-us", "\_source": { "publish\_details": \[{ "environment": "603fe91adbdcff66… --- ## [Store field as text and keyword in 7.3](https://discuss.elastic.co/t/store-field-as-text-and-keyword-in-7-3/238520)
**Author:** [@Jeremy\_A](https://discuss.elastic.co/u/Jeremy_A)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 1:58am UTC](https://discuss.elastic.co/t/store-field-as-text-and-keyword-in-7-3/238520 "2020-06-25T01:58:36Z")
I've recently migrated from 6.8 to 7.3 and noticed an apparent different in how Elasticsearch is handling my templates. Here's an excerpt from my index template: { "index\_patterns": \["xxx-\*"\], "settings":… --- ## [Matched Words are not highlighted](https://discuss.elastic.co/t/matched-words-are-not-highlighted/238452)
**Author:** [@Shubham](https://discuss.elastic.co/u/Shubham)\ **Replies:** 0\ **Last updated:** [June 24, 2020, 12:01pm UTC](https://discuss.elastic.co/t/matched-words-are-not-highlighted/238452 "2020-06-24T12:01:08Z")
I have placed highlighter in my search query and performing fuzzy search. Some of the matched words aren't highlighted in despite of fuzzy matching with two character change. For example: "James" is matching with "Thames… --- ## [Can you recover deleted documents when you didnt take s snapshot?](https://discuss.elastic.co/t/can-you-recover-deleted-documents-when-you-didnt-take-s-snapshot/238531)
**Author:** [@chappers72](https://discuss.elastic.co/u/chappers72)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 1:16am UTC](https://discuss.elastic.co/t/can-you-recover-deleted-documents-when-you-didnt-take-s-snapshot/238531 "2020-06-25T01:16:27Z")
I deleted some documents in a bulk process last night by mistake. I need to get them back, I have restores of my VM data directory but they do not appear there (as per docs). Can I get them back? [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=879) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=881)