# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=893

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 894

---

## [Why Binary data with doc value cost so lots of disk space? Or could I use other type instead?](https://discuss.elastic.co/t/why-binary-data-with-doc-value-cost-so-lots-of-disk-space-or-could-i-use-other-type-instead/236612)

<div class="topic-metadata">

**Author:** [@nooneuse](https://discuss.elastic.co/u/nooneuse)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 3:13pm UTC](https://discuss.elastic.co/t/why-binary-data-with-doc-value-cost-so-lots-of-disk-space-or-could-i-use-other-type-instead/236612 "2020-06-11T15:13:52Z")

</div>

Hello, (My elasticsearch version is 6.8.0) I have a lots of DataSketches binary data stored in an index as binary field. I need to deserialize them and combine them together to get the total estimate of them. So I try …

---

## [Received Token Response from OP with status \[UNAUTHORIZED\]](https://discuss.elastic.co/t/received-token-response-from-op-with-status-unauthorized/236458)

<div class="topic-metadata">

**Author:** [@mllu](https://discuss.elastic.co/u/mllu)\
**Replies:** 5\
**Last updated:** [June 11, 2020, 3:09pm UTC](https://discuss.elastic.co/t/received-token-response-from-op-with-status-unauthorized/236458 "2020-06-11T15:09:36Z")

</div>

Hi, I was trying to integrate elasticsearch and kibana with our Okta. However, I had no luck to make it work. I enabled trace and got some error messages as shown below. It mentioned something like Received Token Respo…

---

## [Is it possible to route documents indexed through an alias to an index under that alias by timestamp?](https://discuss.elastic.co/t/is-it-possible-to-route-documents-indexed-through-an-alias-to-an-index-under-that-alias-by-timestamp/236728)

<div class="topic-metadata">

**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 2:53pm UTC](https://discuss.elastic.co/t/is-it-possible-to-route-documents-indexed-through-an-alias-to-an-index-under-that-alias-by-timestamp/236728 "2020-06-11T14:53:15Z")

</div>

I want to be able to send an upsert to an alias, and for it to route the document to an index that comes under that alias based on a timestamp field in the document. So if I'm updating an existing (but older) document, i…

---

## [clusterHealthCheckParams failing in readiness probe on startup](https://discuss.elastic.co/t/clusterhealthcheckparams-failing-in-readiness-probe-on-startup/236726)

<div class="topic-metadata">

**Author:** [@a3984](https://discuss.elastic.co/u/a3984)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 2:45pm UTC](https://discuss.elastic.co/t/clusterhealthcheckparams-failing-in-readiness-probe-on-startup/236726 "2020-06-11T14:45:20Z")

</div>

I am trying to deploy elasticsearch with xpack security enabled but when i use the official helm charts, i get an error with "wait for status green". I have tried a "wait for status yellow" and get the same error and I …

---

## [Bug in pipeline date filter](https://discuss.elastic.co/t/bug-in-pipeline-date-filter/236234)

<div class="topic-metadata">

**Author:** [@Richard\_Neely](https://discuss.elastic.co/u/Richard_Neely)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 2:21pm UTC](https://discuss.elastic.co/t/bug-in-pipeline-date-filter/236234 "2020-06-11T14:21:35Z")

</div>

Trying to parse some zookeeper logs as below but no matter the month in the timestamp it is always set to 01 and never gets ingested. ##Sample simulate. { "docs": \[ { "\_index": "filebeat-7.7…

---

## [Aggregation retuns null buckets](https://discuss.elastic.co/t/aggregation-retuns-null-buckets/236520)

<div class="topic-metadata">

**Author:** [@Harikrishna\_Sarvaiya](https://discuss.elastic.co/u/Harikrishna_Sarvaiya)\
**Replies:** 9\
**Last updated:** [June 11, 2020, 1:32pm UTC](https://discuss.elastic.co/t/aggregation-retuns-null-buckets/236520 "2020-06-11T13:32:52Z")

</div>

I have one query which does aggregation on day interval for specified date range (like last month). Data is sorted based on 'MyUsage' field to return top 5 'FldNameWise'. Problem is it retuns null aggregations for some …

---

## [Ngram analyzer configure with startswith logic](https://discuss.elastic.co/t/ngram-analyzer-configure-with-startswith-logic/236699)

<div class="topic-metadata">

**Author:** [@buka\_bidzina](https://discuss.elastic.co/u/buka_bidzina)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 1:13pm UTC](https://discuss.elastic.co/t/ngram-analyzer-configure-with-startswith-logic/236699 "2020-06-11T13:13:04Z")

</div>

Hello everyone.. Currently i am using ngram analyzer which is analyzing text like that way: forinstance: Apple iPhone -\> app, appl, apple, ppl, pple,ple,iph,ipho,hone and so on. But I want it to create tokens like th…

---

## [How to prioritize exact match using nGram tokenizer? Solved, see solution](https://discuss.elastic.co/t/how-to-prioritize-exact-match-using-ngram-tokenizer-solved-see-solution/235823)

<div class="topic-metadata">

**Author:** [@buka\_bidzina](https://discuss.elastic.co/u/buka_bidzina)\
**Replies:** 10\
**Last updated:** [June 11, 2020, 12:16pm UTC](https://discuss.elastic.co/t/how-to-prioritize-exact-match-using-ngram-tokenizer-solved-see-solution/235823 "2020-06-11T12:16:23Z")

</div>

Hello All, I am wondering, how to rank an exact match higher than the ngram matches. For instance: If I search for asus It scores higher casual than asus or if I search for app it gives me first laptop and than it gi…

---

## [How to set limit log elasticsearch + filebeat](https://discuss.elastic.co/t/how-to-set-limit-log-elasticsearch-filebeat/236505)

<div class="topic-metadata">

**Author:** [@111304](https://discuss.elastic.co/u/111304)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 11:03am UTC](https://discuss.elastic.co/t/how-to-set-limit-log-elasticsearch-filebeat/236505 "2020-06-11T11:03:33Z")

</div>

Hi everyone, there is a setting forasticsearch + filebeat. I want to limit the number of logs that come in elasticsearch. There is a set of servers, about 20,000 events from different sets of files that filebeat scans th…

---

## [Elasticsearch Expansion and upgrading](https://discuss.elastic.co/t/elasticsearch-expansion-and-upgrading/236666)

<div class="topic-metadata">

**Author:** [@wangcc7](https://discuss.elastic.co/u/wangcc7)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 9:50am UTC](https://discuss.elastic.co/t/elasticsearch-expansion-and-upgrading/236666 "2020-06-11T09:50:53Z")

</div>

Set discovery.zen.ping.unicast.hosts For all nodes hostname, Data synchronization is slow. Is there a fast way to synchronize It's terrible. The backstage reminds me of this

---

## [Hashing index fields using elasticsearch](https://discuss.elastic.co/t/hashing-index-fields-using-elasticsearch/236657)

<div class="topic-metadata">

**Author:** [@MarcoV](https://discuss.elastic.co/u/MarcoV)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 9:14am UTC](https://discuss.elastic.co/t/hashing-index-fields-using-elasticsearch/236657 "2020-06-11T09:14:05Z")

</div>

Hi all, I have a question. In my index I have two fields that I want merge into a third field and than I whish to hash this "new field" using elasticsearch' script processor. For exemple: My index: field1: foo1 fiel…

---

## [How to store data in elastic search & access it?](https://discuss.elastic.co/t/how-to-store-data-in-elastic-search-access-it/236628)

<div class="topic-metadata">

**Author:** [@Hamendra\_Sunthwal](https://discuss.elastic.co/u/Hamendra_Sunthwal)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 9:11am UTC](https://discuss.elastic.co/t/how-to-store-data-in-elastic-search-access-it/236628 "2020-06-11T09:11:57Z")

</div>

I am working on to store , wishlist items in server in Vue + magento setup How to store data in elastic search ?

---

## [Write genric search query using nest C# client](https://discuss.elastic.co/t/write-genric-search-query-using-nest-c-client/236555)

<div class="topic-metadata">

**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\
**Replies:** 3\
**Last updated:** [June 11, 2020, 8:59am UTC](https://discuss.elastic.co/t/write-genric-search-query-using-nest-c-client/236555 "2020-06-11T08:59:09Z")

</div>

Hi i am trying to use nest client for c# to write search query . i know these ways of writing query var searchresponse = client.Search\<test\>(s =\> s .From(0) …

---

## [Field exists check in enrich ingest pipeline](https://discuss.elastic.co/t/field-exists-check-in-enrich-ingest-pipeline/236653)

<div class="topic-metadata">

**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 8:57am UTC](https://discuss.elastic.co/t/field-exists-check-in-enrich-ingest-pipeline/236653 "2020-06-11T08:57:05Z")

</div>

Hi I am using enricher in ingest pipeline to enrch the data for incoming documents. In few incoming documents, the matching field is not exist and throwing an error while inserting the document. How to check the condit…

---

## [Can't get index.max\_result\_window for Elasticsearch 7 working](https://discuss.elastic.co/t/cant-get-index-max-result-window-for-elasticsearch-7-working/235189)

<div class="topic-metadata">

**Author:** [@Alexey\_Pshenichnov](https://discuss.elastic.co/u/Alexey_Pshenichnov)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 8:43am UTC](https://discuss.elastic.co/t/cant-get-index-max-result-window-for-elasticsearch-7-working/235189 "2020-06-11T08:43:13Z")

</div>

For some reason I cannot set index.max\_result\_window from https://www.elastic.co/guide/en/elasticsearch/reference/current/index-modules.html#dynamic-index-settings I have tried different options like PUT /articles/\_set…

---

## [Elasticsearch cluster problems](https://discuss.elastic.co/t/elasticsearch-cluster-problems/236611)

<div class="topic-metadata">

**Author:** [@kase](https://discuss.elastic.co/u/kase)\
**Replies:** 4\
**Last updated:** [June 11, 2020, 8:04am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-problems/236611 "2020-06-11T08:04:34Z")

</div>

Hi there, I want to create elasticsearch cluster, but encountered some problems... my os version: ubuntu 18.04 my elasticsearch version: 7.7 my java version: openjdk version "11.0.7" 2020-04-14 OpenJDK Runtime Envi…

---

## [What coordinate system does geopoint use?](https://discuss.elastic.co/t/what-coordinate-system-does-geopoint-use/236634)

<div class="topic-metadata">

**Author:** [@Lo\_ading](https://discuss.elastic.co/u/Lo_ading)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 7:31am UTC](https://discuss.elastic.co/t/what-coordinate-system-does-geopoint-use/236634 "2020-06-11T07:31:35Z")

</div>

ES version is 7.6 geo\_shape datatype support GeoJSON:Point , here description is \[Elasticsearch uses WGS-84 coordinates only\] . but geo\_point datatype no description with coordinate system support, i want to know what …

---

## [Searching for strings with Special characters in ElasticSearch Scripts](https://discuss.elastic.co/t/searching-for-strings-with-special-characters-in-elasticsearch-scripts/236623)

<div class="topic-metadata">

**Author:** [@vkandiva](https://discuss.elastic.co/u/vkandiva)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 6:11am UTC](https://discuss.elastic.co/t/searching-for-strings-with-special-characters-in-elasticsearch-scripts/236623 "2020-06-11T06:11:22Z")

</div>

How do I escape special characters in Elastic Search Scripts? For example: I need to search for a string like "{NY} Albany" or "{CA} San Diego" in my script below: { "size": 0, "aggs": { "Test":…

---

## [Active Directory Role Mappings to Groups](https://discuss.elastic.co/t/active-directory-role-mappings-to-groups/236621)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 6:35am UTC](https://discuss.elastic.co/t/active-directory-role-mappings-to-groups/236621 "2020-06-11T06:35:15Z")

</div>

Hey, I am trying to map roles to AD groups. But can't get it working. I tried the following PUT /\_security/role\_mapping/Lvl-3 { "roles" : \[ "Level\_3" \], "rules" : { "field" : { "groups" : "OU=Ops\_Intel\_Groups,OU=A…

---

## [Es query mapping and agg](https://discuss.elastic.co/t/es-query-mapping-and-agg/236619)

<div class="topic-metadata">

**Author:** [@Zephery\_Wen](https://discuss.elastic.co/u/Zephery_Wen)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 4:55am UTC](https://discuss.elastic.co/t/es-query-mapping-and-agg/236619 "2020-06-11T04:55:21Z")

</div>

How to realize agg according to dynamic map's key? PUT aaa/1 { "name": { "first": "Alice", "1": "John" }, "age": 26, "joiningDate": "2015-10-15" } PUT aaa/2 { "name": { "second": "Blob", "1"…

---

## [Fscrawler create duplicates](https://discuss.elastic.co/t/fscrawler-create-duplicates/236618)

<div class="topic-metadata">

**Author:** [@Ostr1969](https://discuss.elastic.co/u/Ostr1969)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 4:41am UTC](https://discuss.elastic.co/t/fscrawler-create-duplicates/236618 "2020-06-11T04:41:18Z")

</div>

After stopping fscrawler job and then starting again with the same job name. It reindexes all documents and create duplicates. How can I avoid it?

---

## [How to update java file permission for elasticsearch running on docker](https://discuss.elastic.co/t/how-to-update-java-file-permission-for-elasticsearch-running-on-docker/234869)

<div class="topic-metadata">

**Author:** [@ravinder](https://discuss.elastic.co/u/ravinder)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 4:06am UTC](https://discuss.elastic.co/t/how-to-update-java-file-permission-for-elasticsearch-running-on-docker/234869 "2020-06-11T04:06:06Z")

</div>

Hi , I see below exception when posting a new elasticsearch template. { "error": { "root\_cause": \[ { "type": "access\_control\_exception", "reason": "access denied ("java.io.FilePermission" "/app/elk/docker/dev/home…

---

## [Elasticsearch Primary/Replica DocFreq Not In Sync](https://discuss.elastic.co/t/elasticsearch-primary-replica-docfreq-not-in-sync/236599)

<div class="topic-metadata">

**Author:** [@Hubert\_Pham](https://discuss.elastic.co/u/Hubert_Pham)\
**Replies:** 0\
**Last updated:** [June 11, 2020, 2:18am UTC](https://discuss.elastic.co/t/elasticsearch-primary-replica-docfreq-not-in-sync/236599 "2020-06-11T02:18:17Z")

</div>

Using an explain query, I'm seeing a drastic difference in the docFreqs between a query with preference for \_primary vs one for \_replica. The index is restored from a snapshot from a 5.4.3 cluster to a 6.8.6 cluster. …

---

## [Elasticsearch service won't start](https://discuss.elastic.co/t/elasticsearch-service-wont-start/236591)

<div class="topic-metadata">

**Author:** [@ckunkel](https://discuss.elastic.co/u/ckunkel)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 1:11am UTC](https://discuss.elastic.co/t/elasticsearch-service-wont-start/236591 "2020-06-11T01:11:40Z")

</div>

I started out by installing jdk-14.0.1 and setting JAVA\_HOME environment variable to C:\\Program Files\\Java\\jdk-14.0.1 elasticsearch-service install worked, but the service won't start. Logs say \[2020-06-10 03:10:14\] …

---

## [Unknown key \[productid\] for create index](https://discuss.elastic.co/t/unknown-key-productid-for-create-index/236581)

<div class="topic-metadata">

**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\
**Replies:** 1\
**Last updated:** [June 10, 2020, 11:36pm UTC](https://discuss.elastic.co/t/unknown-key-productid-for-create-index/236581 "2020-06-10T23:36:26Z")

</div>

Hi following are my mapping { "dynamic" : "true", "\_meta" : { }, "\_source" : { "includes" : \[ \], "excludes" : \[ \] }, "dynamic\_date\_formats" : \[ "strict\_date\_optional\_time", "yyyy/MM/dd HH:mm:s…

---

## [Get field mapping API with nested field](https://discuss.elastic.co/t/get-field-mapping-api-with-nested-field/236580)

<div class="topic-metadata">

**Author:** [@Peliser](https://discuss.elastic.co/u/Peliser)\
**Replies:** 0\
**Last updated:** [June 10, 2020, 8:49pm UTC](https://discuss.elastic.co/t/get-field-mapping-api-with-nested-field/236580 "2020-06-10T20:49:20Z")

</div>

Hi everyone! I am using the Get field mapping API to check if a field exists in Elasticsearch. My index is: "mappings": { "dynamic": "strict", "properties": { "\_customer": { "type": "nested…

---

## [Multi match query and the scoring](https://discuss.elastic.co/t/multi-match-query-and-the-scoring/236573)

<div class="topic-metadata">

**Author:** [@gitterhh](https://discuss.elastic.co/u/gitterhh)\
**Replies:** 0\
**Last updated:** [June 10, 2020, 7:45pm UTC](https://discuss.elastic.co/t/multi-match-query-and-the-scoring/236573 "2020-06-10T19:45:35Z")

</div>

I have couple documents in the index, and 2 of them are { "id" : "c0706549-d06c-4043-8086-1b4b3ec1ef95", "title" : "Google Pixel XL", "memory" : "4GB", "quantity" : 3 } { …

---

## [Elasticsearch not starting after remove indices from one one out of three](https://discuss.elastic.co/t/elasticsearch-not-starting-after-remove-indices-from-one-one-out-of-three/236569)

<div class="topic-metadata">

**Author:** [@NISHANT\_KHARAT](https://discuss.elastic.co/u/NISHANT_KHARAT)\
**Replies:** 0\
**Last updated:** [June 10, 2020, 7:04pm UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-after-remove-indices-from-one-one-out-of-three/236569 "2020-06-10T19:04:37Z")

</div>

tail -f elastic-logs.log at org.elasticsearch.gateway.GatewayMetaState.upgradeMetaData(GatewayMetaState.java:141) ~\[elasticsearch-7.4.1.jar:7.4.1\] at org.elasticsearch.gateway.GatewayMetaState.(GatewayMetaState.java:95…

---

## [Unable to delete remote cluster from Kibana](https://discuss.elastic.co/t/unable-to-delete-remote-cluster-from-kibana/236521)

<div class="topic-metadata">

**Author:** [@chinmoy\_padhi](https://discuss.elastic.co/u/chinmoy_padhi)\
**Replies:** 0\
**Last updated:** [June 10, 2020, 2:11pm UTC](https://discuss.elastic.co/t/unable-to-delete-remote-cluster-from-kibana/236521 "2020-06-10T14:11:17Z")

</div>

Hi, I am unable to delete the Remote cluster from Kibana both from UI and through PUT request PUT \_cluster/settings { "persistent": { "cluster": { "remote": { "cluster\_two": { "mode": nul…

---

## [Right role to access https://$ES\_HOST/\_stats](https://discuss.elastic.co/t/right-role-to-access-https-es-host-stats/235872)

<div class="topic-metadata">

**Author:** [@Rajesh\_Kodali](https://discuss.elastic.co/u/Rajesh_Kodali)\
**Replies:** 1\
**Last updated:** [June 10, 2020, 6:06pm UTC](https://discuss.elastic.co/t/right-role-to-access-https-es-host-stats/235872 "2020-06-10T18:06:52Z")

</div>

I have created a role with Cluster Privileges monitor and monitor\_watcher and attached to user. Using the user creds I get the below error: Error, sdchecks\[499898\] Exception on running check elasticsearch: HTTPE…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=892)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=894)
