# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=901 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 902 --- ## [Elasticsearch SQL - HAVING query seems to have broken](https://discuss.elastic.co/t/elasticsearch-sql-having-query-seems-to-have-broken/235312)
**Author:** [@flxdan](https://discuss.elastic.co/u/flxdan)\ **Replies:** 1\ **Last updated:** [June 3, 2020, 6:11am UTC](https://discuss.elastic.co/t/elasticsearch-sql-having-query-seems-to-have-broken/235312 "2020-06-03T06:11:12Z")
For reporting purposes I created a SQL query to report when a winlogbeat agent hasn't sent any data within the last hour: POST \_sql?format=txt { "query": """ select agent.hostname, max("@timestamp") … --- ## [Recover .kibana index from file backup](https://discuss.elastic.co/t/recover-kibana-index-from-file-backup/235456)
**Author:** [@EricW](https://discuss.elastic.co/u/EricW)\ **Replies:** 4\ **Last updated:** [June 3, 2020, 5:46am UTC](https://discuss.elastic.co/t/recover-kibana-index-from-file-backup/235456 "2020-06-03T05:46:33Z")
Hi All, I was silly enough to delete the .kibana index without a restore, but I do have a file based backup of previous state. Unfortunately, I can't find any documentation that details the process for restoring just t… --- ## [Monitoring history duration not getting updated elastic search 6.8.1](https://discuss.elastic.co/t/monitoring-history-duration-not-getting-updated-elastic-search-6-8-1/235465)
**Author:** [@pawanpanjwani](https://discuss.elastic.co/u/pawanpanjwani)\ **Replies:** 0\ **Last updated:** [June 3, 2020, 5:10am UTC](https://discuss.elastic.co/t/monitoring-history-duration-not-getting-updated-elastic-search-6-8-1/235465 "2020-06-03T05:10:23Z")
Hi, I have been trying to update the monitoring indices duration from default of 7 days to 1 day. I have tried updating the cluster settings and have also tried updating the elasticsearch.yml. However the change is not… --- ## [Appropriate env for g1gc on Elastic Search](https://discuss.elastic.co/t/appropriate-env-for-g1gc-on-elastic-search/235461)
**Author:** [@hschoi](https://discuss.elastic.co/u/hschoi)\ **Replies:** 0\ **Last updated:** [June 3, 2020, 4:46am UTC](https://discuss.elastic.co/t/appropriate-env-for-g1gc-on-elastic-search/235461 "2020-06-03T04:46:45Z")
Hello. I'm using Elastic Search 6.8.5 and JVM dk8u252-b09. I want to change Garbage Collector to G1GC from CMS. So, must we upgrade version of elastic search? I think I need to upgrade jvm version 11. And I want to … --- ## [Azure AD authentication to Kibana](https://discuss.elastic.co/t/azure-ad-authentication-to-kibana/235230)
**Author:** [@brettlarsonwci](https://discuss.elastic.co/u/brettlarsonwci)\ **Replies:** 7\ **Last updated:** [June 2, 2020, 3:46pm UTC](https://discuss.elastic.co/t/azure-ad-authentication-to-kibana/235230 "2020-06-02T15:46:55Z")
Hello all - I've scowered the archives of blog posts and similar questions regarding configuration of Azure AD for authentication to Kibana. I have updated my elasticsearch.yml file with the settings as best as I can fi… --- ## [Importing csv through machine learning](https://discuss.elastic.co/t/importing-csv-through-machine-learning/235439)
**Author:** [@kumar\_k](https://discuss.elastic.co/u/kumar_k)\ **Replies:** 1\ **Last updated:** [June 3, 2020, 1:48am UTC](https://discuss.elastic.co/t/importing-csv-through-machine-learning/235439 "2020-06-03T01:48:48Z")
Hi, I have a csv with two columns. one having date in the format 2019/04/30 Tuesday 08:00:00 and second column a float value So i have created mappings like below: ''' PUT /lt\_ts1 { "mappings": { "properties": { … --- ## [More than 1000 fields](https://discuss.elastic.co/t/more-than-1000-fields/235434)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 0\ **Last updated:** [June 3, 2020, 12:59am UTC](https://discuss.elastic.co/t/more-than-1000-fields/235434 "2020-06-03T00:59:44Z")
If my indexes have more than 1000 fields, should I split them? I can't just have more fields in indexes? Accually I don't know where is problem of this max 1000 fields. I query them anyway with 'index-\*' so few at one ti… --- ## [Unable to run the default rollup job](https://discuss.elastic.co/t/unable-to-run-the-default-rollup-job/235426)
**Author:** [@jdevilla20](https://discuss.elastic.co/u/jdevilla20)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 11:58pm UTC](https://discuss.elastic.co/t/unable-to-run-the-default-rollup-job/235426 "2020-06-02T23:58:59Z")
Hi I am trying to use rollup jobs to aggregate some queries. Here is my Elasticsearch version: { "name" : "localhost-0", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "W6oclkz3SqK7GO3NnVyhGg", "version" :… --- ## [ES-hadoop support for Percolate queries](https://discuss.elastic.co/t/es-hadoop-support-for-percolate-queries/235423)
**Author:** [@Varun\_Juneja](https://discuss.elastic.co/u/Varun_Juneja)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 11:45pm UTC](https://discuss.elastic.co/t/es-hadoop-support-for-percolate-queries/235423 "2020-06-02T23:45:38Z")
Hi I have an existing ES cluster and I want to connect it to a spark cluster using es-hadoop. My usecase is to make use of the Percolate search available in ES. Does the ES-Hadoop integration now support the Percolate … --- ## [Geojson to Elasticsearch : Failed to parse field \[geometry.coordinates\] of type \[geo\_shape\]](https://discuss.elastic.co/t/geojson-to-elasticsearch-failed-to-parse-field-geometry-coordinates-of-type-geo-shape/235261)
**Author:** [@Scorpion21](https://discuss.elastic.co/u/Scorpion21)\ **Replies:** 2\ **Last updated:** [June 2, 2020, 11:26pm UTC](https://discuss.elastic.co/t/geojson-to-elasticsearch-failed-to-parse-field-geometry-coordinates-of-type-geo-shape/235261 "2020-06-02T23:26:14Z")
I am trying to indexing geojson file into elasticsearch (version 7.6.2) using Python. Here is the mapping I defined in elasticsearch. 'mappings': { "properties": { "geometry": { "properties": { "coo… --- ## [Elasticsearch Cluster (Mixed OS)](https://discuss.elastic.co/t/elasticsearch-cluster-mixed-os/231452)
**Author:** [@111305](https://discuss.elastic.co/u/111305)\ **Replies:** 2\ **Last updated:** [June 2, 2020, 11:00pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-mixed-os/231452 "2020-06-02T23:00:28Z")
Hi, I'm plan to config 3-node Elasticsearch cluster as below. node 1 : master-node (OS : Windows) node 2 : data - node1 (OS : :Linux) node 3 : data - node 2 (OS : Linux) Is it possible to configure between differe… --- ## [Updating existing mapping to add custom analyzer in Elasticsearch 6.7](https://discuss.elastic.co/t/updating-existing-mapping-to-add-custom-analyzer-in-elasticsearch-6-7/235108)
**Author:** [@username1234](https://discuss.elastic.co/u/username1234)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 10:49pm UTC](https://discuss.elastic.co/t/updating-existing-mapping-to-add-custom-analyzer-in-elasticsearch-6-7/235108 "2020-06-02T22:49:32Z")
Hello, I have an existing index on Elasticsearch 6.7 that I would like to update the mappings on. On a test instance of Elasticsearch 6.7, I set up the index with the mapping and attempted a PUT call to update the mappi… --- ## [Can Fscrawler rotate images for Tesseract-OCR?](https://discuss.elastic.co/t/can-fscrawler-rotate-images-for-tesseract-ocr/235382)
**Author:** [@morningkaren](https://discuss.elastic.co/u/morningkaren)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 9:38pm UTC](https://discuss.elastic.co/t/can-fscrawler-rotate-images-for-tesseract-ocr/235382 "2020-06-02T21:38:35Z")
Hi, I have been using fscrawler and tesseract-ocr to process pdfs and I realized that images that are rotated or slightly titled cannot be OCR-ed well. Is there a way to add a rotation element into the fscrawler/tesser… --- ## [Elasticsearch scoring and filter context](https://discuss.elastic.co/t/elasticsearch-scoring-and-filter-context/235397)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 7:00pm UTC](https://discuss.elastic.co/t/elasticsearch-scoring-and-filter-context/235397 "2020-06-02T19:00:47Z")
We are working on building a internal query language that converts to ES7 query. I'd like to know what are the implications of generating the following kinds of queries in ES #1.1 { "query": { "bool": { "mu… --- ## [Fetching one field from every inner hit (docvalue\_field VS source filtering)](https://discuss.elastic.co/t/fetching-one-field-from-every-inner-hit-docvalue-field-vs-source-filtering/201024)
**Author:** [@menshenin](https://discuss.elastic.co/u/menshenin)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 9:06pm UTC](https://discuss.elastic.co/t/fetching-one-field-from-every-inner-hit-docvalue-field-vs-source-filtering/201024 "2020-06-02T21:06:32Z")
Hi, I have an index that stores complex documents with multiple nested fields, but as a query result I always need only one field from the nested document (some uid). How should I do: just turn off the \_source and take… --- ## [Ingest shapefile into Elasticsearch with GDAL](https://discuss.elastic.co/t/ingest-shapefile-into-elasticsearch-with-gdal/235104)
**Author:** [@Scorpion21](https://discuss.elastic.co/u/Scorpion21)\ **Replies:** 3\ **Last updated:** [June 2, 2020, 7:07pm UTC](https://discuss.elastic.co/t/ingest-shapefile-into-elasticsearch-with-gdal/235104 "2020-06-02T19:07:13Z")
I am trying to index shapefile into Elasticsearch. The geometry type is Multipolygon. By following this blog post I try this cmd: ogr2ogr -lco INDEX\_NAME=test -lco NOT\_ANALYZED\_FIELDS={ALL} ES:http://localhost:920… --- ## [Can one ElasticSearch Index be used to calculate all metrics and do visualization in Kibana](https://discuss.elastic.co/t/can-one-elasticsearch-index-be-used-to-calculate-all-metrics-and-do-visualization-in-kibana/235379)
**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 5:05pm UTC](https://discuss.elastic.co/t/can-one-elasticsearch-index-be-used-to-calculate-all-metrics-and-do-visualization-in-kibana/235379 "2020-06-02T17:05:40Z")
This is a general question. I find that not all metrics are implementable from one index in ElasticSearch. Case in point if we have a dataset that is as follows (ts = timestamp long integer) (email = User email who log… --- ## [Rank and sort results of range query?](https://discuss.elastic.co/t/rank-and-sort-results-of-range-query/234052)
**Author:** [@kgeographer](https://discuss.elastic.co/u/kgeographer)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 4:58pm UTC](https://discuss.elastic.co/t/rank-and-sort-results-of-range-query/234052 "2020-06-02T16:58:28Z")
As far as I can tell, all docs with a range field overlapped by a query range with the default INTERSECTS operator are returned with a score of 1. However, I would like to rank results by the extent of that intersection… --- ## [What if dedicated master node goes down and another node takes over as master?](https://discuss.elastic.co/t/what-if-dedicated-master-node-goes-down-and-another-node-takes-over-as-master/235334)
**Author:** [@jasonperrone](https://discuss.elastic.co/u/jasonperrone)\ **Replies:** 6\ **Last updated:** [June 2, 2020, 3:31pm UTC](https://discuss.elastic.co/t/what-if-dedicated-master-node-goes-down-and-another-node-takes-over-as-master/235334 "2020-06-02T15:31:49Z")
So, I have a three node cluster. Each of the nodes are master eligible, data nodes and ingest nodes. I did that because, well, I only have three nodes. But I am thinking, do I really need my indices replicated in three … --- ## [How to get the IP address of the HTTP request sender](https://discuss.elastic.co/t/how-to-get-the-ip-address-of-the-http-request-sender/235289)
**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Replies:** 4\ **Last updated:** [June 2, 2020, 3:18pm UTC](https://discuss.elastic.co/t/how-to-get-the-ip-address-of-the-http-request-sender/235289 "2020-06-02T15:18:49Z")
Hi, I need to get the ip address, the person who hits our server URL then his machine ip should capture in elk output.(In kibana discover page through Logstash output) Can anybody please help me using Logstash --- ## [How to splite one field to N fields with pipelineAPI](https://discuss.elastic.co/t/how-to-splite-one-field-to-n-fields-with-pipelineapi/235353)
**Author:** [@kin122](https://discuss.elastic.co/u/kin122)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 2:18pm UTC](https://discuss.elastic.co/t/how-to-splite-one-field-to-n-fields-with-pipelineapi/235353 "2020-06-02T14:18:05Z")
there is a field like "versions":"1.20.44",. I want to splite the value of "versions" using the dots as a separator,and turn then into three new fields named "major","mid","mini". HOW? --- ## [Elasticsearch service accounts - Windows](https://discuss.elastic.co/t/elasticsearch-service-accounts-windows/235352)
**Author:** [@vladtepes](https://discuss.elastic.co/u/vladtepes)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 1:41pm UTC](https://discuss.elastic.co/t/elasticsearch-service-accounts-windows/235352 "2020-06-02T13:41:01Z")
Is anybody aware of scenarios, where the service accounts for elasticsearch, kibana and beats would need to be changed with domain accounts? As far as I see it can work as it is by default with Local System. --- ## [Elasticsearch data migration](https://discuss.elastic.co/t/elasticsearch-data-migration/235268)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 4\ **Last updated:** [June 2, 2020, 1:37pm UTC](https://discuss.elastic.co/t/elasticsearch-data-migration/235268 "2020-06-02T13:37:47Z")
Hi I need to migrate data from Elasticsearch on premises to Elasticsearch Cloud Is there any documentation I can refer?? --- ## [How can we have the field containing the information elasticsearch](https://discuss.elastic.co/t/how-can-we-have-the-field-containing-the-information-elasticsearch/235350)
**Author:** [@Kou\_Abd](https://discuss.elastic.co/u/Kou_Abd)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 1:34pm UTC](https://discuss.elastic.co/t/how-can-we-have-the-field-containing-the-information-elasticsearch/235350 "2020-06-02T13:34:16Z")
Hello Community,I'm new in elasticsearch I'm looking for information in the index but in all the fields so I don't know where it exists and in which fields. I would like to know if there is a way to modify the highligh… --- ## [Using settings from elasticsearch.yml in a plugin](https://discuss.elastic.co/t/using-settings-from-elasticsearch-yml-in-a-plugin/235322)
**Author:** [@rahulkarajgikar](https://discuss.elastic.co/u/rahulkarajgikar)\ **Replies:** 2\ **Last updated:** [June 2, 2020, 1:28pm UTC](https://discuss.elastic.co/t/using-settings-from-elasticsearch-yml-in-a-plugin/235322 "2020-06-02T13:28:52Z")
Hi, I'm creating a plugin that blacklists certain API calls. Right now I've created a .yml file in the src/main/resources directory of my project, where I read the blacklisted APIs from. The problem is, if I want to ad… --- ## [Elastic Search integration with Magneto 2.3.3 Version](https://discuss.elastic.co/t/elastic-search-integration-with-magneto-2-3-3-version/234680)
**Author:** [@parthipan\_p](https://discuss.elastic.co/u/parthipan_p)\ **Replies:** 8\ **Last updated:** [June 2, 2020, 1:20pm UTC](https://discuss.elastic.co/t/elastic-search-integration-with-magneto-2-3-3-version/234680 "2020-06-02T13:20:43Z")
I am getting empty results while searching for the frontend. Got the below error in log file. main.CRITICAL: {"error":{"root\_cause":\[{"type":"query\_shard\_exception","reason":"No mapping found for \[position~asc\] in order… --- ## [ELK Stack configuration backup](https://discuss.elastic.co/t/elk-stack-configuration-backup/235335)
**Author:** [@Amine\_Maalfi](https://discuss.elastic.co/u/Amine_Maalfi)\ **Replies:** 1\ **Last updated:** [June 2, 2020, 12:58pm UTC](https://discuss.elastic.co/t/elk-stack-configuration-backup/235335 "2020-06-02T12:58:38Z")
Hi everyone, I want to backup all my elasticsearch and logstash configurations and i don't know in which files are some configurations stored. can anyone please help me know all the configuration files (settings,securi… --- ## [Unable to connect elasticsearch with ldap realm](https://discuss.elastic.co/t/unable-to-connect-elasticsearch-with-ldap-realm/231339)
**Author:** [@bansalhp](https://discuss.elastic.co/u/bansalhp)\ **Replies:** 4\ **Last updated:** [June 2, 2020, 12:45pm UTC](https://discuss.elastic.co/t/unable-to-connect-elasticsearch-with-ldap-realm/231339 "2020-06-02T12:45:14Z")
Hi. We are planing to migrate our elasticseach security from Searchguard to xpac security. Below is the error we are getting while connecting to elasticseach via ldap realm \[2020-05-06T04:46:53,557\]\[DEBUG\]\[o.e.x.s.a.A… --- ## [DSL query for matching two document fields](https://discuss.elastic.co/t/dsl-query-for-matching-two-document-fields/235333)
**Author:** [@billy1](https://discuss.elastic.co/u/billy1)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 12:22pm UTC](https://discuss.elastic.co/t/dsl-query-for-matching-two-document-fields/235333 "2020-06-02T12:22:28Z")
Dears , am new to elastic community , i need your help to to write elastic query i have many documents created through logstash and i want to get the result were the documents have same result in different field , "… --- ## [Plugin failed to load YAML file due to java.security.AccessControlException](https://discuss.elastic.co/t/plugin-failed-to-load-yaml-file-due-to-java-security-accesscontrolexception/235326)
**Author:** [@gzc](https://discuss.elastic.co/u/gzc)\ **Replies:** 0\ **Last updated:** [June 2, 2020, 11:55am UTC](https://discuss.elastic.co/t/plugin-failed-to-load-yaml-file-due-to-java-security-accesscontrolexception/235326 "2020-06-02T11:55:42Z")
I want my plugin to load yaml file, but it threw java.security.AccessControlException. Log org.yaml.snakeyaml.constructor.ConstructorException: Can't construct a java object for tag:yaml.org,2002:com.linkdoc.elasticsea… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=900) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=902)