# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=902

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 903

---

## [Matching query issue, fetching results even fields are not matching](https://discuss.elastic.co/t/matching-query-issue-fetching-results-even-fields-are-not-matching/235314)

<div class="topic-metadata">

**Author:** [@vinay123](https://discuss.elastic.co/u/vinay123)\
**Replies:** 1\
**Last updated:** [June 2, 2020, 10:44am UTC](https://discuss.elastic.co/t/matching-query-issue-fetching-results-even-fields-are-not-matching/235314 "2020-06-02T10:44:29Z")

</div>

Hello , i have array json file loaded a document in index , and i am trying to run a match query on that, results are fetching if the field parameter are wrong. , , , ' { "name":"B", "city":"B", "phone":"…

---

## [Pyspark - read nested Object field from elasticsearch](https://discuss.elastic.co/t/pyspark-read-nested-object-field-from-elasticsearch/235313)

<div class="topic-metadata">

**Author:** [@EinavTam](https://discuss.elastic.co/u/EinavTam)\
**Replies:** 0\
**Last updated:** [June 2, 2020, 10:28am UTC](https://discuss.elastic.co/t/pyspark-read-nested-object-field-from-elasticsearch/235313 "2020-06-02T10:28:49Z")

</div>

I am trying to read nested data from an Object field in elasticsearch index. The field mapping I'm trying to read looks like this: "field": { "type": "object", "enabled": fals…

---

## [Address Matching](https://discuss.elastic.co/t/address-matching/235298)

<div class="topic-metadata">

**Author:** [@Hanish\_Parmar](https://discuss.elastic.co/u/Hanish_Parmar)\
**Replies:** 0\
**Last updated:** [June 2, 2020, 8:54am UTC](https://discuss.elastic.co/t/address-matching/235298 "2020-06-02T08:54:28Z")

</div>

HI all , I'm new to Elasticsearch, my elastic search version is 7.5.1. My requirement is to match address with existing address data. Here is my address mapping, I'm not currently using any filters and analyzer. Put…

---

## [Defining repositories for rally\_tracks and rally\_teams](https://discuss.elastic.co/t/defining-repositories-for-rally-tracks-and-rally-teams/235178)

<div class="topic-metadata">

**Author:** [@xandmaga](https://discuss.elastic.co/u/xandmaga)\
**Replies:** 3\
**Last updated:** [June 2, 2020, 9:40am UTC](https://discuss.elastic.co/t/defining-repositories-for-rally-tracks-and-rally-teams/235178 "2020-06-02T09:40:27Z")

</div>

We are adopting elasticsearch in our organization, today we have one cluster, a few indexes and two projects that use this cluster. We've started the benchmarking process of the cluster a few time ago, we define some tra…

---

## [Still, i am not getting results for customers most related keywords products](https://discuss.elastic.co/t/still-i-am-not-getting-results-for-customers-most-related-keywords-products/235301)

<div class="topic-metadata">

**Author:** [@Sagar\_jain](https://discuss.elastic.co/u/Sagar_jain)\
**Replies:** 1\
**Last updated:** [June 2, 2020, 9:28am UTC](https://discuss.elastic.co/t/still-i-am-not-getting-results-for-customers-most-related-keywords-products/235301 "2020-06-02T09:28:43Z")

</div>

How to create Customer Most Interested Related Keyword search in Elastic Search? Like "Laptop" keyword Then Laptops should display first, not Laptop Bags first, not laptop stand, and other, these should display in last, …

---

## [Can't delete index by "curl -XDELETE" with Xpack security enabled "failed to authenticate user \[elastic\]"](https://discuss.elastic.co/t/cant-delete-index-by-curl-xdelete-with-xpack-security-enabled-failed-to-authenticate-user-elastic/234902)

<div class="topic-metadata">

**Author:** [@zav](https://discuss.elastic.co/u/zav)\
**Replies:** 1\
**Last updated:** [June 2, 2020, 8:48am UTC](https://discuss.elastic.co/t/cant-delete-index-by-curl-xdelete-with-xpack-security-enabled-failed-to-authenticate-user-elastic/234902 "2020-06-02T08:48:37Z")

</div>

Hi! I'm new in Elastic, and can miss something. Can anyone help me? I have single node cluster with Xpack security enabled. I can get cluster health # curl --user elastic:passwd http://127.0.0.1:9200/\_cluster/health?p…

---

## [Source of authentication](https://discuss.elastic.co/t/source-of-authentication/234975)

<div class="topic-metadata">

**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\
**Replies:** 1\
**Last updated:** [June 2, 2020, 8:43am UTC](https://discuss.elastic.co/t/source-of-authentication/234975 "2020-06-02T08:43:45Z")

</div>

How do i know from where i am getting these authentication request? How do i found source ? \[2020-05-29T12:11:33,366\]\[INFO \]\[o.e.x.s.a.AuthenticationService\] \[xxxxx-xxxxhostname\] Authentication of \[elastic\] was terminat…

---

## [Field with "dot" in value not persisting value in transform](https://discuss.elastic.co/t/field-with-dot-in-value-not-persisting-value-in-transform/235196)

<div class="topic-metadata">

**Author:** [@jayson](https://discuss.elastic.co/u/jayson)\
**Replies:** 1\
**Last updated:** [June 2, 2020, 8:40am UTC](https://discuss.elastic.co/t/field-with-dot-in-value-not-persisting-value-in-transform/235196 "2020-06-02T08:40:42Z")

</div>

I'm using Painless to do a transform for a Slack alert message. I believe I've followed the standard for using Painless to be able to persist fields that have a dot in them. However, those fields always show up as null. …

---

## [Refresh Field List not updating](https://discuss.elastic.co/t/refresh-field-list-not-updating/235292)

<div class="topic-metadata">

**Author:** [@AndyS](https://discuss.elastic.co/u/AndyS)\
**Replies:** 0\
**Last updated:** [June 2, 2020, 8:37am UTC](https://discuss.elastic.co/t/refresh-field-list-not-updating/235292 "2020-06-02T08:37:35Z")

</div>

Hi, I have created the logstash CIDR filter that adds the field name "network\_name". cidr { add\_tag =\> \[ "home\_network" \] add\_field =\> { "network\_name" =\> "home\_network" } address =\> \[ "%{…

---

## [Elasticsearch monitoring stopped abruptly](https://discuss.elastic.co/t/elasticsearch-monitoring-stopped-abruptly/234859)

<div class="topic-metadata">

**Author:** [@tamilsweet](https://discuss.elastic.co/u/tamilsweet)\
**Replies:** 4\
**Last updated:** [June 2, 2020, 8:22am UTC](https://discuss.elastic.co/t/elasticsearch-monitoring-stopped-abruptly/234859 "2020-06-02T08:22:18Z")

</div>

We have ELK cluster in Kubernetes and monitoring is enabled for Elasticsearch and was working fine. Today it stopped working. Please find the monitoring chart of Kibana below. Monitoring index for today ( .monitoring…

---

## [IndexLifecycleRunner policy index failed on step IllegalArgumentException is not the write index for alias](https://discuss.elastic.co/t/indexlifecyclerunner-policy-index-failed-on-step-illegalargumentexception-is-not-the-write-index-for-alias/235286)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 0\
**Last updated:** [June 2, 2020, 7:36am UTC](https://discuss.elastic.co/t/indexlifecyclerunner-policy-index-failed-on-step-illegalargumentexception-is-not-the-write-index-for-alias/235286 "2020-06-02T07:36:29Z")

</div>

Elasticsearch (7.7) seems to be in confusion about which indices it has rolled over and is logging: \[2020-06-02T09:23:53,425\]\[ERROR\]\[o.e.x.i.IndexLifecycleRunner\] \[ecom-repository01\] policy \[test-policy\] for index \[log…

---

## [Unable to use Xpack SQL Handle](https://discuss.elastic.co/t/unable-to-use-xpack-sql-handle/235281)

<div class="topic-metadata">

**Author:** [@Basil\_Paul](https://discuss.elastic.co/u/Basil_Paul)\
**Replies:** 4\
**Last updated:** [June 2, 2020, 7:26am UTC](https://discuss.elastic.co/t/unable-to-use-xpack-sql-handle/235281 "2020-06-02T07:26:26Z")

</div>

I had tried installing xpack. But unfortunately Iam not able to use the same. I have attached the output and command. Please help. Command GET /\_cat/plugins?v Output name component version Qreda\_Dev-1 sql 5.3.0.0 Q…

---

## [VM Warnings UseConcMarkSweepGC](https://discuss.elastic.co/t/vm-warnings-useconcmarksweepgc/235284)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 0\
**Last updated:** [June 2, 2020, 7:06am UTC](https://discuss.elastic.co/t/vm-warnings-useconcmarksweepgc/235284 "2020-06-02T07:06:40Z")

</div>

Elasticsearch 7.7 on Windows Server JAVA\_HOME=path\\to\\elasticsearch\\jdk openjdk version "14" 2020-03-17 OpenJDK Runtime Environment AdoptOpenJDK (build 14+36) OpenJDK 64-Bit Server VM AdoptOpenJDK (build 14+36, mixed m…

---

## [Failed to install template error regarding template set up](https://discuss.elastic.co/t/failed-to-install-template-error-regarding-template-set-up/235278)

<div class="topic-metadata">

**Author:** [@Raj\_Techie](https://discuss.elastic.co/u/Raj_Techie)\
**Replies:** 0\
**Last updated:** [June 2, 2020, 6:28am UTC](https://discuss.elastic.co/t/failed-to-install-template-error-regarding-template-set-up/235278 "2020-06-02T06:28:22Z")

</div>

Hi,I am getting this below error. Can anyone suggest. And one more help needed regarding template set up. Can any one guide please. Through curl I can get details using id and password same aoslo used in my logstash.con…

---

## [Error while starting elasticsearch xpack.security.enabled=true](https://discuss.elastic.co/t/error-while-starting-elasticsearch-xpack-security-enabled-true/235214)

<div class="topic-metadata">

**Author:** [@DZ1](https://discuss.elastic.co/u/DZ1)\
**Replies:** 2\
**Last updated:** [June 2, 2020, 6:11am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch-xpack-security-enabled-true/235214 "2020-06-02T06:11:13Z")

</div>

In my scenario I have started elasticsearch 7.2 first and stopped it and added following property: xpack.license.self\_generated.type: trial xpack.monitoring.collection.enabled: true And restarted elasticsearch then it …

---

## [ClusterApplierService stucks in between](https://discuss.elastic.co/t/clusterapplierservice-stucks-in-between/235275)

<div class="topic-metadata">

**Author:** [@sanyamjain](https://discuss.elastic.co/u/sanyamjain)\
**Replies:** 0\
**Last updated:** [June 2, 2020, 5:50am UTC](https://discuss.elastic.co/t/clusterapplierservice-stucks-in-between/235275 "2020-06-02T05:50:03Z")

</div>

Hi, I'm facing this behaviour frequently where a data node stops applying the cluster state but still continues to be in the cluster. I'm using ES 6.1.3. Sequence of events: 1- Node receives a cluster state, which dele…

---

## [How to delete index having special characters in name?](https://discuss.elastic.co/t/how-to-delete-index-having-special-characters-in-name/235060)

<div class="topic-metadata">

**Author:** [@Mahebub\_Sayyed](https://discuss.elastic.co/u/Mahebub_Sayyed)\
**Replies:** 1\
**Last updated:** [June 2, 2020, 5:25am UTC](https://discuss.elastic.co/t/how-to-delete-index-having-special-characters-in-name/235060 "2020-06-02T05:25:23Z")

</div>

Hi, By mistake I have created some indices with special characters in name like "log-%{\[message\]\[meta\]\[organization\]}-%{\[message\]\[proxy\]\[name\]}-2020.02.27". I tried to delete this index but getting index\_not\_found\_exce…

---

## [Sizing and capacity planning (no of shards per node per index)](https://discuss.elastic.co/t/sizing-and-capacity-planning-no-of-shards-per-node-per-index/235269)

<div class="topic-metadata">

**Author:** [@asad\_ali](https://discuss.elastic.co/u/asad_ali)\
**Replies:** 1\
**Last updated:** [June 2, 2020, 5:20am UTC](https://discuss.elastic.co/t/sizing-and-capacity-planning-no-of-shards-per-node-per-index/235269 "2020-06-02T05:20:53Z")

</div>

Hi folks, I'm doing "go-live" planning for prod-ELK, and i stumble upon few nice calculations formulas form official elastic webinar on "capacity planing and sizing". I have few confusions in shards calcs based upon fo…

---

## [Will I face race condition when performing immediate deleteByQuery and indexing operation?](https://discuss.elastic.co/t/will-i-face-race-condition-when-performing-immediate-deletebyquery-and-indexing-operation/235270)

<div class="topic-metadata">

**Author:** [@Vidhyashankar\_Madhes](https://discuss.elastic.co/u/Vidhyashankar_Madhes)\
**Replies:** 0\
**Last updated:** [June 2, 2020, 4:54am UTC](https://discuss.elastic.co/t/will-i-face-race-condition-when-performing-immediate-deletebyquery-and-indexing-operation/235270 "2020-06-02T04:54:13Z")

</div>

Query1 - deleteByquery which includes deletion of doc A Query2 - index query on doc A (with refresh=true so that change will be immediately available) ES Doc says that the deleteByQuery will take a snapshot of index an…

---

## [Received plaintext http traffic on an https channel](https://discuss.elastic.co/t/received-plaintext-http-traffic-on-an-https-channel/235187)

<div class="topic-metadata">

**Author:** [@Teed](https://discuss.elastic.co/u/Teed)\
**Replies:** 1\
**Last updated:** [June 2, 2020, 4:01am UTC](https://discuss.elastic.co/t/received-plaintext-http-traffic-on-an-https-channel/235187 "2020-06-02T04:01:11Z")

</div>

The elastic does not last me a day up, I am having problems with this and I do not know why "message": "received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/xxxx, remot…

---

## [Issue in setting up the production environment elasticsearch/Kibana?](https://discuss.elastic.co/t/issue-in-setting-up-the-production-environment-elasticsearch-kibana/235266)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 2\
**Last updated:** [June 2, 2020, 3:59am UTC](https://discuss.elastic.co/t/issue-in-setting-up-the-production-environment-elasticsearch-kibana/235266 "2020-06-02T03:59:11Z")

</div>

Hi I have setup 3 node cluster in azure environment and some how I'm able to generate auto passwords using "bin/elasticsearch-setup-passwords auto".So I'm able to check cluster health using curl query in other nodes, but…

---

## [Visualizations combinations](https://discuss.elastic.co/t/visualizations-combinations/235262)

<div class="topic-metadata">

**Author:** [@kumar\_k](https://discuss.elastic.co/u/kumar_k)\
**Replies:** 16\
**Last updated:** [June 2, 2020, 2:54am UTC](https://discuss.elastic.co/t/visualizations-combinations/235262 "2020-06-02T02:54:48Z")

</div>

I want to visualize electric load profile weekly wise. The electric load profile has the electric load readings taken for every hour on each day. Typical CSV columns are date,day,hour,load. In a day 24 readings are ta…

---

## [Change Elasticsearch configuration](https://discuss.elastic.co/t/change-elasticsearch-configuration/233457)

<div class="topic-metadata">

**Author:** [@jinjinbari](https://discuss.elastic.co/u/jinjinbari)\
**Replies:** 4\
**Last updated:** [June 2, 2020, 2:12am UTC](https://discuss.elastic.co/t/change-elasticsearch-configuration/233457 "2020-06-02T02:12:32Z")

</div>

Hi, I used Elasticsearch without shard&Replication configuration. (Because I used only for saving some logs) The data are increasing, So now I want to use shard & Replication. I already have been using 3TB. Is it poss…

---

## [Bulkresponse undefined](https://discuss.elastic.co/t/bulkresponse-undefined/233597)

<div class="topic-metadata">

**Author:** [@tcaetano1995](https://discuss.elastic.co/u/tcaetano1995)\
**Replies:** 5\
**Last updated:** [June 2, 2020, 2:04am UTC](https://discuss.elastic.co/t/bulkresponse-undefined/233597 "2020-06-02T02:04:29Z")

</div>

I'm using the node js plugin to do bulk indexing. (followed this link) The only things I've changed are the data set and the index creation (i created indices before). The code works fine to index but there is somethin…

---

## [How to create increase/decrease value in a period?](https://discuss.elastic.co/t/how-to-create-increase-decrease-value-in-a-period/235263)

<div class="topic-metadata">

**Author:** [@Reo](https://discuss.elastic.co/u/Reo)\
**Replies:** 0\
**Last updated:** [June 2, 2020, 1:26am UTC](https://discuss.elastic.co/t/how-to-create-increase-decrease-value-in-a-period/235263 "2020-06-02T01:26:59Z")

</div>

I don't know if a given value is increasing or decreasing in total value for that value every month. I would like to illustrate that this is the case. I'm thinking of realizing this using Timelion, but I'm troubled, an…

---

## [How to notify slack when the alert is completed?](https://discuss.elastic.co/t/how-to-notify-slack-when-the-alert-is-completed/235251)

<div class="topic-metadata">

**Author:** [@Rohit\_Repudi](https://discuss.elastic.co/u/Rohit_Repudi)\
**Replies:** 0\
**Last updated:** [June 1, 2020, 11:41pm UTC](https://discuss.elastic.co/t/how-to-notify-slack-when-the-alert-is-completed/235251 "2020-06-01T23:41:07Z")

</div>

Hi, I am using Elasticsearch v 7.4. I have several alerts set in Kibana and I need to track when the alert state changes from triggerd back to OK. I need to send the notification when things go back to normal.

---

## [Es-hadoop question 7.6.2](https://discuss.elastic.co/t/es-hadoop-question-7-6-2/234572)

<div class="topic-metadata">

**Author:** [@KK13](https://discuss.elastic.co/u/KK13)\
**Replies:** 0\
**Last updated:** [May 27, 2020, 3:35pm UTC](https://discuss.elastic.co/t/es-hadoop-question-7-6-2/234572 "2020-05-27T15:35:52Z")

</div>

I am trying to Index data (parent child relation). data is sent using Spark Index ------------------------------------------ PUT test\_tree { "mappings":{ "properties":{ "fam\_details": { "type":"join", \*\*"relations":\*\*{ …

---

## [Total beginner: Search UI for python queries](https://discuss.elastic.co/t/total-beginner-search-ui-for-python-queries/235242)

<div class="topic-metadata">

**Author:** [@spadel](https://discuss.elastic.co/u/spadel)\
**Replies:** 0\
**Last updated:** [June 1, 2020, 10:26pm UTC](https://discuss.elastic.co/t/total-beginner-search-ui-for-python-queries/235242 "2020-06-01T22:26:51Z")

</div>

Hey guys, I am totally new to Elastic Search and also to front end programming at all. So currently, I am working on a Natural Language Processing problem, where I want to find sentence similarities between a query sent…

---

## [Shield license version 1.6 (2020)](https://discuss.elastic.co/t/shield-license-version-1-6-2020/234991)

<div class="topic-metadata">

**Author:** [@Luis\_Plazas](https://discuss.elastic.co/u/Luis_Plazas)\
**Replies:** 3\
**Last updated:** [June 1, 2020, 10:06pm UTC](https://discuss.elastic.co/t/shield-license-version-1-6-2020/234991 "2020-06-01T22:06:24Z")

</div>

Hi, For legacy support reasons, my team needs to deploy a 1.6.2 cluster and support SSL on it. I have contacted Elastic through https://www.elastic.co/subscriptions to see if I could get a license, but this version is s…

---

## [What is the password when I use elasticsearch?](https://discuss.elastic.co/t/what-is-the-password-when-i-use-elasticsearch/234051)

<div class="topic-metadata">

**Author:** [@Jun.8](https://discuss.elastic.co/u/Jun.8)\
**Replies:** 5\
**Last updated:** [June 1, 2020, 10:03pm UTC](https://discuss.elastic.co/t/what-is-the-password-when-i-use-elasticsearch/234051 "2020-06-01T22:03:25Z")

</div>

Hi, I have a problem with the password of elasticsearch. I'm trying to study Kibana map through a tutorial video.(for South Korea) I need to use Suricata logs but I found that I have to modify my password like below. Th…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=901)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=903)
