# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=923 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 924 --- ## [Configuring SSL Elasticsearch 3 node cluster](https://discuss.elastic.co/t/configuring-ssl-elasticsearch-3-node-cluster/231988)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 3\ **Last updated:** [May 13, 2020, 3:08pm UTC](https://discuss.elastic.co/t/configuring-ssl-elasticsearch-3-node-cluster/231988 "2020-05-13T15:08:32Z")
Hello Team, We have 3 node cluster as followes 3 Master-eligible nodes - node1,node2,node3 3 Data nodes - node1,node2,node3 Kibana is running on node3 We have to configure SSL in to make the communication secure. … --- ## [95th percentile aggregation for time series like documents](https://discuss.elastic.co/t/95th-percentile-aggregation-for-time-series-like-documents/231331)
**Author:** [@nroccolsw](https://discuss.elastic.co/u/nroccolsw)\ **Replies:** 4\ **Last updated:** [May 13, 2020, 2:22pm UTC](https://discuss.elastic.co/t/95th-percentile-aggregation-for-time-series-like-documents/231331 "2020-05-13T14:22:52Z")
Hi there, I am struggling with elastic search (and finally Grafana) to display the 95th percentile value for a given time period. Consider the following setup: I have an an index called traffic: POST /traffic/\_search… --- ## [What type of node should I use for GET and PUT?](https://discuss.elastic.co/t/what-type-of-node-should-i-use-for-get-and-put/232438)
**Author:** [@Emanuel\_Velzi](https://discuss.elastic.co/u/Emanuel_Velzi)\ **Replies:** 5\ **Last updated:** [May 13, 2020, 2:13pm UTC](https://discuss.elastic.co/t/what-type-of-node-should-i-use-for-get-and-put/232438 "2020-05-13T14:13:10Z")
Hi! I have the an elasticsearch cluster, with: master nodes data nodes (hot & warm) coordinator nodes When a client like APM post documents to it, should it to aim to coordinators nodes or master nodes? What if I ad… --- ## [Elasticsearch SQL aggregation query always return 1,000 results](https://discuss.elastic.co/t/elasticsearch-sql-aggregation-query-always-return-1-000-results/231964)
**Author:** [@EREZH31](https://discuss.elastic.co/u/EREZH31)\ **Replies:** 3\ **Last updated:** [May 12, 2020, 4:13pm UTC](https://discuss.elastic.co/t/elasticsearch-sql-aggregation-query-always-return-1-000-results/231964 "2020-05-12T16:13:24Z")
I'm using elasticsearch built-in SQL for aggregation query, and the maximum number of results I get is always 1,000 - even when I set LIMIT. When I use the translate API, I understand the 1,000 is because the composite a… --- ## [Elascticsearch javax.net.ssl.SSLException: Tag mismatch!](https://discuss.elastic.co/t/elascticsearch-javax-net-ssl-sslexception-tag-mismatch/231936)
**Author:** [@Roma\_Kruglickyi](https://discuss.elastic.co/u/Roma_Kruglickyi)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 6:32am UTC](https://discuss.elastic.co/t/elascticsearch-javax-net-ssl-sslexception-tag-mismatch/231936 "2020-05-11T06:32:45Z")
I have 3 identical servers with elasticsearch 7.4.2 on Centos 7. I created cluster, 2 nodes work OK, but if I add 3rd node to the cluster , it is a lot of errors in logs and cluster become unstable. exception caught on… --- ## [PKI auth in Elasticsearch - http layer](https://discuss.elastic.co/t/pki-auth-in-elasticsearch-http-layer/231727)
**Author:** [@luis\_g](https://discuss.elastic.co/u/luis_g)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 12:58pm UTC](https://discuss.elastic.co/t/pki-auth-in-elasticsearch-http-layer/231727 "2020-05-08T12:58:12Z")
Hi, I'm trying to setup PKI for user authentication on the http layer but I always get a "missing authentication credentials for REST request \[/\_security/\_authenticate?pretty\]" After checking the documentation, here ar… --- ## [High CPU usage / High load](https://discuss.elastic.co/t/high-cpu-usage-high-load/232406)
**Author:** [@sasvmware](https://discuss.elastic.co/u/sasvmware)\ **Replies:** 2\ **Last updated:** [May 13, 2020, 10:16am UTC](https://discuss.elastic.co/t/high-cpu-usage-high-load/232406 "2020-05-13T10:16:56Z")
We see High cpu upto of 93% and load upto 11 Hot threads at 2020-05-13T09:33:20.955Z, interval=500ms, busiestThreads=3, ignoreIdleThreads=true: 87.5% (437.5ms out of 500ms) cpu usage by thread 'elasticsearch\[.xxxxxxxxx… --- ## [Beats write\_index causes single hotspots](https://discuss.elastic.co/t/beats-write-index-causes-single-hotspots/232393)
**Author:** [@coudenysj](https://discuss.elastic.co/u/coudenysj)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 10:25am UTC](https://discuss.elastic.co/t/beats-write-index-causes-single-hotspots/232393 "2020-05-13T10:25:55Z")
Hi, I'm using beats to ship most of my data to elasticsearch. I'm using the suggested ILM in a hot-warm-cold setup, which works fine. The biggest problem I see with the way beats utilizes the write\_indices with aliases… --- ## [ILM \`security\_exception\` error](https://discuss.elastic.co/t/ilm-security-exception-error/232172)
**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\ **Replies:** 2\ **Last updated:** [May 13, 2020, 10:14am UTC](https://discuss.elastic.co/t/ilm-security-exception-error/232172 "2020-05-13T10:14:53Z")
Hey there, So, I currently have a cluster running for timeseries with security enabled. There's one main ILM policy, let's call it policy1: "policy" : { "phases" : { "warm" : { "min\_age" : "0ms… --- ## [ES DSL match query is giving addition result](https://discuss.elastic.co/t/es-dsl-match-query-is-giving-addition-result/232411)
**Author:** [@Dhiraj\_Singh\_Chauhan](https://discuss.elastic.co/u/Dhiraj_Singh_Chauhan)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 10:08am UTC](https://discuss.elastic.co/t/es-dsl-match-query-is-giving-addition-result/232411 "2020-05-13T10:08:50Z")
Hi, I have written the DSL query and want the exact match of string "e2network" but my query matching with some extra strings . { "match": { "xxxxxxx.lowercase" :{ "query" :"e2network" } } } I am getting result… --- ## [Terms aggregation on keyword array](https://discuss.elastic.co/t/terms-aggregation-on-keyword-array/232271)
**Author:** [@lloadingll](https://discuss.elastic.co/u/lloadingll)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 9:57am UTC](https://discuss.elastic.co/t/terms-aggregation-on-keyword-array/232271 "2020-05-13T09:57:47Z")
Hi guys, I have a field which is keyword array: e.g. \[\] \["A"\] \["A"\] \["B"\] \["A","B"\] if I do terms aggregation on this field, I will get "A" : 3 "B" : 2 is there any way that can make the combination as the bucket k… --- ## [Can't set different values to the same field in different documents using updateByQuery](https://discuss.elastic.co/t/cant-set-different-values-to-the-same-field-in-different-documents-using-updatebyquery/232407)
**Author:** [@Shahak\_Gabay](https://discuss.elastic.co/u/Shahak_Gabay)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 9:51am UTC](https://discuss.elastic.co/t/cant-set-different-values-to-the-same-field-in-different-documents-using-updatebyquery/232407 "2020-05-13T09:51:40Z")
Hi, Using elasticsearch-7.5.2 with NEST client I'm trying to iterate through all documents in an update\_by\_query request and set different values to the same field (called wcf) in each doc. My code looks like this: va… --- ## ["error" : "Content-Type header \[application/x-www-form-urlencoded\] is not supported",](https://discuss.elastic.co/t/error-content-type-header-application-x-www-form-urlencoded-is-not-supported/231849)
**Author:** [@joaopedro](https://discuss.elastic.co/u/joaopedro)\ **Replies:** 5\ **Last updated:** [May 12, 2020, 9:10pm UTC](https://discuss.elastic.co/t/error-content-type-header-application-x-www-form-urlencoded-is-not-supported/231849 "2020-05-12T21:10:27Z")
I'm new to elasticsearch, this is literally my first cluster. I am using Windows 10 and was trying to run the following at the command line: C:\\elastic\>curl -X POST "localhost:9200/students/student/1?pretty" -d '{"joao"… --- ## [Divide users by the number of weekly sessions using aggregates from events\_index](https://discuss.elastic.co/t/divide-users-by-the-number-of-weekly-sessions-using-aggregates-from-events-index/232404)
**Author:** [@Nisrein\_Sada](https://discuss.elastic.co/u/Nisrein_Sada)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 9:40am UTC](https://discuss.elastic.co/t/divide-users-by-the-number-of-weekly-sessions-using-aggregates-from-events-index/232404 "2020-05-13T09:40:49Z")
I am trying to measure the number of users into different categories based on their weekly activities by reading the events\_log\_index ES, this index has all the user interactions from a mobile. Therefore the user might h… --- ## [Elastic Cluster Fails on Docker Swarm](https://discuss.elastic.co/t/elastic-cluster-fails-on-docker-swarm/232392)
**Author:** [@msaik3](https://discuss.elastic.co/u/msaik3)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 8:37am UTC](https://discuss.elastic.co/t/elastic-cluster-fails-on-docker-swarm/232392 "2020-05-13T08:37:17Z")
Hi, I'm trying to Deploy Elasticsearch on a 3 node Swarm cluster. with Elasticsearch -3 replicas. I'm using the following docker compose file for it: elastic\_compose.yml version: "3.7" services: elasticsearch: im… --- ## [Can I use Elasticsearch to save time-based events and get the intervals between them?](https://discuss.elastic.co/t/can-i-use-elasticsearch-to-save-time-based-events-and-get-the-intervals-between-them/232378)
**Author:** [@gabipetrovay](https://discuss.elastic.co/u/gabipetrovay)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 8:32am UTC](https://discuss.elastic.co/t/can-i-use-elasticsearch-to-save-time-based-events-and-get-the-intervals-between-them/232378 "2020-05-13T08:32:22Z")
I am receiving time-based events like the following: In March I get: { "id": "e0efc334-eeb5-4740-b983-e2e8f78d8c39", "timestamp": "2020-03-20T05:30:00Z", "state": "UP", "service": { "id": "7704b… --- ## [Kibana - Watcher Script](https://discuss.elastic.co/t/kibana-watcher-script/232389)
**Author:** [@Vidhya](https://discuss.elastic.co/u/Vidhya)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 8:20am UTC](https://discuss.elastic.co/t/kibana-watcher-script/232389 "2020-05-13T08:20:45Z")
Trying to execute the below query from Watcher in Kibana to get the result of result.input.payload.hits.total from Watcher history (last executed) and getting Null Value in result. ctx.payload.hits.hits.\_source.result.i… --- ## [Elasticsearch first backup/snapshot](https://discuss.elastic.co/t/elasticsearch-first-backup-snapshot/232285)
**Author:** [@cm-vdp](https://discuss.elastic.co/u/cm-vdp)\ **Replies:** 5\ **Last updated:** [May 13, 2020, 8:01am UTC](https://discuss.elastic.co/t/elasticsearch-first-backup-snapshot/232285 "2020-05-13T08:01:39Z")
I 'm new to eleasticsearch and I have a question about backing up the environment. I already read the documentation about backup/restore and it's clear to me. Our previous sysadmin has configured the elasticsearch envi… --- ## [Offline Elasticsearch Exporter](https://discuss.elastic.co/t/offline-elasticsearch-exporter/232379)
**Author:** [@dbakti7](https://discuss.elastic.co/u/dbakti7)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 7:31am UTC](https://discuss.elastic.co/t/offline-elasticsearch-exporter/232379 "2020-05-13T07:31:17Z")
Hi! Is there any way to perform data export from Elasticsearch data path without starting the Elasticsearch? Some googling tells me there are some tools out there to perform this, but all of them require Elasticsearch … --- ## [Is it possible to connect to different ldap realm?](https://discuss.elastic.co/t/is-it-possible-to-connect-to-different-ldap-realm/232361)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 4\ **Last updated:** [May 13, 2020, 6:33am UTC](https://discuss.elastic.co/t/is-it-possible-to-connect-to-different-ldap-realm/232361 "2020-05-13T06:33:28Z")
Hey there, Can I map 2, or more, different ldap realms? i.e. from 2 different domains? So user 1 can access with user@domain1.com and user 2 can access with user@domain2.com I did not see any limitations around this i… --- ## [Eligible H/W specs for master only node in a cluster?](https://discuss.elastic.co/t/eligible-h-w-specs-for-master-only-node-in-a-cluster/232365)
**Author:** [@joey-yoonsung](https://discuss.elastic.co/u/joey-yoonsung)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 6:08am UTC](https://discuss.elastic.co/t/eligible-h-w-specs-for-master-only-node-in-a-cluster/232365 "2020-05-13T06:08:52Z")
Hi. I'm going to setup a new elasticsearch cluster like below data and coordinator node spec. Broadwell E5-2630 v4 2P10C CPU, 64GB RAM, 4.8TB SSD. There are 30 nodes for data-node and 3 nodes for coordinator-node. I … --- ## [Problems trying to register Elasticsearch.NET/NEST in PowerShell](https://discuss.elastic.co/t/problems-trying-to-register-elasticsearch-net-nest-in-powershell/232215)
**Author:** [@syPY45Xb5n7S](https://discuss.elastic.co/u/syPY45Xb5n7S)\ **Replies:** 4\ **Last updated:** [May 13, 2020, 5:32am UTC](https://discuss.elastic.co/t/problems-trying-to-register-elasticsearch-net-nest-in-powershell/232215 "2020-05-13T05:32:12Z")
I've been looking into using elasticsearch.net and nest via powershell instead of re-inventing the wheel with all the different type of web-requests. As dotnet DLLs, it should be possible to use them with PowerShell via A… --- ## [Is there any beginner's guide to achieving better search results in elasticsearch?](https://discuss.elastic.co/t/is-there-any-beginners-guide-to-achieving-better-search-results-in-elasticsearch/232360)
**Author:** [@labuka](https://discuss.elastic.co/u/labuka)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 5:18am UTC](https://discuss.elastic.co/t/is-there-any-beginners-guide-to-achieving-better-search-results-in-elasticsearch/232360 "2020-05-13T05:18:42Z")
I have indexed the data with certain mappings inside elasticsearch, however I'm trying to understand what are all the ways to achieve better search results. Let's say a generic search and on top of that I can add filters… --- ## [Logstash can read and loaded the files into ES. But I cannot find the data in ES](https://discuss.elastic.co/t/logstash-can-read-and-loaded-the-files-into-es-but-i-cannot-find-the-data-in-es/232190)
**Author:** [@logittech](https://discuss.elastic.co/u/logittech)\ **Replies:** 5\ **Last updated:** [May 13, 2020, 3:52am UTC](https://discuss.elastic.co/t/logstash-can-read-and-loaded-the-files-into-es-but-i-cannot-find-the-data-in-es/232190 "2020-05-13T03:52:04Z")
Hi all, I'm trying to load the data into ES. It seems like Logstash can read the files and loaded it into ES. But the doc\_count in Kibana/ES show 0 and I cannot create the index pattern. I'm using ES:7.6.1; Kibana:7.6.… --- ## ['unknown key \[actor\] for create index](https://discuss.elastic.co/t/unknown-key-actor-for-create-index/232344)
**Author:** [@Kevin\_Juliano](https://discuss.elastic.co/u/Kevin_Juliano)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 2:58am UTC](https://discuss.elastic.co/t/unknown-key-actor-for-create-index/232344 "2020-05-13T02:58:29Z")
Hi Guys, I'm still familiarizing myself in Elasticsearch, Right now, I am experimenting on analyzers but when I finished the mapping and started the indexing, it gives me this error: type: 'parse\_exception'reason: 'unk… --- ## [Grouped country wise record then i want to get maximum value from each country and id](https://discuss.elastic.co/t/grouped-country-wise-record-then-i-want-to-get-maximum-value-from-each-country-and-id/232342)
**Author:** [@Ramesh\_Kumar](https://discuss.elastic.co/u/Ramesh_Kumar)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 2:30am UTC](https://discuss.elastic.co/t/grouped-country-wise-record-then-i-want-to-get-maximum-value-from-each-country-and-id/232342 "2020-05-13T02:30:31Z")
{ "aggs" : { "country\_groups" : { "terms" : { "field" : "country.keyword", "size":30000 }, "aggs":{ "max\_price":{ "max": { "field" : "video\_count"} } } } } } --- ## [Support ARM platform and Add ARM CI infrastructure](https://discuss.elastic.co/t/support-arm-platform-and-add-arm-ci-infrastructure/232002)
**Author:** [@liusheng](https://discuss.elastic.co/u/liusheng)\ **Replies:** 4\ **Last updated:** [May 13, 2020, 2:01am UTC](https://discuss.elastic.co/t/support-arm-platform-and-add-arm-ci-infrastructure/232002 "2020-05-13T02:01:30Z")
Hi folks, Currently we are trying to promote some opensource projects support building and running on ARM platform. such as Hadoop, Spark, Hbase. Elasticsearch is a very popular opensource project focus on search and an… --- ## [Post LDAP setting in elasticsearch.yml file, error seen in elasticsearch launch](https://discuss.elastic.co/t/post-ldap-setting-in-elasticsearch-yml-file-error-seen-in-elasticsearch-launch/232125)
**Author:** [@lisha7](https://discuss.elastic.co/u/lisha7)\ **Replies:** 2\ **Last updated:** [May 13, 2020, 12:20am UTC](https://discuss.elastic.co/t/post-ldap-setting-in-elasticsearch-yml-file-error-seen-in-elasticsearch-launch/232125 "2020-05-13T00:20:43Z")
Hi Team I have added LDAP setting in elasticsearch.yml file and post which if i launch elasticsearch I get below error. ---------------------------------- Various ----------------------------------- Require explicit n… --- ## [Creating index in elastic on separate user](https://discuss.elastic.co/t/creating-index-in-elastic-on-separate-user/232286)
**Author:** [@sohailm433](https://discuss.elastic.co/u/sohailm433)\ **Replies:** 1\ **Last updated:** [May 12, 2020, 11:40pm UTC](https://discuss.elastic.co/t/creating-index-in-elastic-on-separate-user/232286 "2020-05-12T23:40:51Z")
Hi, I am using elasticsearch version 6.3.0 and we have one index A create on elastic and we want to create one more index B but we need to create this index in separate userX in elastic, So that this userX has no acces… --- ## [ElasticSearch - DockerSwarm : Unable to discover nodes in cluster](https://discuss.elastic.co/t/elasticsearch-dockerswarm-unable-to-discover-nodes-in-cluster/232330)
**Author:** [@elk5](https://discuss.elastic.co/u/elk5)\ **Replies:** 0\ **Last updated:** [May 12, 2020, 11:01pm UTC](https://discuss.elastic.co/t/elasticsearch-dockerswarm-unable-to-discover-nodes-in-cluster/232330 "2020-05-12T23:01:51Z")
Hi, I am trying to configure elasticsearch and kibana on 3-node docker swarm. Here is the compose yaml file being used: ========== version: '3.3' services: elastic01: image: docker.elastic.co/elasticsearch/elastics… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=922) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=924)