# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=937 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 938 --- ## [Indexing (storing) large binary object](https://discuss.elastic.co/t/indexing-storing-large-binary-object/230454)
**Author:** [@McKittrick\_Kaminski](https://discuss.elastic.co/u/McKittrick_Kaminski)\ **Replies:** 7\ **Last updated:** [April 30, 2020, 3:01pm UTC](https://discuss.elastic.co/t/indexing-storing-large-binary-object/230454 "2020-04-30T15:01:54Z")
Hello guys. I'm making a plugin for Kibana, in which I want to store executables in Elasticsearch. (I know it sounds weird, trust me, there's a good reason for it.). I've developed the client side code that will read t… --- ## [Indices size is very big](https://discuss.elastic.co/t/indices-size-is-very-big/230567)
**Author:** [@devops\_army](https://discuss.elastic.co/u/devops_army)\ **Replies:** 1\ **Last updated:** [April 30, 2020, 2:51pm UTC](https://discuss.elastic.co/t/indices-size-is-very-big/230567 "2020-04-30T14:51:32Z")
Hi All, I had configured ELK stack deployed in Kubernetes and there are multiple components deployed and logs will be stored using ELK. On an average , per day index size is 30GB and how couple of weeks I can see my ind… --- ## [How to run filebeat on azure app service](https://discuss.elastic.co/t/how-to-run-filebeat-on-azure-app-service/230564)
**Author:** [@Dheeraj\_Bhargav](https://discuss.elastic.co/u/Dheeraj_Bhargav)\ **Replies:** 1\ **Last updated:** [April 30, 2020, 2:29pm UTC](https://discuss.elastic.co/t/how-to-run-filebeat-on-azure-app-service/230564 "2020-04-30T14:29:58Z")
Hello, Has anyone got Filebeat to work in an Azure App Service? I'm interested in how I can send the IIS logs using the IIS module from Filebeat running as a webjob to our Elastic cloud cluster. Please let me know, Th… --- ## [How to compress ELK indexes in Elasticsearch](https://discuss.elastic.co/t/how-to-compress-elk-indexes-in-elasticsearch/230504)
**Author:** [@janmichae.reyes4](https://discuss.elastic.co/u/janmichae.reyes4)\ **Replies:** 2\ **Last updated:** [April 30, 2020, 1:34pm UTC](https://discuss.elastic.co/t/how-to-compress-elk-indexes-in-elasticsearch/230504 "2020-04-30T13:34:42Z")
hi, Seeking your assistance on how or best practices in compressing all indexes in Elasticsearch to reduce the disk usage. i really appreciate the help on this. Thank you, --- ## [Fail to load SSL configuration while using docker image](https://discuss.elastic.co/t/fail-to-load-ssl-configuration-while-using-docker-image/230283)
**Author:** [@x0rcist](https://discuss.elastic.co/u/x0rcist)\ **Replies:** 7\ **Last updated:** [April 30, 2020, 1:18pm UTC](https://discuss.elastic.co/t/fail-to-load-ssl-configuration-while-using-docker-image/230283 "2020-04-30T13:18:14Z")
Hi, Trying to install Elasticsearch latest version via docker. I have created certificate already and pushing it to image like below, excerpt from yml volumes: - ./elastic-stack-ca.p12:/usr/share/elasticsearch/config… --- ## [\[ElasticSearch 7.6.2\] Client requested protocol TLSv1 is not enabled or supported in server context](https://discuss.elastic.co/t/elasticsearch-7-6-2-client-requested-protocol-tlsv1-is-not-enabled-or-supported-in-server-context/230547)
**Author:** [@Ahmed\_Abdulaleem](https://discuss.elastic.co/u/Ahmed_Abdulaleem)\ **Replies:** 1\ **Last updated:** [April 30, 2020, 1:16pm UTC](https://discuss.elastic.co/t/elasticsearch-7-6-2-client-requested-protocol-tlsv1-is-not-enabled-or-supported-in-server-context/230547 "2020-04-30T13:16:03Z")
Good Day, are there a way to force elastic search use TLSV1 when negotiating with client the client is a web application running under IIS web server. Error Log: javax.net.ssl.SSLHandshakeException: Client requeste… --- ## [org.elasticsearch.action.search.SearchPhaseExecutionException: all shards failed in Spring Boot](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed-in-spring-boot/230544)
**Author:** [@Dhwanil\_Patel](https://discuss.elastic.co/u/Dhwanil_Patel)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 12:19pm UTC](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed-in-spring-boot/230544 "2020-04-30T12:19:58Z")
First of all sorry if i missed something. Actually i'm new in elasticsearch. Now comes to the point, I'm working on spring boot project built via jhipster. In which, I specify index name "Document" with following conf… --- ## [Agg last 15 minutes returning just last 2 minutes](https://discuss.elastic.co/t/agg-last-15-minutes-returning-just-last-2-minutes/229978)
**Author:** [@Elad\_Ben-aderet](https://discuss.elastic.co/u/Elad_Ben-aderet)\ **Replies:** 18\ **Last updated:** [April 30, 2020, 11:32am UTC](https://discuss.elastic.co/t/agg-last-15-minutes-returning-just-last-2-minutes/229978 "2020-04-30T11:32:21Z")
GET forensics/\_search { "query": { "bool": { "must": \[ { "range": { "@timestamp": { "gte": "now-1d/d", "lte": "now" } } … --- ## [Indices.cache.filter.size](https://discuss.elastic.co/t/indices-cache-filter-size/230522)
**Author:** [@Rajeev\_Bhat](https://discuss.elastic.co/u/Rajeev_Bhat)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 11:12am UTC](https://discuss.elastic.co/t/indices-cache-filter-size/230522 "2020-04-30T11:12:50Z")
I tried this : curl -X PUT "localhost:9200/\_cluster/settings?flat\_settings=true&pretty" -H 'Content-Type: application/json' -d'{ "transient" : {"indices.queries.cache.size" : "20%"}}' Getting this { "error" : { … --- ## [Cambiar tipo keyword por otro mas adecuado](https://discuss.elastic.co/t/cambiar-tipo-keyword-por-otro-mas-adecuado/230327)
**Author:** [@sumaca](https://discuss.elastic.co/u/sumaca)\ **Replies:** 2\ **Last updated:** [April 30, 2020, 10:57am UTC](https://discuss.elastic.co/t/cambiar-tipo-keyword-por-otro-mas-adecuado/230327 "2020-04-30T10:57:06Z")
Hola, soy novata y tengo muchas dudas, voy a comenzar por la mas básica, he transformado un Excel a csv y lo he indexado, una de mis columnas es h:mm:ss, pero al indexarlo me lo asigna como keyword y no puedo operar , no… --- ## [Connection Timed Out Occasionally using PHP Client](https://discuss.elastic.co/t/connection-timed-out-occasionally-using-php-client/230497)
**Author:** [@rohan\_5894](https://discuss.elastic.co/u/rohan_5894)\ **Replies:** 1\ **Last updated:** [April 30, 2020, 10:12am UTC](https://discuss.elastic.co/t/connection-timed-out-occasionally-using-php-client/230497 "2020-04-30T10:12:08Z")
Hi, I have ES 7.6.2 installed on my AWS EC2 Ubuntu instance and it was working perfectly fine from months. Today i updated some security Ubuntu packages and after that the PHP client is getting timed out in most of the … --- ## [Production cluster recommendation settings](https://discuss.elastic.co/t/production-cluster-recommendation-settings/230515)
**Author:** [@AshishUser](https://discuss.elastic.co/u/AshishUser)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 10:03am UTC](https://discuss.elastic.co/t/production-cluster-recommendation-settings/230515 "2020-04-30T10:03:12Z")
Hi Team, I have been working on elk stack to buildout the new env for CICD logging. I would like to understand following for production env Is there any best practices guide for building out production env? Hows much … --- ## [DSL range quesry](https://discuss.elastic.co/t/dsl-range-quesry/230476)
**Author:** [@Billz1026](https://discuss.elastic.co/u/Billz1026)\ **Replies:** 1\ **Last updated:** [April 30, 2020, 9:49am UTC](https://discuss.elastic.co/t/dsl-range-quesry/230476 "2020-04-30T09:49:51Z")
Hi all, I am using Easticsearch to analyze Syslog data. I want to filter logs between two time stamps on a given day. I have used following DSL query to do that in Kibana but, it is not giving the exact result I want. … --- ## [Algorithm names used by X -Pack ML and where to find that](https://discuss.elastic.co/t/algorithm-names-used-by-x-pack-ml-and-where-to-find-that/230488)
**Author:** [@Anuradha\_K](https://discuss.elastic.co/u/Anuradha_K)\ **Replies:** 1\ **Last updated:** [April 30, 2020, 9:39am UTC](https://discuss.elastic.co/t/algorithm-names-used-by-x-pack-ml-and-where-to-find-that/230488 "2020-04-30T09:39:15Z")
what are the algorithms used by X pack ML and where to find them --- ## [Hot Warm Architecture With 2 VM](https://discuss.elastic.co/t/hot-warm-architecture-with-2-vm/230511)
**Author:** [@shashanksinghal](https://discuss.elastic.co/u/shashanksinghal)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 9:34am UTC](https://discuss.elastic.co/t/hot-warm-architecture-with-2-vm/230511 "2020-04-30T09:34:36Z")
Hi Team, I am new to ELK and tried to read as much as I could. I came to the conclusion that I would want to implement a hot warm architecture for my setup. Unfortunately my client has provided me with limited VMs and C… --- ## [How to convert and use an API query into equivalent SQL query in a java class](https://discuss.elastic.co/t/how-to-convert-and-use-an-api-query-into-equivalent-sql-query-in-a-java-class/230026)
**Author:** [@Rahul\_layall](https://discuss.elastic.co/u/Rahul_layall)\ **Replies:** 1\ **Last updated:** [April 30, 2020, 8:40am UTC](https://discuss.elastic.co/t/how-to-convert-and-use-an-api-query-into-equivalent-sql-query-in-a-java-class/230026 "2020-04-30T08:40:24Z")
Hello Sir, I am executing simple SQL queries from my java class and they are giving me equivalent result as I am executing queries from my java class like this boolean ret1=stat.execute("select name from index\_name"); … --- ## [Updating documents with deterministic ID in older index after rollover](https://discuss.elastic.co/t/updating-documents-with-deterministic-id-in-older-index-after-rollover/230313)
**Author:** [@Tomasz\_Szymanski](https://discuss.elastic.co/u/Tomasz_Szymanski)\ **Replies:** 2\ **Last updated:** [April 30, 2020, 8:28am UTC](https://discuss.elastic.co/t/updating-documents-with-deterministic-id-in-older-index-after-rollover/230313 "2020-04-30T08:28:42Z")
Hi Guys, I have system where I retrieve data from different sources from .NET project, put it on a rabbitmq queue, grab them from logstash, and logstash indexes these data in my elasticsearch. Recently I introduced ind… --- ## [Elasticsearch multi-layer remote cluster is invalid](https://discuss.elastic.co/t/elasticsearch-multi-layer-remote-cluster-is-invalid/230294)
**Author:** [@jiankunking](https://discuss.elastic.co/u/jiankunking)\ **Replies:** 2\ **Last updated:** [April 30, 2020, 7:57am UTC](https://discuss.elastic.co/t/elasticsearch-multi-layer-remote-cluster-is-invalid/230294 "2020-04-30T07:57:22Z")
Initial requirements elastic/kibana#64267 Set up the es cluster as shown below： However, the following anomalies are found: at org.elasticsearch.transport.InboundHandler.handleResponse(InboundHandler.java:214) ~\[el… --- ## [Getting sudden bursts of CPU](https://discuss.elastic.co/t/getting-sudden-bursts-of-cpu/230190)
**Author:** [@fgourichon](https://discuss.elastic.co/u/fgourichon)\ **Replies:** 2\ **Last updated:** [April 30, 2020, 7:37am UTC](https://discuss.elastic.co/t/getting-sudden-bursts-of-cpu/230190 "2020-04-30T07:37:01Z")
Hi there, We just started using Elasticsearch Services and we're facing a few issues we could get help with. Our setup and use cases are quite simple: One index containing 14M documents (orders), used for plain text … --- ## [LDAP config problem](https://discuss.elastic.co/t/ldap-config-problem/227492)
**Author:** [@Mateuszpk](https://discuss.elastic.co/u/Mateuszpk)\ **Replies:** 23\ **Last updated:** [April 30, 2020, 7:31am UTC](https://discuss.elastic.co/t/ldap-config-problem/227492 "2020-04-30T07:31:25Z")
Hi I have a problem with LDAP configuration and integration with Acitive directory. I don;t have any response form elastic when I tried to logon using AD user. I activate the DBUG trace for LDAP auth but still ELK log… --- ## [Shard Allocation taking time](https://discuss.elastic.co/t/shard-allocation-taking-time/230484)
**Author:** [@Thilak](https://discuss.elastic.co/u/Thilak)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 7:15am UTC](https://discuss.elastic.co/t/shard-allocation-taking-time/230484 "2020-04-30T07:15:40Z")
Hello, Whenever we are adding a new node to the cluster. Exactly two shards in a particular index are taking a long time around ( 30 minutes ) to allocate. This is happening whenever we are adding a new node to the clust… --- ## [Third node on cluster shuts down periodically](https://discuss.elastic.co/t/third-node-on-cluster-shuts-down-periodically/230387)
**Author:** [@javiroberts](https://discuss.elastic.co/u/javiroberts)\ **Replies:** 5\ **Last updated:** [April 30, 2020, 7:15am UTC](https://discuss.elastic.co/t/third-node-on-cluster-shuts-down-periodically/230387 "2020-04-30T07:15:20Z")
I've been running a 3 node cluster of Elasticsearch 6.8.0 for over a year now. Since it is up and running it only runs with 2 nodes, and every time I join the third node it stops working. In this case the nodes running … --- ## [Smart Search query](https://discuss.elastic.co/t/smart-search-query/230477)
**Author:** [@darkslayer](https://discuss.elastic.co/u/darkslayer)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 6:59am UTC](https://discuss.elastic.co/t/smart-search-query/230477 "2020-04-30T06:59:02Z")
I want to write a query to be able to search across all fields in my Elasticsearch index. I used the bulk API to insert data to es and didn't choose any particular analyzer while indexing. By default my fields will be an… --- ## [RestHighLevel Client : Failed to connect to localhost port 9200: Connection refused](https://discuss.elastic.co/t/resthighlevel-client-failed-to-connect-to-localhost-port-9200-connection-refused/230310)
**Author:** [@Amit\_Porwal](https://discuss.elastic.co/u/Amit_Porwal)\ **Replies:** 4\ **Last updated:** [April 30, 2020, 6:58am UTC](https://discuss.elastic.co/t/resthighlevel-client-failed-to-connect-to-localhost-port-9200-connection-refused/230310 "2020-04-30T06:58:00Z")
Learning ELK stack.I had spent ample of time on it, haven't find any solution yet.Any help would be greatly appreciated. I just referred to this article to create this basic demo. https://www.journaldev.com/18148/spri… --- ## [Error when trying to add a snapshot policy on ELK ECE](https://discuss.elastic.co/t/error-when-trying-to-add-a-snapshot-policy-on-elk-ece/230463)
**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 5:35am UTC](https://discuss.elastic.co/t/error-when-trying-to-add-a-snapshot-policy-on-elk-ece/230463 "2020-04-30T05:35:11Z")
Hello! I've encountered this error when I tried to add a snapshot policy to my ELK cluster (on ECE): { "error" : { "root\_cause" : \[ { "type" : "invalid\_index\_name\_exception", "reason" : "Inv… --- ## [Why shard unassigned after cluster restart completely?](https://discuss.elastic.co/t/why-shard-unassigned-after-cluster-restart-completely/230460)
**Author:** [@wfeng888](https://discuss.elastic.co/u/wfeng888)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 3:30am UTC](https://discuss.elastic.co/t/why-shard-unassigned-after-cluster-restart-completely/230460 "2020-04-30T03:30:57Z")
I have a cluster with 3 nodes, all have node.master: true and node.data: true. Almost every index loss one or two shards either primary or replica after i restart three nodes 1 by one. All indices have settings of 5 pr… --- ## [Where to start with custom query types](https://discuss.elastic.co/t/where-to-start-with-custom-query-types/230459)
**Author:** [@emarthinsen](https://discuss.elastic.co/u/emarthinsen)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 3:11am UTC](https://discuss.elastic.co/t/where-to-start-with-custom-query-types/230459 "2020-04-30T03:11:40Z")
This is, slightly, hypothetical, but let's say that I wanted to do something like index a matrix and then do a search based upon which documents had a matrix closest to the matrix that I'm searching for. How would I exte… --- ## [New index create by policy DOES NOT APPLY the POLICY](https://discuss.elastic.co/t/new-index-create-by-policy-does-not-apply-the-policy/229900)
**Author:** [@DawitCh](https://discuss.elastic.co/u/DawitCh)\ **Replies:** 2\ **Last updated:** [April 30, 2020, 2:52am UTC](https://discuss.elastic.co/t/new-index-create-by-policy-does-not-apply-the-policy/229900 "2020-04-30T02:52:58Z")
The problem I met is the same as the topic. For more detail is that, I create ILM Policy (it should be delete after 2 hours) Create index name test-000001 with alias test Apply the policy to test-000001 1-hour pass it… --- ## [Add New Multiple Path Data in Elastic](https://discuss.elastic.co/t/add-new-multiple-path-data-in-elastic/230453)
**Author:** [@paulnick](https://discuss.elastic.co/u/paulnick)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 12:06am UTC](https://discuss.elastic.co/t/add-new-multiple-path-data-in-elastic/230453 "2020-04-30T00:06:55Z")
hello I'm a new user at ELK, I have a problem, the ELK server is almost full. So I added a multi path.data configuration in elasticsearch.yml. the following configuration: path: data: - /home/elasticsearch/data/… --- ## [How to update a elasticsearch cluster to new version when some field is not stored](https://discuss.elastic.co/t/how-to-update-a-elasticsearch-cluster-to-new-version-when-some-field-is-not-stored/230452)
**Author:** [@Deng](https://discuss.elastic.co/u/Deng)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 12:05am UTC](https://discuss.elastic.co/t/how-to-update-a-elasticsearch-cluster-to-new-version-when-some-field-is-not-stored/230452 "2020-04-30T00:05:34Z")
As the document said： If you have indices created in 5.x or before, you must reindex or delete them before upgrading to 7.6.2. I have indices when some field have excluded from "\_source" because these field are just ind… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=936) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=938)