# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=939

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 940

---

## [Facing error while i am trying to connect my JAVA connection class to ElasticSearch](https://discuss.elastic.co/t/facing-error-while-i-am-trying-to-connect-my-java-connection-class-to-elasticsearch/229792)

<div class="topic-metadata">

**Author:** [@Rahul\_layall](https://discuss.elastic.co/u/Rahul_layall)\
**Replies:** 2\
**Last updated:** [April 29, 2020, 9:09am UTC](https://discuss.elastic.co/t/facing-error-while-i-am-trying-to-connect-my-java-connection-class-to-elasticsearch/229792 "2020-04-29T09:09:56Z")

</div>

Hello Sir, I have created a class in my JAVA project so that i can run SQL queries and fetch the result from Elastic Search Here is my code: package javaConn; import java.sql.Connection; import java.sql.Driver; imp…

---

## [Enabling security on production cluster without downtime](https://discuss.elastic.co/t/enabling-security-on-production-cluster-without-downtime/230105)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 4\
**Last updated:** [April 29, 2020, 5:36am UTC](https://discuss.elastic.co/t/enabling-security-on-production-cluster-without-downtime/230105 "2020-04-29T05:36:22Z")

</div>

Need advice: is there a way how to enable security on multi-node production cluster without downtime? in tutorial https://www.elastic.co/guide/en/elasticsearch/reference/current/security-getting-started.html it is de…

---

## [Why is my composite aggregation faster than a terms bucket aggregation for a high cardinality field?](https://discuss.elastic.co/t/why-is-my-composite-aggregation-faster-than-a-terms-bucket-aggregation-for-a-high-cardinality-field/230324)

<div class="topic-metadata">

**Author:** [@gideongrossman](https://discuss.elastic.co/u/gideongrossman)\
**Replies:** 0\
**Last updated:** [April 29, 2020, 7:32am UTC](https://discuss.elastic.co/t/why-is-my-composite-aggregation-faster-than-a-terms-bucket-aggregation-for-a-high-cardinality-field/230324 "2020-04-29T07:32:24Z")

</div>

I am creating a terms aggregation on a high cardinality field. It takes 4 seconds. That's too long. I notice that if I restructure the query as a composite aggregation, it takes way less time ~400ms. Why might this be? C…

---

## [Cannot add a node to cluster on remote host](https://discuss.elastic.co/t/cannot-add-a-node-to-cluster-on-remote-host/228606)

<div class="topic-metadata">

**Author:** [@yk928](https://discuss.elastic.co/u/yk928)\
**Replies:** 4\
**Last updated:** [April 29, 2020, 7:12am UTC](https://discuss.elastic.co/t/cannot-add-a-node-to-cluster-on-remote-host/228606 "2020-04-29T07:12:24Z")

</div>

Hi, I've been running an Elasticsearch instance using Docker and docker-compose on host A. The configs are version: '2.2' services: es01: build: . container\_name: es01 environment: - node.name=es01…

---

## [Elasticsearch key-container extension](https://discuss.elastic.co/t/elasticsearch-key-container-extension/230315)

<div class="topic-metadata">

**Author:** [@JavaDeveloper](https://discuss.elastic.co/u/JavaDeveloper)\
**Replies:** 0\
**Last updated:** [April 29, 2020, 6:42am UTC](https://discuss.elastic.co/t/elasticsearch-key-container-extension/230315 "2020-04-29T06:42:52Z")

</div>

Purpose: Optimize the Elasticsearch for IoT applications (huge volume of streaming data). search in specific section not whole of data store. Please look at the GridDB architecture (a key-container No-SQL database) fo…

---

## [Data dir on dedicated disk filling up](https://discuss.elastic.co/t/data-dir-on-dedicated-disk-filling-up/230305)

<div class="topic-metadata">

**Author:** [@upietz](https://discuss.elastic.co/u/upietz)\
**Replies:** 0\
**Last updated:** [April 29, 2020, 6:08am UTC](https://discuss.elastic.co/t/data-dir-on-dedicated-disk-filling-up/230305 "2020-04-29T06:08:07Z")

</div>

Hi there, we are running a 7.4.1 cluster with 8 data nodes. These nodes have several data dirs, each of which are backed by dedicated disks (mounted directly to path.data dirs). Everything working like a charm so far, e…

---

## [Enabling xpack security on elasticsearch](https://discuss.elastic.co/t/enabling-xpack-security-on-elasticsearch/230267)

<div class="topic-metadata">

**Author:** [@NishilBisht](https://discuss.elastic.co/u/NishilBisht)\
**Replies:** 3\
**Last updated:** [April 29, 2020, 5:37am UTC](https://discuss.elastic.co/t/enabling-xpack-security-on-elasticsearch/230267 "2020-04-29T05:37:04Z")

</div>

Hi Team, We have elastic stack with the following components: 5 ES nodes running on 7.6.1 version Kibana - 7.6.1 version 2 Logstash - 7.6.1 version We also have filebeat and metricbeat (both 7.6.0 ) running on alot …

---

## [Book: ElasticSearch in Action](https://discuss.elastic.co/t/book-elasticsearch-in-action/229116)

<div class="topic-metadata">

**Author:** [@emarthinsen](https://discuss.elastic.co/u/emarthinsen)\
**Replies:** 2\
**Last updated:** [April 29, 2020, 4:43am UTC](https://discuss.elastic.co/t/book-elasticsearch-in-action/229116 "2020-04-29T04:43:09Z")

</div>

Is the book "ElasticSearch in Action" still relevant? It was published back in 2015, so it's a solid 5 years old - which is ages in the software world. I'm looking for a book that will get me deeper into understanding ES…

---

## [How can i take user action in elasticsearch or kibana](https://discuss.elastic.co/t/how-can-i-take-user-action-in-elasticsearch-or-kibana/230275)

<div class="topic-metadata">

**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\
**Replies:** 1\
**Last updated:** [April 29, 2020, 3:02am UTC](https://discuss.elastic.co/t/how-can-i-take-user-action-in-elasticsearch-or-kibana/230275 "2020-04-29T03:02:30Z")

</div>

Our ELK has 10 users like, A, B, C, D. I want to monitor user action by log. However, our system uses 'Basic' license so we can't log user action to log when i activate the audit configuration. So is there any other m…

---

## [Elasticsearch version 5.4.3 .bulk insert with so many disk reads,but there is no merge operation the same time](https://discuss.elastic.co/t/elasticsearch-version-5-4-3-bulk-insert-with-so-many-disk-reads-but-there-is-no-merge-operation-the-same-time/229390)

<div class="topic-metadata">

**Author:** [@wfeng888](https://discuss.elastic.co/u/wfeng888)\
**Replies:** 20\
**Last updated:** [April 29, 2020, 1:04am UTC](https://discuss.elastic.co/t/elasticsearch-version-5-4-3-bulk-insert-with-so-many-disk-reads-but-there-is-no-merge-operation-the-same-time/229390 "2020-04-29T01:04:40Z")

</div>

my cluster has one node，16 core cpu，64G total ram，28G jvm heap，index settings is: { "testshardread": { "settings": { "index": { "refresh\_interval": "-1", "indexing": { "slowlog": { "level": "info", "threshold": …

---

## [Import data](https://discuss.elastic.co/t/import-data/229874)

<div class="topic-metadata">

**Author:** [@inchirah](https://discuss.elastic.co/u/inchirah)\
**Replies:** 1\
**Last updated:** [April 29, 2020, 12:48am UTC](https://discuss.elastic.co/t/import-data/229874 "2020-04-29T00:48:21Z")

</div>

Hello, I build a web app with flask. Through a button the user gonna choose a csv file from a desktop and when he clicks to submit a config file gonna run to import that file (the user previously chosen) into ES. So I g…

---

## [Run config file from a web app](https://discuss.elastic.co/t/run-config-file-from-a-web-app/230199)

<div class="topic-metadata">

**Author:** [@inchirah](https://discuss.elastic.co/u/inchirah)\
**Replies:** 1\
**Last updated:** [April 29, 2020, 12:47am UTC](https://discuss.elastic.co/t/run-config-file-from-a-web-app/230199 "2020-04-29T00:47:35Z")

</div>

Hello, I build a web app with flask. Through a button the user gonna choose a csv file from his desktop and when he clicks to submit a LOGSTASH config file gonna run to import that file (the user previously chosen) into…

---

## [Encryption at Rest of ES data in cloud](https://discuss.elastic.co/t/encryption-at-rest-of-es-data-in-cloud/230263)

<div class="topic-metadata">

**Author:** [@ArunaKannan](https://discuss.elastic.co/u/ArunaKannan)\
**Replies:** 2\
**Last updated:** [April 29, 2020, 12:07am UTC](https://discuss.elastic.co/t/encryption-at-rest-of-es-data-in-cloud/230263 "2020-04-29T00:07:22Z")

</div>

Hello All, How do we encrypt ES data at rest on cloud. I read that dm-crypt is not for cloud solution. What are the options for hosting in cloud and what is the general industry standard for keeping logs and other dat…

---

## [How to restrict shard and replica to specific node](https://discuss.elastic.co/t/how-to-restrict-shard-and-replica-to-specific-node/230271)

<div class="topic-metadata">

**Author:** [@Taewoo](https://discuss.elastic.co/u/Taewoo)\
**Replies:** 1\
**Last updated:** [April 28, 2020, 11:42pm UTC](https://discuss.elastic.co/t/how-to-restrict-shard-and-replica-to-specific-node/230271 "2020-04-28T23:42:58Z")

</div>

Hello? I'm newbie to Elasticsearch. Consider there are 1 master nodes and 6 data nodes(A,B,C,D,E,F). I'd like to put 'log\_a' index's shard and replica to first three nodes(A,B,C). I'd like to put 'lob\_b' index's shard…

---

## [Questions around \`update\_by\_query\` endpoint](https://discuss.elastic.co/t/questions-around-update-by-query-endpoint/230264)

<div class="topic-metadata">

**Author:** [@ljak](https://discuss.elastic.co/u/ljak)\
**Replies:** 0\
**Last updated:** [April 28, 2020, 10:42pm UTC](https://discuss.elastic.co/t/questions-around-update-by-query-endpoint/230264 "2020-04-28T22:42:57Z")

</div>

Hi everyone, Just read the doc page Update By Query API | Elasticsearch Guide \[8.11\] | Elastic and have some questions: all failures that are returned by the failing bulk request are returned in the failures element; …

---

## [How is Docker/Docker-Compose getting in the way?](https://discuss.elastic.co/t/how-is-docker-docker-compose-getting-in-the-way/230048)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 14\
**Last updated:** [April 28, 2020, 9:03pm UTC](https://discuss.elastic.co/t/how-is-docker-docker-compose-getting-in-the-way/230048 "2020-04-28T21:03:26Z")

</div>

I use docker-compose to keep most of my configuration in git for various applications. For the past few days I've been trying to get a test Elasticsearch cluster up and running. After way too much troubleshooting, I've n…

---

## [How to combine transform with rollover?](https://discuss.elastic.co/t/how-to-combine-transform-with-rollover/228841)

<div class="topic-metadata">

**Author:** [@Laurynas](https://discuss.elastic.co/u/Laurynas)\
**Replies:** 4\
**Last updated:** [April 28, 2020, 8:54pm UTC](https://discuss.elastic.co/t/how-to-combine-transform-with-rollover/228841 "2020-04-28T20:54:20Z")

</div>

Hello, I was not able to find any information if it is possible to rollover transform destination index? I tried and that did not work, but maybe I am missing something. Currently I set destination index to "foo-00001" …

---

## [Coordinating node - just enough information to perform aggregation](https://discuss.elastic.co/t/coordinating-node-just-enough-information-to-perform-aggregation/230070)

<div class="topic-metadata">

**Author:** [@nages](https://discuss.elastic.co/u/nages)\
**Replies:** 5\
**Last updated:** [April 28, 2020, 7:37pm UTC](https://discuss.elastic.co/t/coordinating-node-just-enough-information-to-perform-aggregation/230070 "2020-04-28T19:37:04Z")

</div>

I am going through the documentation to better understand the role of coordinating node, the different phases of search request - I come across a phase - Each shard returns just enough information to the coordinatin…

---

## [Are replica shards used when there is no failover?](https://discuss.elastic.co/t/are-replica-shards-used-when-there-is-no-failover/230217)

<div class="topic-metadata">

**Author:** [@Clony](https://discuss.elastic.co/u/Clony)\
**Replies:** 2\
**Last updated:** [April 28, 2020, 7:04pm UTC](https://discuss.elastic.co/t/are-replica-shards-used-when-there-is-no-failover/230217 "2020-04-28T19:04:53Z")

</div>

I wonder if replica shards are used when a query is performed in order to load balanced between primaries and replicas or replicas ONLY comes into action when there is a fail in any primary? thanks in advance.

---

## [Sending Elasticsearch service on Elastic Cloud to New Relic](https://discuss.elastic.co/t/sending-elasticsearch-service-on-elastic-cloud-to-new-relic/230230)

<div class="topic-metadata">

**Author:** [@jvergara](https://discuss.elastic.co/u/jvergara)\
**Replies:** 0\
**Last updated:** [April 28, 2020, 6:03pm UTC](https://discuss.elastic.co/t/sending-elasticsearch-service-on-elastic-cloud-to-new-relic/230230 "2020-04-28T18:03:42Z")

</div>

We have a service in Elasticsearch service on Elastic Cloud. I would like to send the Metrics provided for my cluster to the New Relic service. How can I do that?

---

## [Shard request cache - entirely or partially invalidated due to indexing?](https://discuss.elastic.co/t/shard-request-cache-entirely-or-partially-invalidated-due-to-indexing/228178)

<div class="topic-metadata">

**Author:** [@hhsuey](https://discuss.elastic.co/u/hhsuey)\
**Replies:** 1\
**Last updated:** [April 28, 2020, 5:31pm UTC](https://discuss.elastic.co/t/shard-request-cache-entirely-or-partially-invalidated-due-to-indexing/228178 "2020-04-28T17:31:54Z")

</div>

Will the shard request cache invalidate the entire shard's cache if any documents are updated? Or will only the document updated be invalidated in the cache? It isn't exactly clear in the documentation: Cached results…

---

## [FilterAllocationDecider routing exclude setting behavior](https://discuss.elastic.co/t/filterallocationdecider-routing-exclude-setting-behavior/229800)

<div class="topic-metadata">

**Author:** [@sohami](https://discuss.elastic.co/u/sohami)\
**Replies:** 10\
**Last updated:** [April 28, 2020, 5:23pm UTC](https://discuss.elastic.co/t/filterallocationdecider-routing-exclude-setting-behavior/229800 "2020-04-28T17:23:48Z")

</div>

Elasticsearch version (Verified on 6.8 and 7.4.2): Description of the problem including expected versus actual behavior : I was exploring the FilterAllocationDecider behavior with cluster.routing.allocation.exclude …

---

## [Error when converting sql into elastic dsl for sql AND case](https://discuss.elastic.co/t/error-when-converting-sql-into-elastic-dsl-for-sql-and-case/229401)

<div class="topic-metadata">

**Author:** [@Digil](https://discuss.elastic.co/u/Digil)\
**Replies:** 1\
**Last updated:** [April 28, 2020, 5:16pm UTC](https://discuss.elastic.co/t/error-when-converting-sql-into-elastic-dsl-for-sql-and-case/229401 "2020-04-28T17:16:46Z")

</div>

I have a sql query like this sql\_1 = "SELECT \* FROM dd\_s3data WHERE (yelp\_address = '370 Barren Rd' OR yelp\_businessname ILIKE '%Computer%') AND (yelp\_state = 'CT' OR yelp\_category ILIKE '%flooring%');" I am trying to …

---

## [Issue with S3-repository with two different elasticsearch cluster](https://discuss.elastic.co/t/issue-with-s3-repository-with-two-different-elasticsearch-cluster/227995)

<div class="topic-metadata">

**Author:** [@Christophe.aron](https://discuss.elastic.co/u/Christophe.aron)\
**Replies:** 1\
**Last updated:** [April 28, 2020, 3:56pm UTC](https://discuss.elastic.co/t/issue-with-s3-repository-with-two-different-elasticsearch-cluster/227995 "2020-04-28T15:56:18Z")

</div>

Hello, I am having a configuration problem on two different elasticsearch cluster. I follow this documentation about s3-repository The context is that I have a cluster in version 5.6.x with which I configured the s3-…

---

## [Inconsistent date fields returned](https://discuss.elastic.co/t/inconsistent-date-fields-returned/230209)

<div class="topic-metadata">

**Author:** [@ngtlin](https://discuss.elastic.co/u/ngtlin)\
**Replies:** 0\
**Last updated:** [April 28, 2020, 3:24pm UTC](https://discuss.elastic.co/t/inconsistent-date-fields-returned/230209 "2020-04-28T15:24:33Z")

</div>

I have an index which has 3 fields of "date" type, @timestamp, startTime and endTime with built-in format (default strict\_date\_optional\_time || epoch\_millis). Run a query, elastic search (7.6.1) return iso8601 String fo…

---

## [Highlight list of terms containing hyphens and whitespaces](https://discuss.elastic.co/t/highlight-list-of-terms-containing-hyphens-and-whitespaces/230206)

<div class="topic-metadata">

**Author:** [@b1t](https://discuss.elastic.co/u/b1t)\
**Replies:** 0\
**Last updated:** [April 28, 2020, 3:21pm UTC](https://discuss.elastic.co/t/highlight-list-of-terms-containing-hyphens-and-whitespaces/230206 "2020-04-28T15:21:28Z")

</div>

Hello, I am realizing a system for keywords matching with ES 7.6 using highlight. This is my mappings code: "mappings": { "properties": { "title": { "type": "text" …

---

## [Continuous transform, updated documents?](https://discuss.elastic.co/t/continuous-transform-updated-documents/228396)

<div class="topic-metadata">

**Author:** [@Cain310](https://discuss.elastic.co/u/Cain310)\
**Replies:** 4\
**Last updated:** [April 28, 2020, 3:13pm UTC](https://discuss.elastic.co/t/continuous-transform-updated-documents/228396 "2020-04-28T15:13:47Z")

</div>

Hi does transfom update documents? I have a continuous transform running on and index which continuously has new documents injested and existing documents updated. Each Document has a field which is called "doc.lastUpda…

---

## [Layered continuous transforms?](https://discuss.elastic.co/t/layered-continuous-transforms/229507)

<div class="topic-metadata">

**Author:** [@Cain310](https://discuss.elastic.co/u/Cain310)\
**Replies:** 2\
**Last updated:** [April 28, 2020, 2:55pm UTC](https://discuss.elastic.co/t/layered-continuous-transforms/229507 "2020-04-28T14:55:21Z")

</div>

Is it possible to create a continuous transform with several processors that feeds into another continuous transform ?

---

## [Permanent Mapping](https://discuss.elastic.co/t/permanent-mapping/230195)

<div class="topic-metadata">

**Author:** [@ksremo](https://discuss.elastic.co/u/ksremo)\
**Replies:** 0\
**Last updated:** [April 28, 2020, 2:20pm UTC](https://discuss.elastic.co/t/permanent-mapping/230195 "2020-04-28T14:20:54Z")

</div>

A Filebeat is delivering Data to Logstash and then to Elasticsearch. Per default (dynmac mapping?), all Fields are of Type "text". So i build a Mapping with the correct Types. I removed the Index, recreate it and push …

---

## [Best way to implement relationship](https://discuss.elastic.co/t/best-way-to-implement-relationship/230189)

<div class="topic-metadata">

**Author:** [@ViniciusSPaiva](https://discuss.elastic.co/u/ViniciusSPaiva)\
**Replies:** 0\
**Last updated:** [April 28, 2020, 1:59pm UTC](https://discuss.elastic.co/t/best-way-to-implement-relationship/230189 "2020-04-28T13:59:49Z")

</div>

Hello there! Just to add some story: my company's application is an ECM (Enterprise Content Management), and, to put it very briefly, users can create: Entities Files Some types of those entities (Emails, Documents, …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=938)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=940)
