# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=945

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 946

---

## [Fielddata memory usage](https://discuss.elastic.co/t/fielddata-memory-usage/229550)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 1\
**Last updated:** [April 24, 2020, 12:14am UTC](https://discuss.elastic.co/t/fielddata-memory-usage/229550 "2020-04-24T00:14:04Z")

</div>

Hi! I've a v7.2.1 ES cluster and trying to lower heap memory usage. When I checked GET /\_cat/fielddata I found a lot of non-text type fields in the list (e.g., "foo.keyword", "bar\_ip"). As far as I understood from the r…

---

## [Create field associated by query](https://discuss.elastic.co/t/create-field-associated-by-query/229555)

<div class="topic-metadata">

**Author:** [@Jose\_Campos](https://discuss.elastic.co/u/Jose_Campos)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 11:05pm UTC](https://discuss.elastic.co/t/create-field-associated-by-query/229555 "2020-04-23T23:05:01Z")

</div>

I have this Ip address "185.115.3.90" in the "ip" field and I do the search ip: 185.115.3.90, then add to that search a field called blacklist, and so associate blacklist to all the addresses that I want. And create a v…

---

## [Any suggestions on creating watches for derivative values?](https://discuss.elastic.co/t/any-suggestions-on-creating-watches-for-derivative-values/229133)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 8\
**Last updated:** [April 23, 2020, 10:21pm UTC](https://discuss.elastic.co/t/any-suggestions-on-creating-watches-for-derivative-values/229133 "2020-04-23T22:21:05Z")

</div>

I'm interested in creating a threshold alert for bits/s or packets/s of my data. This is leading me down a rabbit hole, and it seems like doing any analysis (sorting/aggregation) on this kind of per second data is quite …

---

## [Closing vs. freezing an index](https://discuss.elastic.co/t/closing-vs-freezing-an-index/229372)

<div class="topic-metadata">

**Author:** [@bobbyi](https://discuss.elastic.co/u/bobbyi)\
**Replies:** 1\
**Last updated:** [April 23, 2020, 9:39pm UTC](https://discuss.elastic.co/t/closing-vs-freezing-an-index/229372 "2020-04-23T21:39:19Z")

</div>

I have a use case in which there is an index I no longer need, but have some small chance of using in the future. Closing the index or freezing the index both look like reasonable ways of keeping the data from being gone…

---

## [Starting Elasticsearch with systemd hangs](https://discuss.elastic.co/t/starting-elasticsearch-with-systemd-hangs/229510)

<div class="topic-metadata">

**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\
**Replies:** 3\
**Last updated:** [April 23, 2020, 7:46pm UTC](https://discuss.elastic.co/t/starting-elasticsearch-with-systemd-hangs/229510 "2020-04-23T19:46:36Z")

</div>

Hello, I'm having trouble trying to start Elasticsearh (tar.gz installation) with Systemd. This is the service's unit file. I copyied from Elastic's repo in Github and changed user, group and path variables. Other than…

---

## [Help Securing Elasticsearch/Logstash using Internal CA on Windows Server](https://discuss.elastic.co/t/help-securing-elasticsearch-logstash-using-internal-ca-on-windows-server/229526)

<div class="topic-metadata">

**Author:** [@dtama018](https://discuss.elastic.co/u/dtama018)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 6:31pm UTC](https://discuss.elastic.co/t/help-securing-elasticsearch-logstash-using-internal-ca-on-windows-server/229526 "2020-04-23T18:31:25Z")

</div>

Hi everyone! I need help with securing my ELK stack on Windows using our internal CA. From what I understand, the new release of Elastic allow us to secure communications (certificates) without needing X-Pack license. B…

---

## [Install dependencies on GCP cloud dataproc](https://discuss.elastic.co/t/install-dependencies-on-gcp-cloud-dataproc/229525)

<div class="topic-metadata">

**Author:** [@Callonski](https://discuss.elastic.co/u/Callonski)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 6:13pm UTC](https://discuss.elastic.co/t/install-dependencies-on-gcp-cloud-dataproc/229525 "2020-04-23T18:13:32Z")

</div>

I want to connect Spark running on GCP dataproc to elasticsearch cluster running on GCE. I'm new to dataproc and pySpark, so I got stuck on installing the Hadoop-elasticsearch adapter. This is the package I'm trying to…

---

## [The confusion of configuring cluster.initial\_master\_nodes](https://discuss.elastic.co/t/the-confusion-of-configuring-cluster-initial-master-nodes/229213)

<div class="topic-metadata">

**Author:** [@yc1024](https://discuss.elastic.co/u/yc1024)\
**Replies:** 11\
**Last updated:** [April 23, 2020, 5:28pm UTC](https://discuss.elastic.co/t/the-confusion-of-configuring-cluster-initial-master-nodes/229213 "2020-04-23T17:28:49Z")

</div>

Hi When I read the modules-discovery-bootstrap-cluster documentation, I found the following description When you start a master-eligible node, you can provide this setting on the command line or in the elasticsearch.ym…

---

## [Get SSL certificate](https://discuss.elastic.co/t/get-ssl-certificate/229273)

<div class="topic-metadata">

**Author:** [@Rajeev\_Bhat](https://discuss.elastic.co/u/Rajeev_Bhat)\
**Replies:** 4\
**Last updated:** [April 23, 2020, 4:59pm UTC](https://discuss.elastic.co/t/get-ssl-certificate/229273 "2020-04-23T16:59:52Z")

</div>

Hello, I have executed "GET /\_ssl/certificates" in elastic cloud-kibana dev tools , as a result generated certificate is stored in "path" : "node.crt". But I couldn't able to view the file node.crt, where should I see …

---

## [Does not exist\]; nested: NoSuchFileException \[/usr/share/elasticsearch/config/certificates/ca/ca.crt\]](https://discuss.elastic.co/t/does-not-exist-nested-nosuchfileexception-usr-share-elasticsearch-config-certificates-ca-ca-crt/229501)

<div class="topic-metadata">

**Author:** [@Teed](https://discuss.elastic.co/u/Teed)\
**Replies:** 4\
**Last updated:** [April 23, 2020, 4:15pm UTC](https://discuss.elastic.co/t/does-not-exist-nested-nosuchfileexception-usr-share-elasticsearch-config-certificates-ca-ca-crt/229501 "2020-04-23T16:15:17Z")

</div>

I have a docker-compose with several Elasticsearch nodes, I need to put them auth and ssl. But it sends me an error like this: ElasticsearchSecurityException \[failed to load SSL configuration \[xpack.security.http.ssl\]\]…

---

## [Malformed Query](https://discuss.elastic.co/t/malformed-query/228865)

<div class="topic-metadata">

**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\
**Replies:** 2\
**Last updated:** [April 23, 2020, 4:14pm UTC](https://discuss.elastic.co/t/malformed-query/228865 "2020-04-23T16:14:45Z")

</div>

Hi, I am running following query. GET products/\_search { "size": 0, "aggs": { "products": { "terms": { "field": "product\_id", "size": 10 },"aggs": { "result": { …

---

## [Nested: NoSuchFileException\[/usr/share/elasticsearch/config/certificates/ca/ca.crt\]](https://discuss.elastic.co/t/nested-nosuchfileexception-usr-share-elasticsearch-config-certificates-ca-ca-crt/229337)

<div class="topic-metadata">

**Author:** [@Teed](https://discuss.elastic.co/u/Teed)\
**Replies:** 1\
**Last updated:** [April 23, 2020, 4:06pm UTC](https://discuss.elastic.co/t/nested-nosuchfileexception-usr-share-elasticsearch-config-certificates-ca-ca-crt/229337 "2020-04-23T16:06:38Z")

</div>

ElasticsearchSecurityException\[failed to load SSL configuration \[xpack.security.http.ssl\]\]; nested: ElasticsearchException\[failed to initialize SSL TrustManager - certificate\_authorities file \[/usr/share/elasticsearch/co…

---

## [Accessing body of a text field in painless script in the filter context](https://discuss.elastic.co/t/accessing-body-of-a-text-field-in-painless-script-in-the-filter-context/229503)

<div class="topic-metadata">

**Author:** [@Rouzbeh\_Farahmand](https://discuss.elastic.co/u/Rouzbeh_Farahmand)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 3:11pm UTC](https://discuss.elastic.co/t/accessing-body-of-a-text-field-in-painless-script-in-the-filter-context/229503 "2020-04-23T15:11:09Z")

</div>

Hello! I have constructed a elastic search query with a filter and in the filter context and I am writing a painless script to filter some documents based on the body of the text field. However, when I want to access th…

---

## [Is there a way to add additional role to user without specifying full array of roles?](https://discuss.elastic.co/t/is-there-a-way-to-add-additional-role-to-user-without-specifying-full-array-of-roles/229455)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 2\
**Last updated:** [April 23, 2020, 3:44pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-add-additional-role-to-user-without-specifying-full-array-of-roles/229455 "2020-04-23T15:44:35Z")

</div>

Hi, Is there a way to add additional roles for a user per api without specifying the full set of roles (old roles + new role)? I want to script user creation via ansible and it would be nice if I can just create a new …

---

## [Latency between nodes](https://discuss.elastic.co/t/latency-between-nodes/229491)

<div class="topic-metadata">

**Author:** [@behi\_1370](https://discuss.elastic.co/u/behi_1370)\
**Replies:** 1\
**Last updated:** [April 23, 2020, 3:43pm UTC](https://discuss.elastic.co/t/latency-between-nodes/229491 "2020-04-23T15:43:43Z")

</div>

Hi I want to know how much latency between nodes affects performance? At this time I have 8 nodes which include: 3 data node, 3 master node, and 2 client node. All of the nodes are in the same datacenter with 0.2 ms l…

---

## [Elasticsearch doesn't allow to allocate unassigned shard](https://discuss.elastic.co/t/elasticsearch-doesnt-allow-to-allocate-unassigned-shard/229471)

<div class="topic-metadata">

**Author:** [@Junaid\_Usman](https://discuss.elastic.co/u/Junaid_Usman)\
**Replies:** 7\
**Last updated:** [April 23, 2020, 3:36pm UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-allow-to-allocate-unassigned-shard/229471 "2020-04-23T15:36:37Z")

</div>

Hi All, Recently, my elastic search status went 'red'. Due to which I am having problems with the elasticsearch and my application. I got the following response while performing health check. { "cluster\_name" : "elas…

---

## [Circuit breaker exception](https://discuss.elastic.co/t/circuit-breaker-exception/229506)

<div class="topic-metadata">

**Author:** [@Daud\_Ahmed](https://discuss.elastic.co/u/Daud_Ahmed)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 3:28pm UTC](https://discuss.elastic.co/t/circuit-breaker-exception/229506 "2020-04-23T15:28:10Z")

</div>

\[circuit\_breaking\_exception\] \[parent\] Data too large, data for \[\<http\_request\>\] would be \[2025688856/1.8gb\], which is larger than the limit of \[2023548518/1.8gb\], real usage: \[2025688856/1.8gb\], new bytes reserved: \[0/0b…

---

## [Using logical AND query in Kibana](https://discuss.elastic.co/t/using-logical-and-query-in-kibana/229276)

<div class="topic-metadata">

**Author:** [@adiksl](https://discuss.elastic.co/u/adiksl)\
**Replies:** 3\
**Last updated:** [April 23, 2020, 3:24pm UTC](https://discuss.elastic.co/t/using-logical-and-query-in-kibana/229276 "2020-04-23T15:24:03Z")

</div>

I am trying to implement a simple query in Kibana and then in C# NEST. I am from a SQL background and am struggling to find documentation to perform a relatively simple SQL query in Elasticsearch. The query I am trying t…

---

## [Elasticsearch Watcher ~ Auditing](https://discuss.elastic.co/t/elasticsearch-watcher-auditing/229504)

<div class="topic-metadata">

**Author:** [@deeshu](https://discuss.elastic.co/u/deeshu)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 3:19pm UTC](https://discuss.elastic.co/t/elasticsearch-watcher-auditing/229504 "2020-04-23T15:19:24Z")

</div>

Hi Experts, Has anyone succeed to enable the auditing for Elasticsearch Watchers? Objective is, to get notified whenever any watcher is altered/created/disabled/deleted. TIA/Deeshu

---

## [See Log Error " 'failed to parse field" in kibana or elastic](https://discuss.elastic.co/t/see-log-error-failed-to-parse-field-in-kibana-or-elastic/229490)

<div class="topic-metadata">

**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 2:32pm UTC](https://discuss.elastic.co/t/see-log-error-failed-to-parse-field-in-kibana-or-elastic/229490 "2020-04-23T14:32:02Z")

</div>

I moved my database to elastic, but I saw that the amount of data in my index was different from my old database. How do I see the error log in elastic when my cron process doesn't succeed? Can I see it in elastic or in …

---

## [Exact word search](https://discuss.elastic.co/t/exact-word-search/229457)

<div class="topic-metadata">

**Author:** [@smiler](https://discuss.elastic.co/u/smiler)\
**Replies:** 2\
**Last updated:** [April 23, 2020, 2:07pm UTC](https://discuss.elastic.co/t/exact-word-search/229457 "2020-04-23T14:07:15Z")

</div>

Hi. I need help with exact search. In some cases I need to search phrase includes word, in some cases I need to find documents where field value matches exactly search query. For example, I have this documents: {"matc…

---

## [Elasticsearch making app super slow](https://discuss.elastic.co/t/elasticsearch-making-app-super-slow/227857)

<div class="topic-metadata">

**Author:** [@jonaspreisler](https://discuss.elastic.co/u/jonaspreisler)\
**Replies:** 4\
**Last updated:** [April 23, 2020, 2:03pm UTC](https://discuss.elastic.co/t/elasticsearch-making-app-super-slow/227857 "2020-04-23T14:03:58Z")

</div>

I use Elasticsearch on Ububtu for my Rails app. After starting Elasticsearch, my app take 30+ seconds to load. Server: 8GB RAM. Before starting Elasticsearch: 5-600MB RAM in use After starting Elasticsearch: 2.5BG+ RA…

---

## ["bin/elasticsearch-certutil ca" not working](https://discuss.elastic.co/t/bin-elasticsearch-certutil-ca-not-working/229436)

<div class="topic-metadata">

**Author:** [@varom](https://discuss.elastic.co/u/varom)\
**Replies:** 1\
**Last updated:** [April 23, 2020, 1:53pm UTC](https://discuss.elastic.co/t/bin-elasticsearch-certutil-ca-not-working/229436 "2020-04-23T13:53:42Z")

</div>

I am getting following error : same for: bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12 I'm just beginner in ES and i want to setup TSL communication in cluster based on: https://www.elastic.co/guide/e…

---

## [Annotate Text with Numbers and Search by Range ... use annotated\_text?](https://discuss.elastic.co/t/annotate-text-with-numbers-and-search-by-range-use-annotated-text/229478)

<div class="topic-metadata">

**Author:** [@Michael\_Sander](https://discuss.elastic.co/u/Michael_Sander)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 1:51pm UTC](https://discuss.elastic.co/t/annotate-text-with-numbers-and-search-by-range-use-annotated-text/229478 "2020-04-23T13:51:59Z")

</div>

Is it possible to combine a text search with a number range search, where you want to find the numbers near the text? I have a corpus of unstructured data that includes both numbers and text, the following would be a ty…

---

## [Refresh indexed value](https://discuss.elastic.co/t/refresh-indexed-value/229233)

<div class="topic-metadata">

**Author:** [@legolas\_bilbao](https://discuss.elastic.co/u/legolas_bilbao)\
**Replies:** 3\
**Last updated:** [April 23, 2020, 1:47pm UTC](https://discuss.elastic.co/t/refresh-indexed-value/229233 "2020-04-23T13:47:41Z")

</div>

Hi everybody, I've populate elasticsearch and kibana from data from a database but I've update some values in rows that are indexed yet, how can i reflex the update into elastic and kibana? kindly regards

---

## [Combine random sampling with vector similarity scoring](https://discuss.elastic.co/t/combine-random-sampling-with-vector-similarity-scoring/228045)

<div class="topic-metadata">

**Author:** [@Abraham\_Sanders](https://discuss.elastic.co/u/Abraham_Sanders)\
**Replies:** 3\
**Last updated:** [April 22, 2020, 10:23am UTC](https://discuss.elastic.co/t/combine-random-sampling-with-vector-similarity-scoring/228045 "2020-04-22T10:23:50Z")

</div>

I have an index with a dense\_vector field on which I am doing text similarity search. (For reference, I followed the sample here:https://www.elastic.co/blog/text-similarity-search-with-vectors-in-elasticsearch) In the d…

---

## [FScrawler: Production Support Available?](https://discuss.elastic.co/t/fscrawler-production-support-available/229277)

<div class="topic-metadata">

**Author:** [@Yamini\_Shashank](https://discuss.elastic.co/u/Yamini_Shashank)\
**Replies:** 5\
**Last updated:** [April 23, 2020, 1:30pm UTC](https://discuss.elastic.co/t/fscrawler-production-support-available/229277 "2020-04-23T13:30:30Z")

</div>

Does elasticsearch provide production support for fscrawler?

---

## [Elasticsearch not populating timestamp / unable to change timestamp filter in kibana visualization](https://discuss.elastic.co/t/elasticsearch-not-populating-timestamp-unable-to-change-timestamp-filter-in-kibana-visualization/229411)

<div class="topic-metadata">

**Author:** [@bobonacus](https://discuss.elastic.co/u/bobonacus)\
**Replies:** 1\
**Last updated:** [April 23, 2020, 12:56pm UTC](https://discuss.elastic.co/t/elasticsearch-not-populating-timestamp-unable-to-change-timestamp-filter-in-kibana-visualization/229411 "2020-04-23T12:56:05Z")

</div>

I have Elasticsearch / Kibana 7.6.2 running in docker I originally loaded a new index from a csv file using kibana upload import csv which created the new index I've created dozens of visualizations on a dashboard whic…

---

## [Maximum limit on elasticsearch scroll time?](https://discuss.elastic.co/t/maximum-limit-on-elasticsearch-scroll-time/229459)

<div class="topic-metadata">

**Author:** [@A\_google\_user](https://discuss.elastic.co/u/A_google_user)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 11:41am UTC](https://discuss.elastic.co/t/maximum-limit-on-elasticsearch-scroll-time/229459 "2020-04-23T11:41:09Z")

</div>

I am using scroll to fetch data from elasticsearch in batches , modify them, and index them back. Is there any max\_time limit on the timeout parameter? I am doing this in rails app. cause If scroll gets expired and I co…

---

## [Master election process is not happening](https://discuss.elastic.co/t/master-election-process-is-not-happening/229443)

<div class="topic-metadata">

**Author:** [@abhishek1](https://discuss.elastic.co/u/abhishek1)\
**Replies:** 8\
**Last updated:** [April 23, 2020, 11:33am UTC](https://discuss.elastic.co/t/master-election-process-is-not-happening/229443 "2020-04-23T11:33:14Z")

</div>

HI, I have configured multi master node configurtaion in cluster but master election process is not happening correctly .. I have 4 nodes out of 4 , Node1, Node2 and node3 is master node and node 4 is data node. Activ…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=944)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=946)
