# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=950

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 951

---

## [Search vietnamese in elasticserch](https://discuss.elastic.co/t/search-vietnamese-in-elasticserch/228848)

<div class="topic-metadata">

**Author:** [@Tu\_n\_Ph\_m](https://discuss.elastic.co/u/Tu_n_Ph_m)\
**Replies:** 2\
**Last updated:** [April 20, 2020, 12:20pm UTC](https://discuss.elastic.co/t/search-vietnamese-in-elasticserch/228848 "2020-04-20T12:20:26Z")

</div>

I am installing plugin https://github.com/duydo/elasticsearch-analysis-vietnamese, but it appears an error like the image below. I could not continue to install it. Please tell me what the error is and why. thanks

---

## [\[Elasticsearch 7.6\] How do I fix unassigned shards issue](https://discuss.elastic.co/t/elasticsearch-7-6-how-do-i-fix-unassigned-shards-issue/228714)

<div class="topic-metadata">

**Author:** [@Ahmed\_Abdulaleem](https://discuss.elastic.co/u/Ahmed_Abdulaleem)\
**Replies:** 7\
**Last updated:** [April 20, 2020, 12:13pm UTC](https://discuss.elastic.co/t/elasticsearch-7-6-how-do-i-fix-unassigned-shards-issue/228714 "2020-04-20T12:13:22Z")

</div>

Hello, I installed an elastic search cluster consists of 3 nodes. after data had been ingested to the cluster, the status of the cluster became yellow due to unassigned shards issue.

---

## [Null pointer exception in GetRequest for index](https://discuss.elastic.co/t/null-pointer-exception-in-getrequest-for-index/228800)

<div class="topic-metadata">

**Author:** [@vinay123](https://discuss.elastic.co/u/vinay123)\
**Replies:** 6\
**Last updated:** [April 20, 2020, 11:40am UTC](https://discuss.elastic.co/t/null-pointer-exception-in-getrequest-for-index/228800 "2020-04-20T11:40:19Z")

</div>

Hello , i am trying to get index from ES using java , below is the code which i have used, but i am getting null values to getrequest obj ,then its throwing null pointer exception RestHighLevelClient restHighLevelCl…

---

## [Elastic Scoring for perfect match](https://discuss.elastic.co/t/elastic-scoring-for-perfect-match/228720)

<div class="topic-metadata">

**Author:** [@AndyS](https://discuss.elastic.co/u/AndyS)\
**Replies:** 5\
**Last updated:** [April 20, 2020, 10:51am UTC](https://discuss.elastic.co/t/elastic-scoring-for-perfect-match/228720 "2020-04-20T10:51:48Z")

</div>

Hey, I have a JSON query that gives different results when executed in Elastic vs executed in Kibana. In my use case of security log searching perfect matches are the desired answer, so I believe that Kibana is 'right'…

---

## [Unable to create snapshots even though es has read/write access to smb drive](https://discuss.elastic.co/t/unable-to-create-snapshots-even-though-es-has-read-write-access-to-smb-drive/228832)

<div class="topic-metadata">

**Author:** [@modec](https://discuss.elastic.co/u/modec)\
**Replies:** 0\
**Last updated:** [April 20, 2020, 10:12am UTC](https://discuss.elastic.co/t/unable-to-create-snapshots-even-though-es-has-read-write-access-to-smb-drive/228832 "2020-04-20T10:12:14Z")

</div>

Elasticsearch 6.8.8 - this worked fine in 6.5.1. - Error is \[2020-04-20T11:47:13,669\]\[WARN \]\[o.e.r.RepositoriesService\] \[Cassiopeia\] \[linkstacks-backup-3\] failed to finish repository verification org.elasticsear…

---

## [Search nested field with filtering](https://discuss.elastic.co/t/search-nested-field-with-filtering/228831)

<div class="topic-metadata">

**Author:** [@Rajeev\_Bhat](https://discuss.elastic.co/u/Rajeev_Bhat)\
**Replies:** 0\
**Last updated:** [April 20, 2020, 10:01am UTC](https://discuss.elastic.co/t/search-nested-field-with-filtering/228831 "2020-04-20T10:01:07Z")

</div>

Hello, I need help in searching "BirthDate" field and in response I only need the results of BirthDates(source filtering). Can anyone help ? Sample document: { "Payload": { "ProfileInfo": { …

---

## [Is it possible to change the prebuilt rules in Signal detection rules](https://discuss.elastic.co/t/is-it-possible-to-change-the-prebuilt-rules-in-signal-detection-rules/228814)

<div class="topic-metadata">

**Author:** [@sundar\_elk](https://discuss.elastic.co/u/sundar_elk)\
**Replies:** 0\
**Last updated:** [April 20, 2020, 8:39am UTC](https://discuss.elastic.co/t/is-it-possible-to-change-the-prebuilt-rules-in-signal-detection-rules/228814 "2020-04-20T08:39:46Z")

</div>

Hi Team, I want change the indices name instead of winlogbeat-\* to entity-winlogbeat-\* for prebuilt rules for windows in kibana but rules are not editable. Can you please suggest how to change the prebuilt rules.

---

## [Delete nested field object in batches](https://discuss.elastic.co/t/delete-nested-field-object-in-batches/228811)

<div class="topic-metadata">

**Author:** [@A\_google\_user](https://discuss.elastic.co/u/A_google_user)\
**Replies:** 0\
**Last updated:** [April 20, 2020, 8:34am UTC](https://discuss.elastic.co/t/delete-nested-field-object-in-batches/228811 "2020-04-20T08:34:31Z")

</div>

I have nested fields in the elastic search document. I want to delete those objects(nested objects) which have 'created\_at' timestamp \< Time.now- 6 months. 'created\_at' field is inside the nested fields. This is what I …

---

## [How to enable x-pack security when running elasticsearch locally from source code](https://discuss.elastic.co/t/how-to-enable-x-pack-security-when-running-elasticsearch-locally-from-source-code/228533)

<div class="topic-metadata">

**Author:** [@amitmbm](https://discuss.elastic.co/u/amitmbm)\
**Replies:** 1\
**Last updated:** [April 20, 2020, 8:31am UTC](https://discuss.elastic.co/t/how-to-enable-x-pack-security-when-running-elasticsearch-locally-from-source-code/228533 "2020-04-20T08:31:54Z")

</div>

I am running the latest Elasticsearch code(taken from the master branch on 17th April 2020) and its running successfully and I was able to start it in debug mode in Intellij by following https://discuss.elastic.co/t/fail…

---

## [Dynamic data and none index fields](https://discuss.elastic.co/t/dynamic-data-and-none-index-fields/228728)

<div class="topic-metadata">

**Author:** [@Rhh](https://discuss.elastic.co/u/Rhh)\
**Replies:** 3\
**Last updated:** [April 20, 2020, 8:18am UTC](https://discuss.elastic.co/t/dynamic-data-and-none-index-fields/228728 "2020-04-20T08:18:25Z")

</div>

Hi I am trying to use ES and I am having trouble to get some fields not indexed. I put data into ES using serilog. In my setup I have a custom template like this : { "index\_patterns": \[ "tds-" \], "settings": { "ind…

---

## [How can I send large JSON file (6 GB) to Elasticsearch using bulk API?](https://discuss.elastic.co/t/how-can-i-send-large-json-file-6-gb-to-elasticsearch-using-bulk-api/228712)

<div class="topic-metadata">

**Author:** [@cezar996](https://discuss.elastic.co/u/cezar996)\
**Replies:** 4\
**Last updated:** [April 20, 2020, 8:04am UTC](https://discuss.elastic.co/t/how-can-i-send-large-json-file-6-gb-to-elasticsearch-using-bulk-api/228712 "2020-04-20T08:04:09Z")

</div>

Hello everybody! I have problems since a few days ago, when I try to send a large JSON file (aprox. 6 GB) to Elasticsearch using Bulk API. Before putting this question I have documented a lot and I saw there are two pos…

---

## [Elasticsearch Trace Route](https://discuss.elastic.co/t/elasticsearch-trace-route/228784)

<div class="topic-metadata">

**Author:** [@Alsheh](https://discuss.elastic.co/u/Alsheh)\
**Replies:** 3\
**Last updated:** [April 20, 2020, 7:37am UTC](https://discuss.elastic.co/t/elasticsearch-trace-route/228784 "2020-04-20T07:37:08Z")

</div>

Is there a way to trace the route of search & indexing requests to nodes within the cluster? I have lots of dedicated nodes in the cluster and I want to confirm requests routing is optimized by checking the path the requ…

---

## [Docker + Elasticsearch + Geoip + User Agent Pipeline](https://discuss.elastic.co/t/docker-elasticsearch-geoip-user-agent-pipeline/228517)

<div class="topic-metadata">

**Author:** [@Zain\_Zafar](https://discuss.elastic.co/u/Zain_Zafar)\
**Replies:** 1\
**Last updated:** [April 20, 2020, 6:24am UTC](https://discuss.elastic.co/t/docker-elasticsearch-geoip-user-agent-pipeline/228517 "2020-04-20T06:24:59Z")

</div>

Hi, I have an elasticsearch dependency for my app and I'm using the following configuration in the docker-compose.yml file: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:6.6.0 ports: …

---

## [Sort Shards By Indexing Time](https://discuss.elastic.co/t/sort-shards-by-indexing-time/228787)

<div class="topic-metadata">

**Author:** [@Alsheh](https://discuss.elastic.co/u/Alsheh)\
**Replies:** 0\
**Last updated:** [April 20, 2020, 5:08am UTC](https://discuss.elastic.co/t/sort-shards-by-indexing-time/228787 "2020-04-20T05:08:35Z")

</div>

Is there a way to sort shards by indexing time metric? My specific scenario is that Logstash makes a bulk requests to various indices but one index might have inefficient mapping which allows for fields explosion which …

---

## [How to slove this error?](https://discuss.elastic.co/t/how-to-slove-this-error/228776)

<div class="topic-metadata">

**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\
**Replies:** 1\
**Last updated:** [April 20, 2020, 5:07am UTC](https://discuss.elastic.co/t/how-to-slove-this-error/228776 "2020-04-20T05:07:42Z")

</div>

org.elasticsearch.transport.RemoteTransportException: host\[indices:data/read/search\[phase/query\]\] Caused by: java.lang.IllegalArgumentException: No aggregation found for path \[61ca57fe-469d-11e7-af02-69e460af7417\] Whe…

---

## [How to move part of the elastic snapshots into another disk](https://discuss.elastic.co/t/how-to-move-part-of-the-elastic-snapshots-into-another-disk/228780)

<div class="topic-metadata">

**Author:** [@111321](https://discuss.elastic.co/u/111321)\
**Replies:** 0\
**Last updated:** [April 20, 2020, 4:44am UTC](https://discuss.elastic.co/t/how-to-move-part-of-the-elastic-snapshots-into-another-disk/228780 "2020-04-20T04:44:10Z")

</div>

Hi, I am thinking if it is possible to move the part of elastic snapshots into another disk if we have a disk size problem? Think about this, we have a requirement to back up the last 14 days data, it if longer than 14…

---

## [Elastic, spark and ILM](https://discuss.elastic.co/t/elastic-spark-and-ilm/228750)

<div class="topic-metadata">

**Author:** [@Martin\_Farmer](https://discuss.elastic.co/u/Martin_Farmer)\
**Replies:** 3\
**Last updated:** [April 20, 2020, 12:13am UTC](https://discuss.elastic.co/t/elastic-spark-and-ilm/228750 "2020-04-20T00:13:20Z")

</div>

So - I have filebeat working great elastic and ILM, and separately I have my scala/spark code feeding elastic with custom documents - and that works great. What I can't figure out or find documentation on, is how to inte…

---

## [Elastic stack for Node & Angular](https://discuss.elastic.co/t/elastic-stack-for-node-angular/228452)

<div class="topic-metadata">

**Author:** [@Bhagyashree\_S.B](https://discuss.elastic.co/u/Bhagyashree_S.B)\
**Replies:** 4\
**Last updated:** [April 19, 2020, 11:08pm UTC](https://discuss.elastic.co/t/elastic-stack-for-node-angular/228452 "2020-04-19T23:08:23Z")

</div>

Hi, We have recently started to setup centralized logging for our projects using Elastic stack. The projects are built with Angular as the frontend framework & NodeJS as the middleware. Please suggest on how to send th…

---

## [Bulk delete role mappings](https://discuss.elastic.co/t/bulk-delete-role-mappings/227688)

<div class="topic-metadata">

**Author:** [@soumendra](https://discuss.elastic.co/u/soumendra)\
**Replies:** 1\
**Last updated:** [April 19, 2020, 6:36pm UTC](https://discuss.elastic.co/t/bulk-delete-role-mappings/227688 "2020-04-19T18:36:43Z")

</div>

I have role mapping created like the following: PUT {{es\_ip\_port}}/\_security/role\_mapping/dummy\_1 { "enabled": true, "roles": \[ "client\_role", "kibana\_dashboard\_only\_user" \], "rules": { …

---

## [Upgrade from ELK 5.4 to 7.6](https://discuss.elastic.co/t/upgrade-from-elk-5-4-to-7-6/228721)

<div class="topic-metadata">

**Author:** [@111320](https://discuss.elastic.co/u/111320)\
**Replies:** 6\
**Last updated:** [April 19, 2020, 6:05pm UTC](https://discuss.elastic.co/t/upgrade-from-elk-5-4-to-7-6/228721 "2020-04-19T18:05:11Z")

</div>

I need to upgrade my system (linux) from ELK 5.4 to 7.6. I saw several guides about using Upgrade Assistant but it is not exist in Kibana 5.4. I don't need the old indices and I already delete all indices. The system …

---

## [What is the alternative way of querying \_all from elasticsearch 6.x onwards?](https://discuss.elastic.co/t/what-is-the-alternative-way-of-querying-all-from-elasticsearch-6-x-onwards/228749)

<div class="topic-metadata">

**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\
**Replies:** 3\
**Last updated:** [April 19, 2020, 5:59pm UTC](https://discuss.elastic.co/t/what-is-the-alternative-way-of-querying-all-from-elasticsearch-6-x-onwards/228749 "2020-04-19T17:59:49Z")

</div>

I posted the same in stackoverflow but did not get any reply. Just posting the same here in case someone has any suggestions. As mentioned in the doc, from elasticsearch 6.x \_all has been deprecated. I have a matchQu…

---

## [Updating nodes in Elasticsearch cluster](https://discuss.elastic.co/t/updating-nodes-in-elasticsearch-cluster/228737)

<div class="topic-metadata">

**Author:** [@vbhat](https://discuss.elastic.co/u/vbhat)\
**Replies:** 2\
**Last updated:** [April 19, 2020, 5:52pm UTC](https://discuss.elastic.co/t/updating-nodes-in-elasticsearch-cluster/228737 "2020-04-19T17:52:40Z")

</div>

Hi, We have an Elasticsearch cluster for centralised log analysis in HashiCorp Nomad cluster. We are aware that ES is a stateful application and would not benefit much from the orchestrator such as HashiCorp Nomad. But…

---

## [Sort by length of an array](https://discuss.elastic.co/t/sort-by-length-of-an-array/225742)

<div class="topic-metadata">

**Author:** [@RajaG](https://discuss.elastic.co/u/RajaG)\
**Replies:** 4\
**Last updated:** [April 19, 2020, 5:04pm UTC](https://discuss.elastic.co/t/sort-by-length-of-an-array/225742 "2020-04-19T17:04:37Z")

</div>

PUT wc { "mappings": { "properties": { "comments": { "type": "text", "fields": { "word\_count": { "type": "token\_count", "analyzer": "standard" } …

---

## [Inference processor PUT error](https://discuss.elastic.co/t/inference-processor-put-error/228674)

<div class="topic-metadata">

**Author:** [@Cain310](https://discuss.elastic.co/u/Cain310)\
**Replies:** 1\
**Last updated:** [April 19, 2020, 3:42pm UTC](https://discuss.elastic.co/t/inference-processor-put-error/228674 "2020-04-19T15:42:01Z")

</div>

I am trying to create a pipeline with the inference processor using my ML model for a continuous transform and i keep getting 400 error. version: 7.6.2 PUT /\_ingest/pipeline/ml\_pipeline { "pipeline": { "descripti…

---

## [Getting the Transport Client address](https://discuss.elastic.co/t/getting-the-transport-client-address/228457)

<div class="topic-metadata">

**Author:** [@Siddharth1010](https://discuss.elastic.co/u/Siddharth1010)\
**Replies:** 3\
**Last updated:** [April 19, 2020, 12:00pm UTC](https://discuss.elastic.co/t/getting-the-transport-client-address/228457 "2020-04-19T12:00:24Z")

</div>

I am using Elasticsearch version number 6.2.4. This is the Configuration file that I am using for java import org.elasticsearch.client.Client; import org.elasticsearch.client.transport.TransportClient; import org.elast…

---

## [Whats the best way to migrate single node elasticsearch data to a multinode elasticsearch environment?](https://discuss.elastic.co/t/whats-the-best-way-to-migrate-single-node-elasticsearch-data-to-a-multinode-elasticsearch-environment/228199)

<div class="topic-metadata">

**Author:** [@deep9300](https://discuss.elastic.co/u/deep9300)\
**Replies:** 7\
**Last updated:** [April 19, 2020, 4:25am UTC](https://discuss.elastic.co/t/whats-the-best-way-to-migrate-single-node-elasticsearch-data-to-a-multinode-elasticsearch-environment/228199 "2020-04-19T04:25:08Z")

</div>

I want to move my single node elasticsearch cluster data to a 3 node elasticsearch cluster. Only a few gb worth of data at first to test it out then proceed to move close to a 100gb. What is best way to this? Are any art…

---

## [Update by Query on Object not in source](https://discuss.elastic.co/t/update-by-query-on-object-not-in-source/228688)

<div class="topic-metadata">

**Author:** [@pcb](https://discuss.elastic.co/u/pcb)\
**Replies:** 0\
**Last updated:** [April 19, 2020, 2:43am UTC](https://discuss.elastic.co/t/update-by-query-on-object-not-in-source/228688 "2020-04-19T02:43:04Z")

</div>

Hello, (Note when I say parent/child below, I'm talking about objects not actual parent/child relationships) I'm attempting to perform an update using \_update\_by\_query, however, my documents have several multi-tiered o…

---

## [Questions on helm chart](https://discuss.elastic.co/t/questions-on-helm-chart/228691)

<div class="topic-metadata">

**Author:** [@deepak\_deore](https://discuss.elastic.co/u/deepak_deore)\
**Replies:** 0\
**Last updated:** [April 19, 2020, 2:48am UTC](https://discuss.elastic.co/t/questions-on-helm-chart/228691 "2020-04-19T02:48:03Z")

</div>

with introduction of stable ECK operator, will official helm chart be deprecated? AFAIK helm chart installation doesn't renew the tls cert automatically, how to renew the certs when ES is installed with official helm ch…

---

## [Deployment Health Status : Healthy with warning](https://discuss.elastic.co/t/deployment-health-status-healthy-with-warning/228684)

<div class="topic-metadata">

**Author:** [@bmbrit](https://discuss.elastic.co/u/bmbrit)\
**Replies:** 2\
**Last updated:** [April 19, 2020, 1:00am UTC](https://discuss.elastic.co/t/deployment-health-status-healthy-with-warning/228684 "2020-04-19T01:00:20Z")

</div>

Hi, We are facing the following warning. Just wondering, if this is may cause any further problems or how can I resolve the warning. Currently, this deployment is in production and any restart might need attention. …

---

## [Pattern not applied](https://discuss.elastic.co/t/pattern-not-applied/228683)

<div class="topic-metadata">

**Author:** [@woro](https://discuss.elastic.co/u/woro)\
**Replies:** 0\
**Last updated:** [April 18, 2020, 9:53pm UTC](https://discuss.elastic.co/t/pattern-not-applied/228683 "2020-04-18T21:53:37Z")

</div>

Hi, I'm rather new to Elastic and now I'm running into a strange problem I do not understand and did not find the right pointer to fix it. I think everyone worked fine in the beginning but then I added a new input and …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=949)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=951)
