# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=956 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 957 --- ## [\_score:"-Infinity" with version 7.6.2, \_score:null from version 6.8.2](https://discuss.elastic.co/t/score-infinity-with-version-7-6-2-score-null-from-version-6-8-2/227834)
**Author:** [@erik-sigsci](https://discuss.elastic.co/u/erik-sigsci)\ **Replies:** 1\ **Last updated:** [April 14, 2020, 7:21pm UTC](https://discuss.elastic.co/t/score-infinity-with-version-7-6-2-score-null-from-version-6-8-2/227834 "2020-04-14T19:21:42Z")
Hello! I'm in process of trying to upgrade a production cluster from 6.8.2 to 7.6.2 Everything looked good, but as soon as one node was v7.6.2, I started to get json parsing errors from the go olivere library. It seems… --- ## [Update mapping and search on fields by wildcards](https://discuss.elastic.co/t/update-mapping-and-search-on-fields-by-wildcards/227982)
**Author:** [@Behzad\_Rezaie](https://discuss.elastic.co/u/Behzad_Rezaie)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 7:05pm UTC](https://discuss.elastic.co/t/update-mapping-and-search-on-fields-by-wildcards/227982 "2020-04-14T19:05:05Z")
Hi pals, I am using the APM. I have added the fields context.request.body and context.response.body to the indices in the .Net Core version (since the version I was using was not set for these fields, I added them mysel… --- ## [Weak cipher usage - diffie-hellman-group1-sha1](https://discuss.elastic.co/t/weak-cipher-usage-diffie-hellman-group1-sha1/227972)
**Author:** [@dimalini](https://discuss.elastic.co/u/dimalini)\ **Replies:** 1\ **Last updated:** [April 14, 2020, 6:01pm UTC](https://discuss.elastic.co/t/weak-cipher-usage-diffie-hellman-group1-sha1/227972 "2020-04-14T18:01:59Z")
Hi, One of our customers has reported that in their machine where ES is configured, a scanner identified port 22 to be used by some ES dependent service and that it flagged for using a weak cipher - 'diffie-hellman-group… --- ## [Cannot start elasticsearch under user](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587)
**Author:** [@gefela](https://discuss.elastic.co/u/gefela)\ **Replies:** 16\ **Last updated:** [April 14, 2020, 4:51pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587 "2020-04-14T16:51:20Z")
When I try to start elasticsearch , I get the following \[gefela@gefela bin\] ./elasticsearch ./elasticsearch-env: line 75: /etc/sysconfig/elasticsearch: Permission denied \[gefela@gefela bin\] ^C What do I need to do to f… --- ## [Kibana "Unable to revive connection" to Elasticsearch on Docker](https://discuss.elastic.co/t/kibana-unable-to-revive-connection-to-elasticsearch-on-docker/227944)
**Author:** [@ffcandido](https://discuss.elastic.co/u/ffcandido)\ **Replies:** 3\ **Last updated:** [April 14, 2020, 4:35pm UTC](https://discuss.elastic.co/t/kibana-unable-to-revive-connection-to-elasticsearch-on-docker/227944 "2020-04-14T16:35:38Z")
Hi everyone, I'm using Docker Compose to run Elasticsearch Single Node on Docker with Kibana. I reviewed my files several times and no luck so far. I'm getting "Unable to revive connection: http://elasticsearch:9200/" … --- ## [How to prevent spring boot app to access to my logstash and elasticsearch?](https://discuss.elastic.co/t/how-to-prevent-spring-boot-app-to-access-to-my-logstash-and-elasticsearch/227935)
**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\ **Replies:** 1\ **Last updated:** [April 14, 2020, 3:38pm UTC](https://discuss.elastic.co/t/how-to-prevent-spring-boot-app-to-access-to-my-logstash-and-elasticsearch/227935 "2020-04-14T15:38:51Z")
I import project spring-boot-elk and just i run it by spring suite tools, and when i run logstash it can't parsing data from my csv file . i just want to prevent spring boot to acces to my data and logstash; this is the… --- ## [Elasticsearch reindex range](https://discuss.elastic.co/t/elasticsearch-reindex-range/227954)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 3:36pm UTC](https://discuss.elastic.co/t/elasticsearch-reindex-range/227954 "2020-04-14T15:36:44Z")
Hi, in my index template "clientip" field is text. so I need to reindex the indices. It's been about 2 months and indices are create every day: logstash-vod-2020.04.14 logstash-vod-2020.04.13 In docs I see I should… --- ## [Ignore server name mismatch in Java transport client?](https://discuss.elastic.co/t/ignore-server-name-mismatch-in-java-transport-client/227950)
**Author:** [@TimWardFS](https://discuss.elastic.co/u/TimWardFS)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 3:22pm UTC](https://discuss.elastic.co/t/ignore-server-name-mismatch-in-java-transport-client/227950 "2020-04-14T15:22:28Z")
For tedious reasons discussed elsewhere, I have a temporary need to talk to Elasticsearch using the Java transport client with the complications that communication has to be over TLS, I can't change that the server cer… --- ## [Need help with Terms Aggregation : buckets count](https://discuss.elastic.co/t/need-help-with-terms-aggregation-buckets-count/227948)
**Author:** [@IanCap](https://discuss.elastic.co/u/IanCap)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 3:17pm UTC](https://discuss.elastic.co/t/need-help-with-terms-aggregation-buckets-count/227948 "2020-04-14T15:17:36Z")
Hi everyone ! I'm currently working on a query and want to count the numbers of hits returned. Given the following query : GET /index\*/\_search { "aggs": { "ip": { "terms": { "field": "ClientIP.ip… --- ## [Pinned Query with Term Aggregation get me null\_pointer\_exception](https://discuss.elastic.co/t/pinned-query-with-term-aggregation-get-me-null-pointer-exception/227932)
**Author:** [@dearste](https://discuss.elastic.co/u/dearste)\ **Replies:** 1\ **Last updated:** [April 14, 2020, 2:29pm UTC](https://discuss.elastic.co/t/pinned-query-with-term-aggregation-get-me-null-pointer-exception/227932 "2020-04-14T14:29:40Z")
Hi, try this query but gives me null\_pointer\_exception: { "query": { "pinned": { "ids": \[ "1819" \], "organic": { "bool": { "must": \[ … --- ## [Phrase-based proximity search](https://discuss.elastic.co/t/phrase-based-proximity-search/227929)
**Author:** [@whatgeorgemade](https://discuss.elastic.co/u/whatgeorgemade)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 1:54pm UTC](https://discuss.elastic.co/t/phrase-based-proximity-search/227929 "2020-04-14T13:54:27Z")
Hi all, There seem to be quite a few other threads about this on the forum but none have answers, so forgive me for posting something that has been asked before. I'm looking for a way to do a phrase-based proximity sea… --- ## [Application monitoring](https://discuss.elastic.co/t/application-monitoring/227918)
**Author:** [@rakeshraagu2](https://discuss.elastic.co/u/rakeshraagu2)\ **Replies:** 1\ **Last updated:** [April 14, 2020, 1:21pm UTC](https://discuss.elastic.co/t/application-monitoring/227918 "2020-04-14T13:21:55Z")
Hi guyz, Is it possible to monitor any particular application using elk stack? For example if I have a tomcat application server, Is it possible to monitor the status like memory usage by the application. Kindly help w… --- ## [Boost term without any query](https://discuss.elastic.co/t/boost-term-without-any-query/227921)
**Author:** [@jenssc](https://discuss.elastic.co/u/jenssc)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 1:19pm UTC](https://discuss.elastic.co/t/boost-term-without-any-query/227921 "2020-04-14T13:19:33Z")
Hi I would like to boost some results when I do a "blank" search, but it doesn't seem to work! I'm trying to do a "blank" search and then add a should match term but setting minimum\_should\_match = 0. The result doesn't … --- ## [Mapping using Logstash](https://discuss.elastic.co/t/mapping-using-logstash/227269)
**Author:** [@Antonio\_Antovski](https://discuss.elastic.co/u/Antonio_Antovski)\ **Replies:** 3\ **Last updated:** [April 14, 2020, 1:08pm UTC](https://discuss.elastic.co/t/mapping-using-logstash/227269 "2020-04-14T13:08:11Z")
Hello, I'm new to logstash, and while experimenting with it I faced some problems for which I need some help to solve them. I'm reading the data I want to put into ES, from MySQL db. I have created a template (with temp… --- ## [Getting error like master not discovered or elected yet, an election requires at least 2 nodes](https://discuss.elastic.co/t/getting-error-like-master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes/227901)
**Author:** [@raj31391](https://discuss.elastic.co/u/raj31391)\ **Replies:** 4\ **Last updated:** [April 14, 2020, 12:39pm UTC](https://discuss.elastic.co/t/getting-error-like-master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes/227901 "2020-04-14T12:39:45Z")
Getting below error while starting the elastic search node \[2020-04-14T16:53:34,444\]\[WARN \]\[o.e.c.c.ClusterFormationFailureHelper\] \[node-1\] master not discovered or elected yet, an election requires at least 2 no… --- ## [Send Multiple dashboard using a single watcher](https://discuss.elastic.co/t/send-multiple-dashboard-using-a-single-watcher/227909)
**Author:** [@KaustavNath](https://discuss.elastic.co/u/KaustavNath)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 12:27pm UTC](https://discuss.elastic.co/t/send-multiple-dashboard-using-a-single-watcher/227909 "2020-04-14T12:27:08Z")
Hello, I want to pass multiple dashboard url in a single watcher so that all dashboard can be sent as an attachment in a single email. But when I try to pass urls as array it gives error "Does not support values of type… --- ## [Help understanding range query with date](https://discuss.elastic.co/t/help-understanding-range-query-with-date/227887)
**Author:** [@mauog](https://discuss.elastic.co/u/mauog)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 10:35am UTC](https://discuss.elastic.co/t/help-understanding-range-query-with-date/227887 "2020-04-14T10:35:36Z")
Hi all, I'm very new beginner with ELK stack. I'm trying to build a query that should get the documents created today. I thougt to write this query: "query": { "range": { "@timestamp": { "gte": "now/d"… --- ## [Difference between Doc count and Number of events sent by a collector](https://discuss.elastic.co/t/difference-between-doc-count-and-number-of-events-sent-by-a-collector/227896)
**Author:** [@hilo21](https://discuss.elastic.co/u/hilo21)\ **Replies:** 4\ **Last updated:** [April 14, 2020, 11:38am UTC](https://discuss.elastic.co/t/difference-between-doc-count-and-number-of-events-sent-by-a-collector/227896 "2020-04-14T11:38:01Z")
For sizing purposes, I am studying how much data size would be taken by different logs. I have ingested more than 10000 events (PANOS events automatically generated by a script) but i only see 4472 documents in my index.… --- ## [Elasticsearch query\_string doesnt work with \* wildcharacter in the starting](https://discuss.elastic.co/t/elasticsearch-query-string-doesnt-work-with-wildcharacter-in-the-starting/227897)
**Author:** [@prematiwari](https://discuss.elastic.co/u/prematiwari)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 11:15am UTC](https://discuss.elastic.co/t/elasticsearch-query-string-doesnt-work-with-wildcharacter-in-the-starting/227897 "2020-04-14T11:15:45Z")
Hi, I am using query\_string to fetch the results for ends with text in a specific field that holds a url. So, the query can either be ends with or starts with. The starts with scenario works well with match\_phrase\_pref… --- ## [Limitation for Max number of values for a given field](https://discuss.elastic.co/t/limitation-for-max-number-of-values-for-a-given-field/227882)
**Author:** [@overmike](https://discuss.elastic.co/u/overmike)\ **Replies:** 1\ **Last updated:** [April 14, 2020, 11:12am UTC](https://discuss.elastic.co/t/limitation-for-max-number-of-values-for-a-given-field/227882 "2020-04-14T11:12:20Z")
Is there any limitation for max number of values for a given field? I am having a use case for a document with 800k distinct values for a given field. each value will be in 10-20 characters and in keyword type. Before I… --- ## [Do filter in the aggregations with composite](https://discuss.elastic.co/t/do-filter-in-the-aggregations-with-composite/227884)
**Author:** [@David\_Han](https://discuss.elastic.co/u/David_Han)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 10:08am UTC](https://discuss.elastic.co/t/do-filter-in-the-aggregations-with-composite/227884 "2020-04-14T10:08:54Z")
Hello everyone I want to get the aggregation result with filter the bucket key value. And My query is \> { \> "query": { \> "bool": { \> "filter": \[ \> { \> "term": { \> "customer\_id"… --- ## [ES Json ingestion to ES and request validation in ES](https://discuss.elastic.co/t/es-json-ingestion-to-es-and-request-validation-in-es/227854)
**Author:** [@vinay123](https://discuss.elastic.co/u/vinay123)\ **Replies:** 8\ **Last updated:** [April 14, 2020, 10:03am UTC](https://discuss.elastic.co/t/es-json-ingestion-to-es-and-request-validation-in-es/227854 "2020-04-14T10:03:03Z")
Hello Team, I have a scenario to work with ES + java spring boot 1.i have to ingest a json to file to ES driver ? is it possible. ? 2. I have a request field ,f how can i validate the my request to json fields which… --- ## [Archive old index and compress it further to decrease the size of index?](https://discuss.elastic.co/t/archive-old-index-and-compress-it-further-to-decrease-the-size-of-index/227876)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 9:11am UTC](https://discuss.elastic.co/t/archive-old-index-and-compress-it-further-to-decrease-the-size-of-index/227876 "2020-04-14T09:11:15Z")
Hi all Currently in my cluster i have been logging more than 20TB of log file, i was wondering if there is any way to somehow archive those old index in to some where that could help me decrease the size of it to store … --- ## [Apply ILM on multiple different index](https://discuss.elastic.co/t/apply-ilm-on-multiple-different-index/227525)
**Author:** [@kamfart](https://discuss.elastic.co/u/kamfart)\ **Replies:** 2\ **Last updated:** [April 14, 2020, 8:46am UTC](https://discuss.elastic.co/t/apply-ilm-on-multiple-different-index/227525 "2020-04-14T08:46:58Z")
Hi everyone. I try to figure it out something which annoying me about ILM. I should miss something. Here is my understanding of Logstash and Elasticsearch philosophy : document, objects which will contains our data … --- ## [Elasticsearch is not starting - AccessDeniedException](https://discuss.elastic.co/t/elasticsearch-is-not-starting-accessdeniedexception/227863)
**Author:** [@Billz1026](https://discuss.elastic.co/u/Billz1026)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 7:37am UTC](https://discuss.elastic.co/t/elasticsearch-is-not-starting-accessdeniedexception/227863 "2020-04-14T07:37:41Z")
Dear All, I have installed ES v7.6.2 using rpm file. I have used following command to install and ES was installed successfully without giving an error. rpm -i elasticsearch-7.6.2-x86\_64.rpm Before installing ES i had… --- ## [How to re-use helm to create 2 ES and kibana cluster?](https://discuss.elastic.co/t/how-to-re-use-helm-to-create-2-es-and-kibana-cluster/227223)
**Author:** [@Mui\_Chun\_Lim](https://discuss.elastic.co/u/Mui_Chun_Lim)\ **Replies:** 1\ **Last updated:** [April 14, 2020, 7:31am UTC](https://discuss.elastic.co/t/how-to-re-use-helm-to-create-2-es-and-kibana-cluster/227223 "2020-04-14T07:31:44Z")
I have k8s 1.17.4 and helm 2.16.5 installed in my Data Center (on premise k8s) and I intent to install elasticsearch and kibana on k8s. I setup ES with the following commands. cd elasticsearch/examples/security make … --- ## [Parallel indices in Elastic search](https://discuss.elastic.co/t/parallel-indices-in-elastic-search/226923)
**Author:** [@radhika](https://discuss.elastic.co/u/radhika)\ **Replies:** 1\ **Last updated:** [April 14, 2020, 7:30am UTC](https://discuss.elastic.co/t/parallel-indices-in-elastic-search/226923 "2020-04-14T07:30:04Z")
Hi All, Is it possible to store the fields of a document in two or more separate parallel indices and later retrieve all the fields together while doing a search. The reason for asking this is we have an elastic index w… --- ## [Custom Elasticsearch image does not run properly on Docker](https://discuss.elastic.co/t/custom-elasticsearch-image-does-not-run-properly-on-docker/227860)
**Author:** [@Quang\_D\_Tr\_n](https://discuss.elastic.co/u/Quang_D_Tr_n)\ **Replies:** 0\ **Last updated:** [April 14, 2020, 6:59am UTC](https://discuss.elastic.co/t/custom-elasticsearch-image-does-not-run-properly-on-docker/227860 "2020-04-14T06:59:34Z")
I want to build a custom Elasticsearch image which using my own elasticsearch.yml file (which works fine if I install Elasticsearch and use it in windows). I follow instruction to create Dockerfile here. This is the… --- ## [Defining a ILM policy solely based on size requirements](https://discuss.elastic.co/t/defining-a-ilm-policy-solely-based-on-size-requirements/227630)
**Author:** [@t3fsx](https://discuss.elastic.co/u/t3fsx)\ **Replies:** 1\ **Last updated:** [April 13, 2020, 10:15pm UTC](https://discuss.elastic.co/t/defining-a-ilm-policy-solely-based-on-size-requirements/227630 "2020-04-13T22:15:27Z")
I'm running a cluster on Elastic Cloud and would like to define an ILM policy based on the amount of space I have available on my space. Currently, when setting up an ILM policy, we have to chose size AND days. I'd like… --- ## [Schema - Field Conflicts - Index Design Considerations - Log Aggregation](https://discuss.elastic.co/t/schema-field-conflicts-index-design-considerations-log-aggregation/227656)
**Author:** [@Romiko\_Derbynew](https://discuss.elastic.co/u/Romiko_Derbynew)\ **Replies:** 2\ **Last updated:** [April 13, 2020, 10:14pm UTC](https://discuss.elastic.co/t/schema-field-conflicts-index-design-considerations-log-aggregation/227656 "2020-04-13T22:14:03Z")
Hi, We have around 30 Applications - each averaging 80 microservices. I have been asked to review the Log Aggregation Solution which is. Apps (microservices) -\> Apigee -\> ELK ( 6.8.0) All data from Apigee (Event { Req… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=955) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=957)