# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=959 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 960 --- ## [Does Elasticsearch have capability to form ES cluster with only one ES docker service running multiple replicas of it in Docker-Swarm](https://discuss.elastic.co/t/does-elasticsearch-have-capability-to-form-es-cluster-with-only-one-es-docker-service-running-multiple-replicas-of-it-in-docker-swarm/224943)
**Author:** [@admin\_labs](https://discuss.elastic.co/u/admin_labs)\ **Replies:** 1\ **Last updated:** [April 11, 2020, 6:29am UTC](https://discuss.elastic.co/t/does-elasticsearch-have-capability-to-form-es-cluster-with-only-one-es-docker-service-running-multiple-replicas-of-it-in-docker-swarm/224943 "2020-04-11T06:29:05Z")
I wanna run only one elasticsearch service in docker-swarm cluster having multiple replicas or at least one replica of this service in each node of docker-swarm cluster. Does Elasticsearch have capability to form ES cl… --- ## [Mapper\_parsing\_exception: object mapping tried to parse field as object, but found a concrete value](https://discuss.elastic.co/t/mapper-parsing-exception-object-mapping-tried-to-parse-field-as-object-but-found-a-concrete-value/227572)
**Author:** [@nsanthosh](https://discuss.elastic.co/u/nsanthosh)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 11:39pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-object-mapping-tried-to-parse-field-as-object-but-found-a-concrete-value/227572 "2020-04-10T23:39:19Z")
Could you suggest how to handle different value types mapped to a filed i.e. object and text? I have an index that has a mapping as listed below. The same is started failing to accept the text value. I don't have contro… --- ## [CanMatch search phase and AliasFilter](https://discuss.elastic.co/t/canmatch-search-phase-and-aliasfilter/227515)
**Author:** [@yfful](https://discuss.elastic.co/u/yfful)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 9:39pm UTC](https://discuss.elastic.co/t/canmatch-search-phase-and-aliasfilter/227515 "2020-04-10T21:39:00Z")
Hi, If an aliased index contains a filter, the SearchService#canMatch method would rewrite it. However, that method doesn't check if the alias filter got rewritten to a match\_none which would indicate that the shard cou… --- ## [File uploaded using FS Crawler - only the name of file is stored in content filed](https://discuss.elastic.co/t/file-uploaded-using-fs-crawler-only-the-name-of-file-is-stored-in-content-filed/227523)
**Author:** [@smankon](https://discuss.elastic.co/u/smankon)\ **Replies:** 3\ **Last updated:** [April 10, 2020, 6:42pm UTC](https://discuss.elastic.co/t/file-uploaded-using-fs-crawler-only-the-name-of-file-is-stored-in-content-filed/227523 "2020-04-10T18:42:36Z")
HI, I was able to upload various kinds of files using FS Crawler to ES. However when I upload a bam files (which is a huge files generated in WGS pipelines), only the name of the file is getting stored in the content fi… --- ## [Bucket\_script aggregation on filters aggegation over nested documents](https://discuss.elastic.co/t/bucket-script-aggregation-on-filters-aggegation-over-nested-documents/227541)
**Author:** [@Anton\_Pirker](https://discuss.elastic.co/u/Anton_Pirker)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 5:49pm UTC](https://discuss.elastic.co/t/bucket-script-aggregation-on-filters-aggegation-over-nested-documents/227541 "2020-04-10T17:49:23Z")
Hello! I have my documents, and they contain nested "events" (like clicks on a website) documents. Now I want to calculate the ration between nested events with name=x and nested events with name=y This is my query: … --- ## [Bucket\_script aggregation on filters aggregation not showing results](https://discuss.elastic.co/t/bucket-script-aggregation-on-filters-aggregation-not-showing-results/227539)
**Author:** [@Anton\_Pirker](https://discuss.elastic.co/u/Anton_Pirker)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 5:38pm UTC](https://discuss.elastic.co/t/bucket-script-aggregation-on-filters-aggregation-not-showing-results/227539 "2020-04-10T17:38:27Z")
Hello! I have "event" (like clicks on websites) documents in a index. Now I want to to calculate the ratio between events with name=x and events with name=y. I use a bucket\_script aggregation for that, but the result of… --- ## [Best approach to index a book content](https://discuss.elastic.co/t/best-approach-to-index-a-book-content/227186)
**Author:** [@Clony](https://discuss.elastic.co/u/Clony)\ **Replies:** 4\ **Last updated:** [April 10, 2020, 4:34pm UTC](https://discuss.elastic.co/t/best-approach-to-index-a-book-content/227186 "2020-04-10T16:34:26Z")
There are more requirements but most important ones are the following ones: I should make a search query that should look on ALL pages of a single book and give me score of the whole book(all pages). I should know whic… --- ## [Longest Hierarchy Search](https://discuss.elastic.co/t/longest-hierarchy-search/227532)
**Author:** [@Sahil\_Kalra](https://discuss.elastic.co/u/Sahil_Kalra)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 4:19pm UTC](https://discuss.elastic.co/t/longest-hierarchy-search/227532 "2020-04-10T16:19:26Z")
Hi Team, So, I am using ESv.6.4. and my requirement is, I want to search the longest matched hierarchy in search results and break the path from the nearest separator. my data is India/Up/Noida India/Delhi/Gurugram I… --- ## [Indexing Sharepoint files(mounted to network driver) using fsCrawler](https://discuss.elastic.co/t/indexing-sharepoint-files-mounted-to-network-driver-using-fscrawler/227434)
**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\ **Replies:** 12\ **Last updated:** [April 10, 2020, 4:16pm UTC](https://discuss.elastic.co/t/indexing-sharepoint-files-mounted-to-network-driver-using-fscrawler/227434 "2020-04-10T16:16:26Z")
Hi, I have mapped share point site as a network driver to my windows server 2019. The path is W:\\fsSharepointFiles Now I installed Java, fsCrawler and started indexing these files. Below are the steps I followed. i… --- ## [Permission to elasticsearch config directory](https://discuss.elastic.co/t/permission-to-elasticsearch-config-directory/227491)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 4:01pm UTC](https://discuss.elastic.co/t/permission-to-elasticsearch-config-directory/227491 "2020-04-10T16:01:18Z")
Hi, Is it normal for the elasticsearch config directory to be only accessible using sudo ? amdin1@amdin1-virtual-machine:~$ cd /etc/elasticsearch bash: cd: /etc/elasticsearch: Permission denied The issue is that when … --- ## [File owner not determined warning are coming for network drive - fsCrawler indexing sharepoint files](https://discuss.elastic.co/t/file-owner-not-determined-warning-are-coming-for-network-drive-fscrawler-indexing-sharepoint-files/227528)
**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 3:48pm UTC](https://discuss.elastic.co/t/file-owner-not-determined-warning-are-coming-for-network-drive-fscrawler-indexing-sharepoint-files/227528 "2020-04-10T15:48:46Z")
Hi David, I have mounted my sharepoint vm to a network drive and ran fscrawler. It is displaying below warnings. here are the debug logs. C:\\Program Files\\fscrawler-es7-2.7-SNAPSHOT\>.\\bin\\fscrawler index\_sharepoin… --- ## [Openvpn log collection](https://discuss.elastic.co/t/openvpn-log-collection/227529)
**Author:** [@netsnipe360](https://discuss.elastic.co/u/netsnipe360)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 3:46pm UTC](https://discuss.elastic.co/t/openvpn-log-collection/227529 "2020-04-10T15:46:32Z")
Hi All, First time here. I'd like to collect openvpn logs using my ELK stack but I can't seem to find a clear how to guide anywhere. If someone have something to share would be great. Thanks --- ## [NO Angular 7 data shown in APM monitoring](https://discuss.elastic.co/t/no-angular-7-data-shown-in-apm-monitoring/227519)
**Author:** [@uzair\_afendi](https://discuss.elastic.co/u/uzair_afendi)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 2:39pm UTC](https://discuss.elastic.co/t/no-angular-7-data-shown-in-apm-monitoring/227519 "2020-04-10T14:39:31Z")
I want to monitor my angular application but i dont see any data APM I do configuration in app-routing.moduule.ts file --- ## [Not sure how to handle this warning](https://discuss.elastic.co/t/not-sure-how-to-handle-this-warning/221961)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 1\ **Last updated:** [April 10, 2020, 2:22pm UTC](https://discuss.elastic.co/t/not-sure-how-to-handle-this-warning/221961 "2020-04-10T14:22:40Z")
Hi All, I briefly restarted my cluster and after restart I saw this warning on the Anomaly Explorer Machine learning job. This was the sequence of events: First I stopped the datafeed of the machine learning job. T… --- ## [Security Analytics Recipes - DNS Data Exfiltration](https://discuss.elastic.co/t/security-analytics-recipes-dns-data-exfiltration/226868)
**Author:** [@cezar996](https://discuss.elastic.co/u/cezar996)\ **Replies:** 10\ **Last updated:** [April 10, 2020, 2:21pm UTC](https://discuss.elastic.co/t/security-analytics-recipes-dns-data-exfiltration/226868 "2020-04-10T14:21:02Z")
Hello everybody! I try to implement the Security Analytics Recipe for DNS Data Exfiltration, posted here: github. In order to do this, I use ELK and Packetbeat v. 7.6.2. I took step by step all the explanations in the a… --- ## [Create new cluster with current existing nodes](https://discuss.elastic.co/t/create-new-cluster-with-current-existing-nodes/227349)
**Author:** [@jasonperrone](https://discuss.elastic.co/u/jasonperrone)\ **Replies:** 3\ **Last updated:** [April 10, 2020, 1:58pm UTC](https://discuss.elastic.co/t/create-new-cluster-with-current-existing-nodes/227349 "2020-04-10T13:58:46Z")
This is a little twist on the "Add new node to existing cluster". Maybe Elastic automatically handles this, but I just want to make sure. I have two independent nodes, each a cluster of 1 (themselves). Node A has some i… --- ## [The shard cannot be allocated to the same node on which a copy of the shard already exist](https://discuss.elastic.co/t/the-shard-cannot-be-allocated-to-the-same-node-on-which-a-copy-of-the-shard-already-exist/227512)
**Author:** [@chauchse](https://discuss.elastic.co/u/chauchse)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 1:48pm UTC](https://discuss.elastic.co/t/the-shard-cannot-be-allocated-to-the-same-node-on-which-a-copy-of-the-shard-already-exist/227512 "2020-04-10T13:48:34Z")
Dear, I have a strange probleme with elasticsearch (v6.8.8) on ubuntu-server I have several indexes on one unique node. \_cat/indices?v : health status index uuid pri rep docs.cou… --- ## [ERROR: \[1\] bootstrap checks failed in Elastic Search](https://discuss.elastic.co/t/error-1-bootstrap-checks-failed-in-elastic-search/227509)
**Author:** [@subhamchatterjee](https://discuss.elastic.co/u/subhamchatterjee)\ **Replies:** 4\ **Last updated:** [April 10, 2020, 1:47pm UTC](https://discuss.elastic.co/t/error-1-bootstrap-checks-failed-in-elastic-search/227509 "2020-04-10T13:47:50Z")
While running elastic search via sudo systemctl start elasticsearch.service getting error Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticsearch.serv… --- ## [ElesticSearch REST HTTP request through redirected URL](https://discuss.elastic.co/t/elesticsearch-rest-http-request-through-redirected-url/227478)
**Author:** [@pierremazieres](https://discuss.elastic.co/u/pierremazieres)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 1:09pm UTC](https://discuss.elastic.co/t/elesticsearch-rest-http-request-through-redirected-url/227478 "2020-04-10T13:09:16Z")
Hello, I am asking community help because I have some trouble requesting an ElasticSearch database with a special redirected URL. Can you please give an hand on this ? Thank you very much. First, let's start with a f… --- ## [Percentile](https://discuss.elastic.co/t/percentile/227377)
**Author:** [@chosko](https://discuss.elastic.co/u/chosko)\ **Replies:** 0\ **Last updated:** [April 9, 2020, 5:20pm UTC](https://discuss.elastic.co/t/percentile/227377 "2020-04-09T17:20:00Z")
I need to calculate the percentile from a non-numeric field. I have an index to represent all events, include the user. The objective is to calculate the percentile based on events forms users (count of user field). use… --- ## [ILM : Clarification on Current action time meaning](https://discuss.elastic.co/t/ilm-clarification-on-current-action-time-meaning/227094)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 12:03pm UTC](https://discuss.elastic.co/t/ilm-clarification-on-current-action-time-meaning/227094 "2020-04-10T12:03:56Z")
Hello ! I have the following ILM policy (just hot phase and delete) : PUT \_ilm/policy/test\_policy { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": { … --- ## [Percolator query on high level rest java api](https://discuss.elastic.co/t/percolator-query-on-high-level-rest-java-api/227493)
**Author:** [@Guillermo\_Blasco\_Jim](https://discuss.elastic.co/u/Guillermo_Blasco_Jim)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 11:48am UTC](https://discuss.elastic.co/t/percolator-query-on-high-level-rest-java-api/227493 "2020-04-10T11:48:36Z")
New High Level Rest java api does not include support for percolator queries. With the old java client the support was limited via PercolateQueryBuilder. Given that the feature is not marked as deprecated (and hopefully … --- ## [Restore a snapshot error ULTRAWARM INTERNAL EXCEPTION](https://discuss.elastic.co/t/restore-a-snapshot-error-ultrawarm-internal-exception/227470)
**Author:** [@michel1](https://discuss.elastic.co/u/michel1)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 10:49am UTC](https://discuss.elastic.co/t/restore-a-snapshot-error-ultrawarm-internal-exception/227470 "2020-04-10T10:49:00Z")
I'm trying to restore an index with curator on an Amazon Elasticsearch domain (version 6.8), but the operation seems to failed with the error ULTRAWARM INTERNAL EXCEPTION. The curator restore yaml is: actions: 1… --- ## [Docker compose multiple elasticsearch nodes](https://discuss.elastic.co/t/docker-compose-multiple-elasticsearch-nodes/227473)
**Author:** [@vyeluri](https://discuss.elastic.co/u/vyeluri)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 10:17am UTC](https://discuss.elastic.co/t/docker-compose-multiple-elasticsearch-nodes/227473 "2020-04-10T10:17:19Z")
Im trying setup 2 nodes elastic cluster with docker compose with below config on 2 servers. My master node runs and elected as a master. But Data node cannot discover the master node. On server 1 version: '2.0' servi… --- ## [KQL in ES query?](https://discuss.elastic.co/t/kql-in-es-query/227407)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 3\ **Last updated:** [April 10, 2020, 10:16am UTC](https://discuss.elastic.co/t/kql-in-es-query/227407 "2020-04-10T10:16:29Z")
Hi, is possible to use KQL in ES query? My problem is that I have just basic license, no alerts, and this is my personal project so no option to buy better license. I can do PHP/Bash script but problem is about query… K… --- ## [Recovery failure on shard](https://discuss.elastic.co/t/recovery-failure-on-shard/227453)
**Author:** [@pugdummy](https://discuss.elastic.co/u/pugdummy)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 8:04am UTC](https://discuss.elastic.co/t/recovery-failure-on-shard/227453 "2020-04-10T08:04:52Z")
Hello, I am new with elastic and coding in general. I just want to ask how to fix this issue we have on Elastic. We are using elastic and kibana with UiPath Orchestrator. We are using old version for elastic 6.2.3. \[2… --- ## [Failed to authenticate user with OpenID Connect in trial version of elasticsearch](https://discuss.elastic.co/t/failed-to-authenticate-user-with-openid-connect-in-trial-version-of-elasticsearch/227348)
**Author:** [@viveknagar](https://discuss.elastic.co/u/viveknagar)\ **Replies:** 4\ **Last updated:** [April 10, 2020, 7:15am UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-with-openid-connect-in-trial-version-of-elasticsearch/227348 "2020-04-10T07:15:21Z")
Hello All, I am using elasticsearch 7.5.2 and kbana 7.5.2 with this i am using keyclock as OP . I have enabled trial version for 30 to run single-sign-on on elasticsearch . But I am getting below error in elasticsearch. … --- ## [Append to existing field](https://discuss.elastic.co/t/append-to-existing-field/16423)
**Author:** [@bruskie24](https://discuss.elastic.co/u/bruskie24)\ **Replies:** 9\ **Last updated:** [April 10, 2020, 6:54am UTC](https://discuss.elastic.co/t/append-to-existing-field/16423 "2020-04-10T06:54:27Z")
In looking at the Elasticsearch documentation, specifically the Update API, it doesn't appear that Elasticsearch has the functionality to append to an array, it can "update" it with new values, but not preserve the e… --- ## [ERROR Delete\_snapshot action fails, get() takes at least 2 arguments (2 given)](https://discuss.elastic.co/t/error-delete-snapshot-action-fails-get-takes-at-least-2-arguments-2-given/227429)
**Author:** [@codenamekazmi](https://discuss.elastic.co/u/codenamekazmi)\ **Replies:** 1\ **Last updated:** [April 10, 2020, 5:23am UTC](https://discuss.elastic.co/t/error-delete-snapshot-action-fails-get-takes-at-least-2-arguments-2-given/227429 "2020-04-10T05:23:06Z")
This is a similar issue to Delete\_snapshot action fails, get() takes at least 2 arguments (2 given). This issue was closed without a resolution. I am running into a similar issue. Running elasticsearch version 6.83, ver… --- ## [Elasticsearch data node JVM Running out of memory](https://discuss.elastic.co/t/elasticsearch-data-node-jvm-running-out-of-memory/227415)
**Author:** [@rva](https://discuss.elastic.co/u/rva)\ **Replies:** 1\ **Last updated:** [April 10, 2020, 4:51am UTC](https://discuss.elastic.co/t/elasticsearch-data-node-jvm-running-out-of-memory/227415 "2020-04-10T04:51:03Z")
Hello, We have a cluster with 70 data nodes, 3 Masters and 2 Query nodes. JVM Data nodes Heap size is 30G - total ram 60G. On an average each data node has around 500 shards. We are seeing steady heap growth in data no… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=958) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=960)