# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=974

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 975

---

## [Fielddata is disabled, but I have added a keyword field](https://discuss.elastic.co/t/fielddata-is-disabled-but-i-have-added-a-keyword-field/222353)

<div class="topic-metadata">

**Author:** [@Terran](https://discuss.elastic.co/u/Terran)\
**Replies:** 30\
**Last updated:** [March 27, 2020, 4:46pm UTC](https://discuss.elastic.co/t/fielddata-is-disabled-but-i-have-added-a-keyword-field/222353 "2020-03-27T16:46:25Z")

</div>

I seem to be having an issue with mapping in my template. I have a field with data type "text", when I look into the Kibana SIEM console I receive the following error for several of my fields: \[illegal\_argument\_excepti…

---

## [How i can monitor Weblogic matrix and send data to ElasticSearch](https://discuss.elastic.co/t/how-i-can-monitor-weblogic-matrix-and-send-data-to-elasticsearch/225440)

<div class="topic-metadata">

**Author:** [@Sandesh\_Thombare](https://discuss.elastic.co/u/Sandesh_Thombare)\
**Replies:** 0\
**Last updated:** [March 27, 2020, 3:41pm UTC](https://discuss.elastic.co/t/how-i-can-monitor-weblogic-matrix-and-send-data-to-elasticsearch/225440 "2020-03-27T15:41:19Z")

</div>

Hi All, How i can monitor Weblogic matrix and send data to ElasticSearch so that we can develop dashobard in Grafana.

---

## [DELETE elasticsearch index while running the reindex task on the same index](https://discuss.elastic.co/t/delete-elasticsearch-index-while-running-the-reindex-task-on-the-same-index/225357)

<div class="topic-metadata">

**Author:** [@Kareemulla\_Dudekula](https://discuss.elastic.co/u/Kareemulla_Dudekula)\
**Replies:** 3\
**Last updated:** [March 27, 2020, 2:36pm UTC](https://discuss.elastic.co/t/delete-elasticsearch-index-while-running-the-reindex-task-on-the-same-index/225357 "2020-03-27T14:36:14Z")

</div>

Hi, I would like to know what will happen If I am trying to delete the elasticsearch index when the reindex task in progress.. Is it through the error? it will suspend the reindex task and delete the index? Is delete…

---

## [Unable to fetch latest event using Elastic search REST API](https://discuss.elastic.co/t/unable-to-fetch-latest-event-using-elastic-search-rest-api/225416)

<div class="topic-metadata">

**Author:** [@Namrata\_Gharat](https://discuss.elastic.co/u/Namrata_Gharat)\
**Replies:** 0\
**Last updated:** [March 27, 2020, 1:37pm UTC](https://discuss.elastic.co/t/unable-to-fetch-latest-event-using-elastic-search-rest-api/225416 "2020-03-27T13:37:00Z")

</div>

Hi I am unable to get latest events for error-logs using Elastic search REST API. I can see the latest events in Kibana dashboard but whenever try to fetch events from Elastic search REST API it shows older events. Plea…

---

## [Setting up SSL for Elasticsearch](https://discuss.elastic.co/t/setting-up-ssl-for-elasticsearch/225414)

<div class="topic-metadata">

**Author:** [@michielM](https://discuss.elastic.co/u/michielM)\
**Replies:** 0\
**Last updated:** [March 27, 2020, 1:28pm UTC](https://discuss.elastic.co/t/setting-up-ssl-for-elasticsearch/225414 "2020-03-27T13:28:44Z")

</div>

Hi everyone, I am setting up an ELK environment using auditbeat. I want so send my logs to my Elasticsearch endpoint and currently it's over http. I want to transfer this to https. I tried generating a certificate with …

---

## [Elasticsearch enable security issues](https://discuss.elastic.co/t/elasticsearch-enable-security-issues/225413)

<div class="topic-metadata">

**Author:** [@willelastz](https://discuss.elastic.co/u/willelastz)\
**Replies:** 0\
**Last updated:** [March 27, 2020, 1:13pm UTC](https://discuss.elastic.co/t/elasticsearch-enable-security-issues/225413 "2020-03-27T13:13:34Z")

</div>

Hi, I have a Elasticsearch 7.6 cluster installed base on https://github.com/openstack/openstack-helm-infra/tree/master/elasticsearch Following is what I did to enable security: a. Generate certificate ./bin/elas…

---

## [How to configure GCS repository for Elastic Cloud](https://discuss.elastic.co/t/how-to-configure-gcs-repository-for-elastic-cloud/225394)

<div class="topic-metadata">

**Author:** [@nuwancs](https://discuss.elastic.co/u/nuwancs)\
**Replies:** 0\
**Last updated:** [March 27, 2020, 11:36am UTC](https://discuss.elastic.co/t/how-to-configure-gcs-repository-for-elastic-cloud/225394 "2020-03-27T11:36:21Z")

</div>

Hi There, I am trying to create snapshots from Elastic cloud to google storage. Documentation for the task is here. As per the doc I have created a bucket, created a service account and also created a key file. And …

---

## [Elasticsearch coordinating node gc.log](https://discuss.elastic.co/t/elasticsearch-coordinating-node-gc-log/224994)

<div class="topic-metadata">

**Author:** [@andras.vecsi](https://discuss.elastic.co/u/andras.vecsi)\
**Replies:** 2\
**Last updated:** [March 27, 2020, 11:21am UTC](https://discuss.elastic.co/t/elasticsearch-coordinating-node-gc-log/224994 "2020-03-27T11:21:12Z")

</div>

Hi All, I have a 3 node elasticsearch cluster. I'm connecting my Kibana to this cluster through elasticsearch coordinating node The elasticsearch coordinating node and kibana is running on the same server. For my coo…

---

## [Simple query string syntax highlighter](https://discuss.elastic.co/t/simple-query-string-syntax-highlighter/225130)

<div class="topic-metadata">

**Author:** [@weilandia](https://discuss.elastic.co/u/weilandia)\
**Replies:** 1\
**Last updated:** [March 27, 2020, 11:15am UTC](https://discuss.elastic.co/t/simple-query-string-syntax-highlighter/225130 "2020-03-27T11:15:52Z")

</div>

Does anyone know of an existing syntax highlighter for simple query string? More generally, I’d like to find a way to help my users avoid mistakes in their queries — missing parentheses, missing quotes for a phrase, etc…

---

## [Elastic 7.6.1: 503 Service Unavailable (fresh install)](https://discuss.elastic.co/t/elastic-7-6-1-503-service-unavailable-fresh-install/225203)

<div class="topic-metadata">

**Author:** [@MSP](https://discuss.elastic.co/u/MSP)\
**Replies:** 3\
**Last updated:** [March 27, 2020, 10:10am UTC](https://discuss.elastic.co/t/elastic-7-6-1-503-service-unavailable-fresh-install/225203 "2020-03-27T10:10:29Z")

</div>

I've installed eleasticsearch according to the manual provided on https://www.elastic.co/guide/en/elasticsearch/reference/current/deb.html After starting elastic I tried to check the service: $ curl -X GET "http://127.…

---

## [DNS And IDS SIEM Data - Filebeat Elasticsearch Query Issue](https://discuss.elastic.co/t/dns-and-ids-siem-data-filebeat-elasticsearch-query-issue/225216)

<div class="topic-metadata">

**Author:** [@TexSecEng](https://discuss.elastic.co/u/TexSecEng)\
**Replies:** 1\
**Last updated:** [March 27, 2020, 9:49am UTC](https://discuss.elastic.co/t/dns-and-ids-siem-data-filebeat-elasticsearch-query-issue/225216 "2020-03-27T09:49:59Z")

</div>

Hello All, I am new to Elasticsearch and this is my first post so please be kind. I am using Elastic version 7.6 and I'm collecting Suricata IDS data with the filebeat plugin. I'm interested in a field called dns.questi…

---

## [Unknow Plugin Error When Install Plugin](https://discuss.elastic.co/t/unknow-plugin-error-when-install-plugin/225359)

<div class="topic-metadata">

**Author:** [@111306](https://discuss.elastic.co/u/111306)\
**Replies:** 1\
**Last updated:** [March 27, 2020, 8:51am UTC](https://discuss.elastic.co/t/unknow-plugin-error-when-install-plugin/225359 "2020-03-27T08:51:16Z")

</div>

Elasticsearch version ( bin/elasticsearch --version ):7.6.1 Plugins installed : none JVM version ( java -version ):1.8.0\_242 OS version ( uname -a if on a Unix-like system): Debian 9 I tried installing ik using e…

---

## [I do not see any performance improvements on my search queries with request cache](https://discuss.elastic.co/t/i-do-not-see-any-performance-improvements-on-my-search-queries-with-request-cache/225363)

<div class="topic-metadata">

**Author:** [@hhsuey](https://discuss.elastic.co/u/hhsuey)\
**Replies:** 0\
**Last updated:** [March 27, 2020, 8:45am UTC](https://discuss.elastic.co/t/i-do-not-see-any-performance-improvements-on-my-search-queries-with-request-cache/225363 "2020-03-27T08:45:58Z")

</div>

I am doing some load tests locally with and without request cache turned on for a single instance of ES. I don't see any improvements with the qps and latencies we can handle with the cache turned on. I've confirmed with…

---

## [Enrich policy query option seems mis-documented](https://discuss.elastic.co/t/enrich-policy-query-option-seems-mis-documented/225362)

<div class="topic-metadata">

**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\
**Replies:** 0\
**Last updated:** [March 27, 2020, 8:45am UTC](https://discuss.elastic.co/t/enrich-policy-query-option-seems-mis-documented/225362 "2020-03-27T08:45:12Z")

</div>

Hi! The documentation of the enrich policy definition (Enrich policy definition | Elasticsearch Guide \[7.16\] | Elastic) says that we're able to change the query type through the "query" setting: (Optional, string) Qu…

---

## [Is sorting is possible in scripted metric once we added the values to state.transactions =\[\]](https://discuss.elastic.co/t/is-sorting-is-possible-in-scripted-metric-once-we-added-the-values-to-state-transactions/225352)

<div class="topic-metadata">

**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\
**Replies:** 0\
**Last updated:** [March 27, 2020, 8:04am UTC](https://discuss.elastic.co/t/is-sorting-is-possible-in-scripted-metric-once-we-added-the-values-to-state-transactions/225352 "2020-03-27T08:04:24Z")

</div>

i have added the values to state.transactions = \[2,10,3,40,5\] is sorting is possible in map script or in combined script.

---

## [Docker with SLM automatically snapshot](https://discuss.elastic.co/t/docker-with-slm-automatically-snapshot/225345)

<div class="topic-metadata">

**Author:** [@toaitrancom](https://discuss.elastic.co/u/toaitrancom)\
**Replies:** 0\
**Last updated:** [March 27, 2020, 7:41am UTC](https://discuss.elastic.co/t/docker-with-slm-automatically-snapshot/225345 "2020-03-27T07:41:44Z")

</div>

Hello, I'm not the expert, I have followed Elasticsearch's docker documentation, and it worked! Here's my docker-compose.yml file version: '2.2' services: dropbot-es01: restart: always image: docker.elas…

---

## [Elasticsearch monitoring is returning circuit break errors](https://discuss.elastic.co/t/elasticsearch-monitoring-is-returning-circuit-break-errors/217884)

<div class="topic-metadata">

**Author:** [@kyles](https://discuss.elastic.co/u/kyles)\
**Replies:** 6\
**Last updated:** [March 27, 2020, 6:52am UTC](https://discuss.elastic.co/t/elasticsearch-monitoring-is-returning-circuit-break-errors/217884 "2020-03-27T06:52:56Z")

</div>

Cluster version 7.4.2 3 Master nodes 10 data nodes We are having the monitoring data for our cluster go to itself, recently we started seeing these errors. Can someone explain what this error means and potentially ho…

---

## [API get all values of a field, without score](https://discuss.elastic.co/t/api-get-all-values-of-a-field-without-score/225322)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 1\
**Last updated:** [March 27, 2020, 4:27am UTC](https://discuss.elastic.co/t/api-get-all-values-of-a-field-without-score/225322 "2020-03-27T04:27:34Z")

</div>

Hi, Im trying to get all the values of hostgroup field, but without score, the following query, returns only the best matches, I have tried using bool, but still the best matches GET myindex/\_search { "\_source": \["h…

---

## [Is there any problem when I turn off the default Snapshot Policy?](https://discuss.elastic.co/t/is-there-any-problem-when-i-turn-off-the-default-snapshot-policy/225327)

<div class="topic-metadata">

**Author:** [@Jack\_Phan](https://discuss.elastic.co/u/Jack_Phan)\
**Replies:** 0\
**Last updated:** [March 27, 2020, 4:13am UTC](https://discuss.elastic.co/t/is-there-any-problem-when-i-turn-off-the-default-snapshot-policy/225327 "2020-03-27T04:13:50Z")

</div>

Hi, Since the default Snapshot Policy (which runs every 30m) can overlap with my custom one, which leads to the situation that my Snapshot could fail to be taken, I decided to turn the default off (by updating the sched…

---

## [Run ansible from docker container](https://discuss.elastic.co/t/run-ansible-from-docker-container/225091)

<div class="topic-metadata">

**Author:** [@xmclark](https://discuss.elastic.co/u/xmclark)\
**Replies:** 3\
**Last updated:** [March 26, 2020, 11:57pm UTC](https://discuss.elastic.co/t/run-ansible-from-docker-container/225091 "2020-03-26T23:57:36Z")

</div>

I'm trying to run ansible to install ES from a docker container host, but I'm running into problems with systemd. Systemd doesn't work easily in docker containers. I'm not looking to start ES, I only install it with ans…

---

## [Elasticseach Backup and Restore](https://discuss.elastic.co/t/elasticseach-backup-and-restore/225301)

<div class="topic-metadata">

**Author:** [@zkma](https://discuss.elastic.co/u/zkma)\
**Replies:** 1\
**Last updated:** [March 26, 2020, 11:16pm UTC](https://discuss.elastic.co/t/elasticseach-backup-and-restore/225301 "2020-03-26T23:16:15Z")

</div>

Hi, I want to backup an elasticsearch-oss:7.2.0 cluster running in Kubernetes and restore it into a new one elasticsearch:7.2.1 running within ECK I created a snapshot which looks like to be good (40GB of data) curl /…

---

## [PROGRAM field explanation](https://discuss.elastic.co/t/program-field-explanation/225271)

<div class="topic-metadata">

**Author:** [@Spricer](https://discuss.elastic.co/u/Spricer)\
**Replies:** 0\
**Last updated:** [March 26, 2020, 6:58pm UTC](https://discuss.elastic.co/t/program-field-explanation/225271 "2020-03-26T18:58:29Z")

</div>

Kibana,elasticsearch-7.6.1-1, syslog-ng-3.24.1-1 sends logs via http://localhost:9200/\_bulk. I have issue with dynamic field (I assume) PROGRAM. From 2 different systems PROGRAM in kibana is mapped as date. What PROGRA…

---

## [Is there a way to combine default BM25 score of Elasticsearch and Dense Vectors similarity](https://discuss.elastic.co/t/is-there-a-way-to-combine-default-bm25-score-of-elasticsearch-and-dense-vectors-similarity/225168)

<div class="topic-metadata">

**Author:** [@dpappas](https://discuss.elastic.co/u/dpappas)\
**Replies:** 2\
**Last updated:** [March 26, 2020, 9:04pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-combine-default-bm25-score-of-elasticsearch-and-dense-vectors-similarity/225168 "2020-03-26T21:04:30Z")

</div>

Hello everyone! I would like to combine the BM25 score computed by Elasticsearch and The cosine similarity of dense vectors. I read the following post It would be nice if I could somehow use the BM25 score in the …

---

## [What is the boost factor of a should in a bool\_query?](https://discuss.elastic.co/t/what-is-the-boost-factor-of-a-should-in-a-bool-query/225163)

<div class="topic-metadata">

**Author:** [@abemail1](https://discuss.elastic.co/u/abemail1)\
**Replies:** 5\
**Last updated:** [March 26, 2020, 8:16pm UTC](https://discuss.elastic.co/t/what-is-the-boost-factor-of-a-should-in-a-bool-query/225163 "2020-03-26T20:16:57Z")

</div>

Hi, I'm a newbie to elasticsearch and couldn't find the answer to this in the online docs. I have a bool\_query with a must and a should. As I wanted the should part causes those results to be boosted. However, what I …

---

## [Geo\_point object mapped to text field in elasticsearch](https://discuss.elastic.co/t/geo-point-object-mapped-to-text-field-in-elasticsearch/225263)

<div class="topic-metadata">

**Author:** [@Jalil](https://discuss.elastic.co/u/Jalil)\
**Replies:** 1\
**Last updated:** [March 26, 2020, 8:12pm UTC](https://discuss.elastic.co/t/geo-point-object-mapped-to-text-field-in-elasticsearch/225263 "2020-03-26T20:12:18Z")

</div>

Dear all, I'm new on elasticseach and on this forum. I have a mongodb collection that contains objects whish contain geo\_point objects. When I index data from mongodb to elasticsearch using mongo-connector, the mappin…

---

## [ConflictError(409, ' running curator](https://discuss.elastic.co/t/conflicterror-409-running-curator/225239)

<div class="topic-metadata">

**Author:** [@Bruceclegg](https://discuss.elastic.co/u/Bruceclegg)\
**Replies:** 5\
**Last updated:** [March 26, 2020, 7:53pm UTC](https://discuss.elastic.co/t/conflicterror-409-running-curator/225239 "2020-03-26T19:53:40Z")

</div>

Yesterday I received help here that allowed me to get curator to run. I tested my action.yml in dry-run mode yesterday - and all looked fine. I am brand new to ELK and Curator - so please bear with me This morning - I…

---

## [Cluster hardware setup](https://discuss.elastic.co/t/cluster-hardware-setup/225082)

<div class="topic-metadata">

**Author:** [@Miguel\_Plazas](https://discuss.elastic.co/u/Miguel_Plazas)\
**Replies:** 4\
**Last updated:** [March 26, 2020, 7:36pm UTC](https://discuss.elastic.co/t/cluster-hardware-setup/225082 "2020-03-26T19:36:14Z")

</div>

Currently in a proyect we have 4 nodes, eachone with this specs: 10TB of HD 1TB of RAM 20 Cores of CPU I would like to confirm that: Question 1: It is a good idea to buy 6 Elasticsearch Platinum licenses for this nod…

---

## ["Common Language Runtime detected an invalid program." using NEST](https://discuss.elastic.co/t/common-language-runtime-detected-an-invalid-program-using-nest/224509)

<div class="topic-metadata">

**Author:** [@nestrq](https://discuss.elastic.co/u/nestrq)\
**Replies:** 6\
**Last updated:** [March 26, 2020, 6:06pm UTC](https://discuss.elastic.co/t/common-language-runtime-detected-an-invalid-program-using-nest/224509 "2020-03-26T18:06:40Z")

</div>

I have the exact same issue as the person in this locked thread: https://discuss.elastic.co/t/nest-6-6-getting-invalidprogramexception-sometimes/218058?u=nestrq The only difference is that I am using NEST 6.3.1 with .NE…

---

## [Analyzing a ratio of documents over time with Anomaly Detection](https://discuss.elastic.co/t/analyzing-a-ratio-of-documents-over-time-with-anomaly-detection/225255)

<div class="topic-metadata">

**Author:** [@richcollier](https://discuss.elastic.co/u/richcollier)\
**Replies:** 0\
**Last updated:** [March 26, 2020, 5:33pm UTC](https://discuss.elastic.co/t/analyzing-a-ratio-of-documents-over-time-with-anomaly-detection/225255 "2020-03-26T17:33:32Z")

</div>

Although this idea has been around for a while - I've decided to document this technique because it recently came up in a discussion Problem statement: How to analyze the ratio of documents over time with Anomaly Detect…

---

## [Optimal discovery.zen.ping\_timeout for on-prem cluster over 10gb network?](https://discuss.elastic.co/t/optimal-discovery-zen-ping-timeout-for-on-prem-cluster-over-10gb-network/225252)

<div class="topic-metadata">

**Author:** [@tmccall](https://discuss.elastic.co/u/tmccall)\
**Replies:** 0\
**Last updated:** [March 26, 2020, 5:29pm UTC](https://discuss.elastic.co/t/optimal-discovery-zen-ping-timeout-for-on-prem-cluster-over-10gb-network/225252 "2020-03-26T17:29:28Z")

</div>

We have a 7-node cluster. 3 dedicated master nodes, 4 data/ingest nodes. We had an issue where a host that was housing our VMs failed, which caused us to lose one master node and two data nodes. Our cluster was still "av…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=973)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=975)
