# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=977

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 978

---

## [Active Directory Authentication for ES and Kibana](https://discuss.elastic.co/t/active-directory-authentication-for-es-and-kibana/224690)

<div class="topic-metadata">

**Author:** [@moscha](https://discuss.elastic.co/u/moscha)\
**Replies:** 4\
**Last updated:** [March 25, 2020, 9:13am UTC](https://discuss.elastic.co/t/active-directory-authentication-for-es-and-kibana/224690 "2020-03-25T09:13:04Z")

</div>

Hello. Firstly I would like to apologize if this is the wrong section, but reading through the various older topics it seems that the process of logging to Kibana via AD is managed via ES so you need to configure ES corr…

---

## [Elasticsearch remote clusters not connecting](https://discuss.elastic.co/t/elasticsearch-remote-clusters-not-connecting/220975)

<div class="topic-metadata">

**Author:** [@Eyal\_Even](https://discuss.elastic.co/u/Eyal_Even)\
**Replies:** 11\
**Last updated:** [March 25, 2020, 9:04am UTC](https://discuss.elastic.co/t/elasticsearch-remote-clusters-not-connecting/220975 "2020-03-25T09:04:23Z")

</div>

Hello everyone, Due to a recent interest in my workplace, I've been trying to connect 2 of my clusters for DR purposes, but no matter what I do, the 2 clusters will just not connect, at all. At first, I tried connectin…

---

## [Transport.publish\_address was printed as \[ip:port\] instead of \[hostname/ip:port\] (7.5.1)](https://discuss.elastic.co/t/transport-publish-address-was-printed-as-ip-port-instead-of-hostname-ip-port-7-5-1/224666)

<div class="topic-metadata">

**Author:** [@MMCDK](https://discuss.elastic.co/u/MMCDK)\
**Replies:** 5\
**Last updated:** [March 25, 2020, 8:51am UTC](https://discuss.elastic.co/t/transport-publish-address-was-printed-as-ip-port-instead-of-hostname-ip-port-7-5-1/224666 "2020-03-25T08:51:45Z")

</div>

Hi I am aware of other similar posts regarding the same issue as I describe here. I have tried to follow the posts at use the suggested solutions, but I have not had any success implementing the solution. Therefore I tr…

---

## [Reasons Behind HPROF Files - What is the Cause?](https://discuss.elastic.co/t/reasons-behind-hprof-files-what-is-the-cause/223832)

<div class="topic-metadata">

**Author:** [@sarahFYB](https://discuss.elastic.co/u/sarahFYB)\
**Replies:** 11\
**Last updated:** [March 25, 2020, 8:47am UTC](https://discuss.elastic.co/t/reasons-behind-hprof-files-what-is-the-cause/223832 "2020-03-25T08:47:34Z")

</div>

Hi All We are on Elasticsearch 6.2.2 where it has thrown a HPROF file when indexing the content of documents for Micro Focus' Content Manager. The file seems to be referring to massive amounts of memory leaks. Is ther…

---

## [I want to download the test data under the rally service data directory. I need to download the address](https://discuss.elastic.co/t/i-want-to-download-the-test-data-under-the-rally-service-data-directory-i-need-to-download-the-address/224956)

<div class="topic-metadata">

**Author:** [@kangning1](https://discuss.elastic.co/u/kangning1)\
**Replies:** 0\
**Last updated:** [March 25, 2020, 8:36am UTC](https://discuss.elastic.co/t/i-want-to-download-the-test-data-under-the-rally-service-data-directory-i-need-to-download-the-address/224956 "2020-03-25T08:36:57Z")

</div>

I want to download the test data under the rally service data directory. I need to download the address。 Place the test data directory as .rally/benchmarks/data

---

## [Error fetching fields for index pattern filebeat](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-filebeat/224949)

<div class="topic-metadata">

**Author:** [@alireza\_MHZ](https://discuss.elastic.co/u/alireza_MHZ)\
**Replies:** 0\
**Last updated:** [March 25, 2020, 7:04am UTC](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-filebeat/224949 "2020-03-25T07:04:48Z")

</div>

hello i have a server with ELK 7.6.1 installed and i want try to send IISlogs using filebeat-7.6.1-oss i use bitmani appliance ready OVF i have this problem when click on indexes created by filebeat for IIS-Logs Erro…

---

## [Buffer memory usage on Linux server](https://discuss.elastic.co/t/buffer-memory-usage-on-linux-server/224947)

<div class="topic-metadata">

**Author:** [@tarophin403](https://discuss.elastic.co/u/tarophin403)\
**Replies:** 0\
**Last updated:** [March 25, 2020, 6:54am UTC](https://discuss.elastic.co/t/buffer-memory-usage-on-linux-server/224947 "2020-03-25T06:54:46Z")

</div>

16g of the total 32g memory was allocated as heap memory. I know that lucene uses buffer memory, and I know that buffer memory is managed automatically without any control. However, since the resource monitoring system…

---

## [Changing Data stored in Elasticsearch](https://discuss.elastic.co/t/changing-data-stored-in-elasticsearch/224935)

<div class="topic-metadata">

**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\
**Replies:** 3\
**Last updated:** [March 25, 2020, 6:11am UTC](https://discuss.elastic.co/t/changing-data-stored-in-elasticsearch/224935 "2020-03-25T06:11:26Z")

</div>

Hi Team, Quick Question, can we make changes in some indices which is stored in elasticsearch now. basically it's now the old data in which I want to make some changes, like there's this column in my data call Acc no.…

---

## [Indexing /\_search issue](https://discuss.elastic.co/t/indexing-search-issue/224920)

<div class="topic-metadata">

**Author:** [@Kumar\_Subham](https://discuss.elastic.co/u/Kumar_Subham)\
**Replies:** 2\
**Last updated:** [March 25, 2020, 5:51am UTC](https://discuss.elastic.co/t/indexing-search-issue/224920 "2020-03-25T05:51:54Z")

</div>

I have index userguide and I put my settings and mapping but when I do myindexname/\_search see error in post man my Index Put myawsdomain/userguide { "mappings": { "section": { "properties…

---

## [Copy field value to a new field in existing index](https://discuss.elastic.co/t/copy-field-value-to-a-new-field-in-existing-index/224595)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 6\
**Last updated:** [March 25, 2020, 5:50am UTC](https://discuss.elastic.co/t/copy-field-value-to-a-new-field-in-existing-index/224595 "2020-03-25T05:50:43Z")

</div>

Hey all, I had a field name with a typo. Let's say it was called Helo.keyword. I have created a new field with the correct name Hello.keyword. New data is populating the new field. How can I copy the old values to th…

---

## [BoolQueryBuilders.should goes to inside filter](https://discuss.elastic.co/t/boolquerybuilders-should-goes-to-inside-filter/224942)

<div class="topic-metadata">

**Author:** [@ghs](https://discuss.elastic.co/u/ghs)\
**Replies:** 0\
**Last updated:** [March 25, 2020, 5:24am UTC](https://discuss.elastic.co/t/boolquerybuilders-should-goes-to-inside-filter/224942 "2020-03-25T05:24:24Z")

</div>

I'm using ES 6.6 and I use Java RestClient I try to create query like this. BoolQueryBuilder boolQueryBuilder = QueryBuilders.boolQuery() .should( QueryBuilders.multiMatchQuery... …

---

## [Master not discovered or elected yet, an election requires a node with id \[eJcn6jOSRw65wy4liDC1VA\]](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-a-node-with-id-ejcn6josrw65wy4lidc1va/224759)

<div class="topic-metadata">

**Author:** [@samanvi\_sweety](https://discuss.elastic.co/u/samanvi_sweety)\
**Replies:** 4\
**Last updated:** [March 25, 2020, 4:41am UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-a-node-with-id-ejcn6josrw65wy4lidc1va/224759 "2020-03-25T04:41:29Z")

</div>

Hi, I am using 7.6 version.When I am trying to run elasticsearch bat file,I am facing with following errors \[2020-03-24T08:43:26,869\]\[INFO \]\[o.e.n.Node \] \[10INLPC0SP3TF\] initialized \[2020-03-24T08:43:26,8…

---

## [Could not import file csv from Kibana or Logstash to Elasticsearch](https://discuss.elastic.co/t/could-not-import-file-csv-from-kibana-or-logstash-to-elasticsearch/224817)

<div class="topic-metadata">

**Author:** [@hanguyen.uet](https://discuss.elastic.co/u/hanguyen.uet)\
**Replies:** 2\
**Last updated:** [March 25, 2020, 3:34am UTC](https://discuss.elastic.co/t/could-not-import-file-csv-from-kibana-or-logstash-to-elasticsearch/224817 "2020-03-25T03:34:01Z")

</div>

Hi everybody! When I imported the csv file with 1000 records, everything was fine. But with 100,000 records, the error: "File could not be read. Unexpected token \< in JSON at position 0". Can someone help me? Thank yo…

---

## [I can't do the best query in elasticSearch](https://discuss.elastic.co/t/i-cant-do-the-best-query-in-elasticsearch/224933)

<div class="topic-metadata">

**Author:** [@kang\_kang](https://discuss.elastic.co/u/kang_kang)\
**Replies:** 0\
**Last updated:** [March 25, 2020, 2:47am UTC](https://discuss.elastic.co/t/i-cant-do-the-best-query-in-elasticsearch/224933 "2020-03-25T02:47:39Z")

</div>

My configuration list 8c 32G \* 4 Data node 2c 4g \* 3 Master node 180w+ 32 fields doucument data in An index. One segment per node,Single fragmentation.Three copies in 4 Data node query Want to achieve the same effect as …

---

## [Does basic license of elastic stack support basic authentication?](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366)

<div class="topic-metadata">

**Author:** [@SSim](https://discuss.elastic.co/u/SSim)\
**Replies:** 13\
**Last updated:** [March 25, 2020, 2:12am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366 "2020-03-25T02:12:41Z")

</div>

Hello, I am using a basic license of elastic stack and would like to confirm whether the basic license of elastic stack supports basic authentication like a prompt for basic username and password to be entered before ac…

---

## [Document-level metadata (noop)](https://discuss.elastic.co/t/document-level-metadata-noop/222532)

<div class="topic-metadata">

**Author:** [@lukas-gitl](https://discuss.elastic.co/u/lukas-gitl)\
**Replies:** 9\
**Last updated:** [March 25, 2020, 1:26am UTC](https://discuss.elastic.co/t/document-level-metadata-noop/222532 "2020-03-25T01:26:59Z")

</div>

Use Case - Why document level meta data would be really handy: We store big document with lots of nested child documents, so updating a document is very expensive When a document is "synced" from a persistent data stor…

---

## [Sending Data From ASP.NET MVC (4.6.1) (VB.NET)](https://discuss.elastic.co/t/sending-data-from-asp-net-mvc-4-6-1-vb-net/224861)

<div class="topic-metadata">

**Author:** [@newwayweb](https://discuss.elastic.co/u/newwayweb)\
**Replies:** 1\
**Last updated:** [March 24, 2020, 10:34pm UTC](https://discuss.elastic.co/t/sending-data-from-asp-net-mvc-4-6-1-vb-net/224861 "2020-03-24T22:34:23Z")

</div>

Team, So I have been trying to follow the steps to try to start sending data (logs, exceptions...) to Kibana. I have installed Nuget packages tried follow the code examples. But could not get it to do it. I saw the link…

---

## [Alphanumeric Search](https://discuss.elastic.co/t/alphanumeric-search/224901)

<div class="topic-metadata">

**Author:** [@Gopal\_Chauhan](https://discuss.elastic.co/u/Gopal_Chauhan)\
**Replies:** 4\
**Last updated:** [March 24, 2020, 9:00pm UTC](https://discuss.elastic.co/t/alphanumeric-search/224901 "2020-03-24T21:00:44Z")

</div>

Hi, I am trying to Search a alphanumeric value - 1Z74W6A90342550699 against a index. This index does not contain any such value against any fields. But still I get so many records. Ideally i should not get any record …

---

## [Delete Documents From Large Index based on Timestamp](https://discuss.elastic.co/t/delete-documents-from-large-index-based-on-timestamp/223814)

<div class="topic-metadata">

**Author:** [@Oleksandr.Tedikov](https://discuss.elastic.co/u/Oleksandr.Tedikov)\
**Replies:** 6\
**Last updated:** [March 24, 2020, 7:49pm UTC](https://discuss.elastic.co/t/delete-documents-from-large-index-based-on-timestamp/223814 "2020-03-24T19:49:07Z")

</div>

Hello, Elastic Cluster Ram, Disk Size 500GB, 3 Master Nodes and 3 Data/Ingest Nodes(1 VCPU, 4GB) Currently I have Index which is ~200 GB in 1 Shard for 3 month of usage. I would like to delete data for 2 months and le…

---

## [Create a simple http status code watcher](https://discuss.elastic.co/t/create-a-simple-http-status-code-watcher/224891)

<div class="topic-metadata">

**Author:** [@leftright1](https://discuss.elastic.co/u/leftright1)\
**Replies:** 0\
**Last updated:** [March 24, 2020, 5:19pm UTC](https://discuss.elastic.co/t/create-a-simple-http-status-code-watcher/224891 "2020-03-24T17:19:45Z")

</div>

Hi I am pretty new to this and I have been studying the docs for the last two days but I am struggling to create a simple watcher that does following: From a Heartbeat that checks multiple URLs and sends the log to the…

---

## [Null pointer exeption while creating a scripted metric](https://discuss.elastic.co/t/null-pointer-exeption-while-creating-a-scripted-metric/220646)

<div class="topic-metadata">

**Author:** [@Jorge\_Herrera](https://discuss.elastic.co/u/Jorge_Herrera)\
**Replies:** 9\
**Last updated:** [March 24, 2020, 4:53pm UTC](https://discuss.elastic.co/t/null-pointer-exeption-while-creating-a-scripted-metric/220646 "2020-03-24T16:53:11Z")

</div>

Hi, I am creating a scripted metric to use it later for a transfrom. I am trying to get the count of the fields with a specific value, but i receive the next error: { "error": { "root\_cause": \[ { "ty…

---

## [Perform a single \_reindex request that has "index\_a" from the remote cluster, and another "index\_a" of the current cluster, and reindexing them both to "index\_b"?](https://discuss.elastic.co/t/perform-a-single-reindex-request-that-has-index-a-from-the-remote-cluster-and-another-index-a-of-the-current-cluster-and-reindexing-them-both-to-index-b/224734)

<div class="topic-metadata">

**Author:** [@Yotam\_Levy](https://discuss.elastic.co/u/Yotam_Levy)\
**Replies:** 1\
**Last updated:** [March 24, 2020, 4:39pm UTC](https://discuss.elastic.co/t/perform-a-single-reindex-request-that-has-index-a-from-the-remote-cluster-and-another-index-a-of-the-current-cluster-and-reindexing-them-both-to-index-b/224734 "2020-03-24T16:39:35Z")

</div>

I have "index\_a" on a remote elasticsearch cluster that looks like this: { \_index: "index\_a", \_type: "\_doc", \_id: "1", \_score: 1, \_source: { customer\_id: "1234", customer\_name: "spider", …

---

## [One shot search query by scroll from index \> 10'000](https://discuss.elastic.co/t/one-shot-search-query-by-scroll-from-index-10000/224396)

<div class="topic-metadata">

**Author:** [@missill](https://discuss.elastic.co/u/missill)\
**Replies:** 6\
**Last updated:** [March 23, 2020, 5:02pm UTC](https://discuss.elastic.co/t/one-shot-search-query-by-scroll-from-index-10000/224396 "2020-03-23T17:02:01Z")

</div>

Hi everybody, I'd like get result from a search query from start index \> 10000 but when i do it, i get this error : {"error":{"root\_cause":\[{"type":"query\_phase\_execution\_exception","reason":"Result window is too larg…

---

## [Date comparison in painless script](https://discuss.elastic.co/t/date-comparison-in-painless-script/224854)

<div class="topic-metadata">

**Author:** [@satish\_Kumar087](https://discuss.elastic.co/u/satish_Kumar087)\
**Replies:** 1\
**Last updated:** [March 24, 2020, 4:30pm UTC](https://discuss.elastic.co/t/date-comparison-in-painless-script/224854 "2020-03-24T16:30:58Z")

</div>

Hey there, I am new to Elastic search. I am trying to update a record by using \_update\_by\_query API, by using a painless script as below. "script": { "source": "if(ctx.\_source.global\_cro\_dist\_due \< params.current){…

---

## [NEST Analyzer/Tokenization Example](https://discuss.elastic.co/t/nest-analyzer-tokenization-example/224877)

<div class="topic-metadata">

**Author:** [@Parakoopa](https://discuss.elastic.co/u/Parakoopa)\
**Replies:** 0\
**Last updated:** [March 24, 2020, 3:42pm UTC](https://discuss.elastic.co/t/nest-analyzer-tokenization-example/224877 "2020-03-24T15:42:50Z")

</div>

Hi Everyone, Wondering if I am going about this the wrong way; I have a simple signalR app sending data too and from a web page. Right now when I enter in one item with the prefix "https://" or anything with the reserve…

---

## [Secure ELK-7.6 Install](https://discuss.elastic.co/t/secure-elk-7-6-install/224836)

<div class="topic-metadata">

**Author:** [@manikandanb87](https://discuss.elastic.co/u/manikandanb87)\
**Replies:** 2\
**Last updated:** [March 24, 2020, 3:23pm UTC](https://discuss.elastic.co/t/secure-elk-7-6-install/224836 "2020-03-24T15:23:45Z")

</div>

Hi Team, I am new to ES and eager to acquire the ELK skill and expertise. I completed my ELK-7.6.1 deployment by following the below blog - But, I found that there is no security restriction for this kind of deployme…

---

## [Elasticsearch 5.3.3: filter docs with same value](https://discuss.elastic.co/t/elasticsearch-5-3-3-filter-docs-with-same-value/224868)

<div class="topic-metadata">

**Author:** [@domanskyi](https://discuss.elastic.co/u/domanskyi)\
**Replies:** 0\
**Last updated:** [March 24, 2020, 3:06pm UTC](https://discuss.elastic.co/t/elasticsearch-5-3-3-filter-docs-with-same-value/224868 "2020-03-24T15:06:56Z")

</div>

I have next mapping: { "mappings": { "jobs": { "properties": { "bullets": { "type": "text" }, "description": { "type": "text" }, "title": { …

---

## [Elasticsearch stopping and getting network exception](https://discuss.elastic.co/t/elasticsearch-stopping-and-getting-network-exception/224515)

<div class="topic-metadata">

**Author:** [@shubham\_hate](https://discuss.elastic.co/u/shubham_hate)\
**Replies:** 3\
**Last updated:** [March 24, 2020, 1:54pm UTC](https://discuss.elastic.co/t/elasticsearch-stopping-and-getting-network-exception/224515 "2020-03-24T13:54:22Z")

</div>

Hello, I have deployed single node on machine, while starting the elasticsearch is getting stopped and returns and exception no-up and running site-local private address found, got... Please find the below log of ES. N…

---

## [Using Distance Feature query with matches as possible origins](https://discuss.elastic.co/t/using-distance-feature-query-with-matches-as-possible-origins/224446)

<div class="topic-metadata">

**Author:** [@aramperes](https://discuss.elastic.co/u/aramperes)\
**Replies:** 2\
**Last updated:** [March 24, 2020, 1:47pm UTC](https://discuss.elastic.co/t/using-distance-feature-query-with-matches-as-possible-origins/224446 "2020-03-24T13:47:21Z")

</div>

If my index is comprised of documents with a "date" field, how can I find all the closest neighbors considering there may be multiple origins? For example, we're interested in finding movies that were released around an…

---

## [S3 permissions](https://discuss.elastic.co/t/s3-permissions/224531)

<div class="topic-metadata">

**Author:** [@thoth](https://discuss.elastic.co/u/thoth)\
**Replies:** 3\
**Last updated:** [March 24, 2020, 1:44pm UTC](https://discuss.elastic.co/t/s3-permissions/224531 "2020-03-24T13:44:08Z")

</div>

The documentation has become outdated on the S3 permissions. https://www.elastic.co/guide/en/elasticsearch/plugins/current/repository-s3-repository.html#repository-s3-permissions If you try to apply this policy AWS com…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=976)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=978)
