# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=982

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 983

---

## [Xpack Basic - http encryption](https://discuss.elastic.co/t/xpack-basic-http-encryption/224243)

<div class="topic-metadata">

**Author:** [@quangnguyen](https://discuss.elastic.co/u/quangnguyen)\
**Replies:** 1\
**Last updated:** [March 19, 2020, 10:10am UTC](https://discuss.elastic.co/t/xpack-basic-http-encryption/224243 "2020-03-19T10:10:22Z")

</div>

Hello community, I'm trying to understand the xpack basic feature but i can not figure out if the http encryption feature with certificates belong to the xpack basic? I want to encrypt the communication when i talking t…

---

## [Get Data in CSV or Excel format from Elastic Search](https://discuss.elastic.co/t/get-data-in-csv-or-excel-format-from-elastic-search/224060)

<div class="topic-metadata">

**Author:** [@Rabii47](https://discuss.elastic.co/u/Rabii47)\
**Replies:** 3\
**Last updated:** [March 19, 2020, 9:35am UTC](https://discuss.elastic.co/t/get-data-in-csv-or-excel-format-from-elastic-search/224060 "2020-03-19T09:35:09Z")

</div>

Hi, i am trying to get the data from ElasticSearch in my Spring Application in the format Excel or CSV. The size of my data is between 5000 and 10000 . What is the best way to accomplish that ?

---

## [Help me set up a multi-server environment](https://discuss.elastic.co/t/help-me-set-up-a-multi-server-environment/223292)

<div class="topic-metadata">

**Author:** [@jw.lee](https://discuss.elastic.co/u/jw.lee)\
**Replies:** 6\
**Last updated:** [March 19, 2020, 8:39am UTC](https://discuss.elastic.co/t/help-me-set-up-a-multi-server-environment/223292 "2020-03-19T08:39:41Z")

</div>

I want to connect 3 external PCs. Three internal devices tested have been connected correctly. I want to set it to communicate with an external PC. Testing Elasticsearch.yml on the internal network ------------------…

---

## [Is there a limit on the number of fields specified in the "include" param in Reindex call](https://discuss.elastic.co/t/is-there-a-limit-on-the-number-of-fields-specified-in-the-include-param-in-reindex-call/223689)

<div class="topic-metadata">

**Author:** [@Harshraj\_Shinde](https://discuss.elastic.co/u/Harshraj_Shinde)\
**Replies:** 5\
**Last updated:** [March 19, 2020, 8:29am UTC](https://discuss.elastic.co/t/is-there-a-limit-on-the-number-of-fields-specified-in-the-include-param-in-reindex-call/223689 "2020-03-19T08:29:26Z")

</div>

Hi, This is the error message I am facing while executing the Reindex call \[2020-03-13T16:08:39,042\]\[WARN \]\[o.e.i.r.TransportReindexAction\] \[ExportDatabase\] giving up on search because it failed with a non-retryable e…

---

## [Datafeed has been retrieving no data for a while](https://discuss.elastic.co/t/datafeed-has-been-retrieving-no-data-for-a-while/224119)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 4\
**Last updated:** [March 19, 2020, 7:20am UTC](https://discuss.elastic.co/t/datafeed-has-been-retrieving-no-data-for-a-while/224119 "2020-03-19T07:20:29Z")

</div>

hi, I've created an anomaly detection job, and after the creation it wont update anymore: attached the json: { "job\_id": "ml-test", "job\_type": "anomaly\_detector", "job\_version": "7.6.1", "groups": \[ "forti…

---

## [Score\_mode avg returns 1 for all documents](https://discuss.elastic.co/t/score-mode-avg-returns-1-for-all-documents/218822)

<div class="topic-metadata">

**Author:** [@wall](https://discuss.elastic.co/u/wall)\
**Replies:** 8\
**Last updated:** [March 19, 2020, 6:32am UTC](https://discuss.elastic.co/t/score-mode-avg-returns-1-for-all-documents/218822 "2020-03-19T06:32:50Z")

</div>

Hi Elasticians! I'm using function score with score\_mode avg and boost\_mode replace. And according to documentation I'm expecting the query function score to be overriden by the function score filters. This works as e…

---

## [Installing an example plugin in elasticsearch](https://discuss.elastic.co/t/installing-an-example-plugin-in-elasticsearch/222913)

<div class="topic-metadata">

**Author:** [@divyanshumarwah](https://discuss.elastic.co/u/divyanshumarwah)\
**Replies:** 2\
**Last updated:** [March 19, 2020, 6:25am UTC](https://discuss.elastic.co/t/installing-an-example-plugin-in-elasticsearch/222913 "2020-03-19T06:25:17Z")

</div>

Hi, I am new to elasticsearch, and I want to develop an elasticsearch plugin for rescoring. I was looking through the web and found an example plugin in elasticsearch repository, Expert Scoring Script (https://github.co…

---

## [What Elasticsearch privileges should Curator have?](https://discuss.elastic.co/t/what-elasticsearch-privileges-should-curator-have/224019)

<div class="topic-metadata">

**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\
**Replies:** 1\
**Last updated:** [March 19, 2020, 6:15am UTC](https://discuss.elastic.co/t/what-elasticsearch-privileges-should-curator-have/224019 "2020-03-19T06:15:00Z")

</div>

Elasticsearch version: 6.8.2 Elasticsearch Curator version: 5.7.6 My action files were working fine before I enabled TLS. So in order to make sure, I spun up 2 instances of ELK (1 with and 1 without TLS) using helm an…

---

## [Please help me with below error and understanding why the messages are not being indexed](https://discuss.elastic.co/t/please-help-me-with-below-error-and-understanding-why-the-messages-are-not-being-indexed/224213)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 5\
**Last updated:** [March 19, 2020, 6:11am UTC](https://discuss.elastic.co/t/please-help-me-with-below-error-and-understanding-why-the-messages-are-not-being-indexed/224213 "2020-03-19T06:11:12Z")

</div>

Hi Folks, I am trying to ingest few messages but those are failing with below error. Can someone please help me rectifying it? \[WARN \] 2020-03-19 10:17:31.977 \[\[main\]\>worker2\] elasticsearch - Could not index event to E…

---

## [ES cluster throughput drops with 6 node cluster](https://discuss.elastic.co/t/es-cluster-throughput-drops-with-6-node-cluster/223566)

<div class="topic-metadata">

**Author:** [@sumeet\_dembra](https://discuss.elastic.co/u/sumeet_dembra)\
**Replies:** 4\
**Last updated:** [March 19, 2020, 5:52am UTC](https://discuss.elastic.co/t/es-cluster-throughput-drops-with-6-node-cluster/223566 "2020-03-19T05:52:53Z")

</div>

Hi, I am trying to benchmark ES cluster. The cluster has a single index with single shard. We need to benchmark no. of read operations supported by the cluster. If we have 3 master eligible data nodes (all data nodes h…

---

## [Query by distance performance is low](https://discuss.elastic.co/t/query-by-distance-performance-is-low/224128)

<div class="topic-metadata">

**Author:** [@Danbl](https://discuss.elastic.co/u/Danbl)\
**Replies:** 2\
**Last updated:** [March 19, 2020, 5:51am UTC](https://discuss.elastic.co/t/query-by-distance-performance-is-low/224128 "2020-03-19T05:51:36Z")

</div>

My search condition is using location to search objects around user. Search range is calculated dynamically. CPU is very high. What can i do to get better performance { "query": { "bool": { "filt…

---

## [Understanding Elasticsearch TF/IDF score in 6.8](https://discuss.elastic.co/t/understanding-elasticsearch-tf-idf-score-in-6-8/224009)

<div class="topic-metadata">

**Author:** [@AV7](https://discuss.elastic.co/u/AV7)\
**Replies:** 3\
**Last updated:** [March 19, 2020, 3:59am UTC](https://discuss.elastic.co/t/understanding-elasticsearch-tf-idf-score-in-6-8/224009 "2020-03-19T03:59:22Z")

</div>

Hi, I was looking at the lucene TF/IDF practical scoring function vs what is reported in the ES explain API. For ES 6.8, it used lucence 7.x for calculating the TF/IDF score which has a squared IDF term However, when…

---

## [Can not create elasticsearch cluster in different servers with docker compose](https://discuss.elastic.co/t/can-not-create-elasticsearch-cluster-in-different-servers-with-docker-compose/223896)

<div class="topic-metadata">

**Author:** [@wvx](https://discuss.elastic.co/u/wvx)\
**Replies:** 2\
**Last updated:** [March 19, 2020, 2:45am UTC](https://discuss.elastic.co/t/can-not-create-elasticsearch-cluster-in-different-servers-with-docker-compose/223896 "2020-03-19T02:45:01Z")

</div>

I have 2 servers, and create elasticsearch nodes in the 2 servers. the content of docker-compose.yml files are like these: es0: image: elasticsearch:7.6.0 container\_name: es0 environment: - "ES\_JAVA\_OP…

---

## [Delete unused templates](https://discuss.elastic.co/t/delete-unused-templates/224198)

<div class="topic-metadata">

**Author:** [@ashokm](https://discuss.elastic.co/u/ashokm)\
**Replies:** 3\
**Last updated:** [March 19, 2020, 1:42am UTC](https://discuss.elastic.co/t/delete-unused-templates/224198 "2020-03-19T01:42:50Z")

</div>

We are on ES version 6.8.0. Due to an issue in our software, we ended up having 30k unused templates on a 3 node cluster. Deleting these one by one is really slow like each one is taking upto 2 minutes and some are timin…

---

## [Can I aggregate multiple indexes with different schemas?](https://discuss.elastic.co/t/can-i-aggregate-multiple-indexes-with-different-schemas/224206)

<div class="topic-metadata">

**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\
**Replies:** 1\
**Last updated:** [March 19, 2020, 1:34am UTC](https://discuss.elastic.co/t/can-i-aggregate-multiple-indexes-with-different-schemas/224206 "2020-03-19T01:34:21Z")

</div>

I am trying to get statistics using the log of the homepage user. There are three types of logs: login log, user action log (search, click), and video enrollment information. I want to store these logs in three Indexes…

---

## [Date\_nanos](https://discuss.elastic.co/t/date-nanos/224197)

<div class="topic-metadata">

**Author:** [@sentient](https://discuss.elastic.co/u/sentient)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 10:45pm UTC](https://discuss.elastic.co/t/date-nanos/224197 "2020-03-18T22:45:54Z")

</div>

never mind (unable to delete)

---

## [Connecting Elastic search cloud with Jupiter notebook](https://discuss.elastic.co/t/connecting-elastic-search-cloud-with-jupiter-notebook/224004)

<div class="topic-metadata">

**Author:** [@Vasuji](https://discuss.elastic.co/u/Vasuji)\
**Replies:** 2\
**Last updated:** [March 18, 2020, 9:31pm UTC](https://discuss.elastic.co/t/connecting-elastic-search-cloud-with-jupiter-notebook/224004 "2020-03-18T21:31:04Z")

</div>

Hi all, I am getting trouble with connecting to the elastic cloud with the following code through Jupyter notebook: es = Elasticsearch(\["https://xxxxxxxxxxxxxxxx.us-west-1.aws.found.io:9243/"\]) es.info(pretty=True) =\> …

---

## [Is there any way to know how much data are we pushing to an Index monthly?](https://discuss.elastic.co/t/is-there-any-way-to-know-how-much-data-are-we-pushing-to-an-index-monthly/223783)

<div class="topic-metadata">

**Author:** [@Chop](https://discuss.elastic.co/u/Chop)\
**Replies:** 4\
**Last updated:** [March 18, 2020, 8:32pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-know-how-much-data-are-we-pushing-to-an-index-monthly/223783 "2020-03-18T20:32:37Z")

</div>

I wonder if there is any way to monitor how much data are we pushing to a specific index. i can see some information on the monitoring section but i dont think i can pull off the information i am looking for from there. …

---

## [Cluster flooded with random date index](https://discuss.elastic.co/t/cluster-flooded-with-random-date-index/222677)

<div class="topic-metadata">

**Author:** [@stack](https://discuss.elastic.co/u/stack)\
**Replies:** 6\
**Last updated:** [March 18, 2020, 8:30pm UTC](https://discuss.elastic.co/t/cluster-flooded-with-random-date-index/222677 "2020-03-18T20:30:48Z")

</div>

Hello, I've been deploying winlogbeat on many servers at the same time lately and it seem like one or more of them if provoking a bug that create lot of indexs with differents date stamp (my index defined as winlogbeat-…

---

## [Automating Upgrades for Agents/Clients](https://discuss.elastic.co/t/automating-upgrades-for-agents-clients/224183)

<div class="topic-metadata">

**Author:** [@bberesna](https://discuss.elastic.co/u/bberesna)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 7:55pm UTC](https://discuss.elastic.co/t/automating-upgrades-for-agents-clients/224183 "2020-03-18T19:55:03Z")

</div>

I'm just wondering if there is some way to query for all attached agents. I'd like to generate a list of agents/servers for ansible so I can upgrade them all to their latest version. Or if someone has a better solution…

---

## [Best practices: TransportError(429, 'circuit\_breaking\_exception', '\[parent\] Data too large, data for \[\<transport\_request\>\]](https://discuss.elastic.co/t/best-practices-transporterror-429-circuit-breaking-exception-parent-data-too-large-data-for-transport-request/224177)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 7:24pm UTC](https://discuss.elastic.co/t/best-practices-transporterror-429-circuit-breaking-exception-parent-data-too-large-data-for-transport-request/224177 "2020-03-18T19:24:06Z")

</div>

Hi! With time, an error occurs more and more often on my server: elasticsearch.exceptions.TransportError: TransportError(429, 'circuit\_breaking\_exception', '\[parent\] Data too large, data for \[\<transport\_request\>\] woul…

---

## [Percolator Performance (ES 5.6)](https://discuss.elastic.co/t/percolator-performance-es-5-6/224173)

<div class="topic-metadata">

**Author:** [@dolphorama](https://discuss.elastic.co/u/dolphorama)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 6:44pm UTC](https://discuss.elastic.co/t/percolator-performance-es-5-6/224173 "2020-03-18T18:44:13Z")

</div>

Hi, Since moving from 2.x to 5.6 we have seen a drastic increase in overall query time, and one the biggest culprits is percolation. After some research, I've been looking at the "query.extraction\_result" : "failed" co…

---

## [Search all fields in elastic 7.x from 5.x](https://discuss.elastic.co/t/search-all-fields-in-elastic-7-x-from-5-x/224167)

<div class="topic-metadata">

**Author:** [@Sundeep\_Dangol](https://discuss.elastic.co/u/Sundeep_Dangol)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 6:10pm UTC](https://discuss.elastic.co/t/search-all-fields-in-elastic-7-x-from-5-x/224167 "2020-03-18T18:10:23Z")

</div>

Hi we are migrating from Elastic 5.x to 7.x. And one of the breaking changes is the removal of \_all field in match query. Previous query looks like below where its doing search on all fields. v 5.x GET /my\_index/\_s…

---

## [Comparing the different document field values](https://discuss.elastic.co/t/comparing-the-different-document-field-values/224165)

<div class="topic-metadata">

**Author:** [@mussa572](https://discuss.elastic.co/u/mussa572)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 5:51pm UTC](https://discuss.elastic.co/t/comparing-the-different-document-field-values/224165 "2020-03-18T17:51:17Z")

</div>

Hi Just wondering How can I compare the value from 2 different documents . I am ingesting the following values in the index. I am looking to query and compare of each document field "type\_instance" value of "allocate…

---

## [Index Management rollover not working](https://discuss.elastic.co/t/index-management-rollover-not-working/224162)

<div class="topic-metadata">

**Author:** [@somebody](https://discuss.elastic.co/u/somebody)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 5:16pm UTC](https://discuss.elastic.co/t/index-management-rollover-not-working/224162 "2020-03-18T17:16:37Z")

</div>

Hi, I have a Index Management Policy like this: PUT \_ilm/policy/sample\_qa\_policy { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": { "max\_ag…

---

## [How i can do datamart modeling with elasticsearch?](https://discuss.elastic.co/t/how-i-can-do-datamart-modeling-with-elasticsearch/224160)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 5:14pm UTC](https://discuss.elastic.co/t/how-i-can-do-datamart-modeling-with-elasticsearch/224160 "2020-03-18T17:14:04Z")

</div>

Hi , I am preparing the design of my end of study project "implementation of a decision solution for a travel agency". in fact I find a weakness in the design of the "sale" datamart since it is the first time that I wo…

---

## [Pass Entire Document into Update Script Params](https://discuss.elastic.co/t/pass-entire-document-into-update-script-params/224014)

<div class="topic-metadata">

**Author:** [@weizilla](https://discuss.elastic.co/u/weizilla)\
**Replies:** 1\
**Last updated:** [March 18, 2020, 5:12pm UTC](https://discuss.elastic.co/t/pass-entire-document-into-update-script-params/224014 "2020-03-18T17:12:42Z")

</div>

According to Update settings (when writing to Elasticsearch), I can provide a list of fields to be passed into my update script params with es.update.script.params. Is there a way to say I want the entire document being …

---

## [Query for array matchings within multiple array](https://discuss.elastic.co/t/query-for-array-matchings-within-multiple-array/224152)

<div class="topic-metadata">

**Author:** [@Devon\_Yoo](https://discuss.elastic.co/u/Devon_Yoo)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 4:28pm UTC](https://discuss.elastic.co/t/query-for-array-matchings-within-multiple-array/224152 "2020-03-18T16:28:44Z")

</div>

Indexed documents { "book\_id":"book01", "pages":\[ { "page\_id":1, "words":\["1", "2", "xx"\] } { "page\_id":2, "words":\["4", "5", "xx"\] } { "page\_id":3, "words":\["7", "8", "xx"\] } \] } { "book\_id":"book02…

---

## [Exact match or phrase match without enabling term vector](https://discuss.elastic.co/t/exact-match-or-phrase-match-without-enabling-term-vector/222488)

<div class="topic-metadata">

**Author:** [@Ajay\_Singhal](https://discuss.elastic.co/u/Ajay_Singhal)\
**Replies:** 7\
**Last updated:** [March 18, 2020, 4:32pm UTC](https://discuss.elastic.co/t/exact-match-or-phrase-match-without-enabling-term-vector/222488 "2020-03-18T16:32:49Z")

</div>

I am facing issues in exact match. I am using standard analyzer but exact match is not working with this. If I enable term vector then it is working but enabling term vector is increasing size of elastic index. Can you …

---

## [Index lifecycle not working because of "FORBIDDEN/12/index read-only / allow delete"](https://discuss.elastic.co/t/index-lifecycle-not-working-because-of-forbidden-12-index-read-only-allow-delete/224074)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 4\
**Last updated:** [March 18, 2020, 4:17pm UTC](https://discuss.elastic.co/t/index-lifecycle-not-working-because-of-forbidden-12-index-read-only-allow-delete/224074 "2020-03-18T16:17:42Z")

</div>

Hello, I am still struggling with the index lifecycle management on my elastic.co cluster. in the index management section of kibana, I have some errors: 3 indices have lifecycle errors I focus to one of them. Effect…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=981)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=983)
