# Elastic Search **URL:** https://discuss.elastic.co/c/search/84.md?page=10 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 11 --- ## [How to get date now() function in Elasticsearch version 7.17.0](https://discuss.elastic.co/t/how-to-get-date-now-function-in-elasticsearch-version-7-17-0/370747)
**Author:** [@shharukh](https://discuss.elastic.co/u/shharukh)\ **Replies:** 0\ **Last updated:** [November 19, 2024, 7:50am UTC](https://discuss.elastic.co/t/how-to-get-date-now-function-in-elasticsearch-version-7-17-0/370747 "2024-11-19T07:50:23Z")
// Check if 'transactionTime' and 'transactionAmount' fields exist if (!doc.containsKey('transactionTime') || doc\['transactionTime'\].size() == 0 || !doc.containsKey('transactionAmount') || doc\['transactionAmount'\].s… --- ## [Elasticsearch GENAI and search-ui](https://discuss.elastic.co/t/elasticsearch-genai-and-search-ui/370496)
**Author:** [@elitzur\_e](https://discuss.elastic.co/u/elitzur_e)\ **Replies:** 5\ **Last updated:** [November 18, 2024, 10:32am UTC](https://discuss.elastic.co/t/elasticsearch-genai-and-search-ui/370496 "2024-11-18T10:32:29Z")
Hi. i have setup a web crawler and added in the pipeline ingest a process to for a model from hugging face. long story short while in playground the chat works fine. now i would like to take this to the next step as a si… --- ## [Multitenant index using wildcard rewrite process documents before filters are applied](https://discuss.elastic.co/t/multitenant-index-using-wildcard-rewrite-process-documents-before-filters-are-applied/370621)
**Author:** [@Lkopo](https://discuss.elastic.co/u/Lkopo)\ **Replies:** 7\ **Last updated:** [November 18, 2024, 9:03am UTC](https://discuss.elastic.co/t/multitenant-index-using-wildcard-rewrite-process-documents-before-filters-are-applied/370621 "2024-11-18T09:03:22Z")
In our project, we use multitenant index with aliases in which each alias points to specific tenant based on filter for tenant id. We use fulltext search, currently via wildcards (I know this is the least efficient solu… --- ## [Need best practices for: Proxmox cluster + iSCSI LVM shared storage + elasticsearch cluster](https://discuss.elastic.co/t/need-best-practices-for-proxmox-cluster-iscsi-lvm-shared-storage-elasticsearch-cluster/370554)
**Author:** [@GiciorMan](https://discuss.elastic.co/u/GiciorMan)\ **Replies:** 5\ **Last updated:** [November 16, 2024, 12:12am UTC](https://discuss.elastic.co/t/need-best-practices-for-proxmox-cluster-iscsi-lvm-shared-storage-elasticsearch-cluster/370554 "2024-11-16T00:12:02Z")
I have 3 servers in proxmox cluster with configured iSCSI LVM shared storage , I was planning to setup 3 node elasticsearch cluster , but I don't know what will be the best configuration here. At first I tried create 1 v… --- ## [Type is missing in BulkRequest in elastic search java client version 7.17.20](https://discuss.elastic.co/t/type-is-missing-in-bulkrequest-in-elastic-search-java-client-version-7-17-20/370325)
**Author:** [@Radha\_G](https://discuss.elastic.co/u/Radha_G)\ **Replies:** 11\ **Last updated:** [November 14, 2024, 12:24pm UTC](https://discuss.elastic.co/t/type-is-missing-in-bulkrequest-in-elastic-search-java-client-version-7-17-20/370325 "2024-11-14T12:24:39Z")
Hi Team, We are using Elasticsearch database version 7.10.2 and also Elasticsearch java client - 7.17.20 in pom.xml Implemented BulkRequest using the new Elasticsearch java client as below: BulkRequest.Builder bulkReq… --- ## [Nodes are leaving the cluster](https://discuss.elastic.co/t/nodes-are-leaving-the-cluster/370480)
**Author:** [@mohankomma](https://discuss.elastic.co/u/mohankomma)\ **Replies:** 1\ **Last updated:** [November 13, 2024, 2:23pm UTC](https://discuss.elastic.co/t/nodes-are-leaving-the-cluster/370480 "2024-11-13T14:23:36Z")
There are 295 nodes in the deployment. when nodes are leaving the cluster they are saying, they could not communicate with the master node. Is there any solution for this issue? --- ## [Elastic Cloud - Export Index with Crawler](https://discuss.elastic.co/t/elastic-cloud-export-index-with-crawler/370189)
**Author:** [@pngworkforce](https://discuss.elastic.co/u/pngworkforce)\ **Replies:** 2\ **Last updated:** [November 13, 2024, 2:29pm UTC](https://discuss.elastic.co/t/elastic-cloud-export-index-with-crawler/370189 "2024-11-13T14:29:45Z")
Hello!, Is there a way to export an index's schema and crawler configuration on Elastic Cloud? We are looking to create some workflows in Git and would like to be able to store a JSON schema to deploy an index with cra… --- ## [\_update\_by\_query issue](https://discuss.elastic.co/t/update-by-query-issue/370226)
**Author:** [@Megha30](https://discuss.elastic.co/u/Megha30)\ **Replies:** 5\ **Last updated:** [November 13, 2024, 8:17am UTC](https://discuss.elastic.co/t/update-by-query-issue/370226 "2024-11-13T08:17:43Z")
Hi all, I am new to elasticsearh and here is my question. I appreciate your help :slight\_smile: I have an index with the name my\_index. It has a field called as the Reason. I need to map each reason to a particular ca… --- ## [How to Configure SSL/TLS Certificates for ECK-Managed Elasticsearch to Connect External Elastic Agent and Logstash](https://discuss.elastic.co/t/how-to-configure-ssl-tls-certificates-for-eck-managed-elasticsearch-to-connect-external-elastic-agent-and-logstash/370451)
**Author:** [@wangsubo](https://discuss.elastic.co/u/wangsubo)\ **Replies:** 1\ **Last updated:** [November 13, 2024, 3:13am UTC](https://discuss.elastic.co/t/how-to-configure-ssl-tls-certificates-for-eck-managed-elasticsearch-to-connect-external-elastic-agent-and-logstash/370451 "2024-11-13T03:13:14Z")
I have an Elasticsearch cluster deployed using Elastic Cloud on Kubernetes (ECK). Currently, I have an Elastic Agent on an external virtual machine (192.168.1.4) that sends data to Logstash (192.168.1.4:5044), and Logsta… --- ## [Trouble with nested object search in painless](https://discuss.elastic.co/t/trouble-with-nested-object-search-in-painless/370419)
**Author:** [@sgtlaugh](https://discuss.elastic.co/u/sgtlaugh)\ **Replies:** 0\ **Last updated:** [November 12, 2024, 4:45pm UTC](https://discuss.elastic.co/t/trouble-with-nested-object-search-in-painless/370419 "2024-11-12T16:45:30Z")
Hello, I am trying to do the following. Suppose there is an index called my-index with the following mapping: { "my-index": { "mappings": { "properties": { "fields": { "type": "nested", … --- ## [I would like to execute an example of Graph query in some example data to understand how it works, but when i execute, nothing is returned](https://discuss.elastic.co/t/i-would-like-to-execute-an-example-of-graph-query-in-some-example-data-to-understand-how-it-works-but-when-i-execute-nothing-is-returned/370402)
**Author:** [@Marcelo\_Mendes](https://discuss.elastic.co/u/Marcelo_Mendes)\ **Replies:** 0\ **Last updated:** [November 12, 2024, 1:54pm UTC](https://discuss.elastic.co/t/i-would-like-to-execute-an-example-of-graph-query-in-some-example-data-to-understand-how-it-works-but-when-i-execute-nothing-is-returned/370402 "2024-11-12T13:54:06Z")
I'm trying to execute this example: POST /transacoes/\_bulk { "index": { "\_id": "1" } } { "conta\_origem": "A", "conta\_destino": "B", "valor": 100 } { "index": { "\_id": "2" } } { "conta\_origem": "A", "conta\_destino": "C",… --- ## [Multi Node cluster snapshot repository without use of SMB shared folder](https://discuss.elastic.co/t/multi-node-cluster-snapshot-repository-without-use-of-smb-shared-folder/370372)
**Author:** [@MarcTan](https://discuss.elastic.co/u/MarcTan)\ **Replies:** 1\ **Last updated:** [November 12, 2024, 1:11pm UTC](https://discuss.elastic.co/t/multi-node-cluster-snapshot-repository-without-use-of-smb-shared-folder/370372 "2024-11-12T13:11:34Z")
Hi all, I have created a cluster of 3 elastic nodes with a snapshot backup repository using a SMB shared folder and all has worked well. Till recently a new business requirement is imposed such that we are not allowed … --- ## [Unexpected Behavior with ICU Collation Keyword Sorting](https://discuss.elastic.co/t/unexpected-behavior-with-icu-collation-keyword-sorting/370335)
**Author:** [@wolfgang-kammhuber\_c](https://discuss.elastic.co/u/wolfgang-kammhuber_c)\ **Replies:** 0\ **Last updated:** [November 11, 2024, 4:33pm UTC](https://discuss.elastic.co/t/unexpected-behavior-with-icu-collation-keyword-sorting/370335 "2024-11-11T16:33:10Z")
Hello, I am experiencing unexpected behavior with the sorting order of documents in Elasticsearch using the icu\_collation\_keyword field type. Here are the details: Steps to Reproduce: Create the Index with Mappings: … --- ## [Restoration of data from Primary to Backup cluster](https://discuss.elastic.co/t/restoration-of-data-from-primary-to-backup-cluster/370322)
**Author:** [@sowr0704](https://discuss.elastic.co/u/sowr0704)\ **Replies:** 0\ **Last updated:** [November 11, 2024, 2:28pm UTC](https://discuss.elastic.co/t/restoration-of-data-from-primary-to-backup-cluster/370322 "2024-11-11T14:28:17Z")
Hi All, Scenario: I have 2 GKE cluster \[1. Primary cluster & 2. Backup Cluster\]. The ESK is running in both primary & backup cluster. The snapshots are taken at regular intervals in primary cluster. When I try to re… --- ## [Reclaim snapshot space](https://discuss.elastic.co/t/reclaim-snapshot-space/370306)
**Author:** [@asik](https://discuss.elastic.co/u/asik)\ **Replies:** 1\ **Last updated:** [November 11, 2024, 12:27pm UTC](https://discuss.elastic.co/t/reclaim-snapshot-space/370306 "2024-11-11T12:27:18Z")
Hi All, I recently deleted the Elasticsearch repository in dev env without doing a clean-up of its snapshots. After deleting the repository the disk space is not reduced. How do it do the clean-up of indices to reclaim t… --- ## [New insallation stuck at loading integrations](https://discuss.elastic.co/t/new-insallation-stuck-at-loading-integrations/370283)
**Author:** [@ahsan0331](https://discuss.elastic.co/u/ahsan0331)\ **Replies:** 8\ **Last updated:** [November 10, 2024, 5:07pm UTC](https://discuss.elastic.co/t/new-insallation-stuck-at-loading-integrations/370283 "2024-11-10T17:07:23Z")
Hi I am new to this world of elastic. looks really fantastic. i was about to explore it for netflow. i installed elk stack. and when i browse the page at host:5601/app/integrations/browse there only the loading circle… --- ## [How can I select arrays data?](https://discuss.elastic.co/t/how-can-i-select-arrays-data/370054)
**Author:** [@Gerrard81](https://discuss.elastic.co/u/Gerrard81)\ **Replies:** 2\ **Last updated:** [November 7, 2024, 4:05am UTC](https://discuss.elastic.co/t/how-can-i-select-arrays-data/370054 "2024-11-07T04:05:06Z")
I have data that is stored in the form of Arrays. POST \_sql?format=json { "query": """SELECT components.keyword FROM "issue" WHERE resolution\_date \>= '2023-12-31T15:00:00Z' AND resolution\_date \< '2024-11-04T00:19:00Z… --- ## [Log Forwarding from Elastic to Qradar](https://discuss.elastic.co/t/log-forwarding-from-elastic-to-qradar/370126)
**Author:** [@Krishna\_Chaitanya\_Bo](https://discuss.elastic.co/u/Krishna_Chaitanya_Bo)\ **Replies:** 0\ **Last updated:** [November 6, 2024, 12:10pm UTC](https://discuss.elastic.co/t/log-forwarding-from-elastic-to-qradar/370126 "2024-11-06T12:10:57Z")
How can we forward the logs from Elasticsearch to qradar siem in Leef format for real time monitoring --- ## [SearchUI query nested field](https://discuss.elastic.co/t/searchui-query-nested-field/370086)
**Author:** [@mike\_vogel](https://discuss.elastic.co/u/mike_vogel)\ **Replies:** 1\ **Last updated:** [November 5, 2024, 5:39pm UTC](https://discuss.elastic.co/t/searchui-query-nested-field/370086 "2024-11-05T17:39:00Z")
When using the React SearchUI how is the config setup to search a nested field created by using the attachment processor? Searching for "attachment.title" works in the console. In the SearchUI config I've tried title and… --- ## [Health, node, version and phase seems to be empty and elastic-operation-01 is going into crashbackoffloop](https://discuss.elastic.co/t/health-node-version-and-phase-seems-to-be-empty-and-elastic-operation-01-is-going-into-crashbackoffloop/369996)
**Author:** [@Mahi3](https://discuss.elastic.co/u/Mahi3)\ **Replies:** 0\ **Last updated:** [November 4, 2024, 10:12am UTC](https://discuss.elastic.co/t/health-node-version-and-phase-seems-to-be-empty-and-elastic-operation-01-is-going-into-crashbackoffloop/369996 "2024-11-04T10:12:33Z")
when I try to install the elastic-search in aws kubernetes from aws cloud shell with the help of the document health, node, version and phase seems to be empty and elastic-operation-01 is going into crashbackoffloop … --- ## [What is the most optimal way to get documents by \_id?](https://discuss.elastic.co/t/what-is-the-most-optimal-way-to-get-documents-by-id/369983)
**Author:** [@Ananya\_Madhusudan](https://discuss.elastic.co/u/Ananya_Madhusudan)\ **Replies:** 3\ **Last updated:** [November 4, 2024, 7:21am UTC](https://discuss.elastic.co/t/what-is-the-most-optimal-way-to-get-documents-by-id/369983 "2024-11-04T07:21:36Z")
I have a cluster with 7 nodes out of which 3 are master nodes. Elasticsearch version is 5.5. I need to fetch documents in bulk by the ids. I'm using the terms query like this GET my\_index/my\_type/\_search { "query": { … --- ## [How do SLM retention policies work in case of total node failures?](https://discuss.elastic.co/t/how-do-slm-retention-policies-work-in-case-of-total-node-failures/369949)
**Author:** [@moth](https://discuss.elastic.co/u/moth)\ **Replies:** 0\ **Last updated:** [November 2, 2024, 7:51pm UTC](https://discuss.elastic.co/t/how-do-slm-retention-policies-work-in-case-of-total-node-failures/369949 "2024-11-02T19:51:43Z")
Lets say I have a critical node failure and all data in my elasticsearch container A gets wiped including the created SLM retention policy. Now a new container B is created with the same retention policy and snapshot re… --- ## [Where does data go from get?](https://discuss.elastic.co/t/where-does-data-go-from-get/369922)
**Author:** [@max.hankins](https://discuss.elastic.co/u/max.hankins)\ **Replies:** 2\ **Last updated:** [November 2, 2024, 11:48am UTC](https://discuss.elastic.co/t/where-does-data-go-from-get/369922 "2024-11-02T11:48:03Z")
I am a green newbie. I set up a get which returned too many items to read. I would like to access all this data. where is it? also, I am set up in kibana (I guess) and just found the hidden menu where you can get a t… --- ## [How can I retrieve the information about where the highlight was found?](https://discuss.elastic.co/t/how-can-i-retrieve-the-information-about-where-the-highlight-was-found/369827)
**Author:** [@Talles](https://discuss.elastic.co/u/Talles)\ **Replies:** 1\ **Last updated:** [November 2, 2024, 12:28am UTC](https://discuss.elastic.co/t/how-can-i-retrieve-the-information-about-where-the-highlight-was-found/369827 "2024-11-02T00:28:47Z")
Hi everyone, I have a field named 'name\_of\_company' and anexos (type List), which contains three fields: name, url, and pages. Within the pages (type List) field, I have two additional fields: num\_page and text. I am … --- ## [Dynamic user-authorization](https://discuss.elastic.co/t/dynamic-user-authorization/369894)
**Author:** [@darshanypatel](https://discuss.elastic.co/u/darshanypatel)\ **Replies:** 2\ **Last updated:** [November 1, 2024, 6:55pm UTC](https://discuss.elastic.co/t/dynamic-user-authorization/369894 "2024-11-01T18:55:59Z")
From the Elastic docs, it seems like we can create a role for access-control, give authorization to a list of indices (or resources) to this role, and then use that role to perform the operations on those resources. But … --- ## [Updating index.mapping.depth.limit for index template](https://discuss.elastic.co/t/updating-index-mapping-depth-limit-for-index-template/369189)
**Author:** [@brandon.n](https://discuss.elastic.co/u/brandon.n)\ **Replies:** 14\ **Last updated:** [October 30, 2024, 12:39pm UTC](https://discuss.elastic.co/t/updating-index-mapping-depth-limit-for-index-template/369189 "2024-10-30T12:39:12Z")
Hello, We are attempting to set the index.mapping.depth.limit to 3 for a new index template as we are seeing dynamically created objects that keep adding new fields (4,000+). Is there a way to set the depth limit in the… --- ## [Does Elastic App Search Supports parent-child realationship](https://discuss.elastic.co/t/does-elastic-app-search-supports-parent-child-realationship/369486)
**Author:** [@Viswanath\_G](https://discuss.elastic.co/u/Viswanath_G)\ **Replies:** 1\ **Last updated:** [October 29, 2024, 7:51am UTC](https://discuss.elastic.co/t/does-elastic-app-search-supports-parent-child-realationship/369486 "2024-10-29T07:51:29Z")
Hi Team Does any implemented parent-child relationship using Elastic App Search. Your inputs will save lot of time. --- ## [\[SOLVED\] Can not delete fleet enrollement tokens](https://discuss.elastic.co/t/solved-can-not-delete-fleet-enrollement-tokens/369530)
**Author:** [@oO-David-Oo](https://discuss.elastic.co/u/oO-David-Oo)\ **Replies:** 0\ **Last updated:** [October 28, 2024, 9:51am UTC](https://discuss.elastic.co/t/solved-can-not-delete-fleet-enrollement-tokens/369530 "2024-10-28T09:51:59Z")
Hello I want to delete Fleet Server enrollment tokens that are no longer used but that I can no longer delete I tested the following process: but it does not work I found something else that talks about passing … --- ## [Elastic app search synonyms](https://discuss.elastic.co/t/elastic-app-search-synonyms/369316)
**Author:** [@lostinroom](https://discuss.elastic.co/u/lostinroom)\ **Replies:** 4\ **Last updated:** [October 28, 2024, 7:16am UTC](https://discuss.elastic.co/t/elastic-app-search-synonyms/369316 "2024-10-28T07:16:24Z")
Hi, Can share what is the best practice to add synonyms? i.e. car, it can mean motor, vehicle as well So when user search car, I want vehicle and motor are included as well. Should I add it as synonyms? There is def… --- ## [Exact match using sentinel token technique (elasticsearch 7.x)](https://discuss.elastic.co/t/exact-match-using-sentinel-token-technique-elasticsearch-7-x/369460)
**Author:** [@stonebanks](https://discuss.elastic.co/u/stonebanks)\ **Replies:** 1\ **Last updated:** [October 26, 2024, 2:35pm UTC](https://discuss.elastic.co/t/exact-match-using-sentinel-token-technique-elasticsearch-7-x/369460 "2024-10-26T14:35:18Z")
Hello, I was reading the Relevant Search book and particularly the sentinel token technique, also described here. Following the book recipe, the easiest way I could achieve an exact match is by creating a new field in … [Previous page](https://discuss.elastic.co/c/search/84.md?page=9) [Next page](https://discuss.elastic.co/c/search/84.md?page=11)