# Elastic Search

**URL:** https://discuss.elastic.co/c/search/84.md?page=13

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 14

---

## [IMS policy is stuck on Still initializing, please wait a moment](https://discuss.elastic.co/t/ims-policy-is-stuck-on-still-initializing-please-wait-a-moment/366115)

<div class="topic-metadata">

**Author:** [@Mikesh\_Champaneri](https://discuss.elastic.co/u/Mikesh_Champaneri)\
**Replies:** 1\
**Last updated:** [September 5, 2024, 5:11pm UTC](https://discuss.elastic.co/t/ims-policy-is-stuck-on-still-initializing-please-wait-a-moment/366115 "2024-09-05T17:11:22Z")

</div>

Hey guys, I am trying to apply a retention policy for logs, it shows running on index list but while clicking on policy name it shows "Still initializing, please wait a moment" Health status for all indices are green {…

---

## [Logstash file is taking time to read current logs due to this issue logs are missing on Kibana console](https://discuss.elastic.co/t/logstash-file-is-taking-time-to-read-current-logs-due-to-this-issue-logs-are-missing-on-kibana-console/366041)

<div class="topic-metadata">

**Author:** [@2328943\_dc](https://discuss.elastic.co/u/2328943_dc)\
**Replies:** 0\
**Last updated:** [September 4, 2024, 1:54pm UTC](https://discuss.elastic.co/t/logstash-file-is-taking-time-to-read-current-logs-due-to-this-issue-logs-are-missing-on-kibana-console/366041 "2024-09-04T13:54:30Z")

</div>

log file is shared on Kibana server using shared mount point, logs are generating with 3 min frequency. older log file is renaming after new log generation so Logstash file is taking time to read current logs due to thi…

---

## [DateRange search using Elastic.Clients.Elasticsearch nuget package](https://discuss.elastic.co/t/daterange-search-using-elastic-clients-elasticsearch-nuget-package/365986)

<div class="topic-metadata">

**Author:** [@cteaguelogitix](https://discuss.elastic.co/u/cteaguelogitix)\
**Replies:** 1\
**Last updated:** [September 3, 2024, 10:13pm UTC](https://discuss.elastic.co/t/daterange-search-using-elastic-clients-elasticsearch-nuget-package/365986 "2024-09-03T22:13:22Z")

</div>

I would like to convert the following into c# using the Elastic.Clients.Elasticsearch nuget package (version 8.15.4), but I cannot find an example. I was able to do a search for an exact match by following the documenta…

---

## [How does shards-per-node contribute to indexing latency/throughput?](https://discuss.elastic.co/t/how-does-shards-per-node-contribute-to-indexing-latency-throughput/365905)

<div class="topic-metadata">

**Author:** [@Neha\_Gulla](https://discuss.elastic.co/u/Neha_Gulla)\
**Replies:** 11\
**Last updated:** [September 3, 2024, 12:26pm UTC](https://discuss.elastic.co/t/how-does-shards-per-node-contribute-to-indexing-latency-throughput/365905 "2024-09-03T12:26:52Z")

</div>

Hello, In our environment, we have 12 nodes, 597 indices, total shards 1201, 0 unassigned shard. How and what are the correct steps to get shards-per-node contribute to indexing latency/throughput.

---

## [Escape character for '@' '-' in query string?](https://discuss.elastic.co/t/escape-character-for-in-query-string/365844)

<div class="topic-metadata">

**Author:** [@Chaplin\_Huang](https://discuss.elastic.co/u/Chaplin_Huang)\
**Replies:** 1\
**Last updated:** [September 2, 2024, 11:34pm UTC](https://discuss.elastic.co/t/escape-character-for-in-query-string/365844 "2024-09-02T23:34:32Z")

</div>

Hi Elastic community! I am currently developing tagger analyzer rules for timesketch. For the rules I am supposed to use query\_string, which is a mini language of Query string. I was trying to check something that contai…

---

## [Bootstrapcheck using a non available library](https://discuss.elastic.co/t/bootstrapcheck-using-a-non-available-library/365826)

<div class="topic-metadata">

**Author:** [@tiwi\_sag](https://discuss.elastic.co/u/tiwi_sag)\
**Replies:** 0\
**Last updated:** [August 30, 2024, 1:24pm UTC](https://discuss.elastic.co/t/bootstrapcheck-using-a-non-available-library/365826 "2024-08-30T13:24:10Z")

</div>

Hello community, we are upgrading our elasticsearch to version 8.15 running in Kubernetes based on Alpine Linux Container. Unfortunately it looks like the Bootstrapcheck is using a library (libsystemd) which is not avai…

---

## [Issue with ISO8601 date stored as string in my index](https://discuss.elastic.co/t/issue-with-iso8601-date-stored-as-string-in-my-index/365767)

<div class="topic-metadata">

**Author:** [@efazenda](https://discuss.elastic.co/u/efazenda)\
**Replies:** 1\
**Last updated:** [August 29, 2024, 2:15pm UTC](https://discuss.elastic.co/t/issue-with-iso8601-date-stored-as-string-in-my-index/365767 "2024-08-29T14:15:58Z")

</div>

Dear Community, I have a Custom Log integration active on my ELK Stack which get a file located in a specific path of my server where Elastic Agent is installed. Here an example of the source of data : 08DCC572EA626F6…

---

## [Adjusting the numbers of docs retrieved via es python api](https://discuss.elastic.co/t/adjusting-the-numbers-of-docs-retrieved-via-es-python-api/365451)

<div class="topic-metadata">

**Author:** [@cazzz99](https://discuss.elastic.co/u/cazzz99)\
**Replies:** 13\
**Last updated:** [August 28, 2024, 1:09pm UTC](https://discuss.elastic.co/t/adjusting-the-numbers-of-docs-retrieved-via-es-python-api/365451 "2024-08-28T13:09:59Z")

</div>

I've been using the combination of lang chain retriever and ES python client API in searching, my code is like below: def embed\_query(self,query\_text,k =10,candidate\_num = 20): if query\_text is not None and len…

---

## [Sparse\_vector query is not working](https://discuss.elastic.co/t/sparse-vector-query-is-not-working/365450)

<div class="topic-metadata">

**Author:** [@Pankaj\_Kumawat](https://discuss.elastic.co/u/Pankaj_Kumawat)\
**Replies:** 8\
**Last updated:** [August 28, 2024, 4:51am UTC](https://discuss.elastic.co/t/sparse-vector-query-is-not-working/365450 "2024-08-28T04:51:59Z")

</div>

following this doc i have created index with the mapping shown in the docs but when i am querying through the data, i am getting this error { "error": { "root\_cause": \[ { "type": "parsing\_exception…

---

## [Elastic yum 8.x repodata size](https://discuss.elastic.co/t/elastic-yum-8-x-repodata-size/365600)

<div class="topic-metadata">

**Author:** [@adi-drori\_clv](https://discuss.elastic.co/u/adi-drori_clv)\
**Replies:** 0\
**Last updated:** [August 27, 2024, 7:31am UTC](https://discuss.elastic.co/t/elastic-yum-8-x-repodata-size/365600 "2024-08-27T07:31:36Z")

</div>

Lately I found that the yum cache size for the elastic-8.x repository is oversized. After I cleaned the cache and renewed it on a RH7 machine - I found that the cache size for the elastic-8.x repo is 1.8G. Looks like t…

---

## [Register repository failing on RHEL8](https://discuss.elastic.co/t/register-repository-failing-on-rhel8/365597)

<div class="topic-metadata">

**Author:** [@Techiebee](https://discuss.elastic.co/u/Techiebee)\
**Replies:** 0\
**Last updated:** [August 27, 2024, 7:00am UTC](https://discuss.elastic.co/t/register-repository-failing-on-rhel8/365597 "2024-08-27T07:00:52Z")

</div>

2024-08-26 08:35:52,352 p=8308 u=root n=ansible | TASK \[elasticsearch : register repository\] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* 2024-08-26 08:36:24,038 p=8308 u=root n=ansible | fatal: \[localhost\]: FAILED! =\> {"change…

---

## [CCR# Cross Cluster Replication](https://discuss.elastic.co/t/ccr-cross-cluster-replication/364912)

<div class="topic-metadata">

**Author:** [@seshug](https://discuss.elastic.co/u/seshug)\
**Replies:** 4\
**Last updated:** [August 26, 2024, 2:49pm UTC](https://discuss.elastic.co/t/ccr-cross-cluster-replication/364912 "2024-08-26T14:49:41Z")

</div>

Hello, Have you ever handled the time series indices on the follower cluster post implementing cross-cluster replication? We have implemented CCR - able to see the indices created on the follower indices. The issue is…

---

## [Setting up ELK Stack for Kafka Logs Monitoring](https://discuss.elastic.co/t/setting-up-elk-stack-for-kafka-logs-monitoring/365116)

<div class="topic-metadata">

**Author:** [@Elgis\_Migle](https://discuss.elastic.co/u/Elgis_Migle)\
**Replies:** 7\
**Last updated:** [August 26, 2024, 1:31pm UTC](https://discuss.elastic.co/t/setting-up-elk-stack-for-kafka-logs-monitoring/365116 "2024-08-26T13:31:32Z")

</div>

Hello all, I'm a beginner, so please bear with anything I get wrong. I have the task of setting up Logs Monitoring for Kafka with the ELK Stack. I didn't have any luck with versions 7.14 so I thought going to the newes…

---

## [Snapshot Restore Fails with "NoSuchFileException" Errors - Need Help](https://discuss.elastic.co/t/snapshot-restore-fails-with-nosuchfileexception-errors-need-help/365541)

<div class="topic-metadata">

**Author:** [@Nauman\_Kyani](https://discuss.elastic.co/u/Nauman_Kyani)\
**Replies:** 0\
**Last updated:** [August 26, 2024, 10:24am UTC](https://discuss.elastic.co/t/snapshot-restore-fails-with-nosuchfileexception-errors-need-help/365541 "2024-08-26T10:24:25Z")

</div>

Hello Elasticsearch Community, I'm encountering issues while trying to restore snapshots in my Elasticsearch cluster. The snapshots appear to be created successfully, but when I attempt to restore them, I receive errors…

---

## [Unable to install on Ubuntu 22](https://discuss.elastic.co/t/unable-to-install-on-ubuntu-22/365487)

<div class="topic-metadata">

**Author:** [@chrisspen](https://discuss.elastic.co/u/chrisspen)\
**Replies:** 2\
**Last updated:** [August 24, 2024, 6:08am UTC](https://discuss.elastic.co/t/unable-to-install-on-ubuntu-22/365487 "2024-08-24T06:08:35Z")

</div>

How do you install a simple configuration on Ubuntu 22? I ran: wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add - sudo sh -c 'echo "deb https://artifacts.elastic.co/packages/8.x/apt stab…

---

## [All Elasticsearch requests timing out](https://discuss.elastic.co/t/all-elasticsearch-requests-timing-out/365488)

<div class="topic-metadata">

**Author:** [@chrisspen](https://discuss.elastic.co/u/chrisspen)\
**Replies:** 1\
**Last updated:** [August 24, 2024, 3:36am UTC](https://discuss.elastic.co/t/all-elasticsearch-requests-timing-out/365488 "2024-08-24T03:36:06Z")

</div>

I'm trying to use the Python API to add documents to my local Elasticsearch node. However, every call to es.index(...) is throwing a elastic\_transport.ConnectionTimeout error even though I have timeout=60s. My logs have…

---

## [Cannot invite colleague to my Org in 14 day free trial](https://discuss.elastic.co/t/cannot-invite-colleague-to-my-org-in-14-day-free-trial/365420)

<div class="topic-metadata">

**Author:** [@Ryan\_Le](https://discuss.elastic.co/u/Ryan_Le)\
**Replies:** 2\
**Last updated:** [August 23, 2024, 7:01am UTC](https://discuss.elastic.co/t/cannot-invite-colleague-to-my-org-in-14-day-free-trial/365420 "2024-08-23T07:01:38Z")

</div>

I started my 14 day free trial, selecting AWS then us-east-1. Everything seemed to work fine until I wanted to invite my colleague to my Org. As he followed invitation link, he got stuck at a step where he had to select…

---

## [Search UI - Is it Possible to Add An "Exists" Filter](https://discuss.elastic.co/t/search-ui-is-it-possible-to-add-an-exists-filter/365405)

<div class="topic-metadata">

**Author:** [@Kelly\_Marchewa](https://discuss.elastic.co/u/Kelly_Marchewa)\
**Replies:** 0\
**Last updated:** [August 22, 2024, 6:04pm UTC](https://discuss.elastic.co/t/search-ui-is-it-possible-to-add-an-exists-filter/365405 "2024-08-22T18:04:28Z")

</div>

Hello, I am using the Search UI React library. I wanted to see if it is possible with this library to filter results based on whether or not a particular field exists (is not null)? For example, if I wanted to exclude a…

---

## [Text to Keyword fields - cant find index](https://discuss.elastic.co/t/text-to-keyword-fields-cant-find-index/365312)

<div class="topic-metadata">

**Author:** [@Catalina\_Sabogal\_Ort](https://discuss.elastic.co/u/Catalina_Sabogal_Ort)\
**Replies:** 1\
**Last updated:** [August 22, 2024, 12:11pm UTC](https://discuss.elastic.co/t/text-to-keyword-fields-cant-find-index/365312 "2024-08-22T12:11:12Z")

</div>

We've been working on an Elasticsearch and Kibana task where the main goal was to work with a field (farmerName\_profile.birthday\_str) in an index that originally stored it as a text type. We attempted several steps to so…

---

## [Highlight highlight fields that are not matched by the search](https://discuss.elastic.co/t/highlight-highlight-fields-that-are-not-matched-by-the-search/365293)

<div class="topic-metadata">

**Author:** [@TheFireCookie](https://discuss.elastic.co/u/TheFireCookie)\
**Replies:** 1\
**Last updated:** [August 21, 2024, 11:17pm UTC](https://discuss.elastic.co/t/highlight-highlight-fields-that-are-not-matched-by-the-search/365293 "2024-08-21T23:17:01Z")

</div>

Hello, I'm trying to have the highlight work on a nested object but I cannot seems to find a way that match my needs. Elasticsearch version : 8.13.1 So let me show you this sample: My index: { "mappings": { …

---

## [Kibana is not ready yet](https://discuss.elastic.co/t/kibana-is-not-ready-yet/365241)

<div class="topic-metadata">

**Author:** [@Marek\_Galbavy](https://discuss.elastic.co/u/Marek_Galbavy)\
**Replies:** 1\
**Last updated:** [August 21, 2024, 11:08am UTC](https://discuss.elastic.co/t/kibana-is-not-ready-yet/365241 "2024-08-21T11:08:56Z")

</div>

Hi after restart of VM where is elasticsearch node install my kibana dont work. Kibana is not ready yet. if i try command: journalctl -u kibana -xe i get this message: Aug 20 12:16:15 dca-siem-01 kibana\[32809\]: \[2024…

---

## [Convert keyword field to date for range query](https://discuss.elastic.co/t/convert-keyword-field-to-date-for-range-query/365121)

<div class="topic-metadata">

**Author:** [@NEWBIENEET](https://discuss.elastic.co/u/NEWBIENEET)\
**Replies:** 2\
**Last updated:** [August 20, 2024, 6:46am UTC](https://discuss.elastic.co/t/convert-keyword-field-to-date-for-range-query/365121 "2024-08-20T06:46:22Z")

</div>

One of the fields in the ES that my team used is "TIME\_STAMP" which contains a timestamp data but in keyword format. I want to query data based on this value, is there any way to convert the keyword to date? I'm new to E…

---

## [Elastic and kibana upgrade from 6.6 to 7.0](https://discuss.elastic.co/t/elastic-and-kibana-upgrade-from-6-6-to-7-0/365139)

<div class="topic-metadata">

**Author:** [@Mariajosephina](https://discuss.elastic.co/u/Mariajosephina)\
**Replies:** 2\
**Last updated:** [August 19, 2024, 7:16pm UTC](https://discuss.elastic.co/t/elastic-and-kibana-upgrade-from-6-6-to-7-0/365139 "2024-08-19T19:16:23Z")

</div>

Hi @all This is regarding a query on upgrading Elasticsearch & kibana. The current version of Elastic search & Kibana in our organization is 6.6.1 used to storing RPA logs. I am planning to upgrade to 7.x or 8.x Can …

---

## [Elastic Search Licensing](https://discuss.elastic.co/t/elastic-search-licensing/365158)

<div class="topic-metadata">

**Author:** [@Swaraj\_Shekhar](https://discuss.elastic.co/u/Swaraj_Shekhar)\
**Replies:** 1\
**Last updated:** [August 19, 2024, 7:11pm UTC](https://discuss.elastic.co/t/elastic-search-licensing/365158 "2024-08-19T19:11:59Z")

</div>

Hello team. I am using temporal, which uses Elasticsearch as a backend index storage. The data over Elastic search is never directly provided to customers but only through Temporal APIs. Also, ES is never exposed to anyo…

---

## [Analyzer to support slash "/" in Query String search](https://discuss.elastic.co/t/analyzer-to-support-slash-in-query-string-search/365053)

<div class="topic-metadata">

**Author:** [@Valerio\_Barbera](https://discuss.elastic.co/u/Valerio_Barbera)\
**Replies:** 4\
**Last updated:** [August 19, 2024, 9:22am UTC](https://discuss.elastic.co/t/analyzer-to-support-slash-in-query-string-search/365053 "2024-08-19T09:22:54Z")

</div>

Hi, I have an index that store an "url" field that contains "/" (forward slash) on which I execute only query\_string searches. Unfortunately the slash "/" seems to have side effects on query\_string search because of th…

---

## [System\_call\_filter alternative](https://discuss.elastic.co/t/system-call-filter-alternative/365084)

<div class="topic-metadata">

**Author:** [@trinadh61](https://discuss.elastic.co/u/trinadh61)\
**Replies:** 1\
**Last updated:** [August 19, 2024, 8:36am UTC](https://discuss.elastic.co/t/system-call-filter-alternative/365084 "2024-08-19T08:36:58Z")

</div>

system\_call\_filter is disabled in current version of elasticssearch, what is the work around for it

---

## [Can't run on win10, An error occurred: java.lang.ClassNotFoundException](https://discuss.elastic.co/t/cant-run-on-win10-an-error-occurred-java-lang-classnotfoundexception/365070)

<div class="topic-metadata">

**Author:** [@cco](https://discuss.elastic.co/u/cco)\
**Replies:** 3\
**Last updated:** [August 18, 2024, 4:21am UTC](https://discuss.elastic.co/t/cant-run-on-win10-an-error-occurred-java-lang-classnotfoundexception/365070 "2024-08-18T04:21:20Z")

</div>

I am running Elasticsearch on Windows 10, and I have performed the following operations: C:\\Users\\Win10\\Desktop\\elasticsearch-8.15.0\\bin\>elasticsearch warning: ignoring JAVA\_HOME=C:\\Program Files\\Java\\jdk-22; using bund…

---

## [Script score query does not pass correct \_score to sort scripts when using field collapse](https://discuss.elastic.co/t/script-score-query-does-not-pass-correct-score-to-sort-scripts-when-using-field-collapse/364980)

<div class="topic-metadata">

**Author:** [@rschoenbeck](https://discuss.elastic.co/u/rschoenbeck)\
**Replies:** 2\
**Last updated:** [August 15, 2024, 10:47pm UTC](https://discuss.elastic.co/t/script-score-query-does-not-pass-correct-score-to-sort-scripts-when-using-field-collapse/364980 "2024-08-15T22:47:08Z")

</div>

When using Elasticsearch 8.7.1, if you add a collapse parameter to a script\_score query, it seems like references to the \_score field in subsequent sort scripts refer not to the script\_score's \_score value, but some valu…

---

## [Someone please help me that how can we integrate kibana analytics iframe in angular or react either using api key or username and passowrd by skipping login page](https://discuss.elastic.co/t/someone-please-help-me-that-how-can-we-integrate-kibana-analytics-iframe-in-angular-or-react-either-using-api-key-or-username-and-passowrd-by-skipping-login-page/364103)

<div class="topic-metadata">

**Author:** [@Santhosh\_DS](https://discuss.elastic.co/u/Santhosh_DS)\
**Replies:** 2\
**Last updated:** [August 14, 2024, 9:43am UTC](https://discuss.elastic.co/t/someone-please-help-me-that-how-can-we-integrate-kibana-analytics-iframe-in-angular-or-react-either-using-api-key-or-username-and-passowrd-by-skipping-login-page/364103 "2024-08-14T09:43:39Z")

</div>

Someone please help me that how can we integrate kibana analytics iframe in angular or react either using api key or username and passowrd by skipping login page

---

## [Got exception "mapping must have index set to true" when index already set to true](https://discuss.elastic.co/t/got-exception-mapping-must-have-index-set-to-true-when-index-already-set-to-true/364874)

<div class="topic-metadata">

**Author:** [@Lu\_Fan](https://discuss.elastic.co/u/Lu_Fan)\
**Replies:** 2\
**Last updated:** [August 14, 2024, 4:30am UTC](https://discuss.elastic.co/t/got-exception-mapping-must-have-index-set-to-true-when-index-already-set-to-true/364874 "2024-08-14T04:30:43Z")

</div>

I am new to vector search. I followed an example code which already set index to true, but got this error "mapping must have index set to true". My elastic is v8.7.1. I am doing these in Kibana's dev tools-\>console. The …

[Previous page](https://discuss.elastic.co/c/search/84.md?page=12)

[Next page](https://discuss.elastic.co/c/search/84.md?page=14)
