# Elastic Search **URL:** https://discuss.elastic.co/c/search/84.md?page=4 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 5 --- ## [Delete huge field from index](https://discuss.elastic.co/t/delete-huge-field-from-index/378784)
**Author:** [@ALIT](https://discuss.elastic.co/u/ALIT)\ **Replies:** 3\ **Last updated:** [June 2, 2025, 10:43am UTC](https://discuss.elastic.co/t/delete-huge-field-from-index/378784 "2025-06-02T10:43:40Z")
Hi, due to a bug in our software, we indexed a field with many thousands lines. Now we are short on disk space, but still need the index. What is the best way in ES 8, to get rid of the huge field to get back the disk s… --- ## [Reindexing many indexes failing. Please help!](https://discuss.elastic.co/t/reindexing-many-indexes-failing-please-help/378696)
**Author:** [@kk123](https://discuss.elastic.co/u/kk123)\ **Replies:** 8\ **Last updated:** [May 30, 2025, 3:16pm UTC](https://discuss.elastic.co/t/reindexing-many-indexes-failing-please-help/378696 "2025-05-30T15:16:22Z")
Hi, I am trying to reindex many indices in to one ILM based alias/indices... However I get the below error, smallish DB at 150GB but many indices 3000 (hence the re-structuring) First it complained about too many scrol… --- ## [Getting 406 Not Acceptable Error While Running GitHub Connector in Docker for Elasticsearch](https://discuss.elastic.co/t/getting-406-not-acceptable-error-while-running-github-connector-in-docker-for-elasticsearch/378669)
**Author:** [@zeeshan\_mohammed](https://discuss.elastic.co/u/zeeshan_mohammed)\ **Replies:** 3\ **Last updated:** [May 30, 2025, 7:54am UTC](https://discuss.elastic.co/t/getting-406-not-acceptable-error-while-running-github-connector-in-docker-for-elasticsearch/378669 "2025-05-30T07:54:46Z")
Hi Team, I'm trying to run a GitHub connector inside a Docker container to ingest data into Elasticsearch (self-managed). The Docker container starts and connects to Elasticsearch successfully, but during the valid… --- ## [Elasticsearch query dsl alert rule to discover search object](https://discuss.elastic.co/t/elasticsearch-query-dsl-alert-rule-to-discover-search-object/378615)
**Author:** [@Baba\_Kourouma](https://discuss.elastic.co/u/Baba_Kourouma)\ **Replies:** 3\ **Last updated:** [May 29, 2025, 5:27am UTC](https://discuss.elastic.co/t/elasticsearch-query-dsl-alert-rule-to-discover-search-object/378615 "2025-05-29T05:27:13Z")
If I created an alert rule using elasticsearch query dsl, how can I get the corresponding search object in Discover so that I can see the logs that triggered this alert? --- ## [I want to under stand the behaviour of DeleteByQuery. Does it checks doc state in in-memory buffer?](https://discuss.elastic.co/t/i-want-to-under-stand-the-behaviour-of-deletebyquery-does-it-checks-doc-state-in-in-memory-buffer/378643)
**Author:** [@Vipul\_Sahu](https://discuss.elastic.co/u/Vipul_Sahu)\ **Replies:** 0\ **Last updated:** [May 28, 2025, 11:27am UTC](https://discuss.elastic.co/t/i-want-to-under-stand-the-behaviour-of-deletebyquery-does-it-checks-doc-state-in-in-memory-buffer/378643 "2025-05-28T11:27:02Z")
When you submit a delete by query request, Elasticsearch gets a snapshot of the data stream or index when it begins processing the request and deletes matching documents using internal versioning. If a document changes b… --- ## [Conditional filter in Kibana based on preceding events?](https://discuss.elastic.co/t/conditional-filter-in-kibana-based-on-preceding-events/378478)
**Author:** [@ttatzoll](https://discuss.elastic.co/u/ttatzoll)\ **Replies:** 7\ **Last updated:** [May 27, 2025, 6:09pm UTC](https://discuss.elastic.co/t/conditional-filter-in-kibana-based-on-preceding-events/378478 "2025-05-27T18:09:18Z")
I am trying to use Kibana to report on server reboots, where some servers have reported Windows Applications event #7014 re 'reboot required'. If/when those servers have actually rebooted, that log reports event #6005. I… --- ## [How many shards should I choose?](https://discuss.elastic.co/t/how-many-shards-should-i-choose/378527)
**Author:** [@Zoree](https://discuss.elastic.co/u/Zoree)\ **Replies:** 3\ **Last updated:** [May 26, 2025, 8:17am UTC](https://discuss.elastic.co/t/how-many-shards-should-i-choose/378527 "2025-05-26T08:17:01Z")
Hi, there is a problem on our project and I am trying to understand why it is happening. One of the reasons that I take into account is how many shards we have installed at the index size, the index can weigh an average… --- ## [Ldap Login Role Problem Kibana](https://discuss.elastic.co/t/ldap-login-role-problem-kibana/378440)
**Author:** [@plakdr](https://discuss.elastic.co/u/plakdr)\ **Replies:** 3\ **Last updated:** [May 26, 2025, 6:26am UTC](https://discuss.elastic.co/t/ldap-login-role-problem-kibana/378440 "2025-05-26T06:26:44Z")
We recently launched the Elastic 7.17.19 version, which is self-signed certificate and secure, with three nodes. We make the LDAP configuration, and then we successfully log in via LDAP. I defined ldap\_kibanauser and l… --- ## [Renew auto generated http certificates http.p12](https://discuss.elastic.co/t/renew-auto-generated-http-certificates-http-p12/378449)
**Author:** [@Frances\_Chu](https://discuss.elastic.co/u/Frances_Chu)\ **Replies:** 2\ **Last updated:** [May 26, 2025, 2:54am UTC](https://discuss.elastic.co/t/renew-auto-generated-http-certificates-http-p12/378449 "2025-05-26T02:54:28Z")
Is there any way to renew the http.p12 certificate. I find there is a share Renew auto generated http certificates However, I only got http\_ca.crt. No http\_ca.p12. I am running elasticsearch version 8.12.0. Any recomme… --- ## [Dropbox connector doesn't pickup sync jobs](https://discuss.elastic.co/t/dropbox-connector-doesnt-pickup-sync-jobs/378328)
**Author:** [@hansko](https://discuss.elastic.co/u/hansko)\ **Replies:** 6\ **Last updated:** [May 21, 2025, 10:03am UTC](https://discuss.elastic.co/t/dropbox-connector-doesnt-pickup-sync-jobs/378328 "2025-05-21T10:03:01Z")
We are using workspace search for searching thru dropbox documents. These documents are part of a business team folder and accessable for the users. In workspace search it works fine. But since version 9.0 workspace sear… --- ## [Red indexes + unassigned shards after snapshot restore](https://discuss.elastic.co/t/red-indexes-unassigned-shards-after-snapshot-restore/378237)
**Author:** [@Asfga](https://discuss.elastic.co/u/Asfga)\ **Replies:** 4\ **Last updated:** [May 19, 2025, 11:57am UTC](https://discuss.elastic.co/t/red-indexes-unassigned-shards-after-snapshot-restore/378237 "2025-05-19T11:57:12Z")
Hello, I am trying to restore my indexes from local server to webserver, same Elasticsearch version, but I can't make it work and now I am facing a problem, I don't really understand. I created a new repository on my l… --- ## [How to prevent Elasticsearch from automatically deleting old indices](https://discuss.elastic.co/t/how-to-prevent-elasticsearch-from-automatically-deleting-old-indices/378278)
**Author:** [@Aditya\_Tidke](https://discuss.elastic.co/u/Aditya_Tidke)\ **Replies:** 8\ **Last updated:** [May 19, 2025, 11:21am UTC](https://discuss.elastic.co/t/how-to-prevent-elasticsearch-from-automatically-deleting-old-indices/378278 "2025-05-19T11:21:59Z")
Hi, I have Elasticsearch installed on a VM, where logs are collected daily through Logstash and stored in indices following the {name}-{date} naming pattern. However, I’ve noticed that indices are being automatically de… --- ## [Prefix highlighting](https://discuss.elastic.co/t/prefix-highlighting/378037)
**Author:** [@SoleusRex](https://discuss.elastic.co/u/SoleusRex)\ **Replies:** 1\ **Last updated:** [May 19, 2025, 2:21am UTC](https://discuss.elastic.co/t/prefix-highlighting/378037 "2025-05-19T02:21:49Z")
Using a match\_phrase\_prefix query, I've been trying to get highlights that include only the matching prefix itself. For example, for query foo and string foobar, what I would like is highlight \foo\bar, but what I… --- ## [Getting Started with ElasticSearch: Performance Tips, Configuration, and Minimum Hardware Requirements?](https://discuss.elastic.co/t/getting-started-with-elasticsearch-performance-tips-configuration-and-minimum-hardware-requirements/378249)
**Author:** [@Def1ne](https://discuss.elastic.co/u/Def1ne)\ **Replies:** 1\ **Last updated:** [May 17, 2025, 7:14am UTC](https://discuss.elastic.co/t/getting-started-with-elasticsearch-performance-tips-configuration-and-minimum-hardware-requirements/378249 "2025-05-17T07:14:10Z")
Hello everyone, I’m developing an enterprise cybersecurity project focused on Internet-wide scanning, similar to Shodan or Censys, aimed at mapping exposed infrastructure (services, ports, domains, certificates, ICS/SCA… --- ## [Elasticsearch and Logstash monitoring not showing all logstash nodes](https://discuss.elastic.co/t/elasticsearch-and-logstash-monitoring-not-showing-all-logstash-nodes/378213)
**Author:** [@sbocquet](https://discuss.elastic.co/u/sbocquet)\ **Replies:** 6\ **Last updated:** [May 16, 2025, 3:47pm UTC](https://discuss.elastic.co/t/elasticsearch-and-logstash-monitoring-not-showing-all-logstash-nodes/378213 "2025-05-16T15:47:37Z")
Hi, Something strange... I have a 3 nodes cluster : elk1, elk2, and elk3. nodes elk1 and elk3 are "clones" for redondancy purpose and have logstash installed. node elk2 has only elasticsearch installed and is a warm/… --- ## [Problems with checking Elasticsearch remotely](https://discuss.elastic.co/t/problems-with-checking-elasticsearch-remotely/378087)
**Author:** [@Asfga](https://discuss.elastic.co/u/Asfga)\ **Replies:** 7\ **Last updated:** [May 13, 2025, 8:46pm UTC](https://discuss.elastic.co/t/problems-with-checking-elasticsearch-remotely/378087 "2025-05-13T20:46:40Z")
Hi guys, I am new to this topic and just set up a new Elasticsearch installation on my server. The connection to localhost works fine and I get a result when I do curl -X GET 'http://localhost:9200'. Now I want to conn… --- ## [Can't access keySet of document on scripted query](https://discuss.elastic.co/t/cant-access-keyset-of-document-on-scripted-query/378097)
**Author:** [@laxopix](https://discuss.elastic.co/u/laxopix)\ **Replies:** 0\ **Last updated:** [May 13, 2025, 6:29pm UTC](https://discuss.elastic.co/t/cant-access-keyset-of-document-on-scripted-query/378097 "2025-05-13T18:29:11Z")
I was trying to get all the document keys through the keySet() method in a scripted painless query { … --- ## [Why does a match\_phrase\_prefix query include all expansions of the last token in the document scoring process?](https://discuss.elastic.co/t/why-does-a-match-phrase-prefix-query-include-all-expansions-of-the-last-token-in-the-document-scoring-process/377977)
**Author:** [@zegging](https://discuss.elastic.co/u/zegging)\ **Replies:** 0\ **Last updated:** [May 9, 2025, 5:51am UTC](https://discuss.elastic.co/t/why-does-a-match-phrase-prefix-query-include-all-expansions-of-the-last-token-in-the-document-scoring-process/377977 "2025-05-09T05:51:47Z")
My es version is 6.8. I make a query like below and the field analyzer is a ngram. In the response the unexpected document score is too high. I try to analyze what happen in the query, then i'm confused. GET /\_search { … --- ## [Migrating Response Size Limit functionality from HLRC to Java Api client](https://discuss.elastic.co/t/migrating-response-size-limit-functionality-from-hlrc-to-java-api-client/376760)
**Author:** [@buitcj](https://discuss.elastic.co/u/buitcj)\ **Replies:** 1\ **Last updated:** [May 5, 2025, 3:27pm UTC](https://discuss.elastic.co/t/migrating-response-size-limit-functionality-from-hlrc-to-java-api-client/376760 "2025-05-05T15:27:19Z")
I was previously using the RestHighLeveLClient's RequestOptions to allow for larger response limits but I do not see a corresponding function/ability to do this using the new Java API client. Can someone shed some light … --- ## [Any interest in API authentication without long-lived secrets or having to configure/retrieve public keys?](https://discuss.elastic.co/t/any-interest-in-api-authentication-without-long-lived-secrets-or-having-to-configure-retrieve-public-keys/377294)
**Author:** [@relaygus](https://discuss.elastic.co/u/relaygus)\ **Replies:** 1\ **Last updated:** [May 3, 2025, 3:49am UTC](https://discuss.elastic.co/t/any-interest-in-api-authentication-without-long-lived-secrets-or-having-to-configure-retrieve-public-keys/377294 "2025-05-03T03:49:15Z")
Hi all, Elasticsearch is already very flexible when it comes to client authentication, but the options that are natively supported fall under two categories: Long-lived, shared secrets, which can be cumbersome when ad… --- ## [Problem with cluster after Windows Server patch](https://discuss.elastic.co/t/problem-with-cluster-after-windows-server-patch/376183)
**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\ **Replies:** 16\ **Last updated:** [April 30, 2025, 12:11pm UTC](https://discuss.elastic.co/t/problem-with-cluster-after-windows-server-patch/376183 "2025-04-30T12:11:18Z")
Hi! A week a go we added a Microsoft patch to our three test servers and after that we have major issues with Elastic. We often get timeout when doing a full reindex. This is the startup log: \[2025-03-20 13:17:19\] \[de… --- ## [Anybody knows how to get just the mappings from index\_template?](https://discuss.elastic.co/t/anybody-knows-how-to-get-just-the-mappings-from-index-template/377641)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 1\ **Last updated:** [April 29, 2025, 11:56pm UTC](https://discuss.elastic.co/t/anybody-knows-how-to-get-just-the-mappings-from-index-template/377641 "2025-04-29T23:56:07Z")
I am having a hard time with the new online documentations. It's really bad. Can anybody please help me with how to retrieving just the mapping from index\_template? --- ## [Open Crawler - Scheduled Crawl](https://discuss.elastic.co/t/open-crawler-scheduled-crawl/377455)
**Author:** [@alongaks](https://discuss.elastic.co/u/alongaks)\ **Replies:** 4\ **Last updated:** [April 28, 2025, 12:42pm UTC](https://discuss.elastic.co/t/open-crawler-scheduled-crawl/377455 "2025-04-28T12:42:30Z")
Hi, edit: version 0.2.2 crawler I tried to run a crawl based on a schedule, but I don't think the crawl is starting? It may be something Im missing but wanted to check if anyone else ran into this. If I run a normal, … --- ## [Use Kibana Date picker calendar on imported data](https://discuss.elastic.co/t/use-kibana-date-picker-calendar-on-imported-data/377557)
**Author:** [@Robin\_Gorry](https://discuss.elastic.co/u/Robin_Gorry)\ **Replies:** 2\ **Last updated:** [April 27, 2025, 10:25pm UTC](https://discuss.elastic.co/t/use-kibana-date-picker-calendar-on-imported-data/377557 "2025-04-27T22:25:34Z")
I am working on a PoC to visualise 5 years worth of data records. I have used the PHP client to import 5 years worth of data into my Indicies. I have a date field in each document called 'DateObtained' which is a date … --- ## [SharePoint Online Connector Sync Failing](https://discuss.elastic.co/t/sharepoint-online-connector-sync-failing/377530)
**Author:** [@UNNIE\_Ayilliath](https://discuss.elastic.co/u/UNNIE_Ayilliath)\ **Replies:** 1\ **Last updated:** [April 25, 2025, 7:07pm UTC](https://discuss.elastic.co/t/sharepoint-online-connector-sync-failing/377530 "2025-04-25T19:07:14Z")
I have the native elasticsearch connector configured with SharePoint Online. All the permissions are configured correctly as per the documentation and when I trigger the sync, the sync works well for documents, but it fa… --- ## [Elasticsearch .Net client ignoring Term in Query?](https://discuss.elastic.co/t/elasticsearch-net-client-ignoring-term-in-query/376749)
**Author:** [@kk123](https://discuss.elastic.co/u/kk123)\ **Replies:** 2\ **Last updated:** [April 23, 2025, 12:01pm UTC](https://discuss.elastic.co/t/elasticsearch-net-client-ignoring-term-in-query/376749 "2025-04-23T12:01:47Z")
Hi, I am trying to update\_by\_query using the following var updateResult = await ElasticSearch.ClientPool.Client.UpdateByQueryAsync\("mpackets", u =\> u .Query(q =\> q .Bool(b =\> … --- ## [Log visible in Argo but missing from Elasticsearch – only received last month briefly](https://discuss.elastic.co/t/log-visible-in-argo-but-missing-from-elasticsearch-only-received-last-month-briefly/377250)
**Author:** [@Shirmp\_Chang](https://discuss.elastic.co/u/Shirmp_Chang)\ **Replies:** 0\ **Last updated:** [April 17, 2025, 10:35am UTC](https://discuss.elastic.co/t/log-visible-in-argo-but-missing-from-elasticsearch-only-received-last-month-briefly/377250 "2025-04-17T10:35:55Z")
my app is deployed on K8s and managed via ArgoCD. Logs are collected using Fluentd (as a DaemonSet) and sent to Elasticsearch. Fluentd reads logs directly from container stdout/stderr (/var/log/containers/\*.log) and the … --- ## [Crawl options for Elastic Open Web Crawler](https://discuss.elastic.co/t/crawl-options-for-elastic-open-web-crawler/376917)
**Author:** [@alongaks](https://discuss.elastic.co/u/alongaks)\ **Replies:** 2\ **Last updated:** [April 15, 2025, 5:20pm UTC](https://discuss.elastic.co/t/crawl-options-for-elastic-open-web-crawler/376917 "2025-04-15T17:20:21Z")
Hello, I am doing some initial work with the Open Web Crawler and have a few settings I'm looking if they exist yet. The current Enterprise Search Crawler allows for the following: connector.crawler.crawl.threads.limi… --- ## [Access Elastic search](https://discuss.elastic.co/t/access-elastic-search/377139)
**Author:** [@BENAHMEDamani](https://discuss.elastic.co/u/BENAHMEDamani)\ **Replies:** 2\ **Last updated:** [April 15, 2025, 12:39pm UTC](https://discuss.elastic.co/t/access-elastic-search/377139 "2025-04-15T12:39:35Z")
Sorry for the post --- ## [Want to ask what should i do to make my elastic cluster since it is not working upon changing network.host to 0.0.0.0](https://discuss.elastic.co/t/want-to-ask-what-should-i-do-to-make-my-elastic-cluster-since-it-is-not-working-upon-changing-network-host-to-0-0-0-0/377118)
**Author:** [@Phia1](https://discuss.elastic.co/u/Phia1)\ **Replies:** 1\ **Last updated:** [April 15, 2025, 8:49am UTC](https://discuss.elastic.co/t/want-to-ask-what-should-i-do-to-make-my-elastic-cluster-since-it-is-not-working-upon-changing-network-host-to-0-0-0-0/377118 "2025-04-15T08:49:36Z")
So i'm trying to deploy a sharepoint connector that is deployed in docker in another vm. I cant find the connector so im configuring the yaml file earlier. then I came across an answer in the internet saying to change t… [Previous page](https://discuss.elastic.co/c/search/84.md?page=3) [Next page](https://discuss.elastic.co/c/search/84.md?page=5)