# Latest **URL:** https://discuss.elastic.co/latest.md?page=915 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 916 --- ## [Is JavaDoc on the way?](https://discuss.elastic.co/t/is-javadoc-on-the-way/317589)
**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\ **Replies:** 10\ **Last updated:** [October 29, 2022, 5:45am UTC](https://discuss.elastic.co/t/is-javadoc-on-the-way/317589 "2022-10-29T05:45:04Z")
Hi, is this only me who thinks that Elasticsearch Java API Client is not well documented? All we get from javadoc is basic information about names of methods. The short less than 10 words sentences als explainations for… --- ## [Does forcing/manually setting the id of the document makes the shards unevenly distributed?](https://discuss.elastic.co/t/does-forcing-manually-setting-the-id-of-the-document-makes-the-shards-unevenly-distributed/317372)
**Author:** [@Java2avaj](https://discuss.elastic.co/u/Java2avaj)\ **Replies:** 7\ **Last updated:** [October 29, 2022, 5:32am UTC](https://discuss.elastic.co/t/does-forcing-manually-setting-the-id-of-the-document-makes-the-shards-unevenly-distributed/317372 "2022-10-29T05:32:29Z")
Does forcing/manually setting the id of the document makes the shards unevenly distributed? Currently, we are forcing the values of id when storing documents in the index. Is this a bad practice? Does it make the shar… --- ## [Multi\_match phrase\_prefix is giving different results for Elastic versions 6.6 and 8.4](https://discuss.elastic.co/t/multi-match-phrase-prefix-is-giving-different-results-for-elastic-versions-6-6-and-8-4/315979)
**Author:** [@Hariprasad4118](https://discuss.elastic.co/u/Hariprasad4118)\ **Replies:** 1\ **Last updated:** [October 29, 2022, 5:03am UTC](https://discuss.elastic.co/t/multi-match-phrase-prefix-is-giving-different-results-for-elastic-versions-6-6-and-8-4/315979 "2022-10-29T05:03:04Z")
Team, Please help me, I am using same max expansion and same ES Query on Elastic versions 6.6 and 8.4, with same set of data. but giving different results. so, can some one clearly confirms what is the major differenc… --- ## [Metric aggregation on composite buckets not working with nested fields](https://discuss.elastic.co/t/metric-aggregation-on-composite-buckets-not-working-with-nested-fields/317712)
**Author:** [@Ahmed\_Syed](https://discuss.elastic.co/u/Ahmed_Syed)\ **Replies:** 0\ **Last updated:** [October 28, 2022, 8:30pm UTC](https://discuss.elastic.co/t/metric-aggregation-on-composite-buckets-not-working-with-nested-fields/317712 "2022-10-28T20:30:02Z")
I am able to create buckets from different sources (one of them being a nested field) successfully. However when I do a metric aggregation, the metric aggregation is not applied on the composite bucket. For example: I c… --- ## [Ignore\_case doesn't work for elastic search stop token filter](https://discuss.elastic.co/t/ignore-case-doesnt-work-for-elastic-search-stop-token-filter/317706)
**Author:** [@taugusti](https://discuss.elastic.co/u/taugusti)\ **Replies:** 0\ **Last updated:** [October 28, 2022, 6:23pm UTC](https://discuss.elastic.co/t/ignore-case-doesnt-work-for-elastic-search-stop-token-filter/317706 "2022-10-28T18:23:22Z")
Trying to follow the example from the URL below to ignore case for stop words. However it doesn't seem to stop case insensitive stop words. for eg it stop "the", but not "The" PUT /my-index-000001 { "settings": { … --- ## [Elastic Search Query performance when source is disabled](https://discuss.elastic.co/t/elastic-search-query-performance-when-source-is-disabled/317348)
**Author:** [@prateek\_shekhar](https://discuss.elastic.co/u/prateek_shekhar)\ **Replies:** 11\ **Last updated:** [October 28, 2022, 6:14pm UTC](https://discuss.elastic.co/t/elastic-search-query-performance-when-source-is-disabled/317348 "2022-10-28T18:14:40Z")
Hi Everyone, we have an Elasticsearch index with 100 million documents (with replicas it's about 400 million). The index contains nested documents as well. We have a use case where we have to boost the score of the docu… --- ## [Error: ImagePullBackOff](https://discuss.elastic.co/t/error-imagepullbackoff/317687)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 4\ **Last updated:** [October 28, 2022, 4:45pm UTC](https://discuss.elastic.co/t/error-imagepullbackoff/317687 "2022-10-28T16:45:06Z")
Hello, I want to deploy quickstart example of elk, kibana, fleet server using this example but pods cannot start because NAMESPACE NAME READY STATUS REST… --- ## [Elastic Agent vs Logstash/Elasticsearch output](https://discuss.elastic.co/t/elastic-agent-vs-logstash-elasticsearch-output/316345)
**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\ **Replies:** 1\ **Last updated:** [October 28, 2022, 3:46pm UTC](https://discuss.elastic.co/t/elastic-agent-vs-logstash-elasticsearch-output/316345 "2022-10-28T15:46:46Z")
Hello, We are thinking of replacing Beats with Elastic Agent and would like to send metrics to Elasticsearch directly and custom logs via Logstash. Is this even possible with Elastic Agent? Looking at Fleet settings the… --- ## [Watcher aggregation transform painless question](https://discuss.elastic.co/t/watcher-aggregation-transform-painless-question/317697)
**Author:** [@joe0228](https://discuss.elastic.co/u/joe0228)\ **Replies:** 0\ **Last updated:** [October 28, 2022, 3:44pm UTC](https://discuss.elastic.co/t/watcher-aggregation-transform-painless-question/317697 "2022-10-28T15:44:42Z")
Trying to get the result from bucket\_script to use in the transform section - specifically v = params.value // { "trigger": { "schedule": { "intervel": "15m" } }, "input": { "search": { "request": { "search\_ty… --- ## [Expose Elastic Search externally with istio ingress controller](https://discuss.elastic.co/t/expose-elastic-search-externally-with-istio-ingress-controller/317683)
**Author:** [@AbelAlejandro](https://discuss.elastic.co/u/AbelAlejandro)\ **Replies:** 0\ **Last updated:** [October 28, 2022, 12:39pm UTC](https://discuss.elastic.co/t/expose-elastic-search-externally-with-istio-ingress-controller/317683 "2022-10-28T12:39:37Z")
My Kubernetes cluster is an Azure Kubernetes Service one with Istio as the ingress controller. I have a working Elastic Search instance that I'm having trouble to expose. I'm deploying such an Elastic Search instance wi… --- ## [Elastic Observability On-Demand: APM RUM agent seems to have wrong version](https://discuss.elastic.co/t/elastic-observability-on-demand-apm-rum-agent-seems-to-have-wrong-version/317419)
**Author:** [@jan.stap](https://discuss.elastic.co/u/jan.stap)\ **Replies:** 15\ **Last updated:** [October 28, 2022, 12:39pm UTC](https://discuss.elastic.co/t/elastic-observability-on-demand-apm-rum-agent-seems-to-have-wrong-version/317419 "2022-10-28T12:39:06Z")
Hi, Lab 3.4 instructs to install version 4.9.0 of the APM RUM agent by running: npm install @elastic/apm-rum@4.9.0 --save After doing this and then applying the agent configuration as instructed in the lab I do receiv… --- ## [Metricbeat 7.17.7 generate a network overload on our Kubernetes nodes and API](https://discuss.elastic.co/t/metricbeat-7-17-7-generate-a-network-overload-on-our-kubernetes-nodes-and-api/317681)
**Author:** [@sebglon](https://discuss.elastic.co/u/sebglon)\ **Replies:** 0\ **Last updated:** [October 28, 2022, 12:12pm UTC](https://discuss.elastic.co/t/metricbeat-7-17-7-generate-a-network-overload-on-our-kubernetes-nodes-and-api/317681 "2022-10-28T12:12:02Z")
After upgrading from Metricbeat 7.10 to 7.17.7, we have a production outage due to network overload on our kubernetes nodes network and API. After deleting the MetricBean daemonset, we have no more issue. We have not i… --- ## [Elastic Agent Fleet Setup unauthorized](https://discuss.elastic.co/t/elastic-agent-fleet-setup-unauthorized/317406)
**Author:** [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\ **Replies:** 1\ **Last updated:** [October 26, 2022, 7:21pm UTC](https://discuss.elastic.co/t/elastic-agent-fleet-setup-unauthorized/317406 "2022-10-26T19:21:33Z")
When trying to deploy a fleet server via ECK, sometimes the pod is never created. The logs from the operator shows {"log.level":"error","@timestamp":"2022-10-25T11:42:57.936Z","log.logger":"manager.eck-operator","messa… --- ## [Have Months displayed in chronological order](https://discuss.elastic.co/t/have-months-displayed-in-chronological-order/317346)
**Author:** [@wido](https://discuss.elastic.co/u/wido)\ **Replies:** 7\ **Last updated:** [October 28, 2022, 11:59am UTC](https://discuss.elastic.co/t/have-months-displayed-in-chronological-order/317346 "2022-10-28T11:59:02Z")
Hi there! We are indexing data in ES to create dashboards using Kibana. There is a field named Month that contains the names of the months indexed as strings to both text and keyword data types. Each month is represent… --- ## [How come APM Alert for Failed Transaction Rate Threshold shows "Ok" instead of "Active"?](https://discuss.elastic.co/t/how-come-apm-alert-for-failed-transaction-rate-threshold-shows-ok-instead-of-active/317640)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 2\ **Last updated:** [October 28, 2022, 11:58am UTC](https://discuss.elastic.co/t/how-come-apm-alert-for-failed-transaction-rate-threshold-shows-ok-instead-of-active/317640 "2022-10-28T11:58:09Z")
I'm exploring the APM Alert Failed Transaction Rate Threshold feature but I can't seem to put the rule into an "Active" state. So for example, I have an APM service that shows Failed Transaction Rate of 48% for about 30… --- ## [Lost indice without any warning](https://discuss.elastic.co/t/lost-indice-without-any-warning/317668)
**Author:** [@Henri\_L](https://discuss.elastic.co/u/Henri_L)\ **Replies:** 9\ **Last updated:** [October 28, 2022, 10:24am UTC](https://discuss.elastic.co/t/lost-indice-without-any-warning/317668 "2022-10-28T10:24:12Z")
Hi there I just notice that I lost my indice and this is a bit strange. Could you please help me with the log file below? The command curl -X GET "localhost:9200/\_cat/indices?v" only give me that health status index… --- ## [Create a pattern\_index kibana 7.6.2 api](https://discuss.elastic.co/t/create-a-pattern-index-kibana-7-6-2-api/317619)
**Author:** [@kimo1](https://discuss.elastic.co/u/kimo1)\ **Replies:** 2\ **Last updated:** [October 28, 2022, 7:43am UTC](https://discuss.elastic.co/t/create-a-pattern-index-kibana-7-6-2-api/317619 "2022-10-28T07:43:53Z")
I have created a dashboard in kibana for monitoring, and I want to create an index\_pattern already exist in elasticsearch with name (idx-traces). I did the following request curl: curl -X POST host:port/api/index\_patte… --- ## [Prepended Term Search is Faster than Term Search for Nested Field](https://discuss.elastic.co/t/prepended-term-search-is-faster-than-term-search-for-nested-field/317567)
**Author:** [@aschattopadhyay](https://discuss.elastic.co/u/aschattopadhyay)\ **Replies:** 2\ **Last updated:** [October 28, 2022, 6:11am UTC](https://discuss.elastic.co/t/prepended-term-search-is-faster-than-term-search-for-nested-field/317567 "2022-10-28T06:11:23Z")
Hi there: I am very new to Elasticsearch implementation and luckily I got this forum. Just wondering if I can get some help please regarding a scenario that we are facing for our Elasticsearch instance. We have got lik… --- ## [Customized sort in ElasticSearch](https://discuss.elastic.co/t/customized-sort-in-elasticsearch/317198)
**Author:** [@Apurba](https://discuss.elastic.co/u/Apurba)\ **Replies:** 5\ **Last updated:** [October 28, 2022, 5:02am UTC](https://discuss.elastic.co/t/customized-sort-in-elasticsearch/317198 "2022-10-28T05:02:57Z")
Can I use custom sort in ES? Like, in my ES data, one field values are -\> "A", "A", "B", "B", "C", "C", "C", "D" Can I sort this like -\> "D", "B", "B", "C", "C", "C", "A", "A" If we can sort like this, how the query s… --- ## [Why is .doc() missing in UpdateOperation?](https://discuss.elastic.co/t/why-is-doc-missing-in-updateoperation/317587)
**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\ **Replies:** 1\ **Last updated:** [October 28, 2022, 4:15am UTC](https://discuss.elastic.co/t/why-is-doc-missing-in-updateoperation/317587 "2022-10-28T04:15:25Z")
Hi, as an junior Java developer try to understand the things by using the "easy way". I actually don't understand what requirements like this mean and can't write code from the scratch with that information: update(Fun… --- ## [java.lang.IllegalArgumentException: Class class co.elastic.clients.elasticsearch.core.bulk.UpdateOperation cannot be read from JSON](https://discuss.elastic.co/t/java-lang-illegalargumentexception-class-class-co-elastic-clients-elasticsearch-core-bulk-updateoperation-cannot-be-read-from-json/317609)
**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\ **Replies:** 1\ **Last updated:** [October 28, 2022, 4:14am UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-class-class-co-elastic-clients-elasticsearch-core-bulk-updateoperation-cannot-be-read-from-json/317609 "2022-10-28T04:14:44Z")
BulkRequest.Builder brb = new BulkRequest.Builder().index("foo"); //first try Rechnung r6 = new Rechnung(); r6.Rechnungsbetrag = 49.99f; ObjectMapper mapper = new ObjectMapper(); String myjson = mapper.writeValueAsString… --- ## ["Race condition" in Java](https://discuss.elastic.co/t/race-condition-in-java/317615)
**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\ **Replies:** 3\ **Last updated:** [October 28, 2022, 4:09am UTC](https://discuss.elastic.co/t/race-condition-in-java/317615 "2022-10-28T04:09:15Z")
Hi, what i am experiencing right now is that a document that should be already deleted will be still listet if a search is done directly after the deletion. a) indexing the document xyz b) doing other Elastic-related … --- ## [State changed to FAILED: Missed two check-ins - type: 'ERROR' - sub\_type: 'FAILED'](https://discuss.elastic.co/t/state-changed-to-failed-missed-two-check-ins-type-error-sub-type-failed/317158)
**Author:** [@safuanmansor](https://discuss.elastic.co/u/safuanmansor)\ **Replies:** 1\ **Last updated:** [October 28, 2022, 2:43am UTC](https://discuss.elastic.co/t/state-changed-to-failed-missed-two-check-ins-type-error-sub-type-failed/317158 "2022-10-28T02:43:02Z")
Hi Elastic Team, Appreciate if you can point me the issue as my elastic-agent installed status change to unhealthy after couple of hours without any configuration change. The logs file are as per the link. --- ## [How can I convert @timestamp from logstash to encoded format as YYYY-MM-DDThh:mm:ss.sss+/-hh:mm](https://discuss.elastic.co/t/how-can-i-convert-timestamp-from-logstash-to-encoded-format-as-yyyy-mm-ddthhss-sss-hh-mm/317608)
**Author:** [@teja\_tata](https://discuss.elastic.co/u/teja_tata)\ **Replies:** 11\ **Last updated:** [October 28, 2022, 1:50am UTC](https://discuss.elastic.co/t/how-can-i-convert-timestamp-from-logstash-to-encoded-format-as-yyyy-mm-ddthhss-sss-hh-mm/317608 "2022-10-28T01:50:18Z")
I have tried using date filter match option but didn't work. It would be great if someone can help me here. --- ## [Elasticsearch: how the exact matches can rank higher than fuzzy match and phrase match in the elastic search?](https://discuss.elastic.co/t/elasticsearch-how-the-exact-matches-can-rank-higher-than-fuzzy-match-and-phrase-match-in-the-elastic-search/317653)
**Author:** [@paris1](https://discuss.elastic.co/u/paris1)\ **Replies:** 0\ **Last updated:** [October 28, 2022, 12:46am UTC](https://discuss.elastic.co/t/elasticsearch-how-the-exact-matches-can-rank-higher-than-fuzzy-match-and-phrase-match-in-the-elastic-search/317653 "2022-10-28T00:46:44Z")
0 I'm trying to configure Elasticsearch to give me both exact matches and fuzzy matches and also phrase matches.I'm using Elasticsearch to search namesof foods in a database, and I want it to be fuzzy to allow for minor… --- ## [Logstash can't index into ES: \`action \[indices:admin/auto\_create\] is unauthorized for user\`](https://discuss.elastic.co/t/logstash-cant-index-into-es-action-indices-admin-auto-create-is-unauthorized-for-user/317650)
**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\ **Replies:** 1\ **Last updated:** [October 27, 2022, 11:14pm UTC](https://discuss.elastic.co/t/logstash-cant-index-into-es-action-indices-admin-auto-create-is-unauthorized-for-user/317650 "2022-10-27T23:14:48Z")
I created a user demoTester with the following roles: /usr/share/elasticsearch/bin/elasticsearch-users useradd demoTester -p demoTester -r kibana\_admin,logstash\_admin,beats\_admin,logstash\_system,monitoring\_user,watcher\_… --- ## [Trying to change filebeat index](https://discuss.elastic.co/t/trying-to-change-filebeat-index/317564)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 4\ **Last updated:** [October 27, 2022, 9:21pm UTC](https://discuss.elastic.co/t/trying-to-change-filebeat-index/317564 "2022-10-27T21:21:26Z")
I am trying to change the index filebeat writes to from the default "filebeat..." to "suricata..." I have the following in my filebeat.yml: # ======================= Elasticsearch template setting ====================… --- ## [Multiple account management capability for Workspace Search](https://discuss.elastic.co/t/multiple-account-management-capability-for-workspace-search/306920)
**Author:** [@Yasuyuki\_Takeo](https://discuss.elastic.co/u/Yasuyuki_Takeo)\ **Replies:** 2\ **Last updated:** [June 22, 2022, 11:23am UTC](https://discuss.elastic.co/t/multiple-account-management-capability-for-workspace-search/306920 "2022-06-22T11:23:14Z")
Is there a plan to make Workspace Search connectors multiple accounts enabled? Context The demand for federated search across multiple repositories occurs along the way of acquiring companies for the rapid growth of en… --- ## [Hanging shutdown with multiple pipelines. Shutdown of pipelines in wrong order](https://discuss.elastic.co/t/hanging-shutdown-with-multiple-pipelines-shutdown-of-pipelines-in-wrong-order/316354)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [October 12, 2022, 7:17am UTC](https://discuss.elastic.co/t/hanging-shutdown-with-multiple-pipelines-shutdown-of-pipelines-in-wrong-order/316354 "2022-10-12T07:17:29Z")
Hi, I have a logstash config with multiple pipelines. One of the pipeline is a central output which ships to elasticsearch. The other pipelines have their own inputs and filters and having that central output pipeline a… --- ## [Logstash : How to extract a nested field from Json log and only index the content of the nested field](https://discuss.elastic.co/t/logstash-how-to-extract-a-nested-field-from-json-log-and-only-index-the-content-of-the-nested-field/317617)
**Author:** [@Ranjith\_kk](https://discuss.elastic.co/u/Ranjith_kk)\ **Replies:** 5\ **Last updated:** [October 27, 2022, 6:38pm UTC](https://discuss.elastic.co/t/logstash-how-to-extract-a-nested-field-from-json-log-and-only-index-the-content-of-the-nested-field/317617 "2022-10-27T18:38:57Z")
We have some logs in JSON format with a nested field called "data". We are looking for an option to extract only the content of this nested field and send it for indexing with ES. Actual log format: {"field1":"value1",… [Previous page](https://discuss.elastic.co/latest.md?page=914) [Next page](https://discuss.elastic.co/latest.md?page=916)