# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1049

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1050

---

## [Search Exact and partial match](https://discuss.elastic.co/t/search-exact-and-partial-match/209282)

<div class="topic-metadata">

**Author:** [@KrishK](https://discuss.elastic.co/u/KrishK)\
**Replies:** 16\
**Last updated:** [January 10, 2020, 7:55am UTC](https://discuss.elastic.co/t/search-exact-and-partial-match/209282 "2020-01-10T07:55:33Z")

</div>

Hi Support, I have keyword like: 'ABC - DEF', 'ABC DEF', 'ABC is there any combination with DEF'. Exact Match : "ABC-DEF" - Its gives perfect result ("ABC-DEF"). Partial Match: "ABC-DE" - its gives more result (all 3…

---

## [Fatal Error in thread Elasticsearch](https://discuss.elastic.co/t/fatal-error-in-thread-elasticsearch/214360)

<div class="topic-metadata">

**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\
**Replies:** 7\
**Last updated:** [January 10, 2020, 7:42am UTC](https://discuss.elastic.co/t/fatal-error-in-thread-elasticsearch/214360 "2020-01-10T07:42:13Z")

</div>

Hi Team, We have 7 node elasticsearch cluster we are facing sometimes facing the same issue in the following topic. Please find our cluster statistics please let us know are we doing something wrong with shard size o…

---

## [Ingest Node - Script Processor not recognizing field as number](https://discuss.elastic.co/t/ingest-node-script-processor-not-recognizing-field-as-number/214053)

<div class="topic-metadata">

**Author:** [@gferrette](https://discuss.elastic.co/u/gferrette)\
**Replies:** 4\
**Last updated:** [January 10, 2020, 6:49am UTC](https://discuss.elastic.co/t/ingest-node-script-processor-not-recognizing-field-as-number/214053 "2020-01-10T06:49:35Z")

</div>

Hello! I'm trying to create a new field (of type double) that is the result of a calculation of another field, that is of type double too. I'm using filebeat to send the data to an ingest pipeline, and the ingest pipel…

---

## [CPU suddenly high jumped](https://discuss.elastic.co/t/cpu-suddenly-high-jumped/214521)

<div class="topic-metadata">

**Author:** [@jams008](https://discuss.elastic.co/u/jams008)\
**Replies:** 2\
**Last updated:** [January 10, 2020, 6:34am UTC](https://discuss.elastic.co/t/cpu-suddenly-high-jumped/214521 "2020-01-10T06:34:24Z")

</div>

hello sir, I encountered my elastic search problem, suddenly the CPU was very high in use, I used 1 node with elastic search version 7.5.1 and I have tried optimizing it by adding the cache in the configuration but it re…

---

## [How to achieve good performance (huge daily indices)](https://discuss.elastic.co/t/how-to-achieve-good-performance-huge-daily-indices/214270)

<div class="topic-metadata">

**Author:** [@Naseem](https://discuss.elastic.co/u/Naseem)\
**Replies:** 6\
**Last updated:** [January 10, 2020, 6:14am UTC](https://discuss.elastic.co/t/how-to-achieve-good-performance-huge-daily-indices/214270 "2020-01-10T06:14:37Z")

</div>

Hello, Our free text search is unusable. We have a 3 master + 4 data/ingester setup. We have 1 primary shard and 1 replica per index. Indices are appended by date, and a new one is created every day (typical). The da…

---

## [Elasticsearch Heapsize query](https://discuss.elastic.co/t/elasticsearch-heapsize-query/214537)

<div class="topic-metadata">

**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\
**Replies:** 2\
**Last updated:** [January 10, 2020, 6:13am UTC](https://discuss.elastic.co/t/elasticsearch-heapsize-query/214537 "2020-01-10T06:13:13Z")

</div>

HI Team, Can we configure heap size morethan 50 % of RAM Size.If we have 64 GB RAM can we configure \>32 GB say 48 GB .? Regards, Vivek

---

## [Group By (Aggregation) to get only latest fields value](https://discuss.elastic.co/t/group-by-aggregation-to-get-only-latest-fields-value/214353)

<div class="topic-metadata">

**Author:** [@arvindK\_sharma](https://discuss.elastic.co/u/arvindK_sharma)\
**Replies:** 4\
**Last updated:** [January 10, 2020, 4:01am UTC](https://discuss.elastic.co/t/group-by-aggregation-to-get-only-latest-fields-value/214353 "2020-01-10T04:01:55Z")

</div>

I write a query to read the metricbeat file. This gives me the whatever I want but it repeats the value multiple time. I want to group by this on latest timestamp so I can get only latest record. Below is my query str…

---

## [Aggregation count filter with type](https://discuss.elastic.co/t/aggregation-count-filter-with-type/214355)

<div class="topic-metadata">

**Author:** [@MHaciyev](https://discuss.elastic.co/u/MHaciyev)\
**Replies:** 2\
**Last updated:** [January 10, 2020, 5:47am UTC](https://discuss.elastic.co/t/aggregation-count-filter-with-type/214355 "2020-01-10T05:47:13Z")

</div>

After searching Elastic search, I want to count the IDs in entities. But I want to count entities.fk\_entity\_type = 1 or entities.fk\_entity\_type = 2. How can I do that? my query \` GET smartinfo/\_search { "query…

---

## [Elasticsearch Suggestion Completes return incorrect number of suggestions](https://discuss.elastic.co/t/elasticsearch-suggestion-completes-return-incorrect-number-of-suggestions/214522)

<div class="topic-metadata">

**Author:** [@davidbkemp](https://discuss.elastic.co/u/davidbkemp)\
**Replies:** 0\
**Last updated:** [January 10, 2020, 4:03am UTC](https://discuss.elastic.co/t/elasticsearch-suggestion-completes-return-incorrect-number-of-suggestions/214522 "2020-01-10T04:03:43Z")

</div>

We are using Elasticsearch version 6.7 and have implemented completion suggestion successfully without weights. We now want to add weights to suggestions and are encountering issues. When using completion suggester with…

---

## [Example of how to use scrollAsync in a loop with High Level Rest Client](https://discuss.elastic.co/t/example-of-how-to-use-scrollasync-in-a-loop-with-high-level-rest-client/214515)

<div class="topic-metadata">

**Author:** [@indrgun](https://discuss.elastic.co/u/indrgun)\
**Replies:** 0\
**Last updated:** [January 10, 2020, 1:43am UTC](https://discuss.elastic.co/t/example-of-how-to-use-scrollasync-in-a-loop-with-high-level-rest-client/214515 "2020-01-10T01:43:41Z")

</div>

How do you use client.scrollAsync multiple times in a loop like below of Synchronous version of scroll: while (searchHits != null && searchHits.length \> 0) { SearchScrollRequest scrollRequest = new SearchScrollRequest(…

---

## [Can i get day wise data from elasticsearch?](https://discuss.elastic.co/t/can-i-get-day-wise-data-from-elasticsearch/209643)

<div class="topic-metadata">

**Author:** [@Ashish\_Saini](https://discuss.elastic.co/u/Ashish_Saini)\
**Replies:** 3\
**Last updated:** [December 19, 2019, 11:35pm UTC](https://discuss.elastic.co/t/can-i-get-day-wise-data-from-elasticsearch/209643 "2019-12-19T23:35:51Z")

</div>

if yes, how can i get day wise data?

---

## [Is it possible to balance shard with size in consideration?](https://discuss.elastic.co/t/is-it-possible-to-balance-shard-with-size-in-consideration/214296)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 7\
**Last updated:** [January 9, 2020, 10:07pm UTC](https://discuss.elastic.co/t/is-it-possible-to-balance-shard-with-size-in-consideration/214296 "2020-01-09T22:07:46Z")

</div>

Is this possible? I know the default is simply shard count, which is important. But not all shards have the same size. Is it possible to configure size as a secondary consideration? Meaning pick a larger (or smaller)…

---

## [Error when definining a mapping for pcap index](https://discuss.elastic.co/t/error-when-definining-a-mapping-for-pcap-index/213980)

<div class="topic-metadata">

**Author:** [@l4m4l](https://discuss.elastic.co/u/l4m4l)\
**Replies:** 1\
**Last updated:** [January 8, 2020, 11:51pm UTC](https://discuss.elastic.co/t/error-when-definining-a-mapping-for-pcap-index/213980 "2020-01-08T23:51:12Z")

</div>

Hi everyone, I am currently attempting to use tshark 3.2.0 and elasticsearch 7.4.1 to visualise network traffic from a pcap file. The steps I am following are: Generate test.json in elasticsearch bulk API format: ts…

---

## ["not opting out of query cache; authorization is not alowed"](https://discuss.elastic.co/t/not-opting-out-of-query-cache-authorization-is-not-alowed/214487)

<div class="topic-metadata">

**Author:** [@dstromberg](https://discuss.elastic.co/u/dstromberg)\
**Replies:** 0\
**Last updated:** [January 9, 2020, 8:15pm UTC](https://discuss.elastic.co/t/not-opting-out-of-query-cache-authorization-is-not-alowed/214487 "2020-01-09T20:15:56Z")

</div>

Hello people. I'm getting a lot of the following in my Elasticsearch 7.3.2 logs: \[index\_name\] not opting out of the query cache; authorization is not allowed ...for several indexes, and the messages repeat. I googled…

---

## [Index strategy for non retantion data and huge dataset](https://discuss.elastic.co/t/index-strategy-for-non-retantion-data-and-huge-dataset/214477)

<div class="topic-metadata">

**Author:** [@sweb](https://discuss.elastic.co/u/sweb)\
**Replies:** 0\
**Last updated:** [January 9, 2020, 6:37pm UTC](https://discuss.elastic.co/t/index-strategy-for-non-retantion-data-and-huge-dataset/214477 "2020-01-09T18:37:22Z")

</div>

I have many content sites and their produce about 1000 content per day, and many of them now is has about 3 million records. Sample document: { "website\_id": 10, "title": "Sample title", "description": "Sample de…

---

## [cosineSimilarity: script score query returned an invalid score for doc:](https://discuss.elastic.co/t/cosinesimilarity-script-score-query-returned-an-invalid-score-for-doc/213931)

<div class="topic-metadata">

**Author:** [@lok63](https://discuss.elastic.co/u/lok63)\
**Replies:** 2\
**Last updated:** [January 9, 2020, 6:09pm UTC](https://discuss.elastic.co/t/cosinesimilarity-script-score-query-returned-an-invalid-score-for-doc/213931 "2020-01-09T18:09:04Z")

</div>

I have a strange issue with the \_search API. I saw other people in this forum which had similar issues and the problem for them was that they had negative values. However in my case I am using dense vectors. Moreover my …

---

## [Snapshot process timing out , How to split snapshot process up?](https://discuss.elastic.co/t/snapshot-process-timing-out-how-to-split-snapshot-process-up/214468)

<div class="topic-metadata">

**Author:** [@Bkelly](https://discuss.elastic.co/u/Bkelly)\
**Replies:** 3\
**Last updated:** [January 9, 2020, 5:22pm UTC](https://discuss.elastic.co/t/snapshot-process-timing-out-how-to-split-snapshot-process-up/214468 "2020-01-09T17:22:38Z")

</div>

I have designed an AWS lambda function to snapshot all indices on our smaller cluster . We have 16 data nodes , 3 master nodes , 2 query nodes; with quite alot of data to snapshot. The function worked ,however lambda f…

---

## [Curator configuation](https://discuss.elastic.co/t/curator-configuation/214279)

<div class="topic-metadata">

**Author:** [@Dev\_Chakraborty](https://discuss.elastic.co/u/Dev_Chakraborty)\
**Replies:** 3\
**Last updated:** [January 9, 2020, 4:41pm UTC](https://discuss.elastic.co/t/curator-configuation/214279 "2020-01-09T16:41:14Z")

</div>

Hi Team, I am using curator version 5.8.1 and I have setup the config file as below: curator.yml client: hosts: — serverIP or localhost port: 9200 url\_prefix: use\_ssl: False certificate: client\_cert: client\_ke…

---

## [How to make cgroup metrics visible from node stat API](https://discuss.elastic.co/t/how-to-make-cgroup-metrics-visible-from-node-stat-api/214376)

<div class="topic-metadata">

**Author:** [@Cyndi-Tsui](https://discuss.elastic.co/u/Cyndi-Tsui)\
**Replies:** 1\
**Last updated:** [January 9, 2020, 3:52pm UTC](https://discuss.elastic.co/t/how-to-make-cgroup-metrics-visible-from-node-stat-api/214376 "2020-01-09T15:52:58Z")

</div>

Hi, I am trying to use node stat API to collect some cgroup metrics like: os.cgroup.memory.limit\_in\_bytes os.cgroup.memory.usage\_in\_bytes But cgroup metrics are not visible: API: https://localhost:9200/\_nodes/\<…

---

## [How to get exact number of buckets returned with too\_many\_buckets\_exception](https://discuss.elastic.co/t/how-to-get-exact-number-of-buckets-returned-with-too-many-buckets-exception/214284)

<div class="topic-metadata">

**Author:** [@BrianJenney](https://discuss.elastic.co/u/BrianJenney)\
**Replies:** 1\
**Last updated:** [January 9, 2020, 3:36pm UTC](https://discuss.elastic.co/t/how-to-get-exact-number-of-buckets-returned-with-too-many-buckets-exception/214284 "2020-01-09T15:36:07Z")

</div>

Like many people - I've received the too\_many\_buckets\_exception error with an unoptimized query. How can we get the actual number of buckets returned that triggered this error?

---

## [Need to convert dsl query to NEST](https://discuss.elastic.co/t/need-to-convert-dsl-query-to-nest/214202)

<div class="topic-metadata">

**Author:** [@arvindK\_sharma](https://discuss.elastic.co/u/arvindK_sharma)\
**Replies:** 0\
**Last updated:** [January 8, 2020, 9:48am UTC](https://discuss.elastic.co/t/need-to-convert-dsl-query-to-nest/214202 "2020-01-08T09:48:37Z")

</div>

I have dsl following query get /metricbeat\*/\_search?pretty=true { "aggs": { "3": { "terms": { "field": "metricset.name", "order": { "\_count": "desc" }, "size": 20 } } }, "size": 0, "\_source": { "excludes"…

---

## [ElasticSeach Prefix Query For boost](https://discuss.elastic.co/t/elasticseach-prefix-query-for-boost/214458)

<div class="topic-metadata">

**Author:** [@abhishek.tripathi](https://discuss.elastic.co/u/abhishek.tripathi)\
**Replies:** 0\
**Last updated:** [January 9, 2020, 3:31pm UTC](https://discuss.elastic.co/t/elasticseach-prefix-query-for-boost/214458 "2020-01-09T15:31:35Z")

</div>

Hi Everyone, I am trying to search for data in my index with the exact match in prefix query, but the analyzer changes it to different tokens and give me results based on different tokens. For example I have few fields …

---

## [Exact Match of words by using Multimatch query](https://discuss.elastic.co/t/exact-match-of-words-by-using-multimatch-query/214456)

<div class="topic-metadata">

**Author:** [@ashutosh1](https://discuss.elastic.co/u/ashutosh1)\
**Replies:** 0\
**Last updated:** [January 9, 2020, 3:26pm UTC](https://discuss.elastic.co/t/exact-match-of-words-by-using-multimatch-query/214456 "2020-01-09T15:26:10Z")

</div>

Hi All, From last 10 days i am trying manage my search result coming by multimatch query. The problem is i am getting the results in which the words are partially matched. Example: if i am looking for testing in my met…

---

## [Error Running Rally against an existing cluster](https://discuss.elastic.co/t/error-running-rally-against-an-existing-cluster/212872)

<div class="topic-metadata">

**Author:** [@leewadhams](https://discuss.elastic.co/u/leewadhams)\
**Replies:** 1\
**Last updated:** [January 9, 2020, 3:22pm UTC](https://discuss.elastic.co/t/error-running-rally-against-an-existing-cluster/212872 "2020-01-09T15:22:32Z")

</div>

Hi, I'm having trouble starting Rally to run against an existing Elasticsearch cluster from Mac OSX Catalina. I followed the instructions here However when I run using the command: esrally --track=pmc --target-hosts=\[…

---

## ["Cannot delete indices that are being snapshotted" when deleting index](https://discuss.elastic.co/t/cannot-delete-indices-that-are-being-snapshotted-when-deleting-index/214442)

<div class="topic-metadata">

**Author:** [@hogehoge](https://discuss.elastic.co/u/hogehoge)\
**Replies:** 2\
**Last updated:** [January 9, 2020, 3:06pm UTC](https://discuss.elastic.co/t/cannot-delete-indices-that-are-being-snapshotted-when-deleting-index/214442 "2020-01-09T15:06:48Z")

</div>

Elasticsearch 6.8 AWS (Use Elasticsearch service) Automatic snapshot performed at UTC0 Temporarily store file contents in index Format the data based on the fetched index and store it in another index Delete temporary…

---

## [How to change the ip address dynamically without stop & start?](https://discuss.elastic.co/t/how-to-change-the-ip-address-dynamically-without-stop-start/214450)

<div class="topic-metadata">

**Author:** [@sunnut](https://discuss.elastic.co/u/sunnut)\
**Replies:** 1\
**Last updated:** [January 9, 2020, 3:02pm UTC](https://discuss.elastic.co/t/how-to-change-the-ip-address-dynamically-without-stop-start/214450 "2020-01-09T15:02:54Z")

</div>

As title described

---

## [Unable to start Elasticsearch 7.5 on RHEL 7](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-5-on-rhel-7/214244)

<div class="topic-metadata">

**Author:** [@stressedsalmon](https://discuss.elastic.co/u/stressedsalmon)\
**Replies:** 15\
**Last updated:** [January 9, 2020, 2:51pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-5-on-rhel-7/214244 "2020-01-09T14:51:39Z")

</div>

Hello, I am having an issue running the elasticsearch service after installation. I have seen another article here which was not answered. I am running into the same issue as the other user. Here are some log files: Pa…

---

## [Authentication issues while xpack security enabling](https://discuss.elastic.co/t/authentication-issues-while-xpack-security-enabling/214285)

<div class="topic-metadata">

**Author:** [@TheVintik](https://discuss.elastic.co/u/TheVintik)\
**Replies:** 3\
**Last updated:** [January 9, 2020, 2:27pm UTC](https://discuss.elastic.co/t/authentication-issues-while-xpack-security-enabling/214285 "2020-01-09T14:27:40Z")

</div>

Hello, I have an issues while enabling security for ES. I have installed and configured several ES VMs. They already working as expected and connected to one ES cluster. After that, I decided to try to install and setup…

---

## [Delete documents by query with values from other index](https://discuss.elastic.co/t/delete-documents-by-query-with-values-from-other-index/214400)

<div class="topic-metadata">

**Author:** [@johanwallenborg](https://discuss.elastic.co/u/johanwallenborg)\
**Replies:** 2\
**Last updated:** [January 9, 2020, 1:43pm UTC](https://discuss.elastic.co/t/delete-documents-by-query-with-values-from-other-index/214400 "2020-01-09T13:43:43Z")

</div>

Hello, I've created a similar question before which didn't get any answers so I create a new topic but with more information / code that maybe helps to understand what i'm after. I've made an example of what I want to …

---

## [ILM : configuration and pricing](https://discuss.elastic.co/t/ilm-configuration-and-pricing/213437)

<div class="topic-metadata">

**Author:** [@icirco](https://discuss.elastic.co/u/icirco)\
**Replies:** 6\
**Last updated:** [January 9, 2020, 1:01pm UTC](https://discuss.elastic.co/t/ilm-configuration-and-pricing/213437 "2020-01-09T13:01:44Z")

</div>

hello, In my filebeat (7.4) configuration I setup an index template. In a recent Topic, I known that is important to setup setup.ilm.enabled to false to run an index template. filebeat.yml : setup.ilm.enabled: false …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1048)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1050)
