# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1079

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1080

---

## [Search against analyzed text vs keyword array field](https://discuss.elastic.co/t/search-against-analyzed-text-vs-keyword-array-field/210096)

<div class="topic-metadata">

**Author:** [@chanakagl](https://discuss.elastic.co/u/chanakagl)\
**Replies:** 0\
**Last updated:** [December 2, 2019, 2:54am UTC](https://discuss.elastic.co/t/search-against-analyzed-text-vs-keyword-array-field/210096 "2019-12-02T02:54:18Z")

</div>

Hi, I have a text field which contains millions of ids in comma separated, EX :- "field1: "1254,4578,578795,451546,3658,5689,........" I'm currently analyzed above field with punctuation tokenizer and do the match qu…

---

## [Elastic Cloud Service Selection](https://discuss.elastic.co/t/elastic-cloud-service-selection/209746)

<div class="topic-metadata">

**Author:** [@Gilad\_Gecht](https://discuss.elastic.co/u/Gilad_Gecht)\
**Replies:** 3\
**Last updated:** [December 1, 2019, 10:11pm UTC](https://discuss.elastic.co/t/elastic-cloud-service-selection/209746 "2019-12-01T22:11:13Z")

</div>

Hi, after messing around with AWS's Elasticsearch service, my colleagues and I have decided to try a different approach. This was due to AWS's service not supporting CSV files reporting. We came across the Elastic Clou…

---

## [Filter path is applied only to the first request of ScrollAPI](https://discuss.elastic.co/t/filter-path-is-applied-only-to-the-first-request-of-scrollapi/210076)

<div class="topic-metadata">

**Author:** [@RazmikGevorgyan](https://discuss.elastic.co/u/RazmikGevorgyan)\
**Replies:** 0\
**Last updated:** [December 1, 2019, 6:42pm UTC](https://discuss.elastic.co/t/filter-path-is-applied-only-to-the-first-request-of-scrollapi/210076 "2019-12-01T18:42:39Z")

</div>

Hi Nest ScollAPI uses defined filter path only in the first request. Next requests don't contain filter path and fetch too much. Used filter path (e.g. FilterPath = new string\[\] { "hits.hits.\_source", "hits.hits.\_sco…

---

## [Java High Level Rest Client Cross cluster search](https://discuss.elastic.co/t/java-high-level-rest-client-cross-cluster-search/210053)

<div class="topic-metadata">

**Author:** [@Mahdi\_Davoodi](https://discuss.elastic.co/u/Mahdi_Davoodi)\
**Replies:** 3\
**Last updated:** [December 1, 2019, 5:30pm UTC](https://discuss.elastic.co/t/java-high-level-rest-client-cross-cluster-search/210053 "2019-12-01T17:30:09Z")

</div>

how to search in multi cluster (cross cluster search) by using java high level rest client?

---

## [\[BUG?\] Discrepancy in boolean-type keys in aggregation buckets between ES 1.7.x and 7.x](https://discuss.elastic.co/t/bug-discrepancy-in-boolean-type-keys-in-aggregation-buckets-between-es-1-7-x-and-7-x/210060)

<div class="topic-metadata">

**Author:** [@joneslee85](https://discuss.elastic.co/u/joneslee85)\
**Replies:** 1\
**Last updated:** [December 1, 2019, 1:57pm UTC](https://discuss.elastic.co/t/bug-discrepancy-in-boolean-type-keys-in-aggregation-buckets-between-es-1-7-x-and-7-x/210060 "2019-12-01T13:57:22Z")

</div>

Hi all I have a simple field purchased as type boolean in my index mapping. When I generate aggregation for: ... "aggs": { "terms" : { "field" : "purchased" } } ... the results I have in ES 1.7.5 is: "aggregations": …

---

## [Upgrade from 6.8.3 to 7.X.X results in "failed to apply updated cluster state"](https://discuss.elastic.co/t/upgrade-from-6-8-3-to-7-x-x-results-in-failed-to-apply-updated-cluster-state/207111)

<div class="topic-metadata">

**Author:** [@ricferr1976](https://discuss.elastic.co/u/ricferr1976)\
**Replies:** 12\
**Last updated:** [December 1, 2019, 11:09am UTC](https://discuss.elastic.co/t/upgrade-from-6-8-3-to-7-x-x-results-in-failed-to-apply-updated-cluster-state/207111 "2019-12-01T11:09:21Z")

</div>

Hello. We had a 6.8.3 single node with a lot of data (yes, I know that offers no fault tolerance but its a known limitation) and I tried to upgrade it to 7.4.2. We followed the step by step in https://www.elastic.co/gu…

---

## [Connecting to %s using SSL with verify\_certs=False is insecure](https://discuss.elastic.co/t/connecting-to-s-using-ssl-with-verify-certs-false-is-insecure/209776)

<div class="topic-metadata">

**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\
**Replies:** 3\
**Last updated:** [November 28, 2019, 5:17am UTC](https://discuss.elastic.co/t/connecting-to-s-using-ssl-with-verify-certs-false-is-insecure/209776 "2019-11-28T05:17:09Z")

</div>

Here is my python code for connecting to Elasticsearch: from elasticsearch import Elasticsearch es = Elasticsearch(\[HOST\], http\_auth = (str(USERNAME), str(PASSWORD)), scheme = "https", port=443) Error: /usr/local/lib…

---

## [Elaticsearch Memory consumption increasing too much in ELK 7](https://discuss.elastic.co/t/elaticsearch-memory-consumption-increasing-too-much-in-elk-7/210037)

<div class="topic-metadata">

**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\
**Replies:** 1\
**Last updated:** [November 30, 2019, 7:45pm UTC](https://discuss.elastic.co/t/elaticsearch-memory-consumption-increasing-too-much-in-elk-7/210037 "2019-11-30T19:45:52Z")

</div>

Hi, I have upgraded ELK from version 6.6.1 to 7.0.1 in kubernetes environment.There are 11 nodes in the cluster - 3 master pods, 3 data pods & 5 client pods. I see memory consumption of elasticsearch is increasing indef…

---

## [Prioritising pages belonging to a folder](https://discuss.elastic.co/t/prioritising-pages-belonging-to-a-folder/209889)

<div class="topic-metadata">

**Author:** [@thack](https://discuss.elastic.co/u/thack)\
**Replies:** 2\
**Last updated:** [November 30, 2019, 7:15pm UTC](https://discuss.elastic.co/t/prioritising-pages-belonging-to-a-folder/209889 "2019-11-30T19:15:08Z")

</div>

We have a folder inside which are all our course pages. That folder is /course/ How do I prioritise all content in this folder when corresponding with search queries? For example, if someone types in 'art', I want our…

---

## [Push JSON into elasticsearch directly](https://discuss.elastic.co/t/push-json-into-elasticsearch-directly/210035)

<div class="topic-metadata">

**Author:** [@Sundaramoorthy\_Anand](https://discuss.elastic.co/u/Sundaramoorthy_Anand)\
**Replies:** 0\
**Last updated:** [November 30, 2019, 5:30pm UTC](https://discuss.elastic.co/t/push-json-into-elasticsearch-directly/210035 "2019-11-30T17:30:49Z")

</div>

My architecture is Filebeat (remote) \> logstash (Beats input, grok filter and output file plugin) \> stores the passed data as json in .log file Sample log lines 0.0.111.12 16.0.0.199 58 58 0.0.111.12 HTTP/1.1 - POST …

---

## [The best hardware requirements for a real production environment](https://discuss.elastic.co/t/the-best-hardware-requirements-for-a-real-production-environment/210018)

<div class="topic-metadata">

**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\
**Replies:** 2\
**Last updated:** [November 30, 2019, 3:57pm UTC](https://discuss.elastic.co/t/the-best-hardware-requirements-for-a-real-production-environment/210018 "2019-11-30T15:57:14Z")

</div>

Hello my friends, I want to install ELK in a real environment for collecting data from different sources and I want to know the hardware requirements (CPU, RAM, Storage) i mean the best hardware requirements (not the min…

---

## [How elastic store he indexed data](https://discuss.elastic.co/t/how-elastic-store-he-indexed-data/210030)

<div class="topic-metadata">

**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\
**Replies:** 1\
**Last updated:** [November 30, 2019, 3:37pm UTC](https://discuss.elastic.co/t/how-elastic-store-he-indexed-data/210030 "2019-11-30T15:37:38Z")

</div>

hi dears, i creatd indexed and gotten data using logstash from differents sources but i want to know how the data is actually stored, the directory containing these data, the structure of this data and how to query them …

---

## [Illegal unquoted character ((CTRL-CHAR, code 10)): has to be escaped using backslash to be included in string value\\n at \[Source: org.elasticsearch.transport.netty4.ByteBufStreamInput@6eb3d4e; line: 3, column: 206\]1](https://discuss.elastic.co/t/illegal-unquoted-character-ctrl-char-code-10-has-to-be-escaped-using-backslash-to-be-included-in-string-value-n-at-source-org-elasticsearch-transport-netty4-bytebufstreaminput-6eb3d4e-line-3-column-206-1/209960)

<div class="topic-metadata">

**Author:** [@xyx](https://discuss.elastic.co/u/xyx)\
**Replies:** 1\
**Last updated:** [November 30, 2019, 2:42pm UTC](https://discuss.elastic.co/t/illegal-unquoted-character-ctrl-char-code-10-has-to-be-escaped-using-backslash-to-be-included-in-string-value-n-at-source-org-elasticsearch-transport-netty4-bytebufstreaminput-6eb3d4e-line-3-column-206-1/209960 "2019-11-30T14:42:49Z")

</div>

The analyzer does not work，So who can help me.Thanks!Here is my error and example: (1)error: { "error": { "root\_cause": \[ { "type": "x\_content\_parse\_exception", "reason": "\[3:12\] \[analyze\_request\] failed to parse …

---

## [Kibana-7.4.2 version change a logo](https://discuss.elastic.co/t/kibana-7-4-2-version-change-a-logo/210024)

<div class="topic-metadata">

**Author:** [@Sandeep505](https://discuss.elastic.co/u/Sandeep505)\
**Replies:** 0\
**Last updated:** [November 30, 2019, 9:56am UTC](https://discuss.elastic.co/t/kibana-7-4-2-version-change-a-logo/210024 "2019-11-30T09:56:24Z")

</div>

how to change a kibana logo kibana-7.4.2-linux-x86\_64/src/legacy/ui/public/assets/images/ in code based what is location and what is main file to modify "svg" logo

---

## [Remove duplicates in cross cluster search](https://discuss.elastic.co/t/remove-duplicates-in-cross-cluster-search/210013)

<div class="topic-metadata">

**Author:** [@diyars1](https://discuss.elastic.co/u/diyars1)\
**Replies:** 0\
**Last updated:** [November 30, 2019, 3:30am UTC](https://discuss.elastic.co/t/remove-duplicates-in-cross-cluster-search/210013 "2019-11-30T03:30:45Z")

</div>

Hi, I'm using cross cluster search and searching for a document by \_id that exists in both clusters. ES returns with 2 hits (1 in local index, 1 in remote index). I just want the one in the local index. How can I remov…

---

## [Possible to restart ES service during Remote Reindex?](https://discuss.elastic.co/t/possible-to-restart-es-service-during-remote-reindex/210011)

<div class="topic-metadata">

**Author:** [@myspacebarisbroken](https://discuss.elastic.co/u/myspacebarisbroken)\
**Replies:** 0\
**Last updated:** [November 30, 2019, 12:46am UTC](https://discuss.elastic.co/t/possible-to-restart-es-service-during-remote-reindex/210011 "2019-11-30T00:46:29Z")

</div>

Hello I'm reindexing some from a remote cluster, but i had to whitelist some more ip's for our backends in elasticsearch.yml. However, it appears i cannot start reindex process until we restart ElasticSearch for our cha…

---

## [Slow recovery tasks causing performance issues in ES cluster](https://discuss.elastic.co/t/slow-recovery-tasks-causing-performance-issues-in-es-cluster/210007)

<div class="topic-metadata">

**Author:** [@viniciof](https://discuss.elastic.co/u/viniciof)\
**Replies:** 1\
**Last updated:** [November 29, 2019, 11:59pm UTC](https://discuss.elastic.co/t/slow-recovery-tasks-causing-performance-issues-in-es-cluster/210007 "2019-11-29T23:59:05Z")

</div>

Hi, I noticed recently many recovery threads taking hours to run and the size of the data is quite small to cause this (MBs) what could be causing this ? I also see huge skew gap of shard allocation across my cluster. …

---

## [ElasticSearch Max Bytes Length Exceeded Exception](https://discuss.elastic.co/t/elasticsearch-max-bytes-length-exceeded-exception/210009)

<div class="topic-metadata">

**Author:** [@ricky\_paypal](https://discuss.elastic.co/u/ricky_paypal)\
**Replies:** 0\
**Last updated:** [November 29, 2019, 11:36pm UTC](https://discuss.elastic.co/t/elasticsearch-max-bytes-length-exceeded-exception/210009 "2019-11-29T23:36:20Z")

</div>

Hello, This error does not occur all the time, it is random, like 3 out of 10 depends on the traffic. When users perform a wildcard search, for example: exception 1 of 49 shards failed OS: Red Hat Enterprise Linux Se…

---

## [POST from Elasticsearch: ERR\_UNESCAPED\_CHARACTERS](https://discuss.elastic.co/t/post-from-elasticsearch-err-unescaped-characters/209988)

<div class="topic-metadata">

**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\
**Replies:** 0\
**Last updated:** [November 29, 2019, 4:14pm UTC](https://discuss.elastic.co/t/post-from-elasticsearch-err-unescaped-characters/209988 "2019-11-29T16:14:03Z")

</div>

I'm trying to implement a transport.request SQL query in a manner similar as to what is done in dev tools. Code is shown below: How do i format the request so i don't get these errors? handler: async req =\> { let par…

---

## [Scroll in ElasticSearch Aggregation](https://discuss.elastic.co/t/scroll-in-elasticsearch-aggregation/209885)

<div class="topic-metadata">

**Author:** [@Vinothkumar\_Ganeshan](https://discuss.elastic.co/u/Vinothkumar_Ganeshan)\
**Replies:** 6\
**Last updated:** [November 29, 2019, 3:53pm UTC](https://discuss.elastic.co/t/scroll-in-elasticsearch-aggregation/209885 "2019-11-29T15:53:24Z")

</div>

I have a index with around 50Million data points, where I have a ID for each document. I need unique id and its count , as it would be more than 10000, I used scrolling but unexpecteded, the scrolling gives me the same …

---

## [Is a stopword filter still useful in the newer versions of elasticsearch?](https://discuss.elastic.co/t/is-a-stopword-filter-still-useful-in-the-newer-versions-of-elasticsearch/209984)

<div class="topic-metadata">

**Author:** [@tp-c-c](https://discuss.elastic.co/u/tp-c-c)\
**Replies:** 0\
**Last updated:** [November 29, 2019, 3:34pm UTC](https://discuss.elastic.co/t/is-a-stopword-filter-still-useful-in-the-newer-versions-of-elasticsearch/209984 "2019-11-29T15:34:03Z")

</div>

I recently read this old article about the common term query (https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-common-terms-query.html), which seemed to be an alternative to using a stopword filt…

---

## [Certificates from corporative MS CA](https://discuss.elastic.co/t/certificates-from-corporative-ms-ca/209980)

<div class="topic-metadata">

**Author:** [@v.n](https://discuss.elastic.co/u/v.n)\
**Replies:** 0\
**Last updated:** [November 29, 2019, 3:20pm UTC](https://discuss.elastic.co/t/certificates-from-corporative-ms-ca/209980 "2019-11-29T15:20:22Z")

</div>

Hi! I need to set encryption between nodes. I made CSR but now I need info which template should I use in our CA. I issued self-signed cert to check which OID are inside and there is no OID. And there is no info at hel…

---

## [Confused about \_doc as document type](https://discuss.elastic.co/t/confused-about-doc-as-document-type/209694)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 2\
**Last updated:** [November 29, 2019, 3:06pm UTC](https://discuss.elastic.co/t/confused-about-doc-as-document-type/209694 "2019-11-29T15:06:51Z")

</div>

Elasticsearch 6.8.5. I'm confused about the use of \_doc as a type. It's possible to create an index with one type of \_doc but it also seems like \_doc has special meaning in some contexts, including in templates. Can so…

---

## [How to Run a single YAML IT test?](https://discuss.elastic.co/t/how-to-run-a-single-yaml-it-test/209928)

<div class="topic-metadata">

**Author:** [@Ethan-Zhang](https://discuss.elastic.co/u/Ethan-Zhang)\
**Replies:** 4\
**Last updated:** [November 29, 2019, 12:58pm UTC](https://discuss.elastic.co/t/how-to-run-a-single-yaml-it-test/209928 "2019-11-29T12:58:00Z")

</div>

Hi, Elastic team: I read the doc from TESTING, and If we want to run whole YAML IT, we should do as below: ./gradlew :distribution:archives:integ-test-zip:integTest -Dtests.class="org.elasticsearch.test.rest.\*Yaml\*IT" …

---

## [Broken links in javadocs](https://discuss.elastic.co/t/broken-links-in-javadocs/209822)

<div class="topic-metadata">

**Author:** [@regiskuckaertz](https://discuss.elastic.co/u/regiskuckaertz)\
**Replies:** 4\
**Last updated:** [November 29, 2019, 12:37pm UTC](https://discuss.elastic.co/t/broken-links-in-javadocs/209822 "2019-11-29T12:37:51Z")

</div>

Hi. I'm trying to reach the javadoc for the request data types but am unable to. via the Java REST high level client javadoc: alls links to data types (\*Request) yield 404s via the deprecated Java API client: all links…

---

## [How to increase score for certain products in elasticsearch?](https://discuss.elastic.co/t/how-to-increase-score-for-certain-products-in-elasticsearch/209967)

<div class="topic-metadata">

**Author:** [@111249](https://discuss.elastic.co/u/111249)\
**Replies:** 0\
**Last updated:** [November 29, 2019, 12:17pm UTC](https://discuss.elastic.co/t/how-to-increase-score-for-certain-products-in-elasticsearch/209967 "2019-11-29T12:17:57Z")

</div>

For example, I have several products that have the "tomatoes." When users write it, in the answer all products are sorted by search relevance (keywords) + the number of people who switched to the product. This works well…

---

## [Can't delete data with python script](https://discuss.elastic.co/t/cant-delete-data-with-python-script/209963)

<div class="topic-metadata">

**Author:** [@Ramon\_Mateo](https://discuss.elastic.co/u/Ramon_Mateo)\
**Replies:** 1\
**Last updated:** [November 29, 2019, 12:11pm UTC](https://discuss.elastic.co/t/cant-delete-data-with-python-script/209963 "2019-11-29T12:11:48Z")

</div>

Hi I am trying to make a script that deletes the old elasticsearch data. My problem is that in the read\_only\_allow\_delete In the code attached I try to put a put but it returns error 406. Any ideas or solutions? Than…

---

## [Issue with dynamic\_date\_formats for string with epoch\_millis](https://discuss.elastic.co/t/issue-with-dynamic-date-formats-for-string-with-epoch-millis/209965)

<div class="topic-metadata">

**Author:** [@DK\_3](https://discuss.elastic.co/u/DK_3)\
**Replies:** 0\
**Last updated:** [November 29, 2019, 11:54am UTC](https://discuss.elastic.co/t/issue-with-dynamic-date-formats-for-string-with-epoch-millis/209965 "2019-11-29T11:54:28Z")

</div>

Hi, I'm trying to understand why "dynamic\_date\_formats":"epoch\_millis" doesn't work. The PUT my\_index\_one/\_doc/1 below doesn't return. It seems to hang in Kibana Dev Console. I expect it to return and the foo field to …

---

## [Elasticsearch Server requirements](https://discuss.elastic.co/t/elasticsearch-server-requirements/209871)

<div class="topic-metadata">

**Author:** [@juuuhuuu](https://discuss.elastic.co/u/juuuhuuu)\
**Replies:** 4\
**Last updated:** [November 29, 2019, 11:56am UTC](https://discuss.elastic.co/t/elasticsearch-server-requirements/209871 "2019-11-29T11:56:14Z")

</div>

Hello, I have a lot of "strange"questions about the elasticsearch requirements for server. I want to use Elasticsearch for ELK Stack.The application produces around 4 GB a day. So that is not so many datas. The fir…

---

## [Elasticsearch takes time to update simple index](https://discuss.elastic.co/t/elasticsearch-takes-time-to-update-simple-index/209964)

<div class="topic-metadata">

**Author:** [@katara](https://discuss.elastic.co/u/katara)\
**Replies:** 0\
**Last updated:** [November 29, 2019, 11:39am UTC](https://discuss.elastic.co/t/elasticsearch-takes-time-to-update-simple-index/209964 "2019-11-29T11:39:00Z")

</div>

Hi, I have installed ES and Logstash 7.2.0 in 2 servers and I tried pushing a simple text file from Logstash to ES. The Logstash seems to send the data quickly, however, the ES takes about 5 mins (everytime) to update …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1078)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1080)
