# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1193

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1194

---

## [Geo search returns no results in es6.7](https://discuss.elastic.co/t/geo-search-returns-no-results-in-es6-7/194769)

<div class="topic-metadata">

**Author:** [@nickoneill](https://discuss.elastic.co/u/nickoneill)\
**Replies:** 4\
**Last updated:** [August 12, 2019, 10:00pm UTC](https://discuss.elastic.co/t/geo-search-returns-no-results-in-es6-7/194769 "2019-08-12T22:00:05Z")

</div>

I'm mapping congressional districts in elasticsearch but my efforts are returning no results when trying to query by geo shape. Here's some relevant data: The mapping: "mappings":{ "house":{ "properties":{ "stat…

---

## [What other ML techniques can be done in Elastic X-Pack?](https://discuss.elastic.co/t/what-other-ml-techniques-can-be-done-in-elastic-x-pack/194915)

<div class="topic-metadata">

**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\
**Replies:** 1\
**Last updated:** [August 12, 2019, 8:34pm UTC](https://discuss.elastic.co/t/what-other-ml-techniques-can-be-done-in-elastic-x-pack/194915 "2019-08-12T20:34:46Z")

</div>

Hi I am testing the X-Pack tool. So far I have done: Anomaly detection Forecasting I was wondering if it is possible to do: Clustering Classification Regression etc Thank you

---

## [Performance issues with search](https://discuss.elastic.co/t/performance-issues-with-search/194919)

<div class="topic-metadata">

**Author:** [@B\_K](https://discuss.elastic.co/u/B_K)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 8:26pm UTC](https://discuss.elastic.co/t/performance-issues-with-search/194919 "2019-08-12T20:26:18Z")

</div>

I have a 2.4 ES cluster. Short story is that it's been humming along fine but lately I have an issue. 500 Nodes 100 Shards with 1 replica. Sometimes the query time goes up to 250ms - it's usually around 15ms. Proc…

---

## [Setting timezone on date\_histogram slow down the query](https://discuss.elastic.co/t/setting-timezone-on-date-histogram-slow-down-the-query/194918)

<div class="topic-metadata">

**Author:** [@Bertrand](https://discuss.elastic.co/u/Bertrand)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 8:26pm UTC](https://discuss.elastic.co/t/setting-timezone-on-date-histogram-slow-down-the-query/194918 "2019-08-12T20:26:00Z")

</div>

Hi there, It seems that setting the timezone option to a date\_histogram has a negative effect on the query performance. Suppose the following query: { "size": 0, "aggs": { "2": { "date\_histogram": { …

---

## [ElasticDiagnostic tool issue when running](https://discuss.elastic.co/t/elasticdiagnostic-tool-issue-when-running/194860)

<div class="topic-metadata">

**Author:** [@sridharreddy1994](https://discuss.elastic.co/u/sridharreddy1994)\
**Replies:** 4\
**Last updated:** [August 12, 2019, 7:17pm UTC](https://discuss.elastic.co/t/elasticdiagnostic-tool-issue-when-running/194860 "2019-08-12T19:17:05Z")

</div>

Hi , I am running elasticdiagnostic tool and facing this issue ,Can someone help? support-diagnostics-7.0.8\]$ ./diagnostics.sh --host \*\*\*\*\* --port 9200 -u elastic -p --ssl --noVerify Using /usr/bin/java as Java Runtim…

---

## [What type of "technique" is it used to detetc anomalies?](https://discuss.elastic.co/t/what-type-of-technique-is-it-used-to-detetc-anomalies/194903)

<div class="topic-metadata">

**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\
**Replies:** 1\
**Last updated:** [August 12, 2019, 7:06pm UTC](https://discuss.elastic.co/t/what-type-of-technique-is-it-used-to-detetc-anomalies/194903 "2019-08-12T19:06:29Z")

</div>

Hi I have just started using the X-pack. I testing the "anomaly detection" tool. I would like to know what algorithm has been used to detect anomalies. For example, If it is unsupervised; is it k-means, DBSCAN, etc ? …

---

## [Boost relevance by numeric field (the greater the value, more relevant it is)](https://discuss.elastic.co/t/boost-relevance-by-numeric-field-the-greater-the-value-more-relevant-it-is/194896)

<div class="topic-metadata">

**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 5:42pm UTC](https://discuss.elastic.co/t/boost-relevance-by-numeric-field-the-greater-the-value-more-relevant-it-is/194896 "2019-08-12T17:42:55Z")

</div>

Hello I need to include a "should" clause to try to boost the relevance of a query by a numeric field. The greater the field value is, more relevant the document should be. I'm not sure how to approach this. At first I…

---

## [Return only 1 result for each term queried](https://discuss.elastic.co/t/return-only-1-result-for-each-term-queried/194851)

<div class="topic-metadata">

**Author:** [@mrncgirc](https://discuss.elastic.co/u/mrncgirc)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 5:42pm UTC](https://discuss.elastic.co/t/return-only-1-result-for-each-term-queried/194851 "2019-08-12T17:42:42Z")

</div>

Hi, I am having an es database of products (tires and rims) in my ecommerce solution. All my tires are marked with a quality such as good, great, best. The reason why tires are marked with this term is to bundle rims wi…

---

## [Could not send logs to a UDP server (AccessControlException)](https://discuss.elastic.co/t/could-not-send-logs-to-a-udp-server-accesscontrolexception/194881)

<div class="topic-metadata">

**Author:** [@jazz](https://discuss.elastic.co/u/jazz)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 5:25pm UTC](https://discuss.elastic.co/t/could-not-send-logs-to-a-udp-server-accesscontrolexception/194881 "2019-08-12T17:25:18Z")

</div>

I'm trying to configure Elasticsearch to output logs to an UDP server, but it fails with the AccessControlException. Here is the log: main ERROR An exception occurred processing Appender logstash java.security.AccessCon…

---

## [\[6.8.2\] Unusual Server Load](https://discuss.elastic.co/t/6-8-2-unusual-server-load/194153)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 6\
**Last updated:** [August 12, 2019, 4:14pm UTC](https://discuss.elastic.co/t/6-8-2-unusual-server-load/194153 "2019-08-12T16:14:56Z")

</div>

Hi, I'm having trouble with dealing an odd pattern of load distribution on one of our clusters. I inadvertently posted in the wrong forum. Link is here: FYI we have 18 data nodes, 1250 shards and a limit of 3 index s…

---

## [FScrawler - Duplicate Files](https://discuss.elastic.co/t/fscrawler-duplicate-files/194322)

<div class="topic-metadata">

**Author:** [@Bowriverstudio](https://discuss.elastic.co/u/Bowriverstudio)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 4:03pm UTC](https://discuss.elastic.co/t/fscrawler-duplicate-files/194322 "2019-08-12T16:03:14Z")

</div>

Hello All, I am a newbie to elastic search. I am interested in using FScrawler to index all my files, then Elasticsearch find duplicates. I'm thinking of using the md5 function to hash all the files: https://fscrawler…

---

## [Synonym analyzer issue in elastic search](https://discuss.elastic.co/t/synonym-analyzer-issue-in-elastic-search/194880)

<div class="topic-metadata">

**Author:** [@Harry\_US11](https://discuss.elastic.co/u/Harry_US11)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 3:52pm UTC](https://discuss.elastic.co/t/synonym-analyzer-issue-in-elastic-search/194880 "2019-08-12T15:52:28Z")

</div>

I have multiple products in elastic index with width as like 10", 10 inch, 10 inches. While searching for 10" laptop, search query was providing me all results with 10" but including 10 as well (as i am using tokenizer a…

---

## [Why Elasticsearch still complains about bootstrap checks failed](https://discuss.elastic.co/t/why-elasticsearch-still-complains-about-bootstrap-checks-failed/194690)

<div class="topic-metadata">

**Author:** [@hobby](https://discuss.elastic.co/u/hobby)\
**Replies:** 1\
**Last updated:** [August 12, 2019, 3:39pm UTC](https://discuss.elastic.co/t/why-elasticsearch-still-complains-about-bootstrap-checks-failed/194690 "2019-08-12T15:39:11Z")

</div>

Installed ES 7.3.0 on Ubuntu 18.04. Was able to start it in development mode. Now I want to connect to ES remotely from another machine, so I changed the configuration in elasticsearch.yml and tried to start it in produc…

---

## [Terms Aggregation excluding last vowels using Spanish analyze - Elasticsearch 6.4](https://discuss.elastic.co/t/terms-aggregation-excluding-last-vowels-using-spanish-analyze-elasticsearch-6-4/194136)

<div class="topic-metadata">

**Author:** [@hcanales](https://discuss.elastic.co/u/hcanales)\
**Replies:** 4\
**Last updated:** [August 12, 2019, 3:31pm UTC](https://discuss.elastic.co/t/terms-aggregation-excluding-last-vowels-using-spanish-analyze-elasticsearch-6-4/194136 "2019-08-12T15:31:20Z")

</div>

I am trying to get keywords from a bunch of tweets in Spanish language. The thing is that when I get the results the last vowel in most words in the response is removed. Any idea of why is this happening? Here is the qu…

---

## [The CPU is not scaling with high search load in Elasticsearch7.3.0](https://discuss.elastic.co/t/the-cpu-is-not-scaling-with-high-search-load-in-elasticsearch7-3-0/194873)

<div class="topic-metadata">

**Author:** [@suvarna](https://discuss.elastic.co/u/suvarna)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 3:27pm UTC](https://discuss.elastic.co/t/the-cpu-is-not-scaling-with-high-search-load-in-elasticsearch7-3-0/194873 "2019-08-12T15:27:22Z")

</div>

Hi We have numa enabled server with 2 sockets, each socket with 28 cores and its one node cluster with 10 indies , 5 shards each. Under the same workload(with high search operation load): Scenario 1 when we run ES7.3…

---

## [Elastic Search: Machine learning based on the search results data](https://discuss.elastic.co/t/elastic-search-machine-learning-based-on-the-search-results-data/194868)

<div class="topic-metadata">

**Author:** [@parthiban\_Manickam](https://discuss.elastic.co/u/parthiban_Manickam)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 2:56pm UTC](https://discuss.elastic.co/t/elastic-search-machine-learning-based-on-the-search-results-data/194868 "2019-08-12T14:56:50Z")

</div>

I have a usecase of city Locations data, where a user searches for Lon, Many results would turn up for example,. London Ontorio, London Greater London, London Ohio, Londres, but based the search result chosen frequency L…

---

## [How to configure ldap on elasticsearch](https://discuss.elastic.co/t/how-to-configure-ldap-on-elasticsearch/194530)

<div class="topic-metadata">

**Author:** [@madhukarneelaiahgari](https://discuss.elastic.co/u/madhukarneelaiahgari)\
**Replies:** 8\
**Last updated:** [August 12, 2019, 2:55pm UTC](https://discuss.elastic.co/t/how-to-configure-ldap-on-elasticsearch/194530 "2019-08-12T14:55:49Z")

</div>

Hello Team, I'm trying to configure ldap on xpack enabled elasticsearch cluster. Below is my docker compose file to deploy the stack . I couldn't find any documents how to do this. Also is there a way that i can pass al…

---

## [Elasticsearch indexes](https://discuss.elastic.co/t/elasticsearch-indexes/194856)

<div class="topic-metadata">

**Author:** [@sirichandana](https://discuss.elastic.co/u/sirichandana)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 2:44pm UTC](https://discuss.elastic.co/t/elasticsearch-indexes/194856 "2019-08-12T14:44:26Z")

</div>

Hi, how can we combine two indexes under same elastic search cluster?

---

## [How to create a dynamic property such that we can change the value of the property without starting the server](https://discuss.elastic.co/t/how-to-create-a-dynamic-property-such-that-we-can-change-the-value-of-the-property-without-starting-the-server/194831)

<div class="topic-metadata">

**Author:** [@Arun1709](https://discuss.elastic.co/u/Arun1709)\
**Replies:** 4\
**Last updated:** [August 12, 2019, 2:09pm UTC](https://discuss.elastic.co/t/how-to-create-a-dynamic-property-such-that-we-can-change-the-value-of-the-property-without-starting-the-server/194831 "2019-08-12T14:09:45Z")

</div>

Can any one help me in marking a property as a dynamic so that we can change the value without re starting the server . I have heard about the transient block. But how do I get my applications property under the transien…

---

## [Best way to store multi value to specific field](https://discuss.elastic.co/t/best-way-to-store-multi-value-to-specific-field/194692)

<div class="topic-metadata">

**Author:** [@elasticpatrick](https://discuss.elastic.co/u/elasticpatrick)\
**Replies:** 5\
**Last updated:** [August 12, 2019, 1:15pm UTC](https://discuss.elastic.co/t/best-way-to-store-multi-value-to-specific-field/194692 "2019-08-12T13:15:37Z")

</div>

Hello, I have e-commerce store where I have generated automated tags for the my products. Each product can have approximately 100-120 tags on it. Now I would like to do match query and retrieve only specific tags from th…

---

## [Elasticsearch service over HTTPS channel](https://discuss.elastic.co/t/elasticsearch-service-over-https-channel/194837)

<div class="topic-metadata">

**Author:** [@gagan\_sahib](https://discuss.elastic.co/u/gagan_sahib)\
**Replies:** 3\
**Last updated:** [August 12, 2019, 12:53pm UTC](https://discuss.elastic.co/t/elasticsearch-service-over-https-channel/194837 "2019-08-12T12:53:23Z")

</div>

Hello, I am able to get elasticsearch service over HTTPS channel, but in windows operating system by following the tutorial given over elasticsearch home site. Now I want to implement the same in Ubuntu. Kindly, someone…

---

## [Percolate performance improvements?](https://discuss.elastic.co/t/percolate-performance-improvements/194717)

<div class="topic-metadata">

**Author:** [@Jeff\_Bolle](https://discuss.elastic.co/u/Jeff_Bolle)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 12:19pm UTC](https://discuss.elastic.co/t/percolate-performance-improvements/194717 "2019-08-12T12:19:58Z")

</div>

We have been experiencing what feels like rather poor performance for our percolate queries. We have 4 indexes with percolate queries, each with a few hundred saved queries. These indexes have a single shard and many rep…

---

## [Best practice to create index with common and specific sets of properties per document](https://discuss.elastic.co/t/best-practice-to-create-index-with-common-and-specific-sets-of-properties-per-document/194836)

<div class="topic-metadata">

**Author:** [@ashvydkyi](https://discuss.elastic.co/u/ashvydkyi)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 12:01pm UTC](https://discuss.elastic.co/t/best-practice-to-create-index-with-common-and-specific-sets-of-properties-per-document/194836 "2019-08-12T12:01:44Z")

</div>

Hey guys, can you share the best practices how to create an index to achieve the following structure: each document has a common set of properties (type, priority, status) each document has a specific set of properties…

---

## [How to achieve data Encryption in elasticsearch](https://discuss.elastic.co/t/how-to-achieve-data-encryption-in-elasticsearch/194793)

<div class="topic-metadata">

**Author:** [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\
**Replies:** 10\
**Last updated:** [August 12, 2019, 10:08am UTC](https://discuss.elastic.co/t/how-to-achieve-data-encryption-in-elasticsearch/194793 "2019-08-12T10:08:01Z")

</div>

Hi, I need to encrypt the data before indexing into elastic search so that actual data is protected and while searching it should produce the proper results. Please let me know how this can be achieved in elasticsearch. …

---

## [How To delete snapshots older than 20 days](https://discuss.elastic.co/t/how-to-delete-snapshots-older-than-20-days/194801)

<div class="topic-metadata">

**Author:** [@Pottendla\_Nagma](https://discuss.elastic.co/u/Pottendla_Nagma)\
**Replies:** 5\
**Last updated:** [August 12, 2019, 9:40am UTC](https://discuss.elastic.co/t/how-to-delete-snapshots-older-than-20-days/194801 "2019-08-12T09:40:46Z")

</div>

Hi, I am looking for any API for deleting the snapshots older than 20 days. Right now DELETE api doing deletion only for particular snapshot given with the name. Please help me. Thank you. Regards, Nagma P.

---

## [Query based on array items satisfiying certain criteria](https://discuss.elastic.co/t/query-based-on-array-items-satisfiying-certain-criteria/194599)

<div class="topic-metadata">

**Author:** [@sai.khaled](https://discuss.elastic.co/u/sai.khaled)\
**Replies:** 1\
**Last updated:** [August 12, 2019, 9:34am UTC](https://discuss.elastic.co/t/query-based-on-array-items-satisfiying-certain-criteria/194599 "2019-08-12T09:34:26Z")

</div>

i have the following mapping "mappings": { "contact": { "dynamic": "false", "\_all": { "enabled": false }, "properties": { "civility": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore\_abo…

---

## [Is there a way to escape hyphen (-) in painless](https://discuss.elastic.co/t/is-there-a-way-to-escape-hyphen-in-painless/194603)

<div class="topic-metadata">

**Author:** [@liju87](https://discuss.elastic.co/u/liju87)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 9:12am UTC](https://discuss.elastic.co/t/is-there-a-way-to-escape-hyphen-in-painless/194603 "2019-08-12T09:12:09Z")

</div>

I'm trying to create a watcher to fetch the stats data for an index and writing it back to a new index I have noticed when I'm using an index with name pcm the transform works but when I'm using a Index with name for ex…

---

## [Elasticsearch 7.2.0. homebrew install on mac java error on startup fail](https://discuss.elastic.co/t/elasticsearch-7-2-0-homebrew-install-on-mac-java-error-on-startup-fail/192760)

<div class="topic-metadata">

**Author:** [@ferenc0521](https://discuss.elastic.co/u/ferenc0521)\
**Replies:** 4\
**Last updated:** [August 12, 2019, 8:59am UTC](https://discuss.elastic.co/t/elasticsearch-7-2-0-homebrew-install-on-mac-java-error-on-startup-fail/192760 "2019-08-12T08:59:41Z")

</div>

$ elasticsearch Exception in thread "main" java.lang.RuntimeException: starting java failed with \[1\] output: \[0.002s\]\[error\]\[logging\] Error opening log file 'logs/gc.log': No such file or directory \[0.002s\]\[error\]\[…

---

## [Entity centric indexing](https://discuss.elastic.co/t/entity-centric-indexing/194814)

<div class="topic-metadata">

**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\
**Replies:** 0\
**Last updated:** [August 12, 2019, 8:44am UTC](https://discuss.elastic.co/t/entity-centric-indexing/194814 "2019-08-12T08:44:27Z")

</div>

Hello, I'm looking for any further information about entity centric indexing approach. I read some topics here on forum and watched a video from talk with Mark Harwood but still have many questions and don't exactly kno…

---

## [Using search\_after for pagination where you sort by score](https://discuss.elastic.co/t/using-search-after-for-pagination-where-you-sort-by-score/146233)

<div class="topic-metadata">

**Author:** [@i333](https://discuss.elastic.co/u/i333)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 8:28am UTC](https://discuss.elastic.co/t/using-search-after-for-pagination-where-you-sort-by-score/146233 "2019-08-12T08:28:17Z")

</div>

In my query I sort by score, so the most relevant results are first. I'd like to be able to paginate this, and search\_after is apparently the best way for my use case. But search\_after doesn't seem to let you use \_score …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1192)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1194)
