# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1269

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1270

---

## [Allocation awareness - something not right](https://discuss.elastic.co/t/allocation-awareness-something-not-right/184616)

<div class="topic-metadata">

**Author:** [@john275](https://discuss.elastic.co/u/john275)\
**Replies:** 25\
**Last updated:** [June 10, 2019, 10:28am UTC](https://discuss.elastic.co/t/allocation-awareness-something-not-right/184616 "2019-06-10T10:28:47Z")

</div>

I have an 11 node Cluster 3 Master nodes and 8 Data nodes: I have 4 physical machines with 2 Virtual VM's on each, the 2 physical machines are in two different rooms. Data nodes 1,3,5&7 are in room 1 Data nodes 2,4,6&8…

---

## [Index mapping created but data types are still the same](https://discuss.elastic.co/t/index-mapping-created-but-data-types-are-still-the-same/184851)

<div class="topic-metadata">

**Author:** [@Prabhav](https://discuss.elastic.co/u/Prabhav)\
**Replies:** 4\
**Last updated:** [June 10, 2019, 10:07am UTC](https://discuss.elastic.co/t/index-mapping-created-but-data-types-are-still-the-same/184851 "2019-06-10T10:07:51Z")

</div>

I have created a suitable index mapping for the data and their respective data types but when i proceed to check for the mapping of the same index it ends up showing text and keyword. In my opinion i have done everything…

---

## [Mapping conflict 7.1.0](https://discuss.elastic.co/t/mapping-conflict-7-1-0/183260)

<div class="topic-metadata">

**Author:** [@Shankhunt45\_3L\_T3](https://discuss.elastic.co/u/Shankhunt45_3L_T3)\
**Replies:** 2\
**Last updated:** [June 10, 2019, 9:49am UTC](https://discuss.elastic.co/t/mapping-conflict-7-1-0/183260 "2019-06-10T09:49:03Z")

</div>

Hello everyone! Firstly i'd like to thank you all (the community) for your support! You guys helped me solve almost all my problems and I am a little slow! so please bear with me. I use the basic licence of elastic sta…

---

## [Some doubt about ingest-attachment](https://discuss.elastic.co/t/some-doubt-about-ingest-attachment/184957)

<div class="topic-metadata">

**Author:** [@andy\_yan](https://discuss.elastic.co/u/andy_yan)\
**Replies:** 0\
**Last updated:** [June 10, 2019, 9:41am UTC](https://discuss.elastic.co/t/some-doubt-about-ingest-attachment/184957 "2019-06-10T09:41:49Z")

</div>

Hi,team. I am new to ElasticSearch.Now I'm working in a project which provide a jsp to search some documents(docx,pdf and so on) of user uploaded. I'm using ingest-attachment within ElasticSearch7.0.1,shown in the foll…

---

## [Add new fields using ingest pipeline script processor](https://discuss.elastic.co/t/add-new-fields-using-ingest-pipeline-script-processor/184537)

<div class="topic-metadata">

**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\
**Replies:** 4\
**Last updated:** [June 10, 2019, 9:40am UTC](https://discuss.elastic.co/t/add-new-fields-using-ingest-pipeline-script-processor/184537 "2019-06-10T09:40:12Z")

</div>

Hi there! I'd like to add an ingest pipeline to my index in order to add some further info to incoming documents. Let's say these docs have two fields, USERNAME and CITY. I'd like to add also latitude and longitude acc…

---

## [Multiple words search using closed list](https://discuss.elastic.co/t/multiple-words-search-using-closed-list/184956)

<div class="topic-metadata">

**Author:** [@yarivkohn](https://discuss.elastic.co/u/yarivkohn)\
**Replies:** 0\
**Last updated:** [June 10, 2019, 9:22am UTC](https://discuss.elastic.co/t/multiple-words-search-using-closed-list/184956 "2019-06-10T09:22:23Z")

</div>

Hi, We would like to search documents under the following rules: We have a list of words we would like to include in the search Not all the words in the list must be included in the document The document MUST NOT cont…

---

## [NEST Client - BULK Method - Insert or update or delete](https://discuss.elastic.co/t/nest-client-bulk-method-insert-or-update-or-delete/184890)

<div class="topic-metadata">

**Author:** [@krishnapss](https://discuss.elastic.co/u/krishnapss)\
**Replies:** 4\
**Last updated:** [June 10, 2019, 8:49am UTC](https://discuss.elastic.co/t/nest-client-bulk-method-insert-or-update-or-delete/184890 "2019-06-10T08:49:13Z")

</div>

Hi, I am trying to use Bulk method using c# NEST client. Example Lets say I have indexed 1000 documents first time. Second time I have 800 documents. But I don't know whether these are new or old. I have to replace e…

---

## [Rollup index date\_histogram issue](https://discuss.elastic.co/t/rollup-index-date-histogram-issue/181766)

<div class="topic-metadata">

**Author:** [@DustyMeg](https://discuss.elastic.co/u/DustyMeg)\
**Replies:** 6\
**Last updated:** [June 10, 2019, 8:43am UTC](https://discuss.elastic.co/t/rollup-index-date-histogram-issue/181766 "2019-06-10T08:43:43Z")

</div>

Hi, Getting the following error when trying to Visualize a count on the Y Axis and Date Histogram of type field @timestamp with an interval of 60m on the X AxIs over Today. Rollup search error: \[illegal\_argument\_except…

---

## [Adjust\_pure\_negative](https://discuss.elastic.co/t/adjust-pure-negative/184945)

<div class="topic-metadata">

**Author:** [@pangying](https://discuss.elastic.co/u/pangying)\
**Replies:** 0\
**Last updated:** [June 10, 2019, 8:34am UTC](https://discuss.elastic.co/t/adjust-pure-negative/184945 "2019-06-10T08:34:17Z")

</div>

请问有人知道下面这段是什么意思吗 "bool": { "adjust\_pure\_negative": true, "boost": 1 }

---

## [Failed to Build a Cluser](https://discuss.elastic.co/t/failed-to-build-a-cluser/184905)

<div class="topic-metadata">

**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\
**Replies:** 5\
**Last updated:** [June 10, 2019, 8:30am UTC](https://discuss.elastic.co/t/failed-to-build-a-cluser/184905 "2019-06-10T08:30:42Z")

</div>

I want to build a cluster with 4 nodes. Unfortunately it can only detect 3 nodes.

---

## [Could not able to access ELK 6.8.0 on Browser](https://discuss.elastic.co/t/could-not-able-to-access-elk-6-8-0-on-browser/184525)

<div class="topic-metadata">

**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\
**Replies:** 6\
**Last updated:** [June 10, 2019, 7:49am UTC](https://discuss.elastic.co/t/could-not-able-to-access-elk-6-8-0-on-browser/184525 "2019-06-10T07:49:16Z")

</div>

Hi, We have installed ELK 6.8.0 using debian and not enabled security.But we could not able to access cluster using web browser and observed by default .security index.Even the elasticsearch services running and curl co…

---

## [Elasticsearch Windows Security](https://discuss.elastic.co/t/elasticsearch-windows-security/184865)

<div class="topic-metadata">

**Author:** [@Richard\_Phillips\_Roy](https://discuss.elastic.co/u/Richard_Phillips_Roy)\
**Replies:** 1\
**Last updated:** [June 10, 2019, 7:48am UTC](https://discuss.elastic.co/t/elasticsearch-windows-security/184865 "2019-06-10T07:48:11Z")

</div>

How do I enable elasticsearch security features in windows i'm using elasticsearch-7.1.1.msi package ?

---

## [Queue with elasticsearch](https://discuss.elastic.co/t/queue-with-elasticsearch/184770)

<div class="topic-metadata">

**Author:** [@Ahmed\_Benneji1](https://discuss.elastic.co/u/Ahmed_Benneji1)\
**Replies:** 3\
**Last updated:** [June 10, 2019, 7:43am UTC](https://discuss.elastic.co/t/queue-with-elasticsearch/184770 "2019-06-10T07:43:20Z")

</div>

I want to implement sort of a queue with the data on elasticsearch, to put you on perspective, the user will launch a query to elastic, and then retrieve, let's say top X results, once those are retrieved, the next user,…

---

## [Ilm policy on system index](https://discuss.elastic.co/t/ilm-policy-on-system-index/183657)

<div class="topic-metadata">

**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\
**Replies:** 2\
**Last updated:** [June 10, 2019, 5:02am UTC](https://discuss.elastic.co/t/ilm-policy-on-system-index/183657 "2019-06-10T05:02:02Z")

</div>

I am trying to put a policy on the system generated indices specifically to ".monitoring-es-...." & ".monitoring-kibana-...." i have created a policy which is simply deleting these indices which are having age as 1 d…

---

## [Second level terms aggregation "ConsumerType" returns 0 matches. But I could get the results in Kibana. Please advise what i'm missing here](https://discuss.elastic.co/t/second-level-terms-aggregation-consumertype-returns-0-matches-but-i-could-get-the-results-in-kibana-please-advise-what-im-missing-here/184684)

<div class="topic-metadata">

**Author:** [@rajarajan1985](https://discuss.elastic.co/u/rajarajan1985)\
**Replies:** 1\
**Last updated:** [June 10, 2019, 12:07am UTC](https://discuss.elastic.co/t/second-level-terms-aggregation-consumertype-returns-0-matches-but-i-could-get-the-results-in-kibana-please-advise-what-im-missing-here/184684 "2019-06-10T00:07:23Z")

</div>

My Code: \[ElasticsearchType(Name="abc-orders")\] public class ebizOrders { public string buyflowsessionid { get; set; } public string buyfloworderid { get; set; } public string ordersubmissiontype { get; set; } public str…

---

## [Adding Step To ILM Policy Doesn't Apply To Index In Completed Phase](https://discuss.elastic.co/t/adding-step-to-ilm-policy-doesnt-apply-to-index-in-completed-phase/184809)

<div class="topic-metadata">

**Author:** [@Alsheh](https://discuss.elastic.co/u/Alsheh)\
**Replies:** 1\
**Last updated:** [June 9, 2019, 11:56pm UTC](https://discuss.elastic.co/t/adding-step-to-ilm-policy-doesnt-apply-to-index-in-completed-phase/184809 "2019-06-09T23:56:11Z")

</div>

Suppose an index is using an ILM policy that has Hot and Warm phases. The index has finished executed the Hot and Warm phases and now is in the Completed phase. The ILM policy that the index uses is now extended by addin…

---

## [Push common search results down ('common' being subjective)](https://discuss.elastic.co/t/push-common-search-results-down-common-being-subjective/184884)

<div class="topic-metadata">

**Author:** [@abcarroll](https://discuss.elastic.co/u/abcarroll)\
**Replies:** 0\
**Last updated:** [June 9, 2019, 5:51pm UTC](https://discuss.elastic.co/t/push-common-search-results-down-common-being-subjective/184884 "2019-06-09T17:51:00Z")

</div>

We've been trying to improve our search results, which initially started as a simple match\_all, + optional term matches depending on user action, and a sort by geo. I've switched it to use scoring instead, and use a scr…

---

## [Date Mapping Parse Failure after upgrade to 7.1.1](https://discuss.elastic.co/t/date-mapping-parse-failure-after-upgrade-to-7-1-1/184704)

<div class="topic-metadata">

**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\
**Replies:** 3\
**Last updated:** [June 9, 2019, 10:05am UTC](https://discuss.elastic.co/t/date-mapping-parse-failure-after-upgrade-to-7-1-1/184704 "2019-06-09T10:05:31Z")

</div>

We have just upgraded to 7.1.1 (from 6.7) on the Elastic Cloud service. Our previously happy logstash is now erroring out with a date related parsing issue when trying to put a date field into ES. The error we get is: …

---

## [How can I connect Splunk to Elasticsearch without having to write scripts or re-index?](https://discuss.elastic.co/t/how-can-i-connect-splunk-to-elasticsearch-without-having-to-write-scripts-or-re-index/184840)

<div class="topic-metadata">

**Author:** [@tabkha](https://discuss.elastic.co/u/tabkha)\
**Replies:** 3\
**Last updated:** [June 9, 2019, 6:41am UTC](https://discuss.elastic.co/t/how-can-i-connect-splunk-to-elasticsearch-without-having-to-write-scripts-or-re-index/184840 "2019-06-09T06:41:39Z")

</div>

I'm moving from Splunk to Elastic but don't want to get rid of all the Splunk data at once, Im in a phase where I need Splunk and Elastic to talk to each others...Is that possible ? Are there any elastic connectors for S…

---

## [What are your thoughts on data virtualization and how does it apply to elastic search?](https://discuss.elastic.co/t/what-are-your-thoughts-on-data-virtualization-and-how-does-it-apply-to-elastic-search/184831)

<div class="topic-metadata">

**Author:** [@barriersbill](https://discuss.elastic.co/u/barriersbill)\
**Replies:** 5\
**Last updated:** [June 9, 2019, 6:37am UTC](https://discuss.elastic.co/t/what-are-your-thoughts-on-data-virtualization-and-how-does-it-apply-to-elastic-search/184831 "2019-06-09T06:37:18Z")

</div>

Ive been looking at data virtualization technologies, is it really possible to use such type of solutions to connect to Elastic using SQL or even to join Elastic data with Splunk, RDBMS and other data solutions without e…

---

## [Data virtualization and Elastic](https://discuss.elastic.co/t/data-virtualization-and-elastic/183211)

<div class="topic-metadata">

**Author:** [@davelo](https://discuss.elastic.co/u/davelo)\
**Replies:** 2\
**Last updated:** [June 9, 2019, 5:17am UTC](https://discuss.elastic.co/t/data-virtualization-and-elastic/183211 "2019-06-09T05:17:36Z")

</div>

Does anyone have any thoughts on data virtualization and how it applies to Elastic?

---

## [Speed and size difference with "mult-fields, multi-analyzers" Indexing](https://discuss.elastic.co/t/speed-and-size-difference-with-mult-fields-multi-analyzers-indexing/184453)

<div class="topic-metadata">

**Author:** [@hacker\_21](https://discuss.elastic.co/u/hacker_21)\
**Replies:** 5\
**Last updated:** [June 9, 2019, 4:28am UTC](https://discuss.elastic.co/t/speed-and-size-difference-with-mult-fields-multi-analyzers-indexing/184453 "2019-06-09T04:28:50Z")

</div>

Hi, I just reviewed the documentation for the fields option: https://www.elastic.co/guide/en/elasticsearch/reference/current/multi-fields.html I plan on indexing my data with a snowball analyzer and also retaining the…

---

## [Disable mapping for all fields except one index field](https://discuss.elastic.co/t/disable-mapping-for-all-fields-except-one-index-field/184855)

<div class="topic-metadata">

**Author:** [@episodeyang](https://discuss.elastic.co/u/episodeyang)\
**Replies:** 1\
**Last updated:** [June 9, 2019, 3:19am UTC](https://discuss.elastic.co/t/disable-mapping-for-all-fields-except-one-index-field/184855 "2019-06-09T03:19:30Z")

</div>

I want to index documents where same field can have different date types (current model is disappointingly low level...) To this end, I want to add an index field to my document, and disable mapping for every other fiel…

---

## [Relaxed phrase Search](https://discuss.elastic.co/t/relaxed-phrase-search/184817)

<div class="topic-metadata">

**Author:** [@mosiddi](https://discuss.elastic.co/u/mosiddi)\
**Replies:** 2\
**Last updated:** [June 8, 2019, 9:00pm UTC](https://discuss.elastic.co/t/relaxed-phrase-search/184817 "2019-06-08T21:00:57Z")

</div>

Anyone in this community tried implementing relaxed phrase search as explained in below example - d1- "Hi, this is Imran from Microsoft" d2 - "Microsoft is where the employee named Imran works" Say in above texts I …

---

## [How Elasticsearch implements Fuzzyness in Completion Suggester?](https://discuss.elastic.co/t/how-elasticsearch-implements-fuzzyness-in-completion-suggester/184833)

<div class="topic-metadata">

**Author:** [@rogito\_manda](https://discuss.elastic.co/u/rogito_manda)\
**Replies:** 0\
**Last updated:** [June 8, 2019, 9:44am UTC](https://discuss.elastic.co/t/how-elasticsearch-implements-fuzzyness-in-completion-suggester/184833 "2019-06-08T09:44:41Z")

</div>

How Elasticsearch implements Fuzzyness in Finite State Transducer for the Completion Suggester?

---

## [Create index mapping for dataset with large features](https://discuss.elastic.co/t/create-index-mapping-for-dataset-with-large-features/184830)

<div class="topic-metadata">

**Author:** [@Prabhav](https://discuss.elastic.co/u/Prabhav)\
**Replies:** 12\
**Last updated:** [June 8, 2019, 12:34pm UTC](https://discuss.elastic.co/t/create-index-mapping-for-dataset-with-large-features/184830 "2019-06-08T12:34:50Z")

</div>

I am trying to bulk upload my data to ES but it ends up showing parsing exception. I want to create mapping for my index but the main problem is i have more than 70 columns in my dataset, for which specifying data type i…

---

## [Search query with keywords who use AND, OR and quotes](https://discuss.elastic.co/t/search-query-with-keywords-who-use-and-or-and-quotes/184367)

<div class="topic-metadata">

**Author:** [@yan014](https://discuss.elastic.co/u/yan014)\
**Replies:** 1\
**Last updated:** [June 8, 2019, 11:05am UTC](https://discuss.elastic.co/t/search-query-with-keywords-who-use-and-or-and-quotes/184367 "2019-06-08T11:05:02Z")

</div>

Hello, I'm working on a search engine with Elasticsearch, I have keywords and excluded keywords. I would like to use quotes, AND and OR in my two inputs for advanced search. Here's what I'm trying: Keywords: "foo ba…

---

## [How the Completion Suggester- FST in Elasticsearch is scaled?](https://discuss.elastic.co/t/how-the-completion-suggester-fst-in-elasticsearch-is-scaled/184825)

<div class="topic-metadata">

**Author:** [@rogito\_manda](https://discuss.elastic.co/u/rogito_manda)\
**Replies:** 1\
**Last updated:** [June 8, 2019, 10:47am UTC](https://discuss.elastic.co/t/how-the-completion-suggester-fst-in-elasticsearch-is-scaled/184825 "2019-06-08T10:47:53Z")

</div>

how is scaled the Finite State Transducer for the completion suggester in Elasticsearch?

---

## [Phrase suggester not capable of removing whitespace ("marktp latz" =\> "marktplatz")](https://discuss.elastic.co/t/phrase-suggester-not-capable-of-removing-whitespace-marktp-latz-marktplatz/184823)

<div class="topic-metadata">

**Author:** [@mrkamel](https://discuss.elastic.co/u/mrkamel)\
**Replies:** 0\
**Last updated:** [June 8, 2019, 5:15am UTC](https://discuss.elastic.co/t/phrase-suggester-not-capable-of-removing-whitespace-marktp-latz-marktplatz/184823 "2019-06-08T05:15:28Z")

</div>

Hi, the phrase suggester does not seem to be capable of removing erroneously introduced whitespace. E.g. marktp latz =\> gives no suggestions, while for marktp\_latz =\> marktplatz actually is suggested. The same for all…

---

## [Migrate data from snowflake to elasticsearch](https://discuss.elastic.co/t/migrate-data-from-snowflake-to-elasticsearch/184822)

<div class="topic-metadata">

**Author:** [@kishore419](https://discuss.elastic.co/u/kishore419)\
**Replies:** 0\
**Last updated:** [June 8, 2019, 4:56am UTC](https://discuss.elastic.co/t/migrate-data-from-snowflake-to-elasticsearch/184822 "2019-06-08T04:56:40Z")

</div>

Hello Techies, we are using snowflake data warehouse in my project, we would like to replace snowflake with Elasticsearch as part of project enhancement POC, i don't found any solutions for moving data from snowflake t…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1268)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1270)
