# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1271

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1272

---

## [ElasticSearch how best to prioritise results based on integer / keyword](https://discuss.elastic.co/t/elasticsearch-how-best-to-prioritise-results-based-on-integer-keyword/184594)

<div class="topic-metadata">

**Author:** [@adamtoms](https://discuss.elastic.co/u/adamtoms)\
**Replies:** 1\
**Last updated:** [June 7, 2019, 7:27am UTC](https://discuss.elastic.co/t/elasticsearch-how-best-to-prioritise-results-based-on-integer-keyword/184594 "2019-06-07T07:27:56Z")

</div>

I have a catalog of neoprene products that I would like to search. I'm interesting in how to achieve a search by thickness. Product names will contain the thickness along with a thickness field that contains the upper va…

---

## [Does Elastic search can find word , number or special characters in a pdf?](https://discuss.elastic.co/t/does-elastic-search-can-find-word-number-or-special-characters-in-a-pdf/184164)

<div class="topic-metadata">

**Author:** [@Jaswanth\_Chelikani](https://discuss.elastic.co/u/Jaswanth_Chelikani)\
**Replies:** 0\
**Last updated:** [June 4, 2019, 11:36am UTC](https://discuss.elastic.co/t/does-elastic-search-can-find-word-number-or-special-characters-in-a-pdf/184164 "2019-06-04T11:36:58Z")

</div>

in my site i have elastics search and i have 1000 documents and all are in PDF format and i am converting to html format is there any chances that elastic search can find word , number or special character in pdf

---

## [\[Solved\] How can i do a manual rollover for all indices to the newest index policy?](https://discuss.elastic.co/t/solved-how-can-i-do-a-manual-rollover-for-all-indices-to-the-newest-index-policy/184694)

<div class="topic-metadata">

**Author:** [@TsuWeiQuan](https://discuss.elastic.co/u/TsuWeiQuan)\
**Replies:** 1\
**Last updated:** [June 7, 2019, 6:42am UTC](https://discuss.elastic.co/t/solved-how-can-i-do-a-manual-rollover-for-all-indices-to-the-newest-index-policy/184694 "2019-06-07T06:42:46Z")

</div>

Is it possible to force a rollover for my indices to the latest updated policy? Currently, I have 3 indices in 1 policy and I have just updated my policy. It is now version 61. GET \_ilm/policy/filebeat-7.0.1 { "fileb…

---

## [ELK authentiation issue](https://discuss.elastic.co/t/elk-authentiation-issue/184143)

<div class="topic-metadata">

**Author:** [@Prakash\_Rathod](https://discuss.elastic.co/u/Prakash_Rathod)\
**Replies:** 3\
**Last updated:** [June 7, 2019, 6:32am UTC](https://discuss.elastic.co/t/elk-authentiation-issue/184143 "2019-06-07T06:32:05Z")

</div>

Hello Team, While accessing kibana I've added Nginx basic auth, which after asking credentials it redirects to kibana perfectly but when I enable ES security feature (xpack.security.enable : true) kibana throwing below …

---

## [Adding the Parent Child Relationship to nested object](https://discuss.elastic.co/t/adding-the-parent-child-relationship-to-nested-object/184557)

<div class="topic-metadata">

**Author:** [@KumVivek](https://discuss.elastic.co/u/KumVivek)\
**Replies:** 5\
**Last updated:** [June 7, 2019, 5:47am UTC](https://discuss.elastic.co/t/adding-the-parent-child-relationship-to-nested-object/184557 "2019-06-07T05:47:11Z")

</div>

public class Parent { public string Field1 { get; set; } public string Field2 { get; set; } public List\<DemoClass\> Field3 { get; set; } } public class DemoClass { public int Id { get; set; } } public c…

---

## [Elasticsearch upgrade to 7.0.1](https://discuss.elastic.co/t/elasticsearch-upgrade-to-7-0-1/180731)

<div class="topic-metadata">

**Author:** [@avinash\_07](https://discuss.elastic.co/u/avinash_07)\
**Replies:** 6\
**Last updated:** [June 7, 2019, 5:13am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-to-7-0-1/180731 "2019-06-07T05:13:52Z")

</div>

Can the elasticsearch team please suggest whether it is ok to upgrade from 6.1.2 to 7.0.1 directly? Or do we have to upgrade to 6.7 first and then to 7.0.1. Current Elasticsearch version I am using is 6.1.2. Also, using…

---

## [Elasticsearch - shards not splitted equally](https://discuss.elastic.co/t/elasticsearch-shards-not-splitted-equally/183821)

<div class="topic-metadata">

**Author:** [@Lior\_Yakobov](https://discuss.elastic.co/u/Lior_Yakobov)\
**Replies:** 9\
**Last updated:** [June 7, 2019, 4:37am UTC](https://discuss.elastic.co/t/elasticsearch-shards-not-splitted-equally/183821 "2019-06-07T04:37:59Z")

</div>

Hello, I'm running an RPM based on-prem cluster with 21 data nodes: As shows, one node specifically has very high load, while logstashes complaining on bulk retries issue due to many writes to this node: Correspon…

---

## [Search template](https://discuss.elastic.co/t/search-template/183698)

<div class="topic-metadata">

**Author:** [@skowron-line](https://discuss.elastic.co/u/skowron-line)\
**Replies:** 4\
**Last updated:** [June 7, 2019, 4:32am UTC](https://discuss.elastic.co/t/search-template/183698 "2019-06-07T04:32:27Z")

</div>

Why is this working GET \_search/template { "source": "{ \\"query\\": { \\"terms\\": {{#toJson}}statuses{{/toJson}} }}", "params": { "statuses" : { "status": \[ "pending", "published" \] } } } but this i…

---

## [Elasticsearch logon authentication](https://discuss.elastic.co/t/elasticsearch-logon-authentication/184101)

<div class="topic-metadata">

**Author:** [@hanyongsheng](https://discuss.elastic.co/u/hanyongsheng)\
**Replies:** 1\
**Last updated:** [June 7, 2019, 4:08am UTC](https://discuss.elastic.co/t/elasticsearch-logon-authentication/184101 "2019-06-07T04:08:24Z")

</div>

Kibana has set up login authentication. After logging in, why does your own plug-in request es to require authentication?The original es plug-in does not need to be re-authenticated.How can I get my own plugin without re…

---

## [3 diferent index?](https://discuss.elastic.co/t/3-diferent-index/184602)

<div class="topic-metadata">

**Author:** [@cgermanb](https://discuss.elastic.co/u/cgermanb)\
**Replies:** 1\
**Last updated:** [June 7, 2019, 4:05am UTC](https://discuss.elastic.co/t/3-diferent-index/184602 "2019-06-07T04:05:02Z")

</div>

Hi people, I have 3 elk for different logs, I want to make only one big elk but separate these logs. Can I do 3 different indices? How do I indicate the filebeat to which index should I send? Where can I read about this…

---

## [Which network.host IP will be used to communicate?](https://discuss.elastic.co/t/which-network-host-ip-will-be-used-to-communicate/184588)

<div class="topic-metadata">

**Author:** [@xavierfacq](https://discuss.elastic.co/u/xavierfacq)\
**Replies:** 1\
**Last updated:** [June 7, 2019, 4:00am UTC](https://discuss.elastic.co/t/which-network-host-ip-will-be-used-to-communicate/184588 "2019-06-07T04:00:20Z")

</div>

Hi all, We have a cluster with some nodes having 2 network.host declared: network.host: \["1.2.3.4", 10.11.12.13"\] Our question is quite simple: which one will be used by nodes and masters to communicate between them…

---

## [Do I Need to close and open index when synonym.txt changed?](https://discuss.elastic.co/t/do-i-need-to-close-and-open-index-when-synonym-txt-changed/184105)

<div class="topic-metadata">

**Author:** [@kimchigood](https://discuss.elastic.co/u/kimchigood)\
**Replies:** 4\
**Last updated:** [June 7, 2019, 3:53am UTC](https://discuss.elastic.co/t/do-i-need-to-close-and-open-index-when-synonym-txt-changed/184105 "2019-06-07T03:53:23Z")

</div>

As far as i know, when synonym.txt changed, index have to close and open. but now, when i changed to synonym.txt and didn't use close and open API for index and new synonym is applied. my elasicsearch engine is running…

---

## [actionGet interrupt](https://discuss.elastic.co/t/actionget-interrupt/184623)

<div class="topic-metadata">

**Author:** [@yangmengxiang](https://discuss.elastic.co/u/yangmengxiang)\
**Replies:** 1\
**Last updated:** [June 7, 2019, 3:55am UTC](https://discuss.elastic.co/t/actionget-interrupt/184623 "2019-06-07T03:55:32Z")

</div>

when i use the prepareSearch().execute().actionGet() api to search the index ,i get the feture got interrupt

---

## [6.5 XPack cross cluster documentation has lots of errors](https://discuss.elastic.co/t/6-5-xpack-cross-cluster-documentation-has-lots-of-errors/184149)

<div class="topic-metadata">

**Author:** [@Johnnyhl](https://discuss.elastic.co/u/Johnnyhl)\
**Replies:** 1\
**Last updated:** [June 7, 2019, 3:46am UTC](https://discuss.elastic.co/t/6-5-xpack-cross-cluster-documentation-has-lots-of-errors/184149 "2019-06-07T03:46:13Z")

</div>

Hi, ES is a great product and effort overall I like it. But it's not the first time I waste my time following the documentation example to finally figuring out it has lots of errors. When trying to understand security…

---

## [How to authenticate user to elasticsearch based on PKI](https://discuss.elastic.co/t/how-to-authenticate-user-to-elasticsearch-based-on-pki/184121)

<div class="topic-metadata">

**Author:** [@kartmsb](https://discuss.elastic.co/u/kartmsb)\
**Replies:** 17\
**Last updated:** [June 7, 2019, 3:19am UTC](https://discuss.elastic.co/t/how-to-authenticate-user-to-elasticsearch-based-on-pki/184121 "2019-06-07T03:19:34Z")

</div>

Hi I am newbie to elasticsearch. And I was trying to enable security and PKI based authentication in elasticsearch. I am using 6.5.1 es. And following "https://www.elastic.co/blog/elasticsearch-security-configure-tls-s…

---

## [Elasticsearch 7.1 fresh install errors with "master not discovered exception" when security is enabled](https://discuss.elastic.co/t/elasticsearch-7-1-fresh-install-errors-with-master-not-discovered-exception-when-security-is-enabled/182407)

<div class="topic-metadata">

**Author:** [@Luigi\_Grilli](https://discuss.elastic.co/u/Luigi_Grilli)\
**Replies:** 5\
**Last updated:** [June 7, 2019, 3:12am UTC](https://discuss.elastic.co/t/elasticsearch-7-1-fresh-install-errors-with-master-not-discovered-exception-when-security-is-enabled/182407 "2019-06-07T03:12:26Z")

</div>

I just installed es 7.1 using the msi package on a windows server 2012R2 box. After install I checked the newly created cluster with a single node and health is green. I enabled the xpack.security.enabled and restarted…

---

## [ELK Stack on AWS - Contd](https://discuss.elastic.co/t/elk-stack-on-aws-contd/184331)

<div class="topic-metadata">

**Author:** [@rahulkumar1](https://discuss.elastic.co/u/rahulkumar1)\
**Replies:** 5\
**Last updated:** [June 7, 2019, 2:15am UTC](https://discuss.elastic.co/t/elk-stack-on-aws-contd/184331 "2019-06-07T02:15:15Z")

</div>

I would like to reopen this thread. What are the best practices on setting up ELK ~Stack on AWS ? How many Master and Data Nodes should I have ? Do I need a shared storage ? Below is my design: AZ1 - (3 x Master No…

---

## [Failed to update datasource using Grafana](https://discuss.elastic.co/t/failed-to-update-datasource-using-grafana/184657)

<div class="topic-metadata">

**Author:** [@Giovani\_Hoff](https://discuss.elastic.co/u/Giovani_Hoff)\
**Replies:** 1\
**Last updated:** [June 7, 2019, 2:01am UTC](https://discuss.elastic.co/t/failed-to-update-datasource-using-grafana/184657 "2019-06-07T02:01:30Z")

</div>

Hi! I am not able to communicate Elasticsearch with Grafana. Please, why is it so hard??? I am running the following versions: Grafana 6.2.1 Elasticsearch 7.1.0 macOS 10.14.3 From http://localhost:9200 I get { "na…

---

## [Elasticsearch vs Database](https://discuss.elastic.co/t/elasticsearch-vs-database/184653)

<div class="topic-metadata">

**Author:** [@kdev](https://discuss.elastic.co/u/kdev)\
**Replies:** 8\
**Last updated:** [June 7, 2019, 1:51am UTC](https://discuss.elastic.co/t/elasticsearch-vs-database/184653 "2019-06-07T01:51:15Z")

</div>

One of my customers is requiring me to save the data from the front-end to MySQL and to implement the searching features using ES. In this case, is there a need to store the data to MySQL? In my opinion, it's enough to…

---

## [Elasticsearch 2.4.3 very high cpu usage](https://discuss.elastic.co/t/elasticsearch-2-4-3-very-high-cpu-usage/184424)

<div class="topic-metadata">

**Author:** [@fgd123](https://discuss.elastic.co/u/fgd123)\
**Replies:** 7\
**Last updated:** [June 7, 2019, 12:44am UTC](https://discuss.elastic.co/t/elasticsearch-2-4-3-very-high-cpu-usage/184424 "2019-06-07T00:44:09Z")

</div>

ES version :2.4.3 java version:1.8.0\_121 Java HotSpot(TM) 64-Bit Server VM (build 25.121-b13, mixed mode) My production ES nodes just only one,it is master node and also the data node ,it have 4 CPUs, and 8 GB RAM,ES …

---

## [Error Connecting to Kibana because host has failed to respond](https://discuss.elastic.co/t/error-connecting-to-kibana-because-host-has-failed-to-respond/184636)

<div class="topic-metadata">

**Author:** [@Richard\_Phillips\_Roy](https://discuss.elastic.co/u/Richard_Phillips_Roy)\
**Replies:** 2\
**Last updated:** [June 6, 2019, 7:03pm UTC](https://discuss.elastic.co/t/error-connecting-to-kibana-because-host-has-failed-to-respond/184636 "2019-06-06T19:03:25Z")

</div>

I'm running elasticsearch and kibana on a windows machine, and I installed winlogbeat on a different machine how do I send the output of winlogbeat to the machine where elasticsearch is running? Elasticsearch and Kibana …

---

## [Remove nested fields by query and/or by \_reindex](https://discuss.elastic.co/t/remove-nested-fields-by-query-and-or-by-reindex/184432)

<div class="topic-metadata">

**Author:** [@Chris\_Denneen](https://discuss.elastic.co/u/Chris_Denneen)\
**Replies:** 8\
**Last updated:** [June 6, 2019, 6:38pm UTC](https://discuss.elastic.co/t/remove-nested-fields-by-query-and-or-by-reindex/184432 "2019-06-06T18:38:31Z")

</div>

I currently was using dynamic\_mapping to create .raw fields for all strings but want to remove those in favor of a .keyword field. Trying to figure out the proper ctx.\_source syntax for update\_by\_query or \_reindex to re…

---

## [Docker image vulnerabilies](https://discuss.elastic.co/t/docker-image-vulnerabilies/184472)

<div class="topic-metadata">

**Author:** [@Yohan\_al](https://discuss.elastic.co/u/Yohan_al)\
**Replies:** 5\
**Last updated:** [June 6, 2019, 6:22pm UTC](https://discuss.elastic.co/t/docker-image-vulnerabilies/184472 "2019-06-06T18:22:17Z")

</div>

Hi, We've seen on docker hub somes criticals vulnerabilities on the latest elasticsearch docker image. CVE-2014-6277 CVE-2014-6278 CVE-2019-9924 CVE-2018-15686 CVE-2018-14618 CVE-2019-8457 CVE-2019-9169 ... how…

---

## [RestHighLevel client filter with json payload](https://discuss.elastic.co/t/resthighlevel-client-filter-with-json-payload/184469)

<div class="topic-metadata">

**Author:** [@PowerK](https://discuss.elastic.co/u/PowerK)\
**Replies:** 2\
**Last updated:** [June 6, 2019, 6:13pm UTC](https://discuss.elastic.co/t/resthighlevel-client-filter-with-json-payload/184469 "2019-06-06T18:13:05Z")

</div>

Hi i have requirement where i get request as json with multiple params and need to use that as filter for RestHighLevel client directly rather building the SearchQueryBuilder with BooleanQuery builder My request json …

---

## [How to do a select on every objects in Elasticsearch](https://discuss.elastic.co/t/how-to-do-a-select-on-every-objects-in-elasticsearch/184106)

<div class="topic-metadata">

**Author:** [@franco.federico](https://discuss.elastic.co/u/franco.federico)\
**Replies:** 6\
**Last updated:** [June 6, 2019, 5:01pm UTC](https://discuss.elastic.co/t/how-to-do-a-select-on-every-objects-in-elasticsearch/184106 "2019-06-06T17:01:52Z")

</div>

Hi all I'm exploring the ES SQL and I need more information. I only read the getting start on the documentation about SQL. Is it possible to do a select on logstash or other index present in elastic? I read examples o…

---

## [Can't load in an index / snapshot into3 node ES cluster](https://discuss.elastic.co/t/cant-load-in-an-index-snapshot-into3-node-es-cluster/184630)

<div class="topic-metadata">

**Author:** [@bren139yahoo](https://discuss.elastic.co/u/bren139yahoo)\
**Replies:** 0\
**Last updated:** [June 6, 2019, 4:11pm UTC](https://discuss.elastic.co/t/cant-load-in-an-index-snapshot-into3-node-es-cluster/184630 "2019-06-06T16:11:34Z")

</div>

Any thoughts on this one I have a cluster split across 3 machines When I start the cluster I see an error but eventually the cluster goes GREEN with all existing snapshot / indices STARTED \[2019-06-04T11:51:21,156\]\[WA…

---

## [Help with soundex/metaphone/synonym query](https://discuss.elastic.co/t/help-with-soundex-metaphone-synonym-query/183010)

<div class="topic-metadata">

**Author:** [@mikeq](https://discuss.elastic.co/u/mikeq)\
**Replies:** 2\
**Last updated:** [June 6, 2019, 3:46pm UTC](https://discuss.elastic.co/t/help-with-soundex-metaphone-synonym-query/183010 "2019-06-06T15:46:53Z")

</div>

Hi, Struggling to get a particular query working. We have a single search bar where a user could type in various terms to search for related to people, i.e. "john smith manager edinburgh" and the following query works…

---

## [XPACK Security in ELK stack 7.1.1](https://discuss.elastic.co/t/xpack-security-in-elk-stack-7-1-1/184004)

<div class="topic-metadata">

**Author:** [@sunnynazar](https://discuss.elastic.co/u/sunnynazar)\
**Replies:** 10\
**Last updated:** [June 6, 2019, 3:42pm UTC](https://discuss.elastic.co/t/xpack-security-in-elk-stack-7-1-1/184004 "2019-06-06T15:42:05Z")

</div>

Hi Guys, I am working with ELK stack 7.1.1 version on kubernetes using image: docker.elastic.co/elasticsearch/elasticsearch:7.1.1 I am facing an issue , when xpack security is enabled on elasticsearch cluster , elastic…

---

## [Can I use role based authentication for free?](https://discuss.elastic.co/t/can-i-use-role-based-authentication-for-free/183968)

<div class="topic-metadata">

**Author:** [@Martin\_H\_Andersen](https://discuss.elastic.co/u/Martin_H_Andersen)\
**Replies:** 13\
**Last updated:** [June 6, 2019, 3:36pm UTC](https://discuss.elastic.co/t/can-i-use-role-based-authentication-for-free/183968 "2019-06-06T15:36:06Z")

</div>

In this link https://www.elastic.co/subscriptions I can see that x-pack basic has role-based access control. How do I set it up? I have read the documentation but I am very confused. Can I with the basic license setup…

---

## [How to search email column in elastic search?](https://discuss.elastic.co/t/how-to-search-email-column-in-elastic-search/184597)

<div class="topic-metadata">

**Author:** [@vignesh\_S1](https://discuss.elastic.co/u/vignesh_S1)\
**Replies:** 1\
**Last updated:** [June 6, 2019, 2:10pm UTC](https://discuss.elastic.co/t/how-to-search-email-column-in-elastic-search/184597 "2019-06-06T14:10:26Z")

</div>

When I run the below query it will bring up the results which contains @gmail.com. My expectation would be empty results. I don't know why it's happening. GET \_search { "query": { "match": { "PrimaryEmail": "@gmail…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1270)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1272)
