# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1476

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1477

---

## [Apply Max Boost and Min Score for Each Function in Function Score](https://discuss.elastic.co/t/apply-max-boost-and-min-score-for-each-function-in-function-score/157707)

<div class="topic-metadata">

**Author:** [@maryam\_abdullah](https://discuss.elastic.co/u/maryam_abdullah)\
**Replies:** 0\
**Last updated:** [November 21, 2018, 12:38pm UTC](https://discuss.elastic.co/t/apply-max-boost-and-min-score-for-each-function-in-function-score/157707 "2018-11-21T12:38:25Z")

</div>

Hey, Is it possible to define multiple max boosts for a set of functions in the function score? Thank you.

---

## [Whitespace Tokenizer dont works as expected](https://discuss.elastic.co/t/whitespace-tokenizer-dont-works-as-expected/157674)

<div class="topic-metadata">

**Author:** [@Marc\_Muster](https://discuss.elastic.co/u/Marc_Muster)\
**Replies:** 1\
**Last updated:** [November 21, 2018, 12:14pm UTC](https://discuss.elastic.co/t/whitespace-tokenizer-dont-works-as-expected/157674 "2018-11-21T12:14:38Z")

</div>

Hi there, I have a problem using the whitespace tokenizer in a custom analyzer. I give you example documents with the highlights given, what matched: I have a document 1 lets say: "\_source": { "categoryId"…

---

## [Mapping util.Map instances to Object fails](https://discuss.elastic.co/t/mapping-util-map-instances-to-object-fails/157684)

<div class="topic-metadata">

**Author:** [@Fabi\_Te](https://discuss.elastic.co/u/Fabi_Te)\
**Replies:** 1\
**Last updated:** [November 21, 2018, 12:08pm UTC](https://discuss.elastic.co/t/mapping-util-map-instances-to-object-fails/157684 "2018-11-21T12:08:53Z")

</div>

Hi! Disclaimer: This question is related to Java and a bit Java Spring. This question isn't focusing on Java but the concept of field mapping. I'd like to index instances of this Java class: public class MyDoc { // …

---

## [Upgrade to 6.5 - snapshot error: Gateway Time-out](https://discuss.elastic.co/t/upgrade-to-6-5-snapshot-error-gateway-time-out/157676)

<div class="topic-metadata">

**Author:** [@humalog](https://discuss.elastic.co/u/humalog)\
**Replies:** 1\
**Last updated:** [November 21, 2018, 12:04pm UTC](https://discuss.elastic.co/t/upgrade-to-6-5-snapshot-error-gateway-time-out/157676 "2018-11-21T12:04:47Z")

</div>

Hi guys, i would like to upgrade Elasticsearch (6.4), Kibana (6.4) and Logstash (6.4) to version 6.5. I found 2 links how to do the upgrade (it's my first upgrade at all), Rolling upgrades and Elastic Stack 6.3 Upgrade…

---

## [Unassigned shards (inexperienced user!)](https://discuss.elastic.co/t/unassigned-shards-inexperienced-user/157591)

<div class="topic-metadata">

**Author:** [@Pastrufazio](https://discuss.elastic.co/u/Pastrufazio)\
**Replies:** 6\
**Last updated:** [November 21, 2018, 11:06am UTC](https://discuss.elastic.co/t/unassigned-shards-inexperienced-user/157591 "2018-11-21T11:06:42Z")

</div>

Hi all, I inherited a Kibana+elasticsearch Amazon AWS server (one single node) from an ex colleague. This instance is very slow and I'm trying to figure out what is wrong with it. The first thing I noticed (see below)…

---

## [Fvh Highlighting taking longer time than unified highlighting](https://discuss.elastic.co/t/fvh-highlighting-taking-longer-time-than-unified-highlighting/157643)

<div class="topic-metadata">

**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\
**Replies:** 4\
**Last updated:** [November 21, 2018, 11:30am UTC](https://discuss.elastic.co/t/fvh-highlighting-taking-longer-time-than-unified-highlighting/157643 "2018-11-21T11:30:34Z")

</div>

Hi all, I am trying out different methods of highlighting. As i can see "fvh" is taking more than 10 times as of unified. The query is : {"from" : 0, "size" : 1,"\_source": {"includes":\["TITLE"\] }, "query": { "boo…

---

## [How to query elements in an array](https://discuss.elastic.co/t/how-to-query-elements-in-an-array/157338)

<div class="topic-metadata">

**Author:** [@jacobot](https://discuss.elastic.co/u/jacobot)\
**Replies:** 2\
**Last updated:** [November 21, 2018, 10:55am UTC](https://discuss.elastic.co/t/how-to-query-elements-in-an-array/157338 "2018-11-21T10:55:10Z")

</div>

Json below (only \_source part is shown) is for example purpose only is shows an document from a fictional real estate broker Question: how do i query this document if it has lots with ownerId: "Jim Anderson" { . . . …

---

## [\[Spark Structured streaming\] Elasticsearch sink index name](https://discuss.elastic.co/t/spark-structured-streaming-elasticsearch-sink-index-name/152449)

<div class="topic-metadata">

**Author:** [@VincentL](https://discuss.elastic.co/u/VincentL)\
**Replies:** 7\
**Last updated:** [October 31, 2018, 8:42am UTC](https://discuss.elastic.co/t/spark-structured-streaming-elasticsearch-sink-index-name/152449 "2018-10-31T08:42:48Z")

</div>

Hello, I'm currently working with Spark Structured streaming, reading data from Kafka, and writing the output to an Elasticsearch sink. Everything is working fine, except that I would like the index name to be generated…

---

## [How to get backup/snapshop of elasticsearch index data daily based on start and end end time?](https://discuss.elastic.co/t/how-to-get-backup-snapshop-of-elasticsearch-index-data-daily-based-on-start-and-end-end-time/157678)

<div class="topic-metadata">

**Author:** [@RameshNagargoje](https://discuss.elastic.co/u/RameshNagargoje)\
**Replies:** 0\
**Last updated:** [November 21, 2018, 10:22am UTC](https://discuss.elastic.co/t/how-to-get-backup-snapshop-of-elasticsearch-index-data-daily-based-on-start-and-end-end-time/157678 "2018-11-21T10:22:06Z")

</div>

Hi, I want to get backup of elasticsearch index data daily with time is given in query to fecth only those documents and save to local drive. sample query needed as: "query": { "fetchall documents" "range": "gte":…

---

## [6.4.2 All nodes except one crosses watermark level](https://discuss.elastic.co/t/6-4-2-all-nodes-except-one-crosses-watermark-level/157652)

<div class="topic-metadata">

**Author:** [@Neha\_Sharma1](https://discuss.elastic.co/u/Neha_Sharma1)\
**Replies:** 2\
**Last updated:** [November 21, 2018, 9:53am UTC](https://discuss.elastic.co/t/6-4-2-all-nodes-except-one-crosses-watermark-level/157652 "2018-11-21T09:53:10Z")

</div>

I have 4 Data nodes in my cluster with size 2.5TB. Approx 250Gb data is added to the cluster every day. The lower disk watermark is 85%(default). We are facing an issue where replicas are not being assigned to any node. …

---

## [Elastic pagination for query parameters](https://discuss.elastic.co/t/elastic-pagination-for-query-parameters/157668)

<div class="topic-metadata">

**Author:** [@elastic\_guy](https://discuss.elastic.co/u/elastic_guy)\
**Replies:** 0\
**Last updated:** [November 21, 2018, 9:40am UTC](https://discuss.elastic.co/t/elastic-pagination-for-query-parameters/157668 "2018-11-21T09:40:59Z")

</div>

Hi, Say I have a terms query that potentially could include many parameters.. for example, I have a document which looks like this: doc { fieldA: 'id' (string, keyword type) } and I also have a list of string val…

---

## [Apply Boosting Based on a Field Value](https://discuss.elastic.co/t/apply-boosting-based-on-a-field-value/156673)

<div class="topic-metadata">

**Author:** [@maryam\_abdullah](https://discuss.elastic.co/u/maryam_abdullah)\
**Replies:** 25\
**Last updated:** [November 21, 2018, 9:36am UTC](https://discuss.elastic.co/t/apply-boosting-based-on-a-field-value/156673 "2018-11-21T09:36:30Z")

</div>

Hey, While searching, is it possible to boost the score by a number calculated from the field value, e.g. the field value divided by a particular number? Meaning that the boost value is dependent on a field value of the…

---

## [Issue with Shingles and Stopwords](https://discuss.elastic.co/t/issue-with-shingles-and-stopwords/155525)

<div class="topic-metadata">

**Author:** [@khmcnally](https://discuss.elastic.co/u/khmcnally)\
**Replies:** 1\
**Last updated:** [November 21, 2018, 8:58am UTC](https://discuss.elastic.co/t/issue-with-shingles-and-stopwords/155525 "2018-11-21T08:58:51Z")

</div>

Hi there, I have an issue with getting shingles and stopwords to play nicely. I seem to duplicate tokens all over the place. Here's my analyzer: "analysis": { "filter": { "filter\_shingle": { …

---

## [Fast check of ip address list](https://discuss.elastic.co/t/fast-check-of-ip-address-list/157388)

<div class="topic-metadata">

**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\
**Replies:** 2\
**Last updated:** [November 21, 2018, 8:58am UTC](https://discuss.elastic.co/t/fast-check-of-ip-address-list/157388 "2018-11-21T08:58:21Z")

</div>

I have a many logs from external ip address that connect to my web application. I would like to check this ip address into logs with my list in a text file. How can I check if there is ip address into logs that are als…

---

## [How can make the elasticsearch as linux service?n](https://discuss.elastic.co/t/how-can-make-the-elasticsearch-as-linux-service-n/157653)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 6\
**Last updated:** [November 21, 2018, 8:54am UTC](https://discuss.elastic.co/t/how-can-make-the-elasticsearch-as-linux-service-n/157653 "2018-11-21T08:54:32Z")

</div>

hi, I installed elasticsearch on linux using tar.gz file. now, I want to run it as a linux service so that if my VM restarts, elasticsearch be started automatically. how can i do it? is there any command to make the ela…

---

## [Error in syntax with multi fields search](https://discuss.elastic.co/t/error-in-syntax-with-multi-fields-search/157473)

<div class="topic-metadata">

**Author:** [@ivancsvetkov](https://discuss.elastic.co/u/ivancsvetkov)\
**Replies:** 1\
**Last updated:** [November 21, 2018, 8:51am UTC](https://discuss.elastic.co/t/error-in-syntax-with-multi-fields-search/157473 "2018-11-21T08:51:07Z")

</div>

Hello! I look at "Elasticsearch Do's, Don'ts and Pro-Tips - Itamar Syn Hershko" video tutorial at https://www.youtube.com/watch?v=c9O5\_a50aOQ I see condition on several fiedls https://imgur.com/a/17zAZ4w and try to ma…

---

## [Best practice for Log-Analyzing](https://discuss.elastic.co/t/best-practice-for-log-analyzing/155504)

<div class="topic-metadata">

**Author:** [@Illmatic](https://discuss.elastic.co/u/Illmatic)\
**Replies:** 2\
**Last updated:** [November 21, 2018, 8:35am UTC](https://discuss.elastic.co/t/best-practice-for-log-analyzing/155504 "2018-11-21T08:35:19Z")

</div>

I need to Analyze the Logs(Exceptions) from a Rest-Application. I have a Log-File with the logged Exceptions and was wondering, what would be best practice to Analyze this Logs and wich Components from the ELK-Stack I sh…

---

## [Index replace events instead of adding each one](https://discuss.elastic.co/t/index-replace-events-instead-of-adding-each-one/157645)

<div class="topic-metadata">

**Author:** [@m0n0lith](https://discuss.elastic.co/u/m0n0lith)\
**Replies:** 2\
**Last updated:** [November 21, 2018, 8:16am UTC](https://discuss.elastic.co/t/index-replace-events-instead-of-adding-each-one/157645 "2018-11-21T08:16:13Z")

</div>

I have noticed that my test cluster are doing something really wierd. Instead of adding each event it seems to replace the one document/event in the index with a new one. Like this; one event comes from logstash(syslog…

---

## [Index Backup & Archive to tape strategy](https://discuss.elastic.co/t/index-backup-archive-to-tape-strategy/157609)

<div class="topic-metadata">

**Author:** [@lag](https://discuss.elastic.co/u/lag)\
**Replies:** 3\
**Last updated:** [November 21, 2018, 8:10am UTC](https://discuss.elastic.co/t/index-backup-archive-to-tape-strategy/157609 "2018-11-21T08:10:52Z")

</div>

Hello! I am currently trying to figure out correct approach to Backup & Archive strategy for Elasticsearch. What I would like to achieve is a solution where older indexes that are not required anymore get off-loaded to…

---

## [Include\_in\_all still works or not?](https://discuss.elastic.co/t/include-in-all-still-works-or-not/154092)

<div class="topic-metadata">

**Author:** [@pranav24](https://discuss.elastic.co/u/pranav24)\
**Replies:** 6\
**Last updated:** [November 21, 2018, 8:00am UTC](https://discuss.elastic.co/t/include-in-all-still-works-or-not/154092 "2018-11-21T08:00:14Z")

</div>

Hi All, In my use case of Elasticsearch for my project, for free\_text\_search I want search to be done on not all field and I also not want to send list of field on search is to be done because I have almost 100 fields a…

---

## [What's the use-case for having multiple children in a parent-child index?](https://discuss.elastic.co/t/whats-the-use-case-for-having-multiple-children-in-a-parent-child-index/157633)

<div class="topic-metadata">

**Author:** [@Ben\_Weisburd](https://discuss.elastic.co/u/Ben_Weisburd)\
**Replies:** 0\
**Last updated:** [November 21, 2018, 7:09am UTC](https://discuss.elastic.co/t/whats-the-use-case-for-having-multiple-children-in-a-parent-child-index/157633 "2018-11-21T07:09:34Z")

</div>

What are the practical use-cases where multiple kinds of child-docs would be useful? https://www.elastic.co/guide/en/elasticsearch/reference/current/parent-join.html#\_multiple\_children\_per\_parent Is it possible to perf…

---

## [How to get the list of nodes which left the cluster?](https://discuss.elastic.co/t/how-to-get-the-list-of-nodes-which-left-the-cluster/157363)

<div class="topic-metadata">

**Author:** [@Saji\_George](https://discuss.elastic.co/u/Saji_George)\
**Replies:** 5\
**Last updated:** [November 21, 2018, 7:02am UTC](https://discuss.elastic.co/t/how-to-get-the-list-of-nodes-which-left-the-cluster/157363 "2018-11-21T07:02:27Z")

</div>

How to do we find the servers which are down and left the cluster? I have 8 data nodes and 3 master nodes. Its very difficult to go through each server to find status of each server. I can see the list of nodes which a…

---

## [Unable to start Elasticsearch Error with exit code](https://discuss.elastic.co/t/unable-to-start-elasticsearch-error-with-exit-code/157630)

<div class="topic-metadata">

**Author:** [@Bishwadeep\_Kc](https://discuss.elastic.co/u/Bishwadeep_Kc)\
**Replies:** 1\
**Last updated:** [November 21, 2018, 6:52am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-error-with-exit-code/157630 "2018-11-21T06:52:24Z")

</div>

Hi, I installed Elasticsearch version 5.6.13 on my ubuntu system. When I try to start the Elasticsearch service, it wont run. I updated my elasticsearch.yml file(configuration added below) . I have added the output of t…

---

## [How does painless work?](https://discuss.elastic.co/t/how-does-painless-work/155077)

<div class="topic-metadata">

**Author:** [@bps](https://discuss.elastic.co/u/bps)\
**Replies:** 3\
**Last updated:** [November 21, 2018, 6:42am UTC](https://discuss.elastic.co/t/how-does-painless-work/155077 "2018-11-21T06:42:51Z")

</div>

I have been using painless saved on my ES cluster for a while now on a project and little is really documented as far as how it works "under the covers" of elastic search -- at least I can't find much. Can any of the exp…

---

## [Elasticsearch- highlighting on both “.keyword” and text fields](https://discuss.elastic.co/t/elasticsearch-highlighting-on-both-keyword-and-text-fields/157325)

<div class="topic-metadata">

**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\
**Replies:** 5\
**Last updated:** [November 21, 2018, 5:49am UTC](https://discuss.elastic.co/t/elasticsearch-highlighting-on-both-keyword-and-text-fields/157325 "2018-11-21T05:49:50Z")

</div>

I am finding issues with highlighting when searching on fields using its complete data.I have used custom analyzers and each field is stored as text and keyword. I am using whitespace as search analyzer. My custom anal…

---

## [How to make matched\_fields generic while highlighting - Elasticsearch](https://discuss.elastic.co/t/how-to-make-matched-fields-generic-while-highlighting-elasticsearch/157628)

<div class="topic-metadata">

**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\
**Replies:** 0\
**Last updated:** [November 21, 2018, 6:11am UTC](https://discuss.elastic.co/t/how-to-make-matched-fields-generic-while-highlighting-elasticsearch/157628 "2018-11-21T06:11:53Z")

</div>

Hi all, I am having duplicity in highlighting as few of my searches are matching in both .keyword and text field as well. So i am trying to employ "matched\_fields" on all such fields.Problem is i don't know these fields…

---

## [I have the error (503), No Shard Available Action Exception](https://discuss.elastic.co/t/i-have-the-error-503-no-shard-available-action-exception/157500)

<div class="topic-metadata">

**Author:** [@14b07852ef50bed9e66b](https://discuss.elastic.co/u/14b07852ef50bed9e66b)\
**Replies:** 2\
**Last updated:** [November 21, 2018, 5:53am UTC](https://discuss.elastic.co/t/i-have-the-error-503-no-shard-available-action-exception/157500 "2018-11-21T05:53:06Z")

</div>

"version" : { "number" : "2.3.0", "build\_hash" : "8371be8d5fe5df7fb9c0516c474d77b9feddd888", "build\_timestamp" : "2016-03-29T07:54:48Z", "build\_snapshot" : false, "lucene\_version" : "5.5.0" } When …

---

## [How to get certificate from Windows MY store for ES call in python](https://discuss.elastic.co/t/how-to-get-certificate-from-windows-my-store-for-es-call-in-python/157624)

<div class="topic-metadata">

**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\
**Replies:** 0\
**Last updated:** [November 21, 2018, 5:43am UTC](https://discuss.elastic.co/t/how-to-get-certificate-from-windows-my-store-for-es-call-in-python/157624 "2018-11-21T05:43:57Z")

</div>

We have a service that connects to Elasticsearch from C# and Python. We are using a reverse proxy with client certificate authentication. From C# we pull the certificate from the local store and include it with the req…

---

## [How can I get fields from SearchResponse?](https://discuss.elastic.co/t/how-can-i-get-fields-from-searchresponse/157622)

<div class="topic-metadata">

**Author:** [@byeong\_seok\_park](https://discuss.elastic.co/u/byeong_seok_park)\
**Replies:** 0\
**Last updated:** [November 21, 2018, 4:27am UTC](https://discuss.elastic.co/t/how-can-i-get-fields-from-searchresponse/157622 "2018-11-21T04:27:02Z")

</div>

I just wonder how I get fields from SearchResponse which is result of my query. Below is my query: {"size":99,"timeout":"10s","query":{"bool":{"filter":\[{"bool":{"must":\[{"range":{"LOG\_GEN\_TIME":{"from":"2018-11-01 12:…

---

## [P12 certificate is protected by password](https://discuss.elastic.co/t/p12-certificate-is-protected-by-password/157120)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 14\
**Last updated:** [November 21, 2018, 3:35am UTC](https://discuss.elastic.co/t/p12-certificate-is-protected-by-password/157120 "2018-11-21T03:35:36Z")

</div>

Hi all , My ES cluster containing 3 Master and 2 Data nodes. I have 5 p12 certificates for SSL. All p12 certificates are password protected. May I use these password protected certificates in cluster . When I am enab…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1475)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1477)
