# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1477

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1478

---

## [Combine three scripted fields into one](https://discuss.elastic.co/t/combine-three-scripted-fields-into-one/157238)

<div class="topic-metadata">

**Author:** [@RainTown](https://discuss.elastic.co/u/RainTown)\
**Replies:** 3\
**Last updated:** [November 20, 2018, 10:51pm UTC](https://discuss.elastic.co/t/combine-three-scripted-fields-into-one/157238 "2018-11-20T22:51:44Z")

</div>

i have index with 3 scripted fields maximum of one of these 3 fields is non-null. But all 3 might be null. Let's say city1, city2, city3. i want new single field, say city, whose value is from the non-null cityX fiel…

---

## [Query documents with per term weights](https://discuss.elastic.co/t/query-documents-with-per-term-weights/155648)

<div class="topic-metadata">

**Author:** [@lc\_es](https://discuss.elastic.co/u/lc_es)\
**Replies:** 1\
**Last updated:** [November 20, 2018, 10:46pm UTC](https://discuss.elastic.co/t/query-documents-with-per-term-weights/155648 "2018-11-20T22:46:19Z")

</div>

The documents in my index have a field containing a list of all attribute terms, like "fieldA": \["attr1", "attr3", "attr7"\] and for each attribute term, a field containing its weight, like "weight:attr1": 0.5, "weight…

---

## [Elasticsearch 6.4.x does not register keyword tokenizer](https://discuss.elastic.co/t/elasticsearch-6-4-x-does-not-register-keyword-tokenizer/157556)

<div class="topic-metadata">

**Author:** [@paranoiabla](https://discuss.elastic.co/u/paranoiabla)\
**Replies:** 4\
**Last updated:** [November 20, 2018, 9:45pm UTC](https://discuss.elastic.co/t/elasticsearch-6-4-x-does-not-register-keyword-tokenizer/157556 "2018-11-20T21:45:25Z")

</div>

Hi guys, in elasticsearch 5.6.x I see there a lot of tokenizers registered: and in elasticsearch 6.4.2 after some debugging I see there's only the standard tokenizer. So my settings.json seems to be invalid: { "ana…

---

## [Elasticsearch - Search synonyms in attachment content](https://discuss.elastic.co/t/elasticsearch-search-synonyms-in-attachment-content/157404)

<div class="topic-metadata">

**Author:** [@alina.frey](https://discuss.elastic.co/u/alina.frey)\
**Replies:** 1\
**Last updated:** [November 20, 2018, 9:26pm UTC](https://discuss.elastic.co/t/elasticsearch-search-synonyms-in-attachment-content/157404 "2018-11-20T21:26:25Z")

</div>

I would like to get some guidance on how to search for synonyms in the attachments content, in C#. Using ingest-attachment plugin. Elasticsearch version: 5.5.1 NEST: 5.5 I am receiving results when searching for words…

---

## [Upgrade from non-XPack to XPack](https://discuss.elastic.co/t/upgrade-from-non-xpack-to-xpack/156519)

<div class="topic-metadata">

**Author:** [@Todd\_Lyons](https://discuss.elastic.co/u/Todd_Lyons)\
**Replies:** 4\
**Last updated:** [November 20, 2018, 8:40pm UTC](https://discuss.elastic.co/t/upgrade-from-non-xpack-to-xpack/156519 "2018-11-20T20:40:41Z")

</div>

I have a production ELK stack with 3 master nodes, 3 data nodes, running 6.1.4. When I built the (AWS) ami's (using packer) I did not install XPack. The kibana and logstash pieces are running as docker containers in Ku…

---

## [Elastic Search and Salesforece Resources (Documents)](https://discuss.elastic.co/t/elastic-search-and-salesforece-resources-documents/157608)

<div class="topic-metadata">

**Author:** [@Nush](https://discuss.elastic.co/u/Nush)\
**Replies:** 0\
**Last updated:** [November 20, 2018, 8:09pm UTC](https://discuss.elastic.co/t/elastic-search-and-salesforece-resources-documents/157608 "2018-11-20T20:09:16Z")

</div>

Hey I have problems with Salesforce and Elasticsearch when we doing a document search Here my sales force array showing documents \[{ "Tag":null, "GroupType":"Public", "GroupName":"PublicResources", "GroupId":"0F90k000…

---

## [Failed to create elasticsearch client](https://discuss.elastic.co/t/failed-to-create-elasticsearch-client/156206)

<div class="topic-metadata">

**Author:** [@davlinds](https://discuss.elastic.co/u/davlinds)\
**Replies:** 17\
**Last updated:** [November 20, 2018, 7:42pm UTC](https://discuss.elastic.co/t/failed-to-create-elasticsearch-client/156206 "2018-11-20T19:42:34Z")

</div>

Hi, I am trying to learn about Elastic and fscrawler so I can catalogue and search my pdf’s on a win7 machine. I am going up a very steep learning curve haha I have installed elastic version 6.4.2 using the suggested in…

---

## [Snapshot to IBM S3 compatible object storage](https://discuss.elastic.co/t/snapshot-to-ibm-s3-compatible-object-storage/157603)

<div class="topic-metadata">

**Author:** [@sszabo](https://discuss.elastic.co/u/sszabo)\
**Replies:** 0\
**Last updated:** [November 20, 2018, 6:57pm UTC](https://discuss.elastic.co/t/snapshot-to-ibm-s3-compatible-object-storage/157603 "2018-11-20T18:57:51Z")

</div>

Is it possible to snapshot to IBM object store which is S3 compatible? curl -s -XPUT http://hostname:9200/\_snapshot/filebeat20180110 -H 'Content-Type: application/json' -d' { "type": "s3", "settings": { "endpoin…

---

## [How to match exactly one item in an array](https://discuss.elastic.co/t/how-to-match-exactly-one-item-in-an-array/157220)

<div class="topic-metadata">

**Author:** [@AlloVince](https://discuss.elastic.co/u/AlloVince)\
**Replies:** 1\
**Last updated:** [November 20, 2018, 6:33pm UTC](https://discuss.elastic.co/t/how-to-match-exactly-one-item-in-an-array/157220 "2018-11-20T18:33:15Z")

</div>

Hi guys I have a question when matching a field with array. Here is my data: Item1: { "names": \["foo-123-sth-more", "bar-456-sth-more"\] } Item2: { "names": \["foo-456-sth-more", "bar-123-sth-more"\] } My query is …

---

## [Timestamp warnings in elasticsearch logs](https://discuss.elastic.co/t/timestamp-warnings-in-elasticsearch-logs/156504)

<div class="topic-metadata">

**Author:** [@Maddy\_M](https://discuss.elastic.co/u/Maddy_M)\
**Replies:** 3\
**Last updated:** [November 20, 2018, 6:23pm UTC](https://discuss.elastic.co/t/timestamp-warnings-in-elasticsearch-logs/156504 "2018-11-20T18:23:12Z")

</div>

Hi, I see following exception es.deprecation.log. I see that this question was answered earlier other thread, but, it has less explanation. \[WARN \]\[o.e.d.s.f.s.DocValueFieldsFetchSubPhase\] Doc-value field \[@timestam…

---

## [Advise on How to optimize the ElasticStack](https://discuss.elastic.co/t/advise-on-how-to-optimize-the-elasticstack/157579)

<div class="topic-metadata">

**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\
**Replies:** 2\
**Last updated:** [November 20, 2018, 6:22pm UTC](https://discuss.elastic.co/t/advise-on-how-to-optimize-the-elasticstack/157579 "2018-11-20T18:22:03Z")

</div>

Hello all - we have a bunch of elasticsearch Nodes running (5 Master/2 Coordinating). Was looking at the community's advise on the current configuration. I feel that JVM Settings may be less than optimal - any comments/s…

---

## [Are there any unneeded .jar files for Elasticsearch?](https://discuss.elastic.co/t/are-there-any-unneeded-jar-files-for-elasticsearch/157588)

<div class="topic-metadata">

**Author:** [@hadingerb](https://discuss.elastic.co/u/hadingerb)\
**Replies:** 1\
**Last updated:** [November 20, 2018, 5:16pm UTC](https://discuss.elastic.co/t/are-there-any-unneeded-jar-files-for-elasticsearch/157588 "2018-11-20T17:16:32Z")

</div>

Right now, I am using two different versions of Elasticsearch: 5.6.8, and 6.4.3. For personal security reasons, I am looking to remove any unused jar files from both the lib and modules directories in elasticsearch. I am…

---

## [\_update\_by\_query with ES 2.1](https://discuss.elastic.co/t/update-by-query-with-es-2-1/157574)

<div class="topic-metadata">

**Author:** [@boeledi01](https://discuss.elastic.co/u/boeledi01)\
**Replies:** 4\
**Last updated:** [November 20, 2018, 3:08pm UTC](https://discuss.elastic.co/t/update-by-query-with-es-2-1/157574 "2018-11-20T15:08:45Z")

</div>

I need to apply a fix to the content of various documents in ES 2.1 (bug in the code we urgently need to fix). We have ~400 M documents in ES 2.1 The following request works perfectly in ES 6: POST messages/\_update\_b…

---

## [Query on fieldname with wildcard?](https://discuss.elastic.co/t/query-on-fieldname-with-wildcard/157569)

<div class="topic-metadata">

**Author:** [@boeledi01](https://discuss.elastic.co/u/boeledi01)\
**Replies:** 3\
**Last updated:** [November 20, 2018, 2:59pm UTC](https://discuss.elastic.co/t/query-on-fieldname-with-wildcard/157569 "2018-11-20T14:59:26Z")

</div>

Hi, In order to support multi-lingual documents, we stored them with the suffix of the language code, such as: { "description\_EN": "My Description", "description\_FR": "Ma Description" } We do not know in advance, i…

---

## [Sniffing using HighLevelClient in Java](https://discuss.elastic.co/t/sniffing-using-highlevelclient-in-java/157557)

<div class="topic-metadata">

**Author:** [@pr\_daniel](https://discuss.elastic.co/u/pr_daniel)\
**Replies:** 0\
**Last updated:** [November 20, 2018, 1:20pm UTC](https://discuss.elastic.co/t/sniffing-using-highlevelclient-in-java/157557 "2018-11-20T13:20:30Z")

</div>

How am I supposed to create a high level rest client with sniffing enabled (6.4.3)? The components (sniffer, listener, clients) depend on each other in such a way it seems impossible. Here the HighLevelClient takes a bu…

---

## [Using hyphenation pattern file in Cloud elastic](https://discuss.elastic.co/t/using-hyphenation-pattern-file-in-cloud-elastic/157501)

<div class="topic-metadata">

**Author:** [@mortenbock](https://discuss.elastic.co/u/mortenbock)\
**Replies:** 1\
**Last updated:** [November 20, 2018, 2:25pm UTC](https://discuss.elastic.co/t/using-hyphenation-pattern-file-in-cloud-elastic/157501 "2018-11-20T14:25:39Z")

</div>

When using a hyphenation decompounder filter, you can supply a hyphenation\_patterns\_path that points to an XML file. How would I go about using this feature on an Elastic Cloud instance? How do I upload that file, and h…

---

## [Elastic Search FSCrawler](https://discuss.elastic.co/t/elastic-search-fscrawler/157509)

<div class="topic-metadata">

**Author:** [@Rahul\_Shendge](https://discuss.elastic.co/u/Rahul_Shendge)\
**Replies:** 3\
**Last updated:** [November 20, 2018, 1:46pm UTC](https://discuss.elastic.co/t/elastic-search-fscrawler/157509 "2018-11-20T13:46:02Z")

</div>

I need to add custom field FSCrawler index json. Can we add custom field ?

---

## [Can I have only filter context query?](https://discuss.elastic.co/t/can-i-have-only-filter-context-query/157047)

<div class="topic-metadata">

**Author:** [@Nedko\_Georgiev](https://discuss.elastic.co/u/Nedko_Georgiev)\
**Replies:** 3\
**Last updated:** [November 20, 2018, 1:38pm UTC](https://discuss.elastic.co/t/can-i-have-only-filter-context-query/157047 "2018-11-20T13:38:27Z")

</div>

Can I create a query with only filter context in it, without any query context or do I always have to have some query context in addition to the filter? In addition I'd like it to be nested, but let me know if I can hav…

---

## [Adding new master nodes to old cluster](https://discuss.elastic.co/t/adding-new-master-nodes-to-old-cluster/155887)

<div class="topic-metadata">

**Author:** [@saif](https://discuss.elastic.co/u/saif)\
**Replies:** 7\
**Last updated:** [November 20, 2018, 1:04pm UTC](https://discuss.elastic.co/t/adding-new-master-nodes-to-old-cluster/155887 "2018-11-20T13:04:27Z")

</div>

I have a production cluster with 4 master+Data node under X-pack Plat licence We planning to split master and data node role, so i will add 3 master only node and set the master/data node to data node only so my ques…

---

## [Use elasticSearch's geo\_shape in PySpark](https://discuss.elastic.co/t/use-elasticsearchs-geo-shape-in-pyspark/157550)

<div class="topic-metadata">

**Author:** [@Vianney\_Bailleux](https://discuss.elastic.co/u/Vianney_Bailleux)\
**Replies:** 0\
**Last updated:** [November 20, 2018, 12:52pm UTC](https://discuss.elastic.co/t/use-elasticsearchs-geo-shape-in-pyspark/157550 "2018-11-20T12:52:56Z")

</div>

currently I have a program that uses elasticSearch's data with coordinates in Geo\_shape and I can't find the way to create the mapping under Spark / PySpark someone will have already encountered this problem? thank you…

---

## [Error with mapping ArrayType in pySpark "not found; typically this occurs with arrays which are not mapped as single value"](https://discuss.elastic.co/t/error-with-mapping-arraytype-in-pyspark-not-found-typically-this-occurs-with-arrays-which-are-not-mapped-as-single-value/157499)

<div class="topic-metadata">

**Author:** [@Vianney\_Bailleux](https://discuss.elastic.co/u/Vianney_Bailleux)\
**Replies:** 1\
**Last updated:** [November 20, 2018, 12:49pm UTC](https://discuss.elastic.co/t/error-with-mapping-arraytype-in-pyspark-not-found-typically-this-occurs-with-arrays-which-are-not-mapped-as-single-value/157499 "2018-11-20T12:49:34Z")

</div>

in database's elasticSearch I have this data: { "titre": "Formation ElasticSearch", "sous-titre": "Mon sous titre", "formateurs": \[ { "prenom": "Martin", "nom": "Legros" …

---

## [Migrating data(which already exists) from Mongodb to elasticsearch](https://discuss.elastic.co/t/migrating-data-which-already-exists-from-mongodb-to-elasticsearch/157168)

<div class="topic-metadata">

**Author:** [@Sai\_Krishna](https://discuss.elastic.co/u/Sai_Krishna)\
**Replies:** 3\
**Last updated:** [November 20, 2018, 12:20pm UTC](https://discuss.elastic.co/t/migrating-data-which-already-exists-from-mongodb-to-elasticsearch/157168 "2018-11-20T12:20:42Z")

</div>

Hi Everyone, I am new to elasticsearch. I tried a lot but I am unable to find the way to send already present data(collections) of mongodb to elasticsearch. I successfully established the connection between mongodb and …

---

## [Rename a field of particular index](https://discuss.elastic.co/t/rename-a-field-of-particular-index/157479)

<div class="topic-metadata">

**Author:** [@balumurari1](https://discuss.elastic.co/u/balumurari1)\
**Replies:** 5\
**Last updated:** [November 20, 2018, 10:12am UTC](https://discuss.elastic.co/t/rename-a-field-of-particular-index/157479 "2018-11-20T10:12:22Z")

</div>

can we rename a field in particular field index, Please help me with an example

---

## [I can't edit mapping](https://discuss.elastic.co/t/i-cant-edit-mapping/157327)

<div class="topic-metadata">

**Author:** [@nu11ahnung](https://discuss.elastic.co/u/nu11ahnung)\
**Replies:** 1\
**Last updated:** [November 20, 2018, 11:10am UTC](https://discuss.elastic.co/t/i-cant-edit-mapping/157327 "2018-11-20T11:10:50Z")

</div>

I want to create an index with an ngram analyzer. This is what I do PUT /my\_index/ { "settings": { "analysis": {"filter": { "trigrams\_filter": { "type": "ngram", "min\_gram": 3, "max\_gram": 3, "token\_chars": …

---

## [\[6.5\] cross cluster search and Kibana integration](https://discuss.elastic.co/t/6-5-cross-cluster-search-and-kibana-integration/157414)

<div class="topic-metadata">

**Author:** [@arey](https://discuss.elastic.co/u/arey)\
**Replies:** 4\
**Last updated:** [November 20, 2018, 10:48am UTC](https://discuss.elastic.co/t/6-5-cross-cluster-search-and-kibana-integration/157414 "2018-11-20T10:48:58Z")

</div>

Hi everyone, I'm trying to setup an environment according this architecture: 2 elasticsearch clusters --\> kibana presentation According to what I've found on the reference guide, in order to implement this architectur…

---

## [Application Data not getting passed to Elastic Search](https://discuss.elastic.co/t/application-data-not-getting-passed-to-elastic-search/157104)

<div class="topic-metadata">

**Author:** [@Neha\_Srivastava](https://discuss.elastic.co/u/Neha_Srivastava)\
**Replies:** 1\
**Last updated:** [November 20, 2018, 10:34am UTC](https://discuss.elastic.co/t/application-data-not-getting-passed-to-elastic-search/157104 "2018-11-20T10:34:37Z")

</div>

We have recently moved to logging using ELK. We are facing issue in sending data from application to elastic search. Our application is a .Net web application and we are sending data in json format. We can see the log …

---

## [Regular expression in ElasticSearch](https://discuss.elastic.co/t/regular-expression-in-elasticsearch/157502)

<div class="topic-metadata">

**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\
**Replies:** 1\
**Last updated:** [November 20, 2018, 9:43am UTC](https://discuss.elastic.co/t/regular-expression-in-elasticsearch/157502 "2018-11-20T09:43:15Z")

</div>

Hi, Can we use MongoDB regular expression query in the elastic search directly?

---

## [Logs file data limit, Searches cant be saved](https://discuss.elastic.co/t/logs-file-data-limit-searches-cant-be-saved/157484)

<div class="topic-metadata">

**Author:** [@osamaikhlas](https://discuss.elastic.co/u/osamaikhlas)\
**Replies:** 1\
**Last updated:** [November 20, 2018, 9:41am UTC](https://discuss.elastic.co/t/logs-file-data-limit-searches-cant-be-saved/157484 "2018-11-20T09:41:44Z")

</div>

Is there any limit in elastic stack to upload logs i have uploaded almost 400GB Logs from different paths in filebeat but it is not showing all folder logs on kibana I'm not able to save the searches on kibana

---

## [Index data from mongo to Elasticsearch](https://discuss.elastic.co/t/index-data-from-mongo-to-elasticsearch/157505)

<div class="topic-metadata">

**Author:** [@Sai\_Krishna](https://discuss.elastic.co/u/Sai_Krishna)\
**Replies:** 2\
**Last updated:** [November 20, 2018, 9:27am UTC](https://discuss.elastic.co/t/index-data-from-mongo-to-elasticsearch/157505 "2018-11-20T09:27:40Z")

</div>

---

## [Can't delete indices (not using wildcards)](https://discuss.elastic.co/t/cant-delete-indices-not-using-wildcards/154696)

<div class="topic-metadata">

**Author:** [@jrigo](https://discuss.elastic.co/u/jrigo)\
**Replies:** 2\
**Last updated:** [November 20, 2018, 8:59am UTC](https://discuss.elastic.co/t/cant-delete-indices-not-using-wildcards/154696 "2018-11-20T08:59:12Z")

</div>

Recently a colleague created two indices but by a mistype in the CLI he ended up creating two indices with the AWS url. So both are in the following format: search-somerandompartternhere-eu-central-666.es.amazonaws.com…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1476)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1478)
