# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1497 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1498 --- ## [How to create an index template that matches some indexes but not others?](https://discuss.elastic.co/t/how-to-create-an-index-template-that-matches-some-indexes-but-not-others/155067)
**Author:** [@aaronloesattv](https://discuss.elastic.co/u/aaronloesattv)\ **Replies:** 0\ **Last updated:** [November 1, 2018, 7:29pm UTC](https://discuss.elastic.co/t/how-to-create-an-index-template-that-matches-some-indexes-but-not-others/155067 "2018-11-01T19:29:43Z")
I'm trying to create an index template that matches all indexes except those that start with a period. I've tried the following but none work. "index\_patterns": \[ "\*", "-.\*" \] - this is accepted by the create API but st… --- ## [Suggestion Queries with numeric](https://discuss.elastic.co/t/suggestion-queries-with-numeric/155068)
**Author:** [@ebeyrent](https://discuss.elastic.co/u/ebeyrent)\ **Replies:** 0\ **Last updated:** [November 1, 2018, 7:30pm UTC](https://discuss.elastic.co/t/suggestion-queries-with-numeric/155068 "2018-11-01T19:30:06Z")
Issue: Hi there! I have added a completion field to my index mapping, and when I index my documents, they look like this: { "\_index": "elasticsearch\_index\_chemdb\_chemicals", "\_type": "chemicals", "\_id": "entity:… --- ## [Unable to install Elasticsearch - problem with public key](https://discuss.elastic.co/t/unable-to-install-elasticsearch-problem-with-public-key/154907)
**Author:** [@khalid\_iqbal](https://discuss.elastic.co/u/khalid_iqbal)\ **Replies:** 3\ **Last updated:** [November 1, 2018, 7:07pm UTC](https://discuss.elastic.co/t/unable-to-install-elasticsearch-problem-with-public-key/154907 "2018-11-01T19:07:42Z")
Dear Elastic Community, I installed Ubuntu on my PC through virtual Box and I am trying to install / explore Elastic. When in entered following command: sudo apt-get update && sudo apt-get install elasticsearch I got … --- ## [Primary Shards Uneven Distribution {it is a problem}](https://discuss.elastic.co/t/primary-shards-uneven-distribution-it-is-a-problem/155064)
**Author:** [@dqirvin](https://discuss.elastic.co/u/dqirvin)\ **Replies:** 0\ **Last updated:** [November 1, 2018, 6:53pm UTC](https://discuss.elastic.co/t/primary-shards-uneven-distribution-it-is-a-problem/155064 "2018-11-01T18:53:55Z")
It is known in the community that this uneven distribution of primary nodes happen, but it seems the communication seems to be it does not matter. This is a problem for the following reasons: Indexing must happen o… --- ## [Building Elasticsearch with Eclipse](https://discuss.elastic.co/t/building-elasticsearch-with-eclipse/155063)
**Author:** [@keithag](https://discuss.elastic.co/u/keithag)\ **Replies:** 0\ **Last updated:** [November 1, 2018, 6:43pm UTC](https://discuss.elastic.co/t/building-elasticsearch-with-eclipse/155063 "2018-11-01T18:43:21Z")
Hello, I'm trying to build Elasticsearch under Eclipse. I've followed the instructions found in CONTRIBUTING.md: I've run ./gradlew eclipse to configure the IDE I've increased heap to 2048 in eclipse.ini I've got Java… --- ## ["AND (null) AND" in query string](https://discuss.elastic.co/t/and-null-and-in-query-string/154247)
**Author:** [@jz1603](https://discuss.elastic.co/u/jz1603)\ **Replies:** 2\ **Last updated:** [November 1, 2018, 5:52pm UTC](https://discuss.elastic.co/t/and-null-and-in-query-string/154247 "2018-11-01T17:52:11Z")
Hi there, We have recently upgraded from Elasticsearch 1.6 to 6.2, and a query string that used to work have stopped working. the query looks like this: { "query": { "bool": { "must": { "query\_string": { "default… --- ## [How to Index Words Actual form and Modified form into Elastic Search](https://discuss.elastic.co/t/how-to-index-words-actual-form-and-modified-form-into-elastic-search/154751)
**Author:** [@Karthik.krishnan](https://discuss.elastic.co/u/Karthik.krishnan)\ **Replies:** 3\ **Last updated:** [November 1, 2018, 5:46pm UTC](https://discuss.elastic.co/t/how-to-index-words-actual-form-and-modified-form-into-elastic-search/154751 "2018-11-01T17:46:21Z")
Hi Team, I want to index the words into elasticsearch with actual form and modified form. Example: The Term "F-35" want to index is "F35" and "F-35", when i search the text F35 or F-35 both should return the document. … --- ## [Cluster can't detect additional node](https://discuss.elastic.co/t/cluster-cant-detect-additional-node/155035)
**Author:** [@juiip](https://discuss.elastic.co/u/juiip)\ **Replies:** 1\ **Last updated:** [November 1, 2018, 5:40pm UTC](https://discuss.elastic.co/t/cluster-cant-detect-additional-node/155035 "2018-11-01T17:40:27Z")
I have an ES cluster (v 5.6.12) up and running in dev mode, config below: Node 1: node1address.com cluster.name: elastic-test node.name: "node-1" path.data: /path/to/data path.logs: /path/to/logs network.host: 127.0.0.… --- ## [Display selected autosuggested result first](https://discuss.elastic.co/t/display-selected-autosuggested-result-first/155009)
**Author:** [@Hemanth\_Gowda](https://discuss.elastic.co/u/Hemanth_Gowda)\ **Replies:** 0\ **Last updated:** [November 1, 2018, 12:19pm UTC](https://discuss.elastic.co/t/display-selected-autosuggested-result-first/155009 "2018-11-01T12:19:10Z")
Hi, I have autosuggested feature enabled for a field to get the suggestions from an index.I select a suggestion and the selected term is queried against the index.I need to display the selected suggested term document a… --- ## [Interacting with individual nodes in REST API integration tests using esplugin support](https://discuss.elastic.co/t/interacting-with-individual-nodes-in-rest-api-integration-tests-using-esplugin-support/152095)
**Author:** [@lukas\_vlcek](https://discuss.elastic.co/u/lukas_vlcek)\ **Replies:** 2\ **Last updated:** [November 1, 2018, 3:42pm UTC](https://discuss.elastic.co/t/interacting-with-individual-nodes-in-rest-api-integration-tests-using-esplugin-support/152095 "2018-11-01T15:42:48Z")
Hi, I am running integration tests using the REST API esplugin tooling and I want to make sure the do: operators are executed against specific node only. I am aware of the node-selector filter but I do not know how I c… --- ## [How to properly use asterisk with keywords\_pattern?](https://discuss.elastic.co/t/how-to-properly-use-asterisk-with-keywords-pattern/154706)
**Author:** [@7ca884569f2642e2c488](https://discuss.elastic.co/u/7ca884569f2642e2c488)\ **Replies:** 1\ **Last updated:** [November 1, 2018, 2:56pm UTC](https://discuss.elastic.co/t/how-to-properly-use-asterisk-with-keywords-pattern/154706 "2018-11-01T14:56:49Z")
I want to use this but I can't understand how to write valid keywords\_pattern. I modify code from example like this { "settings": { "analysis": { "analyzer": { "protect\_cats": { "type": "c… --- ## [Kibana filter wildcard](https://discuss.elastic.co/t/kibana-filter-wildcard/155030)
**Author:** [@Vijayakumar\_Kannan](https://discuss.elastic.co/u/Vijayakumar_Kannan)\ **Replies:** 0\ **Last updated:** [November 1, 2018, 2:13pm UTC](https://discuss.elastic.co/t/kibana-filter-wildcard/155030 "2018-11-01T14:13:07Z")
i want to filter the text that ends with $ symbol. Example test bob$ rob$ mark i want to query only the text ending with $ --- ## [Discovery zen ping and password protected ES](https://discuss.elastic.co/t/discovery-zen-ping-and-password-protected-es/154483)
**Author:** [@wheelq](https://discuss.elastic.co/u/wheelq)\ **Replies:** 13\ **Last updated:** [November 1, 2018, 1:44pm UTC](https://discuss.elastic.co/t/discovery-zen-ping-and-password-protected-es/154483 "2018-11-01T13:44:59Z")
Any idea how does this work with password protected ES nodes? I'm just about to test it but I need to make backups first :wink: --- ## [Elasticsearch: Parameter "include" isn't case insensitive](https://discuss.elastic.co/t/elasticsearch-parameter-include-isnt-case-insensitive/155015)
**Author:** [@Alexandra1](https://discuss.elastic.co/u/Alexandra1)\ **Replies:** 3\ **Last updated:** [November 1, 2018, 1:41pm UTC](https://discuss.elastic.co/t/elasticsearch-parameter-include-isnt-case-insensitive/155015 "2018-11-01T13:41:35Z")
Hello, How can I configure the index in elasticsearch in order to make the parameter "include" from the aggregation to be case insensitive? I have this index: PUT index { "settings": { "analysis": { "analyzer": { … --- ## [HELP - 2nd node not joining cluster](https://discuss.elastic.co/t/help-2nd-node-not-joining-cluster/155013)
**Author:** [@lowdmt](https://discuss.elastic.co/u/lowdmt)\ **Replies:** 3\ **Last updated:** [November 1, 2018, 1:30pm UTC](https://discuss.elastic.co/t/help-2nd-node-not-joining-cluster/155013 "2018-11-01T13:30:43Z")
Hi, I have a single node elastic, logstash and kibana RedHat device. All is well. Working as expected. I'm trying to add a 2nd node but having issues connecting the 2nd node to the cluster. Both nodes are in the same … --- ## [Redis-search as a competing product?](https://discuss.elastic.co/t/redis-search-as-a-competing-product/154872)
**Author:** [@Justin\_Treher](https://discuss.elastic.co/u/Justin_Treher)\ **Replies:** 4\ **Last updated:** [November 1, 2018, 1:29pm UTC](https://discuss.elastic.co/t/redis-search-as-a-competing-product/154872 "2018-11-01T13:29:24Z")
Have you guys (Team Elastic) been following the development of redis search? I've been watching a number of their presentations for redis enterprise to solve geographically distributed multi-master writes and some of th… --- ## [Does elastic support wildcard for fieldnames in sort filter](https://discuss.elastic.co/t/does-elastic-support-wildcard-for-fieldnames-in-sort-filter/154893)
**Author:** [@Raghavan\_TV](https://discuss.elastic.co/u/Raghavan_TV)\ **Replies:** 3\ **Last updated:** [November 1, 2018, 1:12pm UTC](https://discuss.elastic.co/t/does-elastic-support-wildcard-for-fieldnames-in-sort-filter/154893 "2018-11-01T13:12:13Z")
This is our sample document that is indexed { "details": { "orderID": "O1", "createdon": "2019-02-23", "status": "NEW" … --- ## [Cluster stopped ingesting, with "failed to obtain in-memory shard lock"](https://discuss.elastic.co/t/cluster-stopped-ingesting-with-failed-to-obtain-in-memory-shard-lock/155016)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 3\ **Last updated:** [November 1, 2018, 12:59pm UTC](https://discuss.elastic.co/t/cluster-stopped-ingesting-with-failed-to-obtain-in-memory-shard-lock/155016 "2018-11-01T12:59:50Z")
My cluster logged some "failed to obtain in-memory shard lock" messages over a period of the night, finishing at around 04:33 this morning, and there is no data in most of the indexes after 04:33, ie it has stopped index… --- ## [One master for multiple clusters](https://discuss.elastic.co/t/one-master-for-multiple-clusters/155012)
**Author:** [@wheelq](https://discuss.elastic.co/u/wheelq)\ **Replies:** 3\ **Last updated:** [November 1, 2018, 12:48pm UTC](https://discuss.elastic.co/t/one-master-for-multiple-clusters/155012 "2018-11-01T12:48:04Z")
Can master server (or 2, 3) hanble more than one cluster? I am not asking whether it is advisable. Just if it's possible, can it handle such architecture? Of course I will test this, but this will take time as I have t… --- ## [Understanding snapshot and restore](https://discuss.elastic.co/t/understanding-snapshot-and-restore/154858)
**Author:** [@juiip](https://discuss.elastic.co/u/juiip)\ **Replies:** 4\ **Last updated:** [November 1, 2018, 12:49pm UTC](https://discuss.elastic.co/t/understanding-snapshot-and-restore/154858 "2018-11-01T12:49:16Z")
Hi, I'm figuring out why taking a snapshot of my cluster is necessary and how to do it: My understanding is that each node within the cluster needs access to the repository location - and to do this I will need to moun… --- ## [Elasticsearch cluster snapshot failed with PARTIAL](https://discuss.elastic.co/t/elasticsearch-cluster-snapshot-failed-with-partial/154977)
**Author:** [@tharu85](https://discuss.elastic.co/u/tharu85)\ **Replies:** 1\ **Last updated:** [November 1, 2018, 12:00pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-snapshot-failed-with-partial/154977 "2018-11-01T12:00:09Z")
I used elasticsearch-curator and python script to create snapshot. Script worked fine few months and after some issue had on one Elasticsearch node there were some unassigned shards in the ES cluster. After the observat… --- ## [\_score inside function is NaN](https://discuss.elastic.co/t/score-inside-function-is-nan/154847)
**Author:** [@saturn](https://discuss.elastic.co/u/saturn)\ **Replies:** 6\ **Last updated:** [November 1, 2018, 11:59am UTC](https://discuss.elastic.co/t/score-inside-function-is-nan/154847 "2018-11-01T11:59:11Z")
I have a simple query: { "size": 10, "\_source": "email\_id", "query": { "function\_score": { "query": { "bool": { "must": { "match\_phrase": { "message": { … --- ## [Does "Norms": false work with Match, Match Phrase, Fuzzy and Wildcard Searches?](https://discuss.elastic.co/t/does-norms-false-work-with-match-match-phrase-fuzzy-and-wildcard-searches/154995)
**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\ **Replies:** 1\ **Last updated:** [November 1, 2018, 11:07am UTC](https://discuss.elastic.co/t/does-norms-false-work-with-match-match-phrase-fuzzy-and-wildcard-searches/154995 "2018-11-01T11:07:28Z")
I am creating an index mapping and have questions on norms = false. There are fields in the index which need to be searched with match phrase, wildcard search and match. These fields do not contribute to the relevance … --- ## [Mapping definition for \[message\] has unsupported parameters: \[ignore\_above : 1024\]](https://discuss.elastic.co/t/mapping-definition-for-message-has-unsupported-parameters-ignore-above-1024/154455)
**Author:** [@Kieren\_Johnstone](https://discuss.elastic.co/u/Kieren_Johnstone)\ **Replies:** 7\ **Last updated:** [November 1, 2018, 10:46am UTC](https://discuss.elastic.co/t/mapping-definition-for-message-has-unsupported-parameters-ignore-above-1024/154455 "2018-11-01T10:46:10Z")
It's a new week, and seemingly randomly, this week's log index is failing to be created. Logged from filebeat is: {"type":"mapper\_parsing\_exception","reason":"Failed to parse mapping \[doc\]: Mapping definition for \[mess… --- ## [Ntopng with Elasticsearch](https://discuss.elastic.co/t/ntopng-with-elasticsearch/154989)
**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\ **Replies:** 0\ **Last updated:** [November 1, 2018, 10:13am UTC](https://discuss.elastic.co/t/ntopng-with-elasticsearch/154989 "2018-11-01T10:13:43Z")
Hi All, I just launched my first Graylog server, all working fine. Now, I am thinking of joining the logs from ntopng to Graylog. Would this be possible? If so, could somebody guide my in the right direction? I'm fair… --- ## [Rally failed for downloading data file from aws S3](https://discuss.elastic.co/t/rally-failed-for-downloading-data-file-from-aws-s3/154856)
**Author:** [@mahesh\_varak89](https://discuss.elastic.co/u/mahesh_varak89)\ **Replies:** 5\ **Last updated:** [November 1, 2018, 9:57am UTC](https://discuss.elastic.co/t/rally-failed-for-downloading-data-file-from-aws-s3/154856 "2018-11-01T09:57:36Z")
It reports an error as following : \*\*\*\*\*\* Use this pipeline only if you are aware of the tradeoffs. \*\*\*\*\*\* \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* Watch your step! \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* \[INFO\] Racing on track \[company\], … --- ## ['gc' log lines from Elasticseaarch](https://discuss.elastic.co/t/gc-log-lines-from-elasticseaarch/154775)
**Author:** [@af615dbd55cac2cacf32](https://discuss.elastic.co/u/af615dbd55cac2cacf32)\ **Replies:** 3\ **Last updated:** [November 1, 2018, 9:45am UTC](https://discuss.elastic.co/t/gc-log-lines-from-elasticseaarch/154775 "2018-11-01T09:45:00Z")
hello, i found below lines from Elasticsearch nodes (WARM). it seemed the nodes were unable to be reached from Master nodewhen below lines were logged. Can anyone please explain "why" AND "which case" below lines are l… --- ## [Facing MapperParsingException\[failed to parse \[date\]\]](https://discuss.elastic.co/t/facing-mapperparsingexception-failed-to-parse-date/154970)
**Author:** [@johnrabi](https://discuss.elastic.co/u/johnrabi)\ **Replies:** 2\ **Last updated:** [November 1, 2018, 9:40am UTC](https://discuss.elastic.co/t/facing-mapperparsingexception-failed-to-parse-date/154970 "2018-11-01T09:40:17Z")
Hi Team , can anyone help me to resolve this issue ? while converting milliseconds to date facing this exception while indexing time , Date dates = new Date(1532390400000L); Date convertedDate = new SimpleDateFormat(… --- ## ["No monitoring data found" error on Kibana](https://discuss.elastic.co/t/no-monitoring-data-found-error-on-kibana/154749)
**Author:** [@af615dbd55cac2cacf32](https://discuss.elastic.co/u/af615dbd55cac2cacf32)\ **Replies:** 3\ **Last updated:** [November 1, 2018, 9:39am UTC](https://discuss.elastic.co/t/no-monitoring-data-found-error-on-kibana/154749 "2018-11-01T09:39:07Z")
hello, my Kibana worked without issues for a while but started displaying "No monitoring data found" error today, then Status turned to RED on Kibana. I executed \_cluster/health command on the servers, but all status we… --- ## [Elastic Pagination](https://discuss.elastic.co/t/elastic-pagination/154976)
**Author:** [@MaralErdene\_Tumursuh](https://discuss.elastic.co/u/MaralErdene_Tumursuh)\ **Replies:** 4\ **Last updated:** [November 1, 2018, 9:35am UTC](https://discuss.elastic.co/t/elastic-pagination/154976 "2018-11-01T09:35:19Z")
Hello Guys, I'm using elastic search with java. My elastic query is returning 103 results, which means that if I'm paging through them (with 25 results per page) I should have 4 pages: 4 full pages and 1 page with a 3 r… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1496) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1498)