# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1576

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1577

---

## [Edge Ngram Analzer with tokenchars "letter" "digit" and "-"](https://discuss.elastic.co/t/edge-ngram-analzer-with-tokenchars-letter-digit-and/145043)

<div class="topic-metadata">

**Author:** [@borstelmahlsdorf](https://discuss.elastic.co/u/borstelmahlsdorf)\
**Replies:** 0\
**Last updated:** [August 19, 2018, 9:49am UTC](https://discuss.elastic.co/t/edge-ngram-analzer-with-tokenchars-letter-digit-and/145043 "2018-08-19T09:49:26Z")

</div>

i try to create a edge-ngram analyzer for "Letter" "digit" and "-" and found no solution here for the Documentation "settings": { "analysis": { "analyzer": { "my\_analyzer": { "tokenizer": "my\_tokenizer" } }, "to…

---

## [Monitor network using the elasticstack](https://discuss.elastic.co/t/monitor-network-using-the-elasticstack/144959)

<div class="topic-metadata">

**Author:** [@LSG](https://discuss.elastic.co/u/LSG)\
**Replies:** 1\
**Last updated:** [August 19, 2018, 9:38am UTC](https://discuss.elastic.co/t/monitor-network-using-the-elasticstack/144959 "2018-08-19T09:38:20Z")

</div>

Hi, Newbie here... I would appreciate it if someone could assist. I watched about two hours of videos this morning but I have questions. Basically, I want to test by installing your open source elastic stack with Elasti…

---

## [Ids Query is slow in 2b docs](https://discuss.elastic.co/t/ids-query-is-slow-in-2b-docs/145032)

<div class="topic-metadata">

**Author:** [@chzyer](https://discuss.elastic.co/u/chzyer)\
**Replies:** 1\
**Last updated:** [August 19, 2018, 8:10am UTC](https://discuss.elastic.co/t/ids-query-is-slow-in-2b-docs/145032 "2018-08-19T08:10:09Z")

</div>

Version: 6.2.4 Documents: 1979484267 Shards: 30 in 30 hosts Document sample: { "goods\_id": 2466330584, "cate\_id": 6247, "property\_value\_ids": \[\] } What we want to do is query specified …

---

## [Include Missing Field in REST API](https://discuss.elastic.co/t/include-missing-field-in-rest-api/145036)

<div class="topic-metadata">

**Author:** [@Sivaprakash\_Shanmuga](https://discuss.elastic.co/u/Sivaprakash_Shanmuga)\
**Replies:** 0\
**Last updated:** [August 19, 2018, 6:54am UTC](https://discuss.elastic.co/t/include-missing-field-in-rest-api/145036 "2018-08-19T06:54:22Z")

</div>

Hi I want to write a Range Query (Java High Level REST API) to retrieve records with in Range and also records with Missing Field (Records which doesnt have Price field itself or with NULL values) QueryBuilder rangeQu…

---

## [Kibana/ES Discover: failed to parse date field \[2018-08-13T14:44:21.253\] with format \[date\_time\]](https://discuss.elastic.co/t/kibana-es-discover-failed-to-parse-date-field-2018-08-13t1421-253-with-format-date-time/145027)

<div class="topic-metadata">

**Author:** [@rkalluri](https://discuss.elastic.co/u/rkalluri)\
**Replies:** 1\
**Last updated:** [August 19, 2018, 6:09am UTC](https://discuss.elastic.co/t/kibana-es-discover-failed-to-parse-date-field-2018-08-13t1421-253-with-format-date-time/145027 "2018-08-19T06:09:24Z")

</div>

I am getting an exception trying to filter on a date\_time field in Kibana. Discover: failed to parse date field \[2018-08-13T14:44:21.253\] with format ModificationTimestamp has the following timestamp: "ModificationTi…

---

## [Curator Failed to verify all nodes have repository access](https://discuss.elastic.co/t/curator-failed-to-verify-all-nodes-have-repository-access/144953)

<div class="topic-metadata">

**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\
**Replies:** 1\
**Last updated:** [August 17, 2018, 7:45pm UTC](https://discuss.elastic.co/t/curator-failed-to-verify-all-nodes-have-repository-access/144953 "2018-08-17T19:45:18Z")

</div>

Hello community, Curator stopped working after upgrading ELK stack from 6.2 to 6.3. Here is the error I am getting, 2018-08-17 18:54:34,115 DEBUG curator.utils parse\_date\_pattern:1349 Fully rendered n…

---

## [Question regarding elasticsearch-py](https://discuss.elastic.co/t/question-regarding-elasticsearch-py/144972)

<div class="topic-metadata">

**Author:** [@siennastudio](https://discuss.elastic.co/u/siennastudio)\
**Replies:** 0\
**Last updated:** [August 17, 2018, 10:19pm UTC](https://discuss.elastic.co/t/question-regarding-elasticsearch-py/144972 "2018-08-17T22:19:19Z")

</div>

Hi elasticsearch-py is a very helpful tool, I'm wondering if there is a way for it to dump out some of my api calls. Like for example, I can write a script to add documents to ES index, but I'd like to keep a copy of t…

---

## [Autogenerate timespace field when each index entry is created in elastic search](https://discuss.elastic.co/t/autogenerate-timespace-field-when-each-index-entry-is-created-in-elastic-search/144969)

<div class="topic-metadata">

**Author:** [@preddy75](https://discuss.elastic.co/u/preddy75)\
**Replies:** 4\
**Last updated:** [August 17, 2018, 9:59pm UTC](https://discuss.elastic.co/t/autogenerate-timespace-field-when-each-index-entry-is-created-in-elastic-search/144969 "2018-08-17T21:59:35Z")

</div>

I am trying to crudely measure latency in ELK env's. I cannot install xpack, etc. What will help me greatly is if I can config elastic search to autogenerate a timestamp field when it creates the index entry. I have done…

---

## [Cannot launch elasticsearch, Exception in thread "main" java.security.spec.InvalidKeySpecException: Could not generate secret key](https://discuss.elastic.co/t/cannot-launch-elasticsearch-exception-in-thread-main-java-security-spec-invalidkeyspecexception-could-not-generate-secret-key/144952)

<div class="topic-metadata">

**Author:** [@Edw](https://discuss.elastic.co/u/Edw)\
**Replies:** 1\
**Last updated:** [August 17, 2018, 9:00pm UTC](https://discuss.elastic.co/t/cannot-launch-elasticsearch-exception-in-thread-main-java-security-spec-invalidkeyspecexception-could-not-generate-secret-key/144952 "2018-08-17T21:00:34Z")

</div>

Prior to executing ./elasticsearch, I attempt to create a keystore, but get the below error /elasticsearch-keystore create Exception in thread "main" java.security.spec.InvalidKeySpecException: Could not generate secre…

---

## [Ways to modify incoming search request with elastic search plugin approach](https://discuss.elastic.co/t/ways-to-modify-incoming-search-request-with-elastic-search-plugin-approach/144960)

<div class="topic-metadata">

**Author:** [@ravi432](https://discuss.elastic.co/u/ravi432)\
**Replies:** 0\
**Last updated:** [August 17, 2018, 8:54pm UTC](https://discuss.elastic.co/t/ways-to-modify-incoming-search-request-with-elastic-search-plugin-approach/144960 "2018-08-17T20:54:43Z")

</div>

I am in need to create a plugin which should take incoming search request and some filters. So is there a way to do it without adding new endpoint?

---

## [Issue connecting google saml with es stack](https://discuss.elastic.co/t/issue-connecting-google-saml-with-es-stack/144791)

<div class="topic-metadata">

**Author:** [@ashok\_Bellur](https://discuss.elastic.co/u/ashok_Bellur)\
**Replies:** 5\
**Last updated:** [August 17, 2018, 8:16pm UTC](https://discuss.elastic.co/t/issue-connecting-google-saml-with-es-stack/144791 "2018-08-17T20:16:12Z")

</div>

Hello, I had been trying to get Kibana to work with SAML authentication, but with no luck. \[2018-08-16T21:54:02,824\]\[WARN \]\[o.e.x.s.a.AuthenticationService\] \[ip-x-x-x-x-ip-x-x-x-x.ec2.internal\] Authentication to realm …

---

## [Hive to elastic :- EsHadoopNoNodesLeftException](https://discuss.elastic.co/t/hive-to-elastic-eshadoopnonodesleftexception/144375)

<div class="topic-metadata">

**Author:** [@Amandeep\_Singh1](https://discuss.elastic.co/u/Amandeep_Singh1)\
**Replies:** 1\
**Last updated:** [August 17, 2018, 8:14pm UTC](https://discuss.elastic.co/t/hive-to-elastic-eshadoopnonodesleftexception/144375 "2018-08-17T20:14:31Z")

</div>

Trying to connect HIve to elastic added elasticsearch-hadoop-6.3.2.jar elasticsearch-hadoop-6.3.2-javadoc.jar elasticsearch-hadoop-6.3.2-sources.jar to/usr/lib/hive/auxlib The query for creating the table. CREATE E…

---

## [Not able to read from elasticsearch from spark?](https://discuss.elastic.co/t/not-able-to-read-from-elasticsearch-from-spark/144851)

<div class="topic-metadata">

**Author:** [@sheryl](https://discuss.elastic.co/u/sheryl)\
**Replies:** 1\
**Last updated:** [August 17, 2018, 8:08pm UTC](https://discuss.elastic.co/t/not-able-to-read-from-elasticsearch-from-spark/144851 "2018-08-17T20:08:37Z")

</div>

using logstash i have ingested file into elastic search with index/type .. car/soldcars now for practising i want to read that csv file from spark using scala code. ;val spark= SparkSession.builder.master("local").appN…

---

## [How to return a list of words that matched a query](https://discuss.elastic.co/t/how-to-return-a-list-of-words-that-matched-a-query/144947)

<div class="topic-metadata">

**Author:** [@mgrishaber](https://discuss.elastic.co/u/mgrishaber)\
**Replies:** 0\
**Last updated:** [August 17, 2018, 6:51pm UTC](https://discuss.elastic.co/t/how-to-return-a-list-of-words-that-matched-a-query/144947 "2018-08-17T18:51:50Z")

</div>

I am looking for a way to return a list of words that matched my search query. Rather than use the Highlight feature, which returns marked up text, I just want a list of the words that were found in the indexed document…

---

## [Unable to setup SSL/TLS for cross cluster search or 9300 port](https://discuss.elastic.co/t/unable-to-setup-ssl-tls-for-cross-cluster-search-or-9300-port/144940)

<div class="topic-metadata">

**Author:** [@siva-epari](https://discuss.elastic.co/u/siva-epari)\
**Replies:** 0\
**Last updated:** [August 17, 2018, 5:41pm UTC](https://discuss.elastic.co/t/unable-to-setup-ssl-tls-for-cross-cluster-search-or-9300-port/144940 "2018-08-17T17:41:07Z")

</div>

Following is my elasticsearch main instance(172.x.x.2) config: search: remote: cluster\_1: seeds: 172.x.x.1:9300 xpack.ssl.keystore.path: certs/ELK1.p12 xpack.ssl.truststore.path: certs/ELK1.p12 xpack.securit…

---

## [Monitoring and Security Index Corrupted](https://discuss.elastic.co/t/monitoring-and-security-index-corrupted/144936)

<div class="topic-metadata">

**Author:** [@preksha\_patel](https://discuss.elastic.co/u/preksha_patel)\
**Replies:** 0\
**Last updated:** [August 17, 2018, 4:59pm UTC](https://discuss.elastic.co/t/monitoring-and-security-index-corrupted/144936 "2018-08-17T16:59:55Z")

</div>

Elasticsearch monitoring indices got corrupted and elasticsearch stopped working due to that. We tried to cleanup the corrupted indices but unable to.

---

## [Cannot start field with “0”](https://discuss.elastic.co/t/cannot-start-field-with-0/144650)

<div class="topic-metadata">

**Author:** [@jianwei](https://discuss.elastic.co/u/jianwei)\
**Replies:** 1\
**Last updated:** [August 17, 2018, 3:50pm UTC](https://discuss.elastic.co/t/cannot-start-field-with-0/144650 "2018-08-17T15:50:41Z")

</div>

003 and 222 are keyword type。

---

## [Document not retrieved in a search](https://discuss.elastic.co/t/document-not-retrieved-in-a-search/144913)

<div class="topic-metadata">

**Author:** [@RoxanaD](https://discuss.elastic.co/u/RoxanaD)\
**Replies:** 0\
**Last updated:** [August 17, 2018, 1:54pm UTC](https://discuss.elastic.co/t/document-not-retrieved-in-a-search/144913 "2018-08-17T13:54:56Z")

</div>

Hi All, I have an index against which I am running a search. It returns 10 documents, amongst then I was expecting to see a document, by it is not present in the hits set. However when I use \_explain with exactly the s…

---

## [Does Elasticsearch support URL encoded endpoints or did I found a bug?](https://discuss.elastic.co/t/does-elasticsearch-support-url-encoded-endpoints-or-did-i-found-a-bug/144764)

<div class="topic-metadata">

**Author:** [@Akram\_S](https://discuss.elastic.co/u/Akram_S)\
**Replies:** 0\
**Last updated:** [August 16, 2018, 6:04pm UTC](https://discuss.elastic.co/t/does-elasticsearch-support-url-encoded-endpoints-or-did-i-found-a-bug/144764 "2018-08-16T18:04:33Z")

</div>

Update 3: It turns out that this is not a bug and instead a misunderstanding on my part on how does URL-encoding work. The library I was using was encoding the full query params, including the "'?" and "=", however it …

---

## [Query to search on basis of multiple attribute](https://discuss.elastic.co/t/query-to-search-on-basis-of-multiple-attribute/144612)

<div class="topic-metadata">

**Author:** [@Nikhil\_Nambiar](https://discuss.elastic.co/u/Nikhil_Nambiar)\
**Replies:** 1\
**Last updated:** [August 17, 2018, 1:26pm UTC](https://discuss.elastic.co/t/query-to-search-on-basis-of-multiple-attribute/144612 "2018-08-17T13:26:12Z")

</div>

Hi, Can any one provide me the query which will fetch the document on basis of input provided. For ex . If I pass a person's name it should search document by name and when I pass a phone number it should search docume…

---

## [Alert on updating index](https://discuss.elastic.co/t/alert-on-updating-index/144907)

<div class="topic-metadata">

**Author:** [@Sai\_Jana\_Selvakumar](https://discuss.elastic.co/u/Sai_Jana_Selvakumar)\
**Replies:** 0\
**Last updated:** [August 17, 2018, 1:15pm UTC](https://discuss.elastic.co/t/alert-on-updating-index/144907 "2018-08-17T13:15:05Z")

</div>

Hi, Is there any ways to alert or notify if there is any new action(update/delete/insert) occurred on the index. Please suggest.

---

## [Multi\_match with Wildcard?](https://discuss.elastic.co/t/multi-match-with-wildcard/144883)

<div class="topic-metadata">

**Author:** [@Duncan\_Mein](https://discuss.elastic.co/u/Duncan_Mein)\
**Replies:** 1\
**Last updated:** [August 17, 2018, 1:14pm UTC](https://discuss.elastic.co/t/multi-match-with-wildcard/144883 "2018-08-17T13:14:00Z")

</div>

This query is working well for me but I wondered if it's possible to use wildcards on the search term? { "query": { "multi\_match" : { "query": "Jones Mein", "fields": \[ "surname", "person\_number" \], "fuzziness":…

---

## [ES Indices Snapshot to HDFS](https://discuss.elastic.co/t/es-indices-snapshot-to-hdfs/144770)

<div class="topic-metadata">

**Author:** [@nareshm\_399](https://discuss.elastic.co/u/nareshm_399)\
**Replies:** 3\
**Last updated:** [August 17, 2018, 12:51pm UTC](https://discuss.elastic.co/t/es-indices-snapshot-to-hdfs/144770 "2018-08-17T12:51:35Z")

</div>

Can Someone help me with the curator snapshot procedure using HDFS plug-in?

---

## [Sorting by relevance problem](https://discuss.elastic.co/t/sorting-by-relevance-problem/142329)

<div class="topic-metadata">

**Author:** [@Vidya\_Lalitha\_S\_K](https://discuss.elastic.co/u/Vidya_Lalitha_S_K)\
**Replies:** 1\
**Last updated:** [August 17, 2018, 12:50pm UTC](https://discuss.elastic.co/t/sorting-by-relevance-problem/142329 "2018-08-17T12:50:00Z")

</div>

I have a set of documents like \[Egg Duck Whole Fresh, Egg Goose Whole Fresh, Egg Quail Whole Fresh, Egg Whole Fresh\] and if I search egg fresh whole, its returning , \[Egg Duck Whole Fresh, Egg Whole Fresh, Egg Goose W…

---

## [Not getting search result after restoring index](https://discuss.elastic.co/t/not-getting-search-result-after-restoring-index/144849)

<div class="topic-metadata">

**Author:** [@Sakthi\_Krishnan](https://discuss.elastic.co/u/Sakthi_Krishnan)\
**Replies:** 6\
**Last updated:** [August 17, 2018, 12:18pm UTC](https://discuss.elastic.co/t/not-getting-search-result-after-restoring-index/144849 "2018-08-17T12:18:17Z")

</div>

I restored old index which I archived last week. The archive was success but I'm still not getting the results for the dates for which I restored the index. Get \_cat/indices?v&s=store.size - shows all index in green aft…

---

## [Highlighting leads to html tags overlap](https://discuss.elastic.co/t/highlighting-leads-to-html-tags-overlap/144880)

<div class="topic-metadata">

**Author:** [@7alcon](https://discuss.elastic.co/u/7alcon)\
**Replies:** 4\
**Last updated:** [August 17, 2018, 12:02pm UTC](https://discuss.elastic.co/t/highlighting-leads-to-html-tags-overlap/144880 "2018-08-17T12:02:00Z")

</div>

We are dealing with html content storing in Elasticsearch and our task is to search and highlight matched text. Issue occurs with text like this -\> \<span\>Hello\</span\>World and search by HelloWorld word which leads to th…

---

## [Port Numbers ES logstash](https://discuss.elastic.co/t/port-numbers-es-logstash/144079)

<div class="topic-metadata">

**Author:** [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)\
**Replies:** 4\
**Last updated:** [August 17, 2018, 11:38am UTC](https://discuss.elastic.co/t/port-numbers-es-logstash/144079 "2018-08-17T11:38:02Z")

</div>

Hi @dadoonet, I have emailed because the the thread was closed. No issues of asking on the ocmmon forum. This query is regarding port numbers for Elasticsearch. YOu have mentioned 9200 is for rest and 9300 is for node …

---

## [Docker - API not found](https://discuss.elastic.co/t/docker-api-not-found/144865)

<div class="topic-metadata">

**Author:** [@asallemi](https://discuss.elastic.co/u/asallemi)\
**Replies:** 0\
**Last updated:** [August 17, 2018, 9:40am UTC](https://discuss.elastic.co/t/docker-api-not-found/144865 "2018-08-17T09:40:27Z")

</div>

Hello, I am using ES (6.2.4) in Docker and I have a Kibana application which manage the index. My app works perfectly in my host but in the Docker container, it doesn't work. It looks like the API that I created is not …

---

## [Adding Fuzziness to Bool Query](https://discuss.elastic.co/t/adding-fuzziness-to-bool-query/144843)

<div class="topic-metadata">

**Author:** [@Duncan\_Mein](https://discuss.elastic.co/u/Duncan_Mein)\
**Replies:** 3\
**Last updated:** [August 17, 2018, 8:59am UTC](https://discuss.elastic.co/t/adding-fuzziness-to-bool-query/144843 "2018-08-17T08:59:37Z")

</div>

Hi. I am very new to ElasticSearch so please be gentle :slight\_smile: I have the following bool query which is working well for me: "query":{ "bool": { "should": \[ {"match": {"surname" : "JONES"} }, {"match": { …

---

## [Failed to parse value\[1\] as only \[true\] or \[false\] are allowed](https://discuss.elastic.co/t/failed-to-parse-value-1-as-only-true-or-false-are-allowed/144654)

<div class="topic-metadata">

**Author:** [@Victor\_Sava](https://discuss.elastic.co/u/Victor_Sava)\
**Replies:** 2\
**Last updated:** [August 17, 2018, 11:35am UTC](https://discuss.elastic.co/t/failed-to-parse-value-1-as-only-true-or-false-are-allowed/144654 "2018-08-17T11:35:32Z")

</div>

{"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"Failed to parse value \[1\] as only \[true\] or \[false\] are allowed."}\],"type":"illegal\_argument\_exception","reason":"Failed to parse value \[1\] as only \[…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1575)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1577)
