# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1929 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1930 --- ## [Query string different score for similar document](https://discuss.elastic.co/t/query-string-different-score-for-similar-document/102243)
**Author:** [@Prashant\_Agrawal](https://discuss.elastic.co/u/Prashant_Agrawal)\ **Replies:** 1\ **Last updated:** [October 6, 2017, 7:01am UTC](https://discuss.elastic.co/t/query-string-different-score-for-similar-document/102243 "2017-10-06T07:01:17Z")
Hi All, I was doing some analysis with query string query and what I have come across is that for the same / Similar query I am getting different scores. See the details as below : POST prashant/test { "title" : "Dow… --- ## [Build NEST SearchDescriptor with Boost for Contract Price](https://discuss.elastic.co/t/build-nest-searchdescriptor-with-boost-for-contract-price/102307)
**Author:** [@ghohenstatt](https://discuss.elastic.co/u/ghohenstatt)\ **Replies:** 1\ **Last updated:** [October 6, 2017, 6:59am UTC](https://discuss.elastic.co/t/build-nest-searchdescriptor-with-boost-for-contract-price/102307 "2017-10-06T06:59:43Z")
Hello, I am tasked with an enhancement to a product search. The technology stack is NEST version 1.0.0.0 integrated with Visual Studio 2017 and running Elastic version 2.0. Sorry so old! I've been asked to ensure tha… --- ## [Elastic search Msi on Server 2016 service cant start](https://discuss.elastic.co/t/elastic-search-msi-on-server-2016-service-cant-start/102257)
**Author:** [@Timanator](https://discuss.elastic.co/u/Timanator)\ **Replies:** 1\ **Last updated:** [October 6, 2017, 6:26am UTC](https://discuss.elastic.co/t/elastic-search-msi-on-server-2016-service-cant-start/102257 "2017-10-06T06:26:03Z")
Hey Guys Just did a install on a server 2016 box, and the service wont start. Generic error 1067, process terminated unexpectedly. This is the windows event log: First, Application: elasticsearch.exe Framework Versi… --- ## [Security after installing Xpack](https://discuss.elastic.co/t/security-after-installing-xpack/102554)
**Author:** [@Naveedyousaf03](https://discuss.elastic.co/u/Naveedyousaf03)\ **Replies:** 1\ **Last updated:** [October 6, 2017, 6:08am UTC](https://discuss.elastic.co/t/security-after-installing-xpack/102554 "2017-10-06T06:08:49Z")
I have installed Xpack and followed all the steps mentioned in the document here but when i run http://localhost:9200/\_cat/indices?v it asks for credentials but my NTLogin or CORP domain credentials are not working the … --- ## [ES 5.6.2 crashes with SIGABRT + Java VM crashes with SIGSEGV](https://discuss.elastic.co/t/es-5-6-2-crashes-with-sigabrt-java-vm-crashes-with-sigsegv/102551)
**Author:** [@mguiwin](https://discuss.elastic.co/u/mguiwin)\ **Replies:** 1\ **Last updated:** [October 6, 2017, 5:44am UTC](https://discuss.elastic.co/t/es-5-6-2-crashes-with-sigabrt-java-vm-crashes-with-sigsegv/102551 "2017-10-06T05:44:24Z")
Hi, My setup: cluster of 3 nodes on dedicated Ubuntu 16.04.3 LTS VMs on Azure ES version: 5.6.2 JRE: 1.8.0\_144-b01 (Oracle) Java VM: Java HotSpot(TM) 64-Bit Server VM (25.144-b01 mixed mode linux-amd64 ) My problem: … --- ## [Elastic Search and Storage Area Network](https://discuss.elastic.co/t/elastic-search-and-storage-area-network/102937)
**Author:** [@Sudhindra\_Magadi](https://discuss.elastic.co/u/Sudhindra_Magadi)\ **Replies:** 3\ **Last updated:** [October 6, 2017, 5:26am UTC](https://discuss.elastic.co/t/elastic-search-and-storage-area-network/102937 "2017-10-06T05:26:29Z")
All, We have 3 ES servers and we would like to store the ES data files in a SAN instead of local storage .We can have 3 differnt LUNs presented to these 3 differnt severs. Please let us know if this work or there is a b… --- ## [ES 5.1 - Shard recovery stuck in INIT- IndexShardRelocatedException: Already relocated](https://discuss.elastic.co/t/es-5-1-shard-recovery-stuck-in-init-indexshardrelocatedexception-already-relocated/102782)
**Author:** [@Ankit\_Malpani](https://discuss.elastic.co/u/Ankit_Malpani)\ **Replies:** 1\ **Last updated:** [October 6, 2017, 4:43am UTC](https://discuss.elastic.co/t/es-5-1-shard-recovery-stuck-in-init-indexshardrelocatedexception-already-relocated/102782 "2017-10-06T04:43:29Z")
So I had a shard peer recovery stuck on ES 5.1 for 16 hours. \_recovery APIs showed this stuck on INIT state shards themselves were small ~3 MB Had plenty free space on source and destination nodes I noticed that both s… --- ## [How to update the index along with aliases and documents while restoring from dump in elastic search?](https://discuss.elastic.co/t/how-to-update-the-index-along-with-aliases-and-documents-while-restoring-from-dump-in-elastic-search/102792)
**Author:** [@happy0088](https://discuss.elastic.co/u/happy0088)\ **Replies:** 1\ **Last updated:** [October 6, 2017, 4:39am UTC](https://discuss.elastic.co/t/how-to-update-the-index-along-with-aliases-and-documents-while-restoring-from-dump-in-elastic-search/102792 "2017-10-06T04:39:59Z")
HI , I need to modify and restore an index in elastic search alongwith the alias and documents inside it from the dump which is already present . I have tried the below one : POST /\_snapshot/my\_backup/snapshot\_1/\_resto… --- ## [About "Encryption at rest" using x-pack trial](https://discuss.elastic.co/t/about-encryption-at-rest-using-x-pack-trial/102931)
**Author:** [@KanakoNakai](https://discuss.elastic.co/u/KanakoNakai)\ **Replies:** 2\ **Last updated:** [October 6, 2017, 4:26am UTC](https://discuss.elastic.co/t/about-encryption-at-rest-using-x-pack-trial/102931 "2017-10-06T04:26:51Z")
we are planing to subscribe PLATINUM support, so I investigating security feature using x-pack trial. x-pack security provide "Encryption at rest support" but I could not find any kind of this setting information in Ela… --- ## [ELK Stack restrict access to some data](https://discuss.elastic.co/t/elk-stack-restrict-access-to-some-data/102687)
**Author:** [@asyakovlev](https://discuss.elastic.co/u/asyakovlev)\ **Replies:** 12\ **Last updated:** [October 6, 2017, 4:02am UTC](https://discuss.elastic.co/t/elk-stack-restrict-access-to-some-data/102687 "2017-10-06T04:02:41Z")
Now I'm touch a elk stack for a log collecting, also install xpack to kibana and elasticsearch. How I can restrict access to some logs group (any hosts) for any people? For log collecting I'm using logstash, listen some … --- ## [Time range query on date field](https://discuss.elastic.co/t/time-range-query-on-date-field/102605)
**Author:** [@Vikas\_Mestry](https://discuss.elastic.co/u/Vikas_Mestry)\ **Replies:** 1\ **Last updated:** [October 6, 2017, 3:52am UTC](https://discuss.elastic.co/t/time-range-query-on-date-field/102605 "2017-10-06T03:52:26Z")
Hello, Is there a way to filter a date field (epoch\_mills) with time range without specifying the date e.g. I have a field "cpuusagetime" with value as 1483283988368, i would like to get all the documents which are wit… --- ## [Restore Snapshot from different cluster](https://discuss.elastic.co/t/restore-snapshot-from-different-cluster/102882)
**Author:** [@ParitoshBh](https://discuss.elastic.co/u/ParitoshBh)\ **Replies:** 1\ **Last updated:** [October 6, 2017, 1:25am UTC](https://discuss.elastic.co/t/restore-snapshot-from-different-cluster/102882 "2017-10-06T01:25:45Z")
An overview before discussing the problem, I have 2 clusters running, Cluster A and Cluster B. Cluster A is primarily for testing. It has 2 nodes, Indexer Node, and Search Node. The Indexer node is responsible for gener… --- ## [JEST Client for Elastic Search 5.6 or Java Rest client for ES 5.6](https://discuss.elastic.co/t/jest-client-for-elastic-search-5-6-or-java-rest-client-for-es-5-6/102910)
**Author:** [@kasi](https://discuss.elastic.co/u/kasi)\ **Replies:** 1\ **Last updated:** [October 5, 2017, 11:54pm UTC](https://discuss.elastic.co/t/jest-client-for-elastic-search-5-6-or-java-rest-client-for-es-5-6/102910 "2017-10-05T23:54:36Z")
What would be the compelling reason to move from JEST Client to using Java Rest client for ES 5.6 ? The way I see it JEST client offers a better wrapper for admin calls to manage index templates. Thanks, Kasi --- ## [How can I create (or get closest to create) a convex hull with geo aggregation](https://discuss.elastic.co/t/how-can-i-create-or-get-closest-to-create-a-convex-hull-with-geo-aggregation/102924)
**Author:** [@Maethorin](https://discuss.elastic.co/u/Maethorin)\ **Replies:** 0\ **Last updated:** [October 5, 2017, 11:52pm UTC](https://discuss.elastic.co/t/how-can-i-create-or-get-closest-to-create-a-convex-hull-with-geo-aggregation/102924 "2017-10-05T23:52:47Z")
Hello fellow searchers! I have an index with some millions geographic coordinates, each one representing agricultural soil information. I have 2-3 millions hectares of data in a resolution of 25 points per hectare. Wit… --- ## [Downgrade elasticsearch from v5.6.2 to 5.5.0](https://discuss.elastic.co/t/downgrade-elasticsearch-from-v5-6-2-to-5-5-0/102906)
**Author:** [@abhijat](https://discuss.elastic.co/u/abhijat)\ **Replies:** 2\ **Last updated:** [October 5, 2017, 11:49pm UTC](https://discuss.elastic.co/t/downgrade-elasticsearch-from-v5-6-2-to-5-5-0/102906 "2017-10-05T23:49:52Z")
Can I downgrade elasticsearch from v5.6.2 to 5.5.0? --- ## [Search returning deleted documents](https://discuss.elastic.co/t/search-returning-deleted-documents/102885)
**Author:** [@Daniel\_Drews](https://discuss.elastic.co/u/Daniel_Drews)\ **Replies:** 1\ **Last updated:** [October 5, 2017, 10:00pm UTC](https://discuss.elastic.co/t/search-returning-deleted-documents/102885 "2017-10-05T22:00:00Z")
Hi, After a bulk operation to delete some documents of my index an search operation returns the removed documents. And for some reason few seconds later the same search is executed and they don't came up. Im currently … --- ## [How to get frequency of a pattern](https://discuss.elastic.co/t/how-to-get-frequency-of-a-pattern/102912)
**Author:** [@Histell](https://discuss.elastic.co/u/Histell)\ **Replies:** 0\ **Last updated:** [October 5, 2017, 8:51pm UTC](https://discuss.elastic.co/t/how-to-get-frequency-of-a-pattern/102912 "2017-10-05T20:51:55Z")
Hi, I have documents like below. What I want is to get frequency of apple words(1 apple\_x, 2 apple\_y, 1 apple\_z). What is the best way for doing this. I get data from logstash by the way. Should I use add\_field filter … --- ## [Using ingest pipeline to parse two different log formats with multiple grok pattern](https://discuss.elastic.co/t/using-ingest-pipeline-to-parse-two-different-log-formats-with-multiple-grok-pattern/102908)
**Author:** [@hungl99](https://discuss.elastic.co/u/hungl99)\ **Replies:** 0\ **Last updated:** [October 5, 2017, 8:34pm UTC](https://discuss.elastic.co/t/using-ingest-pipeline-to-parse-two-different-log-formats-with-multiple-grok-pattern/102908 "2017-10-05T20:34:57Z")
I'm using ingest nodes with pipeline. My log lines basically has two different formats. Basically we want to add another field named "controller" and be able to index it. Sample log lines: 2017-10-04 18:23:42 ERROR \[34\]… --- ## [How to use elastic search without any nosql db ( Mongo ) and RDBMS (mysql)l,](https://discuss.elastic.co/t/how-to-use-elastic-search-without-any-nosql-db-mongo-and-rdbms-mysql-l/102876)
**Author:** [@sarveshtiw](https://discuss.elastic.co/u/sarveshtiw)\ **Replies:** 1\ **Last updated:** [October 5, 2017, 5:35pm UTC](https://discuss.elastic.co/t/how-to-use-elastic-search-without-any-nosql-db-mongo-and-rdbms-mysql-l/102876 "2017-10-05T17:35:57Z")
Hi All, Can you give me suggestions it is possible without any nosql and RDBMS database how to use elastic search for my enterprise application.? --- ## [Spark Connector performance issues - with start up time](https://discuss.elastic.co/t/spark-connector-performance-issues-with-start-up-time/102634)
**Author:** [@tranan](https://discuss.elastic.co/u/tranan)\ **Replies:** 5\ **Last updated:** [October 5, 2017, 5:17pm UTC](https://discuss.elastic.co/t/spark-connector-performance-issues-with-start-up-time/102634 "2017-10-05T17:17:20Z")
I am currently experiencing performance issues where I notice that the Elasticsearch Spark connector is stuck 10's of minutes warming / starting up without any tasks / jobs allocated. See screen shot. Any idea on what … --- ## [Exact match search with wildcard using query\_string not working](https://discuss.elastic.co/t/exact-match-search-with-wildcard-using-query-string-not-working/102859)
**Author:** [@telebh](https://discuss.elastic.co/u/telebh)\ **Replies:** 0\ **Last updated:** [October 5, 2017, 3:15pm UTC](https://discuss.elastic.co/t/exact-match-search-with-wildcard-using-query-string-not-working/102859 "2017-10-05T15:15:07Z")
I am newbie to ES and would need help search phrase with wildcard in query\_string does not work, as it seems that query\_string treat wildcard "i.e. ?" as a character. for example i need to search for something like this" … --- ## [Query's getTermsEnum not executed](https://discuss.elastic.co/t/querys-gettermsenum-not-executed/101501)
**Author:** [@dominik.safaric](https://discuss.elastic.co/u/dominik.safaric)\ **Replies:** 9\ **Last updated:** [October 5, 2017, 3:13pm UTC](https://discuss.elastic.co/t/querys-gettermsenum-not-executed/101501 "2017-10-05T15:13:35Z")
I've implemented an ElasticSearch custom Java plugin running an CustomScoreQuery instance. The purpose of the plugin is to search for documents whose long field value is less or equal in terms of Hamming distance then t… --- ## [X-pack security using java code](https://discuss.elastic.co/t/x-pack-security-using-java-code/102851)
**Author:** [@pravin1](https://discuss.elastic.co/u/pravin1)\ **Replies:** 1\ **Last updated:** [October 5, 2017, 2:46pm UTC](https://discuss.elastic.co/t/x-pack-security-using-java-code/102851 "2017-10-05T14:46:10Z")
We are creating restclient for connection elastic server, and using HTTPentity for fetching data using index name check below code RestClient restClient = RestClient.builder(new HttpHost(Constents.ELK\_URL, Constents.EL… --- ## [Query to get documents having specific message and time difference between documents should not be more than 5 mins](https://discuss.elastic.co/t/query-to-get-documents-having-specific-message-and-time-difference-between-documents-should-not-be-more-than-5-mins/102840)
**Author:** [@piyush26th](https://discuss.elastic.co/u/piyush26th)\ **Replies:** 2\ **Last updated:** [October 5, 2017, 2:40pm UTC](https://discuss.elastic.co/t/query-to-get-documents-having-specific-message-and-time-difference-between-documents-should-not-be-more-than-5-mins/102840 "2017-10-05T14:40:23Z")
Hi Team, I want to get documents having specific messages and time difference between documents should not be more than 5 mins. For eg. I have documents with messages "abc" and "xyz" in any index. Now I want to get a… --- ## [Document duplicate elsticsearch-logstash](https://discuss.elastic.co/t/document-duplicate-elsticsearch-logstash/102847)
**Author:** [@Erick\_Garcia\_Perez](https://discuss.elastic.co/u/Erick_Garcia_Perez)\ **Replies:** 1\ **Last updated:** [October 5, 2017, 2:29pm UTC](https://discuss.elastic.co/t/document-duplicate-elsticsearch-logstash/102847 "2017-10-05T14:29:37Z")
how can i delete or orevent logstash insert duplicate document with diferent id but the same information fields --- ## [\[WARN \]\[o.e.g.DanglingIndicesState\] \[X\] - can not be imported as a dangling index, as index with same name already exists in cluster metadata](https://discuss.elastic.co/t/warn-o-e-g-danglingindicesstate-x-can-not-be-imported-as-a-dangling-index-as-index-with-same-name-already-exists-in-cluster-metadata/102756)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 2\ **Last updated:** [October 5, 2017, 1:30am UTC](https://discuss.elastic.co/t/warn-o-e-g-danglingindicesstate-x-can-not-be-imported-as-a-dangling-index-as-index-with-same-name-already-exists-in-cluster-metadata/102756 "2017-10-05T01:30:16Z")
whenever I start my cluster, my logs produces a lot of these messages (just different name for index): elasticsearch11 | \[2017-10-04T20:20:44,936\]\[WARN \]\[o.e.g.DanglingIndicesState\] \[114ff04a775b\] \[\[.monitoring-es-… --- ## [Analyzer to keep integers/numeric inputs](https://discuss.elastic.co/t/analyzer-to-keep-integers-numeric-inputs/102835)
**Author:** [@ebsaral](https://discuss.elastic.co/u/ebsaral)\ **Replies:** 4\ **Last updated:** [October 5, 2017, 2:02pm UTC](https://discuss.elastic.co/t/analyzer-to-keep-integers-numeric-inputs/102835 "2017-10-05T14:02:58Z")
How can I create an analyzer to keep integers? I am using simple analyzer to get tokens, but hello1 becomes \[hello\] but I wanna keep 1 as well like \[hello1\] when getting tokenized. Any way of doing this? --- ## [Data gets wiped out automatically](https://discuss.elastic.co/t/data-gets-wiped-out-automatically/102570)
**Author:** [@Ajay\_Deekonda](https://discuss.elastic.co/u/Ajay_Deekonda)\ **Replies:** 3\ **Last updated:** [October 5, 2017, 12:13pm UTC](https://discuss.elastic.co/t/data-gets-wiped-out-automatically/102570 "2017-10-05T12:13:05Z")
We are using ES 5.5.0. I have created indexes and loaded data into it. Data gets deleted after regular interval. Again i need to load the data. Is there any issue from our side or it is the bug in elastic search? --- ## [Single index has multi shard or multi index has single shard](https://discuss.elastic.co/t/single-index-has-multi-shard-or-multi-index-has-single-shard/102801)
**Author:** [@gangxiong\_chen](https://discuss.elastic.co/u/gangxiong_chen)\ **Replies:** 7\ **Last updated:** [October 5, 2017, 11:08am UTC](https://discuss.elastic.co/t/single-index-has-multi-shard-or-multi-index-has-single-shard/102801 "2017-10-05T11:08:00Z")
assume all data are same, data count is 100,000,000 single index has multi shard( plan A) multi index has single shard( plan B) both without replica when indexing, plan A single index name INDEX\_LOG has 5shard … --- ## [Query\_string is not behaving as expected with analyzer (simple)?](https://discuss.elastic.co/t/query-string-is-not-behaving-as-expected-with-analyzer-simple/102798)
**Author:** [@ebsaral](https://discuss.elastic.co/u/ebsaral)\ **Replies:** 12\ **Last updated:** [October 5, 2017, 11:04am UTC](https://discuss.elastic.co/t/query-string-is-not-behaving-as-expected-with-analyzer-simple/102798 "2017-10-05T11:04:14Z")
Hello, I want to be able to able to search Japanese inputs as well as English. I don't want to use the plugin, because I just want to do partial search within a Japanese input. Therefore please do not suggest kuromoji. E… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1928) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1930)