# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1959

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1960

---

## [Synonym search using .txt file](https://discuss.elastic.co/t/synonym-search-using-txt-file/99366)

<div class="topic-metadata">

**Author:** [@Ashwini\_Kumar](https://discuss.elastic.co/u/Ashwini_Kumar)\
**Replies:** 1\
**Last updated:** [September 5, 2017, 7:43am UTC](https://discuss.elastic.co/t/synonym-search-using-txt-file/99366 "2017-09-05T07:43:47Z")

</div>

https://www.elastic.co/guide/en/elasticsearch/reference/current/analysis-synonym-tokenfilter.html I’m using synonym search by giving all the synonyms in the file. This file is being indexed at the time of index creation…

---

## [Mapping for filebeat-\*](https://discuss.elastic.co/t/mapping-for-filebeat/99251)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 2\
**Last updated:** [September 5, 2017, 7:38am UTC](https://discuss.elastic.co/t/mapping-for-filebeat/99251 "2017-09-05T07:38:46Z")

</div>

Hi, I created a mapping through “put” but I can’t do this for every filebeat-\* index, I can only do this for a specific filebeat-XXXXX how can I change this that it will work for all dates?

---

## [Returning more than 10000 records in Power BI](https://discuss.elastic.co/t/returning-more-than-10000-records-in-power-bi/99371)

<div class="topic-metadata">

**Author:** [@adam.burgess](https://discuss.elastic.co/u/adam.burgess)\
**Replies:** 1\
**Last updated:** [September 5, 2017, 6:55am UTC](https://discuss.elastic.co/t/returning-more-than-10000-records-in-power-bi/99371 "2017-09-05T06:55:05Z")

</div>

Hi There, I have a requirement to use Power BI to query ES to create a model with ES and other data sources. My problem is that my data I need to return is currently about 14000 rows and slowly growing. I’m looking for …

---

## [\_type is indexed but NOT stored. What does this mean?](https://discuss.elastic.co/t/-type-is-indexed-but-not-stored-what-does-this-mean/99224)

<div class="topic-metadata">

**Author:** [@vamsyr](https://discuss.elastic.co/u/vamsyr)\
**Replies:** 4\
**Last updated:** [September 5, 2017, 3:50am UTC](https://discuss.elastic.co/t/-type-is-indexed-but-not-stored-what-does-this-mean/99224 "2017-09-05T03:50:27Z")

</div>

I understood that in elastic, indexing means making it searchable. I am confused at the point - indexed but not stored? After indexing and NOT storing, how can we search the one that is not stored? If we search such one…

---

## [How update the nested element in ES through Groovy](https://discuss.elastic.co/t/how-update-the-nested-element-in-es-through-groovy/99184)

<div class="topic-metadata">

**Author:** [@yogeswararao](https://discuss.elastic.co/u/yogeswararao)\
**Replies:** 9\
**Last updated:** [September 5, 2017, 3:31am UTC](https://discuss.elastic.co/t/how-update-the-nested-element-in-es-through-groovy/99184 "2017-09-05T03:31:56Z")

</div>

How to update the nested field values in the ES Groovey. curl -XPOST ‘localhost:9200/iapi-log-dev-lorain/log/Sample.Test/\_update’ -d ‘{“script” : “ctx.\_source.@fields.Metrics.TOTAL\_MSGS = TOTAL\_MSGS”,“params” : {“TOTAL\_…

---

## [Upgrade from nest 0.11.0.0 to 5.5.0 Index and delete](https://discuss.elastic.co/t/upgrade-from-nest-0-11-0-0-to-5-5-0-index-and-delete/99321)

<div class="topic-metadata">

**Author:** [@LostAtSea](https://discuss.elastic.co/u/LostAtSea)\
**Replies:** 1\
**Last updated:** [September 5, 2017, 12:23am UTC](https://discuss.elastic.co/t/upgrade-from-nest-0-11-0-0-to-5-5-0-index-and-delete/99321 "2017-09-05T00:23:21Z")

</div>

I’m very much a newbie, tasked with upgrading an older service Given private static ElasticClient ClientCreate(Uri uri) { var e = new Nest.ElasticClient(new ConnectionSettings(uri)); return e; } This is no longe…

---

## [Upgrade from nest 0.11.0.0 to 5.5.0 running a query](https://discuss.elastic.co/t/upgrade-from-nest-0-11-0-0-to-5-5-0-running-a-query/99327)

<div class="topic-metadata">

**Author:** [@LostAtSea](https://discuss.elastic.co/u/LostAtSea)\
**Replies:** 1\
**Last updated:** [September 5, 2017, 12:15am UTC](https://discuss.elastic.co/t/upgrade-from-nest-0-11-0-0-to-5-5-0-running-a-query/99327 "2017-09-05T00:15:25Z")

</div>

I’m upgrading an older service that uses ‘alerts’ as indices within elastic search and runs the queries inside against ‘logs’ that have also been stored by other services Looking at the portion that actually retriev…

---

## [Conditional mapping. if](https://discuss.elastic.co/t/conditional-mapping-if/99290)

<div class="topic-metadata">

**Author:** [@inpp](https://discuss.elastic.co/u/inpp)\
**Replies:** 1\
**Last updated:** [September 4, 2017, 6:43pm UTC](https://discuss.elastic.co/t/conditional-mapping-if/99290 "2017-09-04T18:43:23Z")

</div>

I want to use the analyzer differently depending on the value of another field in single field. As the code below "mappings": { "sample\_type": { "properties":{ "my\_text": { "if=l…

---

## [Field Analyser vs \_all Analyser and Query String Analyser](https://discuss.elastic.co/t/field-analyser-vs--all-analyser-and-query-string-analyser/99342)

<div class="topic-metadata">

**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\
**Replies:** 0\
**Last updated:** [September 4, 2017, 6:40pm UTC](https://discuss.elastic.co/t/field-analyser-vs--all-analyser-and-query-string-analyser/99342 "2017-09-04T18:40:45Z")

</div>

I have a field that stores a URL. I want to be able to search the different parts of the URL (delimited by /). Currently, none of the built in analysers split the URL up as I want, so I’m thinking about engaging a patter…

---

## [Does the max\_clause\_count parameter affect the number of values in a terms clause?](https://discuss.elastic.co/t/does-the-max-clause-count-parameter-affect-the-number-of-values-in-a-terms-clause/99340)

<div class="topic-metadata">

**Author:** [@cterron](https://discuss.elastic.co/u/cterron)\
**Replies:** 0\
**Last updated:** [September 4, 2017, 5:56pm UTC](https://discuss.elastic.co/t/does-the-max-clause-count-parameter-affect-the-number-of-values-in-a-terms-clause/99340 "2017-09-04T17:56:32Z")

</div>

Hi all I’m using ElasticSearh 2.3.2 - I know, EOL this September -, with a query like this: { "query":{ "bool":{ "should":\[ { "terms": {"id": \["cafe-babe-0000","c…

---

## [Boost any query for a specific field (numerical) based on lower-the-better](https://discuss.elastic.co/t/boost-any-query-for-a-specific-field-numerical-based-on-lower-the-better/99337)

<div class="topic-metadata">

**Author:** [@zzvara](https://discuss.elastic.co/u/zzvara)\
**Replies:** 0\
**Last updated:** [September 4, 2017, 5:00pm UTC](https://discuss.elastic.co/t/boost-any-query-for-a-specific-field-numerical-based-on-lower-the-better/99337 "2017-09-04T17:00:44Z")

</div>

Hi, I would like to simply boost a field (query time), based on the lower the value is the better, even if there is no range query defined for that specific numeric field. Is there any way to boost it, or score based on…

---

## [Using percolator causes INTERNAL\_SERVER\_ERROR with NPE](https://discuss.elastic.co/t/using-percolator-causes-internal-server-error-with-npe/57778)

<div class="topic-metadata">

**Author:** [@Aleksander\_Ciepiela](https://discuss.elastic.co/u/Aleksander_Ciepiela)\
**Replies:** 4\
**Last updated:** [September 4, 2017, 3:19pm UTC](https://discuss.elastic.co/t/using-percolator-causes-internal-server-error-with-npe/57778 "2017-09-04T15:19:26Z")

</div>

Hi, We have a problem using percolator with ElasticSearch v2.3.2. Here is a path how to recreate the error: 1.Create document-test index with mapping: { "document-type": { "properties": { "titl…

---

## [Unable to update analyzer](https://discuss.elastic.co/t/unable-to-update-analyzer/99113)

<div class="topic-metadata">

**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\
**Replies:** 3\
**Last updated:** [September 4, 2017, 2:58pm UTC](https://discuss.elastic.co/t/unable-to-update-analyzer/99113 "2017-09-04T14:58:38Z")

</div>

Hi, I have used tokenizer as below: “text\_general\_likely\_new”: { “tokenizer”: "standard ", “filter”: \[ “StopFilterFactory”, “LowerCaseFilterFactory”, “SynonymFilterFactory”, “ASCIIFoldingFilterFactory” \] } But…

---

## [Highlights whitch not begins with stopword](https://discuss.elastic.co/t/highlights-whitch-not-begins-with-stopword/99258)

<div class="topic-metadata">

**Author:** [@aslamy](https://discuss.elastic.co/u/aslamy)\
**Replies:** 3\
**Last updated:** [September 4, 2017, 2:57pm UTC](https://discuss.elastic.co/t/highlights-whitch-not-begins-with-stopword/99258 "2017-09-04T14:57:26Z")

</div>

Hi ! Highlighter generates fragments which begins with stopwords. How to make fragments which not begins with stopwords ? For instance I get now: " and the Caribbean during the spring and summer of 1806" but i want …

---

## [Elasticsearch Curator Snapshot: How does it work?](https://discuss.elastic.co/t/elasticsearch-curator-snapshot-how-does-it-work/99278)

<div class="topic-metadata">

**Author:** [@NandhaKrishna](https://discuss.elastic.co/u/NandhaKrishna)\
**Replies:** 1\
**Last updated:** [September 4, 2017, 2:45pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-snapshot-how-does-it-work/99278 "2017-09-04T14:45:55Z")

</div>

I have attached the example for Curator Snapshot.yml Will only the indices with names logstash- be snapshotted? How do I snapshot indices with different names? --- # Remember, leave a key empty if there is no value. …

---

## [Accessing nested fields in native plugin](https://discuss.elastic.co/t/accessing-nested-fields-in-native-plugin/99319)

<div class="topic-metadata">

**Author:** [@Jul](https://discuss.elastic.co/u/Jul)\
**Replies:** 0\
**Last updated:** [September 4, 2017, 2:33pm UTC](https://discuss.elastic.co/t/accessing-nested-fields-in-native-plugin/99319 "2017-09-04T14:33:19Z")

</div>

Hello, could anybody tell me how to access nested fields in a native java plugin? Somehow, I can’t find any information about this. Also, which is the fastest way to access them? As far as I understand, getting the doc…

---

## [Adding image to record](https://discuss.elastic.co/t/adding-image-to-record/98241)

<div class="topic-metadata">

**Author:** [@vineets928](https://discuss.elastic.co/u/vineets928)\
**Replies:** 2\
**Last updated:** [September 4, 2017, 2:06pm UTC](https://discuss.elastic.co/t/adding-image-to-record/98241 "2017-09-04T14:06:41Z")

</div>

Hi, We migrated MySql employee table to elasticsearch and it is working good. Now, we want to add .jpg image to every employee record which is in folder on the same node. I don’t have any clue how to do this. Can anyon…

---

## [Elasticsearch upgrade 5.3 to 5.5.2 failing to restart](https://discuss.elastic.co/t/elasticsearch-upgrade-5-3-to-5-5-2-failing-to-restart/99265)

<div class="topic-metadata">

**Author:** [@alessandro](https://discuss.elastic.co/u/alessandro)\
**Replies:** 1\
**Last updated:** [September 4, 2017, 1:47pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-5-3-to-5-5-2-failing-to-restart/99265 "2017-09-04T13:47:24Z")

</div>

Hi, I am currently upgrading Elasticsearch from 5.3.0 to 5.5.2 and doing it as rolling upgrade on a server with Debian Linux. After updating /bin, /lib and /modules directories for Elasticsearch, the elasticsearch serv…

---

## [Trying to take Indices Backup for full cluster restart](https://discuss.elastic.co/t/trying-to-take-indices-backup-for-full-cluster-restart/98851)

<div class="topic-metadata">

**Author:** [@Vivek\_Samaga](https://discuss.elastic.co/u/Vivek_Samaga)\
**Replies:** 7\
**Last updated:** [September 4, 2017, 1:07pm UTC](https://discuss.elastic.co/t/trying-to-take-indices-backup-for-full-cluster-restart/98851 "2017-09-04T13:07:02Z")

</div>

Hi Trying to take backup of Prod indices using curl -XPUT 'elk.\*\*\*.com:9200/\_snapshot/my\_backup' \\ { "type": "fs", "settings": { "location": "/elkprod\_bak/elkback", "compress": true } } But g…

---

## [Avg\_bucket aggregation failed when buckets\_path include inner bucket with same name like sibling bucket](https://discuss.elastic.co/t/avg-bucket-aggregation-failed-when-buckets-path-include-inner-bucket-with-same-name-like-sibling-bucket/99296)

<div class="topic-metadata">

**Author:** [@david206](https://discuss.elastic.co/u/david206)\
**Replies:** 0\
**Last updated:** [September 4, 2017, 1:01pm UTC](https://discuss.elastic.co/t/avg-bucket-aggregation-failed-when-buckets-path-include-inner-bucket-with-same-name-like-sibling-bucket/99296 "2017-09-04T13:01:52Z")

</div>

Please see the gist for full example: ES version: 5.2.2 avg\_bucket aggregation failed when buckets\_path include inner bucket with same name like sibling bucket: The error: { "error" : { "root\_cause" : \[ \], …

---

## [Synonym ÅÄÖ exception](https://discuss.elastic.co/t/synonym-aao-exception/99276)

<div class="topic-metadata">

**Author:** [@aslamy](https://discuss.elastic.co/u/aslamy)\
**Replies:** 1\
**Last updated:** [September 4, 2017, 12:19pm UTC](https://discuss.elastic.co/t/synonym-aao-exception/99276 "2017-09-04T12:19:55Z")

</div>

Hi ! I got some exception when I use swedish ÅÄÖ on my synonym words. { "error" : { "root\_cause" : \[ { "type" : "illegal\_argument\_exception", "reason" : "failed to build synonyms" } …

---

## [How to generate 2 tokens out of 1 token with special character in Elasticsearch (german language)](https://discuss.elastic.co/t/how-to-generate-2-tokens-out-of-1-token-with-special-character-in-elasticsearch-german-language/99286)

<div class="topic-metadata">

**Author:** [@korara00](https://discuss.elastic.co/u/korara00)\
**Replies:** 0\
**Last updated:** [September 4, 2017, 11:29am UTC](https://discuss.elastic.co/t/how-to-generate-2-tokens-out-of-1-token-with-special-character-in-elasticsearch-german-language/99286 "2017-09-04T11:29:58Z")

</div>

Hello, I am trying to define a pattern/rule in Elasticsearch which creates 2tokens out of 1token with a special character. Example: “Servicekaufmann/-frau” should generate the following 2 tokens: “Servicekaufmann” …

---

## [How to implement Field level Security with X-Pack?](https://discuss.elastic.co/t/how-to-implement-field-level-security-with-x-pack/99136)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 3\
**Last updated:** [September 4, 2017, 11:17am UTC](https://discuss.elastic.co/t/how-to-implement-field-level-security-with-x-pack/99136 "2017-09-04T11:17:23Z")

</div>

Hi Experts, I was checking the docs and it says I can restrict user to a certain fields as well with X-Pack. So this is what I am doing . POST /\_xpack/security/role/testing { "indices" : \[ { "n…

---

## [Error at starting Elasticsearch: StartupException - Unable to initialize modules](https://discuss.elastic.co/t/error-at-starting-elasticsearch-startupexception-unable-to-initialize-modules/99266)

<div class="topic-metadata">

**Author:** [@patbre](https://discuss.elastic.co/u/patbre)\
**Replies:** 1\
**Last updated:** [September 4, 2017, 10:50am UTC](https://discuss.elastic.co/t/error-at-starting-elasticsearch-startupexception-unable-to-initialize-modules/99266 "2017-09-04T10:50:06Z")

</div>

Hello, my 30 days trial of X-Pack has ended and I tried updating it to Basic License. I have registered and downloaded the license and tried updating it through the license API like it is said in the Docs. There was som…

---

## [ES5.5 got red, and no way to find out which node got error](https://discuss.elastic.co/t/es5-5-got-red-and-no-way-to-find-out-which-node-got-error/99263)

<div class="topic-metadata">

**Author:** [@John\_ax](https://discuss.elastic.co/u/John_ax)\
**Replies:** 2\
**Last updated:** [September 4, 2017, 10:15am UTC](https://discuss.elastic.co/t/es5-5-got-red-and-no-way-to-find-out-which-node-got-error/99263 "2017-09-04T10:15:34Z")

</div>

HI,I was using ES5.5, with hot-warn architecture, now he got red,: \[image\] curl xxxx:9400/\_cat/nodes just block for a long time and no way to find out which node GOT out of memory.

---

## [Awareness by index](https://discuss.elastic.co/t/awareness-by-index/99270)

<div class="topic-metadata">

**Author:** [@senuphtyz](https://discuss.elastic.co/u/senuphtyz)\
**Replies:** 0\
**Last updated:** [September 4, 2017, 9:50am UTC](https://discuss.elastic.co/t/awareness-by-index/99270 "2017-09-04T09:50:54Z")

</div>

Hi, i currently have 5 node setup 4 data nodes and 1 master only. The current configuration is awareness by zone. Zone1 Zone2 +---------+ +---------+ | | | | | Node1 |…

---

## [Terminate\_after in es 5](https://discuss.elastic.co/t/terminate-after-in-es-5/99217)

<div class="topic-metadata">

**Author:** [@svarup](https://discuss.elastic.co/u/svarup)\
**Replies:** 1\
**Last updated:** [September 4, 2017, 9:38am UTC](https://discuss.elastic.co/t/terminate-after-in-es-5/99217 "2017-09-04T09:38:20Z")

</div>

How to use terminate\_after in count api of es 5 PHP, I can’t find any example of terminate\_after

---

## [Authentication + Authorization for Elasticsearch without user creation in Elasticsearch](https://discuss.elastic.co/t/authentication-authorization-for-elasticsearch-without-user-creation-in-elasticsearch/97374)

<div class="topic-metadata">

**Author:** [@sumit\_monga](https://discuss.elastic.co/u/sumit_monga)\
**Replies:** 2\
**Last updated:** [September 4, 2017, 9:29am UTC](https://discuss.elastic.co/t/authentication-authorization-for-elasticsearch-without-user-creation-in-elasticsearch/97374 "2017-09-04T09:29:55Z")

</div>

Hello everyone, There is this usecase where there is a banking application and we are storing some transaction records in ES as a secondary store. We would like to use the same application (OAuth based application with …

---

## [Jvm GC overhead](https://discuss.elastic.co/t/jvm-gc-overhead/99139)

<div class="topic-metadata">

**Author:** [@Frederic\_Renan](https://discuss.elastic.co/u/Frederic_Renan)\
**Replies:** 2\
**Last updated:** [September 4, 2017, 8:58am UTC](https://discuss.elastic.co/t/jvm-gc-overhead/99139 "2017-09-04T08:58:33Z")

</div>

Hi, I’ve just start a new cluster with following specs : Under VMWARE, dispatched on 2 datacenters : 2 data / master / ingest nodes : 16Go RAM / 8Go Heap / 4 vCPUs 2 master nodes : 8Go RAM / 2Go Heap / 2 vCPUs With …

---

## [Cannot match percolator on multiple fields (ES 5.5)](https://discuss.elastic.co/t/cannot-match-percolator-on-multiple-fields-es-5-5/98731)

<div class="topic-metadata">

**Author:** [@toanluu](https://discuss.elastic.co/u/toanluu)\
**Replies:** 2\
**Last updated:** [September 4, 2017, 8:23am UTC](https://discuss.elastic.co/t/cannot-match-percolator-on-multiple-fields-es-5-5/98731 "2017-09-04T08:23:06Z")

</div>

I register 2 queries in the percolator: { "query": { "query\_string": { "query": "en", "fields": \["language"\] } } } and { "query": { "query\_string"…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1958)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1960)
