# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=318

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 319

---

## [Three node cluster failes completely when one node shuts down](https://discuss.elastic.co/t/three-node-cluster-failes-completely-when-one-node-shuts-down/322638)

<div class="topic-metadata">

**Author:** [@cdy5159](https://discuss.elastic.co/u/cdy5159)\
**Replies:** 9\
**Last updated:** [January 10, 2023, 4:36pm UTC](https://discuss.elastic.co/t/three-node-cluster-failes-completely-when-one-node-shuts-down/322638 "2023-01-10T16:36:01Z")

</div>

I have a three node cluster with Elastic 8.4.2. When all three nodes are up, it all appears fine. I built the cluster with a single node (audit1), but later added the other two nodes (audit2 & audit3). If I shutdown e…

---

## [Searching special characters !, $, #, @](https://discuss.elastic.co/t/searching-special-characters/322727)

<div class="topic-metadata">

**Author:** [@oktaykalfa](https://discuss.elastic.co/u/oktaykalfa)\
**Replies:** 2\
**Last updated:** [January 10, 2023, 1:43pm UTC](https://discuss.elastic.co/t/searching-special-characters/322727 "2023-01-10T13:43:37Z")

</div>

Hello, My config is be like in the following and i want to search special characters like !, $, @, # too. class ConversationIndexConfigurator extends IndexConfigurator { use Migratable; protected $name = 'conv…

---

## [Elasticsearch autocomplete suggestion on array object](https://discuss.elastic.co/t/elasticsearch-autocomplete-suggestion-on-array-object/322375)

<div class="topic-metadata">

**Author:** [@ysunil702](https://discuss.elastic.co/u/ysunil702)\
**Replies:** 14\
**Last updated:** [January 10, 2023, 10:12am UTC](https://discuss.elastic.co/t/elasticsearch-autocomplete-suggestion-on-array-object/322375 "2023-01-10T10:12:52Z")

</div>

my mapping as follow : \`"skills": { "properties": { "id": { "type": "long" }, "skillName": { …

---

## [Keyword Stuffing](https://discuss.elastic.co/t/keyword-stuffing/322786)

<div class="topic-metadata">

**Author:** [@Kharad](https://discuss.elastic.co/u/Kharad)\
**Replies:** 1\
**Last updated:** [January 10, 2023, 8:04am UTC](https://discuss.elastic.co/t/keyword-stuffing/322786 "2023-01-10T08:04:09Z")

</div>

Need Help with Keyword Stuffing. Scenario: I have 2 Presentations, with the titles as follows: Example 1: Presentation #1: "Bake Cake Bake bake cake cake cake bake" Presentation #2: "Bake Cake" Now, when I search wi…

---

## [Elasticsearch return search response very quickly with timeout:true](https://discuss.elastic.co/t/elasticsearch-return-search-response-very-quickly-with-timeout-true/322537)

<div class="topic-metadata">

**Author:** [@chenchuangc](https://discuss.elastic.co/u/chenchuangc)\
**Replies:** 8\
**Last updated:** [January 10, 2023, 7:01am UTC](https://discuss.elastic.co/t/elasticsearch-return-search-response-very-quickly-with-timeout-true/322537 "2023-01-10T07:01:56Z")

</div>

Elasticsearch version bin/elasticsearch --version 7.6.0 Problem I use go-elasticsearch client query from elasticsearch. resp, err := client.Search( client.Search.WithContext(d.ctx), client.Search.WithIndex(inde…

---

## [Log Deletion on Elasticsearch nodes based on lastModified](https://discuss.elastic.co/t/log-deletion-on-elasticsearch-nodes-based-on-lastmodified/322785)

<div class="topic-metadata">

**Author:** [@mahesh\_tangella](https://discuss.elastic.co/u/mahesh_tangella)\
**Replies:** 0\
**Last updated:** [January 10, 2023, 5:30am UTC](https://discuss.elastic.co/t/log-deletion-on-elasticsearch-nodes-based-on-lastmodified/322785 "2023-01-10T05:30:46Z")

</div>

Hello Team, We are facing an issue with log deletion policy defined in log4j2.properties based on ifLastModified age. We want to delete all the log files which are larger than 2GB in size and older than 15 days. So, we…

---

## [How do I get find which parts of an Elasticsearch query match](https://discuss.elastic.co/t/how-do-i-get-find-which-parts-of-an-elasticsearch-query-match/322761)

<div class="topic-metadata">

**Author:** [@amirs5](https://discuss.elastic.co/u/amirs5)\
**Replies:** 7\
**Last updated:** [January 10, 2023, 2:37am UTC](https://discuss.elastic.co/t/how-do-i-get-find-which-parts-of-an-elasticsearch-query-match/322761 "2023-01-10T02:37:33Z")

</div>

I have a list of Key-word-sets, for example: set\_1: \["movie", "cinema", "theater"\], set\_2: \["beach", "ocean", "dock"\], set\_3: \["office", "downtown", "center"\] and I want to build up a single query that tells us which o…

---

## [External versioning when using nested documents and painless scripting](https://discuss.elastic.co/t/external-versioning-when-using-nested-documents-and-painless-scripting/322777)

<div class="topic-metadata">

**Author:** [@bpawQ](https://discuss.elastic.co/u/bpawQ)\
**Replies:** 0\
**Last updated:** [January 10, 2023, 1:19am UTC](https://discuss.elastic.co/t/external-versioning-when-using-nested-documents-and-painless-scripting/322777 "2023-01-10T01:19:27Z")

</div>

Hello, we have some use cases where we were considering using external versioning since we stream data from a DynamoDB instance to our elasticsearch cluster. I was wondering if it is possible to use external versioning i…

---

## [Elasticsearch-java dependency on httpclient](https://discuss.elastic.co/t/elasticsearch-java-dependency-on-httpclient/322770)

<div class="topic-metadata">

**Author:** [@bbunton](https://discuss.elastic.co/u/bbunton)\
**Replies:** 2\
**Last updated:** [January 9, 2023, 10:33pm UTC](https://discuss.elastic.co/t/elasticsearch-java-dependency-on-httpclient/322770 "2023-01-09T22:33:45Z")

</div>

I have been working with Elasticsearch as a developer for a couple of years now and have successfully written some NiFi services that use the now deprecated Java API that uses port 9300 to query/retrieve/delete records t…

---

## [Script\_score query with cosineSimularity on alias](https://discuss.elastic.co/t/script-score-query-with-cosinesimularity-on-alias/321700)

<div class="topic-metadata">

**Author:** [@KentLee](https://discuss.elastic.co/u/KentLee)\
**Replies:** 0\
**Last updated:** [December 20, 2022, 10:19pm UTC](https://discuss.elastic.co/t/script-score-query-with-cosinesimularity-on-alias/321700 "2022-12-20T22:19:45Z")

</div>

I have an alias created with several different indices and each index has multiple dense\_vector fields. I want to perform a script\_score search on all the dense\_vector field with the cosineSimularity function. For examp…

---

## [How delete platinum license?](https://discuss.elastic.co/t/how-delete-platinum-license/322742)

<div class="topic-metadata">

**Author:** [@kurdit](https://discuss.elastic.co/u/kurdit)\
**Replies:** 4\
**Last updated:** [January 9, 2023, 6:38pm UTC](https://discuss.elastic.co/t/how-delete-platinum-license/322742 "2023-01-09T18:38:36Z")

</div>

hi! how can i remove the platinum license and enable the basic license? I tried POST /\_license/start\_trial?acknowledge=true but after 30 days the platinum license still remains... and tried xpack.license.self\_gen…

---

## [Java ElasticsearchClient ping timeout](https://discuss.elastic.co/t/java-elasticsearchclient-ping-timeout/322749)

<div class="topic-metadata">

**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\
**Replies:** 2\
**Last updated:** [January 9, 2023, 5:51pm UTC](https://discuss.elastic.co/t/java-elasticsearchclient-ping-timeout/322749 "2023-01-09T17:51:11Z")

</div>

Hi, We are caching the created connection, and use ping often to ensure that the connection is still valid and would like it to fail quickly if not so we can create a new one. With the Java High Level REST Client we ca…

---

## [Can i increase performance on one host?](https://discuss.elastic.co/t/can-i-increase-performance-on-one-host/322748)

<div class="topic-metadata">

**Author:** [@Ostr1969](https://discuss.elastic.co/u/Ostr1969)\
**Replies:** 1\
**Last updated:** [January 9, 2023, 5:50pm UTC](https://discuss.elastic.co/t/can-i-increase-performance-on-one-host/322748 "2023-01-09T17:50:16Z")

</div>

I have one host with a lot of memory, cpus and disk. and I have static database of 700gb and 217M records, with only one client querying. can I increase the search speed?. now I get connection timeout sometimes.

---

## [Best Practices for Adding New Logs?](https://discuss.elastic.co/t/best-practices-for-adding-new-logs/322743)

<div class="topic-metadata">

**Author:** [@BionicSecurityMgr](https://discuss.elastic.co/u/BionicSecurityMgr)\
**Replies:** 0\
**Last updated:** [January 9, 2023, 3:01pm UTC](https://discuss.elastic.co/t/best-practices-for-adding-new-logs/322743 "2023-01-09T15:01:22Z")

</div>

Does anyone have a good process for adding a new system to monitor into Elastic? We're deploying the Elastic Agent to the servers now, so now I've got to come up with a standard process to discover data and determine be…

---

## [Best Optimization for wildcard queries](https://discuss.elastic.co/t/best-optimization-for-wildcard-queries/322738)

<div class="topic-metadata">

**Author:** [@Sheharyar\_Khalid](https://discuss.elastic.co/u/Sheharyar_Khalid)\
**Replies:** 4\
**Last updated:** [January 9, 2023, 2:30pm UTC](https://discuss.elastic.co/t/best-optimization-for-wildcard-queries/322738 "2023-01-09T14:30:09Z")

</div>

Hello, I am working with elasticsearch on audit log data. I wanted to know what are the best optimizations and tokenizer/analyzer/term usages for optimizing elastic for wildcard queries. I have looked at n-grams and the…

---

## [Continuous transform not working as expected](https://discuss.elastic.co/t/continuous-transform-not-working-as-expected/321834)

<div class="topic-metadata">

**Author:** [@Dominik\_Solc](https://discuss.elastic.co/u/Dominik_Solc)\
**Replies:** 3\
**Last updated:** [January 9, 2023, 2:20pm UTC](https://discuss.elastic.co/t/continuous-transform-not-working-as-expected/321834 "2023-01-09T14:20:43Z")

</div>

Hello, I have problem that my continuous transform doesn't update as the index, which it takes data from, is getting new and new data. The original index, let's name it playwright-test-runs-data (as i have it named), i…

---

## [Elasticsearch cosine similarity query question](https://discuss.elastic.co/t/elasticsearch-cosine-similarity-query-question/322729)

<div class="topic-metadata">

**Author:** [@ward](https://discuss.elastic.co/u/ward)\
**Replies:** 3\
**Last updated:** [January 9, 2023, 1:22pm UTC](https://discuss.elastic.co/t/elasticsearch-cosine-similarity-query-question/322729 "2023-01-09T13:22:23Z")

</div>

Hi there, I'm currently working on a face recognition project using Elasticsearch. I can't seem to get a working query for matching two datasets with each other. My most recent attempt is shown below the mapping. I was h…

---

## [Replicating data between an Elastic Cluster Nodes](https://discuss.elastic.co/t/replicating-data-between-an-elastic-cluster-nodes/322737)

<div class="topic-metadata">

**Author:** [@A.Hani](https://discuss.elastic.co/u/A.Hani)\
**Replies:** 2\
**Last updated:** [January 9, 2023, 1:08pm UTC](https://discuss.elastic.co/t/replicating-data-between-an-elastic-cluster-nodes/322737 "2023-01-09T13:08:53Z")

</div>

Hi New to Elastic here and would like to get help with some inquiries. Scenario: 1- Let's assume that I have a cluster of (2) master nodes, is it possible to configure each node to hold its own data? In other words, N…

---

## [Error fields script in the Index Pattern](https://discuss.elastic.co/t/error-fields-script-in-the-index-pattern/321314)

<div class="topic-metadata">

**Author:** [@rpc29y](https://discuss.elastic.co/u/rpc29y)\
**Replies:** 4\
**Last updated:** [January 9, 2023, 11:21am UTC](https://discuss.elastic.co/t/error-fields-script-in-the-index-pattern/321314 "2023-01-09T11:21:41Z")

</div>

Hello. I have an elastic version 7.10 and in the Index Pattern of one of the indexes I have created a simple fields script: "doc\['temperature'\]\* 10" Apparently the creation is correct, but I can't get to display the v…

---

## [Function score query with decay function on huge dataset](https://discuss.elastic.co/t/function-score-query-with-decay-function-on-huge-dataset/322724)

<div class="topic-metadata">

**Author:** [@minhdao](https://discuss.elastic.co/u/minhdao)\
**Replies:** 0\
**Last updated:** [January 9, 2023, 11:09am UTC](https://discuss.elastic.co/t/function-score-query-with-decay-function-on-huge-dataset/322724 "2023-01-09T11:09:40Z")

</div>

Good day everyone. Background I'm building a search engine for a marketplace. Our market has products, sellers, and customers. Each product has many sellers with their locations. The number of sellers might be around 10…

---

## [Docker-compose setup healthcheck unhealthy](https://discuss.elastic.co/t/docker-compose-setup-healthcheck-unhealthy/321665)

<div class="topic-metadata">

**Author:** [@divadpoc](https://discuss.elastic.co/u/divadpoc)\
**Replies:** 1\
**Last updated:** [January 9, 2023, 10:36am UTC](https://discuss.elastic.co/t/docker-compose-setup-healthcheck-unhealthy/321665 "2023-01-09T10:36:39Z")

</div>

Hello, I'm using the example docker-compose file as presented here - with stack version 8.5.2 . I wrapped the docker-compose command into a systemd script. All services were running until today when I had to restart my …

---

## [Brand new master doesn't join cluster bootstrap error](https://discuss.elastic.co/t/brand-new-master-doesnt-join-cluster-bootstrap-error/322567)

<div class="topic-metadata">

**Author:** [@faxm0dem](https://discuss.elastic.co/u/faxm0dem)\
**Replies:** 10\
**Last updated:** [January 9, 2023, 9:48am UTC](https://discuss.elastic.co/t/brand-new-master-doesnt-join-cluster-bootstrap-error/322567 "2023-01-09T09:48:36Z")

</div>

Hi, We have a 7.10.2 cluster with multiple data-only nodes and 3 master-only nodes. We wiped one of the 3 masters clean (reinstall), and now it refuses to join the cluster: master not discovered yet, this node has not…

---

## [All request sent to the same host while init RestHighLevelClient with domain](https://discuss.elastic.co/t/all-request-sent-to-the-same-host-while-init-resthighlevelclient-with-domain/321803)

<div class="topic-metadata">

**Author:** [@DJ\_Zhu](https://discuss.elastic.co/u/DJ_Zhu)\
**Replies:** 2\
**Last updated:** [January 9, 2023, 6:42am UTC](https://discuss.elastic.co/t/all-request-sent-to-the-same-host-while-init-resthighlevelclient-with-domain/321803 "2023-01-09T06:42:38Z")

</div>

I have an es cluster with multiple node. Recently I found that the bulk requests to the cluster seems uneven. Here is the demo code: import org.apache.http.HttpHost; import org.elasticsearch.action.ActionListener; imp…

---

## [Moving license from old cluster nodes to new ones](https://discuss.elastic.co/t/moving-license-from-old-cluster-nodes-to-new-ones/322592)

<div class="topic-metadata">

**Author:** [@Nick.Evans](https://discuss.elastic.co/u/Nick.Evans)\
**Replies:** 7\
**Last updated:** [January 9, 2023, 6:27am UTC](https://discuss.elastic.co/t/moving-license-from-old-cluster-nodes-to-new-ones/322592 "2023-01-09T06:27:48Z")

</div>

We have a 3 node elasticsearch cluster. (node-1, node-2, node-3) We have a need to introduce 3 new nodes and fail out the original 3. I have built nodes 4, 5 and 6 and successfully added them to cluster. Once the clus…

---

## [Why translog\_ops still greater than 0 after flush](https://discuss.elastic.co/t/why-translog-ops-still-greater-than-0-after-flush/322095)

<div class="topic-metadata">

**Author:** [@DJ\_Zhu](https://discuss.elastic.co/u/DJ_Zhu)\
**Replies:** 1\
**Last updated:** [January 9, 2023, 6:26am UTC](https://discuss.elastic.co/t/why-translog-ops-still-greater-than-0-after-flush/322095 "2023-01-09T06:26:53Z")

</div>

I want to move shards between different kind of nodes in my cluster. First, I stop write any docs into index and invoked POST my\_idx/\_flush to commit translog to lucene. Then change the index.routing.allocation.require …

---

## [Wildcard Queries Vs Query\_string Queries](https://discuss.elastic.co/t/wildcard-queries-vs-query-string-queries/322692)

<div class="topic-metadata">

**Author:** [@Sheharyar\_Khalid](https://discuss.elastic.co/u/Sheharyar_Khalid)\
**Replies:** 1\
**Last updated:** [January 9, 2023, 5:21am UTC](https://discuss.elastic.co/t/wildcard-queries-vs-query-string-queries/322692 "2023-01-09T05:21:39Z")

</div>

Hello, I am looking for wildcard matching of events on log data in elasticsearch. For example i want to match IP addresses in my data but I only know the ending address (i want to match to 192.100.1.1 but i search for \*…

---

## [Kubernetes CPU Memory Usage in %](https://discuss.elastic.co/t/kubernetes-cpu-memory-usage-in/322429)

<div class="topic-metadata">

**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Replies:** 1\
**Last updated:** [January 9, 2023, 4:08am UTC](https://discuss.elastic.co/t/kubernetes-cpu-memory-usage-in/322429 "2023-01-09T04:08:56Z")

</div>

Hi Team, We need to find the CPU and Memory utilization % of pods in kubernetes through metricbeat. I have used the formula as: CPU: { "aggs": { "timeseries": { "auto\_date\_histogram": {"field": "@timestamp", "buc…

---

## [Wildcard search on all fields](https://discuss.elastic.co/t/wildcard-search-on-all-fields/322693)

<div class="topic-metadata">

**Author:** [@Sheharyar\_Khalid](https://discuss.elastic.co/u/Sheharyar_Khalid)\
**Replies:** 2\
**Last updated:** [January 9, 2023, 2:55am UTC](https://discuss.elastic.co/t/wildcard-search-on-all-fields/322693 "2023-01-09T02:55:08Z")

</div>

Hello, I want to search a wildcard string on all fields of a document. Is there any way to do it? I was able to write this query but for some reason it always returns empty. {"bool": {"must" : \[{"wildcard": {"\_all": "…

---

## [Date histogram aggregation seems incorrect with calendar\_interval and when offset \>= 30 days](https://discuss.elastic.co/t/date-histogram-aggregation-seems-incorrect-with-calendar-interval-and-when-offset-30-days/322492)

<div class="topic-metadata">

**Author:** [@xiaofei](https://discuss.elastic.co/u/xiaofei)\
**Replies:** 3\
**Last updated:** [January 9, 2023, 1:26am UTC](https://discuss.elastic.co/t/date-histogram-aggregation-seems-incorrect-with-calendar-interval-and-when-offset-30-days/322492 "2023-01-09T01:26:23Z")

</div>

Based on this doc, elasticsearch supports Calendar-aware interval on data histogram aggregation. Specially for a "quarter" interval: "One quarter is the interval between the start day of the month and time of day and t…

---

## [How to get average of items in an array of a nested field?](https://discuss.elastic.co/t/how-to-get-average-of-items-in-an-array-of-a-nested-field/322690)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 4\
**Last updated:** [January 9, 2023, 12:32am UTC](https://discuss.elastic.co/t/how-to-get-average-of-items-in-an-array-of-a-nested-field/322690 "2023-01-09T00:32:28Z")

</div>

I'm trying to get the average price of products that are in stock across my different physical warehouses. I made this index: PUT warehouse POST warehouse/\_mapping { "properties": { "inventory": { "prope…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=317)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=319)
