# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=331

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 332

---

## [Enable soundex level search](https://discuss.elastic.co/t/enable-soundex-level-search/320904)

<div class="topic-metadata">

**Author:** [@ryendluri](https://discuss.elastic.co/u/ryendluri)\
**Replies:** 2\
**Last updated:** [December 9, 2022, 5:17pm UTC](https://discuss.elastic.co/t/enable-soundex-level-search/320904 "2022-12-09T17:17:32Z")

</div>

how to enable soundex search in querying data from Elastic search DB? thanks

---

## [Is it possible to reimplemented ukrainian build-in analyzer as a custom analyzer (extend ukrainian\_analyzer with shingle filter)?](https://discuss.elastic.co/t/is-it-possible-to-reimplemented-ukrainian-build-in-analyzer-as-a-custom-analyzer-extend-ukrainian-analyzer-with-shingle-filter/320888)

<div class="topic-metadata">

**Author:** [@va2dim](https://discuss.elastic.co/u/va2dim)\
**Replies:** 0\
**Last updated:** [December 9, 2022, 1:46pm UTC](https://discuss.elastic.co/t/is-it-possible-to-reimplemented-ukrainian-build-in-analyzer-as-a-custom-analyzer-extend-ukrainian-analyzer-with-shingle-filter/320888 "2022-12-09T13:46:27Z")

</div>

Need to reimplemented ukrainian build-in language analyzer as a custom analyzer (extend ukrainian analyzer with shingle filter). In russian we have russian\_stemmer that could be passed to custom analyzer. In ukrainian…

---

## [How to create snapshot on datastream](https://discuss.elastic.co/t/how-to-create-snapshot-on-datastream/320778)

<div class="topic-metadata">

**Author:** [@meternich](https://discuss.elastic.co/u/meternich)\
**Replies:** 1\
**Last updated:** [December 9, 2022, 1:43pm UTC](https://discuss.elastic.co/t/how-to-create-snapshot-on-datastream/320778 "2022-12-09T13:43:00Z")

</div>

Hello. Until recently I was using regular indexes for data collection. Every month there was a new index and i could snapshot indices by month and send them to my repo and delete them in elastic. Now I've changed data co…

---

## [Reindex vs Split index speeds](https://discuss.elastic.co/t/reindex-vs-split-index-speeds/320779)

<div class="topic-metadata">

**Author:** [@Daithi\_O\_Conchobhair](https://discuss.elastic.co/u/Daithi_O_Conchobhair)\
**Replies:** 8\
**Last updated:** [December 9, 2022, 1:23pm UTC](https://discuss.elastic.co/t/reindex-vs-split-index-speeds/320779 "2022-12-09T13:23:46Z")

</div>

Hi there, I have a relatively large index, 1.1TB, which currently has one shard due to a misconfiguration. I would like to keep my shard size around 50GB. I have two options I guess Split the index into a new index wi…

---

## [Percolator issue, matching queries](https://discuss.elastic.co/t/percolator-issue-matching-queries/320884)

<div class="topic-metadata">

**Author:** [@Mahesh\_Hegde](https://discuss.elastic.co/u/Mahesh_Hegde)\
**Replies:** 0\
**Last updated:** [December 9, 2022, 1:02pm UTC](https://discuss.elastic.co/t/percolator-issue-matching-queries/320884 "2022-12-09T13:02:43Z")

</div>

Hi Team, Issue module - percolator Issue Version - 8.3 & 8.4 Configuration Number of shards of percolator index - 2 Total documents indexed - 78000 approximate Index size = 30MB Details - We have about 78000 quer…

---

## [How to get average number of samples for time series data with DSL query?](https://discuss.elastic.co/t/how-to-get-average-number-of-samples-for-time-series-data-with-dsl-query/320841)

<div class="topic-metadata">

**Author:** [@bgyomorei\_c](https://discuss.elastic.co/u/bgyomorei_c)\
**Replies:** 2\
**Last updated:** [December 9, 2022, 11:26am UTC](https://discuss.elastic.co/t/how-to-get-average-number-of-samples-for-time-series-data-with-dsl-query/320841 "2022-12-09T11:26:28Z")

</div>

I want to get the average number of request per second(or minute) for performance testing data, but the basic aggregation possibilities i've found so far doesn't cover this. I could only do a count on a field, but that …

---

## [Logstash and elasticsearch bundled java update](https://discuss.elastic.co/t/logstash-and-elasticsearch-bundled-java-update/320853)

<div class="topic-metadata">

**Author:** [@Ravi\_Vishwakarma](https://discuss.elastic.co/u/Ravi_Vishwakarma)\
**Replies:** 2\
**Last updated:** [December 9, 2022, 11:01am UTC](https://discuss.elastic.co/t/logstash-and-elasticsearch-bundled-java-update/320853 "2022-12-09T11:01:43Z")

</div>

Hi, We are using ELK stack 7.17.2 in our environment. We have found vulnerability on Logstash and Elasticsearch for JDK. We have used jdk bundled one. Below is the VA snap. Please let me know how i can update the JDK …

---

## [Set Static Master Node in Elasticsearch Cluster](https://discuss.elastic.co/t/set-static-master-node-in-elasticsearch-cluster/320858)

<div class="topic-metadata">

**Author:** [@hjsroldan](https://discuss.elastic.co/u/hjsroldan)\
**Replies:** 5\
**Last updated:** [December 9, 2022, 9:22am UTC](https://discuss.elastic.co/t/set-static-master-node-in-elasticsearch-cluster/320858 "2022-12-09T09:22:08Z")

</div>

Hi, I have a 3 Node Elasticsearch. I have set the discovery.seed\_hosts: \["Node1", "Node2", "Node3"\] and cluster.initial\_master\_nodes: \["Node1"\]. What is the configuration if I want the master node " Node1" to be re-ele…

---

## [Elasticsearch bootstrap check](https://discuss.elastic.co/t/elasticsearch-bootstrap-check/320812)

<div class="topic-metadata">

**Author:** [@imdroid](https://discuss.elastic.co/u/imdroid)\
**Replies:** 3\
**Last updated:** [December 9, 2022, 8:32am UTC](https://discuss.elastic.co/t/elasticsearch-bootstrap-check/320812 "2022-12-09T08:32:59Z")

</div>

I'm trying to create an elasticcluster. the nodes are setup in two seperate servers. my network and transport details are as follows: network.host: 10.198.22.161 http.port: 9200 transport.host: 10.198.22.161 transport.t…

---

## [Deleting / editing existing analyzer in elastic index](https://discuss.elastic.co/t/deleting-editing-existing-analyzer-in-elastic-index/320838)

<div class="topic-metadata">

**Author:** [@Leonid\_P](https://discuss.elastic.co/u/Leonid_P)\
**Replies:** 3\
**Last updated:** [December 9, 2022, 8:17am UTC](https://discuss.elastic.co/t/deleting-editing-existing-analyzer-in-elastic-index/320838 "2022-12-09T08:17:27Z")

</div>

Hello! Is it safe to delete or change an analyzer in an existing index? Surfing through Stackoverflow and experimenting on my own I've found ways for both operations, i.e. curl -X PUT "localhost:9200/index\_name/\_setti…

---

## [Unable to create data stream in Elastic Search 7.9](https://discuss.elastic.co/t/unable-to-create-data-stream-in-elastic-search-7-9/320829)

<div class="topic-metadata">

**Author:** [@zain](https://discuss.elastic.co/u/zain)\
**Replies:** 3\
**Last updated:** [December 9, 2022, 8:03am UTC](https://discuss.elastic.co/t/unable-to-create-data-stream-in-elastic-search-7-9/320829 "2022-12-09T08:03:16Z")

</div>

Hello, I am trying to create data streams in my Elasticsearch which is 7.9 using this guide but unable to create as I cannot see options to route to State Management \> Index Management as I can see both are different op…

---

## [Error on uploading ML model to Elasticsearch](https://discuss.elastic.co/t/error-on-uploading-ml-model-to-elasticsearch/320803)

<div class="topic-metadata">

**Author:** [@Odd\_Erik\_Gronberg](https://discuss.elastic.co/u/Odd_Erik_Gronberg)\
**Replies:** 0\
**Last updated:** [December 8, 2022, 3:18pm UTC](https://discuss.elastic.co/t/error-on-uploading-ml-model-to-elasticsearch/320803 "2022-12-08T15:18:28Z")

</div>

I am trying to upload a ML model to Elasticsearch through the Eland client but there seems to be some issues. The model I am trying to upload is listed as a Compatible third party model in the documentation here: Mode…

---

## [Rollup Index Empty Data](https://discuss.elastic.co/t/rollup-index-empty-data/320860)

<div class="topic-metadata">

**Author:** [@Ingram\_Gultom](https://discuss.elastic.co/u/Ingram_Gultom)\
**Replies:** 0\
**Last updated:** [December 9, 2022, 6:37am UTC](https://discuss.elastic.co/t/rollup-index-empty-data/320860 "2022-12-09T06:37:05Z")

</div>

Hi I created rollup jobs for my index xxx\_113 but the rollups index is empty { - "jobs": \[ - { - "config": { - "id": "test\_rollup", "index\_pattern": "xxx\_113", "rollup\_index": "…

---

## [How to use min\_score parameter in ES percolator query?](https://discuss.elastic.co/t/how-to-use-min-score-parameter-in-es-percolator-query/320845)

<div class="topic-metadata">

**Author:** [@aneeshkoya](https://discuss.elastic.co/u/aneeshkoya)\
**Replies:** 2\
**Last updated:** [December 9, 2022, 6:28am UTC](https://discuss.elastic.co/t/how-to-use-min-score-parameter-in-es-percolator-query/320845 "2022-12-09T06:28:20Z")

</div>

Hi all. My case scenario is such that when the documents are percolated against the stored queries, only those queries that have a score greater than a threshold give a hit for the respective document. I tried min\_score…

---

## [Can We move mapping and template without moving data with snapshot and restore?](https://discuss.elastic.co/t/can-we-move-mapping-and-template-without-moving-data-with-snapshot-and-restore/320857)

<div class="topic-metadata">

**Author:** [@Vijaykumar\_Deshmukh1](https://discuss.elastic.co/u/Vijaykumar_Deshmukh1)\
**Replies:** 2\
**Last updated:** [December 9, 2022, 6:16am UTC](https://discuss.elastic.co/t/can-we-move-mapping-and-template-without-moving-data-with-snapshot-and-restore/320857 "2022-12-09T06:16:56Z")

</div>

Is it Possible? like i dont want take snapshot of any index but just want to take snapshot of cluster state and restore it !

---

## [What exactly elasticsearch is? Is it database or search engine](https://discuss.elastic.co/t/what-exactly-elasticsearch-is-is-it-database-or-search-engine/320856)

<div class="topic-metadata">

**Author:** [@Vijaykumar\_Deshmukh1](https://discuss.elastic.co/u/Vijaykumar_Deshmukh1)\
**Replies:** 2\
**Last updated:** [December 9, 2022, 6:10am UTC](https://discuss.elastic.co/t/what-exactly-elasticsearch-is-is-it-database-or-search-engine/320856 "2022-12-09T06:10:15Z")

</div>

Just Want Clarity Please Help

---

## [Fuzzy matching hashtag with Simple Query String Query](https://discuss.elastic.co/t/fuzzy-matching-hashtag-with-simple-query-string-query/320416)

<div class="topic-metadata">

**Author:** [@kabcampbell](https://discuss.elastic.co/u/kabcampbell)\
**Replies:** 2\
**Last updated:** [December 8, 2022, 10:44pm UTC](https://discuss.elastic.co/t/fuzzy-matching-hashtag-with-simple-query-string-query/320416 "2022-12-08T22:44:51Z")

</div>

I have an indexed field named "searchBucket" with the term "#revit" in it. Here is the analyzer applied to that field: "default" : { "filter" : \[ "lowercase", "asciifolding"…

---

## [Elasticsearch can't start service](https://discuss.elastic.co/t/elasticsearch-cant-start-service/320823)

<div class="topic-metadata">

**Author:** [@natthanon\_khr](https://discuss.elastic.co/u/natthanon_khr)\
**Replies:** 2\
**Last updated:** [December 8, 2022, 9:23pm UTC](https://discuss.elastic.co/t/elasticsearch-cant-start-service/320823 "2022-12-08T21:23:39Z")

</div>

I can't start and restart systemctl elasticsearch after reboot server, I want to know what is the reason please. this is log! \[2022-12-09T00:59:50,406\]\[WARN \]\[o.e.b.Natives \] \[vmcbmsudbu01\] unable to load JN…

---

## [Batch Upload with Enrich Policy Suddenly taking much longer](https://discuss.elastic.co/t/batch-upload-with-enrich-policy-suddenly-taking-much-longer/320493)

<div class="topic-metadata">

**Author:** [@cj\_hillbrand](https://discuss.elastic.co/u/cj_hillbrand)\
**Replies:** 2\
**Last updated:** [December 8, 2022, 9:13pm UTC](https://discuss.elastic.co/t/batch-upload-with-enrich-policy-suddenly-taking-much-longer/320493 "2022-12-08T21:13:27Z")

</div>

Hello all, My team has been running a single-vm elasticsearch instance for about a year and we are currently facing an issue when it comes to batch uploading documents, which is also assigned an enrichment policy. To h…

---

## [Escaping a forward slash / in a regex match](https://discuss.elastic.co/t/escaping-a-forward-slash-in-a-regex-match/320828)

<div class="topic-metadata">

**Author:** [@gentle\_ghost](https://discuss.elastic.co/u/gentle_ghost)\
**Replies:** 0\
**Last updated:** [December 8, 2022, 8:05pm UTC](https://discuss.elastic.co/t/escaping-a-forward-slash-in-a-regex-match/320828 "2022-12-08T20:05:41Z")

</div>

Hello, This should be rather simple but I'm definitely overthinking this. I've tried escaping a forward slash in a regex match for a painless script in an ingest pipeline and it fails every combination I try. I have t…

---

## [How query\_string work underlying](https://discuss.elastic.co/t/how-query-string-work-underlying/320807)

<div class="topic-metadata">

**Author:** [@hieple18](https://discuss.elastic.co/u/hieple18)\
**Replies:** 1\
**Last updated:** [December 8, 2022, 6:01pm UTC](https://discuss.elastic.co/t/how-query-string-work-underlying/320807 "2022-12-08T18:01:52Z")

</div>

I am trying to figure out how query\_string work underlying. cause I want to compare performance of using query\_string with other solution I tried to deep dive into source code but no answer example I have a query { …

---

## [Self-hosting and license](https://discuss.elastic.co/t/self-hosting-and-license/320767)

<div class="topic-metadata">

**Author:** [@leo\_girault](https://discuss.elastic.co/u/leo_girault)\
**Replies:** 2\
**Last updated:** [December 8, 2022, 4:52pm UTC](https://discuss.elastic.co/t/self-hosting-and-license/320767 "2022-12-08T16:52:21Z")

</div>

Hi there, First I'm sorry if this question has already been answered but I've not been able to find this information neither on official Elasticsearch documentation nor on Discussion / Forums. So far we are using in my…

---

## [Using ElasticSearch(from ECK) storage with Azure remote storages](https://discuss.elastic.co/t/using-elasticsearch-from-eck-storage-with-azure-remote-storages/320797)

<div class="topic-metadata">

**Author:** [@OlLap](https://discuss.elastic.co/u/OlLap)\
**Replies:** 0\
**Last updated:** [December 8, 2022, 2:09pm UTC](https://discuss.elastic.co/t/using-elasticsearch-from-eck-storage-with-azure-remote-storages/320797 "2022-12-08T14:09:26Z")

</div>

Hello, is it possible to use any of the Azure storage types (Files share or Blob container) with Elasticsearch installed on Azure Kubernetes Cluster? I tried with Azure Disks and everything works, but building Hot-Warm-…

---

## [Update alert using index API](https://discuss.elastic.co/t/update-alert-using-index-api/320800)

<div class="topic-metadata">

**Author:** [@Med2](https://discuss.elastic.co/u/Med2)\
**Replies:** 0\
**Last updated:** [December 8, 2022, 2:48pm UTC](https://discuss.elastic.co/t/update-alert-using-index-api/320800 "2022-12-08T14:48:03Z")

</div>

In order to retrieve all alerts that appear on kibana I used the "GET /.internal.alerts-security.alerts-\*/\_search" API. I know there is an API for updating indexes and was wondering if I can use it to update an alert in…

---

## [Issue with nfs server, getting error where using repo.path](https://discuss.elastic.co/t/issue-with-nfs-server-getting-error-where-using-repo-path/320716)

<div class="topic-metadata">

**Author:** [@luis\_ernesto\_alcanta](https://discuss.elastic.co/u/luis_ernesto_alcanta)\
**Replies:** 3\
**Last updated:** [December 8, 2022, 12:32pm UTC](https://discuss.elastic.co/t/issue-with-nfs-server-getting-error-where-using-repo-path/320716 "2022-12-08T12:32:09Z")

</div>

Hi I try to use a nfs server to run some backups: I am configuring elastic.yml in next way: apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: quickstart namespace: rentallo-elastic sp…

---

## [How to create multiple dense vector field?](https://discuss.elastic.co/t/how-to-create-multiple-dense-vector-field/320514)

<div class="topic-metadata">

**Author:** [@sungwon1110](https://discuss.elastic.co/u/sungwon1110)\
**Replies:** 1\
**Last updated:** [December 8, 2022, 12:24pm UTC](https://discuss.elastic.co/t/how-to-create-multiple-dense-vector-field/320514 "2022-12-08T12:24:35Z")

</div>

Im trying to create multiple dense vector field. This is my mapping code: { "mappings": { "properties": { "ABSTRACT\_vector": { "type": "dense\_vector", "dims": 384 }, "BACKGROUND\_vector": { "type": "dense\_vector…

---

## [Parsing key value pairs from 2 seperate fields into several fields in ingest pipeline](https://discuss.elastic.co/t/parsing-key-value-pairs-from-2-seperate-fields-into-several-fields-in-ingest-pipeline/320782)

<div class="topic-metadata">

**Author:** [@DennisLC](https://discuss.elastic.co/u/DennisLC)\
**Replies:** 0\
**Last updated:** [December 8, 2022, 12:11pm UTC](https://discuss.elastic.co/t/parsing-key-value-pairs-from-2-seperate-fields-into-several-fields-in-ingest-pipeline/320782 "2022-12-08T12:11:44Z")

</div>

I have just started ingesting 0365 audit logs, and I have come across the following field: o365.audit.ExtraProperties.value that I would like to parse out to several fields (as it contains comma seperated values) in my…

---

## [Delete index older than a week](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737)

<div class="topic-metadata">

**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\
**Replies:** 23\
**Last updated:** [December 8, 2022, 10:26am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737 "2022-12-08T10:26:15Z")

</div>

Currently i have logs from 5 to 6 servers coming to elk. I want to delete all indices older than a week. what is the best way to achieve this? i went through ILM but didn't get the exact way to do this

---

## [Performance: Sorting / Filtering by runtime fields](https://discuss.elastic.co/t/performance-sorting-filtering-by-runtime-fields/320540)

<div class="topic-metadata">

**Author:** [@kennyprisjakt](https://discuss.elastic.co/u/kennyprisjakt)\
**Replies:** 2\
**Last updated:** [December 8, 2022, 9:58am UTC](https://discuss.elastic.co/t/performance-sorting-filtering-by-runtime-fields/320540 "2022-12-08T09:58:38Z")

</div>

Hey, I'm looking into getting price conversions up to date in my indices. Price data: Updated index time Price conversions: Updated in query time (via runtime fields) The data for the currency conversion changes ofte…

---

## [.monitoring-$product-$date index](https://discuss.elastic.co/t/monitoring-product-date-index/320766)

<div class="topic-metadata">

**Author:** [@plessuk](https://discuss.elastic.co/u/plessuk)\
**Replies:** 0\
**Last updated:** [December 8, 2022, 9:57am UTC](https://discuss.elastic.co/t/monitoring-product-date-index/320766 "2022-12-08T09:57:34Z")

</div>

Hello team, I faced with problem, that monitoring indexes create without ILM policy, I tried to find solution, how I can configure ILM to this monitoring indexes, Tried create Index template with predefined ILM policy…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=330)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=332)
