# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=335

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 336

---

## [How to update a document using script? (es\_version=8.4.3, javaApi)](https://discuss.elastic.co/t/how-to-update-a-document-using-script-es-version-8-4-3-javaapi/320246)

<div class="topic-metadata">

**Author:** [@infinite-war](https://discuss.elastic.co/u/infinite-war)\
**Replies:** 0\
**Last updated:** [December 1, 2022, 12:58pm UTC](https://discuss.elastic.co/t/how-to-update-a-document-using-script-es-version-8-4-3-javaapi/320246 "2022-12-01T12:58:44Z")

</div>

config elasticsearch 8.4.3 (javaApi) JDK 17 created index PUT testdb { "mappings": { "properties": { "name":{ "type":"text" }, "desc":{ "type":"text" }, "score":{ …

---

## [Elasticsearch pods fail unexpectedly when deploying Elastic Stack through helm on minikube](https://discuss.elastic.co/t/elasticsearch-pods-fail-unexpectedly-when-deploying-elastic-stack-through-helm-on-minikube/320194)

<div class="topic-metadata">

**Author:** [@Jan\_Hein\_de\_Jong](https://discuss.elastic.co/u/Jan_Hein_de_Jong)\
**Replies:** 0\
**Last updated:** [November 30, 2022, 8:46pm UTC](https://discuss.elastic.co/t/elasticsearch-pods-fail-unexpectedly-when-deploying-elastic-stack-through-helm-on-minikube/320194 "2022-11-30T20:46:30Z")

</div>

Hi there, I'm trying to deploy ELK stack to a local minikube k8s cluster, to play around, and see if this is something we want to roll out at our company (which uses an on-prem hosted k8s cluster). I've executed the fo…

---

## [Data stream resilience](https://discuss.elastic.co/t/data-stream-resilience/320166)

<div class="topic-metadata">

**Author:** [@lukaszst](https://discuss.elastic.co/u/lukaszst)\
**Replies:** 6\
**Last updated:** [December 1, 2022, 9:58am UTC](https://discuss.elastic.co/t/data-stream-resilience/320166 "2022-12-01T09:58:23Z")

</div>

Hello I'm migrating indices-\>datastreams in relatively large elastic cluster (15 data nodes, 80k docs per second). For our current indices-based setup we used to monitor if currently used index get red to create new in…

---

## [What is \_recovery\_source field?](https://discuss.elastic.co/t/what-is-recovery-source-field/320108)

<div class="topic-metadata">

**Author:** [@ruslaniv](https://discuss.elastic.co/u/ruslaniv)\
**Replies:** 2\
**Last updated:** [December 1, 2022, 9:54am UTC](https://discuss.elastic.co/t/what-is-recovery-source-field/320108 "2022-12-01T09:54:15Z")

</div>

I have initiated indexing operation via python client that was abnormally terminated. When I ran curl --location --request POST 'http://127.0.0.1:9200/index\_name.vec/\_disk\_usage?run\_expensive\_tasks=true to analyze the …

---

## [How to exclude dense\_vector field from being stored](https://discuss.elastic.co/t/how-to-exclude-dense-vector-field-from-being-stored/320034)

<div class="topic-metadata">

**Author:** [@ruslaniv](https://discuss.elastic.co/u/ruslaniv)\
**Replies:** 6\
**Last updated:** [December 1, 2022, 8:20am UTC](https://discuss.elastic.co/t/how-to-exclude-dense-vector-field-from-being-stored/320034 "2022-12-01T08:20:35Z")

</div>

How can I exclude dense\_vector field from being stored in the \_source? I ran an experiment indexing approximately 6\_000\_000 documents and here is what I found out after running curl --location --request POST 'http://12…

---

## [Prevent thai tokenizer from tokenizing hashtag](https://discuss.elastic.co/t/prevent-thai-tokenizer-from-tokenizing-hashtag/320225)

<div class="topic-metadata">

**Author:** [@TFP](https://discuss.elastic.co/u/TFP)\
**Replies:** 0\
**Last updated:** [December 1, 2022, 8:19am UTC](https://discuss.elastic.co/t/prevent-thai-tokenizer-from-tokenizing-hashtag/320225 "2022-12-01T08:19:03Z")

</div>

I'm currently using the thai tokenizer and wanted to preserve hashtag words but the tokenizer keeps on removing the hashtag symbol. ES version: 7.16.2 GET /\_analyze { "tokenizer": "thai", "text": "#รายการพ #hashtag" …

---

## [error\_class=Fluent::Plugin::ElasticsearchErrorHandler::ElasticsearchError error="400 - Rejected by Elasticsearch](https://discuss.elastic.co/t/error-class-fluent-elasticsearcherror-error-400-rejected-by-elasticsearch/320215)

<div class="topic-metadata">

**Author:** [@Somasuntaram\_MU](https://discuss.elastic.co/u/Somasuntaram_MU)\
**Replies:** 0\
**Last updated:** [December 1, 2022, 7:03am UTC](https://discuss.elastic.co/t/error-class-fluent-elasticsearcherror-error-400-rejected-by-elasticsearch/320215 "2022-12-01T07:03:11Z")

</div>

I am setting up EFK stack using docker-compose. Fluentd is able to receive the logs from http-endpoint. But the logs are getting rejected by elasticsearch. Though I am able to receive the error as bad argument and reje…

---

## [Query\_string search within nested types](https://discuss.elastic.co/t/query-string-search-within-nested-types/320218)

<div class="topic-metadata">

**Author:** [@vlasami](https://discuss.elastic.co/u/vlasami)\
**Replies:** 0\
**Last updated:** [December 1, 2022, 7:26am UTC](https://discuss.elastic.co/t/query-string-search-within-nested-types/320218 "2022-12-01T07:26:47Z")

</div>

Hi, We recently introduced nested type to our document structure and found that it has some restriction with the query\_string search type, which we use extensively. The search documentation says that: "Avoid using th…

---

## [Bootstrap check failed max file descriptors \[16384\] for elasticsearch process is too low, increase to at least \[65535\]](https://discuss.elastic.co/t/bootstrap-check-failed-max-file-descriptors-16384-for-elasticsearch-process-is-too-low-increase-to-at-least-65535/320140)

<div class="topic-metadata">

**Author:** [@Dhakarlabh](https://discuss.elastic.co/u/Dhakarlabh)\
**Replies:** 2\
**Last updated:** [December 1, 2022, 6:12am UTC](https://discuss.elastic.co/t/bootstrap-check-failed-max-file-descriptors-16384-for-elasticsearch-process-is-too-low-increase-to-at-least-65535/320140 "2022-12-01T06:12:59Z")

</div>

While deploying from the helm chart on the dual stack cluster. I am facing this bootstrap check failed issue. It is working fine for single stack IPv4 cluster. I tried to configure the network.host="global:ipv6" but it i…

---

## [Include Data Streams in ILM Policy](https://discuss.elastic.co/t/include-data-streams-in-ilm-policy/319404)

<div class="topic-metadata">

**Author:** [@waleedkh](https://discuss.elastic.co/u/waleedkh)\
**Replies:** 5\
**Last updated:** [December 1, 2022, 4:28am UTC](https://discuss.elastic.co/t/include-data-streams-in-ilm-policy/319404 "2022-12-01T04:28:15Z")

</div>

Hi There, I am making use of Data Streams and an ILM Policy to delete data that is rolled over from Hot phase to delete phase, this happens after 3 days. I wanted to check if there is a way to include the actual deleti…

---

## [Does nodequerycache need to be configured to be created?](https://discuss.elastic.co/t/does-nodequerycache-need-to-be-configured-to-be-created/320201)

<div class="topic-metadata">

**Author:** [@winteriscomming](https://discuss.elastic.co/u/winteriscomming)\
**Replies:** 1\
**Last updated:** [December 1, 2022, 1:30am UTC](https://discuss.elastic.co/t/does-nodequerycache-need-to-be-configured-to-be-created/320201 "2022-12-01T01:30:57Z")

</div>

A 404 not found error occurs when querying the nodequerycache index with cat api. According to the docs, it is said that node query cache can be set in elasticsearch.yml, but since the default value is enabled, I am con…

---

## [Elasticsearch keeps crashing and won't restart often](https://discuss.elastic.co/t/elasticsearch-keeps-crashing-and-wont-restart-often/320199)

<div class="topic-metadata">

**Author:** [@vesnindev](https://discuss.elastic.co/u/vesnindev)\
**Replies:** 1\
**Last updated:** [December 1, 2022, 1:02am UTC](https://discuss.elastic.co/t/elasticsearch-keeps-crashing-and-wont-restart-often/320199 "2022-12-01T01:02:36Z")

</div>

Hello. Tell me why Elasticsearch keeps crashing and often doesn't restart? \[2022-12-01T00:50:12.915+0000\]\[16713\]\[safepoint \] Safepoint "ICBufferFull", Time since last: 1183469 ns, Reaching safepoint: 22369 ns, At saf…

---

## [Rate limiter](https://discuss.elastic.co/t/rate-limiter/320177)

<div class="topic-metadata">

**Author:** [@srobison62](https://discuss.elastic.co/u/srobison62)\
**Replies:** 1\
**Last updated:** [November 30, 2022, 10:27pm UTC](https://discuss.elastic.co/t/rate-limiter/320177 "2022-11-30T22:27:01Z")

</div>

I understand that Elastic search has a built in functionality to control merges of data so if there is a huge increasing logs it doesn't overload the system. I am wondering where I could actually view these settings or i…

---

## [How flexible the ilm rollover is?](https://discuss.elastic.co/t/how-flexible-the-ilm-rollover-is/320169)

<div class="topic-metadata">

**Author:** [@ThePohorc](https://discuss.elastic.co/u/ThePohorc)\
**Replies:** 4\
**Last updated:** [November 30, 2022, 9:31pm UTC](https://discuss.elastic.co/t/how-flexible-the-ilm-rollover-is/320169 "2022-11-30T21:31:36Z")

</div>

Hello! Trying to understand ILM rollover. I created a test on elastic.co and follow the example on: Tutorial: Automate rollover with ILM | Elasticsearch Guide \[8.5\] | Elastic I set rollover on 10 documents. Now, when …

---

## [Architecture Question](https://discuss.elastic.co/t/architecture-question/320191)

<div class="topic-metadata">

**Author:** [@bsherman](https://discuss.elastic.co/u/bsherman)\
**Replies:** 1\
**Last updated:** [November 30, 2022, 9:18pm UTC](https://discuss.elastic.co/t/architecture-question/320191 "2022-11-30T21:18:32Z")

</div>

We have a 10 node cluster running 7.6 on s390x. I'm aware s390x is not supported but we've been able to make it work. We want to upgrade to 7.17. With the 7.17 upgrade we want to have at least one node to use machine l…

---

## [How to setup 'elastic' account from source code](https://discuss.elastic.co/t/how-to-setup-elastic-account-from-source-code/320189)

<div class="topic-metadata">

**Author:** [@augxmas](https://discuss.elastic.co/u/augxmas)\
**Replies:** 0\
**Last updated:** [November 30, 2022, 7:58pm UTC](https://discuss.elastic.co/t/how-to-setup-elastic-account-from-source-code/320189 "2022-11-30T19:58:45Z")

</div>

I downloaded elasticsearch source from git then run it via gradle with command 'gradlew run'. when i try to access http://localhost:9200, ES is asking id/password. usally, I setup 'elastics' account with 'elasticsearch…

---

## [\[SOLVED\] Mistake input with Elastic PHP 8.5.0](https://discuss.elastic.co/t/solved-mistake-input-with-elastic-php-8-5-0/320182)

<div class="topic-metadata">

**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\
**Replies:** 1\
**Last updated:** [November 30, 2022, 6:29pm UTC](https://discuss.elastic.co/t/solved-mistake-input-with-elastic-php-8-5-0/320182 "2022-11-30T18:29:22Z")

</div>

I'm using PHP Client API for work with SQL (intensive) But I've a problem. In my first few unit tests, I was using a simple named index. My surprise has been when trying to do the integration tests, when I took it out…

---

## [Dotnet Client(\`Elastic.Clients.Elasticsearch\`) doesn't support knn\_search](https://discuss.elastic.co/t/dotnet-client-elastic-clients-elasticsearch-doesnt-support-knn-search/319795)

<div class="topic-metadata">

**Author:** [@Jiaxiang\_Wang](https://discuss.elastic.co/u/Jiaxiang_Wang)\
**Replies:** 3\
**Last updated:** [November 30, 2022, 3:29pm UTC](https://discuss.elastic.co/t/dotnet-client-elastic-clients-elasticsearch-doesnt-support-knn-search/319795 "2022-11-30T15:29:32Z")

</div>

I try to use elasticsearch knn\_search feature in dotnet. However, I don't think last stable version of es dotnet client Elastic.Clients.Elasticsearch(version 8.0.1) support knn\_search. I try to use Knn feature like cod…

---

## [Retrieve selected fields from a search - Does it work?](https://discuss.elastic.co/t/retrieve-selected-fields-from-a-search-does-it-work/320133)

<div class="topic-metadata">

**Author:** [@Grigio\_Basi](https://discuss.elastic.co/u/Grigio_Basi)\
**Replies:** 1\
**Last updated:** [November 30, 2022, 12:54pm UTC](https://discuss.elastic.co/t/retrieve-selected-fields-from-a-search-does-it-work/320133 "2022-11-30T12:54:37Z")

</div>

I have user's index. Okay. I wonna get limited list of my index fields. I read documentation and found it. I use \_source query and it doesn't work { "\_source": { "includes": \[ "is\_online"\], "excludes": \["logi…

---

## [Elastic Multi tenancy shared index](https://discuss.elastic.co/t/elastic-multi-tenancy-shared-index/319770)

<div class="topic-metadata">

**Author:** [@Zedson.Sagar](https://discuss.elastic.co/u/Zedson.Sagar)\
**Replies:** 7\
**Last updated:** [November 30, 2022, 12:27pm UTC](https://discuss.elastic.co/t/elastic-multi-tenancy-shared-index/319770 "2022-11-30T12:27:29Z")

</div>

Hi, we are planning to use Elasticsearch in a multi tenant environment. Based on the article here - https://www.elastic.co/blog/found-multi-tenancy We want to use a shared index model for all the tenants but are stumb…

---

## [Aggregation on flattened fields slows down due bulk writing](https://discuss.elastic.co/t/aggregation-on-flattened-fields-slows-down-due-bulk-writing/320149)

<div class="topic-metadata">

**Author:** [@Asym](https://discuss.elastic.co/u/Asym)\
**Replies:** 1\
**Last updated:** [November 30, 2022, 12:21pm UTC](https://discuss.elastic.co/t/aggregation-on-flattened-fields-slows-down-due-bulk-writing/320149 "2022-11-30T12:21:06Z")

</div>

Hi! While working with aggregation on flattened fields, we encountered a problem. We have a cluster, with 3 nodes, number of shards - 10, number of replicas - 2 and ~7 mln documents. Average aggregation (with flattene…

---

## [ElasticSearchAPIConnector - snippet or highlight query](https://discuss.elastic.co/t/elasticsearchapiconnector-snippet-or-highlight-query/320147)

<div class="topic-metadata">

**Author:** [@tavaradhan](https://discuss.elastic.co/u/tavaradhan)\
**Replies:** 0\
**Last updated:** [November 30, 2022, 11:36am UTC](https://discuss.elastic.co/t/elasticsearchapiconnector-snippet-or-highlight-query/320147 "2022-11-30T11:36:59Z")

</div>

hi, I am experimenting with ElasticsearchAPIConnector using SearchUI on a small document base. I want to get the full field returned with highlights. The field is less than 1000 characters long. I tried using highlight …

---

## [ILM, conditions field is empty](https://discuss.elastic.co/t/ilm-conditions-field-is-empty/319570)

<div class="topic-metadata">

**Author:** [@vitkon](https://discuss.elastic.co/u/vitkon)\
**Replies:** 2\
**Last updated:** [November 30, 2022, 8:17am UTC](https://discuss.elastic.co/t/ilm-conditions-field-is-empty/319570 "2022-11-30T08:17:08Z")

</div>

Hi, team! I created an ILM PUT \_ilm/policy/120-days-default { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": { "max\_primary\_shard\_size": "…

---

## [Index mapping limit](https://discuss.elastic.co/t/index-mapping-limit/320127)

<div class="topic-metadata">

**Author:** [@gjahagir](https://discuss.elastic.co/u/gjahagir)\
**Replies:** 2\
**Last updated:** [November 30, 2022, 9:25am UTC](https://discuss.elastic.co/t/index-mapping-limit/320127 "2022-11-30T09:25:00Z")

</div>

Hi, I'm new to elastic and exploring its possibilities to incorporate into our application. Ours is a multi tenant application and based on several blogs we narrowed down to use Shared index model of elastic where all …

---

## [Rollup Jobs losing data](https://discuss.elastic.co/t/rollup-jobs-losing-data/320072)

<div class="topic-metadata">

**Author:** [@nicfr9](https://discuss.elastic.co/u/nicfr9)\
**Replies:** 1\
**Last updated:** [November 30, 2022, 9:09am UTC](https://discuss.elastic.co/t/rollup-jobs-losing-data/320072 "2022-11-30T09:09:01Z")

</div>

Hi everybody, I have a big problem with rollup jobs. When I try to execute a rollup job of 51 million recors, I don't get the expected result. I have various terms and metrics to aggregate; down below you can check th…

---

## [Bulk Observable giving refresh error on inserting documents](https://discuss.elastic.co/t/bulk-observable-giving-refresh-error-on-inserting-documents/319726)

<div class="topic-metadata">

**Author:** [@ali\_haider](https://discuss.elastic.co/u/ali_haider)\
**Replies:** 3\
**Last updated:** [November 30, 2022, 9:01am UTC](https://discuss.elastic.co/t/bulk-observable-giving-refresh-error-on-inserting-documents/319726 "2022-11-30T09:01:06Z")

</div>

Hi, I am using Elastic Cloud Elastic Stack version : 7.17 NEST Nuget Package : 7.17 I am consuming bulk Observable indexing with and trying to insert records in bulk and facing the following error The Exception mes…

---

## [How do I write correct query in nested document?](https://discuss.elastic.co/t/how-do-i-write-correct-query-in-nested-document/320065)

<div class="topic-metadata">

**Author:** [@john2022](https://discuss.elastic.co/u/john2022)\
**Replies:** 0\
**Last updated:** [November 29, 2022, 3:45pm UTC](https://discuss.elastic.co/t/how-do-i-write-correct-query-in-nested-document/320065 "2022-11-29T15:45:08Z")

</div>

I have two indices: country and person PUT person { "mappings": { "properties": { "info": { "type": "nested", "properties": { "int\_val": {"type": "integer"}, "str\_val": {…

---

## [I cannot sort the aggregation result by the values of the grouped set](https://discuss.elastic.co/t/i-cannot-sort-the-aggregation-result-by-the-values-of-the-grouped-set/320121)

<div class="topic-metadata">

**Author:** [@Emanuel\_Zienecker](https://discuss.elastic.co/u/Emanuel_Zienecker)\
**Replies:** 1\
**Last updated:** [November 30, 2022, 8:36am UTC](https://discuss.elastic.co/t/i-cannot-sort-the-aggregation-result-by-the-values-of-the-grouped-set/320121 "2022-11-30T08:36:11Z")

</div>

Example: I have a parent/child relation. The parent are devices, the children are data points. The data points have e.g. temperature values. Now I want to make an aggregation in which I determine the maximum temperature …

---

## [How to use QueryBuilders class for MultiMatchQuery in Elasticsearch 8.x](https://discuss.elastic.co/t/how-to-use-querybuilders-class-for-multimatchquery-in-elasticsearch-8-x/319765)

<div class="topic-metadata">

**Author:** [@Olayode\_possible](https://discuss.elastic.co/u/Olayode_possible)\
**Replies:** 2\
**Last updated:** [November 30, 2022, 7:43am UTC](https://discuss.elastic.co/t/how-to-use-querybuilders-class-for-multimatchquery-in-elasticsearch-8-x/319765 "2022-11-30T07:43:58Z")

</div>

Hi everyone, I am a newbie in Elasticseach and am trying out stuff in order to gain more knowledge. I need help converting the below line of code written in Elasticseach 7.x to 8.x standard. any pointers to resources…

---

## [Elasticsearch ingestnode crashes on a specific document?](https://discuss.elastic.co/t/elasticsearch-ingestnode-crashes-on-a-specific-document/319723)

<div class="topic-metadata">

**Author:** [@shanke](https://discuss.elastic.co/u/shanke)\
**Replies:** 2\
**Last updated:** [November 30, 2022, 6:42am UTC](https://discuss.elastic.co/t/elasticsearch-ingestnode-crashes-on-a-specific-document/319723 "2022-11-30T06:42:07Z")

</div>

Hey! I wrote a small application for our company which indexes all documents on our file server with the ingest attachment processor. In 7.x (as an extra plugin) it was working fine, since the change to 8.x (buildin inge…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=334)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=336)
