# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=338 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 339 --- ## [Enrich policy execution interval in Elasticsearch 8.5](https://discuss.elastic.co/t/enrich-policy-execution-interval-in-elasticsearch-8-5/319863)
**Author:** [@Jan\_lindroos](https://discuss.elastic.co/u/Jan_lindroos)\ **Replies:** 5\ **Last updated:** [November 27, 2022, 1:05pm UTC](https://discuss.elastic.co/t/enrich-policy-execution-interval-in-elasticsearch-8-5/319863 "2022-11-27T13:05:15Z")
Hi, the elastic docs for 8.5 says that by default the execution policies are executed every 15 minutes, but as far as I can see from the timestamp of the enrich index, the policy has not been executed after I initially e… --- ## [Locating relevant build instructions for ELK over LAN](https://discuss.elastic.co/t/locating-relevant-build-instructions-for-elk-over-lan/319853)
**Author:** [@steves](https://discuss.elastic.co/u/steves)\ **Replies:** 8\ **Last updated:** [November 26, 2022, 9:27pm UTC](https://discuss.elastic.co/t/locating-relevant-build-instructions-for-elk-over-lan/319853 "2022-11-26T21:27:12Z")
Hi all, I've been doing a number of installs towards getting a fully working ELK system and I've not yet gotten to the L part. In the end I'm trying to end up with is a MySQL db search set up that is accessible over the… --- ## [Is it possible to create a stopword filter, when using tokenizer = " keyword"?](https://discuss.elastic.co/t/is-it-possible-to-create-a-stopword-filter-when-using-tokenizer-keyword/319865)
**Author:** [@Ivo\_Tavares](https://discuss.elastic.co/u/Ivo_Tavares)\ **Replies:** 0\ **Last updated:** [November 26, 2022, 6:31pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-a-stopword-filter-when-using-tokenizer-keyword/319865 "2022-11-26T18:31:20Z")
Right now, I'm able to create a working stopword filter in the following way. company\_name\_stopword = \["inc","corp"\] \_company\_name\_stopword\_filter = dsl.token\_filter("\_company\_name\_stopword\_filter", type="stop", … --- ## [Elasticsearch Search Query returning only 10 hits](https://discuss.elastic.co/t/elasticsearch-search-query-returning-only-10-hits/319670)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 1\ **Last updated:** [November 26, 2022, 10:32am UTC](https://discuss.elastic.co/t/elasticsearch-search-query-returning-only-10-hits/319670 "2022-11-26T10:32:23Z")
Hi Team, I have a search query which is extracting the data from metricbeat index and the output shows me the same hits as the size mentioned in the query. However, if i apply painless script to transform the data, it i… --- ## ["reason"=\>"failed to parse field \[column108\] of type \[date\] in document](https://discuss.elastic.co/t/reason-failed-to-parse-field-column108-of-type-date-in-document/319854)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 0\ **Last updated:** [November 25, 2022, 9:28pm UTC](https://discuss.elastic.co/t/reason-failed-to-parse-field-column108-of-type-date-in-document/319854 "2022-11-25T21:28:50Z")
Hello everyone, Everything was working normally until today where I see that the amount of logs visible from Kibana decreased from more than 1 million every 15 min to a few in that same time interval. The first thing I… --- ## [Plainess regex enagle](https://discuss.elastic.co/t/plainess-regex-enagle/319845)
**Author:** [@Ryan\_Ng](https://discuss.elastic.co/u/Ryan_Ng)\ **Replies:** 0\ **Last updated:** [November 25, 2022, 6:15pm UTC](https://discuss.elastic.co/t/plainess-regex-enagle/319845 "2022-11-25T18:15:32Z")
Hi, I have "script.painless.regex.enabled: true" at elasticsearch.yml and trying to use some additional regex features (Pattern.compile) in plainness but it still seems not to allow it. I am testing within the cloud whi… --- ## [Can I label which entry of a nested property triggered a match in a nested query?](https://discuss.elastic.co/t/can-i-label-which-entry-of-a-nested-property-triggered-a-match-in-a-nested-query/319833)
**Author:** [@iamFIREcracker](https://discuss.elastic.co/u/iamFIREcracker)\ **Replies:** 0\ **Last updated:** [November 25, 2022, 3:22pm UTC](https://discuss.elastic.co/t/can-i-label-which-entry-of-a-nested-property-triggered-a-match-in-a-nested-query/319833 "2022-11-25T15:22:43Z")
Let's say you were trying to model a "user" and decided that the following schema would be good enough for the job: first, the user's first name last, the user's last name custom, an array of of custom fields (i.e. … --- ## [Hot nodes full](https://discuss.elastic.co/t/hot-nodes-full/318693)
**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\ **Replies:** 8\ **Last updated:** [November 25, 2022, 2:52pm UTC](https://discuss.elastic.co/t/hot-nodes-full/318693 "2022-11-25T14:52:24Z")
Hey Peeps, I have a theoretical question. What happens when you have nodes split by tiers - hot, warm, cold, and you have the indices managed by ILM. In case the hot nodes get filled up to the frozen watermark, would yo… --- ## [Find not updated indices through logsatsh](https://discuss.elastic.co/t/find-not-updated-indices-through-logsatsh/319829)
**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\ **Replies:** 0\ **Last updated:** [November 25, 2022, 2:24pm UTC](https://discuss.elastic.co/t/find-not-updated-indices-through-logsatsh/319829 "2022-11-25T14:24:35Z")
We have around 50 indices in elastic and their data are being updated daily basis. But if data is not updated in a day We want to log that index name so we can take some action. All indexes will have updatedAt field fro… --- ## [How to replace comma with double quotes in Elasticsearch ingest pipeline?](https://discuss.elastic.co/t/how-to-replace-comma-with-double-quotes-in-elasticsearch-ingest-pipeline/319807)
**Author:** [@niveditakathal](https://discuss.elastic.co/u/niveditakathal)\ **Replies:** 0\ **Last updated:** [November 25, 2022, 10:05am UTC](https://discuss.elastic.co/t/how-to-replace-comma-with-double-quotes-in-elasticsearch-ingest-pipeline/319807 "2022-11-25T10:05:20Z")
Hi Experts, Could you please assist me on how I can format the field value in Elasticsearch? I tried gsub under ingest pipeline , but it is not working as expected. code "gsub": { "field": "destination", … --- ## [Search query is very slow while using spring-data-elasticsearch](https://discuss.elastic.co/t/search-query-is-very-slow-while-using-spring-data-elasticsearch/319803)
**Author:** [@Farhan\_Nazmul](https://discuss.elastic.co/u/Farhan_Nazmul)\ **Replies:** 0\ **Last updated:** [November 25, 2022, 9:26am UTC](https://discuss.elastic.co/t/search-query-is-very-slow-while-using-spring-data-elasticsearch/319803 "2022-11-25T09:26:33Z")
I've an index which have: 6 shards 6 replica shards more than 1crore doc (row) in that single index 27 fields fields types are text, long and date index.max\_return\_result = 50000 Now I run the following query from pos… --- ## [Unknown key for a START\_OBJECT in \[knn\]](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-knn/319381)
**Author:** [@Scott\_M](https://discuss.elastic.co/u/Scott_M)\ **Replies:** 13\ **Last updated:** [November 25, 2022, 7:22am UTC](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-knn/319381 "2022-11-25T07:22:12Z")
Has anybody actually used the knn sample in the documentation here:k-nearest neighbor (kNN) search | Elasticsearch Guide \[master\] | Elastic ? Here is their sample: POST image-index/\_search { "query": { "match": {… --- ## [How to loop through the values of array list to exactly match all the values](https://discuss.elastic.co/t/how-to-loop-through-the-values-of-array-list-to-exactly-match-all-the-values/319787)
**Author:** [@bhavya](https://discuss.elastic.co/u/bhavya)\ **Replies:** 5\ **Last updated:** [November 25, 2022, 6:56am UTC](https://discuss.elastic.co/t/how-to-loop-through-the-values-of-array-list-to-exactly-match-all-the-values/319787 "2022-11-25T06:56:41Z")
Consider the below documents: Documents Doc 1 { "id": \[ "1a", "1b", "1c" \] } Doc 2 { "id": \[ "1a", "1b" \] } Doc 3 { "id": \[ "1a" \] } Now if … --- ## [Managed Elastic search for billion scale dense vector index and performance](https://discuss.elastic.co/t/managed-elastic-search-for-billion-scale-dense-vector-index-and-performance/316312)
**Author:** [@cvgoudar](https://discuss.elastic.co/u/cvgoudar)\ **Replies:** 2\ **Last updated:** [November 25, 2022, 6:51am UTC](https://discuss.elastic.co/t/managed-elastic-search-for-billion-scale-dense-vector-index-and-performance/316312 "2022-11-25T06:51:05Z")
We want to understand on the requirements and expected response time for vector based search with close to 1 Billion semantic vector index. The dense vector is 768 dimensional. What would be the appropriate configuratio… --- ## [Dense vector field space requirements](https://discuss.elastic.co/t/dense-vector-field-space-requirements/316304)
**Author:** [@ruslaniv](https://discuss.elastic.co/u/ruslaniv)\ **Replies:** 2\ **Last updated:** [November 25, 2022, 6:49am UTC](https://discuss.elastic.co/t/dense-vector-field-space-requirements/316304 "2022-11-25T06:49:25Z")
Hi! We are experimenting with dense vector field type for the purpose of similarity search. So we have a test index with approx 5\_000\_000 documents, each document has about 30 fields and 25 of these fields are mapped t… --- ## [Happy Thanksgiving! & QQ)](https://discuss.elastic.co/t/happy-thanksgiving-qq/319769)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 6\ **Last updated:** [November 25, 2022, 4:30am UTC](https://discuss.elastic.co/t/happy-thanksgiving-qq/319769 "2022-11-25T04:30:54Z")
Hello World :wink: Happy Thanksgiving to everyone! Is there a way to see size per shard per node w/ sorting?) Thanks in advance! --- ## [Does "track\_total\_hits" affect "max\_score" calculation?](https://discuss.elastic.co/t/does-track-total-hits-affect-max-score-calculation/319784)
**Author:** [@zhang8473](https://discuss.elastic.co/u/zhang8473)\ **Replies:** 0\ **Last updated:** [November 25, 2022, 3:08am UTC](https://discuss.elastic.co/t/does-track-total-hits-affect-max-score-calculation/319784 "2022-11-25T03:08:45Z")
If I setup track\_total\_hits:1 in a \_search query, it only tracks one document, then how about the max\_score, will it be accurate or just approx? I tried some. It looks like the "max\_score" is still accurate. Is that cor… --- ## [How to use other language stop filter in \_analyze?](https://discuss.elastic.co/t/how-to-use-other-language-stop-filter-in-analyze/319767)
**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\ **Replies:** 2\ **Last updated:** [November 24, 2022, 5:47pm UTC](https://discuss.elastic.co/t/how-to-use-other-language-stop-filter-in-analyze/319767 "2022-11-24T17:47:37Z")
Hi, States that it has a \[Stop Token Filter\] (disabled by default) So to test the Standard Analyzer we type: POST \_analyze { "analyzer": "standard", "text": "The 2 QUICK Brown-Foxes jumped over the lazy dog's b… --- ## [Mapping keyword as date during ingestion - es 8.4.2, spark 3.2.0 on emr 6.6.0](https://discuss.elastic.co/t/mapping-keyword-as-date-during-ingestion-es-8-4-2-spark-3-2-0-on-emr-6-6-0/319546)
**Author:** [@Marcin\_Gasior](https://discuss.elastic.co/u/Marcin_Gasior)\ **Replies:** 7\ **Last updated:** [November 24, 2022, 5:16pm UTC](https://discuss.elastic.co/t/mapping-keyword-as-date-during-ingestion-es-8-4-2-spark-3-2-0-on-emr-6-6-0/319546 "2022-11-24T17:16:34Z")
I'm migrating our solution between elastic 7.1.0 and 8.4.2. Previously we used spark 2.4 and scala 2.11, now upgraded to latest and greatest versions :slight\_smile: The mapping is strict { "mappings": { "dynamic… --- ## [How to run two Elasticsearch Service on Window Server 2019?](https://discuss.elastic.co/t/how-to-run-two-elasticsearch-service-on-window-server-2019/319477)
**Author:** [@stramzik](https://discuss.elastic.co/u/stramzik)\ **Replies:** 5\ **Last updated:** [November 24, 2022, 4:21pm UTC](https://discuss.elastic.co/t/how-to-run-two-elasticsearch-service-on-window-server-2019/319477 "2022-11-24T16:21:59Z")
Hello, I have two instance of Elastic installed and configured to run on a different port on Windows server. I am required to run both the instance simultaneously. However when I try to run the second Elasticsearch ser… --- ## [Permission denied just after installation](https://discuss.elastic.co/t/permission-denied-just-after-installation/319568)
**Author:** [@Broot](https://discuss.elastic.co/u/Broot)\ **Replies:** 5\ **Last updated:** [November 24, 2022, 3:58pm UTC](https://discuss.elastic.co/t/permission-denied-just-after-installation/319568 "2022-11-24T15:58:35Z")
I'm trying to install and run Elasticsearch and Kibana and I can't do it because every time I try, I always get some Access Permission Denied. I'm on Ubuntu 20.04 thus installing via Debian for example : /usr/share/el… --- ## [Need help in undertsanding Elastic Hot Threads API output](https://discuss.elastic.co/t/need-help-in-undertsanding-elastic-hot-threads-api-output/319265)
**Author:** [@vinit0711](https://discuss.elastic.co/u/vinit0711)\ **Replies:** 16\ **Last updated:** [November 24, 2022, 2:43pm UTC](https://discuss.elastic.co/t/need-help-in-undertsanding-elastic-hot-threads-api-output/319265 "2022-11-24T14:43:30Z")
I am running a single Node Elastic Cluster on a Server . Filebeat is used as collector for netflow data . Further FIlebeat is giving output to Elastic . Some Important Point Server has 32 core CPU and 500 GB RAM . I se… --- ## [Combining queries while preserving order](https://discuss.elastic.co/t/combining-queries-while-preserving-order/319760)
**Author:** [@Peter\_Strasser](https://discuss.elastic.co/u/Peter_Strasser)\ **Replies:** 0\ **Last updated:** [November 24, 2022, 1:59pm UTC](https://discuss.elastic.co/t/combining-queries-while-preserving-order/319760 "2022-11-24T13:59:09Z")
Hi Elastic Community, I have the use case, that I want to search blocks of data in order. If we take products as an example a requirement could look like this: Group1: First 5 products are products with the id 120, 12… --- ## [How to add token\_chars: symbol using linq notation?](https://discuss.elastic.co/t/how-to-add-token-chars-symbol-using-linq-notation/319736)
**Author:** [@frankmehlhop.com](https://discuss.elastic.co/u/frankmehlhop.com)\ **Replies:** 1\ **Last updated:** [November 24, 2022, 1:30pm UTC](https://discuss.elastic.co/t/how-to-add-token-chars-symbol-using-linq-notation/319736 "2022-11-24T13:30:08Z")
I want that I can also search for symbols like "§123". I find that I should add token\_chars: symbol. (example) "token\_chars": \["letter", "digit", "punctuation", "symbol"\] At my C#-code I'm using elasticClient.Indices… --- ## [Keystore.password deprecated](https://discuss.elastic.co/t/keystore-password-deprecated/319324)
**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\ **Replies:** 7\ **Last updated:** [November 24, 2022, 12:13pm UTC](https://discuss.elastic.co/t/keystore-password-deprecated/319324 "2022-11-24T12:13:24Z")
Hello, i'm triyng to resolve this deprecated setting but i can't rn. I add the secure version(keystore.secure\_password) in the keystore by elasticsearch-keystore add but it didn't work. I tried also to put it in the y… --- ## [Elasticsearch 7.15 Multi terms aggregation with several fields, sort by key](https://discuss.elastic.co/t/elasticsearch-7-15-multi-terms-aggregation-with-several-fields-sort-by-key/319716)
**Author:** [@anna1](https://discuss.elastic.co/u/anna1)\ **Replies:** 0\ **Last updated:** [November 24, 2022, 8:22am UTC](https://discuss.elastic.co/t/elasticsearch-7-15-multi-terms-aggregation-with-several-fields-sort-by-key/319716 "2022-11-24T08:22:38Z")
Hello everyone, I have a question regarding the case of multi terms aggregation with several fields and sort by key. How does the sorting work if the key is an array? According to which field / value is the sorting do… --- ## [How to use WrapperQuery in new Java API client 8.4.3 to fire a raw elasticsearch query?](https://discuss.elastic.co/t/how-to-use-wrapperquery-in-new-java-api-client-8-4-3-to-fire-a-raw-elasticsearch-query/319727)
**Author:** [@p4charu](https://discuss.elastic.co/u/p4charu)\ **Replies:** 0\ **Last updated:** [November 24, 2022, 9:36am UTC](https://discuss.elastic.co/t/how-to-use-wrapperquery-in-new-java-api-client-8-4-3-to-fire-a-raw-elasticsearch-query/319727 "2022-11-24T09:36:53Z")
I'm trying to use WrapperQuery to run a raw query like this String queryStr = "{\\n" + " \\"query\\": {\\n" + " \\"bool\\": {\\n" + " \\"must\\": \[\\n" + " {\\n" + " \\"match\\": {\\n" +… --- ## [Shipping logs from Logstash to multiple Elasticsearch node in the cluster](https://discuss.elastic.co/t/shipping-logs-from-logstash-to-multiple-elasticsearch-node-in-the-cluster/319708)
**Author:** [@chaunguyen.3979](https://discuss.elastic.co/u/chaunguyen.3979)\ **Replies:** 1\ **Last updated:** [November 24, 2022, 8:43am UTC](https://discuss.elastic.co/t/shipping-logs-from-logstash-to-multiple-elasticsearch-node-in-the-cluster/319708 "2022-11-24T08:43:47Z")
Hello, I create a cluster with 3 Elasticsearch nodes, and intend to ship logs from the Logstash to all Elasticsearch nodes simultaneously (Eg: I have cluster with node A - master node, node B and C - data node, and ever… --- ## [Is it able to freeze other operations during re-index in opensearch/elasticsearch?](https://discuss.elastic.co/t/is-it-able-to-freeze-other-operations-during-re-index-in-opensearch-elasticsearch/319720)
**Author:** [@Daniel\_Gordon](https://discuss.elastic.co/u/Daniel_Gordon)\ **Replies:** 1\ **Last updated:** [November 24, 2022, 8:42am UTC](https://discuss.elastic.co/t/is-it-able-to-freeze-other-operations-during-re-index-in-opensearch-elasticsearch/319720 "2022-11-24T08:42:07Z")
Hi all, I encountered a problem that requiring to freeze other operations(such as create document/update document) during re-index. This is because we worried about the difference between source index's documents and ta… --- ## [How to run wildcard queries for long types?](https://discuss.elastic.co/t/how-to-run-wildcard-queries-for-long-types/319706)
**Author:** [@golofetuk](https://discuss.elastic.co/u/golofetuk)\ **Replies:** 0\ **Last updated:** [November 24, 2022, 7:35am UTC](https://discuss.elastic.co/t/how-to-run-wildcard-queries-for-long-types/319706 "2022-11-24T07:35:51Z")
I just run a simple wildcard query on my elasticsearch server. My query is; GET calls-\*/\_search { "query": { "bool": { "filter": \[ { "bool": { "should": \[ { … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=337) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=339)