# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=345 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 346 --- ## [How to handle "ef" and "num\_candidates" parameters in hnsw search](https://discuss.elastic.co/t/how-to-handle-ef-and-num-candidates-parameters-in-hnsw-search/318681)
**Author:** [@wole](https://discuss.elastic.co/u/wole)\ **Replies:** 1\ **Last updated:** [November 10, 2022, 6:23pm UTC](https://discuss.elastic.co/t/how-to-handle-ef-and-num-candidates-parameters-in-hnsw-search/318681 "2022-11-10T18:23:36Z")
Hi team, I am in the process of learning how to use ANN search (with HNSW) on Elasticsearch: in order to do so I am comparing the results I obtain with Elasticsearch and the faiss implementation of the algorithm (using … --- ## [Strange behavior in PHP Elasticsearch 8.5 API](https://discuss.elastic.co/t/strange-behavior-in-php-elasticsearch-8-5-api/318622)
**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\ **Replies:** 9\ **Last updated:** [November 10, 2022, 4:57pm UTC](https://discuss.elastic.co/t/strange-behavior-in-php-elasticsearch-8-5-api/318622 "2022-11-10T16:57:47Z")
I feel totally lost. Having spent some time understanding that to connect to an Elasticsearch single-node, built with docker-compose, without security, I should use the configuration below, now I find that it doesn't wo… --- ## [What is boost in similarity score function?](https://discuss.elastic.co/t/what-is-boost-in-similarity-score-function/318091)
**Author:** [@fsanzestevez](https://discuss.elastic.co/u/fsanzestevez)\ **Replies:** 1\ **Last updated:** [November 10, 2022, 4:36pm UTC](https://discuss.elastic.co/t/what-is-boost-in-similarity-score-function/318091 "2022-11-10T16:36:26Z")
Hi, I have a question regarding the similarity function with BM25. I understand tf and idf. However it's not clear for me what the boost variable is and what it depends on. When I get the explanation of the score for … --- ## [Reindex just one specific index in datastrem](https://discuss.elastic.co/t/reindex-just-one-specific-index-in-datastrem/317079)
**Author:** [@Oleksandr\_Isniuk](https://discuss.elastic.co/u/Oleksandr_Isniuk)\ **Replies:** 8\ **Last updated:** [November 10, 2022, 3:58pm UTC](https://discuss.elastic.co/t/reindex-just-one-specific-index-in-datastrem/317079 "2022-11-10T15:58:35Z")
We changed field mappings in our template. After rollover new index file works with correct field types. We supposed that we can use smaller time ranges to be sure that all data was read fro the new file. But it is not e… --- ## [Snapshot migration on existing index](https://discuss.elastic.co/t/snapshot-migration-on-existing-index/318663)
**Author:** [@Rahul\_Gupta1](https://discuss.elastic.co/u/Rahul_Gupta1)\ **Replies:** 1\ **Last updated:** [November 10, 2022, 1:41pm UTC](https://discuss.elastic.co/t/snapshot-migration-on-existing-index/318663 "2022-11-10T13:41:04Z")
Is it possible to migrate the snapshot from one cluster to another cluster where the index mapping is present ? when i tried that same thing based on the local facing the following issue: - { "error": { "ro… --- ## [Upgrade to Elastic 8: GET /api/lists/privileges status code 400](https://discuss.elastic.co/t/upgrade-to-elastic-8-get-api-lists-privileges-status-code-400/318655)
**Author:** [@amcsi](https://discuss.elastic.co/u/amcsi)\ **Replies:** 0\ **Last updated:** [November 10, 2022, 12:19pm UTC](https://discuss.elastic.co/t/upgrade-to-elastic-8-get-api-lists-privileges-status-code-400/318655 "2022-11-10T12:19:12Z")
With this message: "undefined: undefined". I've upgraded my docker ELK stack from 7.17 to 8.5 and am getting this. I see nothing in docker logs for elasticsearch, nor anything in journalctl for it. Where do I begin fi… --- ## [Migrate data to existing index in sanpshot approch in Elastic Search](https://discuss.elastic.co/t/migrate-data-to-existing-index-in-sanpshot-approch-in-elastic-search/318645)
**Author:** [@Rahul\_Gupta1](https://discuss.elastic.co/u/Rahul_Gupta1)\ **Replies:** 1\ **Last updated:** [November 10, 2022, 10:42am UTC](https://discuss.elastic.co/t/migrate-data-to-existing-index-in-sanpshot-approch-in-elastic-search/318645 "2022-11-10T10:42:17Z")
Hi, I want to migrate the data from one elasticsearch cluster to another using snapshot from a remote server. Is it possible to restore the old data to new cluster, the approch we are thinking is ot:- change configu… --- ## [Join two indices query where there is 1-to-many relationship](https://discuss.elastic.co/t/join-two-indices-query-where-there-is-1-to-many-relationship/318306)
**Author:** [@areobode](https://discuss.elastic.co/u/areobode)\ **Replies:** 1\ **Last updated:** [November 10, 2022, 9:58am UTC](https://discuss.elastic.co/t/join-two-indices-query-where-there-is-1-to-many-relationship/318306 "2022-11-10T09:58:57Z")
I have two indices; authors and articles. Since one author writes several articles, there are 1-to-many relationship between them. The article index has title, vote, and authorId attributes. Here is an example index. … --- ## [ElasticSearch Java API 8.5.0 fields are missing from indexed document](https://discuss.elastic.co/t/elasticsearch-java-api-8-5-0-fields-are-missing-from-indexed-document/318576)
**Author:** [@AKDAS\_System](https://discuss.elastic.co/u/AKDAS_System)\ **Replies:** 7\ **Last updated:** [November 10, 2022, 9:34am UTC](https://discuss.elastic.co/t/elasticsearch-java-api-8-5-0-fields-are-missing-from-indexed-document/318576 "2022-11-10T09:34:26Z")
Hello. We've been migrating from ES 7 version to 8.5 and discovered this weird behavior. In Kibana I can index a test document with a null field value and it will get indexed and will be present in the index. PUT my-in… --- ## [Reindex from remote server](https://discuss.elastic.co/t/reindex-from-remote-server/318630)
**Author:** [@Suraj\_Jannu](https://discuss.elastic.co/u/Suraj_Jannu)\ **Replies:** 1\ **Last updated:** [November 10, 2022, 8:59am UTC](https://discuss.elastic.co/t/reindex-from-remote-server/318630 "2022-11-10T08:59:12Z")
Hello, I want to migrate the data from one elasticsearch cluster to another using reindexing from a remote server approach. Calling reindex API multiple times does the migration activity from scratch each time rather i… --- ## [How can we compare no of hits in query](https://discuss.elastic.co/t/how-can-we-compare-no-of-hits-in-query/318631)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 0\ **Last updated:** [November 10, 2022, 8:58am UTC](https://discuss.elastic.co/t/how-can-we-compare-no-of-hits-in-query/318631 "2022-11-10T08:58:40Z")
I am using metricbeat for getting system uptime. When a system goes down , the no of hits is less than 1. Is there any way we can add that no\_of\_hits \< 1 in a query. Earlier i am using this query. But i did not get any … --- ## [Not able to use bind-mount volumes with Elasticsearch used in a podman container](https://discuss.elastic.co/t/not-able-to-use-bind-mount-volumes-with-elasticsearch-used-in-a-podman-container/318628)
**Author:** [@DomR](https://discuss.elastic.co/u/DomR)\ **Replies:** 0\ **Last updated:** [November 10, 2022, 8:36am UTC](https://discuss.elastic.co/t/not-able-to-use-bind-mount-volumes-with-elasticsearch-used-in-a-podman-container/318628 "2022-11-10T08:36:51Z")
Hello, I'm new at Elasticsearch (ES) and i'm currently set a customized podman container ES 8.5.0 installation from base RPM repository In this installation I'm using a dedicated Linux user 'elasticadm' which owns the … --- ## [Remote reindex with wildcard to multiple indices](https://discuss.elastic.co/t/remote-reindex-with-wildcard-to-multiple-indices/318552)
**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\ **Replies:** 6\ **Last updated:** [November 10, 2022, 7:22am UTC](https://discuss.elastic.co/t/remote-reindex-with-wildcard-to-multiple-indices/318552 "2022-11-10T07:22:25Z")
Hey Everyone, I'm having some issues with running a remote reindex from cluster a to cluster b. The end goal I'm trying to achieve is having some index pattern that the user can provide, and the remote reindex will get … --- ## [Complete ELK Data migration between 2 clusters](https://discuss.elastic.co/t/complete-elk-data-migration-between-2-clusters/318610)
**Author:** [@Suraj\_Jannu](https://discuss.elastic.co/u/Suraj_Jannu)\ **Replies:** 1\ **Last updated:** [November 10, 2022, 7:20am UTC](https://discuss.elastic.co/t/complete-elk-data-migration-between-2-clusters/318610 "2022-11-10T07:20:07Z")
Hello, I have two ELK stack instances on my local machine with version \[7.5.1 and 8.4.3\]. Now I need to migrate the data from the old version cluster to the new version cluster. Question: What would be the right app… --- ## [Elasticsearch 8.5.0 docker fail elasticsearch-reset-password](https://discuss.elastic.co/t/elasticsearch-8-5-0-docker-fail-elasticsearch-reset-password/318575)
**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\ **Replies:** 1\ **Last updated:** [November 10, 2022, 6:22am UTC](https://discuss.elastic.co/t/elasticsearch-8-5-0-docker-fail-elasticsearch-reset-password/318575 "2022-11-10T06:22:49Z")
Hi. Today I've update my develop single cluster from 8.4.X to 8.5.0 When I've tried to reset password get error (same from host that from terminal of docker desktop) ❯ docker exec -it sitelight-es01 /usr/share/elastic… --- ## [Elasticsearch Scroll Api](https://discuss.elastic.co/t/elasticsearch-scroll-api/318608)
**Author:** [@GOPAL\_GOTE](https://discuss.elastic.co/u/GOPAL_GOTE)\ **Replies:** 0\ **Last updated:** [November 10, 2022, 4:38am UTC](https://discuss.elastic.co/t/elasticsearch-scroll-api/318608 "2022-11-10T04:38:04Z")
Hi, I'm trying to fetch 10,000 records on each iteration using the scroll API, but I'm not getting a response from it. I increased max\_result\_window to 500000 but am not getting any response from the API. I wrote code a… --- ## [Index suddenly reporting "Format version is not supported"](https://discuss.elastic.co/t/index-suddenly-reporting-format-version-is-not-supported/318605)
**Author:** [@theblindstagger](https://discuss.elastic.co/u/theblindstagger)\ **Replies:** 0\ **Last updated:** [November 10, 2022, 3:46am UTC](https://discuss.elastic.co/t/index-suddenly-reporting-format-version-is-not-supported/318605 "2022-11-10T03:46:50Z")
Hi, Our application uses elasticsearch v7.9.2. Each instance of the application creates three separate indexes for three different types of data. One customer instance was working fine until the weekend, when a schedu… --- ## [Installing Elasticsearch with third party CA certificates](https://discuss.elastic.co/t/installing-elasticsearch-with-third-party-ca-certificates/318440)
**Author:** [@a.gavric](https://discuss.elastic.co/u/a.gavric)\ **Replies:** 3\ **Last updated:** [November 10, 2022, 12:46am UTC](https://discuss.elastic.co/t/installing-elasticsearch-with-third-party-ca-certificates/318440 "2022-11-10T00:46:14Z")
Good afternoon, we are planning on deploying Elastic search with third party publicly signed certificates from Lets Encrypt and i have been trying to find a way of replacing the certificates that are provided by the Elas… --- ## [Not able to get more than 10 results in ANN search using ES 8.5.0 docker image](https://discuss.elastic.co/t/not-able-to-get-more-than-10-results-in-ann-search-using-es-8-5-0-docker-image/318429)
**Author:** [@wole](https://discuss.elastic.co/u/wole)\ **Replies:** 3\ **Last updated:** [November 9, 2022, 11:22pm UTC](https://discuss.elastic.co/t/not-able-to-get-more-than-10-results-in-ann-search-using-es-8-5-0-docker-image/318429 "2022-11-09T23:22:30Z")
Hi team, I am using the Elasticsearch 8.5.0 docker image (installed and started as explained here) to do some experimenting with ANN search. I followed this guide to perform approximate KNN search and use a POST comman… --- ## [Mac verify error: Invalid Password? while creating certificates](https://discuss.elastic.co/t/mac-verify-error-invalid-password-while-creating-certificates/318443)
**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\ **Replies:** 1\ **Last updated:** [November 9, 2022, 11:14pm UTC](https://discuss.elastic.co/t/mac-verify-error-invalid-password-while-creating-certificates/318443 "2022-11-09T23:14:24Z")
Creating certificates for elasticSearch install via docker-compose. Gets an error 'Mac verify error: Invalid Password?' while running the command: sudo docker-compose -f create-certs.yml run --rm create\_certs I'm creati… --- ## [How can i apply index template and ilm to existing index?](https://discuss.elastic.co/t/how-can-i-apply-index-template-and-ilm-to-existing-index/318529)
**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\ **Replies:** 1\ **Last updated:** [November 9, 2022, 11:03pm UTC](https://discuss.elastic.co/t/how-can-i-apply-index-template-and-ilm-to-existing-index/318529 "2022-11-09T23:03:48Z")
Now, i have 'test' index in elasticsearch. Documents are written in 'test' index every day, and every seconds. In this case, i want to apply index template to 'test' index. For example, 'test-0000001', 'test-0000002'.… --- ## [How to query documents than not include nested objects field](https://discuss.elastic.co/t/how-to-query-documents-than-not-include-nested-objects-field/318583)
**Author:** [@Volna13](https://discuss.elastic.co/u/Volna13)\ **Replies:** 1\ **Last updated:** [November 9, 2022, 8:41pm UTC](https://discuss.elastic.co/t/how-to-query-documents-than-not-include-nested-objects-field/318583 "2022-11-09T20:41:43Z")
I have a psaInfo field which is nested. It is optional and not available on all events, how can I write a query to get all events where there is no psaInfo field? Here is what I have tried The impression is that the … --- ## [Circuit Breaker Exception](https://discuss.elastic.co/t/circuit-breaker-exception/318572)
**Author:** [@Somya\_Sharma](https://discuss.elastic.co/u/Somya_Sharma)\ **Replies:** 4\ **Last updated:** [November 9, 2022, 6:01pm UTC](https://discuss.elastic.co/t/circuit-breaker-exception/318572 "2022-11-09T18:01:24Z")
{ 'error': { 'type': 'circuit\_breaking\_exception', 'reason': '\[parent\] Data too large, data for \[\\] would be \[123848638/118.1mb\], which is larger than the limit of \[123273216/117.5mb\], real usage: … --- ## [ILM Hot Tier Searchable Snapshots](https://discuss.elastic.co/t/ilm-hot-tier-searchable-snapshots/318043)
**Author:** [@Safty](https://discuss.elastic.co/u/Safty)\ **Replies:** 4\ **Last updated:** [November 9, 2022, 4:18pm UTC](https://discuss.elastic.co/t/ilm-hot-tier-searchable-snapshots/318043 "2022-11-09T16:18:06Z")
What is the use case around Hot Tier Searchable Snapshots in ILM? I was thinking maybe... if you have an s3 repository available, do you need Cold/Frozen at all? Response time and replica requirements notwithstanding, … --- ## [Failed on parsing mappings on index creation \[nyc\_taxis\]](https://discuss.elastic.co/t/failed-on-parsing-mappings-on-index-creation-nyc-taxis/318539)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 11\ **Last updated:** [November 9, 2022, 3:05pm UTC](https://discuss.elastic.co/t/failed-on-parsing-mappings-on-index-creation-nyc-taxis/318539 "2022-11-09T15:05:40Z")
Previously raised issue but the issue is still not fixed. ES Version 8.2.0 ESRally Version: 2.7.0 Running on kubernetes. Using official docker image. Getting below error, message":"failed on parsing mappings on i… --- ## [MultiMatchQuery for simple phrase search](https://discuss.elastic.co/t/multimatchquery-for-simple-phrase-search/318542)
**Author:** [@jjc](https://discuss.elastic.co/u/jjc)\ **Replies:** 0\ **Last updated:** [November 9, 2022, 1:05pm UTC](https://discuss.elastic.co/t/multimatchquery-for-simple-phrase-search/318542 "2022-11-09T13:05:52Z")
Hi, i need some help. i'm simply trying to retrieve documents with the word "Cheese" in some of its fields. Below is a sample document. {"caption":"Cheese, An authentic Creole Jambalaya recipe!", "description":"Jamba… --- ## [Filebeat auditd module causes mapping explosion](https://discuss.elastic.co/t/filebeat-auditd-module-causes-mapping-explosion/318205)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [November 9, 2022, 12:07pm UTC](https://discuss.elastic.co/t/filebeat-auditd-module-causes-mapping-explosion/318205 "2022-11-09T12:07:24Z")
Hi folks, I am using Filebeat and auditd module to collect audit logs from linux vm. I am often running into mapping limit because the ingest pipeline creates a new field for every argument given in the log message. f… --- ## ['Missing' on field aggreagation is not available in Java Client](https://discuss.elastic.co/t/missing-on-field-aggreagation-is-not-available-in-java-client/317679)
**Author:** [@molsza](https://discuss.elastic.co/u/molsza)\ **Replies:** 2\ **Last updated:** [November 9, 2022, 9:59am UTC](https://discuss.elastic.co/t/missing-on-field-aggreagation-is-not-available-in-java-client/317679 "2022-11-09T09:59:20Z")
I am trying to do an aggregation on multi-terms fields and include the cases where there is no value for for fields. The missing property should handle that, but it looks like it cannot be set in Java Client co.elastic.c… --- ## [Cold and frozen node recommended memory specification](https://discuss.elastic.co/t/cold-and-frozen-node-recommended-memory-specification/318520)
**Author:** [@dms6978](https://discuss.elastic.co/u/dms6978)\ **Replies:** 2\ **Last updated:** [November 9, 2022, 9:38am UTC](https://discuss.elastic.co/t/cold-and-frozen-node-recommended-memory-specification/318520 "2022-11-09T09:38:39Z")
As far as I know, hot node needs 4TB of ssd, how much is cold and frozen node? --- ## [Query\_string does not work with multiple tokens with the same position](https://discuss.elastic.co/t/query-string-does-not-work-with-multiple-tokens-with-the-same-position/318454)
**Author:** [@Alex\_Shkop](https://discuss.elastic.co/u/Alex_Shkop)\ **Replies:** 2\ **Last updated:** [November 9, 2022, 8:30am UTC](https://discuss.elastic.co/t/query-string-does-not-work-with-multiple-tokens-with-the-same-position/318454 "2022-11-09T08:30:04Z")
I'm having troubles with query\_string query when my analyzer returns multiple tokens for the same position. Here's an output of \_analyze for my query: { "tokens" : \[ { "token" : "d", "start\_offset" : 6… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=344) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=346)