# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=346

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 347

---

## [Multiple pre & post tags in highlighter query](https://discuss.elastic.co/t/multiple-pre-post-tags-in-highlighter-query/318492)

<div class="topic-metadata">

**Author:** [@mayanknc](https://discuss.elastic.co/u/mayanknc)\
**Replies:** 1\
**Last updated:** [November 9, 2022, 7:53am UTC](https://discuss.elastic.co/t/multiple-pre-post-tags-in-highlighter-query/318492 "2022-11-09T07:53:04Z")

</div>

Hi I want to highlight individual query string's match result with different pre & post tags. Create Index PUT multilang\_index { "mappings": { "dynamic\_templates": \[ { "stripped\_section\_template": { …

---

## [Cloning using DotNet Client](https://discuss.elastic.co/t/cloning-using-dotnet-client/318503)

<div class="topic-metadata">

**Author:** [@abby\_d](https://discuss.elastic.co/u/abby_d)\
**Replies:** 2\
**Last updated:** [November 9, 2022, 7:00am UTC](https://discuss.elastic.co/t/cloning-using-dotnet-client/318503 "2022-11-09T07:00:32Z")

</div>

Hi All. We can clone an index with one of the following commands in Console POST /\<index\>/\_clone/\<target-index\> PUT /\<index\>/\_clone/\<target-index\> Can someone point me in the direction how we can achieve the same usin…

---

## [I was logging my log from .net application using seilog before enabling Xpack security in stack the logs stopped comming](https://discuss.elastic.co/t/i-was-logging-my-log-from-net-application-using-seilog-before-enabling-xpack-security-in-stack-the-logs-stopped-comming/318499)

<div class="topic-metadata">

**Author:** [@DIVYANSH\_SINGH](https://discuss.elastic.co/u/DIVYANSH_SINGH)\
**Replies:** 4\
**Last updated:** [November 9, 2022, 6:47am UTC](https://discuss.elastic.co/t/i-was-logging-my-log-from-net-application-using-seilog-before-enabling-xpack-security-in-stack-the-logs-stopped-comming/318499 "2022-11-09T06:47:28Z")

</div>

I was logging my log from .net application using serilog before enabling Xpack security in stack the logs stopped comming How will i solve this

---

## [INDEX CLOSED EXCEPTION](https://discuss.elastic.co/t/index-closed-exception/318507)

<div class="topic-metadata">

**Author:** [@Gojo](https://discuss.elastic.co/u/Gojo)\
**Replies:** 0\
**Last updated:** [November 9, 2022, 6:03am UTC](https://discuss.elastic.co/t/index-closed-exception/318507 "2022-11-09T06:03:36Z")

</div>

Continuing the discussion from Index\_closed\_exception: so how can i resolve this ?

---

## [INDEX IN CLOSED STATE NOT ABLE TO OPEN](https://discuss.elastic.co/t/index-in-closed-state-not-able-to-open/318396)

<div class="topic-metadata">

**Author:** [@Gojo](https://discuss.elastic.co/u/Gojo)\
**Replies:** 10\
**Last updated:** [November 9, 2022, 5:00am UTC](https://discuss.elastic.co/t/index-in-closed-state-not-able-to-open/318396 "2022-11-09T05:00:44Z")

</div>

hi all , we did rollback to our server after that suddenly all indices went to closed state

---

## [Can somebody interpret the data if the shard is unbalanced?](https://discuss.elastic.co/t/can-somebody-interpret-the-data-if-the-shard-is-unbalanced/318491)

<div class="topic-metadata">

**Author:** [@Java2avaj](https://discuss.elastic.co/u/Java2avaj)\
**Replies:** 1\
**Last updated:** [November 9, 2022, 4:19am UTC](https://discuss.elastic.co/t/can-somebody-interpret-the-data-if-the-shard-is-unbalanced/318491 "2022-11-09T04:19:48Z")

</div>

Based on the following data, may I know if the shard is unbalanced or is it evenly distributed for people index? We have 2 primary shards and 1 replica health status index uuid pri rep docs.…

---

## [Reference Set](https://discuss.elastic.co/t/reference-set/318375)

<div class="topic-metadata">

**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\
**Replies:** 3\
**Last updated:** [November 9, 2022, 2:57am UTC](https://discuss.elastic.co/t/reference-set/318375 "2022-11-09T02:57:11Z")

</div>

Hi, We are using elasticsearch for alerting. Hosts are created and destroyed all the time for development purposes, but we have a core of devices which are tightly controlled. This list of devices is 100+ and are spre…

---

## [What is bucket\_influencers?](https://discuss.elastic.co/t/what-is-bucket-influencers/318486)

<div class="topic-metadata">

**Author:** [@minkiyo](https://discuss.elastic.co/u/minkiyo)\
**Replies:** 0\
**Last updated:** [November 9, 2022, 1:38am UTC](https://discuss.elastic.co/t/what-is-bucket-influencers/318486 "2022-11-09T01:38:35Z")

</div>

What I search "result\_type : bucket" in ml index, I could see bucket\_influencers info. Would you please explain exactly what bucket\_influencers is?? And Is there any document for where I can check the properties? I wo…

---

## [How to remove elasticsearch and reinstall to reset cluster](https://discuss.elastic.co/t/how-to-remove-elasticsearch-and-reinstall-to-reset-cluster/317904)

<div class="topic-metadata">

**Author:** [@tmdgk490255](https://discuss.elastic.co/u/tmdgk490255)\
**Replies:** 1\
**Last updated:** [November 9, 2022, 1:03am UTC](https://discuss.elastic.co/t/how-to-remove-elasticsearch-and-reinstall-to-reset-cluster/317904 "2022-11-09T01:03:58Z")

</div>

I want to remove es on ec2 instance and reinstall it to initialize cluster and node info How can I? I tried but it always had same cluster uuid even I uninstalled it First I installed es following these steps sudo rpm…

---

## [Sorting collapsed results based on nested documents](https://discuss.elastic.co/t/sorting-collapsed-results-based-on-nested-documents/318480)

<div class="topic-metadata">

**Author:** [@tombrisland](https://discuss.elastic.co/u/tombrisland)\
**Replies:** 0\
**Last updated:** [November 8, 2022, 10:20pm UTC](https://discuss.elastic.co/t/sorting-collapsed-results-based-on-nested-documents/318480 "2022-11-08T22:20:10Z")

</div>

I have a query which makes use of collapse to de-duplicate results. I'm expecting some collapsed results to have multiple duplicates, and some to be unique. I would like to sort the entries in such a way that the results…

---

## [Elasticsearch OCI bucket](https://discuss.elastic.co/t/elasticsearch-oci-bucket/318006)

<div class="topic-metadata">

**Author:** [@Walter\_Hiranpat1](https://discuss.elastic.co/u/Walter_Hiranpat1)\
**Replies:** 3\
**Last updated:** [November 8, 2022, 9:02pm UTC](https://discuss.elastic.co/t/elasticsearch-oci-bucket/318006 "2022-11-08T21:02:22Z")

</div>

Has there been any support for using the oci (oracle cloud infrastructure) bucket to perform snapshot and restore? I thought oci bucket uses similar s3 configuration and would be compatible to use with the aws s3 plugin …

---

## [S3 Curator delete process slow - Is this a bad idea?](https://discuss.elastic.co/t/s3-curator-delete-process-slow-is-this-a-bad-idea/318430)

<div class="topic-metadata">

**Author:** [@jthegoodlife](https://discuss.elastic.co/u/jthegoodlife)\
**Replies:** 7\
**Last updated:** [November 8, 2022, 7:52pm UTC](https://discuss.elastic.co/t/s3-curator-delete-process-slow-is-this-a-bad-idea/318430 "2022-11-08T19:52:51Z")

</div>

We have a backup process using curator that is backup to S3, unfortunately, the delete job for the snapshots has not been processed. Deleting from curator is very slow for s3 and reading on the forums this is caused by t…

---

## [How to stop refresh activity while using scroll](https://discuss.elastic.co/t/how-to-stop-refresh-activity-while-using-scroll/318382)

<div class="topic-metadata">

**Author:** [@ykonathala](https://discuss.elastic.co/u/ykonathala)\
**Replies:** 5\
**Last updated:** [November 8, 2022, 5:08pm UTC](https://discuss.elastic.co/t/how-to-stop-refresh-activity-while-using-scroll/318382 "2022-11-08T17:08:55Z")

</div>

Team Can someone help or suggest the way to pause or disable refresh while I update all the docs within scroll request ?? I do see there is a http curl request that we can do against single or multiple indexes but I am…

---

## [Elasticsearch 7.17.7 does not start - "java.security.AccessControlException: access denied"](https://discuss.elastic.co/t/elasticsearch-7-17-7-does-not-start-java-security-accesscontrolexception-access-denied/318013)

<div class="topic-metadata">

**Author:** [@jacotec](https://discuss.elastic.co/u/jacotec)\
**Replies:** 5\
**Last updated:** [November 8, 2022, 2:51pm UTC](https://discuss.elastic.co/t/elasticsearch-7-17-7-does-not-start-java-security-accesscontrolexception-access-denied/318013 "2022-11-08T14:51:45Z")

</div>

Hi, I'm despairing with Elasticsearch on one of my Ubuntu 20.04 LTS VM's. I've just installed ES 7.17.7 from the official repo, did no config changes or something else, just did apt install elasticsearch systemctl daem…

---

## [Create an API key in SSL curl](https://discuss.elastic.co/t/create-an-api-key-in-ssl-curl/318424)

<div class="topic-metadata">

**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\
**Replies:** 1\
**Last updated:** [November 8, 2022, 1:55pm UTC](https://discuss.elastic.co/t/create-an-api-key-in-ssl-curl/318424 "2022-11-08T13:55:23Z")

</div>

Hello, I can't create an api key with the curl command in SSL. I have tried different command without success. Could you tell me the right command? And if I should authenticate with the node certificate or with the CA…

---

## [Elastic Cloud: exceeds the automatic field expansion limit of \[1024\]](https://discuss.elastic.co/t/elastic-cloud-exceeds-the-automatic-field-expansion-limit-of-1024/318411)

<div class="topic-metadata">

**Author:** [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Replies:** 1\
**Last updated:** [November 8, 2022, 12:33pm UTC](https://discuss.elastic.co/t/elastic-cloud-exceeds-the-automatic-field-expansion-limit-of-1024/318411 "2022-11-08T12:33:25Z")

</div>

Is there a new limitation in Elastic Cloud 8.x instances that prevents the use of index.mapping.total\_fields.limit greater than 1024 in an index template? Seeing a deprecation issue “exceeds the automatic field expansion…

---

## [What's the correct ILM setup for .monitoring-\*-7 indices?](https://discuss.elastic.co/t/whats-the-correct-ilm-setup-for-monitoring-7-indices/318398)

<div class="topic-metadata">

**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\
**Replies:** 0\
**Last updated:** [November 8, 2022, 8:38am UTC](https://discuss.elastic.co/t/whats-the-correct-ilm-setup-for-monitoring-7-indices/318398 "2022-11-08T08:38:15Z")

</div>

As per title, what's the correct ILM setup for the .monitoring-\*-7 indices? By default, they rollover every day and delete after 7 days. However, I need them to delete much faster, because in my small ELK setup, these in…

---

## [ES cannot search for special characters when using wildcard search](https://discuss.elastic.co/t/es-cannot-search-for-special-characters-when-using-wildcard-search/318332)

<div class="topic-metadata">

**Author:** [@surkovoleg2010](https://discuss.elastic.co/u/surkovoleg2010)\
**Replies:** 3\
**Last updated:** [November 8, 2022, 8:15am UTC](https://discuss.elastic.co/t/es-cannot-search-for-special-characters-when-using-wildcard-search/318332 "2022-11-08T08:15:51Z")

</div>

Hello, We are using query\_string for a quick search but looks like does not correctly work. For instance I can find results using: { "query": { "query\_string": { "query": "oleg$qwerty.com", …

---

## [Elasticsearch curl error](https://discuss.elastic.co/t/elasticsearch-curl-error/318391)

<div class="topic-metadata">

**Author:** [@thepawankumar](https://discuss.elastic.co/u/thepawankumar)\
**Replies:** 1\
**Last updated:** [November 8, 2022, 7:14am UTC](https://discuss.elastic.co/t/elasticsearch-curl-error/318391 "2022-11-08T07:14:04Z")

</div>

curl -X GET -u something:PASSWD https://20.197.3.229:5500 curl: (60) SSL certificate problem: self signed certificate in certificate chain More details here: curl - SSL CA Certificates curl failed to verify the legiti…

---

## [Unrecognized character escape ':'](https://discuss.elastic.co/t/unrecognized-character-escape/318393)

<div class="topic-metadata">

**Author:** [@MStrauch](https://discuss.elastic.co/u/MStrauch)\
**Replies:** 0\
**Last updated:** [November 8, 2022, 7:10am UTC](https://discuss.elastic.co/t/unrecognized-character-escape/318393 "2022-11-08T07:10:29Z")

</div>

Hi, I'm executing follow fulltext query string: "query": { "bool": { "filter": \[ { "nested": { "path": "@payload.identifier", "query": { "query\_string":…

---

## [Monitoring AIX metrics to ELK](https://discuss.elastic.co/t/monitoring-aix-metrics-to-elk/318390)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 0\
**Last updated:** [November 8, 2022, 6:54am UTC](https://discuss.elastic.co/t/monitoring-aix-metrics-to-elk/318390 "2022-11-08T06:54:14Z")

</div>

Hi Community, We want infra metrics data to ELK. The problem is that elastic beats does not support IBM AIX servers. Is there any other way we can ship metric data to ELK.

---

## [Elastic Search cannot login after disk full (\>90%)](https://discuss.elastic.co/t/elastic-search-cannot-login-after-disk-full-90/317511)

<div class="topic-metadata">

**Author:** [@zahir](https://discuss.elastic.co/u/zahir)\
**Replies:** 5\
**Last updated:** [November 8, 2022, 6:42am UTC](https://discuss.elastic.co/t/elastic-search-cannot-login-after-disk-full-90/317511 "2022-11-08T06:42:01Z")

</div>

I suddenly unable to login Elastic Search after my snapshot backup is failed. I perform the snapshot backup after disk usage is more than 90%. Now my snapshot failed and my disk is 100% usage. Appreciate if anyone f…

---

## [AUTO Cross Cluster Replication (CCR)](https://discuss.elastic.co/t/auto-cross-cluster-replication-ccr/318298)

<div class="topic-metadata">

**Author:** [@pankaj\_sharma1](https://discuss.elastic.co/u/pankaj_sharma1)\
**Replies:** 0\
**Last updated:** [November 7, 2022, 8:25am UTC](https://discuss.elastic.co/t/auto-cross-cluster-replication-ccr/318298 "2022-11-07T08:25:16Z")

</div>

Can we do auto CCR for index on the bases of Alias or be auto ccr for this index(this is the part f roll over index ). index pattern is : alias index filter routing.index routing.search is\_write\_i…

---

## [KNN search things in ES V8.4.0](https://discuss.elastic.co/t/knn-search-things-in-es-v8-4-0/313748)

<div class="topic-metadata">

**Author:** [@CGM397](https://discuss.elastic.co/u/CGM397)\
**Replies:** 5\
**Last updated:** [November 7, 2022, 11:54pm UTC](https://discuss.elastic.co/t/knn-search-things-in-es-v8-4-0/313748 "2022-11-07T23:54:00Z")

</div>

Hi there, I am facing some issues with knn search in es v8, hope someone can help: env: five es v8.4.0 nodes in a cluster each node in a linux server(Ubuntu 16.04, 48 Logic Cores, 180GB Memory) index mapping:(five sh…

---

## [Does k-nearest neighbor (kNN) search - supports search\_after pagination?](https://discuss.elastic.co/t/does-k-nearest-neighbor-knn-search-supports-search-after-pagination/315222)

<div class="topic-metadata">

**Author:** [@Dinesh\_Sonachalam](https://discuss.elastic.co/u/Dinesh_Sonachalam)\
**Replies:** 2\
**Last updated:** [November 7, 2022, 11:44pm UTC](https://discuss.elastic.co/t/does-k-nearest-neighbor-knn-search-supports-search-after-pagination/315222 "2022-11-07T23:44:47Z")

</div>

Reference: kNN search: k-nearest neighbor (kNN) search | Elasticsearch Guide \[master\] | Elastic Search after pagination: https://www.elastic.co/guide/en/elasticsearch/reference/current/paginate-search-results.html#sea…

---

## [Looking for a way to grab named stats from DNS servers and output them to Elastic for better visibility](https://discuss.elastic.co/t/looking-for-a-way-to-grab-named-stats-from-dns-servers-and-output-them-to-elastic-for-better-visibility/318364)

<div class="topic-metadata">

**Author:** [@hardeepsingh3](https://discuss.elastic.co/u/hardeepsingh3)\
**Replies:** 1\
**Last updated:** [November 7, 2022, 8:28pm UTC](https://discuss.elastic.co/t/looking-for-a-way-to-grab-named-stats-from-dns-servers-and-output-them-to-elastic-for-better-visibility/318364 "2022-11-07T20:28:33Z")

</div>

What is the best way to grab the named stats such as Resolver Statistics (IPv4 queries sent, IPv4 responses received etc) and Cache Statistics (cache hits, cache misses etc) and parse them to be able to visualize them on…

---

## [Painless stored script "dynamic" compile error](https://discuss.elastic.co/t/painless-stored-script-dynamic-compile-error/318357)

<div class="topic-metadata">

**Author:** [@karasick](https://discuss.elastic.co/u/karasick)\
**Replies:** 0\
**Last updated:** [November 7, 2022, 5:02pm UTC](https://discuss.elastic.co/t/painless-stored-script-dynamic-compile-error/318357 "2022-11-07T17:02:36Z")

</div>

Can someone please explain to me the next error ? "error": { "type": "illegal\_argument\_exception", "reason": "failed to execute script", "caused\_by": { "type": "general\_script\_e…

---

## [ElasticSearch Instance is going down periodically with no errors in logs](https://discuss.elastic.co/t/elasticsearch-instance-is-going-down-periodically-with-no-errors-in-logs/317133)

<div class="topic-metadata">

**Author:** [@nandeeswara](https://discuss.elastic.co/u/nandeeswara)\
**Replies:** 7\
**Last updated:** [November 7, 2022, 5:24pm UTC](https://discuss.elastic.co/t/elasticsearch-instance-is-going-down-periodically-with-no-errors-in-logs/317133 "2022-11-07T17:24:31Z")

</div>

We have an application in Liferay portal and it is using Elasticsearch service as remote server. Elasticsearch on a remote server is going down periodically even though the memory , CPU are highly available. Currently …

---

## [Fuzziness parameter in a query](https://discuss.elastic.co/t/fuzziness-parameter-in-a-query/318344)

<div class="topic-metadata">

**Author:** [@Ivo\_Tavares](https://discuss.elastic.co/u/Ivo_Tavares)\
**Replies:** 1\
**Last updated:** [November 7, 2022, 3:23pm UTC](https://discuss.elastic.co/t/fuzziness-parameter-in-a-query/318344 "2022-11-07T15:23:14Z")

</div>

I'm trying to understand the documentation of the fuzziness parameter. I'm not sure what the low and high values for AUTO mean. Why is it that when I do a query with "AUTO:0,2" I get a result(supposedly an exact match)…

---

## [Interval query with filters to include in max gap?](https://discuss.elastic.co/t/interval-query-with-filters-to-include-in-max-gap/318346)

<div class="topic-metadata">

**Author:** [@Broccolimon](https://discuss.elastic.co/u/Broccolimon)\
**Replies:** 0\
**Last updated:** [November 7, 2022, 3:26pm UTC](https://discuss.elastic.co/t/interval-query-with-filters-to-include-in-max-gap/318346 "2022-11-07T15:26:42Z")

</div>

Hey! I have a query that is looking for the terms "fox" and "brown" in an interval of 10 positions and i would like to filter any result with the word "quick" which is 5 position before interval start and 5 position aft…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=345)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=347)
