# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=350

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 351

---

## [Convert within Ingest Pipeline not outputting Target field](https://discuss.elastic.co/t/convert-within-ingest-pipeline-not-outputting-target-field/317918)

<div class="topic-metadata">

**Author:** [@Jmc](https://discuss.elastic.co/u/Jmc)\
**Replies:** 0\
**Last updated:** [November 1, 2022, 7:02pm UTC](https://discuss.elastic.co/t/convert-within-ingest-pipeline-not-outputting-target-field/317918 "2022-11-01T19:02:05Z")

</div>

I am using a Convert processor in an Ingest Pipeline, attempting to convert a field from a Keyword type to a Double type. No error is thrown when I test a document through my pipeline. However, I have opted to direct the…

---

## [Does new OpenSSL Vulnerability effect Elasticsearch/Kibana/ECE](https://discuss.elastic.co/t/does-new-openssl-vulnerability-effect-elasticsearch-kibana-ece/317768)

<div class="topic-metadata">

**Author:** [@Jugsofbeer](https://discuss.elastic.co/u/Jugsofbeer)\
**Replies:** 2\
**Last updated:** [November 1, 2022, 5:52pm UTC](https://discuss.elastic.co/t/does-new-openssl-vulnerability-effect-elasticsearch-kibana-ece/317768 "2022-11-01T17:52:28Z")

</div>

Hi, Can someone please advise if the mentioned OpenSSL vulnerabiity effects Elasticsearch/Kibana/E.C.E ?

---

## [Does Elasticsearch provide an equivalent of IN (SELECT...)?](https://discuss.elastic.co/t/does-elasticsearch-provide-an-equivalent-of-in-select/317910)

<div class="topic-metadata">

**Author:** [@Luis95](https://discuss.elastic.co/u/Luis95)\
**Replies:** 0\
**Last updated:** [November 1, 2022, 4:16pm UTC](https://discuss.elastic.co/t/does-elasticsearch-provide-an-equivalent-of-in-select/317910 "2022-11-01T16:16:17Z")

</div>

We are saving one item for each user, show, and episode. We save everything on the same index. The ERD would look something like this: ┌────┐ ┌────────────┐ ┌────┐ │User├─────\<┤Subscription├\>────┤Show│ └───…

---

## [Unable to delete old indices with life cycle policies](https://discuss.elastic.co/t/unable-to-delete-old-indices-with-life-cycle-policies/317824)

<div class="topic-metadata">

**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\
**Replies:** 2\
**Last updated:** [November 1, 2022, 1:56pm UTC](https://discuss.elastic.co/t/unable-to-delete-old-indices-with-life-cycle-policies/317824 "2022-11-01T13:56:18Z")

</div>

Hi Team, Small query. I have created one life cycle policy to delete old indices from Elasticsearch. It is running fine but its not deleting old indices. I am still able to access old indices and able to see the data fr…

---

## [Index Lifecycle not being applied](https://discuss.elastic.co/t/index-lifecycle-not-being-applied/317621)

<div class="topic-metadata">

**Author:** [@OscarFilho](https://discuss.elastic.co/u/OscarFilho)\
**Replies:** 6\
**Last updated:** [November 1, 2022, 1:03pm UTC](https://discuss.elastic.co/t/index-lifecycle-not-being-applied/317621 "2022-11-01T13:03:46Z")

</div>

I'm having problems wth index lifecycle policy. As you can see in the print "ilm-index-traces-apm", there are 2 indices that are assigned to the lifecycle policy "dexco-lifecycle-7days". The "dexco-lifecycle-7days" po…

---

## ['\[bool\] malformed query, expected \[END\_OBJECT\] but found \[FIELD\_NAME\]'](https://discuss.elastic.co/t/bool-malformed-query-expected-end-object-but-found-field-name/317862)

<div class="topic-metadata">

**Author:** [@Shobhit\_Jain1](https://discuss.elastic.co/u/Shobhit_Jain1)\
**Replies:** 1\
**Last updated:** [November 1, 2022, 11:26am UTC](https://discuss.elastic.co/t/bool-malformed-query-expected-end-object-but-found-field-name/317862 "2022-11-01T11:26:11Z")

</div>

I am running the following query in Elasticsearch and for some reason I am getting an error: elasticsearch.exceptions.RequestError: RequestError(400, 'x\_content\_parse\_exception', '\[bool\] malformed query, expected \[END\_O…

---

## [Centralized list of values for queries filter](https://discuss.elastic.co/t/centralized-list-of-values-for-queries-filter/317595)

<div class="topic-metadata">

**Author:** [@Volodymyr\_Komarynsky](https://discuss.elastic.co/u/Volodymyr_Komarynsky)\
**Replies:** 2\
**Last updated:** [November 1, 2022, 11:11am UTC](https://discuss.elastic.co/t/centralized-list-of-values-for-queries-filter/317595 "2022-11-01T11:11:47Z")

</div>

Hello. Can Elasticsearch use a value from an external list or other index to filter queries? This is necessary to store the same filtering values for different requests and not to make changes in each request.

---

## [Elastic search as statefulset in kubernetes cluster](https://discuss.elastic.co/t/elastic-search-as-statefulset-in-kubernetes-cluster/317882)

<div class="topic-metadata">

**Author:** [@gsingh20](https://discuss.elastic.co/u/gsingh20)\
**Replies:** 0\
**Last updated:** [November 1, 2022, 10:33am UTC](https://discuss.elastic.co/t/elastic-search-as-statefulset-in-kubernetes-cluster/317882 "2022-11-01T10:33:53Z")

</div>

how can we sync the data between 2 persistent volume when Elasticsearch is deployed as statefulset in kubernetes cluster. when we are scaling up pods then new pv is created and data is not sync. How can we sync the data…

---

## [Nested document full text query with filter capability](https://discuss.elastic.co/t/nested-document-full-text-query-with-filter-capability/317843)

<div class="topic-metadata">

**Author:** [@john2022](https://discuss.elastic.co/u/john2022)\
**Replies:** 1\
**Last updated:** [November 1, 2022, 10:22am UTC](https://discuss.elastic.co/t/nested-document-full-text-query-with-filter-capability/317843 "2022-11-01T10:22:16Z")

</div>

Hi dear My index mappings and sample data as follows I need full text search on these type of documents with following criteria: country is one input of this search If I search "Alex 4455" and country is "xxx"…

---

## [Synonym\_graph token filter and synonyms including comma's](https://discuss.elastic.co/t/synonym-graph-token-filter-and-synonyms-including-commas/316219)

<div class="topic-metadata">

**Author:** [@erikNL](https://discuss.elastic.co/u/erikNL)\
**Replies:** 5\
**Last updated:** [November 1, 2022, 8:52am UTC](https://discuss.elastic.co/t/synonym-graph-token-filter-and-synonyms-including-commas/316219 "2022-11-01T08:52:42Z")

</div>

I am trying to create a index that uses a synonym\_graph token filter to search for synonyms of chemical compound. For instance, when I search for "benzene", I also want to find sentences containing the following: "benz…

---

## [Index.lifecycle.rollover\_alias template settings](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-template-settings/317868)

<div class="topic-metadata">

**Author:** [@Mangesh\_Mathe](https://discuss.elastic.co/u/Mangesh_Mathe)\
**Replies:** 4\
**Last updated:** [November 1, 2022, 7:34am UTC](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-template-settings/317868 "2022-11-01T07:34:58Z")

</div>

Hello Team, We've scenario where we have multiple index with different names (Example: ordercode-domino , ordercode-ecofee , ordercode-chassis), Earlier we have one template for all these index with pattern as (ordercod…

---

## [Elasticsearch service getting failed on Ubuntu 20.4](https://discuss.elastic.co/t/elasticsearch-service-getting-failed-on-ubuntu-20-4/317677)

<div class="topic-metadata">

**Author:** [@BJawaid](https://discuss.elastic.co/u/BJawaid)\
**Replies:** 37\
**Last updated:** [November 1, 2022, 7:07am UTC](https://discuss.elastic.co/t/elasticsearch-service-getting-failed-on-ubuntu-20-4/317677 "2022-11-01T07:07:59Z")

</div>

Hi, I have installed elasticsearch 7.1.0 on Ubuntu 20.4 with java-11-openjdk-amd64. Since I am not a developer hence I expect respect for this post. Elasticsearch service is getting started successfully whenever I run; …

---

## [Sort query in Java](https://discuss.elastic.co/t/sort-query-in-java/317864)

<div class="topic-metadata">

**Author:** [@Apurba](https://discuss.elastic.co/u/Apurba)\
**Replies:** 1\
**Last updated:** [November 1, 2022, 6:20am UTC](https://discuss.elastic.co/t/sort-query-in-java/317864 "2022-11-01T06:20:35Z")

</div>

How can I write the below sort query in java - "sort": \[ { "fieldName1": { "order": "desc" }, "fieldName2": { "order": "desc" } } \] I can do that if the query like - "sort": \[ { "…

---

## [Copy multiple document](https://discuss.elastic.co/t/copy-multiple-document/317763)

<div class="topic-metadata">

**Author:** [@moranmono](https://discuss.elastic.co/u/moranmono)\
**Replies:** 4\
**Last updated:** [November 1, 2022, 5:53am UTC](https://discuss.elastic.co/t/copy-multiple-document/317763 "2022-11-01T05:53:52Z")

</div>

Hi I am using nest client with my application, I am trying to find a way to create a copy of multiple documents and change their properties. So far I have only got to this solution - Bulk api, but this solution requires…

---

## [Grok ingest pipeline](https://discuss.elastic.co/t/grok-ingest-pipeline/317708)

<div class="topic-metadata">

**Author:** [@Walter\_Hiranpat1](https://discuss.elastic.co/u/Walter_Hiranpat1)\
**Replies:** 5\
**Last updated:** [November 1, 2022, 2:07am UTC](https://discuss.elastic.co/t/grok-ingest-pipeline/317708 "2022-11-01T02:07:25Z")

</div>

I was wondering if there a way to accept all patterns excluding a specific regular expression?

---

## [When to use Coordinating only node](https://discuss.elastic.co/t/when-to-use-coordinating-only-node/317774)

<div class="topic-metadata">

**Author:** [@Balesh\_Kumar](https://discuss.elastic.co/u/Balesh_Kumar)\
**Replies:** 6\
**Last updated:** [November 1, 2022, 1:39am UTC](https://discuss.elastic.co/t/when-to-use-coordinating-only-node/317774 "2022-11-01T01:39:19Z")

</div>

Hi All, I have read this recommendation Coordinating only nodes can benefit large clusters by offloading the coordinating node role from data and master-eligible nodes.. What is considered a "large cluster"? Do you hav…

---

## [Unable to connect to ES through public IP](https://discuss.elastic.co/t/unable-to-connect-to-es-through-public-ip/317850)

<div class="topic-metadata">

**Author:** [@yadu\_krishna](https://discuss.elastic.co/u/yadu_krishna)\
**Replies:** 2\
**Last updated:** [November 1, 2022, 12:25am UTC](https://discuss.elastic.co/t/unable-to-connect-to-es-through-public-ip/317850 "2022-11-01T00:25:13Z")

</div>

Hi, I know this issue has been posted here a few times, but I'm stuck trying to debug what's going on. I have set up elasticsearch with docker following (Install Elasticsearch with Docker | Elasticsearch Guide \[8.4\] | El…

---

## [How to re-run cluster with different cluster uuid](https://discuss.elastic.co/t/how-to-re-run-cluster-with-different-cluster-uuid/317431)

<div class="topic-metadata">

**Author:** [@qksjdhi1212](https://discuss.elastic.co/u/qksjdhi1212)\
**Replies:** 3\
**Last updated:** [October 31, 2022, 11:57pm UTC](https://discuss.elastic.co/t/how-to-re-run-cluster-with-different-cluster-uuid/317431 "2022-10-31T23:57:57Z")

</div>

using version 8.4 When I ran es in single-node-cluster on ec2 instance I got this message Fully-formed clusters do not attempt to discover other nodes, and nodes with different cluster UUIDs cannot belong to the same c…

---

## [Reroute API](https://discuss.elastic.co/t/reroute-api/316832)

<div class="topic-metadata">

**Author:** [@wijamw](https://discuss.elastic.co/u/wijamw)\
**Replies:** 20\
**Last updated:** [October 31, 2022, 11:55pm UTC](https://discuss.elastic.co/t/reroute-api/316832 "2022-10-31T23:55:13Z")

</div>

I tried to move indices from one node to another using reroute API but I had the following error. type: illegal\_argument\_exception reason: "can't move from node-1 to node-2, , since its not allowed, reason: .. \[NO(the n…

---

## [What are blob keys and blob container in elasticsearch?](https://discuss.elastic.co/t/what-are-blob-keys-and-blob-container-in-elasticsearch/317584)

<div class="topic-metadata">

**Author:** [@selvaraj-sembulingam](https://discuss.elastic.co/u/selvaraj-sembulingam)\
**Replies:** 3\
**Last updated:** [October 31, 2022, 11:40pm UTC](https://discuss.elastic.co/t/what-are-blob-keys-and-blob-container-in-elasticsearch/317584 "2022-10-31T23:40:33Z")

</div>

What are blob keys and blob container in elasticsearch? if (blobKeys.isEmpty() == false) { logger.warn("Could not find a readable index-N file in a non-empty shard snapshot directory \[{}\]"; blobContainer…

---

## [Elastic/Kibana Maintenance](https://discuss.elastic.co/t/elastic-kibana-maintenance/317420)

<div class="topic-metadata">

**Author:** [@tifty](https://discuss.elastic.co/u/tifty)\
**Replies:** 6\
**Last updated:** [October 31, 2022, 11:38pm UTC](https://discuss.elastic.co/t/elastic-kibana-maintenance/317420 "2022-10-31T23:38:07Z")

</div>

Hi everyone, I was wondering what steps I should follow for production-grade Elasticsearch maintenance for on-premises deployment. Any resources/idea would be highly appreciated. TIA

---

## [Elasticsearch behind Azure API Management](https://discuss.elastic.co/t/elasticsearch-behind-azure-api-management/317834)

<div class="topic-metadata">

**Author:** [@zxuz111](https://discuss.elastic.co/u/zxuz111)\
**Replies:** 1\
**Last updated:** [October 31, 2022, 11:14pm UTC](https://discuss.elastic.co/t/elasticsearch-behind-azure-api-management/317834 "2022-10-31T23:14:20Z")

</div>

We have an Elasticsearch deployed on Azure, and we are planning to protect the access to the Elasticsearch using Azure API Management. When I tried to create API from OpenAPI specification by Elasticsearch (https://cloud…

---

## [Understanding Young vs Survivor vs Old in JVM Nodes Stats](https://discuss.elastic.co/t/understanding-young-vs-survivor-vs-old-in-jvm-nodes-stats/317844)

<div class="topic-metadata">

**Author:** [@nola](https://discuss.elastic.co/u/nola)\
**Replies:** 0\
**Last updated:** [October 31, 2022, 7:10pm UTC](https://discuss.elastic.co/t/understanding-young-vs-survivor-vs-old-in-jvm-nodes-stats/317844 "2022-10-31T19:10:10Z")

</div>

I have a basic understanding of young vs old, vs permanent in general context of the JVM heap. But I was told when I want to monitor JVM heap pressure and gc, I should run GET \_nodes/stats?filter\_path=nodes.\*.jvm.mem.p…

---

## [Index boosting and how the exact matches can rank higher than fuzzy match and phrase match in the elastic search?](https://discuss.elastic.co/t/index-boosting-and-how-the-exact-matches-can-rank-higher-than-fuzzy-match-and-phrase-match-in-the-elastic-search/317835)

<div class="topic-metadata">

**Author:** [@paris1](https://discuss.elastic.co/u/paris1)\
**Replies:** 0\
**Last updated:** [October 31, 2022, 5:07pm UTC](https://discuss.elastic.co/t/index-boosting-and-how-the-exact-matches-can-rank-higher-than-fuzzy-match-and-phrase-match-in-the-elastic-search/317835 "2022-10-31T17:07:02Z")

</div>

0 I'm trying to configure Elasticsearch to give me both exact matches and fuzzy matches, and also phrase matches. I'm using Elasticsearch to search names of foods in a database, and I want it to be fuzzy to allow for mi…

---

## [Concatenation of two fields](https://discuss.elastic.co/t/concatenation-of-two-fields/317691)

<div class="topic-metadata">

**Author:** [@prashantreddy](https://discuss.elastic.co/u/prashantreddy)\
**Replies:** 2\
**Last updated:** [October 31, 2022, 3:20pm UTC](https://discuss.elastic.co/t/concatenation-of-two-fields/317691 "2022-10-31T15:20:16Z")

</div>

Hello, I want to concatenate/combine/merge two or three fields and assign this combined value to new field (mapping created for new field) after indexing. could you please suggest how to do this? Thanks!

---

## [How to add parameters to a scripted similarity?](https://discuss.elastic.co/t/how-to-add-parameters-to-a-scripted-similarity/317731)

<div class="topic-metadata">

**Author:** [@fsanzestevez](https://discuss.elastic.co/u/fsanzestevez)\
**Replies:** 1\
**Last updated:** [October 31, 2022, 1:29pm UTC](https://discuss.elastic.co/t/how-to-add-parameters-to-a-scripted-similarity/317731 "2022-10-31T13:29:48Z")

</div>

I'm trying to make a parametrized scripted similarity function but I can't get it to work. I have created the script and have it stored. However, when I try to implement it in the similarity score, I keep getting error…

---

## [Grok processor - Multiple matches of the same pattern](https://discuss.elastic.co/t/grok-processor-multiple-matches-of-the-same-pattern/317805)

<div class="topic-metadata">

**Author:** [@robdiluca](https://discuss.elastic.co/u/robdiluca)\
**Replies:** 0\
**Last updated:** [October 31, 2022, 9:54am UTC](https://discuss.elastic.co/t/grok-processor-multiple-matches-of-the-same-pattern/317805 "2022-10-31T09:54:12Z")

</div>

Hi all, I'm using the grok processor to parse the "message" field of a document in a ingest pipeline. That field can contain zero or more occurrences of UUIDs. I'm only interested in finding all the occurrences of UUIDs…

---

## [Set role for cluster-member node](https://discuss.elastic.co/t/set-role-for-cluster-member-node/317785)

<div class="topic-metadata">

**Author:** [@g.le](https://discuss.elastic.co/u/g.le)\
**Replies:** 3\
**Last updated:** [October 31, 2022, 8:50am UTC](https://discuss.elastic.co/t/set-role-for-cluster-member-node/317785 "2022-10-31T08:50:43Z")

</div>

We 've been using ELK v7.10 in a cluster setup with several nodes. For the time being, all nodes have the same roles. According to the documentation, we could specify that a given node (member of the cluster) can have …

---

## [Pagination, sorted and aggregation on data](https://discuss.elastic.co/t/pagination-sorted-and-aggregation-on-data/317291)

<div class="topic-metadata">

**Author:** [@StephenGuo](https://discuss.elastic.co/u/StephenGuo)\
**Replies:** 4\
**Last updated:** [October 31, 2022, 2:54am UTC](https://discuss.elastic.co/t/pagination-sorted-and-aggregation-on-data/317291 "2022-10-31T02:54:53Z")

</div>

Hi I have a group of user access data which contain the user name, access timestamp, and some of other info. There will be multiple records with the same username but different access timestamp. What I want is to do i…

---

## [ElasticSearch Failed to build \[request\] after last required field arrived](https://discuss.elastic.co/t/elasticsearch-failed-to-build-request-after-last-required-field-arrived/317364)

<div class="topic-metadata">

**Author:** [@akshay-atam](https://discuss.elastic.co/u/akshay-atam)\
**Replies:** 1\
**Last updated:** [October 31, 2022, 2:25am UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-build-request-after-last-required-field-arrived/317364 "2022-10-31T02:25:33Z")

</div>

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=349)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=351)
