# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=353

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 354

---

## [Divide query in separate new lines](https://discuss.elastic.co/t/divide-query-in-separate-new-lines/317389)

<div class="topic-metadata">

**Author:** [@oalimerko](https://discuss.elastic.co/u/oalimerko)\
**Replies:** 3\
**Last updated:** [October 26, 2022, 8:39am UTC](https://discuss.elastic.co/t/divide-query-in-separate-new-lines/317389 "2022-10-26T08:39:30Z")

</div>

Hello team, this is my new post here,i am looking forward share my experience and knowledge with community. I'm using elasticsearch and kibana for logs monitoring and also for this purpose i use the ES-Exporter for cat…

---

## [Word delimeter graph doesn't work with ICU tokenizer](https://discuss.elastic.co/t/word-delimeter-graph-doesnt-work-with-icu-tokenizer/317482)

<div class="topic-metadata">

**Author:** [@Mariusz\_Pala](https://discuss.elastic.co/u/Mariusz_Pala)\
**Replies:** 0\
**Last updated:** [October 26, 2022, 8:20am UTC](https://discuss.elastic.co/t/word-delimeter-graph-doesnt-work-with-icu-tokenizer/317482 "2022-10-26T08:20:39Z")

</div>

Hi, I want to be able to search word like "Wi-Fi" by wifi and it is possible with word delimeter graph with whitespace tokenizer. But I need the icu\_tokenizer and then it doesn't work at all, it indexes only "wi" and "f…

---

## [What should I do in case of a complete failure during the upgrade process?](https://discuss.elastic.co/t/what-should-i-do-in-case-of-a-complete-failure-during-the-upgrade-process/317326)

<div class="topic-metadata">

**Author:** [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\
**Replies:** 1\
**Last updated:** [October 26, 2022, 7:56am UTC](https://discuss.elastic.co/t/what-should-i-do-in-case-of-a-complete-failure-during-the-upgrade-process/317326 "2022-10-26T07:56:56Z")

</div>

Hello, everyone. How have you been? I have a question related to the upgrade process. In docs (and viewing some posts here in the forum), it is said that the concept of rollback does not exist in Elasticsearch, but we h…

---

## [Phrase words matches anywhere in the multi fields and stemming also reduce the boosting on keyword stuffing](https://discuss.elastic.co/t/phrase-words-matches-anywhere-in-the-multi-fields-and-stemming-also-reduce-the-boosting-on-keyword-stuffing/317477)

<div class="topic-metadata">

**Author:** [@sagarc](https://discuss.elastic.co/u/sagarc)\
**Replies:** 0\
**Last updated:** [October 26, 2022, 7:25am UTC](https://discuss.elastic.co/t/phrase-words-matches-anywhere-in-the-multi-fields-and-stemming-also-reduce-the-boosting-on-keyword-stuffing/317477 "2022-10-26T07:25:02Z")

</div>

Data Types: Title: string Keywords: string Description: string Search Requirements: 1. ALL search terms MUST be found somewhere in the title or keywords or description a) Don’t search the whole DOCUMENT for terms… …

---

## [Unable to Register Azure Repo in Elasticsearch - 2.4.4](https://discuss.elastic.co/t/unable-to-register-azure-repo-in-elasticsearch-2-4-4/317466)

<div class="topic-metadata">

**Author:** [@Sandipan\_Deb](https://discuss.elastic.co/u/Sandipan_Deb)\
**Replies:** 3\
**Last updated:** [October 26, 2022, 6:56am UTC](https://discuss.elastic.co/t/unable-to-register-azure-repo-in-elasticsearch-2-4-4/317466 "2022-10-26T06:56:32Z")

</div>

I am getting below error while trying to register a repo in azure storage. It was working fine before 2-3 months. Suddenly it started giving error. Not able to understand what might have changed. Any help is appreciated…

---

## [Set Elastic Password during deployment](https://discuss.elastic.co/t/set-elastic-password-during-deployment/317457)

<div class="topic-metadata">

**Author:** [@Dum](https://discuss.elastic.co/u/Dum)\
**Replies:** 3\
**Last updated:** [October 26, 2022, 6:13am UTC](https://discuss.elastic.co/t/set-elastic-password-during-deployment/317457 "2022-10-26T06:13:35Z")

</div>

I am new to Elasticsearch and setting it up with an install.sh script. I am going through the documentation and can see that for docker installation, one can specify a password for the elastic user in the docker-compose …

---

## [Approximate kNN total hits inconsistent](https://discuss.elastic.co/t/approximate-knn-total-hits-inconsistent/316901)

<div class="topic-metadata">

**Author:** [@Dazhi\_Jiao](https://discuss.elastic.co/u/Dazhi_Jiao)\
**Replies:** 2\
**Last updated:** [October 26, 2022, 5:12am UTC](https://discuss.elastic.co/t/approximate-knn-total-hits-inconsistent/316901 "2022-10-26T05:12:37Z")

</div>

Hi, we have an implementation of Approximate kNN search, with 768-dimension embedding vector in the ANN search. We observed that the total hits are not consistent when running the SAME query multiple times, or paginate u…

---

## [S\_s\_l\_handshake\_exception in watcher](https://discuss.elastic.co/t/s-s-l-handshake-exception-in-watcher/317307)

<div class="topic-metadata">

**Author:** [@irivas95](https://discuss.elastic.co/u/irivas95)\
**Replies:** 0\
**Last updated:** [October 24, 2022, 10:03am UTC](https://discuss.elastic.co/t/s-s-l-handshake-exception-in-watcher/317307 "2022-10-24T10:03:05Z")

</div>

Hi, I am trying to create the following watcher to send automatically a csv report coming from the POST url of a saved search of kibana. The whatcher is the following: { "trigger": { "schedule": { "interval…

---

## [Max compilations rate setting - cluster level or node level?](https://discuss.elastic.co/t/max-compilations-rate-setting-cluster-level-or-node-level/317299)

<div class="topic-metadata">

**Author:** [@shaigbdb](https://discuss.elastic.co/u/shaigbdb)\
**Replies:** 1\
**Last updated:** [October 26, 2022, 4:20am UTC](https://discuss.elastic.co/t/max-compilations-rate-setting-cluster-level-or-node-level/317299 "2022-10-26T04:20:55Z")

</div>

Does the limit defined in script.max\_compilations\_rate apply for the concurrent number of scripts on a node, or for the total concurrent number of scripts for the entire cluster? Thanks.

---

## [How to store configmap in elasticsearch](https://discuss.elastic.co/t/how-to-store-configmap-in-elasticsearch/317454)

<div class="topic-metadata">

**Author:** [@hanweisen](https://discuss.elastic.co/u/hanweisen)\
**Replies:** 0\
**Last updated:** [October 26, 2022, 2:38am UTC](https://discuss.elastic.co/t/how-to-store-configmap-in-elasticsearch/317454 "2022-10-26T02:38:32Z")

</div>

Recently I am indexing the k8s resource object in ES. There are some problems with storing configmap. configmap defines as bellow: // +genclient // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object …

---

## [Monitoring Index Rate (Elastic Cloud)](https://discuss.elastic.co/t/monitoring-index-rate-elastic-cloud/317453)

<div class="topic-metadata">

**Author:** [@keiransteele](https://discuss.elastic.co/u/keiransteele)\
**Replies:** 0\
**Last updated:** [October 26, 2022, 1:42am UTC](https://discuss.elastic.co/t/monitoring-index-rate-elastic-cloud/317453 "2022-10-26T01:42:58Z")

</div>

I have an issue where the "ds-.monitoring-es-8-mb" indicies are one of the top two by index rate at around 300/s for our 13 node cluster. I asked support if using "xpack.monitoring.collection.interval" is the correct wa…

---

## [Could we support timeout mechanism for replica bulk request？](https://discuss.elastic.co/t/could-we-support-timeout-mechanism-for-replica-bulk-request/316977)

<div class="topic-metadata">

**Author:** [@howardhuang](https://discuss.elastic.co/u/howardhuang)\
**Replies:** 6\
**Last updated:** [October 26, 2022, 1:39am UTC](https://discuss.elastic.co/t/could-we-support-timeout-mechanism-for-replica-bulk-request/316977 "2022-10-26T01:39:25Z")

</div>

Assume that shard has 1 primary + 1 replica, if a bulk request goes to primary and finished the shard bulk write operation, then transfer the bulk request to replica node, if the replica node is a really slow node, for e…

---

## [Failed to Load Service Token](https://discuss.elastic.co/t/failed-to-load-service-token/317391)

<div class="topic-metadata">

**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\
**Replies:** 1\
**Last updated:** [October 26, 2022, 1:17am UTC](https://discuss.elastic.co/t/failed-to-load-service-token/317391 "2022-10-26T01:17:06Z")

</div>

Hello, at the start of Elastic I got these errors: \[2022-10-25T09:31:12,342\]\[ERROR\]\[o.e.b.Elasticsearch \] \[node-1\] fatal exception while booting Elasticsearch java.lang.IllegalStateException: security initializati…

---

## [Setup multi nodes on elastic 8.4.3 to run only when 2 nodes are active](https://discuss.elastic.co/t/setup-multi-nodes-on-elastic-8-4-3-to-run-only-when-2-nodes-are-active/317407)

<div class="topic-metadata">

**Author:** [@juandreww](https://discuss.elastic.co/u/juandreww)\
**Replies:** 1\
**Last updated:** [October 26, 2022, 1:14am UTC](https://discuss.elastic.co/t/setup-multi-nodes-on-elastic-8-4-3-to-run-only-when-2-nodes-are-active/317407 "2022-10-26T01:14:55Z")

</div>

Hi, I would like to configure the Elastic Search for multiple nodes but only when 2 nodes running from 3 nodes, then the localhost can be accessed I have tried: node.name: node-3 (in folder node2 then node-2, etc) net…

---

## [I cant reach Elasticsearch localhost:9200](https://discuss.elastic.co/t/i-cant-reach-elasticsearch-localhost-9200/317323)

<div class="topic-metadata">

**Author:** [@Dun\_King](https://discuss.elastic.co/u/Dun_King)\
**Replies:** 2\
**Last updated:** [October 26, 2022, 12:30am UTC](https://discuss.elastic.co/t/i-cant-reach-elasticsearch-localhost-9200/317323 "2022-10-26T00:30:09Z")

</div>

Hello together, im trying to setup Elasticsearch for 10 hour now, i tried any tips i found on different sites and Forums, but noone could heklp me. I am following the instruction exactly as they are written on the main …

---

## [Escape character while connecting with Elastic Search](https://discuss.elastic.co/t/escape-character-while-connecting-with-elastic-search/317439)

<div class="topic-metadata">

**Author:** [@Karan\_Jain1](https://discuss.elastic.co/u/Karan_Jain1)\
**Replies:** 2\
**Last updated:** [October 25, 2022, 8:14pm UTC](https://discuss.elastic.co/t/escape-character-while-connecting-with-elastic-search/317439 "2022-10-25T20:14:59Z")

</div>

Hi In our cluster, the Elastic Search version is 7.6.1 and security is enabled using OpenDistro (please refer https://opendistro.github.io/for-elasticsearch/ ) of a compatible OD version of 1.6 and backup ( please refe…

---

## [ES 7.17.6 Is it possible to update a rollup job?](https://discuss.elastic.co/t/es-7-17-6-is-it-possible-to-update-a-rollup-job/316001)

<div class="topic-metadata">

**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 6:14pm UTC](https://discuss.elastic.co/t/es-7-17-6-is-it-possible-to-update-a-rollup-job/316001 "2022-10-25T18:14:26Z")

</div>

Hi Team, I'm trying to update the page\_size of an existing rollup job but I don't see an API available for that. Is it possible?

---

## [Using search as you type field for prefix queries](https://discuss.elastic.co/t/using-search-as-you-type-field-for-prefix-queries/317432)

<div class="topic-metadata">

**Author:** [@caseydm](https://discuss.elastic.co/u/caseydm)\
**Replies:** 0\
**Last updated:** [October 25, 2022, 5:28pm UTC](https://discuss.elastic.co/t/using-search-as-you-type-field-for-prefix-queries/317432 "2022-10-25T17:28:44Z")

</div>

I indexed some of my data as a "search as you type" field in Kibana. Specifically, in the query below the field authorships.author.display\_name.autocomplete is indexed this way. From looking at the documentation, indexin…

---

## [ES query from spark returns all despite of filter](https://discuss.elastic.co/t/es-query-from-spark-returns-all-despite-of-filter/316643)

<div class="topic-metadata">

**Author:** [@aadhikari3711](https://discuss.elastic.co/u/aadhikari3711)\
**Replies:** 8\
**Last updated:** [October 25, 2022, 5:14pm UTC](https://discuss.elastic.co/t/es-query-from-spark-returns-all-despite-of-filter/316643 "2022-10-25T17:14:37Z")

</div>

Hello All, I am trying to access index from databricks via es query and wanted a result set based on query filter, add to data frame. Requirement: Get output with :cd.ID=1 and cd.s\_D\<\>0. I get: All the cd.ID both 0 …

---

## [I want to get the source host or container details by using UUID of the index](https://discuss.elastic.co/t/i-want-to-get-the-source-host-or-container-details-by-using-uuid-of-the-index/317426)

<div class="topic-metadata">

**Author:** [@Jana03](https://discuss.elastic.co/u/Jana03)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 5:11pm UTC](https://discuss.elastic.co/t/i-want-to-get-the-source-host-or-container-details-by-using-uuid-of-the-index/317426 "2022-10-25T17:11:46Z")

</div>

I want to disable fluentd internal logs which are fluent.warn. we have many servers fluentd installed and sending logs to elasticsearch. when i click on logs it is not showing any source, env, or app details. how will…

---

## [Query nested array for empty and specific value](https://discuss.elastic.co/t/query-nested-array-for-empty-and-specific-value/316263)

<div class="topic-metadata">

**Author:** [@kunwarshukla](https://discuss.elastic.co/u/kunwarshukla)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 4:43pm UTC](https://discuss.elastic.co/t/query-nested-array-for-empty-and-specific-value/316263 "2022-10-25T16:43:05Z")

</div>

Documents structure - { "hits": \[ { "\_type": "\_doc", "\_id": "ef0a2c44179a513476b080cc2a585d95", "\_source": { "DIVISION\_NUMBER": 44, "MATCHES": \[ { "MATCH\_STA…

---

## [Best way to update a single field across all the documents (may be million docs)](https://discuss.elastic.co/t/best-way-to-update-a-single-field-across-all-the-documents-may-be-million-docs/317343)

<div class="topic-metadata">

**Author:** [@ykonathala](https://discuss.elastic.co/u/ykonathala)\
**Replies:** 4\
**Last updated:** [October 25, 2022, 2:43pm UTC](https://discuss.elastic.co/t/best-way-to-update-a-single-field-across-all-the-documents-may-be-million-docs/317343 "2022-10-25T14:43:00Z")

</div>

Team, Can I get some suggestions around updating a single field across multiple documents in the elasticsearch? Thing here is need to get a value of that field (existing) compare it will an external value and do some ca…

---

## [400: request does not support \[pit\]](https://discuss.elastic.co/t/400-request-does-not-support-pit/317141)

<div class="topic-metadata">

**Author:** [@mworzala](https://discuss.elastic.co/u/mworzala)\
**Replies:** 2\
**Last updated:** [October 25, 2022, 2:50pm UTC](https://discuss.elastic.co/t/400-request-does-not-support-pit/317141 "2022-10-25T14:50:59Z")

</div>

Hi: I am executing the following query against the search api, but it is returning a 400, and an error that the request does not support the pit parameter. This is from the Go client, however, from the python client the…

---

## [Reset password in Elasticsearch does not work](https://discuss.elastic.co/t/reset-password-in-elasticsearch-does-not-work/317418)

<div class="topic-metadata">

**Author:** [@sharbich](https://discuss.elastic.co/u/sharbich)\
**Replies:** 2\
**Last updated:** [October 25, 2022, 1:46pm UTC](https://discuss.elastic.co/t/reset-password-in-elasticsearch-does-not-work/317418 "2022-10-25T13:46:25Z")

</div>

Hello everyone, I have installed my own certificates on my Elasticsearch Server. root CA Server certificate All certificates are self-signed. I now want to reset the password for the "logstash\_system" user and get the…

---

## [Fleet Ingest Docker Container Logs](https://discuss.elastic.co/t/fleet-ingest-docker-container-logs/317416)

<div class="topic-metadata">

**Author:** [@beerygaz](https://discuss.elastic.co/u/beerygaz)\
**Replies:** 0\
**Last updated:** [October 25, 2022, 1:01pm UTC](https://discuss.elastic.co/t/fleet-ingest-docker-container-logs/317416 "2022-10-25T13:01:13Z")

</div>

We'd like to try and use all the benefits of Fleet but also need to ingest selected container logs. And add include/exclude regexes to these logs as some of them can be quite noisy and also badly formatted. filebeat ha…

---

## [Error while creating Snapshots](https://discuss.elastic.co/t/error-while-creating-snapshots/317366)

<div class="topic-metadata">

**Author:** [@selvaraj-sembulingam](https://discuss.elastic.co/u/selvaraj-sembulingam)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 12:43pm UTC](https://discuss.elastic.co/t/error-while-creating-snapshots/317366 "2022-10-25T12:43:31Z")

</div>

Getting the following error while creating snapshots INTERNAL\_SERVER\_ERROR: java.lang.IllegalStateException: Could not find a readable index-N file in a non-empty shard snapshot directory \[\[indices\]\[qduDEnw9Se6TrncgbEZB…

---

## [Automatic skipping of indexes / shards for date-based indexing and index sorting](https://discuss.elastic.co/t/automatic-skipping-of-indexes-shards-for-date-based-indexing-and-index-sorting/317399)

<div class="topic-metadata">

**Author:** [@jojo23](https://discuss.elastic.co/u/jojo23)\
**Replies:** 2\
**Last updated:** [October 25, 2022, 11:37am UTC](https://discuss.elastic.co/t/automatic-skipping-of-indexes-shards-for-date-based-indexing-and-index-sorting/317399 "2022-10-25T11:37:45Z")

</div>

I run an Elasticsearch cluster with dozens of time-based monthly indexes and 240+ shards. Query performance is always a priority, so I have been wondering if there are ways to improve which indexes / shards are actually …

---

## [How to get the UUID of a document?](https://discuss.elastic.co/t/how-to-get-the-uuid-of-a-document/317401)

<div class="topic-metadata">

**Author:** [@wrobitza\_aveq](https://discuss.elastic.co/u/wrobitza_aveq)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 11:29am UTC](https://discuss.elastic.co/t/how-to-get-the-uuid-of-a-document/317401 "2022-10-25T11:29:30Z")

</div>

When I am indexing a document to Elasticsearch via Ruby, I am supplying a custom \_id field, e.g. analytics-development-foo\_18. I get the following response from ES: {"\_index"=\>"analytics-development-foo", "\_id"=\>"analy…

---

## [Increasing the number of index shards](https://discuss.elastic.co/t/increasing-the-number-of-index-shards/317377)

<div class="topic-metadata">

**Author:** [@ZahraZare](https://discuss.elastic.co/u/ZahraZare)\
**Replies:** 7\
**Last updated:** [October 25, 2022, 10:47am UTC](https://discuss.elastic.co/t/increasing-the-number-of-index-shards/317377 "2022-10-25T10:47:00Z")

</div>

Is it possible to change the number of shards of existing indices? How to do this with Python?

---

## [Soundex phonetic not working](https://discuss.elastic.co/t/soundex-phonetic-not-working/317383)

<div class="topic-metadata">

**Author:** [@Nitin\_Dabadghav](https://discuss.elastic.co/u/Nitin_Dabadghav)\
**Replies:** 0\
**Last updated:** [October 25, 2022, 8:51am UTC](https://discuss.elastic.co/t/soundex-phonetic-not-working/317383 "2022-10-25T08:51:39Z")

</div>

I am trying to use phonetic's soundex encoder. I have an index which has a record for a name which has a string "Yangtze". If I try to search with a misspelled strings like "yangse", "yantse" or similar, I am unable to g…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=352)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=354)
