# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=358

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 359

---

## [ElasticSearch - Searching partial text in String](https://discuss.elastic.co/t/elasticsearch-searching-partial-text-in-string/316649)

<div class="topic-metadata">

**Author:** [@Sachin\_Sharma](https://discuss.elastic.co/u/Sachin_Sharma)\
**Replies:** 3\
**Last updated:** [October 16, 2022, 11:59am UTC](https://discuss.elastic.co/t/elasticsearch-searching-partial-text-in-string/316649 "2022-10-16T11:59:59Z")

</div>

What is the best way to use Elasticsearch to search exact partial text in String? In SQL the method would be: %PARTIAL TEXT%, %ARTIAL TEX% In Elastic Search current method being used: { "query": { "match\_p…

---

## [Document(s) failed to index | mapper\_parsing\_exception](https://discuss.elastic.co/t/document-s-failed-to-index-mapper-parsing-exception/316690)

<div class="topic-metadata">

**Author:** [@mohitthakkar\_ihm](https://discuss.elastic.co/u/mohitthakkar_ihm)\
**Replies:** 2\
**Last updated:** [October 16, 2022, 8:52am UTC](https://discuss.elastic.co/t/document-s-failed-to-index-mapper-parsing-exception/316690 "2022-10-16T08:52:36Z")

</div>

Hi, I have an ES instance with the following mapping & config: { "settings": { "number\_of\_shards": 5, "number\_of\_replicas": 1, "analysis": { "analyzer": { "custom\_analyzer": { "tok…

---

## [Self-hosted deployment- licence question](https://discuss.elastic.co/t/self-hosted-deployment-licence-question/316698)

<div class="topic-metadata">

**Author:** [@misztol](https://discuss.elastic.co/u/misztol)\
**Replies:** 1\
**Last updated:** [October 15, 2022, 9:13pm UTC](https://discuss.elastic.co/t/self-hosted-deployment-licence-question/316698 "2022-10-15T21:13:25Z")

</div>

Dear Elastic I am attempting to build self-hosted deployment for SIEM purposes. I would like to use Platinum license features. I wonder how many licenses are required for following build: Hot tier (logs ingestion and …

---

## [How can match exact string first and then spilt matches ElasticSearch (7.16.2) and Nest (7.16.2)](https://discuss.elastic.co/t/how-can-match-exact-string-first-and-then-spilt-matches-elasticsearch-7-16-2-and-nest-7-16-2/316694)

<div class="topic-metadata">

**Author:** [@Abid\_Hussain1](https://discuss.elastic.co/u/Abid_Hussain1)\
**Replies:** 0\
**Last updated:** [October 15, 2022, 6:35pm UTC](https://discuss.elastic.co/t/how-can-match-exact-string-first-and-then-spilt-matches-elasticsearch-7-16-2-and-nest-7-16-2/316694 "2022-10-15T18:35:20Z")

</div>

For example i want below searching with this string "we added a large" string from the (paragraph and subject ) fields, and paragraph contain this string below "We encountered elevated H2S levels today in the trailer…

---

## [ElasticSearch on-premise pricing](https://discuss.elastic.co/t/elasticsearch-on-premise-pricing/316683)

<div class="topic-metadata">

**Author:** [@dominique.bejean](https://discuss.elastic.co/u/dominique.bejean)\
**Replies:** 2\
**Last updated:** [October 15, 2022, 3:53pm UTC](https://discuss.elastic.co/t/elasticsearch-on-premise-pricing/316683 "2022-10-15T15:53:46Z")

</div>

Hi, For Elasticsearch on-premise pricing, according to this page (Tarifs officiels Elasticsearch : Elastic Cloud, offre Elasticsearch gérée | Elastic), I understand, the pricing is per month and per server for any serve…

---

## [Monitor Elasticsearch in Grafana](https://discuss.elastic.co/t/monitor-elasticsearch-in-grafana/316688)

<div class="topic-metadata">

**Author:** [@ZahraZare](https://discuss.elastic.co/u/ZahraZare)\
**Replies:** 2\
**Last updated:** [October 15, 2022, 2:06pm UTC](https://discuss.elastic.co/t/monitor-elasticsearch-in-grafana/316688 "2022-10-15T14:06:34Z")

</div>

I want to monitor Elasticsearch in Grafana,( not ٍELK stack). How can I do this without elastic exporter and prometheus? Can I monitor elasticsearch with X-pack? How? I have found this link(Elasticsearch Monitoring base…

---

## [Advice on indexing long form text](https://discuss.elastic.co/t/advice-on-indexing-long-form-text/316674)

<div class="topic-metadata">

**Author:** [@orweinberger](https://discuss.elastic.co/u/orweinberger)\
**Replies:** 1\
**Last updated:** [October 15, 2022, 2:02pm UTC](https://discuss.elastic.co/t/advice-on-indexing-long-form-text/316674 "2022-10-15T14:02:19Z")

</div>

I'm trying to find the best and most efficient way to index a transcript of long conversations, for example a 2-3 hour podcast between multiple members, or for another example a transcript of a large Zoom meeting with ma…

---

## [How to achieve same results as cutoff\_frequency with minimum\_should\_match with Elasticsearch 8.X after deprecation of common term queries](https://discuss.elastic.co/t/how-to-achieve-same-results-as-cutoff-frequency-with-minimum-should-match-with-elasticsearch-8-x-after-deprecation-of-common-term-queries/316679)

<div class="topic-metadata">

**Author:** [@jatinw21](https://discuss.elastic.co/u/jatinw21)\
**Replies:** 0\
**Last updated:** [October 15, 2022, 10:24am UTC](https://discuss.elastic.co/t/how-to-achieve-same-results-as-cutoff-frequency-with-minimum-should-match-with-elasticsearch-8-x-after-deprecation-of-common-term-queries/316679 "2022-10-15T10:24:29Z")

</div>

If I make a search for a term in the database of say movie titles, I want it to do an AND query for all the words in the search query that have higher than certain cutoff\_frequency and OR query for all the words in the s…

---

## [Let's encrypt issue with the CA Certificate after end of validation 3o September](https://discuss.elastic.co/t/lets-encrypt-issue-with-the-ca-certificate-after-end-of-validation-3o-september/316675)

<div class="topic-metadata">

**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\
**Replies:** 0\
**Last updated:** [October 15, 2022, 8:25am UTC](https://discuss.elastic.co/t/lets-encrypt-issue-with-the-ca-certificate-after-end-of-validation-3o-september/316675 "2022-10-15T08:25:17Z")

</div>

I have tried various ways to install let's encrypt with my Elasticsearch cluster, but have been unable to do so. First method error displayed root@elk2:~# /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-tok…

---

## [How to establish a connection from java client to elastic search version 8](https://discuss.elastic.co/t/how-to-establish-a-connection-from-java-client-to-elastic-search-version-8/316408)

<div class="topic-metadata">

**Author:** [@Chirag\_Gupta](https://discuss.elastic.co/u/Chirag_Gupta)\
**Replies:** 6\
**Last updated:** [October 15, 2022, 5:40am UTC](https://discuss.elastic.co/t/how-to-establish-a-connection-from-java-client-to-elastic-search-version-8/316408 "2022-10-15T05:40:03Z")

</div>

A guide for establishing a connection of java client with elastic-search without using RestHighLevelClient method

---

## [Ho validate filter expression?](https://discuss.elastic.co/t/ho-validate-filter-expression/316664)

<div class="topic-metadata">

**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\
**Replies:** 1\
**Last updated:** [October 15, 2022, 3:07am UTC](https://discuss.elastic.co/t/ho-validate-filter-expression/316664 "2022-10-15T03:07:22Z")

</div>

example produce error filter { grok { match =\> { "message" =\> "%\[stderr\] (default task%" } } mutate { remove\_field =\> \['@timestamp'\] } } Failed to execute action {:action=\>L…

---

## [Error starting Elastic Search](https://discuss.elastic.co/t/error-starting-elastic-search/316659)

<div class="topic-metadata">

**Author:** [@ArrakisMiner](https://discuss.elastic.co/u/ArrakisMiner)\
**Replies:** 4\
**Last updated:** [October 14, 2022, 7:44pm UTC](https://discuss.elastic.co/t/error-starting-elastic-search/316659 "2022-10-14T19:44:57Z")

</div>

I'm having issues trying to start Elastic Search after installation, and I'm not sure how to get around it, nor can I find any similar topics with solutions online. When I run systemctl start elasticsearch, I get the er…

---

## [Kibana security password?](https://discuss.elastic.co/t/kibana-security-password/316234)

<div class="topic-metadata">

**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\
**Replies:** 6\
**Last updated:** [October 14, 2022, 7:14pm UTC](https://discuss.elastic.co/t/kibana-security-password/316234 "2022-10-14T19:14:35Z")

</div>

ho enable password for kibana in simple mode?

---

## [Can I delete a older system index once a rollover has been made?](https://discuss.elastic.co/t/can-i-delete-a-older-system-index-once-a-rollover-has-been-made/316642)

<div class="topic-metadata">

**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\
**Replies:** 1\
**Last updated:** [October 14, 2022, 7:03pm UTC](https://discuss.elastic.co/t/can-i-delete-a-older-system-index-once-a-rollover-has-been-made/316642 "2022-10-14T19:03:52Z")

</div>

So I got this index which got massive we were trying out the APM, now it has been made a rollover but the older one still have a huge impact on the cluster. Already talked to the team and decided to delete the 100GB …

---

## [How to query a nested array for an object with one matching field and one nonexistent field?](https://discuss.elastic.co/t/how-to-query-a-nested-array-for-an-object-with-one-matching-field-and-one-nonexistent-field/316663)

<div class="topic-metadata">

**Author:** [@A111](https://discuss.elastic.co/u/A111)\
**Replies:** 1\
**Last updated:** [October 14, 2022, 5:36pm UTC](https://discuss.elastic.co/t/how-to-query-a-nested-array-for-an-object-with-one-matching-field-and-one-nonexistent-field/316663 "2022-10-14T17:36:25Z")

</div>

Given this: { "mappings": { "document\_type": { "properties": { "id": { "type": "long" }, "resolutions": { "…

---

## [Curator and Elasticsearch 8](https://discuss.elastic.co/t/curator-and-elasticsearch-8/316550)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 3\
**Last updated:** [October 14, 2022, 5:31pm UTC](https://discuss.elastic.co/t/curator-and-elasticsearch-8/316550 "2022-10-14T17:31:53Z")

</div>

I noticed today that Version Compatibility | Curator Reference \[5.8\] | Elastic does not list Elasticsearch 8. Elasticsearch curator & ES version 8.x confirms it doesn't work with Elasticsearch 8. So my questions are: …

---

## [Remove timestamp where message have a string search?](https://discuss.elastic.co/t/remove-timestamp-where-message-have-a-string-search/316661)

<div class="topic-metadata">

**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\
**Replies:** 0\
**Last updated:** [October 14, 2022, 4:22pm UTC](https://discuss.elastic.co/t/remove-timestamp-where-message-have-a-string-search/316661 "2022-10-14T16:22:42Z")

</div>

i have this |2022-09-30 15:10:15,151 ERROR \[stderr\] (default task-4) |at org.jboss.resteasy.resteasy-jaxrs@3.12.1.Final//org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:138)| |---|---| |2022-09…

---

## [Elasticsearch GeoIP and unknown error](https://discuss.elastic.co/t/elasticsearch-geoip-and-unknown-error/316541)

<div class="topic-metadata">

**Author:** [@ulysse31](https://discuss.elastic.co/u/ulysse31)\
**Replies:** 6\
**Last updated:** [October 14, 2022, 4:15pm UTC](https://discuss.elastic.co/t/elasticsearch-geoip-and-unknown-error/316541 "2022-10-14T16:15:50Z")

</div>

Hi, My elasticsearch DB suddently stopped making geoip resolve on entries, and on the elasticsearch DB logs the following message is logged: \[2022-10-13T15:06:21,875\]\[WARN \]\[o.e.i.g.GeoIpDownloader \] \[host\] could not …

---

## [Search and partial search using or not special characters](https://discuss.elastic.co/t/search-and-partial-search-using-or-not-special-characters/316655)

<div class="topic-metadata">

**Author:** [@kqgcm](https://discuss.elastic.co/u/kqgcm)\
**Replies:** 0\
**Last updated:** [October 14, 2022, 3:43pm UTC](https://discuss.elastic.co/t/search-and-partial-search-using-or-not-special-characters/316655 "2022-10-14T15:43:40Z")

</div>

Hello, I have something like this: "documents" : { "type1" : "341.943-61", "type2" : "5.6-0" } But the user is not require to input it with special characters, so, it can be something…

---

## [Ho group specific pattern in 1 message?](https://discuss.elastic.co/t/ho-group-specific-pattern-in-1-message/316646)

<div class="topic-metadata">

**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\
**Replies:** 0\
**Last updated:** [October 14, 2022, 2:38pm UTC](https://discuss.elastic.co/t/ho-group-specific-pattern-in-1-message/316646 "2022-10-14T14:38:32Z")

</div>

example 2022-09-28 16:48:11,016 INFO \[stdout\] (default task-2) RELOAD PKCS#11 CRYPTOKI 2022-09-28 16:48:11,027 ERROR \[stderr\] (default task-2) it.unidoc.cdr.core.exception.IdentityStoreException: it.unidoc.cdr.core.exc…

---

## [Request elasticsearch to update geoip database](https://discuss.elastic.co/t/request-elasticsearch-to-update-geoip-database/315850)

<div class="topic-metadata">

**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\
**Replies:** 6\
**Last updated:** [October 14, 2022, 12:32pm UTC](https://discuss.elastic.co/t/request-elasticsearch-to-update-geoip-database/315850 "2022-10-14T12:32:30Z")

</div>

Hello I use elasticsearch on premises for security features, and I can't expose it all the time which made my geoip databases expire. I'm aware that elasticsearch use maxmind database and request using https://geoip.el…

---

## [Login problem w/ superuser on other nodes (docker)](https://discuss.elastic.co/t/login-problem-w-superuser-on-other-nodes-docker/316635)

<div class="topic-metadata">

**Author:** [@divadpoc](https://discuss.elastic.co/u/divadpoc)\
**Replies:** 0\
**Last updated:** [October 14, 2022, 12:12pm UTC](https://discuss.elastic.co/t/login-problem-w-superuser-on-other-nodes-docker/316635 "2022-10-14T12:12:34Z")

</div>

Hi, I had a problem I was able to figure out, but I don't understanding why, yet. All versions, ES, Kibana, Java Client, w/ latest version (8.4) I followed the instructions here in order to run elasticsearch and kibana…

---

## [Fuzzy search](https://discuss.elastic.co/t/fuzzy-search/316620)

<div class="topic-metadata">

**Author:** [@subodh\_dhukuchhu](https://discuss.elastic.co/u/subodh_dhukuchhu)\
**Replies:** 1\
**Last updated:** [October 14, 2022, 11:44am UTC](https://discuss.elastic.co/t/fuzzy-search/316620 "2022-10-14T11:44:07Z")

</div>

I have \[ {title:"This is title",desc:"This is desc"}, {title:"I am second title",desc:"I am second title"}, \] My requirement was To show result when I search "secott" ( from second object) To show result when I se…

---

## [Exact string match query on all fields](https://discuss.elastic.co/t/exact-string-match-query-on-all-fields/316623)

<div class="topic-metadata">

**Author:** [@melwinalmeida](https://discuss.elastic.co/u/melwinalmeida)\
**Replies:** 0\
**Last updated:** [October 14, 2022, 10:32am UTC](https://discuss.elastic.co/t/exact-string-match-query-on-all-fields/316623 "2022-10-14T10:32:09Z")

</div>

Our records contain lot of string fields. How do I perform an exact string match query without mentioning the field names in the query. For example, suppose I have following records: { "address": "google.com", "a…

---

## [Shards for three node cluster](https://discuss.elastic.co/t/shards-for-three-node-cluster/316386)

<div class="topic-metadata">

**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\
**Replies:** 6\
**Last updated:** [October 14, 2022, 6:50am UTC](https://discuss.elastic.co/t/shards-for-three-node-cluster/316386 "2022-10-14T06:50:35Z")

</div>

Hi Team, I have three node cluster and my current shard setting is 2 primary and 1 replica so in total, 4 shards for three node cluster. In this case, a single node is having one extra shard everytime? Can i have 1 pr…

---

## [Get the score for a document with String id](https://discuss.elastic.co/t/get-the-score-for-a-document-with-string-id/316596)

<div class="topic-metadata">

**Author:** [@karthik\_sagar](https://discuss.elastic.co/u/karthik_sagar)\
**Replies:** 1\
**Last updated:** [October 14, 2022, 6:47am UTC](https://discuss.elastic.co/t/get-the-score-for-a-document-with-string-id/316596 "2022-10-14T06:47:55Z")

</div>

Hi everyone, Here is a sample document I have with document id as string datatype. For one of my query I was expecting ~1000 records but the returned count is 10 documents less. I wanted to understand why some documents…

---

## [Installing Elasticsearch in Centos7 problem](https://discuss.elastic.co/t/installing-elasticsearch-in-centos7-problem/316497)

<div class="topic-metadata">

**Author:** [@MBekhit](https://discuss.elastic.co/u/MBekhit)\
**Replies:** 8\
**Last updated:** [October 14, 2022, 6:19am UTC](https://discuss.elastic.co/t/installing-elasticsearch-in-centos7-problem/316497 "2022-10-14T06:19:11Z")

</div>

Hi, I have this error when I want to install Elasticsearch in Centos 7 elasticsearch-7.17.6-x86\_64.rp FAILED https://artifacts.elastic.co/packages/7.x/yum/7.17.6/elasticsearch-…

---

## [Running queue tasks more than max queue capacity](https://discuss.elastic.co/t/running-queue-tasks-more-than-max-queue-capacity/316496)

<div class="topic-metadata">

**Author:** [@liuhuang9492](https://discuss.elastic.co/u/liuhuang9492)\
**Replies:** 5\
**Last updated:** [October 14, 2022, 6:13am UTC](https://discuss.elastic.co/t/running-queue-tasks-more-than-max-queue-capacity/316496 "2022-10-14T06:13:35Z")

</div>

version 6.3.2, elasticsearch, version 6.3.2, has 5 master nodes and 15 data nodes. The following problems occur in the log: Caused by: org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected ex…

---

## [I'm having trouble uploading my json data](https://discuss.elastic.co/t/im-having-trouble-uploading-my-json-data/316573)

<div class="topic-metadata">

**Author:** [@Vitoria\_De\_Lara](https://discuss.elastic.co/u/Vitoria_De_Lara)\
**Replies:** 2\
**Last updated:** [October 14, 2022, 6:06am UTC](https://discuss.elastic.co/t/im-having-trouble-uploading-my-json-data/316573 "2022-10-14T06:06:15Z")

</div>

I'm using centos8 and I have this file: \`file2\_oneline1.json inside him: {"index":{"\_index":"accounts","\_type":"type1","\_id":"7"}}{"nome":"rafaela","idade":"70","cidade":"BH"}{"nome":"vitoria","idade":"20","cidade":"S…

---

## [Missing parameters for geo\_shape type in ES8](https://discuss.elastic.co/t/missing-parameters-for-geo-shape-type-in-es8/316523)

<div class="topic-metadata">

**Author:** [@Eduardo\_Montes](https://discuss.elastic.co/u/Eduardo_Montes)\
**Replies:** 2\
**Last updated:** [October 14, 2022, 6:02am UTC](https://discuss.elastic.co/t/missing-parameters-for-geo-shape-type-in-es8/316523 "2022-10-14T06:02:22Z")

</div>

I tried to make the ES upgrade from 6.2.4 to 8.4 and I found out that there are not supported parameters for the geo\_shape data type. I used tree and precision parameters in mapping with previous ES version. Are these p…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=357)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=359)
