# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=368 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 369 --- ## [Rolling Restart doubt](https://discuss.elastic.co/t/rolling-restart-doubt/315429)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 2\ **Last updated:** [September 29, 2022, 7:49am UTC](https://discuss.elastic.co/t/rolling-restart-doubt/315429 "2022-09-29T07:49:01Z")
hello! i have a cluster with 20 data nodes, 3 masters and 2 ml. We want to do a rolling restart so that there is no loss of service. i know the method to follow.... disable shard allocation, temporarily stop ml jobs, r… --- ## [Windows system configuration](https://discuss.elastic.co/t/windows-system-configuration/315427)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 0\ **Last updated:** [September 29, 2022, 6:46am UTC](https://discuss.elastic.co/t/windows-system-configuration/315427 "2022-09-29T06:46:24Z")
In documentation there are explanation on configuration related to Linux, such file descriptor, virtual memory, etc. Is there any special configuration for Windows? --- ## [JsonParsingException: expected:',', actual:'"application/pdf; version=1.7"', at offset:428](https://discuss.elastic.co/t/jsonparsingexception-expected-actual-application-pdf-version-1-7-at-offset-428/314857)
**Author:** [@Roman\_Cerny](https://discuss.elastic.co/u/Roman_Cerny)\ **Replies:** 2\ **Last updated:** [September 29, 2022, 6:08am UTC](https://discuss.elastic.co/t/jsonparsingexception-expected-actual-application-pdf-version-1-7-at-offset-428/314857 "2022-09-29T06:08:34Z")
Hello there, I'm new to Elasticsearch and I'm trying to set up a cloud solution of Elasticsearch on azure with .Net 6.0 and a NEST, but I encoutered a problem when working with 7.17.4 NEST and 8.x version of Elasticsear… --- ## [Elasticsearch \[6.8\] Shard distribution based on traffic](https://discuss.elastic.co/t/elasticsearch-6-8-shard-distribution-based-on-traffic/315422)
**Author:** [@srivatsa](https://discuss.elastic.co/u/srivatsa)\ **Replies:** 1\ **Last updated:** [September 29, 2022, 5:32am UTC](https://discuss.elastic.co/t/elasticsearch-6-8-shard-distribution-based-on-traffic/315422 "2022-09-29T05:32:37Z")
Hi Folks, We are seeing scenarios where the cluster is allocating 6 -10 shards(primaries & replicas) of an index with shard sizes around 50GB on a single node of the cluster even though all nodes in the cluster are of t… --- ## [Extract attribute from XML field in search results](https://discuss.elastic.co/t/extract-attribute-from-xml-field-in-search-results/315420)
**Author:** [@Eddie\_Vuong](https://discuss.elastic.co/u/Eddie_Vuong)\ **Replies:** 0\ **Last updated:** [September 29, 2022, 3:45am UTC](https://discuss.elastic.co/t/extract-attribute-from-xml-field-in-search-results/315420 "2022-09-29T03:45:20Z")
I have a field that contains XML string in my data and I want to, instead of retrieving the full XML, extract a few attributes from it in the final results. In practice I can do it using Python (query all the needed dat… --- ## [Specify ILM process with cron syntax](https://discuss.elastic.co/t/specify-ilm-process-with-cron-syntax/315396)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 2\ **Last updated:** [September 28, 2022, 10:00pm UTC](https://discuss.elastic.co/t/specify-ilm-process-with-cron-syntax/315396 "2022-09-28T22:00:35Z")
Running a very busy cluster, we want to be able to specify when ILM tasks are running. Example: we run Spark job during 2 jours, and sometimes shrink'ing happen, which completely kill search scroll performance (less sha… --- ## [ML Job low severity score](https://discuss.elastic.co/t/ml-job-low-severity-score/315408)
**Author:** [@Camilo\_Otalora](https://discuss.elastic.co/u/Camilo_Otalora)\ **Replies:** 0\ **Last updated:** [September 28, 2022, 9:59pm UTC](https://discuss.elastic.co/t/ml-job-low-severity-score/315408 "2022-09-28T21:59:14Z")
Hello! I was developing a Machine Learning task so I could automate some anomaly detection between people’s activity. We have activity x12 times higher than usual, but the severity is way lower than what we expected (\< 1… --- ## [How to display exact match and variations after](https://discuss.elastic.co/t/how-to-display-exact-match-and-variations-after/315394)
**Author:** [@Guilherme\_Mello](https://discuss.elastic.co/u/Guilherme_Mello)\ **Replies:** 1\ **Last updated:** [September 28, 2022, 5:47pm UTC](https://discuss.elastic.co/t/how-to-display-exact-match-and-variations-after/315394 "2022-09-28T17:47:34Z")
How can I display first the exact match and search variations after? example: query: all star results: all star red (exact) all star blue (exact) all star long (exact) dress all red (partial) shoes star (partial) … --- ## [Offline install of ELK stack on Oracle Linux](https://discuss.elastic.co/t/offline-install-of-elk-stack-on-oracle-linux/315389)
**Author:** [@ccloutr.alex](https://discuss.elastic.co/u/ccloutr.alex)\ **Replies:** 1\ **Last updated:** [September 28, 2022, 4:36pm UTC](https://discuss.elastic.co/t/offline-install-of-elk-stack-on-oracle-linux/315389 "2022-09-28T16:36:21Z")
I need to install ELK stack with all of its dependencies on a Oracle Linux box that is not connected to the internet. Is there a Offline install package that contains all dependencies? --- ## [Hot indices vs cold indices in same cluster](https://discuss.elastic.co/t/hot-indices-vs-cold-indices-in-same-cluster/315294)
**Author:** [@sara251186](https://discuss.elastic.co/u/sara251186)\ **Replies:** 1\ **Last updated:** [September 28, 2022, 3:36pm UTC](https://discuss.elastic.co/t/hot-indices-vs-cold-indices-in-same-cluster/315294 "2022-09-28T15:36:04Z")
I have a cluster for 12 data nodes running for a e commerce search, we also have 6 indices representing countries like US, CA, DE etc. I was running perf test against this cluster with just 1 index (i.e US - this compri… --- ## [Getting runtime\_exception exceeds maxClauseCount after Elasticsearch upgrade](https://discuss.elastic.co/t/getting-runtime-exception-exceeds-maxclausecount-after-elasticsearch-upgrade/315380)
**Author:** [@gwillis](https://discuss.elastic.co/u/gwillis)\ **Replies:** 0\ **Last updated:** [September 28, 2022, 2:55pm UTC](https://discuss.elastic.co/t/getting-runtime-exception-exceeds-maxclausecount-after-elasticsearch-upgrade/315380 "2022-09-28T14:55:23Z")
We are upgrading from Elasticsearch 6.2.4 to Elasticsearch 8.4.1 and are experiencing problems with several queries getting a runtime\_exception exceeds maxClauseCount. Elasticsearch 6.2.4 uses the default for index.query… --- ## [Why does Elasticsearch's default settings for logging via log4j2 retain such large amounts logs?](https://discuss.elastic.co/t/why-does-elasticsearchs-default-settings-for-logging-via-log4j2-retain-such-large-amounts-logs/315255)
**Author:** [@bassistcz](https://discuss.elastic.co/u/bassistcz)\ **Replies:** 4\ **Last updated:** [September 28, 2022, 12:22pm UTC](https://discuss.elastic.co/t/why-does-elasticsearchs-default-settings-for-logging-via-log4j2-retain-such-large-amounts-logs/315255 "2022-09-28T12:22:33Z")
I am curious about the logging settings for Elasticsearch, (I am running 7.17.3) as they appear much larger then what I typically expect for application logging. I have run into issues where the logs have filled my loggi… --- ## [Bucket aggregation And Java client](https://discuss.elastic.co/t/bucket-aggregation-and-java-client/315136)
**Author:** [@Shubh](https://discuss.elastic.co/u/Shubh)\ **Replies:** 1\ **Last updated:** [September 28, 2022, 10:00am UTC](https://discuss.elastic.co/t/bucket-aggregation-and-java-client/315136 "2022-09-28T10:00:02Z")
Hi all, can you help me with my query result the out is not coming as i expected. below is my query pls check if i have to make any changes in the query GET /\_search { "query": { "bool": { "filter": \[ … --- ## [Consultation about a use case](https://discuss.elastic.co/t/consultation-about-a-use-case/315305)
**Author:** [@royassis](https://discuss.elastic.co/u/royassis)\ **Replies:** 1\ **Last updated:** [September 28, 2022, 9:49am UTC](https://discuss.elastic.co/t/consultation-about-a-use-case/315305 "2022-09-28T09:49:56Z")
Hey In my company we are building a awb application. Out application data resided in multiple data sources : aws s3, postgres, mongodb. I was looking for a way to speed up some of the queries. There are some drop dow… --- ## [Can I enable Elasticsearch with ssl without authentication](https://discuss.elastic.co/t/can-i-enable-elasticsearch-with-ssl-without-authentication/315322)
**Author:** [@yasin\_mohammed](https://discuss.elastic.co/u/yasin_mohammed)\ **Replies:** 1\ **Last updated:** [September 28, 2022, 7:40am UTC](https://discuss.elastic.co/t/can-i-enable-elasticsearch-with-ssl-without-authentication/315322 "2022-09-28T07:40:42Z")
Hi... As we are planning to use Elasticsearch ssl and have authentication enabled at firewall is it possible disable Elasticsearch authentication and keep only ssl --- ## [How to write a range query for a date field with an interval on Elasticsearch?](https://discuss.elastic.co/t/how-to-write-a-range-query-for-a-date-field-with-an-interval-on-elasticsearch/315328)
**Author:** [@Ahkam\_Naseek](https://discuss.elastic.co/u/Ahkam_Naseek)\ **Replies:** 0\ **Last updated:** [September 28, 2022, 6:55am UTC](https://discuss.elastic.co/t/how-to-write-a-range-query-for-a-date-field-with-an-interval-on-elasticsearch/315328 "2022-09-28T06:55:23Z")
This is my current query which fetches documents which are older than 365 days from now. "query": { "bool": { "must": \[ { "match": { "doc\_type": "AP - ACH CHECKS" } }, { "range":… --- ## [Error when connecting to powerBI through ODBC](https://discuss.elastic.co/t/error-when-connecting-to-powerbi-through-odbc/315307)
**Author:** [@David\_Arancibia](https://discuss.elastic.co/u/David_Arancibia)\ **Replies:** 1\ **Last updated:** [September 27, 2022, 8:52pm UTC](https://discuss.elastic.co/t/error-when-connecting-to-powerbi-through-odbc/315307 "2022-09-27T20:52:30Z")
I recently migrated from self hosted ELK to elastic cloud, everything is working well except the ODBC connector to powerBI i've been using. It seems to be able to see the data but for some reason its slightly larger th… --- ## [DeprecationWarning for request\_timeout](https://discuss.elastic.co/t/deprecationwarning-for-request-timeout/315311)
**Author:** [@jeroen1](https://discuss.elastic.co/u/jeroen1)\ **Replies:** 0\ **Last updated:** [September 27, 2022, 8:37pm UTC](https://discuss.elastic.co/t/deprecationwarning-for-request-timeout/315311 "2022-09-27T20:37:45Z")
I initialize my ES connection in Python with Elasticsearch.options(), setting a global timeout. For some complex searches I need a custom (longer) timeout. To achieve this, I use es.search(request\_timeout=timeout, \[..\]).… --- ## [Watcher creation help](https://discuss.elastic.co/t/watcher-creation-help/315309)
**Author:** [@ffmdsuperit](https://discuss.elastic.co/u/ffmdsuperit)\ **Replies:** 0\ **Last updated:** [September 27, 2022, 8:20pm UTC](https://discuss.elastic.co/t/watcher-creation-help/315309 "2022-09-27T20:20:09Z")
Hello! I'm very new to Elasticsearch and I am attempting to create a Watcher, but I just can't seem to put the pieces together. I have a index named "transactions". For that index I run this query "TerminalID : 999999 a… --- ## [How to add search\_type in settings](https://discuss.elastic.co/t/how-to-add-search-type-in-settings/314717)
**Author:** [@prashantreddy](https://discuss.elastic.co/u/prashantreddy)\ **Replies:** 4\ **Last updated:** [September 27, 2022, 6:46pm UTC](https://discuss.elastic.co/t/how-to-add-search-type-in-settings/314717 "2022-09-27T18:46:49Z")
Hello, I am pretty new to ES and i use templates for search. we have separate settings file to add analyzers and all. I am trying to add search\_type in same file. is it possible to add search\_type in settings file? i t… --- ## [Want term frequency in a individual document text fields with my query results. How?](https://discuss.elastic.co/t/want-term-frequency-in-a-individual-document-text-fields-with-my-query-results-how/315298)
**Author:** [@ljdtenny](https://discuss.elastic.co/u/ljdtenny)\ **Replies:** 0\ **Last updated:** [September 27, 2022, 6:01pm UTC](https://discuss.elastic.co/t/want-term-frequency-in-a-individual-document-text-fields-with-my-query-results-how/315298 "2022-09-27T18:01:37Z")
I have a text field which has large text values. I do a query, get my hits, highlights, all good. There's just one more thing I want. For each hit of my SIZE hits, I want the term frequency of the query term(s) within… --- ## [Action \[indices:admin/flush\[s\]\] is unauthorized for user \[admin\] with roles \[superuser\] on restricted indices \[.kibana\_task\_manager\_7.17.5\_001\], this action is granted by the index privileges \[maintenance,manage,all\]](https://discuss.elastic.co/t/action-indices-admin-flush-s-is-unauthorized-for-user-admin-with-roles-superuser-on-restricted-indices-kibana-task-manager-7-17-5-001-this-action-is-granted-by-the-index-privileges-maintenance-manage-all/315291)
**Author:** [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\ **Replies:** 1\ **Last updated:** [September 27, 2022, 5:27pm UTC](https://discuss.elastic.co/t/action-indices-admin-flush-s-is-unauthorized-for-user-admin-with-roles-superuser-on-restricted-indices-kibana-task-manager-7-17-5-001-this-action-is-granted-by-the-index-privileges-maintenance-manage-all/315291 "2022-09-27T17:27:40Z")
Hello, guys! I am running a rolling upgrade in a cluster 7.17.5 to 8.3.2. When I try to run the GET /\_flush I am receiving this error as return { "\_shards" : { "total" : 148, "successful" : 77, "failed" … --- ## [Error while fetching resource Kibana APM](https://discuss.elastic.co/t/error-while-fetching-resource-kibana-apm/315284)
**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\ **Replies:** 1\ **Last updated:** [September 27, 2022, 4:07pm UTC](https://discuss.elastic.co/t/error-while-fetching-resource-kibana-apm/315284 "2022-09-27T16:07:55Z")
elasticsearch, logstash, kibana: 7.17.3 apm-server: 7.5.2 I am getting the following error when trying to access the APM tab on Kibana: Error while fetching resource search\_phase\_execution\_exception: \[illegal\_argume… --- ## [Search for documents containing an item not present in a list](https://discuss.elastic.co/t/search-for-documents-containing-an-item-not-present-in-a-list/314958)
**Author:** [@Adrian\_Fresco](https://discuss.elastic.co/u/Adrian_Fresco)\ **Replies:** 2\ **Last updated:** [September 27, 2022, 3:48pm UTC](https://discuss.elastic.co/t/search-for-documents-containing-an-item-not-present-in-a-list/314958 "2022-09-27T15:48:40Z")
I have indexed documents that contain a field name with a string value: \[ { "fruits": \[ { "name": "apple", "color": "red" }, { … --- ## [403 Forbidden when using '"es.nodes.path.prefix" pyspark 8.4.1 pyspark 3.3](https://discuss.elastic.co/t/403-forbidden-when-using-es-nodes-path-prefix-pyspark-8-4-1-pyspark-3-3/315084)
**Author:** [@rbigley](https://discuss.elastic.co/u/rbigley)\ **Replies:** 8\ **Last updated:** [September 27, 2022, 3:42pm UTC](https://discuss.elastic.co/t/403-forbidden-when-using-es-nodes-path-prefix-pyspark-8-4-1-pyspark-3-3/315084 "2022-09-27T15:42:01Z")
Pyspark 3.3 with elasticsearch-spark-30\_2.12-8.4.1.jar (I've also tried with the elasticsearch-spark-30\_2.12-717.6.jar with same result) I have access to the index and have validated via curl and the normal python elas… --- ## [Enable CORS settings in a Self-Managed Azure Cluster?](https://discuss.elastic.co/t/enable-cors-settings-in-a-self-managed-azure-cluster/315282)
**Author:** [@Dante\_Nahuel](https://discuss.elastic.co/u/Dante_Nahuel)\ **Replies:** 0\ **Last updated:** [September 27, 2022, 3:20pm UTC](https://discuss.elastic.co/t/enable-cors-settings-in-a-self-managed-azure-cluster/315282 "2022-09-27T15:20:36Z")
Hi I deployed an Azure Elasticsearch Self-Managed cluster. According to our Dev team, we need to enable CORS by adding these settings into the Configuration File yaml: "http.cors.enabled": true, "http.cors.allo… --- ## [Boost value depending on number of common terms](https://discuss.elastic.co/t/boost-value-depending-on-number-of-common-terms/315267)
**Author:** [@pzmudzinski](https://discuss.elastic.co/u/pzmudzinski)\ **Replies:** 0\ **Last updated:** [September 27, 2022, 2:05pm UTC](https://discuss.elastic.co/t/boost-value-depending-on-number-of-common-terms/315267 "2022-09-27T14:05:10Z")
Assuming we have index called users and each of them have hobbies stored as array of strings like :\["basketball", "games"\]. We want to fetch users with common hobbies, although we want to boost users with more than one … --- ## [How to modify scores of documents based on partial and exact match](https://discuss.elastic.co/t/how-to-modify-scores-of-documents-based-on-partial-and-exact-match/315010)
**Author:** [@Binish\_Shams](https://discuss.elastic.co/u/Binish_Shams)\ **Replies:** 2\ **Last updated:** [September 27, 2022, 12:11pm UTC](https://discuss.elastic.co/t/how-to-modify-scores-of-documents-based-on-partial-and-exact-match/315010 "2022-09-27T12:11:08Z")
Hello I am finding a solution to achieve a scenario where an index having suppose 10 records each record having last name, first name and phone number etc fields and I want to do partial match and exact match for these f… --- ## [The data store is normal, and the fuzzy search is empty？](https://discuss.elastic.co/t/the-data-store-is-normal-and-the-fuzzy-search-is-empty/315238)
**Author:** [@kingsKangKang](https://discuss.elastic.co/u/kingsKangKang)\ **Replies:** 5\ **Last updated:** [September 27, 2022, 11:05am UTC](https://discuss.elastic.co/t/the-data-store-is-normal-and-the-fuzzy-search-is-empty/315238 "2022-09-27T11:05:45Z")
I have a piece of data that says: 善恩康生物科技(苏州)有限公司 Field is： {"name": {"type": "text","analyzer": "ik\_max\_word", "search\_analyzer": "ik\_smart" }} My search statement is: {"query":{"match\_phrase":{"name":{"query":"善恩康… --- ## [Bm25 tune parameters using elasticsearch](https://discuss.elastic.co/t/bm25-tune-parameters-using-elasticsearch/315245)
**Author:** [@dayzero](https://discuss.elastic.co/u/dayzero)\ **Replies:** 0\ **Last updated:** [September 27, 2022, 9:52am UTC](https://discuss.elastic.co/t/bm25-tune-parameters-using-elasticsearch/315245 "2022-09-27T09:52:22Z")
Hi, I indexed the data with some b and k1 values of the default bm25 algorithm. The thing is implementing relevance feedback on the search engine to tune those b and k1 values. How can I not use reindexing for each time… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=367) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=369)