# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=370 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 371 --- ## [Error when creating a kibana token](https://discuss.elastic.co/t/error-when-creating-a-kibana-token/315090)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 3\ **Last updated:** [September 25, 2022, 3:58pm UTC](https://discuss.elastic.co/t/error-when-creating-a-kibana-token/315090 "2022-09-25T15:58:39Z")
ubuntu 22.04 elastic 8.4.1 kibana 8.4.1 filebeat 8.4.1 auditbeat suricata elastic and kibana were working well with an old IP and when now i changed the IP to both of them i try to create a token it doesn't work ..… --- ## [ELK Docker stack exiting with code 139 after upgraded from 7.8 to 7.17.6](https://discuss.elastic.co/t/elk-docker-stack-exiting-with-code-139-after-upgraded-from-7-8-to-7-17-6/315100)
**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\ **Replies:** 0\ **Last updated:** [September 25, 2022, 12:59pm UTC](https://discuss.elastic.co/t/elk-docker-stack-exiting-with-code-139-after-upgraded-from-7-8-to-7-17-6/315100 "2022-09-25T12:59:33Z")
Hello, I am using Docker compose and ELK stack working fine on 7.8 version till date. I have tried to upgrade to 7.17.6 by running below command: docker-compose up --force-recreate --build -d Post that all 3 container… --- ## [Tf-idf custom similarity and bm25 gives same scores and identical results along with a minor problem](https://discuss.elastic.co/t/tf-idf-custom-similarity-and-bm25-gives-same-scores-and-identical-results-along-with-a-minor-problem/314814)
**Author:** [@dayzero](https://discuss.elastic.co/u/dayzero)\ **Replies:** 2\ **Last updated:** [September 25, 2022, 11:08am UTC](https://discuss.elastic.co/t/tf-idf-custom-similarity-and-bm25-gives-same-scores-and-identical-results-along-with-a-minor-problem/314814 "2022-09-25T11:08:40Z")
\#custom\_similarity #\_ignored #search\_problem #bm25 #tfidf Hi guys, First doubt: while indexing a field with large text along with other lightweight fields, the field gets ignored. But searching works in that field. how… --- ## [Extract query result in csv file](https://discuss.elastic.co/t/extract-query-result-in-csv-file/315095)
**Author:** [@Shubh](https://discuss.elastic.co/u/Shubh)\ **Replies:** 0\ **Last updated:** [September 25, 2022, 8:18am UTC](https://discuss.elastic.co/t/extract-query-result-in-csv-file/315095 "2022-09-25T08:18:49Z")
Hi all, can you help me how would i extract the java query output in csv file my code is given below. try { RangeQueryBuilder rangeQ = QueryBuilders .rangeQuery("@timestamp") … --- ## [Bucket aggregation with java api](https://discuss.elastic.co/t/bucket-aggregation-with-java-api/315074)
**Author:** [@Shubh](https://discuss.elastic.co/u/Shubh)\ **Replies:** 6\ **Last updated:** [September 25, 2022, 8:12am UTC](https://discuss.elastic.co/t/bucket-aggregation-with-java-api/315074 "2022-09-25T08:12:17Z")
Hi all can anyone pls help me convert below query in java i have been stuck to this from very long and frustrated.. pls help here GET /\_search { "query": { "bool": { "filter": \[ { "range": … --- ## [Retrieve documents matching criteria along with missing documentIds](https://discuss.elastic.co/t/retrieve-documents-matching-criteria-along-with-missing-documentids/314665)
**Author:** [@priyakc](https://discuss.elastic.co/u/priyakc)\ **Replies:** 10\ **Last updated:** [September 25, 2022, 3:01am UTC](https://discuss.elastic.co/t/retrieve-documents-matching-criteria-along-with-missing-documentids/314665 "2022-09-25T03:01:47Z")
I have list of document ids. When I query Elasticsearch, In result I need document ids which are matching my criteria and documentIds for which documents do not exist in Elasticsearch. Background on use case I need to … --- ## [Match\_phrase with exact substring without space](https://discuss.elastic.co/t/match-phrase-with-exact-substring-without-space/315064)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 2\ **Last updated:** [September 24, 2022, 6:59pm UTC](https://discuss.elastic.co/t/match-phrase-with-exact-substring-without-space/315064 "2022-09-24T18:59:55Z")
I have a dataset like Text: a==b==c== Text: a==b== c== Text: a== b==c== And my own analyzer to create tokens for each letter "analysis": { "analyzer": { "my\_analyzer": { "char\_filter": \[ "my\_char\_filter" … --- ## [Persian synonyms](https://discuss.elastic.co/t/persian-synonyms/315079)
**Author:** [@Mahdi\_Abbasi](https://discuss.elastic.co/u/Mahdi_Abbasi)\ **Replies:** 0\ **Last updated:** [September 24, 2022, 10:06am UTC](https://discuss.elastic.co/t/persian-synonyms/315079 "2022-09-24T10:06:59Z")
Hey, I was wondering if there is a dataset of persian synonym words for my analyzer. I expect the dataset to contain at least same words with different spacings. for example: "اسید لاکتیک" and "اسیدلاکتیک". Thank you … --- ## [Does SetProcessor require dynamic mapping?](https://discuss.elastic.co/t/does-setprocessor-require-dynamic-mapping/315078)
**Author:** [@fifthist](https://discuss.elastic.co/u/fifthist)\ **Replies:** 1\ **Last updated:** [September 24, 2022, 10:01am UTC](https://discuss.elastic.co/t/does-setprocessor-require-dynamic-mapping/315078 "2022-09-24T10:01:08Z")
Does an index require dynamic mapping for a SetProcessor to be able to enrich a document with a new field? If using strict mapping, would the field that a SetProcessor is going to set need to be added to the mapping bef… --- ## [Cannot Start .\\elasticsearch.bat on windows](https://discuss.elastic.co/t/cannot-start-elasticsearch-bat-on-windows/315037)
**Author:** [@miawu8](https://discuss.elastic.co/u/miawu8)\ **Replies:** 4\ **Last updated:** [September 24, 2022, 5:17am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-bat-on-windows/315037 "2022-09-24T05:17:02Z")
Last month I installed V8.3.2 on windows 2022, everything was ok, but today I stop and deleted V8.3.2, and downloaded 8.4.2 from the official website, use the same config, the system reported an error and could not start… --- ## [Puzzling Scoring situation using multi\_match](https://discuss.elastic.co/t/puzzling-scoring-situation-using-multi-match/315065)
**Author:** [@terzano](https://discuss.elastic.co/u/terzano)\ **Replies:** 1\ **Last updated:** [September 24, 2022, 2:57am UTC](https://discuss.elastic.co/t/puzzling-scoring-situation-using-multi-match/315065 "2022-09-24T02:57:56Z")
I am having a hard time understading why the scoring of record #1 is higher than #2. The one on #2 has more matches (see Highlight entry). Both terms are found on fields with higher boosting criteria ss\_categories\_full … --- ## [Field with different types on same index](https://discuss.elastic.co/t/field-with-different-types-on-same-index/315047)
**Author:** [@prabello](https://discuss.elastic.co/u/prabello)\ **Replies:** 5\ **Last updated:** [September 23, 2022, 11:41pm UTC](https://discuss.elastic.co/t/field-with-different-types-on-same-index/315047 "2022-09-23T23:41:33Z")
Currently, we are indexing information on elastic for each business that is our customer (B2B), this is causing us to have too many indexes, some with very small shards (500mb shards) But due to the nature of the data, … --- ## [Elasticsearch: \[Python Client\] Search does not return documents](https://discuss.elastic.co/t/elasticsearch-python-client-search-does-not-return-documents/315066)
**Author:** [@Ivo\_Tavares](https://discuss.elastic.co/u/Ivo_Tavares)\ **Replies:** 0\ **Last updated:** [September 23, 2022, 10:41pm UTC](https://discuss.elastic.co/t/elasticsearch-python-client-search-does-not-return-documents/315066 "2022-09-23T22:41:48Z")
When I run the following: search\_doc = Document.search( using=client, index=custom\_index ) search\_doc = search\_doc.query("term", doc\_field = f"string\_{num}") and then use .scan() I get Hit objects. So… --- ## [Error when starting elasticsearch](https://discuss.elastic.co/t/error-when-starting-elasticsearch/315026)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 5\ **Last updated:** [September 23, 2022, 9:18pm UTC](https://discuss.elastic.co/t/error-when-starting-elasticsearch/315026 "2022-09-23T21:18:21Z")
I HAVE elastic 8.4.1 in ubuntu 22.04 and when i make this cmd "discovery.type: single-node" in elasticsearch.yml because i installed elastic ad kibana in the same server i have this error \[2022-09-23T14:30:10,954\]\[ERRO… --- ## [Timepicker parameters as input to painless scripts](https://discuss.elastic.co/t/timepicker-parameters-as-input-to-painless-scripts/314900)
**Author:** [@antoniolopescorreia](https://discuss.elastic.co/u/antoniolopescorreia)\ **Replies:** 3\ **Last updated:** [September 23, 2022, 6:01pm UTC](https://discuss.elastic.co/t/timepicker-parameters-as-input-to-painless-scripts/314900 "2022-09-23T18:01:21Z")
Is it currently possible to pass the timepicker values as input parameters to runtime painless scripts? The question occurs because I would like to dynamically calculate some time interval value sums, which are calculate… --- ## [How to achieve semantic search with ElasticSearch 8.4.2?](https://discuss.elastic.co/t/how-to-achieve-semantic-search-with-elasticsearch-8-4-2/315038)
**Author:** [@Dinesh\_Sonachalam](https://discuss.elastic.co/u/Dinesh_Sonachalam)\ **Replies:** 1\ **Last updated:** [September 23, 2022, 4:48pm UTC](https://discuss.elastic.co/t/how-to-achieve-semantic-search-with-elasticsearch-8-4-2/315038 "2022-09-23T16:48:13Z")
How to achieve semantic search with Elasticsearch 8.4.2? Hi guys, I have a basic understanding of adding semantic search support for ES and added them below. It would be beneficial if you guys share some working examp… --- ## [Detect sessions via timestamp and threshold](https://discuss.elastic.co/t/detect-sessions-via-timestamp-and-threshold/315019)
**Author:** [@SKiD](https://discuss.elastic.co/u/SKiD)\ **Replies:** 0\ **Last updated:** [September 23, 2022, 1:46pm UTC](https://discuss.elastic.co/t/detect-sessions-via-timestamp-and-threshold/315019 "2022-09-23T13:46:53Z")
Hey, I'm not sure if this is the right area to post it, maybe it might be Kibana, but I just give it a try. I'm currently having firewall logs in my indices with timestamp, IP adresses, sent and received bytes and sess… --- ## [Query\_string OR condition score explanation](https://discuss.elastic.co/t/query-string-or-condition-score-explanation/315017)
**Author:** [@Pazhaniyappan](https://discuss.elastic.co/u/Pazhaniyappan)\ **Replies:** 0\ **Last updated:** [September 23, 2022, 1:33pm UTC](https://discuss.elastic.co/t/query-string-or-condition-score-explanation/315017 "2022-09-23T13:33:43Z")
GET index/\_search { "\_source": \[ "\_id", "field" \], "explain": true, "query": { "bool": { "must": \[ { "bool": { "should": \[ { "query\_st… --- ## [Throttled merge](https://discuss.elastic.co/t/throttled-merge/314963)
**Author:** [@Ariel\_Zach](https://discuss.elastic.co/u/Ariel_Zach)\ **Replies:** 3\ **Last updated:** [September 23, 2022, 12:47pm UTC](https://discuss.elastic.co/t/throttled-merge/314963 "2022-09-23T12:47:18Z")
Hello, Currently we have an index of 33TB (ES 7.8), 48 shards (16 primary, 32 replicas), two months ago we deleted a lot of documents and we noticed that one of the shards (the primary and the 2 replicas) has a very lar… --- ## [Score is same for single value match vs multiple match for an array field using terms query](https://discuss.elastic.co/t/score-is-same-for-single-value-match-vs-multiple-match-for-an-array-field-using-terms-query/314976)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 3\ **Last updated:** [September 23, 2022, 11:42am UTC](https://discuss.elastic.co/t/score-is-same-for-single-value-match-vs-multiple-match-for-an-array-field-using-terms-query/314976 "2022-09-23T11:42:48Z")
PUT dvt\_test\_long/\_doc/1 { "items" : \[1\] } PUT dvt\_test\_long/\_doc/2 { "items" : \[1, 2\] } PUT dvt\_test\_long/\_doc/3 { "items" : \[1, 2, 3\] } PUT dvt\_test\_long/\_doc/4 { "items" : \[1, 2, 3, 4\] } Query: GET d… --- ## [Query on timeseries data very slow](https://discuss.elastic.co/t/query-on-timeseries-data-very-slow/314815)
**Author:** [@kk123](https://discuss.elastic.co/u/kk123)\ **Replies:** 6\ **Last updated:** [September 23, 2022, 9:37am UTC](https://discuss.elastic.co/t/query-on-timeseries-data-very-slow/314815 "2022-09-23T09:37:49Z")
Hi, this follows previous questions. I have merged all my indices into 1 ilm based index, with a added field that contains the previous "index" name... Generally this is fine, with some performance hit. Queries are gene… --- ## [Best approach to reuse an already existing ELK enviroment to monitor a new E-Commerce Env](https://discuss.elastic.co/t/best-approach-to-reuse-an-already-existing-elk-enviroment-to-monitor-a-new-e-commerce-env/315006)
**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\ **Replies:** 0\ **Last updated:** [September 23, 2022, 9:36am UTC](https://discuss.elastic.co/t/best-approach-to-reuse-an-already-existing-elk-enviroment-to-monitor-a-new-e-commerce-env/315006 "2022-09-23T09:36:20Z")
Good morning. I've been requested to use an already existing ELK environment that until now has been used to monitor a single E-Commerce App environment. The client is asking me now to reuse this ELK environment to mon… --- ## ["type"=\>"illegal\_argument\_exception", "reason"=\>"cannot parse empty date"} in logstash logs](https://discuss.elastic.co/t/type-illegal-argument-exception-reason-cannot-parse-empty-date-in-logstash-logs/314991)
**Author:** [@madurad](https://discuss.elastic.co/u/madurad)\ **Replies:** 2\ **Last updated:** [September 23, 2022, 7:36am UTC](https://discuss.elastic.co/t/type-illegal-argument-exception-reason-cannot-parse-empty-date-in-logstash-logs/314991 "2022-09-23T07:36:37Z")
Hello, Getting an error on pushing logs to logstash to elasticseacrch, "error"=\>{"type"=\>"mapper\_parsing\_exception", "reason"=\>"failed to parse field \[message\] of type \[date\] in document with id 'NVWQaIMBa0kW\_rfG7Lb1'… --- ## [Elasticsearch::Transport::Transport::Errors::BadRequest](https://discuss.elastic.co/t/elasticsearch-badrequest/314860)
**Author:** [@Hunaid\_Nawaz](https://discuss.elastic.co/u/Hunaid_Nawaz)\ **Replies:** 1\ **Last updated:** [September 23, 2022, 3:27am UTC](https://discuss.elastic.co/t/elasticsearch-badrequest/314860 "2022-09-23T03:27:41Z")
Hi, I'm facing the error related to the Elasticsearch::Transport. I'm using searchkick gem in rails. elasticsearch version 7.17.4 When i'm doing reindex using searchkick gem it returned this error Elasticsearch::Tran… --- ## [Heroku review apps not able to access Elasticsearch add-on foundelasticsearch](https://discuss.elastic.co/t/heroku-review-apps-not-able-to-access-elasticsearch-add-on-foundelasticsearch/314984)
**Author:** [@Eric\_Lee1](https://discuss.elastic.co/u/Eric_Lee1)\ **Replies:** 0\ **Last updated:** [September 23, 2022, 1:10am UTC](https://discuss.elastic.co/t/heroku-review-apps-not-able-to-access-elasticsearch-add-on-foundelasticsearch/314984 "2022-09-23T01:10:15Z")
I am trying to deploy my node application with Elasicsearch and I want to use the official Elasticsearch add-on foundelasticsearch into my Heroku application. Here is my workflow: In my node application, I created a… --- ## [Elasticsearch 7.10 durability permanent](https://discuss.elastic.co/t/elasticsearch-7-10-durability-permanent/314875)
**Author:** [@Michael\_Sanchez](https://discuss.elastic.co/u/Michael_Sanchez)\ **Replies:** 14\ **Last updated:** [September 22, 2022, 6:45pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-durability-permanent/314875 "2022-09-22T18:45:11Z")
Hello team, My Elasticsearch cluster v7.10 has the following error: reason" : "\[parent\] Data too large, data for \[\\] would be \[17110531128/15.9gb\], which is larger than the limit of \[16320875724/15.1gb\], r… --- ## [\[ERROR\]\[elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/error-elasticsearch-service-unable-to-retrieve-version-information-from-elasticsearch-nodes/306399)
**Author:** [@HKN\_MZ](https://discuss.elastic.co/u/HKN_MZ)\ **Replies:** 5\ **Last updated:** [September 22, 2022, 6:10pm UTC](https://discuss.elastic.co/t/error-elasticsearch-service-unable-to-retrieve-version-information-from-elasticsearch-nodes/306399 "2022-09-22T18:10:35Z")
Hi Everyone, I try to install Elasticsearch8.2.2 and Kibana8.2.2 on the one ubuntu20.04 virtual machine. I installed and configured Elasticsearch8.2.2 and get accessed from my local browser successfully. As below picture… --- ## [API Key not enabled](https://discuss.elastic.co/t/api-key-not-enabled/314962)
**Author:** [@SilasMuniz1](https://discuss.elastic.co/u/SilasMuniz1)\ **Replies:** 2\ **Last updated:** [September 22, 2022, 5:21pm UTC](https://discuss.elastic.co/t/api-key-not-enabled/314962 "2022-09-22T17:21:11Z")
Hello, I have a cluster with 3 nodes of elasticsearch. In the first node I've installed kibana. Configured TLS/SSL in all cluster nodes. And use credential to communicate with kibana and logstash. My problem is about … --- ## [Search\_coordination thread queue filling up. Can we change the setting?](https://discuss.elastic.co/t/search-coordination-thread-queue-filling-up-can-we-change-the-setting/314813)
**Author:** [@elastic\_dude](https://discuss.elastic.co/u/elastic_dude)\ **Replies:** 6\ **Last updated:** [September 22, 2022, 4:38pm UTC](https://discuss.elastic.co/t/search-coordination-thread-queue-filling-up-can-we-change-the-setting/314813 "2022-09-22T16:38:35Z")
Hello, We are operating some Elasticsearch clusters and have noticed in the most queried cluster periodically the search\_coordination thread pool can't keep up, resulting in a queue that then translates to high latency … --- ## [Maximum age in hot phase vs. Move data into phase in warm phase](https://discuss.elastic.co/t/maximum-age-in-hot-phase-vs-move-data-into-phase-in-warm-phase/314934)
**Author:** [@rosaLux161](https://discuss.elastic.co/u/rosaLux161)\ **Replies:** 1\ **Last updated:** [September 22, 2022, 4:21pm UTC](https://discuss.elastic.co/t/maximum-age-in-hot-phase-vs-move-data-into-phase-in-warm-phase/314934 "2022-09-22T16:21:17Z")
Hey there, I don't understand the difference between the two options. First, in the hot phase I can enter a maximum age after a rollover happens, but then in the warm phase I can also enter a maximum duration when the r… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=369) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=371)