# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=376 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 377 --- ## [License server IPs](https://discuss.elastic.co/t/license-server-ips/314088)
**Author:** [@jonathanmreiter](https://discuss.elastic.co/u/jonathanmreiter)\ **Replies:** 3\ **Last updated:** [September 12, 2022, 2:30pm UTC](https://discuss.elastic.co/t/license-server-ips/314088 "2022-09-12T14:30:01Z")
Hi there, I'm part of a concern that runs licensed Elasticsearch instances within sensitive environments, and we have been noticing that our instance tries to call home to an unpredictable range of hostnames and IPs ass… --- ## [Hive to Elasticsearch index creation failing with dynamic template](https://discuss.elastic.co/t/hive-to-elasticsearch-index-creation-failing-with-dynamic-template/314106)
**Author:** [@Sivakumar\_M](https://discuss.elastic.co/u/Sivakumar_M)\ **Replies:** 1\ **Last updated:** [September 12, 2022, 1:27pm UTC](https://discuss.elastic.co/t/hive-to-elasticsearch-index-creation-failing-with-dynamic-template/314106 "2022-09-12T13:27:26Z")
I have a hive table connected to elasticsearch. Able to create index when I run insert query without an Elasticsearch template, but it is failing when I run with having a template in elastic first and then I run insert q… --- ## [Check if index value is substring of input string](https://discuss.elastic.co/t/check-if-index-value-is-substring-of-input-string/314191)
**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\ **Replies:** 2\ **Last updated:** [September 12, 2022, 1:24pm UTC](https://discuss.elastic.co/t/check-if-index-value-is-substring-of-input-string/314191 "2022-09-12T13:24:27Z")
I have an index with field and value like(ES\_VAL: AMERICAN EXPRESS), I want to check if the entire ES\_VAL is substring of an input string(eg: CANADA AMERICAN EXPRESS). this is reverse of normal substring operation as w… --- ## [How to set priority and how to ignore some words in search query](https://discuss.elastic.co/t/how-to-set-priority-and-how-to-ignore-some-words-in-search-query/314193)
**Author:** [@Fakeknox](https://discuss.elastic.co/u/Fakeknox)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 12:10pm UTC](https://discuss.elastic.co/t/how-to-set-priority-and-how-to-ignore-some-words-in-search-query/314193 "2022-09-12T12:10:38Z")
hello in our database we have title brands , categories , attribute and ... i want to set some priority for search for example we want to search blue jacket jacket is our category and blue is our attribute how can we … --- ## [Performance... what is faster using 1 or 2 keyword field in term search?](https://discuss.elastic.co/t/performance-what-is-faster-using-1-or-2-keyword-field-in-term-search/314185)
**Author:** [@kk123](https://discuss.elastic.co/u/kk123)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 10:41am UTC](https://discuss.elastic.co/t/performance-what-is-faster-using-1-or-2-keyword-field-in-term-search/314185 "2022-09-12T10:41:29Z")
Hi, I have ILM based indices that have multiple keyword fields. I want query the data based on these terms. As it turns out, the two keyword fields have the following property... Keyword2 is unique across the all Keywo… --- ## [How to create sla query](https://discuss.elastic.co/t/how-to-create-sla-query/314184)
**Author:** [@Rain\_Water](https://discuss.elastic.co/u/Rain_Water)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 10:38am UTC](https://discuss.elastic.co/t/how-to-create-sla-query/314184 "2022-09-12T10:38:00Z")
Hi im very new to elasticsearch and Currently I am using ELK + Grafana stack i want to create a simple sla query and using the simple math formula to calculate percentage of sla. i have created the formula just dont kon… --- ## [Cluster\_health rule \[missing replica shards\] too much susceptible](https://discuss.elastic.co/t/cluster-health-rule-missing-replica-shards-too-much-susceptible/314183)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 10:35am UTC](https://discuss.elastic.co/t/cluster-health-rule-missing-replica-shards-too-much-susceptible/314183 "2022-09-12T10:35:11Z")
Hey there, I have a 7.17 ES cluster with the embedded infrastructure rules & alerts enabled and the usage of ILM for specific kind of indices. I have enabled the "Cluster\_health" rule and I saw that when my ILM policy … --- ## [Java Upgrade doesn't stop elasticsearch. Why?](https://discuss.elastic.co/t/java-upgrade-doesnt-stop-elasticsearch-why/314179)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 1\ **Last updated:** [September 12, 2022, 10:13am UTC](https://discuss.elastic.co/t/java-upgrade-doesnt-stop-elasticsearch-why/314179 "2022-09-12T10:13:19Z")
I am using external JDK on Oracle Linux 7.9. Elasticsearch service is up and running when I upgrade the java. Also, there are no entries in log. I am not sure about this behavior. Elasticsearch uses ES\_JAVA\_HOME=/usr/bi… --- ## [Does sorting by \_doc remain consistent during paging](https://discuss.elastic.co/t/does-sorting-by-doc-remain-consistent-during-paging/314178)
**Author:** [@daniel-kr](https://discuss.elastic.co/u/daniel-kr)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 9:48am UTC](https://discuss.elastic.co/t/does-sorting-by-doc-remain-consistent-during-paging/314178 "2022-09-12T09:48:08Z")
Hey, I want to page through my search results by using the parameters from and size (no scrolling or search after API with PIT involved). I don't care about the sort order of the whole result set. Therefore, I sort by \_… --- ## [Add client role to existing master node](https://discuss.elastic.co/t/add-client-role-to-existing-master-node/313666)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 4\ **Last updated:** [September 12, 2022, 9:19am UTC](https://discuss.elastic.co/t/add-client-role-to-existing-master-node/313666 "2022-09-12T09:19:08Z")
Hi Experts, I have 2 elasticsearch(7.16.2) monitoring cluster with 3 master + data eligible roles. I want enabling CCR between them, I am following document for doing this integration. CCR Link I have run the below c… --- ## [Benefit of Snapshot/Restore vs. raw data collection?](https://discuss.elastic.co/t/benefit-of-snapshot-restore-vs-raw-data-collection/314163)
**Author:** [@azeiner](https://discuss.elastic.co/u/azeiner)\ **Replies:** 4\ **Last updated:** [September 12, 2022, 8:28am UTC](https://discuss.elastic.co/t/benefit-of-snapshot-restore-vs-raw-data-collection/314163 "2022-09-12T08:28:18Z")
I've got a general question about datamanagement in elastic - we're running a couple of on-premise clusters and the data we produce are mostly from textfiles or are generated in various systems, collected in Redis from w… --- ## [Export Transactions](https://discuss.elastic.co/t/export-transactions/314113)
**Author:** [@ahmedakkaya](https://discuss.elastic.co/u/ahmedakkaya)\ **Replies:** 4\ **Last updated:** [September 12, 2022, 8:24am UTC](https://discuss.elastic.co/t/export-transactions/314113 "2022-09-12T08:24:13Z")
hello my original file; #!/bin/bash export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin if \[ -z "$1" \]; then ADAYAGO=\`date --date="1 day ago" +%Y-%m-%d\` else ADAYAGO="$1… --- ## [Best way to reindex text to keyword](https://discuss.elastic.co/t/best-way-to-reindex-text-to-keyword/314119)
**Author:** [@Mark\_S](https://discuss.elastic.co/u/Mark_S)\ **Replies:** 2\ **Last updated:** [September 12, 2022, 6:35am UTC](https://discuss.elastic.co/t/best-way-to-reindex-text-to-keyword/314119 "2022-09-12T06:35:20Z")
I want to re-index a text field to keyword. I have multiple indices (myindex-000001, myindex-000002, etc) In order to reindex I must: a) get the mapping b) create a new index mynewindex-000001 same field name but diffe… --- ## [How get the \_source data when the \_source is disabled?](https://discuss.elastic.co/t/how-get-the-source-data-when-the-source-is-disabled/314160)
**Author:** [@Sarthak\_Agarwal](https://discuss.elastic.co/u/Sarthak_Agarwal)\ **Replies:** 2\ **Last updated:** [September 12, 2022, 6:07am UTC](https://discuss.elastic.co/t/how-get-the-source-data-when-the-source-is-disabled/314160 "2022-09-12T06:07:47Z")
I have one index whose \_source is disabled. Now I want to migrate data from this index to a different elasticsearch cluster ? The issue is I only get metadata fields while searching. How can I retrieve and transfer \_sour… --- ## [ICU Analysis Plugin doesn't normalize some characters like other languages(PHP, Python)](https://discuss.elastic.co/t/icu-analysis-plugin-doesnt-normalize-some-characters-like-other-languages-php-python/314155)
**Author:** [@mictsai](https://discuss.elastic.co/u/mictsai)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 2:15am UTC](https://discuss.elastic.co/t/icu-analysis-plugin-doesnt-normalize-some-characters-like-other-languages-php-python/314155 "2022-09-12T02:15:43Z")
Elasticsearch version: 7.10.1 Installed plugins: \[analysis-icu, analysis-kuromoji, analysis-nori\] 그래비티 and 그래비티 looks the same. When encoding to URL, 그래비티 is %EA%B7%B8%EB%9E%98%EB%B9%84%ED%8B%B0%20 and 그래비티 is … --- ## [Can we have 800 synonym in single synonym.txt file](https://discuss.elastic.co/t/can-we-have-800-synonym-in-single-synonym-txt-file/314150)
**Author:** [@pavithra\_arul](https://discuss.elastic.co/u/pavithra_arul)\ **Replies:** 1\ **Last updated:** [September 12, 2022, 1:52am UTC](https://discuss.elastic.co/t/can-we-have-800-synonym-in-single-synonym-txt-file/314150 "2022-09-12T01:52:34Z")
Hi Team, Need help Urgent ! I'm trying to add 800 synonym via synonym.txt file in elasticsearch. file got uploaded to server but results are not getting fetched. PFB for the seetings and mapping PUT synonym\_sample\_upd… --- ## [Scripts for fix unassigned shards](https://discuss.elastic.co/t/scripts-for-fix-unassigned-shards/314019)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 6\ **Last updated:** [September 12, 2022, 1:20am UTC](https://discuss.elastic.co/t/scripts-for-fix-unassigned-shards/314019 "2022-09-12T01:20:30Z")
Hello Can You point me out what's wrong in below short script #!/bin/bash NODE="es\_data\_1" IFS=$'\\n' for line in $(curl -u elastic:pass 'http://10.220.111.200:9200/\_cat/shards' | fgrep UNASSIGNED); do INDEX=$(echo $l… --- ## [How can we provide and configure our own certificate which is in .crt ( base64 ) format](https://discuss.elastic.co/t/how-can-we-provide-and-configure-our-own-certificate-which-is-in-crt-base64-format/314073)
**Author:** [@nikhil\_earni](https://discuss.elastic.co/u/nikhil_earni)\ **Replies:** 1\ **Last updated:** [September 11, 2022, 11:53pm UTC](https://discuss.elastic.co/t/how-can-we-provide-and-configure-our-own-certificate-which-is-in-crt-base64-format/314073 "2022-09-11T23:53:57Z")
I am building the Elasticsearch from scratch. I changed the passkey using the below lines.... /bin/elasticsearch-keystore add xpack.security.http.ssl.keystore.secure\_password /bin/elasticsearch-keystore add xpack.secu… --- ## [Calcul producing a negative result](https://discuss.elastic.co/t/calcul-producing-a-negative-result/314141)
**Author:** [@hnf](https://discuss.elastic.co/u/hnf)\ **Replies:** 3\ **Last updated:** [September 11, 2022, 11:47pm UTC](https://discuss.elastic.co/t/calcul-producing-a-negative-result/314141 "2022-09-11T23:47:43Z")
Hello Everyone. I'm facing to a negative value while calculting a value from a field. After creating the index, I add a new field using the path Data Views -\> "index\_name" in Kibana and set value for this new field lik… --- ## [Disable adding match\_field when enriching data in ingest pipeline?](https://discuss.elastic.co/t/disable-adding-match-field-when-enriching-data-in-ingest-pipeline/314132)
**Author:** [@lubosvr](https://discuss.elastic.co/u/lubosvr)\ **Replies:** 1\ **Last updated:** [September 11, 2022, 3:06pm UTC](https://discuss.elastic.co/t/disable-adding-match-field-when-enriching-data-in-ingest-pipeline/314132 "2022-09-11T15:06:50Z")
I'm trying to use reindex with help of ingest pipeline to enrich my data. I have problem with enrich processor. I have created this policy PUT /\_enrich/policy/ingest-policy { "match": { "indices": "ingest\_two", … --- ## [Query to return documents with id not in a list](https://discuss.elastic.co/t/query-to-return-documents-with-id-not-in-a-list/314114)
**Author:** [@Ivo\_Tavares](https://discuss.elastic.co/u/Ivo_Tavares)\ **Replies:** 0\ **Last updated:** [September 10, 2022, 2:15pm UTC](https://discuss.elastic.co/t/query-to-return-documents-with-id-not-in-a-list/314114 "2022-09-10T14:15:28Z")
I'm trying to create a query, but I don't want the query to return documents which have already been fetched in a previous query. Here's the JSON {'query': {'bool': {'filter': \[{'term': {'tag': 'name'}}, {'bool': {… --- ## [INSTALL ELASTALERT in ubuntu 22.04](https://discuss.elastic.co/t/install-elastalert-in-ubuntu-22-04/314110)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 1\ **Last updated:** [September 10, 2022, 12:14pm UTC](https://discuss.elastic.co/t/install-elastalert-in-ubuntu-22-04/314110 "2022-09-10T12:14:34Z")
How to install INSTALL ELASTALERT in ubuntu 22.04 ? i will just use this cmd : sudo apt install elastalert or i will install also python3 and .... --- ## [Indexing html as raw content](https://discuss.elastic.co/t/indexing-html-as-raw-content/313990)
**Author:** [@pcyber](https://discuss.elastic.co/u/pcyber)\ **Replies:** 2\ **Last updated:** [September 10, 2022, 10:28am UTC](https://discuss.elastic.co/t/indexing-html-as-raw-content/313990 "2022-09-10T10:28:45Z")
hi folks, i´m realy new to Elasticsearch and trying to use it for my project. what i want to to in simple form: get html source from website with python push the source to Elasticsearch make it searchable so i´m get… --- ## [Can you filter on top ranked inner nested hit in same query](https://discuss.elastic.co/t/can-you-filter-on-top-ranked-inner-nested-hit-in-same-query/314085)
**Author:** [@chimauwah](https://discuss.elastic.co/u/chimauwah)\ **Replies:** 0\ **Last updated:** [September 9, 2022, 7:35pm UTC](https://discuss.elastic.co/t/can-you-filter-on-top-ranked-inner-nested-hit-in-same-query/314085 "2022-09-09T19:35:13Z")
Cheers all! Let's say I have a mapping with a nested object like this: { "APP\_APPLICATION\_ID": { "type": "long" }, "APP\_FNAME": { "type": "text", "fields": { "raw": { "type": "keyword" … --- ## [Parameters in some files not exposed?](https://discuss.elastic.co/t/parameters-in-some-files-not-exposed/313482)
**Author:** [@jmlucjav](https://discuss.elastic.co/u/jmlucjav)\ **Replies:** 4\ **Last updated:** [September 9, 2022, 6:13pm UTC](https://discuss.elastic.co/t/parameters-in-some-files-not-exposed/313482 "2022-09-09T18:13:52Z")
Hi, I am trying to use -track-params. My track is typical: { "version": 2, "description": "Tracker-generated track for track", "indices": \[ { "name": "{{p\_target\_index}}", "body": "{{… --- ## [Performance degradation in 7.16.3 when compared to 5.6.9](https://discuss.elastic.co/t/performance-degradation-in-7-16-3-when-compared-to-5-6-9/314070)
**Author:** [@chaitu0292](https://discuss.elastic.co/u/chaitu0292)\ **Replies:** 0\ **Last updated:** [September 9, 2022, 3:08pm UTC](https://discuss.elastic.co/t/performance-degradation-in-7-16-3-when-compared-to-5-6-9/314070 "2022-09-09T15:08:42Z")
Observed performance degradation in 7.16.3 when compared to 5.6.9 Run ES\_version AVG(ms) Max(ms) 1 7.16.3 294 913 2 7.16.3 434 1038 1 5.6.9 83 619 2 5.6.9 107 … --- ## [\_bulk\_create / index-pattern / saved object name](https://discuss.elastic.co/t/bulk-create-index-pattern-saved-object-name/314066)
**Author:** [@orcema](https://discuss.elastic.co/u/orcema)\ **Replies:** 0\ **Last updated:** [September 9, 2022, 2:31pm UTC](https://discuss.elastic.co/t/bulk-create-index-pattern-saved-object-name/314066 "2022-09-09T14:31:57Z")
According to \_bulk\_create example here i have to specify an id and a title as an attribute. The created object has as name and index-pattern the value of the title from the request. How can i setup a different n… --- ## [Question about email notification alert](https://discuss.elastic.co/t/question-about-email-notification-alert/314044)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 8\ **Last updated:** [September 9, 2022, 2:30pm UTC](https://discuss.elastic.co/t/question-about-email-notification-alert/314044 "2022-09-09T14:30:53Z")
does elasticsearch SIEM email notification alert is free in the current version of elastic stack 8.4.1 ?? I heard that this tool is gold or somethinglike that i don't know more about it. or i will use elasticalert? --- ## [Refer highlight fields in webhook message](https://discuss.elastic.co/t/refer-highlight-fields-in-webhook-message/314049)
**Author:** [@Ananya\_Chowdhury](https://discuss.elastic.co/u/Ananya_Chowdhury)\ **Replies:** 0\ **Last updated:** [September 9, 2022, 10:28am UTC](https://discuss.elastic.co/t/refer-highlight-fields-in-webhook-message/314049 "2022-09-09T10:28:43Z")
In my elastic query where i have highlight fields as shortmessage to custom the length of short message and i want to refere that in webhook message. But when i am referring under contexthits as highlight.short\_message i… --- ## [Elasticsearch script weak at handle string change while use for loop?](https://discuss.elastic.co/t/elasticsearch-script-weak-at-handle-string-change-while-use-for-loop/313936)
**Author:** [@robocon20x](https://discuss.elastic.co/u/robocon20x)\ **Replies:** 4\ **Last updated:** [September 9, 2022, 10:26am UTC](https://discuss.elastic.co/t/elasticsearch-script-weak-at-handle-string-change-while-use-for-loop/313936 "2022-09-09T10:26:19Z")
Elasticsearch really weak at handle string change. i have a script like this def newSegment; if(params.data !=null){ for (entry in params.data.entrySet()){ if (entry.getValue() != null) { ctx.\_source\[entry.g… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=375) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=377)