# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=394 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 395 --- ## [Range filter in should match query](https://discuss.elastic.co/t/range-filter-in-should-match-query/311435)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 3\ **Last updated:** [August 5, 2022, 1:41pm UTC](https://discuss.elastic.co/t/range-filter-in-should-match-query/311435 "2022-08-05T13:41:14Z")
Hi, let's say I have 3 documents, id=1, "text" = "my name is john", "date" = "2021" id=2, "text" = "my name is alice", "date" = "2017" id=3, "text" = "my name is steven", "date" = "2019" I want to find all documents th… --- ## [Geo\_distance agg results not consistent](https://discuss.elastic.co/t/geo-distance-agg-results-not-consistent/311453)
**Author:** [@drfreed](https://discuss.elastic.co/u/drfreed)\ **Replies:** 2\ **Last updated:** [August 5, 2022, 12:45pm UTC](https://discuss.elastic.co/t/geo-distance-agg-results-not-consistent/311453 "2022-08-05T12:45:31Z")
I was trying out the geo\_distance aggreation and received different results based on the order of the ranges specified. I was able to replicate this using the example in the geo\_distance aggregation documentation page. … --- ## [FS Crawler - Issue with OCR](https://discuss.elastic.co/t/fs-crawler-issue-with-ocr/311409)
**Author:** [@Julien70](https://discuss.elastic.co/u/Julien70)\ **Replies:** 6\ **Last updated:** [August 5, 2022, 12:12pm UTC](https://discuss.elastic.co/t/fs-crawler-issue-with-ocr/311409 "2022-08-05T12:12:11Z")
Hi everyone, I'm facing issue with FSCrawler and OCR: I have a small PDF datasets. Some are filled with "real" text and others with scanned text. When I activate the OCR module, I received this message: " \[I regret t… --- ## [How to optimize this agg search elasticsearch?](https://discuss.elastic.co/t/how-to-optimize-this-agg-search-elasticsearch/311521)
**Author:** [@robocon20x](https://discuss.elastic.co/u/robocon20x)\ **Replies:** 0\ **Last updated:** [August 5, 2022, 11:59am UTC](https://discuss.elastic.co/t/how-to-optimize-this-agg-search-elasticsearch/311521 "2022-08-05T11:59:37Z")
i have query dsl Elasticsearch with field data 'arr\_color' is an string "red\_blu\_black" and an agg script like this { "runtime\_mappings": {}, "size": 0, "query": { "bool": { … --- ## [I want the full match text comes first than their prefixes than their substrings results](https://discuss.elastic.co/t/i-want-the-full-match-text-comes-first-than-their-prefixes-than-their-substrings-results/311512)
**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\ **Replies:** 0\ **Last updated:** [August 5, 2022, 11:27am UTC](https://discuss.elastic.co/t/i-want-the-full-match-text-comes-first-than-their-prefixes-than-their-substrings-results/311512 "2022-08-05T11:27:50Z")
Suppose If I am searching for Rohan Roy, I want Rohan Roy matching results comes first then rohan , rohan chohan etc.... The query I have used : { "size": 1000, "query": { "bool": { "must": \[ { … --- ## [Highlight not working when adjacent entities](https://discuss.elastic.co/t/highlight-not-working-when-adjacent-entities/311507)
**Author:** [@almeidajava](https://discuss.elastic.co/u/almeidajava)\ **Replies:** 0\ **Last updated:** [August 5, 2022, 10:59am UTC](https://discuss.elastic.co/t/highlight-not-working-when-adjacent-entities/311507 "2022-08-05T10:59:36Z")
This happens when using mapper-annotated-text highlighter type: eg Query: { "query": { "ids": { "values": \[ "1" \] } }, "\_source": { "includes"… --- ## [Drupal ElasticSearch Connector](https://discuss.elastic.co/t/drupal-elasticsearch-connector/311505)
**Author:** [@betd-vramdoo](https://discuss.elastic.co/u/betd-vramdoo)\ **Replies:** 1\ **Last updated:** [August 5, 2022, 10:46am UTC](https://discuss.elastic.co/t/drupal-elasticsearch-connector/311505 "2022-08-05T10:46:15Z")
Hello there, I am currently working on a Drupal project with the search engine ElasticSearch 7.10, my team is using the Elasticsearch Connector | Drupal.org module to interface Drupal with ElasticSearch. Do you know if… --- ## [Elasticsearch Java api client get index mapping in a Map](https://discuss.elastic.co/t/elasticsearch-java-api-client-get-index-mapping-in-a-map/311461)
**Author:** [@ijaxahmed](https://discuss.elastic.co/u/ijaxahmed)\ **Replies:** 2\ **Last updated:** [August 5, 2022, 7:42am UTC](https://discuss.elastic.co/t/elasticsearch-java-api-client-get-index-mapping-in-a-map/311461 "2022-08-05T07:42:11Z")
I have two qestion 1- I want to get mapping of an Index in a map as "Map\", i successfully get the GetMappingResponse but from there not getting what to do in order to get mapping as a "Map\ **Author:** [@nicfr9](https://discuss.elastic.co/u/nicfr9)\ **Replies:** 0\ **Last updated:** [August 5, 2022, 10:32am UTC](https://discuss.elastic.co/t/elasticsearch-pipeline-doesnt-catch-paths/311501 "2022-08-05T10:32:49Z") i'm trying to catch the paths that contains a specified path like path/to/my/url/VARIABLEPART, in the pipeline condition i put ctx.url.path == 'path/to/my/url/\*' but unfortunately it takes only the logs that have path/to… --- ## [How to perform join between two indexes in ES?](https://discuss.elastic.co/t/how-to-perform-join-between-two-indexes-in-es/311078)
**Author:** [@Ritikapawar](https://discuss.elastic.co/u/Ritikapawar)\ **Replies:** 4\ **Last updated:** [August 5, 2022, 10:20am UTC](https://discuss.elastic.co/t/how-to-perform-join-between-two-indexes-in-es/311078 "2022-08-05T10:20:26Z")
I have two indexes as Student1.csv and lecture.csv sample student1.csv student\_id name Roll no 1 Amey 1 2 Neha 2 3 Shubham 3 4 Satish 4 5 Ritika 5 sample lecture.csv lec\_no lec student\_id 1 eng 1 1 eng 1 1 eng 3 1 … --- ## [Elastic Search matrix\_stats on both nested and non nested value](https://discuss.elastic.co/t/elastic-search-matrix-stats-on-both-nested-and-non-nested-value/311492)
**Author:** [@Mspprasath](https://discuss.elastic.co/u/Mspprasath)\ **Replies:** 0\ **Last updated:** [August 5, 2022, 8:53am UTC](https://discuss.elastic.co/t/elastic-search-matrix-stats-on-both-nested-and-non-nested-value/311492 "2022-08-05T08:53:48Z")
we have a doc structure \[{ score: 10, list: \[ // nested type { id : 3, value: 10 }, { id: 4 value: 20 }, { id: 5, value: 15 } \] }, { score: 1, list:… --- ## [Use terminate\_after and sort query can't get the latest data](https://discuss.elastic.co/t/use-terminate-after-and-sort-query-cant-get-the-latest-data/311490)
**Author:** [@Xavier\_Stuart](https://discuss.elastic.co/u/Xavier_Stuart)\ **Replies:** 0\ **Last updated:** [August 5, 2022, 8:24am UTC](https://discuss.elastic.co/t/use-terminate-after-and-sort-query-cant-get-the-latest-data/311490 "2022-08-05T08:24:55Z")
Why can't I find the latest data when I add terminated\_after when sorting by creation time, the query statement is as follows GET index-1/\_search { "from": 0, "size": 20, "terminate\_after": 1111112, "query": { … --- ## [Transport and syncing data in ES](https://discuss.elastic.co/t/transport-and-syncing-data-in-es/311302)
**Author:** [@vnovotny98](https://discuss.elastic.co/u/vnovotny98)\ **Replies:** 4\ **Last updated:** [August 5, 2022, 7:27am UTC](https://discuss.elastic.co/t/transport-and-syncing-data-in-es/311302 "2022-08-05T07:27:20Z")
Hello, I have two elasticsearch clusters. One for acceptance where are 3 nodes (each has data, ingest, master role) and one for production where are 9 nodes (3 master, 3 ingest + hot nodes and 3 warm nodes). I would lik… --- ## [I want to make new ssl certificate and key for elasticsearch](https://discuss.elastic.co/t/i-want-to-make-new-ssl-certificate-and-key-for-elasticsearch/311469)
**Author:** [@hellocomputer](https://discuss.elastic.co/u/hellocomputer)\ **Replies:** 1\ **Last updated:** [August 5, 2022, 6:30am UTC](https://discuss.elastic.co/t/i-want-to-make-new-ssl-certificate-and-key-for-elasticsearch/311469 "2022-08-05T06:30:05Z")
Hello. I use ubuntu 20.04 version (server) and elasticsearch 8.3.2 version. Then, I want to make new certification and key for ssl secure elasticsearch. It already set ssl key using 'http.p12'. But i didn't set this. I… --- ## [How to fetch data from multiple hostnames in es](https://discuss.elastic.co/t/how-to-fetch-data-from-multiple-hostnames-in-es/311414)
**Author:** [@Gojo](https://discuss.elastic.co/u/Gojo)\ **Replies:** 2\ **Last updated:** [August 5, 2022, 6:16am UTC](https://discuss.elastic.co/t/how-to-fetch-data-from-multiple-hostnames-in-es/311414 "2022-08-05T06:16:41Z")
hey all iam new to elk , iam trying to get all the hosts in the Elasticsearch db , i tried using a wildcard and "wild\_card": "hosts", "query": { "host.keyword": "test\*", "severity.keyword": "err" }, consider there are … --- ## [New Elasticsearch 8 Java API - Insert date time field](https://discuss.elastic.co/t/new-elasticsearch-8-java-api-insert-date-time-field/311351)
**Author:** [@zxuz111](https://discuss.elastic.co/u/zxuz111)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 9:10pm UTC](https://discuss.elastic.co/t/new-elasticsearch-8-java-api-insert-date-time-field/311351 "2022-08-04T21:10:46Z")
I am using the new Elasticsearch 8 Java client API to persist document that contains datetime field. Also, this is a spring boot application. The issue I got is, if I set a field as LocalDateTime, and try to save to Ela… --- ## [Create a field such that lookup is faster on that field](https://discuss.elastic.co/t/create-a-field-such-that-lookup-is-faster-on-that-field/311449)
**Author:** [@Aditya\_Verma2](https://discuss.elastic.co/u/Aditya_Verma2)\ **Replies:** 5\ **Last updated:** [August 4, 2022, 7:28pm UTC](https://discuss.elastic.co/t/create-a-field-such-that-lookup-is-faster-on-that-field/311449 "2022-08-04T19:28:02Z")
Is there any way i can keep a field and its mapping in memory or cached so that lookup on the basis of that field is faster even though there may be more than 1000 clauses specified for that field in search query. --- ## [ELK-functionbeat-not-able-to-push-data](https://discuss.elastic.co/t/elk-functionbeat-not-able-to-push-data/311333)
**Author:** [@sadik](https://discuss.elastic.co/u/sadik)\ **Replies:** 0\ **Last updated:** [August 3, 2022, 5:28pm UTC](https://discuss.elastic.co/t/elk-functionbeat-not-able-to-push-data/311333 "2022-08-03T17:28:15Z")
Hello Team, We are facing the below error in AWS function beat lambda. Cannot index event publisher.Event{Content:beat.Event More error details as below: Error: 2022-07-22T15:15:01.087Z WARN \[elasticsearch\] elasticse… --- ## [Highlighting using words from another field](https://discuss.elastic.co/t/highlighting-using-words-from-another-field/311444)
**Author:** [@stobyer](https://discuss.elastic.co/u/stobyer)\ **Replies:** 0\ **Last updated:** [August 4, 2022, 2:52pm UTC](https://discuss.elastic.co/t/highlighting-using-words-from-another-field/311444 "2022-08-04T14:52:12Z")
Hello, I'm trying to highlight text using words from other field. What do I mean? I have a documents similar to the following: { property: 1, content: "a lot of animals including cats and dogs", keywords: \["cat", "… --- ## [Enrich processor error: mapper\_parsing\_exception](https://discuss.elastic.co/t/enrich-processor-error-mapper-parsing-exception/311440)
**Author:** [@FKarraz](https://discuss.elastic.co/u/FKarraz)\ **Replies:** 0\ **Last updated:** [August 4, 2022, 2:38pm UTC](https://discuss.elastic.co/t/enrich-processor-error-mapper-parsing-exception/311440 "2022-08-04T14:38:46Z")
I'm trying to enrich data to my index called "time\_availability\_alarmed\_cells". The mapping for that index is: { "mappings": { "\_doc": { "properties": { "location": { "properties": { … --- ## [Getting Authentication Exception even CA cert is provided (python)](https://discuss.elastic.co/t/getting-authentication-exception-even-ca-cert-is-provided-python/311360)
**Author:** [@Brian\_Chan](https://discuss.elastic.co/u/Brian_Chan)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 1:50pm UTC](https://discuss.elastic.co/t/getting-authentication-exception-even-ca-cert-is-provided-python/311360 "2022-08-04T13:50:31Z")
Hi everyone, I have a self-managed elasticsearch 8.3.0 cluster with security enabled. When using python client, even I included the CA cert, I still get the error: AuthenticationException(401, 'security\_exception', 'mis… --- ## [New Elasticsearch 8 Java API - Sort by](https://discuss.elastic.co/t/new-elasticsearch-8-java-api-sort-by/311352)
**Author:** [@zxuz111](https://discuss.elastic.co/u/zxuz111)\ **Replies:** 4\ **Last updated:** [August 4, 2022, 1:33pm UTC](https://discuss.elastic.co/t/new-elasticsearch-8-java-api-sort-by/311352 "2022-08-04T13:33:28Z")
I am using the new Elasticsearch 8 Java client API to query data and sort by one field. esClient.search(s -\> { return s .index("employee") .query(q -\> q … --- ## [MUTIPULE VALUES SEARCH](https://discuss.elastic.co/t/mutipule-values-search/311422)
**Author:** [@shanker241](https://discuss.elastic.co/u/shanker241)\ **Replies:** 0\ **Last updated:** [August 4, 2022, 1:08pm UTC](https://discuss.elastic.co/t/mutipule-values-search/311422 "2022-08-04T13:08:11Z")
HI ALL, I Unable to search with mutipule values Please find the follwoing code its not working . function getRiskRegister(monthYear) { const client = new elasticsearch.Client({ host: elasticHost }); monthYear = 'Ma… --- ## [I cant acces Elasticsearch via Webrowser](https://discuss.elastic.co/t/i-cant-acces-elasticsearch-via-webrowser/311402)
**Author:** [@notaelasticsearcher](https://discuss.elastic.co/u/notaelasticsearcher)\ **Replies:** 4\ **Last updated:** [August 4, 2022, 12:44pm UTC](https://discuss.elastic.co/t/i-cant-acces-elasticsearch-via-webrowser/311402 "2022-08-04T12:44:47Z")
I use elasticsearch 8.3.3. When i type curl -X GET "localhost:9200" { "name" : "elkvm", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "P\_UJ2AcOSRmj3AWwMylLvQ", "version" : { "number" : "8.3.3", "bui… --- ## [Duplicate field.keyword and field in data stream within Observability](https://discuss.elastic.co/t/duplicate-field-keyword-and-field-in-data-stream-within-observability/311383)
**Author:** [@Mark\_Rodman](https://discuss.elastic.co/u/Mark_Rodman)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 12:44pm UTC](https://discuss.elastic.co/t/duplicate-field-keyword-and-field-in-data-stream-within-observability/311383 "2022-08-04T12:44:26Z")
Hi, I recently moved an existing configuration of Logstash indexing to a setup with Logstash using a data stream with component templates. As recommended the component template was broken down into two templates, one fo… --- ## [Rollover policy is not working](https://discuss.elastic.co/t/rollover-policy-is-not-working/311377)
**Author:** [@Ankit\_Grover](https://discuss.elastic.co/u/Ankit_Grover)\ **Replies:** 6\ **Last updated:** [August 4, 2022, 12:14pm UTC](https://discuss.elastic.co/t/rollover-policy-is-not-working/311377 "2022-08-04T12:14:50Z")
my rollover policy is not working after the condition fail of 2mb document size can anyone please help me. I am newbie in elk stack. Thanks --- ## [ThreatQuotient Integration needs updating](https://discuss.elastic.co/t/threatquotient-integration-needs-updating/311390)
**Author:** [@frederikvandeputte](https://discuss.elastic.co/u/frederikvandeputte)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 12:02pm UTC](https://discuss.elastic.co/t/threatquotient-integration-needs-updating/311390 "2022-08-04T12:02:50Z")
The current integration still requires the old means of authenticating with the TIP server using Oauth2 Client ID and Oauth2 Client Secret which need to be generated via CLI commands, while these days they have switched… --- ## [Failed to parse field](https://discuss.elastic.co/t/failed-to-parse-field/311392)
**Author:** [@Kevin\_Galarza](https://discuss.elastic.co/u/Kevin_Galarza)\ **Replies:** 2\ **Last updated:** [August 4, 2022, 11:13am UTC](https://discuss.elastic.co/t/failed-to-parse-field/311392 "2022-08-04T11:13:03Z")
--- ## [Could not find or load main class "-](https://discuss.elastic.co/t/could-not-find-or-load-main-class/311307)
**Author:** [@AULIA\_KHOIRUN\_NISA\_N](https://discuss.elastic.co/u/AULIA_KHOIRUN_NISA_N)\ **Replies:** 10\ **Last updated:** [August 4, 2022, 9:39am UTC](https://discuss.elastic.co/t/could-not-find-or-load-main-class/311307 "2022-08-04T09:39:04Z")
''' can anybody help me, cause I'm trying to start elasticsearch bu it did't work Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticsearch.service" and… --- ## [Custom Aggregations in ES](https://discuss.elastic.co/t/custom-aggregations-in-es/311385)
**Author:** [@vishnu\_teja](https://discuss.elastic.co/u/vishnu_teja)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 9:18am UTC](https://discuss.elastic.co/t/custom-aggregations-in-es/311385 "2022-08-04T09:18:31Z")
Hi, I would like to know, if we can have custom aggregations in ElasticSearch, For EX: we have a use-case where we need a function like any\_value(), it works like this: Say I have the following documents in my index: {… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=393) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=395)