# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=410 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 411 --- ## [How do I check if field contains certain string?](https://discuss.elastic.co/t/how-do-i-check-if-field-contains-certain-string/309148)
**Author:** [@DataStorageMuse](https://discuss.elastic.co/u/DataStorageMuse)\ **Replies:** 4\ **Last updated:** [July 7, 2022, 9:23pm UTC](https://discuss.elastic.co/t/how-do-i-check-if-field-contains-certain-string/309148 "2022-07-07T21:23:21Z")
How do I query an index to return documents where a field contains only a certain string (analagous to SQL contains). This is the corresponding SQL query I would like to do in ElasticSearch. SELECT \* FROM table WHERE CON… --- ## [Java client hangs](https://discuss.elastic.co/t/java-client-hangs/309152)
**Author:** [@John16](https://discuss.elastic.co/u/John16)\ **Replies:** 2\ **Last updated:** [July 7, 2022, 8:04pm UTC](https://discuss.elastic.co/t/java-client-hangs/309152 "2022-07-07T20:04:21Z")
Hello! I am writing a Java program to work with Elasticsearch server. My Java client version is 7.17.4, server version is 7.17.0. Consider the following code: RestClient restClient = RestClient.builder(new HttpHost("… --- ## [Question about EQL capabilities](https://discuss.elastic.co/t/question-about-eql-capabilities/309147)
**Author:** [@nicole.oresme](https://discuss.elastic.co/u/nicole.oresme)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 7:14pm UTC](https://discuss.elastic.co/t/question-about-eql-capabilities/309147 "2022-07-07T19:14:21Z")
I'm evaluating EQL for use in some sequence analysis software we are working on. I'm having trouble figuring out two things: (1) it seems order is always fixed in sequence queries. Is this correct? Can I, for instance,… --- ## [SecurityNetty4HttpServerTransport received plaintext http traffic on an https channel](https://discuss.elastic.co/t/securitynetty4httpservertransport-received-plaintext-http-traffic-on-an-https-channel/309137)
**Author:** [@Sameer\_Malik](https://discuss.elastic.co/u/Sameer_Malik)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 6:11pm UTC](https://discuss.elastic.co/t/securitynetty4httpservertransport-received-plaintext-http-traffic-on-an-https-channel/309137 "2022-07-07T18:11:30Z")
Hello everyone! I'm quite new to Elasticsearch and networks. I just managed to install elasticsearch on an external disk, and it seemed to install just fine ✅ Elasticsearch security features have been automatically co… --- ## [Unable to Configure SLM](https://discuss.elastic.co/t/unable-to-configure-slm/309132)
**Author:** [@Mnchstrcityblues79](https://discuss.elastic.co/u/Mnchstrcityblues79)\ **Replies:** 4\ **Last updated:** [July 7, 2022, 6:05pm UTC](https://discuss.elastic.co/t/unable-to-configure-slm/309132 "2022-07-07T18:05:38Z")
Greetings. I run the Graylog Open edition that uses ElasticSearch under the hood. Unfortunately, the archive feature is behind a paywall. Nonetheless, I need to backup my data and snapshots are the best way. I have be… --- ## [Snapshot deletion is in-progress](https://discuss.elastic.co/t/snapshot-deletion-is-in-progress/309122)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 1:52pm UTC](https://discuss.elastic.co/t/snapshot-deletion-is-in-progress/309122 "2022-07-07T13:52:14Z")
Hello World! I'm trying to delete-snapshot by following: Create a snapshot | Elasticsearch Guide \[7.17\] | Elastic, yet per GET /\_cat/tasks, this task is STILL running (it's been over 18+ hours now) GET /\_tasks/mUxakOw… --- ## [Change existing field to nested field in index mappinfg](https://discuss.elastic.co/t/change-existing-field-to-nested-field-in-index-mappinfg/309090)
**Author:** [@anand\_tripathi](https://discuss.elastic.co/u/anand_tripathi)\ **Replies:** 1\ **Last updated:** [July 7, 2022, 2:10pm UTC](https://discuss.elastic.co/t/change-existing-field-to-nested-field-in-index-mappinfg/309090 "2022-07-07T14:10:30Z")
Hi Everyone, I have an existing index with the mapping below { "family": { "mappings": { "properties": { "@timestamp": { "type": "date" }, "@version": { "type": "… --- ## [Which prometheus metric will give information about snapshot backups](https://discuss.elastic.co/t/which-prometheus-metric-will-give-information-about-snapshot-backups/309117)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 1:07pm UTC](https://discuss.elastic.co/t/which-prometheus-metric-will-give-information-about-snapshot-backups/309117 "2022-07-07T13:07:24Z")
Hi Team, Could some help me is there any promethesu metric which will give information about elastic snapshot backups. As i am using elasticsearch exporter and sending the data to prometheus Thanks, --- ## [How to get values from a bucket using the key(s) of that bucket instead of the index - elasticsearch bucket aggregation - watcher?](https://discuss.elastic.co/t/how-to-get-values-from-a-bucket-using-the-key-s-of-that-bucket-instead-of-the-index-elasticsearch-bucket-aggregation-watcher/309107)
**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 11:54am UTC](https://discuss.elastic.co/t/how-to-get-values-from-a-bucket-using-the-key-s-of-that-bucket-instead-of-the-index-elasticsearch-bucket-aggregation-watcher/309107 "2022-07-07T11:54:19Z")
Hi team, I have the below aggregation search query. "aggregations" : { "test\_groups" : { "doc\_count\_error\_upper\_bound" : 0, "sum\_other\_doc\_count" : 0, "buckets" : \[ { "key" : "… --- ## [ElasticSearch Grok Filter](https://discuss.elastic.co/t/elasticsearch-grok-filter/308295)
**Author:** [@HKN\_MZ](https://discuss.elastic.co/u/HKN_MZ)\ **Replies:** 4\ **Last updated:** [July 7, 2022, 11:10am UTC](https://discuss.elastic.co/t/elasticsearch-grok-filter/308295 "2022-07-07T11:10:03Z")
Hi Everyone, I try to apply grok filter for my logs. As you see I am getting some of them. But I don't get first.jobId=0 or first.applicationname=POLY2 How can I get these fields? --- ## [Issue in extracting all available data in index in elastic using python library elasticsearch](https://discuss.elastic.co/t/issue-in-extracting-all-available-data-in-index-in-elastic-using-python-library-elasticsearch/308470)
**Author:** [@aniketdatir](https://discuss.elastic.co/u/aniketdatir)\ **Replies:** 5\ **Last updated:** [July 7, 2022, 10:56am UTC](https://discuss.elastic.co/t/issue-in-extracting-all-available-data-in-index-in-elastic-using-python-library-elasticsearch/308470 "2022-07-07T10:56:10Z")
Hi, I am facing below issue. I want to extract full dump that is all available documents from index "X" using python code and save it to json file. But currently M able to extract few documents only using below command.… --- ## [Index Rollover not working after reaching maxday](https://discuss.elastic.co/t/index-rollover-not-working-after-reaching-maxday/309066)
**Author:** [@jacky7788](https://discuss.elastic.co/u/jacky7788)\ **Replies:** 7\ **Last updated:** [July 7, 2022, 10:22am UTC](https://discuss.elastic.co/t/index-rollover-not-working-after-reaching-maxday/309066 "2022-07-07T10:22:18Z")
Not able to rollover after 1 day I have set parse\_origination\_date to true the index is like access-log-appname-2022.07.06-000001 { "policy":{ "phases":{ "hot":{ "min\_age":"0ms", "actions… --- ## [Elastalert create index error](https://discuss.elastic.co/t/elastalert-create-index-error/308947)
**Author:** [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\ **Replies:** 1\ **Last updated:** [July 7, 2022, 9:31am UTC](https://discuss.elastic.co/t/elastalert-create-index-error/308947 "2022-07-07T09:31:16Z")
I have instaled elasticsearch kibana elastalert, when i try to run elastalert-create-index command i am facing this issue. should i run the command from an particular directory ? C:\\Windows\\system32\>elastalert-create-i… --- ## [Search Api doesn't give result of analytics clicks](https://discuss.elastic.co/t/search-api-doesnt-give-result-of-analytics-clicks/309089)
**Author:** [@bilal.shahid](https://discuss.elastic.co/u/bilal.shahid)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 8:55am UTC](https://discuss.elastic.co/t/search-api-doesnt-give-result-of-analytics-clicks/309089 "2022-07-07T08:55:05Z")
I have a table of Search Terms in Analytics of ElasticSearch with the columns of document\_ids of their products, Analytics tags, and clicks. I am searching the query on Postman using Search API of Elasticsearch to get th… --- ## [How to get index rollover last digit](https://discuss.elastic.co/t/how-to-get-index-rollover-last-digit/309010)
**Author:** [@Robina\_Dhingra1](https://discuss.elastic.co/u/Robina_Dhingra1)\ **Replies:** 10\ **Last updated:** [July 7, 2022, 8:47am UTC](https://discuss.elastic.co/t/how-to-get-index-rollover-last-digit/309010 "2022-07-07T08:47:24Z")
Hello team ES, In our project, we have a datename index. Index is using a policy that rolls over daily. Sometimes, we might need to update documents in rolled over indices. For that we have a pipeline, that figures out… --- ## [Transform exception stop and expect auto restart](https://discuss.elastic.co/t/transform-exception-stop-and-expect-auto-restart/309069)
**Author:** [@yitiao\_feiyu](https://discuss.elastic.co/u/yitiao_feiyu)\ **Replies:** 1\ **Last updated:** [July 7, 2022, 8:27am UTC](https://discuss.elastic.co/t/transform-exception-stop-and-expect-auto-restart/309069 "2022-07-07T08:27:18Z")
I use transform to filter and move index data. the transforom task run smoothly in nomal status. but in some case, I try to change the index setting e.g. set "number\_of\_replicas" : 0, the transtorm got exception and sto… --- ## [Docker fleet server binding error](https://discuss.elastic.co/t/docker-fleet-server-binding-error/309086)
**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 7:58am UTC](https://discuss.elastic.co/t/docker-fleet-server-binding-error/309086 "2022-07-07T07:58:53Z")
Hi, I am using containerized fleet server on another machine and getting the following error. \[elastic\_agent\]\[error\] 2022-07-07T07:24:31Z - message: Application: fleet-server--8.3.0\[68af02f0-da42-4b33-b6e0-5264fcf0d72e… --- ## [Can search\_as\_you\_type field show the prefix match results firstly](https://discuss.elastic.co/t/can-search-as-you-type-field-show-the-prefix-match-results-firstly/309083)
**Author:** [@zhengpq](https://discuss.elastic.co/u/zhengpq)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 7:29am UTC](https://discuss.elastic.co/t/can-search-as-you-type-field-show-the-prefix-match-results-firstly/309083 "2022-07-07T07:29:47Z")
i am using the search\_as\_you\_type to auto complete, it is good, but i find the result is sorted by the score, now i need the prefix match results to come firstly, look the example blow: POST page-new/\_search { "\_sour… --- ## [How to send multiple email attachments to multiple recipients from single watcher](https://discuss.elastic.co/t/how-to-send-multiple-email-attachments-to-multiple-recipients-from-single-watcher/309009)
**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\ **Replies:** 1\ **Last updated:** [July 7, 2022, 7:07am UTC](https://discuss.elastic.co/t/how-to-send-multiple-email-attachments-to-multiple-recipients-from-single-watcher/309009 "2022-07-07T07:07:06Z")
Hi, The objective is to send multiple email attachments to multiple groups of recipients from a single watcher script. I want to achieve the below but getting error. "actions": { "email\_admin": { "email": {… --- ## [Edge-ngram not working for single edge case!](https://discuss.elastic.co/t/edge-ngram-not-working-for-single-edge-case/309059)
**Author:** [@corndog](https://discuss.elastic.co/u/corndog)\ **Replies:** 1\ **Last updated:** [July 7, 2022, 7:06am UTC](https://discuss.elastic.co/t/edge-ngram-not-working-for-single-edge-case/309059 "2022-07-07T07:06:49Z")
My edge-ngram solution does not return any results for the following search: "10th A" Where 3 documents exist with the field values: "10th Avenue, Red Beach, New Zealand", "4 10th Avenue, Red Beach, New Zealand", … --- ## [Sorting on nested field and then apply aggregation](https://discuss.elastic.co/t/sorting-on-nested-field-and-then-apply-aggregation/309078)
**Author:** [@aryamansingh888](https://discuss.elastic.co/u/aryamansingh888)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 6:34am UTC](https://discuss.elastic.co/t/sorting-on-nested-field-and-then-apply-aggregation/309078 "2022-07-07T06:34:19Z")
"visitor\_data": \[ { "end\_date": "2021-06-08", "pre\_status": "1", "evisitor": true, "edition\_id": "644659", "flag": "1", "event\_functionality": "o… --- ## [Create simulated data for ingestion using Rally](https://discuss.elastic.co/t/create-simulated-data-for-ingestion-using-rally/308392)
**Author:** [@lance.zukel](https://discuss.elastic.co/u/lance.zukel)\ **Replies:** 8\ **Last updated:** [July 7, 2022, 3:14am UTC](https://discuss.elastic.co/t/create-simulated-data-for-ingestion-using-rally/308392 "2022-07-07T03:14:53Z")
I would like to be able to perform the following: Have a sample templated document for ingestion Have a custom class that randomizes data to be inserted into the templated document Be able to specify the number of docu… --- ## [Node Not Showing in Kibana](https://discuss.elastic.co/t/node-not-showing-in-kibana/309027)
**Author:** [@bkamiche](https://discuss.elastic.co/u/bkamiche)\ **Replies:** 1\ **Last updated:** [July 7, 2022, 2:04am UTC](https://discuss.elastic.co/t/node-not-showing-in-kibana/309027 "2022-07-07T02:04:50Z")
I have a 9 node Cluster (6 data and 3 Masters), with version 7.15.5 (all on Intel platform), the cluster works fine. I've added a new data node, with the same version but in ARM, the node has been recognized by the clus… --- ## [Block 32844 not found](https://discuss.elastic.co/t/block-32844-not-found/308873)
**Author:** [@zhilong](https://discuss.elastic.co/u/zhilong)\ **Replies:** 5\ **Last updated:** [July 7, 2022, 1:41am UTC](https://discuss.elastic.co/t/block-32844-not-found/308873 "2022-07-07T01:41:31Z")
This category relates to the Enterprise Search set of products - App Search, Site Search and Workplace Search. If your question relates to core Elasticsearch functionality, please head over to the #elastic-stack:elastic… --- ## [Error deserializing Phrase Suggester - Java API Client](https://discuss.elastic.co/t/error-deserializing-phrase-suggester-java-api-client/309058)
**Author:** [@RabBit\_BR](https://discuss.elastic.co/u/RabBit_BR)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 12:17am UTC](https://discuss.elastic.co/t/error-deserializing-phrase-suggester-java-api-client/309058 "2022-07-07T00:17:01Z")
Hi everyone. I'm implementing the Phrase Suggester in the Java API Client, the error below occurs: \[Request processing failed; nested exception is co.elastic.clients.json.JsonpMappingException: Error deserializing co.e… --- ## [Java API update index](https://discuss.elastic.co/t/java-api-update-index/308928)
**Author:** [@Dorian](https://discuss.elastic.co/u/Dorian)\ **Replies:** 2\ **Last updated:** [July 6, 2022, 9:18pm UTC](https://discuss.elastic.co/t/java-api-update-index/308928 "2022-07-06T21:18:43Z")
HI everyone, I want to add a new field to a document already indexed. I find this in the documentation: curl -X POST "localhost:9200/home2/\_update/Y\_vIvoEB3cv\_8tuHzt7j?pretty" -H 'Content-Type: application/json' -d' { … --- ## [How can I change my query from \_msearch to \_search using the bucket aggregation?](https://discuss.elastic.co/t/how-can-i-change-my-query-from-msearch-to-search-using-the-bucket-aggregation/309018)
**Author:** [@V\_o](https://discuss.elastic.co/u/V_o)\ **Replies:** 2\ **Last updated:** [July 6, 2022, 7:58pm UTC](https://discuss.elastic.co/t/how-can-i-change-my-query-from-msearch-to-search-using-the-bucket-aggregation/309018 "2022-07-06T19:58:37Z")
Hello, I am new to Elasticsearch. Does anybody have an idea on how to change this query from an currently \_msearch query to an \_search query? It would also be convenient if I didn't have to make a separate query for ev… --- ## [Install elasticsearch plugin in elk docker container with 'elasticsearch-plugins.yml'](https://discuss.elastic.co/t/install-elasticsearch-plugin-in-elk-docker-container-with-elasticsearch-plugins-yml/309039)
**Author:** [@ksuess](https://discuss.elastic.co/u/ksuess)\ **Replies:** 0\ **Last updated:** [July 6, 2022, 6:00pm UTC](https://discuss.elastic.co/t/install-elasticsearch-plugin-in-elk-docker-container-with-elasticsearch-plugins-yml/309039 "2022-07-06T18:00:55Z")
How do I install an elasticsearch plugin like 'ingest-attachment' in an elk docker container? The use of a configuration file like 'elasticsearch-plugins.yml' would be nice. But other suggestions are welcome. Maybe an e… --- ## [Broken ES 5.5.1 RPM](https://discuss.elastic.co/t/broken-es-5-5-1-rpm/309035)
**Author:** [@akasabov](https://discuss.elastic.co/u/akasabov)\ **Replies:** 0\ **Last updated:** [July 6, 2022, 4:50pm UTC](https://discuss.elastic.co/t/broken-es-5-5-1-rpm/309035 "2022-07-06T16:50:16Z")
\# dnf install --assumeyes https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.5.1.rpm Last metadata expiration check: 2:42:12 ago on Wed Jul 6 14:06:00 2022. elasticsearch-5.5.1.rpm … --- ## [ElasticSearch 8 not automatically setting up SSL](https://discuss.elastic.co/t/elasticsearch-8-not-automatically-setting-up-ssl/309020)
**Author:** [@sergio.passalacqua](https://discuss.elastic.co/u/sergio.passalacqua)\ **Replies:** 1\ **Last updated:** [July 6, 2022, 4:09pm UTC](https://discuss.elastic.co/t/elasticsearch-8-not-automatically-setting-up-ssl/309020 "2022-07-06T16:09:50Z")
Very odd...the first time I ran elasticsearch, at the end it showed me what I was expecting..the elastic user password, the encrollment token and cert fingerprint. I wanted to reinstall on a new machine, and no matter … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=409) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=411)