# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=423 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 424 --- ## [Edge n-gram token filter : why "side" parameter is Deprecated?](https://discuss.elastic.co/t/edge-n-gram-token-filter-why-side-parameter-is-deprecated/307519)
**Author:** [@fraf](https://discuss.elastic.co/u/fraf)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 2:19pm UTC](https://discuss.elastic.co/t/edge-n-gram-token-filter-why-side-parameter-is-deprecated/307519 "2022-06-17T14:19:34Z")
Hi, I read in documentation, that for Edge n-gram token filter the side parameter is Deprecated. Why ? What is the equivalent then ? Thanks. --- ## [Elasticsearch machine learning datafeed configuration error](https://discuss.elastic.co/t/elasticsearch-machine-learning-datafeed-configuration-error/305484)
**Author:** [@zerojin63](https://discuss.elastic.co/u/zerojin63)\ **Replies:** 6\ **Last updated:** [June 17, 2022, 10:35am UTC](https://discuss.elastic.co/t/elasticsearch-machine-learning-datafeed-configuration-error/305484 "2022-06-17T10:35:31Z")
I'm trying to alter datafeed for ml jobs but the same errror keep occurs. What I want to do is alter data like 'abc/def/ghi' into 'abc' so based on this i wrote script as follows "runtime\_mappings": { "my\_runtime… --- ## [ILM Forcemerge Internal Server Error](https://discuss.elastic.co/t/ilm-forcemerge-internal-server-error/304603)
**Author:** [@Evesy](https://discuss.elastic.co/u/Evesy)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 10:23am UTC](https://discuss.elastic.co/t/ilm-forcemerge-internal-server-error/304603 "2022-06-17T10:23:25Z")
We have ILM enabled for our indices and a number of the larger indices will fail hours into the forcemerge action with errors similar to the below: { "type": "exception", "reason": "index \[prod-jaeger-span-2022-05-1… --- ## [Scaling elasticsearch](https://discuss.elastic.co/t/scaling-elasticsearch/306945)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 6\ **Last updated:** [June 17, 2022, 8:27am UTC](https://discuss.elastic.co/t/scaling-elasticsearch/306945 "2022-06-17T08:27:30Z")
Hello, My cluster is composed of 3 nodes (Master node, hot node and warm noeaud) i want to scal my cluster by adding a new elastic node which will be dedicated only for data replication. The replicas shard of all the c… --- ## [Rename field depending on its data type](https://discuss.elastic.co/t/rename-field-depending-on-its-data-type/307361)
**Author:** [@mmartinez](https://discuss.elastic.co/u/mmartinez)\ **Replies:** 2\ **Last updated:** [June 17, 2022, 7:49am UTC](https://discuss.elastic.co/t/rename-field-depending-on-its-data-type/307361 "2022-06-17T07:49:55Z")
Hi, We are currently having issues with the ingestion of some documents due to the data type for one field (log.context.exception). Most of the logs come with this field as an object and the mapping is prepared to store… --- ## [One node very high load average , why?](https://discuss.elastic.co/t/one-node-very-high-load-average-why/307236)
**Author:** [@letwen](https://discuss.elastic.co/u/letwen)\ **Replies:** 8\ **Last updated:** [June 17, 2022, 6:53am UTC](https://discuss.elastic.co/t/one-node-very-high-load-average-why/307236 "2022-06-17T06:53:01Z")
version6.8.0.one data node in cluster,16cpu 2.30GHz,48G memory,8G swap.have low cpu use,low memory use,but when i use top,can see very high 'load average',it be 40,sy high too,why ? --- ## [Ansible Setup](https://discuss.elastic.co/t/ansible-setup/307472)
**Author:** [@A\_j\_xx](https://discuss.elastic.co/u/A_j_xx)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 6:47am UTC](https://discuss.elastic.co/t/ansible-setup/307472 "2022-06-17T06:47:30Z")
Continuing the discussion from \[Set up Repository on multi-node Cluster via Ansible\] Hi all , Please have a look at this post (Set up Repository on multi-node Cluster via Ansible): Hi all, There are some doubts which… --- ## [Getting kibana logs in my java application](https://discuss.elastic.co/t/getting-kibana-logs-in-my-java-application/307444)
**Author:** [@shivam\_agrawal1](https://discuss.elastic.co/u/shivam_agrawal1)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 6:47am UTC](https://discuss.elastic.co/t/getting-kibana-logs-in-my-java-application/307444 "2022-06-17T06:47:02Z")
I am pushing multiple logs into Elasticsearch using filebeats and visualising them in kibana. Now, I want to get all these logs into my java application and make a slack bot for monitoring purposes. How can I get all tho… --- ## [Elastic Search query that matches all elements in nested document](https://discuss.elastic.co/t/elastic-search-query-that-matches-all-elements-in-nested-document/307395)
**Author:** [@Zedson.Sagar](https://discuss.elastic.co/u/Zedson.Sagar)\ **Replies:** 4\ **Last updated:** [June 17, 2022, 5:22am UTC](https://discuss.elastic.co/t/elastic-search-query-that-matches-all-elements-in-nested-document/307395 "2022-06-17T05:22:33Z")
I have an index with nested document structure as below - { "firstindex": { "mappings": { "properties": { "Name": { "type": "text" }, "SecurityCo… --- ## [Ingest data and. fetch data through groovy in the. URL https://testsearch-cca1f6.ent.us-central1.gcp.cloud.es.io](https://discuss.elastic.co/t/ingest-data-and-fetch-data-through-groovy-in-the-url-https-testsearch-cca1f6-ent-us-central1-gcp-cloud-es-io/307463)
**Author:** [@Pritam\_Thing](https://discuss.elastic.co/u/Pritam_Thing)\ **Replies:** 0\ **Last updated:** [June 17, 2022, 3:40am UTC](https://discuss.elastic.co/t/ingest-data-and-fetch-data-through-groovy-in-the-url-https-testsearch-cca1f6-ent-us-central1-gcp-cloud-es-io/307463 "2022-06-17T03:40:53Z")
Hey everyone, I want to ingest data dynamically though groovy and search through jquery . While i was testing the search api, I found some issue related to cors. Could someone help me out with the following code. … --- ## [Search on Multiple Indices](https://discuss.elastic.co/t/search-on-multiple-indices/307105)
**Author:** [@QuanMinhTran](https://discuss.elastic.co/u/QuanMinhTran)\ **Replies:** 4\ **Last updated:** [June 17, 2022, 3:31am UTC](https://discuss.elastic.co/t/search-on-multiple-indices/307105 "2022-06-17T03:31:05Z")
I doing a query to search for multiple indices on Elasticsearch. The problem here is the priority of the result doesn't follow what I think. For example, I have 2 indices: index\_1 and index\_2 In Index\_1 have ~80 docs, … --- ## [Changed node port - now it doesn't have shards, but storage is still used](https://discuss.elastic.co/t/changed-node-port-now-it-doesnt-have-shards-but-storage-is-still-used/307451)
**Author:** [@matiasgarciaisaia](https://discuss.elastic.co/u/matiasgarciaisaia)\ **Replies:** 0\ **Last updated:** [June 16, 2022, 8:40pm UTC](https://discuss.elastic.co/t/changed-node-port-now-it-doesnt-have-shards-but-storage-is-still-used/307451 "2022-06-16T20:40:08Z")
I've setup a 6-node Elasticsearch 7.17.0 cluster which has to serve a single read-only ~1TB index. The nodes have 2TB of storage, so I've set that index to be a single shard, with 5 replicas (so each node gets a full co… --- ## [Elasticsearch service won't start](https://discuss.elastic.co/t/elasticsearch-service-wont-start/307290)
**Author:** [@Lukasz1](https://discuss.elastic.co/u/Lukasz1)\ **Replies:** 4\ **Last updated:** [June 16, 2022, 8:45pm UTC](https://discuss.elastic.co/t/elasticsearch-service-wont-start/307290 "2022-06-16T20:45:42Z")
Elasticsearch (7.17.0) service won't start The config file is so simple that I can't find any error there. My config is: cluster.name: elkos node.name: elkos-1 path.data: /mnt/elasticsearch/data path.logs: /mnt/elast… --- ## [Unknown response error when running using \`\_disk\_usage\` api](https://discuss.elastic.co/t/unknown-response-error-when-running-using-disk-usage-api/307330)
**Author:** [@Ryan\_Morrison](https://discuss.elastic.co/u/Ryan_Morrison)\ **Replies:** 9\ **Last updated:** [June 16, 2022, 6:06pm UTC](https://discuss.elastic.co/t/unknown-response-error-when-running-using-disk-usage-api/307330 "2022-06-16T18:06:38Z")
I'm looking at utilizing the new \[\_disk\_usage\](https://www.elastic.co/guide/en/elasticsearch/reference/master/indices-disk-usage.html) api and doing so successfully in our staging environment. However, when running agai… --- ## [@timestamp to ISO (Europe/Madrid)](https://discuss.elastic.co/t/timestamp-to-iso-europe-madrid/307056)
**Author:** [@Jonathan\_Fernandez](https://discuss.elastic.co/u/Jonathan_Fernandez)\ **Replies:** 1\ **Last updated:** [June 16, 2022, 3:55pm UTC](https://discuss.elastic.co/t/timestamp-to-iso-europe-madrid/307056 "2022-06-16T15:55:41Z")
Hi everyone! So basically I have to parse my UTC timestamp in a set of Elasticsearch Watchers to ISO (Europe/Madrid). IMPORTANT: I cannot use Logstash, quite unsure that use an Ingest Node for this would be permitted, … --- ## [Can we do : Analyser-\>Tokenizer-\>Token Filter-\>Re-tokenize and considers only these last tokens](https://discuss.elastic.co/t/can-we-do-analyser-tokenizer-token-filter-re-tokenize-and-considers-only-these-last-tokens/307298)
**Author:** [@fraf](https://discuss.elastic.co/u/fraf)\ **Replies:** 7\ **Last updated:** [June 16, 2022, 2:36pm UTC](https://discuss.elastic.co/t/can-we-do-analyser-tokenizer-token-filter-re-tokenize-and-considers-only-these-last-tokens/307298 "2022-06-16T14:36:54Z")
Hello, I want, given the input text : { "analyzer": "parapheur\_shingle", "text": "W 4.8.4.1 NI FNA NP 4.8.4 TEST 2" } having fllowing steps : tokenize as standard (word break with spaces =\> 8 tokens) filter … --- ## [Sort based on a Python List (array) and this list is not stored in the Elastic search](https://discuss.elastic.co/t/sort-based-on-a-python-list-array-and-this-list-is-not-stored-in-the-elastic-search/306528)
**Author:** [@Kv\_Karthik](https://discuss.elastic.co/u/Kv_Karthik)\ **Replies:** 4\ **Last updated:** [June 16, 2022, 2:32pm UTC](https://discuss.elastic.co/t/sort-based-on-a-python-list-array-and-this-list-is-not-stored-in-the-elastic-search/306528 "2022-06-16T14:32:52Z")
I would like to sort the hits in my results in a specific order and this order can be made available from a Python list or a python dictionary. I already tried using the script fields like mentioned in Medium website( M… --- ## [Comparison between Elasticsearch version](https://discuss.elastic.co/t/comparison-between-elasticsearch-version/307212)
**Author:** [@Wan\_Nur\_Athirah\_Wan](https://discuss.elastic.co/u/Wan_Nur_Athirah_Wan)\ **Replies:** 4\ **Last updated:** [June 16, 2022, 1:42pm UTC](https://discuss.elastic.co/t/comparison-between-elasticsearch-version/307212 "2022-06-16T13:42:25Z")
Hai there. Do anyone knows how to do comparison or is there any document that shows or list all the changes between this version and other version. example for Elasticsearch version 7.3.1, what is the changes or what has… --- ## [Query to get results based on priority of fields](https://discuss.elastic.co/t/query-to-get-results-based-on-priority-of-fields/307214)
**Author:** [@dawood\_abdullah](https://discuss.elastic.co/u/dawood_abdullah)\ **Replies:** 8\ **Last updated:** [June 16, 2022, 1:31pm UTC](https://discuss.elastic.co/t/query-to-get-results-based-on-priority-of-fields/307214 "2022-06-16T13:31:16Z")
Hi, I have following mapping : \> PUT products \> { \> "mappings" : { \> "properties" : { \> "item\_name" : {"type" : "keyword"}, \> "catalog\_name" : {"type" : "keyword"}, \> "group" : {"type" : "keyword"}, \> "l… --- ## [\[WARNING\] No throughput metrics available for \[index-append\]. Likely cause: The benchmark ended already during warmup](https://discuss.elastic.co/t/warning-no-throughput-metrics-available-for-index-append-likely-cause-the-benchmark-ended-already-during-warmup/306935)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 9\ **Last updated:** [June 16, 2022, 11:11am UTC](https://discuss.elastic.co/t/warning-no-throughput-metrics-available-for-index-append-likely-cause-the-benchmark-ended-already-during-warmup/306935 "2022-06-16T11:11:16Z")
cluster is running on kubernetes NUMBER\_OF\_SHARDS=${NUMBER\_OF\_SHARDS:-10} NUMBER\_OF\_REPLICAS=${NUMBER\_OF\_REPLICAS:-0} INGEST\_PERCENTAGE=${INGEST\_PERCENTAGE:-100} BULK\_SIZE=${BULK\_SIZE:-5000} BULK\_INDEXING\_CLIENTS=${BULK… --- ## [LOG SOURCES](https://discuss.elastic.co/t/log-sources/307137)
**Author:** [@mkibani](https://discuss.elastic.co/u/mkibani)\ **Replies:** 2\ **Last updated:** [June 16, 2022, 11:06am UTC](https://discuss.elastic.co/t/log-sources/307137 "2022-06-16T11:06:38Z")
Hello, I'am fairly new to ELK STACK, and i'm wondering if there's way to list all of the log sources integrated with the STACK, i received bunch of logs from multiple security solutions and i would love to list all the … --- ## [Best way to contains search in elastic search](https://discuss.elastic.co/t/best-way-to-contains-search-in-elastic-search/307369)
**Author:** [@khasim\_vali\_dudekula](https://discuss.elastic.co/u/khasim_vali_dudekula)\ **Replies:** 1\ **Last updated:** [June 16, 2022, 11:01am UTC](https://discuss.elastic.co/t/best-way-to-contains-search-in-elastic-search/307369 "2022-06-16T11:01:36Z")
Hi, I am working on a use case which does contains search in logs data indexed in elastic server. the query is a case-insensitive one I am aware of match, match\_phrase and query string. But none of the seems to be wor… --- ## [ILM not working correctly or is stuck somewhere](https://discuss.elastic.co/t/ilm-not-working-correctly-or-is-stuck-somewhere/307387)
**Author:** [@Guncixx](https://discuss.elastic.co/u/Guncixx)\ **Replies:** 0\ **Last updated:** [June 16, 2022, 10:47am UTC](https://discuss.elastic.co/t/ilm-not-working-correctly-or-is-stuck-somewhere/307387 "2022-06-16T10:47:29Z")
We have some problem with ILM not working as intended, at least it seems like that. We have added cold node to the cluster and I have set up policy logs to default levels - 50Gb or 30days, as our hot instance allows tha… --- ## [How to use search-ui Conditional Facets](https://discuss.elastic.co/t/how-to-use-search-ui-conditional-facets/307386)
**Author:** [@fkvivid](https://discuss.elastic.co/u/fkvivid)\ **Replies:** 0\ **Last updated:** [June 16, 2022, 10:44am UTC](https://discuss.elastic.co/t/how-to-use-search-ui-conditional-facets/307386 "2022-06-16T10:44:29Z")
How to use Conditional Facets in my App-search I read the example github elastic docs but not working any help :pray: Target: if choose California of states Then show conditional Facet Here is a national park example … --- ## [Collapse in In-group and out-of-group sorting problem](https://discuss.elastic.co/t/collapse-in-in-group-and-out-of-group-sorting-problem/307378)
**Author:** [@EaChou](https://discuss.elastic.co/u/EaChou)\ **Replies:** 0\ **Last updated:** [June 16, 2022, 10:01am UTC](https://discuss.elastic.co/t/collapse-in-in-group-and-out-of-group-sorting-problem/307378 "2022-06-16T10:01:57Z")
I want to group by a certain field, take only one of each group, and then sort by this document outside the group I used collapse to group and deduplicate, but after deduplication, it is not the first result after sorti… --- ## [Retention policy for Transform's index](https://discuss.elastic.co/t/retention-policy-for-transforms-index/306767)
**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\ **Replies:** 1\ **Last updated:** [June 16, 2022, 9:11am UTC](https://discuss.elastic.co/t/retention-policy-for-transforms-index/306767 "2022-06-16T09:11:19Z")
Hi, If I set a retention policy on a Transform, like 7 days, the whole index will be deleted after 7 days. How can I set up something like "delete the data older than 7 days, and keep the rest alive"? Thanks! --- ## [Anyone has a performance evaluation with NGram tokenizer?](https://discuss.elastic.co/t/anyone-has-a-performance-evaluation-with-ngram-tokenizer/307356)
**Author:** [@fraf](https://discuss.elastic.co/u/fraf)\ **Replies:** 1\ **Last updated:** [June 16, 2022, 8:59am UTC](https://discuss.elastic.co/t/anyone-has-a-performance-evaluation-with-ngram-tokenizer/307356 "2022-06-16T08:59:09Z")
Hello searchers, I think, one of the best tokenizer algorithm (and maybe the most used), is the NGram tokenizer (equivalent to the SQL : where table.column like '%search\_text%'. Indeed, given an input text, it can gene… --- ## [Set up Repository on multi-node Cluster via Ansible](https://discuss.elastic.co/t/set-up-repository-on-multi-node-cluster-via-ansible/307358)
**Author:** [@A\_j\_xx](https://discuss.elastic.co/u/A_j_xx)\ **Replies:** 0\ **Last updated:** [June 16, 2022, 8:27am UTC](https://discuss.elastic.co/t/set-up-repository-on-multi-node-cluster-via-ansible/307358 "2022-06-16T08:27:58Z")
Hi all, There are some doubts which i need to clarify on urgent basis : I know we can easily setup snapshot repository via kibana but what about from curl request ? Let us say i have multi node cluster , do i need to… --- ## [Migrate Datastreams](https://discuss.elastic.co/t/migrate-datastreams/307357)
**Author:** [@EllBil](https://discuss.elastic.co/u/EllBil)\ **Replies:** 0\ **Last updated:** [June 16, 2022, 7:54am UTC](https://discuss.elastic.co/t/migrate-datastreams/307357 "2022-06-16T07:54:09Z")
Hello, I'm trying to migrate to a new server and a new cluster. My Data pipeline's output is being now on the new server, and I'm starting to receive data. However I can't restore my old data using \_reindex neither Ela… --- ## [GC issues causing high CPU](https://discuss.elastic.co/t/gc-issues-causing-high-cpu/307341)
**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\ **Replies:** 8\ **Last updated:** [June 16, 2022, 7:46am UTC](https://discuss.elastic.co/t/gc-issues-causing-high-cpu/307341 "2022-06-16T07:46:26Z")
Hello, I have setup a 2 node cluster for our production environment. We are using t3a.xlarge instance type. APM and log analysis is currently enabled for our cluster, observing high CPU frequently. Upon checking the log… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=422) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=424)