# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=434 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 435 --- ## [Can you match an index template based on a doc's field value?](https://discuss.elastic.co/t/can-you-match-an-index-template-based-on-a-docs-field-value/305867)
**Author:** [@Nama\_Illo](https://discuss.elastic.co/u/Nama_Illo)\ **Replies:** 2\ **Last updated:** [May 29, 2022, 3:27pm UTC](https://discuss.elastic.co/t/can-you-match-an-index-template-based-on-a-docs-field-value/305867 "2022-05-29T15:27:45Z")
It appears docs being indexed can hit a specific Index Template based on an "index pattern" that matches a specific naming pattern of an index. I was wondering if there was a way to have a doc hit a specific Index Templ… --- ## [A better way to implement an analyzer coded by myself into elastic search](https://discuss.elastic.co/t/a-better-way-to-implement-an-analyzer-coded-by-myself-into-elastic-search/305872)
**Author:** [@Gresmir](https://discuss.elastic.co/u/Gresmir)\ **Replies:** 0\ **Last updated:** [May 29, 2022, 9:53am UTC](https://discuss.elastic.co/t/a-better-way-to-implement-an-analyzer-coded-by-myself-into-elastic-search/305872 "2022-05-29T09:53:07Z")
Hello In my textual data, I have structures like this: ст. ст. 40, 131, 132, 176-178, 183, ч. 2 ст. 187, 188, 184, 189, 194 KK Where KK is the name of a codex, ст. ст., or ст. mean article, ч. mean part. So I want El… --- ## [Synonyms for medical text search](https://discuss.elastic.co/t/synonyms-for-medical-text-search/305853)
**Author:** [@Tim\_Shurlock](https://discuss.elastic.co/u/Tim_Shurlock)\ **Replies:** 0\ **Last updated:** [May 28, 2022, 12:25pm UTC](https://discuss.elastic.co/t/synonyms-for-medical-text-search/305853 "2022-05-28T12:25:39Z")
Hi, I am trying to build a synonym list of medical terms for use in Elasticsearch. The purpose being to catch exceptions that wont conflate properly with the already implemented porter stemmer, for example none of the v… --- ## [Elastic Search Query to match Only if Specific value is present](https://discuss.elastic.co/t/elastic-search-query-to-match-only-if-specific-value-is-present/305796)
**Author:** [@Harinder\_Singh](https://discuss.elastic.co/u/Harinder_Singh)\ **Replies:** 2\ **Last updated:** [May 28, 2022, 11:30am UTC](https://discuss.elastic.co/t/elastic-search-query-to-match-only-if-specific-value-is-present/305796 "2022-05-28T11:30:41Z")
Hi, I have data like below { "instance": { "items": \[ { "name": "name\_1" }, { "name": "name\_2" } \] } } items is an array and it can contains many values. I am looki… --- ## [Elasticsearch search query quide](https://discuss.elastic.co/t/elasticsearch-search-query-quide/305847)
**Author:** [@Satya10](https://discuss.elastic.co/u/Satya10)\ **Replies:** 0\ **Last updated:** [May 28, 2022, 9:53am UTC](https://discuss.elastic.co/t/elasticsearch-search-query-quide/305847 "2022-05-28T09:53:59Z")
Currently, I'm working on ELK 8 (Filebeat, Logstash, Elasticsearch & Kibana) stuck in the middle The sample log is here, 2021-07-30 16:34:22 INFO com.example.OrderRest \[fhxh750df392\] Session opened OId 31324 2021-07-3… --- ## [Custom Authz Engine Configuration](https://discuss.elastic.co/t/custom-authz-engine-configuration/305837)
**Author:** [@ash\_n](https://discuss.elastic.co/u/ash_n)\ **Replies:** 0\ **Last updated:** [May 27, 2022, 11:10pm UTC](https://discuss.elastic.co/t/custom-authz-engine-configuration/305837 "2022-05-27T23:10:06Z")
I'm working on an implementation of a custom authorization engine by following the instructions on this page. I'm using Elasticsearch v8.2.0. Step 2) on this page seems to indicate that I can pass settings for my custom… --- ## [Define Primaries and Replicas for Elastic Agent Integrations](https://discuss.elastic.co/t/define-primaries-and-replicas-for-elastic-agent-integrations/305560)
**Author:** [@Fikrat\_Karimli](https://discuss.elastic.co/u/Fikrat_Karimli)\ **Replies:** 8\ **Last updated:** [May 27, 2022, 8:46pm UTC](https://discuss.elastic.co/t/define-primaries-and-replicas-for-elastic-agent-integrations/305560 "2022-05-27T20:46:37Z")
Hi, I have elastic agent managed by fleet and I want to define primaries and replicas. By default it has 1 primary and 1 replica but want to do 3 primary and 0 replica. I tried to play with data stream but nothing seem … --- ## [Set flattened field type to avoid the limit of total fields \[1000\] issue](https://discuss.elastic.co/t/set-flattened-field-type-to-avoid-the-limit-of-total-fields-1000-issue/305834)
**Author:** [@austin0918](https://discuss.elastic.co/u/austin0918)\ **Replies:** 0\ **Last updated:** [May 27, 2022, 8:43pm UTC](https://discuss.elastic.co/t/set-flattened-field-type-to-avoid-the-limit-of-total-fields-1000-issue/305834 "2022-05-27T20:43:58Z")
I need to set flattened type for some fields, e.g., msgParts.urls, msgParts.metadata, filter.modules to avoid the limit of total fields \[1000\] issue. Below are the current settings that don't work, please advise. { "i… --- ## [Getting handshake error while enabling SSL in elasticsearch cluster](https://discuss.elastic.co/t/getting-handshake-error-while-enabling-ssl-in-elasticsearch-cluster/305783)
**Author:** [@AnandThakur](https://discuss.elastic.co/u/AnandThakur)\ **Replies:** 1\ **Last updated:** [May 27, 2022, 7:56pm UTC](https://discuss.elastic.co/t/getting-handshake-error-while-enabling-ssl-in-elasticsearch-cluster/305783 "2022-05-27T19:56:55Z")
Hi All, We are new to using Elasticsearch and we use elasticsearch as audittrail for Informatica PIM. We were able to successfully create Elasticsearch nodes and enable SSL in DEV and SIT which have standalone nodes but… --- ## [Is it possible to know when no more changes will be included in a snapshot?](https://discuss.elastic.co/t/is-it-possible-to-know-when-no-more-changes-will-be-included-in-a-snapshot/305816)
**Author:** [@gearoidibm](https://discuss.elastic.co/u/gearoidibm)\ **Replies:** 1\ **Last updated:** [May 27, 2022, 6:38pm UTC](https://discuss.elastic.co/t/is-it-possible-to-know-when-no-more-changes-will-be-included-in-a-snapshot/305816 "2022-05-27T18:38:38Z")
To create a backup that's consistent across my index and other application data I create a snapshot when there's no changes being made to the index. I want to start making changes to the index as soon as possible after … --- ## [Looking for a chart/line graph that could display the changes of status](https://discuss.elastic.co/t/looking-for-a-chart-line-graph-that-could-display-the-changes-of-status/305738)
**Author:** [@JaNa\_Cy](https://discuss.elastic.co/u/JaNa_Cy)\ **Replies:** 0\ **Last updated:** [May 26, 2022, 5:20pm UTC](https://discuss.elastic.co/t/looking-for-a-chart-line-graph-that-could-display-the-changes-of-status/305738 "2022-05-26T17:20:27Z")
Hi, I got data like name = "Interface1", status = "down", time="5:10 " name = "Interface1", status = "up", time="5:20 " name = "Interface1", status = "down", time="5:30 " name = "Interface1", status = "up", time="5:… --- ## [Convert Date time Using StandardTimeZonename instead of Zoneid](https://discuss.elastic.co/t/convert-date-time-using-standardtimezonename-instead-of-zoneid/305800)
**Author:** [@M.Naim](https://discuss.elastic.co/u/M.Naim)\ **Replies:** 1\ **Last updated:** [May 27, 2022, 1:22pm UTC](https://discuss.elastic.co/t/convert-date-time-using-standardtimezonename-instead-of-zoneid/305800 "2022-05-27T13:22:12Z")
Hi Team, I am facing issue to convert Datetime value into their Specific time zone by refering Timezone name from doc. Scenario: In my scenario, we have data for different timezones on elastic with thereTimezone belon… --- ## [Starting with snapshots when we already have a large amount of data?](https://discuss.elastic.co/t/starting-with-snapshots-when-we-already-have-a-large-amount-of-data/305781)
**Author:** [@Andreas\_Falk](https://discuss.elastic.co/u/Andreas_Falk)\ **Replies:** 1\ **Last updated:** [May 27, 2022, 1:11pm UTC](https://discuss.elastic.co/t/starting-with-snapshots-when-we-already-have-a-large-amount-of-data/305781 "2022-05-27T13:11:09Z")
Hi, We shall do an upgrade from 7.10.2 to 7.17+ and have tried this is lab env. But one question that comes to mind is, how is the cluster going to react when starting a snapshot on over 10TB data with cold storage? W… --- ## [Find phrase ending with or containing](https://discuss.elastic.co/t/find-phrase-ending-with-or-containing/305801)
**Author:** [@dlazure](https://discuss.elastic.co/u/dlazure)\ **Replies:** 0\ **Last updated:** [May 27, 2022, 12:52pm UTC](https://discuss.elastic.co/t/find-phrase-ending-with-or-containing/305801 "2022-05-27T12:52:47Z")
this is what i am getting from a router log message : script,info CLIENT-ABC: 6.42.11 (long-term) the portion CLIENT-ABC: 6.42.11 will be dynamic and will change from devices to devices. I wou… --- ## [Create Index with settings](https://discuss.elastic.co/t/create-index-with-settings/305771)
**Author:** [@liushida](https://discuss.elastic.co/u/liushida)\ **Replies:** 1\ **Last updated:** [May 27, 2022, 12:31pm UTC](https://discuss.elastic.co/t/create-index-with-settings/305771 "2022-05-27T12:31:13Z")
When I create the index with settings, the response is \[es/indices.create\] failed: \[illegal\_argument\_exception\] unknown setting \[index.settings.analysis.analyzer.custom.type\] so how I should resolve this problem? the E… --- ## [Dense vector upload slow down](https://discuss.elastic.co/t/dense-vector-upload-slow-down/305609)
**Author:** [@KacperLukawski](https://discuss.elastic.co/u/KacperLukawski)\ **Replies:** 2\ **Last updated:** [May 27, 2022, 11:55am UTC](https://discuss.elastic.co/t/dense-vector-upload-slow-down/305609 "2022-05-27T11:55:16Z")
Hi there! I've been playing a bit with the dense\_vector field recently. I have a collection of thousands of vectors, 100 dimensions each. I created the index with the following config: { "properties": { "vector":… --- ## [Elastic Search and Kibana is not working](https://discuss.elastic.co/t/elastic-search-and-kibana-is-not-working/305606)
**Author:** [@John\_Mari](https://discuss.elastic.co/u/John_Mari)\ **Replies:** 13\ **Last updated:** [May 27, 2022, 11:53am UTC](https://discuss.elastic.co/t/elastic-search-and-kibana-is-not-working/305606 "2022-05-27T11:53:08Z")
Hi Everyone, We installed Elasticsearch and Kibana in our Machine. Previously it was working fine. But, when we tried to access Elasticsearch and Kibana. Its showing following error. Can anyone guide us to solve the… --- ## [Model\_bytes\_memory\_limit](https://discuss.elastic.co/t/model-bytes-memory-limit/303741)
**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\ **Replies:** 12\ **Last updated:** [May 27, 2022, 10:17am UTC](https://discuss.elastic.co/t/model-bytes-memory-limit/303741 "2022-05-27T10:17:27Z")
A couple of the ML jobs we are running in our environment have hit their "hard limit". I have expanded the "model\_memory\_limit" to allow them more resources in order to run, but they continued to hit the hard limit. When… --- ## [Query explanation](https://discuss.elastic.co/t/query-explanation/305765)
**Author:** [@sean1223](https://discuss.elastic.co/u/sean1223)\ **Replies:** 0\ **Last updated:** [May 27, 2022, 4:04am UTC](https://discuss.elastic.co/t/query-explanation/305765 "2022-05-27T04:04:33Z")
Is there documentation explaining how to read the equation and the meaning of the symbols? Also, --- ## [Extract a field from a text field](https://discuss.elastic.co/t/extract-a-field-from-a-text-field/305756)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 1\ **Last updated:** [May 27, 2022, 3:33am UTC](https://discuss.elastic.co/t/extract-a-field-from-a-text-field/305756 "2022-05-27T03:33:39Z")
I'm trying to extract the fields that come within the "indicator" and "agentDetectionInfo" field, could someone help me? here's the log in json: { "\_index": "xxx", "\_type": "\_doc", "\_id": "xxxxxhvfUu\_M2V8K", "\_… --- ## [Adding new relic support to elasticsearch as a Windows service](https://discuss.elastic.co/t/adding-new-relic-support-to-elasticsearch-as-a-windows-service/305604)
**Author:** [@mmr11408](https://discuss.elastic.co/u/mmr11408)\ **Replies:** 7\ **Last updated:** [May 27, 2022, 2:01am UTC](https://discuss.elastic.co/t/adding-new-relic-support-to-elasticsearch-as-a-windows-service/305604 "2022-05-27T02:01:05Z")
I am adding new relic support to Elasticsearch on Windows. After adding -javaagent, ES starts up fine when invoked from CMD. But it will not start as a service. The error in system log viewer is "Incorrect Function". The… --- ## [Cannot invoke \\"String.length()\\" because \\"str\\" is null](https://discuss.elastic.co/t/cannot-invoke-string-length-because-str-is-null/305752)
**Author:** [@austin0918](https://discuss.elastic.co/u/austin0918)\ **Replies:** 3\ **Last updated:** [May 27, 2022, 12:54am UTC](https://discuss.elastic.co/t/cannot-invoke-string-length-because-str-is-null/305752 "2022-05-27T00:54:38Z")
Working on migrating Windows DNS logs to data stream and seeing a lot of errors. \[2022-05-26T13:43:37,457\]\[INFO \]\[logstash.outputs.elasticsearch\]\[filebeat-dns-dhcp\]\[7fe0474f97756847637aa742a5ac38f62e0e1460d0c70da893dabe… --- ## [Clean up unnecessary indices after upgrade Elastic Stack version](https://discuss.elastic.co/t/clean-up-unnecessary-indices-after-upgrade-elastic-stack-version/305586)
**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\ **Replies:** 4\ **Last updated:** [May 27, 2022, 12:13am UTC](https://discuss.elastic.co/t/clean-up-unnecessary-indices-after-upgrade-elastic-stack-version/305586 "2022-05-27T00:13:17Z")
Hi, after I've upgraded our Stack from version 7 to version 8, I see a lot of indices, that seem to be related to version 7 and therefore no longer in use. Unfortunately, I can't find any document, that shows a list of … --- ## [Understanding Elasticsearch Source Code](https://discuss.elastic.co/t/understanding-elasticsearch-source-code/305759)
**Author:** [@nikhilmehta](https://discuss.elastic.co/u/nikhilmehta)\ **Replies:** 0\ **Last updated:** [May 26, 2022, 11:47pm UTC](https://discuss.elastic.co/t/understanding-elasticsearch-source-code/305759 "2022-05-26T23:47:03Z")
Hello Everyone I am new to open source and quite new to reading a large Code Base, is their any particular guidelines, documentation or tutorials which helps one to do so for ES. I am a particularly interested how a ap… --- ## [Security in 8.x upgraded from 7.x](https://discuss.elastic.co/t/security-in-8-x-upgraded-from-7-x/305510)
**Author:** [@seePyou](https://discuss.elastic.co/u/seePyou)\ **Replies:** 3\ **Last updated:** [May 26, 2022, 10:42pm UTC](https://discuss.elastic.co/t/security-in-8-x-upgraded-from-7-x/305510 "2022-05-26T22:42:26Z")
We are running 7.11 of Elastic and we will be moving to 8.x (by first upgrading to 7.17). It would have been good to have security already, but we do not. We want to add it now, but I'm looking at the documentation and… --- ## [Concatenation between two documents message value](https://discuss.elastic.co/t/concatenation-between-two-documents-message-value/305572)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 2\ **Last updated:** [May 26, 2022, 6:33pm UTC](https://discuss.elastic.co/t/concatenation-between-two-documents-message-value/305572 "2022-05-26T18:33:30Z")
Hi, we assume that i have 3 documents in Elasticsearch and here a example of messages that contains document 1 message : 2022-01-13 17:16:05 - request in formatHexDump is =\> 000: 12 15 46 77 77 55 | ak55s2 .... 000… --- ## [Stats requests to data nodes timing out while ingestion is happening](https://discuss.elastic.co/t/stats-requests-to-data-nodes-timing-out-while-ingestion-is-happening/305100)
**Author:** [@ethompson](https://discuss.elastic.co/u/ethompson)\ **Replies:** 7\ **Last updated:** [May 26, 2022, 5:07pm UTC](https://discuss.elastic.co/t/stats-requests-to-data-nodes-timing-out-while-ingestion-is-happening/305100 "2022-05-26T17:07:04Z")
I've got an on-prem hosted ElasticStack set up that looks like \[apps that send logs via http\]-\>Logstash Shipper-\>Kafka-\>3 Logstash Ingesters-\>6 ElasticSearches (3 master, 3 data). Everything is on 7.16.2, and has been h… --- ## [Problem to cretae token for kibana interface](https://discuss.elastic.co/t/problem-to-cretae-token-for-kibana-interface/304829)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 7\ **Last updated:** [May 26, 2022, 12:54pm UTC](https://discuss.elastic.co/t/problem-to-cretae-token-for-kibana-interface/304829 "2022-05-26T12:54:24Z")
elastic@elastic:/usr/share/Elasticsearch/bin$ sudo ./Elasticsearch-create-enrollment-token -s kibana \`Preformatted text\`:1415) ~\[?:?\] at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:450) … --- ## [Raw logs to data compression ratio](https://discuss.elastic.co/t/raw-logs-to-data-compression-ratio/305440)
**Author:** [@michaelv](https://discuss.elastic.co/u/michaelv)\ **Replies:** 16\ **Last updated:** [May 26, 2022, 9:23am UTC](https://discuss.elastic.co/t/raw-logs-to-data-compression-ratio/305440 "2022-05-26T09:23:20Z")
Hi All, I've been investigating some compression ratios of my live logs. Two main catergories. Auditd logs and other logs like /var/log/messages etc. Both being ingested via filebeat 7.11 and running 7.11 cluster. S… --- ## [Must have all items in array query](https://discuss.elastic.co/t/must-have-all-items-in-array-query/305561)
**Author:** [@Amit4](https://discuss.elastic.co/u/Amit4)\ **Replies:** 2\ **Last updated:** [May 26, 2022, 8:02am UTC](https://discuss.elastic.co/t/must-have-all-items-in-array-query/305561 "2022-05-26T08:02:10Z")
Hello, i have the next document structure { id: 'offering\_1', qualification: \['11', '22'\] }, { id: 'offering\_2', qualification: \['11', '22', '33'\] } I wish to run a query that will return only records from index… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=433) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=435)