# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=482

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 483

---

## [For prefix query, the max prefix length is 1000, is there any document show that?](https://discuss.elastic.co/t/for-prefix-query-the-max-prefix-length-is-1000-is-there-any-document-show-that/298749)

<div class="topic-metadata">

**Author:** [@major](https://discuss.elastic.co/u/major)\
**Replies:** 0\
**Last updated:** [March 3, 2022, 1:49pm UTC](https://discuss.elastic.co/t/for-prefix-query-the-max-prefix-length-is-1000-is-there-any-document-show-that/298749 "2022-03-03T13:49:41Z")

</div>

for the prefix, I tried by my self, when the prefix length larger than 1000, the lucene will throw exception？I would like to know it there any configuration can change the max length? or any document support it?

---

## [Unified highlighter performance regression between 6.8 and 7.17](https://discuss.elastic.co/t/unified-highlighter-performance-regression-between-6-8-and-7-17/298747)

<div class="topic-metadata">

**Author:** [@julbra](https://discuss.elastic.co/u/julbra)\
**Replies:** 2\
**Last updated:** [March 3, 2022, 1:44pm UTC](https://discuss.elastic.co/t/unified-highlighter-performance-regression-between-6-8-and-7-17/298747 "2022-03-03T13:44:11Z")

</div>

After upgrading from Elasticsearch 6.8 to 7.17 we noticed that highlighting queries started taking several seconds instead of milliseconds. We have many hundreds of fields in our mapping and the data is sparsely populat…

---

## [Can´t reach localhost:9200 - Received Plaintext http - Windows](https://discuss.elastic.co/t/can-t-reach-localhost-9200-received-plaintext-http-windows/298674)

<div class="topic-metadata">

**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\
**Replies:** 4\
**Last updated:** [March 3, 2022, 1:19pm UTC](https://discuss.elastic.co/t/can-t-reach-localhost-9200-received-plaintext-http-windows/298674 "2022-03-03T13:19:32Z")

</div>

Did anyone experience the same or has a soluation, what I am doing wrong? I am pretty new to elastic and propably it is easy to solve, but I am kind of at a loss here. I am unable to connect to http://localhost:9200 in t…

---

## [\[Ingest pipeline\] tag and trace match](https://discuss.elastic.co/t/ingest-pipeline-tag-and-trace-match/298745)

<div class="topic-metadata">

**Author:** [@marrc.rousseau](https://discuss.elastic.co/u/marrc.rousseau)\
**Replies:** 0\
**Last updated:** [March 3, 2022, 12:59pm UTC](https://discuss.elastic.co/t/ingest-pipeline-tag-and-trace-match/298745 "2022-03-03T12:59:22Z")

</div>

Hi, I try to migrate my logstash filters to ingest pipeline but I'm stuck on an issue: I'm parsing VMware ESX logs with a grok pattern and I would like to add a field if grok pattern match In logstash I've something l…

---

## [How to get the aggregation value into a field in CSV in logstash configuration file?](https://discuss.elastic.co/t/how-to-get-the-aggregation-value-into-a-field-in-csv-in-logstash-configuration-file/298741)

<div class="topic-metadata">

**Author:** [@Ajay4998](https://discuss.elastic.co/u/Ajay4998)\
**Replies:** 0\
**Last updated:** [March 3, 2022, 12:06pm UTC](https://discuss.elastic.co/t/how-to-get-the-aggregation-value-into-a-field-in-csv-in-logstash-configuration-file/298741 "2022-03-03T12:06:11Z")

</div>

Hi All, How to get terms aggregation key into field and value into field value in logstash for a CSV file, i have used Elasticsearch filter and also give the json file for query. can some please help on this Elasticsea…

---

## [Date format changes and causes an error in a transform](https://discuss.elastic.co/t/date-format-changes-and-causes-an-error-in-a-transform/298643)

<div class="topic-metadata">

**Author:** [@Jker](https://discuss.elastic.co/u/Jker)\
**Replies:** 4\
**Last updated:** [March 3, 2022, 10:49am UTC](https://discuss.elastic.co/t/date-format-changes-and-causes-an-error-in-a-transform/298643 "2022-03-03T10:49:07Z")

</div>

Hello! I'm trying to create a transform from two different indices but keep on running to this error and have tried many different solutions but can't get it to work. This is the error: Failed to index documents into…

---

## [Elasticsearch and hive integration permission issue](https://discuss.elastic.co/t/elasticsearch-and-hive-integration-permission-issue/298723)

<div class="topic-metadata">

**Author:** [@charvi23](https://discuss.elastic.co/u/charvi23)\
**Replies:** 0\
**Last updated:** [March 3, 2022, 10:05am UTC](https://discuss.elastic.co/t/elasticsearch-and-hive-integration-permission-issue/298723 "2022-03-03T10:05:46Z")

</div>

While trying to create external table / index via hive connector jars it gives the following error, can you help me point out the issue. I am actually trying to move data from hive to ES index. Following is the error mes…

---

## [FVH does not highlight matched search terms on snippets boundary](https://discuss.elastic.co/t/fvh-does-not-highlight-matched-search-terms-on-snippets-boundary/298720)

<div class="topic-metadata">

**Author:** [@Anatoly\_Petkevich](https://discuss.elastic.co/u/Anatoly_Petkevich)\
**Replies:** 0\
**Last updated:** [March 3, 2022, 9:57am UTC](https://discuss.elastic.co/t/fvh-does-not-highlight-matched-search-terms-on-snippets-boundary/298720 "2022-03-03T09:57:23Z")

</div>

Looks like there is an issue with highlighting of matched terms on snippets boundary. Steps to reproduce: Create index and field mappings PUT /test { "settings": { "number\_of\_shards": 1 }, "mappings": { …

---

## [Path.Data partition is going Read-Only periodically](https://discuss.elastic.co/t/path-data-partition-is-going-read-only-periodically/298710)

<div class="topic-metadata">

**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\
**Replies:** 4\
**Last updated:** [March 3, 2022, 9:36am UTC](https://discuss.elastic.co/t/path-data-partition-is-going-read-only-periodically/298710 "2022-03-03T09:36:16Z")

</div>

Hello, I have a deployed cluster V7.16.1 on Linux platform (ubuntu lts), but what is happening is that every time one of the partitions mapped to path.data is becoming Read-Only until I run file-system check (fsck) on t…

---

## [Logstash parse multiple lat lon values](https://discuss.elastic.co/t/logstash-parse-multiple-lat-lon-values/298711)

<div class="topic-metadata">

**Author:** [@sylar11](https://discuss.elastic.co/u/sylar11)\
**Replies:** 0\
**Last updated:** [March 3, 2022, 8:11am UTC](https://discuss.elastic.co/t/logstash-parse-multiple-lat-lon-values/298711 "2022-03-03T08:11:01Z")

</div>

Hi all, I have the following json file: { "station": "A001", "X": 503744.7, "Y": 4726339.0, "Z": 458.84, "LON": -2.954286956913572, "LAT": 42.68952475979137, "dates": \[ "2015-01-01",…

---

## [Elasticsearch query text field by term](https://discuss.elastic.co/t/elasticsearch-query-text-field-by-term/298693)

<div class="topic-metadata">

**Author:** [@jiankunking](https://discuss.elastic.co/u/jiankunking)\
**Replies:** 1\
**Last updated:** [March 3, 2022, 8:04am UTC](https://discuss.elastic.co/t/elasticsearch-query-text-field-by-term/298693 "2022-03-03T08:04:25Z")

</div>

I have read the docs，Term query | Elasticsearch Guide \[8.0\] | Elastic I know that the text field should not be queried with term. But there's another sentence in the document The term query does not analyze the searc…

---

## [Lifecycle policy with movement delay option](https://discuss.elastic.co/t/lifecycle-policy-with-movement-delay-option/298588)

<div class="topic-metadata">

**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\
**Replies:** 2\
**Last updated:** [March 3, 2022, 7:16am UTC](https://discuss.elastic.co/t/lifecycle-policy-with-movement-delay-option/298588 "2022-03-03T07:16:38Z")

</div>

Hi I have a lot of different daily indices tagged to the same lifecycle policy. Every day 12am, ilm will start to move several of these daily indices to the different tiers. I was wondering if there is some kind of tim…

---

## [How to make Average sub aggregation to consider parent aggregation count instead of current aggregation count?](https://discuss.elastic.co/t/how-to-make-average-sub-aggregation-to-consider-parent-aggregation-count-instead-of-current-aggregation-count/298403)

<div class="topic-metadata">

**Author:** [@Nishikant\_Tayade](https://discuss.elastic.co/u/Nishikant_Tayade)\
**Replies:** 5\
**Last updated:** [March 3, 2022, 4:13am UTC](https://discuss.elastic.co/t/how-to-make-average-sub-aggregation-to-consider-parent-aggregation-count-instead-of-current-aggregation-count/298403 "2022-03-03T04:13:09Z")

</div>

I am using ES 7.10.2 Mappings for fields are as follows: { "properties": { "ItemInfo": { "type": "nested", "include\_in\_parent": true, "properties": { "ShipInfo": { "type": "nes…

---

## [The active thread always in one dataNode，other dataNodes have very few active thread or no active thread](https://discuss.elastic.co/t/the-active-thread-always-in-one-datanode-other-datanodes-have-very-few-active-thread-or-no-active-thread/298686)

<div class="topic-metadata">

**Author:** [@1506299760](https://discuss.elastic.co/u/1506299760)\
**Replies:** 19\
**Last updated:** [March 3, 2022, 3:15am UTC](https://discuss.elastic.co/t/the-active-thread-always-in-one-datanode-other-datanodes-have-very-few-active-thread-or-no-active-thread/298686 "2022-03-03T03:15:33Z")

</div>

I have 3 master nodes,6 data nodes and every dataNode has almost same quantity and size data，I export data to dataNode evenly。 when I send requests to do pressure test(my requests is also random) ，I user the command 'GE…

---

## [Elasticsearch array only contains query](https://discuss.elastic.co/t/elasticsearch-array-only-contains-query/298666)

<div class="topic-metadata">

**Author:** [@viswanathk243](https://discuss.elastic.co/u/viswanathk243)\
**Replies:** 1\
**Last updated:** [March 3, 2022, 3:07am UTC](https://discuss.elastic.co/t/elasticsearch-array-only-contains-query/298666 "2022-03-03T03:07:26Z")

</div>

Let's say I've data in this format: { "id": "doc0", "tags": \["a", "b", "c"\] } { "id": "doc1", "tags": \["a", "b", "c", "d"\] } { "id": "doc2", "tags": \["a", "b"\] } I need to form an ES query that fetches on…

---

## [Newb/learner floundering](https://discuss.elastic.co/t/newb-learner-floundering/298216)

<div class="topic-metadata">

**Author:** [@mrodent](https://discuss.elastic.co/u/mrodent)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 11:44pm UTC](https://discuss.elastic.co/t/newb-learner-floundering/298216 "2022-03-02T23:44:37Z")

</div>

When I say newb, I have in fact developed a couple of minor apps which use the most basic aspects of creating an ES index and then searching it (in Python). The resource I might naturally expect to go to, with v 7.16 cu…

---

## [Update by query with index alias](https://discuss.elastic.co/t/update-by-query-with-index-alias/298610)

<div class="topic-metadata">

**Author:** [@Metheny](https://discuss.elastic.co/u/Metheny)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 11:09pm UTC](https://discuss.elastic.co/t/update-by-query-with-index-alias/298610 "2022-03-02T23:09:09Z")

</div>

In the Alias documentation it says that write operations aren't allowed on index alias and that it would return an error: If an alias points to multiple indices or data streams and is\_write\_index isn’t set, the alias r…

---

## [How long does it usually take for another master candidate to be elected?](https://discuss.elastic.co/t/how-long-does-it-usually-take-for-another-master-candidate-to-be-elected/298617)

<div class="topic-metadata">

**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\
**Replies:** 1\
**Last updated:** [March 2, 2022, 11:08pm UTC](https://discuss.elastic.co/t/how-long-does-it-usually-take-for-another-master-candidate-to-be-elected/298617 "2022-03-02T23:08:07Z")

</div>

I have a cluster like below. node1 master-node : master(true), data(false) data-node-1 : master(true), data(true) node2 data-node-2 : master(true), data(true) node3 data-node-3 : master(false), data(true) When th…

---

## [Elasticsearch node limitations and scaling](https://discuss.elastic.co/t/elasticsearch-node-limitations-and-scaling/298594)

<div class="topic-metadata">

**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\
**Replies:** 1\
**Last updated:** [March 2, 2022, 11:07pm UTC](https://discuss.elastic.co/t/elasticsearch-node-limitations-and-scaling/298594 "2022-03-02T23:07:27Z")

</div>

Hi, I'm having some anomalies with my 3 nodes cluster, my nodes have some instability, I keep losing a node each time and sometimes the cluster take long time to recover, but i'm not sure if the root cause is a cluster …

---

## [Elasticsearch.yml after startup is not showing in RHEL 8](https://discuss.elastic.co/t/elasticsearch-yml-after-startup-is-not-showing-in-rhel-8/298680)

<div class="topic-metadata">

**Author:** [@CoreyCBurton](https://discuss.elastic.co/u/CoreyCBurton)\
**Replies:** 5\
**Last updated:** [March 2, 2022, 11:02pm UTC](https://discuss.elastic.co/t/elasticsearch-yml-after-startup-is-not-showing-in-rhel-8/298680 "2022-03-02T23:02:39Z")

</div>

I have installed Elasticsearch on RHEL 8. I followed this guide below. Everything went smoothly and I started the service. I am trying to edit the Elasticsearch.yml and I can't seem to find it. I am also trying to tu…

---

## [Elastic Search Lowercase analyser does not return search result](https://discuss.elastic.co/t/elastic-search-lowercase-analyser-does-not-return-search-result/298662)

<div class="topic-metadata">

**Author:** [@Leo\_Baby\_Jacob](https://discuss.elastic.co/u/Leo_Baby_Jacob)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 6:47pm UTC](https://discuss.elastic.co/t/elastic-search-lowercase-analyser-does-not-return-search-result/298662 "2022-03-02T18:47:39Z")

</div>

I have a text based index like below. I am trying to maintain both exact search and ambiguous search based on tokens based on user input. While text based search works fine(partial search) when it comes to term search it…

---

## [How to make ILM work in ES v 7.10.0](https://discuss.elastic.co/t/how-to-make-ilm-work-in-es-v-7-10-0/298619)

<div class="topic-metadata">

**Author:** [@Vikrant\_Aggarwal](https://discuss.elastic.co/u/Vikrant_Aggarwal)\
**Replies:** 5\
**Last updated:** [March 2, 2022, 6:37pm UTC](https://discuss.elastic.co/t/how-to-make-ilm-work-in-es-v-7-10-0/298619 "2022-03-02T18:37:37Z")

</div>

Hello Team, May be a naive query but I couldn't find information on this topic. Issuing: GET \_ilm/status giving me the following error: { "error" : "Incorrect HTTP method for uri \[/\_ilm/status?pretty=true\] and meth…

---

## [Autocomplete with range](https://discuss.elastic.co/t/autocomplete-with-range/298644)

<div class="topic-metadata">

**Author:** [@earlyriser01](https://discuss.elastic.co/u/earlyriser01)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 3:50pm UTC](https://discuss.elastic.co/t/autocomplete-with-range/298644 "2022-03-02T15:50:08Z")

</div>

Hi all! I want to use my custom analyzer (autocomplete -- below) on a number field that I have indexed as shown below. I am using Ruby on Rails Elasticsearch version. settings index: { analysis: { filter:…

---

## [Automate re-index process](https://discuss.elastic.co/t/automate-re-index-process/293876)

<div class="topic-metadata">

**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\
**Replies:** 5\
**Last updated:** [March 2, 2022, 3:46pm UTC](https://discuss.elastic.co/t/automate-re-index-process/293876 "2022-03-02T15:46:26Z")

</div>

We are using: elastic operator 1.8 Elasticsearch 7.15.2 Current problem: we have 2 shards for every index and 7 data/masters nodes on Elasticsearch (impossible to scale it by license number), we need to retain 6 days …

---

## [Exist Elasticsearch ingest pipeline if specific field exists](https://discuss.elastic.co/t/exist-elasticsearch-ingest-pipeline-if-specific-field-exists/298563)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 12\
**Last updated:** [March 2, 2022, 2:30pm UTC](https://discuss.elastic.co/t/exist-elasticsearch-ingest-pipeline-if-specific-field-exists/298563 "2022-03-02T14:30:22Z")

</div>

In an Elasticsearch Ingest Pipeline, how can I validate whether a specific field exists, and exit the pipeline immediately without processing if it does?

---

## [Adding scripted fields to document source](https://discuss.elastic.co/t/adding-scripted-fields-to-document-source/298552)

<div class="topic-metadata">

**Author:** [@andersnelson](https://discuss.elastic.co/u/andersnelson)\
**Replies:** 2\
**Last updated:** [March 2, 2022, 2:01pm UTC](https://discuss.elastic.co/t/adding-scripted-fields-to-document-source/298552 "2022-03-02T14:01:31Z")

</div>

I am trying to move away from scripted fields in our Elasticsearch cluster. I have updated our Logstash config files to add the relevant fields to new incoming documents, but am having trouble figuring out how to update…

---

## [Pass each matched record value to filter in Elasticsearch](https://discuss.elastic.co/t/pass-each-matched-record-value-to-filter-in-elasticsearch/298541)

<div class="topic-metadata">

**Author:** [@ZulQ](https://discuss.elastic.co/u/ZulQ)\
**Replies:** 2\
**Last updated:** [March 2, 2022, 1:39pm UTC](https://discuss.elastic.co/t/pass-each-matched-record-value-to-filter-in-elasticsearch/298541 "2022-03-02T13:39:37Z")

</div>

For geo\_distance query I'm using a constant value for distance. I need to make it dynamic. So I want to pass the above matched record radius value to distance. Here's the code: let searchRadius = '12KM' query:…

---

## [Check license for production environment](https://discuss.elastic.co/t/check-license-for-production-environment/298597)

<div class="topic-metadata">

**Author:** [@Rohit\_Keshari](https://discuss.elastic.co/u/Rohit_Keshari)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 11:15am UTC](https://discuss.elastic.co/t/check-license-for-production-environment/298597 "2022-03-02T11:15:29Z")

</div>

Is it use open source Elasticsearch 7.10.2 in production environment?

---

## [Error when trying to index to data streamd](https://discuss.elastic.co/t/error-when-trying-to-index-to-data-streamd/298603)

<div class="topic-metadata">

**Author:** [@notgurev](https://discuss.elastic.co/u/notgurev)\
**Replies:** 2\
**Last updated:** [March 2, 2022, 9:55am UTC](https://discuss.elastic.co/t/error-when-trying-to-index-to-data-streamd/298603 "2022-03-02T09:55:34Z")

</div>

I've created an index template + a data stream and tried to bulk create from Go library. Request is: {"create":{}} {"@timestamp":"2022-03-02T12:48:23+03:00","domain\_name":"adlook-rev.me","domain\_type":"","webmaster\_pin…

---

## [Elastic search clustering](https://discuss.elastic.co/t/elastic-search-clustering/298491)

<div class="topic-metadata">

**Author:** [@Bhagya\_09](https://discuss.elastic.co/u/Bhagya_09)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 10:23am UTC](https://discuss.elastic.co/t/elastic-search-clustering/298491 "2022-03-02T10:23:53Z")

</div>

I tried to set up Elasticsearch on docker. but i can't volume mount on /usr/share/Elasticsearch/config. /usr/share/elasticsearch/data, /usr/share/elasticsearch/plugins is okay. but only i can't volume mount path is /us…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=481)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=483)
