# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=518 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 519 --- ## [Default keyword analyzer not work](https://discuss.elastic.co/t/default-keyword-analyzer-not-work/293194)
**Author:** [@5minutes](https://discuss.elastic.co/u/5minutes)\ **Replies:** 1\ **Last updated:** [December 30, 2021, 11:59am UTC](https://discuss.elastic.co/t/default-keyword-analyzer-not-work/293194 "2021-12-30T11:59:30Z")
Hi, I would like all my fields to be indexed as a keyword. Creating index: PUT abcd { "settings": { "analysis": { "analyzer": { "default": { "type": "keyword" } } } } … --- ## [Difference search\_analyzer and search\_quote\_analyzer](https://discuss.elastic.co/t/difference-search-analyzer-and-search-quote-analyzer/293197)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 0\ **Last updated:** [December 30, 2021, 10:40am UTC](https://discuss.elastic.co/t/difference-search-analyzer-and-search-quote-analyzer/293197 "2021-12-30T10:40:11Z")
Hi team, I am learning analyzer in Elasticsearch and i have little confusion what is the use of search\_analyzer and search\_quote\_analyzer i have read the documentation but i couldn't understand. Case 1 PUT my\_index-00… --- ## [How can we achive this in elasticsearch](https://discuss.elastic.co/t/how-can-we-achive-this-in-elasticsearch/292594)
**Author:** [@ajeet\_jha1](https://discuss.elastic.co/u/ajeet_jha1)\ **Replies:** 4\ **Last updated:** [December 30, 2021, 9:51am UTC](https://discuss.elastic.co/t/how-can-we-achive-this-in-elasticsearch/292594 "2021-12-30T09:51:46Z")
when I search this "elasticsearchfulltext search" On google I get the result "Showing results for Elasticsearch full text search" --- ## [BM25 how to scoring ignore idf or set scope for total number of documents with search field](https://discuss.elastic.co/t/bm25-how-to-scoring-ignore-idf-or-set-scope-for-total-number-of-documents-with-search-field/293104)
**Author:** [@wlc015f](https://discuss.elastic.co/u/wlc015f)\ **Replies:** 0\ **Last updated:** [December 29, 2021, 11:03am UTC](https://discuss.elastic.co/t/bm25-how-to-scoring-ignore-idf-or-set-scope-for-total-number-of-documents-with-search-field/293104 "2021-12-29T11:03:34Z")
elasticsearch version 7.16.2 index settings : "similarity" : { "default" : { "type" : "BM25", "b" : "0.75", "k1" : "1.2" } } Data example: { "application" : 110, "… --- ## [Why doesn't DevTool get error "index\_closed\_exception" with same query syntax?](https://discuss.elastic.co/t/why-doesnt-devtool-get-error-index-closed-exception-with-same-query-syntax/293030)
**Author:** [@jenhouwu](https://discuss.elastic.co/u/jenhouwu)\ **Replies:** 1\ **Last updated:** [December 30, 2021, 1:34am UTC](https://discuss.elastic.co/t/why-doesnt-devtool-get-error-index-closed-exception-with-same-query-syntax/293030 "2021-12-30T01:34:37Z")
Hi, I try to prepare a search to query indices name as a-\*, for some reason I closed some of a-\* indices that are one month old. I can get data by Kibana DevTool even if I query closed index. However when I use "curl" … --- ## [Referencing a value within a bucket within a bucket](https://discuss.elastic.co/t/referencing-a-value-within-a-bucket-within-a-bucket/292823)
**Author:** [@walshe06](https://discuss.elastic.co/u/walshe06)\ **Replies:** 0\ **Last updated:** [December 23, 2021, 3:26pm UTC](https://discuss.elastic.co/t/referencing-a-value-within-a-bucket-within-a-bucket/292823 "2021-12-23T15:26:04Z")
Hi I am looking to create a watcher alert to trigger if the value within a bucket is above a certain threshold. However the value will vary as it is within a bucket within a bucket. The value is shown in (ctx.payload.pe… --- ## [Nested, flattened or object](https://discuss.elastic.co/t/nested-flattened-or-object/292974)
**Author:** [@ailengcon](https://discuss.elastic.co/u/ailengcon)\ **Replies:** 0\ **Last updated:** [December 27, 2021, 1:30pm UTC](https://discuss.elastic.co/t/nested-flattened-or-object/292974 "2021-12-27T13:30:19Z")
I am trying to figure out if I should use the datatype nested, flattened och object when using an index template to better map my index. I've got some large documents with some arrays and several objects within them. I … --- ## [New third party certificate](https://discuss.elastic.co/t/new-third-party-certificate/292988)
**Author:** [@srkn66](https://discuss.elastic.co/u/srkn66)\ **Replies:** 1\ **Last updated:** [December 29, 2021, 5:42pm UTC](https://discuss.elastic.co/t/new-third-party-certificate/292988 "2021-12-29T17:42:05Z")
I have a question. Today I created and configured new ceritificates for fleet, kibana and my nodes with letsencrypt, (previously it was Elasticsearch-cerutil). When I add the certificates in .yaml I get an authenticatio… --- ## [Elasticsearch as a database for Django](https://discuss.elastic.co/t/elasticsearch-as-a-database-for-django/293145)
**Author:** [@derekmizak](https://discuss.elastic.co/u/derekmizak)\ **Replies:** 0\ **Last updated:** [December 29, 2021, 5:35pm UTC](https://discuss.elastic.co/t/elasticsearch-as-a-database-for-django/293145 "2021-12-29T17:35:31Z")
I would like to explore possibility of using Elasticsearch as a backend database for Django. Did anyone had any experience with it? Can you recommend any resources? Basically I want to have forms in Django app where use… --- ## [Upgrade Elasticserch single node cluster](https://discuss.elastic.co/t/upgrade-elasticserch-single-node-cluster/292858)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 3\ **Last updated:** [December 29, 2021, 3:33pm UTC](https://discuss.elastic.co/t/upgrade-elasticserch-single-node-cluster/292858 "2021-12-29T15:33:11Z")
How to upgrade a single node elasticserch cluster with out data loss --- ## [Fuzzy search doesn't return all available results](https://discuss.elastic.co/t/fuzzy-search-doesnt-return-all-available-results/292935)
**Author:** [@eladf](https://discuss.elastic.co/u/eladf)\ **Replies:** 11\ **Last updated:** [December 29, 2021, 3:25pm UTC](https://discuss.elastic.co/t/fuzzy-search-doesnt-return-all-available-results/292935 "2021-12-29T15:25:16Z")
Hi, I've been trying to use fuzziness in order to find typos for specific terms. My terms usually consist of a single word. Although there are thousands of possible results available that I'm aware of (fuzziness of 1 … --- ## [How to get an index rollover finished time](https://discuss.elastic.co/t/how-to-get-an-index-rollover-finished-time/292922)
**Author:** [@JohnPhilip](https://discuss.elastic.co/u/JohnPhilip)\ **Replies:** 5\ **Last updated:** [December 29, 2021, 10:28am UTC](https://discuss.elastic.co/t/how-to-get-an-index-rollover-finished-time/292922 "2021-12-29T10:28:53Z")
Hi, all, I want to know when does an index finished it's rollover action, is there any api to get this infomation? can \_ilm/explain show this info? --- ## [Elasticsearch 7.16.1 crashing randomly](https://discuss.elastic.co/t/elasticsearch-7-16-1-crashing-randomly/291827)
**Author:** [@ppuschmann](https://discuss.elastic.co/u/ppuschmann)\ **Replies:** 27\ **Last updated:** [December 29, 2021, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-7-16-1-crashing-randomly/291827 "2021-12-29T10:23:36Z")
Hi, after upgrading to Elasticsearch 7.16.1 (Debian-package from elastic.co), we're seeing some graver errors and crashes on some clusters: Instances are running with Debian Buster (10) \[2021-12-14T00:00:06,036\]\[ERRO… --- ## [Kibana server is not ready yet because upgrading elasticsearch](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-because-upgrading-elasticsearch/292646)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 12\ **Last updated:** [December 29, 2021, 10:12am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-because-upgrading-elasticsearch/292646 "2021-12-29T10:12:46Z")
hi everyone i have a problem after i upgrade from 7.15.2 to 7.16.2 my kibana server is not ready yet. here' s the log i get \[root@bdi-uat-els elasticsearch\]# tail elasticsearch.log at org.elasticsearch.xpack.mo… --- ## [Incorrect/increasing elasticsearch count query after re-indexing!](https://discuss.elastic.co/t/incorrect-increasing-elasticsearch-count-query-after-re-indexing/293096)
**Author:** [@Ilia](https://discuss.elastic.co/u/Ilia)\ **Replies:** 1\ **Last updated:** [December 29, 2021, 9:44am UTC](https://discuss.elastic.co/t/incorrect-increasing-elasticsearch-count-query-after-re-indexing/293096 "2021-12-29T09:44:06Z")
Some hours ago I've re-indexed one of my indices. The re-indexing process completed in about 2 hours and I've run the following query afterwards: GET myIndex/\_count { "query": { "bool": { "must": \[ {… --- ## [Self-managed Gold subscription infra required is 3-node with 64GB ram, 8 core cpu, 2TB ssd?](https://discuss.elastic.co/t/self-managed-gold-subscription-infra-required-is-3-node-with-64gb-ram-8-core-cpu-2tb-ssd/293090)
**Author:** [@Melvin](https://discuss.elastic.co/u/Melvin)\ **Replies:** 1\ **Last updated:** [December 29, 2021, 7:18am UTC](https://discuss.elastic.co/t/self-managed-gold-subscription-infra-required-is-3-node-with-64gb-ram-8-core-cpu-2tb-ssd/293090 "2021-12-29T07:18:22Z")
Hi, Wanted to check with the community if there was a mistake in my understanding. I was told that Gold subscription is provided to self-managed instances only if the infra we have confirms to the following specs: 3 n… --- ## [Error while restarting elastic service when I add xpack.security.enabled: true to the .yml file](https://discuss.elastic.co/t/error-while-restarting-elastic-service-when-i-add-xpack-security-enabled-true-to-the-yml-file/292938)
**Author:** [@Ayoub\_Mouloua](https://discuss.elastic.co/u/Ayoub_Mouloua)\ **Replies:** 2\ **Last updated:** [December 29, 2021, 6:56am UTC](https://discuss.elastic.co/t/error-while-restarting-elastic-service-when-i-add-xpack-security-enabled-true-to-the-yml-file/292938 "2021-12-29T06:56:50Z")
Hello ppl, when I add xpack.security.enabled: true rule to .yml file and I restart the service using : sudo systemctl restart elasticsearch.service I got this error: Job for elasticsearch.service failed because the con… --- ## [Enable http encryption on cluster](https://discuss.elastic.co/t/enable-http-encryption-on-cluster/293005)
**Author:** [@eh2021-elastic](https://discuss.elastic.co/u/eh2021-elastic)\ **Replies:** 1\ **Last updated:** [December 29, 2021, 5:46am UTC](https://discuss.elastic.co/t/enable-http-encryption-on-cluster/293005 "2021-12-29T05:46:49Z")
I have an 8 node cluster running the basic license and is currently only configured with transport security. I am looking to enable http encryption on the cluster and the documentation mentions to shutdown all the nodes … --- ## [Setup elk 8 beta](https://discuss.elastic.co/t/setup-elk-8-beta/293022)
**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\ **Replies:** 1\ **Last updated:** [December 29, 2021, 5:43am UTC](https://discuss.elastic.co/t/setup-elk-8-beta/293022 "2021-12-29T05:43:21Z")
Hi, I have been using docker 8 alpha till now and wanted to try beta 1. I am surprised to see more secured options enabled for kibana while connecting to elastic. Did any one tried 8 beta 1? / share me the procedure t… --- ## [Sort After Aggregation](https://discuss.elastic.co/t/sort-after-aggregation/293081)
**Author:** [@aosrc](https://discuss.elastic.co/u/aosrc)\ **Replies:** 1\ **Last updated:** [December 29, 2021, 5:02am UTC](https://discuss.elastic.co/t/sort-after-aggregation/293081 "2021-12-29T05:02:09Z")
I need to aggregate by multi fields : \[srcMac, dstMac, srcIp, dstIp, srcPort, dstPort, protocol\], so I add a field "groupKey" and then aggregate by it. the mappings is: { "mappings": { "\_doc": { … --- ## [Unable to choose Fleet Agent Policy](https://discuss.elastic.co/t/unable-to-choose-fleet-agent-policy/292051)
**Author:** [@thedanielmatt](https://discuss.elastic.co/u/thedanielmatt)\ **Replies:** 3\ **Last updated:** [December 29, 2021, 3:48am UTC](https://discuss.elastic.co/t/unable-to-choose-fleet-agent-policy/292051 "2021-12-29T03:48:37Z")
Hello everyone, I'm trying to get a Fleet server set up on my on-premise stack for the first time. Server and Agent are RPM installed with version 7.16.1. When setting up the Fleet server, I am unable to select an Age… --- ## [Upload documenet/image as data into Elasticsearch](https://discuss.elastic.co/t/upload-documenet-image-as-data-into-elasticsearch/293058)
**Author:** [@Amisha\_Thakkar](https://discuss.elastic.co/u/Amisha_Thakkar)\ **Replies:** 3\ **Last updated:** [December 28, 2021, 11:38pm UTC](https://discuss.elastic.co/t/upload-documenet-image-as-data-into-elasticsearch/293058 "2021-12-28T23:38:37Z")
Hi Team, We would like to know if we can upload document/image as a data into Elasticsearch. And will it index the text which is there in that document/image. So that we can search the text present on that document/imag… --- ## [ElasticSeach SSL Signed overrun error](https://discuss.elastic.co/t/elasticseach-ssl-signed-overrun-error/293071)
**Author:** [@a09hopper](https://discuss.elastic.co/u/a09hopper)\ **Replies:** 2\ **Last updated:** [December 28, 2021, 10:39pm UTC](https://discuss.elastic.co/t/elasticseach-ssl-signed-overrun-error/293071 "2021-12-28T22:39:31Z")
Searching around I have not seen anyone run into this error. I am using Elasticsearch 7.16.2 with a Windows CA, I request a CSR and then sign it with the Windows web enrolment under the web server setting, the followin… --- ## [Daily index vs hourly index, which is better for Search in period of month?](https://discuss.elastic.co/t/daily-index-vs-hourly-index-which-is-better-for-search-in-period-of-month/293026)
**Author:** [@jr2001](https://discuss.elastic.co/u/jr2001)\ **Replies:** 1\ **Last updated:** [December 28, 2021, 9:33pm UTC](https://discuss.elastic.co/t/daily-index-vs-hourly-index-which-is-better-for-search-in-period-of-month/293026 "2021-12-28T21:33:25Z")
Hi There, We have an indexing which is growing around 1.4 TB per day. this daily index have 4 million documents almost. each daily index has 6 primary shards and no replicas. we have 2 physical server (Ubuntu 20.04.2… --- ## [Issue securing Elasticsearch : elasticsearch-setup-passwords not installed](https://discuss.elastic.co/t/issue-securing-elasticsearch-elasticsearch-setup-passwords-not-installed/292821)
**Author:** [@dannymccaslin](https://discuss.elastic.co/u/dannymccaslin)\ **Replies:** 3\ **Last updated:** [December 28, 2021, 9:17pm UTC](https://discuss.elastic.co/t/issue-securing-elasticsearch-elasticsearch-setup-passwords-not-installed/292821 "2021-12-28T21:17:15Z")
I have a three-node Elasticsearch cluster running 6.8.22 and I'm trying to add passwords following the instructions here: https://www.elastic.co/guide/en/elasticsearch/reference/current/security-minimal-setup.html. Howev… --- ## [Help with my first elasticsearch mapping](https://discuss.elastic.co/t/help-with-my-first-elasticsearch-mapping/292358)
**Author:** [@4art4](https://discuss.elastic.co/u/4art4)\ **Replies:** 3\ **Last updated:** [December 28, 2021, 9:16pm UTC](https://discuss.elastic.co/t/help-with-my-first-elasticsearch-mapping/292358 "2021-12-28T21:16:25Z")
What I have is elasticserach ingesting something like: { "policy": { "name": "account-cloudtrail-enabled", "resource": "account" }, "metrics": \[{ "MetricName": "ResourceCount", "Timestamp": "2021-12-06T11:29:… --- ## [Need help to setup Data curation layer for Elastic stack](https://discuss.elastic.co/t/need-help-to-setup-data-curation-layer-for-elastic-stack/293037)
**Author:** [@aayu\_ssh](https://discuss.elastic.co/u/aayu_ssh)\ **Replies:** 1\ **Last updated:** [December 28, 2021, 8:58pm UTC](https://discuss.elastic.co/t/need-help-to-setup-data-curation-layer-for-elastic-stack/293037 "2021-12-28T20:58:31Z")
i am trying to setup a curation layer for my current existing elastic cloud cluster, but am not sure how to implement this, could nod find much help over the web. can someone help ? with curation layer, we are trying to… --- ## [Elasticsearch Flush latency is too high - by Zabbix monitoring](https://discuss.elastic.co/t/elasticsearch-flush-latency-is-too-high-by-zabbix-monitoring/293017)
**Author:** [@KrishnaCh](https://discuss.elastic.co/u/KrishnaCh)\ **Replies:** 6\ **Last updated:** [December 28, 2021, 3:01pm UTC](https://discuss.elastic.co/t/elasticsearch-flush-latency-is-too-high-by-zabbix-monitoring/293017 "2021-12-28T15:01:14Z")
Hi All, I have a 3-node all master-eligible cluster, with 8 cores vCPU and 40GB memory in each node. We have Zabbix monitoring enabled on all the nodes and its frequently triggering "Flush Latency is too high" and its … --- ## [How to calculate the cost of elasticsearch in AWS?](https://discuss.elastic.co/t/how-to-calculate-the-cost-of-elasticsearch-in-aws/292995)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 3\ **Last updated:** [December 28, 2021, 2:46pm UTC](https://discuss.elastic.co/t/how-to-calculate-the-cost-of-elasticsearch-in-aws/292995 "2021-12-28T14:46:13Z")
Hi, we are considering moving , one of our cluster, from on premise to AWS, is there a calculator to get how much it will cost? or a blog page, your personal experiences... the cluster has 3 nodes and 3 teras of data. --- ## [Cannot import name 'Elasticsearch' from 'elasticsearch' (unknown location)](https://discuss.elastic.co/t/cannot-import-name-elasticsearch-from-elasticsearch-unknown-location/292991)
**Author:** [@Divyank\_Garg](https://discuss.elastic.co/u/Divyank_Garg)\ **Replies:** 1\ **Last updated:** [December 28, 2021, 11:20am UTC](https://discuss.elastic.co/t/cannot-import-name-elasticsearch-from-elasticsearch-unknown-location/292991 "2021-12-28T11:20:27Z")
I have installed Elasticsearch library and trying to import Elasticsearch from Elasticsearch library but getting issue: cannot import name 'Elasticsearch' from 'Elasticsearch' (unknown location) [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=517) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=519)