# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=560

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 561

---

## [Highlighting of not indexed text](https://discuss.elastic.co/t/highlighting-of-not-indexed-text/286530)

<div class="topic-metadata">

**Author:** [@Wonder\_Garance](https://discuss.elastic.co/u/Wonder_Garance)\
**Replies:** 0\
**Last updated:** [October 12, 2021, 5:50pm UTC](https://discuss.elastic.co/t/highlighting-of-not-indexed-text/286530 "2021-10-12T17:50:17Z")

</div>

Hello, I use Elasticsearch 7.9.3, is there any way to highlight a not indexed text, with expressions highlighted by a phrase query, and synonyms of these expressions? As our text are often updated, if we index them, th…

---

## [Obtain doc\_count values from terms aggregation in bucket](https://discuss.elastic.co/t/obtain-doc-count-values-from-terms-aggregation-in-bucket/286527)

<div class="topic-metadata">

**Author:** [@Felipe\_Fuller](https://discuss.elastic.co/u/Felipe_Fuller)\
**Replies:** 0\
**Last updated:** [October 12, 2021, 4:30pm UTC](https://discuss.elastic.co/t/obtain-doc-count-values-from-terms-aggregation-in-bucket/286527 "2021-10-12T16:30:15Z")

</div>

Hello Community! I am having a problem formulating a query in Elasticseach. I want to create a watcher to alert me on slack, the top hits that exceed the 4% of all the documents in a time interval. So in the query of th…

---

## [Elasticsearch Native Language Translation (NLP)](https://discuss.elastic.co/t/elasticsearch-native-language-translation-nlp/286521)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 0\
**Last updated:** [October 12, 2021, 3:18pm UTC](https://discuss.elastic.co/t/elasticsearch-native-language-translation-nlp/286521 "2021-10-12T15:18:27Z")

</div>

Hi All, I recently watched the ElasticOn talk on Modern NLP in the Elastic Stack. It was very interesting to see how Elastic is looking to integrate NLP. On this topic, I noticed that recently Elastic had added language…

---

## [Elasticsearch 7.14.1 and unassigned shards](https://discuss.elastic.co/t/elasticsearch-7-14-1-and-unassigned-shards/286510)

<div class="topic-metadata">

**Author:** [@Marcello\_A](https://discuss.elastic.co/u/Marcello_A)\
**Replies:** 1\
**Last updated:** [October 12, 2021, 2:04pm UTC](https://discuss.elastic.co/t/elasticsearch-7-14-1-and-unassigned-shards/286510 "2021-10-12T14:04:43Z")

</div>

Hi All, we installed a 3 nodes cluster shipped with Elasticsearch 7.14.1. All indices are configured with 2 shards and 1 replica per shard and all works fine. We stop one node and the cluster becomes yellow and some sh…

---

## [Restrict suggestions to provide data from an desired index while using stored searches](https://discuss.elastic.co/t/restrict-suggestions-to-provide-data-from-an-desired-index-while-using-stored-searches/286498)

<div class="topic-metadata">

**Author:** [@pcvijayvignesh](https://discuss.elastic.co/u/pcvijayvignesh)\
**Replies:** 0\
**Last updated:** [October 12, 2021, 1:24pm UTC](https://discuss.elastic.co/t/restrict-suggestions-to-provide-data-from-an-desired-index-while-using-stored-searches/286498 "2021-10-12T13:24:44Z")

</div>

We are using stored searches to perform queries, sort, agregations, and suggestions across a predefined index. Previously, we were not able to restrict the sort to certain indexes, so when we do a sort it searched acros…

---

## [ElasticSearch 7.11 - how to reproduce function with NEST?](https://discuss.elastic.co/t/elasticsearch-7-11-how-to-reproduce-function-with-nest/286487)

<div class="topic-metadata">

**Author:** [@Vadym\_Romanenko](https://discuss.elastic.co/u/Vadym_Romanenko)\
**Replies:** 0\
**Last updated:** [October 12, 2021, 12:08pm UTC](https://discuss.elastic.co/t/elasticsearch-7-11-how-to-reproduce-function-with-nest/286487 "2021-10-12T12:08:24Z")

</div>

Good day for everyone! I'm trying to reproduce generation of function that increases score for documents with specific values. This is original part of the query that was created in ES console: "query": { "funct…

---

## [How can I filtering of child aggs on parent agg's key（date\_histogram.key\_as\_string）](https://discuss.elastic.co/t/how-can-i-filtering-of-child-aggs-on-parent-aggs-key-date-histogram-key-as-string/286483)

<div class="topic-metadata">

**Author:** [@chenbihao](https://discuss.elastic.co/u/chenbihao)\
**Replies:** 0\
**Last updated:** [October 12, 2021, 11:33am UTC](https://discuss.elastic.co/t/how-can-i-filtering-of-child-aggs-on-parent-aggs-key-date-histogram-key-as-string/286483 "2021-10-12T11:33:51Z")

</div>

I want to Change filter.range.exitTime.lte:"2021-08" to date\_histogram.key\_as\_string How do i make it GET /workerentryexitrecord/\_search { "size": 0, "query": { "bool": { "must": \[ { "m…

---

## [Restore data from archive snapshot](https://discuss.elastic.co/t/restore-data-from-archive-snapshot/286372)

<div class="topic-metadata">

**Author:** [@Nazarenko](https://discuss.elastic.co/u/Nazarenko)\
**Replies:** 4\
**Last updated:** [October 12, 2021, 11:14am UTC](https://discuss.elastic.co/t/restore-data-from-archive-snapshot/286372 "2021-10-12T11:14:27Z")

</div>

Hello everyone! I have some problems with restore my data from snapshot. Firstly, i created local repositories and create a policy, afther that, i successfully create snapshot. Secondly i make archive with content of …

---

## [Not getting exact number of documents after reindexing the index](https://discuss.elastic.co/t/not-getting-exact-number-of-documents-after-reindexing-the-index/286116)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 1\
**Last updated:** [October 12, 2021, 10:33am UTC](https://discuss.elastic.co/t/not-getting-exact-number-of-documents-after-reindexing-the-index/286116 "2021-10-12T10:33:04Z")

</div>

I am reindexing some indices.After the completion of reindex process,i saw that destination index has not the exact number of documents as compared to source index. POST \_reindex?max\_docs=1614914&wait\_for\_completion=fal…

---

## [What are the major difference between ElasticSearch and OpenSearch?](https://discuss.elastic.co/t/what-are-the-major-difference-between-elasticsearch-and-opensearch/286464)

<div class="topic-metadata">

**Author:** [@spzala](https://discuss.elastic.co/u/spzala)\
**Replies:** 2\
**Last updated:** [October 12, 2021, 10:27am UTC](https://discuss.elastic.co/t/what-are-the-major-difference-between-elasticsearch-and-opensearch/286464 "2021-10-12T10:27:35Z")

</div>

We are planning to leverage OpenSearch for the XDR kind of project. We want to leverage most of the major features like Alerting, Detection, Machine Learning for Anomaly Detection, etc. So, I want to know that, are the…

---

## [\[Error\] Failed to execute query phase org.elasticsearch.transport.RemoteTransportException](https://discuss.elastic.co/t/error-failed-to-execute-query-phase-org-elasticsearch-transport-remotetransportexception/286467)

<div class="topic-metadata">

**Author:** [@lional700](https://discuss.elastic.co/u/lional700)\
**Replies:** 0\
**Last updated:** [October 12, 2021, 10:15am UTC](https://discuss.elastic.co/t/error-failed-to-execute-query-phase-org-elasticsearch-transport-remotetransportexception/286467 "2021-10-12T10:15:53Z")

</div>

Dear Community, We are currently at the learning stage of Elasticsearch. We are using Bitbucket Data Centre in a cluster of 5 servers and installed Elasticsearch "7.5.2" in single separated server integrated to Bitbucke…

---

## [ELK Upgradation](https://discuss.elastic.co/t/elk-upgradation/286445)

<div class="topic-metadata">

**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\
**Replies:** 1\
**Last updated:** [October 12, 2021, 10:04am UTC](https://discuss.elastic.co/t/elk-upgradation/286445 "2021-10-12T10:04:04Z")

</div>

Hi Presently we are using 7.10.2 version of ELK, want to upgrade it to latest version. The main purpose to upgrade is the look of Kibana URL. We are using SaaS instance. 7.10.2 Kibana URL is of more numerical. EX: http…

---

## [Is it possible to relate fields in an index such that highlights are matches across fields?](https://discuss.elastic.co/t/is-it-possible-to-relate-fields-in-an-index-such-that-highlights-are-matches-across-fields/286463)

<div class="topic-metadata">

**Author:** [@regitze](https://discuss.elastic.co/u/regitze)\
**Replies:** 0\
**Last updated:** [October 12, 2021, 9:53am UTC](https://discuss.elastic.co/t/is-it-possible-to-relate-fields-in-an-index-such-that-highlights-are-matches-across-fields/286463 "2021-10-12T09:53:46Z")

</div>

Hi I have an index which is constructed in the following way: {'id': 'xxx-xxx', 'text': 'ALICE was beginning to get very tired of sitting by her sister on the bank, and of having nothing to do', 'start': '0:00:01…

---

## [Does custom rules influence forecast results?](https://discuss.elastic.co/t/does-custom-rules-influence-forecast-results/286141)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 3\
**Last updated:** [October 12, 2021, 8:54am UTC](https://discuss.elastic.co/t/does-custom-rules-influence-forecast-results/286141 "2021-10-12T08:54:02Z")

</div>

Hi, I have a ML job for disk usage in percentage (0 to 100) , I had run a forecast in monday and gave me predictions over the 100% of the usage (193%, 232%, etc). Yesterday I clone the Job and add the custom rule skip …

---

## [A question around to get relevant content By using TF-IDF algorithm](https://discuss.elastic.co/t/a-question-around-to-get-relevant-content-by-using-tf-idf-algorithm/286440)

<div class="topic-metadata">

**Author:** [@Lahu\_Gosavi](https://discuss.elastic.co/u/Lahu_Gosavi)\
**Replies:** 0\
**Last updated:** [October 12, 2021, 7:03am UTC](https://discuss.elastic.co/t/a-question-around-to-get-relevant-content-by-using-tf-idf-algorithm/286440 "2021-10-12T07:03:59Z")

</div>

Hi everyone I am doing a POC on best match document should rank higher basically, we are using the TF-IDF algorithm to rank the documents we are using a multi\_match query to find a document here is the query: { "q…

---

## [Netflow Problem](https://discuss.elastic.co/t/netflow-problem/286435)

<div class="topic-metadata">

**Author:** [@1phoenix](https://discuss.elastic.co/u/1phoenix)\
**Replies:** 0\
**Last updated:** [October 12, 2021, 5:13am UTC](https://discuss.elastic.co/t/netflow-problem/286435 "2021-10-12T05:13:55Z")

</div>

Hello all, I have installed an Elastic Fleet server (self managed) and have deployed Elastic Agents successfully via Fleet. I have the Netflow Integration as part of the agent policy, but it doesn't look to be creating …

---

## [SAML attributes.groups has multiple groups, role mapping does not work](https://discuss.elastic.co/t/saml-attributes-groups-has-multiple-groups-role-mapping-does-not-work/286151)

<div class="topic-metadata">

**Author:** [@iti](https://discuss.elastic.co/u/iti)\
**Replies:** 4\
**Last updated:** [October 12, 2021, 6:21am UTC](https://discuss.elastic.co/t/saml-attributes-groups-has-multiple-groups-role-mapping-does-not-work/286151 "2021-10-12T06:21:11Z")

</div>

I have the following saml response: \<?xml version="1.0" encoding="UTF-8"?\> \<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" \> \<saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Format="…

---

## [Need support to restore backup from one instance to another in elastic cloud](https://discuss.elastic.co/t/need-support-to-restore-backup-from-one-instance-to-another-in-elastic-cloud/285892)

<div class="topic-metadata">

**Author:** [@skp](https://discuss.elastic.co/u/skp)\
**Replies:** 3\
**Last updated:** [October 12, 2021, 5:36am UTC](https://discuss.elastic.co/t/need-support-to-restore-backup-from-one-instance-to-another-in-elastic-cloud/285892 "2021-10-12T05:36:20Z")

</div>

Hi Team, I need to restore the backup from one instance to another if i give below command its not able to find the snapshot in other instance by the way they have the same repository and restore within the same instanc…

---

## [Find elements in array of nested dictionaries](https://discuss.elastic.co/t/find-elements-in-array-of-nested-dictionaries/286431)

<div class="topic-metadata">

**Author:** [@niato](https://discuss.elastic.co/u/niato)\
**Replies:** 0\
**Last updated:** [October 12, 2021, 4:21am UTC](https://discuss.elastic.co/t/find-elements-in-array-of-nested-dictionaries/286431 "2021-10-12T04:21:02Z")

</div>

I'm struggling to find a way to get documents meeting specific criteria in an index that looks like this: { "products": \[ { "name": "product 1", "defects": { "packaging": { "desc": ".…

---

## [Elastic search 6.8.1 - missing indices](https://discuss.elastic.co/t/elastic-search-6-8-1-missing-indices/286364)

<div class="topic-metadata">

**Author:** [@Dan7](https://discuss.elastic.co/u/Dan7)\
**Replies:** 1\
**Last updated:** [October 12, 2021, 12:22am UTC](https://discuss.elastic.co/t/elastic-search-6-8-1-missing-indices/286364 "2021-10-12T00:22:58Z")

</div>

Good day, I have an Elasticsearch 6.8.1 single node cluster running inside a kubernetes statefulset to index documents that I need to look after and I noticed that the snapshot path.repo had not been setup previously. S…

---

## [Cumulative running total for field independant of search range](https://discuss.elastic.co/t/cumulative-running-total-for-field-independant-of-search-range/286406)

<div class="topic-metadata">

**Author:** [@d\_s\_9](https://discuss.elastic.co/u/d_s_9)\
**Replies:** 0\
**Last updated:** [October 11, 2021, 7:23pm UTC](https://discuss.elastic.co/t/cumulative-running-total-for-field-independant-of-search-range/286406 "2021-10-11T19:23:55Z")

</div>

Hi all, I'm indexing time series documents containing a timestamp as well as an integer value which i want to have a running total for, starting from the first indexed document and adding all of the supplied values of t…

---

## [Yet, another Firewall question](https://discuss.elastic.co/t/yet-another-firewall-question/286078)

<div class="topic-metadata">

**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\
**Replies:** 3\
**Last updated:** [October 11, 2021, 6:13pm UTC](https://discuss.elastic.co/t/yet-another-firewall-question/286078 "2021-10-11T18:13:13Z")

</div>

I am running Stack 7.13.4 on Windows 10 with McAfee Small Business Security (a Firewall among other things) I have two nodes of Elasticsearch and One of Kibana on this one machine. I have opened TCP/UDP ports 9200, 92…

---

## [Indexing Multipolyon with Elasticearch](https://discuss.elastic.co/t/indexing-multipolyon-with-elasticearch/286265)

<div class="topic-metadata">

**Author:** [@Faradandy](https://discuss.elastic.co/u/Faradandy)\
**Replies:** 5\
**Last updated:** [October 11, 2021, 5:50pm UTC](https://discuss.elastic.co/t/indexing-multipolyon-with-elasticearch/286265 "2021-10-11T17:50:56Z")

</div>

Hi there, I'm using Elasticsearch 7.15 with GDAL 3.3.1 and trying to index the UK Land Registry Dataset. I currently have these data stored in a PSQL table and am trying to use ogr2ogr to create the ES index. I've def…

---

## [Refresh\_interval less than 1 per second?](https://discuss.elastic.co/t/refresh-interval-less-than-1-per-second/286069)

<div class="topic-metadata">

**Author:** [@Vadym](https://discuss.elastic.co/u/Vadym)\
**Replies:** 7\
**Last updated:** [October 11, 2021, 5:46pm UTC](https://discuss.elastic.co/t/refresh-interval-less-than-1-per-second/286069 "2021-10-11T17:46:17Z")

</div>

Hi guys, We are syncing data from Couchbase into Elasticsearch via CBES connector and have up to ~550ms delay from CBES inserting data into ES. Afterwards it takes up to 2 seconds for data to become searchable in ES. D…

---

## [Elasticsearch Data Recovery](https://discuss.elastic.co/t/elasticsearch-data-recovery/286009)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 3\
**Last updated:** [October 11, 2021, 5:33pm UTC](https://discuss.elastic.co/t/elasticsearch-data-recovery/286009 "2021-10-11T17:33:28Z")

</div>

Hi, We had an incident where all master nodes failed. After they were auto-replaced the old data nodes did not reconnect to the master due to state mismatch. While we were able to clear down the state so the nodes could…

---

## [Terms query routing optimization](https://discuss.elastic.co/t/terms-query-routing-optimization/286390)

<div class="topic-metadata">

**Author:** [@Ragav\_Kb](https://discuss.elastic.co/u/Ragav_Kb)\
**Replies:** 0\
**Last updated:** [October 11, 2021, 4:21pm UTC](https://discuss.elastic.co/t/terms-query-routing-optimization/286390 "2021-10-11T16:21:39Z")

</div>

My search is going to look something as below. For most cases the number of items in userId is expected to be between 100 to 200 atmost, although on some cases it may go up to 1000. Is there anything to consider in gene…

---

## [Search\_phase\_execution\_exception](https://discuss.elastic.co/t/search-phase-execution-exception/286336)

<div class="topic-metadata">

**Author:** [@prashanth\_sri](https://discuss.elastic.co/u/prashanth_sri)\
**Replies:** 2\
**Last updated:** [October 11, 2021, 3:27pm UTC](https://discuss.elastic.co/t/search-phase-execution-exception/286336 "2021-10-11T15:27:07Z")

</div>

hi all , i have 15 nodes in my Elasticsearch cluster, and each shards have 10GB , currently we have (1 shard+2 replicas ) ,we are using 6.18 elastic version , we are try ing to access data from api , but when i am runni…

---

## [Metadata \_tier value after rollover](https://discuss.elastic.co/t/metadata-tier-value-after-rollover/286117)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 1\
**Last updated:** [October 11, 2021, 3:13pm UTC](https://discuss.elastic.co/t/metadata-tier-value-after-rollover/286117 "2021-10-11T15:13:23Z")

</div>

Hey there, Is there a way to change the Metadata \_tier value after that an ILM is executed? If an index starts with \_tier set to data\_hot and then it is moved to a warm node, can I change the Metadata automatically? I…

---

## [Support SLM (Snapshot Lifecycle management) for license 7.10.2 Elashticsearch](https://discuss.elastic.co/t/support-slm-snapshot-lifecycle-management-for-license-7-10-2-elashticsearch/286354)

<div class="topic-metadata">

**Author:** [@ttttien](https://discuss.elastic.co/u/ttttien)\
**Replies:** 6\
**Last updated:** [October 11, 2021, 2:58pm UTC](https://discuss.elastic.co/t/support-slm-snapshot-lifecycle-management-for-license-7-10-2-elashticsearch/286354 "2021-10-11T14:58:27Z")

</div>

Hello everyone, I would like to know that Elasticsearch version 7.10.2 supports or not for SLM (Snapshot Lifecycle Management) in open versions (not enterprise) ? And how can I get the link of the information about that…

---

## [Connect Remote Cluster with Security](https://discuss.elastic.co/t/connect-remote-cluster-with-security/285941)

<div class="topic-metadata">

**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\
**Replies:** 4\
**Last updated:** [October 11, 2021, 2:26pm UTC](https://discuss.elastic.co/t/connect-remote-cluster-with-security/285941 "2021-10-11T14:26:14Z")

</div>

My local cluster has already set up transport and ssl security. Now I am going to connect a remote cluster which has its own ca.crt file. How can I make the local and remote clusters to trust each other? Here is the err…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=559)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=561)
