# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=576

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 577

---

## [How to design schema for boosting/ranking logic?](https://discuss.elastic.co/t/how-to-design-schema-for-boosting-ranking-logic/284149)

<div class="topic-metadata">

**Author:** [@abhinavkulkarni](https://discuss.elastic.co/u/abhinavkulkarni)\
**Replies:** 3\
**Last updated:** [September 14, 2021, 9:39am UTC](https://discuss.elastic.co/t/how-to-design-schema-for-boosting-ranking-logic/284149 "2021-09-14T09:39:51Z")

</div>

Hi, Let us say, I am indexing a bunch of podcasts in my Elasticsearch cluster: Podcast: - \_id (keyword) - email (keyword) - webLink (keyword) - rssLink (keyword) - shortDescription (te…

---

## [Failed to put mappings on indices \[\[\[account\_address\_01112020/M\_Yx-7TTTOeBgtJ-ckrHbw\]\]\], type \[\_doc\] java.lang.IllegalArgumentException: mapper \[quater\] of different type, current\_type \[keyword\], merged\_type \[text\]](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices-account-address-01112020-m-yx-7tttoebgtj-ckrhbw-type-doc-java-lang-illegalargumentexception-mapper-quater-of-different-type-current-type-keyword-merged-type-text/284116)

<div class="topic-metadata">

**Author:** [@Mesut\_Yilmaz](https://discuss.elastic.co/u/Mesut_Yilmaz)\
**Replies:** 4\
**Last updated:** [September 14, 2021, 8:37am UTC](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices-account-address-01112020-m-yx-7tttoebgtj-ckrhbw-type-doc-java-lang-illegalargumentexception-mapper-quater-of-different-type-current-type-keyword-merged-type-text/284116 "2021-09-14T08:37:54Z")

</div>

Hi, I am having a problem as below. What could be the reason of this specific problem which was occured only two hours during the day first time and do not know how to repeat the same problem. It occured and does not r…

---

## [How I can use the highlighter in react app](https://discuss.elastic.co/t/how-i-can-use-the-highlighter-in-react-app/283494)

<div class="topic-metadata">

**Author:** [@Drsaud](https://discuss.elastic.co/u/Drsaud)\
**Replies:** 4\
**Last updated:** [September 14, 2021, 8:04am UTC](https://discuss.elastic.co/t/how-i-can-use-the-highlighter-in-react-app/283494 "2021-09-14T08:04:16Z")

</div>

Hi, I want to ask how to apply the highlighter in my react app because when I tried it says its not parameter, I try it on my get req axios .get( \`http://localhost:9200/ncar\_index/ncar/\_search?q=${e…

---

## [User Prioritization | Indexing workload Prioritization](https://discuss.elastic.co/t/user-prioritization-indexing-workload-prioritization/284061)

<div class="topic-metadata">

**Author:** [@Chinnu](https://discuss.elastic.co/u/Chinnu)\
**Replies:** 3\
**Last updated:** [September 14, 2021, 7:52am UTC](https://discuss.elastic.co/t/user-prioritization-indexing-workload-prioritization/284061 "2021-09-14T07:52:51Z")

</div>

Hello, I am also looking for some documentation on prioritization among Users and Tokens in Cluster. Also, is there some kind of priority that we can set between indexing-load and querying-load ? Reason for asking thi…

---

## [Which Mappings settings can help improve indexing speed?](https://discuss.elastic.co/t/which-mappings-settings-can-help-improve-indexing-speed/283981)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 3\
**Last updated:** [September 14, 2021, 7:50am UTC](https://discuss.elastic.co/t/which-mappings-settings-can-help-improve-indexing-speed/283981 "2021-09-14T07:50:18Z")

</div>

Hello, I'm trying to improve the indexing performance on my cluster and everything listed in the tune for indexing speed document was already checked. Currently the indexing is done using Logstash with the elasticsearc…

---

## [What is the right way to query nested fields](https://discuss.elastic.co/t/what-is-the-right-way-to-query-nested-fields/283949)

<div class="topic-metadata">

**Author:** [@eylon\_koren](https://discuss.elastic.co/u/eylon_koren)\
**Replies:** 3\
**Last updated:** [September 14, 2021, 7:36am UTC](https://discuss.elastic.co/t/what-is-the-right-way-to-query-nested-fields/283949 "2021-09-14T07:36:48Z")

</div>

Hi ! I am providing accessibility to search on ES using my own UI which uses query string. Selecting query string is essential, beacuse the users might not be familier with advance quering in ES, And I would like to ke…

---

## [Reindexing is slow process](https://discuss.elastic.co/t/reindexing-is-slow-process/281766)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 6\
**Last updated:** [September 14, 2021, 6:33am UTC](https://discuss.elastic.co/t/reindexing-is-slow-process/281766 "2021-09-14T06:33:43Z")

</div>

Running ELK stack 7.13.2 Reindexing is a slow process it takes one day or more than one day. we have 10 indices of 101.4gb reindexing this size of data is costlier even though we close the logstash but nothing happened…

---

## [How to restore backup of linux in windows?](https://discuss.elastic.co/t/how-to-restore-backup-of-linux-in-windows/283874)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 3\
**Last updated:** [September 14, 2021, 6:06am UTC](https://discuss.elastic.co/t/how-to-restore-backup-of-linux-in-windows/283874 "2021-09-14T06:06:19Z")

</div>

I have a backup of the Linux index and the ELK stack version is 7.2.0 and I want to restore that backup on Windows. Windows ELK stack version is 7.11.0. I don't know how to backup on different OS. Any way to backup on Wi…

---

## [How to monitor/discover modification of documents?](https://discuss.elastic.co/t/how-to-monitor-discover-modification-of-documents/283629)

<div class="topic-metadata">

**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Replies:** 2\
**Last updated:** [September 14, 2021, 4:58am UTC](https://discuss.elastic.co/t/how-to-monitor-discover-modification-of-documents/283629 "2021-09-14T04:58:43Z")

</div>

Dears, ELK version: 7.7.0 Is there any way to monitor/discover modification of documents in the ELK? Any idea? Best Regards, Dan

---

## [How to know the node is unable to work by master node](https://discuss.elastic.co/t/how-to-know-the-node-is-unable-to-work-by-master-node/284134)

<div class="topic-metadata">

**Author:** [@Hungming\_Chiu](https://discuss.elastic.co/u/Hungming_Chiu)\
**Replies:** 1\
**Last updated:** [September 14, 2021, 3:31am UTC](https://discuss.elastic.co/t/how-to-know-the-node-is-unable-to-work-by-master-node/284134 "2021-09-14T03:31:08Z")

</div>

Hi there , I would like to know whether the master node enable to find out the node only breath (with ping response), actually it cannot work anymore. Thank you. B.rgds

---

## [Invalid interval specified, must be non-null and non-empty](https://discuss.elastic.co/t/invalid-interval-specified-must-be-non-null-and-non-empty/283878)

<div class="topic-metadata">

**Author:** [@jcalonso](https://discuss.elastic.co/u/jcalonso)\
**Replies:** 2\
**Last updated:** [September 14, 2021, 1:03am UTC](https://discuss.elastic.co/t/invalid-interval-specified-must-be-non-null-and-non-empty/283878 "2021-09-14T01:03:43Z")

</div>

Hi there, I been trying to run the following query on a rollup index, but cant get around the interval error. This is my query: GET /rollup-24hours/\_search { "size": 0, "aggs": { "by\_period": { "aggs": …

---

## [Issues with ILM rollover](https://discuss.elastic.co/t/issues-with-ilm-rollover/284120)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 5\
**Last updated:** [September 13, 2021, 11:59pm UTC](https://discuss.elastic.co/t/issues-with-ilm-rollover/284120 "2021-09-13T23:59:43Z")

</div>

version 7.14 I have some indexes that are not rolling over when I expect them to: policy says: \` "max\_primary\_shard\_size": "1gb", and the stats show Storage Size 1.2gb and Primaries 1. Perhaps significantly there …

---

## [Append-Only Index for Life](https://discuss.elastic.co/t/append-only-index-for-life/284054)

<div class="topic-metadata">

**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 11:46pm UTC](https://discuss.elastic.co/t/append-only-index-for-life/284054 "2021-09-13T23:46:57Z")

</div>

We currently write audit logs and metrics to an elasticsearch index. I'm trying to find a way to prevent a VM admin user from logging into the VM that runs elasticsearch and being able to delete or update audit log docu…

---

## [Aggregating transaction data for payments](https://discuss.elastic.co/t/aggregating-transaction-data-for-payments/283713)

<div class="topic-metadata">

**Author:** [@Fenix](https://discuss.elastic.co/u/Fenix)\
**Replies:** 4\
**Last updated:** [September 13, 2021, 8:19pm UTC](https://discuss.elastic.co/t/aggregating-transaction-data-for-payments/283713 "2021-09-13T20:19:13Z")

</div>

I want to know how many payments in my environment are of a given status, at a given time broken down by direction, and protocol. In our case, a payment is a collection of transactions (docs) with the same paymentId. Th…

---

## [Ingest pipeline, "remove" nested fields](https://discuss.elastic.co/t/ingest-pipeline-remove-nested-fields/283989)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 2\
**Last updated:** [September 13, 2021, 7:50pm UTC](https://discuss.elastic.co/t/ingest-pipeline-remove-nested-fields/283989 "2021-09-13T19:50:54Z")

</div>

Version 7.14 I am attempting to filter a winlogbeats stream in an ingest pipeline. One thing I want to do is strip out the whole agent tree as this is repeated in every record. Is there a way to remove "agent.\*" in one…

---

## [I recieve error on test environment but it works fine from my local machine](https://discuss.elastic.co/t/i-recieve-error-on-test-environment-but-it-works-fine-from-my-local-machine/283883)

<div class="topic-metadata">

**Author:** [@Ayat\_Elshazly](https://discuss.elastic.co/u/Ayat_Elshazly)\
**Replies:** 3\
**Last updated:** [September 13, 2021, 5:52pm UTC](https://discuss.elastic.co/t/i-recieve-error-on-test-environment-but-it-works-fine-from-my-local-machine/283883 "2021-09-13T17:52:36Z")

</div>

Hi , I am implementing Web job hosted on Azure , this web job migrate data from Sql to Elastic My Elatic URL is = "https://vpc-dev-platform-elasticsearch-bag4d33ftqb3srzritdymf4d5m.eu-west-1.es.amazonaws.com" and by t…

---

## [Slower query\_string query in elasticsearch 7.5 as compared to elasticsearch 2.4](https://discuss.elastic.co/t/slower-query-string-query-in-elasticsearch-7-5-as-compared-to-elasticsearch-2-4/282222)

<div class="topic-metadata">

**Author:** [@nishant.saini](https://discuss.elastic.co/u/nishant.saini)\
**Replies:** 8\
**Last updated:** [September 13, 2021, 5:12pm UTC](https://discuss.elastic.co/t/slower-query-string-query-in-elasticsearch-7-5-as-compared-to-elasticsearch-2-4/282222 "2021-09-13T17:12:29Z")

</div>

We have recently started migrating from elasticsearch 2.4.1 to elasticsearch 7.5.2 but have faced a major roadblock because of query performance. A query string query that used to respond in around 800ms when queried in …

---

## [Wildcard phrase search using query\_string](https://discuss.elastic.co/t/wildcard-phrase-search-using-query-string/284108)

<div class="topic-metadata">

**Author:** [@Wonder\_Garance](https://discuss.elastic.co/u/Wonder_Garance)\
**Replies:** 0\
**Last updated:** [September 13, 2021, 4:55pm UTC](https://discuss.elastic.co/t/wildcard-phrase-search-using-query-string/284108 "2021-09-13T16:55:58Z")

</div>

I use query\_string to generate phrase queries with a proximity, on Elasticsearch 7.9.3 Does query\_string work with wildcard? I found some old similar questions, there wasn't the way to do it. Here is my query: …

---

## [Heavy Bulk inserts -Read & Write performance](https://discuss.elastic.co/t/heavy-bulk-inserts-read-write-performance/284107)

<div class="topic-metadata">

**Author:** [@Vishnu\_Singhal](https://discuss.elastic.co/u/Vishnu_Singhal)\
**Replies:** 0\
**Last updated:** [September 13, 2021, 4:42pm UTC](https://discuss.elastic.co/t/heavy-bulk-inserts-read-write-performance/284107 "2021-09-13T16:42:19Z")

</div>

Hi, Im using ES 7.14.0 with 16 data hot nodes and 2 warm nodes. When I'm doing heavy inserts, there is high thread pool write active count, and sometimes I get NONodeLeftException I'm using ES-Hadoop Library with spark…

---

## [How to match by different prefixes](https://discuss.elastic.co/t/how-to-match-by-different-prefixes/284104)

<div class="topic-metadata">

**Author:** [@mydeadvictoria](https://discuss.elastic.co/u/mydeadvictoria)\
**Replies:** 0\
**Last updated:** [September 13, 2021, 4:01pm UTC](https://discuss.elastic.co/t/how-to-match-by-different-prefixes/284104 "2021-09-13T16:01:14Z")

</div>

Will try to explain what I mean by saying "different prefixes". I have a text field "Name", and I want to check (while searching) whether this field starts with some particular prefix with length varying from 3 to 5. Le…

---

## [Forcing elasticsearch cluster to run on single node in the event of failure](https://discuss.elastic.co/t/forcing-elasticsearch-cluster-to-run-on-single-node-in-the-event-of-failure/283658)

<div class="topic-metadata">

**Author:** [@preetish\_P](https://discuss.elastic.co/u/preetish_P)\
**Replies:** 3\
**Last updated:** [September 13, 2021, 3:58pm UTC](https://discuss.elastic.co/t/forcing-elasticsearch-cluster-to-run-on-single-node-in-the-event-of-failure/283658 "2021-09-13T15:58:33Z")

</div>

Hi folks, Currently we are in the process of setting up 3 node elasticsearch cluster on v7.11.2 (self-managed) using below setup : All 3 nodes will be data nodes and master eligible. We will set "index.number\_of\_repl…

---

## [Elastic pipeline compare two fields condition](https://discuss.elastic.co/t/elastic-pipeline-compare-two-fields-condition/283620)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 2\
**Last updated:** [September 13, 2021, 3:26pm UTC](https://discuss.elastic.co/t/elastic-pipeline-compare-two-fields-condition/283620 "2021-09-13T15:26:01Z")

</div>

Im trying to create a set condition if two fields are the same, ive not been able to find how to do this with the elastic pipeline ctx.dns.question.name =='{{{ctx.host.hostname}}}'

---

## [Where is the callback function executed for searchAsync method](https://discuss.elastic.co/t/where-is-the-callback-function-executed-for-searchasync-method/283674)

<div class="topic-metadata">

**Author:** [@fatcloud](https://discuss.elastic.co/u/fatcloud)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 3:07pm UTC](https://discuss.elastic.co/t/where-is-the-callback-function-executed-for-searchasync-method/283674 "2021-09-13T15:07:41Z")

</div>

Hi, I'm wondering where the callback function is executed when using searchAsync: Search API | Java REST Client \[7.14\] | Elastic Is there some thread pool for the es client?

---

## [Does ES join support composite key?](https://discuss.elastic.co/t/does-es-join-support-composite-key/283806)

<div class="topic-metadata">

**Author:** [@manjurgani](https://discuss.elastic.co/u/manjurgani)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 2:57pm UTC](https://discuss.elastic.co/t/does-es-join-support-composite-key/283806 "2021-09-13T14:57:44Z")

</div>

\--my parent document looks like below PUT example3/\_doc/9 { "userId":9999 "accountId":101, } -- PUT example3/\_doc/10 { "userId":9999 "accountId":102, } ---my child look like below PUT example3/\_doc/11 { "a…

---

## [Bad order with scripted sort and nested filter](https://discuss.elastic.co/t/bad-order-with-scripted-sort-and-nested-filter/283820)

<div class="topic-metadata">

**Author:** [@vovervova](https://discuss.elastic.co/u/vovervova)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 2:51pm UTC](https://discuss.elastic.co/t/bad-order-with-scripted-sort-and-nested-filter/283820 "2021-09-13T14:51:28Z")

</div>

Hello, I have problems. When I am using nested filter in my query sorting order breaks (without nested filters works perfect ) { "query": { "nested": { "path": "status", "query": { "bool": { …

---

## [Can I query a non-indexed field using a runtime field?](https://discuss.elastic.co/t/can-i-query-a-non-indexed-field-using-a-runtime-field/283786)

<div class="topic-metadata">

**Author:** [@shipful](https://discuss.elastic.co/u/shipful)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 2:49pm UTC](https://discuss.elastic.co/t/can-i-query-a-non-indexed-field-using-a-runtime-field/283786 "2021-09-13T14:49:11Z")

</div>

If I create a mapping that doesn't index any fields: PUT test-index/ { "mappings": { "dynamic": false } } and then add a document POST test-index/\_doc { "a": "a", "b": "b", "c": "c" } Can I then use a dy…

---

## [How to aggregate frequency count of words which exist in a field](https://discuss.elastic.co/t/how-to-aggregate-frequency-count-of-words-which-exist-in-a-field/283931)

<div class="topic-metadata">

**Author:** [@Pooya\_Pilechi](https://discuss.elastic.co/u/Pooya_Pilechi)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 2:45pm UTC](https://discuss.elastic.co/t/how-to-aggregate-frequency-count-of-words-which-exist-in-a-field/283931 "2021-09-13T14:45:20Z")

</div>

Hi. I want to evaluate frequency of terms which exist in a hashtags field of a twitter data. for example i have an index which its name is twitter . in twitter index i have a field which its name is hashtags. for ins…

---

## [Search After Pagination with sort field in Query](https://discuss.elastic.co/t/search-after-pagination-with-sort-field-in-query/283952)

<div class="topic-metadata">

**Author:** [@rahulpatwari](https://discuss.elastic.co/u/rahulpatwari)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 2:40pm UTC](https://discuss.elastic.co/t/search-after-pagination-with-sort-field-in-query/283952 "2021-09-13T14:40:42Z")

</div>

Hi, I am using search after pagination logic for deep pagination. The search query extracts documents with a specific DateTime range. { "range": { "my\_date\_t…

---

## [PostgreSQL: infinite DECLARE CURSOR when rebuilding one Elasticsearch index](https://discuss.elastic.co/t/postgresql-infinite-declare-cursor-when-rebuilding-one-elasticsearch-index/283971)

<div class="topic-metadata">

**Author:** [@Drept](https://discuss.elastic.co/u/Drept)\
**Replies:** 2\
**Last updated:** [September 13, 2021, 2:27pm UTC](https://discuss.elastic.co/t/postgresql-infinite-declare-cursor-when-rebuilding-one-elasticsearch-index/283971 "2021-09-13T14:27:26Z")

</div>

I have a number of Elasticsearch indices for millions of objects. The problem arises only with one of them that contains around 5 million objects. When I am trying to rebuild the Elasticsearch index (I am using django-e…

---

## [Elasticsearch Query on Array object with must clause is giving empty results](https://discuss.elastic.co/t/elasticsearch-query-on-array-object-with-must-clause-is-giving-empty-results/284066)

<div class="topic-metadata">

**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\
**Replies:** 1\
**Last updated:** [September 13, 2021, 2:23pm UTC](https://discuss.elastic.co/t/elasticsearch-query-on-array-object-with-must-clause-is-giving-empty-results/284066 "2021-09-13T14:23:12Z")

</div>

Hi There, I'm always getting empty results when i query the array objects with multi must clause as mentioned below Index docs: POST test/doc/1 { "name":\["Alex","Bob","Matt"\], "company":"ABC", "city":"NY" } P…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=575)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=577)
