# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=593 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 594 --- ## [Questions About Elasticsearch](https://discuss.elastic.co/t/questions-about-elasticsearch/281266)
**Author:** [@Jared9922](https://discuss.elastic.co/u/Jared9922)\ **Replies:** 2\ **Last updated:** [August 12, 2021, 9:45pm UTC](https://discuss.elastic.co/t/questions-about-elasticsearch/281266 "2021-08-12T21:45:21Z")
Hello I just had some quick questions on Elasticsearch that have to do with network configuration. My first question is this, can you send data to Elasticsearch using the default .yml settings? For example if Elasticse… --- ## [ILM Create indices with a date pattern in their name](https://discuss.elastic.co/t/ilm-create-indices-with-a-date-pattern-in-their-name/281256)
**Author:** [@robertknutzen](https://discuss.elastic.co/u/robertknutzen)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 7:59pm UTC](https://discuss.elastic.co/t/ilm-create-indices-with-a-date-pattern-in-their-name/281256 "2021-08-12T19:59:39Z")
I am attempting to migrate a logstash cluster that has been running since dinosaurs roamed the earth to use ILM. We use curator to manage our hot/warm indices and only delete data manually with human approval. I only r… --- ## [Is it possible to set default number of replicas in elasticsearch](https://discuss.elastic.co/t/is-it-possible-to-set-default-number-of-replicas-in-elasticsearch/281215)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 8:44pm UTC](https://discuss.elastic.co/t/is-it-possible-to-set-default-number-of-replicas-in-elasticsearch/281215 "2021-08-12T20:44:19Z")
hello, Mine is a single node set up , and hence no replicas are assigned (i think ?) . Is it possible to set default replica number as 0 in elasticsearch.yml ? GET /\_cat/allocation?v shards disk.indices disk.used d… --- ## [Boolean Query causing server to crash without error message](https://discuss.elastic.co/t/boolean-query-causing-server-to-crash-without-error-message/281260)
**Author:** [@cstone1492](https://discuss.elastic.co/u/cstone1492)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 8:11pm UTC](https://discuss.elastic.co/t/boolean-query-causing-server-to-crash-without-error-message/281260 "2021-08-12T20:11:06Z")
Hi, I am using version 7.3. A boolean query I'm running (see code below) in a python script is causing the server script to crash without producing any form of error message. The query is within a for-loop, and the crash… --- ## [Painless Access array object](https://discuss.elastic.co/t/painless-access-array-object/281253)
**Author:** [@Aaish\_Sindwani](https://discuss.elastic.co/u/Aaish_Sindwani)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 7:28pm UTC](https://discuss.elastic.co/t/painless-access-array-object/281253 "2021-08-12T19:28:28Z")
HI Team, I am trying to access an array object within the source in the painless script but I am not able to with the error "failed\_shards" : \[ { "shard" : 0, "index" : "boxIndex", "node" … --- ## [Elasticsearch regexp for all fields](https://discuss.elastic.co/t/elasticsearch-regexp-for-all-fields/281237)
**Author:** [@ChinigamiHunter](https://discuss.elastic.co/u/ChinigamiHunter)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 5:26pm UTC](https://discuss.elastic.co/t/elasticsearch-regexp-for-all-fields/281237 "2021-08-12T17:26:02Z")
I need to write query to find regexp match any fields. i write a regexp match one field (laravel). $params = \[ 'index' =\> 'index', 'type' =\> '\_doc', 'body' =\> \[ … --- ## [Match phrase any query in elastic search](https://discuss.elastic.co/t/match-phrase-any-query-in-elastic-search/281236)
**Author:** [@vradder](https://discuss.elastic.co/u/vradder)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 5:25pm UTC](https://discuss.elastic.co/t/match-phrase-any-query-in-elastic-search/281236 "2021-08-12T17:25:05Z")
match phrase query will match full phrase. match phrase prefix query will match phrase as prefix. ex: "my\_field": "confidence ab" will match "confidence above" and "confidence about". is there query for "match phrase… --- ## [Store.size is not equal to (primary count + replica count) \* pri.store.size](https://discuss.elastic.co/t/store-size-is-not-equal-to-primary-count-replica-count-pri-store-size/281190)
**Author:** [@Stanislav\_Livotov](https://discuss.elastic.co/u/Stanislav_Livotov)\ **Replies:** 3\ **Last updated:** [August 12, 2021, 4:15pm UTC](https://discuss.elastic.co/t/store-size-is-not-equal-to-primary-count-replica-count-pri-store-size/281190 "2021-08-12T16:15:15Z")
Hi all, I have index configuration, with just 1 shard, 1 primary and 1 replica. When I’m invoking \_cat/indices I’m expecting to see that my store.size will be equal to 2 \*pri.store.size, however it is not so. health s… --- ## ['Intelligently' cutting out results](https://discuss.elastic.co/t/intelligently-cutting-out-results/281194)
**Author:** [@slawosz](https://discuss.elastic.co/u/slawosz)\ **Replies:** 3\ **Last updated:** [August 12, 2021, 3:27pm UTC](https://discuss.elastic.co/t/intelligently-cutting-out-results/281194 "2021-08-12T15:27:04Z")
Hi, lets say I have products with serial numbers, and format is FOO-XXXXX where FOO is always there and XXXXX are digits. When I search for FOO-12345, the results are showing all products, for example (score in bracket… --- ## [SEO friendly URLs in React](https://discuss.elastic.co/t/seo-friendly-urls-in-react/281217)
**Author:** [@xubisid](https://discuss.elastic.co/u/xubisid)\ **Replies:** 2\ **Last updated:** [August 12, 2021, 2:40pm UTC](https://discuss.elastic.co/t/seo-friendly-urls-in-react/281217 "2021-08-12T14:40:41Z")
\#Hi, Can someone please share the sample in which our facets/filters will work on behalf of the SEO friendly URLs instead of the following URL http://localhost:3000/?size=n\_20\_n&filters\[0\]\[field\]=store&filters\[0\]\[value… --- ## [Ansible Playbook - cluster.remote.connect Understanding and cross-cluster replication](https://discuss.elastic.co/t/ansible-playbook-cluster-remote-connect-understanding-and-cross-cluster-replication/281216)
**Author:** [@jthart](https://discuss.elastic.co/u/jthart)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 2:23pm UTC](https://discuss.elastic.co/t/ansible-playbook-cluster-remote-connect-understanding-and-cross-cluster-replication/281216 "2021-08-12T14:23:10Z")
I have an elasticsearch deployment consisting of one cluster, and I want to create a second cluster for a primary/secondary setup with cross-cluster replication. Is there something I can be pointed to to understand all o… --- ## [ILM rollover for "Logstash Elasticsearch output plugin"](https://discuss.elastic.co/t/ilm-rollover-for-logstash-elasticsearch-output-plugin/281176)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 6\ **Last updated:** [August 12, 2021, 12:00pm UTC](https://discuss.elastic.co/t/ilm-rollover-for-logstash-elasticsearch-output-plugin/281176 "2021-08-12T12:00:13Z")
Hello My logstash code uses the elasticsearch output plugin to ingest docs into elasticsearch . However the index size tends to get larger in size , i came across ILM concepts in the elasticsearch documents, that says t… --- ## [How to use aggregate in inner hits](https://discuss.elastic.co/t/how-to-use-aggregate-in-inner-hits/281195)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 11:22am UTC](https://discuss.elastic.co/t/how-to-use-aggregate-in-inner-hits/281195 "2021-08-12T11:22:49Z")
Hello friends Is it possible to use aggregation in inner hits? If so, how? --- ## [Getting error while starting elastic](https://discuss.elastic.co/t/getting-error-while-starting-elastic/281108)
**Author:** [@Faizan\_Khurshid](https://discuss.elastic.co/u/Faizan_Khurshid)\ **Replies:** 3\ **Last updated:** [August 12, 2021, 10:24am UTC](https://discuss.elastic.co/t/getting-error-while-starting-elastic/281108 "2021-08-12T10:24:17Z")
Hi Folk I am new to ELK , i was trying to install ELK on centos 8.4 below is my error when i was trying to start sudo systemctl start elasticsearch \[root@ ~\]# systemctl status elasticsearch.service ● elasticsearch.… --- ## [Elasticsearch kibana](https://discuss.elastic.co/t/elasticsearch-kibana/281151)
**Author:** [@Dilnawaz\_Khan](https://discuss.elastic.co/u/Dilnawaz_Khan)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 9:29am UTC](https://discuss.elastic.co/t/elasticsearch-kibana/281151 "2021-08-12T09:29:55Z")
Hello I have 2 master nodes of elasticsearch and 3 data nodes and one seprate node is for kibana Now I have a question if I give host ip of those 2 master node in kibana.yml file then where do I need to configure those … --- ## [Max aggregation on .keyword field with both string and number values](https://discuss.elastic.co/t/max-aggregation-on-keyword-field-with-both-string-and-number-values/281168)
**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 8:16am UTC](https://discuss.elastic.co/t/max-aggregation-on-keyword-field-with-both-string-and-number-values/281168 "2021-08-12T08:16:27Z")
Hi, I've a quite common situation: I've an index for products with a barcode field: "barcode": { "type": "text", "fields": { "ngram": { "type": "tex… --- ## [ELK cluster is not stable due to several issues related to shards and JVM configuration](https://discuss.elastic.co/t/elk-cluster-is-not-stable-due-to-several-issues-related-to-shards-and-jvm-configuration/281059)
**Author:** [@Dawood](https://discuss.elastic.co/u/Dawood)\ **Replies:** 2\ **Last updated:** [August 12, 2021, 6:25am UTC](https://discuss.elastic.co/t/elk-cluster-is-not-stable-due-to-several-issues-related-to-shards-and-jvm-configuration/281059 "2021-08-12T06:25:42Z")
Hi, First it is not the first time i am sharing the issues that i am encountering and hopefully this time somebody will help me with that !!! So i have an ELK cluster that is running on premise on a rancher k8s based … --- ## [How to re run the failed transform job for that specific failed duration?](https://discuss.elastic.co/t/how-to-re-run-the-failed-transform-job-for-that-specific-failed-duration/281085)
**Author:** [@Mojahid\_Ahmad](https://discuss.elastic.co/u/Mojahid_Ahmad)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 5:23am UTC](https://discuss.elastic.co/t/how-to-re-run-the-failed-transform-job-for-that-specific-failed-duration/281085 "2021-08-12T05:23:17Z")
I have created one transform job, so the incoming document is passed to transform job and do aggregation, and then it gets ingested into a new index. It was running fine until I see the error failed to gather field map… --- ## [Setup Elasticsearch cluster result in two clusers](https://discuss.elastic.co/t/setup-elasticsearch-cluster-result-in-two-clusers/281135)
**Author:** [@Benli](https://discuss.elastic.co/u/Benli)\ **Replies:** 3\ **Last updated:** [August 12, 2021, 3:22am UTC](https://discuss.elastic.co/t/setup-elasticsearch-cluster-result-in-two-clusers/281135 "2021-08-12T03:22:35Z")
Hi there, I'm setting up Elasticsearch cluster by using two separate Linux machines. On the first Linux, elasticsearch.yml: # ---------------------------------- Cluster ----------------------------------- cluster.name:… --- ## [Update fileds in \_source by ES update api , when success, all data of stored\_fields are missing](https://discuss.elastic.co/t/update-fileds-in-source-by-es-update-api-when-success-all-data-of-stored-fields-are-missing/280896)
**Author:** [@jiangnanxue21](https://discuss.elastic.co/u/jiangnanxue21)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 1:48am UTC](https://discuss.elastic.co/t/update-fileds-in-source-by-es-update-api-when-success-all-data-of-stored-fields-are-missing/280896 "2021-08-12T01:48:21Z")
Update fileds in \_source by ES update api , when success, all data of stored\_fields are missing, and I am confused about that....What is the internal mechanism？ --- ## [Too\_many\_clauses but only with ip field type and ip\_range search values?](https://discuss.elastic.co/t/too-many-clauses-but-only-with-ip-field-type-and-ip-range-search-values/281133)
**Author:** [@philosobyte](https://discuss.elastic.co/u/philosobyte)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 1:05am UTC](https://discuss.elastic.co/t/too-many-clauses-but-only-with-ip-field-type-and-ip-range-search-values/281133 "2021-08-12T01:05:35Z")
Hello, We are running into a too\_many\_clauses failure when using a terms query inside a filter context, but only when the target field has type ip and when the search values are CIDRs. Here's an example: PUT /test-ind… --- ## [Why do N-gram Tokenizers don't treat + (plus) characters as part of a token?](https://discuss.elastic.co/t/why-do-n-gram-tokenizers-dont-treat-plus-characters-as-part-of-a-token/281096)
**Author:** [@ssephillip](https://discuss.elastic.co/u/ssephillip)\ **Replies:** 1\ **Last updated:** [August 11, 2021, 4:38pm UTC](https://discuss.elastic.co/t/why-do-n-gram-tokenizers-dont-treat-plus-characters-as-part-of-a-token/281096 "2021-08-11T16:38:11Z")
Hello everyone, I have a few questions about the behavior of the N-Gram Tokenizer. I am relatively new to this forum, so please forgive me if I'm asking this question in a wrong way. I created my own custom tokenizer … --- ## [Sql query return is empty](https://discuss.elastic.co/t/sql-query-return-is-empty/281092)
**Author:** [@Christophe\_Dumont](https://discuss.elastic.co/u/Christophe_Dumont)\ **Replies:** 1\ **Last updated:** [August 11, 2021, 4:24pm UTC](https://discuss.elastic.co/t/sql-query-return-is-empty/281092 "2021-08-11T16:24:50Z")
I would like to make a query to retrieve the records of the 'layers' column (index name = ids) When i run this command : GET /\_sql?format=txt { "query": "DESCRIBE ids" } it's ok column | type … --- ## [Date range filter not returning match if doc\_values is false](https://discuss.elastic.co/t/date-range-filter-not-returning-match-if-doc-values-is-false/281089)
**Author:** [@AMAirfree](https://discuss.elastic.co/u/AMAirfree)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 2:30pm UTC](https://discuss.elastic.co/t/date-range-filter-not-returning-match-if-doc-values-is-false/281089 "2021-08-11T14:30:49Z")
Hello ! I've been confronted to a problem with one of my queries since upgrading my ElasticSearch version to 7.14. I'm filtering nested objects containing a date property, it used to work correctly but ever since the u… --- ## [Searches with two or more words?](https://discuss.elastic.co/t/searches-with-two-or-more-words/281088)
**Author:** [@Sebastian\_Marroquin](https://discuss.elastic.co/u/Sebastian_Marroquin)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 2:28pm UTC](https://discuss.elastic.co/t/searches-with-two-or-more-words/281088 "2021-08-11T14:28:14Z")
Hi Devs, I need help with something about elasticsearch. I have a database full of products related to electronics and computers. I'm using elasticsearch but when I want to do a search like "Dell Laptop" it doesn't ret… --- ## [Query to find if a field exists in last 7 hours](https://discuss.elastic.co/t/query-to-find-if-a-field-exists-in-last-7-hours/281056)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 8\ **Last updated:** [August 11, 2021, 2:20pm UTC](https://discuss.elastic.co/t/query-to-find-if-a-field-exists-in-last-7-hours/281056 "2021-08-11T14:20:44Z")
I am trying to find documents containing opsgenieAction:create in the last 7 hours. I constructed the following query but somehow the result is not as expected. can someone help to find what is wrong here? Query : GET… --- ## [Requesting help with synonym's combined with a query string](https://discuss.elastic.co/t/requesting-help-with-synonyms-combined-with-a-query-string/281066)
**Author:** [@BramFr](https://discuss.elastic.co/u/BramFr)\ **Replies:** 4\ **Last updated:** [August 11, 2021, 1:57pm UTC](https://discuss.elastic.co/t/requesting-help-with-synonyms-combined-with-a-query-string/281066 "2021-08-11T13:57:19Z")
Hi everybody, Just stepping in to the world of ES so I'm sorry if I am a bit of a newbie. Currently I'm stuck at a point in ES and I can't seem to find an awser online, perhaps one of you could be of assistance. What … --- ## [How to select or return specific part from Split ingest pipeline](https://discuss.elastic.co/t/how-to-select-or-return-specific-part-from-split-ingest-pipeline/280146)
**Author:** [@Mojahid\_Ahmad](https://discuss.elastic.co/u/Mojahid_Ahmad)\ **Replies:** 7\ **Last updated:** [August 11, 2021, 1:52pm UTC](https://discuss.elastic.co/t/how-to-select-or-return-specific-part-from-split-ingest-pipeline/280146 "2021-08-11T13:52:19Z")
I have created one split ingest pipeline, it is working fine. But I want to return only the first part of the text. GET \_ingest/pipeline/\_simulate { "pipeline":{ "processors":\[ { "split":{ "fi… --- ## ["Should" is not working in DSL](https://discuss.elastic.co/t/should-is-not-working-in-dsl/281063)
**Author:** [@tarekilani](https://discuss.elastic.co/u/tarekilani)\ **Replies:** 7\ **Last updated:** [August 11, 2021, 1:46pm UTC](https://discuss.elastic.co/t/should-is-not-working-in-dsl/281063 "2021-08-11T13:46:16Z")
Hello, I'm querying elasticsearch using DSL in "dev tools". I have the following code : "query": { "bool" : { "must": \[ {"range": { "@timestamp": { "gte": "now-10m/… --- ## [Unable to configure security in Stack 7.14.0](https://discuss.elastic.co/t/unable-to-configure-security-in-stack-7-14-0/281074)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 1:26pm UTC](https://discuss.elastic.co/t/unable-to-configure-security-in-stack-7-14-0/281074 "2021-08-11T13:26:02Z")
I have been able to get 7.14.0 installed and running in my test environment. I have ElasticSearch, Kibana and Logstash installed. If I do not make any changes to the yml files I can start and access Kibana, although I … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=592) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=594)