# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=607 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 608 --- ## [Adding retry logic to java high level rest client](https://discuss.elastic.co/t/adding-retry-logic-to-java-high-level-rest-client/278950)
**Author:** [@Srinivasan\_Ramaswamy](https://discuss.elastic.co/u/Srinivasan_Ramaswamy)\ **Replies:** 0\ **Last updated:** [July 16, 2021, 11:51pm UTC](https://discuss.elastic.co/t/adding-retry-logic-to-java-high-level-rest-client/278950 "2021-07-16T23:51:05Z")
As requests over http can fail for various reasons, would it make sense to add some retry mechanism to high level rest client ? I see this : Retry Lifecycle Policy API | Java REST Client \[7.13\] | Elastic. Not sure about… --- ## [Ailed to start Elasticsearch. (code=killed, signal=KILL)](https://discuss.elastic.co/t/ailed-to-start-elasticsearch-code-killed-signal-kill/278827)
**Author:** [@Tealk](https://discuss.elastic.co/u/Tealk)\ **Replies:** 3\ **Last updated:** [July 16, 2021, 10:38pm UTC](https://discuss.elastic.co/t/ailed-to-start-elasticsearch-code-killed-signal-kill/278827 "2021-07-16T22:38:48Z")
hello i just want to move my mastodon server and i just installed Elasticsearch on a new server but i get the following error when i start it: systemctl start elasticsearch Job for elasticsearch.service failed because a… --- ## [Word Delimiter Graph Token + Synonym Graph Token](https://discuss.elastic.co/t/word-delimiter-graph-token-synonym-graph-token/278942)
**Author:** [@Kushikawa](https://discuss.elastic.co/u/Kushikawa)\ **Replies:** 0\ **Last updated:** [July 16, 2021, 7:30pm UTC](https://discuss.elastic.co/t/word-delimiter-graph-token-synonym-graph-token/278942 "2021-07-16T19:30:31Z")
I want to use a word delimiter graph token to avoid spliting terms with "+" and "-", e.g. so "3+c" doesn't change to \["3","c"\] and stays \["3+c"\]. I also want to define a list of synonyms to be applied to this field aft… --- ## [Disk usage on benchmarks](https://discuss.elastic.co/t/disk-usage-on-benchmarks/278908)
**Author:** [@zj27](https://discuss.elastic.co/u/zj27)\ **Replies:** 1\ **Last updated:** [July 16, 2021, 6:16pm UTC](https://discuss.elastic.co/t/disk-usage-on-benchmarks/278908 "2021-07-16T18:16:38Z")
Hi all, I'm studying the Elasticsearch Adhoc Benchmarks and am curious about the disk usage metrics. Why there is a huge gap between final index size (25GB) and total bytes written(313GB)? --- ## [Copy\_to field not searchable as I would expect](https://discuss.elastic.co/t/copy-to-field-not-searchable-as-i-would-expect/278727)
**Author:** [@tasslehawf](https://discuss.elastic.co/u/tasslehawf)\ **Replies:** 2\ **Last updated:** [July 16, 2021, 3:59pm UTC](https://discuss.elastic.co/t/copy-to-field-not-searchable-as-i-would-expect/278727 "2021-07-16T15:59:33Z")
Here is my index: { "settings": { "analysis": { "normalizer": { "keyword\_lowercase": { "type": "custom", "filter": \[ "lowercase", "asciifolding" … --- ## [Custom regexes.yml](https://discuss.elastic.co/t/custom-regexes-yml/278921)
**Author:** [@gentle\_ghost](https://discuss.elastic.co/u/gentle_ghost)\ **Replies:** 0\ **Last updated:** [July 16, 2021, 3:08pm UTC](https://discuss.elastic.co/t/custom-regexes-yml/278921 "2021-07-16T15:08:52Z")
Hello, Has anyone had any success/experience replacing the user agent plugin regexes.yml file with an entirely different/custom regexes.yml file? I'm curious if anyone has successfully done it and were you required to … --- ## [How to install Analysis Plugins in Azure Kubernetes version 1.91 in 3 Elasticsearch pods ver. 7.13.3 with ECK 1.6 or any other method](https://discuss.elastic.co/t/how-to-install-analysis-plugins-in-azure-kubernetes-version-1-91-in-3-elasticsearch-pods-ver-7-13-3-with-eck-1-6-or-any-other-method/278915)
**Author:** [@MarkB8](https://discuss.elastic.co/u/MarkB8)\ **Replies:** 0\ **Last updated:** [July 16, 2021, 2:44pm UTC](https://discuss.elastic.co/t/how-to-install-analysis-plugins-in-azure-kubernetes-version-1-91-in-3-elasticsearch-pods-ver-7-13-3-with-eck-1-6-or-any-other-method/278915 "2021-07-16T14:44:29Z")
Need to install plugins for APAC languages and environment is in Azure Kubernetes ver. 1.91 with Elasticsearch ver. 7.13.3 with 3 pods. (master/ingest/client). Instructions seen so far are for VMs in Azure. Analysis Pl… --- ## [Multi Search Query SQL API](https://discuss.elastic.co/t/multi-search-query-sql-api/277651)
**Author:** [@Eric\_Barreto](https://discuss.elastic.co/u/Eric_Barreto)\ **Replies:** 2\ **Last updated:** [July 16, 2021, 2:36pm UTC](https://discuss.elastic.co/t/multi-search-query-sql-api/277651 "2021-07-16T14:36:47Z")
Hi, I'm trying to send more than one sql query in the same request, but I'm having problems. I'm testing this request in Dev Tools: POST \_xpack/sql?format=csv {"query":"SELECT sourceIp, count(log\_message) AS Derrota F… --- ## [Rollover for an existing index](https://discuss.elastic.co/t/rollover-for-an-existing-index/278904)
**Author:** [@Anirudhan](https://discuss.elastic.co/u/Anirudhan)\ **Replies:** 0\ **Last updated:** [July 16, 2021, 1:10pm UTC](https://discuss.elastic.co/t/rollover-for-an-existing-index/278904 "2021-07-16T13:10:06Z")
Hi I already have an index with the size 89GB. Forgot to add all the rollups in the initial stages. How do i proceed with the rollups. Now want to create an index for each date.Is it possible to do rollups for an existi… --- ## [Query with conditional logic](https://discuss.elastic.co/t/query-with-conditional-logic/278902)
**Author:** [@Sascha\_Gerloff](https://discuss.elastic.co/u/Sascha_Gerloff)\ **Replies:** 0\ **Last updated:** [July 16, 2021, 1:00pm UTC](https://discuss.elastic.co/t/query-with-conditional-logic/278902 "2021-07-16T13:00:59Z")
Hello, I would like to build a query, whose logic depends on a specific field. For example, I have data like this: username: Name1 description: desc1 username: Name2 info: info1 I would like to build a query that m… --- ## [Elasticsearch 7.13 crash - can not start again](https://discuss.elastic.co/t/elasticsearch-7-13-crash-can-not-start-again/277427)
**Author:** [@Vladimir](https://discuss.elastic.co/u/Vladimir)\ **Replies:** 6\ **Last updated:** [July 16, 2021, 11:26am UTC](https://discuss.elastic.co/t/elasticsearch-7-13-crash-can-not-start-again/277427 "2021-07-16T11:26:33Z")
Hi there, I have Elastic + Kiabana + Logstash + Filebeat installed on Ubuntu 20.04 server. Yesterday everything worked fine together. I happily wrote requests in Kibana console. Today morning I tried to open Kibana but… --- ## [Found in Full-text search scenario，ES 7 slow than ES 5](https://discuss.elastic.co/t/found-in-full-text-search-scenario-es-7-slow-than-es-5/278065)
**Author:** [@zfaster](https://discuss.elastic.co/u/zfaster)\ **Replies:** 4\ **Last updated:** [July 16, 2021, 11:00am UTC](https://discuss.elastic.co/t/found-in-full-text-search-scenario-es-7-slow-than-es-5/278065 "2021-07-16T11:00:53Z")
Planning to upgrade from ES 5.6.7 to ES7.X,； During the test, the index data in ES5 was migrated to ES7, and performance comparison was performed in a specific scenario. It was found that the search time of ES7 decrease… --- ## [Not getting proper result while searching special characters in query string](https://discuss.elastic.co/t/not-getting-proper-result-while-searching-special-characters-in-query-string/278875)
**Author:** [@Madhavi](https://discuss.elastic.co/u/Madhavi)\ **Replies:** 0\ **Last updated:** [July 16, 2021, 9:55am UTC](https://discuss.elastic.co/t/not-getting-proper-result-while-searching-special-characters-in-query-string/278875 "2021-07-16T09:55:49Z")
This is my query GET /momsarchival1/\_search { "track\_total\_hits": true, "query": { "bool": { "must": \[ { "bool": { "must": \[ { "query\_string": { … --- ## [Boolean query always returns boosted score](https://discuss.elastic.co/t/boolean-query-always-returns-boosted-score/276290)
**Author:** [@stefAnger](https://discuss.elastic.co/u/stefAnger)\ **Replies:** 2\ **Last updated:** [July 16, 2021, 9:19am UTC](https://discuss.elastic.co/t/boolean-query-always-returns-boosted-score/276290 "2021-07-16T09:19:45Z")
Hi, I am trying to replace a MySQL "product search" with an elastic search. The MySQL Search is querying a single table, containing any information for both: Presenting the search results, and containing the source dat… --- ## [Multiple search term on multiple field using wild card](https://discuss.elastic.co/t/multiple-search-term-on-multiple-field-using-wild-card/278790)
**Author:** [@kurbhatt](https://discuss.elastic.co/u/kurbhatt)\ **Replies:** 0\ **Last updated:** [July 15, 2021, 1:11pm UTC](https://discuss.elastic.co/t/multiple-search-term-on-multiple-field-using-wild-card/278790 "2021-07-15T13:11:32Z")
I have working search for single search on multiple fields and wildcard(using ngram). Index creation(s-search index): { "settings": { "number\_of\_shards": 2, "number\_of\_replicas": 1, "index.mapping.coerce"… --- ## [How can I append an object in elastic array?](https://discuss.elastic.co/t/how-can-i-append-an-object-in-elastic-array/278845)
**Author:** [@Duong\_Phan](https://discuss.elastic.co/u/Duong_Phan)\ **Replies:** 1\ **Last updated:** [July 16, 2021, 8:41am UTC](https://discuss.elastic.co/t/how-can-i-append-an-object-in-elastic-array/278845 "2021-07-16T08:41:40Z")
Assume I have an index is defined like this: { "settings":{ "number\_of\_shards":1, "number\_of\_replicas":1 }, "mappings":{ "properties":{ "name":{ "type":"te… --- ## [SQL translates to wrong DSL query](https://discuss.elastic.co/t/sql-translates-to-wrong-dsl-query/278211)
**Author:** [@shivmgs](https://discuss.elastic.co/u/shivmgs)\ **Replies:** 4\ **Last updated:** [July 16, 2021, 8:39am UTC](https://discuss.elastic.co/t/sql-translates-to-wrong-dsl-query/278211 "2021-07-16T08:39:57Z")
We have a field company\_name of type text. For the same field, we have additional .raw field - company\_name.raw which is a keyword field. For the following SQL query, search on company\_name { "query": "SELECT \\"com… --- ## [Index Pattern to see multiple indices (named differently)](https://discuss.elastic.co/t/index-pattern-to-see-multiple-indices-named-differently/278685)
**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\ **Replies:** 3\ **Last updated:** [July 16, 2021, 8:39am UTC](https://discuss.elastic.co/t/index-pattern-to-see-multiple-indices-named-differently/278685 "2021-07-16T08:39:03Z")
We have 3 indices that are not named consistently, and we'd like a new index pattern that will allow queries to all three indices. Without renaming the existing indices, is there a good way to allow 3 index patterns insi… --- ## [Template not applied](https://discuss.elastic.co/t/template-not-applied/278757)
**Author:** [@anthonyrichir](https://discuss.elastic.co/u/anthonyrichir)\ **Replies:** 2\ **Last updated:** [July 16, 2021, 8:07am UTC](https://discuss.elastic.co/t/template-not-applied/278757 "2021-07-16T08:07:12Z")
Hello, I have several pipelines running in a Logstash, they read messages from queues on a RabbitMQ and output those messages in rolling indices in an Elasticsearch. For those indices, I have templates matching my inde… --- ## [Script-src 'unsafe-eval' 'self' Error](https://discuss.elastic.co/t/script-src-unsafe-eval-self-error/278857)
**Author:** [@iraviguggilam](https://discuss.elastic.co/u/iraviguggilam)\ **Replies:** 0\ **Last updated:** [July 16, 2021, 5:27am UTC](https://discuss.elastic.co/t/script-src-unsafe-eval-self-error/278857 "2021-07-16T05:27:42Z")
I'm using elastic search URL in angular application through iframe and getting below error. "Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'unsafe-eval… --- ## [Elasticsearch fails to start on Ubuntu nodes, other issues](https://discuss.elastic.co/t/elasticsearch-fails-to-start-on-ubuntu-nodes-other-issues/278599)
**Author:** [@bigheadred](https://discuss.elastic.co/u/bigheadred)\ **Replies:** 3\ **Last updated:** [July 16, 2021, 1:45am UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-on-ubuntu-nodes-other-issues/278599 "2021-07-16T01:45:33Z")
Hi, I've got a 3 node Elastic stack (each VM runs Elasticsearch and Logstash, one runs Elasticsearch, Logstash, and Kibana) set up on Microsoft Azure VM's, using Ubuntu 20.04. Recently, my elasticsearch cluster has bee… --- ## [Convert Long to Strings](https://discuss.elastic.co/t/convert-long-to-strings/278831)
**Author:** [@valleram](https://discuss.elastic.co/u/valleram)\ **Replies:** 1\ **Last updated:** [July 15, 2021, 10:28pm UTC](https://discuss.elastic.co/t/convert-long-to-strings/278831 "2021-07-15T22:28:03Z")
Hi There, I have a field of type Long (i.e 4,277,534,720 ) which is a representation of memory heap usage in bytes, of one application. I've created a visualization using this field, but I need to convert that field in… --- ## [Delete document from index based on log type](https://discuss.elastic.co/t/delete-document-from-index-based-on-log-type/278832)
**Author:** [@srk1](https://discuss.elastic.co/u/srk1)\ **Replies:** 2\ **Last updated:** [July 15, 2021, 9:06pm UTC](https://discuss.elastic.co/t/delete-document-from-index-based-on-log-type/278832 "2021-07-15T21:06:32Z")
Hello ES users, I am trying to explore an option to delete certain type of logs from ES index without deleting the whole index. For example, DEBUG type logs doesn't need to be retained for longer period compared to IN… --- ## [Action \[indices:admin/auto\_create\] is unauthorized for API key id \[-#########\] of user \[elastic/fleet-server\] on indices \[metricbeat-#######\]](https://discuss.elastic.co/t/action-indices-admin-auto-create-is-unauthorized-for-api-key-id-of-user-elastic-fleet-server-on-indices-metricbeat/278825)
**Author:** [@tcaudill](https://discuss.elastic.co/u/tcaudill)\ **Replies:** 2\ **Last updated:** [July 15, 2021, 8:08pm UTC](https://discuss.elastic.co/t/action-indices-admin-auto-create-is-unauthorized-for-api-key-id-of-user-elastic-fleet-server-on-indices-metricbeat/278825 "2021-07-15T20:08:01Z")
I'm seeing errors like this one in the logs of some of my fleet managed elastic-agents. After doing some testing, it looks like I'm not getting all of the log data that I should be getting. For example, on my Windows D… --- ## [Testing Match query to fail, but returns docs, although they do not match](https://discuss.elastic.co/t/testing-match-query-to-fail-but-returns-docs-although-they-do-not-match/278780)
**Author:** [@tesh](https://discuss.elastic.co/u/tesh)\ **Replies:** 3\ **Last updated:** [July 15, 2021, 7:36pm UTC](https://discuss.elastic.co/t/testing-match-query-to-fail-but-returns-docs-although-they-do-not-match/278780 "2021-07-15T19:36:30Z")
Hi Team, first post here and hope you guys can help me stop going round and round! :wink: It's java code using elastic libs/methods I'm trying to look for a string in a field - eg, ":21:test123blah" and expecting it to… --- ## [Data node with high os cpu usage but low process cpu usage in aws kubernetes](https://discuss.elastic.co/t/data-node-with-high-os-cpu-usage-but-low-process-cpu-usage-in-aws-kubernetes/278733)
**Author:** [@junhuangli](https://discuss.elastic.co/u/junhuangli)\ **Replies:** 6\ **Last updated:** [July 15, 2021, 5:52pm UTC](https://discuss.elastic.co/t/data-node-with-high-os-cpu-usage-but-low-process-cpu-usage-in-aws-kubernetes/278733 "2021-07-15T17:52:48Z")
We are hosting elasticsearch cluster on the aws kubernetes. The cluster has 5 master nodes, 37 data nodes and 10 coordinate nodes. We request/limit \[memory: 64G\]\[cpu: 25\]for the kubernete container and give 30G memory t… --- ## [ELasticsearch 7.9.1 won't start](https://discuss.elastic.co/t/elasticsearch-7-9-1-wont-start/278808)
**Author:** [@Barry\_Dupont](https://discuss.elastic.co/u/Barry_Dupont)\ **Replies:** 0\ **Last updated:** [July 15, 2021, 2:39pm UTC](https://discuss.elastic.co/t/elasticsearch-7-9-1-wont-start/278808 "2021-07-15T14:39:29Z")
My problem is that ELasticsearch won't start, so i checked log /var/log/elasticsearch/elasticsearch.log and I Got an error concerning 'Lucene\_87 missing' Caused by: java.lang.IllegalArgumentException: An SPI class of … --- ## [How to create a watcher alert if a specific service goes down on a system which is monitored using metricbeat agent?](https://discuss.elastic.co/t/how-to-create-a-watcher-alert-if-a-specific-service-goes-down-on-a-system-which-is-monitored-using-metricbeat-agent/278464)
**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\ **Replies:** 4\ **Last updated:** [July 15, 2021, 2:34pm UTC](https://discuss.elastic.co/t/how-to-create-a-watcher-alert-if-a-specific-service-goes-down-on-a-system-which-is-monitored-using-metricbeat-agent/278464 "2021-07-15T14:34:31Z")
I have few systems on which I have metricbeat v7.12.1 installed. How can I configure the watcher alert to send me an email if the service called testservice.exe goes down on server A? --- ## [Aggregate combinations of nested documents](https://discuss.elastic.co/t/aggregate-combinations-of-nested-documents/278796)
**Author:** [@Andy\_Gout](https://discuss.elastic.co/u/Andy_Gout)\ **Replies:** 0\ **Last updated:** [July 15, 2021, 1:52pm UTC](https://discuss.elastic.co/t/aggregate-combinations-of-nested-documents/278796 "2021-07-15T13:52:49Z")
Using Elasticsearch, I would like to aggregate combinations of nested documents. Take a hypothetical index of movie data with these mappings: { mappings: { properties: { title: { type: 'keyword' }, peop… --- ## [Same level script aggregation](https://discuss.elastic.co/t/same-level-script-aggregation/278631)
**Author:** [@Ivan\_Janev](https://discuss.elastic.co/u/Ivan_Janev)\ **Replies:** 2\ **Last updated:** [July 15, 2021, 1:16pm UTC](https://discuss.elastic.co/t/same-level-script-aggregation/278631 "2021-07-15T13:16:15Z")
I'm wondering if it is possible to do a same level script aggregation in ES. Let's say I have 2 fields in my documents sales and spend. This is the result I want to achieve: { "size": 0, "query": { "match\_all": … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=606) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=608)