# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=623 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 624 --- ## [Aggregate Query Results](https://discuss.elastic.co/t/aggregate-query-results/276570)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 5\ **Last updated:** [June 22, 2021, 10:39am UTC](https://discuss.elastic.co/t/aggregate-query-results/276570 "2021-06-22T10:39:15Z")
I am fetching timestamp and data against that timestamp with my search query to Elasticsearch node. The result being fetched contains multiple values against the same timeframe and I want Elasticsearch to return the aggr… --- ## [Elasticsearch-py urllib3 suppress traceback logs on connection failures](https://discuss.elastic.co/t/elasticsearch-py-urllib3-suppress-traceback-logs-on-connection-failures/276561)
**Author:** [@jratliff](https://discuss.elastic.co/u/jratliff)\ **Replies:** 0\ **Last updated:** [June 21, 2021, 3:49pm UTC](https://discuss.elastic.co/t/elasticsearch-py-urllib3-suppress-traceback-logs-on-connection-failures/276561 "2021-06-21T15:49:00Z")
client = Elasticsearch( hosts=config\['hosts'\], http\_auth=(config\['auth'\]\['user'\], config\['auth'\]\['password'\]), scheme='https', ssl\_context=context, time… --- ## [Are you aware of uncomptability between hibernate-enhance-maven-plugin and elasticsearch?](https://discuss.elastic.co/t/are-you-aware-of-uncomptability-between-hibernate-enhance-maven-plugin-and-elasticsearch/276574)
**Author:** [@guigui0824](https://discuss.elastic.co/u/guigui0824)\ **Replies:** 1\ **Last updated:** [June 22, 2021, 7:53am UTC](https://discuss.elastic.co/t/are-you-aware-of-uncomptability-between-hibernate-enhance-maven-plugin-and-elasticsearch/276574 "2021-06-22T07:53:34Z")
Hi, i work on a spring-boot project (version 2.3.8.RELEASE) with Hibernate (version 5.4.27.Final) and elasticsearch (spring-boot-starter-data-elasticsearch). I want to enable bytecode enhancement lazy loading to increas… --- ## [Buy x-pack license for Elasticsearch v5.4](https://discuss.elastic.co/t/buy-x-pack-license-for-elasticsearch-v5-4/276482)
**Author:** [@Srikanth\_Madiri](https://discuss.elastic.co/u/Srikanth_Madiri)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 5:34am UTC](https://discuss.elastic.co/t/buy-x-pack-license-for-elasticsearch-v5-4/276482 "2021-06-22T05:34:29Z")
Hello, We're using elasticsearch 5.4 version with xpack plugin installed. As we see the license usually expires after trial period, we now have to buy the x-pack license. Can you please provide more steps/insights on ho… --- ## [How to restore index data if I remove all my master nodes accidentally!](https://discuss.elastic.co/t/how-to-restore-index-data-if-i-remove-all-my-master-nodes-accidentally/275109)
**Author:** [@Hiren\_Loong](https://discuss.elastic.co/u/Hiren_Loong)\ **Replies:** 8\ **Last updated:** [June 22, 2021, 3:42am UTC](https://discuss.elastic.co/t/how-to-restore-index-data-if-i-remove-all-my-master-nodes-accidentally/275109 "2021-06-22T03:42:15Z")
There are 3 master nodes and 6 data nodes in my ES Cluster. ES version is 6.7.x. I delete virtual machines accidentally, so 3 master nodes are disappeared forever! But my 6 data nodes are still on. Is any possible to … --- ## [Spark-connector read and write es using ssl with the certificate of pem format](https://discuss.elastic.co/t/spark-connector-read-and-write-es-using-ssl-with-the-certificate-of-pem-format/276594)
**Author:** [@Min\_Zhao](https://discuss.elastic.co/u/Min_Zhao)\ **Replies:** 0\ **Last updated:** [June 22, 2021, 1:33am UTC](https://discuss.elastic.co/t/spark-connector-read-and-write-es-using-ssl-with-the-certificate-of-pem-format/276594 "2021-06-22T01:33:19Z")
The es using ssl by PEM certificate, how to set configs to spark-connector, therer are the java client configs below. --- ## [Grouping of alerts from different sources using machine learning](https://discuss.elastic.co/t/grouping-of-alerts-from-different-sources-using-machine-learning/276565)
**Author:** [@amitsaxena0709](https://discuss.elastic.co/u/amitsaxena0709)\ **Replies:** 0\ **Last updated:** [June 21, 2021, 4:30pm UTC](https://discuss.elastic.co/t/grouping-of-alerts-from-different-sources-using-machine-learning/276565 "2021-06-21T16:30:53Z")
Hi all, Can Elasticsearch alone or with others tools in the Elastic ecosystem intelligently group alerts from multiple sources based some criteria using machine learning? As an example, consider a scenario where if dat… --- ## [Elasticsearch Cluster Status red and Incides status red without error and reason](https://discuss.elastic.co/t/elasticsearch-cluster-status-red-and-incides-status-red-without-error-and-reason/276513)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 3\ **Last updated:** [June 22, 2021, 12:50am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-status-red-and-incides-status-red-without-error-and-reason/276513 "2021-06-22T00:50:55Z")
Hi everyone, My problem is some indices have red status without reason. ENV: Elasticsearch 7.9.0 Centos 7 Clustering 4 node (3 data-master Node + 1 Coordinator Node) Using logstash to parsing data and using elasticse… --- ## [\nter\>nginx\tity Too Large\\d\>bana response: invalid character '\<' looking for beginning of value. Response: \](https://discuss.elastic.co/t/html-nter-nginx-center-tity-too-large-h1-center-d-bana-response-invalid-character-looking-for-beginning-of-value-response-html/276550)
**Author:** [@gavinmathias](https://discuss.elastic.co/u/gavinmathias)\ **Replies:** 2\ **Last updated:** [June 21, 2021, 10:05pm UTC](https://discuss.elastic.co/t/html-nter-nginx-center-tity-too-large-h1-center-d-bana-response-invalid-character-looking-for-beginning-of-value-response-html/276550 "2021-06-21T22:05:34Z")
Seeing this error when running filebeat -e setup. Any hints on how to troubleshoot this? Index setup finished. Loading dashboards (Kibana must be running and reachable) 2021-06-21T13:19:14.860Z INFO kibana/client.go:119… --- ## [Is there a way to do msearch operations with ESRally?](https://discuss.elastic.co/t/is-there-a-way-to-do-msearch-operations-with-esrally/276579)
**Author:** [@sanoj85](https://discuss.elastic.co/u/sanoj85)\ **Replies:** 1\ **Last updated:** [June 21, 2021, 9:29pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-do-msearch-operations-with-esrally/276579 "2021-06-21T21:29:30Z")
Like the title says. I was using the regular search operations in benchmark, but was considering switching to msearch. I know it is not in the documentation spec, but is there a way to emulate it, or is it on the way in … --- ## [Automatic setting of read\_only\_allow\_delete](https://discuss.elastic.co/t/automatic-setting-of-read-only-allow-delete/276525)
**Author:** [@kfehrenbach](https://discuss.elastic.co/u/kfehrenbach)\ **Replies:** 2\ **Last updated:** [June 21, 2021, 8:09pm UTC](https://discuss.elastic.co/t/automatic-setting-of-read-only-allow-delete/276525 "2021-06-21T20:09:06Z")
We're running elasticsearch version 6.8.8 and 7.7. In both clusters we observed the bahaviour, that the cluster is setting the parameter read\_only\_allow\_delete to true as soon as the fllod stage is reached for some of th… --- ## [ECS fields for Postfix?](https://discuss.elastic.co/t/ecs-fields-for-postfix/276284)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 1\ **Last updated:** [June 21, 2021, 8:06pm UTC](https://discuss.elastic.co/t/ecs-fields-for-postfix/276284 "2021-06-21T20:06:58Z")
Initially in response to My Elastic Stack Observability Wishlist - #5 by weltenwort, but I think this really is it's own topic. Are there ECS fields for Postfix logs? Or, rather, how would you break out postfix log mess… --- ## [Phrase Suggester doesn't work with short prefixes?](https://discuss.elastic.co/t/phrase-suggester-doesnt-work-with-short-prefixes/276569)
**Author:** [@sabetai](https://discuss.elastic.co/u/sabetai)\ **Replies:** 0\ **Last updated:** [June 21, 2021, 5:56pm UTC](https://discuss.elastic.co/t/phrase-suggester-doesnt-work-with-short-prefixes/276569 "2021-06-21T17:56:49Z")
I'm trying to implement simple auto-complete where entering the prefix of a phrase will retrieve auto-complete suggestions (ie for phrase size of 3-5). However, the Phrase Suggester often doesn't yield results until the … --- ## [To much results](https://discuss.elastic.co/t/to-much-results/276572)
**Author:** [@Joni94](https://discuss.elastic.co/u/Joni94)\ **Replies:** 0\ **Last updated:** [June 21, 2021, 6:34pm UTC](https://discuss.elastic.co/t/to-much-results/276572 "2021-06-21T18:34:59Z")
My problem first of all i try this query: GET /index/\_search { "query": { "simple\_query\_string": { "query": "(\\"cheaper+than,+therapy\\")", "analyzer": "standard", "flags": "OR|AND", … --- ## [How to multiply score of shouldClause and mustClause in booleanQuery?](https://discuss.elastic.co/t/how-to-multiply-score-of-shouldclause-and-mustclause-in-booleanquery/276566)
**Author:** [@lunablessing](https://discuss.elastic.co/u/lunablessing)\ **Replies:** 0\ **Last updated:** [June 21, 2021, 5:12pm UTC](https://discuss.elastic.co/t/how-to-multiply-score-of-shouldclause-and-mustclause-in-booleanquery/276566 "2021-06-21T17:12:52Z")
I know booleanQuery will add score of should clauses and must clauses. I used to do log(scoreOfShould) + log(scoreOfMust) + log(\_score) for sorting as scoreOfShould \* scoreOfMust \* \_score. In my case, scoreOfShould is q… --- ## [ILM rollover works as expected, but write-index does not move](https://discuss.elastic.co/t/ilm-rollover-works-as-expected-but-write-index-does-not-move/275724)
**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\ **Replies:** 2\ **Last updated:** [June 21, 2021, 4:06pm UTC](https://discuss.elastic.co/t/ilm-rollover-works-as-expected-but-write-index-does-not-move/275724 "2021-06-21T16:06:06Z")
I'm using ES 6.8.1 and have ILM configured with a Hot, Warm, and Delete phase. When my index hits its rollover threshold (50gb), ES does trigger a rollover, and creates a new index with the number incremented. However,… --- ## [Rally throughput counter include data generation](https://discuss.elastic.co/t/rally-throughput-counter-include-data-generation/276366)
**Author:** [@Lasse\_Nedergaard](https://discuss.elastic.co/u/Lasse_Nedergaard)\ **Replies:** 2\ **Last updated:** [June 21, 2021, 3:32pm UTC](https://discuss.elastic.co/t/rally-throughput-counter-include-data-generation/276366 "2021-06-21T15:32:34Z")
We have some large JSON doc’s we use for testing. The manipulation of the document before ingest takes some time. I can see Rally’s finally output score include throughputs but the time is Rally’s throughput and it’s in… --- ## [ElasticSearch Keystore Setup up error when deploying Docker image 7:10:2 to pod](https://discuss.elastic.co/t/elasticsearch-keystore-setup-up-error-when-deploying-docker-image-72-to-pod/276402)
**Author:** [@patelsop78](https://discuss.elastic.co/u/patelsop78)\ **Replies:** 2\ **Last updated:** [June 21, 2021, 2:40pm UTC](https://discuss.elastic.co/t/elasticsearch-keystore-setup-up-error-when-deploying-docker-image-72-to-pod/276402 "2021-06-21T14:40:20Z")
Getting below error when deploying pod using Docker 7.10.2 image. Exception in thread "main" java.io.IOException: Is a directory: SimpleFSIndexInput(path="/usr/share/elasticsearch/config/elasticsearch.keystore") at org… --- ## [How to "remove" cluster.routing.allocation.awareness.attributes](https://discuss.elastic.co/t/how-to-remove-cluster-routing-allocation-awareness-attributes/276537)
**Author:** [@Maxime\_Poirier-Journ](https://discuss.elastic.co/u/Maxime_Poirier-Journ)\ **Replies:** 2\ **Last updated:** [June 21, 2021, 2:20pm UTC](https://discuss.elastic.co/t/how-to-remove-cluster-routing-allocation-awareness-attributes/276537 "2021-06-21T14:20:29Z")
Hi there, We're using Elastic in all our environments from dev, qa to prod. We're currently using cluster.routing.allocation.awareness.attributes on all our clusters based on the attribute "aws\_availability\_zone" meanin… --- ## [Log4j2.properties- Rolling File Issue](https://discuss.elastic.co/t/log4j2-properties-rolling-file-issue/276551)
**Author:** [@anguri\_sudhakar](https://discuss.elastic.co/u/anguri_sudhakar)\ **Replies:** 0\ **Last updated:** [June 21, 2021, 2:14pm UTC](https://discuss.elastic.co/t/log4j2-properties-rolling-file-issue/276551 "2021-06-21T14:14:16Z")
Hi Team, we have 4-node cluster elasticsearch-7.5.2 installed and configure Centos 7 in Dev- Environment Like below : master-1 master-2 hotnode warmnode We are using default log4j2.properties file for roll the lo… --- ## [Elasticsearch not working](https://discuss.elastic.co/t/elasticsearch-not-working/274944)
**Author:** [@Drupad\_Soni](https://discuss.elastic.co/u/Drupad_Soni)\ **Replies:** 2\ **Last updated:** [June 21, 2021, 10:46am UTC](https://discuss.elastic.co/t/elasticsearch-not-working/274944 "2021-06-21T10:46:48Z")
Hi People, My elasticsearch fails to start please guide me thru this. Sharing error as below ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; disabled; vendor pres… --- ## [Using Ngrams for building a autocomplete suggester](https://discuss.elastic.co/t/using-ngrams-for-building-a-autocomplete-suggester/276520)
**Author:** [@Hooman\_Bahreini](https://discuss.elastic.co/u/Hooman_Bahreini)\ **Replies:** 0\ **Last updated:** [June 21, 2021, 10:19am UTC](https://discuss.elastic.co/t/using-ngrams-for-building-a-autocomplete-suggester/276520 "2021-06-21T10:19:47Z")
I have 2 fields in my index, Title and Description. Title obviously a short phrase (max 100 characters) and description is a long description (up to 5000 characters). I have built a autocomplete by building ngrams on T… --- ## [Conditional search in Lucene or Query DSL](https://discuss.elastic.co/t/conditional-search-in-lucene-or-query-dsl/276436)
**Author:** [@Eric\_Barreto](https://discuss.elastic.co/u/Eric_Barreto)\ **Replies:** 3\ **Last updated:** [June 21, 2021, 10:07am UTC](https://discuss.elastic.co/t/conditional-search-in-lucene-or-query-dsl/276436 "2021-06-21T10:07:56Z")
Hi guys, I'm trying to do a search via Lucene or Query DSL that does the following: I have a log that contains several fields, among them the sourceIp and resourceKey fields. I need to create a survey that shows me all… --- ## [Filter products in shared catalogs with price range](https://discuss.elastic.co/t/filter-products-in-shared-catalogs-with-price-range/276264)
**Author:** [@thangld](https://discuss.elastic.co/u/thangld)\ **Replies:** 1\ **Last updated:** [June 21, 2021, 9:33am UTC](https://discuss.elastic.co/t/filter-products-in-shared-catalogs-with-price-range/276264 "2021-06-21T09:33:07Z")
Hi there, I have a store and use Elasticsearch for storing products. I need to filter products by price range. It is simple if products' price is the same to all customers, but in my case, customers from different grou… --- ## [Severe I/O performance degradation after Ubuntu 18.04 upgrade](https://discuss.elastic.co/t/severe-i-o-performance-degradation-after-ubuntu-18-04-upgrade/276509)
**Author:** [@amo1](https://discuss.elastic.co/u/amo1)\ **Replies:** 1\ **Last updated:** [June 21, 2021, 9:19am UTC](https://discuss.elastic.co/t/severe-i-o-performance-degradation-after-ubuntu-18-04-upgrade/276509 "2021-06-21T09:19:24Z")
Hi, We recently upgraded the OS on a couple of independently running hot/warm clusters. Each cluster has 9 nodes (3 masters, 3 hot nodes and 3 warm nodes) and are running on pretty decent hardware (32GB-64GB RAM on each… --- ## [Any way for an Elasticsearch plugin to override default api behavior?](https://discuss.elastic.co/t/any-way-for-an-elasticsearch-plugin-to-override-default-api-behavior/276255)
**Author:** [@Dor\_Levi](https://discuss.elastic.co/u/Dor_Levi)\ **Replies:** 1\ **Last updated:** [June 21, 2021, 9:10am UTC](https://discuss.elastic.co/t/any-way-for-an-elasticsearch-plugin-to-override-default-api-behavior/276255 "2021-06-21T09:10:30Z")
Hi, I'm playing around with Elastic, and wondered if there's anyway to dynamically override a default endpoint behavior. I tried creating a plugin which adds a BaseRestHandler, but when attempting to specify a route wh… --- ## [Want a fault tolerant search but got to much results](https://discuss.elastic.co/t/want-a-fault-tolerant-search-but-got-to-much-results/276311)
**Author:** [@Joni94](https://discuss.elastic.co/u/Joni94)\ **Replies:** 1\ **Last updated:** [June 21, 2021, 9:04am UTC](https://discuss.elastic.co/t/want-a-fault-tolerant-search-but-got-to-much-results/276311 "2021-06-21T09:04:29Z")
Hello, I am trying to set up an error-tolerant search and have created the field "name" as "text" in my index and would like to search for it. I expect to search for exactly what I entered but normalise the string befo… --- ## [Update by query after mapping change](https://discuss.elastic.co/t/update-by-query-after-mapping-change/276397)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 1\ **Last updated:** [June 21, 2021, 8:57am UTC](https://discuss.elastic.co/t/update-by-query-after-mapping-change/276397 "2021-06-21T08:57:05Z")
Hi, In case I have a daily index and want to add a new field without waiting for the new index that would re-read the mapping template, I can use the Update mapping API. What I'm not 100% sure is that I would only need … --- ## [Enrich processor not working](https://discuss.elastic.co/t/enrich-processor-not-working/276367)
**Author:** [@sulsulatoff](https://discuss.elastic.co/u/sulsulatoff)\ **Replies:** 1\ **Last updated:** [June 21, 2021, 8:56am UTC](https://discuss.elastic.co/t/enrich-processor-not-working/276367 "2021-06-21T08:56:13Z")
Giving error \[indices:data/read/xpack/enrich/coordinate\_lookups\] is unauthorized for user \[myusername\] What privileges should be given to this user? --- ## [Does adding field collapsing improve the query latency](https://discuss.elastic.co/t/does-adding-field-collapsing-improve-the-query-latency/276426)
**Author:** [@Bhavik92](https://discuss.elastic.co/u/Bhavik92)\ **Replies:** 1\ **Last updated:** [June 21, 2021, 8:46am UTC](https://discuss.elastic.co/t/does-adding-field-collapsing-improve-the-query-latency/276426 "2021-06-21T08:46:55Z")
In elastic-search, I am using phrase\_prefix queries for my use case. Surprisingly, the query returns results much faster when adding collapse clause based on a field. This feels counter-intuitive to me since collapse sho… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=622) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=624)