# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=719 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 720 --- ## [How to dump the index and posting list?](https://discuss.elastic.co/t/how-to-dump-the-index-and-posting-list/261977)
**Author:** [@ralgo](https://discuss.elastic.co/u/ralgo)\ **Replies:** 0\ **Last updated:** [January 23, 2021, 7:01am UTC](https://discuss.elastic.co/t/how-to-dump-the-index-and-posting-list/261977 "2021-01-23T07:01:11Z")
I am writing an analysis plugin for elasticsearch, which maps a sentence to a prefix array. e.g. "EVA EGG京" will be mapped to term array \[E, EV, EVA, E, EG, EGG, 京\]. However, when I search one of \[E，EV，EVA，E, EG，EGG\], t… --- ## [Take incremental snapshot with curator](https://discuss.elastic.co/t/take-incremental-snapshot-with-curator/261975)
**Author:** [@k.naderlu](https://discuss.elastic.co/u/k.naderlu)\ **Replies:** 0\ **Last updated:** [January 23, 2021, 6:05am UTC](https://discuss.elastic.co/t/take-incremental-snapshot-with-curator/261975 "2021-01-23T06:05:08Z")
Hi, I want to take an incremental snapshot in curator v5.8, how I can do this? how I can do this with an action file? --- ## [Update field Object using UpdateQuery](https://discuss.elastic.co/t/update-field-object-using-updatequery/261973)
**Author:** [@cmcruzata](https://discuss.elastic.co/u/cmcruzata)\ **Replies:** 0\ **Last updated:** [January 23, 2021, 5:09am UTC](https://discuss.elastic.co/t/update-field-object-using-updatequery/261973 "2021-01-23T05:09:42Z")
Hi, I need to create an update query to update the relation inside the index, given the relation ID: @Entity @Document(indexName = "employees", shards = 3) public class Employee { @Id @GeneratedV… --- ## [Setting id field in client request and also using date name processor](https://discuss.elastic.co/t/setting-id-field-in-client-request-and-also-using-date-name-processor/261968)
**Author:** [@smruthip](https://discuss.elastic.co/u/smruthip)\ **Replies:** 0\ **Last updated:** [January 23, 2021, 1:05am UTC](https://discuss.elastic.co/t/setting-id-field-in-client-request-and-also-using-date-name-processor/261968 "2021-01-23T01:05:03Z")
Hi all, I had a question about sending id field in the client request and also using the date name processor to create indices based on a field value. So here is my use case , I want to produce daily indices based on a… --- ## [Subset match query](https://discuss.elastic.co/t/subset-match-query/261847)
**Author:** [@Josue-Salas](https://discuss.elastic.co/u/Josue-Salas)\ **Replies:** 3\ **Last updated:** [January 22, 2021, 10:03pm UTC](https://discuss.elastic.co/t/subset-match-query/261847 "2021-01-22T22:03:42Z")
Hi everyone, Thanks for reading. Here's my problem. I have the following documents: "course #1": { "requirements": \[ { "name": "AWS EC2 certification", "type": "certification" … --- ## [Elasticsearch service - Kibana link results in 404](https://discuss.elastic.co/t/elasticsearch-service-kibana-link-results-in-404/261862)
**Author:** [@Mike\_Connor](https://discuss.elastic.co/u/Mike_Connor)\ **Replies:** 5\ **Last updated:** [January 22, 2021, 8:43pm UTC](https://discuss.elastic.co/t/elasticsearch-service-kibana-link-results-in-404/261862 "2021-01-22T20:43:47Z")
A few hours ago, my kibana session expired or I got kicked out. Now when I click the link from the deployment page on clould.elastic.co, I end up with a raw 404. A callback error? I have been having a bunch of problem… --- ## [Large shards are not moving from old ES version nodes to new ES version nodes](https://discuss.elastic.co/t/large-shards-are-not-moving-from-old-es-version-nodes-to-new-es-version-nodes/261864)
**Author:** [@163satish](https://discuss.elastic.co/u/163satish)\ **Replies:** 7\ **Last updated:** [January 22, 2021, 6:19pm UTC](https://discuss.elastic.co/t/large-shards-are-not-moving-from-old-es-version-nodes-to-new-es-version-nodes/261864 "2021-01-22T18:19:57Z")
I have 6.8 cluster which is being upgraded to 7.6 cluster. Shard relocation on all the shards which are smaller in size is completed which is basically moving from 6.8 to 7.6 data nodes. The large shards for some of the … --- ## [Planned change of license to SSPL](https://discuss.elastic.co/t/planned-change-of-license-to-sspl/261279)
**Author:** [@johann-petrak](https://discuss.elastic.co/u/johann-petrak)\ **Replies:** 3\ **Last updated:** [January 22, 2021, 5:50pm UTC](https://discuss.elastic.co/t/planned-change-of-license-to-sspl/261279 "2021-01-22T17:50:52Z")
I think the planned change from Apache 2 to SSPL for ES and Kibana will not just motivate myself to seriously look for other solutions. (see https://www.elastic.co/blog/licensing-change) SSPL seems to be extremely rest… --- ## [Elasticsearch NEST query not behaving like the equivalent query in Kibana Dev Tools](https://discuss.elastic.co/t/elasticsearch-nest-query-not-behaving-like-the-equivalent-query-in-kibana-dev-tools/261867)
**Author:** [@jonsagara](https://discuss.elastic.co/u/jonsagara)\ **Replies:** 1\ **Last updated:** [January 22, 2021, 5:05pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-query-not-behaving-like-the-equivalent-query-in-kibana-dev-tools/261867 "2021-01-22T17:05:13Z")
I'm trying to construct a query against my index that will use function\_score to boost records where fields have certain values. In Kibana Dev Tools, I have the following query that returns 3 hits as expected: GET /myin… --- ## [Creating job: anomaly in the event rate of beats](https://discuss.elastic.co/t/creating-job-anomaly-in-the-event-rate-of-beats/261889)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 1\ **Last updated:** [January 22, 2021, 4:38pm UTC](https://discuss.elastic.co/t/creating-job-anomaly-in-the-event-rate-of-beats/261889 "2021-01-22T16:38:52Z")
Hello, I would like to create a job to detect when there is anomaly in the number of event send by beats, mostly to detect if one of the beat stop sending logs to my ELK cluster (and to detect the name of the machine wh… --- ## [Elastic search raw events | Latest event retrieval](https://discuss.elastic.co/t/elastic-search-raw-events-latest-event-retrieval/261935)
**Author:** [@pkrahul236](https://discuss.elastic.co/u/pkrahul236)\ **Replies:** 0\ **Last updated:** [January 22, 2021, 3:47pm UTC](https://discuss.elastic.co/t/elastic-search-raw-events-latest-event-retrieval/261935 "2021-01-22T15:47:11Z")
Hello Folks, I want to create a dashboard on raw events data from elastic search. In this one particular raw event, I have status types as "In Progress", "Updated", "Completed" So I want to create a dashboard say "Ta… --- ## [Filter query to select only pure alphanumeric value but not numeric value](https://discuss.elastic.co/t/filter-query-to-select-only-pure-alphanumeric-value-but-not-numeric-value/261931)
**Author:** [@Vivek\_Vardhan](https://discuss.elastic.co/u/Vivek_Vardhan)\ **Replies:** 0\ **Last updated:** [January 22, 2021, 3:19pm UTC](https://discuss.elastic.co/t/filter-query-to-select-only-pure-alphanumeric-value-but-not-numeric-value/261931 "2021-01-22T15:19:50Z")
I have a field defined in ES as "fieldName": { "type": "text", "fields": { "keyword": { "type": "keyword" } … --- ## [Trouble with query term and è](https://discuss.elastic.co/t/trouble-with-query-term-and-egrave/261916)
**Author:** [@matmout](https://discuss.elastic.co/u/matmout)\ **Replies:** 0\ **Last updated:** [January 22, 2021, 1:04pm UTC](https://discuss.elastic.co/t/trouble-with-query-term-and-egrave/261916 "2021-01-22T13:04:55Z")
Hi Everybody ! I create a topic since I can't find a response anywhere, I have trouble using a query term with a term wich value contains è Here is an expemple, in Kibana console GET index/\_search { "query": { … --- ## [Ensuring isolation of customer data](https://discuss.elastic.co/t/ensuring-isolation-of-customer-data/261794)
**Author:** [@ironcode](https://discuss.elastic.co/u/ironcode)\ **Replies:** 2\ **Last updated:** [January 22, 2021, 12:37pm UTC](https://discuss.elastic.co/t/ensuring-isolation-of-customer-data/261794 "2021-01-22T12:37:40Z")
Hi, I'm new to Elastic Cloud. I've been experimenting with ELK stack as part of my product, and I have a question from customer who is asking me to ensure that their data will not be on the same servers as anybody else. … --- ## [Stop elasticsearch from within a container](https://discuss.elastic.co/t/stop-elasticsearch-from-within-a-container/261455)
**Author:** [@cinemafunk](https://discuss.elastic.co/u/cinemafunk)\ **Replies:** 4\ **Last updated:** [January 22, 2021, 12:25pm UTC](https://discuss.elastic.co/t/stop-elasticsearch-from-within-a-container/261455 "2021-01-22T12:25:17Z")
I'm launched Graylog, MongoDB, and Elasticsearch docker container stack on a VM. My goal is to move my currently running Graylog instance from a manually installed Graylog instance from an Ubuntu VM, to another Ubtunu VM… --- ## [Two nodes, set on the same machine, can't see each other - Dev purposes](https://discuss.elastic.co/t/two-nodes-set-on-the-same-machine-cant-see-each-other-dev-purposes/261787)
**Author:** [@Mateusz\_Koper](https://discuss.elastic.co/u/Mateusz_Koper)\ **Replies:** 4\ **Last updated:** [January 22, 2021, 11:55am UTC](https://discuss.elastic.co/t/two-nodes-set-on-the-same-machine-cant-see-each-other-dev-purposes/261787 "2021-01-22T11:55:02Z")
Hi, We have a problem in our organization. We are trying to add second node, to existing cluster, on the same machine. I know it's not a good solution, but we only do it for development purposes. The version that we are… --- ## [The parent task was cancelled, shouldn't start any child tasks](https://discuss.elastic.co/t/the-parent-task-was-cancelled-shouldnt-start-any-child-tasks/261686)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 6\ **Last updated:** [January 22, 2021, 10:46am UTC](https://discuss.elastic.co/t/the-parent-task-was-cancelled-shouldnt-start-any-child-tasks/261686 "2021-01-22T10:46:07Z")
Total shards 110 Data 3.7gb Indices 99 Problem in kibana monitoring section.The page was showing indices fails. In elasticsearch log file \[2021-01-20T21:27:16,584\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[elastic\] \[gc\]\[3… --- ## [Elasticsearch 7.6.2 service not starting on CentOS 7.x with cPanel installed on it](https://discuss.elastic.co/t/elasticsearch-7-6-2-service-not-starting-on-centos-7-x-with-cpanel-installed-on-it/261886)
**Author:** [@Herrick\_P](https://discuss.elastic.co/u/Herrick_P)\ **Replies:** 1\ **Last updated:** [January 22, 2021, 10:24am UTC](https://discuss.elastic.co/t/elasticsearch-7-6-2-service-not-starting-on-centos-7-x-with-cpanel-installed-on-it/261886 "2021-01-22T10:24:43Z")
I have installed elasticsearch version 7.2.6 on CentOS 7.x with cPanel on it. However, after installing it, elasticsearch service is not running. Here is the screen capture of the error. I have already tried. https://sup… --- ## [Delete by query: keeping only the most recent N documents](https://discuss.elastic.co/t/delete-by-query-keeping-only-the-most-recent-n-documents/261764)
**Author:** [@jminuscula](https://discuss.elastic.co/u/jminuscula)\ **Replies:** 3\ **Last updated:** [January 22, 2021, 9:02am UTC](https://discuss.elastic.co/t/delete-by-query-keeping-only-the-most-recent-n-documents/261764 "2021-01-22T09:02:28Z")
Hi there, I want to control the number of documents in our index, so I'm planning on running a delete by query periodically. Our documents look something like this: { "client": "a51b8afa8710ccbad1", … --- ## [Elastic pricing and more than one node](https://discuss.elastic.co/t/elastic-pricing-and-more-than-one-node/261870)
**Author:** [@KarlKnarls](https://discuss.elastic.co/u/KarlKnarls)\ **Replies:** 1\ **Last updated:** [January 22, 2021, 7:27am UTC](https://discuss.elastic.co/t/elastic-pricing-and-more-than-one-node/261870 "2021-01-22T07:27:41Z")
Hello, This is probably a basic question and perhaps I’ve overlooked some obvious guidance here but here goes anyway... On the elastic.co pricing in order to get a second node (or simply more than a single node) the fi… --- ## [Attempted to resurrect connection to dead ES instance](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/261875)
**Author:** [@deepasaju](https://discuss.elastic.co/u/deepasaju)\ **Replies:** 0\ **Last updated:** [January 22, 2021, 6:57am UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/261875 "2021-01-22T06:57:16Z")
Hi I am using Logstash and ES in same server When I am sending data to ES using logstash I am getting below error message \[2021-01-21T23:59:13,249\]\[WARN \]\[logstash.outputs.elasticsearch\]\[logstashmetricbeat\] Attempted… --- ## [Search operation on Remote cluster is taking longer time](https://discuss.elastic.co/t/search-operation-on-remote-cluster-is-taking-longer-time/261434)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 2\ **Last updated:** [January 22, 2021, 6:18am UTC](https://discuss.elastic.co/t/search-operation-on-remote-cluster-is-taking-longer-time/261434 "2021-01-22T06:18:21Z")
Hi All, I have created two clusters in elasticsearch. When I try to do some search operations in their respective Kibana , it is working as expected. I have connected cluster 2 as remote cluster of cluster 1. I am try… --- ## [Help with processing log files](https://discuss.elastic.co/t/help-with-processing-log-files/261858)
**Author:** [@Maria\_Elle](https://discuss.elastic.co/u/Maria_Elle)\ **Replies:** 3\ **Last updated:** [January 22, 2021, 3:16am UTC](https://discuss.elastic.co/t/help-with-processing-log-files/261858 "2021-01-22T03:16:16Z")
I'm very very new to Elasticsearch/ELK, and I'm currently learning it from scratch for a project. I'm running it on an Ubuntu VM and my first task is to process json log files from my desktop through Filebeat into Elasti… --- ## [If I reduce the number in "ignore\_above" will I use less disk space?](https://discuss.elastic.co/t/if-i-reduce-the-number-in-ignore-above-will-i-use-less-disk-space/261855)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 11:28pm UTC](https://discuss.elastic.co/t/if-i-reduce-the-number-in-ignore-above-will-i-use-less-disk-space/261855 "2021-01-21T23:28:45Z")
Hi, I have an APM span index, and I realize that in the mapping the "ignore\_above" is set to 1024, I was wandering if I change some of this setting I can use less disk space. for example in agent.name, the longest valu… --- ## [Elasticsearch Hybrid Query - No Results](https://discuss.elastic.co/t/elasticsearch-hybrid-query-no-results/260834)
**Author:** [@Vincent\_Dandenault](https://discuss.elastic.co/u/Vincent_Dandenault)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 11:19pm UTC](https://discuss.elastic.co/t/elasticsearch-hybrid-query-no-results/260834 "2021-01-21T23:19:50Z")
I’m currently trying to do a hybrid search on two indexes: a full text index and knn\_vector (word embeddings) index. Currently, over 10’000 documents from Wikipedia are indexed on an ES stack, indexed on both of these fi… --- ## [Recommendations to Create Entity-Specific Models with Nested Hits/Documents](https://discuss.elastic.co/t/recommendations-to-create-entity-specific-models-with-nested-hits-documents/261705)
**Author:** [@jasonzissman](https://discuss.elastic.co/u/jasonzissman)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 9:02pm UTC](https://discuss.elastic.co/t/recommendations-to-create-entity-specific-models-with-nested-hits-documents/261705 "2021-01-21T21:02:07Z")
Hi all! I have event logs from my system that describe the actions that users take. I am trying to devise the best method for storing those events in a user entity model. For example, my event data looks like this: {t… --- ## [Cannot make deployment changes due to Coordinating Node](https://discuss.elastic.co/t/cannot-make-deployment-changes-due-to-coordinating-node/261693)
**Author:** [@Mike\_Connor](https://discuss.elastic.co/u/Mike_Connor)\ **Replies:** 4\ **Last updated:** [January 21, 2021, 8:41pm UTC](https://discuss.elastic.co/t/cannot-make-deployment-changes-due-to-coordinating-node/261693 "2021-01-21T20:41:51Z")
Hello, I am struggling to update a deployment. I made some changes successfully yesterday. However today, when I want to change my node configuration, I get this message: I don't understand the message because there… --- ## [Use of dynamic\_template in \_index\_template](https://discuss.elastic.co/t/use-of-dynamic-template-in-index-template/261453)
**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\ **Replies:** 4\ **Last updated:** [January 21, 2021, 7:41pm UTC](https://discuss.elastic.co/t/use-of-dynamic-template-in-index-template/261453 "2021-01-21T19:41:59Z")
Hi all, Is it possible to use dynamic\_template in the newly introduced \_index\_template ? If yes, do you have any example of how to use it ? If not, how should I declare some dynamic\_template with the use of \_index\_tem… --- ## [Azure Marketplace 9200 port allow](https://discuss.elastic.co/t/azure-marketplace-9200-port-allow/261796)
**Author:** [@roman.pavliuk](https://discuss.elastic.co/u/roman.pavliuk)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 2:03pm UTC](https://discuss.elastic.co/t/azure-marketplace-9200-port-allow/261796 "2021-01-21T14:03:04Z")
Hi all. I have created your Elasticsearch (Self-Managed) VM. And I can enter into Kibana without any problems. But I can't have access to 9200 port. In network I see inbound rule for 5601 port, but missed for 9200. When… --- ## [ELK License](https://discuss.elastic.co/t/elk-license/261820)
**Author:** [@vishakh](https://discuss.elastic.co/u/vishakh)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 4:37pm UTC](https://discuss.elastic.co/t/elk-license/261820 "2021-01-21T16:37:48Z")
Currently, we're using licensed ELK-Stack Does using an independent coordinator node consume a node-license? Example: Let's assume, we've 4 node license. and we've already used 4 nodes for Master & Data. Now, we need a… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=718) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=720)