# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=883

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 884

---

## [Find exact result](https://discuss.elastic.co/t/find-exact-result/238339)

<div class="topic-metadata">

**Author:** [@th3Hopper](https://discuss.elastic.co/u/th3Hopper)\
**Replies:** 1\
**Last updated:** [June 23, 2020, 9:03pm UTC](https://discuss.elastic.co/t/find-exact-result/238339 "2020-06-23T21:03:15Z")

</div>

My goal is to find the exact match result from all of my documents. How can I achieve this? I have found 3 ways to achieve it but I'm confused about which one will be more effective. ### Exact search 1 GET email/\_searc…

---

## [Snapshot failed due to connection timeout to S3](https://discuss.elastic.co/t/snapshot-failed-due-to-connection-timeout-to-s3/238325)

<div class="topic-metadata">

**Author:** [@feiwhomai](https://discuss.elastic.co/u/feiwhomai)\
**Replies:** 0\
**Last updated:** [June 23, 2020, 7:08pm UTC](https://discuss.elastic.co/t/snapshot-failed-due-to-connection-timeout-to-s3/238325 "2020-06-23T19:08:02Z")

</div>

Hi All, I am trying to make a snapshot, but it always fails after around 1.5 hours. The exception shows the connection to S3 timeouts. The cluster version is 6.8.2 It used to work fine, but starting from 2 weeks back,…

---

## [Template based Elastic stack deployment for AWS](https://discuss.elastic.co/t/template-based-elastic-stack-deployment-for-aws/238248)

<div class="topic-metadata">

**Author:** [@Naresh\_Babu1](https://discuss.elastic.co/u/Naresh_Babu1)\
**Replies:** 3\
**Last updated:** [June 23, 2020, 4:58pm UTC](https://discuss.elastic.co/t/template-based-elastic-stack-deployment-for-aws/238248 "2020-06-23T16:58:48Z")

</div>

Hi, Used below template based solution from Azure market place to deploy EFK solution. Do we have similar template based solution to deploy Elastic stack on AWS cloud. Thanks

---

## [Logstash not pushing logs to elasticsearch in aws](https://discuss.elastic.co/t/logstash-not-pushing-logs-to-elasticsearch-in-aws/238255)

<div class="topic-metadata">

**Author:** [@Bharath\_reddy](https://discuss.elastic.co/u/Bharath_reddy)\
**Replies:** 1\
**Last updated:** [June 23, 2020, 4:31pm UTC](https://discuss.elastic.co/t/logstash-not-pushing-logs-to-elasticsearch-in-aws/238255 "2020-06-23T16:31:26Z")

</div>

In logs I didnt find any errors ,but I can't able to see the output line in logs for my pipelines

---

## [Async Search Issue: FORBIDDEN/8/index write (api)](https://discuss.elastic.co/t/async-search-issue-forbidden-8-index-write-api/238221)

<div class="topic-metadata">

**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\
**Replies:** 1\
**Last updated:** [June 23, 2020, 4:25pm UTC](https://discuss.elastic.co/t/async-search-issue-forbidden-8-index-write-api/238221 "2020-06-23T16:25:49Z")

</div>

Since upgrading our cluster from 7.6 to 7.8 we are experiencing problems with kibana. We are using elasticsearch for our central logging, we have a logstash index for every single day. If I do a empty kibana search (usin…

---

## [Elasticserach bootstrap fail if elasticsearch.keystore.tmp already exists](https://discuss.elastic.co/t/elasticserach-bootstrap-fail-if-elasticsearch-keystore-tmp-already-exists/237087)

<div class="topic-metadata">

**Author:** [@gab.bernasconi](https://discuss.elastic.co/u/gab.bernasconi)\
**Replies:** 3\
**Last updated:** [June 23, 2020, 3:28pm UTC](https://discuss.elastic.co/t/elasticserach-bootstrap-fail-if-elasticsearch-keystore-tmp-already-exists/237087 "2020-06-23T15:28:23Z")

</div>

Environment Elasticsearch version: 7.4.2 (docker) Problem Summary If Elasticsearch already finds the file /usr/share/elasticsearch/config/elasticsearch.keystore.tmp during bootstrap checks, it fails to start Steps t…

---

## [All of the primary shards are on 1 node. Would that bottlenecks our writes?](https://discuss.elastic.co/t/all-of-the-primary-shards-are-on-1-node-would-that-bottlenecks-our-writes/237418)

<div class="topic-metadata">

**Author:** [@Jehu\_T](https://discuss.elastic.co/u/Jehu_T)\
**Replies:** 5\
**Last updated:** [June 23, 2020, 3:17pm UTC](https://discuss.elastic.co/t/all-of-the-primary-shards-are-on-1-node-would-that-bottlenecks-our-writes/237418 "2020-06-23T15:17:31Z")

</div>

Hi, We see that almost all of the primary shards are on 1 node out of the 3 nodes. Would that bottlenecks our writes? Our ES Indexing Service has code to catch what's basically a "queue full" state on the server and res…

---

## ["index.mapper.dynamic" not working as intended on Elasticsearch 6.8](https://discuss.elastic.co/t/index-mapper-dynamic-not-working-as-intended-on-elasticsearch-6-8/238290)

<div class="topic-metadata">

**Author:** [@egibrajshori](https://discuss.elastic.co/u/egibrajshori)\
**Replies:** 0\
**Last updated:** [June 23, 2020, 2:58pm UTC](https://discuss.elastic.co/t/index-mapper-dynamic-not-working-as-intended-on-elasticsearch-6-8/238290 "2020-06-23T14:58:36Z")

</div>

Hi, We have some indexes we would like to disable dynamic mapping for, I'm testing disabling the dynamic mapping by putting : index.mapper.dynamic : false or null in the settings for said indexes. The request is acknow…

---

## [Elasticsearch Curator: Empty list](https://discuss.elastic.co/t/elasticsearch-curator-empty-list/237599)

<div class="topic-metadata">

**Author:** [@AJCandfield](https://discuss.elastic.co/u/AJCandfield)\
**Replies:** 5\
**Last updated:** [June 23, 2020, 2:18pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-empty-list/237599 "2020-06-23T14:18:12Z")

</div>

Hi all, We decided to install the Curator to delete indices with respect to age and size. On our first run the tool was able to delete the Logstash indices that matched the criteria but when we specified any other inde…

---

## [Python : How to write a simple regexp query using Elasticsearch in python?](https://discuss.elastic.co/t/python-how-to-write-a-simple-regexp-query-using-elasticsearch-in-python/238197)

<div class="topic-metadata">

**Author:** [@VITTHAL\_BHANDARI](https://discuss.elastic.co/u/VITTHAL_BHANDARI)\
**Replies:** 1\
**Last updated:** [June 23, 2020, 1:16pm UTC](https://discuss.elastic.co/t/python-how-to-write-a-simple-regexp-query-using-elasticsearch-in-python/238197 "2020-06-23T13:16:59Z")

</div>

I am trying to write a simple regexp query using elasticsearch in python that just won't work. Can anybody tell me where I'm going wrong ? result = es.search(index="my-index", body={"query": {"regexp": {"Name": "Vi.\*" }…

---

## [How to know which documents in the search results include all of the tokens in the search query (for one particular field)](https://discuss.elastic.co/t/how-to-know-which-documents-in-the-search-results-include-all-of-the-tokens-in-the-search-query-for-one-particular-field/237639)

<div class="topic-metadata">

**Author:** [@swafa](https://discuss.elastic.co/u/swafa)\
**Replies:** 2\
**Last updated:** [June 23, 2020, 12:37pm UTC](https://discuss.elastic.co/t/how-to-know-which-documents-in-the-search-results-include-all-of-the-tokens-in-the-search-query-for-one-particular-field/237639 "2020-06-23T12:37:46Z")

</div>

We are trying to find out which documents in our search results include all the tokens in our search query. For example when running the following query: GET /test/\_search { "query" : { "match"…

---

## [Unable to change the replication factor in elasticsearch 6.8](https://discuss.elastic.co/t/unable-to-change-the-replication-factor-in-elasticsearch-6-8/238234)

<div class="topic-metadata">

**Author:** [@sammi](https://discuss.elastic.co/u/sammi)\
**Replies:** 1\
**Last updated:** [June 23, 2020, 12:09pm UTC](https://discuss.elastic.co/t/unable-to-change-the-replication-factor-in-elasticsearch-6-8/238234 "2020-06-23T12:09:22Z")

</div>

Hi, Trying to change the replication factor for indices on 3 node elasticsearch 6.8 cluster from 1 to 2. Getting errors on the server. below is the GET result for settings. curl -XGET http://127.0.0.1:9200/janusgraph…

---

## [Elastic Search time query](https://discuss.elastic.co/t/elastic-search-time-query/238245)

<div class="topic-metadata">

**Author:** [@Shubham\_Singh\_Rathor](https://discuss.elastic.co/u/Shubham_Singh_Rathor)\
**Replies:** 1\
**Last updated:** [June 23, 2020, 11:43am UTC](https://discuss.elastic.co/t/elastic-search-time-query/238245 "2020-06-23T11:43:54Z")

</div>

i am not able filter the data body={'query': { "bool": { "must": {"match": {"Id": "3"}} , "filter": {"range": {"@timestamp": {"gte": "now-30m", "lte": "now"}}} }}} less than 30 minute query for elasticsearch usi…

---

## [Setting parse\_origination\_date doesn't update index's lifecycle date](https://discuss.elastic.co/t/setting-parse-origination-date-doesnt-update-indexs-lifecycle-date/238236)

<div class="topic-metadata">

**Author:** [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Replies:** 0\
**Last updated:** [June 23, 2020, 11:06am UTC](https://discuss.elastic.co/t/setting-parse-origination-date-doesnt-update-indexs-lifecycle-date/238236 "2020-06-23T11:06:10Z")

</div>

I have an old index that's been reindexed and I want my ILM policy to work as if the reindexing never happened. I expected setting the index.lifecycle.parse\_origination\_date setting to true would've taken care of that fo…

---

## [ElasticSearch inine script, max\_compilation\_rate issue](https://discuss.elastic.co/t/elasticsearch-inine-script-max-compilation-rate-issue/238082)

<div class="topic-metadata">

**Author:** [@rkr57123](https://discuss.elastic.co/u/rkr57123)\
**Replies:** 2\
**Last updated:** [June 23, 2020, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-inine-script-max-compilation-rate-issue/238082 "2020-06-23T10:43:06Z")

</div>

\`Hi, I'm using elastic-7.3.1. I'm sending large number of requests each having unique dynamic inline script and I'm getting this issue on elastic server org.elasticsearch.ElasticsearchException: Elasticsearch exceptio…

---

## [Alternative to top\_hits aggregation](https://discuss.elastic.co/t/alternative-to-top-hits-aggregation/235790)

<div class="topic-metadata">

**Author:** [@pranav24](https://discuss.elastic.co/u/pranav24)\
**Replies:** 1\
**Last updated:** [June 23, 2020, 9:47am UTC](https://discuss.elastic.co/t/alternative-to-top-hits-aggregation/235790 "2020-06-23T09:47:56Z")

</div>

What are the alternate ways to bring source data of buckets after aggregation? Why top\_hits aggregation slow when we increase the value of "from"?

---

## [I need to show a catalog containing only the latest version of each app, sorted by app title](https://discuss.elastic.co/t/i-need-to-show-a-catalog-containing-only-the-latest-version-of-each-app-sorted-by-app-title/237989)

<div class="topic-metadata">

**Author:** [@RNA](https://discuss.elastic.co/u/RNA)\
**Replies:** 2\
**Last updated:** [June 23, 2020, 8:44am UTC](https://discuss.elastic.co/t/i-need-to-show-a-catalog-containing-only-the-latest-version-of-each-app-sorted-by-app-title/237989 "2020-06-23T08:44:35Z")

</div>

Dear Community, Please help me out. I have an app catalogue page running with ES query. Each app has a semantic version and title in multiple language, and the app title can be different per version, then finally, I n…

---

## [How to update synonyms for an indexing index](https://discuss.elastic.co/t/how-to-update-synonyms-for-an-indexing-index/237221)

<div class="topic-metadata">

**Author:** [@ravinder](https://discuss.elastic.co/u/ravinder)\
**Replies:** 3\
**Last updated:** [June 23, 2020, 8:43am UTC](https://discuss.elastic.co/t/how-to-update-synonyms-for-an-indexing-index/237221 "2020-06-23T08:43:58Z")

</div>

we have an index "testsynonyms" mapped to a synonym file "synonyms.txt", we want to provision user with a utility of updating synonyms from the User Interface of our application. is there any way that we can update t…

---

## [How to change .security-6 index to read-write](https://discuss.elastic.co/t/how-to-change-security-6-index-to-read-write/237141)

<div class="topic-metadata">

**Author:** [@cgricb](https://discuss.elastic.co/u/cgricb)\
**Replies:** 2\
**Last updated:** [June 23, 2020, 8:29am UTC](https://discuss.elastic.co/t/how-to-change-security-6-index-to-read-write/237141 "2020-06-23T08:29:12Z")

</div>

My ES nodes were out of space and ES decided to take all indices read-only. After i ve added space and altered all indices to read-write i was successfull. But i could not alter the .security-6 index to read-write. Can y…

---

## [Resolving Coordinating Node Error - Elastic Cloud](https://discuss.elastic.co/t/resolving-coordinating-node-error-elastic-cloud/238125)

<div class="topic-metadata">

**Author:** [@Benjamin\_Igbeka](https://discuss.elastic.co/u/Benjamin_Igbeka)\
**Replies:** 2\
**Last updated:** [June 23, 2020, 7:05am UTC](https://discuss.elastic.co/t/resolving-coordinating-node-error-elastic-cloud/238125 "2020-06-23T07:05:47Z")

</div>

I have this error message in the cluster deployment page. How can I resolve it?

---

## ["terminated\_early":true](https://discuss.elastic.co/t/terminated-early-true/238179)

<div class="topic-metadata">

**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Replies:** 0\
**Last updated:** [June 23, 2020, 4:37am UTC](https://discuss.elastic.co/t/terminated-early-true/238179 "2020-06-23T04:37:30Z")

</div>

Hi, I make some term aggregations through Kibana and the response from ElasticSearch contains the "terminated\_early":true . What is the impact of these? Does this means that fewer results come from ElasticSearch? Ca…

---

## [Which version did the rbac security become free?](https://discuss.elastic.co/t/which-version-did-the-rbac-security-become-free/238167)

<div class="topic-metadata">

**Author:** [@Jerry\_Hoffmeister](https://discuss.elastic.co/u/Jerry_Hoffmeister)\
**Replies:** 4\
**Last updated:** [June 23, 2020, 3:08am UTC](https://discuss.elastic.co/t/which-version-did-the-rbac-security-become-free/238167 "2020-06-23T03:08:56Z")

</div>

Which version did the core security stuff become part of the basic / free subscription?

---

## [Data query issues with elasticsearch 6.8](https://discuss.elastic.co/t/data-query-issues-with-elasticsearch-6-8/237637)

<div class="topic-metadata">

**Author:** [@sammi](https://discuss.elastic.co/u/sammi)\
**Replies:** 4\
**Last updated:** [June 23, 2020, 1:29am UTC](https://discuss.elastic.co/t/data-query-issues-with-elasticsearch-6-8/237637 "2020-06-23T01:29:48Z")

</div>

we have 5 node cassandra and 3 node elasticsearch for indexes in a cluster , For smaller count data retrieval is working with queries but when there are large count query is failing with below error. method \[POST\], hos…

---

## [Testing queries and list of query logs, using rally result metrics of http logs or other tracks](https://discuss.elastic.co/t/testing-queries-and-list-of-query-logs-using-rally-result-metrics-of-http-logs-or-other-tracks/237702)

<div class="topic-metadata">

**Author:** [@Rajesh\_pleti1](https://discuss.elastic.co/u/Rajesh_pleti1)\
**Replies:** 0\
**Last updated:** [June 18, 2020, 9:00pm UTC](https://discuss.elastic.co/t/testing-queries-and-list-of-query-logs-using-rally-result-metrics-of-http-logs-or-other-tracks/237702 "2020-06-18T21:00:50Z")

</div>

Respected, i have tested http logs using rally , i got different metrics in terms of Index append, default, term, range , but where can i get for what queries and list of query logs, i got rally result metrics or of htt…

---

## [Help required for full GC logging to elastic search by parsing verbose GC logs](https://discuss.elastic.co/t/help-required-for-full-gc-logging-to-elastic-search-by-parsing-verbose-gc-logs/237837)

<div class="topic-metadata">

**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\
**Replies:** 0\
**Last updated:** [June 19, 2020, 4:41pm UTC](https://discuss.elastic.co/t/help-required-for-full-gc-logging-to-elastic-search-by-parsing-verbose-gc-logs/237837 "2020-06-19T16:41:36Z")

</div>

Hello, I am looking for parsing full GC logs generated using verbose jvm parameters. Need to get all below details into Elastic stack: Heap before and after GC GC throughput Minor/Major GC stats etc Is there any lo…

---

## [Scripted Field using timestamp](https://discuss.elastic.co/t/scripted-field-using-timestamp/238106)

<div class="topic-metadata">

**Author:** [@Brpat](https://discuss.elastic.co/u/Brpat)\
**Replies:** 0\
**Last updated:** [June 22, 2020, 2:55pm UTC](https://discuss.elastic.co/t/scripted-field-using-timestamp/238106 "2020-06-22T14:55:09Z")

</div>

Hello, I'm new to Elastic, and I've been trying to create a custom dashboard that will show user activity after hours. I wanted to create a scripted field to filter by hour of day and I found this post Kibana Filter for…

---

## [Elasticsearch parser problem](https://discuss.elastic.co/t/elasticsearch-parser-problem/238109)

<div class="topic-metadata">

**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\
**Replies:** 0\
**Last updated:** [June 22, 2020, 3:02pm UTC](https://discuss.elastic.co/t/elasticsearch-parser-problem/238109 "2020-06-22T15:02:29Z")

</div>

Hello, we are having difficulties while parsing incoming object from http poller plugin and storing into ELS. Template mapping is here: "aqarchive": { "properties": { "hea…

---

## [\_cat indice filtering by index wildcard](https://discuss.elastic.co/t/cat-indice-filtering-by-index-wildcard/238154)

<div class="topic-metadata">

**Author:** [@morty](https://discuss.elastic.co/u/morty)\
**Replies:** 0\
**Last updated:** [June 22, 2020, 9:09pm UTC](https://discuss.elastic.co/t/cat-indice-filtering-by-index-wildcard/238154 "2020-06-22T21:09:03Z")

</div>

According to this endpoint documentation (Optional, string) Comma-separated list or wildcard expression of index names used to limit the request. But in reality it also checks for aliases which makes this filtering …

---

## [Elasticsearch jdk](https://discuss.elastic.co/t/elasticsearch-jdk/238153)

<div class="topic-metadata">

**Author:** [@griffer98](https://discuss.elastic.co/u/griffer98)\
**Replies:** 0\
**Last updated:** [June 22, 2020, 8:59pm UTC](https://discuss.elastic.co/t/elasticsearch-jdk/238153 "2020-06-22T20:59:20Z")

</div>

I just installed elasticsearch 7.8 and when I run I get this error could not find java in bundled jdk at ..... What is wrong?

---

## [Xpack.monitoring.history.duration with a value other than "7d" does not work](https://discuss.elastic.co/t/xpack-monitoring-history-duration-with-a-value-other-than-7d-does-not-work/238134)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 1\
**Last updated:** [June 22, 2020, 7:16pm UTC](https://discuss.elastic.co/t/xpack-monitoring-history-duration-with-a-value-other-than-7d-does-not-work/238134 "2020-06-22T19:16:27Z")

</div>

Hi, Referring to the documentation: https://www.elastic.co/guide/en/elasticsearch/reference/current/monitoring-settings.html We have value: xpack.monitoring.history.duration (default 7d). I can execute query: PUT \_c…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=882)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=884)
