# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=888

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 889

---

## [How to take word order into account in match\_phrase query](https://discuss.elastic.co/t/how-to-take-word-order-into-account-in-match-phrase-query/237448)

<div class="topic-metadata">

**Author:** [@mehdi89](https://discuss.elastic.co/u/mehdi89)\
**Replies:** 0\
**Last updated:** [June 17, 2020, 10:08am UTC](https://discuss.elastic.co/t/how-to-take-word-order-into-account-in-match-phrase-query/237448 "2020-06-17T10:08:52Z")

</div>

Suppose that my index have two documents: "get my money" "my money get here" When I do a regular match query for "get my money", both documents match correctly but they get equal scores. However, I want the order of w…

---

## [Elasticsearch 7.7 : field expansion matches too many fields, limit: 1024, got: 1139](https://discuss.elastic.co/t/elasticsearch-7-7-field-expansion-matches-too-many-fields-limit-1024-got-1139/237425)

<div class="topic-metadata">

**Author:** [@pappukhode](https://discuss.elastic.co/u/pappukhode)\
**Replies:** 0\
**Last updated:** [June 17, 2020, 9:00am UTC](https://discuss.elastic.co/t/elasticsearch-7-7-field-expansion-matches-too-many-fields-limit-1024-got-1139/237425 "2020-06-17T09:00:06Z")

</div>

Hi, I am using ES 7.7 and indexed around 70K data. I also verified index has around 540 fields by invokinghttp://es\_host:port/2/\_mapping. While performing simple search query I am getting query\_shard\_exception. GE…

---

## [Timing of Backup and composition shards and indices](https://discuss.elastic.co/t/timing-of-backup-and-composition-shards-and-indices/237223)

<div class="topic-metadata">

**Author:** [@jact](https://discuss.elastic.co/u/jact)\
**Replies:** 11\
**Last updated:** [June 17, 2020, 9:48am UTC](https://discuss.elastic.co/t/timing-of-backup-and-composition-shards-and-indices/237223 "2020-06-17T09:48:57Z")

</div>

Hi , Please provide an explanation: If I want to focus on data log security, I currently do a daily backup to avoid any problems with the server. Can monthly backups cover data before server problems? or is there ano…

---

## ["Incorrect HTTP method for uri" when PUTting \_index\_template](https://discuss.elastic.co/t/incorrect-http-method-for-uri-when-putting-index-template/237299)

<div class="topic-metadata">

**Author:** [@mujina93](https://discuss.elastic.co/u/mujina93)\
**Replies:** 3\
**Last updated:** [June 17, 2020, 9:46am UTC](https://discuss.elastic.co/t/incorrect-http-method-for-uri-when-putting-index-template/237299 "2020-06-17T09:46:36Z")

</div>

I am trying to create an index template. Following the examples in getting-started-index-lifecycle-management and indices-templates I'm trying with a PUT request that looks like: http://\<elasticsearch\_ip\>:9200/\_index\_t…

---

## [Read a CSV in Logstash level and filter on basis of the extracted data](https://discuss.elastic.co/t/read-a-csv-in-logstash-level-and-filter-on-basis-of-the-extracted-data/237420)

<div class="topic-metadata">

**Author:** [@Gurkeerat\_Sondhi](https://discuss.elastic.co/u/Gurkeerat_Sondhi)\
**Replies:** 0\
**Last updated:** [June 17, 2020, 8:15am UTC](https://discuss.elastic.co/t/read-a-csv-in-logstash-level-and-filter-on-basis-of-the-extracted-data/237420 "2020-06-17T08:15:42Z")

</div>

I am using Metricbeat to get process-level data and push it to Elastic Search using Logstash. Now, the aim is to categorize the processes into 2 tags i.e the process running is either a browser or it is something else. …

---

## [Is my data really replicated across the cluster? How to know?](https://discuss.elastic.co/t/is-my-data-really-replicated-across-the-cluster-how-to-know/237382)

<div class="topic-metadata">

**Author:** [@pszm](https://discuss.elastic.co/u/pszm)\
**Replies:** 7\
**Last updated:** [June 17, 2020, 7:32am UTC](https://discuss.elastic.co/t/is-my-data-really-replicated-across-the-cluster-how-to-know/237382 "2020-06-17T07:32:38Z")

</div>

We used to have just a single node in our cluster. In the past 2 weeks, we added 2 more nodes. Now we want to switch off the old node because the machine is old. But I am doubtful that all our data has actually been spr…

---

## [Can you give me an advice to make the elasticsearch query?](https://discuss.elastic.co/t/can-you-give-me-an-advice-to-make-the-elasticsearch-query/237274)

<div class="topic-metadata">

**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\
**Replies:** 1\
**Last updated:** [June 17, 2020, 7:28am UTC](https://discuss.elastic.co/t/can-you-give-me-an-advice-to-make-the-elasticsearch-query/237274 "2020-06-17T07:28:55Z")

</div>

Hello, I try to make elasticsearch query to perform below action I have 4 documents like this \_id : 1 user\_id : 12345 number : 1 \_id : 2 user\_id : 12345 number : 2 \_id : 3 user\_id : 12345 number : 3 \_id : 4 user\_…

---

## [Whether es.net.ssl.truststore.location can be setted as hdfs url](https://discuss.elastic.co/t/whether-es-net-ssl-truststore-location-can-be-setted-as-hdfs-url/237407)

<div class="topic-metadata">

**Author:** [@ForgotLove](https://discuss.elastic.co/u/ForgotLove)\
**Replies:** 0\
**Last updated:** [June 17, 2020, 7:09am UTC](https://discuss.elastic.co/t/whether-es-net-ssl-truststore-location-can-be-setted-as-hdfs-url/237407 "2020-06-17T07:09:52Z")

</div>

I have trustore.jks and keystore.jks generated and putted on hdfs.I set spark.es.net.ssl.truststore.location and spark.es.net.ssl.keystore.location with value hdfs://mycluster/keystore.jks. When i create an external es…

---

## [How to store bar chart data?](https://discuss.elastic.co/t/how-to-store-bar-chart-data/237160)

<div class="topic-metadata">

**Author:** [@Jenni](https://discuss.elastic.co/u/Jenni)\
**Replies:** 5\
**Last updated:** [June 17, 2020, 7:02am UTC](https://discuss.elastic.co/t/how-to-store-bar-chart-data/237160 "2020-06-17T07:02:19Z")

</div>

Hello, we are in the middle of restructuring one of our products to use ES instead of MySQL as its data storage. Now we are not sure what would be the best way to model the following data: Each element has a bar chart …

---

## [Generate certificates](https://discuss.elastic.co/t/generate-certificates/237403)

<div class="topic-metadata">

**Author:** [@Aayush\_Agrawal](https://discuss.elastic.co/u/Aayush_Agrawal)\
**Replies:** 0\
**Last updated:** [June 17, 2020, 6:27am UTC](https://discuss.elastic.co/t/generate-certificates/237403 "2020-06-17T06:27:16Z")

</div>

Trying to generate certificates using below command bin/elasticsearch-certutil ca --pem Getting below error Exception in thread "main" java.lang.IllegalArgumentException: Could not resolve placeholder 'FQDN' at org.e…

---

## [I didn't understand the Elastic Snapshot properly Please help](https://discuss.elastic.co/t/i-didnt-understand-the-elastic-snapshot-properly-please-help/237260)

<div class="topic-metadata">

**Author:** [@111349](https://discuss.elastic.co/u/111349)\
**Replies:** 10\
**Last updated:** [June 17, 2020, 6:14am UTC](https://discuss.elastic.co/t/i-didnt-understand-the-elastic-snapshot-properly-please-help/237260 "2020-06-17T06:14:14Z")

</div>

My configuration is to run each elastic on 3 different servers. Elastic that works as a master node (also a data node) on the 1st server. Elastic No. 2 and No. 3 operate as data nodes. I know that I have to specify th…

---

## [Unable to reach Elasticsearch 7.7 on network.host: \_global\_. YML works for previous versions](https://discuss.elastic.co/t/unable-to-reach-elasticsearch-7-7-on-network-host-global-yml-works-for-previous-versions/237398)

<div class="topic-metadata">

**Author:** [@Saadan](https://discuss.elastic.co/u/Saadan)\
**Replies:** 1\
**Last updated:** [June 17, 2020, 6:10am UTC](https://discuss.elastic.co/t/unable-to-reach-elasticsearch-7-7-on-network-host-global-yml-works-for-previous-versions/237398 "2020-06-17T06:10:58Z")

</div>

I have set the value of network.host to '0.0.0.0' , 'global' , 'machine ip address' but nothing seems to work when I try to access Elasticsearch from network. I have tried some solutions available online but the problem …

---

## [Can I contribute a datasketches aggregation plugin for elasticsearch?What should I provide?](https://discuss.elastic.co/t/can-i-contribute-a-datasketches-aggregation-plugin-for-elasticsearch-what-should-i-provide/237394)

<div class="topic-metadata">

**Author:** [@nooneuse](https://discuss.elastic.co/u/nooneuse)\
**Replies:** 2\
**Last updated:** [June 17, 2020, 6:08am UTC](https://discuss.elastic.co/t/can-i-contribute-a-datasketches-aggregation-plugin-for-elasticsearch-what-should-i-provide/237394 "2020-06-17T06:08:51Z")

</div>

hello, I wrote a datasketch aggregation plugin for elasticsearch, I have tested it in some situations, and its performance can meet my needs. I really want to share it and contribute it to the community to make elastics…

---

## [SLM policy for elastic snapshot for 30 mins is failing](https://discuss.elastic.co/t/slm-policy-for-elastic-snapshot-for-30-mins-is-failing/237242)

<div class="topic-metadata">

**Author:** [@hello5346](https://discuss.elastic.co/u/hello5346)\
**Replies:** 0\
**Last updated:** [June 16, 2020, 7:44am UTC](https://discuss.elastic.co/t/slm-policy-for-elastic-snapshot-for-30-mins-is-failing/237242 "2020-06-16T07:44:31Z")

</div>

I had set up a Elasticsearch snapshot to s3 and setup an SLM policy to create snapshot for every 30 mins but it's throwing an error and i'm sharing the slm policy details as well can anyone help me out curl -X GET "10.…

---

## [How can I return results having a unique id field (i.e. no duplicates) when requesting a multisearch or search?](https://discuss.elastic.co/t/how-can-i-return-results-having-a-unique-id-field-i-e-no-duplicates-when-requesting-a-multisearch-or-search/237346)

<div class="topic-metadata">

**Author:** [@aorona](https://discuss.elastic.co/u/aorona)\
**Replies:** 1\
**Last updated:** [June 17, 2020, 3:25am UTC](https://discuss.elastic.co/t/how-can-i-return-results-having-a-unique-id-field-i-e-no-duplicates-when-requesting-a-multisearch-or-search/237346 "2020-06-17T03:25:19Z")

</div>

I am running a query against my index and when I do a multisearch or search, I get duplicate results. I have specified the \_id with a unique value, but I am still seeing duplicates. Is there a filter aggregation, or ot…

---

## [Multiple analyzers with stemmed synonyms](https://discuss.elastic.co/t/multiple-analyzers-with-stemmed-synonyms/237317)

<div class="topic-metadata">

**Author:** [@Kushikawa](https://discuss.elastic.co/u/Kushikawa)\
**Replies:** 2\
**Last updated:** [June 17, 2020, 12:48am UTC](https://discuss.elastic.co/t/multiple-analyzers-with-stemmed-synonyms/237317 "2020-06-17T00:48:06Z")

</div>

I want to create an index with a stemmer analyzer to generalize my synonyms and apply it in other analyzers. For a simplified example: I want to use all these synonyms \[beautiful, pretty, beauteous, gorgeous\] in multipl…

---

## [How to get all results from Elastic Search Index using Powershell and save them locally](https://discuss.elastic.co/t/how-to-get-all-results-from-elastic-search-index-using-powershell-and-save-them-locally/237332)

<div class="topic-metadata">

**Author:** [@Vikas10](https://discuss.elastic.co/u/Vikas10)\
**Replies:** 3\
**Last updated:** [June 16, 2020, 11:25pm UTC](https://discuss.elastic.co/t/how-to-get-all-results-from-elastic-search-index-using-powershell-and-save-them-locally/237332 "2020-06-16T23:25:13Z")

</div>

At present I'm getting only 10 results form content .but the total shows 12000..i want to get all 12000 results one time. Is there a way to do it?

---

## [How does loadbalancing and "talking to a cluster" work?](https://discuss.elastic.co/t/how-does-loadbalancing-and-talking-to-a-cluster-work/237253)

<div class="topic-metadata">

**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\
**Replies:** 14\
**Last updated:** [June 16, 2020, 10:48pm UTC](https://discuss.elastic.co/t/how-does-loadbalancing-and-talking-to-a-cluster-work/237253 "2020-06-16T22:48:31Z")

</div>

Hi, I have learned a lot about clusteres in the past 2 weeks but one thing which I dont get the hang of is how to talk to the cluster. What i mean is that I have a Redis Database and I would like to ingest data into a H…

---

## [Coordinating node recommendation](https://discuss.elastic.co/t/coordinating-node-recommendation/237364)

<div class="topic-metadata">

**Author:** [@newkidtopc](https://discuss.elastic.co/u/newkidtopc)\
**Replies:** 0\
**Last updated:** [June 16, 2020, 9:25pm UTC](https://discuss.elastic.co/t/coordinating-node-recommendation/237364 "2020-06-16T21:25:50Z")

</div>

Hello, We have a ES cluster of 10 data nodes with additional 5 master nodes. We are exploring the idea of adding co-ordinating node to the cluster to help with query performance, especially aggregation queries. The dat…

---

## [The following Java JRE installation is unsupported](https://discuss.elastic.co/t/the-following-java-jre-installation-is-unsupported/237339)

<div class="topic-metadata">

**Author:** [@rdesanno](https://discuss.elastic.co/u/rdesanno)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 9:21pm UTC](https://discuss.elastic.co/t/the-following-java-jre-installation-is-unsupported/237339 "2020-06-16T21:21:42Z")

</div>

Hi all! I am running a 3 node, 7.6.2 cluster and came across the following critical alert during my latest Nessus scan on each: The following Java JRE installation is unsupported : Path : /usr/share/ela…

---

## [Terms query not working as expected](https://discuss.elastic.co/t/terms-query-not-working-as-expected/237357)

<div class="topic-metadata">

**Author:** [@denis\_ritchie](https://discuss.elastic.co/u/denis_ritchie)\
**Replies:** 0\
**Last updated:** [June 16, 2020, 7:43pm UTC](https://discuss.elastic.co/t/terms-query-not-working-as-expected/237357 "2020-06-16T19:43:22Z")

</div>

Below is terms query with \_msearch. But its not giving all result.As of now, it only return result for 4161 even though data exists for 4402 as well. please look suggest solution. GET \_msearch { "index": \["index1", "i…

---

## [Retrieve unique key names from "property" field](https://discuss.elastic.co/t/retrieve-unique-key-names-from-property-field/237268)

<div class="topic-metadata">

**Author:** [@mashuma](https://discuss.elastic.co/u/mashuma)\
**Replies:** 8\
**Last updated:** [June 16, 2020, 7:18pm UTC](https://discuss.elastic.co/t/retrieve-unique-key-names-from-property-field/237268 "2020-06-16T19:18:44Z")

</div>

Hello everyone, Quick question.. I've got following documents. \[ { "aid": 1, "ameta": { "City": "Brussels", "Fleet": "", "Works": "Building", "Status"…

---

## [Field aliases in search results](https://discuss.elastic.co/t/field-aliases-in-search-results/237354)

<div class="topic-metadata">

**Author:** [@Ram\_Jeghan](https://discuss.elastic.co/u/Ram_Jeghan)\
**Replies:** 0\
**Last updated:** [June 16, 2020, 6:57pm UTC](https://discuss.elastic.co/t/field-aliases-in-search-results/237354 "2020-06-16T18:57:51Z")

</div>

The field aliases in search results show the original field names and not aliases. How do we get the alias field names in the search result. Ex: PUT myindex { "mappings": { "properties": { …

---

## [Elasticsearch no longer writing to index(s) after upgrading from 7.6 to 7.7](https://discuss.elastic.co/t/elasticsearch-no-longer-writing-to-index-s-after-upgrading-from-7-6-to-7-7/236775)

<div class="topic-metadata">

**Author:** [@dfinn](https://discuss.elastic.co/u/dfinn)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 4:49pm UTC](https://discuss.elastic.co/t/elasticsearch-no-longer-writing-to-index-s-after-upgrading-from-7-6-to-7-7/236775 "2020-06-16T16:49:03Z")

</div>

Last night we upgraded from 7.6 to 7.7. Since then we have not had any logs coming into Elasticsearch. Our pipeline looks like so: filebeat on nodes ship to a single ELK server I enabled ruby debug logging in logstas…

---

## [Synchronizing elastic search with relational database](https://discuss.elastic.co/t/synchronizing-elastic-search-with-relational-database/237342)

<div class="topic-metadata">

**Author:** [@Ragav\_Kb](https://discuss.elastic.co/u/Ragav_Kb)\
**Replies:** 0\
**Last updated:** [June 16, 2020, 4:43pm UTC](https://discuss.elastic.co/t/synchronizing-elastic-search-with-relational-database/237342 "2020-06-16T16:43:47Z")

</div>

I'm new to elastic search and evaluating a need to synchronize data from relational database to elastic search. This article provided a solution to achieve it - https://www.elastic.co/blog/how-to-keep-elasticsearch-sync…

---

## [Using remote reindex on clusters which doesn't support username & password](https://discuss.elastic.co/t/using-remote-reindex-on-clusters-which-doesnt-support-username-password/237333)

<div class="topic-metadata">

**Author:** [@ankikala](https://discuss.elastic.co/u/ankikala)\
**Replies:** 0\
**Last updated:** [June 16, 2020, 3:44pm UTC](https://discuss.elastic.co/t/using-remote-reindex-on-clusters-which-doesnt-support-username-password/237333 "2020-06-16T15:44:24Z")

</div>

Hello, I was exploring the remote reindex feature. Looking at the documentation and a bit of code reading, it seems remote reindex would only work if the cluster supports username & password kind of authentication. So …

---

## [Scalability of ES server](https://discuss.elastic.co/t/scalability-of-es-server/237329)

<div class="topic-metadata">

**Author:** [@Andre\_Dexheimer](https://discuss.elastic.co/u/Andre_Dexheimer)\
**Replies:** 0\
**Last updated:** [June 16, 2020, 3:20pm UTC](https://discuss.elastic.co/t/scalability-of-es-server/237329 "2020-06-16T15:20:16Z")

</div>

Hi, I'm running a setup with Elasticsearch, Fluentd and Kibana where a single central aggregator receives data from multiple clients and stores it into elasticsearch, running in a docker compose. I receive about 22GB o…

---

## [Analyzers returning exact word](https://discuss.elastic.co/t/analyzers-returning-exact-word/237201)

<div class="topic-metadata">

**Author:** [@Kevin\_Juliano](https://discuss.elastic.co/u/Kevin_Juliano)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 1:57pm UTC](https://discuss.elastic.co/t/analyzers-returning-exact-word/237201 "2020-06-16T13:57:11Z")

</div>

Hi! I successfully indexed and configure phonetic and synonym analyzers, but my problem now is, when I search a word or a phrase, it is returning the exact thing instead of just returning the synonym or the soundex of t…

---

## ["doc\_values: False" not working for simple\_query\_string](https://discuss.elastic.co/t/doc-values-false-not-working-for-simple-query-string/237310)

<div class="topic-metadata">

**Author:** [@cool\_arun](https://discuss.elastic.co/u/cool_arun)\
**Replies:** 0\
**Last updated:** [June 16, 2020, 1:42pm UTC](https://discuss.elastic.co/t/doc-values-false-not-working-for-simple-query-string/237310 "2020-06-16T13:42:49Z")

</div>

Hi, I've set "doc\_values": false for some fields because of this when I try to use this in simple\_query\_string it's not searching over those fields, but if I remove the fields parameter from simple\_query\_string it search…

---

## [Differences between 2 groups of documents by multiple criteria](https://discuss.elastic.co/t/differences-between-2-groups-of-documents-by-multiple-criteria/237300)

<div class="topic-metadata">

**Author:** [@mihailo](https://discuss.elastic.co/u/mihailo)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 1:32pm UTC](https://discuss.elastic.co/t/differences-between-2-groups-of-documents-by-multiple-criteria/237300 "2020-06-16T13:32:45Z")

</div>

Hello everyone, Please take a look at this dummy documents: \[ { "project": "a", "run": 1, "tool\_name": "tool\_1", "tool\_output": "abc.com" }, { "project": "a", …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=887)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=889)
