# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=926

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 927

---

## [Elastic Search Not Properly Filtering Search Terms for autocomplete. Causing sql error to show when using words like "MAX" or "COUNT" etc in product names](https://discuss.elastic.co/t/elastic-search-not-properly-filtering-search-terms-for-autocomplete-causing-sql-error-to-show-when-using-words-like-max-or-count-etc-in-product-names/231562)

<div class="topic-metadata">

**Author:** [@scottbolasevich](https://discuss.elastic.co/u/scottbolasevich)\
**Replies:** 4\
**Last updated:** [May 11, 2020, 1:49pm UTC](https://discuss.elastic.co/t/elastic-search-not-properly-filtering-search-terms-for-autocomplete-causing-sql-error-to-show-when-using-words-like-max-or-count-etc-in-product-names/231562 "2020-05-11T13:49:28Z")

</div>

Not Properly Filtering Search Terms for autocomplete. Causing sql error to show when using words like "MAX" or "COUNT" etc Preconditions magento 2.3.4 and elastic search 6+ on nexcess Magento Version : 2.3.4 ElasticS…

---

## [Watcher : action index : add or rename field on "foreach"](https://discuss.elastic.co/t/watcher-action-index-add-or-rename-field-on-foreach/231366)

<div class="topic-metadata">

**Author:** [@bricevalenza](https://discuss.elastic.co/u/bricevalenza)\
**Replies:** 1\
**Last updated:** [May 11, 2020, 1:41pm UTC](https://discuss.elastic.co/t/watcher-action-index-add-or-rename-field-on-foreach/231366 "2020-05-11T13:41:18Z")

</div>

Hi, I would like to count the number of documents based on a search, in order to follow the evolution of the number of documents. I use the watcher for this, which allows me to execute a regular query and retrieve the …

---

## [How to get last N documents with ascending order](https://discuss.elastic.co/t/how-to-get-last-n-documents-with-ascending-order/232028)

<div class="topic-metadata">

**Author:** [@JavaDeveloper](https://discuss.elastic.co/u/JavaDeveloper)\
**Replies:** 0\
**Last updated:** [May 11, 2020, 1:29pm UTC](https://discuss.elastic.co/t/how-to-get-last-n-documents-with-ascending-order/232028 "2020-05-11T13:29:21Z")

</div>

Hi everyone. I know with the following command, we can get last N documents: POST index/\_search { "size": N, (N=10 for example) "sort": { "timestamp": "desc"}, "query": { "match\_all": {} } } But if …

---

## [How can I persist Elasticsearch license update](https://discuss.elastic.co/t/how-can-i-persist-elasticsearch-license-update/232027)

<div class="topic-metadata">

**Author:** [@wyze1](https://discuss.elastic.co/u/wyze1)\
**Replies:** 0\
**Last updated:** [May 11, 2020, 1:28pm UTC](https://discuss.elastic.co/t/how-can-i-persist-elasticsearch-license-update/232027 "2020-05-11T13:28:53Z")

</div>

Currently on version 5.5 and exploring ways to persist the license update to Platinum. This reverts back to trial version after pod restarts

---

## [Upgrade ES 2.4 to 5.6 index.mapping.total\_fields.limit](https://discuss.elastic.co/t/upgrade-es-2-4-to-5-6-index-mapping-total-fields-limit/232023)

<div class="topic-metadata">

**Author:** [@rhangl](https://discuss.elastic.co/u/rhangl)\
**Replies:** 0\
**Last updated:** [May 11, 2020, 1:20pm UTC](https://discuss.elastic.co/t/upgrade-es-2-4-to-5-6-index-mapping-total-fields-limit/232023 "2020-05-11T13:20:49Z")

</div>

Hi, We plan the Upgrade from ES 2.4 to 5.6. After running the Elasticsearch Migration Helper v2.0.4 it comes out that some of our indices have more then 1000 field mapping (between 1010 and 1090). Will this be a problem…

---

## [Filtered aliases warning - cannot have more than one for same index?](https://discuss.elastic.co/t/filtered-aliases-warning-cannot-have-more-than-one-for-same-index/232019)

<div class="topic-metadata">

**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\
**Replies:** 0\
**Last updated:** [May 11, 2020, 1:12pm UTC](https://discuss.elastic.co/t/filtered-aliases-warning-cannot-have-more-than-one-for-same-index/232019 "2020-05-11T13:12:17Z")

</div>

I have the following WARNING level message in my Elasticsearch 6.8 logs (index names are made up): More than one (4) filtered alias found for same index (myindex-2012.12.12). This is currently not recommended. Aliases: …

---

## [Is it possible to check that specific data matches the query without loading it to the index?](https://discuss.elastic.co/t/is-it-possible-to-check-that-specific-data-matches-the-query-without-loading-it-to-the-index/232014)

<div class="topic-metadata">

**Author:** [@pavlovdog](https://discuss.elastic.co/u/pavlovdog)\
**Replies:** 0\
**Last updated:** [May 11, 2020, 12:51pm UTC](https://discuss.elastic.co/t/is-it-possible-to-check-that-specific-data-matches-the-query-without-loading-it-to-the-index/232014 "2020-05-11T12:51:53Z")

</div>

Hi, there! Imagine that I have a specific data string and a specific query. The simple way to check that the query matches the data is to load the data into the Elastic index and run the online query. But can I do it wi…

---

## [Elasticsearch upgrade failed from 7.4.0 to 7.5.2](https://discuss.elastic.co/t/elasticsearch-upgrade-failed-from-7-4-0-to-7-5-2/229622)

<div class="topic-metadata">

**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\
**Replies:** 3\
**Last updated:** [May 11, 2020, 12:28pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-failed-from-7-4-0-to-7-5-2/229622 "2020-05-11T12:28:49Z")

</div>

Hi Team, We have a elasticsearch cluster configured with 7.4.0 version. Now we wanted to upgrade it to 7.5.2 and enable xpack security. When I tried to upgrade to 7.5.2 version, I ended up with below error message. Wha…

---

## [Not able to login to kibana with SAML IdP(Siteminder)](https://discuss.elastic.co/t/not-able-to-login-to-kibana-with-saml-idp-siteminder/231336)

<div class="topic-metadata">

**Author:** [@bansalhp](https://discuss.elastic.co/u/bansalhp)\
**Replies:** 13\
**Last updated:** [May 11, 2020, 12:00pm UTC](https://discuss.elastic.co/t/not-able-to-login-to-kibana-with-saml-idp-siteminder/231336 "2020-05-11T12:00:56Z")

</div>

Hi, We are trying to authenticate Elasticsearch with SAML realm using IpD(Siteminder) on a development elasticsearch setup. https://www.elastic.co/guide/en/elasticsearch/reference/master/saml-guide-authentication.html#…

---

## [Avoiding unneccessary datashuffling during datanode downtime](https://discuss.elastic.co/t/avoiding-unneccessary-datashuffling-during-datanode-downtime/231996)

<div class="topic-metadata">

**Author:** [@blacksmith](https://discuss.elastic.co/u/blacksmith)\
**Replies:** 0\
**Last updated:** [May 11, 2020, 11:47am UTC](https://discuss.elastic.co/t/avoiding-unneccessary-datashuffling-during-datanode-downtime/231996 "2020-05-11T11:47:00Z")

</div>

Hey! Running ES 5.6.16 on a three-node cluster (all master-eligible, two data-nodes). Will soon perform maintenance (one node at a time) which will take 2 hours tops per node. When one of the data-nodes will be down, I …

---

## [ResourceAlreadyExists Exception After Deleting Index](https://discuss.elastic.co/t/resourcealreadyexists-exception-after-deleting-index/231953)

<div class="topic-metadata">

**Author:** [@ddavid](https://discuss.elastic.co/u/ddavid)\
**Replies:** 3\
**Last updated:** [May 11, 2020, 11:31am UTC](https://discuss.elastic.co/t/resourcealreadyexists-exception-after-deleting-index/231953 "2020-05-11T11:31:06Z")

</div>

Background I am using python's behave library to write feature tests for my code in linux environment. Some features have data that is stored in elastic search (no clusters, 5 shards, 1 replica, version 6.4.0). For this…

---

## [ElasticSearch pod restart very slowly](https://discuss.elastic.co/t/elasticsearch-pod-restart-very-slowly/231993)

<div class="topic-metadata">

**Author:** [@shyhong](https://discuss.elastic.co/u/shyhong)\
**Replies:** 0\
**Last updated:** [May 11, 2020, 11:19am UTC](https://discuss.elastic.co/t/elasticsearch-pod-restart-very-slowly/231993 "2020-05-11T11:19:28Z")

</div>

Hi all, recently I encountered a restart issue of Elasticsearch. I have a cluster with 3 nodes, last time I changed some configurations and the pod get restarted, however the pod state took almost 5 hours to become 1/1. …

---

## [ElasticSearch and RestHighLevelClient and fetching more than 10000 items](https://discuss.elastic.co/t/elasticsearch-and-resthighlevelclient-and-fetching-more-than-10000-items/227903)

<div class="topic-metadata">

**Author:** [@oreo](https://discuss.elastic.co/u/oreo)\
**Replies:** 5\
**Last updated:** [May 11, 2020, 11:08am UTC](https://discuss.elastic.co/t/elasticsearch-and-resthighlevelclient-and-fetching-more-than-10000-items/227903 "2020-05-11T11:08:32Z")

</div>

I'm implementing a REST API using Java RestHighLevelClient. The user specifies the pageNumber and the pageSize of the requested data through the REST parameters. By default, because of the "max\_result\_window" limitation…

---

## [Mapped ip with type "ip" but getting mapping parsing error](https://discuss.elastic.co/t/mapped-ip-with-type-ip-but-getting-mapping-parsing-error/231981)

<div class="topic-metadata">

**Author:** [@IanCap](https://discuss.elastic.co/u/IanCap)\
**Replies:** 0\
**Last updated:** [May 11, 2020, 10:38am UTC](https://discuss.elastic.co/t/mapped-ip-with-type-ip-but-getting-mapping-parsing-error/231981 "2020-05-11T10:38:07Z")

</div>

Hi, I'm currently trying to fix the following error : index \[log-2020-05-04\], type \[\_doc\], id \[someid\], message \[ElasticsearchException\[Elasticsearch exception \[type=mapper\_parsing\_exception, reason=object mapping for …

---

## [Create new custom aggregator](https://discuss.elastic.co/t/create-new-custom-aggregator/231979)

<div class="topic-metadata">

**Author:** [@Damiano](https://discuss.elastic.co/u/Damiano)\
**Replies:** 0\
**Last updated:** [May 11, 2020, 10:25am UTC](https://discuss.elastic.co/t/create-new-custom-aggregator/231979 "2020-05-11T10:25:42Z")

</div>

Hello, I need to create a custom metric aggregator that has its custom logic, like MAX, MIN, AVG etc. Is there an example to understand how to create it in Java? Thank you!

---

## [\[Node.js\] Elasticsearch search latency degrades over time (within hours)](https://discuss.elastic.co/t/node-js-elasticsearch-search-latency-degrades-over-time-within-hours/230948)

<div class="topic-metadata">

**Author:** [@morten\_bo](https://discuss.elastic.co/u/morten_bo)\
**Replies:** 19\
**Last updated:** [May 11, 2020, 9:44am UTC](https://discuss.elastic.co/t/node-js-elasticsearch-search-latency-degrades-over-time-within-hours/230948 "2020-05-11T09:44:30Z")

</div>

Problem Elasticsearch search latency degrades over time (from ~2 ms to fluctuations to 50-100 ms until we get circuit\_breaking\_exceptions. Current Fix When we restart our Node.js process (runs within Kubernetes on AWS…

---

## [Trying to make search like \`procter&gamble\` and \`procter & gamble\` work the same way](https://discuss.elastic.co/t/trying-to-make-search-like-procter-gamble-and-procter-gamble-work-the-same-way/231961)

<div class="topic-metadata">

**Author:** [@AHeavyObject](https://discuss.elastic.co/u/AHeavyObject)\
**Replies:** 0\
**Last updated:** [May 11, 2020, 9:01am UTC](https://discuss.elastic.co/t/trying-to-make-search-like-procter-gamble-and-procter-gamble-work-the-same-way/231961 "2020-05-11T09:01:50Z")

</div>

My task is: Make procter&gamble and procter & gamble produce the same results including score Make it universal, not via synonyms, as it can be any other Somehow&Somewhat Highlight procter&gamble or procter & gamble,…

---

## [Difference in total hits and received documents count](https://discuss.elastic.co/t/difference-in-total-hits-and-received-documents-count/231957)

<div class="topic-metadata">

**Author:** [@sarveshvish97](https://discuss.elastic.co/u/sarveshvish97)\
**Replies:** 0\
**Last updated:** [May 11, 2020, 8:41am UTC](https://discuss.elastic.co/t/difference-in-total-hits-and-received-documents-count/231957 "2020-05-11T08:41:24Z")

</div>

Hi, i am using Elasticsearch 7.6.0, i'm using python to pull data from Elasticsearch so far i used scroll function and search\_after query to paginate data but there's difference in total hits and total document i rec…

---

## [How is managed multiple synonyms?](https://discuss.elastic.co/t/how-is-managed-multiple-synonyms/231956)

<div class="topic-metadata">

**Author:** [@granier](https://discuss.elastic.co/u/granier)\
**Replies:** 0\
**Last updated:** [May 11, 2020, 8:33am UTC](https://discuss.elastic.co/t/how-is-managed-multiple-synonyms/231956 "2020-05-11T08:33:48Z")

</div>

Hi, iI understood that a following entry can be set in a synonym file : word1, word2 =\> word1, word2 Like that a search on word1 or word2 returns the same set of documents. I do not understand how such synonyms are …

---

## [Keep get OOM when reindex](https://discuss.elastic.co/t/keep-get-oom-when-reindex/231741)

<div class="topic-metadata">

**Author:** [@taoliu2019](https://discuss.elastic.co/u/taoliu2019)\
**Replies:** 2\
**Last updated:** [May 11, 2020, 8:17am UTC](https://discuss.elastic.co/t/keep-get-oom-when-reindex/231741 "2020-05-11T08:17:27Z")

</div>

Hi, I'm keeping getting OOM alert when try to reindex two index. to avoid make reindex impact, I already set the requests\_per\_second=5. Currently, we have a 5 node cluster. each node with 16G memory and 8 Core. Here is…

---

## [Metricbeat encrypt passwords in configuration file](https://discuss.elastic.co/t/metricbeat-encrypt-passwords-in-configuration-file/231889)

<div class="topic-metadata">

**Author:** [@mctj](https://discuss.elastic.co/u/mctj)\
**Replies:** 2\
**Last updated:** [May 11, 2020, 8:16am UTC](https://discuss.elastic.co/t/metricbeat-encrypt-passwords-in-configuration-file/231889 "2020-05-11T08:16:57Z")

</div>

Hey, I'm using the new sql module in version 7.6 and I need to assign the username and the password of the db in the yaml config in the hosts key(src). If someone will read the yaml file or get it from anybody it means…

---

## [What does "now/d" mean in elasticsearch](https://discuss.elastic.co/t/what-does-now-d-mean-in-elasticsearch/231928)

<div class="topic-metadata">

**Author:** [@rishabh\_jain](https://discuss.elastic.co/u/rishabh_jain)\
**Replies:** 1\
**Last updated:** [May 11, 2020, 7:42am UTC](https://discuss.elastic.co/t/what-does-now-d-mean-in-elasticsearch/231928 "2020-05-11T07:42:41Z")

</div>

GET test\_index/\_search { "query": { "bool": { "must": \[ { "range": { "timestamp": { "gte": "now-1d/d", "lte": "now" } } } \] } } } I'am now able to understand what does query means.What does now-1d/d mean…

---

## [Disabling circuit breakers in ES7](https://discuss.elastic.co/t/disabling-circuit-breakers-in-es7/231770)

<div class="topic-metadata">

**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\
**Replies:** 1\
**Last updated:** [May 11, 2020, 6:32am UTC](https://discuss.elastic.co/t/disabling-circuit-breakers-in-es7/231770 "2020-05-11T06:32:54Z")

</div>

What's the right way to disable circuit breakers in elasticsearch 7? indices.breaker.type be set to none or indices.breaker.total.use\_real\_memory be set to false?

---

## [How to compare two field values using query\_string in Elasticsearch](https://discuss.elastic.co/t/how-to-compare-two-field-values-using-query-string-in-elasticsearch/231713)

<div class="topic-metadata">

**Author:** [@Srinivas\_Kondapally](https://discuss.elastic.co/u/Srinivas_Kondapally)\
**Replies:** 1\
**Last updated:** [May 11, 2020, 6:30am UTC](https://discuss.elastic.co/t/how-to-compare-two-field-values-using-query-string-in-elasticsearch/231713 "2020-05-11T06:30:46Z")

</div>

I am using Elast Alert for Alerting System which queries ElasticSearch using REST API's for a certain interval of time. But I have a scenario that I need to compare two fields if the values of two fields get matches aler…

---

## [Multiple terms and multiple filter in single query](https://discuss.elastic.co/t/multiple-terms-and-multiple-filter-in-single-query/231926)

<div class="topic-metadata">

**Author:** [@m.fayazahammed](https://discuss.elastic.co/u/m.fayazahammed)\
**Replies:** 1\
**Last updated:** [May 11, 2020, 5:34am UTC](https://discuss.elastic.co/t/multiple-terms-and-multiple-filter-in-single-query/231926 "2020-05-11T05:34:58Z")

</div>

Hi Team, I have basically below documents with multiple collections. {"id" : 1, "stores" :\[1,2,3,4,5\], "items":\[ 55,44,334,155\]} {"id" : 2, "stores" :\[1\], "items":\[ 55\]} {"id" : 3, "stores" :\[1,5\], "items":\[ 155\]} {…

---

## [Cluster goes yellow abruptly](https://discuss.elastic.co/t/cluster-goes-yellow-abruptly/231669)

<div class="topic-metadata">

**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\
**Replies:** 2\
**Last updated:** [May 11, 2020, 5:20am UTC](https://discuss.elastic.co/t/cluster-goes-yellow-abruptly/231669 "2020-05-11T05:20:11Z")

</div>

We're using elasticsearch 7.2 in production and lately we've been observing our cluster going yellow quite often even though none of the nodes left the cluster! Whenever the cluster have gone yellow, we've seen a sudden…

---

## [Hot-Warm nodes - Indexes replicated across nodes](https://discuss.elastic.co/t/hot-warm-nodes-indexes-replicated-across-nodes/231240)

<div class="topic-metadata">

**Author:** [@Camilo\_Diaz](https://discuss.elastic.co/u/Camilo_Diaz)\
**Replies:** 4\
**Last updated:** [May 11, 2020, 4:01am UTC](https://discuss.elastic.co/t/hot-warm-nodes-indexes-replicated-across-nodes/231240 "2020-05-11T04:01:36Z")

</div>

Hi, I have 2 data nodes, one as master (hot) and other as data (warm) authmattix x.x.x. box\_type hot pukeko x.x.x.x box\_type warm I have set all the indexes to number\_of\_replicas= 0 on …

---

## [Rollup Jobs - allocation only on defined nodes?](https://discuss.elastic.co/t/rollup-jobs-allocation-only-on-defined-nodes/231897)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 1\
**Last updated:** [May 10, 2020, 11:38pm UTC](https://discuss.elastic.co/t/rollup-jobs-allocation-only-on-defined-nodes/231897 "2020-05-10T23:38:33Z")

</div>

Hi, Is it possible to define that data from the Rollups should always be allocated only on certain nodes? I'm thinking of an automatic setting. If I'm not mistaken, I can set the ILM to Rollup. Nevertheless, for the …

---

## [How to backup spaces and user,roles of elasticsearch](https://discuss.elastic.co/t/how-to-backup-spaces-and-user-roles-of-elasticsearch/231742)

<div class="topic-metadata">

**Author:** [@Dragon9](https://discuss.elastic.co/u/Dragon9)\
**Replies:** 1\
**Last updated:** [May 10, 2020, 11:21pm UTC](https://discuss.elastic.co/t/how-to-backup-spaces-and-user-roles-of-elasticsearch/231742 "2020-05-10T23:21:15Z")

</div>

when i bounce elasticsearch and launch new application every time i need to create user,roles,and spaces in elasticsearch . i follow saved objects like dashboards using export ndjson file it is very helpful . so like …

---

## [Exception in thread "main" java.lang.RuntimeException: starting java failed with \[1\] : Failed to start Elasticsearch](https://discuss.elastic.co/t/exception-in-thread-main-java-lang-runtimeexception-starting-java-failed-with-1-failed-to-start-elasticsearch/231857)

<div class="topic-metadata">

**Author:** [@proxx](https://discuss.elastic.co/u/proxx)\
**Replies:** 1\
**Last updated:** [May 10, 2020, 11:13pm UTC](https://discuss.elastic.co/t/exception-in-thread-main-java-lang-runtimeexception-starting-java-failed-with-1-failed-to-start-elasticsearch/231857 "2020-05-10T23:13:04Z")

</div>

Hi, I'm using Elasticsearch 7.6.1, after installing Elasticsearch 7.6.1 rpm. I'm unable to start elasticsearch service. Error \[@o\* ~\] sudo systemctl status elasticsearch ● elasticsearch.service - Elasticsearch Loade…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=925)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=927)
