# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=930

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 931

---

## [Synonym token graphs and Shingles don't play well together](https://discuss.elastic.co/t/synonym-token-graphs-and-shingles-dont-play-well-together/230713)

<div class="topic-metadata">

**Author:** [@Silas\_Hansen](https://discuss.elastic.co/u/Silas_Hansen)\
**Replies:** 1\
**Last updated:** [May 7, 2020, 12:41pm UTC](https://discuss.elastic.co/t/synonym-token-graphs-and-shingles-dont-play-well-together/230713 "2020-05-07T12:41:34Z")

</div>

Hi I know I'm not the first one to touch on this issue, but no solution seems to have been provided. Expected behavior: With the synonym \[world,earth\] and the phrase "hello world", sending them through a shingle filte…

---

## [UNASSIGNED ALLOCATION\_FAILED](https://discuss.elastic.co/t/unassigned-allocation-failed/229642)

<div class="topic-metadata">

**Author:** [@rnappert](https://discuss.elastic.co/u/rnappert)\
**Replies:** 18\
**Last updated:** [May 7, 2020, 12:19pm UTC](https://discuss.elastic.co/t/unassigned-allocation-failed/229642 "2020-05-07T12:19:45Z")

</div>

I have a Elasticsearch 6.2.3 setup (single node). The system was running smoothly for a period of time. Needed to expand the hard-drive, since the disk space was about to run out. After the expansion, Elasticsearch came …

---

## [Platinum Licensed cluster using CCS against a Basic Licensed cluster](https://discuss.elastic.co/t/platinum-licensed-cluster-using-ccs-against-a-basic-licensed-cluster/231346)

<div class="topic-metadata">

**Author:** [@chris.murray](https://discuss.elastic.co/u/chris.murray)\
**Replies:** 5\
**Last updated:** [May 7, 2020, 11:21am UTC](https://discuss.elastic.co/t/platinum-licensed-cluster-using-ccs-against-a-basic-licensed-cluster/231346 "2020-05-07T11:21:42Z")

</div>

Not sure if this idea is going to be offensive or not, but hear me out. We have a pretty standard log searching setup internally, spread across 40 nodes. It's kind of a pet project for some of our analysts. This setup…

---

## [Node IPs in the cluster does not changed when the host/system IPs already changed](https://discuss.elastic.co/t/node-ips-in-the-cluster-does-not-changed-when-the-host-system-ips-already-changed/228949)

<div class="topic-metadata">

**Author:** [@worapojc](https://discuss.elastic.co/u/worapojc)\
**Replies:** 4\
**Last updated:** [May 7, 2020, 11:20am UTC](https://discuss.elastic.co/t/node-ips-in-the-cluster-does-not-changed-when-the-host-system-ips-already-changed/228949 "2020-05-07T11:20:47Z")

</div>

Hello Elasticsearch team, I'm using Elasticsearch 1.7, here is the \_cat/nodes response. curl -s localhost:9200/\_cat/nodes data\_node\_1 10.255.70.31 14 54 1.98 d - data\_node\_1.instance.3 master\_node\_1 159.42.11.4…

---

## [Get added documents immedately](https://discuss.elastic.co/t/get-added-documents-immedately/231463)

<div class="topic-metadata">

**Author:** [@JavaDeveloper](https://discuss.elastic.co/u/JavaDeveloper)\
**Replies:** 12\
**Last updated:** [May 7, 2020, 11:04am UTC](https://discuss.elastic.co/t/get-added-documents-immedately/231463 "2020-05-07T11:04:34Z")

</div>

Hi everyone. I have an application that stores documents to the elasticsearch. Also, I have another web application and I want to show added documents to the elasticsearch immediately in a page (similar to a socket bet…

---

## [Older Queries Slowed after new indices created](https://discuss.elastic.co/t/older-queries-slowed-after-new-indices-created/229951)

<div class="topic-metadata">

**Author:** [@gsahu25](https://discuss.elastic.co/u/gsahu25)\
**Replies:** 1\
**Last updated:** [May 7, 2020, 10:40am UTC](https://discuss.elastic.co/t/older-queries-slowed-after-new-indices-created/229951 "2020-05-07T10:40:52Z")

</div>

Hi, I had few queries running fine on a set of indices. I loaded new indices which are big(total size 500GB). Now the queries have become slow. New indices are not queried. Can shard imbalance cause this? Any clue how…

---

## [Hot/Warm - unassigned replica](https://discuss.elastic.co/t/hot-warm-unassigned-replica/231491)

<div class="topic-metadata">

**Author:** [@KubaChrzan](https://discuss.elastic.co/u/KubaChrzan)\
**Replies:** 2\
**Last updated:** [May 7, 2020, 10:29am UTC](https://discuss.elastic.co/t/hot-warm-unassigned-replica/231491 "2020-05-07T10:29:14Z")

</div>

Hello Elastic Team. Fresh and new elasticsearch-7.4.0-1 cluster (3 data nodes data\_type: warm + 3 master/data nodes data\_type: hot). What i am trying to implement is hot/warm architecture today index kept on HOT (loc…

---

## [Date value not received](https://discuss.elastic.co/t/date-value-not-received/231489)

<div class="topic-metadata">

**Author:** [@andrejK](https://discuss.elastic.co/u/andrejK)\
**Replies:** 1\
**Last updated:** [May 7, 2020, 10:09am UTC](https://discuss.elastic.co/t/date-value-not-received/231489 "2020-05-07T10:09:44Z")

</div>

Hi everyone, not sure if this is the correct forum, but I will try. I have C# console application where I use NEST to index data and search in ElasticSearch. Versions: ElasticSearch 7.5.2 .NET 4.7.2 NEST 7.6.1 When …

---

## [Cipher-Priority Elasticsearch](https://discuss.elastic.co/t/cipher-priority-elasticsearch/231502)

<div class="topic-metadata">

**Author:** [@elastic-user](https://discuss.elastic.co/u/elastic-user)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 9:41am UTC](https://discuss.elastic.co/t/cipher-priority-elasticsearch/231502 "2020-05-07T09:41:10Z")

</div>

Hi, i am configuring es with TLS and cipher-suites. Is there a way to prioritize the entries for the following parameters: xpack.security.http.ssl.supported\_protocols: xpack.security.http.ssl.cipher\_suites: xpack.secu…

---

## [Using KQL to query for number using regex](https://discuss.elastic.co/t/using-kql-to-query-for-number-using-regex/231499)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 9:21am UTC](https://discuss.elastic.co/t/using-kql-to-query-for-number-using-regex/231499 "2020-05-07T09:21:24Z")

</div>

Hi all I notices something when i try some query using KQL, For example: i have 2 data like this 123.abc.deh and dhdk.abc.deh then when i write query for that like this test: \*.abc.deh then the only result return is d…

---

## [Update/Upsert based on new and old doc values](https://discuss.elastic.co/t/update-upsert-based-on-new-and-old-doc-values/231496)

<div class="topic-metadata">

**Author:** [@mabr3](https://discuss.elastic.co/u/mabr3)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 9:16am UTC](https://discuss.elastic.co/t/update-upsert-based-on-new-and-old-doc-values/231496 "2020-05-07T09:16:48Z")

</div>

Hello, I'm wondering if there's anyway to update a document based on the comparison of a value on the original version of the doc and on the new version. An example: Suppose you have document with id:A with field "fie…

---

## [I'm using Elasticsearch 7.5 I want calculate percentage in each buckets](https://discuss.elastic.co/t/im-using-elasticsearch-7-5-i-want-calculate-percentage-in-each-buckets/231484)

<div class="topic-metadata">

**Author:** [@Ramesh\_Kumar](https://discuss.elastic.co/u/Ramesh_Kumar)\
**Replies:** 1\
**Last updated:** [May 7, 2020, 8:28am UTC](https://discuss.elastic.co/t/im-using-elasticsearch-7-5-i-want-calculate-percentage-in-each-buckets/231484 "2020-05-07T08:28:57Z")

</div>

{ "aggs":{ "country":{ "terms":{ "field":"country.keyword", "size":10000 }, "aggs":{ "videocount":{ "avg":{ "field":"video\_count" } }, "viewcount":{ "avg":{ "field":"view\_count" } } } } } }

---

## [Max\_result\_window value not reflect in result set.. it show only 10k records only](https://discuss.elastic.co/t/max-result-window-value-not-reflect-in-result-set-it-show-only-10k-records-only/231465)

<div class="topic-metadata">

**Author:** [@Sanjaygpatel](https://discuss.elastic.co/u/Sanjaygpatel)\
**Replies:** 3\
**Last updated:** [May 7, 2020, 8:16am UTC](https://discuss.elastic.co/t/max-result-window-value-not-reflect-in-result-set-it-show-only-10k-records-only/231465 "2020-05-07T08:16:24Z")

</div>

Hello , i have set property of max\_result\_window : "1000000" in settings at index level but while search result for larger data set then only result 10k so it mean not taking effect index setting. is there anything i h…

---

## [How to pass in an artificial document to a MLT Query when searching for similar phrases?](https://discuss.elastic.co/t/how-to-pass-in-an-artificial-document-to-a-mlt-query-when-searching-for-similar-phrases/231473)

<div class="topic-metadata">

**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 7:25am UTC](https://discuss.elastic.co/t/how-to-pass-in-an-artificial-document-to-a-mlt-query-when-searching-for-similar-phrases/231473 "2020-05-07T07:25:35Z")

</div>

Hi, I am using the following MLT query GET /\_search { "query": { "more\_like\_this" : { "fields" : \["title", "content.standard"\], "like" : "Housing rents", "min\_term\_freq" …

---

## [Is it possible to define a node Hot and warm?](https://discuss.elastic.co/t/is-it-possible-to-define-a-node-hot-and-warm/231171)

<div class="topic-metadata">

**Author:** [@Kwiskas](https://discuss.elastic.co/u/Kwiskas)\
**Replies:** 6\
**Last updated:** [May 7, 2020, 7:19am UTC](https://discuss.elastic.co/t/is-it-possible-to-define-a-node-hot-and-warm/231171 "2020-05-07T07:19:55Z")

</div>

Hello On my company we have 3 data nodes connected on a master node I need to define a lifecycle policy But to do so I need to define which node is hot, warm, and cold my question: can I define a node with several ty…

---

## [Need Help for Creating Watcher for identifying occurence of same event](https://discuss.elastic.co/t/need-help-for-creating-watcher-for-identifying-occurence-of-same-event/231460)

<div class="topic-metadata">

**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 6:20am UTC](https://discuss.elastic.co/t/need-help-for-creating-watcher-for-identifying-occurence-of-same-event/231460 "2020-05-07T06:20:19Z")

</div>

Hey, I want to create a watcher that will give me alert for multiple occurrence of same value in field name for example there are 100 events in last 15 mins and out of those 100 events 10 events have same username ( …

---

## [Download Elasticsearch plugin behind proxy](https://discuss.elastic.co/t/download-elasticsearch-plugin-behind-proxy/231283)

<div class="topic-metadata">

**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\
**Replies:** 3\
**Last updated:** [May 7, 2020, 7:03am UTC](https://discuss.elastic.co/t/download-elasticsearch-plugin-behind-proxy/231283 "2020-05-07T07:03:58Z")

</div>

Hi guys , i was wondering how to add proxy parameters to elasticsearch to download plugin ? i've tried following these steps but nothing happened https://www.elastic.co/guide/en/elasticsearch/plugins/current/\_other\_comma…

---

## [I can create a document with a '/' in the ID but I can't delete it](https://discuss.elastic.co/t/i-can-create-a-document-with-a-in-the-id-but-i-cant-delete-it/231441)

<div class="topic-metadata">

**Author:** [@Sarang\_Dharmapurikar](https://discuss.elastic.co/u/Sarang_Dharmapurikar)\
**Replies:** 1\
**Last updated:** [May 7, 2020, 6:23am UTC](https://discuss.elastic.co/t/i-can-create-a-document-with-a-in-the-id-but-i-cant-delete-it/231441 "2020-05-07T06:23:32Z")

</div>

Hi folks, I tried to PUT a document in elastic index and I used a document ID that's: abc/xyz so it has a / in it. It gets created fine. But I'm not able to delete the document with that ID. Probably because the / is …

---

## [Cluster state is yellow due to unassigned shrads](https://discuss.elastic.co/t/cluster-state-is-yellow-due-to-unassigned-shrads/230462)

<div class="topic-metadata">

**Author:** [@DENMODSupport](https://discuss.elastic.co/u/DENMODSupport)\
**Replies:** 18\
**Last updated:** [May 7, 2020, 5:12am UTC](https://discuss.elastic.co/t/cluster-state-is-yellow-due-to-unassigned-shrads/230462 "2020-05-07T05:12:31Z")

</div>

Since there are 207 unassigned shrads, my cluster status became yellow. I ran the API "\_cluster/allocation/explain" and got below results. { "index": "en\_y\_29", "shard": 1, "primary": false, "current\_state": "unassi…

---

## [Python Query DSL | Aggregation partition finder](https://discuss.elastic.co/t/python-query-dsl-aggregation-partition-finder/231453)

<div class="topic-metadata">

**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 4:38am UTC](https://discuss.elastic.co/t/python-query-dsl-aggregation-partition-finder/231453 "2020-05-07T04:38:05Z")

</div>

Hi Team, Is there a way to programmatically build a search object and iterate through it's partitions? I am currently doing this by passing an incremental dict to my search object. s = Search(using=client) s = s.filter…

---

## [Exact match for string field](https://discuss.elastic.co/t/exact-match-for-string-field/230556)

<div class="topic-metadata">

**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\
**Replies:** 8\
**Last updated:** [May 7, 2020, 3:51am UTC](https://discuss.elastic.co/t/exact-match-for-string-field/230556 "2020-05-07T03:51:01Z")

</div>

Hello, Can anyone help me to find out how we can get exact search term match using query? I have two field in my index. contentid Title So if i provide full value for contentid and title in query so it should give m…

---

## [How to combine exact search and wildcard in elasticsearch simple\_query\_string](https://discuss.elastic.co/t/how-to-combine-exact-search-and-wildcard-in-elasticsearch-simple-query-string/231445)

<div class="topic-metadata">

**Author:** [@111330](https://discuss.elastic.co/u/111330)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 3:41am UTC](https://discuss.elastic.co/t/how-to-combine-exact-search-and-wildcard-in-elasticsearch-simple-query-string/231445 "2020-05-07T03:41:16Z")

</div>

I tried: GET /\_search { "query": { "simple\_query\_string" : { "query": "\\"sometext\*\\"", "fields": \["name"\], "default\_operator": "and", "quote\_field\_suffix": '.raw', "analyze\_…

---

## [X-pack-transport , x-pack-core.jar for the 6.5.4 version](https://discuss.elastic.co/t/x-pack-transport-x-pack-core-jar-for-the-6-5-4-version/231380)

<div class="topic-metadata">

**Author:** [@rthangaraj5](https://discuss.elastic.co/u/rthangaraj5)\
**Replies:** 1\
**Last updated:** [May 7, 2020, 1:39am UTC](https://discuss.elastic.co/t/x-pack-transport-x-pack-core-jar-for-the-6-5-4-version/231380 "2020-05-07T01:39:07Z")

</div>

Hi Team, I have added the x-pack-transport.jar, x-pack-core.jar 6.5.4 version. do we required the License ? Pls check and tell me .if require how can we get the License?

---

## [SSL/TSL configurations for elasticsearch-6.2.4](https://discuss.elastic.co/t/ssl-tsl-configurations-for-elasticsearch-6-2-4/231412)

<div class="topic-metadata">

**Author:** [@hatif\_naqvi](https://discuss.elastic.co/u/hatif_naqvi)\
**Replies:** 1\
**Last updated:** [May 7, 2020, 1:30am UTC](https://discuss.elastic.co/t/ssl-tsl-configurations-for-elasticsearch-6-2-4/231412 "2020-05-07T01:30:51Z")

</div>

Hi All, I have a quick question. Can we enable SSL/TSL in elasticsearch-6.2.4, I've basic/free version. Your response will be appreciated.

---

## [Elatic mapper\_parsing\_exception](https://discuss.elastic.co/t/elatic-mapper-parsing-exception/231414)

<div class="topic-metadata">

**Author:** [@savvy](https://discuss.elastic.co/u/savvy)\
**Replies:** 1\
**Last updated:** [May 7, 2020, 12:25am UTC](https://discuss.elastic.co/t/elatic-mapper-parsing-exception/231414 "2020-05-07T00:25:40Z")

</div>

\[2020-05-06T17:16:33,007\]\[WARN \]\[logstash.outputs.elasticsearch\]\[mykafka\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"mydata-day-2020.05.06-113", :routing=\>nil, :\_type=\>…

---

## [Using update API to change the contents of a text field](https://discuss.elastic.co/t/using-update-api-to-change-the-contents-of-a-text-field/231418)

<div class="topic-metadata">

**Author:** [@Tim\_Estes](https://discuss.elastic.co/u/Tim_Estes)\
**Replies:** 6\
**Last updated:** [May 7, 2020, 12:15am UTC](https://discuss.elastic.co/t/using-update-api-to-change-the-contents-of-a-text-field/231418 "2020-05-07T00:15:22Z")

</div>

Hello, I have the following schema for an index, with some example documents. My use-case is that I'm indexing a book and I am indexing by page. I'm trying to update the contents of a page if the user decides to edit a …

---

## [How to move index to new server without direct connection?](https://discuss.elastic.co/t/how-to-move-index-to-new-server-without-direct-connection/231397)

<div class="topic-metadata">

**Author:** [@guibarati](https://discuss.elastic.co/u/guibarati)\
**Replies:** 1\
**Last updated:** [May 6, 2020, 9:53pm UTC](https://discuss.elastic.co/t/how-to-move-index-to-new-server-without-direct-connection/231397 "2020-05-06T21:53:00Z")

</div>

Is it possible to move index data through file transfer? I need to move a few indices to a new server but the current and new server networks don't have connectivity to each other. How can I save the index in a manner t…

---

## [How to use regex](https://discuss.elastic.co/t/how-to-use-regex/231250)

<div class="topic-metadata">

**Author:** [@user2416](https://discuss.elastic.co/u/user2416)\
**Replies:** 7\
**Last updated:** [May 6, 2020, 9:46pm UTC](https://discuss.elastic.co/t/how-to-use-regex/231250 "2020-05-06T21:46:07Z")

</div>

Hi, I am trying to match multiple fileds with multiple values and also trying to match some values using regex. Below is my query. But its not working. Can someone help me with this query. { "query": { "bool": { …

---

## [Unable to write to Elasticsearch from Spark Java](https://discuss.elastic.co/t/unable-to-write-to-elasticsearch-from-spark-java/231230)

<div class="topic-metadata">

**Author:** [@angryninja](https://discuss.elastic.co/u/angryninja)\
**Replies:** 2\
**Last updated:** [May 6, 2020, 8:53pm UTC](https://discuss.elastic.co/t/unable-to-write-to-elasticsearch-from-spark-java/231230 "2020-05-06T20:53:45Z")

</div>

Hi, I have been following the documentation for writing data from Spark / Java into Elasticsearch mentioned here : https://www.elastic.co/guide/en/elasticsearch/hadoop/current/spark.html#spark-sql But every time the do…

---

## [Recovering Cluster when state files are corrupt](https://discuss.elastic.co/t/recovering-cluster-when-state-files-are-corrupt/230714)

<div class="topic-metadata">

**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\
**Replies:** 5\
**Last updated:** [May 6, 2020, 7:49pm UTC](https://discuss.elastic.co/t/recovering-cluster-when-state-files-are-corrupt/230714 "2020-05-06T19:49:54Z")

</div>

Over the weekend, the 3 master nodes in a 7 node cluster would not start up due to lack of space in the data path and the logs path. Only one of the mast nodes came up. But the data nodes started to complain about bad s…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=929)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=931)
