# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=949 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 950 --- ## [Issue with Query string query](https://discuss.elastic.co/t/issue-with-query-string-query/228967)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 1\ **Last updated:** [April 21, 2020, 6:43am UTC](https://discuss.elastic.co/t/issue-with-query-string-query/228967 "2020-04-21T06:43:12Z")
Hi all, I am using query string query to evaluate a boolean expression. Here is my query, { "query": { "query\_string" : { "query" : "((A=User) AND((B=rsana) OR(C=rsana)OR(D=rsana)))", … --- ## [Elasticsearch does not use all path.data](https://discuss.elastic.co/t/elasticsearch-does-not-use-all-path-data/228905)
**Author:** [@mobidyc](https://discuss.elastic.co/u/mobidyc)\ **Replies:** 2\ **Last updated:** [April 21, 2020, 6:24am UTC](https://discuss.elastic.co/t/elasticsearch-does-not-use-all-path-data/228905 "2020-04-21T06:24:19Z")
Good morning guys, I setup multiple path.data but when I check the disk usage, the repartition seems wrong. \[root@cld0286su ssd9\]# grep path.data /etc/elasticsearch/elasticsearch.yml path.data: /srv/ssd1/elasti… --- ## [Force update in elastic search using update\_by\_query without version check](https://discuss.elastic.co/t/force-update-in-elastic-search-using-update-by-query-without-version-check/228843)
**Author:** [@Shashank\_Sharma](https://discuss.elastic.co/u/Shashank_Sharma)\ **Replies:** 0\ **Last updated:** [April 20, 2020, 10:41am UTC](https://discuss.elastic.co/t/force-update-in-elastic-search-using-update-by-query-without-version-check/228843 "2020-04-20T10:41:23Z")
I am getting a version mismatch error in elasticsearch update. But I want to update using my query whether in between select and update there is some change in database or not. POST /alias\_3/\_doc/\_update\_by\_query?retry\_… --- ## [Update mapping from text to text.keyword](https://discuss.elastic.co/t/update-mapping-from-text-to-text-keyword/228908)
**Author:** [@Hari\_Krishnan](https://discuss.elastic.co/u/Hari_Krishnan)\ **Replies:** 3\ **Last updated:** [April 21, 2020, 6:02am UTC](https://discuss.elastic.co/t/update-mapping-from-text-to-text-keyword/228908 "2020-04-21T06:02:04Z")
Hello all, I have my elasticsearch with 100gb of data and now I’m trying to add keyword for one field . So is it possible to update the mapping without reindexing the date if keyword is not there for particular field I… --- ## [Winlobeat not able to send cloud.instance.id fields or cloud fields into SIEM Elasticsearch](https://discuss.elastic.co/t/winlobeat-not-able-to-send-cloud-instance-id-fields-or-cloud-fields-into-siem-elasticsearch/228447)
**Author:** [@Gaurav\_Rathi](https://discuss.elastic.co/u/Gaurav_Rathi)\ **Replies:** 1\ **Last updated:** [April 21, 2020, 5:42am UTC](https://discuss.elastic.co/t/winlobeat-not-able-to-send-cloud-instance-id-fields-or-cloud-fields-into-siem-elasticsearch/228447 "2020-04-21T05:42:00Z")
Winlobeat not able to send cloud.instance.id fields or cloud fields into SIEM Elasticsearch Winlogbeat version 7.6.0 No cloud fields are appearing in Elasticsearch but other fields like agent,event,host,winlog are appe… --- ## [Managing loss of master quorum from simultaneous restart of nodes](https://discuss.elastic.co/t/managing-loss-of-master-quorum-from-simultaneous-restart-of-nodes/225112)
**Author:** [@Dandy](https://discuss.elastic.co/u/Dandy)\ **Replies:** 6\ **Last updated:** [April 21, 2020, 4:51am UTC](https://discuss.elastic.co/t/managing-loss-of-master-quorum-from-simultaneous-restart-of-nodes/225112 "2020-04-21T04:51:14Z")
Similar in nature to this: In 7.X I have a scenario where the quorum is lost due to a restart of all the nodes at the same time. All the data is still present, so cluster state is OK. What's the solution to working … --- ## [Error repository verification exception](https://discuss.elastic.co/t/error-repository-verification-exception/227238)
**Author:** [@Fourir\_Akbar](https://discuss.elastic.co/u/Fourir_Akbar)\ **Replies:** 7\ **Last updated:** [April 21, 2020, 4:45am UTC](https://discuss.elastic.co/t/error-repository-verification-exception/227238 "2020-04-21T04:45:57Z")
Hi there, I use Elasticsearch 6.x I follow this tutorial: https://badshah.io/backup-and-restore-elasticsearch-cluster-using-gcs/ But I got an error repository\_verification\_exception After I create a repository { "er… --- ## [Mtermvectors API not working properly](https://discuss.elastic.co/t/mtermvectors-api-not-working-properly/228702)
**Author:** [@Thek10patil](https://discuss.elastic.co/u/Thek10patil)\ **Replies:** 7\ **Last updated:** [April 21, 2020, 4:24am UTC](https://discuss.elastic.co/t/mtermvectors-api-not-working-properly/228702 "2020-04-21T04:24:19Z")
Hi Team, Currently, I am using Elasticsearch for my journal data in my Research lab. I am trying to retrieve mtermvectors for 25 documents at a time using python. Some times I get the result properly but most of the t… --- ## [Elastic Watcher does not execute for a long time](https://discuss.elastic.co/t/elastic-watcher-does-not-execute-for-a-long-time/228950)
**Author:** [@Jack\_Phan](https://discuss.elastic.co/u/Jack_Phan)\ **Replies:** 0\ **Last updated:** [April 21, 2020, 3:48am UTC](https://discuss.elastic.co/t/elastic-watcher-does-not-execute-for-a-long-time/228950 "2020-04-21T03:48:08Z")
I have a watcher that executes every 1 minute. Yesterday, I received an alert from the Watcher and checked if anything wrong. Then I figured out that the watcher didn't execute for 12 hours (5pm-5am). And the first exec… --- ## [Unexpected behaviour of termvector API in Python](https://discuss.elastic.co/t/unexpected-behaviour-of-termvector-api-in-python/228948)
**Author:** [@Thek10patil](https://discuss.elastic.co/u/Thek10patil)\ **Replies:** 0\ **Last updated:** [April 21, 2020, 2:49am UTC](https://discuss.elastic.co/t/unexpected-behaviour-of-termvector-api-in-python/228948 "2020-04-21T02:49:50Z")
I am currently working on Elasticsearch with a huge number of documents(around 500K) in an index. I want to store n-grams of each document's text data(This is also huge ~ per doc contains 2 pages of text data) in another… --- ## [Custom Analyzer versus Ingest Pipeline](https://discuss.elastic.co/t/custom-analyzer-versus-ingest-pipeline/228941)
**Author:** [@gigabyte87](https://discuss.elastic.co/u/gigabyte87)\ **Replies:** 2\ **Last updated:** [April 21, 2020, 1:32am UTC](https://discuss.elastic.co/t/custom-analyzer-versus-ingest-pipeline/228941 "2020-04-21T01:32:10Z")
Hello, I'm having some trouble playing around with a custom analyzer. I created an index with a custom analyzer to map IT to Italy, and reindexed to the new index. The search features work, I can search "Italy" and it f… --- ## [Getting Started tutorial errors](https://discuss.elastic.co/t/getting-started-tutorial-errors/228883)
**Author:** [@Rodrigo\_Bezerra](https://discuss.elastic.co/u/Rodrigo_Bezerra)\ **Replies:** 4\ **Last updated:** [April 21, 2020, 12:52am UTC](https://discuss.elastic.co/t/getting-started-tutorial-errors/228883 "2020-04-21T00:52:10Z")
Hi, I'm going through (this Elasticsearch's tutorial)\[https://www.elastic.co/guide/en/elasticsearch/reference/current/getting-started-index.html#getting-started-batch-processing\] but when I try to run the command to bul… --- ## [Elasticsearch odbc](https://discuss.elastic.co/t/elasticsearch-odbc/228761)
**Author:** [@youu2020](https://discuss.elastic.co/u/youu2020)\ **Replies:** 3\ **Last updated:** [April 21, 2020, 12:35am UTC](https://discuss.elastic.co/t/elasticsearch-odbc/228761 "2020-04-21T00:35:19Z")
Hi, trying to configure elasticsearch odbc dsn I get this error --- ## [Best way to insert denormalized data to ES](https://discuss.elastic.co/t/best-way-to-insert-denormalized-data-to-es/228937)
**Author:** [@ferrari](https://discuss.elastic.co/u/ferrari)\ **Replies:** 0\ **Last updated:** [April 20, 2020, 10:13pm UTC](https://discuss.elastic.co/t/best-way-to-insert-denormalized-data-to-es/228937 "2020-04-20T22:13:13Z")
Hi ElasticTeam, I want to get your expert opinion on what's the most optimal way to solve problem mentioned below: Scenario: App receives data then does some processing writes it to Kafka Topic, which is picked up by K… --- ## [Do I need a certificate for each node?](https://discuss.elastic.co/t/do-i-need-a-certificate-for-each-node/228505)
**Author:** [@jgato](https://discuss.elastic.co/u/jgato)\ **Replies:** 0\ **Last updated:** [April 17, 2020, 11:58am UTC](https://discuss.elastic.co/t/do-i-need-a-certificate-for-each-node/228505 "2020-04-17T11:58:19Z")
Hi there, I am configuring the cluster with the Helm Chart, so I have created my own self signed certificates just wih openssl. To later store this into the Kubernetes secrets. But, do i need to create as much certfica… --- ## [Ilm rollover stuck in warm phase](https://discuss.elastic.co/t/ilm-rollover-stuck-in-warm-phase/228403)
**Author:** [@Michael\_Jackson1](https://discuss.elastic.co/u/Michael_Jackson1)\ **Replies:** 1\ **Last updated:** [April 20, 2020, 9:06pm UTC](https://discuss.elastic.co/t/ilm-rollover-stuck-in-warm-phase/228403 "2020-04-20T21:06:08Z")
I have tested a simple hot/delete index rollover with success. Now I am trying to add a warm node and to try a hot/warm/delete rollover pattern, but am not able to get the warm indices to move to the delete phase. My po… --- ## [Filtering search hits based on the presence of other search hits](https://discuss.elastic.co/t/filtering-search-hits-based-on-the-presence-of-other-search-hits/228935)
**Author:** [@rrva](https://discuss.elastic.co/u/rrva)\ **Replies:** 0\ **Last updated:** [April 20, 2020, 9:01pm UTC](https://discuss.elastic.co/t/filtering-search-hits-based-on-the-presence-of-other-search-hits/228935 "2020-04-20T21:01:58Z")
If my search in the first round returns search hits of a certain type (having an indexed field called "type" set to a specific value) , how can I make the presence of these search hits exclude other search hits which sha… --- ## [Basic monitoring](https://discuss.elastic.co/t/basic-monitoring/228926)
**Author:** [@rsk0](https://discuss.elastic.co/u/rsk0)\ **Replies:** 1\ **Last updated:** [April 20, 2020, 8:59pm UTC](https://discuss.elastic.co/t/basic-monitoring/228926 "2020-04-20T20:59:53Z")
I've seen Kibana ES cluster monitoring where multiple clusters are listed and you can pull up a variety of useful charts for them and dig down into node info, etc. Great stuff. I think this is the "multi-stack monitori… --- ## [Very bad shard allocation](https://discuss.elastic.co/t/very-bad-shard-allocation/228903)
**Author:** [@kluvi](https://discuss.elastic.co/u/kluvi)\ **Replies:** 2\ **Last updated:** [April 20, 2020, 8:40pm UTC](https://discuss.elastic.co/t/very-bad-shard-allocation/228903 "2020-04-20T20:40:28Z")
Hi. We have Elasticsearch cluster, which consists from: 3 dedicated servers (A+B+C) 48 threads, 128 GB RAM, 1.8TB SSD 1 instance of master+client node, 10 GB heap size 1 instance of data-node, 30 GB heap size 1 ded… --- ## [Selecting documents to search (performance issues)](https://discuss.elastic.co/t/selecting-documents-to-search-performance-issues/228928)
**Author:** [@djmarcus](https://discuss.elastic.co/u/djmarcus)\ **Replies:** 1\ **Last updated:** [April 20, 2020, 7:48pm UTC](https://discuss.elastic.co/t/selecting-documents-to-search-performance-issues/228928 "2020-04-20T19:48:02Z")
I have an elasticsearch document repository with ~15M documents. Each document has an unique 11-char string field (comes from a mongo DB) that is unique to the document. This field is indexed as keyword. I'm using C#. … --- ## [To find Delta difference between bucket aggregations](https://discuss.elastic.co/t/to-find-delta-difference-between-bucket-aggregations/228913)
**Author:** [@anv-ani](https://discuss.elastic.co/u/anv-ani)\ **Replies:** 0\ **Last updated:** [April 20, 2020, 6:11pm UTC](https://discuss.elastic.co/t/to-find-delta-difference-between-bucket-aggregations/228913 "2020-04-20T18:11:16Z")
I have 2 buckets aggregration for different time interval. i get metrics from different data sources and i get the unique count of metrics i get from different data source. Example my individual bucket aggregation looks… --- ## [Enable security by setting \[xpack.security.enabled\] to \[true\] in the elasticsearch.yml file and restart the node](https://discuss.elastic.co/t/enable-security-by-setting-xpack-security-enabled-to-true-in-the-elasticsearch-yml-file-and-restart-the-node/228912)
**Author:** [@opensourcengineer](https://discuss.elastic.co/u/opensourcengineer)\ **Replies:** 0\ **Last updated:** [April 20, 2020, 6:06pm UTC](https://discuss.elastic.co/t/enable-security-by-setting-xpack-security-enabled-to-true-in-the-elasticsearch-yml-file-and-restart-the-node/228912 "2020-04-20T18:06:38Z")
i am using ES 7.5.2 and the basic license is active. when i am trying to click on the "stack monitoring" tab i see the notification as "Monitoring Request Error" http 503 and want me to enable the xpack security in the c… --- ## [Getting similarity scores by issuing MLT-queries doesn't work for some documents](https://discuss.elastic.co/t/getting-similarity-scores-by-issuing-mlt-queries-doesnt-work-for-some-documents/228878)
**Author:** [@Moiddes](https://discuss.elastic.co/u/Moiddes)\ **Replies:** 3\ **Last updated:** [April 20, 2020, 4:06pm UTC](https://discuss.elastic.co/t/getting-similarity-scores-by-issuing-mlt-queries-doesnt-work-for-some-documents/228878 "2020-04-20T16:06:46Z")
Hi, I have a very basic ES-Setting. All items have just two fields id and content. I want to find the top 20 (or 100) most similar documents for each document in my index by getting their BM25 Score. My understanding i… --- ## [Is default spell checker available in elastic search?](https://discuss.elastic.co/t/is-default-spell-checker-available-in-elastic-search/228852)
**Author:** [@Sagar\_jain](https://discuss.elastic.co/u/Sagar_jain)\ **Replies:** 11\ **Last updated:** [April 20, 2020, 3:54pm UTC](https://discuss.elastic.co/t/is-default-spell-checker-available-in-elastic-search/228852 "2020-04-20T15:54:31Z")
Is default spell checker available in elastic search? --- ## [Can Index Lifecycle policies be defined on index patterns instead of Exact Index?](https://discuss.elastic.co/t/can-index-lifecycle-policies-be-defined-on-index-patterns-instead-of-exact-index/227129)
**Author:** [@ParashB](https://discuss.elastic.co/u/ParashB)\ **Replies:** 3\ **Last updated:** [April 20, 2020, 3:23pm UTC](https://discuss.elastic.co/t/can-index-lifecycle-policies-be-defined-on-index-patterns-instead-of-exact-index/227129 "2020-04-20T15:23:04Z")
Hi, Currently we can define ILM policy at index level. This creates issues for daily/weekly indexes (eg: logstash) wherein the policy has to be assigned to newly created index as well. Can we apply Index Lifecycle pol… --- ## [How to retrive all Json documents from index using java](https://discuss.elastic.co/t/how-to-retrive-all-json-documents-from-index-using-java/228867)
**Author:** [@vinay123](https://discuss.elastic.co/u/vinay123)\ **Replies:** 1\ **Last updated:** [April 20, 2020, 2:45pm UTC](https://discuss.elastic.co/t/how-to-retrive-all-json-documents-from-index-using-java/228867 "2020-04-20T14:45:30Z")
Hello , i want to retrive all the documents from index using java, do we have any query . i want to get entire Json file as object, so that i can access elements which i want ? any possibility ? how i saw some source … --- ## [How can I tune for Elasticsearch performance?](https://discuss.elastic.co/t/how-can-i-tune-for-elasticsearch-performance/227063)
**Author:** [@sgonv](https://discuss.elastic.co/u/sgonv)\ **Replies:** 8\ **Last updated:** [April 20, 2020, 2:35pm UTC](https://discuss.elastic.co/t/how-can-i-tune-for-elasticsearch-performance/227063 "2020-04-20T14:35:00Z")
Hello, I have the Elasticsearch index with 2 Billion documents. And my Elasticsearch cluster has 2 data node with 32GB memory each. The index looks like below, { "mappings": { "properties": { "userName": { … --- ## [Connecting elastic search to aws cloudwatch](https://discuss.elastic.co/t/connecting-elastic-search-to-aws-cloudwatch/228785)
**Author:** [@ilovedonuts](https://discuss.elastic.co/u/ilovedonuts)\ **Replies:** 0\ **Last updated:** [April 20, 2020, 4:56am UTC](https://discuss.elastic.co/t/connecting-elastic-search-to-aws-cloudwatch/228785 "2020-04-20T04:56:00Z")
I'm running elasticsearch + kibana + nginx in a aws workspace right now from following ONLY steps three and four in this tutorial. My goal is to get aws cloudwatch logs into elasticsearch/kibana but I'm not sure where to… --- ## [Search json field](https://discuss.elastic.co/t/search-json-field/228864)
**Author:** [@Rhh](https://discuss.elastic.co/u/Rhh)\ **Replies:** 0\ **Last updated:** [April 20, 2020, 12:41pm UTC](https://discuss.elastic.co/t/search-json-field/228864 "2020-04-20T12:41:11Z")
How can i search a field containing a json string with Nest/C# ? The filed is called 'message' I would like to get all hits where Data.VehicleID = 2 "{"Message":"1 forsøk","Data":{"User":{"DriverID":"0","VehicleID":"2"… --- ## [How to get average in nested document](https://discuss.elastic.co/t/how-to-get-average-in-nested-document/228861)
**Author:** [@abhishek.tripathi](https://discuss.elastic.co/u/abhishek.tripathi)\ **Replies:** 0\ **Last updated:** [April 20, 2020, 12:31pm UTC](https://discuss.elastic.co/t/how-to-get-average-in-nested-document/228861 "2020-04-20T12:31:05Z")
Hi Everyone, I like to use elasticsearch aggregations to achive my task but problem is that my document contains nested object and i want to apply aggregations on nested object. so please help me in it. please find the … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=948) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=950)