# Elastic Search

**URL:** https://discuss.elastic.co/c/search/84.md?page=7

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 8

---

## [Fallback if field in \_source doesn't exist](https://discuss.elastic.co/t/fallback-if-field-in-source-doesnt-exist/374259)

<div class="topic-metadata">

**Author:** [@maganap](https://discuss.elastic.co/u/maganap)\
**Replies:** 3\
**Last updated:** [February 9, 2025, 8:19pm UTC](https://discuss.elastic.co/t/fallback-if-field-in-source-doesnt-exist/374259 "2025-02-09T20:19:16Z")

</div>

Hello! I have documents that contain a text field, and a few translations in other fields. Some documents do have the original text, but are missing the translations. I'm using a regular query and retrieving only the …

---

## [S3 Storage](https://discuss.elastic.co/t/s3-storage/374250)

<div class="topic-metadata">

**Author:** [@Sthsth](https://discuss.elastic.co/u/Sthsth)\
**Replies:** 1\
**Last updated:** [February 8, 2025, 10:06am UTC](https://discuss.elastic.co/t/s3-storage/374250 "2025-02-08T10:06:57Z")

</div>

Hello, is it possible to use only S3 for indexes storage?

---

## [Efficient Subquery Combinations](https://discuss.elastic.co/t/efficient-subquery-combinations/374234)

<div class="topic-metadata">

**Author:** [@Yakob](https://discuss.elastic.co/u/Yakob)\
**Replies:** 0\
**Last updated:** [February 7, 2025, 4:09pm UTC](https://discuss.elastic.co/t/efficient-subquery-combinations/374234 "2025-02-07T16:09:16Z")

</div>

Hello elastic enthusiasts, I think I have a fairly unique Elastic use case and I'm struggling to identify an efficient way to structure the queries I need to run. I'm new to the elasticsearch forums and elastic in gener…

---

## [Issues when running curator 8.0.17](https://discuss.elastic.co/t/issues-when-running-curator-8-0-17/372996)

<div class="topic-metadata">

**Author:** [@padmavathi](https://discuss.elastic.co/u/padmavathi)\
**Replies:** 17\
**Last updated:** [February 7, 2025, 1:53pm UTC](https://discuss.elastic.co/t/issues-when-running-curator-8-0-17/372996 "2025-02-07T13:53:23Z")

</div>

I have recently upgraded curator v8.0.17 from curator v.5.8.3. curator is not running. PFB: root@logsdev:~/curator# ./run.sh Traceback (most recent call last): File "/usr/local/bin/curator", line 8, in sys.exit(cl…

---

## [Index template alias not being applied to backing indexes of datastream](https://discuss.elastic.co/t/index-template-alias-not-being-applied-to-backing-indexes-of-datastream/374127)

<div class="topic-metadata">

**Author:** [@robsonhermes](https://discuss.elastic.co/u/robsonhermes)\
**Replies:** 7\
**Last updated:** [February 7, 2025, 11:28am UTC](https://discuss.elastic.co/t/index-template-alias-not-being-applied-to-backing-indexes-of-datastream/374127 "2025-02-07T11:28:15Z")

</div>

Elastic version 8.17.1 Context: multiple systems logging to a datastream, so we want to create one dataview in Kiabana for each system. Infra provisioned via ansible, and our elastic/kibana objects/configs provisioned v…

---

## [Who can figure out if something is wrong or not?](https://discuss.elastic.co/t/who-can-figure-out-if-something-is-wrong-or-not/374136)

<div class="topic-metadata">

**Author:** [@MaXiMiLian](https://discuss.elastic.co/u/MaXiMiLian)\
**Replies:** 5\
**Last updated:** [February 5, 2025, 11:39pm UTC](https://discuss.elastic.co/t/who-can-figure-out-if-something-is-wrong-or-not/374136 "2025-02-05T23:39:33Z")

</div>

Hi, I am unexperienced on Elastic ,I have used only twice on some of my side projects. But my company uses it on AWS Opensearch. I am a cloud engineer ,therefore my task has been to check costs ,and optimize. I came up…

---

## [ElasticSearch Elastic Cloud serveless deployments serverely out of date](https://discuss.elastic.co/t/elasticsearch-elastic-cloud-serveless-deployments-serverely-out-of-date/374117)

<div class="topic-metadata">

**Author:** [@Stanislav\_Modrak](https://discuss.elastic.co/u/Stanislav_Modrak)\
**Replies:** 7\
**Last updated:** [February 5, 2025, 5:55pm UTC](https://discuss.elastic.co/t/elasticsearch-elastic-cloud-serveless-deployments-serverely-out-of-date/374117 "2025-02-05T17:55:16Z")

</div>

Today I had a huge surprise when trying to migrate some of our existing infrastructure to a new Elasticsearch service serveless deployment hosted on Elastic Cloud and my code has stopped working with ResponseError: This …

---

## [Search with multiple synonyms set possible?](https://discuss.elastic.co/t/search-with-multiple-synonyms-set-possible/374120)

<div class="topic-metadata">

**Author:** [@Pavan\_Maganti](https://discuss.elastic.co/u/Pavan_Maganti)\
**Replies:** 1\
**Last updated:** [February 5, 2025, 1:37pm UTC](https://discuss.elastic.co/t/search-with-multiple-synonyms-set-possible/374120 "2025-02-05T13:37:55Z")

</div>

Hi, If I have multiple synonyms sets, Can we search with all the sets through a filter using elasticsearch?

---

## [Getting issue on v7.2 that never occurred before "Realms \[pki/pki1\] were skipped because they are not permitted on the current license" \>\>](https://discuss.elastic.co/t/getting-issue-on-v7-2-that-never-occurred-before-realms-pki-pki1-were-skipped-because-they-are-not-permitted-on-the-current-license/373996)

<div class="topic-metadata">

**Author:** [@gregw](https://discuss.elastic.co/u/gregw)\
**Replies:** 6\
**Last updated:** [February 5, 2025, 11:34am UTC](https://discuss.elastic.co/t/getting-issue-on-v7-2-that-never-occurred-before-realms-pki-pki1-were-skipped-because-they-are-not-permitted-on-the-current-license/373996 "2025-02-05T11:34:57Z")

</div>

I have v7.2 of Elasticsearch installed on 3 nodes for years working fine, however creating a new install of v7.2 (swapping server hardware) I am now getting the following issue, but using same configuration. Getting: A…

---

## [Vector Search on Elastic Cloud](https://discuss.elastic.co/t/vector-search-on-elastic-cloud/374105)

<div class="topic-metadata">

**Author:** [@pngworkforce](https://discuss.elastic.co/u/pngworkforce)\
**Replies:** 0\
**Last updated:** [February 5, 2025, 4:47am UTC](https://discuss.elastic.co/t/vector-search-on-elastic-cloud/374105 "2025-02-05T04:47:09Z")

</div>

Hello I have set up some indexes in Elastic Cloud with a crawler and there doesn't seem to be a way to reindex and re-attach or retain a crawler. My questions are: Is there a way to add Vector search to an existing i…

---

## [Error 403 from my VPS when trying to curl/wget artifacts](https://discuss.elastic.co/t/error-403-from-my-vps-when-trying-to-curl-wget-artifacts/373976)

<div class="topic-metadata">

**Author:** [@gmaOCR](https://discuss.elastic.co/u/gmaOCR)\
**Replies:** 1\
**Last updated:** [February 4, 2025, 10:49pm UTC](https://discuss.elastic.co/t/error-403-from-my-vps-when-trying-to-curl-wget-artifacts/373976 "2025-02-04T22:49:37Z")

</div>

Hello, Here the server blocked, I don't know why, I wget probably 5 times a month: $ curl ipinfo.io { "ip": "5.2.66.206", "city": "Lelystad", "region": "Flevoland", "country": "NL", "loc": "52.5083,5.4750", "org…

---

## [ES|QL "Unknown column \[process.name\]" after upgrading to 8.17](https://discuss.elastic.co/t/es-ql-unknown-column-process-name-after-upgrading-to-8-17/373083)

<div class="topic-metadata">

**Author:** [@isugg](https://discuss.elastic.co/u/isugg)\
**Replies:** 6\
**Last updated:** [February 4, 2025, 5:02pm UTC](https://discuss.elastic.co/t/es-ql-unknown-column-process-name-after-upgrading-to-8-17/373083 "2025-02-04T17:02:09Z")

</div>

After upgrading our Elastic stack to 8.17, we have began having issues with our ES|QL queries. When searching for process.name or process.command\_line in all logs, we receive the error "Unknown column \[process.name\]" eve…

---

## [Use include\_named\_queries\_score in search template](https://discuss.elastic.co/t/use-include-named-queries-score-in-search-template/374007)

<div class="topic-metadata">

**Author:** [@ChrisWohlert](https://discuss.elastic.co/u/ChrisWohlert)\
**Replies:** 0\
**Last updated:** [February 3, 2025, 10:12am UTC](https://discuss.elastic.co/t/use-include-named-queries-score-in-search-template/374007 "2025-02-03T10:12:45Z")

</div>

I'm converting normal queries to template queries, but I require named queries. I get this error when running as a template: parsing\_exception: Unknown key for a VALUE\_BOOLEAN in \[include\_named\_queries\_score\]. Is thi…

---

## [Winlog not reaching Elasticsearch](https://discuss.elastic.co/t/winlog-not-reaching-elasticsearch/373963)

<div class="topic-metadata">

**Author:** [@Owen\_Finn](https://discuss.elastic.co/u/Owen_Finn)\
**Replies:** 5\
**Last updated:** [February 1, 2025, 3:12pm UTC](https://discuss.elastic.co/t/winlog-not-reaching-elasticsearch/373963 "2025-02-01T15:12:08Z")

</div>

Hello, I am having an issue with Winlogbeat connecting to my elastic stack. The error I receive when trying to run the winlogbeat.exe is Exiting: couldnt connect to any of the configured Elasticsearch hosts. Errors: \[e…

---

## [Response truncated in GenAI playground](https://discuss.elastic.co/t/response-truncated-in-genai-playground/373914)

<div class="topic-metadata">

**Author:** [@loren](https://discuss.elastic.co/u/loren)\
**Replies:** 2\
**Last updated:** [January 31, 2025, 3:59pm UTC](https://discuss.elastic.co/t/response-truncated-in-genai-playground/373914 "2025-01-31T15:59:03Z")

</div>

I'm trying out the Playground tech preview with ELSER and Gemini 1.5 Pro on my GCP-based Elastic Cloud cluster. This is so powerful and almost idiot proof to set up. I understand it's not officially supported, but I'm cl…

---

## [Does order of aggregation in ElasticSearch query affect final search result](https://discuss.elastic.co/t/does-order-of-aggregation-in-elasticsearch-query-affect-final-search-result/373947)

<div class="topic-metadata">

**Author:** [@giangasl8](https://discuss.elastic.co/u/giangasl8)\
**Replies:** 0\
**Last updated:** [January 31, 2025, 2:14pm UTC](https://discuss.elastic.co/t/does-order-of-aggregation-in-elasticsearch-query-affect-final-search-result/373947 "2025-01-31T14:14:13Z")

</div>

0 I have an Elasticsearch query like below, where I try to take the aggregations, filter with bucket\_filter then do pagination with bucket\_paging. If I execute this exact query, I get the correct output as expected. But…

---

## [Elastic Cloud snapshots and repositories via Terraform](https://discuss.elastic.co/t/elastic-cloud-snapshots-and-repositories-via-terraform/373941)

<div class="topic-metadata">

**Author:** [@Eugeniu\_Goncearuc](https://discuss.elastic.co/u/Eugeniu_Goncearuc)\
**Replies:** 0\
**Last updated:** [January 31, 2025, 1:23pm UTC](https://discuss.elastic.co/t/elastic-cloud-snapshots-and-repositories-via-terraform/373941 "2025-01-31T13:23:06Z")

</div>

Hi, I was wondering if there are resources in elastic provider for TF to create policies and repositories inside elastic deployment without API, but directly via Terraform? Eugeniu

---

## [Tokenization of Special Characters Disrupts Exact Phrase Matching in Multi-Language Indexes](https://discuss.elastic.co/t/tokenization-of-special-characters-disrupts-exact-phrase-matching-in-multi-language-indexes/373697)

<div class="topic-metadata">

**Author:** [@Himanshu\_Gautam1](https://discuss.elastic.co/u/Himanshu_Gautam1)\
**Replies:** 4\
**Last updated:** [January 30, 2025, 5:26am UTC](https://discuss.elastic.co/t/tokenization-of-special-characters-disrupts-exact-phrase-matching-in-multi-language-indexes/373697 "2025-01-30T05:26:04Z")

</div>

Context: Setup: Multiple indices (one per language + a general index for unknown languages). Each document has 10+ fields, including a description field. Language-specific indices use corresponding analyzers (e.g., Eng…

---

## [Disable SSL and HTTP security](https://discuss.elastic.co/t/disable-ssl-and-http-security/373753)

<div class="topic-metadata">

**Author:** [@Oyuka](https://discuss.elastic.co/u/Oyuka)\
**Replies:** 9\
**Last updated:** [January 28, 2025, 11:21am UTC](https://discuss.elastic.co/t/disable-ssl-and-http-security/373753 "2025-01-28T11:21:24Z")

</div>

Hello, Why isn't a new index being created? I think this error related HTTP and SSL security in my elasticsearch.yml. The second picture is security configuration in elasticsearch.yml. When i disable them kibana doesn'…

---

## [Sometimes, span.db.statement is ignored in span detail](https://discuss.elastic.co/t/sometimes-span-db-statement-is-ignored-in-span-detail/372981)

<div class="topic-metadata">

**Author:** [@at\_andreas](https://discuss.elastic.co/u/at_andreas)\
**Replies:** 1\
**Last updated:** [January 28, 2025, 6:41am UTC](https://discuss.elastic.co/t/sometimes-span-db-statement-is-ignored-in-span-detail/372981 "2025-01-28T06:41:38Z")

</div>

Why is the database statement (span.db.statement) sometimes displayed and sometimes not? Neither in the ‘Span details’ nor in custom dashboards. But when i discover the span, i see an \_ignored-Tag and also the db.stateme…

---

## [Sync Rules](https://discuss.elastic.co/t/sync-rules/373186)

<div class="topic-metadata">

**Author:** [@Nokki123123](https://discuss.elastic.co/u/Nokki123123)\
**Replies:** 2\
**Last updated:** [January 26, 2025, 3:15pm UTC](https://discuss.elastic.co/t/sync-rules/373186 "2025-01-26T15:15:52Z")

</div>

I add sync rule to my Jira native connector and the process keeping turn around.

---

## [Issue regarding reverse nested](https://discuss.elastic.co/t/issue-regarding-reverse-nested/373621)

<div class="topic-metadata">

**Author:** [@Koyyada\_Charan](https://discuss.elastic.co/u/Koyyada_Charan)\
**Replies:** 5\
**Last updated:** [January 24, 2025, 10:47am UTC](https://discuss.elastic.co/t/issue-regarding-reverse-nested/373621 "2025-01-24T10:47:24Z")

</div>

GET index\_name/\_search { "aggs": { "firs\_i\_want\_to\_group\_by\_item": { "nested": { "path": "associations" }, "aggs": { "filter1": { "filter": { "term": { …

---

## [Jira native connector](https://discuss.elastic.co/t/jira-native-connector/373275)

<div class="topic-metadata">

**Author:** [@Noam\_Huri](https://discuss.elastic.co/u/Noam_Huri)\
**Replies:** 3\
**Last updated:** [January 21, 2025, 11:24pm UTC](https://discuss.elastic.co/t/jira-native-connector/373275 "2025-01-21T23:24:25Z")

</div>

I'm using a native connector to index my Jira, and I only get attachment items without bugs. I checked the user credentials, and the user could view bugs. Any idea? Thank you, Noam

---

## [Relevance boosting of a result](https://discuss.elastic.co/t/relevance-boosting-of-a-result/373032)

<div class="topic-metadata">

**Author:** [@samslee](https://discuss.elastic.co/u/samslee)\
**Replies:** 1\
**Last updated:** [January 21, 2025, 11:52am UTC](https://discuss.elastic.co/t/relevance-boosting-of-a-result/373032 "2025-01-21T11:52:03Z")

</div>

I'm trying to implement a type of relevance boosting of a result. I found 'Click API' document, but it looks like it has to be an 'App Search.' I'm just using a simple web crawler to index a website. Is there any ways…

---

## [Get the number of occurrences of one of matched keywords](https://discuss.elastic.co/t/get-the-number-of-occurrences-of-one-of-matched-keywords/373294)

<div class="topic-metadata">

**Author:** [@mogabounce](https://discuss.elastic.co/u/mogabounce)\
**Replies:** 0\
**Last updated:** [January 16, 2025, 9:02pm UTC](https://discuss.elastic.co/t/get-the-number-of-occurrences-of-one-of-matched-keywords/373294 "2025-01-16T21:02:52Z")

</div>

Hello, there I have the following use case: Say I have a text field "OCR\_TEXT" and I want to search documents containing the phrase "Apple Tree" and then count the number of the occurrences of the word "Apple" (but no…

---

## [onSearch request creation](https://discuss.elastic.co/t/onsearch-request-creation/373104)

<div class="topic-metadata">

**Author:** [@mike\_vogel](https://discuss.elastic.co/u/mike_vogel)\
**Replies:** 1\
**Last updated:** [January 16, 2025, 2:17pm UTC](https://discuss.elastic.co/t/onsearch-request-creation/373104 "2025-01-16T14:17:39Z")

</div>

I'm using Elastic Cloud and the Elastic Search UI. I'm trying to understand how the default search request is created by the onSearch function. For example I'm trying to see why the search-term is queried as a 'should' …

---

## [Connect kafka-elasticsearch connector to an alias, es version 7.6.1](https://discuss.elastic.co/t/connect-kafka-elasticsearch-connector-to-an-alias-es-version-7-6-1/373199)

<div class="topic-metadata">

**Author:** [@Yasir\_Hassan](https://discuss.elastic.co/u/Yasir_Hassan)\
**Replies:** 0\
**Last updated:** [January 14, 2025, 8:33pm UTC](https://discuss.elastic.co/t/connect-kafka-elasticsearch-connector-to-an-alias-es-version-7-6-1/373199 "2025-01-14T20:33:11Z")

</div>

I want to build an ingestion pipeline that takes my lidar data from the kafka topic and ingests it to the current active index. I have created an index\_template that match my index name and has the required mappings (co…

---

## [Elasticsearch Not Freeing Disk Space After Shard Relocation](https://discuss.elastic.co/t/elasticsearch-not-freeing-disk-space-after-shard-relocation/373075)

<div class="topic-metadata">

**Author:** [@09a9373743777d8430c4](https://discuss.elastic.co/u/09a9373743777d8430c4)\
**Replies:** 13\
**Last updated:** [January 14, 2025, 6:54pm UTC](https://discuss.elastic.co/t/elasticsearch-not-freeing-disk-space-after-shard-relocation/373075 "2025-01-14T18:54:40Z")

</div>

We are experiencing an issue where Elasticsearch is not properly freeing up disk space after relocating shards. Specifically, even though the shards are relocated, disk space is not being released as expected. This issue…

---

## [Is it safe to set action.auto\_create\_index to false?](https://discuss.elastic.co/t/is-it-safe-to-set-action-auto-create-index-to-false/372809)

<div class="topic-metadata">

**Author:** [@Richard\_Zhang](https://discuss.elastic.co/u/Richard_Zhang)\
**Replies:** 12\
**Last updated:** [January 14, 2025, 2:20am UTC](https://discuss.elastic.co/t/is-it-safe-to-set-action-auto-create-index-to-false/372809 "2025-01-14T02:20:36Z")

</div>

Hello everyone, We're using Elastic Cloud v8.11.1 and facing a problem where the automatically created index does not have the desired field mapping, so we're considering disable auto create index. while this document …

---

## [Detecting counter fields based on ingested field values?](https://discuss.elastic.co/t/detecting-counter-fields-based-on-ingested-field-values/372998)

<div class="topic-metadata">

**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\
**Replies:** 0\
**Last updated:** [January 9, 2025, 12:47pm UTC](https://discuss.elastic.co/t/detecting-counter-fields-based-on-ingested-field-values/372998 "2025-01-09T12:47:23Z")

</div>

By "counter" field, I mean: a numeric field whose value only ever monotonically increases over time, except when it resets to 0 (or rather, in practice, precipitously drops to near-zero; it's possible, due to the periodi…

[Previous page](https://discuss.elastic.co/c/search/84.md?page=6)

[Next page](https://discuss.elastic.co/c/search/84.md?page=8)
