Questions tagged [elasticsearch-7]

Use this tag for version specific questions about Elasticsearch 7.0 - the distributed, RESTful search and analytics engine. When using this tag also include the more generic [elasticsearch] tag where possible.

314 questions
0
votes
1 answer

import and parse syslog file to Elastisearch

I need to import a set of SYSLOG files to elasticsearch. I'am using a filebeat agent. I succeeded the data importation, however the data in elasticsearch is not parsed. This is the input file: Feb 14 03:43:40 my_host_name…
saad
  • 11
  • 3
0
votes
1 answer

How to use setApiCompatibilityMode in Elasticsearch7 sink for Flink Streaming Job

I have a flink streaming job that saves proccessed data to an elasticsearch version 8 cluster, unfortunately I am using flink version 1.13.6 which still uses the elasticsearch version 7 sinks. So I get a parsing error when trying to save data. I…
0
votes
2 answers

Blacklisting fields from elasticsearch query

Hi friends am new on elasticsearch. I want to know if I can exclude certain fields from search from elastic search. To eloborate I want to ignore it from my search. It should not search that field when we specify but should be searchable on all the…
0
votes
1 answer

How to sort synonyms?

I have a synonym filter: 'honeycombs, honey in honeycombs => honey' Some goods contain this words in title. If user search for honey, I need to sort it as Сontains honey Contains honeycombs Contains honey in honeycombs Others Is there a proper way…
SiZE
  • 2,217
  • 1
  • 13
  • 24
0
votes
1 answer

Kibana search preference

My Elasticsearch cluster is split in fast and slow nodes. If I am manually querying by REST, I'll use the preference query parameter (https://www.elastic.co/guide/en/elasticsearch/reference/7.17/search-search.html#search-preference) to specify that…
Cheetah
  • 13,785
  • 31
  • 106
  • 190
0
votes
1 answer

Elastic Search: should inside must for multiple or conditions, not working as expected

Let me explain my problem through the different cases I have. With this query, with no filters applied, I receive results for both programs (each one belonging to each different index): confess-chrome && http-down-burst-test If I apply a "should…
0
votes
1 answer

Elasticsearch indexes Json with escaped quotation marks - "Limit of total fields [1000] has been exceeded"

After having upgraded vom Elasticsearch 5.6.10 to 7.15.1, Json strings are indexed with escaped quotation marks. This leads to nonsense data of course. The moment I realised it was when I got the following exception: mapping update rejected by…
philburns
  • 310
  • 4
  • 18
0
votes
1 answer

elasticsearch: analyzer to match all TEXT regardless of non-alpha symbols

I'm struggling to find the right analyzer combination for a text field. I need all words to match and be present (although would be nice to ignore stopwords) regardless of punctuation. For example: "a pretty dog named bart" and "a pretty dog, named…
caro
  • 863
  • 3
  • 15
  • 36
0
votes
0 answers

Limit of total fields [1000] in index [index_name] has been exceeded.. need to reindex?

I have run a indexing job that took more than 24 hours and now when i try to query the index via Kibana i get some mapping errors. Seems the ES logs had this error Limit of total fields [1000] in index [index_name] has been exceeded. i see the…
Pakk
  • 11
  • 4
0
votes
1 answer

Elasticsearch does not automatically add schema for unknown fields?

When Elasticsearch does automatically add schema for unknown/dynamic fields? "fields" : { "keyword" : { "type" : "keyword", "ignore_above" : 256 } }
0
votes
1 answer

Elasticsearch query syntax update 1.0.14 to 7.5.2

I am attempting to update a rather sizable Elasticsearch query. I am very new to Elasticsearch and am having a hard time wrapping my head around everything that is happening here. This is the original query: elasticsearch_query search_models, { …
0
votes
0 answers

Enriching documents in ElasticSearch with only matching nested elements by ID

We're creating some packages, but that process is currently rather slow, because of the sheer amount of data being sent between microservices. Therefore, I have pruned the information being sent between those microservices and instead want to enrich…
JvS
  • 305
  • 2
  • 9
0
votes
1 answer

Elasticsearch 7 - Tie breaker when three doc has same score

I have a tutors index in elastic search. I have stored all tutors data there. I want to make tie breaker query if two doc has same score in elasticsearch. Like if two tutor has same score then i want to display the tutor first which has more…
Kajal Pandya
  • 75
  • 1
  • 7
0
votes
1 answer

Elasticsearch aggregation query missing data

I have 2 indexes and running same query but getting different results. Second index thinks data is missing. Why? Query: { "size": 0, "query": { "bool": { "must": [ { "term": { "g_cst": { …
0
votes
0 answers

Elastic search on Windows - Error - Native memory allocation (mmap) failed

We are running Elastic Search 7.13.2 on a windows server. This was running but suddenly the the ES.bat file is returning an error as below. I have verified that there is no Memory overload in the server. The system has 16 GB RAM, which is 50 percent…
jothi
  • 332
  • 1
  • 5
  • 16