Examples: query, "exact match", wildcard*, wild?ard, wild*rd
Fuzzy search: cake~ (finds cakes, bake)
Term boost: "red velvet"^4, chocolate^2
Field grouping: tags:(+work -"fun-stuff")
Escaping: Escape characters +-&|!(){}[]^"~*?:\ with \, e.g. \+
Range search: properties.timestamp:[1587729413488 TO *] (inclusive), properties.title:{A TO Z}(excluding A and Z)
Combinations: chocolate AND vanilla, chocolate OR vanilla, (chocolate OR vanilla) NOT "vanilla pudding"
Field search: properties.title:"The Title" AND text
Unanswered
Hi, I Am Getting The Following Errors In The Experiments I Am Currently Running:


If I understood correctly, setting 

index.number_of_shards = 2

 (instead of 1) would create a second shard for the large index, splitting it into two shards? This 

 seems to say that it’s not possible to change this value after the index creation, is it true?

Well, as long as you're using a single node, it should indeed alleviate the shard disk size limit, but I'm not sure ES will handle that too well. In any case, you can't change that for existing indices, you can modify the mapping template and reindex the existing index (you'll need to index to another name, delete the original and create an alias to the original name as the new index can't be renamed...)

Also what is the benefit of having by default 

index.number_of_shards = 1

 for the metrics and the logs indices? Having more allows to scale and later move them in separate nodes if needed - the default heap size being 2Gb, it should be possible, or?

Well, as long as you use a single node, multiple shards offer no scale improvement

  
  
Posted 3 years ago
169 Views
0 Answers
3 years ago
one year ago