Spec-Zone.ru › Elasticsearch 8

Elasticsearch Guide

  • Elasticsearch Guide:
  • What’s new in 8.17
  • Elasticsearch basics
    • What is Elasticsearch?
    • Run Elasticsearch
    • Indices and documents
    • Add data to Elasticsearch
    • Search and analyze data
    • Get ready for production
  • Quick starts
    • Basics: Index and search using APIs
    • Basics: Full-text search and filtering
    • Basics: Analyze eCommerce data with aggregations
  • Set up Elasticsearch
    • Run Elasticsearch locally
    • Installing Elasticsearch
      • Install Elasticsearch from archive on Linux or MacOS
      • Install Elasticsearch with .zip on Windows
      • Install Elasticsearch with Debian Package
      • Install Elasticsearch with RPM
      • Install Elasticsearch with Docker
    • Configuring Elasticsearch
      • Important Elasticsearch configuration
      • Secure settings
      • Auditing settings
      • Circuit breaker settings
      • Cluster-level shard allocation and routing settings
      • Miscellaneous cluster settings
      • Cross-cluster replication settings
      • Discovery and cluster formation settings
      • Data stream lifecycle settings
      • Field data cache settings
      • Local gateway settings
      • Health Diagnostic settings
      • Index lifecycle management settings
      • Index management settings
      • Index recovery settings
      • Indexing buffer settings
      • Inference settings
      • License settings
      • Machine learning settings
      • Monitoring settings
      • Node settings
      • Networking
      • Node query cache settings
      • Path settings
      • Search settings
      • Security settings
      • Shard request cache settings
      • Snapshot and restore settings
      • Transforms settings
      • Thread pools
      • Watcher settings
      • Set JVM options
    • Important system configuration
      • Configuring system settings
      • Disable swapping
      • File Descriptors
      • Virtual memory
      • Number of threads
      • DNS cache settings
      • Ensure JNA temporary directory permits executables
      • TCP retransmission timeout
    • Bootstrap Checks
      • Heap size check
      • File descriptor check
      • Memory lock check
      • Maximum number of threads check
      • Max file size check
      • Maximum size virtual memory check
      • Maximum map count check
      • Client JVM check
      • Use serial collector check
      • System call filter check
      • OnError and OnOutOfMemoryError checks
      • Early-access check
      • All permission check
      • Discovery configuration check
    • Bootstrap Checks for X-Pack
    • Starting Elasticsearch
    • Stopping Elasticsearch
    • Discovery and cluster formation
      • Discovery
      • Quorum-based decision making
      • Voting configurations
      • Bootstrapping a cluster
      • Cluster state
      • Cluster fault detection
    • Add and remove nodes in your cluster
    • Full-cluster restart and rolling restart
    • Remote clusters
      • Add remote clusters using API key authentication
      • Add remote clusters using TLS certificate authentication
      • Migrate from certificate to API key authentication
      • Remote cluster settings
      • Troubleshooting
    • Plugins
  • Upgrade Elasticsearch
    • Archived settings
    • Reading indices from older Elasticsearch versions
  • Index modules
    • Analysis
    • Index Shard Allocation
      • Index-level shard allocation filtering
      • Delaying allocation when a node leaves
      • Index recovery prioritization
      • Total shards per node
      • Index-level data tier allocation filtering
    • Index blocks
    • Mapper
    • Merge
    • Similarity module
    • Slow Log
    • Store
      • Preloading data into the file system cache
    • Translog
    • History retention
    • Index Sorting
      • Use index sorting to speed up conjunctions
    • Indexing pressure
  • Mapping
    • Dynamic mapping
      • Dynamic field mapping
      • Dynamic templates
    • Explicit mapping
    • Runtime fields
      • Map a runtime field
      • Define runtime fields in a search request
      • Override field values at query time
      • Retrieve a runtime field
      • Index a runtime field
      • Explore your data with runtime fields
    • Field data types
      • Aggregate metric
      • Alias
      • Arrays
      • Binary
      • Boolean
      • Completion
      • Date
      • Date nanoseconds
      • Dense vector
      • Flattened
      • Geopoint
      • Geoshape
      • Histogram
      • IP
      • Join
      • Keyword
      • Nested
      • Numeric
      • Object
      • Pass-through object
      • Percolator
      • Point
      • Range
      • Rank feature
      • Rank features
      • Search-as-you-type
      • Semantic text
      • Shape
      • Sparse vector
      • Text
      • Token count
      • Unsigned long
      • Version
    • Metadata fields
      • _doc_count field
      • _field_names field
      • _ignored field
      • _id field
      • _index field
      • _meta field
      • _routing field
      • _source field
      • _tier field
    • Mapping parameters
      • analyzer
      • coerce
      • copy_to
      • doc_values
      • dynamic
      • eager_global_ordinals
      • enabled
      • format
      • ignore_above
      • index.mapping.ignore_above
      • ignore_malformed
      • index
      • index_options
      • index_phrases
      • index_prefixes
      • meta
      • fields
      • normalizer
      • norms
      • null_value
      • position_increment_gap
      • properties
      • search_analyzer
      • similarity
      • store
      • subobjects
      • term_vector
    • Mapping limit settings
    • Removal of mapping types
  • Text analysis
    • Overview
    • Concepts
      • Anatomy of an analyzer
      • Index and search analysis
      • Stemming
      • Token graphs
    • Configure text analysis
      • Test an analyzer
      • Configuring built-in analyzers
      • Create a custom analyzer
      • Specify an analyzer
    • Built-in analyzer reference
      • Fingerprint
      • Keyword
      • Language
      • Pattern
      • Simple
      • Standard
      • Stop
      • Whitespace
    • Tokenizer reference
      • Character group
      • Classic
      • Edge n-gram
      • Keyword
      • Letter
      • Lowercase
      • N-gram
      • Path hierarchy
      • Pattern
      • Simple pattern
      • Simple pattern split
      • Standard
      • Thai
      • UAX URL email
      • Whitespace
    • Token filter reference
      • Apostrophe
      • ASCII folding
      • CJK bigram
      • CJK width
      • Classic
      • Common grams
      • Conditional
      • Decimal digit
      • Delimited payload
      • Dictionary decompounder
      • Edge n-gram
      • Elision
      • Fingerprint
      • Flatten graph
      • Hunspell
      • Hyphenation decompounder
      • Keep types
      • Keep words
      • Keyword marker
      • Keyword repeat
      • KStem
      • Length
      • Limit token count
      • Lowercase
      • MinHash
      • Multiplexer
      • N-gram
      • Normalization
      • Pattern capture
      • Pattern replace
      • Phonetic
      • Porter stem
      • Predicate script
      • Remove duplicates
      • Reverse
      • Shingle
      • Snowball
      • Stemmer
      • Stemmer override
      • Stop
      • Synonym
      • Synonym graph
      • Trim
      • Truncate
      • Unique
      • Uppercase
      • Word delimiter
      • Word delimiter graph
    • Character filters reference
      • HTML strip
      • Mapping
      • Pattern replace
    • Normalizers
  • Index templates
    • Simulate multi-component templates
    • Config ignore_missing_component_templates
      • Usage example
  • Data streams
    • Set up a data stream
    • Use a data stream
    • Modify a data stream
    • Time series data stream (TSDS)
      • Set up a TSDS
      • Time series index settings
      • Downsampling a time series data stream
      • Run downsampling with ILM
      • Run downsampling manually
      • Run downsampling using data stream lifecycle
      • Reindex a TSDS
    • Logs data stream
    • Data stream lifecycle
      • Tutorial: Create a data stream with a lifecycle
      • Tutorial: Update existing data stream
      • Tutorial: Data stream retention
      • Tutorial: Migrate ILM managed data stream to data stream lifecycle
  • Ingest pipelines
    • Example: Parse logs
    • Enrich your data
      • Set up an enrich processor
      • Example: Enrich your data based on geolocation
      • Example: Enrich your data based on exact values
      • Example: Enrich your data by matching a value to a range
    • Processor reference
      • Append
      • Attachment
      • Bytes
      • Circle
      • Community ID
      • Convert
      • CSV
      • Date
      • Date index name
      • Dissect
      • Dot expander
      • Drop
      • Enrich
      • Fail
      • Fingerprint
      • Foreach
      • Geo-grid
      • GeoIP
      • Grok
      • Gsub
      • HTML strip
      • Inference
      • IP Location
      • Join
      • JSON
      • KV
      • Lowercase
      • Network direction
      • Pipeline
      • Redact
      • Registered domain
      • Remove
      • Rename
      • Reroute
      • Script
      • Set
      • Set security user
      • Sort
      • Split
      • Terminate
      • Trim
      • Uppercase
      • URL decode
      • URI parts
      • User agent
    • Ingest pipelines in Search
      • Inference processing
      • NLP tutorial
  • Aliases
  • Search your data
    • The search API
      • Sort search results
      • Paginate search results
      • Retrieve selected fields
      • Search multiple data streams and indices using a query
      • Collapse search results
      • Filter search results
      • Highlighting
      • Long-running searches
      • Near real-time search
      • Retrieve inner hits
      • Search shard routing
      • Searching with query rules
      • Search templates
    • Full-text search
    • Search relevance optimizations
      • Mixing exact search with stemming
      • Getting consistent scoring
      • Incorporating static relevance signals into the score
    • Retrievers
      • Retrievers examples
    • kNN search
    • Semantic search
      • Semantic search with `semantic_text`
      • Hybrid search with `semantic_text`
      • Semantic search with the inference API
      • Semantic search with ELSER
      • Using Cohere with Elasticsearch
      • Semantic search with deployed model
      • Bring your own dense vectors
    • Retrieval augmented generation
    • Search across clusters
    • Search with synonyms
    • Search Applications
      • Search API and templates
      • Security
      • Search Application client guide
    • Search analytics
      • Get started
      • Set up CORs
      • View events
      • Events reference
      • API overview
  • Re-ranking
    • Semantic re-ranking
    • Learning To Rank
      • Deploy and manage LTR models
      • Search using LTR
  • Query DSL
    • Query and filter context
    • Compound queries
      • Boolean
      • Boosting
      • Constant score
      • Disjunction max
      • Function score
    • Full text queries
      • Intervals
      • Match
      • Match boolean prefix
      • Match phrase
      • Match phrase prefix
      • Combined fields
      • Multi-match
      • Query string
      • Simple query string
    • Geo queries
      • Geo-bounding box
      • Geo-distance
      • Geo-grid
      • Geo-polygon
      • Geoshape
    • Shape queries
      • Shape
    • Joining queries
      • Nested
      • Has child
      • Has parent
      • Parent ID
    • Match all
    • Span queries
      • Span containing
      • Span field masking
      • Span first
      • Span multi-term
      • Span near
      • Span not
      • Span or
      • Span term
      • Span within
    • Vector queries
      • Knn
      • Sparse vector
      • Semantic
      • Text expansion
      • Weighted tokens
    • Specialized queries
      • Distance feature
      • More like this
      • Percolate
      • Rank feature
      • Script
      • Script score
      • Wrapper
      • Pinned Query
      • Rule
    • Term-level queries
      • Exists
      • Fuzzy
      • IDs
      • Prefix
      • Range
      • Regexp
      • Term
      • Terms
      • Terms set
      • Wildcard
    • minimum_should_match parameter
    • rewrite parameter
    • Regular expression syntax
  • Aggregations
    • Bucket aggregations
      • Adjacency matrix
      • Auto-interval date histogram
      • Categorize text
      • Children
      • Composite
      • Date histogram
      • Date range
      • Diversified sampler
      • Filter
      • Filters
      • Frequent item sets
      • Geo-distance
      • Geohash grid
      • Geohex grid
      • Geotile grid
      • Global
      • Histogram
      • IP prefix
      • IP range
      • Missing
      • Multi Terms
      • Nested
      • Parent
      • Random sampler
      • Range
      • Rare terms
      • Reverse nested
      • Sampler
      • Significant terms
      • Significant text
      • Terms
      • Time series
      • Variable width histogram
      • Subtleties of bucketing range fields
    • Metrics aggregations
      • Avg
      • Boxplot
      • Cardinality
      • Extended stats
      • Geo-bounds
      • Geo-centroid
      • Geo-line
      • Cartesian-bounds
      • Cartesian-centroid
      • Matrix stats
      • Max
      • Median absolute deviation
      • Min
      • Percentile ranks
      • Percentiles
      • Rate
      • Scripted metric
      • Stats
      • String stats
      • Sum
      • T-test
      • Top hits
      • Top metrics
      • Value count
      • Weighted avg
    • Pipeline aggregations
      • Average bucket
      • Bucket script
      • Bucket count K-S test
      • Bucket correlation
      • Bucket selector
      • Bucket sort
      • Change point
      • Cumulative cardinality
      • Cumulative sum
      • Derivative
      • Extended stats bucket
      • Inference bucket
      • Max bucket
      • Min bucket
      • Moving function
      • Moving percentiles
      • Normalize
      • Percentiles bucket
      • Serial differencing
      • Stats bucket
      • Sum bucket
  • Geospatial analysis
  • Connectors
    • Connectors references
      • Azure Blob Storage
      • Box
      • Confluence
      • Dropbox
      • GitHub
      • Gmail
      • Google Cloud Storage
      • Google Drive
      • GraphQL
      • Jira
      • Microsoft SQL
      • MongoDB
      • MySQL
      • Network drive
      • Notion
      • OneDrive
      • OpenText Documentum
      • Oracle
      • Outlook
      • PostgreSQL
      • Redis
      • S3
      • Salesforce
      • ServiceNow
      • SharePoint Online
      • SharePoint Server
      • Slack
      • Teams
      • Zoom
    • Self-managed connectors
      • Running from a Docker container
      • Running from the source code
      • Docker Compose quickstart
      • Tutorial
    • Elastic managed connectors
      • Managed connector tutorial (MongoDB)
    • Build and customize connectors
    • Connectors UI in Kibana
    • Connector APIs
      • API tutorial
    • Content syncs
    • Extract and transform
      • Content extraction
      • Sync rules
    • Document level security
      • How DLS works
      • DLS in Search Applications
    • Management topics
      • Scalability
      • Security
      • Troubleshooting
      • Logs
    • Use cases
      • Internal knowledge search
    • Release notes
    • Known issues
  • EQL
    • Syntax reference
    • Function reference
    • Pipe reference
    • Example: Detect threats with EQL
  • ES|QL
    • Getting started
    • ES|QL reference
      • Syntax reference
      • Commands
      • Functions and operators
      • Metadata fields
      • Multivalued fields
      • Data processing with DISSECT and GROK
      • Data enrichment
      • Implicit casting
      • Time spans
    • Using ES|QL
      • REST API
      • Using ES|QL in Kibana
      • Using ES|QL in Elastic Security
      • Using ES|QL to query multiple indices
      • Using ES|QL across clusters
      • Task management
    • Limitations
    • Examples
  • SQL
    • Overview
    • Getting Started with SQL
    • Conventions and Terminology
      • Mapping concepts across SQL and Elasticsearch
    • Security
    • SQL REST API
      • Overview
      • Response Data Formats
      • Paginating through a large response
      • Filtering using Elasticsearch Query DSL
      • Columnar results
      • Passing parameters to a query
      • Use runtime fields
      • Run an async SQL search
    • SQL Translate API
    • SQL CLI
    • SQL JDBC
      • API usage
    • SQL ODBC
      • Driver installation
      • Configuration
    • SQL Client Applications
      • DBeaver
      • DbVisualizer
      • Microsoft Excel
      • Microsoft Power BI Desktop
      • Microsoft PowerShell
      • MicroStrategy Desktop
      • Qlik Sense Desktop
      • SQuirreL SQL
      • SQL Workbench/J
      • Tableau Desktop
      • Tableau Server
    • SQL Language
      • Lexical Structure
      • SQL Commands
      • DESCRIBE TABLE
      • SELECT
      • SHOW CATALOGS
      • SHOW COLUMNS
      • SHOW FUNCTIONS
      • SHOW TABLES
      • Data Types
      • Index patterns
      • Frozen Indices
    • Functions and Operators
      • Comparison Operators
      • Logical Operators
      • Math Operators
      • Cast Operators
      • LIKE and RLIKE Operators
      • Aggregate Functions
      • Grouping Functions
      • Date/Time and Interval Functions and Operators
      • Full-Text Search Functions
      • Mathematical Functions
      • String Functions
      • Type Conversion Functions
      • Geo Functions
      • Conditional Functions And Expressions
      • System Functions
    • Reserved keywords
    • SQL Limitations
  • Scripting
    • Painless scripting language
    • How to write scripts
      • Scripts, caching, and search speed
      • Dissecting data
      • Grokking grok
    • Access fields in a document
    • Common scripting use cases
      • Field extraction
    • Accessing document fields and special variables
    • Scripting and security
    • Lucene expressions language
    • Advanced scripts using script engines
  • Data management
    • ILM: Manage the index lifecycle
    • Tutorial: Customize built-in policies
    • Tutorial: Automate rollover
    • Index management in Kibana
    • Overview
    • Concepts
      • Index lifecycle
      • Rollover
      • Policy updates
    • Index lifecycle actions
      • Allocate
      • Delete
      • Force merge
      • Migrate
      • Read only
      • Rollover
      • Downsample
      • Searchable snapshot
      • Set priority
      • Shrink
      • Unfollow
      • Wait for snapshot
    • Configure a lifecycle policy
    • Migrate index allocation filters to node roles
    • Troubleshooting index lifecycle management errors
    • Start and stop index lifecycle management
    • Manage existing indices
    • Skip rollover
    • Restore a managed data stream or index
    • Data tiers
  • Autoscaling
    • Autoscaling deciders
      • Reactive storage decider
      • Proactive storage decider
      • Frozen shards decider
      • Frozen storage decider
      • Frozen existence decider
      • Machine learning decider
      • Fixed decider
  • Monitor a cluster
    • Overview
    • How it works
    • Elasticsearch application logging
    • Monitoring in a production environment
    • Collecting monitoring data with Elastic Agent
    • Collecting monitoring data with Metricbeat
    • Collecting log data with Filebeat
    • Configuring data streams/indices for monitoring
      • Configuring data streams created by Elastic Agent
      • Configuring data streams created by Metricbeat 8
      • Configuring indices created by Metricbeat 7 or internal collection
    • Legacy collection methods
      • Collectors
      • Exporters
      • Local exporters
      • HTTP exporters
      • Pausing data collection
  • Roll up or transform your data
    • Rolling up historical data
      • Overview
      • API quick reference
      • Getting started
      • Understanding groups
      • Rollup aggregation limitations
      • Rollup search limitations
      • Migrating to downsampling
    • Transforming data
      • Overview
      • Setup
      • When to use transforms
      • Generating alerts for transforms
      • Transforms at scale
      • How checkpoints work
      • API quick reference
      • Tutorial: Transforming the eCommerce sample data
      • Examples
      • Painless examples
      • Limitations
  • Set up a cluster for high availability
    • Designing for resilience
      • Resilience in small clusters
      • Resilience in larger clusters
  • Snapshot and restore
    • Register a repository
      • Azure repository
      • Google Cloud Storage repository
      • S3 repository
      • Shared file system repository
      • Read-only URL repository
      • Source-only repository
    • Create a snapshot
    • Restore a snapshot
    • Searchable snapshots
  • Secure the Elastic Stack
    • Elasticsearch security principles
    • Start the Elastic Stack with security enabled automatically
    • Manually configure security
      • Set up minimal security
      • Set up basic security
      • Set up basic security plus HTTPS
      • Setting passwords for native and built-in users
      • Enabling cipher suites for stronger encryption
      • Supported SSL/TLS versions by JDK version
      • Security files
      • FIPS 140-2
    • Updating node security certificates
      • With the same CA
      • With a different CA
    • User authentication
      • Built-in users
      • Service accounts
      • Internal users
      • Token-based authentication services
      • User profiles
      • Realms
      • Realm chains
      • Security domains
      • Active Directory user authentication
      • File-based user authentication
      • LDAP user authentication
      • Native user authentication
      • OpenID Connect authentication
      • PKI user authentication
      • SAML authentication
      • Kerberos authentication
      • JWT authentication
      • Integrating with other authentication systems
      • Enabling anonymous access
      • Looking up users without authentication
      • Controlling the user cache
      • Configuring SAML single-sign-on on the Elastic Stack
      • Configuring single sign-on to the Elastic Stack using OpenID Connect
    • User authorization
      • Built-in roles
      • Defining roles
      • Role restriction
      • Security privileges
      • Document level security
      • Field level security
      • Granting privileges for data streams and aliases
      • Mapping users and groups to roles
      • Setting up field and document level security
      • Submitting requests on behalf of other users
      • Configuring authorization delegation
      • Customizing roles and authorization
    • Enable audit logging
      • Audit events
      • Logfile audit output
      • Logfile audit events ignore policies
      • Auditing search queries
    • Restricting connections with IP filtering
    • Securing clients and integrations
      • HTTP/REST clients and security
      • ES-Hadoop and Security
      • Monitoring and security
    • Operator privileges
      • Configure operator privileges
      • Operator-only functionality
      • Operator privileges for snapshot and restore
    • Troubleshooting
      • Some settings are not returned via the nodes settings API
      • Authorization exceptions
      • Users command fails due to extra arguments
      • Users are frequently locked out of Active Directory
      • Certificate verification fails for curl on Mac
      • SSLHandshakeException causes connections to fail
      • Common SSL/TLS exceptions
      • Common Kerberos exceptions
      • Common SAML issues
      • Internal Server Error in Kibana
      • Setup-passwords command fails due to connection failure
      • Failures due to relocation of the configuration files
    • Limitations
  • Watcher
    • Getting started with Watcher
    • How Watcher works
    • Encrypting sensitive data in Watcher
    • Inputs
      • Simple input
      • Search input
      • HTTP input
      • Chain input
    • Triggers
      • Schedule trigger
    • Conditions
      • Always condition
      • Never condition
      • Compare condition
      • Array compare condition
      • Script condition
    • Actions
      • Running an action for each element in an array
      • Adding conditions to actions
      • Email action
      • Webhook action
      • Index action
      • Logging action
      • Slack action
      • PagerDuty action
      • Jira action
    • Transforms
      • Search payload transform
      • Script payload transform
      • Chain payload transform
    • Managing watches
    • Example watches
      • Watching the status of an Elasticsearch cluster
    • Limitations
  • Cross-cluster replication
    • Set up cross-cluster replication
      • Prerequisites
      • Connect to a remote cluster
      • Configure privileges for cross-cluster replication
      • Create a follower index to replicate a specific index
      • Create an auto-follow pattern to replicate time series indices
    • Manage cross-cluster replication
      • Inspect replication statistics
      • Pause and resume replication
      • Recreate a follower index
      • Terminate replication
    • Manage auto-follow patterns
      • Create auto-follow patterns
      • Retrieve auto-follow patterns
      • Pause and resume auto-follow patterns
      • Delete auto-follow patterns
    • Upgrading clusters
      • Uni-directional index following
      • Bi-directional index following
    • Uni-directional disaster recovery
      • Prerequisites
      • Failover when clusterA is down
      • Failback when clusterA comes back
    • Bi-directional disaster recovery
      • Initial setup
      • Failover when clusterA is down
      • Failback when clusterA comes back
      • Perform update or delete by query
  • Data store architecture
    • Nodes and shards
    • Node roles
    • Reading and writing documents
    • Shard allocation, relocation, and recovery
      • Shard allocation awareness
    • The shard request cache
  • REST APIs
    • API conventions
    • Common options
    • REST API compatibility
    • Autoscaling APIs
      • Create or update autoscaling policy
      • Get autoscaling capacity
      • Delete autoscaling policy
      • Get autoscaling policy
    • Behavioral Analytics APIs
      • Put Analytics Collection
      • Delete Analytics Collection
      • List Analytics Collections
      • Post Analytics Collection Event
    • Compact and aligned text (CAT) APIs
      • cat aliases
      • cat allocation
      • cat anomaly detectors
      • cat component templates
      • cat count
      • cat data frame analytics
      • cat datafeeds
      • cat fielddata
      • cat health
      • cat indices
      • cat master
      • cat nodeattrs
      • cat nodes
      • cat pending tasks
      • cat plugins
      • cat recovery
      • cat repositories
      • cat segments
      • cat shards
      • cat snapshots
      • cat task management
      • cat templates
      • cat thread pool
      • cat trained model
      • cat transforms
    • Cluster APIs
      • Cluster allocation explain
      • Cluster get settings
      • Cluster health
      • Health
      • Cluster reroute
      • Cluster state
      • Cluster stats
      • Cluster update settings
      • Nodes feature usage
      • Nodes hot threads
      • Nodes info
      • Prevalidate node removal
      • Nodes reload secure settings
      • Nodes stats
      • Cluster Info
      • Pending cluster tasks
      • Remote cluster info
      • Task management
      • Voting configuration exclusions
      • Create or update desired nodes
      • Get desired nodes
      • Delete desired nodes
      • Get desired balance
      • Reset desired balance
    • Cross-cluster replication APIs
      • Get CCR stats
      • Create follower
      • Pause follower
      • Resume follower
      • Unfollow
      • Forget follower
      • Get follower stats
      • Get follower info
      • Create auto-follow pattern
      • Delete auto-follow pattern
      • Get auto-follow pattern
      • Pause auto-follow pattern
      • Resume auto-follow pattern
    • Connector APIs
      • Create connector
      • Delete connector
      • Get connector
      • List connectors
      • Update connector API key id
      • Update connector configuration
      • Update connector index name
      • Update connector features
      • Update connector filtering
      • Update connector name and description
      • Update connector pipeline
      • Update connector scheduling
      • Update connector service type
      • Create connector sync job
      • Cancel connector sync job
      • Delete connector sync job
      • Get connector sync job
      • List connector sync jobs
      • Check in a connector
      • Update connector error
      • Update connector last sync stats
      • Update connector status
      • Check in connector sync job
      • Claim connector sync job
      • Set connector sync job error
      • Set connector sync job stats
    • Data stream APIs
      • Create data stream
      • Delete data stream
      • Get data stream
      • Migrate to data stream
      • Data stream stats
      • Promote data stream
      • Modify data streams
      • Put Data Stream Lifecycle
      • Get Data Stream Lifecycle
      • Delete Data Stream Lifecycle
      • Explain Data Stream Lifecycle
      • Get Data Stream Lifecycle
      • Downsample
    • Document APIs
      • Index
      • Get
      • Delete
      • Delete by query
      • Update
      • Update by query
      • Multi get
      • Bulk
      • Reindex
      • Term vectors
      • Multi term vectors
      • ?refresh
      • Optimistic concurrency control
    • Enrich APIs
      • Create enrich policy
      • Delete enrich policy
      • Get enrich policy
      • Execute enrich policy
      • Enrich stats
    • EQL APIs
      • Delete async EQL search
      • EQL search
      • Get async EQL search
      • Get async EQL search status
    • ES|QL APIs
      • ES|QL query API
      • ES|QL async query API
      • ES|QL async query get API
      • ES|QL async query delete API
    • Features APIs
      • Get features
      • Reset features
    • Fleet APIs
      • Get global checkpoints
      • Fleet search
      • Fleet multi search
    • Graph explore API
    • Index APIs
      • Alias exists
      • Aliases
      • Analyze
      • Analyze index disk usage
      • Clear cache
      • Clone index
      • Close index
      • Create index
      • Create or update alias
      • Create or update component template
      • Create or update index template
      • Create or update index template (legacy)
      • Delete component template
      • Delete dangling index
      • Delete alias
      • Delete index
      • Delete index template
      • Delete index template (legacy)
      • Exists
      • Field usage stats
      • Flush
      • Force merge
      • Get alias
      • Get component template
      • Get field mapping
      • Get index
      • Get index settings
      • Get index template
      • Get index template (legacy)
      • Get mapping
      • Import dangling index
      • Index recovery
      • Index segments
      • Index shard stores
      • Index stats
      • Index template exists (legacy)
      • List dangling indices
      • Open index
      • Refresh
      • Resolve index
      • Resolve cluster
      • Advantages of using this endpoint before a cross-cluster search
      • Rollover
      • Shrink index
      • Simulate index
      • Simulate template
      • Split index
      • Unfreeze index
      • Update index settings
      • Update mapping
    • Index lifecycle management APIs
      • Create or update lifecycle policy
      • Get policy
      • Delete policy
      • Move to step
      • Remove policy
      • Retry policy
      • Get index lifecycle management status
      • Explain lifecycle
      • Start index lifecycle management
      • Stop index lifecycle management
      • Migrate indices, ILM policies, and legacy, composable and component templates to data tiers routing
    • Inference APIs
      • Delete inference API
      • Get inference API
      • Perform inference API
      • Create inference API
      • Stream inference API
      • Update inference API
      • AlibabaCloud AI Search inference integration
      • Amazon Bedrock inference integration
      • Anthropic inference integration
      • Azure AI studio inference integration
      • Azure OpenAI inference integration
      • Cohere inference integration
      • Elasticsearch inference integration
      • ELSER inference integration
      • Google AI Studio inference integration
      • Google Vertex AI inference integration
      • HuggingFace inference integration
      • Mistral inference integration
      • OpenAI inference integration
      • Watsonx inference integration
    • Info API
    • Ingest APIs
      • Create or update pipeline
      • Get pipeline
      • Delete pipeline
      • Simulate pipeline
      • Simulate ingest
      • GeoIP stats
      • Create or update IP geolocation database configuration
      • Get IP geolocation database configuration
      • Delete IP geolocation database configuration
    • Licensing APIs
      • Delete license
      • Get license
      • Get trial status
      • Start trial
      • Get basic status
      • Start basic
      • Update license
    • Logstash APIs
      • Create or update Logstash pipeline
      • Delete Logstash pipeline
      • Get Logstash pipeline
    • Machine learning APIs
      • Get machine learning info
      • Get machine learning memory stats
      • Set upgrade mode
    • Machine learning anomaly detection APIs
      • Add events to calendar
      • Add jobs to calendar
      • Close jobs
      • Create jobs
      • Create calendars
      • Create datafeeds
      • Create filters
      • Delete calendars
      • Delete datafeeds
      • Delete events from calendar
      • Delete filters
      • Delete forecasts
      • Delete jobs
      • Delete jobs from calendar
      • Delete model snapshots
      • Delete expired data
      • Estimate model memory
      • Flush jobs
      • Forecast jobs
      • Get buckets
      • Get calendars
      • Get categories
      • Get datafeeds
      • Get datafeed statistics
      • Get influencers
      • Get jobs
      • Get job statistics
      • Get model snapshots
      • Get model snapshot upgrade statistics
      • Get overall buckets
      • Get scheduled events
      • Get filters
      • Get records
      • Open jobs
      • Post data to jobs
      • Preview datafeeds
      • Reset jobs
      • Revert model snapshots
      • Start datafeeds
      • Stop datafeeds
      • Update datafeeds
      • Update filters
      • Update jobs
      • Update model snapshots
      • Upgrade model snapshots
    • Machine learning data frame analytics APIs
      • Create data frame analytics jobs
      • Delete data frame analytics jobs
      • Evaluate data frame analytics
      • Explain data frame analytics
      • Get data frame analytics jobs
      • Get data frame analytics jobs stats
      • Preview data frame analytics
      • Start data frame analytics jobs
      • Stop data frame analytics jobs
      • Update data frame analytics jobs
    • Machine learning trained model APIs
      • Clear trained model deployment cache
      • Create or update trained model aliases
      • Create part of a trained model
      • Create trained models
      • Create trained model vocabulary
      • Delete trained model aliases
      • Delete trained models
      • Get trained models
      • Get trained models stats
      • Infer trained model
      • Start trained model deployment
      • Stop trained model deployment
      • Update trained model deployment
    • Migration APIs
      • Deprecation info
      • Feature migration
    • Node lifecycle APIs
      • Put shutdown API
      • Get shutdown API
      • Delete shutdown API
    • Query rules APIs
      • Create or update query ruleset
      • Get query ruleset
      • List query rulesets
      • Delete query ruleset
      • Create or update query rule
      • Get query rule
      • Delete query rule
      • Tests query ruleset
    • Reload search analyzers API
    • Repositories metering APIs
      • Get repositories metering information
      • Clear repositories metering archive
    • Rollup APIs
      • Create rollup jobs
      • Delete rollup jobs
      • Get job
      • Get rollup caps
      • Get rollup index caps
      • Rollup search
      • Start rollup jobs
      • Stop rollup jobs
    • Root API
    • Script APIs
      • Create or update stored script
      • Delete stored script
      • Get script contexts
      • Get script languages
      • Get stored script
    • Search APIs
      • Search
      • Async search
      • Point in time
      • kNN search
      • Retriever
      • Reciprocal rank fusion
      • Scroll
      • Clear scroll
      • Search template
      • Multi search template
      • Render search template
      • Search shards
      • Suggesters
      • Multi search
      • Count
      • Validate
      • Terms enum
      • Explain
      • Profile
      • Field capabilities
      • Ranking evaluation
      • Vector tile search
    • Search Application APIs
      • Put Search Application
      • Get Search Application
      • List Search Applications
      • Delete Search Application
      • Search Application Search
      • Render Search Application Query
    • Searchable snapshots APIs
      • Mount snapshot
      • Cache stats
      • Searchable snapshot statistics
      • Clear cache
    • Security APIs
      • Authenticate
      • Change passwords
      • Clear cache
      • Clear roles cache
      • Clear privileges cache
      • Clear API key cache
      • Clear service account token caches
      • Create API keys
      • Create or update application privileges
      • Create or update role mappings
      • Create or update roles
      • Bulk create or update roles API
      • Bulk delete roles API
      • Create or update users
      • Create service account tokens
      • Delegate PKI authentication
      • Delete application privileges
      • Delete role mappings
      • Delete roles
      • Delete service account token
      • Delete users
      • Disable users
      • Enable users
      • Enroll Kibana
      • Enroll node
      • Get API key information
      • Get application privileges
      • Get builtin privileges
      • Get role mappings
      • Get roles
      • Query Role
      • Get service accounts
      • Get service account credentials
      • Get Security settings
      • Get token
      • Get user privileges
      • Get users
      • Grant API keys
      • Has privileges
      • Invalidate API key
      • Invalidate token
      • OpenID Connect prepare authentication
      • OpenID Connect authenticate
      • OpenID Connect logout
      • Query API key information
      • Query User
      • Update API key
      • Update Security settings
      • Bulk update API keys
      • SAML prepare authentication
      • SAML authenticate
      • SAML logout
      • SAML invalidate
      • SAML complete logout
      • SAML service provider metadata
      • SSL certificate
      • Activate user profile
      • Disable user profile
      • Enable user profile
      • Get user profiles
      • Suggest user profile
      • Update user profile data
      • Has privileges user profile
      • Create Cross-Cluster API key
      • Update Cross-Cluster API key
    • Snapshot and restore APIs
      • Create or update snapshot repository
      • Verify snapshot repository
      • Repository analysis
      • Verify repository integrity
      • Get snapshot repository
      • Delete snapshot repository
      • Clean up snapshot repository
      • Clone snapshot
      • Create snapshot
      • Get snapshot
      • Get snapshot status
      • Restore snapshot
      • Delete snapshot
    • Snapshot lifecycle management APIs
      • Create or update policy
      • Get policy
      • Delete policy
      • Execute snapshot lifecycle policy
      • Execute snapshot retention policy
      • Get snapshot lifecycle management status
      • Get snapshot lifecycle stats
      • Start snapshot lifecycle management
      • Stop snapshot lifecycle management
    • SQL APIs
      • Clear SQL cursor
      • Delete async SQL search
      • Get async SQL search
      • Get async SQL search status
      • SQL search
      • SQL translate
    • Synonyms APIs
      • Create or update synonyms set
      • Get synonyms set
      • List synonyms sets
      • Delete synonyms set
      • Create or update synonym rule
      • Get synonym rule
      • Delete synonym rule
    • Text structure APIs
      • Find field structure API
      • Find messages structure API
      • Find text structure API
      • Test Grok pattern
    • Transform APIs
      • Create transform
      • Delete transform
      • Get transforms
      • Get transform statistics
      • Preview transform
      • Reset transform
      • Schedule now transform
      • Start transform
      • Stop transforms
      • Update transform
      • Upgrade transforms
    • Usage API
    • Watcher APIs
      • Ack watch
      • Activate watch
      • Deactivate watch
      • Delete watch
      • Execute watch
      • Get watch
      • Get Watcher stats
      • Query watches
      • Create or update watch
      • Update Watcher settings
      • Get Watcher settings
      • Start watch service
      • Stop watch service
    • Definitions
      • Role mapping resources
  • Command line tools
    • elasticsearch-certgen
    • elasticsearch-certutil
    • elasticsearch-create-enrollment-token
    • elasticsearch-croneval
    • elasticsearch-keystore
    • elasticsearch-node
    • elasticsearch-reconfigure-node
    • elasticsearch-reset-password
    • elasticsearch-saml-metadata
    • elasticsearch-service-tokens
    • elasticsearch-setup-passwords
    • elasticsearch-shard
    • elasticsearch-syskeygen
    • elasticsearch-users
  • Optimizations
    • General recommendations
    • Tune for indexing speed
    • Tune for search speed
    • Tune approximate kNN search
    • Tune for disk usage
    • Size your shards
    • Use Elasticsearch for time series data
  • Troubleshooting
    • Fix common cluster issues
      • Watermark errors
      • Circuit breaker errors
      • High CPU usage
      • High JVM memory pressure
      • Red or yellow cluster health status
      • Rejected requests
      • Task queue backlog
      • Mapping explosion
      • Hot spotting
    • Diagnose unassigned shards
    • Add a missing tier to the system
    • Allow Elasticsearch to allocate the data in the system
    • Allow Elasticsearch to allocate the index
    • Indices mix index allocation filters with data tiers node roles to move through data tiers
    • Not enough nodes to allocate all shard replicas
    • Total number of shards for an index on a single node exceeded
    • Total number of shards per node has been reached
    • Troubleshooting corruption
    • Fix data nodes out of disk
      • Increase the disk capacity of data nodes
      • Decrease the disk usage of data nodes
    • Fix master nodes out of disk
    • Fix other role nodes out of disk
    • Start index lifecycle management
    • Start Snapshot Lifecycle Management
    • Restore from snapshot
    • Troubleshooting broken repositories
      • Diagnosing corrupted repositories
      • Diagnosing unknown repositories
      • Diagnosing invalid repositories
    • Addressing repeated snapshot policy failures
    • Troubleshooting an unstable cluster
    • Troubleshooting discovery
    • Troubleshooting monitoring
    • Troubleshooting transforms
    • Troubleshooting Watcher
    • Troubleshooting searches
    • Troubleshooting shards capacity health issues
    • Troubleshooting an unbalanced cluster
    • Capture diagnostics
  • Migration guide
    • 8.17
    • 8.16
    • 8.15
    • 8.14
    • 8.13
    • 8.12
    • 8.11
    • 8.10
    • 8.9
    • 8.8
    • 8.7
    • 8.6
    • 8.5
    • 8.4
    • 8.3
    • 8.2
    • 8.1
    • 8.0
      • Java time migration guide
      • Transient settings migration guide
  • Release notes
    • Elasticsearch version 8.17.3
    • Elasticsearch version 8.17.2
    • Elasticsearch version 8.17.1
    • Elasticsearch version 8.17.0
    • Elasticsearch version 8.16.4
    • Elasticsearch version 8.16.3
    • Elasticsearch version 8.16.2
    • Elasticsearch version 8.16.1
    • Elasticsearch version 8.16.0
    • Elasticsearch version 8.15.5
    • Elasticsearch version 8.15.4
    • Elasticsearch version 8.15.3
    • Elasticsearch version 8.15.2
    • Elasticsearch version 8.15.1
    • Elasticsearch version 8.15.0
    • Elasticsearch version 8.14.3
    • Elasticsearch version 8.14.2
    • Elasticsearch version 8.14.1
    • Elasticsearch version 8.14.0
    • Elasticsearch version 8.13.4
    • Elasticsearch version 8.13.3
    • Elasticsearch version 8.13.2
      • Bug fixes
    • Elasticsearch version 8.13.1
      • Bug fixes
    • Elasticsearch version 8.13.0
    • Elasticsearch version 8.12.2
    • Elasticsearch version 8.12.1
    • Elasticsearch version 8.12.0
    • Elasticsearch version 8.11.4
    • Elasticsearch version 8.11.3
    • Elasticsearch version 8.11.2
    • Elasticsearch version 8.11.1
    • Elasticsearch version 8.11.0
    • Elasticsearch version 8.10.4
    • Elasticsearch version 8.10.3
    • Elasticsearch version 8.10.2
    • Elasticsearch version 8.10.1
    • Elasticsearch version 8.10.0
    • Elasticsearch version 8.9.2
    • Elasticsearch version 8.9.1
    • Elasticsearch version 8.9.0
    • Elasticsearch version 8.8.2
    • Elasticsearch version 8.8.1
    • Elasticsearch version 8.8.0
    • Elasticsearch version 8.7.1
    • Elasticsearch version 8.7.0
    • Elasticsearch version 8.6.2
    • Elasticsearch version 8.6.1
    • Elasticsearch version 8.6.0
    • Elasticsearch version 8.5.3
    • Elasticsearch version 8.5.2
    • Elasticsearch version 8.5.1
    • Elasticsearch version 8.5.0
    • Elasticsearch version 8.4.3
    • Elasticsearch version 8.4.2
    • Elasticsearch version 8.4.1
    • Elasticsearch version 8.4.0
    • Elasticsearch version 8.3.3
    • Elasticsearch version 8.3.2
    • Elasticsearch version 8.3.1
    • Elasticsearch version 8.3.0
    • Elasticsearch version 8.2.3
    • Elasticsearch version 8.2.2
    • Elasticsearch version 8.2.1
    • Elasticsearch version 8.2.0
    • Elasticsearch version 8.1.3
    • Elasticsearch version 8.1.2
    • Elasticsearch version 8.1.1
    • Elasticsearch version 8.1.0
    • Elasticsearch version 8.0.1
    • Elasticsearch version 8.0.0
    • Elasticsearch version 8.0.0-rc2
    • Elasticsearch version 8.0.0-rc1
    • Elasticsearch version 8.0.0-beta1
    • Elasticsearch version 8.0.0-alpha2
    • Elasticsearch version 8.0.0-alpha1
  • Dependencies and versions

Search and analyze your data

Elasticsearch is the search and analytics engine that powers the Elastic Stack.

Introduction What's new Release notes

Get to know Elasticsearch

Demos: Hands-on learning for Search

New webinar: Architect search apps with Google Cloud

Install, manage, and secure

  • Set up Elasticsearch
  • Secure the Elastic Stack
  • Upgrade Elasticsearch
  • Set up a cluster for high availability
  • Monitor a cluster
  • Troubleshooting
  • Enterprise Search server

Ingest data

  • Adding data to Elasticsearch
  • Connectors
  • Web crawler
  • Data streams
  • Ingest pipelines
  • Mapping

Search and analyze

  • Search your data
  • Query data with the Query DSL, ES|QL, EQL, or SQL
  • Search applications
  • Search analytics
  • Aggregations
  • Geospatial analysis
  • Machine Learning
  • Alerting

Data management

  • Data management
  • Downsampling
  • Snapshot and restore

APIs and developer docs

  • REST APIs
  • Elasticsearch clients
  • Painless scripting language
  • Plugins and integrations
  • Search Labs
  • Notebook examples

Explore by use case

Search my data

Create search experiences for your content, wherever it lives.

Observe my data

Follow our guides to monitor logs, metrics, and traces.

Protect my environment

Learn how to defend against threats across your environment.

© 2023-2025 Elasticsearch
As of September 2024, Elasticsearch is available under a choice of three licenses: the Server Side Public License (SSPL), the Elastic License, or the AGPLv3 (OSI approved).
Elasticsearch and the Elasticsearch logo are trademarks of Elasticsearch B.V., registered in the U.S. and in other countries.
https://www.elastic.co/guide/en/elasticsearch/reference/8.17/index.html

Spec-Zone.ru

Настройки Оффлайн Что нового Помощь О нас
Spec-Zone .ru
спецификации, руководства, описания, API