# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1011 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1012 --- ## [Match a keyword field containing a newline character](https://discuss.elastic.co/t/match-a-keyword-field-containing-a-newline-character/219867)
**Author:** [@kamiunsu](https://discuss.elastic.co/u/kamiunsu)\ **Replies:** 1\ **Last updated:** [February 20, 2020, 8:31am UTC](https://discuss.elastic.co/t/match-a-keyword-field-containing-a-newline-character/219867 "2020-02-20T08:31:01Z")
I'm able to sort on a nested field using the following params: "sort": \[ { "scores.value": { "mode": "sum", "order": "desc", "nested": { "path": "scores", "filter": … --- ## [Index Mappings Compare](https://discuss.elastic.co/t/index-mappings-compare/220010)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 1\ **Last updated:** [February 20, 2020, 8:28am UTC](https://discuss.elastic.co/t/index-mappings-compare/220010 "2020-02-20T08:28:46Z")
Is there a way to compare the index mappings between 2 indices? --- ## [Custom type field example not work in Elasticsearch 7.6](https://discuss.elastic.co/t/custom-type-field-example-not-work-in-elasticsearch-7-6/220031)
**Author:** [@andrewbien](https://discuss.elastic.co/u/andrewbien)\ **Replies:** 4\ **Last updated:** [February 20, 2020, 8:16am UTC](https://discuss.elastic.co/t/custom-type-field-example-not-work-in-elasticsearch-7-6/220031 "2020-02-20T08:16:28Z")
Hi everyone, I got a problem when I try to run an example of Custom type field section in this tutorial: https://www.elastic.co/guide/en/elasticsearch/reference/7.6/removal-of-types.html#\_custom\_type\_field I executed th… --- ## [\-How to sort within nested objects](https://discuss.elastic.co/t/how-to-sort-within-nested-objects/220095)
**Author:** [@Shafath\_Ahmed](https://discuss.elastic.co/u/Shafath_Ahmed)\ **Replies:** 1\ **Last updated:** [February 20, 2020, 8:01am UTC](https://discuss.elastic.co/t/how-to-sort-within-nested-objects/220095 "2020-02-20T08:01:25Z")
Hi All I have a document like the following: { "applicant" : { "firstName" : "tasd", "lastName" : "asdfasdf" }, "employmentsHistory" : \[ { "companyName" : "asdfa 1", "isCurrentlyWorkin… --- ## [Elasticsearch \_bulk insert node js axios](https://discuss.elastic.co/t/elasticsearch-bulk-insert-node-js-axios/220099)
**Author:** [@chase2981](https://discuss.elastic.co/u/chase2981)\ **Replies:** 1\ **Last updated:** [February 20, 2020, 7:59am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-insert-node-js-axios/220099 "2020-02-20T07:59:45Z")
axios.post(\`http://ec2-99-999-99-999.us-west-2.compute.amazonaws.com:9200/\_bulk\`, \`{ "update" : {"\_id" : "1", "\_index" : "test"} }\\n{ "doc" : {"field2" : "value2"} }\\n\`, { headers: { 'Content-type': 'applicat… --- ## [Qualys API integration into Elasticsearch](https://discuss.elastic.co/t/qualys-api-integration-into-elasticsearch/219888)
**Author:** [@tanner8302](https://discuss.elastic.co/u/tanner8302)\ **Replies:** 3\ **Last updated:** [February 20, 2020, 7:44am UTC](https://discuss.elastic.co/t/qualys-api-integration-into-elasticsearch/219888 "2020-02-20T07:44:08Z")
I am a current customer of Qualys and would like to create a reoccuring API call to Qualys from my Elasticsearch instance. I am unclear on where I create and schedule cURL command to access this data. When I try and us… --- ## [Is there a way to reindex data in ES from start to now()?](https://discuss.elastic.co/t/is-there-a-way-to-reindex-data-in-es-from-start-to-now/219830)
**Author:** [@fallenreaper](https://discuss.elastic.co/u/fallenreaper)\ **Replies:** 4\ **Last updated:** [February 20, 2020, 7:42am UTC](https://discuss.elastic.co/t/is-there-a-way-to-reindex-data-in-es-from-start-to-now/219830 "2020-02-20T07:42:23Z")
I figured there was a built in way to say: Hey Master node, reindex on propertyA, propertyB, propertyC for independent faster lookups. My ES DB is about 250g large now on a single dual purpose Master/Data node. I was … --- ## [Email watcher setup - fail](https://discuss.elastic.co/t/email-watcher-setup-fail/219972)
**Author:** [@RaTheDev](https://discuss.elastic.co/u/RaTheDev)\ **Replies:** 3\ **Last updated:** [February 20, 2020, 7:36am UTC](https://discuss.elastic.co/t/email-watcher-setup-fail/219972 "2020-02-20T07:36:46Z")
I am new to WATHER and looking to setup an email triggers for the watchers. Configured my elasticsearch.yaml as directed from (https://www.elastic.co/guide/en/x-pack/6.2/actions-email.html#outlook) using outlook. Below… --- ## [Index is not actionable in curator shrink](https://discuss.elastic.co/t/index-is-not-actionable-in-curator-shrink/220105)
**Author:** [@Ramazan\_dd](https://discuss.elastic.co/u/Ramazan_dd)\ **Replies:** 1\ **Last updated:** [February 20, 2020, 7:33am UTC](https://discuss.elastic.co/t/index-is-not-actionable-in-curator-shrink/220105 "2020-02-20T07:33:34Z")
Hello, I need to archive file in order to shrink size of index which older than 1 day, also delete index. Now my delete\_indeces action works well, shrink action doesn\`t. My index status is green now. What i should do? H… --- ## [Date range with now-20d not working on nested fields (long post)](https://discuss.elastic.co/t/date-range-with-now-20d-not-working-on-nested-fields-long-post/219700)
**Author:** [@GX1](https://discuss.elastic.co/u/GX1)\ **Replies:** 1\ **Last updated:** [February 20, 2020, 5:21am UTC](https://discuss.elastic.co/t/date-range-with-now-20d-not-working-on-nested-fields-long-post/219700 "2020-02-20T05:21:44Z")
I came across a strange scenario and cant understand why I can not match a nested field by date range basically I want to find documents where field 'data.api\_data.listings\_favorites.ts' is within the last 20 days, if I… --- ## [Search using multiple strings](https://discuss.elastic.co/t/search-using-multiple-strings/220089)
**Author:** [@Darshan\_Kamat](https://discuss.elastic.co/u/Darshan_Kamat)\ **Replies:** 0\ **Last updated:** [February 20, 2020, 5:21am UTC](https://discuss.elastic.co/t/search-using-multiple-strings/220089 "2020-02-20T05:21:01Z")
i have below setup Filebeat-\>es\<-Kibana i need to capture 3 api logs with order id . I have logs like below :: 2020 Feb 19 10:10:06:136---\> API 1 order id -\<\> \<\<---SOAP XML Payload logs of API 1 --\>\> 2020 Feb 19 10… --- ## [What index(actual lucene inverted index) does a query request hit?](https://discuss.elastic.co/t/what-index-actual-lucene-inverted-index-does-a-query-request-hit/220072)
**Author:** [@addhawan](https://discuss.elastic.co/u/addhawan)\ **Replies:** 0\ **Last updated:** [February 20, 2020, 2:59am UTC](https://discuss.elastic.co/t/what-index-actual-lucene-inverted-index-does-a-query-request-hit/220072 "2020-02-20T02:59:39Z")
Hi, I want to understand how a query is executed and what all lucene indexes does it hit to find a match? Lets say I have a document like: { "id":"id\_1", "fName":"John", "lName":"DOe", "age":28, "email":"johndoe@… --- ## [Waiting for elected master node \[...\] to setup local exporter](https://discuss.elastic.co/t/waiting-for-elected-master-node-to-setup-local-exporter/220063)
**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\ **Replies:** 1\ **Last updated:** [February 20, 2020, 12:53am UTC](https://discuss.elastic.co/t/waiting-for-elected-master-node-to-setup-local-exporter/220063 "2020-02-20T00:53:06Z")
Elasticsearch version 6.5.4 All my nodes are emitting the message below, and make up the majority of my logs. What is the "local exporter"? how do I install it? how do I set it up? This has been a problem since I in… --- ## [An index called logstash](https://discuss.elastic.co/t/an-index-called-logstash/219894)
**Author:** [@martine](https://discuss.elastic.co/u/martine)\ **Replies:** 3\ **Last updated:** [February 19, 2020, 11:39pm UTC](https://discuss.elastic.co/t/an-index-called-logstash/219894 "2020-02-19T23:39:27Z")
I have noticed the since the upgrade from 6.x to 7.x that indexes had errors with their lifecycle policies. illegal\_argument\_exception: index.lifecycle.rollover\_alias \[logstash\] does not point to index \[logstash-2020.02… --- ## [Problems creating a single node cluster](https://discuss.elastic.co/t/problems-creating-a-single-node-cluster/219984)
**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\ **Replies:** 10\ **Last updated:** [February 19, 2020, 9:36pm UTC](https://discuss.elastic.co/t/problems-creating-a-single-node-cluster/219984 "2020-02-19T21:36:22Z")
Hi! I've managed to get Elastic 7.6 running on Ubuntu 18.04 LTS in AWS, I have access to it via a REST client using port tunnelling in a SSH connection, and while it is accessible (returning the standard "status" messag… --- ## [Got in over my head. Basic setup for large Elasticsearch cluster](https://discuss.elastic.co/t/got-in-over-my-head-basic-setup-for-large-elasticsearch-cluster/220061)
**Author:** [@pbryant](https://discuss.elastic.co/u/pbryant)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 9:34pm UTC](https://discuss.elastic.co/t/got-in-over-my-head-basic-setup-for-large-elasticsearch-cluster/220061 "2020-02-19T21:34:37Z")
I have gotten in a bit over my head on an elasticsearch project, and am seeking some very basic architectural information. I am trying to deliver a basic elasticsearch cluster for some researchers, who will put the clust… --- ## [Can I apply split processor on more than one field?](https://discuss.elastic.co/t/can-i-apply-split-processor-on-more-than-one-field/220040)
**Author:** [@JohanP](https://discuss.elastic.co/u/JohanP)\ **Replies:** 2\ **Last updated:** [February 19, 2020, 8:43pm UTC](https://discuss.elastic.co/t/can-i-apply-split-processor-on-more-than-one-field/220040 "2020-02-19T20:43:55Z")
I have a number on fields that I want to perform the same operation on in a reindex task: split values in a string to an array field, I want to do the same thing on several source fields. Here is my reindex command P… --- ## [Will ElasticSearch high-level rest java client be always forward compatible?](https://discuss.elastic.co/t/will-elasticsearch-high-level-rest-java-client-be-always-forward-compatible/220038)
**Author:** [@Jerry\_Peng](https://discuss.elastic.co/u/Jerry_Peng)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 6:19pm UTC](https://discuss.elastic.co/t/will-elasticsearch-high-level-rest-java-client-be-always-forward-compatible/220038 "2020-02-19T18:19:46Z")
Just came across the following post: It mentions that 6.x high level rest java client will work with cluster running 7.x, as forward compatibility is guaranteed. However, I want to double confirm that if, for future r… --- ## [ILM stop working after deleting indexes manually](https://discuss.elastic.co/t/ilm-stop-working-after-deleting-indexes-manually/220033)
**Author:** [@adnilote](https://discuss.elastic.co/u/adnilote)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 5:09pm UTC](https://discuss.elastic.co/t/ilm-stop-working-after-deleting-indexes-manually/220033 "2020-02-19T17:09:00Z")
Hi, everyone! I successfully configured Index Lifecycle Policies: indexes are rollovered and old data are deleted. But I want to be able to manually delete indexes if needed from kibana. The problem When I delete all … --- ## [Mapping timestamp in Kibana](https://discuss.elastic.co/t/mapping-timestamp-in-kibana/219581)
**Author:** [@Ilija\_Angeloski](https://discuss.elastic.co/u/Ilija_Angeloski)\ **Replies:** 6\ **Last updated:** [February 19, 2020, 5:30pm UTC](https://discuss.elastic.co/t/mapping-timestamp-in-kibana/219581 "2020-02-19T17:30:02Z")
Hi, I have problem mapping timestamp field. I have field in my csv file timestamp that have values like 1545003901, 1543347920 etc... In kibana in dev tools i type "properties":{ "timestamp":{ "type" : "date" "format… --- ## [Mapping Data Type using time measures such as \`10ns\`](https://discuss.elastic.co/t/mapping-data-type-using-time-measures-such-as-10ns/220036)
**Author:** [@stLalo](https://discuss.elastic.co/u/stLalo)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 5:22pm UTC](https://discuss.elastic.co/t/mapping-data-type-using-time-measures-such-as-10ns/220036 "2020-02-19T17:22:55Z")
Kibana version: 7.5.0 Elasticsearch version: 7.5.0 Browser version: Brave latest version Howdy, y'all! Description: I implemented an ETL pipeline service and a forecasting service using Clojure base on OpenJDK8. … --- ## [Significant terms buggy due to wrong bg\_count](https://discuss.elastic.co/t/significant-terms-buggy-due-to-wrong-bg-count/219637)
**Author:** [@Yonatan\_Omer](https://discuss.elastic.co/u/Yonatan_Omer)\ **Replies:** 7\ **Last updated:** [February 19, 2020, 3:03pm UTC](https://discuss.elastic.co/t/significant-terms-buggy-due-to-wrong-bg-count/219637 "2020-02-19T15:03:18Z")
We use significant terms to find services related to specified group of users. each user is a document, having a field 'services' which is an array of strings. The query bellow returns false report of anomalies due to … --- ## [Elastuc search with Informatica MDM failing with out of Java out of memroy error](https://discuss.elastic.co/t/elastuc-search-with-informatica-mdm-failing-with-out-of-java-out-of-memroy-error/219991)
**Author:** [@himel\_sen](https://discuss.elastic.co/u/himel_sen)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 3:03pm UTC](https://discuss.elastic.co/t/elastuc-search-with-informatica-mdm-failing-with-out-of-java-out-of-memroy-error/219991 "2020-02-19T15:03:14Z")
Can you please help me with the issue \[algsascs3655008\] \[4d5354312e375053-organization\]\[0\] already closed by tragic event on the index writer java.lang.OutOfMemoryError: Java heap space at java.util.Arrays.copyOf(Arr… --- ## [Date\_histogram returning wrong number of buckets](https://discuss.elastic.co/t/date-histogram-returning-wrong-number-of-buckets/219702)
**Author:** [@kpiyush](https://discuss.elastic.co/u/kpiyush)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 2:59pm UTC](https://discuss.elastic.co/t/date-histogram-returning-wrong-number-of-buckets/219702 "2020-02-19T14:59:13Z")
Hi, I am using following query to get the aggs based on date on per day interval with extended\_bounds /index1 { "size": 0, "query":{"bool":{"must":\[{"range":{"CreatedDate":{"lte":"2020-02-13T23:59:59"}}}\]}}, … --- ## [Increase score for unique words matched](https://discuss.elastic.co/t/increase-score-for-unique-words-matched/219868)
**Author:** [@emarthinsen](https://discuss.elastic.co/u/emarthinsen)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 2:51pm UTC](https://discuss.elastic.co/t/increase-score-for-unique-words-matched/219868 "2020-02-19T14:51:38Z")
This one is a little tricky to explain, but here goes. I have an index with mappings that look like this: { "mappings":{ "properties":{ "manufacturer":{ "type":"text", "anal… --- ## [Limit concurrent Elasticsearch shard relocations](https://discuss.elastic.co/t/limit-concurrent-elasticsearch-shard-relocations/219810)
**Author:** [@rsyne](https://discuss.elastic.co/u/rsyne)\ **Replies:** 2\ **Last updated:** [February 19, 2020, 2:24pm UTC](https://discuss.elastic.co/t/limit-concurrent-elasticsearch-shard-relocations/219810 "2020-02-19T14:24:05Z")
Hello. I'm running Elasticsearch 7.5.2 with Curator 5.8. The cluster consists of some SSD hot-data nodes and some HDD warm-data nodes. Curator is configured to daily move older indices from hot-data nodes to the cold on… --- ## [Regex with query from string](https://discuss.elastic.co/t/regex-with-query-from-string/218312)
**Author:** [@ganchu](https://discuss.elastic.co/u/ganchu)\ **Replies:** 1\ **Last updated:** [February 7, 2020, 10:25am UTC](https://discuss.elastic.co/t/regex-with-query-from-string/218312 "2020-02-07T10:25:03Z")
First query can find events included this string "registry\_key\_path" : """HKCR\\mscfile\\shell\\open\\command\\(Default)""" GET \_search { "query": { "query\_string": { "query": "(registry\_key\_path:/.\*mscfile.\*/)" } } }… --- ## [Filebeat insert logs from multiple hosts in parallel](https://discuss.elastic.co/t/filebeat-insert-logs-from-multiple-hosts-in-parallel/219952)
**Author:** [@ice3man543](https://discuss.elastic.co/u/ice3man543)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 2:09pm UTC](https://discuss.elastic.co/t/filebeat-insert-logs-from-multiple-hosts-in-parallel/219952 "2020-02-19T14:09:15Z")
We use elasticsearch for storing logs in our infrastructure. The entire infrastructure is composed of multiple workers that write the logs to a central elasticsearch server. The number of workers can increase as the rate… --- ## [Search behavior when type is text or keyword in elasticsearch 5.0 and greater](https://discuss.elastic.co/t/search-behavior-when-type-is-text-or-keyword-in-elasticsearch-5-0-and-greater/219975)
**Author:** [@raghubhai](https://discuss.elastic.co/u/raghubhai)\ **Replies:** 1\ **Last updated:** [February 19, 2020, 2:01pm UTC](https://discuss.elastic.co/t/search-behavior-when-type-is-text-or-keyword-in-elasticsearch-5-0-and-greater/219975 "2020-02-19T14:01:42Z")
Hi, How does elasticsearch differ in search when certain text are given. For eg: if name="Test@@" is escape sequence required for searching. If so then if name="Test @" behaves differently because it does not require… --- ## [Import data from MSSQL](https://discuss.elastic.co/t/import-data-from-mssql/219974)
**Author:** [@mathieu.bauge](https://discuss.elastic.co/u/mathieu.bauge)\ **Replies:** 0\ **Last updated:** [February 19, 2020, 1:40pm UTC](https://discuss.elastic.co/t/import-data-from-mssql/219974 "2020-02-19T13:40:55Z")
Hi everyone, I am new to ElasticSearch and I struggle to achieve some stuff. Can you please help me, I have this case : MSSQL servers, a windows server running the servers and logstash continuously, ElasticSearch and … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1010) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1012)