# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1035

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1036

---

## [Save data from Databricks to ElasticSearch Cloud](https://discuss.elastic.co/t/save-data-from-databricks-to-elasticsearch-cloud/216679)

<div class="topic-metadata">

**Author:** [@shoeb\_ansari](https://discuss.elastic.co/u/shoeb_ansari)\
**Replies:** 0\
**Last updated:** [January 27, 2020, 3:04pm UTC](https://discuss.elastic.co/t/save-data-from-databricks-to-elasticsearch-cloud/216679 "2020-01-27T15:04:28Z")

</div>

While executing the Databricks notebook to save data in Elasticsearch cloud if you are getting below error: “org.elasticsearch.hadoop.EsHadoopIllegalArgumentException: Cannot detect ES version - typically this happens…

---

## [Elastic Spark ErrorHandler](https://discuss.elastic.co/t/elastic-spark-errorhandler/215170)

<div class="topic-metadata">

**Author:** [@itssujan](https://discuss.elastic.co/u/itssujan)\
**Replies:** 1\
**Last updated:** [January 27, 2020, 3:49pm UTC](https://discuss.elastic.co/t/elastic-spark-errorhandler/215170 "2020-01-27T15:49:12Z")

</div>

Hello, Im using elasticsearch-hadoop to index our dataframe via spark sink. I have used the configurations as mentioned in https://www.elastic.co/guide/en/elasticsearch/hadoop/current/errorhandlers.html to configure a c…

---

## [Thread\_pool.size bigger than # processors](https://discuss.elastic.co/t/thread-pool-size-bigger-than-processors/216681)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 2\
**Last updated:** [January 27, 2020, 3:43pm UTC](https://discuss.elastic.co/t/thread-pool-size-bigger-than-processors/216681 "2020-01-27T15:43:28Z")

</div>

Hi, I would like to tune thread\_pool.size value so I would like to understand what could happen if I will set a value bigger than the # of processors. For instance, I have a VM with 8 core so for search.thread\_pool siz…

---

## [Best approach for updating large amount of documents](https://discuss.elastic.co/t/best-approach-for-updating-large-amount-of-documents/216252)

<div class="topic-metadata">

**Author:** [@Toma\_Popov](https://discuss.elastic.co/u/Toma_Popov)\
**Replies:** 6\
**Last updated:** [January 27, 2020, 3:42pm UTC](https://discuss.elastic.co/t/best-approach-for-updating-large-amount-of-documents/216252 "2020-01-27T15:42:45Z")

</div>

Hello, I would like to ask, what would be the best approach when trying to update big amounts of documents. For our use case we have documents, that need to be enriched with additional data a few hour after they have b…

---

## [Getting started - where and how to use POST command example?](https://discuss.elastic.co/t/getting-started-where-and-how-to-use-post-command-example/216588)

<div class="topic-metadata">

**Author:** [@debasisc](https://discuss.elastic.co/u/debasisc)\
**Replies:** 3\
**Last updated:** [January 27, 2020, 12:59pm UTC](https://discuss.elastic.co/t/getting-started-where-and-how-to-use-post-command-example/216588 "2020-01-27T12:59:14Z")

</div>

Just recently installed Elasticsearch in Windows 10. Trying to follow "getting started" tutorial. Can you provide working version of curl command or equivalent whereby I can execute this step? I do not have Kibana ins…

---

## [Can't figure out how to handle missing doc fields with ScriptedFields](https://discuss.elastic.co/t/cant-figure-out-how-to-handle-missing-doc-fields-with-scriptedfields/216573)

<div class="topic-metadata">

**Author:** [@tuudik](https://discuss.elastic.co/u/tuudik)\
**Replies:** 1\
**Last updated:** [January 27, 2020, 3:02pm UTC](https://discuss.elastic.co/t/cant-figure-out-how-to-handle-missing-doc-fields-with-scriptedfields/216573 "2020-01-27T15:02:17Z")

</div>

I upgraded my ES to version 7.1 and ofcourse I ran into issue, where Scripted Fields cant have empty doc fields anymore. My scripted field is concating 3 fields and last one of might be sometimes missing. Could someone…

---

## [How come that my disk available on elasticsearch is stabilized while still ingesting data](https://discuss.elastic.co/t/how-come-that-my-disk-available-on-elasticsearch-is-stabilized-while-still-ingesting-data/216622)

<div class="topic-metadata">

**Author:** [@Haalanam](https://discuss.elastic.co/u/Haalanam)\
**Replies:** 3\
**Last updated:** [January 27, 2020, 2:39pm UTC](https://discuss.elastic.co/t/how-come-that-my-disk-available-on-elasticsearch-is-stabilized-while-still-ingesting-data/216622 "2020-01-27T14:39:51Z")

</div>

Weird fact ! I am ingesting data since now 10 days but my elasticsearch node is kind of stabilized to 94 %. What might causes that knowing that i dont delete any data.

---

## [Too\_many\_buckets\_exception](https://discuss.elastic.co/t/too-many-buckets-exception/216671)

<div class="topic-metadata">

**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\
**Replies:** 0\
**Last updated:** [January 27, 2020, 2:15pm UTC](https://discuss.elastic.co/t/too-many-buckets-exception/216671 "2020-01-27T14:15:46Z")

</div>

Hi... I have a too\_many\_buckets\_exception problem. I have read some of the other related questions and although the composite aggregation did help to a certain degree ... it does not seem to support auto\_date\_histogram M…

---

## [High number of refresh threads](https://discuss.elastic.co/t/high-number-of-refresh-threads/216135)

<div class="topic-metadata">

**Author:** [@Christophe\_Journel](https://discuss.elastic.co/u/Christophe_Journel)\
**Replies:** 3\
**Last updated:** [January 27, 2020, 2:11pm UTC](https://discuss.elastic.co/t/high-number-of-refresh-threads/216135 "2020-01-27T14:11:02Z")

</div>

Hello, Here is the result of GET /\_cat/thread\_pool/refresh/?v node\_name name active queue rejected node-5203 refresh 0 0 0 node-5202 refresh 10 13676 0 node-5206 refresh 0 …

---

## [Problems with bootstrapping my 2-node cluster. Master node not found](https://discuss.elastic.co/t/problems-with-bootstrapping-my-2-node-cluster-master-node-not-found/216464)

<div class="topic-metadata">

**Author:** [@paul4](https://discuss.elastic.co/u/paul4)\
**Replies:** 9\
**Last updated:** [January 27, 2020, 2:10pm UTC](https://discuss.elastic.co/t/problems-with-bootstrapping-my-2-node-cluster-master-node-not-found/216464 "2020-01-27T14:10:41Z")

</div>

Hi all, I googled and searched these forums extenisvely, but unfortunately still no luck with this. I try to bootstrap a new cluster, based on Docker and ElasticSearch 7.5.0 . I keep getting the error: "master not dis…

---

## [How to Count 3 columns together while doing group by in Elastic Transform in Kibana](https://discuss.elastic.co/t/how-to-count-3-columns-together-while-doing-group-by-in-elastic-transform-in-kibana/216405)

<div class="topic-metadata">

**Author:** [@Vijay\_Gupta](https://discuss.elastic.co/u/Vijay_Gupta)\
**Replies:** 2\
**Last updated:** [January 27, 2020, 2:08pm UTC](https://discuss.elastic.co/t/how-to-count-3-columns-together-while-doing-group-by-in-elastic-transform-in-kibana/216405 "2020-01-27T14:08:00Z")

</div>

I have below data set in my index and I want to summarize my index via transform feature in kibana (yellow column shows count of available number for reference) I am able to get individual columns count while doing gr…

---

## [A password-protected multi-node cluster with Docker Compose](https://discuss.elastic.co/t/a-password-protected-multi-node-cluster-with-docker-compose/216560)

<div class="topic-metadata">

**Author:** [@alza](https://discuss.elastic.co/u/alza)\
**Replies:** 8\
**Last updated:** [January 27, 2020, 12:24pm UTC](https://discuss.elastic.co/t/a-password-protected-multi-node-cluster-with-docker-compose/216560 "2020-01-27T12:24:09Z")

</div>

I wonder if there is a way to password protect (not using SSL, just a simple password) the multi-node cluster (using Docker Compose and with basic/free license) that explained here? I tried to add ELASTIC\_PASSWORD=mypas…

---

## [Elasticsearch.bat VS elasticsearch service](https://discuss.elastic.co/t/elasticsearch-bat-vs-elasticsearch-service/216653)

<div class="topic-metadata">

**Author:** [@CesarPozo](https://discuss.elastic.co/u/CesarPozo)\
**Replies:** 0\
**Last updated:** [January 27, 2020, 12:02pm UTC](https://discuss.elastic.co/t/elasticsearch-bat-vs-elasticsearch-service/216653 "2020-01-27T12:02:30Z")

</div>

(For Windows) Is there any differences between run elasticsearch.bat and install the service elasticsearch-service.bat and start it? I have read here that: "Elasticsearch can be installed as a service to run in the bac…

---

## [Dashboard not working as expected](https://discuss.elastic.co/t/dashboard-not-working-as-expected/216637)

<div class="topic-metadata">

**Author:** [@Abbas\_Hallal](https://discuss.elastic.co/u/Abbas_Hallal)\
**Replies:** 0\
**Last updated:** [January 27, 2020, 10:53am UTC](https://discuss.elastic.co/t/dashboard-not-working-as-expected/216637 "2020-01-27T10:53:44Z")

</div>

Hello, I am new to ElasticStack. I have setup the filebeat on a remote server and the Elastics search logstash and Kibana on another server. I am able to see the log in the Logs section however I am unable to get them i…

---

## [org.elasticsearch.index.query.QueryShardException: failed to create query using kibana](https://discuss.elastic.co/t/org-elasticsearch-index-query-queryshardexception-failed-to-create-query-using-kibana/216305)

<div class="topic-metadata">

**Author:** [@GregoryBrown](https://discuss.elastic.co/u/GregoryBrown)\
**Replies:** 1\
**Last updated:** [January 27, 2020, 10:46am UTC](https://discuss.elastic.co/t/org-elasticsearch-index-query-queryshardexception-failed-to-create-query-using-kibana/216305 "2020-01-27T10:46:36Z")

</div>

I have a newly setup Elasticsearch cluster and kibana pointing to it. When I just click on the discovery tab to view the data it just hangs forever and ever, when looking into the ES logs more I see the following error: …

---

## [I have a date field and got the error: 'Fielddata is disabled on text fields by default.'](https://discuss.elastic.co/t/i-have-a-date-field-and-got-the-error-fielddata-is-disabled-on-text-fields-by-default/216335)

<div class="topic-metadata">

**Author:** [@Daniel\_Faria](https://discuss.elastic.co/u/Daniel_Faria)\
**Replies:** 1\
**Last updated:** [January 27, 2020, 10:44am UTC](https://discuss.elastic.co/t/i-have-a-date-field-and-got-the-error-fielddata-is-disabled-on-text-fields-by-default/216335 "2020-01-27T10:44:54Z")

</div>

Hello. I have a date field mapping as date and got the error: 'Fielddata is disabled on text fields by default.'' on Kibana query. Fielddata is disabled on text fields by default. Set fielddata=true on \[log\_processed.t…

---

## [Is it possible to return only one result if an exact match is found?](https://discuss.elastic.co/t/is-it-possible-to-return-only-one-result-if-an-exact-match-is-found/216410)

<div class="topic-metadata">

**Author:** [@Aaron\_Pitts](https://discuss.elastic.co/u/Aaron_Pitts)\
**Replies:** 1\
**Last updated:** [January 27, 2020, 10:36am UTC](https://discuss.elastic.co/t/is-it-possible-to-return-only-one-result-if-an-exact-match-is-found/216410 "2020-01-27T10:36:26Z")

</div>

Hi guys, I'm building a site with a database of watches. I have an autocomplete search input. I have fuzzy matching for typing in the watch name (post\_title), but I'd like for the user to be able to enter the watch refe…

---

## [Get certain fields from children in has-child query](https://discuss.elastic.co/t/get-certain-fields-from-children-in-has-child-query/216031)

<div class="topic-metadata">

**Author:** [@johnkary](https://discuss.elastic.co/u/johnkary)\
**Replies:** 1\
**Last updated:** [January 27, 2020, 10:29am UTC](https://discuss.elastic.co/t/get-certain-fields-from-children-in-has-child-query/216031 "2020-01-27T10:29:11Z")

</div>

Hi all! I have an index with parent-child capability. I managed the has-child query to bring me specific fields from the parent with the command: \_source": \["parent\_field\_1","parent\_field\_2"...\] and it worked. Now i w…

---

## [Cant create index after deleted them all](https://discuss.elastic.co/t/cant-create-index-after-deleted-them-all/216564)

<div class="topic-metadata">

**Author:** [@zilahir](https://discuss.elastic.co/u/zilahir)\
**Replies:** 2\
**Last updated:** [January 27, 2020, 9:58am UTC](https://discuss.elastic.co/t/cant-create-index-after-deleted-them-all/216564 "2020-01-27T09:58:29Z")

</div>

So, i have deleted all my indicies, using the endpoint: DELETE \<apiEndpoint\>/\* after this, started to add data to Elasticsearch again, which are arriving there successfully. In kibana, when i create index, it seems i…

---

## [How to query on a specific array index within elasticsearch?](https://discuss.elastic.co/t/how-to-query-on-a-specific-array-index-within-elasticsearch/216557)

<div class="topic-metadata">

**Author:** [@meallhour](https://discuss.elastic.co/u/meallhour)\
**Replies:** 1\
**Last updated:** [January 27, 2020, 9:56am UTC](https://discuss.elastic.co/t/how-to-query-on-a-specific-array-index-within-elasticsearch/216557 "2020-01-27T09:56:51Z")

</div>

Mapping: abc-data-type/\_mapping/field/sData.status { "abc\_history": { "mappings": { "abc-data-type": { "sData.status": { "full\_name": "sData.status", …

---

## [Startup freezes after "\[node\] initializing ..." state](https://discuss.elastic.co/t/startup-freezes-after-node-initializing-state/216533)

<div class="topic-metadata">

**Author:** [@lifia](https://discuss.elastic.co/u/lifia)\
**Replies:** 1\
**Last updated:** [January 27, 2020, 9:54am UTC](https://discuss.elastic.co/t/startup-freezes-after-node-initializing-state/216533 "2020-01-27T09:54:33Z")

</div>

Hi all, We have a production environment on ElasticSearch 1.6.0. When we start elasticsearch service, although service status is "started", it does not bind to ports 9200/9300 and join the cluster. When I check the lo…

---

## [Elasticsearch query over multiple indexes very slow](https://discuss.elastic.co/t/elasticsearch-query-over-multiple-indexes-very-slow/216520)

<div class="topic-metadata">

**Author:** [@Pedro\_Torres](https://discuss.elastic.co/u/Pedro_Torres)\
**Replies:** 1\
**Last updated:** [January 27, 2020, 9:44am UTC](https://discuss.elastic.co/t/elasticsearch-query-over-multiple-indexes-very-slow/216520 "2020-01-27T09:44:25Z")

</div>

Question: I create one index with one shard per day on Elasticsearch. When I perform queries against several days worth of these indices, it is very slow. Would anyone that has implemented a similar architecture give som…

---

## [How to analyze how many documents for specific key's each value](https://discuss.elastic.co/t/how-to-analyze-how-many-documents-for-specific-keys-each-value/216514)

<div class="topic-metadata">

**Author:** [@ryohetoy](https://discuss.elastic.co/u/ryohetoy)\
**Replies:** 1\
**Last updated:** [January 27, 2020, 9:43am UTC](https://discuss.elastic.co/t/how-to-analyze-how-many-documents-for-specific-keys-each-value/216514 "2020-01-27T09:43:27Z")

</div>

I have a like\_to\_article Index with 250,000 documents. This index has article\_id key. To analyze how many documents for each article\_id key, how can I do that even if there are 250,000 docs? for incetance... article…

---

## [After update the 7.4.2 too 7.5.1 , don't work](https://discuss.elastic.co/t/after-update-the-7-4-2-too-7-5-1-dont-work/215685)

<div class="topic-metadata">

**Author:** [@econom](https://discuss.elastic.co/u/econom)\
**Replies:** 2\
**Last updated:** [January 27, 2020, 7:21am UTC](https://discuss.elastic.co/t/after-update-the-7-4-2-too-7-5-1-dont-work/215685 "2020-01-27T07:21:10Z")

</div>

\[2020-01-20T11:13:39,384\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[c7.lan\] uncaught exception in thread \[main\] org.elasticsearch.bootstrap.StartupException: ElasticsearchException\[failed to bind service\]; nes…

---

## [Elasticsearch security points](https://discuss.elastic.co/t/elasticsearch-security-points/216593)

<div class="topic-metadata">

**Author:** [@shashikant\_swaraj](https://discuss.elastic.co/u/shashikant_swaraj)\
**Replies:** 1\
**Last updated:** [January 27, 2020, 5:00am UTC](https://discuss.elastic.co/t/elasticsearch-security-points/216593 "2020-01-27T05:00:23Z")

</div>

HI, we want to deploy elaticsearch on our production server. what security points needs to consider

---

## [Not able to get any results on using bucket aggregations](https://discuss.elastic.co/t/not-able-to-get-any-results-on-using-bucket-aggregations/216576)

<div class="topic-metadata">

**Author:** [@fenster25](https://discuss.elastic.co/u/fenster25)\
**Replies:** 3\
**Last updated:** [January 27, 2020, 1:32am UTC](https://discuss.elastic.co/t/not-able-to-get-any-results-on-using-bucket-aggregations/216576 "2020-01-27T01:32:49Z")

</div>

I have some PR data in my ES. This is how the documents are modelled { "Author" : "dheerajrav", "Date" : "2012-10-05T10:16:49Z", "Number" : 2554441, "IsMerged" : false, …

---

## [Suggestion search for autocomplete](https://discuss.elastic.co/t/suggestion-search-for-autocomplete/216585)

<div class="topic-metadata">

**Author:** [@MaTTaDox](https://discuss.elastic.co/u/MaTTaDox)\
**Replies:** 0\
**Last updated:** [January 26, 2020, 10:29pm UTC](https://discuss.elastic.co/t/suggestion-search-for-autocomplete/216585 "2020-01-26T22:29:15Z")

</div>

Hey Together, anyone have an Idea how i can suggestions like the "Other Suggestions" in the following image? I found it in this Video. I think they refer to the title of the article but I not been able to find the c…

---

## [How to delete index? Invalid escape sequence \`%\[f' at index 0 of: %\[fields\]\[log\_type\]-2020.01.09](https://discuss.elastic.co/t/how-to-delete-index-invalid-escape-sequence-f-at-index-0-of-fields-log-type-2020-01-09/214509)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 4\
**Last updated:** [January 26, 2020, 8:02pm UTC](https://discuss.elastic.co/t/how-to-delete-index-invalid-escape-sequence-f-at-index-0-of-fields-log-type-2020-01-09/214509 "2020-01-26T20:02:25Z")

</div>

I have an index called this in kibana- yellow open %\[fields\]\[log\_type\]-2020.01.09 and when I try to delete it with this command- DELETE /%\[fields\]\[log\_type\]-2020.01.09 I get an error which says- { "error": "inva…

---

## [Switching monitoring towards 'Monitoring cluster'](https://discuss.elastic.co/t/switching-monitoring-towards-monitoring-cluster/216578)

<div class="topic-metadata">

**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\
**Replies:** 0\
**Last updated:** [January 26, 2020, 7:38pm UTC](https://discuss.elastic.co/t/switching-monitoring-towards-monitoring-cluster/216578 "2020-01-26T19:38:16Z")

</div>

Hi forum. Following the exploration of the ELK universe, now, since it is strongly encouraged around, I want to learn how to setup the 'Monitoring cluster' scenario. While documentation is quite detailed on every piece,…

---

## [MyQuery](https://discuss.elastic.co/t/myquery/216571)

<div class="topic-metadata">

**Author:** [@rickyooi](https://discuss.elastic.co/u/rickyooi)\
**Replies:** 2\
**Last updated:** [January 26, 2020, 5:46pm UTC](https://discuss.elastic.co/t/myquery/216571 "2020-01-26T17:46:41Z")

</div>

Hi, Let say my SQL query will be as follow: SELECT A,B,C,D FROM TABLE1 WHERE A in ('a','b','c') AND B \> 20 How can I write the elasticsearch query so that it works the same manner as the query above?

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1034)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1036)
