# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1043

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1044

---

## [How to get all unique values of a field for a single index?](https://discuss.elastic.co/t/how-to-get-all-unique-values-of-a-field-for-a-single-index/215492)

<div class="topic-metadata">

**Author:** [@Tom\_Somerville](https://discuss.elastic.co/u/Tom_Somerville)\
**Replies:** 0\
**Last updated:** [January 17, 2020, 4:12pm UTC](https://discuss.elastic.co/t/how-to-get-all-unique-values-of-a-field-for-a-single-index/215492 "2020-01-17T16:12:26Z")

</div>

Hey All, Running into an issue that I cannot seem to find a solution. I currently have a number of indexes, all of them billions of docs large, and I need a way to extract all unique values for any given field in the in…

---

## [License API for Put](https://discuss.elastic.co/t/license-api-for-put/215490)

<div class="topic-metadata">

**Author:** [@balogan](https://discuss.elastic.co/u/balogan)\
**Replies:** 0\
**Last updated:** [January 17, 2020, 3:53pm UTC](https://discuss.elastic.co/t/license-api-for-put/215490 "2020-01-17T15:53:42Z")

</div>

I'm working on writing a play to update the license key. Get and delete works well, but when I put the license I got from the get it throws this error. { "errors": \[{ "code": "license.invalid\_license", "message": "I…

---

## [Query\_string using '\*' wildcard VS prefix query](https://discuss.elastic.co/t/query-string-using-wildcard-vs-prefix-query/215481)

<div class="topic-metadata">

**Author:** [@CesarPozo](https://discuss.elastic.co/u/CesarPozo)\
**Replies:** 1\
**Last updated:** [January 17, 2020, 3:28pm UTC](https://discuss.elastic.co/t/query-string-using-wildcard-vs-prefix-query/215481 "2020-01-17T15:28:32Z")

</div>

I wrote a query for get all clients whose name start with c. I am getting the same results with the two following queries: #Q1 Query String and \* wildcard GET /client/\_search { "query": { "query\_string": { "…

---

## [Elastic does not respond with many security index patterns](https://discuss.elastic.co/t/elastic-does-not-respond-with-many-security-index-patterns/215376)

<div class="topic-metadata">

**Author:** [@jpozorio](https://discuss.elastic.co/u/jpozorio)\
**Replies:** 2\
**Last updated:** [January 17, 2020, 2:41pm UTC](https://discuss.elastic.co/t/elastic-does-not-respond-with-many-security-index-patterns/215376 "2020-01-17T14:41:44Z")

</div>

Hi, My custer has 770 index and when I try to open a Kibana dashboard with one user who can access more then 10 patterns (each pattern usually "point" to 9 index), the elasticsearch throws the below message. I google a…

---

## [Migrate Billing to Google Cloud](https://discuss.elastic.co/t/migrate-billing-to-google-cloud/215485)

<div class="topic-metadata">

**Author:** [@Edgar\_Peixoto](https://discuss.elastic.co/u/Edgar_Peixoto)\
**Replies:** 0\
**Last updated:** [January 17, 2020, 3:11pm UTC](https://discuss.elastic.co/t/migrate-billing-to-google-cloud/215485 "2020-01-17T15:11:52Z")

</div>

My team already have a Cluster in Elastic Cloud. But now we want to migrate the billing to our Google Cloud. Is it possible or do we have to recreate the cluster using Google Cloud Marketplace and delete the cluster we …

---

## [Wildcard searching on mult-word phrase](https://discuss.elastic.co/t/wildcard-searching-on-mult-word-phrase/215480)

<div class="topic-metadata">

**Author:** [@cas4](https://discuss.elastic.co/u/cas4)\
**Replies:** 0\
**Last updated:** [January 17, 2020, 2:51pm UTC](https://discuss.elastic.co/t/wildcard-searching-on-mult-word-phrase/215480 "2020-01-17T14:51:55Z")

</div>

I have a particular document that contains North American and North America's but not North America. I'm trying to come up with a query string syntax that will return all North America records trying a query similar to…

---

## [Clarity on ECS 1.4 service field group](https://discuss.elastic.co/t/clarity-on-ecs-1-4-service-field-group/214657)

<div class="topic-metadata">

**Author:** [@Gregory\_Zimmers](https://discuss.elastic.co/u/Gregory_Zimmers)\
**Replies:** 1\
**Last updated:** [January 17, 2020, 2:20pm UTC](https://discuss.elastic.co/t/clarity-on-ecs-1-4-service-field-group/214657 "2020-01-17T14:20:55Z")

</div>

After digging into ECS 1.4 and the different sub field groupings. I'm still struggling to understand the difference between service.id and service.type. For service.id the documentation states Unique identifier of the…

---

## [Is Elasticsearch the right tool for a spellchecker?](https://discuss.elastic.co/t/is-elasticsearch-the-right-tool-for-a-spellchecker/215469)

<div class="topic-metadata">

**Author:** [@illyThe](https://discuss.elastic.co/u/illyThe)\
**Replies:** 0\
**Last updated:** [January 17, 2020, 1:46pm UTC](https://discuss.elastic.co/t/is-elasticsearch-the-right-tool-for-a-spellchecker/215469 "2020-01-17T13:46:34Z")

</div>

Hello. I'm not sure if this is the right place to ask. I'm going to build a spellchecker as a project for a Java application and I had an idea on how I could implement it with Elasticsearch. I would index the dictionar…

---

## [Querying for document a then document b within x time](https://discuss.elastic.co/t/querying-for-document-a-then-document-b-within-x-time/215462)

<div class="topic-metadata">

**Author:** [@Luke\_Nicholson](https://discuss.elastic.co/u/Luke_Nicholson)\
**Replies:** 0\
**Last updated:** [January 17, 2020, 1:07pm UTC](https://discuss.elastic.co/t/querying-for-document-a-then-document-b-within-x-time/215462 "2020-01-17T13:07:50Z")

</div>

Hi, Is there a way to query for documents that do X and then Y within say, 1 hour? For example, say i worked for amazon, id like to figure out who viewed an item for sale (document X), and then purchased the item within…

---

## [Retrieve data from elasticsearch 5.6.0 using java API](https://discuss.elastic.co/t/retrieve-data-from-elasticsearch-5-6-0-using-java-api/214729)

<div class="topic-metadata">

**Author:** [@Venkatesh\_Ponnusami](https://discuss.elastic.co/u/Venkatesh_Ponnusami)\
**Replies:** 2\
**Last updated:** [January 17, 2020, 12:17pm UTC](https://discuss.elastic.co/t/retrieve-data-from-elasticsearch-5-6-0-using-java-api/214729 "2020-01-17T12:17:53Z")

</div>

Hi, I am trying to write a java program for storing a string in elasticsearch and then retrieve from it My code is GetResponse response = client.prepareGet("correct", "Doe","11").setStoredFields("message") …

---

## [Elasticsearch\_integTest\_v6.8.2andv7.2.1\_BuildFailure/Error](https://discuss.elastic.co/t/elasticsearch-integtest-v6-8-2andv7-2-1-buildfailure-error/215448)

<div class="topic-metadata">

**Author:** [@soniya20](https://discuss.elastic.co/u/soniya20)\
**Replies:** 0\
**Last updated:** [January 17, 2020, 11:29am UTC](https://discuss.elastic.co/t/elasticsearch-integtest-v6-8-2andv7-2-1-buildfailure-error/215448 "2020-01-17T11:29:28Z")

</div>

Hi, I'm facing issue while performing testing of elasticsearch versions 6.8.2 and 7.2.1. I've performed the testing on both version of elasticsearch and getting same error. Following steps have been performed: For ela…

---

## [Path.repo](https://discuss.elastic.co/t/path-repo/215444)

<div class="topic-metadata">

**Author:** [@Andrea\_Barocco](https://discuss.elastic.co/u/Andrea_Barocco)\
**Replies:** 0\
**Last updated:** [January 17, 2020, 10:57am UTC](https://discuss.elastic.co/t/path-repo/215444 "2020-01-17T10:57:09Z")

</div>

When i uncomment the path.repo in the elasticsearch.yml, elk doesn't work

---

## [Master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster, and this node must discover master-eligible nodes elasticsearch](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-and-this-node-must-discover-master-eligible-nodes-elasticsearch/214185)

<div class="topic-metadata">

**Author:** [@Sandeep\_Kumar4](https://discuss.elastic.co/u/Sandeep_Kumar4)\
**Replies:** 2\
**Last updated:** [January 17, 2020, 10:33am UTC](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-and-this-node-must-discover-master-eligible-nodes-elasticsearch/214185 "2020-01-17T10:33:48Z")

</div>

curl -XGET 'http://127.0.0.1:9200/\_cluster/health?pretty=true' { "error" : { "root\_cause" : \[ { "type" : "master\_not\_discovered\_exception", "reason" : null } \], "type" : "master\_…

---

## [Shards needed in parent-child indexing](https://discuss.elastic.co/t/shards-needed-in-parent-child-indexing/214867)

<div class="topic-metadata">

**Author:** [@johnkary](https://discuss.elastic.co/u/johnkary)\
**Replies:** 14\
**Last updated:** [January 17, 2020, 10:19am UTC](https://discuss.elastic.co/t/shards-needed-in-parent-child-indexing/214867 "2020-01-17T10:19:35Z")

</div>

Hi all, I use Elasticsearch 6.6 and i have a question about the number of shards that i need. I plan to index csv log files which have thousands of rows each. These csvs have also a header (first 8 lines with '#' in fro…

---

## [How to add refresh option in python elasticsearch parallel\_bulk helper](https://discuss.elastic.co/t/how-to-add-refresh-option-in-python-elasticsearch-parallel-bulk-helper/215433)

<div class="topic-metadata">

**Author:** [@akhilmathew001](https://discuss.elastic.co/u/akhilmathew001)\
**Replies:** 0\
**Last updated:** [January 17, 2020, 9:24am UTC](https://discuss.elastic.co/t/how-to-add-refresh-option-in-python-elasticsearch-parallel-bulk-helper/215433 "2020-01-17T09:24:23Z")

</div>

I am using python's elasticsearch client for doing elasticsearch 7 related activities. For bulk indexing documents to ES elasticsearch's parallel\_bulk helper function is being used. Following is the sample code... …

---

## [Elasticsearch community edition and enterprise edition documentation](https://discuss.elastic.co/t/elasticsearch-community-edition-and-enterprise-edition-documentation/215428)

<div class="topic-metadata">

**Author:** [@sreenivasulu](https://discuss.elastic.co/u/sreenivasulu)\
**Replies:** 1\
**Last updated:** [January 17, 2020, 9:02am UTC](https://discuss.elastic.co/t/elasticsearch-community-edition-and-enterprise-edition-documentation/215428 "2020-01-17T09:02:35Z")

</div>

Hi Team, Could you please provide me URLs are any documentation for "Elasticsearch community edition and enterprise edition documentation" to understand complete environment. Thanks Srinivas

---

## [New index is not created](https://discuss.elastic.co/t/new-index-is-not-created/215091)

<div class="topic-metadata">

**Author:** [@Wojciech\_Gomola](https://discuss.elastic.co/u/Wojciech_Gomola)\
**Replies:** 6\
**Last updated:** [January 17, 2020, 8:56am UTC](https://discuss.elastic.co/t/new-index-is-not-created/215091 "2020-01-17T08:56:19Z")

</div>

Hi. I have Filebeat + ELK stack. My Logstash has a pretty standard configuration: input { beats { port =\> 5044 } } filter { grok { match =\> { "message" =\> "^(?\<log\_date\>\\d{4}-\\d\\d-\\d\\d \\d\\d:\\d\\d:\\d\\d.\\…

---

## [Changing Kibana/Elasticsearch end point url](https://discuss.elastic.co/t/changing-kibana-elasticsearch-end-point-url/215427)

<div class="topic-metadata">

**Author:** [@Mohamad-Sobhie](https://discuss.elastic.co/u/Mohamad-Sobhie)\
**Replies:** 1\
**Last updated:** [January 17, 2020, 8:55am UTC](https://discuss.elastic.co/t/changing-kibana-elasticsearch-end-point-url/215427 "2020-01-17T08:55:07Z")

</div>

my cluster is deployed on the Elastic cloud, i want to change my end point URLs, where do i do that?

---

## [Shard Allocation awareness stopped working](https://discuss.elastic.co/t/shard-allocation-awareness-stopped-working/215330)

<div class="topic-metadata">

**Author:** [@74db36a597f21b891b3f](https://discuss.elastic.co/u/74db36a597f21b891b3f)\
**Replies:** 2\
**Last updated:** [January 17, 2020, 8:39am UTC](https://discuss.elastic.co/t/shard-allocation-awareness-stopped-working/215330 "2020-01-17T08:39:45Z")

</div>

Hello. I configured forced shard allocation awareness on my cluster as described here some time earlier. And it was working well. But now I find out that some indices with one shard and one replica allocated on the node…

---

## [Ingest Pipeline data processor adds hours](https://discuss.elastic.co/t/ingest-pipeline-data-processor-adds-hours/215154)

<div class="topic-metadata">

**Author:** [@fabian](https://discuss.elastic.co/u/fabian)\
**Replies:** 2\
**Last updated:** [January 16, 2020, 2:27pm UTC](https://discuss.elastic.co/t/ingest-pipeline-data-processor-adds-hours/215154 "2020-01-16T14:27:49Z")

</div>

Hey there, I have a problem with the data ingest processor for one logfile. It adds the timezone hours to my @timestamp. In my case +1h. I use the pipelines with data processor a lot, so I cannot figure out why this is…

---

## [Python Curator - possible to filter IndexList on the first call](https://discuss.elastic.co/t/python-curator-possible-to-filter-indexlist-on-the-first-call/215403)

<div class="topic-metadata">

**Author:** [@StephenGoodall](https://discuss.elastic.co/u/StephenGoodall)\
**Replies:** 2\
**Last updated:** [January 17, 2020, 6:02am UTC](https://discuss.elastic.co/t/python-curator-possible-to-filter-indexlist-on-the-first-call/215403 "2020-01-17T06:02:46Z")

</div>

Is it possible to make the: curator.IndexList(es) call do the filter at the same time? We run multiple AWS lambdas, that use the python Curator and we are getting errors. I think it's because we run multiple lambdas a…

---

## [Confidence Scores change once on updating the object, then change again on another search query with no conditions changed](https://discuss.elastic.co/t/confidence-scores-change-once-on-updating-the-object-then-change-again-on-another-search-query-with-no-conditions-changed/215236)

<div class="topic-metadata">

**Author:** [@Pushkal\_Bhatia](https://discuss.elastic.co/u/Pushkal_Bhatia)\
**Replies:** 0\
**Last updated:** [January 16, 2020, 4:44am UTC](https://discuss.elastic.co/t/confidence-scores-change-once-on-updating-the-object-then-change-again-on-another-search-query-with-no-conditions-changed/215236 "2020-01-16T04:44:56Z")

</div>

Hello, We are using Elasticsearch for our business solution. The problem we are facing is that, once an object of the index is updated, the search gives some score (Pic 2), and on searching again - keeping every single …

---

## [Issue with index rollover via ILM](https://discuss.elastic.co/t/issue-with-index-rollover-via-ilm/215398)

<div class="topic-metadata">

**Author:** [@anirudhra10](https://discuss.elastic.co/u/anirudhra10)\
**Replies:** 0\
**Last updated:** [January 17, 2020, 12:49am UTC](https://discuss.elastic.co/t/issue-with-index-rollover-via-ilm/215398 "2020-01-17T00:49:47Z")

</div>

Hi Elastic support team, I am trying to implement index rollover via ILM. However my test index is not rolling over at the right size. Note: index lifecycle poll interval is unchanged, therefore its 10m (default). Pol…

---

## [Is there any way to enable versioning or concurrency control of documents based on a particular field? (Timestamp field)](https://discuss.elastic.co/t/is-there-any-way-to-enable-versioning-or-concurrency-control-of-documents-based-on-a-particular-field-timestamp-field/215388)

<div class="topic-metadata">

**Author:** [@perahimi](https://discuss.elastic.co/u/perahimi)\
**Replies:** 0\
**Last updated:** [January 16, 2020, 8:33pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-enable-versioning-or-concurrency-control-of-documents-based-on-a-particular-field-timestamp-field/215388 "2020-01-16T20:33:40Z")

</div>

Hello, I am currently working with catalog data that is coming in hourly in our pipeline. This is an example of how the written source document might look like. { "name": "Hoodie", "sku": "123", "timeStamp"…

---

## [Ingesting AppDynamics metric information into Elasticsearch](https://discuss.elastic.co/t/ingesting-appdynamics-metric-information-into-elasticsearch/215381)

<div class="topic-metadata">

**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\
**Replies:** 0\
**Last updated:** [January 16, 2020, 7:46pm UTC](https://discuss.elastic.co/t/ingesting-appdynamics-metric-information-into-elasticsearch/215381 "2020-01-16T19:46:12Z")

</div>

We are using AppDynamics APM for our system monitoring and alerting and I need to get that information into Elasticsearch before AppDynamics starts rolling up it's data and we start losing information granularity. The i…

---

## [New indices remain yellow when there are relocations in the cluster](https://discuss.elastic.co/t/new-indices-remain-yellow-when-there-are-relocations-in-the-cluster/215345)

<div class="topic-metadata">

**Author:** [@itiyamas](https://discuss.elastic.co/u/itiyamas)\
**Replies:** 3\
**Last updated:** [January 16, 2020, 6:54pm UTC](https://discuss.elastic.co/t/new-indices-remain-yellow-when-there-are-relocations-in-the-cluster/215345 "2020-01-16T18:54:18Z")

</div>

Hi, When we reduce the number of nodes in our cluster to half, a lot of recoveries start in the cluster as a result of excluding the old ips. We are running a 120 node cluster with a total of 4M docs/second. There are 6…

---

## [Blocked by: \[SERVICE\_UNAVAILABLE/1/state not recovered / initialized\];"}\]](https://discuss.elastic.co/t/blocked-by-service-unavailable-1-state-not-recovered-initialized/215372)

<div class="topic-metadata">

**Author:** [@symsymmas](https://discuss.elastic.co/u/symsymmas)\
**Replies:** 0\
**Last updated:** [January 16, 2020, 6:19pm UTC](https://discuss.elastic.co/t/blocked-by-service-unavailable-1-state-not-recovered-initialized/215372 "2020-01-16T18:19:16Z")

</div>

I have a cluster with 4 nodes. When the 3 slaves are stoped and I start the master, I’ve got this error. Could you help me please. {"error":{"root\_cause":\[{"type":"cluster\_block\_exception","reason":"blocked by: \[SERVICE…

---

## [Synonyms not getting applied](https://discuss.elastic.co/t/synonyms-not-getting-applied/215366)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 1\
**Last updated:** [January 16, 2020, 6:03pm UTC](https://discuss.elastic.co/t/synonyms-not-getting-applied/215366 "2020-01-16T18:03:27Z")

</div>

Hello Team, I have below document in the index { "name" :"test", "products": \[ { "pname" : "p1", "qty" : "10 pcs" }, { "pname" : " p3 ", "qty" : "10 PCS" …

---

## [Cluster outage with old-gen size increasing](https://discuss.elastic.co/t/cluster-outage-with-old-gen-size-increasing/215229)

<div class="topic-metadata">

**Author:** [@musfiqur](https://discuss.elastic.co/u/musfiqur)\
**Replies:** 0\
**Last updated:** [January 16, 2020, 12:28am UTC](https://discuss.elastic.co/t/cluster-outage-with-old-gen-size-increasing/215229 "2020-01-16T00:28:35Z")

</div>

Hi, We are seeing logs like this in our ElasticSearch 6.7: \[gc\]\[young\]\[678215\]\[290288\] duration \[718ms\], collections \[1\]/\[1s\], total \[718ms\]/\[4.5h\], memory \[9.6gb\]-\>\[10.3gb\]/\[30.1gb\], all\_pools {\[young\] \[108.4mb\]-\>\[332…

---

## [Why NFS is to be avoided for data directories](https://discuss.elastic.co/t/why-nfs-is-to-be-avoided-for-data-directories/215240)

<div class="topic-metadata">

**Author:** [@malshan](https://discuss.elastic.co/u/malshan)\
**Replies:** 7\
**Last updated:** [January 16, 2020, 5:30pm UTC](https://discuss.elastic.co/t/why-nfs-is-to-be-avoided-for-data-directories/215240 "2020-01-16T17:30:35Z")

</div>

ES: 7.5 I have seen the recommendations in official documentation to 'avoid NFS' when using them as data directories for elasticsearch. I have also seen almost everywhere in the forums to 'avoid NFS' but couldn't find a…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1042)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1044)
