# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1047

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1048

---

## [Random indexing](https://discuss.elastic.co/t/random-indexing/214876)

<div class="topic-metadata">

**Author:** [@shankarana](https://discuss.elastic.co/u/shankarana)\
**Replies:** 1\
**Last updated:** [January 13, 2020, 5:58pm UTC](https://discuss.elastic.co/t/random-indexing/214876 "2020-01-13T17:58:37Z")

</div>

Hi Team, My usecase to update index whenever the new json document received. Logstash will receive event and update ES index. example: 01.00 AM: index name: currencies inserted with 5 documents source-destination…

---

## [FieldData or Nested optimization. Doubt](https://discuss.elastic.co/t/fielddata-or-nested-optimization-doubt/214877)

<div class="topic-metadata">

**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\
**Replies:** 0\
**Last updated:** [January 13, 2020, 4:41pm UTC](https://discuss.elastic.co/t/fielddata-or-nested-optimization-doubt/214877 "2020-01-13T16:41:51Z")

</div>

Hi guys, I find myself making some changes to an old scrits and I have the doubt that it would be more optimal if I continue using 'fielddata' or 'nested' that is to say the scripts do the searches or aggregations from a…

---

## [Retieve element in an array object](https://discuss.elastic.co/t/retieve-element-in-an-array-object/214785)

<div class="topic-metadata">

**Author:** [@pilo](https://discuss.elastic.co/u/pilo)\
**Replies:** 4\
**Last updated:** [January 13, 2020, 4:11pm UTC](https://discuss.elastic.co/t/retieve-element-in-an-array-object/214785 "2020-01-13T16:11:21Z")

</div>

Hi everyone, I have a question about array object in elasticsearch For example i have a mapping like this one: PUT test { "settings": { ...}, "mappings": { "properties": { "id":{ "type": "keyword…

---

## [Ideal data/ingester node count](https://discuss.elastic.co/t/ideal-data-ingester-node-count/214612)

<div class="topic-metadata">

**Author:** [@Naseem](https://discuss.elastic.co/u/Naseem)\
**Replies:** 5\
**Last updated:** [January 13, 2020, 3:36pm UTC](https://discuss.elastic.co/t/ideal-data-ingester-node-count/214612 "2020-01-13T15:36:07Z")

</div>

tl;dr fewer data nodes with more disk space each vs more data nodes with smaller disk space each? Our current setup consists of 3 master nodes, and 4 data/ingest nodes with large amounts of disk size each. Our daily in…

---

## [How to potentially flatten a nested document design?](https://discuss.elastic.co/t/how-to-potentially-flatten-a-nested-document-design/214650)

<div class="topic-metadata">

**Author:** [@cgremakes](https://discuss.elastic.co/u/cgremakes)\
**Replies:** 2\
**Last updated:** [January 13, 2020, 3:34pm UTC](https://discuss.elastic.co/t/how-to-potentially-flatten-a-nested-document-design/214650 "2020-01-13T15:34:33Z")

</div>

I am probably like many people that have more of a SQL background, and am attempting to branch out into using Elasticsearch. I am attempting to make a design choice that I'm hoping I can get some input on. We have a pr…

---

## [Elasticsearch ngram tokenizer](https://discuss.elastic.co/t/elasticsearch-ngram-tokenizer/214398)

<div class="topic-metadata">

**Author:** [@mirec](https://discuss.elastic.co/u/mirec)\
**Replies:** 3\
**Last updated:** [January 13, 2020, 3:12pm UTC](https://discuss.elastic.co/t/elasticsearch-ngram-tokenizer/214398 "2020-01-13T15:12:30Z")

</div>

Hi, \[Elasticsearch version 6.7.2\] I am trying to index my data using ngram tokenizer but sometimes it takes too much time to index. What I am trying to do is to make user to be able to search for any word or part of t…

---

## [Elasticsearch 6.4 xpack password enabling shows error](https://discuss.elastic.co/t/elasticsearch-6-4-xpack-password-enabling-shows-error/214722)

<div class="topic-metadata">

**Author:** [@Amarsha\_N.G](https://discuss.elastic.co/u/Amarsha_N.G)\
**Replies:** 2\
**Last updated:** [January 13, 2020, 3:09pm UTC](https://discuss.elastic.co/t/elasticsearch-6-4-xpack-password-enabling-shows-error/214722 "2020-01-13T15:09:53Z")

</div>

Path to directory where to store the data (separate multiple locations by comma): #path.data: /path/to/data Path to log files: #path.logs: /path/to/logs ----------------------------------- Memory ------------------…

---

## [Flatten \_source field of query results](https://discuss.elastic.co/t/flatten-source-field-of-query-results/214841)

<div class="topic-metadata">

**Author:** [@ssteiger](https://discuss.elastic.co/u/ssteiger)\
**Replies:** 2\
**Last updated:** [January 13, 2020, 2:40pm UTC](https://discuss.elastic.co/t/flatten-source-field-of-query-results/214841 "2020-01-13T14:40:41Z")

</div>

Hello, At our company we are using Elasticsearch together with GraphQL The problem we are facing is that we would like to cleanly fetch and return the \_source content of elasticsearch documents using the @elastic/elast…

---

## [Case sensitive Email ID handler for OpenID based User authentication](https://discuss.elastic.co/t/case-sensitive-email-id-handler-for-openid-based-user-authentication/214803)

<div class="topic-metadata">

**Author:** [@soumendra](https://discuss.elastic.co/u/soumendra)\
**Replies:** 1\
**Last updated:** [January 13, 2020, 2:19pm UTC](https://discuss.elastic.co/t/case-sensitive-email-id-handler-for-openid-based-user-authentication/214803 "2020-01-13T14:19:05Z")

</div>

When providing OpenID based access to the users in ES, the Email-IDs are taken as case sensitive i.e. if an user has email, Xyz.Abc@foo.com, if I give the Email-ID as xyz.abc@foo.com, the user is unable to login. Is ther…

---

## [Need help with search relevance settings](https://discuss.elastic.co/t/need-help-with-search-relevance-settings/214845)

<div class="topic-metadata">

**Author:** [@boost](https://discuss.elastic.co/u/boost)\
**Replies:** 1\
**Last updated:** [January 13, 2020, 2:15pm UTC](https://discuss.elastic.co/t/need-help-with-search-relevance-settings/214845 "2020-01-13T14:15:28Z")

</div>

Hello! I started getting acquainted with elasticsearch, and had some difficulties with setting up search relevance settings. analyzer: 'settings' =\> \[ 'number\_of\_shards' =\> 1, 'number\_of\_replicas' =\> 0, 'analysis' =\>…

---

## [Case insensitive sorting using normalizer](https://discuss.elastic.co/t/case-insensitive-sorting-using-normalizer/214591)

<div class="topic-metadata">

**Author:** [@CesarPozo](https://discuss.elastic.co/u/CesarPozo)\
**Replies:** 3\
**Last updated:** [January 13, 2020, 2:10pm UTC](https://discuss.elastic.co/t/case-insensitive-sorting-using-normalizer/214591 "2020-01-13T14:10:23Z")

</div>

Hello, I am using elasticsearch 7.5 and NEST client. I want to sort a query, and as you know, by default does A..Za..z. I want it to be case insensitive. I am trying to use a normalizer as is explained here: PUT /tes…

---

## [Watcher with foreach and aggregation](https://discuss.elastic.co/t/watcher-with-foreach-and-aggregation/214579)

<div class="topic-metadata">

**Author:** [@HansPeterSloot](https://discuss.elastic.co/u/HansPeterSloot)\
**Replies:** 4\
**Last updated:** [January 13, 2020, 2:03pm UTC](https://discuss.elastic.co/t/watcher-with-foreach-and-aggregation/214579 "2020-01-13T14:03:46Z")

</div>

Hi, I have a watcher with an aggregation query. The result of the aggregation is e.g: "min\_docs" : { "value" : 17.0, "keys" : \[ "CID1","CID2" \] } I have defined the watcher condition and action defined as: "condi…

---

## [Elk Stack disadvantages?](https://discuss.elastic.co/t/elk-stack-disadvantages/214810)

<div class="topic-metadata">

**Author:** [@juuuhuuu](https://discuss.elastic.co/u/juuuhuuu)\
**Replies:** 3\
**Last updated:** [January 13, 2020, 2:02pm UTC](https://discuss.elastic.co/t/elk-stack-disadvantages/214810 "2020-01-13T14:02:03Z")

</div>

Hi :slight\_smile: Does has Elk Stack on single Node some disadvantages ? If yes, which? (if you have logs about 4 Gb a day) thank you

---

## [How to get unique combination of multiple fields in elastic search in 1 bucket](https://discuss.elastic.co/t/how-to-get-unique-combination-of-multiple-fields-in-elastic-search-in-1-bucket/214719)

<div class="topic-metadata">

**Author:** [@Pinky\_Agarwal](https://discuss.elastic.co/u/Pinky_Agarwal)\
**Replies:** 1\
**Last updated:** [January 13, 2020, 1:58pm UTC](https://discuss.elastic.co/t/how-to-get-unique-combination-of-multiple-fields-in-elastic-search-in-1-bucket/214719 "2020-01-13T13:58:28Z")

</div>

I have an index with fields like that "\_source": { "ProductID": "7ab9772e-1e92-48c9-bfbb-a6d200b42fbe", "productName": "ABC", "theme\_id":"dsadsad", "theme\_name":"sdsd" } I want to get the unique key value pair lik…

---

## [Elastic Search - Advanced Watcher Script](https://discuss.elastic.co/t/elastic-search-advanced-watcher-script/214529)

<div class="topic-metadata">

**Author:** [@Maries](https://discuss.elastic.co/u/Maries)\
**Replies:** 1\
**Last updated:** [January 13, 2020, 1:56pm UTC](https://discuss.elastic.co/t/elastic-search-advanced-watcher-script/214529 "2020-01-13T13:56:31Z")

</div>

I have created an advanced watcher script to check whether the data is getting updated for the last 30 minutes for multiple indices . Is there a way to display the index name in Action logging. I want to display only es…

---

## [2 thread upsert with auto generated id](https://discuss.elastic.co/t/2-thread-upsert-with-auto-generated-id/214765)

<div class="topic-metadata">

**Author:** [@sharongur](https://discuss.elastic.co/u/sharongur)\
**Replies:** 1\
**Last updated:** [January 13, 2020, 1:34pm UTC](https://discuss.elastic.co/t/2-thread-upsert-with-auto-generated-id/214765 "2020-01-13T13:34:28Z")

</div>

Lets assume my BL creates documents with auto generated id. Now when i insert a new doc i first check if it exists ( upsert) by searching on some parameter inside the documents. If i cant find it, insert, if i can find…

---

## [Partial Search, Fuzzy Search Together using Query String](https://discuss.elastic.co/t/partial-search-fuzzy-search-together-using-query-string/214773)

<div class="topic-metadata">

**Author:** [@avinash\_kumawat](https://discuss.elastic.co/u/avinash_kumawat)\
**Replies:** 1\
**Last updated:** [January 13, 2020, 1:31pm UTC](https://discuss.elastic.co/t/partial-search-fuzzy-search-together-using-query-string/214773 "2020-01-13T13:31:13Z")

</div>

Hello All, I am trying to implement Google-like search, that supports partial and fuzzy search together, any idea how to implement this using one query and get the more accurate result from both partial and fuzzy search…

---

## [Centos7运行Elasticsearch6.5.4报错](https://discuss.elastic.co/t/centos7-elasticsearch6-5-4/214828)

<div class="topic-metadata">

**Author:** [@MaoliRUNsen](https://discuss.elastic.co/u/MaoliRUNsen)\
**Replies:** 1\
**Last updated:** [January 13, 2020, 1:11pm UTC](https://discuss.elastic.co/t/centos7-elasticsearch6-5-4/214828 "2020-01-13T13:11:14Z")

</div>

Centos7运行Elasticsearch6.5.4报错 org.elasticsearch.bootstrap.StartupException: java.lang.IllegalArgumentException: unknown setting \[ck.ml.enabled\] did you mean any of \[xpack.ml.enabled, xpack.sql.enabled\]?

---

## [Elasticsearch data not writing to second mount path](https://discuss.elastic.co/t/elasticsearch-data-not-writing-to-second-mount-path/214766)

<div class="topic-metadata">

**Author:** [@nisham](https://discuss.elastic.co/u/nisham)\
**Replies:** 4\
**Last updated:** [January 13, 2020, 12:32pm UTC](https://discuss.elastic.co/t/elasticsearch-data-not-writing-to-second-mount-path/214766 "2020-01-13T12:32:54Z")

</div>

Hello, We have 2 nodes cluster with Elasticsearch 5.2.2 version and I have two disk mount mentioned in path.data as \["/path-01","/path-02"\]. The data is writing only to the "/path-01" and its getting filled up and ther…

---

## [Dynamic field detection not works](https://discuss.elastic.co/t/dynamic-field-detection-not-works/214796)

<div class="topic-metadata">

**Author:** [@johnkary](https://discuss.elastic.co/u/johnkary)\
**Replies:** 1\
**Last updated:** [January 13, 2020, 11:19am UTC](https://discuss.elastic.co/t/dynamic-field-detection-not-works/214796 "2020-01-13T11:19:35Z")

</div>

Hi all, Here is my my issue about dynamic mapping. I use Elasticsearch 6.6 and have an index with some fields which i have predefined their names and types in the mapping below. Now, if a new field comes to my index i w…

---

## [How to do arithmetic calculations on the results from an Average Bucket](https://discuss.elastic.co/t/how-to-do-arithmetic-calculations-on-the-results-from-an-average-bucket/214793)

<div class="topic-metadata">

**Author:** [@fallicious](https://discuss.elastic.co/u/fallicious)\
**Replies:** 0\
**Last updated:** [January 13, 2020, 10:26am UTC](https://discuss.elastic.co/t/how-to-do-arithmetic-calculations-on-the-results-from-an-average-bucket/214793 "2020-01-13T10:26:41Z")

</div>

i am calculating the sum of time with daily interval and using it with the average bucket to get the total overall average, now i want to divide that result by the total number of users. but i cant seem to be able to do …

---

## [Security\_exception: action \[indices:admin/rollover\] is unauthorized for user \[beats\]](https://discuss.elastic.co/t/security-exception-action-indices-admin-rollover-is-unauthorized-for-user-beats/214345)

<div class="topic-metadata">

**Author:** [@huanqingdong](https://discuss.elastic.co/u/huanqingdong)\
**Replies:** 1\
**Last updated:** [January 13, 2020, 9:34am UTC](https://discuss.elastic.co/t/security-exception-action-indices-admin-rollover-is-unauthorized-for-user-beats/214345 "2020-01-13T09:34:05Z")

</div>

user beats now has two role : beats\_amdin(build in), beats\_c(created by myself). beats\_c role as the pic show what privilege shoud i add to beats\_c to avoid the error security\_exception: action \[indices:admin/rollov…

---

## [Migrating AWS instance types of Elasticsearch cluster](https://discuss.elastic.co/t/migrating-aws-instance-types-of-elasticsearch-cluster/214361)

<div class="topic-metadata">

**Author:** [@Stephy\_Jacob](https://discuss.elastic.co/u/Stephy_Jacob)\
**Replies:** 4\
**Last updated:** [January 13, 2020, 9:28am UTC](https://discuss.elastic.co/t/migrating-aws-instance-types-of-elasticsearch-cluster/214361 "2020-01-13T09:28:14Z")

</div>

Hi, We have a plan to migrate our existing 54 nodes ES cluster in AWS cloud which run on ES 6.6.2 to new AWS instance types for better performance with the same ES version. As we see we are having two options. Spin …

---

## [How to use "nested" properties fields in query script](https://discuss.elastic.co/t/how-to-use-nested-properties-fields-in-query-script/214621)

<div class="topic-metadata">

**Author:** [@astfgl](https://discuss.elastic.co/u/astfgl)\
**Replies:** 1\
**Last updated:** [January 13, 2020, 9:23am UTC](https://discuss.elastic.co/t/how-to-use-nested-properties-fields-in-query-script/214621 "2020-01-13T09:23:59Z")

</div>

Hi, I'm using Elasticsearch v6.5.0. my sample data: PUT index/pim\_catalog\_product/bbb\_2255444 { "id": "2838", "identifier": "bbb\_2255444", "created": "2019-12-05T11:34:36+00:00", "values": { "footwear\_size…

---

## [Single quote json](https://discuss.elastic.co/t/single-quote-json/211837)

<div class="topic-metadata">

**Author:** [@Kod](https://discuss.elastic.co/u/Kod)\
**Replies:** 1\
**Last updated:** [December 16, 2019, 9:02am UTC](https://discuss.elastic.co/t/single-quote-json/211837 "2019-12-16T09:02:26Z")

</div>

I was given a json file to work on. I want to do it elasticsearch and kibana. Problem is that instead of double quotes, it is wrapped with single quotes. How can I post it to elasticsearch?

---

## [Update multiple field values in elasticsearch](https://discuss.elastic.co/t/update-multiple-field-values-in-elasticsearch/214776)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 1\
**Last updated:** [January 13, 2020, 8:49am UTC](https://discuss.elastic.co/t/update-multiple-field-values-in-elasticsearch/214776 "2020-01-13T08:49:19Z")

</div>

Hi all, I am looking to update just one field value in document, http://host:9200/index/\_update/id { "script" : "ctx.\_source.Surname = 'ag'" } this does the job for updating one field, but how to replace multiple f…

---

## [Elasticsearch service not starting](https://discuss.elastic.co/t/elasticsearch-service-not-starting/214534)

<div class="topic-metadata">

**Author:** [@gsumilhig](https://discuss.elastic.co/u/gsumilhig)\
**Replies:** 14\
**Last updated:** [January 13, 2020, 7:43am UTC](https://discuss.elastic.co/t/elasticsearch-service-not-starting/214534 "2020-01-13T07:43:02Z")

</div>

Caused by: java.lang.IllegalStateException: jar hell! class: org.elasticsearch.plugins.ExtendedPluginsClassLoader jar1: /usr/share/elasticsearch/lib/plugin-classloader-6.8.0.jar jar2: /usr/share/elasticsearch/lib/plug…

---

## [Select into new docs](https://discuss.elastic.co/t/select-into-new-docs/214754)

<div class="topic-metadata">

**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\
**Replies:** 0\
**Last updated:** [January 13, 2020, 5:23am UTC](https://discuss.elastic.co/t/select-into-new-docs/214754 "2020-01-13T05:23:21Z")

</div>

Hi all. Is there a way to create a document(s) from the result of a query? I have a query doing some filtering and a scripted\_metric , returning a large amount of data that I would like to insert as new data set. The …

---

## [How to use Enrich with Elasticsearch 7.5](https://discuss.elastic.co/t/how-to-use-enrich-with-elasticsearch-7-5/214748)

<div class="topic-metadata">

**Author:** [@mingus](https://discuss.elastic.co/u/mingus)\
**Replies:** 0\
**Last updated:** [January 13, 2020, 1:25am UTC](https://discuss.elastic.co/t/how-to-use-enrich-with-elasticsearch-7-5/214748 "2020-01-13T01:25:26Z")

</div>

I want to configure an index using the Enrich API. User related index : A JIRA related Index : B New index using Enrich : C Compares the "username" field for all documents in the "B" index with the "username" field in…

---

## [Elasticsearch - authorization / certificates and change of IP \[?\]](https://discuss.elastic.co/t/elasticsearch-authorization-certificates-and-change-of-ip/214709)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 1\
**Last updated:** [January 12, 2020, 6:29pm UTC](https://discuss.elastic.co/t/elasticsearch-authorization-certificates-and-change-of-ip/214709 "2020-01-12T18:29:10Z")

</div>

If I have generated the certificates and set the specified addressing on the Elasticsearch nodes after the change of IP addressing will the certificates and authorization work without problems? Certificates were generat…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1046)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1048)
