# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1057 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1058 --- ## [Elastic reference documentation in PDF / Kindle format](https://discuss.elastic.co/t/elastic-reference-documentation-in-pdf-kindle-format/213301)
**Author:** [@kashif12](https://discuss.elastic.co/u/kashif12)\ **Replies:** 0\ **Last updated:** [December 29, 2019, 11:08pm UTC](https://discuss.elastic.co/t/elastic-reference-documentation-in-pdf-kindle-format/213301 "2019-12-29T23:08:45Z")
Hello there I want to read elastic reference documentation\[1\] in Kindle but there is no easy available way to convert the available documentation into kindle/pdf format. I tried creating docs using github \[2\] but i ge… --- ## [Datetime hour search query](https://discuss.elastic.co/t/datetime-hour-search-query/213298)
**Author:** [@Kopiko](https://discuss.elastic.co/u/Kopiko)\ **Replies:** 0\ **Last updated:** [December 29, 2019, 10:08pm UTC](https://discuss.elastic.co/t/datetime-hour-search-query/213298 "2019-12-29T22:08:53Z")
Hello, I'm just starting to use Elastic and having trouble parsing datetime data. In Python, I'm trying to create a query that puts out all documents for which the hour value in the field 'datetime' equals 11. Been tryi… --- ## [How to use OR in Dev Tool Query](https://discuss.elastic.co/t/how-to-use-or-in-dev-tool-query/213290)
**Author:** [@Fosiul\_Alam](https://discuss.elastic.co/u/Fosiul_Alam)\ **Replies:** 0\ **Last updated:** [December 29, 2019, 5:31pm UTC](https://discuss.elastic.co/t/how-to-use-or-in-dev-tool-query/213290 "2019-12-29T17:31:52Z")
Hi Bellow Search provides me Log where it has both "value": "HB" and "value": "1234567" What I am looking for this if this match ("value": "HB" OR "value": "TR" ) AND "value": "1234567" but not understand ho… --- ## [Metric aggregation on terms aggregation result set](https://discuss.elastic.co/t/metric-aggregation-on-terms-aggregation-result-set/212414)
**Author:** [@alexfritz](https://discuss.elastic.co/u/alexfritz)\ **Replies:** 4\ **Last updated:** [December 29, 2019, 4:22pm UTC](https://discuss.elastic.co/t/metric-aggregation-on-terms-aggregation-result-set/212414 "2019-12-29T16:22:37Z")
Hello maybe I don't understand Elasticsearch queries, but I have a problem. I have time series documents to catch events (@timestamp = event timestamp). These events contain fields like: startDate, endDate and duration… --- ## [Active directory frequently](https://discuss.elastic.co/t/active-directory-frequently/211255)
**Author:** [@Gidi\_Kalef](https://discuss.elastic.co/u/Gidi_Kalef)\ **Replies:** 2\ **Last updated:** [December 29, 2019, 3:07pm UTC](https://discuss.elastic.co/t/active-directory-frequently/211255 "2019-12-29T15:07:06Z")
Hi Guys, i have user : test1 i have assigned user to an active directory group, for example: elastic\_admin which have superuser permissions. then, i have removed the user from elastic\_admin and assign him to elastic\_r… --- ## [Configure permissions to AD groups in Elasticsearch](https://discuss.elastic.co/t/configure-permissions-to-ad-groups-in-elasticsearch/212528)
**Author:** [@YehonatanG](https://discuss.elastic.co/u/YehonatanG)\ **Replies:** 2\ **Last updated:** [December 29, 2019, 10:11am UTC](https://discuss.elastic.co/t/configure-permissions-to-ad-groups-in-elasticsearch/212528 "2019-12-29T10:11:15Z")
Hey, I would like to ask about a few things that I couldn't find in the documentation (or maybe I missed it?). Some background on my system, I'm currently running Elasticsearch Cluster on Docker containers with trial mo… --- ## [Multiple aggregations in NEST C#](https://discuss.elastic.co/t/multiple-aggregations-in-nest-c/213277)
**Author:** [@sam.cook](https://discuss.elastic.co/u/sam.cook)\ **Replies:** 0\ **Last updated:** [December 29, 2019, 9:10am UTC](https://discuss.elastic.co/t/multiple-aggregations-in-nest-c/213277 "2019-12-29T09:10:07Z")
I am trying to translate an ElasticSearch query in NEST C# code. The query I need to searches for documents with certain values on field1 and field2 and that has the insertedon DateTime value between a selected range. A… --- ## [How do you build query suggester like Google/Amazon? Suggest by token instead of suggesting a result](https://discuss.elastic.co/t/how-do-you-build-query-suggester-like-google-amazon-suggest-by-token-instead-of-suggesting-a-result/213268)
**Author:** [@Brac\_Macke](https://discuss.elastic.co/u/Brac_Macke)\ **Replies:** 0\ **Last updated:** [December 28, 2019, 9:40pm UTC](https://discuss.elastic.co/t/how-do-you-build-query-suggester-like-google-amazon-suggest-by-token-instead-of-suggesting-a-result/213268 "2019-12-28T21:40:16Z")
This feature is available on Elastic App Search, but I want to implement this kind of suggestion using Elasticsearch. I've been messing around this for 3 days straight with no luck. My closest approach to this is to u… --- ## [Can i use Elasticsearch on an app that is developed using flutter and dart?](https://discuss.elastic.co/t/can-i-use-elasticsearch-on-an-app-that-is-developed-using-flutter-and-dart/213259)
**Author:** [@mustafakamal](https://discuss.elastic.co/u/mustafakamal)\ **Replies:** 0\ **Last updated:** [December 28, 2019, 4:16pm UTC](https://discuss.elastic.co/t/can-i-use-elasticsearch-on-an-app-that-is-developed-using-flutter-and-dart/213259 "2019-12-28T16:16:55Z")
hi, i have developed an e-commerce app using flutter and dart. I want to integrate elasticsearch on this app to make my search more efficient. It seems that there are no documentation on dart and flutter on elasticsearch… --- ## [Stats Api timeout error when I delete some indices in kibana](https://discuss.elastic.co/t/stats-api-timeout-error-when-i-delete-some-indices-in-kibana/213250)
**Author:** [@xyx](https://discuss.elastic.co/u/xyx)\ **Replies:** 4\ **Last updated:** [December 28, 2019, 9:22am UTC](https://discuss.elastic.co/t/stats-api-timeout-error-when-i-delete-some-indices-in-kibana/213250 "2019-12-28T09:22:47Z")
When I delete a lot of indices in kibana，about 20 Indies.And I got a lot stats api timeout error. And,I never use the api\[Cluster Stats，Nodes Stats，Index Stats\].But I have enabled stack monitoring in kibana. I create i… --- ## [Elasticsearch refuses to start](https://discuss.elastic.co/t/elasticsearch-refuses-to-start/213108)
**Author:** [@emilio](https://discuss.elastic.co/u/emilio)\ **Replies:** 3\ **Last updated:** [December 27, 2019, 2:45pm UTC](https://discuss.elastic.co/t/elasticsearch-refuses-to-start/213108 "2019-12-27T14:45:18Z")
ES refuses to start. What is wrong with this config? path.data: /d02/elastic/data # # Path to log files: # path.logs: /d02/elastic/logs # path.work: /d02/elastic/data/work # path.con… --- ## [Elasticsearch ignores type of apache log](https://discuss.elastic.co/t/elasticsearch-ignores-type-of-apache-log/213229)
**Author:** [@akelsey](https://discuss.elastic.co/u/akelsey)\ **Replies:** 1\ **Last updated:** [December 28, 2019, 6:35am UTC](https://discuss.elastic.co/t/elasticsearch-ignores-type-of-apache-log/213229 "2019-12-28T06:35:17Z")
Elasticsearch ignores COMBINEDAPACHELOG and put bytes as text. Convert via mutation is not amending anything. Made mapping apache-\* and logstash-\* for bytes as "integer" (tried "long") - always put data as text. I hav… --- ## [Elastic search with laravel](https://discuss.elastic.co/t/elastic-search-with-laravel/213248)
**Author:** [@revathimqbrainx](https://discuss.elastic.co/u/revathimqbrainx)\ **Replies:** 0\ **Last updated:** [December 28, 2019, 6:25am UTC](https://discuss.elastic.co/t/elastic-search-with-laravel/213248 "2019-12-28T06:25:38Z")
{"error":{"root\_cause":\[{"type":"index\_not\_found\_exception","reason":"no such index \[articles\]","resource.type":"index\_or\_alias","resource.id":"articles","index\_uuid":"na","index":"articles"}\],"type":"index\_not\_found\_exc… --- ## [How to find all fields that don't have values?](https://discuss.elastic.co/t/how-to-find-all-fields-that-dont-have-values/213232)
**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\ **Replies:** 1\ **Last updated:** [December 28, 2019, 3:17am UTC](https://discuss.elastic.co/t/how-to-find-all-fields-that-dont-have-values/213232 "2019-12-28T03:17:41Z")
I have an index that has around a thousand fields and several million documents. Many of the fields are empty. How can I query the index to find out which fields do not have values? --- ## [ES cluster always auto-balancing](https://discuss.elastic.co/t/es-cluster-always-auto-balancing/210947)
**Author:** [@dwilches](https://discuss.elastic.co/u/dwilches)\ **Replies:** 1\ **Last updated:** [December 28, 2019, 1:20am UTC](https://discuss.elastic.co/t/es-cluster-always-auto-balancing/210947 "2019-12-28T01:20:48Z")
We turned auto balancing on in the cluster, and we started seeing that there were always 9 shards moving around (9 is the maximum number of shards that we configured). Our nodes were already quite balanced (we eye-balle… --- ## [/\_cluster/reroute doesn't respect node\_concurrent\_recoveries](https://discuss.elastic.co/t/cluster-reroute-doesnt-respect-node-concurrent-recoveries/213238)
**Author:** [@dwilches](https://discuss.elastic.co/u/dwilches)\ **Replies:** 0\ **Last updated:** [December 28, 2019, 1:04am UTC](https://discuss.elastic.co/t/cluster-reroute-doesnt-respect-node-concurrent-recoveries/213238 "2019-12-28T01:04:26Z")
I have 4 nodes in my cluster: A,B,C,D,E,F and G. I'm issuing a series of /\_cluster/reroute commands to move 2 shards out of A,B,C,D,E,F into G. As my cluster's config says: cluster.routing.allocation.node\_concurrent\_i… --- ## [Palo Alto Ingest Pipeline](https://discuss.elastic.co/t/palo-alto-ingest-pipeline/213231)
**Author:** [@crux](https://discuss.elastic.co/u/crux)\ **Replies:** 0\ **Last updated:** [December 27, 2019, 9:40pm UTC](https://discuss.elastic.co/t/palo-alto-ingest-pipeline/213231 "2019-12-27T21:40:54Z")
I'm hoping to get some clarification on how the Palo Alto ingest pipelines work. There don't seem to be any processors shipped by default that actually parse information (i.e. grok). Even when I throw the sample data f… --- ## [Unable to format date and time correctly](https://discuss.elastic.co/t/unable-to-format-date-and-time-correctly/213217)
**Author:** [@sidhusaab](https://discuss.elastic.co/u/sidhusaab)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 9:08pm UTC](https://discuss.elastic.co/t/unable-to-format-date-and-time-correctly/213217 "2019-12-27T21:08:38Z")
I have been reading on various forums here, on stackoverflow and java pages about date time formatting. I have syslog time stamp which is "Dec 10 01:23:44" format. I simply wanted to add year to the timestamp so I added %… --- ## [Deleting Indexes Using Alias NEST API](https://discuss.elastic.co/t/deleting-indexes-using-alias-nest-api/213222)
**Author:** [@han1](https://discuss.elastic.co/u/han1)\ **Replies:** 0\ **Last updated:** [December 27, 2019, 6:55pm UTC](https://discuss.elastic.co/t/deleting-indexes-using-alias-nest-api/213222 "2019-12-27T18:55:38Z")
Is there any way to delete indexes using the Alias wildcard as opposed to its actual name using the NEST API? Many thanks --- ## [Index Alias Using NEST](https://discuss.elastic.co/t/index-alias-using-nest/213220)
**Author:** [@han1](https://discuss.elastic.co/u/han1)\ **Replies:** 0\ **Last updated:** [December 27, 2019, 6:27pm UTC](https://discuss.elastic.co/t/index-alias-using-nest/213220 "2019-12-27T18:27:10Z")
As usual No doc assistance when using NEST. We came across this OLD code on Stackoverflow: \> createIndexResponse = client.CreateIndex(indices\[1\]); \> \> // wait for index-v2 to be operable \> var clusterHealth… --- ## [Sorting a nested collection AFTER sort (for display / result purposes only)](https://discuss.elastic.co/t/sorting-a-nested-collection-after-sort-for-display-result-purposes-only/213219)
**Author:** [@alexjb](https://discuss.elastic.co/u/alexjb)\ **Replies:** 0\ **Last updated:** [December 27, 2019, 6:16pm UTC](https://discuss.elastic.co/t/sorting-a-nested-collection-after-sort-for-display-result-purposes-only/213219 "2019-12-27T18:16:13Z")
I'm looking to perform some 'post query' processing on my result set. I have documents like this: { "name": "John Smith", "levels": \[ { "name": "Gold", "order": 4.0 }, … --- ## [Python API for Elastic Search - Getting 10000 in response every time](https://discuss.elastic.co/t/python-api-for-elastic-search-getting-10000-in-response-every-time/213209)
**Author:** [@jayanth5](https://discuss.elastic.co/u/jayanth5)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 5:12pm UTC](https://discuss.elastic.co/t/python-api-for-elastic-search-getting-10000-in-response-every-time/213209 "2019-12-27T17:12:16Z")
client = Elasticsearch(\[host1, host2\], http\_auth=(user, password), scheme="http", port=port) response = client.search(index="complats\*", body={"from": 0, "size": 10000, "query": { "bool": { "m… --- ## [Network.host on elk 7.5](https://discuss.elastic.co/t/network-host-on-elk-7-5/213107)
**Author:** [@es4dp](https://discuss.elastic.co/u/es4dp)\ **Replies:** 2\ **Last updated:** [December 27, 2019, 3:56pm UTC](https://discuss.elastic.co/t/network-host-on-elk-7-5/213107 "2019-12-27T15:56:10Z")
Hi All, My first post to ELK! I am trying 7.5 with following config: Host| Purpose | Status elk01| elasticsearch | running with network.host with default kibana01 | kibana | running but complains... log \[19:26:1… --- ## [Delete Indexes based on Month Name](https://discuss.elastic.co/t/delete-indexes-based-on-month-name/213199)
**Author:** [@Gaurav\_Narang](https://discuss.elastic.co/u/Gaurav_Narang)\ **Replies:** 0\ **Last updated:** [December 27, 2019, 2:42pm UTC](https://discuss.elastic.co/t/delete-indexes-based-on-month-name/213199 "2019-12-27T14:42:55Z")
I have month and year based indexes in the following format inventory\_log\_november\_2019 Index name format -\>prefix + month + year How to use curator to delete indices which are older than 'X' months? If we are using s… --- ## [Cluster.name:: command not found](https://discuss.elastic.co/t/cluster-name-command-not-found/213196)
**Author:** [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)\ **Replies:** 0\ **Last updated:** [December 27, 2019, 2:01pm UTC](https://discuss.elastic.co/t/cluster-name-command-not-found/213196 "2019-12-27T14:01:45Z")
Hello guys, I tried start elasticsearch version 7.5 in a RedHat 7, but I have the following error: Dec 27 13:48:39 ip-10-142-122-229.cl.latam elasticsearch\[12964\]: /etc/sysconfig/elasticsearch: line 17: cluster.name::… --- ## [Data query - previous 7th day](https://discuss.elastic.co/t/data-query-previous-7th-day/213142)
**Author:** [@akhil](https://discuss.elastic.co/u/akhil)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 1:40pm UTC](https://discuss.elastic.co/t/data-query-previous-7th-day/213142 "2019-12-27T13:40:12Z")
Hi Team, We are trying to get the count of data on previous 7th day. Below is the query that we are using, however, the problem is that we are not getting the correct count. The same query we have used in elasticsearc… --- ## [Clarification required on shard](https://discuss.elastic.co/t/clarification-required-on-shard/213144)
**Author:** [@vijay\_kaali](https://discuss.elastic.co/u/vijay_kaali)\ **Replies:** 3\ **Last updated:** [December 27, 2019, 1:37pm UTC](https://discuss.elastic.co/t/clarification-required-on-shard/213144 "2019-12-27T13:37:02Z")
Hi I have basic doubt on Shard concept. my understanding // Shard is physical data segment wherein indexes are spread across . and multiple shard is for performance // Question is , if Shard is physical segment con… --- ## [Connection to ES on a remote single server too slow](https://discuss.elastic.co/t/connection-to-es-on-a-remote-single-server-too-slow/213189)
**Author:** [@weiwei107](https://discuss.elastic.co/u/weiwei107)\ **Replies:** 4\ **Last updated:** [December 27, 2019, 1:11pm UTC](https://discuss.elastic.co/t/connection-to-es-on-a-remote-single-server-too-slow/213189 "2019-12-27T13:11:02Z")
The connection with ES is Ok locally. Then we put the ES on a single server of Aliyun. The search speed becomes very slow. Everything else is the same except the difference between local and remote. The ES version is 5.… --- ## [I got error when use "elasticsearch-rest-high-level-client 7.5.1"](https://discuss.elastic.co/t/i-got-error-when-use-elasticsearch-rest-high-level-client-7-5-1/213171)
**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 12:03pm UTC](https://discuss.elastic.co/t/i-got-error-when-use-elasticsearch-rest-high-level-client-7-5-1/213171 "2019-12-27T12:03:55Z")
If i use elasticsearch-rest-high-level-client version 7.5.1, i got the following error: NoClassDefFoundError: org/elasticsearch/client/Cancellable However, if i use lower version to 7.4.x, it works fine. I followed … --- ## [FIRST() & LAST() SQL Aggregate functions returns parsing\_exception](https://discuss.elastic.co/t/first-last-sql-aggregate-functions-returns-parsing-exception/213071)
**Author:** [@macarop](https://discuss.elastic.co/u/macarop)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 11:38am UTC](https://discuss.elastic.co/t/first-last-sql-aggregate-functions-returns-parsing-exception/213071 "2019-12-27T11:38:44Z")
Hello I try to get the lastest value of a parameter using the LAST aggregation function { "query": "SELECT LAST(system.uptime.duration.ms, \\"@timestamp\\") from \\"metricbea\*\\" where host.name='titi' " } This ret… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1056) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1058)