# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1065

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1066

---

## [Performance problem within add a new object to a nested array](https://discuss.elastic.co/t/performance-problem-within-add-a-new-object-to-a-nested-array/212195)

<div class="topic-metadata">

**Author:** [@Sergey\_Oprya](https://discuss.elastic.co/u/Sergey_Oprya)\
**Replies:** 3\
**Last updated:** [December 17, 2019, 6:28pm UTC](https://discuss.elastic.co/t/performance-problem-within-add-a-new-object-to-a-nested-array/212195 "2019-12-17T18:28:55Z")

</div>

Hi Everyone, I have a performance issue when I try to add object to a nested array field. If this array has ~ 0-500 objects performance is ok but when I add more and more the performance is going down quite fast. Eventu…

---

## [Case insensitive search by default](https://discuss.elastic.co/t/case-insensitive-search-by-default/212211)

<div class="topic-metadata">

**Author:** [@kevin.neumann](https://discuss.elastic.co/u/kevin.neumann)\
**Replies:** 0\
**Last updated:** [December 17, 2019, 6:11pm UTC](https://discuss.elastic.co/t/case-insensitive-search-by-default/212211 "2019-12-17T18:11:03Z")

</div>

So it's my understanding that we can just use a custom normalizer to provide lowercase search for a given keyword. Is there a way to make this the default for all new keywords that are added, including those automaticall…

---

## [Scroll cost (how to tune the \`search.max\_open\_scroll\_context\` limit)](https://discuss.elastic.co/t/scroll-cost-how-to-tune-the-search-max-open-scroll-context-limit/212210)

<div class="topic-metadata">

**Author:** [@liev](https://discuss.elastic.co/u/liev)\
**Replies:** 0\
**Last updated:** [December 17, 2019, 6:01pm UTC](https://discuss.elastic.co/t/scroll-cost-how-to-tune-the-search-max-open-scroll-context-limit/212210 "2019-12-17T18:01:38Z")

</div>

Hi, While preparing a migration to ES v7.5 I've seen that the limit of max\_open\_scroll\_context defaults to 500. What metrics should I monitor before considering raising this limit? How can I monitor the "cost" of my scr…

---

## [MongoDB full text search vs Elasticsearch](https://discuss.elastic.co/t/mongodb-full-text-search-vs-elasticsearch/212143)

<div class="topic-metadata">

**Author:** [@wozza.lowe](https://discuss.elastic.co/u/wozza.lowe)\
**Replies:** 3\
**Last updated:** [December 17, 2019, 5:28pm UTC](https://discuss.elastic.co/t/mongodb-full-text-search-vs-elasticsearch/212143 "2019-12-17T17:28:44Z")

</div>

In light of the the advancing full text search feature in MongoDB, from a strategic perspective Elasticsearch is starting to slip away from our technology set. I was just wondering if there is still a strong argument fo…

---

## [I\_o\_exception Invalid argument error when taking snapshot](https://discuss.elastic.co/t/i-o-exception-invalid-argument-error-when-taking-snapshot/212144)

<div class="topic-metadata">

**Author:** [@ion\_popa](https://discuss.elastic.co/u/ion_popa)\
**Replies:** 5\
**Last updated:** [December 17, 2019, 5:07pm UTC](https://discuss.elastic.co/t/i-o-exception-invalid-argument-error-when-taking-snapshot/212144 "2019-12-17T17:07:10Z")

</div>

Hello, I'm getting the following error when trying to take a snapshot of an Elasticsearch cluster. { "error" : { "root\_cause" : \[ { "type" : "snapshot\_creation\_exception", "reason" : "\[backup:snapshot\_2/abcjahdki…

---

## [MultiSearch with 2 different indexes](https://discuss.elastic.co/t/multisearch-with-2-different-indexes/212188)

<div class="topic-metadata">

**Author:** [@Antonio\_G](https://discuss.elastic.co/u/Antonio_G)\
**Replies:** 0\
**Last updated:** [December 17, 2019, 3:51pm UTC](https://discuss.elastic.co/t/multisearch-with-2-different-indexes/212188 "2019-12-17T15:51:02Z")

</div>

Hi, I'm trying to implement a multi search which query two different indexes. As my ES version is 5.3, I'm following this documentation: I've done a few multi-search before and I've gotten no problem, but when I want…

---

## [Forcemerge concerns](https://discuss.elastic.co/t/forcemerge-concerns/211838)

<div class="topic-metadata">

**Author:** [@FabioRodrigues](https://discuss.elastic.co/u/FabioRodrigues)\
**Replies:** 8\
**Last updated:** [December 17, 2019, 4:56pm UTC](https://discuss.elastic.co/t/forcemerge-concerns/211838 "2019-12-17T16:56:22Z")

</div>

Hi! I need to reduce de size of a database by shrinking one field from a document. The problem is: the size of this database is huge. Also, I need to not reduce the performance of it significantly. I'm wondering if I ca…

---

## [Index alias functionality](https://discuss.elastic.co/t/index-alias-functionality/211524)

<div class="topic-metadata">

**Author:** [@John\_Guzman](https://discuss.elastic.co/u/John_Guzman)\
**Replies:** 2\
**Last updated:** [December 17, 2019, 4:43pm UTC](https://discuss.elastic.co/t/index-alias-functionality/211524 "2019-12-17T16:43:02Z")

</div>

Hello ES Community! I want to know what happens when i make a search on an Index Alias ​​with a time filter. Will it bring me back only the indexes that contains that data to search on them or it will bring me back all …

---

## [7.4.2 SearchHits not supporting elasticsearch-sql 6.3.0.0](https://discuss.elastic.co/t/7-4-2-searchhits-not-supporting-elasticsearch-sql-6-3-0-0/212164)

<div class="topic-metadata">

**Author:** [@rajesh\_elasticsearch](https://discuss.elastic.co/u/rajesh_elasticsearch)\
**Replies:** 1\
**Last updated:** [December 17, 2019, 4:11pm UTC](https://discuss.elastic.co/t/7-4-2-searchhits-not-supporting-elasticsearch-sql-6-3-0-0/212164 "2019-12-17T16:11:47Z")

</div>

Hi, I am using elasticsearch 7.4.2 and I am using transport client as well as REST api. In my use case I need to work with joining the index, so I am using elasticsearch-sql-6.3.0.0.jar. And I am using org.elasticsear…

---

## [How to aggregate by doc\_count?](https://discuss.elastic.co/t/how-to-aggregate-by-doc-count/212106)

<div class="topic-metadata">

**Author:** [@Sergio\_Blanco](https://discuss.elastic.co/u/Sergio_Blanco)\
**Replies:** 8\
**Last updated:** [December 17, 2019, 4:15pm UTC](https://discuss.elastic.co/t/how-to-aggregate-by-doc-count/212106 "2019-12-17T16:15:22Z")

</div>

I want to aggregate the result of other aggregation using Elasticsearch. I have created the first aggregation I need: "size":0, "query": { "bool": { "filter": { "match" : {"type":…

---

## [Pipeline convert all sub-fields](https://discuss.elastic.co/t/pipeline-convert-all-sub-fields/212155)

<div class="topic-metadata">

**Author:** [@ridago](https://discuss.elastic.co/u/ridago)\
**Replies:** 1\
**Last updated:** [December 17, 2019, 3:26pm UTC](https://discuss.elastic.co/t/pipeline-convert-all-sub-fields/212155 "2019-12-17T15:26:49Z")

</div>

Is there a way to setup a pipeline to run auto convert on all sub-fields of a container? Basically I would like to do something like (had wildcards been supported): "processors": \[ { "convert": { "field": "parent.\*…

---

## [Elasticsearch Retrieve token\_count standard value from search](https://discuss.elastic.co/t/elasticsearch-retrieve-token-count-standard-value-from-search/211161)

<div class="topic-metadata">

**Author:** [@Diogo\_Correia](https://discuss.elastic.co/u/Diogo_Correia)\
**Replies:** 2\
**Last updated:** [December 17, 2019, 2:51pm UTC](https://discuss.elastic.co/t/elasticsearch-retrieve-token-count-standard-value-from-search/211161 "2019-12-17T14:51:45Z")

</div>

Hi! I am trying to add a new field into the ElasticSearch index to analyze and store the number of words a text has. { "settings": { "analysis": { "analyzer": { "character\_analyzer": { …

---

## [Converting SQL query to Lucence query grafana](https://discuss.elastic.co/t/converting-sql-query-to-lucence-query-grafana/211784)

<div class="topic-metadata">

**Author:** [@mindbee](https://discuss.elastic.co/u/mindbee)\
**Replies:** 1\
**Last updated:** [December 17, 2019, 2:20pm UTC](https://discuss.elastic.co/t/converting-sql-query-to-lucence-query-grafana/211784 "2019-12-17T14:20:29Z")

</div>

Hi, I can get the data required using Kibana devtool using sql query. POST \_sql?format=txt { "query": "SELECT transactionID.keyword, max(responseTime) FROM "test-logs" GROUP BY transactionID.keyword HAVING count(tr…

---

## [SQL Like join on elasticsearch - Help](https://discuss.elastic.co/t/sql-like-join-on-elasticsearch-help/211367)

<div class="topic-metadata">

**Author:** [@mindbee](https://discuss.elastic.co/u/mindbee)\
**Replies:** 6\
**Last updated:** [December 17, 2019, 2:13pm UTC](https://discuss.elastic.co/t/sql-like-join-on-elasticsearch-help/211367 "2019-12-17T14:13:54Z")

</div>

Hi, I need help on the elastic search query where it can join on the transaction id on same index. I know the joins are available/allowed on elastic search. Below is the example of my elasticsearch index. (Test index) i…

---

## [Clustering data consistency question](https://discuss.elastic.co/t/clustering-data-consistency-question/212165)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 2\
**Last updated:** [December 17, 2019, 1:41pm UTC](https://discuss.elastic.co/t/clustering-data-consistency-question/212165 "2019-12-17T13:41:01Z")

</div>

Hi, I have a cluster of 3 nodes where each node has all roles (master, data, ingest). I use logstash which pushes the data to elasticsearch. When is the ack sent to logstash? After the data has been replicated or just…

---

## [Search for the "?" character in a field](https://discuss.elastic.co/t/search-for-the-character-in-a-field/212141)

<div class="topic-metadata">

**Author:** [@Vulco\_Viljoen](https://discuss.elastic.co/u/Vulco_Viljoen)\
**Replies:** 2\
**Last updated:** [December 17, 2019, 1:10pm UTC](https://discuss.elastic.co/t/search-for-the-character-in-a-field/212141 "2019-12-17T13:10:27Z")

</div>

Hello there, I have been trying to do a search for patterns such as "id.php?u=https". In this case, I want to find "?u". The emphasis on finding the actual question mark character. I have tried regex, term, and query\_s…

---

## [Iterate over payload in Index action](https://discuss.elastic.co/t/iterate-over-payload-in-index-action/211775)

<div class="topic-metadata">

**Author:** [@Rahul12](https://discuss.elastic.co/u/Rahul12)\
**Replies:** 3\
**Last updated:** [December 17, 2019, 12:14pm UTC](https://discuss.elastic.co/t/iterate-over-payload-in-index-action/211775 "2019-12-17T12:14:37Z")

</div>

Hi, I am trying to iterate over payload result and index multiple rows using watcher index action. Using my watcher I trying to get the list of host for which CPU crossing the threshold limit. I want to index multiple …

---

## [Watcher alerts email issue](https://discuss.elastic.co/t/watcher-alerts-email-issue/212008)

<div class="topic-metadata">

**Author:** [@vishnuvardhan](https://discuss.elastic.co/u/vishnuvardhan)\
**Replies:** 3\
**Last updated:** [December 17, 2019, 12:11pm UTC](https://discuss.elastic.co/t/watcher-alerts-email-issue/212008 "2019-12-17T12:11:54Z")

</div>

Hi, actually i created watcher alerts in my ml jobs anomaly score reaches above 70 but i am not getting email notification showing the socket timed out exception how to resolve this issue ? elasticsearch .yml watche…

---

## [Approach for determining the structure of the search output of an aggregation from the query](https://discuss.elastic.co/t/approach-for-determining-the-structure-of-the-search-output-of-an-aggregation-from-the-query/212159)

<div class="topic-metadata">

**Author:** [@sentient-soellingera](https://discuss.elastic.co/u/sentient-soellingera)\
**Replies:** 0\
**Last updated:** [December 17, 2019, 12:07pm UTC](https://discuss.elastic.co/t/approach-for-determining-the-structure-of-the-search-output-of-an-aggregation-from-the-query/212159 "2019-12-17T12:07:52Z")

</div>

Hi, I am pretty new to Elasticsearch, so maybe this is a stupid question. First and foremost, I am looking to better understand the link between my aggregation query structure and the return structure. Is there a blog …

---

## [Help in Query (possible sub-query ?)](https://discuss.elastic.co/t/help-in-query-possible-sub-query/211388)

<div class="topic-metadata">

**Author:** [@saz](https://discuss.elastic.co/u/saz)\
**Replies:** 3\
**Last updated:** [December 17, 2019, 11:57am UTC](https://discuss.elastic.co/t/help-in-query-possible-sub-query/211388 "2019-12-17T11:57:32Z")

</div>

Hi , I have some documents like this and I have no clue on querying the documents without using a subquery. { request-id : 1234 , status : error } { request-id : 1234 , error-info : system } { request-id : 12345 , s…

---

## [Elasticsearch exited with code 0](https://discuss.elastic.co/t/elasticsearch-exited-with-code-0/212131)

<div class="topic-metadata">

**Author:** [@jporter](https://discuss.elastic.co/u/jporter)\
**Replies:** 1\
**Last updated:** [December 17, 2019, 11:14am UTC](https://discuss.elastic.co/t/elasticsearch-exited-with-code-0/212131 "2019-12-17T11:14:02Z")

</div>

I came in yesterday morning, and my elasticsearch would no longer start. I have checked my docker preferrences on my mac running OS X version 10.14.6 memory allocation is set to 4GiB (and I fiddled with this just to be s…

---

## [ES 7.4.1 - Authentication \[Rest API\]](https://discuss.elastic.co/t/es-7-4-1-authentication-rest-api/211969)

<div class="topic-metadata">

**Author:** [@AsfK](https://discuss.elastic.co/u/AsfK)\
**Replies:** 2\
**Last updated:** [December 17, 2019, 5:56am UTC](https://discuss.elastic.co/t/es-7-4-1-authentication-rest-api/211969 "2019-12-17T05:56:34Z")

</div>

Truly, I already asked the question in stackoverflow but didn't receive an answer yet, so I also create a new topic here.. I’m a newbie in ES and I have a task in my new job to upgrade from 6.4.2 to 7.4.1 – From TCP cli…

---

## [Elsticsearch yml](https://discuss.elastic.co/t/elsticsearch-yml/212064)

<div class="topic-metadata">

**Author:** [@pmatreides](https://discuss.elastic.co/u/pmatreides)\
**Replies:** 2\
**Last updated:** [December 17, 2019, 6:14am UTC](https://discuss.elastic.co/t/elsticsearch-yml/212064 "2019-12-17T06:14:04Z")

</div>

Can someone PLEASE point me to an example of how to create an elasticsearch.yml file that uses ipv6 addresses. I am unable to get the 3 nodes of my elasticsearch cluster to communicate. The instances of elasticsearch a…

---

## [Issues in upgrading to 7.5.0](https://discuss.elastic.co/t/issues-in-upgrading-to-7-5-0/212092)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 0\
**Last updated:** [December 17, 2019, 5:01am UTC](https://discuss.elastic.co/t/issues-in-upgrading-to-7-5-0/212092 "2019-12-17T05:01:23Z")

</div>

I tried to upgrade from 6.5.2 -\> 6.8 -\> 7.5 The upgrade assistant in 6.8 said indices are good to go for upgrade. But after upgrade to 7.5, when I start kibana, i get a Fatal error: Error: \[mapper\_parsing\_exception\] …

---

## [\[o.e.c.c.ClusterFormationFailureHelper\] \[Data-no de2\] master not discovered yet: have discovered](https://discuss.elastic.co/t/o-e-c-c-clusterformationfailurehelper-data-no-de2-master-not-discovered-yet-have-discovered/211557)

<div class="topic-metadata">

**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\
**Replies:** 3\
**Last updated:** [December 17, 2019, 2:56am UTC](https://discuss.elastic.co/t/o-e-c-c-clusterformationfailurehelper-data-no-de2-master-not-discovered-yet-have-discovered/211557 "2019-12-17T02:56:15Z")

</div>

Hello, Can anyone help me in this? I am trying to form a ES cluster. My configuration settings works with one master and data node. Now i am trying to add new data node in same cluster. But it is showing me above erro…

---

## [Where are the REST docs?](https://discuss.elastic.co/t/where-are-the-rest-docs/212066)

<div class="topic-metadata">

**Author:** [@Slater\_Victoroff1](https://discuss.elastic.co/u/Slater_Victoroff1)\
**Replies:** 2\
**Last updated:** [December 17, 2019, 2:47am UTC](https://discuss.elastic.co/t/where-are-the-rest-docs/212066 "2019-12-17T02:47:21Z")

</div>

Hey all! I'm new to these forums, but used ElasticSearch several years ago. I'm trying to so something pretty basic. Just have an ndjson file with a combination of text and categoric fields. I want to index these docum…

---

## [Not find java in JAVA\_HOME or bundled for elasticsearch](https://discuss.elastic.co/t/not-find-java-in-java-home-or-bundled-for-elasticsearch/208779)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 3\
**Last updated:** [December 17, 2019, 2:00am UTC](https://discuss.elastic.co/t/not-find-java-in-java-home-or-bundled-for-elasticsearch/208779 "2019-12-17T02:00:55Z")

</div>

D:\\ESQELK\\elasticsearch-7.2.0-windows-x86\_64\\elasticsearch-7.2.0\\bin\>elasticsearch "could not find java in JAVA\_HOME or bundled at D:\\ESQELK\\elasticsearch-7.2.0-windows-x86\_64\\elasticsearch-7.2.0\\jdk" and JAVA\_HOME is s…

---

## [This version of the JDBC driver is only compatible with Elasticsearch version vUnknown \[Unknown\],](https://discuss.elastic.co/t/this-version-of-the-jdbc-driver-is-only-compatible-with-elasticsearch-version-vunknown-unknown/211894)

<div class="topic-metadata">

**Author:** [@zhu1289303556](https://discuss.elastic.co/u/zhu1289303556)\
**Replies:** 7\
**Last updated:** [December 17, 2019, 1:43am UTC](https://discuss.elastic.co/t/this-version-of-the-jdbc-driver-is-only-compatible-with-elasticsearch-version-vunknown-unknown/211894 "2019-12-17T01:43:01Z")

</div>

hello everyone，jdbc driver get version error use jdbc 6.7.1 org.elasticsearch.plugin x-pack-sql-jdbc 6.7.1 mvn clean package Maven runs after packaging java.sql.SQLException: This version of the JDBC driver is only …

---

## [Boost on child is not changing score in v7.2](https://discuss.elastic.co/t/boost-on-child-is-not-changing-score-in-v7-2/208255)

<div class="topic-metadata">

**Author:** [@askids](https://discuss.elastic.co/u/askids)\
**Replies:** 2\
**Last updated:** [December 17, 2019, 1:08am UTC](https://discuss.elastic.co/t/boost-on-child-is-not-changing-score-in-v7-2/208255 "2019-12-17T01:08:08Z")

</div>

hi, We are in the process of upgrading from v5.5.1 to v7.2.0, running on Windows 2012 (running JRE 1.8.0\_231). So we are trying out the replacement of parent/child mapping type with the new join field. In existing app, …

---

## [OpenID Connect not parsing multi-value (array/list) user attributes](https://discuss.elastic.co/t/openid-connect-not-parsing-multi-value-array-list-user-attributes/212025)

<div class="topic-metadata">

**Author:** [@Chris\_Samo](https://discuss.elastic.co/u/Chris_Samo)\
**Replies:** 2\
**Last updated:** [December 16, 2019, 9:14pm UTC](https://discuss.elastic.co/t/openid-connect-not-parsing-multi-value-array-list-user-attributes/212025 "2019-12-16T21:14:30Z")

</div>

We've setup Elasticsearch (7.5.0) to provide authentication and authorisation using OpenID Connect (a Keycloak setup in this case). Within the OIDC provider, we've mapped a custom User Attribute to be present as a field …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1064)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1066)
