# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1080 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1081 --- ## [Could not running Yaml IT in my own repository plugin project](https://discuss.elastic.co/t/could-not-running-yaml-it-in-my-own-repository-plugin-project/209782)
**Author:** [@Ethan-Zhang](https://discuss.elastic.co/u/Ethan-Zhang)\ **Replies:** 9\ **Last updated:** [November 29, 2019, 10:52am UTC](https://discuss.elastic.co/t/could-not-running-yaml-it-in-my-own-repository-plugin-project/209782 "2019-11-29T10:52:12Z")
org.elasticsearch.repositories.cos.RepositoryCosClientYamlTestSuiteIT \> initializationError FAILED java.lang.NullPointerException at org.elasticsearch.test.rest.yaml.ESClientYamlSuiteTestCase.loadSuites(ESClientYamlS… --- ## [Terms query return distinct field results](https://discuss.elastic.co/t/terms-query-return-distinct-field-results/209950)
**Author:** [@hackerwin7](https://discuss.elastic.co/u/hackerwin7)\ **Replies:** 7\ **Last updated:** [November 29, 2019, 10:42am UTC](https://discuss.elastic.co/t/terms-query-return-distinct-field-results/209950 "2019-11-29T10:42:49Z")
Hi, In terms query: like this { "query": { "terms" : { "user" : \["u1", "u2","u3"\]} } } this would return any document's user match u1 or u2 or u3 and maybe duplicate such as result-1: u1 result-2: u… --- ## [Ingest-attachment using CBOR sample](https://discuss.elastic.co/t/ingest-attachment-using-cbor-sample/209818)
**Author:** [@carantunes](https://discuss.elastic.co/u/carantunes)\ **Replies:** 2\ **Last updated:** [November 29, 2019, 9:23am UTC](https://discuss.elastic.co/t/ingest-attachment-using-cbor-sample/209818 "2019-11-29T09:23:27Z")
Looks like this is still an issue today, more than a year later. Can you provide a working sample of how to use ingest-attachment with cbor? I'm struggling with processing large files. --- ## [Too many buckets error on Monitoring page indices](https://discuss.elastic.co/t/too-many-buckets-error-on-monitoring-page-indices/206251)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 2\ **Last updated:** [November 29, 2019, 10:31am UTC](https://discuss.elastic.co/t/too-many-buckets-error-on-monitoring-page-indices/206251 "2019-11-29T10:31:31Z")
I upgraded my cluster to 7.4.0. Metricbeat , Logstash, Elasticsearch and Kibana all were upgraded. After the upgrade, on the monitoring page, when I try to visit the Logstash pipelines page, I am getting the following er… --- ## [Logstash/Elasticsearch/Kibana Fundamentals](https://discuss.elastic.co/t/logstash-elasticsearch-kibana-fundamentals/209804)
**Author:** [@Booooooo](https://discuss.elastic.co/u/Booooooo)\ **Replies:** 2\ **Last updated:** [November 29, 2019, 9:30am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-kibana-fundamentals/209804 "2019-11-29T09:30:41Z")
Hello there, So, I have recently started playing with the Elastic Stack and have seen some interesting use cases, like ingesting pfSense logs, etc,. While looking into some logstash and ES configurations I have noticed… --- ## [ElasticSearch Filter Query](https://discuss.elastic.co/t/elasticsearch-filter-query/209925)
**Author:** [@Suresh\_Arunachalam](https://discuss.elastic.co/u/Suresh_Arunachalam)\ **Replies:** 1\ **Last updated:** [November 29, 2019, 6:51am UTC](https://discuss.elastic.co/t/elasticsearch-filter-query/209925 "2019-11-29T06:51:56Z")
How can i give apply JSON object value for filter. Example Code: "city": "Costa Mesa", "stateProvinceGeoId": "USA\_CA", "countryGeoId": "USA", "postalCode": "92627", "entryDate": 1564829397315, "placedDate": 1556… --- ## [Query sometimes result smaller than it should be](https://discuss.elastic.co/t/query-sometimes-result-smaller-than-it-should-be/209943)
**Author:** [@wnishi-swd](https://discuss.elastic.co/u/wnishi-swd)\ **Replies:** 0\ **Last updated:** [November 29, 2019, 9:09am UTC](https://discuss.elastic.co/t/query-sometimes-result-smaller-than-it-should-be/209943 "2019-11-29T09:09:10Z")
Hi, I'm a beginner of Elasticsearch and trying to count documents in an index. But I faced a situation that does not fit my intuition. I'm using Elasticsearch 6.4. my elasticsearch index has 10 documents. every docume… --- ## ["Best" way for (partial) search in URIs (e.g. requests/referrer)?](https://discuss.elastic.co/t/best-way-for-partial-search-in-uris-e-g-requests-referrer/209633)
**Author:** [@mw\_jko](https://discuss.elastic.co/u/mw_jko)\ **Replies:** 2\ **Last updated:** [November 29, 2019, 8:56am UTC](https://discuss.elastic.co/t/best-way-for-partial-search-in-uris-e-g-requests-referrer/209633 "2019-11-29T08:56:10Z")
Hi there, I'm dumping an nginx access log into elasticsearch (I just use the standard analyzer for all fields atm (this is what I learned afterwards, the defaults in elasticsearch are just too good to bother you with th… --- ## [How to collect elasticsearch logs in docker](https://discuss.elastic.co/t/how-to-collect-elasticsearch-logs-in-docker/207448)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 2\ **Last updated:** [November 29, 2019, 8:50am UTC](https://discuss.elastic.co/t/how-to-collect-elasticsearch-logs-in-docker/207448 "2019-11-29T08:50:02Z")
I need to access elasticsearch logs of elasticsearch cluster running within docker containers. Volumes: - /mnt/ssd1/eslog1:/var/log/elasticsearch is not the option , all logs are by default send to stdout and a… --- ## [Doubt regarding aggregation of metrics which are read from log files](https://discuss.elastic.co/t/doubt-regarding-aggregation-of-metrics-which-are-read-from-log-files/209936)
**Author:** [@rj23495](https://discuss.elastic.co/u/rj23495)\ **Replies:** 1\ **Last updated:** [November 29, 2019, 8:06am UTC](https://discuss.elastic.co/t/doubt-regarding-aggregation-of-metrics-which-are-read-from-log-files/209936 "2019-11-29T08:06:37Z")
I have a very trivial doubt, when i read log files and send this to elasticsearch via filebeat and logstash, sp while doing aggregations and performing operations like sum, average does it read the log file before aggreg… --- ## [Facing some issue in apache logs unable to find Unique map](https://discuss.elastic.co/t/facing-some-issue-in-apache-logs-unable-to-find-unique-map/209901)
**Author:** [@Jagdish\_Prasad\_Saini](https://discuss.elastic.co/u/Jagdish_Prasad_Saini)\ **Replies:** 1\ **Last updated:** [November 29, 2019, 6:54am UTC](https://discuss.elastic.co/t/facing-some-issue-in-apache-logs-unable-to-find-unique-map/209901 "2019-11-29T06:54:01Z")
here am getting some details but not unique Ip's map --- ## [Elasticsearch scripted\_metric null\_pointer\_exception](https://discuss.elastic.co/t/elasticsearch-scripted-metric-null-pointer-exception/209920)
**Author:** [@Noctis17](https://discuss.elastic.co/u/Noctis17)\ **Replies:** 1\ **Last updated:** [November 29, 2019, 6:06am UTC](https://discuss.elastic.co/t/elasticsearch-scripted-metric-null-pointer-exception/209920 "2019-11-29T06:06:20Z")
I'm trying to use the scripted\_metric aggs of Elasticsearch and normally, it's working perfectly fine with my other scripts However, with script below, I'm encountering an error called "null\_pointer\_exception" but the… --- ## [When I close master node,is this situation right?](https://discuss.elastic.co/t/when-i-close-master-node-is-this-situation-right/209919)
**Author:** [@merrizee](https://discuss.elastic.co/u/merrizee)\ **Replies:** 0\ **Last updated:** [November 29, 2019, 2:56am UTC](https://discuss.elastic.co/t/when-i-close-master-node-is-this-situation-right/209919 "2019-11-29T02:56:03Z")
My environment: elasticsearch-7.4.2 node-1,node-2(two nodes,and node-2 is the master node) When I closed the node-2 ,which is the master node, the node-1 begin to find the master node and show like this: \[node-1\] maste… --- ## [Awareness Allocation logic](https://discuss.elastic.co/t/awareness-allocation-logic/209914)
**Author:** [@robhuang](https://discuss.elastic.co/u/robhuang)\ **Replies:** 0\ **Last updated:** [November 29, 2019, 12:43am UTC](https://discuss.elastic.co/t/awareness-allocation-logic/209914 "2019-11-29T00:43:48Z")
I am reading the source code of AwarenessAllocationDecider.java, and try to understand the following piece of code (https://github.com/elastic/elasticsearch/blob/aef461b5b30b6b9ee248e8a5a2e2bb5ab39f6981/server/src/main/j… --- ## [How to take backup actual data from Linux Elasticseach path](https://discuss.elastic.co/t/how-to-take-backup-actual-data-from-linux-elasticseach-path/209872)
**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\ **Replies:** 3\ **Last updated:** [November 28, 2019, 8:29pm UTC](https://discuss.elastic.co/t/how-to-take-backup-actual-data-from-linux-elasticseach-path/209872 "2019-11-28T20:29:44Z")
Dear All. i having some issue while taking backup of all elasticsearch index from linux 18.04 VM Azure machine . i given data path for Linux is :- /var/lib/elasticsearch/\* file\>(elasticsearch.yml… --- ## [PUT fail](https://discuss.elastic.co/t/put-fail/209875)
**Author:** [@emy.comin](https://discuss.elastic.co/u/emy.comin)\ **Replies:** 3\ **Last updated:** [November 28, 2019, 5:52pm UTC](https://discuss.elastic.co/t/put-fail/209875 "2019-11-28T17:52:43Z")
hi everyone, so I'm begginer in ELK and I saw in a video this input "PUT". PUT /produtos { "settings": { "index": { "number\_of\_shards": 3, "number\_of\_replicas": 0 } }, "mappings": { "v1": … --- ## [Bulk scripted update on Nested Fields vs cluster refresh rate: Are my nested fields not being updated to the latest version?](https://discuss.elastic.co/t/bulk-scripted-update-on-nested-fields-vs-cluster-refresh-rate-are-my-nested-fields-not-being-updated-to-the-latest-version/209893)
**Author:** [@ClaudioDavi](https://discuss.elastic.co/u/ClaudioDavi)\ **Replies:** 1\ **Last updated:** [November 28, 2019, 5:39pm UTC](https://discuss.elastic.co/t/bulk-scripted-update-on-nested-fields-vs-cluster-refresh-rate-are-my-nested-fields-not-being-updated-to-the-latest-version/209893 "2019-11-28T17:39:00Z")
Sorry folks, this is a tough one to put into words, even worse because English is my second language, but bear with me please. I have the following situation in hand and am not sure if it will work as expected: The obj… --- ## [How to index even on failed pipelines](https://discuss.elastic.co/t/how-to-index-even-on-failed-pipelines/209122)
**Author:** [@micas](https://discuss.elastic.co/u/micas)\ **Replies:** 4\ **Last updated:** [November 28, 2019, 12:41pm UTC](https://discuss.elastic.co/t/how-to-index-even-on-failed-pipelines/209122 "2019-11-28T12:41:48Z")
I have an ingest pipeline "filebeat-7.2.0-apache-access-default" and others, however when my document doesnt match something it doesnt get indexed. Is there any way that i can define that even if any pipeline fails index… --- ## [Different sorted result on same shard on different nodes](https://discuss.elastic.co/t/different-sorted-result-on-same-shard-on-different-nodes/208783)
**Author:** [@francesco1](https://discuss.elastic.co/u/francesco1)\ **Replies:** 2\ **Last updated:** [November 28, 2019, 1:22pm UTC](https://discuss.elastic.co/t/different-sorted-result-on-same-shard-on-different-nodes/208783 "2019-11-28T13:22:43Z")
I have a cluster with 2 data nodes, each node has one shard. When I make a query, I sort by a date field but I get inconsistent result if I perform the same query twice. This is because (I think) ES hits the nodes in ro… --- ## [Format dates in response field in elastic search](https://discuss.elastic.co/t/format-dates-in-response-field-in-elastic-search/209836)
**Author:** [@SRI\_SUSHMA\_Karra](https://discuss.elastic.co/u/SRI_SUSHMA_Karra)\ **Replies:** 1\ **Last updated:** [November 28, 2019, 1:05pm UTC](https://discuss.elastic.co/t/format-dates-in-response-field-in-elastic-search/209836 "2019-11-28T13:05:54Z")
My server on which the application runs (uses ES) and ES are in central american time and I am accessing it from my server which is in IST. I want some charts and data for today(Say Jan 3) so I send from date as today… --- ## [Analyze Request - Local parameter](https://discuss.elastic.co/t/analyze-request-local-parameter/209532)
**Author:** [@gri](https://discuss.elastic.co/u/gri)\ **Replies:** 3\ **Last updated:** [November 28, 2019, 1:04pm UTC](https://discuss.elastic.co/t/analyze-request-local-parameter/209532 "2019-11-28T13:04:44Z")
The Analyze endpoint does not seem to have a "local" parameter to specify the preference. Is it just missing or is that on purpose and I am missing something? I noticed it was possible in the 0.\* and 1.\* versions of ES… --- ## [Use time filter and field filter in watcher](https://discuss.elastic.co/t/use-time-filter-and-field-filter-in-watcher/207704)
**Author:** [@rvenne](https://discuss.elastic.co/u/rvenne)\ **Replies:** 3\ **Last updated:** [November 28, 2019, 12:52pm UTC](https://discuss.elastic.co/t/use-time-filter-and-field-filter-in-watcher/207704 "2019-11-28T12:52:12Z")
I want to run a watcher that checks if an error with a specific message is occuring within a specific time range. This is the current custom watch JSON that I made: { "trigger": { "schedule": { "interval": "1m" } … --- ## [ElasticSearch Snapshot\_backup](https://discuss.elastic.co/t/elasticsearch-snapshot-backup/209857)
**Author:** [@Ceitcon\_consulting](https://discuss.elastic.co/u/Ceitcon_consulting)\ **Replies:** 0\ **Last updated:** [November 28, 2019, 12:44pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-backup/209857 "2019-11-28T12:44:06Z")
HI I want to take the backup of my elastic cluster using snapshot api end point and then i want to delete the indexes to have new data in it. my question is that while taking the snapshot backup will the logs still comi… --- ## [Someone has better approach for array handling than nested objects?](https://discuss.elastic.co/t/someone-has-better-approach-for-array-handling-than-nested-objects/209372)
**Author:** [@matiasr](https://discuss.elastic.co/u/matiasr)\ **Replies:** 3\ **Last updated:** [November 28, 2019, 12:38pm UTC](https://discuss.elastic.co/t/someone-has-better-approach-for-array-handling-than-nested-objects/209372 "2019-11-28T12:38:29Z")
I've been a while playing with elastic search and(I think) I got a non-satisfied result from my queries. I would like to get all documents that must have four conditions puts inside but because an unknown reason I receiv… --- ## [Using NER Apache NLP](https://discuss.elastic.co/t/using-ner-apache-nlp/209092)
**Author:** [@Alder](https://discuss.elastic.co/u/Alder)\ **Replies:** 2\ **Last updated:** [November 28, 2019, 12:32pm UTC](https://discuss.elastic.co/t/using-ner-apache-nlp/209092 "2019-11-28T12:32:35Z")
Hi all. I hava a NER model from ApacheNLP ner.bin. I need process a text into field text\_ner using this NER, transforming tags\[1\] in anothers fields. Is there any plugin that I can point to ner.bin and elastic do this… --- ## [Elasticsearch service is terminating immediately on Windows Server 2016](https://discuss.elastic.co/t/elasticsearch-service-is-terminating-immediately-on-windows-server-2016/209854)
**Author:** [@JY\_DT](https://discuss.elastic.co/u/JY_DT)\ **Replies:** 0\ **Last updated:** [November 28, 2019, 12:29pm UTC](https://discuss.elastic.co/t/elasticsearch-service-is-terminating-immediately-on-windows-server-2016/209854 "2019-11-28T12:29:46Z")
Hello, I've been working on the other issue that I've posted yesterday. However, I now see that the Elasticsearch is terminating as soon as I start it from the Services in Windows. The Windows Event Viewer gives a Win… --- ## [Elastic Index not indexing all documents in MongoDB](https://discuss.elastic.co/t/elastic-index-not-indexing-all-documents-in-mongodb/209721)
**Author:** [@crak-mmarcoux](https://discuss.elastic.co/u/crak-mmarcoux)\ **Replies:** 3\ **Last updated:** [November 28, 2019, 11:34am UTC](https://discuss.elastic.co/t/elastic-index-not-indexing-all-documents-in-mongodb/209721 "2019-11-28T11:34:53Z")
Hi! I have a Nuxeo solution that includes Elastic + MongoDB. I have a table in my MongoDB that has around 400k items/documents in it. When performing re-index, it only index 20000 items instead of 400k. Can someone h… --- ## [Query scoped timeout and allow\_partial\_search\_results](https://discuss.elastic.co/t/query-scoped-timeout-and-allow-partial-search-results/209844)
**Author:** [@fax4ever](https://discuss.elastic.co/u/fax4ever)\ **Replies:** 0\ **Last updated:** [November 28, 2019, 11:27am UTC](https://discuss.elastic.co/t/query-scoped-timeout-and-allow-partial-search-results/209844 "2019-11-28T11:27:21Z")
Hi guys. According to this page, it seems that the parameter for the timeout is search\_timeout and not timeout anymore. On this other page, it seems it is still timeout. I'm using the REST API, making some tests, usin… --- ## [Deleted alias still causing conflict when restoring snapshot](https://discuss.elastic.co/t/deleted-alias-still-causing-conflict-when-restoring-snapshot/209637)
**Author:** [@V.krae](https://discuss.elastic.co/u/V.krae)\ **Replies:** 4\ **Last updated:** [November 28, 2019, 10:59am UTC](https://discuss.elastic.co/t/deleted-alias-still-causing-conflict-when-restoring-snapshot/209637 "2019-11-28T10:59:19Z")
Hi everyone, I want to restore an indice from a snapshot with a certain name. It turned out that the same name was set as an alias for another index. So I deleted the alias, because I did not need it anymore. Now, if I… --- ## [Hostname verification turn off for curl requests](https://discuss.elastic.co/t/hostname-verification-turn-off-for-curl-requests/209800)
**Author:** [@akshay\_singh2](https://discuss.elastic.co/u/akshay_singh2)\ **Replies:** 5\ **Last updated:** [November 28, 2019, 10:39am UTC](https://discuss.elastic.co/t/hostname-verification-turn-off-for-curl-requests/209800 "2019-11-28T10:39:51Z")
Hello Elastic, I'm setting up new elastic cluster with security with certificates. However when doing curl requests its not working out, any help on this will be much appreciated. elasticsearch.yml : node.name=${HOSTN… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1079) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1081)