# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1110 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1111 --- ## [Convert single value array in "\_source" to single value in "stored\_fields"](https://discuss.elastic.co/t/convert-single-value-array-in-source-to-single-value-in-stored-fields/205534)
**Author:** [@EricPSU](https://discuss.elastic.co/u/EricPSU)\ **Replies:** 0\ **Last updated:** [October 28, 2019, 6:30pm UTC](https://discuss.elastic.co/t/convert-single-value-array-in-source-to-single-value-in-stored-fields/205534 "2019-10-28T18:30:30Z")
I have data that will always be single value, but it is being sent to my Elasticsearch 5.6 instance as an array. I do not have control over how the data is being sent or the version of Elasticsearch. I do have control … --- ## [How do I make Elasticsearch address search a smooth experience?](https://discuss.elastic.co/t/how-do-i-make-elasticsearch-address-search-a-smooth-experience/205487)
**Author:** [@Bart\_de\_Man](https://discuss.elastic.co/u/Bart_de_Man)\ **Replies:** 1\ **Last updated:** [October 28, 2019, 5:21pm UTC](https://discuss.elastic.co/t/how-do-i-make-elasticsearch-address-search-a-smooth-experience/205487 "2019-10-28T17:21:45Z")
Elasticsearch version ( bin/elasticsearch --version ): 5.6.11 Plugins installed : JVM version ( java -version ): openjdk version "1.8.0\_222" OpenJDK Runtime Environment (build 1.8.0\_222-8u222-b10-1ubuntu1~16.04.1-b1… --- ## [Elasitc throwing error while connecting from Pivotal Colud foundry](https://discuss.elastic.co/t/elasitc-throwing-error-while-connecting-from-pivotal-colud-foundry/205495)
**Author:** [@varal12](https://discuss.elastic.co/u/varal12)\ **Replies:** 1\ **Last updated:** [October 28, 2019, 5:16pm UTC](https://discuss.elastic.co/t/elasitc-throwing-error-while-connecting-from-pivotal-colud-foundry/205495 "2019-10-28T17:16:16Z")
We are using java high level rest client to connect to elastic search through spring boot. The spring boot application launches fine from workstation but when we deploy to Pivotal cloud foundry getting the following erro… --- ## [Curator cannot delete older indices](https://discuss.elastic.co/t/curator-cannot-delete-older-indices/205496)
**Author:** [@Jan\_Kaspar](https://discuss.elastic.co/u/Jan_Kaspar)\ **Replies:** 5\ **Last updated:** [October 28, 2019, 5:14pm UTC](https://discuss.elastic.co/t/curator-cannot-delete-older-indices/205496 "2019-10-28T17:14:02Z")
Hi all, i would like to delete indices older X days. I found a lot of posts here but no one helped me. My action file: actions: 1: action: delete\_indices description: \>- Delete indices older than 60 days (based on… --- ## [Javascript Client security.getRole returning invalid JSON](https://discuss.elastic.co/t/javascript-client-security-getrole-returning-invalid-json/205522)
**Author:** [@mmarooney](https://discuss.elastic.co/u/mmarooney)\ **Replies:** 0\ **Last updated:** [October 28, 2019, 5:08pm UTC](https://discuss.elastic.co/t/javascript-client-security-getrole-returning-invalid-json/205522 "2019-10-28T17:08:14Z")
We are experiencing a strange issue with the javascript client. When calling client.security.getRole() we're seeing JSON formatted result like below: await this.client.security.getRole({name: 'test-role-2'}) … --- ## [Index size variation when updating](https://discuss.elastic.co/t/index-size-variation-when-updating/205503)
**Author:** [@manfredpaul](https://discuss.elastic.co/u/manfredpaul)\ **Replies:** 0\ **Last updated:** [October 28, 2019, 3:13pm UTC](https://discuss.elastic.co/t/index-size-variation-when-updating/205503 "2019-10-28T15:13:48Z")
Hi, we are currently working with a small 3 node (8 CPUs + 20G RAM) cluster. We have an index with 16 millions documents (3 primary shards with 1 replica, 10s refresh interval) that are updated at least once a day (migh… --- ## [Multiple geoip does not work?](https://discuss.elastic.co/t/multiple-geoip-does-not-work/205486)
**Author:** [@jahlives](https://discuss.elastic.co/u/jahlives)\ **Replies:** 0\ **Last updated:** [October 28, 2019, 2:31pm UTC](https://discuss.elastic.co/t/multiple-geoip-does-not-work/205486 "2019-10-28T14:31:48Z")
Hi I try to get two geoip lookups working. Found target option in the mangpages. But now I'm stuck with the elastic template. It seems that the mapping from json template is not applied. "mappings":{ "properties"… --- ## [Bypass rollover phase in ilm](https://discuss.elastic.co/t/bypass-rollover-phase-in-ilm/205491)
**Author:** [@kolli\_dilip](https://discuss.elastic.co/u/kolli_dilip)\ **Replies:** 0\ **Last updated:** [October 28, 2019, 2:35pm UTC](https://discuss.elastic.co/t/bypass-rollover-phase-in-ilm/205491 "2019-10-28T14:35:45Z")
Hi All, I would like to apply direct delete phase for the index with the criteria of index created \> 15 days. so need to skip the rollover phase , can some one suggest how to configure ilm my present setting is as bel… --- ## [Node with zero shards fails to start with error "Node is started with node.data=false, but has shard data"](https://discuss.elastic.co/t/node-with-zero-shards-fails-to-start-with-error-node-is-started-with-node-data-false-but-has-shard-data/205450)
**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\ **Replies:** 3\ **Last updated:** [October 28, 2019, 2:35pm UTC](https://discuss.elastic.co/t/node-with-zero-shards-fails-to-start-with-error-node-is-started-with-node-data-false-but-has-shard-data/205450 "2019-10-28T14:35:10Z")
I'm trying to remove the data role from one node by first excluding the node from shard allocation with: PUT \_cluster/settings { "transient" : { "cluster.routing.allocation.exclude.\_name" : "node-001" } } When … --- ## [Why my expired translog files are not deleted?](https://discuss.elastic.co/t/why-my-expired-translog-files-are-not-deleted/205398)
**Author:** [@yc1024](https://discuss.elastic.co/u/yc1024)\ **Replies:** 4\ **Last updated:** [October 28, 2019, 2:00pm UTC](https://discuss.elastic.co/t/why-my-expired-translog-files-are-not-deleted/205398 "2019-10-28T14:00:26Z")
Hi elasticsearch version : 6.1.3 when call IndexShard#afterWriteOperation to flush , i occured (29125)\[https://github.com/elastic/elasticsearch/pull/29125\] index.translog.flush\_threshold\_size:5G index.translog.retent… --- ## [Parent circuit breaking is always triggered in ES 7.3.2](https://discuss.elastic.co/t/parent-circuit-breaking-is-always-triggered-in-es-7-3-2/204185)
**Author:** [@Siva\_Karan](https://discuss.elastic.co/u/Siva_Karan)\ **Replies:** 3\ **Last updated:** [October 28, 2019, 1:29pm UTC](https://discuss.elastic.co/t/parent-circuit-breaking-is-always-triggered-in-es-7-3-2/204185 "2019-10-28T13:29:06Z")
Hi Team, we are using Elasticsearch version 7.3.2 we are getting parent circuit breaking Exception frequently,and it occupies all estimate limit, without bouncing the node how can we rectify it. Any command or param… --- ## [Add addtional field to aggregation field how](https://discuss.elastic.co/t/add-addtional-field-to-aggregation-field-how/205475)
**Author:** [@aagafonov77](https://discuss.elastic.co/u/aagafonov77)\ **Replies:** 0\ **Last updated:** [October 28, 2019, 1:23pm UTC](https://discuss.elastic.co/t/add-addtional-field-to-aggregation-field-how/205475 "2019-10-28T13:23:29Z")
Dear madam or sir, I need your support. I had add products for my ES. Such as: product { title: 'Moto saw Stihl MS 180', sku: 'st-180-32', price: '150', color: \[ { id: '23', image: 'images/colors/black.png', t… --- ## [Find missing computers from index](https://discuss.elastic.co/t/find-missing-computers-from-index/205470)
**Author:** [@Ryan\_Clark](https://discuss.elastic.co/u/Ryan_Clark)\ **Replies:** 0\ **Last updated:** [October 28, 2019, 1:12pm UTC](https://discuss.elastic.co/t/find-missing-computers-from-index/205470 "2019-10-28T13:12:24Z")
I have log data coming in via winlogbeat and syslog. I Can create a visualization in Kibana that will show me a list of systems that are sending data to elasticsearch based on the received log data. Because of the large… --- ## [Searching multiple fields, types, and indexes within php](https://discuss.elastic.co/t/searching-multiple-fields-types-and-indexes-within-php/204935)
**Author:** [@prawsthorne](https://discuss.elastic.co/u/prawsthorne)\ **Replies:** 1\ **Last updated:** [October 28, 2019, 12:41pm UTC](https://discuss.elastic.co/t/searching-multiple-fields-types-and-indexes-within-php/204935 "2019-10-28T12:41:52Z")
I wanting to query one term across multiple indexes, types, and fields. I've been reading and experimenting with no working solution... yet. It's time to ask. It works until I un-comment the second match clause. Thinki… --- ## [Java-rest-high-search-template typed\_keys field](https://discuss.elastic.co/t/java-rest-high-search-template-typed-keys-field/205461)
**Author:** [@wojciechss](https://discuss.elastic.co/u/wojciechss)\ **Replies:** 0\ **Last updated:** [October 28, 2019, 12:39pm UTC](https://discuss.elastic.co/t/java-rest-high-search-template-typed-keys-field/205461 "2019-10-28T12:39:19Z")
Hi, is there any possibility to set typed\_keys param in SearchTemplateRequest class? In api specification: https://www.elastic.co/guide/en/elasticsearch/reference/master/search-template.html#search-template-api-query-… --- ## [ILM query optimization](https://discuss.elastic.co/t/ilm-query-optimization/205458)
**Author:** [@coudenysj](https://discuss.elastic.co/u/coudenysj)\ **Replies:** 0\ **Last updated:** [October 28, 2019, 12:23pm UTC](https://discuss.elastic.co/t/ilm-query-optimization/205458 "2019-10-28T12:23:45Z")
Hi, We're using ILM to enable a hot/warm/cold architecture. We ingest quite a lot of data, and try to keep them for 90 days. Ingest is running smoothly, but I'm trying to speed up the querying. When I run a time based… --- ## [Upper case and lower case string giving different results for filter](https://discuss.elastic.co/t/upper-case-and-lower-case-string-giving-different-results-for-filter/205260)
**Author:** [@decodeit](https://discuss.elastic.co/u/decodeit)\ **Replies:** 2\ **Last updated:** [October 28, 2019, 11:58am UTC](https://discuss.elastic.co/t/upper-case-and-lower-case-string-giving-different-results-for-filter/205260 "2019-10-28T11:58:32Z")
So I have this query, { "query": { "bool": { "must": \[ { "match": { "title": "communication"}} \], "filter": \[ { "term": { "survey": "general" }} \] } } } Now, i… --- ## [Cause of use\_field\_mapping warning?](https://discuss.elastic.co/t/cause-of-use-field-mapping-warning/204828)
**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\ **Replies:** 2\ **Last updated:** [October 28, 2019, 11:49am UTC](https://discuss.elastic.co/t/cause-of-use-field-mapping-warning/204828 "2019-10-28T11:49:19Z")
Regarding the question about use\_field\_mapping warnings in the linked post above: "\[use\_field\_mapping\] is a special format that was only used to ease the transition to 7.x. It has become the default and shouldn't be s… --- ## [NEST syntax for Multi Search queries](https://discuss.elastic.co/t/nest-syntax-for-multi-search-queries/205312)
**Author:** [@han1](https://discuss.elastic.co/u/han1)\ **Replies:** 4\ **Last updated:** [October 28, 2019, 10:29am UTC](https://discuss.elastic.co/t/nest-syntax-for-multi-search-queries/205312 "2019-10-28T10:29:57Z")
Can anyone assist us with the syntax of how a Multi Search Query is created in NEST 7. (This is getting a pain having to ask for NEST syntax everytime!) Many thanks --- ## [What does indices.indexing.index\_current value mean?](https://discuss.elastic.co/t/what-does-indices-indexing-index-current-value-mean/203408)
**Author:** [@LuckyNemo](https://discuss.elastic.co/u/LuckyNemo)\ **Replies:** 5\ **Last updated:** [October 28, 2019, 10:13am UTC](https://discuss.elastic.co/t/what-does-indices-indexing-index-current-value-mean/203408 "2019-10-28T10:13:19Z")
I am using 'GET /\_nodes/stats' to get the states of a node, does anyone know what 'indices.indexing.index\_current' value mean? For example : "indexing": { "index\_total": 72857515, "index\_time\_in\_milli… --- ## [Logstash Issue sending data to elasticseach cluster](https://discuss.elastic.co/t/logstash-issue-sending-data-to-elasticseach-cluster/205205)
**Author:** [@pdkgamage](https://discuss.elastic.co/u/pdkgamage)\ **Replies:** 2\ **Last updated:** [October 28, 2019, 8:29am UTC](https://discuss.elastic.co/t/logstash-issue-sending-data-to-elasticseach-cluster/205205 "2019-10-28T08:29:20Z")
I have upgraded ELK stack into 7.4 version ( filebeat, logstash, elasticalert, kibana). I am using elasticsearch cloud. Once after the upgrade, following error shows in logstash log file. but few of records can see in k… --- ## [Disabling fielddata on the cluster/index level](https://discuss.elastic.co/t/disabling-fielddata-on-the-cluster-index-level/205411)
**Author:** [@doron](https://discuss.elastic.co/u/doron)\ **Replies:** 1\ **Last updated:** [October 28, 2019, 7:38am UTC](https://discuss.elastic.co/t/disabling-fielddata-on-the-cluster-index-level/205411 "2019-10-28T07:38:53Z")
I've suddenly noticed that fielddata cache for the \_id field is taking 14GB of RAM on my cluster, and I'm not sure where that came from (probably some query I'm not aware of). I've cleared it manually, but I'm worried it… --- ## [I want to update my 5.6.3 elasticsearch into 7.3](https://discuss.elastic.co/t/i-want-to-update-my-5-6-3-elasticsearch-into-7-3/205379)
**Author:** [@rajesh\_elasticsearch](https://discuss.elastic.co/u/rajesh_elasticsearch)\ **Replies:** 4\ **Last updated:** [October 28, 2019, 2:09am UTC](https://discuss.elastic.co/t/i-want-to-update-my-5-6-3-elasticsearch-into-7-3/205379 "2019-10-28T02:09:50Z")
I want to update my 5.6.3 elasticsearch into 7.3, I have seen some of the api are changed ( I not seen all the api). If I want to change, is there any steps I have to be focus, So I can not spend much time in changing th… --- ## [Netflow config - ELK](https://discuss.elastic.co/t/netflow-config-elk/204970)
**Author:** [@tautua](https://discuss.elastic.co/u/tautua)\ **Replies:** 2\ **Last updated:** [October 27, 2019, 10:43pm UTC](https://discuss.elastic.co/t/netflow-config-elk/204970 "2019-10-27T22:43:02Z")
Hi, New in ELK and have managed to get it working on a Windows Server 2016. Kindly asking if anyone can help me with configuring my ELK to get netflow working. Thanks chris --- ## [Elasticsearch on raspberry pi 4 with raspbian](https://discuss.elastic.co/t/elasticsearch-on-raspberry-pi-4-with-raspbian/200535)
**Author:** [@martingwb\_99](https://discuss.elastic.co/u/martingwb_99)\ **Replies:** 8\ **Last updated:** [October 27, 2019, 7:36pm UTC](https://discuss.elastic.co/t/elasticsearch-on-raspberry-pi-4-with-raspbian/200535 "2019-10-27T19:36:36Z")
Anyone with a good description how ES can be run on a raspberry pi 4 with raspbian? I have tried to use the information from this thread but was not successful. When checking syslog I can see two lines saying elasticse… --- ## [Template name and Index name are different from i setup in beat config](https://discuss.elastic.co/t/template-name-and-index-name-are-different-from-i-setup-in-beat-config/204361)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 1\ **Last updated:** [October 27, 2019, 3:08pm UTC](https://discuss.elastic.co/t/template-name-and-index-name-are-different-from-i-setup-in-beat-config/204361 "2019-10-27T15:08:58Z")
Template name and Index name are different from I setup in beat config I am attaching the pic of the config file and kibana output --- ## [Elasticsearch Capacity Planning Help Required](https://discuss.elastic.co/t/elasticsearch-capacity-planning-help-required/205372)
**Author:** [@nuwancs](https://discuss.elastic.co/u/nuwancs)\ **Replies:** 2\ **Last updated:** [October 27, 2019, 2:30pm UTC](https://discuss.elastic.co/t/elasticsearch-capacity-planning-help-required/205372 "2019-10-27T14:30:10Z")
I am working on a elasticsearch cluster to have following requirements, 2000 TPS 10 kb payload 3 months retention period without summarising 1 year summarised data. I have tried the same with 200tps instead 2000tps in … --- ## ["bucket\_script" aggregation initialization exception](https://discuss.elastic.co/t/bucket-script-aggregation-initialization-exception/205381)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 1\ **Last updated:** [October 27, 2019, 1:35pm UTC](https://discuss.elastic.co/t/bucket-script-aggregation-initialization-exception/205381 "2019-10-27T13:35:49Z")
Hi, This is my query: { "aggs": { "users": { "cardinality": { "field": "user\_id.keyword" }, "aggs": { "time": { "sum": { "field": "ts\_duration" } }, "avg\_time": { "bucket\_script": { "buckets\_path": { "tota… --- ## [Cross cluster search failed](https://discuss.elastic.co/t/cross-cluster-search-failed/205377)
**Author:** [@Amita](https://discuss.elastic.co/u/Amita)\ **Replies:** 0\ **Last updated:** [October 27, 2019, 7:24am UTC](https://discuss.elastic.co/t/cross-cluster-search-failed/205377 "2019-10-27T07:24:23Z")
Hi I have several clusters on version 6.2.4 Ihave another cluster which i configured to use for cross cluster search on all the other clusters. I'm running into some problem with one of the nodes in the coordineting c… --- ## [TermQuery formation when searching a JSON object against a non analyzed string](https://discuss.elastic.co/t/termquery-formation-when-searching-a-json-object-against-a-non-analyzed-string/205366)
**Author:** [@neham](https://discuss.elastic.co/u/neham)\ **Replies:** 0\ **Last updated:** [October 26, 2019, 6:36pm UTC](https://discuss.elastic.co/t/termquery-formation-when-searching-a-json-object-against-a-non-analyzed-string/205366 "2019-10-26T18:36:41Z")
I have a mapping like {:assignee {:type "string" :include\_in\_all false :index "not\_analyzed" :null\_value "unassigned"}} If I want to search a document with assignee as "neha" my quer… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1109) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1111)