# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1115

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1116

---

## [Can i use Transforms to collapse data?](https://discuss.elastic.co/t/can-i-use-transforms-to-collapse-data/203694)

<div class="topic-metadata">

**Author:** [@akassss](https://discuss.elastic.co/u/akassss)\
**Replies:** 10\
**Last updated:** [October 23, 2019, 3:00pm UTC](https://discuss.elastic.co/t/can-i-use-transforms-to-collapse-data/203694 "2019-10-23T15:00:05Z")

</div>

I need continuously collapse data by hour (by custom field). And aggregated index must have equal source index mapping. At first I wanted to use rollup, but it does not support scrolling and much more.

---

## [Combining timeseries](https://discuss.elastic.co/t/combining-timeseries/204894)

<div class="topic-metadata">

**Author:** [@olt](https://discuss.elastic.co/u/olt)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 2:44pm UTC](https://discuss.elastic.co/t/combining-timeseries/204894 "2019-10-23T14:44:59Z")

</div>

Hi there! I'm new to Elasticsearch, and I'm trying to combine two time-series from two IoT devices. Each of my two devices upload measurements from a single sensor, to an index as 'data-point's, meaning that each data-…

---

## [Enable to deploy kibana using ECK v1beta1](https://discuss.elastic.co/t/enable-to-deploy-kibana-using-eck-v1beta1/204871)

<div class="topic-metadata">

**Author:** [@kusmanjali\_jenamoni](https://discuss.elastic.co/u/kusmanjali_jenamoni)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 1:55pm UTC](https://discuss.elastic.co/t/enable-to-deploy-kibana-using-eck-v1beta1/204871 "2019-10-23T13:55:16Z")

</div>

I am trying to deploy Elasticsearch and Kibana using ECK operator v1beta1 on a private kubernetes deployment. I am following https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-overview.html The yaml files are use…

---

## [Debugging Slow queries](https://discuss.elastic.co/t/debugging-slow-queries/204880)

<div class="topic-metadata">

**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 1:32pm UTC](https://discuss.elastic.co/t/debugging-slow-queries/204880 "2019-10-23T13:32:06Z")

</div>

Some queries are taking a very long time, from 8 to 24 seconds. I suspect a node is suffering from network throttling, but it is anyone's guess. Is there an option to request more diagnostic information about each node…

---

## [Watcher related Question](https://discuss.elastic.co/t/watcher-related-question/203746)

<div class="topic-metadata">

**Author:** [@rajuleo](https://discuss.elastic.co/u/rajuleo)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 1:20pm UTC](https://discuss.elastic.co/t/watcher-related-question/203746 "2019-10-23T13:20:22Z")

</div>

Team, We have watchers gathers information about the status of the index data quality and the output data getting indexed in the same elastic search platform, but we have separate monitoring elastic search cluster, is th…

---

## [Query child documents, with values from child and parent document](https://discuss.elastic.co/t/query-child-documents-with-values-from-child-and-parent-document/204614)

<div class="topic-metadata">

**Author:** [@Java\_Developet](https://discuss.elastic.co/u/Java_Developet)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 12:53pm UTC](https://discuss.elastic.co/t/query-child-documents-with-values-from-child-and-parent-document/204614 "2019-10-23T12:53:16Z")

</div>

Hello. Lets say I have made an index of books. Each book has a name and a publish date. Each book also has a list of users that have read the said book. These users have an username and a birthday date. The mapping wou…

---

## [How to summarize or join index with different kind of data structure](https://discuss.elastic.co/t/how-to-summarize-or-join-index-with-different-kind-of-data-structure/204818)

<div class="topic-metadata">

**Author:** [@elserhumano](https://discuss.elastic.co/u/elserhumano)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 8:11am UTC](https://discuss.elastic.co/t/how-to-summarize-or-join-index-with-different-kind-of-data-structure/204818 "2019-10-23T08:11:15Z")

</div>

Hello, As part of a project or rather as a proof of concept, we are trying to take data from two inventory systems, Ocs and Altiris to link them with Active Directory logs. In Ocs and Altiris I have the inventory of my…

---

## [How to install elatsic seach curator when working wth docker](https://discuss.elastic.co/t/how-to-install-elatsic-seach-curator-when-working-wth-docker/204844)

<div class="topic-metadata">

**Author:** [@Prafull](https://discuss.elastic.co/u/Prafull)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 11:09am UTC](https://discuss.elastic.co/t/how-to-install-elatsic-seach-curator-when-working-wth-docker/204844 "2019-10-23T11:09:15Z")

</div>

Hi, I have started the elastic search via docker, now I wanna take snapshot via curator. When I am trying to create repository via curl -X PUT "http://127.0.0.1:9200/\_snapshot/s3autosnapshots" -H 'Content-Type: applica…

---

## [Circuit\_breaking\_exception during reindex](https://discuss.elastic.co/t/circuit-breaking-exception-during-reindex/198255)

<div class="topic-metadata">

**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\
**Replies:** 21\
**Last updated:** [October 23, 2019, 11:04am UTC](https://discuss.elastic.co/t/circuit-breaking-exception-during-reindex/198255 "2019-10-23T11:04:15Z")

</div>

We've started getting frequent circuit breaker exceptions in our cluster, and I need some advice on how to tackle our situation. I've read up on circuit breakers, read lots of posts on the topic, but I'm still not sure w…

---

## [Does elastic remembers most recently indexed documents?](https://discuss.elastic.co/t/does-elastic-remembers-most-recently-indexed-documents/202815)

<div class="topic-metadata">

**Author:** [@Tinkerbell](https://discuss.elastic.co/u/Tinkerbell)\
**Replies:** 9\
**Last updated:** [October 23, 2019, 11:04am UTC](https://discuss.elastic.co/t/does-elastic-remembers-most-recently-indexed-documents/202815 "2019-10-23T11:04:08Z")

</div>

I have a requirement in which i need to update the indexed data. Based on the value from the recent document , i need to update the current document. Ex: similar to a counter. Can someone pour in some suggestions pleas…

---

## [Speeding up "more\_like\_this" query](https://discuss.elastic.co/t/speeding-up-more-like-this-query/204841)

<div class="topic-metadata">

**Author:** [@arshad\_javeed](https://discuss.elastic.co/u/arshad_javeed)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 10:51am UTC](https://discuss.elastic.co/t/speeding-up-more-like-this-query/204841 "2019-10-23T10:51:56Z")

</div>

Hi, I was interested in fetching similar documents for a given input document (similar to KNN). Since I'm dealing with only text fields, I went ahead with using more\_like\_this query, which does the job for text fields. …

---

## [Search API - Is there a way to get position of document in search response hits?](https://discuss.elastic.co/t/search-api-is-there-a-way-to-get-position-of-document-in-search-response-hits/204657)

<div class="topic-metadata">

**Author:** [@yairinot](https://discuss.elastic.co/u/yairinot)\
**Replies:** 7\
**Last updated:** [October 23, 2019, 10:42am UTC](https://discuss.elastic.co/t/search-api-is-there-a-way-to-get-position-of-document-in-search-response-hits/204657 "2019-10-23T10:42:49Z")

</div>

Elasticsearch 6.5.4 While this looks a trivial task I did not find an easy way to include document position in search response Sample query { "query":{ "bool":{ "must":\[ { "term…

---

## [Boolean score use multiply instead of sum](https://discuss.elastic.co/t/boolean-score-use-multiply-instead-of-sum/204793)

<div class="topic-metadata">

**Author:** [@heather-lau](https://discuss.elastic.co/u/heather-lau)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 6:57am UTC](https://discuss.elastic.co/t/boolean-score-use-multiply-instead-of-sum/204793 "2019-10-23T06:57:57Z")

</div>

In the document, " The bool query takes a more-matches-is-better approach, so the score from each matching must or should clause will be added together" , but I want a multiply score instead of sum, how can I do …

---

## [Use more than 32GB for heap](https://discuss.elastic.co/t/use-more-than-32gb-for-heap/204422)

<div class="topic-metadata">

**Author:** [@kamal](https://discuss.elastic.co/u/kamal)\
**Replies:** 4\
**Last updated:** [October 23, 2019, 9:54am UTC](https://discuss.elastic.co/t/use-more-than-32gb-for-heap/204422 "2019-10-23T09:54:58Z")

</div>

Hi I have a cluster with 30 nodes, each node has 40 cpu cores and 18TB disk (raid 1), and 128GB of Memory on each of them. I am indexing a huge number of documents (about 300 \* 10^9). Some one told me if I set heap si…

---

## [ELK Compatablity](https://discuss.elastic.co/t/elk-compatablity/204364)

<div class="topic-metadata">

**Author:** [@Dheena\_Dayalan](https://discuss.elastic.co/u/Dheena_Dayalan)\
**Replies:** 6\
**Last updated:** [October 23, 2019, 9:49am UTC](https://discuss.elastic.co/t/elk-compatablity/204364 "2019-10-23T09:49:26Z")

</div>

Can ELastic Search 7.1.1 used with Kibana 7.3.1, if not suggest an alternative

---

## [Mktemp: Invalid argument](https://discuss.elastic.co/t/mktemp-invalid-argument/204608)

<div class="topic-metadata">

**Author:** [@Priya\_Jajam](https://discuss.elastic.co/u/Priya_Jajam)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 9:45am UTC](https://discuss.elastic.co/t/mktemp-invalid-argument/204608 "2019-10-23T09:45:34Z")

</div>

I deployed elasticsearch(image used:quay.io/pires/docker-elasticsearch-kubernetes:6.4.2) cluster with 3-master, 2-data and 1-client node on kubernetes cluster. when i try to run this command " bin/elasticsearch-certutil …

---

## [\[node2\] collector \[cluster\_stats\] timed out when collecting data](https://discuss.elastic.co/t/node2-collector-cluster-stats-timed-out-when-collecting-data/204821)

<div class="topic-metadata">

**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 9:41am UTC](https://discuss.elastic.co/t/node2-collector-cluster-stats-timed-out-when-collecting-data/204821 "2019-10-23T09:41:18Z")

</div>

Hi everyone, I am trying to reindex my data and the ES Cluster turned to RED. The error in master node's log: \[2019-10-23T16:24:00,179\]\[ERROR\]\[o.e.x.m.c.c.ClusterStatsCollector\] \[node2\] collector \[cluster\_stats\] timed…

---

## [Appropriate Number of Indices/Shards for My Cluster](https://discuss.elastic.co/t/appropriate-number-of-indices-shards-for-my-cluster/204534)

<div class="topic-metadata">

**Author:** [@mfalkenstein](https://discuss.elastic.co/u/mfalkenstein)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 9:28am UTC](https://discuss.elastic.co/t/appropriate-number-of-indices-shards-for-my-cluster/204534 "2019-10-23T09:28:22Z")

</div>

I'm building an ES system to back my webapp, which is designed to support multiple data types from many different sources. The cluster I've built has 3 nodes and about 514 shards, which currently support about 200 separa…

---

## [Fielddata is disabled on text fields by default](https://discuss.elastic.co/t/fielddata-is-disabled-on-text-fields-by-default/204813)

<div class="topic-metadata">

**Author:** [@BeMoore](https://discuss.elastic.co/u/BeMoore)\
**Replies:** 4\
**Last updated:** [October 23, 2019, 8:58am UTC](https://discuss.elastic.co/t/fielddata-is-disabled-on-text-fields-by-default/204813 "2019-10-23T08:58:41Z")

</div>

So consider the following: Fielddata is disabled on text fields by default. Set fielddata=true on \[your\_field\_name\] in order to load fielddata in memory by uninverting the inverted index. Note that this can however…

---

## [Change queue capacity in an elastic node](https://discuss.elastic.co/t/change-queue-capacity-in-an-elastic-node/204780)

<div class="topic-metadata">

**Author:** [@manish\_kakoti](https://discuss.elastic.co/u/manish_kakoti)\
**Replies:** 6\
**Last updated:** [October 23, 2019, 8:46am UTC](https://discuss.elastic.co/t/change-queue-capacity-in-an-elastic-node/204780 "2019-10-23T08:46:27Z")

</div>

I am running a local node with queue capacity of :200 , but due to large number of requests coming in, the node rejects the request when it goes beyond 200 (which is the queue capacity) i tried setting in thread\_pool.se…

---

## [Watcher: Action for each found document](https://discuss.elastic.co/t/watcher-action-for-each-found-document/204625)

<div class="topic-metadata">

**Author:** [@gerard1](https://discuss.elastic.co/u/gerard1)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 8:30am UTC](https://discuss.elastic.co/t/watcher-action-for-each-found-document/204625 "2019-10-23T08:30:15Z")

</div>

I would like to perform actions per each document. For example, for each sudo command that is being executed, send a Slack notification. I can't find any documentation for doing such watch.

---

## [Unable to open elasticsearch in browser](https://discuss.elastic.co/t/unable-to-open-elasticsearch-in-browser/204802)

<div class="topic-metadata">

**Author:** [@Shweta\_Hollannavar](https://discuss.elastic.co/u/Shweta_Hollannavar)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 7:52am UTC](https://discuss.elastic.co/t/unable-to-open-elasticsearch-in-browser/204802 "2019-10-23T07:52:38Z")

</div>

Hi, I am installing ELK in ubuntu 18.04 on GCP, with the curl -XGET 'localhost:9200" i am able get the output in SSH but when trying to access with the external ip with port 9200 i am not able to access it. I am using…

---

## [Elastic Search RestHighLevelClient delaying when doing simple requests to ES](https://discuss.elastic.co/t/elastic-search-resthighlevelclient-delaying-when-doing-simple-requests-to-es/204801)

<div class="topic-metadata">

**Author:** [@spitfire](https://discuss.elastic.co/u/spitfire)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 7:22am UTC](https://discuss.elastic.co/t/elastic-search-resthighlevelclient-delaying-when-doing-simple-requests-to-es/204801 "2019-10-23T07:22:39Z")

</div>

Dear all, For the past several days i am trying to solve a problem with delaying of requests for search in Elastic Search (And actually this is what our customers are reporting - that sometimes when they do a search the…

---

## [Help needed with search as you type](https://discuss.elastic.co/t/help-needed-with-search-as-you-type/204486)

<div class="topic-metadata">

**Author:** [@iuzzino](https://discuss.elastic.co/u/iuzzino)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 7:09am UTC](https://discuss.elastic.co/t/help-needed-with-search-as-you-type/204486 "2019-10-23T07:09:42Z")

</div>

My goal is to create a search engine (elasticsearch 7.x) that suggests you the correct searches to input, a sort of what amazon does, based on previous searches (machine learning). My fields to index are the following: …

---

## [Null result in NewSimpleQueryStringQuery() with Golang](https://discuss.elastic.co/t/null-result-in-newsimplequerystringquery-with-golang/204796)

<div class="topic-metadata">

**Author:** [@Mehrdad.dev](https://discuss.elastic.co/u/Mehrdad.dev)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 7:07am UTC](https://discuss.elastic.co/t/null-result-in-newsimplequerystringquery-with-golang/204796 "2019-10-23T07:07:24Z")

</div>

Hi. I want search a query string with NewSimpleQueryStringQuery() function. my code is : func Search(ctx context.Context, client \*elastic.Client, index string) { var companies \[\]People q := \`{ "query": { "simp…

---

## [Cannot connect to ES 6.8 getting connection refused erros](https://discuss.elastic.co/t/cannot-connect-to-es-6-8-getting-connection-refused-erros/204716)

<div class="topic-metadata">

**Author:** [@eric.cox](https://discuss.elastic.co/u/eric.cox)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 7:07am UTC](https://discuss.elastic.co/t/cannot-connect-to-es-6-8-getting-connection-refused-erros/204716 "2019-10-23T07:07:18Z")

</div>

Team, We are trying to connect to ES 6.8 instance, from API Connect 5.0.8.6 on the master node and are getting the following connection refused error. This is the first time I've been asked to send Event Analytics from …

---

## [Elasticsearch Date Processor not parsing properly](https://discuss.elastic.co/t/elasticsearch-date-processor-not-parsing-properly/204612)

<div class="topic-metadata">

**Author:** [@gerard1](https://discuss.elastic.co/u/gerard1)\
**Replies:** 3\
**Last updated:** [October 23, 2019, 7:05am UTC](https://discuss.elastic.co/t/elasticsearch-date-processor-not-parsing-properly/204612 "2019-10-23T07:05:28Z")

</div>

I'm trying to parse a log date with an Elasticsearch ingest pipeline, using date processor, but the parsed date is not correct. All the other pipelines that I've created work correctly, except this one. Here is what I'…

---

## [Mapping definition for \[fields\] has unsupported parameters: \[analyzer : not\_standard\]](https://discuss.elastic.co/t/mapping-definition-for-fields-has-unsupported-parameters-analyzer-not-standard/204782)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 6:42am UTC](https://discuss.elastic.co/t/mapping-definition-for-fields-has-unsupported-parameters-analyzer-not-standard/204782 "2019-10-23T06:42:30Z")

</div>

Hi, "givenName": { "analyzer": "my\_analyzer", "type": "text", "fields": { "keyword": { "type": "keyword", …

---

## [ElasticSearch Encryption](https://discuss.elastic.co/t/elasticsearch-encryption/204405)

<div class="topic-metadata">

**Author:** [@Kailash\_Karki](https://discuss.elastic.co/u/Kailash_Karki)\
**Replies:** 4\
**Last updated:** [October 23, 2019, 5:50am UTC](https://discuss.elastic.co/t/elasticsearch-encryption/204405 "2019-10-23T05:50:52Z")

</div>

Hi, I am new to elastic search. I want to encrypt all the data that I have saved in indices, my confusion is that, if I encrypt the data will I able to search for data or not? what approach should I follow to encrypt t…

---

## [Date histogram doesn't create buckets for dates later than the last record found, even with 'extended\_bounds' min value of 0. How do I fix this?](https://discuss.elastic.co/t/date-histogram-doesnt-create-buckets-for-dates-later-than-the-last-record-found-even-with-extended-bounds-min-value-of-0-how-do-i-fix-this/204570)

<div class="topic-metadata">

**Author:** [@ShawnCorrigan](https://discuss.elastic.co/u/ShawnCorrigan)\
**Replies:** 3\
**Last updated:** [October 23, 2019, 3:50am UTC](https://discuss.elastic.co/t/date-histogram-doesnt-create-buckets-for-dates-later-than-the-last-record-found-even-with-extended-bounds-min-value-of-0-how-do-i-fix-this/204570 "2019-10-23T03:50:38Z")

</div>

I am trying to create a chart with the sum of a value in records I have. The date buckets should be categorized by weeks, and they should include a sum of the 'time' value in each record. To test this I inserted 10 milli…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1114)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1116)
