# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1117 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1118 --- ## [Append documents based on a single id from different indexes](https://discuss.elastic.co/t/append-documents-based-on-a-single-id-from-different-indexes/204605)
**Author:** [@Vinothkumar\_Ganeshan](https://discuss.elastic.co/u/Vinothkumar_Ganeshan)\ **Replies:** 0\ **Last updated:** [October 22, 2019, 8:43am UTC](https://discuss.elastic.co/t/append-documents-based-on-a-single-id-from-different-indexes/204605 "2019-10-22T08:43:17Z")
Hello, I'm giving a scenario more than a code to understand more. Index - Shopping: field - product id field - time field - customer id field - event (- Value :Purchase) Index- Cart: field - product id field - ti… --- ## [Elasticsearch find "%40" in email text field](https://discuss.elastic.co/t/elasticsearch-find-40-in-email-text-field/204064)
**Author:** [@christof](https://discuss.elastic.co/u/christof)\ **Replies:** 1\ **Last updated:** [October 22, 2019, 8:38am UTC](https://discuss.elastic.co/t/elasticsearch-find-40-in-email-text-field/204064 "2019-10-22T08:38:38Z")
Hi, I have several emails in our es that have %40 instead of the @ in them (e.g. john%40test.com). I'm trying to search directly for them using the regex search function, but am having issues in identifying for these ca… --- ## [Different results between nest and kibana](https://discuss.elastic.co/t/different-results-between-nest-and-kibana/204251)
**Author:** [@vic2](https://discuss.elastic.co/u/vic2)\ **Replies:** 1\ **Last updated:** [October 22, 2019, 8:28am UTC](https://discuss.elastic.co/t/different-results-between-nest-and-kibana/204251 "2019-10-22T08:28:34Z")
Hi, Here is a nest code: var request=new SearchRequest\ { Aggregations = new AggregationDictionary { { … --- ## [Elasticsearch 6.5 installer is not compatible with Java 11](https://discuss.elastic.co/t/elasticsearch-6-5-installer-is-not-compatible-with-java-11/203898)
**Author:** [@sunnydrall](https://discuss.elastic.co/u/sunnydrall)\ **Replies:** 2\ **Last updated:** [October 22, 2019, 8:19am UTC](https://discuss.elastic.co/t/elasticsearch-6-5-installer-is-not-compatible-with-java-11/203898 "2019-10-22T08:19:47Z")
I installed Java 11 with Elasticsearch 6.5, but they aren't compatible together. The installer says that the installation is completed but the service does not start without any errors or logs. Even when I try to start t… --- ## [Potential issue with bool and nested term](https://discuss.elastic.co/t/potential-issue-with-bool-and-nested-term/204413)
**Author:** [@Spansh](https://discuss.elastic.co/u/Spansh)\ **Replies:** 2\ **Last updated:** [October 22, 2019, 7:58am UTC](https://discuss.elastic.co/t/potential-issue-with-bool-and-nested-term/204413 "2019-10-22T07:58:52Z")
I think I have found an issue with arrays of nested fields and bool matching. I have a nested field which has multiple values where I want to search for records which have multiple values within it. If I search for a s… --- ## [Add 32GB RAM node to cluster with 64GB RAM nodes](https://discuss.elastic.co/t/add-32gb-ram-node-to-cluster-with-64gb-ram-nodes/204600)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 0\ **Last updated:** [October 22, 2019, 7:58am UTC](https://discuss.elastic.co/t/add-32gb-ram-node-to-cluster-with-64gb-ram-nodes/204600 "2019-10-22T07:58:35Z")
I have a cluster of 4 nodes 4cores/64GB RAM and I want to add new 9 nodes 8Cores/32GB RAM. Is it bad idea to have nodes with different performance in the same cluster? Is cluster capable to handle these differencies a… --- ## [Index falling behind after minor version upgrade](https://discuss.elastic.co/t/index-falling-behind-after-minor-version-upgrade/204599)
**Author:** [@JacovanZyl](https://discuss.elastic.co/u/JacovanZyl)\ **Replies:** 0\ **Last updated:** [October 22, 2019, 7:48am UTC](https://discuss.elastic.co/t/index-falling-behind-after-minor-version-upgrade/204599 "2019-10-22T07:48:49Z")
Good morning, I recently updated minor version from 7.3.1 to 7.3.2 and found that my 2 busiest indexes (index rate 7K e/s) are falling behind by 10 to 20 minutes. They were up to date before the upgrade and I was happil… --- ## [How to install bulk data into elasticsearch via curl](https://discuss.elastic.co/t/how-to-install-bulk-data-into-elasticsearch-via-curl/204590)
**Author:** [@Sukhen](https://discuss.elastic.co/u/Sukhen)\ **Replies:** 1\ **Last updated:** [October 22, 2019, 7:35am UTC](https://discuss.elastic.co/t/how-to-install-bulk-data-into-elasticsearch-via-curl/204590 "2019-10-22T07:35:35Z")
How to a upload a bulk data to elastic search via curl.. --- ## [Bucket Aggregation Query inside Composite Aggregation giving wrong answer](https://discuss.elastic.co/t/bucket-aggregation-query-inside-composite-aggregation-giving-wrong-answer/204588)
**Author:** [@nitish1402](https://discuss.elastic.co/u/nitish1402)\ **Replies:** 0\ **Last updated:** [October 22, 2019, 7:07am UTC](https://discuss.elastic.co/t/bucket-aggregation-query-inside-composite-aggregation-giving-wrong-answer/204588 "2019-10-22T07:07:37Z")
I am using elastic version 6.2.4 , and my document looks like this \[ { "viewingSessionId": "7484954c-1b4b-40b1-8557-4eccf1515691\_0", "browserType": "Chrome", "programId": "program:703", "sessionStartTi… --- ## [Insert {now-1m/d} failure](https://discuss.elastic.co/t/insert-now-1m-d-failure/204160)
**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\ **Replies:** 1\ **Last updated:** [October 22, 2019, 6:42am UTC](https://discuss.elastic.co/t/insert-now-1m-d-failure/204160 "2019-10-22T06:42:59Z")
Hello is it possible to insert a document using the current time, like this? PUT /tmp { "mappings": { "properties": { "@timestamp": { "type": "date" } } } } POST tmp/\_doc/1 { "@times… --- ## [Elasticsearch Query with pattern and time sequence](https://discuss.elastic.co/t/elasticsearch-query-with-pattern-and-time-sequence/204017)
**Author:** [@Mudboyzh](https://discuss.elastic.co/u/Mudboyzh)\ **Replies:** 3\ **Last updated:** [October 22, 2019, 6:28am UTC](https://discuss.elastic.co/t/elasticsearch-query-with-pattern-and-time-sequence/204017 "2019-10-22T06:28:42Z")
I have some event logs in elasticsearch. Each log has timestamp, action and userId. I want to find the user whose logs have the time sequential condition. Here is some sample data. +---------------------+---------+-----… --- ## [Index lifecycle Management: Index Name](https://discuss.elastic.co/t/index-lifecycle-management-index-name/204428)
**Author:** [@ZMMWMY](https://discuss.elastic.co/u/ZMMWMY)\ **Replies:** 6\ **Last updated:** [October 22, 2019, 6:12am UTC](https://discuss.elastic.co/t/index-lifecycle-management-index-name/204428 "2019-10-22T06:12:43Z")
If I want to use the life cycle, then the index is named after the end of 00001? --- ## [What's the best way to improve performance if thousands of filters?](https://discuss.elastic.co/t/whats-the-best-way-to-improve-performance-if-thousands-of-filters/204250)
**Author:** [@Morriaty](https://discuss.elastic.co/u/Morriaty)\ **Replies:** 6\ **Last updated:** [October 22, 2019, 5:42am UTC](https://discuss.elastic.co/t/whats-the-best-way-to-improve-performance-if-thousands-of-filters/204250 "2019-10-22T05:42:36Z")
The situation is about document level security. A sample document would be like the following { "create\_time": 1500000000, "title": "xxxxxxxxxxxxxxxxxxx", "access\_group": \["g1", "g2716", "… --- ## [Encountering "only value lists are allowed in serialized settings" while creating a new index](https://discuss.elastic.co/t/encountering-only-value-lists-are-allowed-in-serialized-settings-while-creating-a-new-index/204467)
**Author:** [@Avhirup\_Chakraborty](https://discuss.elastic.co/u/Avhirup_Chakraborty)\ **Replies:** 2\ **Last updated:** [October 22, 2019, 3:12am UTC](https://discuss.elastic.co/t/encountering-only-value-lists-are-allowed-in-serialized-settings-while-creating-a-new-index/204467 "2019-10-22T03:12:11Z")
Hello all, I am trying to create an index and trying to define mappings for index. My Elasticsearch version is 7.3.2. Below is the code snippet I am trying. PUT dish { "settings": { "index": { "number\_of\_… --- ## [Elasticsearch 7.x and geo\_point Type: can not do it via index\_template mapping?](https://discuss.elastic.co/t/elasticsearch-7-x-and-geo-point-type-can-not-do-it-via-index-template-mapping/204544)
**Author:** [@lrsmith](https://discuss.elastic.co/u/lrsmith)\ **Replies:** 2\ **Last updated:** [October 22, 2019, 2:46am UTC](https://discuss.elastic.co/t/elasticsearch-7-x-and-geo-point-type-can-not-do-it-via-index-template-mapping/204544 "2019-10-22T02:46:16Z")
I have an ES 7.1 cluster running locally. I forward some AWS ELB logs to it, via logstash. I am getting geoip data, but I want to use a Kibana visualization that relies on geo\_point data type. RIght now I get an error in… --- ## [Is it possible to downgrade a cluster without any data loss?](https://discuss.elastic.co/t/is-it-possible-to-downgrade-a-cluster-without-any-data-loss/203755)
**Author:** [@geethusureshkrishna](https://discuss.elastic.co/u/geethusureshkrishna)\ **Replies:** 10\ **Last updated:** [October 22, 2019, 2:02am UTC](https://discuss.elastic.co/t/is-it-possible-to-downgrade-a-cluster-without-any-data-loss/203755 "2019-10-22T02:02:51Z")
I have an upgraded the Elasticsearch cluster with version 7.3.2 and now I want to downgrade it to the version 6.8.1. Is it possible to make it happen without any data loss? Live data is pushing to the cluster. --- ## [Job for elasticsearch.service failed because the service did not take the steps required by its unit configuration](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-service-did-not-take-the-steps-required-by-its-unit-configuration/203905)
**Author:** [@bayardk](https://discuss.elastic.co/u/bayardk)\ **Replies:** 3\ **Last updated:** [October 22, 2019, 12:42am UTC](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-service-did-not-take-the-steps-required-by-its-unit-configuration/203905 "2019-10-22T00:42:00Z")
Hi. I've just installed Elasticsearch 7.4 on three openSuSE LEAP 15.1 machines. Two are fine, one throws this systemd error: $ sudo systemctl start elasticsearch Job for elasticsearch.service failed because the service… --- ## [Issues with NEST 7. "The stream with Id and Tag is disposed."](https://discuss.elastic.co/t/issues-with-nest-7-the-stream-with-id-and-tag-is-disposed/203690)
**Author:** [@andrx](https://discuss.elastic.co/u/andrx)\ **Replies:** 8\ **Last updated:** [October 22, 2019, 12:28am UTC](https://discuss.elastic.co/t/issues-with-nest-7-the-stream-with-id-and-tag-is-disposed/203690 "2019-10-22T00:28:02Z")
After update to Nest7 (basically nuget, no other changes) occasionally getting this error for a process that usually runs for 15 minutes. Sometimes it happens during updating documents by id, sometimes bulk operations. … --- ## [Recommended Node.js helper library to build queries](https://discuss.elastic.co/t/recommended-node-js-helper-library-to-build-queries/204563)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 0\ **Last updated:** [October 21, 2019, 11:11pm UTC](https://discuss.elastic.co/t/recommended-node-js-helper-library-to-build-queries/204563 "2019-10-21T23:11:59Z")
Hello. I was wondering if there is one official (or prefered) Node.js library to help build query DSL queries. I've used "bodybuilder" in the past, but since I'm starting a new project soon I was wondering if this is t… --- ## [Assistance Required Resolving Index Mapping Error on Text / Keyword Field](https://discuss.elastic.co/t/assistance-required-resolving-index-mapping-error-on-text-keyword-field/203938)
**Author:** [@elasticTrouble](https://discuss.elastic.co/u/elasticTrouble)\ **Replies:** 1\ **Last updated:** [October 21, 2019, 10:51pm UTC](https://discuss.elastic.co/t/assistance-required-resolving-index-mapping-error-on-text-keyword-field/203938 "2019-10-21T22:51:12Z")
Howdy Elastic Community, I've got what I believe is a relatively simple issue that I need assistance resolving. Even though I believe I know the root cause of the issue, I'm asking for help because I haven't fully wrapp… --- ## [Conditional rollover in elasticsearch output](https://discuss.elastic.co/t/conditional-rollover-in-elasticsearch-output/204333)
**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\ **Replies:** 4\ **Last updated:** [October 21, 2019, 9:48pm UTC](https://discuss.elastic.co/t/conditional-rollover-in-elasticsearch-output/204333 "2019-10-21T21:48:02Z")
Hello - In Filebeat, how do i specify conditional custom rollover index names in the Elasticsearch output block? psuedo: when tag = "indexa" write events to the ilm.rollover\_alias:"indexa", but when tag = "indexb" write… --- ## [ILM handling out of order ingest](https://discuss.elastic.co/t/ilm-handling-out-of-order-ingest/204519)
**Author:** [@danielyahn](https://discuss.elastic.co/u/danielyahn)\ **Replies:** 5\ **Last updated:** [October 21, 2019, 9:25pm UTC](https://discuss.elastic.co/t/ilm-handling-out-of-order-ingest/204519 "2019-10-21T21:25:05Z")
Background Current production cluster (6.5.x) has time series indices with hourly naming convention indexname-YYYYMMDDHH. We see variance with index sizes because our time series data has seasonality. It causes the clus… --- ## [Aggregation date\_histogram and terms does not respect min\_doc\_count](https://discuss.elastic.co/t/aggregation-date-histogram-and-terms-does-not-respect-min-doc-count/203637)
**Author:** [@thernstig](https://discuss.elastic.co/u/thernstig)\ **Replies:** 2\ **Last updated:** [October 21, 2019, 7:32pm UTC](https://discuss.elastic.co/t/aggregation-date-histogram-and-terms-does-not-respect-min-doc-count/203637 "2019-10-21T19:32:36Z")
I am using an aggregation that looks something like this: "aggs": { "dates": { "date\_histogram": { "field": "timestamp", "interval": "1h" }, "aggs": { "birds": { … --- ## [Case insensitive search in terms query](https://discuss.elastic.co/t/case-insensitive-search-in-terms-query/204139)
**Author:** [@Seetha93](https://discuss.elastic.co/u/Seetha93)\ **Replies:** 6\ **Last updated:** [October 21, 2019, 8:14pm UTC](https://discuss.elastic.co/t/case-insensitive-search-in-terms-query/204139 "2019-10-21T20:14:59Z")
Is it possible to make terms query case insensitive ? The fields being queried are text field. --- ## [\[Questions ES/Helm charts\] Difference between two types of services](https://discuss.elastic.co/t/questions-es-helm-charts-difference-between-two-types-of-services/204282)
**Author:** [@usamaahmadkhan](https://discuss.elastic.co/u/usamaahmadkhan)\ **Replies:** 3\ **Last updated:** [October 21, 2019, 7:25pm UTC](https://discuss.elastic.co/t/questions-es-helm-charts-difference-between-two-types-of-services/204282 "2019-10-21T19:25:46Z")
Hi, I was exploring Helm charts for Elasticsearch to deploy on my k8s cluster. I have 2 questions: I successfully deployed 1 master 1 client and 2 data nodes. 6 services were created 2 for each distinct type (normal a… --- ## [High Request Overhead Not Captured by Took](https://discuss.elastic.co/t/high-request-overhead-not-captured-by-took/204275)
**Author:** [@Zach\_Diemer](https://discuss.elastic.co/u/Zach_Diemer)\ **Replies:** 2\ **Last updated:** [October 21, 2019, 7:17pm UTC](https://discuss.elastic.co/t/high-request-overhead-not-captured-by-took/204275 "2019-10-21T19:17:35Z")
Hey all! I've been trying to nail down where I can improve performance of my Elasticsearch cluster, and I've been specifically attempting to find out more about what is causing some high overhead in my end-to-end request… --- ## [Define score value for searches and sum the total](https://discuss.elastic.co/t/define-score-value-for-searches-and-sum-the-total/204194)
**Author:** [@Reemface](https://discuss.elastic.co/u/Reemface)\ **Replies:** 2\ **Last updated:** [October 21, 2019, 7:05pm UTC](https://discuss.elastic.co/t/define-score-value-for-searches-and-sum-the-total/204194 "2019-10-21T19:05:53Z")
Hi All! I am fairly new in the world of ElasticSearch, and using it in a very basic way. I would like to use Elastic in a more complex way, but i can't get it to work in the way i would like. At this moment we have ou… --- ## [Benchmarking Remote Cluster Stalls in Preparing](https://discuss.elastic.co/t/benchmarking-remote-cluster-stalls-in-preparing/204253)
**Author:** [@toneyalexander](https://discuss.elastic.co/u/toneyalexander)\ **Replies:** 6\ **Last updated:** [October 21, 2019, 7:03pm UTC](https://discuss.elastic.co/t/benchmarking-remote-cluster-stalls-in-preparing/204253 "2019-10-21T19:03:06Z")
I was following the instructions here https://esrally.readthedocs.io/en/stable/recipes.html to benchmark a remote cluster. I have 2 EC2 instances with everything set up to run rally. The esrallyd commands run without any… --- ## [Elasticsearch S3 Backup Failing](https://discuss.elastic.co/t/elasticsearch-s3-backup-failing/204524)
**Author:** [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\ **Replies:** 2\ **Last updated:** [October 21, 2019, 6:15pm UTC](https://discuss.elastic.co/t/elasticsearch-s3-backup-failing/204524 "2019-10-21T18:15:21Z")
Hi, We run a backup of our data every 3 hours. We have recently started getting the below message because of which the backup fails sometimes. When we retry sometimes it succeeds, sometimes it fails with the same error. … --- ## [Cluster's node distributed in two subnets](https://discuss.elastic.co/t/clusters-node-distributed-in-two-subnets/204372)
**Author:** [@tsmbalu](https://discuss.elastic.co/u/tsmbalu)\ **Replies:** 2\ **Last updated:** [October 20, 2019, 6:46pm UTC](https://discuss.elastic.co/t/clusters-node-distributed-in-two-subnets/204372 "2019-10-20T18:46:31Z")
We have created elasticsearch cluster with 4 nodes which is distributed in two subnets of aws with all the nodes with the role assigned as master, data, ingest and. It was all discovered and master node is elected. While… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1116) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1118)