# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1137 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1138 --- ## [Search for a parent or child](https://discuss.elastic.co/t/search-for-a-parent-or-child/201914)
**Author:** [@NEkman](https://discuss.elastic.co/u/NEkman)\ **Replies:** 0\ **Last updated:** [October 2, 2019, 8:58am UTC](https://discuss.elastic.co/t/search-for-a-parent-or-child/201914 "2019-10-02T08:58:28Z")
We are investigating splitting nested documents up into parent/child documents. I'm wondering, how can we query/search for a document of a specific type? E.g. we index questions and answers, and want to be able to effic… --- ## [How to remove decommissioned node from kibana](https://discuss.elastic.co/t/how-to-remove-decommissioned-node-from-kibana/201910)
**Author:** [@chanakagl](https://discuss.elastic.co/u/chanakagl)\ **Replies:** 0\ **Last updated:** [October 2, 2019, 8:49am UTC](https://discuss.elastic.co/t/how-to-remove-decommissioned-node-from-kibana/201910 "2019-10-02T08:49:50Z")
Hi, I have removed bad coordinator node from our cluster but it's still appearing in Kibana monitoring dashboard. This is a AWS EC2 instance which i have already stopped. Do I need to deleted the node from monitoring in… --- ## [Where can I find all release note from version to version?](https://discuss.elastic.co/t/where-can-i-find-all-release-note-from-version-to-version/201887)
**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\ **Replies:** 1\ **Last updated:** [October 2, 2019, 8:49am UTC](https://discuss.elastic.co/t/where-can-i-find-all-release-note-from-version-to-version/201887 "2019-10-02T08:49:15Z")
Hello all, My ELK stack is currently 6.5.4, I would like to see the changes from 6.5.4 all the way to 7.4.0 Where can I find the full details of the updates? I would like to do the updates after reading the changes. … --- ## [Move documents from one index to another](https://discuss.elastic.co/t/move-documents-from-one-index-to-another/201172)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 5\ **Last updated:** [October 2, 2019, 8:43am UTC](https://discuss.elastic.co/t/move-documents-from-one-index-to-another/201172 "2019-10-02T08:43:37Z")
Hi guys, I have the index where I store data. My question is whether I can restore the data that meet some conditions to a new index by using script reindexing so I can visualize the data properly. Basically I'm thinki… --- ## [Setting a default value for missing fields during indexing or reindexing](https://discuss.elastic.co/t/setting-a-default-value-for-missing-fields-during-indexing-or-reindexing/201908)
**Author:** [@Rahul\_Choudhury](https://discuss.elastic.co/u/Rahul_Choudhury)\ **Replies:** 0\ **Last updated:** [October 2, 2019, 8:43am UTC](https://discuss.elastic.co/t/setting-a-default-value-for-missing-fields-during-indexing-or-reindexing/201908 "2019-10-02T08:43:34Z")
I am trying to create an elastic search mapping where during indexing of data if a field is missing it should add some default value. PUT my\_index { "mappings": { "\_doc": { "properties": { "status\_c… --- ## [PKI realm rolemapping](https://discuss.elastic.co/t/pki-realm-rolemapping/201481)
**Author:** [@rnataraja](https://discuss.elastic.co/u/rnataraja)\ **Replies:** 4\ **Last updated:** [October 2, 2019, 7:44am UTC](https://discuss.elastic.co/t/pki-realm-rolemapping/201481 "2019-10-02T07:44:44Z")
Hello: Iam trying to use the PKI realm and derive roles and mappings from the CN as follows. Is it possible to do this? This is with ES 6.8.3. In the role\_mapping.yaml power\_user: "cn=power\_\*,ou=example,o=com" And … --- ## [Setting Heapsize for Java](https://discuss.elastic.co/t/setting-heapsize-for-java/201898)
**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\ **Replies:** 2\ **Last updated:** [October 2, 2019, 7:40am UTC](https://discuss.elastic.co/t/setting-heapsize-for-java/201898 "2019-10-02T07:40:01Z")
Hi all, I have encounter this issue "Error occurred during initialization of VM, Initial heap size set to a larger value than the maximum heap size". With the InitialHeapSize to be so huge, does that means I have to se… --- ## [\_field\_caps API takes long time (more than a minute) to return results causing kibana to not be able to refresh index pattern](https://discuss.elastic.co/t/field-caps-api-takes-long-time-more-than-a-minute-to-return-results-causing-kibana-to-not-be-able-to-refresh-index-pattern/198933)
**Author:** [@nikhil-bhat](https://discuss.elastic.co/u/nikhil-bhat)\ **Replies:** 5\ **Last updated:** [September 30, 2019, 4:44pm UTC](https://discuss.elastic.co/t/field-caps-api-takes-long-time-more-than-a-minute-to-return-results-causing-kibana-to-not-be-able-to-refresh-index-pattern/198933 "2019-09-30T16:44:13Z")
Elasticsearch version 6.7.2 JVM version Java HotSpot(TM) 64-Bit Server VM (1.8.0\_172): OS version Linux field\_caps API takes long time (more than a minute) to return results : Steps to reproduce : 1.) Index patte… --- ## [Search after in spring](https://discuss.elastic.co/t/search-after-in-spring/201767)
**Author:** [@luongky06](https://discuss.elastic.co/u/luongky06)\ **Replies:** 2\ **Last updated:** [October 2, 2019, 4:44am UTC](https://discuss.elastic.co/t/search-after-in-spring/201767 "2019-10-02T04:44:25Z")
Hi all, I'm try to search in ES via spring boot, and I have a stuck with search after . So I have a search api look like below: GET /domain/\_search { "size": 1000, "query": { "bool": { "must": \[ {"match": { "location"… --- ## [Similarity Search in Vector Space with Error](https://discuss.elastic.co/t/similarity-search-in-vector-space-with-error/201546)
**Author:** [@adouib](https://discuss.elastic.co/u/adouib)\ **Replies:** 1\ **Last updated:** [October 2, 2019, 12:56am UTC](https://discuss.elastic.co/t/similarity-search-in-vector-space-with-error/201546 "2019-10-02T00:56:42Z")
I'm trying to test the new elasticsearch functionality 'word2vec for text similarity'. I use this little example, but I have the following error! I would like to have feedback and tell me where is the error, knowing that… --- ## [Delete / purge data from fields](https://discuss.elastic.co/t/delete-purge-data-from-fields/200959)
**Author:** [@shappy123](https://discuss.elastic.co/u/shappy123)\ **Replies:** 9\ **Last updated:** [October 1, 2019, 11:51pm UTC](https://discuss.elastic.co/t/delete-purge-data-from-fields/200959 "2019-10-01T23:51:39Z")
Hi Guys, Would highly appreciate if you guys can please assist me on this , I need to delete/purge existing + old data which contains these fields : fields.SourceContext & fields.RequestBody under the fields.applicatio… --- ## [Elasticsearch 6.1.1 client running OOM and dumping heap](https://discuss.elastic.co/t/elasticsearch-6-1-1-client-running-oom-and-dumping-heap/201867)
**Author:** [@cching](https://discuss.elastic.co/u/cching)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 8:45pm UTC](https://discuss.elastic.co/t/elasticsearch-6-1-1-client-running-oom-and-dumping-heap/201867 "2019-10-01T20:45:31Z")
We are having troubles with Elasticsearch 6.1.1 running in client mode. Basically it runs as a frontend for bulk requests from log stash and queries from Kibana. Analyzing the heap dump shows about half the memory is t… --- ## [RestClient always gives “I/O reactor status: STOPPED”](https://discuss.elastic.co/t/restclient-always-gives-i-o-reactor-status-stopped/201860)
**Author:** [@garry12](https://discuss.elastic.co/u/garry12)\ **Replies:** 1\ **Last updated:** [October 1, 2019, 8:08pm UTC](https://discuss.elastic.co/t/restclient-always-gives-i-o-reactor-status-stopped/201860 "2019-10-01T20:08:02Z")
I followed this thread but not able to resolve this issue I have a rest high level client and Elasticsearch 7.2 I am trying to bulk insert and keep getting this error -"java.lang.IllegalStateException: Request cannot be … --- ## [Pertaining missing data in an index](https://discuss.elastic.co/t/pertaining-missing-data-in-an-index/201841)
**Author:** [@orokusaki](https://discuss.elastic.co/u/orokusaki)\ **Replies:** 2\ **Last updated:** [October 1, 2019, 7:32pm UTC](https://discuss.elastic.co/t/pertaining-missing-data-in-an-index/201841 "2019-10-01T19:32:46Z")
I realize that, of course, Elasticsearch is not an ACID-compliant data store, but I have a question pertaining missing data. Out of 5 or so million documents of relatively small size (300 to 1,000 source bytes per), we'v… --- ## [Elasticsearch no longer works under systemd (7.4.0 on CentOS 7.7.1908)?](https://discuss.elastic.co/t/elasticsearch-no-longer-works-under-systemd-7-4-0-on-centos-7-7-1908/201846)
**Author:** [@IanC](https://discuss.elastic.co/u/IanC)\ **Replies:** 2\ **Last updated:** [October 1, 2019, 5:22pm UTC](https://discuss.elastic.co/t/elasticsearch-no-longer-works-under-systemd-7-4-0-on-centos-7-7-1908/201846 "2019-10-01T17:22:58Z")
I'm at a loss here. I have a WHM-managed CentOS 7.7 that's regularly applying patches in the background. I did a reboot today to have a kernel update take effect and when the system came back up ElasticSearch failed to s… --- ## [Mapper\_parsing\_exception on data from AWS Lambda](https://discuss.elastic.co/t/mapper-parsing-exception-on-data-from-aws-lambda/201806)
**Author:** [@Arty\_Sidorenko](https://discuss.elastic.co/u/Arty_Sidorenko)\ **Replies:** 2\ **Last updated:** [October 1, 2019, 5:14pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-on-data-from-aws-lambda/201806 "2019-10-01T17:14:58Z")
I'm trying to send http logs from AWS Cloudwatch to ES (Kibana), and a large chunk of logs are not being sent with the following error message: mapper\_parsing\_exception, "reason":"object mapping for \[responseData.client… --- ## [How to get Elasticsearch terms aggregation to filter multi value fields by the same method as an aggs filter?](https://discuss.elastic.co/t/how-to-get-elasticsearch-terms-aggregation-to-filter-multi-value-fields-by-the-same-method-as-an-aggs-filter/201839)
**Author:** [@GrandBoonino](https://discuss.elastic.co/u/GrandBoonino)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 3:58pm UTC](https://discuss.elastic.co/t/how-to-get-elasticsearch-terms-aggregation-to-filter-multi-value-fields-by-the-same-method-as-an-aggs-filter/201839 "2019-10-01T15:58:14Z")
I'm looking to create a query to give me all the top widgets in the widget field of my document to work with an autocomplete search. It's a multi value field with a keyword tokenizer and an autocomplete tokenizer. The … --- ## [Do we have a feature to map services for monoliths or microservices in elastic search](https://discuss.elastic.co/t/do-we-have-a-feature-to-map-services-for-monoliths-or-microservices-in-elastic-search/201837)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 3:51pm UTC](https://discuss.elastic.co/t/do-we-have-a-feature-to-map-services-for-monoliths-or-microservices-in-elastic-search/201837 "2019-10-01T15:51:43Z")
Hi I was looking for a feature where we can map multiple services in an organization or an application with each other. Example: we can map database to application servers or other servers. If yes, Can you please guide … --- ## [Red status: blocked by: \[SERVICE\_UNAVAILABLE/1/state not recovered / initialized\]](https://discuss.elastic.co/t/red-status-blocked-by-service-unavailable-1-state-not-recovered-initialized/201520)
**Author:** [@Behzad\_Rezaie](https://discuss.elastic.co/u/Behzad_Rezaie)\ **Replies:** 8\ **Last updated:** [October 1, 2019, 3:33pm UTC](https://discuss.elastic.co/t/red-status-blocked-by-service-unavailable-1-state-not-recovered-initialized/201520 "2019-10-01T15:33:41Z")
Hi pals, A few days ago we got the following error on our elastic node: \[FORBIDDEN/12/index read-only / allow delete (api)\] We found out that more disk space is needed, since only 5% of the space had remained for the … --- ## [Elasticsearch - Search and filter by price](https://discuss.elastic.co/t/elasticsearch-search-and-filter-by-price/201671)
**Author:** [@Brandsley](https://discuss.elastic.co/u/Brandsley)\ **Replies:** 0\ **Last updated:** [September 30, 2019, 3:33pm UTC](https://discuss.elastic.co/t/elasticsearch-search-and-filter-by-price/201671 "2019-09-30T15:33:58Z")
I have some array with promocodes (comes from request): $promocodes = \['promo1', 'promo2', 'promo4'\]; And I have products data in Elasticsearch (as example, I will give data for three products): // Product data exampl… --- ## [Elastic TransportBulkAction error](https://discuss.elastic.co/t/elastic-transportbulkaction-error/201832)
**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 3:16pm UTC](https://discuss.elastic.co/t/elastic-transportbulkaction-error/201832 "2019-10-01T15:16:36Z")
Hi, I am getting Transport Bulk Action issue and it's keep repeating, all the logs getting rejected, can someone please suggest me, Thanks. \[2019-10-01T15:10:40,013\]\[ERROR\]\[o.e.a.b.TransportBulkAction\] \[elastic1\] faile… --- ## [How to query current cluster shard allocation setting](https://discuss.elastic.co/t/how-to-query-current-cluster-shard-allocation-setting/201825)
**Author:** [@LeeSyd](https://discuss.elastic.co/u/LeeSyd)\ **Replies:** 1\ **Last updated:** [October 1, 2019, 2:46pm UTC](https://discuss.elastic.co/t/how-to-query-current-cluster-shard-allocation-setting/201825 "2019-10-01T14:46:54Z")
I may be doing something stupid. I'm sure I've queried under older versions but can't seem to query through the API or console to determine current cluster shard allocation setting - is anybody able to assist please? I … --- ## [Is including IP address fields in rollup terms not allowed?](https://discuss.elastic.co/t/is-including-ip-address-fields-in-rollup-terms-not-allowed/201827)
**Author:** [@wmassingham](https://discuss.elastic.co/u/wmassingham)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 2:45pm UTC](https://discuss.elastic.co/t/is-including-ip-address-fields-in-rollup-terms-not-allowed/201827 "2019-10-01T14:45:19Z")
I have network device data I'm creating a rollup job for. I'd like to include the IP address data in the rollup, but it doesn't look like it's included in the "add terms fields" picker in Kibana when creating the job. Is… --- ## [Problem backing-up indexes when using VM on NAS](https://discuss.elastic.co/t/problem-backing-up-indexes-when-using-vm-on-nas/201818)
**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\ **Replies:** 1\ **Last updated:** [October 1, 2019, 2:39pm UTC](https://discuss.elastic.co/t/problem-backing-up-indexes-when-using-vm-on-nas/201818 "2019-10-01T14:39:52Z")
My files to be indexed are stored on volume1 of a Synology NAS elasticsearch, kibana and fscrawler are running on a VM, also on volume1 Hyper-Backup backs-up the contents of volume1 to a second volume(2) I would like … --- ## [SQL Aggregations and Translate](https://discuss.elastic.co/t/sql-aggregations-and-translate/201550)
**Author:** [@aklys](https://discuss.elastic.co/u/aklys)\ **Replies:** 1\ **Last updated:** [October 1, 2019, 2:38pm UTC](https://discuss.elastic.co/t/sql-aggregations-and-translate/201550 "2019-10-01T14:38:00Z")
When I run an SQL query such as this via the Elasticsearch API: { "query": "SELECT SUM(field1) \\/ COUNT(field2) as ratio FROM \\"test\*\\"" } It will return a nice clean ratio. But when I do a \_sql\\translate on it I get … --- ## [Is there a way to configure Uptime for reading Kafka](https://discuss.elastic.co/t/is-there-a-way-to-configure-uptime-for-reading-kafka/201822)
**Author:** [@bkleynbok](https://discuss.elastic.co/u/bkleynbok)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 2:16pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-configure-uptime-for-reading-kafka/201822 "2019-10-01T14:16:46Z")
Using ELK Stack 7.3.2 on Linux. Would like to use same layout as in Uptime Up/Down in Kibana to send a message to Kafka and get back a response. If this message was not received then show this as Down. --- ## [Got response code '401' after Securing the Stack](https://discuss.elastic.co/t/got-response-code-401-after-securing-the-stack/201087)
**Author:** [@mfisher](https://discuss.elastic.co/u/mfisher)\ **Replies:** 17\ **Last updated:** [October 1, 2019, 2:09pm UTC](https://discuss.elastic.co/t/got-response-code-401-after-securing-the-stack/201087 "2019-10-01T14:09:00Z")
I recently used this guide https://www.elastic.co/blog/getting-started-with-elasticsearch-security to secure our ELK stack. I am able to log in to Kibana and TSL is working correctly. However my syslogs from logstash h… --- ## [Geo\_point sort by distance](https://discuss.elastic.co/t/geo-point-sort-by-distance/201804)
**Author:** [@andrezenzen](https://discuss.elastic.co/u/andrezenzen)\ **Replies:** 7\ **Last updated:** [October 1, 2019, 2:00pm UTC](https://discuss.elastic.co/t/geo-point-sort-by-distance/201804 "2019-10-01T14:00:23Z")
I would like to know what would be the best way to perform a search and performing a sorting by distance, today \_geo\_distance filters and does not sort. What would be the best solution in which you need to perform two "s… --- ## [Which role are the Beats clients supposed to use to connect to Elastic?](https://discuss.elastic.co/t/which-role-are-the-beats-clients-supposed-to-use-to-connect-to-elastic/201688)
**Author:** [@Wanderer](https://discuss.elastic.co/u/Wanderer)\ **Replies:** 3\ **Last updated:** [October 1, 2019, 1:49pm UTC](https://discuss.elastic.co/t/which-role-are-the-beats-clients-supposed-to-use-to-connect-to-elastic/201688 "2019-10-01T13:49:47Z")
Is there already a built-in role for Beats clients in Elastic or does one need to be created? --- ## [Multi field query](https://discuss.elastic.co/t/multi-field-query/201734)
**Author:** [@Aditya\_Kar](https://discuss.elastic.co/u/Aditya_Kar)\ **Replies:** 0\ **Last updated:** [October 1, 2019, 6:38am UTC](https://discuss.elastic.co/t/multi-field-query/201734 "2019-10-01T06:38:05Z")
Dear sir, If I want to search from the index from multiple keywords then which one is appropriate and we can get a better result. GET subject\_index/\_search { "query": { "bool": { "must": \[ { "bool": { "should": … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1136) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1138)