# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1174

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1175

---

## [Aggregation Partition Number](https://discuss.elastic.co/t/aggregation-partition-number/196338)

<div class="topic-metadata">

**Author:** [@darshitdrg](https://discuss.elastic.co/u/darshitdrg)\
**Replies:** 6\
**Last updated:** [August 28, 2019, 6:06am UTC](https://discuss.elastic.co/t/aggregation-partition-number/196338 "2019-08-28T06:06:11Z")

</div>

I have some crores data in elastic search. Now, i am trying to Fetch data with Some Aggregation and sub aggregations. (total 15 aggregations including 14 sub aggregations). For those data, I come to know that elastic se…

---

## [Elasticsearch ranking shorter/less relevant titles first](https://discuss.elastic.co/t/elasticsearch-ranking-shorter-less-relevant-titles-first/197408)

<div class="topic-metadata">

**Author:** [@Cannon\_Moyer](https://discuss.elastic.co/u/Cannon_Moyer)\
**Replies:** 1\
**Last updated:** [August 30, 2019, 7:29am UTC](https://discuss.elastic.co/t/elasticsearch-ranking-shorter-less-relevant-titles-first/197408 "2019-08-30T07:29:16Z")

</div>

I'm working on a product search with Elasticsearch 7.3. The product titles are not formatted the same but there is nothing I can do about this. Some titles might look like this: Ford Hub Bearing And others like this: …

---

## [INDEXING Python Dict - Date Issue](https://discuss.elastic.co/t/indexing-python-dict-date-issue/197455)

<div class="topic-metadata">

**Author:** [@popalav](https://discuss.elastic.co/u/popalav)\
**Replies:** 0\
**Last updated:** [August 30, 2019, 7:05am UTC](https://discuss.elastic.co/t/indexing-python-dict-date-issue/197455 "2019-08-30T07:05:38Z")

</div>

Hello, i am trying to index a list of dicts(releases is a list of dicts) containing dates, but when i see the data in kibana, the dict which don't have date value ar not shown. Can you please help? Maybe if i try to inde…

---

## [Dendrogram image is not visible in d3 tutorial of elastic search](https://discuss.elastic.co/t/dendrogram-image-is-not-visible-in-d3-tutorial-of-elastic-search/197448)

<div class="topic-metadata">

**Author:** [@Vijay\_Gupta](https://discuss.elastic.co/u/Vijay_Gupta)\
**Replies:** 1\
**Last updated:** [August 30, 2019, 7:03am UTC](https://discuss.elastic.co/t/dendrogram-image-is-not-visible-in-d3-tutorial-of-elastic-search/197448 "2019-08-30T07:03:59Z")

</div>

Hi Team, I am reviewing " Data visualization with Elasticsearch aggregations and D3" on elastic search website, I noticed that at the end dendrogram image is not visible. when opened link in new tab its says not found, …

---

## [Match query doesn't work well with Genre Expansion Synonyms](https://discuss.elastic.co/t/match-query-doesnt-work-well-with-genre-expansion-synonyms/197272)

<div class="topic-metadata">

**Author:** [@Fong\_Ng](https://discuss.elastic.co/u/Fong_Ng)\
**Replies:** 2\
**Last updated:** [August 29, 2019, 11:25pm UTC](https://discuss.elastic.co/t/match-query-doesnt-work-well-with-genre-expansion-synonyms/197272 "2019-08-29T23:25:21Z")

</div>

Elasticsearch 7.2, node.js Synonym data: \[ "khaki =\> khaki,green", "cat =\> cat,pet"\] Index mapping: PutMapping content: { settings: { "analysis": { "char\_filter": { "same\_word…

---

## [Delete the indexes of more than 7 days](https://discuss.elastic.co/t/delete-the-indexes-of-more-than-7-days/197141)

<div class="topic-metadata">

**Author:** [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\
**Replies:** 4\
**Last updated:** [August 30, 2019, 6:29am UTC](https://discuss.elastic.co/t/delete-the-indexes-of-more-than-7-days/197141 "2019-08-30T06:29:30Z")

</div>

Hi! I was reading this two links in order to create a policy to delete the indexes of more than 7 days. https://www.elastic.co/guide/en/elasticsearch/reference/current/getting-started-index-lifecycle-management.html h…

---

## [Can't configure Slack Watcher action](https://discuss.elastic.co/t/cant-configure-slack-watcher-action/197271)

<div class="topic-metadata">

**Author:** [@rokcarl](https://discuss.elastic.co/u/rokcarl)\
**Replies:** 3\
**Last updated:** [August 30, 2019, 5:51am UTC](https://discuss.elastic.co/t/cant-configure-slack-watcher-action/197271 "2019-08-30T05:51:37Z")

</div>

I can't seem to configure the Slack Watcher action. I'm running the Elastic stack through Docker Swarm. I have the Slack account config in elasticsearch.yml: xpack.notification.slack: account: monitoring: m…

---

## [Log rotation - help](https://discuss.elastic.co/t/log-rotation-help/197251)

<div class="topic-metadata">

**Author:** [@shappy123](https://discuss.elastic.co/u/shappy123)\
**Replies:** 5\
**Last updated:** [August 30, 2019, 5:38am UTC](https://discuss.elastic.co/t/log-rotation-help/197251 "2019-08-30T05:38:06Z")

</div>

Hi Guys, I need urgent help, I am using elastic on cloud ( not locally hosted ), I just want to know how I can enable log rotation or configure it, can someone please help me on this , as most of the documentation for l…

---

## [Kibana display zero shards in Monitoring nodes tab](https://discuss.elastic.co/t/kibana-display-zero-shards-in-monitoring-nodes-tab/195129)

<div class="topic-metadata">

**Author:** [@worapojc](https://discuss.elastic.co/u/worapojc)\
**Replies:** 15\
**Last updated:** [August 30, 2019, 4:53am UTC](https://discuss.elastic.co/t/kibana-display-zero-shards-in-monitoring-nodes-tab/195129 "2019-08-30T04:53:00Z")

</div>

Hi Elastic team, I'm using Elastic Stack 7.2.0. Kibana displays zero shards for each node in the monitoring tab. But it can display total shards correctly. What is the problem?

---

## [Roles needed to write Logstash events](https://discuss.elastic.co/t/roles-needed-to-write-logstash-events/197195)

<div class="topic-metadata">

**Author:** [@zpraxis](https://discuss.elastic.co/u/zpraxis)\
**Replies:** 2\
**Last updated:** [August 30, 2019, 3:19am UTC](https://discuss.elastic.co/t/roles-needed-to-write-logstash-events/197195 "2019-08-30T03:19:31Z")

</div>

Hi there! I am setting up Logstash to write events in Elasticsearch, and am configuring some security as well, e.g. I intend to use basic user/password authentication. In that sense, I have already created a role called…

---

## [Help me understand why bulk index with op\_type create is slow when duplicate records exist](https://discuss.elastic.co/t/help-me-understand-why-bulk-index-with-op-type-create-is-slow-when-duplicate-records-exist/197429)

<div class="topic-metadata">

**Author:** [@esmattdawson](https://discuss.elastic.co/u/esmattdawson)\
**Replies:** 0\
**Last updated:** [August 30, 2019, 1:16am UTC](https://discuss.elastic.co/t/help-me-understand-why-bulk-index-with-op-type-create-is-slow-when-duplicate-records-exist/197429 "2019-08-30T01:16:52Z")

</div>

The took time for creating 7000 records in an index with no duplicates is 450ms, when all are duplicates its 7000ms, a 16x performance decrease. Also I see large spikes in GC collection times. When I use index it's 450…

---

## [Deleting index by curator on cluster](https://discuss.elastic.co/t/deleting-index-by-curator-on-cluster/197428)

<div class="topic-metadata">

**Author:** [@JohnM](https://discuss.elastic.co/u/JohnM)\
**Replies:** 1\
**Last updated:** [August 30, 2019, 1:41am UTC](https://discuss.elastic.co/t/deleting-index-by-curator-on-cluster/197428 "2019-08-30T01:41:10Z")

</div>

Sorry this could be a very basic. I am running ES 7 cluster with 3 servers. All 3 servers have data and one of them is acting as a master. 192.168.200.101 data master 192.168.200.102 data 192.168.200.103 data I need …

---

## [How to search in an array passing multiple values](https://discuss.elastic.co/t/how-to-search-in-an-array-passing-multiple-values/196603)

<div class="topic-metadata">

**Author:** [@shani\_angarkadu](https://discuss.elastic.co/u/shani_angarkadu)\
**Replies:** 2\
**Last updated:** [August 29, 2019, 7:15pm UTC](https://discuss.elastic.co/t/how-to-search-in-an-array-passing-multiple-values/196603 "2019-08-29T19:15:04Z")

</div>

I have filed with multiple values, { "applids": \[ "6512708", " 8234215" \] } how to pass multiple values and search ?

---

## [Cannot start elasticsearch on macOS Catalina](https://discuss.elastic.co/t/cannot-start-elasticsearch-on-macos-catalina/197389)

<div class="topic-metadata">

**Author:** [@ChadTaljaardt](https://discuss.elastic.co/u/ChadTaljaardt)\
**Replies:** 1\
**Last updated:** [August 29, 2019, 10:43pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-on-macos-catalina/197389 "2019-08-29T22:43:09Z")

</div>

I am getting this error:

---

## [Performance issue in my elastic search cluster](https://discuss.elastic.co/t/performance-issue-in-my-elastic-search-cluster/196948)

<div class="topic-metadata">

**Author:** [@Vivek\_Vardhan](https://discuss.elastic.co/u/Vivek_Vardhan)\
**Replies:** 7\
**Last updated:** [August 29, 2019, 9:39pm UTC](https://discuss.elastic.co/t/performance-issue-in-my-elastic-search-cluster/196948 "2019-08-29T21:39:42Z")

</div>

Hi Team I am running a simple bool term query on an index in ES. It took 33152ms to respond. Request - POST http://elastic\_server\_dns/index\_name/\_doc/\_search Body { "query": { "bool": { "mu…

---

## [How to modify terms query scoring function](https://discuss.elastic.co/t/how-to-modify-terms-query-scoring-function/197416)

<div class="topic-metadata">

**Author:** [@Veshnu\_Ramakrishnan](https://discuss.elastic.co/u/Veshnu_Ramakrishnan)\
**Replies:** 1\
**Last updated:** [August 29, 2019, 9:02pm UTC](https://discuss.elastic.co/t/how-to-modify-terms-query-scoring-function/197416 "2019-08-29T21:02:46Z")

</div>

My document is given bellow: { "display\_name": "WarriorWorld234", "friends": \[ "b2ad7a2c-cdf4-4d69-84df-696df7091bcd", "da64898a-d2cb-4f58-b636-a15c05bbad44" \] } My query is "terms": { "friends": \[ "66e7732…

---

## [Extract the values of a field from elasticsearch](https://discuss.elastic.co/t/extract-the-values-of-a-field-from-elasticsearch/196522)

<div class="topic-metadata">

**Author:** [@decodeit](https://discuss.elastic.co/u/decodeit)\
**Replies:** 3\
**Last updated:** [August 29, 2019, 7:20pm UTC](https://discuss.elastic.co/t/extract-the-values-of-a-field-from-elasticsearch/196522 "2019-08-29T19:20:18Z")

</div>

I have a field name across 100 documents. I want to extract the values that the name field has across all documents without returning duplicate. how can I achieve that. Thanks

---

## [Monitoring fail to insert due mapping error](https://discuss.elastic.co/t/monitoring-fail-to-insert-due-mapping-error/197401)

<div class="topic-metadata">

**Author:** [@Sebastian\_Herrera](https://discuss.elastic.co/u/Sebastian_Herrera)\
**Replies:** 0\
**Last updated:** [August 29, 2019, 6:40pm UTC](https://discuss.elastic.co/t/monitoring-fail-to-insert-due-mapping-error/197401 "2019-08-29T18:40:45Z")

</div>

Hello, i am having an issue with elasticsearch monitoring index, in elasticsearch i am having this log java.lang.IllegalArgumentException: Rejecting mapping update to \[.monitoring-es-6-2019.08.29\] as the final mapping …

---

## [StatusLogger Multiple logging implementations found warn message on adding elasticsearch jar](https://discuss.elastic.co/t/statuslogger-multiple-logging-implementations-found-warn-message-on-adding-elasticsearch-jar/196761)

<div class="topic-metadata">

**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\
**Replies:** 2\
**Last updated:** [August 29, 2019, 5:51pm UTC](https://discuss.elastic.co/t/statuslogger-multiple-logging-implementations-found-warn-message-on-adding-elasticsearch-jar/196761 "2019-08-29T17:51:32Z")

</div>

In an application using log4j with slf4j, I am trying to use elasticsearch jar which depends on log4j2. The application's logging dependency looks like this- \<dependency\> \<groupId\>org.slf4j\</groupId\> …

---

## [Strange behavior with bucket/pipeline aggregations](https://discuss.elastic.co/t/strange-behavior-with-bucket-pipeline-aggregations/197386)

<div class="topic-metadata">

**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\
**Replies:** 0\
**Last updated:** [August 29, 2019, 5:26pm UTC](https://discuss.elastic.co/t/strange-behavior-with-bucket-pipeline-aggregations/197386 "2019-08-29T17:26:56Z")

</div>

Hi I have logs index with events logged every sec. The date filed is request\_dtm. I am trying to build the data visualization to plot in below format to have 24 rows per a day. "Transaction Hour - Total Requests - Mi…

---

## [Conditional sort](https://discuss.elastic.co/t/conditional-sort/197372)

<div class="topic-metadata">

**Author:** [@Kennedy\_Batista](https://discuss.elastic.co/u/Kennedy_Batista)\
**Replies:** 1\
**Last updated:** [August 29, 2019, 5:15pm UTC](https://discuss.elastic.co/t/conditional-sort/197372 "2019-08-29T17:15:32Z")

</div>

Hi, I have the following index: "norm\_id": { "type": "keyword" }, "precedence": { "type": "float" }, …

---

## [Increase Elasticsearch Diskspace](https://discuss.elastic.co/t/increase-elasticsearch-diskspace/197379)

<div class="topic-metadata">

**Author:** [@Callonski](https://discuss.elastic.co/u/Callonski)\
**Replies:** 0\
**Last updated:** [August 29, 2019, 4:14pm UTC](https://discuss.elastic.co/t/increase-elasticsearch-diskspace/197379 "2019-08-29T16:14:03Z")

</div>

I'm running a ES cluster on GCE (Google compute engine). I'm starting to run out of space and increased the disk-space in the GCE console. Elasticsearch does not seem to pick up this change. Do I have to do some kind of…

---

## [Date\_histogram and top\_hits from unique values only](https://discuss.elastic.co/t/date-histogram-and-top-hits-from-unique-values-only/197363)

<div class="topic-metadata">

**Author:** [@tzn01](https://discuss.elastic.co/u/tzn01)\
**Replies:** 0\
**Last updated:** [August 29, 2019, 2:32pm UTC](https://discuss.elastic.co/t/date-histogram-and-top-hits-from-unique-values-only/197363 "2019-08-29T14:32:13Z")

</div>

Hi, I am trying to do a date\_histogram aggregation to show a sum of Duration for each hour. I have the following documents: { "EntryTimestamp": 1567029600000, "Username": "johndoe", "UpdateTimestamp": 1567029600000…

---

## [Elasticsearch output template\_name and template index pattern doubt](https://discuss.elastic.co/t/elasticsearch-output-template-name-and-template-index-pattern-doubt/197219)

<div class="topic-metadata">

**Author:** [@Sebastian\_Herrera](https://discuss.elastic.co/u/Sebastian_Herrera)\
**Replies:** 3\
**Last updated:** [August 29, 2019, 2:50pm UTC](https://discuss.elastic.co/t/elasticsearch-output-template-name-and-template-index-pattern-doubt/197219 "2019-08-29T14:50:57Z")

</div>

Hello i am trying to understand more the flow and privileges of the stack in my output configuration i have this hosts =\> "${ELASTICSEARCH\_HOST}" ssl =\> true user =\> "${ELASTICSEARCH\_USER}" …

---

## [How to dynamically bucket low, medium, high on prices and pick 2 per bucker](https://discuss.elastic.co/t/how-to-dynamically-bucket-low-medium-high-on-prices-and-pick-2-per-bucker/197256)

<div class="topic-metadata">

**Author:** [@Gag\_Gag](https://discuss.elastic.co/u/Gag_Gag)\
**Replies:** 5\
**Last updated:** [August 29, 2019, 2:49pm UTC](https://discuss.elastic.co/t/how-to-dynamically-bucket-low-medium-high-on-prices-and-pick-2-per-bucker/197256 "2019-08-29T14:49:58Z")

</div>

I have docs containing a price field indexed as such: { price: 100 } { price: 200 } { price: 300 } The prices can be anything from 100 to 1000. Depending on a given filter, I want to bucket in low, med, high price…

---

## [Random top hits from each bucket](https://discuss.elastic.co/t/random-top-hits-from-each-bucket/197358)

<div class="topic-metadata">

**Author:** [@Gag\_Gag](https://discuss.elastic.co/u/Gag_Gag)\
**Replies:** 0\
**Last updated:** [August 29, 2019, 2:20pm UTC](https://discuss.elastic.co/t/random-top-hits-from-each-bucket/197358 "2019-08-29T14:20:43Z")

</div>

I have a histogram bucket and when I put a top hits sub aggregation, I see the same results. Is there a way to make it randomly return results from each bucket?

---

## [Snapshot repository backup - Indices - Content](https://discuss.elastic.co/t/snapshot-repository-backup-indices-content/197341)

<div class="topic-metadata">

**Author:** [@Ab\_Avramidis](https://discuss.elastic.co/u/Ab_Avramidis)\
**Replies:** 1\
**Last updated:** [August 29, 2019, 1:03pm UTC](https://discuss.elastic.co/t/snapshot-repository-backup-indices-content/197341 "2019-08-29T13:03:33Z")

</div>

Hi, I would like If someone can give me a brief explanation of what represents each of the content that stored during a snapshot repository backup. I can see in my storage bucket the following type of files and folders…

---

## [Does a snapahot of elasticsearch that ended with 'success' state, can have missing index documents?](https://discuss.elastic.co/t/does-a-snapahot-of-elasticsearch-that-ended-with-success-state-can-have-missing-index-documents/197329)

<div class="topic-metadata">

**Author:** [@Yotam\_Levy](https://discuss.elastic.co/u/Yotam_Levy)\
**Replies:** 1\
**Last updated:** [August 29, 2019, 1:04pm UTC](https://discuss.elastic.co/t/does-a-snapahot-of-elasticsearch-that-ended-with-success-state-can-have-missing-index-documents/197329 "2019-08-29T13:04:17Z")

</div>

I have a snapahot I did that ended in 'success' state. but I wonder, is that necessarily means that all the documents inside the index that have been snapshotted, were indeed snapshotted? it has been said in their docu…

---

## [Access data from different index using ingest pipeline](https://discuss.elastic.co/t/access-data-from-different-index-using-ingest-pipeline/197312)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 3\
**Last updated:** [August 29, 2019, 12:49pm UTC](https://discuss.elastic.co/t/access-data-from-different-index-using-ingest-pipeline/197312 "2019-08-29T12:49:15Z")

</div>

hi all, when a pipeline catches an index operation is there a way to query another index to get a specific field's value? I mean, if the current document will be indexed into index1 but I want to create also another fi…

---

## [Debug custom elasticsearch plugin in Intellij](https://discuss.elastic.co/t/debug-custom-elasticsearch-plugin-in-intellij/197145)

<div class="topic-metadata">

**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\
**Replies:** 7\
**Last updated:** [August 29, 2019, 12:28pm UTC](https://discuss.elastic.co/t/debug-custom-elasticsearch-plugin-in-intellij/197145 "2019-08-29T12:28:51Z")

</div>

I have gone through this blog and I am able to debug elasticsearch code in Intellij. Can someone let me know how can I debug a custom plugin code in Intellij now? I have gone through this post and tried to run elasticse…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1173)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1175)
