# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1216 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1217 --- ## [Not able to load JNA native support library](https://discuss.elastic.co/t/not-able-to-load-jna-native-support-library/191920)
**Author:** [@jason.kim](https://discuss.elastic.co/u/jason.kim)\ **Replies:** 1\ **Last updated:** [July 24, 2019, 3:55am UTC](https://discuss.elastic.co/t/not-able-to-load-jna-native-support-library/191920 "2019-07-24T03:55:15Z")
I am installing ES on a hardened system and I am having issues with running my ES. When I try to run ES i get this error: unable to load JNA native support library, native methods will be disabled. java.lang.Unsatisfi… --- ## [Document ID not found error while updating a document, even though we have that document ID present in the ES](https://discuss.elastic.co/t/document-id-not-found-error-while-updating-a-document-even-though-we-have-that-document-id-present-in-the-es/190239)
**Author:** [@viveksinghggits](https://discuss.elastic.co/u/viveksinghggits)\ **Replies:** 3\ **Last updated:** [July 24, 2019, 2:32am UTC](https://discuss.elastic.co/t/document-id-not-found-error-while-updating-a-document-even-though-we-have-that-document-id-present-in-the-es/190239 "2019-07-24T02:32:43Z")
So, what I am trying to do is get a document from ES cluster, make some changes into the document and then update this document back into the elastic search cluster. I am using elasticsearch's python client and .update … --- ## [Performance impact of storing unstructured data as a separate not analyzed field](https://discuss.elastic.co/t/performance-impact-of-storing-unstructured-data-as-a-separate-not-analyzed-field/191934)
**Author:** [@Ali\_Nazemian](https://discuss.elastic.co/u/Ali_Nazemian)\ **Replies:** 0\ **Last updated:** [July 24, 2019, 2:05am UTC](https://discuss.elastic.co/t/performance-impact-of-storing-unstructured-data-as-a-separate-not-analyzed-field/191934 "2019-07-24T02:05:35Z")
I was wondering if a not-indexed field (just stored) will have any impact on the query time? I mean, for the query that we are not even referring to the retrieval of that field. For example, since when you are parsing a … --- ## [Is ElasticSearch the correct solution?](https://discuss.elastic.co/t/is-elasticsearch-the-correct-solution/191925)
**Author:** [@prawsthorne](https://discuss.elastic.co/u/prawsthorne)\ **Replies:** 0\ **Last updated:** [July 23, 2019, 11:28pm UTC](https://discuss.elastic.co/t/is-elasticsearch-the-correct-solution/191925 "2019-07-23T23:28:57Z")
TLDR: Should I use ES 7.x and Nutch 1.15 to index a few hundred industry specific sites to build a faceted search? I have spent the last few weeks investigating the use of ElasticSearch to build a search engine for an i… --- ## [Elasticsearch daily index, action update, jdbc input, data getting updated on the next day](https://discuss.elastic.co/t/elasticsearch-daily-index-action-update-jdbc-input-data-getting-updated-on-the-next-day/191923)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 0\ **Last updated:** [July 23, 2019, 11:01pm UTC](https://discuss.elastic.co/t/elasticsearch-daily-index-action-update-jdbc-input-data-getting-updated-on-the-next-day/191923 "2019-07-23T23:01:05Z")
Hi, I recently started working with elasticsearch. So, I have a logstash config with jdbc as the input trying to fetch the data from a table. (select statement of some specific fields where lastupdatedon \>= :sql\_last\_va… --- ## [Handling loss of master quorum in ES7+](https://discuss.elastic.co/t/handling-loss-of-master-quorum-in-es7/191443)
**Author:** [@sarthakn](https://discuss.elastic.co/u/sarthakn)\ **Replies:** 6\ **Last updated:** [July 23, 2019, 9:53pm UTC](https://discuss.elastic.co/t/handling-loss-of-master-quorum-in-es7/191443 "2019-07-23T21:53:04Z")
I am planning to upgrade an ES 6.3 cluster to 7.2 soon. In ES 6.3 if we lose a quorum of master nodes we can bring up new nodes which will join the cluster and regain quorum, but after ES 7 new master nodes cannot join a… --- ## [Elasticsearch 5.6.15 do not start after install](https://discuss.elastic.co/t/elasticsearch-5-6-15-do-not-start-after-install/191889)
**Author:** [@sandipatmca](https://discuss.elastic.co/u/sandipatmca)\ **Replies:** 2\ **Last updated:** [July 23, 2019, 8:03pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-15-do-not-start-after-install/191889 "2019-07-23T20:03:33Z")
Elasticsearch do not start after installation due to below error: \[9.7gb\], spins? \[possibly\], types \[ext4\] \[2019-07-23T13:43:44,765\]\[INFO \]\[o.e.e.NodeEnvironment \] \[6yEOT5I\] heap size \[1.9gb\], compressed ordinary ob… --- ## [ILM is not managing my indices](https://discuss.elastic.co/t/ilm-is-not-managing-my-indices/191904)
**Author:** [@mcguacon](https://discuss.elastic.co/u/mcguacon)\ **Replies:** 0\ **Last updated:** [July 23, 2019, 7:59pm UTC](https://discuss.elastic.co/t/ilm-is-not-managing-my-indices/191904 "2019-07-23T19:59:49Z")
I have created a template containing my ILM policy as follows: PUT \_template/rollup\_template { "index\_patterns": \["rollup\*"\], "settings": { "number\_of\_shards": 1, "number\_of\_replicas": 1, "index.lifecycle.name": "… --- ## [Visualization only works when selecting ignore global filters](https://discuss.elastic.co/t/visualization-only-works-when-selecting-ignore-global-filters/191892)
**Author:** [@joey1](https://discuss.elastic.co/u/joey1)\ **Replies:** 1\ **Last updated:** [July 23, 2019, 7:42pm UTC](https://discuss.elastic.co/t/visualization-only-works-when-selecting-ignore-global-filters/191892 "2019-07-23T19:42:20Z")
Hi, I'm using the visual builder to create a time series visualization and am running into an issue where I I only see data when I set Ignore Global Filter to Yes. What I don't understand about this though is that I don… --- ## [Searches timing out on certain indices](https://discuss.elastic.co/t/searches-timing-out-on-certain-indices/191894)
**Author:** [@Chris\_Brown](https://discuss.elastic.co/u/Chris_Brown)\ **Replies:** 1\ **Last updated:** [July 23, 2019, 7:25pm UTC](https://discuss.elastic.co/t/searches-timing-out-on-certain-indices/191894 "2019-07-23T19:25:57Z")
Hi there, We noticed a problem today that hasnt happened before. When querying some of our indices, our queries do not return or timeout. Some indices are working fine. I cant seem to find anything relevant in our logs,… --- ## [Create a new field out of content in documents and update in mappings](https://discuss.elastic.co/t/create-a-new-field-out-of-content-in-documents-and-update-in-mappings/191899)
**Author:** [@manideep](https://discuss.elastic.co/u/manideep)\ **Replies:** 0\ **Last updated:** [July 23, 2019, 7:01pm UTC](https://discuss.elastic.co/t/create-a-new-field-out-of-content-in-documents-and-update-in-mappings/191899 "2019-07-23T19:01:27Z")
Hi Everyone, I am trying to solve a problem in elastic search and confused if I am thinking correct way. I have indexed sample set of resumes. I am trying to solve the problems like: find resume with experience 5 ye… --- ## [Shard allocation with hot - warm stacks](https://discuss.elastic.co/t/shard-allocation-with-hot-warm-stacks/191890)
**Author:** [@Jathin](https://discuss.elastic.co/u/Jathin)\ **Replies:** 0\ **Last updated:** [July 23, 2019, 6:19pm UTC](https://discuss.elastic.co/t/shard-allocation-with-hot-warm-stacks/191890 "2019-07-23T18:19:11Z")
All nodes(master, hot and warm) are on elasticsearch v7.2.0. hot nodes have node.attr.hot\_stack: hot\_stack\_a and warm nodes have node.attr.warm\_stack: warm\_stack\_b \_cluster/settings { "transient": { "cluster… --- ## [Merging buckets of aggregation](https://discuss.elastic.co/t/merging-buckets-of-aggregation/191887)
**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\ **Replies:** 0\ **Last updated:** [July 23, 2019, 6:07pm UTC](https://discuss.elastic.co/t/merging-buckets-of-aggregation/191887 "2019-07-23T18:07:15Z")
I am trying to merge buckets from a parent aggregation. I am not sure if thats possible. Please help. I have an aggregation query as below GET log-2019.07.20/\_search { "size": 0, "aggs": { "buckets": { "d… --- ## [What happens with analyzed fields if the length of indexed field is longer than the "max\_gram" of an edge\_ngram?](https://discuss.elastic.co/t/what-happens-with-analyzed-fields-if-the-length-of-indexed-field-is-longer-than-the-max-gram-of-an-edge-ngram/191881)
**Author:** [@Forrest\_Townsend](https://discuss.elastic.co/u/Forrest_Townsend)\ **Replies:** 0\ **Last updated:** [July 23, 2019, 5:41pm UTC](https://discuss.elastic.co/t/what-happens-with-analyzed-fields-if-the-length-of-indexed-field-is-longer-than-the-max-gram-of-an-edge-ngram/191881 "2019-07-23T17:41:59Z")
What happens if there is an email entered that's longer than 15 characters? In our tests, it appears to stop using edge\_ngram, which make sense since it's a "starts with" analyzer but just wanted to be sure on what happe… --- ## [Get earliest timestamp per day](https://discuss.elastic.co/t/get-earliest-timestamp-per-day/191722)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 1\ **Last updated:** [July 23, 2019, 5:14pm UTC](https://discuss.elastic.co/t/get-earliest-timestamp-per-day/191722 "2019-07-23T17:14:53Z")
I am trying to get the earliest (minimum) timestamp per day for a specfici message and log group. However, my output is not what I'm expecting, I only get the minimum timestamp among all timestamp and not the minimum ti… --- ## [What is the difference between function\_score and script\_score query?](https://discuss.elastic.co/t/what-is-the-difference-between-function-score-and-script-score-query/191869)
**Author:** [@Borwick\_5576](https://discuss.elastic.co/u/Borwick_5576)\ **Replies:** 0\ **Last updated:** [July 23, 2019, 4:39pm UTC](https://discuss.elastic.co/t/what-is-the-difference-between-function-score-and-script-score-query/191869 "2019-07-23T16:39:51Z")
Both modify the score of the retrieved docs, but when do I use each of them? Why would I also use script\_score inside function\_score instead of just sticking with scripting\_score? --- ## [How does shard allocation effect indexing speed?](https://discuss.elastic.co/t/how-does-shard-allocation-effect-indexing-speed/191863)
**Author:** [@javaamtho](https://discuss.elastic.co/u/javaamtho)\ **Replies:** 0\ **Last updated:** [July 23, 2019, 4:08pm UTC](https://discuss.elastic.co/t/how-does-shard-allocation-effect-indexing-speed/191863 "2019-07-23T16:08:23Z")
elastic shard, how does it improve the indexing? if less shard then indexing is faster and if more shard then it decreases indexing rate in elastic what is the basic rule? each shard allocated single thread so it shou… --- ## [Weird character after indexing csv file](https://discuss.elastic.co/t/weird-character-after-indexing-csv-file/191842)
**Author:** [@Bruno\_Andrade1](https://discuss.elastic.co/u/Bruno_Andrade1)\ **Replies:** 0\ **Last updated:** [July 23, 2019, 2:36pm UTC](https://discuss.elastic.co/t/weird-character-after-indexing-csv-file/191842 "2019-07-23T14:36:12Z")
as you can see, there is a unknown character in the field's name, and want to take it out, what can i do about it? in discover page it seems normal, but not in JSON page --- ## [How can I rerank query results by using Euclidean distance on fields have datatype is vector in elasticsearch?](https://discuss.elastic.co/t/how-can-i-rerank-query-results-by-using-euclidean-distance-on-fields-have-datatype-is-vector-in-elasticsearch/191319)
**Author:** [@gia\_huy](https://discuss.elastic.co/u/gia_huy)\ **Replies:** 1\ **Last updated:** [July 23, 2019, 2:26pm UTC](https://discuss.elastic.co/t/how-can-i-rerank-query-results-by-using-euclidean-distance-on-fields-have-datatype-is-vector-in-elasticsearch/191319 "2019-07-23T14:26:05Z")
I have a question about Elasticsearch. Namely, I have some data about embedding vectors (dense vector) and their corresponding string tokens from a algorithm using K-Means to map them from high-dimensionality vector spac… --- ## [Elasticsearch Query for good title keyword results](https://discuss.elastic.co/t/elasticsearch-query-for-good-title-keyword-results/191812)
**Author:** [@SimonEritsch](https://discuss.elastic.co/u/SimonEritsch)\ **Replies:** 1\ **Last updated:** [July 23, 2019, 2:05pm UTC](https://discuss.elastic.co/t/elasticsearch-query-for-good-title-keyword-results/191812 "2019-07-23T14:05:02Z")
We have a elasticsearch index containing a catalog of products, that we want to search by title and description. We want it to have the following constraints: We are searching title and description for occurences (mat… --- ## [Return details of a query in Watcher email alert](https://discuss.elastic.co/t/return-details-of-a-query-in-watcher-email-alert/191831)
**Author:** [@wmcleod](https://discuss.elastic.co/u/wmcleod)\ **Replies:** 0\ **Last updated:** [July 23, 2019, 1:46pm UTC](https://discuss.elastic.co/t/return-details-of-a-query-in-watcher-email-alert/191831 "2019-07-23T13:46:10Z")
Hi, I have setup a watch within the GUI to alert when CPU threshold of any of our monitored servers breaches a threshold of 85%. The alert works well but we don't get details of which host is breaching the threshold. H… --- ## [ES 5.6.16 Docker cluster on multiple physical machines via Docker on custom ports](https://discuss.elastic.co/t/es-5-6-16-docker-cluster-on-multiple-physical-machines-via-docker-on-custom-ports/191830)
**Author:** [@nilsnolde](https://discuss.elastic.co/u/nilsnolde)\ **Replies:** 0\ **Last updated:** [July 23, 2019, 1:41pm UTC](https://discuss.elastic.co/t/es-5-6-16-docker-cluster-on-multiple-physical-machines-via-docker-on-custom-ports/191830 "2019-07-23T13:41:10Z")
Hi, I'm trying to set up a ES cluster via docker-compose on multiple machines, 4 in total. They are part of the same internal network and I think I'm fairly close, but the nodes still don't seem to see each other. The … --- ## [Question about searching winlog events](https://discuss.elastic.co/t/question-about-searching-winlog-events/191814)
**Author:** [@mnv\_1](https://discuss.elastic.co/u/mnv_1)\ **Replies:** 0\ **Last updated:** [July 23, 2019, 12:45pm UTC](https://discuss.elastic.co/t/question-about-searching-winlog-events/191814 "2019-07-23T12:45:07Z")
Hello! I'm using latest winlogbeat with ECS and its shipping security events in Elasticsearch. I've created a local user on Windows machine without password and get error, that password does not compline with local poli… --- ## [How to map a field inside an object in elastic search](https://discuss.elastic.co/t/how-to-map-a-field-inside-an-object-in-elastic-search/191816)
**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\ **Replies:** 0\ **Last updated:** [July 23, 2019, 12:57pm UTC](https://discuss.elastic.co/t/how-to-map-a-field-inside-an-object-in-elastic-search/191816 "2019-07-23T12:57:56Z")
I have a template mapping like below. { "order": 0, "index\_patterns": \[ "\*xyz\_foundation\*" \], "settings": { "index": { "number\_of\_shards": "6", "number\_of\_replicas": "1" … --- ## ["Hierarchical" search of a value](https://discuss.elastic.co/t/hierarchical-search-of-a-value/191808)
**Author:** [@Chevreau\_de\_guerre](https://discuss.elastic.co/u/Chevreau_de_guerre)\ **Replies:** 0\ **Last updated:** [July 23, 2019, 12:26pm UTC](https://discuss.elastic.co/t/hierarchical-search-of-a-value/191808 "2019-07-23T12:26:40Z")
Hello everyone ! Here is a sample of my data : { "\_index":"blabla", "\_source":{ "idUser":"123456", "name":\[ "name.id" \], "attributeA":"A", … --- ## [Shard rebalance issue](https://discuss.elastic.co/t/shard-rebalance-issue/191656)
**Author:** [@vangogh94](https://discuss.elastic.co/u/vangogh94)\ **Replies:** 4\ **Last updated:** [July 23, 2019, 11:47am UTC](https://discuss.elastic.co/t/shard-rebalance-issue/191656 "2019-07-23T11:47:40Z")
Running ES v7.2.0. We excluded data from node 'es-dbs-022' using cluster.routing.allocation.exclude.\_name because of some unrelated reasons. After some time we returned the node back to cluster using the same API (setti… --- ## [Recommendation on using AWS ECS for Elastic Search Cluster](https://discuss.elastic.co/t/recommendation-on-using-aws-ecs-for-elastic-search-cluster/191798)
**Author:** [@mayur\_jain](https://discuss.elastic.co/u/mayur_jain)\ **Replies:** 0\ **Last updated:** [July 23, 2019, 11:23am UTC](https://discuss.elastic.co/t/recommendation-on-using-aws-ecs-for-elastic-search-cluster/191798 "2019-07-23T11:23:30Z")
Hi All, We are trying to evaluate if we should deploy the nodes running in our cluster on EC2 instances to managed container service by AWS, i.e Elastic Container Service. Not sure how the data directory would be mapped… --- ## [Retrieve geolocation sampled data](https://discuss.elastic.co/t/retrieve-geolocation-sampled-data/191432)
**Author:** [@MarcoAbi](https://discuss.elastic.co/u/MarcoAbi)\ **Replies:** 6\ **Last updated:** [July 23, 2019, 11:20am UTC](https://discuss.elastic.co/t/retrieve-geolocation-sampled-data/191432 "2019-07-23T11:20:27Z")
Hello, I have an index that collects 1 geospatial point data every second per each device (eg, a moving car). Now, I need to collect the geopoint in order to plot the path that the given vehicle has made. However, plot… --- ## [Create multiple type in one index](https://discuss.elastic.co/t/create-multiple-type-in-one-index/191528)
**Author:** [@Abdelmadjid](https://discuss.elastic.co/u/Abdelmadjid)\ **Replies:** 2\ **Last updated:** [July 23, 2019, 10:41am UTC](https://discuss.elastic.co/t/create-multiple-type-in-one-index/191528 "2019-07-23T10:41:26Z")
Hello everyone whene i create a multiple type in the same index in elasticsearch version 7. 2.0 i get these error { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "Rejecting mapping … --- ## [Using partition returns unexpected result](https://discuss.elastic.co/t/using-partition-returns-unexpected-result/191767)
**Author:** [@jadore](https://discuss.elastic.co/u/jadore)\ **Replies:** 3\ **Last updated:** [July 23, 2019, 10:27am UTC](https://discuss.elastic.co/t/using-partition-returns-unexpected-result/191767 "2019-07-23T10:27:39Z")
Query does not gives result as expected: when query without using partition the query will return correct result: it will return the max view of all products. But when partition is used, it won't return the max total v… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1215) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1217)