# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1227 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1228 --- ## [Time series in Elasticsearch](https://discuss.elastic.co/t/time-series-in-elasticsearch/190411)
**Author:** [@dsonjohn404](https://discuss.elastic.co/u/dsonjohn404)\ **Replies:** 2\ **Last updated:** [July 15, 2019, 11:37am UTC](https://discuss.elastic.co/t/time-series-in-elasticsearch/190411 "2019-07-15T11:37:16Z")
i want to create time series analysis for my index based on date field (not based on system time). can anyone help me? my index mapping is like this: {"test" : { "mappings" : { "properties" : { "@timestamp" : { "type… --- ## [What is the default order of documents in a nested field when the parent document is retrieved?](https://discuss.elastic.co/t/what-is-the-default-order-of-documents-in-a-nested-field-when-the-parent-document-is-retrieved/190513)
**Author:** [@javierb](https://discuss.elastic.co/u/javierb)\ **Replies:** 0\ **Last updated:** [July 15, 2019, 11:20am UTC](https://discuss.elastic.co/t/what-is-the-default-order-of-documents-in-a-nested-field-when-the-parent-document-is-retrieved/190513 "2019-07-15T11:20:34Z")
In Elasticsearch 6.8 the order the documents in a nested fields are retrieved is the same order they where created. Is this behavior intended, explicitly supported by Elasticsearch, or is this something that can change … --- ## [How to GET a Field from nested JSON Data using Query](https://discuss.elastic.co/t/how-to-get-a-field-from-nested-json-data-using-query/189812)
**Author:** [@samyo](https://discuss.elastic.co/u/samyo)\ **Replies:** 6\ **Last updated:** [July 15, 2019, 9:43am UTC](https://discuss.elastic.co/t/how-to-get-a-field-from-nested-json-data-using-query/189812 "2019-07-15T09:43:25Z")
Hello folks , i have this bellow JSON Data, and i want to write a Query , the Query is , (Give me all Entities where the "ai\_id" has the Value = 0 ). the JSON Data , { "\_index": "try1", "\_type"… --- ## [ElasticSearch 7.2 not able to connect from localhost](https://discuss.elastic.co/t/elasticsearch-7-2-not-able-to-connect-from-localhost/189933)
**Author:** [@sukarn001](https://discuss.elastic.co/u/sukarn001)\ **Replies:** 9\ **Last updated:** [July 15, 2019, 9:52am UTC](https://discuss.elastic.co/t/elasticsearch-7-2-not-able-to-connect-from-localhost/189933 "2019-07-15T09:52:00Z")
Hello, I have recently installed elasticsearch 7.2 on my Ubuntu 18.04. Initially elasticsearch service was not starting due to some Java issue, Once I installed java and set JAVA\_HOME, service started working fine and i… --- ## [Resolved - \[ES7.0\]Terms aggregration doesn;t aggregrate by individual values](https://discuss.elastic.co/t/resolved-es7-0-terms-aggregration-doesn-t-aggregrate-by-individual-values/190367)
**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\ **Replies:** 1\ **Last updated:** [July 15, 2019, 9:50am UTC](https://discuss.elastic.co/t/resolved-es7-0-terms-aggregration-doesn-t-aggregrate-by-individual-values/190367 "2019-07-15T09:50:28Z")
cheriemilk 2 2m Hi team, I am running into an issue in ELK production environment and can’t figure out why googled. The google result is saying that it might because the ktf1.raw field not enabled. But I still fai… --- ## [Elastic Search as Primary Database](https://discuss.elastic.co/t/elastic-search-as-primary-database/189701)
**Author:** [@atul2685](https://discuss.elastic.co/u/atul2685)\ **Replies:** 4\ **Last updated:** [July 15, 2019, 9:46am UTC](https://discuss.elastic.co/t/elastic-search-as-primary-database/189701 "2019-07-15T09:46:54Z")
Can I use only elastic search as primary database for e-commerce app. I don't want to use another relational databases. --- ## [GC can't decrease heap memory usage and Elastic fails #44312](https://discuss.elastic.co/t/gc-cant-decrease-heap-memory-usage-and-elastic-fails-44312/190350)
**Author:** [@Arman\_Ajdani](https://discuss.elastic.co/u/Arman_Ajdani)\ **Replies:** 11\ **Last updated:** [July 15, 2019, 9:34am UTC](https://discuss.elastic.co/t/gc-cant-decrease-heap-memory-usage-and-elastic-fails-44312/190350 "2019-07-15T09:34:32Z")
I use elastic 6.2.4 with a 2 node cluster. when elastic index rate increases at specific time at day heap memory exceed th 70 % and GC starts but heap memory usage won't decrease untill goes up to 97-98% and elastic won… --- ## [Index Rollover alias](https://discuss.elastic.co/t/index-rollover-alias/189331)
**Author:** [@PeterPain](https://discuss.elastic.co/u/PeterPain)\ **Replies:** 2\ **Last updated:** [July 15, 2019, 9:03am UTC](https://discuss.elastic.co/t/index-rollover-alias/189331 "2019-07-15T09:03:33Z")
Hey there im testing arround with the Index Lifecycle Management and have some problems with it which i don't know how to handle them. I have a Template to assing the ILM-Policy, which are for multiple Indices. PUT \_te… --- ## [Is it possible to compute a field after a query?](https://discuss.elastic.co/t/is-it-possible-to-compute-a-field-after-a-query/190047)
**Author:** [@David\_Irimia](https://discuss.elastic.co/u/David_Irimia)\ **Replies:** 1\ **Last updated:** [July 15, 2019, 8:34am UTC](https://discuss.elastic.co/t/is-it-possible-to-compute-a-field-after-a-query/190047 "2019-07-15T08:34:49Z")
Hello! We have some objects. Each object has a 'score' and a 'name' (not unique). We want to group the objects with the same name, get the sum of their score and then apply a simple formula to that sum. I have managed… --- ## [Extended\_bounds causes extra bucket](https://discuss.elastic.co/t/extended-bounds-causes-extra-bucket/185816)
**Author:** [@lonzodc](https://discuss.elastic.co/u/lonzodc)\ **Replies:** 2\ **Last updated:** [July 15, 2019, 7:22am UTC](https://discuss.elastic.co/t/extended-bounds-causes-extra-bucket/185816 "2019-07-15T07:22:31Z")
Hi, I am using date\_histogram to get data in buckets grouped by time. Interval is weekly with offset of -1d, and time\_zone is +08:00. The min value is equal to the "gte". When using extended\_bounds, I get an extra bucke… --- ## [SocketTimeoutException: null](https://discuss.elastic.co/t/sockettimeoutexception-null/188433)
**Author:** [@Christopher\_Glantsch](https://discuss.elastic.co/u/Christopher_Glantsch)\ **Replies:** 3\ **Last updated:** [July 2, 2019, 7:14am UTC](https://discuss.elastic.co/t/sockettimeoutexception-null/188433 "2019-07-02T07:14:12Z")
I am having a cluster on elastic.co and I have there basically 5 indexes. 1 of them has many write operations ( like 100 a minute ), where some of them are also bulk inserts. the other indexes are mainly there for readi… --- ## [Node goes down showing fatal error in network layer , thread and java heapspace error](https://discuss.elastic.co/t/node-goes-down-showing-fatal-error-in-network-layer-thread-and-java-heapspace-error/188852)
**Author:** [@Sourabh](https://discuss.elastic.co/u/Sourabh)\ **Replies:** 18\ **Last updated:** [July 15, 2019, 6:55am UTC](https://discuss.elastic.co/t/node-goes-down-showing-fatal-error-in-network-layer-thread-and-java-heapspace-error/188852 "2019-07-15T06:55:16Z")
I am having a cluster with 5 master nodes,12 coordinator nodes and 60 data nodes .Currently i am doing heavy indexing in this es cluster around 15 billion documents spread through the day.We have 3 index which are underg… --- ## [Max\_file\_descriptors not appearing in node process stats](https://discuss.elastic.co/t/max-file-descriptors-not-appearing-in-node-process-stats/190435)
**Author:** [@superbazza](https://discuss.elastic.co/u/superbazza)\ **Replies:** 0\ **Last updated:** [July 15, 2019, 6:34am UTC](https://discuss.elastic.co/t/max-file-descriptors-not-appearing-in-node-process-stats/190435 "2019-07-15T06:34:46Z")
GET \_nodes/stats/process?filter\_path=\*\*.max\_file\_descriptors should give the max open file descriptors that has been configured for the process/user on the server. However, I am not getting that setting. The above reque… --- ## [Unable to run Elasticsearch 7.2 on Windows](https://discuss.elastic.co/t/unable-to-run-elasticsearch-7-2-on-windows/188284)
**Author:** [@kmohd](https://discuss.elastic.co/u/kmohd)\ **Replies:** 2\ **Last updated:** [July 15, 2019, 6:04am UTC](https://discuss.elastic.co/t/unable-to-run-elasticsearch-7-2-on-windows/188284 "2019-07-15T06:04:38Z")
Hello, i'm seeing this in the logs, anyone have any idea? \[o.e.b.Bootstrap \]Exception java.lang.SecurityException: Security misconfiguration: cannot access java.io.tmpdir at org.elasticsearch.bootstrap.Secur… --- ## [Recovering from a destroyed node](https://discuss.elastic.co/t/recovering-from-a-destroyed-node/190408)
**Author:** [@Jason\_Baumgartner](https://discuss.elastic.co/u/Jason_Baumgartner)\ **Replies:** 2\ **Last updated:** [July 15, 2019, 4:44am UTC](https://discuss.elastic.co/t/recovering-from-a-destroyed-node/190408 "2019-07-15T04:44:51Z")
I had a node that was destroyed that contained shards from various indexes. I have backups of the original data and need to reindex the data that was held in those shards. I have wiped the shards affected so that they ar… --- ## [Unable to resize current deployment](https://discuss.elastic.co/t/unable-to-resize-current-deployment/190421)
**Author:** [@ssharaf](https://discuss.elastic.co/u/ssharaf)\ **Replies:** 2\ **Last updated:** [July 15, 2019, 4:36am UTC](https://discuss.elastic.co/t/unable-to-resize-current-deployment/190421 "2019-07-15T04:36:40Z")
Hi, My trial version for elastic cloud is expired and I decided to re-enable my deployment. After entering my billing details and launching the existing deployment again. I tried to resize my cluster since it's too big.… --- ## [Performance Impact on a single machine with one node and multiple nodes\[due to containerization\]](https://discuss.elastic.co/t/performance-impact-on-a-single-machine-with-one-node-and-multiple-nodes-due-to-containerization/190417)
**Author:** [@Yashukumar](https://discuss.elastic.co/u/Yashukumar)\ **Replies:** 1\ **Last updated:** [July 15, 2019, 4:12am UTC](https://discuss.elastic.co/t/performance-impact-on-a-single-machine-with-one-node-and-multiple-nodes-due-to-containerization/190417 "2019-07-15T04:12:55Z")
In the following two scenarios which have better performance? Elasticsearch application running on a physical machine with 256G RAM and 48 Core CPU. Deploying the Elasticsearch application on Docker with three Elastics… --- ## [Indexing using Rally](https://discuss.elastic.co/t/indexing-using-rally/190414)
**Author:** [@krish1](https://discuss.elastic.co/u/krish1)\ **Replies:** 1\ **Last updated:** [July 15, 2019, 4:06am UTC](https://discuss.elastic.co/t/indexing-using-rally/190414 "2019-07-15T04:06:40Z")
Does rally support indexing in a file format other than newline delimited JSON(NDJSON), specifically parqueet file/files? I know that rally support bulk-indexing which in turn has this requirement, however is there some … --- ## [\[ILM\] How to rerun same phase after modified lifecycel policy](https://discuss.elastic.co/t/ilm-how-to-rerun-same-phase-after-modified-lifecycel-policy/190409)
**Author:** [@LoadingZhang](https://discuss.elastic.co/u/LoadingZhang)\ **Replies:** 0\ **Last updated:** [July 15, 2019, 3:21am UTC](https://discuss.elastic.co/t/ilm-how-to-rerun-same-phase-after-modified-lifecycel-policy/190409 "2019-07-15T03:21:26Z")
ES 7.2.0 Situation: Index has completed warm phase of lifecycle policy, I change the policy, but ilm will not rerun the warm policy. I have tried restart ilm/re-put index lifecycle, but it not work. How could we reru… --- ## [Elasticsearch fails to start, no logs, (code=exited, status=1/FAILURE)](https://discuss.elastic.co/t/elasticsearch-fails-to-start-no-logs-code-exited-status-1-failure/190377)
**Author:** [@tanveermulla111](https://discuss.elastic.co/u/tanveermulla111)\ **Replies:** 4\ **Last updated:** [July 14, 2019, 9:17pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-no-logs-code-exited-status-1-failure/190377 "2019-07-14T21:17:28Z")
systemctl status elasticsearch ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; disabled; vendor preset: disabled) Active: failed (Result: exit-code) since Sun 2019… --- ## [Elasticsearch 7.2.0 - Unable to run xpack ml libraries](https://discuss.elastic.co/t/elasticsearch-7-2-0-unable-to-run-xpack-ml-libraries/190383)
**Author:** [@abhinav2](https://discuss.elastic.co/u/abhinav2)\ **Replies:** 3\ **Last updated:** [July 14, 2019, 8:18pm UTC](https://discuss.elastic.co/t/elasticsearch-7-2-0-unable-to-run-xpack-ml-libraries/190383 "2019-07-14T20:18:34Z")
Version: Elasticsearch 7.2.0 System info: CentOS Linux release 7.6.1810 (Core) On starting elasticsearch, I'm getting this error log - \[2019-07-14T14:00:26,398\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[fer… --- ## [Elasticsearch doesn't start after overwhelming](https://discuss.elastic.co/t/elasticsearch-doesnt-start-after-overwhelming/190391)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 2\ **Last updated:** [July 14, 2019, 7:37pm UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-start-after-overwhelming/190391 "2019-07-14T19:37:12Z")
Hi there, I was trying a performance of elasticsearch by running script for generating logs. In particular around 600 000 logs per approximately 1 minute were generating on one VM where Filebeat was sending it to logsta… --- ## [To Join or Not to Join](https://discuss.elastic.co/t/to-join-or-not-to-join/190365)
**Author:** [@dvisz-inf](https://discuss.elastic.co/u/dvisz-inf)\ **Replies:** 2\ **Last updated:** [July 14, 2019, 6:07pm UTC](https://discuss.elastic.co/t/to-join-or-not-to-join/190365 "2019-07-14T18:07:39Z")
HI all :slight\_smile: When I was first learning Elasticsearch and designing my first index, a colleague of mine suggested not using ES parent/child joins because they were slow. I countered by claiming that it was unli… --- ## [How to compare value in elasticsearch](https://discuss.elastic.co/t/how-to-compare-value-in-elasticsearch/190379)
**Author:** [@quangvublog](https://discuss.elastic.co/u/quangvublog)\ **Replies:** 6\ **Last updated:** [July 14, 2019, 5:11pm UTC](https://discuss.elastic.co/t/how-to-compare-value-in-elasticsearch/190379 "2019-07-14T17:11:13Z")
Hello everyone! I am having some problems in filtering metrics in elasticsearch. For example: beside a Total field, I want to filter value in fail column. function:Total AND fail\>0 In the above example: fail\>0 is wro… --- ## [Not able to use the method QuerySql on Elasticsearch.Net v. 7 and newer](https://discuss.elastic.co/t/not-able-to-use-the-method-querysql-on-elasticsearch-net-v-7-and-newer/190237)
**Author:** [@rasch1](https://discuss.elastic.co/u/rasch1)\ **Replies:** 2\ **Last updated:** [July 14, 2019, 1:07pm UTC](https://discuss.elastic.co/t/not-able-to-use-the-method-querysql-on-elasticsearch-net-v-7-and-newer/190237 "2019-07-14T13:07:07Z")
Hey, Hopefully I have added the question in the right place:). Currently I am using Elasticsearch.Net v.6.8.0. var sqlRequest = new QuerySqlRequest(); sqlRequest.Query = $@"select value from index"; var result = clien… --- ## [Delete weird index names](https://discuss.elastic.co/t/delete-weird-index-names/190378)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 0\ **Last updated:** [July 14, 2019, 10:15am UTC](https://discuss.elastic.co/t/delete-weird-index-names/190378 "2019-07-14T10:15:02Z")
hi all, logstash is creating index name based on the value of a filed. today, this field get some weird value. how can i delete weird index name such as followings: 1- disp-\_1‌´èn´ 2- dispatcher-ib\_packets\_1~^0ƒيخڑ¸… --- ## [Curator rollover new\_index](https://discuss.elastic.co/t/curator-rollover-new-index/187017)
**Author:** [@franktex](https://discuss.elastic.co/u/franktex)\ **Replies:** 2\ **Last updated:** [July 14, 2019, 8:04am UTC](https://discuss.elastic.co/t/curator-rollover-new-index/187017 "2019-07-14T08:04:11Z")
Hi, Trying to get indices rolled over when it gets to a max\_size limit using a new index name that has the current date in the name of the index. Read online there is a undocumented feature called new\_index where you ca… --- ## [Handle Failures in Bulk Processor](https://discuss.elastic.co/t/handle-failures-in-bulk-processor/189755)
**Author:** [@GPT](https://discuss.elastic.co/u/GPT)\ **Replies:** 2\ **Last updated:** [July 14, 2019, 7:03am UTC](https://discuss.elastic.co/t/handle-failures-in-bulk-processor/189755 "2019-07-14T07:03:08Z")
Hi All I need to handle failures and retry for failures in Bulk Processor. BulkProcessor listener has afterBulk methods. For the below method, the response provides a way to extract failures for individual items but it … --- ## [Template is not being used, mapping not working](https://discuss.elastic.co/t/template-is-not-being-used-mapping-not-working/190207)
**Author:** [@mpes](https://discuss.elastic.co/u/mpes)\ **Replies:** 16\ **Last updated:** [July 13, 2019, 9:09pm UTC](https://discuss.elastic.co/t/template-is-not-being-used-mapping-not-working/190207 "2019-07-13T21:09:33Z")
Hey there! I am analysing access logs for a project. I have everything set up, Logstash is doing what is supposed to do, Elasticsearch and Kibana, too (using 5.2). BUT: Yesterday I decided to write my own template, sinc… --- ## [Unable to open Kibana 5.6.15 GUI](https://discuss.elastic.co/t/unable-to-open-kibana-5-6-15-gui/190283)
**Author:** [@sandipatmca](https://discuss.elastic.co/u/sandipatmca)\ **Replies:** 11\ **Last updated:** [July 13, 2019, 7:45pm UTC](https://discuss.elastic.co/t/unable-to-open-kibana-5-6-15-gui/190283 "2019-07-13T19:45:02Z")
Ihave installed ELK 5.6.15 & x-pack 5.6.15. After installation ,kibana GUI is not accessible. Below are the trace log in Kibana.log file. I have "xpack.security.audit.enabled" set to false explicitly in kibana.yml but… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1226) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1228)