# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1233

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1234

---

## [Script inside an aggregation](https://discuss.elastic.co/t/script-inside-an-aggregation/189661)

<div class="topic-metadata">

**Author:** [@pablo.e](https://discuss.elastic.co/u/pablo.e)\
**Replies:** 0\
**Last updated:** [July 10, 2019, 6:13am UTC](https://discuss.elastic.co/t/script-inside-an-aggregation/189661 "2019-07-10T06:13:33Z")

</div>

Hi, I would like to know if we can add a script inside an aggregation? My goal is to make a compute between fields (inside the aggregation) to get a variation. For example: ... "aggs":{ "group\_by\_product": { "term…

---

## [Unknown error in second elasticsearch node](https://discuss.elastic.co/t/unknown-error-in-second-elasticsearch-node/189474)

<div class="topic-metadata">

**Author:** [@Harshet\_Jain](https://discuss.elastic.co/u/Harshet_Jain)\
**Replies:** 7\
**Last updated:** [July 10, 2019, 6:15am UTC](https://discuss.elastic.co/t/unknown-error-in-second-elasticsearch-node/189474 "2019-07-10T06:15:26Z")

</div>

I am getting the following error when I start the second node, any ideas? Here is my settings for master and node 1: Master: bootstrap.memory\_lock: false cluster.name: panacea http.port: 9200-9220 node.data: true node…

---

## [Several selects in one query](https://discuss.elastic.co/t/several-selects-in-one-query/189337)

<div class="topic-metadata">

**Author:** [@Andreasky](https://discuss.elastic.co/u/Andreasky)\
**Replies:** 2\
**Last updated:** [July 10, 2019, 6:14am UTC](https://discuss.elastic.co/t/several-selects-in-one-query/189337 "2019-07-10T06:14:58Z")

</div>

select ((select count(Call) from "log" where "Call" = 'answered') / (select count(Event) from "log")) I'm trying to run this query in canvas, but i only get this error message: \[essql\] \> Unexpected error from Elasticse…

---

## [How can i use X PACK?](https://discuss.elastic.co/t/how-can-i-use-x-pack/189653)

<div class="topic-metadata">

**Author:** [@moti.mor](https://discuss.elastic.co/u/moti.mor)\
**Replies:** 7\
**Last updated:** [July 10, 2019, 6:06am UTC](https://discuss.elastic.co/t/how-can-i-use-x-pack/189653 "2019-07-10T06:06:24Z")

</div>

Hi guys, i'm working with elastic 6.7 and kibana 6.7 open spurce without license. can i use X Pack with the open source basic license? or can you please guide me what should i do? thanks.

---

## [Elastic search node able to join the master cluster](https://discuss.elastic.co/t/elastic-search-node-able-to-join-the-master-cluster/189658)

<div class="topic-metadata">

**Author:** [@manu4387](https://discuss.elastic.co/u/manu4387)\
**Replies:** 0\
**Last updated:** [July 10, 2019, 5:53am UTC](https://discuss.elastic.co/t/elastic-search-node-able-to-join-the-master-cluster/189658 "2019-07-10T05:53:59Z")

</div>

Hi, I have 3 cluster node out of which one is as a coordinator node with master as false and data as false. 1 and 2 are both master and data node and they work fine in cluster with minimum master node set as 1. When …

---

## [How to Calculate Throughput(Ops/sec) from ESRally Report.md](https://discuss.elastic.co/t/how-to-calculate-throughput-ops-sec-from-esrally-report-md/183926)

<div class="topic-metadata">

**Author:** [@Balmukund](https://discuss.elastic.co/u/Balmukund)\
**Replies:** 8\
**Last updated:** [July 10, 2019, 5:08am UTC](https://discuss.elastic.co/t/how-to-calculate-throughput-ops-sec-from-esrally-report-md/183926 "2019-07-10T05:08:36Z")

</div>

Hi All, I am running 232 queries per minute through ESRally and also having 232 clients. Below are few of my report.md file contents. All,Min Throughput,custom\_simple\_query\_228,0.13,ops/s All,Median Throughput,custom…

---

## [Search fails with "java.io.IOException: listener timeout after waiting for \[30000\] ms"](https://discuss.elastic.co/t/search-fails-with-java-io-ioexception-listener-timeout-after-waiting-for-30000-ms/189639)

<div class="topic-metadata">

**Author:** [@shobhana](https://discuss.elastic.co/u/shobhana)\
**Replies:** 0\
**Last updated:** [July 10, 2019, 1:05am UTC](https://discuss.elastic.co/t/search-fails-with-java-io-ioexception-listener-timeout-after-waiting-for-30000-ms/189639 "2019-07-10T01:05:21Z")

</div>

We have a 10-node cluster having just a few GBs of data. We have 5 indexes (total of 28 primary shards) and replication of 1 for each shard. Last night we deleted 2 indexes and re-ingested data to these indexes. After th…

---

## [Elasticsearch service won't run on new installation](https://discuss.elastic.co/t/elasticsearch-service-wont-run-on-new-installation/188179)

<div class="topic-metadata">

**Author:** [@marcerickson](https://discuss.elastic.co/u/marcerickson)\
**Replies:** 7\
**Last updated:** [July 9, 2019, 11:41pm UTC](https://discuss.elastic.co/t/elasticsearch-service-wont-run-on-new-installation/188179 "2019-07-09T23:41:10Z")

</div>

System - Dell T310 32 GB RAM Ubuntu Server 18.04 with Xubuntu GUI added. Installation of GUI for Elasticsearch hasn't been done because the service won't stay running. Tell me what else you need to troubleshoot my issu…

---

## [Indexes aren't being autocreated](https://discuss.elastic.co/t/indexes-arent-being-autocreated/189633)

<div class="topic-metadata">

**Author:** [@nijave](https://discuss.elastic.co/u/nijave)\
**Replies:** 1\
**Last updated:** [July 9, 2019, 10:27pm UTC](https://discuss.elastic.co/t/indexes-arent-being-autocreated/189633 "2019-07-09T22:27:01Z")

</div>

I have logstash outputting data to Elasticsearch but it created the first index and hasn't created any since. I created a VM with logstash/elasticsearch with this ansible playbook https://pastebin.com/innbMN4p /etc/elas…

---

## [SQL Query : Indice vs Tables](https://discuss.elastic.co/t/sql-query-indice-vs-tables/189472)

<div class="topic-metadata">

**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\
**Replies:** 3\
**Last updated:** [July 9, 2019, 8:44pm UTC](https://discuss.elastic.co/t/sql-query-indice-vs-tables/189472 "2019-07-09T20:44:51Z")

</div>

Hi everyone, I trying to use SQL on elasticsearch. (ver 7.1) I have some index : web-access-2019.07, web-access-2019.08, web-access-2019.09. So how to use sql to query into three index above. I try with query : POS…

---

## [Elasticsearch doesn't find bundled JDK](https://discuss.elastic.co/t/elasticsearch-doesnt-find-bundled-jdk/186962)

<div class="topic-metadata">

**Author:** [@dandago](https://discuss.elastic.co/u/dandago)\
**Replies:** 4\
**Last updated:** [July 9, 2019, 8:25pm UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-find-bundled-jdk/186962 "2019-07-09T20:25:24Z")

</div>

I've just downloaded Elasticsearch 7.1.1 and am trying it out on Windows 10. Just today I learned that 7.0+ comes with a bundled JDK, so I decided to give it a try without setting JAVA\_HOME. However, it cannot find the J…

---

## [ElasicSearch cluster are crashing when conducting heavy aggregations](https://discuss.elastic.co/t/elasicsearch-cluster-are-crashing-when-conducting-heavy-aggregations/189611)

<div class="topic-metadata">

**Author:** [@jason.kim](https://discuss.elastic.co/u/jason.kim)\
**Replies:** 2\
**Last updated:** [July 9, 2019, 7:39pm UTC](https://discuss.elastic.co/t/elasicsearch-cluster-are-crashing-when-conducting-heavy-aggregations/189611 "2019-07-09T19:39:54Z")

</div>

We currently have 6 ES data nodes, 1 ES master node, and 1 ES coordinating node in our setup. We are conducting load tests that generate millions of lines of data, which get fed from hundreds of server using Filebeat th…

---

## [How to get the count of duplicate documents based on a field value?](https://discuss.elastic.co/t/how-to-get-the-count-of-duplicate-documents-based-on-a-field-value/189614)

<div class="topic-metadata">

**Author:** [@praveengadugin1](https://discuss.elastic.co/u/praveengadugin1)\
**Replies:** 0\
**Last updated:** [July 9, 2019, 7:22pm UTC](https://discuss.elastic.co/t/how-to-get-the-count-of-duplicate-documents-based-on-a-field-value/189614 "2019-07-09T19:22:33Z")

</div>

i have an index of 14 million docs. (2.5 TB). I suspect there are around 2 million duplicates in that. I want to get the exact count of documents which have more than one copy. I want to do this based on a field which we…

---

## [Query and score similar documents based on hierarchical data](https://discuss.elastic.co/t/query-and-score-similar-documents-based-on-hierarchical-data/189608)

<div class="topic-metadata">

**Author:** [@Borwick\_5576](https://discuss.elastic.co/u/Borwick_5576)\
**Replies:** 0\
**Last updated:** [July 9, 2019, 6:22pm UTC](https://discuss.elastic.co/t/query-and-score-similar-documents-based-on-hierarchical-data/189608 "2019-07-09T18:22:53Z")

</div>

I'm working in creating and simplifying probabilistic topic models for large corpora of data. Every document I would index will contain a field having the following format: ... "topics" : { "level0" : \["keywords"\], …

---

## [HTTP Security Header Not Detected - Vulnerability](https://discuss.elastic.co/t/http-security-header-not-detected-vulnerability/189506)

<div class="topic-metadata">

**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\
**Replies:** 5\
**Last updated:** [July 9, 2019, 4:25pm UTC](https://discuss.elastic.co/t/http-security-header-not-detected-vulnerability/189506 "2019-07-09T16:25:35Z")

</div>

Hello! Scans in my company detected a vulnerability from the title - is there any way to set HTTP Headers on Elasticsearch? We are using Elastic 6.8.0.

---

## [Plugin java elasticsearch](https://discuss.elastic.co/t/plugin-java-elasticsearch/189595)

<div class="topic-metadata">

**Author:** [@jpali](https://discuss.elastic.co/u/jpali)\
**Replies:** 0\
**Last updated:** [July 9, 2019, 4:22pm UTC](https://discuss.elastic.co/t/plugin-java-elasticsearch/189595 "2019-07-09T16:22:43Z")

</div>

Hi, I'm trying to make a java plugin who calculate the chi-square between two fields (or more) in a index. And I would like to know if you can access directly to a field, a method who contains values in a array ? The …

---

## [Elasticsearch clustering on two hosts using docker-compose](https://discuss.elastic.co/t/elasticsearch-clustering-on-two-hosts-using-docker-compose/189480)

<div class="topic-metadata">

**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\
**Replies:** 2\
**Last updated:** [July 9, 2019, 4:01pm UTC](https://discuss.elastic.co/t/elasticsearch-clustering-on-two-hosts-using-docker-compose/189480 "2019-07-09T16:01:17Z")

</div>

Hello. I am attempting to form a cluster with 6 docker containers on two docker hosts. Topology below: Docker-compose.yml on ELK1: version: '3.7' services: elk1\_es01: container\_name: elk1\_es01 image: docker.e…

---

## [Searching text vs keyword fields](https://discuss.elastic.co/t/searching-text-vs-keyword-fields/189589)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 0\
**Last updated:** [July 9, 2019, 3:58pm UTC](https://discuss.elastic.co/t/searching-text-vs-keyword-fields/189589 "2019-07-09T15:58:11Z")

</div>

After looking at the documentation, I was under the impression that searching a keyword field would be quicker, since a keyword field is analyzed by the entirety of it's content vs a text field analyzed by each word in t…

---

## [Getting "signed fields invalid" when configure HTTPS to Elastic HTTP layer with X-Pack](https://discuss.elastic.co/t/getting-signed-fields-invalid-when-configure-https-to-elastic-http-layer-with-x-pack/189162)

<div class="topic-metadata">

**Author:** [@Victor\_Guimaraes](https://discuss.elastic.co/u/Victor_Guimaraes)\
**Replies:** 7\
**Last updated:** [July 9, 2019, 3:38pm UTC](https://discuss.elastic.co/t/getting-signed-fields-invalid-when-configure-https-to-elastic-http-layer-with-x-pack/189162 "2019-07-09T15:38:00Z")

</div>

Hello, I'm testing the Elasticsearch 7.2, thinking in upgrade my production cluster from 6.4 version to 7.2. On my 6.4 cluster, I'm using SearchGuard for security, and works very well. I want to use X-Pack in the new v…

---

## [Suggester on multiple field](https://discuss.elastic.co/t/suggester-on-multiple-field/189585)

<div class="topic-metadata">

**Author:** [@baya\_weaver](https://discuss.elastic.co/u/baya_weaver)\
**Replies:** 0\
**Last updated:** [July 9, 2019, 3:37pm UTC](https://discuss.elastic.co/t/suggester-on-multiple-field/189585 "2019-07-09T15:37:55Z")

</div>

Is it possible to apply one Suggester on multiple fields?

---

## [How to create an update request with multiple fields with Java HIGH API](https://discuss.elastic.co/t/how-to-create-an-update-request-with-multiple-fields-with-java-high-api/189552)

<div class="topic-metadata">

**Author:** [@matheusribeirogarcia](https://discuss.elastic.co/u/matheusribeirogarcia)\
**Replies:** 4\
**Last updated:** [July 9, 2019, 3:09pm UTC](https://discuss.elastic.co/t/how-to-create-an-update-request-with-multiple-fields-with-java-high-api/189552 "2019-07-09T15:09:15Z")

</div>

Hello, I'm trying to update some fields of a document based on a query, but I am having problems to push its changes in the UpdateRequest, I am probably doing the script in a wrong way. I am using that client: \<depen…

---

## [Curator snapshot kibana indices don't work anymore](https://discuss.elastic.co/t/curator-snapshot-kibana-indices-dont-work-anymore/189367)

<div class="topic-metadata">

**Author:** [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\
**Replies:** 2\
**Last updated:** [July 9, 2019, 3:04pm UTC](https://discuss.elastic.co/t/curator-snapshot-kibana-indices-dont-work-anymore/189367 "2019-07-09T15:04:12Z")

</div>

Hello, I have noticed my snapshot of kibana indices don't work anymore. I don't know why, maybe due to an upgrade of my stack last april (6.3.0 to 6.7.1). Now when I run the script : curator --dry-run snapshot\_index\_k…

---

## [Not able to modify the /etc/hosts inside the ES container](https://discuss.elastic.co/t/not-able-to-modify-the-etc-hosts-inside-the-es-container/189205)

<div class="topic-metadata">

**Author:** [@Bubunia\_Patra](https://discuss.elastic.co/u/Bubunia_Patra)\
**Replies:** 6\
**Last updated:** [July 9, 2019, 3:00pm UTC](https://discuss.elastic.co/t/not-able-to-modify-the-etc-hosts-inside-the-es-container/189205 "2019-07-09T15:00:52Z")

</div>

Hi all, I am using ES 5.6.10 and I want to add an entry to /etc/ hosts after the elasticsearch container is started and then restart the ES again. But I could not able to add any new entries to the /etc/hosts inside ES …

---

## [Random\_score is ignoring a simple\_sort](https://discuss.elastic.co/t/random-score-is-ignoring-a-simple-sort/189548)

<div class="topic-metadata">

**Author:** [@blacksoul](https://discuss.elastic.co/u/blacksoul)\
**Replies:** 2\
**Last updated:** [July 9, 2019, 1:29pm UTC](https://discuss.elastic.co/t/random-score-is-ignoring-a-simple-sort/189548 "2019-07-09T13:29:16Z")

</div>

Hello, I have a search within my index that currently works, I want to get the professionals that have a subscription first (is\_subscribed BOOLEAN) and then follow with the rest of users. I achieve this using the query: …

---

## [Indexing varbinary column in SQL Server](https://discuss.elastic.co/t/indexing-varbinary-column-in-sql-server/189545)

<div class="topic-metadata">

**Author:** [@bhetland](https://discuss.elastic.co/u/bhetland)\
**Replies:** 0\
**Last updated:** [July 9, 2019, 12:30pm UTC](https://discuss.elastic.co/t/indexing-varbinary-column-in-sql-server/189545 "2019-07-09T12:30:43Z")

</div>

Hi, I have installed Elasticsearch, Logstash, Kibana, and the SQL JDBC driver. All of these things run and I have created an index and have used Logstash to index a SQL Server table. I've then used Kibana to query the …

---

## [Warning of "master not discovered or elected yet", even though I have only one node](https://discuss.elastic.co/t/warning-of-master-not-discovered-or-elected-yet-even-though-i-have-only-one-node/189542)

<div class="topic-metadata">

**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\
**Replies:** 0\
**Last updated:** [July 9, 2019, 12:09pm UTC](https://discuss.elastic.co/t/warning-of-master-not-discovered-or-elected-yet-even-though-i-have-only-one-node/189542 "2019-07-09T12:09:41Z")

</div>

I am currently using ElasticSearch 7.2.0 on Windows. I have only one node so far. When I run elasticsearch.bat, I see the following messages on my console: \[BolverkXR\] master not discovered or elected yet, an election …

---

## [Ancient Broken ElasticSearch question](https://discuss.elastic.co/t/ancient-broken-elasticsearch-question/189437)

<div class="topic-metadata">

**Author:** [@jsutton1](https://discuss.elastic.co/u/jsutton1)\
**Replies:** 2\
**Last updated:** [July 9, 2019, 11:47am UTC](https://discuss.elastic.co/t/ancient-broken-elasticsearch-question/189437 "2019-07-09T11:47:59Z")

</div>

I have inherited an ancient (1.4, I think) version of single node elasticstack running (well, not running at the moment). My original plan was to logon and clear out indexes because the customer got a low disk warning. …

---

## [Kibana in commercial product](https://discuss.elastic.co/t/kibana-in-commercial-product/189511)

<div class="topic-metadata">

**Author:** [@denise2019](https://discuss.elastic.co/u/denise2019)\
**Replies:** 3\
**Last updated:** [July 9, 2019, 11:30am UTC](https://discuss.elastic.co/t/kibana-in-commercial-product/189511 "2019-07-09T11:30:56Z")

</div>

We are looking to use Kibana in a commercial product with some quite specific customer requirements. Can someone help us out to have a chat?

---

## [CPU 100 without activity](https://discuss.elastic.co/t/cpu-100-without-activity/189478)

<div class="topic-metadata">

**Author:** [@NakMuay](https://discuss.elastic.co/u/NakMuay)\
**Replies:** 7\
**Last updated:** [July 9, 2019, 11:19am UTC](https://discuss.elastic.co/t/cpu-100-without-activity/189478 "2019-07-09T11:19:27Z")

</div>

Hi, (Sorry for my english ;)) My CPU is always 100% without any activity... what's wrong please ?... What kind of informations can I give you to help me ? Thanks,

---

## [Specified result set for specified users](https://discuss.elastic.co/t/specified-result-set-for-specified-users/189330)

<div class="topic-metadata">

**Author:** [@satyajittarai](https://discuss.elastic.co/u/satyajittarai)\
**Replies:** 2\
**Last updated:** [July 9, 2019, 10:45am UTC](https://discuss.elastic.co/t/specified-result-set-for-specified-users/189330 "2019-07-09T10:45:59Z")

</div>

Hello All, We have urls in ES and it is indexed as an another field. If any user search a particular query, we send all result set to that user. But we need to send only urls which is belong to those kind of users. W…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1232)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1234)
