# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1237

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1238

---

## ['setup-passwords' is not recognized as an internal or external command, operable program or batch file](https://discuss.elastic.co/t/setup-passwords-is-not-recognized-as-an-internal-or-external-command-operable-program-or-batch-file/189183)

<div class="topic-metadata">

**Author:** [@Mohsen\_Saleh](https://discuss.elastic.co/u/Mohsen_Saleh)\
**Replies:** 1\
**Last updated:** [July 6, 2019, 7:18am UTC](https://discuss.elastic.co/t/setup-passwords-is-not-recognized-as-an-internal-or-external-command-operable-program-or-batch-file/189183 "2019-07-06T07:18:13Z")

</div>

Hi all I'm new in elastic search and using it on windows 10, i want install marvel plugin on elastic search 5.6.1 it sounds that marvel in new version is part of x-pack plugin, i download x-pack-5.6.1.zip and install of…

---

## [Error connect PHP 7.3.7 with ElasticSearch 7.2.0](https://discuss.elastic.co/t/error-connect-php-7-3-7-with-elasticsearch-7-2-0/189186)

<div class="topic-metadata">

**Author:** [@amateur](https://discuss.elastic.co/u/amateur)\
**Replies:** 0\
**Last updated:** [July 6, 2019, 6:07am UTC](https://discuss.elastic.co/t/error-connect-php-7-3-7-with-elasticsearch-7-2-0/189186 "2019-07-06T06:07:28Z")

</div>

Hola, tengo -PHP 7.3.7 -ElasticSearch 7.2.0 -Composer 1.8.6 Todo corre sobre un Centos 7 x86\_64 Y me aparece este error: \[Sat Jul 06 01:50:24.138270 2019\] \[:error\] \[pid 66487\] \[client 192.168.1.3:20614\] PHP Parse …

---

## [Access elastic search from remote api](https://discuss.elastic.co/t/access-elastic-search-from-remote-api/189049)

<div class="topic-metadata">

**Author:** [@ram\_manoj](https://discuss.elastic.co/u/ram_manoj)\
**Replies:** 9\
**Last updated:** [July 6, 2019, 4:55am UTC](https://discuss.elastic.co/t/access-elastic-search-from-remote-api/189049 "2019-07-06T04:55:04Z")

</div>

I looked into many examples and documentation of elastic search. Most of the places, I find accessing elastic search from localhost. Some examples like: http://localhost:9200/\_msearch. But isn't it possible to access the…

---

## [How to keep list values from same Group next to each other no matter the Sort Order?](https://discuss.elastic.co/t/how-to-keep-list-values-from-same-group-next-to-each-other-no-matter-the-sort-order/189158)

<div class="topic-metadata">

**Author:** [@fgravel](https://discuss.elastic.co/u/fgravel)\
**Replies:** 0\
**Last updated:** [July 5, 2019, 6:59pm UTC](https://discuss.elastic.co/t/how-to-keep-list-values-from-same-group-next-to-each-other-no-matter-the-sort-order/189158 "2019-07-05T18:59:33Z")

</div>

I'm using ElasticSearch.net to display a list of Flight Tickets for Clients. Some of theses Clients are grouped together when we process the flight tickets. I want my list to display theses groups together no matter th…

---

## [How to make nested JSON a string with escaped quotes?](https://discuss.elastic.co/t/how-to-make-nested-json-a-string-with-escaped-quotes/189138)

<div class="topic-metadata">

**Author:** [@samuelburnett](https://discuss.elastic.co/u/samuelburnett)\
**Replies:** 1\
**Last updated:** [July 5, 2019, 6:53pm UTC](https://discuss.elastic.co/t/how-to-make-nested-json-a-string-with-escaped-quotes/189138 "2019-07-05T18:53:00Z")

</div>

I am making a Watch that outputs something like this: { "nonIdentifyingInfo": {"loginAttempts": 2}, "identifyingInfo":{"domain": "domain\_01", "userName": "john\_doe"}, "baseAlertId": 1 } However, I need the nested…

---

## [Migrating indices from 5.1.2 to 5.6.15](https://discuss.elastic.co/t/migrating-indices-from-5-1-2-to-5-6-15/189148)

<div class="topic-metadata">

**Author:** [@sandipatmca](https://discuss.elastic.co/u/sandipatmca)\
**Replies:** 0\
**Last updated:** [July 5, 2019, 5:54pm UTC](https://discuss.elastic.co/t/migrating-indices-from-5-1-2-to-5-6-15/189148 "2019-07-05T17:54:36Z")

</div>

After i did upgrade (i.e. Uninstall 5.1.2 & then installed 5.6.15 )ElasticSearch was not comingup. We found the issue with indices. Looks like Indices (under directory /opt/elasticsearch/data/nodes/0 ) does not get dele…

---

## [Problem with Index lifecycle management](https://discuss.elastic.co/t/problem-with-index-lifecycle-management/189143)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 2\
**Last updated:** [July 5, 2019, 5:44pm UTC](https://discuss.elastic.co/t/problem-with-index-lifecycle-management/189143 "2019-07-05T17:44:49Z")

</div>

Hi All... Here I am trying to create an Index LifeCycle management policy which Initially store the index in the hot node for maximum 10 minutes. Next, that index should move to warm node, forcemerge and Shrink operat…

---

## [Are tasks automatically purged after a period of time?](https://discuss.elastic.co/t/are-tasks-automatically-purged-after-a-period-of-time/188735)

<div class="topic-metadata">

**Author:** [@PleaseGodHelpMe](https://discuss.elastic.co/u/PleaseGodHelpMe)\
**Replies:** 3\
**Last updated:** [July 5, 2019, 5:24pm UTC](https://discuss.elastic.co/t/are-tasks-automatically-purged-after-a-period-of-time/188735 "2019-07-05T17:24:06Z")

</div>

I'm using NEST and switching from using the DeleteMany method to DeleteByQuery so that I can quickly delete items where I only know the ID. DeleteByQuery also has an option for us to disable wait\_for\_completion. I read t…

---

## [Curator Delete indicies based on disk size and index age](https://discuss.elastic.co/t/curator-delete-indicies-based-on-disk-size-and-index-age/189083)

<div class="topic-metadata">

**Author:** [@Jayabal\_K](https://discuss.elastic.co/u/Jayabal_K)\
**Replies:** 1\
**Last updated:** [July 5, 2019, 5:18pm UTC](https://discuss.elastic.co/t/curator-delete-indicies-based-on-disk-size-and-index-age/189083 "2019-07-05T17:18:36Z")

</div>

I saw some examples to delete indicies based on size and disk\_space, can I use both the filters in one action. I want to delete the indicies which is n days older or it occupies nGB If any one of the condition meets then…

---

## [nProbe Index for elasticsearch 7.0](https://discuss.elastic.co/t/nprobe-index-for-elasticsearch-7-0/189142)

<div class="topic-metadata">

**Author:** [@njhashmi](https://discuss.elastic.co/u/njhashmi)\
**Replies:** 0\
**Last updated:** [July 5, 2019, 5:14pm UTC](https://discuss.elastic.co/t/nprobe-index-for-elasticsearch-7-0/189142 "2019-07-05T17:14:01Z")

</div>

Hi, I am trying to create a template for nprobe but my template code is old and needs some changed w.r.t to 7.0. { "template" : "nprobe-", "settings" : { "index.refresh\_interval" : "5s" }, "mappings" : { "default"…

---

## [Windows service 7.2 fails to stop](https://discuss.elastic.co/t/windows-service-7-2-fails-to-stop/188971)

<div class="topic-metadata">

**Author:** [@geoB](https://discuss.elastic.co/u/geoB)\
**Replies:** 1\
**Last updated:** [July 5, 2019, 4:42pm UTC](https://discuss.elastic.co/t/windows-service-7-2-fails-to-stop/188971 "2019-07-05T16:42:02Z")

</div>

After properly getting Elasticsearch 7.2 to start and its service to install I noted that it was set to Manual. I told it to start and services.msc showed it as running. When I elected to stop the service I got an error …

---

## [Deny ILM to create indices](https://discuss.elastic.co/t/deny-ilm-to-create-indices/187795)

<div class="topic-metadata">

**Author:** [@skaldenmet](https://discuss.elastic.co/u/skaldenmet)\
**Replies:** 1\
**Last updated:** [July 5, 2019, 4:39pm UTC](https://discuss.elastic.co/t/deny-ilm-to-create-indices/187795 "2019-07-05T16:39:48Z")

</div>

Hi, I would like to deny ILM to automatically create indices and to only handle to optimize the storage between nodes. Is there a way to do this? Changing my elasticsearch.yml files to: action.auto\_create\_index: ".wa…

---

## [No results obtained using query with Bool must and filter](https://discuss.elastic.co/t/no-results-obtained-using-query-with-bool-must-and-filter/189137)

<div class="topic-metadata">

**Author:** [@Ugen](https://discuss.elastic.co/u/Ugen)\
**Replies:** 1\
**Last updated:** [July 5, 2019, 4:04pm UTC](https://discuss.elastic.co/t/no-results-obtained-using-query-with-bool-must-and-filter/189137 "2019-07-05T16:04:10Z")

</div>

Field Description is a Text field, Field Year is a long field. Query 1 result is wrong it returns nothing ("total": {"value": 0,"relation": "eq"}) Since there are documents with the word "Amour" in the Description fiel…

---

## [Assigning a certain field value to the user using elasticsearch queries](https://discuss.elastic.co/t/assigning-a-certain-field-value-to-the-user-using-elasticsearch-queries/188937)

<div class="topic-metadata">

**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\
**Replies:** 4\
**Last updated:** [July 5, 2019, 4:15pm UTC](https://discuss.elastic.co/t/assigning-a-certain-field-value-to-the-user-using-elasticsearch-queries/188937 "2019-07-05T16:15:46Z")

</div>

Given an index, and its field. Is it possible to restrict a user to a specific value in a field using Elasticsearch queries in the Kiabana dev tools? For example, I have the following field called cloudwatch\_logs.log\_g…

---

## [Sum Multiple Buckets](https://discuss.elastic.co/t/sum-multiple-buckets/189135)

<div class="topic-metadata">

**Author:** [@Alejack](https://discuss.elastic.co/u/Alejack)\
**Replies:** 0\
**Last updated:** [July 5, 2019, 3:36pm UTC](https://discuss.elastic.co/t/sum-multiple-buckets/189135 "2019-07-05T15:36:26Z")

</div>

Hi everyone, I've a big db with thousand distincts values of keywords type. I need to get the count of these values distinctly, however I must be extremely accurate so I cannot use "cardinality" and my distincts values…

---

## [What happen? @all](https://discuss.elastic.co/t/what-happen-all/189126)

<div class="topic-metadata">

**Author:** [@yycm](https://discuss.elastic.co/u/yycm)\
**Replies:** 1\
**Last updated:** [July 5, 2019, 3:30pm UTC](https://discuss.elastic.co/t/what-happen-all/189126 "2019-07-05T15:30:05Z")

</div>

JRE version: (8.0\_202-b08) (build ) Java VM: Java HotSpot(TM) 64-Bit Server VM (25.202-b08 mixed mode linux-amd64 compressed oops) Failed to write core dump. Core dumps have been disabled. To enable core dumping, try "u…

---

## [Configurin logstash,elasticsearch and kibana after enabling xpack](https://discuss.elastic.co/t/configurin-logstash-elasticsearch-and-kibana-after-enabling-xpack/188946)

<div class="topic-metadata">

**Author:** [@Smile](https://discuss.elastic.co/u/Smile)\
**Replies:** 3\
**Last updated:** [July 5, 2019, 3:05pm UTC](https://discuss.elastic.co/t/configurin-logstash-elasticsearch-and-kibana-after-enabling-xpack/188946 "2019-07-05T15:05:13Z")

</div>

Hi, I am quite new to elasticsearch, I enabled xpack security in elasticsearch.yml, and then created built-in users in bin/elasticsearch-setup-passwords. After that i added in kibana.yml elasticsearch.username: "kiban…

---

## [Why elasticsearch term query is difference from the same term query？](https://discuss.elastic.co/t/why-elasticsearch-term-query-is-difference-from-the-same-term-query/189025)

<div class="topic-metadata">

**Author:** [@ping\_luo](https://discuss.elastic.co/u/ping_luo)\
**Replies:** 1\
**Last updated:** [July 5, 2019, 2:43pm UTC](https://discuss.elastic.co/t/why-elasticsearch-term-query-is-difference-from-the-same-term-query/189025 "2019-07-05T14:43:03Z")

</div>

hi guys, i have a tough problem, each term query results are different. i also got some infomation by setting preference parameters, but it still didn't work.any help would be very much sappreciated. node: 1 replica: 0 …

---

## [Metricbeat failed to connect with elasticsearch](https://discuss.elastic.co/t/metricbeat-failed-to-connect-with-elasticsearch/188922)

<div class="topic-metadata">

**Author:** [@zmira\_meriem](https://discuss.elastic.co/u/zmira_meriem)\
**Replies:** 15\
**Last updated:** [July 5, 2019, 2:34pm UTC](https://discuss.elastic.co/t/metricbeat-failed-to-connect-with-elasticsearch/188922 "2019-07-05T14:34:07Z")

</div>

\[root@scw-elated-franklin ~\]# sudo metricbeat test output elasticsearch: http://51.77.:9200... parse url... OK connection... parse host... OK dns lookup... OK addresses: 51.77.. dial up... ERROR dial tcp 51.77.:92…

---

## [Migrating pipelines to ECS](https://discuss.elastic.co/t/migrating-pipelines-to-ecs/188756)

<div class="topic-metadata">

**Author:** [@javierE](https://discuss.elastic.co/u/javierE)\
**Replies:** 2\
**Last updated:** [July 5, 2019, 2:19pm UTC](https://discuss.elastic.co/t/migrating-pipelines-to-ecs/188756 "2019-07-05T14:19:57Z")

</div>

Hello, I am migrating my own pipeline according to the common scheme for apache events using as example the one provided by the apache module in filebeat and the ESC documentation. in these, the source address of the r…

---

## [Using Elasticsearch 7.2 with older version of PHP possible?](https://discuss.elastic.co/t/using-elasticsearch-7-2-with-older-version-of-php-possible/189066)

<div class="topic-metadata">

**Author:** [@aj\_potc](https://discuss.elastic.co/u/aj_potc)\
**Replies:** 2\
**Last updated:** [July 5, 2019, 2:02pm UTC](https://discuss.elastic.co/t/using-elasticsearch-7-2-with-older-version-of-php-possible/189066 "2019-07-05T14:02:19Z")

</div>

I've installed Elasticsearch 7.2 on CentOS 7. I'd like to try using the Elasticsearch-PHP API, but the only version compatible with Elasticsearch 7.2 doesn't support PHP 5.4, the standard PHP version in CentOS 7. Now, I…

---

## [Sysconfig file of elasticsearch](https://discuss.elastic.co/t/sysconfig-file-of-elasticsearch/188945)

<div class="topic-metadata">

**Author:** [@gongon](https://discuss.elastic.co/u/gongon)\
**Replies:** 3\
**Last updated:** [July 5, 2019, 1:45pm UTC](https://discuss.elastic.co/t/sysconfig-file-of-elasticsearch/188945 "2019-07-05T13:45:10Z")

</div>

Hi,Elasticsearch has 3 configuration files, OK? elasticsearch.yml, jvm.options,log4J2.properties. And what about the sysconfig file of elasticsearch, I don't find it, Elasticsearch is installed with homebrew on my mac

---

## [How to search for documents where field doesn't exist?](https://discuss.elastic.co/t/how-to-search-for-documents-where-field-doesnt-exist/189112)

<div class="topic-metadata">

**Author:** [@i333](https://discuss.elastic.co/u/i333)\
**Replies:** 0\
**Last updated:** [July 5, 2019, 1:24pm UTC](https://discuss.elastic.co/t/how-to-search-for-documents-where-field-doesnt-exist/189112 "2019-07-05T13:24:20Z")

</div>

https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-exists-query.html#find-docs-null-values shows how to find a document where the field contains \[\] or null. But how can I search for documents where…

---

## [Best way to manage updates in timeseries data](https://discuss.elastic.co/t/best-way-to-manage-updates-in-timeseries-data/189107)

<div class="topic-metadata">

**Author:** [@matd](https://discuss.elastic.co/u/matd)\
**Replies:** 0\
**Last updated:** [July 5, 2019, 1:07pm UTC](https://discuss.elastic.co/t/best-way-to-manage-updates-in-timeseries-data/189107 "2019-07-05T13:07:20Z")

</div>

Hi folks, I'm dealing with geo-timeseries data (IOT use-case). The data is indexed in an ES and queried in various ways. So far, so good, but we have some bad data points (that we detect using outlier detection algorit…

---

## [Best way to perform a query using a concrete field of a document](https://discuss.elastic.co/t/best-way-to-perform-a-query-using-a-concrete-field-of-a-document/189104)

<div class="topic-metadata">

**Author:** [@Borwick\_5576](https://discuss.elastic.co/u/Borwick_5576)\
**Replies:** 0\
**Last updated:** [July 5, 2019, 12:54pm UTC](https://discuss.elastic.co/t/best-way-to-perform-a-query-using-a-concrete-field-of-a-document/189104 "2019-07-05T12:54:58Z")

</div>

Hello, I want to perform a query using a document field as an input. Is there a way this can be done without using mlt?

---

## [Tokenize Complete Suggester Using NEST 7](https://discuss.elastic.co/t/tokenize-complete-suggester-using-nest-7/189103)

<div class="topic-metadata">

**Author:** [@han1](https://discuss.elastic.co/u/han1)\
**Replies:** 0\
**Last updated:** [July 5, 2019, 12:54pm UTC](https://discuss.elastic.co/t/tokenize-complete-suggester-using-nest-7/189103 "2019-07-05T12:54:49Z")

</div>

We are using the Completion Suggester for our Autocomplete functionality. However, we would also like to tokenize the field so that we can mimic Standard Analyzer behavior in that so that we can search by any token as o…

---

## [Why do I have to put the tls certificate in the elasticsearch path?](https://discuss.elastic.co/t/why-do-i-have-to-put-the-tls-certificate-in-the-elasticsearch-path/189032)

<div class="topic-metadata">

**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\
**Replies:** 1\
**Last updated:** [July 5, 2019, 12:49pm UTC](https://discuss.elastic.co/t/why-do-i-have-to-put-the-tls-certificate-in-the-elasticsearch-path/189032 "2019-07-05T12:49:20Z")

</div>

Why do I have to put the tls certificate in the elasticsearch path? I use the same credentials with kubernetes. At this point, I do not understand why I need to move the root certificate path into elasticsearch. Why i…

---

## [Sending email from gmail](https://discuss.elastic.co/t/sending-email-from-gmail/189081)

<div class="topic-metadata">

**Author:** [@proxx](https://discuss.elastic.co/u/proxx)\
**Replies:** 1\
**Last updated:** [July 5, 2019, 12:43pm UTC](https://discuss.elastic.co/t/sending-email-from-gmail/189081 "2019-07-05T12:43:56Z")

</div>

I know there a lot of questions around this issue, and haven't seen a clear explanation...TBH I installed my ELK stack using rpm and running very fine. However, have been struggling on how to get my watcher up and run…

---

## [Refresh Interval Value for Read-only index](https://discuss.elastic.co/t/refresh-interval-value-for-read-only-index/188976)

<div class="topic-metadata">

**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\
**Replies:** 7\
**Last updated:** [July 5, 2019, 12:01pm UTC](https://discuss.elastic.co/t/refresh-interval-value-for-read-only-index/188976 "2019-07-05T12:01:07Z")

</div>

Does it really matter what values we set in refresh\_interval for a read-only index? I'm re-indexing a huge index that contains legacy data and is never updated i.e read-only (RO). Before re-indexing, in order to boost p…

---

## [What to chose : Parent/child or Nested model](https://discuss.elastic.co/t/what-to-chose-parent-child-or-nested-model/188959)

<div class="topic-metadata">

**Author:** [@Sunny\_Pelletier](https://discuss.elastic.co/u/Sunny_Pelletier)\
**Replies:** 7\
**Last updated:** [July 5, 2019, 11:47am UTC](https://discuss.elastic.co/t/what-to-chose-parent-child-or-nested-model/188959 "2019-07-05T11:47:51Z")

</div>

Hello everyone, I am new to Elasticsearch, and there seems to be some really good features in this tool I have explored it for a few days, and I am currently trying to decide which model type would be preferable. I mad…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1236)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1238)
