# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1267 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1268 --- ## [Query/filter ordering performance issue](https://discuss.elastic.co/t/query-filter-ordering-performance-issue/184804)
**Author:** [@nwood888](https://discuss.elastic.co/u/nwood888)\ **Replies:** 4\ **Last updated:** [June 11, 2019, 5:17pm UTC](https://discuss.elastic.co/t/query-filter-ordering-performance-issue/184804 "2019-06-11T17:17:21Z")
Elastic version: 6.3.2 Documents: ~120,000,000 We're noticing very odd behavior with how Elastic appears to be ordering filter/query operations. Given the following query: POST /index/\_search { "from": 0, "size": … --- ## [Agregation on cURL](https://discuss.elastic.co/t/agregation-on-curl/185040)
**Author:** [@schneider](https://discuss.elastic.co/u/schneider)\ **Replies:** 3\ **Last updated:** [June 11, 2019, 3:55pm UTC](https://discuss.elastic.co/t/agregation-on-curl/185040 "2019-06-11T15:55:30Z")
I have a field named "remetente" containing e-mails, i want do agroup then by de top 10 higher hits between them, this is the cURL: curl -XGET "http://localhost:9200/\_search" -H 'Content-Type: application/json' -d' { "s… --- ## [Cross index field getting queried?](https://discuss.elastic.co/t/cross-index-field-getting-queried/185215)
**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\ **Replies:** 2\ **Last updated:** [June 11, 2019, 2:40pm UTC](https://discuss.elastic.co/t/cross-index-field-getting-queried/185215 "2019-06-11T14:40:50Z")
I have two separate indices A and B. Both indices have their own document structure. One field name is common between documents of A and B i.e. userName. When i query POST /A/\_search { "term": { "userName": "james… --- ## [Each Elasticsearch Shard is a Lucene Index](https://discuss.elastic.co/t/each-elasticsearch-shard-is-a-lucene-index/185206)
**Author:** [@saravananselvamohan](https://discuss.elastic.co/u/saravananselvamohan)\ **Replies:** 1\ **Last updated:** [June 11, 2019, 2:40pm UTC](https://discuss.elastic.co/t/each-elasticsearch-shard-is-a-lucene-index/185206 "2019-06-11T14:40:34Z")
I am not understanding the line "Each Elasticsearch Shard is a Lucene Index" --- ## [Automatically add current timestamp when indexing](https://discuss.elastic.co/t/automatically-add-current-timestamp-when-indexing/185110)
**Author:** [@i333](https://discuss.elastic.co/u/i333)\ **Replies:** 3\ **Last updated:** [June 11, 2019, 2:00pm UTC](https://discuss.elastic.co/t/automatically-add-current-timestamp-when-indexing/185110 "2019-06-11T14:00:12Z")
Can I have elasticsearch include the current timestamp when indexing a document, or is it necessary to add this from the application code that does the indexing? Any kind of default value feature where I could make it se… --- ## [Forcemerge of segments cause cluster to RED status](https://discuss.elastic.co/t/forcemerge-of-segments-cause-cluster-to-red-status/184449)
**Author:** [@Alex\_Doe](https://discuss.elastic.co/u/Alex_Doe)\ **Replies:** 8\ **Last updated:** [June 11, 2019, 1:16pm UTC](https://discuss.elastic.co/t/forcemerge-of-segments-cause-cluster-to-red-status/184449 "2019-06-11T13:16:37Z")
Hi all. I have 7 node cluster with elasticsearch version 7.1.1 which was upgraded from 6.7.2. Each node has 31gb heap size. Cluster contains 75 daily indexes 7 shards each and 1 replica shard. Each index has 500gb data. … --- ## [Failed to parse date field with format](https://discuss.elastic.co/t/failed-to-parse-date-field-with-format/185096)
**Author:** [@6tUBp3gwd9Zp](https://discuss.elastic.co/u/6tUBp3gwd9Zp)\ **Replies:** 0\ **Last updated:** [June 11, 2019, 5:53am UTC](https://discuss.elastic.co/t/failed-to-parse-date-field-with-format/185096 "2019-06-11T05:53:29Z")
Since updating from 6.7.2 to 6.8.0 all queries of my watchers give this error: "failed to parse date field \[\] with format \[strict\_date\_optional\_time||epoch\_millis\]" The query looks like this: "range": { "trigger\_event… --- ## [Elastic 7 mantaining a single Index](https://discuss.elastic.co/t/elastic-7-mantaining-a-single-index/184346)
**Author:** [@Merlin\_Nunez](https://discuss.elastic.co/u/Merlin_Nunez)\ **Replies:** 5\ **Last updated:** [June 11, 2019, 12:50pm UTC](https://discuss.elastic.co/t/elastic-7-mantaining-a-single-index/184346 "2019-06-11T12:50:29Z")
Hi All, I updated our lower environment stack from version 6.3 to version 7, last week, I´m using docker images to deploy elasticsearch+kibana+logstash to a single debian box using docker-compose. I did a complete wipe… --- ## [Error:Could not find or load main class elastic.war . While using elasticsearch APM](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-elastic-war-while-using-elasticsearch-apm/185142)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 2\ **Last updated:** [June 11, 2019, 12:25pm UTC](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-elastic-war-while-using-elasticsearch-apm/185142 "2019-06-11T12:25:08Z")
Hey, I am connecting elastic apm with spring boot application, I am able to connect my application with .jar file, but now when I am trying it with .war file I am not able to do it due to the following errors. When I a… --- ## [Change "path.repo" value in settings without restarting cluster - is it possible?](https://discuss.elastic.co/t/change-path-repo-value-in-settings-without-restarting-cluster-is-it-possible/185073)
**Author:** [@Yury\_Kozlov](https://discuss.elastic.co/u/Yury_Kozlov)\ **Replies:** 5\ **Last updated:** [June 11, 2019, 12:22pm UTC](https://discuss.elastic.co/t/change-path-repo-value-in-settings-without-restarting-cluster-is-it-possible/185073 "2019-06-11T12:22:08Z")
Hi, is it possible to change "path.repo" value in settings without restarting cluster ? I'd like to change our backups location without playing around with availability of any node. We use Elastic 6.8.0 on Windows. Th… --- ## [Issue in Boosting Query (Assigning negative boost)](https://discuss.elastic.co/t/issue-in-boosting-query-assigning-negative-boost/185181)
**Author:** [@nikita.jain](https://discuss.elastic.co/u/nikita.jain)\ **Replies:** 0\ **Last updated:** [June 11, 2019, 12:05pm UTC](https://discuss.elastic.co/t/issue-in-boosting-query-assigning-negative-boost/185181 "2019-06-11T12:05:43Z")
Hello, I'm trying to demote certain search results by providing a negative boost to the results containing certain terms. But the negative boost factor does not affect the score. Following is my query: GET /\_search { … --- ## [Timelion query building 7.x elasticsearch](https://discuss.elastic.co/t/timelion-query-building-7-x-elasticsearch/185171)
**Author:** [@Tania\_Saez](https://discuss.elastic.co/u/Tania_Saez)\ **Replies:** 0\ **Last updated:** [June 11, 2019, 11:09am UTC](https://discuss.elastic.co/t/timelion-query-building-7-x-elasticsearch/185171 "2019-06-11T11:09:31Z")
Using timelion in elasticsearch 7.1 version, I would like to build a timeline grahp based in print just one field from my index, how can I filter a field? As in the example, from my runscope index, filter the field 'di… --- ## [Revisiting the "Most efficient way to get all IDs"](https://discuss.elastic.co/t/revisiting-the-most-efficient-way-to-get-all-ids/185169)
**Author:** [@bruth](https://discuss.elastic.co/u/bruth)\ **Replies:** 0\ **Last updated:** [June 11, 2019, 11:03am UTC](https://discuss.elastic.co/t/revisiting-the-most-efficient-way-to-get-all-ids/185169 "2019-06-11T11:03:17Z")
Continuing the discussion from Most efficient way to get all ids of a type: @nik9000 You left a comment stating that if the use case could be modeled as an aggregation, then the column store would be implicitly used whi… --- ## [ELK upgrade checklists(6.5 to 7.1)](https://discuss.elastic.co/t/elk-upgrade-checklists-6-5-to-7-1/185159)
**Author:** [@G086486](https://discuss.elastic.co/u/G086486)\ **Replies:** 0\ **Last updated:** [June 11, 2019, 10:26am UTC](https://discuss.elastic.co/t/elk-upgrade-checklists-6-5-to-7-1/185159 "2019-06-11T10:26:03Z")
we are planning to migrate our ELK stack 6.5 to 7.1 . Do we have direct API to compare the differences of 6.5 and 7.1 Or does anyone has any high level document to go through before migrating to 7.1. Appreciate any help… --- ## [Alias of alias](https://discuss.elastic.co/t/alias-of-alias/184955)
**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\ **Replies:** 4\ **Last updated:** [June 11, 2019, 10:31am UTC](https://discuss.elastic.co/t/alias-of-alias/184955 "2019-06-11T10:31:32Z")
I was keen to know if we have Alias of Alias. I have read in very old posts that it has not been implemented but the posts are from 2014. Any clue anybody ? --- ## [Elapsed time calculation between different events](https://discuss.elastic.co/t/elapsed-time-calculation-between-different-events/185141)
**Author:** [@RDM](https://discuss.elastic.co/u/RDM)\ **Replies:** 1\ **Last updated:** [June 11, 2019, 10:19am UTC](https://discuss.elastic.co/t/elapsed-time-calculation-between-different-events/185141 "2019-06-11T10:19:27Z")
Hi, I know this has been discussed before, but I just wanted to make sure I had the correct up to date info and approach on this:- Fairly new to Elasticsearch, moving up the learning curve :slight\_smile: We have:- Fil… --- ## [Elasticsearch : Curl -X GET “localhost:9200” gives “Network Error (dns\_unresolved\_hostname)”](https://discuss.elastic.co/t/elasticsearch-curl-x-get-localhost-9200-gives-network-error-dns-unresolved-hostname/184942)
**Author:** [@Sundaramoorthy\_Anand](https://discuss.elastic.co/u/Sundaramoorthy_Anand)\ **Replies:** 7\ **Last updated:** [June 11, 2019, 10:14am UTC](https://discuss.elastic.co/t/elasticsearch-curl-x-get-localhost-9200-gives-network-error-dns-unresolved-hostname/184942 "2019-06-11T10:14:40Z")
I have installed as .tar.gz using wget and chown-ed the elasticsearch folder as a xyz user and xyzgrp group . I did run the es using ./bin/elasticsearch and it ran fine with no errors. then I curl-ed, curl -X GET "loca… --- ## [Understanding network under the hood with cross cluster search](https://discuss.elastic.co/t/understanding-network-under-the-hood-with-cross-cluster-search/185126)
**Author:** [@michal1](https://discuss.elastic.co/u/michal1)\ **Replies:** 4\ **Last updated:** [June 11, 2019, 9:42am UTC](https://discuss.elastic.co/t/understanding-network-under-the-hood-with-cross-cluster-search/185126 "2019-06-11T09:42:33Z")
Hi, i would like to understand - is the communication made from coordinator node to the remote clusters done the same way as communication between nodes in single cluster, in tcp? Or is there a http connection done ther… --- ## [Elasticsearch 7.1 cluster security](https://discuss.elastic.co/t/elasticsearch-7-1-cluster-security/185127)
**Author:** [@shahab](https://discuss.elastic.co/u/shahab)\ **Replies:** 2\ **Last updated:** [June 11, 2019, 9:09am UTC](https://discuss.elastic.co/t/elasticsearch-7-1-cluster-security/185127 "2019-06-11T09:09:21Z")
I am new to elasticsearch. I have installed a basic 3 nodes cluster and it is running and can verify through kibana. I can't find simple step by step guild of securing the cluster (TLS , SSL). I found an example but it i… --- ## [Dealing with "malformed" attributes](https://discuss.elastic.co/t/dealing-with-malformed-attributes/185133)
**Author:** [@dorrringel](https://discuss.elastic.co/u/dorrringel)\ **Replies:** 0\ **Last updated:** [June 11, 2019, 9:04am UTC](https://discuss.elastic.co/t/dealing-with-malformed-attributes/185133 "2019-06-11T09:04:01Z")
I'm using Elasticsearch to process user logs and clickstream data. Each such log contains several primitive attributes (version, environment, userID, etc.), but the heart of it is a JSON "data" object, which holds all t… --- ## [Elasticsearch 6.8 security update error while configuring it](https://discuss.elastic.co/t/elasticsearch-6-8-security-update-error-while-configuring-it/183484)
**Author:** [@akshay\_singh2](https://discuss.elastic.co/u/akshay_singh2)\ **Replies:** 11\ **Last updated:** [June 11, 2019, 8:44am UTC](https://discuss.elastic.co/t/elasticsearch-6-8-security-update-error-while-configuring-it/183484 "2019-06-11T08:44:43Z")
Hello, I'm trying to setup security x.pack on existing cluster (6.8.0), while setting up in test environment I'm getting below error: 2019-05-30T13:23:13,926\]\[WARN \]\[o.e.h.n.Netty4HttpServerTransport\] \[data-master1\] ca… --- ## [Client did not trust this server's certificate, closing connection Netty4TcpChannel](https://discuss.elastic.co/t/client-did-not-trust-this-servers-certificate-closing-connection-netty4tcpchannel/184342)
**Author:** [@sureshrupnar](https://discuss.elastic.co/u/sureshrupnar)\ **Replies:** 18\ **Last updated:** [June 11, 2019, 8:36am UTC](https://discuss.elastic.co/t/client-did-not-trust-this-servers-certificate-closing-connection-netty4tcpchannel/184342 "2019-06-11T08:36:53Z")
Hi Team, I want to connect Eleasticsearch 6.8.0 via TransportClient vs 6.8.0, while connecting transport client I am getting below error on elasticsearch - \[2019-06-05T15:52:56,827\]\[WARN \]\[o.e.x.c.s.t.n.SecurityNetty4T… --- ## [LDAP configuration in 7+](https://discuss.elastic.co/t/ldap-configuration-in-7/185002)
**Author:** [@JamesNotJamez](https://discuss.elastic.co/u/JamesNotJamez)\ **Replies:** 2\ **Last updated:** [June 11, 2019, 8:35am UTC](https://discuss.elastic.co/t/ldap-configuration-in-7/185002 "2019-06-11T08:35:51Z")
Hi, In the breaking changes for Elasticsearch 7.0 it says to make this change to the LDAP config, https://www.elastic.co/guide/en/elasticsearch/reference/current/breaking-changes-7.0.html#include-realm-type-in-setting H… --- ## [I got issue about "Data too large"](https://discuss.elastic.co/t/i-got-issue-about-data-too-large/185087)
**Author:** [@thachnv92](https://discuss.elastic.co/u/thachnv92)\ **Replies:** 3\ **Last updated:** [June 11, 2019, 7:03am UTC](https://discuss.elastic.co/t/i-got-issue-about-data-too-large/185087 "2019-06-11T07:03:00Z")
Hello, I installed ELK version 7.1.0. After I ran all modules, I got messages: At Logstash: \[2019-06-11T03:43:27,582\]\[INFO \]\[logstash.outputs.elasticsearch\] retrying failed action with response code: 429 ({"type"=\>"ci… --- ## [Difference between "index\_patterns" and "template"](https://discuss.elastic.co/t/difference-between-index-patterns-and-template/184877)
**Author:** [@Adello](https://discuss.elastic.co/u/Adello)\ **Replies:** 3\ **Last updated:** [June 11, 2019, 7:14am UTC](https://discuss.elastic.co/t/difference-between-index-patterns-and-template/184877 "2019-06-11T07:14:06Z")
Hi ((: What is the difference between those keywords when creating a mapping? For instance: curl -XPUT 'localhost:9200/\_template/template1?pretty' -H "Content-Type: application/json" -d '{ "index\_patterns": \["abc\*"\],… --- ## [How Search Templates are managed as code wise in ElasticSearch?](https://discuss.elastic.co/t/how-search-templates-are-managed-as-code-wise-in-elasticsearch/185106)
**Author:** [@saravananselvamohan](https://discuss.elastic.co/u/saravananselvamohan)\ **Replies:** 0\ **Last updated:** [June 11, 2019, 6:55am UTC](https://discuss.elastic.co/t/how-search-templates-are-managed-as-code-wise-in-elasticsearch/185106 "2019-06-11T06:55:25Z")
How Search Templates are managed as code wise in ElasticSearch? I can create Search templates in Elasticsearh but how I can I manage and scale for numerous Searches? --- ## [Facing error while rollover based on alias and template in 5.6.0](https://discuss.elastic.co/t/facing-error-while-rollover-based-on-alias-and-template-in-5-6-0/184869)
**Author:** [@thenextfreelancer](https://discuss.elastic.co/u/thenextfreelancer)\ **Replies:** 2\ **Last updated:** [June 11, 2019, 4:52am UTC](https://discuss.elastic.co/t/facing-error-while-rollover-based-on-alias-and-template-in-5-6-0/184869 "2019-06-11T04:52:24Z")
Hi, I am facing a strange problem while rollover of a particular alias. Error: { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "index name \[twitter\] does not … --- ## [Need to use basic version ( free version) of ELK stack with security features](https://discuss.elastic.co/t/need-to-use-basic-version-free-version-of-elk-stack-with-security-features/185081)
**Author:** [@Prashant\_Shirsath](https://discuss.elastic.co/u/Prashant_Shirsath)\ **Replies:** 1\ **Last updated:** [June 11, 2019, 4:18am UTC](https://discuss.elastic.co/t/need-to-use-basic-version-free-version-of-elk-stack-with-security-features/185081 "2019-06-11T04:18:48Z")
I am naive to ELK stack. I wanted to unable the basic security feature in EKL stack. It should ask me user ID and password when I am running ES or Kibana or Logstash. With the initial free trial license, I could do it, b… --- ## [How to increase score for exact word/phrase match in elastic search?](https://discuss.elastic.co/t/how-to-increase-score-for-exact-word-phrase-match-in-elastic-search/184901)
**Author:** [@Aco\_Strkalj](https://discuss.elastic.co/u/Aco_Strkalj)\ **Replies:** 10\ **Last updated:** [June 11, 2019, 4:01am UTC](https://discuss.elastic.co/t/how-to-increase-score-for-exact-word-phrase-match-in-elastic-search/184901 "2019-06-11T04:01:08Z")
I have a index with movie franchises in them, and I would like the exact word/phrase matches to score higher. For example, if I search for "Star Trek" I want "Star Trek" to score highest (first result) followed by "… --- ## [How to convert type in index](https://discuss.elastic.co/t/how-to-convert-type-in-index/185082)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 0\ **Last updated:** [June 11, 2019, 3:55am UTC](https://discuss.elastic.co/t/how-to-convert-type-in-index/185082 "2019-06-11T03:55:46Z")
Hi there, I have issue recently. I have production index mapping where I defined "elapsed\_time" as "float", then later accidentally inject "elasped\_time" as "string". It becomes type conflict now. When I re-index, I go… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1266) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1268)