# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1275

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1276

---

## [Auto complete Fields not working in Kibana 7.0.1](https://discuss.elastic.co/t/auto-complete-fields-not-working-in-kibana-7-0-1/183315)

<div class="topic-metadata">

**Author:** [@SudevPK](https://discuss.elastic.co/u/SudevPK)\
**Replies:** 9\
**Last updated:** [June 4, 2019, 3:51pm UTC](https://discuss.elastic.co/t/auto-complete-fields-not-working-in-kibana-7-0-1/183315 "2019-06-04T15:51:50Z")

</div>

I am using Elastic search 7.0.1

---

## [Should sort missing values be normalized?](https://discuss.elastic.co/t/should-sort-missing-values-be-normalized/184222)

<div class="topic-metadata">

**Author:** [@fax4ever](https://discuss.elastic.co/u/fax4ever)\
**Replies:** 0\
**Last updated:** [June 4, 2019, 3:42pm UTC](https://discuss.elastic.co/t/should-sort-missing-values-be-normalized/184222 "2019-06-04T15:42:38Z")

</div>

Hi all, I'm Fabio. Nice to meet you guys. With Elasticsearch it is possible to provide missing value in the sort predicates. Missing values can be even Strings, that's very nice since there's no support for that in Luc…

---

## [ES6.x - Prevent new index to be created with replica shards](https://discuss.elastic.co/t/es6-x-prevent-new-index-to-be-created-with-replica-shards/178168)

<div class="topic-metadata">

**Author:** [@EldrosKandar](https://discuss.elastic.co/u/EldrosKandar)\
**Replies:** 4\
**Last updated:** [May 14, 2019, 8:42am UTC](https://discuss.elastic.co/t/es6-x-prevent-new-index-to-be-created-with-replica-shards/178168 "2019-05-14T08:42:53Z")

</div>

This issue appears on ES 6.7 with the Filebeat Client still being 6.2. I've set the number of replicas to 0 with: curl -XPUT "http://localhost:9200/\_settings" -H 'Content-Type: application/json' -d' { "index" : { …

---

## [Query a field that can be host or IP](https://discuss.elastic.co/t/query-a-field-that-can-be-host-or-ip/184213)

<div class="topic-metadata">

**Author:** [@nili1](https://discuss.elastic.co/u/nili1)\
**Replies:** 0\
**Last updated:** [June 4, 2019, 2:55pm UTC](https://discuss.elastic.co/t/query-a-field-that-can-be-host-or-ip/184213 "2019-06-04T14:55:41Z")

</div>

We have a field that can have either a host name (e.g. elastic.co) or an IP. We would like to run queries as a regular text field or using CIDR notation. What is the best solution for this? Should we create a multi-field…

---

## [Detect document position in resultset](https://discuss.elastic.co/t/detect-document-position-in-resultset/184209)

<div class="topic-metadata">

**Author:** [@sevik](https://discuss.elastic.co/u/sevik)\
**Replies:** 0\
**Last updated:** [June 4, 2019, 2:42pm UTC](https://discuss.elastic.co/t/detect-document-position-in-resultset/184209 "2019-06-04T14:42:22Z")

</div>

Can I detect concrete document position is elastic query response? I have 15 advert on page, but I want to know position of my advert in elastic query result. Is there a way to find out about document position in query…

---

## [Avoid partial success of bulk Ingests under load](https://discuss.elastic.co/t/avoid-partial-success-of-bulk-ingests-under-load/184179)

<div class="topic-metadata">

**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\
**Replies:** 1\
**Last updated:** [June 4, 2019, 2:24pm UTC](https://discuss.elastic.co/t/avoid-partial-success-of-bulk-ingests-under-load/184179 "2019-06-04T14:24:43Z")

</div>

Under heavy loads we observed that few bulk ingests are returning status code of 200. But If we look at their response content, we see "errors=true". And out of 100 requests, few failed with 429 errors. So this is a part…

---

## [Indexof and substring on custom field on kibana version 5.6](https://discuss.elastic.co/t/indexof-and-substring-on-custom-field-on-kibana-version-5-6/184197)

<div class="topic-metadata">

**Author:** [@Joey\_Lam](https://discuss.elastic.co/u/Joey_Lam)\
**Replies:** 0\
**Last updated:** [June 4, 2019, 1:35pm UTC](https://discuss.elastic.co/t/indexof-and-substring-on-custom-field-on-kibana-version-5-6/184197 "2019-06-04T13:35:41Z")

</div>

I am currently using kibana version 5.6. I would like to search the position of string in a field and then extract the substring from the field show to value on "Discover" Code Example: def x = doc\["description"\].va…

---

## [Retrieving latest documents from elasticsearch](https://discuss.elastic.co/t/retrieving-latest-documents-from-elasticsearch/184178)

<div class="topic-metadata">

**Author:** [@lecko](https://discuss.elastic.co/u/lecko)\
**Replies:** 0\
**Last updated:** [June 4, 2019, 12:41pm UTC](https://discuss.elastic.co/t/retrieving-latest-documents-from-elasticsearch/184178 "2019-06-04T12:41:25Z")

</div>

This is probably very basic question. I did some research but cant find answer. I have acces to some third party app, that collects data from over 200 machines into one elasticsearch, it si version 2.x . I can acces th…

---

## [Score influenced by field value (terms\_set query)](https://discuss.elastic.co/t/score-influenced-by-field-value-terms-set-query/182055)

<div class="topic-metadata">

**Author:** [@sserena](https://discuss.elastic.co/u/sserena)\
**Replies:** 1\
**Last updated:** [June 4, 2019, 10:58am UTC](https://discuss.elastic.co/t/score-influenced-by-field-value-terms-set-query/182055 "2019-06-04T10:58:05Z")

</div>

Hello I'm new to elasticsearch. I really like it, but couldn't find a solution to one specific use case so far (been looking for quite a while): Part of my mapping: entities: { properties: { term: { type: …

---

## [Difference Between Term and Composite Aggregation](https://discuss.elastic.co/t/difference-between-term-and-composite-aggregation/184096)

<div class="topic-metadata">

**Author:** [@Shivendra\_Singh](https://discuss.elastic.co/u/Shivendra_Singh)\
**Replies:** 1\
**Last updated:** [June 4, 2019, 7:01am UTC](https://discuss.elastic.co/t/difference-between-term-and-composite-aggregation/184096 "2019-06-04T07:01:42Z")

</div>

I am new to elastic search. Please correct my understanding related to Term and Composite aggregation- Using Term aggregation, we can write GROUP BY query of SQL. But the problem arises if there are multiple shards then…

---

## [Update by Query](https://discuss.elastic.co/t/update-by-query/184144)

<div class="topic-metadata">

**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\
**Replies:** 1\
**Last updated:** [June 4, 2019, 10:24am UTC](https://discuss.elastic.co/t/update-by-query/184144 "2019-06-04T10:24:45Z")

</div>

Hi All, How can I do an update by query in Elasticsearch what looks performs like this SQL: UPDATE index1 a SET a.filed1 = (SELECT b.filed2 FROM index2 b WHERE b.filed3 = a.filed4) I'm using ES 6.8. Thanks, Peter

---

## [Elasticsearch watcher multiple indices](https://discuss.elastic.co/t/elasticsearch-watcher-multiple-indices/182624)

<div class="topic-metadata">

**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\
**Replies:** 2\
**Last updated:** [June 4, 2019, 9:58am UTC](https://discuss.elastic.co/t/elasticsearch-watcher-multiple-indices/182624 "2019-06-04T09:58:49Z")

</div>

Hi All, Please help me how to define a watcher in Elasticsearch for the following issue: It should fire an email in case of there are no new records in index\_a, but there are more than zero new records in index\_b in th…

---

## [Errors after installing X-Pack](https://discuss.elastic.co/t/errors-after-installing-x-pack/64210)

<div class="topic-metadata">

**Author:** [@x10Corey](https://discuss.elastic.co/u/x10Corey)\
**Replies:** 26\
**Last updated:** [June 4, 2019, 9:57am UTC](https://discuss.elastic.co/t/errors-after-installing-x-pack/64210 "2019-06-04T09:57:21Z")

</div>

I upgraded to ES5 and installed X-Pack, however I seem to be having some issues with it. I have 2 clients, 3 masters, and 5 data nodes. On all 10 servers it is now outputting the below error in the ES log multiple time…

---

## [How to config Elasticsearch with this my model?\[es 7.1\]](https://discuss.elastic.co/t/how-to-config-elasticsearch-with-this-my-model-es-7-1/184141)

<div class="topic-metadata">

**Author:** [@duythienitsl](https://discuss.elastic.co/u/duythienitsl)\
**Replies:** 0\
**Last updated:** [June 4, 2019, 9:55am UTC](https://discuss.elastic.co/t/how-to-config-elasticsearch-with-this-my-model-es-7-1/184141 "2019-06-04T09:55:23Z")

</div>

This is my picture of the model: Is it possible?? thank you so much... Here are my config's nodes(2 master eligible nodes , 2 data nodes, 1 client node): - Master\_node\_1: cluster.name: kinghub\_es\_cluster node.name…

---

## [SAML with Azure AD](https://discuss.elastic.co/t/saml-with-azure-ad/183388)

<div class="topic-metadata">

**Author:** [@hmayer](https://discuss.elastic.co/u/hmayer)\
**Replies:** 5\
**Last updated:** [June 4, 2019, 9:50am UTC](https://discuss.elastic.co/t/saml-with-azure-ad/183388 "2019-06-04T09:50:52Z")

</div>

I wanted to share my SAML configuration with Azure AD No documentation I found is 100% correct In a hot-warm deployment you must configure both elasticsearch instances Elasticsearch config xpack: security: authc: …

---

## [Decommission unreachable nodes](https://discuss.elastic.co/t/decommission-unreachable-nodes/183925)

<div class="topic-metadata">

**Author:** [@Silvio\_Di\_gregorio](https://discuss.elastic.co/u/Silvio_Di_gregorio)\
**Replies:** 3\
**Last updated:** [June 4, 2019, 9:16am UTC](https://discuss.elastic.co/t/decommission-unreachable-nodes/183925 "2019-06-04T09:16:34Z")

</div>

Hi, i'm using elasticsearch 6.5.4, i have 3 stable nodes (master eligible) and 4 commodity hardware that are often unreachable. Is there an automatic configuration to decommission these when unreachable? Thanks

---

## [Cannot find metadata for entity \[...\] in SAML xml despite it being there](https://discuss.elastic.co/t/cannot-find-metadata-for-entity-in-saml-xml-despite-it-being-there/183369)

<div class="topic-metadata">

**Author:** [@Wolfie\_Venturi](https://discuss.elastic.co/u/Wolfie_Venturi)\
**Replies:** 5\
**Last updated:** [June 4, 2019, 9:15am UTC](https://discuss.elastic.co/t/cannot-find-metadata-for-entity-in-saml-xml-despite-it-being-there/183369 "2019-06-04T09:15:09Z")

</div>

Hello, We have been trying to implement SAML authentication on our ELK stack. The kibana version is 6.7. Despite following the SAML configurations guide and double checking values we are encountering the following issu…

---

## [What is the recommendation for indexing and sharding in Elasticsearch in complex use case?](https://discuss.elastic.co/t/what-is-the-recommendation-for-indexing-and-sharding-in-elasticsearch-in-complex-use-case/184116)

<div class="topic-metadata">

**Author:** [@vivek14](https://discuss.elastic.co/u/vivek14)\
**Replies:** 2\
**Last updated:** [June 4, 2019, 9:01am UTC](https://discuss.elastic.co/t/what-is-the-recommendation-for-indexing-and-sharding-in-elasticsearch-in-complex-use-case/184116 "2019-06-04T09:01:05Z")

</div>

Hi All Elasticsearch Gurus, I am a newbie and learning the Elastic Stack and hence need inputs and thoughts from experts.. Assuming an Elastic Stack environment wherein the Logstash component parses/transforms data fro…

---

## [Painless Script from Java Client](https://discuss.elastic.co/t/painless-script-from-java-client/184125)

<div class="topic-metadata">

**Author:** [@Francesco\_Centrone](https://discuss.elastic.co/u/Francesco_Centrone)\
**Replies:** 0\
**Last updated:** [June 4, 2019, 8:58am UTC](https://discuss.elastic.co/t/painless-script-from-java-client/184125 "2019-06-04T08:58:41Z")

</div>

Hello, I am trying to use the painless script to edit/remove element from a list in a document. Everything works correctly but I am not able to know if the element was actually edited or removed. i.e. I need to know in…

---

## [Error at java.time.chrono.JapaneseEra](https://discuss.elastic.co/t/error-at-java-time-chrono-japaneseera/182599)

<div class="topic-metadata">

**Author:** [@Silvio\_Di\_gregorio](https://discuss.elastic.co/u/Silvio_Di_gregorio)\
**Replies:** 2\
**Last updated:** [June 4, 2019, 8:49am UTC](https://discuss.elastic.co/t/error-at-java-time-chrono-japaneseera/182599 "2019-06-04T08:49:16Z")

</div>

Hi, i'm using elasticsearch 6.5.4 (community edition) on Debian. Whenever I start it up, it runs for 5/10 seconds and then immediately fails. My cluster have 2 nodes and basic configuration, one normally runs one goes …

---

## [Hot/Warm architecture and Index Stats](https://discuss.elastic.co/t/hot-warm-architecture-and-index-stats/182388)

<div class="topic-metadata">

**Author:** [@prizov](https://discuss.elastic.co/u/prizov)\
**Replies:** 2\
**Last updated:** [June 4, 2019, 8:28am UTC](https://discuss.elastic.co/t/hot-warm-architecture-and-index-stats/182388 "2019-06-04T08:28:32Z")

</div>

Hi guys! Could you explain why index in Elasticsearch loose stats after relocation in case of changing routing allocation rules? Steps to reproduce: We have two zones hot and warm Create index in hot zone curl -XP…

---

## [ElasticSearch SAML AuthNRequest with embedded signature](https://discuss.elastic.co/t/elasticsearch-saml-authnrequest-with-embedded-signature/183958)

<div class="topic-metadata">

**Author:** [@vapetri](https://discuss.elastic.co/u/vapetri)\
**Replies:** 8\
**Last updated:** [June 4, 2019, 8:10am UTC](https://discuss.elastic.co/t/elasticsearch-saml-authnrequest-with-embedded-signature/183958 "2019-06-04T08:10:57Z")

</div>

Hi Guys, is there a way to add the saml sign inside the saml authnrequest xml? Here is my SAML token example: \<saml2p:AuthnRequest xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" AssertionCons…

---

## [WatcherのIndex Actionで、Index名を可変にする方法がないか](https://discuss.elastic.co/t/watcher-index-action-index/183483)

<div class="topic-metadata">

**Author:** [@5f750bbb360aba6ced5f](https://discuss.elastic.co/u/5f750bbb360aba6ced5f)\
**Replies:** 4\
**Last updated:** [June 4, 2019, 8:00am UTC](https://discuss.elastic.co/t/watcher-index-action-index/183483 "2019-06-04T08:00:45Z")

</div>

Watcherの実行時にAction句でIndexを作成しているのですが、 この時、作成される日付に応じて、Index名を変える（＝Watcherが実行されるたびに新しいIndexを作成する）ことができないでしょうか。 具体的にやりたいこととしては、 毎月月初にWatcherを実行し、実行日の前月の年月がIndex名の末尾に付記されるようにしたいです。 例: 6月1日にWatcherが実行され、watcher\_201905という…

---

## [Can elasticsearch be used to help in this advanced usecase?](https://discuss.elastic.co/t/can-elasticsearch-be-used-to-help-in-this-advanced-usecase/183304)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 5\
**Last updated:** [June 4, 2019, 6:54am UTC](https://discuss.elastic.co/t/can-elasticsearch-be-used-to-help-in-this-advanced-usecase/183304 "2019-06-04T06:54:31Z")

</div>

Hi there, I have been asked if elasticsearch can be helpful solving the following task. We want to analyze our user's workflow, meaning to check in which order users are calling our functions in a session and we would …

---

## [Scalability issue - Rally benchmark on ES 7.0.1](https://discuss.elastic.co/t/scalability-issue-rally-benchmark-on-es-7-0-1/183424)

<div class="topic-metadata">

**Author:** [@cks](https://discuss.elastic.co/u/cks)\
**Replies:** 6\
**Last updated:** [June 4, 2019, 6:40am UTC](https://discuss.elastic.co/t/scalability-issue-rally-benchmark-on-es-7-0-1/183424 "2019-06-04T06:40:14Z")

</div>

Running Rally on existing ElasticSearch 7.0.1 cluster. Tried on three cluster sizes, 1 node cluster, 2 nodes clusters and 4 node clusters. I don't see the scalability improvement on adding nodes to cluster. Rally: es…

---

## [SSLHandshakeException: no cipher suites in common](https://discuss.elastic.co/t/sslhandshakeexception-no-cipher-suites-in-common/183929)

<div class="topic-metadata">

**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\
**Replies:** 5\
**Last updated:** [June 4, 2019, 6:21am UTC](https://discuss.elastic.co/t/sslhandshakeexception-no-cipher-suites-in-common/183929 "2019-06-04T06:21:58Z")

</div>

https://www.elastic.co/guide/en/elasticsearch/reference/7.1/configuring-tls.html#node-certificates Hi, I have a 3 node cluster, trying to setup the TLS security using the link above. Without enabling the below configs,…

---

## [Elasticsearch regexp](https://discuss.elastic.co/t/elasticsearch-regexp/184094)

<div class="topic-metadata">

**Author:** [@nayun\_oh](https://discuss.elastic.co/u/nayun_oh)\
**Replies:** 0\
**Last updated:** [June 4, 2019, 6:10am UTC](https://discuss.elastic.co/t/elasticsearch-regexp/184094 "2019-06-04T06:10:08Z")

</div>

I want to find data containing phone number. I have used span multi with regexp. but it gave me 0 data. There is no error. but no result. Could you give me some example for that?

---

## [How to write prefix query in query\_string query](https://discuss.elastic.co/t/how-to-write-prefix-query-in-query-string-query/184093)

<div class="topic-metadata">

**Author:** [@hexer338](https://discuss.elastic.co/u/hexer338)\
**Replies:** 0\
**Last updated:** [June 4, 2019, 6:03am UTC](https://discuss.elastic.co/t/how-to-write-prefix-query-in-query-string-query/184093 "2019-06-04T06:03:21Z")

</div>

Hi, I want to combine prefix query on a field with another query in query\_string query. Can you please tell me how to do that ? So far I haven't been able to find any example to specify the queryType(eg. prefix query) i…

---

## [Best way to Index and Map large csv files with Python into Elasticsearch](https://discuss.elastic.co/t/best-way-to-index-and-map-large-csv-files-with-python-into-elasticsearch/183965)

<div class="topic-metadata">

**Author:** [@Maximilian\_Maigler](https://discuss.elastic.co/u/Maximilian_Maigler)\
**Replies:** 1\
**Last updated:** [June 4, 2019, 6:00am UTC](https://discuss.elastic.co/t/best-way-to-index-and-map-large-csv-files-with-python-into-elasticsearch/183965 "2019-06-04T06:00:57Z")

</div>

Hey guys, I have a two questions regarding indexing large csv files into Elasticsearch and mapping the data: Should I first create an index and mapping and then send the csv data to Elastic? If yes, could someone pr…

---

## [Can't volume mount /usr/share/elasticsearch/config on docker](https://discuss.elastic.co/t/cant-volume-mount-usr-share-elasticsearch-config-on-docker/184092)

<div class="topic-metadata">

**Author:** [@kimchigood](https://discuss.elastic.co/u/kimchigood)\
**Replies:** 0\
**Last updated:** [June 4, 2019, 5:43am UTC](https://discuss.elastic.co/t/cant-volume-mount-usr-share-elasticsearch-config-on-docker/184092 "2019-06-04T05:43:13Z")

</div>

I tried to set up elasticsearch on docker. but i can't volume mount on /usr/share/elasticsearch/config. /usr/share/elasticsearch/data, /usr/share/elasticsearch/plugins is okay. but only i can't volume mount path is /…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1274)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1276)
