# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1314

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1315

---

## [Post\_filtering or filtering the inner hits of parent-child search query result?](https://discuss.elastic.co/t/post-filtering-or-filtering-the-inner-hits-of-parent-child-search-query-result/179291)

<div class="topic-metadata">

**Author:** [@fajara\_kurniawan](https://discuss.elastic.co/u/fajara_kurniawan)\
**Replies:** 0\
**Last updated:** [May 2, 2019, 7:04am UTC](https://discuss.elastic.co/t/post-filtering-or-filtering-the-inner-hits-of-parent-child-search-query-result/179291 "2019-05-02T07:04:30Z")

</div>

lets say i have this kind search query for parent\_child / join datatypes. { "query": { "bool": { "must": \[ { "has\_child": { "type": "or…

---

## [Removal of discovery.zen.minimum\_master\_nodes](https://discuss.elastic.co/t/removal-of-discovery-zen-minimum-master-nodes/179263)

<div class="topic-metadata">

**Author:** [@sg.esearch](https://discuss.elastic.co/u/sg.esearch)\
**Replies:** 1\
**Last updated:** [May 2, 2019, 1:46am UTC](https://discuss.elastic.co/t/removal-of-discovery-zen-minimum-master-nodes/179263 "2019-05-02T01:46:57Z")

</div>

As described in https://www.elastic.co/guide/en/elasticsearch/reference/current/breaking-changes-7.0.html#breaking\_70\_discovery\_changes, discovery.zen.minimum\_master\_nodes option is ingored in 7.0 version. But this sett…

---

## ["Can't merge because of conflicts: \[Cannot update enabled setting for \[\_source\], Cannot update excludes setting for \[\_source\]\]"](https://discuss.elastic.co/t/cant-merge-because-of-conflicts-cannot-update-enabled-setting-for-source-cannot-update-excludes-setting-for-source/179200)

<div class="topic-metadata">

**Author:** [@Maesuri\_Fauziah](https://discuss.elastic.co/u/Maesuri_Fauziah)\
**Replies:** 4\
**Last updated:** [May 2, 2019, 12:52am UTC](https://discuss.elastic.co/t/cant-merge-because-of-conflicts-cannot-update-enabled-setting-for-source-cannot-update-excludes-setting-for-source/179200 "2019-05-02T00:52:00Z")

</div>

i write this: PUT /my\_index/\_mapping/article { "article": { "\_source": { "excludes": \[ "date"\] } } } but the result: { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "Can't me…

---

## [How to get all results , By Ignoring "size" in query](https://discuss.elastic.co/t/how-to-get-all-results-by-ignoring-size-in-query/179237)

<div class="topic-metadata">

**Author:** [@examin](https://discuss.elastic.co/u/examin)\
**Replies:** 1\
**Last updated:** [May 2, 2019, 12:25am UTC](https://discuss.elastic.co/t/how-to-get-all-results-by-ignoring-size-in-query/179237 "2019-05-02T00:25:29Z")

</div>

By Default a query return 10 results, But i can handle all results and need them all at a time .Yes i can specify size to get all. But for i don't know how many results are their. So , may i make two queries first to get…

---

## [ElasticSearch 7.0 Cluster Error](https://discuss.elastic.co/t/elasticsearch-7-0-cluster-error/179227)

<div class="topic-metadata">

**Author:** [@dfoley84](https://discuss.elastic.co/u/dfoley84)\
**Replies:** 4\
**Last updated:** [May 1, 2019, 9:42pm UTC](https://discuss.elastic.co/t/elasticsearch-7-0-cluster-error/179227 "2019-05-01T21:42:40Z")

</div>

Hi Currently, I am currently configuration a 4 Node cluster with 1 Master and 3 data Nodes within a Cluster When i do a curl http://:9200/\_cat/nodes?v I am getting the following {"error":{"root\_cause":\[{"type":"master\_…

---

## [Elasticsearch upgrade from 6.7 to 7.0](https://discuss.elastic.co/t/elasticsearch-upgrade-from-6-7-to-7-0/179140)

<div class="topic-metadata">

**Author:** [@mep](https://discuss.elastic.co/u/mep)\
**Replies:** 8\
**Last updated:** [May 1, 2019, 9:17pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-6-7-to-7-0/179140 "2019-05-01T21:17:45Z")

</div>

Hello, I recently upgraded to verison 7.0 across my Elasticstack. The following is the errors coming from my elasticsearch.log file. I have tried changing many different aspects of my elasticsearch.yml file but haven't…

---

## [ELASTICSEARCH STUCK DURING INSTALLATION](https://discuss.elastic.co/t/elasticsearch-stuck-during-installation/179250)

<div class="topic-metadata">

**Author:** [@Debasish\_Rath](https://discuss.elastic.co/u/Debasish_Rath)\
**Replies:** 6\
**Last updated:** [May 1, 2019, 8:31pm UTC](https://discuss.elastic.co/t/elasticsearch-stuck-during-installation/179250 "2019-05-01T20:31:52Z")

</div>

During installation on redhat machine, installation stucked. ANy IDEA? below is the log \[2019-05-01T19:39:46,225\]\[INFO \]\[o.e.p.PluginsService \] \[srv-appmid-wl.sentel.lan\] loaded module \[transport-netty4\] \[2019-05-0…

---

## [Numeric filter in string field- painless?](https://discuss.elastic.co/t/numeric-filter-in-string-field-painless/179248)

<div class="topic-metadata">

**Author:** [@philv](https://discuss.elastic.co/u/philv)\
**Replies:** 0\
**Last updated:** [May 1, 2019, 8:15pm UTC](https://discuss.elastic.co/t/numeric-filter-in-string-field-painless/179248 "2019-05-01T20:15:20Z")

</div>

I was wondering whether this is possible somehow: I want to write a query on text where I can do the equivalent of: "fetch documents mentioning a number \>2 within X words of 'bicycle" That's a string field, but I need…

---

## [Resolving deprecation warnings to allow us to upgrade](https://discuss.elastic.co/t/resolving-deprecation-warnings-to-allow-us-to-upgrade/178038)

<div class="topic-metadata">

**Author:** [@cowensel](https://discuss.elastic.co/u/cowensel)\
**Replies:** 6\
**Last updated:** [May 1, 2019, 7:58pm UTC](https://discuss.elastic.co/t/resolving-deprecation-warnings-to-allow-us-to-upgrade/178038 "2019-05-01T19:58:38Z")

</div>

I am currently going through the Elasticsearch deprecation logs to check what we may need to resolve prior to upgrading our ELK Stack from v6.0.0 where I have found the following but have no clue how to resolve. \[o.e.d.…

---

## [Pattern type search in Elasticsearch](https://discuss.elastic.co/t/pattern-type-search-in-elasticsearch/179243)

<div class="topic-metadata">

**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\
**Replies:** 0\
**Last updated:** [May 1, 2019, 7:22pm UTC](https://discuss.elastic.co/t/pattern-type-search-in-elasticsearch/179243 "2019-05-01T19:22:44Z")

</div>

Hello , I have two records like following. record 1: { "codes" : "^|25325|UTY|4|^|58357|MKE|4|^|350082|MOT|3|^|25317|MTC|4|^|353501|MCE|1|" } record 2: { "codes" : "^|25325|MTC|4|^|58357|MTC|4|^|350082|MOT|3|^|2…

---

## [Cannot create index in elasticsearch 7.0.0 using python](https://discuss.elastic.co/t/cannot-create-index-in-elasticsearch-7-0-0-using-python/179214)

<div class="topic-metadata">

**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\
**Replies:** 1\
**Last updated:** [May 1, 2019, 5:50pm UTC](https://discuss.elastic.co/t/cannot-create-index-in-elasticsearch-7-0-0-using-python/179214 "2019-05-01T17:50:27Z")

</div>

Hi, I'm using python to create index in my elasticsearch. from elasticsearch import Elasticsearch es = Elasticsearch(es\_url) es.index(index=\<INDEX\_NAME\>, doc\_type="type", body="body", id=record\_id) But it returns: P…

---

## [Is it possible to use images instead of log file](https://discuss.elastic.co/t/is-it-possible-to-use-images-instead-of-log-file/179163)

<div class="topic-metadata">

**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\
**Replies:** 8\
**Last updated:** [May 1, 2019, 4:51pm UTC](https://discuss.elastic.co/t/is-it-possible-to-use-images-instead-of-log-file/179163 "2019-05-01T16:51:56Z")

</div>

Hi; i want to know if it iss possible to use images instead of log file, that means that i give as input an image file and try to extrat text from that image, any examples will be helpful thanks

---

## [Elasticsearch 7.0 recent installed stop after 1min 5s](https://discuss.elastic.co/t/elasticsearch-7-0-recent-installed-stop-after-1min-5s/179118)

<div class="topic-metadata">

**Author:** [@luisjoelqs](https://discuss.elastic.co/u/luisjoelqs)\
**Replies:** 6\
**Last updated:** [May 1, 2019, 3:17pm UTC](https://discuss.elastic.co/t/elasticsearch-7-0-recent-installed-stop-after-1min-5s/179118 "2019-05-01T15:17:29Z")

</div>

I have installed elasticsearch 7.0 in a VM dedicated for test of the version and after start the service I have the next status after 1 min 5 sec. test@elasticsearch:~ service elasticsearch status ● elasticsearch.servic…

---

## [How to Boost two fields](https://discuss.elastic.co/t/how-to-boost-two-fields/178994)

<div class="topic-metadata">

**Author:** [@jilusan](https://discuss.elastic.co/u/jilusan)\
**Replies:** 5\
**Last updated:** [May 1, 2019, 2:52pm UTC](https://discuss.elastic.co/t/how-to-boost-two-fields/178994 "2019-05-01T14:52:17Z")

</div>

Hi, I would like to boost 'title' and 'description' fields on query search, and leave all the other fields (I have many) with boost 1. So I did: GET index1/\_doc/\_search { "query": { "query\_string": { "query…

---

## [Exapmle of data reading not from log but from keyboard (stdin)](https://discuss.elastic.co/t/exapmle-of-data-reading-not-from-log-but-from-keyboard-stdin/179207)

<div class="topic-metadata">

**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\
**Replies:** 1\
**Last updated:** [May 1, 2019, 2:09pm UTC](https://discuss.elastic.co/t/exapmle-of-data-reading-not-from-log-but-from-keyboard-stdin/179207 "2019-05-01T14:09:48Z")

</div>

hi everyone, can you help i need to get data from keyboard text and display the data containing the word "cat" on kibana how can i do that, it will be veru helpful if yo give the content of logstach and how to read the u…

---

## [Can I use matchPhrasePrefixQuery and fuzziness at the same time?](https://discuss.elastic.co/t/can-i-use-matchphraseprefixquery-and-fuzziness-at-the-same-time/177726)

<div class="topic-metadata">

**Author:** [@Aswini\_Kumar\_Rout](https://discuss.elastic.co/u/Aswini_Kumar_Rout)\
**Replies:** 2\
**Last updated:** [May 1, 2019, 1:24pm UTC](https://discuss.elastic.co/t/can-i-use-matchphraseprefixquery-and-fuzziness-at-the-same-time/177726 "2019-05-01T13:24:09Z")

</div>

I am using Elasticsearch 6.5 and when I use matchPhrasePrefixQuery it works fine. For Example I have documents like 1.spiderman is climbing 2.spiderman 3.spider When I type "s" I got all this using matchPhrasePrefi…

---

## [Nested mapping issues](https://discuss.elastic.co/t/nested-mapping-issues/179166)

<div class="topic-metadata">

**Author:** [@yuva\_rajan](https://discuss.elastic.co/u/yuva_rajan)\
**Replies:** 10\
**Last updated:** [May 1, 2019, 11:21am UTC](https://discuss.elastic.co/t/nested-mapping-issues/179166 "2019-05-01T11:21:25Z")

</div>

Hi , Below are my mappings PUT \_template/prod { "index\_patterns": \["\*"\], "settings":{ "codec": "best\_compression", "number\_of\_shards": 1, "number\_of\_replicas": 1 }, …

---

## [3 node cluster setup](https://discuss.elastic.co/t/3-node-cluster-setup/177032)

<div class="topic-metadata">

**Author:** [@Timshs](https://discuss.elastic.co/u/Timshs)\
**Replies:** 2\
**Last updated:** [May 1, 2019, 9:23am UTC](https://discuss.elastic.co/t/3-node-cluster-setup/177032 "2019-05-01T09:23:09Z")

</div>

Hi I have 3 nodes setup in my cluster. One node.master = true and two node.data = true Is this the right way to avoid split brain ? I seem to get: \[WARN \]\[o.e.x.s.t.n.SecurityNetty4ServerTransport\] \[rg-app-prod-mast…

---

## [Issue while creating snapshot error - path.repo setting is empty](https://discuss.elastic.co/t/issue-while-creating-snapshot-error-path-repo-setting-is-empty/179064)

<div class="topic-metadata">

**Author:** [@Ronnie16](https://discuss.elastic.co/u/Ronnie16)\
**Replies:** 2\
**Last updated:** [May 1, 2019, 7:30am UTC](https://discuss.elastic.co/t/issue-while-creating-snapshot-error-path-repo-setting-is-empty/179064 "2019-05-01T07:30:18Z")

</div>

I have a secure elasticsearch cluster running in kubernetes environment. I want to enable snapshots for the same. I added path.repo in config and also mounted persistent volume to be used as a repo. path.repo: \["/mnt/sn…

---

## [Linking Kibana and Elasticsearch with docker-compose](https://discuss.elastic.co/t/linking-kibana-and-elasticsearch-with-docker-compose/179040)

<div class="topic-metadata">

**Author:** [@isemaj](https://discuss.elastic.co/u/isemaj)\
**Replies:** 4\
**Last updated:** [May 1, 2019, 6:56am UTC](https://discuss.elastic.co/t/linking-kibana-and-elasticsearch-with-docker-compose/179040 "2019-05-01T06:56:53Z")

</div>

I read this docs about installing elasticsearch. And run the command docker pull docker.elastic.co/elasticsearch/elasticsearch:7.0.0 And this on for kibana docker pull docker.elastic.co/kibana/kibana:7.0.0 Then I cre…

---

## [ELK Log Search](https://discuss.elastic.co/t/elk-log-search/179172)

<div class="topic-metadata">

**Author:** [@Abhishek\_Kumar2](https://discuss.elastic.co/u/Abhishek_Kumar2)\
**Replies:** 0\
**Last updated:** [May 1, 2019, 6:43am UTC](https://discuss.elastic.co/t/elk-log-search/179172 "2019-05-01T06:43:54Z")

</div>

How can check all log from ELK server for supplied index using api or using postman? Purpose: I want shows log in some different application instead of kibana Please suggest

---

## [Cluster Env for ES and Kibana](https://discuss.elastic.co/t/cluster-env-for-es-and-kibana/179073)

<div class="topic-metadata">

**Author:** [@rahulka](https://discuss.elastic.co/u/rahulka)\
**Replies:** 2\
**Last updated:** [May 1, 2019, 5:19am UTC](https://discuss.elastic.co/t/cluster-env-for-es-and-kibana/179073 "2019-05-01T05:19:37Z")

</div>

We have 3 different node is in our env. Two working as Master-data and one as master. All three are connected to load balancer. Right now we are having 3 instance of Kibana connecting to one or other ES. This means we h…

---

## [Access denied for IndicesStatsRequest](https://discuss.elastic.co/t/access-denied-for-indicesstatsrequest/178700)

<div class="topic-metadata">

**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Replies:** 2\
**Last updated:** [May 1, 2019, 12:00am UTC](https://discuss.elastic.co/t/access-denied-for-indicesstatsrequest/178700 "2019-05-01T00:00:39Z")

</div>

I'm trying to setup Elastic monitoring in Zabbix using this project https://github.com/zarplata/zabbix-agent-extension-elasticsearch I think I have it mostly working, but I'm getting a permission error, my user is being…

---

## [Using elasticsearch-cli with docker exec (ES v 7.0.0)](https://discuss.elastic.co/t/using-elasticsearch-cli-with-docker-exec-es-v-7-0-0/179157)

<div class="topic-metadata">

**Author:** [@jeffkirk1](https://discuss.elastic.co/u/jeffkirk1)\
**Replies:** 0\
**Last updated:** [April 30, 2019, 10:04pm UTC](https://discuss.elastic.co/t/using-elasticsearch-cli-with-docker-exec-es-v-7-0-0/179157 "2019-04-30T22:04:45Z")

</div>

Howdy folks, I can successfully start the SQL console client using this command: docker exec -i $ELASTICSEARCH\_CONTAINER\_NAME /usr/share/elasticsearch/bin/elasticsearch-sql-cli However, I ran into a problem with the p…

---

## [Does not using -oss flavour means i have to pay for elasticseach?](https://discuss.elastic.co/t/does-not-using-oss-flavour-means-i-have-to-pay-for-elasticseach/178953)

<div class="topic-metadata">

**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\
**Replies:** 4\
**Last updated:** [April 30, 2019, 8:09pm UTC](https://discuss.elastic.co/t/does-not-using-oss-flavour-means-i-have-to-pay-for-elasticseach/178953 "2019-04-30T20:09:56Z")

</div>

I'm upgrading elk stack from 5.x to 7.0 and i saw that now there are two flavors of docker images. I'm confused which one to use. I disabled xpack in my current ELK stack. So should i go with non-oss flavor and disable…

---

## [Comparing two fields vaiues in pipeline aggregation](https://discuss.elastic.co/t/comparing-two-fields-vaiues-in-pipeline-aggregation/179086)

<div class="topic-metadata">

**Author:** [@examin](https://discuss.elastic.co/u/examin)\
**Replies:** 1\
**Last updated:** [April 30, 2019, 5:45pm UTC](https://discuss.elastic.co/t/comparing-two-fields-vaiues-in-pipeline-aggregation/179086 "2019-04-30T17:45:55Z")

</div>

I want to compare two fields in pipeline aggregation. Please give a small example to do so.

---

## [Why isn't search\_analyzer supported for numeric field mapping?](https://discuss.elastic.co/t/why-isnt-search-analyzer-supported-for-numeric-field-mapping/178677)

<div class="topic-metadata">

**Author:** [@jdmcalee](https://discuss.elastic.co/u/jdmcalee)\
**Replies:** 5\
**Last updated:** [April 30, 2019, 5:30pm UTC](https://discuss.elastic.co/t/why-isnt-search-analyzer-supported-for-numeric-field-mapping/178677 "2019-04-30T17:30:08Z")

</div>

I understand that numeric fields are not analyzed at index time. What I was hoping to do was to use a custom analyzer at query time, always, on a numeric phone number field to strip out all non-digit characters using a …

---

## [ES sort and order](https://discuss.elastic.co/t/es-sort-and-order/179125)

<div class="topic-metadata">

**Author:** [@elabedouss](https://discuss.elastic.co/u/elabedouss)\
**Replies:** 0\
**Last updated:** [April 30, 2019, 4:56pm UTC](https://discuss.elastic.co/t/es-sort-and-order/179125 "2019-04-30T16:56:03Z")

</div>

Dear team, I have a doubt regarding the search using ElasticSearch, I want to sort the search result by the giving word firstly then the subwords. For example when I search for the word "Patentability", my ES return a …

---

## ["The bulk request must be terminated by a newline \[\\\\n\]"](https://discuss.elastic.co/t/the-bulk-request-must-be-terminated-by-a-newline-n/179081)

<div class="topic-metadata">

**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\
**Replies:** 3\
**Last updated:** [April 30, 2019, 4:36pm UTC](https://discuss.elastic.co/t/the-bulk-request-must-be-terminated-by-a-newline-n/179081 "2019-04-30T16:36:10Z")

</div>

I have found similar questions both here as well as on StackOverflow, but unfortunately none of the answers helped. I am currently using ElasticSearch 7.0. I want to make a bulk request to my ElasticSearch server. My J…

---

## [Invalid license found](https://discuss.elastic.co/t/invalid-license-found/179092)

<div class="topic-metadata">

**Author:** [@Eddie35](https://discuss.elastic.co/u/Eddie35)\
**Replies:** 1\
**Last updated:** [April 30, 2019, 4:34pm UTC](https://discuss.elastic.co/t/invalid-license-found/179092 "2019-04-30T16:34:49Z")

</div>

Hello, I am installing ELK following the instructions on this website. https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elastic-stack-on-ubuntu-18-04. For the command s…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1313)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1315)
