# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1319

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1320

---

## [\[Elastic search v6.2\] What is the way to replace a field value from another value in search query itself](https://discuss.elastic.co/t/elastic-search-v6-2-what-is-the-way-to-replace-a-field-value-from-another-value-in-search-query-itself/178577)

<div class="topic-metadata">

**Author:** [@Shobhit\_Jain](https://discuss.elastic.co/u/Shobhit_Jain)\
**Replies:** 1\
**Last updated:** [April 26, 2019, 8:05am UTC](https://discuss.elastic.co/t/elastic-search-v6-2-what-is-the-way-to-replace-a-field-value-from-another-value-in-search-query-itself/178577 "2019-04-26T08:05:24Z")

</div>

I want to set up a preprocessor for search query field for which the specific value will be replaced from a set of values before the search query execution. The purpose to preprocess a value from set of values is to red…

---

## [Creating Query that matches values using OR within a specific timeframe](https://discuss.elastic.co/t/creating-query-that-matches-values-using-or-within-a-specific-timeframe/178506)

<div class="topic-metadata">

**Author:** [@lelwar](https://discuss.elastic.co/u/lelwar)\
**Replies:** 3\
**Last updated:** [April 26, 2019, 8:00am UTC](https://discuss.elastic.co/t/creating-query-that-matches-values-using-or-within-a-specific-timeframe/178506 "2019-04-26T08:00:26Z")

</div>

Hello! I am trying to create a query to search for different values of a specific field within a timeframe. For example, I want to search for a response with the value “123” OR “321” , AND it was created in the last 5 …

---

## [ElasticSearch going DOWN](https://discuss.elastic.co/t/elasticsearch-going-down/177502)

<div class="topic-metadata">

**Author:** [@Deepak2](https://discuss.elastic.co/u/Deepak2)\
**Replies:** 2\
**Last updated:** [April 26, 2019, 6:31am UTC](https://discuss.elastic.co/t/elasticsearch-going-down/177502 "2019-04-26T06:31:16Z")

</div>

Hi Experts, When i am trying to send data from quite many filebeat machines, elasticsearch is going down. Please suggest some solution. Appriciate quick reply.

---

## [Elasticsearch query to calculate yearly percentage growth](https://discuss.elastic.co/t/elasticsearch-query-to-calculate-yearly-percentage-growth/178574)

<div class="topic-metadata">

**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\
**Replies:** 0\
**Last updated:** [April 26, 2019, 7:29am UTC](https://discuss.elastic.co/t/elasticsearch-query-to-calculate-yearly-percentage-growth/178574 "2019-04-26T07:29:38Z")

</div>

Hi All, I would like to calculate yearly percentage growth of a particular field. Below is my sample doc for your reference. { "stdFin": { "fin": { "numberOfStatements": 5, "statements": \[{ "stdViewRef":…

---

## [Reindex creating a lot of deleted documents](https://discuss.elastic.co/t/reindex-creating-a-lot-of-deleted-documents/178405)

<div class="topic-metadata">

**Author:** [@developer-g](https://discuss.elastic.co/u/developer-g)\
**Replies:** 1\
**Last updated:** [April 26, 2019, 7:18am UTC](https://discuss.elastic.co/t/reindex-creating-a-lot-of-deleted-documents/178405 "2019-04-26T07:18:12Z")

</div>

Hello, I've been doing a bit reindexing on my cluster to change the analyser type on a field. No other settings are changed. To clarify: index AAA is the source and BBB is the destination. AAA has a field called dat…

---

## [How to load data 12/04/2018 11:00:55 -0000 timestamp via logstash into elastic search](https://discuss.elastic.co/t/how-to-load-data-12-04-2018-1155-0000-timestamp-via-logstash-into-elastic-search/178205)

<div class="topic-metadata">

**Author:** [@Swati123](https://discuss.elastic.co/u/Swati123)\
**Replies:** 4\
**Last updated:** [April 26, 2019, 6:46am UTC](https://discuss.elastic.co/t/how-to-load-data-12-04-2018-1155-0000-timestamp-via-logstash-into-elastic-search/178205 "2019-04-26T06:46:35Z")

</div>

I have server logs data of one of the field date as 12/04/2018 11:00:55 -0000 but I am not able to load this data directly even after defining the field mapping as PUT new-swati-2019.04.24 { "mappings": { "doc": { "…

---

## [Date format not recognized](https://discuss.elastic.co/t/date-format-not-recognized/178401)

<div class="topic-metadata">

**Author:** [@Peter\_Steenbergen](https://discuss.elastic.co/u/Peter_Steenbergen)\
**Replies:** 2\
**Last updated:** [April 26, 2019, 6:40am UTC](https://discuss.elastic.co/t/date-format-not-recognized/178401 "2019-04-26T06:40:10Z")

</div>

Can someone help me with the following? I have a timestamp like this, and want to create it in Elasticsearch in a datefield. Apr 25, 2019 12:21:19,783 AM CEST I keep getting errors with unrecognized date format and tr…

---

## [How to limit data in search hits based on condition](https://discuss.elastic.co/t/how-to-limit-data-in-search-hits-based-on-condition/178450)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 2\
**Last updated:** [April 26, 2019, 6:25am UTC](https://discuss.elastic.co/t/how-to-limit-data-in-search-hits-based-on-condition/178450 "2019-04-26T06:25:20Z")

</div>

Hi All, I am working in winlogbeat and I am started receiving the data to elasticsearch but now I want to limit the search hits based on some condition. Don't know whether this can be achieved using es queries or not b…

---

## [CPU utilization is too low while indexing](https://discuss.elastic.co/t/cpu-utilization-is-too-low-while-indexing/178347)

<div class="topic-metadata">

**Author:** [@suvarna](https://discuss.elastic.co/u/suvarna)\
**Replies:** 5\
**Last updated:** [April 26, 2019, 6:10am UTC](https://discuss.elastic.co/t/cpu-utilization-is-too-low-while-indexing/178347 "2019-04-26T06:10:16Z")

</div>

Hi Please find the below configuration. Rally: 1.Running esrally by using eventdata track. 2.Number of shards are 10: 3)Bulk size =2000000 system: 1)have 2 nodes 28 cores per socket. 2)have 1 nvme device of 1.…

---

## [Unable to start elasticsearch as service](https://discuss.elastic.co/t/unable-to-start-elasticsearch-as-service/178440)

<div class="topic-metadata">

**Author:** [@Kajol\_Nimesh](https://discuss.elastic.co/u/Kajol_Nimesh)\
**Replies:** 6\
**Last updated:** [April 26, 2019, 5:53am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-as-service/178440 "2019-04-26T05:53:44Z")

</div>

Elasticsearch is unable to start: these are the elasticsearch logs: at org.apache.lucene.store.BaseDirectory.obtainLock(BaseDirectory.java:45) ~\[lucene-core-8.0.0.jar:8.0.0 2ae4746365c1ee72a0047ced7610b2096…

---

## [ES 7 and kibana 7 Installation](https://discuss.elastic.co/t/es-7-and-kibana-7-installation/178563)

<div class="topic-metadata">

**Author:** [@Nikhil04](https://discuss.elastic.co/u/Nikhil04)\
**Replies:** 0\
**Last updated:** [April 26, 2019, 5:46am UTC](https://discuss.elastic.co/t/es-7-and-kibana-7-installation/178563 "2019-04-26T05:46:27Z")

</div>

I have to install Elasticsearch v7 on 3 nodes and kibana v7 on 1 node. All the nodes have RHEL 7 and java 8 installed. I have read the documents on the websites regarding installation and I am confused. My requirement …

---

## [Trying to run a query on Elasticsearch 2.4](https://discuss.elastic.co/t/trying-to-run-a-query-on-elasticsearch-2-4/178525)

<div class="topic-metadata">

**Author:** [@joshuaclark](https://discuss.elastic.co/u/joshuaclark)\
**Replies:** 10\
**Last updated:** [April 26, 2019, 5:34am UTC](https://discuss.elastic.co/t/trying-to-run-a-query-on-elasticsearch-2-4/178525 "2019-04-26T05:34:23Z")

</div>

Hi, I'm trying to pull data from elasticsearch 2.4 with a range. I'm running the following to try to get the last 5 days worth of data: { "query": { "range": { "timestamp": { "gte": "now-5d", "lte": "now", "format": "…

---

## [Bin elastic error](https://discuss.elastic.co/t/bin-elastic-error/178561)

<div class="topic-metadata">

**Author:** [@tonic\_Zun](https://discuss.elastic.co/u/tonic_Zun)\
**Replies:** 1\
**Last updated:** [April 26, 2019, 5:31am UTC](https://discuss.elastic.co/t/bin-elastic-error/178561 "2019-04-26T05:31:06Z")

</div>

OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release. \[2019-04-26T01:50:11,212\]\[INFO \]\[o.e.e.NodeEnvironment \] \[ip-172-31-25-150\] us…

---

## [Kibana, SAML, Okta - help?](https://discuss.elastic.co/t/kibana-saml-okta-help/178126)

<div class="topic-metadata">

**Author:** [@honzo](https://discuss.elastic.co/u/honzo)\
**Replies:** 7\
**Last updated:** [April 26, 2019, 4:34am UTC](https://discuss.elastic.co/t/kibana-saml-okta-help/178126 "2019-04-26T04:34:34Z")

</div>

Hello, I am trying to get our EC Kibana to authenticate with Okta, following the steps in the guide, but not having any luck :cry: Here is the elastic.yml override: xpack: security: authc: realms: …

---

## [Storage or query history. Is it possible to store it temporarily?](https://discuss.elastic.co/t/storage-or-query-history-is-it-possible-to-store-it-temporarily/178547)

<div class="topic-metadata">

**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\
**Replies:** 1\
**Last updated:** [April 26, 2019, 3:14am UTC](https://discuss.elastic.co/t/storage-or-query-history-is-it-possible-to-store-it-temporarily/178547 "2019-04-26T03:14:51Z")

</div>

Storage or query history. Is it possible to store it temporarily? I pose the question since I have more than 1 million documents which have categories and locations. To know how many documents exist in such category or…

---

## [\[ESRally Benchmarks\] throughput of search changes every time ES restart](https://discuss.elastic.co/t/esrally-benchmarks-throughput-of-search-changes-every-time-es-restart/174631)

<div class="topic-metadata">

**Author:** [@kakka](https://discuss.elastic.co/u/kakka)\
**Replies:** 5\
**Last updated:** [April 26, 2019, 2:35am UTC](https://discuss.elastic.co/t/esrally-benchmarks-throughput-of-search-changes-every-time-es-restart/174631 "2019-04-26T02:35:21Z")

</div>

I am using rally to benchmark ES, and track is geonames. Every time when ES starts, run several match\_all tests to warm up and get best throughput. The throughputs is between 45 and 200 in different test. Here is the en…

---

## [Expected behavior for many concurrent create index requests](https://discuss.elastic.co/t/expected-behavior-for-many-concurrent-create-index-requests/178335)

<div class="topic-metadata">

**Author:** [@arvinds94](https://discuss.elastic.co/u/arvinds94)\
**Replies:** 3\
**Last updated:** [April 26, 2019, 1:40am UTC](https://discuss.elastic.co/t/expected-behavior-for-many-concurrent-create-index-requests/178335 "2019-04-26T01:40:09Z")

</div>

Pretty much as the question states. What is the expected behavior when many concurrent identical create index requests are made to the elasticsearch cluster?

---

## [How to get details of instance](https://discuss.elastic.co/t/how-to-get-details-of-instance/178546)

<div class="topic-metadata">

**Author:** [@MOUAD\_KHAMMAL](https://discuss.elastic.co/u/MOUAD_KHAMMAL)\
**Replies:** 1\
**Last updated:** [April 26, 2019, 1:37am UTC](https://discuss.elastic.co/t/how-to-get-details-of-instance/178546 "2019-04-26T01:37:41Z")

</div>

hi guys. im new here.. i'm asking about how to get all infos and details about the instances... i mean i want to know the ips i'm using . please help

---

## [SQL too large in big data Indices](https://discuss.elastic.co/t/sql-too-large-in-big-data-indices/175272)

<div class="topic-metadata">

**Author:** [@Turnover\_Dev](https://discuss.elastic.co/u/Turnover_Dev)\
**Replies:** 7\
**Last updated:** [April 25, 2019, 9:57pm UTC](https://discuss.elastic.co/t/sql-too-large-in-big-data-indices/175272 "2019-04-25T21:57:30Z")

</div>

Hi dear community I hope there's a solution for this specific problem, I just connected my ElasticCloud Production Environment to ODBC and I connected and tested Successfully, Now when I try to connect my indices into po…

---

## [Mapping of Roles to Spaces in Elastic](https://discuss.elastic.co/t/mapping-of-roles-to-spaces-in-elastic/178466)

<div class="topic-metadata">

**Author:** [@vsalunkhe](https://discuss.elastic.co/u/vsalunkhe)\
**Replies:** 1\
**Last updated:** [April 25, 2019, 7:58pm UTC](https://discuss.elastic.co/t/mapping-of-roles-to-spaces-in-elastic/178466 "2019-04-25T19:58:48Z")

</div>

Hi, I have two roles each of them having their own spaces. Say example: A User/Role named Infra A Space named Infra with all the visualizations that will be needed by User Infra. I need to send all the Infra Indices …

---

## [What would be the best method to copy data from elasticsearch 2.4 to 6.4?](https://discuss.elastic.co/t/what-would-be-the-best-method-to-copy-data-from-elasticsearch-2-4-to-6-4/178527)

<div class="topic-metadata">

**Author:** [@joshuaclark](https://discuss.elastic.co/u/joshuaclark)\
**Replies:** 4\
**Last updated:** [April 25, 2019, 7:34pm UTC](https://discuss.elastic.co/t/what-would-be-the-best-method-to-copy-data-from-elasticsearch-2-4-to-6-4/178527 "2019-04-25T19:34:23Z")

</div>

Hi, We have an application that uses elasticsearch 2.4 and I would like to be able to ship that to our elasticsearch 6.4 to be able to visualize it with our Kibana. What would be the best method to do that?

---

## [Is there a way to "chain" aggregations together?](https://discuss.elastic.co/t/is-there-a-way-to-chain-aggregations-together/178524)

<div class="topic-metadata">

**Author:** [@edave](https://discuss.elastic.co/u/edave)\
**Replies:** 0\
**Last updated:** [April 25, 2019, 6:50pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-chain-aggregations-together/178524 "2019-04-25T18:50:04Z")

</div>

Hi! I'm new to Elasticsearch, and have read a bunch of documentation but haven't been able to find if this is possible. I'd like to compute an aggregation query (eg. mean), then use that value as input to a scripted met…

---

## [Data Drops](https://discuss.elastic.co/t/data-drops/177494)

<div class="topic-metadata">

**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\
**Replies:** 6\
**Last updated:** [April 25, 2019, 6:25pm UTC](https://discuss.elastic.co/t/data-drops/177494 "2019-04-25T18:25:18Z")

</div>

We are seeing data drops intermittently while being written into Elastic. However, when we check for bulk exceptions it doesn't correlate to the data drop times. is there any other place or logs to look for? any help to…

---

## [How to rebalance primary shards on elastic cluster](https://discuss.elastic.co/t/how-to-rebalance-primary-shards-on-elastic-cluster/176060)

<div class="topic-metadata">

**Author:** [@oraclept](https://discuss.elastic.co/u/oraclept)\
**Replies:** 4\
**Last updated:** [April 25, 2019, 5:13pm UTC](https://discuss.elastic.co/t/how-to-rebalance-primary-shards-on-elastic-cluster/176060 "2019-04-25T17:13:53Z")

</div>

Hi - How can I rebalance primary shards on elasticsearch cluster? Below are primary shards allocation on 5 node elastic cluster. We are seeing huge spikes on node4 6 node1 38 node2 116 node3 162 node4…

---

## [Query for documents by id, where id list is retrieved in another query](https://discuss.elastic.co/t/query-for-documents-by-id-where-id-list-is-retrieved-in-another-query/178509)

<div class="topic-metadata">

**Author:** [@Newmz](https://discuss.elastic.co/u/Newmz)\
**Replies:** 0\
**Last updated:** [April 25, 2019, 4:40pm UTC](https://discuss.elastic.co/t/query-for-documents-by-id-where-id-list-is-retrieved-in-another-query/178509 "2019-04-25T16:40:30Z")

</div>

Hi folks, question. short version: I have two indices. Both contain a matching run\_id field, and also contain their own separate fields. I would like to get a list of run\_id values from index A by querying for certain…

---

## [Multiple Indices vs Single Index with Alias](https://discuss.elastic.co/t/multiple-indices-vs-single-index-with-alias/175938)

<div class="topic-metadata">

**Author:** [@reachnavneeth](https://discuss.elastic.co/u/reachnavneeth)\
**Replies:** 4\
**Last updated:** [April 25, 2019, 4:33pm UTC](https://discuss.elastic.co/t/multiple-indices-vs-single-index-with-alias/175938 "2019-04-25T16:33:18Z")

</div>

Hi, I have an update heavy use case where each record gets updated multiple times every minute. There will only be several million documents with each of size less than 4KB. Also the rate at which the documents in each …

---

## [How to fetch all data from any index in spring boot](https://discuss.elastic.co/t/how-to-fetch-all-data-from-any-index-in-spring-boot/178444)

<div class="topic-metadata">

**Author:** [@localhost](https://discuss.elastic.co/u/localhost)\
**Replies:** 1\
**Last updated:** [April 25, 2019, 4:29pm UTC](https://discuss.elastic.co/t/how-to-fetch-all-data-from-any-index-in-spring-boot/178444 "2019-04-25T16:29:57Z")

</div>

Hi All, I have index name "platinum". I want to fetch all data from this index. While opening this url in browser: http://localhost:9200/platinum/\_search I got all data in json.

---

## [How to extract found terms into keyword fields](https://discuss.elastic.co/t/how-to-extract-found-terms-into-keyword-fields/174604)

<div class="topic-metadata">

**Author:** [@David9](https://discuss.elastic.co/u/David9)\
**Replies:** 2\
**Last updated:** [April 25, 2019, 4:18pm UTC](https://discuss.elastic.co/t/how-to-extract-found-terms-into-keyword-fields/174604 "2019-04-25T16:18:43Z")

</div>

We're relatively new to Elastic and have a requirement to better understand the occurrences of particular hashtags and twitter handles that appear in paragraphs in full text fields. E.g. I'd like to have a way to locate…

---

## [Add Scripted Field in Kibana to Count Characters of a field and add show the count in another field](https://discuss.elastic.co/t/add-scripted-field-in-kibana-to-count-characters-of-a-field-and-add-show-the-count-in-another-field/175109)

<div class="topic-metadata">

**Author:** [@Daniel\_Meyer](https://discuss.elastic.co/u/Daniel_Meyer)\
**Replies:** 1\
**Last updated:** [April 25, 2019, 4:24pm UTC](https://discuss.elastic.co/t/add-scripted-field-in-kibana-to-count-characters-of-a-field-and-add-show-the-count-in-another-field/175109 "2019-04-25T16:24:02Z")

</div>

Hi Guys, I'm just getting started with Kibana and couldn't find a Topic similar to mine. Heres what I want to Do: I want to add a Scripted field to the Discovery Window. The Field should show the count of Characters…

---

## [Auto-backup + auto-restore from S3? (failure mitigation best practices)](https://discuss.elastic.co/t/auto-backup-auto-restore-from-s3-failure-mitigation-best-practices/178505)

<div class="topic-metadata">

**Author:** [@alexandergunnarson](https://discuss.elastic.co/u/alexandergunnarson)\
**Replies:** 0\
**Last updated:** [April 25, 2019, 4:20pm UTC](https://discuss.elastic.co/t/auto-backup-auto-restore-from-s3-failure-mitigation-best-practices/178505 "2019-04-25T16:20:11Z")

</div>

Hey — so I'm trying to set up an Elasticsearch cluster while making sure that I'm accounting for failure situations. I understand that Curator can easily snapshot to S3 (I'm running on AWS), which is great — I was consid…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1318)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1320)
