# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1322

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1323

---

## [Delete by query API and external versioning](https://discuss.elastic.co/t/delete-by-query-api-and-external-versioning/178202)

<div class="topic-metadata">

**Author:** [@mdomans](https://discuss.elastic.co/u/mdomans)\
**Replies:** 0\
**Last updated:** [April 24, 2019, 9:21am UTC](https://discuss.elastic.co/t/delete-by-query-api-and-external-versioning/178202 "2019-04-24T09:21:13Z")

</div>

My problem is that I sometimes need to delete massive (well above 10k) documents with same value for a certain field. Not a problem, \_delete\_by\_query with a filter for that value works nice. The problem is that in my cu…

---

## [Can I automate the creation of an index template using docker compose?](https://discuss.elastic.co/t/can-i-automate-the-creation-of-an-index-template-using-docker-compose/178199)

<div class="topic-metadata">

**Author:** [@RaulOG](https://discuss.elastic.co/u/RaulOG)\
**Replies:** 0\
**Last updated:** [April 24, 2019, 9:09am UTC](https://discuss.elastic.co/t/can-i-automate-the-creation-of-an-index-template-using-docker-compose/178199 "2019-04-24T09:09:50Z")

</div>

I have setup a basic docker-compose.yml with the official Elasticsearch and Kibana images. I can easily run a PUT command to setup an index template and it works. So then my last step is to automate the PUT command int…

---

## [Search for exact phrase in not\_analyzed (keyword) field](https://discuss.elastic.co/t/search-for-exact-phrase-in-not-analyzed-keyword-field/178198)

<div class="topic-metadata">

**Author:** [@ckdot](https://discuss.elastic.co/u/ckdot)\
**Replies:** 0\
**Last updated:** [April 24, 2019, 9:05am UTC](https://discuss.elastic.co/t/search-for-exact-phrase-in-not-analyzed-keyword-field/178198 "2019-04-24T09:05:43Z")

</div>

Hey there, I like to search for an exact phrase of words in my documents. To have a document be part of the search results the phrase should be somewhere in the searched fields. My fields have type "keyword" as I don't…

---

## [Elasticsearch throw an exception unknown setting \[path.conf\] when start](https://discuss.elastic.co/t/elasticsearch-throw-an-exception-unknown-setting-path-conf-when-start/178190)

<div class="topic-metadata">

**Author:** [@Yuefeng\_Yang](https://discuss.elastic.co/u/Yuefeng_Yang)\
**Replies:** 2\
**Last updated:** [April 24, 2019, 8:56am UTC](https://discuss.elastic.co/t/elasticsearch-throw-an-exception-unknown-setting-path-conf-when-start/178190 "2019-04-24T08:56:34Z")

</div>

Elasticsearch version : 7.0.0 start cmd : ./bin/elasticsearch -Epath.conf=config/instance1 -p /Users/yf/es/instance1.pid I want to self define config dir with -Epath.conf , but throw an exception "java.lang.IllegalAr…

---

## [Configuration to add data node to Elastic production cluster](https://discuss.elastic.co/t/configuration-to-add-data-node-to-elastic-production-cluster/178188)

<div class="topic-metadata">

**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\
**Replies:** 4\
**Last updated:** [April 24, 2019, 8:49am UTC](https://discuss.elastic.co/t/configuration-to-add-data-node-to-elastic-production-cluster/178188 "2019-04-24T08:49:10Z")

</div>

Hi, If we want to add/extend cluster size is this sufficient to modify only elasticsearch.yml file on new node.or Do we need to modify configuration on existing master nodes as well?What we mean is only lets say node-4…

---

## [Access denied and failure when i change network.host](https://discuss.elastic.co/t/access-denied-and-failure-when-i-change-network-host/178110)

<div class="topic-metadata">

**Author:** [@Sabyo](https://discuss.elastic.co/u/Sabyo)\
**Replies:** 2\
**Last updated:** [April 24, 2019, 8:44am UTC](https://discuss.elastic.co/t/access-denied-and-failure-when-i-change-network-host/178110 "2019-04-24T08:44:22Z")

</div>

Hello, Fresh installation : ElasticSearch version : 7.0 Elastic Search works fines when it runs on localhost. But, when I modify elasticsearch.yml at network.host, and restart service I get an "access denied" and ES s…

---

## [Aggregations distinct doc\_count](https://discuss.elastic.co/t/aggregations-distinct-doc-count/178184)

<div class="topic-metadata">

**Author:** [@DC\_Adams](https://discuss.elastic.co/u/DC_Adams)\
**Replies:** 0\
**Last updated:** [April 24, 2019, 8:26am UTC](https://discuss.elastic.co/t/aggregations-distinct-doc-count/178184 "2019-04-24T08:26:31Z")

</div>

Hi, I have an index with candidates and the candidates have skills as nested objects. I am using nested aggregations to build facets with a count for each skill. While the "doc\_count" works great on the aggregation it d…

---

## [Delete custom plugin in Elastic Cloud?](https://discuss.elastic.co/t/delete-custom-plugin-in-elastic-cloud/178172)

<div class="topic-metadata">

**Author:** [@AdrianSanchezLopez](https://discuss.elastic.co/u/AdrianSanchezLopez)\
**Replies:** 1\
**Last updated:** [April 24, 2019, 8:23am UTC](https://discuss.elastic.co/t/delete-custom-plugin-in-elastic-cloud/178172 "2019-04-24T08:23:25Z")

</div>

Hi there, I couldn't find anything on the documentations or general internet search: is there a way to remove a "custom plugin" from the Elasticsearch Service?, the elastic cloud managed service provided the Elastic.co …

---

## [How to show distance from some point and apply decay funtion to it](https://discuss.elastic.co/t/how-to-show-distance-from-some-point-and-apply-decay-funtion-to-it/178182)

<div class="topic-metadata">

**Author:** [@enp](https://discuss.elastic.co/u/enp)\
**Replies:** 0\
**Last updated:** [April 24, 2019, 8:20am UTC](https://discuss.elastic.co/t/how-to-show-distance-from-some-point-and-apply-decay-funtion-to-it/178182 "2019-04-24T08:20:22Z")

</div>

Hi, It is possible to score destinations by distance from some point and even show something like distance itself: GET data/destination/\_search?\_source=city\_name,location { "query": { "function\_score": { …

---

## [GET /\_nodes not showing offline nodes](https://discuss.elastic.co/t/get-nodes-not-showing-offline-nodes/178156)

<div class="topic-metadata">

**Author:** [@chdudfield](https://discuss.elastic.co/u/chdudfield)\
**Replies:** 1\
**Last updated:** [April 24, 2019, 8:17am UTC](https://discuss.elastic.co/t/get-nodes-not-showing-offline-nodes/178156 "2019-04-24T08:17:40Z")

</div>

I am running Elasticsearch 5.5.2 with 3 nodes in a cluster, one master only and the other two master and data. When i do a "GET /\_nodes" command from within Kibana it returns "\_nodes": { "total": 3, "successful": 3, …

---

## [Elasticsearch slow, crash](https://discuss.elastic.co/t/elasticsearch-slow-crash/178142)

<div class="topic-metadata">

**Author:** [@hatienkma](https://discuss.elastic.co/u/hatienkma)\
**Replies:** 2\
**Last updated:** [April 24, 2019, 7:57am UTC](https://discuss.elastic.co/t/elasticsearch-slow-crash/178142 "2019-04-24T07:57:47Z")

</div>

Hello, I have deployment a Logger ELK. I setup ELK version 6.6.1 on vmware server (24GB RAM, 500GB HDD, 8CPU) but have many problem. Its index data log (IIS log) very slow. Search and view dashboard, visualize very s…

---

## [Upgrade Elastichearch 6.6 to 7.0 will not start](https://discuss.elastic.co/t/upgrade-elastichearch-6-6-to-7-0-will-not-start/177906)

<div class="topic-metadata">

**Author:** [@elkdummy](https://discuss.elastic.co/u/elkdummy)\
**Replies:** 5\
**Last updated:** [April 24, 2019, 7:55am UTC](https://discuss.elastic.co/t/upgrade-elastichearch-6-6-to-7-0-will-not-start/177906 "2019-04-24T07:55:30Z")

</div>

Just as the title says. Ran through all documents I could find via search. Let me know what to provide to help resolve. Thank you.

---

## [Group\_dn\_templates](https://discuss.elastic.co/t/group-dn-templates/178050)

<div class="topic-metadata">

**Author:** [@JamesNotJamez](https://discuss.elastic.co/u/JamesNotJamez)\
**Replies:** 4\
**Last updated:** [April 24, 2019, 7:29am UTC](https://discuss.elastic.co/t/group-dn-templates/178050 "2019-04-24T07:29:38Z")

</div>

Hi, In the LDAP realm is there an equivalent version of user\_dn\_templates that works for group search? (other than group\_search) From https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-ldap-rea…

---

## [Can not create index start with "logstash-"](https://discuss.elastic.co/t/can-not-create-index-start-with-logstash/178167)

<div class="topic-metadata">

**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\
**Replies:** 0\
**Last updated:** [April 24, 2019, 7:25am UTC](https://discuss.elastic.co/t/can-not-create-index-start-with-logstash/178167 "2019-04-24T07:25:21Z")

</div>

Hi there, I usually create index pattern started with logstash- , it was fine. But now I can not create index pattern start with logstash-. I did kibana dev console like PUT logstash-testing123 then what i got res…

---

## [Can not create index "logstash-" after upgrading elasticsearch](https://discuss.elastic.co/t/can-not-create-index-logstash-after-upgrading-elasticsearch/177955)

<div class="topic-metadata">

**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\
**Replies:** 0\
**Last updated:** [April 23, 2019, 6:48am UTC](https://discuss.elastic.co/t/can-not-create-index-logstash-after-upgrading-elasticsearch/177955 "2019-04-23T06:48:53Z")

</div>

Hi there, I use logstash-output-amazone\_es 2.0.1,amazon elasticsearch, kibana 5.5.2. It works properly for long time. But after upgrading amazon elasticsearch 6.4, I can not create index started with logstash- (logst…

---

## [Abnormal of CPU usage of some nodes](https://discuss.elastic.co/t/abnormal-of-cpu-usage-of-some-nodes/177805)

<div class="topic-metadata">

**Author:** [@rui\_dong](https://discuss.elastic.co/u/rui_dong)\
**Replies:** 2\
**Last updated:** [April 24, 2019, 2:09am UTC](https://discuss.elastic.co/t/abnormal-of-cpu-usage-of-some-nodes/177805 "2019-04-24T02:09:16Z")

</div>

CPU usage on some nodes looks abnormal, . Other nodes looks normal, . Shards and documents are evenly distributed on each node. What is the reason for this?

---

## [Backwards compatibility and composite aggregation "missing bucket"](https://discuss.elastic.co/t/backwards-compatibility-and-composite-aggregation-missing-bucket/178129)

<div class="topic-metadata">

**Author:** [@TimothyMDean](https://discuss.elastic.co/u/TimothyMDean)\
**Replies:** 0\
**Last updated:** [April 23, 2019, 11:15pm UTC](https://discuss.elastic.co/t/backwards-compatibility-and-composite-aggregation-missing-bucket/178129 "2019-04-23T23:15:52Z")

</div>

I have an Elasticsearch cluster that is currently on version 6.3.2 and we are not yet ready to upgrade it (hopefully that comes soon!). According the ES documentation, I should be able to use the Java clients from newer…

---

## [Java(TM) Platform SE Binary CPU usage high (56-73) while running ElasticSearch Servces](https://discuss.elastic.co/t/java-tm-platform-se-binary-cpu-usage-high-56-73-while-running-elasticsearch-servces/178124)

<div class="topic-metadata">

**Author:** [@benqxf](https://discuss.elastic.co/u/benqxf)\
**Replies:** 0\
**Last updated:** [April 23, 2019, 10:11pm UTC](https://discuss.elastic.co/t/java-tm-platform-se-binary-cpu-usage-high-56-73-while-running-elasticsearch-servces/178124 "2019-04-23T22:11:56Z")

</div>

While running Elasticsearch service, Task Manager shows Java(TM) Platform SE Binary CPU usage is high, 56-73 % n my notebook running Windows 10 64bit i7-8750H CPU @ 2.20GHz, Number of cores =6. The computer fan is lo…

---

## [Distinguish full match from partial match](https://discuss.elastic.co/t/distinguish-full-match-from-partial-match/178118)

<div class="topic-metadata">

**Author:** [@RMNYC](https://discuss.elastic.co/u/RMNYC)\
**Replies:** 0\
**Last updated:** [April 23, 2019, 9:03pm UTC](https://discuss.elastic.co/t/distinguish-full-match-from-partial-match/178118 "2019-04-23T21:03:45Z")

</div>

I have a field which can have values like: "Jack + Jill" I use a character filter to convert "+" and "&" into "and" so for "Jack + Jill" the tokens are: Jack And Jill My users then search for "jack + jill" or "jack &…

---

## [Unknown setting \[index.tokenizer.name\_tokenizer.max\_gram\]](https://discuss.elastic.co/t/unknown-setting-index-tokenizer-name-tokenizer-max-gram/178098)

<div class="topic-metadata">

**Author:** [@mertyildiran](https://discuss.elastic.co/u/mertyildiran)\
**Replies:** 1\
**Last updated:** [April 23, 2019, 8:47pm UTC](https://discuss.elastic.co/t/unknown-setting-index-tokenizer-name-tokenizer-max-gram/178098 "2019-04-23T20:47:55Z")

</div>

This is my babenkoivan/scout-elasticsearch-driver configuration: \<?php namespace App; use ScoutElastic\\IndexConfigurator; use ScoutElastic\\Migratable; class PersonIndexConfigurator extends IndexConfigurator { use…

---

## [How to create an alias for each new index](https://discuss.elastic.co/t/how-to-create-an-alias-for-each-new-index/178113)

<div class="topic-metadata">

**Author:** [@Willian\_Cardoso](https://discuss.elastic.co/u/Willian_Cardoso)\
**Replies:** 0\
**Last updated:** [April 23, 2019, 8:43pm UTC](https://discuss.elastic.co/t/how-to-create-an-alias-for-each-new-index/178113 "2019-04-23T20:43:22Z")

</div>

Hi guys, Is this possible? curl -X PUT "localhost:9200/template/template\_1" -H 'Content-Type: application/json' -d' { "index\_patterns" : \["\*"\], "aliases" : { "{index}{date}" : {} } }' I need all time to create…

---

## [Parents with distinct children](https://discuss.elastic.co/t/parents-with-distinct-children/178112)

<div class="topic-metadata">

**Author:** [@hatguesswho](https://discuss.elastic.co/u/hatguesswho)\
**Replies:** 0\
**Last updated:** [April 23, 2019, 8:39pm UTC](https://discuss.elastic.co/t/parents-with-distinct-children/178112 "2019-04-23T20:39:06Z")

</div>

An example of the data. { "\_index": "act", "\_type": "\_doc", "\_id": "2389939", "\_score": 1, "\_source": { "photo\_id": "2389939", "family": \[ { "member\_id": "3079805", "member\_detail\_type\_id": "343 350 351 368 37…

---

## [Murmur3 field not getting applied](https://discuss.elastic.co/t/murmur3-field-not-getting-applied/177907)

<div class="topic-metadata">

**Author:** [@arvinds94](https://discuss.elastic.co/u/arvinds94)\
**Replies:** 2\
**Last updated:** [April 23, 2019, 8:13pm UTC](https://discuss.elastic.co/t/murmur3-field-not-getting-applied/177907 "2019-04-23T20:13:03Z")

</div>

There were no pre existing templates when making the following requests. Created an index using the following request. At the top you can see that I have added murmur3 as a field to the accountId type. I then reind…

---

## [Ingest-attachment plugin installation within Dockerfile](https://discuss.elastic.co/t/ingest-attachment-plugin-installation-within-dockerfile/178041)

<div class="topic-metadata">

**Author:** [@s0r1n](https://discuss.elastic.co/u/s0r1n)\
**Replies:** 2\
**Last updated:** [April 23, 2019, 2:15pm UTC](https://discuss.elastic.co/t/ingest-attachment-plugin-installation-within-dockerfile/178041 "2019-04-23T14:15:19Z")

</div>

In order to install ingest-attachment plugin to a official elasticsearch docker image, here the Dockerfile to use: FROM docker.elastic.co/elasticsearch/elasticsearch:6.7.0 RUN /usr/share/elasticsearch/bin/elasticsearch-…

---

## [Rally with search templates?](https://discuss.elastic.co/t/rally-with-search-templates/178082)

<div class="topic-metadata">

**Author:** [@Oli06](https://discuss.elastic.co/u/Oli06)\
**Replies:** 0\
**Last updated:** [April 23, 2019, 5:08pm UTC](https://discuss.elastic.co/t/rally-with-search-templates/178082 "2019-04-23T17:08:27Z")

</div>

Hi there, Is there a way in your rally tracks to use a search template for the search query ? We've created Elasticsearch template using \_scripts/ that we can then use with \_search/template as follow: GET index/\_sear…

---

## [@timestamp kibana and log time are differents](https://discuss.elastic.co/t/timestamp-kibana-and-log-time-are-differents/175217)

<div class="topic-metadata">

**Author:** [@zolthar-z](https://discuss.elastic.co/u/zolthar-z)\
**Replies:** 2\
**Last updated:** [April 23, 2019, 4:56pm UTC](https://discuss.elastic.co/t/timestamp-kibana-and-log-time-are-differents/175217 "2019-04-23T16:56:13Z")

</div>

HI I have a situation with my elastic platform, I send logs from filebeat directly to elasticseach and visualize it using kibana, the problem is that the logs sent from filebeat have the time for the client servers and …

---

## [Using \_update\_by\_query and painless script with hashmap to update based on value](https://discuss.elastic.co/t/using-update-by-query-and-painless-script-with-hashmap-to-update-based-on-value/177954)

<div class="topic-metadata">

**Author:** [@pa2000cer](https://discuss.elastic.co/u/pa2000cer)\
**Replies:** 1\
**Last updated:** [April 23, 2019, 4:20pm UTC](https://discuss.elastic.co/t/using-update-by-query-and-painless-script-with-hashmap-to-update-based-on-value/177954 "2019-04-23T16:20:13Z")

</div>

I have a huge list of keys and values such as this \[{'appid':12345,'lob': 'Finance'}, {'appid':67891,'lob': 'Banking'}, {'appid':11111,'lob': 'Finance'}, {'appid':22222,'lob': 'Fast Food'}\] I want to create a script…

---

## [Random\_score query brought down ES 5.5 cluster](https://discuss.elastic.co/t/random-score-query-brought-down-es-5-5-cluster/178004)

<div class="topic-metadata">

**Author:** [@vglazkov](https://discuss.elastic.co/u/vglazkov)\
**Replies:** 1\
**Last updated:** [April 23, 2019, 4:16pm UTC](https://discuss.elastic.co/t/random-score-query-brought-down-es-5-5-cluster/178004 "2019-04-23T16:16:31Z")

</div>

This question is similar to this one: The difference between the tickets is that I have intentionally specified size parameter. Index contains little more than 8 billions of documents. Here's my query: { "version"…

---

## [Is there any way to generate a weekly report via Email including dashboard screenshot](https://discuss.elastic.co/t/is-there-any-way-to-generate-a-weekly-report-via-email-including-dashboard-screenshot/177962)

<div class="topic-metadata">

**Author:** [@Cherie](https://discuss.elastic.co/u/Cherie)\
**Replies:** 1\
**Last updated:** [April 23, 2019, 4:13pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-generate-a-weekly-report-via-email-including-dashboard-screenshot/177962 "2019-04-23T16:13:51Z")

</div>

Hi, I am trying to send a weekly report via Email using watcher. When I writing the html template, I met the following issue: I want to show the screenshot about the dashboard or visualization in html.body instead of …

---

## [Score values different than Lucene ones](https://discuss.elastic.co/t/score-values-different-than-lucene-ones/178066)

<div class="topic-metadata">

**Author:** [@Christian\_Salvanesch](https://discuss.elastic.co/u/Christian_Salvanesch)\
**Replies:** 0\
**Last updated:** [April 23, 2019, 3:36pm UTC](https://discuss.elastic.co/t/score-values-different-than-lucene-ones/178066 "2019-04-23T15:36:47Z")

</div>

Hi, we are migrating from Lucene to ElasticSearch. We use "query\_string" in order to execute the same (almost) queries we did previously on Lucene. Queries works good, but the \_score provided is pretty different than t…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1321)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1323)
