# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1334

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1335

---

## [Initial master nodes ES 7.0.0](https://discuss.elastic.co/t/initial-master-nodes-es-7-0-0/176544)

<div class="topic-metadata">

**Author:** [@safderali5](https://discuss.elastic.co/u/safderali5)\
**Replies:** 9\
**Last updated:** [April 12, 2019, 8:21am UTC](https://discuss.elastic.co/t/initial-master-nodes-es-7-0-0/176544 "2019-04-12T08:21:06Z")

</div>

Does all the nodes specified in cluster.initial\_master\_nodes: must be up and running before the first election for master occurs? if yes, any ideas how to do that in kubernetes. As in kubernetes, the statefulset pods…

---

## [Shingle: Avoid result if another contains the substring](https://discuss.elastic.co/t/shingle-avoid-result-if-another-contains-the-substring/176572)

<div class="topic-metadata">

**Author:** [@arkkanoid](https://discuss.elastic.co/u/arkkanoid)\
**Replies:** 0\
**Last updated:** [April 12, 2019, 8:18am UTC](https://discuss.elastic.co/t/shingle-avoid-result-if-another-contains-the-substring/176572 "2019-04-12T08:18:56Z")

</div>

I'm trying to implement a solution to get words that match with my query using Shingle. My problem is that querying this phrase: "I want to search Big Data", the results are: "big" "data" "big data" Is there some w…

---

## [Azure Active directory, SAML authentication](https://discuss.elastic.co/t/azure-active-directory-saml-authentication/175563)

<div class="topic-metadata">

**Author:** [@vishal.k](https://discuss.elastic.co/u/vishal.k)\
**Replies:** 5\
**Last updated:** [April 9, 2019, 1:36pm UTC](https://discuss.elastic.co/t/azure-active-directory-saml-authentication/175563 "2019-04-09T13:36:49Z")

</div>

I have gone through the docs from Elasticsearch and implemented SSO, however I'm getting below error while authenticating with Azure AD user. Can you please help me with this? { "error": { "root\_cause": \[ …

---

## [How to add facebook oauth authentication to elasticsearch](https://discuss.elastic.co/t/how-to-add-facebook-oauth-authentication-to-elasticsearch/176542)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 1\
**Last updated:** [April 12, 2019, 6:58am UTC](https://discuss.elastic.co/t/how-to-add-facebook-oauth-authentication-to-elasticsearch/176542 "2019-04-12T06:58:04Z")

</div>

Hi, I am looking for a way to add authentiication to elasticsearch through facebook token,i also want to avoid using xpack and proxies in this task.

---

## [Search Multiple Indexes](https://discuss.elastic.co/t/search-multiple-indexes/176351)

<div class="topic-metadata">

**Author:** [@DC\_Adams](https://discuss.elastic.co/u/DC_Adams)\
**Replies:** 4\
**Last updated:** [April 12, 2019, 6:51am UTC](https://discuss.elastic.co/t/search-multiple-indexes/176351 "2019-04-12T06:51:19Z")

</div>

Hello, I am using Elasticsearch 6.7.1 and my data is coming from an application built in an MVC framework. While I understand that it is not possible to duplicate the relational functionality of MVC I would like to try …

---

## [How to create an index in ES6 that automatically assigns a Field value (Ex:- employee\_Id) found inside a document to \_id (Document ID) each time a new document is inserted](https://discuss.elastic.co/t/how-to-create-an-index-in-es6-that-automatically-assigns-a-field-value-ex-employee-id-found-inside-a-document-to-id-document-id-each-time-a-new-document-is-inserted/176425)

<div class="topic-metadata">

**Author:** [@Nandan\_Reddy\_V](https://discuss.elastic.co/u/Nandan_Reddy_V)\
**Replies:** 7\
**Last updated:** [April 12, 2019, 5:12am UTC](https://discuss.elastic.co/t/how-to-create-an-index-in-es6-that-automatically-assigns-a-field-value-ex-employee-id-found-inside-a-document-to-id-document-id-each-time-a-new-document-is-inserted/176425 "2019-04-12T05:12:29Z")

</div>

How to create an index in ES6 that automatically assigns a Field value (Ex:- employee\_Id) found inside a document to \_id (Document ID) each time a new document is inserted

---

## [Are there any elasticsearch query close to mongodb projection?](https://discuss.elastic.co/t/are-there-any-elasticsearch-query-close-to-mongodb-projection/176529)

<div class="topic-metadata">

**Author:** [@fqewgvjreuibhjroihbj](https://discuss.elastic.co/u/fqewgvjreuibhjroihbj)\
**Replies:** 0\
**Last updated:** [April 12, 2019, 3:53am UTC](https://discuss.elastic.co/t/are-there-any-elasticsearch-query-close-to-mongodb-projection/176529 "2019-04-12T03:53:14Z")

</div>

if i want to do projection with my data like following { "ProductName": { "WORLDWIDE": { "zh": "产品 1", "en": "product 1" }, "CHINA": { "zh": "产品 2", …

---

## [Same query excluding different id returns different results when it should not](https://discuss.elastic.co/t/same-query-excluding-different-id-returns-different-results-when-it-should-not/176518)

<div class="topic-metadata">

**Author:** [@Oscar\_Sanchez\_Sanche](https://discuss.elastic.co/u/Oscar_Sanchez_Sanche)\
**Replies:** 0\
**Last updated:** [April 12, 2019, 1:04am UTC](https://discuss.elastic.co/t/same-query-excluding-different-id-returns-different-results-when-it-should-not/176518 "2019-04-12T01:04:59Z")

</div>

Hi there, I have a problem where I'm doing the exact same query, or at least i think from what i can tell, and the only thing that im excluding is a custom id field that matches the id im currently visiting, so for exam…

---

## [MUST\_NOT and EXIST in NESTED query](https://discuss.elastic.co/t/must-not-and-exist-in-nested-query/176505)

<div class="topic-metadata">

**Author:** [@mikael](https://discuss.elastic.co/u/mikael)\
**Replies:** 0\
**Last updated:** [April 11, 2019, 9:35pm UTC](https://discuss.elastic.co/t/must-not-and-exist-in-nested-query/176505 "2019-04-11T21:35:47Z")

</div>

I use es 6.5.1 and have the same problem like: Copy from the topic above. PUT players { "mappings": { "players": { "properties": { "features": { "type": "nested", …

---

## [Upgraded from 6.6 to 6.7 and to 7.0. Now having issues starting up](https://discuss.elastic.co/t/upgraded-from-6-6-to-6-7-and-to-7-0-now-having-issues-starting-up/176488)

<div class="topic-metadata">

**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\
**Replies:** 0\
**Last updated:** [April 11, 2019, 7:49pm UTC](https://discuss.elastic.co/t/upgraded-from-6-6-to-6-7-and-to-7-0-now-having-issues-starting-up/176488 "2019-04-11T19:49:31Z")

</div>

Hi, I started upgrading my cluster today from 6.6 to 6.7 and than directly to 7.0. I did it by this guide: Rolling upgrades | Elasticsearch Guide \[7.0\] | Elastic I have also included boostrap info in all my elasticsear…

---

## [ES not moving shards off node with high disk usage. (88% )](https://discuss.elastic.co/t/es-not-moving-shards-off-node-with-high-disk-usage-88/176261)

<div class="topic-metadata">

**Author:** [@Asa\_Zalles-Milner](https://discuss.elastic.co/u/Asa_Zalles-Milner)\
**Replies:** 8\
**Last updated:** [April 11, 2019, 8:45pm UTC](https://discuss.elastic.co/t/es-not-moving-shards-off-node-with-high-disk-usage-88/176261 "2019-04-11T20:45:25Z")

</div>

I'm having an odd occurrence. I had cluster running out of disk space. Added more nodes, and all but two of the nodes had room made on them. 2 nodes are still sitting above the high watermark. I added another 3 nodes…

---

## [Getting maxConcurrentShardRequests must be \>= 1 error](https://discuss.elastic.co/t/getting-maxconcurrentshardrequests-must-be-1-error/176494)

<div class="topic-metadata">

**Author:** [@jmr317](https://discuss.elastic.co/u/jmr317)\
**Replies:** 2\
**Last updated:** [April 11, 2019, 8:35pm UTC](https://discuss.elastic.co/t/getting-maxconcurrentshardrequests-must-be-1-error/176494 "2019-04-11T20:35:55Z")

</div>

Hi I'm getting the above error when I run a GET request to any of my indices. If I try to view elasticsearch in my browser, I get a Error 503 Service Unavailable: Request Timeout after 30000ms error and nothing loads in…

---

## [Having trouble converting Groovy to Painless](https://discuss.elastic.co/t/having-trouble-converting-groovy-to-painless/176118)

<div class="topic-metadata">

**Author:** [@jw-ovgd](https://discuss.elastic.co/u/jw-ovgd)\
**Replies:** 3\
**Last updated:** [April 11, 2019, 7:23pm UTC](https://discuss.elastic.co/t/having-trouble-converting-groovy-to-painless/176118 "2019-04-11T19:23:06Z")

</div>

Hi I've been having a very hard time converting an old Groovy script to Painless in a filter query script. Almost every index in my ES6.5 has a field of this structure: ..., groups: \[ \[a\], \[a, b\], \[a, b, c\] \], .…

---

## [Distance from a point to a Polygon](https://discuss.elastic.co/t/distance-from-a-point-to-a-polygon/176452)

<div class="topic-metadata">

**Author:** [@fgabay](https://discuss.elastic.co/u/fgabay)\
**Replies:** 1\
**Last updated:** [April 11, 2019, 6:58pm UTC](https://discuss.elastic.co/t/distance-from-a-point-to-a-polygon/176452 "2019-04-11T18:58:19Z")

</div>

How to perform a distance filter from a point to a polygon and specify that the distance should be less than or equal to a field from the index ? Something like the example GET /my\_locations/\_search { "query": { "bo…

---

## [Constructing Queries](https://discuss.elastic.co/t/constructing-queries/176460)

<div class="topic-metadata">

**Author:** [@Elk\_huh](https://discuss.elastic.co/u/Elk_huh)\
**Replies:** 1\
**Last updated:** [April 11, 2019, 6:57pm UTC](https://discuss.elastic.co/t/constructing-queries/176460 "2019-04-11T18:57:26Z")

</div>

Am i constructing this query correctly? I am getting an error when i return results but if i take out the filter it works fine. GET indices\*/\_search { "sort": \[ { "@timestamp": { "order": "desc" …

---

## [Ignore\_above setting](https://discuss.elastic.co/t/ignore-above-setting/176471)

<div class="topic-metadata">

**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\
**Replies:** 0\
**Last updated:** [April 11, 2019, 6:30pm UTC](https://discuss.elastic.co/t/ignore-above-setting/176471 "2019-04-11T18:30:58Z")

</div>

I am using ignore\_above setting but it dropping the field itself if the size exceeds. Is there any way to truncate a field instead of dropping through settings without using Ingest node ?

---

## [Unexpected error while indexing monitoring document with 7.0](https://discuss.elastic.co/t/unexpected-error-while-indexing-monitoring-document-with-7-0/176463)

<div class="topic-metadata">

**Author:** [@opoplawski](https://discuss.elastic.co/u/opoplawski)\
**Replies:** 3\
**Last updated:** [April 11, 2019, 6:28pm UTC](https://discuss.elastic.co/t/unexpected-error-while-indexing-monitoring-document-with-7-0/176463 "2019-04-11T18:28:29Z")

</div>

I'm trying to update to 7.0.0, and I'm getting lots of these: \[2019-04-11T09:05:47,285\]\[WARN \]\[o.e.x.m.e.l.LocalExporter\] \[elk.nwra.com\] unexpected error while indexing monitoring document org.elasticsearch.xpack.monito…

---

## [Can we use elasticsearch for relational data use case](https://discuss.elastic.co/t/can-we-use-elasticsearch-for-relational-data-use-case/176457)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 1\
**Last updated:** [April 11, 2019, 5:17pm UTC](https://discuss.elastic.co/t/can-we-use-elasticsearch-for-relational-data-use-case/176457 "2019-04-11T17:17:03Z")

</div>

Hello Team, Could yo please let me know if i can use Elasticsearch effectively for relational data sue case , where i can make joins and generate metric/visualizations on joined and grouped data. Elasticsearch Version …

---

## [How to know the total number of aggregation result buckets](https://discuss.elastic.co/t/how-to-know-the-total-number-of-aggregation-result-buckets/176434)

<div class="topic-metadata">

**Author:** [@Anindya\_Roy](https://discuss.elastic.co/u/Anindya_Roy)\
**Replies:** 8\
**Last updated:** [April 11, 2019, 5:05pm UTC](https://discuss.elastic.co/t/how-to-know-the-total-number-of-aggregation-result-buckets/176434 "2019-04-11T17:05:13Z")

</div>

I have a multi-level aggregation query - that results nested buckets. In order to retrieve all the results I am currently using the the total doc hits number and then divide that by partition\_size = 1000, to get the resu…

---

## [Change the type in index from String to Date](https://discuss.elastic.co/t/change-the-type-in-index-from-string-to-date/176426)

<div class="topic-metadata">

**Author:** [@WarriorHarb](https://discuss.elastic.co/u/WarriorHarb)\
**Replies:** 3\
**Last updated:** [April 11, 2019, 3:41pm UTC](https://discuss.elastic.co/t/change-the-type-in-index-from-string-to-date/176426 "2019-04-11T15:41:28Z")

</div>

Hello, I parsed a date from the log but it's type in the index was String. I would like to change it to Date so that i could display lines in kibana in the same order of the log file. Any suggestions will be apperciat…

---

## [How to throw a error in painless](https://discuss.elastic.co/t/how-to-throw-a-error-in-painless/176337)

<div class="topic-metadata">

**Author:** [@Anurag\_Mankar](https://discuss.elastic.co/u/Anurag_Mankar)\
**Replies:** 2\
**Last updated:** [April 11, 2019, 3:12pm UTC](https://discuss.elastic.co/t/how-to-throw-a-error-in-painless/176337 "2019-04-11T15:12:01Z")

</div>

I want to return something so that I can identify that the below update is exceuted from "if " section or the "else" section. Is there a way to return or throw an exception POST customer/\_update\_by\_query { "script":…

---

## [Curator is not running from crontab](https://discuss.elastic.co/t/curator-is-not-running-from-crontab/175851)

<div class="topic-metadata">

**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\
**Replies:** 3\
**Last updated:** [April 11, 2019, 2:56pm UTC](https://discuss.elastic.co/t/curator-is-not-running-from-crontab/175851 "2019-04-11T14:56:01Z")

</div>

When I run the curator command in crontab, cron logs show ing job was completed but in curator logs showing old logs, not the time when cronjob ran. Crontab is working for remain all commands. Same command is working f…

---

## [Error during Elasticsearch MSI Install (both 6.6.2 and 7.0.0)](https://discuss.elastic.co/t/error-during-elasticsearch-msi-install-both-6-6-2-and-7-0-0/176424)

<div class="topic-metadata">

**Author:** [@ljh33txm](https://discuss.elastic.co/u/ljh33txm)\
**Replies:** 0\
**Last updated:** [April 11, 2019, 2:38pm UTC](https://discuss.elastic.co/t/error-during-elasticsearch-msi-install-both-6-6-2-and-7-0-0/176424 "2019-04-11T14:38:29Z")

</div>

All, I am having an issue with installing Elasticsearch (6.6.2 and 7.0.0 MSIs have same issue). The install fails and the error listed is: Calling custom action Elastic.Installer.Msi!Elastic.Installer.Msi.Elasticsearc…

---

## [Could relocate speed faster than 96MB/s?](https://discuss.elastic.co/t/could-relocate-speed-faster-than-96mb-s/175502)

<div class="topic-metadata">

**Author:** [@LoadingZhang](https://discuss.elastic.co/u/LoadingZhang)\
**Replies:** 10\
**Last updated:** [April 11, 2019, 2:32pm UTC](https://discuss.elastic.co/t/could-relocate-speed-faster-than-96mb-s/175502 "2019-04-11T14:32:50Z")

</div>

The cluster has 10 Gbit network and SSD RAID disks, but relocate speed only up to ~100MB/s. I have try to set indices.recovery.max\_bytes\_per\_sec to -1 but no no effect. I found @ywelsch say "it achieved a throughput of…

---

## [How to get nested type array length?](https://discuss.elastic.co/t/how-to-get-nested-type-array-length/176319)

<div class="topic-metadata">

**Author:** [@Vu\_Nguyen\_Van](https://discuss.elastic.co/u/Vu_Nguyen_Van)\
**Replies:** 1\
**Last updated:** [April 11, 2019, 2:29pm UTC](https://discuss.elastic.co/t/how-to-get-nested-type-array-length/176319 "2019-04-11T14:29:05Z")

</div>

Hi, i have a document as follow :slight\_smile:{ "took": 0, "timed\_out": false, "\_shards": { "total": 5, "successful": 5, "skipped": 0, "failed": 0 }, "hits": { "total": 4, "max\_score": 1, "hits": \[ { "\_ind…

---

## [Understanding Disk Shard Allocation](https://discuss.elastic.co/t/understanding-disk-shard-allocation/176117)

<div class="topic-metadata">

**Author:** [@corvintheus](https://discuss.elastic.co/u/corvintheus)\
**Replies:** 1\
**Last updated:** [April 11, 2019, 2:28pm UTC](https://discuss.elastic.co/t/understanding-disk-shard-allocation/176117 "2019-04-11T14:28:13Z")

</div>

Hi, I have a cluster consists of 3 nodes with different sizes of disk. Now, whenever one of the nodes disk reached its high watermark. It seems that it still getting data and continuously going down. I am not sure what i…

---

## [Very slow consultation - ElasticSearch 6.6.2](https://discuss.elastic.co/t/very-slow-consultation-elasticsearch-6-6-2/176119)

<div class="topic-metadata">

**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\
**Replies:** 1\
**Last updated:** [April 11, 2019, 2:26pm UTC](https://discuss.elastic.co/t/very-slow-consultation-elasticsearch-6-6-2/176119 "2019-04-11T14:26:55Z")

</div>

Hi guys, you know I have finally my server running with ElasticSearch 6.6.2 and the java plugin "recurring-plugin" for the event module queries. But I see that it is very slow to give me a response more than anything tha…

---

## [Unable to make a bucketed aggregation by date histogram](https://discuss.elastic.co/t/unable-to-make-a-bucketed-aggregation-by-date-histogram/176073)

<div class="topic-metadata">

**Author:** [@User\_User](https://discuss.elastic.co/u/User_User)\
**Replies:** 2\
**Last updated:** [April 11, 2019, 2:16pm UTC](https://discuss.elastic.co/t/unable-to-make-a-bucketed-aggregation-by-date-histogram/176073 "2019-04-11T14:16:55Z")

</div>

I have multiple documents ingested in my ES which are of the form - { "weather":"cold", "date\_1":"2017/07/05", "feedback":\[ { "date\_2":"2017/08/07", "value":28, …

---

## [Watcher HTTP Input request](https://discuss.elastic.co/t/watcher-http-input-request/176101)

<div class="topic-metadata">

**Author:** [@dmdm](https://discuss.elastic.co/u/dmdm)\
**Replies:** 2\
**Last updated:** [April 11, 2019, 2:01pm UTC](https://discuss.elastic.co/t/watcher-http-input-request/176101 "2019-04-11T14:01:36Z")

</div>

Is there a way to sort this on a field for example end\_time so that when I check this value ctx.payload.snapshots.0.state it will be the last snapshot that ran? "trigger": { "schedule": { "interval": "1h" …

---

## [Error Watcher output for pager duty](https://discuss.elastic.co/t/error-watcher-output-for-pager-duty/172837)

<div class="topic-metadata">

**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\
**Replies:** 17\
**Last updated:** [April 11, 2019, 1:56pm UTC](https://discuss.elastic.co/t/error-watcher-output-for-pager-duty/172837 "2019-04-11T13:56:38Z")

</div>

Hello Community, I have configured pagerduty watcher couple of weeks back and it successfully posted alerts to my company pagerduty portal when I excecute the watcher using simulation. So I thought everything seems work…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1333)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1335)
