# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1353 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1354 --- ## [Dynamic price sorting and filtering](https://discuss.elastic.co/t/dynamic-price-sorting-and-filtering/173732)
**Author:** [@pankajg](https://discuss.elastic.co/u/pankajg)\ **Replies:** 4\ **Last updated:** [March 26, 2019, 1:16pm UTC](https://discuss.elastic.co/t/dynamic-price-sorting-and-filtering/173732 "2019-03-26T13:16:55Z")
This is the scenario: Imagine that a register user creates a new entity with the price: 1 | currency: EUR and other registered user creates a new entity with price: 1 | currency: USD and so on... What I'm trying to do … --- ## [Why is ES indexing buffer coupled with lucene flush RAM buffer size?](https://discuss.elastic.co/t/why-is-es-indexing-buffer-coupled-with-lucene-flush-ram-buffer-size/173935)
**Author:** [@itiyamas](https://discuss.elastic.co/u/itiyamas)\ **Replies:** 0\ **Last updated:** [March 26, 2019, 1:12pm UTC](https://discuss.elastic.co/t/why-is-es-indexing-buffer-coupled-with-lucene-flush-ram-buffer-size/173935 "2019-03-26T13:12:13Z")
One will end up creating a segment and another will trigger putting the segment to disk. The limit essentially denotes the amount of memory that we can afford for a particular shard in memory- which makes sense. Is ther… --- ## [Rally is not working with OpenJDK 11](https://discuss.elastic.co/t/rally-is-not-working-with-openjdk-11/173862)
**Author:** [@suvarna](https://discuss.elastic.co/u/suvarna)\ **Replies:** 2\ **Last updated:** [March 26, 2019, 12:57pm UTC](https://discuss.elastic.co/t/rally-is-not-working-with-openjdk-11/173862 "2019-03-26T12:57:10Z")
Hi I have installed rally and installed openJDK11 and JAVA\_HOME pointing to openJDK11. The esrally script is--\> esrally --distribution-version=6.6.2 --track=noaa --report-file=/LUCENE/rally\_reports/report.md --repo… --- ## [Watcher trigger on sub-bucket count](https://discuss.elastic.co/t/watcher-trigger-on-sub-bucket-count/173817)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 2\ **Last updated:** [March 26, 2019, 12:35pm UTC](https://discuss.elastic.co/t/watcher-trigger-on-sub-bucket-count/173817 "2019-03-26T12:35:51Z")
I am trying to create a watch that will trigger on a couple aggregations. Below is the results of my query and I have essentially two buckets. I'm looking to trigger on the unique count of the sub-buckets in this case is… --- ## [How to work with realtime data](https://discuss.elastic.co/t/how-to-work-with-realtime-data/173491)
**Author:** [@Robin020](https://discuss.elastic.co/u/Robin020)\ **Replies:** 3\ **Last updated:** [March 26, 2019, 12:34pm UTC](https://discuss.elastic.co/t/how-to-work-with-realtime-data/173491 "2019-03-26T12:34:21Z")
I want to send realtime logs from a proxy to elasticsearch (through logstash) and display information about those logs realtime. I already have made it possible to import a csv file into elasticsearch (through logstash)… --- ## [Snapshot specific index and specific pattern](https://discuss.elastic.co/t/snapshot-specific-index-and-specific-pattern/173894)
**Author:** [@michbsd](https://discuss.elastic.co/u/michbsd)\ **Replies:** 2\ **Last updated:** [March 26, 2019, 11:53am UTC](https://discuss.elastic.co/t/snapshot-specific-index-and-specific-pattern/173894 "2019-03-26T11:53:26Z")
Hi, I have a logstash index - and I would like to snapshot only this index (which I can already do) - however I would like to only snapshot data in the image which has e.g. source:/var/log/messages My logstash indices … --- ## [Sorting data by "\_id" behavior](https://discuss.elastic.co/t/sorting-data-by-id-behavior/173908)
**Author:** [@maddysqlpro](https://discuss.elastic.co/u/maddysqlpro)\ **Replies:** 3\ **Last updated:** [March 26, 2019, 11:29am UTC](https://discuss.elastic.co/t/sorting-data-by-id-behavior/173908 "2019-03-26T11:29:02Z")
Hi, I want to know how ES behaves when i sort the result based on \_id. Does it return the docs in the order it is inserted into the ES? My requirement is to retrieve the docs in the order its inserted. Is there a way… --- ## [Searching multiple index with different fields](https://discuss.elastic.co/t/searching-multiple-index-with-different-fields/173485)
**Author:** [@Omprakash\_Verma](https://discuss.elastic.co/u/Omprakash_Verma)\ **Replies:** 5\ **Last updated:** [March 26, 2019, 10:19am UTC](https://discuss.elastic.co/t/searching-multiple-index-with-different-fields/173485 "2019-03-26T10:19:08Z")
Hi, We are using ES and getting response properly for 1 index with search fields. I need suggestions of following : Problem : I have different objects like contact, account have records which is searchable by in accoun… --- ## [FieldMapper multiple scripts](https://discuss.elastic.co/t/fieldmapper-multiple-scripts/173825)
**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\ **Replies:** 1\ **Last updated:** [March 26, 2019, 10:00am UTC](https://discuss.elastic.co/t/fieldmapper-multiple-scripts/173825 "2019-03-26T10:00:00Z")
Hello team, I have a small problem more than anything to be able to establish multiple script since previously I could establish it in 2.4 with module.registerScript(NextOccurrenceSearchScript.SCRIPT\_NAME, NextOccurrenc… --- ## [For ML, ingest node is required?](https://discuss.elastic.co/t/for-ml-ingest-node-is-required/173888)
**Author:** [@jasony](https://discuss.elastic.co/u/jasony)\ **Replies:** 1\ **Last updated:** [March 26, 2019, 9:46am UTC](https://discuss.elastic.co/t/for-ml-ingest-node-is-required/173888 "2019-03-26T09:46:51Z")
hello, i am researching about ML/anomaly detection feature, and one question came up. Is ingest node required for ML? as far as i remember, ingest nodes set up is mandatory for node configuration, but not sure if inges… --- ## [No data without filter but it works with filter](https://discuss.elastic.co/t/no-data-without-filter-but-it-works-with-filter/173898)
**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\ **Replies:** 0\ **Last updated:** [March 26, 2019, 9:46am UTC](https://discuss.elastic.co/t/no-data-without-filter-but-it-works-with-filter/173898 "2019-03-26T09:46:04Z")
Hi, we are having ELK 5.4.3. The query for bar chart is { "query": { "bool": { "must": \[ { "query\_string": { "query": "(type:error OR type:alert OR type:message-log OR type:prompt OR type:action-l… --- ## [Elastic Should sense the input word and apply the space if required](https://discuss.elastic.co/t/elastic-should-sense-the-input-word-and-apply-the-space-if-required/173889)
**Author:** [@Mehala](https://discuss.elastic.co/u/Mehala)\ **Replies:** 0\ **Last updated:** [March 26, 2019, 9:04am UTC](https://discuss.elastic.co/t/elastic-should-sense-the-input-word-and-apply-the-space-if-required/173889 "2019-03-26T09:04:41Z")
For example: In the search query, if am providing the inputs as "IndianOil" then the ES should able to fetch the result with the "Indian Oil" & "IndianOil". Below is the query am currently using in ES 6.3. Please let me… --- ## [Elasticsearch 6.6.2 constantly failing with Out Of Memory Errors](https://discuss.elastic.co/t/elasticsearch-6-6-2-constantly-failing-with-out-of-memory-errors/173669)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 21\ **Last updated:** [March 26, 2019, 9:03am UTC](https://discuss.elastic.co/t/elasticsearch-6-6-2-constantly-failing-with-out-of-memory-errors/173669 "2019-03-26T09:03:20Z")
I had a 7 node cluster, with 4 data nodes and 3 master eligible nodes. Each data node is of 64GB Ram configured with 30GB heapsize, 8 cpu and 2TB SSD Disk. All the 4 data nodes are going down, after few hours of restar… --- ## [For machine learning, how many ML/ingest nodes are good for 10 data nodes (3 of them are master eligible nodes)?](https://discuss.elastic.co/t/for-machine-learning-how-many-ml-ingest-nodes-are-good-for-10-data-nodes-3-of-them-are-master-eligible-nodes/173659)
**Author:** [@jasony](https://discuss.elastic.co/u/jasony)\ **Replies:** 2\ **Last updated:** [March 26, 2019, 8:55am UTC](https://discuss.elastic.co/t/for-machine-learning-how-many-ml-ingest-nodes-are-good-for-10-data-nodes-3-of-them-are-master-eligible-nodes/173659 "2019-03-26T08:55:00Z")
Hello, I posted a couple questions here and still considering about applying platinum license for anomaly detection feature. 10 elasticsearch nodes will have the license and they will be used only for "anomaly detectio… --- ## [Moving data from hot to warm node](https://discuss.elastic.co/t/moving-data-from-hot-to-warm-node/173863)
**Author:** [@Ram1](https://discuss.elastic.co/u/Ram1)\ **Replies:** 4\ **Last updated:** [March 26, 2019, 8:41am UTC](https://discuss.elastic.co/t/moving-data-from-hot-to-warm-node/173863 "2019-03-26T08:41:22Z")
Hi, We are using curator job to move data from hot to warm nodes. As of now daily indices are getting created,Since the shard count is high we are planning to change the indexing strategy from daily index creation to m… --- ## [Aggregate on nested document with filters](https://discuss.elastic.co/t/aggregate-on-nested-document-with-filters/173874)
**Author:** [@Kingpin007](https://discuss.elastic.co/u/Kingpin007)\ **Replies:** 0\ **Last updated:** [March 26, 2019, 8:07am UTC](https://discuss.elastic.co/t/aggregate-on-nested-document-with-filters/173874 "2019-03-26T08:07:14Z")
USING ELASTICSEARCH 6.2 So I have a rather deeply-nested document structure. { "type": "Certain Type", "lineItems": \[ { "lineValue": 10, "events": \[ { … --- ## [Unassigned replication shards on elasticSearch 5.2\[is it a bug?\]](https://discuss.elastic.co/t/unassigned-replication-shards-on-elasticsearch-5-2-is-it-a-bug/173459)
**Author:** [@Adminstrator](https://discuss.elastic.co/u/Adminstrator)\ **Replies:** 21\ **Last updated:** [March 25, 2019, 10:06am UTC](https://discuss.elastic.co/t/unassigned-replication-shards-on-elasticsearch-5-2-is-it-a-bug/173459 "2019-03-25T10:06:30Z")
Hello, I have an elasticsearch cluster with 4 nodes, two process on each node(listen 8200 and 9200 port). Now I have a index with 8 shards and 1 replications. but the index always exsit an unassigned shard. Before ask … --- ## [Spark Structured streaming](https://discuss.elastic.co/t/spark-structured-streaming/173871)
**Author:** [@Fahad\_Khan](https://discuss.elastic.co/u/Fahad_Khan)\ **Replies:** 0\ **Last updated:** [March 26, 2019, 7:20am UTC](https://discuss.elastic.co/t/spark-structured-streaming/173871 "2019-03-26T07:20:59Z")
HI there! I'm reading files from a folder via spark structured stream and I don't want to hard code the index name actually i want to utilize this. " Writing to dynamic/multi-resourcesedit For cases when the data being… --- ## [Tips about an upgrade of ELK Stack](https://discuss.elastic.co/t/tips-about-an-upgrade-of-elk-stack/173826)
**Author:** [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\ **Replies:** 2\ **Last updated:** [March 26, 2019, 7:16am UTC](https://discuss.elastic.co/t/tips-about-an-upgrade-of-elk-stack/173826 "2019-03-26T07:16:51Z")
Hello, I would like some advices / tips about my idea to upgrade the elk stack we are using. At this moment, we have elasticsearch 6.3.0, kibana 6.3.0, logstash 6.3.0 and curator 5.6. 4 nodes : Node 1 is elasticsearc… --- ## [Audit logs doc error or I'm confused](https://discuss.elastic.co/t/audit-logs-doc-error-or-im-confused/173403)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 1\ **Last updated:** [March 26, 2019, 7:12am UTC](https://discuss.elastic.co/t/audit-logs-doc-error-or-im-confused/173403 "2019-03-26T07:12:05Z")
I added xpack.security.audit.enabled: true to my elasticsearch.yml I expected to see cluster-name\_audit.log, but I found cluster\_name\_access.log. I finally found doc explaining there should be both files, but I can't… --- ## [Elastic Cloud can't login with AWS SSO](https://discuss.elastic.co/t/elastic-cloud-cant-login-with-aws-sso/172924)
**Author:** [@Robin\_Guo](https://discuss.elastic.co/u/Robin_Guo)\ **Replies:** 5\ **Last updated:** [March 26, 2019, 6:40am UTC](https://discuss.elastic.co/t/elastic-cloud-cant-login-with-aws-sso/172924 "2019-03-26T06:40:14Z")
Dear Elastic, Those 2 days I've been fighting with Elastic Cloud auth with AWS SSO, But It doesn't work, I don't know what am I missing about configuration on Elastic Cloud or AWS SSO. Could someone help me out? Rega… --- ## [Check/Test whether a node can join cluster or not](https://discuss.elastic.co/t/check-test-whether-a-node-can-join-cluster-or-not/173854)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 5\ **Last updated:** [March 26, 2019, 5:12am UTC](https://discuss.elastic.co/t/check-test-whether-a-node-can-join-cluster-or-not/173854 "2019-03-26T05:12:36Z")
Hi, I don't want my node to join any cluster,so i followed these instructions https://www.elastic.co/guide/en/elasticsearch/reference/current/bootstrap-checks.html. But i want to test whether those settings work or not… --- ## [Why my term query slow?](https://discuss.elastic.co/t/why-my-term-query-slow/173589)
**Author:** [@yc1024](https://discuss.elastic.co/u/yc1024)\ **Replies:** 4\ **Last updated:** [March 26, 2019, 5:13am UTC](https://discuss.elastic.co/t/why-my-term-query-slow/173589 "2019-03-26T05:13:09Z")
I configure the following parameter, but my query is still very slow. "index.store.preload": \["nvd", "dvd", "tim", "doc", "dim"\] my dsl as follw: {"query": { "bool":{"filter":{"bool":{"must":\[{"term" : { "ALL" :"hvc… --- ## [Job Opportunity at Envato, Senior Engineer, Elasticsearch focus, Australia](https://discuss.elastic.co/t/job-opportunity-at-envato-senior-engineer-elasticsearch-focus-australia/173853)
**Author:** [@elizabethe](https://discuss.elastic.co/u/elizabethe)\ **Replies:** 0\ **Last updated:** [March 26, 2019, 4:27am UTC](https://discuss.elastic.co/t/job-opportunity-at-envato-senior-engineer-elasticsearch-focus-australia/173853 "2019-03-26T04:27:36Z")
Hi, my name is Elizabeth Enders and I work for a company called Envato. We're a global, online business and we're expanding our Australian based engineering team by adding a senior developer who is highly skilled in Elas… --- ## [Index speed is greatly reduced when doing replication](https://discuss.elastic.co/t/index-speed-is-greatly-reduced-when-doing-replication/173667)
**Author:** [@shjdwxy](https://discuss.elastic.co/u/shjdwxy)\ **Replies:** 6\ **Last updated:** [March 26, 2019, 2:21am UTC](https://discuss.elastic.co/t/index-speed-is-greatly-reduced-when-doing-replication/173667 "2019-03-26T02:21:00Z")
hi, guys We use ES for log management and ES cluster is built by hot-cold architecture. One physical host holds one hot node and one cold node. Hot node and cold node share Cpu, memory, but use different storage( ssd fo… --- ## [Elastic 5.6.14 cluster goes down with out of heap space error](https://discuss.elastic.co/t/elastic-5-6-14-cluster-goes-down-with-out-of-heap-space-error/173837)
**Author:** [@vamehta](https://discuss.elastic.co/u/vamehta)\ **Replies:** 1\ **Last updated:** [March 26, 2019, 1:23am UTC](https://discuss.elastic.co/t/elastic-5-6-14-cluster-goes-down-with-out-of-heap-space-error/173837 "2019-03-26T01:23:02Z")
We have an index setup in 2.4 that we restored it into a new 5.6 cluster (3 master 8 data). Same query works on 2.4 but fails on 5.6 with following error: \[2019-03-25T19:21:53,362\]\[WARN \]\[o.e.m.j.JvmGcMonitorService\] \[… --- ## [Complex search query help - Kindly!](https://discuss.elastic.co/t/complex-search-query-help-kindly/173839)
**Author:** [@Frrrrrunkis](https://discuss.elastic.co/u/Frrrrrunkis)\ **Replies:** 0\ **Last updated:** [March 26, 2019, 1:10am UTC](https://discuss.elastic.co/t/complex-search-query-help-kindly/173839 "2019-03-26T01:10:11Z")
HI All putting together elasticsearch / heartbeat with a angtular dashboard as a frontend. I would like to return all monitors with the monitor name , last status ( monitor.status ) and percent uptime over the last… --- ## [Kibana not able to create index pattern](https://discuss.elastic.co/t/kibana-not-able-to-create-index-pattern/173679)
**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\ **Replies:** 1\ **Last updated:** [March 26, 2019, 1:00am UTC](https://discuss.elastic.co/t/kibana-not-able-to-create-index-pattern/173679 "2019-03-26T01:00:10Z")
Hi i am Using kibana 6x version , I have some index in elasticsearch but when i m trying to create index pattern after clicking on index creation button , its not able to create index , its just show spinner all the ti… --- ## [Geo point name configuration](https://discuss.elastic.co/t/geo-point-name-configuration/173757)
**Author:** [@Sergio\_Redondo](https://discuss.elastic.co/u/Sergio_Redondo)\ **Replies:** 1\ **Last updated:** [March 26, 2019, 12:55am UTC](https://discuss.elastic.co/t/geo-point-name-configuration/173757 "2019-03-26T00:55:14Z")
Good morning, I am visualizing geographic data with points thanks to geo\_point, once those points appear on the map I would like to know if I can select the name because I only get the parameter count and the number and … --- ## [Multiple ES run on same machine](https://discuss.elastic.co/t/multiple-es-run-on-same-machine/173781)
**Author:** [@KashiPashoria\_Tonny](https://discuss.elastic.co/u/KashiPashoria_Tonny)\ **Replies:** 1\ **Last updated:** [March 25, 2019, 11:51pm UTC](https://discuss.elastic.co/t/multiple-es-run-on-same-machine/173781 "2019-03-25T23:51:15Z")
I'm use ES 6.6.0. I need to run multiple ES nodes on same machine. I duplicated Elastic installation directory and config & data directories. I created new ES\_HOME & ES\_PATH\_CONFIG environment variable and changed the n… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1352) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1354)