# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1356 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1357 --- ## [Filter inner hits at display](https://discuss.elastic.co/t/filter-inner-hits-at-display/173539)
**Author:** [@rodrigue](https://discuss.elastic.co/u/rodrigue)\ **Replies:** 1\ **Last updated:** [March 22, 2019, 6:07pm UTC](https://discuss.elastic.co/t/filter-inner-hits-at-display/173539 "2019-03-22T18:07:04Z")
Hello, Im' writing to you because I have a problem and I can't find the answer myself. I'm indexing documents, with nested paragraphs. Ex : { "title": "how to recyle" "paragraph" : \[ "title": "about iron", "warning… --- ## [Unable to pull from docker registry due to authentication error](https://discuss.elastic.co/t/unable-to-pull-from-docker-registry-due-to-authentication-error/173532)
**Author:** [@csscif](https://discuss.elastic.co/u/csscif)\ **Replies:** 3\ **Last updated:** [March 22, 2019, 5:56pm UTC](https://discuss.elastic.co/t/unable-to-pull-from-docker-registry-due-to-authentication-error/173532 "2019-03-22T17:56:40Z")
$ docker pull docker.elastic.co/elasticsearch/elasticsearch:latest Error response from daemon: unauthorized: authentication required Start happening around 8:30am PDT. Nothing reported on https://cloud-status.elastic… --- ## [Docker registry down?](https://discuss.elastic.co/t/docker-registry-down/173530)
**Author:** [@kevin-hicks-sp](https://discuss.elastic.co/u/kevin-hicks-sp)\ **Replies:** 2\ **Last updated:** [March 22, 2019, 5:56pm UTC](https://discuss.elastic.co/t/docker-registry-down/173530 "2019-03-22T17:56:14Z")
It looks like the Docker registry for Elastic may be misbehaving, requiring authentication to pull public images: $ docker pull docker.elastic.co/elasticsearch/elasticsearch:6.6.2 Error response from daemon: unauthorize… --- ## [New to ELK Stack on AWS?](https://discuss.elastic.co/t/new-to-elk-stack-on-aws/172164)
**Author:** [@lar](https://discuss.elastic.co/u/lar)\ **Replies:** 2\ **Last updated:** [March 22, 2019, 5:20pm UTC](https://discuss.elastic.co/t/new-to-elk-stack-on-aws/172164 "2019-03-22T17:20:49Z")
I am using ELK stack on AWS (not the AWS Manages Service ES), like Installing ELK stack on EC2 to collect all infrastructure logs and application logs. I have few questions: 1 - What is being used for Data shipping from… --- ## [Will the remote cluster join the local cluster if they have the same name when using cross cluster search?](https://discuss.elastic.co/t/will-the-remote-cluster-join-the-local-cluster-if-they-have-the-same-name-when-using-cross-cluster-search/173351)
**Author:** [@iShiBin](https://discuss.elastic.co/u/iShiBin)\ **Replies:** 4\ **Last updated:** [March 22, 2019, 5:14pm UTC](https://discuss.elastic.co/t/will-the-remote-cluster-join-the-local-cluster-if-they-have-the-same-name-when-using-cross-cluster-search/173351 "2019-03-22T17:14:14Z")
Just wondering whether there the gateway node(s) will join the local cluster if they are using the same cluster name? Because according to https://www.elastic.co/guide/en/elasticsearch/reference/master/modules-discovery-… --- ## [Modify netflow index creation name](https://discuss.elastic.co/t/modify-netflow-index-creation-name/173185)
**Author:** [@Ryne\_Keel](https://discuss.elastic.co/u/Ryne_Keel)\ **Replies:** 1\ **Last updated:** [March 22, 2019, 5:07pm UTC](https://discuss.elastic.co/t/modify-netflow-index-creation-name/173185 "2019-03-22T17:07:19Z")
I am running into an issue where my netflow index template is called netflow, with index pattern netflow-\*. When a new index is created, it is called netflow-date. I created a lifecycle rollover policy for this index te… --- ## [ELK Stack on AWS](https://discuss.elastic.co/t/elk-stack-on-aws/173524)
**Author:** [@lar](https://discuss.elastic.co/u/lar)\ **Replies:** 2\ **Last updated:** [March 22, 2019, 5:01pm UTC](https://discuss.elastic.co/t/elk-stack-on-aws/173524 "2019-03-22T17:01:53Z")
Saw many threads on this topic \[https://discuss.elastic.co/t/elk-stack-on-aws-multi-region/79898\] \[https://discuss.elastic.co/t/regular-elk-stack-on-aws/169997\] \[https://discuss.elastic.co/t/new-to-elk-stack-on-aws/17… --- ## [X-pack-6.2.4 older plugin structure -ERROR](https://discuss.elastic.co/t/x-pack-6-2-4-older-plugin-structure-error/173518)
**Author:** [@jimmyvalmer19](https://discuss.elastic.co/u/jimmyvalmer19)\ **Replies:** 2\ **Last updated:** [March 22, 2019, 4:09pm UTC](https://discuss.elastic.co/t/x-pack-6-2-4-older-plugin-structure-error/173518 "2019-03-22T16:09:24Z")
I'm installing x-pack-6.2.4.zip on Centos 7 with Elasticsearch 6.5.4. I get the error message: ERROR: This plugin was built with an older plugin structure. Contact the plugin author to remove the intermediate "elasticse… --- ## [Upgrade issues unable to upgrade the mappings for the index, field name contains dot](https://discuss.elastic.co/t/upgrade-issues-unable-to-upgrade-the-mappings-for-the-index-field-name-contains-dot/171501)
**Author:** [@Vishal\_0611](https://discuss.elastic.co/u/Vishal_0611)\ **Replies:** 25\ **Last updated:** [March 22, 2019, 4:05pm UTC](https://discuss.elastic.co/t/upgrade-issues-unable-to-upgrade-the-mappings-for-the-index-field-name-contains-dot/171501 "2019-03-22T16:05:01Z")
Hi All, Getting below error while restoring snapshot of 1.7 ES data on 2.4 ES: {"error":{"root\_cause":\[{"type":"snapshot\_restore\_exception","reason":"\[my\_backup:snapshot\_20190213\] cannot restore index \[test\_09\] because… --- ## [Cannot connect to Elasticsearch endpoint in Azure](https://discuss.elastic.co/t/cannot-connect-to-elasticsearch-endpoint-in-azure/173186)
**Author:** [@bo.clifton](https://discuss.elastic.co/u/bo.clifton)\ **Replies:** 9\ **Last updated:** [March 22, 2019, 3:28pm UTC](https://discuss.elastic.co/t/cannot-connect-to-elasticsearch-endpoint-in-azure/173186 "2019-03-22T15:28:23Z")
I've deployed an Elasticsearch cluster into Azure using the ARM template and associated script found here: ARM Template. I used default settings, except for the admin user name and password. After deployment succeeded,… --- ## [Regex Expression: ignore all characters and match only the last word in the message field](https://discuss.elastic.co/t/regex-expression-ignore-all-characters-and-match-only-the-last-word-in-the-message-field/173514)
**Author:** [@Anonymous2](https://discuss.elastic.co/u/Anonymous2)\ **Replies:** 0\ **Last updated:** [March 22, 2019, 3:06pm UTC](https://discuss.elastic.co/t/regex-expression-ignore-all-characters-and-match-only-the-last-word-in-the-message-field/173514 "2019-03-22T15:06:59Z")
Hello, I've created a query in wich I want to use a regex expression. GET tpms-system/\_search { "aggs": { "dashbord\_updates": { "terms": { "field" : "message", "includ… --- ## [Aggregate On Key Within Date / Time Range Multiple Buckets](https://discuss.elastic.co/t/aggregate-on-key-within-date-time-range-multiple-buckets/173179)
**Author:** [@Chris\_Bartos](https://discuss.elastic.co/u/Chris_Bartos)\ **Replies:** 6\ **Last updated:** [March 22, 2019, 3:03pm UTC](https://discuss.elastic.co/t/aggregate-on-key-within-date-time-range-multiple-buckets/173179 "2019-03-22T15:03:16Z")
Hello, I'm not really sure how to ask this question succinctly, so maybe I can give an example of what I'm trying to do. I have indexed 30 minute timeslots for a room reservation system. Maybe something like this: \[ { … --- ## [Elasticsearch backup GCP plugin](https://discuss.elastic.co/t/elasticsearch-backup-gcp-plugin/173132)
**Author:** [@Callonski](https://discuss.elastic.co/u/Callonski)\ **Replies:** 8\ **Last updated:** [March 22, 2019, 2:34pm UTC](https://discuss.elastic.co/t/elasticsearch-backup-gcp-plugin/173132 "2019-03-22T14:34:13Z")
I'm having trouble securing a backup for elasticsearch running on GCP, kubernetes. I've tried two approaches. The first, that seems like the best is taking snapshots and store in a bucket. I’ve installed this plugin o… --- ## [Why is ascending geo distance sorting faster than descending geo distance sorting](https://discuss.elastic.co/t/why-is-ascending-geo-distance-sorting-faster-than-descending-geo-distance-sorting/173328)
**Author:** [@gemo1011](https://discuss.elastic.co/u/gemo1011)\ **Replies:** 6\ **Last updated:** [March 22, 2019, 1:22pm UTC](https://discuss.elastic.co/t/why-is-ascending-geo-distance-sorting-faster-than-descending-geo-distance-sorting/173328 "2019-03-22T13:22:34Z")
I'm using Elasticsearch 6.6 and have an index (1 shard, 1 replica) with the geonames (https://www.geonames.org/) dataset indexed (indexsize =1.3 gb, 11.8 mio geopoints). I was playing around a bit with the geo distance … --- ## [How can i get separate email for distinct services in logs by single watcher](https://discuss.elastic.co/t/how-can-i-get-separate-email-for-distinct-services-in-logs-by-single-watcher/173136)
**Author:** [@akpandy](https://discuss.elastic.co/u/akpandy)\ **Replies:** 6\ **Last updated:** [March 22, 2019, 12:35pm UTC](https://discuss.elastic.co/t/how-can-i-get-separate-email-for-distinct-services-in-logs-by-single-watcher/173136 "2019-03-22T12:35:32Z")
Hi, I am new to ELK, I am having single log file where all service failure gets logged. Can i create a single watcher to generate multiple alert for each service failure. For example: If i have failure for serviceA, s… --- ## [Removal of mapping types question](https://discuss.elastic.co/t/removal-of-mapping-types-question/173010)
**Author:** [@Oscar\_Sanchez\_Sanche](https://discuss.elastic.co/u/Oscar_Sanchez_Sanche)\ **Replies:** 3\ **Last updated:** [March 22, 2019, 12:28pm UTC](https://discuss.elastic.co/t/removal-of-mapping-types-question/173010 "2019-03-22T12:28:16Z")
Hi there, per https://www.elastic.co/guide/en/elasticsearch/reference/current/removal-of-types.html#\_schedule\_for\_removal\_of\_mapping\_types I just wanted to quickly ask, is the custom field solution going to be the way t… --- ## [Unable to backup data in mounted location in linux](https://discuss.elastic.co/t/unable-to-backup-data-in-mounted-location-in-linux/173483)
**Author:** [@john\_8787](https://discuss.elastic.co/u/john_8787)\ **Replies:** 1\ **Last updated:** [March 22, 2019, 12:23pm UTC](https://discuss.elastic.co/t/unable-to-backup-data-in-mounted-location-in-linux/173483 "2019-03-22T12:23:18Z")
on running the elasticsearch snapshot query. The data is not getting saved in the file location. This is a mounted folder and this was mounted using command: sudo mount -t cifs -o username=qedbuser,password=\*\*\*\*,domain… --- ## [Sorting aggregation buckets problem](https://discuss.elastic.co/t/sorting-aggregation-buckets-problem/173488)
**Author:** [@p.j.keukens](https://discuss.elastic.co/u/p.j.keukens)\ **Replies:** 0\ **Last updated:** [March 22, 2019, 12:08pm UTC](https://discuss.elastic.co/t/sorting-aggregation-buckets-problem/173488 "2019-03-22T12:08:28Z")
Hi All, I have this query and I would like to bucketed results to be sorted on the managers age, can anybody help me on how to do this? This is (a part of) my json request, the full request has multiple aggregates on M… --- ## [CIRCLE geometry is not supported](https://discuss.elastic.co/t/circle-geometry-is-not-supported/171093)
**Author:** [@Amjad\_Khan](https://discuss.elastic.co/u/Amjad_Khan)\ **Replies:** 13\ **Last updated:** [March 22, 2019, 11:26am UTC](https://discuss.elastic.co/t/circle-geometry-is-not-supported/171093 "2019-03-22T11:26:38Z")
HELLO , I was using elasticsearch 6.1 before and i was able to query geo\_shape LINESTRING using circle intersects . recently updated to 6.6 and unable to query the Same , How do I search for line string which is near to… --- ## [Java High level client Api Date range](https://discuss.elastic.co/t/java-high-level-client-api-date-range/173472)
**Author:** [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\ **Replies:** 1\ **Last updated:** [March 22, 2019, 11:02am UTC](https://discuss.elastic.co/t/java-high-level-client-api-date-range/173472 "2019-03-22T11:02:11Z")
I using java High level client Api In that i using range query method to fetch date range data in that i need to normal machine time as input and it need to convert it to json date to fetch data for that what i need to … --- ## [Gc overhead while index data using logstash](https://discuss.elastic.co/t/gc-overhead-while-index-data-using-logstash/171268)
**Author:** [@Rajesh\_Verma](https://discuss.elastic.co/u/Rajesh_Verma)\ **Replies:** 6\ **Last updated:** [March 22, 2019, 10:50am UTC](https://discuss.elastic.co/t/gc-overhead-while-index-data-using-logstash/171268 "2019-03-22T10:50:26Z")
System config: Ram: 16 gb, 1tb Harddrive, I am trying to index the around 2.5 crore using multi pipe line configuration using logstash Running nine pipeline id which created the 45 index in single node with 5 shards… --- ## [Boolean query with minimum\_should\_match and fuzzy search](https://discuss.elastic.co/t/boolean-query-with-minimum-should-match-and-fuzzy-search/173433)
**Author:** [@wussup13](https://discuss.elastic.co/u/wussup13)\ **Replies:** 0\ **Last updated:** [March 22, 2019, 7:04am UTC](https://discuss.elastic.co/t/boolean-query-with-minimum-should-match-and-fuzzy-search/173433 "2019-03-22T07:04:34Z")
Hello, I am using a boolean query with minimum\_should\_match and fuzzy\_search. Ex. query (302 -\> house number, Jarvis -\> street, Buffalo -\> city): { "query":{ "bool":{ "must":\[ { … --- ## [Assistance with LDAP authentication](https://discuss.elastic.co/t/assistance-with-ldap-authentication/172605)
**Author:** [@alta\_01](https://discuss.elastic.co/u/alta_01)\ **Replies:** 1\ **Last updated:** [March 22, 2019, 9:19am UTC](https://discuss.elastic.co/t/assistance-with-ldap-authentication/172605 "2019-03-22T09:19:56Z")
Working on testing LDAP authentication for our cluster before setting it up for a client. So far....success is limited. Here is my journalctl log after I set the config in the YML file. I know the issue is with the bind\_… --- ## [What's the best approach to balance the text similarity with different fields weights?](https://discuss.elastic.co/t/whats-the-best-approach-to-balance-the-text-similarity-with-different-fields-weights/171898)
**Author:** [@Morriaty](https://discuss.elastic.co/u/Morriaty)\ **Replies:** 3\ **Last updated:** [March 22, 2019, 9:18am UTC](https://discuss.elastic.co/t/whats-the-best-approach-to-balance-the-text-similarity-with-different-fields-weights/171898 "2019-03-22T09:18:36Z")
Say we have two docs {"\_id": 1, "title": "James Harden wins the MVP", "content": "xxxxxxxxxxxxxxxxxxxxxx"} {"\_id": 2, "title": "The new 007 movie comes!", "content": "xxxx James Bond xxxxxxxxxxxxx"} And when users sea… --- ## [Import indices from snapshot](https://discuss.elastic.co/t/import-indices-from-snapshot/173391)
**Author:** [@nathanpaul8](https://discuss.elastic.co/u/nathanpaul8)\ **Replies:** 1\ **Last updated:** [March 22, 2019, 9:16am UTC](https://discuss.elastic.co/t/import-indices-from-snapshot/173391 "2019-03-22T09:16:40Z")
I have a cluster with snapshots. Can I import one index to JSON file directly from snapshot. Is there any Logstash plugin I can use. Or I have to restore to a new /existing ES and export. Please advise. Thanks in a… --- ## [How do I get a trial license](https://discuss.elastic.co/t/how-do-i-get-a-trial-license/173108)
**Author:** [@Pucky](https://discuss.elastic.co/u/Pucky)\ **Replies:** 4\ **Last updated:** [March 22, 2019, 8:42am UTC](https://discuss.elastic.co/t/how-do-i-get-a-trial-license/173108 "2019-03-22T08:42:39Z")
Hi Where do I go to get a trial license for x-pack? I need the upgrade helper for 5.6. --- ## [Watcher xpack settings when using elastic cloud](https://discuss.elastic.co/t/watcher-xpack-settings-when-using-elastic-cloud/173438)
**Author:** [@nzxtquad](https://discuss.elastic.co/u/nzxtquad)\ **Replies:** 0\ **Last updated:** [March 22, 2019, 7:19am UTC](https://discuss.elastic.co/t/watcher-xpack-settings-when-using-elastic-cloud/173438 "2019-03-22T07:19:36Z")
We are using elastic cloud as our elasticsearch/kibana environment and are using a local logstash instance for forwarding the logs. We are trying to setup a wachter alert (using the webhook functionality), we run into is… --- ## [Elasticsearch Search over 10000 documents](https://discuss.elastic.co/t/elasticsearch-search-over-10000-documents/173413)
**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\ **Replies:** 2\ **Last updated:** [March 22, 2019, 6:45am UTC](https://discuss.elastic.co/t/elasticsearch-search-over-10000-documents/173413 "2019-03-22T06:45:28Z")
I want to retrieve the document and display it page by page in the table (web). Page movement is possible directly. (ex. 1 page to 1001 page) But if i have 100 data per page and want to display 101 pages right away, I … --- ## [Elasticsearch - High CPU usage for simple query while load testing](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage-for-simple-query-while-load-testing/172972)
**Author:** [@jobini](https://discuss.elastic.co/u/jobini)\ **Replies:** 5\ **Last updated:** [March 22, 2019, 6:32am UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage-for-simple-query-while-load-testing/172972 "2019-03-22T06:32:24Z")
I have an Elasticsearch index having about 93 million documents (68.8GB) on 3 shards. While doing load testing (300 concurrent requests) with one certain query, the CPU usage shoots up to 100%. The query is fairly simple… --- ## ["Too many open files" on small cluster](https://discuss.elastic.co/t/too-many-open-files-on-small-cluster/173325)
**Author:** [@jammann](https://discuss.elastic.co/u/jammann)\ **Replies:** 4\ **Last updated:** [March 22, 2019, 6:15am UTC](https://discuss.elastic.co/t/too-many-open-files-on-small-cluster/173325 "2019-03-22T06:15:36Z")
Hi all We run a small 4-node cluster (2 data nodes) which was lately upgraded to 6.5.4, without apparent problems. It only has about 100 indices, 5 shards each, 1 replica per index, so a total of roughly 1000 shards. Y… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1355) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1357)