# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1361 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1362 --- ## [How exactly can the \_search be overwhelmed?](https://discuss.elastic.co/t/how-exactly-can-the-search-be-overwhelmed/172066)
**Author:** [@abhinav\_chourasia](https://discuss.elastic.co/u/abhinav_chourasia)\ **Replies:** 1\ **Last updated:** [March 19, 2019, 3:51pm UTC](https://discuss.elastic.co/t/how-exactly-can-the-search-be-overwhelmed/172066 "2019-03-19T15:51:36Z")
hello folks, we have been using elasticsearch for many products in our organization. And one recommendation that we have always given our developers is to make sure that the elasticsearch is definitely not exposed direc… --- ## [Logstash to Elasticsearch connectivity issue after configuring SSL](https://discuss.elastic.co/t/logstash-to-elasticsearch-connectivity-issue-after-configuring-ssl/172969)
**Author:** [@noodler\_1096](https://discuss.elastic.co/u/noodler_1096)\ **Replies:** 2\ **Last updated:** [March 19, 2019, 2:07pm UTC](https://discuss.elastic.co/t/logstash-to-elasticsearch-connectivity-issue-after-configuring-ssl/172969 "2019-03-19T14:07:48Z")
As a part of enabling encryption on services, I tried the following tasks. Enable SSL on ElasticSearch Enable SSL on Kibana Enable SSL for the communication channel between Kibana and Elasticsearch. Above things were … --- ## [Query help must\_not except when](https://discuss.elastic.co/t/query-help-must-not-except-when/172935)
**Author:** [@grant\_donovan](https://discuss.elastic.co/u/grant_donovan)\ **Replies:** 5\ **Last updated:** [March 19, 2019, 2:03pm UTC](https://discuss.elastic.co/t/query-help-must-not-except-when/172935 "2019-03-19T14:03:18Z")
I wonder if someone would be able to help me with this query The query works and returns results, but I want to change the must not bit, instead of "must\_not": \[ { "match": { "notificationType": "88" }} I want to say … --- ## [Question about precision in Elastic Search, Need to take the values till 18 to 20 decimals](https://discuss.elastic.co/t/question-about-precision-in-elastic-search-need-to-take-the-values-till-18-to-20-decimals/172531)
**Author:** [@Vishal\_Gupta1](https://discuss.elastic.co/u/Vishal_Gupta1)\ **Replies:** 7\ **Last updated:** [March 19, 2019, 1:55pm UTC](https://discuss.elastic.co/t/question-about-precision-in-elastic-search-need-to-take-the-values-till-18-to-20-decimals/172531 "2019-03-19T13:55:16Z")
Hi, I have been using Elastic Search V 6.6.4 for my project from last 6 months or so. However, after completing the product when we are doing the verification of the values , we can see there is a mismatch in values aft… --- ## [Actual logs that appear at Kibana are different than those that configured at filebeat](https://discuss.elastic.co/t/actual-logs-that-appear-at-kibana-are-different-than-those-that-configured-at-filebeat/172975)
**Author:** [@manosmustang](https://discuss.elastic.co/u/manosmustang)\ **Replies:** 1\ **Last updated:** [March 19, 2019, 1:47pm UTC](https://discuss.elastic.co/t/actual-logs-that-appear-at-kibana-are-different-than-those-that-configured-at-filebeat/172975 "2019-03-19T13:47:38Z")
Hello, As you can see below I have configured at filebeat.yml file the log file that I want to send at kibana, it is the /var/log/yum.log but at kibana when I find the index and insert it to it i can see only logs from … --- ## [Querying child objects of an indexed document (NEST)](https://discuss.elastic.co/t/querying-child-objects-of-an-indexed-document-nest/172815)
**Author:** [@lesscode](https://discuss.elastic.co/u/lesscode)\ **Replies:** 2\ **Last updated:** [March 19, 2019, 1:04pm UTC](https://discuss.elastic.co/t/querying-child-objects-of-an-indexed-document-nest/172815 "2019-03-19T13:04:27Z")
I think I'm missing something fundamental with querying via the .NET client. We're trying to search log events logged via Serilog, with a context object nested as a field (using the Serilog ForContext mechanism). EventL… --- ## [Need to do sum aggregation with probable null values of field](https://discuss.elastic.co/t/need-to-do-sum-aggregation-with-probable-null-values-of-field/172971)
**Author:** [@lasitha1991](https://discuss.elastic.co/u/lasitha1991)\ **Replies:** 0\ **Last updated:** [March 19, 2019, 12:54pm UTC](https://discuss.elastic.co/t/need-to-do-sum-aggregation-with-probable-null-values-of-field/172971 "2019-03-19T12:54:32Z")
Hi, I have a field in my elastic index with probable null value for that field. But when I do sum aggregation on that field, even with all the values as null it returns 0 as the value from elasticsearch. I need to hav… --- ## [SQL-like Having on aggregated data](https://discuss.elastic.co/t/sql-like-having-on-aggregated-data/172960)
**Author:** [@nili1](https://discuss.elastic.co/u/nili1)\ **Replies:** 0\ **Last updated:** [March 19, 2019, 12:23pm UTC](https://discuss.elastic.co/t/sql-like-having-on-aggregated-data/172960 "2019-03-19T12:23:37Z")
Hi, We are looking for a way of simulating sql "having" on Elasticsearch - i.e. to filter aggregated data based on the aggregated value. Some of the previous replies on this issue referenced bucket selector - however, … --- ## [500 error and some troubles when I search](https://discuss.elastic.co/t/500-error-and-some-troubles-when-i-search/172721)
**Author:** [@Lin\_Zhu](https://discuss.elastic.co/u/Lin_Zhu)\ **Replies:** 6\ **Last updated:** [March 19, 2019, 11:14am UTC](https://discuss.elastic.co/t/500-error-and-some-troubles-when-i-search/172721 "2019-03-19T11:14:03Z")
I'm a beginner, and when I use it, I feel confused. like I write 500+ documents into an index, but when I search it, I wish all can be viewed, but just five, I don't know why. And when I use Chinese as input, it has 500 … --- ## [How to benchmark existing cluster with multi-get (API) operation](https://discuss.elastic.co/t/how-to-benchmark-existing-cluster-with-multi-get-api-operation/171287)
**Author:** [@Suraj\_Singh](https://discuss.elastic.co/u/Suraj_Singh)\ **Replies:** 4\ **Last updated:** [March 19, 2019, 11:07am UTC](https://discuss.elastic.co/t/how-to-benchmark-existing-cluster-with-multi-get-api-operation/171287 "2019-03-19T11:07:15Z")
Hi Team, I have few already created indexes(with data) on elastic and i want to get multi get performance on existing indexes. I see we can define this with custom tracks by creating a track.json file. What should be t… --- ## [Deploying across multi-regions in Azure?](https://discuss.elastic.co/t/deploying-across-multi-regions-in-azure/172923)
**Author:** [@Vikas\_Mestry](https://discuss.elastic.co/u/Vikas_Mestry)\ **Replies:** 4\ **Last updated:** [March 19, 2019, 10:55am UTC](https://discuss.elastic.co/t/deploying-across-multi-regions-in-azure/172923 "2019-03-19T10:55:48Z")
Hello, Are there any pitfalls for deploying / configuring a cluster spread across different regions in Azure, how do we achieve five 9's. Would creating vpn gateways across different regions & building a cluster have p… --- ## [Insert ingest pipeline if id is new](https://discuss.elastic.co/t/insert-ingest-pipeline-if-id-is-new/172945)
**Author:** [@Constantin\_Manea](https://discuss.elastic.co/u/Constantin_Manea)\ **Replies:** 0\ **Last updated:** [March 19, 2019, 10:32am UTC](https://discuss.elastic.co/t/insert-ingest-pipeline-if-id-is-new/172945 "2019-03-19T10:32:51Z")
Hello all, I'm kinda new at elasticsearch and i have a bit of a situation: Every 3-4 days i receive a big file (around 30 mil. documents) to insert into elasticsearch. I process the file line by line and insert into el… --- ## [Installed 6.6 -- Could not find java; set JAVA\_HOME or ensure java is in PATH](https://discuss.elastic.co/t/installed-6-6-could-not-find-java-set-java-home-or-ensure-java-is-in-path/172026)
**Author:** [@kb2295](https://discuss.elastic.co/u/kb2295)\ **Replies:** 3\ **Last updated:** [March 19, 2019, 10:02am UTC](https://discuss.elastic.co/t/installed-6-6-could-not-find-java-set-java-home-or-ensure-java-is-in-path/172026 "2019-03-19T10:02:01Z")
Hi, I just installed Elastic Search 6.6. I ran it and it worked fine until I tried again a few hours later: # /export1/opt/ELK\_Bin/elasticsearch-6.6.1/bin/elasticsearch which: no java in (/usr/lib64/qt-3.3/bin:/usr/loc… --- ## [Query text which starting with slash by ElasticSearch 6.4.3](https://discuss.elastic.co/t/query-text-which-starting-with-slash-by-elasticsearch-6-4-3/172892)
**Author:** [@Chia-Wen\_Wu](https://discuss.elastic.co/u/Chia-Wen_Wu)\ **Replies:** 5\ **Last updated:** [March 19, 2019, 9:58am UTC](https://discuss.elastic.co/t/query-text-which-starting-with-slash-by-elasticsearch-6-4-3/172892 "2019-03-19T09:58:09Z")
Hi all, Here is my data structure in Elasticsearch { "took" : 13, "timed\_out" : false, "\_shards" : { "total" : 4, "successful" : 4, "skipped" : 0, "failed" : 0 }, "hits" : { "total" : 1, … --- ## [Max() aggregation with group by and then return all fields](https://discuss.elastic.co/t/max-aggregation-with-group-by-and-then-return-all-fields/172719)
**Author:** [@hopeng](https://discuss.elastic.co/u/hopeng)\ **Replies:** 11\ **Last updated:** [March 19, 2019, 9:47am UTC](https://discuss.elastic.co/t/max-aggregation-with-group-by-and-then-return-all-fields/172719 "2019-03-19T09:47:10Z")
Hi, I have a collection of articles with different author, title and revisions. Can I run a search to get all the articles with the biggest revision in their author+title group (records in bold)? Author | Publis… --- ## [Elasticsearch | max\_expansions True meaning](https://discuss.elastic.co/t/elasticsearch-max-expansions-true-meaning/172711)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 1\ **Last updated:** [March 19, 2019, 9:46am UTC](https://discuss.elastic.co/t/elasticsearch-max-expansions-true-meaning/172711 "2019-03-19T09:46:41Z")
Hi, I have few doubts over max\_expansions of Fuzziness. I created a Index A. I have copy\_to enabled in it. Index A contains single document : { "ID": "AUTO20029", "ID\_1": "AUTO20029", "NAME": "AUTO20029", "… --- ## [Azure Marketplace Elasticsearch template failing to deploy](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-template-failing-to-deploy/171964)
**Author:** [@Jonathan\_Relf](https://discuss.elastic.co/u/Jonathan_Relf)\ **Replies:** 4\ **Last updated:** [March 19, 2019, 9:45am UTC](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-template-failing-to-deploy/171964 "2019-03-19T09:45:29Z")
I'm trying to deploy the Elasticsearch marketplace template ( https://azuremarketplace.microsoft.com/en-us/marketplace/apps/elastic.elasticsearch?tab=Overview ) and it's failed during the deployment. The kibana and logs… --- ## [Problem upgrading 6.5.3 -\> 6.6.2](https://discuss.elastic.co/t/problem-upgrading-6-5-3-6-6-2/172927)
**Author:** [@Pedro\_Cabral](https://discuss.elastic.co/u/Pedro_Cabral)\ **Replies:** 0\ **Last updated:** [March 19, 2019, 9:36am UTC](https://discuss.elastic.co/t/problem-upgrading-6-5-3-6-6-2/172927 "2019-03-19T09:36:58Z")
Hello all, I had some problems with the upgrade of Elasticsearch 6.5.3 to 6.6.2. After the update the connection between kibana and elasticsearch was lost. I was prompted with error 500 (internal server error). Was f… --- ## [Match Exact Value of a Field and not be Included as a Subset in That Field, not more not less](https://discuss.elastic.co/t/match-exact-value-of-a-field-and-not-be-included-as-a-subset-in-that-field-not-more-not-less/172914)
**Author:** [@maryam\_abdullah](https://discuss.elastic.co/u/maryam_abdullah)\ **Replies:** 0\ **Last updated:** [March 19, 2019, 8:30am UTC](https://discuss.elastic.co/t/match-exact-value-of-a-field-and-not-be-included-as-a-subset-in-that-field-not-more-not-less/172914 "2019-03-19T08:30:40Z")
Hi, please, I really need some help! I want to be able to boost results if the query happens to match the exact value of a field and not be included as a subset in that field. This field has 2 analyzers, the custom one… --- ## [Enable groovy scripts on ES6.5.4](https://discuss.elastic.co/t/enable-groovy-scripts-on-es6-5-4/172921)
**Author:** [@hichMEN](https://discuss.elastic.co/u/hichMEN)\ **Replies:** 1\ **Last updated:** [March 19, 2019, 9:14am UTC](https://discuss.elastic.co/t/enable-groovy-scripts-on-es6-5-4/172921 "2019-03-19T09:14:47Z")
I would execute a groovy script, so I added the properties: script.inline: true script.indexed: true and script.allowed\_types: inline script.allowed\_contexts: search, update But I got the following exception: java… --- ## [Does the Elastic Client expect the servers in the cluster to be on a static IP?](https://discuss.elastic.co/t/does-the-elastic-client-expect-the-servers-in-the-cluster-to-be-on-a-static-ip/172873)
**Author:** [@gopal.ramakrishnan](https://discuss.elastic.co/u/gopal.ramakrishnan)\ **Replies:** 5\ **Last updated:** [March 19, 2019, 8:11am UTC](https://discuss.elastic.co/t/does-the-elastic-client-expect-the-servers-in-the-cluster-to-be-on-a-static-ip/172873 "2019-03-19T08:11:12Z")
We have a elastic cluster with n node setup. In our setup, restart of the node will give a new ip address to the node. Every time we restart a node and it joins back the cluster the server is able to recover easily. The … --- ## [Elasticsearch Errors not indexing data](https://discuss.elastic.co/t/elasticsearch-errors-not-indexing-data/172527)
**Author:** [@Miguel\_Leite](https://discuss.elastic.co/u/Miguel_Leite)\ **Replies:** 2\ **Last updated:** [March 19, 2019, 7:37am UTC](https://discuss.elastic.co/t/elasticsearch-errors-not-indexing-data/172527 "2019-03-19T07:37:50Z")
Hey guys, I'm having some problems on running the ELK. Elasticsearch is giving a lot of exceptions and errors: \[2019-03-15T12:17:27,369\]\[WARN \]\[r.suppressed \] path: /.kibana/doc/config%3A6.4.2, params: {ind… --- ## [Can we have Multiple Parent - Single Child Relation in elastic search](https://discuss.elastic.co/t/can-we-have-multiple-parent-single-child-relation-in-elastic-search/172768)
**Author:** [@sharoncek](https://discuss.elastic.co/u/sharoncek)\ **Replies:** 3\ **Last updated:** [March 19, 2019, 6:23am UTC](https://discuss.elastic.co/t/can-we-have-multiple-parent-single-child-relation-in-elastic-search/172768 "2019-03-19T06:23:20Z")
Hi @dadoonet and All, Please help me on below. On a long search, I have found in elastic search(I am using V6.5.4) we have the option for Single Parent - Multiple Children mapping. //Code Start PUT my\_index124 { "… --- ## [Snapshot job failed in between a set of indices](https://discuss.elastic.co/t/snapshot-job-failed-in-between-a-set-of-indices/172898)
**Author:** [@Adil](https://discuss.elastic.co/u/Adil)\ **Replies:** 0\ **Last updated:** [March 19, 2019, 6:00am UTC](https://discuss.elastic.co/t/snapshot-job-failed-in-between-a-set-of-indices/172898 "2019-03-19T06:00:16Z")
I want to know will it take a partial snapshot or leave the storage half occupied if the complete stream of snapshot job is terminated half way. I have my snapshot job failing but found the storage partially filled and … --- ## [Dynamic template of a created index](https://discuss.elastic.co/t/dynamic-template-of-a-created-index/172669)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 2\ **Last updated:** [March 19, 2019, 5:03am UTC](https://discuss.elastic.co/t/dynamic-template-of-a-created-index/172669 "2019-03-19T05:03:30Z")
hi all, I am using logstash to ship logs into elasticsearch, I didn't define any template, and according to documents elasicsearch automatically creates a template for the created index. now, if my index name be "disp-… --- ## [How to track down slow Elasticsearch queries?](https://discuss.elastic.co/t/how-to-track-down-slow-elasticsearch-queries/169497)
**Author:** [@rpm1984](https://discuss.elastic.co/u/rpm1984)\ **Replies:** 5\ **Last updated:** [March 19, 2019, 4:41am UTC](https://discuss.elastic.co/t/how-to-track-down-slow-elasticsearch-queries/169497 "2019-03-19T04:41:46Z")
Hi there, I need some advice on how to diagnose slow Elasticseach queries. Setup 2 node cluster in ElasticCloud (1 primary shard, 1 replica). note: ElasticCloud = no slowlog. Interacting with cluster via my Azure .NE… --- ## [Custom S3 Bucket for Snapshots and Restore?](https://discuss.elastic.co/t/custom-s3-bucket-for-snapshots-and-restore/172883)
**Author:** [@Hitesh\_Baldaniya1](https://discuss.elastic.co/u/Hitesh_Baldaniya1)\ **Replies:** 1\ **Last updated:** [March 19, 2019, 3:46am UTC](https://discuss.elastic.co/t/custom-s3-bucket-for-snapshots-and-restore/172883 "2019-03-19T03:46:13Z")
Hi Team, We have our elastic deployments on "cloud.elastic.co". Is there any way where we can set our AWS S3 repository for snapshots? Because a few months back I checked this functionality and it was not present. I … --- ## [Anomaly detection: minimum amount base data requirement?](https://discuss.elastic.co/t/anomaly-detection-minimum-amount-base-data-requirement/172706)
**Author:** [@jasony](https://discuss.elastic.co/u/jasony)\ **Replies:** 2\ **Last updated:** [March 18, 2019, 11:55pm UTC](https://discuss.elastic.co/t/anomaly-detection-minimum-amount-base-data-requirement/172706 "2019-03-18T23:55:40Z")
hello, i am planning to subscribe x-pack platinum license for a cluster which I am currently managing. i will use anomaly detection feature, and have a couple questions about minimum requirement of source data. is ther… --- ## [Including a filter with a query string](https://discuss.elastic.co/t/including-a-filter-with-a-query-string/172859)
**Author:** [@Vincent\_Stevenson](https://discuss.elastic.co/u/Vincent_Stevenson)\ **Replies:** 2\ **Last updated:** [March 18, 2019, 11:02pm UTC](https://discuss.elastic.co/t/including-a-filter-with-a-query-string/172859 "2019-03-18T23:02:52Z")
What does the JSON query look like that includes a filter with the query string? If I am querying an index and want to filter results that come back with my query string, I tried the following: GET animals/\_search { "… --- ## [Compile Error Supplying Param to Script](https://discuss.elastic.co/t/compile-error-supplying-param-to-script/172872)
**Author:** [@Teddis](https://discuss.elastic.co/u/Teddis)\ **Replies:** 1\ **Last updated:** [March 18, 2019, 10:59pm UTC](https://discuss.elastic.co/t/compile-error-supplying-param-to-script/172872 "2019-03-18T22:59:13Z")
I'm using ES 6.2.4 and online documentation for this version says one should use parameters to optimize scripting. I'm getting a compile error when trying to do so... GET group/\_search { "min\_score": 1, "query": { … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1360) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1362)