# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1362 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1363 --- ## [How Elasticsearch snapshot works when segments are merged](https://discuss.elastic.co/t/how-elasticsearch-snapshot-works-when-segments-are-merged/172860)
**Author:** [@bbking](https://discuss.elastic.co/u/bbking)\ **Replies:** 5\ **Last updated:** [March 18, 2019, 10:09pm UTC](https://discuss.elastic.co/t/how-elasticsearch-snapshot-works-when-segments-are-merged/172860 "2019-03-18T22:09:23Z")
Hi, my current understanding is that snapshot is incremental file/segement by file used by indices. When segments are merged even if no new data are indexed to indices, snapshot will captue the difference due to segment … --- ## [ElasticSearch stops responding after reaching a certain number of "fails to parse query" errors](https://discuss.elastic.co/t/elasticsearch-stops-responding-after-reaching-a-certain-number-of-fails-to-parse-query-errors/170601)
**Author:** [@gopal.ramakrishnan](https://discuss.elastic.co/u/gopal.ramakrishnan)\ **Replies:** 9\ **Last updated:** [March 18, 2019, 9:33pm UTC](https://discuss.elastic.co/t/elasticsearch-stops-responding-after-reaching-a-certain-number-of-fails-to-parse-query-errors/170601 "2019-03-18T21:33:06Z")
When the search string has special characters the 'query\_string' search fails with the error "Failed to parse query \[sam\] at org.elasticsearch.index.query.QueryStringQueryBuilder.doToQuery" Our issue here is not this e… --- ## [ElasticSearch curator CLI: how to delete an index by name?](https://discuss.elastic.co/t/elasticsearch-curator-cli-how-to-delete-an-index-by-name/172858)
**Author:** [@ljak](https://discuss.elastic.co/u/ljak)\ **Replies:** 4\ **Last updated:** [March 18, 2019, 9:03pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-cli-how-to-delete-an-index-by-name/172858 "2019-03-18T21:03:44Z")
Hello everyone, Simple question: with Curator (the singleton CLI: https://www.elastic.co/guide/en/elasticsearch/client/curator/current/singleton-cli.html), I'm interesting on deleting an index by using just the name. I … --- ## [Terms Agg](https://discuss.elastic.co/t/terms-agg/170966)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 28\ **Last updated:** [March 18, 2019, 8:11pm UTC](https://discuss.elastic.co/t/terms-agg/170966 "2019-03-18T20:11:24Z")
When running a Terms Aggregation query setting min\_doc\_count: 0 doesn't return terms with no values with zero. is there anything that needs to be checked. --- ## [Multiple Filters Query](https://discuss.elastic.co/t/multiple-filters-query/172813)
**Author:** [@Vincent\_Stevenson](https://discuss.elastic.co/u/Vincent_Stevenson)\ **Replies:** 2\ **Last updated:** [March 18, 2019, 5:22pm UTC](https://discuss.elastic.co/t/multiple-filters-query/172813 "2019-03-18T17:22:57Z")
I indexed some movie data. Each movie has a Genre field that sometimes contains an array of keywords (ex: "Comedy", "Action", "Romance"). When I do a query: GET movies/\_search { "query" : { "bool" : { "must" : {"ma… --- ## [Is it possible to some how combine sum with cardinality](https://discuss.elastic.co/t/is-it-possible-to-some-how-combine-sum-with-cardinality/172797)
**Author:** [@Erivan\_Rodrigues](https://discuss.elastic.co/u/Erivan_Rodrigues)\ **Replies:** 0\ **Last updated:** [March 18, 2019, 2:25pm UTC](https://discuss.elastic.co/t/is-it-possible-to-some-how-combine-sum-with-cardinality/172797 "2019-03-18T14:25:53Z")
Hi all, I'd like to get a sum of a document using cardinality, but since I can't have sub-aggregation either for the sum or cardinality. How can I do this? is there any alternative? i.e { "size": 0, "aggs": { … --- ## [Count results on filtered and sorted query](https://discuss.elastic.co/t/count-results-on-filtered-and-sorted-query/172568)
**Author:** [@Lowwa](https://discuss.elastic.co/u/Lowwa)\ **Replies:** 2\ **Last updated:** [March 18, 2019, 5:10pm UTC](https://discuss.elastic.co/t/count-results-on-filtered-and-sorted-query/172568 "2019-03-18T17:10:48Z")
I'm having troubles doing this equivalent in ES: SELECT COUNT(\*) FROM ( SELECT current\_place FROM \`request\` WHERE user\_id = '3' ORDER BY asked\_at DESC LIMIT 10 ) sr1 WHERE current\_place = '4' The go… --- ## [Snapshot & Restore - Time Range](https://discuss.elastic.co/t/snapshot-restore-time-range/172811)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 2\ **Last updated:** [March 18, 2019, 5:02pm UTC](https://discuss.elastic.co/t/snapshot-restore-time-range/172811 "2019-03-18T17:02:28Z")
Is it possible to do a Snapshot and restore for a specific time range instead of the complete indice itself ? --- ## [Index name causing issues with \_reindex api](https://discuss.elastic.co/t/index-name-causing-issues-with-reindex-api/172689)
**Author:** [@stevemw](https://discuss.elastic.co/u/stevemw)\ **Replies:** 3\ **Last updated:** [March 18, 2019, 4:45pm UTC](https://discuss.elastic.co/t/index-name-causing-issues-with-reindex-api/172689 "2019-03-18T16:45:27Z")
I am reindexing data from one cluster to another, and I have an index name that I can't get to work via the \_reindex api. the name in question is %{\[@metadata\]\[beat\]}-, which I'm sure is the result of a problem in the lo… --- ## [ElasticSearch windows docker with aspnetcore](https://discuss.elastic.co/t/elasticsearch-windows-docker-with-aspnetcore/172800)
**Author:** [@saxenark](https://discuss.elastic.co/u/saxenark)\ **Replies:** 0\ **Last updated:** [March 18, 2019, 2:38pm UTC](https://discuss.elastic.co/t/elasticsearch-windows-docker-with-aspnetcore/172800 "2019-03-18T14:38:42Z")
Hi, My asp.net 2.2 core windows web application depends on JRE and ElasticSearch 6.6.1. I am using microsoft/dotnet:2.2-aspnetcore-runtime for my aspnetcore runtime docker image. How can I compose ElasticSearch on top o… --- ## [Kibana 6.6.2 - Not Enough Storage to complete operation , Plenty of Storage on Kibana nodes](https://discuss.elastic.co/t/kibana-6-6-2-not-enough-storage-to-complete-operation-plenty-of-storage-on-kibana-nodes/172805)
**Author:** [@gchampion](https://discuss.elastic.co/u/gchampion)\ **Replies:** 0\ **Last updated:** [March 18, 2019, 3:11pm UTC](https://discuss.elastic.co/t/kibana-6-6-2-not-enough-storage-to-complete-operation-plenty-of-storage-on-kibana-nodes/172805 "2019-03-18T15:11:41Z")
Not enough storage is available to complete this operation. (http://tvm.dev.elastic.internal.velocityadmin.com:5601/dlls/vendors.bundle.dll.js:149) Version: 6.6.2 Build: 19548 Any Ideas? Works fine on Firefox , but err… --- ## [MultiSearchResponse.Item is not giving expected result](https://discuss.elastic.co/t/multisearchresponse-item-is-not-giving-expected-result/172627)
**Author:** [@srikanth\_muddu](https://discuss.elastic.co/u/srikanth_muddu)\ **Replies:** 15\ **Last updated:** [March 18, 2019, 3:02pm UTC](https://discuss.elastic.co/t/multisearchresponse-item-is-not-giving-expected-result/172627 "2019-03-18T15:02:02Z")
Hi, I have a total of 10000 docs in my index A. I am trying to access response hits in my custom plugin class to modify my output for a use case. When I am using the below for loop statement, response hits are only 994… --- ## [Unstable cluster performance](https://discuss.elastic.co/t/unstable-cluster-performance/172401)
**Author:** [@9a614c14b7d7bbfd64cb](https://discuss.elastic.co/u/9a614c14b7d7bbfd64cb)\ **Replies:** 7\ **Last updated:** [March 18, 2019, 2:22pm UTC](https://discuss.elastic.co/t/unstable-cluster-performance/172401 "2019-03-18T14:22:51Z")
Hi! I have an elastic cluster - 1 dedicated master node with 1GB of heap 6 data nodes ( 32 cpu, 31GB heap and about 100GB more for file cache; disk and network io utilization is 5% on all data nodes) I have two main … --- ## [Worried about app after moving to 6.6.1](https://discuss.elastic.co/t/worried-about-app-after-moving-to-6-6-1/172548)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 3\ **Last updated:** [March 18, 2019, 2:16pm UTC](https://discuss.elastic.co/t/worried-about-app-after-moving-to-6-6-1/172548 "2019-03-18T14:16:15Z")
Since moving to 6.6.1 REST client, I noticed my client connection is not closing. So I am using a System.exit(0) at the method end. FYI: The document is getting stored and update din Elastic! This is how I get my cli… --- ## [Understanding Mutifield limitations for keyword](https://discuss.elastic.co/t/understanding-mutifield-limitations-for-keyword/172052)
**Author:** [@kguruprasadh](https://discuss.elastic.co/u/kguruprasadh)\ **Replies:** 6\ **Last updated:** [March 18, 2019, 2:09pm UTC](https://discuss.elastic.co/t/understanding-mutifield-limitations-for-keyword/172052 "2019-03-18T14:09:29Z")
I understand keyword has a limitation of 32766 bytes. But would just like to understand how this will behave in case of multi fields like this below: "properties": { "address": { "fields": { "raw… --- ## [Is it possible to view all values for a multi-field?](https://discuss.elastic.co/t/is-it-possible-to-view-all-values-for-a-multi-field/172787)
**Author:** [@cg0x1](https://discuss.elastic.co/u/cg0x1)\ **Replies:** 0\ **Last updated:** [March 18, 2019, 1:53pm UTC](https://discuss.elastic.co/t/is-it-possible-to-view-all-values-for-a-multi-field/172787 "2019-03-18T13:53:23Z")
I'm working on a new Index mapping and have created a multi-field on a Date field without the time component. However, after I call \_reindex on the source document, I get no matches on a value I know should exist in the … --- ## [Shard re-allocation taking a very long time](https://discuss.elastic.co/t/shard-re-allocation-taking-a-very-long-time/172190)
**Author:** [@stevemw](https://discuss.elastic.co/u/stevemw)\ **Replies:** 15\ **Last updated:** [March 18, 2019, 1:46pm UTC](https://discuss.elastic.co/t/shard-re-allocation-taking-a-very-long-time/172190 "2019-03-18T13:46:28Z")
We had a situation where an engineer on my team recycled the es service on a cluster node without disabling shard allocation or doing a sync/flush, and the node failed to come back online within the delay period. Once it… --- ## [Rollup search + aggregation total count](https://discuss.elastic.co/t/rollup-search-aggregation-total-count/172783)
**Author:** [@rubarax](https://discuss.elastic.co/u/rubarax)\ **Replies:** 0\ **Last updated:** [March 18, 2019, 1:44pm UTC](https://discuss.elastic.co/t/rollup-search-aggregation-total-count/172783 "2019-03-18T13:44:30Z")
Hi all, I have a rollup job defined that groups by the following fields: server, user, method (it also handles different metrics not relevant for this question) I know that I cannot use some aggregations types in the r… --- ## [How to acess a particular object field data from an array of obects in elastic search](https://discuss.elastic.co/t/how-to-acess-a-particular-object-field-data-from-an-array-of-obects-in-elastic-search/172781)
**Author:** [@PRUDHVI\_CHOWDHARY\_NE](https://discuss.elastic.co/u/PRUDHVI_CHOWDHARY_NE)\ **Replies:** 0\ **Last updated:** [March 18, 2019, 1:30pm UTC](https://discuss.elastic.co/t/how-to-acess-a-particular-object-field-data-from-an-array-of-obects-in-elastic-search/172781 "2019-03-18T13:30:36Z")
i have a array of objects in a document id of an index but while displaying in saved search i need to get a specific object field data not all. how is it possible here in service entry time , i am getting all ob… --- ## [Enabling LDAP and authentication isssue](https://discuss.elastic.co/t/enabling-ldap-and-authentication-isssue/171034)
**Author:** [@B123](https://discuss.elastic.co/u/B123)\ **Replies:** 12\ **Last updated:** [March 18, 2019, 1:29pm UTC](https://discuss.elastic.co/t/enabling-ldap-and-authentication-isssue/171034 "2019-03-18T13:29:12Z")
Hi, I am trying to enable the LDAP authentiaction realm for my elasticsearch instance using the configurations in elasticsearch.yml: xpack.security.authc.realms.ldap.type: ldap xpack.security.authc.realms.ldap.order: … --- ## [Finding and deleting empty indexes](https://discuss.elastic.co/t/finding-and-deleting-empty-indexes/172764)
**Author:** [@gormanst](https://discuss.elastic.co/u/gormanst)\ **Replies:** 1\ **Last updated:** [March 18, 2019, 1:00pm UTC](https://discuss.elastic.co/t/finding-and-deleting-empty-indexes/172764 "2019-03-18T13:00:36Z")
I am using the RestHighLevelClient to try and find then delete empty indexes. I can't find anything in the API that makes getting empty indexes simple. Is this something that is usually handled by Curator? Is dealing wit… --- ## [Elasticsearch working fine on localhost but not from remote client](https://discuss.elastic.co/t/elasticsearch-working-fine-on-localhost-but-not-from-remote-client/172751)
**Author:** [@Roshan\_Karwalkar](https://discuss.elastic.co/u/Roshan_Karwalkar)\ **Replies:** 5\ **Last updated:** [March 18, 2019, 12:51pm UTC](https://discuss.elastic.co/t/elasticsearch-working-fine-on-localhost-but-not-from-remote-client/172751 "2019-03-18T12:51:14Z")
Hi , I am new to ELK stack and I have installed ElasticSearch,Kibana and Logstash on my amazon ec2 instance.Currently I have started only kibana and elasticsearch.I am able to access elasticsearch from localhost but no… --- ## [Elasticsearch with microservices based in API TMForum](https://discuss.elastic.co/t/elasticsearch-with-microservices-based-in-api-tmforum/172765)
**Author:** [@cmramirez](https://discuss.elastic.co/u/cmramirez)\ **Replies:** 0\ **Last updated:** [March 18, 2019, 12:05pm UTC](https://discuss.elastic.co/t/elasticsearch-with-microservices-based-in-api-tmforum/172765 "2019-03-18T12:05:44Z")
Hi! We are implemeting ElasticSearch for a search engine with microservices based in API TMForum. There is any guide for developing with this kind of APIs? We've read this article in the blog https://www.elastic.co/es/b… --- ## [Secure elasticsearch cluster](https://discuss.elastic.co/t/secure-elasticsearch-cluster/172763)
**Author:** [@Abhinaw](https://discuss.elastic.co/u/Abhinaw)\ **Replies:** 1\ **Last updated:** [March 18, 2019, 12:04pm UTC](https://discuss.elastic.co/t/secure-elasticsearch-cluster/172763 "2019-03-18T12:04:24Z")
Hi, I want to create a cluster of three servers, I know how to create elasticsearch cluster which is quite simple just mao the ip and define the roles. But i am not sure how to make it secure specially when all the serv… --- ## [Elasticsearch installation error](https://discuss.elastic.co/t/elasticsearch-installation-error/172757)
**Author:** [@cppatel](https://discuss.elastic.co/u/cppatel)\ **Replies:** 0\ **Last updated:** [March 18, 2019, 11:41am UTC](https://discuss.elastic.co/t/elasticsearch-installation-error/172757 "2019-03-18T11:41:24Z")
I am getting the following error while installing elasticsearch.Please help me with this error. rpm -ivh elasticsearch-6.6.1.rpm warning: elasticsearch-6.6.1.rpm: Header V4 RSA/SHA512 Signature, key ID d88e42b4: NOKEY … --- ## [Bulk rejections in my Elasticsearch cluster](https://discuss.elastic.co/t/bulk-rejections-in-my-elasticsearch-cluster/171746)
**Author:** [@Vandana\_Nagi](https://discuss.elastic.co/u/Vandana_Nagi)\ **Replies:** 11\ **Last updated:** [March 18, 2019, 10:20am UTC](https://discuss.elastic.co/t/bulk-rejections-in-my-elasticsearch-cluster/171746 "2019-03-18T10:20:29Z")
We are frequently facing bulk rejections in my Elasticsearch cluster in AWS ES 5.5 version. One way is to resolve by increasing the number of data nodes. However can we introduce Redis as cache in between to resolve the … --- ## [Map Elasticsearch field to predefined list](https://discuss.elastic.co/t/map-elasticsearch-field-to-predefined-list/172732)
**Author:** [@luke14](https://discuss.elastic.co/u/luke14)\ **Replies:** 2\ **Last updated:** [March 18, 2019, 9:40am UTC](https://discuss.elastic.co/t/map-elasticsearch-field-to-predefined-list/172732 "2019-03-18T09:40:26Z")
Hi So I have question about how best to approach a problem I need to solve. In one of my indexes within ES I have the field: user.id: U123456 This is great, however I have a list of username associated with user id'… --- ## [Elasticsearch not parsing message string to JSON](https://discuss.elastic.co/t/elasticsearch-not-parsing-message-string-to-json/172514)
**Author:** [@ChrisOdney](https://discuss.elastic.co/u/ChrisOdney)\ **Replies:** 2\ **Last updated:** [March 18, 2019, 9:27am UTC](https://discuss.elastic.co/t/elasticsearch-not-parsing-message-string-to-json/172514 "2019-03-18T09:27:59Z")
Hi, I am getting log messages to ES from logstash, which is parsed by the ingest pipeline in ES. These messages are actually the syslog filebeat messages. The 'message' value is a string: "message": \[ "Feb 21 0… --- ## [Logstash is reading whole log file every time it updates](https://discuss.elastic.co/t/logstash-is-reading-whole-log-file-every-time-it-updates/172684)
**Author:** [@luke14](https://discuss.elastic.co/u/luke14)\ **Replies:** 2\ **Last updated:** [March 18, 2019, 9:18am UTC](https://discuss.elastic.co/t/logstash-is-reading-whole-log-file-every-time-it-updates/172684 "2019-03-18T09:18:44Z")
Hi Every time a new log line is added to my log file, logstash is re-parsing my whole log file and sending it to elasticsearch. I have no idea why this is happening? Any ideas? I have not set sincedb\_path =\> "/dev/nul… --- ## [Monitoring data not appearing](https://discuss.elastic.co/t/monitoring-data-not-appearing/172720)
**Author:** [@fedwe](https://discuss.elastic.co/u/fedwe)\ **Replies:** 0\ **Last updated:** [March 18, 2019, 7:54am UTC](https://discuss.elastic.co/t/monitoring-data-not-appearing/172720 "2019-03-18T07:54:26Z")
Hello, I used these setting on my elasticsearch nodes temlplate to make indexing faster POST \_template/default { "index\_patterns": \["\*"\], "order": -1, "settings": { "number\_of\_shards": "1", "number\_of\_replicas": … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1361) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1363)