# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1363

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1364

---

## [Moving node directory to another directory](https://discuss.elastic.co/t/moving-node-directory-to-another-directory/172722)

<div class="topic-metadata">

**Author:** [@Pradana](https://discuss.elastic.co/u/Pradana)\
**Replies:** 1\
**Last updated:** [March 18, 2019, 8:15am UTC](https://discuss.elastic.co/t/moving-node-directory-to-another-directory/172722 "2019-03-18T08:15:46Z")

</div>

Hi, Since we have short of space in main directory and it has been consume around 99% we like to move node directory under /var/lib/elasticsearch to some others directory that still have space. How we can do this ? We h…

---

## [Unable to perform sql select on logstash index](https://discuss.elastic.co/t/unable-to-perform-sql-select-on-logstash-index/172668)

<div class="topic-metadata">

**Author:** [@hemanth22](https://discuss.elastic.co/u/hemanth22)\
**Replies:** 1\
**Last updated:** [March 18, 2019, 7:32am UTC](https://discuss.elastic.co/t/unable-to-perform-sql-select-on-logstash-index/172668 "2019-03-18T07:32:48Z")

</div>

Hello team, I have below indexes in the kibana when searched with below query. GET /\_xpack/sql?format=txt { "query": "SHOW tables" } Output: name | type ---------------------…

---

## [Configure HTTPS without xpack and nginx or any other external modules](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 10\
**Last updated:** [March 18, 2019, 6:52am UTC](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849 "2019-03-18T06:52:19Z")

</div>

I am trying to configure https for elasticsearch without any third party modules or reverse proxies. Any idea how to approach it.

---

## [Get "elasticesearch conflicts with elasticsearch-oss-0:6.6.1-1.noarch" during upgrade](https://discuss.elastic.co/t/get-elasticesearch-conflicts-with-elasticsearch-oss-0-6-6-1-1-noarch-during-upgrade/172701)

<div class="topic-metadata">

**Author:** [@John\_Zhang1](https://discuss.elastic.co/u/John_Zhang1)\
**Replies:** 6\
**Last updated:** [March 18, 2019, 3:38am UTC](https://discuss.elastic.co/t/get-elasticesearch-conflicts-with-elasticsearch-oss-0-6-6-1-1-noarch-during-upgrade/172701 "2019-03-18T03:38:44Z")

</div>

Dears, I am new to ELK and just take over from another colleague. I need to upgrade current Elasticsearch 6.2.3 to 6.6.1, and because of license limitation, have to use the opensource version. As the guide https://www.e…

---

## [Elasticsearch upgrade 6.6](https://discuss.elastic.co/t/elasticsearch-upgrade-6-6/172409)

<div class="topic-metadata">

**Author:** [@kb2295](https://discuss.elastic.co/u/kb2295)\
**Replies:** 1\
**Last updated:** [March 18, 2019, 12:47am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-6-6/172409 "2019-03-18T00:47:35Z")

</div>

Hi, I'm trying to perform a rolling upgrade (5.6 to 6.6) on 3 nodes. I successfully upgraded the first node according to the instructions in: https://www.elastic.co/guide/en/elasticsearch/reference/current/rolling-upgrad…

---

## [How to sort results based on number of collapsed items?](https://discuss.elastic.co/t/how-to-sort-results-based-on-number-of-collapsed-items/172673)

<div class="topic-metadata">

**Author:** [@rgranit](https://discuss.elastic.co/u/rgranit)\
**Replies:** 2\
**Last updated:** [March 17, 2019, 8:08pm UTC](https://discuss.elastic.co/t/how-to-sort-results-based-on-number-of-collapsed-items/172673 "2019-03-17T20:08:08Z")

</div>

Hi everyone, I'm using a a query with a collapse in order to gather hits in certain documents that belong to a certain person, yet I wish to sort the results based on the number of documents in which the search found a …

---

## [Separate indexes or combine?](https://discuss.elastic.co/t/separate-indexes-or-combine/172670)

<div class="topic-metadata">

**Author:** [@i333](https://discuss.elastic.co/u/i333)\
**Replies:** 1\
**Last updated:** [March 17, 2019, 6:31pm UTC](https://discuss.elastic.co/t/separate-indexes-or-combine/172670 "2019-03-17T18:31:00Z")

</div>

I want to store events in elasticsearch. All of the events have about 10 fields in common (like where it occurred, what severity, who reported it, etc) plus 2-6 fields of its own. For example event type A could have 3 fi…

---

## [Too many indices](https://discuss.elastic.co/t/too-many-indices/172679)

<div class="topic-metadata">

**Author:** [@facek1ck](https://discuss.elastic.co/u/facek1ck)\
**Replies:** 3\
**Last updated:** [March 17, 2019, 2:17pm UTC](https://discuss.elastic.co/t/too-many-indices/172679 "2019-03-17T14:17:18Z")

</div>

Hello everyone. I am new to elasticsearch and don't really understand the documentation for nodes and shards and all of that stuff. My problem is that I have around 2-3k indices and when I try to create an index pattern…

---

## [Elasticsearch lost document updates](https://discuss.elastic.co/t/elasticsearch-lost-document-updates/172318)

<div class="topic-metadata">

**Author:** [@mats990](https://discuss.elastic.co/u/mats990)\
**Replies:** 6\
**Last updated:** [March 17, 2019, 9:12am UTC](https://discuss.elastic.co/t/elasticsearch-lost-document-updates/172318 "2019-03-17T09:12:06Z")

</div>

Hi, We are running ES cluster using ES version 5.6.4 and Java 8. We use scripted\_upsert to merge multiple events in same ES document. Each node has ~250 shards and average shard size is 6GB. Indexing is around 20-30k/se…

---

## [Terms Query Doesn't work on keywords](https://discuss.elastic.co/t/terms-query-doesnt-work-on-keywords/172657)

<div class="topic-metadata">

**Author:** [@Gowd](https://discuss.elastic.co/u/Gowd)\
**Replies:** 1\
**Last updated:** [March 17, 2019, 6:47am UTC](https://discuss.elastic.co/t/terms-query-doesnt-work-on-keywords/172657 "2019-03-17T06:47:03Z")

</div>

I am using a simple mapping with analyzers like below: PUT /risks\_keyword/ { "mappings": { "\_doc": { "properties": { "riskApplicabilityAttributes": { "properties": { "Locale": {…

---

## [Restoring failed shards from Snapshot due to Caused by: java.io.IOException: No space left on device](https://discuss.elastic.co/t/restoring-failed-shards-from-snapshot-due-to-caused-by-java-io-ioexception-no-space-left-on-device/172659)

<div class="topic-metadata">

**Author:** [@Sudan\_Khadgi](https://discuss.elastic.co/u/Sudan_Khadgi)\
**Replies:** 0\
**Last updated:** [March 17, 2019, 6:41am UTC](https://discuss.elastic.co/t/restoring-failed-shards-from-snapshot-due-to-caused-by-java-io-ioexception-no-space-left-on-device/172659 "2019-03-17T06:41:39Z")

</div>

It seems until the shards have not successfully recovered, ES service re-tries the restore operation on that shard. Sometimes two or more shards get placed in a single disk, this will be an issue if you have setup the cl…

---

## [Creating new Index by other name](https://discuss.elastic.co/t/creating-new-index-by-other-name/172655)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 0\
**Last updated:** [March 17, 2019, 2:20am UTC](https://discuss.elastic.co/t/creating-new-index-by-other-name/172655 "2019-03-17T02:20:54Z")

</div>

Hi Folks, I am not sure if I am following appropriate steps here. I already have an index created with logstash-testing-\* now would like to create new Index by name hashes-\*; I guess I need to create new mapping here an…

---

## [Multi\_match unexpectedly changing which fields are returned](https://discuss.elastic.co/t/multi-match-unexpectedly-changing-which-fields-are-returned/172654)

<div class="topic-metadata">

**Author:** [@outsidein](https://discuss.elastic.co/u/outsidein)\
**Replies:** 0\
**Last updated:** [March 16, 2019, 11:35pm UTC](https://discuss.elastic.co/t/multi-match-unexpectedly-changing-which-fields-are-returned/172654 "2019-03-16T23:35:51Z")

</div>

Using v6.3.1 I'm doing a multi\_match query with a a filter and it's working, but not returning all the fields for the documents. Here's the query: GET /myindex/\_doc/\_search { "from": 0, "size": 1, "query": { …

---

## [Sorting and filterting top hits docs](https://discuss.elastic.co/t/sorting-and-filterting-top-hits-docs/172547)

<div class="topic-metadata">

**Author:** [@bambula](https://discuss.elastic.co/u/bambula)\
**Replies:** 6\
**Last updated:** [March 16, 2019, 10:17pm UTC](https://discuss.elastic.co/t/sorting-and-filterting-top-hits-docs/172547 "2019-03-16T22:17:45Z")

</div>

HI, is it possible to filter and sort the docs returned from top hits aggregation? lets say I have a simple product index for docs like this: { "product\_name": "some\_product", "category": "some\_cotegory", "pri…

---

## [X-Pack license error in Elasticsearch 6.6.1](https://discuss.elastic.co/t/x-pack-license-error-in-elasticsearch-6-6-1/172647)

<div class="topic-metadata">

**Author:** [@namnyefr](https://discuss.elastic.co/u/namnyefr)\
**Replies:** 1\
**Last updated:** [March 16, 2019, 5:50pm UTC](https://discuss.elastic.co/t/x-pack-license-error-in-elasticsearch-6-6-1/172647 "2019-03-16T17:50:45Z")

</div>

I've installed Elasticsearch 6.6.1. While I did not explicitly choose to install X-Pack plugin during the install it turned out we wanted it. Further, it appears that X-pack is installed by default in 6.6.1. And I've ver…

---

## [I am trying to search with the cluster with the algorithm lingo in my query but it is throughing an error](https://discuss.elastic.co/t/i-am-trying-to-search-with-the-cluster-with-the-algorithm-lingo-in-my-query-but-it-is-throughing-an-error/172617)

<div class="topic-metadata">

**Author:** [@santosh\_kumar1](https://discuss.elastic.co/u/santosh_kumar1)\
**Replies:** 5\
**Last updated:** [March 16, 2019, 9:28am UTC](https://discuss.elastic.co/t/i-am-trying-to-search-with-the-cluster-with-the-algorithm-lingo-in-my-query-but-it-is-throughing-an-error/172617 "2019-03-16T09:28:58Z")

</div>

'{"error":{"root\_cause":\[{"type":"parsing\_exception","reason":"Unknown key for a START\_OBJECT in \[search\_request\].","line":1,"col":19}\],"type":"parsing\_exception","reason":"Unknown key for a START\_OBJECT in \[search\_reque…

---

## [Indices data transfer btw different type of multiple clusters](https://discuss.elastic.co/t/indices-data-transfer-btw-different-type-of-multiple-clusters/172550)

<div class="topic-metadata">

**Author:** [@jasony](https://discuss.elastic.co/u/jasony)\
**Replies:** 7\
**Last updated:** [March 16, 2019, 7:49am UTC](https://discuss.elastic.co/t/indices-data-transfer-btw-different-type-of-multiple-clusters/172550 "2019-03-16T07:49:30Z")

</div>

hello, i have 2 clusters but different license types are placed;1st cluster has only basic license, but 2nd cluster has gold x-pack license. i need to transfer a couple indices data from 1st cluster to 2nd cluster. sin…

---

## [Multiple index search and update query in elastic search](https://discuss.elastic.co/t/multiple-index-search-and-update-query-in-elastic-search/172619)

<div class="topic-metadata">

**Author:** [@santosh\_kumar1](https://discuss.elastic.co/u/santosh_kumar1)\
**Replies:** 1\
**Last updated:** [March 16, 2019, 6:40am UTC](https://discuss.elastic.co/t/multiple-index-search-and-update-query-in-elastic-search/172619 "2019-03-16T06:40:03Z")

</div>

"type":"invalid\_index\_name\_exception","reason":"Invalid index name \[xxxxx-2019-11,xxxx-2019-12\], must not contain the following characters \[ , \\", \*, \\\\, \<, |, ,, \>, /, ?\]","index\_uuid":"na","index":"twitter-2019-11,twit…

---

## [Elasticsearch java Rest API](https://discuss.elastic.co/t/elasticsearch-java-rest-api/172456)

<div class="topic-metadata">

**Author:** [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\
**Replies:** 4\
**Last updated:** [March 16, 2019, 2:00am UTC](https://discuss.elastic.co/t/elasticsearch-java-rest-api/172456 "2019-03-16T02:00:44Z")

</div>

'''public Map\<String, Object\> view(@PathVariable final String id) throws IOException { GetRequest request = new GetRequest("company", "employee", id).version(1); GetResponse getResponse = client.get(request, R…

---

## [XMLHttpRequest is not working](https://discuss.elastic.co/t/xmlhttprequest-is-not-working/172610)

<div class="topic-metadata">

**Author:** [@danreut89](https://discuss.elastic.co/u/danreut89)\
**Replies:** 1\
**Last updated:** [March 16, 2019, 1:13am UTC](https://discuss.elastic.co/t/xmlhttprequest-is-not-working/172610 "2019-03-16T01:13:35Z")

</div>

I am new to the elasticsearch and JavaScript development. I am trying to use the code below, so I can do regular REST calls and get JSON back. Here is my code that I am using in section function myFunction() { var xh…

---

## [Problems with flood stage watermark setting](https://discuss.elastic.co/t/problems-with-flood-stage-watermark-setting/172606)

<div class="topic-metadata">

**Author:** [@David9](https://discuss.elastic.co/u/David9)\
**Replies:** 2\
**Last updated:** [March 16, 2019, 12:46am UTC](https://discuss.elastic.co/t/problems-with-flood-stage-watermark-setting/172606 "2019-03-16T00:46:01Z")

</div>

I'm doing some experimentation on my Mac. I have no data in ES. I create an index and add a few small documents (using the python elasticsearch\_dsl library). I then get this in the stderr after a few documents success…

---

## [Multi type support on ES 6x](https://discuss.elastic.co/t/multi-type-support-on-es-6x/172540)

<div class="topic-metadata">

**Author:** [@Jerome\_Fortias](https://discuss.elastic.co/u/Jerome_Fortias)\
**Replies:** 1\
**Last updated:** [March 15, 2019, 9:53pm UTC](https://discuss.elastic.co/t/multi-type-support-on-es-6x/172540 "2019-03-15T21:53:16Z")

</div>

Hi I'm sure I'm not the first to ask you about this point.... BUT I coded a chatbot based on ES ... I did it on previous ES version but now ... If I create more than 1 type of document I have an error : "Rejecting mapp…

---

## [NGINX breaks with Kibana 6.6](https://discuss.elastic.co/t/nginx-breaks-with-kibana-6-6/172601)

<div class="topic-metadata">

**Author:** [@gchampion](https://discuss.elastic.co/u/gchampion)\
**Replies:** 0\
**Last updated:** [March 15, 2019, 7:54pm UTC](https://discuss.elastic.co/t/nginx-breaks-with-kibana-6-6/172601 "2019-03-15T19:54:16Z")

</div>

Probably easy been beating head against wall. First thought issue with kibana because it will state "failed to load" after latest update. Figured out nignx was issue however cant seem to find proper config. server { li…

---

## [AWS ECS Cluster](https://discuss.elastic.co/t/aws-ecs-cluster/172589)

<div class="topic-metadata">

**Author:** [@Tom\_Vaughan](https://discuss.elastic.co/u/Tom_Vaughan)\
**Replies:** 0\
**Last updated:** [March 15, 2019, 5:45pm UTC](https://discuss.elastic.co/t/aws-ecs-cluster/172589 "2019-03-15T17:45:11Z")

</div>

Has anyone been successful in setting up a cluster on Amazon's Elastic Container Service? If so, could you share how you did it? I have tried using the docker compose file here: https://www.elastic.co/guide/en/elastics…

---

## [TCP Networking tests failing](https://discuss.elastic.co/t/tcp-networking-tests-failing/172581)

<div class="topic-metadata">

**Author:** [@Sandmannn](https://discuss.elastic.co/u/Sandmannn)\
**Replies:** 0\
**Last updated:** [March 15, 2019, 5:17pm UTC](https://discuss.elastic.co/t/tcp-networking-tests-failing/172581 "2019-03-15T17:17:38Z")

</div>

moving the context of issue https://github.com/elastic/elasticsearch/issues/39939 here. Looks like on my machine the assumption specified in https://github.com/elastic/elasticsearch/blob/master/test/framework/src/main/ja…

---

## [Exclude specific words from Custom Analyzer](https://discuss.elastic.co/t/exclude-specific-words-from-custom-analyzer/172566)

<div class="topic-metadata">

**Author:** [@iluvcode](https://discuss.elastic.co/u/iluvcode)\
**Replies:** 0\
**Last updated:** [March 15, 2019, 4:17pm UTC](https://discuss.elastic.co/t/exclude-specific-words-from-custom-analyzer/172566 "2019-03-15T16:17:33Z")

</div>

Hi, I am using a custom analyzer that is using "Keyword" tokenizer and "Snowball + lowercase" filter. Snowball is the stemming analyzer which stems the words. I have few specific words that shouldn't be stemmed while …

---

## [Larger index size after Elasticsearch reindex](https://discuss.elastic.co/t/larger-index-size-after-elasticsearch-reindex/172323)

<div class="topic-metadata">

**Author:** [@alexquadrotech](https://discuss.elastic.co/u/alexquadrotech)\
**Replies:** 8\
**Last updated:** [March 15, 2019, 4:07pm UTC](https://discuss.elastic.co/t/larger-index-size-after-elasticsearch-reindex/172323 "2019-03-15T16:07:46Z")

</div>

After performing a reindex on a 75GB index, the new one went to 79GB. Both indexes have the same doc count (54,123,676) and both have the exact same mapping. The original index has 6×2 shards and the new one has 3×2 sha…

---

## [How to iterate and convert numbers to million/billion in Kibana watcher?](https://discuss.elastic.co/t/how-to-iterate-and-convert-numbers-to-million-billion-in-kibana-watcher/170548)

<div class="topic-metadata">

**Author:** [@MrGetfit1234](https://discuss.elastic.co/u/MrGetfit1234)\
**Replies:** 2\
**Last updated:** [March 15, 2019, 3:37pm UTC](https://discuss.elastic.co/t/how-to-iterate-and-convert-numbers-to-million-billion-in-kibana-watcher/170548 "2019-03-15T15:37:05Z")

</div>

hi, I am writing a Kibana watcher which sends a daily email aggregating number of log events collected on a 24 hour period. In the body of the email it should give a summary of how many unique ip's contributed and how ma…

---

## [Fvh highlighter does not work with inverted proxemity search](https://discuss.elastic.co/t/fvh-highlighter-does-not-work-with-inverted-proxemity-search/170916)

<div class="topic-metadata">

**Author:** [@astrodi](https://discuss.elastic.co/u/astrodi)\
**Replies:** 3\
**Last updated:** [March 15, 2019, 3:00pm UTC](https://discuss.elastic.co/t/fvh-highlighter-does-not-work-with-inverted-proxemity-search/170916 "2019-03-15T15:00:08Z")

</div>

Hi there, I have this setup: Mapping: "CEDANT": { "type": "text", "analyzer":"ire\_regular", "fields": { "exact":{ "type": "text", "analyzer": "ire\_exact", "term\_vector":"wit…

---

## [Index was created but data is not getting logged in elastic search](https://discuss.elastic.co/t/index-was-created-but-data-is-not-getting-logged-in-elastic-search/172552)

<div class="topic-metadata">

**Author:** [@Krish2019](https://discuss.elastic.co/u/Krish2019)\
**Replies:** 0\
**Last updated:** [March 15, 2019, 2:40pm UTC](https://discuss.elastic.co/t/index-was-created-but-data-is-not-getting-logged-in-elastic-search/172552 "2019-03-15T14:40:18Z")

</div>

I have setup elastic search, kibana and logstash in a linux VM. Configured logstatsh to forward the data to elastic search to a specific index. Index was created but data is not getting logged in elastic search. Please…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1362)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1364)
