# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1373 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1374 --- ## [Can we save ML models into elasticsearch?](https://discuss.elastic.co/t/can-we-save-ml-models-into-elasticsearch/171279)
**Author:** [@arun1](https://discuss.elastic.co/u/arun1)\ **Replies:** 1\ **Last updated:** [March 7, 2019, 12:06pm UTC](https://discuss.elastic.co/t/can-we-save-ml-models-into-elasticsearch/171279 "2019-03-07T12:06:54Z")
Hi, Can we save ML models into an Elasticsearch index? The models are generally saved as .pickle or .h5 If yes, please suggest how to do it. Regards, Arun --- ## [Delete document from search query](https://discuss.elastic.co/t/delete-document-from-search-query/171146)
**Author:** [@Radic4l](https://discuss.elastic.co/u/Radic4l)\ **Replies:** 2\ **Last updated:** [March 7, 2019, 12:00pm UTC](https://discuss.elastic.co/t/delete-document-from-search-query/171146 "2019-03-07T12:00:53Z")
Hello everyone, i use this request for get all(200) documents duplicated in my index, and i want delete all documents in this result. I tried tu use \_delete\_by\_query but after many try and search on internet i failed ..… --- ## [Elasticsearch specification of new log area failures](https://discuss.elastic.co/t/elasticsearch-specification-of-new-log-area-failures/170797)
**Author:** [@jbellinger](https://discuss.elastic.co/u/jbellinger)\ **Replies:** 2\ **Last updated:** [March 7, 2019, 11:04am UTC](https://discuss.elastic.co/t/elasticsearch-specification-of-new-log-area-failures/170797 "2019-03-07T11:04:09Z")
elasticsearch is failing to start, and /var/log/messages contains complaints about opening or creating files. I excerpt from that below. One thing that perplexes me is that despite the path.logs directive it persists i… --- ## [The query results is different via kibana console and python api](https://discuss.elastic.co/t/the-query-results-is-different-via-kibana-console-and-python-api/171245)
**Author:** [@chely](https://discuss.elastic.co/u/chely)\ **Replies:** 3\ **Last updated:** [March 7, 2019, 9:41am UTC](https://discuss.elastic.co/t/the-query-results-is-different-via-kibana-console-and-python-api/171245 "2019-03-07T09:41:56Z")
Hi, when I using Query DSL in kibana console: GET newtest/\_search { "query":{ "terms":{"\_id":\["abcdefghij"\]} } } I got: { "took" : 0, "timed\_out" : false, "\_shards" : { "total" : 5, "successful" : 5, "s… --- ## [Getting error while migrating indexes from 5.6 to 6.3.0](https://discuss.elastic.co/t/getting-error-while-migrating-indexes-from-5-6-to-6-3-0/171262)
**Author:** [@virendra\_oswal](https://discuss.elastic.co/u/virendra_oswal)\ **Replies:** 0\ **Last updated:** [March 7, 2019, 9:39am UTC](https://discuss.elastic.co/t/getting-error-while-migrating-indexes-from-5-6-to-6-3-0/171262 "2019-03-07T09:39:45Z")
Executing steps via https://www.elastic.co/guide/en/kibana/current/migrating-6.0-index.html First step is complete, when trying to exeute second step getting following error, if i validate json via tool its fine. Please… --- ## [Timed out while getting index list on creating an index pattern in Kibana](https://discuss.elastic.co/t/timed-out-while-getting-index-list-on-creating-an-index-pattern-in-kibana/171103)
**Author:** [@Tomoyuki\_Saito](https://discuss.elastic.co/u/Tomoyuki_Saito)\ **Replies:** 10\ **Last updated:** [March 7, 2019, 9:09am UTC](https://discuss.elastic.co/t/timed-out-while-getting-index-list-on-creating-an-index-pattern-in-kibana/171103 "2019-03-07T09:09:01Z")
We're observing timeout while creating an index pattern in Kibana. That means an aggregation query below takes over 30 seconds. {"size":0,"aggs":{"indices":{"terms":{"field":"\_index","size":200}}}} A curl command that… --- ## [Querystring search : usage for multi word column name](https://discuss.elastic.co/t/querystring-search-usage-for-multi-word-column-name/171248)
**Author:** [@srikanthkadem](https://discuss.elastic.co/u/srikanthkadem)\ **Replies:** 2\ **Last updated:** [March 7, 2019, 9:01am UTC](https://discuss.elastic.co/t/querystring-search-usage-for-multi-word-column-name/171248 "2019-03-07T09:01:58Z")
Hi , I would like use column filter in querystring search , its working fine when column name is single word. however unable search when column name is multi word. ex: type:project --\>working ex: my type:project --\> n… --- ## [Cluster or not cluster](https://discuss.elastic.co/t/cluster-or-not-cluster/171043)
**Author:** [@rodrigue](https://discuss.elastic.co/u/rodrigue)\ **Replies:** 5\ **Last updated:** [March 7, 2019, 8:01am UTC](https://discuss.elastic.co/t/cluster-or-not-cluster/171043 "2019-03-07T08:01:12Z")
Hello, I'm writing to you about a question I have. I tried to find the answer myself but I don't know how to formulate my search query. I'm using elastic more and more. I'm using it for ELK monitoring (filebeat, metric… --- ## [Reindex Python API timeout](https://discuss.elastic.co/t/reindex-python-api-timeout/171114)
**Author:** [@Praneet\_Khandelwal](https://discuss.elastic.co/u/Praneet_Khandelwal)\ **Replies:** 2\ **Last updated:** [March 7, 2019, 7:50am UTC](https://discuss.elastic.co/t/reindex-python-api-timeout/171114 "2019-03-07T07:50:32Z")
I am using reindex api in python with wait\_for\_completion = True. But when I run the script, it gives me a timeout error (maybe because it waits for min(default timeout period, time for reindexing) ) and returns. And it … --- ## [How I create my first Index in ElasticSearch using Kibana?](https://discuss.elastic.co/t/how-i-create-my-first-index-in-elasticsearch-using-kibana/171172)
**Author:** [@dattack13](https://discuss.elastic.co/u/dattack13)\ **Replies:** 1\ **Last updated:** [March 7, 2019, 7:17am UTC](https://discuss.elastic.co/t/how-i-create-my-first-index-in-elasticsearch-using-kibana/171172 "2019-03-07T07:17:55Z")
I am not able to create the Index in elastic-search using Kibana. Below is my requirement compare to RDBMS - RDBMD - Details DB Name : "SolutionHub" Table 1 : "Employee.Employee" { EMP\_ID : INT EMP\_NM … --- ## [Json containing all fields with default value](https://discuss.elastic.co/t/json-containing-all-fields-with-default-value/171139)
**Author:** [@manikandanid](https://discuss.elastic.co/u/manikandanid)\ **Replies:** 3\ **Last updated:** [March 7, 2019, 6:05am UTC](https://discuss.elastic.co/t/json-containing-all-fields-with-default-value/171139 "2019-03-07T06:05:08Z")
We want to create a json containing all the fields (with default values ) that exists in the index. We want to index this json doc into our production and refresh the index before actual data flows in. This was all the c… --- ## [Access doc fields value in script-expert-scoring](https://discuss.elastic.co/t/access-doc-fields-value-in-script-expert-scoring/171217)
**Author:** [@BrikerMan](https://discuss.elastic.co/u/BrikerMan)\ **Replies:** 0\ **Last updated:** [March 7, 2019, 2:11am UTC](https://discuss.elastic.co/t/access-doc-fields-value-in-script-expert-scoring/171217 "2019-03-07T02:11:23Z")
I have a document have body = 'a b c a a'. And I am working on a custom plugin based on the script-expert-scoring example. Is there any way to access to documents' body field in the MyExpertScriptEngine class --- ## [Watcher license expired with status code 403](https://discuss.elastic.co/t/watcher-license-expired-with-status-code-403/171011)
**Author:** [@dis](https://discuss.elastic.co/u/dis)\ **Replies:** 9\ **Last updated:** [March 7, 2019, 12:30am UTC](https://discuss.elastic.co/t/watcher-license-expired-with-status-code-403/171011 "2019-03-07T00:30:13Z")
Hi, I get the license expired error when trying to insert a watch. But in the elasticsearch server startup I see the watcher module is loaded. The curl command is executed inside the es-master container. Maybe, I'm n… --- ## [/usr/share/elasticsearch/bin/elasticsearch.in.sh ES 6.x?](https://discuss.elastic.co/t/usr-share-elasticsearch-bin-elasticsearch-in-sh-es-6-x/171178)
**Author:** [@jw-ovgd](https://discuss.elastic.co/u/jw-ovgd)\ **Replies:** 1\ **Last updated:** [March 7, 2019, 12:16am UTC](https://discuss.elastic.co/t/usr-share-elasticsearch-bin-elasticsearch-in-sh-es-6-x/171178 "2019-03-07T00:16:21Z")
I am new to ES and have inherited work to upgrade from ES 5.5 to ES 6.5 What happened to /usr/share/elasticsearch/bin/elasticsearch.in.sh in the ES 6.5 rpm? I see it present in ES 5.5 rpm. As part of the build process… --- ## [Elastic Alerting Trial License](https://discuss.elastic.co/t/elastic-alerting-trial-license/171196)
**Author:** [@dis](https://discuss.elastic.co/u/dis)\ **Replies:** 1\ **Last updated:** [March 6, 2019, 10:52pm UTC](https://discuss.elastic.co/t/elastic-alerting-trial-license/171196 "2019-03-06T22:52:17Z")
Hi, Does anyone knows if there's a trial license for making elastic alerting available? I'm not able to evaluate the alerting feature with the 'basic' license type. I'm running elasticsearch 6.4.3. Thanks. --- ## ['year' long (2,019) to 'year\_alias' ('2019-01-01')](https://discuss.elastic.co/t/year-long-2-019-to-year-alias-2019-01-01/171204)
**Author:** [@Joe\_J](https://discuss.elastic.co/u/Joe_J)\ **Replies:** 0\ **Last updated:** [March 6, 2019, 8:48pm UTC](https://discuss.elastic.co/t/year-long-2-019-to-year-alias-2019-01-01/171204 "2019-03-06T20:48:47Z")
Field 'year' automapped to long ("2019" --\> "2,019") How to convert, script, alias, painless, whatever into a field that acts as a proper year? I tried a scripted field with: new SimpleDateFormat('yyyy-MM-dd').parse(… --- ## [\[Docker\] Documentation in https://github.com/elastic/stack-docker](https://discuss.elastic.co/t/docker-documentation-in-https-github-com-elastic-stack-docker/169537)
**Author:** [@mmonjas](https://discuss.elastic.co/u/mmonjas)\ **Replies:** 1\ **Last updated:** [March 6, 2019, 7:20pm UTC](https://discuss.elastic.co/t/docker-documentation-in-https-github-com-elastic-stack-docker/169537 "2019-03-06T19:20:29Z")
Hi there, I'm trying to use the Docker ensemble described in said github repo and I've finding several issues I'm not sure about how to sort out (I have a background in ES 5.6 and now am trying to catch up with the new v… --- ## [How can a configure two node in one cluster](https://discuss.elastic.co/t/how-can-a-configure-two-node-in-one-cluster/171088)
**Author:** [@dattack13](https://discuss.elastic.co/u/dattack13)\ **Replies:** 12\ **Last updated:** [March 6, 2019, 6:23pm UTC](https://discuss.elastic.co/t/how-can-a-configure-two-node-in-one-cluster/171088 "2019-03-06T18:23:09Z")
Hi, I have situation where I have installed two instance of Elasticsearch setup in remote server 1 (node1) and remote server 2 (node2), and I want to connect both these node in one cluster, however I also installed the … --- ## [More Like this query against a combination of nested/join fields and regular fields](https://discuss.elastic.co/t/more-like-this-query-against-a-combination-of-nested-join-fields-and-regular-fields/171171)
**Author:** [@advitya](https://discuss.elastic.co/u/advitya)\ **Replies:** 0\ **Last updated:** [March 6, 2019, 6:05pm UTC](https://discuss.elastic.co/t/more-like-this-query-against-a-combination-of-nested-join-fields-and-regular-fields/171171 "2019-03-06T18:05:00Z")
I want to run a "More Like this" query against a combination of nested/join fields and regular (non-nested/join) fields. Is this possible? Against the following index mapping-- PUT /persons { "mappings": { "person":… --- ## [Inconsistency in versions of Elasticsearch for Mac/Linux](https://discuss.elastic.co/t/inconsistency-in-versions-of-elasticsearch-for-mac-linux/171118)
**Author:** [@Jedrek\_Domanski](https://discuss.elastic.co/u/Jedrek_Domanski)\ **Replies:** 2\ **Last updated:** [March 6, 2019, 5:50pm UTC](https://discuss.elastic.co/t/inconsistency-in-versions-of-elasticsearch-for-mac-linux/171118 "2019-03-06T17:50:45Z")
I've just downloaded the latest version of Elasticsearch (6.6.1 is mentioned on the main page as the latest stable version) for Mac/Linux from this URL: https://www.elastic.co/downloads/elasticsearch but when I go to ht… --- ## [Execute Update by query via Watcher](https://discuss.elastic.co/t/execute-update-by-query-via-watcher/171161)
**Author:** [@jenyphur](https://discuss.elastic.co/u/jenyphur)\ **Replies:** 1\ **Last updated:** [March 6, 2019, 5:17pm UTC](https://discuss.elastic.co/t/execute-update-by-query-via-watcher/171161 "2019-03-06T17:17:20Z")
Hi there, I have a need to run an Update\_by\_query every few hours. Is this possible via watcher? I am having a hard time figuring out the 'action' part of it. I have the update query working manually...just need to kno… --- ## [Regular ELK stack on AWS](https://discuss.elastic.co/t/regular-elk-stack-on-aws/169997)
**Author:** [@rahulkumar1](https://discuss.elastic.co/u/rahulkumar1)\ **Replies:** 1\ **Last updated:** [March 6, 2019, 5:09pm UTC](https://discuss.elastic.co/t/regular-elk-stack-on-aws/169997 "2019-03-06T17:09:51Z")
I am using a traditional ELK stack on AWS with the below Architecture: AZ1: 1x Logstash (ALB+ASG) AZ2: 1x Logstash AZ1: 3x Master Nodes AZ2: 2x Master Nodes AZ1: 2x Data Nodes … --- ## [Elasticsearch crashed during reindex, can I continue?](https://discuss.elastic.co/t/elasticsearch-crashed-during-reindex-can-i-continue/170962)
**Author:** [@brianecole](https://discuss.elastic.co/u/brianecole)\ **Replies:** 1\ **Last updated:** [March 6, 2019, 5:00pm UTC](https://discuss.elastic.co/t/elasticsearch-crashed-during-reindex-can-i-continue/170962 "2019-03-06T17:00:50Z")
I was upgrading from ES 2.x to 5.x, and then using the X-Pack Upgrade Assistant/Reindex helper to upgrade the indices as required. Unfortunately I hit a Java heap space problem and the elasticsearch process crashed afte… --- ## [Completion Suggester: Mutiple tokens?](https://discuss.elastic.co/t/completion-suggester-mutiple-tokens/171154)
**Author:** [@Maxi\_Huber](https://discuss.elastic.co/u/Maxi_Huber)\ **Replies:** 0\ **Last updated:** [March 6, 2019, 4:54pm UTC](https://discuss.elastic.co/t/completion-suggester-mutiple-tokens/171154 "2019-03-06T16:54:32Z")
As stated here a field in Elasticsearch, defined as type "completion" together with a certain analyzer + tokenizer, is first split up according to the underlying logic of those parts and then "stitched" together again. H… --- ## ['type': 'illegal\_argument\_exception', 'reason': 'mapper \[sum\] cannot be changed from type \[long\] to \[float\]](https://discuss.elastic.co/t/type-illegal-argument-exception-reason-mapper-sum-cannot-be-changed-from-type-long-to-float/170944)
**Author:** [@revelc33](https://discuss.elastic.co/u/revelc33)\ **Replies:** 3\ **Last updated:** [March 6, 2019, 4:33pm UTC](https://discuss.elastic.co/t/type-illegal-argument-exception-reason-mapper-sum-cannot-be-changed-from-type-long-to-float/170944 "2019-03-06T16:33:08Z")
Hi, i am having problems indexing some documents with python elasticsearch helper (bulk) . I index 504 documents and i get 2 with error like described below! 400, 'error': {'type': 'illegal\_argument\_exception', 'reas… --- ## [Update timestamp in all documents in an index](https://discuss.elastic.co/t/update-timestamp-in-all-documents-in-an-index/170540)
**Author:** [@ramzey1981](https://discuss.elastic.co/u/ramzey1981)\ **Replies:** 28\ **Last updated:** [March 6, 2019, 4:08pm UTC](https://discuss.elastic.co/t/update-timestamp-in-all-documents-in-an-index/170540 "2019-03-06T16:08:06Z")
we had a backlog of messages in kafa for filebeat coming from syslog with the following format which were from 2018, Dec 31 23:59:59 phc1803-hdfs-03 consul: 2018/12/31 23:59:59 \[WARN\] agent: Check 'service:timeseries-hd… --- ## [\[SQL\] Expose \_source in SQL queries](https://discuss.elastic.co/t/sql-expose-source-in-sql-queries/170922)
**Author:** [@paulcarey](https://discuss.elastic.co/u/paulcarey)\ **Replies:** 5\ **Last updated:** [March 6, 2019, 3:57pm UTC](https://discuss.elastic.co/t/sql-expose-source-in-sql-queries/170922 "2019-03-06T15:57:08Z")
Hi As far as I can see, it's not possible to select the \_source field in ES SQL. Attempting to do so in 6.5.4 returns an Unknown column exception. This would be a useful feature - in my case I don't want to index the la… --- ## [Term suggester score calculation](https://discuss.elastic.co/t/term-suggester-score-calculation/171143)
**Author:** [@anderstr](https://discuss.elastic.co/u/anderstr)\ **Replies:** 0\ **Last updated:** [March 6, 2019, 3:27pm UTC](https://discuss.elastic.co/t/term-suggester-score-calculation/171143 "2019-03-06T15:27:04Z")
How is the score calculated in the term suggester? https://www.elastic.co/guide/en/elasticsearch/reference/current/search-suggesters-term.html I assume it is a combination of term frequency and string distance. However… --- ## [Count buckets of aggregation](https://discuss.elastic.co/t/count-buckets-of-aggregation/167679)
**Author:** [@Fabio\_Freitas](https://discuss.elastic.co/u/Fabio_Freitas)\ **Replies:** 2\ **Last updated:** [March 6, 2019, 2:55pm UTC](https://discuss.elastic.co/t/count-buckets-of-aggregation/167679 "2019-03-06T14:55:48Z")
Hi ! I'am getting it as response after bucket\_selector: { "took": 1, "timed\_out": false, "\_shards": { "total": 10, "successful": 10, "skipped": 0, "failed": 0 }, "hit… --- ## [MSMQ data to Elastic Search ? does MertricBeat is the way to do it?](https://discuss.elastic.co/t/msmq-data-to-elastic-search-does-mertricbeat-is-the-way-to-do-it/171129)
**Author:** [@Daniel\_Mirz](https://discuss.elastic.co/u/Daniel_Mirz)\ **Replies:** 1\ **Last updated:** [March 6, 2019, 2:45pm UTC](https://discuss.elastic.co/t/msmq-data-to-elastic-search-does-mertricbeat-is-the-way-to-do-it/171129 "2019-03-06T14:45:46Z")
Hi, i am trying to ship messages from MSMQ in one of our servers. is there a way to do it? i succeeded to get System data with MetricBeat but no data on Queues [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1372) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1374)