# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1376

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1377

---

## [ES snapshot](https://discuss.elastic.co/t/es-snapshot/170355)

<div class="topic-metadata">

**Author:** [@vasudevan](https://discuss.elastic.co/u/vasudevan)\
**Replies:** 4\
**Last updated:** [March 5, 2019, 11:09am UTC](https://discuss.elastic.co/t/es-snapshot/170355 "2019-03-05T11:09:50Z")

</div>

I have created a snapshot on my single node ELK server and will be able to restore from that snapshot taken. But I can't see any file/content under my backup directory. Below is the command and it's output FYR, I have c…

---

## [How to search with multiple option in field?](https://discuss.elastic.co/t/how-to-search-with-multiple-option-in-field/170872)

<div class="topic-metadata">

**Author:** [@TFM\_PAT](https://discuss.elastic.co/u/TFM_PAT)\
**Replies:** 1\
**Last updated:** [March 5, 2019, 11:03am UTC](https://discuss.elastic.co/t/how-to-search-with-multiple-option-in-field/170872 "2019-03-05T11:03:04Z")

</div>

I have a data sample this data origin info date 1 2019-03-05 2 2019-03-07 3 2019-03-04 4 2019-03-07 5 2019-03-04 6 2019-03-19 7 2019-03-01 8 2019-03-25 9 2019-03-26 10 2019-03-08 11 2019-03-…

---

## [BooleanQuery$TooManyClauses - buyt have updated config file to increase it](https://discuss.elastic.co/t/booleanquery-toomanyclauses-buyt-have-updated-config-file-to-increase-it/170858)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 6\
**Last updated:** [March 5, 2019, 10:56am UTC](https://discuss.elastic.co/t/booleanquery-toomanyclauses-buyt-have-updated-config-file-to-increase-it/170858 "2019-03-05T10:56:17Z")

</div>

Hi Elasticsearch version 6.6.1 Centos7 I have set "indices.query.bool.max\_clause\_count" into my elasticsearch.yml file indices.query.bool.max\_clause\_count: 3000 And restarted cluster nodes, but still I get the fol…

---

## [Elastic blocks write after windows go to sleep mode](https://discuss.elastic.co/t/elastic-blocks-write-after-windows-go-to-sleep-mode/170862)

<div class="topic-metadata">

**Author:** [@Itai\_Birenshtok](https://discuss.elastic.co/u/Itai_Birenshtok)\
**Replies:** 0\
**Last updated:** [March 5, 2019, 10:07am UTC](https://discuss.elastic.co/t/elastic-blocks-write-after-windows-go-to-sleep-mode/170862 "2019-03-05T10:07:24Z")

</div>

Hi, I'm running elastic on windows. When windows turn into sleep mode, the indices turn into read-only mode (read\_only\_allow\_delete: true). Is there any option to prevent it?

---

## [Bucket Aggregation Example](https://discuss.elastic.co/t/bucket-aggregation-example/170803)

<div class="topic-metadata">

**Author:** [@Vincent\_Stevenson](https://discuss.elastic.co/u/Vincent_Stevenson)\
**Replies:** 1\
**Last updated:** [March 5, 2019, 9:53am UTC](https://discuss.elastic.co/t/bucket-aggregation-example/170803 "2019-03-05T09:53:03Z")

</div>

Let's say I wanted to determine which filters are relevant for a given query, ex: Amazon knows when I search 'graphics card' that the amount of GDDR5 ram would be a relevant filter for the left hand pane. In Elasticsear…

---

## [Does none-indexd field has doc values?](https://discuss.elastic.co/t/does-none-indexd-field-has-doc-values/170834)

<div class="topic-metadata">

**Author:** [@saiergon](https://discuss.elastic.co/u/saiergon)\
**Replies:** 4\
**Last updated:** [March 5, 2019, 9:39am UTC](https://discuss.elastic.co/t/does-none-indexd-field-has-doc-values/170834 "2019-03-05T09:39:55Z")

</div>

hi, if i set one filed type to text, and the index attribute set to false, dose this field will generate doc values?

---

## [Elasticsearch | Very slow search](https://discuss.elastic.co/t/elasticsearch-very-slow-search/170368)

<div class="topic-metadata">

**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\
**Replies:** 14\
**Last updated:** [March 5, 2019, 9:20am UTC](https://discuss.elastic.co/t/elasticsearch-very-slow-search/170368 "2019-03-05T09:20:38Z")

</div>

Hi, I am benchmarking search speed using different parameters. One specific parameter used is copy\_to implementation. Scenario 1. Number of Fields : 10000 Documents indexed : 500 Indices : 10 Search on Indices : 10 …

---

## [Shard initialization stuck - RecoveryFailedException](https://discuss.elastic.co/t/shard-initialization-stuck-recoveryfailedexception/170508)

<div class="topic-metadata">

**Author:** [@gri](https://discuss.elastic.co/u/gri)\
**Replies:** 4\
**Last updated:** [March 5, 2019, 8:56am UTC](https://discuss.elastic.co/t/shard-initialization-stuck-recoveryfailedexception/170508 "2019-03-05T08:56:39Z")

</div>

Hi, INITIAL PROBLEM: It seems that shards do not manage to finish their initialization. I keep getting the following exception in the logs 00:00:02.100 WARN org.elasticsearch.indices.cluster - \[00848fc0-8093-4f0f-97…

---

## [How i can download zip for ingest attachment plugin?](https://discuss.elastic.co/t/how-i-can-download-zip-for-ingest-attachment-plugin/170718)

<div class="topic-metadata">

**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\
**Replies:** 4\
**Last updated:** [March 5, 2019, 8:33am UTC](https://discuss.elastic.co/t/how-i-can-download-zip-for-ingest-attachment-plugin/170718 "2019-03-05T08:33:29Z")

</div>

Hi, I want to indexed pdf files. and for that want to install ingest attachment processor plugin offline. I looked at "https://www.elastic.co/guide/en/elasticsearch/plugins/master/ingest-attachment.html#ingest-attachmen…

---

## [Easticsearch throw the no such index exception](https://discuss.elastic.co/t/easticsearch-throw-the-no-such-index-exception/170831)

<div class="topic-metadata">

**Author:** [@Crab2died](https://discuss.elastic.co/u/Crab2died)\
**Replies:** 1\
**Last updated:** [March 5, 2019, 7:42am UTC](https://discuss.elastic.co/t/easticsearch-throw-the-no-such-index-exception/170831 "2019-03-05T07:42:37Z")

</div>

Easticsearch throw the exception: \[type=index\_not\_found\_exception, reason=no such index\] Other than not creating an index, what else could have caused this exception. I was sure created the index but also throw the exce…

---

## [Intersectional search from two indices](https://discuss.elastic.co/t/intersectional-search-from-two-indices/170643)

<div class="topic-metadata">

**Author:** [@IgorPhoenix](https://discuss.elastic.co/u/IgorPhoenix)\
**Replies:** 4\
**Last updated:** [March 5, 2019, 7:04am UTC](https://discuss.elastic.co/t/intersectional-search-from-two-indices/170643 "2019-03-05T07:04:02Z")

</div>

I have two indices in Elastic: Track and Messages. Each index has ServiceId field. Search in the Tracks index is always performed by fields (exact value) in the index. Search in the Messages is always performed by fre…

---

## [Shard allocation says max retry but fails to allocate on retry\_failed=true](https://discuss.elastic.co/t/shard-allocation-says-max-retry-but-fails-to-allocate-on-retry-failed-true/170396)

<div class="topic-metadata">

**Author:** [@redcho](https://discuss.elastic.co/u/redcho)\
**Replies:** 6\
**Last updated:** [March 5, 2019, 5:52am UTC](https://discuss.elastic.co/t/shard-allocation-says-max-retry-but-fails-to-allocate-on-retry-failed-true/170396 "2019-03-05T05:52:26Z")

</div>

Hey guys, We have a cluster running on version 6.5.4. When we look at the unassigned shards it shows the following shard for example: { "index" : "facebook-post-comment\_v1", "shard" : 3, "primary" : false, "cu…

---

## [ProcessID configuration in Elasticsearch yml file](https://discuss.elastic.co/t/processid-configuration-in-elasticsearch-yml-file/170824)

<div class="topic-metadata">

**Author:** [@Elango-mas](https://discuss.elastic.co/u/Elango-mas)\
**Replies:** 0\
**Last updated:** [March 5, 2019, 5:47am UTC](https://discuss.elastic.co/t/processid-configuration-in-elasticsearch-yml-file/170824 "2019-03-05T05:47:53Z")

</div>

Hi Team, Can the pid file path be configured in elasticsearch yml file. For now I am doing it via command line while starting the service and some time I miss it while restarting. It would be very help full if there is…

---

## [Elasticsearch - how to curl what I need from localhost:9200?](https://discuss.elastic.co/t/elasticsearch-how-to-curl-what-i-need-from-localhost-9200/170798)

<div class="topic-metadata">

**Author:** [@bmw417](https://discuss.elastic.co/u/bmw417)\
**Replies:** 1\
**Last updated:** [March 4, 2019, 10:07pm UTC](https://discuss.elastic.co/t/elasticsearch-how-to-curl-what-i-need-from-localhost-9200/170798 "2019-03-04T22:07:39Z")

</div>

Here's a link to my SO question no one answered: https://stackoverflow.com/questions/54962586/elasticsearch-curl-error-when-trying-to-search To reiterate from that question, I have an index called threat-reports, and o…

---

## [Update timestamp from millis to second in all documents](https://discuss.elastic.co/t/update-timestamp-from-millis-to-second-in-all-documents/170792)

<div class="topic-metadata">

**Author:** [@Aliya](https://discuss.elastic.co/u/Aliya)\
**Replies:** 0\
**Last updated:** [March 4, 2019, 8:44pm UTC](https://discuss.elastic.co/t/update-timestamp-from-millis-to-second-in-all-documents/170792 "2019-03-04T20:44:24Z")

</div>

I'm trying to update my timestamps from milliseconds to seconds while re-indexing but i'm not sure how to do it. We are using elasticsearch 2.4.6 which in turn uses groovy script. My script looks like below: (i know th…

---

## [Search templates - give entire query as param](https://discuss.elastic.co/t/search-templates-give-entire-query-as-param/167506)

<div class="topic-metadata">

**Author:** [@Roxanatest](https://discuss.elastic.co/u/Roxanatest)\
**Replies:** 2\
**Last updated:** [March 4, 2019, 8:09pm UTC](https://discuss.elastic.co/t/search-templates-give-entire-query-as-param/167506 "2019-03-04T20:09:15Z")

</div>

I want the entire elasticsearch template query to be given as parameter. The template to be something like { "lang": "mustache", "source": "\\{\\"query\\": {{query\_string}}" } And for the query\_s…

---

## [Internal Server Error 500 when running curl from batch file, but not when running directly on command line](https://discuss.elastic.co/t/internal-server-error-500-when-running-curl-from-batch-file-but-not-when-running-directly-on-command-line/170786)

<div class="topic-metadata">

**Author:** [@Isaac\_Buckman](https://discuss.elastic.co/u/Isaac_Buckman)\
**Replies:** 1\
**Last updated:** [March 4, 2019, 8:04pm UTC](https://discuss.elastic.co/t/internal-server-error-500-when-running-curl-from-batch-file-but-not-when-running-directly-on-command-line/170786 "2019-03-04T20:04:15Z")

</div>

Hi, I'm trying to make a (windows) batch file to run reports automatically. When I enter the curl command by hand, it works fine, returning the response with the "path" to the report that I expect. When I copy and pas…

---

## [Elasticsearch Fuzzy Query](https://discuss.elastic.co/t/elasticsearch-fuzzy-query/170782)

<div class="topic-metadata">

**Author:** [@Zhengcong\_Yin](https://discuss.elastic.co/u/Zhengcong_Yin)\
**Replies:** 0\
**Last updated:** [March 4, 2019, 7:37pm UTC](https://discuss.elastic.co/t/elasticsearch-fuzzy-query/170782 "2019-03-04T19:37:13Z")

</div>

I am performing a fuzzy query on my documents and works well. I am curious about the logic behind it. Is the final score calculated in the notion of "Soft TF-IDF", which essentially use the edit similarity as the second…

---

## [Basic Query Question JSON Formatting](https://discuss.elastic.co/t/basic-query-question-json-formatting/170779)

<div class="topic-metadata">

**Author:** [@Vincent\_Stevenson](https://discuss.elastic.co/u/Vincent_Stevenson)\
**Replies:** 3\
**Last updated:** [March 4, 2019, 7:37pm UTC](https://discuss.elastic.co/t/basic-query-question-json-formatting/170779 "2019-03-04T19:37:06Z")

</div>

I don't know the proper way to format JSON requests to search all indices in ES. When I run: GET \_search?q=dog&size=0 I get 270 hits, but when I run: GET \_search { "query": { "match": { "about" :"dog" } } } I …

---

## [Coordinator thread pool](https://discuss.elastic.co/t/coordinator-thread-pool/170759)

<div class="topic-metadata">

**Author:** [@jonathan\_rowe](https://discuss.elastic.co/u/jonathan_rowe)\
**Replies:** 1\
**Last updated:** [March 4, 2019, 6:45pm UTC](https://discuss.elastic.co/t/coordinator-thread-pool/170759 "2019-03-04T18:45:37Z")

</div>

Hiya I have configured some coordinator nodes in a large 5.2.2 cluster, can someone please tell me which thread pool coordination activities use? thanks

---

## [Ability to configure "root" field for an object type](https://discuss.elastic.co/t/ability-to-configure-root-field-for-an-object-type/170662)

<div class="topic-metadata">

**Author:** [@sdavids](https://discuss.elastic.co/u/sdavids)\
**Replies:** 4\
**Last updated:** [March 4, 2019, 5:42pm UTC](https://discuss.elastic.co/t/ability-to-configure-root-field-for-an-object-type/170662 "2019-03-04T17:42:49Z")

</div>

I have a mapping definition with multiple object types that looks like: { "mappings": { "\_doc": { "properties": { "identifier": { "type": "object", …

---

## [Elasticsearch Backup and restore](https://discuss.elastic.co/t/elasticsearch-backup-and-restore/170753)

<div class="topic-metadata">

**Author:** [@charan.gandra](https://discuss.elastic.co/u/charan.gandra)\
**Replies:** 1\
**Last updated:** [March 4, 2019, 5:13pm UTC](https://discuss.elastic.co/t/elasticsearch-backup-and-restore/170753 "2019-03-04T17:13:37Z")

</div>

Hi, I would like to backup my elasticsearch indexes and delete the indexes older than 30 days. My indexes are timestamped so a separate index will get created for each day. How do I backup these to AWS S3 bucket or Azur…

---

## [Query on where a date field is Tuesday, Wednesday or Thursday](https://discuss.elastic.co/t/query-on-where-a-date-field-is-tuesday-wednesday-or-thursday/170762)

<div class="topic-metadata">

**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\
**Replies:** 1\
**Last updated:** [March 4, 2019, 4:40pm UTC](https://discuss.elastic.co/t/query-on-where-a-date-field-is-tuesday-wednesday-or-thursday/170762 "2019-03-04T16:40:47Z")

</div>

Good Day, I have a field in my documents named 'measurement\_timestamp' and I want to query it where that timestamp is on either Tuesday, Wednesday or Thursday. I know its possible, but can't find just a straight kinda …

---

## [Beginner - How to aggregate count on large cardinality?](https://discuss.elastic.co/t/beginner-how-to-aggregate-count-on-large-cardinality/170719)

<div class="topic-metadata">

**Author:** [@Plo](https://discuss.elastic.co/u/Plo)\
**Replies:** 4\
**Last updated:** [March 4, 2019, 3:51pm UTC](https://discuss.elastic.co/t/beginner-how-to-aggregate-count-on-large-cardinality/170719 "2019-03-04T15:51:26Z")

</div>

In a game setting. Imagine you have 50 levels. You want to get the distribution (averages, standard deviation, max, min, etc.) of attempts per player for each level. I have a play\_level\_end event with a unique\_id para…

---

## [In 6.6 broken indices.query.bool.max\_clause\_count configuring](https://discuss.elastic.co/t/in-6-6-broken-indices-query-bool-max-clause-count-configuring/170747)

<div class="topic-metadata">

**Author:** [@ra-coder](https://discuss.elastic.co/u/ra-coder)\
**Replies:** 1\
**Last updated:** [March 4, 2019, 3:05pm UTC](https://discuss.elastic.co/t/in-6-6-broken-indices-query-bool-max-clause-count-configuring/170747 "2019-03-04T15:05:51Z")

</div>

after switch from 6.5 to 6.6 not working set up in /etc/elasticsearch/elasticsearch.yml of indices.query.bool.max\_clause\_count: 10000 with many clause query i got next in log ... at org.elasticsearch.common.…

---

## [Ingest plugin .docx issue](https://discuss.elastic.co/t/ingest-plugin-docx-issue/170717)

<div class="topic-metadata">

**Author:** [@Ananth\_Rao](https://discuss.elastic.co/u/Ananth_Rao)\
**Replies:** 7\
**Last updated:** [March 4, 2019, 2:47pm UTC](https://discuss.elastic.co/t/ingest-plugin-docx-issue/170717 "2019-03-04T14:47:06Z")

</div>

Hi , i'm using ES 6.5.4 and ingest-plugin . It works fine with pdf , txt or any other file types, but breaks for .docx and .doc files. The index gets created , but unable to parse and search . Below is the output . …

---

## [Logstash and shard allocation performance](https://discuss.elastic.co/t/logstash-and-shard-allocation-performance/170734)

<div class="topic-metadata">

**Author:** [@fadihaddad](https://discuss.elastic.co/u/fadihaddad)\
**Replies:** 0\
**Last updated:** [March 4, 2019, 2:02pm UTC](https://discuss.elastic.co/t/logstash-and-shard-allocation-performance/170734 "2019-03-04T14:02:20Z")

</div>

hello everyone I am having a problem wile indexing to elasticsearch using logstash. After some time after starting indexing the index performance becomes poor and reaches 0 events received. Does this have to do with shar…

---

## [Elastic String Length Issue](https://discuss.elastic.co/t/elastic-string-length-issue/170710)

<div class="topic-metadata">

**Author:** [@vnitdeepak](https://discuss.elastic.co/u/vnitdeepak)\
**Replies:** 1\
**Last updated:** [March 4, 2019, 1:50pm UTC](https://discuss.elastic.co/t/elastic-string-length-issue/170710 "2019-03-04T13:50:10Z")

</div>

This works GET indexname/\_search { "query": { "script": { "script": "doc\['fieldName'\].value?.length() ==3" } } } But with \< and \> operator it does not work GET indexname/\_search { "query": { "script": { "sc…

---

## [Alert by influencer on ML](https://discuss.elastic.co/t/alert-by-influencer-on-ml/170492)

<div class="topic-metadata">

**Author:** [@Ant](https://discuss.elastic.co/u/Ant)\
**Replies:** 3\
**Last updated:** [March 4, 2019, 1:35pm UTC](https://discuss.elastic.co/t/alert-by-influencer-on-ml/170492 "2019-03-04T13:35:14Z")

</div>

I have a monitor that tracks 6 message queues that come into my system. I record the stats in an index capturing if the queue has been idle at all and what volume of data has been going through it. If I make a ML job wi…

---

## [ML job state "failed"](https://discuss.elastic.co/t/ml-job-state-failed/170529)

<div class="topic-metadata">

**Author:** [@Ant](https://discuss.elastic.co/u/Ant)\
**Replies:** 2\
**Last updated:** [March 4, 2019, 11:27am UTC](https://discuss.elastic.co/t/ml-job-state-failed/170529 "2019-03-04T11:27:35Z")

</div>

I have a single node cluster used for testing which when I restart it all the ML jobs "job status" go to failed. I have tried to stop the datafeed before restarting it but this made no difference and to get the job going…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1375)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1377)
