# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1378

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1379

---

## [Elasticsearch match\_phrase\_prefix Vs wild card](https://discuss.elastic.co/t/elasticsearch-match-phrase-prefix-vs-wild-card/170559)

<div class="topic-metadata">

**Author:** [@pak\_es](https://discuss.elastic.co/u/pak_es)\
**Replies:** 0\
**Last updated:** [March 1, 2019, 8:08pm UTC](https://discuss.elastic.co/t/elasticsearch-match-phrase-prefix-vs-wild-card/170559 "2019-03-01T20:08:34Z")

</div>

This query use phrase prefix and returns 5k records POST index/\_search { "from": 0, "size": 10, "query": { "match\_phrase\_prefix": { "Identifiers.Identifier.$": { "query": "nct" "max\_expan…

---

## [Elasticsearch does not work after security activation](https://discuss.elastic.co/t/elasticsearch-does-not-work-after-security-activation/170545)

<div class="topic-metadata">

**Author:** [@Rodos](https://discuss.elastic.co/u/Rodos)\
**Replies:** 4\
**Last updated:** [March 1, 2019, 7:36pm UTC](https://discuss.elastic.co/t/elasticsearch-does-not-work-after-security-activation/170545 "2019-03-01T19:36:11Z")

</div>

CentOS 7 (VDS), ELK Stack Version 6.5.3, installed on a clean system. I installed the ELK and made the basic settings. I activated the trial, restarted, generated passwords interactively, and installed xpack.security.e…

---

## [Painless script functions](https://discuss.elastic.co/t/painless-script-functions/170070)

<div class="topic-metadata">

**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\
**Replies:** 3\
**Last updated:** [March 1, 2019, 7:03pm UTC](https://discuss.elastic.co/t/painless-script-functions/170070 "2019-03-01T19:03:05Z")

</div>

I wrote a function that returns an ArrayList from an expression passed in a parameter. The function is the first line of a stored script that is called from a watcher. When testing the watcher that calls this stored scr…

---

## [Drawbacks To Using Nested Documents?](https://discuss.elastic.co/t/drawbacks-to-using-nested-documents/170538)

<div class="topic-metadata">

**Author:** [@micah.williamson](https://discuss.elastic.co/u/micah.williamson)\
**Replies:** 2\
**Last updated:** [March 1, 2019, 7:01pm UTC](https://discuss.elastic.co/t/drawbacks-to-using-nested-documents/170538 "2019-03-01T19:01:01Z")

</div>

I have an index containing millions of small documents (2-3kb each on average)- each representing a user in our system. For each user I'd like to store actions performed by the user and the date that they performed the …

---

## [Restoring to a new index](https://discuss.elastic.co/t/restoring-to-a-new-index/170422)

<div class="topic-metadata">

**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\
**Replies:** 2\
**Last updated:** [March 1, 2019, 5:54pm UTC](https://discuss.elastic.co/t/restoring-to-a-new-index/170422 "2019-03-01T17:54:15Z")

</div>

Hello, I am running the following command to restore snapshot into a new index I am grabbing quai\_report\_20170628 from the snapshot, and trying to restore to quai\_report\_20170628\_2 curl -XPOST http://localhost:9200/\_s…

---

## [Demystifying Performance- Fast Queries, Slow Scans?](https://discuss.elastic.co/t/demystifying-performance-fast-queries-slow-scans/169467)

<div class="topic-metadata">

**Author:** [@micah.williamson](https://discuss.elastic.co/u/micah.williamson)\
**Replies:** 2\
**Last updated:** [March 1, 2019, 5:00pm UTC](https://discuss.elastic.co/t/demystifying-performance-fast-queries-slow-scans/169467 "2019-03-01T17:00:08Z")

</div>

I've noticed I can run fairly complex, dynamic count queries and return an exact count over millions of documents. I would assume if searching is so quick, then the only performance bottlenecks for a scan to return the r…

---

## [Scheduled query service](https://discuss.elastic.co/t/scheduled-query-service/170075)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 14\
**Last updated:** [March 1, 2019, 4:55pm UTC](https://discuss.elastic.co/t/scheduled-query-service/170075 "2019-03-01T16:55:04Z")

</div>

Hi, I'm looking for an existing service/application which would execute scheduled queries defined by me and insert the result to an ES index. My goal is to aggregate data to be able to extend key metrics retention time…

---

## [Decimal in elastic](https://discuss.elastic.co/t/decimal-in-elastic/170493)

<div class="topic-metadata">

**Author:** [@Suren](https://discuss.elastic.co/u/Suren)\
**Replies:** 3\
**Last updated:** [March 1, 2019, 4:46pm UTC](https://discuss.elastic.co/t/decimal-in-elastic/170493 "2019-03-01T16:46:27Z")

</div>

if i have float field in elastic and give value 9999999.9999999 it rounds it to 10000000 how can i put decimal value without rounding ?

---

## [Update Nested object using painless script](https://discuss.elastic.co/t/update-nested-object-using-painless-script/169873)

<div class="topic-metadata">

**Author:** [@Venkata\_Naresh](https://discuss.elastic.co/u/Venkata_Naresh)\
**Replies:** 1\
**Last updated:** [March 1, 2019, 4:30pm UTC](https://discuss.elastic.co/t/update-nested-object-using-painless-script/169873 "2019-03-01T16:30:57Z")

</div>

Hi, I have an ES nested object in the below format "campaigns": \[ { "campaignId": 110, "clickedCount": 1, "openedCount": 2 }, { "campaignId": 1322, "clickedCount": 1, "openedCount": 0 } …

---

## [Cluster going down because of garbage collector](https://discuss.elastic.co/t/cluster-going-down-because-of-garbage-collector/170326)

<div class="topic-metadata">

**Author:** [@dihpierrick](https://discuss.elastic.co/u/dihpierrick)\
**Replies:** 8\
**Last updated:** [March 1, 2019, 4:14pm UTC](https://discuss.elastic.co/t/cluster-going-down-because-of-garbage-collector/170326 "2019-03-01T16:14:35Z")

</div>

Hello, We just have an issue on our cluster : 1 Coordinator Nodes 3 Master Eligible Nodes Version 6.1.2 Yesterday, around 16PM our cluster stopped working well. In the logs files of our coordinator node we had : \[…

---

## [Getting max restore performance](https://discuss.elastic.co/t/getting-max-restore-performance/170475)

<div class="topic-metadata">

**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\
**Replies:** 2\
**Last updated:** [March 1, 2019, 3:43pm UTC](https://discuss.elastic.co/t/getting-max-restore-performance/170475 "2019-03-01T15:43:32Z")

</div>

We have around 100 snapshots for a given backupID. I am running below POST to restore each snapshot one by one as concurrency is not supported. This is the case where my entire system crashed and I am recovering to known…

---

## [Is there any way to disable caching](https://discuss.elastic.co/t/is-there-any-way-to-disable-caching/170408)

<div class="topic-metadata">

**Author:** [@shru22](https://discuss.elastic.co/u/shru22)\
**Replies:** 3\
**Last updated:** [March 1, 2019, 3:38pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-disable-caching/170408 "2019-03-01T15:38:24Z")

</div>

I'm trying to do some performance test on my cluster and because of that I want to run all my search queries as if they are running for the first time, but it's impossible because of the caching. I tried setting up the…

---

## [Reindex drop settings](https://discuss.elastic.co/t/reindex-drop-settings/170495)

<div class="topic-metadata">

**Author:** [@Suren](https://discuss.elastic.co/u/Suren)\
**Replies:** 1\
**Last updated:** [March 1, 2019, 3:28pm UTC](https://discuss.elastic.co/t/reindex-drop-settings/170495 "2019-03-01T15:28:30Z")

</div>

after reindexing all the index settings and mappings are being dropped and a new index is created with default settings and mappings. Can I somehow keep my old settings and especially mappings in a new index?

---

## [Deprecation warnings in Elasticsearch 6.6](https://discuss.elastic.co/t/deprecation-warnings-in-elasticsearch-6-6/170461)

<div class="topic-metadata">

**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\
**Replies:** 3\
**Last updated:** [March 1, 2019, 3:27pm UTC](https://discuss.elastic.co/t/deprecation-warnings-in-elasticsearch-6-6/170461 "2019-03-01T15:27:07Z")

</div>

Hi, could you please help me figuring out how to get rid of these deprecation warnings? \[WARN \]\[o.e.d.a.a.i.t.p.PutIndexTemplateRequest\] \[WzjI3Q1\] Deprecated field \[template\] used, replaced by \[index\_patterns\] \[WARN \]\[…

---

## [Calculate Differentials in Values as Logs arrive](https://discuss.elastic.co/t/calculate-differentials-in-values-as-logs-arrive/170519)

<div class="topic-metadata">

**Author:** [@ldstrickland](https://discuss.elastic.co/u/ldstrickland)\
**Replies:** 0\
**Last updated:** [March 1, 2019, 2:55pm UTC](https://discuss.elastic.co/t/calculate-differentials-in-values-as-logs-arrive/170519 "2019-03-01T14:55:50Z")

</div>

I have a log stream that includes a reference.keyword and several accumulated values. What I need to understand is the rate of change. So I need to understand the difference in the values from the previous log with the…

---

## [Ubuntu 14.04 Purging ElasticSeach](https://discuss.elastic.co/t/ubuntu-14-04-purging-elasticseach/169695)

<div class="topic-metadata">

**Author:** [@txu](https://discuss.elastic.co/u/txu)\
**Replies:** 6\
**Last updated:** [March 1, 2019, 2:52pm UTC](https://discuss.elastic.co/t/ubuntu-14-04-purging-elasticseach/169695 "2019-03-01T14:52:18Z")

</div>

Hello, I am a coop student trying to use elastic search for the first time. However, I ran into a few problem while trying to initially use elastic search after installation and also during the uninstall process. I am us…

---

## [PNG Watcher Report not working](https://discuss.elastic.co/t/png-watcher-report-not-working/170039)

<div class="topic-metadata">

**Author:** [@Sean\_Lambert](https://discuss.elastic.co/u/Sean_Lambert)\
**Replies:** 3\
**Last updated:** [March 1, 2019, 2:20pm UTC](https://discuss.elastic.co/t/png-watcher-report-not-working/170039 "2019-03-01T14:20:55Z")

</div>

I'm attempting to use Watcher to generate regularly scheduled dashboard reports. I'd like to have the reports be inline PNG files. None of the ways listed in any documentation I've found seems to work. First I tried s…

---

## [Hardware requirements for production cluster](https://discuss.elastic.co/t/hardware-requirements-for-production-cluster/170478)

<div class="topic-metadata">

**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\
**Replies:** 2\
**Last updated:** [March 1, 2019, 2:17pm UTC](https://discuss.elastic.co/t/hardware-requirements-for-production-cluster/170478 "2019-03-01T14:17:30Z")

</div>

Hi there, This has likely been discussed many times so apologies in advance for any veteran Elastic members! As someone reasonably new to the Stack (despite being a forum member for a while now). I'd like to get some a…

---

## [Highlighting a numeric field from results fetched from custom "\_all" fields](https://discuss.elastic.co/t/highlighting-a-numeric-field-from-results-fetched-from-custom-all-fields/170509)

<div class="topic-metadata">

**Author:** [@chintzs](https://discuss.elastic.co/u/chintzs)\
**Replies:** 0\
**Last updated:** [March 1, 2019, 1:54pm UTC](https://discuss.elastic.co/t/highlighting-a-numeric-field-from-results-fetched-from-custom-all-fields/170509 "2019-03-01T13:54:17Z")

</div>

Hi, I am new to Elasticsearch. We have certain data in different data-types that we want to index and retrieve. We are using custom "\_all" fields as explained in the below link Custom "\_all" fields Following is our co…

---

## [Received response for a request that has timed out, sent \[213025ms\] ago, timed out \[140336ms\] ago](https://discuss.elastic.co/t/received-response-for-a-request-that-has-timed-out-sent-213025ms-ago-timed-out-140336ms-ago/169188)

<div class="topic-metadata">

**Author:** [@soumrock123](https://discuss.elastic.co/u/soumrock123)\
**Replies:** 13\
**Last updated:** [March 1, 2019, 1:48pm UTC](https://discuss.elastic.co/t/received-response-for-a-request-that-has-timed-out-sent-213025ms-ago-timed-out-140336ms-ago/169188 "2019-03-01T13:48:08Z")

</div>

I am trying to insert bulk data from multiple remote relational databases into Elasticsearch. It works perfectly when the number of databases is around 10-15. But if I try inserting queries from 50 or more databases, it …

---

## [Hot/Warm Architecture - Two nodes on the same server](https://discuss.elastic.co/t/hot-warm-architecture-two-nodes-on-the-same-server/170506)

<div class="topic-metadata">

**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\
**Replies:** 1\
**Last updated:** [March 1, 2019, 1:42pm UTC](https://discuss.elastic.co/t/hot-warm-architecture-two-nodes-on-the-same-server/170506 "2019-03-01T13:42:56Z")

</div>

Hi there, Is it technically possible to run multiple elasticsearch nodes on the same physical server? For example in a Hot/Warm architecture could we fill a chassis with half SSD's and half HDD's and run a Hot node and …

---

## [Questions about documents and indices](https://discuss.elastic.co/t/questions-about-documents-and-indices/170456)

<div class="topic-metadata">

**Author:** [@KOTOXJle6](https://discuss.elastic.co/u/KOTOXJle6)\
**Replies:** 7\
**Last updated:** [March 1, 2019, 1:38pm UTC](https://discuss.elastic.co/t/questions-about-documents-and-indices/170456 "2019-03-01T13:38:49Z")

</div>

Hello! Yesterday I set up my cluster from one node and noticed that several irrelevant indexes and ~5 million documents are displayed in Kibana monitoring. I removed the excess indexes, but the number of documents has…

---

## [Is is possible to use different query languages (such as lucene, script, ..) in a search?](https://discuss.elastic.co/t/is-is-possible-to-use-different-query-languages-such-as-lucene-script-in-a-search/170484)

<div class="topic-metadata">

**Author:** [@caub](https://discuss.elastic.co/u/caub)\
**Replies:** 4\
**Last updated:** [March 1, 2019, 11:47am UTC](https://discuss.elastic.co/t/is-is-possible-to-use-different-query-languages-such-as-lucene-script-in-a-search/170484 "2019-03-01T11:47:14Z")

</div>

example: GET filebeat\*/\_search { "query": { "bool": { "must": \[ { "match": { "stream": "stderr" } }, { "range": { "@timestamp": {…

---

## [Elasticsearch | Unique results](https://discuss.elastic.co/t/elasticsearch-unique-results/170449)

<div class="topic-metadata">

**Author:** [@pranav24](https://discuss.elastic.co/u/pranav24)\
**Replies:** 1\
**Last updated:** [March 1, 2019, 11:37am UTC](https://discuss.elastic.co/t/elasticsearch-unique-results/170449 "2019-03-01T11:37:35Z")

</div>

Hi, I working on a use case of something similar to the scenario mentioned below: Suppose I have indices called "Teacher" and "Student" Sample data of "Teacher" and "Student" are - Teacher { "city": "Madrid", …

---

## [ES5.4: invalid\_type\_name\_exception](https://discuss.elastic.co/t/es5-4-invalid-type-name-exception/170480)

<div class="topic-metadata">

**Author:** [@Steven\_Gerrits](https://discuss.elastic.co/u/Steven_Gerrits)\
**Replies:** 3\
**Last updated:** [March 1, 2019, 11:15am UTC](https://discuss.elastic.co/t/es5-4-invalid-type-name-exception/170480 "2019-03-01T11:15:26Z")

</div>

I'm running ElasticSearch 5.4 on Laravel 5.5 When i run php artisan elastic:index to index the indices I get following error: \[In Connection.php line 610: {"error":{"root\_cause":\[{"type":"invalid\_type\_name\_exception…

---

## [Slow indexing speed in 3 nodes cluster](https://discuss.elastic.co/t/slow-indexing-speed-in-3-nodes-cluster/170345)

<div class="topic-metadata">

**Author:** [@waster](https://discuss.elastic.co/u/waster)\
**Replies:** 11\
**Last updated:** [March 1, 2019, 10:37am UTC](https://discuss.elastic.co/t/slow-indexing-speed-in-3-nodes-cluster/170345 "2019-03-01T10:37:57Z")

</div>

Hello, We had a problem with slow indexing speed with ES cluster of 3 nodes (5.6.14) with the following roles: 70G RAM, SATA HDD, "mi" role 48G RAM, SSD HDD, "mdi" role 8G RAM, SATA HDD, "mi" role All ES nodes have h…

---

## [Server stopping by OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/server-stopping-by-outofmemoryerror-java-heap-space/170221)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 1\
**Last updated:** [March 1, 2019, 10:31am UTC](https://discuss.elastic.co/t/server-stopping-by-outofmemoryerror-java-heap-space/170221 "2019-03-01T10:31:48Z")

</div>

I'm using ElasticSearch 6.2 on a server with 4GB of RAM and 2 vCPUs. Recently I have seen many errors of the type: \[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[main-node\] fatal error in thread \[elasticsearch\[m…

---

## [Delay in data reflection](https://discuss.elastic.co/t/delay-in-data-reflection/170443)

<div class="topic-metadata">

**Author:** [@dhayalram](https://discuss.elastic.co/u/dhayalram)\
**Replies:** 3\
**Last updated:** [March 1, 2019, 10:12am UTC](https://discuss.elastic.co/t/delay-in-data-reflection/170443 "2019-03-01T10:12:08Z")

</div>

Delay in data while reading. We are inserting in Elasticsearch particular index, but the data is getting reflected after 1 or 2 hours. It's not happening all the time. I need suggestions to replicate it and fix for it. …

---

## [Cluster overflooded with tasks and growing!](https://discuss.elastic.co/t/cluster-overflooded-with-tasks-and-growing/170439)

<div class="topic-metadata">

**Author:** [@dropchew](https://discuss.elastic.co/u/dropchew)\
**Replies:** 3\
**Last updated:** [March 1, 2019, 8:11am UTC](https://discuss.elastic.co/t/cluster-overflooded-with-tasks-and-growing/170439 "2019-03-01T08:11:11Z")

</div>

Logstash are not able to ingest to the cluster now and tasks are still growing exponentially and no signs of slowing down. There are already 400k+ as of now. There are tasks that are running for days and new tasks insert…

---

## [How to high level rest client request request nodes stats URGENT!](https://discuss.elastic.co/t/how-to-high-level-rest-client-request-request-nodes-stats-urgent/170324)

<div class="topic-metadata">

**Author:** [@khergner](https://discuss.elastic.co/u/khergner)\
**Replies:** 5\
**Last updated:** [March 1, 2019, 5:53am UTC](https://discuss.elastic.co/t/how-to-high-level-rest-client-request-request-nodes-stats-urgent/170324 "2019-03-01T05:53:28Z")

</div>

Hi, I want to use high rest client for metric collector on java. There is a url (http://172.\*\*\*\*:9200//\_nodes/172.28../stats/os). Response about metric data and I read here . How can ı do request? Which can ı use any m…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1377)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1379)
