# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1386 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1387 --- ## [Build relation between elasticsearch aggregators - Nested groupings](https://discuss.elastic.co/t/build-relation-between-elasticsearch-aggregators-nested-groupings/169525)
**Author:** [@Karthikeyan\_KR](https://discuss.elastic.co/u/Karthikeyan_KR)\ **Replies:** 0\ **Last updated:** [February 22, 2019, 6:59am UTC](https://discuss.elastic.co/t/build-relation-between-elasticsearch-aggregators-nested-groupings/169525 "2019-02-22T06:59:57Z")
Hi, I need to create nested groupings between fields. Let us consider the example given below, Documents: { "keyword": "abc", "country": "IN", "state": "TN", "city": "Chennai" }, { "keyword": "abc", "country… --- ## [How to disable all x-pack features in elasticsearch source code](https://discuss.elastic.co/t/how-to-disable-all-x-pack-features-in-elasticsearch-source-code/168935)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 3\ **Last updated:** [February 22, 2019, 5:20am UTC](https://discuss.elastic.co/t/how-to-disable-all-x-pack-features-in-elasticsearch-source-code/168935 "2019-02-22T05:20:34Z")
I would want to disable all the x-pack features like ml,security,monitoring etc.. in the source code of elasticsearch. I am using elasticsearch version 6.6.0. Because elasticsearch opensource comes with xpack,i am havi… --- ## [Storing historic data of 7 years data and atleast 50 billion rows](https://discuss.elastic.co/t/storing-historic-data-of-7-years-data-and-atleast-50-billion-rows/169513)
**Author:** [@githubNinja](https://discuss.elastic.co/u/githubNinja)\ **Replies:** 3\ **Last updated:** [February 22, 2019, 4:56am UTC](https://discuss.elastic.co/t/storing-historic-data-of-7-years-data-and-atleast-50-billion-rows/169513 "2019-02-22T04:56:07Z")
Does elastic search provide me an option of storing 10 billion historic data rows from relational database and can also capability of maintaining an additional 40 billion rows of next couple of years of data ?. If yes wh… --- ## [Delete and restore snapshot on AWS s3](https://discuss.elastic.co/t/delete-and-restore-snapshot-on-aws-s3/169394)
**Author:** [@Phandora](https://discuss.elastic.co/u/Phandora)\ **Replies:** 2\ **Last updated:** [February 21, 2019, 11:12pm UTC](https://discuss.elastic.co/t/delete-and-restore-snapshot-on-aws-s3/169394 "2019-02-21T23:12:06Z")
Hi, I'd like to understand how delete and restore functions work. I thought if you delete a snapshot from S3, you will not be able to restore it later, but I'm having some weird behaviour. For example, if I code the fol… --- ## [C# NEST Client - An established connection was aborted by the software in your host machine](https://discuss.elastic.co/t/c-nest-client-an-established-connection-was-aborted-by-the-software-in-your-host-machine/169495)
**Author:** [@bo.clifton](https://discuss.elastic.co/u/bo.clifton)\ **Replies:** 1\ **Last updated:** [February 21, 2019, 10:29pm UTC](https://discuss.elastic.co/t/c-nest-client-an-established-connection-was-aborted-by-the-software-in-your-host-machine/169495 "2019-02-21T22:29:43Z")
We're investigating using Elasticsearch as our index searching client so I've set up the service on my local workstation for testing. We'll need to be using the Bulk API for uploading as we'll be dealing with very large… --- ## ["SERVICE\_UNAVAILABLE/1/state\_not\_recovered" exception in ES after upgrade to v6.5.4](https://discuss.elastic.co/t/service-unavailable-1-state-not-recovered-exception-in-es-after-upgrade-to-v6-5-4/169107)
**Author:** [@kesha](https://discuss.elastic.co/u/kesha)\ **Replies:** 2\ **Last updated:** [February 21, 2019, 10:26pm UTC](https://discuss.elastic.co/t/service-unavailable-1-state-not-recovered-exception-in-es-after-upgrade-to-v6-5-4/169107 "2019-02-21T22:26:22Z")
Elasticsearch: Version 6.5.4 OS: CentOS 6 elasticsearch.yml: node.name: dev node.data: true path.data: /var/lib/elasticsearch path.logs: /var/log/elasticsearch network.host: 127.0.0.1 http.port: 9200 discovery.zen.pin… --- ## [How does Elasticsearch balance data across nodes in a cluster](https://discuss.elastic.co/t/how-does-elasticsearch-balance-data-across-nodes-in-a-cluster/169288)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 3\ **Last updated:** [February 21, 2019, 9:40pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-balance-data-across-nodes-in-a-cluster/169288 "2019-02-21T21:40:23Z")
What Algorithm does Elasticsearch use to uniformly distribute data across different nodes in the cluster? How does it deal with new nodes / dead nodes? Does it use disk space, consistent hashing? Any resources that you … --- ## [Kibana site not loading](https://discuss.elastic.co/t/kibana-site-not-loading/169490)
**Author:** [@dfoley84](https://discuss.elastic.co/u/dfoley84)\ **Replies:** 0\ **Last updated:** [February 21, 2019, 9:04pm UTC](https://discuss.elastic.co/t/kibana-site-not-loading/169490 "2019-02-21T21:04:29Z")
Since yesterday I am seen both Kibana is still getting Ready or a Static page showing Cannot connect to the Elasticsearch cluster See the Kibana logs for details and try reloading the page. on my elasticstack server … --- ## [Xpack Watcher -- Credit card in logs](https://discuss.elastic.co/t/xpack-watcher-credit-card-in-logs/164374)
**Author:** [@jodiaz](https://discuss.elastic.co/u/jodiaz)\ **Replies:** 4\ **Last updated:** [February 21, 2019, 8:19pm UTC](https://discuss.elastic.co/t/xpack-watcher-credit-card-in-logs/164374 "2019-02-21T20:19:27Z")
Hello -- Working on a regex pattern for a watcher that will detect if credit card information is present in our logs. I was hoping that Elastic would have a sample pattern for this as it's one of the specific examples y… --- ## [How to promote specific document when searching for a specific search phrase](https://discuss.elastic.co/t/how-to-promote-specific-document-when-searching-for-a-specific-search-phrase/169481)
**Author:** [@opriscr](https://discuss.elastic.co/u/opriscr)\ **Replies:** 0\ **Last updated:** [February 21, 2019, 8:09pm UTC](https://discuss.elastic.co/t/how-to-promote-specific-document-when-searching-for-a-specific-search-phrase/169481 "2019-02-21T20:09:45Z")
Hi, I'm trying to find a solution to promote (increase the score) for a specific document from the index when searching for a specific search term. We can promote documents in other search engines but I didn't find this… --- ## [How to connect to Coordinating nodes from High level rest client](https://discuss.elastic.co/t/how-to-connect-to-coordinating-nodes-from-high-level-rest-client/168634)
**Author:** [@Sashi](https://discuss.elastic.co/u/Sashi)\ **Replies:** 4\ **Last updated:** [February 21, 2019, 8:06pm UTC](https://discuss.elastic.co/t/how-to-connect-to-coordinating-nodes-from-high-level-rest-client/168634 "2019-02-21T20:06:34Z")
Hello, I have a cluster with 9 nodes (3 master, 3 data and 3 client) ES version 6.4 I want my application to send all writes to data nodes and search to client nodes in a round robin fashion. We are using High level re… --- ## [Snapshot and Restore - Repo](https://discuss.elastic.co/t/snapshot-and-restore-repo/169473)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 4\ **Last updated:** [February 21, 2019, 7:33pm UTC](https://discuss.elastic.co/t/snapshot-and-restore-repo/169473 "2019-02-21T19:33:44Z")
If i have a 5 data node cluster - Shall i just run the curator to take the snapshot into a directory on that one node ? Is this the right approach ? --- ## [AND between must and should](https://discuss.elastic.co/t/and-between-must-and-should/169471)
**Author:** [@Fabio\_Batalha](https://discuss.elastic.co/u/Fabio_Batalha)\ **Replies:** 1\ **Last updated:** [February 21, 2019, 7:33pm UTC](https://discuss.elastic.co/t/and-between-must-and-should/169471 "2019-02-21T19:33:29Z")
Hello, I would like to know how to put an AND operator between a MUST and SHOULD. As for example. In the query bellow I want to have all the documents with the given IP addresses and at least one of the timestamp range… --- ## [Run remote commands from DevTools](https://discuss.elastic.co/t/run-remote-commands-from-devtools/168290)
**Author:** [@rmsys](https://discuss.elastic.co/u/rmsys)\ **Replies:** 2\ **Last updated:** [February 21, 2019, 7:31pm UTC](https://discuss.elastic.co/t/run-remote-commands-from-devtools/168290 "2019-02-21T19:31:59Z")
Hi I configured out this scenario cluster: lab client-node data-node master-node cluster: kibana-lab els + kibana (localhost) remote cluster config When a run command 'GET /\_remote/info' from DevTools in kibana, … --- ## [Integrating elastic search with git](https://discuss.elastic.co/t/integrating-elastic-search-with-git/169474)
**Author:** [@styriver](https://discuss.elastic.co/u/styriver)\ **Replies:** 1\ **Last updated:** [February 21, 2019, 6:17pm UTC](https://discuss.elastic.co/t/integrating-elastic-search-with-git/169474 "2019-02-21T18:17:28Z")
Hello I am going to be putting on a demo next week. I have one question and an issue. Is it possible to configure elastic search to index branches as well as the default setting for a project? It seems that if I add or… --- ## [Snapshot & Restore : 6.2 version](https://discuss.elastic.co/t/snapshot-restore-6-2-version/166622)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 10\ **Last updated:** [February 21, 2019, 6:03pm UTC](https://discuss.elastic.co/t/snapshot-restore-6-2-version/166622 "2019-02-21T18:03:09Z")
Couple of questions: is there any webinar for snapshot and restore ? Is it possible to change the name of the indices while restoring ? --- ## [Cluster routing allocation decider preventing allocation](https://discuss.elastic.co/t/cluster-routing-allocation-decider-preventing-allocation/169249)
**Author:** [@deepakamritsar123](https://discuss.elastic.co/u/deepakamritsar123)\ **Replies:** 6\ **Last updated:** [February 21, 2019, 5:35pm UTC](https://discuss.elastic.co/t/cluster-routing-allocation-decider-preventing-allocation/169249 "2019-02-21T17:35:13Z")
I have 3 ElasticSearch servers in the cluster. Out of three, two are working normally and one server behaving strange. One server have no shard on it. When i restart the elasticsearch service or reboot the server, it is … --- ## [How can I have timelion do a cumulative sum over a 6 month rolling window while using a weekly time interval?](https://discuss.elastic.co/t/how-can-i-have-timelion-do-a-cumulative-sum-over-a-6-month-rolling-window-while-using-a-weekly-time-interval/169465)
**Author:** [@kresten](https://discuss.elastic.co/u/kresten)\ **Replies:** 0\ **Last updated:** [February 21, 2019, 4:45pm UTC](https://discuss.elastic.co/t/how-can-i-have-timelion-do-a-cumulative-sum-over-a-6-month-rolling-window-while-using-a-weekly-time-interval/169465 "2019-02-21T16:45:35Z")
I am using timelion to try to graph some data for my coworker that is very difficult to derive using excel. We are trying to get a rolling 6-month cumulative sum the unique number of support tickets that were filed for … --- ## [Random score, but keep X random values from a field on top](https://discuss.elastic.co/t/random-score-but-keep-x-random-values-from-a-field-on-top/169463)
**Author:** [@Destroy666](https://discuss.elastic.co/u/Destroy666)\ **Replies:** 0\ **Last updated:** [February 21, 2019, 4:39pm UTC](https://discuss.elastic.co/t/random-score-but-keep-x-random-values-from-a-field-on-top/169463 "2019-02-21T16:39:23Z")
I'm wondering if that's possible with some sort of custom function query - have the results random, but keep results with X values (one time each) from one field at the top, so that we have at least one result from each … --- ## [Elasticsearch Cluster Shards rebalancing](https://discuss.elastic.co/t/elasticsearch-cluster-shards-rebalancing/169196)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 6\ **Last updated:** [February 21, 2019, 3:44pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-shards-rebalancing/169196 "2019-02-21T15:44:41Z")
Hi, I have few doubts over shards rebalancing. Case 1: I have 5 node cluster, 2 data nodes and 3 master nodes. If one data node goes down permanently and I add a different node which contains a different IP. Will th… --- ## [Search in object array with multiple conditions](https://discuss.elastic.co/t/search-in-object-array-with-multiple-conditions/169440)
**Author:** [@Trino](https://discuss.elastic.co/u/Trino)\ **Replies:** 2\ **Last updated:** [February 21, 2019, 3:27pm UTC](https://discuss.elastic.co/t/search-in-object-array-with-multiple-conditions/169440 "2019-02-21T15:27:31Z")
Hi, I hope you can help me to find the solution, my problem is: I have a list of documents indexed in my index like this: { "title" : "document 1", "status" 2, "documentParts" : \[{ "partTitle": "part 1", "ty… --- ## [Does the term aggregation also return approximate value when doing sum/avg aggregation?](https://discuss.elastic.co/t/does-the-term-aggregation-also-return-approximate-value-when-doing-sum-avg-aggregation/169317)
**Author:** [@Kramer\_Li](https://discuss.elastic.co/u/Kramer_Li)\ **Replies:** 3\ **Last updated:** [February 21, 2019, 3:11pm UTC](https://discuss.elastic.co/t/does-the-term-aggregation-also-return-approximate-value-when-doing-sum-avg-aggregation/169317 "2019-02-21T15:11:54Z")
I understand that term aggregation will return approximate result regarding the doc count. But how about the metric aggregation after term aggregation? For example, sum/avg. Will these also be approximate too? --- ## [Node stats response structure doesn't look parser friendly](https://discuss.elastic.co/t/node-stats-response-structure-doesnt-look-parser-friendly/169443)
**Author:** [@MikhailMS](https://discuss.elastic.co/u/MikhailMS)\ **Replies:** 0\ **Last updated:** [February 21, 2019, 3:07pm UTC](https://discuss.elastic.co/t/node-stats-response-structure-doesnt-look-parser-friendly/169443 "2019-02-21T15:07:13Z")
Hello there, I recently started to dive into the metrics and stats I can get from ElasticSearch API, and came across the /\_nodes/stats endpoint from where I can get an extensive stats on all the nodes in my cluster. How… --- ## [Elasticsearch Cluster Addition of new node to existing cluster](https://discuss.elastic.co/t/elasticsearch-cluster-addition-of-new-node-to-existing-cluster/169431)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 0\ **Last updated:** [February 21, 2019, 2:23pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-addition-of-new-node-to-existing-cluster/169431 "2019-02-21T14:23:16Z")
Hi, I have installed Elasticsearch 6.4.0 through rpm on my 3 node cluster( one master and two data nodes). This is working well and fine. I have added a new node to this cluster but the method I employed is wrong is wh… --- ## [How can access nested fields with dots in pipeline processors](https://discuss.elastic.co/t/how-can-access-nested-fields-with-dots-in-pipeline-processors/169426)
**Author:** [@oliali](https://discuss.elastic.co/u/oliali)\ **Replies:** 0\ **Last updated:** [February 21, 2019, 2:08pm UTC](https://discuss.elastic.co/t/how-can-access-nested-fields-with-dots-in-pipeline-processors/169426 "2019-02-21T14:08:49Z")
Hi all, I'm trying to access nested fields which names have dots in my pipeline proccessors, but I don't know how This is my input json: { "customMsgAtts": { "http.response.status": "200", "http.response.info": "O… --- ## [Filtering queryStringQuery by exact match first (Nest)](https://discuss.elastic.co/t/filtering-querystringquery-by-exact-match-first-nest/169267)
**Author:** [@Abderrahmane\_Saadoun](https://discuss.elastic.co/u/Abderrahmane_Saadoun)\ **Replies:** 4\ **Last updated:** [February 21, 2019, 1:42pm UTC](https://discuss.elastic.co/t/filtering-querystringquery-by-exact-match-first-nest/169267 "2019-02-21T13:42:58Z")
Hello im new to elasticsearch and .net. im trying to filter my results and show exact match first. Here is my mapping "formationContinues": { "properties": { "dateObtention": { … --- ## [How to automate the Rollover index API in AWS Elastic search](https://discuss.elastic.co/t/how-to-automate-the-rollover-index-api-in-aws-elastic-search/169401)
**Author:** [@winny](https://discuss.elastic.co/u/winny)\ **Replies:** 4\ **Last updated:** [February 21, 2019, 1:08pm UTC](https://discuss.elastic.co/t/how-to-automate-the-rollover-index-api-in-aws-elastic-search/169401 "2019-02-21T13:08:19Z")
Hi, I am very new to elastic search. We are using ES to store messages coming from our App. Here is how my index looks like PUT message\_history\_index { "mappings":{ "notification\_history" : { "dynamic": "strict", … --- ## [Failed to compile inline script when remove field in pipeline](https://discuss.elastic.co/t/failed-to-compile-inline-script-when-remove-field-in-pipeline/168965)
**Author:** [@krrz](https://discuss.elastic.co/u/krrz)\ **Replies:** 1\ **Last updated:** [February 21, 2019, 11:44am UTC](https://discuss.elastic.co/t/failed-to-compile-inline-script-when-remove-field-in-pipeline/168965 "2019-02-21T11:44:48Z")
In elastic logs I have errors ElasticsearchParseException: Error updating pipeline with id (...) Too many dynamic script compilations within I am trying to change the configuration of the pipe and one thing is very… --- ## [Shaky Cross-Cluster Search between 6.5.1 and 5.6.2](https://discuss.elastic.co/t/shaky-cross-cluster-search-between-6-5-1-and-5-6-2/168518)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 8\ **Last updated:** [February 21, 2019, 12:03pm UTC](https://discuss.elastic.co/t/shaky-cross-cluster-search-between-6-5-1-and-5-6-2/168518 "2019-02-21T12:03:36Z")
Hi everyone, I originally intended to post the full content here, but discuss wouldn't allow me as the content was too long. Feeling that it is important to explain the full context, I decided to post it on SO instead a… --- ## [View Elasticsearch Docs offline](https://discuss.elastic.co/t/view-elasticsearch-docs-offline/169404)
**Author:** [@ordner](https://discuss.elastic.co/u/ordner)\ **Replies:** 0\ **Last updated:** [February 21, 2019, 11:46am UTC](https://discuss.elastic.co/t/view-elasticsearch-docs-offline/169404 "2019-02-21T11:46:13Z")
I posted that question here but got no replies so far: asciidoc - How to Build ElasticSearch Docs offline - Stack Overflow I need to use the docs (for ES and X-Pack) offline. But build\_docs --all fails with Command '\[… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1385) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1387)