# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1387

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1388

---

## [Ealstic search Query for python dict](https://discuss.elastic.co/t/ealstic-search-query-for-python-dict/169377)

<div class="topic-metadata">

**Author:** [@Vaibhav\_Sharma](https://discuss.elastic.co/u/Vaibhav_Sharma)\
**Replies:** 0\
**Last updated:** [February 21, 2019, 10:17am UTC](https://discuss.elastic.co/t/ealstic-search-query-for-python-dict/169377 "2019-02-21T10:17:01Z")

</div>

Hi I am forming query for a dict property (python). dict is : {'src': {u'zone\_uuid': \[u'Finance'\], u'address\_uuid': \[u'70933214-0d12-407c-9fb1-0a20870dd1bf'\], u'zone': \[u'Finance'\], u'address': \["\[u'host-11', u'1.1.1.1…

---

## [Setting field data cache for query performance](https://discuss.elastic.co/t/setting-field-data-cache-for-query-performance/169365)

<div class="topic-metadata">

**Author:** [@Rosmi](https://discuss.elastic.co/u/Rosmi)\
**Replies:** 2\
**Last updated:** [February 21, 2019, 10:13am UTC](https://discuss.elastic.co/t/setting-field-data-cache-for-query-performance/169365 "2019-02-21T10:13:53Z")

</div>

One of the elasticsearch search query with aggregation, is taking more than 10s and getting timed out in my application. The data set being aggregated is very huge .As part of tuning the search query,I am trying to set …

---

## [Analyze API](https://discuss.elastic.co/t/analyze-api/169371)

<div class="topic-metadata">

**Author:** [@TusharShahi](https://discuss.elastic.co/u/TusharShahi)\
**Replies:** 1\
**Last updated:** [February 21, 2019, 10:27am UTC](https://discuss.elastic.co/t/analyze-api/169371 "2019-02-21T10:27:59Z")

</div>

https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-analyze.html The documentation for the API says that the HTTP method to be used is GET, but I am not able to use it. The API instead works with a P…

---

## [Resource already exists exception throws after delete the index and create it again immediately](https://discuss.elastic.co/t/resource-already-exists-exception-throws-after-delete-the-index-and-create-it-again-immediately/169344)

<div class="topic-metadata">

**Author:** [@kunliu](https://discuss.elastic.co/u/kunliu)\
**Replies:** 1\
**Last updated:** [February 21, 2019, 10:13am UTC](https://discuss.elastic.co/t/resource-already-exists-exception-throws-after-delete-the-index-and-create-it-again-immediately/169344 "2019-02-21T10:13:07Z")

</div>

Hi Team, I am experiencing an intermittent issue. If I delete an index and create it again immediately , ES will throws resource\_already\_exists\_exception: \[48258390003131ec/mrHqvHQFSXWktcONr3iigA\] ElasticsearchStatusE…

---

## [No single metric view on ML job with scripted field](https://discuss.elastic.co/t/no-single-metric-view-on-ml-job-with-scripted-field/169321)

<div class="topic-metadata">

**Author:** [@nandrik](https://discuss.elastic.co/u/nandrik)\
**Replies:** 1\
**Last updated:** [February 21, 2019, 10:12am UTC](https://discuss.elastic.co/t/no-single-metric-view-on-ml-job-with-scripted-field/169321 "2019-02-21T10:12:21Z")

</div>

I've followed the instructions on how "Machine Learning on scripted field?" and have successfully set up an ML job where in the Anomaly Explorer I can see and verify visually the anomalies detected at the expected times. …

---

## [Set up and maintain ES as primary database](https://discuss.elastic.co/t/set-up-and-maintain-es-as-primary-database/169349)

<div class="topic-metadata">

**Author:** [@freaka](https://discuss.elastic.co/u/freaka)\
**Replies:** 2\
**Last updated:** [February 21, 2019, 9:39am UTC](https://discuss.elastic.co/t/set-up-and-maintain-es-as-primary-database/169349 "2019-02-21T09:39:04Z")

</div>

Hello, the chosen database for our current project is Elasticsearch as it is handy enough for JSON documents and our project involves only JSON documents (data-wise). I'm a bit concerned because no one in the company i…

---

## [Pushing logs from Minio to ELK Stack to Kibana](https://discuss.elastic.co/t/pushing-logs-from-minio-to-elk-stack-to-kibana/169353)

<div class="topic-metadata">

**Author:** [@Hanrahank](https://discuss.elastic.co/u/Hanrahank)\
**Replies:** 0\
**Last updated:** [February 21, 2019, 9:20am UTC](https://discuss.elastic.co/t/pushing-logs-from-minio-to-elk-stack-to-kibana/169353 "2019-02-21T09:20:49Z")

</div>

I've been trying to find ways of pushing logs that are stored in Minio through ELK stack to be viewed in Kibana. Does anyone know if there is a way of this to be done in Kubernetes?

---

## [How to set size limit in GET query](https://discuss.elastic.co/t/how-to-set-size-limit-in-get-query/169338)

<div class="topic-metadata">

**Author:** [@smidev11](https://discuss.elastic.co/u/smidev11)\
**Replies:** 2\
**Last updated:** [February 21, 2019, 9:17am UTC](https://discuss.elastic.co/t/how-to-set-size-limit-in-get-query/169338 "2019-02-21T09:17:22Z")

</div>

I observed that if my index contains say 6 entry(document) and if I run the query with "size" == 25000 , I am getting following error \> Result window is too large, from + size must be less than or equal to: \[10000\] but…

---

## [Es7 windows can't start （running error ）](https://discuss.elastic.co/t/es7-windows-cant-start-running-error/169346)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 1\
**Last updated:** [February 21, 2019, 8:51am UTC](https://discuss.elastic.co/t/es7-windows-cant-start-running-error/169346 "2019-02-21T08:51:15Z")

</div>

es7 in windows 7 x86\_64 can't start with out Caused by: java.io.FileNotFoundException: \\\\.\\pipe\\controller\_log\_6112 \[2019-02-21T15:49:23,417\]\[INFO \]\[o.e.e.NodeEnvironment \] \[node-1\] using \[1\] data paths, mounts \[\[job…

---

## [Curator - suppress urllib3 SSL warning](https://discuss.elastic.co/t/curator-suppress-urllib3-ssl-warning/169239)

<div class="topic-metadata">

**Author:** [@Jasper\_Nygaard](https://discuss.elastic.co/u/Jasper_Nygaard)\
**Replies:** 2\
**Last updated:** [February 21, 2019, 8:02am UTC](https://discuss.elastic.co/t/curator-suppress-urllib3-ssl-warning/169239 "2019-02-21T08:02:08Z")

</div>

Hi Got an ES cluster with self signed certificates and using Curator to do maintenance. Can anyone either: tell me where I can suppress Unverified HTTPS request warning from urllib3 - I'm running Curator on Windows an…

---

## [New data not showing when addning new data to already created elasticsearch indices](https://discuss.elastic.co/t/new-data-not-showing-when-addning-new-data-to-already-created-elasticsearch-indices/169343)

<div class="topic-metadata">

**Author:** [@Amitittech](https://discuss.elastic.co/u/Amitittech)\
**Replies:** 1\
**Last updated:** [February 21, 2019, 7:51am UTC](https://discuss.elastic.co/t/new-data-not-showing-when-addning-new-data-to-already-created-elasticsearch-indices/169343 "2019-02-21T07:51:47Z")

</div>

Hi, I am using elasticsearch 6.6. After successfully using by 10 days, i am getting now an issue with the elasticsearch indices. I am adding new data to to my already created index by bulk and it is implemented success…

---

## [How to create a table with cummlative sum and display only final value for given data histogram](https://discuss.elastic.co/t/how-to-create-a-table-with-cummlative-sum-and-display-only-final-value-for-given-data-histogram/169336)

<div class="topic-metadata">

**Author:** [@balamurali1](https://discuss.elastic.co/u/balamurali1)\
**Replies:** 1\
**Last updated:** [February 21, 2019, 7:45am UTC](https://discuss.elastic.co/t/how-to-create-a-table-with-cummlative-sum-and-display-only-final-value-for-given-data-histogram/169336 "2019-02-21T07:45:08Z")

</div>

Hi , I am looking an option how to create a table with cumulative sum displayed over a date histogram but only the final value needs to be displayed I have used the table visualization and used cumulative sum and used …

---

## [Does stopping snapshots delete all the indices used?](https://discuss.elastic.co/t/does-stopping-snapshots-delete-all-the-indices-used/169341)

<div class="topic-metadata">

**Author:** [@gyau](https://discuss.elastic.co/u/gyau)\
**Replies:** 0\
**Last updated:** [February 21, 2019, 7:11am UTC](https://discuss.elastic.co/t/does-stopping-snapshots-delete-all-the-indices-used/169341 "2019-02-21T07:11:26Z")

</div>

I read something here that says: Any currently running restore operation can be canceled by deleting indices that are being restored. Please note that data for all deleted indices will be removed from the cluster as a …

---

## [Dockerised elasticsearch cluster in different hosts](https://discuss.elastic.co/t/dockerised-elasticsearch-cluster-in-different-hosts/169163)

<div class="topic-metadata">

**Author:** [@root23](https://discuss.elastic.co/u/root23)\
**Replies:** 6\
**Last updated:** [February 21, 2019, 7:02am UTC](https://discuss.elastic.co/t/dockerised-elasticsearch-cluster-in-different-hosts/169163 "2019-02-21T07:02:16Z")

</div>

Hi, I am trying to build a centralized monitoring and logging system using ELK stack. I am trying to create a dockerised elaticsearch cluster hosted on 2 hosts. There are 2 elasticsearch nodes in host1 and 1 node in hos…

---

## [Datafeed error - No mapping found for \[timestamp\] in order to sort on](https://discuss.elastic.co/t/datafeed-error-no-mapping-found-for-timestamp-in-order-to-sort-on/169189)

<div class="topic-metadata">

**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\
**Replies:** 2\
**Last updated:** [February 21, 2019, 6:37am UTC](https://discuss.elastic.co/t/datafeed-error-no-mapping-found-for-timestamp-in-order-to-sort-on/169189 "2019-02-21T06:37:28Z")

</div>

Hi - I'm starting out with Machine Learning by following the video @ Machine learning tutorial. However , I keep getting the error below. Datafeed is encountering errors extracting data: \[test\] Search request returned …

---

## [Sort by \_id field](https://discuss.elastic.co/t/sort-by-id-field/169017)

<div class="topic-metadata">

**Author:** [@MillQK](https://discuss.elastic.co/u/MillQK)\
**Replies:** 2\
**Last updated:** [February 21, 2019, 6:35am UTC](https://discuss.elastic.co/t/sort-by-id-field/169017 "2019-02-21T06:35:57Z")

</div>

Hello! I want to use search after to process all documents but document hasn't any unique field, only \_id. That's why I want use \_id for sorting. But there are some important note in search after docs about my case. I ha…

---

## [How to use Index pattern using REST API](https://discuss.elastic.co/t/how-to-use-index-pattern-using-rest-api/168978)

<div class="topic-metadata">

**Author:** [@smidev11](https://discuss.elastic.co/u/smidev11)\
**Replies:** 4\
**Last updated:** [February 21, 2019, 5:57am UTC](https://discuss.elastic.co/t/how-to-use-index-pattern-using-rest-api/168978 "2019-02-21T05:57:41Z")

</div>

Hi All, How to use Index pattern to search from multiple tables using low level rest client api. E.g , Lets assume I have following index names as: Index\_2019\_1 Index\_2019\_2 Index\_2018\_1 index\_2018\_2 Now I want get …

---

## [Curator is not working after enable TLS/SSL in 5.6 version](https://discuss.elastic.co/t/curator-is-not-working-after-enable-tls-ssl-in-5-6-version/168813)

<div class="topic-metadata">

**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\
**Replies:** 1\
**Last updated:** [February 21, 2019, 3:31am UTC](https://discuss.elastic.co/t/curator-is-not-working-after-enable-tls-ssl-in-5-6-version/168813 "2019-02-21T03:31:06Z")

</div>

All, curator snapshot backups are not working after enable TLS/SSL and we see below errors when we test with dry run Traceback (most recent call last): File "/bin/curator", line 11, in \<module\> sys.exit(cli()) …

---

## [Pagination on a multi-aggregated result](https://discuss.elastic.co/t/pagination-on-a-multi-aggregated-result/169313)

<div class="topic-metadata">

**Author:** [@premieredigital](https://discuss.elastic.co/u/premieredigital)\
**Replies:** 0\
**Last updated:** [February 21, 2019, 1:12am UTC](https://discuss.elastic.co/t/pagination-on-a-multi-aggregated-result/169313 "2019-02-21T01:12:51Z")

</div>

I've also posted this question on StackOverflow (with a bounty) here. But here is the same question in the discussion board: As far as I'm aware, there isn't a way to do something like the following in Elasticsearch: S…

---

## [Could not cast or convert from System.String to Nest.CompletionField](https://discuss.elastic.co/t/could-not-cast-or-convert-from-system-string-to-nest-completionfield/169304)

<div class="topic-metadata">

**Author:** [@elastic\_man](https://discuss.elastic.co/u/elastic_man)\
**Replies:** 0\
**Last updated:** [February 20, 2019, 11:22pm UTC](https://discuss.elastic.co/t/could-not-cast-or-convert-from-system-string-to-nest-completionfield/169304 "2019-02-20T23:22:38Z")

</div>

Elasticsearch.Net and Nest 6.4.2 I am trying to implement completion suggestor in ASP.NET. However, I am getting an exception error Error converting value "200 1/2 E 111TH PL" to type 'Nest.CompletionField'. Path sug…

---

## [Can't take a snapshot of the index](https://discuss.elastic.co/t/cant-take-a-snapshot-of-the-index/169118)

<div class="topic-metadata">

**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\
**Replies:** 2\
**Last updated:** [February 20, 2019, 10:29pm UTC](https://discuss.elastic.co/t/cant-take-a-snapshot-of-the-index/169118 "2019-02-20T22:29:47Z")

</div>

I am on ES 2.1.2. I am using the snapshot tool from kopf UI, and I have been able to take snapshots of other indices but I can't take a snapshot of this particular index, it has one shard that keeps failing: One of the…

---

## [If Primary and Replica shards both fail how to recover?](https://discuss.elastic.co/t/if-primary-and-replica-shards-both-fail-how-to-recover/168636)

<div class="topic-metadata">

**Author:** [@jwlee](https://discuss.elastic.co/u/jwlee)\
**Replies:** 5\
**Last updated:** [February 20, 2019, 9:45pm UTC](https://discuss.elastic.co/t/if-primary-and-replica-shards-both-fail-how-to-recover/168636 "2019-02-20T21:45:01Z")

</div>

I tried to find a relevant document but I could not get the answer. Let's say there are primary shard and replica shard. I believe if the primary shard goes down, the replica shard promoted to the primary shard and recr…

---

## [Curator\_CLI not logging arguments](https://discuss.elastic.co/t/curator-cli-not-logging-arguments/169279)

<div class="topic-metadata">

**Author:** [@snovak](https://discuss.elastic.co/u/snovak)\
**Replies:** 1\
**Last updated:** [February 20, 2019, 7:52pm UTC](https://discuss.elastic.co/t/curator-cli-not-logging-arguments/169279 "2019-02-20T19:52:08Z")

</div>

We are trying to debug a script that uses curator\_cli. We thought that it wasn't working because in the log files we were seeing this: 2019-02-20 11:17:53,690 INFO DRY-RUN MODE. No changes will be made. 2019-02-2…

---

## [Reindexing drops the field datatypes](https://discuss.elastic.co/t/reindexing-drops-the-field-datatypes/169241)

<div class="topic-metadata">

**Author:** [@Praneet\_Khandelwal](https://discuss.elastic.co/u/Praneet_Khandelwal)\
**Replies:** 2\
**Last updated:** [February 20, 2019, 6:51pm UTC](https://discuss.elastic.co/t/reindexing-drops-the-field-datatypes/169241 "2019-02-20T18:51:03Z")

</div>

I am trying to reindex data in elasticsearch. In our case, there are a lot of indexed fields (~6000) and because all of them are indexed, ES has already determined the datatypes for quite a few of them. In the new indic…

---

## [Pipeline Grok Expressions](https://discuss.elastic.co/t/pipeline-grok-expressions/169174)

<div class="topic-metadata">

**Author:** [@Sharad\_Ananth](https://discuss.elastic.co/u/Sharad_Ananth)\
**Replies:** 9\
**Last updated:** [February 20, 2019, 6:45pm UTC](https://discuss.elastic.co/t/pipeline-grok-expressions/169174 "2019-02-20T18:45:36Z")

</div>

I have a logline : 172.17.60.26 - - \[14/Feb/2019:01:50:47 -0000\] "GET http://live-paytv.mobitv.com/mm/dash/live/19033/LIVESERVICE\_2403/V5000\_W/258351504.m4s http/1.1" 200 3696282 200 3696282 0 0 591 579 674 566 1.695 1.…

---

## [Help me with a Query pls ):](https://discuss.elastic.co/t/help-me-with-a-query-pls/169275)

<div class="topic-metadata">

**Author:** [@Diego\_Lucas\_Martinez](https://discuss.elastic.co/u/Diego_Lucas_Martinez)\
**Replies:** 2\
**Last updated:** [February 20, 2019, 6:34pm UTC](https://discuss.elastic.co/t/help-me-with-a-query-pls/169275 "2019-02-20T18:34:12Z")

</div>

Hi evryone! am trying to do a Query to search my document. This is the document that am trying to search: { "took" : 0, "timed\_out" : false, "\_shards" : { "total" : 5, "successful" : 5, "skipped" : 0, …

---

## [How can I see the contents of the index files .pos and dvd](https://discuss.elastic.co/t/how-can-i-see-the-contents-of-the-index-files-pos-and-dvd/169272)

<div class="topic-metadata">

**Author:** [@fconcha](https://discuss.elastic.co/u/fconcha)\
**Replies:** 1\
**Last updated:** [February 20, 2019, 6:33pm UTC](https://discuss.elastic.co/t/how-can-i-see-the-contents-of-the-index-files-pos-and-dvd/169272 "2019-02-20T18:33:04Z")

</div>

Hello good afternoon, How can I see the contents of the .pos .dvd extension files that are within the elasticsearch indexes? I have to analyze the content of the text, but I only see encrypted information. Did you see…

---

## [Remove index.blocks.read\_only\_allow\_delete blocks when nodes recover from high disk utilization](https://discuss.elastic.co/t/remove-index-blocks-read-only-allow-delete-blocks-when-nodes-recover-from-high-disk-utilization/169270)

<div class="topic-metadata">

**Author:** [@Bukhtawar\_Khan](https://discuss.elastic.co/u/Bukhtawar_Khan)\
**Replies:** 0\
**Last updated:** [February 20, 2019, 5:38pm UTC](https://discuss.elastic.co/t/remove-index-blocks-read-only-allow-delete-blocks-when-nodes-recover-from-high-disk-utilization/169270 "2019-02-20T17:38:36Z")

</div>

As a part of applying flood stage watermark we apply a block index.blocks.read\_only\_allow\_delete blocks which is expected to be removed manually. Can't this be automated to unblock all indices and re-evaluate the block l…

---

## [Retain log files on demand](https://discuss.elastic.co/t/retain-log-files-on-demand/169269)

<div class="topic-metadata">

**Author:** [@Nikolay\_Petrov](https://discuss.elastic.co/u/Nikolay_Petrov)\
**Replies:** 0\
**Last updated:** [February 20, 2019, 5:29pm UTC](https://discuss.elastic.co/t/retain-log-files-on-demand/169269 "2019-02-20T17:29:20Z")

</div>

Hi, could you please help with this. I've tried many scenario, the current one is: ... appender.rolling.type = RollingFile appender.rolling.name = rolling appender.rolling.fileName = ${sys:es.logs.base\_path}${sys:…

---

## [Exact match search with permutation of words](https://discuss.elastic.co/t/exact-match-search-with-permutation-of-words/165643)

<div class="topic-metadata">

**Author:** [@ankur\_singla](https://discuss.elastic.co/u/ankur_singla)\
**Replies:** 18\
**Last updated:** [February 20, 2019, 5:20pm UTC](https://discuss.elastic.co/t/exact-match-search-with-permutation-of-words/165643 "2019-02-20T17:20:57Z")

</div>

Hi guys I am kinda stuck with a problem in elasticsearch. I want to apply exact match search with a permutation of words. Suppose I have a doc with text "paper boat" & I want to apply exact search in such a way that it…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1386)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1388)
