# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1388

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1389

---

## [Average per day of week with time\_zone](https://discuss.elastic.co/t/average-per-day-of-week-with-time-zone/169268)

<div class="topic-metadata">

**Author:** [@srizzle](https://discuss.elastic.co/u/srizzle)\
**Replies:** 0\
**Last updated:** [February 20, 2019, 5:16pm UTC](https://discuss.elastic.co/t/average-per-day-of-week-with-time-zone/169268 "2019-02-20T17:16:02Z")

</div>

Hello, I have a message index with a 'date' and 'channelId' fields: POST message/\_doc { "channelId": "channel\_twitter", "date": "2018-03-08T14:01:23.385Z" } I need to create an aggregation that calculates the aver…

---

## [How can I get all key-value pairs for the object with Painless?](https://discuss.elastic.co/t/how-can-i-get-all-key-value-pairs-for-the-object-with-painless/169263)

<div class="topic-metadata">

**Author:** [@e328d7523d137d40a2ab](https://discuss.elastic.co/u/e328d7523d137d40a2ab)\
**Replies:** 0\
**Last updated:** [February 20, 2019, 4:56pm UTC](https://discuss.elastic.co/t/how-can-i-get-all-key-value-pairs-for-the-object-with-painless/169263 "2019-02-20T16:56:08Z")

</div>

So, I can get access to object values this way: doc\['field.KEY'\].value But how can I get all key-value pairs for the object? Like field.entrySet() ?

---

## [HELP with understanding of query](https://discuss.elastic.co/t/help-with-understanding-of-query/167429)

<div class="topic-metadata">

**Author:** [@DenEs](https://discuss.elastic.co/u/DenEs)\
**Replies:** 2\
**Last updated:** [February 20, 2019, 4:43pm UTC](https://discuss.elastic.co/t/help-with-understanding-of-query/167429 "2019-02-20T16:43:29Z")

</div>

Hello, can you help me understand, why simple query not working. I have a simple index with default settings: PUT my\_index/doc/1 { "path": "C:\\\\Windows\\\\system32\\\\cmd.exe" } Why the following query doesn't return an…

---

## [CCR vs Replicas](https://discuss.elastic.co/t/ccr-vs-replicas/169079)

<div class="topic-metadata">

**Author:** [@manoj\_faria](https://discuss.elastic.co/u/manoj_faria)\
**Replies:** 4\
**Last updated:** [February 20, 2019, 4:24pm UTC](https://discuss.elastic.co/t/ccr-vs-replicas/169079 "2019-02-20T16:24:28Z")

</div>

For which scenarios would it make sense to still account for "setting up replicas within a single cluster" as compared to "CCR" - given the constraint that "one is limited to a single data center". i.e. we are not making…

---

## [Using Cassandra in addition to Elasticsearch](https://discuss.elastic.co/t/using-cassandra-in-addition-to-elasticsearch/169172)

<div class="topic-metadata">

**Author:** [@krambambuli](https://discuss.elastic.co/u/krambambuli)\
**Replies:** 3\
**Last updated:** [February 20, 2019, 4:11pm UTC](https://discuss.elastic.co/t/using-cassandra-in-addition-to-elasticsearch/169172 "2019-02-20T16:11:51Z")

</div>

Hi there, as far as I understand Elastic has matured enough by now to be used as a primary data store. Data losses are getting less and less likely and the possibility of freezing indexes introduced in version 6.6 allow…

---

## [Getting all values from ElasticSQL in canvas](https://discuss.elastic.co/t/getting-all-values-from-elasticsql-in-canvas/169067)

<div class="topic-metadata">

**Author:** [@Miguel\_Plazas](https://discuss.elastic.co/u/Miguel_Plazas)\
**Replies:** 1\
**Last updated:** [February 20, 2019, 3:46pm UTC](https://discuss.elastic.co/t/getting-all-values-from-elasticsql-in-canvas/169067 "2019-02-20T15:46:26Z")

</div>

Hi, Currently i'm trying to plot a pie chart using canvas, my target is plot the percente (%) of a single column values, this is my closer aproach: filters | essql query="SELECT \* FROM demo\_finanzas\_21 WHERE contra…

---

## [RuntimeException while parsing doc file](https://discuss.elastic.co/t/runtimeexception-while-parsing-doc-file/168940)

<div class="topic-metadata">

**Author:** [@Kalpana\_Doraisamy](https://discuss.elastic.co/u/Kalpana_Doraisamy)\
**Replies:** 5\
**Last updated:** [February 20, 2019, 2:20pm UTC](https://discuss.elastic.co/t/runtimeexception-while-parsing-doc-file/168940 "2019-02-20T14:20:23Z")

</div>

Hi, I am getting the following exception when I try the PUT on kibana with ElasticSearch 6.6.0 with ingest-attachment-6.6.0 { "error": { "root\_cause": \[ { "type": "exception", "reason": "java.lang.IllegalArgument…

---

## [Fields selection in querystring search](https://discuss.elastic.co/t/fields-selection-in-querystring-search/169182)

<div class="topic-metadata">

**Author:** [@srikanthkadem](https://discuss.elastic.co/u/srikanthkadem)\
**Replies:** 2\
**Last updated:** [February 20, 2019, 2:09pm UTC](https://discuss.elastic.co/t/fields-selection-in-querystring-search/169182 "2019-02-20T14:09:26Z")

</div>

Hi , Can someone help me to write query for following scenario. I have 10 fields in index, I want to exclude 2 fields while searching . I tried with Source (with include & exclude) but it is excluding in returned data …

---

## [Mapper\_parsing\_exception for an income field range](https://discuss.elastic.co/t/mapper-parsing-exception-for-an-income-field-range/169223)

<div class="topic-metadata">

**Author:** [@parshvms](https://discuss.elastic.co/u/parshvms)\
**Replies:** 0\
**Last updated:** [February 20, 2019, 1:26pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-for-an-income-field-range/169223 "2019-02-20T13:26:54Z")

</div>

Hello, I have a field named "Income Bracket" that has values like "$50,000 - $100,000", "$50,000 and under", "$100,000 - $500,000" etc. I am trying to load the doc with this field and couple of others using logstash…

---

## [Error using Proximity Search on Discover](https://discuss.elastic.co/t/error-using-proximity-search-on-discover/169218)

<div class="topic-metadata">

**Author:** [@MLMarins](https://discuss.elastic.co/u/MLMarins)\
**Replies:** 0\
**Last updated:** [February 20, 2019, 1:15pm UTC](https://discuss.elastic.co/t/error-using-proximity-search-on-discover/169218 "2019-02-20T13:15:05Z")

</div>

Hi! I'm trying to create and test queries on Discover, but when using proximity searches I get this error message. For sake of simplicity, I tested the example provided by Elasticsearch: "fox quick"~5 Error Discover:…

---

## [Join mysql table with ealsticsearch index](https://discuss.elastic.co/t/join-mysql-table-with-ealsticsearch-index/169181)

<div class="topic-metadata">

**Author:** [@basanagouda](https://discuss.elastic.co/u/basanagouda)\
**Replies:** 1\
**Last updated:** [February 20, 2019, 10:58am UTC](https://discuss.elastic.co/t/join-mysql-table-with-ealsticsearch-index/169181 "2019-02-20T10:58:20Z")

</div>

Hi All, I want to join table in mysql database with elasticsearch index document. For ex: I want to fetch log related to user. Logs are store on elastic search unsed userlog dcoument, which is having userID attribute. …

---

## [Using params in a scripted similarity](https://discuss.elastic.co/t/using-params-in-a-scripted-similarity/169187)

<div class="topic-metadata">

**Author:** [@mattkirtley](https://discuss.elastic.co/u/mattkirtley)\
**Replies:** 0\
**Last updated:** [February 20, 2019, 10:57am UTC](https://discuss.elastic.co/t/using-params-in-a-scripted-similarity/169187 "2019-02-20T10:57:24Z")

</div>

I would like to create a scripted similarity in which I can pass parameters at query time. For example, I would like to pass the number of words in my query into the script so that the value can be used in my scripted s…

---

## [Java Timestamp to ElasticSearch Java REST Client 6.6](https://discuss.elastic.co/t/java-timestamp-to-elasticsearch-java-rest-client-6-6/167187)

<div class="topic-metadata">

**Author:** [@clouduser](https://discuss.elastic.co/u/clouduser)\
**Replies:** 3\
**Last updated:** [February 20, 2019, 10:52am UTC](https://discuss.elastic.co/t/java-timestamp-to-elasticsearch-java-rest-client-6-6/167187 "2019-02-20T10:52:26Z")

</div>

I have sample value "1547674800000" which I formated to Java.sql.timestamp and tryng to insert into ELastic Search via Java REST Client. Timestamp Value :1547674800000 I am getting error Exception in thread "main" ja…

---

## [Retrieve the last Documents from ElasticSearch in Ascending Order](https://discuss.elastic.co/t/retrieve-the-last-documents-from-elasticsearch-in-ascending-order/169137)

<div class="topic-metadata">

**Author:** [@donnadulcinea](https://discuss.elastic.co/u/donnadulcinea)\
**Replies:** 2\
**Last updated:** [February 20, 2019, 10:43am UTC](https://discuss.elastic.co/t/retrieve-the-last-documents-from-elasticsearch-in-ascending-order/169137 "2019-02-20T10:43:43Z")

</div>

I want to retrieve the last 3 documents from a set taking into account that the desired elements order is given by a field named created . To do that I'm exploiting the combination of sort + order mechanism, as also po…

---

## [Rally Benchmarking in Test Cluster-Download](https://discuss.elastic.co/t/rally-benchmarking-in-test-cluster-download/166240)

<div class="topic-metadata">

**Author:** [@Narendran\_Manickavas](https://discuss.elastic.co/u/Narendran_Manickavas)\
**Replies:** 5\
**Last updated:** [February 20, 2019, 10:31am UTC](https://discuss.elastic.co/t/rally-benchmarking-in-test-cluster-download/166240 "2019-02-20T10:31:55Z")

</div>

I am first time user of Rally tool for benchmarking. Our QA cluster and Prod cluster was already built and we have indices in them. 1)Rally configuration guide states it downloads elastic and runs a track. How does this…

---

## [Group by field and calculate average value for another field](https://discuss.elastic.co/t/group-by-field-and-calculate-average-value-for-another-field/169176)

<div class="topic-metadata">

**Author:** [@zaartix](https://discuss.elastic.co/u/zaartix)\
**Replies:** 0\
**Last updated:** [February 20, 2019, 10:11am UTC](https://discuss.elastic.co/t/group-by-field-and-calculate-average-value-for-another-field/169176 "2019-02-20T10:11:11Z")

</div>

Mapping: player\_id: int stat\_date: date some\_param: int I need to calculate average value for "some\_param" for all player\_id used row with max "stat\_date" in case of several rows with same player\_id. So i need average…

---

## [Doing math with fields values does not show decimals](https://discuss.elastic.co/t/doing-math-with-fields-values-does-not-show-decimals/168900)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 2\
**Last updated:** [February 20, 2019, 9:58am UTC](https://discuss.elastic.co/t/doing-math-with-fields-values-does-not-show-decimals/168900 "2019-02-20T09:58:22Z")

</div>

Hello, I am trying to calculate a percentage from two fields which in real life calculator gives a value of 0.332 but using sql queries I am only getting "0" therefore while multiplying with 100 instead of getting 33.2 …

---

## [Elasticsearch CCS: Will request be sent to all clusters when I specify the cluster?](https://discuss.elastic.co/t/elasticsearch-ccs-will-request-be-sent-to-all-clusters-when-i-specify-the-cluster/169161)

<div class="topic-metadata">

**Author:** [@luxiaoxun](https://discuss.elastic.co/u/luxiaoxun)\
**Replies:** 2\
**Last updated:** [February 20, 2019, 9:13am UTC](https://discuss.elastic.co/t/elasticsearch-ccs-will-request-be-sent-to-all-clusters-when-i-specify-the-cluster/169161 "2019-02-20T09:13:19Z")

</div>

ES version: 6.2.4 I have same index which named "index-aa" in both clusterA and clusterB. Normally I use the address of clusterA to do "cross cluster search" to get data from "index-aa", Use "\*:index-aa" to get data bo…

---

## [What does one index work and other index throw an error using sql queries](https://discuss.elastic.co/t/what-does-one-index-work-and-other-index-throw-an-error-using-sql-queries/168897)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 3\
**Last updated:** [February 20, 2019, 9:08am UTC](https://discuss.elastic.co/t/what-does-one-index-work-and-other-index-throw-an-error-using-sql-queries/168897 "2019-02-20T09:08:35Z")

</div>

Hello, I am trying to use sql query on some of the beats indexes and I have observed that some indices are showing up the queries propertly while others are throwing an error: For example: curl -XPOST "http://localhos…

---

## [Class cast exception in Rest High Level Client](https://discuss.elastic.co/t/class-cast-exception-in-rest-high-level-client/168011)

<div class="topic-metadata">

**Author:** [@ganil.89](https://discuss.elastic.co/u/ganil.89)\
**Replies:** 3\
**Last updated:** [February 20, 2019, 8:59am UTC](https://discuss.elastic.co/t/class-cast-exception-in-rest-high-level-client/168011 "2019-02-20T08:59:44Z")

</div>

I have an index with one of the field type is double. Using Transport client, I am able to get data from api. When migrated to Rest High Level Client, I am getting below error. org.elasticsearch.ElasticsearchExcepti…

---

## [Failed to register an accepted channel](https://discuss.elastic.co/t/failed-to-register-an-accepted-channel/169156)

<div class="topic-metadata">

**Author:** [@pietjepuk](https://discuss.elastic.co/u/pietjepuk)\
**Replies:** 1\
**Last updated:** [February 20, 2019, 8:50am UTC](https://discuss.elastic.co/t/failed-to-register-an-accepted-channel/169156 "2019-02-20T08:50:13Z")

</div>

Hi all, I'm running into this error message when running extensive queries from a python script and when adding / removing nodes. It seems to occur only when putting elasticsearch "to work". There is no problem when run…

---

## [How to search for a single object of array with 2 must](https://discuss.elastic.co/t/how-to-search-for-a-single-object-of-array-with-2-must/169162)

<div class="topic-metadata">

**Author:** [@peteratef](https://discuss.elastic.co/u/peteratef)\
**Replies:** 0\
**Last updated:** [February 20, 2019, 8:29am UTC](https://discuss.elastic.co/t/how-to-search-for-a-single-object-of-array-with-2-must/169162 "2019-02-20T08:29:33Z")

</div>

i am trying to get result with conditions that matched single object of an array for example 1-find tag truck whose color is red suppose to return the whole object, 2- find a tag truck whose color is pink suppose to …

---

## [Issue in scroll](https://discuss.elastic.co/t/issue-in-scroll/169144)

<div class="topic-metadata">

**Author:** [@ganil.89](https://discuss.elastic.co/u/ganil.89)\
**Replies:** 0\
**Last updated:** [February 20, 2019, 7:01am UTC](https://discuss.elastic.co/t/issue-in-scroll/169144 "2019-02-20T07:01:04Z")

</div>

Hi, I am using scroll functionality, after upgrading to ES 6, I am getting below warning. Elasticsearch-6.6.0-a9861f4 "Trying to create more than 500 scroll contexts will not be allowed in the next major version by def…

---

## [In Kibana, MetricBeat System overview dashboard fails to display data with timeout error message](https://discuss.elastic.co/t/in-kibana-metricbeat-system-overview-dashboard-fails-to-display-data-with-timeout-error-message/168034)

<div class="topic-metadata">

**Author:** [@ymishra](https://discuss.elastic.co/u/ymishra)\
**Replies:** 1\
**Last updated:** [February 20, 2019, 6:39am UTC](https://discuss.elastic.co/t/in-kibana-metricbeat-system-overview-dashboard-fails-to-display-data-with-timeout-error-message/168034 "2019-02-20T06:39:32Z")

</div>

Subject: In Kibana, MetricBeat System overview dashboard fails to display data with timeout error message Hi, I have the following Elasticsearch and Kibana setup on an Ubuntu box. OS: Ubuntu 16.10 (yakkety) Elasticse…

---

## [HTTPS for elasticsearch without xpack](https://discuss.elastic.co/t/https-for-elasticsearch-without-xpack/169058)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 2\
**Last updated:** [February 20, 2019, 5:45am UTC](https://discuss.elastic.co/t/https-for-elasticsearch-without-xpack/169058 "2019-02-20T05:45:40Z")

</div>

I am trying to enable https in elasticsearch without xpack . Are there any other way to achieve this. Can you briefly explain the same.

---

## [Searches using Search\_after timeout after three pages](https://discuss.elastic.co/t/searches-using-search-after-timeout-after-three-pages/169122)

<div class="topic-metadata">

**Author:** [@ishanip](https://discuss.elastic.co/u/ishanip)\
**Replies:** 0\
**Last updated:** [February 20, 2019, 2:20am UTC](https://discuss.elastic.co/t/searches-using-search-after-timeout-after-three-pages/169122 "2019-02-20T02:20:12Z")

</div>

Hello, I have about 117 million records in Elasticsearch and I am trying to fetch 2.5 million records using pagination. I tried to use the Scroll API and the Search\_After. Since I want to fetch such huge number of recor…

---

## [What Linux permissions or attributes does a user needs to install Elasticsearch and Kibana](https://discuss.elastic.co/t/what-linux-permissions-or-attributes-does-a-user-needs-to-install-elasticsearch-and-kibana/169110)

<div class="topic-metadata">

**Author:** [@Daniel\_Gonzalez1](https://discuss.elastic.co/u/Daniel_Gonzalez1)\
**Replies:** 2\
**Last updated:** [February 19, 2019, 10:20pm UTC](https://discuss.elastic.co/t/what-linux-permissions-or-attributes-does-a-user-needs-to-install-elasticsearch-and-kibana/169110 "2019-02-19T22:20:18Z")

</div>

What linux (Redhat, Suse, Ubuntu) permissions or attributes does a user needs to install Elasticsearch and Kibana? Regards!

---

## [Watches Failing-no accounts of type \[email\] configured](https://discuss.elastic.co/t/watches-failing-no-accounts-of-type-email-configured/169047)

<div class="topic-metadata">

**Author:** [@npalanis](https://discuss.elastic.co/u/npalanis)\
**Replies:** 1\
**Last updated:** [February 19, 2019, 9:56pm UTC](https://discuss.elastic.co/t/watches-failing-no-accounts-of-type-email-configured/169047 "2019-02-19T21:56:39Z")

</div>

Hi guys, Recently we've installed the watches into our machine, In which today we are facing the following issue that: Action-\>Sent\_email: ERROR Below is the error message found in the elasticsearch log file: java.lan…

---

## [Enabled = false, still indexing everything in kibana](https://discuss.elastic.co/t/enabled-false-still-indexing-everything-in-kibana/168894)

<div class="topic-metadata">

**Author:** [@vorandrew](https://discuss.elastic.co/u/vorandrew)\
**Replies:** 1\
**Last updated:** [February 19, 2019, 9:50pm UTC](https://discuss.elastic.co/t/enabled-false-still-indexing-everything-in-kibana/168894 "2019-02-19T21:50:47Z")

</div>

My template + What's being written Still have everything showing up and slowing interface Kibana index does not detect fields

---

## [Issue with custom analyzer](https://discuss.elastic.co/t/issue-with-custom-analyzer/169080)

<div class="topic-metadata">

**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\
**Replies:** 1\
**Last updated:** [February 19, 2019, 9:16pm UTC](https://discuss.elastic.co/t/issue-with-custom-analyzer/169080 "2019-02-19T21:16:53Z")

</div>

Hello Im having an issue while using this custom analyzer, what I want to do is to change a numeric range within an field and make it to string i.e: "0 =\> very\_negative", "1 =\> negative", "…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1387)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1389)
