# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1393 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1394 --- ## [Search doesn't work for email address, return 0 hits](https://discuss.elastic.co/t/search-doesnt-work-for-email-address-return-0-hits/168381)
**Author:** [@sachin\_chavan](https://discuss.elastic.co/u/sachin_chavan)\ **Replies:** 2\ **Last updated:** [February 15, 2019, 9:13pm UTC](https://discuss.elastic.co/t/search-doesnt-work-for-email-address-return-0-hits/168381 "2019-02-15T21:13:00Z")
I am using Elasticsearch version 6.4 on AWS my\_index data from which I will be searching { "snapshot": { "last\_name": "Chavan", "first\_name": "Sachin", "email\_id": "sachin@mail.com", "user\_status": "active\_user" … --- ## [Indexing documents with nested fields](https://discuss.elastic.co/t/indexing-documents-with-nested-fields/168541)
**Author:** [@Nikhil\_sharma1](https://discuss.elastic.co/u/Nikhil_sharma1)\ **Replies:** 3\ **Last updated:** [February 15, 2019, 8:59pm UTC](https://discuss.elastic.co/t/indexing-documents-with-nested-fields/168541 "2019-02-15T20:59:54Z")
Hi, We have setup ELK infra on AWS. I would like to understand is there any limitation from ELK side to the numbers of fields that can be indexed? As, our schema has a Map fields and it has many unique fields in it, the… --- ## [ElasticSearch Docker - To DAEMON or not to DAEMON?](https://discuss.elastic.co/t/elasticsearch-docker-to-daemon-or-not-to-daemon/168481)
**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\ **Replies:** 4\ **Last updated:** [February 15, 2019, 8:57pm UTC](https://discuss.elastic.co/t/elasticsearch-docker-to-daemon-or-not-to-daemon/168481 "2019-02-15T20:57:18Z")
Hello - We'er considering moving our current EC2 Based Stack to Docker. High level topography consists of 5 EC2 Instances with all of them acting as Master/Data Nodes. We have two More Coordinating nodes that direct tr… --- ## [Bypassing some queries for some indices](https://discuss.elastic.co/t/bypassing-some-queries-for-some-indices/167835)
**Author:** [@Pradeep\_Bhatt](https://discuss.elastic.co/u/Pradeep_Bhatt)\ **Replies:** 1\ **Last updated:** [February 15, 2019, 8:03pm UTC](https://discuss.elastic.co/t/bypassing-some-queries-for-some-indices/167835 "2019-02-15T20:03:10Z")
Hi All, We have one alias defined for our 100 indices. For some indices we want one query to execute and for some others we want some other query We used \_index field for this in following way { "bool": { "filte… --- ## [Performance - Querying against \_id versus \_source content](https://discuss.elastic.co/t/performance-querying-against-id-versus-source-content/167862)
**Author:** [@freaka](https://discuss.elastic.co/u/freaka)\ **Replies:** 1\ **Last updated:** [February 15, 2019, 7:57pm UTC](https://discuss.elastic.co/t/performance-querying-against-id-versus-source-content/167862 "2019-02-15T19:57:01Z")
Hi, I have read that indexing is faster when no id is specified (elasticsearch does not have to check for duplicate). However, is it relevant to index with a chosen \_id if this document has to be retrieved multiple tim… --- ## [Rollups - Viewing Live and Rollupdata](https://discuss.elastic.co/t/rollups-viewing-live-and-rollupdata/167966)
**Author:** [@luze](https://discuss.elastic.co/u/luze)\ **Replies:** 1\ **Last updated:** [February 15, 2019, 7:51pm UTC](https://discuss.elastic.co/t/rollups-viewing-live-and-rollupdata/167966 "2019-02-15T19:51:02Z")
Hi, i really like the rollup feature and i'd like to mix rollup and live data (to fill the gap until data is rolled up) in kibana visualizations. However my rollup data looks different, because every term in my original… --- ## [Post filter not returning expected results](https://discuss.elastic.co/t/post-filter-not-returning-expected-results/167414)
**Author:** [@shubh235](https://discuss.elastic.co/u/shubh235)\ **Replies:** 1\ **Last updated:** [February 15, 2019, 7:47pm UTC](https://discuss.elastic.co/t/post-filter-not-returning-expected-results/167414 "2019-02-15T19:47:53Z")
Hi, I want to filter the stats returned by the extended stats aggregation. I basically need to filter out all values of avg that are 0. Below is the query on which I need to apply the post filter but I am not sure how … --- ## [Looking for max like bucket aggregation](https://discuss.elastic.co/t/looking-for-max-like-bucket-aggregation/167806)
**Author:** [@krambambuli](https://discuss.elastic.co/u/krambambuli)\ **Replies:** 1\ **Last updated:** [February 15, 2019, 7:35pm UTC](https://discuss.elastic.co/t/looking-for-max-like-bucket-aggregation/167806 "2019-02-15T19:35:47Z")
Hi everyone, I'm quite new to Elastic and not too familiar yet with query DSL in Elastic yet. I have an Elastic database with documents containing vehicle's position at various times. Due to bad reception some documents… --- ## [MetricBeat - Kubernetes Daemonset](https://discuss.elastic.co/t/metricbeat-kubernetes-daemonset/168625)
**Author:** [@Antony\_A](https://discuss.elastic.co/u/Antony_A)\ **Replies:** 0\ **Last updated:** [February 15, 2019, 5:44pm UTC](https://discuss.elastic.co/t/metricbeat-kubernetes-daemonset/168625 "2019-02-15T17:44:54Z")
Hi, I am relative new to elastic metricbeat. I have deployed the configmap for module and config with the metricbeat daemonset. On the configmap\_module, I am trying to point to the localhost kubelet. Unfortunately I d… --- ## [What kind of correlation rules is possible create on ES?](https://discuss.elastic.co/t/what-kind-of-correlation-rules-is-possible-create-on-es/168623)
**Author:** [@William\_Takahashi](https://discuss.elastic.co/u/William_Takahashi)\ **Replies:** 0\ **Last updated:** [February 15, 2019, 5:28pm UTC](https://discuss.elastic.co/t/what-kind-of-correlation-rules-is-possible-create-on-es/168623 "2019-02-15T17:28:28Z")
Hi, I need monitor and correlate alarms. Is it possible create this kind of correlations: deduplication Problem/resolution correlation Work in real-time and time window grouping Topology-based correlation Identify seq… --- ## [Curator - Skipping action "alias" due to empty list: \ **Author:** [@pbabik](https://discuss.elastic.co/u/pbabik)\ **Replies:** 10\ **Last updated:** [February 15, 2019, 5:04pm UTC](https://discuss.elastic.co/t/curator-skipping-action-alias-due-to-empty-list-class-curator-exceptions-noindices/168259 "2019-02-15T17:04:37Z") Hello, after we upgraded to 6.2.4 we are having really odd issue only on 1 production cluster. I'm getting empty list of indices where there are clearly indices which suits the condition. Whats more it works on test env… --- ## [Client-only routing specified but no client nodes with HTTP-enabled were found in the cluster](https://discuss.elastic.co/t/client-only-routing-specified-but-no-client-nodes-with-http-enabled-were-found-in-the-cluster/167466)
**Author:** [@saklar](https://discuss.elastic.co/u/saklar)\ **Replies:** 3\ **Last updated:** [February 15, 2019, 4:59pm UTC](https://discuss.elastic.co/t/client-only-routing-specified-but-no-client-nodes-with-http-enabled-were-found-in-the-cluster/167466 "2019-02-15T16:59:55Z")
Hİ, We have elasticsearch 6.5.4 version and Cloudera 5.4.7-1 version. We installed elasticsearch-hadoop-2.1.1.jar to connect between hdfs and elasticsearch. Then the hive table below were created to fetch the data from… --- ## [What minimal h/w requirements my laptop should have?](https://discuss.elastic.co/t/what-minimal-h-w-requirements-my-laptop-should-have/168383)
**Author:** [@tmtanzeel](https://discuss.elastic.co/u/tmtanzeel)\ **Replies:** 3\ **Last updated:** [February 15, 2019, 3:37pm UTC](https://discuss.elastic.co/t/what-minimal-h-w-requirements-my-laptop-should-have/168383 "2019-02-15T15:37:11Z")
I want to learn EFK stack for college mini project, not very complex. --- ## [UAX29 URL Email Tokenizer](https://discuss.elastic.co/t/uax29-url-email-tokenizer/168304)
**Author:** [@avencar](https://discuss.elastic.co/u/avencar)\ **Replies:** 2\ **Last updated:** [February 15, 2019, 3:26pm UTC](https://discuss.elastic.co/t/uax29-url-email-tokenizer/168304 "2019-02-15T15:26:38Z")
I am wondering if there are plans to implement a more advanced version of the current URL Email Tokenizer, such as the UAX29 one provided by solr (https://lucene.apache.org/solr/guide/7\_3/tokenizers.html#uax29-url-email-… --- ## [Access nested array objects in script query](https://discuss.elastic.co/t/access-nested-array-objects-in-script-query/168461)
**Author:** [@Yoran\_Petrovic](https://discuss.elastic.co/u/Yoran_Petrovic)\ **Replies:** 2\ **Last updated:** [February 15, 2019, 1:59pm UTC](https://discuss.elastic.co/t/access-nested-array-objects-in-script-query/168461 "2019-02-15T13:59:26Z")
Hi, I'm having some trouble with a nested scripted query. I'll just quickly explain what I'm trying to achieve: I have objects like: { "metaData": { "meta": \[ { "key": "width", … --- ## [Data path for multiple nodes on single server](https://discuss.elastic.co/t/data-path-for-multiple-nodes-on-single-server/168569)
**Author:** [@SPR0STO](https://discuss.elastic.co/u/SPR0STO)\ **Replies:** 5\ **Last updated:** [February 15, 2019, 1:54pm UTC](https://discuss.elastic.co/t/data-path-for-multiple-nodes-on-single-server/168569 "2019-02-15T13:54:01Z")
Hello I want to the up "Elasticsearch" cluster with multiply nodes (3 or more) on a single server. Can I use for all of my data nodes one directory? : path.data: /var/lib/elasticsearch What risks at this case? How n… --- ## [Understanding Percolator query extraction](https://discuss.elastic.co/t/understanding-percolator-query-extraction/168465)
**Author:** [@psylone](https://discuss.elastic.co/u/psylone)\ **Replies:** 1\ **Last updated:** [February 15, 2019, 12:59pm UTC](https://discuss.elastic.co/t/understanding-percolator-query-extraction/168465 "2019-02-15T12:59:59Z")
Hi, all! Fighting with performance of the percolate query. The first thing I need to understand is the conditions when terms can be extracted from the query during the indexing phase. What I need to understand is whet… --- ## [Timezone adjustments in query](https://discuss.elastic.co/t/timezone-adjustments-in-query/168587)
**Author:** [@Darshan\_Parab](https://discuss.elastic.co/u/Darshan_Parab)\ **Replies:** 0\ **Last updated:** [February 15, 2019, 12:38pm UTC](https://discuss.elastic.co/t/timezone-adjustments-in-query/168587 "2019-02-15T12:38:15Z")
I wrote a query to fetch data from and index and aggregate it using date\_histogram aggregation. I'm working in IST (GMT+5.30) Timezone. I applied a filter to get events occurred today using "now/d" expression. Apparantl… --- ## [How to limit query to time subset of index?](https://discuss.elastic.co/t/how-to-limit-query-to-time-subset-of-index/168579)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 1\ **Last updated:** [February 15, 2019, 12:26pm UTC](https://discuss.elastic.co/t/how-to-limit-query-to-time-subset-of-index/168579 "2019-02-15T12:26:35Z")
I want to query against the last hour of a given index - or most recent hour of data. Is this possible? More specifically - at present Im doing something akin to "select avg(some.column), some.other.column from index-da… --- ## [Choosing between datatypes](https://discuss.elastic.co/t/choosing-between-datatypes/168583)
**Author:** [@gued](https://discuss.elastic.co/u/gued)\ **Replies:** 0\ **Last updated:** [February 15, 2019, 12:19pm UTC](https://discuss.elastic.co/t/choosing-between-datatypes/168583 "2019-02-15T12:19:39Z")
Hello! I have recently started using elasticsearch, and my data is a json file containing three other json-files. Heres my question: How should I choose a correct doc\_type? The documentation states that "nested" types w… --- ## [Elastic Search Integration With MapR](https://discuss.elastic.co/t/elastic-search-integration-with-mapr/168574)
**Author:** [@Richa\_Hasija](https://discuss.elastic.co/u/Richa_Hasija)\ **Replies:** 1\ **Last updated:** [February 15, 2019, 11:55am UTC](https://discuss.elastic.co/t/elastic-search-integration-with-mapr/168574 "2019-02-15T11:55:11Z")
How to integrate Elastic search with MapR File system for storage and indexing can be done through Elastic search(Elastic Stack) --- ## [Why to stop ML during rolling upgrade?](https://discuss.elastic.co/t/why-to-stop-ml-during-rolling-upgrade/167929)
**Author:** [@vb4t](https://discuss.elastic.co/u/vb4t)\ **Replies:** 3\ **Last updated:** [February 15, 2019, 11:49am UTC](https://discuss.elastic.co/t/why-to-stop-ml-during-rolling-upgrade/167929 "2019-02-15T11:49:06Z")
The docs for rolling upgrade says " Stop any machine learning jobs that are running" without any explanation why. Could somebody please explain why this step is required? --- ## [DB in Kibana](https://discuss.elastic.co/t/db-in-kibana/166871)
**Author:** [@manju134](https://discuss.elastic.co/u/manju134)\ **Replies:** 9\ **Last updated:** [February 15, 2019, 11:32am UTC](https://discuss.elastic.co/t/db-in-kibana/166871 "2019-02-15T11:32:40Z")
Hi, I have a client actually hosted in db 00580 but in Kibana it is logged as 0516 is there anything like listener. As one my colleague found out it is behind a listener. Please help on this. --- ## [Elastic-search maintenance in Azure](https://discuss.elastic.co/t/elastic-search-maintenance-in-azure/168558)
**Author:** [@Ramasami](https://discuss.elastic.co/u/Ramasami)\ **Replies:** 0\ **Last updated:** [February 15, 2019, 10:01am UTC](https://discuss.elastic.co/t/elastic-search-maintenance-in-azure/168558 "2019-02-15T10:01:36Z")
Hey! I am new to elastic search. I have set up an elastic cluster in azure using “Elastic Stack - Elasticsearch, Kibana and Logstash” resource. I had a few questions related to this approach. What happens when a node f… --- ## [How to compare two aggregation output in watcher in condition](https://discuss.elastic.co/t/how-to-compare-two-aggregation-output-in-watcher-in-condition/168388)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 2\ **Last updated:** [February 15, 2019, 9:32am UTC](https://discuss.elastic.co/t/how-to-compare-two-aggregation-output-in-watcher-in-condition/168388 "2019-02-15T09:32:03Z")
I need to compare two aggregation queries output array n watcher condition, i have used chain input to execute my queries . not properly getting how can compare those two bucket arrays in watcher condtion. Could i get … --- ## [Index lifecycle management at Elasticsearch 6.6.0](https://discuss.elastic.co/t/index-lifecycle-management-at-elasticsearch-6-6-0/168429)
**Author:** [@YanekR](https://discuss.elastic.co/u/YanekR)\ **Replies:** 1\ **Last updated:** [February 15, 2019, 9:31am UTC](https://discuss.elastic.co/t/index-lifecycle-management-at-elasticsearch-6-6-0/168429 "2019-02-15T09:31:05Z")
Hi All, Could you please help me as I am not able to find proper solution. I do have properly setup of Index lifecycle management policy which runs every 10 min to check if policy met requirements or not. Is it possibl… --- ## [Configuring elasticsearch 6.X cluster on aws instances](https://discuss.elastic.co/t/configuring-elasticsearch-6-x-cluster-on-aws-instances/168014)
**Author:** [@amitnegi6190](https://discuss.elastic.co/u/amitnegi6190)\ **Replies:** 14\ **Last updated:** [February 15, 2019, 9:27am UTC](https://discuss.elastic.co/t/configuring-elasticsearch-6-x-cluster-on-aws-instances/168014 "2019-02-15T09:27:27Z")
Hi, I am trying to set up elasticsearch on my aws instance. I have installed elasticsearch 6.6 on the instance and elasticsearch is running locally. What configuration changes should I make in the elasticsearch.yml file… --- ## [How to query in condition of length of string fields and the field ending with "99"](https://discuss.elastic.co/t/how-to-query-in-condition-of-length-of-string-fields-and-the-field-ending-with-99/168528)
**Author:** [@kennymarx0](https://discuss.elastic.co/u/kennymarx0)\ **Replies:** 2\ **Last updated:** [February 15, 2019, 9:25am UTC](https://discuss.elastic.co/t/how-to-query-in-condition-of-length-of-string-fields-and-the-field-ending-with-99/168528 "2019-02-15T09:25:11Z")
there is a error when using the query below: GET trxdetail-fj/\_search { "query": { "script": { "script": { "source": "doc\['OPPACC'\].length()\>10", "lang": "painless" } } } } errror message: { "error": { … --- ## [Searching across multiple indices vs 2 indices requests on a single indice](https://discuss.elastic.co/t/searching-across-multiple-indices-vs-2-indices-requests-on-a-single-indice/168552)
**Author:** [@freaka](https://discuss.elastic.co/u/freaka)\ **Replies:** 0\ **Last updated:** [February 15, 2019, 9:02am UTC](https://discuss.elastic.co/t/searching-across-multiple-indices-vs-2-indices-requests-on-a-single-indice/168552 "2019-02-15T09:02:51Z")
Hello, my data model is centered around a concept that shapes the indices names (for easier filtering on this concept). I have 3 types of indices per concept : start, wip, end. So indices look like that: start-concept-… --- ## [Can Watcher do this (Dynamic threshold)](https://discuss.elastic.co/t/can-watcher-do-this-dynamic-threshold/168416)
**Author:** [@MalfuncEddie](https://discuss.elastic.co/u/MalfuncEddie)\ **Replies:** 1\ **Last updated:** [February 15, 2019, 9:00am UTC](https://discuss.elastic.co/t/can-watcher-do-this-dynamic-threshold/168416 "2019-02-15T09:00:56Z")
Hi, I'm looking to use a watcher that does the following: Compare the error/succes rate of the last 5 minutes to the last 10 minutes. if there is a drop or spike an action is fired. (based on https://www.elastic.co/vid… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1392) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1394)