# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1411

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1412

---

## [Can i reindex aggregation's result to other index?](https://discuss.elastic.co/t/can-i-reindex-aggregations-result-to-other-index/166102)

<div class="topic-metadata">

**Author:** [@teemoGod](https://discuss.elastic.co/u/teemoGod)\
**Replies:** 2\
**Last updated:** [January 30, 2019, 5:27am UTC](https://discuss.elastic.co/t/can-i-reindex-aggregations-result-to-other-index/166102 "2019-01-30T05:27:32Z")

</div>

Hi. im using Elasticseacrh 6.4.1 i have a lot of logs. to visualize these, im using vega in Kibana. (there are nested objects) but logs are too many exist to aggregate and drawing grpah in vega. (request timeout occu…

---

## [Fetch suggested document from the elastic search](https://discuss.elastic.co/t/fetch-suggested-document-from-the-elastic-search/166268)

<div class="topic-metadata">

**Author:** [@Shyju\_M](https://discuss.elastic.co/u/Shyju_M)\
**Replies:** 0\
**Last updated:** [January 30, 2019, 6:34am UTC](https://discuss.elastic.co/t/fetch-suggested-document-from-the-elastic-search/166268 "2019-01-30T06:34:53Z")

</div>

I have integrated the complex suggester feature using the Java REST API and it returns a list of suggestions as shown below \["NO DATE EVENT","NO Date","no","nodateevent"\] How can I fetch the particular document if the …

---

## [Issue with curator - Schema error: extra keys not allowed @ data\['client'\]\['timoeut'\]](https://discuss.elastic.co/t/issue-with-curator-schema-error-extra-keys-not-allowed-data-client-timoeut/166095)

<div class="topic-metadata">

**Author:** [@Kok\_Sin\_See](https://discuss.elastic.co/u/Kok_Sin_See)\
**Replies:** 7\
**Last updated:** [January 30, 2019, 6:09am UTC](https://discuss.elastic.co/t/issue-with-curator-schema-error-extra-keys-not-allowed-data-client-timoeut/166095 "2019-01-30T06:09:32Z")

</div>

Hi, I am getting this error: Schema error: extra keys not allowed @ data\['client'\]\['timoeut'\] the timeout is spelled as aboved. Can advise? thanks

---

## [A field is not search even after providing weights](https://discuss.elastic.co/t/a-field-is-not-search-even-after-providing-weights/166249)

<div class="topic-metadata">

**Author:** [@shankarps](https://discuss.elastic.co/u/shankarps)\
**Replies:** 0\
**Last updated:** [January 30, 2019, 1:28am UTC](https://discuss.elastic.co/t/a-field-is-not-search-even-after-providing-weights/166249 "2019-01-30T01:28:43Z")

</div>

I have an index with the following sample vehicle data. "\_source": { "Type": "Van", "Year": 2016, "YearStr": "2016", "Make": "Ford", "Model…

---

## [Search question: match docs based on a field's value in another search](https://discuss.elastic.co/t/search-question-match-docs-based-on-a-fields-value-in-another-search/166235)

<div class="topic-metadata">

**Author:** [@rozling](https://discuss.elastic.co/u/rozling)\
**Replies:** 0\
**Last updated:** [January 29, 2019, 9:15pm UTC](https://discuss.elastic.co/t/search-question-match-docs-based-on-a-fields-value-in-another-search/166235 "2019-01-29T21:15:19Z")

</div>

Hi, I'm on Elasticsearch 6.4.3 and trying to delete a large swathe of logs generated by a loadbalancer's healthcheck, based on the healthcheck endpoint url. For each request two documents were generated, one for the req…

---

## [Remove duplicates from multi-valued field](https://discuss.elastic.co/t/remove-duplicates-from-multi-valued-field/166232)

<div class="topic-metadata">

**Author:** [@Dipak](https://discuss.elastic.co/u/Dipak)\
**Replies:** 0\
**Last updated:** [January 29, 2019, 8:43pm UTC](https://discuss.elastic.co/t/remove-duplicates-from-multi-valued-field/166232 "2019-01-29T20:43:26Z")

</div>

Hello, I have multi valued field which contains different values. How can I remove duplicate tokens from multi valued field? For example: I am applying unique analyzer for categories field. But it doesn't seem to remove…

---

## [ELK architecture choice](https://discuss.elastic.co/t/elk-architecture-choice/166138)

<div class="topic-metadata">

**Author:** [@jof300](https://discuss.elastic.co/u/jof300)\
**Replies:** 4\
**Last updated:** [January 29, 2019, 8:39pm UTC](https://discuss.elastic.co/t/elk-architecture-choice/166138 "2019-01-29T20:39:01Z")

</div>

Hello, I read a lot of docs about ELK architecture and I saw different designs. My team has to deploy a new ELK stack and we are facing with some choices. beats ==\> kafka ==\> logstash ==\> elasticsearch beats ==\> kafka…

---

## [Re: API access to response collector service data](https://discuss.elastic.co/t/re-api-access-to-response-collector-service-data/166225)

<div class="topic-metadata">

**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Replies:** 0\
**Last updated:** [January 29, 2019, 7:44pm UTC](https://discuss.elastic.co/t/re-api-access-to-response-collector-service-data/166225 "2019-01-29T19:44:51Z")

</div>

As always, my questions are too deep for this mailing list. :slight\_smile: In the end, I found the statistics I needed at \_nodes/stats/adaptive\_selection. Interesting to watch the rank dramatically change even by the sec…

---

## [Where do you configure the GeoIP plugin (not using logstash)](https://discuss.elastic.co/t/where-do-you-configure-the-geoip-plugin-not-using-logstash/166216)

<div class="topic-metadata">

**Author:** [@sentient](https://discuss.elastic.co/u/sentient)\
**Replies:** 1\
**Last updated:** [January 29, 2019, 5:55pm UTC](https://discuss.elastic.co/t/where-do-you-configure-the-geoip-plugin-not-using-logstash/166216 "2019-01-29T17:55:05Z")

</div>

I would like to configure using a different geoip database or would like to configure the cache\_size option (not even sure if that is available) But how or in which file do I do this? And what are all the options? I d…

---

## [Kibana display difficulty](https://discuss.elastic.co/t/kibana-display-difficulty/166124)

<div class="topic-metadata">

**Author:** [@lsardi](https://discuss.elastic.co/u/lsardi)\
**Replies:** 3\
**Last updated:** [January 29, 2019, 4:33pm UTC](https://discuss.elastic.co/t/kibana-display-difficulty/166124 "2019-01-29T16:33:00Z")

</div>

Hello I am new on elasticsearch and I need advice. I get a json via an API that I store in mongodb then I extract it and insert it into elastisearch when I try to visualize my data in kibana I see this result. How can I…

---

## [Reindex metricbeat indices](https://discuss.elastic.co/t/reindex-metricbeat-indices/165806)

<div class="topic-metadata">

**Author:** [@IVO\_FERNANDES](https://discuss.elastic.co/u/IVO_FERNANDES)\
**Replies:** 1\
**Last updated:** [January 29, 2019, 4:27pm UTC](https://discuss.elastic.co/t/reindex-metricbeat-indices/165806 "2019-01-29T16:27:38Z")

</div>

Hello everyone, I am having some trouble using the reindex API to change the settings of metricbeat indexes. My idea is to reindex the original indexes to a new index with just a single shard and 0 replicas. The new in…

---

## [Deploy ElasticSearch 6.5.4 on Kubernetes - AccessDeniedException](https://discuss.elastic.co/t/deploy-elasticsearch-6-5-4-on-kubernetes-accessdeniedexception/166207)

<div class="topic-metadata">

**Author:** [@szern](https://discuss.elastic.co/u/szern)\
**Replies:** 0\
**Last updated:** [January 29, 2019, 4:21pm UTC](https://discuss.elastic.co/t/deploy-elasticsearch-6-5-4-on-kubernetes-accessdeniedexception/166207 "2019-01-29T16:21:50Z")

</div>

I'm attempting to deploy EFK on my Kubernetes cluster. The ElasticSearch version is 6.5.4. The pods get created and then immediately go to an error state with the exception: AccessDeniedException. The error in the logs: …

---

## [Creating ElasticSearch 6.5 nested boolean queries from SQL](https://discuss.elastic.co/t/creating-elasticsearch-6-5-nested-boolean-queries-from-sql/166206)

<div class="topic-metadata">

**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\
**Replies:** 0\
**Last updated:** [January 29, 2019, 4:13pm UTC](https://discuss.elastic.co/t/creating-elasticsearch-6-5-nested-boolean-queries-from-sql/166206 "2019-01-29T16:13:15Z")

</div>

I've this quite simple SQL query: SELECT \* FROM table WHERE ((sphereMin\>=-17 AND sphereMax\<=5) OR sphereMin\<=-17) AND ((sphereMax\<=5 AND sphereMax\>=-17) OR sphereMax\>=-17) I have to translate that query to ES using hi…

---

## [Date range with weekyear\_week format (xxxx-'W'ww)](https://discuss.elastic.co/t/date-range-with-weekyear-week-format-xxxx-www/166187)

<div class="topic-metadata">

**Author:** [@Julien\_Tanguy](https://discuss.elastic.co/u/Julien_Tanguy)\
**Replies:** 0\
**Last updated:** [January 29, 2019, 2:16pm UTC](https://discuss.elastic.co/t/date-range-with-weekyear-week-format-xxxx-www/166187 "2019-01-29T14:16:35Z")

</div>

Hi, I have a problem, and a solution. But maybe there is a better solution. My problem: I need to make a query with a date range {"lt": "2019-W04", "gte": "2019-W03"} The date field has xxxx-'W'ww as date format. Bu…

---

## [AsciiFolding: Can't make it work with ingest-attachment](https://discuss.elastic.co/t/asciifolding-cant-make-it-work-with-ingest-attachment/166192)

<div class="topic-metadata">

**Author:** [@Francillo](https://discuss.elastic.co/u/Francillo)\
**Replies:** 2\
**Last updated:** [January 29, 2019, 3:06pm UTC](https://discuss.elastic.co/t/asciifolding-cant-make-it-work-with-ingest-attachment/166192 "2019-01-29T15:06:47Z")

</div>

Hi ES community, I have a problem having asciifolder working with ingest-attachment pipeline. Here I provide the whole code (to avoid hidden mistake :wink: ). You can see that I use lowercase and my own stopwords filt…

---

## [How to name an empty query](https://discuss.elastic.co/t/how-to-name-an-empty-query/166141)

<div class="topic-metadata">

**Author:** [@Wassim\_Ben\_Amor](https://discuss.elastic.co/u/Wassim_Ben_Amor)\
**Replies:** 7\
**Last updated:** [January 29, 2019, 2:06pm UTC](https://discuss.elastic.co/t/how-to-name-an-empty-query/166141 "2019-01-29T14:06:59Z")

</div>

Hello, I have a simple elasticsearch query POST test/\_search { "size": 0 } this return a simple response : { "took" : 0, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1, "skipped…

---

## [Speed up shard allocation on Elasticsearch 6.x single node cluster](https://discuss.elastic.co/t/speed-up-shard-allocation-on-elasticsearch-6-x-single-node-cluster/166174)

<div class="topic-metadata">

**Author:** [@Thomas\_Ardal](https://discuss.elastic.co/u/Thomas_Ardal)\
**Replies:** 4\
**Last updated:** [January 29, 2019, 1:55pm UTC](https://discuss.elastic.co/t/speed-up-shard-allocation-on-elasticsearch-6-x-single-node-cluster/166174 "2019-01-29T13:55:46Z")

</div>

I'm currently upgrading a "cluster" (with a single node) from Elasticsearch 1.x to 6.x. Everything is working out great, but I experience very slow shard allocation on 6.x. I don't remember if I did anything on the old c…

---

## [What does suggestMode missing mean?](https://discuss.elastic.co/t/what-does-suggestmode-missing-mean/165970)

<div class="topic-metadata">

**Author:** [@Martin\_Kruger](https://discuss.elastic.co/u/Martin_Kruger)\
**Replies:** 1\
**Last updated:** [January 29, 2019, 1:44pm UTC](https://discuss.elastic.co/t/what-does-suggestmode-missing-mean/165970 "2019-01-29T13:44:49Z")

</div>

Hi, what does the suggestMode missing for the TermSuggester mean? I get no clue from the documentation. Greetings, Martin

---

## [Bulk indexing: single segment per shard](https://discuss.elastic.co/t/bulk-indexing-single-segment-per-shard/166152)

<div class="topic-metadata">

**Author:** [@John16](https://discuss.elastic.co/u/John16)\
**Replies:** 3\
**Last updated:** [January 29, 2019, 1:36pm UTC](https://discuss.elastic.co/t/bulk-indexing-single-segment-per-shard/166152 "2019-01-29T13:36:44Z")

</div>

Hello, I need to bulk index a large number of documents starting with empty index. I know I can do a (long-running) \_forcemerge later to reduce number of segments to 1, but I wonder if there is a settings so I can get …

---

## [ES stack trace does not reflect altered thread pool configuration](https://discuss.elastic.co/t/es-stack-trace-does-not-reflect-altered-thread-pool-configuration/164757)

<div class="topic-metadata">

**Author:** [@jwistrom](https://discuss.elastic.co/u/jwistrom)\
**Replies:** 2\
**Last updated:** [January 29, 2019, 1:25pm UTC](https://discuss.elastic.co/t/es-stack-trace-does-not-reflect-altered-thread-pool-configuration/164757 "2019-01-29T13:25:16Z")

</div>

Hi We have recently updated to ES 6.5.3 and changed the default configuration accordingly: thread\_pool.search.queue\_size: 8000 thread\_pool.search.size: 35 When querying this at runtime we get: "thread\_pool" : { …

---

## [Hardware crashing because of ELASTICSEACH](https://discuss.elastic.co/t/hardware-crashing-because-of-elasticseach/163324)

<div class="topic-metadata">

**Author:** [@Surya\_ayrush](https://discuss.elastic.co/u/Surya_ayrush)\
**Replies:** 4\
**Last updated:** [January 29, 2019, 1:06pm UTC](https://discuss.elastic.co/t/hardware-crashing-because-of-elasticseach/163324 "2019-01-29T13:06:39Z")

</div>

Hi Folks, My hardware where elasticsearch is the only process is crashing. There is high possibility that elasticsearch process is the one causing it as it the sole process running. NEED HELP IN FINDING WHAT PART OF E…

---

## [Closing an index whilst indexing documents](https://discuss.elastic.co/t/closing-an-index-whilst-indexing-documents/166156)

<div class="topic-metadata">

**Author:** [@mags107](https://discuss.elastic.co/u/mags107)\
**Replies:** 1\
**Last updated:** [January 29, 2019, 1:00pm UTC](https://discuss.elastic.co/t/closing-an-index-whilst-indexing-documents/166156 "2019-01-29T13:00:52Z")

</div>

What would be the effects of closing an index whilst in the process of performing a bulk index? We have a scenario where we want to be able to close the index to make changes. I haven't been able to find any way to ide…

---

## [Exporting large set of data from elastic as CSV](https://discuss.elastic.co/t/exporting-large-set-of-data-from-elastic-as-csv/166160)

<div class="topic-metadata">

**Author:** [@Divagar\_Tech](https://discuss.elastic.co/u/Divagar_Tech)\
**Replies:** 2\
**Last updated:** [January 29, 2019, 12:58pm UTC](https://discuss.elastic.co/t/exporting-large-set-of-data-from-elastic-as-csv/166160 "2019-01-29T12:58:02Z")

</div>

Hi experts i need to export huge or entire data from particular index of elastic as csv . Currently i have explored and using ScrollAPI whats my concern in this we need to loop it to get set of data until we get empty h…

---

## [Enabling PKI autentication for elastic nodes](https://discuss.elastic.co/t/enabling-pki-autentication-for-elastic-nodes/165733)

<div class="topic-metadata">

**Author:** [@B123](https://discuss.elastic.co/u/B123)\
**Replies:** 2\
**Last updated:** [January 29, 2019, 8:42am UTC](https://discuss.elastic.co/t/enabling-pki-autentication-for-elastic-nodes/165733 "2019-01-29T08:42:32Z")

</div>

What is the use of enabling PKI for elastic nodes when SSL is already enabled

---

## [ES 6.5 starting with errors / exceptions](https://discuss.elastic.co/t/es-6-5-starting-with-errors-exceptions/166169)

<div class="topic-metadata">

**Author:** [@Suryadip\_Nag](https://discuss.elastic.co/u/Suryadip_Nag)\
**Replies:** 0\
**Last updated:** [January 29, 2019, 12:47pm UTC](https://discuss.elastic.co/t/es-6-5-starting-with-errors-exceptions/166169 "2019-01-29T12:47:22Z")

</div>

I have installed ES 6.5.4 in Centos and trying to start the elasticsearch service. I am getting following errors: 2019-01-29 11:50:49,817 main ERROR Unable to invoke factory method in class org.apache.logging.log4j.core…

---

## [IndexOutOfBoundsException using nested terms aggregation under composite aggregation](https://discuss.elastic.co/t/indexoutofboundsexception-using-nested-terms-aggregation-under-composite-aggregation/166166)

<div class="topic-metadata">

**Author:** [@oystein.elvik](https://discuss.elastic.co/u/oystein.elvik)\
**Replies:** 0\
**Last updated:** [January 29, 2019, 12:45pm UTC](https://discuss.elastic.co/t/indexoutofboundsexception-using-nested-terms-aggregation-under-composite-aggregation/166166 "2019-01-29T12:45:47Z")

</div>

Exception thrown when using a terms aggragation as nested under a composite aggregation. The query is ok on small indices but the problem starts after about 2m+ documents. Any ideas? My query: POST my\_index/\_search …

---

## [Elasticsearch: search and index time analyzer](https://discuss.elastic.co/t/elasticsearch-search-and-index-time-analyzer/165028)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 6\
**Last updated:** [January 29, 2019, 12:37pm UTC](https://discuss.elastic.co/t/elasticsearch-search-and-index-time-analyzer/165028 "2019-01-29T12:37:33Z")

</div>

Hi Team I'm using Custom Analyzer. But, I want to use the analyzer at index time and search time as well. I've mentioned in mappings but I dont see that search time analyzer is working? Below are settings. I'm using An…

---

## [Collapse not working with nested field](https://discuss.elastic.co/t/collapse-not-working-with-nested-field/166159)

<div class="topic-metadata">

**Author:** [@PUSHKAR\_SINGH](https://discuss.elastic.co/u/PUSHKAR_SINGH)\
**Replies:** 0\
**Last updated:** [January 29, 2019, 11:48am UTC](https://discuss.elastic.co/t/collapse-not-working-with-nested-field/166159 "2019-01-29T11:48:40Z")

</div>

Any idea, for getting collapse feature with nested field. Collapse showing weird behavior, we are filtering total 3 unique documents, but showing only one, not remaining two.

---

## [Multi\_match prefix query working weird](https://discuss.elastic.co/t/multi-match-prefix-query-working-weird/166148)

<div class="topic-metadata">

**Author:** [@vincent.charlanne](https://discuss.elastic.co/u/vincent.charlanne)\
**Replies:** 2\
**Last updated:** [January 29, 2019, 11:42am UTC](https://discuss.elastic.co/t/multi-match-prefix-query-working-weird/166148 "2019-01-29T11:42:58Z")

</div>

Hi everyone, Don't know if i post this in the right section, sorry if i'm wrong. Here is my case. I use ElasticSearch to optimize search engine on a wordpress site using ElasticPress plugin as bridge. I work with a l…

---

## [Collapse not working for nested fields](https://discuss.elastic.co/t/collapse-not-working-for-nested-fields/166150)

<div class="topic-metadata">

**Author:** [@SankalpSood](https://discuss.elastic.co/u/SankalpSood)\
**Replies:** 0\
**Last updated:** [January 29, 2019, 11:24am UTC](https://discuss.elastic.co/t/collapse-not-working-for-nested-fields/166150 "2019-01-29T11:24:10Z")

</div>

We are using elasticsearch version 5.4 . We have used collapse to aggregate result on the basis of nested field. But the result we are getting is just one record as a result even when it shows total no. of hits as 4 . Ou…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1410)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1412)
