# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1412

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1413

---

## [Elastic search indexing tuninig](https://discuss.elastic.co/t/elastic-search-indexing-tuninig/166008)

<div class="topic-metadata">

**Author:** [@fadihaddad](https://discuss.elastic.co/u/fadihaddad)\
**Replies:** 6\
**Last updated:** [January 29, 2019, 11:23am UTC](https://discuss.elastic.co/t/elastic-search-indexing-tuninig/166008 "2019-01-29T11:23:14Z")

</div>

Hello I have a server with 4 cpus each cpu has 4 cores and 16gb ram and a virtual storage. I tried to indexed a 250mb file but it took 30mins. How can we tune elastic search to the max to make it use all cpu cores and j…

---

## [Exact match against long queries](https://discuss.elastic.co/t/exact-match-against-long-queries/165102)

<div class="topic-metadata">

**Author:** [@magroski\_tfy](https://discuss.elastic.co/u/magroski_tfy)\
**Replies:** 1\
**Last updated:** [January 29, 2019, 11:22am UTC](https://discuss.elastic.co/t/exact-match-against-long-queries/165102 "2019-01-29T11:22:55Z")

</div>

I'm trying to use Elasticsearch in a situation similar to a reverse search, but I'm having trouble finding the right approach. My objective is to find exact requirements inside a long query string. Example: My Indexed…

---

## [Elasticsearch - Highlight of wildcard](https://discuss.elastic.co/t/elasticsearch-highlight-of-wildcard/165939)

<div class="topic-metadata">

**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\
**Replies:** 1\
**Last updated:** [January 29, 2019, 11:09am UTC](https://discuss.elastic.co/t/elasticsearch-highlight-of-wildcard/165939 "2019-01-29T11:09:55Z")

</div>

Hi, I have found a behaviour of highlight of wildcard little different. When I search using single "" i.e., a wildcard character, It does not highlight any of the values. But if I do the same using two or more "" i.e.…

---

## [Escape double quotes - query error with curl](https://discuss.elastic.co/t/escape-double-quotes-query-error-with-curl/166139)

<div class="topic-metadata">

**Author:** [@sabdoul](https://discuss.elastic.co/u/sabdoul)\
**Replies:** 4\
**Last updated:** [January 29, 2019, 10:37am UTC](https://discuss.elastic.co/t/escape-double-quotes-query-error-with-curl/166139 "2019-01-29T10:37:42Z")

</div>

Hello, I have my request below that works in Kibana DevTools that I also want to run with curl: curl -XGET "http://localhost:9200/"index-"$(date -d "yesterday" '+%Y.%m.%d')/\_search" -H'Content-Type: application/json' …

---

## [How to DELETE logs from elasticsearch index which are older then 90 days?](https://discuss.elastic.co/t/how-to-delete-logs-from-elasticsearch-index-which-are-older-then-90-days/166125)

<div class="topic-metadata">

**Author:** [@Vinit\_Kumar](https://discuss.elastic.co/u/Vinit_Kumar)\
**Replies:** 3\
**Last updated:** [January 29, 2019, 10:21am UTC](https://discuss.elastic.co/t/how-to-delete-logs-from-elasticsearch-index-which-are-older-then-90-days/166125 "2019-01-29T10:21:50Z")

</div>

Is it possible to delete logs from elasticsearch index which are older than 3 months? NOTE: I don't want to create daily based or monthly based index and but want only one index and want to delete 3-month-old data insid…

---

## [Visualisation based on filter](https://discuss.elastic.co/t/visualisation-based-on-filter/166135)

<div class="topic-metadata">

**Author:** [@javidr](https://discuss.elastic.co/u/javidr)\
**Replies:** 0\
**Last updated:** [January 29, 2019, 10:04am UTC](https://discuss.elastic.co/t/visualisation-based-on-filter/166135 "2019-01-29T10:04:54Z")

</div>

Hi I have a question regarding visualisations when selecting the maximum value from a field. Let me explain I have an index where i have a document with the structure {timestamp, data}, so it can be like {timestamp: 2…

---

## [Elasticsearch+ Python script ( Libraries SKlearn or Tensorflow)](https://discuss.elastic.co/t/elasticsearch-python-script-libraries-sklearn-or-tensorflow/166115)

<div class="topic-metadata">

**Author:** [@skumar\_07](https://discuss.elastic.co/u/skumar_07)\
**Replies:** 2\
**Last updated:** [January 29, 2019, 9:35am UTC](https://discuss.elastic.co/t/elasticsearch-python-script-libraries-sklearn-or-tensorflow/166115 "2019-01-29T09:35:11Z")

</div>

Is it possible to import libraries like SKlearn and Tensorflow in a python script and run on the Easticsearch database? Thanks Skumar

---

## [Completion suggester in java API](https://discuss.elastic.co/t/completion-suggester-in-java-api/165568)

<div class="topic-metadata">

**Author:** [@Shyju\_M](https://discuss.elastic.co/u/Shyju_M)\
**Replies:** 3\
**Last updated:** [January 29, 2019, 9:12am UTC](https://discuss.elastic.co/t/completion-suggester-in-java-api/165568 "2019-01-29T09:12:06Z")

</div>

I am trying to integrate the autocompletion feature by following the article https://www.elastic.co/blog/you-complete-me. I couldn't see any article to implement the same with the JAVA API Please guide me to do the same…

---

## [Watcher post data](https://discuss.elastic.co/t/watcher-post-data/165642)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 3\
**Last updated:** [January 29, 2019, 8:59am UTC](https://discuss.elastic.co/t/watcher-post-data/165642 "2019-01-29T08:59:36Z")

</div>

Hi All, I am executing a watcher which post data to an API. In it self this works fine, however the data format is something I am struggling with. My watcher looks like this. { "trigger": { "schedule": { "c…

---

## [Elasticsearch not starting after upgrading to 6.5](https://discuss.elastic.co/t/elasticsearch-not-starting-after-upgrading-to-6-5/166109)

<div class="topic-metadata">

**Author:** [@Suryadip\_Nag](https://discuss.elastic.co/u/Suryadip_Nag)\
**Replies:** 2\
**Last updated:** [January 29, 2019, 8:58am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-after-upgrading-to-6-5/166109 "2019-01-29T08:58:04Z")

</div>

I have upgraded ES from 5.5.1 to 6.5.4 in Centos. When I start ES by executing 'service elasticsearch starts' I am getting below errors. Please help. 2019-01-29 11:50:49,795 main ERROR Unable to create file ${sys:es.log…

---

## [One index vs multiple indexes?](https://discuss.elastic.co/t/one-index-vs-multiple-indexes/165984)

<div class="topic-metadata">

**Author:** [@akhisar](https://discuss.elastic.co/u/akhisar)\
**Replies:** 6\
**Last updated:** [January 29, 2019, 8:32am UTC](https://discuss.elastic.co/t/one-index-vs-multiple-indexes/165984 "2019-01-29T08:32:17Z")

</div>

Hello All, Which is a better approach: single index or should it to be split into multiple index. Please can you point out the pros and cons of both approaches. Rgds, -Akhil

---

## [Elastic Search percentile aggregations filtering issue](https://discuss.elastic.co/t/elastic-search-percentile-aggregations-filtering-issue/165037)

<div class="topic-metadata">

**Author:** [@sukku77](https://discuss.elastic.co/u/sukku77)\
**Replies:** 2\
**Last updated:** [January 29, 2019, 8:29am UTC](https://discuss.elastic.co/t/elastic-search-percentile-aggregations-filtering-issue/165037 "2019-01-29T08:29:58Z")

</div>

Hi Guys, Below is my problem statement I have one post search call to elasticsearch which is having query to calculate 99% percentile aggregations on one of the field. In return i am getting proper response with aggreg…

---

## [Realtime data Integration between salesforce and elastic](https://discuss.elastic.co/t/realtime-data-integration-between-salesforce-and-elastic/166105)

<div class="topic-metadata">

**Author:** [@Reena\_Roseline](https://discuss.elastic.co/u/Reena_Roseline)\
**Replies:** 4\
**Last updated:** [January 29, 2019, 8:28am UTC](https://discuss.elastic.co/t/realtime-data-integration-between-salesforce-and-elastic/166105 "2019-01-29T08:28:54Z")

</div>

My Requirement is to get real-time data from Salesforce and ingest it to Elastic and visualize them in kibana, Currently, I am importing a .csv file from salesforce and logstashing it to elastic, But I am doing it man…

---

## [Search in child hierarchy not giving out snippet results](https://discuss.elastic.co/t/search-in-child-hierarchy-not-giving-out-snippet-results/166110)

<div class="topic-metadata">

**Author:** [@kowndinya\_vankayalap](https://discuss.elastic.co/u/kowndinya_vankayalap)\
**Replies:** 0\
**Last updated:** [January 29, 2019, 8:19am UTC](https://discuss.elastic.co/t/search-in-child-hierarchy-not-giving-out-snippet-results/166110 "2019-01-29T08:19:10Z")

</div>

Hi, In our application we have hierarchical documents (parent-\>child). At a high level, structure is board -\> post -\> comment -\> reply. One of the requirements is to be able to search given text inside post hierarchy i.…

---

## [How to search dense\_vector](https://discuss.elastic.co/t/how-to-search-dense-vector/166097)

<div class="topic-metadata">

**Author:** [@LiuGangR](https://discuss.elastic.co/u/LiuGangR)\
**Replies:** 1\
**Last updated:** [January 29, 2019, 7:24am UTC](https://discuss.elastic.co/t/how-to-search-dense-vector/166097 "2019-01-29T07:24:47Z")

</div>

which query is used to search dense\_vector. There is no query type to work. dense\_vector is the new feature of es 7.0 https://www.elastic.co/guide/en/elasticsearch/reference/master/dense-vector.html

---

## [Where to set Heap memory - jvm.options or /etc/sysconfig/elasticsearch](https://discuss.elastic.co/t/where-to-set-heap-memory-jvm-options-or-etc-sysconfig-elasticsearch/166082)

<div class="topic-metadata">

**Author:** [@Suryadip\_Nag](https://discuss.elastic.co/u/Suryadip_Nag)\
**Replies:** 3\
**Last updated:** [January 29, 2019, 5:56am UTC](https://discuss.elastic.co/t/where-to-set-heap-memory-jvm-options-or-etc-sysconfig-elasticsearch/166082 "2019-01-29T05:56:22Z")

</div>

I know that heap memory has to be set in jvm.options file. -Xms2g -Xms2g But I can see in /etc/sysconfig/elasticsearch file also we can set heap memory. Heap Size (defaults to 256m min, 1g max) #ES\_HEAP\_SIZE=2g Whic…

---

## [I have added X-Pack 6.2.4 jar in my project but I am not able to get WatchSourceBuilder](https://discuss.elastic.co/t/i-have-added-x-pack-6-2-4-jar-in-my-project-but-i-am-not-able-to-get-watchsourcebuilder/166012)

<div class="topic-metadata">

**Author:** [@bhagyakopparala](https://discuss.elastic.co/u/bhagyakopparala)\
**Replies:** 2\
**Last updated:** [January 29, 2019, 5:31am UTC](https://discuss.elastic.co/t/i-have-added-x-pack-6-2-4-jar-in-my-project-but-i-am-not-able-to-get-watchsourcebuilder/166012 "2019-01-29T05:31:45Z")

</div>

I have added X-Pack 6.2.4 jar in my project but I am not able to get WatchSourceBuilder through that jar for watcher implementation .Please guide me how to resolve this.

---

## [How to upadate value with java api without merging it, and only append that's not same](https://discuss.elastic.co/t/how-to-upadate-value-with-java-api-without-merging-it-and-only-append-thats-not-same/166075)

<div class="topic-metadata">

**Author:** [@Satri\_Wantara](https://discuss.elastic.co/u/Satri_Wantara)\
**Replies:** 2\
**Last updated:** [January 29, 2019, 4:17am UTC](https://discuss.elastic.co/t/how-to-upadate-value-with-java-api-without-merging-it-and-only-append-thats-not-same/166075 "2019-01-29T04:17:23Z")

</div>

Excuse me Sir, I’am still new in elastic, I use java as client, I have a problem that how to update data without merging it, and if the data is there, it did’nt update it,,but increase/append it, and if data is same, it …

---

## [How to suggest by name sort by count field](https://discuss.elastic.co/t/how-to-suggest-by-name-sort-by-count-field/166079)

<div class="topic-metadata">

**Author:** [@elliotcrn](https://discuss.elastic.co/u/elliotcrn)\
**Replies:** 0\
**Last updated:** [January 29, 2019, 3:56am UTC](https://discuss.elastic.co/t/how-to-suggest-by-name-sort-by-count-field/166079 "2019-01-29T03:56:01Z")

</div>

I'm using elasticsearch completion suggester to search and suggest keywords while user typing. It works fine but I also want to sort the results by count field. As I know I can't pass a field as the weight parameter. So…

---

## [Icinga2 vs ELK](https://discuss.elastic.co/t/icinga2-vs-elk/162733)

<div class="topic-metadata">

**Author:** [@stinkfly](https://discuss.elastic.co/u/stinkfly)\
**Replies:** 2\
**Last updated:** [January 29, 2019, 1:53am UTC](https://discuss.elastic.co/t/icinga2-vs-elk/162733 "2019-01-29T01:53:29Z")

</div>

Hey there, I've been doing a bit of research into monitoring options for the following environment: Windows Servers 2012/2016 (less than 5) and Windows 10 Desktops (less than 10) Syslogs - WiFi APs, Linux Servers, …

---

## [Maven pom file for license plugin 2.4.3 broken?](https://discuss.elastic.co/t/maven-pom-file-for-license-plugin-2-4-3-broken/165961)

<div class="topic-metadata">

**Author:** [@Mattias](https://discuss.elastic.co/u/Mattias)\
**Replies:** 1\
**Last updated:** [January 29, 2019, 12:00am UTC](https://discuss.elastic.co/t/maven-pom-file-for-license-plugin-2-4-3-broken/165961 "2019-01-29T00:00:05Z")

</div>

This pom file seems broken? https://artifacts.elastic.co/maven/org/elasticsearch/plugin/license/2.4.3/license-2.4.3.pom I am trying to use it together with shield 2.4.3, and that pom file works fine (https://artifacts.…

---

## [How to skip SSL validation for creating S3 repository?](https://discuss.elastic.co/t/how-to-skip-ssl-validation-for-creating-s3-repository/165797)

<div class="topic-metadata">

**Author:** [@iamadeveloper](https://discuss.elastic.co/u/iamadeveloper)\
**Replies:** 1\
**Last updated:** [January 28, 2019, 11:57pm UTC](https://discuss.elastic.co/t/how-to-skip-ssl-validation-for-creating-s3-repository/165797 "2019-01-28T23:57:12Z")

</div>

I am trying to create S3 repository. But Certificate to S3 endpoint is invalid. How do I skip SSL verification? curl -X PUT "172.16.2.54:9200/\_snapshot/my\_s3\_repository?pretty" -H 'Content-Type: application/json' -…

---

## [Connect to Elastic Cloud with Java Low Level Rest Client](https://discuss.elastic.co/t/connect-to-elastic-cloud-with-java-low-level-rest-client/165801)

<div class="topic-metadata">

**Author:** [@stefan5](https://discuss.elastic.co/u/stefan5)\
**Replies:** 2\
**Last updated:** [January 28, 2019, 11:51pm UTC](https://discuss.elastic.co/t/connect-to-elastic-cloud-with-java-low-level-rest-client/165801 "2019-01-28T23:51:29Z")

</div>

I want to connect to my AWS Elasticsearch cloud but it only works for my localhost. When i connect to localhost i type this, and this works: RestClient restClient = RestClient.builder(new HttpHost("localhost", 9200, "h…

---

## [Unused mapping fields and impact on space/performance](https://discuss.elastic.co/t/unused-mapping-fields-and-impact-on-space-performance/166046)

<div class="topic-metadata">

**Author:** [@sparkjonez](https://discuss.elastic.co/u/sparkjonez)\
**Replies:** 2\
**Last updated:** [January 28, 2019, 11:24pm UTC](https://discuss.elastic.co/t/unused-mapping-fields-and-impact-on-space-performance/166046 "2019-01-28T23:24:45Z")

</div>

Hello everyone, I have fields in my mapping file that are not being used by the incoming data. Are those (unused) fields taking up space or impact performance in my Elasticsearch cluster, or is Elasticsearch smart enoug…

---

## [Do post\_filter queries run under query context or filter context?](https://discuss.elastic.co/t/do-post-filter-queries-run-under-query-context-or-filter-context/165913)

<div class="topic-metadata">

**Author:** [@tmenier](https://discuss.elastic.co/u/tmenier)\
**Replies:** 2\
**Last updated:** [January 28, 2019, 11:05pm UTC](https://discuss.elastic.co/t/do-post-filter-queries-run-under-query-context-or-filter-context/165913 "2019-01-28T23:05:05Z")

</div>

According to https://www.elastic.co/guide/en/elasticsearch/reference/current/query-filter-context.html: Filter context is in effect whenever a query clause is passed to a filter parameter, such as the filter or must\_no…

---

## [Rollup to multiple indexes](https://discuss.elastic.co/t/rollup-to-multiple-indexes/165138)

<div class="topic-metadata">

**Author:** [@stlasalle](https://discuss.elastic.co/u/stlasalle)\
**Replies:** 1\
**Last updated:** [January 28, 2019, 10:23pm UTC](https://discuss.elastic.co/t/rollup-to-multiple-indexes/165138 "2019-01-28T22:23:48Z")

</div>

Hi, We have started using Snowplow to capture usage data on our website and send it to an ES index (called snowplow). Each document in snowplow is large, and currently our historical data reporting only needs two data p…

---

## [Sorting based on initial term, don't include 2nd, 3rd term etc of the field](https://discuss.elastic.co/t/sorting-based-on-initial-term-dont-include-2nd-3rd-term-etc-of-the-field/165045)

<div class="topic-metadata">

**Author:** [@PUSHKAR\_SINGH](https://discuss.elastic.co/u/PUSHKAR_SINGH)\
**Replies:** 1\
**Last updated:** [January 28, 2019, 10:19pm UTC](https://discuss.elastic.co/t/sorting-based-on-initial-term-dont-include-2nd-3rd-term-etc-of-the-field/165045 "2019-01-28T22:19:43Z")

</div>

Suppose, we have below Details Mapping:=\> { "demo\_index": { "mappings": { "my\_doc": { "properties": { "first\_field": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore\_above": 256 } } }, …

---

## [Elasticsearch failes to load after log4j2.properties update](https://discuss.elastic.co/t/elasticsearch-failes-to-load-after-log4j2-properties-update/165780)

<div class="topic-metadata">

**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Replies:** 1\
**Last updated:** [January 28, 2019, 1:17pm UTC](https://discuss.elastic.co/t/elasticsearch-failes-to-load-after-log4j2-properties-update/165780 "2019-01-28T13:17:49Z")

</div>

I was trying to drop the logging level of our cluster and after reading through the Logging Configuration page I thought I had a good idea of how to drop the level down to warn. After reading through the documentation a…

---

## [How to create a keyword redirect? With match Mode](https://discuss.elastic.co/t/how-to-create-a-keyword-redirect-with-match-mode/166028)

<div class="topic-metadata">

**Author:** [@rainman](https://discuss.elastic.co/u/rainman)\
**Replies:** 0\
**Last updated:** [January 28, 2019, 4:30pm UTC](https://discuss.elastic.co/t/how-to-create-a-keyword-redirect-with-match-mode/166028 "2019-01-28T16:30:30Z")

</div>

Hi, We are looking for keyword redirect with match mode. Does this feature in Elasticsearch? Thank you!

---

## [Lightweight Elastic Container](https://discuss.elastic.co/t/lightweight-elastic-container/166025)

<div class="topic-metadata">

**Author:** [@Joey\_Ross](https://discuss.elastic.co/u/Joey_Ross)\
**Replies:** 0\
**Last updated:** [January 28, 2019, 4:11pm UTC](https://discuss.elastic.co/t/lightweight-elastic-container/166025 "2019-01-28T16:11:32Z")

</div>

I was wondering what all was involved in building the current public Elasticsearch image: docker.elastic.co/elasticsearch/elasticsearch:6.5.4 . I notice that the image is a whopping 774 MB. I was toying with the idea of …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1411)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1413)
