# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1428

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1429

---

## [How to match all item in nested array](https://discuss.elastic.co/t/how-to-match-all-item-in-nested-array/163873)

<div class="topic-metadata">

**Author:** [@Kit\_Tsang](https://discuss.elastic.co/u/Kit_Tsang)\
**Replies:** 4\
**Last updated:** [January 11, 2019, 2:39pm UTC](https://discuss.elastic.co/t/how-to-match-all-item-in-nested-array/163873 "2019-01-11T14:39:20Z")

</div>

The mapping: "working\_hour": { "type": "nested", "properties": { "from": { "type": "long" } } } Data example: Record 1: "\_source" : { …

---

## [Watcher send content of Key-Value](https://discuss.elastic.co/t/watcher-send-content-of-key-value/163349)

<div class="topic-metadata">

**Author:** [@Alejandro\_Martinez\_F](https://discuss.elastic.co/u/Alejandro_Martinez_F)\
**Replies:** 2\
**Last updated:** [January 11, 2019, 2:12pm UTC](https://discuss.elastic.co/t/watcher-send-content-of-key-value/163349 "2019-01-11T14:12:20Z")

</div>

Hello!! I'm using the watcher to send notifications. For example, an email notification. I would like to include value of Key-Values on email notification. Practical case example, I have a watcher that firing when fou…

---

## [LDAP authentication fails](https://discuss.elastic.co/t/ldap-authentication-fails/163803)

<div class="topic-metadata">

**Author:** [@jguzzetti](https://discuss.elastic.co/u/jguzzetti)\
**Replies:** 2\
**Last updated:** [January 11, 2019, 12:40pm UTC](https://discuss.elastic.co/t/ldap-authentication-fails/163803 "2019-01-11T12:40:08Z")

</div>

Hi! I'm tryin to conect my Elasticsearch 6.5.4 to my ldap server in my company but i could not login any user in the AD. The only user that i could meke him login is the bind\_dn user, but i get the following error messag…

---

## [RHEL Installation mode on Linux](https://discuss.elastic.co/t/rhel-installation-mode-on-linux/163540)

<div class="topic-metadata">

**Author:** [@reddy1262](https://discuss.elastic.co/u/reddy1262)\
**Replies:** 3\
**Last updated:** [January 11, 2019, 12:39pm UTC](https://discuss.elastic.co/t/rhel-installation-mode-on-linux/163540 "2019-01-11T12:39:12Z")

</div>

Hi Team, We are planning to setup ELK stack. Please let us know which is preferred way of installing ELK stack on RHEL 7. Either rpm based or tar.gz installation, which will help us smooth upgrade process whenever we n…

---

## [Rename index using script processor](https://discuss.elastic.co/t/rename-index-using-script-processor/163899)

<div class="topic-metadata">

**Author:** [@alberto.latorre](https://discuss.elastic.co/u/alberto.latorre)\
**Replies:** 0\
**Last updated:** [January 11, 2019, 12:23pm UTC](https://discuss.elastic.co/t/rename-index-using-script-processor/163899 "2019-01-11T12:23:18Z")

</div>

Hello all. I see in https://www.elastic.co/guide/en/elasticsearch/reference/6.5/script-processor.html that "Using the above pipeline, we can attempt to index a document into the any\_index index" I have made a test an…

---

## [Roll Over index in Elastic search](https://discuss.elastic.co/t/roll-over-index-in-elastic-search/163532)

<div class="topic-metadata">

**Author:** [@dilipgupta](https://discuss.elastic.co/u/dilipgupta)\
**Replies:** 6\
**Last updated:** [January 11, 2019, 12:13pm UTC](https://discuss.elastic.co/t/roll-over-index-in-elastic-search/163532 "2019-01-11T12:13:05Z")

</div>

Hi Team, We have requirement to load data from Hadoop to elastic search index through Spark Job. The condition for index to be rolled over is number of document. Below are the sample example i am doing for achievein…

---

## [Map nested fields of object from Logstash to Elasticsearch](https://discuss.elastic.co/t/map-nested-fields-of-object-from-logstash-to-elasticsearch/163869)

<div class="topic-metadata">

**Author:** [@kejsi](https://discuss.elastic.co/u/kejsi)\
**Replies:** 8\
**Last updated:** [January 11, 2019, 11:55am UTC](https://discuss.elastic.co/t/map-nested-fields-of-object-from-logstash-to-elasticsearch/163869 "2019-01-11T11:55:34Z")

</div>

I have an object which looks like this: "dummyObj":"{"id":6,"nrs":\[1,2,3,4\]}" I supply this object from Log4j2 using JsonLayout. Moreover, I have created an index in Elasticsearch like this: { "mappings": { …

---

## [ElasticSearch escape character](https://discuss.elastic.co/t/elasticsearch-escape-character/163216)

<div class="topic-metadata">

**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\
**Replies:** 1\
**Last updated:** [January 11, 2019, 11:33am UTC](https://discuss.elastic.co/t/elasticsearch-escape-character/163216 "2019-01-11T11:33:46Z")

</div>

How I escape Unicode characters using a quer\_string query? For example, my documents consist the following data: { "title":"@Sachin#$Tendular%^^\*bestplayer\*(tiger)!god~~ofcricket" } I am using the query\_strin…

---

## [Performance About Parent-Child vs Duplicating Data](https://discuss.elastic.co/t/performance-about-parent-child-vs-duplicating-data/163888)

<div class="topic-metadata">

**Author:** [@ismailcakir](https://discuss.elastic.co/u/ismailcakir)\
**Replies:** 1\
**Last updated:** [January 11, 2019, 11:25am UTC](https://discuss.elastic.co/t/performance-about-parent-child-vs-duplicating-data/163888 "2019-01-11T11:25:47Z")

</div>

Hello Everyone, I have two SQL table which are one to many relationship. Should i create parent-child relations or duplicate data in elasticsearch? For example: Object1(Parent) has 100 records, Object2(child) has 1000 …

---

## [No interface implementation for SortDescriptor class in NEST client for c#](https://discuss.elastic.co/t/no-interface-implementation-for-sortdescriptor-class-in-nest-client-for-c/163703)

<div class="topic-metadata">

**Author:** [@navead\_kazi](https://discuss.elastic.co/u/navead_kazi)\
**Replies:** 1\
**Last updated:** [January 11, 2019, 11:18am UTC](https://discuss.elastic.co/t/no-interface-implementation-for-sortdescriptor-class-in-nest-client-for-c/163703 "2019-01-11T11:18:42Z")

</div>

I am using NEST 5.6.5 for my c# client and wanted to write a query with a custom sort algorithm. I am using the below Sort Api public SearchDescriptor Sort(Func\<SortDescriptor\<T\> , IPromise\<IList\<ISort\>\>\> selector); I …

---

## [What will happen when a node which was moved out of the cluster rejoins the cluster after the cluster re balance?](https://discuss.elastic.co/t/what-will-happen-when-a-node-which-was-moved-out-of-the-cluster-rejoins-the-cluster-after-the-cluster-re-balance/163870)

<div class="topic-metadata">

**Author:** [@Siddaram\_Jamagav](https://discuss.elastic.co/u/Siddaram_Jamagav)\
**Replies:** 4\
**Last updated:** [January 11, 2019, 11:00am UTC](https://discuss.elastic.co/t/what-will-happen-when-a-node-which-was-moved-out-of-the-cluster-rejoins-the-cluster-after-the-cluster-re-balance/163870 "2019-01-11T11:00:47Z")

</div>

suppose i have cluster of 5 nodes and its status is green and out of 5 one node leaves the cluster and i have configured delayed shard allocation. After the shard time out of the delayed allocation the master promotes th…

---

## [Nested fields support for unstructured data](https://discuss.elastic.co/t/nested-fields-support-for-unstructured-data/163198)

<div class="topic-metadata">

**Author:** [@zdraganov](https://discuss.elastic.co/u/zdraganov)\
**Replies:** 1\
**Last updated:** [January 11, 2019, 10:35am UTC](https://discuss.elastic.co/t/nested-fields-support-for-unstructured-data/163198 "2019-01-11T10:35:59Z")

</div>

Hello folks, I want to use nested field that storing unstructured data. For example I want to store "orders" and "login\_attempts" in same nested array called "events". Both of them has different parameters and "type" p…

---

## [Structure of the result is not readable](https://discuss.elastic.co/t/structure-of-the-result-is-not-readable/163090)

<div class="topic-metadata">

**Author:** [@SankalpSood](https://discuss.elastic.co/u/SankalpSood)\
**Replies:** 8\
**Last updated:** [January 11, 2019, 10:35am UTC](https://discuss.elastic.co/t/structure-of-the-result-is-not-readable/163090 "2019-01-11T10:35:57Z")

</div>

I have a 2 level nesting in my index. Like a nested object c inside a nested object b inside a flat object a . Now when I am applying a cross field search on nested and inner nested fields and using inner hits, I am gett…

---

## [Ignore doc versioning ES 6.5](https://discuss.elastic.co/t/ignore-doc-versioning-es-6-5/163551)

<div class="topic-metadata">

**Author:** [@abaullosa](https://discuss.elastic.co/u/abaullosa)\
**Replies:** 12\
**Last updated:** [January 11, 2019, 10:29am UTC](https://discuss.elastic.co/t/ignore-doc-versioning-es-6-5/163551 "2019-01-11T10:29:12Z")

</div>

Hi guys. I need to ignore the Doc version once creating a new document, I need to insert a document and wait for another transaction to update that document. since this happens some time extremely fast, Im receiving a l…

---

## [Regression ES 6.2 -\> 6.5: Watch condition "Cannot cast from \[java.util.HashMap\] to \[boolean\]."](https://discuss.elastic.co/t/regression-es-6-2-6-5-watch-condition-cannot-cast-from-java-util-hashmap-to-boolean/161180)

<div class="topic-metadata">

**Author:** [@ypid-geberit](https://discuss.elastic.co/u/ypid-geberit)\
**Replies:** 0\
**Last updated:** [December 17, 2018, 2:47pm UTC](https://discuss.elastic.co/t/regression-es-6-2-6-5-watch-condition-cannot-cast-from-java-util-hashmap-to-boolean/161180 "2018-12-17T14:47:49Z")

</div>

I found a regression when testing ES 6.5. Refer to the following watch script condition: --- # yamllint disable rule:line-length rule:comments-indentation condition: script: inline: | HashMap test = \['test…

---

## [elastic cloud에서 PUT을 하면 다음과 같은 에러가 발생합니다.](https://discuss.elastic.co/t/elastic-cloud-put/163879)

<div class="topic-metadata">

**Author:** [@27ed17edc0402639d880](https://discuss.elastic.co/u/27ed17edc0402639d880)\
**Replies:** 0\
**Last updated:** [January 11, 2019, 10:05am UTC](https://discuss.elastic.co/t/elastic-cloud-put/163879 "2019-01-11T10:05:00Z")

</div>

nori tokenizer를 설치 하였고, 사용자 사전을 https://www.elastic.co/guide/en/elasticsearch/plugins/6.4/analysis-nori-tokenizer.html 여기와 똑같이 올렸습니다. 실행하면 아래와 같이 에러가 발생하는데.. 무슨 문제일까요? { "status": 400, "error": { "root\_cause": \[ …

---

## [Recovery shard makes write rejected and iowait increased](https://discuss.elastic.co/t/recovery-shard-makes-write-rejected-and-iowait-increased/162792)

<div class="topic-metadata">

**Author:** [@ttdata](https://discuss.elastic.co/u/ttdata)\
**Replies:** 13\
**Last updated:** [January 11, 2019, 9:43am UTC](https://discuss.elastic.co/t/recovery-shard-makes-write-rejected-and-iowait-increased/162792 "2019-01-11T09:43:00Z")

</div>

Hello Guys, I would like to share with you my usecase. Elasticsearch information : ES version : 6.5.1 Hot Nodes : 13 hot with 192Go RAM(Heap 94Go RAM), 5x500Go SSD, CPU \* 2x Intel® Xeon® E5 2640 v4 Shards : Around 4.…

---

## [How i can use \*\*bool query\*\* in \*\*post\_filter\*\*](https://discuss.elastic.co/t/how-i-can-use-bool-query-in-post-filter/163812)

<div class="topic-metadata">

**Author:** [@rria](https://discuss.elastic.co/u/rria)\
**Replies:** 2\
**Last updated:** [January 11, 2019, 9:21am UTC](https://discuss.elastic.co/t/how-i-can-use-bool-query-in-post-filter/163812 "2019-01-11T09:21:41Z")

</div>

I I tried this search but not working GET ecommerce/products/\_search { "size": 0, "aggs": { "all\_color": { "terms": { "field": "color.keyword" } } }, "post\_filter": { "query": {…

---

## [The settings of java.policy](https://discuss.elastic.co/t/the-settings-of-java-policy/163296)

<div class="topic-metadata">

**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\
**Replies:** 1\
**Last updated:** [January 11, 2019, 9:13am UTC](https://discuss.elastic.co/t/the-settings-of-java-policy/163296 "2019-01-11T09:13:02Z")

</div>

在java.policy中增加： grant codeBase "file: /user.home/elasticsearch-6.5.1/-", { permission java.security.AllPermission; }; The bootstrap check failed. While when I add something like the following: grant codeBase "f…

---

## [Elastic throw exception when second record to index](https://discuss.elastic.co/t/elastic-throw-exception-when-second-record-to-index/162803)

<div class="topic-metadata">

**Author:** [@osman](https://discuss.elastic.co/u/osman)\
**Replies:** 1\
**Last updated:** [January 11, 2019, 9:08am UTC](https://discuss.elastic.co/t/elastic-throw-exception-when-second-record-to-index/162803 "2019-01-11T09:08:36Z")

</div>

I use below code to index some data , I mean Blog Post \` var response = await this.client.IndexAsync\<CachePostModel\>(model, idx =\> idx.Index(index)); if (!response.IsValid) { return …

---

## [Elasticsearch JvmGcMonitorService overhead](https://discuss.elastic.co/t/elasticsearch-jvmgcmonitorservice-overhead/163222)

<div class="topic-metadata">

**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\
**Replies:** 9\
**Last updated:** [January 11, 2019, 9:02am UTC](https://discuss.elastic.co/t/elasticsearch-jvmgcmonitorservice-overhead/163222 "2019-01-11T09:02:08Z")

</div>

Hi, we are having ELK 5.4.3 one node, one daily indice, timeseries data with no changes in them. One indice has around 25 GB data and it's stored in 2 shards. Few times a day I can see this warning in elasticsearch log: …

---

## [Problem with filebeat and watcher](https://discuss.elastic.co/t/problem-with-filebeat-and-watcher/163769)

<div class="topic-metadata">

**Author:** [@marcandre](https://discuss.elastic.co/u/marcandre)\
**Replies:** 2\
**Last updated:** [January 11, 2019, 8:46am UTC](https://discuss.elastic.co/t/problem-with-filebeat-and-watcher/163769 "2019-01-11T08:46:10Z")

</div>

Hello, I have a strange issue where i created a watcher alert. It was working well since last friday. For some reason, now that watcher send alert regarding the same event from 2018-12-14. I deleted and recreated the sa…

---

## [Elastic search create Index is failing](https://discuss.elastic.co/t/elastic-search-create-index-is-failing/163843)

<div class="topic-metadata">

**Author:** [@ganil.89](https://discuss.elastic.co/u/ganil.89)\
**Replies:** 2\
**Last updated:** [January 11, 2019, 7:59am UTC](https://discuss.elastic.co/t/elastic-search-create-index-is-failing/163843 "2019-01-11T07:59:37Z")

</div>

I am trying to create index with High Rest Client, version 6.5.0 CreateIndexRequest createIndexRequest = new CreateIndexRequest(); createIndexRequest.index(indexName); createIndexRequest.settings(source, XContentType.…

---

## [Faceted search aggregation single text field separated values](https://discuss.elastic.co/t/faceted-search-aggregation-single-text-field-separated-values/163738)

<div class="topic-metadata">

**Author:** [@ktb](https://discuss.elastic.co/u/ktb)\
**Replies:** 1\
**Last updated:** [January 11, 2019, 7:59am UTC](https://discuss.elastic.co/t/faceted-search-aggregation-single-text-field-separated-values/163738 "2019-01-11T07:59:25Z")

</div>

Hy, currently i create a faceted search for our Onlineshop. I create Filters with the aggregation. It works fine. But how can i make a filter from a field, where multiple values separated by special characters. Examp…

---

## [Force merge reduced performance](https://discuss.elastic.co/t/force-merge-reduced-performance/163838)

<div class="topic-metadata">

**Author:** [@nuwancs](https://discuss.elastic.co/u/nuwancs)\
**Replies:** 1\
**Last updated:** [January 11, 2019, 7:16am UTC](https://discuss.elastic.co/t/force-merge-reduced-performance/163838 "2019-01-11T07:16:24Z")

</div>

Hi Team, I forced merged my index to reduce segment size from 82 to 5, with the hope of increasing the search performance. Dashboard load time for the same index was as follows, 82 segments - 10 seconds 5 segments - …

---

## [How to create integration test cases for elastic search application using RestHighLevelClient and embedded elastic search](https://discuss.elastic.co/t/how-to-create-integration-test-cases-for-elastic-search-application-using-resthighlevelclient-and-embedded-elastic-search/163844)

<div class="topic-metadata">

**Author:** [@ganil.89](https://discuss.elastic.co/u/ganil.89)\
**Replies:** 1\
**Last updated:** [January 11, 2019, 7:11am UTC](https://discuss.elastic.co/t/how-to-create-integration-test-cases-for-elastic-search-application-using-resthighlevelclient-and-embedded-elastic-search/163844 "2019-01-11T07:11:07Z")

</div>

Recently we have upgraded from Transport client to RestHighLevelClient, how to develop integration tests using RestHighLevelClient and embedded elastic search, since we want to test DAO layer as well. Also please propos…

---

## [Elastic search data availability issue](https://discuss.elastic.co/t/elastic-search-data-availability-issue/163680)

<div class="topic-metadata">

**Author:** [@Irti](https://discuss.elastic.co/u/Irti)\
**Replies:** 4\
**Last updated:** [January 11, 2019, 7:10am UTC](https://discuss.elastic.co/t/elastic-search-data-availability-issue/163680 "2019-01-11T07:10:05Z")

</div>

Hello everyone, I developed service (based on our use case) on top of elasticsearch node client. For the testing of service, I wrote some functional tests, in those tests, I perform the following steps: Create an index …

---

## [The es time sequence store strategy](https://discuss.elastic.co/t/the-es-time-sequence-store-strategy/163848)

<div class="topic-metadata">

**Author:** [@ennian001](https://discuss.elastic.co/u/ennian001)\
**Replies:** 4\
**Last updated:** [January 11, 2019, 6:44am UTC](https://discuss.elastic.co/t/the-es-time-sequence-store-strategy/163848 "2019-01-11T06:44:28Z")

</div>

IS elasticsearch have a sequential storage strategy? if have Where the official document? Could anybody give me the url that describes this thing，plz.

---

## [How to reduce thread-pool data rejection in elasticsearch cluster?](https://discuss.elastic.co/t/how-to-reduce-thread-pool-data-rejection-in-elasticsearch-cluster/162400)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 23\
**Last updated:** [January 2, 2019, 7:21pm UTC](https://discuss.elastic.co/t/how-to-reduce-thread-pool-data-rejection-in-elasticsearch-cluster/162400 "2019-01-02T19:21:39Z")

</div>

My cluster has 3 nodes Linux3 - master node (2 core 8 gb ram) Linux2 - master and data node (4 core 8 gb ram) Linux1 - data node (2 core 8 gb ram) cluster having big amound of thread-pool rejection count. What is…

---

## [Elasticsearch Ingest Support For GeoIP2 ISP](https://discuss.elastic.co/t/elasticsearch-ingest-support-for-geoip2-isp/163794)

<div class="topic-metadata">

**Author:** [@Evesy](https://discuss.elastic.co/u/Evesy)\
**Replies:** 1\
**Last updated:** [January 11, 2019, 2:08am UTC](https://discuss.elastic.co/t/elasticsearch-ingest-support-for-geoip2-isp/163794 "2019-01-11T02:08:58Z")

</div>

Hi, Does the Elasticsearch ingest plugin support the MaxMind GeoIP2 ISP database? I saw that is was added to Logstash a while back (https://github.com/logstash-plugins/logstash-filter-geoip/pull/111) however when trying…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1427)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1429)
