# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1440 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1441 --- ## [Percolate Queries](https://discuss.elastic.co/t/percolate-queries/162420)
**Author:** [@sebidchi](https://discuss.elastic.co/u/sebidchi)\ **Replies:** 0\ **Last updated:** [December 29, 2018, 4:32pm UTC](https://discuss.elastic.co/t/percolate-queries/162420 "2018-12-29T16:32:13Z")
Hello, Following recommendation from one of you, I changed the approach to perform queries to percolate. I've store each one of the named\_queries and it returns me the results "more or less" in the way I need. However… --- ## [GSuite SAML integration for ElasticCloud return 401](https://discuss.elastic.co/t/gsuite-saml-integration-for-elasticcloud-return-401/162408)
**Author:** [@Vincent\_Ngai](https://discuss.elastic.co/u/Vincent_Ngai)\ **Replies:** 3\ **Last updated:** [December 29, 2018, 11:40am UTC](https://discuss.elastic.co/t/gsuite-saml-integration-for-elasticcloud-return-401/162408 "2018-12-29T11:40:19Z")
I am using ElasticCloud and version in v6.5.4 , would like some help in here... What i wanna to do Using Gsuite and email as Kibana login Follow Post (https://www.elastic.co/guide/en/cloud/release-ms-14/ec-securing-cl… --- ## [\[ElasticSearch Cloud\] how to query the elasticsearch process's log](https://discuss.elastic.co/t/elasticsearch-cloud-how-to-query-the-elasticsearch-processs-log/161964)
**Author:** [@cduong](https://discuss.elastic.co/u/cduong)\ **Replies:** 1\ **Last updated:** [December 29, 2018, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-cloud-how-to-query-the-elasticsearch-processs-log/161964 "2018-12-29T10:43:39Z")
Hi, I'm using the Elastic Cloud (Hosted service). I want to query the ES process log. I digged through document site: https://www.elastic.co/guide/en/cloud/release-ms-14 . However I cannot know how to get the log. Is … --- ## [Possible Bug pertaining to query engine](https://discuss.elastic.co/t/possible-bug-pertaining-to-query-engine/162286)
**Author:** [@jsontrotter](https://discuss.elastic.co/u/jsontrotter)\ **Replies:** 10\ **Last updated:** [December 29, 2018, 7:00am UTC](https://discuss.elastic.co/t/possible-bug-pertaining-to-query-engine/162286 "2018-12-29T07:00:00Z")
Hi, Probably this is a bug, but the following simple boolean query returns no results. Yet if I remove one or the other of the two expressions, it does return results and quite clearly (I can see anyway) that there are … --- ## [Elastic search Service is getting stopped automatically](https://discuss.elastic.co/t/elastic-search-service-is-getting-stopped-automatically/162390)
**Author:** [@Nitin\_Chavan](https://discuss.elastic.co/u/Nitin_Chavan)\ **Replies:** 1\ **Last updated:** [December 29, 2018, 6:55am UTC](https://discuss.elastic.co/t/elastic-search-service-is-getting-stopped-automatically/162390 "2018-12-29T06:55:28Z")
The service is getting stopped automatically as soon as I start it. The elastic search version we are using is 6.3.2. Below is the error I am getting elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/syste… --- ## [Hive export data to es , throw a exception "EsHadoopInvalidRequest returned \[405|Method Not Allowed:\]"](https://discuss.elastic.co/t/hive-export-data-to-es-throw-a-exception-eshadoopinvalidrequest-returned-405-method-not-allowed/162392)
**Author:** [@4e90e4215b3ebadd7128](https://discuss.elastic.co/u/4e90e4215b3ebadd7128)\ **Replies:** 1\ **Last updated:** [December 29, 2018, 3:35am UTC](https://discuss.elastic.co/t/hive-export-data-to-es-throw-a-exception-eshadoopinvalidrequest-returned-405-method-not-allowed/162392 "2018-12-29T03:35:26Z")
Specific error message: java.io.IOException: org.elasticsearch.hadoop.rest.EsHadoopInvalidRequest: \[HEAD\] on \[index/type\] failed; server\[eshost:port\] returned \[405|Method Not Allowed:\] Hope to help --- ## [Script filter field value is in array](https://discuss.elastic.co/t/script-filter-field-value-is-in-array/161572)
**Author:** [@CrinaGrigore](https://discuss.elastic.co/u/CrinaGrigore)\ **Replies:** 3\ **Last updated:** [December 28, 2018, 11:31pm UTC](https://discuss.elastic.co/t/script-filter-field-value-is-in-array/161572 "2018-12-28T23:31:23Z")
Here is a part of my query: must\_not: { script: { script: { source: "doc\['type.keyword'\].value=='CHANNEL' ? doc\['id'\].value == 0 : \['1','3','7'\].contains(doc\['id'\].value"), lang: 'painless' … --- ## [Identify if hit is on main document or on its nested field documents](https://discuss.elastic.co/t/identify-if-hit-is-on-main-document-or-on-its-nested-field-documents/162381)
**Author:** [@roytmana](https://discuss.elastic.co/u/roytmana)\ **Replies:** 2\ **Last updated:** [December 28, 2018, 10:41pm UTC](https://discuss.elastic.co/t/identify-if-hit-is-on-main-document-or-on-its-nested-field-documents/162381 "2018-12-28T22:41:23Z")
I have a document that have a nested field. My query searches on both main document fields and its nested fields (using OR logic between main and nested field sets) but then I need to know if the hit was on main document… --- ## [Finding why long GCs occur and fixing efficiency issues in Elastic Cluster](https://discuss.elastic.co/t/finding-why-long-gcs-occur-and-fixing-efficiency-issues-in-elastic-cluster/162377)
**Author:** [@Alexandre\_Juma](https://discuss.elastic.co/u/Alexandre_Juma)\ **Replies:** 3\ **Last updated:** [December 28, 2018, 10:09pm UTC](https://discuss.elastic.co/t/finding-why-long-gcs-occur-and-fixing-efficiency-issues-in-elastic-cluster/162377 "2018-12-28T22:09:22Z")
Hi all, I'm trying to figure out why some of my elasticsearch cluster data nodes have frequent long GC Pauses, which in one month can actually cause around 1 or 2 daily Green -\> Red State Changes due to "failed to ping"… --- ## [Support for Shenandoah GC](https://discuss.elastic.co/t/support-for-shenandoah-gc/162378)
**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\ **Replies:** 1\ **Last updated:** [December 28, 2018, 9:12pm UTC](https://discuss.elastic.co/t/support-for-shenandoah-gc/162378 "2018-12-28T21:12:38Z")
Is there any official testing/support of the Shenandoah GC? The Shenandoah GC looks to have a vast number of improvements over the CMS GC that is standard. --- ## [Are there any plans for an official Go client?](https://discuss.elastic.co/t/are-there-any-plans-for-an-official-go-client/162292)
**Author:** [@lfv89](https://discuss.elastic.co/u/lfv89)\ **Replies:** 1\ **Last updated:** [December 28, 2018, 8:29pm UTC](https://discuss.elastic.co/t/are-there-any-plans-for-an-official-go-client/162292 "2018-12-28T20:29:53Z")
Maybe something in 2019? Thanks. --- ## [How partially update mapping](https://discuss.elastic.co/t/how-partially-update-mapping/162037)
**Author:** [@begemoth](https://discuss.elastic.co/u/begemoth)\ **Replies:** 3\ **Last updated:** [December 28, 2018, 8:25pm UTC](https://discuss.elastic.co/t/how-partially-update-mapping/162037 "2018-12-28T20:25:09Z")
I need to include new dynamic template for different languages base on document language definition. I don't want to upload all mapping ( dynamic templates) for all supported languages at the beginning. Instead I want to… --- ## [Unable to make a field aggregatable in kibana](https://discuss.elastic.co/t/unable-to-make-a-field-aggregatable-in-kibana/161912)
**Author:** [@sid\_nikhil](https://discuss.elastic.co/u/sid_nikhil)\ **Replies:** 26\ **Last updated:** [December 28, 2018, 8:03pm UTC](https://discuss.elastic.co/t/unable-to-make-a-field-aggregatable-in-kibana/161912 "2018-12-28T20:03:08Z")
I have a field called "message" . I need to make it as aggregatable. I am unable to do so . Can someone please suggest how to achieve that. --- ## [Help on migration from 1.5 to 6.5](https://discuss.elastic.co/t/help-on-migration-from-1-5-to-6-5/162362)
**Author:** [@thefred](https://discuss.elastic.co/u/thefred)\ **Replies:** 1\ **Last updated:** [December 28, 2018, 7:03pm UTC](https://discuss.elastic.co/t/help-on-migration-from-1-5-to-6-5/162362 "2018-12-28T19:03:51Z")
Hello I'm trying to upgrade an existing elasticSearch on version 1.5.2 to version 6.5.4. I was wondering if there's any recommendation on converting existing data. I'm able to perform a reload for some of the indices b… --- ## [Solr convert having problems with pattern\_replace filter](https://discuss.elastic.co/t/solr-convert-having-problems-with-pattern-replace-filter/162361)
**Author:** [@Robop](https://discuss.elastic.co/u/Robop)\ **Replies:** 1\ **Last updated:** [December 28, 2018, 3:53pm UTC](https://discuss.elastic.co/t/solr-convert-having-problems-with-pattern-replace-filter/162361 "2018-12-28T15:53:34Z")
Hi - I'm trying to convert to using ES having done SOLR for a long time so please bear with me. When I try and put the following I get error message... "Custom Analyzer \[text\_suggest\_analyzer\] failed to find filter und… --- ## [Working on old Indices](https://discuss.elastic.co/t/working-on-old-indices/162347)
**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\ **Replies:** 2\ **Last updated:** [December 28, 2018, 5:04pm UTC](https://discuss.elastic.co/t/working-on-old-indices/162347 "2018-12-28T17:04:37Z")
Hi! I was wondering if it's possible to "thin" documents in an index and by thinning I mean dropping 99.9% of docs in it - let's say all fields are numeric so I would like to find average of 1000 values, remove all thos… --- ## [Shard Stuck in INITIALIZING and RELOCATING for more than 12 hours](https://discuss.elastic.co/t/shard-stuck-in-initializing-and-relocating-for-more-than-12-hours/160298)
**Author:** [@TarunRamsinghani](https://discuss.elastic.co/u/TarunRamsinghani)\ **Replies:** 36\ **Last updated:** [December 28, 2018, 3:52pm UTC](https://discuss.elastic.co/t/shard-stuck-in-initializing-and-relocating-for-more-than-12-hours/160298 "2018-12-28T15:52:30Z")
We have cluster with large number of shards across multiple indices. We recently upgraded from ES 5.6 -\> 6.2.4. It was rolling upgrade as per instructions provided. After the upgrade now few of the shards are stuck in I… --- ## [Alerting on documents with 2 conditions](https://discuss.elastic.co/t/alerting-on-documents-with-2-conditions/162249)
**Author:** [@Chris\_Meyer](https://discuss.elastic.co/u/Chris_Meyer)\ **Replies:** 6\ **Last updated:** [December 28, 2018, 3:16pm UTC](https://discuss.elastic.co/t/alerting-on-documents-with-2-conditions/162249 "2018-12-28T15:16:00Z")
Hello, I'm trying to build an alert that matches 2 fields - an event\_id and a keyword. I need to trigger an action (which is working) if there are 4 counts in 5 minutes of: event\_id = 4776 AND keyword = "Audit Failur… --- ## [Elasticsearch Cluster with 1 master node and 2 data nodes](https://discuss.elastic.co/t/elasticsearch-cluster-with-1-master-node-and-2-data-nodes/162349)
**Author:** [@Ajinkya\_A](https://discuss.elastic.co/u/Ajinkya_A)\ **Replies:** 1\ **Last updated:** [December 28, 2018, 2:22pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-with-1-master-node-and-2-data-nodes/162349 "2018-12-28T14:22:56Z")
I am trying to crate a Elasticsearch Cluster with 1 Maste and 2 Data Node Below are the yml files for the same Master yml cluster.name: testing discovery.zen.ping.unicast.hosts: - 192.168.1.107 - 192.168.1.125 - 192.1… --- ## [Elasticsearch-py automatic cancelling](https://discuss.elastic.co/t/elasticsearch-py-automatic-cancelling/162247)
**Author:** [@raxawageme](https://discuss.elastic.co/u/raxawageme)\ **Replies:** 3\ **Last updated:** [December 28, 2018, 1:33pm UTC](https://discuss.elastic.co/t/elasticsearch-py-automatic-cancelling/162247 "2018-12-28T13:33:35Z")
Hello, there. I'm making some automated requests using elasticsearch-py. Those requests take some times but after a while (around 30 minutes) the search task doesn't exist anymore, while the same query using Kibana's co… --- ## [Match\_phrase not matching all terms](https://discuss.elastic.co/t/match-phrase-not-matching-all-terms/162221)
**Author:** [@mkarmi](https://discuss.elastic.co/u/mkarmi)\ **Replies:** 5\ **Last updated:** [December 28, 2018, 1:10pm UTC](https://discuss.elastic.co/t/match-phrase-not-matching-all-terms/162221 "2018-12-28T13:10:54Z")
Reading from elastic documentation: the match\_phrase query first analyzes the query string to produce a list of terms. It then searches for all the terms, but keeps only documents that contain all of the search ter… --- ## [Could not start elastic search 6.5.1 windows 8](https://discuss.elastic.co/t/could-not-start-elastic-search-6-5-1-windows-8/162294)
**Author:** [@sid\_nikhil](https://discuss.elastic.co/u/sid_nikhil)\ **Replies:** 1\ **Last updated:** [December 28, 2018, 12:02pm UTC](https://discuss.elastic.co/t/could-not-start-elastic-search-6-5-1-windows-8/162294 "2018-12-28T12:02:48Z")
Running ES 6.5.1 I have java intalled : jdk-8u181-windows-x64.exe trying to launch the elasticsearch.bat file gives us this: C:\\Users\\testuser\\Desktop\\ElasticSearch\\elasticsearch-6.5.1\\bin\>elasticsearch \\Common was u… --- ## [Security Setting Issues](https://discuss.elastic.co/t/security-setting-issues/162295)
**Author:** [@osamaikhlas](https://discuss.elastic.co/u/osamaikhlas)\ **Replies:** 5\ **Last updated:** [December 28, 2018, 10:47am UTC](https://discuss.elastic.co/t/security-setting-issues/162295 "2018-12-28T10:47:08Z")
Having issues in saving searches basically i can not edit in any thing. when i try to change the users settings it shows me permission denied. --- ## [Delete by query after realtime GET](https://discuss.elastic.co/t/delete-by-query-after-realtime-get/158546)
**Author:** [@ailin](https://discuss.elastic.co/u/ailin)\ **Replies:** 1\ **Last updated:** [November 30, 2018, 10:38am UTC](https://discuss.elastic.co/t/delete-by-query-after-realtime-get/158546 "2018-11-30T10:38:17Z")
Hi, everyone. I'm using elasticsearch 6.3.2. As stated in ES 6.3 documentation GET API is realtime unless realtime parameter is not passed with false value. It is also written that this realtime behavior is achieved by … --- ## [Can i get count(distinct user\_id) value after group by date hiving min(date)\>1539878295000?](https://discuss.elastic.co/t/can-i-get-count-distinct-user-id-value-after-group-by-date-hiving-min-date-1539878295000/162299)
**Author:** [@71146071aa6bc1005630](https://discuss.elastic.co/u/71146071aa6bc1005630)\ **Replies:** 1\ **Last updated:** [December 28, 2018, 10:18am UTC](https://discuss.elastic.co/t/can-i-get-count-distinct-user-id-value-after-group-by-date-hiving-min-date-1539878295000/162299 "2018-12-28T10:18:12Z")
SQL as follow: select count(distinct date) from ( select min(date) from table\_name group by user\_id having min(date) \>1539878295000 )a --- ## [TransportNodesStatsAction](https://discuss.elastic.co/t/transportnodesstatsaction/162215)
**Author:** [@surprise](https://discuss.elastic.co/u/surprise)\ **Replies:** 2\ **Last updated:** [December 28, 2018, 7:01am UTC](https://discuss.elastic.co/t/transportnodesstatsaction/162215 "2018-12-28T07:01:32Z")
Hi, everyone. I hava a cluster with seven nodes, four of them are used to store data, and the others are node.master. The elasticsearch version is 5.6.8. Recently, we find an exception in log file of node.master. When… --- ## [How can I use inner\_hits returned by child query as context in a script or query](https://discuss.elastic.co/t/how-can-i-use-inner-hits-returned-by-child-query-as-context-in-a-script-or-query/162114)
**Author:** [@huan1](https://discuss.elastic.co/u/huan1)\ **Replies:** 4\ **Last updated:** [December 28, 2018, 6:53am UTC](https://discuss.elastic.co/t/how-can-i-use-inner-hits-returned-by-child-query-as-context-in-a-script-or-query/162114 "2018-12-28T06:53:23Z")
e.g. there is one parent document: {"\_id": 1, "name": "th", "money": 100} and three child document: {"brand": "lenovo", "price": 20, "\_parent": 1} {"brand": "iphone", "price": 50, "\_parent": 1} {"brand": "mac", "pri… --- ## [ES 2 small JVMs vs 1 big JVM](https://discuss.elastic.co/t/es-2-small-jvms-vs-1-big-jvm/162195)
**Author:** [@dextermorgan](https://discuss.elastic.co/u/dextermorgan)\ **Replies:** 1\ **Last updated:** [December 28, 2018, 5:45am UTC](https://discuss.elastic.co/t/es-2-small-jvms-vs-1-big-jvm/162195 "2018-12-28T05:45:28Z")
Hi All, I am a newbie to elastic search and working on profiling our elastic search cluster. We are using i3.4x, that means 122G of RAM and 16 vCPUs. Currently, we are running 70G ES JVM (G1GC) and rest memory for Luce… --- ## [Addons to detect attacks](https://discuss.elastic.co/t/addons-to-detect-attacks/162204)
**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 3\ **Last updated:** [December 28, 2018, 5:39am UTC](https://discuss.elastic.co/t/addons-to-detect-attacks/162204 "2018-12-28T05:39:28Z")
Hi, Is there any addons or patterns available to detect any kind of attacks based on analyzing logs? --- ## [Avoiding the irrelevant documents in Elasticsearch](https://discuss.elastic.co/t/avoiding-the-irrelevant-documents-in-elasticsearch/162255)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 3\ **Last updated:** [December 28, 2018, 5:06am UTC](https://discuss.elastic.co/t/avoiding-the-irrelevant-documents-in-elasticsearch/162255 "2018-12-28T05:06:17Z")
Hi Team I've indexed few pdf files related to computer problems. Each document represents a book. Whenever user searches a query we are giving the url of the book as a response. query: GET testbooks/\_search { "\_so… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1439) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1441)