# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1447 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1448 --- ## [Query time in kibana search in the discover tab](https://discuss.elastic.co/t/query-time-in-kibana-search-in-the-discover-tab/161604)
**Author:** [@David\_Moreno](https://discuss.elastic.co/u/David_Moreno)\ **Replies:** 0\ **Last updated:** [December 19, 2018, 11:27pm UTC](https://discuss.elastic.co/t/query-time-in-kibana-search-in-the-discover-tab/161604 "2018-12-19T23:27:27Z")
Hello, Im playing around kibana and I'm trying to search in kibana a time. 14:50:01.000 When I typed it in and searched it, nothing was returned. Was wondering is manually clicking in the time is the only for search… --- ## [Please help with Elasticsearch SQL Error: "Does not know how to convert argument Div\[\] for function Max\[\]"](https://discuss.elastic.co/t/please-help-with-elasticsearch-sql-error-does-not-know-how-to-convert-argument-div-for-function-max/161308)
**Author:** [@999chris](https://discuss.elastic.co/u/999chris)\ **Replies:** 2\ **Last updated:** [December 19, 2018, 10:11pm UTC](https://discuss.elastic.co/t/please-help-with-elasticsearch-sql-error-does-not-know-how-to-convert-argument-div-for-function-max/161308 "2018-12-19T22:11:47Z")
I'm getting the error on the following: SELECT AVG(((dateupdated-datecreated) + 0.0) / (DURATIONMILLIS + 0.0)) AS "Ratio" FROM "mip\*" WHERE key = 'ottvod' AND WORKFLOWSTATUSID = 0 GROUP BY 'PROVIDERID' Elasticsearch SQ… --- ## [Error when elasticsearch xpack.watcher.enabled:false](https://discuss.elastic.co/t/error-when-elasticsearch-xpack-watcher-enabled-false/161595)
**Author:** [@erikstephens](https://discuss.elastic.co/u/erikstephens)\ **Replies:** 0\ **Last updated:** [December 19, 2018, 9:15pm UTC](https://discuss.elastic.co/t/error-when-elasticsearch-xpack-watcher-enabled-false/161595 "2018-12-19T21:15:48Z")
Using elasticsearch & metricbeat 6.5.3, I get this error when trying to ship xpack.enabled:true node\_stats to a 6.5.3 elasticsearch monitoring cluster: 2018-12-19T14:42:05.741Z ERROR node\_stats/data\_xpack.go:208 failur… --- ## [Heterogeneous storage (SSD & non-SSD) for ELK](https://discuss.elastic.co/t/heterogeneous-storage-ssd-non-ssd-for-elk/161588)
**Author:** [@pinkesh.valdria](https://discuss.elastic.co/u/pinkesh.valdria)\ **Replies:** 1\ **Last updated:** [December 19, 2018, 8:12pm UTC](https://discuss.elastic.co/t/heterogeneous-storage-ssd-non-ssd-for-elk/161588 "2018-12-19T20:12:20Z")
Hi, Can I use a mix of SSD storage and non-SSD block storage on ELK instances and configure it to use SSD storage for task which can benefits from high IO and performance and use non-SSD for non-critical task. eg: I … --- ## [Docker OS update and ES cluster state](https://discuss.elastic.co/t/docker-os-update-and-es-cluster-state/161586)
**Author:** [@mosiddi](https://discuss.elastic.co/u/mosiddi)\ **Replies:** 0\ **Last updated:** [December 19, 2018, 7:20pm UTC](https://discuss.elastic.co/t/docker-os-update-and-es-cluster-state/161586 "2018-12-19T19:20:37Z")
Hi, Anyone explored option of hooking up OS update process with ES cluster state so next container instance is picked up for OS update only when ES cluster state is back to green? Also, can anyone point to wiki/article… --- ## [Spring data elastic-search integration failing with Caused by: java.lang.NoSuchMethodError: org.elasticsearch.common.settings.Settings$Builder.put(\[Ljava/lang/Object;)Lorg/elasticsearch/common/settings/Settings$Builder;](https://discuss.elastic.co/t/spring-data-elastic-search-integration-failing-with-caused-by-java-lang-nosuchmethoderror-org-elasticsearch-common-settings-settings-builder-put-ljava-lang-object-lorg-elasticsearch-common-settings-settings-builder/161418)
**Author:** [@vijaymohan](https://discuss.elastic.co/u/vijaymohan)\ **Replies:** 3\ **Last updated:** [December 19, 2018, 6:23pm UTC](https://discuss.elastic.co/t/spring-data-elastic-search-integration-failing-with-caused-by-java-lang-nosuchmethoderror-org-elasticsearch-common-settings-settings-builder-put-ljava-lang-object-lorg-elasticsearch-common-settings-settings-builder/161418 "2018-12-19T18:23:13Z")
I am upgrading elastic 2.x to 6.x. I have to update the spring data dependency as well to do the elastic upgrade. (Using elastic cloud managed service with x-pack-transport) Here is my dependencies: spring-data-elastic… --- ## [Elasticsearch query to classify new/recurring instances](https://discuss.elastic.co/t/elasticsearch-query-to-classify-new-recurring-instances/161575)
**Author:** [@bbking](https://discuss.elastic.co/u/bbking)\ **Replies:** 0\ **Last updated:** [December 19, 2018, 5:58pm UTC](https://discuss.elastic.co/t/elasticsearch-query-to-classify-new-recurring-instances/161575 "2018-12-19T17:58:00Z")
I'm trying to write a custom filter in Kibana Discover tab using ES Query DSL. I want to classify instances within a particular time period. Assume each document has following fields, I want to find all instances between… --- ## [Term query (max) timestamp question](https://discuss.elastic.co/t/term-query-max-timestamp-question/160804)
**Author:** [@mgolubov55](https://discuss.elastic.co/u/mgolubov55)\ **Replies:** 6\ **Last updated:** [December 19, 2018, 5:38pm UTC](https://discuss.elastic.co/t/term-query-max-timestamp-question/160804 "2018-12-19T17:38:49Z")
Is this kind of query possible? GET /logstash\*/\_search { "query": { "term": {"@timestamp": \} } } some kind of inline process that gets the value for @timesta… --- ## [Unable to retrieve Elastic data by using GeoServer CQL Filters](https://discuss.elastic.co/t/unable-to-retrieve-elastic-data-by-using-geoserver-cql-filters/161405)
**Author:** [@Dp24](https://discuss.elastic.co/u/Dp24)\ **Replies:** 1\ **Last updated:** [December 19, 2018, 5:06pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-elastic-data-by-using-geoserver-cql-filters/161405 "2018-12-19T17:06:35Z")
I am working in gis project. i am using elastic search plugin for GeoServer. So, I am able to access Elastic search data in GeoServer. I am stored GeoJSON Data in Elastic search and also create mapping for geo-shape bef… --- ## [Query on index-pattern gets more results than expected](https://discuss.elastic.co/t/query-on-index-pattern-gets-more-results-than-expected/161565)
**Author:** [@apiras](https://discuss.elastic.co/u/apiras)\ **Replies:** 0\ **Last updated:** [December 19, 2018, 5:02pm UTC](https://discuss.elastic.co/t/query-on-index-pattern-gets-more-results-than-expected/161565 "2018-12-19T17:02:22Z")
Hi all, I'm using Elasticsearch 6.5.0. I created 3 index patterns with Kibana. They are like bank, bank\* and bank2. I'd like to search by API if the index bank is available and query ES in this way: GET /.kibana/\_sea… --- ## [Having same order in aggregation](https://discuss.elastic.co/t/having-same-order-in-aggregation/160978)
**Author:** [@3ms1](https://discuss.elastic.co/u/3ms1)\ **Replies:** 2\ **Last updated:** [December 19, 2018, 4:35pm UTC](https://discuss.elastic.co/t/having-same-order-in-aggregation/160978 "2018-12-19T16:35:49Z")
Hi, I have a function score query sorted by score in desc. In aggregation, however, the order is not the same even though it is also sorted by max score in desc. How will it be possible to do this? Cheers, --- ## [Optimal settings / Computer specifications](https://discuss.elastic.co/t/optimal-settings-computer-specifications/161163)
**Author:** [@nahiko2000](https://discuss.elastic.co/u/nahiko2000)\ **Replies:** 3\ **Last updated:** [December 19, 2018, 4:10pm UTC](https://discuss.elastic.co/t/optimal-settings-computer-specifications/161163 "2018-12-19T16:10:29Z")
Hi! I am new at elastic stack, I have installed Filebeat in around 15 servers (15 diferent computers (some Windows some Linux)) to get Tomcat logs and JMX data. I have installed in another computer (Linux), Logstash (t… --- ## [Remote Cluster Benchmark test run fails to start](https://discuss.elastic.co/t/remote-cluster-benchmark-test-run-fails-to-start/161212)
**Author:** [@ajay\_bh111](https://discuss.elastic.co/u/ajay_bh111)\ **Replies:** 3\ **Last updated:** [December 19, 2018, 3:53pm UTC](https://discuss.elastic.co/t/remote-cluster-benchmark-test-run-fails-to-start/161212 "2018-12-19T15:53:30Z")
ES cluster version 6.5.3. When trying to run benchmarking remote cluster with http\_logs, it fails with error: Command issued, error message, rally.ini and error logs are provided below. Thanks Command to run benchma… --- ## [Setting up Elasticssearch cluster in cloud](https://discuss.elastic.co/t/setting-up-elasticssearch-cluster-in-cloud/158799)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 3\ **Last updated:** [December 19, 2018, 3:53pm UTC](https://discuss.elastic.co/t/setting-up-elasticssearch-cluster-in-cloud/158799 "2018-12-19T15:53:09Z")
Would like to know any pitfalls in setting up the elastic cluster in AWS for log analysis use case where the log files resides in the data center. Also if any challenges in setting the required configuration to have the … --- ## [Elastic Cloud-Watcher Action Conditions](https://discuss.elastic.co/t/elastic-cloud-watcher-action-conditions/161304)
**Author:** [@jicahulob](https://discuss.elastic.co/u/jicahulob)\ **Replies:** 4\ **Last updated:** [December 19, 2018, 3:23pm UTC](https://discuss.elastic.co/t/elastic-cloud-watcher-action-conditions/161304 "2018-12-19T15:23:16Z")
Hello Team, We want to use Elastic Cloud and all the other features including X-pack and we've considered the Watcher alerting options for our demands. First we thought about the webhook for receiving data from our ldap… --- ## [Backup overview and strategy](https://discuss.elastic.co/t/backup-overview-and-strategy/161529)
**Author:** [@genseb](https://discuss.elastic.co/u/genseb)\ **Replies:** 2\ **Last updated:** [December 19, 2018, 3:01pm UTC](https://discuss.elastic.co/t/backup-overview-and-strategy/161529 "2018-12-19T15:01:06Z")
Hi, I have a 5 nodes elasticsearch cluster that I want to backup. Backup to S3 works well but I have questions about snapshots way of working. The first backup took 30 minutes and the other took 10 secondes. I've con… --- ## [Insert a must\_not match inside nested filtered query](https://discuss.elastic.co/t/insert-a-must-not-match-inside-nested-filtered-query/161519)
**Author:** [@Nedko\_Georgiev](https://discuss.elastic.co/u/Nedko_Georgiev)\ **Replies:** 1\ **Last updated:** [December 19, 2018, 1:12pm UTC](https://discuss.elastic.co/t/insert-a-must-not-match-inside-nested-filtered-query/161519 "2018-12-19T13:12:43Z")
Here's my current query, which is returning 100 results, instead of 99. { "query": { "bool": { "filter": \[ { "nested": { "path": "properties", "query": { … --- ## [Hardware requirement for elasticsearch](https://discuss.elastic.co/t/hardware-requirement-for-elasticsearch/161280)
**Author:** [@Nusrath](https://discuss.elastic.co/u/Nusrath)\ **Replies:** 5\ **Last updated:** [December 19, 2018, 12:42pm UTC](https://discuss.elastic.co/t/hardware-requirement-for-elasticsearch/161280 "2018-12-19T12:42:31Z")
I'm trying to setup elasticsearch cluster. I will get maximum of 20TB of data. So what will be hardware required to set up ElasticSearch 6.x and kibana 6.x Which is better Elastic search category –Open source/ Gold/Pl… --- ## [Elasticsearch: Understanding Match query](https://discuss.elastic.co/t/elasticsearch-understanding-match-query/160479)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 15\ **Last updated:** [December 19, 2018, 11:45am UTC](https://discuss.elastic.co/t/elasticsearch-understanding-match-query/160479 "2018-12-19T11:45:53Z")
Hi Team Can you please tell the difference between below two queries? GET /\_search { "query": { "match" : { "message" : "this is a test" } } } GET /\_search { "query": { "match" : { "message" : { "query… --- ## [Integrate elastic search with MySQL](https://discuss.elastic.co/t/integrate-elastic-search-with-mysql/161489)
**Author:** [@Shyju\_M](https://discuss.elastic.co/u/Shyju_M)\ **Replies:** 2\ **Last updated:** [December 19, 2018, 11:05am UTC](https://discuss.elastic.co/t/integrate-elastic-search-with-mysql/161489 "2018-12-19T11:05:46Z")
I would like to integrate elastic search for my existing website to speed up the search functionality. I have seen this plugin to import data from mysql to ES https://github.com/jprante/elasticsearch-jdbc Is the plugin … --- ## [Potential Use Case for Watcher - is this just wrong?](https://discuss.elastic.co/t/potential-use-case-for-watcher-is-this-just-wrong/161494)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 1\ **Last updated:** [December 19, 2018, 10:50am UTC](https://discuss.elastic.co/t/potential-use-case-for-watcher-is-this-just-wrong/161494 "2018-12-19T10:50:16Z")
ADMINS: Please feel free to move this to X-Pack. I can't seem to create topics in the X-Pack category, and the description of it says: For X-Pack related questions, please go to the Elasticsearch, Logstash, Kibana or B… --- ## [How to loop the hit result and compare the value for each from query result?](https://discuss.elastic.co/t/how-to-loop-the-hit-result-and-compare-the-value-for-each-from-query-result/161491)
**Author:** [@Sky\_Iprd](https://discuss.elastic.co/u/Sky_Iprd)\ **Replies:** 0\ **Last updated:** [December 19, 2018, 10:30am UTC](https://discuss.elastic.co/t/how-to-loop-the-hit-result-and-compare-the-value-for-each-from-query-result/161491 "2018-12-19T10:30:37Z")
Hi , I'm new to DSL query, I have a use case like 'find the id that DPS \> 100 and it does increasing in 2018 \<\> compare to 2017. \[DATA\] ID DPS DATE 5 100 2017 5 110 2018 1 50 … --- ## [Caused by: org.elasticsearch.ElasticsearchTimeoutException: no activity after \[30m\]](https://discuss.elastic.co/t/caused-by-org-elasticsearch-elasticsearchtimeoutexception-no-activity-after-30m/161477)
**Author:** [@HugoP](https://discuss.elastic.co/u/HugoP)\ **Replies:** 1\ **Last updated:** [December 19, 2018, 9:45am UTC](https://discuss.elastic.co/t/caused-by-org-elasticsearch-elasticsearchtimeoutexception-no-activity-after-30m/161477 "2018-12-19T09:45:44Z")
Hi, A rebalance operation is currently in progress on my cluster because a node was added. From time to time, the cluster health status changed from green to yellow. I see a lot of errors like this one: (no activity af… --- ## [Found Same Error](https://discuss.elastic.co/t/found-same-error/161452)
**Author:** [@Maulish\_Shah](https://discuss.elastic.co/u/Maulish_Shah)\ **Replies:** 5\ **Last updated:** [December 19, 2018, 9:11am UTC](https://discuss.elastic.co/t/found-same-error/161452 "2018-12-19T09:11:37Z")
Continuing the discussion from "not\_x\_content\_exception" while trying to PUT simple file with column mappings into ES via cURL: with cURL - curl -X PUT "localhost:9200/test?pretty" -H "Content-Type: application/json" -d… --- ## [Elasticsearch issue sync](https://discuss.elastic.co/t/elasticsearch-issue-sync/161437)
**Author:** [@yan\_gong](https://discuss.elastic.co/u/yan_gong)\ **Replies:** 2\ **Last updated:** [December 19, 2018, 8:55am UTC](https://discuss.elastic.co/t/elasticsearch-issue-sync/161437 "2018-12-19T08:55:30Z")
Hi, I have met some questions of Elasticsearch in recently that the shards of primary is different from replicas ,besides ,there are some waring in my logs such as " \[es-social-node-1\] \[top\_index\_mt4\_analysis\_u… --- ## [Will the number of indices become a performance bottleneck?](https://discuss.elastic.co/t/will-the-number-of-indices-become-a-performance-bottleneck/161035)
**Author:** [@wxywj1005](https://discuss.elastic.co/u/wxywj1005)\ **Replies:** 9\ **Last updated:** [December 19, 2018, 8:47am UTC](https://discuss.elastic.co/t/will-the-number-of-indices-become-a-performance-bottleneck/161035 "2018-12-19T08:47:00Z")
my case is that users can only search their own data, and the scores of the results are only related to their own data users won't have much data. I want to create index per user. Will too more indices be a huge perfo… --- ## [Query with and & or on 2 lists](https://discuss.elastic.co/t/query-with-and-or-on-2-lists/161462)
**Author:** [@Michael\_Mangeng](https://discuss.elastic.co/u/Michael_Mangeng)\ **Replies:** 1\ **Last updated:** [December 19, 2018, 8:21am UTC](https://discuss.elastic.co/t/query-with-and-or-on-2-lists/161462 "2018-12-19T08:21:27Z")
Hi all, i'm new to elasticsearch and i want to perform a specific query i cannot figure out how to design. My Document is the following: "\_source": { "path": \[ "d9977506-61e0-45bb-81db-c5bac79248c0", "0c3c36ae-12… --- ## [Storage gains in removing redundant message fields](https://discuss.elastic.co/t/storage-gains-in-removing-redundant-message-fields/159812)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 10\ **Last updated:** [December 19, 2018, 8:01am UTC](https://discuss.elastic.co/t/storage-gains-in-removing-redundant-message-fields/159812 "2018-12-19T08:01:17Z")
Consider the following document (no logstash is involved here): { "\_index": "day-wise-2018.11.25", "\_type": "type1", "\_id": "11111111111111111111111111111111111111111111111111111111", "\_score": 1, "\_… --- ## [Terms query using \_delete\_by\_query](https://discuss.elastic.co/t/terms-query-using-delete-by-query/161465)
**Author:** [@esdev3114](https://discuss.elastic.co/u/esdev3114)\ **Replies:** 0\ **Last updated:** [December 19, 2018, 7:38am UTC](https://discuss.elastic.co/t/terms-query-using-delete-by-query/161465 "2018-12-19T07:38:00Z")
Hi, Could someone please let me know whether we can use terms query for deleting list of documents based on the given unique identification values using \_delete\_by\_query in ES. Thanks, Subhashini --- ## [How to do Performance Benchmark Elasticsearch on a Large Single Node Bare metal server?](https://discuss.elastic.co/t/how-to-do-performance-benchmark-elasticsearch-on-a-large-single-node-bare-metal-server/160965)
**Author:** [@sylvesterson](https://discuss.elastic.co/u/sylvesterson)\ **Replies:** 4\ **Last updated:** [December 19, 2018, 7:31am UTC](https://discuss.elastic.co/t/how-to-do-performance-benchmark-elasticsearch-on-a-large-single-node-bare-metal-server/160965 "2018-12-19T07:31:33Z")
Hello Elasticsearch users I'm trying to do few Performance Benchmark of the current Elasticsearch 6.5.2 (GA) on a Large Single Node Bare metal server. I could see Elasticsearch has some 8 Benchmarks from Geonames to NOA… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1446) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1448)