# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1448 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1449 --- ## [Including original value of field in addition to normalized value in aggregation](https://discuss.elastic.co/t/including-original-value-of-field-in-addition-to-normalized-value-in-aggregation/161460)
**Author:** [@seperman](https://discuss.elastic.co/u/seperman)\ **Replies:** 0\ **Last updated:** [December 19, 2018, 7:18am UTC](https://discuss.elastic.co/t/including-original-value-of-field-in-addition-to-normalized-value-in-aggregation/161460 "2018-12-19T07:18:07Z")
Hello, I'm running a bunch of aggregations on some keyword fields that have a normalizer. The aggregations get me the normalized values back as expected. But I need the original value to display to the user. Is there a … --- ## [Elasticsearch Storage In Opensource](https://discuss.elastic.co/t/elasticsearch-storage-in-opensource/161456)
**Author:** [@osamaikhlas](https://discuss.elastic.co/u/osamaikhlas)\ **Replies:** 1\ **Last updated:** [December 19, 2018, 7:04am UTC](https://discuss.elastic.co/t/elasticsearch-storage-in-opensource/161456 "2018-12-19T07:04:16Z")
Please tell me how much data can we upload in elastic stack? how much space is given in opensource version ? --- ## [Upgrade from 5.4 to 6.5 is not starting elasticsearch](https://discuss.elastic.co/t/upgrade-from-5-4-to-6-5-is-not-starting-elasticsearch/161446)
**Author:** [@thinkdffrnt](https://discuss.elastic.co/u/thinkdffrnt)\ **Replies:** 3\ **Last updated:** [December 19, 2018, 6:43am UTC](https://discuss.elastic.co/t/upgrade-from-5-4-to-6-5-is-not-starting-elasticsearch/161446 "2018-12-19T06:43:42Z")
Here is the log: Dec 17 18:53:01 masternodes-12345 elasticsearch\[17567\]: PWD=/usr/local/elasticsearch Dec 17 18:53:01 masternodes-12345 elasticsearch\[17567\]: LANG=en\_US.UTF-8 Dec 17 18:53:01 masternodes-12345 elastic… --- ## [Mapping Type](https://discuss.elastic.co/t/mapping-type/161442)
**Author:** [@Raghunadhan](https://discuss.elastic.co/u/Raghunadhan)\ **Replies:** 4\ **Last updated:** [December 19, 2018, 6:41am UTC](https://discuss.elastic.co/t/mapping-type/161442 "2018-12-19T06:41:19Z")
What is an Mapping and Mapping Type ?Iam new to Elasticsearch. --- ## [S3 snapshot not working after ELK upgrade to 6.4.2](https://discuss.elastic.co/t/s3-snapshot-not-working-after-elk-upgrade-to-6-4-2/161097)
**Author:** [@sreejiths](https://discuss.elastic.co/u/sreejiths)\ **Replies:** 12\ **Last updated:** [December 19, 2018, 6:01am UTC](https://discuss.elastic.co/t/s3-snapshot-not-working-after-elk-upgrade-to-6-4-2/161097 "2018-12-19T06:01:59Z")
Hi We have upgraded ELK from V5.6.8 to V6.4.2 . Upgrade has been completed but now i am not able to view or connect to on premises Cloud Object Storage . When i do "GET /\_snapshot/" i can see the registered SNAPSHOT RE… --- ## [Es 5.6.3 similarity setting to classic, confused about the querynorm](https://discuss.elastic.co/t/es-5-6-3-similarity-setting-to-classic-confused-about-the-querynorm/161440)
**Author:** [@bigheary](https://discuss.elastic.co/u/bigheary)\ **Replies:** 0\ **Last updated:** [December 19, 2018, 4:49am UTC](https://discuss.elastic.co/t/es-5-6-3-similarity-setting-to-classic-confused-about-the-querynorm/161440 "2018-12-19T04:49:46Z")
when i set field similarity to "classic", i was confused about the 'querynorm' provided by the explain api, which always seems to be '1', anyone could help? --- ## [Documentation: "Search concurrency and parallelism"](https://discuss.elastic.co/t/documentation-search-concurrency-and-parallelism/161430)
**Author:** [@AlexisWilke](https://discuss.elastic.co/u/AlexisWilke)\ **Replies:** 0\ **Last updated:** [December 19, 2018, 1:37am UTC](https://discuss.elastic.co/t/documentation-search-concurrency-and-parallelism/161430 "2018-12-19T01:37:06Z")
I read the documentation about the concurrency and parallelism in a few places, such as this one: Where the max\_concurrent\_shard\_requests is define like so: The request parameter max\_concurrent\_shard\_requests can be… --- ## [Bypass null\_pointer\_exception when sorting Scripted Fields Painless](https://discuss.elastic.co/t/bypass-null-pointer-exception-when-sorting-scripted-fields-painless/161059)
**Author:** [@vkandiva](https://discuss.elastic.co/u/vkandiva)\ **Replies:** 5\ **Last updated:** [December 18, 2018, 11:48pm UTC](https://discuss.elastic.co/t/bypass-null-pointer-exception-when-sorting-scripted-fields-painless/161059 "2018-12-18T23:48:43Z")
Hi All, I am using NEST to generate the following request to Elastic Search 6.3: { "from": 0, "size": 14, "sort": \[ { "\_script": { "order": "asc", "type": "number" "script": { "source": "if( (doc\['1'\].value-doc… --- ## [Performance regression in Elasticsearch 6.5 using wildcards](https://discuss.elastic.co/t/performance-regression-in-elasticsearch-6-5-using-wildcards/160781)
**Author:** [@lcremonesi](https://discuss.elastic.co/u/lcremonesi)\ **Replies:** 6\ **Last updated:** [December 18, 2018, 10:29pm UTC](https://discuss.elastic.co/t/performance-regression-in-elasticsearch-6-5-using-wildcards/160781 "2018-12-18T22:29:39Z")
We have recently migrated from Elasticsearch 5.6.7 to 6.5.0, and we found a serious performance regression with searches that use a query string query with wildcards. In particular: String Queries with prefixed star wi… --- ## [java.security.AccessControlException: access denied ("org.joda.time.JodaTimePermission" "DateTimeZone.setDefault")](https://discuss.elastic.co/t/java-security-accesscontrolexception-access-denied-org-joda-time-jodatimepermission-datetimezone-setdefault/161396)
**Author:** [@poitevinpm](https://discuss.elastic.co/u/poitevinpm)\ **Replies:** 5\ **Last updated:** [December 18, 2018, 8:57pm UTC](https://discuss.elastic.co/t/java-security-accesscontrolexception-access-denied-org-joda-time-jodatimepermission-datetimezone-setdefault/161396 "2018-12-18T20:57:45Z")
Hi all, hope someone can help me with a permission issue I can't seem to get access for permission: "org.joda.time.JodaTimePermission" "DateTimeZone.setDefault" in the plugin I am developing. I have a plugin-security.p… --- ## [How to Execute Custom Plugin in Data Nodes not in Master Node](https://discuss.elastic.co/t/how-to-execute-custom-plugin-in-data-nodes-not-in-master-node/161119)
**Author:** [@RITESH\_AGARWAL](https://discuss.elastic.co/u/RITESH_AGARWAL)\ **Replies:** 3\ **Last updated:** [December 18, 2018, 8:11pm UTC](https://discuss.elastic.co/t/how-to-execute-custom-plugin-in-data-nodes-not-in-master-node/161119 "2018-12-18T20:11:47Z")
The requirement is very simple to execute the Plugin in all the data nodes available. The issue i am facing is like i install custom plugin in all the N nodes but it is always executing in the master node only. I mean t… --- ## [Post-filtering of Top Hits Aggregation results](https://discuss.elastic.co/t/post-filtering-of-top-hits-aggregation-results/161407)
**Author:** [@lmikhailov](https://discuss.elastic.co/u/lmikhailov)\ **Replies:** 0\ **Last updated:** [December 18, 2018, 8:03pm UTC](https://discuss.elastic.co/t/post-filtering-of-top-hits-aggregation-results/161407 "2018-12-18T20:03:02Z")
Hi, I need to be able to post-filter results of Top Hits Aggregation using the usual and geo queries/filters. Since Top Hits Aggregation returns plain records it should be possible but I was not able to figure out how t… --- ## [Unable to delete ES logs older than 7 Days with Elastic version 6.x](https://discuss.elastic.co/t/unable-to-delete-es-logs-older-than-7-days-with-elastic-version-6-x/159590)
**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\ **Replies:** 1\ **Last updated:** [December 18, 2018, 7:56pm UTC](https://discuss.elastic.co/t/unable-to-delete-es-logs-older-than-7-days-with-elastic-version-6-x/159590 "2018-12-18T19:56:08Z")
Hi, I have configured Elasticsearch cluster with 4 nodes and i see everyday it's creating new cluster logging file in /va/log/elasticsearch -rw-r--r--. 1 elasticsearch elasticsearch 5323 Nov 12 17:22 myescluster-2… --- ## [Fielddata loaded for terms aggregation on not\_analyzed string field](https://discuss.elastic.co/t/fielddata-loaded-for-terms-aggregation-on-not-analyzed-string-field/160469)
**Author:** [@Joshua\_Reback](https://discuss.elastic.co/u/Joshua_Reback)\ **Replies:** 0\ **Last updated:** [December 12, 2018, 3:35am UTC](https://discuss.elastic.co/t/fielddata-loaded-for-terms-aggregation-on-not-analyzed-string-field/160469 "2018-12-12T03:35:26Z")
Hi, I am using version 2.3.3 of Elasticsearch and am wondering why doing a terms aggregation on unanalyzed string field results in fielddata being loaded (the docs indicate that this should not happen). The field in qu… --- ## [ES stuck in Red state, despite the fact that all nodes are in cluster: "ClusterBlockException\[blocked by: \[SERVICE\_UNAVAILABLE/1/state not recovered / initialized\];\]"](https://discuss.elastic.co/t/es-stuck-in-red-state-despite-the-fact-that-all-nodes-are-in-cluster-clusterblockexception-blocked-by-service-unavailable-1-state-not-recovered-initialized/158825)
**Author:** [@robert-blankenship](https://discuss.elastic.co/u/robert-blankenship)\ **Replies:** 17\ **Last updated:** [December 18, 2018, 6:48pm UTC](https://discuss.elastic.co/t/es-stuck-in-red-state-despite-the-fact-that-all-nodes-are-in-cluster-clusterblockexception-blocked-by-service-unavailable-1-state-not-recovered-initialized/158825 "2018-12-18T18:48:57Z")
Our 231 node, cloud ES cluster is stuck in a "RED" state. Cluster health: { "cluster\_name" : "exabeam-es", "status" : "red", "timed\_out" : false, "number\_of\_nodes" : 231, "number\_of\_data\_nodes" : 230, "acti… --- ## [Shard data is missing without any reason or log](https://discuss.elastic.co/t/shard-data-is-missing-without-any-reason-or-log/161248)
**Author:** [@kamal](https://discuss.elastic.co/u/kamal)\ **Replies:** 1\ **Last updated:** [December 18, 2018, 8:19am UTC](https://discuss.elastic.co/t/shard-data-is-missing-without-any-reason-or-log/161248 "2018-12-18T08:19:15Z")
Hi I was doing a huge indexing job(about 400 billion records), but suddenly one of the nodes went down because the power failed, after fixing the power, one shard was missing, so I used elasticsearch-trasnlog and every … --- ## [Relaert is not working in frequency rule type](https://discuss.elastic.co/t/relaert-is-not-working-in-frequency-rule-type/161202)
**Author:** [@sudhakar\_katakara](https://discuss.elastic.co/u/sudhakar_katakara)\ **Replies:** 5\ **Last updated:** [December 18, 2018, 6:25pm UTC](https://discuss.elastic.co/t/relaert-is-not-working-in-frequency-rule-type/161202 "2018-12-18T18:25:52Z")
I am using below parameters in frequency rule type but realert is not working on specified time duration. I have mentioned relaert with hours : 1 and queary\_key : "Hostname" ie since realert is 1 hour I assume it should … --- ## [Concurrent Indices stats requests cause cluster to go red](https://discuss.elastic.co/t/concurrent-indices-stats-requests-cause-cluster-to-go-red/161385)
**Author:** [@johnskopis](https://discuss.elastic.co/u/johnskopis)\ **Replies:** 2\ **Last updated:** [December 18, 2018, 6:06pm UTC](https://discuss.elastic.co/t/concurrent-indices-stats-requests-cause-cluster-to-go-red/161385 "2018-12-18T18:06:45Z")
We use the elasticsearch-prometheus-exporter plugin. Occasionally it seems the cluster status turns red from making index stats requests via prometheus-exporter plugin. has anyone else experienced this issue? I obtaine… --- ## [Search in the same structure](https://discuss.elastic.co/t/search-in-the-same-structure/161387)
**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\ **Replies:** 0\ **Last updated:** [December 18, 2018, 5:40pm UTC](https://discuss.elastic.co/t/search-in-the-same-structure/161387 "2018-12-18T17:40:31Z")
Good afternoon, Someone could help me please to do a search inside a structure? Now I will explain me better sorry: I have this mapping: "idiomesNivell": { "properties": { "nivellIdioma": { … --- ## [Capturing Elasticsearch Logs](https://discuss.elastic.co/t/capturing-elasticsearch-logs/161238)
**Author:** [@mosiddi](https://discuss.elastic.co/u/mosiddi)\ **Replies:** 2\ **Last updated:** [December 18, 2018, 4:40pm UTC](https://discuss.elastic.co/t/capturing-elasticsearch-logs/161238 "2018-12-18T16:40:54Z")
Hi, In our Windows VMs, we capture Elasticsearch logs (using log4jappender) and write to Windows event viewer (using ETW logger). Then logs from event viewer can be streamed to our monitoring service. What do folks use … --- ## [Invoke JAVA high level rest client Analyzer API issue](https://discuss.elastic.co/t/invoke-java-high-level-rest-client-analyzer-api-issue/161276)
**Author:** [@hxwhou](https://discuss.elastic.co/u/hxwhou)\ **Replies:** 1\ **Last updated:** [December 18, 2018, 4:07pm UTC](https://discuss.elastic.co/t/invoke-java-high-level-rest-client-analyzer-api-issue/161276 "2018-12-18T16:07:52Z")
Refer to the document of Java REST Client \[6.4\] » Java High Level REST Client » Indices APIs » Analyze API 2018-12-18 15:39:20,122 INFO (SLF4JLogger.java:71)- Opened connection \[connectionId{localValue:2, serverValu… --- ## [All my elastic index are red version 5.5.2](https://discuss.elastic.co/t/all-my-elastic-index-are-red-version-5-5-2/161362)
**Author:** [@jugurtha](https://discuss.elastic.co/u/jugurtha)\ **Replies:** 1\ **Last updated:** [December 18, 2018, 3:52pm UTC](https://discuss.elastic.co/t/all-my-elastic-index-are-red-version-5-5-2/161362 "2018-12-18T15:52:27Z")
hi I have 3 ELK nodes i have all my index are red red open bgc-2018.12 fHv8O7JmQZa0rnjpB7pFjQ 5 1 76132 0 195.6mb 97.8mb red open bgc-2017 dHzBmmj0RZyonRB3r0DvVA 5 1 0 0 1.1kb 573b… --- ## [Searching for exactly a hyphenated word](https://discuss.elastic.co/t/searching-for-exactly-a-hyphenated-word/161216)
**Author:** [@Daverino](https://discuss.elastic.co/u/Daverino)\ **Replies:** 2\ **Last updated:** [December 18, 2018, 3:50pm UTC](https://discuss.elastic.co/t/searching-for-exactly-a-hyphenated-word/161216 "2018-12-18T15:50:01Z")
So this problem has stumped me. I would like to search for instances of (for example) "hyper-space" but not find "hyper space". All traditional tokenizers except whitespace are going to split on the hyphen and it will … --- ## [Creating a s3 snapshot repository fails for ES 6.2 and minio s3](https://discuss.elastic.co/t/creating-a-s3-snapshot-repository-fails-for-es-6-2-and-minio-s3/161363)
**Author:** [@Davidiusdadi](https://discuss.elastic.co/u/Davidiusdadi)\ **Replies:** 0\ **Last updated:** [December 18, 2018, 3:40pm UTC](https://discuss.elastic.co/t/creating-a-s3-snapshot-repository-fails-for-es-6-2-and-minio-s3/161363 "2018-12-18T15:40:37Z")
When trying to create a s3 snapshot repository i get the following error: Request: PUT \_snapshot/minio { "type": "s3", "settings": { "bucket": "elasticseach", "endpoint": "storage.mycompany.com", … --- ## [Several Rollup on the same raw index](https://discuss.elastic.co/t/several-rollup-on-the-same-raw-index/161165)
**Author:** [@Rollup\_eval](https://discuss.elastic.co/u/Rollup_eval)\ **Replies:** 1\ **Last updated:** [December 18, 2018, 2:57pm UTC](https://discuss.elastic.co/t/several-rollup-on-the-same-raw-index/161165 "2018-12-18T14:57:50Z")
Hi, I have created 2 rollup jobs on the same raw index: one for daily rollup one for weekly rollup Since I started the second jobs (weekly) it seems that the first (daily) doesn't performs its operations. Is it p… --- ## [Watcher - Divide two input in advanced alert](https://discuss.elastic.co/t/watcher-divide-two-input-in-advanced-alert/161333)
**Author:** [@cemkuleyin](https://discuss.elastic.co/u/cemkuleyin)\ **Replies:** 0\ **Last updated:** [December 18, 2018, 1:17pm UTC](https://discuss.elastic.co/t/watcher-divide-two-input-in-advanced-alert/161333 "2018-12-18T13:17:29Z")
Hi all, I created advanced alert on watcher. But my condition didnt work. I want to calculate first input divide to second input. but cannot calculate. Can you help me? My condition -\> "condition": { "script": { "s… --- ## [Index Specific Lucene Codec In ES](https://discuss.elastic.co/t/index-specific-lucene-codec-in-es/161341)
**Author:** [@ananth](https://discuss.elastic.co/u/ananth)\ **Replies:** 0\ **Last updated:** [December 18, 2018, 2:07pm UTC](https://discuss.elastic.co/t/index-specific-lucene-codec-in-es/161341 "2018-12-18T14:07:44Z")
Hi, How to configure a custom Lucene codec to specific indices in ES? If a custom ES plugin is the only way, please suggest a sample plugin which maps the Lucene custom codec via ES plugin. Anantha Govindarajan --- ## [Es rejected execution exception on AWS](https://discuss.elastic.co/t/es-rejected-execution-exception-on-aws/161303)
**Author:** [@tzn01](https://discuss.elastic.co/u/tzn01)\ **Replies:** 4\ **Last updated:** [December 18, 2018, 1:39pm UTC](https://discuss.elastic.co/t/es-rejected-execution-exception-on-aws/161303 "2018-12-18T13:39:14Z")
Hi, I have a one node ES cluster on AWS (t2.small.elasticsearch) and I am receiving an es\_rejected\_execution\_exception on the Grafana side. It occurs when I do couple of refresh on the dashboard (or sometimes when two p… --- ## [Failing to create index](https://discuss.elastic.co/t/failing-to-create-index/161336)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 0\ **Last updated:** [December 18, 2018, 1:39pm UTC](https://discuss.elastic.co/t/failing-to-create-index/161336 "2018-12-18T13:39:15Z")
To be honest this seems to be an issue in Serilog which is still open. The Elasticsearch has been upgraded from 5.2.x to 6.5.2. Suppose the existing index followed the naming pattern log-abc-2008.12. Now if I delete t… --- ## [Can i add a field weightage/boost globally for search In Elasticsearch?](https://discuss.elastic.co/t/can-i-add-a-field-weightage-boost-globally-for-search-in-elasticsearch/161329)
**Author:** [@Rahul\_Juneja](https://discuss.elastic.co/u/Rahul_Juneja)\ **Replies:** 0\ **Last updated:** [December 18, 2018, 1:09pm UTC](https://discuss.elastic.co/t/can-i-add-a-field-weightage-boost-globally-for-search-in-elasticsearch/161329 "2018-12-18T13:09:21Z")
GET posts/\_search { "query": { "multi\_match": { "query": "sport", "fields": \[ "name^1", "description^2", "keywords^3" \] } } } I want to avoid this ^1, ^2, ^3 and set it globally. So that I can Search directly with pred… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1447) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1449)