# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1466 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1467 --- ## [Aggregation order by prefix](https://discuss.elastic.co/t/aggregation-order-by-prefix/157988)
**Author:** [@3ms1](https://discuss.elastic.co/u/3ms1)\ **Replies:** 2\ **Last updated:** [December 1, 2018, 12:20am UTC](https://discuss.elastic.co/t/aggregation-order-by-prefix/157988 "2018-12-01T00:20:19Z")
Hi, How I can get sorted bucket by prefix? For example, score it is higher for "Buffalo" and but I want results with "Fal..." in the beginning to be on top. If I set include in terms then Buffalo won't appear :confus… --- ## [Non-expected ".keyword" behavior](https://discuss.elastic.co/t/non-expected-keyword-behavior/156860)
**Author:** [@reweber](https://discuss.elastic.co/u/reweber)\ **Replies:** 1\ **Last updated:** [November 30, 2018, 10:12pm UTC](https://discuss.elastic.co/t/non-expected-keyword-behavior/156860 "2018-11-30T22:12:49Z")
I have a log entry "http\_url": "https://login.live.com/GetCredentialType.srf?wa=wsignin1.0....." Why does this query find the entry: GET \_search { "query": { "bool": { "must": \[ { "wildcard": { "h… --- ## [.p12 certificate don't have Certificate Authority](https://discuss.elastic.co/t/p12-certificate-dont-have-certificate-authority/158922)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 2\ **Last updated:** [November 30, 2018, 9:39pm UTC](https://discuss.elastic.co/t/p12-certificate-dont-have-certificate-authority/158922 "2018-11-30T21:39:21Z")
Hi , If the .p12 certificate don't have the Certificate authority . Is it possible to enable TLS/SSL in elasticsearch ? .p12 certificate only contains ssl certificate and ssl key . Thanks --- ## [Elastic Query DSL Help](https://discuss.elastic.co/t/elastic-query-dsl-help/158425)
**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\ **Replies:** 4\ **Last updated:** [November 30, 2018, 9:14pm UTC](https://discuss.elastic.co/t/elastic-query-dsl-help/158425 "2018-11-30T21:14:12Z")
I am having issues with this query. The idea is that I want to find all docs that have vaccin OR drva\* OR wellness in any of the fields "description","code","profitcenter","itemcategory" The below is what I have and it… --- ## [How to improve query using test data and expected result](https://discuss.elastic.co/t/how-to-improve-query-using-test-data-and-expected-result/158963)
**Author:** [@jmr317](https://discuss.elastic.co/u/jmr317)\ **Replies:** 1\ **Last updated:** [November 30, 2018, 9:00pm UTC](https://discuss.elastic.co/t/how-to-improve-query-using-test-data-and-expected-result/158963 "2018-11-30T21:00:03Z")
I have a test set of data that includes a search string and the document id of the document that would be of highest relevance for that search string. Is there a specific way I can go about improving my query (currently … --- ## [In need of help resolving a mapping conflict](https://discuss.elastic.co/t/in-need-of-help-resolving-a-mapping-conflict/158952)
**Author:** [@dfinn](https://discuss.elastic.co/u/dfinn)\ **Replies:** 0\ **Last updated:** [November 30, 2018, 6:45pm UTC](https://discuss.elastic.co/t/in-need-of-help-resolving-a-mapping-conflict/158952 "2018-11-30T18:45:00Z")
ELK 6.5 I'm running it in what I consider a pretty standard way, filebeat on our servers shipping logs to logstash which then outputs to Elasticsearch. I'm using the logstash-\* index pattern and using daily indexes. R… --- ## [Reindex does not honor http.max\_content\_length: "500m",](https://discuss.elastic.co/t/reindex-does-not-honor-http-max-content-length-500m/158869)
**Author:** [@cynosureabu](https://discuss.elastic.co/u/cynosureabu)\ **Replies:** 2\ **Last updated:** [November 30, 2018, 6:30pm UTC](https://discuss.elastic.co/t/reindex-does-not-honor-http-max-content-length-500m/158869 "2018-11-30T18:30:40Z")
Reindex from 2.4 to 6.5, batch size is 200 http.max\_content\_length: "500m", but still receive exception: {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"Remote responded with a chunk that was to… --- ## [How to import excel sheet in elastic search](https://discuss.elastic.co/t/how-to-import-excel-sheet-in-elastic-search/158942)
**Author:** [@Nethaji](https://discuss.elastic.co/u/Nethaji)\ **Replies:** 4\ **Last updated:** [November 30, 2018, 6:10pm UTC](https://discuss.elastic.co/t/how-to-import-excel-sheet-in-elastic-search/158942 "2018-11-30T18:10:37Z")
Hi, I struggled to import my excel in elastic search, provide solution to import into elasticsearch. or else we can convert the excel file into csv then import this file in elasticsearch. --- ## [ML alerts triggering on interim result](https://discuss.elastic.co/t/ml-alerts-triggering-on-interim-result/158408)
**Author:** [@benpolzin](https://discuss.elastic.co/u/benpolzin)\ **Replies:** 7\ **Last updated:** [November 30, 2018, 5:46pm UTC](https://discuss.elastic.co/t/ml-alerts-triggering-on-interim-result/158408 "2018-11-30T17:46:19Z")
After upgrading from 6.3 to 6.5.0 I've been getting Watcher alerts from ML jobs that are false positives. If I click on the alert link fairly quickly I see 0 hits when there should be some large number, but it also says … --- ## [Why is the MergePolicyConfig documentation missing?](https://discuss.elastic.co/t/why-is-the-mergepolicyconfig-documentation-missing/158628)
**Author:** [@trevan](https://discuss.elastic.co/u/trevan)\ **Replies:** 2\ **Last updated:** [November 30, 2018, 5:38pm UTC](https://discuss.elastic.co/t/why-is-the-mergepolicyconfig-documentation-missing/158628 "2018-11-30T17:38:08Z")
I noticed that the documentation for the MergePolicyConfig.java file (https://github.com/elastic/elasticsearch/blob/master/server/src/main/java/org/elasticsearch/index/MergePolicyConfig.java) is not being shown on the do… --- ## [How big a field can be](https://discuss.elastic.co/t/how-big-a-field-can-be/158810)
**Author:** [@onlygoodones](https://discuss.elastic.co/u/onlygoodones)\ **Replies:** 2\ **Last updated:** [November 30, 2018, 5:36pm UTC](https://discuss.elastic.co/t/how-big-a-field-can-be/158810 "2018-11-30T17:36:27Z")
Hello Gurus, Is there a limit on how big a field can be when we ingest a document to ES ? What are the known issues or drawbacks while ingesting huge text / string data in to a single field and after ingestion, what are… --- ## [Adding ElasticSearch repo to nexus](https://discuss.elastic.co/t/adding-elasticsearch-repo-to-nexus/158948)
**Author:** [@sukruthakittur](https://discuss.elastic.co/u/sukruthakittur)\ **Replies:** 0\ **Last updated:** [November 30, 2018, 5:16pm UTC](https://discuss.elastic.co/t/adding-elasticsearch-repo-to-nexus/158948 "2018-11-30T17:16:12Z")
Hi, I am trying to add ES repo to nexus and have configure it as noted in the image below. I do understand that ES repo is not indexed, so I dont expect to be able to browse around in the repo. However, I am unable to do… --- ## [Select distinct objects](https://discuss.elastic.co/t/select-distinct-objects/158917)
**Author:** [@Hichem\_Noomeni](https://discuss.elastic.co/u/Hichem_Noomeni)\ **Replies:** 1\ **Last updated:** [November 30, 2018, 4:53pm UTC](https://discuss.elastic.co/t/select-distinct-objects/158917 "2018-11-30T16:53:09Z")
Hello everyone, I have mapping that contains fileds like this { "team.id" : {"type": "long"}, "team.value" : {"type" : "text"} with keyword of course. } I may have documents with different team.id but same team.val… --- ## [Current module dependent es6.3.2,but other module dependent current module show it's dependency is es2.4.4](https://discuss.elastic.co/t/current-module-dependent-es6-3-2-but-other-module-dependent-current-module-show-its-dependency-is-es2-4-4/158852)
**Author:** [@verachenwp](https://discuss.elastic.co/u/verachenwp)\ **Replies:** 7\ **Last updated:** [November 30, 2018, 4:50pm UTC](https://discuss.elastic.co/t/current-module-dependent-es6-3-2-but-other-module-dependent-current-module-show-its-dependency-is-es2-4-4/158852 "2018-11-30T16:50:26Z")
--- ## [Full Text Search query](https://discuss.elastic.co/t/full-text-search-query/158853)
**Author:** [@Tapaswi](https://discuss.elastic.co/u/Tapaswi)\ **Replies:** 5\ **Last updated:** [November 30, 2018, 4:48pm UTC](https://discuss.elastic.co/t/full-text-search-query/158853 "2018-11-30T16:48:23Z")
My full-text search is not working properly and also it's taking too much time to execute elasticsearch query I am using following code to get the data from elasticsearch using java. PageRequest pageRequest = (PageReque… --- ## [How to connect mongo with elasticsearch?](https://discuss.elastic.co/t/how-to-connect-mongo-with-elasticsearch/158902)
**Author:** [@charan\_teja](https://discuss.elastic.co/u/charan_teja)\ **Replies:** 1\ **Last updated:** [November 30, 2018, 4:31pm UTC](https://discuss.elastic.co/t/how-to-connect-mongo-with-elasticsearch/158902 "2018-11-30T16:31:43Z")
I want to connect mongodb with elasticsearch. I tried Elasticsearch with mongo-connector but ConnectionTimeout error Is there way to connect MongoDB and ES. --- ## [Monitoring Machine-Learning job with Nagios](https://discuss.elastic.co/t/monitoring-machine-learning-job-with-nagios/158741)
**Author:** [@Rohlik](https://discuss.elastic.co/u/Rohlik)\ **Replies:** 3\ **Last updated:** [November 30, 2018, 4:28pm UTC](https://discuss.elastic.co/t/monitoring-machine-learning-job-with-nagios/158741 "2018-11-30T16:28:48Z")
Hello dear community and Elastic staff :slight\_smile: Our use case: We want deploy real-time Machine Learning job and be notified if some non-standard peak occur. We are using Nagios software for alerting and we don't … --- ## [Is ignore\_unmapped deprecated in ES 6?](https://discuss.elastic.co/t/is-ignore-unmapped-deprecated-in-es-6/158930)
**Author:** [@cynosureabu](https://discuss.elastic.co/u/cynosureabu)\ **Replies:** 1\ **Last updated:** [November 30, 2018, 4:14pm UTC](https://discuss.elastic.co/t/is-ignore-unmapped-deprecated-in-es-6/158930 "2018-11-30T16:14:35Z")
I am getting: "type": "x\_content\_parse\_exception", "reason": "\[40:9\] \[field\_sort\] unknown field \[ignore\_unmapped\], parser not found" But if I remove the field, then i cannot do sort on the query result if result does … --- ## [Why does elasticsearch terms bucket size effects the doc\_count of inner reverse\_nested aggregations?](https://discuss.elastic.co/t/why-does-elasticsearch-terms-bucket-size-effects-the-doc-count-of-inner-reverse-nested-aggregations/158937)
**Author:** [@GrandBoonino](https://discuss.elastic.co/u/GrandBoonino)\ **Replies:** 0\ **Last updated:** [November 30, 2018, 4:11pm UTC](https://discuss.elastic.co/t/why-does-elasticsearch-terms-bucket-size-effects-the-doc-count-of-inner-reverse-nested-aggregations/158937 "2018-11-30T16:11:51Z")
I've been trying to track down missing doc counts from a reverse nested aggregation. My query "aggs": { "mainGrouping": { "nested": { "path": "parent.child" }, "aggs": { "uniqueCou… --- ## [2nd stage filtering](https://discuss.elastic.co/t/2nd-stage-filtering/158704)
**Author:** [@mortenb123](https://discuss.elastic.co/u/mortenb123)\ **Replies:** 2\ **Last updated:** [November 30, 2018, 3:53pm UTC](https://discuss.elastic.co/t/2nd-stage-filtering/158704 "2018-11-30T15:53:42Z")
Hi I read log into elasticsearch using the \_bulk endpoint and manage around 10Klines/sec. I have very modest regexp filtering just @timestamp, operationid and log, if I add more elaborative filtering the insert rate goe… --- ## [Advice on how to best structure my mappings](https://discuss.elastic.co/t/advice-on-how-to-best-structure-my-mappings/158928)
**Author:** [@haych1702](https://discuss.elastic.co/u/haych1702)\ **Replies:** 0\ **Last updated:** [November 30, 2018, 3:25pm UTC](https://discuss.elastic.co/t/advice-on-how-to-best-structure-my-mappings/158928 "2018-11-30T15:25:43Z")
Currently, I have two kinds of data in Elasticsearch. The first is company and the second is location. A company entry would hold information such as name, profit, sector etc. A location entry would hold the address and … --- ## [Elastic search non-responsive under load after topology change](https://discuss.elastic.co/t/elastic-search-non-responsive-under-load-after-topology-change/158904)
**Author:** [@Pucky](https://discuss.elastic.co/u/Pucky)\ **Replies:** 4\ **Last updated:** [November 30, 2018, 2:14pm UTC](https://discuss.elastic.co/t/elastic-search-non-responsive-under-load-after-topology-change/158904 "2018-11-30T14:14:29Z")
Hi We are trying to move from a massive monolithic index to daily index. When we query the daily index then the disk IO increases on one of our nodes. There are a lot of reset network connections and the cluster seems t… --- ## [Elasticsearch Java transport client: exception caught on transport layer and reports no node available](https://discuss.elastic.co/t/elasticsearch-java-transport-client-exception-caught-on-transport-layer-and-reports-no-node-available/158905)
**Author:** [@yankeguo](https://discuss.elastic.co/u/yankeguo)\ **Replies:** 0\ **Last updated:** [November 30, 2018, 1:00pm UTC](https://discuss.elastic.co/t/elasticsearch-java-transport-client-exception-caught-on-transport-layer-and-reports-no-node-available/158905 "2018-11-30T13:00:56Z")
Seems like something went wrong during ping and the client thinks the node is not available. I've tried sniff on/off, latest version of elasticsearch client and various versions of Netty library. java code: // create … --- ## [Check value exists in params array using ElasticSearch painless script](https://discuss.elastic.co/t/check-value-exists-in-params-array-using-elasticsearch-painless-script/158254)
**Author:** [@CEJ](https://discuss.elastic.co/u/CEJ)\ **Replies:** 3\ **Last updated:** [November 30, 2018, 12:50pm UTC](https://discuss.elastic.co/t/check-value-exists-in-params-array-using-elasticsearch-painless-script/158254 "2018-11-30T12:50:57Z")
I am new to ElasticSearch. I am working on a project where I have to search listings which matches the input http://foo.bar/search?listing=123,456 . I have built an array which key and value are the same and representin… --- ## [DSL Query and aggregation on timestamp field](https://discuss.elastic.co/t/dsl-query-and-aggregation-on-timestamp-field/158894)
**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\ **Replies:** 1\ **Last updated:** [November 30, 2018, 11:47am UTC](https://discuss.elastic.co/t/dsl-query-and-aggregation-on-timestamp-field/158894 "2018-11-30T11:47:56Z")
Hi everybody, I try to write a query that return the number of documents gathered by day. My timestamp field is like : 2018-11-22T08:52:53.933Z I try this query : { "size": 0, "sort": { "@timestamp"… --- ## [Nodes not joining the cluster](https://discuss.elastic.co/t/nodes-not-joining-the-cluster/158870)
**Author:** [@Aayushi\_Jain](https://discuss.elastic.co/u/Aayushi_Jain)\ **Replies:** 4\ **Last updated:** [November 30, 2018, 11:16am UTC](https://discuss.elastic.co/t/nodes-not-joining-the-cluster/158870 "2018-11-30T11:16:28Z")
I have 3 nodes, 2 with same config and one with different config. I have installed same version of elastic 6.2.3 in all of them and have started the service again after giving same cluster names to all three and default … --- ## [Read only indices FORBIDDEN](https://discuss.elastic.co/t/read-only-indices-forbidden/158888)
**Author:** [@Amita](https://discuss.elastic.co/u/Amita)\ **Replies:** 2\ **Last updated:** [November 30, 2018, 11:01am UTC](https://discuss.elastic.co/t/read-only-indices-forbidden/158888 "2018-11-30T11:01:58Z")
Hi, I have a cluster in version 6.2.4, with 300 data nodes. I start getting an exception says that my index is in read only. I get this when I try to index documents, but only after a while, at first it works well. I… --- ## [Pipeline that add field with string length](https://discuss.elastic.co/t/pipeline-that-add-field-with-string-length/156503)
**Author:** [@Sergio\_PR](https://discuss.elastic.co/u/Sergio_PR)\ **Replies:** 4\ **Last updated:** [November 30, 2018, 10:56am UTC](https://discuss.elastic.co/t/pipeline-that-add-field-with-string-length/156503 "2018-11-30T10:56:48Z")
Hello, I want to create a pipeline who receive a document with a string field ("field\_str") and return a new field in the same document ("field\_length") with the string length. By example : INPUT : { "field\_str" : … --- ## [Identical data nodes with widely different memory behaviour](https://discuss.elastic.co/t/identical-data-nodes-with-widely-different-memory-behaviour/158537)
**Author:** [@stromblom](https://discuss.elastic.co/u/stromblom)\ **Replies:** 4\ **Last updated:** [November 30, 2018, 10:50am UTC](https://discuss.elastic.co/t/identical-data-nodes-with-widely-different-memory-behaviour/158537 "2018-11-30T10:50:47Z")
Hello, For some reason the heap fills very fast on two of our data nodes, while the other two behaves normal. I have a cluster with 9 nodes: 2 coordinator, 3 master, 4 data ES Version: 6.4.0 Running on ubuntu 16.0… --- ## [Query range IP](https://discuss.elastic.co/t/query-range-ip/158887)
**Author:** [@Pascal1](https://discuss.elastic.co/u/Pascal1)\ **Replies:** 0\ **Last updated:** [November 30, 2018, 10:32am UTC](https://discuss.elastic.co/t/query-range-ip/158887 "2018-11-30T10:32:24Z")
Hello everyone, The situation is as follows: I retrieve logs containing IP. In an index I have IP ranges that have names. I would like to search my index to see if my IP belongs to a range and if so, retrieve the nam… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1465) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1467)