# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1468 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1469 --- ## [Unique Elasticsearch for different Kibana](https://discuss.elastic.co/t/unique-elasticsearch-for-different-kibana/158739)
**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\ **Replies:** 2\ **Last updated:** [November 29, 2018, 12:04pm UTC](https://discuss.elastic.co/t/unique-elasticsearch-for-different-kibana/158739 "2018-11-29T12:04:57Z")
Hi all and thanks in advance for the help, Currently, I already have 3 independent logstash providing data from databases to 3 elasticsearch, each connected to one kibana Every time I want to add a new user, I'm adding… --- ## [Best approach for Fetching large dataset using NEST](https://discuss.elastic.co/t/best-approach-for-fetching-large-dataset-using-nest/158740)
**Author:** [@waleedkaramat](https://discuss.elastic.co/u/waleedkaramat)\ **Replies:** 0\ **Last updated:** [November 29, 2018, 11:23am UTC](https://discuss.elastic.co/t/best-approach-for-fetching-large-dataset-using-nest/158740 "2018-11-29T11:23:35Z")
Hi, I'm using NEST API for fetching data from elastic Index. My index contains more than 700000 records and I want to fetch the data in chunks. I have tried it with From and size parameter on each request I'm querying a… --- ## [Quick Synchronization with ElasticSearch](https://discuss.elastic.co/t/quick-synchronization-with-elasticsearch/158629)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 2\ **Last updated:** [November 29, 2018, 10:54am UTC](https://discuss.elastic.co/t/quick-synchronization-with-elasticsearch/158629 "2018-11-29T10:54:29Z")
My question is no problem related to ElasticSearch, but rather a way to improve my use with it. Today I work with a PHP script that runs via cron every 1 minute, this script reads the latest updates from my database, ha… --- ## [Search filter for only specific hours in a month](https://discuss.elastic.co/t/search-filter-for-only-specific-hours-in-a-month/158305)
**Author:** [@Kavier\_Koo](https://discuss.elastic.co/u/Kavier_Koo)\ **Replies:** 4\ **Last updated:** [November 29, 2018, 10:48am UTC](https://discuss.elastic.co/t/search-filter-for-only-specific-hours-in-a-month/158305 "2018-11-29T10:48:23Z")
Hi everyone, I have a SIEM use case that require to do a search for After Office hour login and generate a 1 month report with this filter. Any advice on how could i filter the hour from @timestamp (or any better appro… --- ## [Protect field values in elasticsearch](https://discuss.elastic.co/t/protect-field-values-in-elasticsearch/158728)
**Author:** [@vphant](https://discuss.elastic.co/u/vphant)\ **Replies:** 5\ **Last updated:** [November 29, 2018, 10:28am UTC](https://discuss.elastic.co/t/protect-field-values-in-elasticsearch/158728 "2018-11-29T10:28:23Z")
I have a following structure in the elasticsearch index "answers" {"can\_view": \["F1", "F2", "F3"\],"firstname": "John","lastname": "Black"} {"can\_view": \["F1", "F2"\],"firstname": "Jack","lastname": "Grey"} {"can\_view": \[… --- ## [Data modelling dilemma: Number of indices vs Sparse index](https://discuss.elastic.co/t/data-modelling-dilemma-number-of-indices-vs-sparse-index/158346)
**Author:** [@Jay\_Dihenkar](https://discuss.elastic.co/u/Jay_Dihenkar)\ **Replies:** 9\ **Last updated:** [November 29, 2018, 10:24am UTC](https://discuss.elastic.co/t/data-modelling-dilemma-number-of-indices-vs-sparse-index/158346 "2018-11-29T10:24:31Z")
We have an ES 5x setup and we create around 39 indices on monthly basis. Index distribution in the setup - https://gist.github.com/jay-dihenkar/80c9d3774b05027bd0f5db37df57b555 Cluster details - Nodes = 3 Heap = 31g … --- ## [Joda offset missing to the time value which is in milliseconds format for Long datatype in ES](https://discuss.elastic.co/t/joda-offset-missing-to-the-time-value-which-is-in-milliseconds-format-for-long-datatype-in-es/158669)
**Author:** [@karthik.tangallapall](https://discuss.elastic.co/u/karthik.tangallapall)\ **Replies:** 1\ **Last updated:** [November 29, 2018, 9:44am UTC](https://discuss.elastic.co/t/joda-offset-missing-to-the-time-value-which-is-in-milliseconds-format-for-long-datatype-in-es/158669 "2018-11-29T09:44:59Z")
Hi Team, Software stack1: ES 6.5.0, Java 11, Linux server in EST zone (E.Virigina), spring-data-elasticsearch 1.2.1.RELEASE Software stack2: ES 1.7, Java 8, Linux server in EST zone (E.Virigina), spring-data-elasticsea… --- ## [Dynamically create Pagerduty integrations](https://discuss.elastic.co/t/dynamically-create-pagerduty-integrations/156762)
**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\ **Replies:** 4\ **Last updated:** [November 29, 2018, 9:43am UTC](https://discuss.elastic.co/t/dynamically-create-pagerduty-integrations/156762 "2018-11-29T09:43:57Z")
Is there a way to use the API to create pagerduty accounts for xpack watcher actions? Or do you have to define them in the elasticsearch.yml file and restart every node every time? because that would be insane :slight\_sm… --- ## [Security Exception while trying to open all indices](https://discuss.elastic.co/t/security-exception-while-trying-to-open-all-indices/157272)
**Author:** [@Elango-mas](https://discuss.elastic.co/u/Elango-mas)\ **Replies:** 2\ **Last updated:** [November 29, 2018, 9:40am UTC](https://discuss.elastic.co/t/security-exception-while-trying-to-open-all-indices/157272 "2018-11-29T09:40:56Z")
Hi, While trying snapshot and restore, unfortunately I closed all the indices after taking snapshot. Now I am trying to open all the indices but getting a security exception. $ curl --cacert 'certificate\_path' -u "elas… --- ## [Mapping Conflict in field type](https://discuss.elastic.co/t/mapping-conflict-in-field-type/158552)
**Author:** [@Sanj](https://discuss.elastic.co/u/Sanj)\ **Replies:** 4\ **Last updated:** [November 29, 2018, 9:17am UTC](https://discuss.elastic.co/t/mapping-conflict-in-field-type/158552 "2018-11-29T09:17:38Z")
Hi Team, I'm facing mapping conflicts while trying to index a data in Elasticsearch. The data contains a filed with dots like mentioned below replica.tps.Count: 27359, sync.tps.FiveMinuteRate: 1101.935848853454, repli… --- ## [Highlighting with fuzziness in multi\_match lose one char](https://discuss.elastic.co/t/highlighting-with-fuzziness-in-multi-match-lose-one-char/157413)
**Author:** [@edoardo.zanon](https://discuss.elastic.co/u/edoardo.zanon)\ **Replies:** 4\ **Last updated:** [November 29, 2018, 8:33am UTC](https://discuss.elastic.co/t/highlighting-with-fuzziness-in-multi-match-lose-one-char/157413 "2018-11-29T08:33:14Z")
Hello, I'm building a small research compoentent, but it will have to search through a lot of data. I made a multi\_match between different fields but with the fuzziness setting (1) to improve the search results, the hi… --- ## [Elasticsearch profiling, script error](https://discuss.elastic.co/t/elasticsearch-profiling-script-error/158343)
**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\ **Replies:** 6\ **Last updated:** [November 29, 2018, 8:01am UTC](https://discuss.elastic.co/t/elasticsearch-profiling-script-error/158343 "2018-11-29T08:01:12Z")
Hi, I have ELK v 6.1 and I am doing profiling of my queries from charts - I just copy request that I can see from kibana. But I always get error: {"error":{"root\_cause":\[{"type":"script\_exception","reason":"compile erro… --- ## [Shard doesn't get replicated](https://discuss.elastic.co/t/shard-doesnt-get-replicated/158671)
**Author:** [@neven.trelec](https://discuss.elastic.co/u/neven.trelec)\ **Replies:** 2\ **Last updated:** [November 29, 2018, 6:56am UTC](https://discuss.elastic.co/t/shard-doesnt-get-replicated/158671 "2018-11-29T06:56:56Z")
Hi, We have a configured our elasticsearch to have 142 indices, 5 shards and 1 replica. We have the issue with one of the shards where it's replica is not created at all. Shard 2 of one of our metricbeat indices is neve… --- ## [Connecting to elastic cloud from elasticsearch.js](https://discuss.elastic.co/t/connecting-to-elastic-cloud-from-elasticsearch-js/157963)
**Author:** [@Sai\_Krishna](https://discuss.elastic.co/u/Sai_Krishna)\ **Replies:** 8\ **Last updated:** [November 29, 2018, 6:56am UTC](https://discuss.elastic.co/t/connecting-to-elastic-cloud-from-elasticsearch-js/157963 "2018-11-29T06:56:05Z")
I deployed my cluster on the elastic cloud. All these days before deplyoing I worked on it locally ex: host: 'localhost:9200' platform I use is Node js (elasticsearch.js) package. But now whenever I am trying to make… --- ## [Query for document with least value](https://discuss.elastic.co/t/query-for-document-with-least-value/158558)
**Author:** [@Ruthvik\_Sai](https://discuss.elastic.co/u/Ruthvik_Sai)\ **Replies:** 1\ **Last updated:** [November 29, 2018, 6:13am UTC](https://discuss.elastic.co/t/query-for-document-with-least-value/158558 "2018-11-29T06:13:18Z")
Hi, How can I write a query such that I get the document with the least value of a particular field? For ex: I have a "marks" field. how do I get the document having the least value of marks Now if I extend the same t… --- ## [None of the configured nodes are available - 127.0.0.1](https://discuss.elastic.co/t/none-of-the-configured-nodes-are-available-127-0-0-1/158553)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 4\ **Last updated:** [November 29, 2018, 6:27am UTC](https://discuss.elastic.co/t/none-of-the-configured-nodes-are-available-127-0-0-1/158553 "2018-11-29T06:27:27Z")
I'm getting mentioned error in 5.6.3. NoNodeAvailableException\[None of the configured nodes are available: \[{#transport#-1}{Lx1sIaSdTpCXG\_fZQY5p1A}{127.0.0.1}{127.0.0.1:9300}\]\] curl "localhost:9200" { "name" : "", "… --- ## [Query notation question](https://discuss.elastic.co/t/query-notation-question/158688)
**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Replies:** 0\ **Last updated:** [November 29, 2018, 6:22am UTC](https://discuss.elastic.co/t/query-notation-question/158688 "2018-11-29T06:22:10Z")
Hi All, I am perfoming this query { "query": { "bool": { "must": \[ { "query\_string": { "analyze\_wildcard": "false", "query": "source\_affiliate:nlmail AND (\_exists\_:… --- ## [Exact match and fuzziness…What is the good way?](https://discuss.elastic.co/t/exact-match-and-fuzziness-what-is-the-good-way/158679)
**Author:** [@BlindCode](https://discuss.elastic.co/u/BlindCode)\ **Replies:** 1\ **Last updated:** [November 29, 2018, 5:59am UTC](https://discuss.elastic.co/t/exact-match-and-fuzziness-what-is-the-good-way/158679 "2018-11-29T05:59:13Z")
Hello, i was invert many hours trying found the best way to create and autocomplete that support a multilanguaje seach of cities. (ES/EN), fuzzieness and get priority for exact match (show this at top of results) but i … --- ## [Connecting Elastic Search WIth SQL DB](https://discuss.elastic.co/t/connecting-elastic-search-with-sql-db/158493)
**Author:** [@Mani\_96590](https://discuss.elastic.co/u/Mani_96590)\ **Replies:** 2\ **Last updated:** [November 29, 2018, 4:52am UTC](https://discuss.elastic.co/t/connecting-elastic-search-with-sql-db/158493 "2018-11-29T04:52:03Z")
Hi Experts, Is there any documents available for connecting Elastic search with SQL Database and do the coding further?? --- ## [Is two node cluster with xpack is viable?](https://discuss.elastic.co/t/is-two-node-cluster-with-xpack-is-viable/158656)
**Author:** [@charan.gandra](https://discuss.elastic.co/u/charan.gandra)\ **Replies:** 4\ **Last updated:** [November 28, 2018, 11:40pm UTC](https://discuss.elastic.co/t/is-two-node-cluster-with-xpack-is-viable/158656 "2018-11-28T23:40:32Z")
Hi I have two elasticsearch nodes with xpack and at least one should be available at all the time as per the requirement. we can only upgrade the VMs by deleting and recreating and this is also a requirement. My use ca… --- ## [Refactor massive nested bool query es@5.6](https://discuss.elastic.co/t/refactor-massive-nested-bool-query-es-5-6/158662)
**Author:** [@jbinquef](https://discuss.elastic.co/u/jbinquef)\ **Replies:** 0\ **Last updated:** [November 28, 2018, 11:04pm UTC](https://discuss.elastic.co/t/refactor-massive-nested-bool-query-es-5-6/158662 "2018-11-28T23:04:58Z")
Is there a way to better structure this nested boolean query? We are running into the max bool clause count. I've looked into trying to use a termquery and termsquery, but I'm not sure it makes sense in this situation. T… --- ## [How to replace @timestamp in kibana?](https://discuss.elastic.co/t/how-to-replace-timestamp-in-kibana/158660)
**Author:** [@Bala\_Chandrahas](https://discuss.elastic.co/u/Bala_Chandrahas)\ **Replies:** 0\ **Last updated:** [November 28, 2018, 10:46pm UTC](https://discuss.elastic.co/t/how-to-replace-timestamp-in-kibana/158660 "2018-11-28T22:46:47Z")
filter { mutate { split =\> \[message, ","\] add\_field =\> {"Hostname" =\> "%{message\[0\]}"} add\_field =\> {"Metric-Name" =\> "%{message\[1\]}"} convert =\> { "message\[2\]" =\> "integer" } add\_field =\> {"Metric\_timestamp" =\> "%… --- ## [Run \_ilm apis and get invalid\_index\_name\_exception](https://discuss.elastic.co/t/run-ilm-apis-and-get-invalid-index-name-exception/158590)
**Author:** [@Heng\_Zhang](https://discuss.elastic.co/u/Heng_Zhang)\ **Replies:** 1\ **Last updated:** [November 28, 2018, 10:17pm UTC](https://discuss.elastic.co/t/run-ilm-apis-and-get-invalid-index-name-exception/158590 "2018-11-28T22:17:59Z")
I tried to run the following API in my elastic cluster with version 6.5 and got error of invalid\_index\_name\_exception. I also tried the api of POST /\_ilm/start and got the same error. could you advice a solution? my clu… --- ## [We're getting some unknown character returned on queries](https://discuss.elastic.co/t/were-getting-some-unknown-character-returned-on-queries/158640)
**Author:** [@JimP](https://discuss.elastic.co/u/JimP)\ **Replies:** 1\ **Last updated:** [November 28, 2018, 9:45pm UTC](https://discuss.elastic.co/t/were-getting-some-unknown-character-returned-on-queries/158640 "2018-11-28T21:45:34Z")
On one of our indices, when we search it, is returning an odd character that breaks json parsing. In Dev Tools it shows as a red dot between "\_source": and {"id Also, Dev Tools results are not json formatted, just p… --- ## [OpenJDK 64-Bit Server VM warning ElasticSearch FAILED TO START](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-elasticsearch-failed-to-start/158638)
**Author:** [@Richard\_Phillips\_Roy](https://discuss.elastic.co/u/Richard_Phillips_Roy)\ **Replies:** 1\ **Last updated:** [November 28, 2018, 8:58pm UTC](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-elasticsearch-failed-to-start/158638 "2018-11-28T20:58:33Z")
I'm a newbie , i'm running DEBAIN on virtual box , and i'm getting this error please help. ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: … --- ## [Question about licensing](https://discuss.elastic.co/t/question-about-licensing/158415)
**Author:** [@ESCoder](https://discuss.elastic.co/u/ESCoder)\ **Replies:** 3\ **Last updated:** [November 28, 2018, 8:37pm UTC](https://discuss.elastic.co/t/question-about-licensing/158415 "2018-11-28T20:37:04Z")
Hi, we are using ElasticSearch 6.x, With oracles announcement below, https://www.oracle.com/technetwork/java/javase/eol-135779.html Will this have any impact on licensing that we should consider? thanks, --- ## [При каждом запросе в Кибане выдается разный результат](https://discuss.elastic.co/t/topic/158573)
**Author:** [@ans\_x](https://discuss.elastic.co/u/ans_x)\ **Replies:** 0\ **Last updated:** [November 28, 2018, 1:15pm UTC](https://discuss.elastic.co/t/topic/158573 "2018-11-28T13:15:56Z")
Есть кластер elasticsearch 6.2.4-1 из двух нод. Конфиг elasticsearch.yml примерно такой: cluster.name: ELK node.name: ${HOSTNAME} path.data: /var/lib/elasticsearch path.logs: /var/log/elasticsearch network.host: I… --- ## [Logs from NGINX are not continuously reaching elasticsearch](https://discuss.elastic.co/t/logs-from-nginx-are-not-continuously-reaching-elasticsearch/158644)
**Author:** [@happycampo](https://discuss.elastic.co/u/happycampo)\ **Replies:** 0\ **Last updated:** [November 28, 2018, 7:53pm UTC](https://discuss.elastic.co/t/logs-from-nginx-are-not-continuously-reaching-elasticsearch/158644 "2018-11-28T19:53:15Z")
I have a very strange problem and I'm not sure how to search for it or how to troubleshoot. I have a VM as a load balancer using NGINX. I've setup filebeat on that vm and it appears to be working. My logstash VM is a … --- ## [Painless query - Iterate over map fields](https://discuss.elastic.co/t/painless-query-iterate-over-map-fields/158259)
**Author:** [@ig8230](https://discuss.elastic.co/u/ig8230)\ **Replies:** 1\ **Last updated:** [November 28, 2018, 7:59pm UTC](https://discuss.elastic.co/t/painless-query-iterate-over-map-fields/158259 "2018-11-28T19:59:19Z")
Data "discovery\_workflow": { "WORKFLOW": { "START": { "process\_name": "WORKFLOW", "state": "START", "event": { "time": 1542060483545 } … --- ## [Running document level "AND" between nested objects](https://discuss.elastic.co/t/running-document-level-and-between-nested-objects/156404)
**Author:** [@mh20](https://discuss.elastic.co/u/mh20)\ **Replies:** 6\ **Last updated:** [November 28, 2018, 6:18pm UTC](https://discuss.elastic.co/t/running-document-level-and-between-nested-objects/156404 "2018-11-28T18:18:36Z")
Hi, I have an index for authors, one document per author. Each book is a nested document: PUT my\_index2 { "mappings": { "\_doc": { "properties": { "books": { "type": "nested" } … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1467) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1469)