# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1469 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1470 --- ## [Elasticsearch backup snapshot](https://discuss.elastic.co/t/elasticsearch-backup-snapshot/158593)
**Author:** [@Nirpendra\_Kumar](https://discuss.elastic.co/u/Nirpendra_Kumar)\ **Replies:** 1\ **Last updated:** [November 28, 2018, 5:18pm UTC](https://discuss.elastic.co/t/elasticsearch-backup-snapshot/158593 "2018-11-28T17:18:48Z")
Hi Team, Just wanted to confirm if elasticsearch snapshot are incremental ? Thanks and Regards, Nirpendra --- ## [Can't install ingest attachment plugin from zip file](https://discuss.elastic.co/t/cant-install-ingest-attachment-plugin-from-zip-file/158616)
**Author:** [@geppo](https://discuss.elastic.co/u/geppo)\ **Replies:** 1\ **Last updated:** [November 28, 2018, 5:17pm UTC](https://discuss.elastic.co/t/cant-install-ingest-attachment-plugin-from-zip-file/158616 "2018-11-28T17:17:13Z")
I'm trying to install a plugin from zip file in this way: michele@michele-Inspiron-5570:/usr/share/elasticsearch$ sudo bin/elasticsearch-plugin install file:///home/michele/Scaricati/ingest-attachment-6.5.0.zip \[sudo\] p… --- ## [Downgrade ELK stack from 6.5.1 to 6.4.3](https://discuss.elastic.co/t/downgrade-elk-stack-from-6-5-1-to-6-4-3/158580)
**Author:** [@Venkata\_Naresh](https://discuss.elastic.co/u/Venkata_Naresh)\ **Replies:** 15\ **Last updated:** [November 28, 2018, 4:48pm UTC](https://discuss.elastic.co/t/downgrade-elk-stack-from-6-5-1-to-6-4-3/158580 "2018-11-28T16:48:30Z")
I want to downgrade ELK to lower version from 6.5.1 as some of the plugins not supported in 6.5.1. Help me with the process of downgrading without any index and dashboards loss --- ## [Dynamic mapping numeric field datatypes greater than 2^63 - 1 (long type)](https://discuss.elastic.co/t/dynamic-mapping-numeric-field-datatypes-greater-than-2-63-1-long-type/158610)
**Author:** [@Anish\_Pradhan](https://discuss.elastic.co/u/Anish_Pradhan)\ **Replies:** 0\ **Last updated:** [November 28, 2018, 3:32pm UTC](https://discuss.elastic.co/t/dynamic-mapping-numeric-field-datatypes-greater-than-2-63-1-long-type/158610 "2018-11-28T15:32:02Z")
I assume that this is due to the numeric values not accommodated by "long" data type. How can we handle these numeric values. Example: doc = \[ { "node": \[{ "table": \[{ "node-table": { … --- ## [Multiple search clauses and filtering?](https://discuss.elastic.co/t/multiple-search-clauses-and-filtering/158591)
**Author:** [@Repox](https://discuss.elastic.co/u/Repox)\ **Replies:** 0\ **Last updated:** [November 28, 2018, 2:51pm UTC](https://discuss.elastic.co/t/multiple-search-clauses-and-filtering/158591 "2018-11-28T14:51:14Z")
Hello. I'm trying to search trough my items and I'm trying to achieve a combination of a wildcard search and an exact match on two different fields and finally filtering out the results. My current request looks like t… --- ## [Error running Spring Boot Application in IntelliJ IDEA after adding dependencies](https://discuss.elastic.co/t/error-running-spring-boot-application-in-intellij-idea-after-adding-dependencies/158574)
**Author:** [@Jordy\_Swinnen](https://discuss.elastic.co/u/Jordy_Swinnen)\ **Replies:** 6\ **Last updated:** [November 28, 2018, 2:38pm UTC](https://discuss.elastic.co/t/error-running-spring-boot-application-in-intellij-idea-after-adding-dependencies/158574 "2018-11-28T14:38:57Z")
I'm trying to index documents from a Spring Boot application to a local Elasticsearch Docker container using the these gradle dependencies. compile('org.elasticsearch:elasticsearch:6.5.1') compile('org.elasticsearch.cl… --- ## [Can't escape + sign in elastic search query](https://discuss.elastic.co/t/cant-escape-sign-in-elastic-search-query/158584)
**Author:** [@sumit1](https://discuss.elastic.co/u/sumit1)\ **Replies:** 0\ **Last updated:** [November 28, 2018, 2:22pm UTC](https://discuss.elastic.co/t/cant-escape-sign-in-elastic-search-query/158584 "2018-11-28T14:22:34Z")
I am unable to escape + symbol from my query string, I tried both ways 1) using \\ and 2) by quoting the string. Also while tokenizing any string with + symbol generates tokens which don't have + sign. I am using token ch… --- ## [Why I see fielddata when doc\_value is enabled in Aggregations?](https://discuss.elastic.co/t/why-i-see-fielddata-when-doc-value-is-enabled-in-aggregations/158559)
**Author:** [@Hessam\_Jalali](https://discuss.elastic.co/u/Hessam_Jalali)\ **Replies:** 2\ **Last updated:** [November 28, 2018, 2:08pm UTC](https://discuss.elastic.co/t/why-i-see-fielddata-when-doc-value-is-enabled-in-aggregations/158559 "2018-11-28T14:08:15Z")
Based on Elastic Documents, every type except text(an analyzed string) supports doc\_values which I suppose when available, should completely omit fielddata in Aggregation. However this not the case for me, whenever I do… --- ## [Delete the old data from index](https://discuss.elastic.co/t/delete-the-old-data-from-index/156312)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 23\ **Last updated:** [November 28, 2018, 2:03pm UTC](https://discuss.elastic.co/t/delete-the-old-data-from-index/156312 "2018-11-28T14:03:10Z")
HI, I want to delete data from ES index and i want to keep only last 30 days record in it. Is it possible to achieve this with rollover concept. --- ## [Upgraded ES 6.0.0-alpha1 to 6.5.1 , launching ES throw error](https://discuss.elastic.co/t/upgraded-es-6-0-0-alpha1-to-6-5-1-launching-es-throw-error/158534)
**Author:** [@Tommy\_Cabrelli](https://discuss.elastic.co/u/Tommy_Cabrelli)\ **Replies:** 1\ **Last updated:** [November 28, 2018, 1:42pm UTC](https://discuss.elastic.co/t/upgraded-es-6-0-0-alpha1-to-6-5-1-launching-es-throw-error/158534 "2018-11-28T13:42:18Z")
Hi, I wanted to upgrade kibana from 6.0 to 6.5 to use the APM feature. So I did and i get "kibana server is not ready yet" on my 5601 port. I thought it was because my ES was still in version 6.0 so I did upgrade it to… --- ## [Influence Scores Without Taking the Property Values into Account](https://discuss.elastic.co/t/influence-scores-without-taking-the-property-values-into-account/158577)
**Author:** [@maryam\_abdullah](https://discuss.elastic.co/u/maryam_abdullah)\ **Replies:** 0\ **Last updated:** [November 28, 2018, 1:33pm UTC](https://discuss.elastic.co/t/influence-scores-without-taking-the-property-values-into-account/158577 "2018-11-28T13:33:16Z")
Hey, How is it possible to influence scores based on a property condition without considering the property values, i.e. it isn't useful to use the field value factor in that case. Thank you in advance. --- ## [Elasticsearch ip type in ranges?](https://discuss.elastic.co/t/elasticsearch-ip-type-in-ranges/157379)
**Author:** [@jahlives](https://discuss.elastic.co/u/jahlives)\ **Replies:** 5\ **Last updated:** [November 28, 2018, 1:26pm UTC](https://discuss.elastic.co/t/elasticsearch-ip-type-in-ranges/157379 "2018-11-28T13:26:18Z")
using elasticsearch 6.4 on a Centos7 with latest patches I currently see a very weird behaviour on my ELK. It's related to a search query on a field which is of type ip. The strange this is that I get results based on … --- ## [Overlapping words in phrases in bool must, returning no result](https://discuss.elastic.co/t/overlapping-words-in-phrases-in-bool-must-returning-no-result/158361)
**Author:** [@Danielss89](https://discuss.elastic.co/u/Danielss89)\ **Replies:** 1\ **Last updated:** [November 28, 2018, 12:51pm UTC](https://discuss.elastic.co/t/overlapping-words-in-phrases-in-bool-must-returning-no-result/158361 "2018-11-28T12:51:25Z")
Hello I have this document: "a nice fox and an ugly fox" Now i want it to match with this query MUST HAVE "a nice fox" AND MUST HAVE "an ugly fox". So i have the following query: https://codebeautify.org/jsonviewer/cbf… --- ## [Problem logs redirection](https://discuss.elastic.co/t/problem-logs-redirection/157011)
**Author:** [@NauGui](https://discuss.elastic.co/u/NauGui)\ **Replies:** 5\ **Last updated:** [November 28, 2018, 12:45pm UTC](https://discuss.elastic.co/t/problem-logs-redirection/157011 "2018-11-28T12:45:45Z")
Hello, I'm meeting an issue with redirection of logs (winlogbeat,filebeat,...). Normally my logs is stocked in /var/lib/elasticsearch/nodes/0/indices. But now logs are redirected in /var/logs/logstash and now the logs a… --- ## [How to map documents of same index with different field](https://discuss.elastic.co/t/how-to-map-documents-of-same-index-with-different-field/158563)
**Author:** [@AadarshKumayan](https://discuss.elastic.co/u/AadarshKumayan)\ **Replies:** 0\ **Last updated:** [November 28, 2018, 12:04pm UTC](https://discuss.elastic.co/t/how-to-map-documents-of-same-index-with-different-field/158563 "2018-11-28T12:04:34Z")
Hello Team , i am using elastic search to save json data of two categories . I am using elastic search version 5.6. I have 2 types of documents Now the only difference in those two types is the hash map fields { "… --- ## [Getting track syntax error while running esrally Could not execute benchmark', TrackSyntaxError](https://discuss.elastic.co/t/getting-track-syntax-error-while-running-esrally-could-not-execute-benchmark-tracksyntaxerror/157863)
**Author:** [@Ronnie16](https://discuss.elastic.co/u/Ronnie16)\ **Replies:** 3\ **Last updated:** [November 28, 2018, 12:05pm UTC](https://discuss.elastic.co/t/getting-track-syntax-error-while-running-esrally-could-not-execute-benchmark-tracksyntaxerror/157863 "2018-11-28T12:05:28Z")
Running esrally inside a container with - esrally --track=geonames --target-hosts=17.99.221.188:80 --pipeline=benchmark-only But getting the following error - \[ERROR\] Cannot race. ('Could not execute benchmark', Tra… --- ## [Wildcard searches crashing ElasticSearch Server](https://discuss.elastic.co/t/wildcard-searches-crashing-elasticsearch-server/158300)
**Author:** [@Anurag\_Kumar1](https://discuss.elastic.co/u/Anurag_Kumar1)\ **Replies:** 0\ **Last updated:** [November 27, 2018, 8:53am UTC](https://discuss.elastic.co/t/wildcard-searches-crashing-elasticsearch-server/158300 "2018-11-27T08:53:58Z")
I have a deployment of ~30 node ES Cluster, where the index size density is roughly 2 TB per node. We have a use-case of some ES node regularly crashing when our end-user triggers wildcard searches. (ES node goes OOM) W… --- ## [Jdk version](https://discuss.elastic.co/t/jdk-version/158547)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 2\ **Last updated:** [November 28, 2018, 10:59am UTC](https://discuss.elastic.co/t/jdk-version/158547 "2018-11-28T10:59:25Z")
I am installing elsticsearch in the oracle linux 6.8 I set java version as hotspot by definig JAVA\_HOME parameter in the .bash\_profile file. when i type (java -version) in terminal, output is as following \[srahimi@adm… --- ## [Correlation or calculating time difference between log entries using BI tool with ES 6.5](https://discuss.elastic.co/t/correlation-or-calculating-time-difference-between-log-entries-using-bi-tool-with-es-6-5/158526)
**Author:** [@ramvalleru](https://discuss.elastic.co/u/ramvalleru)\ **Replies:** 2\ **Last updated:** [November 28, 2018, 10:42am UTC](https://discuss.elastic.co/t/correlation-or-calculating-time-difference-between-log-entries-using-bi-tool-with-es-6-5/158526 "2018-11-28T10:42:43Z")
Some jobs create log entries as following: event time( start), uid and status; event time( stop), uid and status; The message if parsed and the fields are separated using Logstash and put into index. I believe I coul… --- ## [ELK Setup on ORACLE-EBS](https://discuss.elastic.co/t/elk-setup-on-oracle-ebs/158545)
**Author:** [@sarban.kumar](https://discuss.elastic.co/u/sarban.kumar)\ **Replies:** 0\ **Last updated:** [November 28, 2018, 10:39am UTC](https://discuss.elastic.co/t/elk-setup-on-oracle-ebs/158545 "2018-11-28T10:39:36Z")
Hi All, One of financial client appliction setup on M7 Supoercluster \[ SOLARIES SPARC\] ORACLE-EBS. Client is having Few Linux box , where we can setup ELK . Now the problem is that File beat does not support on Solarie… --- ## [Required java version for elasticsearch 5.6 java API?](https://discuss.elastic.co/t/required-java-version-for-elasticsearch-5-6-java-api/158541)
**Author:** [@hym](https://discuss.elastic.co/u/hym)\ **Replies:** 1\ **Last updated:** [November 28, 2018, 10:36am UTC](https://discuss.elastic.co/t/required-java-version-for-elasticsearch-5-6-java-api/158541 "2018-11-28T10:36:11Z")
Hi all, I have a problem with java version (7) using elasticsearch 5.6.7 Caused by: java.lang.UnsupportedClassVersionError: org/elasticsearch/index/query/QueryBuilder : Unsupported major.minor version 52.0 (unable to l… --- ## [Different behaviour of query\_string on elasticsearch v5.6.13 and v6.4.3](https://discuss.elastic.co/t/different-behaviour-of-query-string-on-elasticsearch-v5-6-13-and-v6-4-3/158531)
**Author:** [@pankhuri](https://discuss.elastic.co/u/pankhuri)\ **Replies:** 0\ **Last updated:** [November 28, 2018, 9:51am UTC](https://discuss.elastic.co/t/different-behaviour-of-query-string-on-elasticsearch-v5-6-13-and-v6-4-3/158531 "2018-11-28T09:51:15Z")
Hi, Please perform the following steps to regenerate the issue - Create a test index with following settings on v6.4.3 and v5.6.13 (remove settings.index.max\_ngram\_diff) PUT test { "mappings": { "string": { "prope… --- ## [OpenJDK vs Oracle](https://discuss.elastic.co/t/openjdk-vs-oracle/158234)
**Author:** [@jesusgn90](https://discuss.elastic.co/u/jesusgn90)\ **Replies:** 4\ **Last updated:** [November 28, 2018, 9:43am UTC](https://discuss.elastic.co/t/openjdk-vs-oracle/158234 "2018-11-28T09:43:40Z")
Hi guys, since our company always bets for open source and free alternatives, is there a reason to use Oracle for the Java packages or we can use OpenJDK without fear about breaking environments? We would like to use Ope… --- ## [Problem when search with japanese kana](https://discuss.elastic.co/t/problem-when-search-with-japanese-kana/158524)
**Author:** [@sh111894](https://discuss.elastic.co/u/sh111894)\ **Replies:** 0\ **Last updated:** [November 28, 2018, 9:30am UTC](https://discuss.elastic.co/t/problem-when-search-with-japanese-kana/158524 "2018-11-28T09:30:24Z")
I have a problem with using elastic search to search with japanese kana I'm using search query\_string to search with keyword "シーラー" that expected to have a result as "オートシーラー" or another results with kana before the key… --- ## [Elasticsearch cannot start when change the default path of log and data](https://discuss.elastic.co/t/elasticsearch-cannot-start-when-change-the-default-path-of-log-and-data/158488)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 9\ **Last updated:** [November 28, 2018, 9:30am UTC](https://discuss.elastic.co/t/elasticsearch-cannot-start-when-change-the-default-path-of-log-and-data/158488 "2018-11-28T09:30:08Z")
hi all, I install elasticsearch using RPM version. first i used default path of log and data as following , path.data: /var/lib/elasticsearch path.logs: /var/log/elasticsearch when i used default path, elasticsearch … --- ## [Is the User-Based Data model a good solution?](https://discuss.elastic.co/t/is-the-user-based-data-model-a-good-solution/158523)
**Author:** [@mgrabazey](https://discuss.elastic.co/u/mgrabazey)\ **Replies:** 0\ **Last updated:** [November 28, 2018, 9:25am UTC](https://discuss.elastic.co/t/is-the-user-based-data-model-a-good-solution/158523 "2018-11-28T09:25:30Z")
Hi everyone! Sorry for my bad English. I am researching a data model for storing product reviews. Suppose, need to store reviews of 10000+ products. I think the User-Based Data model is right here. But it says here th… --- ## [Could create Index Patterns for new index](https://discuss.elastic.co/t/could-create-index-patterns-for-new-index/158451)
**Author:** [@Wayne\_Du](https://discuss.elastic.co/u/Wayne_Du)\ **Replies:** 4\ **Last updated:** [November 28, 2018, 9:20am UTC](https://discuss.elastic.co/t/could-create-index-patterns-for-new-index/158451 "2018-11-28T09:20:09Z")
After I create new index with python API, when I create Index Patterns for this new index, but i could not find out the new index, I can search this index in DEV Tool with command get /index\_name/\_mapping, and the new in… --- ## [Automation Testing for ES](https://discuss.elastic.co/t/automation-testing-for-es/158489)
**Author:** [@Darshan\_Shah](https://discuss.elastic.co/u/Darshan_Shah)\ **Replies:** 2\ **Last updated:** [November 28, 2018, 9:16am UTC](https://discuss.elastic.co/t/automation-testing-for-es/158489 "2018-11-28T09:16:52Z")
Need to create a dummy searchResponse type variable to use it for automated unit testing.. Please suggest if there is something directly available --- ## [Index template not applying to indices](https://discuss.elastic.co/t/index-template-not-applying-to-indices/158244)
**Author:** [@alastairs](https://discuss.elastic.co/u/alastairs)\ **Replies:** 6\ **Last updated:** [November 28, 2018, 8:50am UTC](https://discuss.elastic.co/t/index-template-not-applying-to-indices/158244 "2018-11-28T08:50:20Z")
Hi there We're using Filebeat 6.4.2 to scrape our logs from Kubernetes (with Docker) and are shipping our logs directly to Elastic Cloud, running 6.5.0. I loaded a custom index template into Elasticsearch to add a .raw … --- ## [Alerts for errors in internal elasticsearch/logstash log files](https://discuss.elastic.co/t/alerts-for-errors-in-internal-elasticsearch-logstash-log-files/158491)
**Author:** [@cowensel](https://discuss.elastic.co/u/cowensel)\ **Replies:** 1\ **Last updated:** [November 28, 2018, 8:47am UTC](https://discuss.elastic.co/t/alerts-for-errors-in-internal-elasticsearch-logstash-log-files/158491 "2018-11-28T08:47:34Z")
I am wondering if this is possible. Is there a way for a watcher or task that can be created that will read the internal logs for Elasticsearch and Logstash for any errors which then sends an alert? I check these logs … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1468) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1470)