# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1481 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1482 --- ## [Splitting event duration for every hour using start and end date](https://discuss.elastic.co/t/splitting-event-duration-for-every-hour-using-start-and-end-date/157113)
**Author:** [@Samar](https://discuss.elastic.co/u/Samar)\ **Replies:** 0\ **Last updated:** [November 16, 2018, 5:27pm UTC](https://discuss.elastic.co/t/splitting-event-duration-for-every-hour-using-start-and-end-date/157113 "2018-11-16T17:27:30Z")
I'd like to plot the duration of activity of an event in a date histogram hourly . For every event i have the start time, the end time and the duration , for example having this log event: "startDate=2018.11.09 08:30:… --- ## [Aggregation help needed](https://discuss.elastic.co/t/aggregation-help-needed/156643)
**Author:** [@frankshad](https://discuss.elastic.co/u/frankshad)\ **Replies:** 3\ **Last updated:** [November 16, 2018, 5:23pm UTC](https://discuss.elastic.co/t/aggregation-help-needed/156643 "2018-11-16T17:23:44Z")
(Simplifying slightly...) I've got an index with documents containing fields "batchid", "name" and "type". Batchid is based on date, so can sort chronologically. Groups of documents are created at the same time with a co… --- ## [Get values from bucket specifying key value](https://discuss.elastic.co/t/get-values-from-bucket-specifying-key-value/157111)
**Author:** [@mdavi](https://discuss.elastic.co/u/mdavi)\ **Replies:** 0\ **Last updated:** [November 16, 2018, 5:11pm UTC](https://discuss.elastic.co/t/get-values-from-bucket-specifying-key-value/157111 "2018-11-16T17:11:44Z")
Dears all, I'm trying to get the value inside my bucket-aggregation specifying the value of the key, but without success... Now I'm using this way to retrieve all information {{#payload.aggregations.Applications.buck… --- ## [Is it possible to reload log4j config without stopping elasticsearch engine?](https://discuss.elastic.co/t/is-it-possible-to-reload-log4j-config-without-stopping-elasticsearch-engine/157102)
**Author:** [@vmanohar1](https://discuss.elastic.co/u/vmanohar1)\ **Replies:** 1\ **Last updated:** [November 16, 2018, 4:33pm UTC](https://discuss.elastic.co/t/is-it-possible-to-reload-log4j-config-without-stopping-elasticsearch-engine/157102 "2018-11-16T16:33:56Z")
How to make elasticsearch java process pick up the change in log4j config file on the fly?? Let me know if it is feable. Thanks. --- ## [Is there any way or tool to list all fields involved in a query?](https://discuss.elastic.co/t/is-there-any-way-or-tool-to-list-all-fields-involved-in-a-query/156837)
**Author:** [@hym](https://discuss.elastic.co/u/hym)\ **Replies:** 1\ **Last updated:** [November 16, 2018, 4:26pm UTC](https://discuss.elastic.co/t/is-there-any-way-or-tool-to-list-all-fields-involved-in-a-query/156837 "2018-11-16T16:26:41Z")
Hi All, I have plenty of complicated queries with lots of fields involved, that is why I am looking for a way or tool to get some static insights out of my queries. Thanks in advance --- ## [Geting the products with specific Order from Elastic Search](https://discuss.elastic.co/t/geting-the-products-with-specific-order-from-elastic-search/156830)
**Author:** [@tejasvyas7](https://discuss.elastic.co/u/tejasvyas7)\ **Replies:** 1\ **Last updated:** [November 16, 2018, 4:22pm UTC](https://discuss.elastic.co/t/geting-the-products-with-specific-order-from-elastic-search/156830 "2018-11-16T16:22:25Z")
I am creating a module within the eCommerce site where I want to use the search relevancy as per my module but want to use the elastic search for returning the results for the search. So my question is what pattern shou… --- ## [Need Help - Log Source Silent Alarm](https://discuss.elastic.co/t/need-help-log-source-silent-alarm/157093)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 0\ **Last updated:** [November 16, 2018, 3:13pm UTC](https://discuss.elastic.co/t/need-help-log-source-silent-alarm/157093 "2018-11-16T15:13:23Z")
Hi, I'm coming from a LogRhythm deployment were we could set a time threshold and subsequent alarm to notify when we stopped receiving logs from certain log sources. I'm trying to figure out how to best do that in Elasti… --- ## [Getting error when adding the repository for backup](https://discuss.elastic.co/t/getting-error-when-adding-the-repository-for-backup/155927)
**Author:** [@vnallamothu](https://discuss.elastic.co/u/vnallamothu)\ **Replies:** 2\ **Last updated:** [November 16, 2018, 3:05pm UTC](https://discuss.elastic.co/t/getting-error-when-adding-the-repository-for-backup/155927 "2018-11-16T15:05:35Z")
I am getting following error while configuring/adding the repository for backup: { "error": { "root\_cause": \[ { "type": "repository\_verification\_exception", "reason": "\[es62\_s3\_repository\] \[\[VZD6lm2UQU29T-vlW8fscw… --- ## [Disable autoupgrade ELK](https://discuss.elastic.co/t/disable-autoupgrade-elk/157034)
**Author:** [@praboosingh](https://discuss.elastic.co/u/praboosingh)\ **Replies:** 4\ **Last updated:** [November 16, 2018, 2:02pm UTC](https://discuss.elastic.co/t/disable-autoupgrade-elk/157034 "2018-11-16T14:02:24Z")
is it possible to disable auto upgrade of Elasticsearch,Logstash,Kibana?. Mine ELK got upgraded from 6.4 to 6.5 version automatically, due to this sentinl plugins stopped working. Could you please tell me. --- ## [Is there a way to use non-text fields for document similarity in ElasticSearch, such as dates or integers?](https://discuss.elastic.co/t/is-there-a-way-to-use-non-text-fields-for-document-similarity-in-elasticsearch-such-as-dates-or-integers/157018)
**Author:** [@bolaft](https://discuss.elastic.co/u/bolaft)\ **Replies:** 1\ **Last updated:** [November 16, 2018, 1:51pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-use-non-text-fields-for-document-similarity-in-elasticsearch-such-as-dates-or-integers/157018 "2018-11-16T13:51:08Z")
Using the more\_like\_this feature of ElasticSearch, I understand how to use tf-idf or other metrics to find similar documents based on text fields. However what if my use case is more like this: # Name Description … --- ## [Elasticsearch started and running, but only for a few seconds](https://discuss.elastic.co/t/elasticsearch-started-and-running-but-only-for-a-few-seconds/153267)
**Author:** [@Karen](https://discuss.elastic.co/u/Karen)\ **Replies:** 6\ **Last updated:** [November 16, 2018, 1:33pm UTC](https://discuss.elastic.co/t/elasticsearch-started-and-running-but-only-for-a-few-seconds/153267 "2018-11-16T13:33:21Z")
I started elasticsearch on ubuntu. When I checked right after started, the status showed as active(running), but after just a few seconds the second status check showed failed. I've tried a few times and it always happen… --- ## [Current timestamp](https://discuss.elastic.co/t/current-timestamp/156850)
**Author:** [@Animesh\_singh](https://discuss.elastic.co/u/Animesh_singh)\ **Replies:** 1\ **Last updated:** [November 16, 2018, 1:16pm UTC](https://discuss.elastic.co/t/current-timestamp/156850 "2018-11-16T13:16:51Z")
hey experts, Can anyone help me with obtaining the timestamp of a document when it was indexed ? value should be given by elastic search server . --- ## [Elastic Stack 6.5 cross cluster replication](https://discuss.elastic.co/t/elastic-stack-6-5-cross-cluster-replication/156958)
**Author:** [@shradhatx](https://discuss.elastic.co/u/shradhatx)\ **Replies:** 1\ **Last updated:** [November 16, 2018, 1:04pm UTC](https://discuss.elastic.co/t/elastic-stack-6-5-cross-cluster-replication/156958 "2018-11-16T13:04:08Z")
Can someone explain what happens under the hood? Is it reindex from remote or something else? --- ## [Debian package creates configuration file writable by the elasticsearch process](https://discuss.elastic.co/t/debian-package-creates-configuration-file-writable-by-the-elasticsearch-process/156748)
**Author:** [@Joost\_Cassee](https://discuss.elastic.co/u/Joost_Cassee)\ **Replies:** 2\ **Last updated:** [November 16, 2018, 12:59pm UTC](https://discuss.elastic.co/t/debian-package-creates-configuration-file-writable-by-the-elasticsearch-process/156748 "2018-11-16T12:59:43Z")
I just installed Elasticsearch 6.4.3 on a fresh Ubuntu 18.04 system from the Apt repository. I noticed that the configuration files in /etc/elasticsearch are writable by group elasticsearch, which the elasticsearch proce… --- ## [Field limitaion exception](https://discuss.elastic.co/t/field-limitaion-exception/156679)
**Author:** [@hym](https://discuss.elastic.co/u/hym)\ **Replies:** 2\ **Last updated:** [November 16, 2018, 12:43pm UTC](https://discuss.elastic.co/t/field-limitaion-exception/156679 "2018-11-16T12:43:55Z")
Hi All, I faced a strange issue. I have a self-defined index with "dynamic":"strict" but after some data import into the Index, got this exception: index \[index-name\] has been exceeded How it is possible to occur as I … --- ## [Query does not work without specifying analyzers](https://discuss.elastic.co/t/query-does-not-work-without-specifying-analyzers/157052)
**Author:** [@alfred.bez](https://discuss.elastic.co/u/alfred.bez)\ **Replies:** 0\ **Last updated:** [November 16, 2018, 12:37pm UTC](https://discuss.elastic.co/t/query-does-not-work-without-specifying-analyzers/157052 "2018-11-16T12:37:34Z")
Hi guys, I've a problem and I'm stuck: We have a page called 'Jobs und Karriere' (german) and when I search for 'Jobs' I get the expected result, but searching for 'Karriere' doesn't find anything. Here's my query: # … --- ## [Query to group by multiple fields](https://discuss.elastic.co/t/query-to-group-by-multiple-fields/155986)
**Author:** [@balumurari1](https://discuss.elastic.co/u/balumurari1)\ **Replies:** 3\ **Last updated:** [November 16, 2018, 11:47am UTC](https://discuss.elastic.co/t/query-to-group-by-multiple-fields/155986 "2018-11-16T11:47:57Z")
Hello, Lets us assume that i have customers information with city , state. Now i want to Group Customer By State, by City. can anyone help me to form query with the multiple fields? if it is only for state, the query… --- ## [Setting custom path for elasticsearch.yml](https://discuss.elastic.co/t/setting-custom-path-for-elasticsearch-yml/156848)
**Author:** [@jmukhtar](https://discuss.elastic.co/u/jmukhtar)\ **Replies:** 0\ **Last updated:** [November 15, 2018, 12:01pm UTC](https://discuss.elastic.co/t/setting-custom-path-for-elasticsearch-yml/156848 "2018-11-15T12:01:49Z")
hi I am trying to upgrade our elastic stack to 6.4.3 version; for some historic reason we use custom path for elasticsearch.yml file. Till 5.6 version we were able to use -Edefault.path.conf=/path/to/conf/file in the st… --- ## [Query data from multiple indexes](https://discuss.elastic.co/t/query-data-from-multiple-indexes/156060)
**Author:** [@balumurari1](https://discuss.elastic.co/u/balumurari1)\ **Replies:** 4\ **Last updated:** [November 16, 2018, 11:36am UTC](https://discuss.elastic.co/t/query-data-from-multiple-indexes/156060 "2018-11-16T11:36:53Z")
Hello, Can anyone help me that is there any possibility to query from multiple indexes, For Example, a. i have "index\_Students" with group of students data(id,name,state,city) in it. b. i have "index\_StudentMarks" wi… --- ## [Role mapping with native authentication realm](https://discuss.elastic.co/t/role-mapping-with-native-authentication-realm/157032)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 0\ **Last updated:** [November 16, 2018, 11:00am UTC](https://discuss.elastic.co/t/role-mapping-with-native-authentication-realm/157032 "2018-11-16T11:00:54Z")
I'd like to map all native users with a prefix in the username to a role, but the role mapping seems to be applied to external realms only. Is it correct? Thanks! --- ## [/\_nodes/stats missing node data on RHEL 7](https://discuss.elastic.co/t/nodes-stats-missing-node-data-on-rhel-7/157030)
**Author:** [@Youichi](https://discuss.elastic.co/u/Youichi)\ **Replies:** 0\ **Last updated:** [November 16, 2018, 10:56am UTC](https://discuss.elastic.co/t/nodes-stats-missing-node-data-on-rhel-7/157030 "2018-11-16T10:56:32Z")
We're running Elasticsearch 5.6 on Redhat Enterprise v7, and we see missing node data in the Elasticsearch node stats data. e.g. curl -XGET http://node1:9200/\_nodes/stats?pretty Returns:- "os" : { "timestamp" : 1542… --- ## [Reindex to another cluster](https://discuss.elastic.co/t/reindex-to-another-cluster/156872)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 2\ **Last updated:** [November 16, 2018, 10:34am UTC](https://discuss.elastic.co/t/reindex-to-another-cluster/156872 "2018-11-16T10:34:53Z")
hi all, I know that I can use reindex API to get index in a remote way. I saw that I can use this API only in one way: from the new\_cluster I can reach the old\_cluster to get the index. is there a way to do it in the o… --- ## [Elasticsearch 2 scroll in PHP - memory issue](https://discuss.elastic.co/t/elasticsearch-2-scroll-in-php-memory-issue/156910)
**Author:** [@Vladimir](https://discuss.elastic.co/u/Vladimir)\ **Replies:** 1\ **Last updated:** [November 16, 2018, 10:02am UTC](https://discuss.elastic.co/t/elasticsearch-2-scroll-in-php-memory-issue/156910 "2018-11-16T10:02:02Z")
Hi, can somebody help me please to solve the problem with Elasticsearch 2 scroll API? I need to migrate data from Elastic 2 to Mongodb. I have a php script below which throws me an error VirtualAlloc() failed: \[0x000005a… --- ## [Elastic 6.x http status code on IP:9200](https://discuss.elastic.co/t/elastic-6-x-http-status-code-on-ip-9200/156904)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 6\ **Last updated:** [November 16, 2018, 9:53am UTC](https://discuss.elastic.co/t/elastic-6-x-http-status-code-on-ip-9200/156904 "2018-11-16T09:53:45Z")
Hi With 1.7.2, IP:9200 gives me: { "status" : 200, "name" : "node\_name", "cluster\_name" : "cluster\_name", "version" : { "number" : "1.7.2", "build\_hash" : "e43676b1385b8125d647f593f7202acbd816e8ec", "build\_time… --- ## [Benchmarking ELK 6.3](https://discuss.elastic.co/t/benchmarking-elk-6-3/155963)
**Author:** [@rajisankar](https://discuss.elastic.co/u/rajisankar)\ **Replies:** 1\ **Last updated:** [November 16, 2018, 9:49am UTC](https://discuss.elastic.co/t/benchmarking-elk-6-3/155963 "2018-11-16T09:49:41Z")
Hi, I am running a 3-node ELK 6.3 cluster. The use case is simple and generic. A bunch of machines generate logs, Filebeat ships those logs to one Logstash instance (What!! can Logstash handle it? yes, for now, Elastics… --- ## [X-pack license question](https://discuss.elastic.co/t/x-pack-license-question/157002)
**Author:** [@johd](https://discuss.elastic.co/u/johd)\ **Replies:** 1\ **Last updated:** [November 16, 2018, 9:46am UTC](https://discuss.elastic.co/t/x-pack-license-question/157002 "2018-11-16T09:46:05Z")
Hi, How does Elasticsearch keep track of whetever license is used or not on other machines? I have a license for 10 nodes in production, can i split my cluster into 2x5 cluster and use same license? Regards, J --- ## [How to set timezone on index using rest-api](https://discuss.elastic.co/t/how-to-set-timezone-on-index-using-rest-api/157007)
**Author:** [@mortenb123](https://discuss.elastic.co/u/mortenb123)\ **Replies:** 1\ **Last updated:** [November 16, 2018, 8:47am UTC](https://discuss.elastic.co/t/how-to-set-timezone-on-index-using-rest-api/157007 "2018-11-16T08:47:54Z")
I try to set the timezone on the @timestamp index as we do in logstash: 20181116091132.106 - root:139 - ERROR - put index 'proxylogs-mb-pc-2018-10-16' with data:'{ "mappings": { "proxylog": { "pr… --- ## [Index-Switch](https://discuss.elastic.co/t/index-switch/156683)
**Author:** [@Animesh\_singh](https://discuss.elastic.co/u/Animesh_singh)\ **Replies:** 8\ **Last updated:** [November 16, 2018, 7:29am UTC](https://discuss.elastic.co/t/index-switch/156683 "2018-11-16T07:29:17Z")
Can anyone help me with switching of indexes with reindexing old one without loosing new data that is indexed on old index during the time of reindexing . --- ## [Elasticsearch overhead all the time](https://discuss.elastic.co/t/elasticsearch-overhead-all-the-time/156571)
**Author:** [@liuyang1943](https://discuss.elastic.co/u/liuyang1943)\ **Replies:** 5\ **Last updated:** [November 16, 2018, 7:24am UTC](https://discuss.elastic.co/t/elasticsearch-overhead-all-the-time/156571 "2018-11-16T07:24:48Z")
I deployed ELK in one node, and configured the Elasticsearch's memory with 10G, no other changes for ES. But every time, when I perform the query from Kibana, the ES always reported the error as :slight\_smile: \[2018-11… --- ## [ElasticSearch parent-child query results are not what I want, please help me see my problem](https://discuss.elastic.co/t/elasticsearch-parent-child-query-results-are-not-what-i-want-please-help-me-see-my-problem/156981)
**Author:** [@Zhen\_Zhang](https://discuss.elastic.co/u/Zhen_Zhang)\ **Replies:** 1\ **Last updated:** [November 16, 2018, 6:25am UTC](https://discuss.elastic.co/t/elasticsearch-parent-child-query-results-are-not-what-i-want-please-help-me-see-my-problem/156981 "2018-11-16T06:25:50Z")
Hi： I create Indexing Parents and Children, the parent document stores user basic information, and the child document stores login information. How do I query user information that is older than 18 years old and has lo… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1480) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1482)