# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1486

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1487

---

## [Combine scores from multi-match and date range](https://discuss.elastic.co/t/combine-scores-from-multi-match-and-date-range/154825)

<div class="topic-metadata">

**Author:** [@maryam\_abdullah](https://discuss.elastic.co/u/maryam_abdullah)\
**Replies:** 5\
**Last updated:** [November 13, 2018, 9:19am UTC](https://discuss.elastic.co/t/combine-scores-from-multi-match-and-date-range/154825 "2018-11-13T09:19:18Z")

</div>

Hey there, I want to consider the dates while calculating scores, meaning that a document score is a combination of both multi-match fields and date. Here's my code: var response = elasticClient.Search\<Document\>(s =\> …

---

## [Cause and how to avoid "Data too large \<http\_request\>" exception](https://discuss.elastic.co/t/cause-and-how-to-avoid-data-too-large-http-request-exception/156279)

<div class="topic-metadata">

**Author:** [@klimapet](https://discuss.elastic.co/u/klimapet)\
**Replies:** 4\
**Last updated:** [November 13, 2018, 10:31am UTC](https://discuss.elastic.co/t/cause-and-how-to-avoid-data-too-large-http-request-exception/156279 "2018-11-13T10:31:41Z")

</div>

Hi, I've run into troubles with following exception org.elasticsearch.common.breaker.CircuitBreakingException: \[parent\] Data too large, data for \[\<http\_request\>\] would be \[32136353583/29.9gb\], which is larger than …

---

## [Recommended specs for Master and Coordinating nodes in a 80TB, 8B docs cluster](https://discuss.elastic.co/t/recommended-specs-for-master-and-coordinating-nodes-in-a-80tb-8b-docs-cluster/156440)

<div class="topic-metadata">

**Author:** [@JoelWes](https://discuss.elastic.co/u/JoelWes)\
**Replies:** 2\
**Last updated:** [November 13, 2018, 10:29am UTC](https://discuss.elastic.co/t/recommended-specs-for-master-and-coordinating-nodes-in-a-80tb-8b-docs-cluster/156440 "2018-11-13T10:29:42Z")

</div>

We have a 21 node ES 6.3 cluster with a Hot-Warm-Cold architecture and we would like to move to have three dedicated Master nodes for this cluster and add some Coordinating nodes. As stated in the title the cluster is st…

---

## [How to get the terms of the query text in the plugin code?](https://discuss.elastic.co/t/how-to-get-the-terms-of-the-query-text-in-the-plugin-code/156433)

<div class="topic-metadata">

**Author:** [@liuxuanfei](https://discuss.elastic.co/u/liuxuanfei)\
**Replies:** 0\
**Last updated:** [November 13, 2018, 10:03am UTC](https://discuss.elastic.co/t/how-to-get-the-terms-of-the-query-text-in-the-plugin-code/156433 "2018-11-13T10:03:12Z")

</div>

First of all, I must apologize for my poor English.:joy: I want to write a plugin to return script score (based on Levenshtein Distance) for each hit. e.g. { "query": { "match" : { "message" : "The 2 QUICK Brown-Fo…

---

## [Copy data from one elasticsearch to another elasticsearch when changes happen in one](https://discuss.elastic.co/t/copy-data-from-one-elasticsearch-to-another-elasticsearch-when-changes-happen-in-one/156431)

<div class="topic-metadata">

**Author:** [@Rajneesh\_Singh](https://discuss.elastic.co/u/Rajneesh_Singh)\
**Replies:** 0\
**Last updated:** [November 13, 2018, 9:53am UTC](https://discuss.elastic.co/t/copy-data-from-one-elasticsearch-to-another-elasticsearch-when-changes-happen-in-one/156431 "2018-11-13T09:53:16Z")

</div>

I have one elasticsearch in one data center and other in other data center.I want to replicate data in both. I want to replicate data whenever there is data change in one elasticsearch it should automatically change in o…

---

## [Index API queries taking long time](https://discuss.elastic.co/t/index-api-queries-taking-long-time/155413)

<div class="topic-metadata">

**Author:** [@bondido](https://discuss.elastic.co/u/bondido)\
**Replies:** 4\
**Last updated:** [November 13, 2018, 9:23am UTC](https://discuss.elastic.co/t/index-api-queries-taking-long-time/155413 "2018-11-13T09:23:53Z")

</div>

Hi, On our ES 6.x (various versions tested with 6.4.1 being the last one) installed on Ubuntu 16 hosts we are experiencing temporary problems with Indexing queries performance. Single query can take up to 10 or more se…

---

## [Using elasticsearch.net, how to orderby totalsalary (not a actual field in elastic) which comes from two actual fields](https://discuss.elastic.co/t/using-elasticsearch-net-how-to-orderby-totalsalary-not-a-actual-field-in-elastic-which-comes-from-two-actual-fields/156421)

<div class="topic-metadata">

**Author:** [@Sahaya\_Agnel](https://discuss.elastic.co/u/Sahaya_Agnel)\
**Replies:** 0\
**Last updated:** [November 13, 2018, 9:10am UTC](https://discuss.elastic.co/t/using-elasticsearch-net-how-to-orderby-totalsalary-not-a-actual-field-in-elastic-which-comes-from-two-actual-fields/156421 "2018-11-13T09:10:38Z")

</div>

i have two field in elastic search, like clientsalary and spousesalary. But i need to fetch documents from elastic search using total salary (clientsalary + spousesalary) in a descending order on runtime using elasticsea…

---

## [Why are queries getting slower and slower](https://discuss.elastic.co/t/why-are-queries-getting-slower-and-slower/155326)

<div class="topic-metadata">

**Author:** [@dayo](https://discuss.elastic.co/u/dayo)\
**Replies:** 2\
**Last updated:** [November 13, 2018, 8:55am UTC](https://discuss.elastic.co/t/why-are-queries-getting-slower-and-slower/155326 "2018-11-13T08:55:08Z")

</div>

Before Oct 18, static 99% less than 439ms, After Oct 18 is 603ms. cluster: 5 node mdi, 32core 128G memory(but jvm config is 31g). 1 index 100shards,2b documents with 2T disk used space. Is it because there's too much…

---

## [5.4.0 Relocation of shards on the node affects indexing of data on the node](https://discuss.elastic.co/t/5-4-0-relocation-of-shards-on-the-node-affects-indexing-of-data-on-the-node/156416)

<div class="topic-metadata">

**Author:** [@Neha\_Sharma1](https://discuss.elastic.co/u/Neha_Sharma1)\
**Replies:** 0\
**Last updated:** [November 13, 2018, 8:44am UTC](https://discuss.elastic.co/t/5-4-0-relocation-of-shards-on-the-node-affects-indexing-of-data-on-the-node/156416 "2018-11-13T08:44:57Z")

</div>

I have 7 data nodes with 2.0TB on each node. On particular index, which has all the primary shards on say Node A ,has high indexing rate. Whenever a shard of any index is relocated from Node A to any other node, the ind…

---

## [Mapping changed cause exception after elasticsearch upgrade to 5.6.3](https://discuss.elastic.co/t/mapping-changed-cause-exception-after-elasticsearch-upgrade-to-5-6-3/155879)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 1\
**Last updated:** [November 13, 2018, 8:42am UTC](https://discuss.elastic.co/t/mapping-changed-cause-exception-after-elasticsearch-upgrade-to-5-6-3/155879 "2018-11-13T08:42:42Z")

</div>

Hi I have upgraded elasticsearch from 1.x to 5.6.3. Earlier I use to have a code like below "instance.esClient.doIndexing(ESConstants.OFFLINE\_INDEX,id, new ESEventDoc()); createMapping(dataFields); " Here I created m…

---

## [Elasticsearch startup is waiting and takes 7 minutes to start](https://discuss.elastic.co/t/elasticsearch-startup-is-waiting-and-takes-7-minutes-to-start/156300)

<div class="topic-metadata">

**Author:** [@benwill](https://discuss.elastic.co/u/benwill)\
**Replies:** 2\
**Last updated:** [November 13, 2018, 8:34am UTC](https://discuss.elastic.co/t/elasticsearch-startup-is-waiting-and-takes-7-minutes-to-start/156300 "2018-11-13T08:34:02Z")

</div>

Hello, I have a cluster with 2 nodes (another 1 will be added later). I made a fresh install. There is no data on ES. But on one node it takes 7 minutes to start. The system has 64GB ram but i can use with -Xms16g. If i…

---

## [ELK for capturing redis logs](https://discuss.elastic.co/t/elk-for-capturing-redis-logs/156389)

<div class="topic-metadata">

**Author:** [@Prabhu\_Jeyachandran](https://discuss.elastic.co/u/Prabhu_Jeyachandran)\
**Replies:** 3\
**Last updated:** [November 13, 2018, 7:50am UTC](https://discuss.elastic.co/t/elk-for-capturing-redis-logs/156389 "2018-11-13T07:50:26Z")

</div>

In our application ,certain logs are cached on redis. We Need to capture those logs from the redis cache which is hosted as a PAAS in azure. Is that possible for capturing the Redis PAAS logs. Awaiting response

---

## [Using the Truncate filter on keywords](https://discuss.elastic.co/t/using-the-truncate-filter-on-keywords/153476)

<div class="topic-metadata">

**Author:** [@Arik\_A](https://discuss.elastic.co/u/Arik_A)\
**Replies:** 5\
**Last updated:** [November 13, 2018, 7:33am UTC](https://discuss.elastic.co/t/using-the-truncate-filter-on-keywords/153476 "2018-11-13T07:33:13Z")

</div>

Hi, I'm using Elasticsearch 5.5.1. In a defined template, a keyword field is added to each text field, currently mainly for sorting. These texts could be long, and keywords have limited size. I know there's the ignore…

---

## [Is it true that sometimes elasticsearch aggregations can be inaccurate?](https://discuss.elastic.co/t/is-it-true-that-sometimes-elasticsearch-aggregations-can-be-inaccurate/156396)

<div class="topic-metadata">

**Author:** [@genichm](https://discuss.elastic.co/u/genichm)\
**Replies:** 1\
**Last updated:** [November 13, 2018, 7:19am UTC](https://discuss.elastic.co/t/is-it-true-that-sometimes-elasticsearch-aggregations-can-be-inaccurate/156396 "2018-11-13T07:19:35Z")

</div>

Does it true that in moment of heavy load on cluster Elasticsearch can make inaccurate aggregations?

---

## [Web hook \["scheme": "https"\]](https://discuss.elastic.co/t/web-hook-scheme-https/156392)

<div class="topic-metadata">

**Author:** [@antianchi](https://discuss.elastic.co/u/antianchi)\
**Replies:** 1\
**Last updated:** [November 13, 2018, 7:09am UTC](https://discuss.elastic.co/t/web-hook-scheme-https/156392 "2018-11-13T07:09:22Z")

</div>

this is my webhook action conf: { "trigger": { "schedule": { "interval": "30s" } }, "input": { "search": { "request": { "search\_type": "query\_then\_fetch", "indices": \[ "metricbeat\*" \], "types": , "body": { …

---

## [Intermittent No node available exceptions](https://discuss.elastic.co/t/intermittent-no-node-available-exceptions/156390)

<div class="topic-metadata">

**Author:** [@shshnk28](https://discuss.elastic.co/u/shshnk28)\
**Replies:** 1\
**Last updated:** [November 13, 2018, 6:24am UTC](https://discuss.elastic.co/t/intermittent-no-node-available-exceptions/156390 "2018-11-13T06:24:32Z")

</div>

We have a 7 node cluster with 6 of them running ES version 5.2.1. One of the nodes is on 5.6.6. We observe that this node leaves the cluster intermittently. I have grabbed the log when the node disconnects from the clu…

---

## [Are there size limits for indexing and bulk indexing?](https://discuss.elastic.co/t/are-there-size-limits-for-indexing-and-bulk-indexing/156278)

<div class="topic-metadata">

**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\
**Replies:** 3\
**Last updated:** [November 13, 2018, 6:04am UTC](https://discuss.elastic.co/t/are-there-size-limits-for-indexing-and-bulk-indexing/156278 "2018-11-13T06:04:50Z")

</div>

Hello, is there a hard limit or recommended size ceiling when it comes to bulk indexing? For indexing one document at a time, is there also a limit to how large file each document can be?

---

## [How to find the distinct values in a nested type field in elasticsearch? Can anyone provide one example?](https://discuss.elastic.co/t/how-to-find-the-distinct-values-in-a-nested-type-field-in-elasticsearch-can-anyone-provide-one-example/156384)

<div class="topic-metadata">

**Author:** [@deepak643](https://discuss.elastic.co/u/deepak643)\
**Replies:** 1\
**Last updated:** [November 13, 2018, 4:36am UTC](https://discuss.elastic.co/t/how-to-find-the-distinct-values-in-a-nested-type-field-in-elasticsearch-can-anyone-provide-one-example/156384 "2018-11-13T04:36:54Z")

</div>

I am looking for one example on how to extract distinct values of a nested type property in elastic search. Could anyone provide an example? I have a below query where I am trying to retrieve distinct values of "batchId…

---

## [Upgrading ES 5.2 to ES 5.6.13](https://discuss.elastic.co/t/upgrading-es-5-2-to-es-5-6-13/156368)

<div class="topic-metadata">

**Author:** [@merceskoba](https://discuss.elastic.co/u/merceskoba)\
**Replies:** 1\
**Last updated:** [November 13, 2018, 4:09am UTC](https://discuss.elastic.co/t/upgrading-es-5-2-to-es-5-6-13/156368 "2018-11-13T04:09:59Z")

</div>

Hello, all My staging stage is ES 5.2 right now. I wanna upgrade ES to be 5.6.13. Is this procedure very safe ? https://www.elastic.co/guide/en/elasticsearch/reference/5.6/rolling-upgrades.html Example, i have 5 serve…

---

## [Aggregate Jenkins build logs stored in ElasticSearch/view in Kibana](https://discuss.elastic.co/t/aggregate-jenkins-build-logs-stored-in-elasticsearch-view-in-kibana/156359)

<div class="topic-metadata">

**Author:** [@DarrienG](https://discuss.elastic.co/u/DarrienG)\
**Replies:** 0\
**Last updated:** [November 12, 2018, 10:15pm UTC](https://discuss.elastic.co/t/aggregate-jenkins-build-logs-stored-in-elasticsearch-view-in-kibana/156359 "2018-11-12T22:15:06Z")

</div>

I believe this question is more relevant for ES, but may be answerable with just Kibana as well. I'm storing my Jenkins build logs in ElasticSearch with the Jenkins Logstash plugin. My configuration looks sort of like …

---

## [Why can't I reindex?](https://discuss.elastic.co/t/why-cant-i-reindex/156264)

<div class="topic-metadata">

**Author:** [@jonaspreisler](https://discuss.elastic.co/u/jonaspreisler)\
**Replies:** 5\
**Last updated:** [November 12, 2018, 9:39pm UTC](https://discuss.elastic.co/t/why-cant-i-reindex/156264 "2018-11-12T21:39:51Z")

</div>

Everytime I run the command "rake searchkick:reindex CLASS=Vehicle" I get this error: Elasticsearch::Transport::Transport::Errors::Forbidden: \[403\] {"error":{"root\_cause":\[{"type":"cluster\_block\_exception","reason":"blo…

---

## [Denormalization through scripting (Painless or Groovy)](https://discuss.elastic.co/t/denormalization-through-scripting-painless-or-groovy/155313)

<div class="topic-metadata">

**Author:** [@SusantaBN](https://discuss.elastic.co/u/SusantaBN)\
**Replies:** 2\
**Last updated:** [November 4, 2018, 8:10pm UTC](https://discuss.elastic.co/t/denormalization-through-scripting-painless-or-groovy/155313 "2018-11-04T20:10:19Z")

</div>

I am looking for ways to de-normalize elastic search indexes. Input Test Data Dept table Location Table Expected Denormalized table One way to de-normalize is to de-normalize the data before ingesting the data…

---

## [Range query has weird results](https://discuss.elastic.co/t/range-query-has-weird-results/149359)

<div class="topic-metadata">

**Author:** [@titani0us](https://discuss.elastic.co/u/titani0us)\
**Replies:** 4\
**Last updated:** [November 12, 2018, 9:29pm UTC](https://discuss.elastic.co/t/range-query-has-weird-results/149359 "2018-11-12T21:29:42Z")

</div>

Observed what I would consider to be "weird" results from a query. I understand that Elasticsearch is an inverted index concept, but I would expect different behavior. Given a set of documents that have calendar dates t…

---

## [Failed to execute bulk item (index) BulkShardRequest](https://discuss.elastic.co/t/failed-to-execute-bulk-item-index-bulkshardrequest/156321)

<div class="topic-metadata">

**Author:** [@Mark\_Rayhshtat](https://discuss.elastic.co/u/Mark_Rayhshtat)\
**Replies:** 2\
**Last updated:** [November 12, 2018, 8:20pm UTC](https://discuss.elastic.co/t/failed-to-execute-bulk-item-index-bulkshardrequest/156321 "2018-11-12T20:20:43Z")

</div>

Hello all, I have error while parsing data to elasticserach. it's my template { "template": ".alertmanager-2\*", "settings": { "number\_of\_shards": 1, "number\_of\_replicas": 1, "index.refresh\_interval": "10s", "ind…

---

## [How to use multiple Composite Aggregations in ElasticSearch?](https://discuss.elastic.co/t/how-to-use-multiple-composite-aggregations-in-elasticsearch/155193)

<div class="topic-metadata">

**Author:** [@kjgarza](https://discuss.elastic.co/u/kjgarza)\
**Replies:** 2\
**Last updated:** [November 12, 2018, 8:02pm UTC](https://discuss.elastic.co/t/how-to-use-multiple-composite-aggregations-in-elasticsearch/155193 "2018-11-12T20:02:45Z")

</div>

I am trying to obtain two composite aggregations in ElasticSearch but the second one is always giving me an empty bucket. GET /resolutions/\_search { "query": { "query\_string": { "query": "\*" } }, "aggs": { …

---

## [Find the distinct values under the nested type](https://discuss.elastic.co/t/find-the-distinct-values-under-the-nested-type/156341)

<div class="topic-metadata">

**Author:** [@deepak643](https://discuss.elastic.co/u/deepak643)\
**Replies:** 0\
**Last updated:** [November 12, 2018, 7:43pm UTC](https://discuss.elastic.co/t/find-the-distinct-values-under-the-nested-type/156341 "2018-11-12T19:43:37Z")

</div>

I am trying to group the distinct values under the nested type. I am having hard time finding the query for this. Any suggestions would be appreciated. My data looks like below: \[ { objectID: "xxx", admin : { …

---

## [Why was datatype:string changed to datatype:text?](https://discuss.elastic.co/t/why-was-datatype-string-changed-to-datatype-text/156329)

<div class="topic-metadata">

**Author:** [@KevinV](https://discuss.elastic.co/u/KevinV)\
**Replies:** 0\
**Last updated:** [November 12, 2018, 5:37pm UTC](https://discuss.elastic.co/t/why-was-datatype-string-changed-to-datatype-text/156329 "2018-11-12T17:37:45Z")

</div>

Why was datatype:string changed to datatype:text ? The new version of Elasticsearch is not very backwards compatible. One of the things that seems to break is that datatype string should now be called datatype text ? W…

---

## [Setting heap size at docker-compose](https://discuss.elastic.co/t/setting-heap-size-at-docker-compose/156326)

<div class="topic-metadata">

**Author:** [@rancor](https://discuss.elastic.co/u/rancor)\
**Replies:** 0\
**Last updated:** [November 12, 2018, 5:12pm UTC](https://discuss.elastic.co/t/setting-heap-size-at-docker-compose/156326 "2018-11-12T17:12:20Z")

</div>

At a docker-compose for an ELK stack, I have set up ES like this: elasticsearch: image: elasticsearch:latest command: elasticsearch environment: - "ES\_JAVA\_OPTS=-Xms3g -Xmx3g" volumes: - ./elasticsearch/…

---

## [Delete an ES container and lost indexes](https://discuss.elastic.co/t/delete-an-es-container-and-lost-indexes/155773)

<div class="topic-metadata">

**Author:** [@rancor](https://discuss.elastic.co/u/rancor)\
**Replies:** 1\
**Last updated:** [November 12, 2018, 4:57pm UTC](https://discuss.elastic.co/t/delete-an-es-container-and-lost-indexes/155773 "2018-11-12T16:57:07Z")

</div>

Hi, I have an ELK with 400GB of logs, had to change some settings and delete old ES container, but when I created the new one, lost my previous logs, the logs are still there though at /elasticsearch/nodes/0 How can I g…

---

## [MSearch API and Index level boosting](https://discuss.elastic.co/t/msearch-api-and-index-level-boosting/156323)

<div class="topic-metadata">

**Author:** [@PhilCoggins](https://discuss.elastic.co/u/PhilCoggins)\
**Replies:** 1\
**Last updated:** [November 12, 2018, 4:45pm UTC](https://discuss.elastic.co/t/msearch-api-and-index-level-boosting/156323 "2018-11-12T16:45:41Z")

</div>

I am using msearch API to control filtering and query across different indices to return a global result set. Is there a way I can boost the score of the results of one search request over another? I have tried to use th…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1485)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1487)
