# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1489 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1490 --- ## [\_all field matching fewer results](https://discuss.elastic.co/t/all-field-matching-fewer-results/155587)
**Author:** [@luka](https://discuss.elastic.co/u/luka)\ **Replies:** 5\ **Last updated:** [November 9, 2018, 3:19pm UTC](https://discuss.elastic.co/t/all-field-matching-fewer-results/155587 "2018-11-09T15:19:15Z")
Hi! I have a request of this form: POST http://localhost:9200/\_search { "query": { "match": { "\_all": { "query": "foo bar", "operator": "and" } } }, "size": 20 } and it returns fewer hits than this one: PO… --- ## [Distinct count with filter](https://discuss.elastic.co/t/distinct-count-with-filter/155795)
**Author:** [@winder](https://discuss.elastic.co/u/winder)\ **Replies:** 3\ **Last updated:** [November 9, 2018, 3:05pm UTC](https://discuss.elastic.co/t/distinct-count-with-filter/155795 "2018-11-09T15:05:04Z")
Hoping to get some guidance here. I'm trying to correlate session-id's from two different events, a heartbeat sent every 10 minutes and a disconnect which could be sent any time. The goal is to get the number of active … --- ## [Elasticsearch not adding cluster\_name to datafiles location (path.data)](https://discuss.elastic.co/t/elasticsearch-not-adding-cluster-name-to-datafiles-location-path-data/155992)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 5\ **Last updated:** [November 9, 2018, 2:23pm UTC](https://discuss.elastic.co/t/elasticsearch-not-adding-cluster-name-to-datafiles-location-path-data/155992 "2018-11-09T14:23:45Z")
Hi Elasticsearch 6.4.3 I did not notice this before, but why is that, if I have in elasticsearch.yml file: path.data: "/elastic/data/" Then my files are created under: \<\\>/nodes/0/... In 1.7.2, I also… --- ## [Ingest Node Problems](https://discuss.elastic.co/t/ingest-node-problems/155395)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 3\ **Last updated:** [November 9, 2018, 2:09pm UTC](https://discuss.elastic.co/t/ingest-node-problems/155395 "2018-11-09T14:09:43Z")
Hi, I've just enabled an ingest node pipeline for a subset of logs ingesting to one of our 5.6.3 clusters. The pipeline looks like this: { "test" : { "description" : "Test Logging Pipeline", "processors" : \[ … --- ## [Query phrase order](https://discuss.elastic.co/t/query-phrase-order/156061)
**Author:** [@marcelothebuilder](https://discuss.elastic.co/u/marcelothebuilder)\ **Replies:** 0\ **Last updated:** [November 9, 2018, 2:00pm UTC](https://discuss.elastic.co/t/query-phrase-order/156061 "2018-11-09T14:00:58Z")
I have a specific query where I will need to find phrases before others considering a start and end field representing seconds in a timeline. The index mapping: { "thetext": { "mappings": { "thetext": { "properties… --- ## [ElasticSearch all Search Threads are waiting on take() method](https://discuss.elastic.co/t/elasticsearch-all-search-threads-are-waiting-on-take-method/155918)
**Author:** [@Sekhar1](https://discuss.elastic.co/u/Sekhar1)\ **Replies:** 8\ **Last updated:** [November 9, 2018, 1:44pm UTC](https://discuss.elastic.co/t/elasticsearch-all-search-threads-are-waiting-on-take-method/155918 "2018-11-09T13:44:38Z")
Hi Team, ElasticSearch : 6.0.0 Operating System : CentOS 7 JVM arguments \[-Xms4g, -Xmx4g, -XX:MaxMetaspaceSize=512m, -XX:+UseParNewGC, -XX:NewSize=128m, -XX:MaxNewSize=128m, -XX:SurvivorRatio=1024, -XX:MaxGCPauseMilli… --- ## [Elasticsearch cloud NoNodesAvailableException](https://discuss.elastic.co/t/elasticsearch-cloud-nonodesavailableexception/156025)
**Author:** [@kaz](https://discuss.elastic.co/u/kaz)\ **Replies:** 1\ **Last updated:** [November 9, 2018, 1:41pm UTC](https://discuss.elastic.co/t/elasticsearch-cloud-nonodesavailableexception/156025 "2018-11-09T13:41:44Z")
Hello, In the past few weeks I've been busy integrating Elasticsearch into an existing website. Due to PHP version limitations I have to use Elastic 5.6. I'm using the PHP library to connect to Elastic and send requests… --- ## [Ngram and Huspell analyzers in common index](https://discuss.elastic.co/t/ngram-and-huspell-analyzers-in-common-index/156051)
**Author:** [@Yuri\_Shekhovtsov](https://discuss.elastic.co/u/Yuri_Shekhovtsov)\ **Replies:** 0\ **Last updated:** [November 9, 2018, 12:48pm UTC](https://discuss.elastic.co/t/ngram-and-huspell-analyzers-in-common-index/156051 "2018-11-09T12:48:00Z")
I want to combine full text search with autocomplete in a search field. I use a hunspell token filter in the main analyzer for searching. But I want to add ngram in addition. When I type queries in a search field letter… --- ## [ElasticSearch All Caches(Node query cache,Shard request cache and Field data cache) are empty](https://discuss.elastic.co/t/elasticsearch-all-caches-node-query-cache-shard-request-cache-and-field-data-cache-are-empty/156052)
**Author:** [@Sekhar1](https://discuss.elastic.co/u/Sekhar1)\ **Replies:** 0\ **Last updated:** [November 9, 2018, 12:50pm UTC](https://discuss.elastic.co/t/elasticsearch-all-caches-node-query-cache-shard-request-cache-and-field-data-cache-are-empty/156052 "2018-11-09T12:50:31Z")
Hi, my elastic search all caches are empty.Based on the elastic search documentation Node Query Cache,Shard request Cache, Field data Cache value should present when we are search operation but all value are zero.I use… --- ## [无法get到索引](https://discuss.elastic.co/t/get/155664)
**Author:** [@liutao](https://discuss.elastic.co/u/liutao)\ **Replies:** 0\ **Last updated:** [November 7, 2018, 6:57am UTC](https://discuss.elastic.co/t/get/155664 "2018-11-07T06:57:34Z")
我的logstash配置文件如下: input { beats { port =\> 5044 } } filter { grok { patterns\_dir =\> \["/elk/logstash/patterns"\] match =\> { "message" =\> "%{TOMCAT\_SERVICE\_LOG}" } } date { match =\> \["Tstamp", "yyyy-MM-dd HH:mm… --- ## [Setting index.codec to best\_compression affects ElasticSearch's or Graylog's performance?](https://discuss.elastic.co/t/setting-index-codec-to-best-compression-affects-elasticsearchs-or-graylogs-performance/156046)
**Author:** [@Santhosh\_Sabarish\_KM](https://discuss.elastic.co/u/Santhosh_Sabarish_KM)\ **Replies:** 1\ **Last updated:** [November 9, 2018, 12:44pm UTC](https://discuss.elastic.co/t/setting-index-codec-to-best-compression-affects-elasticsearchs-or-graylogs-performance/156046 "2018-11-09T12:44:12Z")
We are using ElasticSearch, Graylog, and MongoDB for storing the application logs. The disk space utilization is growing day by day, although we use a retention mechanism we need to reduce it further. Will compressing th… --- ## [When to use "file-based scripts" in elasticsearch?](https://discuss.elastic.co/t/when-to-use-file-based-scripts-in-elasticsearch/155915)
**Author:** [@elhamroshan](https://discuss.elastic.co/u/elhamroshan)\ **Replies:** 1\ **Last updated:** [November 9, 2018, 11:14am UTC](https://discuss.elastic.co/t/when-to-use-file-based-scripts-in-elasticsearch/155915 "2018-11-09T11:14:54Z")
Hi, I need to check if fieldX exists in each document in the Index. Then for those which it doesn't, I would like to get the value of fieldY of the same document, run a python function on that field and store the result… --- ## [Aggregation on specific values of nested fields per document](https://discuss.elastic.co/t/aggregation-on-specific-values-of-nested-fields-per-document/156031)
**Author:** [@jaip.1631](https://discuss.elastic.co/u/jaip.1631)\ **Replies:** 0\ **Last updated:** [November 9, 2018, 11:08am UTC](https://discuss.elastic.co/t/aggregation-on-specific-values-of-nested-fields-per-document/156031 "2018-11-09T11:08:31Z")
Is there some way to get stats aggergation on nested fields such that I only consider maximum of specific values of nested fields for the stats evaluation. Mapping: { "mappings": { "doc": { "pro… --- ## [Ollector \[node\_stats\] timed out when collecting data](https://discuss.elastic.co/t/ollector-node-stats-timed-out-when-collecting-data/156018)
**Author:** [@Billz1026](https://discuss.elastic.co/u/Billz1026)\ **Replies:** 0\ **Last updated:** [November 9, 2018, 10:01am UTC](https://discuss.elastic.co/t/ollector-node-stats-timed-out-when-collecting-data/156018 "2018-11-09T10:01:19Z")
Hi, I have implemented ELK stack in a single server. But I have noticed that server becomes unresponsive after two three days. And when I checked the elasticsearch.log and gc.log.0.current, i could find an error every… --- ## [Send one email for each hits in last 5 mins](https://discuss.elastic.co/t/send-one-email-for-each-hits-in-last-5-mins/154994)
**Author:** [@Lakshman](https://discuss.elastic.co/u/Lakshman)\ **Replies:** 2\ **Last updated:** [November 9, 2018, 9:45am UTC](https://discuss.elastic.co/t/send-one-email-for-each-hits-in-last-5-mins/154994 "2018-11-09T09:45:59Z")
I manage to send all the payload hits in a single mail. But i need one payload to have one email. Any option like array thru the payload and create email actions based on the payload hits --- ## [How can I save the results of the DSL query directly to another index?](https://discuss.elastic.co/t/how-can-i-save-the-results-of-the-dsl-query-directly-to-another-index/156008)
**Author:** [@fookfook](https://discuss.elastic.co/u/fookfook)\ **Replies:** 3\ **Last updated:** [November 9, 2018, 9:15am UTC](https://discuss.elastic.co/t/how-can-i-save-the-results-of-the-dsl-query-directly-to-another-index/156008 "2018-11-09T09:15:14Z")
It's like executing the following SQL statement: INSERT INTO ANOTHER\_TABLE SELECT \* FROM ONE\_TABLE WHERE age BETWEEN 16 AND 45; Thank you very much for your answer:) --- ## [Reindex with authorization on remote](https://discuss.elastic.co/t/reindex-with-authorization-on-remote/155070)
**Author:** [@shradhatx](https://discuss.elastic.co/u/shradhatx)\ **Replies:** 1\ **Last updated:** [November 9, 2018, 9:09am UTC](https://discuss.elastic.co/t/reindex-with-authorization-on-remote/155070 "2018-11-09T09:09:00Z")
I am trying to test ES upgrade from 2.2 to 6.4 on windows. The remote requires NTLM authorization. I am passing username and password but looks like it takes basic auth. In ES log I am seeing "NEGOTIATE authentication\_e… --- ## [Elasticsearch-Monitor multiple clusters from single kibana](https://discuss.elastic.co/t/elasticsearch-monitor-multiple-clusters-from-single-kibana/155997)
**Author:** [@muthucse](https://discuss.elastic.co/u/muthucse)\ **Replies:** 1\ **Last updated:** [November 9, 2018, 8:30am UTC](https://discuss.elastic.co/t/elasticsearch-monitor-multiple-clusters-from-single-kibana/155997 "2018-11-09T08:30:42Z")
With 6.2 Elastic version how to have single kibana instance to monitor multiple elastic clusters. Cluster-1: Production Application cluster. Cluster-2: Log cluster Need to monitor both the cluster's using single kiban… --- ## [What is the proper settings and mapping for multiple languages](https://discuss.elastic.co/t/what-is-the-proper-settings-and-mapping-for-multiple-languages/156000)
**Author:** [@3ms1](https://discuss.elastic.co/u/3ms1)\ **Replies:** 0\ **Last updated:** [November 9, 2018, 8:16am UTC](https://discuss.elastic.co/t/what-is-the-proper-settings-and-mapping-for-multiple-languages/156000 "2018-11-09T08:16:02Z")
Hello, I am looking for best possible to way to create an index where fields will have content in multiple languages. Some part of this actually is copied from the documentation and I have already tested it, which answ… --- ## [Converting Mysql query to lucene query](https://discuss.elastic.co/t/converting-mysql-query-to-lucene-query/155996)
**Author:** [@emma1](https://discuss.elastic.co/u/emma1)\ **Replies:** 0\ **Last updated:** [November 9, 2018, 7:43am UTC](https://discuss.elastic.co/t/converting-mysql-query-to-lucene-query/155996 "2018-11-09T07:43:50Z")
Hi I have some queries in mysql which need to be incorporated in Kibana. I Imported table data from MySql to Elasticsearch select a.r\_date, a.failed\_aborted\_job, b.expired\_trigger\_job from (select DATE(currenttime) as… --- ## [Sorting issue](https://discuss.elastic.co/t/sorting-issue/155368)
**Author:** [@vigilrapheal](https://discuss.elastic.co/u/vigilrapheal)\ **Replies:** 0\ **Last updated:** [November 5, 2018, 9:00am UTC](https://discuss.elastic.co/t/sorting-issue/155368 "2018-11-05T09:00:49Z")
I have a requirement where in I would need to sort the parent bucket ('d1' here) based on the values calculated in an innermost bucket ('percentage' key within udate\[0\]). Please find my Elasticsearch query below. Thank y… --- ## [About X-Pack license](https://discuss.elastic.co/t/about-x-pack-license/155987)
**Author:** [@MaralErdene\_Tumursuh](https://discuss.elastic.co/u/MaralErdene_Tumursuh)\ **Replies:** 1\ **Last updated:** [November 9, 2018, 6:40am UTC](https://discuss.elastic.co/t/about-x-pack-license/155987 "2018-11-09T06:40:56Z")
Hello , How can i buy elastic X-Pack license? How much is Platinum license? Is it life time or expire yearly basis? --- ## [Need Ngram\_analyzer settings](https://discuss.elastic.co/t/need-ngram-analyzer-settings/155712)
**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\ **Replies:** 1\ **Last updated:** [November 9, 2018, 5:36am UTC](https://discuss.elastic.co/t/need-ngram-analyzer-settings/155712 "2018-11-09T05:36:06Z")
Hi, Could someone help me on the below issue. I have below field in my index, "postalcode" : 123 456 below mapping for the field, "postalCode": { "type": "text", "fields": { "keyword": { "type": "keyword", "… --- ## [How to authenticate?](https://discuss.elastic.co/t/how-to-authenticate/155875)
**Author:** [@jonaspreisler](https://discuss.elastic.co/u/jonaspreisler)\ **Replies:** 3\ **Last updated:** [November 9, 2018, 5:33am UTC](https://discuss.elastic.co/t/how-to-authenticate/155875 "2018-11-09T05:33:22Z")
What's going on with my Elasticsearch in my app? My app is RoR and deployed to Heroku. I get this error: Faraday::ConnectionFailed (Failed to open TCP connection to localhost:9200 (Connection refused - connect(2) for … --- ## [Elasticsearch cannot restore existing snapshot. Blob not found](https://discuss.elastic.co/t/elasticsearch-cannot-restore-existing-snapshot-blob-not-found/155976)
**Author:** [@anishm](https://discuss.elastic.co/u/anishm)\ **Replies:** 0\ **Last updated:** [November 9, 2018, 5:19am UTC](https://discuss.elastic.co/t/elasticsearch-cannot-restore-existing-snapshot-blob-not-found/155976 "2018-11-09T05:19:05Z")
Elasticsearch version: 6.3.2 I was trying to restore an old snapshot (taken in January 2018) of Elasticsearch 5.2.2 from a read only S3 repository. The necessary permissions in the IAM role for the instance are setup. … --- ## [Bulk Queue Doesn't Process?](https://discuss.elastic.co/t/bulk-queue-doesnt-process/155969)
**Author:** [@depthless](https://discuss.elastic.co/u/depthless)\ **Replies:** 0\ **Last updated:** [November 9, 2018, 1:48am UTC](https://discuss.elastic.co/t/bulk-queue-doesnt-process/155969 "2018-11-09T01:48:14Z")
When I run /\_nodes/stats I see: "refresh": { "threads": 1, "queue": 89495, "active": 1, "rejected": 0, "largest": 1, … --- ## [Cluster node discovery failed](https://discuss.elastic.co/t/cluster-node-discovery-failed/155653)
**Author:** [@wujiaxin159](https://discuss.elastic.co/u/wujiaxin159)\ **Replies:** 4\ **Last updated:** [November 9, 2018, 2:05am UTC](https://discuss.elastic.co/t/cluster-node-discovery-failed/155653 "2018-11-09T02:05:27Z")
elk version: 6.3.0 Using docker container Server IP: 9.77.10.27 --\> Docker IP: 172.17.0.2 Server IP: 9.77.10.28 --\> Docker IP: 172.17.0.3 9.77.10.27 config cluster.name: elk node.name: node-1 network.host: 0… --- ## [Custom X-pack monitoring dashboards](https://discuss.elastic.co/t/custom-x-pack-monitoring-dashboards/155961)
**Author:** [@rajisankar](https://discuss.elastic.co/u/rajisankar)\ **Replies:** 0\ **Last updated:** [November 8, 2018, 10:17pm UTC](https://discuss.elastic.co/t/custom-x-pack-monitoring-dashboards/155961 "2018-11-08T22:17:36Z")
Hi All, I am running x-pack to collect and used it for monitoring my cluster. Since the monitoring dashboards do not provide disk i/o stats et al, I wanted to create a custom dashboard using the visualizations from Moni… --- ## [Can not find import org.elasticsearch.transport.client.PreBuiltTransportClient;](https://discuss.elastic.co/t/can-not-find-import-org-elasticsearch-transport-client-prebuilttransportclient/155859)
**Author:** [@faddy](https://discuss.elastic.co/u/faddy)\ **Replies:** 4\ **Last updated:** [November 9, 2018, 12:37am UTC](https://discuss.elastic.co/t/can-not-find-import-org-elasticsearch-transport-client-prebuilttransportclient/155859 "2018-11-09T00:37:15Z")
Hi, please see the picture, I used mvn to download all the .jars, but when I import below, it can't find the depency, could you please help. Many Thanks. import org.elasticsearch.transport.client.PreBuiltTransportClien… --- ## [Discovery.zen.ping.unicast.hosts in elasticsearch.yml](https://discuss.elastic.co/t/discovery-zen-ping-unicast-hosts-in-elasticsearch-yml/155951)
**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\ **Replies:** 6\ **Last updated:** [November 8, 2018, 9:02pm UTC](https://discuss.elastic.co/t/discovery-zen-ping-unicast-hosts-in-elasticsearch-yml/155951 "2018-11-08T21:02:07Z")
Hi, I have totally 4 nodes running under my Azure scaleset, all 4 machines can be talk to each other. it means pingable each other and telnet using port 22 and 9200 each other. installed elasticsearch 6.x on all the 4… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1488) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1490)