# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1502 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1503 --- ## [Shh login attempt](https://discuss.elastic.co/t/shh-login-attempt/152479)
**Author:** [@prasuprasobh](https://discuss.elastic.co/u/prasuprasobh)\ **Replies:** 3\ **Last updated:** [October 29, 2018, 12:36pm UTC](https://discuss.elastic.co/t/shh-login-attempt/152479 "2018-10-29T12:36:51Z")
Hii... I have configured the elatsicsearch and logs are shipping from the client using filebeat with logstash. Need help to configure ssh login attempts failed in the dashboard --- ## [Manipulating scope in an elasticsearch aggregation?](https://discuss.elastic.co/t/manipulating-scope-in-an-elasticsearch-aggregation/153616)
**Author:** [@Elizabeth\_Haubert](https://discuss.elastic.co/u/Elizabeth_Haubert)\ **Replies:** 1\ **Last updated:** [October 29, 2018, 11:54am UTC](https://discuss.elastic.co/t/manipulating-scope-in-an-elasticsearch-aggregation/153616 "2018-10-29T11:54:22Z")
Hello, Running into something with the implementation of a multi-select check box and aggregations. The use case is: User makes a text-based query UX has a list of categories, of which the user may select one or mor… --- ## [Range query on the result of Sum aggregation](https://discuss.elastic.co/t/range-query-on-the-result-of-sum-aggregation/153731)
**Author:** [@Nikhil\_Nambiar](https://discuss.elastic.co/u/Nikhil_Nambiar)\ **Replies:** 1\ **Last updated:** [October 29, 2018, 11:48am UTC](https://discuss.elastic.co/t/range-query-on-the-result-of-sum-aggregation/153731 "2018-10-29T11:48:51Z")
I am trying to apply range on the result that I got from sum aggregation. Below query helps me to find sum of amount of individual phone { "size": 0, "aggs": { "group\_by\_phone": { "terms": { "fiel… --- ## [Very slow insertions in nested (unable reindexing)](https://discuss.elastic.co/t/very-slow-insertions-in-nested-unable-reindexing/153931)
**Author:** [@magorbe](https://discuss.elastic.co/u/magorbe)\ **Replies:** 1\ **Last updated:** [October 29, 2018, 11:47am UTC](https://discuss.elastic.co/t/very-slow-insertions-in-nested-unable-reindexing/153931 "2018-10-29T11:47:42Z")
Hello, I have the next mapping : { "my\_index": { "aliases": {}, "mappings": { "a\_c": { "properties": { "id": { "type": "string"… --- ## [Global aggregations on nested documents](https://discuss.elastic.co/t/global-aggregations-on-nested-documents/153989)
**Author:** [@Pierre-Loan\_Janczak](https://discuss.elastic.co/u/Pierre-Loan_Janczak)\ **Replies:** 1\ **Last updated:** [October 29, 2018, 11:41am UTC](https://discuss.elastic.co/t/global-aggregations-on-nested-documents/153989 "2018-10-29T11:41:19Z")
Hi, I was wondering if it is possible to have a global aggregation based on a nested property within a document. I stumbled upon this in the elastic documentation :frowning:https://www.elastic.co/guide/en/elasticsearch… --- ## [Is it possible to extract subset of bucket1, where bucket1 has the same value as bucket2 on different fields?](https://discuss.elastic.co/t/is-it-possible-to-extract-subset-of-bucket1-where-bucket1-has-the-same-value-as-bucket2-on-different-fields/154285)
**Author:** [@helloWorldJS](https://discuss.elastic.co/u/helloWorldJS)\ **Replies:** 1\ **Last updated:** [October 29, 2018, 11:36am UTC](https://discuss.elastic.co/t/is-it-possible-to-extract-subset-of-bucket1-where-bucket1-has-the-same-value-as-bucket2-on-different-fields/154285 "2018-10-29T11:36:52Z")
hey folks, I've tried to summarize my idea in the title. My thought was to get a subset of a bucket: for example: there ar two buckets: in both of the buckets i have a set of documents. bucket1 is complete. Now iwan… --- ## [Output n-gram frequency distributions in Elasticsearch?](https://discuss.elastic.co/t/output-n-gram-frequency-distributions-in-elasticsearch/154302)
**Author:** [@hacker\_21](https://discuss.elastic.co/u/hacker_21)\ **Replies:** 1\ **Last updated:** [October 29, 2018, 11:33am UTC](https://discuss.elastic.co/t/output-n-gram-frequency-distributions-in-elasticsearch/154302 "2018-10-29T11:33:58Z")
Say I have a field called "webpages" with an array of webpage plain-text content. Through Elasticsearch, is there a way I can have it output the top 1 million 6 word long n-gram phrases based on term frequency? Maybe t… --- ## [When will global ordinal be rebuilt in ES 5.5 or later?](https://discuss.elastic.co/t/when-will-global-ordinal-be-rebuilt-in-es-5-5-or-later/153092)
**Author:** [@bruce88](https://discuss.elastic.co/u/bruce88)\ **Replies:** 1\ **Last updated:** [October 29, 2018, 11:15am UTC](https://discuss.elastic.co/t/when-will-global-ordinal-be-rebuilt-in-es-5-5-or-later/153092 "2018-10-29T11:15:51Z")
I'm confused by the timing when global ordinal is rebuilt. According to Elasticsearch definitive guide, it's rebuilt when a new aggregation query comes after a refresh/delete/merge. But as global ordinal will be used by… --- ## [Elastic search is displaying correct result only after a space](https://discuss.elastic.co/t/elastic-search-is-displaying-correct-result-only-after-a-space/153160)
**Author:** [@Yash\_Sharma](https://discuss.elastic.co/u/Yash_Sharma)\ **Replies:** 1\ **Last updated:** [October 29, 2018, 11:11am UTC](https://discuss.elastic.co/t/elastic-search-is-displaying-correct-result-only-after-a-space/153160 "2018-10-29T11:11:51Z")
I have created an index using the following mapping. PUT \_template/template\_1 { "index\_patterns": \[ "ubq-\*" \], "settings": { "index": { "analysis": { "analyzer": { … --- ## [Aggregate over date\_histogram aggregation to obtain avg, min and max](https://discuss.elastic.co/t/aggregate-over-date-histogram-aggregation-to-obtain-avg-min-and-max/153306)
**Author:** [@enkil2003](https://discuss.elastic.co/u/enkil2003)\ **Replies:** 1\ **Last updated:** [October 29, 2018, 11:08am UTC](https://discuss.elastic.co/t/aggregate-over-date-histogram-aggregation-to-obtain-avg-min-and-max/153306 "2018-10-29T11:08:38Z")
I have been cracking my head open for a couple of days trying to translate this splunk query to ElasticSearch, which seems simple by the way. This is what my splunk query does, which looks simple enough, notice the "by"… --- ## [Decrypt files names nodes\\0\\indices](https://discuss.elastic.co/t/decrypt-files-names-nodes-0-indices/154423)
**Author:** [@jugurtha](https://discuss.elastic.co/u/jugurtha)\ **Replies:** 3\ **Last updated:** [October 29, 2018, 11:03am UTC](https://discuss.elastic.co/t/decrypt-files-names-nodes-0-indices/154423 "2018-10-29T11:03:59Z")
Hi I installed the version number elasticsearch-5.5.2 I have now an encrypted files (screne shot below) Please how i can decrypte files? --- ## [How to pull data from elasticsearch to servicenow using watcher alerting](https://discuss.elastic.co/t/how-to-pull-data-from-elasticsearch-to-servicenow-using-watcher-alerting/154411)
**Author:** [@bab](https://discuss.elastic.co/u/bab)\ **Replies:** 1\ **Last updated:** [October 29, 2018, 10:01am UTC](https://discuss.elastic.co/t/how-to-pull-data-from-elasticsearch-to-servicenow-using-watcher-alerting/154411 "2018-10-29T10:01:44Z")
how to pull data from elasticsearch to servicenow using watcher, i have some logs Data in my index in ES and i want to make a watcher alerting which send alert to my company servicenow system, what is the Data, that i ne… --- ## [Refresh interval related query](https://discuss.elastic.co/t/refresh-interval-related-query/151048)
**Author:** [@ShiniIn](https://discuss.elastic.co/u/ShiniIn)\ **Replies:** 2\ **Last updated:** [October 29, 2018, 10:00am UTC](https://discuss.elastic.co/t/refresh-interval-related-query/151048 "2018-10-29T10:00:36Z")
I am newbie in elastic search so this may sound trivial but i want to know more about the refresh\_interval as it seems to affect vertex retrieval in ES. Interpretation 1: refresh\_interval is set to 1s(Default settings)… --- ## [Those wildcard searches... or is it me?](https://discuss.elastic.co/t/those-wildcard-searches-or-is-it-me/152055)
**Author:** [@waltus](https://discuss.elastic.co/u/waltus)\ **Replies:** 6\ **Last updated:** [October 29, 2018, 9:50am UTC](https://discuss.elastic.co/t/those-wildcard-searches-or-is-it-me/152055 "2018-10-29T09:50:33Z")
Hi, guys my third time setting up all the good things: Elasticsearch, Logstash, Kibana... Logs coming from Filebeat. Kibana is showing me all the relevant Logs. I also fixed the timestamp situation. .. Everything look… --- ## [Exact search results not shown at the top](https://discuss.elastic.co/t/exact-search-results-not-shown-at-the-top/154211)
**Author:** [@Veenudheepithi\_Muthu](https://discuss.elastic.co/u/Veenudheepithi_Muthu)\ **Replies:** 3\ **Last updated:** [October 29, 2018, 9:48am UTC](https://discuss.elastic.co/t/exact-search-results-not-shown-at-the-top/154211 "2018-10-29T09:48:08Z")
I am using Elasticsearch version 5.2. When I try to query a combination of two words that are stored in two different attributes, I get the search result but the record with the exact search words are not displayed at th… --- ## [Shard relocation keeps restarting?](https://discuss.elastic.co/t/shard-relocation-keeps-restarting/154226)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 3\ **Last updated:** [October 29, 2018, 9:10am UTC](https://discuss.elastic.co/t/shard-relocation-keeps-restarting/154226 "2018-10-29T09:10:03Z")
Three nodes, 1,2,3, replacing one of them, so added 4, and told the system not to allocate anything to 3. What it's now trying to do is move two shards off 3, these are non-trivial in size (around 5Gbyte) and the link is… --- ## [Date histogram aggregation - Sum of field](https://discuss.elastic.co/t/date-histogram-aggregation-sum-of-field/154397)
**Author:** [@Khanh\_Vo](https://discuss.elastic.co/u/Khanh_Vo)\ **Replies:** 4\ **Last updated:** [October 29, 2018, 8:56am UTC](https://discuss.elastic.co/t/date-histogram-aggregation-sum-of-field/154397 "2018-10-29T08:56:16Z")
Hi guys, I have a problem when using Date histogram aggregation in Kibana: My index: \[logs\]-YYYY.MM.DD When I search from logs-2018.10.21 to logs-2018.10.23, I have a result: When I search from logs-2018.10.21 to l… --- ## [How to I migrate my existing postgres data to elasticsearch and also keep it in sync?](https://discuss.elastic.co/t/how-to-i-migrate-my-existing-postgres-data-to-elasticsearch-and-also-keep-it-in-sync/154314)
**Author:** [@patrick007](https://discuss.elastic.co/u/patrick007)\ **Replies:** 9\ **Last updated:** [October 29, 2018, 7:59am UTC](https://discuss.elastic.co/t/how-to-i-migrate-my-existing-postgres-data-to-elasticsearch-and-also-keep-it-in-sync/154314 "2018-10-29T07:59:10Z")
I want to migrate my existing postgres db data to elasticsearch. And after the migration also want to update the elasticsearch with new update to the database --- ## [Arrays of objects](https://discuss.elastic.co/t/arrays-of-objects/154388)
**Author:** [@amit.patra](https://discuss.elastic.co/u/amit.patra)\ **Replies:** 3\ **Last updated:** [October 29, 2018, 7:46am UTC](https://discuss.elastic.co/t/arrays-of-objects/154388 "2018-10-29T07:46:22Z")
Hi, My arrays of objects are getting unknown type in kibana. http": { "http\_headers": \[ { "host": "row.bc.yahoo.com", "user\_agent": "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.16) Gecko/20110319 Firef… --- ## [DR setup for elasticsearch](https://discuss.elastic.co/t/dr-setup-for-elasticsearch/153850)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [October 29, 2018, 6:11am UTC](https://discuss.elastic.co/t/dr-setup-for-elasticsearch/153850 "2018-10-29T06:11:33Z")
Looking for the different options for DR setup for elasticsearch. Any blogs/videos on this topic will be helpful. --- ## [Elastic App Search](https://discuss.elastic.co/t/elastic-app-search/153098)
**Author:** [@muthualagappan](https://discuss.elastic.co/u/muthualagappan)\ **Replies:** 4\ **Last updated:** [October 29, 2018, 3:44am UTC](https://discuss.elastic.co/t/elastic-app-search/153098 "2018-10-29T03:44:49Z")
I have recently heard about “Elastic App Search”. Is that an optimized version of elastic search which can be used inside our application to do the Search? Can I run that in Desktop and Cloud? --- ## [Calling Elasticsearch/X-Pack API from node js application](https://discuss.elastic.co/t/calling-elasticsearch-x-pack-api-from-node-js-application/154343)
**Author:** [@vigneshr35](https://discuss.elastic.co/u/vigneshr35)\ **Replies:** 1\ **Last updated:** [October 29, 2018, 1:37am UTC](https://discuss.elastic.co/t/calling-elasticsearch-x-pack-api-from-node-js-application/154343 "2018-10-29T01:37:25Z")
Hi Team, I have developed a node js service that will call Elasticsearch APIs to perform various operations like creating roles, creating users, establish user-role mapping etc. The Elasticsearch instance has been confi… --- ## [Curl: (7) Failed to connect to localhost port 9200: Connection refused](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-localhost-port-9200-connection-refused/154256)
**Author:** [@gentitope](https://discuss.elastic.co/u/gentitope)\ **Replies:** 5\ **Last updated:** [October 29, 2018, 1:28am UTC](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-localhost-port-9200-connection-refused/154256 "2018-10-29T01:28:31Z")
Someone help! $ curl -XGET http://localhost:9200/\_cluster/health?pretty curl: (7) Failed to connect to localhost port 9200: Connection refused Logs: \[2018-10-26T21:16:10,548\]\[DEBUG\]\[o.e.t.ThreadPool \] \[ops\_es… --- ## [Disabling xpack User Authentication](https://discuss.elastic.co/t/disabling-xpack-user-authentication/154266)
**Author:** [@kekcoke](https://discuss.elastic.co/u/kekcoke)\ **Replies:** 1\ **Last updated:** [October 29, 2018, 1:23am UTC](https://discuss.elastic.co/t/disabling-xpack-user-authentication/154266 "2018-10-29T01:23:43Z")
I got the access token to extend my trial license (basic), which I run on Kibana. I switched to a different browser to open Elastisearch and it asked authentication. Still looking where to find the default credentials. I… --- ## [Unable Connect Elastic From Java Rest Client using Certificate](https://discuss.elastic.co/t/unable-connect-elastic-from-java-rest-client-using-certificate/154107)
**Author:** [@prashantgupta048](https://discuss.elastic.co/u/prashantgupta048)\ **Replies:** 1\ **Last updated:** [October 29, 2018, 1:13am UTC](https://discuss.elastic.co/t/unable-connect-elastic-from-java-rest-client-using-certificate/154107 "2018-10-29T01:13:23Z")
Hello Elasticsearch Team, I am trying to connect the Elastic search 5.6 using Java rest client. I want to connect it using certificate not by using Username/Password below is the code I am Using can someone please help … --- ## [Is there an elasticsearch-oss (RPM) package?](https://discuss.elastic.co/t/is-there-an-elasticsearch-oss-rpm-package/153263)
**Author:** [@nick-george](https://discuss.elastic.co/u/nick-george)\ **Replies:** 5\ **Last updated:** [October 28, 2018, 10:45pm UTC](https://discuss.elastic.co/t/is-there-an-elasticsearch-oss-rpm-package/153263 "2018-10-28T22:45:27Z")
Hi, I have setup Elasticsearch repos according to https://www.elastic.co/guide/en/elasticsearch/reference/current/rpm.html#rpm-repo. I have also had a look at the main download pages on the Elasticsearch website. I do… --- ## [How to write a range query on substring of a field?](https://discuss.elastic.co/t/how-to-write-a-range-query-on-substring-of-a-field/154345)
**Author:** [@ali\_houshyaripour](https://discuss.elastic.co/u/ali_houshyaripour)\ **Replies:** 1\ **Last updated:** [October 28, 2018, 4:39pm UTC](https://discuss.elastic.co/t/how-to-write-a-range-query-on-substring-of-a-field/154345 "2018-10-28T16:39:59Z")
Hi, I have an index with name user that have two date field with names created\_at and expired\_at and format yyyy-MM-dd HH:mm:ss. Now I want to write a range query using them that check only time substring of them, not d… --- ## [Reindex failed](https://discuss.elastic.co/t/reindex-failed/154336)
**Author:** [@Amita](https://discuss.elastic.co/u/Amita)\ **Replies:** 2\ **Last updated:** [October 28, 2018, 3:46pm UTC](https://discuss.elastic.co/t/reindex-failed/154336 "2018-10-28T15:46:36Z")
Hi, I tried to run a reindex on a big index, but it failed with the reason of - node is not available. I seperated the reindex to several reindexes with prefix query on spesific field, so it will go faster. I can see … --- ## [Single Index vs. Multiple Indices](https://discuss.elastic.co/t/single-index-vs-multiple-indices/154141)
**Author:** [@maryam\_abdullah](https://discuss.elastic.co/u/maryam_abdullah)\ **Replies:** 8\ **Last updated:** [October 28, 2018, 2:57pm UTC](https://discuss.elastic.co/t/single-index-vs-multiple-indices/154141 "2018-10-28T14:57:19Z")
Hello, What is better to use, a single index or multiple ones? Which of the two gives a better performance in terms of searching? Knowing that if I stored data in multiple indices, I will search only in one of these i… --- ## [Get index of item in results set](https://discuss.elastic.co/t/get-index-of-item-in-results-set/151660)
**Author:** [@ambrt](https://discuss.elastic.co/u/ambrt)\ **Replies:** 8\ **Last updated:** [October 28, 2018, 12:22pm UTC](https://discuss.elastic.co/t/get-index-of-item-in-results-set/151660 "2018-10-28T12:22:12Z")
Hi, Is there a way to get index of item in results set? Lets say i have 1000 results of query match\_all, sorted by date created. How to know where is (index of) one specific item in those 1000 results? [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1501) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1503)