# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1509

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1510

---

## [Help with aggregation needed](https://discuss.elastic.co/t/help-with-aggregation-needed/152066)

<div class="topic-metadata">

**Author:** [@emil.mirzayev](https://discuss.elastic.co/u/emil.mirzayev)\
**Replies:** 2\
**Last updated:** [October 23, 2018, 7:14am UTC](https://discuss.elastic.co/t/help-with-aggregation-needed/152066 "2018-10-23T07:14:49Z")

</div>

Hi there! I have a dataset of different devices and their consumption values (absolute) which are increasing by the time. Every device is connected to a group (there are 3 groups overall). What I want to achieve, is, t…

---

## [Analyzers: default and custom analyzers giving same score](https://discuss.elastic.co/t/analyzers-default-and-custom-analyzers-giving-same-score/152629)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 1\
**Last updated:** [October 23, 2018, 7:03am UTC](https://discuss.elastic.co/t/analyzers-default-and-custom-analyzers-giving-same-score/152629 "2018-10-23T07:03:00Z")

</div>

Hi Team Created two indices: one with custom analyzer and one uses default analyzer settings for index 1: PUT test\_index { "settings": { "analysis": { "filter": { "stop": { "type": "stop"…

---

## [Is \_xpack/sql support to search from alias?](https://discuss.elastic.co/t/is-xpack-sql-support-to-search-from-alias/153356)

<div class="topic-metadata">

**Author:** [@Gaurav\_Patel](https://discuss.elastic.co/u/Gaurav_Patel)\
**Replies:** 1\
**Last updated:** [October 23, 2018, 6:19am UTC](https://discuss.elastic.co/t/is-xpack-sql-support-to-search-from-alias/153356 "2018-10-23T06:19:31Z")

</div>

Hi, In my project i am transforming user query to SQL statement for dynamic search. As \_xpack/sql support to execute sql statement, i can directly or with minimum changes use my existing tested functionality with elast…

---

## [Elasticsearch indexing (DB-\>ES) decreases dramatically when source is not co-located on same host](https://discuss.elastic.co/t/elasticsearch-indexing-db-es-decreases-dramatically-when-source-is-not-co-located-on-same-host/152958)

<div class="topic-metadata">

**Author:** [@m1k3ga](https://discuss.elastic.co/u/m1k3ga)\
**Replies:** 4\
**Last updated:** [October 23, 2018, 6:04am UTC](https://discuss.elastic.co/t/elasticsearch-indexing-db-es-decreases-dramatically-when-source-is-not-co-located-on-same-host/152958 "2018-10-23T06:04:12Z")

</div>

We are using Elasticsearch (ES) for GUI search in our products. Years ago we integrated Elasticsearch-1.7. Now we utilize ES 6.4. Now we have to re-index our data. The source data (DB) is a located on a relational da…

---

## [Sum greater than some amount group by Phone](https://discuss.elastic.co/t/sum-greater-than-some-amount-group-by-phone/153325)

<div class="topic-metadata">

**Author:** [@Nikhil\_Nambiar](https://discuss.elastic.co/u/Nikhil_Nambiar)\
**Replies:** 2\
**Last updated:** [October 23, 2018, 3:35am UTC](https://discuss.elastic.co/t/sum-greater-than-some-amount-group-by-phone/153325 "2018-10-23T03:35:07Z")

</div>

I have a json { phone : "phone numbers" amount :"amount of call" uts:"date in text" } how can I achieve a query which will give me sum of amount for individual phone and filter out those phone whose sum of amount i…

---

## [Cant load dataset](https://discuss.elastic.co/t/cant-load-dataset/153270)

<div class="topic-metadata">

**Author:** [@Rajashree\_Gr](https://discuss.elastic.co/u/Rajashree_Gr)\
**Replies:** 2\
**Last updated:** [October 23, 2018, 3:03am UTC](https://discuss.elastic.co/t/cant-load-dataset/153270 "2018-10-23T03:03:43Z")

</div>

I'm following the Tutorial - https://www.elastic.co/guide/en/kibana/current/tutorial-load-dataset.html. I'm stuck in the step - Load the data sets. On running the curl upload command - curl -H 'Content-Type: applicati…

---

## [Cardinality accuracy for very low cardinality](https://discuss.elastic.co/t/cardinality-accuracy-for-very-low-cardinality/153509)

<div class="topic-metadata">

**Author:** [@eelixa](https://discuss.elastic.co/u/eelixa)\
**Replies:** 0\
**Last updated:** [October 23, 2018, 2:47am UTC](https://discuss.elastic.co/t/cardinality-accuracy-for-very-low-cardinality/153509 "2018-10-23T02:47:07Z")

</div>

Hi, I'm wanting to use a cardinality aggregation to determine whether the value of a particular field is unique among my data. Essentially I am just interested in whether the cardinality is exactly 1, or above 1. I don'…

---

## [Get by Id Missing in Current C#/NEST Documentation](https://discuss.elastic.co/t/get-by-id-missing-in-current-c-nest-documentation/153496)

<div class="topic-metadata">

**Author:** [@iinuwa](https://discuss.elastic.co/u/iinuwa)\
**Replies:** 1\
**Last updated:** [October 23, 2018, 2:13am UTC](https://discuss.elastic.co/t/get-by-id-missing-in-current-c-nest-documentation/153496 "2018-10-23T02:13:22Z")

</div>

Hello, I am wondering what is the best way to query by document Id. In previous versions of the NEST documentation, there was an example of using the Get() method of the ElasticClient class, e.g. 1.x Documentation. The …

---

## [Need Help Forming Query with Sum Aggregation by N](https://discuss.elastic.co/t/need-help-forming-query-with-sum-aggregation-by-n/153499)

<div class="topic-metadata">

**Author:** [@sbvader](https://discuss.elastic.co/u/sbvader)\
**Replies:** 0\
**Last updated:** [October 22, 2018, 11:43pm UTC](https://discuss.elastic.co/t/need-help-forming-query-with-sum-aggregation-by-n/153499 "2018-10-22T23:43:21Z")

</div>

Each document in my index corresponds to a specific sensor. I cannot change the data layout at all. I am interested in the value field for three of these sensors: X, Y, and Z at a given time (within a couple of seconds).…

---

## [Help constructing .NET NEST query](https://discuss.elastic.co/t/help-constructing-net-nest-query/152762)

<div class="topic-metadata">

**Author:** [@rpm1984](https://discuss.elastic.co/u/rpm1984)\
**Replies:** 6\
**Last updated:** [October 22, 2018, 10:24pm UTC](https://discuss.elastic.co/t/help-constructing-net-nest-query/152762 "2018-10-22T22:24:39Z")

</div>

Hi there, I'm using the NEST .NET client (6.3.1), and trying to compose a search query that is based on a number of (optional) parameters. Here's what i've got so far: var searchResponse = await \_client.SearchAsync\<Li…

---

## [Two separate nodes on the same machine](https://discuss.elastic.co/t/two-separate-nodes-on-the-same-machine/153457)

<div class="topic-metadata">

**Author:** [@alina.frey](https://discuss.elastic.co/u/alina.frey)\
**Replies:** 1\
**Last updated:** [October 22, 2018, 7:16pm UTC](https://discuss.elastic.co/t/two-separate-nodes-on-the-same-machine/153457 "2018-10-22T19:16:26Z")

</div>

Was wondering if I can run two separate ES nodes using the same ES folder. To run the first node, I have a service that runs elasticsearch.exe (using the configuration specified in elasticsearch.yml). Can I use the same …

---

## [Removing node from cluster and replacing it with a new one](https://discuss.elastic.co/t/removing-node-from-cluster-and-replacing-it-with-a-new-one/152996)

<div class="topic-metadata">

**Author:** [@matisku](https://discuss.elastic.co/u/matisku)\
**Replies:** 6\
**Last updated:** [October 22, 2018, 5:45pm UTC](https://discuss.elastic.co/t/removing-node-from-cluster-and-replacing-it-with-a-new-one/152996 "2018-10-22T17:45:41Z")

</div>

Hello, My setup contains 3 master nodes and 9 data nodes. Each index have 9 shards and 1 replica. ES Cluster is setup in AWS. I wanted to upgrade from Ubuntu 14.04 to 16.04. It means that I have to delete instance an…

---

## [No living connections in elasticsearch connection pool](https://discuss.elastic.co/t/no-living-connections-in-elasticsearch-connection-pool/150591)

<div class="topic-metadata">

**Author:** [@jgrevich](https://discuss.elastic.co/u/jgrevich)\
**Replies:** 1\
**Last updated:** [October 22, 2018, 5:29pm UTC](https://discuss.elastic.co/t/no-living-connections-in-elasticsearch-connection-pool/150591 "2018-10-22T17:29:59Z")

</div>

We use a AWS NLB in front of our ES cluster and are receiving errors in the logstash logs stating that Elasticsearch is unreachable. The full error is below: 2018-09-18\_19:00:10.19502 \[ERROR\] 2018-09-18 19:00:10.194 \[\[m…

---

## [Update API in Java Rest Client not updating document in ElasticSearch](https://discuss.elastic.co/t/update-api-in-java-rest-client-not-updating-document-in-elasticsearch/153450)

<div class="topic-metadata">

**Author:** [@Shweta\_Sinha](https://discuss.elastic.co/u/Shweta_Sinha)\
**Replies:** 0\
**Last updated:** [October 22, 2018, 5:07pm UTC](https://discuss.elastic.co/t/update-api-in-java-rest-client-not-updating-document-in-elasticsearch/153450 "2018-10-22T17:07:08Z")

</div>

RestHighLevelClient client = new RestHighLevelClient( RestClient.builder( new HttpHost("localhost", 9200, "http")); String json = mapper.writeValueAsString(new DensityVersion(new Date(), 300L)); Map\<String, Object\> …

---

## [Scroll replay doesn't work due to constant scroll id](https://discuss.elastic.co/t/scroll-replay-doesnt-work-due-to-constant-scroll-id/152384)

<div class="topic-metadata">

**Author:** [@PANKAJ\_SAINI](https://discuss.elastic.co/u/PANKAJ_SAINI)\
**Replies:** 1\
**Last updated:** [October 22, 2018, 5:03pm UTC](https://discuss.elastic.co/t/scroll-replay-doesnt-work-due-to-constant-scroll-id/152384 "2018-10-22T17:03:30Z")

</div>

Hi, Basically, I am using scan-and-scroll to pull some metadata from documents (fields which are light-weight E.g., Name, Hash, RegistrationNumber and these fields are mapped as 'stored = true'). Scenario: say while fe…

---

## [Detect anomalies with ELK stack](https://discuss.elastic.co/t/detect-anomalies-with-elk-stack/153443)

<div class="topic-metadata">

**Author:** [@nita](https://discuss.elastic.co/u/nita)\
**Replies:** 1\
**Last updated:** [October 22, 2018, 4:10pm UTC](https://discuss.elastic.co/t/detect-anomalies-with-elk-stack/153443 "2018-10-22T16:10:13Z")

</div>

Hello, I would like to use the ELK stack to manage and analyse logs but I'm totally new to it so I would be glad if you could give me some tips. I'd like to know if it is possible to detect anomalies using the ELK stac…

---

## [Using painless split function in aggregation](https://discuss.elastic.co/t/using-painless-split-function-in-aggregation/153168)

<div class="topic-metadata">

**Author:** [@Mamadou\_Diop](https://discuss.elastic.co/u/Mamadou_Diop)\
**Replies:** 3\
**Last updated:** [October 22, 2018, 4:01pm UTC](https://discuss.elastic.co/t/using-painless-split-function-in-aggregation/153168 "2018-10-22T16:01:45Z")

</div>

Hello, I am trying to use the painless script split function in my AWS elasticsearch cluster but it does not seem to be working. I get "Unable to find dynamic method \[split\] with \[1\] arguments for class \[java.lang.Strin…

---

## [How does the X-Pack license work?](https://discuss.elastic.co/t/how-does-the-x-pack-license-work/153256)

<div class="topic-metadata">

**Author:** [@KajMagnus](https://discuss.elastic.co/u/KajMagnus)\
**Replies:** 3\
**Last updated:** [October 22, 2018, 3:20pm UTC](https://discuss.elastic.co/t/how-does-the-x-pack-license-work/153256 "2018-10-22T15:20:36Z")

</div>

Can I ask how does the X-Pack license work? Is there perhaps an asymmetric encryption public key bundled with ElasticSearch? And if one buys an enterprise plan subscription, then Elastic-the-company creates a license, an…

---

## [Using taxonomy and synonyms in elasticsearch 6](https://discuss.elastic.co/t/using-taxonomy-and-synonyms-in-elasticsearch-6/153037)

<div class="topic-metadata">

**Author:** [@Bilal](https://discuss.elastic.co/u/Bilal)\
**Replies:** 2\
**Last updated:** [October 22, 2018, 2:26pm UTC](https://discuss.elastic.co/t/using-taxonomy-and-synonyms-in-elasticsearch-6/153037 "2018-10-22T14:26:15Z")

</div>

I'm trying to implement what's called a managed vocabulary (which is an extension of a taxonomy that also accounts for synonyms) based on the ideas presented in this article : Patterns for Elasticsearch Synonyms: Taxonom…

---

## [Query\_string, highlighting, and aggregations](https://discuss.elastic.co/t/query-string-highlighting-and-aggregations/153418)

<div class="topic-metadata">

**Author:** [@MSS](https://discuss.elastic.co/u/MSS)\
**Replies:** 0\
**Last updated:** [October 22, 2018, 2:22pm UTC](https://discuss.elastic.co/t/query-string-highlighting-and-aggregations/153418 "2018-10-22T14:22:34Z")

</div>

I'm kind of doubting this is possible. Essentially I'm trying to search over all fields and multiple indexes. I can use highlighting to show fields where there's a match for my query. The results return and index the …

---

## [ES Docker unsafe memory access](https://discuss.elastic.co/t/es-docker-unsafe-memory-access/153058)

<div class="topic-metadata">

**Author:** [@pciruzzi](https://discuss.elastic.co/u/pciruzzi)\
**Replies:** 2\
**Last updated:** [October 22, 2018, 2:08pm UTC](https://discuss.elastic.co/t/es-docker-unsafe-memory-access/153058 "2018-10-22T14:08:53Z")

</div>

Hi, I'm using Docker Compose to start an ES (Version 5.5.3) for development. I followed the guide to do it from here. The problem is that, after some time, I get an error: \[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHa…

---

## [Snapshot on S3 with self signed certificate](https://discuss.elastic.co/t/snapshot-on-s3-with-self-signed-certificate/153407)

<div class="topic-metadata">

**Author:** [@phr0gz](https://discuss.elastic.co/u/phr0gz)\
**Replies:** 0\
**Last updated:** [October 22, 2018, 1:45pm UTC](https://discuss.elastic.co/t/snapshot-on-s3-with-self-signed-certificate/153407 "2018-10-22T13:45:14Z")

</div>

Hello, we are trying to test the backup on S3 compatible device, and as mentioned here it seems to be supported. We have an issue concerning the certificate verification...is there a way to bypass that e.g. for lab tes…

---

## [Boost field A based on range field B](https://discuss.elastic.co/t/boost-field-a-based-on-range-field-b/153166)

<div class="topic-metadata">

**Author:** [@Maarten\_Koopmans](https://discuss.elastic.co/u/Maarten_Koopmans)\
**Replies:** 5\
**Last updated:** [October 22, 2018, 1:43pm UTC](https://discuss.elastic.co/t/boost-field-a-based-on-range-field-b/153166 "2018-10-22T13:43:02Z")

</div>

Hi, I have trimmed down my issue to this minimal use case. Say I have a document type fruits: { "fruit":"apple" "flavourScore":1.4 "pricePerKg": 9 } What I would like to be able to do (but can't seem to figure out…

---

## [Getting sum of amount of a phone number greater than 50k for specific month](https://discuss.elastic.co/t/getting-sum-of-amount-of-a-phone-number-greater-than-50k-for-specific-month/153392)

<div class="topic-metadata">

**Author:** [@Nikhil\_Nambiar](https://discuss.elastic.co/u/Nikhil_Nambiar)\
**Replies:** 1\
**Last updated:** [October 22, 2018, 1:30pm UTC](https://discuss.elastic.co/t/getting-sum-of-amount-of-a-phone-number-greater-than-50k-for-specific-month/153392 "2018-10-22T13:30:00Z")

</div>

Hi , This is my mapping "mappings":{ "call\_list":{ "properties":{ "phone":{ "type":"text" } "pretty":{ "type":"text" } "amount":{ "type":"long" } "name":{ "type":"text" } "uts":{ "type":"text" } } …

---

## [Do I have to reindex v5 indices for an upgrade to v6?](https://discuss.elastic.co/t/do-i-have-to-reindex-v5-indices-for-an-upgrade-to-v6/152810)

<div class="topic-metadata">

**Author:** [@juiip](https://discuss.elastic.co/u/juiip)\
**Replies:** 3\
**Last updated:** [October 22, 2018, 1:01pm UTC](https://discuss.elastic.co/t/do-i-have-to-reindex-v5-indices-for-an-upgrade-to-v6/152810 "2018-10-22T13:01:12Z")

</div>

I'm wondering whether the reindexing step is actually necessary for my upgrade of Elasticsearch to v6. My indices are time-based, and after a few weeks get deleted, so if Elasticserach v6 can still read v5 indices it se…

---

## [CrossCluster search using wrong ip address](https://discuss.elastic.co/t/crosscluster-search-using-wrong-ip-address/153380)

<div class="topic-metadata">

**Author:** [@Manofwax](https://discuss.elastic.co/u/Manofwax)\
**Replies:** 2\
**Last updated:** [October 22, 2018, 12:28pm UTC](https://discuss.elastic.co/t/crosscluster-search-using-wrong-ip-address/153380 "2018-10-22T12:28:32Z")

</div>

Hello, I've a local cluster A and a remote elasticsearch B deployed in a docker container. I would like to use cluster A as a cross cluster search client to search cluster B. I've configured cluster A in this way: PUT…

---

## [Differerences between Portuguese and Brazilian stemmer](https://discuss.elastic.co/t/differerences-between-portuguese-and-brazilian-stemmer/153364)

<div class="topic-metadata">

**Author:** [@rmchugh](https://discuss.elastic.co/u/rmchugh)\
**Replies:** 1\
**Last updated:** [October 22, 2018, 10:26am UTC](https://discuss.elastic.co/t/differerences-between-portuguese-and-brazilian-stemmer/153364 "2018-10-22T10:26:38Z")

</div>

What are the main differences between the Portuguese and Brazilian language analyzers in 6.x? I've run into some rather strange behaviour when implementing Brazilian and I'm wondering is there any benefit to using the Br…

---

## [Using must and must\_not on same field](https://discuss.elastic.co/t/using-must-and-must-not-on-same-field/152656)

<div class="topic-metadata">

**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\
**Replies:** 2\
**Last updated:** [October 22, 2018, 9:51am UTC](https://discuss.elastic.co/t/using-must-and-must-not-on-same-field/152656 "2018-10-22T09:51:41Z")

</div>

Hi All, I have a requirement like, need to extract documents based on two fields and out of those two fields i need to exclude one field(optional), and extract data. So for this requirement below is my ES query. { "que…

---

## [Similarity Measure Change](https://discuss.elastic.co/t/similarity-measure-change/153358)

<div class="topic-metadata">

**Author:** [@Digant\_Tyagi](https://discuss.elastic.co/u/Digant_Tyagi)\
**Replies:** 1\
**Last updated:** [October 22, 2018, 9:35am UTC](https://discuss.elastic.co/t/similarity-measure-change/153358 "2018-10-22T09:35:47Z")

</div>

Does changing the similarity measure from Classic (based on TF/IDF) in Elastic 2.x to OKapi BM25 in Elastic 6.4 has any impact on overall Elastic search performance?

---

## [ES 6.1.2 Cluster shows performance bottleneck](https://discuss.elastic.co/t/es-6-1-2-cluster-shows-performance-bottleneck/153208)

<div class="topic-metadata">

**Author:** [@lmuthuraman](https://discuss.elastic.co/u/lmuthuraman)\
**Replies:** 1\
**Last updated:** [October 22, 2018, 9:09am UTC](https://discuss.elastic.co/t/es-6-1-2-cluster-shows-performance-bottleneck/153208 "2018-10-22T09:09:16Z")

</div>

We were seeing some real slowness in the queries in our new ES 6.1.2 cluster. In order to understand more, we started running Rally Geoname test bed to get some performance benchmark of the cluster The test results show…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1508)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1510)
