# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1522

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1523

---

## [ElasticSearc.net v6.3.1 missing functionality for "GET \_xpack/sql"](https://discuss.elastic.co/t/elasticsearc-net-v6-3-1-missing-functionality-for-get-xpack-sql/150888)

<div class="topic-metadata">

**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\
**Replies:** 3\
**Last updated:** [October 10, 2018, 4:13pm UTC](https://discuss.elastic.co/t/elasticsearc-net-v6-3-1-missing-functionality-for-get-xpack-sql/150888 "2018-10-10T16:13:25Z")

</div>

ElasticLowLevelClient class from the nuget package "ElasticSearc.net " doesnt provide the functionality to perform "GET \_xpack/sql" in C#(We are using visual studio 2017). Please guide us...............

---

## [Multiple same values in a field](https://discuss.elastic.co/t/multiple-same-values-in-a-field/151862)

<div class="topic-metadata">

**Author:** [@mh20](https://discuss.elastic.co/u/mh20)\
**Replies:** 1\
**Last updated:** [October 10, 2018, 4:12pm UTC](https://discuss.elastic.co/t/multiple-same-values-in-a-field/151862 "2018-10-10T16:12:18Z")

</div>

Hi, I have a document like this: PUT twitter/\_doc/1 { "user" : "kimchy", "post\_date" : "2009-11-15T14:12:12", "age" : \[1, 1, 1, 1, 1, 1\] } What is difference between "age" : \[1, 1, 1, 1, 1, 1\] and "age" : \[1\] i…

---

## [Elasticsearch-mapper-attachments where is the text content stored?](https://discuss.elastic.co/t/elasticsearch-mapper-attachments-where-is-the-text-content-stored/151634)

<div class="topic-metadata">

**Author:** [@ekazaltzis](https://discuss.elastic.co/u/ekazaltzis)\
**Replies:** 3\
**Last updated:** [October 10, 2018, 4:12pm UTC](https://discuss.elastic.co/t/elasticsearch-mapper-attachments-where-is-the-text-content-stored/151634 "2018-10-10T16:12:02Z")

</div>

Hi, I'm using the elasticsearch-mapper-attachments plugin and I would like to also see the TIKA converted text content as part of the document. I have tried the following mapping without success: curl -X PUT "localhost…

---

## [FosElasticBundle: suggestion does not support \[field\]](https://discuss.elastic.co/t/foselasticbundle-suggestion-does-not-support-field/151890)

<div class="topic-metadata">

**Author:** [@Ahmed\_EBEN\_HASSINE](https://discuss.elastic.co/u/Ahmed_EBEN_HASSINE)\
**Replies:** 0\
**Last updated:** [October 10, 2018, 4:05pm UTC](https://discuss.elastic.co/t/foselasticbundle-suggestion-does-not-support-field/151890 "2018-10-10T16:05:13Z")

</div>

Using fos\_elastica.finder.post\_index.post service to get list of available sugesstion post as defined under my mapping configuration: fos\_elastica: clients: default: { host: elasticsearch, port: 9200 } …

---

## [I am trying to search by name](https://discuss.elastic.co/t/i-am-trying-to-search-by-name/151889)

<div class="topic-metadata">

**Author:** [@archana1](https://discuss.elastic.co/u/archana1)\
**Replies:** 0\
**Last updated:** [October 10, 2018, 4:03pm UTC](https://discuss.elastic.co/t/i-am-trying-to-search-by-name/151889 "2018-10-10T16:03:47Z")

</div>

HI I am very new to elasticsearch. I am trying to search by name(User can enter firstname or lastname). For example if they give 'John' i should get john and also 'Jhonson'. But my current query is giving only john. Ca…

---

## [Creating Alert for Disk Space Usage](https://discuss.elastic.co/t/creating-alert-for-disk-space-usage/151474)

<div class="topic-metadata">

**Author:** [@johncam](https://discuss.elastic.co/u/johncam)\
**Replies:** 6\
**Last updated:** [October 10, 2018, 3:51pm UTC](https://discuss.elastic.co/t/creating-alert-for-disk-space-usage/151474 "2018-10-10T15:51:10Z")

</div>

I'm trying to create an alert that is triggered when usage for any mount point on any server is in excess of 80%. When creating a threshold alert under Watcher, I'm looking at getting the average of system.filesystem.us…

---

## [How to install JDBC Driver on Windows Server](https://discuss.elastic.co/t/how-to-install-jdbc-driver-on-windows-server/151784)

<div class="topic-metadata">

**Author:** [@TheOnlyOne](https://discuss.elastic.co/u/TheOnlyOne)\
**Replies:** 6\
**Last updated:** [October 10, 2018, 3:20pm UTC](https://discuss.elastic.co/t/how-to-install-jdbc-driver-on-windows-server/151784 "2018-10-10T15:20:31Z")

</div>

Hello everyone, i will install the JDBC Driver on a Windows Server 2016 SQL. I cant found any Installation Guide to do this. This Guide: https://www.elastic.co/guide/en/elasticsearch/reference/current/sql-jdbc.html …

---

## [How to add Multiple analyzers to specific field](https://discuss.elastic.co/t/how-to-add-multiple-analyzers-to-specific-field/151871)

<div class="topic-metadata">

**Author:** [@anveshdd](https://discuss.elastic.co/u/anveshdd)\
**Replies:** 1\
**Last updated:** [October 10, 2018, 3:18pm UTC](https://discuss.elastic.co/t/how-to-add-multiple-analyzers-to-specific-field/151871 "2018-10-10T15:18:31Z")

</div>

Hi, I am working on ES 6.x i want to apply multiple analyzers to specific field. Any suggestions that i can implement.

---

## [AWS ElasticSearch can' t accept nginx logs from logstash](https://discuss.elastic.co/t/aws-elasticsearch-can-t-accept-nginx-logs-from-logstash/151868)

<div class="topic-metadata">

**Author:** [@Miodrag\_Lazarevic](https://discuss.elastic.co/u/Miodrag_Lazarevic)\
**Replies:** 1\
**Last updated:** [October 10, 2018, 3:05pm UTC](https://discuss.elastic.co/t/aws-elasticsearch-can-t-accept-nginx-logs-from-logstash/151868 "2018-10-10T15:05:50Z")

</div>

I' ve configured Logstash to collect my nginx productions logs and send them to Amazon ElasticSearch. When i tested previously with apache logs, they were successfuly sent and visualized with Kibana, but now i can't s…

---

## [Return only highest scoring document from a family of documents](https://discuss.elastic.co/t/return-only-highest-scoring-document-from-a-family-of-documents/151541)

<div class="topic-metadata">

**Author:** [@Jon\_Hourany](https://discuss.elastic.co/u/Jon_Hourany)\
**Replies:** 1\
**Last updated:** [October 10, 2018, 2:38pm UTC](https://discuss.elastic.co/t/return-only-highest-scoring-document-from-a-family-of-documents/151541 "2018-10-10T14:38:41Z")

</div>

Let's say I have documents mapped such that: PUT test\_documents { "mappings": { "doc": { "properties": { "parent\_id": { "type": "keyword" }, "body": { "type": "text" } } } } } Wh…

---

## [Query to get data related to only those field returned by aggregation](https://discuss.elastic.co/t/query-to-get-data-related-to-only-those-field-returned-by-aggregation/151557)

<div class="topic-metadata">

**Author:** [@Nikhil\_Nambiar](https://discuss.elastic.co/u/Nikhil_Nambiar)\
**Replies:** 3\
**Last updated:** [October 10, 2018, 2:34pm UTC](https://discuss.elastic.co/t/query-to-get-data-related-to-only-those-field-returned-by-aggregation/151557 "2018-10-10T14:34:18Z")

</div>

Hi, I need a help on the query where I want to search by phone numbers and get latest date amount charged for that phone number my mapping structure is as follows "mappings":{ "phone\_list":{ "properties":{ "…

---

## [Customize default mapping of elasticsearch](https://discuss.elastic.co/t/customize-default-mapping-of-elasticsearch/151615)

<div class="topic-metadata">

**Author:** [@pranav24](https://discuss.elastic.co/u/pranav24)\
**Replies:** 1\
**Last updated:** [October 10, 2018, 12:48pm UTC](https://discuss.elastic.co/t/customize-default-mapping-of-elasticsearch/151615 "2018-10-10T12:48:47Z")

</div>

Hi everyone, I want to change default mapping provided by elasticsearch for a index. When I am creating any index, I am providing mapping for known fields which I know will come inside that index. But there are some ex…

---

## [Search Based on two Text Distance](https://discuss.elastic.co/t/search-based-on-two-text-distance/151829)

<div class="topic-metadata">

**Author:** [@mhsankar](https://discuss.elastic.co/u/mhsankar)\
**Replies:** 1\
**Last updated:** [October 10, 2018, 11:23am UTC](https://discuss.elastic.co/t/search-based-on-two-text-distance/151829 "2018-10-10T11:23:06Z")

</div>

Hello I Have a Mapping With a Text Field how can search on Text Field with this condition: I want to search two Word for example 'A1' and 'A2' with Distance 3 Example: 'A1 go school with A2 by bus' =\> its True 'A1 …

---

## [How to be connected to multiple master node on docker](https://discuss.elastic.co/t/how-to-be-connected-to-multiple-master-node-on-docker/151818)

<div class="topic-metadata">

**Author:** [@Loudone](https://discuss.elastic.co/u/Loudone)\
**Replies:** 0\
**Last updated:** [October 10, 2018, 10:30am UTC](https://discuss.elastic.co/t/how-to-be-connected-to-multiple-master-node-on-docker/151818 "2018-10-10T10:30:34Z")

</div>

Dear all, I'm currently trying to configure a elasticsearch cluster with 2 masters and 2 data nodes under docker-compose Please find below my docker-compose version: '2.2' services: master1: image: docker.elasti…

---

## [Aggregation: order by on count of filtered field](https://discuss.elastic.co/t/aggregation-order-by-on-count-of-filtered-field/151167)

<div class="topic-metadata">

**Author:** [@ErSumit](https://discuss.elastic.co/u/ErSumit)\
**Replies:** 2\
**Last updated:** [October 10, 2018, 10:24am UTC](https://discuss.elastic.co/t/aggregation-order-by-on-count-of-filtered-field/151167 "2018-10-10T10:24:41Z")

</div>

How can I get result ordered by based on count of filtered field. Here I have filtered transactionID for Error Codes and I want result set in desc order of count of errors. Query: GET index-name/\_search { "aggs" : { …

---

## [Authentication Plugin](https://discuss.elastic.co/t/authentication-plugin/151441)

<div class="topic-metadata">

**Author:** [@Vahid\_Mouasvi](https://discuss.elastic.co/u/Vahid_Mouasvi)\
**Replies:** 2\
**Last updated:** [October 10, 2018, 9:45am UTC](https://discuss.elastic.co/t/authentication-plugin/151441 "2018-10-10T09:45:06Z")

</div>

I wanna use getRestHandlerWrapper() from ActionPlugin class instead of removed class "RestFilter" for authentication with user/pass! any ideas how can i use this new class instead of restfilter for catching user/pass fr…

---

## [Simple Way to configure a cluster for on-premise software](https://discuss.elastic.co/t/simple-way-to-configure-a-cluster-for-on-premise-software/151797)

<div class="topic-metadata">

**Author:** [@xuk](https://discuss.elastic.co/u/xuk)\
**Replies:** 0\
**Last updated:** [October 10, 2018, 9:01am UTC](https://discuss.elastic.co/t/simple-way-to-configure-a-cluster-for-on-premise-software/151797 "2018-10-10T09:01:04Z")

</div>

We're looking into adding ES as part of our stack in our on-premise software that would be installed in enterprise environments. We're interested in utilising ES as part of a high availability requirement. Ideally, a cus…

---

## [Elasticsearch - ingest pipeline - convert string field to integer](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-convert-string-field-to-integer/151579)

<div class="topic-metadata">

**Author:** [@Orsius](https://discuss.elastic.co/u/Orsius)\
**Replies:** 2\
**Last updated:** [October 10, 2018, 8:55am UTC](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-convert-string-field-to-integer/151579 "2018-10-10T08:55:03Z")

</div>

Dear Community Members, I have the following document in an index called raw\_marvel\_movies $ cat 1doc.json |jq '.\_source' { "year": "2015", "id": "4", "name": "Avengers: Age of Ultron", "Final box office ranks…

---

## [Get top hits aggregation without aggregating on all values](https://discuss.elastic.co/t/get-top-hits-aggregation-without-aggregating-on-all-values/151790)

<div class="topic-metadata">

**Author:** [@tpraizler](https://discuss.elastic.co/u/tpraizler)\
**Replies:** 0\
**Last updated:** [October 10, 2018, 8:23am UTC](https://discuss.elastic.co/t/get-top-hits-aggregation-without-aggregating-on-all-values/151790 "2018-10-10T08:23:12Z")

</div>

Hey, Based on the documentation top aggregations can be used as a sub aggregator. Maybe I can achieve it in a different way but my use case is: I have the following structure: { name: "x" } I basically need to g…

---

## [Multiple indexes or a single index](https://discuss.elastic.co/t/multiple-indexes-or-a-single-index/151781)

<div class="topic-metadata">

**Author:** [@geertn444](https://discuss.elastic.co/u/geertn444)\
**Replies:** 1\
**Last updated:** [October 10, 2018, 7:56am UTC](https://discuss.elastic.co/t/multiple-indexes-or-a-single-index/151781 "2018-10-10T07:56:03Z")

</div>

Hello, I am analyzing syslogs with Elastic. They all arrive on a single port and this can't be changed. However, the kind of syslog messages are very diverse, lets call it 4 categories: dns, dhcp, switch, httpd Each of…

---

## [Watches for flatline](https://discuss.elastic.co/t/watches-for-flatline/151685)

<div class="topic-metadata">

**Author:** [@rcoundon](https://discuss.elastic.co/u/rcoundon)\
**Replies:** 1\
**Last updated:** [October 10, 2018, 7:41am UTC](https://discuss.elastic.co/t/watches-for-flatline/151685 "2018-10-10T07:41:50Z")

</div>

We're evaluating the Elastic Cloud to replace an existing cluster we managed ourselves. We have some services that log their behaviour to Elasticsearch and we were previously using Elastalert to alert if any of them fla…

---

## [Multilevel Nested Query with different nested paths](https://discuss.elastic.co/t/multilevel-nested-query-with-different-nested-paths/151772)

<div class="topic-metadata">

**Author:** [@elastic2](https://discuss.elastic.co/u/elastic2)\
**Replies:** 0\
**Last updated:** [October 10, 2018, 7:29am UTC](https://discuss.elastic.co/t/multilevel-nested-query-with-different-nested-paths/151772 "2018-10-10T07:29:10Z")

</div>

Hello, This question is in response to an earlier question thats closed now. @ cbuescher My query is a little similar, but i need to search on two different nested paths. Query: POST /nested\_test/t/\_search { "query…

---

## [Can not search with SearchRequest.allowPartialSearchResults() Exception](https://discuss.elastic.co/t/can-not-search-with-searchrequest-allowpartialsearchresults-exception/151743)

<div class="topic-metadata">

**Author:** [@Tung\_Nguyen\_Thanh](https://discuss.elastic.co/u/Tung_Nguyen_Thanh)\
**Replies:** 1\
**Last updated:** [October 10, 2018, 7:02am UTC](https://discuss.elastic.co/t/can-not-search-with-searchrequest-allowpartialsearchresults-exception/151743 "2018-10-10T07:02:33Z")

</div>

I am using elasticsearch-rest-high-level-client 6.4.2 and I am facing this error. The error comes from the following piece of code in RequestConverters class. \< if (searchRequest.allowPartialSearchResults() != null) { …

---

## [Spark read from elasticsearch and different indexes, the speed of reading is five times worse](https://discuss.elastic.co/t/spark-read-from-elasticsearch-and-different-indexes-the-speed-of-reading-is-five-times-worse/151765)

<div class="topic-metadata">

**Author:** [@stupidsky](https://discuss.elastic.co/u/stupidsky)\
**Replies:** 0\
**Last updated:** [October 10, 2018, 6:55am UTC](https://discuss.elastic.co/t/spark-read-from-elasticsearch-and-different-indexes-the-speed-of-reading-is-five-times-worse/151765 "2018-10-10T06:55:55Z")

</div>

spark read from elasticsearch and different indexes, the speed of reading is five times worse. spark 2.2.0,elasticsearch 6.0.0. 1 task contains about one hundred thousand data. The two data of indexs are about the s…

---

## [Email Notification](https://discuss.elastic.co/t/email-notification/151764)

<div class="topic-metadata">

**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\
**Replies:** 0\
**Last updated:** [October 10, 2018, 6:50am UTC](https://discuss.elastic.co/t/email-notification/151764 "2018-10-10T06:50:59Z")

</div>

I am trying to send a email alert when there is any loin attempts. I am collecting event logs from windows servers. if there is any login attempt i should get an email alert. Can some body help me on this? Should i use …

---

## [Packetbeat with windows 10 can not work](https://discuss.elastic.co/t/packetbeat-with-windows-10-can-not-work/151761)

<div class="topic-metadata">

**Author:** [@Makoto\_Kino\_Tsou](https://discuss.elastic.co/u/Makoto_Kino_Tsou)\
**Replies:** 0\
**Last updated:** [October 10, 2018, 6:46am UTC](https://discuss.elastic.co/t/packetbeat-with-windows-10-can-not-work/151761 "2018-10-10T06:46:00Z")

</div>

I can start packetbeat service with elasticsearch and kibana is on. But I can't see the packetbeat index. What should I do? They are on the same local machine.

---

## [Single vs mutiple indices: Elasticsearch](https://discuss.elastic.co/t/single-vs-mutiple-indices-elasticsearch/151425)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 4\
**Last updated:** [October 10, 2018, 5:40am UTC](https://discuss.elastic.co/t/single-vs-mutiple-indices-elasticsearch/151425 "2018-10-10T05:40:08Z")

</div>

Hi Team I've indexed few pdf files. I followed {{ test\_file name }} index convention. which allowed me to create few indices depending on the title of the pdf files. But I'm confused whether to create multiple indices …

---

## [Natural Language Queries to Elasticsearch](https://discuss.elastic.co/t/natural-language-queries-to-elasticsearch/151747)

<div class="topic-metadata">

**Author:** [@Charalampos](https://discuss.elastic.co/u/Charalampos)\
**Replies:** 0\
**Last updated:** [October 10, 2018, 4:58am UTC](https://discuss.elastic.co/t/natural-language-queries-to-elasticsearch/151747 "2018-10-10T04:58:57Z")

</div>

Hello all, Want to create an interface that will allow natural language queries in an Elasticsearch. How would you approach such a problem? I was thinking about spacy or quepy but still was surprised to see that there i…

---

## [Geo Shape Queries](https://discuss.elastic.co/t/geo-shape-queries/151738)

<div class="topic-metadata">

**Author:** [@han1](https://discuss.elastic.co/u/han1)\
**Replies:** 0\
**Last updated:** [October 10, 2018, 3:23am UTC](https://discuss.elastic.co/t/geo-shape-queries/151738 "2018-10-10T03:23:07Z")

</div>

We are trying to do a query based on finding points that lie within a circle, but it is not working filters.Add(fq =\> fq.GeoShapeCircle(c =\> c.Name("circle\_query").Boost(1.1).Field(p =\> p.Location).Coordinates(new GeoCo…

---

## [Sort order with 4 conditions that included geo\_point and japanese characters](https://discuss.elastic.co/t/sort-order-with-4-conditions-that-included-geo-point-and-japanese-characters/151730)

<div class="topic-metadata">

**Author:** [@minhloc2011](https://discuss.elastic.co/u/minhloc2011)\
**Replies:** 0\
**Last updated:** [October 10, 2018, 1:31am UTC](https://discuss.elastic.co/t/sort-order-with-4-conditions-that-included-geo-point-and-japanese-characters/151730 "2018-10-10T01:31:34Z")

</div>

I have some documents of shops like below. How can i get query to: Descending order of number\_fans at shops Descending order of number\_articles at shops Close from the current position order Japanese alphabet order In…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1521)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1523)
