# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1525 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1526 --- ## [Reduce importance of multiple occurences of a searched term](https://discuss.elastic.co/t/reduce-importance-of-multiple-occurences-of-a-searched-term/151466)
**Author:** [@Arth](https://discuss.elastic.co/u/Arth)\ **Replies:** 0\ **Last updated:** [October 8, 2018, 1:46pm UTC](https://discuss.elastic.co/t/reduce-importance-of-multiple-occurences-of-a-searched-term/151466 "2018-10-08T13:46:33Z")
Hi, Documents containing several times the searched term get much stronger scores compared with those containing the searched term only once ? Is it possible to mitigate this effect please ? Thank you --- ## [Multiple indices sql query](https://discuss.elastic.co/t/multiple-indices-sql-query/150824)
**Author:** [@varunarathinam](https://discuss.elastic.co/u/varunarathinam)\ **Replies:** 2\ **Last updated:** [October 8, 2018, 1:17pm UTC](https://discuss.elastic.co/t/multiple-indices-sql-query/150824 "2018-10-08T13:17:56Z")
Hi, Im trying to sql query from kibana side post method using. My index name like "sample\_index-\*" i want query in that index. when i try to sql query i got error like; post \_xpack/sql/translate { "query": "select … --- ## [Sending logs from a remote machine](https://discuss.elastic.co/t/sending-logs-from-a-remote-machine/151330)
**Author:** [@calebereis](https://discuss.elastic.co/u/calebereis)\ **Replies:** 2\ **Last updated:** [October 8, 2018, 1:15pm UTC](https://discuss.elastic.co/t/sending-logs-from-a-remote-machine/151330 "2018-10-08T13:15:26Z")
Hi everyone, I'm using the Elastic Stack with Elasticsearch, Logstash and Kibana in different servers. It's communicating well and I have acess to the Kibana web browser. But, The server that is running the logs I want… --- ## [How to write a query with groupBy, having and orderBy with elastic?](https://discuss.elastic.co/t/how-to-write-a-query-with-groupby-having-and-orderby-with-elastic/151313)
**Author:** [@ali\_houshyaripour](https://discuss.elastic.co/u/ali_houshyaripour)\ **Replies:** 2\ **Last updated:** [October 8, 2018, 1:01pm UTC](https://discuss.elastic.co/t/how-to-write-a-query-with-groupby-having-and-orderby-with-elastic/151313 "2018-10-08T13:01:52Z")
Hi, I want to write a query in elastic that contain these 3 parts like sql: groupBy having orderBy How can I write it? --- ## [Combinining proximity search and other operators for complex entities](https://discuss.elastic.co/t/combinining-proximity-search-and-other-operators-for-complex-entities/151454)
**Author:** [@pauturvalles](https://discuss.elastic.co/u/pauturvalles)\ **Replies:** 0\ **Last updated:** [October 8, 2018, 1:01pm UTC](https://discuss.elastic.co/t/combinining-proximity-search-and-other-operators-for-complex-entities/151454 "2018-10-08T13:01:45Z")
I need help with a query in ES. I'm doing a Google-type search engine with ES (so I'm using query\_string queries with the queries directly extracted from the search text box that the user gets to write in), and it has to… --- ## [Elastic Master nodes cluster heap usage](https://discuss.elastic.co/t/elastic-master-nodes-cluster-heap-usage/151426)
**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\ **Replies:** 4\ **Last updated:** [October 8, 2018, 12:17pm UTC](https://discuss.elastic.co/t/elastic-master-nodes-cluster-heap-usage/151426 "2018-10-08T12:17:05Z")
Hello, In our Elasticsearch cluster we have 3 master nodes. I've noticed that from time to time one of them is under a heavy load while the other two seem to be doing nothing. Is that normal for elastic master nodes or … --- ## [Elastic Install and Run - Root or Not?](https://discuss.elastic.co/t/elastic-install-and-run-root-or-not/151323)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 2\ **Last updated:** [October 8, 2018, 12:16pm UTC](https://discuss.elastic.co/t/elastic-install-and-run-root-or-not/151323 "2018-10-08T12:16:45Z")
I am a little confused. I have read you need to install Elastic as root and others say you must not. Some say install as root but run as another user. The docs aren't entire clear on this. I have to do this for versions… --- ## [Shrink index from Lucene 6 to Lucene 7](https://discuss.elastic.co/t/shrink-index-from-lucene-6-to-lucene-7/151176)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 5\ **Last updated:** [October 8, 2018, 11:31am UTC](https://discuss.elastic.co/t/shrink-index-from-lucene-6-to-lucene-7/151176 "2018-10-08T11:31:02Z")
hi all, trying to shrink indices created with Lucene 6 into the newest Elasticsearch version, I'm facing this error: nested: IllegalArgumentException\[Cannot use addIndexes(Directory) with indexes that have been create… --- ## [Best config for Performance](https://discuss.elastic.co/t/best-config-for-performance/151109)
**Author:** [@merceskoba](https://discuss.elastic.co/u/merceskoba)\ **Replies:** 10\ **Last updated:** [October 8, 2018, 11:03am UTC](https://discuss.elastic.co/t/best-config-for-performance/151109 "2018-10-08T11:03:31Z")
Hello, I have 1 dedicated server for Elasticsearch. Here's the detailed informations Elasticsearch 4 cores; 16GB memory I believe that i need to setup Graylog2 and Elasticsearch config. Graylog2 config (/etc/defau… --- ## [Accedentally deleted /var/log/elasticsearch/elasticsearch.log file. how to recreate it](https://discuss.elastic.co/t/accedentally-deleted-var-log-elasticsearch-elasticsearch-log-file-how-to-recreate-it/151436)
**Author:** [@idrees](https://discuss.elastic.co/u/idrees)\ **Replies:** 0\ **Last updated:** [October 8, 2018, 10:51am UTC](https://discuss.elastic.co/t/accedentally-deleted-var-log-elasticsearch-elasticsearch-log-file-how-to-recreate-it/151436 "2018-10-08T10:51:21Z")
dear all, i have installed elastic search 6.4. i accedentally deleted the /var/log/elasticsearch/elasticsearch.log file. i have tried to restart the elasticsearch service and the system itself, but it is not recreating … --- ## [Time difference between two logs by same id](https://discuss.elastic.co/t/time-difference-between-two-logs-by-same-id/151427)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 0\ **Last updated:** [October 8, 2018, 10:01am UTC](https://discuss.elastic.co/t/time-difference-between-two-logs-by-same-id/151427 "2018-10-08T10:01:02Z")
hi elk team is that possible to subtract two dates by id in painless script? eg: if possible, plz kindly share me sample. many thanks! --- ## [Calculate two timestamps difference using uniqueid in elasticsearch query](https://discuss.elastic.co/t/calculate-two-timestamps-difference-using-uniqueid-in-elasticsearch-query/151138)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 4\ **Last updated:** [October 8, 2018, 9:59am UTC](https://discuss.elastic.co/t/calculate-two-timestamps-difference-using-uniqueid-in-elasticsearch-query/151138 "2018-10-08T09:59:05Z")
hi elk team, is it possible to calculate two timestamps difference using uniqueid in elasticsearch query? many thanks!! --- ## [Elasticsearch Query to fetch specific fields from the metricbeat index](https://discuss.elastic.co/t/elasticsearch-query-to-fetch-specific-fields-from-the-metricbeat-index/151420)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 0\ **Last updated:** [October 8, 2018, 9:38am UTC](https://discuss.elastic.co/t/elasticsearch-query-to-fetch-specific-fields-from-the-metricbeat-index/151420 "2018-10-08T09:38:55Z")
Hi All, I am using metricbeat to monitor the system metrics like cpu, process, memory etc.. and the data is sending to elasticsearch directly and I am trying to write elasticsearch query to fetch the specific fields fro… --- ## [Cannot update templates - template upgrade service](https://discuss.elastic.co/t/cannot-update-templates-template-upgrade-service/151415)
**Author:** [@tbr-sparklane](https://discuss.elastic.co/u/tbr-sparklane)\ **Replies:** 0\ **Last updated:** [October 8, 2018, 9:23am UTC](https://discuss.elastic.co/t/cannot-update-templates-template-upgrade-service/151415 "2018-10-08T09:23:39Z")
Hello, Using elasticsearch 6.4.2 I cannot update index templates. Here are the logs just after the update attempt (no error returned) : \[2018-10-04T09:38:29,289\]\[INFO \]\[o.e.c.m.MetaDataIndexTemplateService\] \[i-0ff969f6… --- ## [How to define field alias to nested objects](https://discuss.elastic.co/t/how-to-define-field-alias-to-nested-objects/151417)
**Author:** [@Mahendra\_Shinde](https://discuss.elastic.co/u/Mahendra_Shinde)\ **Replies:** 0\ **Last updated:** [October 8, 2018, 9:26am UTC](https://discuss.elastic.co/t/how-to-define-field-alias-to-nested-objects/151417 "2018-10-08T09:26:33Z")
Hi, I have mapping like this { "mappings": { "my\_data": { "properties": { emotion\_json": { "type": "nested", "properties": { "total\_count": { "type": "integer" … --- ## [Search latency & index latency for elasticsearch](https://discuss.elastic.co/t/search-latency-index-latency-for-elasticsearch/150901)
**Author:** [@ankur\_singla](https://discuss.elastic.co/u/ankur_singla)\ **Replies:** 1\ **Last updated:** [October 8, 2018, 9:07am UTC](https://discuss.elastic.co/t/search-latency-index-latency-for-elasticsearch/150901 "2018-10-08T09:07:29Z")
We are continuously getting latency in both search & indexing. We are having a cluster of 15 nodes with 3 master eligible & rest 12 are data nodes each having 30 GB RAM and we have a traffic of 300 concurrent users. Any … --- ## [Search query in nested fields with must "AND" "OR" condition](https://discuss.elastic.co/t/search-query-in-nested-fields-with-must-and-or-condition/149148)
**Author:** [@myzeest](https://discuss.elastic.co/u/myzeest)\ **Replies:** 0\ **Last updated:** [September 19, 2018, 3:23pm UTC](https://discuss.elastic.co/t/search-query-in-nested-fields-with-must-and-or-condition/149148 "2018-09-19T15:23:34Z")
Hi Guys, I’m using Elasticsearch 6.3. I have created an index with nested fields. My structure is looks like as under: unit\_id “Integer” unit\_name “Text” availability \[Nested\] cal\_date “Date” is\_block “Integer” un… --- ## [Repository migration](https://discuss.elastic.co/t/repository-migration/151287)
**Author:** [@vld53](https://discuss.elastic.co/u/vld53)\ **Replies:** 1\ **Last updated:** [October 8, 2018, 9:03am UTC](https://discuss.elastic.co/t/repository-migration/151287 "2018-10-08T09:03:50Z")
Hello! I have the follow issue. I deleted repo from ES 2.4. Then I added repo to ES 5.6 but ES 5.6 doesn't see any snapshots which were at repo of ES 2.4. Then I tried to change ES 2.4 to readonly repo but now I don't lo… --- ## [ES 5.x Version Conflicts in Bulk Upsert](https://discuss.elastic.co/t/es-5-x-version-conflicts-in-bulk-upsert/151407)
**Author:** [@Ad4mJ](https://discuss.elastic.co/u/Ad4mJ)\ **Replies:** 0\ **Last updated:** [October 8, 2018, 8:56am UTC](https://discuss.elastic.co/t/es-5-x-version-conflicts-in-bulk-upsert/151407 "2018-10-08T08:56:35Z")
Running 5.5.6 and using the \_bulk method with the version type external\_gte returns this conflict error "type": "version\_conflict\_engine\_exception", "reason": "\[indexname\]\[12701\]: version conflict, current version \[333… --- ## [ELK LOG rotation](https://discuss.elastic.co/t/elk-log-rotation/151389)
**Author:** [@abhinav.dwivedi](https://discuss.elastic.co/u/abhinav.dwivedi)\ **Replies:** 1\ **Last updated:** [October 8, 2018, 6:47am UTC](https://discuss.elastic.co/t/elk-log-rotation/151389 "2018-10-08T06:47:19Z")
Hi I have indexes around 200 GB in all my 4 host so around 800 GB data in my ELK cluster. So how can i rotate my ELK logs keep 3-month data in my clsuter and older should be pushed some where else. Regards Abhinav D --- ## [ES Snapshot on Minio](https://discuss.elastic.co/t/es-snapshot-on-minio/151382)
**Author:** [@valentin2105](https://discuss.elastic.co/u/valentin2105)\ **Replies:** 1\ **Last updated:** [October 8, 2018, 6:02am UTC](https://discuss.elastic.co/t/es-snapshot-on-minio/151382 "2018-10-08T06:02:49Z")
Hi, I'm currently trying to snapshot my cluster to self hosted Minio instance (s3-like app). It seem doesn't work with setting the s3.client.default.endpoint or by adding "endpoint" in the JSON of the Snapshot's PUT. … --- ## [Manually insert logs](https://discuss.elastic.co/t/manually-insert-logs/151380)
**Author:** [@ariesow](https://discuss.elastic.co/u/ariesow)\ **Replies:** 2\ **Last updated:** [October 8, 2018, 4:01am UTC](https://discuss.elastic.co/t/manually-insert-logs/151380 "2018-10-08T04:01:46Z")
Hi, I have a question on putting log into ELK for devices what does not write logs elsewhere but only on its buffer. While we can export out the log into files manually, can we also manually input this file to ELK for l… --- ## [Week of the year aggregation](https://discuss.elastic.co/t/week-of-the-year-aggregation/150113)
**Author:** [@paulohss](https://discuss.elastic.co/u/paulohss)\ **Replies:** 0\ **Last updated:** [September 27, 2018, 5:01am UTC](https://discuss.elastic.co/t/week-of-the-year-aggregation/150113 "2018-09-27T05:01:03Z")
Hi guys, I'm trying to get the week of the years using a painless script (below) def date = ZonedDateTime.ofInstant(Instant.ofEpochMilli(doc\['DATE\_FIELD'\].value.millis), ZoneId.of(UTC)); DayOfWeek dayOfWeek = DayOfWee… --- ## [How to customize the summary report?](https://discuss.elastic.co/t/how-to-customize-the-summary-report/150134)
**Author:** [@Todd](https://discuss.elastic.co/u/Todd)\ **Replies:** 9\ **Last updated:** [October 8, 2018, 2:40am UTC](https://discuss.elastic.co/t/how-to-customize-the-summary-report/150134 "2018-10-08T02:40:04Z")
now, I have a pressure measurement scenarios with a set of tests, and each test (with different variable) should be run once to completion, one after another. So, the trial-timestamp of each test is different.when I ana… --- ## [Why does the search active threads equal 0 in kibana](https://discuss.elastic.co/t/why-does-the-search-active-threads-equal-0-in-kibana/151376)
**Author:** [@minhua1983](https://discuss.elastic.co/u/minhua1983)\ **Replies:** 0\ **Last updated:** [October 8, 2018, 2:29am UTC](https://discuss.elastic.co/t/why-does-the-search-active-threads-equal-0-in-kibana/151376 "2018-10-08T02:29:05Z")
I set the search queue capacity up to 2000 a few days ago. Why does the search active threads equal 0 when the search queue is over than 2000? When I used kibana to check my dashboard, I got the error info below: My… --- ## [Successful Deposit Query advice](https://discuss.elastic.co/t/successful-deposit-query-advice/150644)
**Author:** [@Inammathe\_Inna](https://discuss.elastic.co/u/Inammathe_Inna)\ **Replies:** 2\ **Last updated:** [October 8, 2018, 12:11am UTC](https://discuss.elastic.co/t/successful-deposit-query-advice/150644 "2018-10-08T00:11:35Z")
Hey guys! I am pretty sure I am in the wrong mindset for this sort of query so I would appreciate any nudges in the right direction So my use case: I want all CreditCardDeposit requests where the response (same UUID … --- ## [Elastic search wrapper query not works with base64 encoded string](https://discuss.elastic.co/t/elastic-search-wrapper-query-not-works-with-base64-encoded-string/151354)
**Author:** [@raja\_augstin](https://discuss.elastic.co/u/raja_augstin)\ **Replies:** 0\ **Last updated:** [October 7, 2018, 1:05pm UTC](https://discuss.elastic.co/t/elastic-search-wrapper-query-not-works-with-base64-encoded-string/151354 "2018-10-07T13:05:40Z")
elastic search wrapper query not works with base64 encoded string ES version : 5.2.3 curl -XPOST 'http://localhost:9200/entitymaster\_qa\_t4/\_search' -d '{ "query" : { "wrapper" : { "query" : "W0NAMTZiN2MzYw==" } } … --- ## [Using Elastic Search in RapidMiner](https://discuss.elastic.co/t/using-elastic-search-in-rapidminer/151344)
**Author:** [@morita](https://discuss.elastic.co/u/morita)\ **Replies:** 0\ **Last updated:** [October 7, 2018, 10:19am UTC](https://discuss.elastic.co/t/using-elastic-search-in-rapidminer/151344 "2018-10-07T10:19:30Z")
I connect to elastic search from RapidMiner studio by CData but I have limit, I can't read more than 10000 data. I fix the elastic setting about this limitation but still I have this problem in RapidMiner. Could you ple… --- ## [Set target nodes where shards are created to?](https://discuss.elastic.co/t/set-target-nodes-where-shards-are-created-to/151329)
**Author:** [@af615dbd55cac2cacf32](https://discuss.elastic.co/u/af615dbd55cac2cacf32)\ **Replies:** 2\ **Last updated:** [October 7, 2018, 7:04am UTC](https://discuss.elastic.co/t/set-target-nodes-where-shards-are-created-to/151329 "2018-10-07T07:04:14Z")
hello, i have one question about shard location. Situation: we do have currently 6data nodes as 6 VMs (virtual machine) on 3 actual hosts(each host currently have 1 hot node and 1warm node). we are planning to add 52 … --- ## [Collapse inner hits](https://discuss.elastic.co/t/collapse-inner-hits/151337)
**Author:** [@zouxiang](https://discuss.elastic.co/u/zouxiang)\ **Replies:** 0\ **Last updated:** [October 7, 2018, 6:56am UTC](https://discuss.elastic.co/t/collapse-inner-hits/151337 "2018-10-07T06:56:10Z")
I use collapse to get goods with the lowest price: GET xxx/sku/\_search { "from": 0, "size": 10, "sort": \[ { "firstUpTime": { "order": "desc" } } \], "collapse": { "field": "goods… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1524) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1526)