# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1535

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1536

---

## [How to configure elasticserch on cloud?](https://discuss.elastic.co/t/how-to-configure-elasticserch-on-cloud/149938)

<div class="topic-metadata">

**Author:** [@johnrabi](https://discuss.elastic.co/u/johnrabi)\
**Replies:** 1\
**Last updated:** [September 27, 2018, 1:33pm UTC](https://discuss.elastic.co/t/how-to-configure-elasticserch-on-cloud/149938 "2018-09-27T13:33:57Z")

</div>

Hi Team, can anyone help me to resolve? i have installed elasticsearch 6 in my local, and created some indexes, that index having more datas, i need to configure and maintain in cloud, provide me the steps how to do …

---

## [Nested example from documentation](https://discuss.elastic.co/t/nested-example-from-documentation/150203)

<div class="topic-metadata">

**Author:** [@Vladimir](https://discuss.elastic.co/u/Vladimir)\
**Replies:** 0\
**Last updated:** [September 27, 2018, 1:32pm UTC](https://discuss.elastic.co/t/nested-example-from-documentation/150203 "2018-09-27T13:32:52Z")

</div>

Hello, I am starting with Elastic and now I am reading about nested sorting. https://www.elastic.co/guide/en/elasticsearch/reference/current/search-request-sort.html#\_nested\_sorting\_examples There is an example code whic…

---

## [Advancing alert using watcher](https://discuss.elastic.co/t/advancing-alert-using-watcher/150048)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 9\
**Last updated:** [September 27, 2018, 1:00pm UTC](https://discuss.elastic.co/t/advancing-alert-using-watcher/150048 "2018-09-27T13:00:15Z")

</div>

HI Team, I'm very new watcher part and i want to create one alert, please help me on this alert. My scenario: i want to compare one field which i stored on the index for certain time period. for example: In the 1m of…

---

## [Migrate the machine learning job from one environment to other](https://discuss.elastic.co/t/migrate-the-machine-learning-job-from-one-environment-to-other/150070)

<div class="topic-metadata">

**Author:** [@chandra0651](https://discuss.elastic.co/u/chandra0651)\
**Replies:** 1\
**Last updated:** [September 27, 2018, 12:47pm UTC](https://discuss.elastic.co/t/migrate-the-machine-learning-job-from-one-environment-to-other/150070 "2018-09-27T12:47:34Z")

</div>

Hello I know there is a way to import and export the visualization , dashboards and saved searched from one environment to other, is there a way same where we can download a ML job from environment and same can be import…

---

## [Elasticsearch service fail afte upgrade](https://discuss.elastic.co/t/elasticsearch-service-fail-afte-upgrade/150143)

<div class="topic-metadata">

**Author:** [@xpico](https://discuss.elastic.co/u/xpico)\
**Replies:** 3\
**Last updated:** [September 27, 2018, 12:19pm UTC](https://discuss.elastic.co/t/elasticsearch-service-fail-afte-upgrade/150143 "2018-09-27T12:19:16Z")

</div>

Hi, I upgrade elasticsearch from 6.3 to 6.4 and now i can't start service. I'm on Debian 9. Here systemctl status elasticsearch: elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elas…

---

## [\[internal:discovery/zen/unicast\] is unauthorized for user \[anonymous\_user\]](https://discuss.elastic.co/t/internal-discovery-zen-unicast-is-unauthorized-for-user-anonymous-user/148321)

<div class="topic-metadata">

**Author:** [@sukeshss](https://discuss.elastic.co/u/sukeshss)\
**Replies:** 3\
**Last updated:** [September 27, 2018, 12:06pm UTC](https://discuss.elastic.co/t/internal-discovery-zen-unicast-is-unauthorized-for-user-anonymous-user/148321 "2018-09-27T12:06:42Z")

</div>

I have configured X-Pack in my ES Cluster and enabled anonymous\_user with the following privileges, '{"cluster":\["monitor","monitor\_ml","monitor\_watcher","cluster:admin/xpack/monitoring/bulk","internal:discovery/zen/uni…

---

## [Correlate data and metadata](https://discuss.elastic.co/t/correlate-data-and-metadata/150190)

<div class="topic-metadata">

**Author:** [@miki72](https://discuss.elastic.co/u/miki72)\
**Replies:** 0\
**Last updated:** [September 27, 2018, 11:50am UTC](https://discuss.elastic.co/t/correlate-data-and-metadata/150190 "2018-09-27T11:50:57Z")

</div>

Hi, I have logs files, each representing output of a test. Each log file contains 5000-10000 lines, and is accompanied by another file which contains metadata about the test e.g. OS version, Platform etc (about 10 fiel…

---

## [ES nodes should talk on TCP or HTTP?](https://discuss.elastic.co/t/es-nodes-should-talk-on-tcp-or-http/150172)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 2\
**Last updated:** [September 27, 2018, 11:46am UTC](https://discuss.elastic.co/t/es-nodes-should-talk-on-tcp-or-http/150172 "2018-09-27T11:46:53Z")

</div>

Setup is 3 master nodes 2 coordinating nodes 2 data nodes Currently i have below property set on all nodes and i assume my nodes talk on HTTP: http.cors.allow-origin: "\*" http.cors.enabled: true Query: Is it wort…

---

## [Kerbores Authentication in Elasticsearch](https://discuss.elastic.co/t/kerbores-authentication-in-elasticsearch/150158)

<div class="topic-metadata">

**Author:** [@Hemant\_Gupta](https://discuss.elastic.co/u/Hemant_Gupta)\
**Replies:** 2\
**Last updated:** [September 27, 2018, 11:35am UTC](https://discuss.elastic.co/t/kerbores-authentication-in-elasticsearch/150158 "2018-09-27T11:35:50Z")

</div>

Hi, Can anyone help with implementaion of Kerebores Authentication in Elasticsearch if its best security we can provide by means of token..Do please share any blogs..

---

## [Scroll time increment effect on Elastic Search](https://discuss.elastic.co/t/scroll-time-increment-effect-on-elastic-search/150178)

<div class="topic-metadata">

**Author:** [@AMIT\_KEWAL](https://discuss.elastic.co/u/AMIT_KEWAL)\
**Replies:** 1\
**Last updated:** [September 27, 2018, 11:13am UTC](https://discuss.elastic.co/t/scroll-time-increment-effect-on-elastic-search/150178 "2018-09-27T11:13:17Z")

</div>

I am working on a project using ElasticSearch and querying it to fetch the member information. It has ~30 Lakhs records. Basically, I am running a campaign for 20L users and the user data is present on elasticsearch6.2.…

---

## [Limit dynamic field mapping](https://discuss.elastic.co/t/limit-dynamic-field-mapping/150183)

<div class="topic-metadata">

**Author:** [@Max\_K](https://discuss.elastic.co/u/Max_K)\
**Replies:** 0\
**Last updated:** [September 27, 2018, 11:11am UTC](https://discuss.elastic.co/t/limit-dynamic-field-mapping/150183 "2018-09-27T11:11:06Z")

</div>

Hi all! Please clarify me, how to setup dynamic field mapping only for top levels? Now i have this teamplate: { "template": "dash-\*", "index\_patterns": \["dash-\*"\], "settings": { "index":…

---

## [How to write a simple nested query for this case?](https://discuss.elastic.co/t/how-to-write-a-simple-nested-query-for-this-case/150169)

<div class="topic-metadata">

**Author:** [@ali\_houshyaripour](https://discuss.elastic.co/u/ali_houshyaripour)\
**Replies:** 1\
**Last updated:** [September 27, 2018, 11:00am UTC](https://discuss.elastic.co/t/how-to-write-a-simple-nested-query-for-this-case/150169 "2018-09-27T11:00:13Z")

</div>

Hi, I have a place model that it has hours for week day as you see in below, Now I want to write a query to get places that open now (pass hour and minute as separate parameters to query), but don't know how to write a …

---

## [Changing Document Ranking](https://discuss.elastic.co/t/changing-document-ranking/149719)

<div class="topic-metadata">

**Author:** [@katiyar](https://discuss.elastic.co/u/katiyar)\
**Replies:** 1\
**Last updated:** [September 27, 2018, 10:18am UTC](https://discuss.elastic.co/t/changing-document-ranking/149719 "2018-09-27T10:18:08Z")

</div>

Hi, I have 100 documents in my index and now if i am searching for a word then i am getting 10 results . For example 9th result is more appropriate for me so now i want to change ranking for 9th results so that next tim…

---

## [ElasticSearch Range query with text type](https://discuss.elastic.co/t/elasticsearch-range-query-with-text-type/149789)

<div class="topic-metadata">

**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\
**Replies:** 1\
**Last updated:** [September 27, 2018, 9:58am UTC](https://discuss.elastic.co/t/elasticsearch-range-query-with-text-type/149789 "2018-09-27T09:58:55Z")

</div>

Hi there, I have created the index by using the following mapping: put test1 { "mappings": { "type1": { "properties": { "age": { "type": "text", "fields": { "raw": { "type": "keyword",…

---

## [Querying results of an aggregation](https://discuss.elastic.co/t/querying-results-of-an-aggregation/149984)

<div class="topic-metadata">

**Author:** [@diogo.gsa](https://discuss.elastic.co/u/diogo.gsa)\
**Replies:** 1\
**Last updated:** [September 27, 2018, 9:43am UTC](https://discuss.elastic.co/t/querying-results-of-an-aggregation/149984 "2018-09-27T09:43:19Z")

</div>

Is there a way to, in a single Elasticsearch query expression, perform both an aggregation and then execute a bool query over the resultset produced by that aggregation? For instance, consider the following dataset and …

---

## [Contains Query or Partial matching in Elasticsearch](https://discuss.elastic.co/t/contains-query-or-partial-matching-in-elasticsearch/150129)

<div class="topic-metadata">

**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\
**Replies:** 1\
**Last updated:** [September 27, 2018, 9:00am UTC](https://discuss.elastic.co/t/contains-query-or-partial-matching-in-elasticsearch/150129 "2018-09-27T09:00:39Z")

</div>

Hi all, I'm looking to search a word say "amend" which may be present in data as "amending", "amendment" or even "\*amend". Which is the best method to search words like these? I know wildcard can achieve this but I am…

---

## [Unclear aggregation results - version 5.3](https://discuss.elastic.co/t/unclear-aggregation-results-version-5-3/148346)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 6\
**Last updated:** [September 27, 2018, 8:46am UTC](https://discuss.elastic.co/t/unclear-aggregation-results-version-5-3/148346 "2018-09-27T08:46:51Z")

</div>

can anyone please explain why I'm getting these 2 buckets when running the given query?

---

## [ElasticSearch match query to field that contains number](https://discuss.elastic.co/t/elasticsearch-match-query-to-field-that-contains-number/150100)

<div class="topic-metadata">

**Author:** [@Timotius\_Pamungkas](https://discuss.elastic.co/u/Timotius_Pamungkas)\
**Replies:** 1\
**Last updated:** [September 27, 2018, 8:33am UTC](https://discuss.elastic.co/t/elasticsearch-match-query-to-field-that-contains-number/150100 "2018-09-27T08:33:42Z")

</div>

In my data, I have field name that contains values like this 1234\_Customer xxx 2345\_Customer yyy 5678\_Customer zzz When I'm trying to do match query with text, it works { "query": { "match": { …

---

## [Searching for a particular value in the field](https://discuss.elastic.co/t/searching-for-a-particular-value-in-the-field/150138)

<div class="topic-metadata">

**Author:** [@vinay\_2498](https://discuss.elastic.co/u/vinay_2498)\
**Replies:** 0\
**Last updated:** [September 27, 2018, 7:48am UTC](https://discuss.elastic.co/t/searching-for-a-particular-value-in-the-field/150138 "2018-09-27T07:48:00Z")

</div>

Hi, I have a network flow data which contain destination ip address, source ip address and tcp\_flag fileds. Tcp\_flag field contains different values like { "tcp\_flag":\[ACK, SYN, RST\] } I want to configure a job whic…

---

## [Binde Elasticsearch with local Ip](https://discuss.elastic.co/t/binde-elasticsearch-with-local-ip/150127)

<div class="topic-metadata">

**Author:** [@Arpan.S](https://discuss.elastic.co/u/Arpan.S)\
**Replies:** 1\
**Last updated:** [September 27, 2018, 7:42am UTC](https://discuss.elastic.co/t/binde-elasticsearch-with-local-ip/150127 "2018-09-27T07:42:08Z")

</div>

Hi, I'm using Elasticsearch6.4.1 and I want to access the database from another machine in my local network using my local IP address. For that I 've made few changes in my elasticsearch.yml file which are shown blow: …

---

## [How to connect Elasticsearch to Kafka?](https://discuss.elastic.co/t/how-to-connect-elasticsearch-to-kafka/149862)

<div class="topic-metadata">

**Author:** [@Misterlu](https://discuss.elastic.co/u/Misterlu)\
**Replies:** 3\
**Last updated:** [September 27, 2018, 7:41am UTC](https://discuss.elastic.co/t/how-to-connect-elasticsearch-to-kafka/149862 "2018-09-27T07:41:45Z")

</div>

Hi, i want to push data in Elasticsearch to kafka topic, with a connector I see for kafka to elasticsearch but me i want elasticsearch to kafka I test with a plugin jar but is not work. Thanks you for your help^^

---

## [How to install x-pack?](https://discuss.elastic.co/t/how-to-install-x-pack/150123)

<div class="topic-metadata">

**Author:** [@muthu\_kumar1](https://discuss.elastic.co/u/muthu_kumar1)\
**Replies:** 7\
**Last updated:** [September 27, 2018, 7:37am UTC](https://discuss.elastic.co/t/how-to-install-x-pack/150123 "2018-09-27T07:37:12Z")

</div>

I have installed elasticsearch,kibana, logstash in my linux server and able to retrive and monitor logs.Need support to install x-pack to use kibana with credentials.please help.

---

## [My cluster health showing :cluster health: yellow (16 of 26)](https://discuss.elastic.co/t/my-cluster-health-showing-cluster-health-yellow-16-of-26/150117)

<div class="topic-metadata">

**Author:** [@johnrabi](https://discuss.elastic.co/u/johnrabi)\
**Replies:** 2\
**Last updated:** [September 27, 2018, 7:19am UTC](https://discuss.elastic.co/t/my-cluster-health-showing-cluster-health-yellow-16-of-26/150117 "2018-09-27T07:19:21Z")

</div>

Hi Team, can anyone help me to resolve this issue and explain about this My cluster health showing cluster health: yellow (16 of 26) { "cluster\_name" : "elasticsearch", "status" : "yellow", "timed\_out" : false, "n…

---

## [ElasticSearch Monitoring](https://discuss.elastic.co/t/elasticsearch-monitoring/150119)

<div class="topic-metadata">

**Author:** [@vishnuduttpv](https://discuss.elastic.co/u/vishnuduttpv)\
**Replies:** 3\
**Last updated:** [September 27, 2018, 7:15am UTC](https://discuss.elastic.co/t/elasticsearch-monitoring/150119 "2018-09-27T07:15:50Z")

</div>

I have tried the X-Pack Monitoring feature in the ES using the kibana. I also read about the ES Marvel tool for ES Monitoring. Does both the tool perform the same functionality? If I have a ES X-Pack license , again w…

---

## [Caused by: java.lang.NoClassDefFoundError: org/elasticsearch/common/xcontent/DeprecationHandler](https://discuss.elastic.co/t/caused-by-java-lang-noclassdeffounderror-org-elasticsearch-common-xcontent-deprecationhandler/149553)

<div class="topic-metadata">

**Author:** [@Pankaj\_Sharma](https://discuss.elastic.co/u/Pankaj_Sharma)\
**Replies:** 3\
**Last updated:** [September 27, 2018, 7:09am UTC](https://discuss.elastic.co/t/caused-by-java-lang-noclassdeffounderror-org-elasticsearch-common-xcontent-deprecationhandler/149553 "2018-09-27T07:09:06Z")

</div>

Hi, I am building a very basic spring app using java elasticsearch high level client. I have following elastic search dependency in build.gradle. compile 'org.elasticsearch.client:elasticsearch-rest-high-level-client:6…

---

## [ElasticSearch Search Issues](https://discuss.elastic.co/t/elasticsearch-search-issues/150040)

<div class="topic-metadata">

**Author:** [@Nikita\_Duggal](https://discuss.elastic.co/u/Nikita_Duggal)\
**Replies:** 1\
**Last updated:** [September 27, 2018, 6:56am UTC](https://discuss.elastic.co/t/elasticsearch-search-issues/150040 "2018-09-27T06:56:36Z")

</div>

I am using match phrase query to find in ES. but i have noticed that the results returned are not appropriate. code -- res = es.search(index=('indice\_1'), body = { "\_source":\["content"\], "query": { "m…

---

## [Indexing large amount of data due to Autosuggestion and Highlighting](https://discuss.elastic.co/t/indexing-large-amount-of-data-due-to-autosuggestion-and-highlighting/149942)

<div class="topic-metadata">

**Author:** [@pranav24](https://discuss.elastic.co/u/pranav24)\
**Replies:** 0\
**Last updated:** [September 26, 2018, 7:26am UTC](https://discuss.elastic.co/t/indexing-large-amount-of-data-due-to-autosuggestion-and-highlighting/149942 "2018-09-26T07:26:20Z")

</div>

Hi all, I am indexing thousands of documents which contains hundreds of metadata with one field containing over 5000 words and rest of the fields containing 3-5 words each. I am using Edge Tokenizer to perform autosugg…

---

## [Couldn't find any Elasticsearch data in Kibana](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data-in-kibana/149834)

<div class="topic-metadata">

**Author:** [@Kotresh](https://discuss.elastic.co/u/Kotresh)\
**Replies:** 4\
**Last updated:** [September 27, 2018, 5:13am UTC](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data-in-kibana/149834 "2018-09-27T05:13:21Z")

</div>

Hi, I am trying to implement Elasticsearch for my spring boot application. But some how In Kibana, when i try to configure index, I am not able find any elasticsearch data I made sure that, my elasticsearch, Kibana an…

---

## [How to create multiple input controls with a nested data from JSON in Kibana](https://discuss.elastic.co/t/how-to-create-multiple-input-controls-with-a-nested-data-from-json-in-kibana/150120)

<div class="topic-metadata">

**Author:** [@Nico92](https://discuss.elastic.co/u/Nico92)\
**Replies:** 0\
**Last updated:** [September 27, 2018, 5:44am UTC](https://discuss.elastic.co/t/how-to-create-multiple-input-controls-with-a-nested-data-from-json-in-kibana/150120 "2018-09-27T05:44:21Z")

</div>

Hey guys, I'm trying to show my nested data in multiple input controls in Kibana. All of them depends on the next one. All of my data are placed in one node. How I created my index: PUT structure { "settings": { …

---

## [Multi cluster / multi-tenancy elastic environment](https://discuss.elastic.co/t/multi-cluster-multi-tenancy-elastic-environment/150099)

<div class="topic-metadata">

**Author:** [@btom](https://discuss.elastic.co/u/btom)\
**Replies:** 1\
**Last updated:** [September 27, 2018, 5:38am UTC](https://discuss.elastic.co/t/multi-cluster-multi-tenancy-elastic-environment/150099 "2018-09-27T05:38:33Z")

</div>

Hi, I want to store data of three different customer on to same elastic host. Just wondering what is the best way to achieve this with security. ( The data of all customer should be secure and not visible to each other)…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1534)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1536)
