# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1554

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1555

---

## [Search multi-indices(having some same field name), how to search cross indices](https://discuss.elastic.co/t/search-multi-indices-having-some-same-field-name-how-to-search-cross-indices/144578)

<div class="topic-metadata">

**Author:** [@sam5530](https://discuss.elastic.co/u/sam5530)\
**Replies:** 1\
**Last updated:** [September 9, 2018, 10:37pm UTC](https://discuss.elastic.co/t/search-multi-indices-having-some-same-field-name-how-to-search-cross-indices/144578 "2018-09-09T22:37:18Z")

</div>

Hi, Have some question on cross multi-indices search (using version 6.3) Say, two indices (on purpose, no merge) with one common field name subject Index1 field: subject, ......... Index2 field: subject,........ I'…

---

## [Does the shard (Elasticsearch) have its own JVM settings](https://discuss.elastic.co/t/does-the-shard-elasticsearch-have-its-own-jvm-settings/147817)

<div class="topic-metadata">

**Author:** [@nages](https://discuss.elastic.co/u/nages)\
**Replies:** 3\
**Last updated:** [September 9, 2018, 9:34pm UTC](https://discuss.elastic.co/t/does-the-shard-elasticsearch-have-its-own-jvm-settings/147817 "2018-09-09T21:34:29Z")

</div>

I am going through ES documentation and saw this following. \`Each shard is in itself a fully-functional and independent "index" that can be hosted on any node in the cluster.\` Does "fully functional" means it is a "sep…

---

## [Array -Query issue(Indexing vs query)](https://discuss.elastic.co/t/array-query-issue-indexing-vs-query/144363)

<div class="topic-metadata">

**Author:** [@snigdharao](https://discuss.elastic.co/u/snigdharao)\
**Replies:** 1\
**Last updated:** [September 9, 2018, 9:33pm UTC](https://discuss.elastic.co/t/array-query-issue-indexing-vs-query/144363 "2018-09-09T21:33:13Z")

</div>

Hi , I have an array for field commodity line \[3,35,1,11,12\].I am trying to query the field for autocomplete results and i need output as 3 and 35 when i match with 3.My indexing works fine for all scenarios excpeting a…

---

## [Very slow performance of must\_not with exists in filter](https://discuss.elastic.co/t/very-slow-performance-of-must-not-with-exists-in-filter/144281)

<div class="topic-metadata">

**Author:** [@ShilpiRachna](https://discuss.elastic.co/u/ShilpiRachna)\
**Replies:** 1\
**Last updated:** [September 9, 2018, 9:22pm UTC](https://discuss.elastic.co/t/very-slow-performance-of-must-not-with-exists-in-filter/144281 "2018-09-09T21:22:49Z")

</div>

Hi, We are investigating some slow queries in our Prod environment. We saw that the following filter is much slower than other term queries in query / filter section. "query": { "bool": { "must": {…}, "filter" : { …

---

## [Adding Source Filtering for Includes segment](https://discuss.elastic.co/t/adding-source-filtering-for-includes-segment/144211)

<div class="topic-metadata">

**Author:** [@tatha](https://discuss.elastic.co/u/tatha)\
**Replies:** 1\
**Last updated:** [September 9, 2018, 9:16pm UTC](https://discuss.elastic.co/t/adding-source-filtering-for-includes-segment/144211 "2018-09-09T21:16:28Z")

</div>

I have a customer info with orders in Elastic Search in the following format { "\_index": “customer\_domain\_r4", "\_type": “CustomerData”, "\_id": "6fff6ce8-e792-4047-b636-a1dda0aa2b72", "\_version": 173, "\_score": 3.5…

---

## [Indexing performance degraded after elastic 2.3 index upgraded to 5.6](https://discuss.elastic.co/t/indexing-performance-degraded-after-elastic-2-3-index-upgraded-to-5-6/144192)

<div class="topic-metadata">

**Author:** [@manojnethi14](https://discuss.elastic.co/u/manojnethi14)\
**Replies:** 1\
**Last updated:** [September 9, 2018, 9:13pm UTC](https://discuss.elastic.co/t/indexing-performance-degraded-after-elastic-2-3-index-upgraded-to-5-6/144192 "2018-09-09T21:13:10Z")

</div>

I had a cluster which was running in Elastic 2.3 for a while, we had plans to upgrade to 5.6 and to 6 eventually. We upgraded the cluster to 5.6 using the full cluster restart method. After the upgrade the index that …

---

## [How to add new data to particular field from another index?](https://discuss.elastic.co/t/how-to-add-new-data-to-particular-field-from-another-index/144075)

<div class="topic-metadata">

**Author:** [@cool\_arun](https://discuss.elastic.co/u/cool_arun)\
**Replies:** 1\
**Last updated:** [September 9, 2018, 9:06pm UTC](https://discuss.elastic.co/t/how-to-add-new-data-to-particular-field-from-another-index/144075 "2018-09-09T21:06:57Z")

</div>

I have two index one index having a field called "authorId" and another index have details belongs to that authorid. i want to bring the details to the first index, how to do this efficiently. EXAMPLE: INDEX-1 { "a…

---

## [Insert if not exist or return the existent document](https://discuss.elastic.co/t/insert-if-not-exist-or-return-the-existent-document/144234)

<div class="topic-metadata">

**Author:** [@Ranieri\_Mazili\_de\_Ol](https://discuss.elastic.co/u/Ranieri_Mazili_de_Ol)\
**Replies:** 1\
**Last updated:** [September 9, 2018, 8:46pm UTC](https://discuss.elastic.co/t/insert-if-not-exist-or-return-the-existent-document/144234 "2018-09-09T20:46:34Z")

</div>

unfortunatelly I haven't found the answer after some search and tries... After insert the document below I received the id istiNGUBHVrkxpxfdqML { "person" : { "brid" : "12345", "name" : "Jonh", …

---

## [Add custom/predefined aliases to sort values](https://discuss.elastic.co/t/add-custom-predefined-aliases-to-sort-values/145054)

<div class="topic-metadata">

**Author:** [@Biacode](https://discuss.elastic.co/u/Biacode)\
**Replies:** 0\
**Last updated:** [August 19, 2018, 1:08pm UTC](https://discuss.elastic.co/t/add-custom-predefined-aliases-to-sort-values/145054 "2018-08-19T13:08:18Z")

</div>

Hello, Is there any way to have key =\> value like sort values as a result? Where key is sort field name and value is sort value Currently the sort value result is simply array, which is really inconvenient. For insta…

---

## [Need to find the average on multiple fields by id](https://discuss.elastic.co/t/need-to-find-the-average-on-multiple-fields-by-id/147843)

<div class="topic-metadata">

**Author:** [@rajesh.ramadoss](https://discuss.elastic.co/u/rajesh.ramadoss)\
**Replies:** 0\
**Last updated:** [September 9, 2018, 5:32am UTC](https://discuss.elastic.co/t/need-to-find-the-average-on-multiple-fields-by-id/147843 "2018-09-09T05:32:23Z")

</div>

I need to find the average on multiple fields for each id. Given the data: {id, maths, physics, english } {CS001, 92, 85 , 76} {CS002, 99, 75 , 66} {CS003, 92, 85 , …

---

## [Need to return the most recent record by timestamp](https://discuss.elastic.co/t/need-to-return-the-most-recent-record-by-timestamp/147842)

<div class="topic-metadata">

**Author:** [@rajesh.ramadoss](https://discuss.elastic.co/u/rajesh.ramadoss)\
**Replies:** 0\
**Last updated:** [September 9, 2018, 5:17am UTC](https://discuss.elastic.co/t/need-to-return-the-most-recent-record-by-timestamp/147842 "2018-09-09T05:17:34Z")

</div>

Hello everyone, I need to return the most recent record for every serial by timestamp how can i query that ? For e.g Serial State . Time AP01 . Up . AP02 . Down AP01 . Down AP02 . UP The ou…

---

## [Kibana - filtering data between two csv files](https://discuss.elastic.co/t/kibana-filtering-data-between-two-csv-files/147837)

<div class="topic-metadata">

**Author:** [@lucky\_mathpal](https://discuss.elastic.co/u/lucky_mathpal)\
**Replies:** 0\
**Last updated:** [September 9, 2018, 2:40am UTC](https://discuss.elastic.co/t/kibana-filtering-data-between-two-csv-files/147837 "2018-09-09T02:40:36Z")

</div>

Hi, I have two csv files which I want to use in logstash. I want to filter to achieve this though logstash , File A File B Both the files have one field in common Output to Kibana - \> only the difference of common f…

---

## [Newbie query to return a single doc from every 4 hours of data](https://discuss.elastic.co/t/newbie-query-to-return-a-single-doc-from-every-4-hours-of-data/147277)

<div class="topic-metadata">

**Author:** [@Mark\_Lloyd](https://discuss.elastic.co/u/Mark_Lloyd)\
**Replies:** 2\
**Last updated:** [September 8, 2018, 11:28pm UTC](https://discuss.elastic.co/t/newbie-query-to-return-a-single-doc-from-every-4-hours-of-data/147277 "2018-09-08T23:28:52Z")

</div>

Hi All I'm very new to elastic search. I have an index that is indexing data received by ES every 10 seconds of everyday. Now I want to query that data and filter it on some fields (got that sorted) and return data in …

---

## [Sort by range field](https://discuss.elastic.co/t/sort-by-range-field/147834)

<div class="topic-metadata">

**Author:** [@jaddison](https://discuss.elastic.co/u/jaddison)\
**Replies:** 0\
**Last updated:** [September 8, 2018, 10:51pm UTC](https://discuss.elastic.co/t/sort-by-range-field/147834 "2018-09-08T22:51:08Z")

</div>

I cannot find a canonical answer anywhere to this question. I've seen it asked on this forum with no replies. Using ES 5.6.x, Is it possible make a range field (in my case, a date\_range field) sortable? { "activity-…

---

## [Sanity check fails for plugin if upgrading to Elasticsearch 6.4](https://discuss.elastic.co/t/sanity-check-fails-for-plugin-if-upgrading-to-elasticsearch-6-4/147685)

<div class="topic-metadata">

**Author:** [@Alexander\_Koval](https://discuss.elastic.co/u/Alexander_Koval)\
**Replies:** 1\
**Last updated:** [September 8, 2018, 7:47pm UTC](https://discuss.elastic.co/t/sanity-check-fails-for-plugin-if-upgrading-to-elasticsearch-6-4/147685 "2018-09-08T19:47:01Z")

</div>

I have a plugin: russian & ukrainian language analyzer It has a multiproject configuration. When I tried to upgrade it against Elasticsearch 6.4 I got errors when running tests: :dawg:test -\> class org.gradle.api.task…

---

## [Elasticsearch.yml file is not present after installation](https://discuss.elastic.co/t/elasticsearch-yml-file-is-not-present-after-installation/147825)

<div class="topic-metadata">

**Author:** [@al\_lomax](https://discuss.elastic.co/u/al_lomax)\
**Replies:** 1\
**Last updated:** [September 8, 2018, 5:32pm UTC](https://discuss.elastic.co/t/elasticsearch-yml-file-is-not-present-after-installation/147825 "2018-09-08T17:32:22Z")

</div>

I have installed Elasticsearch version 6.4.0 on Windows Server 2016 using the msi installer. Although, the installer ui confirms the default location of the data, config and log folders, after installation, these are no…

---

## [PDF Search](https://discuss.elastic.co/t/pdf-search/147820)

<div class="topic-metadata">

**Author:** [@ai\_thoughts](https://discuss.elastic.co/u/ai_thoughts)\
**Replies:** 1\
**Last updated:** [September 8, 2018, 2:55pm UTC](https://discuss.elastic.co/t/pdf-search/147820 "2018-09-08T14:55:30Z")

</div>

I am looking into handrolling a large pdf document search via Elastic Search. I am looking into Apache Tika for parsing and then indexing it via Elastic Search. The question is, if I have to locate the specific sections …

---

## [Search with wildcard on index and simpleQueryStringQuery does not work in 6.3 (worked in 2.4)](https://discuss.elastic.co/t/search-with-wildcard-on-index-and-simplequerystringquery-does-not-work-in-6-3-worked-in-2-4/147821)

<div class="topic-metadata">

**Author:** [@jbalaguero](https://discuss.elastic.co/u/jbalaguero)\
**Replies:** 0\
**Last updated:** [September 8, 2018, 2:31pm UTC](https://discuss.elastic.co/t/search-with-wildcard-on-index-and-simplequerystringquery-does-not-work-in-6-3-worked-in-2-4/147821 "2018-09-08T14:31:12Z")

</div>

Hello, I have the following 'SearchRequest', querying all indexes whose names start with '72\_' and searching for those documents where " end \<= '20180830' ". I only need to get the list of document ids that match this q…

---

## [Problems with unmapped nested type in sort](https://discuss.elastic.co/t/problems-with-unmapped-nested-type-in-sort/147813)

<div class="topic-metadata">

**Author:** [@Majo](https://discuss.elastic.co/u/Majo)\
**Replies:** 0\
**Last updated:** [September 8, 2018, 12:29pm UTC](https://discuss.elastic.co/t/problems-with-unmapped-nested-type-in-sort/147813 "2018-09-08T12:29:14Z")

</div>

Hi, I have more elasticsearch indices, some of them have mapped nested field and the other not. Example of an index with nested field: PUT index-nested { "mappings": { "doc": { "properties": { "no…

---

## [Terms Aggregation skips dot(.) character](https://discuss.elastic.co/t/terms-aggregation-skips-dot-character/145864)

<div class="topic-metadata">

**Author:** [@jithintk.speridian](https://discuss.elastic.co/u/jithintk.speridian)\
**Replies:** 2\
**Last updated:** [September 8, 2018, 12:33pm UTC](https://discuss.elastic.co/t/terms-aggregation-skips-dot-character/145864 "2018-09-08T12:33:26Z")

</div>

Hi All, I am facing an issue with elastic search, but not able to fix it for last two days. I have a document product with a field list dynamicAttributes. e.g. dynamicAttributeValues": \[ "S", "Blue Ridge", "10.5", …

---

## [Count unique fields with sum parameter range](https://discuss.elastic.co/t/count-unique-fields-with-sum-parameter-range/145691)

<div class="topic-metadata">

**Author:** [@Smasell](https://discuss.elastic.co/u/Smasell)\
**Replies:** 4\
**Last updated:** [September 8, 2018, 12:22pm UTC](https://discuss.elastic.co/t/count-unique-fields-with-sum-parameter-range/145691 "2018-09-08T12:22:36Z")

</div>

Hi!!! I have my data points where I have two fields: user\_id buy\_price Each user\_id can sent several data points(with different buy\_price value). Could you please help to count user\_id's, grouped by sum their buy\_pr…

---

## [Persian word split](https://discuss.elastic.co/t/persian-word-split/147396)

<div class="topic-metadata">

**Author:** [@Mehrdad\_Mazhari](https://discuss.elastic.co/u/Mehrdad_Mazhari)\
**Replies:** 2\
**Last updated:** [September 8, 2018, 3:56am UTC](https://discuss.elastic.co/t/persian-word-split/147396 "2018-09-08T03:56:10Z")

</div>

Hi, I have two words for example 1." دارو خانه عباسی" 2."داروخانه عباسی" when I search "query": { "match": { "title": "داروخانه" } } my result is just number 2 but i want to show tow words how do I search? t…

---

## [Elasticsearch installation issue - No error in logs, but not seeing anything on 9200](https://discuss.elastic.co/t/elasticsearch-installation-issue-no-error-in-logs-but-not-seeing-anything-on-9200/147812)

<div class="topic-metadata">

**Author:** [@vigneshr35](https://discuss.elastic.co/u/vigneshr35)\
**Replies:** 0\
**Last updated:** [September 8, 2018, 12:01pm UTC](https://discuss.elastic.co/t/elasticsearch-installation-issue-no-error-in-logs-but-not-seeing-anything-on-9200/147812 "2018-09-08T12:01:30Z")

</div>

I am trying to install elasticsearch version 6.2.4 on a Linux machine. I download and extract from https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-6.2.4.tar.gz and post extraction, trying to run it wit…

---

## [Filebeat 5.3 to Logstash 6.3 and ElasticSearch 6.3](https://discuss.elastic.co/t/filebeat-5-3-to-logstash-6-3-and-elasticsearch-6-3/147809)

<div class="topic-metadata">

**Author:** [@pranay\_sankpal](https://discuss.elastic.co/u/pranay_sankpal)\
**Replies:** 0\
**Last updated:** [September 8, 2018, 11:24am UTC](https://discuss.elastic.co/t/filebeat-5-3-to-logstash-6-3-and-elasticsearch-6-3/147809 "2018-09-08T11:24:24Z")

</div>

Hi, Our setup is : filebeat 5.3 logstash 6.3 packetbeat 6.3 metricbeat 6.3 Packetbeat and metricbeat logs are fine and it is working smoothly with no lag at all. But with filebeat there is a lag of 20-30 mins. To…

---

## [Proper way to create index template](https://discuss.elastic.co/t/proper-way-to-create-index-template/147805)

<div class="topic-metadata">

**Author:** [@mladen](https://discuss.elastic.co/u/mladen)\
**Replies:** 0\
**Last updated:** [September 8, 2018, 10:31am UTC](https://discuss.elastic.co/t/proper-way-to-create-index-template/147805 "2018-09-08T10:31:55Z")

</div>

Hi, I need to create custom index templates for my indices. For now I just want to set number of shards. So my question is it OK to define just number of shards for example: PUT \_template/iibraz\_qmraz2 { "index\_patte…

---

## [Update the nested fields in json using partial update or update queries](https://discuss.elastic.co/t/update-the-nested-fields-in-json-using-partial-update-or-update-queries/147798)

<div class="topic-metadata">

**Author:** [@savya\_Dhurve](https://discuss.elastic.co/u/savya_Dhurve)\
**Replies:** 0\
**Last updated:** [September 8, 2018, 5:32am UTC](https://discuss.elastic.co/t/update-the-nested-fields-in-json-using-partial-update-or-update-queries/147798 "2018-09-08T05:32:21Z")

</div>

I am using elasticsearch,i want to update specific fields in json using specific key in my case it's macid,the json looks like this { macid:'mac1234', attri: { data:{ …

---

## [Elasticsearch REST integration test setup](https://discuss.elastic.co/t/elasticsearch-rest-integration-test-setup/147133)

<div class="topic-metadata">

**Author:** [@jmnarloch](https://discuss.elastic.co/u/jmnarloch)\
**Replies:** 2\
**Last updated:** [September 8, 2018, 3:36am UTC](https://discuss.elastic.co/t/elasticsearch-rest-integration-test-setup/147133 "2018-09-08T03:36:55Z")

</div>

I had noticed that in many other questions people are trying to use Elasticsearch test framework to setup integration tests with REST client (either high or low level). I had manage to configure it without any external …

---

## [Request Serialization in NEST 6](https://discuss.elastic.co/t/request-serialization-in-nest-6/147615)

<div class="topic-metadata">

**Author:** [@thespatt](https://discuss.elastic.co/u/thespatt)\
**Replies:** 2\
**Last updated:** [September 8, 2018, 3:36am UTC](https://discuss.elastic.co/t/request-serialization-in-nest-6/147615 "2018-09-08T03:36:26Z")

</div>

I used to be able to log the output of the old Client.Serializer and paste it right into Dev Tools in Kibana 5.x and earlier. Now SourceSerializer.SerializeToString outputs all possible fields with null values and pasti…

---

## [Curator delete\_snapshot always timeout](https://discuss.elastic.co/t/curator-delete-snapshot-always-timeout/147637)

<div class="topic-metadata">

**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Replies:** 8\
**Last updated:** [September 7, 2018, 10:07pm UTC](https://discuss.elastic.co/t/curator-delete-snapshot-always-timeout/147637 "2018-09-07T22:07:27Z")

</div>

Background: Elastic Version 6.2.1 + curator 5.5.1 Azure Storage is used for storing snapshots I'm using curator to delete the snapshots. But it keeps failing with timeout error. Below is the log 2018-09-06 20:42:09,…

---

## [Query Syntax: How to build a multi-field combined query that supports nested documents?](https://discuss.elastic.co/t/query-syntax-how-to-build-a-multi-field-combined-query-that-supports-nested-documents/147789)

<div class="topic-metadata">

**Author:** [@alexu](https://discuss.elastic.co/u/alexu)\
**Replies:** 0\
**Last updated:** [September 7, 2018, 11:48pm UTC](https://discuss.elastic.co/t/query-syntax-how-to-build-a-multi-field-combined-query-that-supports-nested-documents/147789 "2018-09-07T23:48:48Z")

</div>

I am looking for a query syntax that lets me do following search WHERE ( reference MATCH '\<match\_query\>' OR order.number MATCH '\<match\_query\>' OR order.items.comments MATCH '\<match\_query\>' OR ) AND ( reference M…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1553)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1555)
