# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1559

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1560

---

## [AccessControlException while using a custom caching library in x-pack plugin](https://discuss.elastic.co/t/accesscontrolexception-while-using-a-custom-caching-library-in-x-pack-plugin/146428)

<div class="topic-metadata">

**Author:** [@gautu7](https://discuss.elastic.co/u/gautu7)\
**Replies:** 8\
**Last updated:** [September 4, 2018, 8:59pm UTC](https://discuss.elastic.co/t/accesscontrolexception-while-using-a-custom-caching-library-in-x-pack-plugin/146428 "2018-09-04T20:59:55Z")

</div>

Hi, I was trying to implement some custom caching mechanism using the Caffeine library, I got past issues deploying by granting permissions permission java.lang.RuntimePermission "sun.misc.Unsafe"; permission java.la…

---

## [Modify sorting with painless script](https://discuss.elastic.co/t/modify-sorting-with-painless-script/146993)

<div class="topic-metadata">

**Author:** [@aimeos](https://discuss.elastic.co/u/aimeos)\
**Replies:** 2\
**Last updated:** [September 4, 2018, 7:56pm UTC](https://discuss.elastic.co/t/modify-sorting-with-painless-script/146993 "2018-09-04T19:56:44Z")

</div>

We would like to store products including their categories and category positions in a document. One product can be in several categories at different positions. Our thought was to use something like this: index.catalog…

---

## [What is the Gtok Pattern for this xml](https://discuss.elastic.co/t/what-is-the-gtok-pattern-for-this-xml/147263)

<div class="topic-metadata">

**Author:** [@satish161418](https://discuss.elastic.co/u/satish161418)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 7:35pm UTC](https://discuss.elastic.co/t/what-is-the-gtok-pattern-for-this-xml/147263 "2018-09-04T19:35:33Z")

</div>

SOURCE MESSAGEJMS Message In : \<?xml version="1.0" encoding="UTF-8" standalone="yes"?\>\<\> A001 59619 94 579 2018-08-05T23:55:18 2018-08-05T23:55:18 …

---

## [I can't connect to elasticsearch with SSL through PHP](https://discuss.elastic.co/t/i-cant-connect-to-elasticsearch-with-ssl-through-php/147259)

<div class="topic-metadata">

**Author:** [@Andres\_Felipe\_Albarr](https://discuss.elastic.co/u/Andres_Felipe_Albarr)\
**Replies:** 1\
**Last updated:** [September 4, 2018, 7:32pm UTC](https://discuss.elastic.co/t/i-cant-connect-to-elasticsearch-with-ssl-through-php/147259 "2018-09-04T19:32:07Z")

</div>

I´m trying to connect to ES but it's been impossible. that's my code in PHP $hosts = \['https://www.xxxxxxxx.com:6767'\]; $myCert = 'xxxxxxxxxxxxxx/cert.pem'; $client = ClientBuilder::create() // Instantiate a …

---

## [Search Query for excluding a combination of characters and numbers](https://discuss.elastic.co/t/search-query-for-excluding-a-combination-of-characters-and-numbers/146914)

<div class="topic-metadata">

**Author:** [@vshankara](https://discuss.elastic.co/u/vshankara)\
**Replies:** 3\
**Last updated:** [September 4, 2018, 7:15pm UTC](https://discuss.elastic.co/t/search-query-for-excluding-a-combination-of-characters-and-numbers/146914 "2018-09-04T19:15:13Z")

</div>

I have a requirement to query for user information but need to exclude a combination of alphabatical characters and numbers. I could easily do this in a regex but not sure on lucene syntax For eg: need to exclude abc123…

---

## [Disk space, delete-by-query, forcemerge](https://discuss.elastic.co/t/disk-space-delete-by-query-forcemerge/147113)

<div class="topic-metadata">

**Author:** [@tmarly](https://discuss.elastic.co/u/tmarly)\
**Replies:** 5\
**Last updated:** [September 4, 2018, 5:04pm UTC](https://discuss.elastic.co/t/disk-space-delete-by-query-forcemerge/147113 "2018-09-04T17:04:43Z")

</div>

Hi, I have an index with ~ 100k doc. Every 5 minutes, I add in this index ~ 50k docs and delete the same number. This is not that much, however, each time, the disk space increase by ~ 15Mo, so after 12 hours the disk…

---

## [Script\_fields always returns array. how to return an object or simple data type?](https://discuss.elastic.co/t/script-fields-always-returns-array-how-to-return-an-object-or-simple-data-type/146891)

<div class="topic-metadata">

**Author:** [@andrx](https://discuss.elastic.co/u/andrx)\
**Replies:** 1\
**Last updated:** [September 4, 2018, 6:43pm UTC](https://discuss.elastic.co/t/script-fields-always-returns-array-how-to-return-an-object-or-simple-data-type/146891 "2018-09-04T18:43:27Z")

</div>

I noticed that when using script\_fields it always return array of the values that should be returned. I wonder why is this happening and is it possible to just return a non-array data type like an object or bool? Exampl…

---

## [Elasticsearch-dsl (6.2.1) aggs failed to return any buckers](https://discuss.elastic.co/t/elasticsearch-dsl-6-2-1-aggs-failed-to-return-any-buckers/147250)

<div class="topic-metadata">

**Author:** [@TwoDragon](https://discuss.elastic.co/u/TwoDragon)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 6:24pm UTC](https://discuss.elastic.co/t/elasticsearch-dsl-6-2-1-aggs-failed-to-return-any-buckers/147250 "2018-09-04T18:24:38Z")

</div>

Hi, The following search failed to return any results on a Elasticsearch 6.3.2 cluster rs = es.search(index="1234\_index", size=0, body={"query": { "bool": { "must": \[{"match\_all": {}}\] } }, "aggs" : { "well\_groups": …

---

## [Hive integration - Which jar do we need?](https://discuss.elastic.co/t/hive-integration-which-jar-do-we-need/145650)

<div class="topic-metadata">

**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\
**Replies:** 2\
**Last updated:** [September 4, 2018, 5:49pm UTC](https://discuss.elastic.co/t/hive-integration-which-jar-do-we-need/145650 "2018-09-04T17:49:05Z")

</div>

I have downloaded ES hadoop jar. I need to fetch data from Hive tables to ES. There are two jar ES-hadoop and ES-hadoop-hive. Which one to utilise to connect and fetch data from Hive?

---

## [How make our Elastic cluster is secure for replica creation from outside cluster machines?](https://discuss.elastic.co/t/how-make-our-elastic-cluster-is-secure-for-replica-creation-from-outside-cluster-machines/147048)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 1\
**Last updated:** [September 4, 2018, 5:39pm UTC](https://discuss.elastic.co/t/how-make-our-elastic-cluster-is-secure-for-replica-creation-from-outside-cluster-machines/147048 "2018-09-04T17:39:32Z")

</div>

I have an Elasticsearch cluster (6.4.0) with one Master node and one data node . Xpack is enabled in both machines. Both machines are working well . Indexes are available in both machines user:elastic and p/w: change…

---

## [Read.field.include with nested field doesnot really work](https://discuss.elastic.co/t/read-field-include-with-nested-field-doesnot-really-work/147180)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 1\
**Last updated:** [September 4, 2018, 2:33pm UTC](https://discuss.elastic.co/t/read-field-include-with-nested-field-doesnot-really-work/147180 "2018-09-04T14:33:20Z")

</div>

CREATE TEMPORARY TABLE trips USING org.elasticsearch.spark.sql OPTIONS ( nodes "....", port "80", resource "events-2018.09.03/events", read.field.include "client.browser.os" ) select client.browser.os from…

---

## [Querying special characters and symbols for nested and not nested fields](https://discuss.elastic.co/t/querying-special-characters-and-symbols-for-nested-and-not-nested-fields/147242)

<div class="topic-metadata">

**Author:** [@pd\_tester](https://discuss.elastic.co/u/pd_tester)\
**Replies:** 1\
**Last updated:** [September 4, 2018, 4:54pm UTC](https://discuss.elastic.co/t/querying-special-characters-and-symbols-for-nested-and-not-nested-fields/147242 "2018-09-04T16:54:45Z")

</div>

I have these symbols we have successfully persisted data for those but we we're having problems when retrieving those data for both nested and not nested fields. and also with wildcard Can you guys help me how can I c…

---

## [Default operator option logic](https://discuss.elastic.co/t/default-operator-option-logic/147243)

<div class="topic-metadata">

**Author:** [@tfe2012](https://discuss.elastic.co/u/tfe2012)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 4:20pm UTC](https://discuss.elastic.co/t/default-operator-option-logic/147243 "2018-09-04T16:20:10Z")

</div>

Hi, I try send this query: { "query": { "function\_score": { "query": { "bool": { "must": { "query\_string": { "query": "oracle AND san AND francisco AND hadoop", …

---

## [Connecting ELK with SNMP](https://discuss.elastic.co/t/connecting-elk-with-snmp/147241)

<div class="topic-metadata">

**Author:** [@David\_Moreno](https://discuss.elastic.co/u/David_Moreno)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 3:51pm UTC](https://discuss.elastic.co/t/connecting-elk-with-snmp/147241 "2018-09-04T15:51:20Z")

</div>

Hello I'm currently working on a project, where we can't install beats to our servers. Wondering if I can use SNMP to transfer stuff to my ELK server. If there is a way, how can I do this? Thanks.

---

## [Threading problem with Node Client](https://discuss.elastic.co/t/threading-problem-with-node-client/147225)

<div class="topic-metadata">

**Author:** [@jbgriffin](https://discuss.elastic.co/u/jbgriffin)\
**Replies:** 1\
**Last updated:** [September 4, 2018, 2:23pm UTC](https://discuss.elastic.co/t/threading-problem-with-node-client/147225 "2018-09-04T14:23:03Z")

</div>

Running ElasticSearch 6.1.3 Node Client in our Tomcat Application server, connecting to ElasticSearch 6.1.3 cluster in another JVM on the same machine. Our Tomcat Application quits handling requests because request thre…

---

## [Elasticsearch certification preparation](https://discuss.elastic.co/t/elasticsearch-certification-preparation/147016)

<div class="topic-metadata">

**Author:** [@sivapuvvada](https://discuss.elastic.co/u/sivapuvvada)\
**Replies:** 1\
**Last updated:** [September 4, 2018, 1:47pm UTC](https://discuss.elastic.co/t/elasticsearch-certification-preparation/147016 "2018-09-04T13:47:55Z")

</div>

I am planning to write elasticsearch certification exam ,i can not afford training . Appreciate if we have exact documentation or video links for the exam objectives like hortonworks Hadoop exams . Do we have any practi…

---

## [esJsonRDD only returns a single field rather than all fields](https://discuss.elastic.co/t/esjsonrdd-only-returns-a-single-field-rather-than-all-fields/147216)

<div class="topic-metadata">

**Author:** [@SKing](https://discuss.elastic.co/u/SKing)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 1:32pm UTC](https://discuss.elastic.co/t/esjsonrdd-only-returns-a-single-field-rather-than-all-fields/147216 "2018-09-04T13:32:18Z")

</div>

This topic is similar to the one found here. - esRdd not returning script field values. Like the poster of the linked message. My query {"query": {"bool" : {"must\_not": {"term": {"request": "configuration.log.message…

---

## [Alphabetize API Docs](https://discuss.elastic.co/t/alphabetize-api-docs/147209)

<div class="topic-metadata">

**Author:** [@TameemSamawi](https://discuss.elastic.co/u/TameemSamawi)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 12:57pm UTC](https://discuss.elastic.co/t/alphabetize-api-docs/147209 "2018-09-04T12:57:44Z")

</div>

Hi there, wanted to point out that the docs here https://www.elastic.co/guide/en/elasticsearch/client/java-api/current/index.html aren't alphabetized.

---

## [Dealing with Empty data fields in Elasticsearch](https://discuss.elastic.co/t/dealing-with-empty-data-fields-in-elasticsearch/147200)

<div class="topic-metadata">

**Author:** [@chetansk](https://discuss.elastic.co/u/chetansk)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 12:16pm UTC](https://discuss.elastic.co/t/dealing-with-empty-data-fields-in-elasticsearch/147200 "2018-09-04T12:16:08Z")

</div>

Hi, I am creating elasticsearch scripts to retrieve data. I am just using match\_all as query to retrieve all data in particular field. I am getting the output results.However, most of the data have empty value for that …

---

## [Why doc\_values\_memory\_in\_bytes is small?](https://discuss.elastic.co/t/why-doc-values-memory-in-bytes-is-small/147196)

<div class="topic-metadata">

**Author:** [@bruce88](https://discuss.elastic.co/u/bruce88)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 11:34am UTC](https://discuss.elastic.co/t/why-doc-values-memory-in-bytes-is-small/147196 "2018-09-04T11:34:26Z")

</div>

We have a cluster with 12 m4.4xlarge nodes (m4.4xlarge: 16vcores, 64GB memory). All the fields are keyword or long type. The cluster has about 4TB data, 24 indices, and 370 shards, 34.8 billions data. ES version is 5.5.2…

---

## [How to get elasticsearch data streaming manner](https://discuss.elastic.co/t/how-to-get-elasticsearch-data-streaming-manner/147199)

<div class="topic-metadata">

**Author:** [@varunarathinam](https://discuss.elastic.co/u/varunarathinam)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 12:01pm UTC](https://discuss.elastic.co/t/how-to-get-elasticsearch-data-streaming-manner/147199 "2018-09-04T12:01:50Z")

</div>

Hi, We were processing realtime data, everyminute or second data push into elasticsearch. I need a suggestion whenever data pushed into elasticsearch, i want get the streaming data for apply machine intelligence at the …

---

## [Contributing to Elasticsearch using a Docker Image](https://discuss.elastic.co/t/contributing-to-elasticsearch-using-a-docker-image/147162)

<div class="topic-metadata">

**Author:** [@tony-dillon](https://discuss.elastic.co/u/tony-dillon)\
**Replies:** 1\
**Last updated:** [September 4, 2018, 11:52am UTC](https://discuss.elastic.co/t/contributing-to-elasticsearch-using-a-docker-image/147162 "2018-09-04T11:52:39Z")

</div>

Hi, I've just had my first successful contribution to the Elasticsearch codebase merged, and I thought I would share a Docker image that can be used to ease the development process. The actual contribution I made was a…

---

## [Elastic search querystring](https://discuss.elastic.co/t/elastic-search-querystring/147192)

<div class="topic-metadata">

**Author:** [@uthra](https://discuss.elastic.co/u/uthra)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 11:09am UTC](https://discuss.elastic.co/t/elastic-search-querystring/147192 "2018-09-04T11:09:18Z")

</div>

Using post method we can't able to search the content by passing alpha nuemerical character in term query.. Will ES accepts alpha nuemerical character to search via post body!?

---

## [How to update a document without increasing its version?](https://discuss.elastic.co/t/how-to-update-a-document-without-increasing-its-version/147181)

<div class="topic-metadata">

**Author:** [@gliu](https://discuss.elastic.co/u/gliu)\
**Replies:** 2\
**Last updated:** [September 4, 2018, 10:02am UTC](https://discuss.elastic.co/t/how-to-update-a-document-without-increasing-its-version/147181 "2018-09-04T10:02:43Z")

</div>

Hey guys, I need to update a doc without increasing its \_version field, Is there a way I can do achieve this ?

---

## [IS it possible to execute a watch from another watch](https://discuss.elastic.co/t/is-it-possible-to-execute-a-watch-from-another-watch/147161)

<div class="topic-metadata">

**Author:** [@yeruvavasavi](https://discuss.elastic.co/u/yeruvavasavi)\
**Replies:** 2\
**Last updated:** [September 4, 2018, 9:05am UTC](https://discuss.elastic.co/t/is-it-possible-to-execute-a-watch-from-another-watch/147161 "2018-09-04T09:05:57Z")

</div>

Hi, If a condition is met in watchA , i want to execute another watch say watchB from the existing watchA.

---

## [How to write query for free text elastic search for date field](https://discuss.elastic.co/t/how-to-write-query-for-free-text-elastic-search-for-date-field/147151)

<div class="topic-metadata">

**Author:** [@UrmilaKA](https://discuss.elastic.co/u/UrmilaKA)\
**Replies:** 2\
**Last updated:** [September 4, 2018, 9:04am UTC](https://discuss.elastic.co/t/how-to-write-query-for-free-text-elastic-search-for-date-field/147151 "2018-09-04T09:04:04Z")

</div>

Hi, Currently the Date field is stored as long. How should I write free text elastic search query for finding the date. in search text: 09/04/2018 data in elastic search: date: 1536041715846

---

## [How to setup elastic cluster for huge amount of data?](https://discuss.elastic.co/t/how-to-setup-elastic-cluster-for-huge-amount-of-data/147164)

<div class="topic-metadata">

**Author:** [@kamal](https://discuss.elastic.co/u/kamal)\
**Replies:** 1\
**Last updated:** [September 4, 2018, 8:58am UTC](https://discuss.elastic.co/t/how-to-setup-elastic-cluster-for-huge-amount-of-data/147164 "2018-09-04T08:58:09Z")

</div>

I am asked to setup elastic search cluster for about 100 TB of text Data! I already know how to do searches and aggs in elastic, but I really don't know how to setup cluster with more than one node for such big data! I…

---

## [How to return a id value of nested document together with the highlight fields](https://discuss.elastic.co/t/how-to-return-a-id-value-of-nested-document-together-with-the-highlight-fields/147172)

<div class="topic-metadata">

**Author:** [@reamerit](https://discuss.elastic.co/u/reamerit)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 8:54am UTC](https://discuss.elastic.co/t/how-to-return-a-id-value-of-nested-document-together-with-the-highlight-fields/147172 "2018-09-04T08:54:32Z")

</div>

Hi All: I have a requirement that I need know the id value of the highlighted nested document. For sample: {"mappings": { "item": { "properties": { "all": { "type": "text", "analyzer":"standard", "search\_analyze…

---

## [Date field timezone](https://discuss.elastic.co/t/date-field-timezone/146947)

<div class="topic-metadata">

**Author:** [@oms1226](https://discuss.elastic.co/u/oms1226)\
**Replies:** 1\
**Last updated:** [September 4, 2018, 8:38am UTC](https://discuss.elastic.co/t/date-field-timezone/146947 "2018-09-04T08:38:13Z")

</div>

I don't use @timestamp. but I have own date-type field. The field name is execTime. my datas only upload under offline. For example, all the datas move to elastic server using USB memory and so on. Recently I found t…

---

## [Where reinstaled elasticsearch node gets info about shards](https://discuss.elastic.co/t/where-reinstaled-elasticsearch-node-gets-info-about-shards/147165)

<div class="topic-metadata">

**Author:** [@lecko](https://discuss.elastic.co/u/lecko)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 8:20am UTC](https://discuss.elastic.co/t/where-reinstaled-elasticsearch-node-gets-info-about-shards/147165 "2018-09-04T08:20:14Z")

</div>

Hello, I would like to know, from where elasticsearch is reading status data and info about indexes etc. I had a problem with elasticsearch node, who no longer waated to join the cluster. There were errors like that: \[…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1558)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1560)
