# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1560

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1561

---

## [Own sort order](https://discuss.elastic.co/t/own-sort-order/147074)

<div class="topic-metadata">

**Author:** [@cece123](https://discuss.elastic.co/u/cece123)\
**Replies:** 1\
**Last updated:** [September 4, 2018, 8:30am UTC](https://discuss.elastic.co/t/own-sort-order/147074 "2018-09-04T08:30:02Z")

</div>

Hi! I need use in elasticsearch my own sort order for example: I have info about Food with food\_category\_id and I want sort result by food\_category\_id in order \[5,8,2\] (First with id = 5, second with id = 8. third with…

---

## [Importing large pretty printed .JSON files](https://discuss.elastic.co/t/importing-large-pretty-printed-json-files/147120)

<div class="topic-metadata">

**Author:** [@Terrell\_Gilbert](https://discuss.elastic.co/u/Terrell_Gilbert)\
**Replies:** 1\
**Last updated:** [September 4, 2018, 8:17am UTC](https://discuss.elastic.co/t/importing-large-pretty-printed-json-files/147120 "2018-09-04T08:17:01Z")

</div>

I'm aware that the Bulk API does not support the importation of .json files that are pretty printed, I have a few files ranging from 250mb to a 1gb, does anyone have any recommendations for minifying the files. I've cons…

---

## [Is it possible to update a document in watcher](https://discuss.elastic.co/t/is-it-possible-to-update-a-document-in-watcher/147136)

<div class="topic-metadata">

**Author:** [@yeruvavasavi](https://discuss.elastic.co/u/yeruvavasavi)\
**Replies:** 2\
**Last updated:** [September 4, 2018, 7:51am UTC](https://discuss.elastic.co/t/is-it-possible-to-update-a-document-in-watcher/147136 "2018-09-04T07:51:02Z")

</div>

I want to update a value in the document when a condition is met. By using Transform script can i update a value of the document.

---

## [Error in creating kibana index pattern through script](https://discuss.elastic.co/t/error-in-creating-kibana-index-pattern-through-script/147141)

<div class="topic-metadata">

**Author:** [@kamleshjoshi](https://discuss.elastic.co/u/kamleshjoshi)\
**Replies:** 1\
**Last updated:** [September 4, 2018, 7:34am UTC](https://discuss.elastic.co/t/error-in-creating-kibana-index-pattern-through-script/147141 "2018-09-04T07:34:32Z")

</div>

Hi, I am trying to create Kibana index pattern through python script. I am getting following error: {u'status': 400, u'error': {u'root\_cause': \[{u'reason': u'mapping set to strict, dynamic introduction of \[title\] withi…

---

## [Unassigned shards on cluster restart](https://discuss.elastic.co/t/unassigned-shards-on-cluster-restart/147146)

<div class="topic-metadata">

**Author:** [@emanzaman](https://discuss.elastic.co/u/emanzaman)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 5:56am UTC](https://discuss.elastic.co/t/unassigned-shards-on-cluster-restart/147146 "2018-09-04T05:56:41Z")

</div>

Hi, I am facing following issue: Restarted my Elasticsearch cluster from one node to three nodes (two data nodes and one arbiter). But the cluster status is now red as shown below: $\> curl "nodeA:9200/\_cat/health" 1…

---

## [Unable to customize official elasticsearch image in IBM Kubernetes platform](https://discuss.elastic.co/t/unable-to-customize-official-elasticsearch-image-in-ibm-kubernetes-platform/147158)

<div class="topic-metadata">

**Author:** [@soumochak](https://discuss.elastic.co/u/soumochak)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 7:00am UTC](https://discuss.elastic.co/t/unable-to-customize-official-elasticsearch-image-in-ibm-kubernetes-platform/147158 "2018-09-04T07:00:25Z")

</div>

Hi, I am trying to deploy the official elasticsearch 6.4.0 image using yaml file in IBM Kubernetes Service. While I have deployed the elasticsearch image on IBM Kubernetes Service with customization like change in cluste…

---

## [Problems running via docker-compose](https://discuss.elastic.co/t/problems-running-via-docker-compose/147124)

<div class="topic-metadata">

**Author:** [@vgoklani](https://discuss.elastic.co/u/vgoklani)\
**Replies:** 7\
**Last updated:** [September 4, 2018, 6:47am UTC](https://discuss.elastic.co/t/problems-running-via-docker-compose/147124 "2018-09-04T06:47:47Z")

</div>

Hello - could you please review my docker-compose file, as I'm getting a ton of errors. docker-compose file: version: '2' services: elasticsearch: container\_name: elasticsearch restart: always im…

---

## [Index out of bounds error after upgrade from 5.6.x to 6.4.0](https://discuss.elastic.co/t/index-out-of-bounds-error-after-upgrade-from-5-6-x-to-6-4-0/147139)

<div class="topic-metadata">

**Author:** [@Kevtomba](https://discuss.elastic.co/u/Kevtomba)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 5:23am UTC](https://discuss.elastic.co/t/index-out-of-bounds-error-after-upgrade-from-5-6-x-to-6-4-0/147139 "2018-09-04T05:23:33Z")

</div>

I recently upgraded my Elasticsearch version from 5.6.x to 6.4.0 and since then, my query returns the following error: { "took": 6, "timed\_out": false, "\_shards": { "total": 5, "successful": 3, "skippe…

---

## [Backup and restore configuration](https://discuss.elastic.co/t/backup-and-restore-configuration/147128)

<div class="topic-metadata">

**Author:** [@prabhin](https://discuss.elastic.co/u/prabhin)\
**Replies:** 5\
**Last updated:** [September 4, 2018, 4:08am UTC](https://discuss.elastic.co/t/backup-and-restore-configuration/147128 "2018-09-04T04:08:03Z")

</div>

how to perform backup and restore of elasticsearch configuration?

---

## [How to return document id from sql query?](https://discuss.elastic.co/t/how-to-return-document-id-from-sql-query/147129)

<div class="topic-metadata">

**Author:** [@hongyuan1306](https://discuss.elastic.co/u/hongyuan1306)\
**Replies:** 1\
**Last updated:** [September 4, 2018, 3:36am UTC](https://discuss.elastic.co/t/how-to-return-document-id-from-sql-query/147129 "2018-09-04T03:36:31Z")

</div>

Is there a way to return the document id from the SELECT sql query? I tried to use \_id, but got Unknown column \[\_id\]

---

## [Compiling elasticsearch for ARM](https://discuss.elastic.co/t/compiling-elasticsearch-for-arm/145553)

<div class="topic-metadata">

**Author:** [@francisaugusto](https://discuss.elastic.co/u/francisaugusto)\
**Replies:** 9\
**Last updated:** [September 4, 2018, 3:21am UTC](https://discuss.elastic.co/t/compiling-elasticsearch-for-arm/145553 "2018-09-04T03:21:51Z")

</div>

Hi, I want to use ELK on an ARM platform running Ubuntu. I started by compiling elasticsearch as instructed here: https://github.com/elastic/elasticsearch After a long time compilation (./gradlew assemble), I didn't ge…

---

## [The Rollover Index can't do only create index?](https://discuss.elastic.co/t/the-rollover-index-cant-do-only-create-index/147130)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 2:41am UTC](https://discuss.elastic.co/t/the-rollover-index-cant-do-only-create-index/147130 "2018-09-04T02:41:00Z")

</div>

Rollover Index as i use this to rollover index curl -XPOST "http://xx.xx.xx.xx:9200/zqctest/\_rollover?wait\_for\_active\_shards=2&pretty" -H 'Content-Type: application/json' -d' { "conditions": { "max\_docs": 5 } …

---

## [Create an index with everyday GET /\_cat/indices?v](https://discuss.elastic.co/t/create-an-index-with-everyday-get-cat-indices-v/145888)

<div class="topic-metadata">

**Author:** [@lauralacarra](https://discuss.elastic.co/u/lauralacarra)\
**Replies:** 6\
**Last updated:** [September 4, 2018, 2:35am UTC](https://discuss.elastic.co/t/create-an-index-with-everyday-get-cat-indices-v/145888 "2018-09-04T02:35:43Z")

</div>

Hi!!!! I would like to create an index with everyday info that returns GET /\_cat/indices?v I don't have a clue how to do it. I am using Kibana for visualization. Thank you!!!

---

## [Elastic Search Cluster Active-passive](https://discuss.elastic.co/t/elastic-search-cluster-active-passive/144693)

<div class="topic-metadata">

**Author:** [@prabhin](https://discuss.elastic.co/u/prabhin)\
**Replies:** 3\
**Last updated:** [September 4, 2018, 2:08am UTC](https://discuss.elastic.co/t/elastic-search-cluster-active-passive/144693 "2018-09-04T02:08:03Z")

</div>

Hi, I have 3 elasticsearch server(serverA, serverB,ServerC). In this ServerA and ServerB in same datacenter and server 3 in another Datacenter. I disabled master node eligibility in Server 3 . ServerA and Server B confi…

---

## [Multiple repos showing same snapshots](https://discuss.elastic.co/t/multiple-repos-showing-same-snapshots/147126)

<div class="topic-metadata">

**Author:** [@pri](https://discuss.elastic.co/u/pri)\
**Replies:** 0\
**Last updated:** [September 4, 2018, 1:25am UTC](https://discuss.elastic.co/t/multiple-repos-showing-same-snapshots/147126 "2018-09-04T01:25:53Z")

</div>

Using: Elasticsearch version: 6.1.0 Curator: 5.5 I have registered 3 different repos for my hourly, daily and weekly snapshots. However when I list the snapshots for each repo, I expect to see only the snapshots that …

---

## [Delete Elasticsearch repository in S3](https://discuss.elastic.co/t/delete-elasticsearch-repository-in-s3/147123)

<div class="topic-metadata">

**Author:** [@ardel](https://discuss.elastic.co/u/ardel)\
**Replies:** 2\
**Last updated:** [September 4, 2018, 1:13am UTC](https://discuss.elastic.co/t/delete-elasticsearch-repository-in-s3/147123 "2018-09-04T01:13:02Z")

</div>

Hello! Is there anyone here who knows how to delete AWS managed elasticsearch repository in S3 using curator? Or any command?

---

## [Snapshot strategy](https://discuss.elastic.co/t/snapshot-strategy/147121)

<div class="topic-metadata">

**Author:** [@pri](https://discuss.elastic.co/u/pri)\
**Replies:** 2\
**Last updated:** [September 4, 2018, 1:07am UTC](https://discuss.elastic.co/t/snapshot-strategy/147121 "2018-09-04T01:07:55Z")

</div>

I have been reading about snapshot and restore functionality in Elasticsearch. Coming from relational database background, it took some effort to understand this correctly. Based on my understanding, I am trying to final…

---

## [Get all buckets with just one item](https://discuss.elastic.co/t/get-all-buckets-with-just-one-item/147098)

<div class="topic-metadata">

**Author:** [@JPelastic](https://discuss.elastic.co/u/JPelastic)\
**Replies:** 1\
**Last updated:** [September 3, 2018, 10:54pm UTC](https://discuss.elastic.co/t/get-all-buckets-with-just-one-item/147098 "2018-09-03T22:54:25Z")

</div>

GET certificates/\_search { "size": 0, "aggs": { "per month": { "date\_histogram": { "field": "@timestamp", "interval": "month" }, "aggs": { "distinct": { "term…

---

## [Elasticsearch query to filter count by aggregate](https://discuss.elastic.co/t/elasticsearch-query-to-filter-count-by-aggregate/147077)

<div class="topic-metadata">

**Author:** [@Ambuj\_Jauhari](https://discuss.elastic.co/u/Ambuj_Jauhari)\
**Replies:** 0\
**Last updated:** [September 3, 2018, 12:39pm UTC](https://discuss.elastic.co/t/elasticsearch-query-to-filter-count-by-aggregate/147077 "2018-09-03T12:39:33Z")

</div>

I am writing a query to count documents, group by modifiedDateTime. This query works fine as below { "aggs" : { "types\_count" : { "value\_count" : { "field" : "id" } }, "group\_by\_st…

---

## [Rollups: What happens when docs arrive a few days late?](https://discuss.elastic.co/t/rollups-what-happens-when-docs-arrive-a-few-days-late/146707)

<div class="topic-metadata">

**Author:** [@Paul\_Ainslie](https://discuss.elastic.co/u/Paul_Ainslie)\
**Replies:** 2\
**Last updated:** [September 3, 2018, 4:50pm UTC](https://discuss.elastic.co/t/rollups-what-happens-when-docs-arrive-a-few-days-late/146707 "2018-09-03T16:50:33Z")

</div>

We have a dozen or so servers we pull access logs off of with logstash running on each of those and they're sent to our ES cluster. I've now configured a 1 hour Rollup in our ES cluster. Over the years we've run into a…

---

## [Rollup - Sum Bucket Aggregation results are buggy](https://discuss.elastic.co/t/rollup-sum-bucket-aggregation-results-are-buggy/145639)

<div class="topic-metadata">

**Author:** [@Paul\_Ainslie](https://discuss.elastic.co/u/Paul_Ainslie)\
**Replies:** 12\
**Last updated:** [September 3, 2018, 4:41pm UTC](https://discuss.elastic.co/t/rollup-sum-bucket-aggregation-results-are-buggy/145639 "2018-09-03T16:41:50Z")

</div>

This query works fine on a regular index, but when I run it against a rolled up index the resulting values are about 66% of what I'd expect. The rolled up index is also missing the sum\_bucket (not to be confused with th…

---

## [Elastic REST 6.4 IndexShrink Error](https://discuss.elastic.co/t/elastic-rest-6-4-indexshrink-error/146991)

<div class="topic-metadata">

**Author:** [@questar](https://discuss.elastic.co/u/questar)\
**Replies:** 2\
**Last updated:** [September 3, 2018, 3:16pm UTC](https://discuss.elastic.co/t/elastic-rest-6-4-indexshrink-error/146991 "2018-09-03T15:16:18Z")

</div>

Index built with: {"settings":{"number\_of\_shards":"1","number\_of\_routing\_shards":"2","number\_of\_replicas":"0"}} ResizeRequest request = new ResizeRequest("code-000001", "code-000002"); Settings settings = Settings.bui…

---

## [Want to provision the ElasticSearch addon version 6.2.4 specifically in heroku](https://discuss.elastic.co/t/want-to-provision-the-elasticsearch-addon-version-6-2-4-specifically-in-heroku/146703)

<div class="topic-metadata">

**Author:** [@kumar1](https://discuss.elastic.co/u/kumar1)\
**Replies:** 2\
**Last updated:** [September 3, 2018, 3:00pm UTC](https://discuss.elastic.co/t/want-to-provision-the-elasticsearch-addon-version-6-2-4-specifically-in-heroku/146703 "2018-09-03T15:00:12Z")

</div>

HI Team, While iam provisioning the new ES instance, getting the latest version 6.4 But i need a version 6.2.4 for specifically as standard. Can you please help me to provision ES aadon in heroku with 6.2.4 version eit…

---

## [BoolQueryBuilder toString method verbosity](https://discuss.elastic.co/t/boolquerybuilder-tostring-method-verbosity/147091)

<div class="topic-metadata">

**Author:** [@ltsallas](https://discuss.elastic.co/u/ltsallas)\
**Replies:** 0\
**Last updated:** [September 3, 2018, 2:21pm UTC](https://discuss.elastic.co/t/boolquerybuilder-tostring-method-verbosity/147091 "2018-09-03T14:21:10Z")

</div>

Hi, I am in the middle of updating Elasticsearch from v2.4.5 to v5.6.10 in one of my Java projects. I have a series of unit tests that compared the JSON outcome of a BoolQueryBuilder.toString(). In the new version all…

---

## [Shrink API and Relocation of Shards](https://discuss.elastic.co/t/shrink-api-and-relocation-of-shards/146509)

<div class="topic-metadata">

**Author:** [@Edouard\_Fazenda](https://discuss.elastic.co/u/Edouard_Fazenda)\
**Replies:** 3\
**Last updated:** [September 3, 2018, 1:56pm UTC](https://discuss.elastic.co/t/shrink-api-and-relocation-of-shards/146509 "2018-09-03T13:56:07Z")

</div>

Dear Community, I am in the process of performing a shrink on indices in order to reduce the number of shards from 5 to 1 , i choose to test on my cluster on 1 index named "logstash-ssh-\*' So i followed the documentat…

---

## [Retain buckets missing a specific value](https://discuss.elastic.co/t/retain-buckets-missing-a-specific-value/147076)

<div class="topic-metadata">

**Author:** [@mates](https://discuss.elastic.co/u/mates)\
**Replies:** 0\
**Last updated:** [September 3, 2018, 12:38pm UTC](https://discuss.elastic.co/t/retain-buckets-missing-a-specific-value/147076 "2018-09-03T12:38:35Z")

</div>

Hey there, is it possible to retain only those buckets of an aggregation, which don't have any document that has a field with the specific value "xyz"? To be more precise: My documents are events, whose type is specif…

---

## [Msearch performance decreases when increasing the number of shards](https://discuss.elastic.co/t/msearch-performance-decreases-when-increasing-the-number-of-shards/142724)

<div class="topic-metadata">

**Author:** [@vincent.arnaud90](https://discuss.elastic.co/u/vincent.arnaud90)\
**Replies:** 7\
**Last updated:** [September 3, 2018, 11:47am UTC](https://discuss.elastic.co/t/msearch-performance-decreases-when-increasing-the-number-of-shards/142724 "2018-09-03T11:47:23Z")

</div>

Elasticsearch version: 6.1.1 Plugins installed: \[analysis-icu, analysis-phonetic\] Description of the problem: I am testing the msearch capability on the rally's geonames set with quite a lot of basic match queries (15…

---

## [Problem in analysing Chinese text](https://discuss.elastic.co/t/problem-in-analysing-chinese-text/147054)

<div class="topic-metadata">

**Author:** [@Sriram8894](https://discuss.elastic.co/u/Sriram8894)\
**Replies:** 0\
**Last updated:** [September 3, 2018, 10:48am UTC](https://discuss.elastic.co/t/problem-in-analysing-chinese-text/147054 "2018-09-03T10:48:49Z")

</div>

I'm using elastic version of 5.6.9 and currently using ICU analyser for analysing the text input. But I recently encountered a problem for Chinese text. Word 应用的 implies 'Applied' but my ICU analyser is splitting the wo…

---

## [Seprating groups from SAML response](https://discuss.elastic.co/t/seprating-groups-from-saml-response/146492)

<div class="topic-metadata">

**Author:** [@Indisol](https://discuss.elastic.co/u/Indisol)\
**Replies:** 2\
**Last updated:** [September 3, 2018, 10:11am UTC](https://discuss.elastic.co/t/seprating-groups-from-saml-response/146492 "2018-09-03T10:11:46Z")

</div>

Dear Team, I am trying to setup SAML integration for Kibana access. my login works but i am facing a challenge to assign roles to the user. on enabling Debug tracing i see that all the groups that user is member of in…

---

## [Elastic search instillation problem](https://discuss.elastic.co/t/elastic-search-instillation-problem/146504)

<div class="topic-metadata">

**Author:** [@noora](https://discuss.elastic.co/u/noora)\
**Replies:** 5\
**Last updated:** [September 3, 2018, 9:34am UTC](https://discuss.elastic.co/t/elastic-search-instillation-problem/146504 "2018-09-03T09:34:48Z")

</div>

i am trying to install elastic search in my laptop but i am always getting this message when i try to run the bin/elasticsearch in command line \\Common was unexpected at this time. my elastic search version is :6.4.0 …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1559)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1561)
