# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1561

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1562

---

## [Higher relevance on More-Like-this query](https://discuss.elastic.co/t/higher-relevance-on-more-like-this-query/147041)

<div class="topic-metadata">

**Author:** [@Krenari](https://discuss.elastic.co/u/Krenari)\
**Replies:** 0\
**Last updated:** [September 3, 2018, 9:20am UTC](https://discuss.elastic.co/t/higher-relevance-on-more-like-this-query/147041 "2018-09-03T09:20:49Z")

</div>

Hi guys, If I install analysis-phonetic or any other plugin in elasticsearch, will I have higher relevant content in more-like-this query? Any suggestion how to achieve higher relevant content? Thanks in advance!

---

## [Defining Index with multiple index type in js](https://discuss.elastic.co/t/defining-index-with-multiple-index-type-in-js/147038)

<div class="topic-metadata">

**Author:** [@Nikhil\_Nambiar](https://discuss.elastic.co/u/Nikhil_Nambiar)\
**Replies:** 0\
**Last updated:** [September 3, 2018, 8:56am UTC](https://discuss.elastic.co/t/defining-index-with-multiple-index-type-in-js/147038 "2018-09-03T08:56:12Z")

</div>

Hi, Can any one help me by giving an example how to define client.indices.create() function to create index having multiple index type for example I have an index named customer it should contain following index type …

---

## [How to disable Monitoring or to make a retention period of 7 days only?](https://discuss.elastic.co/t/how-to-disable-monitoring-or-to-make-a-retention-period-of-7-days-only/146077)

<div class="topic-metadata">

**Author:** [@uhlhosting](https://discuss.elastic.co/u/uhlhosting)\
**Replies:** 1\
**Last updated:** [September 3, 2018, 8:46am UTC](https://discuss.elastic.co/t/how-to-disable-monitoring-or-to-make-a-retention-period-of-7-days-only/146077 "2018-09-03T08:46:15Z")

</div>

I have this situation where .monitoring-es-6-2018.08.25 Health: green Green 2.4m 1.1 GB 0 /s 6.14 /s 0 .monitoring-es-6-2018.08.22 Health: green Green 2.3m 1.1 GB 0 /s 6.14 /s 0 .monitoring-es-6-2018.08.24 Health: green…

---

## [Index azure blob in real time](https://discuss.elastic.co/t/index-azure-blob-in-real-time/147019)

<div class="topic-metadata">

**Author:** [@luminaelastic](https://discuss.elastic.co/u/luminaelastic)\
**Replies:** 1\
**Last updated:** [September 3, 2018, 8:21am UTC](https://discuss.elastic.co/t/index-azure-blob-in-real-time/147019 "2018-09-03T08:21:19Z")

</div>

I have blob on Azure container. Through web crawling blob is downloading in container 24\*7. I want to index in real time or near real time. Currently i am indexing using python API on daily basis. Please help me how i ca…

---

## [Retrieve list of keyword variants using phonetic plugin](https://discuss.elastic.co/t/retrieve-list-of-keyword-variants-using-phonetic-plugin/146811)

<div class="topic-metadata">

**Author:** [@Jan\_Chia](https://discuss.elastic.co/u/Jan_Chia)\
**Replies:** 2\
**Last updated:** [September 3, 2018, 8:10am UTC](https://discuss.elastic.co/t/retrieve-list-of-keyword-variants-using-phonetic-plugin/146811 "2018-09-03T08:10:53Z")

</div>

Currently, the phonetic plugin performs full text search on the field and returns the whole content when a phonetically similar word is present in the content. How do i return just that phonetically similar word instead…

---

## [Elasticsearch 6.2 composite agg needs pagination](https://discuss.elastic.co/t/elasticsearch-6-2-composite-agg-needs-pagination/147022)

<div class="topic-metadata">

**Author:** [@Dilip\_Kumar](https://discuss.elastic.co/u/Dilip_Kumar)\
**Replies:** 0\
**Last updated:** [September 3, 2018, 7:26am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-composite-agg-needs-pagination/147022 "2018-09-03T07:26:05Z")

</div>

Hi , i am using elasticsearch 6.2 and having composite aggs query, i need to pagination.. lease help me.. my sample of query { "size": 0, "aggs": { "campoverview": { "composite": { "size": 200000, "sources": \[ …

---

## [Rollup - Date Histogram aggregation](https://discuss.elastic.co/t/rollup-date-histogram-aggregation/146308)

<div class="topic-metadata">

**Author:** [@Steven\_Liu](https://discuss.elastic.co/u/Steven_Liu)\
**Replies:** 7\
**Last updated:** [September 3, 2018, 6:46am UTC](https://discuss.elastic.co/t/rollup-date-histogram-aggregation/146308 "2018-09-03T06:46:08Z")

</div>

Hi Guys I have a rollup index (interval: 1d) created. But when do \_rollup\_search, I cannot use date histogram aggregation for larger interval (e.g. 1M, 1y). Only let me use 1d as defined in the rollup job config. Any id…

---

## [Delete unassigned DANGLING\_INDEX\_IMPORTED shards](https://discuss.elastic.co/t/delete-unassigned-dangling-index-imported-shards/146672)

<div class="topic-metadata">

**Author:** [@lunatic](https://discuss.elastic.co/u/lunatic)\
**Replies:** 1\
**Last updated:** [September 3, 2018, 4:25am UTC](https://discuss.elastic.co/t/delete-unassigned-dangling-index-imported-shards/146672 "2018-09-03T04:25:16Z")

</div>

I have unassigned shards in my cluster, execute: GET /\_cluster/allocation/explain result: { "index": "error-log-2018-05-05", "shard": 3, "primary": true, "current\_state": "unassigned", "unassigned\_info": { …

---

## [Endless creating index after delete another index](https://discuss.elastic.co/t/endless-creating-index-after-delete-another-index/146334)

<div class="topic-metadata">

**Author:** [@lunatic](https://discuss.elastic.co/u/lunatic)\
**Replies:** 4\
**Last updated:** [September 3, 2018, 4:24am UTC](https://discuss.elastic.co/t/endless-creating-index-after-delete-another-index/146334 "2018-09-03T04:24:22Z")

</div>

I deleted some of my indices, but after about 1~10s the cluster create another index(being deleted long time ago) automatically. For example: delete index request-log-2018-05-03,created request-log-2018-05-30, but the …

---

## [Elasticsearch.service terminated unexpectedly](https://discuss.elastic.co/t/elasticsearch-service-terminated-unexpectedly/147008)

<div class="topic-metadata">

**Author:** [@Unknown\_error](https://discuss.elastic.co/u/Unknown_error)\
**Replies:** 0\
**Last updated:** [September 3, 2018, 3:58am UTC](https://discuss.elastic.co/t/elasticsearch-service-terminated-unexpectedly/147008 "2018-09-03T03:58:05Z")

</div>

On my Server (Windows 2016 OS) elasticsearch.service always run and no problem until elasticsearch.service terminated unexpectedly(on event viewer). first , i solve by start elasticsearch.service manaully but still …

---

## [Rollup Job doesn't Run](https://discuss.elastic.co/t/rollup-job-doesnt-run/145094)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 3\
**Last updated:** [September 3, 2018, 3:50am UTC](https://discuss.elastic.co/t/rollup-job-doesnt-run/145094 "2018-09-03T03:50:23Z")

</div>

I've successfully created and started a rollup job but it never runs. I've tried removing the delay, setting the cron expression to every minute (0 \* 0 ? \* \* \*) still it always shows "documents\_processed: 0" and there ar…

---

## [Rollup job failed to create due to inal mapping would have more than 1 type: \[\_doc, doc\]"](https://discuss.elastic.co/t/rollup-job-failed-to-create-due-to-inal-mapping-would-have-more-than-1-type-doc-doc/144305)

<div class="topic-metadata">

**Author:** [@Yoav\_Sharon](https://discuss.elastic.co/u/Yoav_Sharon)\
**Replies:** 2\
**Last updated:** [September 3, 2018, 3:41am UTC](https://discuss.elastic.co/t/rollup-job-failed-to-create-due-to-inal-mapping-would-have-more-than-1-type-doc-doc/144305 "2018-09-03T03:41:19Z")

</div>

Hi, i'm trying to create a rollup job. the return result is fail due to "final mapping would have more than 1 type: \[\_doc, doc\]"" my mapping template is attached: put \_template/defualt { "order": 0, "index\_patterns…

---

## [Elasticsearch base install max cpu](https://discuss.elastic.co/t/elasticsearch-base-install-max-cpu/146995)

<div class="topic-metadata">

**Author:** [@jtst1](https://discuss.elastic.co/u/jtst1)\
**Replies:** 2\
**Last updated:** [September 2, 2018, 11:57pm UTC](https://discuss.elastic.co/t/elasticsearch-base-install-max-cpu/146995 "2018-09-02T23:57:14Z")

</div>

Hopefully this is the right place to post this, and if not I apologize. I've installed ELK on a windows server 2016 machine with 8vcpu and 16gb of ram. I noticed that the cpu stays at 100%, even when I only have elastics…

---

## [Can an Elasticsearch rollup job dynamically create indexes like Logstash does?](https://discuss.elastic.co/t/can-an-elasticsearch-rollup-job-dynamically-create-indexes-like-logstash-does/145268)

<div class="topic-metadata">

**Author:** [@stuart-j-campbell](https://discuss.elastic.co/u/stuart-j-campbell)\
**Replies:** 13\
**Last updated:** [September 3, 2018, 12:10am UTC](https://discuss.elastic.co/t/can-an-elasticsearch-rollup-job-dynamically-create-indexes-like-logstash-does/145268 "2018-09-03T00:10:27Z")

</div>

I am currently testing out the new rollup APIs in Elasticsearch 6.3 and am wondering if there is any way to configure the rollup job to dynamically create an index based on timestamp like Logstash does when ingesting dat…

---

## [ElasticSearch - Related posts](https://discuss.elastic.co/t/elasticsearch-related-posts/146997)

<div class="topic-metadata">

**Author:** [@Krenari](https://discuss.elastic.co/u/Krenari)\
**Replies:** 0\
**Last updated:** [September 2, 2018, 9:50pm UTC](https://discuss.elastic.co/t/elasticsearch-related-posts/146997 "2018-09-02T21:50:24Z")

</div>

Dear all, It is my first time that I am trying to use Elasticsearch and I would apologize for any inconvenient question. I am trying to use elasticsearch in wordpress for two main reasons, first performance and second …

---

## [Scroll by indices mask fails](https://discuss.elastic.co/t/scroll-by-indices-mask-fails/146977)

<div class="topic-metadata">

**Author:** [@psu](https://discuss.elastic.co/u/psu)\
**Replies:** 0\
**Last updated:** [September 2, 2018, 1:24pm UTC](https://discuss.elastic.co/t/scroll-by-indices-mask-fails/146977 "2018-09-02T13:24:02Z")

</div>

I've posted this here https://github.com/elastic/elasticsearch/issues/33225 already, but with no luck.. I'm using this scroll API query to search multiple indices: -XPOST activity\_stats\*/type1,type2,type3/\_search?scrol…

---

## [Aggregation not working on query results](https://discuss.elastic.co/t/aggregation-not-working-on-query-results/145695)

<div class="topic-metadata">

**Author:** [@Sangeeth\_Kumar](https://discuss.elastic.co/u/Sangeeth_Kumar)\
**Replies:** 0\
**Last updated:** [August 23, 2018, 10:08am UTC](https://discuss.elastic.co/t/aggregation-not-working-on-query-results/145695 "2018-08-23T10:08:28Z")

</div>

I have query like { "size": 1, "query": { "bool": { "must": \[ { "bool": { "must": \[ { "simple\_query\_string": { "query": "sangee…

---

## [Sum one or more fields with date aggregation](https://discuss.elastic.co/t/sum-one-or-more-fields-with-date-aggregation/145698)

<div class="topic-metadata">

**Author:** [@Patricia\_Narvasa](https://discuss.elastic.co/u/Patricia_Narvasa)\
**Replies:** 1\
**Last updated:** [September 2, 2018, 11:28am UTC](https://discuss.elastic.co/t/sum-one-or-more-fields-with-date-aggregation/145698 "2018-09-02T11:28:36Z")

</div>

Hi all, can you please help me on this. I have this following data: timestamp: 2018-01-01T10:30:00+08:00 , countSubject : 3 , countExtra: 5 timestamp: 2018-01-11T10:30:00+08:00 , countSubject : 4 , countExtra: 5 …

---

## [Cannot execute scripts using \[aggs\] context](https://discuss.elastic.co/t/cannot-execute-scripts-using-aggs-context/146604)

<div class="topic-metadata">

**Author:** [@kennymarx0](https://discuss.elastic.co/u/kennymarx0)\
**Replies:** 5\
**Last updated:** [September 2, 2018, 11:25am UTC](https://discuss.elastic.co/t/cannot-execute-scripts-using-aggs-context/146604 "2018-09-02T11:25:30Z")

</div>

i wanna use aggs and script in es 6.3 like below GET /trxdetail-sdall/\_search?pretty { "aggs": { "distinct\_OPPNAME": { "terms": { "script":"doc\['OPPACC'\]+' '+doc\['OPPNAME'\]" } } }, "query": { "terms": { "OPP…

---

## [I was having a problem using x-pack](https://discuss.elastic.co/t/i-was-having-a-problem-using-x-pack/146966)

<div class="topic-metadata">

**Author:** [@HyattJobs](https://discuss.elastic.co/u/HyattJobs)\
**Replies:** 0\
**Last updated:** [September 2, 2018, 6:03am UTC](https://discuss.elastic.co/t/i-was-having-a-problem-using-x-pack/146966 "2018-09-02T06:03:26Z")

</div>

In elasticsearch-6.4.0,it tells elasticsearch-6.4.0 contains x-pack, when i execute elasticsearch\\bin\\elasticsearch-setup-passwords.bat auto it told me how should i do????

---

## [Issue: Error: failed to compare string that has uppercase letters as value of a field in search query with match](https://discuss.elastic.co/t/issue-error-failed-to-compare-string-that-has-uppercase-letters-as-value-of-a-field-in-search-query-with-match/146961)

<div class="topic-metadata">

**Author:** [@Gobinda\_Senchury](https://discuss.elastic.co/u/Gobinda_Senchury)\
**Replies:** 0\
**Last updated:** [September 2, 2018, 1:23am UTC](https://discuss.elastic.co/t/issue-error-failed-to-compare-string-that-has-uppercase-letters-as-value-of-a-field-in-search-query-with-match/146961 "2018-09-02T01:23:09Z")

</div>

Didn't understand the exact term part in this thread as ES has field value saved with uppercase character.

---

## [High Level Rest - Rollover Shard Count Issue](https://discuss.elastic.co/t/high-level-rest-rollover-shard-count-issue/146956)

<div class="topic-metadata">

**Author:** [@questar](https://discuss.elastic.co/u/questar)\
**Replies:** 0\
**Last updated:** [September 1, 2018, 8:55pm UTC](https://discuss.elastic.co/t/high-level-rest-rollover-shard-count-issue/146956 "2018-09-01T20:55:38Z")

</div>

When specifiing both the shard and replica count, the shard count gets stepped on and defaults to 5. In the debugger, under settings there is only the single entry. Snippet below: // specify alias, and new rollover in…

---

## [Are there specific benefits for a very large cluster to use ES 6.3.1 instead of ES 6.2.4?](https://discuss.elastic.co/t/are-there-specific-benefits-for-a-very-large-cluster-to-use-es-6-3-1-instead-of-es-6-2-4/146895)

<div class="topic-metadata">

**Author:** [@AvivCohn](https://discuss.elastic.co/u/AvivCohn)\
**Replies:** 2\
**Last updated:** [September 1, 2018, 8:13pm UTC](https://discuss.elastic.co/t/are-there-specific-benefits-for-a-very-large-cluster-to-use-es-6-3-1-instead-of-es-6-2-4/146895 "2018-09-01T20:13:22Z")

</div>

Hello, We are currently working on creating an Elasticsearch deployment of around 350 Data Nodes, running on 70 physical servers (each server hosting 5 Nodes). The cluster isn't in production yet, the app is still in d…

---

## [\[CLOSED\] IllegalArgumentException when index/mapping creation involves Keyword field](https://discuss.elastic.co/t/closed-illegalargumentexception-when-index-mapping-creation-involves-keyword-field/146729)

<div class="topic-metadata">

**Author:** [@shiouming](https://discuss.elastic.co/u/shiouming)\
**Replies:** 0\
**Last updated:** [August 30, 2018, 3:02pm UTC](https://discuss.elastic.co/t/closed-illegalargumentexception-when-index-mapping-creation-involves-keyword-field/146729 "2018-08-30T15:02:17Z")

</div>

\[CLOSED\] It was my mistake, there are other code that called save() prior to init(). Changing the order fixes this exception. I'm completely new to ES, trying out ES 6.2.3 with ES DSL 6.2.1 (official client lib for Pyt…

---

## [ES create index mapping inconsistent with template(keyword type was replaced by text)](https://discuss.elastic.co/t/es-create-index-mapping-inconsistent-with-template-keyword-type-was-replaced-by-text/146931)

<div class="topic-metadata">

**Author:** [@ZedYeung](https://discuss.elastic.co/u/ZedYeung)\
**Replies:** 0\
**Last updated:** [September 1, 2018, 3:14am UTC](https://discuss.elastic.co/t/es-create-index-mapping-inconsistent-with-template-keyword-type-was-replaced-by-text/146931 "2018-09-01T03:14:58Z")

</div>

ES 5.6, Centos 7 Here is the example: above is index template, the bottom is the created index mapping. Noticed that the field with keyword type is replaced by the text type with keyword filelds. { "aliases": { …

---

## [Index stats store size is not refreshed immediately after flush](https://discuss.elastic.co/t/index-stats-store-size-is-not-refreshed-immediately-after-flush/146929)

<div class="topic-metadata">

**Author:** [@taylorchu](https://discuss.elastic.co/u/taylorchu)\
**Replies:** 0\
**Last updated:** [September 1, 2018, 1:38am UTC](https://discuss.elastic.co/t/index-stats-store-size-is-not-refreshed-immediately-after-flush/146929 "2018-09-01T01:38:22Z")

</div>

After testing when index store size is updated after flushing, it seems like the lag is around 10s. Is there an elasticsearch api that can immediately refresh the store size? There is another related issue without answe…

---

## [Dumping nested JSON into a searchable text field?](https://discuss.elastic.co/t/dumping-nested-json-into-a-searchable-text-field/146919)

<div class="topic-metadata">

**Author:** [@rozling](https://discuss.elastic.co/u/rozling)\
**Replies:** 0\
**Last updated:** [August 31, 2018, 9:40pm UTC](https://discuss.elastic.co/t/dumping-nested-json-into-a-searchable-text-field/146919 "2018-08-31T21:40:30Z")

</div>

Hi, We use Filebeat to send JSON logs to Logstash and then on to Elasticsearch. Some of these logs are very verbose and along with a message field / fields of basic datatypes contain one or more JSON payloads (usually d…

---

## [ES 6.3.2 Rollup avg metric does a sum instead?](https://discuss.elastic.co/t/es-6-3-2-rollup-avg-metric-does-a-sum-instead/146875)

<div class="topic-metadata">

**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\
**Replies:** 3\
**Last updated:** [August 31, 2018, 9:04pm UTC](https://discuss.elastic.co/t/es-6-3-2-rollup-avg-metric-does-a-sum-instead/146875 "2018-08-31T21:04:33Z")

</div>

Hi Team, I think either there is a bug or I'm doing something silly. This is my rollup job GET /\_xpack/rollup/job/my-job/?pretty: { "jobs" : \[ { "config" : { "id" : "my-job", "index\_pattern…

---

## [Delete more than 2Milion docs](https://discuss.elastic.co/t/delete-more-than-2milion-docs/145791)

<div class="topic-metadata">

**Author:** [@He\_Pamela](https://discuss.elastic.co/u/He_Pamela)\
**Replies:** 1\
**Last updated:** [August 31, 2018, 8:52pm UTC](https://discuss.elastic.co/t/delete-more-than-2milion-docs/145791 "2018-08-31T20:52:57Z")

</div>

Can somebody tell me How can I do this. I've tried to use delete by query but it doesn't drop it all

---

## [User Security fail](https://discuss.elastic.co/t/user-security-fail/146911)

<div class="topic-metadata">

**Author:** [@dbhatia](https://discuss.elastic.co/u/dbhatia)\
**Replies:** 1\
**Last updated:** [August 31, 2018, 8:17pm UTC](https://discuss.elastic.co/t/user-security-fail/146911 "2018-08-31T20:17:43Z")

</div>

Helo Experts, We are using elasticsearch basic license. I need to create users (any type of authentication supported ) by ELS in basic licensing would work . Please suggest how to resolve this. Requirement is to have u…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1560)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1562)
