# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1565

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1566

---

## [Get ClusterHealthResponse using RestHighLevelClient in 6.3.2](https://discuss.elastic.co/t/get-clusterhealthresponse-using-resthighlevelclient-in-6-3-2/145092)

<div class="topic-metadata">

**Author:** [@madhan3396](https://discuss.elastic.co/u/madhan3396)\
**Replies:** 4\
**Last updated:** [August 29, 2018, 11:04am UTC](https://discuss.elastic.co/t/get-clusterhealthresponse-using-resthighlevelclient-in-6-3-2/145092 "2018-08-29T11:04:52Z")

</div>

In the documentation of master version the Cluster Health API is available under RestHighLevelClient. How to achieve the same in version 6.3.2 using RestHighLevelClient? I'm looking for ClusterHealthResponse. Thanks i…

---

## [Ingest pipeline is giving weird response to timeformat change](https://discuss.elastic.co/t/ingest-pipeline-is-giving-weird-response-to-timeformat-change/146389)

<div class="topic-metadata">

**Author:** [@Jonathan\_Tan](https://discuss.elastic.co/u/Jonathan_Tan)\
**Replies:** 2\
**Last updated:** [August 29, 2018, 10:51am UTC](https://discuss.elastic.co/t/ingest-pipeline-is-giving-weird-response-to-timeformat-change/146389 "2018-08-29T10:51:29Z")

</div>

Hi! I'm stuck... I'd tested this pipeline in local, and now in a remote server (using the same docker image, mind you, v6.3.1), it's not behaving as I'd expected... { "description": "Takes the eventTime field and tur…

---

## [Elasicsearc multi rack configuration](https://discuss.elastic.co/t/elasicsearc-multi-rack-configuration/145380)

<div class="topic-metadata">

**Author:** [@mauro\_segreto](https://discuss.elastic.co/u/mauro_segreto)\
**Replies:** 20\
**Last updated:** [August 29, 2018, 10:19am UTC](https://discuss.elastic.co/t/elasicsearc-multi-rack-configuration/145380 "2018-08-29T10:19:34Z")

</div>

Hi, we have a production cluster composed by 8 nodes (4 with node.rack= location1 and 4 with node.rack= location2 ) . We have 3 elegible master nodes per each rack (node.master=true) and discovery.zen.minimum\_master\_no…

---

## [Elasticsearch .Net in 4.5](https://discuss.elastic.co/t/elasticsearch-net-in-4-5/146505)

<div class="topic-metadata">

**Author:** [@Thomas\_Deweer](https://discuss.elastic.co/u/Thomas_Deweer)\
**Replies:** 0\
**Last updated:** [August 29, 2018, 10:08am UTC](https://discuss.elastic.co/t/elasticsearch-net-in-4-5/146505 "2018-08-29T10:08:49Z")

</div>

Hello, I wanted to upgrade Elastic from 5.2.2 to 6.3.1. I've been trying to downloda the new Elasticsearch.Net nuGet package but it tells me I can't because my project is not .Net 4.6. I'm still running my application i…

---

## [Need advice to understand cluster behavior](https://discuss.elastic.co/t/need-advice-to-understand-cluster-behavior/146482)

<div class="topic-metadata">

**Author:** [@Fpernet](https://discuss.elastic.co/u/Fpernet)\
**Replies:** 3\
**Last updated:** [August 29, 2018, 9:24am UTC](https://discuss.elastic.co/t/need-advice-to-understand-cluster-behavior/146482 "2018-08-29T09:24:39Z")

</div>

Dear all. I've got a POC with Elasticsearch 6.4.0 5 Data Nodes 2 Coordinating nodes 1 Master Only Node In these 5 data nodes, i've got two of them master elligible. In elasticsearch.yml, discovery.zen.minimu\_master…

---

## [Authentication Using /api/security/v1/login](https://discuss.elastic.co/t/authentication-using-api-security-v1-login/146496)

<div class="topic-metadata">

**Author:** [@ritwikkaul](https://discuss.elastic.co/u/ritwikkaul)\
**Replies:** 0\
**Last updated:** [August 29, 2018, 9:13am UTC](https://discuss.elastic.co/t/authentication-using-api-security-v1-login/146496 "2018-08-29T09:13:03Z")

</div>

Hi I am currently trying to make a fetch call so as to get cookie such that user does not need to enter username and password is directly redirected to kibana homepage. But I am getting this error - Failed to load ht…

---

## [How can i send sql query to Search() method of ElasticClient?](https://discuss.elastic.co/t/how-can-i-send-sql-query-to-search-method-of-elasticclient/146495)

<div class="topic-metadata">

**Author:** [@Gaurav\_Patel](https://discuss.elastic.co/u/Gaurav_Patel)\
**Replies:** 0\
**Last updated:** [August 29, 2018, 9:10am UTC](https://discuss.elastic.co/t/how-can-i-send-sql-query-to-search-method-of-elasticclient/146495 "2018-08-29T09:10:38Z")

</div>

Hi, I am using "NEST" package for my .net application and I want to pass my SQL query with WHERE condition to Search() method of ElasticClient.

---

## [Aggregate and query transactions from indexed events](https://discuss.elastic.co/t/aggregate-and-query-transactions-from-indexed-events/146362)

<div class="topic-metadata">

**Author:** [@mates](https://discuss.elastic.co/u/mates)\
**Replies:** 2\
**Last updated:** [August 29, 2018, 8:46am UTC](https://discuss.elastic.co/t/aggregate-and-query-transactions-from-indexed-events/146362 "2018-08-29T08:46:39Z")

</div>

Hey there, currently I am indexing events from a message service in Elasticsearch. My aim is to aggregate those events to whole transactions and in addition query these transactions by several criteria. This is where I…

---

## [Fos elastica get code name in code table](https://discuss.elastic.co/t/fos-elastica-get-code-name-in-code-table/146486)

<div class="topic-metadata">

**Author:** [@ercancavusoglu](https://discuss.elastic.co/u/ercancavusoglu)\
**Replies:** 0\
**Last updated:** [August 29, 2018, 8:25am UTC](https://discuss.elastic.co/t/fos-elastica-get-code-name-in-code-table/146486 "2018-08-29T08:25:10Z")

</div>

I am using fosElastica for populate at elasticsearch. I have a two entity, that entities relationship together. But I couldn't populate and show category name in products index. How can I to do? Entity/AirportCodes.php …

---

## [Extended\_stats script in Grafana](https://discuss.elastic.co/t/extended-stats-script-in-grafana/146485)

<div class="topic-metadata">

**Author:** [@aurimas](https://discuss.elastic.co/u/aurimas)\
**Replies:** 0\
**Last updated:** [August 29, 2018, 8:05am UTC](https://discuss.elastic.co/t/extended-stats-script-in-grafana/146485 "2018-08-29T08:05:08Z")

</div>

I would like to do math or if possible other aggregations on the outputs of extended\_stats in Grafana. My current goal is to divide doc count by 5. As I understand I should be able to do this by using scrip but I can n…

---

## [Problem with SQL Query with special character in field and table name](https://discuss.elastic.co/t/problem-with-sql-query-with-special-character-in-field-and-table-name/146359)

<div class="topic-metadata">

**Author:** [@stef35340](https://discuss.elastic.co/u/stef35340)\
**Replies:** 4\
**Last updated:** [August 29, 2018, 7:59am UTC](https://discuss.elastic.co/t/problem-with-sql-query-with-special-character-in-field-and-table-name/146359 "2018-08-29T07:59:20Z")

</div>

Hello, I've an issue when I try to use fields and table names with some special characters. My indexes are named like the following xxxxxx-prod-2018.08.28 and the fact that there is a "dash" in the index name. As worka…

---

## [Search From Multiple Indexes](https://discuss.elastic.co/t/search-from-multiple-indexes/143638)

<div class="topic-metadata">

**Author:** [@Gaurav\_Patel](https://discuss.elastic.co/u/Gaurav_Patel)\
**Replies:** 13\
**Last updated:** [August 29, 2018, 7:43am UTC](https://discuss.elastic.co/t/search-from-multiple-indexes/143638 "2018-08-29T07:43:08Z")

</div>

Is there a way to search records from multiple indexes? Here is requirement, we are receiving 200 GB data per day, Also, i need to delete data based day wise, so i am planing to build index on daily bases, so i can eas…

---

## [Use hyphen in search query - disable analysis](https://discuss.elastic.co/t/use-hyphen-in-search-query-disable-analysis/146411)

<div class="topic-metadata">

**Author:** [@Tomasz\_Szandala](https://discuss.elastic.co/u/Tomasz_Szandala)\
**Replies:** 0\
**Last updated:** [August 28, 2018, 6:19pm UTC](https://discuss.elastic.co/t/use-hyphen-in-search-query-disable-analysis/146411 "2018-08-28T18:19:38Z")

</div>

Greetings, I would like to find all documents that have fun = status.loadavg AND item = 15-min My documents looks like this: "hits": { "total": 1050, "max\_score": null, "hits": \[ …

---

## [Scanning Windows Registry entries for Elastic Serach deployments](https://discuss.elastic.co/t/scanning-windows-registry-entries-for-elastic-serach-deployments/146335)

<div class="topic-metadata">

**Author:** [@Kaustav\_Gupta](https://discuss.elastic.co/u/Kaustav_Gupta)\
**Replies:** 2\
**Last updated:** [August 29, 2018, 6:39am UTC](https://discuss.elastic.co/t/scanning-windows-registry-entries-for-elastic-serach-deployments/146335 "2018-08-29T06:39:34Z")

</div>

I am trying to discover elasticsearch deployments in windows machines. In my scanner I wanted to search for a particular registry setting which is created when we install elastic search in Windows. I can search for the .…

---

## [Can I upgrade ELK from 5.0 to 6.4.0 directly](https://discuss.elastic.co/t/can-i-upgrade-elk-from-5-0-to-6-4-0-directly/146468)

<div class="topic-metadata">

**Author:** [@ravitandur](https://discuss.elastic.co/u/ravitandur)\
**Replies:** 1\
**Last updated:** [August 29, 2018, 6:01am UTC](https://discuss.elastic.co/t/can-i-upgrade-elk-from-5-0-to-6-4-0-directly/146468 "2018-08-29T06:01:55Z")

</div>

Currently we are using ELK 5.0 version. Can I upgrade to 6.4.0 with full cluster restart? After upgrade all my existing data works without any issues? please suggest.

---

## [How is coordinating node decided?](https://discuss.elastic.co/t/how-is-coordinating-node-decided/146455)

<div class="topic-metadata">

**Author:** [@shshnk28](https://discuss.elastic.co/u/shshnk28)\
**Replies:** 3\
**Last updated:** [August 29, 2018, 5:32am UTC](https://discuss.elastic.co/t/how-is-coordinating-node-decided/146455 "2018-08-29T05:32:18Z")

</div>

We have a 6 node ES cluster where the 5 nodes are of the same specs while the 6th one is almost half the specs of other nodes. I initiate a Transport client to which I add any one of the 5 nodes but never the 6th node. S…

---

## [Elasticsearch HDFS Repository Plugin install](https://discuss.elastic.co/t/elasticsearch-hdfs-repository-plugin-install/146449)

<div class="topic-metadata">

**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\
**Replies:** 1\
**Last updated:** [August 29, 2018, 2:30am UTC](https://discuss.elastic.co/t/elasticsearch-hdfs-repository-plugin-install/146449 "2018-08-29T02:30:48Z")

</div>

I want to install elasticsearch HDFS Plugin. The elasticsearch version is 6.3.2. Hodoop did not. When you try to run the plugin ./bin/elasticsearch-plugin install ./repository-hdfs-6.3.2.zip -\> The following error app…

---

## [Best practices for join field child doc without parent doc](https://discuss.elastic.co/t/best-practices-for-join-field-child-doc-without-parent-doc/145273)

<div class="topic-metadata">

**Author:** [@jaddison](https://discuss.elastic.co/u/jaddison)\
**Replies:** 2\
**Last updated:** [August 28, 2018, 10:37pm UTC](https://discuss.elastic.co/t/best-practices-for-join-field-child-doc-without-parent-doc/145273 "2018-08-28T22:37:23Z")

</div>

I've asked this a couple of times over the years, the most recently being Are parents required with join fields? (no response). Github issues mentions that this is the place to come for answers... so I'll ask again! I…

---

## [How to set shards based on size instead of date?](https://discuss.elastic.co/t/how-to-set-shards-based-on-size-instead-of-date/146250)

<div class="topic-metadata">

**Author:** [@robhep](https://discuss.elastic.co/u/robhep)\
**Replies:** 4\
**Last updated:** [August 28, 2018, 8:39pm UTC](https://discuss.elastic.co/t/how-to-set-shards-based-on-size-instead-of-date/146250 "2018-08-28T20:39:45Z")

</div>

Hi, I have a 5 node cluster in a lab environment. 2 data nodes, 3 master eligible nodes, 3 kibana, and 2 logstash. It's a low volume setup with about a half a dozen systems feed data to it. It has the default setup wi…

---

## [Elasticsearch down after plugin installation](https://discuss.elastic.co/t/elasticsearch-down-after-plugin-installation/146319)

<div class="topic-metadata">

**Author:** [@jesusgn90](https://discuss.elastic.co/u/jesusgn90)\
**Replies:** 6\
**Last updated:** [August 28, 2018, 8:32pm UTC](https://discuss.elastic.co/t/elasticsearch-down-after-plugin-installation/146319 "2018-08-28T20:32:47Z")

</div>

Hello team, since 6.4.0 I noticed that installing a plugin successfully makes Elasticsearch goes down. Then I must restart it manually and then all it's fine. Is this an addition in 6.4.0? Why it happened? Regards, Je…

---

## [Invalid Search results returned](https://discuss.elastic.co/t/invalid-search-results-returned/142243)

<div class="topic-metadata">

**Author:** [@davidadale](https://discuss.elastic.co/u/davidadale)\
**Replies:** 3\
**Last updated:** [August 28, 2018, 2:04pm UTC](https://discuss.elastic.co/t/invalid-search-results-returned/142243 "2018-08-28T14:04:33Z")

</div>

When searching for the term "no" it only returns a single search result. However when I search for a more specific term like "normal" it returns 3 results all having normal. Why would the more general search yield fewer …

---

## [Processing concentration on some cluster nodes](https://discuss.elastic.co/t/processing-concentration-on-some-cluster-nodes/145222)

<div class="topic-metadata">

**Author:** [@Claudio\_Ranieri](https://discuss.elastic.co/u/Claudio_Ranieri)\
**Replies:** 5\
**Last updated:** [August 28, 2018, 5:44pm UTC](https://discuss.elastic.co/t/processing-concentration-on-some-cluster-nodes/145222 "2018-08-28T17:44:02Z")

</div>

Hi, we currently have a cluster elasticsearch consisting of 18 data nodes and 3 master nodes (instances m4.4xlarge - 16 core and 64Gb RAM distributed in 2 zones in aws). We use elasticsearch version 5.6.2 with java jre1.…

---

## [Differentials calculus in E](https://discuss.elastic.co/t/differentials-calculus-in-e/146402)

<div class="topic-metadata">

**Author:** [@mehdi-gital](https://discuss.elastic.co/u/mehdi-gital)\
**Replies:** 0\
**Last updated:** [August 28, 2018, 5:21pm UTC](https://discuss.elastic.co/t/differentials-calculus-in-e/146402 "2018-08-28T17:21:07Z")

</div>

Here's a situation that's similar to my real question: Let's say I'm recording the temperatures of all major cities in the world once per day. So, each document has the following fields: timestamp city\_name temp The…

---

## [When will a CardinalityAggregationBuilder Aggregation type be supported in Rollup?](https://discuss.elastic.co/t/when-will-a-cardinalityaggregationbuilder-aggregation-type-be-supported-in-rollup/146098)

<div class="topic-metadata">

**Author:** [@Paul\_Ainslie](https://discuss.elastic.co/u/Paul_Ainslie)\
**Replies:** 2\
**Last updated:** [August 28, 2018, 5:02pm UTC](https://discuss.elastic.co/t/when-will-a-cardinalityaggregationbuilder-aggregation-type-be-supported-in-rollup/146098 "2018-08-28T17:02:51Z")

</div>

Any idea when CardinalityAggregationBuilder will be supported in Rollups? This query doesn't work against a rolled up index. Query: { "size": 0, "query": { "bool": { "must": \[ { "range"…

---

## [No latest logs in Kibana 6.3.2](https://discuss.elastic.co/t/no-latest-logs-in-kibana-6-3-2/146364)

<div class="topic-metadata">

**Author:** [@rohitg](https://discuss.elastic.co/u/rohitg)\
**Replies:** 1\
**Last updated:** [August 28, 2018, 5:01pm UTC](https://discuss.elastic.co/t/no-latest-logs-in-kibana-6-3-2/146364 "2018-08-28T17:01:47Z")

</div>

Hi, I have installed ELK 6.3.2 and beats on windows server and everything looks good as i cab view logs till yesterday when i did the installation. But today i cannot see any logs, only available logs are from yesterda…

---

## [Nested aggregation with min\_doc\_count=0](https://discuss.elastic.co/t/nested-aggregation-with-min-doc-count-0/146038)

<div class="topic-metadata">

**Author:** [@jdesousa](https://discuss.elastic.co/u/jdesousa)\
**Replies:** 1\
**Last updated:** [August 28, 2018, 4:42pm UTC](https://discuss.elastic.co/t/nested-aggregation-with-min-doc-count-0/146038 "2018-08-28T16:42:31Z")

</div>

Hi all, I'am trying to use nested aggregation with min\_doc\_count=0 My schema: PUT /example { "mappings": { "doc": { "properties": { "id": { "type": "text" }, "properties":…

---

## [Rollup: field referenced by a terms group must be a \[numeric\] or \[keyword/text\] type, but found \[geo\_point\]](https://discuss.elastic.co/t/rollup-field-referenced-by-a-terms-group-must-be-a-numeric-or-keyword-text-type-but-found-geo-point/146036)

<div class="topic-metadata">

**Author:** [@Paul\_Ainslie](https://discuss.elastic.co/u/Paul_Ainslie)\
**Replies:** 2\
**Last updated:** [August 28, 2018, 4:28pm UTC](https://discuss.elastic.co/t/rollup-field-referenced-by-a-terms-group-must-be-a-numeric-or-keyword-text-type-but-found-geo-point/146036 "2018-08-28T16:28:41Z")

</div>

I'd like to use the geoip.location field in my rollup, but I get this error. Is it a bug or am I going about this the wrong way? To be honest, this is more of a nice-to-have feature for us. It's not high priority. { …

---

## [Convert timestamp to date in existing index](https://discuss.elastic.co/t/convert-timestamp-to-date-in-existing-index/146396)

<div class="topic-metadata">

**Author:** [@amina-rh](https://discuss.elastic.co/u/amina-rh)\
**Replies:** 0\
**Last updated:** [August 28, 2018, 4:00pm UTC](https://discuss.elastic.co/t/convert-timestamp-to-date-in-existing-index/146396 "2018-08-28T16:00:55Z")

</div>

Hi, I have a problem with converting the timestamp field in elasticsearch to date in order to apear in kibana like a date, i already created the index, now i need to do the mapping on pay\_time wich is a date field , (i …

---

## [Looking for new rollup feature samples](https://discuss.elastic.co/t/looking-for-new-rollup-feature-samples/141446)

<div class="topic-metadata">

**Author:** [@BicaLuv](https://discuss.elastic.co/u/BicaLuv)\
**Replies:** 5\
**Last updated:** [August 28, 2018, 3:39pm UTC](https://discuss.elastic.co/t/looking-for-new-rollup-feature-samples/141446 "2018-08-28T15:39:50Z")

</div>

Hi! I read about the new Rollup API coming with ES 6.3.1 here: https://www.elastic.co/guide/en/elasticsearch/reference/6.3/rollup-apis.html And I tried to understand it. But currently I'm not able to managed and unders…

---

## [How can you know if a fuzzy search has exact matches in returned results](https://discuss.elastic.co/t/how-can-you-know-if-a-fuzzy-search-has-exact-matches-in-returned-results/146192)

<div class="topic-metadata">

**Author:** [@Ana\_Maria\_Rusu](https://discuss.elastic.co/u/Ana_Maria_Rusu)\
**Replies:** 3\
**Last updated:** [August 28, 2018, 3:37pm UTC](https://discuss.elastic.co/t/how-can-you-know-if-a-fuzzy-search-has-exact-matches-in-returned-results/146192 "2018-08-28T15:37:17Z")

</div>

If you are using the "fuzziness" parameter from "query\_string" is there any way for you to know if you have any exact match in your results? My main problem is to figure out what searches would fail (end with 0 results)…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1564)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1566)
