# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1582 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1583 --- ## [Score based on the matched multi-match counts](https://discuss.elastic.co/t/score-based-on-the-matched-multi-match-counts/144029)
**Author:** [@Peter\_Steenbergen](https://discuss.elastic.co/u/Peter_Steenbergen)\ **Replies:** 6\ **Last updated:** [August 13, 2018, 9:43pm UTC](https://discuss.elastic.co/t/score-based-on-the-matched-multi-match-counts/144029 "2018-08-13T21:43:32Z")
Hi, I was wondering the following thing. How to get the count of the matching fields? Like if you have a query with boosting of some kind o following query. GET hotels/\_search { "query": { "multi\_match": { … --- ## [\[Solved\] Discovery\_ec2 with ES 6.3.2 not finding other nodes](https://discuss.elastic.co/t/solved-discovery-ec2-with-es-6-3-2-not-finding-other-nodes/143949)
**Author:** [@kd5dbl](https://discuss.elastic.co/u/kd5dbl)\ **Replies:** 4\ **Last updated:** [August 13, 2018, 9:16pm UTC](https://discuss.elastic.co/t/solved-discovery-ec2-with-es-6-3-2-not-finding-other-nodes/143949 "2018-08-13T21:16:26Z")
I'm doing my first 6.x install and trying to get the new discovery\_ec2 plugin to work and it isn't finding any of my other nodes: I have 1 master node and 2 data only nodes. The master node comes up and votes itself ma… --- ## [ElasticSearch --\>\> spark streaming --\> elasticsearch](https://discuss.elastic.co/t/elasticsearch-spark-streaming-elasticsearch/144127)
**Author:** [@sheryl](https://discuss.elastic.co/u/sheryl)\ **Replies:** 1\ **Last updated:** [August 13, 2018, 8:16pm UTC](https://discuss.elastic.co/t/elasticsearch-spark-streaming-elasticsearch/144127 "2018-08-13T20:16:27Z")
How to fetch csv file from elastic search and do spark streaming and put the result back to elastic search ? how to do ? --- ## [Total newb question](https://discuss.elastic.co/t/total-newb-question/144071)
**Author:** [@slinuxuzer](https://discuss.elastic.co/u/slinuxuzer)\ **Replies:** 3\ **Last updated:** [August 13, 2018, 8:13pm UTC](https://discuss.elastic.co/t/total-newb-question/144071 "2018-08-13T20:13:24Z")
HI all, my name is Steven and yes this is my first post. I'm more of an IT Infrastructure guy, but I am working on a personal project and I'm not familiar with the Elasticsearch product suite or technologies at all. I am… --- ## [Tokenizer underscore support](https://discuss.elastic.co/t/tokenizer-underscore-support/144195)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 1\ **Last updated:** [August 13, 2018, 6:05pm UTC](https://discuss.elastic.co/t/tokenizer-underscore-support/144195 "2018-08-13T18:05:46Z")
I am using Elasticsearch 5.1 for logging web logs. Because we use underscore to split the parameters in url, we need the elasticsearch tokenizer to split by underscore too. But default tokenizer of Elasticsearch does no… --- ## [Rollover index creates a concrete index using alias](https://discuss.elastic.co/t/rollover-index-creates-a-concrete-index-using-alias/144191)
**Author:** [@Akshay\_Deshpande](https://discuss.elastic.co/u/Akshay_Deshpande)\ **Replies:** 0\ **Last updated:** [August 13, 2018, 2:54pm UTC](https://discuss.elastic.co/t/rollover-index-creates-a-concrete-index-using-alias/144191 "2018-08-13T14:54:18Z")
I have a job which runs daily to rollover the index when the creation time is greater than a certain period eg. 167hrs. But sometimes when the job runs, it does not rollover but creates concrete indices of alias. API r… --- ## [ELASTICsearch and Kibana as a service in 6.3](https://discuss.elastic.co/t/elasticsearch-and-kibana-as-a-service-in-6-3/144210)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 2\ **Last updated:** [August 13, 2018, 4:40pm UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-as-a-service-in-6-3/144210 "2018-08-13T16:40:22Z")
How to set up ES and Kibana as a service in 6.3 version? I didn't find it in documentation for 6.3? HELP --- ## [Graph plugin don't show the top search of certain topic](https://discuss.elastic.co/t/graph-plugin-dont-show-the-top-search-of-certain-topic/143673)
**Author:** [@CristianPerezMeme](https://discuss.elastic.co/u/CristianPerezMeme)\ **Replies:** 1\ **Last updated:** [August 13, 2018, 4:16pm UTC](https://discuss.elastic.co/t/graph-plugin-dont-show-the-top-search-of-certain-topic/143673 "2018-08-13T16:16:43Z")
I select Index, then I selec fields ("source ips" and "destination ips"), then I put the keyword for visualize the relationship between ip's, the graph show me diversity of vertices but this vertices don't contain any of… --- ## [Ruby Client for X-Pack SQL](https://discuss.elastic.co/t/ruby-client-for-x-pack-sql/143497)
**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\ **Replies:** 1\ **Last updated:** [August 13, 2018, 3:42pm UTC](https://discuss.elastic.co/t/ruby-client-for-x-pack-sql/143497 "2018-08-13T15:42:25Z")
Hi - Am trying to execute the SQL queries using the X-Pack API's with the ruby client (elasticsearch ~\> 6.1) gem. Could someone please help me how do I send the POST request using the ruby client. Thanks ! --- ## [ML is not available](https://discuss.elastic.co/t/ml-is-not-available/144069)
**Author:** [@vakarami](https://discuss.elastic.co/u/vakarami)\ **Replies:** 2\ **Last updated:** [August 13, 2018, 3:33pm UTC](https://discuss.elastic.co/t/ml-is-not-available/144069 "2018-08-13T15:33:01Z")
Recently I started to work with ELK 6.3. I know that ML is enabled by default in both Elastic and Kibana, But when I get \_xpack API, It says that ml is not available, And there is no machine learning tab in Kibana menu. … --- ## [Error injecting constructor](https://discuss.elastic.co/t/error-injecting-constructor/144171)
**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\ **Replies:** 0\ **Last updated:** [August 13, 2018, 12:37pm UTC](https://discuss.elastic.co/t/error-injecting-constructor/144171 "2018-08-13T12:37:52Z")
Hello, I am configuring winlogbeat to work with Graylog and was getting no result, I then checked elasticsearch and its status was "failed". I checked the logs and this is whats displayed: 4) Error injecting constructo… --- ## [Curator - Deleting old Snapshots is taking a long time](https://discuss.elastic.co/t/curator-deleting-old-snapshots-is-taking-a-long-time/144054)
**Author:** [@pri](https://discuss.elastic.co/u/pri)\ **Replies:** 2\ **Last updated:** [August 13, 2018, 1:00pm UTC](https://discuss.elastic.co/t/curator-deleting-old-snapshots-is-taking-a-long-time/144054 "2018-08-13T13:00:14Z")
Hi, I have been creating hourly snapshots of our prod ES to AWS s3. And have been running curator to do this task. However now I am setting up a curator action to delete snapshots older than n number of days and it is e… --- ## [Getting Exception in thread "main" java.nio.file.AccessDeniedException:](https://discuss.elastic.co/t/getting-exception-in-thread-main-java-nio-file-accessdeniedexception/144134)
**Author:** [@Kaustav\_Gupta](https://discuss.elastic.co/u/Kaustav_Gupta)\ **Replies:** 1\ **Last updated:** [August 13, 2018, 11:20am UTC](https://discuss.elastic.co/t/getting-exception-in-thread-main-java-nio-file-accessdeniedexception/144134 "2018-08-13T11:20:10Z")
I installed elasticsearch in ubuntu elk@elk-virtual-machine:~/Downloads/elasticsearch-6.3.2/bin$ ls elasticsearch elasticsearch-keystore.bat elasticsearch-setup-passwords.bat jdk-10.0.2\_linux-x64\_b… --- ## [Exact search](https://discuss.elastic.co/t/exact-search/144093)
**Author:** [@Ole](https://discuss.elastic.co/u/Ole)\ **Replies:** 3\ **Last updated:** [August 13, 2018, 11:03am UTC](https://discuss.elastic.co/t/exact-search/144093 "2018-08-13T11:03:30Z")
I have a PHP script that performs multiple queries that are mostly identical except the words being queried. They get the query words from a variable in PHP. They look like this: $q = $\_GET\['q'\]; $query = $es-\>search(\[ … --- ## [Error while creating elastic search x-pack transport client](https://discuss.elastic.co/t/error-while-creating-elastic-search-x-pack-transport-client/143839)
**Author:** [@Mahendra\_Shinde](https://discuss.elastic.co/u/Mahendra_Shinde)\ **Replies:** 2\ **Last updated:** [August 13, 2018, 10:29am UTC](https://discuss.elastic.co/t/error-while-creating-elastic-search-x-pack-transport-client/143839 "2018-08-13T10:29:04Z")
Hi, I am trying to create Transport client using below code .put("cluster.name", clusterName) .put("xpack.security.user", "elastic:RIzpjJS0HxVSgzg1oyZy") .build() val createdClient: TransportClient… --- ## [ES settings](https://discuss.elastic.co/t/es-settings/144114)
**Author:** [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)\ **Replies:** 4\ **Last updated:** [August 13, 2018, 9:49am UTC](https://discuss.elastic.co/t/es-settings/144114 "2018-08-13T09:49:14Z")
I am able to locate elasticsearch.yml (under /srv/jas/app/elasticsearch/config)file but unable to find jvm.options and log4j2.properties. What are their paths? --- ## [Geoip filter versions](https://discuss.elastic.co/t/geoip-filter-versions/143849)
**Author:** [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)\ **Replies:** 3\ **Last updated:** [August 13, 2018, 9:48am UTC](https://discuss.elastic.co/t/geoip-filter-versions/143849 "2018-08-13T09:48:25Z")
Is geoip supported in all versions of elasticsearch? --- ## [ES 6.3.2 elasticsearch-py API with \_xpack/sql](https://discuss.elastic.co/t/es-6-3-2-elasticsearch-py-api-with-xpack-sql/143729)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 2\ **Last updated:** [August 13, 2018, 9:38am UTC](https://discuss.elastic.co/t/es-6-3-2-elasticsearch-py-api-with-xpack-sql/143729 "2018-08-13T09:38:37Z")
Hi Guys, A quick question please. I am playing around with the new SQL syntax feature: https://www.elastic.co/guide/en/elasticsearch/reference/current/sql-syntax-select.html But I noticed that the SQL Rest API is curr… --- ## [Unique Count Metric and Cardinality filter not providing the same result](https://discuss.elastic.co/t/unique-count-metric-and-cardinality-filter-not-providing-the-same-result/143863)
**Author:** [@djuentgen](https://discuss.elastic.co/u/djuentgen)\ **Replies:** 2\ **Last updated:** [August 13, 2018, 9:14am UTC](https://discuss.elastic.co/t/unique-count-metric-and-cardinality-filter-not-providing-the-same-result/143863 "2018-08-13T09:14:02Z")
Hi, in the first step i have set up some metric visualizations with in this case unique count on one specific field. As a next step i want to implement watcher on this field but the filter query is not providing the sam… --- ## [Get one document per bucket in elasticsearch aggregation](https://discuss.elastic.co/t/get-one-document-per-bucket-in-elasticsearch-aggregation/144086)
**Author:** [@tvvignesh](https://discuss.elastic.co/u/tvvignesh)\ **Replies:** 3\ **Last updated:** [August 13, 2018, 8:52am UTC](https://discuss.elastic.co/t/get-one-document-per-bucket-in-elasticsearch-aggregation/144086 "2018-08-13T08:52:32Z")
I had asked a question in Stack Overflow: https://stackoverflow.com/questions/51816815/get-one-document-per-bucket-in-elasticsearch-aggregation Sharing it here. Please let me know if you know the solution for the same. --- ## [Scripted metric aggregations & sorting](https://discuss.elastic.co/t/scripted-metric-aggregations-sorting/143719)
**Author:** [@cohenran](https://discuss.elastic.co/u/cohenran)\ **Replies:** 3\ **Last updated:** [August 13, 2018, 8:48am UTC](https://discuss.elastic.co/t/scripted-metric-aggregations-sorting/143719 "2018-08-13T08:48:09Z")
I tried to select by a scripted\_metric aggregations & sort it by timestamp field. The result seems to be divided into sorted arrays in the aggregation bucket. However, the arrays themselves are not sorted between them… --- ## [Elastic search cluster with 3 nodes](https://discuss.elastic.co/t/elastic-search-cluster-with-3-nodes/144076)
**Author:** [@dinesh1](https://discuss.elastic.co/u/dinesh1)\ **Replies:** 8\ **Last updated:** [August 13, 2018, 8:03am UTC](https://discuss.elastic.co/t/elastic-search-cluster-with-3-nodes/144076 "2018-08-13T08:03:05Z")
Hi, 1.How to configure elasticsearch cluster with 3 nodes 2.How many master nodes i need to configure if i had only 3 nodes to avoid split brain. 3.If had 3 nodes, which node I need to configure in logstash --- ## [Not Able to create the fullbackup of ES index in S3](https://discuss.elastic.co/t/not-able-to-create-the-fullbackup-of-es-index-in-s3/144095)
**Author:** [@sankar\_elastic](https://discuss.elastic.co/u/sankar_elastic)\ **Replies:** 0\ **Last updated:** [August 13, 2018, 7:36am UTC](https://discuss.elastic.co/t/not-able-to-create-the-fullbackup-of-es-index-in-s3/144095 "2018-08-13T07:36:33Z")
Hi Team, I am getting below error evn i have full access to S3 bucket. anyone have any thought on this 2018-08-13T07:06:23,451\]\[INFO \]\[o.e.r.RepositoriesService\] \[sankar\] update repository \[backup\_s3\_repository\] \[2018… --- ## [Multiple cron triggers](https://discuss.elastic.co/t/multiple-cron-triggers/143604)
**Author:** [@maxh](https://discuss.elastic.co/u/maxh)\ **Replies:** 6\ **Last updated:** [August 13, 2018, 7:12am UTC](https://discuss.elastic.co/t/multiple-cron-triggers/143604 "2018-08-13T07:12:01Z")
I am trying to trigger a watch twice using cron formatted triggers, but only the first one triggers. I have noticed that the first one continues to execute and never stops, but im not sure whats wrong. --- ## [Access Index reader to generate word cloud through plugin](https://discuss.elastic.co/t/access-index-reader-to-generate-word-cloud-through-plugin/144080)
**Author:** [@dobariya](https://discuss.elastic.co/u/dobariya)\ **Replies:** 0\ **Last updated:** [August 13, 2018, 6:44am UTC](https://discuss.elastic.co/t/access-index-reader-to-generate-word-cloud-through-plugin/144080 "2018-08-13T06:44:45Z")
We are indexing text files directly into ES for content searching. We have around 500 indexes and total 3tb data sitting on ES. Now the requirement is to generate word cloud for a specific index with terms and term frequ… --- ## [Apply different tags for different terms in highlight API](https://discuss.elastic.co/t/apply-different-tags-for-different-terms-in-highlight-api/144077)
**Author:** [@dobariya](https://discuss.elastic.co/u/dobariya)\ **Replies:** 0\ **Last updated:** [August 13, 2018, 6:30am UTC](https://discuss.elastic.co/t/apply-different-tags-for-different-terms-in-highlight-api/144077 "2018-08-13T06:30:55Z")
We have a requirement to highlight different terms with the different color. To achieve the same could you please let us know if Elastic search Highlight API can provide multiple tags for different terms. For example, w… --- ## [Unable to setup a normalizer on a keyword using dynamic mapping](https://discuss.elastic.co/t/unable-to-setup-a-normalizer-on-a-keyword-using-dynamic-mapping/144040)
**Author:** [@vboulaye](https://discuss.elastic.co/u/vboulaye)\ **Replies:** 2\ **Last updated:** [August 13, 2018, 5:10am UTC](https://discuss.elastic.co/t/unable-to-setup-a-normalizer-on-a-keyword-using-dynamic-mapping/144040 "2018-08-13T05:10:56Z")
Hi, I would like to add a custom normalizer on my keyword fields. I followed up the indications in Adding a normalizer for case-insensitive search on keyword field to an active index It works fine when I apply it to a… --- ## [Restart Elasticsearch fail?](https://discuss.elastic.co/t/restart-elasticsearch-fail/144065)
**Author:** [@nxdu93](https://discuss.elastic.co/u/nxdu93)\ **Replies:** 1\ **Last updated:** [August 13, 2018, 5:04am UTC](https://discuss.elastic.co/t/restart-elasticsearch-fail/144065 "2018-08-13T05:04:12Z")
\[root@scc\_check elasticsearch\]# sudo systemctl status elasticsearch ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: fail… --- ## [Skipping indexer request buffer because index is read only](https://discuss.elastic.co/t/skipping-indexer-request-buffer-because-index-is-read-only/144064)
**Author:** [@keoreathanakvisal\_ma](https://discuss.elastic.co/u/keoreathanakvisal_ma)\ **Replies:** 0\ **Last updated:** [August 13, 2018, 4:49am UTC](https://discuss.elastic.co/t/skipping-indexer-request-buffer-because-index-is-read-only/144064 "2018-08-13T04:49:06Z")
Hi, I'm running Production Liferay DXP with ElasticSearch 6.1.4 on AWS. ElasticSearch suddenly enter Index Ready-only mode while we still have 85% of hard disk space available. Liferay keep showing error: \[19-07-2018 … --- ## [Will cross cluster connect a skip remote cluster again?](https://discuss.elastic.co/t/will-cross-cluster-connect-a-skip-remote-cluster-again/144062)
**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\ **Replies:** 0\ **Last updated:** [August 13, 2018, 3:38am UTC](https://discuss.elastic.co/t/will-cross-cluster-connect-a-skip-remote-cluster-again/144062 "2018-08-13T03:38:33Z")
if we set search.remote.cluster\_two.skip\_unavailable=true, when the remote cluster is OK after one hours or minutes, will cross cluster connect it again? [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1581) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1583)