# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1589

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1590

---

## [Search query working in One environment and not in another](https://discuss.elastic.co/t/search-query-working-in-one-environment-and-not-in-another/139516)

<div class="topic-metadata">

**Author:** [@mohammedEssabri](https://discuss.elastic.co/u/mohammedEssabri)\
**Replies:** 15\
**Last updated:** [August 7, 2018, 1:37pm UTC](https://discuss.elastic.co/t/search-query-working-in-one-environment-and-not-in-another/139516 "2018-08-07T13:37:07Z")

</div>

Dear team,

---

## [Issues with indicies after running Curator delete](https://discuss.elastic.co/t/issues-with-indicies-after-running-curator-delete/141813)

<div class="topic-metadata">

**Author:** [@rfelske](https://discuss.elastic.co/u/rfelske)\
**Replies:** 4\
**Last updated:** [August 7, 2018, 1:18pm UTC](https://discuss.elastic.co/t/issues-with-indicies-after-running-curator-delete/141813 "2018-08-07T13:18:53Z")

</div>

I have installed Curator and ran a delete command as follows: curator --config /opt/software/elk/elasticsearch-6.2.4/curator/curator.yml /opt/software/elk/elasticsearch-6.2.4/curator/action\_delete.yml The delete worked…

---

## [ES subquery](https://discuss.elastic.co/t/es-subquery/143336)

<div class="topic-metadata">

**Author:** [@AndrewLM](https://discuss.elastic.co/u/AndrewLM)\
**Replies:** 0\
**Last updated:** [August 7, 2018, 1:17pm UTC](https://discuss.elastic.co/t/es-subquery/143336 "2018-08-07T13:17:47Z")

</div>

Hello, help pls to solve some task. I have some complex "query\_string" = ( field1:text AND field2:text2 NOT...) AND (... OR ....) But I also need operation for finding like \[WORDS WITH INTERVAL\] = regex('/text1 \[a-z\]+ …

---

## [Running a Bool Query on fixed index vs different indexes](https://discuss.elastic.co/t/running-a-bool-query-on-fixed-index-vs-different-indexes/143333)

<div class="topic-metadata">

**Author:** [@Aashish\_Bhattarai](https://discuss.elastic.co/u/Aashish_Bhattarai)\
**Replies:** 0\
**Last updated:** [August 7, 2018, 1:06pm UTC](https://discuss.elastic.co/t/running-a-bool-query-on-fixed-index-vs-different-indexes/143333 "2018-08-07T13:06:05Z")

</div>

I have 10 indices in my elasticsearch cluster (4 nodes) and I want to run a term query on a field "x". All of the 10 indices have the same exact mapping and the values of some fields might differ but the values of "x" a…

---

## [Adding tags using Update API, if there were not any yet?](https://discuss.elastic.co/t/adding-tags-using-update-api-if-there-were-not-any-yet/143329)

<div class="topic-metadata">

**Author:** [@FrantisekHrdina](https://discuss.elastic.co/u/FrantisekHrdina)\
**Replies:** 0\
**Last updated:** [August 7, 2018, 12:55pm UTC](https://discuss.elastic.co/t/adding-tags-using-update-api-if-there-were-not-any-yet/143329 "2018-08-07T12:55:06Z")

</div>

Hi everyone is it possible to have entries in elasticsearch, that doesn't contain any tags and then use elasticsearch update API and add some tags? I have tried this, but not successfully. It works only if there already…

---

## [Multi\_match query for boolean fields is not work](https://discuss.elastic.co/t/multi-match-query-for-boolean-fields-is-not-work/143292)

<div class="topic-metadata">

**Author:** [@vara0855](https://discuss.elastic.co/u/vara0855)\
**Replies:** 4\
**Last updated:** [August 7, 2018, 12:54pm UTC](https://discuss.elastic.co/t/multi-match-query-for-boolean-fields-is-not-work/143292 "2018-08-07T12:54:39Z")

</div>

Version ES 6.2.3. Index "\_index": "test", "\_type": "doc", "\_id": "test", "\_score": 1, "\_source": { "type": "my", "updated\_at": "2018-08-07T08:10:13.238Z", "my": { "title": "New My", "System wide": true, "Role…

---

## [Not able to search on nested data](https://discuss.elastic.co/t/not-able-to-search-on-nested-data/143296)

<div class="topic-metadata">

**Author:** [@shruthi1](https://discuss.elastic.co/u/shruthi1)\
**Replies:** 2\
**Last updated:** [August 7, 2018, 12:49pm UTC](https://discuss.elastic.co/t/not-able-to-search-on-nested-data/143296 "2018-08-07T12:49:34Z")

</div>

I am not able to search on nested data which is a list of addresses for contacts, Expected: If i type anything directly related to contacts(FirstName, LastName, CompanyName1 etc) i am getting search results If i type a…

---

## [How to handle a huge query to elasticsearch](https://discuss.elastic.co/t/how-to-handle-a-huge-query-to-elasticsearch/143321)

<div class="topic-metadata">

**Author:** [@an.secure](https://discuss.elastic.co/u/an.secure)\
**Replies:** 0\
**Last updated:** [August 7, 2018, 12:22pm UTC](https://discuss.elastic.co/t/how-to-handle-a-huge-query-to-elasticsearch/143321 "2018-08-07T12:22:23Z")

</div>

In order to group the elastic documents in different categories, we have to run some huge queries against elasticsearch. Based on the user input we have to exclude some of the documents that match a criteria. This resul…

---

## [Sending mbean data to watcher](https://discuss.elastic.co/t/sending-mbean-data-to-watcher/143297)

<div class="topic-metadata">

**Author:** [@rkparkar](https://discuss.elastic.co/u/rkparkar)\
**Replies:** 1\
**Last updated:** [August 7, 2018, 11:28am UTC](https://discuss.elastic.co/t/sending-mbean-data-to-watcher/143297 "2018-08-07T11:28:59Z")

</div>

How can i send JMX mbeans to watcher ? can i do it directly or will i have to do it thru logstash ?

---

## [Search API by JSON](https://discuss.elastic.co/t/search-api-by-json/143310)

<div class="topic-metadata">

**Author:** [@sarankup](https://discuss.elastic.co/u/sarankup)\
**Replies:** 0\
**Last updated:** [August 7, 2018, 11:23am UTC](https://discuss.elastic.co/t/search-api-by-json/143310 "2018-08-07T11:23:10Z")

</div>

Hi, I have been using Elasticsearch through Java API. In order to search I send a JSON document to build the search query as follows WrapperQueryBuilder WrapperQueryObj = QueryBuilders.wrapperQuery(); elasticclient.pre…

---

## [Stored fields vs \_source filtering in case of large source to fetch only one field while querying](https://discuss.elastic.co/t/stored-fields-vs-source-filtering-in-case-of-large-source-to-fetch-only-one-field-while-querying/143304)

<div class="topic-metadata">

**Author:** [@Rashmi\_Ramanathan](https://discuss.elastic.co/u/Rashmi_Ramanathan)\
**Replies:** 0\
**Last updated:** [August 7, 2018, 10:58am UTC](https://discuss.elastic.co/t/stored-fields-vs-source-filtering-in-case-of-large-source-to-fetch-only-one-field-while-querying/143304 "2018-08-07T10:58:32Z")

</div>

To retrieve fields while querying, AFAIK, there are two ways to achieve in ES stored\_fields source filtering I have an index with source enabled where it has few large documents also. While querying, I want to fetch o…

---

## [QueryStringQuery interpretation bug ES 6.2.4](https://discuss.elastic.co/t/querystringquery-interpretation-bug-es-6-2-4/143303)

<div class="topic-metadata">

**Author:** [@klimapet](https://discuss.elastic.co/u/klimapet)\
**Replies:** 0\
**Last updated:** [August 7, 2018, 10:32am UTC](https://discuss.elastic.co/t/querystringquery-interpretation-bug-es-6-2-4/143303 "2018-08-07T10:32:25Z")

</div>

Hi, I´ve run into problems after upgrading Elastic from 5.6.3 to 6.2.4 using QueryStringQuery. Apparently the new version has some issue in interpretation of search query when addressing specific field to search in. Le…

---

## [Elastic search queries via URL change from Version 2.1 to 6.3](https://discuss.elastic.co/t/elastic-search-queries-via-url-change-from-version-2-1-to-6-3/143285)

<div class="topic-metadata">

**Author:** [@Niclas\_Popp\_BPS](https://discuss.elastic.co/u/Niclas_Popp_BPS)\
**Replies:** 2\
**Last updated:** [August 7, 2018, 9:17am UTC](https://discuss.elastic.co/t/elastic-search-queries-via-url-change-from-version-2-1-to-6-3/143285 "2018-08-07T09:17:58Z")

</div>

Hi there, I have been using an older version of elastic search(2.1) and just recently switched to the newest one, but due to some API changes my URL request unfortunately don't work anymore, they used to look like this: …

---

## [Elastic doesn't start again after I shut it down](https://discuss.elastic.co/t/elastic-doesnt-start-again-after-i-shut-it-down/143056)

<div class="topic-metadata">

**Author:** [@AmrMostafa](https://discuss.elastic.co/u/AmrMostafa)\
**Replies:** 6\
**Last updated:** [August 7, 2018, 9:17am UTC](https://discuss.elastic.co/t/elastic-doesnt-start-again-after-i-shut-it-down/143056 "2018-08-07T09:17:39Z")

</div>

\-\>Elasticsearch version:- 6.3.2 -\>JVM version (java -version): java version "10.0.2" 2018-07-17 Java(TM) SE Runtime Environment 18.3 (build 10.0.2+13) Java HotSpot(TM) 64-Bit Server VM 18.3 (build 10.0.2+13, mixed mo…

---

## [Elastica not grouping aggregation before setScript](https://discuss.elastic.co/t/elastica-not-grouping-aggregation-before-setscript/143128)

<div class="topic-metadata">

**Author:** [@Islam\_Elshobokshy](https://discuss.elastic.co/u/Islam_Elshobokshy)\
**Replies:** 1\
**Last updated:** [August 7, 2018, 8:57am UTC](https://discuss.elastic.co/t/elastica-not-grouping-aggregation-before-setscript/143128 "2018-08-07T08:57:42Z")

</div>

I have a type product in elasticsearch that contains a column containing multiple ids, some of them are the same. There are also columns containing current price and the quantity. I want the to get the sum of price \* av…

---

## [Nested Aggregation Top Hits and sort](https://discuss.elastic.co/t/nested-aggregation-top-hits-and-sort/143275)

<div class="topic-metadata">

**Author:** [@ercancavusoglu](https://discuss.elastic.co/u/ercancavusoglu)\
**Replies:** 0\
**Last updated:** [August 7, 2018, 8:16am UTC](https://discuss.elastic.co/t/nested-aggregation-top-hits-and-sort/143275 "2018-08-07T08:16:26Z")

</div>

I have a nested structure at ES. Tags parameters is type equals nested. I want to sort by evaluationCount in tags and min price. after I wanna getting top\_hits. How can I do this? example data is here: {"price":185,…

---

## [Search nested objects using wildcard / multiple nested.path](https://discuss.elastic.co/t/search-nested-objects-using-wildcard-multiple-nested-path/143268)

<div class="topic-metadata">

**Author:** [@tiuser4567](https://discuss.elastic.co/u/tiuser4567)\
**Replies:** 0\
**Last updated:** [August 7, 2018, 8:04am UTC](https://discuss.elastic.co/t/search-nested-objects-using-wildcard-multiple-nested-path/143268 "2018-08-07T08:04:34Z")

</div>

Hello, My question is somewhat similar to Search nested objects using wildcard paths? (asking again in case there were changes / updates). We will be using ES 6.0.1. Generally, we will have nested documents (e.g. list…

---

## [ES\_PATH\_CONF problem](https://discuss.elastic.co/t/es-path-conf-problem/142744)

<div class="topic-metadata">

**Author:** [@AurelienG](https://discuss.elastic.co/u/AurelienG)\
**Replies:** 3\
**Last updated:** [August 7, 2018, 7:40am UTC](https://discuss.elastic.co/t/es-path-conf-problem/142744 "2018-08-07T07:40:23Z")

</div>

I've seen several topics about this but none really solved my problem. I need to change Elasticsearch config path so I created override.conf in /etc/systemd/system/elasticsearch.service.d/ with the following lines: \[Se…

---

## [Elasticsearch SAML integration while using HTTP-Redirect](https://discuss.elastic.co/t/elasticsearch-saml-integration-while-using-http-redirect/139658)

<div class="topic-metadata">

**Author:** [@talon](https://discuss.elastic.co/u/talon)\
**Replies:** 55\
**Last updated:** [August 7, 2018, 5:42am UTC](https://discuss.elastic.co/t/elasticsearch-saml-integration-while-using-http-redirect/139658 "2018-08-07T05:42:18Z")

</div>

I am integrating ELK with a AD serve via SAML, the partial message from metadata file supplied by AD serve is { \</ds:X509Data\>\</ds:KeyInfo\>\</md:KeyDescriptor\>md:NameIDFormaturn:oasis:names:tc:SAML:1.1:nameid-format:un…

---

## [Elasticsearch throw error on mappings](https://discuss.elastic.co/t/elasticsearch-throw-error-on-mappings/143232)

<div class="topic-metadata">

**Author:** [@cjaiwenwen](https://discuss.elastic.co/u/cjaiwenwen)\
**Replies:** 5\
**Last updated:** [August 7, 2018, 5:55am UTC](https://discuss.elastic.co/t/elasticsearch-throw-error-on-mappings/143232 "2018-08-07T05:55:40Z")

</div>

Hi Team I am running on Elasticsearch 6.3, i am generate some geo-data from my script to elasticsearch through Elasticsearch python API. my geo-point mapping according to https://www.elastic.co/guide/en/elasticsearch/r…

---

## [HTML sanitisation for Kibana link](https://discuss.elastic.co/t/html-sanitisation-for-kibana-link/142753)

<div class="topic-metadata">

**Author:** [@programagor](https://discuss.elastic.co/u/programagor)\
**Replies:** 4\
**Last updated:** [August 7, 2018, 5:14am UTC](https://discuss.elastic.co/t/html-sanitisation-for-kibana-link/142753 "2018-08-07T05:14:33Z")

</div>

Greetings I'm implementing a spam detection tool using Watcher. Right now, I'm just going through the last 5 minutes of logs, and reporting any messages (grouped by the subject) which exceed some defined thresholds. Th…

---

## [How to bulk insert 600MB large json file to elasticsearch?](https://discuss.elastic.co/t/how-to-bulk-insert-600mb-large-json-file-to-elasticsearch/142700)

<div class="topic-metadata">

**Author:** [@Ash\_Chamari](https://discuss.elastic.co/u/Ash_Chamari)\
**Replies:** 2\
**Last updated:** [August 7, 2018, 12:23am UTC](https://discuss.elastic.co/t/how-to-bulk-insert-600mb-large-json-file-to-elasticsearch/142700 "2018-08-07T00:23:23Z")

</div>

---

## [Storage cost for Elastic Cloud](https://discuss.elastic.co/t/storage-cost-for-elastic-cloud/143088)

<div class="topic-metadata">

**Author:** [@kelvinsmj](https://discuss.elastic.co/u/kelvinsmj)\
**Replies:** 6\
**Last updated:** [August 6, 2018, 11:38pm UTC](https://discuss.elastic.co/t/storage-cost-for-elastic-cloud/143088 "2018-08-06T23:38:55Z")

</div>

Hi, I'd like to find out how storage cost works with Elastic Cloud. I've noticed that charges are per GB/RAM/hour, but there is no mention of storage. e.g. if I need 8TB storage, 64GB ram per node, how much it will co…

---

## [Define username and password for access to elasticsearch database](https://discuss.elastic.co/t/define-username-and-password-for-access-to-elasticsearch-database/143211)

<div class="topic-metadata">

**Author:** [@Masoumeh\_Shavikloo](https://discuss.elastic.co/u/Masoumeh_Shavikloo)\
**Replies:** 4\
**Last updated:** [August 6, 2018, 9:43pm UTC](https://discuss.elastic.co/t/define-username-and-password-for-access-to-elasticsearch-database/143211 "2018-08-06T21:43:43Z")

</div>

Already, I worked with MySQL database with PHP. There, for security reason, we needed username and password for access to the database. I want to know how to specify username and password for elasticsearch database. Plea…

---

## [Adjust scroll size dynamically](https://discuss.elastic.co/t/adjust-scroll-size-dynamically/142992)

<div class="topic-metadata">

**Author:** [@willhcurtin](https://discuss.elastic.co/u/willhcurtin)\
**Replies:** 0\
**Last updated:** [August 3, 2018, 11:09pm UTC](https://discuss.elastic.co/t/adjust-scroll-size-dynamically/142992 "2018-08-03T23:09:32Z")

</div>

Hi all, I was wondering if there it is possible to reduce the size of a scroll search dynamically. I am using Elasticsearch 2.3. I am coding in Java if that helps. My use case: I am trying to move items from my ES c…

---

## ["We Opened X-Pack"](https://discuss.elastic.co/t/we-opened-x-pack/143143)

<div class="topic-metadata">

**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\
**Replies:** 8\
**Last updated:** [August 6, 2018, 9:10pm UTC](https://discuss.elastic.co/t/we-opened-x-pack/143143 "2018-08-06T21:10:51Z")

</div>

https://www.elastic.co/products/x-pack/open What does it mean? What I see it still requires license to run: https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-security.html There is no way to …

---

## [Dbaas, legal rights, size](https://discuss.elastic.co/t/dbaas-legal-rights-size/139039)

<div class="topic-metadata">

**Author:** [@bgbruno](https://discuss.elastic.co/u/bgbruno)\
**Replies:** 5\
**Last updated:** [August 6, 2018, 9:09pm UTC](https://discuss.elastic.co/t/dbaas-legal-rights-size/139039 "2018-08-06T21:09:11Z")

</div>

Hello Elastic - I'm looking for database powerfull to "fulltext search" and "able to hold more then 1mb of text content" and "database as a service". Q can I store more that \>100mb text content? elastic / elasticsearch…

---

## [\[allocate\_stale\_primary\] primary is already assigned](https://discuss.elastic.co/t/allocate-stale-primary-primary-is-already-assigned/142995)

<div class="topic-metadata">

**Author:** [@jethroft](https://discuss.elastic.co/u/jethroft)\
**Replies:** 6\
**Last updated:** [August 6, 2018, 7:30pm UTC](https://discuss.elastic.co/t/allocate-stale-primary-primary-is-already-assigned/142995 "2018-08-06T19:30:33Z")

</div>

My ES 5.6.3 cluster is yellow: administrator@srv4-sv:~$ curl -XGET 'localhost:9200/\_cluster/health?pretty' { "cluster\_name" : "redacted", "status" : "yellow", "timed\_out" : false, "number\_of\_nodes" : 15, "numb…

---

## [Elasticsearch Logging Libraries explained](https://discuss.elastic.co/t/elasticsearch-logging-libraries-explained/143212)

<div class="topic-metadata">

**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\
**Replies:** 0\
**Last updated:** [August 6, 2018, 7:33pm UTC](https://discuss.elastic.co/t/elasticsearch-logging-libraries-explained/143212 "2018-08-06T19:33:15Z")

</div>

Does anyone know if there is a list of ES logging libraries explained anywhere? I'm trying to enable DEBUG with the root logger { "transient": { "logger": { "\_root": "INFO" } } } Which is great, except there are a…

---

## [ES 5.3 on AWS cloud. \_reindex got stopped after some docs](https://discuss.elastic.co/t/es-5-3-on-aws-cloud-reindex-got-stopped-after-some-docs/143037)

<div class="topic-metadata">

**Author:** [@nsrini](https://discuss.elastic.co/u/nsrini)\
**Replies:** 7\
**Last updated:** [August 6, 2018, 7:32pm UTC](https://discuss.elastic.co/t/es-5-3-on-aws-cloud-reindex-got-stopped-after-some-docs/143037 "2018-08-06T19:32:03Z")

</div>

Hi, I am running the following command from Kibana. I use ES 5.3 on AWS ES. My reindexing got stopped after around 80K documents. Why? How to troubleshoot this? I tried two times with different index name. It stopped at…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1588)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1590)
