# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1593 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1594 --- ## [Finding a sentence in elasticsearch-php](https://discuss.elastic.co/t/finding-a-sentence-in-elasticsearch-php/142891)
**Author:** [@Farrokh\_Yousefi](https://discuss.elastic.co/u/Farrokh_Yousefi)\ **Replies:** 1\ **Last updated:** [August 3, 2018, 10:34am UTC](https://discuss.elastic.co/t/finding-a-sentence-in-elasticsearch-php/142891 "2018-08-03T10:34:39Z")
I want to use elasticsearch to retrieve relevant documents. Assume I have, for example, below documents: 1- Is this a book? 2- This is the book. 3- That is a book. 4- They are books. 5- This is a book. and suppose … --- ## [Use field value of one querry to another](https://discuss.elastic.co/t/use-field-value-of-one-querry-to-another/142877)
**Author:** [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\ **Replies:** 0\ **Last updated:** [August 3, 2018, 9:07am UTC](https://discuss.elastic.co/t/use-field-value-of-one-querry-to-another/142877 "2018-08-03T09:07:08Z")
Hi all, I have several documents with several fields. I need to know how to querry the follwing situation in discovery (kibana) Doc1: field1, field2 Doc2: field2, field3 "Show (and save?) me in Doc1 all "field2" w… --- ## [Special Character Search with kuromoji analyzer](https://discuss.elastic.co/t/special-character-search-with-kuromoji-analyzer/142874)
**Author:** [@gaurishkumar](https://discuss.elastic.co/u/gaurishkumar)\ **Replies:** 0\ **Last updated:** [August 3, 2018, 8:49am UTC](https://discuss.elastic.co/t/special-character-search-with-kuromoji-analyzer/142874 "2018-08-03T08:49:49Z")
Hi , I have an issue with the Japanese analyzer with "tokenizer": "kuromoji\_tokenizer". I want to make special character search along with this tokenizer . My analyzer is as below: "analyzer\_jp\_stemmer": { "filter": … --- ## [Cannot download ".npm" extension](https://discuss.elastic.co/t/cannot-download-npm-extension/142855)
**Author:** [@stone89son1](https://discuss.elastic.co/u/stone89son1)\ **Replies:** 6\ **Last updated:** [August 3, 2018, 8:07am UTC](https://discuss.elastic.co/t/cannot-download-npm-extension/142855 "2018-08-03T08:07:29Z")
Hi Friend. Enviroment: Centos 7. The server has internet but can not download ".npm" extension: command: wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-6.3.2.rpm Thank you very much. --- ## [No mapping found for \[timestamp\] in order to sort on](https://discuss.elastic.co/t/no-mapping-found-for-timestamp-in-order-to-sort-on/142847)
**Author:** [@APJ](https://discuss.elastic.co/u/APJ)\ **Replies:** 1\ **Last updated:** [August 3, 2018, 7:38am UTC](https://discuss.elastic.co/t/no-mapping-found-for-timestamp-in-order-to-sort-on/142847 "2018-08-03T07:38:21Z")
I have developed a small node.js server, which will use the elasticsearch npm module to get the latest JSON document based on timestamp. Here is the code for it, let express = require('express'); let app = express(); l… --- ## [How to perform reindex operation properly](https://discuss.elastic.co/t/how-to-perform-reindex-operation-properly/142194)
**Author:** [@jacekr](https://discuss.elastic.co/u/jacekr)\ **Replies:** 2\ **Last updated:** [August 3, 2018, 7:33am UTC](https://discuss.elastic.co/t/how-to-perform-reindex-operation-properly/142194 "2018-08-03T07:33:20Z")
hello When the given index is being reindexed it is closed hence not available for the users. What is the proper way to do reindex on the production system where the index should be highly available? Regards Jacek --- ## [Should I force merge after resetting refresh interval after indexing](https://discuss.elastic.co/t/should-i-force-merge-after-resetting-refresh-interval-after-indexing/142590)
**Author:** [@srikrishna](https://discuss.elastic.co/u/srikrishna)\ **Replies:** 3\ **Last updated:** [August 3, 2018, 7:07am UTC](https://discuss.elastic.co/t/should-i-force-merge-after-resetting-refresh-interval-after-indexing/142590 "2018-08-03T07:07:58Z")
I am doing bulk indexing and as an optimization I set the refresh\_interval of the indices to -1. I am going to set it back to the default after I am done. In one of the ES documents (perhaps old) I read I have to forceme… --- ## [Elastic.co hosted instance and number of nodes](https://discuss.elastic.co/t/elastic-co-hosted-instance-and-number-of-nodes/142407)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 8\ **Last updated:** [August 3, 2018, 6:32am UTC](https://discuss.elastic.co/t/elastic-co-hosted-instance-and-number-of-nodes/142407 "2018-08-03T06:32:48Z")
I am testing hosted instance and dont want to use replicas but i want to have multiple nodes for better performance in the cloud calculator https://www.elastic.co/cloud/elasticsearch-service/pricing i see per example 32G… --- ## [Need help on Indexing and Sharding](https://discuss.elastic.co/t/need-help-on-indexing-and-sharding/142821)
**Author:** [@pohsun.teh](https://discuss.elastic.co/u/pohsun.teh)\ **Replies:** 2\ **Last updated:** [August 3, 2018, 5:36am UTC](https://discuss.elastic.co/t/need-help-on-indexing-and-sharding/142821 "2018-08-03T05:36:20Z")
Greetings Right now I have Elasticsearch allocated with 8GB heap, 1 node, daily indexing, default 5 shards, estimated 15GB of documents per day. The problem is that it keeps hitting the "request timeout 30000ms" every … --- ## [Why the query result of match\_phrase\_prefix and prefix is different](https://discuss.elastic.co/t/why-the-query-result-of-match-phrase-prefix-and-prefix-is-different/142845)
**Author:** [@zhujipeng](https://discuss.elastic.co/u/zhujipeng)\ **Replies:** 0\ **Last updated:** [August 3, 2018, 4:56am UTC](https://discuss.elastic.co/t/why-the-query-result-of-match-phrase-prefix-and-prefix-is-different/142845 "2018-08-03T04:56:44Z")
wildcard query GET information/\_validate/query?explain { "query": { "bool": { "should": \[ { "wildcard": { "title": "cve-2018\*" } }, { "wildcar… --- ## [Questions about license for elasticsearch sql](https://discuss.elastic.co/t/questions-about-license-for-elasticsearch-sql/142833)
**Author:** [@ranranxiaoya](https://discuss.elastic.co/u/ranranxiaoya)\ **Replies:** 1\ **Last updated:** [August 3, 2018, 1:42am UTC](https://discuss.elastic.co/t/questions-about-license-for-elasticsearch-sql/142833 "2018-08-03T01:42:30Z")
Hi, all. Does elasticsearch sql require a license for commercial product, please？ --- ## [How to make a get request to retrieve the latest document of an index in the elasticsearch cluster?](https://discuss.elastic.co/t/how-to-make-a-get-request-to-retrieve-the-latest-document-of-an-index-in-the-elasticsearch-cluster/142828)
**Author:** [@APJ](https://discuss.elastic.co/u/APJ)\ **Replies:** 3\ **Last updated:** [August 3, 2018, 1:15am UTC](https://discuss.elastic.co/t/how-to-make-a-get-request-to-retrieve-the-latest-document-of-an-index-in-the-elasticsearch-cluster/142828 "2018-08-03T01:15:57Z")
I am developing a node.js application to get the latest value of an index from an elastic cluster. My logstash server pipes data to elasticsearch every second. So, the elasticsearch index gets updated every second. Eve… --- ## [Unable to create new indices](https://discuss.elastic.co/t/unable-to-create-new-indices/142471)
**Author:** [@ganessen23](https://discuss.elastic.co/u/ganessen23)\ **Replies:** 8\ **Last updated:** [August 3, 2018, 12:31am UTC](https://discuss.elastic.co/t/unable-to-create-new-indices/142471 "2018-08-03T00:31:04Z")
Hello, My present scenario is that I am using ELK on a linux machine and it turns out that my trial license has been expired since April 27, 2018 7:19 PM MUT, but I am still able to send logs files/data to my previously… --- ## [GeoIP Mapping in ES](https://discuss.elastic.co/t/geoip-mapping-in-es/142803)
**Author:** [@casperhxr](https://discuss.elastic.co/u/casperhxr)\ **Replies:** 2\ **Last updated:** [August 2, 2018, 10:32pm UTC](https://discuss.elastic.co/t/geoip-mapping-in-es/142803 "2018-08-02T22:32:14Z")
Hello All, I currently have a working ElasticStack 6.3.0. I'm trying to set the mapping for a new GeoIP field. By default when I use the 'geoip' logstash filter everything works fine. I get a field called geoip.location… --- ## [How create some nodes and install as service in the same machine ES 6.3](https://discuss.elastic.co/t/how-create-some-nodes-and-install-as-service-in-the-same-machine-es-6-3/142736)
**Author:** [@adrian.calvo](https://discuss.elastic.co/u/adrian.calvo)\ **Replies:** 1\ **Last updated:** [August 2, 2018, 10:24pm UTC](https://discuss.elastic.co/t/how-create-some-nodes-and-install-as-service-in-the-same-machine-es-6-3/142736 "2018-08-02T22:24:51Z")
Hi to everybody, ELK is installed as debian pkg: " sudo apt-get update && sudo apt-get install elasticsearch" Im trying to set up a ELK cluster in the same machine (ubuntu 16.04) my intention is run 2 elasticsearch i… --- ## [Elasticsearch query returning different value type depending on who makes the request](https://discuss.elastic.co/t/elasticsearch-query-returning-different-value-type-depending-on-who-makes-the-request/142814)
**Author:** [@karoline](https://discuss.elastic.co/u/karoline)\ **Replies:** 0\ **Last updated:** [August 2, 2018, 10:23pm UTC](https://discuss.elastic.co/t/elasticsearch-query-returning-different-value-type-depending-on-who-makes-the-request/142814 "2018-08-02T22:23:18Z")
When I run a query to Elasticsearch using Postman or Kibana, it works as expected. The "value" field returns Double values, which makes sense, because they are stored as a Double type. But when my AWS Lambda Function m… --- ## [Enable x-pack](https://discuss.elastic.co/t/enable-x-pack/142252)
**Author:** [@avranCheck](https://discuss.elastic.co/u/avranCheck)\ **Replies:** 6\ **Last updated:** [August 2, 2018, 9:30pm UTC](https://discuss.elastic.co/t/enable-x-pack/142252 "2018-08-02T21:30:28Z")
Based on this https://www.elastic.co/blog/doubling-down-on-open and https://www.elastic.co/products/x-pack/open I was expecting to see XPack in the base product I have ELK 6.3.0 and don't see the xpack settings mentione… --- ## [Monitoring -\> Elasticsearch -\> Nodes = sort broken](https://discuss.elastic.co/t/monitoring-elasticsearch-nodes-sort-broken/142212)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 4\ **Last updated:** [August 2, 2018, 8:42pm UTC](https://discuss.elastic.co/t/monitoring-elasticsearch-nodes-sort-broken/142212 "2018-08-02T20:42:25Z")
I'm using Elastic Stack 6.3.1 and while in Monitoring app (via Kibana), if I choose Nodes (under Elasticsearch) and then try to sort by Name (by clicking on it), I see arrow goes up/down, however sort isn't working (I ca… --- ## [Disable shard allocation when bouncing different node types?](https://discuss.elastic.co/t/disable-shard-allocation-when-bouncing-different-node-types/142804)
**Author:** [@seancdugan](https://discuss.elastic.co/u/seancdugan)\ **Replies:** 0\ **Last updated:** [August 2, 2018, 7:53pm UTC](https://discuss.elastic.co/t/disable-shard-allocation-when-bouncing-different-node-types/142804 "2018-08-02T19:53:33Z")
I've looked all over and haven't found anyone asking this question. My elasticsearch environment has each elasticsearch role running on different VMs. Example: 3 master nodes running on 3 separate VMs, 3 client nodes ru… --- ## [How to source search queries from a file](https://discuss.elastic.co/t/how-to-source-search-queries-from-a-file/142440)
**Author:** [@username123](https://discuss.elastic.co/u/username123)\ **Replies:** 2\ **Last updated:** [August 2, 2018, 7:28pm UTC](https://discuss.elastic.co/t/how-to-source-search-queries-from-a-file/142440 "2018-08-02T19:28:34Z")
Let's say I have a huge file with the queries that I have recorded over time: "GET /primary/\_analyze?analyzer=foldedlower&text=yomu "GET /primary/\_analyze?analyzer=foldedlower&text=yonde "GET /primary/\_analyze?analyzer=… --- ## [Elasticsearch Architecture](https://discuss.elastic.co/t/elasticsearch-architecture/142778)
**Author:** [@ytzlax](https://discuss.elastic.co/u/ytzlax)\ **Replies:** 4\ **Last updated:** [August 2, 2018, 6:37pm UTC](https://discuss.elastic.co/t/elasticsearch-architecture/142778 "2018-08-02T18:37:36Z")
Hi, I use elasticsearch 6. I have 2 types of document, x and y. From y I will have 50,000 documents, and from x I will have 500 millions. The two type of documents have different fields. I have 2 question: what is… --- ## [Creating an Ingest Pipeline](https://discuss.elastic.co/t/creating-an-ingest-pipeline/142784)
**Author:** [@Umbrae\_Soulsbane](https://discuss.elastic.co/u/Umbrae_Soulsbane)\ **Replies:** 4\ **Last updated:** [August 2, 2018, 6:12pm UTC](https://discuss.elastic.co/t/creating-an-ingest-pipeline/142784 "2018-08-02T18:12:11Z")
Hoping I can get some help. I am trying to setup Elastic with our CMS to index content on our website. Everything is fine except with documents where I cannot seem to create an ingest pipeline. I have been searching like… --- ## [Need to monitor multiple Log sources](https://discuss.elastic.co/t/need-to-monitor-multiple-log-sources/142150)
**Author:** [@addanuj](https://discuss.elastic.co/u/addanuj)\ **Replies:** 3\ **Last updated:** [August 2, 2018, 5:55pm UTC](https://discuss.elastic.co/t/need-to-monitor-multiple-log-sources/142150 "2018-08-02T17:55:32Z")
HI All, I have 200 different Log sources which i need to monitor all of them has different IP address, what is the best possible way if any of the IP/Logsource is not sending logs to ELK, i need to generate an alert. a … --- ## [Missing text in search results](https://discuss.elastic.co/t/missing-text-in-search-results/142796)
**Author:** [@balusiddu](https://discuss.elastic.co/u/balusiddu)\ **Replies:** 0\ **Last updated:** [August 2, 2018, 5:53pm UTC](https://discuss.elastic.co/t/missing-text-in-search-results/142796 "2018-08-02T17:53:37Z")
Hi All, we are started recently using elastic search, one of the requirement which we need to implement is showing the missed text in search results like google. example: i am searching for a text "elastic search resul… --- ## [Elasticsearch 6.2 - Composite Bucket Aggregation with Sum Bucket Aggregation and Pipeline Aggregations](https://discuss.elastic.co/t/elasticsearch-6-2-composite-bucket-aggregation-with-sum-bucket-aggregation-and-pipeline-aggregations/142658)
**Author:** [@BrobaFett](https://discuss.elastic.co/u/BrobaFett)\ **Replies:** 2\ **Last updated:** [August 2, 2018, 4:56pm UTC](https://discuss.elastic.co/t/elasticsearch-6-2-composite-bucket-aggregation-with-sum-bucket-aggregation-and-pipeline-aggregations/142658 "2018-08-02T16:56:27Z")
Hi, I wanted to confirm if this feature is unavailable as of 6.2. Currently, I am able to create buckets according to my sources using the Composite Bucket Aggregation. I then run several sub-aggregations (Sum Metric A… --- ## [Grafana with elasticsearch : HTTP 400 bad request issue](https://discuss.elastic.co/t/grafana-with-elasticsearch-http-400-bad-request-issue/142791)
**Author:** [@sebastienf](https://discuss.elastic.co/u/sebastienf)\ **Replies:** 0\ **Last updated:** [August 2, 2018, 4:44pm UTC](https://discuss.elastic.co/t/grafana-with-elasticsearch-http-400-bad-request-issue/142791 "2018-08-02T16:44:07Z")
I am trying to bind Grafana 5.2.1 with ES 5.5. I success to make an ES Data Source and it works perfectly ; index and time field are read correctly without error). Then, I am facing a weird issue ; when I create a dash… --- ## [Advanced ML job, transforming data](https://discuss.elastic.co/t/advanced-ml-job-transforming-data/142645)
**Author:** [@palace](https://discuss.elastic.co/u/palace)\ **Replies:** 5\ **Last updated:** [August 2, 2018, 4:16pm UTC](https://discuss.elastic.co/t/advanced-ml-job-transforming-data/142645 "2018-08-02T16:16:17Z")
Hello, I am making an advanced ML job in X-pack that will be partitioned by a certain job-type. At the moment, the data in the field job-type that is in ES includes the version number as: "job\_cats:release-4" (this is a… --- ## [Histogram from terms aggregation result](https://discuss.elastic.co/t/histogram-from-terms-aggregation-result/140777)
**Author:** [@babolivier](https://discuss.elastic.co/u/babolivier)\ **Replies:** 4\ **Last updated:** [August 2, 2018, 2:22pm UTC](https://discuss.elastic.co/t/histogram-from-terms-aggregation-result/140777 "2018-08-02T14:22:36Z")
Hey, I'm trying to get a histogram (not a date histogram) from the amount of time our users logged in in a given time window. We store a user's username in each document related to any activity from that specific user, … --- ## [Uncommonly common recommendation based on page view stats](https://discuss.elastic.co/t/uncommonly-common-recommendation-based-on-page-view-stats/142729)
**Author:** [@outlookvineet](https://discuss.elastic.co/u/outlookvineet)\ **Replies:** 2\ **Last updated:** [August 2, 2018, 2:12pm UTC](https://discuss.elastic.co/t/uncommonly-common-recommendation-based-on-page-view-stats/142729 "2018-08-02T14:12:05Z")
Hi, My question is reference to the example given in following post on significant terms use case https://www.elastic.co/guide/en/elasticsearch/guide/current/\_significant\_terms\_demo.html#\_recommending\_based\_on\_statist… --- ## [Update one entry in an array](https://discuss.elastic.co/t/update-one-entry-in-an-array/142386)
**Author:** [@dobrien](https://discuss.elastic.co/u/dobrien)\ **Replies:** 2\ **Last updated:** [August 2, 2018, 2:04pm UTC](https://discuss.elastic.co/t/update-one-entry-in-an-array/142386 "2018-08-02T14:04:17Z")
Using ES 5.6.3: I am trying to update only one entry in an array. For Example: "myArray":\[ "entry1", "entry2" \] I am trying to change the entry2 entry to entry3 and leave entry1 alone. If I use {"script": { "inl… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1592) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1594)