# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1596

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1597

---

## [Third nodes doesn't work](https://discuss.elastic.co/t/third-nodes-doesnt-work/142505)

<div class="topic-metadata">

**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\
**Replies:** 1\
**Last updated:** [August 1, 2018, 9:32am UTC](https://discuss.elastic.co/t/third-nodes-doesnt-work/142505 "2018-08-01T09:32:38Z")

</div>

Hi, I wanted to add a third node to my cluster, but it doesn't work : \[root@frghcslnetv11 elasticsearch\]# tail -40 network-logs.log at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124) ~\[…

---

## [Collaps sort](https://discuss.elastic.co/t/collaps-sort/142513)

<div class="topic-metadata">

**Author:** [@peteratef](https://discuss.elastic.co/u/peteratef)\
**Replies:** 0\
**Last updated:** [August 1, 2018, 8:59am UTC](https://discuss.elastic.co/t/collaps-sort/142513 "2018-08-01T08:59:26Z")

</div>

i have a simple way, i have 3 users, Peter, John, Micheal each one has more than one record, with timestamp i want to sort each one desc (according to his time stamp) and sort the results asc/desc for example john (3…

---

## [\[5.6.x\] Cluster stability above Docker Swarm](https://discuss.elastic.co/t/5-6-x-cluster-stability-above-docker-swarm/142297)

<div class="topic-metadata">

**Author:** [@Daniel\_Rogatchevsky](https://discuss.elastic.co/u/Daniel_Rogatchevsky)\
**Replies:** 1\
**Last updated:** [August 1, 2018, 8:58am UTC](https://discuss.elastic.co/t/5-6-x-cluster-stability-above-docker-swarm/142297 "2018-08-01T08:58:21Z")

</div>

Hello all, We have an ES cluster running in our pre-production environment, using official Docker images and Swarm. The cluster contains 3 nodes that are running as both data and master and a single agent node. Attachi…

---

## [Notify without alerts x-pack?](https://discuss.elastic.co/t/notify-without-alerts-x-pack/138516)

<div class="topic-metadata">

**Author:** [@remco\_zwaan](https://discuss.elastic.co/u/remco_zwaan)\
**Replies:** 0\
**Last updated:** [July 4, 2018, 8:48am UTC](https://discuss.elastic.co/t/notify-without-alerts-x-pack/138516 "2018-07-04T08:48:07Z")

</div>

Hi, We have a availability index. We have 1400 accommodations in the the index. Each accommodation has by default 365 days availability. When a lodge is booked we remove the selected dates from the availability index…

---

## [Error in pipeline aggregation Elastic search](https://discuss.elastic.co/t/error-in-pipeline-aggregation-elastic-search/142502)

<div class="topic-metadata">

**Author:** [@umeshmishra099](https://discuss.elastic.co/u/umeshmishra099)\
**Replies:** 0\
**Last updated:** [August 1, 2018, 8:12am UTC](https://discuss.elastic.co/t/error-in-pipeline-aggregation-elastic-search/142502 "2018-08-01T08:12:34Z")

</div>

AggregationBuilder aggregationBuilder = AggregationBuilders.terms("Frequency"). field("fieldName").minDocCount(1).size(Integer.MAX\_VALUE); aggregationBuilder.subAggregation(AggregationBuilders.count("count")); Pipelin…

---

## [New Features of Elastic Stack 6.2](https://discuss.elastic.co/t/new-features-of-elastic-stack-6-2/142497)

<div class="topic-metadata">

**Author:** [@regiereyes15](https://discuss.elastic.co/u/regiereyes15)\
**Replies:** 1\
**Last updated:** [August 1, 2018, 8:07am UTC](https://discuss.elastic.co/t/new-features-of-elastic-stack-6-2/142497 "2018-08-01T08:07:50Z")

</div>

Hello All, We would like to ask the new features of Elastic Stack 6.2 that we can introduce in Security Analytics. Currently we have already the Windows Skedler Alert but we still need to determine some.

---

## [Collapse sort with normal sort in same query](https://discuss.elastic.co/t/collapse-sort-with-normal-sort-in-same-query/142391)

<div class="topic-metadata">

**Author:** [@peteratef](https://discuss.elastic.co/u/peteratef)\
**Replies:** 0\
**Last updated:** [July 31, 2018, 2:37pm UTC](https://discuss.elastic.co/t/collapse-sort-with-normal-sort-in-same-query/142391 "2018-07-31T14:37:48Z")

</div>

Dear Guys i am trying to make the following Query { "query": { "bool": { "must": \[{ "terms": { "plugin\_name.keyword":\["5b39fa87c1fb830245e83b7a", "5b3b493bc1fb8307016e045f"\] } } \], "filter": { "bool": { "mus…

---

## [Retrieving documents by ids in a static list using ElasticSearch](https://discuss.elastic.co/t/retrieving-documents-by-ids-in-a-static-list-using-elasticsearch/142495)

<div class="topic-metadata">

**Author:** [@jainendra](https://discuss.elastic.co/u/jainendra)\
**Replies:** 0\
**Last updated:** [August 1, 2018, 7:51am UTC](https://discuss.elastic.co/t/retrieving-documents-by-ids-in-a-static-list-using-elasticsearch/142495 "2018-08-01T07:51:47Z")

</div>

I am having a hard time trying to solve a problem. The problem is something like this - I have millions of documents in a type called user in ElasticSearch. There are two types of lists we create with these users. Dyn…

---

## [Interval query using two fields](https://discuss.elastic.co/t/interval-query-using-two-fields/142421)

<div class="topic-metadata">

**Author:** [@telastic](https://discuss.elastic.co/u/telastic)\
**Replies:** 8\
**Last updated:** [August 1, 2018, 7:07am UTC](https://discuss.elastic.co/t/interval-query-using-two-fields/142421 "2018-08-01T07:07:53Z")

</div>

Is there a way to count the number of documents that fall within an interval, based on two fields? For example, say you had documents with start and end times. Instead of intervaling over one field (like the start time,…

---

## [Have api with show the Indexing Rate as x-pack monitoring?](https://discuss.elastic.co/t/have-api-with-show-the-indexing-rate-as-x-pack-monitoring/142469)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 3\
**Last updated:** [August 1, 2018, 6:34am UTC](https://discuss.elastic.co/t/have-api-with-show-the-indexing-rate-as-x-pack-monitoring/142469 "2018-08-01T06:34:16Z")

</div>

have api with show the Indexing Rate as x-pack monitoring? thanks.

---

## [Can get results by tf idf calculated?](https://discuss.elastic.co/t/can-get-results-by-tf-idf-calculated/142474)

<div class="topic-metadata">

**Author:** [@masoudit](https://discuss.elastic.co/u/masoudit)\
**Replies:** 0\
**Last updated:** [August 1, 2018, 6:20am UTC](https://discuss.elastic.co/t/can-get-results-by-tf-idf-calculated/142474 "2018-08-01T06:20:21Z")

</div>

I calculated Tf-Idf scoring before , how can show result with this Tf-Idf .

---

## [How to rename a field within an array in ingest pipeline?](https://discuss.elastic.co/t/how-to-rename-a-field-within-an-array-in-ingest-pipeline/142424)

<div class="topic-metadata">

**Author:** [@pushanbhattacharya](https://discuss.elastic.co/u/pushanbhattacharya)\
**Replies:** 5\
**Last updated:** [August 1, 2018, 2:06am UTC](https://discuss.elastic.co/t/how-to-rename-a-field-within-an-array-in-ingest-pipeline/142424 "2018-08-01T02:06:33Z")

</div>

I have created an ingest pipeline that is being used from my logstash output plugin for elasticsearch. This pipeline only does some renaming of fields. Now, this 'rename' processor is working fine for leaf or nested fie…

---

## [Can't create snapshots after restoring data](https://discuss.elastic.co/t/cant-create-snapshots-after-restoring-data/142328)

<div class="topic-metadata">

**Author:** [@ahrtr](https://discuss.elastic.co/u/ahrtr)\
**Replies:** 8\
**Last updated:** [August 1, 2018, 1:30am UTC](https://discuss.elastic.co/t/cant-create-snapshots-after-restoring-data/142328 "2018-08-01T01:30:38Z")

</div>

The elasticseach version is 6.2.2. Today I encountered an error when trying to create a snapshot after restoring data. Can anyone please provide any advices? The test steps are as below, Start an elasticsearch instanc…

---

## [Attachments download are really slow](https://discuss.elastic.co/t/attachments-download-are-really-slow/141978)

<div class="topic-metadata">

**Author:** [@cyberman6877](https://discuss.elastic.co/u/cyberman6877)\
**Replies:** 12\
**Last updated:** [July 31, 2018, 10:28pm UTC](https://discuss.elastic.co/t/attachments-download-are-really-slow/141978 "2018-07-31T22:28:40Z")

</div>

We have a combination of the HIVE and Elasticsearch setup on Docker. When we attempt to download any attachments from the HIVE which stores the documents in Elasticsearch, the process of download is really slow. For ex…

---

## [How to force entries to be unique](https://discuss.elastic.co/t/how-to-force-entries-to-be-unique/141787)

<div class="topic-metadata">

**Author:** [@mivipe](https://discuss.elastic.co/u/mivipe)\
**Replies:** 9\
**Last updated:** [July 31, 2018, 9:34pm UTC](https://discuss.elastic.co/t/how-to-force-entries-to-be-unique/141787 "2018-07-31T21:34:02Z")

</div>

Dear experts, I have a simple Filebeat-Elasticsearch-Kibana configuration. In my logs every entry has a uniqueID field. Everything seems to work fine until, for some reason, all entries become duplicated. I've noticed …

---

## [Indexing PDF file in ElasticSearch using Java Code](https://discuss.elastic.co/t/indexing-pdf-file-in-elasticsearch-using-java-code/142256)

<div class="topic-metadata">

**Author:** [@preraktiwari](https://discuss.elastic.co/u/preraktiwari)\
**Replies:** 1\
**Last updated:** [July 31, 2018, 8:59pm UTC](https://discuss.elastic.co/t/indexing-pdf-file-in-elasticsearch-using-java-code/142256 "2018-07-31T20:59:33Z")

</div>

I am trying to Index PDF files in elastic search using Java code. So far I have written following code to save the pdf in ES. The code is working fine and I am able to save the Base64 encoded string of my PDF in ES. I wa…

---

## [Connecting to Elasticsearch 5.6 externally](https://discuss.elastic.co/t/connecting-to-elasticsearch-5-6-externally/142393)

<div class="topic-metadata">

**Author:** [@ifiredupufiredup](https://discuss.elastic.co/u/ifiredupufiredup)\
**Replies:** 3\
**Last updated:** [July 31, 2018, 8:33pm UTC](https://discuss.elastic.co/t/connecting-to-elasticsearch-5-6-externally/142393 "2018-07-31T20:33:15Z")

</div>

I'm having trouble setting up Elasticsearch 5.6.10 using the Installation example with tar from elastic.co. This is running on an Amazon EC2 instance running the Amazon Linux 1 OS. I am able to test connecting externall…

---

## [Finding lucene index id for a pattern](https://discuss.elastic.co/t/finding-lucene-index-id-for-a-pattern/142436)

<div class="topic-metadata">

**Author:** [@lucas.alvarez](https://discuss.elastic.co/u/lucas.alvarez)\
**Replies:** 1\
**Last updated:** [July 31, 2018, 7:49pm UTC](https://discuss.elastic.co/t/finding-lucene-index-id-for-a-pattern/142436 "2018-07-31T19:49:08Z")

</div>

Hello everybody!. I was working with kibana and Elastic and I had to remove an index and his associated pattern due to some changes. Later on the index was re created and I manually created the index pattern again. The …

---

## [Match queries where the text input come from another field?](https://discuss.elastic.co/t/match-queries-where-the-text-input-come-from-another-field/141982)

<div class="topic-metadata">

**Author:** [@ljak](https://discuss.elastic.co/u/ljak)\
**Replies:** 1\
**Last updated:** [July 31, 2018, 7:38pm UTC](https://discuss.elastic.co/t/match-queries-where-the-text-input-come-from-another-field/141982 "2018-07-31T19:38:45Z")

</div>

Hi everyone, I tried to "resolve" that query in the last hours by combining different types of queries (script, synonyms, filter, ...) without success. Let's say that I index documents according to that mapping : PUT …

---

## [Elastic 6.3.2 failing to install custom plugin with java.nio.file.NoSuchFileException Ask](https://discuss.elastic.co/t/elastic-6-3-2-failing-to-install-custom-plugin-with-java-nio-file-nosuchfileexception-ask/142417)

<div class="topic-metadata">

**Author:** [@gautu7](https://discuss.elastic.co/u/gautu7)\
**Replies:** 1\
**Last updated:** [July 31, 2018, 7:15pm UTC](https://discuss.elastic.co/t/elastic-6-3-2-failing-to-install-custom-plugin-with-java-nio-file-nosuchfileexception-ask/142417 "2018-07-31T19:15:22Z")

</div>

I have a simple custom realm jar which I zipped and the plugin-descriptor.properties file as mentioned in https://www.elastic.co/guide/en/elasticsearch/plugins/current/plugin-authors.html When I try to do the install wi…

---

## [Cluster Maintenance / Housekeeping](https://discuss.elastic.co/t/cluster-maintenance-housekeeping/142430)

<div class="topic-metadata">

**Author:** [@rbekker87](https://discuss.elastic.co/u/rbekker87)\
**Replies:** 0\
**Last updated:** [July 31, 2018, 6:49pm UTC](https://discuss.elastic.co/t/cluster-maintenance-housekeeping/142430 "2018-07-31T18:49:33Z")

</div>

Hello, I am looking for some advice on index/shard housekeeping, data retention and the best way on how to handle older indices, which can potentially be used in future. Details: We have a ES cluster on AWS, 90% times…

---

## [Building OSS release version of Elastic Search 6.3.1](https://discuss.elastic.co/t/building-oss-release-version-of-elastic-search-6-3-1/142041)

<div class="topic-metadata">

**Author:** [@nspatil](https://discuss.elastic.co/u/nspatil)\
**Replies:** 8\
**Last updated:** [July 31, 2018, 6:31pm UTC](https://discuss.elastic.co/t/building-oss-release-version-of-elastic-search-6-3-1/142041 "2018-07-31T18:31:17Z")

</div>

Hi, I am new to Elastic Search, I am trying to build OSS release version of 6.3.1 from source code. I followed instructions mentioned in readme, downloaded the code from GIT and ran "gradlew assemble" command. Build is …

---

## [LDAP multiple realms](https://discuss.elastic.co/t/ldap-multiple-realms/142323)

<div class="topic-metadata">

**Author:** [@Janardan\_Damani](https://discuss.elastic.co/u/Janardan_Damani)\
**Replies:** 4\
**Last updated:** [July 31, 2018, 4:52pm UTC](https://discuss.elastic.co/t/ldap-multiple-realms/142323 "2018-07-31T16:52:40Z")

</div>

Can we define multiple LDAP realms in elasticsearch.yml ? If so how does it work ?

---

## [How to run operations in parallel](https://discuss.elastic.co/t/how-to-run-operations-in-parallel/142261)

<div class="topic-metadata">

**Author:** [@username123](https://discuss.elastic.co/u/username123)\
**Replies:** 3\
**Last updated:** [July 31, 2018, 4:41pm UTC](https://discuss.elastic.co/t/how-to-run-operations-in-parallel/142261 "2018-07-31T16:41:23Z")

</div>

So I have a simple challenges file: 5 { 6 "schedule": "poisson" 7 }, 8 { 9 "operation": "index-append", 10 "schedule": "poisson" 11 }, 12 …

---

## [Python elasticsearch\_dsl search problem](https://discuss.elastic.co/t/python-elasticsearch-dsl-search-problem/142413)

<div class="topic-metadata">

**Author:** [@hartleyjr](https://discuss.elastic.co/u/hartleyjr)\
**Replies:** 0\
**Last updated:** [July 31, 2018, 4:21pm UTC](https://discuss.elastic.co/t/python-elasticsearch-dsl-search-problem/142413 "2018-07-31T16:21:34Z")

</div>

I'm trying to perform the following search but the exclude part (line 5) is not working. The goal is to exclude all results where field "geoip.country\_name" contains "United States" (so I want all results from all other…

---

## [Cross Cluster Search - Limits/Upgrades](https://discuss.elastic.co/t/cross-cluster-search-limits-upgrades/142411)

<div class="topic-metadata">

**Author:** [@aewhite](https://discuss.elastic.co/u/aewhite)\
**Replies:** 0\
**Last updated:** [July 31, 2018, 4:21pm UTC](https://discuss.elastic.co/t/cross-cluster-search-limits-upgrades/142411 "2018-07-31T16:21:06Z")

</div>

I am researching rolling out multiple clusters and using Cross Cluster Search when needed. However, there are a few open question that don't seem to be addressed in the official documentation yet. How should upgrades b…

---

## [No influencers found and nothing highlighted on single metric viewer](https://discuss.elastic.co/t/no-influencers-found-and-nothing-highlighted-on-single-metric-viewer/141015)

<div class="topic-metadata">

**Author:** [@vgvadim](https://discuss.elastic.co/u/vgvadim)\
**Replies:** 2\
**Last updated:** [July 31, 2018, 3:57pm UTC](https://discuss.elastic.co/t/no-influencers-found-and-nothing-highlighted-on-single-metric-viewer/141015 "2018-07-31T15:57:45Z")

</div>

Hi guys, I need help to get started with Kibana's machine learning functionality and it looks like I miss something important. Basically, I have historical data with two known issues: For the first issue, there was n…

---

## [Comparing two strings 'without ETL'- using Elasticsearch](https://discuss.elastic.co/t/comparing-two-strings-without-etl-using-elasticsearch/142406)

<div class="topic-metadata">

**Author:** [@MPurcell](https://discuss.elastic.co/u/MPurcell)\
**Replies:** 0\
**Last updated:** [July 31, 2018, 3:39pm UTC](https://discuss.elastic.co/t/comparing-two-strings-without-etl-using-elasticsearch/142406 "2018-07-31T15:39:32Z")

</div>

Hello, recently I was asked whether it was possible to compare two string with Elasticsearch, without actually indexing any documents. For example, say I have two strings: "the brown fox" and "the brown fox here". Would …

---

## [MasterNotDiscoveredException after extending disk space](https://discuss.elastic.co/t/masternotdiscoveredexception-after-extending-disk-space/138856)

<div class="topic-metadata">

**Author:** [@mohammedEssabri](https://discuss.elastic.co/u/mohammedEssabri)\
**Replies:** 2\
**Last updated:** [July 31, 2018, 3:35pm UTC](https://discuss.elastic.co/t/masternotdiscoveredexception-after-extending-disk-space/138856 "2018-07-31T15:35:08Z")

</div>

Hi all, We have Elasticsearch deployed in 2 nodes, and we had issue related to disk space, and after extending it, we get the following issue MasterNotDiscoveredException\[waited for \[30s\]\]. \[2018-07-06 10:02:35,466\]\[WA…

---

## [Dynamic mapping types](https://discuss.elastic.co/t/dynamic-mapping-types/142388)

<div class="topic-metadata">

**Author:** [@falcoagustin](https://discuss.elastic.co/u/falcoagustin)\
**Replies:** 0\
**Last updated:** [July 31, 2018, 2:30pm UTC](https://discuss.elastic.co/t/dynamic-mapping-types/142388 "2018-07-31T14:30:27Z")

</div>

Greetings, I am new here, using Elasticsearch 6.3, and I am facing the following problem when aiming to migrate 10GB of data. What I want to achieve, is to save all data its being sent, but only be able to searchable fo…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1595)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1597)
