# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1605

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1606

---

## [Comparing the values of two indices(index1 vs forecast\_index)](https://discuss.elastic.co/t/comparing-the-values-of-two-indices-index1-vs-forecast-index/140871)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 7\
**Last updated:** [July 25, 2018, 8:04am UTC](https://discuss.elastic.co/t/comparing-the-values-of-two-indices-index1-vs-forecast-index/140871 "2018-07-25T08:04:57Z")

</div>

Hello! I have created a forecast for a specific product. So, I want to compare the predicted values(forecast\_index) with real values(index1) and then create an alert using watcher. How can I return the data from indic…

---

## [Streaming Cloudwatch data to elastic](https://discuss.elastic.co/t/streaming-cloudwatch-data-to-elastic/141513)

<div class="topic-metadata">

**Author:** [@sicute](https://discuss.elastic.co/u/sicute)\
**Replies:** 0\
**Last updated:** [July 25, 2018, 7:49am UTC](https://discuss.elastic.co/t/streaming-cloudwatch-data-to-elastic/141513 "2018-07-25T07:49:37Z")

</div>

hi .. I try using trial service elastic cloud for. How to streaming data from vpc flow log ( cloudwatch AWS ) to elastic cloud . Many thanks for any clue .

---

## [Multiple indices with different fields](https://discuss.elastic.co/t/multiple-indices-with-different-fields/141462)

<div class="topic-metadata">

**Author:** [@arshadsa](https://discuss.elastic.co/u/arshadsa)\
**Replies:** 1\
**Last updated:** [July 25, 2018, 7:26am UTC](https://discuss.elastic.co/t/multiple-indices-with-different-fields/141462 "2018-07-25T07:26:28Z")

</div>

Hi All, I know ES is not RDBMS and not possible to join but wanted to ask experts opinion here. I want to pull data from two different indices (idx1, idx2) with different fields as below query: match: idx1.fld1=idx2.f…

---

## [Multi Search request taking longer than expected](https://discuss.elastic.co/t/multi-search-request-taking-longer-than-expected/141499)

<div class="topic-metadata">

**Author:** [@Md\_Ghulam\_khaja](https://discuss.elastic.co/u/Md_Ghulam_khaja)\
**Replies:** 0\
**Last updated:** [July 25, 2018, 6:48am UTC](https://discuss.elastic.co/t/multi-search-request-taking-longer-than-expected/141499 "2018-07-25T06:48:06Z")

</div>

Hi, I am running elasticsearch on my local machine. I have indexed some data on an index. I want to do multisearch request to do a match request. For this I am using msearch and in msearch body I am appending 20000 ma…

---

## [Searching a word within a word](https://discuss.elastic.co/t/searching-a-word-within-a-word/141471)

<div class="topic-metadata">

**Author:** [@Mark\_Dendrix\_Garcia](https://discuss.elastic.co/u/Mark_Dendrix_Garcia)\
**Replies:** 3\
**Last updated:** [July 25, 2018, 6:41am UTC](https://discuss.elastic.co/t/searching-a-word-within-a-word/141471 "2018-07-25T06:41:31Z")

</div>

Hi, Im trying to search a word from this phrase/compound words, this data are from an document/email. SMC\_otherword\_ something1234 user12345 so for this instance I would like to search "SMC", "something" or "1234". …

---

## [Getting Cannot assign requested address while starting elasticsearch](https://discuss.elastic.co/t/getting-cannot-assign-requested-address-while-starting-elasticsearch/141410)

<div class="topic-metadata">

**Author:** [@dhananjay88](https://discuss.elastic.co/u/dhananjay88)\
**Replies:** 12\
**Last updated:** [July 25, 2018, 6:39am UTC](https://discuss.elastic.co/t/getting-cannot-assign-requested-address-while-starting-elasticsearch/141410 "2018-07-25T06:39:53Z")

</div>

I am not able to get perfect solution from any of the previously posted question so I am asking this again as I am a newbie to elastic. Here what all I have done Installed elasticsearch on linux using git clone. Runnin…

---

## [Increase the number of shrads](https://discuss.elastic.co/t/increase-the-number-of-shrads/141425)

<div class="topic-metadata">

**Author:** [@cool\_arun](https://discuss.elastic.co/u/cool_arun)\
**Replies:** 9\
**Last updated:** [July 25, 2018, 6:37am UTC](https://discuss.elastic.co/t/increase-the-number-of-shrads/141425 "2018-07-25T06:37:31Z")

</div>

How to increase the the number of shrads of elasticsearch index

---

## [Return polygons in a given point](https://discuss.elastic.co/t/return-polygons-in-a-given-point/141495)

<div class="topic-metadata">

**Author:** [@Ash\_Chamari](https://discuss.elastic.co/u/Ash_Chamari)\
**Replies:** 0\
**Last updated:** [July 25, 2018, 6:21am UTC](https://discuss.elastic.co/t/return-polygons-in-a-given-point/141495 "2018-07-25T06:21:05Z")

</div>

Hi, I am trying to return all the polygons in a given point. But my query returns all the docs in the index even if the given point doesn't falls in polygon 1, 2 & 3 Index, docs and the query are given below ref. htt…

---

## [When i search for document after index a document. It returns empty but it returns document with sleep of 2 seconds between creating and fetching](https://discuss.elastic.co/t/when-i-search-for-document-after-index-a-document-it-returns-empty-but-it-returns-document-with-sleep-of-2-seconds-between-creating-and-fetching/141480)

<div class="topic-metadata">

**Author:** [@Sangeeth\_Kumar](https://discuss.elastic.co/u/Sangeeth_Kumar)\
**Replies:** 4\
**Last updated:** [July 25, 2018, 5:45am UTC](https://discuss.elastic.co/t/when-i-search-for-document-after-index-a-document-it-returns-empty-but-it-returns-document-with-sleep-of-2-seconds-between-creating-and-fetching/141480 "2018-07-25T05:45:12Z")

</div>

I am using Elasticsearch . I am trying to connect Elasticsearch with python. I can create index with document. When i tried to fetch the same once successful creation done it returns empty. If i make the code to sleep …

---

## [Delete translog](https://discuss.elastic.co/t/delete-translog/141485)

<div class="topic-metadata">

**Author:** [@Beatrice](https://discuss.elastic.co/u/Beatrice)\
**Replies:** 1\
**Last updated:** [July 25, 2018, 5:24am UTC](https://discuss.elastic.co/t/delete-translog/141485 "2018-07-25T05:24:43Z")

</div>

Hi, I'm new to elasticsearch and I was having trouble with deleting translogs. I was trying to delete the translog files following this documentation: https://www.elastic.co/guide/en/elasticsearch/reference/5.6/index-mo…

---

## [Heap Errors After Upgrade 6.3.1](https://discuss.elastic.co/t/heap-errors-after-upgrade-6-3-1/141284)

<div class="topic-metadata">

**Author:** [@AlphaJosh](https://discuss.elastic.co/u/AlphaJosh)\
**Replies:** 1\
**Last updated:** [July 25, 2018, 3:49am UTC](https://discuss.elastic.co/t/heap-errors-after-upgrade-6-3-1/141284 "2018-07-25T03:49:22Z")

</div>

3 nodes (includes one master node), 8Gb memory, 4Gb Heap size. Worked fine after 5.6.8 but then after upgrading to 6.3.1 we get a java heap error on the master as it gets to 90% (5hrs later) and then the elasticsearch s…

---

## [In x-pack monitoring indices speed question](https://discuss.elastic.co/t/in-x-pack-monitoring-indices-speed-question/141474)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 0\
**Last updated:** [July 25, 2018, 3:01am UTC](https://discuss.elastic.co/t/in-x-pack-monitoring-indices-speed-question/141474 "2018-07-25T03:01:28Z")

</div>

with the speed have curl API can show index indexing Rate(not use x-pack monitoring ui )?

---

## [CIDR query on ip range \[2nd try\]](https://discuss.elastic.co/t/cidr-query-on-ip-range-2nd-try/141455)

<div class="topic-metadata">

**Author:** [@vramakrishnan](https://discuss.elastic.co/u/vramakrishnan)\
**Replies:** 0\
**Last updated:** [July 25, 2018, 12:33am UTC](https://discuss.elastic.co/t/cidr-query-on-ip-range-2nd-try/141455 "2018-07-25T00:33:25Z")

</div>

This is original question which I posted sometime back and was closed due to no reply or non-activity. Any pointers would help. With "ip" data type, it does not accept ip address with prefix length(CIDR), but query …

---

## [Bulk RestClient Connection refused with FQDN or IP](https://discuss.elastic.co/t/bulk-restclient-connection-refused-with-fqdn-or-ip/141304)

<div class="topic-metadata">

**Author:** [@Vladimir\_Pimtchenkov](https://discuss.elastic.co/u/Vladimir_Pimtchenkov)\
**Replies:** 1\
**Last updated:** [July 24, 2018, 10:28pm UTC](https://discuss.elastic.co/t/bulk-restclient-connection-refused-with-fqdn-or-ip/141304 "2018-07-24T22:28:10Z")

</div>

Hi guys, hope someone will be able to help me. I'm using RestClient in sync mode. ElasticSearch is running on local PC. ES version is 6.2.4. RestClient version is 6.3.1. The problem is that everything just fine when I…

---

## [How to get document ids alongs with aggregation result](https://discuss.elastic.co/t/how-to-get-document-ids-alongs-with-aggregation-result/141450)

<div class="topic-metadata">

**Author:** [@cool\_arun](https://discuss.elastic.co/u/cool_arun)\
**Replies:** 1\
**Last updated:** [July 24, 2018, 10:08pm UTC](https://discuss.elastic.co/t/how-to-get-document-ids-alongs-with-aggregation-result/141450 "2018-07-24T22:08:21Z")

</div>

I perfom term aggregation on elasticsearch documents that gives me the keyword and its doc count, but i also want all the id of those document that keyword belongs to. How to get that. For example Key: "ice cream", …

---

## [Graceful remove data path](https://discuss.elastic.co/t/graceful-remove-data-path/141312)

<div class="topic-metadata">

**Author:** [@imehl](https://discuss.elastic.co/u/imehl)\
**Replies:** 2\
**Last updated:** [July 24, 2018, 9:58pm UTC](https://discuss.elastic.co/t/graceful-remove-data-path/141312 "2018-07-24T21:58:30Z")

</div>

Hi, how could I graceful remove one data.path (of multiple) of one node in a ES cluster? Or another question: Can a move shards on disk/data.path level. So for example: Get all shards of node1:/path1 and move it to nod…

---

## [Extending Trial license](https://discuss.elastic.co/t/extending-trial-license/141384)

<div class="topic-metadata">

**Author:** [@vkrishna91](https://discuss.elastic.co/u/vkrishna91)\
**Replies:** 2\
**Last updated:** [July 24, 2018, 9:57pm UTC](https://discuss.elastic.co/t/extending-trial-license/141384 "2018-07-24T21:57:20Z")

</div>

Hi, I wanted to extend the platinum trial license, and i filled the following form and didn't get any response even after 5 days. Is there any support contact that i can reach to get a trial extension. https://www.elas…

---

## [Relationship between request "refresh" and "refresh\_interval"](https://discuss.elastic.co/t/relationship-between-request-refresh-and-refresh-interval/141433)

<div class="topic-metadata">

**Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\
**Replies:** 6\
**Last updated:** [July 24, 2018, 9:39pm UTC](https://discuss.elastic.co/t/relationship-between-request-refresh-and-refresh-interval/141433 "2018-07-24T21:39:37Z")

</div>

The crux of my question is this: say I have my refresh\_interval set to 60s and most of my indexing requests do not include ?refresh=true. Then one single request comes through which does have refresh set to true. Does …

---

## [X-pack licence is activae but API status gives](https://discuss.elastic.co/t/x-pack-licence-is-activae-but-api-status-gives/141290)

<div class="topic-metadata">

**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\
**Replies:** 4\
**Last updated:** [July 24, 2018, 8:08pm UTC](https://discuss.elastic.co/t/x-pack-licence-is-activae-but-api-status-gives/141290 "2018-07-24T20:08:02Z")

</div>

Hello Community, I have configured X-pack and I can see my trail was started in elasticsearch logs and through API as well, { "license": { "status": "active", "uid": "29afaf59-69c5-427b-bf3e-60f11ff05087",…

---

## [Postgres to elastic](https://discuss.elastic.co/t/postgres-to-elastic/141437)

<div class="topic-metadata">

**Author:** [@satmate](https://discuss.elastic.co/u/satmate)\
**Replies:** 1\
**Last updated:** [July 24, 2018, 7:56pm UTC](https://discuss.elastic.co/t/postgres-to-elastic/141437 "2018-07-24T19:56:24Z")

</div>

hi there i need to know how to transfer the data from PostgreSQL to elastic search. as am new to this please guide me how to do it from the beginning

---

## [Understanding "skipped" shards](https://discuss.elastic.co/t/understanding-skipped-shards/141428)

<div class="topic-metadata">

**Author:** [@MaJaHa95](https://discuss.elastic.co/u/MaJaHa95)\
**Replies:** 0\
**Last updated:** [July 24, 2018, 4:51pm UTC](https://discuss.elastic.co/t/understanding-skipped-shards/141428 "2018-07-24T16:51:07Z")

</div>

Hey, I've been a long-time user of the \_field\_stats API for index filtering. I have two production systems in place where queries typically filter on some category identifier (namely an ID, in the form of an integer) an…

---

## [Java API - List all indices](https://discuss.elastic.co/t/java-api-list-all-indices/141424)

<div class="topic-metadata">

**Author:** [@TameemSamawi](https://discuss.elastic.co/u/TameemSamawi)\
**Replies:** 1\
**Last updated:** [July 24, 2018, 4:45pm UTC](https://discuss.elastic.co/t/java-api-list-all-indices/141424 "2018-07-24T16:45:10Z")

</div>

Up until the new REST Client, there were a couple different ways of using the Java API to list all indices: client.admin.indices.getAliases(new GetAliasesRequest("\*")).actionGet.getAliases client.admin().cluster().prep…

---

## [How to filter search result using a lookup from another index](https://discuss.elastic.co/t/how-to-filter-search-result-using-a-lookup-from-another-index/140077)

<div class="topic-metadata">

**Author:** [@Mark\_Dendrix\_Garcia](https://discuss.elastic.co/u/Mark_Dendrix_Garcia)\
**Replies:** 2\
**Last updated:** [July 24, 2018, 3:31pm UTC](https://discuss.elastic.co/t/how-to-filter-search-result-using-a-lookup-from-another-index/140077 "2018-07-24T15:31:08Z")

</div>

Hi Community, Im planning to create a Document Management System using Elasticsearch and FSCrawler on top of Big Data Platform. One of the key features of DMS is to have a Role based file permission thus having differe…

---

## [Nprobe to ELK in GCP?](https://discuss.elastic.co/t/nprobe-to-elk-in-gcp/141420)

<div class="topic-metadata">

**Author:** [@dkraut](https://discuss.elastic.co/u/dkraut)\
**Replies:** 0\
**Last updated:** [July 24, 2018, 3:30pm UTC](https://discuss.elastic.co/t/nprobe-to-elk-in-gcp/141420 "2018-07-24T15:30:49Z")

</div>

Hi All, I have nprobe (www.ntop.org) sending flow data to my local Elasticsearch / Kibana instance and it's working. Now I'd like to try sending it to an ELK stack in Google Cloud. It works locally, but when I change th…

---

## [Elasticsearch watcher](https://discuss.elastic.co/t/elasticsearch-watcher/141416)

<div class="topic-metadata">

**Author:** [@charan.gandra](https://discuss.elastic.co/u/charan.gandra)\
**Replies:** 0\
**Last updated:** [July 24, 2018, 3:15pm UTC](https://discuss.elastic.co/t/elasticsearch-watcher/141416 "2018-07-24T15:15:43Z")

</div>

Hi, I've an index with host name, host state and timestamp and , message fields, I want to use watcher to send an alert when a host is down. I can do that using the below watcher. PUT \_xpack/watcher/watch/log\_error\_wat…

---

## [Recommended RAM ratios for ELK with docker-compose](https://discuss.elastic.co/t/recommended-ram-ratios-for-elk-with-docker-compose/141403)

<div class="topic-metadata">

**Author:** [@Rob\_Davidson](https://discuss.elastic.co/u/Rob_Davidson)\
**Replies:** 0\
**Last updated:** [July 24, 2018, 2:35pm UTC](https://discuss.elastic.co/t/recommended-ram-ratios-for-elk-with-docker-compose/141403 "2018-07-24T14:35:00Z")

</div>

I have a production server with 8GB RAM. Im looking to host elastic,logstash and kibana on the server. Using documer compose. What would be the recommended java sizes memory sizes for each of the containers. How might…

---

## [Elasticsearch 6.3.0 randomly fails to execute function\_score query](https://discuss.elastic.co/t/elasticsearch-6-3-0-randomly-fails-to-execute-function-score-query/141402)

<div class="topic-metadata">

**Author:** [@dominik.safaric](https://discuss.elastic.co/u/dominik.safaric)\
**Replies:** 0\
**Last updated:** [July 24, 2018, 2:30pm UTC](https://discuss.elastic.co/t/elasticsearch-6-3-0-randomly-fails-to-execute-function-score-query/141402 "2018-07-24T14:30:34Z")

</div>

Hi, Using my three node Elasticsearch 6.3.0 cluster I'm trying to execute the following function score query: {"size": 400, "from": 0, "query": {"nested": {"path": "feature\_vectors", "query": {"function\_score": {"funct…

---

## [How should I configure ELK stack for saving logs everyday?](https://discuss.elastic.co/t/how-should-i-configure-elk-stack-for-saving-logs-everyday/141399)

<div class="topic-metadata">

**Author:** [@abhishek0010](https://discuss.elastic.co/u/abhishek0010)\
**Replies:** 1\
**Last updated:** [July 24, 2018, 2:29pm UTC](https://discuss.elastic.co/t/how-should-i-configure-elk-stack-for-saving-logs-everyday/141399 "2018-07-24T14:29:35Z")

</div>

I have a requirement which needs to have log indices for a period of 30 days, but the problem here is each index could grow to a potential size of more than 9 GB i.e. more than 10 million record per day. Previously we d…

---

## [REST API query question](https://discuss.elastic.co/t/rest-api-query-question/141333)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 0\
**Last updated:** [July 24, 2018, 9:13am UTC](https://discuss.elastic.co/t/rest-api-query-question/141333 "2018-07-24T09:13:38Z")

</div>

Hi, I want to filter out the Sum\_PKTS which value is lower than 10. How could I merge the two query string? Is it possible? { "range":{ "Sum\_PKTS":{ "gte": 10 } } } -- …

---

## [Watchers Stopped Triggering](https://discuss.elastic.co/t/watchers-stopped-triggering/141212)

<div class="topic-metadata">

**Author:** [@ajrvester](https://discuss.elastic.co/u/ajrvester)\
**Replies:** 8\
**Last updated:** [July 24, 2018, 2:04pm UTC](https://discuss.elastic.co/t/watchers-stopped-triggering/141212 "2018-07-24T14:04:50Z")

</div>

Elastic Cloud Version: 6.2.2 Hello, a subset of my Watches have stopped firing. There are no reported error messages from the watches themselves, the watch history for the non-triggering watches is empty and the watche…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1604)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1606)
