# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1607

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1608

---

## [Why the health of some indices are yellow?](https://discuss.elastic.co/t/why-the-health-of-some-indices-are-yellow/141124)

<div class="topic-metadata">

**Author:** [@ahrtr](https://discuss.elastic.co/u/ahrtr)\
**Replies:** 2\
**Last updated:** [July 24, 2018, 1:29am UTC](https://discuss.elastic.co/t/why-the-health-of-some-indices-are-yellow/141124 "2018-07-24T01:29:08Z")

</div>

I used the API "\_cat/indices?v" to list all indices, and I noticed that the health status of some indices were yellow. I don't understand why the health status were yellow. Could anybody please explain this? Thanks. bas…

---

## [Elasticsearch -Azure Repository - stopped working suddenly](https://discuss.elastic.co/t/elasticsearch-azure-repository-stopped-working-suddenly/138045)

<div class="topic-metadata">

**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Replies:** 1\
**Last updated:** [July 24, 2018, 12:34am UTC](https://discuss.elastic.co/t/elasticsearch-azure-repository-stopped-working-suddenly/138045 "2018-07-24T00:34:00Z")

</div>

Azure snapshots suddenly started failing with Gateway error. It was working fine for longer time, but stopped with below error. Got this error on \_cat snapshots. { "statusCode": 504, "error": "Gateway Time-out", "mes…

---

## [Password set up is deprecated](https://discuss.elastic.co/t/password-set-up-is-deprecated/141219)

<div class="topic-metadata">

**Author:** [@Gokul\_15](https://discuss.elastic.co/u/Gokul_15)\
**Replies:** 1\
**Last updated:** [July 23, 2018, 9:52pm UTC](https://discuss.elastic.co/t/password-set-up-is-deprecated/141219 "2018-07-23T21:52:22Z")

</div>

i have subscribed to platinum trail version,,even though i am unable to access xpack pack security feature.. error shows like this: \\setup-passwords.bat is deprecated, use C:\\elasticsearch-6.3.0\\bin\\elasticsearch-setup…

---

## [How do I create multiple nodes on different Computers](https://discuss.elastic.co/t/how-do-i-create-multiple-nodes-on-different-computers/141258)

<div class="topic-metadata">

**Author:** [@Avinash\_Kumar1](https://discuss.elastic.co/u/Avinash_Kumar1)\
**Replies:** 1\
**Last updated:** [July 23, 2018, 9:44pm UTC](https://discuss.elastic.co/t/how-do-i-create-multiple-nodes-on-different-computers/141258 "2018-07-23T21:44:25Z")

</div>

I'm using elastic search version 6.3.1, windows system problems: my cluster health is yellow. have the setup in one system want to achieve: green the health of clusters want to setup up multiple nodes, so that my h…

---

## [Boosting Query not working properly](https://discuss.elastic.co/t/boosting-query-not-working-properly/141259)

<div class="topic-metadata">

**Author:** [@andre.garcia](https://discuss.elastic.co/u/andre.garcia)\
**Replies:** 0\
**Last updated:** [July 23, 2018, 9:24pm UTC](https://discuss.elastic.co/t/boosting-query-not-working-properly/141259 "2018-07-23T21:24:41Z")

</div>

I am using version 6.2 of elasticsearch and seems like the boosting query is not working. I am making simple queries and the negative clause does not seem affect the score. I am using explain so that i can verify detail…

---

## [How to set multiple filter conditions in a Nested Object](https://discuss.elastic.co/t/how-to-set-multiple-filter-conditions-in-a-nested-object/141146)

<div class="topic-metadata">

**Author:** [@abeltodev](https://discuss.elastic.co/u/abeltodev)\
**Replies:** 6\
**Last updated:** [July 23, 2018, 8:44pm UTC](https://discuss.elastic.co/t/how-to-set-multiple-filter-conditions-in-a-nested-object/141146 "2018-07-23T20:44:10Z")

</div>

Hi, I have an object with multiple nested objects. Like this: { "\_source" : { 'title': 'blabla', "languages":\[ {"id":2,"name":"English","slug":"English","level":"0","mandatory":"false"}, {"id":…

---

## [Interval searches](https://discuss.elastic.co/t/interval-searches/141248)

<div class="topic-metadata">

**Author:** [@cr\_katz](https://discuss.elastic.co/u/cr_katz)\
**Replies:** 0\
**Last updated:** [July 23, 2018, 8:37pm UTC](https://discuss.elastic.co/t/interval-searches/141248 "2018-07-23T20:37:12Z")

</div>

Hello All, I am running a query search in python and aggregating the stats for individual requests per hour. In this specific hour, I want to select the highest count for each request at a second interval. Can I achieve…

---

## [Node HW Versus Hits supported](https://discuss.elastic.co/t/node-hw-versus-hits-supported/141242)

<div class="topic-metadata">

**Author:** [@lucas.alvarez](https://discuss.elastic.co/u/lucas.alvarez)\
**Replies:** 7\
**Last updated:** [July 23, 2018, 7:39pm UTC](https://discuss.elastic.co/t/node-hw-versus-hits-supported/141242 "2018-07-23T19:39:07Z")

</div>

Hello everybody!. I would like to know if there's a way to roughly estimate the maximum number of hits that a node will support based on its hardware (disk, memory and CPU). Are there any formulas that I can use for thi…

---

## [Aggregation query: get value from the latest doc](https://discuss.elastic.co/t/aggregation-query-get-value-from-the-latest-doc/140795)

<div class="topic-metadata">

**Author:** [@jimyoo](https://discuss.elastic.co/u/jimyoo)\
**Replies:** 3\
**Last updated:** [July 23, 2018, 7:07pm UTC](https://discuss.elastic.co/t/aggregation-query-get-value-from-the-latest-doc/140795 "2018-07-23T19:07:45Z")

</div>

I want to build a query to get the price from the latest document (time). And within the query, there can be other aggregations like “avg”. The query will be like: "query" : { // some filters "aggregations" :…

---

## [Phrase suggest with analysis-phonetic plugin in Elasticsearch 5.5](https://discuss.elastic.co/t/phrase-suggest-with-analysis-phonetic-plugin-in-elasticsearch-5-5/141240)

<div class="topic-metadata">

**Author:** [@danielrc14](https://discuss.elastic.co/u/danielrc14)\
**Replies:** 0\
**Last updated:** [July 23, 2018, 7:00pm UTC](https://discuss.elastic.co/t/phrase-suggest-with-analysis-phonetic-plugin-in-elasticsearch-5-5/141240 "2018-07-23T19:00:40Z")

</div>

Hey! I'm developing a search feature in a web app, and I'm using Elasticsearch 5.5.3 (I can't use newer versions, 5.5.3 was a requirement from the client). I'm also using the phrase suggest feature. Right now it only se…

---

## [Converting long into a proper date field once in ES](https://discuss.elastic.co/t/converting-long-into-a-proper-date-field-once-in-es/141237)

<div class="topic-metadata">

**Author:** [@amandrell](https://discuss.elastic.co/u/amandrell)\
**Replies:** 2\
**Last updated:** [July 23, 2018, 6:35pm UTC](https://discuss.elastic.co/t/converting-long-into-a-proper-date-field-once-in-es/141237 "2018-07-23T18:35:15Z")

</div>

I have various fields in my data that are in epoch\_millis (long). Is it possible to create a mapping that converts this long into a proper date field when it gets ingested in Elasticsearch?

---

## [How to get a value of key value pair in an object in elasticsearch painless script](https://discuss.elastic.co/t/how-to-get-a-value-of-key-value-pair-in-an-object-in-elasticsearch-painless-script/140972)

<div class="topic-metadata">

**Author:** [@pungent](https://discuss.elastic.co/u/pungent)\
**Replies:** 2\
**Last updated:** [July 23, 2018, 6:12pm UTC](https://discuss.elastic.co/t/how-to-get-a-value-of-key-value-pair-in-an-object-in-elasticsearch-painless-script/140972 "2018-07-23T18:12:10Z")

</div>

A partial mapping of one of my indices (in ES6.2) is as follows "sdata": { "type": "object", "dynamic": true, "properties": { "xyz": { "dynamic": true, "properties": {} }, "students": { …

---

## [Data loss while loading into ES from Logstash under load](https://discuss.elastic.co/t/data-loss-while-loading-into-es-from-logstash-under-load/141227)

<div class="topic-metadata">

**Author:** [@srikrishna](https://discuss.elastic.co/u/srikrishna)\
**Replies:** 0\
**Last updated:** [July 23, 2018, 5:26pm UTC](https://discuss.elastic.co/t/data-loss-while-loading-into-es-from-logstash-under-load/141227 "2018-07-23T17:26:30Z")

</div>

We are using ES 6.2.4 and the contemporary Logstash version. We have a setup where we have Logstash read from a Kafka topic and write to ES. Some of the messages are larger than Kafka default message size so we increased…

---

## [Is it possible to recover the indexes with only /var/lib files](https://discuss.elastic.co/t/is-it-possible-to-recover-the-indexes-with-only-var-lib-files/141225)

<div class="topic-metadata">

**Author:** [@rdhar](https://discuss.elastic.co/u/rdhar)\
**Replies:** 0\
**Last updated:** [July 23, 2018, 5:12pm UTC](https://discuss.elastic.co/t/is-it-possible-to-recover-the-indexes-with-only-var-lib-files/141225 "2018-07-23T17:12:09Z")

</div>

Hi team, I have couple of indices for whom i missed taking the snapshot and now i want to recover them. All i know i have are /var/lib/elasticsearch/nodes/0/indices/ files. But while recovering , i get below error - C…

---

## [Not all documents copied after reindex](https://discuss.elastic.co/t/not-all-documents-copied-after-reindex/140235)

<div class="topic-metadata">

**Author:** [@daq](https://discuss.elastic.co/u/daq)\
**Replies:** 17\
**Last updated:** [July 23, 2018, 5:09pm UTC](https://discuss.elastic.co/t/not-all-documents-copied-after-reindex/140235 "2018-07-23T17:09:42Z")

</div>

I modified a template for the index to convert a couple of variables from string to long. Then I issued a reindex call: POST \_reindex { "source": { "index": "index-old" }, "dest": { "index": "index-new" …

---

## [Date time difference](https://discuss.elastic.co/t/date-time-difference/141216)

<div class="topic-metadata">

**Author:** [@Senthiles](https://discuss.elastic.co/u/Senthiles)\
**Replies:** 0\
**Last updated:** [July 23, 2018, 3:57pm UTC](https://discuss.elastic.co/t/date-time-difference/141216 "2018-07-23T15:57:08Z")

</div>

Hi, can anyone help me get the date difference between to dates. { "script\_fields": { "my\_doubled\_field": { "script": { "lang": "painless", "source": "new Date().gettime() - doc\['datefield'\].value" } } }}

---

## [Using filters with completion suggester](https://discuss.elastic.co/t/using-filters-with-completion-suggester/141213)

<div class="topic-metadata">

**Author:** [@Destroy666](https://discuss.elastic.co/u/Destroy666)\
**Replies:** 0\
**Last updated:** [July 23, 2018, 3:45pm UTC](https://discuss.elastic.co/t/using-filters-with-completion-suggester/141213 "2018-07-23T15:45:21Z")

</div>

I've read that it's impossible due to how completions are stored, but all the posts were old, so I would like to make sure it's still the case. From what I tested it is - in \_search I see no way to achieve this. It makes…

---

## [Issue creating repository in GovCloud S3](https://discuss.elastic.co/t/issue-creating-repository-in-govcloud-s3/141206)

<div class="topic-metadata">

**Author:** [@btaylor](https://discuss.elastic.co/u/btaylor)\
**Replies:** 0\
**Last updated:** [July 23, 2018, 3:18pm UTC](https://discuss.elastic.co/t/issue-creating-repository-in-govcloud-s3/141206 "2018-07-23T15:18:46Z")

</div>

Environment info: Server: Ubuntu 16.04.4 Elasticsearch: 6.2.4 I'm trying to setup a new repository in an S3 bucket hosted in GovCloud. When I run: curl -XPUT 'http://localhost:9200/\_snapshot/s3\_repository?verfiy=false&…

---

## [ExtendedStatsBuckets gives negative variance](https://discuss.elastic.co/t/extendedstatsbuckets-gives-negative-variance/141198)

<div class="topic-metadata">

**Author:** [@uyth](https://discuss.elastic.co/u/uyth)\
**Replies:** 0\
**Last updated:** [July 23, 2018, 2:48pm UTC](https://discuss.elastic.co/t/extendedstatsbuckets-gives-negative-variance/141198 "2018-07-23T14:48:07Z")

</div>

Elasticsearch v. 6.2.4 ExtendedStats over a negative field in a DateHistogram gives a negative variance, and NaN for standard deviation. I believe this is a bug since variance should never be negative as it is derived f…

---

## [Cannot create watches](https://discuss.elastic.co/t/cannot-create-watches/140916)

<div class="topic-metadata">

**Author:** [@Wim](https://discuss.elastic.co/u/Wim)\
**Replies:** 2\
**Last updated:** [July 23, 2018, 2:39pm UTC](https://discuss.elastic.co/t/cannot-create-watches/140916 "2018-07-23T14:39:04Z")

</div>

When using elasticsearch 6.3.1 in combination with Kibana. (Elastic cloud instance) It is not possible to create watches. I always get this error How can I get around this? Rgds, Wim

---

## [Adding seconde node](https://discuss.elastic.co/t/adding-seconde-node/141117)

<div class="topic-metadata">

**Author:** [@kimfut](https://discuss.elastic.co/u/kimfut)\
**Replies:** 6\
**Last updated:** [July 23, 2018, 2:26pm UTC](https://discuss.elastic.co/t/adding-seconde-node/141117 "2018-07-23T14:26:12Z")

</div>

hello everyone , i would like to know , what are benefits to added a second elasticsearch node (beside that make elasticsearch in green state ), and how to proceed via docker-compose (i installed elk stack via docker) ? …

---

## [Difference between using nested type in query with must\_not](https://discuss.elastic.co/t/difference-between-using-nested-type-in-query-with-must-not/141194)

<div class="topic-metadata">

**Author:** [@Erik\_Miller](https://discuss.elastic.co/u/Erik_Miller)\
**Replies:** 0\
**Last updated:** [July 23, 2018, 2:22pm UTC](https://discuss.elastic.co/t/difference-between-using-nested-type-in-query-with-must-not/141194 "2018-07-23T14:22:27Z")

</div>

I've come across a scenario where I am returning fewer results when using a nested query for accessing the nested object data vs just using a normal terms query. With the nested query it returns documents that I want ex…

---

## [PCF logstash drain](https://discuss.elastic.co/t/pcf-logstash-drain/141187)

<div class="topic-metadata">

**Author:** [@Vivek\_Samaga](https://discuss.elastic.co/u/Vivek_Samaga)\
**Replies:** 0\
**Last updated:** [July 23, 2018, 1:26pm UTC](https://discuss.elastic.co/t/pcf-logstash-drain/141187 "2018-07-23T13:26:25Z")

</div>

Hi We have created a sysout drain from PCF to logstash but referred to this doc it says logs will be funneled to syslog by default can we change it to some other index or create new one? Or can we change the TYPE from s…

---

## [Compare two document type values under one index and print difference](https://discuss.elastic.co/t/compare-two-document-type-values-under-one-index-and-print-difference/141118)

<div class="topic-metadata">

**Author:** [@Md\_Ghulam\_khaja](https://discuss.elastic.co/u/Md_Ghulam_khaja)\
**Replies:** 5\
**Last updated:** [July 23, 2018, 1:24pm UTC](https://discuss.elastic.co/t/compare-two-document-type-values-under-one-index-and-print-difference/141118 "2018-07-23T13:24:19Z")

</div>

I have two mysql tables containing thousands of rows in each table. I have index all records into elasticsearch using logstash jdbc plugin. The Idea is to compare difference between two tables using Elasticsearch in a v…

---

## [Curator request\_body documentation error](https://discuss.elastic.co/t/curator-request-body-documentation-error/140941)

<div class="topic-metadata">

**Author:** [@bschneiders](https://discuss.elastic.co/u/bschneiders)\
**Replies:** 5\
**Last updated:** [July 23, 2018, 1:23pm UTC](https://discuss.elastic.co/t/curator-request-body-documentation-error/140941 "2018-07-23T13:23:43Z")

</div>

The current documentation says you can specify an index list like this: request\_body: source: index: \['index1', 'index2', 'index3'\] dest: index: new\_index In reality, that syntax will result in ES…

---

## [How to set max\_clause\_count](https://discuss.elastic.co/t/how-to-set-max-clause-count/141185)

<div class="topic-metadata">

**Author:** [@ticcoid](https://discuss.elastic.co/u/ticcoid)\
**Replies:** 0\
**Last updated:** [July 23, 2018, 1:22pm UTC](https://discuss.elastic.co/t/how-to-set-max-clause-count/141185 "2018-07-23T13:22:02Z")

</div>

How can I set the max\_clause\_count? The documentation says I just need to add it to the user settings. But when I try to set it such as: indices.query.bool.max\_clause\_count: 10000 then I get this error: 'indices.query.…

---

## [Delete Snapshots API to delete "older than custom date" snapshots?](https://discuss.elastic.co/t/delete-snapshots-api-to-delete-older-than-custom-date-snapshots/141162)

<div class="topic-metadata">

**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\
**Replies:** 1\
**Last updated:** [July 23, 2018, 1:20pm UTC](https://discuss.elastic.co/t/delete-snapshots-api-to-delete-older-than-custom-date-snapshots/141162 "2018-07-23T13:20:13Z")

</div>

Hi, I've been googling ways to delete older snapshots in our repository. I have found posts on deleting snaphsots via curator but I'm more interested in a one-time aPI call that can function similar to delete by query f…

---

## [Export and Import Kibana Dashboards Using ES API](https://discuss.elastic.co/t/export-and-import-kibana-dashboards-using-es-api/141184)

<div class="topic-metadata">

**Author:** [@gurdipe](https://discuss.elastic.co/u/gurdipe)\
**Replies:** 0\
**Last updated:** [July 23, 2018, 1:19pm UTC](https://discuss.elastic.co/t/export-and-import-kibana-dashboards-using-es-api/141184 "2018-07-23T13:19:54Z")

</div>

I am using Elastic stack version 6.2 with xPack and want to know what api calls I need to make to export and import the custom kibana dashboards that have been created. Kind Regards Gurdipe

---

## [Default max score in elastic responce](https://discuss.elastic.co/t/default-max-score-in-elastic-responce/141178)

<div class="topic-metadata">

**Author:** [@1tester](https://discuss.elastic.co/u/1tester)\
**Replies:** 1\
**Last updated:** [July 23, 2018, 12:51pm UTC](https://discuss.elastic.co/t/default-max-score-in-elastic-responce/141178 "2018-07-23T12:51:37Z")

</div>

Hello! Could you tell me please, which max value score from response in ES by default ?

---

## [Use ES on another server](https://discuss.elastic.co/t/use-es-on-another-server/141157)

<div class="topic-metadata">

**Author:** [@master1](https://discuss.elastic.co/u/master1)\
**Replies:** 1\
**Last updated:** [July 23, 2018, 12:39pm UTC](https://discuss.elastic.co/t/use-es-on-another-server/141157 "2018-07-23T12:39:48Z")

</div>

Hello, I am a new user of elasticsearch, i'm currently having a small problem. My friend gave me a server that he created which let a user to do querys on a database (Mongodb) but it is too slow, that's why i've put al…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1606)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1608)
