# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1611

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1612

---

## [Wildcards and mapping in query\_string query](https://discuss.elastic.co/t/wildcards-and-mapping-in-query-string-query/140709)

<div class="topic-metadata">

**Author:** [@chaloulo](https://discuss.elastic.co/u/chaloulo)\
**Replies:** 1\
**Last updated:** [July 19, 2018, 9:14pm UTC](https://discuss.elastic.co/t/wildcards-and-mapping-in-query-string-query/140709 "2018-07-19T21:14:50Z")

</div>

Hello, I have a case where I use wildcards in the query\_string query. I am seeing a behaviour that I can't explain. I create simple index like the following: curl -x "" -k -XPUT 'localhost:9200/wildcardtest' -d '{ "…

---

## [Unable to connect to Elasticsearch with X-Pack enabled](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-with-x-pack-enabled/137023)

<div class="topic-metadata">

**Author:** [@hitesh-inbetween](https://discuss.elastic.co/u/hitesh-inbetween)\
**Replies:** 10\
**Last updated:** [July 19, 2018, 9:07pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-with-x-pack-enabled/137023 "2018-07-19T21:07:12Z")

</div>

Hi I am using Elasticsearch version 6.2.4. After enabling xpack security, I am unable to connect my transport client to elasticsearch TransportClient transportClient1 = new PreBuiltXPackTransportClient( Se…

---

## [Index Mapping -- Type: Text and Keyword vs Type: Keyword and Text](https://discuss.elastic.co/t/index-mapping-type-text-and-keyword-vs-type-keyword-and-text/140805)

<div class="topic-metadata">

**Author:** [@strawgate](https://discuss.elastic.co/u/strawgate)\
**Replies:** 0\
**Last updated:** [July 19, 2018, 8:48pm UTC](https://discuss.elastic.co/t/index-mapping-type-text-and-keyword-vs-type-keyword-and-text/140805 "2018-07-19T20:48:29Z")

</div>

What is the difference between how Elasticsearch and Kibana handle these two mappings? First: "Windows": { "type": "keyword", "ignore\_above": 256, "fields": { "text": { "type": "text" } } } Second: "Windows":…

---

## [Update Documents SQL - ElasticSearch](https://discuss.elastic.co/t/update-documents-sql-elasticsearch/140480)

<div class="topic-metadata">

**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\
**Replies:** 4\
**Last updated:** [July 19, 2018, 8:22pm UTC](https://discuss.elastic.co/t/update-documents-sql-elasticsearch/140480 "2018-07-19T20:22:30Z")

</div>

Hi All! I have a SQL database in my program and I use to view data ElasticSearch and for updates the SQL (I know that in the new version 6.3 i can do queries like SQL), but the problem that I have is that I have update …

---

## [How to create a 2d array of string in painless?](https://discuss.elastic.co/t/how-to-create-a-2d-array-of-string-in-painless/140803)

<div class="topic-metadata">

**Author:** [@praveendhawan](https://discuss.elastic.co/u/praveendhawan)\
**Replies:** 0\
**Last updated:** [July 19, 2018, 7:53pm UTC](https://discuss.elastic.co/t/how-to-create-a-2d-array-of-string-in-painless/140803 "2018-07-19T19:53:28Z")

</div>

I want to create a 2-d array of String data type in painless. I have tried several versions but all of them are giving me error. String\[\]\[\] myArray = {{'abc', 'pqr'}, {'xzy', 'ljk'}} String\[\]\[\] myArray = new String\[\]\[…

---

## [Why match all and filter by username doesn't work for some usernames?](https://discuss.elastic.co/t/why-match-all-and-filter-by-username-doesnt-work-for-some-usernames/140800)

<div class="topic-metadata">

**Author:** [@Shrimp-Fried-Rice](https://discuss.elastic.co/u/Shrimp-Fried-Rice)\
**Replies:** 0\
**Last updated:** [July 19, 2018, 7:43pm UTC](https://discuss.elastic.co/t/why-match-all-and-filter-by-username-doesnt-work-for-some-usernames/140800 "2018-07-19T19:43:43Z")

</div>

i am trying to use elasticsearch for matching username. $params\['body'\]\['query'\]\['bool'\]\['must'\]\['match\_all'\] = (object)\[\]; $params\['body'\]\['query'\]\['bool'\]\['filter'\]\['term'\]\['uploader'\] = $\_GET\['uploader'\]; $params\['b…

---

## [Bulk loading data from old version of template to new](https://discuss.elastic.co/t/bulk-loading-data-from-old-version-of-template-to-new/140797)

<div class="topic-metadata">

**Author:** [@imarsman](https://discuss.elastic.co/u/imarsman)\
**Replies:** 0\
**Last updated:** [July 19, 2018, 7:27pm UTC](https://discuss.elastic.co/t/bulk-loading-data-from-old-version-of-template-to-new/140797 "2018-07-19T19:27:46Z")

</div>

This fall I will be migrating to a much newer version of Elasticsearch (from 1.5.2). This will be done by setting up a new server to be used by my application and then following this, bulk loading the data from the many …

---

## [BulkProcessor creation using RestHighLevelClient compilation error on ES5.6](https://discuss.elastic.co/t/bulkprocessor-creation-using-resthighlevelclient-compilation-error-on-es5-6/140573)

<div class="topic-metadata">

**Author:** [@Rappahannock](https://discuss.elastic.co/u/Rappahannock)\
**Replies:** 6\
**Last updated:** [July 19, 2018, 7:14pm UTC](https://discuss.elastic.co/t/bulkprocessor-creation-using-resthighlevelclient-compilation-error-on-es5-6/140573 "2018-07-19T19:14:49Z")

</div>

I have an issue when compiling the following code on ES5.6.6: BulkProcessor bulkProcessor = BulkProcessor.builder(restHighLevelClient::bulkAsync, listener).build(); The following compilation error occurs: /test-bulkpr…

---

## [Elasticsearch merge two strings](https://discuss.elastic.co/t/elasticsearch-merge-two-strings/140791)

<div class="topic-metadata">

**Author:** [@dennys84](https://discuss.elastic.co/u/dennys84)\
**Replies:** 0\
**Last updated:** [July 19, 2018, 6:52pm UTC](https://discuss.elastic.co/t/elasticsearch-merge-two-strings/140791 "2018-07-19T18:52:26Z")

</div>

Hi all. We are facing difficulties, trying to get postfix logs readable in ELK. -we installed filebeat and set communication with ELK server -then, configured logstash patterns and configs -finally we've got logs in k…

---

## [Indexing counts difference before and after restoration on elasticsearch 2.4](https://discuss.elastic.co/t/indexing-counts-difference-before-and-after-restoration-on-elasticsearch-2-4/140784)

<div class="topic-metadata">

**Author:** [@George-Wang](https://discuss.elastic.co/u/George-Wang)\
**Replies:** 0\
**Last updated:** [July 19, 2018, 5:51pm UTC](https://discuss.elastic.co/t/indexing-counts-difference-before-and-after-restoration-on-elasticsearch-2-4/140784 "2018-07-19T17:51:24Z")

</div>

I'm doing some backup/restore test on es 2.4, and I found out that indexing is different between "before restore" and "after restore" What I did is that I took a snapshot of the index and delete them all and then restore…

---

## [Index request does not work after adding mapping to the index](https://discuss.elastic.co/t/index-request-does-not-work-after-adding-mapping-to-the-index/140481)

<div class="topic-metadata">

**Author:** [@Tony\_Nagy](https://discuss.elastic.co/u/Tony_Nagy)\
**Replies:** 1\
**Last updated:** [July 19, 2018, 2:24pm UTC](https://discuss.elastic.co/t/index-request-does-not-work-after-adding-mapping-to-the-index/140481 "2018-07-19T14:24:46Z")

</div>

Hello, I have a problem with adding new documents to an index (called "map") when there is already mapping defined. When the mapping does not exist then I am able to create new documents from my Java program. Here is th…

---

## [Field with long type is storing a double](https://discuss.elastic.co/t/field-with-long-type-is-storing-a-double/140557)

<div class="topic-metadata">

**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\
**Replies:** 1\
**Last updated:** [July 19, 2018, 2:17pm UTC](https://discuss.elastic.co/t/field-with-long-type-is-storing-a-double/140557 "2018-07-19T14:17:23Z")

</div>

Hi, ES 6.2.4 I'm not sure how this happened, but I have a document that is stored in an index where one of the fields is with a mapping of long, but the document is storing a double value in it. This is the doc: { "\_…

---

## [Writing a language plugin to run a script](https://discuss.elastic.co/t/writing-a-language-plugin-to-run-a-script/140566)

<div class="topic-metadata">

**Author:** [@cmelean](https://discuss.elastic.co/u/cmelean)\
**Replies:** 1\
**Last updated:** [July 19, 2018, 1:14pm UTC](https://discuss.elastic.co/t/writing-a-language-plugin-to-run-a-script/140566 "2018-07-19T13:14:54Z")

</div>

I am migrating a few scripts from Groovy to Painless, and running into the following issue at runtime: "Scripts may be no longer than 16384 characters.. . Consider using a plugin if a script longer than this length is a…

---

## [Resetting Cluster from Read-Only](https://discuss.elastic.co/t/resetting-cluster-from-read-only/140577)

<div class="topic-metadata">

**Author:** [@Trevor\_Mills](https://discuss.elastic.co/u/Trevor_Mills)\
**Replies:** 5\
**Last updated:** [July 19, 2018, 1:12pm UTC](https://discuss.elastic.co/t/resetting-cluster-from-read-only/140577 "2018-07-19T13:12:45Z")

</div>

I have a single node cluster that previously had XPack installed. I have since removed XPack. Today, my disk usage reached the flood water mark and so Elasticsearch put all blocks into read\_only\_allow\_delete. I cleare…

---

## [Map Date Type in Logstash for CSV data sending by FileBeat](https://discuss.elastic.co/t/map-date-type-in-logstash-for-csv-data-sending-by-filebeat/140722)

<div class="topic-metadata">

**Author:** [@garg.vijay24](https://discuss.elastic.co/u/garg.vijay24)\
**Replies:** 0\
**Last updated:** [July 19, 2018, 12:17pm UTC](https://discuss.elastic.co/t/map-date-type-in-logstash-for-csv-data-sending-by-filebeat/140722 "2018-07-19T12:17:48Z")

</div>

Hi, In my current architecture we are reading csv files through Filebeat and sending it to Logstash and then finally ingesting data into Elastic. But date type is coming as string even tough we mapped as date in logstas…

---

## [Downloading x-pack 5.6.3](https://discuss.elastic.co/t/downloading-x-pack-5-6-3/140660)

<div class="topic-metadata">

**Author:** [@AKSHAY\_R](https://discuss.elastic.co/u/AKSHAY_R)\
**Replies:** 3\
**Last updated:** [July 19, 2018, 11:36am UTC](https://discuss.elastic.co/t/downloading-x-pack-5-6-3/140660 "2018-07-19T11:36:47Z")

</div>

We have installed Elasticsearch 5.6.3 and kibana 5.6.3 , we are trying to restrict user roles and access so we want to install x-pack 5.6.3 but we are unable to find it on elastic.co , can someone guide us from where we…

---

## [Get all IndexMetadata in 5.X](https://discuss.elastic.co/t/get-all-indexmetadata-in-5-x/137305)

<div class="topic-metadata">

**Author:** [@MSem](https://discuss.elastic.co/u/MSem)\
**Replies:** 1\
**Last updated:** [July 19, 2018, 11:03am UTC](https://discuss.elastic.co/t/get-all-indexmetadata-in-5-x/137305 "2018-07-19T11:03:10Z")

</div>

I am migrating from ES 2.X to 5.X. In 2.X I am using TransportClient to get IndexMetadata for all indexes: getClient().admin().cluster() .prepareState().execute().actionGet().getState().getMetaData().getIndices(); It…

---

## [Bulk + Update API](https://discuss.elastic.co/t/bulk-update-api/140338)

<div class="topic-metadata">

**Author:** [@Varan](https://discuss.elastic.co/u/Varan)\
**Replies:** 2\
**Last updated:** [July 19, 2018, 9:27am UTC](https://discuss.elastic.co/t/bulk-update-api/140338 "2018-07-19T09:27:02Z")

</div>

Hi, I have some trouble making my bulk-update API work. I have Elasticsearch 6.2. So here the SQL request: String sqlBulk = "SELECT id " + "from table tab " + "ORDER BY tab.ID ASC LIMIT ? "; Prepared…

---

## [Sum\_other\_doc\_count higher than total docs](https://discuss.elastic.co/t/sum-other-doc-count-higher-than-total-docs/140490)

<div class="topic-metadata">

**Author:** [@covolution](https://discuss.elastic.co/u/covolution)\
**Replies:** 2\
**Last updated:** [July 19, 2018, 9:16am UTC](https://discuss.elastic.co/t/sum-other-doc-count-higher-than-total-docs/140490 "2018-07-19T09:16:47Z")

</div>

I have a single shard index with 1,464,467 docs. I am doing some aggregations on a keyword field. The terms aggregation is returning a "sum\_other\_doc\_count": 1637376, which is more documents than I have in the index. …

---

## [Elasticsearch in Docker Master Discovery](https://discuss.elastic.co/t/elasticsearch-in-docker-master-discovery/140691)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 0\
**Last updated:** [July 19, 2018, 8:40am UTC](https://discuss.elastic.co/t/elasticsearch-in-docker-master-discovery/140691 "2018-07-19T08:40:48Z")

</div>

Hi, I'm testing running elasticsearch in a docker container. I want to see it join an existing, non-docker, cluster. The service starts but fails to discover master nodes. Can someone help me understand the issue here? …

---

## [Illegal combination of \[copy\_to\] and \[nested\] mappings: \[copy\_to\]](https://discuss.elastic.co/t/illegal-combination-of-copy-to-and-nested-mappings-copy-to/140690)

<div class="topic-metadata">

**Author:** [@Syed\_ali\_abbas\_shah](https://discuss.elastic.co/u/Syed_ali_abbas_shah)\
**Replies:** 0\
**Last updated:** [July 19, 2018, 8:31am UTC](https://discuss.elastic.co/t/illegal-combination-of-copy-to-and-nested-mappings-copy-to/140690 "2018-07-19T08:31:15Z")

</div>

I am facing an error for following mapping and my version is current 6.3 { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "Illegal combination of \[copy\_to\] and \[nested\] mappings: \[copy…

---

## [How to read email ids stored in database table and send alert emails through watcher?](https://discuss.elastic.co/t/how-to-read-email-ids-stored-in-database-table-and-send-alert-emails-through-watcher/140321)

<div class="topic-metadata">

**Author:** [@ayush219](https://discuss.elastic.co/u/ayush219)\
**Replies:** 4\
**Last updated:** [July 19, 2018, 8:27am UTC](https://discuss.elastic.co/t/how-to-read-email-ids-stored-in-database-table-and-send-alert-emails-through-watcher/140321 "2018-07-19T08:27:36Z")

</div>

Hi, I have a requirement where I have to send alerts to multiple email IDs stored in a sql server table. I have tested Watcher to send out alerts via email but not able to configure it for email IDs stored in table. I …

---

## [Recommendation System for retail](https://discuss.elastic.co/t/recommendation-system-for-retail/137990)

<div class="topic-metadata">

**Author:** [@Daniel\_Zuluaga](https://discuss.elastic.co/u/Daniel_Zuluaga)\
**Replies:** 9\
**Last updated:** [July 19, 2018, 8:16am UTC](https://discuss.elastic.co/t/recommendation-system-for-retail/137990 "2018-07-19T08:16:21Z")

</div>

Hello everyone, I want to ask for help for a recommendation system that I'm trying to put together. I have data for millions of users that buy in thousands of retail shops (Food, clothes, services). What I need is, give…

---

## [Mapping definition has unsupported parameters: search\_analyzer, analyzer](https://discuss.elastic.co/t/mapping-definition-has-unsupported-parameters-search-analyzer-analyzer/140268)

<div class="topic-metadata">

**Author:** [@Steven\_Ensslen](https://discuss.elastic.co/u/Steven_Ensslen)\
**Replies:** 2\
**Last updated:** [July 19, 2018, 7:55am UTC](https://discuss.elastic.co/t/mapping-definition-has-unsupported-parameters-search-analyzer-analyzer/140268 "2018-07-19T07:55:42Z")

</div>

I have one template in my production cluster that is not working. Whenever I post to create a new index with it I get: POST ticket-me/doc/ {"admit\_email": "example@example.com"} { "error": { "root\_cause": \[ { …

---

## [Creating ingest pipeline](https://discuss.elastic.co/t/creating-ingest-pipeline/140676)

<div class="topic-metadata">

**Author:** [@roshni](https://discuss.elastic.co/u/roshni)\
**Replies:** 1\
**Last updated:** [July 19, 2018, 7:40am UTC](https://discuss.elastic.co/t/creating-ingest-pipeline/140676 "2018-07-19T07:40:49Z")

</div>

Is it possible to create an ingest pipeline without including processors ? ? I mean to say is the processor field a mandate ?? or can we remove it ? If yes , hows it possible ? Thanks

---

## [Nest Deserialization](https://discuss.elastic.co/t/nest-deserialization/140464)

<div class="topic-metadata">

**Author:** [@es12](https://discuss.elastic.co/u/es12)\
**Replies:** 9\
**Last updated:** [July 19, 2018, 7:31am UTC](https://discuss.elastic.co/t/nest-deserialization/140464 "2018-07-19T07:31:28Z")

</div>

Hi All, I am using Nest 6.1.0 to get Huge Json(200000 documents) from AWS elasticsearch.. I am using scroll api and in batches of 10,000 Elastic search query is optimised no issues in executing queries using kibana Ho…

---

## [How to retrieve more than 10,000 results](https://discuss.elastic.co/t/how-to-retrieve-more-than-10-000-results/140594)

<div class="topic-metadata">

**Author:** [@snigdharao](https://discuss.elastic.co/u/snigdharao)\
**Replies:** 6\
**Last updated:** [July 19, 2018, 7:24am UTC](https://discuss.elastic.co/t/how-to-retrieve-more-than-10-000-results/140594 "2018-07-19T07:24:31Z")

</div>

I have an use case where i display 10 results on each page and there would be an api call when ever i go to further pages . Currently in solr there is start functionality which returns 10 results by default . But in el…

---

## [Licensing of watcher](https://discuss.elastic.co/t/licensing-of-watcher/140655)

<div class="topic-metadata">

**Author:** [@Akram1](https://discuss.elastic.co/u/Akram1)\
**Replies:** 1\
**Last updated:** [July 19, 2018, 7:22am UTC](https://discuss.elastic.co/t/licensing-of-watcher/140655 "2018-07-19T07:22:29Z")

</div>

Hi, I need to use watcher. In licensing I am not able to figure out how much it will cost me to use watcher. can anyone help me out that Is there any free version of watcher available. if not, then how much it will cost…

---

## [Elasticsearch cannot query WKT](https://discuss.elastic.co/t/elasticsearch-cannot-query-wkt/140442)

<div class="topic-metadata">

**Author:** [@Ash\_Chamari](https://discuss.elastic.co/u/Ash_Chamari)\
**Replies:** 3\
**Last updated:** [July 19, 2018, 7:15am UTC](https://discuss.elastic.co/t/elasticsearch-cannot-query-wkt/140442 "2018-07-19T07:15:01Z")

</div>

Elasticsearch cannot query KWT I'm retrieving geometry data from MS sql server 2012 via jdbc connection and pushing it to elasticsearch. Data table consist of: objectid & shape. In Kibana data looks like following. …

---

## [NEST: GetMany and setting stored\_fields \_mget parameter](https://discuss.elastic.co/t/nest-getmany-and-setting-stored-fields-mget-parameter/140663)

<div class="topic-metadata">

**Author:** [@Henr1k](https://discuss.elastic.co/u/Henr1k)\
**Replies:** 0\
**Last updated:** [July 19, 2018, 6:50am UTC](https://discuss.elastic.co/t/nest-getmany-and-setting-stored-fields-mget-parameter/140663 "2018-07-19T06:50:21Z")

</div>

Hi, I cannot find a way to set \_mget stored\_fields parameter for NEST GetMany. Am I missing something or is it not possible?

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1610)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1612)
