# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1613

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1614

---

## [Using painless to alter field contents during a reindex...null pointer exception](https://discuss.elastic.co/t/using-painless-to-alter-field-contents-during-a-reindex-null-pointer-exception/140368)

<div class="topic-metadata">

**Author:** [@Adam.Reynolds](https://discuss.elastic.co/u/Adam.Reynolds)\
**Replies:** 2\
**Last updated:** [July 18, 2018, 10:42am UTC](https://discuss.elastic.co/t/using-painless-to-alter-field-contents-during-a-reindex-null-pointer-exception/140368 "2018-07-18T10:42:34Z")

</div>

I'm updating the mappings in a colleagues index and they're trying to change a field from a string to an int. That much is fine but the field currently has data in such as "89%" so obviously the data won't go in. I'm tr…

---

## [Which filter query is good as per performance wise?](https://discuss.elastic.co/t/which-filter-query-is-good-as-per-performance-wise/140078)

<div class="topic-metadata">

**Author:** [@Shrimp-Fried-Rice](https://discuss.elastic.co/u/Shrimp-Fried-Rice)\
**Replies:** 6\
**Last updated:** [July 18, 2018, 10:39am UTC](https://discuss.elastic.co/t/which-filter-query-is-good-as-per-performance-wise/140078 "2018-07-18T10:39:59Z")

</div>

hi, i am new to elasticsearch, trying to implement it in place of mysql full text search. i am confused in these 3 queries as which one is better over another and why ? i am trying to to use filter and without use filt…

---

## [Getting different doc count for the same nested aggregation](https://discuss.elastic.co/t/getting-different-doc-count-for-the-same-nested-aggregation/140488)

<div class="topic-metadata">

**Author:** [@krishan](https://discuss.elastic.co/u/krishan)\
**Replies:** 1\
**Last updated:** [July 18, 2018, 10:14am UTC](https://discuss.elastic.co/t/getting-different-doc-count-for-the-same-nested-aggregation/140488 "2018-07-18T10:14:58Z")

</div>

Below is my aggregation "aggregations": { "dealsMappedCatNested": { "nested": { "path": "deals" }, "aggregations": { "dealsMappedCatFilter": { "filter": { "bool": { "filter": \[{ "exists":{ "field":"deals.deal…

---

## [Sort cross document index or document type](https://discuss.elastic.co/t/sort-cross-document-index-or-document-type/140495)

<div class="topic-metadata">

**Author:** [@kratos\_hut](https://discuss.elastic.co/u/kratos_hut)\
**Replies:** 0\
**Last updated:** [July 18, 2018, 9:34am UTC](https://discuss.elastic.co/t/sort-cross-document-index-or-document-type/140495 "2018-07-18T09:34:15Z")

</div>

Hi all Can I use painless inline-script to write a function which sort documents by values from another document index or another document types ? Cause I'm using Elasticsearch to filter/search items. And I want to sor…

---

## [Elasticsearch 5.4.3. Sorting items inside array field](https://discuss.elastic.co/t/elasticsearch-5-4-3-sorting-items-inside-array-field/140491)

<div class="topic-metadata">

**Author:** [@lcokru](https://discuss.elastic.co/u/lcokru)\
**Replies:** 0\
**Last updated:** [July 18, 2018, 9:19am UTC](https://discuss.elastic.co/t/elasticsearch-5-4-3-sorting-items-inside-array-field/140491 "2018-07-18T09:19:11Z")

</div>

Hi. I have the mapping that is similar to bellow: PUT car-company-index { "mappings": { "carUser": { "properties": { "name": { "type": "keyword" }, "cars": { "type": "object", "properties": { "car": { "type"…

---

## [NEST: Avoid storing default values false, 0 etc](https://discuss.elastic.co/t/nest-avoid-storing-default-values-false-0-etc/140457)

<div class="topic-metadata">

**Author:** [@Henr1k](https://discuss.elastic.co/u/Henr1k)\
**Replies:** 4\
**Last updated:** [July 18, 2018, 8:59am UTC](https://discuss.elastic.co/t/nest-avoid-storing-default-values-false-0-etc/140457 "2018-07-18T08:59:22Z")

</div>

Hi, is it possible to avoid serializing default values for int, boolean etc. E.g.: "onlyCheckingForPositiveValue" : 0, "onlyCheckingForTrueValue" : false, I know Json.NET has this attribute: \[JsonProperty(DefaultVal…

---

## [Elasticsearch Cluster: How to ensure node communication](https://discuss.elastic.co/t/elasticsearch-cluster-how-to-ensure-node-communication/140448)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 14\
**Last updated:** [July 18, 2018, 8:45am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-how-to-ensure-node-communication/140448 "2018-07-18T08:45:48Z")

</div>

Hello Please have a look at ES configuration and let me know what's wrong Node:1 node.name: "es-node-1" node.master: true node.data: true network.host: 10.0.0.74 http.port: 9200 …

---

## [How to speed up query performance?](https://discuss.elastic.co/t/how-to-speed-up-query-performance/140243)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 1\
**Last updated:** [July 18, 2018, 8:23am UTC](https://discuss.elastic.co/t/how-to-speed-up-query-performance/140243 "2018-07-18T08:23:51Z")

</div>

Hi, I have 4 nodes in a cluster. I ingest netflow through ELK 40~50G data per day with 3 replica shards, and query about 3000 times per second. I found the query perfomance is not good. I am trying to find out the bottle…

---

## [Aggregating on highlight](https://discuss.elastic.co/t/aggregating-on-highlight/140175)

<div class="topic-metadata">

**Author:** [@Sofiane\_Chenna](https://discuss.elastic.co/u/Sofiane_Chenna)\
**Replies:** 2\
**Last updated:** [July 18, 2018, 7:59am UTC](https://discuss.elastic.co/t/aggregating-on-highlight/140175 "2018-07-18T07:59:13Z")

</div>

Hi , I have a query that returns a highlight fields , i wanna aggregate the fields returned by the query ( see code ) { "query" : { "query\_string" : { "query" : "\*…

---

## [Problem to check if an Index Exist using NEST .Net](https://discuss.elastic.co/t/problem-to-check-if-an-index-exist-using-nest-net/140392)

<div class="topic-metadata">

**Author:** [@r1go](https://discuss.elastic.co/u/r1go)\
**Replies:** 1\
**Last updated:** [July 18, 2018, 7:58am UTC](https://discuss.elastic.co/t/problem-to-check-if-an-index-exist-using-nest-net/140392 "2018-07-18T07:58:03Z")

</div>

Hi there!, Im just trying to check if an index exist previous my query with something like that: var request = new IndexExistsRequest("my\_beautiful\_index"); var result = client.IndexExists(request); But i always get …

---

## [Is it possible to publish X-Pack metrics to Kafka instead of Elasticsearch](https://discuss.elastic.co/t/is-it-possible-to-publish-x-pack-metrics-to-kafka-instead-of-elasticsearch/140334)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 1\
**Last updated:** [July 18, 2018, 7:55am UTC](https://discuss.elastic.co/t/is-it-possible-to-publish-x-pack-metrics-to-kafka-instead-of-elasticsearch/140334 "2018-07-18T07:55:23Z")

</div>

Hi, I am using ELK GA 6.3.0. I am currently experimenting with 50+ filebeat, 20+ Metricbeat, 8 Logstash, and 2 Kibana instances deployed across VMs. I have enabled X-Pack monitoring and http endpoints in all these and i…

---

## [Homelab with X-Pack](https://discuss.elastic.co/t/homelab-with-x-pack/140384)

<div class="topic-metadata">

**Author:** [@jeffdev](https://discuss.elastic.co/u/jeffdev)\
**Replies:** 2\
**Last updated:** [July 18, 2018, 7:54am UTC](https://discuss.elastic.co/t/homelab-with-x-pack/140384 "2018-07-18T07:54:09Z")

</div>

Hi, I'm looking into building a homelab with elastic and the X-Pack. Does eEastic offer any license (30 day+) for home (personal use), because my research will be longer than 30 days. Thanks in advance, JeffDev

---

## [ES Cluster configuration](https://discuss.elastic.co/t/es-cluster-configuration/140438)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 7\
**Last updated:** [July 18, 2018, 7:45am UTC](https://discuss.elastic.co/t/es-cluster-configuration/140438 "2018-07-18T07:45:32Z")

</div>

Hello Team Currently, I'm running 2 instances having Elasticsearch Independently. Now, I've to build a 3 node cluster which should include the available two nodes. what's the best way to do that(without losing the data)…

---

## [Setting up elastics watch on Linux on system z error](https://discuss.elastic.co/t/setting-up-elastics-watch-on-linux-on-system-z-error/140452)

<div class="topic-metadata">

**Author:** [@Harish\_Malu](https://discuss.elastic.co/u/Harish_Malu)\
**Replies:** 4\
**Last updated:** [July 18, 2018, 7:44am UTC](https://discuss.elastic.co/t/setting-up-elastics-watch-on-linux-on-system-z-error/140452 "2018-07-18T07:44:08Z")

</div>

Hi Team, I have done my setup of using Logstash, elasticsearch and kibana for my systems performance data on rhel using latest 6.x version. It all works fine. Now I need to move this setup on Linux(rhel) on system z (m…

---

## [Cannot Find elasticsearch.yml from ElasticStack in Azure](https://discuss.elastic.co/t/cannot-find-elasticsearch-yml-from-elasticstack-in-azure/138613)

<div class="topic-metadata">

**Author:** [@nenjotsu](https://discuss.elastic.co/u/nenjotsu)\
**Replies:** 5\
**Last updated:** [July 18, 2018, 7:38am UTC](https://discuss.elastic.co/t/cannot-find-elasticsearch-yml-from-elasticstack-in-azure/138613 "2018-07-18T07:38:07Z")

</div>

I've created an ElasticStack from Azure but I cannot find the elasticsearch.yml file to edit. I have an access via ssh but there's no any file in it. Where can I find the elasticsearch.yml. Thanks

---

## [Update documents from multiple index based on condition](https://discuss.elastic.co/t/update-documents-from-multiple-index-based-on-condition/140460)

<div class="topic-metadata">

**Author:** [@Vijayakumarviji](https://discuss.elastic.co/u/Vijayakumarviji)\
**Replies:** 0\
**Last updated:** [July 18, 2018, 6:50am UTC](https://discuss.elastic.co/t/update-documents-from-multiple-index-based-on-condition/140460 "2018-07-18T06:50:35Z")

</div>

Elasticsearch Version: 6.0.0 I am currently having two indexes such as "user" and "purchase" sample document : User Index: { "name": "Tamil", "id": "2" } Purchase Index: { "product": "Apache RTR 200", "id": "p…

---

## [Aggregations slower in ElasticSearch 6.3.0](https://discuss.elastic.co/t/aggregations-slower-in-elasticsearch-6-3-0/140455)

<div class="topic-metadata">

**Author:** [@cluengo](https://discuss.elastic.co/u/cluengo)\
**Replies:** 0\
**Last updated:** [July 18, 2018, 6:34am UTC](https://discuss.elastic.co/t/aggregations-slower-in-elasticsearch-6-3-0/140455 "2018-07-18T06:34:28Z")

</div>

Hi all, I know this might be a very general question, but we were using ElasticSearch 2.4.2 and recently upgraded it to 6.3.0. After the upgrade, we noticed that the aggregation query is quite slower (around 2x) in 6.3.…

---

## [Python: bulk updating with a new field, contents of that field are inside a json](https://discuss.elastic.co/t/python-bulk-updating-with-a-new-field-contents-of-that-field-are-inside-a-json/140450)

<div class="topic-metadata">

**Author:** [@mariskaas](https://discuss.elastic.co/u/mariskaas)\
**Replies:** 0\
**Last updated:** [July 18, 2018, 6:22am UTC](https://discuss.elastic.co/t/python-bulk-updating-with-a-new-field-contents-of-that-field-are-inside-a-json/140450 "2018-07-18T06:22:54Z")

</div>

I have some data in elasticsearch and I want to bulkupdate each document with a new field. I have a json that looks like this(lists can also contain multiple dicts): { "uniquecode1": \[{ "stuff": "things" }\], "unique…

---

## [Prioritize a Master node in a Cluster](https://discuss.elastic.co/t/prioritize-a-master-node-in-a-cluster/140446)

<div class="topic-metadata">

**Author:** [@Malc0lm](https://discuss.elastic.co/u/Malc0lm)\
**Replies:** 1\
**Last updated:** [July 18, 2018, 6:14am UTC](https://discuss.elastic.co/t/prioritize-a-master-node-in-a-cluster/140446 "2018-07-18T06:14:45Z")

</div>

Hello, I would like to ask again a question that was raised previously in a post with the (almost) same title (I could not reopen it). I wonder if there is a way to prioritize master nodes so that a particular machine …

---

## [Increase Threadpool size of each node](https://discuss.elastic.co/t/increase-threadpool-size-of-each-node/134021)

<div class="topic-metadata">

**Author:** [@krishan](https://discuss.elastic.co/u/krishan)\
**Replies:** 6\
**Last updated:** [July 18, 2018, 6:08am UTC](https://discuss.elastic.co/t/increase-threadpool-size-of-each-node/134021 "2018-07-18T06:08:05Z")

</div>

Is it possible to increase Threadpool sizes of nodes from the default value.If yes,how can I do it ?

---

## [Alias/sql issue](https://discuss.elastic.co/t/alias-sql-issue/140208)

<div class="topic-metadata">

**Author:** [@bossi6of9](https://discuss.elastic.co/u/bossi6of9)\
**Replies:** 1\
**Last updated:** [July 18, 2018, 6:03am UTC](https://discuss.elastic.co/t/alias-sql-issue/140208 "2018-07-18T06:03:16Z")

</div>

Hi, I am trying to use the elastic sql cli command. I setup an alias to cover multiple indexes, but now when I query via sql cli, I get the following: sql\> select \* from all\_netflow\_indices limit 1; Bad request \[Foun…

---

## [Elasticsearch.yml does not work in Windows](https://discuss.elastic.co/t/elasticsearch-yml-does-not-work-in-windows/140410)

<div class="topic-metadata">

**Author:** [@Moon](https://discuss.elastic.co/u/Moon)\
**Replies:** 2\
**Last updated:** [July 18, 2018, 5:55am UTC](https://discuss.elastic.co/t/elasticsearch-yml-does-not-work-in-windows/140410 "2018-07-18T05:55:10Z")

</div>

Hi, I installed elasticsearch in Windows. I changed elasticsearch.yml ex) cluster name, node.name, node.master .... I went to localhost:9200/ and checked http://localhost:9200/\_cluster/health?pretty=true However, it …

---

## [Elasticsearch is spanning multiple processes and threads resulting in 100% CPU utilization](https://discuss.elastic.co/t/elasticsearch-is-spanning-multiple-processes-and-threads-resulting-in-100-cpu-utilization/138138)

<div class="topic-metadata">

**Author:** [@abdulwaheed](https://discuss.elastic.co/u/abdulwaheed)\
**Replies:** 15\
**Last updated:** [July 18, 2018, 5:36am UTC](https://discuss.elastic.co/t/elasticsearch-is-spanning-multiple-processes-and-threads-resulting-in-100-cpu-utilization/138138 "2018-07-18T05:36:08Z")

</div>

Hi Elastic users, We are using ES 2.4.5 along with Liferay DXP, we have set it up with the default configuration. We are having (1node, 1 shard and 0 replicas) on ES 2.4.5 running on EC2 (4CPU, 16GB RAM). On a daily …

---

## [Elasticsearch compare two different index](https://discuss.elastic.co/t/elasticsearch-compare-two-different-index/139529)

<div class="topic-metadata">

**Author:** [@vinu89](https://discuss.elastic.co/u/vinu89)\
**Replies:** 2\
**Last updated:** [July 18, 2018, 3:56am UTC](https://discuss.elastic.co/t/elasticsearch-compare-two-different-index/139529 "2018-07-18T03:56:46Z")

</div>

Hello all, I have two different index say index 1 and index 2 I have to find out whether the field which is present in index 2 is also in index 1 say for e.g index 1 has a field called domainname:xyz.com and index 2 has…

---

## [Duplicate collection information](https://discuss.elastic.co/t/duplicate-collection-information/140422)

<div class="topic-metadata">

**Author:** [@wuwenjie\_cn](https://discuss.elastic.co/u/wuwenjie_cn)\
**Replies:** 2\
**Last updated:** [July 18, 2018, 2:12am UTC](https://discuss.elastic.co/t/duplicate-collection-information/140422 "2018-07-18T02:12:52Z")

</div>

Log background description: The log is a log of the java program, which is automatically divided into a single log file every day by day. After collecting the log information from the filebeat to the elasticsearch, the…

---

## [Watcher Heartbeat monitor.status query help](https://discuss.elastic.co/t/watcher-heartbeat-monitor-status-query-help/139616)

<div class="topic-metadata">

**Author:** [@Rob2](https://discuss.elastic.co/u/Rob2)\
**Replies:** 4\
**Last updated:** [July 17, 2018, 10:45pm UTC](https://discuss.elastic.co/t/watcher-heartbeat-monitor-status-query-help/139616 "2018-07-17T22:45:21Z")

</div>

Hi, I've got a Watch set up with Heartbeat input that sends an alert when any system is not responding to pings (i.e. has monitor.status == down) in the last X minutes. Here is my watch at the moment: { "trigger": {…

---

## [Elasticsearch gives different search results for same query](https://discuss.elastic.co/t/elasticsearch-gives-different-search-results-for-same-query/140405)

<div class="topic-metadata">

**Author:** [@sunilb0575](https://discuss.elastic.co/u/sunilb0575)\
**Replies:** 0\
**Last updated:** [July 17, 2018, 10:14pm UTC](https://discuss.elastic.co/t/elasticsearch-gives-different-search-results-for-same-query/140405 "2018-07-17T22:14:31Z")

</div>

Problem: I get different search results for same search criteria. I have highlighted the changes in the following screen shots Details: { "took": 2, "timed\_out": false, "\_shards": { "total": 1, "successful": …

---

## [Can we join two indexes.?](https://discuss.elastic.co/t/can-we-join-two-indexes/139128)

<div class="topic-metadata">

**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\
**Replies:** 2\
**Last updated:** [July 17, 2018, 9:56pm UTC](https://discuss.elastic.co/t/can-we-join-two-indexes/139128 "2018-07-17T21:56:57Z")

</div>

Hi, While fetching data from elasticsearch can we join two indexes in query. Is it possible?

---

## [Spike in cluster CPU when viewing Discover page on Kibana](https://discuss.elastic.co/t/spike-in-cluster-cpu-when-viewing-discover-page-on-kibana/140399)

<div class="topic-metadata">

**Author:** [@robinjoseph08](https://discuss.elastic.co/u/robinjoseph08)\
**Replies:** 0\
**Last updated:** [July 17, 2018, 9:41pm UTC](https://discuss.elastic.co/t/spike-in-cluster-cpu-when-viewing-discover-page-on-kibana/140399 "2018-07-17T21:41:32Z")

</div>

We've recently stood up a new cluster for our logging pipeline, and we're seeing some performance issues. We're have 3 nodes running Elasticsearch 6.2.4 on EC2 c5.4xlarges. Normally the cluster is running fine, and even…

---

## [Real time scrolling solution](https://discuss.elastic.co/t/real-time-scrolling-solution/140177)

<div class="topic-metadata">

**Author:** [@TameemSamawi](https://discuss.elastic.co/u/TameemSamawi)\
**Replies:** 22\
**Last updated:** [July 17, 2018, 9:20pm UTC](https://discuss.elastic.co/t/real-time-scrolling-solution/140177 "2018-07-17T21:20:04Z")

</div>

The documentation on scrolling explicitly states: Scrolling is not intended for real time user requests, but rather for processing large amounts of data, e.g. in order to reindex the contents of one index into a new in…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1612)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1614)
