# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1621

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1622

---

## [ES fails with no \[query\] registered for \[filtered\]](https://discuss.elastic.co/t/es-fails-with-no-query-registered-for-filtered/139592)

<div class="topic-metadata">

**Author:** [@Bogdan\_Popa](https://discuss.elastic.co/u/Bogdan_Popa)\
**Replies:** 0\
**Last updated:** [July 11, 2018, 2:09pm UTC](https://discuss.elastic.co/t/es-fails-with-no-query-registered-for-filtered/139592 "2018-07-11T14:09:29Z")

</div>

Elasticsearch fails with \[{"type":"parsing\_exception","reason":"no \[query\] registered for \[filtered\]" { query: { filtered: { filter: { bool: { must: must\_terms, must\_not: mus…

---

## [Clarification on Text Analysis and feeding to X-Pack](https://discuss.elastic.co/t/clarification-on-text-analysis-and-feeding-to-x-pack/139445)

<div class="topic-metadata">

**Author:** [@vsk](https://discuss.elastic.co/u/vsk)\
**Replies:** 2\
**Last updated:** [July 11, 2018, 2:00pm UTC](https://discuss.elastic.co/t/clarification-on-text-analysis-and-feeding-to-x-pack/139445 "2018-07-11T14:00:59Z")

</div>

Hi, We intend to import data from our existing system and need to do the below for the integration with X-Pack. e.g. Sample Text=Value Result The above text need to be split into 3 categories. Cat-1 : Sample Text C…

---

## [ES via docker in production (not localhost) mode](https://discuss.elastic.co/t/es-via-docker-in-production-not-localhost-mode/139321)

<div class="topic-metadata">

**Author:** [@Mike\_Niemaz](https://discuss.elastic.co/u/Mike_Niemaz)\
**Replies:** 3\
**Last updated:** [July 11, 2018, 12:37pm UTC](https://discuss.elastic.co/t/es-via-docker-in-production-not-localhost-mode/139321 "2018-07-11T12:37:25Z")

</div>

Hi all, I'm trying to run ES via docker (https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html#docker-prod-cluster-composefile) in a production mode .i.e: on a specified IP address (= NOT locahost)…

---

## [Update Failed, Internal Server Error](https://discuss.elastic.co/t/update-failed-internal-server-error/139514)

<div class="topic-metadata">

**Author:** [@Tempy](https://discuss.elastic.co/u/Tempy)\
**Replies:** 4\
**Last updated:** [July 11, 2018, 12:20pm UTC](https://discuss.elastic.co/t/update-failed-internal-server-error/139514 "2018-07-11T12:20:37Z")

</div>

Trying to update Ubuntu and the Elastic Stack (Debian Package) I get Internal Server Error. When I run "apt-get update && apt-get dist-upgrade" my server tries to reach those links for example: https://artifacts.elasti…

---

## [MergeException due to illegal state in PerFieldPostingsFormat es 6.3.0](https://discuss.elastic.co/t/mergeexception-due-to-illegal-state-in-perfieldpostingsformat-es-6-3-0/138650)

<div class="topic-metadata">

**Author:** [@bdelbosc](https://discuss.elastic.co/u/bdelbosc)\
**Replies:** 9\
**Last updated:** [July 11, 2018, 12:06pm UTC](https://discuss.elastic.co/t/mergeexception-due-to-illegal-state-in-perfieldpostingsformat-es-6-3-0/138650 "2018-07-11T12:06:44Z")

</div>

Greetings, I have a complex integration test that is failing systematically since we upgraded the Elasticsearch cluster to 6.3.0 (Lucene 7.3.1). The exact same test using an Elasticsearch cluster in version 6.2.4 (Luce…

---

## [Bool query with must query is matching all documents when the query doesn't match](https://discuss.elastic.co/t/bool-query-with-must-query-is-matching-all-documents-when-the-query-doesnt-match/139406)

<div class="topic-metadata">

**Author:** [@Santu](https://discuss.elastic.co/u/Santu)\
**Replies:** 1\
**Last updated:** [July 11, 2018, 11:57am UTC](https://discuss.elastic.co/t/bool-query-with-must-query-is-matching-all-documents-when-the-query-doesnt-match/139406 "2018-07-11T11:57:23Z")

</div>

Hi, i am using 5.x version of elasticsearch. my loaded documents are: POST index1/\_bulk { "index" : {"\_type" : "type1", "\_id" : "1" } } {"name": "sahana","rollno": "123456","class": "first"} { "index" : {"\_type" : "…

---

## [Can I see the query in the results elastic sends me?](https://discuss.elastic.co/t/can-i-see-the-query-in-the-results-elastic-sends-me/139523)

<div class="topic-metadata">

**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\
**Replies:** 1\
**Last updated:** [July 11, 2018, 11:40am UTC](https://discuss.elastic.co/t/can-i-see-the-query-in-the-results-elastic-sends-me/139523 "2018-07-11T11:40:19Z")

</div>

I feel like this is a dumb question, but is there a way to show the query itself in the results JSON elastic sends via search API? For example: Say I'm querying index named "Movies": curl http://localhost:9200/Movies/…

---

## [Elasticsearch must\_not on all elements in array](https://discuss.elastic.co/t/elasticsearch-must-not-on-all-elements-in-array/138390)

<div class="topic-metadata">

**Author:** [@Steinkauz](https://discuss.elastic.co/u/Steinkauz)\
**Replies:** 6\
**Last updated:** [July 11, 2018, 11:24am UTC](https://discuss.elastic.co/t/elasticsearch-must-not-on-all-elements-in-array/138390 "2018-07-11T11:24:32Z")

</div>

Hi, I have an object { "id": "first", "field": \[ { "subfield": "0" }, { "subfield": "1" }, { "subfield": "2" } \] } I want to search field.subfield =1 and also field.subfield!=1 Where both cases should re…

---

## [How to run elasticsearch OSS version as service in windows](https://discuss.elastic.co/t/how-to-run-elasticsearch-oss-version-as-service-in-windows/139393)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 2\
**Last updated:** [July 11, 2018, 11:19am UTC](https://discuss.elastic.co/t/how-to-run-elasticsearch-oss-version-as-service-in-windows/139393 "2018-07-11T11:19:46Z")

</div>

How can i make elasticsearch run as service when windows starts ? What is the code for that?

---

## [Curator Cronjob not running?](https://discuss.elastic.co/t/curator-cronjob-not-running/139492)

<div class="topic-metadata">

**Author:** [@Tempy](https://discuss.elastic.co/u/Tempy)\
**Replies:** 2\
**Last updated:** [July 11, 2018, 11:09am UTC](https://discuss.elastic.co/t/curator-cronjob-not-running/139492 "2018-07-11T11:09:41Z")

</div>

Hello, I configured Curator in /root/.curator/curator.yml and in the same path there is a action.yml where I configured actions to run (cretaing and deleting snapshots). With "sudo crontab -e" I creted a cronjob for Cu…

---

## [Handle 1 million inserts per second](https://discuss.elastic.co/t/handle-1-million-inserts-per-second/139387)

<div class="topic-metadata">

**Author:** [@hoey123](https://discuss.elastic.co/u/hoey123)\
**Replies:** 8\
**Last updated:** [July 11, 2018, 11:07am UTC](https://discuss.elastic.co/t/handle-1-million-inserts-per-second/139387 "2018-07-11T11:07:06Z")

</div>

we should implement really big data scenario with this features: input data is 1 million logs per second each log has almost 100 Bytes size we should retain data for 10 days system has 2,3 active users and they run may…

---

## [Same config and different result with Muti\_match query](https://discuss.elastic.co/t/same-config-and-different-result-with-muti-match-query/139547)

<div class="topic-metadata">

**Author:** [@mohammedEssabri](https://discuss.elastic.co/u/mohammedEssabri)\
**Replies:** 0\
**Last updated:** [July 11, 2018, 11:03am UTC](https://discuss.elastic.co/t/same-config-and-different-result-with-muti-match-query/139547 "2018-07-11T11:03:21Z")

</div>

Dear team, We have in 2 environments, the same Elasticsearch version, the same java code using elasticsearch client, and the same data, settings and mappings ( we copied indices using Elasticsearch Snapshot And Restore …

---

## [Left join](https://discuss.elastic.co/t/left-join/139508)

<div class="topic-metadata">

**Author:** [@memorandum](https://discuss.elastic.co/u/memorandum)\
**Replies:** 1\
**Last updated:** [July 11, 2018, 11:02am UTC](https://discuss.elastic.co/t/left-join/139508 "2018-07-11T11:02:30Z")

</div>

I have 3 documents... { @id:1, @type: driver, name: jos, surname: hatch, } { @id:2, @type:driver, name: elo, surname: jim, } { @id:444, @type:car, color:red, driver:\[1,2\] } Is it possible in elasticsea…

---

## [ROW\_NUMBER in Elasticsearch](https://discuss.elastic.co/t/row-number-in-elasticsearch/139317)

<div class="topic-metadata">

**Author:** [@nikita\_aleksahin](https://discuss.elastic.co/u/nikita_aleksahin)\
**Replies:** 2\
**Last updated:** [July 11, 2018, 10:40am UTC](https://discuss.elastic.co/t/row-number-in-elasticsearch/139317 "2018-07-11T10:40:03Z")

</div>

Whether there is ROW\_NUMBER() equivalent in Elasticsearch? If there is no that as he can be replaced? I tried to understand, but experience in Elasticsearch isn't enough.

---

## [Get the counts at each levels in a tree like document structure](https://discuss.elastic.co/t/get-the-counts-at-each-levels-in-a-tree-like-document-structure/139533)

<div class="topic-metadata">

**Author:** [@nikhilkvn](https://discuss.elastic.co/u/nikhilkvn)\
**Replies:** 1\
**Last updated:** [July 11, 2018, 10:12am UTC](https://discuss.elastic.co/t/get-the-counts-at-each-levels-in-a-tree-like-document-structure/139533 "2018-07-11T10:12:10Z")

</div>

Example data { "userName": "spyderman", "phoneNumber": "123ertre67890", "devicegroup": "Globe/India/Delhi/Parkstreet/building0/401B", "address": "#complete address with postal codes", }, { "userName": "batman", …

---

## [Doc's are getting deleted automatically](https://discuss.elastic.co/t/docs-are-getting-deleted-automatically/138879)

<div class="topic-metadata">

**Author:** [@kish](https://discuss.elastic.co/u/kish)\
**Replies:** 12\
**Last updated:** [July 11, 2018, 9:49am UTC](https://discuss.elastic.co/t/docs-are-getting-deleted-automatically/138879 "2018-07-11T09:49:13Z")

</div>

Doc in the index are getting deleted automatically from one particular index alone i.e immediately . I am able to see in indices output and very next second it is getting deleted. One the ES logs i am to see as below …

---

## [Painless script failes while deleting nested field](https://discuss.elastic.co/t/painless-script-failes-while-deleting-nested-field/134963)

<div class="topic-metadata">

**Author:** [@Vikentyi](https://discuss.elastic.co/u/Vikentyi)\
**Replies:** 7\
**Last updated:** [July 11, 2018, 9:21am UTC](https://discuss.elastic.co/t/painless-script-failes-while-deleting-nested-field/134963 "2018-07-11T09:21:03Z")

</div>

Hello. Elasticsearch 5.4.2. I have the following index mapping: { "pop": { "mappings": { "poptype": { "properties": { "popnested": { "type": "nested", "properties": { "first": { "type":…

---

## [Combine 'should' with 'filter' (search API)](https://discuss.elastic.co/t/combine-should-with-filter-search-api/139129)

<div class="topic-metadata">

**Author:** [@cweinberger](https://discuss.elastic.co/u/cweinberger)\
**Replies:** 2\
**Last updated:** [July 11, 2018, 9:07am UTC](https://discuss.elastic.co/t/combine-should-with-filter-search-api/139129 "2018-07-11T09:07:58Z")

</div>

When combining should with filter, the conditions in should are ignored. When using must, the filter works as expected. Query without filter: { "query": { "bool": { "should": \[ {…

---

## [Structured Streaming ES Sink](https://discuss.elastic.co/t/structured-streaming-es-sink/139501)

<div class="topic-metadata">

**Author:** [@mattjackson1989](https://discuss.elastic.co/u/mattjackson1989)\
**Replies:** 1\
**Last updated:** [July 11, 2018, 8:40am UTC](https://discuss.elastic.co/t/structured-streaming-es-sink/139501 "2018-07-11T08:40:39Z")

</div>

I have been trying to output data from my Spark Structured Streaming job to Elastic Search, following the example here. I am using Spark 2.3.0 and elasticsearch-hadoop:6.3.1 (specified through --jars in spark submit). T…

---

## [SQL Access is missing in X-pack](https://discuss.elastic.co/t/sql-access-is-missing-in-x-pack/138933)

<div class="topic-metadata">

**Author:** [@wrahmouni](https://discuss.elastic.co/u/wrahmouni)\
**Replies:** 4\
**Last updated:** [July 11, 2018, 7:54am UTC](https://discuss.elastic.co/t/sql-access-is-missing-in-x-pack/138933 "2018-07-11T07:54:10Z")

</div>

Hi, After installing elasticsearch, I wanted to use the functionalities provided by SQL access, but unfortunately I could enable it. I'm using the basic license. When I want to run this instruction in kibana POST /\_xpa…

---

## [Is xpack installed or not by default in elastic search cluster](https://discuss.elastic.co/t/is-xpack-installed-or-not-by-default-in-elastic-search-cluster/139345)

<div class="topic-metadata">

**Author:** [@avner](https://discuss.elastic.co/u/avner)\
**Replies:** 5\
**Last updated:** [July 11, 2018, 7:15am UTC](https://discuss.elastic.co/t/is-xpack-installed-or-not-by-default-in-elastic-search-cluster/139345 "2018-07-11T07:15:40Z")

</div>

The documentation on the site is not clear. The documentation leads you around in circles. I'm trying to configure some automation to create dedicated data, coordinator, and master nodes and I'm having trouble understan…

---

## [No output from curator](https://discuss.elastic.co/t/no-output-from-curator/139385)

<div class="topic-metadata">

**Author:** [@omisnomis](https://discuss.elastic.co/u/omisnomis)\
**Replies:** 3\
**Last updated:** [July 11, 2018, 7:14am UTC](https://discuss.elastic.co/t/no-output-from-curator/139385 "2018-07-11T07:14:46Z")

</div>

I have followed the steps listed in the installation instructions (I downloaded the Centos 7 RPM package as the server has no internet access) but I cannot run any commands. Expected Behavior When running a simple comma…

---

## [ES allocates primary shards on the same data node](https://discuss.elastic.co/t/es-allocates-primary-shards-on-the-same-data-node/139326)

<div class="topic-metadata">

**Author:** [@Oferkes](https://discuss.elastic.co/u/Oferkes)\
**Replies:** 18\
**Last updated:** [July 11, 2018, 6:54am UTC](https://discuss.elastic.co/t/es-allocates-primary-shards-on-the-same-data-node/139326 "2018-07-11T06:54:56Z")

</div>

Hi, i am creating an index with 10 primary shards and 0 replicas, however ES keeps creating the shards on the same data node. i tried to set cluster.routing.allocation.balance.index to 0.75 but this seem to have no eff…

---

## [Upgrading ES from 1.7.1 (from Amazon AWS) to ES Cloud](https://discuss.elastic.co/t/upgrading-es-from-1-7-1-from-amazon-aws-to-es-cloud/139159)

<div class="topic-metadata">

**Author:** [@MiguelSalenda](https://discuss.elastic.co/u/MiguelSalenda)\
**Replies:** 0\
**Last updated:** [July 9, 2018, 11:49am UTC](https://discuss.elastic.co/t/upgrading-es-from-1-7-1-from-amazon-aws-to-es-cloud/139159 "2018-07-09T11:49:15Z")

</div>

Hi all! I'm planning to migrate an app that uses an ES 1.7.1 form an Amazon AWS to the latest version in ES Cloud. This app uses the Groovy client. I've read that now is availabe a new high level REST API client to use…

---

## [Portability of Index on disk](https://discuss.elastic.co/t/portability-of-index-on-disk/139457)

<div class="topic-metadata">

**Author:** [@nos\_0](https://discuss.elastic.co/u/nos_0)\
**Replies:** 2\
**Last updated:** [July 11, 2018, 5:32am UTC](https://discuss.elastic.co/t/portability-of-index-on-disk/139457 "2018-07-11T05:32:29Z")

</div>

Hello, I am a new Elasticsearch user. I have been using wikipedia index dumps to run some queries more or less based on this tutorial - https://www.elastic.co/blog/loading-wikipedia Things are working great! I am using …

---

## [Bucket Script Aggregating on fields that contain a period](https://discuss.elastic.co/t/bucket-script-aggregating-on-fields-that-contain-a-period/139428)

<div class="topic-metadata">

**Author:** [@tadgh](https://discuss.elastic.co/u/tadgh)\
**Replies:** 1\
**Last updated:** [July 11, 2018, 12:33am UTC](https://discuss.elastic.co/t/bucket-script-aggregating-on-fields-that-contain-a-period/139428 "2018-07-11T00:33:35Z")

</div>

I am performing a percentiles aggregate over data. I also want to perform a bucket\_script aggregation, based on the results of the percentiles (defining interquartile range). I am unable to query the percentile values, a…

---

## [Backup elastic indices](https://discuss.elastic.co/t/backup-elastic-indices/139417)

<div class="topic-metadata">

**Author:** [@nehaankam](https://discuss.elastic.co/u/nehaankam)\
**Replies:** 1\
**Last updated:** [July 11, 2018, 12:30am UTC](https://discuss.elastic.co/t/backup-elastic-indices/139417 "2018-07-11T00:30:21Z")

</div>

I am trying to backup my indices in elasticsearch. Its working fine in my local. When I do the same in cloud, I get an exception as follows: {“error”:“RepositoryException\[\[janusindexbackup\] failed to create repository\];…

---

## [Elasticsearch Issues with Content Manager 9.2](https://discuss.elastic.co/t/elasticsearch-issues-with-content-manager-9-2/139439)

<div class="topic-metadata">

**Author:** [@Kyles710](https://discuss.elastic.co/u/Kyles710)\
**Replies:** 4\
**Last updated:** [July 10, 2018, 10:45pm UTC](https://discuss.elastic.co/t/elasticsearch-issues-with-content-manager-9-2/139439 "2018-07-10T22:45:08Z")

</div>

Hi I have a customer trying to run Elasticsearch as the Document Content Indexer with Micro Focus' Content Manager 9.2 and they are having issues with Elasticsearch - time outs, garbage collection issues, JVM issues. …

---

## [Any good way to add custom grok pattern to elasticsearch for pipelines other then in the pipeline file?](https://discuss.elastic.co/t/any-good-way-to-add-custom-grok-pattern-to-elasticsearch-for-pipelines-other-then-in-the-pipeline-file/139437)

<div class="topic-metadata">

**Author:** [@cwray](https://discuss.elastic.co/u/cwray)\
**Replies:** 0\
**Last updated:** [July 10, 2018, 10:22pm UTC](https://discuss.elastic.co/t/any-good-way-to-add-custom-grok-pattern-to-elasticsearch-for-pipelines-other-then-in-the-pipeline-file/139437 "2018-07-10T22:22:34Z")

</div>

Looking for a good way to load a bunch of custom grok pattern's into elasticsearch to be used in pipelines? Other than setting them in the pipeline.

---

## [How to change elasticsearch rest api context path](https://discuss.elastic.co/t/how-to-change-elasticsearch-rest-api-context-path/139413)

<div class="topic-metadata">

**Author:** [@sivakumarl](https://discuss.elastic.co/u/sivakumarl)\
**Replies:** 2\
**Last updated:** [July 10, 2018, 9:17pm UTC](https://discuss.elastic.co/t/how-to-change-elasticsearch-rest-api-context-path/139413 "2018-07-10T21:17:13Z")

</div>

Hi Team, I am newbie to elastic search, just curious to know how elastic search REST apis are deployed and where can i get the server configuration , is there feasibility to change to rest api context path as below. h…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1620)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1622)
