# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1625

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1626

---

## [Show suggestion from different indexes of elasticsearch?](https://discuss.elastic.co/t/show-suggestion-from-different-indexes-of-elasticsearch/138484)

<div class="topic-metadata">

**Author:** [@rs123](https://discuss.elastic.co/u/rs123)\
**Replies:** 1\
**Last updated:** [July 8, 2018, 3:55pm UTC](https://discuss.elastic.co/t/show-suggestion-from-different-indexes-of-elasticsearch/138484 "2018-07-08T15:55:27Z")

</div>

Suppose I have two indexes in elasticsearch. First names contains five documents with values Ram, Shyam, Hari, Dipu, Kishan and second profession contains five documents with values like teacher, driver, doctor, bank man…

---

## [Aggregate a field ignoring the active filters for the same field](https://discuss.elastic.co/t/aggregate-a-field-ignoring-the-active-filters-for-the-same-field/139058)

<div class="topic-metadata">

**Author:** [@Boo](https://discuss.elastic.co/u/Boo)\
**Replies:** 0\
**Last updated:** [July 8, 2018, 2:28pm UTC](https://discuss.elastic.co/t/aggregate-a-field-ignoring-the-active-filters-for-the-same-field/139058 "2018-07-08T14:28:36Z")

</div>

Hello, I am new with elasticsearch and I am trying to make a aggregation to create options for a muliple selection. For example my documents have a list of nested documents. The nested documents have some attribute (fo…

---

## [Clustẻr setup - Fail to connect to master node](https://discuss.elastic.co/t/clust-r-setup-fail-to-connect-to-master-node/138502)

<div class="topic-metadata">

**Author:** [@Nguyen\_Viet\_Anh](https://discuss.elastic.co/u/Nguyen_Viet_Anh)\
**Replies:** 1\
**Last updated:** [July 8, 2018, 1:41pm UTC](https://discuss.elastic.co/t/clust-r-setup-fail-to-connect-to-master-node/138502 "2018-07-08T13:41:45Z")

</div>

Hi, we are trying to setup a cluster on a local network (Windows) with zip installation; I setup the zen discovery like so: network.host: 192.168.68.104 http.port: 9200 --------------------------------- Discovery --…

---

## [Elastic 6.3.1 and configuring emails so Watcher can send emails rather than just exporting to the local log file](https://discuss.elastic.co/t/elastic-6-3-1-and-configuring-emails-so-watcher-can-send-emails-rather-than-just-exporting-to-the-local-log-file/139050)

<div class="topic-metadata">

**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\
**Replies:** 2\
**Last updated:** [July 8, 2018, 12:55pm UTC](https://discuss.elastic.co/t/elastic-6-3-1-and-configuring-emails-so-watcher-can-send-emails-rather-than-just-exporting-to-the-local-log-file/139050 "2018-07-08T12:55:44Z")

</div>

Hi. I am trying to setup email alerts for my watchers. I have the following setup in my /etc/elasticsearch/elasticsearch.yml file: xpack.notification.email.account: elastic@domain.com profile: gmail smtp.auth: true …

---

## [Hardware Configuration for ELK](https://discuss.elastic.co/t/hardware-configuration-for-elk/139032)

<div class="topic-metadata">

**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\
**Replies:** 4\
**Last updated:** [July 8, 2018, 11:18am UTC](https://discuss.elastic.co/t/hardware-configuration-for-elk/139032 "2018-07-08T11:18:35Z")

</div>

Hi - We are trying to setup Elastic Search Server in the Production with the 3 nodes ( 1 Master and 2 Data Node) with 1 TB and 64 GB Ram each, and I would like to know which Operating System would give better performanc…

---

## [Creating advanced alerts](https://discuss.elastic.co/t/creating-advanced-alerts/138989)

<div class="topic-metadata">

**Author:** [@Rohit\_Jawle](https://discuss.elastic.co/u/Rohit_Jawle)\
**Replies:** 1\
**Last updated:** [July 8, 2018, 10:17am UTC](https://discuss.elastic.co/t/creating-advanced-alerts/138989 "2018-07-08T10:17:30Z")

</div>

I need to create an alert that triggers when an approval rate is less than 85% over the last 10 minutes. The logs i get tell me if an event has been approved or declined. How do i add all the approved and declines over t…

---

## [Elasticsearch index corruption?](https://discuss.elastic.co/t/elasticsearch-index-corruption/138002)

<div class="topic-metadata">

**Author:** [@Ramon\_Zaro](https://discuss.elastic.co/u/Ramon_Zaro)\
**Replies:** 4\
**Last updated:** [July 8, 2018, 8:55am UTC](https://discuss.elastic.co/t/elasticsearch-index-corruption/138002 "2018-07-08T08:55:23Z")

</div>

Hi, I am running a ES 6.3 on a single node fed by fscrawler 2.4 on a fileshare. It was working fine for few days but suddenly there was an issue that certain keywords would give a timeout (searched using kibana 6.3) or …

---

## [X-Pack License details](https://discuss.elastic.co/t/x-pack-license-details/139033)

<div class="topic-metadata">

**Author:** [@logesh\_j](https://discuss.elastic.co/u/logesh_j)\
**Replies:** 1\
**Last updated:** [July 8, 2018, 7:13am UTC](https://discuss.elastic.co/t/x-pack-license-details/139033 "2018-07-08T07:13:43Z")

</div>

Do we have X-Pack community edition? I have installed the ELK local version. I am not able to find the option to set up the security for elastic search and find the default credentials. ELK documents don't help much. T…

---

## [ES 5.4.0 Range query return wrong result](https://discuss.elastic.co/t/es-5-4-0-range-query-return-wrong-result/139030)

<div class="topic-metadata">

**Author:** [@shadowinlfie](https://discuss.elastic.co/u/shadowinlfie)\
**Replies:** 1\
**Last updated:** [July 8, 2018, 6:50am UTC](https://discuss.elastic.co/t/es-5-4-0-range-query-return-wrong-result/139030 "2018-07-08T06:50:35Z")

</div>

Elasticsearch version 5.4.0 JVM 1.8 Index mapping: { "eastmoney": { "mappings": { "doc": { "properties": { "content": { "type": "keyword", "ignore\_above": 20 }, "crawlertime": { "type": "float" }, "f…

---

## [Ubuntu install - elasticsearch missing config files. Will exit after starting](https://discuss.elastic.co/t/ubuntu-install-elasticsearch-missing-config-files-will-exit-after-starting/138998)

<div class="topic-metadata">

**Author:** [@Darin\_Hensley](https://discuss.elastic.co/u/Darin_Hensley)\
**Replies:** 6\
**Last updated:** [July 8, 2018, 3:12am UTC](https://discuss.elastic.co/t/ubuntu-install-elasticsearch-missing-config-files-will-exit-after-starting/138998 "2018-07-08T03:12:01Z")

</div>

I have a new Ubuntu system(16.08 Xenial LTS). I installed elastic search(apt-get install elasticsearch), but I am having issues. It seems the Elastic search daemon starts, but then exists with 'active (exited)', and no…

---

## [Approach: Common Information Model for Elastic Stack](https://discuss.elastic.co/t/approach-common-information-model-for-elastic-stack/138988)

<div class="topic-metadata">

**Author:** [@dss](https://discuss.elastic.co/u/dss)\
**Replies:** 3\
**Last updated:** [July 7, 2018, 11:54pm UTC](https://discuss.elastic.co/t/approach-common-information-model-for-elastic-stack/138988 "2018-07-07T23:54:28Z")

</div>

Greetings, I have an environment where I'm collecting a number of disparate logs from the network and hosts and indexing them in Elasticsearch. Logs are being delivered mostly over syslog from network devices, Linux and…

---

## [Upgrading from 5.6 to 6.x](https://discuss.elastic.co/t/upgrading-from-5-6-to-6-x/137541)

<div class="topic-metadata">

**Author:** [@anush\_jayan](https://discuss.elastic.co/u/anush_jayan)\
**Replies:** 3\
**Last updated:** [July 7, 2018, 10:42pm UTC](https://discuss.elastic.co/t/upgrading-from-5-6-to-6-x/137541 "2018-07-07T22:42:07Z")

</div>

when im trying to upgrade from 5.6 to 6.x im getting some errors im trying to do a rolling upgrade below i have given the error which im getting even though i havent installed any plugins \[2018-06-27T05:48:38,655\]\[INFO…

---

## [To refresh or not to refresh](https://discuss.elastic.co/t/to-refresh-or-not-to-refresh/139003)

<div class="topic-metadata">

**Author:** [@spalme77](https://discuss.elastic.co/u/spalme77)\
**Replies:** 4\
**Last updated:** [July 7, 2018, 10:33pm UTC](https://discuss.elastic.co/t/to-refresh-or-not-to-refresh/139003 "2018-07-07T22:33:28Z")

</div>

Hi all, I am quite new to ElasticSearch and currently in the process of reading the docs and playing with it in parallel. I have a question to an (inconsistent?) part of the documentation: https://www.elastic.co/guide/…

---

## [Getting fixed number of results using multi search API](https://discuss.elastic.co/t/getting-fixed-number-of-results-using-multi-search-api/138839)

<div class="topic-metadata">

**Author:** [@rs123](https://discuss.elastic.co/u/rs123)\
**Replies:** 5\
**Last updated:** [July 7, 2018, 6:35pm UTC](https://discuss.elastic.co/t/getting-fixed-number-of-results-using-multi-search-api/138839 "2018-07-07T18:35:35Z")

</div>

Is it possible to get fixed number of results from each index searched? For example if it1, it2 and it3 are three different indexes and I want 6 results from it1, 4 results from it2 and 5 from it3. And I want only these…

---

## [Query shard exeption - all shards failed](https://discuss.elastic.co/t/query-shard-exeption-all-shards-failed/138494)

<div class="topic-metadata">

**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\
**Replies:** 7\
**Last updated:** [July 7, 2018, 3:55pm UTC](https://discuss.elastic.co/t/query-shard-exeption-all-shards-failed/138494 "2018-07-07T15:55:59Z")

</div>

Hi, I'm encountering a problem while indexing some data. At the end of the post you can find the error message I can see from Logstash logs. It seems that Logstash (which is using a Elasticsearch filter plugin to enrich…

---

## [What is the difference between elastic and apache licensed version](https://discuss.elastic.co/t/what-is-the-difference-between-elastic-and-apache-licensed-version/139015)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 1\
**Last updated:** [July 7, 2018, 3:14pm UTC](https://discuss.elastic.co/t/what-is-the-difference-between-elastic-and-apache-licensed-version/139015 "2018-07-07T15:14:25Z")

</div>

what is the difference between Elasticsearch and Elasticsearch - OSS Only version ? Is there any difference in the configuration ?

---

## [Website shut down by court ruling, relaunching with Elasticsearch](https://discuss.elastic.co/t/website-shut-down-by-court-ruling-relaunching-with-elasticsearch/138752)

<div class="topic-metadata">

**Author:** [@Rettspraksis](https://discuss.elastic.co/u/Rettspraksis)\
**Replies:** 1\
**Last updated:** [July 7, 2018, 3:05pm UTC](https://discuss.elastic.co/t/website-shut-down-by-court-ruling-relaunching-with-elasticsearch/138752 "2018-07-07T15:05:51Z")

</div>

Intro: A group of Norwegian internet activists started Rettspraksis.no to give all the citizens free access to court decisions, defining current law. In less then 24 hours a court ruling shut down the website, without …

---

## [Why does discovery-gce need write permissions](https://discuss.elastic.co/t/why-does-discovery-gce-need-write-permissions/138972)

<div class="topic-metadata">

**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\
**Replies:** 5\
**Last updated:** [July 7, 2018, 1:42pm UTC](https://discuss.elastic.co/t/why-does-discovery-gce-need-write-permissions/138972 "2018-07-07T13:42:22Z")

</div>

According to this https://www.elastic.co/guide/en/elasticsearch/plugins/6.3/discovery-gce-usage-long.html we need to give write permissions to the instance. Can someone tell me why it needs write permissions? AWS coun…

---

## [Curator\_cli delete of data and index Even Kibana Dashboard](https://discuss.elastic.co/t/curator-cli-delete-of-data-and-index-even-kibana-dashboard/139007)

<div class="topic-metadata">

**Author:** [@omid](https://discuss.elastic.co/u/omid)\
**Replies:** 1\
**Last updated:** [July 7, 2018, 1:02pm UTC](https://discuss.elastic.co/t/curator-cli-delete-of-data-and-index-even-kibana-dashboard/139007 "2018-07-07T13:02:39Z")

</div>

im install and worked curator cli for deleted index and data! But when the time comes for the erase curator\_cli In addition to the elasticsearch index, Kibana Dashboard is deleted But I do not want the Kibana dashboa…

---

## [Elasticsearch throws MapperParsingException](https://discuss.elastic.co/t/elasticsearch-throws-mapperparsingexception/139013)

<div class="topic-metadata">

**Author:** [@alien777](https://discuss.elastic.co/u/alien777)\
**Replies:** 1\
**Last updated:** [July 7, 2018, 12:58pm UTC](https://discuss.elastic.co/t/elasticsearch-throws-mapperparsingexception/139013 "2018-07-07T12:58:12Z")

</div>

Hello, Elasticsearch throws Exception during adding document to index. Problem occurred with field value\_open and value\_close which marked as range\_integer type. This is mapping file: https://textuploader.com/dzge4 s…

---

## [Phrase suggester collate query in java api](https://discuss.elastic.co/t/phrase-suggester-collate-query-in-java-api/139014)

<div class="topic-metadata">

**Author:** [@NarimanN2](https://discuss.elastic.co/u/NarimanN2)\
**Replies:** 0\
**Last updated:** [July 7, 2018, 12:39pm UTC](https://discuss.elastic.co/t/phrase-suggester-collate-query-in-java-api/139014 "2018-07-07T12:39:02Z")

</div>

The PhraseSuggestionBuilder in elasticsearch java API has a collateQuery method that takes a String as input. but there is a problem, this code: collateQuery("\\"match\\": {\\"title.phrase\\" : \\"{{suggestion}}\\"}") will…

---

## [Elasticsearch starts then stops](https://discuss.elastic.co/t/elasticsearch-starts-then-stops/139004)

<div class="topic-metadata">

**Author:** [@jb1462](https://discuss.elastic.co/u/jb1462)\
**Replies:** 2\
**Last updated:** [July 7, 2018, 11:10am UTC](https://discuss.elastic.co/t/elasticsearch-starts-then-stops/139004 "2018-07-07T11:10:26Z")

</div>

Hello, I have installed elasticsearch (elasticsearch-2.3.3-1) and kibana (kibana-4.5.1) on one of our VMs ( with RHEL 7.5). Kibana starts without any issue. However, elasticsearch starts and then dies. Here's what I…

---

## [Why does ES have this cryptic query language?](https://discuss.elastic.co/t/why-does-es-have-this-cryptic-query-language/139009)

<div class="topic-metadata">

**Author:** [@nuketro0p3r](https://discuss.elastic.co/u/nuketro0p3r)\
**Replies:** 1\
**Last updated:** [July 7, 2018, 10:12am UTC](https://discuss.elastic.co/t/why-does-es-have-this-cryptic-query-language/139009 "2018-07-07T10:12:50Z")

</div>

As a beginner with ES the most amount of time I've wasted is in learning this cryptic JSON based query language. I really don't find it intuitive at all (like SQL for example). I also see other people making the same mis…

---

## [Best way to reindex an ES index which is accepting updated](https://discuss.elastic.co/t/best-way-to-reindex-an-es-index-which-is-accepting-updated/138994)

<div class="topic-metadata">

**Author:** [@sharathr83](https://discuss.elastic.co/u/sharathr83)\
**Replies:** 2\
**Last updated:** [July 7, 2018, 9:58am UTC](https://discuss.elastic.co/t/best-way-to-reindex-an-es-index-which-is-accepting-updated/138994 "2018-07-07T09:58:42Z")

</div>

I have an ES index which is continuously receiving updates. Apart from inserts and deletes, my index accepts a lot of update operations. Over a period of time, I see a lot of disk IO performance issues because of which I…

---

## [Filter be scripted field](https://discuss.elastic.co/t/filter-be-scripted-field/138950)

<div class="topic-metadata">

**Author:** [@nuketro0p3r](https://discuss.elastic.co/u/nuketro0p3r)\
**Replies:** 2\
**Last updated:** [July 7, 2018, 9:43am UTC](https://discuss.elastic.co/t/filter-be-scripted-field/138950 "2018-07-07T09:43:53Z")

</div>

Is it possible to filter by a scripted field? If so, how would the query look like? I tried using the scripted field in a post\_filter but it dies silently (0 matches) The goal is to derive a new field as a predicate ba…

---

## [Prevent duplicate content in search](https://discuss.elastic.co/t/prevent-duplicate-content-in-search/138535)

<div class="topic-metadata">

**Author:** [@Yurii](https://discuss.elastic.co/u/Yurii)\
**Replies:** 1\
**Last updated:** [July 7, 2018, 9:06am UTC](https://discuss.elastic.co/t/prevent-duplicate-content-in-search/138535 "2018-07-07T09:06:33Z")

</div>

Hey! I faced a problem when I tried to get a related post. There are few posts which are identical to each other or very similar. So when I try to get the related posts there some cases when in a related post are f…

---

## [\[DEBUG\]\[o.e.a.s.TransportSearchAction\] \[myhost\] All shards failed for phase: \[query\]](https://discuss.elastic.co/t/debug-o-e-a-s-transportsearchaction-myhost-all-shards-failed-for-phase-query/137351)

<div class="topic-metadata">

**Author:** [@Watch\_out](https://discuss.elastic.co/u/Watch_out)\
**Replies:** 21\
**Last updated:** [July 7, 2018, 8:21am UTC](https://discuss.elastic.co/t/debug-o-e-a-s-transportsearchaction-myhost-all-shards-failed-for-phase-query/137351 "2018-07-07T08:21:43Z")

</div>

ELK version 6.2.4 Filebeat version 6.2.4 My entire ELK stack were working fine till 1.35 A IST as of 06/26/2018 Suddenly i can't see any logs in kibana from June-26-2018 1:40 AM IST onwards. When i open kibana it sho…

---

## [Custom ukrainian analyzer](https://discuss.elastic.co/t/custom-ukrainian-analyzer/135635)

<div class="topic-metadata">

**Author:** [@cbley](https://discuss.elastic.co/u/cbley)\
**Replies:** 1\
**Last updated:** [July 7, 2018, 7:43am UTC](https://discuss.elastic.co/t/custom-ukrainian-analyzer/135635 "2018-07-07T07:43:45Z")

</div>

Hi. I am trying to use the analyzer from the Ukrainian Analysis plugin with Elasticsearch 6.0.1. I cannot figure out how to integrate it with my html\_strip and word\_delimiter filters. { "settings": { "analysis":…

---

## [Deploy Elastic Search cluster consisting of multiple hosts using ES docker image](https://discuss.elastic.co/t/deploy-elastic-search-cluster-consisting-of-multiple-hosts-using-es-docker-image/138944)

<div class="topic-metadata">

**Author:** [@Akhil90](https://discuss.elastic.co/u/Akhil90)\
**Replies:** 1\
**Last updated:** [July 7, 2018, 7:31am UTC](https://discuss.elastic.co/t/deploy-elastic-search-cluster-consisting-of-multiple-hosts-using-es-docker-image/138944 "2018-07-07T07:31:47Z")

</div>

I want to deploy ES cluster consisting of different hosts using ES docker image. i am running below docker-compose file on each node. On each of the node, ES gets started. But when I access http://host:port/\_cluster/he…

---

## [Numbers with commas and time field problem!](https://discuss.elastic.co/t/numbers-with-commas-and-time-field-problem/138755)

<div class="topic-metadata">

**Author:** [@Marko\_Kevin\_Grilc](https://discuss.elastic.co/u/Marko_Kevin_Grilc)\
**Replies:** 4\
**Last updated:** [July 7, 2018, 7:08am UTC](https://discuss.elastic.co/t/numbers-with-commas-and-time-field-problem/138755 "2018-07-07T07:08:53Z")

</div>

Hi there, Is it possible to use, or better to say, parse numbers that are float numbers but with comma. Elastic wont allow me to parse average scores that contain , insted of . I tried to adjust it in Advanced settings,…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1624)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1626)
