# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1629

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1630

---

## [Question: How to write query elastic search?](https://discuss.elastic.co/t/question-how-to-write-query-elastic-search/138499)

<div class="topic-metadata">

**Author:** [@minhthuan274](https://discuss.elastic.co/u/minhthuan274)\
**Replies:** 2\
**Last updated:** [July 4, 2018, 10:44pm UTC](https://discuss.elastic.co/t/question-how-to-write-query-elastic-search/138499 "2018-07-04T22:44:20Z")

</div>

I have a index review like this { "\_index": "zody\_review", "\_type": "review", "\_id": "5b3c6c9e68cf860e1af5f7fd", "\_score": null, "\_source": { "user": "571899623dc63af34d…

---

## [Change mapping](https://discuss.elastic.co/t/change-mapping/138345)

<div class="topic-metadata">

**Author:** [@hgpit](https://discuss.elastic.co/u/hgpit)\
**Replies:** 5\
**Last updated:** [July 4, 2018, 8:03pm UTC](https://discuss.elastic.co/t/change-mapping/138345 "2018-07-04T20:03:17Z")

</div>

Hi, I am really struggling to edit my existing index, in order to exclude certain fields from being searchable. I've tried so many suggestions that I'm just about to go insane. My ES index is idx-wsa\_access\_logs and t…

---

## [Update by query, field.keyword doens't updated!](https://discuss.elastic.co/t/update-by-query-field-keyword-doenst-updated/138597)

<div class="topic-metadata">

**Author:** [@pedrotcm](https://discuss.elastic.co/u/pedrotcm)\
**Replies:** 0\
**Last updated:** [July 4, 2018, 4:47pm UTC](https://discuss.elastic.co/t/update-by-query-field-keyword-doenst-updated/138597 "2018-07-04T16:47:56Z")

</div>

I made an update by query and my field props.eventTypeTraduction, however the props.eventTypeTraductio.keyword with the old value still exists. If you execute a query with the old value it still keeps bringing the record…

---

## [Total field limit exceed even less field than limit added in index](https://discuss.elastic.co/t/total-field-limit-exceed-even-less-field-than-limit-added-in-index/138549)

<div class="topic-metadata">

**Author:** [@chelawatankit](https://discuss.elastic.co/u/chelawatankit)\
**Replies:** 5\
**Last updated:** [July 4, 2018, 3:45pm UTC](https://discuss.elastic.co/t/total-field-limit-exceed-even-less-field-than-limit-added-in-index/138549 "2018-07-04T15:45:20Z")

</div>

I have an error the the "limit of total fields \[55\] in index" has been exceeded. Currently in my index I have 42 fields. Now I try to add 3 more fields (all integer type) in mapping but I got total field limit exceed exc…

---

## [ElasticSearch Monitoring Failing](https://discuss.elastic.co/t/elasticsearch-monitoring-failing/138435)

<div class="topic-metadata">

**Author:** [@tebriel](https://discuss.elastic.co/u/tebriel)\
**Replies:** 3\
**Last updated:** [July 4, 2018, 3:24pm UTC](https://discuss.elastic.co/t/elasticsearch-monitoring-failing/138435 "2018-07-04T15:24:11Z")

</div>

Upgraded to 6.3.0, elasticsearch monitoring now fails, stack trace follows. I'm seeing occasional bursts of data showing up in Kibana 6.3.0, but it's got gaps in data. I tried increasing shards to 3 (from the 1 in the te…

---

## [Avoid monitoring-es-6 logs](https://discuss.elastic.co/t/avoid-monitoring-es-6-logs/138370)

<div class="topic-metadata">

**Author:** [@Praveena](https://discuss.elastic.co/u/Praveena)\
**Replies:** 3\
**Last updated:** [July 4, 2018, 1:56pm UTC](https://discuss.elastic.co/t/avoid-monitoring-es-6-logs/138370 "2018-07-04T13:56:43Z")

</div>

Hi, I'm using platinum license-xpack. I want to delete the following log, which I got for GET \_cat/indices after 5 days. --green open .monitoring-es-6-2018.07.02 763TW3n4TZmzsNuME-Tu0g 1 0 56676 80 25mb 25m…

---

## [Increase number of shards for system indices](https://discuss.elastic.co/t/increase-number-of-shards-for-system-indices/138388)

<div class="topic-metadata">

**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\
**Replies:** 9\
**Last updated:** [July 4, 2018, 1:38pm UTC](https://discuss.elastic.co/t/increase-number-of-shards-for-system-indices/138388 "2018-07-04T13:38:15Z")

</div>

Hi We have 3 data nodes where 1 is in datacenter A and 2 are in datacenter B. We tried testing the failover resiliency of our cluster which resulted in kibana completely unable to do anything and a red cluster. I notice…

---

## [Unable to get value from nested field](https://discuss.elastic.co/t/unable-to-get-value-from-nested-field/138563)

<div class="topic-metadata">

**Author:** [@bruno\_z](https://discuss.elastic.co/u/bruno_z)\
**Replies:** 0\
**Last updated:** [July 4, 2018, 1:12pm UTC](https://discuss.elastic.co/t/unable-to-get-value-from-nested-field/138563 "2018-07-04T13:12:29Z")

</div>

I have the following mapping: { "products": { "mappings": { "product": { "properties": { "search\_data": { "type": "nested", "properties": { "sku\_master…

---

## [Search within 10 million records with random page selection](https://discuss.elastic.co/t/search-within-10-million-records-with-random-page-selection/138562)

<div class="topic-metadata">

**Author:** [@satyaveer1](https://discuss.elastic.co/u/satyaveer1)\
**Replies:** 0\
**Last updated:** [July 4, 2018, 1:12pm UTC](https://discuss.elastic.co/t/search-within-10-million-records-with-random-page-selection/138562 "2018-07-04T13:12:13Z")

</div>

I'm making an app, where I need to search through an index with 10 million records, and be able to randomly able to display them as pages of lets say 100 records each. I also need to support random jump between various …

---

## [Relevance Score calculation](https://discuss.elastic.co/t/relevance-score-calculation/138561)

<div class="topic-metadata">

**Author:** [@Dharmateja\_Tummala](https://discuss.elastic.co/u/Dharmateja_Tummala)\
**Replies:** 0\
**Last updated:** [July 4, 2018, 1:09pm UTC](https://discuss.elastic.co/t/relevance-score-calculation/138561 "2018-07-04T13:09:44Z")

</div>

Hi, Am new to elastic search and am trying to use EXPLAIN API in elastic search(6.2.4).But am unable to understand terminology used there in calculation TF IDF. Can you please explain me terms doc\_count and doc\_freq. B…

---

## [How to create dynamic search suggestions?](https://discuss.elastic.co/t/how-to-create-dynamic-search-suggestions/138311)

<div class="topic-metadata">

**Author:** [@rs123](https://discuss.elastic.co/u/rs123)\
**Replies:** 1\
**Last updated:** [July 4, 2018, 12:47pm UTC](https://discuss.elastic.co/t/how-to-create-dynamic-search-suggestions/138311 "2018-07-04T12:47:10Z")

</div>

I want to show suggestion while searching. For example sentence could be like "profit of NK Store in jan compared to feb". If someone types "profit of N", I want to show every store name starting with N or every product …

---

## [Some fields miss getting appended by ".keyword" when you see them on Kibana after parsing it through logstash](https://discuss.elastic.co/t/some-fields-miss-getting-appended-by-keyword-when-you-see-them-on-kibana-after-parsing-it-through-logstash/138477)

<div class="topic-metadata">

**Author:** [@Pooja](https://discuss.elastic.co/u/Pooja)\
**Replies:** 3\
**Last updated:** [July 4, 2018, 12:29pm UTC](https://discuss.elastic.co/t/some-fields-miss-getting-appended-by-keyword-when-you-see-them-on-kibana-after-parsing-it-through-logstash/138477 "2018-07-04T12:29:52Z")

</div>

parsed fields: { "lastModifiedDate" =\> nil, "credentials" =\> nil, "thumbprint" =\> nil, "certificate" =\> nil, "messageId" =\> "123", "errorInfo" =\> nil, "serviceName" =\> "CCMSService.GET\_RUDI", "transactionId" =\> …

---

## [Retrying individual bulk actions that failed or were rejected by the previous bulk request](https://discuss.elastic.co/t/retrying-individual-bulk-actions-that-failed-or-were-rejected-by-the-previous-bulk-request/138419)

<div class="topic-metadata">

**Author:** [@m\_5amy](https://discuss.elastic.co/u/m_5amy)\
**Replies:** 13\
**Last updated:** [July 4, 2018, 11:47am UTC](https://discuss.elastic.co/t/retrying-individual-bulk-actions-that-failed-or-were-rejected-by-the-previous-bulk-request/138419 "2018-07-04T11:47:28Z")

</div>

Hi all, logstash logs return this error retrying failed action with response code: 403 ({"type"=\>"cluster\_block\_exception", "reason"=\>"blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\]; what should i do …

---

## [Tuning for Elasticsearch highlight performance](https://discuss.elastic.co/t/tuning-for-elasticsearch-highlight-performance/138543)

<div class="topic-metadata">

**Author:** [@ShilpiRachna](https://discuss.elastic.co/u/ShilpiRachna)\
**Replies:** 0\
**Last updated:** [July 4, 2018, 11:08am UTC](https://discuss.elastic.co/t/tuning-for-elasticsearch-highlight-performance/138543 "2018-07-04T11:08:51Z")

</div>

Hi, We are currently on Elasticsearch version 5.4.1. We do search across ~30 fields and have highlighting for 12 of those. We are using Unified highlighter (with offsets). We have repeatedly seen that the bulk of query…

---

## [Elasticsearch response code 500 class\_cast\_exception](https://discuss.elastic.co/t/elasticsearch-response-code-500-class-cast-exception/138523)

<div class="topic-metadata">

**Author:** [@filipe.ferreira](https://discuss.elastic.co/u/filipe.ferreira)\
**Replies:** 1\
**Last updated:** [July 4, 2018, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-response-code-500-class-cast-exception/138523 "2018-07-04T10:23:34Z")

</div>

We are having the following error on our ELK5 Stack: \[2018-07-04T09:25:24,747\]\[INFO \]\[logstash.outputs.elasticsearch\] retrying failed action with response code: 500 ({"type"=\>"class\_cast\_exception", "reason"=\>"class\_cas…

---

## [Can't get node info case by SecurityException](https://discuss.elastic.co/t/cant-get-node-info-case-by-securityexception/138533)

<div class="topic-metadata">

**Author:** [@laigood](https://discuss.elastic.co/u/laigood)\
**Replies:** 0\
**Last updated:** [July 4, 2018, 10:21am UTC](https://discuss.elastic.co/t/cant-get-node-info-case-by-securityexception/138533 "2018-07-04T10:21:37Z")

</div>

I use es 6.2.2,and today i find can't get node info in cerebro console,i manual use get \_nodes/stats api it return { "type": "failed\_node\_exception", "reason": "Failed node \[b4ZDMPrWQ5WBJkdmap5rtw\]", "caused\_by": { …

---

## [Produce results basend on a comparison between buckets of an aggregation](https://discuss.elastic.co/t/produce-results-basend-on-a-comparison-between-buckets-of-an-aggregation/138529)

<div class="topic-metadata">

**Author:** [@ly\_maur](https://discuss.elastic.co/u/ly_maur)\
**Replies:** 0\
**Last updated:** [July 4, 2018, 10:09am UTC](https://discuss.elastic.co/t/produce-results-basend-on-a-comparison-between-buckets-of-an-aggregation/138529 "2018-07-04T10:09:41Z")

</div>

Hey there, we want to track the inventory of our products with Elasticsearch and Kibana and are building a prototype for that. I am struggeling to build a query for this use case: - We want to see how many (and which)…

---

## [Copy\_to termvectors is empty](https://discuss.elastic.co/t/copy-to-termvectors-is-empty/138528)

<div class="topic-metadata">

**Author:** [@vgindin](https://discuss.elastic.co/u/vgindin)\
**Replies:** 0\
**Last updated:** [July 4, 2018, 10:06am UTC](https://discuss.elastic.co/t/copy-to-termvectors-is-empty/138528 "2018-07-04T10:06:46Z")

</div>

Hi, I have an index with special field "all", containing the text of some others using "copy\_to" mechanism. The term vectors are not copied. When I query: GET my\_index/test/\_mtermvectors { "ids" : \["2802699", "3102451…

---

## [Listing list of indices in ES php api](https://discuss.elastic.co/t/listing-list-of-indices-in-es-php-api/138522)

<div class="topic-metadata">

**Author:** [@Jouad\_Mohammed](https://discuss.elastic.co/u/Jouad_Mohammed)\
**Replies:** 0\
**Last updated:** [July 4, 2018, 9:45am UTC](https://discuss.elastic.co/t/listing-list-of-indices-in-es-php-api/138522 "2018-07-04T09:45:33Z")

</div>

Hi I am using ES php api 6.2. I want to list my list of indices and do a multi match on each index. Can you explain me how i can list them i am using $this-\>client-\>indices()-\>getMapping($params); i think it's not wo…

---

## [No 'Access-Control-Allow-Origin' header is present on the requested resource](https://discuss.elastic.co/t/no-access-control-allow-origin-header-is-present-on-the-requested-resource/138372)

<div class="topic-metadata">

**Author:** [@rs123](https://discuss.elastic.co/u/rs123)\
**Replies:** 4\
**Last updated:** [July 4, 2018, 8:16am UTC](https://discuss.elastic.co/t/no-access-control-allow-origin-header-is-present-on-the-requested-resource/138372 "2018-07-04T08:16:48Z")

</div>

Even though I have provided CORS configuration in elasticsearch.yml file as: http.cors.enabled: true http.cors.allow-origin: "\*" But still I'm getting this error Failed to load http://localhost:9200/user/\_search?pr…

---

## [Current license is non-compliant for \[security\]](https://discuss.elastic.co/t/current-license-is-non-compliant-for-security/137272)

<div class="topic-metadata">

**Author:** [@stevizik](https://discuss.elastic.co/u/stevizik)\
**Replies:** 3\
**Last updated:** [July 4, 2018, 7:54am UTC](https://discuss.elastic.co/t/current-license-is-non-compliant-for-security/137272 "2018-07-04T07:54:45Z")

</div>

Hi all, i have a test Elasticsearch/Kibana installation and on Console giving the command cluster/health returns the following { "error": { "root\_cause": \[ { "type": "security\_exception", "r…

---

## [Error when returning big data set](https://discuss.elastic.co/t/error-when-returning-big-data-set/138504)

<div class="topic-metadata">

**Author:** [@Srini12](https://discuss.elastic.co/u/Srini12)\
**Replies:** 0\
**Last updated:** [July 4, 2018, 7:51am UTC](https://discuss.elastic.co/t/error-when-returning-big-data-set/138504 "2018-07-04T07:51:04Z")

</div>

Good day, We have elastic documents in Linux Vm configured with Ngnix Settings. When querying the client side we getting error for large data sets, for small once it is fine. Advance thanks any comments and help recei…

---

## [Create n register repository for snapshots in elasticsearch](https://discuss.elastic.co/t/create-n-register-repository-for-snapshots-in-elasticsearch/138491)

<div class="topic-metadata">

**Author:** [@roshni](https://discuss.elastic.co/u/roshni)\
**Replies:** 4\
**Last updated:** [July 4, 2018, 7:23am UTC](https://discuss.elastic.co/t/create-n-register-repository-for-snapshots-in-elasticsearch/138491 "2018-07-04T07:23:27Z")

</div>

Hi I have successfully created a repository for snapshots - { "my\_fs\_backup" : { "type" : "fs", "settings" : { "compress" : "true", "chunk\_size" : "10m", "location" : "/mount/backups/my\_backup" } } } While c…

---

## [Bootstrap checks failed while upgrading 5.6 to 6.3](https://discuss.elastic.co/t/bootstrap-checks-failed-while-upgrading-5-6-to-6-3/138363)

<div class="topic-metadata">

**Author:** [@lochanm](https://discuss.elastic.co/u/lochanm)\
**Replies:** 5\
**Last updated:** [July 4, 2018, 7:14am UTC](https://discuss.elastic.co/t/bootstrap-checks-failed-while-upgrading-5-6-to-6-3/138363 "2018-07-04T07:14:19Z")

</div>

Hello, I am upgrading ES cluster from version 5.6 to 6.3 and facing the below issue. I tried to set up everything as per recommendation but still getting below error. Can someone please help with that? \[2018-07-03T11:05…

---

## [Cluster with different verions](https://discuss.elastic.co/t/cluster-with-different-verions/138386)

<div class="topic-metadata">

**Author:** [@Mesmer](https://discuss.elastic.co/u/Mesmer)\
**Replies:** 3\
**Last updated:** [July 4, 2018, 6:49am UTC](https://discuss.elastic.co/t/cluster-with-different-verions/138386 "2018-07-04T06:49:28Z")

</div>

Hello, We have a running two node Elasticsearch cluster running v 1.7 that sadly we cannot upgrade :frowning: Is it possible to add an Elasticsearch v.6.3 to the cluster so that all data is replicated one way from the …

---

## [Display real time status of jobs](https://discuss.elastic.co/t/display-real-time-status-of-jobs/138375)

<div class="topic-metadata">

**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\
**Replies:** 2\
**Last updated:** [July 4, 2018, 6:16am UTC](https://discuss.elastic.co/t/display-real-time-status-of-jobs/138375 "2018-07-04T06:16:15Z")

</div>

I am using Elk to display status of jobs. I am connecting to oracle and displaying in kibana. For the first time I am doing select \* and indexing to ES. Now I want job status to change as they change in backend. Also the…

---

## [Indexing from a query with script](https://discuss.elastic.co/t/indexing-from-a-query-with-script/138437)

<div class="topic-metadata">

**Author:** [@juanaramis](https://discuss.elastic.co/u/juanaramis)\
**Replies:** 3\
**Last updated:** [July 4, 2018, 5:11am UTC](https://discuss.elastic.co/t/indexing-from-a-query-with-script/138437 "2018-07-04T05:11:20Z")

</div>

Hi there, Is there a way to populate an index with the results of a query? I guess yes, but can I apply a script before putting the data in the destination index? Thanks in advance J.

---

## [Elasticsearch receives data error with escape characters](https://discuss.elastic.co/t/elasticsearch-receives-data-error-with-escape-characters/138134)

<div class="topic-metadata">

**Author:** [@sun\_changlong](https://discuss.elastic.co/u/sun_changlong)\
**Replies:** 13\
**Last updated:** [July 4, 2018, 5:03am UTC](https://discuss.elastic.co/t/elasticsearch-receives-data-error-with-escape-characters/138134 "2018-07-04T05:03:12Z")

</div>

The data is sent to elasticsearch via logstash, the data contains escape characters, and the elasticsearc error after receiving the data: This is the data sent by logstash, { "message" =\> "id="ngtos" version="1.0" t…

---

## [Error elasticsearch encountered a retryable error. Will Retry with exponential backoff code 400](https://discuss.elastic.co/t/error-elasticsearch-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400/138267)

<div class="topic-metadata">

**Author:** [@databeata](https://discuss.elastic.co/u/databeata)\
**Replies:** 1\
**Last updated:** [July 4, 2018, 5:02am UTC](https://discuss.elastic.co/t/error-elasticsearch-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400/138267 "2018-07-04T05:02:07Z")

</div>

\[ERROR\] 2018-07-02 16:23:20.482 \[\[main\]\>worker5\] elasticsearch - Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"http://ip:9200/\_bulk"} logstash 6.0.0, elasticsearch 6.0.0 I incr…

---

## [Nested commontermsquery with bool Search](https://discuss.elastic.co/t/nested-commontermsquery-with-bool-search/137360)

<div class="topic-metadata">

**Author:** [@satyarajp](https://discuss.elastic.co/u/satyarajp)\
**Replies:** 1\
**Last updated:** [July 4, 2018, 4:22am UTC](https://discuss.elastic.co/t/nested-commontermsquery-with-bool-search/137360 "2018-07-04T04:22:33Z")

</div>

I'm trying to improve my search query to effectively work with stop words. Here is the nested query I'm trying to work with, but this results in not so proper search results. I need help with Is this query valid , …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1628)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1630)
