# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1644

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1645

---

## [Joining two documents into one single document in Elastic 6.3?](https://discuss.elastic.co/t/joining-two-documents-into-one-single-document-in-elastic-6-3/136568)

<div class="topic-metadata">

**Author:** [@Suryatejreddy](https://discuss.elastic.co/u/Suryatejreddy)\
**Replies:** 3\
**Last updated:** [June 21, 2018, 2:31pm UTC](https://discuss.elastic.co/t/joining-two-documents-into-one-single-document-in-elastic-6-3/136568 "2018-06-21T14:31:50Z")

</div>

Can we join two documents into one single document(nested) in Elastic 6.3? Like.. I have student and department as two documents. Can I add department document as a nested array in student document into some other inde…

---

## [Find exact data when the type is text](https://discuss.elastic.co/t/find-exact-data-when-the-type-is-text/136559)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 8\
**Last updated:** [June 21, 2018, 2:27pm UTC](https://discuss.elastic.co/t/find-exact-data-when-the-type-is-text/136559 "2018-06-21T14:27:47Z")

</div>

I have a mapping using the type: text to store emails, can I search for documents that have a value exactly the same as what was written in the field of type text?

---

## [Security of the Elastic Cloud Hosted platform?](https://discuss.elastic.co/t/security-of-the-elastic-cloud-hosted-platform/136890)

<div class="topic-metadata">

**Author:** [@nilleb](https://discuss.elastic.co/u/nilleb)\
**Replies:** 0\
**Last updated:** [June 21, 2018, 1:49pm UTC](https://discuss.elastic.co/t/security-of-the-elastic-cloud-hosted-platform/136890 "2018-06-21T13:49:24Z")

</div>

Please, correct me if I am wrong. A Elastic Cloud deployment resides on the chosen cloud provider (may be GCP, Amazon, Azure). It belongs to a "project" that elastic.co owns (I am using a GCP term here, with which I am…

---

## [Create a dynamic dashboard](https://discuss.elastic.co/t/create-a-dynamic-dashboard/136885)

<div class="topic-metadata">

**Author:** [@Yeahmangood](https://discuss.elastic.co/u/Yeahmangood)\
**Replies:** 0\
**Last updated:** [June 21, 2018, 1:41pm UTC](https://discuss.elastic.co/t/create-a-dynamic-dashboard/136885 "2018-06-21T13:41:50Z")

</div>

Hello, I want to create a default dashboard with some visualization, to print stats about tweets. These tweets are collected by logstash in real time. But, I created a program who launch logstash automatically, with in…

---

## [Deploy ELK to Cloud with Cloud Foundry](https://discuss.elastic.co/t/deploy-elk-to-cloud-with-cloud-foundry/136862)

<div class="topic-metadata">

**Author:** [@hoongjun](https://discuss.elastic.co/u/hoongjun)\
**Replies:** 0\
**Last updated:** [June 21, 2018, 12:47pm UTC](https://discuss.elastic.co/t/deploy-elk-to-cloud-with-cloud-foundry/136862 "2018-06-21T12:47:58Z")

</div>

Is there any tutorial that can guide us on how to deploy the below app to the cloud? Kibana - http://localhost:5601/app/kibana# ElasticSearch- http://localhost:9200/ LogStash: http://localhost:9600/ Do we package the…

---

## [Read from Kibana index](https://discuss.elastic.co/t/read-from-kibana-index/136855)

<div class="topic-metadata">

**Author:** [@ravindardayachand](https://discuss.elastic.co/u/ravindardayachand)\
**Replies:** 0\
**Last updated:** [June 21, 2018, 12:34pm UTC](https://discuss.elastic.co/t/read-from-kibana-index/136855 "2018-06-21T12:34:52Z")

</div>

Currently, I have a field which is a map. I need to aggregate on the unique keys and the sum of its value. { "\_index": "inx-flow", "\_type": "default", "\_id": "acc4566-23456", "\_score": 0.0, "\_sou…

---

## [How to call fscrawler in an app web (python)?](https://discuss.elastic.co/t/how-to-call-fscrawler-in-an-app-web-python/134983)

<div class="topic-metadata">

**Author:** [@samy\_ouldali](https://discuss.elastic.co/u/samy_ouldali)\
**Replies:** 3\
**Last updated:** [June 21, 2018, 12:31pm UTC](https://discuss.elastic.co/t/how-to-call-fscrawler-in-an-app-web-python/134983 "2018-06-21T12:31:11Z")

</div>

Hello everybody, this is my first topic on this forum :slight\_smile: I would like if it was possible to use fscrawler on an app python. In fact, i created a simple interface to communicate with my ES cluster with flask,…

---

## [Results from GET indexname, "\_source" v "fields" sections](https://discuss.elastic.co/t/results-from-get-indexname-source-v-fields-sections/136850)

<div class="topic-metadata">

**Author:** [@JimP](https://discuss.elastic.co/u/JimP)\
**Replies:** 0\
**Last updated:** [June 21, 2018, 12:31pm UTC](https://discuss.elastic.co/t/results-from-get-indexname-source-v-fields-sections/136850 "2018-06-21T12:31:05Z")

</div>

Can someone point me to the documentation about, or explain, the difference between the ' "\_source": ' section and the ' "fields": ' sections, please?

---

## [Scroll API for java api 2.3.5 Loss of data](https://discuss.elastic.co/t/scroll-api-for-java-api-2-3-5-loss-of-data/136793)

<div class="topic-metadata">

**Author:** [@Zhen\_Zhang](https://discuss.elastic.co/u/Zhen_Zhang)\
**Replies:** 0\
**Last updated:** [June 21, 2018, 6:50am UTC](https://discuss.elastic.co/t/scroll-api-for-java-api-2-3-5-loss-of-data/136793 "2018-06-21T06:50:22Z")

</div>

Hi ! I am practicing with the java api，When I use scroll to get the data, I get an error that causes I can't get all the data \*\*log:\*\* \[2018-06-21 11:30:21,059\]\[DEBUG\]\[action.search \] \[Kiwi Black\] \[15\] Fail…

---

## [Restarting many nodes](https://discuss.elastic.co/t/restarting-many-nodes/136829)

<div class="topic-metadata">

**Author:** [@Peter\_Tudt](https://discuss.elastic.co/u/Peter_Tudt)\
**Replies:** 2\
**Last updated:** [June 21, 2018, 12:13pm UTC](https://discuss.elastic.co/t/restarting-many-nodes/136829 "2018-06-21T12:13:19Z")

</div>

Hi team, my first post here :slight\_smile: Working as Sys Admin = do everything The scenario: ES 5.6.0 6 data nodes Adding 3 master nodes and 2 client nodes (coordinating nodes). shards size up to 130 GB and cluste…

---

## [Re-mapping field type from date to text](https://discuss.elastic.co/t/re-mapping-field-type-from-date-to-text/136837)

<div class="topic-metadata">

**Author:** [@vicpav](https://discuss.elastic.co/u/vicpav)\
**Replies:** 1\
**Last updated:** [June 21, 2018, 11:56am UTC](https://discuss.elastic.co/t/re-mapping-field-type-from-date-to-text/136837 "2018-06-21T11:56:43Z")

</div>

Hi, Due to the changes in our application logging, one of the JSON fieldslevel1.level2.level3.version has changed its format from date-like "2018-05-23" to URL+date format like "https://CDN.server.com/template#2018-06-2…

---

## [Unable to set number\_of\_replicas with Puppet ES module](https://discuss.elastic.co/t/unable-to-set-number-of-replicas-with-puppet-es-module/136274)

<div class="topic-metadata">

**Author:** [@Alex\_Harvey](https://discuss.elastic.co/u/Alex_Harvey)\
**Replies:** 2\
**Last updated:** [June 21, 2018, 11:47am UTC](https://discuss.elastic.co/t/unable-to-set-number-of-replicas-with-puppet-es-module/136274 "2018-06-21T11:47:39Z")

</div>

I am trying to build a single-node Elasticsearch 6.3 cluster using the puppet-elasticsearch module. In the past this worked fine when I declared: elasticsearch::instance { 'es01': config =\> { 'index.number…

---

## [Bigdata storage of data](https://discuss.elastic.co/t/bigdata-storage-of-data/136784)

<div class="topic-metadata">

**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\
**Replies:** 11\
**Last updated:** [June 21, 2018, 10:44am UTC](https://discuss.elastic.co/t/bigdata-storage-of-data/136784 "2018-06-21T10:44:48Z")

</div>

Hi Team, Do we have any options to store the data in Bigdata platform in the case of large volume of data per day

---

## [Joining the results to another](https://discuss.elastic.co/t/joining-the-results-to-another/136800)

<div class="topic-metadata">

**Author:** [@akash9886](https://discuss.elastic.co/u/akash9886)\
**Replies:** 1\
**Last updated:** [June 21, 2018, 11:12am UTC](https://discuss.elastic.co/t/joining-the-results-to-another/136800 "2018-06-21T11:12:13Z")

</div>

My documents look like below, { "took": 22, "timed\_out": false, "\_shards": { "total": 1, "successful": 1, "failed": 0 }, "hits": { "total": 88096, "max\_score": 1, "hits": \[ { "\_index": "elasticray\_20155", …

---

## [Indexing stopped - shards unassigned](https://discuss.elastic.co/t/indexing-stopped-shards-unassigned/136818)

<div class="topic-metadata">

**Author:** [@jon\_uk](https://discuss.elastic.co/u/jon_uk)\
**Replies:** 6\
**Last updated:** [June 21, 2018, 10:39am UTC](https://discuss.elastic.co/t/indexing-stopped-shards-unassigned/136818 "2018-06-21T10:39:32Z")

</div>

Hi All, I'm experiencing difficulties with indexing. We are shipping logs to logstash which is trying to index them but we are seeing the errors as shown below. Has anybody seen this before? It was working fine, then a…

---

## [Indices problem](https://discuss.elastic.co/t/indices-problem/136813)

<div class="topic-metadata">

**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\
**Replies:** 20\
**Last updated:** [June 21, 2018, 10:30am UTC](https://discuss.elastic.co/t/indices-problem/136813 "2018-06-21T10:30:50Z")

</div>

Hi, I think I made a mistake, curator wouldn't work and I went to /elasticeasrch/nodes/0/indices and I deleste all indices !! :confused: Now I can't receive any logs :confused:

---

## [Where to check if a cluster is dumping backups in linux?](https://discuss.elastic.co/t/where-to-check-if-a-cluster-is-dumping-backups-in-linux/136676)

<div class="topic-metadata">

**Author:** [@elastico](https://discuss.elastic.co/u/elastico)\
**Replies:** 2\
**Last updated:** [June 21, 2018, 10:24am UTC](https://discuss.elastic.co/t/where-to-check-if-a-cluster-is-dumping-backups-in-linux/136676 "2018-06-21T10:24:58Z")

</div>

I am still learning ES and been given an ES cluster hosted on CentOS 6.5 machines to check if it's dumping a backup somewhere. I used the GET /\_snapshot/\_all api but get nothing back so no snapshots have been configured…

---

## [What are the actions performed when a visualization is created, saved, and integrated to a Kibana dashboard?](https://discuss.elastic.co/t/what-are-the-actions-performed-when-a-visualization-is-created-saved-and-integrated-to-a-kibana-dashboard/136824)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 0\
**Last updated:** [June 21, 2018, 10:21am UTC](https://discuss.elastic.co/t/what-are-the-actions-performed-when-a-visualization-is-created-saved-and-integrated-to-a-kibana-dashboard/136824 "2018-06-21T10:21:00Z")

</div>

Hi, I am using ELK GA 6.3.0. I understand that elasticsearch works on a set of cluster, indices, internal actions like; cluster:admin/ingest/pipeline/\* indices:admin/\* etc Somebody kindly tell me what are the actions…

---

## [Elasticsearch node going offline after installing x-pack in kibana](https://discuss.elastic.co/t/elasticsearch-node-going-offline-after-installing-x-pack-in-kibana/136789)

<div class="topic-metadata">

**Author:** [@Praneeth](https://discuss.elastic.co/u/Praneeth)\
**Replies:** 5\
**Last updated:** [June 21, 2018, 9:57am UTC](https://discuss.elastic.co/t/elasticsearch-node-going-offline-after-installing-x-pack-in-kibana/136789 "2018-06-21T09:57:15Z")

</div>

Hi, Elastic search version - 5.5.1 Kibana version - 5.5.1 x-pack version - 5.5.1 System: centos, Running in a VM System RAM: 3000MB Single core processor First, I have installed elastic search with x-pack(trail versi…

---

## [How to restore deleted index in ES which has no snapshot or backup](https://discuss.elastic.co/t/how-to-restore-deleted-index-in-es-which-has-no-snapshot-or-backup/136817)

<div class="topic-metadata">

**Author:** [@davis](https://discuss.elastic.co/u/davis)\
**Replies:** 1\
**Last updated:** [June 21, 2018, 9:51am UTC](https://discuss.elastic.co/t/how-to-restore-deleted-index-in-es-which-has-no-snapshot-or-backup/136817 "2018-06-21T09:51:01Z")

</div>

hi all... I deleted an index by mistake :cry: ... It was more than 150G data in '/var/lib/es/nodes/0/indices/MY\_INDEX/ '... and it is empty now! ...I don't have any snapshot or backup to restore it!!! And the data are s…

---

## [Un block shards un assigned](https://discuss.elastic.co/t/un-block-shards-un-assigned/136702)

<div class="topic-metadata">

**Author:** [@josselinchevalay](https://discuss.elastic.co/u/josselinchevalay)\
**Replies:** 2\
**Last updated:** [June 21, 2018, 9:13am UTC](https://discuss.elastic.co/t/un-block-shards-un-assigned/136702 "2018-06-21T09:13:28Z")

</div>

Hello all, topology our cluster : we use elasticsearch 6.2.2 OSS version we have 7 node : 1 master 6 data node Currently we have lost a node when we restart that we have a indice cannot assign 2 shards on 4 shards …

---

## [Query\_string - fuzzy - stemmer](https://discuss.elastic.co/t/query-string-fuzzy-stemmer/136804)

<div class="topic-metadata">

**Author:** [@Ben\_G](https://discuss.elastic.co/u/Ben_G)\
**Replies:** 0\
**Last updated:** [June 21, 2018, 8:51am UTC](https://discuss.elastic.co/t/query-string-fuzzy-stemmer/136804 "2018-06-21T08:51:37Z")

</div>

I have the english stemmer on an analyzer which is used on a field. when I search exact it works fine. when I add ~ it doesnt match anything. ie: This works { "size": 20, "query": { "query\_string": { "que…

---

## [Phrase suggester returns unexpected result when first letter is misspelled](https://discuss.elastic.co/t/phrase-suggester-returns-unexpected-result-when-first-letter-is-misspelled/136801)

<div class="topic-metadata">

**Author:** [@NarimanN2](https://discuss.elastic.co/u/NarimanN2)\
**Replies:** 0\
**Last updated:** [June 21, 2018, 8:40am UTC](https://discuss.elastic.co/t/phrase-suggester-returns-unexpected-result-when-first-letter-is-misspelled/136801 "2018-06-21T08:40:22Z")

</div>

I'm using Elasticsearch Phrase Suggester for correcting user's misspellings. everything is working as I expected unless user enters a query which it's first letter is misspelled. At this situation phrase suggester return…

---

## [Best Source for In-Depth Understanding of Indices and Shards](https://discuss.elastic.co/t/best-source-for-in-depth-understanding-of-indices-and-shards/136792)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 6\
**Last updated:** [June 21, 2018, 8:36am UTC](https://discuss.elastic.co/t/best-source-for-in-depth-understanding-of-indices-and-shards/136792 "2018-06-21T08:36:13Z")

</div>

Hello Team I'm very interested in understanding how shards are managed in elasticsearch. I mean I want to understand from basics to everything that we should know for designing and maintaining a elasctisearch cluster in…

---

## [How do I query for messages between two timestamps using the elasticsearch-dsl library?](https://discuss.elastic.co/t/how-do-i-query-for-messages-between-two-timestamps-using-the-elasticsearch-dsl-library/136278)

<div class="topic-metadata">

**Author:** [@exhuma](https://discuss.elastic.co/u/exhuma)\
**Replies:** 4\
**Last updated:** [June 21, 2018, 8:09am UTC](https://discuss.elastic.co/t/how-do-i-query-for-messages-between-two-timestamps-using-the-elasticsearch-dsl-library/136278 "2018-06-21T08:09:39Z")

</div>

I'm trying to run a simple query for messages that have a specific key using Python, but also limit the results between two timestamps. I managed to query for the existing key using the following: import sys from getpas…

---

## [Https Client Authentication Verify Hostname](https://discuss.elastic.co/t/https-client-authentication-verify-hostname/136697)

<div class="topic-metadata">

**Author:** [@Dietmar](https://discuss.elastic.co/u/Dietmar)\
**Replies:** 5\
**Last updated:** [June 21, 2018, 6:42am UTC](https://discuss.elastic.co/t/https-client-authentication-verify-hostname/136697 "2018-06-21T06:42:17Z")

</div>

Hallo , I have an https client to ES and using Self Signed Certificates with client authentication on. I am using PKI realm and have mapped the DN to a role. Things work fine for me. But, authentication the hostname of…

---

## [Find comparison result from multi value field](https://discuss.elastic.co/t/find-comparison-result-from-multi-value-field/136790)

<div class="topic-metadata">

**Author:** [@NewHere](https://discuss.elastic.co/u/NewHere)\
**Replies:** 0\
**Last updated:** [June 21, 2018, 6:29am UTC](https://discuss.elastic.co/t/find-comparison-result-from-multi-value-field/136790 "2018-06-21T06:29:17Z")

</div>

Hello, this is very difficult to me and would love to get some directions. Say I have a multi-value field "tags": \[ "elasticsearch", "elastic search" \], in the index, I have already separated it into multiple field types…

---

## [Why can't I upload index from csv file directly in required format?](https://discuss.elastic.co/t/why-cant-i-upload-index-from-csv-file-directly-in-required-format/136444)

<div class="topic-metadata">

**Author:** [@rs123](https://discuss.elastic.co/u/rs123)\
**Replies:** 4\
**Last updated:** [June 21, 2018, 6:26am UTC](https://discuss.elastic.co/t/why-cant-i-upload-index-from-csv-file-directly-in-required-format/136444 "2018-06-21T06:26:39Z")

</div>

I have a csv file which contains four columns(oNumber, oName, userids, userID) and value of first two columns I want to put in input and value of remaining two column's value I want to put in userid. Mapping: PUT somk…

---

## [RAID10 VS Replica 1](https://discuss.elastic.co/t/raid10-vs-replica-1/136774)

<div class="topic-metadata">

**Author:** [@jihun](https://discuss.elastic.co/u/jihun)\
**Replies:** 1\
**Last updated:** [June 21, 2018, 6:25am UTC](https://discuss.elastic.co/t/raid10-vs-replica-1/136774 "2018-06-21T06:25:23Z")

</div>

Hello. In case of I have 30TB storage(6 spinning 5TB disks with stripe(raid 0)) and 64GB RAM x 4 nodes, RAM is going insufficient but storage just used about 10%. Indices have no replica. To improve availability I ha…

---

## [Failed to execute pipeline for a bulk request](https://discuss.elastic.co/t/failed-to-execute-pipeline-for-a-bulk-request/136783)

<div class="topic-metadata">

**Author:** [@anuragh](https://discuss.elastic.co/u/anuragh)\
**Replies:** 1\
**Last updated:** [June 21, 2018, 5:42am UTC](https://discuss.elastic.co/t/failed-to-execute-pipeline-for-a-bulk-request/136783 "2018-06-21T05:42:05Z")

</div>

\[2018-06-21T00:00:09,645\]\[ERROR\]\[o.e.a.b.TransportBulkAction\] \[ddlplels105\] failed to execute pipeline for a bulk request org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execution of org.…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1643)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1645)
