# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1647 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1648 --- ## [What happens if coordinates are stored lat,lon instead of lon,lat?](https://discuss.elastic.co/t/what-happens-if-coordinates-are-stored-lat-lon-instead-of-lon-lat/135423)
**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\ **Replies:** 2\ **Last updated:** [June 19, 2018, 7:03pm UTC](https://discuss.elastic.co/t/what-happens-if-coordinates-are-stored-lat-lon-instead-of-lon-lat/135423 "2018-06-19T19:03:35Z")
I have a big index in which i have used geo\_point and geo\_shape (of type lineString). The way i have stored coordinates in both above field is (lat,lon) and not (lon,lat as per documentation). My distance queries work … --- ## [Need the Grok patter](https://discuss.elastic.co/t/need-the-grok-patter/136557)
**Author:** [@satish161418](https://discuss.elastic.co/u/satish161418)\ **Replies:** 0\ **Last updated:** [June 19, 2018, 6:58pm UTC](https://discuss.elastic.co/t/need-the-grok-patter/136557 "2018-06-19T18:58:30Z")
Error Message: Cross reference value is not found for the UPC- 35234308722 in the cache UPCWOCHKDGT for PSTNG\_DATE - 1180607##NA##NA##NA##NA##0fa31d40-461a-1b80-bdd4-ffffff70cf80##Administrator##null##null I wrote ; and… --- ## [What is the grok pattern for this](https://discuss.elastic.co/t/what-is-the-grok-pattern-for-this/136541)
**Author:** [@satish161418](https://discuss.elastic.co/u/satish161418)\ **Replies:** 3\ **Last updated:** [June 19, 2018, 6:30pm UTC](https://discuss.elastic.co/t/what-is-the-grok-pattern-for-this/136541 "2018-06-19T18:30:20Z")
ERROR CODE : -1ERROR MESSAGE : Flow ExceptionERROR : \[FFP.0012.0004\] Found no valid records. I need the output like "ERROR\_CODE": \[ \[ "ERROR CODE" :-1 \] \] "ERROR\_MESSAGE": \[ \[ "ERROR MESSAGE" : Flow Excep… --- ## [Array Activity](https://discuss.elastic.co/t/array-activity/136546)
**Author:** [@mrbarret](https://discuss.elastic.co/u/mrbarret)\ **Replies:** 0\ **Last updated:** [June 19, 2018, 5:33pm UTC](https://discuss.elastic.co/t/array-activity/136546 "2018-06-19T17:33:35Z")
I would like to have an array of strings in an Elastic Search index. Suppose the array is a list of my recent restaurant choices. Each time I go to a new restaurant I add this to my list. I also would like to be able to … --- ## [Update or remove element in an array of objects](https://discuss.elastic.co/t/update-or-remove-element-in-an-array-of-objects/136548)
**Author:** [@jacktuck](https://discuss.elastic.co/u/jacktuck)\ **Replies:** 0\ **Last updated:** [June 19, 2018, 6:01pm UTC](https://discuss.elastic.co/t/update-or-remove-element-in-an-array-of-objects/136548 "2018-06-19T18:01:38Z")
My script fails with this error {"type":"class\_cast\_exception","reason":"java.util.LinkedHashMap cannot be cast to java.lang.Number"}}}}} ,"errors":true,"items":\[{"update":{"\_index":"user","\_type":"user","\_id":"59706ad… --- ## [What is Query-time and index-time?](https://discuss.elastic.co/t/what-is-query-time-and-index-time/136503)
**Author:** [@Eswar\_123](https://discuss.elastic.co/u/Eswar_123)\ **Replies:** 3\ **Last updated:** [June 19, 2018, 4:23pm UTC](https://discuss.elastic.co/t/what-is-query-time-and-index-time/136503 "2018-06-19T16:23:33Z")
I was going through the Elastic search definitive guide where I came across query-time and index-time search-as-you-type topics. What do they actually mean? How do they differ from each other? --- ## [Move Elasticsearch from Virtual server on windows to Physical one on centos & Rolling Upgrades from 6.2 to 6.3](https://discuss.elastic.co/t/move-elasticsearch-from-virtual-server-on-windows-to-physical-one-on-centos-rolling-upgrades-from-6-2-to-6-3/136534)
**Author:** [@hmoz](https://discuss.elastic.co/u/hmoz)\ **Replies:** 0\ **Last updated:** [June 19, 2018, 4:12pm UTC](https://discuss.elastic.co/t/move-elasticsearch-from-virtual-server-on-windows-to-physical-one-on-centos-rolling-upgrades-from-6-2-to-6-3/136534 "2018-06-19T16:12:11Z")
Greetings All, Sorry if this topic has already been posted! We have Elasticsearch on a VM that runs on windows server 2012 and we want to migrate it to a physical one inwhich we will install Centos7. i've made some… --- ## [Newbie: Easiest way to view ES Results](https://discuss.elastic.co/t/newbie-easiest-way-to-view-es-results/134940)
**Author:** [@Dhiwakar\_Kusuma](https://discuss.elastic.co/u/Dhiwakar_Kusuma)\ **Replies:** 9\ **Last updated:** [June 19, 2018, 4:03pm UTC](https://discuss.elastic.co/t/newbie-easiest-way-to-view-es-results/134940 "2018-06-19T16:03:39Z")
Whats' the easiest way to view the ES Query results - I have '000s of documents in my index? Kibana console is making me feel tired :frowning: --- ## [Highlight in Elasticsearch 5.4](https://discuss.elastic.co/t/highlight-in-elasticsearch-5-4/136331)
**Author:** [@arpansahoo](https://discuss.elastic.co/u/arpansahoo)\ **Replies:** 4\ **Last updated:** [June 19, 2018, 3:56pm UTC](https://discuss.elastic.co/t/highlight-in-elasticsearch-5-4/136331 "2018-06-19T15:56:07Z")
How to highlight partial match in ES 5.4? Example- I have a FirstName field = "Jason" And i am quering as : "query": { "bool": { "should": \[ { "match": { "FirstName.Prefix": { "query": "Ja" } } } \] } } I … --- ## [Search results to contain only first element of an array field](https://discuss.elastic.co/t/search-results-to-contain-only-first-element-of-an-array-field/136525)
**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\ **Replies:** 1\ **Last updated:** [June 19, 2018, 3:35pm UTC](https://discuss.elastic.co/t/search-results-to-contain-only-first-element-of-an-array-field/136525 "2018-06-19T15:35:09Z")
Hi there. I want to limit the search result JSON, so that for a particular (nested) field — that is an array — only the first element (if one exists) is returned. I guess the \_source filtering doesn't support this. I tr… --- ## [Connection failed to Elasticsearch](https://discuss.elastic.co/t/connection-failed-to-elasticsearch/136328)
**Author:** [@oumeyma](https://discuss.elastic.co/u/oumeyma)\ **Replies:** 3\ **Last updated:** [June 19, 2018, 3:26pm UTC](https://discuss.elastic.co/t/connection-failed-to-elasticsearch/136328 "2018-06-19T15:26:36Z")
hi all, i have an error, can you help me Exception in thread "main" java.lang.NoClassDefFoundError: org/elasticsearch/index/IndexNotFoundException --- ## [Curator & Knowing when documents have been unIndexed](https://discuss.elastic.co/t/curator-knowing-when-documents-have-been-unindexed/136498)
**Author:** [@GazD](https://discuss.elastic.co/u/GazD)\ **Replies:** 6\ **Last updated:** [June 19, 2018, 2:53pm UTC](https://discuss.elastic.co/t/curator-knowing-when-documents-have-been-unindexed/136498 "2018-06-19T14:53:11Z")
Is there any way of being notified about this or any way to find out? --- ## [Searchs!](https://discuss.elastic.co/t/searchs/135995)
**Author:** [@cgermanb](https://discuss.elastic.co/u/cgermanb)\ **Replies:** 8\ **Last updated:** [June 19, 2018, 2:39pm UTC](https://discuss.elastic.co/t/searchs/135995 "2018-06-19T14:39:37Z")
Hi people, i have a elk working with the logs of a samba file server I want make graphics with unlink file but i have a lot of tmp files, i want filter this archives, i read a bit and only find placing "- " but nothing … --- ## [Companies and startups using elasticsearch 6.2.4 version](https://discuss.elastic.co/t/companies-and-startups-using-elasticsearch-6-2-4-version/136508)
**Author:** [@ravenrani1](https://discuss.elastic.co/u/ravenrani1)\ **Replies:** 0\ **Last updated:** [June 19, 2018, 2:21pm UTC](https://discuss.elastic.co/t/companies-and-startups-using-elasticsearch-6-2-4-version/136508 "2018-06-19T14:21:41Z")
Can anyone tell who is using elasticsearch 6.2.4 in production version ? --- ## [Best way to view large centrlized syslog(CentOS) using ELK docker images](https://discuss.elastic.co/t/best-way-to-view-large-centrlized-syslog-centos-using-elk-docker-images/135015)
**Author:** [@netvmdb](https://discuss.elastic.co/u/netvmdb)\ **Replies:** 2\ **Last updated:** [June 19, 2018, 2:18pm UTC](https://discuss.elastic.co/t/best-way-to-view-large-centrlized-syslog-centos-using-elk-docker-images/135015 "2018-06-19T14:18:12Z")
Hello, This is my first post. I have 10GB/day centralized syslog from CentOS systems. Log files can be accessed from local or NFS mount. Need at least two fields(timestamp and host) to filter logs. Total users are less … --- ## [On ES 6.2.4+ (v6.2.4,v6.3.0) file descriptors continue to grow as index grows](https://discuss.elastic.co/t/on-es-6-2-4-v6-2-4-v6-3-0-file-descriptors-continue-to-grow-as-index-grows/136392)
**Author:** [@gnilchee](https://discuss.elastic.co/u/gnilchee)\ **Replies:** 6\ **Last updated:** [June 19, 2018, 2:03pm UTC](https://discuss.elastic.co/t/on-es-6-2-4-v6-2-4-v6-3-0-file-descriptors-continue-to-grow-as-index-grows/136392 "2018-06-19T14:03:42Z")
We are moving from a very old version of ES 1.4.5 to a more modern version. For a majority of the effort we focused on ES 5.5.0 when rewriting the settings and mapping for our 4 indices. About a month ago we decided to m… --- ## [How to handle long running queries](https://discuss.elastic.co/t/how-to-handle-long-running-queries/136504)
**Author:** [@oats\_gal](https://discuss.elastic.co/u/oats_gal)\ **Replies:** 0\ **Last updated:** [June 19, 2018, 2:00pm UTC](https://discuss.elastic.co/t/how-to-handle-long-running-queries/136504 "2018-06-19T14:00:25Z")
I've found a few older posts regarding this, but not too much around long running queries on newer versions of Elasticsearch. Just a little background, I manage a 200+ node Elastic cluster for my company. We recently up… --- ## [Filter by nested](https://discuss.elastic.co/t/filter-by-nested/136501)
**Author:** [@huli0401](https://discuss.elastic.co/u/huli0401)\ **Replies:** 0\ **Last updated:** [June 19, 2018, 1:49pm UTC](https://discuss.elastic.co/t/filter-by-nested/136501 "2018-06-19T13:49:41Z")
Hi, I am trying to filter accomodations by date. mapping: {"\_doc":{"\_source":{"enabled":true},"properties":{"object":{"properties":{"id""{"type":"integer","coerce":false},"capacity":{"type":"integer","coerce":false},"… --- ## [Elastic search Delete API](https://discuss.elastic.co/t/elastic-search-delete-api/135144)
**Author:** [@Mohana01](https://discuss.elastic.co/u/Mohana01)\ **Replies:** 6\ **Last updated:** [June 19, 2018, 1:31pm UTC](https://discuss.elastic.co/t/elastic-search-delete-api/135144 "2018-06-19T13:31:12Z")
I am working on ELK development Project. When i try to delete the index am getting {acknowledged:true} But after sometime the deleted index is getting created automatically. Really not sure what is the cause of the pr… --- ## [Api php elasticsearch](https://discuss.elastic.co/t/api-php-elasticsearch/136499)
**Author:** [@Jouad\_Mohammed](https://discuss.elastic.co/u/Jouad_Mohammed)\ **Replies:** 0\ **Last updated:** [June 19, 2018, 1:26pm UTC](https://discuss.elastic.co/t/api-php-elasticsearch/136499 "2018-06-19T13:26:01Z")
HI After migrating my scripts from Es 2.4 to 6.2.1, i removed multi types as specified in the documentation; I had before 5 types, and now in my script php, how i can search by dropdown list (per types) ?????? I stru… --- ## [Elasticsearch multiple instances on single host](https://discuss.elastic.co/t/elasticsearch-multiple-instances-on-single-host/136491)
**Author:** [@Julian\_Daly](https://discuss.elastic.co/u/Julian_Daly)\ **Replies:** 0\ **Last updated:** [June 19, 2018, 12:35pm UTC](https://discuss.elastic.co/t/elasticsearch-multiple-instances-on-single-host/136491 "2018-06-19T12:35:55Z")
Hallo Is it possible after installing elasticsearch 5.6.9 through apt-get install that I can run 2 instances on one host ? ( The host has 96GB ram ) Or would it be better to install using by download and then command … --- ## [Curator: Error with forcemerge](https://discuss.elastic.co/t/curator-error-with-forcemerge/136476)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 2\ **Last updated:** [June 19, 2018, 12:30pm UTC](https://discuss.elastic.co/t/curator-error-with-forcemerge/136476 "2018-06-19T12:30:33Z")
Hi, I'm seeing the following error with running forcemerge from curator: { "@timestamp": "2018-06-19T07:14:14.643Z", "function": "run", "linenum": 184, "loglevel": "ERROR", "message": "Failed to complete action: f… --- ## [Different source filtering when searching accross multiple indices](https://discuss.elastic.co/t/different-source-filtering-when-searching-accross-multiple-indices/136487)
**Author:** [@ivar](https://discuss.elastic.co/u/ivar)\ **Replies:** 0\ **Last updated:** [June 19, 2018, 12:09pm UTC](https://discuss.elastic.co/t/different-source-filtering-when-searching-accross-multiple-indices/136487 "2018-06-19T12:09:54Z")
We are trying to query across multiple indices and using source , includes and excludes to get the required fields in the \_source is it possible to specify the includes and excludes per index i.e. different set of inc… --- ## [How to clone ES+Kibana instance i.e. place a copy next to the same initial instance](https://discuss.elastic.co/t/how-to-clone-es-kibana-instance-i-e-place-a-copy-next-to-the-same-initial-instance/136477)
**Author:** [@Mikhail](https://discuss.elastic.co/u/Mikhail)\ **Replies:** 1\ **Last updated:** [June 19, 2018, 12:02pm UTC](https://discuss.elastic.co/t/how-to-clone-es-kibana-instance-i-e-place-a-copy-next-to-the-same-initial-instance/136477 "2018-06-19T12:02:41Z")
I have successfully configured Logstash+ES+Kibana instance on my QA environment. And have successfully filled ES with data. Next, I want to get a copy of ES+Kibana to create a separate QA instance that would not be aff… --- ## [elasticSearch 6.2 Query inside parent\_id](https://discuss.elastic.co/t/elasticsearch-6-2-query-inside-parent-id/134025)
**Author:** [@neelam.mamtani](https://discuss.elastic.co/u/neelam.mamtani)\ **Replies:** 6\ **Last updated:** [June 19, 2018, 11:43am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-query-inside-parent-id/134025 "2018-06-19T11:43:50Z")
Can anyone help how can I specify query inside parent\_id query to filter out children who has match in their parent docs. For e.g. This is my parent // "JOIN\_FIELD": "group", "GROUP\_MEMBER": \[ "1", "2", "3", "4… --- ## [Is the join datatype appropriate for this scenario?](https://discuss.elastic.co/t/is-the-join-datatype-appropriate-for-this-scenario/136480)
**Author:** [@zeigernz](https://discuss.elastic.co/u/zeigernz)\ **Replies:** 0\ **Last updated:** [June 19, 2018, 11:33am UTC](https://discuss.elastic.co/t/is-the-join-datatype-appropriate-for-this-scenario/136480 "2018-06-19T11:33:47Z")
Hi, I am trying to model the following use case in elasticsearch and I wonder what you think about my use of the join datatype. There are many users in my system, let's say they are: UserA, UserB, UserC. They all belon… --- ## [Statu RED](https://discuss.elastic.co/t/statu-red/136445)
**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\ **Replies:** 1\ **Last updated:** [June 19, 2018, 10:11am UTC](https://discuss.elastic.co/t/statu-red/136445 "2018-06-19T10:11:46Z")
Hi, Please can someone help me with this ? \[root@frghcslnetv12 ~\]# curl -XGET 'http://localhost:9200/\_cluster/health?pretty=true' { "cluster\_name" : "my-application", "status" : "red", "timed\_out" : false, "num… --- ## [How to extract time from a time stamp?](https://discuss.elastic.co/t/how-to-extract-time-from-a-time-stamp/136463)
**Author:** [@vissa](https://discuss.elastic.co/u/vissa)\ **Replies:** 0\ **Last updated:** [June 19, 2018, 10:17am UTC](https://discuss.elastic.co/t/how-to-extract-time-from-a-time-stamp/136463 "2018-06-19T10:17:11Z")
I have 'start' and 'end' timestamps for a particular process. These time stamps contain data in "month date year hour minute second millisecond" format. I need to find the delta time between the start and end times. Ho… --- ## [How do I deploy my docker ELK stack including my dashboards to many linux servers?](https://discuss.elastic.co/t/how-do-i-deploy-my-docker-elk-stack-including-my-dashboards-to-many-linux-servers/136257)
**Author:** [@PhilippeCourtemanche](https://discuss.elastic.co/u/PhilippeCourtemanche)\ **Replies:** 1\ **Last updated:** [June 19, 2018, 10:05am UTC](https://discuss.elastic.co/t/how-do-i-deploy-my-docker-elk-stack-including-my-dashboards-to-many-linux-servers/136257 "2018-06-19T10:05:35Z")
Hi, I'm trying to deploy my docker ELK stack (with my dashboards) to many linux servers, but I want the process to be as automatic as possible. How do I do this? --- ## [Problem with search wrong result](https://discuss.elastic.co/t/problem-with-search-wrong-result/133904)
**Author:** [@rokadeaks](https://discuss.elastic.co/u/rokadeaks)\ **Replies:** 15\ **Last updated:** [June 19, 2018, 10:02am UTC](https://discuss.elastic.co/t/problem-with-search-wrong-result/133904 "2018-06-19T10:02:20Z")
I have mapping like : "382:FormattedValue": { "type": "string", "analyzer": "ExportRawAnalyzer", "ignore\_above": 10922 }, "382:Value": { "type": "stri… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1646) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1648)