# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1655

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1656

---

## [Curator question](https://discuss.elastic.co/t/curator-question/135663)

<div class="topic-metadata">

**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\
**Replies:** 4\
**Last updated:** [June 13, 2018, 10:26am UTC](https://discuss.elastic.co/t/curator-question/135663 "2018-06-13T10:26:54Z")

</div>

Please, do we have to setup a curator on all nodes of the cluster (each node is on a server) ?

---

## [Parent Child](https://discuss.elastic.co/t/parent-child/135666)

<div class="topic-metadata">

**Author:** [@Arya\_Saha](https://discuss.elastic.co/u/Arya_Saha)\
**Replies:** 5\
**Last updated:** [June 13, 2018, 10:20am UTC](https://discuss.elastic.co/t/parent-child/135666 "2018-06-13T10:20:20Z")

</div>

Say I have two indices like following (Say Parent) PUT dept?pretty POST dept/department/\_bulk {"index":{"\_id":"1"}} {"Dept\_ID":1,"Dept\_name":"Engineering"} {"index":{"\_id":"2"}} {"Dept\_ID":2,"Dept\_name":"Medical"} …

---

## [Term Query not fetching any data](https://discuss.elastic.co/t/term-query-not-fetching-any-data/135641)

<div class="topic-metadata">

**Author:** [@pradeep\_nair](https://discuss.elastic.co/u/pradeep_nair)\
**Replies:** 6\
**Last updated:** [June 13, 2018, 10:19am UTC](https://discuss.elastic.co/t/term-query-not-fetching-any-data/135641 "2018-06-13T10:19:04Z")

</div>

Hi , I referred the link "https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-term-query.html" and i am trying to fetch all documents based on some status. Mapping of the field I am searching for: …

---

## [Aggregation on fields within nested objects in elasticsearch](https://discuss.elastic.co/t/aggregation-on-fields-within-nested-objects-in-elasticsearch/135404)

<div class="topic-metadata">

**Author:** [@Tosh](https://discuss.elastic.co/u/Tosh)\
**Replies:** 5\
**Last updated:** [June 13, 2018, 9:53am UTC](https://discuss.elastic.co/t/aggregation-on-fields-within-nested-objects-in-elasticsearch/135404 "2018-06-13T09:53:25Z")

</div>

hi , I have two entries in nested object mapping as below : "itemslist": { "type": "nested", "properties": { "type": "object", "properties": { "itemname": { "type": "text" …

---

## [How many characters needed at least when query one word](https://discuss.elastic.co/t/how-many-characters-needed-at-least-when-query-one-word/135653)

<div class="topic-metadata">

**Author:** [@Anmao\_Zhang\_US\_Advis](https://discuss.elastic.co/u/Anmao_Zhang_US_Advis)\
**Replies:** 1\
**Last updated:** [June 13, 2018, 8:59am UTC](https://discuss.elastic.co/t/how-many-characters-needed-at-least-when-query-one-word/135653 "2018-06-13T08:59:29Z")

</div>

I want to search "Total Communications", no result found until i input 'Tota', or 'Total Communicatio'. so what's the principle for this query?

---

## [How to deal with date type properties in elasticsearch](https://discuss.elastic.co/t/how-to-deal-with-date-type-properties-in-elasticsearch/135327)

<div class="topic-metadata">

**Author:** [@SharmaPrakhar25](https://discuss.elastic.co/u/SharmaPrakhar25)\
**Replies:** 6\
**Last updated:** [June 13, 2018, 8:14am UTC](https://discuss.elastic.co/t/how-to-deal-with-date-type-properties-in-elasticsearch/135327 "2018-06-13T08:14:09Z")

</div>

I am very new to elasticsearch and implementing elasticsearch in php-laravel based API using elasticsearch-php client. I am saving 2 datetime fields (created\_on, modified\_on) from the sql db which I want to index in prob…

---

## [Context suggester with weights](https://discuss.elastic.co/t/context-suggester-with-weights/135143)

<div class="topic-metadata">

**Author:** [@rs123](https://discuss.elastic.co/u/rs123)\
**Replies:** 1\
**Last updated:** [June 13, 2018, 7:52am UTC](https://discuss.elastic.co/t/context-suggester-with-weights/135143 "2018-06-13T07:52:58Z")

</div>

I want to use context suggester with weights My Index: POST skg/\_doc/ { "suggest": { "input": \["san fisco","fisco"\], "contexts": { "useri…

---

## [Xpack free trial](https://discuss.elastic.co/t/xpack-free-trial/135634)

<div class="topic-metadata">

**Author:** [@pdombey](https://discuss.elastic.co/u/pdombey)\
**Replies:** 2\
**Last updated:** [June 13, 2018, 7:18am UTC](https://discuss.elastic.co/t/xpack-free-trial/135634 "2018-06-13T07:18:05Z")

</div>

Hi all, I wanted to explore benefits of x-pack and downloaded the trial version (5.6.9 like my ELK products). I'm not able to test a case where a user could only access a particular indice. The only thing that works is…

---

## [Transport Client + Connection Pool + TCP/IP Connection Leakages](https://discuss.elastic.co/t/transport-client-connection-pool-tcp-ip-connection-leakages/135636)

<div class="topic-metadata">

**Author:** [@Nakshathri](https://discuss.elastic.co/u/Nakshathri)\
**Replies:** 0\
**Last updated:** [June 13, 2018, 6:42am UTC](https://discuss.elastic.co/t/transport-client-connection-pool-tcp-ip-connection-leakages/135636 "2018-06-13T06:42:04Z")

</div>

Hello, We are using transport client for connecting to Elastic Search from our microservices; Off late we ran into issue of number of Open TCP/IP connections are growing with addition of Microservices. This is causing i…

---

## [ES cluster break after install x-pack](https://discuss.elastic.co/t/es-cluster-break-after-install-x-pack/135509)

<div class="topic-metadata">

**Author:** [@Vikrant\_Aggarwal](https://discuss.elastic.co/u/Vikrant_Aggarwal)\
**Replies:** 11\
**Last updated:** [June 13, 2018, 6:41am UTC](https://discuss.elastic.co/t/es-cluster-break-after-install-x-pack/135509 "2018-06-13T06:41:05Z")

</div>

I have created ES cluster on MAC laptop with 1 client, 3 master and 3 data nodes. $ cat multinode\_es.sh #!/bin/bash ### Client node $HOME/Documents/ELK/ELASTIC/clientnode/elasticsearch-6.2.4/bin/elasticsearch & ### M…

---

## [Substracting two datetime fields](https://discuss.elastic.co/t/substracting-two-datetime-fields/135619)

<div class="topic-metadata">

**Author:** [@Illidan](https://discuss.elastic.co/u/Illidan)\
**Replies:** 5\
**Last updated:** [June 13, 2018, 6:20am UTC](https://discuss.elastic.co/t/substracting-two-datetime-fields/135619 "2018-06-13T06:20:22Z")

</div>

This is a field in my document: "date\_found": "2018-04-23T22:17:46.6387919+03:00" My goal is to calculate some value from difference between two datetime fields (e.g. dt1 - dt2) I running a script to perform such oper…

---

## [Multiple indexes or 1 index](https://discuss.elastic.co/t/multiple-indexes-or-1-index/135622)

<div class="topic-metadata">

**Author:** [@dev01](https://discuss.elastic.co/u/dev01)\
**Replies:** 3\
**Last updated:** [June 13, 2018, 6:12am UTC](https://discuss.elastic.co/t/multiple-indexes-or-1-index/135622 "2018-06-13T06:12:11Z")

</div>

I am working on building a common index that can serve multiple applications. The use case is that I have a few relational tables (example: products, reviews, etc). This data needs to be served to multiple applications b…

---

## [Heap usage over time](https://discuss.elastic.co/t/heap-usage-over-time/135615)

<div class="topic-metadata">

**Author:** [@br14nb0](https://discuss.elastic.co/u/br14nb0)\
**Replies:** 1\
**Last updated:** [June 13, 2018, 5:20am UTC](https://discuss.elastic.co/t/heap-usage-over-time/135615 "2018-06-13T05:20:44Z")

</div>

What happened in that period of time which Heap usage decreased so much ? Thanks \[image\]

---

## [Elasticsearch Indices showing wrong date](https://discuss.elastic.co/t/elasticsearch-indices-showing-wrong-date/135492)

<div class="topic-metadata">

**Author:** [@Rocky\_RK](https://discuss.elastic.co/u/Rocky_RK)\
**Replies:** 7\
**Last updated:** [June 13, 2018, 4:28am UTC](https://discuss.elastic.co/t/elasticsearch-indices-showing-wrong-date/135492 "2018-06-13T04:28:24Z")

</div>

Hi , MY elastic indices showing wrong date why like yellow open syslog-2018.08.08 2ERImxJkQIOGw0qImjMPlw 5 1 37 0 401.8kb 401.8kb and secondly the status of my elastic shows yellow however its running good. its stand…

---

## [Wildcard search not working for text field](https://discuss.elastic.co/t/wildcard-search-not-working-for-text-field/135520)

<div class="topic-metadata">

**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\
**Replies:** 7\
**Last updated:** [June 13, 2018, 4:19am UTC](https://discuss.elastic.co/t/wildcard-search-not-working-for-text-field/135520 "2018-06-13T04:19:47Z")

</div>

Hi, I have a text field over which I am doing wildcard search. However it is not working as expected. Example: Field: log\_message Value: watchdog watchdog6: watchdog did not stop! If I use watchd\* or watchdog, it…

---

## [How can I analyze and split an incoming column to keywords](https://discuss.elastic.co/t/how-can-i-analyze-and-split-an-incoming-column-to-keywords/135308)

<div class="topic-metadata">

**Author:** [@hvarun](https://discuss.elastic.co/u/hvarun)\
**Replies:** 0\
**Last updated:** [June 11, 2018, 8:26am UTC](https://discuss.elastic.co/t/how-can-i-analyze-and-split-an-incoming-column-to-keywords/135308 "2018-06-11T08:26:58Z")

</div>

Hello, i am trying to analyze an index which contains a field id and messageanalyze having text data. when i try to get response from the below url, it returns tokens for the text parmeter and not the messageanalyze fi…

---

## [Curator delete\_indices](https://discuss.elastic.co/t/curator-delete-indices/135311)

<div class="topic-metadata">

**Author:** [@wuwenjie\_cn](https://discuss.elastic.co/u/wuwenjie_cn)\
**Replies:** 4\
**Last updated:** [June 13, 2018, 3:20am UTC](https://discuss.elastic.co/t/curator-delete-indices/135311 "2018-06-13T03:20:32Z")

</div>

I use curator to delete the index, and then execute the delete command(curator\_cli --host 172.17.91.21 --port 9200 delete\_indices --filter\_list '\[{"filtertype": "pattern", "kind": "timestring", " Value": "2018.06.11"}\]'),…

---

## [When to use Coordinating vs Data Node](https://discuss.elastic.co/t/when-to-use-coordinating-vs-data-node/134125)

<div class="topic-metadata">

**Author:** [@keithag](https://discuss.elastic.co/u/keithag)\
**Replies:** 5\
**Last updated:** [June 13, 2018, 1:43am UTC](https://discuss.elastic.co/t/when-to-use-coordinating-vs-data-node/134125 "2018-06-13T01:43:24Z")

</div>

As a matter of best practice, if I have an ideal configuration: Should queries be directed to coordinating nodes or data nodes? Should index writes/deletes/updates be directed to coordinating nodes or data nodes? Than…

---

## [Unmapped\_type for \_geo\_distance sorting](https://discuss.elastic.co/t/unmapped-type-for-geo-distance-sorting/135612)

<div class="topic-metadata">

**Author:** [@elastic\_matt](https://discuss.elastic.co/u/elastic_matt)\
**Replies:** 0\
**Last updated:** [June 13, 2018, 12:41am UTC](https://discuss.elastic.co/t/unmapped-type-for-geo-distance-sorting/135612 "2018-06-13T00:41:45Z")

</div>

I'm trying to sort by geo\_point, but I'm getting the following error: "reason":{"type":"query\_shard\_exception","reason":"failed to find geo\_point field \[city.location\]" The docs say: geo distance sorting does not sup…

---

## [Elasticsearch Issue I can't figure out (can't curl 9200)](https://discuss.elastic.co/t/elasticsearch-issue-i-cant-figure-out-cant-curl-9200/129816)

<div class="topic-metadata">

**Author:** [@crypto-99](https://discuss.elastic.co/u/crypto-99)\
**Replies:** 9\
**Last updated:** [June 12, 2018, 10:26pm UTC](https://discuss.elastic.co/t/elasticsearch-issue-i-cant-figure-out-cant-curl-9200/129816 "2018-06-12T22:26:59Z")

</div>

I made a thread on reddit and was recommended to make one here: https://www.reddit.com/r/elasticsearch/comments/8dvkx0/elasticsearch\_issue\_i\_cant\_figure\_out\_cant\_curl/ We have a really annoying issue that is effecting o…

---

## [Sorting Japanese words in Elastic Search](https://discuss.elastic.co/t/sorting-japanese-words-in-elastic-search/135606)

<div class="topic-metadata">

**Author:** [@Nazim](https://discuss.elastic.co/u/Nazim)\
**Replies:** 0\
**Last updated:** [June 12, 2018, 10:10pm UTC](https://discuss.elastic.co/t/sorting-japanese-words-in-elastic-search/135606 "2018-06-12T22:10:15Z")

</div>

Hi Team, Seems there is an issue with Sorting Japanese words in Elastic Search. If i have 2 words - 東京 (In English it is Tokyo) , 神奈川 (In English it is Kanagawa) sorting those words ascending and descending do not ret…

---

## [Difficulty Keeping Pace With Breaking Changes](https://discuss.elastic.co/t/difficulty-keeping-pace-with-breaking-changes/135598)

<div class="topic-metadata">

**Author:** [@bbrown](https://discuss.elastic.co/u/bbrown)\
**Replies:** 0\
**Last updated:** [June 12, 2018, 8:52pm UTC](https://discuss.elastic.co/t/difficulty-keeping-pace-with-breaking-changes/135598 "2018-06-12T20:52:14Z")

</div>

We are still using ES 1.7.5. We have an on-premises product used by let's just say more than a hundred, less than 10,000 customers. We were hoping to move our customers to a more current version of ES, but unfortunately…

---

## [Elasticsearch cluster with AWS ELB randomly disconnects from applications](https://discuss.elastic.co/t/elasticsearch-cluster-with-aws-elb-randomly-disconnects-from-applications/133217)

<div class="topic-metadata">

**Author:** [@mabidi](https://discuss.elastic.co/u/mabidi)\
**Replies:** 7\
**Last updated:** [June 12, 2018, 9:17pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-with-aws-elb-randomly-disconnects-from-applications/133217 "2018-06-12T21:17:36Z")

</div>

We have elasticsearch 5.5.3 cluster with an ELB to load balance the traffic to the cluster but every so often our search microservices that connect to the cluster via ELB FQDN (fully qualified domain name) throw this exc…

---

## [Scripted field to count occurence in string does not work](https://discuss.elastic.co/t/scripted-field-to-count-occurence-in-string-does-not-work/131826)

<div class="topic-metadata">

**Author:** [@Hendo\_Lim](https://discuss.elastic.co/u/Hendo_Lim)\
**Replies:** 2\
**Last updated:** [June 12, 2018, 9:01pm UTC](https://discuss.elastic.co/t/scripted-field-to-count-occurence-in-string-does-not-work/131826 "2018-06-12T21:01:29Z")

</div>

Hi, I am trying to create a scripted field on Kibana for counting the number occurrences of slash ('/') character inside a string field like so: doc\['my\_field.keyword'\]?.value?.count('/') But 'discover' page throws me …

---

## [\[failed to parse search source. unknown search element \[mappings\]\]](https://discuss.elastic.co/t/failed-to-parse-search-source-unknown-search-element-mappings/135595)

<div class="topic-metadata">

**Author:** [@silversun](https://discuss.elastic.co/u/silversun)\
**Replies:** 7\
**Last updated:** [June 12, 2018, 8:46pm UTC](https://discuss.elastic.co/t/failed-to-parse-search-source-unknown-search-element-mappings/135595 "2018-06-12T20:46:34Z")

</div>

Hi, I am trying to exclude a field from \_source and I am trying to run this curl command - curl -X POST "http://localhost:9200/appindex/appindex/\_search" -d '{ "mappings":{ "appindex":{ "\_source":{ …

---

## [Unable to use snapshots in elasticsearch 6.2.4](https://discuss.elastic.co/t/unable-to-use-snapshots-in-elasticsearch-6-2-4/135539)

<div class="topic-metadata">

**Author:** [@Ben\_Chaabene\_Wissem](https://discuss.elastic.co/u/Ben_Chaabene_Wissem)\
**Replies:** 1\
**Last updated:** [June 12, 2018, 8:45pm UTC](https://discuss.elastic.co/t/unable-to-use-snapshots-in-elasticsearch-6-2-4/135539 "2018-06-12T20:45:02Z")

</div>

Hello everyone, I'm trying to use snapshots in elasticsearch 6.2.4, but I didn't find path.repo in elasticsearch.yml. When I tried to add it in the configuration file, the service elasticsearch failed to start. Is there…

---

## [Detecting client/server compatibility](https://discuss.elastic.co/t/detecting-client-server-compatibility/135582)

<div class="topic-metadata">

**Author:** [@MikeThomsen](https://discuss.elastic.co/u/MikeThomsen)\
**Replies:** 0\
**Last updated:** [June 12, 2018, 6:12pm UTC](https://discuss.elastic.co/t/detecting-client-server-compatibility/135582 "2018-06-12T18:12:49Z")

</div>

Is there a way to query an ElasticSearch instance with a Java client and determine if they are compatible versions of the client and server? We need to be able to deliver bundles that are tailored to specific versions an…

---

## [Elasticsearch vs MySQL for large data set using exact value searching](https://discuss.elastic.co/t/elasticsearch-vs-mysql-for-large-data-set-using-exact-value-searching/135579)

<div class="topic-metadata">

**Author:** [@ian410](https://discuss.elastic.co/u/ian410)\
**Replies:** 0\
**Last updated:** [June 12, 2018, 5:55pm UTC](https://discuss.elastic.co/t/elasticsearch-vs-mysql-for-large-data-set-using-exact-value-searching/135579 "2018-06-12T17:55:49Z")

</div>

I'm evaluating using Elasticsearch vs sharding (or partitioning) MySQL for a record set of around 2.5 billion records of frequently accessed data. The data is simple in the format of (customer\_id, product\_id, qty, price…

---

## [Duplicate logs](https://discuss.elastic.co/t/duplicate-logs/134610)

<div class="topic-metadata">

**Author:** [@Honda\_fred\_elk](https://discuss.elastic.co/u/Honda_fred_elk)\
**Replies:** 13\
**Last updated:** [June 12, 2018, 4:41pm UTC](https://discuss.elastic.co/t/duplicate-logs/134610 "2018-06-12T16:41:12Z")

</div>

Hello, I have ELK version 6.2.2. Configured and working.. I have installed ELK in two nodes. I observed that Kibana started showing duplicate logs... as in the picture.. \[Duplicate1\] \[Duplicate2\] Below is my Logsta…

---

## [Reporting tools for elasticsearch](https://discuss.elastic.co/t/reporting-tools-for-elasticsearch/135572)

<div class="topic-metadata">

**Author:** [@Quintus](https://discuss.elastic.co/u/Quintus)\
**Replies:** 0\
**Last updated:** [June 12, 2018, 4:27pm UTC](https://discuss.elastic.co/t/reporting-tools-for-elasticsearch/135572 "2018-06-12T16:27:46Z")

</div>

Kibana is a great tool for visualization and data analytic but sometimes I need to export results in CSVs. I'm looking for any recommendations of any reporting tools that integrate with elasticsearch I found a few too…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1654)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1656)
