# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1678 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1679 --- ## [Best practice for empty fields?](https://discuss.elastic.co/t/best-practice-for-empty-fields/132411)
**Author:** [@spynxo](https://discuss.elastic.co/u/spynxo)\ **Replies:** 4\ **Last updated:** [May 24, 2018, 10:39am UTC](https://discuss.elastic.co/t/best-practice-for-empty-fields/132411 "2018-05-24T10:39:30Z")
Hi All, For empty fields, should I use null or ""? What is the best practice? Are they equivalent? Thanks! --- ## [Elastic Search - Free Text Search - Nested fields - (Elastic 6.2)](https://discuss.elastic.co/t/elastic-search-free-text-search-nested-fields-elastic-6-2/132081)
**Author:** [@Sarathmskr](https://discuss.elastic.co/u/Sarathmskr)\ **Replies:** 11\ **Last updated:** [May 24, 2018, 10:23am UTC](https://discuss.elastic.co/t/elastic-search-free-text-search-nested-fields-elastic-6-2/132081 "2018-05-24T10:23:42Z")
GET /companies\_v1/\_search { "query": { "simple\_query\_string": { "query": "so-well" } } } This works fine. The same I need to search in Nested objects and in non nested at the same time. My full document contain … --- ## [Machine learning doesn't work but shows no error](https://discuss.elastic.co/t/machine-learning-doesnt-work-but-shows-no-error/132766)
**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\ **Replies:** 5\ **Last updated:** [May 24, 2018, 9:01am UTC](https://discuss.elastic.co/t/machine-learning-doesnt-work-but-shows-no-error/132766 "2018-05-24T09:01:39Z")
HI, we are having our elastic stack version 6.1.1. in production and now we are testing x-pack with machine learning. I have just run basic job - count of all data with bucket span 15m. I click on "create job" and run i… --- ## [In ES \>=6.0, is sparsity for doc\_values & norms still bad?](https://discuss.elastic.co/t/in-es-6-0-is-sparsity-for-doc-values-norms-still-bad/132946)
**Author:** [@janzankowski](https://discuss.elastic.co/u/janzankowski)\ **Replies:** 4\ **Last updated:** [May 24, 2018, 8:37am UTC](https://discuss.elastic.co/t/in-es-6-0-is-sparsity-for-doc-values-norms-still-bad/132946 "2018-05-24T08:37:37Z")
Hello, ES 6.0 and up uses Lucene 7, where doc values and norms have switched from random access API to iterator API. What this means, as I understand it, is that if a document does not have a given field that other docs… --- ## [Benchmarking an existing cluster attempt ending with a crash](https://discuss.elastic.co/t/benchmarking-an-existing-cluster-attempt-ending-with-a-crash/132949)
**Author:** [@AdamBoi](https://discuss.elastic.co/u/AdamBoi)\ **Replies:** 3\ **Last updated:** [May 24, 2018, 7:48am UTC](https://discuss.elastic.co/t/benchmarking-an-existing-cluster-attempt-ending-with-a-crash/132949 "2018-05-24T07:48:28Z")
Trying Benchmarking an existing cluster. Node (es cluster running in docker container) configuration: esrally version: 0.11.0 ES cluster version: 5.6.9 Coordinator configuration: esrally version 0.11.0 Started the … --- ## [Extract a tag field into watcher / Watcher to Alert if a Heartbeat Host is Down](https://discuss.elastic.co/t/extract-a-tag-field-into-watcher-watcher-to-alert-if-a-heartbeat-host-is-down/132829)
**Author:** [@TheNmaptomyHeartBeat](https://discuss.elastic.co/u/TheNmaptomyHeartBeat)\ **Replies:** 1\ **Last updated:** [May 23, 2018, 8:30am UTC](https://discuss.elastic.co/t/extract-a-tag-field-into-watcher-watcher-to-alert-if-a-heartbeat-host-is-down/132829 "2018-05-23T08:30:37Z")
I am trying to create a watcher, and I am using Heartbeat to check if any hosts are down. I have add a tag field to the IPs that I will be monitoring, this helps identify them easier. However, the tag field is not in th… --- ## [Slow wildcard query with fast term filters](https://discuss.elastic.co/t/slow-wildcard-query-with-fast-term-filters/133073)
**Author:** [@Roman\_Margolis](https://discuss.elastic.co/u/Roman_Margolis)\ **Replies:** 1\ **Last updated:** [May 24, 2018, 6:46am UTC](https://discuss.elastic.co/t/slow-wildcard-query-with-fast-term-filters/133073 "2018-05-24T06:46:06Z")
Hi, i have a simple query that looks like this: { "query": { "bool": { "filter": { "bool": { "must": \[ { "term": { "a": "term1… --- ## [Update array fields using update\_by\_query](https://discuss.elastic.co/t/update-array-fields-using-update-by-query/133075)
**Author:** [@ramshad](https://discuss.elastic.co/u/ramshad)\ **Replies:** 0\ **Last updated:** [May 24, 2018, 5:51am UTC](https://discuss.elastic.co/t/update-array-fields-using-update-by-query/133075 "2018-05-24T05:51:47Z")
Hi, I have a field "tags" in all document.i want to update element "tag2" to "tag6" in all document which it contains.How can i achieve it ? Example documents: { "id":"1", "tags":\["tag1","tag2","tag3"\] } { "id":… --- ## [Error : java.lang.IllegalStateException: Request cannot be executed; I/O reactor status: STOPPED](https://discuss.elastic.co/t/error-java-lang-illegalstateexception-request-cannot-be-executed-i-o-reactor-status-stopped/133070)
**Author:** [@krishan](https://discuss.elastic.co/u/krishan)\ **Replies:** 0\ **Last updated:** [May 24, 2018, 3:35am UTC](https://discuss.elastic.co/t/error-java-lang-illegalstateexception-request-cannot-be-executed-i-o-reactor-status-stopped/133070 "2018-05-24T03:35:55Z")
I am currently using 3 data nodes nodes ES 6.1 cluster on PROD env.For the past week we have start getting below error "java.lang.IllegalStateException: Request cannot be executed; I/O reactor status: STOPPED". without… --- ## [Benefit of using Static Template](https://discuss.elastic.co/t/benefit-of-using-static-template/133050)
**Author:** [@Varun\_Somani](https://discuss.elastic.co/u/Varun_Somani)\ **Replies:** 3\ **Last updated:** [May 24, 2018, 3:31am UTC](https://discuss.elastic.co/t/benefit-of-using-static-template/133050 "2018-05-24T03:31:38Z")
Are there any benefit of using static template over dynamic template? I was hoping to do some space optimizations. My input data are mostly constant but can change with addition of some fields To give more context, Mo… --- ## [Reindex.remote.whitelist needs to be set in the .yml. . . on all nodes? Or just master and/or client?](https://discuss.elastic.co/t/reindex-remote-whitelist-needs-to-be-set-in-the-yml-on-all-nodes-or-just-master-and-or-client/72946)
**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\ **Replies:** 2\ **Last updated:** [May 24, 2018, 3:22am UTC](https://discuss.elastic.co/t/reindex-remote-whitelist-needs-to-be-set-in-the-yml-on-all-nodes-or-just-master-and-or-client/72946 "2018-05-24T03:22:38Z")
Hi, According to https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-reindex.html: "Remote hosts have to be explicitly whitelisted in elasticsearch.yaml using the reindex.remote.whitelist property." Q… --- ## [Modeling business hours for 'open now' queries](https://discuss.elastic.co/t/modeling-business-hours-for-open-now-queries/133060)
**Author:** [@panthersquirrel](https://discuss.elastic.co/u/panthersquirrel)\ **Replies:** 2\ **Last updated:** [May 24, 2018, 3:17am UTC](https://discuss.elastic.co/t/modeling-business-hours-for-open-now-queries/133060 "2018-05-24T03:17:43Z")
Suppose i have a set of users that are businesses and these businesses can have business hours in their respective timezones (ie America/Los\_Angeles...). For each of these businesses, they have a set of items, possibly i… --- ## [Create Aggregate filter on kibana](https://discuss.elastic.co/t/create-aggregate-filter-on-kibana/133068)
**Author:** [@MGG](https://discuss.elastic.co/u/MGG)\ **Replies:** 0\ **Last updated:** [May 24, 2018, 3:05am UTC](https://discuss.elastic.co/t/create-aggregate-filter-on-kibana/133068 "2018-05-24T03:05:28Z")
I'm taking data samples every 12 hours across 80 sites. I'm trying to setup a filter for a given site based on the recent collection\_timestamp; I've setup the query as below but how to apply this filter in the kibana fi… --- ## [User script Error](https://discuss.elastic.co/t/user-script-error/132937)
**Author:** [@MySunShine](https://discuss.elastic.co/u/MySunShine)\ **Replies:** 2\ **Last updated:** [May 24, 2018, 3:04am UTC](https://discuss.elastic.co/t/user-script-error/132937 "2018-05-24T03:04:55Z")
This is My first Error because I learn ES my English is not goods so please help me: i want user script and i send a post POST /test\_index/test\_type/4/\_update { "script": { "lang": "groovy", "file": "test-add-tag… --- ## [Elasticsearch aggregations, counting nested objects](https://discuss.elastic.co/t/elasticsearch-aggregations-counting-nested-objects/133002)
**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\ **Replies:** 2\ **Last updated:** [May 23, 2018, 11:13pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregations-counting-nested-objects/133002 "2018-05-23T23:13:34Z")
I have an index with nested objects and am trying to derive some statistics about the data, but am having trouble doing so. The documents look like this simplified version: { "rn": 1, "t": "X", "a": \[ { "r… --- ## [Keep track of changes in documents after reindex](https://discuss.elastic.co/t/keep-track-of-changes-in-documents-after-reindex/133006)
**Author:** [@pedro\_brentan](https://discuss.elastic.co/u/pedro_brentan)\ **Replies:** 3\ **Last updated:** [May 23, 2018, 10:59pm UTC](https://discuss.elastic.co/t/keep-track-of-changes-in-documents-after-reindex/133006 "2018-05-23T22:59:21Z")
Hi, We are using logstash to reindex from an Elasticsearch 2.4 cluster to an Elasticseearch 5.5 one. It takes 12h to copy all the documents using 10 pipelines on logstash. Pretty fine. The problem is that our document… --- ## [Filebeat Xpack](https://discuss.elastic.co/t/filebeat-xpack/132867)
**Author:** [@surendrakotte](https://discuss.elastic.co/u/surendrakotte)\ **Replies:** 2\ **Last updated:** [May 23, 2018, 10:25pm UTC](https://discuss.elastic.co/t/filebeat-xpack/132867 "2018-05-23T22:25:58Z")
Hello, I am a newbie to ELK. I configured Elasticsearch/Kibana/FileBeat, config was working till xpack was installed. xpack authentication works fine for ElasticSearch/Kibana but filebeat has issues on restart: 2018-05… --- ## [Behaviour when restoring over closed indicies](https://discuss.elastic.co/t/behaviour-when-restoring-over-closed-indicies/130087)
**Author:** [@hreidmar](https://discuss.elastic.co/u/hreidmar)\ **Replies:** 5\ **Last updated:** [May 23, 2018, 10:04pm UTC](https://discuss.elastic.co/t/behaviour-when-restoring-over-closed-indicies/130087 "2018-05-23T22:04:36Z")
I'm looking to understand the behaviour of Elasticsearch snapshot restore under differing circumstances. Try as I might I've been unable to find concrete answers. I have two identical elastic search clusters. One is th… --- ## [How to make primary master node](https://discuss.elastic.co/t/how-to-make-primary-master-node/133018)
**Author:** [@anuragh](https://discuss.elastic.co/u/anuragh)\ **Replies:** 1\ **Last updated:** [May 23, 2018, 8:52pm UTC](https://discuss.elastic.co/t/how-to-make-primary-master-node/133018 "2018-05-23T20:52:31Z")
Hi, We have installed ElasticSearch on 10nodes. 1 master,2 master+data,7 data nodes But now 10.186.193.59(102) act as primary.How to make 10.186.193.58 (ddlplels101) as primary ddlplels101 should be primary master an… --- ## [Search for field values with wildcard](https://discuss.elastic.co/t/search-for-field-values-with-wildcard/133047)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 2\ **Last updated:** [May 23, 2018, 8:48pm UTC](https://discuss.elastic.co/t/search-for-field-values-with-wildcard/133047 "2018-05-23T20:48:06Z")
Hello, I have imported java logs into elasticsearch and some of the fields have ended up having huge multiline values. I am in need to search for a pattern in the value. Is there a way. Can I do that? Regards, Peter --- ## [Timeout in Elastic cluster:monitor/nodes/stats](https://discuss.elastic.co/t/timeout-in-elastic-cluster-monitor-nodes-stats/133043)
**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\ **Replies:** 6\ **Last updated:** [May 23, 2018, 7:48pm UTC](https://discuss.elastic.co/t/timeout-in-elastic-cluster-monitor-nodes-stats/133043 "2018-05-23T19:48:01Z")
Hello - we are getting a Timeout calling the /\_cat/indexes API - though we're able to call all other APIs ok. The exception we're getting is a cluster:monitor/nodes/stats Timeout in the logs. How do we debug this to see … --- ## [How should I structure my shop data?](https://discuss.elastic.co/t/how-should-i-structure-my-shop-data/132944)
**Author:** [@Andreas\_Bakopoulos](https://discuss.elastic.co/u/Andreas_Bakopoulos)\ **Replies:** 2\ **Last updated:** [May 23, 2018, 8:01pm UTC](https://discuss.elastic.co/t/how-should-i-structure-my-shop-data/132944 "2018-05-23T20:01:34Z")
Hello, I am new in the elastic search and am trying to find out how it works and how can I use it for my project. I am reading the documentation and I do not understand how I should structure my eshop data in order to … --- ## [Problem starting elasticsearch: "\\Common not expected"](https://discuss.elastic.co/t/problem-starting-elasticsearch-common-not-expected/132826)
**Author:** [@Samuele\_Colmi](https://discuss.elastic.co/u/Samuele_Colmi)\ **Replies:** 2\ **Last updated:** [May 23, 2018, 7:50pm UTC](https://discuss.elastic.co/t/problem-starting-elasticsearch-common-not-expected/132826 "2018-05-23T19:50:53Z")
Hello, I just installed elasticsearch and logstash on a Windows 10 (Java 1.8). The problem occourses when i try to run elasticsearch from terminal with: bin\\elasticsearch.bat it returns "\\Common not expected". i was f… --- ## [Query docs with circular references](https://discuss.elastic.co/t/query-docs-with-circular-references/131419)
**Author:** [@Buntu\_Dev](https://discuss.elastic.co/u/Buntu_Dev)\ **Replies:** 4\ **Last updated:** [May 23, 2018, 6:53pm UTC](https://discuss.elastic.co/t/query-docs-with-circular-references/131419 "2018-05-23T18:53:19Z")
New to writing ES queries and have a docs like: { "state" : "california", "relation" : "neighour\_right", "related\_state" : "arizona" }, .. { "state" : "arizona", "relation" : "neighour\_left", … --- ## [Standard deviation based window on time series data and send alerts on outliers](https://discuss.elastic.co/t/standard-deviation-based-window-on-time-series-data-and-send-alerts-on-outliers/133035)
**Author:** [@natdip](https://discuss.elastic.co/u/natdip)\ **Replies:** 0\ **Last updated:** [May 23, 2018, 5:53pm UTC](https://discuss.elastic.co/t/standard-deviation-based-window-on-time-series-data-and-send-alerts-on-outliers/133035 "2018-05-23T17:53:21Z")
I have a time series data. I want to create a standard deviation window based threshold on the count of data points for a particular time. Based on this threshold violation, I want to check the outliers in the data. Bas… --- ## [Performance of Multiple index patterns vs. a single index pattern](https://discuss.elastic.co/t/performance-of-multiple-index-patterns-vs-a-single-index-pattern/132905)
**Author:** [@anhlqn](https://discuss.elastic.co/u/anhlqn)\ **Replies:** 2\ **Last updated:** [May 23, 2018, 5:34pm UTC](https://discuss.elastic.co/t/performance-of-multiple-index-patterns-vs-a-single-index-pattern/132905 "2018-05-23T17:34:55Z")
Hi all, I have 28 types of logs which total up to hundreds of millions event per hour. The indexes are named as following: log\_type\_1- log\_type\_2- log\_type\_3- log\_type\_n- For search and aggregation, is there performa… --- ## [Bool Query Should clause in elasticsearch vs java OR condition?](https://discuss.elastic.co/t/bool-query-should-clause-in-elasticsearch-vs-java-or-condition/132690)
**Author:** [@san88922](https://discuss.elastic.co/u/san88922)\ **Replies:** 10\ **Last updated:** [May 23, 2018, 5:26pm UTC](https://discuss.elastic.co/t/bool-query-should-clause-in-elasticsearch-vs-java-or-condition/132690 "2018-05-23T17:26:50Z")
{ "bool": { "should": \[ { "term": { "title": "brown" }} , -----\> 1. { "term": { "title": "fox" }} \] } } I am new into the Elasticsearch world need help in understanding the "bool" query "should" clause, as ment… --- ## [Curator\_cli show\_snapshots doesn't seem to do anything or log output](https://discuss.elastic.co/t/curator-cli-show-snapshots-doesnt-seem-to-do-anything-or-log-output/132995)
**Author:** [@sihil](https://discuss.elastic.co/u/sihil)\ **Replies:** 6\ **Last updated:** [May 23, 2018, 4:09pm UTC](https://discuss.elastic.co/t/curator-cli-show-snapshots-doesnt-seem-to-do-anything-or-log-output/132995 "2018-05-23T16:09:39Z")
I can't help but feel that I'm making a rookie mistake here but can't figure it out. I'm trying to use curator\_cli (version 5.5.3) to list snapshots on an ES cluster (version 6.2.4). It will happily show\_indices and I c… --- ## [Zero result?](https://discuss.elastic.co/t/zero-result/133014)
**Author:** [@remco\_zwaan](https://discuss.elastic.co/u/remco_zwaan)\ **Replies:** 1\ **Last updated:** [May 23, 2018, 3:51pm UTC](https://discuss.elastic.co/t/zero-result/133014 "2018-05-23T15:51:37Z")
Hi , This is my mapping: { "lodgings\_development\_20180523154411698": { "mappings": { "lodging": { "\_all": { "enabled": false }, "dynamic\_tem… --- ## [Curator doesn't purge Data](https://discuss.elastic.co/t/curator-doesnt-purge-data/132505)
**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\ **Replies:** 26\ **Last updated:** [May 23, 2018, 3:30pm UTC](https://discuss.elastic.co/t/curator-doesnt-purge-data/132505 "2018-05-23T15:30:06Z")
Hi, I install curator and in order to test it I make : 1 day to purge data, but it seems to me that it doesn't work, my indice from yesterday is still here and not deleted. --- actions: 1: action: delete\_indices… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1677) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1679)