# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1679

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1680

---

## [Plugin to use back and restore in Openstack Objectstore](https://discuss.elastic.co/t/plugin-to-use-back-and-restore-in-openstack-objectstore/133009)

<div class="topic-metadata">

**Author:** [@saiksrm](https://discuss.elastic.co/u/saiksrm)\
**Replies:** 0\
**Last updated:** [May 23, 2018, 2:43pm UTC](https://discuss.elastic.co/t/plugin-to-use-back-and-restore-in-openstack-objectstore/133009 "2018-05-23T14:43:27Z")

</div>

Hi, I saw this link in the doc https://github.com/BigDataBoutique/elasticsearch-repository-swift. However it seems still in working conditions. Do we have any plans to make it as a proper plugin. If not what are the opt…

---

## [Re-balancing shard allocation](https://discuss.elastic.co/t/re-balancing-shard-allocation/132726)

<div class="topic-metadata">

**Author:** [@hamid\_bayat](https://discuss.elastic.co/u/hamid_bayat)\
**Replies:** 20\
**Last updated:** [May 23, 2018, 2:26pm UTC](https://discuss.elastic.co/t/re-balancing-shard-allocation/132726 "2018-05-23T14:26:01Z")

</div>

we have cluster with 100 node and our index name are base on date. with elastic default options, the situation is like this: the shard of index that begin with 2017-June are in first 10 node the shard of index that beg…

---

## [Mysql database shows only latest record](https://discuss.elastic.co/t/mysql-database-shows-only-latest-record/132831)

<div class="topic-metadata">

**Author:** [@mamta](https://discuss.elastic.co/u/mamta)\
**Replies:** 14\
**Last updated:** [May 23, 2018, 1:26pm UTC](https://discuss.elastic.co/t/mysql-database-shows-only-latest-record/132831 "2018-05-23T13:26:16Z")

</div>

Hi, I am using ELK 5.6.8 version. My ELK is running on RedHat machine. When I first run logstash.conf for MySQL database then I was able to see all the records of one table but now I am not able to see all records of on…

---

## [Seeing security exceptions after installing X-Pack](https://discuss.elastic.co/t/seeing-security-exceptions-after-installing-x-pack/132841)

<div class="topic-metadata">

**Author:** [@maheshm](https://discuss.elastic.co/u/maheshm)\
**Replies:** 6\
**Last updated:** [May 23, 2018, 12:59pm UTC](https://discuss.elastic.co/t/seeing-security-exceptions-after-installing-x-pack/132841 "2018-05-23T12:59:09Z")

</div>

Hi, Seeing below error after unpacking x-pack and enabling security. Also, added elasticsearch username/password in the kibana.yml file. can someone please share more insights if I've done anything wrong? were you able…

---

## [Changing the datatype of Tokens using analyzers](https://discuss.elastic.co/t/changing-the-datatype-of-tokens-using-analyzers/132983)

<div class="topic-metadata">

**Author:** [@Aparna\_KP](https://discuss.elastic.co/u/Aparna_KP)\
**Replies:** 0\
**Last updated:** [May 23, 2018, 11:19am UTC](https://discuss.elastic.co/t/changing-the-datatype-of-tokens-using-analyzers/132983 "2018-05-23T11:19:18Z")

</div>

Hi, I came across a scenario where one of the account teams that I am working with, need the indexed tokens to behave in 2 different ways. The field receives data in the form -\> "D:546789". The field has a "text" dataty…

---

## [Field Type](https://discuss.elastic.co/t/field-type/132981)

<div class="topic-metadata">

**Author:** [@empfangsfehler](https://discuss.elastic.co/u/empfangsfehler)\
**Replies:** 0\
**Last updated:** [May 23, 2018, 11:02am UTC](https://discuss.elastic.co/t/field-type/132981 "2018-05-23T11:02:53Z")

</div>

Hi there, i'm rather new to elasticsearch, i already have read the first-step user guide for elasticsearch but i'm still confused. I have set up winlogbeat to send all PrinterOperational Logs to my elasticsearch server…

---

## [ElasticSearch a filed put to index doesnt show in the index](https://discuss.elastic.co/t/elasticsearch-a-filed-put-to-index-doesnt-show-in-the-index/132972)

<div class="topic-metadata">

**Author:** [@uncleBens](https://discuss.elastic.co/u/uncleBens)\
**Replies:** 1\
**Last updated:** [May 23, 2018, 10:37am UTC](https://discuss.elastic.co/t/elasticsearch-a-filed-put-to-index-doesnt-show-in-the-index/132972 "2018-05-23T10:37:02Z")

</div>

I am using the following code to insert new field to existing index. I don't want to reset the indexed data, just to add new field to existing index and old records in index should have null in field colour: curl -XPUT …

---

## [Exception in Kibana Scripted Field](https://discuss.elastic.co/t/exception-in-kibana-scripted-field/132801)

<div class="topic-metadata">

**Author:** [@ShifaliGarg](https://discuss.elastic.co/u/ShifaliGarg)\
**Replies:** 3\
**Last updated:** [May 23, 2018, 10:09am UTC](https://discuss.elastic.co/t/exception-in-kibana-scripted-field/132801 "2018-05-23T10:09:27Z")

</div>

I am trying to add scripted field in Kibana using the script from below link under 'Date math resulting in strings'. Below is the Scrpit where @timestamp is Time filter field:: LocalDateTime.ofInstant(Instant.ofEpoc…

---

## [Birthday in Elasticsearch](https://discuss.elastic.co/t/birthday-in-elasticsearch/132785)

<div class="topic-metadata">

**Author:** [@arpansahoo](https://discuss.elastic.co/u/arpansahoo)\
**Replies:** 2\
**Last updated:** [May 23, 2018, 9:57am UTC](https://discuss.elastic.co/t/birthday-in-elasticsearch/132785 "2018-05-23T09:57:05Z")

</div>

I have a Birthday date-field (format: MMddyyyy||MMdd) in my index. I want to search for exact birthday that a user search for (eg. 03221989) and the upcoming birthdays. I am able to get the exact birthday. But for upcomi…

---

## [Searching case insensitive values without changing mapping file](https://discuss.elastic.co/t/searching-case-insensitive-values-without-changing-mapping-file/132723)

<div class="topic-metadata">

**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\
**Replies:** 1\
**Last updated:** [May 23, 2018, 9:45am UTC](https://discuss.elastic.co/t/searching-case-insensitive-values-without-changing-mapping-file/132723 "2018-05-23T09:45:16Z")

</div>

Hi All, Could someone please help me on writing query for getting results based on the case insensitive values provided for a particular. For this i don't want to change my mapping file, because my mapping file very hug…

---

## [General Hierarchical Document Advice](https://discuss.elastic.co/t/general-hierarchical-document-advice/132967)

<div class="topic-metadata">

**Author:** [@Dave\_Russell](https://discuss.elastic.co/u/Dave_Russell)\
**Replies:** 0\
**Last updated:** [May 23, 2018, 9:39am UTC](https://discuss.elastic.co/t/general-hierarchical-document-advice/132967 "2018-05-23T09:39:37Z")

</div>

I'm trying to index relational data directly into ElasticSearch. As part of my index creation I am trying to prevent the unnecessary duplication that backreferences (eg OrderLine \> Order \> Customer \> Orders \> Order \> Or…

---

## [Multiword Synonym not working](https://discuss.elastic.co/t/multiword-synonym-not-working/132950)

<div class="topic-metadata">

**Author:** [@anjireddy543](https://discuss.elastic.co/u/anjireddy543)\
**Replies:** 0\
**Last updated:** [May 23, 2018, 8:34am UTC](https://discuss.elastic.co/t/multiword-synonym-not-working/132950 "2018-05-23T08:34:35Z")

</div>

Hi, I am facing problem with multiword synonym on nested field. Given below are the mapping details Field "acts" : { "type" : "nested", "include\_in\_parent" : true, "properties" : …

---

## [URL search with query DSL body](https://discuss.elastic.co/t/url-search-with-query-dsl-body/132943)

<div class="topic-metadata">

**Author:** [@gourmax](https://discuss.elastic.co/u/gourmax)\
**Replies:** 0\
**Last updated:** [May 23, 2018, 8:11am UTC](https://discuss.elastic.co/t/url-search-with-query-dsl-body/132943 "2018-05-23T08:11:07Z")

</div>

I'm trying to use a browser to make a query using the JSON format (Query DSL) on it. The goal is to test the performance between both type of query format. My query DSL is the following: GET /\_search { "query": { …

---

## [Getting error while installing elastic search](https://discuss.elastic.co/t/getting-error-while-installing-elastic-search/132716)

<div class="topic-metadata">

**Author:** [@prithwish](https://discuss.elastic.co/u/prithwish)\
**Replies:** 2\
**Last updated:** [May 23, 2018, 7:45am UTC](https://discuss.elastic.co/t/getting-error-while-installing-elastic-search/132716 "2018-05-23T07:45:13Z")

</div>

Hi, Getting below error while running ./elasticsearch.bat in win 10 machine. Kindly help \[2018-05-22T10:53:08,610\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[LAPTOP-PO1VP5I2\] uncaught exception in thread \[mai…

---

## [Architecture Elasticsearch?](https://discuss.elastic.co/t/architecture-elasticsearch/132939)

<div class="topic-metadata">

**Author:** [@data\_scientist](https://discuss.elastic.co/u/data_scientist)\
**Replies:** 0\
**Last updated:** [May 23, 2018, 7:36am UTC](https://discuss.elastic.co/t/architecture-elasticsearch/132939 "2018-05-23T07:36:14Z")

</div>

Hello, Please, I want to know is this architecture of documents in Elasticsearch that I have done is correct or not? Method 1: I'm using the latest version of Elasticsearch 7 We have several clients, and each client …

---

## [Bool should query with result limit for each condition](https://discuss.elastic.co/t/bool-should-query-with-result-limit-for-each-condition/132933)

<div class="topic-metadata">

**Author:** [@tushar\_chevulkar](https://discuss.elastic.co/u/tushar_chevulkar)\
**Replies:** 0\
**Last updated:** [May 23, 2018, 7:01am UTC](https://discuss.elastic.co/t/bool-should-query-with-result-limit-for-each-condition/132933 "2018-05-23T07:01:06Z")

</div>

Hello, Is there a way i can give limit to each should condition ? for e.g. in the below query i need only 10 results for each source. { "query": { "bool": { "should": \[ { "matc…

---

## [Estimation for ELK setup?](https://discuss.elastic.co/t/estimation-for-elk-setup/132916)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 3\
**Last updated:** [May 23, 2018, 6:19am UTC](https://discuss.elastic.co/t/estimation-for-elk-setup/132916 "2018-05-23T06:19:21Z")

</div>

Hello, can some expert help me to estimate in man/days, to setup ELK stack in one evnironment? Data on-boarding of system matrix from 40 clients. Writing Groke patterns for 5 different patterns Configuration of Logst…

---

## [Metricbeat sending data that is not arriving in Elasticsearch](https://discuss.elastic.co/t/metricbeat-sending-data-that-is-not-arriving-in-elasticsearch/132138)

<div class="topic-metadata">

**Author:** [@Creat0n](https://discuss.elastic.co/u/Creat0n)\
**Replies:** 1\
**Last updated:** [May 23, 2018, 6:16am UTC](https://discuss.elastic.co/t/metricbeat-sending-data-that-is-not-arriving-in-elasticsearch/132138 "2018-05-23T06:16:42Z")

</div>

I configured metricbeat to send system metrics to elasticsearch. I'm using the exact same configuration on 13 Servers but I'm seeing only data from 12 Servers. Metricbeat Log from the missing server shows no Errors: .…

---

## [Bad charset encoding in field names (II)](https://discuss.elastic.co/t/bad-charset-encoding-in-field-names-ii/129715)

<div class="topic-metadata">

**Author:** [@Thiago\_Ruiz](https://discuss.elastic.co/u/Thiago_Ruiz)\
**Replies:** 5\
**Last updated:** [May 23, 2018, 6:02am UTC](https://discuss.elastic.co/t/bad-charset-encoding-in-field-names-ii/129715 "2018-05-23T06:02:18Z")

</div>

Hi! I have exactly the same issue as described by Ondřej Bílka on this thread: Since the discussion was closed I'm trying to reopen it again. All my files are in UTF-8 and just the dinamic fields are wrong - I have o…

---

## [How to make some field not\_analyzed?](https://discuss.elastic.co/t/how-to-make-some-field-not-analyzed/131657)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 5\
**Last updated:** [May 23, 2018, 5:56am UTC](https://discuss.elastic.co/t/how-to-make-some-field-not-analyzed/131657 "2018-05-23T05:56:42Z")

</div>

Refer to the title...

---

## [Misunderstanding of metrics](https://discuss.elastic.co/t/misunderstanding-of-metrics/132857)

<div class="topic-metadata">

**Author:** [@SergeiPetrov](https://discuss.elastic.co/u/SergeiPetrov)\
**Replies:** 1\
**Last updated:** [May 23, 2018, 4:40am UTC](https://discuss.elastic.co/t/misunderstanding-of-metrics/132857 "2018-05-23T04:40:12Z")

</div>

Hi, On the previous week I wrote to you about the problem with custom plugin. (ES custom plugin testing). As you suggested me, I created a separate ES cluster with my plugin and test data. Then I created a custom track…

---

## [Configure two application instances nodes to same elasticsearch cluster](https://discuss.elastic.co/t/configure-two-application-instances-nodes-to-same-elasticsearch-cluster/132777)

<div class="topic-metadata">

**Author:** [@vishnusd37](https://discuss.elastic.co/u/vishnusd37)\
**Replies:** 3\
**Last updated:** [May 23, 2018, 4:31am UTC](https://discuss.elastic.co/t/configure-two-application-instances-nodes-to-same-elasticsearch-cluster/132777 "2018-05-23T04:31:05Z")

</div>

Two instances are running under load balancing. The order of results is different in two instances. So, we want to make these two nodes under one cluster and set a preference to one node. So, the order of results is cons…

---

## [Does any disclaimer or any copyright notice required to use Elastic ELK](https://discuss.elastic.co/t/does-any-disclaimer-or-any-copyright-notice-required-to-use-elastic-elk/132806)

<div class="topic-metadata">

**Author:** [@sanmaity](https://discuss.elastic.co/u/sanmaity)\
**Replies:** 1\
**Last updated:** [May 23, 2018, 2:41am UTC](https://discuss.elastic.co/t/does-any-disclaimer-or-any-copyright-notice-required-to-use-elastic-elk/132806 "2018-05-23T02:41:49Z")

</div>

Hi, I am using below versions for log monitoring which are compatible with Java 1.7 Elasticsearch-2.4.6 Filebeat- 5.6.9 Kibana 4.6.6 Want to check whether any disclaimer or copyright is required from Elastic to use…

---

## [Issue with Coordinator node down](https://discuss.elastic.co/t/issue-with-coordinator-node-down/132722)

<div class="topic-metadata">

**Author:** [@softwareklinic](https://discuss.elastic.co/u/softwareklinic)\
**Replies:** 5\
**Last updated:** [May 23, 2018, 2:12am UTC](https://discuss.elastic.co/t/issue-with-coordinator-node-down/132722 "2018-05-23T02:12:57Z")

</div>

We are using Elasticsearch 5.x and in production - we have a Java based application that communicates with Elasticsearch using the TCP transport API -- we are passing 4 coordinator node HOST & PORT while establishing the…

---

## [Error while trying to install X-Pack](https://discuss.elastic.co/t/error-while-trying-to-install-x-pack/132874)

<div class="topic-metadata">

**Author:** [@bossi6of9](https://discuss.elastic.co/u/bossi6of9)\
**Replies:** 1\
**Last updated:** [May 23, 2018, 1:23am UTC](https://discuss.elastic.co/t/error-while-trying-to-install-x-pack/132874 "2018-05-23T01:23:32Z")

</div>

Hi, I'm getting an error while trying to install X-Pack. I'm running this as root, in the ES\_HOME directory (but it's not the standard location). Elastic is running, along with Kibana on this server, and it has inter…

---

## [Best model for hospitality availability + rate search](https://discuss.elastic.co/t/best-model-for-hospitality-availability-rate-search/132902)

<div class="topic-metadata">

**Author:** [@titani0us](https://discuss.elastic.co/u/titani0us)\
**Replies:** 0\
**Last updated:** [May 22, 2018, 11:36pm UTC](https://discuss.elastic.co/t/best-model-for-hospitality-availability-rate-search/132902 "2018-05-22T23:36:38Z")

</div>

Hello! We're brand new to ES. We've quickly outgrown our MySQL implementation and are looking for a must faster and more extensive/robust search solution. We've been trying to discern the right way to store the data af…

---

## [Multiple must conditions not working](https://discuss.elastic.co/t/multiple-must-conditions-not-working/132852)

<div class="topic-metadata">

**Author:** [@tyteen4a03](https://discuss.elastic.co/u/tyteen4a03)\
**Replies:** 0\
**Last updated:** [May 22, 2018, 4:34pm UTC](https://discuss.elastic.co/t/multiple-must-conditions-not-working/132852 "2018-05-22T16:34:12Z")

</div>

I'm trying to run this query on ES 5.4: POST /\_search?pretty&size=500 { "query": { "bool": { "must": \[ { "match": { "tags": "MY\_TAG" } }, { "range": { "timestamp": { "gt": 0, …

---

## [Multiple Elasticsearch nodes with Docker](https://discuss.elastic.co/t/multiple-elasticsearch-nodes-with-docker/132875)

<div class="topic-metadata">

**Author:** [@Brandonmcgr](https://discuss.elastic.co/u/Brandonmcgr)\
**Replies:** 0\
**Last updated:** [May 22, 2018, 6:39pm UTC](https://discuss.elastic.co/t/multiple-elasticsearch-nodes-with-docker/132875 "2018-05-22T18:39:00Z")

</div>

Hello guys, I'm new to Docker and I'm having an issue. I am trying to run a multinode set up with the following commands: docker run -d --name elasticsearch -p 9200:9200 elasticsearch docker run -d --name elasticsearc…

---

## [Removing aborted snapshot](https://discuss.elastic.co/t/removing-aborted-snapshot/132879)

<div class="topic-metadata">

**Author:** [@Jonny\_Glazier](https://discuss.elastic.co/u/Jonny_Glazier)\
**Replies:** 1\
**Last updated:** [May 22, 2018, 7:34pm UTC](https://discuss.elastic.co/t/removing-aborted-snapshot/132879 "2018-05-22T19:34:49Z")

</div>

Thanks in advance for the help My problem is that I tried to delete a snapshot during execution and now it is labeled as both aborted and in progress. This prevents me from executing any new snapshots, as it returns me …

---

## [Elasticsearch Birthday field](https://discuss.elastic.co/t/elasticsearch-birthday-field/132836)

<div class="topic-metadata">

**Author:** [@arpansahoo](https://discuss.elastic.co/u/arpansahoo)\
**Replies:** 1\
**Last updated:** [May 22, 2018, 7:05pm UTC](https://discuss.elastic.co/t/elasticsearch-birthday-field/132836 "2018-05-22T19:05:42Z")

</div>

I have a Birthday date-field (format: MMddyyyy||MMdd) in my index. I want to search for exact birthday that a user search for (eg. 03221989) and the upcoming birthdays. I am able to get the exact birthday. But for upcomi…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1678)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1680)
