# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1683

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1684

---

## [Elasticsearch Query: Equal Values of Different Types](https://discuss.elastic.co/t/elasticsearch-query-equal-values-of-different-types/131802)

<div class="topic-metadata">

**Author:** [@AloysiusParedes](https://discuss.elastic.co/u/AloysiusParedes)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 8:13pm UTC](https://discuss.elastic.co/t/elasticsearch-query-equal-values-of-different-types/131802 "2018-05-18T20:13:32Z")

</div>

Hi, new to ELK, and I am ready to start making search queries. Here is my data (anonymized) and they are all on the same index: { "type": "typeA" "fieldA1": "valueA1" "fieldA2": "valueA2" } { "type": "…

---

## [Edgengram doesn't give tokens after spaces](https://discuss.elastic.co/t/edgengram-doesnt-give-tokens-after-spaces/131747)

<div class="topic-metadata">

**Author:** [@satyarajp](https://discuss.elastic.co/u/satyarajp)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 7:07pm UTC](https://discuss.elastic.co/t/edgengram-doesnt-give-tokens-after-spaces/131747 "2018-05-18T19:07:51Z")

</div>

Hi Team, I'm using edgenGram analyzer using settings like below { "content" : { "settings" : { "index" : { "number\_of\_shards" : "5", "provided\_name" : "content", "creation\_date" : "1…

---

## [Painless script ambiguous remove method call](https://discuss.elastic.co/t/painless-script-ambiguous-remove-method-call/131375)

<div class="topic-metadata">

**Author:** [@Zt\_Zeng](https://discuss.elastic.co/u/Zt_Zeng)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 4:42pm UTC](https://discuss.elastic.co/t/painless-script-ambiguous-remove-method-call/131375 "2018-05-18T16:42:35Z")

</div>

As the following script shows: "script": { "inline": "ctx.\_source.users.remove(params.users)", "params": { "users": 400903 } } ES complains about index\_out\_of\_bounds\_exception which it calls remov…

---

## [Terms query not working for me](https://discuss.elastic.co/t/terms-query-not-working-for-me/130918)

<div class="topic-metadata">

**Author:** [@Fish](https://discuss.elastic.co/u/Fish)\
**Replies:** 4\
**Last updated:** [May 18, 2018, 4:27pm UTC](https://discuss.elastic.co/t/terms-query-not-working-for-me/130918 "2018-05-18T16:27:07Z")

</div>

I am pretty new to Easticsearch. So, if my question is stupid, I apologize. This is my question: I want search documents that have some fields. I have provided code snippet below. I have a field called "reference numbe…

---

## [Permission denied X-pack not installing](https://discuss.elastic.co/t/permission-denied-x-pack-not-installing/132346)

<div class="topic-metadata">

**Author:** [@applicate](https://discuss.elastic.co/u/applicate)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 2:52pm UTC](https://discuss.elastic.co/t/permission-denied-x-pack-not-installing/132346 "2018-05-18T14:52:35Z")

</div>

Lenovo-G50-80:/usr/share/elasticsearch$ bin/elasticsearch-plugin install x-pack bin/elasticsearch-env: line 70: /etc/default/elasticsearch: Permission denied

---

## [Build aggregation on top of doc\_count of date histogram?](https://discuss.elastic.co/t/build-aggregation-on-top-of-doc-count-of-date-histogram/132502)

<div class="topic-metadata">

**Author:** [@Alexander\_Sviridov](https://discuss.elastic.co/u/Alexander_Sviridov)\
**Replies:** 0\
**Last updated:** [May 18, 2018, 2:27pm UTC](https://discuss.elastic.co/t/build-aggregation-on-top-of-doc-count-of-date-histogram/132502 "2018-05-18T14:27:16Z")

</div>

Hello! I want to implement Control Chart as it described here: https://www.elastic.co/blog/staying-in-control-with-moving-averages-part-2, but I do not have metrics — I have events with timestamps. So my idea was to ma…

---

## [Cross cluster search giving 504](https://discuss.elastic.co/t/cross-cluster-search-giving-504/132486)

<div class="topic-metadata">

**Author:** [@MattiDeGrauwe](https://discuss.elastic.co/u/MattiDeGrauwe)\
**Replies:** 3\
**Last updated:** [May 18, 2018, 1:50pm UTC](https://discuss.elastic.co/t/cross-cluster-search-giving-504/132486 "2018-05-18T13:50:02Z")

</div>

Hi, I would like kibana to cross search between 2 nodes: 1 being on the IP x.x.x.214 other one being on the IP x.x.x.215. I've set up my configuration and the clustersetings return the following: GET /\_cluster/setti…

---

## [Customize query](https://discuss.elastic.co/t/customize-query/132340)

<div class="topic-metadata">

**Author:** [@remco\_zwaan](https://discuss.elastic.co/u/remco_zwaan)\
**Replies:** 4\
**Last updated:** [May 18, 2018, 1:34pm UTC](https://discuss.elastic.co/t/customize-query/132340 "2018-05-18T13:34:12Z")

</div>

Hi , User search for availabilty 2 - 5 june . They want to stay for 3 nights. This is my query curl http://localhost:9200/lodgings\_development/\_search?pretty -H 'Content-Type: application/json' -d '{"aggs":{"beds":{"…

---

## [Licence not updating on Linux server](https://discuss.elastic.co/t/licence-not-updating-on-linux-server/132483)

<div class="topic-metadata">

**Author:** [@raman3.0](https://discuss.elastic.co/u/raman3.0)\
**Replies:** 7\
**Last updated:** [May 18, 2018, 1:01pm UTC](https://discuss.elastic.co/t/licence-not-updating-on-linux-server/132483 "2018-05-18T13:01:50Z")

</div>

PuTTY SSH agent output: root@e2e-34-59:/# curl -XPUT -u elastic "http://senib.rukjao.io:3183/\_xpack/license" -H "Content-Type: application/json" -d @license.json Enter host password for user 'elastic': curl: (52) Empt…

---

## [Script sorting using matched named queries](https://discuss.elastic.co/t/script-sorting-using-matched-named-queries/132491)

<div class="topic-metadata">

**Author:** [@dkiselev](https://discuss.elastic.co/u/dkiselev)\
**Replies:** 0\
**Last updated:** [May 18, 2018, 12:54pm UTC](https://discuss.elastic.co/t/script-sorting-using-matched-named-queries/132491 "2018-05-18T12:54:42Z")

</div>

I know that I can't use matched named queries in aggregations, but can I use it for sorting? Doing that in my app wouldn't be as fast as doing that on ES shards before returning the results.

---

## [Java RestLowLevelClient: BadRequest on Delete By Query](https://discuss.elastic.co/t/java-restlowlevelclient-badrequest-on-delete-by-query/132462)

<div class="topic-metadata">

**Author:** [@freddy79](https://discuss.elastic.co/u/freddy79)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 12:54pm UTC](https://discuss.elastic.co/t/java-restlowlevelclient-badrequest-on-delete-by-query/132462 "2018-05-18T12:54:15Z")

</div>

Hey, we are using: Elasticsearch 6.2.3 hosted by http://cloud.elastic.co Java RestLowLevelClient 6.2.3 Request with low level client: restHighLevelClient.getLowLevelClient().performRequest( "POST", "INDEX/\_delete…

---

## [How to store logs in Elastic Search?](https://discuss.elastic.co/t/how-to-store-logs-in-elastic-search/132485)

<div class="topic-metadata">

**Author:** [@psprint](https://discuss.elastic.co/u/psprint)\
**Replies:** 2\
**Last updated:** [May 18, 2018, 12:30pm UTC](https://discuss.elastic.co/t/how-to-store-logs-in-elastic-search/132485 "2018-05-18T12:30:14Z")

</div>

I'm writing a shell tool that allows to quickly log messages without slowing down the shell. I stumbled upon elasticsearch, it seems to be very good for this task, but I cannot find solution to the following: How to keep…

---

## [Is sequence-numbers support merged in?](https://discuss.elastic.co/t/is-sequence-numbers-support-merged-in/132484)

<div class="topic-metadata">

**Author:** [@psprint](https://discuss.elastic.co/u/psprint)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 12:07pm UTC](https://discuss.elastic.co/t/is-sequence-numbers-support-merged-in/132484 "2018-05-18T12:07:23Z")

</div>

Hello, there's Github issue about adding – can anyone correct me if I'm wrong – automatically generated numbers that do what in MySQL is done with column "id integer primary key autoincrement". Is that true, this suppor…

---

## [Elasticsearch and Kibana on remoter server](https://discuss.elastic.co/t/elasticsearch-and-kibana-on-remoter-server/132476)

<div class="topic-metadata">

**Author:** [@raman3.0](https://discuss.elastic.co/u/raman3.0)\
**Replies:** 2\
**Last updated:** [May 18, 2018, 11:51am UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-on-remoter-server/132476 "2018-05-18T11:51:29Z")

</div>

Can anyone explain me how to setup Elasticsearch and Kibana on a remote server?

---

## [Elastic RAM:Disk Ratio Minimum](https://discuss.elastic.co/t/elastic-ram-disk-ratio-minimum/132435)

<div class="topic-metadata">

**Author:** [@safhw91](https://discuss.elastic.co/u/safhw91)\
**Replies:** 4\
**Last updated:** [May 18, 2018, 11:14am UTC](https://discuss.elastic.co/t/elastic-ram-disk-ratio-minimum/132435 "2018-05-18T11:14:15Z")

</div>

Hello, I understand the optimum RAM:disk ratio is 1:24. Based on my own testing, I've used 1GB of RAM to support up to 77GB of data in Elastic's (based on Kibana's "store.size"). But that's a bad test since it crashed a…

---

## [Must\_not field exists query returning documents with those fields excluded](https://discuss.elastic.co/t/must-not-field-exists-query-returning-documents-with-those-fields-excluded/132155)

<div class="topic-metadata">

**Author:** [@SergiSolet](https://discuss.elastic.co/u/SergiSolet)\
**Replies:** 2\
**Last updated:** [May 18, 2018, 11:12am UTC](https://discuss.elastic.co/t/must-not-field-exists-query-returning-documents-with-those-fields-excluded/132155 "2018-05-18T11:12:24Z")

</div>

Hi all, I don't know if it is a bug, but it seems to me or I am missing something maybe too. I am performing a search query using the rest API of ES. I am using 5.6.8, the body query is the following (the involved part)…

---

## [Painless lowercase of a keyword field](https://discuss.elastic.co/t/painless-lowercase-of-a-keyword-field/132470)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 11:01am UTC](https://discuss.elastic.co/t/painless-lowercase-of-a-keyword-field/132470 "2018-05-18T11:01:23Z")

</div>

Hi All, I have a index with a field which is of type keyword. The data is stored in upper case. I want to use \_update\_by\_query and convert it to lowercase using Painless. Could you please help. sample document { "fi…

---

## [License Updating in X-pack](https://discuss.elastic.co/t/license-updating-in-x-pack/132444)

<div class="topic-metadata">

**Author:** [@raman2.0](https://discuss.elastic.co/u/raman2.0)\
**Replies:** 10\
**Last updated:** [May 18, 2018, 9:53am UTC](https://discuss.elastic.co/t/license-updating-in-x-pack/132444 "2018-05-18T09:53:16Z")

</div>

Where should I use this command to upgrade my licencse? curl -XPUT -u elastic 'http://\<host\>:\<port\>/\_xpack/license' -H "Content-Type: application/json" -d @license.json

---

## [Elastic discovery.zen.ping.multicast.enabled value on a active cluster](https://discuss.elastic.co/t/elastic-discovery-zen-ping-multicast-enabled-value-on-a-active-cluster/131513)

<div class="topic-metadata">

**Author:** [@sanjaykrishna12](https://discuss.elastic.co/u/sanjaykrishna12)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 10:15am UTC](https://discuss.elastic.co/t/elastic-discovery-zen-ping-multicast-enabled-value-on-a-active-cluster/131513 "2018-05-18T10:15:33Z")

</div>

How can I find the value discovery.zen.ping.multicast.enabled of a cluster using API ? I tried curl -X GET "http://localhost:9200/\_cluster/settings?include\_defaults=true" but it doesn't show the multicast enabled value. …

---

## [.ml-state is too big](https://discuss.elastic.co/t/ml-state-is-too-big/131561)

<div class="topic-metadata">

**Author:** [@alah64](https://discuss.elastic.co/u/alah64)\
**Replies:** 2\
**Last updated:** [May 18, 2018, 10:15am UTC](https://discuss.elastic.co/t/ml-state-is-too-big/131561 "2018-05-18T10:15:27Z")

</div>

after delete machine learning job , model state data is remaining in .ml-state index. another is :why remain model state for 200 days ago without timestamp field for delete them? now it takes 8gb for deleted jobs and g…

---

## [Machine Learning broke somehow](https://discuss.elastic.co/t/machine-learning-broke-somehow/132100)

<div class="topic-metadata">

**Author:** [@admlko](https://discuss.elastic.co/u/admlko)\
**Replies:** 11\
**Last updated:** [May 18, 2018, 10:14am UTC](https://discuss.elastic.co/t/machine-learning-broke-somehow/132100 "2018-05-18T10:14:46Z")

</div>

Sorry about the topic, but I honestly have no clue what is the issue. I was using Elastic stack 6.2.2, had four ML jobs and they were running fine. Then I was adding a new job, and got this error immediately when I cli…

---

## [X pack watcher create action for each error](https://discuss.elastic.co/t/x-pack-watcher-create-action-for-each-error/131702)

<div class="topic-metadata">

**Author:** [@Suresh\_RS](https://discuss.elastic.co/u/Suresh_RS)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 9:48am UTC](https://discuss.elastic.co/t/x-pack-watcher-create-action-for-each-error/131702 "2018-05-18T09:48:04Z")

</div>

In elasticsearch document,i have seen x-pack examples which create action for events occured within specific time range,I want to create an watcher action for each event.

---

## [Delete By Query and index Size](https://discuss.elastic.co/t/delete-by-query-and-index-size/132171)

<div class="topic-metadata">

**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 9:37am UTC](https://discuss.elastic.co/t/delete-by-query-and-index-size/132171 "2018-05-18T09:37:40Z")

</div>

We are running a ES Cluster on 2.3.3, and have the Delete-By-Query plugin installed. As I am updating an index using the delete by query API, I noticed the size of the index increasing. That said, I was wondering, if …

---

## [Autcomplete implementation](https://discuss.elastic.co/t/autcomplete-implementation/132448)

<div class="topic-metadata">

**Author:** [@hamidou830](https://discuss.elastic.co/u/hamidou830)\
**Replies:** 0\
**Last updated:** [May 18, 2018, 9:29am UTC](https://discuss.elastic.co/t/autcomplete-implementation/132448 "2018-05-18T09:29:10Z")

</div>

Hello, I want to implement autocomplete with elasticsearch and I'm unable to do it. I want to have something like the following : My indexed strings are for e.g : "Developpeur Java" "Developpeur C#" "Je suis Develo…

---

## [How do I determine the difference between two indices?](https://discuss.elastic.co/t/how-do-i-determine-the-difference-between-two-indices/131814)

<div class="topic-metadata">

**Author:** [@Brett\_Anderson](https://discuss.elastic.co/u/Brett_Anderson)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 9:28am UTC](https://discuss.elastic.co/t/how-do-i-determine-the-difference-between-two-indices/131814 "2018-05-18T09:28:04Z")

</div>

I have two indices that should be identical, but have a slightly different document count. I'd like to determine which documents only exist in one of the indexes. What I initially tried failed and I'll get to that in a …

---

## [Composite Aggregation and Sorting with a non source](https://discuss.elastic.co/t/composite-aggregation-and-sorting-with-a-non-source/131932)

<div class="topic-metadata">

**Author:** [@William\_Chu](https://discuss.elastic.co/u/William_Chu)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 9:24am UTC](https://discuss.elastic.co/t/composite-aggregation-and-sorting-with-a-non-source/131932 "2018-05-18T09:24:46Z")

</div>

Hello, Using Elasticsearch, I would like to construct a query that buckets my results but also allows for pagination. Based on this requirement, it seems that I need to use a composite aggregation. However, I also woul…

---

## [Elasticsearch fails to return some documents](https://discuss.elastic.co/t/elasticsearch-fails-to-return-some-documents/131575)

<div class="topic-metadata">

**Author:** [@Sam1993](https://discuss.elastic.co/u/Sam1993)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 9:20am UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-return-some-documents/131575 "2018-05-18T09:20:54Z")

</div>

I have this data: {"\_index": "simple", "\_type": "motorcycle", "\_source": {"date": "2018-04-28T13:16", "price": 59900, "sellerName": "Lelles MC AB", "description": "KTM 690 Duke (Abs) M\\u00e4tarst\\u00e4llning: 450 mil F\\…

---

## [Detail questions regarding bucket and influencer scorings](https://discuss.elastic.co/t/detail-questions-regarding-bucket-and-influencer-scorings/131976)

<div class="topic-metadata">

**Author:** [@kaihil](https://discuss.elastic.co/u/kaihil)\
**Replies:** 2\
**Last updated:** [May 18, 2018, 8:58am UTC](https://discuss.elastic.co/t/detail-questions-regarding-bucket-and-influencer-scorings/131976 "2018-05-18T08:58:37Z")

</div>

Hi @Peter\_Harverson and @richcollier , I have two questions regarding your blog post on Machine Learning Anomaly Scoring and Elasticsearch - How it Works | Elastic Blog Question regarding influencer scoring Assume ha…

---

## [Cluster problem](https://discuss.elastic.co/t/cluster-problem/132433)

<div class="topic-metadata">

**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\
**Replies:** 3\
**Last updated:** [May 18, 2018, 8:25am UTC](https://discuss.elastic.co/t/cluster-problem/132433 "2018-05-18T08:25:23Z")

</div>

Hi, I wanted to create an elasticsearch cluster, this is the changes I made : cluster.name: network-logs node.name: network-1 network.host: 172.16.250.29 discovery.zen.ping.unicast.hosts: \["172.16.250.29"\] But the …

---

## [Validating query](https://discuss.elastic.co/t/validating-query/132415)

<div class="topic-metadata">

**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\
**Replies:** 1\
**Last updated:** [May 18, 2018, 8:09am UTC](https://discuss.elastic.co/t/validating-query/132415 "2018-05-18T08:09:11Z")

</div>

Hi All, I am new to RestHighLevelClient Java API, could someone please help me on writing code for validating final query before executing in elasticsearch. I came to know that ElasticSearch is providing ValidateAPI, bu…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1682)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1684)
