# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1698

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1699

---

## [VersionConflictEngineException error in elastic search while running in multi thread environment](https://discuss.elastic.co/t/versionconflictengineexception-error-in-elastic-search-while-running-in-multi-thread-environment/130693)

<div class="topic-metadata">

**Author:** [@rajibsoft](https://discuss.elastic.co/u/rajibsoft)\
**Replies:** 1\
**Last updated:** [May 5, 2018, 4:25am UTC](https://discuss.elastic.co/t/versionconflictengineexception-error-in-elastic-search-while-running-in-multi-thread-environment/130693 "2018-05-05T04:25:38Z")

</div>

We are getting the below error from elastic search while my application is running in a multi threaded environment and number of threads are almost 25: 2018-05-01 17:56:57,802 ERROR \[com.sicap.targetme.svc.utils.SimpleD…

---

## [Cannot install Elasticsearch service in server 2012 R2](https://discuss.elastic.co/t/cannot-install-elasticsearch-service-in-server-2012-r2/130595)

<div class="topic-metadata">

**Author:** [@peterch](https://discuss.elastic.co/u/peterch)\
**Replies:** 1\
**Last updated:** [May 5, 2018, 3:52am UTC](https://discuss.elastic.co/t/cannot-install-elasticsearch-service-in-server-2012-r2/130595 "2018-05-05T03:52:49Z")

</div>

Dear all, I tried to use powershell to install Elasticsearch service in server 2012 R2 but fail. It show following message. Please advice. Thanks Installing service : "elasticsearch-service-x64" Using JAVA\_HOME …

---

## [Query Movie Title Contain Episode Number](https://discuss.elastic.co/t/query-movie-title-contain-episode-number/130588)

<div class="topic-metadata">

**Author:** [@lhphuc210291](https://discuss.elastic.co/u/lhphuc210291)\
**Replies:** 1\
**Last updated:** [May 5, 2018, 3:50am UTC](https://discuss.elastic.co/t/query-movie-title-contain-episode-number/130588 "2018-05-05T03:50:36Z")

</div>

I wonder if this is the right place to show and discuss about my use case. If not, please help me to redirect this question to other right place. I'm using ES 5.2 for our searching feature in an social media website (so…

---

## [Best method of handling arbitrary document joins](https://discuss.elastic.co/t/best-method-of-handling-arbitrary-document-joins/130457)

<div class="topic-metadata">

**Author:** [@Erik\_Miller](https://discuss.elastic.co/u/Erik_Miller)\
**Replies:** 8\
**Last updated:** [May 4, 2018, 9:31pm UTC](https://discuss.elastic.co/t/best-method-of-handling-arbitrary-document-joins/130457 "2018-05-04T21:31:53Z")

</div>

I've done some research and everywhere I look it sounds like nosql dbs, including elastic search use application side joins. For ES I understand the nested/parent-child options and have both implemented in my existing s…

---

## [Scaling up for petabyte sizes?](https://discuss.elastic.co/t/scaling-up-for-petabyte-sizes/130047)

<div class="topic-metadata">

**Author:** [@lvic](https://discuss.elastic.co/u/lvic)\
**Replies:** 13\
**Last updated:** [May 4, 2018, 8:03pm UTC](https://discuss.elastic.co/t/scaling-up-for-petabyte-sizes/130047 "2018-05-04T20:03:03Z")

</div>

Had a performance problem: ES queries become really slow when dataset size grew to several petabytes... What approach can I use to scale up for larger datasets while preserving original data? For example: is it possible …

---

## [Elasticsearch cluster unable to recover (unavailable\_shards\_exception)](https://discuss.elastic.co/t/elasticsearch-cluster-unable-to-recover-unavailable-shards-exception/127049)

<div class="topic-metadata">

**Author:** [@Vincenzo\_Buonagura](https://discuss.elastic.co/u/Vincenzo_Buonagura)\
**Replies:** 3\
**Last updated:** [May 4, 2018, 5:40pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-unable-to-recover-unavailable-shards-exception/127049 "2018-05-04T17:40:29Z")

</div>

Hi all, we are using the ELK stack to have realtime log in our complex platform. During the night we had an issue with Logstash that was not able to write in Elasticsearch because one of the shards was unable to recove…

---

## [Does Elastic support six month date histogram?](https://discuss.elastic.co/t/does-elastic-support-six-month-date-histogram/130540)

<div class="topic-metadata">

**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\
**Replies:** 6\
**Last updated:** [May 4, 2018, 5:19pm UTC](https://discuss.elastic.co/t/does-elastic-support-six-month-date-histogram/130540 "2018-05-04T17:19:52Z")

</div>

We use ES 5.4. Per Date Histogram article, there does not seem to be an option to request six months histogram. Available expressions for interval: year (1y), quarter (1q), month (1M), week (1w), day (1d), hour (1h), …

---

## [409 Conflict on update\_by\_query consecutive calls](https://discuss.elastic.co/t/409-conflict-on-update-by-query-consecutive-calls/130667)

<div class="topic-metadata">

**Author:** [@Anton\_Garakh](https://discuss.elastic.co/u/Anton_Garakh)\
**Replies:** 0\
**Last updated:** [May 4, 2018, 5:03pm UTC](https://discuss.elastic.co/t/409-conflict-on-update-by-query-consecutive-calls/130667 "2018-05-04T17:03:20Z")

</div>

Hi guys Came to the point where I can't solve the problem myself.. I have to update big enough amount of documents and I have to do it in cycle. That's the reason why I have to perform consecutive update\_by\_query reque…

---

## [Painless Lambda expressions](https://discuss.elastic.co/t/painless-lambda-expressions/130339)

<div class="topic-metadata">

**Author:** [@Fullar\_Senjit](https://discuss.elastic.co/u/Fullar_Senjit)\
**Replies:** 3\
**Last updated:** [May 4, 2018, 4:34pm UTC](https://discuss.elastic.co/t/painless-lambda-expressions/130339 "2018-05-04T16:34:57Z")

</div>

I am trying to find some examples/documentation on how to use lambda expressions in painless. Any help ? thanks

---

## [Expanding Geo regions for matching](https://discuss.elastic.co/t/expanding-geo-regions-for-matching/129761)

<div class="topic-metadata">

**Author:** [@Amar\_R\_G](https://discuss.elastic.co/u/Amar_R_G)\
**Replies:** 1\
**Last updated:** [May 4, 2018, 3:41pm UTC](https://discuss.elastic.co/t/expanding-geo-regions-for-matching/129761 "2018-05-04T15:41:20Z")

</div>

I have a specific question related to geographical regions. I have a requirement where if I execute a search query with the string "Hotels in Asia". It should return documents that match this query but also should be abl…

---

## [Field geoip.location not created in index winlogbeat-\*](https://discuss.elastic.co/t/field-geoip-location-not-created-in-index-winlogbeat/129652)

<div class="topic-metadata">

**Author:** [@Edouard\_Fazenda](https://discuss.elastic.co/u/Edouard_Fazenda)\
**Replies:** 1\
**Last updated:** [May 4, 2018, 3:23pm UTC](https://discuss.elastic.co/t/field-geoip-location-not-created-in-index-winlogbeat/129652 "2018-05-04T15:23:44Z")

</div>

Dear Community, I have put in place in my ELK Stack the collect of Windows Security Logs with the beat agent winlogbeat, this is working but now i want to create a coordinate or region map using geoip, I put in my logs…

---

## [ES-Curator install from source](https://discuss.elastic.co/t/es-curator-install-from-source/130571)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 1\
**Last updated:** [May 4, 2018, 3:14pm UTC](https://discuss.elastic.co/t/es-curator-install-from-source/130571 "2018-05-04T15:14:06Z")

</div>

Hi, I haven't installed ES but I run from the extracted directory. Now I ma facing problem while installing curator. When I perform this step it gives me error in installation and keep on searching ES version. because…

---

## [Reindex performance](https://discuss.elastic.co/t/reindex-performance/129691)

<div class="topic-metadata">

**Author:** [@Derrick](https://discuss.elastic.co/u/Derrick)\
**Replies:** 1\
**Last updated:** [May 4, 2018, 3:07pm UTC](https://discuss.elastic.co/t/reindex-performance/129691 "2018-05-04T15:07:48Z")

</div>

Hi, I am using reindex api to copy data(300K records), but it takes long time(several hours). any idea? { "source": { "index": "trades", "type": "trade", "size": 1000 }, "dest": { "index": "trades\_day0", "vers…

---

## [Sub agg depending on length of results](https://discuss.elastic.co/t/sub-agg-depending-on-length-of-results/129662)

<div class="topic-metadata">

**Author:** [@Islam\_Elshobokshy](https://discuss.elastic.co/u/Islam_Elshobokshy)\
**Replies:** 1\
**Last updated:** [May 4, 2018, 3:06pm UTC](https://discuss.elastic.co/t/sub-agg-depending-on-length-of-results/129662 "2018-05-04T15:06:41Z")

</div>

Hello. I have several fields, and I want to put each one as a sub agg of another one. Say A-\>subAgg(B)-\>subAgg(C)-\>subAgg(D) But I want them to be put depending on their number of results. If for example D has the most…

---

## [Deleting all records with computer\_name: xyz](https://discuss.elastic.co/t/deleting-all-records-with-computer-name-xyz/129635)

<div class="topic-metadata">

**Author:** [@L33T](https://discuss.elastic.co/u/L33T)\
**Replies:** 1\
**Last updated:** [May 4, 2018, 3:04pm UTC](https://discuss.elastic.co/t/deleting-all-records-with-computer-name-xyz/129635 "2018-05-04T15:04:31Z")

</div>

Hi, I think i have alot of duplicate data in my indexes due to a re-install of elastic. Can anyone help me delete all records with a specific computer\_name? Cheers,

---

## [Hot-Warm architecture - ES high CPU usage](https://discuss.elastic.co/t/hot-warm-architecture-es-high-cpu-usage/130064)

<div class="topic-metadata">

**Author:** [@cactus](https://discuss.elastic.co/u/cactus)\
**Replies:** 2\
**Last updated:** [May 4, 2018, 3:02pm UTC](https://discuss.elastic.co/t/hot-warm-architecture-es-high-cpu-usage/130064 "2018-05-04T15:02:13Z")

</div>

Hello, We are using ES for logging, logs are coming to ES in real time. To speed up logs searching and total logs capacity we using ES hot-warm architecture: 6 hot nodes (4 vCPUs, 26 GB memory, 500GB ssd ) 6 warm nod…

---

## [File provider discovery plugin not reacting to changes - 6.2.2](https://discuss.elastic.co/t/file-provider-discovery-plugin-not-reacting-to-changes-6-2-2/129868)

<div class="topic-metadata">

**Author:** [@vramakrishnan](https://discuss.elastic.co/u/vramakrishnan)\
**Replies:** 1\
**Last updated:** [May 4, 2018, 3:01pm UTC](https://discuss.elastic.co/t/file-provider-discovery-plugin-not-reacting-to-changes-6-2-2/129868 "2018-05-04T15:01:00Z")

</div>

I am using file provider discovery plugin to discover & setup my elastic cluster. It works nice intially when unicast\_hosts.txt file is update with nodes as we discover and cluster is formed. root@node1 elasticsearch\]#…

---

## [Only keep the most recent line when the id is the same](https://discuss.elastic.co/t/only-keep-the-most-recent-line-when-the-id-is-the-same/130640)

<div class="topic-metadata">

**Author:** [@Pierre2](https://discuss.elastic.co/u/Pierre2)\
**Replies:** 3\
**Last updated:** [May 4, 2018, 2:25pm UTC](https://discuss.elastic.co/t/only-keep-the-most-recent-line-when-the-id-is-the-same/130640 "2018-05-04T14:25:01Z")

</div>

Hello, My logs lines can have the same ID. If it's the case I want to keep only the most recent line of them. For exemple if I have 3 lines with these fields : ID : 2568 | a : toto | b : tata | @timestamp : 4 may 201…

---

## [Loading sample Database (json file) into the cluster](https://discuss.elastic.co/t/loading-sample-database-json-file-into-the-cluster/130617)

<div class="topic-metadata">

**Author:** [@Vanyali](https://discuss.elastic.co/u/Vanyali)\
**Replies:** 2\
**Last updated:** [May 4, 2018, 1:48pm UTC](https://discuss.elastic.co/t/loading-sample-database-json-file-into-the-cluster/130617 "2018-05-04T13:48:15Z")

</div>

Hello Guys. Pretty new to elasticsearch ... I following this tutorial to learn the basics: Elasticsearch Reference - Exploring your data. I cannot load that document into elasticsearch. I am using prompt command line…

---

## [Elasticsearch with log data and elastic stack](https://discuss.elastic.co/t/elasticsearch-with-log-data-and-elastic-stack/130426)

<div class="topic-metadata">

**Author:** [@Ramyaa](https://discuss.elastic.co/u/Ramyaa)\
**Replies:** 7\
**Last updated:** [May 4, 2018, 1:41pm UTC](https://discuss.elastic.co/t/elasticsearch-with-log-data-and-elastic-stack/130426 "2018-05-04T13:41:46Z")

</div>

Hi, Am using cloud version of Elastic for ingesting log data into my Elasticsearch cluster, What is the method or which Elastic stack to use to ingest data into the cluster? Kind Regards, Ramya

---

## [Index.max\_result\_window - not working](https://discuss.elastic.co/t/index-max-result-window-not-working/130509)

<div class="topic-metadata">

**Author:** [@pamamolf](https://discuss.elastic.co/u/pamamolf)\
**Replies:** 7\
**Last updated:** [May 4, 2018, 1:39pm UTC](https://discuss.elastic.co/t/index-max-result-window-not-working/130509 "2018-05-04T13:39:29Z")

</div>

Hello I am getting this error on latest version of elastic: Result window is too large, from + size must be less than or equal to: \[10000\] but was \[2039925\]. so i was try to add at the elasticsearch.yml configuration …

---

## [Snapshot elasticserach to Azure storage account fail](https://discuss.elastic.co/t/snapshot-elasticserach-to-azure-storage-account-fail/130458)

<div class="topic-metadata">

**Author:** [@Shlomo\_Prayev](https://discuss.elastic.co/u/Shlomo_Prayev)\
**Replies:** 1\
**Last updated:** [May 4, 2018, 1:23pm UTC](https://discuss.elastic.co/t/snapshot-elasticserach-to-azure-storage-account-fail/130458 "2018-05-04T13:23:41Z")

</div>

About two months ago the backs of our elasticsearch began to fail. The error we received is: IOException \[com.microsoft.azure.storage.StorageException: The server is busy.\]; We backed up to 4 storage accounts and thou…

---

## [Terms aggregation ignoring analyzers?](https://discuss.elastic.co/t/terms-aggregation-ignoring-analyzers/130455)

<div class="topic-metadata">

**Author:** [@randomuser](https://discuss.elastic.co/u/randomuser)\
**Replies:** 3\
**Last updated:** [May 4, 2018, 1:14pm UTC](https://discuss.elastic.co/t/terms-aggregation-ignoring-analyzers/130455 "2018-05-04T13:14:39Z")

</div>

Hello guys, I'm trying to run a simple terms aggregation: GET test3/\_search { "aggs" : { "agg\_name" : { "terms" : { "field" : "words" } } }, "size" : 0…

---

## [Several should inside a must?](https://discuss.elastic.co/t/several-should-inside-a-must/130620)

<div class="topic-metadata">

**Author:** [@GaldanM](https://discuss.elastic.co/u/GaldanM)\
**Replies:** 3\
**Last updated:** [May 4, 2018, 1:10pm UTC](https://discuss.elastic.co/t/several-should-inside-a-must/130620 "2018-05-04T13:10:15Z")

</div>

Hello there, I'm pretty new to the ES stack and I'm actually replacing a Mongo text query by ES. I need some help to build a query : I need to search in text indexed fields of an index BUT I also want to be able to filt…

---

## [Multi Match Query for multiple words with operator AND](https://discuss.elastic.co/t/multi-match-query-for-multiple-words-with-operator-and/130631)

<div class="topic-metadata">

**Author:** [@pafheuch](https://discuss.elastic.co/u/pafheuch)\
**Replies:** 0\
**Last updated:** [May 4, 2018, 12:54pm UTC](https://discuss.elastic.co/t/multi-match-query-for-multiple-words-with-operator-and/130631 "2018-05-04T12:54:00Z")

</div>

My scenario is that in my application there is an inline search just like the one we have here on Udemy site's header bar and the user can type more than one word in it. Now, I want to use that multi word search text ent…

---

## [Search by multiplier hops](https://discuss.elastic.co/t/search-by-multiplier-hops/130124)

<div class="topic-metadata">

**Author:** [@Ben\_B](https://discuss.elastic.co/u/Ben_B)\
**Replies:** 3\
**Last updated:** [May 4, 2018, 12:23pm UTC](https://discuss.elastic.co/t/search-by-multiplier-hops/130124 "2018-05-04T12:23:31Z")

</div>

Hi, First time poster! Please excuse my newbie question, I've spent some time googling but could not come up with much. My question is: If I wanted to index a service provided by the minute (by different providers): F…

---

## [Strange boundary of extended\_bounds in histogram aggregation](https://discuss.elastic.co/t/strange-boundary-of-extended-bounds-in-histogram-aggregation/130616)

<div class="topic-metadata">

**Author:** [@xchen](https://discuss.elastic.co/u/xchen)\
**Replies:** 0\
**Last updated:** [May 4, 2018, 11:26am UTC](https://discuss.elastic.co/t/strange-boundary-of-extended-bounds-in-histogram-aggregation/130616 "2018-05-04T11:26:59Z")

</div>

I have the histogram query like following: curl -XPOST 'localhost:9200/myindex/data/\_search?pretty' -H 'Content-Type: application/json' -d' { "query" : { "bool" : { "must" : \[ { "term" : { …

---

## [Different documents types in same index](https://discuss.elastic.co/t/different-documents-types-in-same-index/129594)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 5\
**Last updated:** [May 4, 2018, 11:13am UTC](https://discuss.elastic.co/t/different-documents-types-in-same-index/129594 "2018-05-04T11:13:00Z")

</div>

in 6.0 \_type is discontinued, but we can use custom field like "type" to index different types of objects in same index and then filter by that. Is there any downside to this approach and store different documents types…

---

## [Create new indices](https://discuss.elastic.co/t/create-new-indices/130597)

<div class="topic-metadata">

**Author:** [@flochon](https://discuss.elastic.co/u/flochon)\
**Replies:** 7\
**Last updated:** [May 4, 2018, 11:06am UTC](https://discuss.elastic.co/t/create-new-indices/130597 "2018-05-04T11:06:47Z")

</div>

Hello, I want create one indice by document type in my cluster but I don't how to make that. I find a little tuto or some ideas to begin.

---

## [Problem with : curl -XGET ‘localhost:9200/logstash-2018.05.03/\_search?pretty&q=response=200’](https://discuss.elastic.co/t/problem-with-curl-xget-localhost-9200-logstash-2018-05-03-search-pretty-q-response-200/130587)

<div class="topic-metadata">

**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\
**Replies:** 3\
**Last updated:** [May 4, 2018, 10:15am UTC](https://discuss.elastic.co/t/problem-with-curl-xget-localhost-9200-logstash-2018-05-03-search-pretty-q-response-200/130587 "2018-05-04T10:15:51Z")

</div>

I had this error when i try with other logs ( the test was successfull with logtash-totu ) : { "error" : { "root\_cause" : \[ { "type" : "index\_not\_found\_exception", "reason" : "no such index", "resource.type" : "in…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1697)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1699)
