# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1700

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1701

---

## [Elasticsearch range query](https://discuss.elastic.co/t/elasticsearch-range-query/130419)

<div class="topic-metadata">

**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\
**Replies:** 2\
**Last updated:** [May 3, 2018, 10:50am UTC](https://discuss.elastic.co/t/elasticsearch-range-query/130419 "2018-05-03T10:50:55Z")

</div>

Hi All, I have a problem while searching records using range query in the below format, { "query": { "range" : { "identification.numberOfEmployees.value" : { "gt" : "5", "lt" : "10" } } } } When I am trying t…

---

## [Query functionality of Elasticsearch](https://discuss.elastic.co/t/query-functionality-of-elasticsearch/130405)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 3\
**Last updated:** [May 3, 2018, 9:09am UTC](https://discuss.elastic.co/t/query-functionality-of-elasticsearch/130405 "2018-05-03T09:09:20Z")

</div>

Hi all.... Here what i am trying is i have created two indices(index1 and index2) each index holds different data in it, and i have assigned same alias(alise1) name for both the indices. Now Lets say if I have to quer…

---

## [One single node can support 80TB data to search?](https://discuss.elastic.co/t/one-single-node-can-support-80tb-data-to-search/130374)

<div class="topic-metadata">

**Author:** [@vincentduan](https://discuss.elastic.co/u/vincentduan)\
**Replies:** 2\
**Last updated:** [May 3, 2018, 8:35am UTC](https://discuss.elastic.co/t/one-single-node-can-support-80tb-data-to-search/130374 "2018-05-03T08:35:01Z")

</div>

My cluster has 3 master nodes and 6 data nodes. Each data node has 64GB Memory, 24 Cores and 80TB Disks. I wonder know it is ok if my data nodes is full of disk (about 80TB/per node). What about profermence when the d…

---

## [Threadpool.index.queue\_size overflow](https://discuss.elastic.co/t/threadpool-index-queue-size-overflow/130398)

<div class="topic-metadata">

**Author:** [@anoopvalluthadam](https://discuss.elastic.co/u/anoopvalluthadam)\
**Replies:** 0\
**Last updated:** [May 3, 2018, 8:24am UTC](https://discuss.elastic.co/t/threadpool-index-queue-size-overflow/130398 "2018-05-03T08:24:02Z")

</div>

Node configuration : 61.0 GiB 8 vCPUs and 8 nodes 3 master nodes and 5 data nodes thread\_pool.search.queue\_size: 1000 we have almost 300+ indices and 1 Percolator index. Per day indexing is 400K and this same 400K wil…

---

## [Instance of ResourceWatcherService](https://discuss.elastic.co/t/instance-of-resourcewatcherservice/130285)

<div class="topic-metadata">

**Author:** [@Tobsucht](https://discuss.elastic.co/u/Tobsucht)\
**Replies:** 2\
**Last updated:** [May 3, 2018, 8:08am UTC](https://discuss.elastic.co/t/instance-of-resourcewatcherservice/130285 "2018-05-03T08:08:17Z")

</div>

I dont' get it: How do I get an instance of the ResourceWatcherService without using the @Inject annotation? I'm trying to implement updateable search-time synonyms and need an instance for the service. How can I obtain …

---

## [Average shard size](https://discuss.elastic.co/t/average-shard-size/130365)

<div class="topic-metadata">

**Author:** [@tsangdl](https://discuss.elastic.co/u/tsangdl)\
**Replies:** 3\
**Last updated:** [May 3, 2018, 7:34am UTC](https://discuss.elastic.co/t/average-shard-size/130365 "2018-05-03T07:34:31Z")

</div>

Hello learned ladies and gentlemen, I am trying to get a feel for a good average shard size. I have a 6 node cluster 3 nodes are master, data, ingest 3 nodes are data Each node has 64GB memory and 30GB java heap siz…

---

## [Merge indexes](https://discuss.elastic.co/t/merge-indexes/130254)

<div class="topic-metadata">

**Author:** [@Pierre2](https://discuss.elastic.co/u/Pierre2)\
**Replies:** 4\
**Last updated:** [May 3, 2018, 7:27am UTC](https://discuss.elastic.co/t/merge-indexes/130254 "2018-05-03T07:27:50Z")

</div>

Hello, I have got two types of log files that contains differents information about calls so I got two indexes. The common field between the two files types is the call id that is unique. I want to create a new index t…

---

## [Two elasticsearch server configaration](https://discuss.elastic.co/t/two-elasticsearch-server-configaration/130375)

<div class="topic-metadata">

**Author:** [@Khondekar\_Wamik\_Hoss](https://discuss.elastic.co/u/Khondekar_Wamik_Hoss)\
**Replies:** 1\
**Last updated:** [May 3, 2018, 6:47am UTC](https://discuss.elastic.co/t/two-elasticsearch-server-configaration/130375 "2018-05-03T06:47:31Z")

</div>

Hi All, We are having one elasticsearch server and its app mount point is filled up we have another server we want to use that server to use elasticsearch how to configure the the same.

---

## [Class\_cast\_exception for index pattern that is created based on two index](https://discuss.elastic.co/t/class-cast-exception-for-index-pattern-that-is-created-based-on-two-index/130370)

<div class="topic-metadata">

**Author:** [@sjain135](https://discuss.elastic.co/u/sjain135)\
**Replies:** 0\
**Last updated:** [May 3, 2018, 6:06am UTC](https://discuss.elastic.co/t/class-cast-exception-for-index-pattern-that-is-created-based-on-two-index/130370 "2018-05-03T06:06:41Z")

</div>

I have created the index pattern as df3df2\* on two index(df3df2\_snap and df3df2\_raw). The data type mapping of the fields are String and Float. When I am looking for data of index df3df2\*, i am getting error as Error: R…

---

## [Keyword field that is automatically appended to text field?](https://discuss.elastic.co/t/keyword-field-that-is-automatically-appended-to-text-field/130313)

<div class="topic-metadata">

**Author:** [@David9](https://discuss.elastic.co/u/David9)\
**Replies:** 3\
**Last updated:** [May 3, 2018, 5:26am UTC](https://discuss.elastic.co/t/keyword-field-that-is-automatically-appended-to-text-field/130313 "2018-05-03T05:26:56Z")

</div>

We're relatively new to ES and discovered that after indexing some data, fields that are of type text now have a sub-field 'keyword' of type 'keyword'. Is this there to allow aggregation or other searches that are not a…

---

## [Active Directory Role Mapping in the role\_mapping.yml file](https://discuss.elastic.co/t/active-directory-role-mapping-in-the-role-mapping-yml-file/130357)

<div class="topic-metadata">

**Author:** [@stargate](https://discuss.elastic.co/u/stargate)\
**Replies:** 1\
**Last updated:** [May 3, 2018, 5:24am UTC](https://discuss.elastic.co/t/active-directory-role-mapping-in-the-role-mapping-yml-file/130357 "2018-05-03T05:24:01Z")

</div>

Hi, I am trying to configure and setup Active Directory(AD) groups in the role\_mapping.yml file for e.g. as shown below: monitoring: "CN=Demo User1,OU=InformationTechnology,OU=Users,DC=example,DC=com" "CN=ESSuperAdmi…

---

## [How can I reindex monthly indexes to weekly indexes](https://discuss.elastic.co/t/how-can-i-reindex-monthly-indexes-to-weekly-indexes/129867)

<div class="topic-metadata">

**Author:** [@kriket](https://discuss.elastic.co/u/kriket)\
**Replies:** 2\
**Last updated:** [May 3, 2018, 4:56am UTC](https://discuss.elastic.co/t/how-can-i-reindex-monthly-indexes-to-weekly-indexes/129867 "2018-05-03T04:56:07Z")

</div>

We have currently monthly indexes in the following format fabricxxx-access-log-monthly-2018.01 .. .. fabricxxx-access-log-monthly-2018.04 We have decided to move away from monthly indexes to weekly indexes due to da…

---

## [CRLF injection issue (Improper Output Neutralization for Logs) /src/lib/connectors/xhr.js 76](https://discuss.elastic.co/t/crlf-injection-issue-improper-output-neutralization-for-logs-src-lib-connectors-xhr-js-76/130325)

<div class="topic-metadata">

**Author:** [@smaeung](https://discuss.elastic.co/u/smaeung)\
**Replies:** 3\
**Last updated:** [May 3, 2018, 4:01am UTC](https://discuss.elastic.co/t/crlf-injection-issue-improper-output-neutralization-for-logs-src-lib-connectors-xhr-js-76/130325 "2018-05-03T04:01:38Z")

</div>

Hi, all we used a node project that used for elasticsearch javascript pacakge ( 14.2.2) which is the latest version. We have got security audit report by a security firm that based on elasticsearch (14.2.2) for javasc…

---

## [Search\_analyzer](https://discuss.elastic.co/t/search-analyzer/130348)

<div class="topic-metadata">

**Author:** [@Johnnycc1](https://discuss.elastic.co/u/Johnnycc1)\
**Replies:** 7\
**Last updated:** [May 3, 2018, 3:58am UTC](https://discuss.elastic.co/t/search-analyzer/130348 "2018-05-03T03:58:54Z")

</div>

Heya, So I am trying to follow the guide on this page in relation to setting a different analyser for index and search time. However I want to set the standard analyser for index and set an edge n-gram analyser for the…

---

## [How to use Script as Stored Procedure?](https://discuss.elastic.co/t/how-to-use-script-as-stored-procedure/129923)

<div class="topic-metadata">

**Author:** [@GDV](https://discuss.elastic.co/u/GDV)\
**Replies:** 9\
**Last updated:** [May 3, 2018, 3:55am UTC](https://discuss.elastic.co/t/how-to-use-script-as-stored-procedure/129923 "2018-05-03T03:55:12Z")

</div>

Hi, All! I'm novice in ES. I've read about scripts (painless) and want to use it as stored procedures in a RDBMS. It's possible, right? I want receive some docs by call my script (it should does some selection) It's i…

---

## [Covariant type search in NEST v6.x and Elasticsearch v6.x](https://discuss.elastic.co/t/covariant-type-search-in-nest-v6-x-and-elasticsearch-v6-x/130355)

<div class="topic-metadata">

**Author:** [@nmartins](https://discuss.elastic.co/u/nmartins)\
**Replies:** 0\
**Last updated:** [May 3, 2018, 3:42am UTC](https://discuss.elastic.co/t/covariant-type-search-in-nest-v6-x-and-elasticsearch-v6-x/130355 "2018-05-03T03:42:10Z")

</div>

Hi, We're trying to upgrade our cluster from v5 to v6 - doing so we're also upgrading to v6 for our NEST/Elasticsearch.net libraries. Since types are now removed (or will be removed in v7) - I'm trying to use the TypeN…

---

## [Is it safe to run Elasticsearch 5.6 with OpenJDK 10?](https://discuss.elastic.co/t/is-it-safe-to-run-elasticsearch-5-6-with-openjdk-10/130329)

<div class="topic-metadata">

**Author:** [@Jong\_Kim](https://discuss.elastic.co/u/Jong_Kim)\
**Replies:** 4\
**Last updated:** [May 3, 2018, 2:07am UTC](https://discuss.elastic.co/t/is-it-safe-to-run-elasticsearch-5-6-with-openjdk-10/130329 "2018-05-03T02:07:14Z")

</div>

I have an application that uses Elasticsearch 5.5.1 and Oracle Java 8. We plan to upgrade to Elasticsearch 5.6.7 and OpenJDK 10 soon. To check compatibility, I ran ES 5.5.1 with OpenJDK 10, and the startup failed due to…

---

## [Timeline query on timestamped indices](https://discuss.elastic.co/t/timeline-query-on-timestamped-indices/129328)

<div class="topic-metadata">

**Author:** [@Srinath\_C](https://discuss.elastic.co/u/Srinath_C)\
**Replies:** 6\
**Last updated:** [May 3, 2018, 1:39am UTC](https://discuss.elastic.co/t/timeline-query-on-timestamped-indices/129328 "2018-05-03T01:39:33Z")

</div>

Hi, We write data into timestamped indices of the form {prefix}\_{yyyyMMdd}. The "timestamp" field in the documents is used to write into one of these timestamp indices. For a query that spans over longer intervals of t…

---

## [Any settings to limit the max number of buckets?](https://discuss.elastic.co/t/any-settings-to-limit-the-max-number-of-buckets/130331)

<div class="topic-metadata">

**Author:** [@suanmeiguo](https://discuss.elastic.co/u/suanmeiguo)\
**Replies:** 2\
**Last updated:** [May 3, 2018, 12:22am UTC](https://discuss.elastic.co/t/any-settings-to-limit-the-max-number-of-buckets/130331 "2018-05-03T00:22:10Z")

</div>

I have a elasticsearch cluster and kibana dashboard. Kibana is used by external user I don't have control with. They sometimes ran very heavy aggregation query that made elasticsearch ran out of jvm heap space. So is th…

---

## [Correlation between events](https://discuss.elastic.co/t/correlation-between-events/128789)

<div class="topic-metadata">

**Author:** [@Sylvain-69](https://discuss.elastic.co/u/Sylvain-69)\
**Replies:** 2\
**Last updated:** [May 3, 2018, 12:12am UTC](https://discuss.elastic.co/t/correlation-between-events/128789 "2018-05-03T00:12:58Z")

</div>

Hello everybody ! Let say I send into elasticsearch those events : Fri 2018/04/20 03:04:09 gammu-smsd\[29236\]: New message to send: 59389 Fri 2018/04/20 03:04:09 gammu-smsd\[29236\]: Message without SMSC, assuming you wa…

---

## [Send sensor data to ElasticSearch/Kibana on Raspberry Pi LAN?](https://discuss.elastic.co/t/send-sensor-data-to-elasticsearch-kibana-on-raspberry-pi-lan/130336)

<div class="topic-metadata">

**Author:** [@fullmetal7777](https://discuss.elastic.co/u/fullmetal7777)\
**Replies:** 13\
**Last updated:** [May 3, 2018, 12:07am UTC](https://discuss.elastic.co/t/send-sensor-data-to-elasticsearch-kibana-on-raspberry-pi-lan/130336 "2018-05-03T00:07:09Z")

</div>

Is it possible to send sensor data from an ESP32 to a Raspberry Pi running ELK, all on a LAN? I'm also wondering if we can then send data from the ELK interface back to that ESP32. I've seen videos where were sensor data…

---

## [Why is this scripted metric aggregation query not working?](https://discuss.elastic.co/t/why-is-this-scripted-metric-aggregation-query-not-working/130048)

<div class="topic-metadata">

**Author:** [@elasticuser1](https://discuss.elastic.co/u/elasticuser1)\
**Replies:** 5\
**Last updated:** [May 2, 2018, 10:53pm UTC](https://discuss.elastic.co/t/why-is-this-scripted-metric-aggregation-query-not-working/130048 "2018-05-02T22:53:53Z")

</div>

PUT /ledger/\_doc/1 { "type":"sale" } PUT /ledgeramt/\_doc/1 { "amount":1000 } POST /ledger,ledgeramt/\_search?size=0 { "query" : { "match\_all" : {} }, "aggs": { "profit": { "scripted\_metric": { "init\_scrip…

---

## [SQL for nested objects in 6.X](https://discuss.elastic.co/t/sql-for-nested-objects-in-6-x/130330)

<div class="topic-metadata">

**Author:** [@anp](https://discuss.elastic.co/u/anp)\
**Replies:** 0\
**Last updated:** [May 2, 2018, 10:22pm UTC](https://discuss.elastic.co/t/sql-for-nested-objects-in-6-x/130330 "2018-05-02T22:22:22Z")

</div>

How will nested objects be supported in the upcoming 6.X SQL functionality?

---

## [Bootstrap checks failed - no specifics](https://discuss.elastic.co/t/bootstrap-checks-failed-no-specifics/130295)

<div class="topic-metadata">

**Author:** [@Josh\_McDonald](https://discuss.elastic.co/u/Josh_McDonald)\
**Replies:** 1\
**Last updated:** [May 2, 2018, 9:01pm UTC](https://discuss.elastic.co/t/bootstrap-checks-failed-no-specifics/130295 "2018-05-02T21:01:26Z")

</div>

Environment: ES 6.2.4 (installed via apt-get) Ubuntu 16.04 I'm trying to start ES bound to the proper IP in effort to follow the Getting Started Guide for Filebeats. I'm attempting to send syslog information from anot…

---

## [Problem snapshot to azure storage accounts](https://discuss.elastic.co/t/problem-snapshot-to-azure-storage-accounts/130273)

<div class="topic-metadata">

**Author:** [@Shlomo\_Prayev](https://discuss.elastic.co/u/Shlomo_Prayev)\
**Replies:** 0\
**Last updated:** [May 2, 2018, 2:51pm UTC](https://discuss.elastic.co/t/problem-snapshot-to-azure-storage-accounts/130273 "2018-05-02T14:51:33Z")

</div>

About two months ago, the elastic backups began to fail. The error I get is IOException \[com.microsoft.azure.storage.StorageException: The server is busy.\]; I'm backing up to 8 storage accounts I spoke with Azure's su…

---

## [Query with Bool Must and Contain String](https://discuss.elastic.co/t/query-with-bool-must-and-contain-string/130311)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 1\
**Last updated:** [May 2, 2018, 7:24pm UTC](https://discuss.elastic.co/t/query-with-bool-must-and-contain-string/130311 "2018-05-02T19:24:01Z")

</div>

How can I create a JSON that returns the results in this type of condition? User\_ID = 1234 AND Type\_Search IN ('ALL', 'RESTRICT') AND ( title contains 'example string' OR content contains 'example string' ) I creat…

---

## [How to handle ElasticSearch RestHighLevelClient exceptions properly?](https://discuss.elastic.co/t/how-to-handle-elasticsearch-resthighlevelclient-exceptions-properly/129502)

<div class="topic-metadata">

**Author:** [@cdekker](https://discuss.elastic.co/u/cdekker)\
**Replies:** 1\
**Last updated:** [May 2, 2018, 7:21pm UTC](https://discuss.elastic.co/t/how-to-handle-elasticsearch-resthighlevelclient-exceptions-properly/129502 "2018-05-02T19:21:53Z")

</div>

What is the proper way to handle Exceptions when dealing with the ElasticSearch RestHighLevelClient introduced in 5.0? I am currently working with 6.1. There have been some discussions on whether to use checked or unche…

---

## [How to do upsert in ElasticSearch 5.3.2 using Spark Structured Streaming 2.3.0?](https://discuss.elastic.co/t/how-to-do-upsert-in-elasticsearch-5-3-2-using-spark-structured-streaming-2-3-0/130103)

<div class="topic-metadata">

**Author:** [@kant\_kodali](https://discuss.elastic.co/u/kant_kodali)\
**Replies:** 4\
**Last updated:** [May 2, 2018, 6:58pm UTC](https://discuss.elastic.co/t/how-to-do-upsert-in-elasticsearch-5-3-2-using-spark-structured-streaming-2-3-0/130103 "2018-05-02T18:58:02Z")

</div>

Hi, I am wondering How to do upsert in ElasticSearch 5.3.2 using Spark Structured Streaming 2.3.0? other words, I have a streaming dataframe where each row is a json string now I want to write it to elastic search howev…

---

## [Difference between Lucene Standard Analyzer and Elastic Search Standard Analyzer](https://discuss.elastic.co/t/difference-between-lucene-standard-analyzer-and-elastic-search-standard-analyzer/130301)

<div class="topic-metadata">

**Author:** [@gauravbhatt13](https://discuss.elastic.co/u/gauravbhatt13)\
**Replies:** 0\
**Last updated:** [May 2, 2018, 4:45pm UTC](https://discuss.elastic.co/t/difference-between-lucene-standard-analyzer-and-elastic-search-standard-analyzer/130301 "2018-05-02T16:45:02Z")

</div>

Lucene standard analyzer is removing stop words but in Elasticsearch when we use standard analyzer, it is not removing stop words unless we give them explicitly. Isn't it unexpected?

---

## ["Contains" query in a numberic/date field](https://discuss.elastic.co/t/contains-query-in-a-numberic-date-field/130298)

<div class="topic-metadata">

**Author:** [@wifly](https://discuss.elastic.co/u/wifly)\
**Replies:** 1\
**Last updated:** [May 2, 2018, 4:31pm UTC](https://discuss.elastic.co/t/contains-query-in-a-numberic-date-field/130298 "2018-05-02T16:31:07Z")

</div>

Hi all, I'm trying to perform a contains query in a field which is numeric, is that possible? Let's say for example .../\_mapping "index": { "mappings": { "element": { "properties": { "name": { "type": …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1699)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1701)
