# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1704 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1705 --- ## [Elasticsearch match\_all default sort?](https://discuss.elastic.co/t/elasticsearch-match-all-default-sort/129910)
**Author:** [@Atif\_Abdul\_Ghafoor](https://discuss.elastic.co/u/Atif_Abdul_Ghafoor)\ **Replies:** 8\ **Last updated:** [April 29, 2018, 12:35pm UTC](https://discuss.elastic.co/t/elasticsearch-match-all-default-sort/129910 "2018-04-29T12:35:27Z")
How elaticsearch sort in case of match\_all query when the \_score is 1 of all the documents available in an index? --- ## [\[SOLVED\] X-Pack 6.2 install Fatal Error: ace.require is not a function](https://discuss.elastic.co/t/solved-x-pack-6-2-install-fatal-error-ace-require-is-not-a-function/127890)
**Author:** [@AlphaJosh](https://discuss.elastic.co/u/AlphaJosh)\ **Replies:** 8\ **Last updated:** [April 29, 2018, 12:35pm UTC](https://discuss.elastic.co/t/solved-x-pack-6-2-install-fatal-error-ace-require-is-not-a-function/127890 "2018-04-29T12:35:10Z")
Uncaught TypeError: ace.require is not a function (http://localhost:5601/bundles/kibana.bundle.js?v=16602:1) I am struggling to get X-Pack 6.2.3 running a single node on Windows 10 and Windows 2012. I have installed th… --- ## [GET request with Body](https://discuss.elastic.co/t/get-request-with-body/129949)
**Author:** [@Atif\_Abdul\_Ghafoor](https://discuss.elastic.co/u/Atif_Abdul_Ghafoor)\ **Replies:** 1\ **Last updated:** [April 29, 2018, 9:55am UTC](https://discuss.elastic.co/t/get-request-with-body/129949 "2018-04-29T09:55:03Z")
In Elasticsearch one can use GET request with a request body. but as per my information Get request with a body doesn't have any semantics. Does Elasticsearch parse the body in the URL? If it does, How Elasticsearch pa… --- ## [Elasticsearch, Kibana ECONNRESET, socket hang up](https://discuss.elastic.co/t/elasticsearch-kibana-econnreset-socket-hang-up/129946)
**Author:** [@hadi](https://discuss.elastic.co/u/hadi)\ **Replies:** 0\ **Last updated:** [April 29, 2018, 8:04am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-econnreset-socket-hang-up/129946 "2018-04-29T08:04:30Z")
Hello everyone, I would be great if you help me with this issue. Kibana was working fine till last week but recently I am getting this error on my Kibana web interface. \[kibana\] After restarting elasticsearch on the … --- ## [Unable to start elasticsearch after installed searchguard](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-installed-searchguard/129944)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 1\ **Last updated:** [April 29, 2018, 7:55am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-installed-searchguard/129944 "2018-04-29T07:55:55Z")
Hi All, I have installed Elasticsearch version 5.6.4 and also I have installed searchguard for securing the cluster. But now I am unable to start the elasticsearch and below is the response I am getting in console and t… --- ## [How to reassign the blocks](https://discuss.elastic.co/t/how-to-reassign-the-blocks/129078)
**Author:** [@anil\_kumar\_Samantula](https://discuss.elastic.co/u/anil_kumar_Samantula)\ **Replies:** 2\ **Last updated:** [April 29, 2018, 6:26am UTC](https://discuss.elastic.co/t/how-to-reassign-the-blocks/129078 "2018-04-29T06:26:54Z")
Hi , Recently we created 3 nodes in a cluster because of some reason we want to remove those nodes and bring our elasticsearch to old state (without nodes). how to do this by not loosing any data? Thanks in Advance. --- ## [Multiple data nodes to one data node (production to dev setup)](https://discuss.elastic.co/t/multiple-data-nodes-to-one-data-node-production-to-dev-setup/129935)
**Author:** [@subrato](https://discuss.elastic.co/u/subrato)\ **Replies:** 4\ **Last updated:** [April 29, 2018, 5:37am UTC](https://discuss.elastic.co/t/multiple-data-nodes-to-one-data-node-production-to-dev-setup/129935 "2018-04-29T05:37:31Z")
I have setup 3 data nodes and 3 master nodes, imported all the data that I need. I want to back up all that data and copy it to dev environment. What would be the best way to get this done? root@acgrcmaster-0:/var/lib# … --- ## [Elastic 6.x - Get next document ID in index based on date/time?](https://discuss.elastic.co/t/elastic-6-x-get-next-document-id-in-index-based-on-date-time/129938)
**Author:** [@west415](https://discuss.elastic.co/u/west415)\ **Replies:** 2\ **Last updated:** [April 29, 2018, 5:36am UTC](https://discuss.elastic.co/t/elastic-6-x-get-next-document-id-in-index-based-on-date-time/129938 "2018-04-29T05:36:20Z")
Hi, There was a similar question in the forums years ago, but it didn't get answered so I thought I'd ask and see if maybe something has changed or there is a specific way to do this. I have an elastic query that gets … --- ## [Elasticsearch / kibana wrong epoch date indexing](https://discuss.elastic.co/t/elasticsearch-kibana-wrong-epoch-date-indexing/129921)
**Author:** [@mehrdad22](https://discuss.elastic.co/u/mehrdad22)\ **Replies:** 2\ **Last updated:** [April 29, 2018, 5:14am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-wrong-epoch-date-indexing/129921 "2018-04-29T05:14:13Z")
the elastichsearch or kibana is goeing wrong date from epoch index. the date value is: 1495956650 (human date: GMT: Sunday, May 28, 2017 7:30:50 AM) but... when indexing this record into elasticsearch with below mappi… --- ## [Elastic Search - Handling words with 'no/non'](https://discuss.elastic.co/t/elastic-search-handling-words-with-no-non/129927)
**Author:** [@nadaj](https://discuss.elastic.co/u/nadaj)\ **Replies:** 1\ **Last updated:** [April 28, 2018, 10:41pm UTC](https://discuss.elastic.co/t/elastic-search-handling-words-with-no-non/129927 "2018-04-28T22:41:52Z")
How can you handle the correct tokenization and indexing of words such as 'gluten-free', 'no gluten', 'without dairy'? The method chosen can have a consequence on the querying part? --- ## [Search documents having multiple values of a field](https://discuss.elastic.co/t/search-documents-having-multiple-values-of-a-field/129915)
**Author:** [@ram](https://discuss.elastic.co/u/ram)\ **Replies:** 6\ **Last updated:** [April 28, 2018, 8:24pm UTC](https://discuss.elastic.co/t/search-documents-having-multiple-values-of-a-field/129915 "2018-04-28T20:24:04Z")
Hi, I want to search docs with multiple values of a field? eg. let's say I have job postings. Few of the jobs have multiple locations. { id: 1, location: 'new york' }, { id: 2, location: \['new york', 'london'\] … --- ## [Query elasticsearch from browser/webservice](https://discuss.elastic.co/t/query-elasticsearch-from-browser-webservice/129697)
**Author:** [@Martijn](https://discuss.elastic.co/u/Martijn)\ **Replies:** 2\ **Last updated:** [April 28, 2018, 6:43pm UTC](https://discuss.elastic.co/t/query-elasticsearch-from-browser-webservice/129697 "2018-04-28T18:43:37Z")
Hello, I've recently upgraded my Elasticsearch environment from 2.4 to 6.2. The old ES 2.4 environment was sometimes used as a datasource by ETL processes. The ETL process involved a simple API call, which looks like th… --- ## [Open File Handles leaking on 6.2.3 nodes..?](https://discuss.elastic.co/t/open-file-handles-leaking-on-6-2-3-nodes/128979)
**Author:** [@diranged](https://discuss.elastic.co/u/diranged)\ **Replies:** 4\ **Last updated:** [April 28, 2018, 5:04pm UTC](https://discuss.elastic.co/t/open-file-handles-leaking-on-6-2-3-nodes/128979 "2018-04-28T17:04:53Z")
We've had the same max-open-files setting for our ES clusters for a while (65k) and our nodes are pretty large (i3.2xl's w/ ~1-1.5TB of data on each one). We've never had a problem with file handles on our older ES 2.4 c… --- ## [Query fields with dot in name doesn't work](https://discuss.elastic.co/t/query-fields-with-dot-in-name-doesnt-work/129925)
**Author:** [@Techsigns](https://discuss.elastic.co/u/Techsigns)\ **Replies:** 0\ **Last updated:** [April 28, 2018, 4:03pm UTC](https://discuss.elastic.co/t/query-fields-with-dot-in-name-doesnt-work/129925 "2018-04-28T16:03:16Z")
Hi! I'm really new to Elasticsearch and I've managed to setup the elasticsearch stack with Elasticsearch, Kibana and X-Pack. I didn't setup Logstash yet, because I think I won't need it. Anyway, indexing of documents we… --- ## [Create geo\_point field in filebeat index (elasticseach 6.2.4)](https://discuss.elastic.co/t/create-geo-point-field-in-filebeat-index-elasticseach-6-2-4/129833)
**Author:** [@nsheridan](https://discuss.elastic.co/u/nsheridan)\ **Replies:** 2\ **Last updated:** [April 28, 2018, 9:41am UTC](https://discuss.elastic.co/t/create-geo-point-field-in-filebeat-index-elasticseach-6-2-4/129833 "2018-04-28T09:41:09Z")
Hi forum I've just got my shiny new elastic 6.2.4 up and created my own grok filters to parse my logs, loaded the geoplugin, and boom! I got co-ordinates but no geo\_point field to plot! Please help!! I tried to load a… --- ## [Empty Buckets in Terms Aggregation when using .keyword](https://discuss.elastic.co/t/empty-buckets-in-terms-aggregation-when-using-keyword/129835)
**Author:** [@YannickWeber](https://discuss.elastic.co/u/YannickWeber)\ **Replies:** 3\ **Last updated:** [April 28, 2018, 9:32am UTC](https://discuss.elastic.co/t/empty-buckets-in-terms-aggregation-when-using-keyword/129835 "2018-04-28T09:32:38Z")
When performing this Query: GET /dnslog/doc/\_search { "size" : 0, "aggs": { "Actions": { "terms": { "field": "Action.keyword", "size": 30 } } } } I get this result on my local … --- ## [Filter by only month of date field in \_search](https://discuss.elastic.co/t/filter-by-only-month-of-date-field-in-search/129902)
**Author:** [@Paddy\_Mahadeva](https://discuss.elastic.co/u/Paddy_Mahadeva)\ **Replies:** 0\ **Last updated:** [April 28, 2018, 4:52am UTC](https://discuss.elastic.co/t/filter-by-only-month-of-date-field-in-search/129902 "2018-04-28T04:52:38Z")
Hi, I have a case where in I need to find all documents in my index that fall between given set of months irrespective of the year \_search { "query": { "bool": { "filter" : { "range" : { … --- ## [How do I confirm norms are disabled?](https://discuss.elastic.co/t/how-do-i-confirm-norms-are-disabled/129853)
**Author:** [@Tripp\_Donnelly](https://discuss.elastic.co/u/Tripp_Donnelly)\ **Replies:** 1\ **Last updated:** [April 28, 2018, 4:49am UTC](https://discuss.elastic.co/t/how-do-i-confirm-norms-are-disabled/129853 "2018-04-28T04:49:33Z")
I am running Elasticsearch 5.6.8 from the official elasticsearch provided docker container. I want to disable norms for specific fields. I modify my template and then create a new index. I then read the mappings of the … --- ## [Performance of update\_by\_query operation](https://discuss.elastic.co/t/performance-of-update-by-query-operation/129285)
**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\ **Replies:** 4\ **Last updated:** [April 28, 2018, 2:24am UTC](https://discuss.elastic.co/t/performance-of-update-by-query-operation/129285 "2018-04-28T02:24:28Z")
Let's say I have an index with 100 Million docs and I want to update all of them using update\_by\_query. I could create single update by query(UBQ) that affect all the docs in the index or I could create 10 UBQ tasks one… --- ## [Posting Values for two fields one for Label Formatter and one for Link Formatter in URL](https://discuss.elastic.co/t/posting-values-for-two-fields-one-for-label-formatter-and-one-for-link-formatter-in-url/129899)
**Author:** [@RGSpirent](https://discuss.elastic.co/u/RGSpirent)\ **Replies:** 0\ **Last updated:** [April 27, 2018, 11:40pm UTC](https://discuss.elastic.co/t/posting-values-for-two-fields-one-for-label-formatter-and-one-for-link-formatter-in-url/129899 "2018-04-27T23:40:42Z")
Hi, I have two fields populated in Elastic Search. One is Result and the other is URL. When displaying in Kibana, I am trying to create a data table that should show "Result" and upon clicking on "Result" should take t… --- ## [Fuzziness parameter disables cutoff\_frequency in multi\_match query](https://discuss.elastic.co/t/fuzziness-parameter-disables-cutoff-frequency-in-multi-match-query/129893)
**Author:** [@ben\_purdy](https://discuss.elastic.co/u/ben_purdy)\ **Replies:** 1\ **Last updated:** [April 27, 2018, 10:15pm UTC](https://discuss.elastic.co/t/fuzziness-parameter-disables-cutoff-frequency-in-multi-match-query/129893 "2018-04-27T22:15:53Z")
As in the title, setting a value to fuzziness (even 0) will make the multi\_match query ignore the cutoff\_frequency parameter. In fact setting fuzziness to 0 and a cutoff\_frequency, will return the same results of a mult… --- ## [Elastic search Highlight in nested and normal object](https://discuss.elastic.co/t/elastic-search-highlight-in-nested-and-normal-object/128805)
**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\ **Replies:** 1\ **Last updated:** [April 27, 2018, 9:59pm UTC](https://discuss.elastic.co/t/elastic-search-highlight-in-nested-and-normal-object/128805 "2018-04-27T21:59:33Z")
Hi I have created index and documents in the Elasticsearch by using following calls: PUT test { "mappings": { "documents": { "properties": { "fulltext": { "type": "text" }, … --- ## [Inconsistent sum\_doc\_freq and sum\_ttf numbers in \_mtermvectors](https://discuss.elastic.co/t/inconsistent-sum-doc-freq-and-sum-ttf-numbers-in-mtermvectors/128753)
**Author:** [@yluo](https://discuss.elastic.co/u/yluo)\ **Replies:** 1\ **Last updated:** [April 27, 2018, 8:11pm UTC](https://discuss.elastic.co/t/inconsistent-sum-doc-freq-and-sum-ttf-numbers-in-mtermvectors/128753 "2018-04-27T20:11:37Z")
Hi there, We have been using Elasticsearch and ingest-attachment to index program files for full-text searching and keyword extraction (filtered by TFxIDF) using metadata from \_mtermvectors. However, we recently found… --- ## [Search for JSON array elements based on order](https://discuss.elastic.co/t/search-for-json-array-elements-based-on-order/129545)
**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Replies:** 2\ **Last updated:** [April 27, 2018, 7:59pm UTC](https://discuss.elastic.co/t/search-for-json-array-elements-based-on-order/129545 "2018-04-27T19:59:58Z")
Hi, I have a usecase , where I have to search inside a JSON array based on field order. Examples: Doc1: { "FIELD1":"VALUE1", ARR: \[ {"CUR":"ABC","NEXT":"PQR","ACTION":"CLICK"}, {"CUR":"PQR","NEXT"… --- ## [NEST Library UpdateByQuery](https://discuss.elastic.co/t/nest-library-updatebyquery/129880)
**Author:** [@han1](https://discuss.elastic.co/u/han1)\ **Replies:** 0\ **Last updated:** [April 27, 2018, 7:38pm UTC](https://discuss.elastic.co/t/nest-library-updatebyquery/129880 "2018-04-27T19:38:55Z")
Could someone KINDLY let us know what the syntax is using NEST when we want to do a partial update using the UpdateByQuery. We know you can only use scripts, but we have not a clue how to do this. Your assistance will … --- ## [ElasticSeach cluster - Error while adding new node to cluster](https://discuss.elastic.co/t/elasticseach-cluster-error-while-adding-new-node-to-cluster/129879)
**Author:** [@rajbuddha1](https://discuss.elastic.co/u/rajbuddha1)\ **Replies:** 0\ **Last updated:** [April 27, 2018, 7:38pm UTC](https://discuss.elastic.co/t/elasticseach-cluster-error-while-adding-new-node-to-cluster/129879 "2018-04-27T19:38:25Z")
Hi Team, I am working on containerizing existing elastic cluster and I am planning to have setup like 2 server with multiple containers of elasticsearch & kibana within those servers using docker. I am attaching design… --- ## [Can we script common objects in painless scripts](https://discuss.elastic.co/t/can-we-script-common-objects-in-painless-scripts/129869)
**Author:** [@Fullar\_Senjit](https://discuss.elastic.co/u/Fullar_Senjit)\ **Replies:** 2\ **Last updated:** [April 27, 2018, 6:46pm UTC](https://discuss.elastic.co/t/can-we-script-common-objects-in-painless-scripts/129869 "2018-04-27T18:46:43Z")
Considering the following painless script. "dateadddays" :{ "script" :{ "lang": "painless", "source" : "int days = 5; long millis = 5 \* 24 \* 3600 \* 1000; long totalmillis = doc.born.value.millis + millis; SimpleDateF… --- ## [Highlight does not work when \`store\` is set to false and search value does not match normalized filter](https://discuss.elastic.co/t/highlight-does-not-work-when-store-is-set-to-false-and-search-value-does-not-match-normalized-filter/129720)
**Author:** [@naoko](https://discuss.elastic.co/u/naoko)\ **Replies:** 4\ **Last updated:** [April 27, 2018, 6:46pm UTC](https://discuss.elastic.co/t/highlight-does-not-work-when-store-is-set-to-false-and-search-value-does-not-match-normalized-filter/129720 "2018-04-27T18:46:19Z")
ES version: 5.5.2 I've created index like this: { "settings": { "index": { "analysis": { "normalizer": { "normalizer\_lower": { "type": "custom", "filter": \["lowercase"\] }, "normalizer\_uppe… --- ## [Is this possible with pipeline aggregations](https://discuss.elastic.co/t/is-this-possible-with-pipeline-aggregations/128867)
**Author:** [@jettro](https://discuss.elastic.co/u/jettro)\ **Replies:** 3\ **Last updated:** [April 27, 2018, 6:15pm UTC](https://discuss.elastic.co/t/is-this-possible-with-pipeline-aggregations/128867 "2018-04-27T18:15:01Z")
Hi, is it possible to create an aggregation that a term aggregation, then use a range or histogram aggregation over the counts of the terms. Imagine I have docs with clicks by a user. Using the terms aggregation I can g… --- ## [X-Pack Watch jobs for CPU usage](https://discuss.elastic.co/t/x-pack-watch-jobs-for-cpu-usage/129540)
**Author:** [@mww1](https://discuss.elastic.co/u/mww1)\ **Replies:** 4\ **Last updated:** [April 27, 2018, 2:43pm UTC](https://discuss.elastic.co/t/x-pack-watch-jobs-for-cpu-usage/129540 "2018-04-27T14:43:01Z")
Hi, I want to make a watch job for CPU usage\>20%. Please help me code with http input. thanks [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1703) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1705)