# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1708

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1709

---

## [Copy\_to field need both exact search as well as partial search](https://discuss.elastic.co/t/copy-to-field-need-both-exact-search-as-well-as-partial-search/129538)

<div class="topic-metadata">

**Author:** [@pavan\_patharde](https://discuss.elastic.co/u/pavan_patharde)\
**Replies:** 0\
**Last updated:** [April 25, 2018, 4:43pm UTC](https://discuss.elastic.co/t/copy-to-field-need-both-exact-search-as-well-as-partial-search/129538 "2018-04-25T16:43:40Z")

</div>

Have around 10 fields in the mapping which have copy\_to attribute(catch\_all field) When Queried for partial query using match results are returned. When queried for complete word, still get many results instead of one. …

---

## [Keyword field doesn't show as type keyword in kibana](https://discuss.elastic.co/t/keyword-field-doesnt-show-as-type-keyword-in-kibana/129535)

<div class="topic-metadata">

**Author:** [@David9](https://discuss.elastic.co/u/David9)\
**Replies:** 0\
**Last updated:** [April 25, 2018, 4:26pm UTC](https://discuss.elastic.co/t/keyword-field-doesnt-show-as-type-keyword-in-kibana/129535 "2018-04-25T16:26:28Z")

</div>

I've created and indexed what I think is a keyword field, however in kibana it shows the field as a 'T' type which I think means 'Text', I was expecting a 'K' for keyword. Can anyone shed light on this? Edit: my goal i…

---

## [Sum of nested or not nested documents](https://discuss.elastic.co/t/sum-of-nested-or-not-nested-documents/129534)

<div class="topic-metadata">

**Author:** [@DedMorozzz.kh](https://discuss.elastic.co/u/DedMorozzz.kh)\
**Replies:** 0\
**Last updated:** [April 25, 2018, 4:05pm UTC](https://discuss.elastic.co/t/sum-of-nested-or-not-nested-documents/129534 "2018-04-25T16:05:28Z")

</div>

Hi, can you help me with next problem: I have next structure: { "mappings": { "myType": { "properties": { "A": { "type": "nested", "properties": { //other fields "B": { "properties": { "Value": { "type": "fl…

---

## [After installing X-Pack into ELK am unable to view logs](https://discuss.elastic.co/t/after-installing-x-pack-into-elk-am-unable-to-view-logs/128912)

<div class="topic-metadata">

**Author:** [@imparker](https://discuss.elastic.co/u/imparker)\
**Replies:** 11\
**Last updated:** [April 25, 2018, 3:42pm UTC](https://discuss.elastic.co/t/after-installing-x-pack-into-elk-am-unable-to-view-logs/128912 "2018-04-25T15:42:23Z")

</div>

Installed X-pack into Elasticsearch, Logstash, & Kibana using this page. This was done after having an installation of ELK without xpack. I followed the docs when setting the components up, but am unable to view old or n…

---

## [Searching query return results based on word frequency/term vectors](https://discuss.elastic.co/t/searching-query-return-results-based-on-word-frequency-term-vectors/129524)

<div class="topic-metadata">

**Author:** [@sandbar\_shark](https://discuss.elastic.co/u/sandbar_shark)\
**Replies:** 0\
**Last updated:** [April 25, 2018, 3:19pm UTC](https://discuss.elastic.co/t/searching-query-return-results-based-on-word-frequency-term-vectors/129524 "2018-04-25T15:19:37Z")

</div>

So I have an index that has multiple documents, each document being sentences of text. For example: Doc 1: "the cat in the hat" Doc 2: "feed your cat lots of fish for a cat" So I indexed them with term vectors, so I c…

---

## [Error Elasticsearch 6.2.4 + Kibana set up through Docker. Kibana LOGIN currently disabled?](https://discuss.elastic.co/t/error-elasticsearch-6-2-4-kibana-set-up-through-docker-kibana-login-currently-disabled/129207)

<div class="topic-metadata">

**Author:** [@Vannazux](https://discuss.elastic.co/u/Vannazux)\
**Replies:** 6\
**Last updated:** [April 25, 2018, 3:11pm UTC](https://discuss.elastic.co/t/error-elasticsearch-6-2-4-kibana-set-up-through-docker-kibana-login-currently-disabled/129207 "2018-04-25T15:11:40Z")

</div>

I am trying to set up the last version of ELK 6.2.4 to test 6.x feature, the user security permission. Basically, I went to Elasticsearch website and followed instructions downloading Elasticsearch through docker. I exe…

---

## [Phrase suggester not working term suggester is working](https://discuss.elastic.co/t/phrase-suggester-not-working-term-suggester-is-working/129102)

<div class="topic-metadata">

**Author:** [@Atul\_Bagga](https://discuss.elastic.co/u/Atul_Bagga)\
**Replies:** 1\
**Last updated:** [April 25, 2018, 3:06pm UTC](https://discuss.elastic.co/t/phrase-suggester-not-working-term-suggester-is-working/129102 "2018-04-25T15:06:27Z")

</div>

Is there a setting which governs if one is disabled? I have an ES deployment where phrase suggester does not suggest anything while term suggester does. This does not give any suggestions- GET index\_name/type/\_search …

---

## [Add new field to index using update\_by\_query](https://discuss.elastic.co/t/add-new-field-to-index-using-update-by-query/129498)

<div class="topic-metadata">

**Author:** [@nkaenzig](https://discuss.elastic.co/u/nkaenzig)\
**Replies:** 0\
**Last updated:** [April 25, 2018, 1:21pm UTC](https://discuss.elastic.co/t/add-new-field-to-index-using-update-by-query/129498 "2018-04-25T13:21:06Z")

</div>

Dear Community, I'm trying to add a new field to all documents that match a certain condition. After doing some research I found that the update\_by\_query API might be a suitable method to achieve this. What I have so …

---

## [Aggregate diff video views](https://discuss.elastic.co/t/aggregate-diff-video-views/128226)

<div class="topic-metadata">

**Author:** [@himberjack](https://discuss.elastic.co/u/himberjack)\
**Replies:** 2\
**Last updated:** [April 25, 2018, 2:51pm UTC](https://discuss.elastic.co/t/aggregate-diff-video-views/128226 "2018-04-25T14:51:47Z")

</div>

Hi, We have created an index that saves timestamp, entry\_id & video views. We sample the video view from a website, and saves it as is into the ES (that is, the current views value, not the diff). Now, we want to tell…

---

## [Ensure that watcher does not miss documents (logs)](https://discuss.elastic.co/t/ensure-that-watcher-does-not-miss-documents-logs/127780)

<div class="topic-metadata">

**Author:** [@ypid-geberit](https://discuss.elastic.co/u/ypid-geberit)\
**Replies:** 4\
**Last updated:** [April 25, 2018, 1:29pm UTC](https://discuss.elastic.co/t/ensure-that-watcher-does-not-miss-documents-logs/127780 "2018-04-25T13:29:12Z")

</div>

Hey When searching for logs in Elastic using Watcher, a range query on the @timestamp field can be used: "range": { "@timestamp": { "gte": "now-1h-5m", "lt": "now-5m" } } Note the -5m which I have not seen…

---

## [Terms Aggregation not being run across all segments](https://discuss.elastic.co/t/terms-aggregation-not-being-run-across-all-segments/129499)

<div class="topic-metadata">

**Author:** [@bevans88](https://discuss.elastic.co/u/bevans88)\
**Replies:** 0\
**Last updated:** [April 25, 2018, 1:23pm UTC](https://discuss.elastic.co/t/terms-aggregation-not-being-run-across-all-segments/129499 "2018-04-25T13:23:36Z")

</div>

Hi, We've recently hit a problem whereby not all documents are having a terms aggregation run across them, even though the documents match all aggregation filters. This does not happen every time (roughly ~10% of runs c…

---

## [How to escape character $](https://discuss.elastic.co/t/how-to-escape-character/129496)

<div class="topic-metadata">

**Author:** [@jonathanz](https://discuss.elastic.co/u/jonathanz)\
**Replies:** 0\
**Last updated:** [April 25, 2018, 1:12pm UTC](https://discuss.elastic.co/t/how-to-escape-character/129496 "2018-04-25T13:12:13Z")

</div>

how to escape character $ from search? I have tried with \* but it is not working Thx in advance

---

## [Convert all fields to string while indexing and while reindexing](https://discuss.elastic.co/t/convert-all-fields-to-string-while-indexing-and-while-reindexing/129492)

<div class="topic-metadata">

**Author:** [@Karthik\_Priyadarshan](https://discuss.elastic.co/u/Karthik_Priyadarshan)\
**Replies:** 0\
**Last updated:** [April 25, 2018, 12:46pm UTC](https://discuss.elastic.co/t/convert-all-fields-to-string-while-indexing-and-while-reindexing/129492 "2018-04-25T12:46:18Z")

</div>

I have logs coming in from logstash and fluentd and I do not know what fields they have as they will sent by different people. I want to convert all fields to string unless i get a mapping from the people who are sending…

---

## [Elasticsearch how to give fix score for specific fields](https://discuss.elastic.co/t/elasticsearch-how-to-give-fix-score-for-specific-fields/129485)

<div class="topic-metadata">

**Author:** [@karanlevaral](https://discuss.elastic.co/u/karanlevaral)\
**Replies:** 0\
**Last updated:** [April 25, 2018, 12:27pm UTC](https://discuss.elastic.co/t/elasticsearch-how-to-give-fix-score-for-specific-fields/129485 "2018-04-25T12:27:55Z")

</div>

In Elasticsearch how to give fix score for specific field. For e.g document has fields city, price etc.. so if i search by city with 'New York', it fetch all records with the city(New York) and increment score by 1, if i…

---

## [Elasticsearch - check workability](https://discuss.elastic.co/t/elasticsearch-check-workability/129333)

<div class="topic-metadata">

**Author:** [@Nikita\_Krasnov](https://discuss.elastic.co/u/Nikita_Krasnov)\
**Replies:** 6\
**Last updated:** [April 25, 2018, 12:14pm UTC](https://discuss.elastic.co/t/elasticsearch-check-workability/129333 "2018-04-25T12:14:51Z")

</div>

Hello to everyone! How can I check cluster helth of Elasticsearch 6.1 through Java code (maybe through Java high level rest client)? In Rest it will be GET \_cluster/health.

---

## [Percolator is not working with source field in the query](https://discuss.elastic.co/t/percolator-is-not-working-with-source-field-in-the-query/129472)

<div class="topic-metadata">

**Author:** [@anoopvalluthadam](https://discuss.elastic.co/u/anoopvalluthadam)\
**Replies:** 0\
**Last updated:** [April 25, 2018, 11:42am UTC](https://discuss.elastic.co/t/percolator-is-not-working-with-source-field-in-the-query/129472 "2018-04-25T11:42:50Z")

</div>

percolator query: PUT mp\_percolator/notification/anoop\_test { "source": { "query": { "bool": { "must": \[ { "bool": { …

---

## [Tens of minutes ingestion delay](https://discuss.elastic.co/t/tens-of-minutes-ingestion-delay/129322)

<div class="topic-metadata">

**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\
**Replies:** 3\
**Last updated:** [April 25, 2018, 11:04am UTC](https://discuss.elastic.co/t/tens-of-minutes-ingestion-delay/129322 "2018-04-25T11:04:36Z")

</div>

I've got data coming from Metricbeat which is showing up in Elasticsearch some tens of minutes later rather than the second or so I might expect (I'm generating an "ingested" timestamp in Elasticsearch and comparing that…

---

## [Group by in Elastica PHP?](https://discuss.elastic.co/t/group-by-in-elastica-php/129133)

<div class="topic-metadata">

**Author:** [@Islam\_Elshobokshy](https://discuss.elastic.co/u/Islam_Elshobokshy)\
**Replies:** 1\
**Last updated:** [April 25, 2018, 10:55am UTC](https://discuss.elastic.co/t/group-by-in-elastica-php/129133 "2018-04-25T10:55:49Z")

</div>

Anyone has any idea how to do a GroupBy aggregation in Elastica? Is it even implemented there? If not, any idea how to implement a group by in Elastica, like another way of doing it?

---

## [Network outage broke shards](https://discuss.elastic.co/t/network-outage-broke-shards/129446)

<div class="topic-metadata">

**Author:** [@secana](https://discuss.elastic.co/u/secana)\
**Replies:** 5\
**Last updated:** [April 25, 2018, 10:39am UTC](https://discuss.elastic.co/t/network-outage-broke-shards/129446 "2018-04-25T10:39:58Z")

</div>

Hi, we've currently had a network outage and two of our ES clusters showed a strange behavior after the network was restored. In the last three indices, 1 of the 4 shards were broken and we had to delete the indices to …

---

## [Parameters for match query](https://discuss.elastic.co/t/parameters-for-match-query/129454)

<div class="topic-metadata">

**Author:** [@devil\_srj7](https://discuss.elastic.co/u/devil_srj7)\
**Replies:** 0\
**Last updated:** [April 25, 2018, 10:21am UTC](https://discuss.elastic.co/t/parameters-for-match-query/129454 "2018-04-25T10:21:36Z")

</div>

i have a java application in which I have implemented low level rest client. i define parameters in java in different variables and pass those in match query. As i take the parameters from user, if the user does not gi…

---

## [Check status/progress of long running ElasticSearch queries?](https://discuss.elastic.co/t/check-status-progress-of-long-running-elasticsearch-queries/129441)

<div class="topic-metadata">

**Author:** [@davout](https://discuss.elastic.co/u/davout)\
**Replies:** 1\
**Last updated:** [April 25, 2018, 10:08am UTC](https://discuss.elastic.co/t/check-status-progress-of-long-running-elasticsearch-queries/129441 "2018-04-25T10:08:49Z")

</div>

I'm an ElasticSearch newbie, and assessing this tech for possible use on a very large database search requirement. It is highly likely that some of the searches on this database will have a long query elapsed time. I w…

---

## [Bucket aggregation in string terms is too slow](https://discuss.elastic.co/t/bucket-aggregation-in-string-terms-is-too-slow/129394)

<div class="topic-metadata">

**Author:** [@pakein](https://discuss.elastic.co/u/pakein)\
**Replies:** 2\
**Last updated:** [April 25, 2018, 9:40am UTC](https://discuss.elastic.co/t/bucket-aggregation-in-string-terms-is-too-slow/129394 "2018-04-25T09:40:02Z")

</div>

In GlobalOrdinalsStringTermsAggregator for (long globalTermOrd = 0; globalTermOrd \< valueCount; ++globalTermOrd) why not loop with bucketOrds，bucketOrds size is much small than valueCount When there are levels of agg…

---

## [Error when using the delete-by-query plugin for Elasticsearch on Bitnami](https://discuss.elastic.co/t/error-when-using-the-delete-by-query-plugin-for-elasticsearch-on-bitnami/129349)

<div class="topic-metadata">

**Author:** [@lahrm](https://discuss.elastic.co/u/lahrm)\
**Replies:** 2\
**Last updated:** [April 25, 2018, 8:43am UTC](https://discuss.elastic.co/t/error-when-using-the-delete-by-query-plugin-for-elasticsearch-on-bitnami/129349 "2018-04-25T08:43:21Z")

</div>

Hi, I am working on Firebase along with Elasticsearch and I am getting the error below when I try to delete an index from Elasticsearch using delete-by-query. The index creation works well using a cloud function so the …

---

## [Elasticsearch.yml notification config](https://discuss.elastic.co/t/elasticsearch-yml-notification-config/126755)

<div class="topic-metadata">

**Author:** [@cedric1](https://discuss.elastic.co/u/cedric1)\
**Replies:** 9\
**Last updated:** [April 25, 2018, 8:30am UTC](https://discuss.elastic.co/t/elasticsearch-yml-notification-config/126755 "2018-04-25T08:30:58Z")

</div>

Hi, I'm trying to add an smtp config in elasticsearch.yml file but i can't figure out what I'm doing wrong, My goal is to send email from a watch. Could someone give me a full sample of what elacsticsearch.yml should…

---

## [Delete\_by\_query & \_forcemerge doesn't free disk space](https://discuss.elastic.co/t/delete-by-query-forcemerge-doesnt-free-disk-space/129352)

<div class="topic-metadata">

**Author:** [@mats990](https://discuss.elastic.co/u/mats990)\
**Replies:** 10\
**Last updated:** [April 25, 2018, 8:25am UTC](https://discuss.elastic.co/t/delete-by-query-forcemerge-doesnt-free-disk-space/129352 "2018-04-25T08:25:27Z")

</div>

Hi, I used delete\_by\_query API to delete multiple documents and after that \_forcemerge API to remove deleted documents. However, when I use \_forcemerge API it finishes instantly and disk usage is the same. Why my API c…

---

## [X-Pack Security - Created Role not Apply to AD Users](https://discuss.elastic.co/t/x-pack-security-created-role-not-apply-to-ad-users/129341)

<div class="topic-metadata">

**Author:** [@FoxCrash](https://discuss.elastic.co/u/FoxCrash)\
**Replies:** 2\
**Last updated:** [April 25, 2018, 7:03am UTC](https://discuss.elastic.co/t/x-pack-security-created-role-not-apply-to-ad-users/129341 "2018-04-25T07:03:56Z")

</div>

I have installed a cluster ELK on a VM: Logstash 5.4.0 ElasticSearch 5.4.0 Kibana 5.4.0 I have installed X-Pack on each nodes of the cluster and I can connect to kibana with any users of my AD. Here the elasticsearch…

---

## [Elasticsearch works slow on Azure](https://discuss.elastic.co/t/elasticsearch-works-slow-on-azure/129362)

<div class="topic-metadata">

**Author:** [@Abhinaw](https://discuss.elastic.co/u/Abhinaw)\
**Replies:** 12\
**Last updated:** [April 25, 2018, 6:51am UTC](https://discuss.elastic.co/t/elasticsearch-works-slow-on-azure/129362 "2018-04-25T06:51:51Z")

</div>

Hi i have deployed elasticsearch on Azure VM with 28GB RAM size. My database size is 100GB . A query which returns 30K result takes more than 3 minutes. many thanks

---

## [Querying in Elasticsearch](https://discuss.elastic.co/t/querying-in-elasticsearch/128507)

<div class="topic-metadata">

**Author:** [@soumya\_sahoo](https://discuss.elastic.co/u/soumya_sahoo)\
**Replies:** 3\
**Last updated:** [April 25, 2018, 6:33am UTC](https://discuss.elastic.co/t/querying-in-elasticsearch/128507 "2018-04-25T06:33:13Z")

</div>

Hi Team. Is it possible to issue a single query for 2 different indexes. Lets say I have 2 index - A & B and I need to write a query where in I need the count of matches where A.xyz = B.abc , where xyz, abc = fields of …

---

## [Exception in thread "main" java.lang.NoSuchFieldError: FAIL\_ON\_SYMBOL\_HASH\_OVERFLOW](https://discuss.elastic.co/t/exception-in-thread-main-java-lang-nosuchfielderror-fail-on-symbol-hash-overflow/129346)

<div class="topic-metadata">

**Author:** [@Jouad\_Mohammed](https://discuss.elastic.co/u/Jouad_Mohammed)\
**Replies:** 1\
**Last updated:** [April 25, 2018, 6:11am UTC](https://discuss.elastic.co/t/exception-in-thread-main-java-lang-nosuchfielderror-fail-on-symbol-hash-overflow/129346 "2018-04-25T06:11:57Z")

</div>

HI Elasticsearch 6.2 High level client //opening I have the following error with this error : Error : Exception in thread "main" java.lang.NoSuchFieldError: FAIL\_ON\_SYMBOL\_HASH\_OVERFLOW //tag::migration-request-c…

---

## [Last term agg bucket size](https://discuss.elastic.co/t/last-term-agg-bucket-size/129408)

<div class="topic-metadata">

**Author:** [@clandestino\_bgd\_2](https://discuss.elastic.co/u/clandestino_bgd_2)\
**Replies:** 0\
**Last updated:** [April 25, 2018, 5:48am UTC](https://discuss.elastic.co/t/last-term-agg-bucket-size/129408 "2018-04-25T05:48:24Z")

</div>

Hello, I have a following problem, hope somebody can help. I have a total count (TC) of agents (hard limit = number of seats) and I need to display their statuses over time: AVAILABLE, BUSY, ON\_BREAK and ABSENT. FIrst t…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1707)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1709)
