# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1709 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1710 --- ## [What network settings does Elasticsearch modify in order to allow SSH via host name?](https://discuss.elastic.co/t/what-network-settings-does-elasticsearch-modify-in-order-to-allow-ssh-via-host-name/129338)
**Author:** [@Senor](https://discuss.elastic.co/u/Senor)\ **Replies:** 1\ **Last updated:** [April 25, 2018, 4:02am UTC](https://discuss.elastic.co/t/what-network-settings-does-elasticsearch-modify-in-order-to-allow-ssh-via-host-name/129338 "2018-04-25T04:02:11Z")
I have a scenario where we created an Elasticsearch cluster using a base Ubuntu 16.4.0.4 VM template. These Elasticsearch nodes are able to be SSHed into using their host names (ES-DATA-01.domain.com). I didn't think any… --- ## [About how to use term\\phrase suggest](https://discuss.elastic.co/t/about-how-to-use-term-phrase-suggest/129399)
**Author:** [@Jayezhuang](https://discuss.elastic.co/u/Jayezhuang)\ **Replies:** 0\ **Last updated:** [April 25, 2018, 3:46am UTC](https://discuss.elastic.co/t/about-how-to-use-term-phrase-suggest/129399 "2018-04-25T03:46:01Z")
The following is the request body I sent: "suggest":{ "text":"运动写", //Chinese "simple\_term":{ "term":{ "analyzer":"simple\_pinyin\_analyzer", //use whitespace tokenizer and pinyin filter "field":"keywords.pinyin", /… --- ## [Mapping parse error](https://discuss.elastic.co/t/mapping-parse-error/129375)
**Author:** [@ramzey1981](https://discuss.elastic.co/u/ramzey1981)\ **Replies:** 1\ **Last updated:** [April 25, 2018, 2:48am UTC](https://discuss.elastic.co/t/mapping-parse-error/129375 "2018-04-25T02:48:48Z")
I am receiving the following erorr in ES and i dont know what type object really means in this case. our field has been coming in as a string since the beginning, like this, "time":"1524355464692" here is the error, … --- ## [Shards and replicas for smaller indexes](https://discuss.elastic.co/t/shards-and-replicas-for-smaller-indexes/129136)
**Author:** [@mortenbock](https://discuss.elastic.co/u/mortenbock)\ **Replies:** 5\ **Last updated:** [April 25, 2018, 2:35am UTC](https://discuss.elastic.co/t/shards-and-replicas-for-smaller-indexes/129136 "2018-04-25T02:35:45Z")
Hi. We have a setup with an ES cluster with three nodes. On the cluster we have an index with our product catalog. When creating this index, we do not explicitly set any shard or replica size. The index is around 1.2g… --- ## [Index Sort settings both asc and desc?](https://discuss.elastic.co/t/index-sort-settings-both-asc-and-desc/128680)
**Author:** [@grillorafael](https://discuss.elastic.co/u/grillorafael)\ **Replies:** 2\ **Last updated:** [April 24, 2018, 10:14pm UTC](https://discuss.elastic.co/t/index-sort-settings-both-asc-and-desc/128680 "2018-04-24T22:14:14Z")
Hi All, we are trying to upgrade our ElasticSearch cluster from 5 to 6 and we are trying to use index sorting features. We have a fat index that is always queried sorted by a given field but it could be both asc or des… --- ## [Restore Incremental](https://discuss.elastic.co/t/restore-incremental/129327)
**Author:** [@bitva77](https://discuss.elastic.co/u/bitva77)\ **Replies:** 2\ **Last updated:** [April 24, 2018, 9:47pm UTC](https://discuss.elastic.co/t/restore-incremental/129327 "2018-04-24T21:47:43Z")
Hi! I'm in the process of migrating our ES cluster from Windows to Docker/Linux. I thought I could do it with Snapshots/Restore. This partially works but not really. Our cluster is like 4TB in size. A snapshot takes… --- ## [IOException while reading synonyms\_path\_path: /etc/elasticsearch/C:/elasticsearch-6.2.2/config/synonym.txt](https://discuss.elastic.co/t/ioexception-while-reading-synonyms-path-path-etc-elasticsearch-c-elasticsearch-6-2-2-config-synonym-txt/128629)
**Author:** [@Abhinaw](https://discuss.elastic.co/u/Abhinaw)\ **Replies:** 14\ **Last updated:** [April 24, 2018, 6:02pm UTC](https://discuss.elastic.co/t/ioexception-while-reading-synonyms-path-path-etc-elasticsearch-c-elasticsearch-6-2-2-config-synonym-txt/128629 "2018-04-24T18:02:51Z")
While trying to restore snapshot in Azure VM. I am facing this issue . { "error": { "root\_cause": \[ { "type": "exception", "reason": "Failed to verify index \[articleinformation/2Sr5kjDzT7WmB… --- ## [Question on sub-query scoring](https://discuss.elastic.co/t/question-on-sub-query-scoring/129357)
**Author:** [@loren](https://discuss.elastic.co/u/loren)\ **Replies:** 0\ **Last updated:** [April 24, 2018, 5:08pm UTC](https://discuss.elastic.co/t/question-on-sub-query-scoring/129357 "2018-04-24T17:08:22Z")
I have query\_string queries made up of 4 parts like this: (topic2\_term1 OR topic2\_term2 OR topic2\_term3) AND (topic3\_term1 OR topic3\_term2) AND rare\_term I'm just querying a short title and longer … --- ## [Aggregation on most recent document in a group](https://discuss.elastic.co/t/aggregation-on-most-recent-document-in-a-group/129335)
**Author:** [@lasitha1991](https://discuss.elastic.co/u/lasitha1991)\ **Replies:** 4\ **Last updated:** [April 24, 2018, 4:47pm UTC](https://discuss.elastic.co/t/aggregation-on-most-recent-document-in-a-group/129335 "2018-04-24T16:47:10Z")
Hi All, I have a dataset as follows { "unit\_id":150, "value":20, "timestamp":"2018-04-24 11:00AM" } { "unit\_id":150, "value":15, "timestamp":"2018-04-24 11:30AM" } { "unit\_id":151, "value":10, "timestamp":… --- ## [Your git version is 1.8, but Rally requires at least git 1.9](https://discuss.elastic.co/t/your-git-version-is-1-8-but-rally-requires-at-least-git-1-9/129315)
**Author:** [@Anuj\_Kulkarni](https://discuss.elastic.co/u/Anuj_Kulkarni)\ **Replies:** 3\ **Last updated:** [April 24, 2018, 4:44pm UTC](https://discuss.elastic.co/t/your-git-version-is-1-8-but-rally-requires-at-least-git-1-9/129315 "2018-04-24T16:44:38Z")
I configured ESrally with my ElasticSearch. The problem I have is I am unable to run the race command as mentioned here - https://esrally.readthedocs.io/en/stable/race.html The log says that I am using git 1.8, but I am… --- ## [Nested aggregation got too slow result](https://discuss.elastic.co/t/nested-aggregation-got-too-slow-result/129217)
**Author:** [@sontd985](https://discuss.elastic.co/u/sontd985)\ **Replies:** 11\ **Last updated:** [April 24, 2018, 4:29pm UTC](https://discuss.elastic.co/t/nested-aggregation-got-too-slow-result/129217 "2018-04-24T16:29:56Z")
I have an index with a billions document in the future, for now it's around 20mil documents. It took over 10s to get the result while I need a query around 3-4s for billion documents. Is my structure was wrong or need to… --- ## [Increase score based on the numbers of fields matched](https://discuss.elastic.co/t/increase-score-based-on-the-numbers-of-fields-matched/129344)
**Author:** [@nuno\_cruz](https://discuss.elastic.co/u/nuno_cruz)\ **Replies:** 1\ **Last updated:** [April 24, 2018, 4:14pm UTC](https://discuss.elastic.co/t/increase-score-based-on-the-numbers-of-fields-matched/129344 "2018-04-24T16:14:07Z")
What I want to do sounds simple enough, yet I can't find any information on how to do this. I want to give a boost to my score, based on the numbers of fields matched during a search. It seems to me I can use directly … --- ## [Docker - 6.2.3 Java Crash](https://discuss.elastic.co/t/docker-6-2-3-java-crash/129169)
**Author:** [@bitva77](https://discuss.elastic.co/u/bitva77)\ **Replies:** 1\ **Last updated:** [April 24, 2018, 4:00pm UTC](https://discuss.elastic.co/t/docker-6-2-3-java-crash/129169 "2018-04-24T16:00:18Z")
Hi! Running ES 6.2.3 via Docker and I have a node where Java crashes like right away. thread dump is here: https://gist.github.com/bitva77/7c48e9d11cb824d5e8cda33cbf8217e7 Any ideas on why and what I'm missing? Oth… --- ## [Create index with custom settings and mappings](https://discuss.elastic.co/t/create-index-with-custom-settings-and-mappings/129148)
**Author:** [@Maxime\_Lambert](https://discuss.elastic.co/u/Maxime_Lambert)\ **Replies:** 1\ **Last updated:** [April 24, 2018, 3:46pm UTC](https://discuss.elastic.co/t/create-index-with-custom-settings-and-mappings/129148 "2018-04-24T15:46:20Z")
Hello there, I try to create an index with custom settings and mappings. PUT /my\_index { "settings": { "analysis": { "analyzer": { "my\_analyzer": { … --- ## [Centralized architecture](https://discuss.elastic.co/t/centralized-architecture/129174)
**Author:** [@vnkasturi](https://discuss.elastic.co/u/vnkasturi)\ **Replies:** 3\ **Last updated:** [April 24, 2018, 3:43pm UTC](https://discuss.elastic.co/t/centralized-architecture/129174 "2018-04-24T15:43:25Z")
Hi Everyone, I am thinking of the centralized architecture / model so that I can deploy and scale the ELK stack for high availability. Anyone tried this? If so, any documentation sharing is really appreciated. Thank you. … --- ## [Type mapping question](https://discuss.elastic.co/t/type-mapping-question/129336)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 0\ **Last updated:** [April 24, 2018, 3:19pm UTC](https://discuss.elastic.co/t/type-mapping-question/129336 "2018-04-24T15:19:50Z")
Hi, I collect netflow through logstash, but the IPV4\_ADDR field default type is string. I want to mapping the type into "ip" through the API: PUT \_template/logstash { "index\_patterns": \["logstash-\*"\], "settings": { … --- ## [Recommendations returning the matched item](https://discuss.elastic.co/t/recommendations-returning-the-matched-item/129143)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 4\ **Last updated:** [April 24, 2018, 1:55pm UTC](https://discuss.elastic.co/t/recommendations-returning-the-matched-item/129143 "2018-04-24T13:55:00Z")
I send a request for suggestions using 'product A'. My results include the item I am attempting to get recommendations for. Here is the command: POST order\_history/ORDERHISTORY/\_search { "query": { … --- ## [Wildcard search result problems](https://discuss.elastic.co/t/wildcard-search-result-problems/129061)
**Author:** [@rso249](https://discuss.elastic.co/u/rso249)\ **Replies:** 5\ **Last updated:** [April 24, 2018, 1:09pm UTC](https://discuss.elastic.co/t/wildcard-search-result-problems/129061 "2018-04-24T13:09:36Z")
Dear Elastic search Team, It seems that the wildcard isnt working for the following example: Data for search: Task, Tasks, Task to do If I search with Task\* it only returns: Tasks. The users expect that it returns a… --- ## [How to remove many fields by script?](https://discuss.elastic.co/t/how-to-remove-many-fields-by-script/128992)
**Author:** [@mh20](https://discuss.elastic.co/u/mh20)\ **Replies:** 3\ **Last updated:** [April 24, 2018, 12:43pm UTC](https://discuss.elastic.co/t/how-to-remove-many-fields-by-script/128992 "2018-04-24T12:43:07Z")
Hi, I'm using script below to remove multiple fields from elasticsearch: "script" : "ctx.\_source.remove('new\_field1'); ctx.\_source.remove('new\_field2')" When there are many fields that should be removed, this exception… --- ## [X pack installation fails for elastic search with "exception in thread main" error](https://discuss.elastic.co/t/x-pack-installation-fails-for-elastic-search-with-exception-in-thread-main-error/129298)
**Author:** [@SwatiBharati](https://discuss.elastic.co/u/SwatiBharati)\ **Replies:** 1\ **Last updated:** [April 24, 2018, 12:16pm UTC](https://discuss.elastic.co/t/x-pack-installation-fails-for-elastic-search-with-exception-in-thread-main-error/129298 "2018-04-24T12:16:35Z")
below is the error message generated when trying to install x-pack \[image\] --- ## [Logs drop on field conflict](https://discuss.elastic.co/t/logs-drop-on-field-conflict/129259)
**Author:** [@slavik57](https://discuss.elastic.co/u/slavik57)\ **Replies:** 7\ **Last updated:** [April 24, 2018, 12:13pm UTC](https://discuss.elastic.co/t/logs-drop-on-field-conflict/129259 "2018-04-24T12:13:41Z")
I am using ELK 5.5.0 When I send a log containing a field with conflicted type it doesn't show up in Kibana but I cannot find any error in the logs. Example: curl -H "content-type: application/json" -XPOST 'http://loc… --- ## [Elasticsearch compare two indices](https://discuss.elastic.co/t/elasticsearch-compare-two-indices/126181)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 7\ **Last updated:** [April 24, 2018, 12:12pm UTC](https://discuss.elastic.co/t/elasticsearch-compare-two-indices/126181 "2018-04-24T12:12:37Z")
How does one go about comparing two (or more) indices in elasticsearch? especially based on specific fields (not entire document). --- ## [Transport response handler not found of id](https://discuss.elastic.co/t/transport-response-handler-not-found-of-id/129290)
**Author:** [@Sakalya](https://discuss.elastic.co/u/Sakalya)\ **Replies:** 3\ **Last updated:** [April 24, 2018, 12:02pm UTC](https://discuss.elastic.co/t/transport-response-handler-not-found-of-id/129290 "2018-04-24T12:02:14Z")
Hello, I am trying to connect to ElasticSearch 5.1.1 and my code is working intermittently to isnert records into ElasticSearch.It is a single node default settings cluster.I am continuously getting Transport response … --- ## [Cluster network configuration with 2 network boards](https://discuss.elastic.co/t/cluster-network-configuration-with-2-network-boards/128385)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 5\ **Last updated:** [April 24, 2018, 12:01pm UTC](https://discuss.elastic.co/t/cluster-network-configuration-with-2-network-boards/128385 "2018-04-24T12:01:51Z")
Hello, I have 3 hosts with 2 network interfaces. one public and the other private. I want to bind port 9200 on public network interface (queries) and port 9300 on private interface (zen.discovery) Here is my conf ifcon… --- ## [SQL like Group by in Elasticsearch](https://discuss.elastic.co/t/sql-like-group-by-in-elasticsearch/129265)
**Author:** [@Islam\_Elshobokshy](https://discuss.elastic.co/u/Islam_Elshobokshy)\ **Replies:** 5\ **Last updated:** [April 24, 2018, 12:00pm UTC](https://discuss.elastic.co/t/sql-like-group-by-in-elasticsearch/129265 "2018-04-24T12:00:37Z")
I want to, when filtering my results, at the end, group everything by name for example. If multiple results contain the same name, they are grouped, as well as all of their other fields being summed together if they are … --- ## [Looking for a better searching performance --\> Search speed ( DSL Query or Lucene)](https://discuss.elastic.co/t/looking-for-a-better-searching-performance-search-speed-dsl-query-or-lucene/129104)
**Author:** [@lutundula\_jeanchris](https://discuss.elastic.co/u/lutundula_jeanchris)\ **Replies:** 5\ **Last updated:** [April 24, 2018, 11:50am UTC](https://discuss.elastic.co/t/looking-for-a-better-searching-performance-search-speed-dsl-query-or-lucene/129104 "2018-04-24T11:50:29Z")
Hello Guys , Is there a major difference between a DSL query (search) and a Lucene Query in term of performances (in while creating a visualize) . ? if yes can i get some explaination , if its possible with use case :… --- ## [Kibana Status](https://discuss.elastic.co/t/kibana-status/129254)
**Author:** [@Fatemeh](https://discuss.elastic.co/u/Fatemeh)\ **Replies:** 7\ **Last updated:** [April 24, 2018, 11:41am UTC](https://discuss.elastic.co/t/kibana-status/129254 "2018-04-24T11:41:35Z")
Hello, i have recently installed elasticsearch and kibana and logstash but i have the red status in Kibana, can someone help me with this? \[image\] --- ## [Elasticsearch 6.2.4 default user id and password](https://discuss.elastic.co/t/elasticsearch-6-2-4-default-user-id-and-password/129282)
**Author:** [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\ **Replies:** 2\ **Last updated:** [April 24, 2018, 11:37am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-4-default-user-id-and-password/129282 "2018-04-24T11:37:13Z")
Please let me know what is the default username and password for the platinum image of elasticsearch built for docker. --- ## [ElasticSearch indexes got corrupt after using Scroll API](https://discuss.elastic.co/t/elasticsearch-indexes-got-corrupt-after-using-scroll-api/129289)
**Author:** [@nidhi](https://discuss.elastic.co/u/nidhi)\ **Replies:** 0\ **Last updated:** [April 24, 2018, 10:42am UTC](https://discuss.elastic.co/t/elasticsearch-indexes-got-corrupt-after-using-scroll-api/129289 "2018-04-24T10:42:08Z")
In my project requirement, I need to fetch more than 10k documents. I used ElasticSearch scroll api with python to do that. Here is my sample code - url = '/\_search/scroll' scroll\_url='//\_search?scroll=2m' Query= {"qu… --- ## [Why TransportClient only connect data nodes but ingest node when sniff set true?](https://discuss.elastic.co/t/why-transportclient-only-connect-data-nodes-but-ingest-node-when-sniff-set-true/129275)
**Author:** [@LoadingZhang](https://discuss.elastic.co/u/LoadingZhang)\ **Replies:** 1\ **Last updated:** [April 24, 2018, 10:45am UTC](https://discuss.elastic.co/t/why-transportclient-only-connect-data-nodes-but-ingest-node-when-sniff-set-true/129275 "2018-04-24T10:45:09Z")
If data nodes and ingest nodes are separated, TransportClient with sniff will first transport data to data node, then data node transport it to ingest node, after ETL transport back to data node. Does it waste network … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1708) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1710)