# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1716

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1717

---

## [Elasticsearch status red after installing x-pack](https://discuss.elastic.co/t/elasticsearch-status-red-after-installing-x-pack/128458)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 4\
**Last updated:** [April 18, 2018, 8:32am UTC](https://discuss.elastic.co/t/elasticsearch-status-red-after-installing-x-pack/128458 "2018-04-18T08:32:41Z")

</div>

I'm using elasticsearch to index a 12 mb log file. I've indexed the log file and then installed the trial version of x-pack to give it a try. and then my elasticsearch status turned to red. Please have a look at the scr…

---

## [Why coordinator node and kibana server must be on the same host](https://discuss.elastic.co/t/why-coordinator-node-and-kibana-server-must-be-on-the-same-host/128481)

<div class="topic-metadata">

**Author:** [@makibroshett](https://discuss.elastic.co/u/makibroshett)\
**Replies:** 0\
**Last updated:** [April 18, 2018, 8:25am UTC](https://discuss.elastic.co/t/why-coordinator-node-and-kibana-server-must-be-on-the-same-host/128481 "2018-04-18T08:25:10Z")

</div>

Hi, In the docs, and various examples found on the web, it is mentionned that both the Kibana server and coordinating ES instance should be on the same host. Is it in order to save an actual round-trip between the two k…

---

## [Simple query string fails to find one word](https://discuss.elastic.co/t/simple-query-string-fails-to-find-one-word/128384)

<div class="topic-metadata">

**Author:** [@Seeker](https://discuss.elastic.co/u/Seeker)\
**Replies:** 2\
**Last updated:** [April 18, 2018, 8:23am UTC](https://discuss.elastic.co/t/simple-query-string-fails-to-find-one-word/128384 "2018-04-18T08:23:18Z")

</div>

Hi there. We were building a search list for our job postings and ran into a weird problem. We've got a document with field "name" containing one word "Frezer". Type text and analyzed with custom analyzer. The thing is…

---

## [Adding string to elastic](https://discuss.elastic.co/t/adding-string-to-elastic/128480)

<div class="topic-metadata">

**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\
**Replies:** 0\
**Last updated:** [April 18, 2018, 8:19am UTC](https://discuss.elastic.co/t/adding-string-to-elastic/128480 "2018-04-18T08:19:49Z")

</div>

Hi How we can add data in the string format, instead of object? ElasticLowLevelClient objClient = new ElasticLowLevelClient(objSettings); List\<string\> listofstrings= new List\<string\>(); string strData = "{\\"RollNo\\": …

---

## [Delete indices from AWS managed services(ElasticSearch)](https://discuss.elastic.co/t/delete-indices-from-aws-managed-services-elasticsearch/128275)

<div class="topic-metadata">

**Author:** [@ardel](https://discuss.elastic.co/u/ardel)\
**Replies:** 5\
**Last updated:** [April 18, 2018, 8:15am UTC](https://discuss.elastic.co/t/delete-indices-from-aws-managed-services-elasticsearch/128275 "2018-04-18T08:15:57Z")

</div>

Hello I am knew to "Curator". Is there anyone here who know if we can use AWS managed services when deleting elastic search services. Please take note that I installed "Curator" in an ec2 Instance and the elasticsearch…

---

## [Concurrent bulk requests](https://discuss.elastic.co/t/concurrent-bulk-requests/128140)

<div class="topic-metadata">

**Author:** [@kchrusciel](https://discuss.elastic.co/u/kchrusciel)\
**Replies:** 6\
**Last updated:** [April 18, 2018, 8:04am UTC](https://discuss.elastic.co/t/concurrent-bulk-requests/128140 "2018-04-18T08:04:44Z")

</div>

Hi, I do concurrent bulk requests (inserting) in 20 threads. When I look at threads all of them waiting in: \[jobs\] \[job\] Can I somehow speedup this process?

---

## [Error on installation process](https://discuss.elastic.co/t/error-on-installation-process/128447)

<div class="topic-metadata">

**Author:** [@kuruzuke](https://discuss.elastic.co/u/kuruzuke)\
**Replies:** 1\
**Last updated:** [April 18, 2018, 7:40am UTC](https://discuss.elastic.co/t/error-on-installation-process/128447 "2018-04-18T07:40:57Z")

</div>

version : elasticsearch-6.2.3.msi \*\*\*\*\*\*\* Product: C:\\Users\\Administrator\\Downloads\\elasticsearch-6.2.3.msi \*\*\*\*\*\*\* Action: INSTALL \*\*\*\*\*\*\* CommandLine: \*\*\*\*\*\*\*\*\*\* MSI (s) (FC:8C) \[11:22:49:469\]: M…

---

## [Kafka messages count for particular tenant](https://discuss.elastic.co/t/kafka-messages-count-for-particular-tenant/128472)

<div class="topic-metadata">

**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\
**Replies:** 0\
**Last updated:** [April 18, 2018, 7:38am UTC](https://discuss.elastic.co/t/kafka-messages-count-for-particular-tenant/128472 "2018-04-18T07:38:19Z")

</div>

Hi All, Could any one help how to get Kafka messages count for particular tenant in specific period. Thanks

---

## [Elastic installation](https://discuss.elastic.co/t/elastic-installation/125739)

<div class="topic-metadata">

**Author:** [@Nada\_I](https://discuss.elastic.co/u/Nada_I)\
**Replies:** 12\
**Last updated:** [April 18, 2018, 7:26am UTC](https://discuss.elastic.co/t/elastic-installation/125739 "2018-04-18T07:26:55Z")

</div>

Hello, I want to know what i should write in elastic, kibana and logstash system through elastic installation steps \[image\]

---

## [How to store only limited number of docs](https://discuss.elastic.co/t/how-to-store-only-limited-number-of-docs/127067)

<div class="topic-metadata">

**Author:** [@kish](https://discuss.elastic.co/u/kish)\
**Replies:** 4\
**Last updated:** [April 18, 2018, 7:17am UTC](https://discuss.elastic.co/t/how-to-store-only-limited-number-of-docs/127067 "2018-04-18T07:17:12Z")

</div>

Hello - I will be collecting data for every 10sec and hence my size of the particular index will be growing. Is there any way to limit the storage. I.e at any point of time i may require the latest 100 docs.count

---

## [Unique values with sort request](https://discuss.elastic.co/t/unique-values-with-sort-request/127563)

<div class="topic-metadata">

**Author:** [@mrbushid0](https://discuss.elastic.co/u/mrbushid0)\
**Replies:** 1\
**Last updated:** [April 18, 2018, 6:54am UTC](https://discuss.elastic.co/t/unique-values-with-sort-request/127563 "2018-04-18T06:54:22Z")

</div>

Hi everyone, I currently have a query with the purpose being to only retrieve documents with a unique "Object ID" And then order the documents by the date they were created It'd be the equivalent to "SELECT DISTINCT i…

---

## [ES 5.5.2 - No queries but CPU and Load significantly high after restore](https://discuss.elastic.co/t/es-5-5-2-no-queries-but-cpu-and-load-significantly-high-after-restore/127579)

<div class="topic-metadata">

**Author:** [@dendle](https://discuss.elastic.co/u/dendle)\
**Replies:** 1\
**Last updated:** [April 18, 2018, 6:52am UTC](https://discuss.elastic.co/t/es-5-5-2-no-queries-but-cpu-and-load-significantly-high-after-restore/127579 "2018-04-18T06:52:39Z")

</div>

Hello All I have just restored from a 2.6TB backup, and achieved green state. Shard balancing has finished, but before I even put the server back under load, there is significant CPU and Load values. Cluster backgroun…

---

## [\[6.2.4\] Release notes link](https://discuss.elastic.co/t/6-2-4-release-notes-link/128448)

<div class="topic-metadata">

**Author:** [@loren](https://discuss.elastic.co/u/loren)\
**Replies:** 1\
**Last updated:** [April 18, 2018, 6:34am UTC](https://discuss.elastic.co/t/6-2-4-release-notes-link/128448 "2018-04-18T06:34:44Z")

</div>

Not sure if this is the best place to mention it, but on the download page, the link for the release notes results in a 404. Release notes are there for Kibana 6.2.4, but not for Elasticsearch 6.2.4.

---

## [Return date\_histogram in hour for each day](https://discuss.elastic.co/t/return-date-histogram-in-hour-for-each-day/128438)

<div class="topic-metadata">

**Author:** [@ysl](https://discuss.elastic.co/u/ysl)\
**Replies:** 1\
**Last updated:** [April 18, 2018, 4:27am UTC](https://discuss.elastic.co/t/return-date-histogram-in-hour-for-each-day/128438 "2018-04-18T04:27:28Z")

</div>

Hello, I have records with 15m interval timestamp. Now I want to return with: timestamps grouped by 60 minutes --\> date\_histogram aggregation with interval at 60m (4 docs in one bucket, 15m per record) return the sum…

---

## [Query only month and day](https://discuss.elastic.co/t/query-only-month-and-day/128317)

<div class="topic-metadata">

**Author:** [@f64337c9e1c3c8927cd2](https://discuss.elastic.co/u/f64337c9e1c3c8927cd2)\
**Replies:** 3\
**Last updated:** [April 18, 2018, 4:14am UTC](https://discuss.elastic.co/t/query-only-month-and-day/128317 "2018-04-18T04:14:13Z")

</div>

user1 birthday(2001-03-04) user2 birthday(2002-03-04) user3 birthday(2003-03-04) user4 birthday(2008-04-04) can i query the users which birthday is 03-04?

---

## [Schema error: extra keys not allowed @ data\['client'\]](https://discuss.elastic.co/t/schema-error-extra-keys-not-allowed-data-client/128280)

<div class="topic-metadata">

**Author:** [@ardel](https://discuss.elastic.co/u/ardel)\
**Replies:** 3\
**Last updated:** [April 17, 2018, 11:57pm UTC](https://discuss.elastic.co/t/schema-error-extra-keys-not-allowed-data-client/128280 "2018-04-17T23:57:09Z")

</div>

Hello All, I'm new to Curator. However I tried to execute a sample command to delete indices and this is the output. 2018-04-17 03:20:04,413 ERROR Schema error: extra keys not allowed @ data\['client'\] Traceback (m…

---

## [Can I call \_update\_by\_query by doc](https://discuss.elastic.co/t/can-i-call-update-by-query-by-doc/128046)

<div class="topic-metadata">

**Author:** [@adolfjap](https://discuss.elastic.co/u/adolfjap)\
**Replies:** 1\
**Last updated:** [April 17, 2018, 7:03pm UTC](https://discuss.elastic.co/t/can-i-call-update-by-query-by-doc/128046 "2018-04-17T19:03:24Z")

</div>

Hi, api \_update\_by\_query only support script update? Can I set new value by json?

---

## [Update By Query API](https://discuss.elastic.co/t/update-by-query-api/128380)

<div class="topic-metadata">

**Author:** [@rainbowkid11](https://discuss.elastic.co/u/rainbowkid11)\
**Replies:** 1\
**Last updated:** [April 17, 2018, 6:57pm UTC](https://discuss.elastic.co/t/update-by-query-api/128380 "2018-04-17T18:57:27Z")

</div>

In the docs for Update By Query I see that you can use a script to update all documents matching a query. POST twitter/\_update\_by\_query { "script": { "source": "ctx.\_source.likes++", "lang": "painless" }, …

---

## [Fixing wrong mapping of float as long](https://discuss.elastic.co/t/fixing-wrong-mapping-of-float-as-long/128355)

<div class="topic-metadata">

**Author:** [@shushu](https://discuss.elastic.co/u/shushu)\
**Replies:** 1\
**Last updated:** [April 17, 2018, 6:06pm UTC](https://discuss.elastic.co/t/fixing-wrong-mapping-of-float-as-long/128355 "2018-04-17T18:06:13Z")

</div>

Hi, I am writing daily aggregated data into elasticsearch, creating new index every day. I don't provide mapping in template, since the fields may change from time to time. I found out that SUM aggregation I am doing …

---

## [Histogram Aggregations with Decimal Interval](https://discuss.elastic.co/t/histogram-aggregations-with-decimal-interval/128390)

<div class="topic-metadata">

**Author:** [@dm90](https://discuss.elastic.co/u/dm90)\
**Replies:** 1\
**Last updated:** [April 17, 2018, 3:39pm UTC](https://discuss.elastic.co/t/histogram-aggregations-with-decimal-interval/128390 "2018-04-17T15:39:00Z")

</div>

Running Elasticsearch Version 6.2.2, I'm having trouble with the histogam aggregation I have a field with decimal numbers, and I'm running an aggregation like this: GET myindex/mytype/\_search? { "size": 0, "aggs": …

---

## [Query results non understood](https://discuss.elastic.co/t/query-results-non-understood/128364)

<div class="topic-metadata">

**Author:** [@jessie](https://discuss.elastic.co/u/jessie)\
**Replies:** 5\
**Last updated:** [April 17, 2018, 3:01pm UTC](https://discuss.elastic.co/t/query-results-non-understood/128364 "2018-04-17T15:01:22Z")

</div>

Hi everybody ! I have two indexes with the following mapping : "skills\_metiers": { "type": "nested", "properties": { "metier": { "type": "keyw…

---

## [Importing data to elasticsearch automatically using a folder](https://discuss.elastic.co/t/importing-data-to-elasticsearch-automatically-using-a-folder/128176)

<div class="topic-metadata">

**Author:** [@asmael](https://discuss.elastic.co/u/asmael)\
**Replies:** 4\
**Last updated:** [April 17, 2018, 3:00pm UTC](https://discuss.elastic.co/t/importing-data-to-elasticsearch-automatically-using-a-folder/128176 "2018-04-17T15:00:06Z")

</div>

hello I'm trying to build an application with elasticsearch and I want to add data and index it using a local folder that contains files automatically without using logstash, I don't want to do that manually and the fil…

---

## [Elk on Docker Swarm and glusterFS crash](https://discuss.elastic.co/t/elk-on-docker-swarm-and-glusterfs-crash/127940)

<div class="topic-metadata">

**Author:** [@faustf](https://discuss.elastic.co/u/faustf)\
**Replies:** 3\
**Last updated:** [April 17, 2018, 2:44pm UTC](https://discuss.elastic.co/t/elk-on-docker-swarm-and-glusterfs-crash/127940 "2018-04-17T14:44:16Z")

</div>

Hi, I'm trying to deploy an ELK stack on docker swarm. If I bind the elastic dir data to a Docker volume there is no problem. The problems comes as soon as I try to bind the elstastic data dir to a glusterFS volume. …

---

## [Change default jvm.option location propurly](https://discuss.elastic.co/t/change-default-jvm-option-location-propurly/128372)

<div class="topic-metadata">

**Author:** [@THUND3R](https://discuss.elastic.co/u/THUND3R)\
**Replies:** 0\
**Last updated:** [April 17, 2018, 1:54pm UTC](https://discuss.elastic.co/t/change-default-jvm-option-location-propurly/128372 "2018-04-17T13:54:38Z")

</div>

Good afternoon! I want to change the location of the jvm.options file, but I'm having trouble. When I install "ES\_JVM\_OPTIONS = / opt / elasticsearch / jvm.options" in /usr/share/elasticsearch/bin/elasticsearch, every…

---

## [Query technical question](https://discuss.elastic.co/t/query-technical-question/128187)

<div class="topic-metadata">

**Author:** [@Islam\_Elshobokshy](https://discuss.elastic.co/u/Islam_Elshobokshy)\
**Replies:** 3\
**Last updated:** [April 17, 2018, 1:47pm UTC](https://discuss.elastic.co/t/query-technical-question/128187 "2018-04-17T13:47:00Z")

</div>

First the look of my fields. id parent\_id type I want to write a query that show all the results that have this criteria : Each result's id shouldn't be a parent\_id of another result (parent\_id 0 doesn't count) The …

---

## [Weird inconsistencies regarding storage size in Elasticsearch 6](https://discuss.elastic.co/t/weird-inconsistencies-regarding-storage-size-in-elasticsearch-6/128135)

<div class="topic-metadata">

**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\
**Replies:** 3\
**Last updated:** [April 17, 2018, 1:28pm UTC](https://discuss.elastic.co/t/weird-inconsistencies-regarding-storage-size-in-elasticsearch-6/128135 "2018-04-17T13:28:43Z")

</div>

Hi everyone! I'm experiencing weird behavior when measuring the disk usage by Elasticsearch 6. I test my machine like so: This is the mapping: "transaction": { "properties": { "changedFieldsList": {…

---

## [Dynamic template for parent child mapping](https://discuss.elastic.co/t/dynamic-template-for-parent-child-mapping/128181)

<div class="topic-metadata">

**Author:** [@manik](https://discuss.elastic.co/u/manik)\
**Replies:** 3\
**Last updated:** [April 17, 2018, 1:06pm UTC](https://discuss.elastic.co/t/dynamic-template-for-parent-child-mapping/128181 "2018-04-17T13:06:49Z")

</div>

I'm using Elastic search 2.4.6 version. I want to have parent child relationship in my document. Parent is product related attributes and child is parent-city related attributes. We've around 100 cities now. Our idea is…

---

## [CrossClusterSearch and Aliases](https://discuss.elastic.co/t/crossclustersearch-and-aliases/127863)

<div class="topic-metadata">

**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\
**Replies:** 2\
**Last updated:** [April 17, 2018, 12:50pm UTC](https://discuss.elastic.co/t/crossclustersearch-and-aliases/127863 "2018-04-17T12:50:03Z")

</div>

I suspect the answer is no, but I can't find anything in the documentation to say yes or no. The question is can you add a CCS in to an alias? like so: curl -XPOST 'hd1delk01lx:9205/\_aliases?pretty' -H 'Content-Type: …

---

## [Problem finding duplicate documents via kibana? Issue with unique count!](https://discuss.elastic.co/t/problem-finding-duplicate-documents-via-kibana-issue-with-unique-count/128132)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 5\
**Last updated:** [April 17, 2018, 12:41pm UTC](https://discuss.elastic.co/t/problem-finding-duplicate-documents-via-kibana-issue-with-unique-count/128132 "2018-04-17T12:41:17Z")

</div>

Hi, I am a bit confused: All our documents are shipped via filebeat. Filebeat allways adds the meta information field offset (position in logfile) - so far my understanding. If I filter for a single logfile, then the …

---

## [Do I need a match all before filters?](https://discuss.elastic.co/t/do-i-need-a-match-all-before-filters/128320)

<div class="topic-metadata">

**Author:** [@Islam\_Elshobokshy](https://discuss.elastic.co/u/Islam_Elshobokshy)\
**Replies:** 2\
**Last updated:** [April 17, 2018, 12:11pm UTC](https://discuss.elastic.co/t/do-i-need-a-match-all-before-filters/128320 "2018-04-17T12:11:42Z")

</div>

Hello guys, If I want to filter results from an elasticsearch type, do I need to match all of them first like this : "query": { "bool": { "must": { "match\_all": {} }, …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1715)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1717)
