# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1721

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1722

---

## [Cutoff frequency in multi match query](https://discuss.elastic.co/t/cutoff-frequency-in-multi-match-query/127784)

<div class="topic-metadata">

**Author:** [@yash\_mundra](https://discuss.elastic.co/u/yash_mundra)\
**Replies:** 0\
**Last updated:** [April 12, 2018, 10:06am UTC](https://discuss.elastic.co/t/cutoff-frequency-in-multi-match-query/127784 "2018-04-12T10:06:38Z")

</div>

If I am using cutoff frequency in multi match query with multiple fields, is it applied to every field individually? How does it work?

---

## [Nested Json fields](https://discuss.elastic.co/t/nested-json-fields/127669)

<div class="topic-metadata">

**Author:** [@chrigui94](https://discuss.elastic.co/u/chrigui94)\
**Replies:** 4\
**Last updated:** [April 12, 2018, 9:41am UTC](https://discuss.elastic.co/t/nested-json-fields/127669 "2018-04-12T09:41:27Z")

</div>

I have a json that looks like this \[Capture\] This is my problem: I need to get positions of gateways (antennaLongitude, antennaLatitude) as a geo\_point type and make a kibana map that contains the posititions of gatew…

---

## [Query based on array item](https://discuss.elastic.co/t/query-based-on-array-item/127764)

<div class="topic-metadata">

**Author:** [@cassiopeia](https://discuss.elastic.co/u/cassiopeia)\
**Replies:** 2\
**Last updated:** [April 12, 2018, 9:22am UTC](https://discuss.elastic.co/t/query-based-on-array-item/127764 "2018-04-12T09:22:02Z")

</div>

Hi, My document looks like this { "branchCode":"WA-0104556", "items":\[ { "id":"CAR-0014", "qty":4, "category":"PRIMARY" }, { "id":"CAR-0015", "qty":5, "category":"PRIMARY" }, { "id":"CAR-0016", "qty":4…

---

## [Search results vary with max\_expansion across jvm](https://discuss.elastic.co/t/search-results-vary-with-max-expansion-across-jvm/127754)

<div class="topic-metadata">

**Author:** [@gauravbhatt13](https://discuss.elastic.co/u/gauravbhatt13)\
**Replies:** 0\
**Last updated:** [April 12, 2018, 7:43am UTC](https://discuss.elastic.co/t/search-results-vary-with-max-expansion-across-jvm/127754 "2018-04-12T07:43:35Z")

</div>

I have created an index using an input data file in one machine. I again created a new index with the same input data file in different machine. I execute following query in both machines: { "fields":\["AD10"\], "from":…

---

## [How to migrate Elasticsearch data to AWS provided Elsticsearch Service](https://discuss.elastic.co/t/how-to-migrate-elasticsearch-data-to-aws-provided-elsticsearch-service/127745)

<div class="topic-metadata">

**Author:** [@vishu.kolki](https://discuss.elastic.co/u/vishu.kolki)\
**Replies:** 1\
**Last updated:** [April 12, 2018, 7:39am UTC](https://discuss.elastic.co/t/how-to-migrate-elasticsearch-data-to-aws-provided-elsticsearch-service/127745 "2018-04-12T07:39:40Z")

</div>

Hi Team, How can i migrate Elasticsearch data from a normal server to AWS provide Elasticsearch Service Domain? Is there any tool for it? Or i can do it manual way. If it is, what are the steps? Thanks and Regards V…

---

## [Not Using Client Node for Logstash](https://discuss.elastic.co/t/not-using-client-node-for-logstash/127403)

<div class="topic-metadata">

**Author:** [@code\_blue](https://discuss.elastic.co/u/code_blue)\
**Replies:** 5\
**Last updated:** [April 12, 2018, 7:34am UTC](https://discuss.elastic.co/t/not-using-client-node-for-logstash/127403 "2018-04-12T07:34:00Z")

</div>

Do we need to use client node when ingesting data through Logstash as we can specify individual Node names in comma separated format in Logstash. If we do not use client node for Ingestion and rather point to data/maste…

---

## [Query empty object](https://discuss.elastic.co/t/query-empty-object/127747)

<div class="topic-metadata">

**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\
**Replies:** 2\
**Last updated:** [April 12, 2018, 7:26am UTC](https://discuss.elastic.co/t/query-empty-object/127747 "2018-04-12T07:26:11Z")

</div>

Hello everyone, How can I query an empty object something like below "field" : {} In mapping this is mapped to an Object type.

---

## [How to take backup of elasticsearch service config?](https://discuss.elastic.co/t/how-to-take-backup-of-elasticsearch-service-config/125321)

<div class="topic-metadata">

**Author:** [@SathishKannan](https://discuss.elastic.co/u/SathishKannan)\
**Replies:** 9\
**Last updated:** [April 12, 2018, 6:44am UTC](https://discuss.elastic.co/t/how-to-take-backup-of-elasticsearch-service-config/125321 "2018-04-12T06:44:06Z")

</div>

how to take backup of config /etc/elasticsearch//conf..?

---

## [What is the minimum version required of elasticsearch for integrating SAML?](https://discuss.elastic.co/t/what-is-the-minimum-version-required-of-elasticsearch-for-integrating-saml/127584)

<div class="topic-metadata">

**Author:** [@hardik.rapidops](https://discuss.elastic.co/u/hardik.rapidops)\
**Replies:** 6\
**Last updated:** [April 12, 2018, 6:41am UTC](https://discuss.elastic.co/t/what-is-the-minimum-version-required-of-elasticsearch-for-integrating-saml/127584 "2018-04-12T06:41:26Z")

</div>

Hello I am using elasticsearch 5.6.2. Does it supports SAML integration ? Can anyone tell me minimum version of elasticsearch which supports SAML ?

---

## [Problem launching Elasticsearch](https://discuss.elastic.co/t/problem-launching-elasticsearch/127737)

<div class="topic-metadata">

**Author:** [@soumya\_sahoo](https://discuss.elastic.co/u/soumya_sahoo)\
**Replies:** 1\
**Last updated:** [April 12, 2018, 6:03am UTC](https://discuss.elastic.co/t/problem-launching-elasticsearch/127737 "2018-04-12T06:03:53Z")

</div>

I get the following error log while launching elasticsearch. C:\\Users\\ssahoo\\Downloads\\elasticsearch-6.2.3\\bin\>elasticsearch \[2018-04-12T11:08:52,520\]\[INFO \]\[o.e.n.Node \] \[\] initializing ... \[2018-04-12T…

---

## [Adding extra fields on reindexing](https://discuss.elastic.co/t/adding-extra-fields-on-reindexing/127708)

<div class="topic-metadata">

**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\
**Replies:** 1\
**Last updated:** [April 12, 2018, 6:02am UTC](https://discuss.elastic.co/t/adding-extra-fields-on-reindexing/127708 "2018-04-12T06:02:32Z")

</div>

Hi, How can I add extra filed's when I reindex the documents using Java API? I tried below code and it doesn't work and fails with below exception Map\<String, Object\> params = new HashMap\<\>(); …

---

## [Settings SSL/TLS with xpack](https://discuss.elastic.co/t/settings-ssl-tls-with-xpack/127640)

<div class="topic-metadata">

**Author:** [@souf\_el\_badraoui](https://discuss.elastic.co/u/souf_el_badraoui)\
**Replies:** 5\
**Last updated:** [April 12, 2018, 4:49am UTC](https://discuss.elastic.co/t/settings-ssl-tls-with-xpack/127640 "2018-04-12T04:49:06Z")

</div>

Hello, I'm trying to set up SSL/TLS with x-pack and running into this on some nodes : \[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] uncaught exception in thread \[main\] org.elasticsearch.bootstrap.StartupExcepti…

---

## [Elasticsearch watchdog](https://discuss.elastic.co/t/elasticsearch-watchdog/127728)

<div class="topic-metadata">

**Author:** [@Gaurav\_Harsola](https://discuss.elastic.co/u/Gaurav_Harsola)\
**Replies:** 0\
**Last updated:** [April 12, 2018, 4:40am UTC](https://discuss.elastic.co/t/elasticsearch-watchdog/127728 "2018-04-12T04:40:07Z")

</div>

when master node crash how i can bring it again using watchdog. How should i configure watchdog in my current cluster. Thanks Gaurav

---

## [Cross-cluster search security exception in Chrome](https://discuss.elastic.co/t/cross-cluster-search-security-exception-in-chrome/127702)

<div class="topic-metadata">

**Author:** [@DaveyDevOps](https://discuss.elastic.co/u/DaveyDevOps)\
**Replies:** 2\
**Last updated:** [April 12, 2018, 3:03am UTC](https://discuss.elastic.co/t/cross-cluster-search-security-exception-in-chrome/127702 "2018-04-12T03:03:47Z")

</div>

Elasticsearch version (bin/elasticsearch --version): Version: 6.2.2, Build: 10b1edd/2018-02-16T19:01:30.685723Z, JVM: 1.8.0\_121 and Version: 5.6.6, Build: 7d99d36/2018-01-09T23:55:47.880Z, JVM: 1.8.0\_121 Plugins inst…

---

## [Elasitcsearch cluster with docker swarm](https://discuss.elastic.co/t/elasitcsearch-cluster-with-docker-swarm/127712)

<div class="topic-metadata">

**Author:** [@8e6d5b4d49f69e9edb4c](https://discuss.elastic.co/u/8e6d5b4d49f69e9edb4c)\
**Replies:** 0\
**Last updated:** [April 12, 2018, 1:46am UTC](https://discuss.elastic.co/t/elasitcsearch-cluster-with-docker-swarm/127712 "2018-04-12T01:46:36Z")

</div>

Hi, all. I tried to run Elasticsearch cluster with docker swarm. However, there is a problem described in https://github.com/elastic/elasticsearch-docker/issues/91#issuecomment-319679786. Solutions from above issue ar…

---

## [Streaming Log Analysis in ELK Stack](https://discuss.elastic.co/t/streaming-log-analysis-in-elk-stack/127709)

<div class="topic-metadata">

**Author:** [@nandan\_bigdata](https://discuss.elastic.co/u/nandan_bigdata)\
**Replies:** 0\
**Last updated:** [April 12, 2018, 1:15am UTC](https://discuss.elastic.co/t/streaming-log-analysis-in-elk-stack/127709 "2018-04-12T01:15:29Z")

</div>

Hey Peoples, I am working on Streaming Log Analysis project. Currently, I have 3 different types of log such as:- Apache Server Log Ngnix Log Mysql Log In future, I will add more different sources of Log. Please tel…

---

## [X-PACK Monitoring with Reporting Disabled Warning](https://discuss.elastic.co/t/x-pack-monitoring-with-reporting-disabled-warning/127234)

<div class="topic-metadata">

**Author:** [@gromit](https://discuss.elastic.co/u/gromit)\
**Replies:** 2\
**Last updated:** [April 12, 2018, 1:15am UTC](https://discuss.elastic.co/t/x-pack-monitoring-with-reporting-disabled-warning/127234 "2018-04-12T01:15:07Z")

</div>

I am using the x-pack monitoring module with all other x-pack modules disabled in Elasticsearch & Kibana. All works fine, but getting this constant warning message in the Kibana logs: log \[warning\]\[kibana-monitoring\]…

---

## [Percolate already indexed documents in bulk](https://discuss.elastic.co/t/percolate-already-indexed-documents-in-bulk/127554)

<div class="topic-metadata">

**Author:** [@Aravind](https://discuss.elastic.co/u/Aravind)\
**Replies:** 6\
**Last updated:** [April 11, 2018, 11:13pm UTC](https://discuss.elastic.co/t/percolate-already-indexed-documents-in-bulk/127554 "2018-04-11T23:13:28Z")

</div>

We would like to perform percolate on documents which are already indexed in elastic. Ofcourse it is possible to do this as document here - https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-perc…

---

## [Elasticsearch.Net/Nest issue with API after upgrade to 6.2.3](https://discuss.elastic.co/t/elasticsearch-net-nest-issue-with-api-after-upgrade-to-6-2-3/127690)

<div class="topic-metadata">

**Author:** [@manojtrek](https://discuss.elastic.co/u/manojtrek)\
**Replies:** 2\
**Last updated:** [April 11, 2018, 11:12pm UTC](https://discuss.elastic.co/t/elasticsearch-net-nest-issue-with-api-after-upgrade-to-6-2-3/127690 "2018-04-11T23:12:52Z")

</div>

In ES 5.6, using Nest API, we were doing Create operation using following code... var descriptor = new BulkDescriptor(); descriptor.Index\<JObject\>(i =\> i .Index(esClient.IndexName) …

---

## [Why is catch-all field slower in 6.2 compared to 2.4?](https://discuss.elastic.co/t/why-is-catch-all-field-slower-in-6-2-compared-to-2-4/124374)

<div class="topic-metadata">

**Author:** [@ar21](https://discuss.elastic.co/u/ar21)\
**Replies:** 3\
**Last updated:** [April 11, 2018, 10:14pm UTC](https://discuss.elastic.co/t/why-is-catch-all-field-slower-in-6-2-compared-to-2-4/124374 "2018-04-11T22:14:13Z")

</div>

We upgraded a 2.4 cluster to 6.2 cluster using the reindex from remote approach. In 2.4, we were using the catch-all \_all field to perform searches and were seeing response times under 500 ms for all our queries. In 6.2…

---

## [Distributed search performance](https://discuss.elastic.co/t/distributed-search-performance/127682)

<div class="topic-metadata">

**Author:** [@dmarlow](https://discuss.elastic.co/u/dmarlow)\
**Replies:** 2\
**Last updated:** [April 11, 2018, 8:13pm UTC](https://discuss.elastic.co/t/distributed-search-performance/127682 "2018-04-11T20:13:48Z")

</div>

I currently have a 3 node cluster where each node has a complete copy of every index. Based on the documentation on distributed search queries found here: https://www.elastic.co/guide/en/elasticsearch/guide/current/\_que…

---

## [Java Rest Client Encrypted Communication Fails](https://discuss.elastic.co/t/java-rest-client-encrypted-communication-fails/127696)

<div class="topic-metadata">

**Author:** [@marnold](https://discuss.elastic.co/u/marnold)\
**Replies:** 0\
**Last updated:** [April 11, 2018, 7:26pm UTC](https://discuss.elastic.co/t/java-rest-client-encrypted-communication-fails/127696 "2018-04-11T19:26:01Z")

</div>

I'm currently running with Elasticstack 6.2.3, along with the x-pack plugin. Part of the setup of x-pack was to create SSL encryption on both the host transport layer and the client http layer. The configuration all we…

---

## [Elasticsearch query to search word occurred as n times in document](https://discuss.elastic.co/t/elasticsearch-query-to-search-word-occurred-as-n-times-in-document/127688)

<div class="topic-metadata">

**Author:** [@JoshuaIn](https://discuss.elastic.co/u/JoshuaIn)\
**Replies:** 0\
**Last updated:** [April 11, 2018, 6:38pm UTC](https://discuss.elastic.co/t/elasticsearch-query-to-search-word-occurred-as-n-times-in-document/127688 "2018-04-11T18:38:18Z")

</div>

Is it possible to query in elasticsearch if i want certain word to be occurred more than n times. For e.g. I want to search for word "Bill Gate" only if "Bill Gate" is present more than or equal to 3 times in a document. …

---

## [ElasticSearch data structure](https://discuss.elastic.co/t/elasticsearch-data-structure/127685)

<div class="topic-metadata">

**Author:** [@barlacon](https://discuss.elastic.co/u/barlacon)\
**Replies:** 0\
**Last updated:** [April 11, 2018, 5:15pm UTC](https://discuss.elastic.co/t/elasticsearch-data-structure/127685 "2018-04-11T17:15:07Z")

</div>

I've next data structure Product: name: char Shop: location: geo\_point ShopProduct: shop: ForeignKey(Shop) product: ForeignKey(Product) price: double What mapping should I use if I need to implement search …

---

## [Cut Off Frequency and operator: "and"](https://discuss.elastic.co/t/cut-off-frequency-and-operator-and/126766)

<div class="topic-metadata">

**Author:** [@yash\_mundra](https://discuss.elastic.co/u/yash_mundra)\
**Replies:** 1\
**Last updated:** [April 11, 2018, 5:03pm UTC](https://discuss.elastic.co/t/cut-off-frequency-and-operator-and/126766 "2018-04-11T17:03:47Z")

</div>

"query": { "multi\_match": { "query": "how to do business process", "operator": "and", "fields": \[ "title.stemmed\_with\_stopwords\_with\_synonyms", "title.stemmed\_no\_stopwords" \], "cutoff\_frequency": 0.01 } } I wa…

---

## [Accessing terms in TermVectorResponse](https://discuss.elastic.co/t/accessing-terms-in-termvectorresponse/127555)

<div class="topic-metadata">

**Author:** [@sdeck51](https://discuss.elastic.co/u/sdeck51)\
**Replies:** 1\
**Last updated:** [April 11, 2018, 5:03pm UTC](https://discuss.elastic.co/t/accessing-terms-in-termvectorresponse/127555 "2018-04-11T17:03:16Z")

</div>

Hello, I'm trying to get a list of Terms from a termvectorresponse in an elasticsearch plugin. I want to get access to all of the statistics which are tied to the terms and am having trouble figuring out how to do that. …

---

## [\_delete\_by\_query not working](https://discuss.elastic.co/t/delete-by-query-not-working/126826)

<div class="topic-metadata">

**Author:** [@john.bennett](https://discuss.elastic.co/u/john.bennett)\
**Replies:** 6\
**Last updated:** [April 11, 2018, 4:59pm UTC](https://discuss.elastic.co/t/delete-by-query-not-working/126826 "2018-04-11T16:59:42Z")

</div>

Due to a miss setting, we have some docs in the ES that are GZ compressed. We fixed the file, and the info we need is loaded ok. But we wish to delete the docs that are gz compressed. I find the docs I want to delete. O…

---

## [TCP connections to itself?](https://discuss.elastic.co/t/tcp-connections-to-itself/127680)

<div class="topic-metadata">

**Author:** [@dmarlow](https://discuss.elastic.co/u/dmarlow)\
**Replies:** 0\
**Last updated:** [April 11, 2018, 4:35pm UTC](https://discuss.elastic.co/t/tcp-connections-to-itself/127680 "2018-04-11T16:35:24Z")

</div>

Is it normal for ES to open many connections to itself? I'm on ES version 6.1.1. I have 3 machines in a cluster (internal IPs are: 172.16.2.4, 2.5 and 2.6). Is it normal for all of the 127.0.0.1 connections to itself?Whe…

---

## [Curator\_cli and curator commands do nothing](https://discuss.elastic.co/t/curator-cli-and-curator-commands-do-nothing/127535)

<div class="topic-metadata">

**Author:** [@ericj](https://discuss.elastic.co/u/ericj)\
**Replies:** 5\
**Last updated:** [April 11, 2018, 3:11pm UTC](https://discuss.elastic.co/t/curator-cli-and-curator-commands-do-nothing/127535 "2018-04-11T15:11:00Z")

</div>

I have a pair of ES 6.1.1 clusters and have deployed curator 5.4.1 against one of them. Curator and curator\_cli commands have no effect. Logging is relatively sparse, however in debug mode I get some output, which I've…

---

## [How to increase max length of a document to be indexed from default 2kb to higher value?](https://discuss.elastic.co/t/how-to-increase-max-length-of-a-document-to-be-indexed-from-default-2kb-to-higher-value/127657)

<div class="topic-metadata">

**Author:** [@Rohit\_Datla](https://discuss.elastic.co/u/Rohit_Datla)\
**Replies:** 0\
**Last updated:** [April 11, 2018, 2:39pm UTC](https://discuss.elastic.co/t/how-to-increase-max-length-of-a-document-to-be-indexed-from-default-2kb-to-higher-value/127657 "2018-04-11T14:39:55Z")

</div>

I am using elastic search through python. When I try to index a document of size 120kb, i get an error in python as (image attached) \[es\] when I look at Elastic search 6.2.3 logs(image attached), i see that max length …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1720)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1722)
