# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1732

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1733

---

## [New to ES/Compare daily data to previous date's data](https://discuss.elastic.co/t/new-to-es-compare-daily-data-to-previous-dates-data/125392)

<div class="topic-metadata">

**Author:** [@PaulCarsten](https://discuss.elastic.co/u/PaulCarsten)\
**Replies:** 6\
**Last updated:** [April 3, 2018, 8:19am UTC](https://discuss.elastic.co/t/new-to-es-compare-daily-data-to-previous-dates-data/125392 "2018-04-03T08:19:53Z")

</div>

Hi everyone! I'm a relative newcomer to a project that has a big Elasticsearch cluster with netflow data in it. We've been tasked with coming up with analytics, and one that has been suggested is some way of comparing a …

---

## [Elasticsearch & BigQuery](https://discuss.elastic.co/t/elasticsearch-bigquery/126519)

<div class="topic-metadata">

**Author:** [@Kimo\_Badi](https://discuss.elastic.co/u/Kimo_Badi)\
**Replies:** 0\
**Last updated:** [April 3, 2018, 8:15am UTC](https://discuss.elastic.co/t/elasticsearch-bigquery/126519 "2018-04-03T08:15:41Z")

</div>

is there any documentation in how both Elasticsearch and BigQuery could work together. Which usecases can be performed by each of them and how would a high level architecture for such an implementation would look like. …

---

## [Debug.explain is not working](https://discuss.elastic.co/t/debug-explain-is-not-working/126498)

<div class="topic-metadata">

**Author:** [@shivamkrpandey](https://discuss.elastic.co/u/shivamkrpandey)\
**Replies:** 2\
**Last updated:** [April 3, 2018, 7:57am UTC](https://discuss.elastic.co/t/debug-explain-is-not-working/126498 "2018-04-03T07:57:17Z")

</div>

I have the below script that I'm trying to execute to update a document. But Debug.explain() doesn't seem to be working. Any insights into this would be appreciated. My Elasticsearch version is 5.5.0. Script script = ne…

---

## [Should i merge a stream of variables into a single event to make elastic work more efficiently](https://discuss.elastic.co/t/should-i-merge-a-stream-of-variables-into-a-single-event-to-make-elastic-work-more-efficiently/125860)

<div class="topic-metadata">

**Author:** [@Sapoku](https://discuss.elastic.co/u/Sapoku)\
**Replies:** 5\
**Last updated:** [April 3, 2018, 7:56am UTC](https://discuss.elastic.co/t/should-i-merge-a-stream-of-variables-into-a-single-event-to-make-elastic-work-more-efficiently/125860 "2018-04-03T07:56:21Z")

</div>

I have a system that streams very 1 minute a series of values regarding its service to Logstash. So basically, it streams about 50-60 variables on each event. With the variables there is also sent a transaction ID, so g…

---

## [Elasticsearch reports wrong version after upgrading from 5.6.x to 6.x](https://discuss.elastic.co/t/elasticsearch-reports-wrong-version-after-upgrading-from-5-6-x-to-6-x/125121)

<div class="topic-metadata">

**Author:** [@fetch](https://discuss.elastic.co/u/fetch)\
**Replies:** 2\
**Last updated:** [April 3, 2018, 7:41am UTC](https://discuss.elastic.co/t/elasticsearch-reports-wrong-version-after-upgrading-from-5-6-x-to-6-x/125121 "2018-04-03T07:41:13Z")

</div>

Hi, Before updating my production server from 5.6.5 to 6.x I've tried updating my test cluster, but my cluster entered some weird state. So I have a cluster where are two PCs with elasticsearch 5.6.5 installed from deb…

---

## [Index payload in watcher actions generates an exception and log shows up error for email which is not used in the watch](https://discuss.elastic.co/t/index-payload-in-watcher-actions-generates-an-exception-and-log-shows-up-error-for-email-which-is-not-used-in-the-watch/125991)

<div class="topic-metadata">

**Author:** [@ssubha](https://discuss.elastic.co/u/ssubha)\
**Replies:** 1\
**Last updated:** [April 3, 2018, 7:27am UTC](https://discuss.elastic.co/t/index-payload-in-watcher-actions-generates-an-exception-and-log-shows-up-error-for-email-which-is-not-used-in-the-watch/125991 "2018-04-03T07:27:04Z")

</div>

Hi..I created a watch which needs to update the index after performing few aggregations..But it generates an exception..When I have checked the elasticsearch log, it says \[image\] I haven't used email anywhere in my cur…

---

## [Take action when watch is back to normal (condition unmet)](https://discuss.elastic.co/t/take-action-when-watch-is-back-to-normal-condition-unmet/126297)

<div class="topic-metadata">

**Author:** [@Siping\_Wang](https://discuss.elastic.co/u/Siping_Wang)\
**Replies:** 1\
**Last updated:** [April 3, 2018, 7:08am UTC](https://discuss.elastic.co/t/take-action-when-watch-is-back-to-normal-condition-unmet/126297 "2018-04-03T07:08:32Z")

</div>

In our use case, we would like to notify our team when the watch is back to normal, namely the condition is no longer met. For example, we would like to be notified when the log has an error, but also when the error mess…

---

## [Create new user](https://discuss.elastic.co/t/create-new-user/122362)

<div class="topic-metadata">

**Author:** [@shahpx](https://discuss.elastic.co/u/shahpx)\
**Replies:** 9\
**Last updated:** [April 3, 2018, 4:34am UTC](https://discuss.elastic.co/t/create-new-user/122362 "2018-04-03T04:34:41Z")

</div>

Hello, I have installed ELK stack with x-pack. Now I logged in with Kibana user and trying to create new user but it is throwing error: You do not have permission to manage users. Please contact your administrator. A…

---

## [How to pass search query to elasticsearch from laravel controller](https://discuss.elastic.co/t/how-to-pass-search-query-to-elasticsearch-from-laravel-controller/126495)

<div class="topic-metadata">

**Author:** [@divya757](https://discuss.elastic.co/u/divya757)\
**Replies:** 0\
**Last updated:** [April 3, 2018, 3:58am UTC](https://discuss.elastic.co/t/how-to-pass-search-query-to-elasticsearch-from-laravel-controller/126495 "2018-04-03T03:58:01Z")

</div>

i am working on this one but it is not working , i am using aws elasticsearch 6.2 $hosts=\[ 'host' =\> 'localhost(here i am using aws end point)' \]; $client = ClientBuilder::create() -\>setHosts($hosts) -\>build(); $jso…

---

## [Advantages of base64 encoded content in ingest attachment plugin](https://discuss.elastic.co/t/advantages-of-base64-encoded-content-in-ingest-attachment-plugin/126452)

<div class="topic-metadata">

**Author:** [@Hemanth\_Gowda](https://discuss.elastic.co/u/Hemanth_Gowda)\
**Replies:** 2\
**Last updated:** [April 3, 2018, 2:44am UTC](https://discuss.elastic.co/t/advantages-of-base64-encoded-content-in-ingest-attachment-plugin/126452 "2018-04-03T02:44:50Z")

</div>

Hi, I am using ingest attachment plugin to index my PDF files.In the query during ingestion the source field is expecting base64 content.Below are my questions. Why we need to pass base64 content as source to plugin.Ho…

---

## [Asynch retry timeout](https://discuss.elastic.co/t/asynch-retry-timeout/122625)

<div class="topic-metadata">

**Author:** [@klaus](https://discuss.elastic.co/u/klaus)\
**Replies:** 1\
**Last updated:** [March 6, 2018, 2:37am UTC](https://discuss.elastic.co/t/asynch-retry-timeout/122625 "2018-03-06T02:37:38Z")

</div>

Has https://github.com/elastic/elasticsearch/issues/25951 been addressed and if so in what release? Thanks, -Klaus

---

## [Indexing child field of disabled JSON](https://discuss.elastic.co/t/indexing-child-field-of-disabled-json/126485)

<div class="topic-metadata">

**Author:** [@Shahzaib\_Gill](https://discuss.elastic.co/u/Shahzaib_Gill)\
**Replies:** 0\
**Last updated:** [April 3, 2018, 1:22am UTC](https://discuss.elastic.co/t/indexing-child-field-of-disabled-json/126485 "2018-04-03T01:22:18Z")

</div>

I have a case where a certain field of the incoming JSON does not hold type integrity, so I don't index it in elasticsearch, by setting enabled = false. However, I want to enable a subfield of that JSON to be indexed. I…

---

## [Operation type bulk](https://discuss.elastic.co/t/operation-type-bulk/126477)

<div class="topic-metadata">

**Author:** [@poorvig89](https://discuss.elastic.co/u/poorvig89)\
**Replies:** 1\
**Last updated:** [April 2, 2018, 11:32pm UTC](https://discuss.elastic.co/t/operation-type-bulk/126477 "2018-04-02T23:32:25Z")

</div>

I have a challenge that deletes the index, creates the index, check the cluster health and then bulk index it . When I execute the challenge in my local environment , it works fine , (I do not see the actual documents i…

---

## [Is this right? Nested array will slow down deep search](https://discuss.elastic.co/t/is-this-right-nested-array-will-slow-down-deep-search/126464)

<div class="topic-metadata">

**Author:** [@frzhang](https://discuss.elastic.co/u/frzhang)\
**Replies:** 0\
**Last updated:** [April 2, 2018, 8:22pm UTC](https://discuss.elastic.co/t/is-this-right-nested-array-will-slow-down-deep-search/126464 "2018-04-02T20:22:06Z")

</div>

Initially, there was a nested array in my document but I didn't search any field in the array, when I profiled the \_search, I found out there were children query on the nested array (something like below, it has such Ter…

---

## [Elasticsearch with X-pack on Windows fails to run](https://discuss.elastic.co/t/elasticsearch-with-x-pack-on-windows-fails-to-run/126431)

<div class="topic-metadata">

**Author:** [@Ongun](https://discuss.elastic.co/u/Ongun)\
**Replies:** 1\
**Last updated:** [April 2, 2018, 7:47pm UTC](https://discuss.elastic.co/t/elasticsearch-with-x-pack-on-windows-fails-to-run/126431 "2018-04-02T19:47:04Z")

</div>

I recently installed X-pack for Elasticsearch and Kibana 6.2.2 on Windows 10. I followed the instructions on the this internet guide word by word. However, after installing X-pack for Kibana and restarting the ELK stack …

---

## [Fuzzy query in query vs. filter context](https://discuss.elastic.co/t/fuzzy-query-in-query-vs-filter-context/125823)

<div class="topic-metadata">

**Author:** [@l\_l](https://discuss.elastic.co/u/l_l)\
**Replies:** 0\
**Last updated:** [March 27, 2018, 9:05pm UTC](https://discuss.elastic.co/t/fuzzy-query-in-query-vs-filter-context/125823 "2018-03-27T21:05:16Z")

</div>

I have an index whose documents have a field firstName. If I run the following, for example: GET \_search/ { "query": { "fuzzy": { "firstName": { "value": "yvonne", "fuzziness": 1 } …

---

## [Source Filtering in JAVA REST API](https://discuss.elastic.co/t/source-filtering-in-java-rest-api/126461)

<div class="topic-metadata">

**Author:** [@imlucky007](https://discuss.elastic.co/u/imlucky007)\
**Replies:** 0\
**Last updated:** [April 2, 2018, 7:19pm UTC](https://discuss.elastic.co/t/source-filtering-in-java-rest-api/126461 "2018-04-02T19:19:56Z")

</div>

Hi, Im trying to do source filtering with the specific key "primary\_key" in JAVA REST API below is the elasticsearch query which gives me correct results how can i do the same in API GET \_search/ { "\_source": { "in…

---

## [Java HighLevelRestClient search problem](https://discuss.elastic.co/t/java-highlevelrestclient-search-problem/126264)

<div class="topic-metadata">

**Author:** [@danfisk](https://discuss.elastic.co/u/danfisk)\
**Replies:** 6\
**Last updated:** [April 2, 2018, 5:27pm UTC](https://discuss.elastic.co/t/java-highlevelrestclient-search-problem/126264 "2018-04-02T17:27:16Z")

</div>

I am new to ElasticSearch and have been trying to write Java EE to bring data in from an Informal DB and then run user searches on it. I have been able to get the indexing to work and am able to retrieve a specific ind…

---

## [Debug the message "Rejecting mapping update..."](https://discuss.elastic.co/t/debug-the-message-rejecting-mapping-update/126437)

<div class="topic-metadata">

**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Replies:** 1\
**Last updated:** [April 2, 2018, 4:31pm UTC](https://discuss.elastic.co/t/debug-the-message-rejecting-mapping-update/126437 "2018-04-02T16:31:17Z")

</div>

I am using a template index which has the following entry: "index\_patterns": "myindexpattern-\*", and also ... "mappings": { "\_doc": { "dynamic" : "strict", "properties": {... and also outputting som…

---

## [Elastic Stack: création d'index](https://discuss.elastic.co/t/elastic-stack-creation-dindex/126445)

<div class="topic-metadata">

**Author:** [@Ibti\_Ssem](https://discuss.elastic.co/u/Ibti_Ssem)\
**Replies:** 1\
**Last updated:** [April 2, 2018, 4:05pm UTC](https://discuss.elastic.co/t/elastic-stack-creation-dindex/126445 "2018-04-02T16:05:37Z")

</div>

l'index Non créé pourqoi ! logstash config input { file { path =\> "C:\\log\\error\_logg" start\_position =\> "beginning" } } output { elasticsearch { hosts =\> "localhost:9200" manage\_template =\> false index =\> "ap…

---

## [X-pack Azure AD SAML auth](https://discuss.elastic.co/t/x-pack-azure-ad-saml-auth/126119)

<div class="topic-metadata">

**Author:** [@william\_hall](https://discuss.elastic.co/u/william_hall)\
**Replies:** 5\
**Last updated:** [April 2, 2018, 2:56pm UTC](https://discuss.elastic.co/t/x-pack-azure-ad-saml-auth/126119 "2018-04-02T14:56:23Z")

</div>

Were having difficulty troubleshooting getting saml working with our Azure AD. i have been following this thread and has been helpful and we have run into a similar issue. We are now getting a 401 error when trying to l…

---

## [Benefits of using Apache Nifi instead of logstash](https://discuss.elastic.co/t/benefits-of-using-apache-nifi-instead-of-logstash/126436)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 0\
**Last updated:** [April 2, 2018, 2:00pm UTC](https://discuss.elastic.co/t/benefits-of-using-apache-nifi-instead-of-logstash/126436 "2018-04-02T14:00:24Z")

</div>

Hi Team, can someone tell me if using Apache Nifi instead of logstash would be useful? Since I believe logstash goes very well with EK not sure what benefit I'll get? What your thoughts? And which one will be best cons…

---

## [Error opening machine learning](https://discuss.elastic.co/t/error-opening-machine-learning/126302)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 6\
**Last updated:** [April 2, 2018, 1:50pm UTC](https://discuss.elastic.co/t/error-opening-machine-learning/126302 "2018-04-02T13:50:58Z")

</div>

Hi, I want to try the machine learning features in kibana.But when I create a new job and open it, it shows the error \[image\] How can I do ? thanks a lot!

---

## [Windows server](https://discuss.elastic.co/t/windows-server/126417)

<div class="topic-metadata">

**Author:** [@youssef\_khaoulaj](https://discuss.elastic.co/u/youssef_khaoulaj)\
**Replies:** 3\
**Last updated:** [April 2, 2018, 1:41pm UTC](https://discuss.elastic.co/t/windows-server/126417 "2018-04-02T13:41:39Z")

</div>

how to install X-Pack in windows server 2008 and 2012

---

## [Testing: new index vs. new cluster](https://discuss.elastic.co/t/testing-new-index-vs-new-cluster/126425)

<div class="topic-metadata">

**Author:** [@Pisush](https://discuss.elastic.co/u/Pisush)\
**Replies:** 0\
**Last updated:** [April 2, 2018, 12:43pm UTC](https://discuss.elastic.co/t/testing-new-index-vs-new-cluster/126425 "2018-04-02T12:43:30Z")

</div>

Reading a bit about testing Elastic, 2 options are possible: Dedicating an index in the cluster used in production and setting up an in memory cluster. The first option is good mainly because it allows testing IRL beha…

---

## [Use script fields to filter data](https://discuss.elastic.co/t/use-script-fields-to-filter-data/125771)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 8\
**Last updated:** [April 2, 2018, 12:30pm UTC](https://discuss.elastic.co/t/use-script-fields-to-filter-data/125771 "2018-04-02T12:30:34Z")

</div>

Is possible use a script\_fields to filter/find data? Example: { "script\_fields": { "my\_custom\_field": { "script": { "inline": "int x; x = 0; x = ((doc\['deadline'\].empty)&&(doc\['s…

---

## [How to delete data in elastic search through id](https://discuss.elastic.co/t/how-to-delete-data-in-elastic-search-through-id/126421)

<div class="topic-metadata">

**Author:** [@Anil\_Garapati](https://discuss.elastic.co/u/Anil_Garapati)\
**Replies:** 0\
**Last updated:** [April 2, 2018, 11:40am UTC](https://discuss.elastic.co/t/how-to-delete-data-in-elastic-search-through-id/126421 "2018-04-02T11:40:16Z")

</div>

def deleteContentByContentId(contentId:String):Boolean={ eitherTryBlock{ val search = searchHelper.createContentSearch(client, Nil, List(contentId), 0, 10) val response = search.get() val result=response. } } I wa…

---

## [Elastic Search Inconsistent Query Performance Time](https://discuss.elastic.co/t/elastic-search-inconsistent-query-performance-time/126420)

<div class="topic-metadata">

**Author:** [@Sravanthi\_N\_S\_CH](https://discuss.elastic.co/u/Sravanthi_N_S_CH)\
**Replies:** 0\
**Last updated:** [April 2, 2018, 11:38am UTC](https://discuss.elastic.co/t/elastic-search-inconsistent-query-performance-time/126420 "2018-04-02T11:38:42Z")

</div>

Hello, We are using ElasticSearch for Search functionality where we have a combination bool queries, exists queries and aggregations we perform at one go. Lately, we noticed that the query performance times are inconsi…

---

## [How to get exact record which will match string?](https://discuss.elastic.co/t/how-to-get-exact-record-which-will-match-string/126379)

<div class="topic-metadata">

**Author:** [@Shaik\_Thowsif](https://discuss.elastic.co/u/Shaik_Thowsif)\
**Replies:** 4\
**Last updated:** [April 2, 2018, 10:33am UTC](https://discuss.elastic.co/t/how-to-get-exact-record-which-will-match-string/126379 "2018-04-02T10:33:51Z")

</div>

i want to get exact record from elasticsearch which field name should be exactly match with input query name. for example: I am having record with name: "raj kumar fillings", while i am trying to get record with name:…

---

## [The syntax of node api query](https://discuss.elastic.co/t/the-syntax-of-node-api-query/126415)

<div class="topic-metadata">

**Author:** [@zeusys](https://discuss.elastic.co/u/zeusys)\
**Replies:** 0\
**Last updated:** [April 2, 2018, 10:13am UTC](https://discuss.elastic.co/t/the-syntax-of-node-api-query/126415 "2018-04-02T10:13:17Z")

</div>

Hi. Would someone plz explain me the syntax of this query : \_nodes/stats/process?filter\_path=\*\*.max\_file\_descriptors especially after filter\_path. are those \* wildcards or what? And what should I study to learn more …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1731)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1733)
