# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1745

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1746

---

## [Re-index API creates multiple tasks](https://discuss.elastic.co/t/re-index-api-creates-multiple-tasks/121571)

<div class="topic-metadata">

**Author:** [@ayushsangani](https://discuss.elastic.co/u/ayushsangani)\
**Replies:** 2\
**Last updated:** [March 21, 2018, 2:41pm UTC](https://discuss.elastic.co/t/re-index-api-creates-multiple-tasks/121571 "2018-03-21T14:41:47Z")

</div>

Hey all, ES version: 2.4.3 I have been using re-index API since it's launch in 2.X, it's been working fine until recently/last year. I'm noticing that whenever I execute a reindex request, it starts with one task. Afte…

---

## [Missing data from logstash to elasticsearch](https://discuss.elastic.co/t/missing-data-from-logstash-to-elasticsearch/124954)

<div class="topic-metadata">

**Author:** [@amine1](https://discuss.elastic.co/u/amine1)\
**Replies:** 5\
**Last updated:** [March 21, 2018, 1:21pm UTC](https://discuss.elastic.co/t/missing-data-from-logstash-to-elasticsearch/124954 "2018-03-21T13:21:53Z")

</div>

\[Capture%20du%202018-03-21%2010-53-23\]\[Capture%20du%202018-03-21%2010-52-36\]\[Capture%20du%202018-03-21%2010-53-52\] Not all of data are passing from logstash to elasticsearch

---

## [Convert high level queries to their low-level form](https://discuss.elastic.co/t/convert-high-level-queries-to-their-low-level-form/124997)

<div class="topic-metadata">

**Author:** [@imranazad](https://discuss.elastic.co/u/imranazad)\
**Replies:** 0\
**Last updated:** [March 21, 2018, 1:58pm UTC](https://discuss.elastic.co/t/convert-high-level-queries-to-their-low-level-form/124997 "2018-03-21T13:58:31Z")

</div>

Take for example the query\_string combined with the function sore, is there a way to convert this into it's low level form so I can see what's going on under the hood?

---

## [Disable auto\_import\_dangled for ES 6.2](https://discuss.elastic.co/t/disable-auto-import-dangled-for-es-6-2/124801)

<div class="topic-metadata">

**Author:** [@Ihjaz](https://discuss.elastic.co/u/Ihjaz)\
**Replies:** 11\
**Last updated:** [March 21, 2018, 1:29pm UTC](https://discuss.elastic.co/t/disable-auto-import-dangled-for-es-6-2/124801 "2018-03-21T13:29:35Z")

</div>

It seems like the setting "gateway.local.auto\_import\_dangled: no" is not supported for the Elasticsearch 6.2. I'm getting the below exception if I use this setting. java.lang.IllegalArgumentException: unknown setting \[…

---

## [Adding one more DATA node and increasing number of shards to four from three](https://discuss.elastic.co/t/adding-one-more-data-node-and-increasing-number-of-shards-to-four-from-three/124994)

<div class="topic-metadata">

**Author:** [@hadi](https://discuss.elastic.co/u/hadi)\
**Replies:** 0\
**Last updated:** [March 21, 2018, 1:28pm UTC](https://discuss.elastic.co/t/adding-one-more-data-node-and-increasing-number-of-shards-to-four-from-three/124994 "2018-03-21T13:28:52Z")

</div>

Hey, My current cluster architecture is as follows: Three master nodes Three data nodes Two ingest nodes And I am using X-Pack on the current cluster. Plus, here is my default template for shards and replicas strateg…

---

## [Elastic search Rejecting mapping update](https://discuss.elastic.co/t/elastic-search-rejecting-mapping-update/124983)

<div class="topic-metadata">

**Author:** [@sri535](https://discuss.elastic.co/u/sri535)\
**Replies:** 1\
**Last updated:** [March 21, 2018, 1:14pm UTC](https://discuss.elastic.co/t/elastic-search-rejecting-mapping-update/124983 "2018-03-21T13:14:23Z")

</div>

Failed to map in indices I have a configuration file and template file in logstash is as below please look into it its done on fresh installation 1.Conf file input { file { path =\> \["D:/JAEK/Results/Python/MyH…

---

## [S3 repository Snapshot fails on ES 6.2](https://discuss.elastic.co/t/s3-repository-snapshot-fails-on-es-6-2/124299)

<div class="topic-metadata">

**Author:** [@emillykkejensen](https://discuss.elastic.co/u/emillykkejensen)\
**Replies:** 3\
**Last updated:** [March 21, 2018, 1:07pm UTC](https://discuss.elastic.co/t/s3-repository-snapshot-fails-on-es-6-2/124299 "2018-03-21T13:07:33Z")

</div>

I’m having trouble creating a S3 snapshot repository for ES 6.2 on DigitalOcean. While the S3 repository plugin works fine with ES 5.6, I can’t get it to work on ES 6.2. Here is what I have done: 1: Installed ES 6.2 wi…

---

## [Search Over mutiple Types in an index and Sort the result](https://discuss.elastic.co/t/search-over-mutiple-types-in-an-index-and-sort-the-result/123887)

<div class="topic-metadata">

**Author:** [@ramshad](https://discuss.elastic.co/u/ramshad)\
**Replies:** 4\
**Last updated:** [March 21, 2018, 1:01pm UTC](https://discuss.elastic.co/t/search-over-mutiple-types-in-an-index-and-sort-the-result/123887 "2018-03-21T13:01:09Z")

</div>

I have an index 'elasticsearch' and have 4 Types 'user','admin','employer','students'..When i typing the name from front end,it should search the name in all 4 types and return.Search priority will user,employer,student,…

---

## [How to start out with a new cluster regarding shards?](https://discuss.elastic.co/t/how-to-start-out-with-a-new-cluster-regarding-shards/124982)

<div class="topic-metadata">

**Author:** [@\_markus](https://discuss.elastic.co/u/_markus)\
**Replies:** 0\
**Last updated:** [March 21, 2018, 12:36pm UTC](https://discuss.elastic.co/t/how-to-start-out-with-a-new-cluster-regarding-shards/124982 "2018-03-21T12:36:13Z")

</div>

I'll soon start a new cluster with latest 6.x series, here are some of the key points: one index will use two "types" because I need the join capability will have ~22mio parents and ~240mio children documents parent do…

---

## [Create function to handle and find data](https://discuss.elastic.co/t/create-function-to-handle-and-find-data/124976)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 0\
**Last updated:** [March 21, 2018, 12:04pm UTC](https://discuss.elastic.co/t/create-function-to-handle-and-find-data/124976 "2018-03-21T12:04:30Z")

</div>

Currently in my mapping i have two properties: 1 - deadline: type date, store a datetime to know what is the deadline of a project 2 - current\_stats: type long, store if the status of a project is opened (1), closed (5…

---

## [Nodes not joing cluster](https://discuss.elastic.co/t/nodes-not-joing-cluster/124403)

<div class="topic-metadata">

**Author:** [@igormages](https://discuss.elastic.co/u/igormages)\
**Replies:** 8\
**Last updated:** [March 21, 2018, 11:21am UTC](https://discuss.elastic.co/t/nodes-not-joing-cluster/124403 "2018-03-21T11:21:56Z")

</div>

Hello ! I can't make my nodes join the cluster. I get an cluster uuid like na... I don't know if this is because i upgraded to 6.2.2 from 5.X (5.3 or 5.6 i don't remember) { "name" : "md2es", "cluster\_name" : "md2…

---

## [Functionality to pass request context in performRequestAsync and retrieve it from the listener's response](https://discuss.elastic.co/t/functionality-to-pass-request-context-in-performrequestasync-and-retrieve-it-from-the-listeners-response/124966)

<div class="topic-metadata">

**Author:** [@garvitlnmiit](https://discuss.elastic.co/u/garvitlnmiit)\
**Replies:** 0\
**Last updated:** [March 21, 2018, 10:52am UTC](https://discuss.elastic.co/t/functionality-to-pass-request-context-in-performrequestasync-and-retrieve-it-from-the-listeners-response/124966 "2018-03-21T10:52:55Z")

</div>

Currently, if I call performRequestAsync() method then I won't be able to pass request context to it to map request and response by retrieving the request context from the response provided by the listener. There should…

---

## [Elastic search function score query](https://discuss.elastic.co/t/elastic-search-function-score-query/124963)

<div class="topic-metadata">

**Author:** [@Ali\_Ahmed](https://discuss.elastic.co/u/Ali_Ahmed)\
**Replies:** 0\
**Last updated:** [March 21, 2018, 10:44am UTC](https://discuss.elastic.co/t/elastic-search-function-score-query/124963 "2018-03-21T10:44:55Z")

</div>

I want result which is based on 3 things CreationDate 65% , cars 20%, motorbike 15% Data which is inserted in elasticsearch { "created": "2018-03-20T14:19:15Z", "username": "adamcharles", "stats": { "cars": 20, "mo…

---

## [Plugin \[ingest-geoip\] is incompatible with version \[6.2.3\]; was designed for version \[6.2.2\]](https://discuss.elastic.co/t/plugin-ingest-geoip-is-incompatible-with-version-6-2-3-was-designed-for-version-6-2-2/124960)

<div class="topic-metadata">

**Author:** [@solo](https://discuss.elastic.co/u/solo)\
**Replies:** 2\
**Last updated:** [March 21, 2018, 10:39am UTC](https://discuss.elastic.co/t/plugin-ingest-geoip-is-incompatible-with-version-6-2-3-was-designed-for-version-6-2-2/124960 "2018-03-21T10:39:20Z")

</div>

Today on my Ubuntu I got this message when trying to start Elasticsearch: plugin \[ingest-geoip\] is incompatible with version \[6.2.3\]; was designed for version \[6.2.2\] How can I fix it?

---

## [Use of Filter on multiple indices](https://discuss.elastic.co/t/use-of-filter-on-multiple-indices/124933)

<div class="topic-metadata">

**Author:** [@Kurzer\_Patrick](https://discuss.elastic.co/u/Kurzer_Patrick)\
**Replies:** 3\
**Last updated:** [March 21, 2018, 10:02am UTC](https://discuss.elastic.co/t/use-of-filter-on-multiple-indices/124933 "2018-03-21T10:02:50Z")

</div>

Hi, I try to query two different indices with a filter on a specific field. Lets say I have an index1 and an index2 where both of the indices have a field named name and just index2 have an extra field code. Lets say …

---

## [Get all documents of having unique value with elasticsearch](https://discuss.elastic.co/t/get-all-documents-of-having-unique-value-with-elasticsearch/124900)

<div class="topic-metadata">

**Author:** [@lwpk110](https://discuss.elastic.co/u/lwpk110)\
**Replies:** 0\
**Last updated:** [March 21, 2018, 3:54am UTC](https://discuss.elastic.co/t/get-all-documents-of-having-unique-value-with-elasticsearch/124900 "2018-03-21T03:54:06Z")

</div>

for example: i have many documents like this: email status 1@123.com open 1@123.com click 2@123.com open 3@123.com open i will query all documents with unique status value …

---

## [Accidentally deleted .kibana](https://discuss.elastic.co/t/accidentally-deleted-kibana/124944)

<div class="topic-metadata">

**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\
**Replies:** 1\
**Last updated:** [March 21, 2018, 9:44am UTC](https://discuss.elastic.co/t/accidentally-deleted-kibana/124944 "2018-03-21T09:44:17Z")

</div>

Hi, I accidentally deleted .kibana index, all my visualizations and dashboards have been deleted. Could someone please help me how to recover it back. Thanks !

---

## [Rollover API and upserts](https://discuss.elastic.co/t/rollover-api-and-upserts/124943)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 5\
**Last updated:** [March 21, 2018, 9:42am UTC](https://discuss.elastic.co/t/rollover-api-and-upserts/124943 "2018-03-21T09:42:59Z")

</div>

Hello, Do you confirm that doc\_as\_upsert is supported by the rollover API? I mean if I follow https://www.elastic.co/guide/en/elasticsearch/reference/master/indices-rollover-index.html: I have a document A in logs-000…

---

## [Could I remove \_type field?](https://discuss.elastic.co/t/could-i-remove-type-field/124934)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 10\
**Last updated:** [March 21, 2018, 9:34am UTC](https://discuss.elastic.co/t/could-i-remove-type-field/124934 "2018-03-21T09:34:23Z")

</div>

Hi, due to the high loading, I want to remove the default field \_type, \_score, \_id. is it possible ? if can, how to do it? thanks a lot.

---

## [Monitoring could not connect to elasticsearch, failed with xpack monitoring not available](https://discuss.elastic.co/t/monitoring-could-not-connect-to-elasticsearch-failed-with-xpack-monitoring-not-available/124581)

<div class="topic-metadata">

**Author:** [@jasl](https://discuss.elastic.co/u/jasl)\
**Replies:** 2\
**Last updated:** [March 21, 2018, 9:19am UTC](https://discuss.elastic.co/t/monitoring-could-not-connect-to-elasticsearch-failed-with-xpack-monitoring-not-available/124581 "2018-03-21T09:19:07Z")

</div>

So I have 2 ES clusters: Main: 6.2 xpack monitoring enabled filebeat Monit 6.2 xpack monitoring disabled kibana with monitoring enabled I can see monitoring data from Main in Monit's kibana (coming from ES i…

---

## [Rollover api and dynamic indices based on fields](https://discuss.elastic.co/t/rollover-api-and-dynamic-indices-based-on-fields/124940)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 0\
**Last updated:** [March 21, 2018, 9:14am UTC](https://discuss.elastic.co/t/rollover-api-and-dynamic-indices-based-on-fields/124940 "2018-03-21T09:14:26Z")

</div>

Hello, I have a logstash that pushes the data in a dynamic index based on a field value. I want to use the rollover API to let elasticsearch manage my index+shard creation. mutate { add\_field =\> { "\[@metadat…

---

## [Elasticsearch 6.2.2 conditional sorting](https://discuss.elastic.co/t/elasticsearch-6-2-2-conditional-sorting/124144)

<div class="topic-metadata">

**Author:** [@Varan](https://discuss.elastic.co/u/Varan)\
**Replies:** 3\
**Last updated:** [March 20, 2018, 9:46am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-2-conditional-sorting/124144 "2018-03-20T09:46:29Z")

</div>

I'm on Elasticsearch 6.2.2. Could I do differents sorts based on a field of an index? #Here I want to sort by age if code=child or by city if code=adult GET index1/\_search { "query": { "match\_all": {} }, …

---

## [Reindexing shrunk index removes index's shrink settings](https://discuss.elastic.co/t/reindexing-shrunk-index-removes-indexs-shrink-settings/124931)

<div class="topic-metadata">

**Author:** [@BBQigniter](https://discuss.elastic.co/u/BBQigniter)\
**Replies:** 0\
**Last updated:** [March 21, 2018, 8:24am UTC](https://discuss.elastic.co/t/reindexing-shrunk-index-removes-indexs-shrink-settings/124931 "2018-03-21T08:24:55Z")

</div>

Hello, I'm playing around with the Elasticsearch Python API and now have my own reindex-, a shrink-script and other scripts. I now have a minor problem, that if I reindex a shrunk index, the shrink-settings disappear an…

---

## [Group by time with unixtime in elasticsearch](https://discuss.elastic.co/t/group-by-time-with-unixtime-in-elasticsearch/124681)

<div class="topic-metadata">

**Author:** [@thanghv55](https://discuss.elastic.co/u/thanghv55)\
**Replies:** 4\
**Last updated:** [March 21, 2018, 7:51am UTC](https://discuss.elastic.co/t/group-by-time-with-unixtime-in-elasticsearch/124681 "2018-03-21T07:51:42Z")

</div>

Hi all, I've imported data from mysql into elasticsearch that has a date field with unixtime format(such as: 1514851200). I want to group by date with this field. i had using query: "histogram": { "field": "sentdate"…

---

## [Is it possible to map a indices to a user using kibana portal](https://discuss.elastic.co/t/is-it-possible-to-map-a-indices-to-a-user-using-kibana-portal/124908)

<div class="topic-metadata">

**Author:** [@mayanksachan007](https://discuss.elastic.co/u/mayanksachan007)\
**Replies:** 3\
**Last updated:** [March 21, 2018, 6:52am UTC](https://discuss.elastic.co/t/is-it-possible-to-map-a-indices-to-a-user-using-kibana-portal/124908 "2018-03-21T06:52:51Z")

</div>

Is it possible to map a particular user like 'U' with some indices 'I1'. Like when user 'U' login with their credential and that can able to see only 'I1' indices not others.

---

## [Matching phrase in a elasticsearch query](https://discuss.elastic.co/t/matching-phrase-in-a-elasticsearch-query/124904)

<div class="topic-metadata">

**Author:** [@aniketkk](https://discuss.elastic.co/u/aniketkk)\
**Replies:** 3\
**Last updated:** [March 21, 2018, 6:51am UTC](https://discuss.elastic.co/t/matching-phrase-in-a-elasticsearch-query/124904 "2018-03-21T06:51:54Z")

</div>

Hi, I am trying to do a query where the timestamp is 27/Feb/2018. The Elasticsearch version is 1.5 My query looks like this { "query": { "multi\_match": { "query": "27/Feb/2018", "fields": \[ "timestamp"\], "m…

---

## [Parent child using OR condition between parent and child fields](https://discuss.elastic.co/t/parent-child-using-or-condition-between-parent-and-child-fields/124907)

<div class="topic-metadata">

**Author:** [@muthucse123](https://discuss.elastic.co/u/muthucse123)\
**Replies:** 0\
**Last updated:** [March 21, 2018, 5:39am UTC](https://discuss.elastic.co/t/parent-child-using-or-condition-between-parent-and-child-fields/124907 "2018-03-21T05:39:31Z")

</div>

I am trying to query with parent field OR child field. I am using has\_parent to retrieve the parent documents in the response. How to retrieve all the parent documents even when there is no match for the search term. "…

---

## [Elastic search \_bulk indexing error](https://discuss.elastic.co/t/elastic-search-bulk-indexing-error/124905)

<div class="topic-metadata">

**Author:** [@vishnuduttpv](https://discuss.elastic.co/u/vishnuduttpv)\
**Replies:** 0\
**Last updated:** [March 21, 2018, 5:32am UTC](https://discuss.elastic.co/t/elastic-search-bulk-indexing-error/124905 "2018-03-21T05:32:11Z")

</div>

Hi, I am facing error while the beat is trying to do a bulk indexing request to the elastic search. The following error is prompting while doing the beat , 2018/03/21 05:26:38.407731 data.go:144: INFO Event: {"@timesta…

---

## [Fscrawler save binary , base64](https://discuss.elastic.co/t/fscrawler-save-binary-base64/124696)

<div class="topic-metadata">

**Author:** [@Yimjunhyeok](https://discuss.elastic.co/u/Yimjunhyeok)\
**Replies:** 6\
**Last updated:** [March 21, 2018, 4:24am UTC](https://discuss.elastic.co/t/fscrawler-save-binary-base64/124696 "2018-03-21T04:24:07Z")

</div>

Hello. I want to save file binary with fscrawler without extract file contents. But when i set the "indexed\_chars" : "1000", Can't save file binary fully (More than 70MB) it is also same when i set the "indexed\_char…

---

## [Group by condition specify type](https://discuss.elastic.co/t/group-by-condition-specify-type/124890)

<div class="topic-metadata">

**Author:** [@Bill\_Villa](https://discuss.elastic.co/u/Bill_Villa)\
**Replies:** 0\
**Last updated:** [March 21, 2018, 2:40am UTC](https://discuss.elastic.co/t/group-by-condition-specify-type/124890 "2018-03-21T02:40:22Z")

</div>

I'm trying to aggregation tag by specify type such type = 1 and type =2 . But it's not working ??? curl -XDELETE 'localhost:9200/employ' curl -XPUT 'localhost:9200/employ?pretty' -H 'Content-Type: application/json' -d' …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1744)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1746)
