# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1760

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1761

---

## [Elastic join query not returning correct result](https://discuss.elastic.co/t/elastic-join-query-not-returning-correct-result/123155)

<div class="topic-metadata">

**Author:** [@chetan\_vartak](https://discuss.elastic.co/u/chetan_vartak)\
**Replies:** 0\
**Last updated:** [March 8, 2018, 10:49pm UTC](https://discuss.elastic.co/t/elastic-join-query-not-returning-correct-result/123155 "2018-03-08T22:49:43Z")

</div>

I have data in elastic with parent-child relationship. But both "has\_child" and "has\_parent" queries is missing few inner hits. Query with "has\_child" is returning 2 doc. But there are 3 doc. If I remove the "has\_child"…

---

## [Compute Benford's law into Scripted Fields with Painless](https://discuss.elastic.co/t/compute-benfords-law-into-scripted-fields-with-painless/123139)

<div class="topic-metadata">

**Author:** [@Elasticon](https://discuss.elastic.co/u/Elasticon)\
**Replies:** 2\
**Last updated:** [March 8, 2018, 10:26pm UTC](https://discuss.elastic.co/t/compute-benfords-law-into-scripted-fields-with-painless/123139 "2018-03-08T22:26:24Z")

</div>

Hello everyone, I would like to compute the Benford's law into elasticsearch from a doc\['some\_field'\].value with a scripted field, I have try some lucene expression, but it's doesn't work and Expression is deprecated a…

---

## [Can't post data](https://discuss.elastic.co/t/cant-post-data/123003)

<div class="topic-metadata">

**Author:** [@shiratsu](https://discuss.elastic.co/u/shiratsu)\
**Replies:** 3\
**Last updated:** [March 8, 2018, 10:20pm UTC](https://discuss.elastic.co/t/cant-post-data/123003 "2018-03-08T22:20:27Z")

</div>

Hi there. I have started to use elasticesearch nowadays. then, at first i would like to post data by curl command by following this page. https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-bulk.html …

---

## [Curator snapshot - "Schema Error"](https://discuss.elastic.co/t/curator-snapshot-schema-error/123142)

<div class="topic-metadata">

**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\
**Replies:** 1\
**Last updated:** [March 8, 2018, 9:54pm UTC](https://discuss.elastic.co/t/curator-snapshot-schema-error/123142 "2018-03-08T21:54:06Z")

</div>

Hello, Getting the following error when running the curator command: sudo curator --config /etc/elasticsearch/curator.yml /etc/elasticsearch/snapshot\_indices.yml Oddly when i run the curator command for another action…

---

## [Aggregate "avg" throwing error "Unknown BaseAggregationBuilder "](https://discuss.elastic.co/t/aggregate-avg-throwing-error-unknown-baseaggregationbuilder/123136)

<div class="topic-metadata">

**Author:** [@jason\_smith](https://discuss.elastic.co/u/jason_smith)\
**Replies:** 2\
**Last updated:** [March 8, 2018, 9:41pm UTC](https://discuss.elastic.co/t/aggregate-avg-throwing-error-unknown-baseaggregationbuilder/123136 "2018-03-08T21:41:55Z")

</div>

Hello Good folks, This query is from a sample video tutorial. The sample is not Elasticsearch 6.0 version. I am not sure if this is something to do with the lastest version. Trying to find the average car price under e…

---

## [ElasticSearch S3 Repository : Question on what is "repository"?](https://discuss.elastic.co/t/elasticsearch-s3-repository-question-on-what-is-repository/123138)

<div class="topic-metadata">

**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\
**Replies:** 5\
**Last updated:** [March 8, 2018, 9:19pm UTC](https://discuss.elastic.co/t/elasticsearch-s3-repository-question-on-what-is-repository/123138 "2018-03-08T21:19:50Z")

</div>

Hello, I'm trying to understand the nuance of "repository" when it comes to restoring a snapshot on a DIFFERENT newly constructed stack. Here's the scenario: I create an ELK stack in US-EAST-1. I use the PUT/snapshot/…

---

## [Elasticsearch-ingest-opennlp pdf](https://discuss.elastic.co/t/elasticsearch-ingest-opennlp-pdf/122921)

<div class="topic-metadata">

**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\
**Replies:** 16\
**Last updated:** [March 8, 2018, 8:07pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-opennlp-pdf/122921 "2018-03-08T20:07:21Z")

</div>

Hello , is that possible to use the plugin "ingest-opennlp " in pdf ??

---

## [35 shards but maxing out JVM heap](https://discuss.elastic.co/t/35-shards-but-maxing-out-jvm-heap/121474)

<div class="topic-metadata">

**Author:** [@Callahan](https://discuss.elastic.co/u/Callahan)\
**Replies:** 11\
**Last updated:** [March 8, 2018, 6:20pm UTC](https://discuss.elastic.co/t/35-shards-but-maxing-out-jvm-heap/121474 "2018-03-08T18:20:55Z")

</div>

Hi, I've been experiencing long term issues with Elasticsearch and one of my 3 node setups running out of heap space (the specific node varies each time it seems). The specifics of my setup are as follows: OS: Windows…

---

## [Query string query does not works if it ends with - , is this a bug or this is how it works](https://discuss.elastic.co/t/query-string-query-does-not-works-if-it-ends-with-is-this-a-bug-or-this-is-how-it-works/123124)

<div class="topic-metadata">

**Author:** [@Prashant\_Agrawal](https://discuss.elastic.co/u/Prashant_Agrawal)\
**Replies:** 0\
**Last updated:** [March 8, 2018, 5:32pm UTC](https://discuss.elastic.co/t/query-string-query-does-not-works-if-it-ends-with-is-this-a-bug-or-this-is-how-it-works/123124 "2018-03-08T17:32:23Z")

</div>

Hello , I have seen an strange behavior with query string query , does anyone have any idea for same.. Basically query string query does not works if search term ends with - , where as in between - works fine.. For Ex …

---

## [Nest Query taking much longer than direct Json Query](https://discuss.elastic.co/t/nest-query-taking-much-longer-than-direct-json-query/123120)

<div class="topic-metadata">

**Author:** [@Lemonade1947](https://discuss.elastic.co/u/Lemonade1947)\
**Replies:** 0\
**Last updated:** [March 8, 2018, 5:23pm UTC](https://discuss.elastic.co/t/nest-query-taking-much-longer-than-direct-json-query/123120 "2018-03-08T17:23:45Z")

</div>

Hi there. I am using NEST in my C# program, and this is producing a lot more of a delay than I'd expect, considering the time it takes to make the same request directly. Both the site and elastic search server are runn…

---

## [Elastic Nodes](https://discuss.elastic.co/t/elastic-nodes/122722)

<div class="topic-metadata">

**Author:** [@sunil129](https://discuss.elastic.co/u/sunil129)\
**Replies:** 1\
**Last updated:** [March 8, 2018, 5:26pm UTC](https://discuss.elastic.co/t/elastic-nodes/122722 "2018-03-08T17:26:20Z")

</div>

I have created 5 nodes in my windows based system. How can i bind a specific port to a particular node(Ex: I want to bind port 1234 to to node one).

---

## [Give higher relevancy (sort) to the title which is shorter](https://discuss.elastic.co/t/give-higher-relevancy-sort-to-the-title-which-is-shorter/123046)

<div class="topic-metadata">

**Author:** [@wmjb](https://discuss.elastic.co/u/wmjb)\
**Replies:** 1\
**Last updated:** [March 8, 2018, 5:15pm UTC](https://discuss.elastic.co/t/give-higher-relevancy-sort-to-the-title-which-is-shorter/123046 "2018-03-08T17:15:00Z")

</div>

Hi, Let me explain my scenario, When I run the following query GET /ssl/listings/\_search { "query": { "match": { "title": "Hilton" } } } I get the search result of "Hiton Colom…

---

## [Highlighting only low frequency words when using cutoff\_frequency](https://discuss.elastic.co/t/highlighting-only-low-frequency-words-when-using-cutoff-frequency/123117)

<div class="topic-metadata">

**Author:** [@jamtongol](https://discuss.elastic.co/u/jamtongol)\
**Replies:** 0\
**Last updated:** [March 8, 2018, 4:47pm UTC](https://discuss.elastic.co/t/highlighting-only-low-frequency-words-when-using-cutoff-frequency/123117 "2018-03-08T16:47:06Z")

</div>

I'm currently trying to implement cutoff\_frequency with a multi\_match search to have domain-specific stopwords. Is there a way to only highlight low\_frequency words when using cutoff\_frequency?

---

## [Painless iterate over nested data in an array to calculate custom score](https://discuss.elastic.co/t/painless-iterate-over-nested-data-in-an-array-to-calculate-custom-score/104711)

<div class="topic-metadata">

**Author:** [@el-n00b](https://discuss.elastic.co/u/el-n00b)\
**Replies:** 1\
**Last updated:** [March 8, 2018, 4:33pm UTC](https://discuss.elastic.co/t/painless-iterate-over-nested-data-in-an-array-to-calculate-custom-score/104711 "2018-03-08T16:33:32Z")

</div>

I'd like to iterate over a set of child elements on a search in order to calculate a value using Painless and then return that information with the rest of the search result. I decided to hijack the score calculation. B…

---

## [Deleting indices older than 90 days](https://discuss.elastic.co/t/deleting-indices-older-than-90-days/122811)

<div class="topic-metadata">

**Author:** [@shivu](https://discuss.elastic.co/u/shivu)\
**Replies:** 18\
**Last updated:** [March 8, 2018, 4:27pm UTC](https://discuss.elastic.co/t/deleting-indices-older-than-90-days/122811 "2018-03-08T16:27:15Z")

</div>

Hi i am trying to delete indices older than 90 days. My elastic search index pattern is indexname-%Y.%m in this case it is applicationlogs-2017-12 Below is my action.yml actions: 1: action: delete\_indices descripti…

---

## [Index Nested object 6.2](https://discuss.elastic.co/t/index-nested-object-6-2/123054)

<div class="topic-metadata">

**Author:** [@Varan](https://discuss.elastic.co/u/Varan)\
**Replies:** 6\
**Last updated:** [March 8, 2018, 3:51pm UTC](https://discuss.elastic.co/t/index-nested-object-6-2/123054 "2018-03-08T15:51:53Z")

</div>

Hi, I've read that Elasticsearch's Nested object are usefull but aren't independant from their root index and reindex the whole document if reindexed (https://www.elastic.co/blog/managing-relations-inside-elasticsearch)…

---

## [Curator Filters for a Weekly and Monthly Indices Created](https://discuss.elastic.co/t/curator-filters-for-a-weekly-and-monthly-indices-created/123050)

<div class="topic-metadata">

**Author:** [@\_kyllr](https://discuss.elastic.co/u/_kyllr)\
**Replies:** 1\
**Last updated:** [March 8, 2018, 3:12pm UTC](https://discuss.elastic.co/t/curator-filters-for-a-weekly-and-monthly-indices-created/123050 "2018-03-08T15:12:30Z")

</div>

Hi, How do I configure delete\_indices.yml for filters for a weekly and monthly indices created in Elasticsearch? I am using curator to delete indices for the past 6 months using source: name. Tried this for the monthl…

---

## [Make \`message.text\` not required for Slack action](https://discuss.elastic.co/t/make-message-text-not-required-for-slack-action/120939)

<div class="topic-metadata">

**Author:** [@twardnw](https://discuss.elastic.co/u/twardnw)\
**Replies:** 5\
**Last updated:** [March 8, 2018, 2:55pm UTC](https://discuss.elastic.co/t/make-message-text-not-required-for-slack-action/120939 "2018-03-08T14:55:48Z")

</div>

The Slack action currently requires message.text to be present, though slack will gladly accept a message without it, as a message can have an attachment which contains the text to be displayed. The current requirement …

---

## [Rolling upgrade sequence of node types](https://discuss.elastic.co/t/rolling-upgrade-sequence-of-node-types/120311)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 8\
**Last updated:** [March 8, 2018, 2:44pm UTC](https://discuss.elastic.co/t/rolling-upgrade-sequence-of-node-types/120311 "2018-03-08T14:44:58Z")

</div>

Hi, rolling upgrading from 6.1.2 to 6.2 which includes node types: master ingest, coordinator and data and I use free license for monitoring. I encoutered 2 issues.. 1- I had started with the master nodes... Elastic c…

---

## [Help sorting on fields with large amounts of data](https://discuss.elastic.co/t/help-sorting-on-fields-with-large-amounts-of-data/123083)

<div class="topic-metadata">

**Author:** [@andrewatacumen](https://discuss.elastic.co/u/andrewatacumen)\
**Replies:** 0\
**Last updated:** [March 8, 2018, 1:59pm UTC](https://discuss.elastic.co/t/help-sorting-on-fields-with-large-amounts-of-data/123083 "2018-03-08T13:59:59Z")

</div>

Hello all, I have a question regarding sorting by an attribute of my document. Sorting generally works as I would like but for some records this particular field have extremely large volume of data sorting does not wor…

---

## [Best way to get raw data from snapshot and take dump](https://discuss.elastic.co/t/best-way-to-get-raw-data-from-snapshot-and-take-dump/123034)

<div class="topic-metadata">

**Author:** [@shivkumar](https://discuss.elastic.co/u/shivkumar)\
**Replies:** 2\
**Last updated:** [March 8, 2018, 2:36pm UTC](https://discuss.elastic.co/t/best-way-to-get-raw-data-from-snapshot-and-take-dump/123034 "2018-03-08T14:36:24Z")

</div>

I have my backup setup for my Cluster to Amazon S3. I want to get the data back from Snapshots and I want that raw data again stored on S3 only. What is the best way to achieve this ? Is it necessary to restore the da…

---

## [Date is converting to end December 31](https://discuss.elastic.co/t/date-is-converting-to-end-december-31/123094)

<div class="topic-metadata">

**Author:** [@Woody\_Smith](https://discuss.elastic.co/u/Woody_Smith)\
**Replies:** 0\
**Last updated:** [March 8, 2018, 2:27pm UTC](https://discuss.elastic.co/t/date-is-converting-to-end-december-31/123094 "2018-03-08T14:27:17Z")

</div>

I am using the standard Type: Date for the mapping in ES and date is coming across as December 31 + Year (ie, if the year is 2015, it is showing as December 31 2015), in the json data in Kibana, it is showing the correc…

---

## [NEST - problem with AutoMap() and geo\_point](https://discuss.elastic.co/t/nest-problem-with-automap-and-geo-point/123086)

<div class="topic-metadata">

**Author:** [@ddz95](https://discuss.elastic.co/u/ddz95)\
**Replies:** 0\
**Last updated:** [March 8, 2018, 2:07pm UTC](https://discuss.elastic.co/t/nest-problem-with-automap-and-geo-point/123086 "2018-03-08T14:07:36Z")

</div>

Hi everyone. I'll get to the point: First class: AddressPoint.cs public GeoLocation Loc { get; set; } Form1.cs var settings = new ConnectionSettings(pool).DefaultIndex("testindex"); var client = new Elas…

---

## [Logs are not updating in elastic search just after installing Xpack](https://discuss.elastic.co/t/logs-are-not-updating-in-elastic-search-just-after-installing-xpack/118012)

<div class="topic-metadata">

**Author:** [@sweta\_khandelwal](https://discuss.elastic.co/u/sweta_khandelwal)\
**Replies:** 7\
**Last updated:** [March 8, 2018, 1:55pm UTC](https://discuss.elastic.co/t/logs-are-not-updating-in-elastic-search-just-after-installing-xpack/118012 "2018-03-08T13:55:38Z")

</div>

Right after installing xpack filebeat stopped shipping of logs in to elastic search. Do I need to do some sort of authentication setting? can someone please reply and help??

---

## [Documents with same IDs but of different types in the same index in ES6?](https://discuss.elastic.co/t/documents-with-same-ids-but-of-different-types-in-the-same-index-in-es6/122959)

<div class="topic-metadata">

**Author:** [@Andrey\_Bakhrachev](https://discuss.elastic.co/u/Andrey_Bakhrachev)\
**Replies:** 7\
**Last updated:** [March 8, 2018, 1:07pm UTC](https://discuss.elastic.co/t/documents-with-same-ids-but-of-different-types-in-the-same-index-in-es6/122959 "2018-03-08T13:07:38Z")

</div>

Hey there, Sorry guys, but that mapping types removal in ES6 is quite a pain in the ass to say the least! As it's proposed in the docs I chose the "custom type field" option to store the different document types in the…

---

## [Unable to change elastic user password](https://discuss.elastic.co/t/unable-to-change-elastic-user-password/122887)

<div class="topic-metadata">

**Author:** [@annk](https://discuss.elastic.co/u/annk)\
**Replies:** 2\
**Last updated:** [March 8, 2018, 12:41pm UTC](https://discuss.elastic.co/t/unable-to-change-elastic-user-password/122887 "2018-03-08T12:41:28Z")

</div>

I recently upgraded from 6.1 to 6.2. Until I installed x-pack plugin on elasticsearch and kibana I was able to query elastic using elastic user and empty password. I tried following this documentation (https://www.elast…

---

## [Visualization showing 0 on keyword field](https://discuss.elastic.co/t/visualization-showing-0-on-keyword-field/123051)

<div class="topic-metadata">

**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\
**Replies:** 1\
**Last updated:** [March 8, 2018, 12:27pm UTC](https://discuss.elastic.co/t/visualization-showing-0-on-keyword-field/123051 "2018-03-08T12:27:09Z")

</div>

hi i have index where i am using customer template all my string field comes as keyword here is mapping - }, "MonthOfYear": { "type": "keyword" }, "NoSaleReason": { "type": "keyword" }, "PostingDateTime": { "…

---

## [Import specific fields only - Elasticsearch bulk import](https://discuss.elastic.co/t/import-specific-fields-only-elasticsearch-bulk-import/123012)

<div class="topic-metadata">

**Author:** [@Abhilash\_Sathe](https://discuss.elastic.co/u/Abhilash_Sathe)\
**Replies:** 2\
**Last updated:** [March 8, 2018, 12:04pm UTC](https://discuss.elastic.co/t/import-specific-fields-only-elasticsearch-bulk-import/123012 "2018-03-08T12:04:35Z")

</div>

Is there a way where we can ignore certain JSON keys inside a JSON dump while doing a bulk import in elasticsearch. I'm currently working with Node JS. As mentioned in the below code, data.json contains certain JSON key…

---

## [Output from Wildcard Delete](https://discuss.elastic.co/t/output-from-wildcard-delete/123016)

<div class="topic-metadata">

**Author:** [@Tim\_James](https://discuss.elastic.co/u/Tim_James)\
**Replies:** 2\
**Last updated:** [March 8, 2018, 11:22am UTC](https://discuss.elastic.co/t/output-from-wildcard-delete/123016 "2018-03-08T11:22:28Z")

</div>

I have a script that runs every night to delete indexes more than a certain number of days old, based on the index name using a curl XDELETE. I pipe the output to a logfile but all it says is Acknowledged True. Is there…

---

## [Using nest to make a Join or an alternative more performant query](https://discuss.elastic.co/t/using-nest-to-make-a-join-or-an-alternative-more-performant-query/123052)

<div class="topic-metadata">

**Author:** [@ftaran](https://discuss.elastic.co/u/ftaran)\
**Replies:** 0\
**Last updated:** [March 8, 2018, 11:18am UTC](https://discuss.elastic.co/t/using-nest-to-make-a-join-or-an-alternative-more-performant-query/123052 "2018-03-08T11:18:26Z")

</div>

Given the following document structures: { regionId:"1", regionName:"one" } { regionId:"2", regionName:"two" } { restaurantId:"1", regionIds:\["1, 2"\] } is it possible to make a single query that will return …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1759)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1761)
