# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1762 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1763 --- ## [ElasticSearch S3 Snapshot Retrieval Failing in DR- EC2](https://discuss.elastic.co/t/elasticsearch-s3-snapshot-retrieval-failing-in-dr-ec2/122801)
**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\ **Replies:** 10\ **Last updated:** [March 7, 2018, 9:59pm UTC](https://discuss.elastic.co/t/elasticsearch-s3-snapshot-retrieval-failing-in-dr-ec2/122801 "2018-03-07T21:59:06Z")
Gurus, I've successfully managed to setup Snapshots PUT and GET when using s3-repositories in us-east-1 bucket. However, when I try to pull the snapshot or even repositories via GET when my ec2 instances are in us-west-… --- ## [Restart x-pack monitoring](https://discuss.elastic.co/t/restart-x-pack-monitoring/122974)
**Author:** [@shruti](https://discuss.elastic.co/u/shruti)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 10:54pm UTC](https://discuss.elastic.co/t/restart-x-pack-monitoring/122974 "2018-03-07T22:54:41Z")
Hi, I accidentally deleted the .monitoring index for my elasticsearch cluster. Is there a way to re-create monitoring index / restart xpack monitoring ? Many thanks. --- ## [Searching from a pre-defined list](https://discuss.elastic.co/t/searching-from-a-pre-defined-list/122977)
**Author:** [@javacoffee](https://discuss.elastic.co/u/javacoffee)\ **Replies:** 0\ **Last updated:** [March 7, 2018, 10:44pm UTC](https://discuss.elastic.co/t/searching-from-a-pre-defined-list/122977 "2018-03-07T22:44:58Z")
Hi, I am not a developer but need to ask this question so I can tell developer that this is feasible or not. I was told that this can not be done in elastic search. I have a field called 'School' which is an auto-comple… --- ## [Does rolling upgrade node sequence matter?](https://discuss.elastic.co/t/does-rolling-upgrade-node-sequence-matter/122776)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 2\ **Last updated:** [March 7, 2018, 10:34pm UTC](https://discuss.elastic.co/t/does-rolling-upgrade-node-sequence-matter/122776 "2018-03-07T22:34:20Z")
Hi, I'm trying to upgrade from 6.1.2 to 6.2.2 I have separate nodes: masters, ingest, coordinators and data. I started by upgrading the master nodes. But I get the following message in the logs... I do have x-pack ins… --- ## [Index rejections on ElasticSearch](https://discuss.elastic.co/t/index-rejections-on-elasticsearch/122940)
**Author:** [@Jorge\_Sanchex](https://discuss.elastic.co/u/Jorge_Sanchex)\ **Replies:** 0\ **Last updated:** [March 7, 2018, 6:08pm UTC](https://discuss.elastic.co/t/index-rejections-on-elasticsearch/122940 "2018-03-07T18:08:37Z")
We are using Elasticsearch to store log files which are sent from the rsyslogd emelasticsearch plugin, the configuration of the omelasticsearch is following: template(name="es\_json" type="list") { constant(value="… --- ## [Substituting the \`\_all\` mapping](https://discuss.elastic.co/t/substituting-the-all-mapping/122754)
**Author:** [@headless](https://discuss.elastic.co/u/headless)\ **Replies:** 3\ **Last updated:** [March 7, 2018, 9:36pm UTC](https://discuss.elastic.co/t/substituting-the-all-mapping/122754 "2018-03-07T21:36:23Z")
Hey I'm pretty new to ES and since the \_all - mapping is deprecated since ES 6.0.0 Id like to know how to get similar results. What I want to do is search all fields (nested ones inclusive) for a String. As far as I und… --- ## [Getting data from two index](https://discuss.elastic.co/t/getting-data-from-two-index/122857)
**Author:** [@Francisco1](https://discuss.elastic.co/u/Francisco1)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 8:34pm UTC](https://discuss.elastic.co/t/getting-data-from-two-index/122857 "2018-03-07T20:34:56Z")
Hey guys, From my latest post here, I changed my approach and now I'm stuck in the following: I'm trying to implement a mecanism like a JOIN, I've been reading that's not possible at all but worth the try. I wanna a m… --- ## [Is there a way to do scan with limit](https://discuss.elastic.co/t/is-there-a-way-to-do-scan-with-limit/120103)
**Author:** [@ryankauk](https://discuss.elastic.co/u/ryankauk)\ **Replies:** 2\ **Last updated:** [March 7, 2018, 7:52pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-do-scan-with-limit/120103 "2018-03-07T19:52:07Z")
Hey so basically I'm using elastic search to retrieve a lot of data fast in order to do mapped calculations on it on the server. I'm planning to prepare for millions to tens of millions having to be loaded at once. I ca… --- ## [Discover query : timeout after a 99h treshold](https://discuss.elastic.co/t/discover-query-timeout-after-a-99h-treshold/121083)
**Author:** [@Retenodus](https://discuss.elastic.co/u/Retenodus)\ **Replies:** 3\ **Last updated:** [March 7, 2018, 7:17pm UTC](https://discuss.elastic.co/t/discover-query-timeout-after-a-99h-treshold/121083 "2018-03-07T19:17:47Z")
Hello, I have one index a day in Elasticsearch (6.1) and using Kibana (with defaults parameters), I try to do a query on several days in the discover tab. It works for the 4 last days (99h exactly) and in the response, … --- ## [How do I post an aggregation to an index?](https://discuss.elastic.co/t/how-do-i-post-an-aggregation-to-an-index/122334)
**Author:** [@Motez\_Musa](https://discuss.elastic.co/u/Motez_Musa)\ **Replies:** 3\ **Last updated:** [March 7, 2018, 6:54pm UTC](https://discuss.elastic.co/t/how-do-i-post-an-aggregation-to-an-index/122334 "2018-03-07T18:54:57Z")
I'm fairly new to elasticsearch (v2.4.6), but I'm building some basic visualizations on Kibana (v4.6.4) using some existing indices that log cpu usage data. I can run the following aggregation and get the results via a c… --- ## [Elastic Search - Difference betweeen timestamp of 2 child documents](https://discuss.elastic.co/t/elastic-search-difference-betweeen-timestamp-of-2-child-documents/122945)
**Author:** [@Diego\_Agriel](https://discuss.elastic.co/u/Diego_Agriel)\ **Replies:** 0\ **Last updated:** [March 7, 2018, 6:52pm UTC](https://discuss.elastic.co/t/elastic-search-difference-betweeen-timestamp-of-2-child-documents/122945 "2018-03-07T18:52:33Z")
I have a parent-child relationship betweeen documents as described in the official documentation (https://www.elastic.co/guide/en/elasticsearch/guide/2.x/parent-child.html). The child documents has a field "timestamp". … --- ## [How to get document insert date from Elastic search](https://discuss.elastic.co/t/how-to-get-document-insert-date-from-elastic-search/122935)
**Author:** [@oraclept](https://discuss.elastic.co/u/oraclept)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 6:39pm UTC](https://discuss.elastic.co/t/how-to-get-document-insert-date-from-elastic-search/122935 "2018-03-07T18:39:53Z")
Hi - I am using logstash to ship messages to ES. Logstash automatically adds @timestamp field. I want to know if there is way to tell elastic search or logstash to have actual insert timestamp on document ? is there a e… --- ## [Get single field of each result as list of strings](https://discuss.elastic.co/t/get-single-field-of-each-result-as-list-of-strings/122934)
**Author:** [@Lemonade1947](https://discuss.elastic.co/u/Lemonade1947)\ **Replies:** 0\ **Last updated:** [March 7, 2018, 5:31pm UTC](https://discuss.elastic.co/t/get-single-field-of-each-result-as-list-of-strings/122934 "2018-03-07T17:31:38Z")
Say I have documents with three properties, Name, Address, and Postcode. I'd like to, for example, get back a simple json array with just the postcodes. Not objects with single properties. Is this possible? --- ## [Cluster name in monitoring data](https://discuss.elastic.co/t/cluster-name-in-monitoring-data/120248)
**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\ **Replies:** 6\ **Last updated:** [March 7, 2018, 5:19pm UTC](https://discuss.elastic.co/t/cluster-name-in-monitoring-data/120248 "2018-03-07T17:19:35Z")
We are using a monitoring cluster to monitor multiple elastic clusters. I'm trying to write a query to check all the nodes of a given cluster name, but not sure which property in .monitoring indice would provide me with … --- ## [Total index size 180MB, heap usage over 3GB?](https://discuss.elastic.co/t/total-index-size-180mb-heap-usage-over-3gb/122661)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 5:04pm UTC](https://discuss.elastic.co/t/total-index-size-180mb-heap-usage-over-3gb/122661 "2018-03-07T17:04:38Z")
Hi, What is the relation between total index size and heap usage? I've got 9 indeces with a total size of 180MB however heap usage is over 3GB. Is this normal and why is it so high? Does it keep searches in memory unti… --- ## [Order of actions in Bulk API via http between request and response is guaranteed?](https://discuss.elastic.co/t/order-of-actions-in-bulk-api-via-http-between-request-and-response-is-guaranteed/122499)
**Author:** [@wreulicke](https://discuss.elastic.co/u/wreulicke)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 5:03pm UTC](https://discuss.elastic.co/t/order-of-actions-in-bulk-api-via-http-between-request-and-response-is-guaranteed/122499 "2018-03-07T17:03:03Z")
I am writing code to index some document using Bulk API. In my case, I would like to retry to index in failed actions. There are no guarantee that it is equals to order of actions between request and response? (not ex… --- ## [Upgrade to 6.2.2 Bug](https://discuss.elastic.co/t/upgrade-to-6-2-2-bug/122862)
**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 4:59pm UTC](https://discuss.elastic.co/t/upgrade-to-6-2-2-bug/122862 "2018-03-07T16:59:03Z")
I have the version 6.1.3 of elasticsearch and i want to upgrade to 6.2.2 so ,using zip file in windows,i did like this: unzip to desktop delete the config file and replace by the one of 6.1.3 paste data file from 6.1… --- ## [Type in 6.2.1](https://discuss.elastic.co/t/type-in-6-2-1/122868)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 4:34pm UTC](https://discuss.elastic.co/t/type-in-6-2-1/122868 "2018-03-07T16:34:37Z")
As the type is being taken out in the next major release of the elasticsearch, why the doc type needs to be used in 6.2.1. I am not able to use the index template without using the doc type which is not useful for the pr… --- ## [Issue | Re-index Indices](https://discuss.elastic.co/t/issue-re-index-indices/122925)
**Author:** [@rrs](https://discuss.elastic.co/u/rrs)\ **Replies:** 0\ **Last updated:** [March 7, 2018, 4:27pm UTC](https://discuss.elastic.co/t/issue-re-index-indices/122925 "2018-03-07T16:27:26Z")
Hi All, We are in process of building Elasticsearch multinode cluster with 5.6.3 version and running fine. For some reasons we need to change number of shards & replicas for created indices and new one as well. What I d… --- ## [Problem with Arrays in Elastic Search](https://discuss.elastic.co/t/problem-with-arrays-in-elastic-search/122920)
**Author:** [@Gopala\_Krishna](https://discuss.elastic.co/u/Gopala_Krishna)\ **Replies:** 0\ **Last updated:** [March 7, 2018, 4:14pm UTC](https://discuss.elastic.co/t/problem-with-arrays-in-elastic-search/122920 "2018-03-07T16:14:29Z")
Hello, So, I am writing a custom autocomplete using elastic search. Version 2.X . Assume the following mapping. "country" : { "type" : "string", "analayzer" : "patternAnalyzer" //Split by commas "… --- ## [Inclusion of ingest timestamp in elasticsearch index](https://discuss.elastic.co/t/inclusion-of-ingest-timestamp-in-elasticsearch-index/122740)
**Author:** [@Pratheek](https://discuss.elastic.co/u/Pratheek)\ **Replies:** 4\ **Last updated:** [March 7, 2018, 4:17pm UTC](https://discuss.elastic.co/t/inclusion-of-ingest-timestamp-in-elasticsearch-index/122740 "2018-03-07T16:17:05Z")
I have come across ,including ingest timestamp value of a record to an ES index,but not clear on that.Can anyone help me out on adding the ingest timestamp to the index. Regards, Pratheek --- ## [How to return only matched elements from array](https://discuss.elastic.co/t/how-to-return-only-matched-elements-from-array/122885)
**Author:** [@PiotrUfel](https://discuss.elastic.co/u/PiotrUfel)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 4:12pm UTC](https://discuss.elastic.co/t/how-to-return-only-matched-elements-from-array/122885 "2018-03-07T16:12:25Z")
Hi, everyone I'm trying to retrieve only matching elements from array like this: { "speed": 2.24, "incident": "RIGHT\_TURN", "timestamp": "2018-03-06 15:38:19.454", "geoposition": { "coordinates": \[ 19.14548086974… --- ## [How to create a time-based query grouped by days?](https://discuss.elastic.co/t/how-to-create-a-time-based-query-grouped-by-days/122895)
**Author:** [@Jan\_Pisl](https://discuss.elastic.co/u/Jan_Pisl)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 4:08pm UTC](https://discuss.elastic.co/t/how-to-create-a-time-based-query-grouped-by-days/122895 "2018-03-07T16:08:34Z")
I need a query that would return data from the last year, grouped by days. So far I have written a query that returns data for the entire year (I hope its correct), but I dont know how to group the data by day. "query" … --- ## [Java Query Builders Query is Too Verbose](https://discuss.elastic.co/t/java-query-builders-query-is-too-verbose/122906)
**Author:** [@Jeffrey\_Blayney](https://discuss.elastic.co/u/Jeffrey_Blayney)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 3:46pm UTC](https://discuss.elastic.co/t/java-query-builders-query-is-too-verbose/122906 "2018-03-07T15:46:00Z")
Hello, I'd like the boost values and other defaults defined in my templates to be used. Unfortunately, the boost values and possibly others are not being utilized from the templates because the default queries that are… --- ## [Index Nested object 6.X](https://discuss.elastic.co/t/index-nested-object-6-x/122914)
**Author:** [@Varan](https://discuss.elastic.co/u/Varan)\ **Replies:** 0\ **Last updated:** [March 7, 2018, 3:40pm UTC](https://discuss.elastic.co/t/index-nested-object-6-x/122914 "2018-03-07T15:40:50Z")
Hi, I've read that Elasticsearch's Nested object are usefull but aren't independant from their root index and reindexed the whole document if reindexed (https://www.elastic.co/blog/managing-relations-inside-elasticsear… --- ## [Spread out shards of write index to as many nodes as possible](https://discuss.elastic.co/t/spread-out-shards-of-write-index-to-as-many-nodes-as-possible/122905)
**Author:** [@vineeth\_mohan\_2](https://discuss.elastic.co/u/vineeth_mohan_2)\ **Replies:** 0\ **Last updated:** [March 7, 2018, 3:01pm UTC](https://discuss.elastic.co/t/spread-out-shards-of-write-index-to-as-many-nodes-as-possible/122905 "2018-03-07T15:01:30Z")
I have like say 10 nodes and one index per day. Lets say one index has 10 shards and there could be 10 index any given time. I want the hottest index or the latest index to be widespread across as much nodes as possibl… --- ## [Change mapping for Metricbeat percentages from long to double](https://discuss.elastic.co/t/change-mapping-for-metricbeat-percentages-from-long-to-double/122896)
**Author:** [@ujjain](https://discuss.elastic.co/u/ujjain)\ **Replies:** 0\ **Last updated:** [March 7, 2018, 2:15pm UTC](https://discuss.elastic.co/t/change-mapping-for-metricbeat-percentages-from-long-to-double/122896 "2018-03-07T14:15:56Z")
I have an issue where percentages don't allow for sorting on some percentages, because they're long and no doubles. The percentages are as 0.23, 0.87. curl -XGET "http://127.0.0.1:9200/metricbeat-2018.03.07/\_mapping/doc… --- ## [Installation cleanup](https://discuss.elastic.co/t/installation-cleanup/122819)
**Author:** [@kuyote](https://discuss.elastic.co/u/kuyote)\ **Replies:** 2\ **Last updated:** [March 7, 2018, 1:40pm UTC](https://discuss.elastic.co/t/installation-cleanup/122819 "2018-03-07T13:40:36Z")
I had my environment setup and had issues with certificates, to the point that I wanted to do a complete reinstall. I'm using the tar ball on centos. I've remove the /opt/elasticsearch, /var/lib/elasticsearch, /var/run/e… --- ## [Price Comparison String Search](https://discuss.elastic.co/t/price-comparison-string-search/122883)
**Author:** [@tom\_burman](https://discuss.elastic.co/u/tom_burman)\ **Replies:** 0\ **Last updated:** [March 7, 2018, 12:38pm UTC](https://discuss.elastic.co/t/price-comparison-string-search/122883 "2018-03-07T12:38:17Z")
Hi guys, I am looking to build a price comparison website and use Elastic search to help me do so. The products that we will be comparing from different vendors will have different product titles, brand names etc. What … --- ## [When are “buckets”: \[\] in an aggregation?](https://discuss.elastic.co/t/when-are-buckets-in-an-aggregation/122871)
**Author:** [@WoJ](https://discuss.elastic.co/u/WoJ)\ **Replies:** 0\ **Last updated:** [March 7, 2018, 11:49am UTC](https://discuss.elastic.co/t/when-are-buckets-in-an-aggregation/122871 "2018-03-07T11:49:05Z")
My query is a nested aggregation aggs: { src: { terms: { field: "dst\_ip", size: 1000, }, aggs: { dst: { terms: { field:… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1761) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1763)