# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1771

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1772

---

## [Aggregation Doubt](https://discuss.elastic.co/t/aggregation-doubt/121924)

<div class="topic-metadata">

**Author:** [@rodolfobarbeiro](https://discuss.elastic.co/u/rodolfobarbeiro)\
**Replies:** 0\
**Last updated:** [February 28, 2018, 6:54pm UTC](https://discuss.elastic.co/t/aggregation-doubt/121924 "2018-02-28T18:54:36Z")

</div>

Hello, I need to know how many customers shopped in different stores. Consider the following index mapping: curl -X PUT "localhost:9200/buy-data" -d '{ "mappings": { "order": { "properties": { "stat…

---

## [Plugins development workflow](https://discuss.elastic.co/t/plugins-development-workflow/121872)

<div class="topic-metadata">

**Author:** [@franck.lefebure](https://discuss.elastic.co/u/franck.lefebure)\
**Replies:** 1\
**Last updated:** [February 28, 2018, 6:51pm UTC](https://discuss.elastic.co/t/plugins-development-workflow/121872 "2018-02-28T18:51:15Z")

</div>

Recently, we started to create custom plugins for ES6 and I wonder what should be a good development method. During debugging steps, the iterative packaging/deployment of the plugin to an ES external server instance is …

---

## [Term aggregation not return accurate number of records](https://discuss.elastic.co/t/term-aggregation-not-return-accurate-number-of-records/121142)

<div class="topic-metadata">

**Author:** [@telebh](https://discuss.elastic.co/u/telebh)\
**Replies:** 2\
**Last updated:** [February 28, 2018, 5:56pm UTC](https://discuss.elastic.co/t/term-aggregation-not-return-accurate-number-of-records/121142 "2018-02-28T17:56:17Z")

</div>

Hi There, I am running ELasticSearch 6.0. i have a query with term aggregation to a "not-analyzed" field, but I am getting inaccurate count. i have set the size for aggregation to "100" as follows. for example when set…

---

## [NEST Term query - incorrectly generated JSON?](https://discuss.elastic.co/t/nest-term-query-incorrectly-generated-json/121908)

<div class="topic-metadata">

**Author:** [@Dave\_Russell](https://discuss.elastic.co/u/Dave_Russell)\
**Replies:** 1\
**Last updated:** [February 28, 2018, 5:43pm UTC](https://discuss.elastic.co/t/nest-term-query-incorrectly-generated-json/121908 "2018-02-28T17:43:43Z")

</div>

I'm a C# / Web / Javascript developer. I originally wrote an ElasticSearch app years ago on v2. I'm now building a new app with v6.2 but trying to use some of the same NEST code from before. Some of this code is for b…

---

## [Elastic Search output piping similar to splunk](https://discuss.elastic.co/t/elastic-search-output-piping-similar-to-splunk/121898)

<div class="topic-metadata">

**Author:** [@sklein](https://discuss.elastic.co/u/sklein)\
**Replies:** 0\
**Last updated:** [February 28, 2018, 4:47pm UTC](https://discuss.elastic.co/t/elastic-search-output-piping-similar-to-splunk/121898 "2018-02-28T16:47:09Z")

</div>

Hi, We Need to extract a Duration value from the message field (e.g. Duration="10.400") We Need to summarize this value for a Special time period and we need to multiply the total summ for example with 0,3. How can a v…

---

## [Lost indices after upgrade to 6.2.1 from 5.4.1](https://discuss.elastic.co/t/lost-indices-after-upgrade-to-6-2-1-from-5-4-1/121892)

<div class="topic-metadata">

**Author:** [@candrews](https://discuss.elastic.co/u/candrews)\
**Replies:** 0\
**Last updated:** [February 28, 2018, 4:35pm UTC](https://discuss.elastic.co/t/lost-indices-after-upgrade-to-6-2-1-from-5-4-1/121892 "2018-02-28T16:35:52Z")

</div>

Hi, I have recently upgraded my elastic stack from 5.4.1 to 6.2.1, using puppet to manage the upgrade, on a server in two different environments - development and staging. The development server upgrade went fine, noth…

---

## [Problem with elasticsearch-6.1.2 (\[.kibana\] creating index, cause \[auto(bulk api)\])](https://discuss.elastic.co/t/problem-with-elasticsearch-6-1-2-kibana-creating-index-cause-auto-bulk-api/121889)

<div class="topic-metadata">

**Author:** [@Diallos](https://discuss.elastic.co/u/Diallos)\
**Replies:** 0\
**Last updated:** [February 28, 2018, 4:28pm UTC](https://discuss.elastic.co/t/problem-with-elasticsearch-6-1-2-kibana-creating-index-cause-auto-bulk-api/121889 "2018-02-28T16:28:42Z")

</div>

Hi there, I noticed sometime (the first time) when I start ES (6.1.2, windows version), I have in the logs:\[.kibana\] creating index, cause \[auto(bulk api)\], templates \[\], shards \[5\]/\[1\], mappings \[\] In this case, if I …

---

## [How exactly to use a custom json serializer with NEST on .net](https://discuss.elastic.co/t/how-exactly-to-use-a-custom-json-serializer-with-nest-on-net/121729)

<div class="topic-metadata">

**Author:** [@togakangaroo](https://discuss.elastic.co/u/togakangaroo)\
**Replies:** 3\
**Last updated:** [February 28, 2018, 4:15pm UTC](https://discuss.elastic.co/t/how-exactly-to-use-a-custom-json-serializer-with-nest-on-net/121729 "2018-02-28T16:15:19Z")

</div>

Hi all, I was directed here by the Elasticsearch NEST client for .Net (really well written by the way). I'm hitting a bit of a wall and the docs are too sparse on how exactly to do this. Basically, my objects have priv…

---

## [Multiple Filter NEST Query DSL](https://discuss.elastic.co/t/multiple-filter-nest-query-dsl/121835)

<div class="topic-metadata">

**Author:** [@DiSiZ](https://discuss.elastic.co/u/DiSiZ)\
**Replies:** 1\
**Last updated:** [February 28, 2018, 1:30pm UTC](https://discuss.elastic.co/t/multiple-filter-nest-query-dsl/121835 "2018-02-28T13:30:09Z")

</div>

Is this possible to have multiple BoudingBox for one geoboundingbox ?

---

## [Dynamic Mapping with properties](https://discuss.elastic.co/t/dynamic-mapping-with-properties/121759)

<div class="topic-metadata">

**Author:** [@pavithrakc](https://discuss.elastic.co/u/pavithrakc)\
**Replies:** 2\
**Last updated:** [February 28, 2018, 3:25pm UTC](https://discuss.elastic.co/t/dynamic-mapping-with-properties/121759 "2018-02-28T15:25:11Z")

</div>

Hello all, I am trying to use dynamic templates for all my string fields with an exception of my Time field so that I can set that one as type 'date'. I need to use these fields("TransactTime\_Tag\_60" and "ExpireDate\_Ta…

---

## [FSCrawler not running](https://discuss.elastic.co/t/fscrawler-not-running/121650)

<div class="topic-metadata">

**Author:** [@pkasson](https://discuss.elastic.co/u/pkasson)\
**Replies:** 10\
**Last updated:** [February 28, 2018, 3:24pm UTC](https://discuss.elastic.co/t/fscrawler-not-running/121650 "2018-02-28T15:24:42Z")

</div>

Hi group, I just tried to run FSCrawler for the first time, and it did not work. I have been asked to include any logs, etc, and don't see any. I created a test job and here is that ... following that, is the error m…

---

## [ES 6.2.1 Unable to reindex due to unavailable\_shards\_exception](https://discuss.elastic.co/t/es-6-2-1-unable-to-reindex-due-to-unavailable-shards-exception/121859)

<div class="topic-metadata">

**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\
**Replies:** 1\
**Last updated:** [February 28, 2018, 3:14pm UTC](https://discuss.elastic.co/t/es-6-2-1-unable-to-reindex-due-to-unavailable-shards-exception/121859 "2018-02-28T15:14:36Z")

</div>

Hi Team, I am trying to reindex from a source "A" index to dest "B" index - this has worked before but suddenly it throws me the unavailable\_shards\_exception exception now and am not sure why. The cluster health is gre…

---

## [Reindex does not create all documents](https://discuss.elastic.co/t/reindex-does-not-create-all-documents/121368)

<div class="topic-metadata">

**Author:** [@Dan\_Markhasin](https://discuss.elastic.co/u/Dan_Markhasin)\
**Replies:** 4\
**Last updated:** [February 28, 2018, 3:14pm UTC](https://discuss.elastic.co/t/reindex-does-not-create-all-documents/121368 "2018-02-28T15:14:19Z")

</div>

Can anyone explain what is going on here? Why is the "created" count lower than "total"? This is on ElasticSearch 5.4.0. { "completed": true, "task": { "node": "6XQAqH3qQYqJq9MqCgpeLA", "id": 160658656, "type": "t…

---

## [Conditional path in nested aggregation](https://discuss.elastic.co/t/conditional-path-in-nested-aggregation/121698)

<div class="topic-metadata">

**Author:** [@elpaisa](https://discuss.elastic.co/u/elpaisa)\
**Replies:** 1\
**Last updated:** [February 28, 2018, 2:29pm UTC](https://discuss.elastic.co/t/conditional-path-in-nested-aggregation/121698 "2018-02-28T14:29:41Z")

</div>

Hi, I have a nested field with two properties: { "rating": 2 "victim": \[{ "ip": "...", "instanceId": "...."" }\] } I want to aggregate over the rating and get the IP or InstanceId for each …

---

## [Dangling Indices in Ingest nodes after running Currator](https://discuss.elastic.co/t/dangling-indices-in-ingest-nodes-after-running-currator/120856)

<div class="topic-metadata">

**Author:** [@hadi](https://discuss.elastic.co/u/hadi)\
**Replies:** 6\
**Last updated:** [February 28, 2018, 2:11pm UTC](https://discuss.elastic.co/t/dangling-indices-in-ingest-nodes-after-running-currator/120856 "2018-02-28T14:11:41Z")

</div>

Hi, After running curator for deleting indicies older than two weeks, I see following error in Ingest nodes elasticsearch logs! tailf /var/log/elasticsearch/dbus.log \[2018-02-19T10:26:09,264\]\[WARN \]\[o.e.g.DanglingInd…

---

## [Inner\_hits, top\_hits, span !? on nested field performance](https://discuss.elastic.co/t/inner-hits-top-hits-span-on-nested-field-performance/121864)

<div class="topic-metadata">

**Author:** [@b789](https://discuss.elastic.co/u/b789)\
**Replies:** 0\
**Last updated:** [February 28, 2018, 1:59pm UTC](https://discuss.elastic.co/t/inner-hits-top-hits-span-on-nested-field-performance/121864 "2018-02-28T13:59:40Z")

</div>

hi, i've this query: { "query": { "bool": { "must": \[ { "bool": { "should": \[ { "nested": { "path": "nestedfield", "query": { "boo…

---

## [Problem with putting fix Ip address](https://discuss.elastic.co/t/problem-with-putting-fix-ip-address/121861)

<div class="topic-metadata">

**Author:** [@Adren](https://discuss.elastic.co/u/Adren)\
**Replies:** 0\
**Last updated:** [February 28, 2018, 1:40pm UTC](https://discuss.elastic.co/t/problem-with-putting-fix-ip-address/121861 "2018-02-28T13:40:56Z")

</div>

Hello, I modified the elasticsearch.yml for putting a fix ip address: network.host : 192.168.15.18 and I modified the /etc/security/limits.conf: elasticuser - nofile 65536 elasticuser - npr…

---

## [Filter on score difference](https://discuss.elastic.co/t/filter-on-score-difference/121822)

<div class="topic-metadata">

**Author:** [@mvienne](https://discuss.elastic.co/u/mvienne)\
**Replies:** 0\
**Last updated:** [February 28, 2018, 10:05am UTC](https://discuss.elastic.co/t/filter-on-score-difference/121822 "2018-02-28T10:05:22Z")

</div>

Is it possible to filter query results based on the score difference with the best match ? I would like to keep the results with a score difference of less than ten.

---

## [Issues running three node cluster](https://discuss.elastic.co/t/issues-running-three-node-cluster/121753)

<div class="topic-metadata">

**Author:** [@dmaulick](https://discuss.elastic.co/u/dmaulick)\
**Replies:** 1\
**Last updated:** [February 28, 2018, 12:26pm UTC](https://discuss.elastic.co/t/issues-running-three-node-cluster/121753 "2018-02-28T12:26:06Z")

</div>

Elasticsearch version: (6.2.1) OS: Unix I am attempting to start a 3 node cluster I have two issues/questions in regards to my configuration. This is my first configuration in the elasticsearch.yml file node.name: 1…

---

## [Search a dot in string with wildcard](https://discuss.elastic.co/t/search-a-dot-in-string-with-wildcard/121823)

<div class="topic-metadata">

**Author:** [@michele](https://discuss.elastic.co/u/michele)\
**Replies:** 1\
**Last updated:** [February 28, 2018, 12:09pm UTC](https://discuss.elastic.co/t/search-a-dot-in-string-with-wildcard/121823 "2018-02-28T12:09:05Z")

</div>

In my index I have: doc1 ==\> field1 = foo 123, field2 = 123 doc2 ==\> field1 = f.o.o 456, field2 = 456 If I do this query, I have returned doc1: { "query":{ "bool":{ "must":\[ {"wildcard":{"field1" : "foo\*"}}…

---

## [Math.round in JSON input](https://discuss.elastic.co/t/math-round-in-json-input/121075)

<div class="topic-metadata">

**Author:** [@Mahbubur\_Rahman](https://discuss.elastic.co/u/Mahbubur_Rahman)\
**Replies:** 1\
**Last updated:** [February 28, 2018, 11:02am UTC](https://discuss.elastic.co/t/math-round-in-json-input/121075 "2018-02-28T11:02:44Z")

</div>

Hi, I was wondering if I could use Math.round function in JSON input to suppress the number. For an example, 6 --\> 5 8 --\> 10 etc. I tried something like {"script": " Math.round(\_value/5)\*5"} for count, but not all…

---

## [Save a query and use it by the name](https://discuss.elastic.co/t/save-a-query-and-use-it-by-the-name/121814)

<div class="topic-metadata">

**Author:** [@devil\_srj7](https://discuss.elastic.co/u/devil_srj7)\
**Replies:** 1\
**Last updated:** [February 28, 2018, 10:45am UTC](https://discuss.elastic.co/t/save-a-query-and-use-it-by-the-name/121814 "2018-02-28T10:45:00Z")

</div>

I have a query that is repeatedly used. Is there a way such that I can save the entire query and refer it by using the name which I can give while storing?

---

## [How to store a list of nested array in elastcisearch](https://discuss.elastic.co/t/how-to-store-a-list-of-nested-array-in-elastcisearch/121827)

<div class="topic-metadata">

**Author:** [@kish](https://discuss.elastic.co/u/kish)\
**Replies:** 0\
**Last updated:** [February 28, 2018, 10:39am UTC](https://discuss.elastic.co/t/how-to-store-a-list-of-nested-array-in-elastcisearch/121827 "2018-02-28T10:39:33Z")

</div>

I have json file which is dynamic. So i have to store it using nested type. data: \[ map\[name: kish age: 26 \] map\[name: kal age: 26 company: home\] map\[msg: hi date: 123456\] \] How to store this data? And also can …

---

## [GeoBoudingBox Multiple Query DSL](https://discuss.elastic.co/t/geoboudingbox-multiple-query-dsl/121820)

<div class="topic-metadata">

**Author:** [@DiSiZ](https://discuss.elastic.co/u/DiSiZ)\
**Replies:** 1\
**Last updated:** [February 28, 2018, 10:32am UTC](https://discuss.elastic.co/t/geoboudingbox-multiple-query-dsl/121820 "2018-02-28T10:32:50Z")

</div>

Hello, I've got two points and i'd like in my request to define a boudingbox, and if one of those two points are in my rectangle. Actually it work only with 1 points i've made few research to do multiple field request,…

---

## [Override class for plugin in ElasticSearch](https://discuss.elastic.co/t/override-class-for-plugin-in-elasticsearch/121672)

<div class="topic-metadata">

**Author:** [@iKishanSojitra](https://discuss.elastic.co/u/iKishanSojitra)\
**Replies:** 2\
**Last updated:** [February 28, 2018, 9:40am UTC](https://discuss.elastic.co/t/override-class-for-plugin-in-elasticsearch/121672 "2018-02-28T09:40:03Z")

</div>

I'm working on ElasticSearch Plugin to retrieve total frequency of searched term. I've already created maven project and successfully deployed my test plugin into ElasticSearch but I have no idea how to write override fu…

---

## [Optimizing ressouce Usage on Startup, Search and reindex](https://discuss.elastic.co/t/optimizing-ressouce-usage-on-startup-search-and-reindex/121818)

<div class="topic-metadata">

**Author:** [@ChrisGeorg](https://discuss.elastic.co/u/ChrisGeorg)\
**Replies:** 0\
**Last updated:** [February 28, 2018, 9:47am UTC](https://discuss.elastic.co/t/optimizing-ressouce-usage-on-startup-search-and-reindex/121818 "2018-02-28T09:47:34Z")

</div>

Hi All, We are running a Single Node Elastic Search Instance with ~200 Indices each 15-20 GB (populated by using Logstash with daily index). We are running this on a server with 40 logical CPUs and 128GB Ram. We recentl…

---

## [Upgrade ES from 2.3.5 to 6.0/ 6.2](https://discuss.elastic.co/t/upgrade-es-from-2-3-5-to-6-0-6-2/120668)

<div class="topic-metadata">

**Author:** [@Indisol](https://discuss.elastic.co/u/Indisol)\
**Replies:** 2\
**Last updated:** [February 28, 2018, 9:20am UTC](https://discuss.elastic.co/t/upgrade-es-from-2-3-5-to-6-0-6-2/120668 "2018-02-28T09:20:48Z")

</div>

Hello Everyone, I am trying to upgrade ES from 2.3.5 to 6.0 / 6.2. I have followed instruction as per the interactive guide on the elastic portal. I am successfully able to upgrade from 2.3.5 to 5.6.7, i was successfu…

---

## [MultiSearch API](https://discuss.elastic.co/t/multisearch-api/121207)

<div class="topic-metadata">

**Author:** [@devil\_srj7](https://discuss.elastic.co/u/devil_srj7)\
**Replies:** 4\
**Last updated:** [February 28, 2018, 8:48am UTC](https://discuss.elastic.co/t/multisearch-api/121207 "2018-02-28T08:48:43Z")

</div>

Hi, How do I use multisearch api in my java program through my LowLevelRest client and HighLEvel Rest Client?? I have referred the documentation but can't understand much of it!

---

## [Reroute unassigned shards](https://discuss.elastic.co/t/reroute-unassigned-shards/120686)

<div class="topic-metadata">

**Author:** [@ocebeci](https://discuss.elastic.co/u/ocebeci)\
**Replies:** 4\
**Last updated:** [February 28, 2018, 8:22am UTC](https://discuss.elastic.co/t/reroute-unassigned-shards/120686 "2018-02-28T08:22:08Z")

</div>

How can I reroute all unassigned shards to single-node with ES version 5.6?

---

## [Disable memory swapping](https://discuss.elastic.co/t/disable-memory-swapping/121787)

<div class="topic-metadata">

**Author:** [@sorcerer](https://discuss.elastic.co/u/sorcerer)\
**Replies:** 0\
**Last updated:** [February 28, 2018, 6:47am UTC](https://discuss.elastic.co/t/disable-memory-swapping/121787 "2018-02-28T06:47:45Z")

</div>

I am using Docker Toolbox in Windows 8.1 environment. I am new to docker. I am trying to install an open source app which call for installing elasticsearch. I have never use elasticsearch before. The first instruction i…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1770)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1772)
