# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1775

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1776

---

## [Curator problem, ES 6.1.3 / SG](https://discuss.elastic.co/t/curator-problem-es-6-1-3-sg/121257)

<div class="topic-metadata">

**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\
**Replies:** 3\
**Last updated:** [February 26, 2018, 9:52am UTC](https://discuss.elastic.co/t/curator-problem-es-6-1-3-sg/121257 "2018-02-26T09:52:05Z")

</div>

Hello, I have recently upgraded the cluster to use 6.1.3 rather than 5.x and unfortunately curator is no longer working. Unfortunately the only error I receive is: elasticsearch.exceptions.ElasticsearchException: Unable…

---

## [Why elasticsearch Aggregation is named bucket instead of dimension?](https://discuss.elastic.co/t/why-elasticsearch-aggregation-is-named-bucket-instead-of-dimension/121449)

<div class="topic-metadata">

**Author:** [@jiahaohk](https://discuss.elastic.co/u/jiahaohk)\
**Replies:** 6\
**Last updated:** [February 26, 2018, 9:19am UTC](https://discuss.elastic.co/t/why-elasticsearch-aggregation-is-named-bucket-instead-of-dimension/121449 "2018-02-26T09:19:11Z")

</div>

Why elasticsearch Aggregation is named bucket instead of dimension?

---

## [Iteration Concept](https://discuss.elastic.co/t/iteration-concept/121307)

<div class="topic-metadata">

**Author:** [@Phuong\_Hoang](https://discuss.elastic.co/u/Phuong_Hoang)\
**Replies:** 1\
**Last updated:** [February 26, 2018, 8:43am UTC](https://discuss.elastic.co/t/iteration-concept/121307 "2018-02-26T08:43:59Z")

</div>

{ "challenge": { "name": "just-search", "schedule": \[ { "operation": { "operation-type": "search", "index": "\_all", "body": { "query": { "ma…

---

## [Better way for indexing data in @Elasticsearch](https://discuss.elastic.co/t/better-way-for-indexing-data-in-elasticsearch/121453)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 0\
**Last updated:** [February 26, 2018, 8:32am UTC](https://discuss.elastic.co/t/better-way-for-indexing-data-in-elasticsearch/121453 "2018-02-26T08:32:22Z")

</div>

Greetings, I am using elastic Stack for the Storing purpose and i have than 140 servers. which is preferable way (time based index or other). As i am using elasticsearch for storage purpose so as for 140 servers it wo…

---

## [Getting Nth max/min record from a index](https://discuss.elastic.co/t/getting-nth-max-min-record-from-a-index/121444)

<div class="topic-metadata">

**Author:** [@cj\_elastic](https://discuss.elastic.co/u/cj_elastic)\
**Replies:** 0\
**Last updated:** [February 26, 2018, 7:36am UTC](https://discuss.elastic.co/t/getting-nth-max-min-record-from-a-index/121444 "2018-02-26T07:36:38Z")

</div>

I need to get nth max record. eg. get 100,000 th record which was created latest based on a field created\_time. I also have a custom doc\_id which is random. Or is there any other default field created by elasticsearch th…

---

## [Analysis of the (lime)survey results using ELK](https://discuss.elastic.co/t/analysis-of-the-lime-survey-results-using-elk/121338)

<div class="topic-metadata">

**Author:** [@vitaly\_r](https://discuss.elastic.co/u/vitaly_r)\
**Replies:** 3\
**Last updated:** [February 26, 2018, 6:40am UTC](https://discuss.elastic.co/t/analysis-of-the-lime-survey-results-using-elk/121338 "2018-02-26T06:40:02Z")

</div>

Hello, I want to take the survey data from LimeSurvey and import it into ElasticSearch in order to be able to analyze/visualize it with Kibana later. Could you point me to any examples / best practicies of working with…

---

## [Receive notifications on events / stream read data](https://discuss.elastic.co/t/receive-notifications-on-events-stream-read-data/121219)

<div class="topic-metadata">

**Author:** [@truekonrads](https://discuss.elastic.co/u/truekonrads)\
**Replies:** 1\
**Last updated:** [February 26, 2018, 4:41am UTC](https://discuss.elastic.co/t/receive-notifications-on-events-stream-read-data/121219 "2018-02-26T04:41:15Z")

</div>

Hello, Is it possible to stream in real time indexed data as it comes in based on a filter using ES? Essentially I'd like to build a "live scroll" - I realise I can poll the data every X seconds and retrieve an updte b…

---

## [Define query filter inside query or in the function](https://discuss.elastic.co/t/define-query-filter-inside-query-or-in-the-function/121413)

<div class="topic-metadata">

**Author:** [@Zao\_Liu](https://discuss.elastic.co/u/Zao_Liu)\
**Replies:** 1\
**Last updated:** [February 26, 2018, 12:14am UTC](https://discuss.elastic.co/t/define-query-filter-inside-query-or-in-the-function/121413 "2018-02-26T00:14:27Z")

</div>

When we apply the function scores, what's the different between defining the filter inside the function itself or add it in the query block?

---

## [Elasticsearch 6.2.2 not starting](https://discuss.elastic.co/t/elasticsearch-6-2-2-not-starting/121415)

<div class="topic-metadata">

**Author:** [@chrisgo](https://discuss.elastic.co/u/chrisgo)\
**Replies:** 0\
**Last updated:** [February 25, 2018, 11:21pm UTC](https://discuss.elastic.co/t/elasticsearch-6-2-2-not-starting/121415 "2018-02-25T23:21:51Z")

</div>

Hi, Been able to do this before but a fresh install of Elasticsearch on a 1GB DigitalOcean server is not starting. DO server 1GB, Debian 9.3 Fairly vanilla install via deb package (looks like 6.2.2) and default-jdk On…

---

## [Elasticsearch .net conditional sort](https://discuss.elastic.co/t/elasticsearch-net-conditional-sort/120368)

<div class="topic-metadata">

**Author:** [@Orhun\_Karapinar](https://discuss.elastic.co/u/Orhun_Karapinar)\
**Replies:** 4\
**Last updated:** [February 25, 2018, 10:42pm UTC](https://discuss.elastic.co/t/elasticsearch-net-conditional-sort/120368 "2018-02-25T22:42:40Z")

</div>

I am trying to write an elasticsearch query which gets most recent top 100 from orders and sales, but my problem is orders have shipment\_date. I want to use "shipment\_date" for orders, "created\_date" for sales to sort th…

---

## [Searches with or without double qoutes](https://discuss.elastic.co/t/searches-with-or-without-double-qoutes/121408)

<div class="topic-metadata">

**Author:** [@scarybarry](https://discuss.elastic.co/u/scarybarry)\
**Replies:** 0\
**Last updated:** [February 25, 2018, 9:14pm UTC](https://discuss.elastic.co/t/searches-with-or-without-double-qoutes/121408 "2018-02-25T21:14:03Z")

</div>

Hi there, If encountered a problem, and found the solution. Somebody else beat me to it in June 16. I tried the solution noted and it worked. But I don't understand why and the posted was already closed. The problem is…

---

## [java.lang.NoClassDefFoundError: Could not initialize class com.twitter.finagle.stats.DefaultStatsReceiver$](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-could-not-initialize-class-com-twitter-finagle-stats-defaultstatsreceiver/121347)

<div class="topic-metadata">

**Author:** [@jss1clist](https://discuss.elastic.co/u/jss1clist)\
**Replies:** 5\
**Last updated:** [February 25, 2018, 5:53pm UTC](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-could-not-initialize-class-com-twitter-finagle-stats-defaultstatsreceiver/121347 "2018-02-25T17:53:54Z")

</div>

Got the following error when executing our custom elasticsearch plugin. Caused by: java.lang.NoClassDefFoundError: Could not initialize class com.twitter.finagle.stats.DefaultStatsReceiver$ at com.twitter.finagl…

---

## [Elasticsearch add-on for User Certificate](https://discuss.elastic.co/t/elasticsearch-add-on-for-user-certificate/121399)

<div class="topic-metadata">

**Author:** [@Pororo](https://discuss.elastic.co/u/Pororo)\
**Replies:** 0\
**Last updated:** [February 25, 2018, 5:46pm UTC](https://discuss.elastic.co/t/elasticsearch-add-on-for-user-certificate/121399 "2018-02-25T17:46:29Z")

</div>

Hi, My project is to develop a security analysis service by ELK. For ingesting data, I pulled down the data through my local client and then use logstash to ingest data to es. When I start my local client, I need to put…

---

## [Help for a Newbie](https://discuss.elastic.co/t/help-for-a-newbie/121311)

<div class="topic-metadata">

**Author:** [@zifou](https://discuss.elastic.co/u/zifou)\
**Replies:** 4\
**Last updated:** [February 25, 2018, 4:40pm UTC](https://discuss.elastic.co/t/help-for-a-newbie/121311 "2018-02-25T16:40:46Z")

</div>

Hi All, I just start with ES to collect data from a netflow sensor for our company. I have implement nprobe to send data, everything is ok but the template given by nprobe is not compatible with the last version of ES. …

---

## [I cant index microsoft office files and pdf in elisticsearch](https://discuss.elastic.co/t/i-cant-index-microsoft-office-files-and-pdf-in-elisticsearch/121377)

<div class="topic-metadata">

**Author:** [@sara2](https://discuss.elastic.co/u/sara2)\
**Replies:** 3\
**Last updated:** [February 25, 2018, 4:39pm UTC](https://discuss.elastic.co/t/i-cant-index-microsoft-office-files-and-pdf-in-elisticsearch/121377 "2018-02-25T16:39:23Z")

</div>

hello , i use elisticsearch 2.0.0 and i try to index and search for pdf files or word files but it always failed because content inserted on it like encoded text and when use file\_get\_content it also failed and i sear…

---

## [Map date as text?](https://discuss.elastic.co/t/map-date-as-text/121375)

<div class="topic-metadata">

**Author:** [@yassinelaz](https://discuss.elastic.co/u/yassinelaz)\
**Replies:** 3\
**Last updated:** [February 25, 2018, 4:34pm UTC](https://discuss.elastic.co/t/map-date-as-text/121375 "2018-02-25T16:34:57Z")

</div>

I have json data that has a "product\_ref" field (mapped as text) that can take these values as an example: "product\_ref": "N/A" "product\_ref": "90323" "product\_ref": "SN3005" "product\_ref": "2015-05-23" When pushing…

---

## [ELK Stack CI?](https://discuss.elastic.co/t/elk-stack-ci/121395)

<div class="topic-metadata">

**Author:** [@aclowkey](https://discuss.elastic.co/u/aclowkey)\
**Replies:** 0\
**Last updated:** [February 25, 2018, 4:15pm UTC](https://discuss.elastic.co/t/elk-stack-ci/121395 "2018-02-25T16:15:02Z")

</div>

Hello, I've played with ElasticSearch for a while and now responsible for its development at an actual company (yay). I was curious how to do continuous integration. I.E. Editing logstash pipilines, comitting, deployin…

---

## [Aggregated search with local backup](https://discuss.elastic.co/t/aggregated-search-with-local-backup/121381)

<div class="topic-metadata">

**Author:** [@mdsh](https://discuss.elastic.co/u/mdsh)\
**Replies:** 0\
**Last updated:** [February 25, 2018, 1:18pm UTC](https://discuss.elastic.co/t/aggregated-search-with-local-backup/121381 "2018-02-25T13:18:30Z")

</div>

I'm designing a system to run globally. There are multiple private independent locations across the globe creating searchable documents. The locations across the globe are already connected together with a private (off …

---

## [Count the Number of words in the field Elastic search 6.2](https://discuss.elastic.co/t/count-the-number-of-words-in-the-field-elastic-search-6-2/121373)

<div class="topic-metadata">

**Author:** [@Amit\_khanduri](https://discuss.elastic.co/u/Amit_khanduri)\
**Replies:** 0\
**Last updated:** [February 25, 2018, 11:11am UTC](https://discuss.elastic.co/t/count-the-number-of-words-in-the-field-elastic-search-6-2/121373 "2018-02-25T11:11:34Z")

</div>

Most of the peoples asked this question in the forum so many times, but I want the exact solution for this problem. Example : "Name":"John Doe bishop" So the total count in the Name field is 3. What is the query to f…

---

## [Need Help: Configuring S3 Snapshots after ElasticSearch Instance Spun up](https://discuss.elastic.co/t/need-help-configuring-s3-snapshots-after-elasticsearch-instance-spun-up/121358)

<div class="topic-metadata">

**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\
**Replies:** 2\
**Last updated:** [February 25, 2018, 6:35am UTC](https://discuss.elastic.co/t/need-help-configuring-s3-snapshots-after-elasticsearch-instance-spun-up/121358 "2018-02-25T06:35:53Z")

</div>

Hello - due to circumstances, we weren't able to configure repository-s3 plugin before spinning up our ElasticSearch stack in Production. While we are ok for now, I want to address this gap as soon as possible without d…

---

## [Event listener for local node getting added to cluster](https://discuss.elastic.co/t/event-listener-for-local-node-getting-added-to-cluster/121363)

<div class="topic-metadata">

**Author:** [@fhalde](https://discuss.elastic.co/u/fhalde)\
**Replies:** 0\
**Last updated:** [February 25, 2018, 5:57am UTC](https://discuss.elastic.co/t/event-listener-for-local-node-getting-added-to-cluster/121363 "2018-02-25T05:57:47Z")

</div>

I'm developing a plugin for ES and just wanted to know if it is possible in the plugin initializer to know when the local node got added to the cluster? I see events only for localNodeMaster some sort of event that i ca…

---

## [HighLevelRestClient appears inconsistent between hosted elasticsearch and testcontainers-java-module-elasticsearch](https://discuss.elastic.co/t/highlevelrestclient-appears-inconsistent-between-hosted-elasticsearch-and-testcontainers-java-module-elasticsearch/121348)

<div class="topic-metadata">

**Author:** [@tbuckner](https://discuss.elastic.co/u/tbuckner)\
**Replies:** 3\
**Last updated:** [February 24, 2018, 11:35pm UTC](https://discuss.elastic.co/t/highlevelrestclient-appears-inconsistent-between-hosted-elasticsearch-and-testcontainers-java-module-elasticsearch/121348 "2018-02-24T23:35:55Z")

</div>

I have a weird issue that might be a problem with testcontainers-java-module-elasticsearch or possibly with the HighLevelRestClient. I wrote a test that connected directly to our hosted cloud.elastic.co cluster and crea…

---

## [GC overhead - but heaps of free memory?](https://discuss.elastic.co/t/gc-overhead-but-heaps-of-free-memory/121354)

<div class="topic-metadata">

**Author:** [@davidkarlsen](https://discuss.elastic.co/u/davidkarlsen)\
**Replies:** 0\
**Last updated:** [February 24, 2018, 10:25pm UTC](https://discuss.elastic.co/t/gc-overhead-but-heaps-of-free-memory/121354 "2018-02-24T22:25:16Z")

</div>

Whenever I do a search in Kibana I see : \[2018-02-24T22:16:19,009\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[HUCBRNR\] \[gc\]\[124359\] overhead, spent \[286ms\] collecting in the last \[1s\] in the log - but I find it very strange …

---

## [Elasticsearch in docker in VM - Out of memory](https://discuss.elastic.co/t/elasticsearch-in-docker-in-vm-out-of-memory/121350)

<div class="topic-metadata">

**Author:** [@abdujaparov](https://discuss.elastic.co/u/abdujaparov)\
**Replies:** 0\
**Last updated:** [February 24, 2018, 9:22pm UTC](https://discuss.elastic.co/t/elasticsearch-in-docker-in-vm-out-of-memory/121350 "2018-02-24T21:22:20Z")

</div>

Hi, I created a vm with Alpine-linux and I am trying to deploy elasticsearch with container but I receive errors when I try do create container: elasticsearch | # There is insufficient memory for the Java Runtime En…

---

## [Excluding object/nested data in search](https://discuss.elastic.co/t/excluding-object-nested-data-in-search/121128)

<div class="topic-metadata">

**Author:** [@BentCoder](https://discuss.elastic.co/u/BentCoder)\
**Replies:** 1\
**Last updated:** [February 24, 2018, 3:07pm UTC](https://discuss.elastic.co/t/excluding-object-nested-data-in-search/121128 "2018-02-24T15:07:36Z")

</div>

Hi, I looked for this but couldn't find an answer. I want to exclude nested/object property of document in my search. So in the case below, when I search for "football" with ID "1", I don't want to see "leagues" propert…

---

## [ELK: How do I retrieve more than 10000 results using Elastic-search in node js](https://discuss.elastic.co/t/elk-how-do-i-retrieve-more-than-10000-results-using-elastic-search-in-node-js/121172)

<div class="topic-metadata">

**Author:** [@Jasso](https://discuss.elastic.co/u/Jasso)\
**Replies:** 6\
**Last updated:** [February 24, 2018, 1:54pm UTC](https://discuss.elastic.co/t/elk-how-do-i-retrieve-more-than-10000-results-using-elastic-search-in-node-js/121172 "2018-02-24T13:54:38Z")

</div>

function getElasticData(endTime, startTime) { return new Promise(function (resolve, reject) { elasticClient.search({ index: 'logstash-\*', type: 'callEnd', size: 10000, …

---

## [Managing Elastic Search - Is Curl the only way?](https://discuss.elastic.co/t/managing-elastic-search-is-curl-the-only-way/121299)

<div class="topic-metadata">

**Author:** [@Mike2](https://discuss.elastic.co/u/Mike2)\
**Replies:** 3\
**Last updated:** [February 24, 2018, 11:35am UTC](https://discuss.elastic.co/t/managing-elastic-search-is-curl-the-only-way/121299 "2018-02-24T11:35:25Z")

</div>

Hi - I'm a beginner using ELK, and as a beginner, I imported some logs that ended up having numeric fields imported as text. So, I fixed the log stash process to convert those correctly, and now my indices are conflicte…

---

## [Geo\_shape indexing default precision?](https://discuss.elastic.co/t/geo-shape-indexing-default-precision/121337)

<div class="topic-metadata">

**Author:** [@cabane77](https://discuss.elastic.co/u/cabane77)\
**Replies:** 0\
**Last updated:** [February 24, 2018, 11:04am UTC](https://discuss.elastic.co/t/geo-shape-indexing-default-precision/121337 "2018-02-24T11:04:20Z")

</div>

Hi, I wonder if there is a simple answer for the above? I am trying to understand what is the default precision with which ES indexes geo\_shape if no precision is specified? https://www.elastic.co/guide/en/elasticsear…

---

## [Query to get sales done by employees](https://discuss.elastic.co/t/query-to-get-sales-done-by-employees/121324)

<div class="topic-metadata">

**Author:** [@tushar\_chevulkar](https://discuss.elastic.co/u/tushar_chevulkar)\
**Replies:** 3\
**Last updated:** [February 24, 2018, 10:38am UTC](https://discuss.elastic.co/t/query-to-get-sales-done-by-employees/121324 "2018-02-24T10:38:02Z")

</div>

I need to write a query where I search any product name it should show me who all has sold this products and the quantity that they have sold. { "user": { "id": "1", "full\_name": "John" …

---

## [Create parquet files from an ES index snapshot?](https://discuss.elastic.co/t/create-parquet-files-from-an-es-index-snapshot/121326)

<div class="topic-metadata">

**Author:** [@shivkumar](https://discuss.elastic.co/u/shivkumar)\
**Replies:** 4\
**Last updated:** [February 24, 2018, 9:10am UTC](https://discuss.elastic.co/t/create-parquet-files-from-an-es-index-snapshot/121326 "2018-02-24T09:10:33Z")

</div>

I am using S3 repository plugin to take snapshot of my ES Cluster to S3. I have TB's of data on S3 ( roughly 5TB ) , I want to convert these snapshots to parquet files. Is it possible to do so ? Is it possible to conf…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1774)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1776)
