# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1781 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1782 --- ## [How to sort bucket terms in a nested aggregation on score instead of doc count? (Nested field aggregation not allowed with nested field query)](https://discuss.elastic.co/t/how-to-sort-bucket-terms-in-a-nested-aggregation-on-score-instead-of-doc-count-nested-field-aggregation-not-allowed-with-nested-field-query/120547)
**Author:** [@aguyinmontreal](https://discuss.elastic.co/u/aguyinmontreal)\ **Replies:** 1\ **Last updated:** [February 20, 2018, 10:11pm UTC](https://discuss.elastic.co/t/how-to-sort-bucket-terms-in-a-nested-aggregation-on-score-instead-of-doc-count-nested-field-aggregation-not-allowed-with-nested-field-query/120547 "2018-02-20T22:11:43Z")
I'm trying to sort my term buckets on score relevancy instead of doc count. I'm trying do to something like this. However, nested field aggregations are not allowed to be added to nested queries. What are my options? H… --- ## [Xpack.monitoring.history.duration](https://discuss.elastic.co/t/xpack-monitoring-history-duration/120732)
**Author:** [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\ **Replies:** 2\ **Last updated:** [February 20, 2018, 10:09pm UTC](https://discuss.elastic.co/t/xpack-monitoring-history-duration/120732 "2018-02-20T22:09:52Z")
Hi, I am using ES 5.2.2 with X-Pack 5.2.2. I am having main cluster and monitoring cluster where I export monitoring data from main cluster. Refer release docs https://www.elastic.co/guide/en/x-pack/5.… --- ## [Function\_score, multi\_match, script\_score, and filter in Elasticsearch](https://discuss.elastic.co/t/function-score-multi-match-script-score-and-filter-in-elasticsearch/120720)
**Author:** [@hacker\_21](https://discuss.elastic.co/u/hacker_21)\ **Replies:** 2\ **Last updated:** [February 20, 2018, 8:56pm UTC](https://discuss.elastic.co/t/function-score-multi-match-script-score-and-filter-in-elasticsearch/120720 "2018-02-20T20:56:26Z")
I'm having trouble adding a filter to my existing multimatch query which is embedded inside of a function\_score. Ideally, I'd like to filter by "term" : { "lang" : "en" }, only get back documents which are in the englis… --- ## [Watcher: Error 400 Bad Request: json argument must contain a watchStatusJson property](https://discuss.elastic.co/t/watcher-error-400-bad-request-json-argument-must-contain-a-watchstatusjson-property/120115)
**Author:** [@rippfx](https://discuss.elastic.co/u/rippfx)\ **Replies:** 3\ **Last updated:** [February 20, 2018, 8:51pm UTC](https://discuss.elastic.co/t/watcher-error-400-bad-request-json-argument-must-contain-a-watchstatusjson-property/120115 "2018-02-20T20:51:16Z")
Just upgraded to 6.2 from 5.6. everything seems to work except watcher. I'm getting this error when clicking Watcher under management. Watcher: Error 400 Bad Request: json argument must contain a watchStatusJson propert… --- ## [Possible bug in search query for Elasticsearch Version Mismatch alert](https://discuss.elastic.co/t/possible-bug-in-search-query-for-elasticsearch-version-mismatch-alert/120702)
**Author:** [@aaronloesattv](https://discuss.elastic.co/u/aaronloesattv)\ **Replies:** 0\ **Last updated:** [February 20, 2018, 6:11pm UTC](https://discuss.elastic.co/t/possible-bug-in-search-query-for-elasticsearch-version-mismatch-alert/120702 "2018-02-20T18:11:30Z")
The generated XPack watcher alert that checks for Elasticsearch node version mismatches doesn't seem to ever pull back any data and the way the alert is written will never trigger an alert if there is no data. The input … --- ## [Combination of two top terms aggregations](https://discuss.elastic.co/t/combination-of-two-top-terms-aggregations/120479)
**Author:** [@aurelien](https://discuss.elastic.co/u/aurelien)\ **Replies:** 4\ **Last updated:** [February 20, 2018, 6:04pm UTC](https://discuss.elastic.co/t/combination-of-two-top-terms-aggregations/120479 "2018-02-20T18:04:24Z")
Hi, When I perform a term aggregation on FIELD1 and a term aggregation on FIELD2, I got the following result: FIELD1 : { TOPTERM1FIELD1 : 10000, TOPTERM2FIELD1 : 1000 } and FIELD2 : { TOPTERM1FIELD2 : 121212, T… --- ## [Curator error - unable to delete old indices](https://discuss.elastic.co/t/curator-error-unable-to-delete-old-indices/120529)
**Author:** [@shri](https://discuss.elastic.co/u/shri)\ **Replies:** 0\ **Last updated:** [February 19, 2018, 9:46pm UTC](https://discuss.elastic.co/t/curator-error-unable-to-delete-old-indices/120529 "2018-02-19T21:46:06Z")
Hi, I'm seeing this error Skipping action "delete\_indices" due to empty list: \ when i'm trying to delete my older indices. Any help on this please? Error: 2018-02-19 21:34:40,977 I… --- ## [Searching for docs that contain a subset of terms](https://discuss.elastic.co/t/searching-for-docs-that-contain-a-subset-of-terms/120687)
**Author:** [@Kevin\_Bourne](https://discuss.elastic.co/u/Kevin_Bourne)\ **Replies:** 0\ **Last updated:** [February 20, 2018, 4:56pm UTC](https://discuss.elastic.co/t/searching-for-docs-that-contain-a-subset-of-terms/120687 "2018-02-20T16:56:53Z")
I've seen this question several times with no adequate answer. What I want to do is to find all documents that contain a subset of values I provide. Example using these docs: { "\_id":1, "values": \[ "A" \] } { "\_id":2, "v… --- ## [Accessing AWS ElasticSearch Service v5.6 using Java High Level Rest Client v6.3.0](https://discuss.elastic.co/t/accessing-aws-elasticsearch-service-v5-6-using-java-high-level-rest-client-v6-3-0/119937)
**Author:** [@karthitv89](https://discuss.elastic.co/u/karthitv89)\ **Replies:** 5\ **Last updated:** [February 20, 2018, 4:41pm UTC](https://discuss.elastic.co/t/accessing-aws-elasticsearch-service-v5-6-using-java-high-level-rest-client-v6-3-0/119937 "2018-02-20T16:41:47Z")
I have an AWS ElasticSearch service with the version 5.6. I want to use Java - High Level Rest Client v6.3.0 to create indices and do all the crud operations. But as we know the structure of ES v5.6 and ES v6.3 are diffe… --- ## [Scripting aggregation](https://discuss.elastic.co/t/scripting-aggregation/120682)
**Author:** [@lore6673](https://discuss.elastic.co/u/lore6673)\ **Replies:** 0\ **Last updated:** [February 20, 2018, 4:29pm UTC](https://discuss.elastic.co/t/scripting-aggregation/120682 "2018-02-20T16:29:33Z")
Hi I'm working to get some KPI on my index where I load the company sales and I would like to calculate the following Avg Ticket = Total Sales / # Tickets I'm using the following payload: { "size": 0, "aggs": { … --- ## [Is there any way to reduce file size of Kibana logs](https://discuss.elastic.co/t/is-there-any-way-to-reduce-file-size-of-kibana-logs/120673)
**Author:** [@NandhaKrishna](https://discuss.elastic.co/u/NandhaKrishna)\ **Replies:** 1\ **Last updated:** [February 20, 2018, 3:43pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-reduce-file-size-of-kibana-logs/120673 "2018-02-20T15:43:36Z")
Kibana logs are filled with so much data that it fills up the diskspace quite rapidly. Is there any way to reduce it? --- ## [ArrayIndexOutOfBoundsException while indexing](https://discuss.elastic.co/t/arrayindexoutofboundsexception-while-indexing/120550)
**Author:** [@mattweber](https://discuss.elastic.co/u/mattweber)\ **Replies:** 2\ **Last updated:** [February 20, 2018, 3:27pm UTC](https://discuss.elastic.co/t/arrayindexoutofboundsexception-while-indexing/120550 "2018-02-20T15:27:26Z")
Ran across this while indexing today. -65536 looks like it might be an overflow or something but not sure. This is the first attempt at indexing with large ngram settings (min=1, max=8) so that might be related. Any i… --- ## [Elasticsearch search with symbol "-"](https://discuss.elastic.co/t/elasticsearch-search-with-symbol/120656)
**Author:** [@ec74f913d5a598cda232](https://discuss.elastic.co/u/ec74f913d5a598cda232)\ **Replies:** 1\ **Last updated:** [February 20, 2018, 3:04pm UTC](https://discuss.elastic.co/t/elasticsearch-search-with-symbol/120656 "2018-02-20T15:04:18Z")
Hi there, I have the following problem: I have field "author" and in some documents value is "---". And after search: /\_search?q="---" result is empty. With usual values, search works correctly. What can be a solution … --- ## [Elasticsearch 6.2.1 installation issue - Windows](https://discuss.elastic.co/t/elasticsearch-6-2-1-installation-issue-windows/120493)
**Author:** [@deepaks](https://discuss.elastic.co/u/deepaks)\ **Replies:** 3\ **Last updated:** [February 20, 2018, 2:54pm UTC](https://discuss.elastic.co/t/elasticsearch-6-2-1-installation-issue-windows/120493 "2018-02-20T14:54:57Z")
Hi, I am trying to install 6.2.1 in a windows 2102 server. Elasticsearch service starts successfully if i start via the command line but when i install it as a windows service its failing to start. After investigating t… --- ## [Number is equal to Query?](https://discuss.elastic.co/t/number-is-equal-to-query/120666)
**Author:** [@Yair\_Halberstadt](https://discuss.elastic.co/u/Yair_Halberstadt)\ **Replies:** 0\ **Last updated:** [February 20, 2018, 2:38pm UTC](https://discuss.elastic.co/t/number-is-equal-to-query/120666 "2018-02-20T14:38:37Z")
I want to check if a number is equal to some other in my query. Let's put in some test data: PUT newindex/test/123 { "num":20 } PUT newindex/test/12 { "num":20.0 } Now I want to return all cases where num is 20 - … --- ## [Nested bulk](https://discuss.elastic.co/t/nested-bulk/120466)
**Author:** [@druzmieres](https://discuss.elastic.co/u/druzmieres)\ **Replies:** 7\ **Last updated:** [February 20, 2018, 2:11pm UTC](https://discuss.elastic.co/t/nested-bulk/120466 "2018-02-20T14:11:29Z")
I'm using elasticsearch-dsl-py to create an index with a nested field (points): class Shape(DocType): route = Text() startData = Date() points = Nested( properties={ 'segmentStart': Integer(), … --- ## [Count number of objects nested field](https://discuss.elastic.co/t/count-number-of-objects-nested-field/120658)
**Author:** [@Subair\_K\_B](https://discuss.elastic.co/u/Subair_K_B)\ **Replies:** 0\ **Last updated:** [February 20, 2018, 2:06pm UTC](https://discuss.elastic.co/t/count-number-of-objects-nested-field/120658 "2018-02-20T14:06:23Z")
How to count number of objects in a nested filed in elastic search? Sample mapping : "keywords": { "type": "nested", "properties": { "base": { "type": "text" }, "category": { "type": "text" } } } I would lik… --- ## [Kuromoji: Tokenization of ゴロンと is Unexpected (incorrect?)](https://discuss.elastic.co/t/kuromoji-tokenization-of-is-unexpected-incorrect/119585)
**Author:** [@HajimeOwari](https://discuss.elastic.co/u/HajimeOwari)\ **Replies:** 2\ **Last updated:** [February 20, 2018, 1:47pm UTC](https://discuss.elastic.co/t/kuromoji-tokenization-of-is-unexpected-incorrect/119585 "2018-02-20T13:47:20Z")
Is the below a bug or expected behavior for Kuromoji? The behavior occurs on default settings and even on the Kuromoji demo page. Kuromjiでは下記はバグか想定通りかを確認いただけますでしょうか。デフォルト設定でもKuromojiのデモページでも下記の通りになります。 Using Kuromoji a… --- ## [Watcher: \[parse\_exception\] could not parse action \[Monitor/webhook\]. unknown action type \[method\]](https://discuss.elastic.co/t/watcher-parse-exception-could-not-parse-action-monitor-webhook-unknown-action-type-method/120621)
**Author:** [@annk](https://discuss.elastic.co/u/annk)\ **Replies:** 1\ **Last updated:** [February 20, 2018, 1:20pm UTC](https://discuss.elastic.co/t/watcher-parse-exception-could-not-parse-action-monitor-webhook-unknown-action-type-method/120621 "2018-02-20T13:20:39Z")
"actions": { "log\_error": { "logging": { "text": "Service Down" } }, "webhook" : { "method" : "POST", "url" : "https://servicenow.com/api/incidents?actionUser=user", "body" : "{{ctx.watch\_id}}:{{ctx.payload.hits… --- ## [Ability to alert when no data is being recieved](https://discuss.elastic.co/t/ability-to-alert-when-no-data-is-being-recieved/120443)
**Author:** [@peter1992](https://discuss.elastic.co/u/peter1992)\ **Replies:** 5\ **Last updated:** [February 20, 2018, 1:19pm UTC](https://discuss.elastic.co/t/ability-to-alert-when-no-data-is-being-recieved/120443 "2018-02-20T13:19:12Z")
In Watcher is it possible to create an alert that informs us when there is no data being collected regardless is logstash is running or not --- ## [Flush sync failed during upgrade process](https://discuss.elastic.co/t/flush-sync-failed-during-upgrade-process/120629)
**Author:** [@atom](https://discuss.elastic.co/u/atom)\ **Replies:** 1\ **Last updated:** [February 20, 2018, 1:11pm UTC](https://discuss.elastic.co/t/flush-sync-failed-during-upgrade-process/120629 "2018-02-20T13:11:57Z")
Hi, i am currently trying to upgrade my elasticsearch instance and tried to do a flush synced. I am getting this response the whole time: ".monitoring-es-6-2018.02.20" : { "total" : 2, "successful" : 0, "failed" :… --- ## [Elastic Clusters across Datacenters](https://discuss.elastic.co/t/elastic-clusters-across-datacenters/120567)
**Author:** [@Cen\_giz](https://discuss.elastic.co/u/Cen_giz)\ **Replies:** 8\ **Last updated:** [February 20, 2018, 1:08pm UTC](https://discuss.elastic.co/t/elastic-clusters-across-datacenters/120567 "2018-02-20T13:08:16Z")
Dear All, We are having 2 separate clusters in 2 different data centers and currently they are active-active. After Elastic 6.0, synchronization will be in place. So if data ingestion is enabled for one Elastic Cluste… --- ## [How fast can we achieve in theory using "match\_phrase" query on 30M document index](https://discuss.elastic.co/t/how-fast-can-we-achieve-in-theory-using-match-phrase-query-on-30m-document-index/118756)
**Author:** [@LukeYang](https://discuss.elastic.co/u/LukeYang)\ **Replies:** 9\ **Last updated:** [February 20, 2018, 12:28pm UTC](https://discuss.elastic.co/t/how-fast-can-we-achieve-in-theory-using-match-phrase-query-on-30m-document-index/118756 "2018-02-20T12:28:26Z")
We are doing a project to use ElasticSearch as searching engine for the large amount of text content. The goal is to offer Full text search capacity to retrieve first 10 document based on phrases user provides within 30M… --- ## [Source\_filtering by value not field](https://discuss.elastic.co/t/source-filtering-by-value-not-field/120633)
**Author:** [@Yair\_Halberstadt](https://discuss.elastic.co/u/Yair_Halberstadt)\ **Replies:** 0\ **Last updated:** [February 20, 2018, 12:05pm UTC](https://discuss.elastic.co/t/source-filtering-by-value-not-field/120633 "2018-02-20T12:05:28Z")
My documents contains a nested array of Ids. I want to filter on these IDs (eg return only those documents where one of the IDs is 6489354). There might be thousands of IDs, so I only want to return the the source whe… --- ## [AD Realm (Version 6.2.1)](https://discuss.elastic.co/t/ad-realm-version-6-2-1/120182)
**Author:** [@ezmani](https://discuss.elastic.co/u/ezmani)\ **Replies:** 2\ **Last updated:** [February 19, 2018, 12:16pm UTC](https://discuss.elastic.co/t/ad-realm-version-6-2-1/120182 "2018-02-19T12:16:36Z")
Hello there, we are using Elastic & Kibana version 6.2.1. We've setup AD realm form kibana/elastic successfully. Is there a way to show more descriptive AD info on Kibana about the user (Name/Last name) instead of the u… --- ## [SynonymTokenFilterFactory uses which Synonym Map?](https://discuss.elastic.co/t/synonymtokenfilterfactory-uses-which-synonym-map/120465)
**Author:** [@Abhilash\_Bolla](https://discuss.elastic.co/u/Abhilash_Bolla)\ **Replies:** 1\ **Last updated:** [February 20, 2018, 11:46am UTC](https://discuss.elastic.co/t/synonymtokenfilterfactory-uses-which-synonym-map/120465 "2018-02-20T11:46:18Z")
Hi all, I would want to know if SynonymTokenFilterFactory in SynonymTokenFilterFactory.java uses which kind of SynonymMap. Is it FST based or is it a normal Map builder. Asking this question after having a look at https… --- ## [Not able to escape special characters](https://discuss.elastic.co/t/not-able-to-escape-special-characters/120616)
**Author:** [@liammcc](https://discuss.elastic.co/u/liammcc)\ **Replies:** 1\ **Last updated:** [February 20, 2018, 11:29am UTC](https://discuss.elastic.co/t/not-able-to-escape-special-characters/120616 "2018-02-20T11:29:54Z")
So we have elasticsearch set up on AWS with KIbana and we are trying to do post requests to the elasticsearch endpoint to retrieve certain errors in logs. However some of the messages in our logs have the word error in b… --- ## [Processing JSON object with arrays using nested datatype](https://discuss.elastic.co/t/processing-json-object-with-arrays-using-nested-datatype/120612)
**Author:** [@acastellano](https://discuss.elastic.co/u/acastellano)\ **Replies:** 0\ **Last updated:** [February 20, 2018, 11:06am UTC](https://discuss.elastic.co/t/processing-json-object-with-arrays-using-nested-datatype/120612 "2018-02-20T11:06:21Z")
Using the nested datatype for the below below JSON object still warns 'Object in arrays are not well supported'. Elasticsearch version is 5.5.2. Initially, I did not have 'nested' defined per every array within the JSO… --- ## [Opinions on new AMD EPYC CPUs](https://discuss.elastic.co/t/opinions-on-new-amd-epyc-cpus/120148)
**Author:** [@xenoid](https://discuss.elastic.co/u/xenoid)\ **Replies:** 1\ **Last updated:** [February 20, 2018, 10:59am UTC](https://discuss.elastic.co/t/opinions-on-new-amd-epyc-cpus/120148 "2018-02-20T10:59:58Z")
Hello everybody, We want to expand our system by adding new hardware. Now we need some opinions on CPUs. Since AMD recently released their new EPYC lineup we were curious exactly how "epyc" these chips really are. Th… --- ## [Setting default path: log and data doesnt work](https://discuss.elastic.co/t/setting-default-path-log-and-data-doesnt-work/120586)
**Author:** [@atom](https://discuss.elastic.co/u/atom)\ **Replies:** 4\ **Last updated:** [February 20, 2018, 10:54am UTC](https://discuss.elastic.co/t/setting-default-path-log-and-data-doesnt-work/120586 "2018-02-20T10:54:25Z")
Hi, i am currently in the upgrade process of Elasticsearch 5.6 to version 6.x Cluster Checkup found some errors. One of them was: Default path settings are removed This issue must be resolved to upgrade. Read Docume… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1780) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1782)