# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1802

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1803

---

## [Comparison (\<) not supported on datetime fields anymore since upgrade to 6.1](https://discuss.elastic.co/t/comparison-not-supported-on-datetime-fields-anymore-since-upgrade-to-6-1/118008)

<div class="topic-metadata">

**Author:** [@stemps](https://discuss.elastic.co/u/stemps)\
**Replies:** 2\
**Last updated:** [February 5, 2018, 9:47am UTC](https://discuss.elastic.co/t/comparison-not-supported-on-datetime-fields-anymore-since-upgrade-to-6-1/118008 "2018-02-05T09:47:18Z")

</div>

I have a scripted field that looks something like this: (doc\['actual\_time'\].value \< doc\['expected\_time'\].value) ? 1 : 0 Since the upgrade to 6.1 I'm getting the following error: caused\_by":{"type":"class\_cast\_exceptio…

---

## [Integration of Elastic with ServiceNow](https://discuss.elastic.co/t/integration-of-elastic-with-servicenow/118418)

<div class="topic-metadata">

**Author:** [@bhavisha\_padia](https://discuss.elastic.co/u/bhavisha_padia)\
**Replies:** 0\
**Last updated:** [February 5, 2018, 9:44am UTC](https://discuss.elastic.co/t/integration-of-elastic-with-servicenow/118418 "2018-02-05T09:44:53Z")

</div>

Hi I have a requirement where I am supposed to integrate Elastic with servicenow instance. I am trying out in my own Personal instance. I was able to successfully install the plugin and able to get the page where we ar…

---

## [Tokenizer: whitespace not working with edge\_ngram](https://discuss.elastic.co/t/tokenizer-whitespace-not-working-with-edge-ngram/118397)

<div class="topic-metadata">

**Author:** [@anoopvalluthadam](https://discuss.elastic.co/u/anoopvalluthadam)\
**Replies:** 8\
**Last updated:** [February 5, 2018, 9:20am UTC](https://discuss.elastic.co/t/tokenizer-whitespace-not-working-with-edge-ngram/118397 "2018-02-05T09:20:56Z")

</div>

Trying to include special characters in ngram tokeniser DELETE test PUT test { "settings": { "analysis": { "analyzer": { "my\_analyzer": { "type": "custom", …

---

## [Query Filter via Script failing for array object](https://discuss.elastic.co/t/query-filter-via-script-failing-for-array-object/118406)

<div class="topic-metadata">

**Author:** [@Torsten\_Simon](https://discuss.elastic.co/u/Torsten_Simon)\
**Replies:** 0\
**Last updated:** [February 5, 2018, 8:38am UTC](https://discuss.elastic.co/t/query-filter-via-script-failing-for-array-object/118406 "2018-02-05T08:38:00Z")

</div>

I've a pretty simple content base containing the following entries (no additional index created): { "\_index": "myindex", "\_type": "entry", "\_id": "qKlZV2EB1YWWmQYihts\_", …

---

## [Question about curator](https://discuss.elastic.co/t/question-about-curator/118405)

<div class="topic-metadata">

**Author:** [@peterch](https://discuss.elastic.co/u/peterch)\
**Replies:** 3\
**Last updated:** [February 5, 2018, 8:54am UTC](https://discuss.elastic.co/t/question-about-curator/118405 "2018-02-05T08:54:14Z")

</div>

Dear all, May I know is it possible delete logs which older then 90 days instead of indices in curator? Thanks Best Regards, Peter Chow

---

## [Delete/pseudonomize entries selectively?](https://discuss.elastic.co/t/delete-pseudonomize-entries-selectively/118398)

<div class="topic-metadata">

**Author:** [@nielskob](https://discuss.elastic.co/u/nielskob)\
**Replies:** 1\
**Last updated:** [February 5, 2018, 8:50am UTC](https://discuss.elastic.co/t/delete-pseudonomize-entries-selectively/118398 "2018-02-05T08:50:12Z")

</div>

I use elasticsearch with fluentd and kibana as a logserver. Now I have the problem that I need to delete or pseudonomize logs after a certain time because of data I.e.: all logs sent from dovecot should be kept only for…

---

## [How to implement custom security results trimming as plugin](https://discuss.elastic.co/t/how-to-implement-custom-security-results-trimming-as-plugin/118409)

<div class="topic-metadata">

**Author:** [@Rail](https://discuss.elastic.co/u/Rail)\
**Replies:** 0\
**Last updated:** [February 5, 2018, 8:49am UTC](https://discuss.elastic.co/t/how-to-implement-custom-security-results-trimming-as-plugin/118409 "2018-02-05T08:49:14Z")

</div>

Hello, Elastic community! I need to implement trimming for any query results according to some logic. Ideally, it would be great to have some integration point in Elasticsearch using plugin which will be called for each…

---

## [Garbage collection times out?](https://discuss.elastic.co/t/garbage-collection-times-out/118402)

<div class="topic-metadata">

**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\
**Replies:** 2\
**Last updated:** [February 5, 2018, 8:48am UTC](https://discuss.elastic.co/t/garbage-collection-times-out/118402 "2018-02-05T08:48:44Z")

</div>

hi whats going on here ? do i need to think about adding nodes (i only have one node at the moment) \[2018-02-02T21:26:42,187\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[SRVP00067\] \[gc\]\[692793\] overhead, spent \[376ms\] collect…

---

## [Rally consumes all cluster threads and crashes with small clusters](https://discuss.elastic.co/t/rally-consumes-all-cluster-threads-and-crashes-with-small-clusters/117599)

<div class="topic-metadata">

**Author:** [@Itamar\_Syn\_Hershko](https://discuss.elastic.co/u/Itamar_Syn_Hershko)\
**Replies:** 3\
**Last updated:** [February 5, 2018, 8:23am UTC](https://discuss.elastic.co/t/rally-consumes-all-cluster-threads-and-crashes-with-small-clusters/117599 "2018-02-05T08:23:21Z")

</div>

Heya! Using the latest Elastic Rally, we have a ECE deployment with a 8GB cluster (so 2 assigned cores). This in turn means a low number of threads for bulk and search. We are running esrally geonames against that clust…

---

## [Elastic search 6.1.3](https://discuss.elastic.co/t/elastic-search-6-1-3/118393)

<div class="topic-metadata">

**Author:** [@shehzelastic](https://discuss.elastic.co/u/shehzelastic)\
**Replies:** 1\
**Last updated:** [February 5, 2018, 7:22am UTC](https://discuss.elastic.co/t/elastic-search-6-1-3/118393 "2018-02-05T07:22:09Z")

</div>

Hi.... i am unable to connect from my master nodes to data nodes as well as i am unable to connect from datanodes to master...when i check cluster health all are started but are running as dedicated cluster but i want t…

---

## [Cluster state is yellow during restore process with ES 6](https://discuss.elastic.co/t/cluster-state-is-yellow-during-restore-process-with-es-6/118395)

<div class="topic-metadata">

**Author:** [@ankur.k.gupta](https://discuss.elastic.co/u/ankur.k.gupta)\
**Replies:** 0\
**Last updated:** [February 5, 2018, 7:16am UTC](https://discuss.elastic.co/t/cluster-state-is-yellow-during-restore-process-with-es-6/118395 "2018-02-05T07:16:55Z")

</div>

I have recently migrated my elasticsearch to version 6 from version 2.4 After installing a new elasticsearch 6 cluster I am trying to restore data from a snapshot, but during the restore process the elasticsearch cluste…

---

## [Extra docs in primary](https://discuss.elastic.co/t/extra-docs-in-primary/116836)

<div class="topic-metadata">

**Author:** [@jaisharma](https://discuss.elastic.co/u/jaisharma)\
**Replies:** 12\
**Last updated:** [February 5, 2018, 7:06am UTC](https://discuss.elastic.co/t/extra-docs-in-primary/116836 "2018-02-05T07:06:58Z")

</div>

I've a problem similar to this. The primary and replica shards have gone out of sync which i confirmed using the following api: curl '\<es-prod-url\>:9200/\_cat/shards/\<my-index\>?v=pretty'\` with the output as: index …

---

## [NoSuchFileException while restoring snapshot](https://discuss.elastic.co/t/nosuchfileexception-while-restoring-snapshot/118339)

<div class="topic-metadata">

**Author:** [@kartik\_batheja](https://discuss.elastic.co/u/kartik_batheja)\
**Replies:** 1\
**Last updated:** [February 5, 2018, 5:30am UTC](https://discuss.elastic.co/t/nosuchfileexception-while-restoring-snapshot/118339 "2018-02-05T05:30:13Z")

</div>

Hi all, I am trying to work on snapshots and restore on ES 5.6 I was having a similar issue on my cluster. I am using a 5 node cluster with 1 master and 5 datanodes. While restoring I am getting nosuchfileexception. …

---

## [Applying Classification Machine Learning Algorithms](https://discuss.elastic.co/t/applying-classification-machine-learning-algorithms/118353)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 2\
**Last updated:** [February 5, 2018, 4:31am UTC](https://discuss.elastic.co/t/applying-classification-machine-learning-algorithms/118353 "2018-02-05T04:31:53Z")

</div>

i have the log events stored in ES. I have to classify the log events ( errors, exceptions, 404, ..etc) i.e. apply machine learning to this data. Is it possible to do that with ES 5.x or 6,x ? if so how it can be done ef…

---

## [Problems Installing Elasticsearch (Windows 10)](https://discuss.elastic.co/t/problems-installing-elasticsearch-windows-10/118258)

<div class="topic-metadata">

**Author:** [@Danish\_Tamboli](https://discuss.elastic.co/u/Danish_Tamboli)\
**Replies:** 2\
**Last updated:** [February 5, 2018, 4:11am UTC](https://discuss.elastic.co/t/problems-installing-elasticsearch-windows-10/118258 "2018-02-05T04:11:37Z")

</div>

I'm currently using jdk1.8.0\_161 and attached is a screenshot of my env variables \[elasticQuery\] I'm getting the following error, \[elasticQuery2\]

---

## [Implementing Lowercase tokenizer](https://discuss.elastic.co/t/implementing-lowercase-tokenizer/117794)

<div class="topic-metadata">

**Author:** [@incognito](https://discuss.elastic.co/u/incognito)\
**Replies:** 2\
**Last updated:** [February 5, 2018, 4:05am UTC](https://discuss.elastic.co/t/implementing-lowercase-tokenizer/117794 "2018-02-05T04:05:39Z")

</div>

Hi, I am new to elasticsearch, I want to convert the text data in my 'Body' column to lowercase. I used the code below and it's not working: { "tokenizer": "lowercase", "text": questionlist\[current\].Body } I want t…

---

## [Wildcard / regexp in a phrase which has space](https://discuss.elastic.co/t/wildcard-regexp-in-a-phrase-which-has-space/117962)

<div class="topic-metadata">

**Author:** [@anoopvalluthadam](https://discuss.elastic.co/u/anoopvalluthadam)\
**Replies:** 21\
**Last updated:** [February 5, 2018, 3:09am UTC](https://discuss.elastic.co/t/wildcard-regexp-in-a-phrase-which-has-space/117962 "2018-02-05T03:09:40Z")

</div>

How to match phrases using wildcards. Example: I wanna search clean\* car\* in Cleaning car and room Cleaning room and car It should return only 1 I tried and what it returns is, it will search for clean\* AND car\* M…

---

## [DMARC XML ingest](https://discuss.elastic.co/t/dmarc-xml-ingest/118121)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 9\
**Last updated:** [February 5, 2018, 2:28am UTC](https://discuss.elastic.co/t/dmarc-xml-ingest/118121 "2018-02-05T02:28:40Z")

</div>

We've recently setup an Elastic Stack and are looking into potential uses for our organization (for which we've identified quite a few). One capability that it seems ELK would be fantastic for but I haven't been able to…

---

## [Do I need to remove old .yml file while upgrading Elasticsearch?](https://discuss.elastic.co/t/do-i-need-to-remove-old-yml-file-while-upgrading-elasticsearch/118369)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 9\
**Last updated:** [February 5, 2018, 2:21am UTC](https://discuss.elastic.co/t/do-i-need-to-remove-old-yml-file-while-upgrading-elasticsearch/118369 "2018-02-05T02:21:54Z")

</div>

Hi, I am trying to upgrade Elasticsearch. Do I need to remove old .yml file while upgrading Elasticsearch to a newer version? In the documentation it is mentioned as - ''Use rpm or dpkg to install the new package. All …

---

## [Query wrong result - 5.4 on linux](https://discuss.elastic.co/t/query-wrong-result-5-4-on-linux/118378)

<div class="topic-metadata">

**Author:** [@aymanzone](https://discuss.elastic.co/u/aymanzone)\
**Replies:** 1\
**Last updated:** [February 5, 2018, 1:39am UTC](https://discuss.elastic.co/t/query-wrong-result-5-4-on-linux/118378 "2018-02-05T01:39:51Z")

</div>

anyone else experience weird behaviour elasticsearch 5.4 on linux kibana 5.4 on linux \[image\]

---

## [Would like to programmatically create indices with mappings in java: 6.1.3 HighLevelRestClient](https://discuss.elastic.co/t/would-like-to-programmatically-create-indices-with-mappings-in-java-6-1-3-highlevelrestclient/118144)

<div class="topic-metadata">

**Author:** [@jackpark](https://discuss.elastic.co/u/jackpark)\
**Replies:** 5\
**Last updated:** [February 4, 2018, 7:43pm UTC](https://discuss.elastic.co/t/would-like-to-programmatically-create-indices-with-mappings-in-java-6-1-3-highlevelrestclient/118144 "2018-02-04T19:43:11Z")

</div>

In the past (ES 2+) I could assign mappings to index names programmatically. In 6.3.1, there is a CreateIndexRequest/Response pair, but the documentation online says to use it with an API which does not exist. Most ES d…

---

## [Match Phrase Score by Order](https://discuss.elastic.co/t/match-phrase-score-by-order/116771)

<div class="topic-metadata">

**Author:** [@panda2004](https://discuss.elastic.co/u/panda2004)\
**Replies:** 6\
**Last updated:** [February 4, 2018, 7:21pm UTC](https://discuss.elastic.co/t/match-phrase-score-by-order/116771 "2018-02-04T19:21:12Z")

</div>

Hello, We have an index with many quotes (sentences in English), and I want to allow users to find a quote by auto completion. I have built an index just as mentioned here. Meaning that I have used standard tokenizer,…

---

## [Show suggest result on Front end without hampering speed of ES](https://discuss.elastic.co/t/show-suggest-result-on-front-end-without-hampering-speed-of-es/118351)

<div class="topic-metadata">

**Author:** [@Arpit\_Dadheech](https://discuss.elastic.co/u/Arpit_Dadheech)\
**Replies:** 6\
**Last updated:** [February 4, 2018, 6:20pm UTC](https://discuss.elastic.co/t/show-suggest-result-on-front-end-without-hampering-speed-of-es/118351 "2018-02-04T18:20:27Z")

</div>

I am using ES with angular 2. I am using suggester of ES. I am getting the results as I want. Like I type "A" I get result set as \[ "Alexander", "Alexander Ambrose", "Crown Victoria"\] and \[ "Cleo", "Cleo Walling",…

---

## [putMapping "reason":"Rejecting mapping update to \[pets\] as the final mapping would have more than 1 type: \[bird, dog\]"}\]](https://discuss.elastic.co/t/putmapping-reason-rejecting-mapping-update-to-pets-as-the-final-mapping-would-have-more-than-1-type-bird-dog/118349)

<div class="topic-metadata">

**Author:** [@nickclasener](https://discuss.elastic.co/u/nickclasener)\
**Replies:** 3\
**Last updated:** [February 4, 2018, 3:53pm UTC](https://discuss.elastic.co/t/putmapping-reason-rejecting-mapping-update-to-pets-as-the-final-mapping-would-have-more-than-1-type-bird-dog/118349 "2018-02-04T15:53:52Z")

</div>

I can't decipher what's wrong with my code. Im using the elasticsearch-php package \> json-doc, elasticsearch-php \> php-doc. my putMapping function public function elasticsearchData() { $params = \[ 'index' …

---

## [Parent-Child mapping using JAVA client API using POJO's](https://discuss.elastic.co/t/parent-child-mapping-using-java-client-api-using-pojos/118335)

<div class="topic-metadata">

**Author:** [@wandermonk](https://discuss.elastic.co/u/wandermonk)\
**Replies:** 3\
**Last updated:** [February 4, 2018, 3:30pm UTC](https://discuss.elastic.co/t/parent-child-mapping-using-java-client-api-using-pojos/118335 "2018-02-04T15:30:22Z")

</div>

Hi, I am a newbie working with ElasticSearch. I have been working on an application for which I would like to use ES as the backend datastore. I have POJO's or domain entities for which I would like to create a Parent-Ch…

---

## [Delete a field from all documents](https://discuss.elastic.co/t/delete-a-field-from-all-documents/118343)

<div class="topic-metadata">

**Author:** [@mh\_men](https://discuss.elastic.co/u/mh_men)\
**Replies:** 1\
**Last updated:** [February 4, 2018, 12:57pm UTC](https://discuss.elastic.co/t/delete-a-field-from-all-documents/118343 "2018-02-04T12:57:37Z")

</div>

Hello Is there any faster way for deleting a specific field from all documents of an index other than reindexing?

---

## [Setting Up a Local Repository with No Internet Access](https://discuss.elastic.co/t/setting-up-a-local-repository-with-no-internet-access/118341)

<div class="topic-metadata">

**Author:** [@kishore1986](https://discuss.elastic.co/u/kishore1986)\
**Replies:** 1\
**Last updated:** [February 4, 2018, 12:38pm UTC](https://discuss.elastic.co/t/setting-up-a-local-repository-with-no-internet-access/118341 "2018-02-04T12:38:30Z")

</div>

How to Setting Up a Elastic cluster/Local Repository with No Internet Access. Details: centsos7,32 core,60GB RAM, 1TB

---

## [Get latest records from index](https://discuss.elastic.co/t/get-latest-records-from-index/117035)

<div class="topic-metadata">

**Author:** [@Avinash1](https://discuss.elastic.co/u/Avinash1)\
**Replies:** 1\
**Last updated:** [February 3, 2018, 9:24pm UTC](https://discuss.elastic.co/t/get-latest-records-from-index/117035 "2018-02-03T21:24:47Z")

</div>

Hi , In mysql i had query like select \* from (select idx,machine,customer,FROM\_UNIXTIME(servertime) from Events where customer='MSP\_NH\_TEST' and machine in ('GERMAN','HFN-ENGINE','HFND100035','HFND100036') order by idx…

---

## [Fatal error in network and heap](https://discuss.elastic.co/t/fatal-error-in-network-and-heap/118329)

<div class="topic-metadata">

**Author:** [@Amin1](https://discuss.elastic.co/u/Amin1)\
**Replies:** 5\
**Last updated:** [February 4, 2018, 8:09am UTC](https://discuss.elastic.co/t/fatal-error-in-network-and-heap/118329 "2018-02-04T08:09:56Z")

</div>

Hello I have following config : 2 client node 3 master 3 data+ingest node my cluster work only with 1 data node and 2 of them get following error : \[2018-02-03T18:22:54,183\]\[WARN \]\[o.e.m.j.JvmGcMonitorService\] \[es…

---

## [Create a simple web form using elasticsearch](https://discuss.elastic.co/t/create-a-simple-web-form-using-elasticsearch/118327)

<div class="topic-metadata">

**Author:** [@Janith](https://discuss.elastic.co/u/Janith)\
**Replies:** 1\
**Last updated:** [February 4, 2018, 5:25am UTC](https://discuss.elastic.co/t/create-a-simple-web-form-using-elasticsearch/118327 "2018-02-04T05:25:32Z")

</div>

Hi, I'm trying to create a simple web form that have two functions Enter employees name, age and salary and then save it. Search employee by name I'm trying to do this only using HTML, JavaScript(AJAX) and elasticsea…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1801)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1803)
