# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1824 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1825 --- ## [DSL query Filter on aggregated result](https://discuss.elastic.co/t/dsl-query-filter-on-aggregated-result/115986)
**Author:** [@Dhiraj\_Singh\_Chauhan](https://discuss.elastic.co/u/Dhiraj_Singh_Chauhan)\ **Replies:** 0\ **Last updated:** [January 18, 2018, 7:40am UTC](https://discuss.elastic.co/t/dsl-query-filter-on-aggregated-result/115986 "2018-01-18T07:40:29Z")
Hi, I am very new to write DSL query. I have written DSL query now I want to filter result if search\_Latency \> 0.5, Please help me to write query. { "size": 0, "query": { "bool": { "filter": { "range": { "time… --- ## [External Access Failed](https://discuss.elastic.co/t/external-access-failed/115814)
**Author:** [@Hyeok\_Kim](https://discuss.elastic.co/u/Hyeok_Kim)\ **Replies:** 4\ **Last updated:** [January 18, 2018, 6:53am UTC](https://discuss.elastic.co/t/external-access-failed/115814 "2018-01-18T06:53:03Z")
Hello, Experts. I can't add network.host data or network.bind\_host. When I add below line, elasticsearch occur error. How can I solve it? This is my process, 1. Add line in elasticsearch.yml network.host: 0.0.0.0 … --- ## [Elasticsearch template query](https://discuss.elastic.co/t/elasticsearch-template-query/113121)
**Author:** [@jiangshigen](https://discuss.elastic.co/u/jiangshigen)\ **Replies:** 2\ **Last updated:** [January 18, 2018, 6:51am UTC](https://discuss.elastic.co/t/elasticsearch-template-query/113121 "2018-01-18T06:51:31Z")
I use QueryBuilders.templateQuery(template, map) to achieve some documents, howerer,the relevance scoring of each document is 1.I hope someone can help me. template example: { "query": { "bool": { "must": \[ { "que… --- ## [Query](https://discuss.elastic.co/t/query/115977)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 1\ **Last updated:** [January 18, 2018, 6:49am UTC](https://discuss.elastic.co/t/query/115977 "2018-01-18T06:49:36Z")
hi there! i am trying to analyze one thing. scenario: i have the logs for following actions: req action 3 times with different id, resp action 2 times with req id, if one resp is missing coz' of user close browser … --- ## [Using must and falling to fuzzy if no match in queries](https://discuss.elastic.co/t/using-must-and-falling-to-fuzzy-if-no-match-in-queries/114894)
**Author:** [@ericohtake](https://discuss.elastic.co/u/ericohtake)\ **Replies:** 2\ **Last updated:** [January 18, 2018, 6:17am UTC](https://discuss.elastic.co/t/using-must-and-falling-to-fuzzy-if-no-match-in-queries/114894 "2018-01-18T06:17:48Z")
Hi, I'm trying to match some documents in a query where my dataset contains exact matches and others that don't exactly match, if ever. I'd like to query ES for the exact match, and if it doesn't exists exactly, it fall… --- ## [How to download elasticsearch Source code？](https://discuss.elastic.co/t/how-to-download-elasticsearch-source-code/115521)
**Author:** [@huajing](https://discuss.elastic.co/u/huajing)\ **Replies:** 2\ **Last updated:** [January 18, 2018, 5:12am UTC](https://discuss.elastic.co/t/how-to-download-elasticsearch-source-code/115521 "2018-01-18T05:12:36Z")
I cannot recognise which archive is the source code in GitHub。 --- ## [Document version number not advancing](https://discuss.elastic.co/t/document-version-number-not-advancing/115888)
**Author:** [@dorj1234](https://discuss.elastic.co/u/dorj1234)\ **Replies:** 8\ **Last updated:** [January 18, 2018, 4:50am UTC](https://discuss.elastic.co/t/document-version-number-not-advancing/115888 "2018-01-18T04:50:15Z")
Hello, I just tested how versions work, loaded the same set of CSV files again, same loading script and everything is the same. Looking at the "discover" section of Kibana I expected to see the @version number in my do… --- ## [Deprecated field \[\_routing\] used, expected \[routing\] instead](https://discuss.elastic.co/t/deprecated-field-routing-used-expected-routing-instead/115951)
**Author:** [@JJK](https://discuss.elastic.co/u/JJK)\ **Replies:** 2\ **Last updated:** [January 18, 2018, 4:19am UTC](https://discuss.elastic.co/t/deprecated-field-routing-used-expected-routing-instead/115951 "2018-01-18T04:19:17Z")
Getting the following warning with 6.1.2: \[WARN \]\[org.elasticsearch.deprecation.common.ParseField\] Deprecated field \[\_routing\] used, expected \[routing\] instead But the docs still show that \_routing is correct? https:/… --- ## [Updating a document with elasticsearch.js](https://discuss.elastic.co/t/updating-a-document-with-elasticsearch-js/115960)
**Author:** [@bradley](https://discuss.elastic.co/u/bradley)\ **Replies:** 1\ **Last updated:** [January 18, 2018, 1:45am UTC](https://discuss.elastic.co/t/updating-a-document-with-elasticsearch-js/115960 "2018-01-18T01:45:15Z")
I'm trying to update a document with elasticsearch.js, and I'm getting a few errors from it. Here's what I'm using: this.elasticClient.update({ index: 'applicants', type: 'applicant', id: this.applicantId, body:… --- ## [Count and group by the results of top\_hits aggregation](https://discuss.elastic.co/t/count-and-group-by-the-results-of-top-hits-aggregation/115961)
**Author:** [@Tomas\_Law](https://discuss.elastic.co/u/Tomas_Law)\ **Replies:** 0\ **Last updated:** [January 18, 2018, 12:25am UTC](https://discuss.elastic.co/t/count-and-group-by-the-results-of-top-hits-aggregation/115961 "2018-01-18T00:25:03Z")
Hello, I have logs with the fields: . IP . Timestamp . URI . SessionId Each log shows the time (timestamp) the URI was visited. The SessionId is a field I created by concatenating IP with Timestamp (without the min… --- ## [Audit log flexability](https://discuss.elastic.co/t/audit-log-flexability/115947)
**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\ **Replies:** 4\ **Last updated:** [January 17, 2018, 11:30pm UTC](https://discuss.elastic.co/t/audit-log-flexability/115947 "2018-01-17T23:30:30Z")
Hello All, Currently I'm using the audit log in x-pack but I have to suppress all of the access\_granted/authentication\_success events because they are way to noisy. Is there a way or a future plan for giving some flexib… --- ## [Index migration from a 1.x cluster to a 2.x using Nest](https://discuss.elastic.co/t/index-migration-from-a-1-x-cluster-to-a-2-x-using-nest/113842)
**Author:** [@NewHos1](https://discuss.elastic.co/u/NewHos1)\ **Replies:** 4\ **Last updated:** [January 17, 2018, 10:27pm UTC](https://discuss.elastic.co/t/index-migration-from-a-1-x-cluster-to-a-2-x-using-nest/113842 "2018-01-17T22:27:03Z")
Hello, I'm working on a C# migration app who will be used to export documents from a 1.7.3 Elasticsearch cluster to a 2.4.2. While reading Nest documentation, it appear that 2 versions of Nest will be used to be able t… --- ## [V6 and \_type removal. Why Oh Why? \](https://discuss.elastic.co/t/v6-and-type-removal-why-oh-why-s/115917)
**Author:** [@PeterC](https://discuss.elastic.co/u/PeterC)\ **Replies:** 4\ **Last updated:** [January 17, 2018, 10:10pm UTC](https://discuss.elastic.co/t/v6-and-type-removal-why-oh-why-s/115917 "2018-01-17T22:10:21Z")
Hi All, Just saw that V6 is removing the \_type. This is a major hiccup. I have a client or two, where I am using ES as a tad more than just logging. But even those are an issue. By using a \_type, I can accumulate simi… --- ## [Combining ELK with Azure](https://discuss.elastic.co/t/combining-elk-with-azure/115902)
**Author:** [@Favicon](https://discuss.elastic.co/u/Favicon)\ **Replies:** 1\ **Last updated:** [January 17, 2018, 9:02pm UTC](https://discuss.elastic.co/t/combining-elk-with-azure/115902 "2018-01-17T21:02:26Z")
Hello guys, We have an application deployed to Azure. The built in Azure monitoring is very easy to configure. However, having Azure index custom application logfiles seems to be a bit harder. In such way that we are l… --- ## [Nested Range Aggregation](https://discuss.elastic.co/t/nested-range-aggregation/115943)
**Author:** [@Mike88](https://discuss.elastic.co/u/Mike88)\ **Replies:** 0\ **Last updated:** [January 17, 2018, 7:52pm UTC](https://discuss.elastic.co/t/nested-range-aggregation/115943 "2018-01-17T19:52:28Z")
Hi there, Based on the following data: "hits": { "total": 2, "hits": \[ { "\_id": "PRODUCT A", "inner\_hits": { "doc.products": { "hits": { "total": 1, "hits": \[ { "doc.products.productCode": "PRODUCT A", "inn… --- ## [GCE discovery with ES 1.7](https://discuss.elastic.co/t/gce-discovery-with-es-1-7/115303)
**Author:** [@skauk](https://discuss.elastic.co/u/skauk)\ **Replies:** 1\ **Last updated:** [January 17, 2018, 4:51pm UTC](https://discuss.elastic.co/t/gce-discovery-with-es-1-7/115303 "2018-01-17T16:51:00Z")
I need to setup a cluster for a legacy system which requires version 1.7 on GCE. I've setup two instances and installed the GCE discovery plugin according to docs (https://github.com/elastic/elasticsearch-cloud-gce/tree/… --- ## [Using synonyms with Auto Suggest - Search won't work , Analyze will](https://discuss.elastic.co/t/using-synonyms-with-auto-suggest-search-wont-work-analyze-will/115924)
**Author:** [@SKing](https://discuss.elastic.co/u/SKing)\ **Replies:** 0\ **Last updated:** [January 17, 2018, 4:25pm UTC](https://discuss.elastic.co/t/using-synonyms-with-auto-suggest-search-wont-work-analyze-will/115924 "2018-01-17T16:25:25Z")
I am using the Kibana Dev Tools Console. Elastic 6.1.1 Kibana 6.1.1 Running on windows I am setting up an index with synonyms and auto-suggest: PUT /hotels { "settings": { "analysis": { "filter": { "my\_synonym\_… --- ## [Different Results from two different clients](https://discuss.elastic.co/t/different-results-from-two-different-clients/115912)
**Author:** [@omerbn](https://discuss.elastic.co/u/omerbn)\ **Replies:** 2\ **Last updated:** [January 17, 2018, 4:11pm UTC](https://discuss.elastic.co/t/different-results-from-two-different-clients/115912 "2018-01-17T16:11:01Z")
Hey, Architecture: 2 client python machines running the same code with same libraries/packages. 1 elasticsearch node (with 5 shards) 1 elasticsearch index I'm running the following query: { "query": { "multi\_matc… --- ## [ElasticSearch Upgrade Missing Index Data](https://discuss.elastic.co/t/elasticsearch-upgrade-missing-index-data/115916)
**Author:** [@raj.shah1593](https://discuss.elastic.co/u/raj.shah1593)\ **Replies:** 0\ **Last updated:** [January 17, 2018, 3:54pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-missing-index-data/115916 "2018-01-17T15:54:36Z")
Hello, I followed the Upgrade steps mentioned in the document: https://www.elastic.co/guide/en/elasticsearch/reference/current/restart-upgrade.html I have migrated from v5.2.2 to v6.1.1. One of my indices in v5.2.2 w… --- ## [Need help with query for heartbeat](https://discuss.elastic.co/t/need-help-with-query-for-heartbeat/115904)
**Author:** [@Bozzerreaneaux](https://discuss.elastic.co/u/Bozzerreaneaux)\ **Replies:** 3\ **Last updated:** [January 17, 2018, 3:30pm UTC](https://discuss.elastic.co/t/need-help-with-query-for-heartbeat/115904 "2018-01-17T15:30:36Z")
Hello, I have the following query with matches all results with heartbeat field "up"=false. GET heartbeat-2018.01.17/\_search { "query": { "match": { "up": { "query": false } } } } Can y… --- ## [Creating Snapshot in Azure](https://discuss.elastic.co/t/creating-snapshot-in-azure/115805)
**Author:** [@code\_blue](https://discuss.elastic.co/u/code_blue)\ **Replies:** 2\ **Last updated:** [January 17, 2018, 3:30pm UTC](https://discuss.elastic.co/t/creating-snapshot-in-azure/115805 "2018-01-17T15:30:23Z")
We have setup snapshot functionality using Azure Blob container. When we are creating a snapshot of a smaller Index and restoring it, we can see the new Index through Kibana. However when we are trying to create a snaps… --- ## [Re-index with java api (ES 5.1.2)](https://discuss.elastic.co/t/re-index-with-java-api-es-5-1-2/115907)
**Author:** [@ariella](https://discuss.elastic.co/u/ariella)\ **Replies:** 0\ **Last updated:** [January 17, 2018, 3:18pm UTC](https://discuss.elastic.co/t/re-index-with-java-api-es-5-1-2/115907 "2018-01-17T15:18:11Z")
Hi, I have 2 indices: index\_old and index\_new. I want to re-index all the data from index\_old to index\_new, and after that I want to delete index\_old. I'm not sure if by the time I get the response from the re-index r… --- ## [Certutil does not produce keystore with 3 files but only 2](https://discuss.elastic.co/t/certutil-does-not-produce-keystore-with-3-files-but-only-2/115585)
**Author:** [@mpetronic](https://discuss.elastic.co/u/mpetronic)\ **Replies:** 3\ **Last updated:** [January 17, 2018, 3:12pm UTC](https://discuss.elastic.co/t/certutil-does-not-produce-keystore-with-3-files-but-only-2/115585 "2018-01-17T15:12:17Z")
Trying to setup and secure a new cluster for first time with x-pack. Running 6.1.1 all around. I generated my own ca.crt and ca.key using: /usr/share/elasticsearch/bin/x-pack/certutil ca --ca-dn CN=Quasar --days 3650 -… --- ## [More Than one Aggregate in Watcher?](https://discuss.elastic.co/t/more-than-one-aggregate-in-watcher/115903)
**Author:** [@MultiplierMultiplier](https://discuss.elastic.co/u/MultiplierMultiplier)\ **Replies:** 1\ **Last updated:** [January 17, 2018, 3:01pm UTC](https://discuss.elastic.co/t/more-than-one-aggregate-in-watcher/115903 "2018-01-17T15:01:47Z")
How do I sub aggregate in Watcher? I want to alert when a user is added to a security enabled group, for this I query: "term": { "EventID": "EventID:4728 OR EventID:4… --- ## [How to set up the \_score precision about the query](https://discuss.elastic.co/t/how-to-set-up-the-score-precision-about-the-query/115892)
**Author:** [@mark6688](https://discuss.elastic.co/u/mark6688)\ **Replies:** 1\ **Last updated:** [January 17, 2018, 3:00pm UTC](https://discuss.elastic.co/t/how-to-set-up-the-score-precision-about-the-query/115892 "2018-01-17T15:00:07Z")
I want to query by analyzer,for example: \[问题\] query \_score I want you 1.9882073 you want I 1.9882073 I want to query the condition that the "I want you" \_score is higher. How should I do? --- ## [Nginx authentication to aws es inside vpc](https://discuss.elastic.co/t/nginx-authentication-to-aws-es-inside-vpc/115899)
**Author:** [@rrecchia1](https://discuss.elastic.co/u/rrecchia1)\ **Replies:** 0\ **Last updated:** [January 17, 2018, 2:45pm UTC](https://discuss.elastic.co/t/nginx-authentication-to-aws-es-inside-vpc/115899 "2018-01-17T14:45:15Z")
So we have nginx reverse proxying to elasticsearch set up in amazon aws VPC. so far things are working as expected. I want to add some basic http authentication as I have done this many times in the past. However this… --- ## [Cannot set property 'text' of undefined"](https://discuss.elastic.co/t/cannot-set-property-text-of-undefined/115791)
**Author:** [@ericschlichting](https://discuss.elastic.co/u/ericschlichting)\ **Replies:** 1\ **Last updated:** [January 17, 2018, 1:55pm UTC](https://discuss.elastic.co/t/cannot-set-property-text-of-undefined/115791 "2018-01-17T13:55:51Z")
Ran into an issue where I couldn't set up an email action on a watch in Kibana 6.1.1 and was getting this error in the kibana log: "error":{"message":"Uncaught error: Cannot set property 'text' of undefined","name":"Typ… --- ## [Scripted field: Read field data from a document using doc\['some\_filed'\].value statement is not working for bigger field data](https://discuss.elastic.co/t/scripted-field-read-field-data-from-a-document-using-doc-some-filed-value-statement-is-not-working-for-bigger-field-data/113775)
**Author:** [@vinjamr](https://discuss.elastic.co/u/vinjamr)\ **Replies:** 4\ **Last updated:** [January 17, 2018, 1:34pm UTC](https://discuss.elastic.co/t/scripted-field-read-field-data-from-a-document-using-doc-some-filed-value-statement-is-not-working-for-bigger-field-data/113775 "2018-01-17T13:34:16Z")
Hi Everyone, I am new to kibana. Need your help to solve the following problem which am facing from a day. I am working on kibana scripted field approach to transform a field value by accessing it using "doc\[some\_field… --- ## [Are steps 1 and 2 of migration guide needed on single instance?](https://discuss.elastic.co/t/are-steps-1-and-2-of-migration-guide-needed-on-single-instance/115885)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 0\ **Last updated:** [January 17, 2018, 1:31pm UTC](https://discuss.elastic.co/t/are-steps-1-and-2-of-migration-guide-needed-on-single-instance/115885 "2018-01-17T13:31:09Z")
Hi, I am preparing the update from 5.1.2 to 6.1.0. I am currently using a single instance. The migration guide says I need a full cluster restart. https://www.elastic.co/guide/en/elasticsearch/reference/current/restar… --- ## [Migration from 5.2.2 to 6.1.1 - Index data is missing](https://discuss.elastic.co/t/migration-from-5-2-2-to-6-1-1-index-data-is-missing/115843)
**Author:** [@raj.shah1593](https://discuss.elastic.co/u/raj.shah1593)\ **Replies:** 5\ **Last updated:** [January 17, 2018, 1:14pm UTC](https://discuss.elastic.co/t/migration-from-5-2-2-to-6-1-1-index-data-is-missing/115843 "2018-01-17T13:14:59Z")
Hello, I have an active Elastic Search cluster v5.2.2 that I am currently using. We are planning to migrate ES to 6.1.1. While the older version was installed using rpm file, we installed the new version using tar fil… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1823) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1825)