# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1832 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1833 --- ## [2 Node cluster questions](https://discuss.elastic.co/t/2-node-cluster-questions/114510)
**Author:** [@cosmo](https://discuss.elastic.co/u/cosmo)\ **Replies:** 2\ **Last updated:** [January 10, 2018, 2:21pm UTC](https://discuss.elastic.co/t/2-node-cluster-questions/114510 "2018-01-10T14:21:54Z")
Hello Appreciate this topic has lots of topics already, but I have a few specific (but general) questions; Use case: Web logs, cron logs, other logs into an elastic stack so devs can look at logs, spot problems etc. … --- ## [Elasticsearch snapshot on more than 1 NFS shared filesystem](https://discuss.elastic.co/t/elasticsearch-snapshot-on-more-than-1-nfs-shared-filesystem/114885)
**Author:** [@erdarun](https://discuss.elastic.co/u/erdarun)\ **Replies:** 0\ **Last updated:** [January 10, 2018, 1:41pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-on-more-than-1-nfs-shared-filesystem/114885 "2018-01-10T13:41:50Z")
We have multi-node ES cluster of 4 nodes version 5.3 Due to infrastructure restrictions we can't mount single NFS volume on all nodes. We planned to create single repository named backup location pointing to 1st NFS sh… --- ## [Geogrid aggregation, points go to water](https://discuss.elastic.co/t/geogrid-aggregation-points-go-to-water/114882)
**Author:** [@yanwei2508](https://discuss.elastic.co/u/yanwei2508)\ **Replies:** 0\ **Last updated:** [January 10, 2018, 1:40pm UTC](https://discuss.elastic.co/t/geogrid-aggregation-points-go-to-water/114882 "2018-01-10T13:40:25Z")
I make points cluster with geogrid aggregation ,but the result I get is some points go to the water ,it is not right ,if here has some way to deal with this problem? --- ## [How to kill/cancel slow query?](https://discuss.elastic.co/t/how-to-kill-cancel-slow-query/114878)
**Author:** [@liujin](https://discuss.elastic.co/u/liujin)\ **Replies:** 0\ **Last updated:** [January 10, 2018, 1:24pm UTC](https://discuss.elastic.co/t/how-to-kill-cancel-slow-query/114878 "2018-01-10T13:24:32Z")
Today a user submit a query which time span is very large，and it leads to ES cluster breakdown. So how can i avoid this trouble？ --- ## [Creating and retrieve CSV Generation links](https://discuss.elastic.co/t/creating-and-retrieve-csv-generation-links/114605)
**Author:** [@David\_Vander\_Elst](https://discuss.elastic.co/u/David_Vander_Elst)\ **Replies:** 3\ **Last updated:** [January 10, 2018, 1:13pm UTC](https://discuss.elastic.co/t/creating-and-retrieve-csv-generation-links/114605 "2018-01-10T13:13:49Z")
Hello We can manually create a CSV generation links in the reporting section when we have saved a search. But it would be convenient for me to trigger the generation of this link automatically with an API call or somet… --- ## [Mapping in ELK 6.1 with the Ruby Rest Client](https://discuss.elastic.co/t/mapping-in-elk-6-1-with-the-ruby-rest-client/114733)
**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\ **Replies:** 2\ **Last updated:** [January 10, 2018, 1:13pm UTC](https://discuss.elastic.co/t/mapping-in-elk-6-1-with-the-ruby-rest-client/114733 "2018-01-10T13:13:13Z")
Hi, With the latest changes from the ELK 6.1.1 on the Removal of Mapping types, my ruby code doesn't work to create the mapping. Could you please let me know if I am doing anything wrong the mapping created in json file… --- ## [Elasticsearch - Spark Retrieve only specific fields and not the whole document](https://discuss.elastic.co/t/elasticsearch-spark-retrieve-only-specific-fields-and-not-the-whole-document/114866)
**Author:** [@phytopius](https://discuss.elastic.co/u/phytopius)\ **Replies:** 0\ **Last updated:** [January 10, 2018, 12:28pm UTC](https://discuss.elastic.co/t/elasticsearch-spark-retrieve-only-specific-fields-and-not-the-whole-document/114866 "2018-01-10T12:28:10Z")
Since retrieving aggregations is still not possible I am looking for ways to make the I/O smaller. (retrieving millions of documents only to get the first and last is really slow) My new thought would be to not retriev… --- ## [Getting the first and last entry(by timestamp) for each filename](https://discuss.elastic.co/t/getting-the-first-and-last-entry-by-timestamp-for-each-filename/114871)
**Author:** [@phytopius](https://discuss.elastic.co/u/phytopius)\ **Replies:** 0\ **Last updated:** [January 10, 2018, 12:42pm UTC](https://discuss.elastic.co/t/getting-the-first-and-last-entry-by-timestamp-for-each-filename/114871 "2018-01-10T12:42:56Z")
I have an index with around 140 milllion documents stored. The fields in general look like this: systemname, filename, timestamp, message, version, etc, What I want to get is the first and last document (based on the t… --- ## [Can't figure out how to get bucket count for an aggregation](https://discuss.elastic.co/t/cant-figure-out-how-to-get-bucket-count-for-an-aggregation/114611)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 1\ **Last updated:** [January 10, 2018, 12:20pm UTC](https://discuss.elastic.co/t/cant-figure-out-how-to-get-bucket-count-for-an-aggregation/114611 "2018-01-10T12:20:28Z")
I'm trying to form a query that will get the number of unique IP addresses that have a total of 6 or more documents in a given time range. Here is what I have so far: { "query": { "bool": { "filt… --- ## [Analyzing words frequency among all documents in index](https://discuss.elastic.co/t/analyzing-words-frequency-among-all-documents-in-index/114856)
**Author:** [@RichardSouta](https://discuss.elastic.co/u/RichardSouta)\ **Replies:** 0\ **Last updated:** [January 10, 2018, 11:56am UTC](https://discuss.elastic.co/t/analyzing-words-frequency-among-all-documents-in-index/114856 "2018-01-10T11:56:17Z")
Hello, after some research I could not find a way how to dynamically sort words in index by their frequency. I would like to use this feature to dynamically build possible stopwords dictionary. I know elastic operates… --- ## [Dynamic mapping of types excluded from custom mapping](https://discuss.elastic.co/t/dynamic-mapping-of-types-excluded-from-custom-mapping/114621)
**Author:** [@Jeffrey\_Blayney](https://discuss.elastic.co/u/Jeffrey_Blayney)\ **Replies:** 1\ **Last updated:** [January 10, 2018, 11:38am UTC](https://discuss.elastic.co/t/dynamic-mapping-of-types-excluded-from-custom-mapping/114621 "2018-01-10T11:38:04Z")
Hello ES experts! I'm busy defining custom mappings on my data, and I had a couple of questions! I'm defining how to analyze fields for specified types in my mapping, and I don't want to explicitly specify a mapping f… --- ## [\[6.1\]\[\_all\]\[matchPhraseQuery\] How to search \_all in java?](https://discuss.elastic.co/t/6-1-all-matchphrasequery-how-to-search-all-in-java/114812)
**Author:** [@ddeason](https://discuss.elastic.co/u/ddeason)\ **Replies:** 1\ **Last updated:** [January 10, 2018, 9:24am UTC](https://discuss.elastic.co/t/6-1-all-matchphrasequery-how-to-search-all-in-java/114812 "2018-01-10T09:24:59Z")
in 5.x versions , i write code as : QueryBuilders.matchPhraseQuery("\_all", string); but when I update to 6.1 ,this does not work . In 6.1 ,this works fine get /index/\_search { "query" : { "query\_string" : { "quer… --- ## [How to form a cluster?](https://discuss.elastic.co/t/how-to-form-a-cluster/113892)
**Author:** [@Terry](https://discuss.elastic.co/u/Terry)\ **Replies:** 13\ **Last updated:** [January 10, 2018, 8:56am UTC](https://discuss.elastic.co/t/how-to-form-a-cluster/113892 "2018-01-10T08:56:26Z")
I have two nodes as below which belong to the same cluster elasticsearch. However, the number of nodes showing only 1 instead of 2. How to form a cluster? { "name" : "OANlHwb", "cluster\_name" : "elasticsearch", "clu… --- ## [Elasticsearch terminated unexpectedly](https://discuss.elastic.co/t/elasticsearch-terminated-unexpectedly/113894)
**Author:** [@Terry](https://discuss.elastic.co/u/Terry)\ **Replies:** 9\ **Last updated:** [January 10, 2018, 8:55am UTC](https://discuss.elastic.co/t/elasticsearch-terminated-unexpectedly/113894 "2018-01-10T08:55:43Z")
I restarted elasticsearch service several times and each time it initialized the kibana index for a while and then terminated unexpectedly. Is there anything I can do to fix this problem? --- ## [Nginx log needed for Advanced ML test in Xpack](https://discuss.elastic.co/t/nginx-log-needed-for-advanced-ml-test-in-xpack/113902)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 2\ **Last updated:** [January 10, 2018, 8:40am UTC](https://discuss.elastic.co/t/nginx-log-needed-for-advanced-ml-test-in-xpack/113902 "2018-01-10T08:40:56Z")
Hi All , I am using ELK & Xpack 5.6.4 . Downloaded sample server logs(https://www.elastic.co/guide/en/x-pack/current/ml-gs-data.html) from Elastic website and tested Single metric job and Multi metric job . Please give… --- ## [Elasticsearch Intermittent slow query](https://discuss.elastic.co/t/elasticsearch-intermittent-slow-query/114237)
**Author:** [@wang\_Jnercy](https://discuss.elastic.co/u/wang_Jnercy)\ **Replies:** 4\ **Last updated:** [January 10, 2018, 8:16am UTC](https://discuss.elastic.co/t/elasticsearch-intermittent-slow-query/114237 "2018-01-10T08:16:18Z")
Online environment Documents: 394.9k Data: 242.9 MB of elasticsearch-version:5.4.0 There will be a few full queries every hour, and the following is a slow query took\[615.1ms\], took\_millis\[615\], types\[driverAsso\], stat… --- ## [Influxdb and ELK stack](https://discuss.elastic.co/t/influxdb-and-elk-stack/114803)
**Author:** [@Firdaus](https://discuss.elastic.co/u/Firdaus)\ **Replies:** 0\ **Last updated:** [January 10, 2018, 7:44am UTC](https://discuss.elastic.co/t/influxdb-and-elk-stack/114803 "2018-01-10T07:44:32Z")
Please advise how to monitor influx db using ELK stack --- ## [How to fetch elasticsearch term vector sum\_ttf](https://discuss.elastic.co/t/how-to-fetch-elasticsearch-term-vector-sum-ttf/114799)
**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\ **Replies:** 0\ **Last updated:** [January 10, 2018, 6:56am UTC](https://discuss.elastic.co/t/how-to-fetch-elasticsearch-term-vector-sum-ttf/114799 "2018-01-10T06:56:38Z")
Hi.. I want to fetch the term vector sum\_ttf, doc\_freq,ttf values.... Anybody know.... Thanks --- ## [Synonyms as option at query time](https://discuss.elastic.co/t/synonyms-as-option-at-query-time/114513)
**Author:** [@karejonsson](https://discuss.elastic.co/u/karejonsson)\ **Replies:** 2\ **Last updated:** [January 10, 2018, 6:34am UTC](https://discuss.elastic.co/t/synonyms-as-option-at-query-time/114513 "2018-01-10T06:34:53Z")
My process is to create an index offline and then move it to the production environment. Synonyms are easy enough to implement but that the risc is to create a lot of hits. I want to offer the users the option to use syn… --- ## [Painless script to store field/column values in an array](https://discuss.elastic.co/t/painless-script-to-store-field-column-values-in-an-array/114706)
**Author:** [@scch](https://discuss.elastic.co/u/scch)\ **Replies:** 2\ **Last updated:** [January 10, 2018, 5:39am UTC](https://discuss.elastic.co/t/painless-script-to-store-field-column-values-in-an-array/114706 "2018-01-10T05:39:10Z")
Hi All, Is there a way to store all field/column values in an array through painless script. request to share some sample script. i want to calculate count of each unique value in a column/field, similar to group by … --- ## [Completion Suggester for attachment field](https://discuss.elastic.co/t/completion-suggester-for-attachment-field/114785)
**Author:** [@debzzone](https://discuss.elastic.co/u/debzzone)\ **Replies:** 0\ **Last updated:** [January 10, 2018, 4:34am UTC](https://discuss.elastic.co/t/completion-suggester-for-attachment-field/114785 "2018-01-10T04:34:28Z")
I am a newbie with elasticsearch and NEST, and in my exploration phase. Currently I am ingesting some attachment types to search and highlight from its content field (analyzed text). Now I want to implement autocomplete … --- ## [ElasticSearch query to search one or more querystring parameters from API gateway](https://discuss.elastic.co/t/elasticsearch-query-to-search-one-or-more-querystring-parameters-from-api-gateway/114035)
**Author:** [@vaidehi9039](https://discuss.elastic.co/u/vaidehi9039)\ **Replies:** 1\ **Last updated:** [January 10, 2018, 1:48am UTC](https://discuss.elastic.co/t/elasticsearch-query-to-search-one-or-more-querystring-parameters-from-api-gateway/114035 "2018-01-10T01:48:55Z")
HI, My requirement is to query elasticsearch trough API Gateway and Lambda using query string parameters. For a single querystring parameter my lambda code is working fine. But I am not getting how to query using more… --- ## [Accessing settings in the keystore](https://discuss.elastic.co/t/accessing-settings-in-the-keystore/114763)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 8\ **Last updated:** [January 10, 2018, 1:36am UTC](https://discuss.elastic.co/t/accessing-settings-in-the-keystore/114763 "2018-01-10T01:36:57Z")
How can properties be read from the keystore from inside a plugin? The only current usage in the main repo is the s3 repository, but that code is complex (in terms of the amount of calls) and I rather not have to debug … --- ## [Elastic co docker registry URL](https://discuss.elastic.co/t/elastic-co-docker-registry-url/114562)
**Author:** [@Marc\_L](https://discuss.elastic.co/u/Marc_L)\ **Replies:** 3\ **Last updated:** [January 10, 2018, 12:12am UTC](https://discuss.elastic.co/t/elastic-co-docker-registry-url/114562 "2018-01-10T00:12:55Z")
Can someone confirm the URL of the official Elastic docker repository? I am trying to add the Elastic docker repository to my QNAP Container Station but when I add it as https://docker.elastic.co it is failing the "Test… --- ## [Report output loading](https://discuss.elastic.co/t/report-output-loading/113862)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 1\ **Last updated:** [January 9, 2018, 11:55pm UTC](https://discuss.elastic.co/t/report-output-loading/113862 "2018-01-09T23:55:07Z")
how change the time about it see the image \[image\] --- ## [How to convert Avro Schema to Elastic Search Mapping?](https://discuss.elastic.co/t/how-to-convert-avro-schema-to-elastic-search-mapping/114749)
**Author:** [@kant\_kodali](https://discuss.elastic.co/u/kant_kodali)\ **Replies:** 1\ **Last updated:** [January 9, 2018, 10:08pm UTC](https://discuss.elastic.co/t/how-to-convert-avro-schema-to-elastic-search-mapping/114749 "2018-01-09T22:08:31Z")
How to convert Avro Schema to Elastic Search Mapping? I have Avro records in Kafka and I want to insert these records into Elastic search in JSON so I can read and also query them but before I do that I want to create a… --- ## [\[6.1\] BulkProcessor and HighLevelRestClient](https://discuss.elastic.co/t/6-1-bulkprocessor-and-highlevelrestclient/114754)
**Author:** [@macgngsta](https://discuss.elastic.co/u/macgngsta)\ **Replies:** 2\ **Last updated:** [January 9, 2018, 9:05pm UTC](https://discuss.elastic.co/t/6-1-bulkprocessor-and-highlevelrestclient/114754 "2018-01-09T21:05:41Z")
In the documentation Using Bulk Processor, the following snippet is provided: BulkProcessor bulkProcessor = BulkProcessor.builder(client, new BulkProcessor.Listener() { /\* Listener methods \*/ }) .setBulkActions(10000) .… --- ## [Indices Snapshots](https://discuss.elastic.co/t/indices-snapshots/114748)
**Author:** [@kunam](https://discuss.elastic.co/u/kunam)\ **Replies:** 0\ **Last updated:** [January 9, 2018, 7:51pm UTC](https://discuss.elastic.co/t/indices-snapshots/114748 "2018-01-09T19:51:13Z")
Hello Elastic folks, I had ECE (1.1) hosted on 18 Azure nodes and has 15 logging clusters. When coming to repositories, had NFS file system that is accessible by all the nodes at the same mounting point. I want to po… --- ## [Advanced scripts on nested entities](https://discuss.elastic.co/t/advanced-scripts-on-nested-entities/114709)
**Author:** [@franck.lefebure](https://discuss.elastic.co/u/franck.lefebure)\ **Replies:** 1\ **Last updated:** [January 9, 2018, 7:48pm UTC](https://discuss.elastic.co/t/advanced-scripts-on-nested-entities/114709 "2018-01-09T19:48:56Z")
Hi, Regarding some mapping like this one : {"root\_entity": {"properties": { "root\_long": {"type": "long"}, "root\_int": {"type": "integer"}, "nested\_entity": { "type": "nested", "properties": { … --- ## [Is sparse data on not indexed field affect on ES performance?](https://discuss.elastic.co/t/is-sparse-data-on-not-indexed-field-affect-on-es-performance/112771)
**Author:** [@majid\_zarrin](https://discuss.elastic.co/u/majid_zarrin)\ **Replies:** 2\ **Last updated:** [January 9, 2018, 6:43pm UTC](https://discuss.elastic.co/t/is-sparse-data-on-not-indexed-field-affect-on-es-performance/112771 "2018-01-09T18:43:57Z")
I have sparse data based on a filed named type. assume if (type = A ) fields x and y appears if(type=B) fields w and z appears. if(type=C) no extra fields appears ( about 70% of data ~ 2 billion data ) I know that… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1831) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1833)