# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1850

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1851

---

## [Date range filtering does not affect date histogram aggregation](https://discuss.elastic.co/t/date-range-filtering-does-not-affect-date-histogram-aggregation/112241)

<div class="topic-metadata">

**Author:** [@valdemarrolfsen](https://discuss.elastic.co/u/valdemarrolfsen)\
**Replies:** 0\
**Last updated:** [December 18, 2017, 1:51pm UTC](https://discuss.elastic.co/t/date-range-filtering-does-not-affect-date-histogram-aggregation/112241 "2017-12-18T13:51:28Z")

</div>

I have some issues with filtering on a nested date field when doing aggregations. I want to separate the filtering and aggregation logic so that I can use the same filtering for different aggregations. This has been poss…

---

## [Shard routing calc](https://discuss.elastic.co/t/shard-routing-calc/112141)

<div class="topic-metadata">

**Author:** [@morphers82](https://discuss.elastic.co/u/morphers82)\
**Replies:** 2\
**Last updated:** [December 18, 2017, 1:24pm UTC](https://discuss.elastic.co/t/shard-routing-calc/112141 "2017-12-18T13:24:02Z")

</div>

This formula is given for how a doc is routed to a shard. shard\_num = hash(\_routing) % num\_primary\_shards I would like to calculate this to recover a shard that was lost so i can reindex docs that were deleted along wi…

---

## [Cluster design with fully replicated data - please advise](https://discuss.elastic.co/t/cluster-design-with-fully-replicated-data-please-advise/112231)

<div class="topic-metadata">

**Author:** [@Hattivat](https://discuss.elastic.co/u/Hattivat)\
**Replies:** 0\
**Last updated:** [December 18, 2017, 12:56pm UTC](https://discuss.elastic.co/t/cluster-design-with-fully-replicated-data-please-advise/112231 "2017-12-18T12:56:17Z")

</div>

I have what seems to be a rather atypical use case for ES - a relatively small (\<100 gb) dataset, so that it is perfectly possible to give each server a full copy of the data. The cluster will have to handle a moderate a…

---

## [SearchContextMissingException during long scroll/scan operations?](https://discuss.elastic.co/t/searchcontextmissingexception-during-long-scroll-scan-operations/23775)

<div class="topic-metadata">

**Author:** [@ptrei](https://discuss.elastic.co/u/ptrei)\
**Replies:** 10\
**Last updated:** [December 18, 2017, 12:58pm UTC](https://discuss.elastic.co/t/searchcontextmissingexception-during-long-scroll-scan-operations/23775 "2017-12-18T12:58:18Z")

</div>

Does anyone else have problems with SearchContextMissingExceptions in scroll/scan operations? I have logstash indices which each contain 10s of millions of records. I need to walk over the entire index, processing data…

---

## [Why watermark settings are set so low by default?](https://discuss.elastic.co/t/why-watermark-settings-are-set-so-low-by-default/112010)

<div class="topic-metadata">

**Author:** [@ivten](https://discuss.elastic.co/u/ivten)\
**Replies:** 3\
**Last updated:** [December 18, 2017, 12:41pm UTC](https://discuss.elastic.co/t/why-watermark-settings-are-set-so-low-by-default/112010 "2017-12-18T12:41:59Z")

</div>

Hi, I am running a cluster in which all datanodes have their data dirs mounted on separate 6TB disks. Today the cluster reached 84% disk usage and I was forced to delete a bunch of old indexes even though I still had a…

---

## [Is python client 6.0.0 is worked with elasticsearch 5.6.3 version which my system have installed?](https://discuss.elastic.co/t/is-python-client-6-0-0-is-worked-with-elasticsearch-5-6-3-version-which-my-system-have-installed/109327)

<div class="topic-metadata">

**Author:** [@yash\_mangla](https://discuss.elastic.co/u/yash_mangla)\
**Replies:** 2\
**Last updated:** [December 18, 2017, 11:58am UTC](https://discuss.elastic.co/t/is-python-client-6-0-0-is-worked-with-elasticsearch-5-6-3-version-which-my-system-have-installed/109327 "2017-12-18T11:58:05Z")

</div>

Hello Guyz, My system has installed elasticsearch-5.6.3. i want to write python script to pull that data from elastic and dump to another location. I want to store in my defined format. but in python there is elasticsea…

---

## [Elastic search : Replacing BoolFilterBuilder from v0.9 to v6](https://discuss.elastic.co/t/elastic-search-replacing-boolfilterbuilder-from-v0-9-to-v6/112148)

<div class="topic-metadata">

**Author:** [@satyarajp](https://discuss.elastic.co/u/satyarajp)\
**Replies:** 8\
**Last updated:** [December 18, 2017, 11:43am UTC](https://discuss.elastic.co/t/elastic-search-replacing-boolfilterbuilder-from-v0-9-to-v6/112148 "2017-12-18T11:43:09Z")

</div>

Hi Team, Can you please help me if the below code(es v0.9) can be replaced BoolFilterBuilder filter = FilterBuilders.boolFilter().filterName("compositeFilter"); filterBuilder.must(FilterBuilders.termsFilter("keyword", …

---

## [Synonyms](https://discuss.elastic.co/t/synonyms/112220)

<div class="topic-metadata">

**Author:** [@karejonsson](https://discuss.elastic.co/u/karejonsson)\
**Replies:** 0\
**Last updated:** [December 18, 2017, 11:35am UTC](https://discuss.elastic.co/t/synonyms/112220 "2017-12-18T11:35:08Z")

</div>

Dictionaries are simple to find. Hunspell is one source. It seams much harder to find files with synonyms for other languages than english. Please help me with pointers. Specifically I am looking for swedish, french and…

---

## [LDAP Authentication - throws BASIC REALM 401 error](https://discuss.elastic.co/t/ldap-authentication-throws-basic-realm-401-error/111703)

<div class="topic-metadata">

**Author:** [@vigneshaj](https://discuss.elastic.co/u/vigneshaj)\
**Replies:** 5\
**Last updated:** [December 18, 2017, 11:31am UTC](https://discuss.elastic.co/t/ldap-authentication-throws-basic-realm-401-error/111703 "2017-12-18T11:31:57Z")

</div>

Hi Team I have set the below configuration in elasticsearch.yml for LDAP authentication. Even though there is no basic realm in config, Error returned is from basic security as below. CODE security: authc: realms: …

---

## [Clear my system](https://discuss.elastic.co/t/clear-my-system/111826)

<div class="topic-metadata">

**Author:** [@teejayuu](https://discuss.elastic.co/u/teejayuu)\
**Replies:** 5\
**Last updated:** [December 18, 2017, 11:03am UTC](https://discuss.elastic.co/t/clear-my-system/111826 "2017-12-18T11:03:43Z")

</div>

Hi, Have been trying ELK for a while now...still not in production and a lot of things aren't working. I've a feeling that something is a bit screwy. I have stopped everything send data to my ELK stack and cleared all…

---

## [ES sizing](https://discuss.elastic.co/t/es-sizing/112167)

<div class="topic-metadata">

**Author:** [@dharmjit\_singh](https://discuss.elastic.co/u/dharmjit_singh)\
**Replies:** 5\
**Last updated:** [December 18, 2017, 10:27am UTC](https://discuss.elastic.co/t/es-sizing/112167 "2017-12-18T10:27:27Z")

</div>

Hi All, I know that proper sizing is an experimental process, but does ES provides some basic sizing matrix based on storage/performance etc . Thanks in advance.

---

## [ES equivalent of lucene SpanNearQuery.Builder.addGap(int)](https://discuss.elastic.co/t/es-equivalent-of-lucene-spannearquery-builder-addgap-int/112204)

<div class="topic-metadata">

**Author:** [@chandan\_singh](https://discuss.elastic.co/u/chandan_singh)\
**Replies:** 0\
**Last updated:** [December 18, 2017, 10:24am UTC](https://discuss.elastic.co/t/es-equivalent-of-lucene-spannearquery-builder-addgap-int/112204 "2017-12-18T10:24:04Z")

</div>

Lucene's SpanNearQuery.Builder.addGap(int) serves an important search criteria. Especially with slop=0, it acts as arbitrary gap between two clauses just like the gaps created by removal of stop words in a phrase search.…

---

## [Different results for same query](https://discuss.elastic.co/t/different-results-for-same-query/111757)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 3\
**Last updated:** [December 18, 2017, 9:36am UTC](https://discuss.elastic.co/t/different-results-for-same-query/111757 "2017-12-18T09:36:32Z")

</div>

Hi, Using kibana 6.0.1. I get different results when running the same question on the same data multiple times: \[grafik\] \[grafik\] on left side the the value for 25th and 50th percentile havent been changed, although…

---

## [Cluster issue](https://discuss.elastic.co/t/cluster-issue/112007)

<div class="topic-metadata">

**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Replies:** 7\
**Last updated:** [December 18, 2017, 9:29am UTC](https://discuss.elastic.co/t/cluster-issue/112007 "2017-12-18T09:29:55Z")

</div>

Hi , I have two nodes in my cluster , but while starting both nodes , they are not joining cluster but running independently . Please let know what could be the issue ?

---

## [Elasticsearch Update by Query using CTX](https://discuss.elastic.co/t/elasticsearch-update-by-query-using-ctx/112176)

<div class="topic-metadata">

**Author:** [@adityosn](https://discuss.elastic.co/u/adityosn)\
**Replies:** 0\
**Last updated:** [December 18, 2017, 8:39am UTC](https://discuss.elastic.co/t/elasticsearch-update-by-query-using-ctx/112176 "2017-12-18T08:39:55Z")

</div>

I would like to update all documents inside the the index. I found that Update Query is the method we should use. But, I am facing problem when I am using ctx.\_now as a value for updated document's field, causing the fie…

---

## [Change cluster name and storage location folder](https://discuss.elastic.co/t/change-cluster-name-and-storage-location-folder/112171)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 5\
**Last updated:** [December 18, 2017, 8:33am UTC](https://discuss.elastic.co/t/change-cluster-name-and-storage-location-folder/112171 "2017-12-18T08:33:45Z")

</div>

Hi all, currently we have elastic stack's major version number in following fields: cluster.name path.data Is it save to rename them, rename the folders or do I need some reindexing or other stuff? Currently we are r…

---

## [Fswatcher have not send data to elasticsearch](https://discuss.elastic.co/t/fswatcher-have-not-send-data-to-elasticsearch/111211)

<div class="topic-metadata">

**Author:** [@wuwo1952368901](https://discuss.elastic.co/u/wuwo1952368901)\
**Replies:** 1\
**Last updated:** [December 18, 2017, 8:29am UTC](https://discuss.elastic.co/t/fswatcher-have-not-send-data-to-elasticsearch/111211 "2017-12-18T08:29:20Z")

</div>

fswatcher is working and elasticsearch is running , but have not data when i used kibana.

---

## [Elasticsearch indexing while rollover](https://discuss.elastic.co/t/elasticsearch-indexing-while-rollover/112158)

<div class="topic-metadata">

**Author:** [@khatkar](https://discuss.elastic.co/u/khatkar)\
**Replies:** 1\
**Last updated:** [December 18, 2017, 7:39am UTC](https://discuss.elastic.co/t/elasticsearch-indexing-while-rollover/112158 "2017-12-18T07:39:01Z")

</div>

I have an application which writes to the ES and which also schedules time based index rollover based on max\_docs condition. What will happen if I try indexing during the rollover ? Does ES takes lock while performing …

---

## [Partial failure](https://discuss.elastic.co/t/partial-failure/112153)

<div class="topic-metadata">

**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\
**Replies:** 2\
**Last updated:** [December 18, 2017, 7:35am UTC](https://discuss.elastic.co/t/partial-failure/112153 "2017-12-18T07:35:05Z")

</div>

I have a 3 nodes cluster with 1 primary and 2 replica shards. I inserted a document and got this response: IndexResponse\[index=events\_1513522587069,type=events,id=112,version=1,result=created,shards= {"total":3,"succes…

---

## [Is there a way to get the expanded terms of a wildcard query?](https://discuss.elastic.co/t/is-there-a-way-to-get-the-expanded-terms-of-a-wildcard-query/112163)

<div class="topic-metadata">

**Author:** [@dimalini](https://discuss.elastic.co/u/dimalini)\
**Replies:** 0\
**Last updated:** [December 18, 2017, 6:59am UTC](https://discuss.elastic.co/t/is-there-a-way-to-get-the-expanded-terms-of-a-wildcard-query/112163 "2017-12-18T06:59:26Z")

</div>

Hi, I have a simple sense query like this POST /\_search { "query": { "wildcard": { "field1": { "value": "app\*" } } } } I want to know if there is any way to edit the above query and also get the expanded term…

---

## [Java code to Elasticsearch](https://discuss.elastic.co/t/java-code-to-elasticsearch/112162)

<div class="topic-metadata">

**Author:** [@Prateek\_Kshtriya](https://discuss.elastic.co/u/Prateek_Kshtriya)\
**Replies:** 0\
**Last updated:** [December 18, 2017, 6:58am UTC](https://discuss.elastic.co/t/java-code-to-elasticsearch/112162 "2017-12-18T06:58:20Z")

</div>

Hi All, Please help me with the java code to send the data to elasticsearch. I went through the post for same , found below code but not helping with problem statement- import org.elasticsearch.action.admin.cluster.hea…

---

## [Search is against all indexes and not just the single configured index](https://discuss.elastic.co/t/search-is-against-all-indexes-and-not-just-the-single-configured-index/111977)

<div class="topic-metadata">

**Author:** [@AndyDev2017](https://discuss.elastic.co/u/AndyDev2017)\
**Replies:** 5\
**Last updated:** [December 18, 2017, 6:38am UTC](https://discuss.elastic.co/t/search-is-against-all-indexes-and-not-just-the-single-configured-index/111977 "2017-12-18T06:38:30Z")

</div>

Currently I have a search with a match\_all query failing due to the logs stating the operation is being conducted against all indexes. The track has been configured to use a single index i.e. not '\_all' My assumption was…

---

## [Webhook](https://discuss.elastic.co/t/webhook/112137)

<div class="topic-metadata">

**Author:** [@EricWS](https://discuss.elastic.co/u/EricWS)\
**Replies:** 4\
**Last updated:** [December 18, 2017, 5:12am UTC](https://discuss.elastic.co/t/webhook/112137 "2017-12-18T05:12:39Z")

</div>

Hi all, We are currently looking for a way to generate alerts based on saved searches and then post the alerts to an external API using webhook. WE have tried Sentinl, which would have been exactly what we wanted ho…

---

## [10% of queries are taking much longer](https://discuss.elastic.co/t/10-of-queries-are-taking-much-longer/112146)

<div class="topic-metadata">

**Author:** [@hello](https://discuss.elastic.co/u/hello)\
**Replies:** 0\
**Last updated:** [December 18, 2017, 4:55am UTC](https://discuss.elastic.co/t/10-of-queries-are-taking-much-longer/112146 "2017-12-18T04:55:13Z")

</div>

ES v5.6.5 This in on a server that is heavily indexing all of the time. Refresh interval is set to 1s, and honestly before the last 2-3 months, this has never been a problem (possibly earlier version of ES). All of a …

---

## [How we can used SCADA system in ELK stack](https://discuss.elastic.co/t/how-we-can-used-scada-system-in-elk-stack/112079)

<div class="topic-metadata">

**Author:** [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)\
**Replies:** 2\
**Last updated:** [December 18, 2017, 3:49am UTC](https://discuss.elastic.co/t/how-we-can-used-scada-system-in-elk-stack/112079 "2017-12-18T03:49:33Z")

</div>

Hello all, I need some guidelines or information about SCADA mean How we can integrate or how to use SCADA System in ELK stack. Can anyone tell me about this things SCADA with ELK stacks. I want to do SCADA Security w…

---

## [Logs and data directories are not created by Debian installation for 6.1.x](https://discuss.elastic.co/t/logs-and-data-directories-are-not-created-by-debian-installation-for-6-1-x/112129)

<div class="topic-metadata">

**Author:** [@lcanas](https://discuss.elastic.co/u/lcanas)\
**Replies:** 1\
**Last updated:** [December 18, 2017, 3:10am UTC](https://discuss.elastic.co/t/logs-and-data-directories-are-not-created-by-debian-installation-for-6-1-x/112129 "2017-12-18T03:10:08Z")

</div>

Hey guys, I'm playing with Ansible to get Elasticsearch 6.1 + Kibana up & running in a fresh Debian 9.x installation. I've followed the steps at https://www.elastic.co/guide/en/elasticsearch/reference/current/deb.html b…

---

## [Encryption at Rest](https://discuss.elastic.co/t/encryption-at-rest/111583)

<div class="topic-metadata">

**Author:** [@sschins](https://discuss.elastic.co/u/sschins)\
**Replies:** 1\
**Last updated:** [December 17, 2017, 11:04pm UTC](https://discuss.elastic.co/t/encryption-at-rest/111583 "2017-12-17T23:04:08Z")

</div>

Greetings All, I'm using dm-crypt to encrypt data at rest. When I open the encrypted disk and mount it, my Elasticsearch cluster's health goes red. I'm not sure why. Has anyone successfully encrypted data at rest?

---

## [Marvel To Xpack](https://discuss.elastic.co/t/marvel-to-xpack/112136)

<div class="topic-metadata">

**Author:** [@0NE](https://discuss.elastic.co/u/0NE)\
**Replies:** 7\
**Last updated:** [December 17, 2017, 10:46pm UTC](https://discuss.elastic.co/t/marvel-to-xpack/112136 "2017-12-17T22:46:47Z")

</div>

Hello, We have successfully managed to create a bunch of elastic snapshots and restores (fully tested and working). We are now in the phase to move to 1.7.3 to 6.0.0. Doing this we need to move Marvel to XPack. We do n…

---

## [Elasticsearch snapshot does not exist](https://discuss.elastic.co/t/elasticsearch-snapshot-does-not-exist/112130)

<div class="topic-metadata">

**Author:** [@0NE](https://discuss.elastic.co/u/0NE)\
**Replies:** 1\
**Last updated:** [December 17, 2017, 10:20pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-does-not-exist/112130 "2017-12-17T22:20:37Z")

</div>

I am trying to restore my elasticsearch on a new machine. I copied the backup across, set up a new repo with the same name (called myrep). I have check if this works by doing: \> \`GET http://127.0.0.1:9200/\_snapshot\` w…

---

## [How to set build-in user password on windows?](https://discuss.elastic.co/t/how-to-set-build-in-user-password-on-windows/111812)

<div class="topic-metadata">

**Author:** [@Lynnic](https://discuss.elastic.co/u/Lynnic)\
**Replies:** 3\
**Last updated:** [December 17, 2017, 9:26pm UTC](https://discuss.elastic.co/t/how-to-set-build-in-user-password-on-windows/111812 "2017-12-17T21:26:29Z")

</div>

I just installed x-pack in Elasticsearch on windows following the document https://www.elastic.co/guide/en/x-pack/6.0/setting-up-authentication.html#bootstrap-elastic-passwords Now I want to set the password when login…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1849)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1851)
