# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1863

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1864

---

## [Specify the Collate query in Phrase Suggestion](https://discuss.elastic.co/t/specify-the-collate-query-in-phrase-suggestion/109489)

<div class="topic-metadata">

**Author:** [@panfng](https://discuss.elastic.co/u/panfng)\
**Replies:** 3\
**Last updated:** [December 7, 2017, 7:50am UTC](https://discuss.elastic.co/t/specify-the-collate-query-in-phrase-suggestion/109489 "2017-12-07T07:50:48Z")

</div>

Phase Suggestion can be done in the search api. I wonder if there's a way to reuse the query in search api call for the Collate query. Thanks!

---

## [X-pack error](https://discuss.elastic.co/t/x-pack-error/110595)

<div class="topic-metadata">

**Author:** [@suhan\_kim](https://discuss.elastic.co/u/suhan_kim)\
**Replies:** 1\
**Last updated:** [December 7, 2017, 7:48am UTC](https://discuss.elastic.co/t/x-pack-error/110595 "2017-12-07T07:48:24Z")

</div>

Let me know how to solve this situation. This is what happens when you start kibana log \[02:36:35.142\] \[error\]\[monitoring-ui\] \[export\_exception\] Exception when closing export bulk :: { "path":"/\_xpack/mo…

---

## [Find exact cardinality value](https://discuss.elastic.co/t/find-exact-cardinality-value/110624)

<div class="topic-metadata">

**Author:** [@shemilr](https://discuss.elastic.co/u/shemilr)\
**Replies:** 0\
**Last updated:** [December 7, 2017, 7:38am UTC](https://discuss.elastic.co/t/find-exact-cardinality-value/110624 "2017-12-07T07:38:21Z")

</div>

Hi, I want to find the exact cardinality value using the query. For lower value I am getting the correct result, but i want to get the correct value for all search. Is it possible to get the exact value? Any alternati…

---

## [Ignore inherited Properties in NEST](https://discuss.elastic.co/t/ignore-inherited-properties-in-nest/110622)

<div class="topic-metadata">

**Author:** [@nkdev89](https://discuss.elastic.co/u/nkdev89)\
**Replies:** 0\
**Last updated:** [December 7, 2017, 7:23am UTC](https://discuss.elastic.co/t/ignore-inherited-properties-in-nest/110622 "2017-12-07T07:23:43Z")

</div>

Hi , I have a C# Class which is inheriting from SortedDictionary. So when i do a automap , The properties like Count,items are getting created in the index mapping. Please help me to avoid these base class properties . …

---

## [Using basic license](https://discuss.elastic.co/t/using-basic-license/110296)

<div class="topic-metadata">

**Author:** [@nugusbayevkk](https://discuss.elastic.co/u/nugusbayevkk)\
**Replies:** 2\
**Last updated:** [December 7, 2017, 7:17am UTC](https://discuss.elastic.co/t/using-basic-license/110296 "2017-12-07T07:17:37Z")

</div>

hello, i have question about using basic license i installed on elasticsearch 6.0.0, kibana 6.0.0 x-pack plugin. Then i set next parameteres in configurations files: kibana.yml: xpack.graph.enabled: false xpack.ml.e…

---

## [ICU Plugin in 6.x](https://discuss.elastic.co/t/icu-plugin-in-6-x/108672)

<div class="topic-metadata">

**Author:** [@Zaid\_Amir](https://discuss.elastic.co/u/Zaid_Amir)\
**Replies:** 3\
**Last updated:** [December 7, 2017, 6:43am UTC](https://discuss.elastic.co/t/icu-plugin-in-6-x/108672 "2017-12-07T06:43:00Z")

</div>

In the 6.x breaking changes documentation it's stated that indices created in the previous major version (i.e 5.x) need to be re-indexed in order to benefit from the changes to the ICU plugin. Referenced here. Am I read…

---

## [Upgrade check](https://discuss.elastic.co/t/upgrade-check/105947)

<div class="topic-metadata">

**Author:** [@davidkarlsen](https://discuss.elastic.co/u/davidkarlsen)\
**Replies:** 4\
**Last updated:** [December 7, 2017, 6:35am UTC](https://discuss.elastic.co/t/upgrade-check/105947 "2017-12-07T06:35:14Z")

</div>

I ran the upgrade checker (5.6.3) and get these mapping warnings: one or more templates use deprecated mapping settings This issue must be resolved to upgrade. Read Documentation Details: {.monitoring-es=\[Coercion of …

---

## [6.0.0: NullPointerException at org.elasticsearch.Build.\<clinit\>(Build.java:49)](https://discuss.elastic.co/t/6-0-0-nullpointerexception-at-org-elasticsearch-build-clinit-build-java-49/110142)

<div class="topic-metadata">

**Author:** [@Joel\_Becker](https://discuss.elastic.co/u/Joel_Becker)\
**Replies:** 6\
**Last updated:** [December 7, 2017, 4:23am UTC](https://discuss.elastic.co/t/6-0-0-nullpointerexception-at-org-elasticsearch-build-clinit-build-java-49/110142 "2017-12-07T04:23:14Z")

</div>

Hi, I'm trying to use the High Level Java REST client version 6.0.0, in an IntelliJ plugin that I'm developing, but my progress is blocked, because when trying to create an instance of RestHighLevelClient, I get java.la…

---

## [IgnoreMalFormed](https://discuss.elastic.co/t/ignoremalformed/110327)

<div class="topic-metadata">

**Author:** [@nkdev89](https://discuss.elastic.co/u/nkdev89)\
**Replies:** 3\
**Last updated:** [December 7, 2017, 3:33am UTC](https://discuss.elastic.co/t/ignoremalformed/110327 "2017-12-07T03:33:30Z")

</div>

Hi , I have a C# DateTime Field as below \[Date(Format = "yyyy-MM-ddThh:mm:ss",IgnoreMalformed =true)\] public DateTime BirthdateTime { get; set; } I'm getting below error , even after setting IgnoreMalformed =t…

---

## [Change mapping question](https://discuss.elastic.co/t/change-mapping-question/110451)

<div class="topic-metadata">

**Author:** [@peterch](https://discuss.elastic.co/u/peterch)\
**Replies:** 2\
**Last updated:** [December 7, 2017, 3:33am UTC](https://discuss.elastic.co/t/change-mapping-question/110451 "2017-12-07T03:33:03Z")

</div>

Dear All, I would like change one of the field type from "text" to "IP" for geoip use but fail. May i know how to do that. Thanks GET /syslog/\_mapping { "syslog": { "mappings": { "doc": { "properties": { "@timest…

---

## [Should Query with Filter](https://discuss.elastic.co/t/should-query-with-filter/110560)

<div class="topic-metadata">

**Author:** [@full\_vlad](https://discuss.elastic.co/u/full_vlad)\
**Replies:** 1\
**Last updated:** [December 6, 2017, 9:23pm UTC](https://discuss.elastic.co/t/should-query-with-filter/110560 "2017-12-06T21:23:20Z")

</div>

Hello everybody! Given that types will be dropped in future releases I wanted to move them in a special field for each document (as stated here). Now for the search query I'll have something like this: { "query": …

---

## [Authentication of \[elastic\] was terminated by realm \[reserved\] - failed to authenticate user \[elastic\]](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/109996)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 2\
**Last updated:** [December 6, 2017, 8:31pm UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/109996 "2017-12-06T20:31:07Z")

</div>

I'm trying to get started with follow Install Elasticsearch with Docker | Elasticsearch Reference \[6.0\] | Elastic, and even though I set initial password with Docker environment variable ELASTIC\_PASSWORD and as I start i…

---

## [Score Sorting and shuffle Adversiting results](https://discuss.elastic.co/t/score-sorting-and-shuffle-adversiting-results/109602)

<div class="topic-metadata">

**Author:** [@lucashfreitas](https://discuss.elastic.co/u/lucashfreitas)\
**Replies:** 1\
**Last updated:** [December 6, 2017, 8:06pm UTC](https://discuss.elastic.co/t/score-sorting-and-shuffle-adversiting-results/109602 "2017-12-06T20:06:24Z")

</div>

Hello guys, My site use elasticsearch query for fetch adversiting data of customers. My query on elastic sort data considering SCORE calculed from score function. (I use score because many properties make a difference …

---

## [Returning error when trying to insert document with non-existent field](https://discuss.elastic.co/t/returning-error-when-trying-to-insert-document-with-non-existent-field/110559)

<div class="topic-metadata">

**Author:** [@nadiGam](https://discuss.elastic.co/u/nadiGam)\
**Replies:** 0\
**Last updated:** [December 6, 2017, 6:35pm UTC](https://discuss.elastic.co/t/returning-error-when-trying-to-insert-document-with-non-existent-field/110559 "2017-12-06T18:35:33Z")

</div>

For example , I want to insert new document which consist of two strings into myindex/mytype { "name" : "joe", "city": "ny" } BUT mytype consist only of one string field : "name" in this case I want the indexing t…

---

## [ELK Cluster doubts (ELK, Kibana and Logstash)](https://discuss.elastic.co/t/elk-cluster-doubts-elk-kibana-and-logstash/110554)

<div class="topic-metadata">

**Author:** [@Natalia\_Queiroz](https://discuss.elastic.co/u/Natalia_Queiroz)\
**Replies:** 1\
**Last updated:** [December 6, 2017, 6:25pm UTC](https://discuss.elastic.co/t/elk-cluster-doubts-elk-kibana-and-logstash/110554 "2017-12-06T18:25:18Z")

</div>

Hello! I'm begineer in ELK stack and I have a cluster with 2 master nodes and 3 data nodes. I have also a machine with logstash and kibana running. The cluster thing it's not so clear and a I have few questions: Ma…

---

## [Ingest-attachment: case insensitive search](https://discuss.elastic.co/t/ingest-attachment-case-insensitive-search/107737)

<div class="topic-metadata">

**Author:** [@Vikentyi](https://discuss.elastic.co/u/Vikentyi)\
**Replies:** 5\
**Last updated:** [December 6, 2017, 4:01pm UTC](https://discuss.elastic.co/t/ingest-attachment-case-insensitive-search/107737 "2017-12-06T16:01:56Z")

</div>

Hello. I have a requirement to perform search in file content. Everything is ok. But is it possible to implement case insensitive search in file content? I've read a lot and did't find an answer.

---

## [Highlight\_query is ignored ES 2.3.4](https://discuss.elastic.co/t/highlight-query-is-ignored-es-2-3-4/110529)

<div class="topic-metadata">

**Author:** [@valerioorfano](https://discuss.elastic.co/u/valerioorfano)\
**Replies:** 0\
**Last updated:** [December 6, 2017, 2:40pm UTC](https://discuss.elastic.co/t/highlight-query-is-ignored-es-2-3-4/110529 "2017-12-06T14:40:39Z")

</div>

I need to highlight only fragment containing all searched words specified in the highlight\_query, but it is ignored. What am i mistaking? GET /test/person/\_search { "query": { "terms": { "testo": \["favola", "fiaba"\] …

---

## [BulkProcessor deadlock on cluster failure](https://discuss.elastic.co/t/bulkprocessor-deadlock-on-cluster-failure/110526)

<div class="topic-metadata">

**Author:** [@cwinkler](https://discuss.elastic.co/u/cwinkler)\
**Replies:** 0\
**Last updated:** [December 6, 2017, 2:31pm UTC](https://discuss.elastic.co/t/bulkprocessor-deadlock-on-cluster-failure/110526 "2017-12-06T14:31:36Z")

</div>

BulkProcessor goes into dead-lock situation when ES (5.5.1) cluster fails during bulk-processing. If the bulk response gets lost due to failing cluster, the async bulk request handler gets stuck while waiting for the pr…

---

## [Aggregation based on hour of day and timezone](https://discuss.elastic.co/t/aggregation-based-on-hour-of-day-and-timezone/110445)

<div class="topic-metadata">

**Author:** [@beng](https://discuss.elastic.co/u/beng)\
**Replies:** 1\
**Last updated:** [December 6, 2017, 2:21pm UTC](https://discuss.elastic.co/t/aggregation-based-on-hour-of-day-and-timezone/110445 "2017-12-06T14:21:51Z")

</div>

We currently have a stat known as "Peak Hours" and this shows total counts based on a field called "created\_at\_hour" (this field is stored as the UTC hour). We did it this way to avoid using a script to calculate the hou…

---

## [How many shards in one node?](https://discuss.elastic.co/t/how-many-shards-in-one-node/110499)

<div class="topic-metadata">

**Author:** [@MLdz](https://discuss.elastic.co/u/MLdz)\
**Replies:** 3\
**Last updated:** [December 6, 2017, 2:21pm UTC](https://discuss.elastic.co/t/how-many-shards-in-one-node/110499 "2017-12-06T14:21:18Z")

</div>

Hello, i have install the ELK Stack for apache and php logs. My logstash is connect to my elasticsearch. At present, logstash create a daily index for elasticsearch. I have 600Mb of logs per day, and we want to keep t…

---

## [Querying ES using .net client application from a server where there are no nodes. Is that possible?](https://discuss.elastic.co/t/querying-es-using-net-client-application-from-a-server-where-there-are-no-nodes-is-that-possible/110523)

<div class="topic-metadata">

**Author:** [@sdr1617](https://discuss.elastic.co/u/sdr1617)\
**Replies:** 0\
**Last updated:** [December 6, 2017, 1:42pm UTC](https://discuss.elastic.co/t/querying-es-using-net-client-application-from-a-server-where-there-are-no-nodes-is-that-possible/110523 "2017-12-06T13:42:53Z")

</div>

Hi, I am new to Elastic search. I have gone through the documentations and was able to setup a cluster as below: My ES cluster consists of 2 nodes, both are master eligible and data nodes, both located in 2 different A…

---

## [Keyword aggregation returns empty](https://discuss.elastic.co/t/keyword-aggregation-returns-empty/110480)

<div class="topic-metadata">

**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\
**Replies:** 7\
**Last updated:** [December 6, 2017, 1:25pm UTC](https://discuss.elastic.co/t/keyword-aggregation-returns-empty/110480 "2017-12-06T13:25:51Z")

</div>

Hi everyone! I have a problem with elasticsearch. I get data via filebeat and logstash to kibana. I add mapping as keyword to certien words in the data, and even though I see thous keyword under "message" field in kiba…

---

## [Relation between two documents](https://discuss.elastic.co/t/relation-between-two-documents/110509)

<div class="topic-metadata">

**Author:** [@cilzzz](https://discuss.elastic.co/u/cilzzz)\
**Replies:** 0\
**Last updated:** [December 6, 2017, 11:24am UTC](https://discuss.elastic.co/t/relation-between-two-documents/110509 "2017-12-06T11:24:37Z")

</div>

Hi, I have two documents(csv),one for the database and the others for the servers infos.the two documents are in the same index and contain a common field. What i need to do is to enter the database file filter by appli…

---

## [Get similar terms in a search result](https://discuss.elastic.co/t/get-similar-terms-in-a-search-result/110505)

<div class="topic-metadata">

**Author:** [@camdarley](https://discuss.elastic.co/u/camdarley)\
**Replies:** 0\
**Last updated:** [December 6, 2017, 11:10am UTC](https://discuss.elastic.co/t/get-similar-terms-in-a-search-result/110505 "2017-12-06T11:10:59Z")

</div>

Hi, I would like to send a search query, and get the terms which are common to all results for a given field. I can't find a way to do that in docs. Does someone have an idea?

---

## [Condition In Watcher](https://discuss.elastic.co/t/condition-in-watcher/110379)

<div class="topic-metadata">

**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\
**Replies:** 5\
**Last updated:** [December 6, 2017, 10:59am UTC](https://discuss.elastic.co/t/condition-in-watcher/110379 "2017-12-06T10:59:32Z")

</div>

"condition": { "script": { "source": """ def offenders = \[\]; for (def source\_ip: ctx.payload.aggregations.source\_ip.buckets) { for (def X\_ID: sour…

---

## [Scroll api performance is very slow](https://discuss.elastic.co/t/scroll-api-performance-is-very-slow/110482)

<div class="topic-metadata">

**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\
**Replies:** 1\
**Last updated:** [December 6, 2017, 10:46am UTC](https://discuss.elastic.co/t/scroll-api-performance-is-very-slow/110482 "2017-12-06T10:46:18Z")

</div>

Hi Team, I used scroll api to get records more than 10000.I am trying to fetch approx 4 lack records and size parameter set to 50 thousand. but the performance is very slow.could you let me know any other api or any oth…

---

## [Scroll api performance is very poor](https://discuss.elastic.co/t/scroll-api-performance-is-very-poor/110495)

<div class="topic-metadata">

**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\
**Replies:** 0\
**Last updated:** [December 6, 2017, 10:24am UTC](https://discuss.elastic.co/t/scroll-api-performance-is-very-poor/110495 "2017-12-06T10:24:25Z")

</div>

Hi Team, I used scroll api to get records more than 10000.I am trying to fetch approx 4 lack records and size parameter set to 50 thousand. but the performance is very slow.could you let me know any other api or any oth…

---

## [Capacity Planning](https://discuss.elastic.co/t/capacity-planning/110492)

<div class="topic-metadata">

**Author:** [@rish\_haze](https://discuss.elastic.co/u/rish_haze)\
**Replies:** 0\
**Last updated:** [December 6, 2017, 10:05am UTC](https://discuss.elastic.co/t/capacity-planning/110492 "2017-12-06T10:05:59Z")

</div>

Using a single shard with no replica in one node , I am getting the capacity of a single shard for a particular index to be higher than the capacity of 3 shards in the same node for the same index with the same hardware…

---

## [Cluster setting reset automatically](https://discuss.elastic.co/t/cluster-setting-reset-automatically/110490)

<div class="topic-metadata">

**Author:** [@vivekthangathurai](https://discuss.elastic.co/u/vivekthangathurai)\
**Replies:** 0\
**Last updated:** [December 6, 2017, 10:00am UTC](https://discuss.elastic.co/t/cluster-setting-reset-automatically/110490 "2017-12-06T10:00:14Z")

</div>

I have my ealatic host which is logging my test logs using filebeat.. The tests are being run every min so there is lot of logs generated. I have a pipeline setting for ingest. the settings seems to reset everyday to de…

---

## [Preferring 1st, 2nd, 3rd over 1, 2, 3](https://discuss.elastic.co/t/preferring-1st-2nd-3rd-over-1-2-3/110485)

<div class="topic-metadata">

**Author:** [@samiujan](https://discuss.elastic.co/u/samiujan)\
**Replies:** 0\
**Last updated:** [December 6, 2017, 9:51am UTC](https://discuss.elastic.co/t/preferring-1st-2nd-3rd-over-1-2-3/110485 "2017-12-06T09:51:53Z")

</div>

Hi I have a shop field in my data where each value is like: 14th Street Pizza 14th Street Pizza (in a different city) 24 Wall Street Pizza Pizza Street 14 Pizza Hot I do a search for "14 street pizza", I want the …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1862)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1864)
