# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1869

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1870

---

## [Getting incorrect results while doing nested must and should](https://discuss.elastic.co/t/getting-incorrect-results-while-doing-nested-must-and-should/109788)

<div class="topic-metadata">

**Author:** [@rama\_krishna](https://discuss.elastic.co/u/rama_krishna)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 2:06pm UTC](https://discuss.elastic.co/t/getting-incorrect-results-while-doing-nested-must-and-should/109788 "2017-12-01T14:06:55Z")

</div>

If written in SQL it would be: Select \* from Cars where id=10 and((color='blue' and company='BMW') OR (color='red' and company ='Mercedes')) I've tried with Nested must and should like: { "query": { "bool": { …

---

## [Reporting: generated PDFs can be downloaded by everyone](https://discuss.elastic.co/t/reporting-generated-pdfs-can-be-downloaded-by-everyone/109112)

<div class="topic-metadata">

**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 1:57pm UTC](https://discuss.elastic.co/t/reporting-generated-pdfs-can-be-downloaded-by-everyone/109112 "2017-12-01T13:57:29Z")

</div>

...is it possible to restrict access to the generated reports? Thanks! it's Kibana: 5.6.x

---

## [Query missing nested objects along with other filter criteria](https://discuss.elastic.co/t/query-missing-nested-objects-along-with-other-filter-criteria/108801)

<div class="topic-metadata">

**Author:** [@Vijay\_arora1](https://discuss.elastic.co/u/Vijay_arora1)\
**Replies:** 3\
**Last updated:** [December 1, 2017, 1:42pm UTC](https://discuss.elastic.co/t/query-missing-nested-objects-along-with-other-filter-criteria/108801 "2017-12-01T13:42:05Z")

</div>

I have been working on migrating from elastic search 2.2 to 5.x and re-writing the queries. There is one place where I have hit a road block and would really appreciate help. Here is the scenario: We have an index whi…

---

## [FVH does not highlight every match](https://discuss.elastic.co/t/fvh-does-not-highlight-every-match/109926)

<div class="topic-metadata">

**Author:** [@LukasT](https://discuss.elastic.co/u/LukasT)\
**Replies:** 0\
**Last updated:** [December 1, 2017, 12:29pm UTC](https://discuss.elastic.co/t/fvh-does-not-highlight-every-match/109926 "2017-12-01T12:29:10Z")

</div>

I have an index where i store books and i want to search them with query string with regex and highlight the result. When the index is small, for example about 50 books, everything is fine, the fast vector highlighter hi…

---

## [Elastic search upgradtion](https://discuss.elastic.co/t/elastic-search-upgradtion/109923)

<div class="topic-metadata">

**Author:** [@aravind\_apalya](https://discuss.elastic.co/u/aravind_apalya)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 12:20pm UTC](https://discuss.elastic.co/t/elastic-search-upgradtion/109923 "2017-12-01T12:20:15Z")

</div>

Hi Team, I am using the elastic search of version 0.95 from the past few years. Now I want to upgrade my elastic search. My worry is, is there any code change required to upgrade elastic search. And can I directly up…

---

## [Query Time Performance Degraded drastically after migration](https://discuss.elastic.co/t/query-time-performance-degraded-drastically-after-migration/109925)

<div class="topic-metadata">

**Author:** [@montenegrodr](https://discuss.elastic.co/u/montenegrodr)\
**Replies:** 0\
**Last updated:** [December 1, 2017, 12:09pm UTC](https://discuss.elastic.co/t/query-time-performance-degraded-drastically-after-migration/109925 "2017-12-01T12:09:00Z")

</div>

Hi, I recently migrated from my self hosted cluster to Elastic Cloud. The migration came along with an upgrade from ElasticSearch 2.4 to 5.6. Everything seems to work fine despite the fact that the queries on new cluster…

---

## [Must not query not working](https://discuss.elastic.co/t/must-not-query-not-working/107759)

<div class="topic-metadata">

**Author:** [@aravind\_apalya](https://discuss.elastic.co/u/aravind_apalya)\
**Replies:** 8\
**Last updated:** [December 1, 2017, 11:46am UTC](https://discuss.elastic.co/t/must-not-query-not-working/107759 "2017-12-01T11:46:37Z")

</div>

Hi, I have a bunch of documents in my database. I need to filter the contents which are not matching with my condition. For this, I have used filter must\_not , but not working. Below is the code snippet. filter.must…

---

## [Do I need SSL enabled if I am connecting through private IP addresses?](https://discuss.elastic.co/t/do-i-need-ssl-enabled-if-i-am-connecting-through-private-ip-addresses/109919)

<div class="topic-metadata">

**Author:** [@TheNmaptomyHeartBeat](https://discuss.elastic.co/u/TheNmaptomyHeartBeat)\
**Replies:** 0\
**Last updated:** [December 1, 2017, 11:39am UTC](https://discuss.elastic.co/t/do-i-need-ssl-enabled-if-i-am-connecting-through-private-ip-addresses/109919 "2017-12-01T11:39:23Z")

</div>

Hey, A bit of a newbie here. To expand on what the title says, I have a server with Filebeat sending logs to a server that has Logstash, Elasticsearch and Kibana. I am using the private address to connect Filebeat to …

---

## [Elasticsearch aggregation not matching with unique count metrics](https://discuss.elastic.co/t/elasticsearch-aggregation-not-matching-with-unique-count-metrics/109796)

<div class="topic-metadata">

**Author:** [@mormor1971](https://discuss.elastic.co/u/mormor1971)\
**Replies:** 3\
**Last updated:** [December 1, 2017, 11:15am UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-not-matching-with-unique-count-metrics/109796 "2017-12-01T11:15:39Z")

</div>

Hello All, I have a weird issue where if I have a large dataset with authentications against a nas device and I ask for a specific region with nas:xxxx\* and the authentications against that region I get two different re…

---

## [Elasticsearch 6.0 and joining queries](https://discuss.elastic.co/t/elasticsearch-6-0-and-joining-queries/109353)

<div class="topic-metadata">

**Author:** [@danielburchardt](https://discuss.elastic.co/u/danielburchardt)\
**Replies:** 4\
**Last updated:** [December 1, 2017, 10:59am UTC](https://discuss.elastic.co/t/elasticsearch-6-0-and-joining-queries/109353 "2017-12-01T10:59:52Z")

</div>

Hello, I trying create relation parent-child as in docs (https://www.elastic.co/guide/en/elasticsearch/reference/current/parent-join.html) but when i querying: { "query": { "parent\_id": { "type": "answer",…

---

## [Exists Query for Object type](https://discuss.elastic.co/t/exists-query-for-object-type/109832)

<div class="topic-metadata">

**Author:** [@fpillo](https://discuss.elastic.co/u/fpillo)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 10:52am UTC](https://discuss.elastic.co/t/exists-query-for-object-type/109832 "2017-12-01T10:52:10Z")

</div>

Hi guys, I know that for execute a "exists" query in a nested type I could use a nested query. But how about simple Object type? I am doing this: { "from" : 0, "size" : 10, "query" : { "bool" : { "must" : \[ { "…

---

## [XContentBuilder close() works only for valid json object](https://discuss.elastic.co/t/xcontentbuilder-close-works-only-for-valid-json-object/109876)

<div class="topic-metadata">

**Author:** [@ahavewala](https://discuss.elastic.co/u/ahavewala)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 10:45am UTC](https://discuss.elastic.co/t/xcontentbuilder-close-works-only-for-valid-json-object/109876 "2017-12-01T10:45:13Z")

</div>

Whenever I use the XContentBuilder like such - try { contentBuilder.startObject().startObject(); //some logic, adding queries, etc contentBuilder.endObject().endObject(); } catch (Exception e) { //do something }…

---

## [Bulk indexing depending on a "delete by query"](https://discuss.elastic.co/t/bulk-indexing-depending-on-a-delete-by-query/109901)

<div class="topic-metadata">

**Author:** [@antonkallenberg](https://discuss.elastic.co/u/antonkallenberg)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 9:51am UTC](https://discuss.elastic.co/t/bulk-indexing-depending-on-a-delete-by-query/109901 "2017-12-01T09:51:15Z")

</div>

Hi! Is it safe to have an bulk indexing operation depending on a "delete by query"? Lets say that I have 10 car document within my index, 5 of them of brand BMW, I perform a bulk indexing of 10 more BMW cars but before…

---

## [What is difference between master node and data node etc](https://discuss.elastic.co/t/what-is-difference-between-master-node-and-data-node-etc/109896)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 5\
**Last updated:** [December 1, 2017, 9:32am UTC](https://discuss.elastic.co/t/what-is-difference-between-master-node-and-data-node-etc/109896 "2017-12-01T09:32:37Z")

</div>

Hi everyone, I have refer the website: https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-node.html#data-node But I still have a question that what are the difference between master node, data node…

---

## [Unable to use restHighLevelClient](https://discuss.elastic.co/t/unable-to-use-resthighlevelclient/109572)

<div class="topic-metadata">

**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 9:25am UTC](https://discuss.elastic.co/t/unable-to-use-resthighlevelclient/109572 "2017-12-01T09:25:56Z")

</div>

Hi Team, I tried to use scroll api, For which I need to use RestHighLevelClient but while using it, I am getting Error like: java.lang.NoSuchMethodError: org.elasticsearch.common.xcontent.NamedXContentRegistry$Entry.(L…

---

## [Is it possible to assign a query to a variable?](https://discuss.elastic.co/t/is-it-possible-to-assign-a-query-to-a-variable/109042)

<div class="topic-metadata">

**Author:** [@bilpor](https://discuss.elastic.co/u/bilpor)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 9:13am UTC](https://discuss.elastic.co/t/is-it-possible-to-assign-a-query-to-a-variable/109042 "2017-12-01T09:13:59Z")

</div>

HI All, I have created an index and my basic query starts: GET kmnewindex/\_search { "query": { "query\_string": {"query": "going home", "fields": \["squestion", "ssubject"\]} }, "\_source": \["idisid", "itopid" ,"ipid",…

---

## [Elasticsearch query performance using filter query](https://discuss.elastic.co/t/elasticsearch-query-performance-using-filter-query/109889)

<div class="topic-metadata">

**Author:** [@Shantanu\_Deshmukh](https://discuss.elastic.co/u/Shantanu_Deshmukh)\
**Replies:** 3\
**Last updated:** [December 1, 2017, 8:59am UTC](https://discuss.elastic.co/t/elasticsearch-query-performance-using-filter-query/109889 "2017-12-01T08:59:05Z")

</div>

I have an index upon which I run these two types of queries and gives me same result. I want to know which one can perform better as on production there would be millions of searches performed per day. EDIT - Elasticsea…

---

## [How to custom query result STATUS?](https://discuss.elastic.co/t/how-to-custom-query-result-status/109865)

<div class="topic-metadata">

**Author:** [@tavandung12](https://discuss.elastic.co/u/tavandung12)\
**Replies:** 3\
**Last updated:** [December 1, 2017, 8:52am UTC](https://discuss.elastic.co/t/how-to-custom-query-result-status/109865 "2017-12-01T08:52:21Z")

</div>

I use elasticsearch 5.6.3 to write ScriptPlugin with SearchScript. when I throw an exception I get: { "error" : { "root\_cause" : \[ { "type" : "query\_shard\_exception", "reason" : "script\_scor…

---

## [Query document and filter nested data](https://discuss.elastic.co/t/query-document-and-filter-nested-data/109794)

<div class="topic-metadata">

**Author:** [@jakobdo](https://discuss.elastic.co/u/jakobdo)\
**Replies:** 3\
**Last updated:** [December 1, 2017, 8:43am UTC](https://discuss.elastic.co/t/query-document-and-filter-nested-data/109794 "2017-12-01T08:43:25Z")

</div>

Hello, im trying to extract data from this api/mapping: http://distribution.virk.dk/cvr-permanent/\_mapping I want to be able to search for a specific name, like this: { "query": { "match": { "Vrvirksomhed.v…

---

## [Elesticsaerch Java API - XContentBuilder::string()](https://discuss.elastic.co/t/elesticsaerch-java-api-xcontentbuilder-string/109597)

<div class="topic-metadata">

**Author:** [@Stefaan\_Neyts](https://discuss.elastic.co/u/Stefaan_Neyts)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 8:35am UTC](https://discuss.elastic.co/t/elesticsaerch-java-api-xcontentbuilder-string/109597 "2017-12-01T08:35:10Z")

</div>

Hi Regarding the Elasticsearch Java API 6.0.0 The class org.elasticsearch.common.xcontent.XContentBuilder has a method string() and the signature says it throws an IOException. Here is the implementation: /\*\* \* Retur…

---

## [Completion analyzer](https://discuss.elastic.co/t/completion-analyzer/109689)

<div class="topic-metadata">

**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 8:31am UTC](https://discuss.elastic.co/t/completion-analyzer/109689 "2017-12-01T08:31:17Z")

</div>

My completion analyzer not working...mapping is like this... PUT music { "settings":{ "analysis":{ "analyzer":{ "completion\_analyzer": { "tokenizer": "my\_tokenizer" } }, "tokenizer": { "my…

---

## [Netty Transport Issue - ES 5.6.4, Java8, Data Node Only](https://discuss.elastic.co/t/netty-transport-issue-es-5-6-4-java8-data-node-only/108646)

<div class="topic-metadata">

**Author:** [@andynz2017](https://discuss.elastic.co/u/andynz2017)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 8:27am UTC](https://discuss.elastic.co/t/netty-transport-issue-es-5-6-4-java8-data-node-only/108646 "2017-12-01T08:27:05Z")

</div>

Hi All, Curly issue experienced after upgrading a cluster to 5.6.4. Ip addresses and hostnames have been sanitized. 2 out of 3 data nodes start OK and communicate back to three dedicated master nodes. If I disable SSL/…

---

## [Asking for Filebeat and Logstash configuration design advice](https://discuss.elastic.co/t/asking-for-filebeat-and-logstash-configuration-design-advice/109722)

<div class="topic-metadata">

**Author:** [@przemolb](https://discuss.elastic.co/u/przemolb)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 8:24am UTC](https://discuss.elastic.co/t/asking-for-filebeat-and-logstash-configuration-design-advice/109722 "2017-12-01T08:24:34Z")

</div>

Hello, I am new to Elastic stack so please be gentle :slight\_smile: I'd like to ask you for an advice for Filebeat and Logstash configuration in the following world: There are X servers: S1, S2, S3, ... Sx Servers ha…

---

## [Node Ingestion](https://discuss.elastic.co/t/node-ingestion/109701)

<div class="topic-metadata">

**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 8:23am UTC](https://discuss.elastic.co/t/node-ingestion/109701 "2017-12-01T08:23:43Z")

</div>

Hi, I would like to know how much processing power does node ingestion take? We like to preprocess our logs during sending in elasticsearch and I would like to create pipelines with grok patterns. The problem here is …

---

## [Help to Combine Queries](https://discuss.elastic.co/t/help-to-combine-queries/109807)

<div class="topic-metadata">

**Author:** [@bevikra](https://discuss.elastic.co/u/bevikra)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 8:08am UTC](https://discuss.elastic.co/t/help-to-combine-queries/109807 "2017-12-01T08:08:08Z")

</div>

Hello, Here is my Schema, { "cmslocal": { "mappings": { "video": { "properties": { "assetProps": { "properties": { "assetType": { "type": "string" }, "configPath": { …

---

## [It is possible to calculate something like avg(a) + avg(b) group by c](https://discuss.elastic.co/t/it-is-possible-to-calculate-something-like-avg-a-avg-b-group-by-c/109872)

<div class="topic-metadata">

**Author:** [@izhangzhihao](https://discuss.elastic.co/u/izhangzhihao)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 7:54am UTC](https://discuss.elastic.co/t/it-is-possible-to-calculate-something-like-avg-a-avg-b-group-by-c/109872 "2017-12-01T07:54:45Z")

</div>

I don't know how to make my explanation, for example in sql SELECT c,avg(a) + avg(b) as count FROM name group by c; It is possible to write using in elasticsearch? Thanks!

---

## [Search from indexed geo-shape which are intersect with i given's latitude&longitude , but return no hit](https://discuss.elastic.co/t/search-from-indexed-geo-shape-which-are-intersect-with-i-givens-latitude-longitude-but-return-no-hit/109877)

<div class="topic-metadata">

**Author:** [@fangchunliu](https://discuss.elastic.co/u/fangchunliu)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 7:53am UTC](https://discuss.elastic.co/t/search-from-indexed-geo-shape-which-are-intersect-with-i-givens-latitude-longitude-but-return-no-hit/109877 "2017-12-01T07:53:14Z")

</div>

1.this is my index { "settings":{ "index":{ "number\_of\_shards":9, "number\_of\_replicas":3 } }, "mappings": { "wm\_aor\_area": { "properties": { "aor\_id": { "type": "integer" }, "wm\_aor\_polygon": { "type": "ge…

---

## [Curator - Unable to run any commands](https://discuss.elastic.co/t/curator-unable-to-run-any-commands/109512)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 3\
**Last updated:** [December 1, 2017, 7:18am UTC](https://discuss.elastic.co/t/curator-unable-to-run-any-commands/109512 "2017-12-01T07:18:38Z")

</div>

Hi, I just installed curator but I'm unable to run anything. Curator ACTION\_FILE.YML results in error no such command. Other things I don't understand are: Version is listed as 5.4.0 but running --version I always …

---

## [How to set up multiple clusters](https://discuss.elastic.co/t/how-to-set-up-multiple-clusters/108959)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 13\
**Last updated:** [December 1, 2017, 7:08am UTC](https://discuss.elastic.co/t/how-to-set-up-multiple-clusters/108959 "2017-12-01T07:08:06Z")

</div>

Hi, I am new in ES, I want to use multiple clusters to store data. My OS is windows 10. How could I set up the multiple cluster?Tune the config ? or doing something? this is the Elasticsearch.yml: \[image\] thank you …

---

## [How to change the field type ,and there are some question](https://discuss.elastic.co/t/how-to-change-the-field-type-and-there-are-some-question/109677)

<div class="topic-metadata">

**Author:** [@24a1128c2f2635cf61df](https://discuss.elastic.co/u/24a1128c2f2635cf61df)\
**Replies:** 8\
**Last updated:** [December 1, 2017, 5:00am UTC](https://discuss.elastic.co/t/how-to-change-the-field-type-and-there-are-some-question/109677 "2017-12-01T05:00:21Z")

</div>

i have two fields ,and i want to show them on the Coordinate Map. i remeber someone said that we can't change the field type ,unless changing the index . those are my two fields , "lonlat1" =\> { "lat" =\> "20", "lon"…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1868)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1870)
