# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1894 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1895 --- ## [Suggester for word or phrase from a paragraph in elastic search document](https://discuss.elastic.co/t/suggester-for-word-or-phrase-from-a-paragraph-in-elastic-search-document/107034)
**Author:** [@bnraju81](https://discuss.elastic.co/u/bnraju81)\ **Replies:** 0\ **Last updated:** [November 9, 2017, 11:35am UTC](https://discuss.elastic.co/t/suggester-for-word-or-phrase-from-a-paragraph-in-elastic-search-document/107034 "2017-11-09T11:35:34Z")
Hi All, I have a db with index for pages in a site where i index using title and page content, trying to add a suggester search from the page content , i could get a keyword suggester using completion suggesters { "d… --- ## [Is "value" in metrics (rally-metrics-\* index) aggregated?](https://discuss.elastic.co/t/is-value-in-metrics-rally-metrics-index-aggregated/106034)
**Author:** [@JohanRask](https://discuss.elastic.co/u/JohanRask)\ **Replies:** 8\ **Last updated:** [November 9, 2017, 10:49am UTC](https://discuss.elastic.co/t/is-value-in-metrics-rally-metrics-index-aggregated/106034 "2017-11-09T10:49:00Z")
Hi, I am wondering if this value an aggregated value in some time interval or if result of all queries are stored? I am using and modifying rally-eventdata-track and in particular combined-indexing-and-querying and wan… --- ## [Get all 3 million ids of a type very quickly](https://discuss.elastic.co/t/get-all-3-million-ids-of-a-type-very-quickly/107013)
**Author:** [@spotlight2001](https://discuss.elastic.co/u/spotlight2001)\ **Replies:** 1\ **Last updated:** [November 9, 2017, 10:14am UTC](https://discuss.elastic.co/t/get-all-3-million-ids-of-a-type-very-quickly/107013 "2017-11-09T10:14:04Z")
i want to get all ids of a type from elasticsearch via http i have approx. 3 million ids i am using scroll api scroll=1m size=10000 { "query": { "match\_all": { } }, "\_source": false, "sort": \["\_doc"\] } its f… --- ## [Cluster timeouts during various requests](https://discuss.elastic.co/t/cluster-timeouts-during-various-requests/106694)
**Author:** [@Robert\_Vojcik\_1](https://discuss.elastic.co/u/Robert_Vojcik_1)\ **Replies:** 5\ **Last updated:** [November 9, 2017, 10:01am UTC](https://discuss.elastic.co/t/cluster-timeouts-during-various-requests/106694 "2017-11-09T10:01:17Z")
Elasticsearch version (bin/elasticsearch --version): 5.6.3 Plugins installed: \[\] x-pack mapper-size JVM version (java -version): Oracle JRE 1.8.0-102 OS version (uname -a if on a Unix-like system): Debian Wheezy … --- ## [How do I construct complex queries to pass via rest](https://discuss.elastic.co/t/how-do-i-construct-complex-queries-to-pass-via-rest/106875)
**Author:** [@bilpor](https://discuss.elastic.co/u/bilpor)\ **Replies:** 1\ **Last updated:** [November 9, 2017, 9:52am UTC](https://discuss.elastic.co/t/how-do-i-construct-complex-queries-to-pass-via-rest/106875 "2017-11-09T09:52:03Z")
HI All, I'm using classic asp. Using the following simple example I am able to obtain data back to the asp application from elasticsearch: Response.Buffer = true dim xml, toScreen dim txt Set xml = Server.CreateOb… --- ## [Service is getting stopped automatically](https://discuss.elastic.co/t/service-is-getting-stopped-automatically/106797)
**Author:** [@Sandeep.K](https://discuss.elastic.co/u/Sandeep.K)\ **Replies:** 9\ **Last updated:** [November 9, 2017, 8:26am UTC](https://discuss.elastic.co/t/service-is-getting-stopped-automatically/106797 "2017-11-09T08:26:33Z")
Hi Team Need help on the below topic. I have elasticsearch in my environment. It was running fine but suddenly elasticsearch service "Elasticsearch 2.3.2 (elasticsearch-service-x64)" got stopped. Now i am trying to res… --- ## [Tagging and excluding Filters](https://discuss.elastic.co/t/tagging-and-excluding-filters/106938)
**Author:** [@Geert\_Van\_Huychem](https://discuss.elastic.co/u/Geert_Van_Huychem)\ **Replies:** 0\ **Last updated:** [November 8, 2017, 10:21pm UTC](https://discuss.elastic.co/t/tagging-and-excluding-filters/106938 "2017-11-08T22:21:31Z")
Hi there Can someone tell me what the Elasticsearch equivalent is for tagging and excluding filters on facets in Solr (https://wiki.apache.org/solr/SimpleFacetParameters#Tagging\_and\_excluding\_Filters)? And especially h… --- ## [Queries on the blog "Implementing Atlas Statistical Anomaly Detector Using Elasticsearch"](https://discuss.elastic.co/t/queries-on-the-blog-implementing-atlas-statistical-anomaly-detector-using-elasticsearch/106890)
**Author:** [@saii](https://discuss.elastic.co/u/saii)\ **Replies:** 0\ **Last updated:** [November 8, 2017, 3:11pm UTC](https://discuss.elastic.co/t/queries-on-the-blog-implementing-atlas-statistical-anomaly-detector-using-elasticsearch/106890 "2017-11-08T15:11:58Z")
I am new to elasticsearch..I have read a blog "Implementing a statistical anomaly detector part-1" in the following link https://www.elastic.co/blog/implementing-a-statistical-anomaly-detector-part-1.. I tried to impl… --- ## [Parent child relation for same index type](https://discuss.elastic.co/t/parent-child-relation-for-same-index-type/106987)
**Author:** [@krishnaraj221193](https://discuss.elastic.co/u/krishnaraj221193)\ **Replies:** 0\ **Last updated:** [November 9, 2017, 8:00am UTC](https://discuss.elastic.co/t/parent-child-relation-for-same-index-type/106987 "2017-11-09T08:00:00Z")
Hello evryone, I have problem with same index type relation in elasticsearch which is not supported but for me i have folder index type in which we store folder inside a folder and i need to find parent folder of the fo… --- ## [Configure retention period for different index](https://discuss.elastic.co/t/configure-retention-period-for-different-index/106491)
**Author:** [@YaroslavN](https://discuss.elastic.co/u/YaroslavN)\ **Replies:** 4\ **Last updated:** [November 9, 2017, 7:25am UTC](https://discuss.elastic.co/t/configure-retention-period-for-different-index/106491 "2017-11-09T07:25:58Z")
Hi, Could we set up different retention policies for indices in ElasticClooud? For example: index\_A should auto-deleted after 7 days, index\_B should be deleted after 10 days, etc. Thank you. --- ## [Kibana Client side headers and not getting forwarded to Elasticsearch!](https://discuss.elastic.co/t/kibana-client-side-headers-and-not-getting-forwarded-to-elasticsearch/106165)
**Author:** [@Vivek\_Unni](https://discuss.elastic.co/u/Vivek_Unni)\ **Replies:** 8\ **Last updated:** [November 9, 2017, 7:22am UTC](https://discuss.elastic.co/t/kibana-client-side-headers-and-not-getting-forwarded-to-elasticsearch/106165 "2017-11-09T07:22:28Z")
We are implementing Custom Realm in Kibana 5.6 and we are using a Siteminder login page and bypassing the Kibana login page. We are seeing the Kibana client side headers in Kibana logs. However, the ThreadContext in Elas… --- ## [ES HEAP size allocation](https://discuss.elastic.co/t/es-heap-size-allocation/106962)
**Author:** [@493607120](https://discuss.elastic.co/u/493607120)\ **Replies:** 4\ **Last updated:** [November 9, 2017, 7:15am UTC](https://discuss.elastic.co/t/es-heap-size-allocation/106962 "2017-11-09T07:15:33Z")
Hi folks, Recently I installed an ES monitoring plugin Cerebro on an ES client node. After looked at the overview of the whole cluster health status. I found there is half ES data node's heap size show in red flag.we h… --- ## [Use spark sql query elasticsearch sum group by value isn't accurate](https://discuss.elastic.co/t/use-spark-sql-query-elasticsearch-sum-group-by-value-isnt-accurate/106980)
**Author:** [@zrk](https://discuss.elastic.co/u/zrk)\ **Replies:** 0\ **Last updated:** [November 9, 2017, 7:05am UTC](https://discuss.elastic.co/t/use-spark-sql-query-elasticsearch-sum-group-by-value-isnt-accurate/106980 "2017-11-09T07:05:13Z")
When query elasticsearch， I use Spark sql to query elasticsearch，My Spark SQL is： “select log\_date,domain,firm\_name,sum(traffic) as traffic,concat\_ws(':',collect\_set(file\_name)) as file\_name from traff group by log\_date,… --- ## [Elastic search error while adding http.cors.allow-origin : "\*" in elasticsearch.yml(5.3.3)](https://discuss.elastic.co/t/elastic-search-error-while-adding-http-cors-allow-origin-in-elasticsearch-yml-5-3-3/106900)
**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\ **Replies:** 3\ **Last updated:** [November 9, 2017, 6:57am UTC](https://discuss.elastic.co/t/elastic-search-error-while-adding-http-cors-allow-origin-in-elasticsearch-yml-5-3-3/106900 "2017-11-09T06:57:28Z")
After adding http.cors.enabled : true http.cors.allow-origin : "\*" http.cors.allow-methods : OPTIONS, HEAD, GET, POST, PUT, DELETE http.cors.allow-headers : X-Requested-With,X-Auth-Token,Content-Type, Content-Length … --- ## [How to use two custom analyzer for same field?](https://discuss.elastic.co/t/how-to-use-two-custom-analyzer-for-same-field/106018)
**Author:** [@abc1](https://discuss.elastic.co/u/abc1)\ **Replies:** 2\ **Last updated:** [November 9, 2017, 6:36am UTC](https://discuss.elastic.co/t/how-to-use-two-custom-analyzer-for-same-field/106018 "2017-11-09T06:36:51Z")
Here is my mappings. I want use both the analyzer code and point analyzer for the field message but they are not showing any results.Individually both the analyzers are working fine but together they are not giving any o… --- ## [Cost effective method for configuring, storing and analyzing logs](https://discuss.elastic.co/t/cost-effective-method-for-configuring-storing-and-analyzing-logs/106804)
**Author:** [@annu](https://discuss.elastic.co/u/annu)\ **Replies:** 2\ **Last updated:** [November 9, 2017, 6:25am UTC](https://discuss.elastic.co/t/cost-effective-method-for-configuring-storing-and-analyzing-logs/106804 "2017-11-09T06:25:48Z")
Hi if i've 10 different servers, and i want to analyze the iis logs from each server, which is the cost effective method? sending the iis logs from 10 different servers to single index in elasticsearch or for each serv… --- ## [X-Pack Generate PDF report fails, HeadlessError](https://discuss.elastic.co/t/x-pack-generate-pdf-report-fails-headlesserror/106323)
**Author:** [@ponten](https://discuss.elastic.co/u/ponten)\ **Replies:** 2\ **Last updated:** [November 9, 2017, 6:01am UTC](https://discuss.elastic.co/t/x-pack-generate-pdf-report-fails-headlesserror/106323 "2017-11-09T06:01:49Z")
Elasticsearch, KIbana, X-Pack ver: 5.5.0 Operating system: Windows 10 I have a saved search. There are 20 hits in the search and I choose to "Generate Printable PDF". The following error message: Unhandled rejection … --- ## [Elastic Search explain query to get tf and idf values](https://discuss.elastic.co/t/elastic-search-explain-query-to-get-tf-and-idf-values/106960)
**Author:** [@ESlearner](https://discuss.elastic.co/u/ESlearner)\ **Replies:** 1\ **Last updated:** [November 9, 2017, 4:25am UTC](https://discuss.elastic.co/t/elastic-search-explain-query-to-get-tf-and-idf-values/106960 "2017-11-09T04:25:24Z")
Hello - I created a java function to compute the TF/IDF values . Can I request help to check my explain part as I get an compile and syntax error for the below request to ES. #!/bin/bash curl -XGET 'localhost:9200/myta… --- ## [Creating multiple snapshots one after other immediatly](https://discuss.elastic.co/t/creating-multiple-snapshots-one-after-other-immediatly/106926)
**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\ **Replies:** 4\ **Last updated:** [November 9, 2017, 4:04am UTC](https://discuss.elastic.co/t/creating-multiple-snapshots-one-after-other-immediatly/106926 "2017-11-09T04:04:07Z")
Hi All....... Here i am trying to create two snapshots at a time from Kibana devtool here are my commands looks like PUT /\_snapshot/repo/dev\_1?wait\_for\_completion=true PUT /\_snapshot/repo/dev\_2?wait\_for\_completion=tru… --- ## [Elasticsearch 1.7 to 2.4 upgrade and slow indexing](https://discuss.elastic.co/t/elasticsearch-1-7-to-2-4-upgrade-and-slow-indexing/105487)
**Author:** [@mario12](https://discuss.elastic.co/u/mario12)\ **Replies:** 5\ **Last updated:** [November 9, 2017, 3:21am UTC](https://discuss.elastic.co/t/elasticsearch-1-7-to-2-4-upgrade-and-slow-indexing/105487 "2017-11-09T03:21:13Z")
We recently upgraded elasticsearch 1.7 to 2.4 . Our batch indexing used to take 20 ms before upgrade. After upgrade it’s taking 500-800 ms. Please let me know if there is known issue with es 2.4 or if there is anything t… --- ## [Snapshot queue](https://discuss.elastic.co/t/snapshot-queue/106954)
**Author:** [@iamredlus](https://discuss.elastic.co/u/iamredlus)\ **Replies:** 2\ **Last updated:** [November 9, 2017, 2:47am UTC](https://discuss.elastic.co/t/snapshot-queue/106954 "2017-11-09T02:47:57Z")
Hi, We've been trying to automate index snapshot creation through the elasticseasrch snapshot API. However, we get an exception when trying to run more than one snapshot in parallel: elasticsearch.exceptions.Transport… --- ## [Promote replica to primary](https://discuss.elastic.co/t/promote-replica-to-primary/106942)
**Author:** [@erikstephens](https://discuss.elastic.co/u/erikstephens)\ **Replies:** 2\ **Last updated:** [November 9, 2017, 2:11am UTC](https://discuss.elastic.co/t/promote-replica-to-primary/106942 "2017-11-09T02:11:32Z")
After a network partition, primary shards are heavily skewed to the side where the master was. Partition is now healed but there's too much traffic to & from the side with more of the primaries. To resolve that, would … --- ## [Should merges.total\_throttled\_time be incrementing?](https://discuss.elastic.co/t/should-merges-total-throttled-time-be-incrementing/106944)
**Author:** [@logfreq](https://discuss.elastic.co/u/logfreq)\ **Replies:** 0\ **Last updated:** [November 8, 2017, 11:33pm UTC](https://discuss.elastic.co/t/should-merges-total-throttled-time-be-incrementing/106944 "2017-11-08T23:33:25Z")
Why would merges.total\_throttled\_time increment when "indices.store.throttle.type" : "none"? --- ## [Difficulty with elasticSearch SSL with .Net](https://discuss.elastic.co/t/difficulty-with-elasticsearch-ssl-with-net/106896)
**Author:** [@Akshay\_Deep\_Lamba](https://discuss.elastic.co/u/Akshay_Deep_Lamba)\ **Replies:** 1\ **Last updated:** [November 8, 2017, 10:28pm UTC](https://discuss.elastic.co/t/difficulty-with-elasticsearch-ssl-with-net/106896 "2017-11-08T22:28:09Z")
I have Two Servers ..One Installed with Elastic Search on Ubuntu(ip address 192.168.0.2) and Other Working as a Webserver IIS having .NET Application ... I am Able to Access the Elastic Search on Ubuntu using the Web B… --- ## [How to reduce the log size?](https://discuss.elastic.co/t/how-to-reduce-the-log-size/106903)
**Author:** [@manojcts91](https://discuss.elastic.co/u/manojcts91)\ **Replies:** 9\ **Last updated:** [November 8, 2017, 9:29pm UTC](https://discuss.elastic.co/t/how-to-reduce-the-log-size/106903 "2017-11-08T21:29:26Z")
Hi Team, Sorry if this question is already answered. I have a serious problem, My each log in Elasticsearch is about 2 MB (My indices now are around 350 GB), I am confused Is that the expected behavior from Elasticsearc… --- ## [Total hits with field collapsing](https://discuss.elastic.co/t/total-hits-with-field-collapsing/105061)
**Author:** [@Ons](https://discuss.elastic.co/u/Ons)\ **Replies:** 3\ **Last updated:** [November 8, 2017, 9:19pm UTC](https://discuss.elastic.co/t/total-hits-with-field-collapsing/105061 "2017-11-08T21:19:48Z")
Hi all, I am using the field collapsing feature to group my results by a certain field and get only the top ranked hits. In the documentation, it is mentioned that ''The total number of hits in the response indicates t… --- ## [Warnings in ElasticSearch/Logstash](https://discuss.elastic.co/t/warnings-in-elasticsearch-logstash/106566)
**Author:** [@ElkLogs](https://discuss.elastic.co/u/ElkLogs)\ **Replies:** 7\ **Last updated:** [November 8, 2017, 8:29pm UTC](https://discuss.elastic.co/t/warnings-in-elasticsearch-logstash/106566 "2017-11-08T20:29:10Z")
I am getting warnings in the logstash logs that it cant export to elasticsearch. This is probably an issue with a template, but I don't know where to start troubleshooting or which application the problem is actually wit… --- ## [Search to only return when all shards are successful](https://discuss.elastic.co/t/search-to-only-return-when-all-shards-are-successful/106922)
**Author:** [@gansvv](https://discuss.elastic.co/u/gansvv)\ **Replies:** 2\ **Last updated:** [November 8, 2017, 7:12pm UTC](https://discuss.elastic.co/t/search-to-only-return-when-all-shards-are-successful/106922 "2017-11-08T19:12:06Z")
I am using ES 5.5 and prepareSearch.get to search for results. https://www.elastic.co/guide/en/elasticsearch/reference/5.5/search.html The search API call in ES returns data on successful and failed shards, but the tra… --- ## [New Install: unable to load JNA native support library](https://discuss.elastic.co/t/new-install-unable-to-load-jna-native-support-library/106738)
**Author:** [@boogybren](https://discuss.elastic.co/u/boogybren)\ **Replies:** 4\ **Last updated:** [November 8, 2017, 6:34pm UTC](https://discuss.elastic.co/t/new-install-unable-to-load-jna-native-support-library/106738 "2017-11-08T18:34:51Z")
CentOS Linux release 7.4.1708 (Core) java version "1.8.0\_152" elasticsearch-5.6.3 I am brand new to elasticsearch and hence, this is a brand new install. I installed elasticsearch using the rpm. After installation, … --- ## [Watch schedule trigger with TimeZone](https://discuss.elastic.co/t/watch-schedule-trigger-with-timezone/106870)
**Author:** [@mhgeay](https://discuss.elastic.co/u/mhgeay)\ **Replies:** 2\ **Last updated:** [November 8, 2017, 5:49pm UTC](https://discuss.elastic.co/t/watch-schedule-trigger-with-timezone/106870 "2017-11-08T17:49:36Z")
Hello all, I re-open an old topic (Schedule Trigger TimeZone). Regarding current docs for Watch schedule trigger, we still use UTC time. It could generate false alerts based on time period due of DST changes. Are you … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1893) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1895)