# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1896 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1897 --- ## [Filter instead of query for improved performance?](https://discuss.elastic.co/t/filter-instead-of-query-for-improved-performance/106751)
**Author:** [@lemongrab](https://discuss.elastic.co/u/lemongrab)\ **Replies:** 1\ **Last updated:** [November 8, 2017, 6:00am UTC](https://discuss.elastic.co/t/filter-instead-of-query-for-improved-performance/106751 "2017-11-08T06:00:12Z")
Upon reading this thread here https://stackoverflow.com/questions/14595988/queries-vs-filters , I took away from it that it's possible to submit a filter 'query' instead of a query 'query' for improved performance. My u… --- ## [Advance painless scripting in elasticsearch](https://discuss.elastic.co/t/advance-painless-scripting-in-elasticsearch/106783)
**Author:** [@deepeshuniyal](https://discuss.elastic.co/u/deepeshuniyal)\ **Replies:** 1\ **Last updated:** [November 8, 2017, 5:57am UTC](https://discuss.elastic.co/t/advance-painless-scripting-in-elasticsearch/106783 "2017-11-08T05:57:33Z")
We have started using elasticsearch in our project, we are storing user data and his friend list as nested object, and nested to nested object storing friend's friend list because we required this data when we are doing … --- ## [Bulk Update Nested List Doesn't Update Consistently](https://discuss.elastic.co/t/bulk-update-nested-list-doesnt-update-consistently/106774)
**Author:** [@MatthewHartz](https://discuss.elastic.co/u/MatthewHartz)\ **Replies:** 0\ **Last updated:** [November 8, 2017, 12:12am UTC](https://discuss.elastic.co/t/bulk-update-nested-list-doesnt-update-consistently/106774 "2017-11-08T00:12:14Z")
Hi all, I am using Nest for C# and am using their bulk update APIs. Everything works great, but an issue I cannot figure out is the nested lists that I can update occasionally, don't seem to be consistent. Occasionall… --- ## [Need help grokking gradle build](https://discuss.elastic.co/t/need-help-grokking-gradle-build/103927)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 6\ **Last updated:** [November 7, 2017, 11:41pm UTC](https://discuss.elastic.co/t/need-help-grokking-gradle-build/103927 "2017-11-07T23:41:57Z")
I am adding a test fixture to a plugin of mine and I am using the elasticsearch build tools defined in the build plugin. I am using the example-fixture as a guide: The plugin is recognized correctly and things work … --- ## [Bulk write to multiple aliases throws 500 error starting in 5.5.3](https://discuss.elastic.co/t/bulk-write-to-multiple-aliases-throws-500-error-starting-in-5-5-3/103613)
**Author:** [@BradHarris](https://discuss.elastic.co/u/BradHarris)\ **Replies:** 7\ **Last updated:** [November 7, 2017, 10:59pm UTC](https://discuss.elastic.co/t/bulk-write-to-multiple-aliases-throws-500-error-starting-in-5-5-3/103613 "2017-11-07T22:59:58Z")
Elasticsearch version (bin/elasticsearch --version): 5.5.3 Plugins installed: x-pack (it comes with the docker version of ES) JVM version (java -version): openjdk version "1.8.0\_141" OpenJDK Runtime Environment (buil… --- ## [Help with nested aggregation query](https://discuss.elastic.co/t/help-with-nested-aggregation-query/106763)
**Author:** [@Jeff\_Bolle](https://discuss.elastic.co/u/Jeff_Bolle)\ **Replies:** 0\ **Last updated:** [November 7, 2017, 10:35pm UTC](https://discuss.elastic.co/t/help-with-nested-aggregation-query/106763 "2017-11-07T22:35:14Z")
Hi, I'm trying to pull together a query to get a historical total of objects with a specific status. Our objects look something like this: { "groupName" : "someString", "quantity" : integer "history" : \[ { "d… --- ## [Unsupported config option for services.elastic-1: 'processors'](https://discuss.elastic.co/t/unsupported-config-option-for-services-elastic-1-processors/106395)
**Author:** [@grantcurell](https://discuss.elastic.co/u/grantcurell)\ **Replies:** 2\ **Last updated:** [November 7, 2017, 9:46pm UTC](https://discuss.elastic.co/t/unsupported-config-option-for-services-elastic-1-processors/106395 "2017-11-07T21:46:46Z")
I'm setting up three nodes in a docker compose file to run on a single (beefy) host. I'm following the practices outlined in the following places: Below is the snippet of my docker compose file causing me issues. v… --- ## [How to access doc values from expert script plugin](https://discuss.elastic.co/t/how-to-access-doc-values-from-expert-script-plugin/105995)
**Author:** [@Srinivasan\_Ramaswamy](https://discuss.elastic.co/u/Srinivasan_Ramaswamy)\ **Replies:** 1\ **Last updated:** [November 7, 2017, 9:30pm UTC](https://discuss.elastic.co/t/how-to-access-doc-values-from-expert-script-plugin/105995 "2017-11-07T21:30:41Z")
I am trying to write an expert script plugin following the instructions given in https://www.elastic.co/guide/en/elasticsearch/reference/5.6/modules-scripting-engine.html "mappings": { "type": { "propert… --- ## [Embbeed elastic search, how to install painless plugin](https://discuss.elastic.co/t/embbeed-elastic-search-how-to-install-painless-plugin/106528)
**Author:** [@eric.santos](https://discuss.elastic.co/u/eric.santos)\ **Replies:** 2\ **Last updated:** [November 7, 2017, 8:07pm UTC](https://discuss.elastic.co/t/embbeed-elastic-search-how-to-install-painless-plugin/106528 "2017-11-07T20:07:46Z")
Hello, I'm trying to setup a embedded elastic search cluster for integration tests, but I'm failing when I try to insert a painless script in this cluster, I opened this ticket because i thought might be a bug, but accor… --- ## [Been working for a while and now](https://discuss.elastic.co/t/been-working-for-a-while-and-now/106406)
**Author:** [@KalvinK](https://discuss.elastic.co/u/KalvinK)\ **Replies:** 7\ **Last updated:** [November 7, 2017, 8:03pm UTC](https://discuss.elastic.co/t/been-working-for-a-while-and-now/106406 "2017-11-07T20:03:10Z")
Hi All, I have been using elasticsearch with success for a while now, however over the last two days I found that the service is stopping. I have posted log files here after searching around for the discussion threads … --- ## [Carrot2 Plugin installation for Elasticsearch](https://discuss.elastic.co/t/carrot2-plugin-installation-for-elasticsearch/105739)
**Author:** [@bkumbar](https://discuss.elastic.co/u/bkumbar)\ **Replies:** 1\ **Last updated:** [November 7, 2017, 7:39pm UTC](https://discuss.elastic.co/t/carrot2-plugin-installation-for-elasticsearch/105739 "2017-11-07T19:39:29Z")
I am trying to install the Carrot2 plugin for Elasticsearch, found the link : https://github.com/carrot2/elasticsearch-carrot2/blob/master/README.md for the same, however, the steps are not straight forword. can some one… --- ## [X-Pack Authentication Plugin](https://discuss.elastic.co/t/x-pack-authentication-plugin/106355)
**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\ **Replies:** 3\ **Last updated:** [November 7, 2017, 7:18pm UTC](https://discuss.elastic.co/t/x-pack-authentication-plugin/106355 "2017-11-07T19:18:07Z")
I installed x-pack - followed everything here, changing passwords, etc - https://www.elastic.co/guide/en/x-pack/current/security-getting-started.html Changed all the passwords to new elastic password. Made sure corre… --- ## [Elasticsearch for Apache Hadoop 5.6.4 released](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-5-6-4-released/106741)
**Author:** [@james.baiera](https://discuss.elastic.co/u/james.baiera)\ **Replies:** 0\ **Last updated:** [November 7, 2017, 7:08pm UTC](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-5-6-4-released/106741 "2017-11-07T19:08:04Z")
I am proud to announce that ES-Hadoop 5.6.4 has been released! You can read more about these releases here. --- ## [injectDefaultVars in plugin shield - BUT the versions are correct](https://discuss.elastic.co/t/injectdefaultvars-in-plugin-shield-but-the-versions-are-correct/104931)
**Author:** [@carlfriedrichgauss](https://discuss.elastic.co/u/carlfriedrichgauss)\ **Replies:** 1\ **Last updated:** [November 7, 2017, 5:57pm UTC](https://discuss.elastic.co/t/injectdefaultvars-in-plugin-shield-but-the-versions-are-correct/104931 "2017-11-07T17:57:04Z")
I see lots of answers to this error: Plugin installation was unsuccessful due to error "unknown export types injectDefaultVars in plugin shield" The answer is always fix the versions. ES and Shield version must match ..… --- ## [Elastic stack infrastructure](https://discuss.elastic.co/t/elastic-stack-infrastructure/106730)
**Author:** [@cdra](https://discuss.elastic.co/u/cdra)\ **Replies:** 0\ **Last updated:** [November 7, 2017, 5:39pm UTC](https://discuss.elastic.co/t/elastic-stack-infrastructure/106730 "2017-11-07T17:39:53Z")
We want to deploy elastic infrastructure E+L+K in Windows servers. We have 2 principal switches, 2 principal firewalls, 2 proxies, 10 linux servers, 100 Windows computers, 2 enclosures and 4 disk cabs What design shoul… --- ## [License update fails on unknown version](https://discuss.elastic.co/t/license-update-fails-on-unknown-version/106605)
**Author:** [@Dharma\_Indurthy](https://discuss.elastic.co/u/Dharma_Indurthy)\ **Replies:** 3\ **Last updated:** [November 7, 2017, 5:09pm UTC](https://discuss.elastic.co/t/license-update-fails-on-unknown-version/106605 "2017-11-07T17:09:58Z")
Can't seem to find this issue anywhere. We're trying to update our license and it fails with this error: curl -XPUT "http://:9200/\_license" -d @elasticsearch-license.json {"error":{"root\_cause":\[{"type":"exception","r… --- ## [How to store results temporarily or use a subquery](https://discuss.elastic.co/t/how-to-store-results-temporarily-or-use-a-subquery/106341)
**Author:** [@Dulanjan\_Katuwawela](https://discuss.elastic.co/u/Dulanjan_Katuwawela)\ **Replies:** 5\ **Last updated:** [November 7, 2017, 4:18pm UTC](https://discuss.elastic.co/t/how-to-store-results-temporarily-or-use-a-subquery/106341 "2017-11-07T16:18:03Z")
So I did search for use of subqueries but most posts are from several years back, so reposting to make sure there's no feature that's come up recently. If I have a query that results in a million IDs, how do I query aga… --- ## [Ingest Grok Pipeline - Unix Timestamps](https://discuss.elastic.co/t/ingest-grok-pipeline-unix-timestamps/106700)
**Author:** [@Speedman](https://discuss.elastic.co/u/Speedman)\ **Replies:** 3\ **Last updated:** [November 7, 2017, 3:57pm UTC](https://discuss.elastic.co/t/ingest-grok-pipeline-unix-timestamps/106700 "2017-11-07T15:57:52Z")
Hi all. I'm trying to figure out how to convert an epoch timestamp (in seconds.milliseconds format) into a date/time format in Elasticsearch. Here's an example of the log line I'm trying to parse: 8 - {8249} \[1508745765… --- ## [Failed to execute pipeline for a bulk request but low CPU and memory](https://discuss.elastic.co/t/failed-to-execute-pipeline-for-a-bulk-request-but-low-cpu-and-memory/106710)
**Author:** [@xixo](https://discuss.elastic.co/u/xixo)\ **Replies:** 0\ **Last updated:** [November 7, 2017, 3:10pm UTC](https://discuss.elastic.co/t/failed-to-execute-pipeline-for-a-bulk-request-but-low-cpu-and-memory/106710 "2017-11-07T15:10:00Z")
Hi everyone, I have a cluster with 3 dedicated masters and 17 data nodes. Several Logstash servers are sending events to the Elastic cluster using the load balancing provided by Logstash. I see this error in some elast… --- ## [Using data in Elasticsearch database directly for machine learning](https://discuss.elastic.co/t/using-data-in-elasticsearch-database-directly-for-machine-learning/106456)
**Author:** [@anomalyml](https://discuss.elastic.co/u/anomalyml)\ **Replies:** 6\ **Last updated:** [November 7, 2017, 3:07pm UTC](https://discuss.elastic.co/t/using-data-in-elasticsearch-database-directly-for-machine-learning/106456 "2017-11-07T15:07:32Z")
Hi, I'm using the machine learning pack so far as below: I store the data to be analysed in a csv file format. I create required mappings using the console window in Kibana's 'Dev Tools' tab. I execute a custom script… --- ## [Elasticsearch Windows Service - redirect stdout to null](https://discuss.elastic.co/t/elasticsearch-windows-service-redirect-stdout-to-null/105367)
**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\ **Replies:** 2\ **Last updated:** [November 7, 2017, 3:01pm UTC](https://discuss.elastic.co/t/elasticsearch-windows-service-redirect-stdout-to-null/105367 "2017-11-07T15:01:36Z")
Hi All, I'm running Elasticsearch 5.5.1 as a Windows Service which is working fine. However, the service is writing to STDOUT, and this log file only seems to get written when the service is stopped. Depending on how lo… --- ## [Total number of buckets after bucket selector aggregation filter](https://discuss.elastic.co/t/total-number-of-buckets-after-bucket-selector-aggregation-filter/106537)
**Author:** [@nino\_aloi](https://discuss.elastic.co/u/nino_aloi)\ **Replies:** 1\ **Last updated:** [November 7, 2017, 1:42pm UTC](https://discuss.elastic.co/t/total-number-of-buckets-after-bucket-selector-aggregation-filter/106537 "2017-11-07T13:42:31Z")
POST alloy/\_search { "size": 0, "aggs": { "groupByResId": { "terms": { "field": "resourceId", "size": 100, "order": \[ { "max\_score\_aggr": "desc" } … --- ## [How to query a field type of string exactly in URI search?](https://discuss.elastic.co/t/how-to-query-a-field-type-of-string-exactly-in-uri-search/106407)
**Author:** [@WuChuan](https://discuss.elastic.co/u/WuChuan)\ **Replies:** 8\ **Last updated:** [November 7, 2017, 1:33pm UTC](https://discuss.elastic.co/t/how-to-query-a-field-type-of-string-exactly-in-uri-search/106407 "2017-11-07T13:33:34Z")
Hi, Here I need to query logs from an external ELK system which only supports HTTP GET request for security. So I guess I can only use the URI-api to do that. There are many logs but I need only two types in "/var/ftds… --- ## [Aggregation not hitting all shards (ElasticSearch 1.7.4)](https://discuss.elastic.co/t/aggregation-not-hitting-all-shards-elasticsearch-1-7-4/106574)
**Author:** [@Vishal\_Singh1](https://discuss.elastic.co/u/Vishal_Singh1)\ **Replies:** 1\ **Last updated:** [November 7, 2017, 1:19pm UTC](https://discuss.elastic.co/t/aggregation-not-hitting-all-shards-elasticsearch-1-7-4/106574 "2017-11-07T13:19:43Z")
q={"aggs"=\>{"ids"=\>{"terms"=\>{"field"=\>"id", "size"=\>10000}}}} I am using ES 1.7.4 a\_count = JSON.parse(curl -s 'http://localhost:9200}/index/\_search' -d '#{q.to\_json}')\['aggregations'\]\['ids'\]\['buckets'\].count s\_count… --- ## [Importing datasets](https://discuss.elastic.co/t/importing-datasets/106681)
**Author:** [@arpit\_sopra](https://discuss.elastic.co/u/arpit_sopra)\ **Replies:** 1\ **Last updated:** [November 7, 2017, 1:09pm UTC](https://discuss.elastic.co/t/importing-datasets/106681 "2017-11-07T13:09:17Z")
I have just started learning elasticsearch. Can someone please explain me these lines: curl -H "Content-Type: application/json" -XPOST 'localhost:9200/bank/account/\_bulk?pretty&refresh' --data-binary "@accounts.json" c… --- ## [Watcher - issue with search templates](https://discuss.elastic.co/t/watcher-issue-with-search-templates/106655)
**Author:** [@Mariusz\_Zyla](https://discuss.elastic.co/u/Mariusz_Zyla)\ **Replies:** 2\ **Last updated:** [November 7, 2017, 1:08pm UTC](https://discuss.elastic.co/t/watcher-issue-with-search-templates/106655 "2017-11-07T13:08:05Z")
Hi, I'm trying to create a watcher with a chain input type as follow: "input": { "chain": { "inputs": \[ { "constants": { "simple": { "host\_name": "aassddcc.localdom… --- ## [How to get documents of graph related data from elasticsearch](https://discuss.elastic.co/t/how-to-get-documents-of-graph-related-data-from-elasticsearch/106685)
**Author:** [@krishnaraj221193](https://discuss.elastic.co/u/krishnaraj221193)\ **Replies:** 0\ **Last updated:** [November 7, 2017, 12:40pm UTC](https://discuss.elastic.co/t/how-to-get-documents-of-graph-related-data-from-elasticsearch/106685 "2017-11-07T12:40:00Z")
Hello sir, I am trying to get parent and its parent of same index type lets say FOLDERS index type in Star index in graph which I'm getting but how to get elasticsearch query from that graph I saw that getting parent c… --- ## [Normalizer doesn't like trim filter](https://discuss.elastic.co/t/normalizer-doesnt-like-trim-filter/106684)
**Author:** [@aslamy](https://discuss.elastic.co/u/aslamy)\ **Replies:** 0\ **Last updated:** [November 7, 2017, 12:25pm UTC](https://discuss.elastic.co/t/normalizer-doesnt-like-trim-filter/106684 "2017-11-07T12:25:59Z")
When I use trim filter in normalizer I get this exception: "type" : "illegal\_argument\_exception", "reason" : "Custom normalizer \[my\_normalizer\] may not use filter \[trim\]" But it's fine to use lowercase filter instead. … --- ## [How to access elastic search in local network - windows 10 elastic search 5.0](https://discuss.elastic.co/t/how-to-access-elastic-search-in-local-network-windows-10-elastic-search-5-0/106185)
**Author:** [@nmathur](https://discuss.elastic.co/u/nmathur)\ **Replies:** 11\ **Last updated:** [November 7, 2017, 12:21pm UTC](https://discuss.elastic.co/t/how-to-access-elastic-search-in-local-network-windows-10-elastic-search-5-0/106185 "2017-11-07T12:21:15Z")
I am trying to make the elasticsearch accessible to all the devices connected to my LAN. The system on which elastic search is installed get IP address randomly (e.g. - 192.168.1.10, 192.168.1.11 and so on ..) Elasticse… --- ## [How to clear docs.deleted from cat-indices page of elasticsearch?](https://discuss.elastic.co/t/how-to-clear-docs-deleted-from-cat-indices-page-of-elasticsearch/106638)
**Author:** [@Aditi\_Shah](https://discuss.elastic.co/u/Aditi_Shah)\ **Replies:** 5\ **Last updated:** [November 7, 2017, 11:43am UTC](https://discuss.elastic.co/t/how-to-clear-docs-deleted-from-cat-indices-page-of-elasticsearch/106638 "2017-11-07T11:43:35Z")
There are a few document IDs that were rejected by elasticsearch and were added on the docs.deleted section of es. I have fixed the issue with those document IDs. My logstash is still reading the data and in es, instead … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1895) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1897)