# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1902

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1903

---

## [Keyword field on bucket aggregation](https://discuss.elastic.co/t/keyword-field-on-bucket-aggregation/106135)

<div class="topic-metadata">

**Author:** [@aarjan](https://discuss.elastic.co/u/aarjan)\
**Replies:** 1\
**Last updated:** [November 2, 2017, 9:58am UTC](https://discuss.elastic.co/t/keyword-field-on-bucket-aggregation/106135 "2017-11-02T09:58:13Z")

</div>

I have explained a short version of a much bigger problem. I have two indices, sam & sam-2. There is a user field in both indices, sam with mapping type as keyword only... sam-2 with multiple fields mapping type, text …

---

## [Es cluster settings about "ALL" "all"?](https://discuss.elastic.co/t/es-cluster-settings-about-all-all/106150)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 1\
**Last updated:** [November 2, 2017, 9:25am UTC](https://discuss.elastic.co/t/es-cluster-settings-about-all-all/106150 "2017-11-02T09:25:22Z")

</div>

es cluster settings about "ALL" "all"? es 5.3.6 the cluster setting about rebalance is same ? as "cluster.routing.rebalance.enable": "ALL" and "cluster.routing.rebalance.enable": "all" which the default use "ALL" or…

---

## [Too many dynamic script compilations within one minute, max: \[15/min\];](https://discuss.elastic.co/t/too-many-dynamic-script-compilations-within-one-minute-max-15-min/105244)

<div class="topic-metadata">

**Author:** [@varun\_kumar2](https://discuss.elastic.co/u/varun_kumar2)\
**Replies:** 1\
**Last updated:** [November 2, 2017, 9:17am UTC](https://discuss.elastic.co/t/too-many-dynamic-script-compilations-within-one-minute-max-15-min/105244 "2017-11-02T09:17:22Z")

</div>

Here is the output with error { "\_id": "CRM.Email.Monitor.Errors\_d5a3faac-50c2-4238-929b-4e84088f9fd4-2017-10-25T12:36:16.292Z", "watch\_record": { "watch\_id": "CRM.Email.Monitor.Errors", "state": "failed", "\_status…

---

## [GeoIP doesn't work on ELK stack](https://discuss.elastic.co/t/geoip-doesnt-work-on-elk-stack/103815)

<div class="topic-metadata">

**Author:** [@vuxuanlai](https://discuss.elastic.co/u/vuxuanlai)\
**Replies:** 4\
**Last updated:** [November 2, 2017, 9:11am UTC](https://discuss.elastic.co/t/geoip-doesnt-work-on-elk-stack/103815 "2017-11-02T09:11:57Z")

</div>

Hi there, Im using ELK stack to parse nginx log and visualize it on Kibana with geoip on Codinate map. But i got the error as below when using Elasticsearch version 5.5.2, but not Elasticsearch version 5.4.1: No Compa…

---

## [Create Index of template](https://discuss.elastic.co/t/create-index-of-template/105437)

<div class="topic-metadata">

**Author:** [@Staggerlee011](https://discuss.elastic.co/u/Staggerlee011)\
**Replies:** 2\
**Last updated:** [November 2, 2017, 9:02am UTC](https://discuss.elastic.co/t/create-index-of-template/105437 "2017-11-02T09:02:24Z")

</div>

Below is my index template post \_template/sqldb\_template { "template" : "sqldb-\*", "aliases" : { "sqldb" : {} }, "settings" : { "index" : { "number\_of\_shards" : 5, …

---

## [Can snapshots be used to merge data from indices of the same name?](https://discuss.elastic.co/t/can-snapshots-be-used-to-merge-data-from-indices-of-the-same-name/106095)

<div class="topic-metadata">

**Author:** [@Peter\_Portante](https://discuss.elastic.co/u/Peter_Portante)\
**Replies:** 1\
**Last updated:** [November 2, 2017, 8:27am UTC](https://discuss.elastic.co/t/can-snapshots-be-used-to-merge-data-from-indices-of-the-same-name/106095 "2017-11-02T08:27:14Z")

</div>

Hi Folks, I am wondering if I can use snapshots to "merge" data from a big mistake we made in our deployments. On a small cluster, without changing the version of Elasticsearch, we: Stopped the entire Elasticsearch c…

---

## [How to get property in plugin-descriptor.properties?](https://discuss.elastic.co/t/how-to-get-property-in-plugin-descriptor-properties/106116)

<div class="topic-metadata">

**Author:** [@tavandung12](https://discuss.elastic.co/u/tavandung12)\
**Replies:** 1\
**Last updated:** [November 2, 2017, 7:08am UTC](https://discuss.elastic.co/t/how-to-get-property-in-plugin-descriptor-properties/106116 "2017-11-02T07:08:00Z")

</div>

How to get property in plugin-descriptor.properties?

---

## [Is it possible to automate ES upgrade?](https://discuss.elastic.co/t/is-it-possible-to-automate-es-upgrade/106125)

<div class="topic-metadata">

**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\
**Replies:** 1\
**Last updated:** [November 2, 2017, 6:49am UTC](https://discuss.elastic.co/t/is-it-possible-to-automate-es-upgrade/106125 "2017-11-02T06:49:22Z")

</div>

Hi , I wanted to know whether we can automate ES upgrade. Like when there new ES version available then automate the entire flow right from pulling the new release and upgrade it . Any input on this? Thanks, Rohan

---

## [Elasticsearch 5.6.3 \_source is empty](https://discuss.elastic.co/t/elasticsearch-5-6-3-source-is-empty/105946)

<div class="topic-metadata">

**Author:** [@Ersoy\_Vatansever](https://discuss.elastic.co/u/Ersoy_Vatansever)\
**Replies:** 1\
**Last updated:** [November 2, 2017, 6:43am UTC](https://discuss.elastic.co/t/elasticsearch-5-6-3-source-is-empty/105946 "2017-11-02T06:43:43Z")

</div>

I'll crazy about it. I create new index with a document type. This is my mapping { "settings": { "number\_of\_shards": 2, "number\_of\_replicas": 1, "refresh\_interval": "30s", "max\_result\_window" : 500000 }, "mappin…

---

## [Primary shard is not active or isn't assigned to a known node](https://discuss.elastic.co/t/primary-shard-is-not-active-or-isnt-assigned-to-a-known-node/105145)

<div class="topic-metadata">

**Author:** [@small-tomorrow](https://discuss.elastic.co/u/small-tomorrow)\
**Replies:** 19\
**Last updated:** [November 2, 2017, 6:43am UTC](https://discuss.elastic.co/t/primary-shard-is-not-active-or-isnt-assigned-to-a-known-node/105145 "2017-11-02T06:43:29Z")

</div>

My master node keep logging: index \[.marvel-es-2017.10.25\], type \[index\_stats\], id \[AV9RswFhsIL8o1ZCN3Mi\], message \[UnavailableShardsException\[\[.marvel-es-2017.10.25\]\[0\] Primary shard is not active or isn't assigned to…

---

## [Number of plots displayed in Anomaly Explorer window](https://discuss.elastic.co/t/number-of-plots-displayed-in-anomaly-explorer-window/105718)

<div class="topic-metadata">

**Author:** [@anomalyml](https://discuss.elastic.co/u/anomalyml)\
**Replies:** 2\
**Last updated:** [November 2, 2017, 6:30am UTC](https://discuss.elastic.co/t/number-of-plots-displayed-in-anomaly-explorer-window/105718 "2017-11-02T06:30:19Z")

</div>

Hi, I'm performing multi metrics job analysis using the machine learning module. After performing the analysis, the results are being displayed in 'Anomaly Explorer' window. When I select a cell in the 'Anomaly timeline…

---

## [ElasticSearch Query from MySql Query](https://discuss.elastic.co/t/elasticsearch-query-from-mysql-query/106123)

<div class="topic-metadata">

**Author:** [@sagarch888](https://discuss.elastic.co/u/sagarch888)\
**Replies:** 0\
**Last updated:** [November 2, 2017, 5:31am UTC](https://discuss.elastic.co/t/elasticsearch-query-from-mysql-query/106123 "2017-11-02T05:31:50Z")

</div>

ElasticSearch Version: 5.6 I have imported MySQL data in ElasticSearch and I have added mapping to the elastic search as required. Following is one mapping for the column application\_status. Mappings: { "settings": { …

---

## [Completion suggester: Not returning all options](https://discuss.elastic.co/t/completion-suggester-not-returning-all-options/106114)

<div class="topic-metadata">

**Author:** [@Jaspreet\_Singh](https://discuss.elastic.co/u/Jaspreet_Singh)\
**Replies:** 0\
**Last updated:** [November 2, 2017, 3:04am UTC](https://discuss.elastic.co/t/completion-suggester-not-returning-all-options/106114 "2017-11-02T03:04:52Z")

</div>

The mapping of field looks like ''' "topics": { "type": "text", "fields": { "topics\_suggest": { "type": "completion", "analyzer": "english", "preserve\_separators": true, "preserve\_position\_increments": true, "m…

---

## [Node failure and recovery](https://discuss.elastic.co/t/node-failure-and-recovery/106065)

<div class="topic-metadata">

**Author:** [@wrinehart](https://discuss.elastic.co/u/wrinehart)\
**Replies:** 2\
**Last updated:** [November 2, 2017, 12:06am UTC](https://discuss.elastic.co/t/node-failure-and-recovery/106065 "2017-11-02T00:06:02Z")

</div>

Howdy, I have a cluster in Elasticsearch version 1.4.4 that is currently under-provisioned. Currently, when a node falls off the cluster the other nodes start reassigning shards from the failed nodes to the other nodes…

---

## [Delete document from elastic search](https://discuss.elastic.co/t/delete-document-from-elastic-search/105750)

<div class="topic-metadata">

**Author:** [@Sumit\_Gupta1](https://discuss.elastic.co/u/Sumit_Gupta1)\
**Replies:** 3\
**Last updated:** [November 1, 2017, 11:51pm UTC](https://discuss.elastic.co/t/delete-document-from-elastic-search/105750 "2017-11-01T23:51:19Z")

</div>

Hi, I want to delete some document which type is mytype1. curl -XDELETE 'http://localhost:9200/logstash-databases-info/mytype1/\_query' -d '{ "query" : { "match\_all" : {} } }' This throwing following log: {"fou…

---

## [Elasticsearch java high level client does not allow custom schema creation](https://discuss.elastic.co/t/elasticsearch-java-high-level-client-does-not-allow-custom-schema-creation/106106)

<div class="topic-metadata">

**Author:** [@dhavalk123](https://discuss.elastic.co/u/dhavalk123)\
**Replies:** 1\
**Last updated:** [November 1, 2017, 11:05pm UTC](https://discuss.elastic.co/t/elasticsearch-java-high-level-client-does-not-allow-custom-schema-creation/106106 "2017-11-01T23:05:19Z")

</div>

Is there any way to create a custom index schema using a java high level client?

---

## [\_bulk API not working when we migrate from ES 2.3 to ES 5.5](https://discuss.elastic.co/t/bulk-api-not-working-when-we-migrate-from-es-2-3-to-es-5-5/102613)

<div class="topic-metadata">

**Author:** [@keerthipenmatsa](https://discuss.elastic.co/u/keerthipenmatsa)\
**Replies:** 10\
**Last updated:** [November 1, 2017, 9:00pm UTC](https://discuss.elastic.co/t/bulk-api-not-working-when-we-migrate-from-es-2-3-to-es-5-5/102613 "2017-11-01T21:00:41Z")

</div>

We are trying to migrate from AWS elasticsearch 2.3 to 5.5 version with minimal code changes. Currently, we are using bulk api for 2.3 version and am able to successfully insert data into ES. But, with the same api, I a…

---

## [Unable to cancel allocation of primary shard](https://discuss.elastic.co/t/unable-to-cancel-allocation-of-primary-shard/106071)

<div class="topic-metadata">

**Author:** [@soenkeliebau](https://discuss.elastic.co/u/soenkeliebau)\
**Replies:** 0\
**Last updated:** [November 1, 2017, 5:32pm UTC](https://discuss.elastic.co/t/unable-to-cancel-allocation-of-primary-shard/106071 "2017-11-01T17:32:41Z")

</div>

We currently have a small issue in our cluster where at some point in time one or more nodes were shutdown uncleanly and this created a situation where replicas and primaries are not in sync any more (sympoms like descri…

---

## [How to get a previous page from elasticsearch using search\_after?](https://discuss.elastic.co/t/how-to-get-a-previous-page-from-elasticsearch-using-search-after/105028)

<div class="topic-metadata">

**Author:** [@Evgeniy\_Kosinsky](https://discuss.elastic.co/u/Evgeniy_Kosinsky)\
**Replies:** 1\
**Last updated:** [November 1, 2017, 8:40pm UTC](https://discuss.elastic.co/t/how-to-get-a-previous-page-from-elasticsearch-using-search-after/105028 "2017-11-01T20:40:16Z")

</div>

We are trying to make fast pagination with search\_after. It is possible to move forward by search\_after. We are using next request: { "size":5, "search\_after": \[1508827804000, "data#123"\], "sort": \[{ "d…

---

## [Unable to create index with more that 1 type in 6.x](https://discuss.elastic.co/t/unable-to-create-index-with-more-that-1-type-in-6-x/106089)

<div class="topic-metadata">

**Author:** [@pshroads](https://discuss.elastic.co/u/pshroads)\
**Replies:** 2\
**Last updated:** [November 1, 2017, 7:35pm UTC](https://discuss.elastic.co/t/unable-to-create-index-with-more-that-1-type-in-6-x/106089 "2017-11-01T19:35:20Z")

</div>

I'm on elasticsearch 6.0.0-rc2 and I've found I've not able to create an index with multiple types: PUT twitter {} PUT twitter/\_mapping/user { "properties": { "name": { "type": "string" } } } PUT tw…

---

## [A Bit deep-dive question about Elasticsearch Internal (Scroll)](https://discuss.elastic.co/t/a-bit-deep-dive-question-about-elasticsearch-internal-scroll/106090)

<div class="topic-metadata">

**Author:** [@Curt\_Hu](https://discuss.elastic.co/u/Curt_Hu)\
**Replies:** 0\
**Last updated:** [November 1, 2017, 7:29pm UTC](https://discuss.elastic.co/t/a-bit-deep-dive-question-about-elasticsearch-internal-scroll/106090 "2017-11-01T19:29:58Z")

</div>

What happened internally on Scroll type of search, it looks like it will block the "Merge" process, since ES needs to keep the context of the scroll for a shard, correct? I've heard someone told me that the scroll will …

---

## [Log ingestion from Cloudera CDH 5.8.5 to Elastic search](https://discuss.elastic.co/t/log-ingestion-from-cloudera-cdh-5-8-5-to-elastic-search/106086)

<div class="topic-metadata">

**Author:** [@Harman\_Gurm](https://discuss.elastic.co/u/Harman_Gurm)\
**Replies:** 0\
**Last updated:** [November 1, 2017, 7:02pm UTC](https://discuss.elastic.co/t/log-ingestion-from-cloudera-cdh-5-8-5-to-elastic-search/106086 "2017-11-01T19:02:18Z")

</div>

Log ingestion from Cloudera CDH 5.8.5 and Navigator to Elastic search. We have never done this before. Any suggestions !!!

---

## [How to Use regexp to Find Keywords That Are All Lowercase](https://discuss.elastic.co/t/how-to-use-regexp-to-find-keywords-that-are-all-lowercase/106084)

<div class="topic-metadata">

**Author:** [@krmathieu](https://discuss.elastic.co/u/krmathieu)\
**Replies:** 0\
**Last updated:** [November 1, 2017, 6:47pm UTC](https://discuss.elastic.co/t/how-to-use-regexp-to-find-keywords-that-are-all-lowercase/106084 "2017-11-01T18:47:58Z")

</div>

Does anyone know the regex syntax to find all keyword fields for a string that do not contain any uppercase characters? I tried this as part of an aggregation filter and it did not work: { "regexp": {"segments.anchor.t…

---

## [Question About Nested Objects Mapping](https://discuss.elastic.co/t/question-about-nested-objects-mapping/103282)

<div class="topic-metadata">

**Author:** [@krmathieu](https://discuss.elastic.co/u/krmathieu)\
**Replies:** 2\
**Last updated:** [November 1, 2017, 6:35pm UTC](https://discuss.elastic.co/t/question-about-nested-objects-mapping/103282 "2017-11-01T18:35:45Z")

</div>

On the root level of my documents I have an array of objects called entities and for each entity in that array there is a an array of objects called mentions that will contain one or more mentions objects for that entity…

---

## [Cross cluster search and get/\_mget](https://discuss.elastic.co/t/cross-cluster-search-and-get-mget/106067)

<div class="topic-metadata">

**Author:** [@nkoothrappahli](https://discuss.elastic.co/u/nkoothrappahli)\
**Replies:** 0\
**Last updated:** [November 1, 2017, 5:07pm UTC](https://discuss.elastic.co/t/cross-cluster-search-and-get-mget/106067 "2017-11-01T17:07:02Z")

</div>

Cross cluster search is supposed to be working with \_search and \_msearch how it looks. What about get \_mget \_search\_shards \_count \_field\_caps\* \_termvectors \_mtermvectors Are those API's also supposed to work with CCS…

---

## [MultiIndex filter and search](https://discuss.elastic.co/t/multiindex-filter-and-search/106066)

<div class="topic-metadata">

**Author:** [@samdash](https://discuss.elastic.co/u/samdash)\
**Replies:** 0\
**Last updated:** [November 1, 2017, 4:59pm UTC](https://discuss.elastic.co/t/multiindex-filter-and-search/106066 "2017-11-01T16:59:04Z")

</div>

Hi , I have 2 indexes com and article , which contain documents which are different and only thing that is common between the documents is \_id , i need a filter and search Query from these 2 indexes , please let me know…

---

## [An established connection was aborted by the software in your host machine](https://discuss.elastic.co/t/an-established-connection-was-aborted-by-the-software-in-your-host-machine/105981)

<div class="topic-metadata">

**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\
**Replies:** 1\
**Last updated:** [November 1, 2017, 4:18pm UTC](https://discuss.elastic.co/t/an-established-connection-was-aborted-by-the-software-in-your-host-machine/105981 "2017-11-01T16:18:54Z")

</div>

I am pushing data to elasticsearch using bulk api RestClient. When I am pushing 1Lac records I am not getting any exception. But above 1Lac records I am getting below exception. An established connection was aborted by …

---

## [Kibana vs NEST, not getting same result?](https://discuss.elastic.co/t/kibana-vs-nest-not-getting-same-result/105857)

<div class="topic-metadata">

**Author:** [@SparkyRih](https://discuss.elastic.co/u/SparkyRih)\
**Replies:** 2\
**Last updated:** [November 1, 2017, 3:55pm UTC](https://discuss.elastic.co/t/kibana-vs-nest-not-getting-same-result/105857 "2017-11-01T15:55:45Z")

</div>

I'm new to Elasticsearch. I'm building a C# service, which will use Elasticsearch to search error logs. Now I'm trying to make an aggregation, when I try to run the following query in Kibana, it returns 2 aggregations a…

---

## [How to delete rollover indices , using deprecated query](https://discuss.elastic.co/t/how-to-delete-rollover-indices-using-deprecated-query/104430)

<div class="topic-metadata">

**Author:** [@Kim-Kruse-Hansen](https://discuss.elastic.co/u/Kim-Kruse-Hansen)\
**Replies:** 3\
**Last updated:** [November 1, 2017, 3:42pm UTC](https://discuss.elastic.co/t/how-to-delete-rollover-indices-using-deprecated-query/104430 "2017-11-01T15:42:38Z")

</div>

Hi Question is basically a copy of this question, but it remains unanswered, I am considering switching from daily indices style to rollover style. So I was reading your article about how to implement it: And the big…

---

## [Elasticsearch shard preference when using shard allocation awareness](https://discuss.elastic.co/t/elasticsearch-shard-preference-when-using-shard-allocation-awareness/106053)

<div class="topic-metadata">

**Author:** [@Eran\_Netzerel](https://discuss.elastic.co/u/Eran_Netzerel)\
**Replies:** 0\
**Last updated:** [November 1, 2017, 3:27pm UTC](https://discuss.elastic.co/t/elasticsearch-shard-preference-when-using-shard-allocation-awareness/106053 "2017-11-01T15:27:39Z")

</div>

Hi, We are using elasticsearch 5.3.2 and we want to deploy our ES clusters over a couple of availability zones and apply shard allocation awareness. according to this document : https://www.elastic.co/guide/en/elastics…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1901)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1903)
