# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1960

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1961

---

## [Recommended document structure](https://discuss.elastic.co/t/recommended-document-structure/99249)

<div class="topic-metadata">

**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\
**Replies:** 0\
**Last updated:** [September 4, 2017, 7:00am UTC](https://discuss.elastic.co/t/recommended-document-structure/99249 "2017-09-04T07:00:16Z")

</div>

Hi, We’re trying to figure out if there are any benefits of doing: option 1: { "country": { "name": "United States" } } option 2: { "country.name": "United States" } option 3: { "countryName": "United …

---

## [Localhost:9200/\_plugin/head error](https://discuss.elastic.co/t/localhost-9200--plugin-head-error/99235)

<div class="topic-metadata">

**Author:** [@Joe\_Yang](https://discuss.elastic.co/u/Joe_Yang)\
**Replies:** 1\
**Last updated:** [September 4, 2017, 6:11am UTC](https://discuss.elastic.co/t/localhost-9200--plugin-head-error/99235 "2017-09-04T06:11:53Z")

</div>

Hi, We just followed Head plugin unable to connect to Elasticsearch 5.3 - cluster health: not connected to install head plugin by ./elasticsearch -plugin install x-pack,t when we access localhost:9200/\_plugin/head wi…

---

## [The document was updated while using GET request with JSON content](https://discuss.elastic.co/t/the-document-was-updated-while-using-get-request-with-json-content/99239)

<div class="topic-metadata">

**Author:** [@byakuinss](https://discuss.elastic.co/u/byakuinss)\
**Replies:** 2\
**Last updated:** [September 4, 2017, 6:04am UTC](https://discuss.elastic.co/t/the-document-was-updated-while-using-get-request-with-json-content/99239 "2017-09-04T06:04:42Z")

</div>

Hi all, I was practicing the simple DSL in Kibana dev tools page. (Elasticsearch version: 5.4.1) There is only one document in the new index. Create document PUT /megacorp/employee/1 { "first\_name" : "John", …

---

## [Temporarily failed to flush the buffer](https://discuss.elastic.co/t/temporarily-failed-to-flush-the-buffer/99243)

<div class="topic-metadata">

**Author:** [@sandy2428](https://discuss.elastic.co/u/sandy2428)\
**Replies:** 0\
**Last updated:** [September 4, 2017, 5:51am UTC](https://discuss.elastic.co/t/temporarily-failed-to-flush-the-buffer/99243 "2017-09-04T05:51:22Z")

</div>

Can someone help me to solve the below issue. Below is the configuration and the error I am facing: 2017-09-04 05:38:06 +0000 \[info\]: following tail of /var/log/nginx/access.log 2017-09-04 05:38:06 +0000 \[info\]: follow…

---

## [Elastic Performance](https://discuss.elastic.co/t/elastic-performance/98884)

<div class="topic-metadata">

**Author:** [@sharongur](https://discuss.elastic.co/u/sharongur)\
**Replies:** 5\
**Last updated:** [September 3, 2017, 8:03pm UTC](https://discuss.elastic.co/t/elastic-performance/98884 "2017-09-03T20:03:17Z")

</div>

Hi all, I wonder how\\if elastic will handle my requirements: 20M records a day -\> index 3 years backwards. My worry is about query performance and not multiple requests. (more shards rather then more nodes) will elas…

---

## [Install custom plugin](https://discuss.elastic.co/t/install-custom-plugin/99188)

<div class="topic-metadata">

**Author:** [@Achi](https://discuss.elastic.co/u/Achi)\
**Replies:** 4\
**Last updated:** [September 3, 2017, 6:57pm UTC](https://discuss.elastic.co/t/install-custom-plugin/99188 "2017-09-03T18:57:55Z")

</div>

Hello, I would like to install a custom plugin (LTR : https://github.com/o19s/elasticsearch-learning-to-rank). I use Elastic Cloud. Apparently I have to upgrade to a premium subscription. I’ve just requested info at ht…

---

## [Duplicate documents in Elasticsearch?](https://discuss.elastic.co/t/duplicate-documents-in-elasticsearch/99165)

<div class="topic-metadata">

**Author:** [@irom77](https://discuss.elastic.co/u/irom77)\
**Replies:** 5\
**Last updated:** [September 3, 2017, 4:16pm UTC](https://discuss.elastic.co/t/duplicate-documents-in-elasticsearch/99165 "2017-09-03T16:16:37Z")

</div>

I am sending one document to Elastic 5.5 from Logstash. But I am getting duplicate documents, two documents with different IDs but same fields. Below I am showing only index , type and id. "hits": { "total": 2, …

---

## [Unable to aggregate based on comma sepperated values](https://discuss.elastic.co/t/unable-to-aggregate-based-on-comma-sepperated-values/99124)

<div class="topic-metadata">

**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\
**Replies:** 1\
**Last updated:** [September 3, 2017, 3:17pm UTC](https://discuss.elastic.co/t/unable-to-aggregate-based-on-comma-sepperated-values/99124 "2017-09-03T15:17:01Z")

</div>

Hi, I wanna apply comma tokenizer to Product field for aggregation according comma separated values.I tried below code: PUT /cap\_log/\_mapping/prodtype { “properties” : { “Product” : { “type” : “text”, “analyzer” :…

---

## [Es 5.5 cluster unsearcable, node stats time-outs](https://discuss.elastic.co/t/es-5-5-cluster-unsearcable-node-stats-time-outs/99204)

<div class="topic-metadata">

**Author:** [@martinrm77](https://discuss.elastic.co/u/martinrm77)\
**Replies:** 5\
**Last updated:** [September 3, 2017, 9:06am UTC](https://discuss.elastic.co/t/es-5-5-cluster-unsearcable-node-stats-time-outs/99204 "2017-09-03T09:06:14Z")

</div>

Lately our logging elasticsearch cluster started acting up, crashing a node once in a while because of heap out of memory issues. I started putting more resources into our 6 nodes, continued upgrading from 2.4 to 5.5 and…

---

## [Elastic Search buckets from MetricBeat](https://discuss.elastic.co/t/elastic-search-buckets-from-metricbeat/99214)

<div class="topic-metadata">

**Author:** [@Ratnakar\_Sadasyula](https://discuss.elastic.co/u/Ratnakar_Sadasyula)\
**Replies:** 1\
**Last updated:** [September 3, 2017, 9:02am UTC](https://discuss.elastic.co/t/elastic-search-buckets-from-metricbeat/99214 "2017-09-03T09:02:41Z")

</div>

I am integrating MetricBeat with ElasticSearch and configured to export metrics to ElasticSearch. How do I configure to which bucket will all this date be pushed?

---

## [How to filter/limit term or phrase suggester by a specific field?](https://discuss.elastic.co/t/how-to-filter-limit-term-or-phrase-suggester-by-a-specific-field/99215)

<div class="topic-metadata">

**Author:** [@ali.gholami](https://discuss.elastic.co/u/ali.gholami)\
**Replies:** 0\
**Last updated:** [September 3, 2017, 8:18am UTC](https://discuss.elastic.co/t/how-to-filter-limit-term-or-phrase-suggester-by-a-specific-field/99215 "2017-09-03T08:18:53Z")

</div>

Hi, I’m using elastic search 5.3 and to provide did-you-mean functionality, I want to limit the context of term or phrase suggester to only user’s documents not all the documents in the index. here’s my current \_search …

---

## [Mapper \[Id\] cannot be changed from type \[text\] to \[integer\]](https://discuss.elastic.co/t/mapper-id-cannot-be-changed-from-type-text-to-integer/99211)

<div class="topic-metadata">

**Author:** [@aslamy](https://discuss.elastic.co/u/aslamy)\
**Replies:** 2\
**Last updated:** [September 3, 2017, 7:48am UTC](https://discuss.elastic.co/t/mapper-id-cannot-be-changed-from-type-text-to-integer/99211 "2017-09-03T07:48:08Z")

</div>

Hi ! I have deleted my index and want to create a new index for (new map). But I get this error message: { “error”: { “root\_cause”: \[ { “type”: “illegal\_argument\_exception”, “reason”: “mapper \[Id\] cannot be change…

---

## [ElasticSearch 6.0 Beta2 - Perq Queries](https://discuss.elastic.co/t/elasticsearch-6-0-beta2-perq-queries/99200)

<div class="topic-metadata">

**Author:** [@questar](https://discuss.elastic.co/u/questar)\
**Replies:** 0\
**Last updated:** [September 2, 2017, 9:14pm UTC](https://discuss.elastic.co/t/elasticsearch-6-0-beta2-perq-queries/99200 "2017-09-02T21:14:35Z")

</div>

Have been struggling with the Perq Query upgrade to 6.0 (although I like the approach) outlined in https://www.elastic.co/guide/en/elasticsearch/reference/6.0/query-dsl-percolate-query.html I understand the PercolateQue…

---

## [ES Snapshots giving error](https://discuss.elastic.co/t/es-snapshots-giving-error/99105)

<div class="topic-metadata">

**Author:** [@Vivek\_Samaga](https://discuss.elastic.co/u/Vivek_Samaga)\
**Replies:** 1\
**Last updated:** [September 2, 2017, 1:36pm UTC](https://discuss.elastic.co/t/es-snapshots-giving-error/99105 "2017-09-02T13:36:25Z")

</div>

Am able to successfully register snapshot with the below request. PUT /\_snapshot/my\_backup { "type": "fs", "settings": { "location": "/elk\_bak/esback", "compress": true } } But now am facing…

---

## [Field that is searchable and sortable (5.2)](https://discuss.elastic.co/t/field-that-is-searchable-and-sortable-5-2/99143)

<div class="topic-metadata">

**Author:** [@cmalpeli](https://discuss.elastic.co/u/cmalpeli)\
**Replies:** 1\
**Last updated:** [September 2, 2017, 12:25pm UTC](https://discuss.elastic.co/t/field-that-is-searchable-and-sortable-5-2/99143 "2017-09-02T12:25:51Z")

</div>

Hello I am trying to make a text field both searchable and sortable. I have a normalizer that seems to handle the sorting, but it prevents the field from being searchable. Any ideas what I’ve done wrong - note this is …

---

## [How update/over ride the existing ES document through Groovey](https://discuss.elastic.co/t/how-update-over-ride-the-existing-es-document-through-groovey/99190)

<div class="topic-metadata">

**Author:** [@yogeswararao](https://discuss.elastic.co/u/yogeswararao)\
**Replies:** 0\
**Last updated:** [September 2, 2017, 12:20pm UTC](https://discuss.elastic.co/t/how-update-over-ride-the-existing-es-document-through-groovey/99190 "2017-09-02T12:20:26Z")

</div>

How to add update/override the ES document in Groovey. This is the document injected into the ES: ‘http://localhost:9200/Test/log/Sample.Test’ -d ‘ { "@type": “iapi.log”, "@timestamp": “2017-09-02T03:34:45.399Z”, …

---

## [Error while creating snapshot](https://discuss.elastic.co/t/error-while-creating-snapshot/97646)

<div class="topic-metadata">

**Author:** [@sripathi\_kammari](https://discuss.elastic.co/u/sripathi_kammari)\
**Replies:** 2\
**Last updated:** [September 2, 2017, 10:09am UTC](https://discuss.elastic.co/t/error-while-creating-snapshot/97646 "2017-09-02T10:09:30Z")

</div>

I found following error while creating snopshot using URL : http://192.168.33.10/\_snapshot/temp {"error":"RepositoryException\[\[temp\] failed to create repository\]; nested: CreationException\[Guice creation errors:\\n\\n1) …

---

## [Custom exceptions in Nest](https://discuss.elastic.co/t/custom-exceptions-in-nest/99115)

<div class="topic-metadata">

**Author:** [@mjgasior](https://discuss.elastic.co/u/mjgasior)\
**Replies:** 1\
**Last updated:** [September 2, 2017, 8:43am UTC](https://discuss.elastic.co/t/custom-exceptions-in-nest/99115 "2017-09-02T08:43:28Z")

</div>

In the documentation it’s possible to define custom exceptions via ConnectionConfiguration as said here: var settings = new ConnectionConfiguration() .SetConnectionStatusHandler(r=\> { if (r.HttpStatusCode ==…

---

## [Mixing ssd and hdd in path.data is not working](https://discuss.elastic.co/t/mixing-ssd-and-hdd-in-path-data-is-not-working/99180)

<div class="topic-metadata">

**Author:** [@elasticuser1](https://discuss.elastic.co/u/elasticuser1)\
**Replies:** 7\
**Last updated:** [September 2, 2017, 4:47am UTC](https://discuss.elastic.co/t/mixing-ssd-and-hdd-in-path-data-is-not-working/99180 "2017-09-02T04:47:23Z")

</div>

Hi, For one of ES instances, we pointed path.data to both hdd and ssd. path.data: /dir/d05/elasticsearch/data,/ssd/elasticsearch/data This setup is not working. I found there is NO data being written to ssd except \_st…

---

## [Bootstrap.system\_call\_filter to false not able to configure cluster](https://discuss.elastic.co/t/bootstrap-system-call-filter-to-false-not-able-to-configure-cluster/99062)

<div class="topic-metadata">

**Author:** [@sunmesiav](https://discuss.elastic.co/u/sunmesiav)\
**Replies:** 11\
**Last updated:** [September 2, 2017, 1:09am UTC](https://discuss.elastic.co/t/bootstrap-system-call-filter-to-false-not-able-to-configure-cluster/99062 "2017-09-02T01:09:49Z")

</div>

Hi, Iam using the Elasticsearch 5.5.2, and Iam not able to configure cluster. I dont see my nodes talking to each other. I tried using the following configuration in my elasticsearch.yml. I tried changing the transport…

---

## [ElasticSearch 6.0 beta1 - BulkRequestBuilder error](https://discuss.elastic.co/t/elasticsearch-6-0-beta1-bulkrequestbuilder-error/99178)

<div class="topic-metadata">

**Author:** [@questar](https://discuss.elastic.co/u/questar)\
**Replies:** 0\
**Last updated:** [September 2, 2017, 12:38am UTC](https://discuss.elastic.co/t/elasticsearch-6-0-beta1-bulkrequestbuilder-error/99178 "2017-09-02T00:38:33Z")

</div>

BulkRequestBuilder throws this exception: java.lang.IllegalArgumentException: The number of object passed must be even but was \[1\] when invoking it via: bulkRequest.add(new IndexRequest(:“indexName”, “typeName”, null)…

---

## [Passing "\_agg" variable in scripted metric aggregation](https://discuss.elastic.co/t/passing--agg-variable-in-scripted-metric-aggregation/99168)

<div class="topic-metadata">

**Author:** [@reeselevine](https://discuss.elastic.co/u/reeselevine)\
**Replies:** 1\
**Last updated:** [September 1, 2017, 10:19pm UTC](https://discuss.elastic.co/t/passing--agg-variable-in-scripted-metric-aggregation/99168 "2017-09-01T22:19:47Z")

</div>

Could someone explain the reasoning behind having to specify “\_agg” : {} if script parameters are specified in the scripted metric aggregation (from this page: https://www.elastic.co/guide/en/elasticsearch/reference/5.5/…

---

## [How to covert this elastic search functional score query to java API using ES 2.3.3](https://discuss.elastic.co/t/how-to-covert-this-elastic-search-functional-score-query-to-java-api-using-es-2-3-3/99161)

<div class="topic-metadata">

**Author:** [@thejavamonk](https://discuss.elastic.co/u/thejavamonk)\
**Replies:** 0\
**Last updated:** [September 1, 2017, 6:29pm UTC](https://discuss.elastic.co/t/how-to-covert-this-elastic-search-functional-score-query-to-java-api-using-es-2-3-3/99161 "2017-09-01T18:29:07Z")

</div>

GET /schema\_name/\_search { "from": 0, "size": 200, "query": { "function\_score": { "query": { "match\_all": {} }, "boost": "5", "functions": \[{ "filter": { "…

---

## [Boost levels for fields with same name](https://discuss.elastic.co/t/boost-levels-for-fields-with-same-name/99156)

<div class="topic-metadata">

**Author:** [@guilherme\_maranhao](https://discuss.elastic.co/u/guilherme_maranhao)\
**Replies:** 0\
**Last updated:** [September 1, 2017, 5:24pm UTC](https://discuss.elastic.co/t/boost-levels-for-fields-with-same-name/99156 "2017-09-01T17:24:00Z")

</div>

Hi everybody, I have the following mapping: { object\_1: { properties: { field\_name: { type: "text", index\_options: "offsets", analyz…

---

## [Need help with Query. I use kibana sucessfully but I don't know how build my query in json](https://discuss.elastic.co/t/need-help-with-query-i-use-kibana-sucessfully-but-i-dont-know-how-build-my-query-in-json/99155)

<div class="topic-metadata">

**Author:** [@Benoit\_Martin](https://discuss.elastic.co/u/Benoit_Martin)\
**Replies:** 0\
**Last updated:** [September 1, 2017, 5:16pm UTC](https://discuss.elastic.co/t/need-help-with-query-i-use-kibana-sucessfully-but-i-dont-know-how-build-my-query-in-json/99155 "2017-09-01T17:16:24Z")

</div>

Hi, I need help to transform a query I build with Kibana (Discover) \[image\] I think I need to use bool query with some filter but I don’t understand how to do that as curl of rest api call. I try and get error from el…

---

## [How can I query a document that has no nested documents](https://discuss.elastic.co/t/how-can-i-query-a-document-that-has-no-nested-documents/99154)

<div class="topic-metadata">

**Author:** [@Christophe\_Verbinne1](https://discuss.elastic.co/u/Christophe_Verbinne1)\
**Replies:** 0\
**Last updated:** [September 1, 2017, 5:00pm UTC](https://discuss.elastic.co/t/how-can-i-query-a-document-that-has-no-nested-documents/99154 "2017-09-01T17:00:37Z")

</div>

Hello Assuming I have a doc as follow { id: 1, events: \[ type: "logged\_in", date: "01/01/01", type: "logged\_in", date: "02/01/01" \] } I would like to query all the users that have not logged in …

---

## [Field with index = no but with include\_in\_all](https://discuss.elastic.co/t/field-with-index-no-but-with-include-in-all/99152)

<div class="topic-metadata">

**Author:** [@Slava\_G](https://discuss.elastic.co/u/Slava_G)\
**Replies:** 0\
**Last updated:** [September 1, 2017, 4:23pm UTC](https://discuss.elastic.co/t/field-with-index-no-but-with-include-in-all/99152 "2017-09-01T16:23:34Z")

</div>

Hi, I want to make a field that index = no, but I do want that this field will be part of \_all field and when I’ll search in \_all field I would be able to find by content of this field, so if I’ll create a field with in…

---

## [Substring query with wildcards and reserved characters](https://discuss.elastic.co/t/substring-query-with-wildcards-and-reserved-characters/99056)

<div class="topic-metadata">

**Author:** [@MatthewHartz](https://discuss.elastic.co/u/MatthewHartz)\
**Replies:** 1\
**Last updated:** [September 1, 2017, 4:13pm UTC](https://discuss.elastic.co/t/substring-query-with-wildcards-and-reserved-characters/99056 "2017-09-01T16:13:47Z")

</div>

I have a question very similar to Hyphen search with wildcard '\*' and normal serach. My requirement is I want to be able to do a substring query, in which that substring can contain special characters. For example, I w…

---

## [Difference between disk.indices vs disk.used in cat allocation](https://discuss.elastic.co/t/difference-between-disk-indices-vs-disk-used-in-cat-allocation/99134)

<div class="topic-metadata">

**Author:** [@snobear](https://discuss.elastic.co/u/snobear)\
**Replies:** 1\
**Last updated:** [September 1, 2017, 3:24pm UTC](https://discuss.elastic.co/t/difference-between-disk-indices-vs-disk-used-in-cat-allocation/99134 "2017-09-01T15:24:23Z")

</div>

I have a cluster (ES 2.4.5) consisting of 8 nodes, and was checking the size with the cat allocation API: $ curl -s localhost:9200/\_cat/allocation?v shards disk.indices disk.used disk.avail disk.total disk.percent node …

---

## [Very poor search and aggregation performance](https://discuss.elastic.co/t/very-poor-search-and-aggregation-performance/99117)

<div class="topic-metadata">

**Author:** [@Jul](https://discuss.elastic.co/u/Jul)\
**Replies:** 3\
**Last updated:** [September 1, 2017, 2:35pm UTC](https://discuss.elastic.co/t/very-poor-search-and-aggregation-performance/99117 "2017-09-01T14:35:39Z")

</div>

Hey there, we are experiencing really bad performance of our search and agreggation queries and would appreciate any kind of help and advice how to improve our ElasticSearch setup. System: 26GB RAM (from 70GB on the …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1959)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1961)
