# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1975

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1976

---

## [Query most common conversation enders (Terms / Top Hits aggregation?)](https://discuss.elastic.co/t/query-most-common-conversation-enders-terms-top-hits-aggregation/97590)

<div class="topic-metadata">

**Author:** [@jminuscula](https://discuss.elastic.co/u/jminuscula)\
**Replies:** 0\
**Last updated:** [August 18, 2017, 1:24pm UTC](https://discuss.elastic.co/t/query-most-common-conversation-enders-terms-top-hits-aggregation/97590 "2017-08-18T13:24:16Z")

</div>

Hi there! I’m having a hard time coming up with a query \[ES 2.3\]. I have the following mapping (simplified): { "user\_id": 1234, "text": "bye bye", "created\_on": "2017-08-18T00:00:00", "direction": "O" } I’m no…

---

## [Rolling log files based on both size and date](https://discuss.elastic.co/t/rolling-log-files-based-on-both-size-and-date/97588)

<div class="topic-metadata">

**Author:** [@prashant.bajpai](https://discuss.elastic.co/u/prashant.bajpai)\
**Replies:** 0\
**Last updated:** [August 18, 2017, 1:11pm UTC](https://discuss.elastic.co/t/rolling-log-files-based-on-both-size-and-date/97588 "2017-08-18T13:11:59Z")

</div>

Hi All Is there any way to roll log files based on both size and date ? I googled it a lot but still didn’t find any working solution for me. My requirement is as below: application.log.2017-08-17.1.gz application.lo…

---

## [Nodes don't see each other on Google Container Engine](https://discuss.elastic.co/t/nodes-dont-see-each-other-on-google-container-engine/97582)

<div class="topic-metadata">

**Author:** [@Pablo\_Poveda](https://discuss.elastic.co/u/Pablo_Poveda)\
**Replies:** 0\
**Last updated:** [August 18, 2017, 12:50pm UTC](https://discuss.elastic.co/t/nodes-dont-see-each-other-on-google-container-engine/97582 "2017-08-18T12:50:34Z")

</div>

Hello, I’m trying to run a 3 node cluster on Google Container Engine (GKE). I’m using Docker to run the images directly, not Kubernetes. The image is based on the one provided by Google Cloud Launcher. Each node works c…

---

## [Issue while using transport client](https://discuss.elastic.co/t/issue-while-using-transport-client/96583)

<div class="topic-metadata">

**Author:** [@Neetu](https://discuss.elastic.co/u/Neetu)\
**Replies:** 9\
**Last updated:** [August 18, 2017, 12:40pm UTC](https://discuss.elastic.co/t/issue-while-using-transport-client/96583 "2017-08-18T12:40:06Z")

</div>

HI , Iam using transport client 5.4.3 version with elastic search 5.4.3 version and java as 1.8 but iam unable to connect to the server with trasport client . TransportClient client = new PreBuiltTransportClient(Setti…

---

## [Elasticsearch indexes - watcher notifications](https://discuss.elastic.co/t/elasticsearch-indexes-watcher-notifications/96723)

<div class="topic-metadata">

**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\
**Replies:** 8\
**Last updated:** [August 18, 2017, 12:30pm UTC](https://discuss.elastic.co/t/elasticsearch-indexes-watcher-notifications/96723 "2017-08-18T12:30:55Z")

</div>

Hi All, Iam using elastic stack 5.5 to monitor the netflow and sflow and I have two separate indexes , I view them in kibana , for search and dashboards. If i stop receiving the logs in the indexes, from logstash or th…

---

## [Using inner\_hits inside aggregation script](https://discuss.elastic.co/t/using-inner-hits-inside-aggregation-script/97575)

<div class="topic-metadata">

**Author:** [@Akash\_Bhatia](https://discuss.elastic.co/u/Akash_Bhatia)\
**Replies:** 0\
**Last updated:** [August 18, 2017, 12:09pm UTC](https://discuss.elastic.co/t/using-inner-hits-inside-aggregation-script/97575 "2017-08-18T12:09:50Z")

</div>

in aggs, can we query(using script) the inner\_hits instead of \_source? { “sort”: \[ { “date”: { “order”: “desc” }, "\_score": {} } \], "\_source": \[“user\_id”, “topic”, “date”, “\_id”\], “query”: { “bool”: { “must”…

---

## [Highlighting not working with keyword normalizer](https://discuss.elastic.co/t/highlighting-not-working-with-keyword-normalizer/97571)

<div class="topic-metadata">

**Author:** [@daviddd](https://discuss.elastic.co/u/daviddd)\
**Replies:** 0\
**Last updated:** [August 18, 2017, 11:34am UTC](https://discuss.elastic.co/t/highlighting-not-working-with-keyword-normalizer/97571 "2017-08-18T11:34:42Z")

</div>

\[CUT\] When i set a normalizer with lowercase filter for a field with keyword data type, the highlighting for this field doesn't work. If i create mapping without setting normalizer property of keyword data type, it work…

---

## [Even searching with elasticsearch I wasn't able to find a solution](https://discuss.elastic.co/t/even-searching-with-elasticsearch-i-wasnt-able-to-find-a-solution/95594)

<div class="topic-metadata">

**Author:** [@aletaschner](https://discuss.elastic.co/u/aletaschner)\
**Replies:** 0\
**Last updated:** [August 2, 2017, 6:42pm UTC](https://discuss.elastic.co/t/even-searching-with-elasticsearch-i-wasnt-able-to-find-a-solution/95594 "2017-08-02T18:42:29Z")

</div>

Hello! I’m trying to build a search engine to an e-commerce but failing to get the relevance I need. I’ve read tutorials all over the internet but could not manage to implement the way it fits this special case needs. F…

---

## [Elastic search query to get values only which are not null](https://discuss.elastic.co/t/elastic-search-query-to-get-values-only-which-are-not-null/97390)

<div class="topic-metadata">

**Author:** [@Jyoti\_Shukla](https://discuss.elastic.co/u/Jyoti_Shukla)\
**Replies:** 3\
**Last updated:** [August 18, 2017, 11:17am UTC](https://discuss.elastic.co/t/elastic-search-query-to-get-values-only-which-are-not-null/97390 "2017-08-18T11:17:27Z")

</div>

I have written a query and I want only those Actualarrival time which are not null.As per the below query I am not getting as needed.It would be helpful if someone figure out the correction. “nested”: { “path”: “Banks”…

---

## [How do you do a match query with and operator?](https://discuss.elastic.co/t/how-do-you-do-a-match-query-with-and-operator/97295)

<div class="topic-metadata">

**Author:** [@initproto](https://discuss.elastic.co/u/initproto)\
**Replies:** 1\
**Last updated:** [August 18, 2017, 10:30am UTC](https://discuss.elastic.co/t/how-do-you-do-a-match-query-with-and-operator/97295 "2017-08-18T10:30:57Z")

</div>

I’m finding the documentation on elasticsearch 5.5 to be sparse, inaccurate and overall frustrating. I have a simple match query. When I try to use the “and” operator. It returns no results. Older google searches for “mu…

---

## [Nested script scoring](https://discuss.elastic.co/t/nested-script-scoring/97561)

<div class="topic-metadata">

**Author:** [@sankalp\_gupta](https://discuss.elastic.co/u/sankalp_gupta)\
**Replies:** 0\
**Last updated:** [August 18, 2017, 10:20am UTC](https://discuss.elastic.co/t/nested-script-scoring/97561 "2017-08-18T10:20:14Z")

</div>

Hi This is first time I’m posting so let me know if its less understandable. I have a nested document structure "question":{ "questionId":{"type":"integer"}, "userId":{"type":"integer"}, "action": { …

---

## [Timeout - Pipeline blocked](https://discuss.elastic.co/t/timeout-pipeline-blocked/97519)

<div class="topic-metadata">

**Author:** [@g4nj4wizard](https://discuss.elastic.co/u/g4nj4wizard)\
**Replies:** 3\
**Last updated:** [August 18, 2017, 10:14am UTC](https://discuss.elastic.co/t/timeout-pipeline-blocked/97519 "2017-08-18T10:14:44Z")

</div>

Hi. I’m new to this project and i am experiencing a big issue, since i added all the Clients (15 Server) for monitoring. Since i added these server, the response Time grew massively and now it doesn’t even respond. I a…

---

## [Elasticsearch not starting: no useful logs](https://discuss.elastic.co/t/elasticsearch-not-starting-no-useful-logs/96954)

<div class="topic-metadata">

**Author:** [@Saurab\_Dahal](https://discuss.elastic.co/u/Saurab_Dahal)\
**Replies:** 1\
**Last updated:** [August 18, 2017, 10:10am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-no-useful-logs/96954 "2017-08-18T10:10:23Z")

</div>

I want to setup elasticsearch cluster. I am running ES as systemd service. but when I run it gives this log ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabl…

---

## [How to create multiple nodes in elasticsearch](https://discuss.elastic.co/t/how-to-create-multiple-nodes-in-elasticsearch/96291)

<div class="topic-metadata">

**Author:** [@PrabakarKaruppasamy](https://discuss.elastic.co/u/PrabakarKaruppasamy)\
**Replies:** 5\
**Last updated:** [August 18, 2017, 10:01am UTC](https://discuss.elastic.co/t/how-to-create-multiple-nodes-in-elasticsearch/96291 "2017-08-18T10:01:45Z")

</div>

Hi All, We are trying to create multiple nodes (2 nodes) in a single elastic search instance. Is it need two different machine for each node, can we do it via elastic search config file and how we can increase the elas…

---

## [I have a project real time price adjustment I chose Q-learning algorithm (Reinforcement Learning) my question is can I imply my algorithm in x-pack machine learning in elasticsearsh?](https://discuss.elastic.co/t/i-have-a-project-real-time-price-adjustment-i-chose-q-learning-algorithm-reinforcement-learning-my-question-is-can-i-imply-my-algorithm-in-x-pack-machine-learning-in-elasticsearsh/97548)

<div class="topic-metadata">

**Author:** [@chaoukiz](https://discuss.elastic.co/u/chaoukiz)\
**Replies:** 1\
**Last updated:** [August 18, 2017, 9:41am UTC](https://discuss.elastic.co/t/i-have-a-project-real-time-price-adjustment-i-chose-q-learning-algorithm-reinforcement-learning-my-question-is-can-i-imply-my-algorithm-in-x-pack-machine-learning-in-elasticsearsh/97548 "2017-08-18T09:41:25Z")

</div>

I have a project real time price adjustment I chose Q-learning algorithm (Reinforcement Learning) my question is can I imply my algorithm in x-pack machine learning in elasticsearsh?

---

## [How to query a computed value from a document](https://discuss.elastic.co/t/how-to-query-a-computed-value-from-a-document/97116)

<div class="topic-metadata">

**Author:** [@ajay\_bh111](https://discuss.elastic.co/u/ajay_bh111)\
**Replies:** 1\
**Last updated:** [August 18, 2017, 9:38am UTC](https://discuss.elastic.co/t/how-to-query-a-computed-value-from-a-document/97116 "2017-08-18T09:38:00Z")

</div>

Hi, If I want to query a computed value from “a specific document” how this should be written for Kibana or Lucene or in painless script ? For example, If I want to get delete\_time\_per\_ document = (indexing\_delete\_ti…

---

## [Finding relevant documents](https://discuss.elastic.co/t/finding-relevant-documents/97083)

<div class="topic-metadata">

**Author:** [@NikhilJoshi2](https://discuss.elastic.co/u/NikhilJoshi2)\
**Replies:** 7\
**Last updated:** [August 18, 2017, 9:20am UTC](https://discuss.elastic.co/t/finding-relevant-documents/97083 "2017-08-18T09:20:44Z")

</div>

Hello, I was going though “more\_like\_this” clause but not able to find relevant documents. I have below data in ElasticSearch and “description” field is having huge non-indexed data of size \>1 million bytes. Like below I…

---

## [Is it still actual use Redis or Kafka before Elastic Stack?](https://discuss.elastic.co/t/is-it-still-actual-use-redis-or-kafka-before-elastic-stack/97387)

<div class="topic-metadata">

**Author:** [@ufomen](https://discuss.elastic.co/u/ufomen)\
**Replies:** 1\
**Last updated:** [August 18, 2017, 8:55am UTC](https://discuss.elastic.co/t/is-it-still-actual-use-redis-or-kafka-before-elastic-stack/97387 "2017-08-18T08:55:40Z")

</div>

Hello. I see many old articles where administrators reccomend use some buffer or broker before logstash or elasticsearch. Like: Many Linux Servers LOGS (Rsyslog) --\> REDIS (Kafka etc.) --\> logstash --\> Elasticsearch …

---

## [Hot to filter out the results which NOT equal to the key words?](https://discuss.elastic.co/t/hot-to-filter-out-the-results-which-not-equal-to-the-key-words/97532)

<div class="topic-metadata">

**Author:** [@ChelseaCao](https://discuss.elastic.co/u/ChelseaCao)\
**Replies:** 1\
**Last updated:** [August 18, 2017, 8:35am UTC](https://discuss.elastic.co/t/hot-to-filter-out-the-results-which-not-equal-to-the-key-words/97532 "2017-08-18T08:35:46Z")

</div>

Hi there, I am wondering how can I filter the search result filtering the field!=‘key words’? something like: select \* from tbl where col1!=‘test’ Thanks, Chelsea

---

## [Alias not applying on Index which gets created daily](https://discuss.elastic.co/t/alias-not-applying-on-index-which-gets-created-daily/97528)

<div class="topic-metadata">

**Author:** [@Yasho](https://discuss.elastic.co/u/Yasho)\
**Replies:** 0\
**Last updated:** [August 18, 2017, 8:13am UTC](https://discuss.elastic.co/t/alias-not-applying-on-index-which-gets-created-daily/97528 "2017-08-18T08:13:45Z")

</div>

I am trying not to create alias manually for my indexes which get created every day, by mentioning alias in my template { “xxx\_test”: { “order”: 0, “template”: “xxx\_test\*”, “settings”: { “index”: { “number\_of\_sha…

---

## [Phrase suggester not giving suggestion when there are duplicate entries](https://discuss.elastic.co/t/phrase-suggester-not-giving-suggestion-when-there-are-duplicate-entries/97375)

<div class="topic-metadata">

**Author:** [@wmjb](https://discuss.elastic.co/u/wmjb)\
**Replies:** 2\
**Last updated:** [August 18, 2017, 8:10am UTC](https://discuss.elastic.co/t/phrase-suggester-not-giving-suggestion-when-there-are-duplicate-entries/97375 "2017-08-18T08:10:53Z")

</div>

Hi, I was playing with phrase suggester and was using sample code in the elastic search documention. Mapping PUT /test?pretty { "settings": { "index": { "number\_of\_shards": 1, "analysis": { "a…

---

## [Will it be good to use elasticsearch where there are numerous updates](https://discuss.elastic.co/t/will-it-be-good-to-use-elasticsearch-where-there-are-numerous-updates/97523)

<div class="topic-metadata">

**Author:** [@Amit\_Shah](https://discuss.elastic.co/u/Amit_Shah)\
**Replies:** 2\
**Last updated:** [August 18, 2017, 8:06am UTC](https://discuss.elastic.co/t/will-it-be-good-to-use-elasticsearch-where-there-are-numerous-updates/97523 "2017-08-18T08:06:18Z")

</div>

I was looking in using elasticsearch as my desired database as it is very impressive architecture and performing system. One thing i noticed was … for every index updated, there is a version being created. If not mistake…

---

## [ElasticSearch 5.5 two phase search](https://discuss.elastic.co/t/elasticsearch-5-5-two-phase-search/97424)

<div class="topic-metadata">

**Author:** [@dominik.safaric](https://discuss.elastic.co/u/dominik.safaric)\
**Replies:** 4\
**Last updated:** [August 18, 2017, 7:39am UTC](https://discuss.elastic.co/t/elasticsearch-5-5-two-phase-search/97424 "2017-08-18T07:39:53Z")

</div>

We are currently in the process of implementing an API for searching related images. The search operates upon feature vectors. In order to determine the level of similarity between two images we calculate the Hamming dis…

---

## [Make cluster more resilient to network failures - how?](https://discuss.elastic.co/t/make-cluster-more-resilient-to-network-failures-how/96714)

<div class="topic-metadata">

**Author:** [@dandrestor](https://discuss.elastic.co/u/dandrestor)\
**Replies:** 2\
**Last updated:** [August 18, 2017, 7:16am UTC](https://discuss.elastic.co/t/make-cluster-more-resilient-to-network-failures-how/96714 "2017-08-18T07:16:26Z")

</div>

Hello all, I need some advice regarding node to node communication. It happens quite often (several times per day) that individual nodes lose contact with the master, and the cluster goes to yellow and then recovers. Oc…

---

## [Metrics and sparse indexes](https://discuss.elastic.co/t/metrics-and-sparse-indexes/97522)

<div class="topic-metadata">

**Author:** [@uecasm](https://discuss.elastic.co/u/uecasm)\
**Replies:** 0\
**Last updated:** [August 18, 2017, 7:01am UTC](https://discuss.elastic.co/t/metrics-and-sparse-indexes/97522 "2017-08-18T07:01:04Z")

</div>

I’m looking to store several time-series metrics in an ES system (currently 5.5) and I’m trying to work out the most recommended index/field design for this sort of thing. There’s only a small number of distinct types o…

---

## [Able o add new nested array data, Could not not delete update](https://discuss.elastic.co/t/able-o-add-new-nested-array-data-could-not-not-delete-update/97518)

<div class="topic-metadata">

**Author:** [@harpreet](https://discuss.elastic.co/u/harpreet)\
**Replies:** 0\
**Last updated:** [August 18, 2017, 6:41am UTC](https://discuss.elastic.co/t/able-o-add-new-nested-array-data-could-not-not-delete-update/97518 "2017-08-18T06:41:37Z")

</div>

I am using ES 5.5. Here is what I am stuck at. I am able to add new nested array element. But I also need to update any existing ones. my mapping { "email\_misc": { "mappings": { "emails": { "properties": {…

---

## [Why the elastic app index no become precarious 5.4.2 use esrally](https://discuss.elastic.co/t/why-the-elastic-app-index-no-become-precarious-5-4-2-use-esrally/97189)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 5\
**Last updated:** [August 18, 2017, 6:15am UTC](https://discuss.elastic.co/t/why-the-elastic-app-index-no-become-precarious-5-4-2-use-esrally/97189 "2017-08-18T06:15:32Z")

</div>

in x-pack monitoring Indexing Rate

---

## [Position of matched elment of a nested Data structure in Native Plugin](https://discuss.elastic.co/t/position-of-matched-elment-of-a-nested-data-structure-in-native-plugin/96780)

<div class="topic-metadata">

**Author:** [@Saiteja\_Veera](https://discuss.elastic.co/u/Saiteja_Veera)\
**Replies:** 1\
**Last updated:** [August 18, 2017, 6:15am UTC](https://discuss.elastic.co/t/position-of-matched-elment-of-a-nested-data-structure-in-native-plugin/96780 "2017-08-18T06:15:20Z")

</div>

I’m building native plugin to score the documents. Have a data structure like the following to be indexed: \[ { ‘content’: ‘abcd efgh’, ‘score’: 23 }, { ‘content’: ‘ijlk mnop’, ‘score’: 35 } \] Similar data stru…

---

## [Trouble with grand-parent/parent/child relationship](https://discuss.elastic.co/t/trouble-with-grand-parent-parent-child-relationship/96132)

<div class="topic-metadata">

**Author:** [@chrisburrell](https://discuss.elastic.co/u/chrisburrell)\
**Replies:** 4\
**Last updated:** [August 18, 2017, 6:14am UTC](https://discuss.elastic.co/t/trouble-with-grand-parent-parent-child-relationship/96132 "2017-08-18T06:14:01Z")

</div>

Hi I’m trying to do something, which I thought was pretty simple. A User can have multiple accounts and an account have multiple messages. For some reason, I can see the parents for accounts but I can’t see a parent for…

---

## [Maven elasticsearch 5.5.1 missing](https://discuss.elastic.co/t/maven-elasticsearch-5-5-1-missing/97426)

<div class="topic-metadata">

**Author:** [@questar](https://discuss.elastic.co/u/questar)\
**Replies:** 1\
**Last updated:** [August 18, 2017, 6:06am UTC](https://discuss.elastic.co/t/maven-elasticsearch-5-5-1-missing/97426 "2017-08-18T06:06:17Z")

</div>

Getting a non-existing library when attempting maven build. Build returns the following: #NOTE: This is an Aether internal implementation file, its format can be changed without prior notice. #Thu Aug 17 08:32:48 CDT…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1974)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1976)
