# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1979

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1980

---

## [Elasticsearch: Replicating Google's Double Quote Exact Match Query](https://discuss.elastic.co/t/elasticsearch-replicating-googles-double-quote-exact-match-query/97027)

<div class="topic-metadata">

**Author:** [@net](https://discuss.elastic.co/u/net)\
**Replies:** 6\
**Last updated:** [August 15, 2017, 1:37pm UTC](https://discuss.elastic.co/t/elasticsearch-replicating-googles-double-quote-exact-match-query/97027 "2017-08-15T13:37:46Z")

</div>

In google when you put double quotes around a phrase it does an exact match. I see in elasticsearch how I can do an exact match on a given field. But I don’t see how I can do an exact match over all the fields. How can…

---

## [How to do top\_hits aggregation after cardinality aggregation?](https://discuss.elastic.co/t/how-to-do-top-hits-aggregation-after-cardinality-aggregation/97096)

<div class="topic-metadata">

**Author:** [@moabbas](https://discuss.elastic.co/u/moabbas)\
**Replies:** 0\
**Last updated:** [August 15, 2017, 12:42pm UTC](https://discuss.elastic.co/t/how-to-do-top-hits-aggregation-after-cardinality-aggregation/97096 "2017-08-15T12:42:43Z")

</div>

Hello I need to do top\_hits aggregation on the result of cardinality aggregation . Here is my aggregation: GET /logstash-2017.08.14/xms\_api\_station\_info/\_search?typed\_keys {"size": 0, "aggregations": { "uniq\_mac"…

---

## [How to use pipeline (ingest) in Java Index/Update API](https://discuss.elastic.co/t/how-to-use-pipeline-ingest-in-java-index-update-api/97087)

<div class="topic-metadata">

**Author:** [@LoadingZhang](https://discuss.elastic.co/u/LoadingZhang)\
**Replies:** 0\
**Last updated:** [August 15, 2017, 10:47am UTC](https://discuss.elastic.co/t/how-to-use-pipeline-ingest-in-java-index-update-api/97087 "2017-08-15T10:47:33Z")

</div>

I have trouble in this problem,this is what I do: this.esClient.add(new IndexRequest(esIndexName + "-" + TimeUtil.getNowTimeByFormat(indexSuffixFormat),indexTypeName).setPipeline(esIndexPipeline)); But I got errors: o…

---

## [Name queries in multisearch to know which result belongs to which query](https://discuss.elastic.co/t/name-queries-in-multisearch-to-know-which-result-belongs-to-which-query/96756)

<div class="topic-metadata">

**Author:** [@Karolinebryn](https://discuss.elastic.co/u/Karolinebryn)\
**Replies:** 2\
**Last updated:** [August 15, 2017, 10:22am UTC](https://discuss.elastic.co/t/name-queries-in-multisearch-to-know-which-result-belongs-to-which-query/96756 "2017-08-15T10:22:52Z")

</div>

I am creating a multisearch query that consists of several queries and I need to know which query provided which result. Example \_msearch: {"index": "myindex"} {"query": {"bool": {"must":{...}, "filter":{...}}}} {"inde…

---

## [Transport client error after installing x-pack on es-5-5-1](https://discuss.elastic.co/t/transport-client-error-after-installing-x-pack-on-es-5-5-1/97021)

<div class="topic-metadata">

**Author:** [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\
**Replies:** 3\
**Last updated:** [August 15, 2017, 8:39am UTC](https://discuss.elastic.co/t/transport-client-error-after-installing-x-pack-on-es-5-5-1/97021 "2017-08-15T08:39:14Z")

</div>

I have the following configs related to xpack: xpack.security.enabled: false xpack.monitoring.enabled: true xpack.ml.enabled: false xpack.graph.enabled: false xpack.watcher.enabled: false Also have the below: node…

---

## [ES snapshot & restore](https://discuss.elastic.co/t/es-snapshot-restore/96933)

<div class="topic-metadata">

**Author:** [@Vivek\_Samaga](https://discuss.elastic.co/u/Vivek_Samaga)\
**Replies:** 2\
**Last updated:** [August 15, 2017, 7:07am UTC](https://discuss.elastic.co/t/es-snapshot-restore/96933 "2017-08-15T07:07:53Z")

</div>

I have been trying to create snapshot of indices for my 2 node ES cluster. I have created NFS and mounted them. Now am running below json code in kibana sense UI and getting the error. Am running this against the ES url h…

---

## [Cross cluster search with elastic search scalability tests / performance results](https://discuss.elastic.co/t/cross-cluster-search-with-elastic-search-scalability-tests-performance-results/97053)

<div class="topic-metadata">

**Author:** [@purval](https://discuss.elastic.co/u/purval)\
**Replies:** 0\
**Last updated:** [August 15, 2017, 5:45am UTC](https://discuss.elastic.co/t/cross-cluster-search-with-elastic-search-scalability-tests-performance-results/97053 "2017-08-15T05:45:14Z")

</div>

My question is with reference to elasticsearch’s new feature ‘cross cluster search’ https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-cross-cluster-search.html Are there any performance tests/ stud…

---

## [Es 1.7.1 2.2.4 5.5.1 post](https://discuss.elastic.co/t/es-1-7-1-2-2-4-5-5-1-post/97050)

<div class="topic-metadata">

**Author:** [@yaoqijun](https://discuss.elastic.co/u/yaoqijun)\
**Replies:** 0\
**Last updated:** [August 15, 2017, 5:01am UTC](https://discuss.elastic.co/t/es-1-7-1-2-2-4-5-5-1-post/97050 "2017-08-15T05:01:10Z")

</div>

i want upgrade Es from 1.7.1 version , i read document, i know about the configuration about bulk, index thread poll default processors cores + 1 i write java code test post, user different java client version, de…

---

## [Denormalized relationship aggregations](https://discuss.elastic.co/t/denormalized-relationship-aggregations/97048)

<div class="topic-metadata">

**Author:** [@gadams00](https://discuss.elastic.co/u/gadams00)\
**Replies:** 1\
**Last updated:** [August 15, 2017, 4:22am UTC](https://discuss.elastic.co/t/denormalized-relationship-aggregations/97048 "2017-08-15T04:22:37Z")

</div>

According to the definitive guide (https://www.elastic.co/guide/en/elasticsearch/guide/current/denormalization.html) denormalization is described as the most performant approach to modeling relationships in elasticsearch…

---

## [NEST 5.5 Attribute mapping and custom JsonConverter not working](https://discuss.elastic.co/t/nest-5-5-attribute-mapping-and-custom-jsonconverter-not-working/96770)

<div class="topic-metadata">

**Author:** [@Kennethtruyers](https://discuss.elastic.co/u/Kennethtruyers)\
**Replies:** 3\
**Last updated:** [August 15, 2017, 1:31am UTC](https://discuss.elastic.co/t/nest-5-5-attribute-mapping-and-custom-jsonconverter-not-working/96770 "2017-08-15T01:31:16Z")

</div>

We're using Nest 5.5.0 and attribute mapping to create our indices in Elasticsearch. As part of some of our attributes, we're using custom JsonConverters. We're migrating from 1.7.3, where this mapping was handled corre…

---

## [Unable to find watch in the watch store](https://discuss.elastic.co/t/unable-to-find-watch-in-the-watch-store/96854)

<div class="topic-metadata">

**Author:** [@BlackEcho](https://discuss.elastic.co/u/BlackEcho)\
**Replies:** 2\
**Last updated:** [August 15, 2017, 1:25am UTC](https://discuss.elastic.co/t/unable-to-find-watch-in-the-watch-store/96854 "2017-08-15T01:25:03Z")

</div>

I just got my ELK stack with X-Pack setup. For the most part it seems to be working great. I am seeing a lot of warnings in my logs, about unable to find a watch in the watch store, but I haven’t tried to set any watches…

---

## [Template error Discover: "field" is a required parameter](https://discuss.elastic.co/t/template-error-discover-field-is-a-required-parameter/97039)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 0\
**Last updated:** [August 15, 2017, 12:25am UTC](https://discuss.elastic.co/t/template-error-discover-field-is-a-required-parameter/97039 "2017-08-15T00:25:40Z")

</div>

Hi all Here i am trying to define custom template for csv data here is my template PUT \_template/speedtest { "template": "speedtest\*", "settings": { "number\_of\_shards": "6", "number\_of\_replicas": "1" }, "mappings": { …

---

## [Unknown xpack transport settings after upgrading to ES 6](https://discuss.elastic.co/t/unknown-xpack-transport-settings-after-upgrading-to-es-6/96952)

<div class="topic-metadata">

**Author:** [@vb4t](https://discuss.elastic.co/u/vb4t)\
**Replies:** 1\
**Last updated:** [August 15, 2017, 12:07am UTC](https://discuss.elastic.co/t/unknown-xpack-transport-settings-after-upgrading-to-es-6/96952 "2017-08-15T00:07:04Z")

</div>

I am trying to upgrade one ES node to 6.0.0-beta1 (xpack 6 included). It do not start with following error message: java.lang.IllegalArgumentException: unknown setting \[transport.profiles.client.xpack.security.ssl.enabl…

---

## [UNEXPECTED POOL ERROR - Logstash workers](https://discuss.elastic.co/t/unexpected-pool-error-logstash-workers/97038)

<div class="topic-metadata">

**Author:** [@test123](https://discuss.elastic.co/u/test123)\
**Replies:** 0\
**Last updated:** [August 14, 2017, 11:59pm UTC](https://discuss.elastic.co/t/unexpected-pool-error-logstash-workers/97038 "2017-08-14T23:59:24Z")

</div>

Hi Guys, I have setup ELK pipeline with Elasticsearch output from logstash. Currently, I am getting ~6000 events per second. This is with default number of workers in logstash. However, when I increase number of workers…

---

## [Illegal latitude value exception in elasticsearch](https://discuss.elastic.co/t/illegal-latitude-value-exception-in-elasticsearch/95029)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 26\
**Last updated:** [August 14, 2017, 10:42pm UTC](https://discuss.elastic.co/t/illegal-latitude-value-exception-in-elasticsearch/95029 "2017-08-14T22:42:15Z")

</div>

Hi, I am getting the following exception in Elasticsearch: Caused by: java.lang.IllegalArgumentException:illegal latitude value \[269.9999642930925\] for clientrealip at clientrealip is my ip filed. In the logstash ou…

---

## [Return Duplicates](https://discuss.elastic.co/t/return-duplicates/97016)

<div class="topic-metadata">

**Author:** [@The\_Juke\_Box\_Hero](https://discuss.elastic.co/u/The_Juke_Box_Hero)\
**Replies:** 2\
**Last updated:** [August 14, 2017, 9:19pm UTC](https://discuss.elastic.co/t/return-duplicates/97016 "2017-08-14T21:19:04Z")

</div>

Hi, I researched the web and the forums for this especific use case but could not find relevant information. Goal: From my interface, I want to pass a date range and state code to my elastic instance to find all docume…

---

## [Learner:Installing Elasticsearch from archive to Docker](https://discuss.elastic.co/t/learner-installing-elasticsearch-from-archive-to-docker/97025)

<div class="topic-metadata">

**Author:** [@stephenboston](https://discuss.elastic.co/u/stephenboston)\
**Replies:** 0\
**Last updated:** [August 14, 2017, 9:29pm UTC](https://discuss.elastic.co/t/learner-installing-elasticsearch-from-archive-to-docker/97025 "2017-08-14T21:29:14Z")

</div>

I know there are elasticsearch dockers I could pull but I’m trying to understand so I’m starting from scratch. I’m in Ubuntu Mate 17.04. To be even more annoying, I want to avoid installing as a service because that …

---

## [Different null\_value for different doc type of same index](https://discuss.elastic.co/t/different-null-value-for-different-doc-type-of-same-index/96673)

<div class="topic-metadata">

**Author:** [@gchen](https://discuss.elastic.co/u/gchen)\
**Replies:** 3\
**Last updated:** [August 14, 2017, 9:14pm UTC](https://discuss.elastic.co/t/different-null-value-for-different-doc-type-of-same-index/96673 "2017-08-14T21:14:14Z")

</div>

Hi Is it possible to set the null\_value to different values for different doc type of same index? I’m able to do it for version 1.4. I’m working on upgrading our cluster to 2.4 now and its erroring out. { "text "st…

---

## [How data distribute for shard number less than number of node in a cluster](https://discuss.elastic.co/t/how-data-distribute-for-shard-number-less-than-number-of-node-in-a-cluster/97014)

<div class="topic-metadata">

**Author:** [@sunchnaras](https://discuss.elastic.co/u/sunchnaras)\
**Replies:** 0\
**Last updated:** [August 14, 2017, 7:16pm UTC](https://discuss.elastic.co/t/how-data-distribute-for-shard-number-less-than-number-of-node-in-a-cluster/97014 "2017-08-14T19:16:33Z")

</div>

I decided to have one index for each country for my job post application. Document number per index between 50k to 3 millions, so I end up with a lot of indices with 1 shard in a 8 nodes cluster. Does data in the cluster…

---

## [Changing mapping](https://discuss.elastic.co/t/changing-mapping/94981)

<div class="topic-metadata">

**Author:** [@vinpereira](https://discuss.elastic.co/u/vinpereira)\
**Replies:** 9\
**Last updated:** [August 14, 2017, 6:49pm UTC](https://discuss.elastic.co/t/changing-mapping/94981 "2017-08-14T18:49:24Z")

</div>

Hi everyone, Finally, my company will switch from ES 1.7 to ES 5.5 (in fact, the new one is for new projects … and the old for that already exists … anyway) ! "Old" Mapping { "properties": { // some fields …

---

## [Converting Node Client to Transport client?](https://discuss.elastic.co/t/converting-node-client-to-transport-client/94844)

<div class="topic-metadata">

**Author:** [@areddy7021](https://discuss.elastic.co/u/areddy7021)\
**Replies:** 6\
**Last updated:** [August 14, 2017, 5:29pm UTC](https://discuss.elastic.co/t/converting-node-client-to-transport-client/94844 "2017-08-14T17:29:39Z")

</div>

I am facing an issue while converting the node client to transport client , can any one please guide me on the conversion , It is saying none of the configured nodes available. Do any one has any snippet to create a tr…

---

## [Control query cache](https://discuss.elastic.co/t/control-query-cache/96997)

<div class="topic-metadata">

**Author:** [@nimrodparasol](https://discuss.elastic.co/u/nimrodparasol)\
**Replies:** 0\
**Last updated:** [August 14, 2017, 4:05pm UTC](https://discuss.elastic.co/t/control-query-cache/96997 "2017-08-14T16:05:47Z")

</div>

Hi, I’m using Elasticsearch to index logs of hundreds of thousands of IOT devices. I have thousands of customers and each one of them is permitted to query logs of some of the devices. To enforce the permissions I use…

---

## [Failed starting 'elasticsearch-service-x64' service](https://discuss.elastic.co/t/failed-starting-elasticsearch-service-x64-service/93784)

<div class="topic-metadata">

**Author:** [@Navakanth\_B](https://discuss.elastic.co/u/Navakanth_B)\
**Replies:** 9\
**Last updated:** [August 14, 2017, 3:47pm UTC](https://discuss.elastic.co/t/failed-starting-elasticsearch-service-x64-service/93784 "2017-08-14T15:47:12Z")

</div>

ES version: elasticsearch-5.5.0 Java version: 1.8.0\_91 OS: Windows-7(64 bit) Description: Could not start elasticsearch-service-x64 service, showing Failed starting 'elasticsearch-service-x64' service message in conso…

---

## [Index created with 10 shards with roll over api when first index created was with 30 shards](https://discuss.elastic.co/t/index-created-with-10-shards-with-roll-over-api-when-first-index-created-was-with-30-shards/96860)

<div class="topic-metadata">

**Author:** [@sgunnala](https://discuss.elastic.co/u/sgunnala)\
**Replies:** 6\
**Last updated:** [August 14, 2017, 3:26pm UTC](https://discuss.elastic.co/t/index-created-with-10-shards-with-roll-over-api-when-first-index-created-was-with-30-shards/96860 "2017-08-14T15:26:07Z")

</div>

Elastic Search/Kibana 5.2 and Logstash 5.0.2 with kafka 0.9 We create the first indices 30 shards with logstash\*-000001 and using time/log count and curator with rollover api and Alias to rollover indices. We are getti…

---

## [Does the RestHighLevelClient use something similar to node sniffing in the background?](https://discuss.elastic.co/t/does-the-resthighlevelclient-use-something-similar-to-node-sniffing-in-the-background/96987)

<div class="topic-metadata">

**Author:** [@assaf79](https://discuss.elastic.co/u/assaf79)\
**Replies:** 1\
**Last updated:** [August 14, 2017, 2:57pm UTC](https://discuss.elastic.co/t/does-the-resthighlevelclient-use-something-similar-to-node-sniffing-in-the-background/96987 "2017-08-14T14:57:47Z")

</div>

like the one use with the low level rest client thanks

---

## [Ignore\_malformed doesn't work?](https://discuss.elastic.co/t/ignore-malformed-doesnt-work/96793)

<div class="topic-metadata">

**Author:** [@djmcgreal](https://discuss.elastic.co/u/djmcgreal)\
**Replies:** 2\
**Last updated:** [August 14, 2017, 2:49pm UTC](https://discuss.elastic.co/t/ignore-malformed-doesnt-work/96793 "2017-08-14T14:49:57Z")

</div>

Hi, I’m using 5.2.2 and have set my index’s settings.index.mapping.ignore\_malformed to true (I have verified this) and yet when I index a document I get a document rejected because it tries to put an object where it’s e…

---

## [Elasticsearch Curator not respecting range on filtertype](https://discuss.elastic.co/t/elasticsearch-curator-not-respecting-range-on-filtertype/96816)

<div class="topic-metadata">

**Author:** [@pedler](https://discuss.elastic.co/u/pedler)\
**Replies:** 3\
**Last updated:** [August 14, 2017, 2:06pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-not-respecting-range-on-filtertype/96816 "2017-08-14T14:06:31Z")

</div>

I’m trying to set up curator to alias and de-alias indices based on their age, but the removal isn’t working as expected. If an older index doesn’t exist, the alias is removed from the current index. This isn’t a problem…

---

## [How can I get the data if 3 conditions are met](https://discuss.elastic.co/t/how-can-i-get-the-data-if-3-conditions-are-met/96972)

<div class="topic-metadata">

**Author:** [@skodari](https://discuss.elastic.co/u/skodari)\
**Replies:** 5\
**Last updated:** [August 14, 2017, 2:15pm UTC](https://discuss.elastic.co/t/how-can-i-get-the-data-if-3-conditions-are-met/96972 "2017-08-14T14:15:46Z")

</div>

Hi Team I am firing below must match query. I need the data if below 3 conditions are met GET /std\_index/std\_type/\_search {"query":{ "bool": {"must":\[ {"match":{"std\_id":"10002"}}, {"match…

---

## [Truncate keyword to specific length and store](https://discuss.elastic.co/t/truncate-keyword-to-specific-length-and-store/96857)

<div class="topic-metadata">

**Author:** [@adyjayex](https://discuss.elastic.co/u/adyjayex)\
**Replies:** 5\
**Last updated:** [August 14, 2017, 2:06pm UTC](https://discuss.elastic.co/t/truncate-keyword-to-specific-length-and-store/96857 "2017-08-14T14:06:50Z")

</div>

Hello, I’m trying to retrieve only 128 characters of a text field I’m storing due to the fact that the text field is often extremely large, but for preview purposes I’d still like to retrieve part of that field without …

---

## [Memory allocation to elasticsearch component for a cluster setup with n nodes](https://discuss.elastic.co/t/memory-allocation-to-elasticsearch-component-for-a-cluster-setup-with-n-nodes/96908)

<div class="topic-metadata">

**Author:** [@Tushar\_Sharma1](https://discuss.elastic.co/u/Tushar_Sharma1)\
**Replies:** 3\
**Last updated:** [August 14, 2017, 1:48pm UTC](https://discuss.elastic.co/t/memory-allocation-to-elasticsearch-component-for-a-cluster-setup-with-n-nodes/96908 "2017-08-14T13:48:40Z")

</div>

Hi, I am trying to setup cluster but i’m confused that whether index size,shard size depend upon “Ram” or “disk” size. Do I need to divide disk memory or RAM of a cluster between shards.

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1978)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1980)
