# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1988

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1989

---

## [Geo Point](https://discuss.elastic.co/t/geo-point/93010)

<div class="topic-metadata">

**Author:** [@Tals](https://discuss.elastic.co/u/Tals)\
**Replies:** 2\
**Last updated:** [August 6, 2017, 12:33pm UTC](https://discuss.elastic.co/t/geo-point/93010 "2017-08-06T12:33:00Z")

</div>

Hi I'm new in ES. I have Json like this {"altitde": 10972.8,"callsign": "","heading": 191.74,"icao24": "842194","latitde": 36.666,"longitde":35.222,"on\_grond": true,"origin\_contry": "Japan","sensors": false,"time\_positi…

---

## [Chaining ingest pipelines?](https://discuss.elastic.co/t/chaining-ingest-pipelines/96010)

<div class="topic-metadata">

**Author:** [@Dan\_Markhasin](https://discuss.elastic.co/u/Dan_Markhasin)\
**Replies:** 1\
**Last updated:** [August 6, 2017, 11:26am UTC](https://discuss.elastic.co/t/chaining-ingest-pipelines/96010 "2017-08-06T11:26:53Z")

</div>

Is it possible to chain ingest pipelines or create some sort of relationship between them? For example, I would like to perform some calculations/modifications on all incoming documents, and then perform some business s…

---

## [Agregations and filters](https://discuss.elastic.co/t/agregations-and-filters/96008)

<div class="topic-metadata">

**Author:** [@SerjGAmoVeR](https://discuss.elastic.co/u/SerjGAmoVeR)\
**Replies:** 0\
**Last updated:** [August 6, 2017, 10:15am UTC](https://discuss.elastic.co/t/agregations-and-filters/96008 "2017-08-06T10:15:32Z")

</div>

I have an index with this mapping: “domain”: { “type”: “string”, “index”: “not\_analyzed” }, “keyword”: { “type”: “string”, } Example data: {“domain”: “google.com”, “keyword”:“search”}, {“domain”: “google.com”, …

---

## [Can't disable security](https://discuss.elastic.co/t/cant-disable-security/95939)

<div class="topic-metadata">

**Author:** [@IvanBiv](https://discuss.elastic.co/u/IvanBiv)\
**Replies:** 3\
**Last updated:** [August 6, 2017, 10:05am UTC](https://discuss.elastic.co/t/cant-disable-security/95939 "2017-08-06T10:05:11Z")

</div>

If I set (in elasticsearch.yml and kibana.yml): xpack.security.enabled: false than call sudo service elasticsearch restart sudo service elasticsearch status sudo service kibana restart sudo service kibana status …

---

## [How to use java API to construct boolean expression?](https://discuss.elastic.co/t/how-to-use-java-api-to-construct-boolean-expression/96005)

<div class="topic-metadata">

**Author:** [@jiangshigen](https://discuss.elastic.co/u/jiangshigen)\
**Replies:** 1\
**Last updated:** [August 6, 2017, 8:47am UTC](https://discuss.elastic.co/t/how-to-use-java-api-to-construct-boolean-expression/96005 "2017-08-06T08:47:38Z")

</div>

I want to use multiple conditions to construct boolean expression，I don’t know how to use Java API to do it，I hope someone can help me

---

## [org.elasticsearch.hadoop.rest.EsHadoopInvalidRequest: returned \[400|Bad Request:\]](https://discuss.elastic.co/t/org-elasticsearch-hadoop-rest-eshadoopinvalidrequest-returned-400-bad-request/95803)

<div class="topic-metadata">

**Author:** [@m-kiuchi](https://discuss.elastic.co/u/m-kiuchi)\
**Replies:** 2\
**Last updated:** [August 5, 2017, 11:35pm UTC](https://discuss.elastic.co/t/org-elasticsearch-hadoop-rest-eshadoopinvalidrequest-returned-400-bad-request/95803 "2017-08-05T23:35:27Z")

</div>

Hi, there When I tried read index from Spark, found error. py4j.protocol.Py4JJavaError: An error occurred while calling o35.load. : org.elasticsearch.hadoop.rest.EsHadoopInvalidRequest: \[HEAD\] on \[projects/project\] fai…

---

## [When path.data is changed, elasticsearch is not starting](https://discuss.elastic.co/t/when-path-data-is-changed-elasticsearch-is-not-starting/95991)

<div class="topic-metadata">

**Author:** [@rajesh](https://discuss.elastic.co/u/rajesh)\
**Replies:** 3\
**Last updated:** [August 5, 2017, 9:58pm UTC](https://discuss.elastic.co/t/when-path-data-is-changed-elasticsearch-is-not-starting/95991 "2017-08-05T21:58:39Z")

</div>

Hi, I have installed elasticsearch on Linux-Redhat distribution using RPM package. It runs normally until I change path.data in elasticsearch.yml. I set path.data to /opt/elk/es/data and it started failing with the belo…

---

## [Search in Elasticsearch objects from non blocked user](https://discuss.elastic.co/t/search-in-elasticsearch-objects-from-non-blocked-user/95525)

<div class="topic-metadata">

**Author:** [@rrader](https://discuss.elastic.co/u/rrader)\
**Replies:** 5\
**Last updated:** [August 5, 2017, 9:29pm UTC](https://discuss.elastic.co/t/search-in-elasticsearch-objects-from-non-blocked-user/95525 "2017-08-05T21:29:21Z")

</div>

In Elaasticsearch we have 3 collections, users, products and blocked\_users. users{id, first\_name, last\_name, ...} products{id, user\_id, title, ...} blocked\_users{user\_id, blocked\_user\_id} I want to search products by t…

---

## [Convert Multiple Fields - Ingest Node - Convert Processor](https://discuss.elastic.co/t/convert-multiple-fields-ingest-node-convert-processor/95988)

<div class="topic-metadata">

**Author:** [@brandont](https://discuss.elastic.co/u/brandont)\
**Replies:** 1\
**Last updated:** [August 5, 2017, 9:05pm UTC](https://discuss.elastic.co/t/convert-multiple-fields-ingest-node-convert-processor/95988 "2017-08-05T21:05:16Z")

</div>

I want to configure an ingest node to convert multiple fields coming through a pipeline but when I define more than one “convert” processor, I get a duplicate key error in the Kibana console and they overwrite each other…

---

## [Aggregations grouped by value and time to generate square wave style graph](https://discuss.elastic.co/t/aggregations-grouped-by-value-and-time-to-generate-square-wave-style-graph/95990)

<div class="topic-metadata">

**Author:** [@ogtool](https://discuss.elastic.co/u/ogtool)\
**Replies:** 0\
**Last updated:** [August 5, 2017, 6:57pm UTC](https://discuss.elastic.co/t/aggregations-grouped-by-value-and-time-to-generate-square-wave-style-graph/95990 "2017-08-05T18:57:15Z")

</div>

I’ve had a good look around for options on this, but I’m either missing something, or, the keywords I’ve been used are relatively generic and getting lots of other search results for that aren’t giving me what I need (or…

---

## [How to merge Two Indices](https://discuss.elastic.co/t/how-to-merge-two-indices/95981)

<div class="topic-metadata">

**Author:** [@user123](https://discuss.elastic.co/u/user123)\
**Replies:** 1\
**Last updated:** [August 5, 2017, 4:59pm UTC](https://discuss.elastic.co/t/how-to-merge-two-indices/95981 "2017-08-05T16:59:06Z")

</div>

How to merge two different indices in elasticsearch which created in two different path ???

---

## [Elasticsearch painless script php](https://discuss.elastic.co/t/elasticsearch-painless-script-php/95977)

<div class="topic-metadata">

**Author:** [@svarup](https://discuss.elastic.co/u/svarup)\
**Replies:** 1\
**Last updated:** [August 5, 2017, 1:14pm UTC](https://discuss.elastic.co/t/elasticsearch-painless-script-php/95977 "2017-08-05T13:14:49Z")

</div>

Elasticsearch update by query can’t update field with null value $a = NULL; $b = NULL; ‘script’ =\> \[ ‘inline’ =\> “ctx.\_source.a = $a; ctx.\_source.b = $b;”, ‘lang’ =\> ‘painless’, \], give me compile error “script\_st…

---

## [Unable to add a new node](https://discuss.elastic.co/t/unable-to-add-a-new-node/94684)

<div class="topic-metadata">

**Author:** [@Gkmgaurav](https://discuss.elastic.co/u/Gkmgaurav)\
**Replies:** 7\
**Last updated:** [August 5, 2017, 10:45am UTC](https://discuss.elastic.co/t/unable-to-add-a-new-node/94684 "2017-08-05T10:45:56Z")

</div>

Hi friends, I am new to elastic search. It is possible someone might have asked this question previously. But, I am not able to find a proper solution. I had a 3 node cluster on AWS, with ver 1.5 . Out of the 3 nodes two…

---

## [Delete data in Elasticsearch Automatically](https://discuss.elastic.co/t/delete-data-in-elasticsearch-automatically/95968)

<div class="topic-metadata">

**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Replies:** 1\
**Last updated:** [August 5, 2017, 8:46am UTC](https://discuss.elastic.co/t/delete-data-in-elasticsearch-automatically/95968 "2017-08-05T08:46:08Z")

</div>

Is it possible to delete the indexed data once in 30 days automatically ? As i dont need my old data after 30 days(for certain amount of time)

---

## [Match Specific element with specific id (RETURN-1 or 0)- DSL](https://discuss.elastic.co/t/match-specific-element-with-specific-id-return-1-or-0-dsl/95964)

<div class="topic-metadata">

**Author:** [@Akanksha\_Toshniwal](https://discuss.elastic.co/u/Akanksha_Toshniwal)\
**Replies:** 0\
**Last updated:** [August 5, 2017, 6:31am UTC](https://discuss.elastic.co/t/match-specific-element-with-specific-id-return-1-or-0-dsl/95964 "2017-08-05T06:31:38Z")

</div>

If tags:\[a,b,c,d…k\], tags:\[x,y,a,…b\] are the fields, I want to perform search in DSL (python), if tags:\[a\] is found, It should returns all id’s which satisfies the search, then I want to search tags:\[b\] on same ids (to …

---

## [Is it good idea to store small values in ElasticSearch?](https://discuss.elastic.co/t/is-it-good-idea-to-store-small-values-in-elasticsearch/95963)

<div class="topic-metadata">

**Author:** [@Nithin\_Devang](https://discuss.elastic.co/u/Nithin_Devang)\
**Replies:** 1\
**Last updated:** [August 5, 2017, 5:31am UTC](https://discuss.elastic.co/t/is-it-good-idea-to-store-small-values-in-elasticsearch/95963 "2017-08-05T05:31:09Z")

</div>

Hi, I use Elasticsearch to store large continuous sensor data and analyse it later. Some part of my code also includes configurable threshold alert(s). When there is threshold break it triggers alerts. This threshold va…

---

## [Where to start about managing network device logs](https://discuss.elastic.co/t/where-to-start-about-managing-network-device-logs/95962)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 1\
**Last updated:** [August 5, 2017, 5:24am UTC](https://discuss.elastic.co/t/where-to-start-about-managing-network-device-logs/95962 "2017-08-05T05:24:52Z")

</div>

Hi Guys. I am complete beginner of ELK and just going through the documents. I am network administrator and are managing Firewalls, Proxy, dozens of Linux servers comprises of DNS, Reverse Proxy, Web servers and many ot…

---

## [Is there a way to see one document indexed result. is the fields matching the mapping type](https://discuss.elastic.co/t/is-there-a-way-to-see-one-document-indexed-result-is-the-fields-matching-the-mapping-type/95877)

<div class="topic-metadata">

**Author:** [@Red](https://discuss.elastic.co/u/Red)\
**Replies:** 9\
**Last updated:** [August 5, 2017, 1:58am UTC](https://discuss.elastic.co/t/is-there-a-way-to-see-one-document-indexed-result-is-the-fields-matching-the-mapping-type/95877 "2017-08-05T01:58:44Z")

</div>

is there a way to see one document indexed result. is the fields matching the mapping type

---

## [TermVectors Java example](https://discuss.elastic.co/t/termvectors-java-example/95857)

<div class="topic-metadata">

**Author:** [@Kyriakos](https://discuss.elastic.co/u/Kyriakos)\
**Replies:** 1\
**Last updated:** [August 4, 2017, 11:13pm UTC](https://discuss.elastic.co/t/termvectors-java-example/95857 "2017-08-04T23:13:17Z")

</div>

Hello, i am trying to get the termvectors of an index but every example i find is for an older version of Elasticsearch so they don’t work. I tried to get the termvectors like this: TermVectorsResponse resp = client.…

---

## [Escaping dots](https://discuss.elastic.co/t/escaping-dots/95892)

<div class="topic-metadata">

**Author:** [@bruno.teixeira](https://discuss.elastic.co/u/bruno.teixeira)\
**Replies:** 1\
**Last updated:** [August 4, 2017, 11:02pm UTC](https://discuss.elastic.co/t/escaping-dots/95892 "2017-08-04T23:02:18Z")

</div>

Hello guyz, I’m trying to map a dynamic dictionary and i’m having problems with some keys. Picture this example. “systemvariables”:{ “windows.user.home”:“C:\\Users\\someuser”, “windows.user.home.desktop”:“C:\\Users\\som…

---

## [Versions pre 5.x](https://discuss.elastic.co/t/versions-pre-5-x/93451)

<div class="topic-metadata">

**Author:** [@Jerry\_Hoffmeister](https://discuss.elastic.co/u/Jerry_Hoffmeister)\
**Replies:** 8\
**Last updated:** [August 4, 2017, 10:46pm UTC](https://discuss.elastic.co/t/versions-pre-5-x/93451 "2017-08-04T22:46:57Z")

</div>

We're currently running pre 5.x versions of the elastic stack and want to upgrade to the latest pre 5.x versions and wanted to make sure I've got the right versions to upgrade to. Here's what we're currently running and…

---

## [Elasticsearch clustering process](https://discuss.elastic.co/t/elasticsearch-clustering-process/95646)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 5\
**Last updated:** [August 4, 2017, 10:46pm UTC](https://discuss.elastic.co/t/elasticsearch-clustering-process/95646 "2017-08-04T22:46:45Z")

</div>

I am trying to understand how the elasticsearch clustering works. Whether it considers cluster name to form a cluster and will pickup the cluster state settings from discovery.zen.ping.unicast.hosts host names? I think i…

---

## [Convert a standaline Elasticsearch node to a Cluster Master and add more nodes](https://discuss.elastic.co/t/convert-a-standaline-elasticsearch-node-to-a-cluster-master-and-add-more-nodes/95462)

<div class="topic-metadata">

**Author:** [@Drift](https://discuss.elastic.co/u/Drift)\
**Replies:** 14\
**Last updated:** [August 4, 2017, 10:46pm UTC](https://discuss.elastic.co/t/convert-a-standaline-elasticsearch-node-to-a-cluster-master-and-add-more-nodes/95462 "2017-08-04T22:46:09Z")

</div>

have a fully working and tuned Elasticsearch host which also runs logstash on the same host, say Host-A. This however is a standalone ES host where the data files are being ingested using logstash to elasticsearch and I …

---

## [Group by on Derived string field](https://discuss.elastic.co/t/group-by-on-derived-string-field/95940)

<div class="topic-metadata">

**Author:** [@EuclideanSearch](https://discuss.elastic.co/u/EuclideanSearch)\
**Replies:** 4\
**Last updated:** [August 4, 2017, 9:22pm UTC](https://discuss.elastic.co/t/group-by-on-derived-string-field/95940 "2017-08-04T21:22:32Z")

</div>

Hi. I need to take the first K characters of a string field (which is not analyzed) and aggregate on that. I know how to aggregate, but is it possible to aggregate on a derived field in ES?

---

## [Query where fields from different indexes are not all equal?](https://discuss.elastic.co/t/query-where-fields-from-different-indexes-are-not-all-equal/94174)

<div class="topic-metadata">

**Author:** [@samdash](https://discuss.elastic.co/u/samdash)\
**Replies:** 5\
**Last updated:** [August 4, 2017, 6:24pm UTC](https://discuss.elastic.co/t/query-where-fields-from-different-indexes-are-not-all-equal/94174 "2017-08-04T18:24:00Z")

</div>

Hi, Can i query across 2 indexes with just 2 common fields and get other fields in the results ? example : Index 1 has fields : A, B, C, D Index 2 has fields : A,B,E,F,G Only A and B are common between these indexes…

---

## [Read ES index snapshot in spark without restore](https://discuss.elastic.co/t/read-es-index-snapshot-in-spark-without-restore/95835)

<div class="topic-metadata">

**Author:** [@prabhushrikant](https://discuss.elastic.co/u/prabhushrikant)\
**Replies:** 1\
**Last updated:** [August 4, 2017, 6:06pm UTC](https://discuss.elastic.co/t/read-es-index-snapshot-in-spark-without-restore/95835 "2017-08-04T18:06:09Z")

</div>

I have a large ES index in production cluster which is snapshot daily. For some analytics purpose I want to read all the docs in that index in RDD (ES-Hadoop for apache spark library jars can be useful here) but I don’t …

---

## [SSL / HTTPS Connection with Low Level Rest API?](https://discuss.elastic.co/t/ssl-https-connection-with-low-level-rest-api/94999)

<div class="topic-metadata">

**Author:** [@khatkarrohit](https://discuss.elastic.co/u/khatkarrohit)\
**Replies:** 2\
**Last updated:** [August 4, 2017, 5:56pm UTC](https://discuss.elastic.co/t/ssl-https-connection-with-low-level-rest-api/94999 "2017-08-04T17:56:28Z")

</div>

I am using low level rest API to access Elastic Search in AWS (AWS Service). Aws provides the HTTPS url. @Bean public RestClient restClient() throws Exception { RestClient restClient = RestClient.builder…

---

## [Ansible playbook fails at \[elasticsearch : Wait for elasticsearch to startup\]](https://discuss.elastic.co/t/ansible-playbook-fails-at-elasticsearch-wait-for-elasticsearch-to-startup/95918)

<div class="topic-metadata">

**Author:** [@wassim](https://discuss.elastic.co/u/wassim)\
**Replies:** 0\
**Last updated:** [August 4, 2017, 3:50pm UTC](https://discuss.elastic.co/t/ansible-playbook-fails-at-elasticsearch-wait-for-elasticsearch-to-startup/95918 "2017-08-04T15:50:52Z")

</div>

I couldn’t get the Ansible playbook to work with ubuntu 16.04 it fails at \[elasticsearch : Wait for elasticsearch to startup\] nor figure out what goes wrong. TASK \[elasticsearch : Wait for elasticsearch to startup\] \*\*\*\*…

---

## [Cross-cluster errors if remote cluster cannot be reached](https://discuss.elastic.co/t/cross-cluster-errors-if-remote-cluster-cannot-be-reached/95355)

<div class="topic-metadata">

**Author:** [@afederici](https://discuss.elastic.co/u/afederici)\
**Replies:** 1\
**Last updated:** [August 4, 2017, 3:17pm UTC](https://discuss.elastic.co/t/cross-cluster-errors-if-remote-cluster-cannot-be-reached/95355 "2017-08-04T15:17:29Z")

</div>

Hi, I’m experimenting with the cross-cluster search feature and I have a question about error handling. Imagine I have a multi-cluster setup like this: cluster\_master: my app connects here and this is where I setup t…

---

## [Elasticsearch 5.5 custom logs directory error: Unable to create logger at ''](https://discuss.elastic.co/t/elasticsearch-5-5-custom-logs-directory-error-unable-to-create-logger-at/95911)

<div class="topic-metadata">

**Author:** [@dbakti7](https://discuss.elastic.co/u/dbakti7)\
**Replies:** 0\
**Last updated:** [August 4, 2017, 3:10pm UTC](https://discuss.elastic.co/t/elasticsearch-5-5-custom-logs-directory-error-unable-to-create-logger-at/95911 "2017-08-04T15:10:16Z")

</div>

I try to install elasticsearch as Windows service. I set the environment variables to change the data and logs path with DATA\_DIR and LOG\_DIR. If the LOG\_DIR is not created yet, and it is only 1 level, the directory wil…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1987)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1989)
