# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=316 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 317 --- ## [CompositeAggregation.aggregateAfter usage](https://discuss.elastic.co/t/compositeaggregation-aggregateafter-usage/323196)
**Author:** [@hmkhitaryan](https://discuss.elastic.co/u/hmkhitaryan)\ **Replies:** 0\ **Last updated:** [January 15, 2023, 11:56am UTC](https://discuss.elastic.co/t/compositeaggregation-aggregateafter-usage/323196 "2023-01-15T11:56:33Z")
Hello everyone. this is my code, where I want to gain pagination ability, for not getting the whole bucket list and not to overload RAM memory. But anyway, it's unclear to me: what is this actually 'afterKey' for, an… --- ## [Failed to start Elasticsearch](https://discuss.elastic.co/t/failed-to-start-elasticsearch/322433)
**Author:** [@alam02](https://discuss.elastic.co/u/alam02)\ **Replies:** 1\ **Last updated:** [January 15, 2023, 3:09am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch/322433 "2023-01-15T03:09:50Z")
Hello i have kibana, logstash started but impossible to start elastic.service and i got this error code when i run systemctl start elastic.service. Also on the website i receive this message " kibana is not ready yet". … --- ## [Adding score to SearchHit via REST Template](https://discuss.elastic.co/t/adding-score-to-searchhit-via-rest-template/323154)
**Author:** [@timothystone](https://discuss.elastic.co/u/timothystone)\ **Replies:** 3\ **Last updated:** [January 15, 2023, 3:07am UTC](https://discuss.elastic.co/t/adding-score-to-searchhit-via-rest-template/323154 "2023-01-15T03:07:04Z")
I'm using a NativeSearchQuery with setTrackScores(true). This query is passed to the ElasticsearchRestTemplate#search(Query, Clazz) (inherited from AbstractElasticsearchTemplate#(Query, Clazz) The Clazz here is a typica… --- ## [Field value not found in aggregatable field](https://discuss.elastic.co/t/field-value-not-found-in-aggregatable-field/323182)
**Author:** [@nnet](https://discuss.elastic.co/u/nnet)\ **Replies:** 2\ **Last updated:** [January 14, 2023, 8:40pm UTC](https://discuss.elastic.co/t/field-value-not-found-in-aggregatable-field/323182 "2023-01-14T20:40:16Z")
Hi folks, I'm at a loss to understand this. ELK stack 5.6. Using filebeat i send json logs of nginx to logstash where they're parsed and fed into elasticsearch. No errors, all seems good. In kibana I have a visualizat… --- ## [Load Eland dataframe partially by query](https://discuss.elastic.co/t/load-eland-dataframe-partially-by-query/323180)
**Author:** [@mruiter](https://discuss.elastic.co/u/mruiter)\ **Replies:** 0\ **Last updated:** [January 14, 2023, 2:15pm UTC](https://discuss.elastic.co/t/load-eland-dataframe-partially-by-query/323180 "2023-01-14T14:15:13Z")
I'm trying to fetch data from Elasticsearch into an Eland dataframe partially, because it takes too much time to load the entire index. The following works, except for the \_query\_compiler. The official Eland docs contai… --- ## [Can an ID of an index be not null but empty?](https://discuss.elastic.co/t/can-an-id-of-an-index-be-not-null-but-empty/323167)
**Author:** [@Java2avaj](https://discuss.elastic.co/u/Java2avaj)\ **Replies:** 3\ **Last updated:** [January 14, 2023, 11:46am UTC](https://discuss.elastic.co/t/can-an-id-of-an-index-be-not-null-but-empty/323167 "2023-01-14T11:46:05Z")
Just a question if by default, an id of an index be empty string value “”? If yes, how to prevent from saving an empty id? --- ## [Clarification on \`docs.deleted\` in regards to data deletion compliance requirements](https://discuss.elastic.co/t/clarification-on-docs-deleted-in-regards-to-data-deletion-compliance-requirements/323160)
**Author:** [@alee47](https://discuss.elastic.co/u/alee47)\ **Replies:** 1\ **Last updated:** [January 14, 2023, 9:26am UTC](https://discuss.elastic.co/t/clarification-on-docs-deleted-in-regards-to-data-deletion-compliance-requirements/323160 "2023-01-14T09:26:50Z")
My organization uses Elasticsearch to store and index information for one of our services. We have an internal compliance requirement to delete data whenever a user of our service requests their data to be deleted. In or… --- ## [Is it possible to remove the UUID appended by SLM policies to snapshot names?](https://discuss.elastic.co/t/is-it-possible-to-remove-the-uuid-appended-by-slm-policies-to-snapshot-names/323172)
**Author:** [@nvnsv](https://discuss.elastic.co/u/nvnsv)\ **Replies:** 0\ **Last updated:** [January 14, 2023, 4:21am UTC](https://discuss.elastic.co/t/is-it-possible-to-remove-the-uuid-appended-by-slm-policies-to-snapshot-names/323172 "2023-01-14T04:21:09Z")
Hello! I was able to get SLM implemented however, I saw that there is a UUID appended to each snapshot name. Is it possible to remove that UUID? my policy runs every four hours and its named to be exact to the second \ **Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 0\ **Last updated:** [January 13, 2023, 8:17pm UTC](https://discuss.elastic.co/t/machine-learning-anomaly-detection-random-sampling-support/323158 "2023-01-13T20:17:41Z") Hi All, I was wondering if anyone knows if/how to use random sampling with machine learning anomaly detection? Use Case I would like to monitor data rates sent by various agents to various indices/data streams and wou… --- ## [Sign "+" was treated as wildcard in Elasticsearch API GET Search](https://discuss.elastic.co/t/sign-was-treated-as-wildcard-in-elasticsearch-api-get-search/323074)
**Author:** [@SooperTee](https://discuss.elastic.co/u/SooperTee)\ **Replies:** 2\ **Last updated:** [January 13, 2023, 6:20pm UTC](https://discuss.elastic.co/t/sign-was-treated-as-wildcard-in-elasticsearch-api-get-search/323074 "2023-01-13T18:20:07Z")
I was trying to access my Elasticsearch topic with API GET. please see below sample query. https://localhost:9200/my\_topic/\_search?pretty&q=trade.tradeType:"Delta +1" The problem with this search is that the result ret… --- ## [Index settings in elasticsearch 8+](https://discuss.elastic.co/t/index-settings-in-elasticsearch-8/323027)
**Author:** [@Idorasi\_Paul](https://discuss.elastic.co/u/Idorasi_Paul)\ **Replies:** 3\ **Last updated:** [January 13, 2023, 3:20pm UTC](https://discuss.elastic.co/t/index-settings-in-elasticsearch-8/323027 "2023-01-13T15:20:13Z")
Hello, from what I see, IndexSettings has a field of the same type called index. What is the difference if I set, for example, number\_of\_replicas like: index.number\_of\_replicas: 2 or directly: number\_of\_replicas: 2 ? --- ## [Query bool with must and should](https://discuss.elastic.co/t/query-bool-with-must-and-should/323135)
**Author:** [@sphawk](https://discuss.elastic.co/u/sphawk)\ **Replies:** 6\ **Last updated:** [January 13, 2023, 3:21pm UTC](https://discuss.elastic.co/t/query-bool-with-must-and-should/323135 "2023-01-13T15:21:57Z")
I'm trying to build a bool query. { "query": { "bool" : { "must" : \[ {"term": { "language": "es\_ES" }} \], "should": \[ { … --- ## [No old data in developer tool, but data are present in discover](https://discuss.elastic.co/t/no-old-data-in-developer-tool-but-data-are-present-in-discover/323134)
**Author:** [@vetsolution](https://discuss.elastic.co/u/vetsolution)\ **Replies:** 3\ **Last updated:** [January 13, 2023, 2:34pm UTC](https://discuss.elastic.co/t/no-old-data-in-developer-tool-but-data-are-present-in-discover/323134 "2023-01-13T14:34:55Z")
Modified today Hello, When I use the elastic api, via curl or the developper tool. I cannot got data from some old indice. But if I use the discover feature of Kibana, it can get those data. Moreover, if I go from di… --- ## [Searching through a document not knowing the path](https://discuss.elastic.co/t/searching-through-a-document-not-knowing-the-path/323132)
**Author:** [@Polala](https://discuss.elastic.co/u/Polala)\ **Replies:** 2\ **Last updated:** [January 13, 2023, 1:59pm UTC](https://discuss.elastic.co/t/searching-through-a-document-not-knowing-the-path/323132 "2023-01-13T13:59:03Z")
I want to search through a document and get data for Steven and all his children (so in this example James). Is there a way to do it not knowing the path for Steven - so it should be children.children.name - but what if… --- ## [Search by newly added wildcard field to existing index](https://discuss.elastic.co/t/search-by-newly-added-wildcard-field-to-existing-index/323122)
**Author:** [@bkelastic](https://discuss.elastic.co/u/bkelastic)\ **Replies:** 1\ **Last updated:** [January 13, 2023, 1:43pm UTC](https://discuss.elastic.co/t/search-by-newly-added-wildcard-field-to-existing-index/323122 "2023-01-13T13:43:16Z")
I have in mappings "fooField": { "type": "double" } I want to search by this field using wildcard query, so I added wildcard multifield "fooField": { "type": "double", "fields": {… --- ## [UNASSIGNED ALLOCATION\_FAILED](https://discuss.elastic.co/t/unassigned-allocation-failed/323128)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [January 13, 2023, 12:28pm UTC](https://discuss.elastic.co/t/unassigned-allocation-failed/323128 "2023-01-13T12:28:27Z")
What can we do in below case? { "note" : "No shard was specified in the explain API request, so this response explains a randomly chosen unassigned shard. There may be other unassigned shards in this cluster which can… --- ## [Where does Elasticsearch store/read logs](https://discuss.elastic.co/t/where-does-elasticsearch-store-read-logs/323119)
**Author:** [@Ibicf](https://discuss.elastic.co/u/Ibicf)\ **Replies:** 1\ **Last updated:** [January 13, 2023, 11:36am UTC](https://discuss.elastic.co/t/where-does-elasticsearch-store-read-logs/323119 "2023-01-13T11:36:41Z")
Greetings for eveyone! I'm newbie to Elasticsearch as much as in programming in general and I don't understand some things. I have a little Django-project for practise and I install Elasticsearch into project. I'm also… --- ## [Elasticsearch - check if the parameter is not empty](https://discuss.elastic.co/t/elasticsearch-check-if-the-parameter-is-not-empty/323096)
**Author:** [@Java2avaj](https://discuss.elastic.co/u/Java2avaj)\ **Replies:** 3\ **Last updated:** [January 13, 2023, 11:29am UTC](https://discuss.elastic.co/t/elasticsearch-check-if-the-parameter-is-not-empty/323096 "2023-01-13T11:29:58Z")
In SQL, we can perform the following in the where clause: SELECT \* FROM tbl WHERE :parameter \<\> '' OR :parameter is not null Is this possible in Elasticsearch to check if the input parameter/value is not null or empty?… --- ## [How to check details of version\_conflicts when wait\_for\_completion=false in update\_by\_query?](https://discuss.elastic.co/t/how-to-check-details-of-version-conflicts-when-wait-for-completion-false-in-update-by-query/323110)
**Author:** [@bkelastic](https://discuss.elastic.co/u/bkelastic)\ **Replies:** 0\ **Last updated:** [January 13, 2023, 9:40am UTC](https://discuss.elastic.co/t/how-to-check-details-of-version-conflicts-when-wait-for-completion-false-in-update-by-query/323110 "2023-01-13T09:40:30Z")
After executing \_update\_by\_query?conflicts=proceed&wait\_for\_completion=false I want to check details so I call GET \_tasks?detailed=true&actions=\*byquery and I receive response with number of "version\_conflicts" : {n… --- ## [How to know which element in the array is chosen by the fuzzysearch](https://discuss.elastic.co/t/how-to-know-which-element-in-the-array-is-chosen-by-the-fuzzysearch/323105)
**Author:** [@Heckler\_GlobalOperat](https://discuss.elastic.co/u/Heckler_GlobalOperat)\ **Replies:** 0\ **Last updated:** [January 13, 2023, 8:30am UTC](https://discuss.elastic.co/t/how-to-know-which-element-in-the-array-is-chosen-by-the-fuzzysearch/323105 "2023-01-13T08:30:59Z")
Hello, I have a tricky case and want to consult the experts here. We store our user info in Elasticsearch, an user may have different name aliases, all stored in a "names" array like below "names" : \[ { … --- ## [Elasticsearch Urdu Analyzer plug-in](https://discuss.elastic.co/t/elasticsearch-urdu-analyzer-plug-in/323088)
**Author:** [@Armeen\_Ashraf\_Khan\_F](https://discuss.elastic.co/u/Armeen_Ashraf_Khan_F)\ **Replies:** 0\ **Last updated:** [January 13, 2023, 6:32am UTC](https://discuss.elastic.co/t/elasticsearch-urdu-analyzer-plug-in/323088 "2023-01-13T06:32:50Z")
I am a Data Science Masters student doing thesis in Information Retrieval for my native language Urdu. Urdu is like Arabic in textual form. Currently, Urdu Analyzer has not been created in elasticsearch and I want to cre… --- ## [Kibana\_task\_manager ALLOCATION\_FAILED](https://discuss.elastic.co/t/kibana-task-manager-allocation-failed/323081)
**Author:** [@kohkaw](https://discuss.elastic.co/u/kohkaw)\ **Replies:** 0\ **Last updated:** [January 13, 2023, 3:09am UTC](https://discuss.elastic.co/t/kibana-task-manager-allocation-failed/323081 "2023-01-13T03:09:27Z")
Hi everyone. I am encountering an error on Elasticsearch 7.17.3 deployed with k8s where the shard assignment fails for Kibana\_task\_manager. GET \_cat/shards?v&h=index,shard,prirep,state,unassigned.reason&s=state:asc in… --- ## [How are write requests handled to an index in the RED state](https://discuss.elastic.co/t/how-are-write-requests-handled-to-an-index-in-the-red-state/323044)
**Author:** [@alee47](https://discuss.elastic.co/u/alee47)\ **Replies:** 2\ **Last updated:** [January 12, 2023, 10:20pm UTC](https://discuss.elastic.co/t/how-are-write-requests-handled-to-an-index-in-the-red-state/323044 "2023-01-12T22:20:52Z")
Hello, My organization uses Elasticsearch to power one of our services and regularly receive write requests into our cluster. We use the routing parameter on all search and write requests, so they are directed to a sing… --- ## [Is it possible to count elements of an array of two levels? array of arrays](https://discuss.elastic.co/t/is-it-possible-to-count-elements-of-an-array-of-two-levels-array-of-arrays/323047)
**Author:** [@jcornejo](https://discuss.elastic.co/u/jcornejo)\ **Replies:** 2\ **Last updated:** [January 12, 2023, 9:40pm UTC](https://discuss.elastic.co/t/is-it-possible-to-count-elements-of-an-array-of-two-levels-array-of-arrays/323047 "2023-01-12T21:40:46Z")
I need to count the elements of the campaign\_promotions.promotion\_prices array it's possible? "hits" : \[ { "\_index" : "dev\_scrap\_campaigns", "\_type" : "\_doc", "\_id" : "2t0k7oQBF4RU85fFCPX\_… --- ## [Missing authentication credentials when visiting localhost:9200 after running elasticsearch.bat](https://discuss.elastic.co/t/missing-authentication-credentials-when-visiting-localhost-9200-after-running-elasticsearch-bat/323018)
**Author:** [@Arthur\_Medforth](https://discuss.elastic.co/u/Arthur_Medforth)\ **Replies:** 2\ **Last updated:** [January 12, 2023, 9:21pm UTC](https://discuss.elastic.co/t/missing-authentication-credentials-when-visiting-localhost-9200-after-running-elasticsearch-bat/323018 "2023-01-12T21:21:30Z")
{"error":{"root\_cause":\[{"type":"security\_exception","reason":"missing authentication credentials for REST request \[/\]","header":{"WWW-Authenticate":\["Basic realm="security" charset="UTF-8"","ApiKey"\]}}\],"type":"security… --- ## [How to make a blank space query?](https://discuss.elastic.co/t/how-to-make-a-blank-space-query/323062)
**Author:** [@sanil](https://discuss.elastic.co/u/sanil)\ **Replies:** 0\ **Last updated:** [January 12, 2023, 8:57pm UTC](https://discuss.elastic.co/t/how-to-make-a-blank-space-query/323062 "2023-01-12T20:57:33Z")
Hey everyone, I am trying to make an Elasticsearch request with a blank space as the query. The query should literally be a blank space as such: " ". For example, the query looks like this : {query": ( ) OR (\* ). Howe… --- ## [Compute a ratio of one-to-many sum aggregated values](https://discuss.elastic.co/t/compute-a-ratio-of-one-to-many-sum-aggregated-values/323058)
**Author:** [@fzar](https://discuss.elastic.co/u/fzar)\ **Replies:** 0\ **Last updated:** [January 12, 2023, 8:12pm UTC](https://discuss.elastic.co/t/compute-a-ratio-of-one-to-many-sum-aggregated-values/323058 "2023-01-12T20:12:21Z")
hey, I am trying to compute a ratio of one-to-many sum aggregated values - obtained via a filters aggregation - against a top-level sum aggregated value without luck. Basically I want to compute a score for all docs (su… --- ## [ES is allocating indexes that are hot to nodes in the cold tier](https://discuss.elastic.co/t/es-is-allocating-indexes-that-are-hot-to-nodes-in-the-cold-tier/322972)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 9\ **Last updated:** [January 12, 2023, 7:07pm UTC](https://discuss.elastic.co/t/es-is-allocating-indexes-that-are-hot-to-nodes-in-the-cold-tier/322972 "2023-01-12T19:07:20Z")
I can't figure out how to diagnose what is happening here. I am using a hot/warm/cold data tier model but ES keeps allocating indexes to my overloaded cold tier when they are still in the hot phase (being actively writt… --- ## [Bucket\_path for array key](https://discuss.elastic.co/t/bucket-path-for-array-key/323052)
**Author:** [@rbrc](https://discuss.elastic.co/u/rbrc)\ **Replies:** 0\ **Last updated:** [January 12, 2023, 6:44pm UTC](https://discuss.elastic.co/t/bucket-path-for-array-key/323052 "2023-01-12T18:44:45Z")
I'm doing some agg queries against indexes where each doc has a locationId, and using a terms agg on that locationId to bucket the results. The problem is I want the NAME for that location, so I'm also doing a filter agg… --- ## [Aggregate document and "cumulate" fields](https://discuss.elastic.co/t/aggregate-document-and-cumulate-fields/323046)
**Author:** [@Fariddev](https://discuss.elastic.co/u/Fariddev)\ **Replies:** 0\ **Last updated:** [January 12, 2023, 5:00pm UTC](https://discuss.elastic.co/t/aggregate-document-and-cumulate-fields/323046 "2023-01-12T17:00:15Z")
Hi, i would like to know if it's possible to aggregate documents and cumulate other fields in an array like this : Documents : { "type": "fruit", "article": "apple", "price": 5 } { "type": "fruit", "article"… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=315) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=317)