# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=459

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 460

---

## [Getting Unique Set of nested objects within aggregations](https://discuss.elastic.co/t/getting-unique-set-of-nested-objects-within-aggregations/301434)

<div class="topic-metadata">

**Author:** [@Assaf\_Cohen](https://discuss.elastic.co/u/Assaf_Cohen)\
**Replies:** 1\
**Last updated:** [April 10, 2022, 3:30pm UTC](https://discuss.elastic.co/t/getting-unique-set-of-nested-objects-within-aggregations/301434 "2022-04-10T15:30:50Z")

</div>

Hello, to make my question clear i am attaching steps to reproduce: PUT /test { "mappings": { "dynamic\_templates": \[ { "strings\_as\_keywords": { "match\_mapping\_type": "string", "m…

---

## [How to make suggestions taking into account a few document fields?](https://discuss.elastic.co/t/how-to-make-suggestions-taking-into-account-a-few-document-fields/299934)

<div class="topic-metadata">

**Author:** [@iNikolas](https://discuss.elastic.co/u/iNikolas)\
**Replies:** 1\
**Last updated:** [April 10, 2022, 3:17pm UTC](https://discuss.elastic.co/t/how-to-make-suggestions-taking-into-account-a-few-document-fields/299934 "2022-04-10T15:17:03Z")

</div>

Hi all! I'm trying to master Elasticsearch and there is one issue I have run into. My documents have fields first\_name, last\_name, and country. And seems the search is working as I'm expecting with a multi\_match query. …

---

## [Open closed index encountered problems](https://discuss.elastic.co/t/open-closed-index-encountered-problems/302046)

<div class="topic-metadata">

**Author:** [@Amirhossein\_Ebadi](https://discuss.elastic.co/u/Amirhossein_Ebadi)\
**Replies:** 1\
**Last updated:** [April 10, 2022, 1:03pm UTC](https://discuss.elastic.co/t/open-closed-index-encountered-problems/302046 "2022-04-10T13:03:53Z")

</div>

Hi elastic community, I recentley closed an open index in my elastic cluster version 7.0. Few days after I re-opened that closed index.Everything worked fine and reponses status was ok. I used to get indices status by …

---

## [Running Elastic Stack in Docker Step5 \<timestamp\>](https://discuss.elastic.co/t/running-elastic-stack-in-docker-step5-timestamp/302022)

<div class="topic-metadata">

**Author:** [@Anonymous012](https://discuss.elastic.co/u/Anonymous012)\
**Replies:** 1\
**Last updated:** [April 10, 2022, 12:42pm UTC](https://discuss.elastic.co/t/running-elastic-stack-in-docker-step5-timestamp/302022 "2022-04-10T12:42:12Z")

</div>

Hello, I am pretty new to ES and Kibana. I used the official tutorial: Elasticstack Everything worked well till I got to step 5. I do not know how/where I can get the timestamp. You can see in the picture, my ES is r…

---

## [How to use fuzzy and match phrase?](https://discuss.elastic.co/t/how-to-use-fuzzy-and-match-phrase/301386)

<div class="topic-metadata">

**Author:** [@asil](https://discuss.elastic.co/u/asil)\
**Replies:** 1\
**Last updated:** [April 6, 2022, 2:56pm UTC](https://discuss.elastic.co/t/how-to-use-fuzzy-and-match-phrase/301386 "2022-04-06T14:56:59Z")

</div>

I'm using elasticsearch version 7.6.2 I want to search for a sentence and get results of the same words order (like match\_phrase) with sentence fuzziness for example: suppose for simplicity i have 1 document in the in…

---

## [Query "bool must match" not returning any value whereas "bool must match\_all" returns](https://discuss.elastic.co/t/query-bool-must-match-not-returning-any-value-whereas-bool-must-match-all-returns/301988)

<div class="topic-metadata">

**Author:** [@Ritika\_Gupta1](https://discuss.elastic.co/u/Ritika_Gupta1)\
**Replies:** 4\
**Last updated:** [April 9, 2022, 8:38pm UTC](https://discuss.elastic.co/t/query-bool-must-match-not-returning-any-value-whereas-bool-must-match-all-returns/301988 "2022-04-09T20:38:09Z")

</div>

My Elasticsearch was working perfectly fine before. I had to delete my elastics search for a few months on my server then I installed a new version two weeks back. I created the same index with the same mapping and added…

---

## [How To Search the Documents with Phrase and other Keyword with in slop](https://discuss.elastic.co/t/how-to-search-the-documents-with-phrase-and-other-keyword-with-in-slop/301779)

<div class="topic-metadata">

**Author:** [@santhuuu0007](https://discuss.elastic.co/u/santhuuu0007)\
**Replies:** 3\
**Last updated:** [April 9, 2022, 7:35pm UTC](https://discuss.elastic.co/t/how-to-search-the-documents-with-phrase-and-other-keyword-with-in-slop/301779 "2022-04-09T19:35:21Z")

</div>

Hi, We are working on analyzing the documents here We have got description field in my document. We have the query for matching the phrase with slop which looks beautiful. i.e. "Certified Operator" when we use this wi…

---

## [Clarification on how search\_type works](https://discuss.elastic.co/t/clarification-on-how-search-type-works/300203)

<div class="topic-metadata">

**Author:** [@ncoles](https://discuss.elastic.co/u/ncoles)\
**Replies:** 1\
**Last updated:** [April 9, 2022, 2:34pm UTC](https://discuss.elastic.co/t/clarification-on-how-search-type-works/300203 "2022-04-09T14:34:32Z")

</div>

I'm looking into some strange results from a "more like this" query involving search\_type. I switched to dfs\_query\_then\_fetch from the default query\_then\_fetch because I wanted more accurate results and the overhead did…

---

## [ANN Search Timeouts](https://discuss.elastic.co/t/ann-search-timeouts/299879)

<div class="topic-metadata">

**Author:** [@SbstnErhrdt](https://discuss.elastic.co/u/SbstnErhrdt)\
**Replies:** 8\
**Last updated:** [April 9, 2022, 2:10pm UTC](https://discuss.elastic.co/t/ann-search-timeouts/299879 "2022-04-09T14:10:33Z")

</div>

We try to use the ANN (Approximate Nearest Neighbor) feature of the 8.0 Version of Elasticsearch. (k-nearest neighbor (kNN) search | Elasticsearch Guide \[8.1\] | Elastic) At the moment we have indexed 16 million document…

---

## [Multi index aggregations](https://discuss.elastic.co/t/multi-index-aggregations/302012)

<div class="topic-metadata">

**Author:** [@kasvith](https://discuss.elastic.co/u/kasvith)\
**Replies:** 1\
**Last updated:** [April 9, 2022, 1:20pm UTC](https://discuss.elastic.co/t/multi-index-aggregations/302012 "2022-04-09T13:20:32Z")

</div>

Hi all, I've a scenario like this Im maintaining an index for a list that holds the basic fields like title I also maintain two separate indexes called idx-1 and idx-2 which also have listId as a field. When Im addi…

---

## [Circuit\_breaking\_exception \[parent\]](https://discuss.elastic.co/t/circuit-breaking-exception-parent/301987)

<div class="topic-metadata">

**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\
**Replies:** 0\
**Last updated:** [April 8, 2022, 4:00pm UTC](https://discuss.elastic.co/t/circuit-breaking-exception-parent/301987 "2022-04-08T16:00:08Z")

</div>

I have a Elasticsearch cluster with around more than 100 data nodes. around 30 hot nodes and the rest warm nodes. I am coming across an issue where I just try to load data with the index pattern say logs\* in kibana disc…

---

## [Weird behavior with cross cluster settings search.remote vs cluster.remote (elastic v6.5.4)](https://discuss.elastic.co/t/weird-behavior-with-cross-cluster-settings-search-remote-vs-cluster-remote-elastic-v6-5-4/301980)

<div class="topic-metadata">

**Author:** [@dcausse](https://discuss.elastic.co/u/dcausse)\
**Replies:** 1\
**Last updated:** [April 8, 2022, 2:16pm UTC](https://discuss.elastic.co/t/weird-behavior-with-cross-cluster-settings-search-remote-vs-cluster-remote-elastic-v6-5-4/301980 "2022-04-08T14:16:18Z")

</div>

Hi, we are running Elasticsearch 6.5.4 and we started to use cross cluster search since 6.3. Our settings were using the search.remote section in the cluster settings and since 6.5 we started using the new preferred clu…

---

## [1 of 24 shards failed](https://discuss.elastic.co/t/1-of-24-shards-failed/301928)

<div class="topic-metadata">

**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\
**Replies:** 2\
**Last updated:** [April 8, 2022, 2:13pm UTC](https://discuss.elastic.co/t/1-of-24-shards-failed/301928 "2022-04-08T14:13:39Z")

</div>

Hello, already asked a similar creature, but did not receive an answer, when opening the index, this error appears: 1 of 24 shards failed, when you click "show details" it gives the following: Request: { "aggs": { …

---

## [Elasticsearch not able to create index daily for filebeat-17.6.2\*](https://discuss.elastic.co/t/elasticsearch-not-able-to-create-index-daily-for-filebeat-17-6-2/301975)

<div class="topic-metadata">

**Author:** [@abhi.logs](https://discuss.elastic.co/u/abhi.logs)\
**Replies:** 0\
**Last updated:** [April 8, 2022, 12:52pm UTC](https://discuss.elastic.co/t/elasticsearch-not-able-to-create-index-daily-for-filebeat-17-6-2/301975 "2022-04-08T12:52:57Z")

</div>

Recently I tried to deploy journald input for sending systems logs and it's showing in the filebeat indice. but it's not creating indices daily basis it's writing the same indice. Even errors not showing in the Elastics…

---

## [Is Elastic what I need for our solution?](https://discuss.elastic.co/t/is-elastic-what-i-need-for-our-solution/301974)

<div class="topic-metadata">

**Author:** [@alivingstone](https://discuss.elastic.co/u/alivingstone)\
**Replies:** 0\
**Last updated:** [April 8, 2022, 12:33pm UTC](https://discuss.elastic.co/t/is-elastic-what-i-need-for-our-solution/301974 "2022-04-08T12:33:25Z")

</div>

Hey - totally new to Elastic, someone mentioned it may be the solution we need. I've had a quick look and I'm getting more and more confused by all the options! Briefly - we have 16 Forcepoint proxies. They have acces…

---

## [USE JAVA API operation the update method does not work](https://discuss.elastic.co/t/use-java-api-operation-the-update-method-does-not-work/301972)

<div class="topic-metadata">

**Author:** [@Schmidt-cc](https://discuss.elastic.co/u/Schmidt-cc)\
**Replies:** 0\
**Last updated:** [April 8, 2022, 12:29pm UTC](https://discuss.elastic.co/t/use-java-api-operation-the-update-method-does-not-work/301972 "2022-04-08T12:29:15Z")

</div>

Hello all Recently， my progarm uesd Elasticsearch update method always fail，code just like this public \<T extends BaseEntity\> void updateDoc(T t, String docIndex) throws IOException { //update by id Upd…

---

## [New Java API migration](https://discuss.elastic.co/t/new-java-api-migration/301963)

<div class="topic-metadata">

**Author:** [@Alain\_Bod](https://discuss.elastic.co/u/Alain_Bod)\
**Replies:** 0\
**Last updated:** [April 8, 2022, 11:46am UTC](https://discuss.elastic.co/t/new-java-api-migration/301963 "2022-04-08T11:46:23Z")

</div>

Hi, We are trying to migrate to the new Java client, and we obviously have difficulties in finding our way in the current (light) documentation. Can you help me with the following? // HLRC code …

---

## [Search\_after without PIT](https://discuss.elastic.co/t/search-after-without-pit/300788)

<div class="topic-metadata">

**Author:** [@ahmedasadi](https://discuss.elastic.co/u/ahmedasadi)\
**Replies:** 2\
**Last updated:** [April 8, 2022, 10:11am UTC](https://discuss.elastic.co/t/search-after-without-pit/300788 "2022-04-08T10:11:28Z")

</div>

In the documentation for 'search\_after', it says that inconsistent results may be returned if a refresh occurs when not using a PIT. I have a few questions: Can duplicate results be returned? Will it return all the doc…

---

## [Elastic APM identify all its own - \* self discovery](https://discuss.elastic.co/t/elastic-apm-identify-all-its-own-self-discovery/301944)

<div class="topic-metadata">

**Author:** [@kunal.khandelwal](https://discuss.elastic.co/u/kunal.khandelwal)\
**Replies:** 0\
**Last updated:** [April 8, 2022, 9:23am UTC](https://discuss.elastic.co/t/elastic-apm-identify-all-its-own-self-discovery/301944 "2022-04-08T09:23:35Z")

</div>

Hi Team, I want to know that, is there any option for auto/self discovery elastic APM? so that it can automatically identify the logs of APM with CF? Thanks!

---

## [ElasticSearch Sizing](https://discuss.elastic.co/t/elasticsearch-sizing/301931)

<div class="topic-metadata">

**Author:** [@ELIASP](https://discuss.elastic.co/u/ELIASP)\
**Replies:** 0\
**Last updated:** [April 8, 2022, 7:35am UTC](https://discuss.elastic.co/t/elasticsearch-sizing/301931 "2022-04-08T07:35:55Z")

</div>

I am trying to understand the number of shards that I need to create, primary and replicas. I have run the following calucation Total Data (GB)= Raw data (GB) per day \* Number of days retained \* (Number of replicas + 1…

---

## [How convert update\_by\_query with params as array to Java Rest client SDK](https://discuss.elastic.co/t/how-convert-update-by-query-with-params-as-array-to-java-rest-client-sdk/301870)

<div class="topic-metadata">

**Author:** [@vitaly1233](https://discuss.elastic.co/u/vitaly1233)\
**Replies:** 2\
**Last updated:** [April 7, 2022, 5:02pm UTC](https://discuss.elastic.co/t/how-convert-update-by-query-with-params-as-array-to-java-rest-client-sdk/301870 "2022-04-07T17:02:45Z")

</div>

Hi, Working with version 7.15 Trying to do "update all by query " using script. The main idea to iterate the params in array and update as in the query below to all matched documents. The script: POST : http://11.1…

---

## [Few unassigned shards](https://discuss.elastic.co/t/few-unassigned-shards/301920)

<div class="topic-metadata">

**Author:** [@aman123](https://discuss.elastic.co/u/aman123)\
**Replies:** 0\
**Last updated:** [April 8, 2022, 4:49am UTC](https://discuss.elastic.co/t/few-unassigned-shards/301920 "2022-04-08T04:49:53Z")

</div>

hi Everyone, I upgraded my last node but due to some issue 36 shards left unassigned. and its not getting assigned because of below issue: "can\_allocate" : "no\_valid\_shard\_copy", "allocate\_explanation" : "cannot alloc…

---

## [Performance issue with concurrent call ElasticSearch API](https://discuss.elastic.co/t/performance-issue-with-concurrent-call-elasticsearch-api/301912)

<div class="topic-metadata">

**Author:** [@css.carlyle](https://discuss.elastic.co/u/css.carlyle)\
**Replies:** 1\
**Last updated:** [April 8, 2022, 4:43am UTC](https://discuss.elastic.co/t/performance-issue-with-concurrent-call-elasticsearch-api/301912 "2022-04-08T04:43:40Z")

</div>

Hello all, Recently, my program failed the stress test (Jmeter) :dizzy\_face:, my requirement is that get response from Elasticsearch within 5 seconds when it was 50, 100, 500, 1000, 1300 concurrent call. During the stre…

---

## [Question regarding size of bulk action](https://discuss.elastic.co/t/question-regarding-size-of-bulk-action/301800)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 21\
**Last updated:** [April 7, 2022, 8:25pm UTC](https://discuss.elastic.co/t/question-regarding-size-of-bulk-action/301800 "2022-04-07T20:25:45Z")

</div>

I have 3 nodes designated to be the ingestion nodes. So all writers will round robin to those 3 nodes. My question is should the bulkWrite size be sizing to the ingestion node or primary shard on nodes? Let's say I ha…

---

## [Storing suitable document ids that matches percolator query](https://discuss.elastic.co/t/storing-suitable-document-ids-that-matches-percolator-query/301900)

<div class="topic-metadata">

**Author:** [@alimbayevaf](https://discuss.elastic.co/u/alimbayevaf)\
**Replies:** 0\
**Last updated:** [April 7, 2022, 6:52pm UTC](https://discuss.elastic.co/t/storing-suitable-document-ids-that-matches-percolator-query/301900 "2022-04-07T18:52:50Z")

</div>

Hello there! I don't have good experience in using elastic and I want to know if my structure is reasonable and adequate. Problem: I have "computers" index { "mappings": { "properties": { "cpu": {"type": "…

---

## [Create a backlog report with ElasticSearch](https://discuss.elastic.co/t/create-a-backlog-report-with-elasticsearch/301872)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 2\
**Last updated:** [April 7, 2022, 4:40pm UTC](https://discuss.elastic.co/t/create-a-backlog-report-with-elasticsearch/301872 "2022-04-07T16:40:49Z")

</div>

I have an index that stores created tasks, this index has the property of creation date and task end date. With Elasticsearch, can I build a histogram that displays the daily backlog since the beginning of my records, b…

---

## [Deploying elasticsearch 7.4.0 with helm crashlooping on k8s](https://discuss.elastic.co/t/deploying-elasticsearch-7-4-0-with-helm-crashlooping-on-k8s/301876)

<div class="topic-metadata">

**Author:** [@erwa](https://discuss.elastic.co/u/erwa)\
**Replies:** 3\
**Last updated:** [April 7, 2022, 2:57pm UTC](https://discuss.elastic.co/t/deploying-elasticsearch-7-4-0-with-helm-crashlooping-on-k8s/301876 "2022-04-07T14:57:54Z")

</div>

Hi, I've added the elastic helm repo with: helm install Elasticsearch elastic/Elasticsearch And are trying to install Elasticsearch 7.4.0 single node installation with arguments: helm install elasticsearch elastic/el…

---

## [My second node cannot access the repository](https://discuss.elastic.co/t/my-second-node-cannot-access-the-repository/301755)

<div class="topic-metadata">

**Author:** [@Mestre](https://discuss.elastic.co/u/Mestre)\
**Replies:** 3\
**Last updated:** [April 7, 2022, 2:29pm UTC](https://discuss.elastic.co/t/my-second-node-cannot-access-the-repository/301755 "2022-04-07T14:29:16Z")

</div>

My second node cannot access the repository, on every Elasticsearch.yml (node1 & node 2) I have the same line path.repo: /home/lab/sambashare On node 1 y created a shared folder with samba that's is located on /home/la…

---

## [Can be Rally used to benchmark Kibana?](https://discuss.elastic.co/t/can-be-rally-used-to-benchmark-kibana/301794)

<div class="topic-metadata">

**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\
**Replies:** 4\
**Last updated:** [April 7, 2022, 2:22pm UTC](https://discuss.elastic.co/t/can-be-rally-used-to-benchmark-kibana/301794 "2022-04-07T14:22:15Z")

</div>

I want to benchmark an Elastic Cloud Kibana installation and I was thinking on using Rally. Is it possible? and how? Thanks!

---

## [Selectively choosing documents from an index to include in a snapshot](https://discuss.elastic.co/t/selectively-choosing-documents-from-an-index-to-include-in-a-snapshot/301764)

<div class="topic-metadata">

**Author:** [@hishamnajem](https://discuss.elastic.co/u/hishamnajem)\
**Replies:** 2\
**Last updated:** [April 7, 2022, 2:15pm UTC](https://discuss.elastic.co/t/selectively-choosing-documents-from-an-index-to-include-in-a-snapshot/301764 "2022-04-07T14:15:21Z")

</div>

Hello, is there a way within a single operation selectively include only some documents (based on a filter) when creating a snapshot? For example if I have an index named index-1 and it has 1000 docs of which 100 includ…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=458)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=460)
