# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=781 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 782 --- ## [Help a non-profit STIR the data](https://discuss.elastic.co/t/help-a-non-profit-stir-the-data/251589)
**Author:** [@martinsz](https://discuss.elastic.co/u/martinsz)\ **Replies:** 7\ **Last updated:** [October 21, 2020, 9:47pm UTC](https://discuss.elastic.co/t/help-a-non-profit-stir-the-data/251589 "2020-10-21T21:47:18Z")
Hi, we're a Mexican NGO working all across latin-america to stop corporate abuse, you can check out our bilingual website here: https://poderlatam.org Our most intensive data project is about public contracts, it has ev… --- ## [Min\_doc\_count for data table filter aggregation](https://discuss.elastic.co/t/min-doc-count-for-data-table-filter-aggregation/252902)
**Author:** [@Eric\_Scaramuzzo](https://discuss.elastic.co/u/Eric_Scaramuzzo)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 9:37pm UTC](https://discuss.elastic.co/t/min-doc-count-for-data-table-filter-aggregation/252902 "2020-10-21T21:37:51Z")
Hello! I am creating a data table with a unique count metric and a filter aggregation, and I want to not show rows that have a doc\_count of 0. I tried using min\_doc\_count in the json input, but that just threw an error: E… --- ## [Cant understant this bad response](https://discuss.elastic.co/t/cant-understant-this-bad-response/252806)
**Author:** [@Borna\_Jelic](https://discuss.elastic.co/u/Borna_Jelic)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 9:13pm UTC](https://discuss.elastic.co/t/cant-understant-this-bad-response/252806 "2020-10-21T21:13:46Z")
Hello, I have implemented my custom search function. All tests have passed, but when I run request on Kibana, I get this response: { "error" : { "root\_cause" : \[ { "type" : "parsing\_exception", … --- ## [Nested Component Templates](https://discuss.elastic.co/t/nested-component-templates/252895)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 8:12pm UTC](https://discuss.elastic.co/t/nested-component-templates/252895 "2020-10-21T20:12:38Z")
Hi All, I was wondering if anyone knows if its possible to do nested component templates, or if there is plans to add it? An example/use case is the geo object. Currently the geo object is a nested object of client, de… --- ## [Elasticsearch, which path for elasticsearch.keystore is used?](https://discuss.elastic.co/t/elasticsearch-which-path-for-elasticsearch-keystore-is-used/252845)
**Author:** [@Andrea\_Marchi](https://discuss.elastic.co/u/Andrea_Marchi)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 8:04pm UTC](https://discuss.elastic.co/t/elasticsearch-which-path-for-elasticsearch-keystore-is-used/252845 "2020-10-21T20:04:41Z")
I'm trying to understand why I get 401 after initializing a new instance (goal to have multiple instances on one machine). Steps taken: created a elasticsearch.keystore add the bootstrap.password successfully, with ca… --- ## [How to minimize indexing impact on search operations?](https://discuss.elastic.co/t/how-to-minimize-indexing-impact-on-search-operations/252890)
**Author:** [@redec](https://discuss.elastic.co/u/redec)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 7:03pm UTC](https://discuss.elastic.co/t/how-to-minimize-indexing-impact-on-search-operations/252890 "2020-10-21T19:03:54Z")
Hi all, I'm wondering if anyone has any recommendations on how to minimize the performance impact of indexing on search operations. My use-case is very search-heavy, but indexing is also happening fairly constantly - mut… --- ## [What is the meaning of time\_in\_millis in \_node stats](https://discuss.elastic.co/t/what-is-the-meaning-of-time-in-millis-in-node-stats/252616)
**Author:** [@larryzhu](https://discuss.elastic.co/u/larryzhu)\ **Replies:** 5\ **Last updated:** [October 21, 2020, 6:40pm UTC](https://discuss.elastic.co/t/what-is-the-meaning-of-time-in-millis-in-node-stats/252616 "2020-10-21T18:40:03Z")
sample output GET \_nodes/dev-iad-cluster-data-4/stats/ingest "ingest" : { "total" : { "count" : 0, "time\_in\_millis" : 0, "current" : 0, "failed" : 0 }, what… --- ## [Disk Full problem winlogbeat](https://discuss.elastic.co/t/disk-full-problem-winlogbeat/252749)
**Author:** [@pablo1816](https://discuss.elastic.co/u/pablo1816)\ **Replies:** 2\ **Last updated:** [October 21, 2020, 6:04pm UTC](https://discuss.elastic.co/t/disk-full-problem-winlogbeat/252749 "2020-10-21T18:04:50Z")
I was running out of space on node and deleted multiple indexes, now there is space but in winlogbeat I have the following error. 2020-10-20T21:51:15.360-0300 ERROR \[elasticsearch\] elasticsearch/client.go:213 Failed to … --- ## [/var/lib/elasticsearch/tmp not accessible in ES 6.8](https://discuss.elastic.co/t/var-lib-elasticsearch-tmp-not-accessible-in-es-6-8/252723)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 2\ **Last updated:** [October 21, 2020, 5:41pm UTC](https://discuss.elastic.co/t/var-lib-elasticsearch-tmp-not-accessible-in-es-6-8/252723 "2020-10-21T17:41:01Z")
Hi, I'm doing an upgrade from ES 5.6 to ES 6.8. When starting ES 6.8, I'm getting this exception: -- Logs begin at Tue 2020-10-20 00:29:07 UTC, end at Tue 2020-10-20 17:35:18 UTC. -- Oct 20 00:29:56 systemd\[1… --- ## [Bulk api without repetition the index string - performance optimisation](https://discuss.elastic.co/t/bulk-api-without-repetition-the-index-string-performance-optimisation/252831)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 10\ **Last updated:** [October 21, 2020, 5:19pm UTC](https://discuss.elastic.co/t/bulk-api-without-repetition-the-index-string-performance-optimisation/252831 "2020-10-21T17:19:06Z")
Hi, please is there a way how to optimise the bulk insert ? Having valueless strings {"index":{}} increases the bulk load and costs extra resources. this is the example but in our case we want to write huge amounts of… --- ## [Disk Usage Elasticsearch 5.6 compared to Elasticsearch 7.9](https://discuss.elastic.co/t/disk-usage-elasticsearch-5-6-compared-to-elasticsearch-7-9/251949)
**Author:** [@nate.atg](https://discuss.elastic.co/u/nate.atg)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 4:39pm UTC](https://discuss.elastic.co/t/disk-usage-elasticsearch-5-6-compared-to-elasticsearch-7-9/251949 "2020-10-21T16:39:04Z")
We are currently moving from Elasticsearch 5.6.4 to Elasticsearch 7.9.1 and are seeing some concerning differences in disk usage and CPU usage, which we suspect may be a symptom of the larger indices. The same data with… --- ## [Jvm memory problem (Data too large, data for.....)](https://discuss.elastic.co/t/jvm-memory-problem-data-too-large-data-for/252756)
**Author:** [@Ariel\_Zach](https://discuss.elastic.co/u/Ariel_Zach)\ **Replies:** 6\ **Last updated:** [October 21, 2020, 12:58pm UTC](https://discuss.elastic.co/t/jvm-memory-problem-data-too-large-data-for/252756 "2020-10-21T12:58:21Z")
Hello, I am having a problem with the memory of the jvm, I have two clusters with the same configuration and hardware to which I can derive traffic, one with 6.8 and the other with 7.8, the 6.8 cluster has no problem, i… --- ## [Indexing rate drops periodically - performance troubleshooting](https://discuss.elastic.co/t/indexing-rate-drops-periodically-performance-troubleshooting/252832)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 12:17pm UTC](https://discuss.elastic.co/t/indexing-rate-drops-periodically-performance-troubleshooting/252832 "2020-10-21T12:17:33Z")
I have a ES 7.9.2, \[ 10node cluster each: 4Core, 32G RAM, 500GB SSD\] I tried performance test on index , 5 primary shards, 0 replica. It reaches around 200K events/sec and I found weird performance drops. Can you help… --- ## [Aggregation max additional info](https://discuss.elastic.co/t/aggregation-max-additional-info/252830)
**Author:** [@Jogi\_Michal](https://discuss.elastic.co/u/Jogi_Michal)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 11:17am UTC](https://discuss.elastic.co/t/aggregation-max-additional-info/252830 "2020-10-21T11:17:45Z")
Hi all, I have a question if there is a possibility to add some extra fields somehow to the max aggregation result? My document looks like this: { "updated": { "type": "date" }, "scores": { "pr… --- ## [Need help in v7.9.2 cluster configuration of 3 nodes](https://discuss.elastic.co/t/need-help-in-v7-9-2-cluster-configuration-of-3-nodes/252101)
**Author:** [@sges](https://discuss.elastic.co/u/sges)\ **Replies:** 7\ **Last updated:** [October 21, 2020, 11:10am UTC](https://discuss.elastic.co/t/need-help-in-v7-9-2-cluster-configuration-of-3-nodes/252101 "2020-10-21T11:10:59Z")
Hello, I'm setting up a cluster with elasticsearch v7.9.2 and for that I'm setting up a 3 node elasticsearch cluster environment on separate VM's. On performing search I'm seeing IllegalStateException in the logs. I nee… --- ## [Document compression - duplicate fields](https://discuss.elastic.co/t/document-compression-duplicate-fields/252658)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 11:10am UTC](https://discuss.elastic.co/t/document-compression-duplicate-fields/252658 "2020-10-21T11:10:16Z")
Hi, If i copy fields and rename them to match ECS you have a duplicate of data, are these 2 fields deduplicated as part of the compression within the doc? Looking at the wiki for Thanks Phil --- ## [Automatically create a multivalued field that consists of values from selected fields](https://discuss.elastic.co/t/automatically-create-a-multivalued-field-that-consists-of-values-from-selected-fields/252826)
**Author:** [@newcomer](https://discuss.elastic.co/u/newcomer)\ **Replies:** 0\ **Last updated:** [October 21, 2020, 11:08am UTC](https://discuss.elastic.co/t/automatically-create-a-multivalued-field-that-consists-of-values-from-selected-fields/252826 "2020-10-21T11:08:44Z")
I would like to have a field that consists of values of other fields. E.g if a document has 2 fields; name and age, then there will be automatically created a new multivalued field that consists of these two formentioned… --- ## [Invalid initial heap size on ES7 for Windows](https://discuss.elastic.co/t/invalid-initial-heap-size-on-es7-for-windows/252781)
**Author:** [@dbakti7](https://discuss.elastic.co/u/dbakti7)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 9:38am UTC](https://discuss.elastic.co/t/invalid-initial-heap-size-on-es7-for-windows/252781 "2020-10-21T09:38:50Z")
We are trying to install ES7 as windows service with elasticsearch-service.bat install We are setting ES\_JAVA\_OPTS via environment variable with -Xms4g -Xmx4g But we are getting the following error: Error: Could n… --- ## [Using stored\_fields for retrieving a subset of the fields](https://discuss.elastic.co/t/using-stored-fields-for-retrieving-a-subset-of-the-fields/252619)
**Author:** [@Arjun\_Singri](https://discuss.elastic.co/u/Arjun_Singri)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 8:26am UTC](https://discuss.elastic.co/t/using-stored-fields-for-retrieving-a-subset-of-the-fields/252619 "2020-10-21T08:26:15Z")
The documentation and recommendation for using stored\_fields feature in ElasticSearch has been changing. In the latest version, stored\_fields is not recommended - https://www.elastic.co/guide/en/elasticsearch/reference/7… --- ## [How do you time search query while debugging?](https://discuss.elastic.co/t/how-do-you-time-search-query-while-debugging/252739)
**Author:** [@Jaspreet\_Singh](https://discuss.elastic.co/u/Jaspreet_Singh)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 8:24am UTC](https://discuss.elastic.co/t/how-do-you-time-search-query-while-debugging/252739 "2020-10-21T08:24:19Z")
I'm currently debugging a slow query issue. As expected, the first time query execution is the slowest with subsequent hits way faster due to caching. As such, what is the best way to get consistent query times so I ca… --- ## [Newbie: 2 Different Queries on 1 PHP Page-Multi Search?](https://discuss.elastic.co/t/newbie-2-different-queries-on-1-php-page-multi-search/252725)
**Author:** [@zi94sm65](https://discuss.elastic.co/u/zi94sm65)\ **Replies:** 0\ **Last updated:** [October 20, 2020, 6:18pm UTC](https://discuss.elastic.co/t/newbie-2-different-queries-on-1-php-page-multi-search/252725 "2020-10-20T18:18:24Z")
I am running elasticsearch by itself on localhost (no graphical user interface) "number" : "7.9.2", "lucene\_version" : "8.6.2", "minimum\_wire\_compatibility\_version" : "6.8.0", "minimum\_index\_compatibility\_ve… --- ## [Elasticsearch "OR" condition query](https://discuss.elastic.co/t/elasticsearch-or-condition-query/252531)
**Author:** [@Yotam\_Mazurik](https://discuss.elastic.co/u/Yotam_Mazurik)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 7:49am UTC](https://discuss.elastic.co/t/elasticsearch-or-condition-query/252531 "2020-10-21T07:49:05Z")
Hi! I am trying to query an index with two different document fieldsets. to be more specific, I am trying to query all documents where field1 is equal to field2 but field1 and field2 will never exists in the same docum… --- ## [No new daily indices after setup TLS/SSL](https://discuss.elastic.co/t/no-new-daily-indices-after-setup-tls-ssl/252786)
**Author:** [@LuWe](https://discuss.elastic.co/u/LuWe)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 7:19am UTC](https://discuss.elastic.co/t/no-new-daily-indices-after-setup-tls-ssl/252786 "2020-10-21T07:19:22Z")
I have a small elk cluster. 2 elastic nodes, 2 data nodes, one of the data node is also master vote only. One Kibana node, 2 logstash nodes. Every node is a single hyper-v VM. Everything worked nicely until i start conf… --- ## [Xpack monitoring doesn't work after migration](https://discuss.elastic.co/t/xpack-monitoring-doesnt-work-after-migration/252532)
**Author:** [@aranelofdoriath](https://discuss.elastic.co/u/aranelofdoriath)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 5:46am UTC](https://discuss.elastic.co/t/xpack-monitoring-doesnt-work-after-migration/252532 "2020-10-21T05:46:20Z")
Hi all, I saw a lot of a similar questions but no one of them doesn't help me, so. We have a ES cluster with 14 nodes (each node run in docker in a separate instance) and one Kibana/Logstash node (run in a docker too). … --- ## [Elasticsearch timeout issue](https://discuss.elastic.co/t/elasticsearch-timeout-issue/252698)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 5:00am UTC](https://discuss.elastic.co/t/elasticsearch-timeout-issue/252698 "2020-10-21T05:00:59Z")
Once I have enabled clustering, at times, I see elasticsearch takes few mins to comes up. That time I saw a timeout error in OS. I saw only TimeoutStopSec in elasticsearch.service. So should I create timeout conf file in… --- ## [No field found for \[\] in mapping with types \[\]](https://discuss.elastic.co/t/no-field-found-for-in-mapping-with-types/250668)
**Author:** [@shobin-ebp](https://discuss.elastic.co/u/shobin-ebp)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 12:08am UTC](https://discuss.elastic.co/t/no-field-found-for-in-mapping-with-types/250668 "2020-10-21T00:08:39Z")
I have following query { "query": { "function\_score": { "query": { "match\_all": {} }, "functions": \[ { "script\_score": { "script": { "lang": "p… --- ## [Nodes eventually disconnect with ssl enabled on transport layer](https://discuss.elastic.co/t/nodes-eventually-disconnect-with-ssl-enabled-on-transport-layer/252100)
**Author:** [@Sebastian\_Seith](https://discuss.elastic.co/u/Sebastian_Seith)\ **Replies:** 16\ **Last updated:** [October 20, 2020, 10:16pm UTC](https://discuss.elastic.co/t/nodes-eventually-disconnect-with-ssl-enabled-on-transport-layer/252100 "2020-10-20T22:16:22Z")
Hi Everyone, I've got a 3-node, 7.6.1 cluster running on ec2 t2.medium instances in a private vpc we're using for a machine-learning project. We got everything set up fine and had no issues with a number of different t… --- ## [Using LB for discovery.zen.ping.unicast.hosts no longer works?](https://discuss.elastic.co/t/using-lb-for-discovery-zen-ping-unicast-hosts-no-longer-works/252740)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 0\ **Last updated:** [October 20, 2020, 9:19pm UTC](https://discuss.elastic.co/t/using-lb-for-discovery-zen-ping-unicast-hosts-no-longer-works/252740 "2020-10-20T21:19:01Z")
Hi, For a long time I've been able to use a load balancer IP for the discovery.zen.ping.unicast.hosts property in elasticsearch.yml. But I just upgraded from 5.6 to 6.8 and after upgrading ES is no longer able to detec… --- ## [Ansible uri post after upgrade to 7.9.2](https://discuss.elastic.co/t/ansible-uri-post-after-upgrade-to-7-9-2/252724)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 0\ **Last updated:** [October 20, 2020, 6:00pm UTC](https://discuss.elastic.co/t/ansible-uri-post-after-upgrade-to-7-9-2/252724 "2020-10-20T18:00:57Z")
I have been using ansible to manage templates and role mappings using the uri method similar to this: - name: Post to elastic uri: url: "{{ cluster\_uri }}/\_template/{{ obj }}?pretty" method: POST … --- ## [Autocomplete - Hierarchical Data](https://discuss.elastic.co/t/autocomplete-hierarchical-data/252696)
**Author:** [@sumanthmitra](https://discuss.elastic.co/u/sumanthmitra)\ **Replies:** 0\ **Last updated:** [October 20, 2020, 1:56pm UTC](https://discuss.elastic.co/t/autocomplete-hierarchical-data/252696 "2020-10-20T13:56:46Z")
Hello, I am looking for autocomplete functionality for the hierarchical data and was wondering if it's possible to achieve this functionality with elasticsearch. As an example, consider the below data. "phrase1" / "w… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=780) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=782)