# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=826 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 827 --- ## [How to select only one field from an array?](https://discuss.elastic.co/t/how-to-select-only-one-field-from-an-array/246275)
**Author:** [@Mayank\_Ruhella](https://discuss.elastic.co/u/Mayank_Ruhella)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 11:54am UTC](https://discuss.elastic.co/t/how-to-select-only-one-field-from-an-array/246275 "2020-08-25T11:54:43Z")
Output "\_source" : { "mortgagesObj" : \[ { "regDate" : "04/06/2020" }, { "regDate" : "01/10/2013" }, { "regD… --- ## [Persian Analyzer](https://discuss.elastic.co/t/persian-analyzer/246274)
**Author:** [@Pori\_Niki](https://discuss.elastic.co/u/Pori_Niki)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 11:46am UTC](https://discuss.elastic.co/t/persian-analyzer/246274 "2020-08-25T11:46:58Z")
Hi. I recently checked the language analyzer in elastic docs and wonder why in all examples like this link: analysis-lang-analyzer the Persian analyzer comes after the Arabic analyzer?! Is that needed because of anything… --- ## [What is the Stable Version for Production Deployment](https://discuss.elastic.co/t/what-is-the-stable-version-for-production-deployment/246269)
**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 11:43am UTC](https://discuss.elastic.co/t/what-is-the-stable-version-for-production-deployment/246269 "2020-08-25T11:43:54Z")
Hi Team, Please let me know the latest stable ELK version for production deployment. Regards, Vivek --- ## [Index is not rolling](https://discuss.elastic.co/t/index-is-not-rolling/243602)
**Author:** [@oicfar](https://discuss.elastic.co/u/oicfar)\ **Replies:** 7\ **Last updated:** [August 25, 2020, 11:39am UTC](https://discuss.elastic.co/t/index-is-not-rolling/243602 "2020-08-25T11:39:28Z")
Hi, I have the filebeat policy The hot phase is configured and the delete phase in the pilicy is set to But the index size is growing daily. And the status tell me The policy is assigned to the index te… --- ## [How To Back Up Elasticsearch Database/Data](https://discuss.elastic.co/t/how-to-back-up-elasticsearch-database-data/246113)
**Author:** [@upchair](https://discuss.elastic.co/u/upchair)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 11:32am UTC](https://discuss.elastic.co/t/how-to-back-up-elasticsearch-database-data/246113 "2020-08-25T11:32:09Z")
Please can anybody please tell me how to backup my Elasticsearch Data easily. Thank You. Richard --- ## [Guide for Upgrading from 5.5.2 to 7.8.1](https://discuss.elastic.co/t/guide-for-upgrading-from-5-5-2-to-7-8-1/246220)
**Author:** [@AmitC](https://discuss.elastic.co/u/AmitC)\ **Replies:** 19\ **Last updated:** [August 25, 2020, 10:19am UTC](https://discuss.elastic.co/t/guide-for-upgrading-from-5-5-2-to-7-8-1/246220 "2020-08-25T10:19:58Z")
Hi Team, I would like to upgrade my Elastic Stack from V5.5.2 to 7.8.1 I am using the AWS amazon server and have huge data in indexes. Also, I want to move all the dashboards created in 5.5.2 Please help!!! Thanks i… --- ## [ELK License for Kubernetes](https://discuss.elastic.co/t/elk-license-for-kubernetes/246257)
**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 9:39am UTC](https://discuss.elastic.co/t/elk-license-for-kubernetes/246257 "2020-08-25T09:39:22Z")
Hi Team, Please let know how licensing works on ELK deployment in Kubernetes . --- ## [Is there a way to set analysis for a field?](https://discuss.elastic.co/t/is-there-a-way-to-set-analysis-for-a-field/244242)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 7:42am UTC](https://discuss.elastic.co/t/is-there-a-way-to-set-analysis-for-a-field/244242 "2020-08-25T07:42:02Z")
index mapping https://paste.ubuntu.com/p/9SdnNDfjM9/ I want to search for the value of productSN. Using the default analysis configuration, it seems that the result cannot be found. { "userType":2, "productSN":… --- ## [ElasticSearch/Kibana query times](https://discuss.elastic.co/t/elasticsearch-kibana-query-times/245904)
**Author:** [@Julio\_reyes](https://discuss.elastic.co/u/Julio_reyes)\ **Replies:** 6\ **Last updated:** [August 25, 2020, 7:36am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-query-times/245904 "2020-08-25T07:36:33Z")
Hi, I'm using Kibana and ElasticSearch, doing a script to check the time that takes to make the query fetch the data for example to the discover page, and each time I refresh the page with in 1 year, the response times a… --- ## [ES - Windows Multi Cluster Advice](https://discuss.elastic.co/t/es-windows-multi-cluster-advice/246106)
**Author:** [@iccMe](https://discuss.elastic.co/u/iccMe)\ **Replies:** 4\ **Last updated:** [August 25, 2020, 7:35am UTC](https://discuss.elastic.co/t/es-windows-multi-cluster-advice/246106 "2020-08-25T07:35:38Z")
Hi, I am looking at creating an ES 3 node cluster all master and data in Windows on 3 hyper-V VM's. I have previously built a test environment in linux and attached 3 x separate 1TB storage drives for each node to repli… --- ## [Why shard relocating is happening all the time](https://discuss.elastic.co/t/why-shard-relocating-is-happening-all-the-time/243648)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 5\ **Last updated:** [August 25, 2020, 7:26am UTC](https://discuss.elastic.co/t/why-shard-relocating-is-happening-all-the-time/243648 "2020-08-25T07:26:15Z")
Hi All, Greeting !! \*\*\* Need URGENT HELP \*\*\* Why shard relocating happening all the time? Due to that heap percentage is getting increasing "cluster\_name" : "BPOConnectElasticSearch", "status" : "green", "timed\_out… --- ## [ERROR Null object returned for RollingFile in Appenders](https://discuss.elastic.co/t/error-null-object-returned-for-rollingfile-in-appenders/246238)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 7:30am UTC](https://discuss.elastic.co/t/error-null-object-returned-for-rollingfile-in-appenders/246238 "2020-08-25T07:30:59Z")
i am unable to start the ES services below is the error which i am getting. Aug 25 09:19:48 RHEL7 systemd-entrypoint\[125773\]: at org.elasticsearch.common.logging.LogConfigurator.configure(LogConfigurator.java:129) Aug … --- ## [Changing logger setting using API](https://discuss.elastic.co/t/changing-logger-setting-using-api/246223)
**Author:** [@somebody](https://discuss.elastic.co/u/somebody)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 6:24am UTC](https://discuss.elastic.co/t/changing-logger-setting-using-api/246223 "2020-08-25T06:24:47Z")
Logging information: https://www.elastic.co/guide/en/elasticsearch/reference/current/logging.html We are trying to change the following logger through API provided above: appender.rolling.policies.size.type = SizeBased… --- ## [How do I get a terms count of text filed?](https://discuss.elastic.co/t/how-do-i-get-a-terms-count-of-text-filed/245519)
**Author:** [@Charele](https://discuss.elastic.co/u/Charele)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 5:58am UTC](https://discuss.elastic.co/t/how-do-i-get-a-terms-count-of-text-filed/245519 "2020-08-25T05:58:29Z")
For example, "desc" is a text field (fielddata = true) doc1 PUT {"desc", "aaa aaa aaa"} doc2 PUT {"desc", "aaa xxx"} When I do a terms aggreation on it, and I will get a "doc count", but I want to get the term count, … --- ## [Elasticsearch scroll randomly fails on some shards on version 7.6.2](https://discuss.elastic.co/t/elasticsearch-scroll-randomly-fails-on-some-shards-on-version-7-6-2/246035)
**Author:** [@Enes\_Acikoglu](https://discuss.elastic.co/u/Enes_Acikoglu)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 4:42am UTC](https://discuss.elastic.co/t/elasticsearch-scroll-randomly-fails-on-some-shards-on-version-7-6-2/246035 "2020-08-25T04:42:59Z")
Hello All, We are using elasticsearch with version 7.6.2 with 9 data nodes and 3 masters. We are getting an error on scroll requests as defined below; \> Elasticsearch exception \[type=exception, reason=Trying to creat… --- ## [Connecting ES 7.8.1 nodes to a 6.8.2 cluster with ec2 discovery](https://discuss.elastic.co/t/connecting-es-7-8-1-nodes-to-a-6-8-2-cluster-with-ec2-discovery/246214)
**Author:** [@Elad\_Itzhakian](https://discuss.elastic.co/u/Elad_Itzhakian)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 4:13am UTC](https://discuss.elastic.co/t/connecting-es-7-8-1-nodes-to-a-6-8-2-cluster-with-ec2-discovery/246214 "2020-08-25T04:13:16Z")
I have a running ES 6.8.2 cluster and I want to upgrade it by launching new 7.8.1 nodes (non master), syncing them with the cluster, then launch the 7.8.1 master nodes and so on. The problem is my new 7.8.1 nodes do not… --- ## [Network host elasticsearch](https://discuss.elastic.co/t/network-host-elasticsearch/246205)
**Author:** [@Juliano\_de\_Mello](https://discuss.elastic.co/u/Juliano_de_Mello)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 2:21am UTC](https://discuss.elastic.co/t/network-host-elasticsearch/246205 "2020-08-25T02:21:21Z")
In the configuration file elasticsearch.yml, I add the parameter network.host: 0.0.0.0, however when starting the system again it returns me the following error: No arquivo de configuração elasticsearch.yml, adiciono o… --- ## [Constructing complex NEST query](https://discuss.elastic.co/t/constructing-complex-nest-query/246134)
**Author:** [@gswartz](https://discuss.elastic.co/u/gswartz)\ **Replies:** 3\ **Last updated:** [August 24, 2020, 10:38pm UTC](https://discuss.elastic.co/t/constructing-complex-nest-query/246134 "2020-08-24T22:38:16Z")
Our index consists of a text field for notes. The notes can be tied to multiple entity types in our system such as a job, worker, company, etc. So, I need to somehow construct the search query based on what type of ent… --- ## [Change data from database](https://discuss.elastic.co/t/change-data-from-database/246190)
**Author:** [@pcb](https://discuss.elastic.co/u/pcb)\ **Replies:** 3\ **Last updated:** [August 24, 2020, 10:09pm UTC](https://discuss.elastic.co/t/change-data-from-database/246190 "2020-08-24T22:09:25Z")
Hi ya, I'm storing timestamped change data coming off a SQL database into Elasticsearch and would like some advice. It is over 100 tables and most will be fairly small (small number of bytes + not many changes over cour… --- ## [Logging Search Queries Made on ElasticSearch](https://discuss.elastic.co/t/logging-search-queries-made-on-elasticsearch/245950)
**Author:** [@Francois\_Valiquette](https://discuss.elastic.co/u/Francois_Valiquette)\ **Replies:** 1\ **Last updated:** [August 24, 2020, 9:37pm UTC](https://discuss.elastic.co/t/logging-search-queries-made-on-elasticsearch/245950 "2020-08-24T21:37:05Z")
I would like to know if there is a way to log all the search queries made against our Elasticsearch cluster. I assume it might be possible by changing the log level of one of the logging hierarchies as described here but… --- ## [Authorization Exception for SuperUser](https://discuss.elastic.co/t/authorization-exception-for-superuser/245311)
**Author:** [@apocalypse0](https://discuss.elastic.co/u/apocalypse0)\ **Replies:** 5\ **Last updated:** [August 24, 2020, 9:07pm UTC](https://discuss.elastic.co/t/authorization-exception-for-superuser/245311 "2020-08-24T21:07:51Z")
I'm running Elastic 7.8.0 on the latest Debian 10. SSL and authentication is enabled. Everything has been working fine. I've been able to connect to the ES instance using all of the stack products and using the python el… --- ## [Old doc versions will not be deleted](https://discuss.elastic.co/t/old-doc-versions-will-not-be-deleted/246061)
**Author:** [@Messias\_2](https://discuss.elastic.co/u/Messias_2)\ **Replies:** 10\ **Last updated:** [August 24, 2020, 9:05pm UTC](https://discuss.elastic.co/t/old-doc-versions-will-not-be-deleted/246061 "2020-08-24T21:05:37Z")
Hi, in this discuss https://discuss.elastic.co/t/deleting-old-versions/4689/3 stands if you use the same ID for a doc: ... each time you index a doc with the same ID, the old version will be marked as deleted, and will … --- ## [Different query result between http and kibana](https://discuss.elastic.co/t/different-query-result-between-http-and-kibana/246107)
**Author:** [@vincent2mots](https://discuss.elastic.co/u/vincent2mots)\ **Replies:** 2\ **Last updated:** [August 24, 2020, 6:33pm UTC](https://discuss.elastic.co/t/different-query-result-between-http-and-kibana/246107 "2020-08-24T18:33:03Z")
Hi experts, I'm trying to undestand something with a query result but I still don't get it... I have a index (td\_movies) with a lot of movies. I want to search for the movies where the title contains "star" or "wars". … --- ## [Query datastream - all shards - how to avoid?](https://discuss.elastic.co/t/query-datastream-all-shards-how-to-avoid/246127)
**Author:** [@abenas](https://discuss.elastic.co/u/abenas)\ **Replies:** 2\ **Last updated:** [August 24, 2020, 5:51pm UTC](https://discuss.elastic.co/t/query-datastream-all-shards-how-to-avoid/246127 "2020-08-24T17:51:20Z")
Hi, We currently use a date pattern in index name to contain a monthly breakdown of documents. In this way, an app can query the right index (or indexes) based on an initial/end date, avoiding hitting all indexes / sha… --- ## [Running custom aggregations in ES](https://discuss.elastic.co/t/running-custom-aggregations-in-es/243213)
**Author:** [@yBother](https://discuss.elastic.co/u/yBother)\ **Replies:** 5\ **Last updated:** [August 24, 2020, 5:31pm UTC](https://discuss.elastic.co/t/running-custom-aggregations-in-es/243213 "2020-08-24T17:31:36Z")
Is it possible to run custom "aggregations" directly db side? I know there are builtin functionalities like averaging etc. But I want to run a custom function on the data that is stored in a specific index. --- ## [How to use search\_after with rest low client api](https://discuss.elastic.co/t/how-to-use-search-after-with-rest-low-client-api/246156)
**Author:** [@abhishek\_chaturvedi](https://discuss.elastic.co/u/abhishek_chaturvedi)\ **Replies:** 0\ **Last updated:** [August 24, 2020, 4:54pm UTC](https://discuss.elastic.co/t/how-to-use-search-after-with-rest-low-client-api/246156 "2020-08-24T16:54:16Z")
How to use search\_after in below implementation: String esQuery = String.format(searchTextQuery, startDate, endDate, formattedQueries); request.setJsonEntity(esQuery); String offset = String.valueOf((Integer.parseIn… --- ## [Painless script too long](https://discuss.elastic.co/t/painless-script-too-long/246043)
**Author:** [@wfeng888](https://discuss.elastic.co/u/wfeng888)\ **Replies:** 2\ **Last updated:** [August 24, 2020, 3:46pm UTC](https://discuss.elastic.co/t/painless-script-too-long/246043 "2020-08-24T15:46:15Z")
When i use painless script, i get the following error: Does this "plugin" mean the elasticsearch built-in aggregation function or something else? --- ## [Adding tokenizer/patternReplace on phoneNumber using NEST client](https://discuss.elastic.co/t/adding-tokenizer-patternreplace-on-phonenumber-using-nest-client/246142)
**Author:** [@AmitaS](https://discuss.elastic.co/u/AmitaS)\ **Replies:** 0\ **Last updated:** [August 24, 2020, 3:01pm UTC](https://discuss.elastic.co/t/adding-tokenizer-patternreplace-on-phonenumber-using-nest-client/246142 "2020-08-24T15:01:05Z")
Hi, i have phone numbers in elastic search -\> saved as ,in any of below formats "+46 23234 5656" "0 23234 5656" "23234-5656" "232345656" so if i search for "232345656" i want all 4 results shown above,can anyone te… --- ## [Datafeed has missed documents due to ingest latency error](https://discuss.elastic.co/t/datafeed-has-missed-documents-due-to-ingest-latency-error/246016)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 4\ **Last updated:** [August 24, 2020, 2:42pm UTC](https://discuss.elastic.co/t/datafeed-has-missed-documents-due-to-ingest-latency-error/246016 "2020-08-24T14:42:33Z")
Hello, I have many of these in the Job Management \> Job Messages tab, and I'm looking for a way to check it. first of all, the dates don't make since, but I guess it's a timezone bug in Kibana (first column's date is… --- ## [\[Ingest Pipeline\] \[Performance\] Filebeat Cisco module ingest performance](https://discuss.elastic.co/t/ingest-pipeline-performance-filebeat-cisco-module-ingest-performance/246133)
**Author:** [@pcosic](https://discuss.elastic.co/u/pcosic)\ **Replies:** 0\ **Last updated:** [August 24, 2020, 2:13pm UTC](https://discuss.elastic.co/t/ingest-pipeline-performance-filebeat-cisco-module-ingest-performance/246133 "2020-08-24T14:13:52Z")
Hi, I recently tried the Filebeat Cisco module. I tested the module with a 3 Node cluster where all nodes are: dilmrt There is no other data ingested in the Cluster except Filebeat Cisco Asa log syslogs. Every node h… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=825) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=827)