# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=853 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 854 --- ## [Count of nested documents by aggregation](https://discuss.elastic.co/t/count-of-nested-documents-by-aggregation/242362)
**Author:** [@Divyanshu\_Tyagi](https://discuss.elastic.co/u/Divyanshu_Tyagi)\ **Replies:** 0\ **Last updated:** [July 23, 2020, 3:24pm UTC](https://discuss.elastic.co/t/count-of-nested-documents-by-aggregation/242362 "2020-07-23T15:24:02Z")
I have 2 level of nesting in my mapping: business -\> funds -\> admins/market I want count of f\_id's that matches with particular admin\_name ES MAPPING { "text\_index" : { "mappings" : { "prop… --- ## [Partial phrase or exact phrase matching](https://discuss.elastic.co/t/partial-phrase-or-exact-phrase-matching/242320)
**Author:** [@bradconor](https://discuss.elastic.co/u/bradconor)\ **Replies:** 9\ **Last updated:** [July 23, 2020, 2:53pm UTC](https://discuss.elastic.co/t/partial-phrase-or-exact-phrase-matching/242320 "2020-07-23T14:53:56Z")
Hi there, I am new to elasticsearch and I want to search for a phrase. Suppose I query with this phrase : i am new to elasticsearch And I have some data like new to elasticsearch I have tried with match\_phrase but … --- ## [Serch text with special character](https://discuss.elastic.co/t/serch-text-with-special-character/242040)
**Author:** [@Katia](https://discuss.elastic.co/u/Katia)\ **Replies:** 9\ **Last updated:** [July 23, 2020, 1:38pm UTC](https://discuss.elastic.co/t/serch-text-with-special-character/242040 "2020-07-23T13:38:56Z")
I really need help. I indexed my data using logstash. The data is as follows: 20200807 00:10:02.934 Mes émis à l'appli Hôte 3 3 -1 The issue is that, I need to search "3 3-1", but it seems that the caracter "-" cau… --- ## [Query with more than one field](https://discuss.elastic.co/t/query-with-more-than-one-field/241509)
**Author:** [@schneider](https://discuss.elastic.co/u/schneider)\ **Replies:** 7\ **Last updated:** [July 23, 2020, 12:50pm UTC](https://discuss.elastic.co/t/query-with-more-than-one-field/241509 "2020-07-23T12:50:34Z")
Hello, i want the data witch : field "transacao" = " QuarantineTransac" and the field "assunto" = "qualquerassunto", but is retrieving data witch one OR another no the 2 at the same time { "query": { "boo… --- ## [Config Elasticsearch for a headless system](https://discuss.elastic.co/t/config-elasticsearch-for-a-headless-system/242312)
**Author:** [@Peter\_Boos](https://discuss.elastic.co/u/Peter_Boos)\ **Replies:** 3\ **Last updated:** [July 23, 2020, 12:36pm UTC](https://discuss.elastic.co/t/config-elasticsearch-for-a-headless-system/242312 "2020-07-23T12:36:26Z")
I'm (trying) to run ELK on a headless console only system. So far it only says: Kibana server is not ready yet through a ssh i can see the tail -f /var/log/syslog Logging this error which is a bit long oneliner : … --- ## [Elastic search cluster](https://discuss.elastic.co/t/elastic-search-cluster/242334)
**Author:** [@Pradeep\_K\_S](https://discuss.elastic.co/u/Pradeep_K_S)\ **Replies:** 3\ **Last updated:** [July 23, 2020, 12:09pm UTC](https://discuss.elastic.co/t/elastic-search-cluster/242334 "2020-07-23T12:09:03Z")
Hi, I am not sure where exactly i can find the Elastic search logs, if any node failure or cluster is red. Also can i get information where ES index schema will be stored? is it in nodes or client/master instance? Than… --- ## [Failed to create shard, failure IOException\[failed to obtain in-memory shard lock\]](https://discuss.elastic.co/t/failed-to-create-shard-failure-ioexception-failed-to-obtain-in-memory-shard-lock/242323)
**Author:** [@AaronSarkissian](https://discuss.elastic.co/u/AaronSarkissian)\ **Replies:** 10\ **Last updated:** [July 23, 2020, 11:31am UTC](https://discuss.elastic.co/t/failed-to-create-shard-failure-ioexception-failed-to-obtain-in-memory-shard-lock/242323 "2020-07-23T11:31:58Z")
My cluster setup is 2 nodes, both docker based on different VMs in the same network. My cluster health becomes yellow after few hours it start to get unassigned status one by one, till after a day all the replica shards… --- ## [Obtain Search Results from Multiple Documents of Same Index](https://discuss.elastic.co/t/obtain-search-results-from-multiple-documents-of-same-index/242332)
**Author:** [@ShashikanthKomandoor](https://discuss.elastic.co/u/ShashikanthKomandoor)\ **Replies:** 0\ **Last updated:** [July 23, 2020, 11:14am UTC](https://discuss.elastic.co/t/obtain-search-results-from-multiple-documents-of-same-index/242332 "2020-07-23T11:14:03Z")
Hi Team, I have setup almost 15 relay MTAs for relaying my mails. And I am pushing the /var/log/maillog to ELK Stack. I was able to use the grok filters and create the indices, documents, fields and so and also I am ab… --- ## [Set up 2 node cluster with 2 different machine](https://discuss.elastic.co/t/set-up-2-node-cluster-with-2-different-machine/242307)
**Author:** [@Ankur](https://discuss.elastic.co/u/Ankur)\ **Replies:** 1\ **Last updated:** [July 23, 2020, 11:09am UTC](https://discuss.elastic.co/t/set-up-2-node-cluster-with-2-different-machine/242307 "2020-07-23T11:09:25Z")
I want to setup 2 node elastic cluster (1 master & 1 data ). but unable to connect the data node. plz suggest any yml setting. --- ## [Error in java api network client connecting to elastic node](https://discuss.elastic.co/t/error-in-java-api-network-client-connecting-to-elastic-node/242321)
**Author:** [@Imrankhan\_Patan](https://discuss.elastic.co/u/Imrankhan_Patan)\ **Replies:** 0\ **Last updated:** [July 23, 2020, 10:17am UTC](https://discuss.elastic.co/t/error-in-java-api-network-client-connecting-to-elastic-node/242321 "2020-07-23T10:17:15Z")
I am facing an issue with while trying to insert/ read from Elasticsearch 7.2 on single node with Spring boot Java transport client referring to the link https://dzone.com/articles/spring-boot-elasticsearch "exception":… --- ## [ES index automatic mapping update](https://discuss.elastic.co/t/es-index-automatic-mapping-update/242078)
**Author:** [@Antonio\_Antovski](https://discuss.elastic.co/u/Antonio_Antovski)\ **Replies:** 3\ **Last updated:** [July 23, 2020, 9:56am UTC](https://discuss.elastic.co/t/es-index-automatic-mapping-update/242078 "2020-07-23T09:56:58Z")
I have a Python script that synchronizes the data between a relational database and ElasticSearch, i.e. on every new insert into the relational database, the data is being inserted into the ES index too. But, whenever I … --- ## [How to read property name which is inside JSON for alert?](https://discuss.elastic.co/t/how-to-read-property-name-which-is-inside-json-for-alert/240051)
**Author:** [@gunjan\_prmr](https://discuss.elastic.co/u/gunjan_prmr)\ **Replies:** 1\ **Last updated:** [July 23, 2020, 9:33am UTC](https://discuss.elastic.co/t/how-to-read-property-name-which-is-inside-json-for-alert/240051 "2020-07-23T09:33:20Z")
I am able pull the specific index infor by using ctx.results.0.hits.hits.0.\_source.log. This gives me desired result. Now this comes a JSON blob where I want to read particular property but not sure it is possible or not… --- ## [How to set watcher condition when aggregations doc\_count greater then a value](https://discuss.elastic.co/t/how-to-set-watcher-condition-when-aggregations-doc-count-greater-then-a-value/242283)
**Author:** [@hanase](https://discuss.elastic.co/u/hanase)\ **Replies:** 2\ **Last updated:** [July 23, 2020, 9:31am UTC](https://discuss.elastic.co/t/how-to-set-watcher-condition-when-aggregations-doc-count-greater-then-a-value/242283 "2020-07-23T09:31:32Z")
Hi, I search heartbeat-\* indices when status is down and want to send message to telegram My DSL is , GET heartbeat-7.7.0\*/\_search { "query": { "bool": { "must": \[ { "match": { … --- ## [How to set Time range in Watcher](https://discuss.elastic.co/t/how-to-set-time-range-in-watcher/239617)
**Author:** [@skdas](https://discuss.elastic.co/u/skdas)\ **Replies:** 4\ **Last updated:** [July 23, 2020, 9:30am UTC](https://discuss.elastic.co/t/how-to-set-time-range-in-watcher/239617 "2020-07-23T09:30:55Z")
Hello Elastic Team, I am trying to set time range in my below watcher configuration but i am getting an error while configuring the Watcher could you please assist. Watcher Configuration { "trigger": { "schedule"… --- ## [Circuit\_breaking\_exception - Watcher](https://discuss.elastic.co/t/circuit-breaking-exception-watcher/241255)
**Author:** [@ChequredFlag](https://discuss.elastic.co/u/ChequredFlag)\ **Replies:** 2\ **Last updated:** [July 23, 2020, 9:24am UTC](https://discuss.elastic.co/t/circuit-breaking-exception-watcher/241255 "2020-07-23T09:24:56Z")
Hi I have just started using ElasticSearch and have run into an issue when setting up advanced watchers. I have written several watchers to check for application errors. However, they are returning a circuit\_breaking… --- ## [High JVM %](https://discuss.elastic.co/t/high-jvm/242239)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 2\ **Last updated:** [July 23, 2020, 7:07am UTC](https://discuss.elastic.co/t/high-jvm/242239 "2020-07-23T07:07:01Z")
Hi I'm using the hosted elastic (v7.8), and having high %JVM most of times. I'm trying to find the root cause for that. what would you recommend to check by the screenshots below? thanks --- ## [Watchers: querying for multiple strings in timeframe](https://discuss.elastic.co/t/watchers-querying-for-multiple-strings-in-timeframe/241211)
**Author:** [@DatBassie](https://discuss.elastic.co/u/DatBassie)\ **Replies:** 1\ **Last updated:** [July 23, 2020, 8:52am UTC](https://discuss.elastic.co/t/watchers-querying-for-multiple-strings-in-timeframe/241211 "2020-07-23T08:52:43Z")
Hi everyone, I've been working to get a watcher configured that will look for either of two options on text in a fields, in ths case message. Of all those, I'd want to alert if any of them happened in the last, say, th… --- ## [Watcher searching for query term containing hyphens](https://discuss.elastic.co/t/watcher-searching-for-query-term-containing-hyphens/241471)
**Author:** [@ChequredFlag](https://discuss.elastic.co/u/ChequredFlag)\ **Replies:** 1\ **Last updated:** [July 23, 2020, 8:48am UTC](https://discuss.elastic.co/t/watcher-searching-for-query-term-containing-hyphens/241471 "2020-07-23T08:48:59Z")
Hi I am trying to return the number of errors reported against a specific application in our stack. The search term i am using is "search" : { "request" : { "indices" : "developme… --- ## [Index Analysis vs search analysis](https://discuss.elastic.co/t/index-analysis-vs-search-analysis/242305)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 0\ **Last updated:** [July 23, 2020, 8:40am UTC](https://discuss.elastic.co/t/index-analysis-vs-search-analysis/242305 "2020-07-23T08:40:32Z")
I have followed this https://www.elastic.co/guide/en/elasticsearch/reference/current/analysis-index-search-time.html "settings": { "analysis": { "analyzer": { "autocomplete": { "tokenizer":"mytoken", "filter":\["l… --- ## [Unable to get a field match watcher to work properly](https://discuss.elastic.co/t/unable-to-get-a-field-match-watcher-to-work-properly/242252)
**Author:** [@mlasky1970](https://discuss.elastic.co/u/mlasky1970)\ **Replies:** 1\ **Last updated:** [July 23, 2020, 8:38am UTC](https://discuss.elastic.co/t/unable-to-get-a-field-match-watcher-to-work-properly/242252 "2020-07-23T08:38:41Z")
I have been trying to get a simple field match condition watcher to work without success. I've combed the forums, combined advice I found here, worked with Support, all to no avail. So I figured I'd post and see if other… --- ## [Is Elastic Search Supports Partition by Column and Overwrite Specific Partition data within the Same Index?](https://discuss.elastic.co/t/is-elastic-search-supports-partition-by-column-and-overwrite-specific-partition-data-within-the-same-index/242170)
**Author:** [@dillibabu.mekala](https://discuss.elastic.co/u/dillibabu.mekala)\ **Replies:** 5\ **Last updated:** [July 23, 2020, 8:06am UTC](https://discuss.elastic.co/t/is-elastic-search-supports-partition-by-column-and-overwrite-specific-partition-data-within-the-same-index/242170 "2020-07-23T08:06:03Z")
Hi Team, I have a csv file where i need to store this data in index ("carsdata") by partition column. Input CSV (cars-data.csv): carname,enginetype,cost,countryId,modelnumber BMW1,Petrol,10000,1,12 BMW2,Petrol,20000,… --- ## [Sendgrid supports elk configuration](https://discuss.elastic.co/t/sendgrid-supports-elk-configuration/242024)
**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\ **Replies:** 1\ **Last updated:** [July 23, 2020, 7:50am UTC](https://discuss.elastic.co/t/sendgrid-supports-elk-configuration/242024 "2020-07-23T07:50:21Z")
Hi Team, i am configuring sendgrid mail server in elastic search yml file to create alarms. but i was getting below errors in logs, can please help on this. Caused by: javax.mail.AuthenticationFailedException: 451 Aut… --- ## [Clarify high level REST client compatibility between 6 and 7](https://discuss.elastic.co/t/clarify-high-level-rest-client-compatibility-between-6-and-7/241973)
**Author:** [@CanardMoussant](https://discuss.elastic.co/u/CanardMoussant)\ **Replies:** 1\ **Last updated:** [July 23, 2020, 7:46am UTC](https://discuss.elastic.co/t/clarify-high-level-rest-client-compatibility-between-6-and-7/241973 "2020-07-23T07:46:17Z")
I have traffic coming in constantly in my application and I need to migrate from ES6 to 7. According to the doc the client should be migrated last. But will a client 6 work with a cluster in version 7? How this should be… --- ## [Multiple search terms with radius](https://discuss.elastic.co/t/multiple-search-terms-with-radius/242294)
**Author:** [@Phil795](https://discuss.elastic.co/u/Phil795)\ **Replies:** 0\ **Last updated:** [July 23, 2020, 7:23am UTC](https://discuss.elastic.co/t/multiple-search-terms-with-radius/242294 "2020-07-23T07:23:11Z")
For our search engine I want to search in PDF documents for related search terms. For example: oil mist It is relevant that each reference contains oil and mist. In addition, I would like to determine how many words a… --- ## [Move Indices from Cold Node to S3-IA](https://discuss.elastic.co/t/move-indices-from-cold-node-to-s3-ia/242197)
**Author:** [@jijo.john](https://discuss.elastic.co/u/jijo.john)\ **Replies:** 4\ **Last updated:** [July 23, 2020, 7:02am UTC](https://discuss.elastic.co/t/move-indices-from-cold-node-to-s3-ia/242197 "2020-07-23T07:02:37Z")
Hi Team, Could you please let us know how we can move only indices from cold node to S3 with a snapshot- restore policy. Is there any option in backup policy to target only a freezed index from cold node to be moved to … --- ## [Server disk broken and recover, but failed to start](https://discuss.elastic.co/t/server-disk-broken-and-recover-but-failed-to-start/242140)
**Author:** [@jinjinbari](https://discuss.elastic.co/u/jinjinbari)\ **Replies:** 6\ **Last updated:** [July 23, 2020, 6:52am UTC](https://discuss.elastic.co/t/server-disk-broken-and-recover-but-failed-to-start/242140 "2020-07-23T06:52:06Z")
Hello. My server disk was broken and recover now. But the elasticsearch service isn\`t started. Here is my logs. \[2020-07-22T15:54:22,153\]\[INFO \]\[o.e.e.NodeEnvironment \] \[apm-data-node4\] using \[1\] data paths, mount… --- ## [Used heap behaves wired, JVM Heapsize problems](https://discuss.elastic.co/t/used-heap-behaves-wired-jvm-heapsize-problems/241871)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 9\ **Last updated:** [July 23, 2020, 6:30am UTC](https://discuss.elastic.co/t/used-heap-behaves-wired-jvm-heapsize-problems/241871 "2020-07-23T06:30:21Z")
Hi, my used JVM Heap behaves very weird. I didn't change any settings. 2 Nodes work fine, the third has problems. (Orange Line) Settings: -Xms3g -Xmx3g The PC has a lot of free RAM left. What is happening he… --- ## [Issue with upsert document](https://discuss.elastic.co/t/issue-with-upsert-document/242279)
**Author:** [@siva4](https://discuss.elastic.co/u/siva4)\ **Replies:** 1\ **Last updated:** [July 23, 2020, 6:19am UTC](https://discuss.elastic.co/t/issue-with-upsert-document/242279 "2020-07-23T06:19:39Z")
What would be the correct api to perform upsert (insert if doc not exist, else update) in elasticsearch? ran into issues with below api. test.setId("test\_id"); test.setTitle("test\_title"); Stri… --- ## [Snapshot and archive old indices comparision](https://discuss.elastic.co/t/snapshot-and-archive-old-indices-comparision/242266)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 1\ **Last updated:** [July 23, 2020, 2:19am UTC](https://discuss.elastic.co/t/snapshot-and-archive-old-indices-comparision/242266 "2020-07-23T02:19:04Z")
Hi all I am using a script to take snapshot of an index and then using tar to compress them to save space. What i wanted to know that what compression is the best for this kind of data. gunzip, bzip2 or something else.… --- ## [Trying to create an index template to create a data stream](https://discuss.elastic.co/t/trying-to-create-an-index-template-to-create-a-data-stream/242089)
**Author:** [@randoran](https://discuss.elastic.co/u/randoran)\ **Replies:** 3\ **Last updated:** [July 22, 2020, 11:35pm UTC](https://discuss.elastic.co/t/trying-to-create-an-index-template-to-create-a-data-stream/242089 "2020-07-22T23:35:51Z")
I'm attempting to follow this tutorial https://www.elastic.co/guide/en/elasticsearch/reference/7.x/getting-started-index-lifecycle-management.html And I am at the point where it says to Create an index template PUT \_i… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=852) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=854)