# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=871

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 872

---

## [Continous transforms accumulating delay, can be tweak for speed up?](https://discuss.elastic.co/t/continous-transforms-accumulating-delay-can-be-tweak-for-speed-up/239807)

<div class="topic-metadata">

**Author:** [@Germain\_Pavot](https://discuss.elastic.co/u/Germain_Pavot)\
**Replies:** 11\
**Last updated:** [July 6, 2020, 11:34am UTC](https://discuss.elastic.co/t/continous-transforms-accumulating-delay-can-be-tweak-for-speed-up/239807 "2020-07-06T11:34:45Z")

</div>

Hi guys, I use tranforms to create an aggregated index. The setup are : 1 live index with live datas injections. Currently this index receive between 5 and 10 Millions of documents per hour and this will be growth in …

---

## [Performance querying time-based indices in a date range](https://discuss.elastic.co/t/performance-querying-time-based-indices-in-a-date-range/238283)

<div class="topic-metadata">

**Author:** [@devplayer0](https://discuss.elastic.co/u/devplayer0)\
**Replies:** 2\
**Last updated:** [July 6, 2020, 10:16am UTC](https://discuss.elastic.co/t/performance-querying-time-based-indices-in-a-date-range/238283 "2020-07-06T10:16:38Z")

</div>

Bit new to Elasticsearch. When limiting the date range of a query (for example if I have a daily index of events and I'd like to search within only a non-aligned monthly cycle), is it worth optimising the index pattern? …

---

## [Elasticsearch is not starting for Search Guard error](https://discuss.elastic.co/t/elasticsearch-is-not-starting-for-search-guard-error/239909)

<div class="topic-metadata">

**Author:** [@Mahathir\_Mohammad](https://discuss.elastic.co/u/Mahathir_Mohammad)\
**Replies:** 2\
**Last updated:** [July 6, 2020, 9:59am UTC](https://discuss.elastic.co/t/elasticsearch-is-not-starting-for-search-guard-error/239909 "2020-07-06T09:59:42Z")

</div>

I'm trying to configure Search Guard admin. here is my elasticsearch.yml configurations: searchguard.ssl.transport.pemcert\_filepath: /home/rsa-key-20200528/search-guard-ssl-master/example-pki-scripts/node-0.crt.pem sear…

---

## [Sorting results from composite aggregation](https://discuss.elastic.co/t/sorting-results-from-composite-aggregation/239076)

<div class="topic-metadata">

**Author:** [@Vignesh\_Theyagarajan](https://discuss.elastic.co/u/Vignesh_Theyagarajan)\
**Replies:** 13\
**Last updated:** [July 6, 2020, 9:51am UTC](https://discuss.elastic.co/t/sorting-results-from-composite-aggregation/239076 "2020-07-06T09:51:21Z")

</div>

I'm using a combination of composite, terms and tophits aggregation. I'd like to sort the results (groups retrieved) based on a document's property (nested field property). I read about bucket sort, but really not sure …

---

## [How to search for parts of a string in the \_id field in an existing index](https://discuss.elastic.co/t/how-to-search-for-parts-of-a-string-in-the-id-field-in-an-existing-index/239622)

<div class="topic-metadata">

**Author:** [@BjornOlavBerg](https://discuss.elastic.co/u/BjornOlavBerg)\
**Replies:** 3\
**Last updated:** [July 6, 2020, 9:24am UTC](https://discuss.elastic.co/t/how-to-search-for-parts-of-a-string-in-the-id-field-in-an-existing-index/239622 "2020-07-06T09:24:02Z")

</div>

Hie, I am working with an existing Elastic Search index, trying to search for a string in the \_id field. The \_id in this index consists of two concatinated strings, and I need to be able to search for the second part o…

---

## [Help with cluster configuration for a deployment moving from 2.4 in AWS to 7.7 in elastic cloud](https://discuss.elastic.co/t/help-with-cluster-configuration-for-a-deployment-moving-from-2-4-in-aws-to-7-7-in-elastic-cloud/239360)

<div class="topic-metadata">

**Author:** [@Michael\_Turbe](https://discuss.elastic.co/u/Michael_Turbe)\
**Replies:** 1\
**Last updated:** [July 6, 2020, 9:18am UTC](https://discuss.elastic.co/t/help-with-cluster-configuration-for-a-deployment-moving-from-2-4-in-aws-to-7-7-in-elastic-cloud/239360 "2020-07-06T09:18:20Z")

</div>

Hi all, we currently have a large elasticsearch 2.4 deployment that's been running successfully, hosted in AWS, for the last 3 years. The cluster is comprised of ~15,000 indexes, 7700 active primary shards, and 15400 ac…

---

## [Customized template](https://discuss.elastic.co/t/customized-template/239978)

<div class="topic-metadata">

**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\
**Replies:** 0\
**Last updated:** [July 6, 2020, 8:58am UTC](https://discuss.elastic.co/t/customized-template/239978 "2020-07-06T08:58:03Z")

</div>

I have elasticsearch 2.4 and I have a lot of index that every day are created like this: test-app-yyyy.MM.dd test-poc-yyyy.MM.dd test-serv-yyyy.MM.dd I have a template customized for all "test-\*" but now I would like…

---

## [Using wildcard in multiple fields](https://discuss.elastic.co/t/using-wildcard-in-multiple-fields/239924)

<div class="topic-metadata">

**Author:** [@pilo](https://discuss.elastic.co/u/pilo)\
**Replies:** 1\
**Last updated:** [July 6, 2020, 8:36am UTC](https://discuss.elastic.co/t/using-wildcard-in-multiple-fields/239924 "2020-07-06T08:36:45Z")

</div>

Hello everyone, i have mapping like this PUT test { "mappings": { "properties": { "elastic\_case\_title": { "properties": { "ace": { "type": "text", "term\_vector": "with\_position…

---

## [Issue with finding length of a text field](https://discuss.elastic.co/t/issue-with-finding-length-of-a-text-field/239786)

<div class="topic-metadata">

**Author:** [@buddhasmiles](https://discuss.elastic.co/u/buddhasmiles)\
**Replies:** 1\
**Last updated:** [July 6, 2020, 8:34am UTC](https://discuss.elastic.co/t/issue-with-finding-length-of-a-text-field/239786 "2020-07-06T08:34:10Z")

</div>

Team , am using version "number": "7.5.1" of ES. below is the 1 row out put of my table.(added only necessary one) { "took" : 1, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1, "skipped" : 0, "failed…

---

## [Short field type taking 4 bytes instead of 2](https://discuss.elastic.co/t/short-field-type-taking-4-bytes-instead-of-2/239809)

<div class="topic-metadata">

**Author:** [@yfful](https://discuss.elastic.co/u/yfful)\
**Replies:** 5\
**Last updated:** [July 6, 2020, 8:04am UTC](https://discuss.elastic.co/t/short-field-type-taking-4-bytes-instead-of-2/239809 "2020-07-06T08:04:04Z")

</div>

Hello, Looking at the short field type, I see that the Fields created are based on the integer implementation: However, this means that a IntPoint is used when a short field is indexed. This leads to the short point …

---

## [Could not see OCR text in "content" field](https://discuss.elastic.co/t/could-not-see-ocr-text-in-content-field/238653)

<div class="topic-metadata">

**Author:** [@saikat189](https://discuss.elastic.co/u/saikat189)\
**Replies:** 18\
**Last updated:** [July 6, 2020, 7:40am UTC](https://discuss.elastic.co/t/could-not-see-ocr-text-in-content-field/238653 "2020-07-06T07:40:23Z")

</div>

I am using fs crawler with below settings --- name: "test2" fs: url: "/home/local/es" update\_rate: "2m" excludes: - "\*/~\*" json\_support: false filename\_as\_id: false add\_filesize: true remove\_deleted: tru…

---

## [Elastic Search Common Documents Query](https://discuss.elastic.co/t/elastic-search-common-documents-query/239426)

<div class="topic-metadata">

**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\
**Replies:** 21\
**Last updated:** [July 6, 2020, 4:53am UTC](https://discuss.elastic.co/t/elastic-search-common-documents-query/239426 "2020-07-06T04:53:43Z")

</div>

I have the following documents in elastic search: \[{ "\_version": 1, "uid": "blt275162870bd76359", "title": "Entry1", "publish\_details": \[{ "environment": "blt603fe91adbdcff66", "locale": "en-us", "time": "2…

---

## [Deriving the total term frequency for each term](https://discuss.elastic.co/t/deriving-the-total-term-frequency-for-each-term/239952)

<div class="topic-metadata">

**Author:** [@richylyq](https://discuss.elastic.co/u/richylyq)\
**Replies:** 0\
**Last updated:** [July 6, 2020, 4:02am UTC](https://discuss.elastic.co/t/deriving-the-total-term-frequency-for-each-term/239952 "2020-07-06T04:02:54Z")

</div>

I would like to check on how to derive the total term frequency for each term; where and how should i do the summation of term\_freq for each document?

---

## [Why Elasticsearch-SQL “group by” use composite agg](https://discuss.elastic.co/t/why-elasticsearch-sql-group-by-use-composite-agg/239740)

<div class="topic-metadata">

**Author:** [@ITzhangqiang](https://discuss.elastic.co/u/ITzhangqiang)\
**Replies:** 8\
**Last updated:** [July 6, 2020, 2:45am UTC](https://discuss.elastic.co/t/why-elasticsearch-sql-group-by-use-composite-agg/239740 "2020-07-06T02:45:25Z")

</div>

When I tested the Elasticsearch-SQL feature，I found the “group by” is too slow,why “group by” relies on Elasticsearch’s composite aggregation？ case1:use Elasticsearch-SQL GET /\_sql?format=json { "query": """ selec…

---

## [Transform - Continuous mode for more than 1 index?](https://discuss.elastic.co/t/transform-continuous-mode-for-more-than-1-index/239244)

<div class="topic-metadata">

**Author:** [@Jason\_Neo](https://discuss.elastic.co/u/Jason_Neo)\
**Replies:** 11\
**Last updated:** [July 6, 2020, 1:28am UTC](https://discuss.elastic.co/t/transform-continuous-mode-for-more-than-1-index/239244 "2020-07-06T01:28:54Z")

</div>

Hi all. I have been searching the web and elastic forum looking for solution, but it doesn't seem like people are having problem with the Transform function. I'm using Transform to create summary tables to optimize que…

---

## [Term Vectors Field Statistics Meaning](https://discuss.elastic.co/t/term-vectors-field-statistics-meaning/239917)

<div class="topic-metadata">

**Author:** [@Ubeta](https://discuss.elastic.co/u/Ubeta)\
**Replies:** 0\
**Last updated:** [July 5, 2020, 10:24am UTC](https://discuss.elastic.co/t/term-vectors-field-statistics-meaning/239917 "2020-07-05T10:24:21Z")

</div>

Hi! I am trying to understand the Term Vectors API of Elastic Stack but I am not quite sure what the 'Field Statistics' output means. I tried reading the Elastic document about this but just got confused. Field statis…

---

## [Nested Bucket Aggregation](https://discuss.elastic.co/t/nested-bucket-aggregation/239935)

<div class="topic-metadata">

**Author:** [@Camilo\_Salomon](https://discuss.elastic.co/u/Camilo_Salomon)\
**Replies:** 0\
**Last updated:** [July 5, 2020, 9:12pm UTC](https://discuss.elastic.co/t/nested-bucket-aggregation/239935 "2020-07-05T21:12:41Z")

</div>

I'm trying to do an aggregation over nested buckets, something like this But I don't know how to do get the expected Result. Any advice will be appreciated. Here is my current query: POST kibana\_sample\_data\_ecommer…

---

## [Curator delete process for monthly/weekly indices](https://discuss.elastic.co/t/curator-delete-process-for-monthly-weekly-indices/239735)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 1\
**Last updated:** [July 5, 2020, 5:58pm UTC](https://discuss.elastic.co/t/curator-delete-process-for-monthly-weekly-indices/239735 "2020-07-05T17:58:01Z")

</div>

HI Team, Im using curator to purge old data in my indices, Initially it was daily basis index creation. In our current approach of index creation is monthly basis creation. we indexing production and pre-prod data. Pr…

---

## [Query Users who has similar rating](https://discuss.elastic.co/t/query-users-who-has-similar-rating/239929)

<div class="topic-metadata">

**Author:** [@recordable542](https://discuss.elastic.co/u/recordable542)\
**Replies:** 0\
**Last updated:** [July 5, 2020, 3:54pm UTC](https://discuss.elastic.co/t/query-users-who-has-similar-rating/239929 "2020-07-05T15:54:12Z")

</div>

index "users" has several columns id(integer), name(string), rating(float) e.g users 1 steve 3.3 2 jane 9.9 3 bob 2.3 4 taylor 5.5 when a user is given, (let's say {id:1 name:steve rating:3.3} I want to query oth…

---

## [Best way to save queries](https://discuss.elastic.co/t/best-way-to-save-queries/239863)

<div class="topic-metadata">

**Author:** [@NikolaP93](https://discuss.elastic.co/u/NikolaP93)\
**Replies:** 1\
**Last updated:** [July 5, 2020, 2:21pm UTC](https://discuss.elastic.co/t/best-way-to-save-queries/239863 "2020-07-05T14:21:44Z")

</div>

Hi, I am using Reactivebase to query elasticsearch. Since the users of my app will be able to save the queries, is it reliable for me to store the query as it is returned? Example: {"query":{"bool":{"must":\[{"bool":{"mu…

---

## [Elastic Search 6.x Keeps Failing](https://discuss.elastic.co/t/elastic-search-6-x-keeps-failing/239920)

<div class="topic-metadata">

**Author:** [@thedoctordarren](https://discuss.elastic.co/u/thedoctordarren)\
**Replies:** 2\
**Last updated:** [July 5, 2020, 12:14pm UTC](https://discuss.elastic.co/t/elastic-search-6-x-keeps-failing/239920 "2020-07-05T12:14:00Z")

</div>

Hiya (New on forums like this so bare with me lol) Anyways Just wondered if someone can help me, I've installed Elasticsearch 6.8.9 through the DEB package and have installed the Elasticsearch head through GitHub. I've…

---

## [Replace string in array with \_update\_by\_query](https://discuss.elastic.co/t/replace-string-in-array-with-update-by-query/239913)

<div class="topic-metadata">

**Author:** [@ovinz](https://discuss.elastic.co/u/ovinz)\
**Replies:** 0\
**Last updated:** [July 5, 2020, 8:18am UTC](https://discuss.elastic.co/t/replace-string-in-array-with-update-by-query/239913 "2020-07-05T08:18:02Z")

</div>

Hello, I'd like to replace string by another one in all Array elements but I don't know how to do that in Java. My document is like : "pictures" : \[ "https://www.mydomain.com/images/123.png", …

---

## [Not elligible for basic license?](https://discuss.elastic.co/t/not-elligible-for-basic-license/239906)

<div class="topic-metadata">

**Author:** [@akoumjian](https://discuss.elastic.co/u/akoumjian)\
**Replies:** 1\
**Last updated:** [July 5, 2020, 6:37am UTC](https://discuss.elastic.co/t/not-elligible-for-basic-license/239906 "2020-07-05T06:37:09Z")

</div>

I'm running Elasticsearch 7.8 in docker in a manner similar to here: https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html I'm not sure why I am getting {"eligible\_to\_start\_basic":false} when I che…

---

## [Use my own data for Search UI example](https://discuss.elastic.co/t/use-my-own-data-for-search-ui-example/239119)

<div class="topic-metadata">

**Author:** [@spadel](https://discuss.elastic.co/u/spadel)\
**Replies:** 1\
**Last updated:** [July 4, 2020, 9:30pm UTC](https://discuss.elastic.co/t/use-my-own-data-for-search-ui-example/239119 "2020-07-04T21:30:26Z")

</div>

I am currently working through the Search UI Guide on https://github.com/elastic/search-ui. By now, I have recreated the example site with the national parks. I understand now, how to modify the page for my needs. In a n…

---

## [Sum aggregation on distinct values query](https://discuss.elastic.co/t/sum-aggregation-on-distinct-values-query/239865)

<div class="topic-metadata">

**Author:** [@Giselle\_Castrejon](https://discuss.elastic.co/u/Giselle_Castrejon)\
**Replies:** 2\
**Last updated:** [July 4, 2020, 8:50pm UTC](https://discuss.elastic.co/t/sum-aggregation-on-distinct-values-query/239865 "2020-07-04T20:50:52Z")

</div>

Hi, I am having trouble with my sum aggregation. I am using Elasticsearch \[7.6.1\] and I cant get the sum of each field, my data is the following: POST test\_2/\_doc/1 { "gender": \[ { "name": "other",…

---

## [Elasticsearch MMAPFS -\> Swap](https://discuss.elastic.co/t/elasticsearch-mmapfs-swap/239873)

<div class="topic-metadata">

**Author:** [@icm](https://discuss.elastic.co/u/icm)\
**Replies:** 7\
**Last updated:** [July 4, 2020, 1:58pm UTC](https://discuss.elastic.co/t/elasticsearch-mmapfs-swap/239873 "2020-07-04T13:58:58Z")

</div>

Hi, At our company we have a 6.1 cluster. To prepare for the upgrade to 6.8+ onwards, we've started rolling out new machines to Focal Fossa / Ubuntu 20.04 instead of Ubuntu 18.04. The cluster consists of 4 data nodes, …

---

## [Elasticsearch data replication from one server to another server](https://discuss.elastic.co/t/elasticsearch-data-replication-from-one-server-to-another-server/239874)

<div class="topic-metadata">

**Author:** [@Aniket\_Salvi](https://discuss.elastic.co/u/Aniket_Salvi)\
**Replies:** 5\
**Last updated:** [July 4, 2020, 1:42pm UTC](https://discuss.elastic.co/t/elasticsearch-data-replication-from-one-server-to-another-server/239874 "2020-07-04T13:42:44Z")

</div>

Hi, I have installed Elasticsearch on two different DC servers. I have load balance for for failure situation. Consider I am doing transactions and storing logs on my x instance and my x instance is goes down then load …

---

## [Restoring snapshot on a different server](https://discuss.elastic.co/t/restoring-snapshot-on-a-different-server/239280)

<div class="topic-metadata">

**Author:** [@f.Cavenaghi](https://discuss.elastic.co/u/f.Cavenaghi)\
**Replies:** 1\
**Last updated:** [July 4, 2020, 1:17pm UTC](https://discuss.elastic.co/t/restoring-snapshot-on-a-different-server/239280 "2020-07-04T13:17:57Z")

</div>

Hello, i have one ELK server (stand alone) that runs 7.6.1, i took one snapshot there and see that snapshot with: 'ET /\_snapshot/esbackup/\_all printout: "snapshots" : \[ { "snapshot" : "300620-oqkwq6XXXXX57hdrwkccq"…

---

## [How to get all suggest from an array?](https://discuss.elastic.co/t/how-to-get-all-suggest-from-an-array/239879)

<div class="topic-metadata">

**Author:** [@111362](https://discuss.elastic.co/u/111362)\
**Replies:** 0\
**Last updated:** [July 4, 2020, 9:11am UTC](https://discuss.elastic.co/t/how-to-get-all-suggest-from-an-array/239879 "2020-07-04T09:11:28Z")

</div>

For example this document { \_index: "documents", \_type: "\_doc", \_id: "bjQbFXMBUTNnZQiIspyw", \_score: 1, \_source: { text: "blablabla", tags: \[ "apple", "iphone", "iphonexr"…

---

## [Bootstrap checks failed & the default discovery settings are unsuitable for production use; at least one of \[discovery.seed\_hosts, discovery.seed\_providers, cluster.initial\_master\_nodes\] must be configured](https://discuss.elastic.co/t/bootstrap-checks-failed-the-default-discovery-settings-are-unsuitable-for-production-use-at-least-one-of-discovery-seed-hosts-discovery-seed-providers-cluster-initial-master-nodes-must-be-configured/239842)

<div class="topic-metadata">

**Author:** [@nkrshna](https://discuss.elastic.co/u/nkrshna)\
**Replies:** 2\
**Last updated:** [July 3, 2020, 7:01pm UTC](https://discuss.elastic.co/t/bootstrap-checks-failed-the-default-discovery-settings-are-unsuitable-for-production-use-at-least-one-of-discovery-seed-hosts-discovery-seed-providers-cluster-initial-master-nodes-must-be-configured/239842 "2020-07-03T19:01:03Z")

</div>

Hi I have my Elasticsearch up and running but when I'm trying to configure xpack security feature under basic license mode is see issue and elasticsearch service does not restart. Below is my elasticsearch.yml file. c…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=870)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=872)
