# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=889 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 890 --- ## [Implement cross\_field in simple\_query\_string](https://discuss.elastic.co/t/implement-cross-field-in-simple-query-string/237304)
**Author:** [@pilo](https://discuss.elastic.co/u/pilo)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 1:12pm UTC](https://discuss.elastic.co/t/implement-cross-field-in-simple-query-string/237304 "2020-06-16T13:12:39Z")
can we use cross\_fields mode in simple\_query\_string ? I just read this topic about stopword analyzer in simple\_query\_string : This topic give me two perfect solutions: one is using cross\_field mode with multi\_ma… --- ## [Fs snapshot permission issues inside a kubernetes cluster](https://discuss.elastic.co/t/fs-snapshot-permission-issues-inside-a-kubernetes-cluster/237147)
**Author:** [@Rajashree\_Sekar](https://discuss.elastic.co/u/Rajashree_Sekar)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 1:06pm UTC](https://discuss.elastic.co/t/fs-snapshot-permission-issues-inside-a-kubernetes-cluster/237147 "2020-06-16T13:06:37Z")
Hi Team, I'm trying to take snapshot of elasticsearch which is deployed inside a kubernetes cluster. I'm trying to take backup on file system whereas Im getting below error. I understand that the default user will be … --- ## [Can't run race, Cannot find /root/.rally/benchmarks/data/geonames/documents-2.json.bz2](https://discuss.elastic.co/t/cant-run-race-cannot-find-root-rally-benchmarks-data-geonames-documents-2-json-bz2/236846)
**Author:** [@huasheng\_zeng](https://discuss.elastic.co/u/huasheng_zeng)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 11:59am UTC](https://discuss.elastic.co/t/cant-run-race-cannot-find-root-rally-benchmarks-data-geonames-documents-2-json-bz2/236846 "2020-06-16T11:59:26Z")
I can't run race, It says Cannot race. Error in track preparator (('Cannot find /root/.rally/benchmarks/data/geonames/documents-2.json.bz2. I'm sure my data file is exist. my operation and shell output is below \[r… --- ## [Need help to simple sort aggregation by other field](https://discuss.elastic.co/t/need-help-to-simple-sort-aggregation-by-other-field/237287)
**Author:** [@Uli\_Kasper](https://discuss.elastic.co/u/Uli_Kasper)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 11:51am UTC](https://discuss.elastic.co/t/need-help-to-simple-sort-aggregation-by-other-field/237287 "2020-06-16T11:51:40Z")
Hi, my documents in the index have fields named "filter\_color" and "filter\_color\_value". "filter\_color" is an interger mapped field containing a number from 10 to 160. "filter\_color\_value" is a string field which cont… --- ## [Unable to pull from docker registry due to authentication error ... again](https://discuss.elastic.co/t/unable-to-pull-from-docker-registry-due-to-authentication-error-again/236936)
**Author:** [@Ionut\_Calin](https://discuss.elastic.co/u/Ionut_Calin)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 11:24am UTC](https://discuss.elastic.co/t/unable-to-pull-from-docker-registry-due-to-authentication-error-again/236936 "2020-06-16T11:24:19Z")
Hello it seems that this problem is somehow recurrent. Now it appears again: docker pull docker.elastic.co/elasticsearch/elasticsearch-oss:6.7.1 Error response from daemon: Get https://docker.elastic.co/v2/: authentica… --- ## [Nested data type limit](https://discuss.elastic.co/t/nested-data-type-limit/237239)
**Author:** [@divya005](https://discuss.elastic.co/u/divya005)\ **Replies:** 5\ **Last updated:** [June 16, 2020, 10:02am UTC](https://discuss.elastic.co/t/nested-data-type-limit/237239 "2020-06-16T10:02:45Z")
Hello team, I have more than 100 nested items in my project and while fetching i need to get only 10 based on grouping.Can you please help me how to get this. --- ## [Searching term with it's position range](https://discuss.elastic.co/t/searching-term-with-its-position-range/236984)
**Author:** [@Kazuki\_Matsuda](https://discuss.elastic.co/u/Kazuki_Matsuda)\ **Replies:** 3\ **Last updated:** [June 16, 2020, 9:26am UTC](https://discuss.elastic.co/t/searching-term-with-its-position-range/236984 "2020-06-16T09:26:44Z")
Hello, I have a following three document 1. \`{field: "one two three"}\` 2. \`{field: "x one two three"}\` 3. \`{field: "x y one two three"}\` Question: Can I query term tow with it's position range? Example: {match: "two",… --- ## [Elasticsearch performance issues after upgrade from 5.6 to 6.8](https://discuss.elastic.co/t/elasticsearch-performance-issues-after-upgrade-from-5-6-to-6-8/237264)
**Author:** [@ahronl](https://discuss.elastic.co/u/ahronl)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 9:13am UTC](https://discuss.elastic.co/t/elasticsearch-performance-issues-after-upgrade-from-5-6-to-6-8/237264 "2020-06-16T09:13:24Z")
Hi, we upgraded our server from elasticsearch 5.6 to 6.8.6 and experience performance issues,, high cpu usage and frequent full GC. the cluster is 10 data nodes with 300~ shards, we have a daily index shards size very … --- ## [Are time-based index faster than rollover-indices - if the time is known?](https://discuss.elastic.co/t/are-time-based-index-faster-than-rollover-indices-if-the-time-is-known/234883)
**Author:** [@G-K-Patel](https://discuss.elastic.co/u/G-K-Patel)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 9:09am UTC](https://discuss.elastic.co/t/are-time-based-index-faster-than-rollover-indices-if-the-time-is-known/234883 "2020-06-16T09:09:30Z")
Hi All, We know there are two types mechanism to create multiple indices, if the size of data is too large for one index. Namely, 1) time-based: where time is used in the suffix-of the index name, e.g. MyIndex-2019, MyI… --- ## [Elasticsearch on Kubernetes losing Cluster Connection every hour](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-losing-cluster-connection-every-hour/237086)
**Author:** [@fewagewasd](https://discuss.elastic.co/u/fewagewasd)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 8:23am UTC](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-losing-cluster-connection-every-hour/237086 "2020-06-16T08:23:47Z")
Hi, I am migrating an older application using elasticsearch 2.4 (I know that's a very old version, but I'm not able to upgrade at this point) to Kubernetes. I set it up using a StatefulSet and a headless service, which … --- ## [ElasticSearch cluster unreachable every night between 00.00 and 02.00](https://discuss.elastic.co/t/elasticsearch-cluster-unreachable-every-night-between-00-00-and-02-00/237249)
**Author:** [@Zeroc0pter](https://discuss.elastic.co/u/Zeroc0pter)\ **Replies:** 4\ **Last updated:** [June 16, 2020, 8:15am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-unreachable-every-night-between-00-00-and-02-00/237249 "2020-06-16T08:15:36Z")
Hi fellows, I have a question regarding the 'possible' scheduled jobs of ElasticSeach. We monitor the application with cURL and run it every 30 seconds to inspect the HTTPS response. Somehow, we receive an unavailable e… --- ## [Transforms weird situation](https://discuss.elastic.co/t/transforms-weird-situation/237224)
**Author:** [@fadjar340](https://discuss.elastic.co/u/fadjar340)\ **Replies:** 5\ **Last updated:** [June 16, 2020, 8:03am UTC](https://discuss.elastic.co/t/transforms-weird-situation/237224 "2020-06-16T08:03:20Z")
Hi experts, I have several transforms for pivot, this is the situation that make me confused: The transform works as expected The Documents Processes and documents indexed increased as expected with around 500 documen… --- ## [Numeric metrics aggregation on Nested key-value set](https://discuss.elastic.co/t/numeric-metrics-aggregation-on-nested-key-value-set/237096)
**Author:** [@Yonatan\_Omer](https://discuss.elastic.co/u/Yonatan_Omer)\ **Replies:** 4\ **Last updated:** [June 16, 2020, 7:54am UTC](https://discuss.elastic.co/t/numeric-metrics-aggregation-on-nested-key-value-set/237096 "2020-06-16T07:54:08Z")
Hi Our index contains docs with a nested set of key-values, we would need to perform metric aggregation per key. So we for example, we would need the average cpuTime per taskId for such docs: { "tasks" : \[ … --- ## [How to pass multiple terms as a param in script scoring](https://discuss.elastic.co/t/how-to-pass-multiple-terms-as-a-param-in-script-scoring/237240)
**Author:** [@Dahea\_Moon](https://discuss.elastic.co/u/Dahea_Moon)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 7:34am UTC](https://discuss.elastic.co/t/how-to-pass-multiple-terms-as-a-param-in-script-scoring/237240 "2020-06-16T07:34:31Z")
I'm making custom score script plugin for scoring based on payload value. I've done with scoring logic, but it's working properly when it receives only one term. I want to receive several analyzed terms in query. How c… --- ## [I have a question about Elastic Search](https://discuss.elastic.co/t/i-have-a-question-about-elastic-search/237216)
**Author:** [@111349](https://discuss.elastic.co/u/111349)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 7:24am UTC](https://discuss.elastic.co/t/i-have-a-question-about-elastic-search/237216 "2020-06-16T07:24:59Z")
I've used the search api provided by Elastic, I have a question while searching and leave a question. Why can't I search for "=" or "+" ... etc when searching in Elastic? If I search for "+abc=", only abc is highlighte… --- ## [Duration of several events](https://discuss.elastic.co/t/duration-of-several-events/237168)
**Author:** [@artobstrel](https://discuss.elastic.co/u/artobstrel)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 7:05am UTC](https://discuss.elastic.co/t/duration-of-several-events/237168 "2020-06-16T07:05:03Z")
After Logstash I have the following data in Elastic: EVENTTIME OPERATION MSGID 20-06-20 05:09:46 Input 889780ef 20-06-20 05:09:47 Casche 889780ef 20-06-20 05:09:48 Transform 889780ef 20-06-20 05:09:51 Outp… --- ## [Message field not available while creating visualization](https://discuss.elastic.co/t/message-field-not-available-while-creating-visualization/237226)
**Author:** [@Mohan\_vel](https://discuss.elastic.co/u/Mohan_vel)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 6:28am UTC](https://discuss.elastic.co/t/message-field-not-available-while-creating-visualization/237226 "2020-06-16T06:28:21Z")
Hi All, Here i am using filebeat to ship all my java application logger file data to elasticsearch using ECS-Logging method for java application. ecs-logging-java: https://github.com/elastic/ecs-logging-java It's worki… --- ## [IOException : Connection reset by peer](https://discuss.elastic.co/t/ioexception-connection-reset-by-peer/237227)
**Author:** [@Bhushan\_Kakulte](https://discuss.elastic.co/u/Bhushan_Kakulte)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 6:44am UTC](https://discuss.elastic.co/t/ioexception-connection-reset-by-peer/237227 "2020-06-16T06:44:35Z")
Hi Guy, I am getting IOException (Connection reset by peer) intermittently while doing search and index query using highEndClient. We didn't figure out any issue at server side. I also tried to tweak with keepAliveTimin… --- ## [Unable to install elastic search-7.6.0 in m6g.4xl instance which contains amazon linux](https://discuss.elastic.co/t/unable-to-install-elastic-search-7-6-0-in-m6g-4xl-instance-which-contains-amazon-linux/237228)
**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 6:48am UTC](https://discuss.elastic.co/t/unable-to-install-elastic-search-7-6-0-in-m6g-4xl-instance-which-contains-amazon-linux/237228 "2020-06-16T06:48:43Z")
Hi, I am unable to found an rpm package for elastic search 7.6.0 to amazon Linux(m6g.4xl instance). When I tried to install another package it shows Error: package elasticsearch-0:7.6.0-1.x86\_64 is intended for a differ… --- ## [Shard unassigned](https://discuss.elastic.co/t/shard-unassigned/237154)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 6:42am UTC](https://discuss.elastic.co/t/shard-unassigned/237154 "2020-06-16T06:42:52Z")
Hi all, My elasticsearch cluster health is red. in order to find reason following command has been ran: \`GET \_cluster/allocation/explain { "index" : "mytweetindex", "shard" : 1, "primary" : true,… --- ## [Could not find or load main class Reddy](https://discuss.elastic.co/t/could-not-find-or-load-main-class-reddy/237212)
**Author:** [@ravinder](https://discuss.elastic.co/u/ravinder)\ **Replies:** 4\ **Last updated:** [June 16, 2020, 5:36am UTC](https://discuss.elastic.co/t/could-not-find-or-load-main-class-reddy/237212 "2020-06-16T05:36:05Z")
Hi Team, I tried to elasticsearch and I see below exception. have tried to uninstall elasticsearch and tried again, retried installing java. but still, see the same error I am stuck and couldn't move even an inch, you… --- ## [Ignore\_above setting is not respected](https://discuss.elastic.co/t/ignore-above-setting-is-not-respected/237218)
**Author:** [@Rakesh\_B](https://discuss.elastic.co/u/Rakesh_B)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 5:21am UTC](https://discuss.elastic.co/t/ignore-above-setting-is-not-respected/237218 "2020-06-16T05:21:54Z")
Hi, Setup: Elasticsearch version 7.6.1 We are trying to limit the character length of the field message to 20 but the setting ignore\_above is not respected. I'm following the documentation here - https://www.elastic.c… --- ## [Elasticsearch.service: main process exited, code=exited, status=1/FAILURE](https://discuss.elastic.co/t/elasticsearch-service-main-process-exited-code-exited-status-1-failure/237215)
**Author:** [@bhargav7](https://discuss.elastic.co/u/bhargav7)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 4:54am UTC](https://discuss.elastic.co/t/elasticsearch-service-main-process-exited-code-exited-status-1-failure/237215 "2020-06-16T04:54:31Z")
Kindly help me to relove the issuse, update ELK from 7.5.2 to 7.7.7 after updating facing below error. root@hydelkapp /\]# rpm -Uvh --force elasticsearch-7.7.1-x86\_64.rpm Preparing... #########… --- ## [Suggest search](https://discuss.elastic.co/t/suggest-search/237214)
**Author:** [@guruprasadkk](https://discuss.elastic.co/u/guruprasadkk)\ **Replies:** 0\ **Last updated:** [June 16, 2020, 4:53am UTC](https://discuss.elastic.co/t/suggest-search/237214 "2020-06-16T04:53:46Z")
We are using suggest search to do typeahead search. Is there any way to set the "from" so that we receive the results from given offset, just like we set "from" and "size" in normal queries? --- ## [How to sort by different fields in different indices](https://discuss.elastic.co/t/how-to-sort-by-different-fields-in-different-indices/237065)
**Author:** [@Muna](https://discuss.elastic.co/u/Muna)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 4:40am UTC](https://discuss.elastic.co/t/how-to-sort-by-different-fields-in-different-indices/237065 "2020-06-16T04:40:32Z")
Hi, below is my query . here i want to sort the 'abc\_class' by it's "classId" and also a different sort for another Index. please advise is there any approach to achieve this. --- ## [Share \[1000/1000\] elasticsearch one node](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192)
**Author:** [@nurhambali](https://discuss.elastic.co/u/nurhambali)\ **Replies:** 13\ **Last updated:** [June 16, 2020, 4:34am UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192 "2020-06-16T04:34:25Z")
hi, I am running elasticsearch with one node and currently sahre on the elasticserach 1000/1000 is this what causes elasticserach not to be able to create indexes? is there an idea for the problem that I experienced t… --- ## [How to reduce segment file number in Elasticsearch?](https://discuss.elastic.co/t/how-to-reduce-segment-file-number-in-elasticsearch/237128)
**Author:** [@fageiguanbing](https://discuss.elastic.co/u/fageiguanbing)\ **Replies:** 5\ **Last updated:** [June 16, 2020, 3:32am UTC](https://discuss.elastic.co/t/how-to-reduce-segment-file-number-in-elasticsearch/237128 "2020-06-16T03:32:04Z")
I want to reduce segments file number. There are too many little segment files in a shard. My settings are over here: { "merge": { "scheduler": { "max\_thread\_count": "1", "max\_merge\_c… --- ## [Get only selected fields in Anomaly detection jobs API](https://discuss.elastic.co/t/get-only-selected-fields-in-anomaly-detection-jobs-api/237200)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 1:59am UTC](https://discuss.elastic.co/t/get-only-selected-fields-in-anomaly-detection-jobs-api/237200 "2020-06-16T01:59:43Z")
Hi, I want to retrieve only the value of "job\_id" when I make this query GET \_ml/anomaly\_detectors/ It is posible to use something like "\_source " in the \_search queries to only retrieve the "job\_id"? --- ## [X-pack / shield](https://discuss.elastic.co/t/x-pack-shield/237191)
**Author:** [@Jerry\_Hoffmeister](https://discuss.elastic.co/u/Jerry_Hoffmeister)\ **Replies:** 6\ **Last updated:** [June 15, 2020, 11:55pm UTC](https://discuss.elastic.co/t/x-pack-shield/237191 "2020-06-15T23:55:04Z")
Hi, Where can I see clearly which parts of x-pack are free and which require a subscription? We have a subscription but are spinning up a new dev effort and are trying to figure out what we can do at least for now with… --- ## [How to use a logstash pipeline filter in a transform elastic](https://discuss.elastic.co/t/how-to-use-a-logstash-pipeline-filter-in-a-transform-elastic/237194)
**Author:** [@ramiriskis](https://discuss.elastic.co/u/ramiriskis)\ **Replies:** 1\ **Last updated:** [June 15, 2020, 11:42pm UTC](https://discuss.elastic.co/t/how-to-use-a-logstash-pipeline-filter-in-a-transform-elastic/237194 "2020-06-15T23:42:21Z")
Hi, I have a logstash pipeline script of the form input-filter-output. The filter part is a long and convoluted grok expression. This worked great for me before, but now that we have moved to the managed elastic cloud, I… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=888) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=890)