# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=928 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 929 --- ## [Search term with default field](https://discuss.elastic.co/t/search-term-with-default-field/231790)
**Author:** [@Attila816](https://discuss.elastic.co/u/Attila816)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 7:49pm UTC](https://discuss.elastic.co/t/search-term-with-default-field/231790 "2020-05-08T19:49:34Z")
Hi, I would like to set a default field for my index, so that when I would like to search for a term I don't need to specify the field in which I don't know how can I specify programmatically the "default field" to sear… --- ## [Copy fields from latest doc in Transforms](https://discuss.elastic.co/t/copy-fields-from-latest-doc-in-transforms/231784)
**Author:** [@xbeumala](https://discuss.elastic.co/u/xbeumala)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 7:04pm UTC](https://discuss.elastic.co/t/copy-fields-from-latest-doc-in-transforms/231784 "2020-05-08T19:04:37Z")
Hi all, I have an analytics system and for every user action I log an event. The event contains event specific but also session level data. I've created a transform to create a user centric entity. on the transform I w… --- ## [Transport client keeps disconnecting with general node connection failure](https://discuss.elastic.co/t/transport-client-keeps-disconnecting-with-general-node-connection-failure/231774)
**Author:** [@kayshu](https://discuss.elastic.co/u/kayshu)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 4:37pm UTC](https://discuss.elastic.co/t/transport-client-keeps-disconnecting-with-general-node-connection-failure/231774 "2020-05-08T16:37:49Z")
Hi, In my internal single node setup, It works fine but often I am seeing transport client getting disconnected from the ES Node with general node connection failure\]; nested: IllegalStateException\[handshake failed\]; n… --- ## ["Device or resource busy" when adding to keystore in Docker Compose](https://discuss.elastic.co/t/device-or-resource-busy-when-adding-to-keystore-in-docker-compose/228130)
**Author:** [@slhck](https://discuss.elastic.co/u/slhck)\ **Replies:** 2\ **Last updated:** [May 8, 2020, 6:21pm UTC](https://discuss.elastic.co/t/device-or-resource-busy-when-adding-to-keystore-in-docker-compose/228130 "2020-05-08T18:21:44Z")
I want to persist the elasticsearch.keystore file in a Docker Compose project. Obviously there is a Catch-22 in that I could mount an existing keystore file, but I don't have one yet if I start with a new setup. So fir… --- ## [Detect terms values occurring in different buckets](https://discuss.elastic.co/t/detect-terms-values-occurring-in-different-buckets/231779)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 6:12pm UTC](https://discuss.elastic.co/t/detect-terms-values-occurring-in-different-buckets/231779 "2020-05-08T18:12:14Z")
Hi, I need to solve the following problem. I have an index with some operations performed by users. I need to detect the users that performs two or more update operations on a same element (value) but only if those ope… --- ## [Elastic search SQL](https://discuss.elastic.co/t/elastic-search-sql/231748)
**Author:** [@Yash\_Jain1](https://discuss.elastic.co/u/Yash_Jain1)\ **Replies:** 1\ **Last updated:** [May 8, 2020, 4:38pm UTC](https://discuss.elastic.co/t/elastic-search-sql/231748 "2020-05-08T16:38:23Z")
Why elastic search is generating very large cursors . This is happening for me today only. --- ## [ES not starting : After restarting elasticsearch 7.6.2 throws CorruptIndexException](https://discuss.elastic.co/t/es-not-starting-after-restarting-elasticsearch-7-6-2-throws-corruptindexexception/231648)
**Author:** [@akELK081](https://discuss.elastic.co/u/akELK081)\ **Replies:** 5\ **Last updated:** [May 8, 2020, 4:17pm UTC](https://discuss.elastic.co/t/es-not-starting-after-restarting-elasticsearch-7-6-2-throws-corruptindexexception/231648 "2020-05-08T16:17:46Z")
I am unable to restart my elasticsearch 7.6.2 as I am getting below exception, Can someone help me out regarding this issue. ELK elasticsearch\[3805\]: OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was depre… --- ## [Tweaking MergePolicyConfig for usecases with lots of updates/deletes](https://discuss.elastic.co/t/tweaking-mergepolicyconfig-for-usecases-with-lots-of-updates-deletes/231771)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 4:08pm UTC](https://discuss.elastic.co/t/tweaking-mergepolicyconfig-for-usecases-with-lots-of-updates-deletes/231771 "2020-05-08T16:08:17Z")
We'd like to know how to go about tweaking MergePolicyConfig for ES7 https://www.javadoc.io/static/org.elasticsearch/elasticsearch/6.7.2/org/elasticsearch/index/MergePolicyConfig.html We've been noticing many segments … --- ## [Is it possible to get last text field value on a transform aggregation?](https://discuss.elastic.co/t/is-it-possible-to-get-last-text-field-value-on-a-transform-aggregation/231717)
**Author:** [@Xavier\_Marti\_Bofill](https://discuss.elastic.co/u/Xavier_Marti_Bofill)\ **Replies:** 2\ **Last updated:** [May 8, 2020, 4:05pm UTC](https://discuss.elastic.co/t/is-it-possible-to-get-last-text-field-value-on-a-transform-aggregation/231717 "2020-05-08T16:05:03Z")
Imagine we have an ecommerce, and an index with a document per every sale, with user and product fields. For each user I'd like to always know which is the last product they bought. How could we tackle that? --- ## [Query performance problems upgrading from ES 6.8.6. to ES 7.6.2, with exact term filtering + range](https://discuss.elastic.co/t/query-performance-problems-upgrading-from-es-6-8-6-to-es-7-6-2-with-exact-term-filtering-range/231767)
**Author:** [@jensljungblad](https://discuss.elastic.co/u/jensljungblad)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 3:57pm UTC](https://discuss.elastic.co/t/query-performance-problems-upgrading-from-es-6-8-6-to-es-7-6-2-with-exact-term-filtering-range/231767 "2020-05-08T15:57:47Z")
Hi! We are trying to upgrade our deployment from an Elastic Heroku-addon (Premium 3) to a new deployment on elastic.co, using the I/O optimized general purpose setup. Old cluster: 8GB RAM + 192GB storage \* 1 node \* 2 z… --- ## [Interval query hits wrongly](https://discuss.elastic.co/t/interval-query-hits-wrongly/231753)
**Author:** [@shrestha](https://discuss.elastic.co/u/shrestha)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 2:57pm UTC](https://discuss.elastic.co/t/interval-query-hits-wrongly/231753 "2020-05-08T14:57:25Z")
Here the query that I build: \> queryText = {"query": \> { \> "intervals": { \> searchFields: { \> "all\_of": { \> "ordered": "true", \> … --- ## [Elasticsearch - backup](https://discuss.elastic.co/t/elasticsearch-backup/231732)
**Author:** [@zil2020](https://discuss.elastic.co/u/zil2020)\ **Replies:** 1\ **Last updated:** [May 8, 2020, 2:27pm UTC](https://discuss.elastic.co/t/elasticsearch-backup/231732 "2020-05-08T14:27:49Z")
Elasticsearch 7.3.0 Hello everyone. How to backup elastic? Elasticdump? Is it possible to use elasticdump on the active elasticsearch service on production? Elasticsearch cluster? How to backup it? Maybe native snapsh… --- ## [ElasticSearch User Migrations](https://discuss.elastic.co/t/elasticsearch-user-migrations/231743)
**Author:** [@taseer94](https://discuss.elastic.co/u/taseer94)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 2:17pm UTC](https://discuss.elastic.co/t/elasticsearch-user-migrations/231743 "2020-05-08T14:17:57Z")
Hi all, I am migrating ElasticSearch cluster 7.2.0 to 7.6.2. The latter was deployed by ECK. Data and mapping don't really seem to have any conflicts. Now, there are two questions w.r.t users that I wanted to ask. Is … --- ## [Ks8 FailedValidation](https://discuss.elastic.co/t/ks8-failedvalidation/231734)
**Author:** [@111326](https://discuss.elastic.co/u/111326)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 1:31pm UTC](https://discuss.elastic.co/t/ks8-failedvalidation/231734 "2020-05-08T13:31:53Z")
elasticsearch:7.6.2 env: - name: discovery.type value: single-node Warning FailedValidation 27s kubelet, gke-ec-stage-default-pool-21b5ae97-k9cf-1 Error validating pod elasticsearch-0\_kube-sy… --- ## [Localhost ERR\_CONNECTION\_REFUSED](https://discuss.elastic.co/t/localhost-err-connection-refused/231729)
**Author:** [@Pepo](https://discuss.elastic.co/u/Pepo)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 1:04pm UTC](https://discuss.elastic.co/t/localhost-err-connection-refused/231729 "2020-05-08T13:04:38Z")
Hi. I'm completely new to elasticsearch. When i try to localhost:9200 on my browser i get a "connection refused" error. I'm posting some info, hoping they will be of any help. Thanks in advance. This is the service erro… --- ## [One search on different index VS nested object](https://discuss.elastic.co/t/one-search-on-different-index-vs-nested-object/231566)
**Author:** [@the\_fire\_fades](https://discuss.elastic.co/u/the_fire_fades)\ **Replies:** 3\ **Last updated:** [May 8, 2020, 12:53pm UTC](https://discuss.elastic.co/t/one-search-on-different-index-vs-nested-object/231566 "2020-05-08T12:53:49Z")
Hi everyone, I haves 2 index, customer and address. The customer can have many addresses, an addresse belong to one customer. In "customer" Index: { "\_id": 1, "firstname": "john", "lastname": "doe" } { "… --- ## [All Shards Failed Issue](https://discuss.elastic.co/t/all-shards-failed-issue/231702)
**Author:** [@prashanthkumar](https://discuss.elastic.co/u/prashanthkumar)\ **Replies:** 2\ **Last updated:** [May 8, 2020, 12:09pm UTC](https://discuss.elastic.co/t/all-shards-failed-issue/231702 "2020-05-08T12:09:19Z")
org.elasticsearch.xpack.monitoring.exporter.ExportException: \[.monitoring-es-7-2019.05.09\] IndexCreationException\[failed to create index \[.monitoring-es-7-2019.05.09\]\]; nested: ValidationException\[Validation Failed: 1: t… --- ## [Can transforms drop certain groups?](https://discuss.elastic.co/t/can-transforms-drop-certain-groups/231633)
**Author:** [@Xavier\_Marti\_Bofill](https://discuss.elastic.co/u/Xavier_Marti_Bofill)\ **Replies:** 2\ **Last updated:** [May 8, 2020, 12:07pm UTC](https://discuss.elastic.co/t/can-transforms-drop-certain-groups/231633 "2020-05-08T12:07:56Z")
Is it possible to instruct a transform to ignore certain groups based on some aggregation results? Say we have an ecommerce and we want to track the time-to-buy, grouped by session-id. We have records for first access a… --- ## [Elasticsearch UUID query returns multiple hits](https://discuss.elastic.co/t/elasticsearch-uuid-query-returns-multiple-hits/231700)
**Author:** [@rsustic](https://discuss.elastic.co/u/rsustic)\ **Replies:** 1\ **Last updated:** [May 8, 2020, 11:18am UTC](https://discuss.elastic.co/t/elasticsearch-uuid-query-returns-multiple-hits/231700 "2020-05-08T11:18:07Z")
Hi guys, I want to do some response tests on Elasticsearch by sending a log with the following structure: 2020-05-08T14:00:34,177+0300 | INFO | FRONB100139 | P2116 | \[main\] | ResponseTimeTest.App | This is a test messa… --- ## [Maximum debit for a single node Elasticsearch instance](https://discuss.elastic.co/t/maximum-debit-for-a-single-node-elasticsearch-instance/231590)
**Author:** [@rsustic](https://discuss.elastic.co/u/rsustic)\ **Replies:** 2\ **Last updated:** [May 8, 2020, 11:10am UTC](https://discuss.elastic.co/t/maximum-debit-for-a-single-node-elasticsearch-instance/231590 "2020-05-08T11:10:48Z")
Hello guys, I am running some tests on a single node Elasticsearch instance to check the CPU/MEM usage of the system. I have ELK 6.8.5 Docker containers installed on a CentOS 7.6 virtual machine and I am sending logs fr… --- ## [Active shards after closing indices](https://discuss.elastic.co/t/active-shards-after-closing-indices/231678)
**Author:** [@bartelastic](https://discuss.elastic.co/u/bartelastic)\ **Replies:** 5\ **Last updated:** [May 8, 2020, 10:44am UTC](https://discuss.elastic.co/t/active-shards-after-closing-indices/231678 "2020-05-08T10:44:26Z")
I see that after closing indices the shards are still reported as active (also see https://discuss.elastic.co/t/elasticsearch-7-x-closed-indices-retain-shards/187969 ) and that was done to implement replicated closed ind… --- ## [Issues while deploying Elastic Search from Azure Portal](https://discuss.elastic.co/t/issues-while-deploying-elastic-search-from-azure-portal/230700)
**Author:** [@Sushma](https://discuss.elastic.co/u/Sushma)\ **Replies:** 7\ **Last updated:** [May 8, 2020, 10:03am UTC](https://discuss.elastic.co/t/issues-while-deploying-elastic-search-from-azure-portal/230700 "2020-05-08T10:03:01Z")
Hi Team, I am trying to deploy Elastic Search(Self- Managed) from Azure portal. However the issue I am facing is not able to select the virtual network as seen below: The virtual network(SUB\_VNET\_29\_0) initially had… --- ## [Elastic's plain to support Lucene Load FST offHeap features](https://discuss.elastic.co/t/elastics-plain-to-support-lucene-load-fst-offheap-features/231679)
**Author:** [@hackerwin7](https://discuss.elastic.co/u/hackerwin7)\ **Replies:** 7\ **Last updated:** [May 8, 2020, 9:44am UTC](https://discuss.elastic.co/t/elastics-plain-to-support-lucene-load-fst-offheap-features/231679 "2020-05-08T09:44:33Z")
Related to this: https://issues.apache.org/jira/browse/LUCENE-8635 --- ## [CPU affinity when running multiple nodes on a single host](https://discuss.elastic.co/t/cpu-affinity-when-running-multiple-nodes-on-a-single-host/231611)
**Author:** [@lechuck](https://discuss.elastic.co/u/lechuck)\ **Replies:** 4\ **Last updated:** [May 8, 2020, 9:25am UTC](https://discuss.elastic.co/t/cpu-affinity-when-running-multiple-nodes-on-a-single-host/231611 "2020-05-08T09:25:40Z")
Hi folks, If running multiple Elasticsearch instances on a well resourced server (256GB RAM, 48 cores) , assuming the 'processors' count in elasticsearch.yml is set to a sensible value (max cores / number ES instances )… --- ## [Watcher webhook body How to build a json format?](https://discuss.elastic.co/t/watcher-webhook-body-how-to-build-a-json-format/231434)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 1\ **Last updated:** [May 8, 2020, 8:21am UTC](https://discuss.elastic.co/t/watcher-webhook-body-how-to-build-a-json-format/231434 "2020-05-08T08:21:28Z")
"actions": { "mywebhook": { "webhook": { "method": "POST", "url": "https://xxxxx, "headers": { "Content-Type": "application/json" }, "body": { … --- ## [Need to access DATA\_HISTOGRAM buckets response keys in child aggregation](https://discuss.elastic.co/t/need-to-access-data-histogram-buckets-response-keys-in-child-aggregation/231609)
**Author:** [@viralshah1494](https://discuss.elastic.co/u/viralshah1494)\ **Replies:** 0\ **Last updated:** [May 7, 2020, 6:45pm UTC](https://discuss.elastic.co/t/need-to-access-data-histogram-buckets-response-keys-in-child-aggregation/231609 "2020-05-07T18:45:52Z")
I want to apply some filters on the bucket response generated by the date\_histogram , that filter is dependent on the key of the date\_histogram output buckets. Suppose I have following data in { "entryTime":"", … --- ## [How take report ( pdf ) on Machine learning single metric view](https://discuss.elastic.co/t/how-take-report-pdf-on-machine-learning-single-metric-view/231663)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 5:59am UTC](https://discuss.elastic.co/t/how-take-report-pdf-on-machine-learning-single-metric-view/231663 "2020-05-08T05:59:06Z")
I would like to take reports on machine learning single metric view in pdf format . --- ## [IP forwarding for elastic search cluster](https://discuss.elastic.co/t/ip-forwarding-for-elastic-search-cluster/231605)
**Author:** [@Krish\_7](https://discuss.elastic.co/u/Krish_7)\ **Replies:** 3\ **Last updated:** [May 8, 2020, 5:26am UTC](https://discuss.elastic.co/t/ip-forwarding-for-elastic-search-cluster/231605 "2020-05-08T05:26:57Z")
Hi Elastic Team, I am new to Elastic search. Please help me to understand this . I have elastic search cluster with 3 master nodes and 5 data nodes also 3 logstash nodes . (Elastic search nodes are running in VM's an… --- ## [Finding the record for the maximum attempt](https://discuss.elastic.co/t/finding-the-record-for-the-maximum-attempt/231656)
**Author:** [@ankitshah692](https://discuss.elastic.co/u/ankitshah692)\ **Replies:** 2\ **Last updated:** [May 8, 2020, 5:03am UTC](https://discuss.elastic.co/t/finding-the-record-for-the-maximum-attempt/231656 "2020-05-08T05:03:17Z")
Hello Experts , I need some help to formulate a query. Below is my index and here is what i need to do "Find persons who has scoreTotal field matching to 300 from their latest attempt This means , if i were to search… --- ## [How to package a third party plugin into elasticsearch install package's plugin directory?](https://discuss.elastic.co/t/how-to-package-a-third-party-plugin-into-elasticsearch-install-packages-plugin-directory/231659)
**Author:** [@huangchaobing](https://discuss.elastic.co/u/huangchaobing)\ **Replies:** 0\ **Last updated:** [May 8, 2020, 4:44am UTC](https://discuss.elastic.co/t/how-to-package-a-third-party-plugin-into-elasticsearch-install-packages-plugin-directory/231659 "2020-05-08T04:44:51Z")
Now I download es 7.6 source code from github,I develop a third party plugin,then I execute command "gradlew -p distribution/archives/no-jdk-linux-tar assemble" to package ,but I find that plugin directory is empty,so I … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=927) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=929)