# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=954 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 955 --- ## [Function\_score multi field filters together](https://discuss.elastic.co/t/function-score-multi-field-filters-together/228250)
**Author:** [@Mahdi\_Bahari](https://discuss.elastic.co/u/Mahdi_Bahari)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 5:52am UTC](https://discuss.elastic.co/t/function-score-multi-field-filters-together/228250 "2020-04-16T05:52:33Z")
this is sample collection that's I want to sort result per custom score in elastic search in so try to read documents so founded function score do it for me https://www.elastic.co/guide/en/elasticsearch/reference/curren… --- ## [Increasing 'index.mapping.nested\_objects.limit' setting's value has no effect](https://discuss.elastic.co/t/increasing-index-mapping-nested-objects-limit-settings-value-has-no-effect/228242)
**Author:** [@elastic2](https://discuss.elastic.co/u/elastic2)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 5:00am UTC](https://discuss.elastic.co/t/increasing-index-mapping-nested-objects-limit-settings-value-has-no-effect/228242 "2020-04-16T05:00:51Z")
Hello, I am facing an issue, where i get the exception: { "type": "mapper\_parsing\_exception", "reason": "The number of nested documents has exceeded the allowed limit of \[10000\]. This li… --- ## [Thread Pool Configuration - Max thread\_pool.size?](https://discuss.elastic.co/t/thread-pool-configuration-max-thread-pool-size/228089)
**Author:** [@Vipul\_Sharma](https://discuss.elastic.co/u/Vipul_Sharma)\ **Replies:** 10\ **Last updated:** [April 16, 2020, 4:32am UTC](https://discuss.elastic.co/t/thread-pool-configuration-max-thread-pool-size/228089 "2020-04-16T04:32:52Z")
Hi All, Kindly help me with my query What could be the best possible configuration for a data-node running on a server having configuration lscpu output\> Architecture: x86\_64 CPU op-mode(s): 32-bit,… --- ## [Benefit of increase number of data node in searching performance?](https://discuss.elastic.co/t/benefit-of-increase-number-of-data-node-in-searching-performance/227872)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 5\ **Last updated:** [April 16, 2020, 4:01am UTC](https://discuss.elastic.co/t/benefit-of-increase-number-of-data-node-in-searching-performance/227872 "2020-04-16T04:01:21Z")
Hi all Currently in my cluster, i have 3 data node in total, the query performance is fine but i really wanted it to be better, so other than doing all the thing that some blog say i should on the internet, i was just w… --- ## [Cluster RED unassigned shards CLUSTER\_RECOVERED](https://discuss.elastic.co/t/cluster-red-unassigned-shards-cluster-recovered/228229)
**Author:** [@Harikrishna\_Sarvaiya](https://discuss.elastic.co/u/Harikrishna_Sarvaiya)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 1:44am UTC](https://discuss.elastic.co/t/cluster-red-unassigned-shards-cluster-recovered/228229 "2020-04-16T01:44:01Z")
Hi, My cluster status is showing in RED status. Many of my indices shown in RED status. I quried explain api and it results as below: { "index" : "abc-2019.04.24", "shard" : 2, "primary" : true, "current\_state" … --- ## [Block-max WAND for FunctionScoreQuery & CollapseTopDocsCollector](https://discuss.elastic.co/t/block-max-wand-for-functionscorequery-collapsetopdocscollector/228232)
**Author:** [@unix1986](https://discuss.elastic.co/u/unix1986)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 2:22am UTC](https://discuss.elastic.co/t/block-max-wand-for-functionscorequery-collapsetopdocscollector/228232 "2020-04-16T02:22:09Z")
The block-max WAND algorithm in lucene，can it be applied to FunctionScoreQuery and CollapseTopDocsCollector？I think it can't，but i am not sure. I have not found the relevant implement in elasticsearch. --- ## [How to get the total number of records that do not match a regex?](https://discuss.elastic.co/t/how-to-get-the-total-number-of-records-that-do-not-match-a-regex/228230)
**Author:** [@Guerreiro\_Sousa](https://discuss.elastic.co/u/Guerreiro_Sousa)\ **Replies:** 0\ **Last updated:** [April 16, 2020, 2:17am UTC](https://discuss.elastic.co/t/how-to-get-the-total-number-of-records-that-do-not-match-a-regex/228230 "2020-04-16T02:17:53Z")
How to get the total number of records that do not match a regex? I'm doing this search: { "query": { "bool": { "must\_not": \[ { "regexp": { "clientip": { "value": "((25\[0-5\]|2\[0-4\]\[0-9\]|\[01\]?… --- ## [.NET Client max\_children in nested sorting](https://discuss.elastic.co/t/net-client-max-children-in-nested-sorting/228126)
**Author:** [@Kurmann](https://discuss.elastic.co/u/Kurmann)\ **Replies:** 1\ **Last updated:** [April 16, 2020, 12:50am UTC](https://discuss.elastic.co/t/net-client-max-children-in-nested-sorting/228126 "2020-04-16T00:50:06Z")
Hi. I need to set the property max\_children in a nested sort im .NET client. This question was already answered for version 6.x here: Closed Discussion and here: Stack Overflow, but I didn't found it for Version 7.x T… --- ## [Using nested values in script\_score](https://discuss.elastic.co/t/using-nested-values-in-script-score/228205)
**Author:** [@SeverinDK](https://discuss.elastic.co/u/SeverinDK)\ **Replies:** 0\ **Last updated:** [April 15, 2020, 8:58pm UTC](https://discuss.elastic.co/t/using-nested-values-in-script-score/228205 "2020-04-15T20:58:10Z")
Hi. I am attempting to use nested values in a script score, but I am having issues making it work, because I am unable to iterate over the field by accessing it through doc. Also, when I try to query it in Kibana like \_t… --- ## [Circuit breaker with permanent durability](https://discuss.elastic.co/t/circuit-breaker-with-permanent-durability/228193)
**Author:** [@Jonathan\_Mendenhall](https://discuss.elastic.co/u/Jonathan_Mendenhall)\ **Replies:** 2\ **Last updated:** [April 15, 2020, 9:06pm UTC](https://discuss.elastic.co/t/circuit-breaker-with-permanent-durability/228193 "2020-04-15T21:06:40Z")
In our Es 7.5 cluster, a large query I ran tripped some circuit breakers on the data nodes. { "took": 8097, "responses": \[{ "error": { "root\_cause": \[{ "type": "array\_in… --- ## [Failed ML tests when running the gradle check task against unchanged repo code](https://discuss.elastic.co/t/failed-ml-tests-when-running-the-gradle-check-task-against-unchanged-repo-code/227829)
**Author:** [@CactoT](https://discuss.elastic.co/u/CactoT)\ **Replies:** 4\ **Last updated:** [April 15, 2020, 6:38pm UTC](https://discuss.elastic.co/t/failed-ml-tests-when-running-the-gradle-check-task-against-unchanged-repo-code/227829 "2020-04-15T18:38:48Z")
Hi, I'm setting up a develoment environment to contribute to the elasticsearch project. I'm currently trying to run the complete test suite to ensure everything is ok before grabbing an issue to work on. I'm getting a c… --- ## [Create Certs fails following docker tls tutorial](https://discuss.elastic.co/t/create-certs-fails-following-docker-tls-tutorial/226012)
**Author:** [@Matthew\_Field](https://discuss.elastic.co/u/Matthew_Field)\ **Replies:** 2\ **Last updated:** [April 15, 2020, 5:57pm UTC](https://discuss.elastic.co/t/create-certs-fails-following-docker-tls-tutorial/226012 "2020-04-15T17:57:21Z")
I am following the tutorial to install docker. https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-tls-docker.html When i run docker-compose -f create-certs.yml run --rm create\_certs I get the … --- ## [Split json data based on timestamp](https://discuss.elastic.co/t/split-json-data-based-on-timestamp/228175)
**Author:** [@giridharan78](https://discuss.elastic.co/u/giridharan78)\ **Replies:** 0\ **Last updated:** [April 15, 2020, 5:11pm UTC](https://discuss.elastic.co/t/split-json-data-based-on-timestamp/228175 "2020-04-15T17:11:16Z")
Below is my json data which need to be split based on the time. Please guide me on creating a filter for below data so that date is picked from the response rather than @timestamp. { "2020-04-15T14:37:23.689Z": { … --- ## [Best way to learn Elasticsearch internal](https://discuss.elastic.co/t/best-way-to-learn-elasticsearch-internal/227748)
**Author:** [@amitkg](https://discuss.elastic.co/u/amitkg)\ **Replies:** 8\ **Last updated:** [April 15, 2020, 5:07pm UTC](https://discuss.elastic.co/t/best-way-to-learn-elasticsearch-internal/227748 "2020-04-15T17:07:47Z")
Hi, I am new to Elasticsearch and fond of this system. I would like to learn more about internal design and motivation behind such design. I did follow some of youtube videos or blogs which covers the bottom up design.… --- ## [Aggregation on multiple fields with millions of buckets](https://discuss.elastic.co/t/aggregation-on-multiple-fields-with-millions-of-buckets/227502)
**Author:** [@Manish\_Kukreja](https://discuss.elastic.co/u/Manish_Kukreja)\ **Replies:** 5\ **Last updated:** [April 15, 2020, 5:03pm UTC](https://discuss.elastic.co/t/aggregation-on-multiple-fields-with-millions-of-buckets/227502 "2020-04-15T17:03:10Z")
Hi I have a requirement where in i need to aggregate over multiple fields which can result in millions of buckets. We have data with millions of records, and here i need to get average number of records for each unique… --- ## [Running elasticsearch on mac gives could not find java error](https://discuss.elastic.co/t/running-elasticsearch-on-mac-gives-could-not-find-java-error/228170)
**Author:** [@chari](https://discuss.elastic.co/u/chari)\ **Replies:** 0\ **Last updated:** [April 15, 2020, 4:41pm UTC](https://discuss.elastic.co/t/running-elasticsearch-on-mac-gives-could-not-find-java-error/228170 "2020-04-15T16:41:45Z")
I have been using elasticsearch 7.3.0 on a mac for about a year now. I did a fresh download of the 7.6.2 version from this link https://www.elastic.co/guide/en/elasticsearch/reference/current/targz.html When I try to … --- ## [Deleted document count very high compared to the actual count of documents in the index](https://discuss.elastic.co/t/deleted-document-count-very-high-compared-to-the-actual-count-of-documents-in-the-index/224648)
**Author:** [@mohankumarb](https://discuss.elastic.co/u/mohankumarb)\ **Replies:** 13\ **Last updated:** [April 15, 2020, 4:21pm UTC](https://discuss.elastic.co/t/deleted-document-count-very-high-compared-to-the-actual-count-of-documents-in-the-index/224648 "2020-04-15T16:21:03Z")
ES version: 7.5 Number of shards: 5 Number of replicas: 4 We have a use case, where we have a lot of updates happening to the document (location updates). So every update is deleting and creating a new document in th… --- ## ["Only value lists are allowed in serialized settings" error when creating new analyzer](https://discuss.elastic.co/t/only-value-lists-are-allowed-in-serialized-settings-error-when-creating-new-analyzer/228109)
**Author:** [@Aziz\_Holden](https://discuss.elastic.co/u/Aziz_Holden)\ **Replies:** 1\ **Last updated:** [April 15, 2020, 4:19pm UTC](https://discuss.elastic.co/t/only-value-lists-are-allowed-in-serialized-settings-error-when-creating-new-analyzer/228109 "2020-04-15T16:19:03Z")
I'm trying to create a custom analyzer that does the following: if a token length is greater than 14, include the token itself as well as the truncated token: PUT localhost:9200/assets/ { "settings": { … --- ## [ELK Delete Indices](https://discuss.elastic.co/t/elk-delete-indices/228144)
**Author:** [@Anand\_Sakthivel](https://discuss.elastic.co/u/Anand_Sakthivel)\ **Replies:** 4\ **Last updated:** [April 15, 2020, 3:42pm UTC](https://discuss.elastic.co/t/elk-delete-indices/228144 "2020-04-15T15:42:12Z")
Hi, I'm new to ELK stack. Our server is running out of disk space and we have a cronjob running to delete the indices. 1 1 \* \* \* /usr/local/bin/curator /root/.curator/action\_remove\_old\_logs.yml But what is occupying m… --- ## [10000+ results in aggregation](https://discuss.elastic.co/t/10000-results-in-aggregation/228154)
**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Replies:** 0\ **Last updated:** [April 15, 2020, 3:20pm UTC](https://discuss.elastic.co/t/10000-results-in-aggregation/228154 "2020-04-15T15:20:05Z")
Hi All, I am using a watcher to send data to an API, this works fine but my aggregation returns more than 10K buckets. Advised is to use composite aggregations but is that possible in an watcher? How do you paginate / l… --- ## [Performance of OR filter](https://discuss.elastic.co/t/performance-of-or-filter/228149)
**Author:** [@DreamStack](https://discuss.elastic.co/u/DreamStack)\ **Replies:** 0\ **Last updated:** [April 15, 2020, 3:03pm UTC](https://discuss.elastic.co/t/performance-of-or-filter/228149 "2020-04-15T15:03:00Z")
Hello, I'm having some issue with a part of my query leading to bad performance (about a 2-3x difference). Maybe someone can suggest an improvement. I already tried converting them over to a bool/match query, but seems … --- ## [How to delete the docs which are older than 5 hours from an index using curator and the index must remain](https://discuss.elastic.co/t/how-to-delete-the-docs-which-are-older-than-5-hours-from-an-index-using-curator-and-the-index-must-remain/228120)
**Author:** [@Dragon9](https://discuss.elastic.co/u/Dragon9)\ **Replies:** 7\ **Last updated:** [April 15, 2020, 1:58pm UTC](https://discuss.elastic.co/t/how-to-delete-the-docs-which-are-older-than-5-hours-from-an-index-using-curator-and-the-index-must-remain/228120 "2020-04-15T13:58:38Z")
i want remaining docs should be stay rather than old docs in a index --- ## [Upgrade elasticsearch opensource for basic](https://discuss.elastic.co/t/upgrade-elasticsearch-opensource-for-basic/228013)
**Author:** [@George\_Oliveira](https://discuss.elastic.co/u/George_Oliveira)\ **Replies:** 7\ **Last updated:** [April 15, 2020, 1:55pm UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-opensource-for-basic/228013 "2020-04-15T13:55:22Z")
I have an opensource elasticseach environment, I want to upgrade to the basic version, only by uninstalling opensource and installing basic does the cluster work stable ? --- ## [Hot Cold architecture question?](https://discuss.elastic.co/t/hot-cold-architecture-question/225811)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 6\ **Last updated:** [April 15, 2020, 1:42pm UTC](https://discuss.elastic.co/t/hot-cold-architecture-question/225811 "2020-04-15T13:42:07Z")
Dear all I have a question about hot warm cold architecture. So basically i want to skip the warm node and just have the hot and the cold node only, is it possible, and also i hear from a friend that cold node has bet… --- ## [Basic Authentication in ES](https://discuss.elastic.co/t/basic-authentication-in-es/228119)
**Author:** [@Shubham](https://discuss.elastic.co/u/Shubham)\ **Replies:** 1\ **Last updated:** [April 15, 2020, 12:51pm UTC](https://discuss.elastic.co/t/basic-authentication-in-es/228119 "2020-04-15T12:51:58Z")
Is there any way around to implement basic authentication with username and password that will be used while calling ES endpoint? I can't use x-pack feature as I am not using licensed version and using 5.3 version of ES… --- ## [Number of results per shard](https://discuss.elastic.co/t/number-of-results-per-shard/227339)
**Author:** [@mredaelli](https://discuss.elastic.co/u/mredaelli)\ **Replies:** 4\ **Last updated:** [April 15, 2020, 12:45pm UTC](https://discuss.elastic.co/t/number-of-results-per-shard/227339 "2020-04-15T12:45:08Z")
We have a basic ES instance, and I'm considering an index that has only one primary shard and one replica shard. Doing a basic bool query, hits.total turns out to depend on which shard we hit. I get consistently differe… --- ## [Why does the HTTP authentication with Elasticsearch fail in Rust?](https://discuss.elastic.co/t/why-does-the-http-authentication-with-elasticsearch-fail-in-rust/228033)
**Author:** [@vikasmastud](https://discuss.elastic.co/u/vikasmastud)\ **Replies:** 2\ **Last updated:** [April 15, 2020, 12:36pm UTC](https://discuss.elastic.co/t/why-does-the-http-authentication-with-elasticsearch-fail-in-rust/228033 "2020-04-15T12:36:44Z")
When I use let client = Elasticsearch::default() , it works fine. But when I try to add credentials for the client: #\[macro\_use\] extern crate serde\_json; use elasticsearch::{ auth::Credentials, http::transport:… --- ## [Path.data and path.repo difference](https://discuss.elastic.co/t/path-data-and-path-repo-difference/228106)
**Author:** [@Shubham](https://discuss.elastic.co/u/Shubham)\ **Replies:** 4\ **Last updated:** [April 15, 2020, 12:28pm UTC](https://discuss.elastic.co/t/path-data-and-path-repo-difference/228106 "2020-04-15T12:28:43Z")
I am trying to take backup of ES indices in my two nodes cluster. Getting error like : the store \[/user/home/esbackup\] is not shared between this node \[data node\] and the master node or that permissions on the store don'… --- ## [How to use GROUP\_CONCAT in elastic JAVA API](https://discuss.elastic.co/t/how-to-use-group-concat-in-elastic-java-api/228118)
**Author:** [@Srinivas\_Madhyanapu](https://discuss.elastic.co/u/Srinivas_Madhyanapu)\ **Replies:** 0\ **Last updated:** [April 15, 2020, 12:27pm UTC](https://discuss.elastic.co/t/how-to-use-group-concat-in-elastic-java-api/228118 "2020-04-15T12:27:32Z")
hi, I am trying to use GROUP\_CONCAT on a field in AggregationBuilder using Java. But not able to find the proper aggregation for this. If any one knows GROUP\_CONCAT using java. Please reply Thanks --- ## [Clarification about transport and http module](https://discuss.elastic.co/t/clarification-about-transport-and-http-module/228095)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 1\ **Last updated:** [April 15, 2020, 12:16pm UTC](https://discuss.elastic.co/t/clarification-about-transport-and-http-module/228095 "2020-04-15T12:16:23Z")
Hi, Would be great if you can help clarifying below query - Elasticsearch transport module is used for internal communication between elasticsearch nodes and uses the port 9300. Elasticsearch http module is used for c… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=953) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=955)