# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=971 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 972 --- ## [How to do date histogram again after date histogram aggregation?](https://discuss.elastic.co/t/how-to-do-date-histogram-again-after-date-histogram-aggregation/225884)
**Author:** [@ziyang](https://discuss.elastic.co/u/ziyang)\ **Replies:** 0\ **Last updated:** [March 31, 2020, 2:19pm UTC](https://discuss.elastic.co/t/how-to-do-date-histogram-again-after-date-histogram-aggregation/225884 "2020-03-31T14:19:49Z")
Now my aggregation is 5 min date histogram aggregation and then sum the result in every 5 min. Now my DSL is similar to: { "size": 0, "query": { "bool": { "filter": \[ { "range": { … --- ## [Elastic Stack 7.6 on local Docker does not work](https://discuss.elastic.co/t/elastic-stack-7-6-on-local-docker-does-not-work/225874)
**Author:** [@avonreuss](https://discuss.elastic.co/u/avonreuss)\ **Replies:** 0\ **Last updated:** [March 31, 2020, 1:52pm UTC](https://discuss.elastic.co/t/elastic-stack-7-6-on-local-docker-does-not-work/225874 "2020-03-31T13:52:13Z")
Following the instructions at https://www.elastic.co/guide/en/elastic-stack-get-started/current/get-started-docker.html does not lead to a success! As this is a local test environment I made absolutely no changes to the… --- ## [Watcher - Slack account is not getting configured](https://discuss.elastic.co/t/watcher-slack-account-is-not-getting-configured/225859)
**Author:** [@aviman](https://discuss.elastic.co/u/aviman)\ **Replies:** 0\ **Last updated:** [March 31, 2020, 12:35pm UTC](https://discuss.elastic.co/t/watcher-slack-account-is-not-getting-configured/225859 "2020-03-31T12:35:26Z")
HI, Using Elastic 7.3.. on a Cluster with 2 nodes Added Webhook Url to keystore and made entries in elasticsearch.yml. (Entries made on all nodes) Below is my yml details: \ xpack.notification.slack: account: … --- ## [Using DigitalOcean spaces to store Elasticsearch snapshots](https://discuss.elastic.co/t/using-digitalocean-spaces-to-store-elasticsearch-snapshots/225780)
**Author:** [@lcanas](https://discuss.elastic.co/u/lcanas)\ **Replies:** 1\ **Last updated:** [March 31, 2020, 12:05pm UTC](https://discuss.elastic.co/t/using-digitalocean-spaces-to-store-elasticsearch-snapshots/225780 "2020-03-31T12:05:00Z")
Hi all, some months ago I started to look for information related to using DigitalOcean Spaces to store Elasticsearch Snapshots. Due to I did not find any examples available I decided to write a blog post about this jus… --- ## [Elastic Security and Compliance Common Criteria ISO/IEC 15408](https://discuss.elastic.co/t/elastic-security-and-compliance-common-criteria-iso-iec-15408/225849)
**Author:** [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\ **Replies:** 0\ **Last updated:** [March 31, 2020, 12:04pm UTC](https://discuss.elastic.co/t/elastic-security-and-compliance-common-criteria-iso-iec-15408/225849 "2020-03-31T12:04:43Z")
Hi, I would like to check if there is an existing Elastic Security and Compliance https://www.elastic.co/security-and-compliance that is equivalent to Common Criteria ISO/IEC 15408? Thank you. --- ## [Export data from Elasticsearch to Azure Blob](https://discuss.elastic.co/t/export-data-from-elasticsearch-to-azure-blob/225845)
**Author:** [@JimG](https://discuss.elastic.co/u/JimG)\ **Replies:** 0\ **Last updated:** [March 31, 2020, 11:48am UTC](https://discuss.elastic.co/t/export-data-from-elasticsearch-to-azure-blob/225845 "2020-03-31T11:48:53Z")
Hi everyone Is there anyway that it is possible to export data from multiple Indices to Azure Blob? We got a large environment with 800 millions documents, but we wanted to store all that are 3 months old in a Azure bl… --- ## [Problem with elastic relocation algorithm](https://discuss.elastic.co/t/problem-with-elastic-relocation-algorithm/225844)
**Author:** [@tfe2012](https://discuss.elastic.co/u/tfe2012)\ **Replies:** 0\ **Last updated:** [March 31, 2020, 11:38am UTC](https://discuss.elastic.co/t/problem-with-elastic-relocation-algorithm/225844 "2020-03-31T11:38:15Z")
Hi, I have cluster with 25 nodes (220 GB each) On Node17 space left only 40GB, but ES try to move to this node 2 shards 17,7 GB and 16,8. Next step ES moves 2 same shards to node 20. Next step To node 17 And thi… --- ## [Elasticsearch running on Docker failing in taking snapshots and restore](https://discuss.elastic.co/t/elasticsearch-running-on-docker-failing-in-taking-snapshots-and-restore/225616)
**Author:** [@620528](https://discuss.elastic.co/u/620528)\ **Replies:** 6\ **Last updated:** [March 31, 2020, 10:58am UTC](https://discuss.elastic.co/t/elasticsearch-running-on-docker-failing-in-taking-snapshots-and-restore/225616 "2020-03-31T10:58:11Z")
Below is the logs taken from Curator while running snapshot. Can someone please help me on this ? 2020-03-30 02:02:52,095 WARNING elasticsearch log\_request\_fail:149 PUT http://localhost:9200/\_snapsho… --- ## [Elastic search coordinating-node role - complex aggregations](https://discuss.elastic.co/t/elastic-search-coordinating-node-role-complex-aggregations/225622)
**Author:** [@nages](https://discuss.elastic.co/u/nages)\ **Replies:** 5\ **Last updated:** [March 31, 2020, 10:27am UTC](https://discuss.elastic.co/t/elastic-search-coordinating-node-role-complex-aggregations/225622 "2020-03-31T10:27:06Z")
I understood coordinate node broadcasts the search request and gathers the results received from data nodes using "query then fetch phase" . Does it do it in one iteration of "query then fetch phase" or a search request… --- ## [Elastic Edge\_Ngram with Whitespace Word Breaker](https://discuss.elastic.co/t/elastic-edge-ngram-with-whitespace-word-breaker/225280)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 3\ **Last updated:** [March 31, 2020, 10:14am UTC](https://discuss.elastic.co/t/elastic-edge-ngram-with-whitespace-word-breaker/225280 "2020-03-31T10:14:51Z")
We want our edge\_ngram search to only to word break on whitespace. If we use: "tokenizer": { "token\_chars": \["letter", "digit", "punctuation", "symbol"\], "min\_gram": "2", "type": "edge\_ngram… --- ## [Index creation failing using Nest 7.6.1 with "Root mapping definition has unsupported parameters"](https://discuss.elastic.co/t/index-creation-failing-using-nest-7-6-1-with-root-mapping-definition-has-unsupported-parameters/225672)
**Author:** [@Shahed\_Aziz](https://discuss.elastic.co/u/Shahed_Aziz)\ **Replies:** 2\ **Last updated:** [March 31, 2020, 8:50am UTC](https://discuss.elastic.co/t/index-creation-failing-using-nest-7-6-1-with-root-mapping-definition-has-unsupported-parameters/225672 "2020-03-31T08:50:57Z")
Hi, Im trying to create index for a very simple class. My class : public class ElasticSearchDto { public string Id { get; set; } public string ApplicationNumber { get; set; } } Using the fo… --- ## [Query a AND b](https://discuss.elastic.co/t/query-a-and-b/225816)
**Author:** [@sancho](https://discuss.elastic.co/u/sancho)\ **Replies:** 0\ **Last updated:** [March 31, 2020, 8:30am UTC](https://discuss.elastic.co/t/query-a-and-b/225816 "2020-03-31T08:30:20Z")
Hi everyone, My goal is to make a search engine for my data that look like "ta AND tb OR (tc AND td)" I'm focusing on the part "ta AND tb". { "id": 1, "keywords": \["java", "node", "PHP"\] }, { … --- ## [Not able to download RPM files from download page](https://discuss.elastic.co/t/not-able-to-download-rpm-files-from-download-page/225807)
**Author:** [@Dhara\_Vihol](https://discuss.elastic.co/u/Dhara_Vihol)\ **Replies:** 1\ **Last updated:** [March 31, 2020, 8:12am UTC](https://discuss.elastic.co/t/not-able-to-download-rpm-files-from-download-page/225807 "2020-03-31T08:12:53Z")
Not able to download any RPM file directly from download links given: https://www.elastic.co/downloads/ --- ## [Set up Elastic Search on Azure and post data using C# .net core](https://discuss.elastic.co/t/set-up-elastic-search-on-azure-and-post-data-using-c-net-core/225808)
**Author:** [@ManishNarula](https://discuss.elastic.co/u/ManishNarula)\ **Replies:** 0\ **Last updated:** [March 31, 2020, 7:39am UTC](https://discuss.elastic.co/t/set-up-elastic-search-on-azure-and-post-data-using-c-net-core/225808 "2020-03-31T07:39:09Z")
Hi there, I am trying to set up Elastic Search on Azure. Below are the steps i have taken Transport Security is No , though screen shot is saying yes (old screen shot) var pool = new SingleNodeConnectionPool(ne… --- ## [ELK stack Integrating with Oracle DB](https://discuss.elastic.co/t/elk-stack-integrating-with-oracle-db/225730)
**Author:** [@singh.piyush862](https://discuss.elastic.co/u/singh.piyush862)\ **Replies:** 2\ **Last updated:** [March 31, 2020, 7:13am UTC](https://discuss.elastic.co/t/elk-stack-integrating-with-oracle-db/225730 "2020-03-31T07:13:37Z")
Hi Team, I have basic ELK use case wherein I am consuming syslog data from client through Logstash, storing in ES & visualize in Kibana. In addition to this, In Syslog incoming data I have IP address field, but I don’t… --- ## [How to get spesific data in Long Date value](https://discuss.elastic.co/t/how-to-get-spesific-data-in-long-date-value/225800)
**Author:** [@muhjaury](https://discuss.elastic.co/u/muhjaury)\ **Replies:** 0\ **Last updated:** [March 31, 2020, 7:04am UTC](https://discuss.elastic.co/t/how-to-get-spesific-data-in-long-date-value/225800 "2020-03-31T07:04:00Z")
My data in user.created\_at field is like below Tue Mar 10 23:03:00 +0000 2020 Tue Mar 10 04:29:18 +0000 2020 Tue Jan 21 08:45:43 +0000 2020 Tue Mar 10 00:11:45 +0000 2020 Tue Jan 28 04:11:45 +0000 2020 Sun Mar 08 10:19:… --- ## [When to use nested object vs parent child relation](https://discuss.elastic.co/t/when-to-use-nested-object-vs-parent-child-relation/225799)
**Author:** [@Ashish\_Mehta](https://discuss.elastic.co/u/Ashish_Mehta)\ **Replies:** 0\ **Last updated:** [March 31, 2020, 7:02am UTC](https://discuss.elastic.co/t/when-to-use-nested-object-vs-parent-child-relation/225799 "2020-03-31T07:02:08Z")
Hi Team, I am migrating my relation database table to elastic search. I am stuck in making mapping of the document. I dont figure out which thing i use . Whether i should go to nested object or parent child relation. I… --- ## [So How I need to integrate c# .Net framework 4.71. to APM](https://discuss.elastic.co/t/so-how-i-need-to-integrate-c-net-framework-4-71-to-apm/225545)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 1\ **Last updated:** [March 31, 2020, 6:24am UTC](https://discuss.elastic.co/t/so-how-i-need-to-integrate-c-net-framework-4-71-to-apm/225545 "2020-03-31T06:24:46Z")
Hi... I have a problem while setting up apm in .Net framework. --- ## [The more CPU cores/threads, the better performance?](https://discuss.elastic.co/t/the-more-cpu-cores-threads-the-better-performance/225789)
**Author:** [@kohsmos](https://discuss.elastic.co/u/kohsmos)\ **Replies:** 2\ **Last updated:** [March 31, 2020, 5:52am UTC](https://discuss.elastic.co/t/the-more-cpu-cores-threads-the-better-performance/225789 "2020-03-31T05:52:31Z")
Hello, I am ES beginer. While studying ES configurations, I got a question. Is there any problem when I have too much RAM memory and too many CPU cores/threads?? The more CPU cores/threads, RAM memory, the better perf… --- ## [Anonymous Access Unexpectedly Allowed](https://discuss.elastic.co/t/anonymous-access-unexpectedly-allowed/225765)
**Author:** [@diggitydug](https://discuss.elastic.co/u/diggitydug)\ **Replies:** 9\ **Last updated:** [March 31, 2020, 5:03am UTC](https://discuss.elastic.co/t/anonymous-access-unexpectedly-allowed/225765 "2020-03-31T05:03:22Z")
Hello - We deployed a trial version of an ElasticSearch 6.5.3 and Kibana stack from the Azure marketplace and everything was running fine. Everything was configured properly, and we were using a username & password to … --- ## [Term aggregation on frozen index cause field data cache increase continuously](https://discuss.elastic.co/t/term-aggregation-on-frozen-index-cause-field-data-cache-increase-continuously/225770)
**Author:** [@stone\_xy](https://discuss.elastic.co/u/stone_xy)\ **Replies:** 1\ **Last updated:** [March 31, 2020, 3:57am UTC](https://discuss.elastic.co/t/term-aggregation-on-frozen-index-cause-field-data-cache-increase-continuously/225770 "2020-03-31T03:57:39Z")
ES Version: 7.1.1 JVM Heap: 4GB Repro steps: Create an index with keyword field type and insert serveral docs, freeze that index, than run term query agaist the frozen index, we will see field data cache increase and… --- ## [Mapper parsing exception: Root mapping definition has unsupported parameters](https://discuss.elastic.co/t/mapper-parsing-exception-root-mapping-definition-has-unsupported-parameters/225449)
**Author:** [@vernal](https://discuss.elastic.co/u/vernal)\ **Replies:** 5\ **Last updated:** [March 31, 2020, 2:07am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-root-mapping-definition-has-unsupported-parameters/225449 "2020-03-31T02:07:55Z")
PUT /ag2\_vehicle\_stats { "settings": { "number\_of\_shards": 1 }, "mappings": { "doc": { "properties": { "vin": { "type": "keyword" }, "error\_reported": { "type": "integer" }, "num\_records": { "type": "integ… --- ## [Running backups don't work anymore](https://discuss.elastic.co/t/running-backups-dont-work-anymore/225767)
**Author:** [@congwensheng](https://discuss.elastic.co/u/congwensheng)\ **Replies:** 0\ **Last updated:** [March 31, 2020, 1:24am UTC](https://discuss.elastic.co/t/running-backups-dont-work-anymore/225767 "2020-03-31T01:24:59Z")
hello: i write a cronjob,to backup the elasticsearch data to the oss,it is verified that the snapshot function works well,it works many days.but these days it does not work. The operating environment has not been change… --- ## [Elastic Search Basic concepts documentaton](https://discuss.elastic.co/t/elastic-search-basic-concepts-documentaton/225682)
**Author:** [@nages](https://discuss.elastic.co/u/nages)\ **Replies:** 1\ **Last updated:** [March 30, 2020, 9:56pm UTC](https://discuss.elastic.co/t/elastic-search-basic-concepts-documentaton/225682 "2020-03-30T21:56:32Z")
I am going through the documentation and had seen an article in 5.3 and it never present in 7.x / 6.x version documenation. I am wondering is it still reelvant ( assuming it should as it is related to basic concepts) ht… --- ## [Retrieve multifield data in search](https://discuss.elastic.co/t/retrieve-multifield-data-in-search/225737)
**Author:** [@RajaG](https://discuss.elastic.co/u/RajaG)\ **Replies:** 0\ **Last updated:** [March 30, 2020, 7:18pm UTC](https://discuss.elastic.co/t/retrieve-multifield-data-in-search/225737 "2020-03-30T19:18:34Z")
Here is my mapping for a field: "likes": { "type": "text", "fields": { "length": { "type": "token\_count", "analyzer": "email\_analyzer" … --- ## [Correct analyzer for a field with backslash](https://discuss.elastic.co/t/correct-analyzer-for-a-field-with-backslash/225614)
**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\ **Replies:** 2\ **Last updated:** [March 30, 2020, 7:56pm UTC](https://discuss.elastic.co/t/correct-analyzer-for-a-field-with-backslash/225614 "2020-03-30T19:56:12Z")
So, I'm trying to setup a new index mapping with the correct analyzer for a Windows credential field, which has the format domain\\username. I want to be able to search for domain, username AND domain\\username. But the d… --- ## [Repository-s3 release](https://discuss.elastic.co/t/repository-s3-release/225739)
**Author:** [@asipe](https://discuss.elastic.co/u/asipe)\ **Replies:** 0\ **Last updated:** [March 30, 2020, 7:39pm UTC](https://discuss.elastic.co/t/repository-s3-release/225739 "2020-03-30T19:39:33Z")
There is a recent commit to the repository-s3 code that would likely solve an issue we have run into (https://github.com/elastic/elasticsearch/commit/754d071c4e52250222382953d165860ea743d7b7). Is there any way to predic… --- ## [Undercounting of doc\_counts in Terms agg V.S. scripted terms agg](https://discuss.elastic.co/t/undercounting-of-doc-counts-in-terms-agg-v-s-scripted-terms-agg/225722)
**Author:** [@gpiimetrics](https://discuss.elastic.co/u/gpiimetrics)\ **Replies:** 0\ **Last updated:** [March 30, 2020, 5:26pm UTC](https://discuss.elastic.co/t/undercounting-of-doc-counts-in-terms-agg-v-s-scripted-terms-agg/225722 "2020-03-30T17:26:53Z")
I was experimenting a scripted terms agg that converts a field to String, because we have all data types at different times of the project (I know it's crazy but have to deal with it now). Then I noticed a mismatch in b… --- ## [What is the best way to increase storage capacity?](https://discuss.elastic.co/t/what-is-the-best-way-to-increase-storage-capacity/225489)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 2\ **Last updated:** [March 30, 2020, 4:43pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-increase-storage-capacity/225489 "2020-03-30T16:43:48Z")
Hello Elasticians ! I need to add more data to Elastic and didn't found clear information on Google or forums So, what is for you the best way to achieve this and what are the impact ? extend actual disk ? attach… --- ## [Unable to create elasticsearch cluster in docker swarm](https://discuss.elastic.co/t/unable-to-create-elasticsearch-cluster-in-docker-swarm/225570)
**Author:** [@sammi](https://discuss.elastic.co/u/sammi)\ **Replies:** 9\ **Last updated:** [March 30, 2020, 4:23pm UTC](https://discuss.elastic.co/t/unable-to-create-elasticsearch-cluster-in-docker-swarm/225570 "2020-03-30T16:23:26Z")
i am trying to create a 2 node docker swarm elasticsearch cluster. have been trying this from 2 days but couldn't succeed. please help me. below is the compose file, first node joins the cluster but second not able to jo… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=970) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=972)