# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=980 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 981 --- ## [Different results when changing pipeline aggregations order](https://discuss.elastic.co/t/different-results-when-changing-pipeline-aggregations-order/224559)
**Author:** [@morteza\_hosseini](https://discuss.elastic.co/u/morteza_hosseini)\ **Replies:** 0\ **Last updated:** [March 22, 2020, 1:23pm UTC](https://discuss.elastic.co/t/different-results-when-changing-pipeline-aggregations-order/224559 "2020-03-22T13:23:41Z")
Consider this query: GET test-index/\_search { "size": 0, "query": { "term": { "data.category": { "value": "light" } } } , "aggs": { "brand\_model": { "terms":… --- ## [Is CCS possible between a licenced cluster and an Opensource one?](https://discuss.elastic.co/t/is-ccs-possible-between-a-licenced-cluster-and-an-opensource-one/224408)
**Author:** [@Faycal\_B](https://discuss.elastic.co/u/Faycal_B)\ **Replies:** 1\ **Last updated:** [March 22, 2020, 12:39pm UTC](https://discuss.elastic.co/t/is-ccs-possible-between-a-licenced-cluster-and-an-opensource-one/224408 "2020-03-22T12:39:58Z")
lets say i have a two clusters with three nodes each, one is opensource for collecting logs, the other is 3 licences with security features ( watchers, ML, ...) . is it possible to do CCS on the two of them, and apply t… --- ## [How to give different weights to exact, phonetic and fuzzy queries?](https://discuss.elastic.co/t/how-to-give-different-weights-to-exact-phonetic-and-fuzzy-queries/224365)
**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\ **Replies:** 2\ **Last updated:** [March 22, 2020, 9:37am UTC](https://discuss.elastic.co/t/how-to-give-different-weights-to-exact-phonetic-and-fuzzy-queries/224365 "2020-03-22T09:37:59Z")
Hi, So currently I am using the following query: { "\_source": \[ "title", "bench", "id\_", "court", "date" \], "size": 15, "from": 0, "query": { "bool": … --- ## [Docker elasticsearch 7.3.2 dont work](https://discuss.elastic.co/t/docker-elasticsearch-7-3-2-dont-work/224543)
**Author:** [@Rafael\_Antonio\_Rodri](https://discuss.elastic.co/u/Rafael_Antonio_Rodri)\ **Replies:** 0\ **Last updated:** [March 22, 2020, 3:34am UTC](https://discuss.elastic.co/t/docker-elasticsearch-7-3-2-dont-work/224543 "2020-03-22T03:34:11Z")
Hello good afternoon. Friends, excuse me, I'm trying to do a docker, but it's throwing an error at me. this is the docker-compose.yml version: '2.2' services: es01: image: docker.elastic.co/elasticsearch/elasticsea… --- ## [Error reindexing "Field \[\_source\] is defined both as an object and a field."](https://discuss.elastic.co/t/error-reindexing-field-source-is-defined-both-as-an-object-and-a-field/224518)
**Author:** [@sidgate](https://discuss.elastic.co/u/sidgate)\ **Replies:** 2\ **Last updated:** [March 21, 2020, 2:54pm UTC](https://discuss.elastic.co/t/error-reindexing-field-source-is-defined-both-as-an-object-and-a-field/224518 "2020-03-21T14:54:42Z")
I am trying to copy existing index to new index using reindex API /\_reindex?wait\_for\_completion=false { "source": { "index": "articles" }, "dest": { "index": "articles20200321" }, "conflicts"… --- ## [Is merging index A and Index B, into and index C, is possible in elasticsearch 6.x?](https://discuss.elastic.co/t/is-merging-index-a-and-index-b-into-and-index-c-is-possible-in-elasticsearch-6-x/224522)
**Author:** [@Yotam\_Levy](https://discuss.elastic.co/u/Yotam_Levy)\ **Replies:** 0\ **Last updated:** [March 21, 2020, 1:20pm UTC](https://discuss.elastic.co/t/is-merging-index-a-and-index-b-into-and-index-c-is-possible-in-elasticsearch-6-x/224522 "2020-03-21T13:20:04Z")
Hi Friends, I'm trying to merge two indices into one index without duplications of fields: for example, if I have Index A called "sponge": PUT /sponge/\_doc/1 { "doc\_id" : "1", "account\_name" : "squarepants", … --- ## [Replace ES master node](https://discuss.elastic.co/t/replace-es-master-node/222987)
**Author:** [@rihad](https://discuss.elastic.co/u/rihad)\ **Replies:** 7\ **Last updated:** [March 21, 2020, 1:11pm UTC](https://discuss.elastic.co/t/replace-es-master-node/222987 "2020-03-21T13:11:49Z")
Hi, we use a 3-node master-eligible ES6 cluster, and we need to replace one of the nodes. I'm trying to follow the official doc here: https://www.elastic.co/guide/en/elasticsearch/reference/master/modules-discovery-addin… --- ## [When I add a new node, the shard will rebalance. Will there be a delay in inserting and updating data at this time? What is the approximate time? How does this rebalance work and what is the principle?](https://discuss.elastic.co/t/when-i-add-a-new-node-the-shard-will-rebalance-will-there-be-a-delay-in-inserting-and-updating-data-at-this-time-what-is-the-approximate-time-how-does-this-rebalance-work-and-what-is-the-principle/224100)
**Author:** [@Liyes](https://discuss.elastic.co/u/Liyes)\ **Replies:** 11\ **Last updated:** [March 21, 2020, 8:39am UTC](https://discuss.elastic.co/t/when-i-add-a-new-node-the-shard-will-rebalance-will-there-be-a-delay-in-inserting-and-updating-data-at-this-time-what-is-the-approximate-time-how-does-this-rebalance-work-and-what-is-the-principle/224100 "2020-03-21T08:39:44Z")
When I add a new node, the shard will rebalance. The primary shard may move to the new Node. Will there be a delay in inserting and updating data at this time? What is the approximate time? How does this rebalance work a… --- ## [Is there task completion history?](https://discuss.elastic.co/t/is-there-task-completion-history/224498)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 0\ **Last updated:** [March 21, 2020, 2:52am UTC](https://discuss.elastic.co/t/is-there-task-completion-history/224498 "2020-03-21T02:52:53Z")
Hi I ran an \_reindex task, where I tried to merge a few indexes into one... It completed, but when I compare the document counts between the single and the multiple indexes, they do not match. From what I see there no t… --- ## [@timestamp formatting month to month name](https://discuss.elastic.co/t/timestamp-formatting-month-to-month-name/224422)
**Author:** [@PeterHeming](https://discuss.elastic.co/u/PeterHeming)\ **Replies:** 0\ **Last updated:** [March 20, 2020, 1:14pm UTC](https://discuss.elastic.co/t/timestamp-formatting-month-to-month-name/224422 "2020-03-20T13:14:54Z")
Hey fellas, I was looking around and came across 'scripted fields', the painless feature is great and also supports native Java methods. I just have a couple of question. The documentation says: https://www.elastic.co/… --- ## [How to use html\_strip in an attachment pipeline?](https://discuss.elastic.co/t/how-to-use-html-strip-in-an-attachment-pipeline/224096)
**Author:** [@photocurio](https://discuss.elastic.co/u/photocurio)\ **Replies:** 3\ **Last updated:** [March 20, 2020, 9:06pm UTC](https://discuss.elastic.co/t/how-to-use-html-strip-in-an-attachment-pipeline/224096 "2020-03-20T21:06:29Z")
I am indexing documents with Elasticsearch, and its working well. My problem is that some documents have hyperlinks in them. Search is finding terms in these links, which I don't want. I tried to add a html\_strip proc… --- ## [Search as you Type field functionality](https://discuss.elastic.co/t/search-as-you-type-field-functionality/224478)
**Author:** [@asura\_e](https://discuss.elastic.co/u/asura_e)\ **Replies:** 0\ **Last updated:** [March 20, 2020, 7:46pm UTC](https://discuss.elastic.co/t/search-as-you-type-field-functionality/224478 "2020-03-20T19:46:06Z")
I was looking at the functionality of the new field here: https://www.elastic.co/guide/en/elasticsearch/reference/7.x/search-as-you-type.html What I was wanting from the new field was to be able to facilitate a search-a… --- ## [How to recover after bad rolling upgrade](https://discuss.elastic.co/t/how-to-recover-after-bad-rolling-upgrade/224466)
**Author:** [@Michael\_Jackson1](https://discuss.elastic.co/u/Michael_Jackson1)\ **Replies:** 4\ **Last updated:** [March 20, 2020, 7:05pm UTC](https://discuss.elastic.co/t/how-to-recover-after-bad-rolling-upgrade/224466 "2020-03-20T19:05:45Z")
I was following the rolling upgrade documentation and the first node I was trying to upgrade from 7.3 to 7.6 didn't upgrade. It still shows that I am on 7.3 and now my cluster health shows red. Now I am seeing: .kibana… --- ## [SQL Query errors](https://discuss.elastic.co/t/sql-query-errors/222907)
**Author:** [@tangl](https://discuss.elastic.co/u/tangl)\ **Replies:** 4\ **Last updated:** [March 20, 2020, 2:10pm UTC](https://discuss.elastic.co/t/sql-query-errors/222907 "2020-03-20T14:10:26Z")
Hi there, I have an index called "index-1". And l wanna to do a WHERE query, my sql query is as follow: curl -X POST "xxx/\_xpack/sql" -H 'Content-Type: application/json' -d "{\\"query\\": \\"SELECT \* FROM 'index-1' where i… --- ## [Watcher webhook send message to telegram bot issue](https://discuss.elastic.co/t/watcher-webhook-send-message-to-telegram-bot-issue/224424)
**Author:** [@Robin020](https://discuss.elastic.co/u/Robin020)\ **Replies:** 2\ **Last updated:** [March 20, 2020, 4:57pm UTC](https://discuss.elastic.co/t/watcher-webhook-send-message-to-telegram-bot-issue/224424 "2020-03-20T16:57:18Z")
Hi, I wrote a watcher which send a message (via Webhook) to my twitterbot. Let start with my config: "actions": { "my\_webhook": { "webhook": { "scheme": "https", "host": "api.telegram.org/bot… --- ## [ES Cluster behavior has abnormal](https://discuss.elastic.co/t/es-cluster-behavior-has-abnormal/224354)
**Author:** [@AshokBachchan](https://discuss.elastic.co/u/AshokBachchan)\ **Replies:** 18\ **Last updated:** [March 20, 2020, 4:36pm UTC](https://discuss.elastic.co/t/es-cluster-behavior-has-abnormal/224354 "2020-03-20T16:36:09Z")
Hello @Christian\_Dahlqvist Dear Christian, In our production cluster, some of the Indices looks abnormal, as if first it is showing GREEN state, then after sometimes it is showing RED state. How it is possible, ex. g… --- ## [ElasticSearch.NET - Overflow exception when using scrollAPI or search\_after](https://discuss.elastic.co/t/elasticsearch-net-overflow-exception-when-using-scrollapi-or-search-after/224449)
**Author:** [@salunkerahul](https://discuss.elastic.co/u/salunkerahul)\ **Replies:** 0\ **Last updated:** [March 20, 2020, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-net-overflow-exception-when-using-scrollapi-or-search-after/224449 "2020-03-20T16:21:15Z")
I'm attempting read all data from a particular index using the Scroll API(ElasticSearch.NET-7.4.2), but I end up with the following exception # FailureReason: Unrecoverable/Unexpected BadResponse while attempting P… --- ## [Forwarding logs to external network ELK cluster](https://discuss.elastic.co/t/forwarding-logs-to-external-network-elk-cluster/224432)
**Author:** [@huntingthreats](https://discuss.elastic.co/u/huntingthreats)\ **Replies:** 3\ **Last updated:** [March 20, 2020, 4:11pm UTC](https://discuss.elastic.co/t/forwarding-logs-to-external-network-elk-cluster/224432 "2020-03-20T16:11:14Z")
Hi everyone, I have a question about forwarding Beat data from a Customer's network to an offsite network. The idea is to get insight in the hosts data, retrieve those data with agents(Beats) and process them on a separ… --- ## [After X-pack Installation : Failed to authenticate user \[elastic\]](https://discuss.elastic.co/t/after-x-pack-installation-failed-to-authenticate-user-elastic/224416)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 6\ **Last updated:** [March 20, 2020, 2:58pm UTC](https://discuss.elastic.co/t/after-x-pack-installation-failed-to-authenticate-user-elastic/224416 "2020-03-20T14:58:10Z")
Hello Guys, as i wanted to implement security in my Cluster, i followed along This Guide - an it all went well until Step 6. Set the passwords for all built-in users. When i try to execute the command: bin/elasti… --- ## [Performance consider for parent child aggregration](https://discuss.elastic.co/t/performance-consider-for-parent-child-aggregration/224434)
**Author:** [@mitelastic](https://discuss.elastic.co/u/mitelastic)\ **Replies:** 0\ **Last updated:** [March 20, 2020, 2:39pm UTC](https://discuss.elastic.co/t/performance-consider-for-parent-child-aggregration/224434 "2020-03-20T14:39:42Z")
Hi, I am looking for some review on my below aggregate query, any feedback would be great as I am pretty new to Elastic Search. I have index like Email(parent) {senderIp:ipadd, RecieptCount:num, Join:{Campaign}} Campa… --- ## [Change field name during index](https://discuss.elastic.co/t/change-field-name-during-index/224193)
**Author:** [@Sukramolas](https://discuss.elastic.co/u/Sukramolas)\ **Replies:** 4\ **Last updated:** [March 19, 2020, 2:41pm UTC](https://discuss.elastic.co/t/change-field-name-during-index/224193 "2020-03-19T14:41:58Z")
It is possible to create a character map analyzer for fields that are indexed but is it possible to do the same for field names? Example field name would be "A|B" and the need would be to change the pipe to some other c… --- ## [Elasticsearch integration with IBM Websphere](https://discuss.elastic.co/t/elasticsearch-integration-with-ibm-websphere/224108)
**Author:** [@Amit\_Rajbhar](https://discuss.elastic.co/u/Amit_Rajbhar)\ **Replies:** 4\ **Last updated:** [March 20, 2020, 1:42pm UTC](https://discuss.elastic.co/t/elasticsearch-integration-with-ibm-websphere/224108 "2020-03-20T13:42:19Z")
In my organisation searching portlet names in portal hosted on IBM websphere is implemented using elastic search.I want to know how elastic search can be integrated with IBM websphere? .Also, how to know the installed el… --- ## [Cannot match special characters in regular in ES 7.x](https://discuss.elastic.co/t/cannot-match-special-characters-in-regular-in-es-7-x/224369)
**Author:** [@SparkHex](https://discuss.elastic.co/u/SparkHex)\ **Replies:** 2\ **Last updated:** [March 20, 2020, 1:41pm UTC](https://discuss.elastic.co/t/cannot-match-special-characters-in-regular-in-es-7-x/224369 "2020-03-20T13:41:47Z")
Trying to use regexp matching a value like xxx.php，i write the following code.And I also found many ways for me to escape with double backslashes, but it doesn't work either.I guess it should be a version issue. GET /l… --- ## [Chain or relate results of one response to another in msearch](https://discuss.elastic.co/t/chain-or-relate-results-of-one-response-to-another-in-msearch/224397)
**Author:** [@Noctis17](https://discuss.elastic.co/u/Noctis17)\ **Replies:** 1\ **Last updated:** [March 20, 2020, 1:29pm UTC](https://discuss.elastic.co/t/chain-or-relate-results-of-one-response-to-another-in-msearch/224397 "2020-03-20T13:29:46Z")
Hello and good day! With the pandemic COVID19 lurking around, hope all of you guys are fine Just a quick question, with the past year, I've been tasked with certain endpoints that require Elasticsearch queries. I'm now … --- ## [Trying to create a watcher for 1 url](https://discuss.elastic.co/t/trying-to-create-a-watcher-for-1-url/223660)
**Author:** [@Robin020](https://discuss.elastic.co/u/Robin020)\ **Replies:** 10\ **Last updated:** [March 20, 2020, 1:18pm UTC](https://discuss.elastic.co/t/trying-to-create-a-watcher-for-1-url/223660 "2020-03-20T13:18:17Z")
Hi team, I am using heartbeat to monitor some url's. I am trying to create a watcher alert for 1 specific url but I get stuck. Here is my code: { "trigger": { "schedule": { "interval": "1m" } }, "i… --- ## [Elasticsearch docvalue\_fields trims precision value](https://discuss.elastic.co/t/elasticsearch-docvalue-fields-trims-precision-value/224421)
**Author:** [@nisham](https://discuss.elastic.co/u/nisham)\ **Replies:** 0\ **Last updated:** [March 20, 2020, 1:08pm UTC](https://discuss.elastic.co/t/elasticsearch-docvalue-fields-trims-precision-value/224421 "2020-03-20T13:08:55Z")
Hello, I have a scaled float field in my document, say "data\_rate" : 342.43215678 . When I use docvalue\_fields in query on this data\_rate field, I'm getting the result as "data\_rate" : 342.4321 and rest of the value is … --- ## [Can we use "/" (forward slash) inside the ID](https://discuss.elastic.co/t/can-we-use-forward-slash-inside-the-id/224404)
**Author:** [@arjun\_kumar](https://discuss.elastic.co/u/arjun_kumar)\ **Replies:** 2\ **Last updated:** [March 20, 2020, 12:43pm UTC](https://discuss.elastic.co/t/can-we-use-forward-slash-inside-the-id/224404 "2020-03-20T12:43:39Z")
can we use "/" (forward slash) inside the ID PUT test/\_doc/GD+GGAct+-+Avg+FIN201-02-01115ce07a-e5e7-4ba3-9117-4a7a49c3df01+N/A+03202020 { "foo": "bar" } --- ## [Mapping of dest index overwritten upon reindexing](https://discuss.elastic.co/t/mapping-of-dest-index-overwritten-upon-reindexing/224291)
**Author:** [@ETspielberg](https://discuss.elastic.co/u/ETspielberg)\ **Replies:** 5\ **Last updated:** [March 20, 2020, 12:42pm UTC](https://discuss.elastic.co/t/mapping-of-dest-index-overwritten-upon-reindexing/224291 "2020-03-20T12:42:59Z")
Hi, I am using elasticsearch 7.6.1 and I have indexed a number of documents with a type, which was generated automatically. For example I have timestamps, which are currently indexed as text. In addition, I need to adju… --- ## [Dashboard with graph per day - relative dates but fixed time](https://discuss.elastic.co/t/dashboard-with-graph-per-day-relative-dates-but-fixed-time/224417)
**Author:** [@Tommie](https://discuss.elastic.co/u/Tommie)\ **Replies:** 0\ **Last updated:** [March 20, 2020, 12:24pm UTC](https://discuss.elastic.co/t/dashboard-with-graph-per-day-relative-dates-but-fixed-time/224417 "2020-03-20T12:24:58Z")
I want to create a dashboard with multiple views of the same graph on it. One graph per (working) day so there's an overview of the last five days. The time range (on the x-ax) should be from 7:00 AM to 6:00 PM and the… --- ## [How to expand on special characters?](https://discuss.elastic.co/t/how-to-expand-on-special-characters/224413)
**Author:** [@lukecaptaincode](https://discuss.elastic.co/u/lukecaptaincode)\ **Replies:** 2\ **Last updated:** [March 20, 2020, 12:11pm UTC](https://discuss.elastic.co/t/how-to-expand-on-special-characters/224413 "2020-03-20T12:11:19Z")
I have an index full of brand names and some of them contain special characters (E.L.F, L'oreal) and they show up when searched for exactly but how do I set queries to essentially ignore the special character when search… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=979) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=981)