# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=981 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 982 --- ## [How to post filter aggregation?](https://discuss.elastic.co/t/how-to-post-filter-aggregation/224409)
**Author:** [@mynkow](https://discuss.elastic.co/u/mynkow)\ **Replies:** 0\ **Last updated:** [March 20, 2020, 11:42am UTC](https://discuss.elastic.co/t/how-to-post-filter-aggregation/224409 "2020-03-20T11:42:20Z")
Hello, I am trying to do a simple filter for two days now and I guess I am missing something obvious. CONTEXT: We have a commerce data in ES index where every purchased order item is a document. I am trying to find al… --- ## [What 24 horus starting from now and not round off](https://discuss.elastic.co/t/what-24-horus-starting-from-now-and-not-round-off/224262)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 2\ **Last updated:** [March 20, 2020, 10:43am UTC](https://discuss.elastic.co/t/what-24-horus-starting-from-now-and-not-round-off/224262 "2020-03-20T10:43:56Z")
Hi team, Can someone suggest; since I am using below with my search API, will it search the IP addresses starting from now - 24 hrs yesterday or will it take last 24 horus? I need search IP addresses starting from now … --- ## [AutoCompletion for Hindi (Indian Language)](https://discuss.elastic.co/t/autocompletion-for-hindi-indian-language/224247)
**Author:** [@chivas](https://discuss.elastic.co/u/chivas)\ **Replies:** 2\ **Last updated:** [March 20, 2020, 9:54am UTC](https://discuss.elastic.co/t/autocompletion-for-hindi-indian-language/224247 "2020-03-20T09:54:04Z")
Hello, I am trying to use the Edge Ngram Tokeniser for auto complete search. Below is my index definition: PUT hindi\_test { "settings": { "analysis": { "filter": { "hindi\_stop": { "t… --- ## [Use array in wildcard field in query](https://discuss.elastic.co/t/use-array-in-wildcard-field-in-query/224392)
**Author:** [@Dev-Flo](https://discuss.elastic.co/u/Dev-Flo)\ **Replies:** 0\ **Last updated:** [March 20, 2020, 9:50am UTC](https://discuss.elastic.co/t/use-array-in-wildcard-field-in-query/224392 "2020-03-20T09:50:44Z")
Hey, I have an array of selected modules, called selectedModules that contains the names of the selected modules. Now, I want to search my Elasticsearch Index for sources that begin with either of the selected modules,… --- ## [Optimizing Index that has grown far too large, suggested settings based on experience needed!](https://discuss.elastic.co/t/optimizing-index-that-has-grown-far-too-large-suggested-settings-based-on-experience-needed/224314)
**Author:** [@ford](https://discuss.elastic.co/u/ford)\ **Replies:** 1\ **Last updated:** [March 20, 2020, 9:43am UTC](https://discuss.elastic.co/t/optimizing-index-that-has-grown-far-too-large-suggested-settings-based-on-experience-needed/224314 "2020-03-20T09:43:07Z")
So I have an index that I did not expect to grow to the size it's at now, it was setup very naively. I've put off updating it long enough, time to set up a fresh cluster designed for the load! The Index has reached a tot… --- ## [Product Matrix doesnt list CentOS8 compatibility for ELK Stack](https://discuss.elastic.co/t/product-matrix-doesnt-list-centos8-compatibility-for-elk-stack/224343)
**Author:** [@snehid](https://discuss.elastic.co/u/snehid)\ **Replies:** 1\ **Last updated:** [March 20, 2020, 9:29am UTC](https://discuss.elastic.co/t/product-matrix-doesnt-list-centos8-compatibility-for-elk-stack/224343 "2020-03-20T09:29:06Z")
Product matrix https://www.elastic.co/support/matrix#matrix\_os doesnt list centOS8, how about the ELK stack compatibility of CentOS8? --- ## [Pinned Query](https://discuss.elastic.co/t/pinned-query/224028)
**Author:** [@avinash\_kumawat](https://discuss.elastic.co/u/avinash_kumawat)\ **Replies:** 2\ **Last updated:** [March 20, 2020, 8:37am UTC](https://discuss.elastic.co/t/pinned-query/224028 "2020-03-20T08:37:29Z")
Hello All, I am trying the Elasticsearch pinned query, for that, I have some questions: Is there any analytics tool elasticsearch plugin or built-in functionality to find out the most searched terms? Is there any way … --- ## [Unable to connect to elasticsearch 7.6 from php 7.2 api](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-7-6-from-php-7-2-api/224032)
**Author:** [@Narsimha\_Reddy\_Manda](https://discuss.elastic.co/u/Narsimha_Reddy_Manda)\ **Replies:** 2\ **Last updated:** [March 20, 2020, 7:45am UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-7-6-from-php-7-2-api/224032 "2020-03-20T07:45:28Z")
my Elastic Search version has been upgraded from 7.4 to 7.6, after restarting by the ubuntu system upgraded. After this upgrade now I am unable to connect to ES server (Localhost:9200) from php 7.2 API. Please provide… --- ## [Filter is slower than that not in a skewed dataset](https://discuss.elastic.co/t/filter-is-slower-than-that-not-in-a-skewed-dataset/224361)
**Author:** [@Ji\_Qiujia](https://discuss.elastic.co/u/Ji_Qiujia)\ **Replies:** 0\ **Last updated:** [March 20, 2020, 7:06am UTC](https://discuss.elastic.co/t/filter-is-slower-than-that-not-in-a-skewed-dataset/224361 "2020-03-20T07:06:36Z")
{ "from": 0, "size": 10, "query": { "bool": { "filter": \[ { "terms": { "platform": \[ "DPA" \], "boost": 1 } } \], … --- ## [Elasticsearch Curator not listing .kibana indices (TLS/SSL)](https://discuss.elastic.co/t/elasticsearch-curator-not-listing-kibana-indices-tls-ssl/224210)
**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\ **Replies:** 6\ **Last updated:** [March 20, 2020, 3:30am UTC](https://discuss.elastic.co/t/elasticsearch-curator-not-listing-kibana-indices-tls-ssl/224210 "2020-03-20T03:30:43Z")
Elasticsearch docker image version: 6.8.2 Curator docker image version: 5.8.1 (also tried 5.7.6 which is prior to this pr that handles all .kibana indices) What I have observed: Elasticsearch Curator is not listing .… --- ## [How can I get the status of a Index in elasticsearch in java](https://discuss.elastic.co/t/how-can-i-get-the-status-of-a-index-in-elasticsearch-in-java/224248)
**Author:** [@daniel-0930](https://discuss.elastic.co/u/daniel-0930)\ **Replies:** 2\ **Last updated:** [March 20, 2020, 1:37am UTC](https://discuss.elastic.co/t/how-can-i-get-the-status-of-a-index-in-elasticsearch-in-java/224248 "2020-03-20T01:37:38Z")
I try to find a Java api, of cause the High-level one, to get the status of a index. It can be done in kibana console with single GET /index/\_stats. However, it is so hard to find one single relevent api in High-level ja… --- ## [Help me set elasticsearch.yml variable](https://discuss.elastic.co/t/help-me-set-elasticsearch-yml-variable/224228)
**Author:** [@jw.lee](https://discuss.elastic.co/u/jw.lee)\ **Replies:** 2\ **Last updated:** [March 20, 2020, 1:19am UTC](https://discuss.elastic.co/t/help-me-set-elasticsearch-yml-variable/224228 "2020-03-20T01:19:30Z")
This is the contents of my elasticsearch.yml file. cluster.name: test-cluster node.name: test-m node.master: true node.data: false cluster.initial\_master\_nodes: \["${ES\_MASTER\_NODES}"\] discovery.seed\_hosts: \["${ES\_SEED… --- ## [Running into issue with sourcing from Kafka using Spark Scala to write to Elastic Search](https://discuss.elastic.co/t/running-into-issue-with-sourcing-from-kafka-using-spark-scala-to-write-to-elastic-search/224328)
**Author:** [@jcheeks5281](https://discuss.elastic.co/u/jcheeks5281)\ **Replies:** 0\ **Last updated:** [March 19, 2020, 11:32pm UTC](https://discuss.elastic.co/t/running-into-issue-with-sourcing-from-kafka-using-spark-scala-to-write-to-elastic-search/224328 "2020-03-19T23:32:07Z")
Running into an issue where our spark logs are saying B cannot be cast to scala.Tuple2 import java.sql.Timestamp import java.text.{ParsePosition, SimpleDateFormat} import com.gm.SparkDataIngest.ManifestClasses.{Manifes… --- ## [ECS Fields Not Mapping Correctly Automatically](https://discuss.elastic.co/t/ecs-fields-not-mapping-correctly-automatically/224190)
**Author:** [@scottdfedorov](https://discuss.elastic.co/u/scottdfedorov)\ **Replies:** 5\ **Last updated:** [March 19, 2020, 7:50pm UTC](https://discuss.elastic.co/t/ecs-fields-not-mapping-correctly-automatically/224190 "2020-03-19T19:50:33Z")
When I index documents into Elasticsearch, the fields which conform to ECS are not being mapped correctly and all are being made into "text" fields, with "keyword" sub-fields. What steps are needed to utilize ECS? I was… --- ## [Elastic wacher painlless script and mustache template](https://discuss.elastic.co/t/elastic-wacher-painlless-script-and-mustache-template/220755)
**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\ **Replies:** 6\ **Last updated:** [March 19, 2020, 6:15pm UTC](https://discuss.elastic.co/t/elastic-wacher-painlless-script-and-mustache-template/220755 "2020-03-19T18:15:33Z")
hi I have created following watcher by following https://cinhtau.net/2017/06/19/es-nodes-mem\_watch/ I had to edit few stuff to make it work for ELK 7 { "trigger": { "schedule": { "interval": "6h" } }… --- ## [Range queries](https://discuss.elastic.co/t/range-queries/223447)
**Author:** [@afzal](https://discuss.elastic.co/u/afzal)\ **Replies:** 3\ **Last updated:** [March 19, 2020, 5:30pm UTC](https://discuss.elastic.co/t/range-queries/223447 "2020-03-19T17:30:07Z")
I have a source object similar to this "\_source" : { "phone" : "1234567890", "email" : "test\_test.com", "group" : "test", "name" : "Rhonda Shawarma", "prop.size\_min" : "0", "prop.size… --- ## [Error with starting ElasticSearch: OpenSDK 64-Bit Server VM](https://discuss.elastic.co/t/error-with-starting-elasticsearch-opensdk-64-bit-server-vm/224295)
**Author:** [@tagmetag](https://discuss.elastic.co/u/tagmetag)\ **Replies:** 1\ **Last updated:** [March 19, 2020, 4:54pm UTC](https://discuss.elastic.co/t/error-with-starting-elasticsearch-opensdk-64-bit-server-vm/224295 "2020-03-19T16:54:22Z")
Hi, Today I tried to install ElasticSearch in my VPS, which running Ubuntu 64bit and have Java installed. When I install ElasticSearch and tried to start, I got failed with an error about JVM in the below photo. Wha… --- ## [Search by a particular object of an array](https://discuss.elastic.co/t/search-by-a-particular-object-of-an-array/224005)
**Author:** [@gborasio](https://discuss.elastic.co/u/gborasio)\ **Replies:** 4\ **Last updated:** [March 19, 2020, 3:53pm UTC](https://discuss.elastic.co/t/search-by-a-particular-object-of-an-array/224005 "2020-03-19T15:53:36Z")
Hi all i have a json with this format: { "\_source": { "m\_header": { "m\_playerCarIndex": 2 }, "m\_lapData": \[ { "m\_currentLapTime": 1.5848066806793213 }, { "m\_currentLapTime": 1.6660668067933333 }, { "m\_curr… --- ## [Calculate the hour of the day in the ingest pipeline / display error message](https://discuss.elastic.co/t/calculate-the-hour-of-the-day-in-the-ingest-pipeline-display-error-message/224222)
**Author:** [@daniellienert](https://discuss.elastic.co/u/daniellienert)\ **Replies:** 1\ **Last updated:** [March 19, 2020, 3:15pm UTC](https://discuss.elastic.co/t/calculate-the-hour-of-the-day-in-the-ingest-pipeline-display-error-message/224222 "2020-03-19T15:15:13Z")
Hello there, I am currently struggling with calculating the hour of the day from the timestamp of a log record using painless. The painless code (with adjusted field accessor) works as a scripted field. Wether date\_hou… --- ## [Accessdenied expcetion on snapshot directory](https://discuss.elastic.co/t/accessdenied-expcetion-on-snapshot-directory/224083)
**Author:** [@Arp](https://discuss.elastic.co/u/Arp)\ **Replies:** 8\ **Last updated:** [March 19, 2020, 3:10pm UTC](https://discuss.elastic.co/t/accessdenied-expcetion-on-snapshot-directory/224083 "2020-03-19T15:10:37Z")
Hi, I am trying to set up a snapshot directory. I created /home/user/elastic and put this into the configuration file: path.repo: "/home/user/elastic" If I then restart, I get the error. I googled a lot around and I … --- ## [Watcher Email is Failing](https://discuss.elastic.co/t/watcher-email-is-failing/224278)
**Author:** [@Faten](https://discuss.elastic.co/u/Faten)\ **Replies:** 1\ **Last updated:** [March 19, 2020, 2:35pm UTC](https://discuss.elastic.co/t/watcher-email-is-failing/224278 "2020-03-19T14:35:30Z")
Hi, I am using elasticsearch 7.6 and I configured exchange email in .yml file, like in elastic's tutorial but it still isn't working, could you please help! configuraion: ''' xpack.notification.email.account: exchan… --- ## [Good place to locate Kibana\\Watcher expert?](https://discuss.elastic.co/t/good-place-to-locate-kibana-watcher-expert/223800)
**Author:** [@Karn\_Griffen](https://discuss.elastic.co/u/Karn_Griffen)\ **Replies:** 9\ **Last updated:** [March 19, 2020, 2:25pm UTC](https://discuss.elastic.co/t/good-place-to-locate-kibana-watcher-expert/223800 "2020-03-19T14:25:58Z")
I'm looking for someone to help us understand and create Watcher alerts for Metricbeat data coming in. Basic alerting such as netowrk, disk, cpu, memory. Is there a place in the community for this? Or does anyone have… --- ## [SSL and Elastic API](https://discuss.elastic.co/t/ssl-and-elastic-api/224201)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 5\ **Last updated:** [March 19, 2020, 1:54pm UTC](https://discuss.elastic.co/t/ssl-and-elastic-api/224201 "2020-03-19T13:54:52Z")
Hi, I have enabled SSL in elastic search, then using Postman I try to make a request to elastic and didn't work, I have to turn off 'SSL certificate verification' in Postman to make the request. That means that the pro… --- ## [Unable to add second node to elastic search cluster](https://discuss.elastic.co/t/unable-to-add-second-node-to-elastic-search-cluster/224269)
**Author:** [@Senappa](https://discuss.elastic.co/u/Senappa)\ **Replies:** 1\ **Last updated:** [March 19, 2020, 1:16pm UTC](https://discuss.elastic.co/t/unable-to-add-second-node-to-elastic-search-cluster/224269 "2020-03-19T13:16:24Z")
Hi I have a two node cluster setup(ES version - 7.1) which was running absolutely fine until one of the node became unreachable. After bringing it up and starting elastic search, it does not add to the cluster. PFB ela… --- ## [Use curator for more than one deployment](https://discuss.elastic.co/t/use-curator-for-more-than-one-deployment/224202)
**Author:** [@bmbrit](https://discuss.elastic.co/u/bmbrit)\ **Replies:** 2\ **Last updated:** [March 19, 2020, 12:29pm UTC](https://discuss.elastic.co/t/use-curator-for-more-than-one-deployment/224202 "2020-03-19T12:29:11Z")
Hi, We have two ElasticCloud Deployments, one of which is a test deployment. We may increase the deployments based on our additional client requirements. We have created a curator for the test deployment installed in … --- ## [Math.round in painless script](https://discuss.elastic.co/t/math-round-in-painless-script/223607)
**Author:** [@David\_Han](https://discuss.elastic.co/u/David_Han)\ **Replies:** 4\ **Last updated:** [March 19, 2020, 12:15pm UTC](https://discuss.elastic.co/t/math-round-in-painless-script/223607 "2020-03-19T12:15:47Z")
I have to create a aggs like below: 'conversions\_rate' =\> \[ 'avg' =\> \[ 'field' =\> 'conversions\_rate', 'script' =\> \[ 'lang' =\> 'painless', 'inline' =\> 'Math.round(\_value \* params.ten)', 'params' =\> \[ 'ten' =\> 100 … --- ## [Azure Analytics Logs to ELK Stack?](https://discuss.elastic.co/t/azure-analytics-logs-to-elk-stack/223907)
**Author:** [@Mattness](https://discuss.elastic.co/u/Mattness)\ **Replies:** 4\ **Last updated:** [March 19, 2020, 12:14pm UTC](https://discuss.elastic.co/t/azure-analytics-logs-to-elk-stack/223907 "2020-03-19T12:14:54Z")
Is there a way to send my Azure Analytics Logs to Elasticsarch? --- ## [Upgrade ES from 7.6 to 7.6.1](https://discuss.elastic.co/t/upgrade-es-from-7-6-to-7-6-1/224256)
**Author:** [@dadadima](https://discuss.elastic.co/u/dadadima)\ **Replies:** 1\ **Last updated:** [March 19, 2020, 11:26am UTC](https://discuss.elastic.co/t/upgrade-es-from-7-6-to-7-6-1/224256 "2020-03-19T11:26:27Z")
I would like to add an extra local node to my ES cluster. At the moment I am running a single node instance (version 7.6.0) and I was wondering whether I can add an extra node running 7.6.1 to the same cluster (which is… --- ## [Error with Elastic and Moloch](https://discuss.elastic.co/t/error-with-elastic-and-moloch/224232)
**Author:** [@pakjack79](https://discuss.elastic.co/u/pakjack79)\ **Replies:** 4\ **Last updated:** [March 19, 2020, 10:54am UTC](https://discuss.elastic.co/t/error-with-elastic-and-moloch/224232 "2020-03-19T10:54:53Z")
Hi all, i am get this error with this {"error":{"root\_cause":\[{"type":"remote\_transport\_exception","reason":"\[node-data\]\[10.0.xxx.6:9300\]\[indices:data/write/bulk\[s\]\[p\]\]"}\],"type":"es\_rejected\_execution\_exception","re… --- ## [How do we store elasticsearch data into Hadoop cluster(Amabri)](https://discuss.elastic.co/t/how-do-we-store-elasticsearch-data-into-hadoop-cluster-amabri/224079)
**Author:** [@kishore419](https://discuss.elastic.co/u/kishore419)\ **Replies:** 2\ **Last updated:** [March 19, 2020, 10:22am UTC](https://discuss.elastic.co/t/how-do-we-store-elasticsearch-data-into-hadoop-cluster-amabri/224079 "2020-03-19T10:22:27Z")
Hello All i am using 3 node elasticsearch(7.4.2) cluster in my environment and generating 100GB(appx) data daily, hence i would like to maintain only 30days data in elasticsearch and remaining data should be stored in h… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=980) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=982)