elastic-stack

问题 So, I have elastic search up and running, but when I look in my analytics console I see results for "". So, for example, lets say a user types "Red and Black Sneakers". <---- those spaces between the words are tracked in the query and assigned clicks. That seems to throw off the analytcs because a space, "", is not really a viable search.... How to omit these results or properly assign click thrus to the actual search, not spaces? This is a screen grab from the elastic analytics section. See

问题 So, I have elastic search up and running, but when I look in my analytics console I see results for "". So, for example, lets say a user types "Red and Black Sneakers". <---- those spaces between the words are tracked in the query and assigned clicks. That seems to throw off the analytcs because a space, "", is not really a viable search.... How to omit these results or properly assign click thrus to the actual search, not spaces? This is a screen grab from the elastic analytics section. See

问题 How can I do Bucket Sort in composite Aggregation? I need to do Composite Aggregation with Bucket sort. I have tried Sort with aggregation. I have tried composite aggregation. 回答1: I think this question, is in continuation to your previous question, so considered the same use case You need to use Bucket sort aggregation that is a parent pipeline aggregation which sorts the buckets of its parent multi-bucket aggregation. And please refer to this documentation on composite aggregation to know

问题 How can I do Bucket Sort in composite Aggregation? I need to do Composite Aggregation with Bucket sort. I have tried Sort with aggregation. I have tried composite aggregation. 回答1: I think this question, is in continuation to your previous question, so considered the same use case You need to use Bucket sort aggregation that is a parent pipeline aggregation which sorts the buckets of its parent multi-bucket aggregation. And please refer to this documentation on composite aggregation to know

问题 I have use case where I need to get all unique user ids from Elasticsearch and it should be sorted by timestamp. What I'm using currently is composite term aggregation with sub aggregation which will return the latest timestamp. (I can't sort it in client side as it slow down the script) Sample data in elastic search { "_index": "logstash-2020.10.29", "_type": "doc", "_id": "L0Urc3UBttS_uoEtubDk", "_version": 1, "_score": null, "_source": { "@version": "1", "@timestamp": "2020-10-29T06:56:00

问题 I have use case where I need to get all unique user ids from Elasticsearch and it should be sorted by timestamp. What I'm using currently is composite term aggregation with sub aggregation which will return the latest timestamp. (I can't sort it in client side as it slow down the script) Sample data in elastic search { "_index": "logstash-2020.10.29", "_type": "doc", "_id": "L0Urc3UBttS_uoEtubDk", "_version": 1, "_score": null, "_source": { "@version": "1", "@timestamp": "2020-10-29T06:56:00

问题 One of my ES nodes has failed because of java.lang.OutOfMemoryError: Java heap space error. Here is the full stack trace from the logs: [2020-09-18T04:25:04,215][WARN ][o.e.a.b.TransportShardBulkAction] [search1] [[my_index_4][0]] failed to perform indices:data/write/bulk[s] on replica [my_index_4][0], node[cm_76wfGRFm9nbPR1mJxTQ], [R], s[STARTED], a[id=BUpviwHxQK2qC3GrELC2Hw] org.elasticsearch.transport.NodeDisconnectedException: [search3][X.X.X.179:9300][indices:data/write/bulk[s][r]]

问题 i am new to elk stack i have tried from this but not getting working flow .. for example executed below search query POST <index-name>/_search?scroll=2m { "query": {"match_all": {}} } and got the scroll_id from this query then tried Retrieving the next batch of results for a scrolling search.using this GET /_search/scroll { "scroll_id" : "<scroll_id>" } got result first time "took" : 2, "timed_out" : false, "terminated_early" : true, "_shards" : { "total" : 1, "successful" : 1, "skipped" : 0,

问题 i am new to elk stack i have tried from this but not getting working flow .. for example executed below search query POST <index-name>/_search?scroll=2m { "query": {"match_all": {}} } and got the scroll_id from this query then tried Retrieving the next batch of results for a scrolling search.using this GET /_search/scroll { "scroll_id" : "<scroll_id>" } got result first time "took" : 2, "timed_out" : false, "terminated_early" : true, "_shards" : { "total" : 1, "successful" : 1, "skipped" : 0,

来源： https://stackoverflow.com/questions/64641225/elasticsearch-unassigned-shards-warning-every-couple-of-hours