# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1032

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1033

---

## [All Index deleting Error](https://discuss.elastic.co/t/all-index-deleting-error/215396)

<div class="topic-metadata">

**Author:** [@eogredici](https://discuss.elastic.co/u/eogredici)\
**Replies:** 8\
**Last updated:** [January 30, 2020, 3:15am UTC](https://discuss.elastic.co/t/all-index-deleting-error/215396 "2020-01-30T03:15:15Z")

</div>

Hi, i am using elasticSearch 7.3 version. My All index were deleted even though there was no intervention. Even i checked disk usage, memory usage, gc.log but i found errors. İ attached my elastic log. Could you plea…

---

## [Logstash Updates During Reindexing](https://discuss.elastic.co/t/logstash-updates-during-reindexing/217097)

<div class="topic-metadata">

**Author:** [@Rahul\_Kumar4](https://discuss.elastic.co/u/Rahul_Kumar4)\
**Replies:** 0\
**Last updated:** [January 30, 2020, 3:03am UTC](https://discuss.elastic.co/t/logstash-updates-during-reindexing/217097 "2020-01-30T03:03:16Z")

</div>

We have a logstash pipeline that is continuously indexing data in our Elasticsearch. Due to mapping issues, we have to reindex our current index to a new index. What is the recommended way to do reindexing while the logs…

---

## [Benchmarking without ip but with domain](https://discuss.elastic.co/t/benchmarking-without-ip-but-with-domain/216927)

<div class="topic-metadata">

**Author:** [@kinlee](https://discuss.elastic.co/u/kinlee)\
**Replies:** 1\
**Last updated:** [January 29, 2020, 11:41pm UTC](https://discuss.elastic.co/t/benchmarking-without-ip-but-with-domain/216927 "2020-01-29T23:41:10Z")

</div>

Hey.....Thank you so much for your support. I am running esrally against AWS cluster since I don't know all IP of the cluster I am using the cluster domain name. I am invoking using following command esrally --pipeline=…

---

## [Does elastic-search's {"acknowledged":true} means actually all of indices are have been "created"?](https://discuss.elastic.co/t/does-elastic-searchs-acknowledged-true-means-actually-all-of-indices-are-have-been-created/216608)

<div class="topic-metadata">

**Author:** [@IC1101Galaxy](https://discuss.elastic.co/u/IC1101Galaxy)\
**Replies:** 7\
**Last updated:** [January 29, 2020, 11:34pm UTC](https://discuss.elastic.co/t/does-elastic-searchs-acknowledged-true-means-actually-all-of-indices-are-have-been-created/216608 "2020-01-29T23:34:53Z")

</div>

When we add some new indices elastic-search and it returns "acknowledged". I just want to know does {"acknowledged":true} means all of indices actually "have been created" or not. If not, even though {"acknowledged":tr…

---

## [Watcher query bool must filter synatx string problem](https://discuss.elastic.co/t/watcher-query-bool-must-filter-synatx-string-problem/217086)

<div class="topic-metadata">

**Author:** [@pierrejutard](https://discuss.elastic.co/u/pierrejutard)\
**Replies:** 0\
**Last updated:** [January 29, 2020, 11:11pm UTC](https://discuss.elastic.co/t/watcher-query-bool-must-filter-synatx-string-problem/217086 "2020-01-29T23:11:09Z")

</div>

Hello, I try to configure a watcher with a query that catch all the field of an indice(match all) and catch only the last hit during the last one hour from now but i have a string syntax error since a couple of hour whe…

---

## [Convert latitude and longitude fields into geo\_point type,](https://discuss.elastic.co/t/convert-latitude-and-longitude-fields-into-geo-point-type/216364)

<div class="topic-metadata">

**Author:** [@bondelastic](https://discuss.elastic.co/u/bondelastic)\
**Replies:** 9\
**Last updated:** [January 29, 2020, 10:51pm UTC](https://discuss.elastic.co/t/convert-latitude-and-longitude-fields-into-geo-point-type/216364 "2020-01-29T22:51:56Z")

</div>

Hello, I have the below fields in my index. index pattern : s3-\* service.action.networkConnectionAction.remoteIpDetails.geoLocation.lat - type is number service.action.networkConnectionAction.remoteIpDetails.geoLocat…

---

## [Elasticsearch build-in users config in docker-compose](https://discuss.elastic.co/t/elasticsearch-build-in-users-config-in-docker-compose/213854)

<div class="topic-metadata">

**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\
**Replies:** 3\
**Last updated:** [January 29, 2020, 8:48pm UTC](https://discuss.elastic.co/t/elasticsearch-build-in-users-config-in-docker-compose/213854 "2020-01-29T20:48:05Z")

</div>

Hi, Is there any way to use "elasticsearch-setup-passwords" command in docker-compose to define build-in users and password? I don't wanna exec elasticsearch-setup-passwords interactive command manually on every containe…

---

## [Elasticsearch Cloud and Customizing elasticsearch.yml](https://discuss.elastic.co/t/elasticsearch-cloud-and-customizing-elasticsearch-yml/217068)

<div class="topic-metadata">

**Author:** [@Johnnie843](https://discuss.elastic.co/u/Johnnie843)\
**Replies:** 1\
**Last updated:** [January 29, 2020, 7:53pm UTC](https://discuss.elastic.co/t/elasticsearch-cloud-and-customizing-elasticsearch-yml/217068 "2020-01-29T19:53:59Z")

</div>

Is it possible to edit my elasticsearch cloud instance yml file? Curious I'm am shopping for a license and see a cloud option and want to make sure I can edit my instance.

---

## [How to compare two documents from two different indexes using script](https://discuss.elastic.co/t/how-to-compare-two-documents-from-two-different-indexes-using-script/217047)

<div class="topic-metadata">

**Author:** [@JBone](https://discuss.elastic.co/u/JBone)\
**Replies:** 0\
**Last updated:** [January 29, 2020, 5:08pm UTC](https://discuss.elastic.co/t/how-to-compare-two-documents-from-two-different-indexes-using-script/217047 "2020-01-29T17:08:04Z")

</div>

Hi, I am searching for similar fields in two different indexes. My goal is to if those fields match, then I know there is a correlation between those two documents. I do search first with accountNumber, and I group them…

---

## [Refresh\_interval](https://discuss.elastic.co/t/refresh-interval/215420)

<div class="topic-metadata">

**Author:** [@111276](https://discuss.elastic.co/u/111276)\
**Replies:** 5\
**Last updated:** [January 29, 2020, 5:55pm UTC](https://discuss.elastic.co/t/refresh-interval/215420 "2020-01-29T17:55:14Z")

</div>

hello I have eight elasticsearch data nodes (ver. 6.4.1) (8 shards, 2 replica) they have following data indexed disk size : 21.5GB Document Count : 67.7m Segment Count : 336 A large amount of data is bached and ind…

---

## [ES\_JAVA\_OPTS exceding memory usage](https://discuss.elastic.co/t/es-java-opts-exceding-memory-usage/216888)

<div class="topic-metadata">

**Author:** [@Sirius](https://discuss.elastic.co/u/Sirius)\
**Replies:** 2\
**Last updated:** [January 29, 2020, 5:34pm UTC](https://discuss.elastic.co/t/es-java-opts-exceding-memory-usage/216888 "2020-01-29T17:34:33Z")

</div>

Hi, I'm running an ES cluster with 3 nodes using docker compose, my 3 nodes have the same below environment JAVA OPTS configuration. My understanding setting such value it would limit the memory usage, my node1 and 2 ar…

---

## [ElasticSearch 7.x exact match](https://discuss.elastic.co/t/elasticsearch-7-x-exact-match/216974)

<div class="topic-metadata">

**Author:** [@CiprianaM](https://discuss.elastic.co/u/CiprianaM)\
**Replies:** 3\
**Last updated:** [January 29, 2020, 5:20pm UTC](https://discuss.elastic.co/t/elasticsearch-7-x-exact-match/216974 "2020-01-29T17:20:14Z")

</div>

Hello, I am trying to implement an exact match for a term (a url) and I get 0 hits for the following implementation. I am doing this with node, with the latest npm package ("@elastic/elasticsearch": "^7.5.0") Mapping: …

---

## [Stack monitoring cannot see Indices](https://discuss.elastic.co/t/stack-monitoring-cannot-see-indices/214478)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 19\
**Last updated:** [January 29, 2020, 4:42pm UTC](https://discuss.elastic.co/t/stack-monitoring-cannot-see-indices/214478 "2020-01-29T16:42:06Z")

</div>

Hi, I am ES 7.5 and using metricbeat for monitoring, under my cluster, Elasticsearch, Indices. I can see the number of Indices, Memory etc but in the filter list I see nothing, I have changed the date range to days an…

---

## [Using nodejs ES client to query on two arrays of index associated values](https://discuss.elastic.co/t/using-nodejs-es-client-to-query-on-two-arrays-of-index-associated-values/217039)

<div class="topic-metadata">

**Author:** [@1upNathan](https://discuss.elastic.co/u/1upNathan)\
**Replies:** 0\
**Last updated:** [January 29, 2020, 4:20pm UTC](https://discuss.elastic.co/t/using-nodejs-es-client-to-query-on-two-arrays-of-index-associated-values/217039 "2020-01-29T16:20:29Z")

</div>

I'm using version 6.11.2 of the nodeJS elasticsearch client in an attempt to access records based on two distinct fields. My query syntax currently looks something like this. While this yields the records that have a …

---

## [Enable CORS from Kibana for ES](https://discuss.elastic.co/t/enable-cors-from-kibana-for-es/217008)

<div class="topic-metadata">

**Author:** [@Rakesh\_More](https://discuss.elastic.co/u/Rakesh_More)\
**Replies:** 1\
**Last updated:** [January 29, 2020, 4:22pm UTC](https://discuss.elastic.co/t/enable-cors-from-kibana-for-es/217008 "2020-01-29T16:22:25Z")

</div>

Hello All, I am new to Elasticsearch. I have created elasticsearch cluster on AWS cloud. And have added some data for for particular index. Now while connecting to cluster from React App I am facing CORS issue. How c…

---

## [Foreach Ingest processor + conditional append processor](https://discuss.elastic.co/t/foreach-ingest-processor-conditional-append-processor/216884)

<div class="topic-metadata">

**Author:** [@Kredit](https://discuss.elastic.co/u/Kredit)\
**Replies:** 2\
**Last updated:** [January 29, 2020, 3:52pm UTC](https://discuss.elastic.co/t/foreach-ingest-processor-conditional-append-processor/216884 "2020-01-29T15:52:00Z")

</div>

I have documents with fields that looks like this (from Jaeger): { "something": "some value", ... "logs": \[ { "fields": \[ { "key": "error", "value": "This is an error message." }, { "k…

---

## [Elasticsearch doesn't start on Windows 2016 Server](https://discuss.elastic.co/t/elasticsearch-doesnt-start-on-windows-2016-server/200182)

<div class="topic-metadata">

**Author:** [@PBachmann](https://discuss.elastic.co/u/PBachmann)\
**Replies:** 0\
**Last updated:** [September 19, 2019, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-start-on-windows-2016-server/200182 "2019-09-19T10:43:02Z")

</div>

Hi there I've installed the latest Elasticsearch Version for Windows 7.3.2 on a Windows Server 2016. The Installation finished without Errors, but the Service cannot start. Here is the Application Log Blockquote Fau…

---

## [Evaluate non-empty list to true in mustache](https://discuss.elastic.co/t/evaluate-non-empty-list-to-true-in-mustache/216864)

<div class="topic-metadata">

**Author:** [@styks90](https://discuss.elastic.co/u/styks90)\
**Replies:** 2\
**Last updated:** [January 29, 2020, 3:43pm UTC](https://discuss.elastic.co/t/evaluate-non-empty-list-to-true-in-mustache/216864 "2020-01-29T15:43:34Z")

</div>

Quick question on mustache: Is it possible to evaluate a conditional on a list just once? That is, instead of iterating and applying the template to each element in the array, evaluate it as non-empty and do stuff in it…

---

## [Geoip not reading dot expanded field (or any field, actually)](https://discuss.elastic.co/t/geoip-not-reading-dot-expanded-field-or-any-field-actually/216929)

<div class="topic-metadata">

**Author:** [@AddChickpeas](https://discuss.elastic.co/u/AddChickpeas)\
**Replies:** 1\
**Last updated:** [January 29, 2020, 3:09pm UTC](https://discuss.elastic.co/t/geoip-not-reading-dot-expanded-field-or-any-field-actually/216929 "2020-01-29T15:09:17Z")

</div>

Hello, I've been trying to get geoip working on field with dot notation without much luck. EDIT: So this is happening even when not using nested fields. Same error either way. I'm using Fluentd so maybe the way it outp…

---

## [Change font in Watcher email alert](https://discuss.elastic.co/t/change-font-in-watcher-email-alert/216958)

<div class="topic-metadata">

**Author:** [@zuerisee](https://discuss.elastic.co/u/zuerisee)\
**Replies:** 0\
**Last updated:** [January 29, 2020, 8:31am UTC](https://discuss.elastic.co/t/change-font-in-watcher-email-alert/216958 "2020-01-29T08:31:01Z")

</div>

Hello everyone, I was wondering what would be the best approach to change the font for an entire HTML email (including the footer appended by the Elasticsearch Service) sent by a Watcher email action? I know it's possib…

---

## [Not able to start elasticsearch](https://discuss.elastic.co/t/not-able-to-start-elasticsearch/216996)

<div class="topic-metadata">

**Author:** [@Aayush\_Agrawal](https://discuss.elastic.co/u/Aayush_Agrawal)\
**Replies:** 1\
**Last updated:** [January 29, 2020, 2:52pm UTC](https://discuss.elastic.co/t/not-able-to-start-elasticsearch/216996 "2020-01-29T14:52:49Z")

</div>

My ELK setup on unix box was working fine, but elasticsearch and kibana stopped working. I restarted both services using /etc/init.d/elasticsearch restart and /etc/init.d/kibana restart. Kibana started working but elas…

---

## [Update using "join" with other index](https://discuss.elastic.co/t/update-using-join-with-other-index/217010)

<div class="topic-metadata">

**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\
**Replies:** 1\
**Last updated:** [January 29, 2020, 2:09pm UTC](https://discuss.elastic.co/t/update-using-join-with-other-index/217010 "2020-01-29T14:09:09Z")

</div>

I am using Elasticsearch 6.5. Let's say that I have index\_trg, that has fields: id, value, and some additional fields. I also have index\_src with fields id and new\_value, that is subset id ids from index\_trg. What I w…

---

## [Thread park Event seen in RestClient multiGet \_msearch operation](https://discuss.elastic.co/t/thread-park-event-seen-in-restclient-multiget-msearch-operation/217011)

<div class="topic-metadata">

**Author:** [@vyas.radhakrishnan](https://discuss.elastic.co/u/vyas.radhakrishnan)\
**Replies:** 0\
**Last updated:** [January 29, 2020, 1:33pm UTC](https://discuss.elastic.co/t/thread-park-event-seen-in-restclient-multiget-msearch-operation/217011 "2020-01-29T13:33:46Z")

</div>

We are seeing a ThreadPark of 249 ms in a 1 node elastic setup, Elastic server version is 6.5.4. Thread park event is seen when on a sync multiGet operation . I.e a POST request for multiGet(\_msearch) performRequestAP…

---

## [Migrate from co-location to the cloud without downtime(?)](https://discuss.elastic.co/t/migrate-from-co-location-to-the-cloud-without-downtime/216819)

<div class="topic-metadata">

**Author:** [@jimmie](https://discuss.elastic.co/u/jimmie)\
**Replies:** 6\
**Last updated:** [January 29, 2020, 1:29pm UTC](https://discuss.elastic.co/t/migrate-from-co-location-to-the-cloud-without-downtime/216819 "2020-01-29T13:29:30Z")

</div>

We want to move out from co-lo (Sweden), and in to AWS EC2 in USA (i3.2xl) (maintaining it our-self, not the service one) We have a 18 data node setup on co-location. We are running elasticsearch 5.6 We have two replica…

---

## [HighLevel RestClient difference between 6.6.2 and 7.3.+ (or latest)](https://discuss.elastic.co/t/highlevel-restclient-difference-between-6-6-2-and-7-3-or-latest/210707)

<div class="topic-metadata">

**Author:** [@AshishUser](https://discuss.elastic.co/u/AshishUser)\
**Replies:** 3\
**Last updated:** [January 29, 2020, 12:56pm UTC](https://discuss.elastic.co/t/highlevel-restclient-difference-between-6-6-2-and-7-3-or-latest/210707 "2020-01-29T12:56:02Z")

</div>

Hi Guys, I have application which using older version of elastic 6.6.2 high level rest client search api. We are planning to upgrade our instance to latest version of elastic in coming months. I am trying to understand…

---

## [Not getting proper Response as per the count](https://discuss.elastic.co/t/not-getting-proper-response-as-per-the-count/216986)

<div class="topic-metadata">

**Author:** [@Toshif](https://discuss.elastic.co/u/Toshif)\
**Replies:** 2\
**Last updated:** [January 29, 2020, 12:35pm UTC](https://discuss.elastic.co/t/not-getting-proper-response-as-per-the-count/216986 "2020-01-29T12:35:25Z")

</div>

Hello, I am trying to retrieve 1500 records from ElasticSearch but in response I am getting only around 10 records. I am getting count as 1500, also in kibana same query returns 1500 records. But in response I am not …

---

## [Search phase execution exception - Request to Elasticsearch failed](https://discuss.elastic.co/t/search-phase-execution-exception-request-to-elasticsearch-failed/216988)

<div class="topic-metadata">

**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Replies:** 0\
**Last updated:** [January 29, 2020, 11:25am UTC](https://discuss.elastic.co/t/search-phase-execution-exception-request-to-elasticsearch-failed/216988 "2020-01-29T11:25:51Z")

</div>

Hi! I am trying to add a sub-bucket in an kibana histogram and i get the bellow: Request to Elasticsearch failed: {"error":{ "root\_cause": "type":"search\_phase\_execution\_exception","reason":"all shards failed","phase…

---

## [Unable to post data into ElasticSearch from Jmeter using Backend listeners](https://discuss.elastic.co/t/unable-to-post-data-into-elasticsearch-from-jmeter-using-backend-listeners/216985)

<div class="topic-metadata">

**Author:** [@sGhosh86](https://discuss.elastic.co/u/sGhosh86)\
**Replies:** 0\
**Last updated:** [January 29, 2020, 11:06am UTC](https://discuss.elastic.co/t/unable-to-post-data-into-elasticsearch-from-jmeter-using-backend-listeners/216985 "2020-01-29T11:06:40Z")

</div>

Hi, I am facing an issue while trying to post Jmeter data into ElasticSearch using Backend listener. Initially I had done PoC on local system where everything (JMeter, ElasticSearch, Kibana, Grafana etc.) were in my loc…

---

## [How to fix signal red?](https://discuss.elastic.co/t/how-to-fix-signal-red/216945)

<div class="topic-metadata">

**Author:** [@Nobuo1106](https://discuss.elastic.co/u/Nobuo1106)\
**Replies:** 6\
**Last updated:** [January 29, 2020, 9:50am UTC](https://discuss.elastic.co/t/how-to-fix-signal-red/216945 "2020-01-29T09:50:51Z")

</div>

I am very new to Elastic. The project, which I was assigned, uses Elastic and worked without problem, but from a few days ago we could not be able to reach Elastic. When I command curl http://localhost:9200/\_cluster/…

---

## [ElasticSearch ES\_TMPDIR issue](https://discuss.elastic.co/t/elasticsearch-es-tmpdir-issue/216953)

<div class="topic-metadata">

**Author:** [@Rahul.Bali](https://discuss.elastic.co/u/Rahul.Bali)\
**Replies:** 0\
**Last updated:** [January 29, 2020, 7:57am UTC](https://discuss.elastic.co/t/elasticsearch-es-tmpdir-issue/216953 "2020-01-29T07:57:04Z")

</div>

Facing issue with ElasticSearch on WIndows Server 2016 Stranded When i check the TEMP folder there is a folder named \*C:\\Users\\ADMINI~1\\AppData\\Local\\Temp\\2\* but there is no folder named like \*\*C:\\Users\\ADMINI~1\\AppDa…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1031)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1033)
