# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1037 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1038 --- ## [How to change current possition of rollup job indexer](https://discuss.elastic.co/t/how-to-change-current-possition-of-rollup-job-indexer/216413)
**Author:** [@birko](https://discuss.elastic.co/u/birko)\ **Replies:** 0\ **Last updated:** [January 24, 2020, 11:51am UTC](https://discuss.elastic.co/t/how-to-change-current-possition-of-rollup-job-indexer/216413 "2020-01-24T11:51:03Z")
Hello, is it possible to manually change position of indexer in rollup job configuration? When I get rollup job details, there is status.current\_position, with latest timestamp. I have an issue with rollup job, which ca… --- ## [Filter entries in an aggregation by wildcard string?](https://discuss.elastic.co/t/filter-entries-in-an-aggregation-by-wildcard-string/216406)
**Author:** [@very\_sneaky](https://discuss.elastic.co/u/very_sneaky)\ **Replies:** 0\ **Last updated:** [January 24, 2020, 11:07am UTC](https://discuss.elastic.co/t/filter-entries-in-an-aggregation-by-wildcard-string/216406 "2020-01-24T11:07:31Z")
hey all, I'm having trouble formulating a query, and I'm hoping someone can help. This is the format of my data: { "srcIp": "192.168.0.54", "dstIp": "74.125.195.147", "srcMac": \["ec:f4:bb:4f:b0:96", "0a:f7:b… --- ## [Elasticsearch multi should query with multi minimum\_should\_match](https://discuss.elastic.co/t/elasticsearch-multi-should-query-with-multi-minimum-should-match/216399)
**Author:** [@Vladimir](https://discuss.elastic.co/u/Vladimir)\ **Replies:** 1\ **Last updated:** [January 24, 2020, 10:18am UTC](https://discuss.elastic.co/t/elasticsearch-multi-should-query-with-multi-minimum-should-match/216399 "2020-01-24T10:18:23Z")
I need to solve a problem with SHOULD conditions which makes groups and this groups should be separately evaluated according minimum should match. So no only one group with should condition but more separated groups of s… --- ## [Heavy computational load in scripted metric aggregation](https://discuss.elastic.co/t/heavy-computational-load-in-scripted-metric-aggregation/216297)
**Author:** [@Konstantin\_Kutzkov](https://discuss.elastic.co/u/Konstantin_Kutzkov)\ **Replies:** 1\ **Last updated:** [January 24, 2020, 9:30am UTC](https://discuss.elastic.co/t/heavy-computational-load-in-scripted-metric-aggregation/216297 "2020-01-24T09:30:25Z")
Hi all, I have following problem. I am indexing documents in Elasticsearch where each document is represented by a list of items (in my case integers), the list length can vary between documents. For example, doc1: \[1,2… --- ## [Avoiding ElasticSearch error 503 Server Unavailable: Use of WaitForStatus](https://discuss.elastic.co/t/avoiding-elasticsearch-error-503-server-unavailable-use-of-waitforstatus/216288)
**Author:** [@CesarPozo](https://discuss.elastic.co/u/CesarPozo)\ **Replies:** 1\ **Last updated:** [January 24, 2020, 4:50am UTC](https://discuss.elastic.co/t/avoiding-elasticsearch-error-503-server-unavailable-use-of-waitforstatus/216288 "2020-01-24T04:50:42Z")
When I start my program, I run the ElasticSearch Service and check if an Index exists and if there is any documents , let's say I just run the ES service and I have these two functions: public ElasticClient getElasticS… --- ## [ILM Timing Documentation Incorrect](https://discuss.elastic.co/t/ilm-timing-documentation-incorrect/216163)
**Author:** [@nick-anderssohn](https://discuss.elastic.co/u/nick-anderssohn)\ **Replies:** 5\ **Last updated:** [January 24, 2020, 1:00am UTC](https://discuss.elastic.co/t/ilm-timing-documentation-incorrect/216163 "2020-01-24T01:00:48Z")
In the documentation about the min\_age field used by all ILM phases, it states that the default value is always 0. However, Kibana won't let you set min\_age to 0 for the delete phase. It says 1 is the minimum value. How … --- ## [ElasticSearch Snapshot to S3](https://discuss.elastic.co/t/elasticsearch-snapshot-to-s3/129658)
**Author:** [@pratsy](https://discuss.elastic.co/u/pratsy)\ **Replies:** 4\ **Last updated:** [April 27, 2018, 8:44am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-to-s3/129658 "2018-04-27T08:44:32Z")
Hello Community, Not able to register new repository snapshot to S3. Request curl -XPUT 'http://localhost:9200/\_snapshot/s3\_repository?verify=false&pretty' -d' { "type": "s3", "settings": { "bucket": "\*\*\*", "regi… --- ## [Run Elastic Search and Logstash on different servers](https://discuss.elastic.co/t/run-elastic-search-and-logstash-on-different-servers/216246)
**Author:** [@amanpradhan](https://discuss.elastic.co/u/amanpradhan)\ **Replies:** 5\ **Last updated:** [January 24, 2020, 12:27am UTC](https://discuss.elastic.co/t/run-elastic-search-and-logstash-on-different-servers/216246 "2020-01-24T00:27:00Z")
Hello everyone, I am using logstash on a linux based server . I am collecting the logs on this server and after processing the logs with logstash i want to send these logs to elastic search which is on an amazon ec-2 in… --- ## [Index Rollover fails with index.lifecycle.rollover\_alias does not point to index](https://discuss.elastic.co/t/index-rollover-fails-with-index-lifecycle-rollover-alias-does-not-point-to-index/216338)
**Author:** [@kevinmo13](https://discuss.elastic.co/u/kevinmo13)\ **Replies:** 0\ **Last updated:** [January 23, 2020, 10:50pm UTC](https://discuss.elastic.co/t/index-rollover-fails-with-index-lifecycle-rollover-alias-does-not-point-to-index/216338 "2020-01-23T22:50:03Z")
I am using ELK version 7.5 and the ILM policy I have set up for a fluent-bit index Fluent bit is managed by a helm-chart with the following config: backend: type: es es: type: \_doc logstash\_format: "Off" … --- ## [Elastic Search 6.3.1: xpack security feature for basic license](https://discuss.elastic.co/t/elastic-search-6-3-1-xpack-security-feature-for-basic-license/216157)
**Author:** [@NikeshGupta](https://discuss.elastic.co/u/NikeshGupta)\ **Replies:** 5\ **Last updated:** [January 23, 2020, 10:32pm UTC](https://discuss.elastic.co/t/elastic-search-6-3-1-xpack-security-feature-for-basic-license/216157 "2020-01-23T22:32:42Z")
Hi, I have installed ES 6.3.1 version and set below relevant properties in elasticsearch.yml during configuration xpack.security.enabled: true xpack.license.self\_generated.type: basic xpack.security.transport.ssl.ena… --- ## [Tool for managing Elasticsearch configuration?](https://discuss.elastic.co/t/tool-for-managing-elasticsearch-configuration/216325)
**Author:** [@slmingol](https://discuss.elastic.co/u/slmingol)\ **Replies:** 0\ **Last updated:** [January 23, 2020, 9:26pm UTC](https://discuss.elastic.co/t/tool-for-managing-elasticsearch-configuration/216325 "2020-01-23T21:26:48Z")
I'm curious if there's any tooling around managing configurations pertaining to indices, templates, ILM, etc. that would allow for these to be tracked in a git repo but the tool would push changes to these configurations… --- ## [How to restart a node gracefully in ES cluster if ES cluster is running as docker containers?](https://discuss.elastic.co/t/how-to-restart-a-node-gracefully-in-es-cluster-if-es-cluster-is-running-as-docker-containers/216318)
**Author:** [@chateesh](https://discuss.elastic.co/u/chateesh)\ **Replies:** 0\ **Last updated:** [January 23, 2020, 8:44pm UTC](https://discuss.elastic.co/t/how-to-restart-a-node-gracefully-in-es-cluster-if-es-cluster-is-running-as-docker-containers/216318 "2020-01-23T20:44:16Z")
How to restart a node gracefully in ES cluster of ES running as docker containers? --- ## [Shard creation running crazy since upgrade](https://discuss.elastic.co/t/shard-creation-running-crazy-since-upgrade/216310)
**Author:** [@brandondash](https://discuss.elastic.co/u/brandondash)\ **Replies:** 1\ **Last updated:** [January 23, 2020, 8:15pm UTC](https://discuss.elastic.co/t/shard-creation-running-crazy-since-upgrade/216310 "2020-01-23T20:15:16Z")
Before upgrading to 7.5 our single node elasticsearch ran fine with the default value of 1000 max shards. Now we're having serious problems due to the shard count steadily climbing (it's floating around 3600 now). Is the… --- ## [Mistakenly upgraded without reindex or assistant. Now I cannot fix it](https://discuss.elastic.co/t/mistakenly-upgraded-without-reindex-or-assistant-now-i-cannot-fix-it/214457)
**Author:** [@brandondash](https://discuss.elastic.co/u/brandondash)\ **Replies:** 10\ **Last updated:** [January 23, 2020, 7:59pm UTC](https://discuss.elastic.co/t/mistakenly-upgraded-without-reindex-or-assistant-now-i-cannot-fix-it/214457 "2020-01-23T19:59:47Z")
We upgraded from 6.4 to 7.4 thinking we didn't have any 5.x indices. It turns out we did. Elasticsearch wouldn't start (by design, documented here). We tried to roll back to 6.4 so we could start elasticsearch to delete… --- ## [Limitation of storing documents with a timestamp far far in the future](https://discuss.elastic.co/t/limitation-of-storing-documents-with-a-timestamp-far-far-in-the-future/216299)
**Author:** [@fim](https://discuss.elastic.co/u/fim)\ **Replies:** 2\ **Last updated:** [January 23, 2020, 6:57pm UTC](https://discuss.elastic.co/t/limitation-of-storing-documents-with-a-timestamp-far-far-in-the-future/216299 "2020-01-23T18:57:15Z")
Hi Community The @timestamp field of an index template has been set in the format of epoch\_seconds. Unfortunately the application sends the data in epoch\_millis (1577983263046). Hence the json events are stored somewh… --- ## [Rollup job with distinct/unique count](https://discuss.elastic.co/t/rollup-job-with-distinct-unique-count/215684)
**Author:** [@Matthias\_Seidl](https://discuss.elastic.co/u/Matthias_Seidl)\ **Replies:** 1\ **Last updated:** [January 23, 2020, 5:49pm UTC](https://discuss.elastic.co/t/rollup-job-with-distinct-unique-count/215684 "2020-01-23T17:49:26Z")
Hi, I have to aggregate my data daily based on a couple of fields. Most of this can be done easily with the rollup functionality. I can get the max value of a field per day, the count of the logs and other simple aggreg… --- ## [Cardinality, precision, and Top 10](https://discuss.elastic.co/t/cardinality-precision-and-top-10/216303)
**Author:** [@axlrosen](https://discuss.elastic.co/u/axlrosen)\ **Replies:** 0\ **Last updated:** [January 23, 2020, 5:43pm UTC](https://discuss.elastic.co/t/cardinality-precision-and-top-10/216303 "2020-01-23T17:43:25Z")
We're currently evaluating Elasticsearch, and trying to get a handle on the approximate counts in cardinality aggregations. I understand that the default value for 'precision\_threshold' is 3000, and this means that if th… --- ## [How to configure multiple slack accounts in watcher](https://discuss.elastic.co/t/how-to-configure-multiple-slack-accounts-in-watcher/212560)
**Author:** [@ivan\_alvarenga](https://discuss.elastic.co/u/ivan_alvarenga)\ **Replies:** 6\ **Last updated:** [January 23, 2020, 5:04pm UTC](https://discuss.elastic.co/t/how-to-configure-multiple-slack-accounts-in-watcher/212560 "2020-01-23T17:04:22Z")
I am trying to configure multiple watchers that, each one, will send a notification to a specific slack channels. I tried to configure adding to the keystore "xpack.notification.slack.account.team1.monitoring.secure\_url"… --- ## [Updating Sentinl-watcher field](https://discuss.elastic.co/t/updating-sentinl-watcher-field/216295)
**Author:** [@Abhi3](https://discuss.elastic.co/u/Abhi3)\ **Replies:** 0\ **Last updated:** [January 23, 2020, 4:51pm UTC](https://discuss.elastic.co/t/updating-sentinl-watcher-field/216295 "2020-01-23T16:51:45Z")
Hi, I am using sentinl Plugin in my Elasticsearch cluster. I am trying to update the sentinl-watcher. disable field. But getting errors using painless. POST .kibana/\_update\_by\_query?conflicts=proceed {"query": { \*\* … --- ## [Rollups and ILM](https://discuss.elastic.co/t/rollups-and-ilm/214555)
**Author:** [@RichardH](https://discuss.elastic.co/u/RichardH)\ **Replies:** 2\ **Last updated:** [January 23, 2020, 4:51pm UTC](https://discuss.elastic.co/t/rollups-and-ilm/214555 "2020-01-23T16:51:28Z")
Hi All, A bit of a newbie question. Am I correct in my understanding that Rollups do not delete any data. They just create new aggregate/summary indexes. I would need to set up ILM to delete old granular data from the … --- ## [High Rejections - bulk api](https://discuss.elastic.co/t/high-rejections-bulk-api/216204)
**Author:** [@bikkina\_mahesh](https://discuss.elastic.co/u/bikkina_mahesh)\ **Replies:** 9\ **Last updated:** [January 23, 2020, 4:44pm UTC](https://discuss.elastic.co/t/high-rejections-bulk-api/216204 "2020-01-23T16:44:57Z")
My elastic cluster:- version 7.2.0. 3 data nodes, 1 master node, 2 master+ingress nodes Problem: I could see too many rejections on data nodes. So there is data loss GET \_nodes/moss-eck-es-data-2/stats/thread\_pool?hu… --- ## [Calculate the timedifference between current time and future time](https://discuss.elastic.co/t/calculate-the-timedifference-between-current-time-and-future-time/216274)
**Author:** [@chandu5565](https://discuss.elastic.co/u/chandu5565)\ **Replies:** 2\ **Last updated:** [January 23, 2020, 4:24pm UTC](https://discuss.elastic.co/t/calculate-the-timedifference-between-current-time-and-future-time/216274 "2020-01-23T16:24:27Z")
Hi, I have data in the mongo db like below. "last-date": "2020-01-30T07:30:00Z" "type": "certificate" "daysleft": "7" I had inserted this kind of records in to elasticsearch. I wanted to daily monitor the number of d… --- ## [\_snapshot data takes up disk space](https://discuss.elastic.co/t/snapshot-data-takes-up-disk-space/216267)
**Author:** [@makarchuk](https://discuss.elastic.co/u/makarchuk)\ **Replies:** 2\ **Last updated:** [January 23, 2020, 4:24pm UTC](https://discuss.elastic.co/t/snapshot-data-takes-up-disk-space/216267 "2020-01-23T16:24:32Z")
Hello. We're observing strange behavior. Elasticsearch appears to be storing some snapshot data directly in it's data directory. And there's quiet a lot of space occupied by this data ~\> find /var/lib/elasticsearch/nod… --- ## [Search elements of an array in nested documents](https://discuss.elastic.co/t/search-elements-of-an-array-in-nested-documents/216057)
**Author:** [@styks90](https://discuss.elastic.co/u/styks90)\ **Replies:** 5\ **Last updated:** [January 23, 2020, 4:11pm UTC](https://discuss.elastic.co/t/search-elements-of-an-array-in-nested-documents/216057 "2020-01-23T16:11:28Z")
Suppose I have an index which looks like this: # dummy index PUT nested { "mappings": { "properties": { "address": { "type": "nested", "properties": { "city": { "type": … --- ## [The Request Rate makes me confused](https://discuss.elastic.co/t/the-request-rate-makes-me-confused/215909)
**Author:** [@bringyou](https://discuss.elastic.co/u/bringyou)\ **Replies:** 2\ **Last updated:** [January 23, 2020, 1:10pm UTC](https://discuss.elastic.co/t/the-request-rate-makes-me-confused/215909 "2020-01-23T13:10:32Z")
Hello, I' am using Kibana's stack monitoring tools, and I found something confusing me, that is, in the indices overview window, there is a line chart called "search rate" and in advance window, there is a line chart… --- ## [Elasticsearch doesn’t start on Windows 2016 Server](https://discuss.elastic.co/t/elasticsearch-doesn-t-start-on-windows-2016-server/216237)
**Author:** [@balupad14](https://discuss.elastic.co/u/balupad14)\ **Replies:** 3\ **Last updated:** [January 23, 2020, 3:43pm UTC](https://discuss.elastic.co/t/elasticsearch-doesn-t-start-on-windows-2016-server/216237 "2020-01-23T15:43:14Z")
I have the same issue. Thank you Bala --- ## [Elasticsearch needed for 1 hour](https://discuss.elastic.co/t/elasticsearch-needed-for-1-hour/215807)
**Author:** [@royal\_man](https://discuss.elastic.co/u/royal_man)\ **Replies:** 7\ **Last updated:** [January 23, 2020, 3:43pm UTC](https://discuss.elastic.co/t/elasticsearch-needed-for-1-hour/215807 "2020-01-23T15:43:09Z")
I want to use elasticsearch only for 1 hour twice a day (I know specific time). The indexing can be done once per day anytime we want. Is there anyway I can design the system so that it can handle such request and not w… --- ## [Elasticsearch upgraded](https://discuss.elastic.co/t/elasticsearch-upgraded/216244)
**Author:** [@Manoj-ibank](https://discuss.elastic.co/u/Manoj-ibank)\ **Replies:** 1\ **Last updated:** [January 23, 2020, 3:26pm UTC](https://discuss.elastic.co/t/elasticsearch-upgraded/216244 "2020-01-23T15:26:08Z")
We have upgraded elastic search to 7.4.2 but unable to start the services. --- ## [Sorted index query time is same as unsorted index](https://discuss.elastic.co/t/sorted-index-query-time-is-same-as-unsorted-index/216228)
**Author:** [@royal\_man](https://discuss.elastic.co/u/royal_man)\ **Replies:** 1\ **Last updated:** [January 23, 2020, 3:22pm UTC](https://discuss.elastic.co/t/sorted-index-query-time-is-same-as-unsorted-index/216228 "2020-01-23T15:22:53Z")
I have a sorted index based on profile\_created\_time. When I query to the index when index sorting enabled and disabled . Query time is same. Can someone help what is wrong with my query. { "size": 20, "from": 0, … --- ## [Index health red. No Data until refresh/clear cache](https://discuss.elastic.co/t/index-health-red-no-data-until-refresh-clear-cache/216260)
**Author:** [@tilchl](https://discuss.elastic.co/u/tilchl)\ **Replies:** 0\ **Last updated:** [January 23, 2020, 2:11pm UTC](https://discuss.elastic.co/t/index-health-red-no-data-until-refresh-clear-cache/216260 "2020-01-23T14:11:15Z")
As for a week an index has red health and is unresponsive after es startup. Triggering a refresh, clear cache or reindex makes the index responsive again but health is still red. Index status red open index-name … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1036) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1038)