# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1062 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1063 --- ## [ILM delete x days from rollover on reindexed indices](https://discuss.elastic.co/t/ilm-delete-x-days-from-rollover-on-reindexed-indices/212599)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 5:22am UTC](https://discuss.elastic.co/t/ilm-delete-x-days-from-rollover-on-reindexed-indices/212599 "2019-12-20T05:22:07Z")
how ILM evaluates indices that have been reindexed recently due to mapping change? Does reindex modify the age of indices from ILM perspective so ILM is impacted? for instance I set ILM to "Delete 30days from rollove… --- ## [Filebeat Modules: No results found in Kibana](https://discuss.elastic.co/t/filebeat-modules-no-results-found-in-kibana/212596)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 5:05am UTC](https://discuss.elastic.co/t/filebeat-modules-no-results-found-in-kibana/212596 "2019-12-20T05:05:33Z")
Hello Team Elasticsearch Version: 7.5 OS: Ubuntu (AWS EC2) I'm using metricbeats and filebeats. Everything is fine except few modules of filebeats which are not showing properly in kibana I've followed the documenta… --- ## [Help me](https://discuss.elastic.co/t/help-me/212591)
**Author:** [@Long\_Ta](https://discuss.elastic.co/u/Long_Ta)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 3:58am UTC](https://discuss.elastic.co/t/help-me/212591 "2019-12-20T03:58:42Z")
i want to filter data "t\_type": "withdrawal" and sum all "estimated\_usd": 1 in visualize, yo can help me? --- ## [Can't get es remote info](https://discuss.elastic.co/t/cant-get-es-remote-info/212587)
**Author:** [@111269](https://discuss.elastic.co/u/111269)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 3:08am UTC](https://discuss.elastic.co/t/cant-get-es-remote-info/212587 "2019-12-20T03:08:06Z")
when use curl get remote info failed; task info :slightly\_smiling\_face: "c-dufCMQSc2YelvGnNGnIQ:589429" : { "node" : "c-dufCMQSc2YelvGnNGnIQ", "id" : 589429, "type" : "transport", "action" : "cluster:monitor/remote… --- ## [Elasticsearch find which field and array index matched?](https://discuss.elastic.co/t/elasticsearch-find-which-field-and-array-index-matched/212581)
**Author:** [@cjsjyh](https://discuss.elastic.co/u/cjsjyh)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 1:32am UTC](https://discuss.elastic.co/t/elasticsearch-find-which-field-and-array-index-matched/212581 "2019-12-20T01:32:15Z")
I am currently using multi\_match to search nested datatypes. I want to find the index of shortreview which matched my query. For example, if query matched """ review\_ccc """ of my review field, return 2. my purpose is… --- ## [Does anyone have a source for sample metricbeat data?](https://discuss.elastic.co/t/does-anyone-have-a-source-for-sample-metricbeat-data/212556)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 0\ **Last updated:** [December 19, 2019, 8:36pm UTC](https://discuss.elastic.co/t/does-anyone-have-a-source-for-sample-metricbeat-data/212556 "2019-12-19T20:36:32Z")
Does anyone have a source for some sample data I could load into a test cluster? Specifically for Metricbeat. For bonus points, any other beats like Filebeat, Journalbeat, or Winlogbeat. Kibana has some sample data for … --- ## [Bulk insert API with json file not working](https://discuss.elastic.co/t/bulk-insert-api-with-json-file-not-working/212522)
**Author:** [@apizano](https://discuss.elastic.co/u/apizano)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 8:07pm UTC](https://discuss.elastic.co/t/bulk-insert-api-with-json-file-not-working/212522 "2019-12-19T20:07:25Z")
Hi, I have a very large file with like 1 million records or 1,000,000 records (either way its a lot :D) I am using the curl command: $ curl -s -H "Content-Type: application/json" -XPOST localhost:9200/\_bulk --data-bina… --- ## [Importing CSV and mapping geo\_point](https://discuss.elastic.co/t/importing-csv-and-mapping-geo-point/210957)
**Author:** [@davidmgm-ES](https://discuss.elastic.co/u/davidmgm-ES)\ **Replies:** 1\ **Last updated:** [December 19, 2019, 7:04pm UTC](https://discuss.elastic.co/t/importing-csv-and-mapping-geo-point/210957 "2019-12-19T19:04:14Z")
Hello ES Community. I'm fairly new to ES/Kibana 7.5. I have the following CSV file with 3 columns.; first\_seen, last\_seen and geom. Dropbox link to the CSV file Type of the first two columns are date and type of the… --- ## [Security in Elastic](https://discuss.elastic.co/t/security-in-elastic/212545)
**Author:** [@Pkeshav](https://discuss.elastic.co/u/Pkeshav)\ **Replies:** 3\ **Last updated:** [December 19, 2019, 6:49pm UTC](https://discuss.elastic.co/t/security-in-elastic/212545 "2019-12-19T18:49:38Z")
Per this article it looks we have access to TLS and RBAC with the basic version of Elastic. We want to confirm this is true? I have conflicting information in various blogs so want to confirm if my understanding is right… --- ## [How does elasticsearch indexing handle repititions?](https://discuss.elastic.co/t/how-does-elasticsearch-indexing-handle-repititions/212541)
**Author:** [@hjiop\_oop](https://discuss.elastic.co/u/hjiop_oop)\ **Replies:** 1\ **Last updated:** [December 19, 2019, 6:39pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-indexing-handle-repititions/212541 "2019-12-19T18:39:23Z")
Say I have two entries: {'a':100,'b':'2000 aba'} {'a':100,'b':'2000 aba'} and I index them and then do a search over elasticsearch for all '2000 aba' in field 'b', will the repetitions show? will both the entries sho… --- ## [I can't create mapping with python modukle elasticsearch](https://discuss.elastic.co/t/i-cant-create-mapping-with-python-modukle-elasticsearch/212477)
**Author:** [@kevngzc](https://discuss.elastic.co/u/kevngzc)\ **Replies:** 0\ **Last updated:** [December 19, 2019, 11:53am UTC](https://discuss.elastic.co/t/i-cant-create-mapping-with-python-modukle-elasticsearch/212477 "2019-12-19T11:53:21Z")
Hi, I try to add a mapping with geocoding and date to my index with elasticsearch-py. But my field "COORDONNEES" doesn't appear in mapping as geo\_point but like type text with keywords. I want to use this this field in… --- ## [Translate query from Sphinx to Elasticsearch](https://discuss.elastic.co/t/translate-query-from-sphinx-to-elasticsearch/212005)
**Author:** [@zeusfsx](https://discuss.elastic.co/u/zeusfsx)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 6:11pm UTC](https://discuss.elastic.co/t/translate-query-from-sphinx-to-elasticsearch/212005 "2019-12-19T18:11:28Z")
I work with a monitoring system and have a lot of queries on Sphinx. I need to translate Sphinx queries into elasticsearch, because we will upgrade our db on elasticsearch. For example i have query on sphinx: (Donald … --- ## [Cannot Query event.original](https://discuss.elastic.co/t/cannot-query-event-original/212524)
**Author:** [@jameswatson3](https://discuss.elastic.co/u/jameswatson3)\ **Replies:** 0\ **Last updated:** [December 19, 2019, 4:47pm UTC](https://discuss.elastic.co/t/cannot-query-event-original/212524 "2019-12-19T16:47:35Z")
I cannot query fields in documents ingested by the elasticsearch filebeat-7.5.0-cisco-ftd-asa-ftd-pipeline. I have already posted this query on the Beats forum but have received no reply so I was hoping someone here coul… --- ## [Repository-s3 plugin install fails](https://discuss.elastic.co/t/repository-s3-plugin-install-fails/212415)
**Author:** [@Kevin\_Comer](https://discuss.elastic.co/u/Kevin_Comer)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 4:06pm UTC](https://discuss.elastic.co/t/repository-s3-plugin-install-fails/212415 "2019-12-19T16:06:07Z")
I am getting a connection time out when trying to install the repository-s3 plugin using the repository for CentOS 7 I have tried several ways all using the proxy and I'm still getting a time out are there any proxy set… --- ## [How to migrate not\_analyzed ES 1.4.4-\>7.5.0](https://discuss.elastic.co/t/how-to-migrate-not-analyzed-es-1-4-4-7-5-0/212511)
**Author:** [@michalz](https://discuss.elastic.co/u/michalz)\ **Replies:** 0\ **Last updated:** [December 19, 2019, 3:40pm UTC](https://discuss.elastic.co/t/how-to-migrate-not-analyzed-es-1-4-4-7-5-0/212511 "2019-12-19T15:40:19Z")
I am migrating ES 1.4.4 to ES 7.5.0 and I get the following error in the logs: In ES 1.4.4 we had several fields of type "index";"not\_analyzed" and a few with type "index":"no" and "index":"analyzed". How to migrate th… --- ## [Creating new field by aggregating values from existing field values](https://discuss.elastic.co/t/creating-new-field-by-aggregating-values-from-existing-field-values/212498)
**Author:** [@Saptha\_AD](https://discuss.elastic.co/u/Saptha_AD)\ **Replies:** 0\ **Last updated:** [December 19, 2019, 1:28pm UTC](https://discuss.elastic.co/t/creating-new-field-by-aggregating-values-from-existing-field-values/212498 "2019-12-19T13:28:06Z")
We want to create new field as "ProcCount3minAvg" for all the documents in Elasticsearch, "ProcTime3minAvg" is avg aggregation value of a floating point field captured from logs called "ProcCount". Avg value should be t… --- ## [ES 7.5.0 gets OOM](https://discuss.elastic.co/t/es-7-5-0-gets-oom/212501)
**Author:** [@michalz](https://discuss.elastic.co/u/michalz)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 3:29pm UTC](https://discuss.elastic.co/t/es-7-5-0-gets-oom/212501 "2019-12-19T15:29:00Z")
I am new to ELK and would like to use ES in connection with Logstash. Logstash is supposed to put around 15MB of data to ES. However my ES (which is run in Docker) does not behave stable. After about few minutes the c… --- ## [SQL Structure to JSON Structure the ElasticSearch?](https://discuss.elastic.co/t/sql-structure-to-json-structure-the-elasticsearch/212037)
**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\ **Replies:** 12\ **Last updated:** [December 19, 2019, 3:28pm UTC](https://discuss.elastic.co/t/sql-structure-to-json-structure-the-elasticsearch/212037 "2019-12-19T15:28:59Z")
Hi guys, I would like to ask a question. I want to convert the mysql SQL structure to the JSON structure for elasticSearch. that is, the parameters to limit, sort, group by, select and where then you fall into the config… --- ## [Java version paid/free](https://discuss.elastic.co/t/java-version-paid-free/212352)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 3\ **Last updated:** [December 19, 2019, 2:06pm UTC](https://discuss.elastic.co/t/java-version-paid-free/212352 "2019-12-19T14:06:12Z")
is java provided by elasticsearch falls in to paid product or free version? /usr/share/elasticsearch/jdk/bin/java --- ## [Taking snapshots concurrently of each index in Elasticsearch](https://discuss.elastic.co/t/taking-snapshots-concurrently-of-each-index-in-elasticsearch/212339)
**Author:** [@ishanjain](https://discuss.elastic.co/u/ishanjain)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 2:00pm UTC](https://discuss.elastic.co/t/taking-snapshots-concurrently-of-each-index-in-elasticsearch/212339 "2019-12-19T14:00:06Z")
Hi! I have written a module which issues snapshot creation requests for an index and sends it off to a ES cluster. This module is deployed on ECS and can run issue snapshot creation requests concurrently. Right now, Th… --- ## [Watcher Actions](https://discuss.elastic.co/t/watcher-actions/212396)
**Author:** [@mord](https://discuss.elastic.co/u/mord)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 9:43am UTC](https://discuss.elastic.co/t/watcher-actions/212396 "2019-12-19T09:43:08Z")
I work with Watcher and I want to create alerts. my want is to check if the "\_id" parameter exists in index-2 from index-1. If it does not exist in, It should copy the log to that index (from 1 to 2). For example, at t… --- ## [Elasticsearch 6.8 - Indexation with alias](https://discuss.elastic.co/t/elasticsearch-6-8-indexation-with-alias/212486)
**Author:** [@hdumazeau](https://discuss.elastic.co/u/hdumazeau)\ **Replies:** 0\ **Last updated:** [December 19, 2019, 12:42pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-indexation-with-alias/212486 "2019-12-19T12:42:47Z")
Hello, I try to populate my indexes with alias, but when I add, remove, ... items during indexation, these changes are only taken into account in the old index. Is there a solution to this problem? Thank you in advanc… --- ## [TimeStamp x-axis labels filter](https://discuss.elastic.co/t/timestamp-x-axis-labels-filter/212483)
**Author:** [@Xuan\_Nam\_Dang](https://discuss.elastic.co/u/Xuan_Nam_Dang)\ **Replies:** 0\ **Last updated:** [December 19, 2019, 12:25pm UTC](https://discuss.elastic.co/t/timestamp-x-axis-labels-filter/212483 "2019-12-19T12:25:19Z")
Our visualization shows data weekly as expected, but i want to change the labels that are being shown. The labels as shown in picture are always a Sunday date, but i want to change those labels to show Monday date inst… --- ## [New Document not getting added by fscrawler](https://discuss.elastic.co/t/new-document-not-getting-added-by-fscrawler/212472)
**Author:** [@mdr\_8](https://discuss.elastic.co/u/mdr_8)\ **Replies:** 3\ **Last updated:** [December 19, 2019, 12:22pm UTC](https://discuss.elastic.co/t/new-document-not-getting-added-by-fscrawler/212472 "2019-12-19T12:22:35Z")
I have added 'Rule engine evaluation.docx' in c:\\tmp\\es I have run the 'touch' command for the above file. The file is not getting added in the index. Following is the output for fscrawler job execution for the above … --- ## [Join between two indices is possible in elasticsearch](https://discuss.elastic.co/t/join-between-two-indices-is-possible-in-elasticsearch/212170)
**Author:** [@Amit\_Chauhan](https://discuss.elastic.co/u/Amit_Chauhan)\ **Replies:** 4\ **Last updated:** [December 19, 2019, 11:29am UTC](https://discuss.elastic.co/t/join-between-two-indices-is-possible-in-elasticsearch/212170 "2019-12-19T11:29:39Z")
I want to perform join between two indecis in elasticsearch. --- ## [Get occurrence of each word in all documents](https://discuss.elastic.co/t/get-occurrence-of-each-word-in-all-documents/212468)
**Author:** [@inqom](https://discuss.elastic.co/u/inqom)\ **Replies:** 0\ **Last updated:** [December 19, 2019, 10:49am UTC](https://discuss.elastic.co/t/get-occurrence-of-each-word-in-all-documents/212468 "2019-12-19T10:49:03Z")
I have a list of words. Let's say \["House","Door"\]. I want for each word get the number of documents where this word occurs. I prefer to use only one query as my list can be huge. The response could be like this : { … --- ## [Search for words with accents with the Java API](https://discuss.elastic.co/t/search-for-words-with-accents-with-the-java-api/212343)
**Author:** [@marlonfa](https://discuss.elastic.co/u/marlonfa)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 10:54am UTC](https://discuss.elastic.co/t/search-for-words-with-accents-with-the-java-api/212343 "2019-12-19T10:54:43Z")
Hi guys I am using Java API Elasticsearch 7.4 and would like to know how to do in Java to search for texts with accents, for example: "João de Souza Antonio" But to no avail. I've tried using Term, Match, Wildcard, bu… --- ## [How to speed up aggregated query?](https://discuss.elastic.co/t/how-to-speed-up-aggregated-query/212190)
**Author:** [@111230](https://discuss.elastic.co/u/111230)\ **Replies:** 4\ **Last updated:** [December 19, 2019, 10:52am UTC](https://discuss.elastic.co/t/how-to-speed-up-aggregated-query/212190 "2019-12-19T10:52:38Z")
I have the following query: {'size': 0, 'aggs': {'count\_group': {'filters': {'filters': {'89634469': {'term': {'supplier.id': 89634469}}, '89633422': {'term': {'supplier.id': 89633422}}}}, 'aggs': {'market': {'terms':… --- ## [ES 5.6 inmemory-node recovers faster than standalone ES server](https://discuss.elastic.co/t/es-5-6-inmemory-node-recovers-faster-than-standalone-es-server/211992)
**Author:** [@kayshu](https://discuss.elastic.co/u/kayshu)\ **Replies:** 3\ **Last updated:** [December 19, 2019, 10:39am UTC](https://discuss.elastic.co/t/es-5-6-inmemory-node-recovers-faster-than-standalone-es-server/211992 "2019-12-19T10:39:30Z")
Hi, During some testing with a ES5.6 with about 4GB of data (3k shards), with an inmemory-node we are getting really fast shard recovery during startup (5 times faster than standalone ES server). A standalone ES serv… --- ## [Cannot get the Length Token Filter to work in a custom anaylzer](https://discuss.elastic.co/t/cannot-get-the-length-token-filter-to-work-in-a-custom-anaylzer/212288)
**Author:** [@Anthony\_Chiu](https://discuss.elastic.co/u/Anthony_Chiu)\ **Replies:** 5\ **Last updated:** [December 19, 2019, 10:32am UTC](https://discuss.elastic.co/t/cannot-get-the-length-token-filter-to-work-in-a-custom-anaylzer/212288 "2019-12-19T10:32:10Z")
I am setting up a filter within my index: "min-length-token":{ "type": "length", "min": 2, }, then, I add this filter to my anayzer like this: "extend-standard" : { "… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1061) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1063)