# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1063 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1064 --- ## [ELastic search reindexing automation](https://discuss.elastic.co/t/elastic-search-reindexing-automation/212393)
**Author:** [@kumar6](https://discuss.elastic.co/u/kumar6)\ **Replies:** 1\ **Last updated:** [December 19, 2019, 10:26am UTC](https://discuss.elastic.co/t/elastic-search-reindexing-automation/212393 "2019-12-19T10:26:04Z")
Hi, I ran into kibana mapping conflict issue after updating data types for some fields. The only option i have is to reindex the old data to resolve this issue. We have hourly indices with 30 days of data. Can you pl… --- ## [Cannot get to Elasticsearch on port 9200 from a remote machine](https://discuss.elastic.co/t/cannot-get-to-elasticsearch-on-port-9200-from-a-remote-machine/212406)
**Author:** [@Jorge\_Hernandez](https://discuss.elastic.co/u/Jorge_Hernandez)\ **Replies:** 1\ **Last updated:** [December 19, 2019, 10:25am UTC](https://discuss.elastic.co/t/cannot-get-to-elasticsearch-on-port-9200-from-a-remote-machine/212406 "2019-12-19T10:25:04Z")
Hey guys, I have a Linux machine running Elasticsearch, I'm trying to add a Windows machine to it to capture the logs, I installed winlogbeat to the windows machine, but when I try to run winlogbeat.exe setup, it says i… --- ## [Did I stumble across another bug? SQL select ordering on 2 fields](https://discuss.elastic.co/t/did-i-stumble-across-another-bug-sql-select-ordering-on-2-fields/212317)
**Author:** [@Skeeve](https://discuss.elastic.co/u/Skeeve)\ **Replies:** 1\ **Last updated:** [December 19, 2019, 10:10am UTC](https://discuss.elastic.co/t/did-i-stumble-across-another-bug-sql-select-ordering-on-2-fields/212317 "2019-12-19T10:10:46Z")
I tried to order an SQL query result using two fields, but it seems the ordering is only done on one field. Example data: PUT /myindex POST \_bulk { "index": { "\_index": "myindex" }} { "traphit": 1, "customer": "A", "do… --- ## [Json\_parse\_exception in elastic search](https://discuss.elastic.co/t/json-parse-exception-in-elastic-search/208887)
**Author:** [@jayasree](https://discuss.elastic.co/u/jayasree)\ **Replies:** 5\ **Last updated:** [December 19, 2019, 10:05am UTC](https://discuss.elastic.co/t/json-parse-exception-in-elastic-search/208887 "2019-12-19T10:05:46Z")
{"error":{"root\_cause":\[{"type":"json\_parse\_exception","reason":"Unrecognized character escape '&' (code 38)\\n at \[Source: org.elasticsearch.transport.netty4.ByteBufStreamInput@5c05c49d; line: 7, column: 188\]"}\] we are … --- ## [Unable to access current SAML authenticated user](https://discuss.elastic.co/t/unable-to-access-current-saml-authenticated-user/212418)
**Author:** [@sachi\_mr](https://discuss.elastic.co/u/sachi_mr)\ **Replies:** 0\ **Last updated:** [December 18, 2019, 11:08pm UTC](https://discuss.elastic.co/t/unable-to-access-current-saml-authenticated-user/212418 "2019-12-18T23:08:02Z")
Hello, I am trying to create a Kibana visualization report from 2 indices which are below Employee : Contains information about an employee Employeemanager : Contains employee id and his/her managers employeeID. I sh… --- ## [Elasticsearch problem (java)](https://discuss.elastic.co/t/elasticsearch-problem-java/212374)
**Author:** [@Labidi\_Ayoub](https://discuss.elastic.co/u/Labidi_Ayoub)\ **Replies:** 5\ **Last updated:** [December 19, 2019, 9:41am UTC](https://discuss.elastic.co/t/elasticsearch-problem-java/212374 "2019-12-19T09:41:31Z")
Hi, Can someone help me resolve this issue please. Thanks in advance ! so Weird !!! graylog server (version 2.5, os centos7) has been in production for a year !! I I didn’t understand this error !!! --- ## [Can ctx.execution\_time be formatted in Watcher?](https://discuss.elastic.co/t/can-ctx-execution-time-be-formatted-in-watcher/212258)
**Author:** [@Shaw](https://discuss.elastic.co/u/Shaw)\ **Replies:** 3\ **Last updated:** [December 19, 2019, 9:09am UTC](https://discuss.elastic.co/t/can-ctx-execution-time-be-formatted-in-watcher/212258 "2019-12-19T09:09:17Z")
Hi, I setup a Watcher and want to have a timestamp on email subject line, so I put ctx.execution\_time, any way to format the ctx.execution\_time like "2019-12-18 08:15 PM" or similar format date/time? Please advise. Cur… --- ## [Need help getting the Watcher "condition" to trigger from the JVM Heap Pct usage](https://discuss.elastic.co/t/need-help-getting-the-watcher-condition-to-trigger-from-the-jvm-heap-pct-usage/212048)
**Author:** [@dis](https://discuss.elastic.co/u/dis)\ **Replies:** 10\ **Last updated:** [December 19, 2019, 9:05am UTC](https://discuss.elastic.co/t/need-help-getting-the-watcher-condition-to-trigger-from-the-jvm-heap-pct-usage/212048 "2019-12-19T09:05:02Z")
I am not sure what I am doing wrong in getting the watcher to trigger. Each of the current three nodes has the JVM Heap Usage Pct over 25% (attached screenshot). The condition in the watcher is purposely set at \> 5% to… --- ## [Shards are not getting relocated after my cluster setup](https://discuss.elastic.co/t/shards-are-not-getting-relocated-after-my-cluster-setup/212448)
**Author:** [@das\_santosh](https://discuss.elastic.co/u/das_santosh)\ **Replies:** 1\ **Last updated:** [December 19, 2019, 9:00am UTC](https://discuss.elastic.co/t/shards-are-not-getting-relocated-after-my-cluster-setup/212448 "2019-12-19T09:00:52Z")
Hi All, I have done my 6 node ELK cluster setup and created a test index. but after i created a test index shards are not getting relocated to other node and cluster status is changing to "RED" and i am getting the bel… --- ## [Index with ! in their name cant be selected for recovering](https://discuss.elastic.co/t/index-with-in-their-name-cant-be-selected-for-recovering/212308)
**Author:** [@Pedy](https://discuss.elastic.co/u/Pedy)\ **Replies:** 3\ **Last updated:** [December 19, 2019, 8:20am UTC](https://discuss.elastic.co/t/index-with-in-their-name-cant-be-selected-for-recovering/212308 "2019-12-19T08:20:47Z")
I have an ES cluster whith indices name like web.analytics.data.api!monthly!2018-07\_v0 and doing regular snapshots/backups Now, when I want to restore all of them, all works pretty well. If I want to restore just a sp… --- ## [Incices are created with replicashards on single node cluster](https://discuss.elastic.co/t/incices-are-created-with-replicashards-on-single-node-cluster/212286)
**Author:** [@peoh](https://discuss.elastic.co/u/peoh)\ **Replies:** 11\ **Last updated:** [December 19, 2019, 7:37am UTC](https://discuss.elastic.co/t/incices-are-created-with-replicashards-on-single-node-cluster/212286 "2019-12-19T07:37:36Z")
Hi! I have found myself with a problem that I don't know how to fix, and I don't know exactly why this happens. What I have right now Elasticsearch 6.4.1 Single node cluster Indices: ~1000 Documents: ~500 000 000. … --- ## [Query with Filter not return doc](https://discuss.elastic.co/t/query-with-filter-not-return-doc/212306)
**Author:** [@Hung\_Nguyen\_Manh](https://discuss.elastic.co/u/Hung_Nguyen_Manh)\ **Replies:** 6\ **Last updated:** [December 19, 2019, 7:33am UTC](https://discuss.elastic.co/t/query-with-filter-not-return-doc/212306 "2019-12-19T07:33:28Z")
Hell everyone! I have a question. I do query filter in ES with field is "会員情報", it has value "D022FD29-DEA8-E311-947C-0626A2F00075", but not return doc. help me! pls. Thank a lot This is my query { "query": { "bool… --- ## [SQL Field aliases in ES?](https://discuss.elastic.co/t/sql-field-aliases-in-es/212401)
**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\ **Replies:** 1\ **Last updated:** [December 19, 2019, 7:09am UTC](https://discuss.elastic.co/t/sql-field-aliases-in-es/212401 "2019-12-19T07:09:31Z")
Hi guys, I am writing to make this query on how to set the aliases in the ES queries. since I want to implement the conversion from SQL to ES through a PHP plugin in development. For the application to be implemented, it… --- ## [Elasticsearch 7.4 enable x-pack kerberos authentication,elasticsearch handle two times for one post request,and the first request authencation failed,why?, this is a kind of scheduler?](https://discuss.elastic.co/t/elasticsearch-7-4-enable-x-pack-kerberos-authentication-elasticsearch-handle-two-times-for-one-post-request-and-the-first-request-authencation-failed-why-this-is-a-kind-of-scheduler/212272)
**Author:** [@jeremy2](https://discuss.elastic.co/u/jeremy2)\ **Replies:** 3\ **Last updated:** [December 19, 2019, 4:13am UTC](https://discuss.elastic.co/t/elasticsearch-7-4-enable-x-pack-kerberos-authentication-elasticsearch-handle-two-times-for-one-post-request-and-the-first-request-authencation-failed-why-this-is-a-kind-of-scheduler/212272 "2019-12-19T04:13:51Z")
enable x-pack kerberos authentication,and i debug the elasticsearch source code with following method: kinit a kerberos principal; 2.send a post request in the termination as follows: curl -XPOST --negotiate -u : "ht… --- ## [Need Hunspell Analysis in Single Token Keyword](https://discuss.elastic.co/t/need-hunspell-analysis-in-single-token-keyword/212429)
**Author:** [@Stephanus\_Budiwijaya](https://discuss.elastic.co/u/Stephanus_Budiwijaya)\ **Replies:** 0\ **Last updated:** [December 19, 2019, 3:07am UTC](https://discuss.elastic.co/t/need-hunspell-analysis-in-single-token-keyword/212429 "2019-12-19T03:07:42Z")
ES version: 5.6.3 Problem: I have a field with mappings: "keyword\_phrase\_tag": { "type": "text", "analyzer": "keyword\_phrase", "search\_analyzer": "phrase\_keyword\_analyzer" }, and then the keyword\_phrase i… --- ## [Pass params value to scripted\_metric](https://discuss.elastic.co/t/pass-params-value-to-scripted-metric/212340)
**Author:** [@prashant\_mishra1](https://discuss.elastic.co/u/prashant_mishra1)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 2:07am UTC](https://discuss.elastic.co/t/pass-params-value-to-scripted-metric/212340 "2019-12-19T02:07:59Z")
I am trying to pass value inside params field in scripted\_metric from outside (which is aggregated sum of particular column), but its not getting updated there. Please help me in this. How should I pass total\_price insid… --- ## [Reindexing data to elasticSearch cloud](https://discuss.elastic.co/t/reindexing-data-to-elasticsearch-cloud/212397)
**Author:** [@Ilyoskhuja](https://discuss.elastic.co/u/Ilyoskhuja)\ **Replies:** 0\ **Last updated:** [December 18, 2019, 8:02pm UTC](https://discuss.elastic.co/t/reindexing-data-to-elasticsearch-cloud/212397 "2019-12-18T20:02:48Z")
Continuing the discussion from Cloud elastic account,Reindex docs: until now I used elasticsearch cloud version below 7.5, and now when i tried reindex my data to Elasticsearch cloud with same code it didn't reindex, ev… --- ## [Why move shard to unassigned when the circuit breaker is open?](https://discuss.elastic.co/t/why-move-shard-to-unassigned-when-the-circuit-breaker-is-open/212085)
**Author:** [@cigarl](https://discuss.elastic.co/u/cigarl)\ **Replies:** 6\ **Last updated:** [December 19, 2019, 2:04am UTC](https://discuss.elastic.co/t/why-move-shard-to-unassigned-when-the-circuit-breaker-is-open/212085 "2019-12-19T02:04:16Z")
I find that the replica shard is moved to unassigned, when write to replica and trip to circuit-brek if i used Circuit-break based on real memory usage. This will result in many started shards being moved back to the u… --- ## [Painless new behaviour for nulls in version 7.x](https://discuss.elastic.co/t/painless-new-behaviour-for-nulls-in-version-7-x/212096)
**Author:** [@Paulo\_Henrique\_PH](https://discuss.elastic.co/u/Paulo_Henrique_PH)\ **Replies:** 1\ **Last updated:** [December 19, 2019, 1:56am UTC](https://discuss.elastic.co/t/painless-new-behaviour-for-nulls-in-version-7-x/212096 "2019-12-19T01:56:23Z")
Hi all, After the upgrade from version 6 to 7, we are experiencing a new behavior when processing aggregation. Now, whenever the Elastic comes across with a null value in a field while running a Painless script it break… --- ## [Index Lifecycle Management "does not point to index" error](https://discuss.elastic.co/t/index-lifecycle-management-does-not-point-to-index-error/211513)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 6\ **Last updated:** [December 18, 2019, 11:01pm UTC](https://discuss.elastic.co/t/index-lifecycle-management-does-not-point-to-index-error/211513 "2019-12-18T23:01:33Z")
Long story story short, I had to set setup.ilm.enabled: false in order for my beats not 404 when pushing data to my Elasticsearch stack that is behind an Apache reverse proxy. (Apache is set up to use LDAP auth, which is… --- ## [Disk space almost filled](https://discuss.elastic.co/t/disk-space-almost-filled/212413)
**Author:** [@piyush0](https://discuss.elastic.co/u/piyush0)\ **Replies:** 4\ **Last updated:** [December 18, 2019, 11:00pm UTC](https://discuss.elastic.co/t/disk-space-almost-filled/212413 "2019-12-18T23:00:45Z")
Hi I have a remote elasticsearch server set up with 1 node (I cannot ssh into this) The disk space (Total 50GB) is almost filled. Only about 1.5GB are left. But when I run \_cat/indices?v&s=store.size:desc I can see that… --- ## [Disk storage not increasing despite indexes being growing](https://discuss.elastic.co/t/disk-storage-not-increasing-despite-indexes-being-growing/211523)
**Author:** [@viniciof](https://discuss.elastic.co/u/viniciof)\ **Replies:** 13\ **Last updated:** [December 18, 2019, 10:42pm UTC](https://discuss.elastic.co/t/disk-storage-not-increasing-despite-indexes-being-growing/211523 "2019-12-18T22:42:10Z")
Hi all, Noticed today something very weird, our Logstash workers keep emitting data consistently to two of our ES clusters, rate as expected. Disk storage in one of them gets consumed as expected also, but the other … --- ## [ES "Join" making query over another query's result and aggregation](https://discuss.elastic.co/t/es-join-making-query-over-another-querys-result-and-aggregation/212407)
**Author:** [@niztal](https://discuss.elastic.co/u/niztal)\ **Replies:** 0\ **Last updated:** [December 18, 2019, 9:33pm UTC](https://discuss.elastic.co/t/es-join-making-query-over-another-querys-result-and-aggregation/212407 "2019-12-18T21:33:40Z")
Hi all, I have a use case where I want to have FTS (Full-Text-Search) over my corpus on ES which includes few documents over a single index. This part is easy, but I have another index (BTW, there may be that my design… --- ## [Some thoughts on upgrading ES](https://discuss.elastic.co/t/some-thoughts-on-upgrading-es/212400)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 0\ **Last updated:** [December 18, 2019, 8:16pm UTC](https://discuss.elastic.co/t/some-thoughts-on-upgrading-es/212400 "2019-12-18T20:16:59Z")
I've seen many questions regarding issues after upgrade. I have gone through upgrade before, so sharing my thoughts might help future ES users. DON'T upgrade in your production environment, period!!! What you need to … --- ## [Upgrade to 7.5 on Kubernetes](https://discuss.elastic.co/t/upgrade-to-7-5-on-kubernetes/212399)
**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\ **Replies:** 0\ **Last updated:** [December 18, 2019, 8:11pm UTC](https://discuss.elastic.co/t/upgrade-to-7-5-on-kubernetes/212399 "2019-12-18T20:11:06Z")
I am running elasticsearch (7.2.0) 3 nodes cluster on Kubernetes (EKS) with persistence volume. Want to upgrade it to 7.5 and was looking at Rolling upgrades procedure which is based mainly focused on non containerised … --- ## [Reindexing Error while changing the type for fields](https://discuss.elastic.co/t/reindexing-error-while-changing-the-type-for-fields/211848)
**Author:** [@kumar6](https://discuss.elastic.co/u/kumar6)\ **Replies:** 2\ **Last updated:** [December 18, 2019, 7:20pm UTC](https://discuss.elastic.co/t/reindexing-error-while-changing-the-type-for-fields/211848 "2019-12-18T19:20:14Z")
I changed the type to integer from string for some of the fields in td-agent(similar to logstash). I started seeing Mapping conflict in Kibana. Error in Kibana: 2 fields are defined as several types (string, integer, … --- ## [Show Which Terms Found in Doc when \_source disabled](https://discuss.elastic.co/t/show-which-terms-found-in-doc-when-source-disabled/212391)
**Author:** [@Derrick\_Glister](https://discuss.elastic.co/u/Derrick_Glister)\ **Replies:** 0\ **Last updated:** [December 18, 2019, 7:16pm UTC](https://discuss.elastic.co/t/show-which-terms-found-in-doc-when-source-disabled/212391 "2019-12-18T19:16:25Z")
Hi! I'm trying to parse through and index and report discovered terms in a Kibana Dashboard. My initial approach was to perform updates, but... I used someone else's code to index the data and realized too late that th… --- ## [Upsert without partial update](https://discuss.elastic.co/t/upsert-without-partial-update/212386)
**Author:** [@makitka2007](https://discuss.elastic.co/u/makitka2007)\ **Replies:** 0\ **Last updated:** [December 18, 2019, 6:44pm UTC](https://discuss.elastic.co/t/upsert-without-partial-update/212386 "2019-12-18T18:44:39Z")
hi guys let's say, i have documents with two fields - field1 and field2 i want to create a new document if it doesn't exist, and update it if it exists, but if new document is the same as existing one, i want to "noop"… --- ## [Model a Master Detail Relationship](https://discuss.elastic.co/t/model-a-master-detail-relationship/212380)
**Author:** [@luisg](https://discuss.elastic.co/u/luisg)\ **Replies:** 0\ **Last updated:** [December 18, 2019, 6:07pm UTC](https://discuss.elastic.co/t/model-a-master-detail-relationship/212380 "2019-12-18T18:07:52Z")
Hello, I'm new to ELK, can someone shed light on alternatives for modeling master detail relationships? I'm trying to use Elastic and/or Appsearch for a proof of concept where a user can search the nearest doctor's offi… --- ## [Cluster Yellow with master not discovered error and other errors after 7.4 upgrade](https://discuss.elastic.co/t/cluster-yellow-with-master-not-discovered-error-and-other-errors-after-7-4-upgrade/212378)
**Author:** [@angelESZig](https://discuss.elastic.co/u/angelESZig)\ **Replies:** 0\ **Last updated:** [December 18, 2019, 5:46pm UTC](https://discuss.elastic.co/t/cluster-yellow-with-master-not-discovered-error-and-other-errors-after-7-4-upgrade/212378 "2019-12-18T17:46:51Z")
Elasticsearch version ( bin/elasticsearch --version ): 7.4 Plugins installed : none JVM version ( java -version ):11.0.5 OS version ( uname -a if on a Unix-like system): aws ec2 linux Description of the problem i… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1062) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1064)