# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1070 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1071 --- ## [Get Alert per Log of All Indexes - Watcher](https://discuss.elastic.co/t/get-alert-per-log-of-all-indexes-watcher/211446)
**Author:** [@mord](https://discuss.elastic.co/u/mord)\ **Replies:** 0\ **Last updated:** [December 11, 2019, 10:11am UTC](https://discuss.elastic.co/t/get-alert-per-log-of-all-indexes-watcher/211446 "2019-12-11T10:11:45Z")
Get Alert per Log of All Indexes - Watcher --- ## [Fetch records with Group by with Completion Suggester](https://discuss.elastic.co/t/fetch-records-with-group-by-with-completion-suggester/211278)
**Author:** [@vishal\_chauhan](https://discuss.elastic.co/u/vishal_chauhan)\ **Replies:** 2\ **Last updated:** [December 11, 2019, 9:59am UTC](https://discuss.elastic.co/t/fetch-records-with-group-by-with-completion-suggester/211278 "2019-12-11T09:59:43Z")
{ "XYZ": { "mappings": { "properties": { "customerInfo": { "properties": { "emailList": { "type": "text", "fields": { "keyword": { "type": "keyword" } } }, "id": { "type": "text", "fields": { "completion… --- ## [Synonym search not working with abbreviations](https://discuss.elastic.co/t/synonym-search-not-working-with-abbreviations/211285)
**Author:** [@sandeepv](https://discuss.elastic.co/u/sandeepv)\ **Replies:** 1\ **Last updated:** [December 11, 2019, 9:51am UTC](https://discuss.elastic.co/t/synonym-search-not-working-with-abbreviations/211285 "2019-12-11T09:51:55Z")
I am trying to implement synonyms in Elasticsearch below are my settings PUT /my\_index { "settings": { "index": { "analysis": { "filter": { "synonym\_filter": { "type": "synonym"… --- ## [Elasticsearch doesn't see the new node](https://discuss.elastic.co/t/elasticsearch-doesnt-see-the-new-node/210916)
**Author:** [@ishv](https://discuss.elastic.co/u/ishv)\ **Replies:** 3\ **Last updated:** [December 11, 2019, 9:22am UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-see-the-new-node/210916 "2019-12-11T09:22:43Z")
I've started two separate elastic instances that point out to a single node, here is my changed configs: elasticsearch.yml (1) cluster.name: ivan-cluster node.name: node-1 discovery.seed\_hosts: \["localhost"\] elasticse… --- ## [What's faster /index/\_doc/id or /index/\_search with id query](https://discuss.elastic.co/t/whats-faster-index-doc-id-or-index-search-with-id-query/211297)
**Author:** [@henryn73](https://discuss.elastic.co/u/henryn73)\ **Replies:** 3\ **Last updated:** [December 11, 2019, 9:13am UTC](https://discuss.elastic.co/t/whats-faster-index-doc-id-or-index-search-with-id-query/211297 "2019-12-11T09:13:15Z")
If you are looking for a document based on id, what is faster and why: /index/\_doc/id -\> i would think it is, but maybe under covers it is the same as /index/\_search {"query" : {"terms" : { "\_id": ..... any reason on… --- ## [Email configuration steps in ELK](https://discuss.elastic.co/t/email-configuration-steps-in-elk/211290)
**Author:** [@sankarn](https://discuss.elastic.co/u/sankarn)\ **Replies:** 1\ **Last updated:** [December 11, 2019, 8:49am UTC](https://discuss.elastic.co/t/email-configuration-steps-in-elk/211290 "2019-12-11T08:49:12Z")
Hi team, We would like to add SMTP email notification in kibana dashboard. Kindly help up with proper steps Regards, Sankar --- ## [Can I update analyzer in field without recreating the index?](https://discuss.elastic.co/t/can-i-update-analyzer-in-field-without-recreating-the-index/210182)
**Author:** [@ysunil702](https://discuss.elastic.co/u/ysunil702)\ **Replies:** 3\ **Last updated:** [December 11, 2019, 8:48am UTC](https://discuss.elastic.co/t/can-i-update-analyzer-in-field-without-recreating-the-index/210182 "2019-12-11T08:48:25Z")
Following index is created. "ticketId": { "type": "text", "fields": { "completion": { "type": "completion", "analyzer": "simple", "preserve\_separators": tru… --- ## [Which node connects to email server?](https://discuss.elastic.co/t/which-node-connects-to-email-server/211341)
**Author:** [@dchan08](https://discuss.elastic.co/u/dchan08)\ **Replies:** 1\ **Last updated:** [December 11, 2019, 8:43am UTC](https://discuss.elastic.co/t/which-node-connects-to-email-server/211341 "2019-12-11T08:43:54Z")
Hi, I have configured watcher email setting in elasticserach to send mails, currently i have 3 master nodes and 12 other nodes and all of them can reach the email server. The setup is working fine, now, I am planning to … --- ## [Tons of "tried to reload watch " errors](https://discuss.elastic.co/t/tons-of-tried-to-reload-watch-errors/211380)
**Author:** [@horstuff](https://discuss.elastic.co/u/horstuff)\ **Replies:** 0\ **Last updated:** [December 10, 2019, 9:50pm UTC](https://discuss.elastic.co/t/tons-of-tried-to-reload-watch-errors/211380 "2019-12-10T21:50:24Z")
We are having sporadic outages, and looking at the logs there are a TON of errors like below, happening all day every day… what are they? Timestamp Level Instance / Zone Message Dec 10, 2019, 9:44:30 PM UTC ERROR i2 \[t… --- ## [ELK OS Suggestion](https://discuss.elastic.co/t/elk-os-suggestion/211387)
**Author:** [@SteveP](https://discuss.elastic.co/u/SteveP)\ **Replies:** 1\ **Last updated:** [December 11, 2019, 8:37am UTC](https://discuss.elastic.co/t/elk-os-suggestion/211387 "2019-12-11T08:37:21Z")
I notice that ELK is supported on a number of Linux platforms but is there a recommended OS for first time use? I want to build an ELK stack as separate vms. --- ## [Any examples on similarity search using vectors?](https://discuss.elastic.co/t/any-examples-on-similarity-search-using-vectors/211397)
**Author:** [@Senthil\_Kannan](https://discuss.elastic.co/u/Senthil_Kannan)\ **Replies:** 1\ **Last updated:** [December 11, 2019, 8:33am UTC](https://discuss.elastic.co/t/any-examples-on-similarity-search-using-vectors/211397 "2019-12-11T08:33:24Z")
Hello I read the article - https://www.elastic.co/blog/text-similarity-search-with-vectors-in-elasticsearch and interested to try it out in our company. Any examples on sample implementation would be helpful thanks SK … --- ## [Elasticsearch \_stats api metric questions](https://discuss.elastic.co/t/elasticsearch-stats-api-metric-questions/211429)
**Author:** [@sujieim](https://discuss.elastic.co/u/sujieim)\ **Replies:** 0\ **Last updated:** [December 11, 2019, 8:08am UTC](https://discuss.elastic.co/t/elasticsearch-stats-api-metric-questions/211429 "2019-12-11T08:08:49Z")
Hi, I am using \_stats API for collecting cluster metrics. I cannot find enough information on details of each metrics, and so having trouble to use those on a monitoring server. I assumed certain fields are accumul… --- ## [Reindex from 5 to 6 to remove \_type](https://discuss.elastic.co/t/reindex-from-5-to-6-to-remove-type/211381)
**Author:** [@eee](https://discuss.elastic.co/u/eee)\ **Replies:** 1\ **Last updated:** [December 11, 2019, 7:54am UTC](https://discuss.elastic.co/t/reindex-from-5-to-6-to-remove-type/211381 "2019-12-11T07:54:26Z")
Hello, I'm trying to basically follow the instructions here https://discuss.elastic.co/t/dec-15th-2017-en-elasticsearch-going-from-multiple-types-to-one-type-with-the-reindex-api/111315 except that I'm using "\_doc" inst… --- ## [Set passwords with a script](https://discuss.elastic.co/t/set-passwords-with-a-script/211376)
**Author:** [@eoli3n](https://discuss.elastic.co/u/eoli3n)\ **Replies:** 1\ **Last updated:** [December 11, 2019, 7:48am UTC](https://discuss.elastic.co/t/set-passwords-with-a-script/211376 "2019-12-11T07:48:43Z")
Hi, I want to set passwords using password API. I saw that method to set passwords : https://discuss.elastic.co/t/how-to-set-passwords-for-built-in-users-in-batch-mode/119655/5 As i use docker elasticsearch, i setted … --- ## [Unable to create snapshot repository](https://discuss.elastic.co/t/unable-to-create-snapshot-repository/210544)
**Author:** [@Joseph\_Raj](https://discuss.elastic.co/u/Joseph_Raj)\ **Replies:** 5\ **Last updated:** [December 11, 2019, 7:41am UTC](https://discuss.elastic.co/t/unable-to-create-snapshot-repository/210544 "2019-12-11T07:41:55Z")
As im in process of backup of cluster, so i tried to create repository under specific location by adding the below line in elasticsearch.yml path.repo: \["/mount/backups"\] After adding the line, i have restarted the n… --- ## [How to import json file to Elasticsearch](https://discuss.elastic.co/t/how-to-import-json-file-to-elasticsearch/210976)
**Author:** [@Ahmet\_Kartal](https://discuss.elastic.co/u/Ahmet_Kartal)\ **Replies:** 4\ **Last updated:** [December 11, 2019, 7:12am UTC](https://discuss.elastic.co/t/how-to-import-json-file-to-elasticsearch/210976 "2019-12-11T07:12:25Z")
Hi, I have 1 billion json data. I want to import these data to my local elasticsearch. All the documents in one json file. What is the easiest way to do that? I have tried this but did not work for me: curl -XPOST http:… --- ## [关于formXcontent如何使用的问题](https://discuss.elastic.co/t/formxcontent/211409)
**Author:** [@401825317](https://discuss.elastic.co/u/401825317)\ **Replies:** 0\ **Last updated:** [December 11, 2019, 5:05am UTC](https://discuss.elastic.co/t/formxcontent/211409 "2019-12-11T05:05:29Z")
我遇到一个问题，我希望把一个基础的bool查询分别赋值给多个对象使用，现在不知道怎么实现深拷贝，因为boolquery没有实现序列化，所以想到了转成json，然后再转成一个新的boolquery对象，遇到了现在这个问题，这是我的实现：https://elasticsearch.cn/uploads/questions/20191211/ebea6831c99e34c907a697dc2304c59f.png 堆栈信息如下: java… --- ## [Unable to access elasticsearch from other system using IP address](https://discuss.elastic.co/t/unable-to-access-elasticsearch-from-other-system-using-ip-address/211222)
**Author:** [@kolathaya](https://discuss.elastic.co/u/kolathaya)\ **Replies:** 4\ **Last updated:** [December 11, 2019, 4:36am UTC](https://discuss.elastic.co/t/unable-to-access-elasticsearch-from-other-system-using-ip-address/211222 "2019-12-11T04:36:15Z")
I installed elasticsearch in windows 2012 server and I can access https://localhost:9200, but I can not access using IP address even from the same server . The elasticsearch.yml file content as below. I tried network.ho… --- ## [Document level metadata in elastic](https://discuss.elastic.co/t/document-level-metadata-in-elastic/211403)
**Author:** [@Koushik\_Das](https://discuss.elastic.co/u/Koushik_Das)\ **Replies:** 0\ **Last updated:** [December 11, 2019, 2:53am UTC](https://discuss.elastic.co/t/document-level-metadata-in-elastic/211403 "2019-12-11T02:53:47Z")
My requirement is very simple. I want to store metadata in document level and that could be of any json structure. I want to check any option by which I can seperate it out from fulltext content. Search should work o… --- ## [Change the timestamp format in Watcher](https://discuss.elastic.co/t/change-the-timestamp-format-in-watcher/210612)
**Author:** [@Karrie\_Koo](https://discuss.elastic.co/u/Karrie_Koo)\ **Replies:** 4\ **Last updated:** [December 11, 2019, 1:46am UTC](https://discuss.elastic.co/t/change-the-timestamp-format-in-watcher/210612 "2019-12-11T01:46:40Z")
"actions": { "log\_error": { "logging": { "category": "watcher.logging.bppm.None", "level": "info", "text": "Found {{ctx.payload.hits.total}} exception in the server logs (EAP)\\n{{#ctx.payload.hits.hits}}\[MINOR\] {{\_s… --- ## [Performance issue with terms sub-aggregations when using global ordinals](https://discuss.elastic.co/t/performance-issue-with-terms-sub-aggregations-when-using-global-ordinals/211393)
**Author:** [@avencar](https://discuss.elastic.co/u/avencar)\ **Replies:** 0\ **Last updated:** [December 10, 2019, 11:42pm UTC](https://discuss.elastic.co/t/performance-issue-with-terms-sub-aggregations-when-using-global-ordinals/211393 "2019-12-10T23:42:47Z")
I am seeing poor performance when using the GlobalOrdinalsStringTermsAggregator in sub-aggregations, in comparison to the StringTermsAggregation. In particular, when doing a GlobalOrdinalsStringTermsAggregation as a sub-… --- ## [The data you are seeing might be incomplete or wrong](https://discuss.elastic.co/t/the-data-you-are-seeing-might-be-incomplete-or-wrong/211386)
**Author:** [@t3fsx](https://discuss.elastic.co/u/t3fsx)\ **Replies:** 0\ **Last updated:** [December 10, 2019, 10:38pm UTC](https://discuss.elastic.co/t/the-data-you-are-seeing-might-be-incomplete-or-wrong/211386 "2019-12-10T22:38:50Z")
Hi, Recently delete an index with DELETE filebeat-7.5.0-2019.12.03-000001 and now I'm having all sorts of different issues with searching and visualizations. The data you are seeing might be incomplete or wrong. Is a … --- ## [Can re-index be used to "copy" an index?](https://discuss.elastic.co/t/can-re-index-be-used-to-copy-an-index/211359)
**Author:** [@hjiop\_oop](https://discuss.elastic.co/u/hjiop_oop)\ **Replies:** 3\ **Last updated:** [December 10, 2019, 7:03pm UTC](https://discuss.elastic.co/t/can-re-index-be-used-to-copy-an-index/211359 "2019-12-10T19:03:52Z")
Hi, Can I use re-index to clone one whole index A into index B? Using elasticsearch python API. Thanks, hj --- ## [Example of Spark/EShadoop query counting distinct host.hostname](https://discuss.elastic.co/t/example-of-spark-eshadoop-query-counting-distinct-host-hostname/211369)
**Author:** [@Saas\_Cloud\_Security](https://discuss.elastic.co/u/Saas_Cloud_Security)\ **Replies:** 0\ **Last updated:** [December 10, 2019, 7:34pm UTC](https://discuss.elastic.co/t/example-of-spark-eshadoop-query-counting-distinct-host-hostname/211369 "2019-12-10T19:34:10Z")
I would like to count the # of distinct host.hostname in a 50G Elasticsearch index. Do you have an example that I model after? --- ## [APM Index Went Warm Without Rolling Over](https://discuss.elastic.co/t/apm-index-went-warm-without-rolling-over/210228)
**Author:** [@palkema](https://discuss.elastic.co/u/palkema)\ **Replies:** 2\ **Last updated:** [December 10, 2019, 7:16pm UTC](https://discuss.elastic.co/t/apm-index-went-warm-without-rolling-over/210228 "2019-12-10T19:16:47Z")
Hi, There was an issue with my APM indexes in that rolling over was disabled. They all went warm without rolling over. I updated the index so it allows writes and updated the ILM policy to allow rolling over. For the l… --- ## [Dynamically create nested objects from a log record](https://discuss.elastic.co/t/dynamically-create-nested-objects-from-a-log-record/211357)
**Author:** [@agx](https://discuss.elastic.co/u/agx)\ **Replies:** 0\ **Last updated:** [December 10, 2019, 6:30pm UTC](https://discuss.elastic.co/t/dynamically-create-nested-objects-from-a-log-record/211357 "2019-12-10T18:30:05Z")
i'm having trouble wrapping my head around how i would go about transforming some items in a log line into nested objects (or whether it's even worthwhile) its a custom NGINX log that logs upstream connections and the t… --- ## [How to set task description when doing custom queries?](https://discuss.elastic.co/t/how-to-set-task-description-when-doing-custom-queries/211344)
**Author:** [@nuketro0p3r](https://discuss.elastic.co/u/nuketro0p3r)\ **Replies:** 0\ **Last updated:** [December 10, 2019, 5:37pm UTC](https://discuss.elastic.co/t/how-to-set-task-description-when-doing-custom-queries/211344 "2019-12-10T17:37:28Z")
Is it possible to set the description for tasks launch by queries like /update\_by\_script? Thanks --- ## [Version conflict engine exception when elasticsearch is upgraded to 7.5.0](https://discuss.elastic.co/t/version-conflict-engine-exception-when-elasticsearch-is-upgraded-to-7-5-0/211327)
**Author:** [@sharmila.dev](https://discuss.elastic.co/u/sharmila.dev)\ **Replies:** 0\ **Last updated:** [December 10, 2019, 3:50pm UTC](https://discuss.elastic.co/t/version-conflict-engine-exception-when-elasticsearch-is-upgraded-to-7-5-0/211327 "2019-12-10T15:50:15Z")
Hi, Im seeing the following error only in the master node when upgrading elastcisearch from 7.4.0 to 7.5.0. FAILED! =\> {"changed": false, "content": "{\\"error\\":{\\"root\_cause\\":\[{\\"type\\":\\"version\_conflict\_engine\_exce… --- ## [ECS: example of error.code, error.id?](https://discuss.elastic.co/t/ecs-example-of-error-code-error-id/211320)
**Author:** [@Petr\_Valasek](https://discuss.elastic.co/u/Petr_Valasek)\ **Replies:** 0\ **Last updated:** [December 10, 2019, 2:40pm UTC](https://discuss.elastic.co/t/ecs-example-of-error-code-error-id/211320 "2019-12-10T14:40:18Z")
Hi there, In the ECS field reference, the error.code is defined as Error code describing the error. and error.id is Unique identifier for the error. Can anyone give me examples of values for these fields? --- ## [Change remplica number in elasticsearch templates (Beats/Logstash/ES setup)](https://discuss.elastic.co/t/change-remplica-number-in-elasticsearch-templates-beats-logstash-es-setup/211313)
**Author:** [@lseab](https://discuss.elastic.co/u/lseab)\ **Replies:** 0\ **Last updated:** [December 10, 2019, 2:19pm UTC](https://discuss.elastic.co/t/change-remplica-number-in-elasticsearch-templates-beats-logstash-es-setup/211313 "2019-12-10T14:19:01Z")
Hi there, I am new to Elasticsearch and I currently have a setup with a number of machines with beats installed (filebeat and metricbeat), outputting to logstash, which in turn outputs to my single ES node. As I only ha… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1069) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1071)