# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1074 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1075 --- ## [Deactivate watch API](https://discuss.elastic.co/t/deactivate-watch-api/210689)
**Author:** [@kurdit](https://discuss.elastic.co/u/kurdit)\ **Replies:** 1\ **Last updated:** [December 6, 2019, 12:09pm UTC](https://discuss.elastic.co/t/deactivate-watch-api/210689 "2019-12-06T12:09:44Z")
Hello! The https://www.elastic.co/guide/en/elasticsearch/reference/7.4/watcher-api-deactivate-watch.html process of deactivating the watch via CURL is described here but an example is provided for only one watcher and i… --- ## [Kibana doesn't show logstash data](https://discuss.elastic.co/t/kibana-doesnt-show-logstash-data/210858)
**Author:** [@Jeffreyshoptrader](https://discuss.elastic.co/u/Jeffreyshoptrader)\ **Replies:** 0\ **Last updated:** [December 6, 2019, 9:51am UTC](https://discuss.elastic.co/t/kibana-doesnt-show-logstash-data/210858 "2019-12-06T09:51:20Z")
Hi, I'm using the ELK stack to parse our log files. When I run it in the foreground it works, but when I run it as a service I don't see any information being displayed in Kibana. I use: systemctl start Logstash When… --- ## [Type conflicts for fields that are not indexed](https://discuss.elastic.co/t/type-conflicts-for-fields-that-are-not-indexed/210417)
**Author:** [@ninze](https://discuss.elastic.co/u/ninze)\ **Replies:** 3\ **Last updated:** [December 6, 2019, 12:01pm UTC](https://discuss.elastic.co/t/type-conflicts-for-fields-that-are-not-indexed/210417 "2019-12-06T12:01:19Z")
Hi, I am quite new to elasticsearch, excuse me if this has been answered before. Could not find the answer in the docs. I am logging some user-generated data to elasticsearch (browser fingerprint object generated by fi… --- ## [Easy way to get a terms bucket count stats?](https://discuss.elastic.co/t/easy-way-to-get-a-terms-bucket-count-stats/210523)
**Author:** [@djmcgreal](https://discuss.elastic.co/u/djmcgreal)\ **Replies:** 5\ **Last updated:** [December 6, 2019, 11:29am UTC](https://discuss.elastic.co/t/easy-way-to-get-a-terms-bucket-count-stats/210523 "2019-12-06T11:29:30Z")
Hi, We're a need to get some extended\_stats on the bucket counts of a terms aggregation, i.e. we want to know the stats (avg, stddev etc) of the frequency of terms. So we do: terms {...} extended\_stats { path:"terms.\_co… --- ## [Coordinating taking up memory](https://discuss.elastic.co/t/coordinating-taking-up-memory/210878)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 0\ **Last updated:** [December 6, 2019, 11:22am UTC](https://discuss.elastic.co/t/coordinating-taking-up-memory/210878 "2019-12-06T11:22:04Z")
Dear all In my cluster i have 2 coordinating node with 8GB of ram for some reason after i do some reindexing now the cooridinating node is constantly lack memory. So can i ask if 8GB for each is enough or do i need mo… --- ## [Configure oauth authentication in cerebro](https://discuss.elastic.co/t/configure-oauth-authentication-in-cerebro/210826)
**Author:** [@Veeresh\_Reddy](https://discuss.elastic.co/u/Veeresh_Reddy)\ **Replies:** 2\ **Last updated:** [December 6, 2019, 10:00am UTC](https://discuss.elastic.co/t/configure-oauth-authentication-in-cerebro/210826 "2019-12-06T10:00:47Z")
I would like to configure/enable oauth authentication for cerebro, can anyone let me know how to do it if that capability is available in cerebro? --- ## [Find all related documents of two related fields in an index](https://discuss.elastic.co/t/find-all-related-documents-of-two-related-fields-in-an-index/210850)
**Author:** [@samuellawrence](https://discuss.elastic.co/u/samuellawrence)\ **Replies:** 0\ **Last updated:** [December 6, 2019, 9:19am UTC](https://discuss.elastic.co/t/find-all-related-documents-of-two-related-fields-in-an-index/210850 "2019-12-06T09:19:05Z")
Hi, I am new to Elasticsearch and I need some help to retrieve related documents from Elasticsearch I have an index with the following structure | parent | child | ... | | 0000001 | 0000001 | ... | … --- ## [Elasticsearch-php scroll](https://discuss.elastic.co/t/elasticsearch-php-scroll/210845)
**Author:** [@ohollx](https://discuss.elastic.co/u/ohollx)\ **Replies:** 0\ **Last updated:** [December 6, 2019, 8:49am UTC](https://discuss.elastic.co/t/elasticsearch-php-scroll/210845 "2019-12-06T08:49:53Z")
Hi. I want to implement scrolling with elasticsearch-php Please contact us because it is not working well. Below is the source code. "scroll" =\> "30s" Add this to your search and it won't search. $params = \[ "scrol… --- ## [Minimal memory footprint](https://discuss.elastic.co/t/minimal-memory-footprint/210474)
**Author:** [@Nee\_Defeng](https://discuss.elastic.co/u/Nee_Defeng)\ **Replies:** 4\ **Last updated:** [December 6, 2019, 6:29am UTC](https://discuss.elastic.co/t/minimal-memory-footprint/210474 "2019-12-06T06:29:02Z")
hi there, I am wondering what could be the minimal memory allocated ES to be running on Windows? I tried to use this setting in the es batch script but it seems like it is using more than it is allocated: how? Thank… --- ## [Is there a way to recover index after we deleted using "DELETE /\" in console?](https://discuss.elastic.co/t/is-there-a-way-to-recover-index-after-we-deleted-using-delete-index-in-console/210722)
**Author:** [@swaym](https://discuss.elastic.co/u/swaym)\ **Replies:** 2\ **Last updated:** [December 6, 2019, 5:57am UTC](https://discuss.elastic.co/t/is-there-a-way-to-recover-index-after-we-deleted-using-delete-index-in-console/210722 "2019-12-06T05:57:47Z")
Hi All, On our production environment, my colleague was deleting the old logs using console by using command DELETE / but instead of last month, he delete this month's log. Is there any way to recover the deleted index… --- ## [Getting error org.elasticsearch.client.transport.NoNodeAvailableException while connecting to elasticseach](https://discuss.elastic.co/t/getting-error-org-elasticsearch-client-transport-nonodeavailableexception-while-connecting-to-elasticseach/210822)
**Author:** [@Pratik\_Jain](https://discuss.elastic.co/u/Pratik_Jain)\ **Replies:** 0\ **Last updated:** [December 6, 2019, 5:39am UTC](https://discuss.elastic.co/t/getting-error-org-elasticsearch-client-transport-nonodeavailableexception-while-connecting-to-elasticseach/210822 "2019-12-06T05:39:18Z")
hi, we are getting below error while connecting microservice to elasticseach failed to load elasticsearch nodes : org.elasticsearch.client.transport.NoNodeAvailableException: None of the configured nodes are available:… --- ## [Setting up Elasticsearch cluster with Kibana](https://discuss.elastic.co/t/setting-up-elasticsearch-cluster-with-kibana/210819)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 0\ **Last updated:** [December 6, 2019, 4:55am UTC](https://discuss.elastic.co/t/setting-up-elasticsearch-cluster-with-kibana/210819 "2019-12-06T04:55:00Z")
Hi Team, I have this small two node elasticsearch cluster (one master and one date node), I want to add kibana to this cluster, but my main question is how do i connect kibana to my cluster, basically to who i connect t… --- ## [Confusion about index and doc\_values](https://discuss.elastic.co/t/confusion-about-index-and-doc-values/210448)
**Author:** [@KellyK313](https://discuss.elastic.co/u/KellyK313)\ **Replies:** 1\ **Last updated:** [December 5, 2019, 3:12am UTC](https://discuss.elastic.co/t/confusion-about-index-and-doc-values/210448 "2019-12-05T03:12:36Z")
When I test the mapping parameter 'index' and 'doc\_values',I found out that when numeric type "index" set "false" and this column can not be aggregated,the result will be 0. In my opinion,I think 'index' controls the qu… --- ## [Some tests failed when running test in idea on macos](https://discuss.elastic.co/t/some-tests-failed-when-running-test-in-idea-on-macos/210704)
**Author:** [@gaobinlong](https://discuss.elastic.co/u/gaobinlong)\ **Replies:** 1\ **Last updated:** [December 6, 2019, 2:17am UTC](https://discuss.elastic.co/t/some-tests-failed-when-running-test-in-idea-on-macos/210704 "2019-12-06T02:17:30Z")
Elasticsearch Version: 7.5.0 Idea Version: 2019.1 Gradle Version : 5.6.4 OS Info : Mac OS X 10.13.6 (x86\_64) Compiler JDK Version : 12 (Oracle Corporation 12 \[OpenJDK 64-Bit Server VM 12+33\]) … --- ## [Can index.query.default\_field exclude certain fields if no field is provided in the query string](https://discuss.elastic.co/t/can-index-query-default-field-exclude-certain-fields-if-no-field-is-provided-in-the-query-string/210630)
**Author:** [@android.kc](https://discuss.elastic.co/u/android.kc)\ **Replies:** 4\ **Last updated:** [December 6, 2019, 1:09am UTC](https://discuss.elastic.co/t/can-index-query-default-field-exclude-certain-fields-if-no-field-is-provided-in-the-query-string/210630 "2019-12-06T01:09:12Z")
I am trying to ignore certain fields if no field is provided in the query string. index.query.default\_field can whitelist all the fields in an array. is there a way to blacklist certain fields, e.g. by name or by type? W… --- ## [Whether enable action.auto\_create\_index decrease performance](https://discuss.elastic.co/t/whether-enable-action-auto-create-index-decrease-performance/210795)
**Author:** [@Nathan\_Li](https://discuss.elastic.co/u/Nathan_Li)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 11:59pm UTC](https://discuss.elastic.co/t/whether-enable-action-auto-create-index-decrease-performance/210795 "2019-12-05T23:59:03Z")
I want to enable index auto-creation in our cluster, but one concern is I don't know if this will cause performance issues. Glad to know this if you have any experience with this. --- ## [Setup system IDs, encryption, and licenses.what Order?](https://discuss.elastic.co/t/setup-system-ids-encryption-and-licenses-what-order/210767)
**Author:** [@Erin](https://discuss.elastic.co/u/Erin)\ **Replies:** 1\ **Last updated:** [December 5, 2019, 11:02pm UTC](https://discuss.elastic.co/t/setup-system-ids-encryption-and-licenses-what-order/210767 "2019-12-05T23:02:53Z")
I am using elastic 7.4. I am wanting to put in my licenses userids and passwords. Also setup AD authentication and encryption of the connections. Last time on non prod servers i had an issue where i enabled security and … --- ## [Using py curator Shrink method hangs on ES 7.x AWS managed service](https://discuss.elastic.co/t/using-py-curator-shrink-method-hangs-on-es-7-x-aws-managed-service/210791)
**Author:** [@sbalaram](https://discuss.elastic.co/u/sbalaram)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 10:45pm UTC](https://discuss.elastic.co/t/using-py-curator-shrink-method-hangs-on-es-7-x-aws-managed-service/210791 "2019-12-05T22:45:24Z")
shrink using curator python never completes and the cluster status goes to unassigned shards. AWS support explanation : Cause of the issue: From ES 7.0 , Elastic deprecated the use of "copy\_settings" parameter in the s… --- ## [Data nodes being ignored by ES cluster for shard allocation](https://discuss.elastic.co/t/data-nodes-being-ignored-by-es-cluster-for-shard-allocation/210747)
**Author:** [@viniciof](https://discuss.elastic.co/u/viniciof)\ **Replies:** 4\ **Last updated:** [December 5, 2019, 8:35pm UTC](https://discuss.elastic.co/t/data-nodes-being-ignored-by-es-cluster-for-shard-allocation/210747 "2019-12-05T20:35:45Z")
Hi everyone, I have two nodes with very little number of shards allocated there, distribution across the cluster is skewed due to these two nodes. I checked and there's far enough disk space in each and also their IP… --- ## [Delete documents by query and disk storage](https://discuss.elastic.co/t/delete-documents-by-query-and-disk-storage/210746)
**Author:** [@Nonow53](https://discuss.elastic.co/u/Nonow53)\ **Replies:** 1\ **Last updated:** [December 5, 2019, 8:26pm UTC](https://discuss.elastic.co/t/delete-documents-by-query-and-disk-storage/210746 "2019-12-05T20:26:56Z")
Hi, I use Delete by Query API to delete old documents. On the monitoring console, I can see the storage size of the index was not changed. I can see the file for this index in DATA folder is still present. If the ind… --- ## [Upgrading 1.x to 7.5](https://discuss.elastic.co/t/upgrading-1-x-to-7-5/210760)
**Author:** [@Phil\_Messenger](https://discuss.elastic.co/u/Phil_Messenger)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 8:05pm UTC](https://discuss.elastic.co/t/upgrading-1-x-to-7-5/210760 "2019-12-05T20:05:24Z")
I've inherited a product that still uses Elasticsearch 1.x (don't ask!) and would like to upgrade to 7.5. From reading the documentation it seems that: upgrading from one major version to another is possible without a … --- ## [Use regexp and terms together in query](https://discuss.elastic.co/t/use-regexp-and-terms-together-in-query/210590)
**Author:** [@lorrenrules](https://discuss.elastic.co/u/lorrenrules)\ **Replies:** 3\ **Last updated:** [December 5, 2019, 6:39pm UTC](https://discuss.elastic.co/t/use-regexp-and-terms-together-in-query/210590 "2019-12-05T18:39:36Z")
Hi, I am trying to use both a regexp and a terms query in the body of my query, and can't figure out how to make it work. Goal: query: { regexp: { 'canonicalUrl.keyword… --- ## [How to sort by a property with NEST when the name is given as string? Please help](https://discuss.elastic.co/t/how-to-sort-by-a-property-with-nest-when-the-name-is-given-as-string-please-help/208696)
**Author:** [@TDev](https://discuss.elastic.co/u/TDev)\ **Replies:** 4\ **Last updated:** [December 5, 2019, 4:08pm UTC](https://discuss.elastic.co/t/how-to-sort-by-a-property-with-nest-when-the-name-is-given-as-string-please-help/208696 "2019-12-05T16:08:55Z")
This is a C# snippet of what I am trying to do: string MyProperty = "MyPropertyName"; var MyOrder = SortOrder.Ascending; Func\, Nest.IPromise\\>\> Sorting; Sorting = sort =\> sort… --- ## [Remove documents with certain conditions based on what exists in another index](https://discuss.elastic.co/t/remove-documents-with-certain-conditions-based-on-what-exists-in-another-index/210740)
**Author:** [@johanwallenborg](https://discuss.elastic.co/u/johanwallenborg)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 4:01pm UTC](https://discuss.elastic.co/t/remove-documents-with-certain-conditions-based-on-what-exists-in-another-index/210740 "2019-12-05T16:01:44Z")
Today I have two indices (Lets call them A and B). Index A contains "rawdata" and Index B is a simple index with one column with different values. What I want to do is to remove or mark documents if it contains values t… --- ## [Mapping CPE IDs to ECS?](https://discuss.elastic.co/t/mapping-cpe-ids-to-ecs/210573)
**Author:** [@jasenj1](https://discuss.elastic.co/u/jasenj1)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 3:45pm UTC](https://discuss.elastic.co/t/mapping-cpe-ids-to-ecs/210573 "2019-12-05T15:45:14Z")
My customers use CPE IDs (Common Platform Enumeration) quite a bit. For operating systems, the CPE ID can be dismantled into fields for ECS pretty 1-to-1 if desired, but for applications, I don't see a similar object. "… --- ## [Watcher query with array result](https://discuss.elastic.co/t/watcher-query-with-array-result/209849)
**Author:** [@Heatzone87](https://discuss.elastic.co/u/Heatzone87)\ **Replies:** 1\ **Last updated:** [December 5, 2019, 3:45pm UTC](https://discuss.elastic.co/t/watcher-query-with-array-result/209849 "2019-12-05T15:45:09Z")
Hey, I have a query running to monitor my stack with below content: ### Match the following condition WHEN max() OF system.filesystem.used.pct GROUPED OVER top 100 'host.hostname' IS ABOVE 0.1 FOR THE LAST 5 minutes W… --- ## [Error: 0: pyembed: No module named 'elasticsearch'](https://discuss.elastic.co/t/error-0-pyembed-no-module-named-elasticsearch/210424)
**Author:** [@nvelumani](https://discuss.elastic.co/u/nvelumani)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 2:57pm UTC](https://discuss.elastic.co/t/error-0-pyembed-no-module-named-elasticsearch/210424 "2019-12-05T14:57:05Z")
Hello Team, I have version 7.4.2 Elasticsearch and Kibana installed along with python 3.6 in a centos7 machine. When I try to create an Elasticsearch index through python code I get an error saying "Error: 0: pyembed: N… --- ## [\[7.5.0\] Transforming .raw into .keyword](https://discuss.elastic.co/t/7-5-0-transforming-raw-into-keyword/210713)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 1\ **Last updated:** [December 5, 2019, 12:55pm UTC](https://discuss.elastic.co/t/7-5-0-transforming-raw-into-keyword/210713 "2019-12-05T12:55:10Z")
Hi there! As the thread title states, my concern here is to loop through a specific index (maybe with an ingest pipeline) and - if possible - transform the nested .raw value into an equivalent .keyword value. I need th… --- ## [Failing in Mapping a doc with Multi field of boolean](https://discuss.elastic.co/t/failing-in-mapping-a-doc-with-multi-field-of-boolean/210714)
**Author:** [@afnanali1992](https://discuss.elastic.co/u/afnanali1992)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 12:52pm UTC](https://discuss.elastic.co/t/failing-in-mapping-a-doc-with-multi-field-of-boolean/210714 "2019-12-05T12:52:40Z")
Elasticsearch version ( bin/elasticsearch --version ): 6.8.5 - elastic cloud Plugins installed : \[mongoosastic\] Hello, I have a question regarding Mapping the Mixed type in ES where it doesn't support it, So we used t… --- ## [Elasticsearch X-Pack monitoring index-template](https://discuss.elastic.co/t/elasticsearch-x-pack-monitoring-index-template/210686)
**Author:** [@xtruthx](https://discuss.elastic.co/u/xtruthx)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 11:19am UTC](https://discuss.elastic.co/t/elasticsearch-x-pack-monitoring-index-template/210686 "2019-12-05T11:19:57Z")
Hello, simple question where i can find a index-template for the X-pack monitoring in a specific version. Actually i am not able to locate those specific template. Thanks for answers in advance. [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1073) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1075)