# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1132

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1133

---

## [Creating Search Query Based on Conditional Logic: A & B & C & (D | (E & F))](https://discuss.elastic.co/t/creating-search-query-based-on-conditional-logic-a-b-c-d-e-f/202555)

<div class="topic-metadata">

**Author:** [@ethanwicker](https://discuss.elastic.co/u/ethanwicker)\
**Replies:** 2\
**Last updated:** [October 7, 2019, 8:18pm UTC](https://discuss.elastic.co/t/creating-search-query-based-on-conditional-logic-a-b-c-d-e-f/202555 "2019-10-07T20:18:58Z")

</div>

Hi, thanks for your time. I'm having a bit of trouble creating a search query based on conditional logic. Via a search query, I am fetching anomalies from the .ml-anomalies-shared index. I have a variety of anomaly de…

---

## [ES - xpack & https](https://discuss.elastic.co/t/es-xpack-https/202581)

<div class="topic-metadata">

**Author:** [@NewmazN24](https://discuss.elastic.co/u/NewmazN24)\
**Replies:** 1\
**Last updated:** [October 7, 2019, 7:30pm UTC](https://discuss.elastic.co/t/es-xpack-https/202581 "2019-10-07T19:30:44Z")

</div>

Hello folks, Once again I am turning to you. My SSL/TLS works. However when I add my HTTPS, it fails. I have added my certificate password with the command from the link below. I use the same cert for my TLS & HTTPS. E…

---

## [Healthy cluster is completely hosed by one node failing](https://discuss.elastic.co/t/healthy-cluster-is-completely-hosed-by-one-node-failing/202434)

<div class="topic-metadata">

**Author:** [@joshuacox](https://discuss.elastic.co/u/joshuacox)\
**Replies:** 5\
**Last updated:** [October 7, 2019, 5:41pm UTC](https://discuss.elastic.co/t/healthy-cluster-is-completely-hosed-by-one-node-failing/202434 "2019-10-07T17:41:56Z")

</div>

Help! I am running a kubernetes cluster with elastic on it and ran into this master\_not\_discovered\_exception error recently. I created the cluster using these steps: # chart.monitaur.net helm repo add elastic http…

---

## [1 Node gets stuck with high load and 0% disk idle](https://discuss.elastic.co/t/1-node-gets-stuck-with-high-load-and-0-disk-idle/202458)

<div class="topic-metadata">

**Author:** [@sanktanglia](https://discuss.elastic.co/u/sanktanglia)\
**Replies:** 2\
**Last updated:** [October 7, 2019, 5:35pm UTC](https://discuss.elastic.co/t/1-node-gets-stuck-with-high-load-and-0-disk-idle/202458 "2019-10-07T17:35:25Z")

</div>

Im running a 3 node cluster of ES 6.5.4 in AWS on c5.xlarge nodes with 700 GB drives with 3000 provisioned iops. Our cluster holds almost 1 billion documents and can handle alot of search and index most of the time. Some…

---

## [No longer seeing nginx log indexes after ILM deployed](https://discuss.elastic.co/t/no-longer-seeing-nginx-log-indexes-after-ilm-deployed/202564)

<div class="topic-metadata">

**Author:** [@maxhyjal](https://discuss.elastic.co/u/maxhyjal)\
**Replies:** 0\
**Last updated:** [October 7, 2019, 4:02pm UTC](https://discuss.elastic.co/t/no-longer-seeing-nginx-log-indexes-after-ilm-deployed/202564 "2019-10-07T16:02:43Z")

</div>

Hey all, after I set up the index lifecycle management system in ELK stack, I can no longer see the nginx indexes generated in Kibana, can anyone point out what I might have done wrong? My setting on filebeat: setup.il…

---

## [Update By Query & Version Conflicts](https://discuss.elastic.co/t/update-by-query-version-conflicts/202054)

<div class="topic-metadata">

**Author:** [@Chris\_White](https://discuss.elastic.co/u/Chris_White)\
**Replies:** 1\
**Last updated:** [October 7, 2019, 3:59pm UTC](https://discuss.elastic.co/t/update-by-query-version-conflicts/202054 "2019-10-07T15:59:46Z")

</div>

I've just been stung by running an update-by-query where the Java Client API (High Level REST) has a query build method of setMaxRetries - but in fact update-by-query does not support retries - it's up to the developer t…

---

## [CAN'T CONNECT TO 127.0.0.1:9200](https://discuss.elastic.co/t/cant-connect-to-127-0-0-1-9200/201627)

<div class="topic-metadata">

**Author:** [@Shodipo\_Samuel](https://discuss.elastic.co/u/Shodipo_Samuel)\
**Replies:** 6\
**Last updated:** [October 7, 2019, 2:58pm UTC](https://discuss.elastic.co/t/cant-connect-to-127-0-0-1-9200/201627 "2019-10-07T14:58:21Z")

</div>

Sep 30 12:49:00 elasticsearch elasticsearch\[3281\]: 2019-09-30 12:49:00,460 main ERROR Null object returned for RollingFile in Appenders. Sep 30 12:49:00 elasticsearch elasticsearch\[3281\]: 2019-09-30 12:49:00,461 main ER…

---

## [Complicated aggregation query in period interval](https://discuss.elastic.co/t/complicated-aggregation-query-in-period-interval/202450)

<div class="topic-metadata">

**Author:** [@sevatal](https://discuss.elastic.co/u/sevatal)\
**Replies:** 2\
**Last updated:** [October 7, 2019, 2:26pm UTC](https://discuss.elastic.co/t/complicated-aggregation-query-in-period-interval/202450 "2019-10-07T14:26:29Z")

</div>

We want to save historical information on a specific entity-type that our system creates and modify. This data will be used to run analytics and show charts about statistics over time. For simplicity let’s say it’s a Us…

---

## [Getting task details from the RestHighLevelClient](https://discuss.elastic.co/t/getting-task-details-from-the-resthighlevelclient/202543)

<div class="topic-metadata">

**Author:** [@Tristan\_Larouanne](https://discuss.elastic.co/u/Tristan_Larouanne)\
**Replies:** 0\
**Last updated:** [October 7, 2019, 1:36pm UTC](https://discuss.elastic.co/t/getting-task-details-from-the-resthighlevelclient/202543 "2019-10-07T13:36:14Z")

</div>

Context: I want to reindex a (remote) index, with the JAVA client (RestHighLevelClient, right ?) using the client version 7.2.1 (but I can probably upgrade if needed). Also, I want to use a wait\_for\_completion=false to…

---

## [Elasticsearch Filter query log](https://discuss.elastic.co/t/elasticsearch-filter-query-log/200690)

<div class="topic-metadata">

**Author:** [@thiraj89](https://discuss.elastic.co/u/thiraj89)\
**Replies:** 0\
**Last updated:** [September 23, 2019, 12:20pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-query-log/200690 "2019-09-23T12:20:06Z")

</div>

Is it possible to log the filter query from Kibana in Elasticsearch?

---

## [Self type join in elasticsearch](https://discuss.elastic.co/t/self-type-join-in-elasticsearch/202487)

<div class="topic-metadata">

**Author:** [@ducanh2110](https://discuss.elastic.co/u/ducanh2110)\
**Replies:** 4\
**Last updated:** [October 7, 2019, 1:30pm UTC](https://discuss.elastic.co/t/self-type-join-in-elasticsearch/202487 "2019-10-07T13:30:25Z")

</div>

Hi, I have a question about child-parent join in Elasticsearch, I have a real model like Category and Product. "categoryRelations": { "type": "join", "eager\_global\_ordinals": true, "relations": { "category": \[ "pro…

---

## [Simple way for users to enter alter or delete entries in elasticsearch?](https://discuss.elastic.co/t/simple-way-for-users-to-enter-alter-or-delete-entries-in-elasticsearch/202533)

<div class="topic-metadata">

**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\
**Replies:** 0\
**Last updated:** [October 7, 2019, 12:58pm UTC](https://discuss.elastic.co/t/simple-way-for-users-to-enter-alter-or-delete-entries-in-elasticsearch/202533 "2019-10-07T12:58:25Z")

</div>

Hello, I am looking for a simple way that my users can alter, delete and add entries in Elasticsearch. I have tried Conveyor and Dejavu but none of them are what my users would be able to use to do what they need. I'm …

---

## [Create multiple document depending on conditions](https://discuss.elastic.co/t/create-multiple-document-depending-on-conditions/202534)

<div class="topic-metadata">

**Author:** [@JjOon](https://discuss.elastic.co/u/JjOon)\
**Replies:** 0\
**Last updated:** [October 7, 2019, 1:00pm UTC](https://discuss.elastic.co/t/create-multiple-document-depending-on-conditions/202534 "2019-10-07T13:00:58Z")

</div>

Hi there ! I am quite new with Elastic. I would like to know if there is a functionnality allowing to create multiple index depending on a condition ? (like an update\_by\_query can do) My problem is the following one : …

---

## [java.lang.NoClassDefFoundError: org/elasticsearch/action/GenericAction](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-org-elasticsearch-action-genericaction/202475)

<div class="topic-metadata">

**Author:** [@Milind\_Kaklij](https://discuss.elastic.co/u/Milind_Kaklij)\
**Replies:** 5\
**Last updated:** [October 7, 2019, 12:58pm UTC](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-org-elasticsearch-action-genericaction/202475 "2019-10-07T12:58:56Z")

</div>

Hello Experts, I am getting "java.lang.NoClassDefFoundError: org/elasticsearch/action/GenericAction" while creating index via JAVA API with all 7.0+ ES versions . I decompiled its library but dont see GenericAction…

---

## [\[interval\] on \[date\_histogram\] is deprecated, use \[fixed\_interval\] or \[calendar\_interval\] in the future](https://discuss.elastic.co/t/interval-on-date-histogram-is-deprecated-use-fixed-interval-or-calendar-interval-in-the-future/202372)

<div class="topic-metadata">

**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\
**Replies:** 1\
**Last updated:** [October 7, 2019, 12:56pm UTC](https://discuss.elastic.co/t/interval-on-date-histogram-is-deprecated-use-fixed-interval-or-calendar-interval-in-the-future/202372 "2019-10-07T12:56:48Z")

</div>

We Updated a QA ELK stack to ES 7.3.2 and since then then this message is all over the ES logs. \[interval\] on \[date\_histogram\] is deprecated, use \[fixed\_interval\] or \[calendar\_interval\] in the future. According to this…

---

## [Trouble defining the dynamic mapping for the structured json document](https://discuss.elastic.co/t/trouble-defining-the-dynamic-mapping-for-the-structured-json-document/202384)

<div class="topic-metadata">

**Author:** [@Balu\_P](https://discuss.elastic.co/u/Balu_P)\
**Replies:** 1\
**Last updated:** [October 7, 2019, 12:54pm UTC](https://discuss.elastic.co/t/trouble-defining-the-dynamic-mapping-for-the-structured-json-document/202384 "2019-10-07T12:54:16Z")

</div>

this is my mapping file defined { "dynamic": false, "dynamic\_templates": \[ { "product\_core\_attributes": { "path\_match": "product\_attributes.\*.values", "path\_unmatch": "product\_attributes.\*…

---

## [Using mattermost webhook for watcher](https://discuss.elastic.co/t/using-mattermost-webhook-for-watcher/202415)

<div class="topic-metadata">

**Author:** [@Khanh\_Le](https://discuss.elastic.co/u/Khanh_Le)\
**Replies:** 1\
**Last updated:** [October 7, 2019, 12:52pm UTC](https://discuss.elastic.co/t/using-mattermost-webhook-for-watcher/202415 "2019-10-07T12:52:00Z")

</div>

Hi all, Currently, i want to use the watcher to alerting through mattermost webhook. But i know that it only support slack,mail, HipChat and PagerDuty. I still not find out the way using on mattermost alerting. Can anyb…

---

## [Math in watch email](https://discuss.elastic.co/t/math-in-watch-email/198699)

<div class="topic-metadata">

**Author:** [@anon42972578](https://discuss.elastic.co/u/anon42972578)\
**Replies:** 5\
**Last updated:** [October 7, 2019, 12:33pm UTC](https://discuss.elastic.co/t/math-in-watch-email/198699 "2019-10-07T12:33:08Z")

</div>

Hello, I want to do math in my watcher, but i am not able to do it. I have already configured a watcher, that works as it should but the output in the email (ctx.payload.result) looks like this: 16.236 Is it possible…

---

## [Initial data load / full reindexing from MySQL to Elasticsearch](https://discuss.elastic.co/t/initial-data-load-full-reindexing-from-mysql-to-elasticsearch/200942)

<div class="topic-metadata">

**Author:** [@Priya\_Gupta](https://discuss.elastic.co/u/Priya_Gupta)\
**Replies:** 5\
**Last updated:** [October 7, 2019, 12:20pm UTC](https://discuss.elastic.co/t/initial-data-load-full-reindexing-from-mysql-to-elasticsearch/200942 "2019-10-07T12:20:48Z")

</div>

Hello, I am trying to design an initial data load and full reindexing (in the event of document schema change) solution for my Elasticsearch service. Source of truth for all data is MySQL, search related data will be st…

---

## [Indexing very large and searchable documents](https://discuss.elastic.co/t/indexing-very-large-and-searchable-documents/202527)

<div class="topic-metadata">

**Author:** [@mmaury](https://discuss.elastic.co/u/mmaury)\
**Replies:** 0\
**Last updated:** [October 7, 2019, 12:18pm UTC](https://discuss.elastic.co/t/indexing-very-large-and-searchable-documents/202527 "2019-10-07T12:18:11Z")

</div>

Hi there ! Has someone already tried to index very large documents in Elasticsearch (\>300Mo) ? When we try, we've got an OutOfMemoryException, with GC messages. \[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[KR7Jg8N\] \[gc\]\[1395…

---

## [Watcher with proxy issue](https://discuss.elastic.co/t/watcher-with-proxy-issue/199957)

<div class="topic-metadata">

**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\
**Replies:** 14\
**Last updated:** [October 7, 2019, 12:17pm UTC](https://discuss.elastic.co/t/watcher-with-proxy-issue/199957 "2019-10-07T12:17:09Z")

</div>

Dear All, I am trying to configure watcher with webhook API via Kibana to create alert. I am using proxy. The webhook is failing with "failed to send request to "servicenow:443/api..." and also with a "received 503 sta…

---

## [Dramatic performance degradation on range queries after upgrade ES from 2.4 to 7.1](https://discuss.elastic.co/t/dramatic-performance-degradation-on-range-queries-after-upgrade-es-from-2-4-to-7-1/201132)

<div class="topic-metadata">

**Author:** [@einfoman](https://discuss.elastic.co/u/einfoman)\
**Replies:** 18\
**Last updated:** [October 7, 2019, 12:06pm UTC](https://discuss.elastic.co/t/dramatic-performance-degradation-on-range-queries-after-upgrade-es-from-2-4-to-7-1/201132 "2019-10-07T12:06:43Z")

</div>

Hi, I have an elasticsearch cluster of version 2.4 (lucene version 5.5.4). Near I installed a new cluster of version 7.1 (lucene version 8.1.0) and indexed all data (~2.7 billion documents). Both of cluster use Java 1.8…

---

## [Transport.publish\_address was printed as \[ip:port\] instead of \[hostname/ip:port\]](https://discuss.elastic.co/t/transport-publish-address-was-printed-as-ip-port-instead-of-hostname-ip-port/202519)

<div class="topic-metadata">

**Author:** [@dsosunov](https://discuss.elastic.co/u/dsosunov)\
**Replies:** 5\
**Last updated:** [October 7, 2019, 12:04pm UTC](https://discuss.elastic.co/t/transport-publish-address-was-printed-as-ip-port-instead-of-hostname-ip-port/202519 "2019-10-07T12:04:46Z")

</div>

We recently deploy a new cluster v7.4 and receiving very strange deprecation warnings. \[2019-10-07T07:08:33,504\]\[WARN \]\[o.e.d.t.TransportInfo \] \[node-01.example.com\] transport.publish\_address was printed as \[ip:port\]…

---

## [How to monitor LDAP?](https://discuss.elastic.co/t/how-to-monitor-ldap/202514)

<div class="topic-metadata">

**Author:** [@Hamad\_Almogbl](https://discuss.elastic.co/u/Hamad_Almogbl)\
**Replies:** 0\
**Last updated:** [October 7, 2019, 11:03am UTC](https://discuss.elastic.co/t/how-to-monitor-ldap/202514 "2019-10-07T11:03:23Z")

</div>

Hello everyone, I would like to know how to get the metrics of LDAP. There is no modules for LDAP, so what to do ? does JMX for jolokia module work ? Thank you

---

## [Cannot create a repository in Elasticsearch in order to take a backup](https://discuss.elastic.co/t/cannot-create-a-repository-in-elasticsearch-in-order-to-take-a-backup/201353)

<div class="topic-metadata">

**Author:** [@ion\_popa](https://discuss.elastic.co/u/ion_popa)\
**Replies:** 2\
**Last updated:** [October 7, 2019, 10:44am UTC](https://discuss.elastic.co/t/cannot-create-a-repository-in-elasticsearch-in-order-to-take-a-backup/201353 "2019-10-07T10:44:43Z")

</div>

Hello Elastic community, I'm unable to create a repository in order to take a backup of my cluster. I do have root permissions to the cluster and yes, a backup share has been created which is shared across all nodes on …

---

## [Sampler aggregation fails to optimize queries](https://discuss.elastic.co/t/sampler-aggregation-fails-to-optimize-queries/201946)

<div class="topic-metadata">

**Author:** [@eladempow](https://discuss.elastic.co/u/eladempow)\
**Replies:** 7\
**Last updated:** [October 7, 2019, 10:35am UTC](https://discuss.elastic.co/t/sampler-aggregation-fails-to-optimize-queries/201946 "2019-10-07T10:35:49Z")

</div>

I need to calculate some metrics for a dashboard view of a ~30gb index. As I understand it, the sampler aggregation can be used to perform faster calculations on a small sample of the data, but the performance I get is …

---

## [Right way to achieve some sort of "reverse minimum should match = 100%"](https://discuss.elastic.co/t/right-way-to-achieve-some-sort-of-reverse-minimum-should-match-100/202290)

<div class="topic-metadata">

**Author:** [@babayotakun](https://discuss.elastic.co/u/babayotakun)\
**Replies:** 2\
**Last updated:** [October 7, 2019, 10:05am UTC](https://discuss.elastic.co/t/right-way-to-achieve-some-sort-of-reverse-minimum-should-match-100/202290 "2019-10-07T10:05:26Z")

</div>

Hi In our project we often dealing with logic like "full document field should be present in the lookup query". We've developed number of solutions for this (usage of highlighter, generation of tons of queries with all…

---

## [Unable to run Elasticsearch upgrade with docker](https://discuss.elastic.co/t/unable-to-run-elasticsearch-upgrade-with-docker/202508)

<div class="topic-metadata">

**Author:** [@imran-baig-se](https://discuss.elastic.co/u/imran-baig-se)\
**Replies:** 0\
**Last updated:** [October 7, 2019, 9:16am UTC](https://discuss.elastic.co/t/unable-to-run-elasticsearch-upgrade-with-docker/202508 "2019-10-07T09:16:20Z")

</div>

Hello there, after I try to upgrade from 6.8.0 to 7.3.2 . was getting java warrings $ sudo docker-compose up Starting elasticsearch ... done Attaching to elasticsearch elasticsearch | OpenJDK 64-Bit Serve…

---

## [Elasticsearch server is not running up for Elasticsearch oss 7.1.0, 7.0.1, 7.1.1](https://discuss.elastic.co/t/elasticsearch-server-is-not-running-up-for-elasticsearch-oss-7-1-0-7-0-1-7-1-1/202476)

<div class="topic-metadata">

**Author:** [@aditya127](https://discuss.elastic.co/u/aditya127)\
**Replies:** 3\
**Last updated:** [October 7, 2019, 9:09am UTC](https://discuss.elastic.co/t/elasticsearch-server-is-not-running-up-for-elasticsearch-oss-7-1-0-7-0-1-7-1-1/202476 "2019-10-07T09:09:47Z")

</div>

When running the elasticsearch.bat file for the above versions, the terminal gets closed and server doesnot start

---

## [Can I have cluster formation with AWS node and local server node (with public IP)?](https://discuss.elastic.co/t/can-i-have-cluster-formation-with-aws-node-and-local-server-node-with-public-ip/202505)

<div class="topic-metadata">

**Author:** [@sahidul](https://discuss.elastic.co/u/sahidul)\
**Replies:** 0\
**Last updated:** [October 7, 2019, 9:06am UTC](https://discuss.elastic.co/t/can-i-have-cluster-formation-with-aws-node-and-local-server-node-with-public-ip/202505 "2019-10-07T09:06:09Z")

</div>

Hello, I wanted to have a cluster formation where one node in AWS (EC2 instance) and the other node in a local server with public IP assigned. I have installed Elasticsearch-7.4.0 on both servers (Ubuntu server). Local…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1131)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1133)
