# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1170 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1171 --- ## [Integration elastalert with elasticsearch](https://discuss.elastic.co/t/integration-elastalert-with-elasticsearch/197694)
**Author:** [@zmira\_meriem](https://discuss.elastic.co/u/zmira_meriem)\ **Replies:** 2\ **Last updated:** [September 3, 2019, 2:03pm UTC](https://discuss.elastic.co/t/integration-elastalert-with-elasticsearch/197694 "2019-09-03T14:03:12Z")
hi pls help me; i use elk stack basic licence and i wana configure it with elastalert to send notofications to email how can i do that???? --- ## [JDBC Driver issues](https://discuss.elastic.co/t/jdbc-driver-issues/197732)
**Author:** [@ubi](https://discuss.elastic.co/u/ubi)\ **Replies:** 1\ **Last updated:** [September 3, 2019, 1:29pm UTC](https://discuss.elastic.co/t/jdbc-driver-issues/197732 "2019-09-03T13:29:53Z")
I'm currently facing issues while using the Elastic Cloud in conjunction with the latest JDBC Driver(7.3.1). Dispatching queries works, however, sometimes when sending a high amount of queries simultaneously, i'll rece… --- ## [How to restore deleted index in ES which has no snapshot](https://discuss.elastic.co/t/how-to-restore-deleted-index-in-es-which-has-no-snapshot/197854)
**Author:** [@qweasdzxc](https://discuss.elastic.co/u/qweasdzxc)\ **Replies:** 1\ **Last updated:** [September 3, 2019, 1:16pm UTC](https://discuss.elastic.co/t/how-to-restore-deleted-index-in-es-which-has-no-snapshot/197854 "2019-09-03T13:16:31Z")
Hi, I deleted index by mistake. I don't have snapshot but i have filesystem backup for 2 from 4 nodes. Is it possible to restore data to cluster? If yes how to do this? --- ## [Elasticsearch - return result if we have 80% overlap](https://discuss.elastic.co/t/elasticsearch-return-result-if-we-have-80-overlap/197857)
**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 12:37pm UTC](https://discuss.elastic.co/t/elasticsearch-return-result-if-we-have-80-overlap/197857 "2019-09-03T12:37:10Z")
Hello. I am trying to implement a data lookups using Logstash against some threat intelligence database from flowing proxy logs. Basically I am loading documents to ES containing malicious URLs. Then, during the log pr… --- ## [Rollover index API](https://discuss.elastic.co/t/rollover-index-api/197856)
**Author:** [@111204](https://discuss.elastic.co/u/111204)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 12:35pm UTC](https://discuss.elastic.co/t/rollover-index-api/197856 "2019-09-03T12:35:26Z")
I have configured the rollover index API for some indices. For example, the configuration of rollover conditions looks like this: { "conditions": { "max\_age": "7d", "max\_docs": 1000, "max\_size": "5gb" }… --- ## [Migrating from 5.2.2 to 7.3?](https://discuss.elastic.co/t/migrating-from-5-2-2-to-7-3/197815)
**Author:** [@mcdonnell-john](https://discuss.elastic.co/u/mcdonnell-john)\ **Replies:** 5\ **Last updated:** [September 3, 2019, 12:27pm UTC](https://discuss.elastic.co/t/migrating-from-5-2-2-to-7-3/197815 "2019-09-03T12:27:46Z")
Hi, I've been asked to investigate what I thought was an upgrade of ElasticSearch/Kibana solution(both running on Docker) from a 5.2.2 instance to a 7.3. I was looking at the upgrade instructions for ElasticSearch, and… --- ## [Find master ID](https://discuss.elastic.co/t/find-master-id/197844)
**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\ **Replies:** 1\ **Last updated:** [September 3, 2019, 12:17pm UTC](https://discuss.elastic.co/t/find-master-id/197844 "2019-09-03T12:17:25Z")
I am using elastic 7.2 and HighLevelRestClient in my JAVA project. How can I find the master node using the client? Something like \_cat/master in the Elastic REST API --- ## [(IOException while reading synonyms\_path\_path) synonym token filter configuration](https://discuss.elastic.co/t/ioexception-while-reading-synonyms-path-path-synonym-token-filter-configuration/197764)
**Author:** [@Meet\_Chaudhary](https://discuss.elastic.co/u/Meet_Chaudhary)\ **Replies:** 1\ **Last updated:** [September 3, 2019, 12:16pm UTC](https://discuss.elastic.co/t/ioexception-while-reading-synonyms-path-path-synonym-token-filter-configuration/197764 "2019-09-03T12:16:03Z")
I am using synonyms token filter with custom file installed elasticsearch 6.7 as a service on windows 10 machine my "synonyms.txt" is located at "C:\\ProgramData\\Elastic\\Elasticsearch\\config\\analysis\\synonyms.txt" here… --- ## [Unable to start Elasticsearch instance. It says Out of Memory error](https://discuss.elastic.co/t/unable-to-start-elasticsearch-instance-it-says-out-of-memory-error/197754)
**Author:** [@groverjatin17](https://discuss.elastic.co/u/groverjatin17)\ **Replies:** 4\ **Last updated:** [September 3, 2019, 10:25am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-instance-it-says-out-of-memory-error/197754 "2019-09-03T10:25:57Z")
Hi All, I am facing a serious error in my elasticsearch instance. Before I start explaining what is the error. I want to give a short info about current ecosystem i am playing with. So we have a test server(LINUX) with… --- ## [Why this range query on nested object returns uncorrect data?](https://discuss.elastic.co/t/why-this-range-query-on-nested-object-returns-uncorrect-data/197015)
**Author:** [@Bidzina\_Goginashvili](https://discuss.elastic.co/u/Bidzina_Goginashvili)\ **Replies:** 20\ **Last updated:** [August 28, 2019, 9:07pm UTC](https://discuss.elastic.co/t/why-this-range-query-on-nested-object-returns-uncorrect-data/197015 "2019-08-28T21:07:38Z")
GET bliad7/\_search { "query": {"range": { "prices.price": { "gte": 500, "lte": 600 } }} } mapping "Price" : { "type" : "nested", "properties" : { "Price" : { "type" : "double" } } }, --- ## [Cat indices API get 0 doc count index](https://discuss.elastic.co/t/cat-indices-api-get-0-doc-count-index/197769)
**Author:** [@pd\_tester](https://discuss.elastic.co/u/pd_tester)\ **Replies:** 2\ **Last updated:** [September 3, 2019, 11:02am UTC](https://discuss.elastic.co/t/cat-indices-api-get-0-doc-count-index/197769 "2019-09-03T11:02:25Z")
Hi everyone, Is it possible to have one ES call for retrieving indices with zero doc count? Scenario is we want to delete all indices with zero doc count. Is this possible in one go? Thank you --- ## [Separating the log file fields using grok debugger](https://discuss.elastic.co/t/separating-the-log-file-fields-using-grok-debugger/197826)
**Author:** [@gr1sha](https://discuss.elastic.co/u/gr1sha)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 10:56am UTC](https://discuss.elastic.co/t/separating-the-log-file-fields-using-grok-debugger/197826 "2019-09-03T10:56:45Z")
Hi there! I have logs being fed to elasticsearch index and one of the fields I have is a "message" field which contains information about particular event in live fashion. What I am trying to do is dissect this message i… --- ## [Custom analyzer to handle the aliases so that string can be searched](https://discuss.elastic.co/t/custom-analyzer-to-handle-the-aliases-so-that-string-can-be-searched/197822)
**Author:** [@vinayak](https://discuss.elastic.co/u/vinayak)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 10:37am UTC](https://discuss.elastic.co/t/custom-analyzer-to-handle-the-aliases-so-that-string-can-be-searched/197822 "2019-09-03T10:37:16Z")
{ "type" : "File", "scope" : "Business", "item" : "NAV", "object1" : "VCS\_FA\_NAV", "object2" : "VCS\_TRADE\_TRANSCATION", "query" : "LEFT OUTER JOIN VCS\_TRADE\_TRA… --- ## [Update format for an existing field of date type](https://discuss.elastic.co/t/update-format-for-an-existing-field-of-date-type/197787)
**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\ **Replies:** 3\ **Last updated:** [September 3, 2019, 10:31am UTC](https://discuss.elastic.co/t/update-format-for-an-existing-field-of-date-type/197787 "2019-09-03T10:31:53Z")
I currently use ElasticSearch 7.2.0. I followed the instructions here to update the format of an existing field of date type: { "mappings": { "properties": { "TimeStamp": { "type": "date", … --- ## [Create a service now ticket whenever an anomaly is detected in the logs](https://discuss.elastic.co/t/create-a-service-now-ticket-whenever-an-anomaly-is-detected-in-the-logs/197819)
**Author:** [@shadu88](https://discuss.elastic.co/u/shadu88)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 10:27am UTC](https://discuss.elastic.co/t/create-a-service-now-ticket-whenever-an-anomaly-is-detected-in-the-logs/197819 "2019-09-03T10:27:49Z")
Hi There, I am using ELK setup to monitor syslogs and application logs for anomaly detection in logs so I want to create a service now ticket whenever an anomaly is detected, so I was wondering if I can use watcher, ela… --- ## [What does 'IllegalStateException \[unexpected byte' error on transport client denotes?](https://discuss.elastic.co/t/what-does-illegalstateexception-unexpected-byte-error-on-transport-client-denotes/197396)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 2\ **Last updated:** [September 3, 2019, 9:55am UTC](https://discuss.elastic.co/t/what-does-illegalstateexception-unexpected-byte-error-on-transport-client-denotes/197396 "2019-09-03T09:55:06Z")
I am trying to upgrade elasticsearch from 2.3.1. I have a custom search plugin which I have rewritten. I have installed the plugin in elasticsearch and all my queries are running fine with the node client (for testing).… --- ## [Can integer types be effectively used for routing fields?](https://discuss.elastic.co/t/can-integer-types-be-effectively-used-for-routing-fields/197705)
**Author:** [@IanRC72](https://discuss.elastic.co/u/IanRC72)\ **Replies:** 4\ **Last updated:** [September 3, 2019, 9:50am UTC](https://discuss.elastic.co/t/can-integer-types-be-effectively-used-for-routing-fields/197705 "2019-09-03T09:50:59Z")
I have searched the docs and Googled, but have not found a definitive answer. My questions: Can an integer field be used for routing? If yes, does the integer size have much significance on the distribution (this is a… --- ## [Is their any way using which i can restrict the number of children doc in my parent-child mapping in elasticsearch?](https://discuss.elastic.co/t/is-their-any-way-using-which-i-can-restrict-the-number-of-children-doc-in-my-parent-child-mapping-in-elasticsearch/197805)
**Author:** [@yash.tandon](https://discuss.elastic.co/u/yash.tandon)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 9:44am UTC](https://discuss.elastic.co/t/is-their-any-way-using-which-i-can-restrict-the-number-of-children-doc-in-my-parent-child-mapping-in-elasticsearch/197805 "2019-09-03T09:44:35Z")
Please help me solve this scenario. --- ## [Cannot list index created by fluentd](https://discuss.elastic.co/t/cannot-list-index-created-by-fluentd/197789)
**Author:** [@mkain](https://discuss.elastic.co/u/mkain)\ **Replies:** 1\ **Last updated:** [September 3, 2019, 9:41am UTC](https://discuss.elastic.co/t/cannot-list-index-created-by-fluentd/197789 "2019-09-03T09:41:59Z")
Hi, I am using fluentd HTTP adapter to receive json data and dump it in elasticsearch. I can see packets are reaching elastic in n/w sniffer and there is no error in fluentd and elasticsearch log. But still I am unable… --- ## [Can i search data on hadoop using elasticsearch?](https://discuss.elastic.co/t/can-i-search-data-on-hadoop-using-elasticsearch/197780)
**Author:** [@Vinit\_Pillai](https://discuss.elastic.co/u/Vinit_Pillai)\ **Replies:** 2\ **Last updated:** [September 3, 2019, 9:29am UTC](https://discuss.elastic.co/t/can-i-search-data-on-hadoop-using-elasticsearch/197780 "2019-09-03T09:29:54Z")
I am a noob in the es-Hadoop category. I have tried to read all the documents but am still confused regarding how es-hadoop works and do I need it. The question is simple. Can I search for data on Hadoop using elastics… --- ## [Updating a document with elasticsearchjs using typescript throws error](https://discuss.elastic.co/t/updating-a-document-with-elasticsearchjs-using-typescript-throws-error/197798)
**Author:** [@manish\_kakoti](https://discuss.elastic.co/u/manish_kakoti)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 8:59am UTC](https://discuss.elastic.co/t/updating-a-document-with-elasticsearchjs-using-typescript-throws-error/197798 "2019-09-03T08:59:51Z")
I tried updating a document using elasticsearchjs, using: export async function esUpdate (index, id, body) { return es.update({ body: JSON.stringify(body), id, index, refresh: true, type: DocTyp… --- ## [Index template update overrides mapping](https://discuss.elastic.co/t/index-template-update-overrides-mapping/197784)
**Author:** [@somi](https://discuss.elastic.co/u/somi)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 8:30am UTC](https://discuss.elastic.co/t/index-template-update-overrides-mapping/197784 "2019-09-03T08:30:53Z")
Hello all, I am trying to update default apm index template's settings field by sending PUT request to the \_template endpoint. My problem is that the request overrides the mappings field as well, hence, I loose the defa… --- ## [Newest ES versions, Java 11 and heap memory size](https://discuss.elastic.co/t/newest-es-versions-java-11-and-heap-memory-size/197353)
**Author:** [@crs](https://discuss.elastic.co/u/crs)\ **Replies:** 4\ **Last updated:** [September 3, 2019, 7:38am UTC](https://discuss.elastic.co/t/newest-es-versions-java-11-and-heap-memory-size/197353 "2019-09-03T07:38:11Z")
Hi, Is there any change in recommenced settings for maximum heap size (\<32GB) since ES now supports Java 11 and G1GC ? I'd be really happy to try with more RAM allocated for heap. Also have question if anybody can poin… --- ## [\[Resolved\]\[ES7.0.1 + Anaconda(python3) + es.bulk API\] How to resolve error 'com.fasterxml.jackson.core.JsonParseException: Unrecognized token 'acknowledged': was expecting ('true', 'false' or 'null')](https://discuss.elastic.co/t/resolved-es7-0-1-anaconda-python3-es-bulk-api-how-to-resolve-error-com-fasterxml-jackson-core-jsonparseexception-unrecognized-token-acknowledged-was-expecting-true-false-or-null/197653)
**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\ **Replies:** 1\ **Last updated:** [September 3, 2019, 7:36am UTC](https://discuss.elastic.co/t/resolved-es7-0-1-anaconda-python3-es-bulk-api-how-to-resolve-error-com-fasterxml-jackson-core-jsonparseexception-unrecognized-token-acknowledged-was-expecting-true-false-or-null/197653 "2019-09-03T07:36:57Z")
Hi team, I have below code, but run with error 'com.fasterxml.jackson.core.JsonParseException: Unrecognized token 'acknowledged': was expecting ('true', 'false' or 'null')'. I can't figure out why this error happen? Ho… --- ## [How to parse SAP cfglog, errlog , pcm.log , pcmsrv.log using elasticsearch](https://discuss.elastic.co/t/how-to-parse-sap-cfglog-errlog-pcm-log-pcmsrv-log-using-elasticsearch/197774)
**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 7:28am UTC](https://discuss.elastic.co/t/how-to-parse-sap-cfglog-errlog-pcm-log-pcmsrv-log-using-elasticsearch/197774 "2019-09-03T07:28:22Z")
Hi, I want to parse cfglog, errlog , pcm.log and pcmsrv.log and store it in elasticsearch. Can you please help me how to parse such logs because i am unable to open such files in text editor also. I am unable to find sp… --- ## [How do i implement elasticsearch scripts in nodejs using elasticsearch npm](https://discuss.elastic.co/t/how-do-i-implement-elasticsearch-scripts-in-nodejs-using-elasticsearch-npm/197773)
**Author:** [@yash.tandon](https://discuss.elastic.co/u/yash.tandon)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 7:15am UTC](https://discuss.elastic.co/t/how-do-i-implement-elasticsearch-scripts-in-nodejs-using-elasticsearch-npm/197773 "2019-09-03T07:15:53Z")
I wanted to maintain a field in my ES doc that maintains the count of every time I make a request to that doc such as an update request. I am unable to make a syntax of a node query. Please help me with this. My query o… --- ## [Correct elasticsearch for google like query](https://discuss.elastic.co/t/correct-elasticsearch-for-google-like-query/197680)
**Author:** [@pd\_tester](https://discuss.elastic.co/u/pd_tester)\ **Replies:** 6\ **Last updated:** [September 3, 2019, 5:21am UTC](https://discuss.elastic.co/t/correct-elasticsearch-for-google-like-query/197680 "2019-09-03T05:21:50Z")
Hi, Can I ask your recommendation on what query should I use for google-like search on documents. Also I need support for special characters. Whenever we use or if special characters are included, our query doesn't retu… --- ## [Can someone explain to me the principle of type:text multi-fields?](https://discuss.elastic.co/t/can-someone-explain-to-me-the-principle-of-type-text-multi-fields/197757)
**Author:** [@BainDragneel](https://discuss.elastic.co/u/BainDragneel)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 5:07am UTC](https://discuss.elastic.co/t/can-someone-explain-to-me-the-principle-of-type-text-multi-fields/197757 "2019-09-03T05:07:34Z")
I dynamically insert a new index and import a data (value is String) to it (eg:{"wahahaxixi":"stahd","wahahaxiha":"1235324"} ), but I got total\_index is 4。Why is the automatically generated keyword counted in it? --- ## [Esrally压测xpack加密后的es7.2.0](https://discuss.elastic.co/t/esrally-xpack-es7-2-0/197666)
**Author:** [@rljie](https://discuss.elastic.co/u/rljie)\ **Replies:** 4\ **Last updated:** [September 3, 2019, 2:10am UTC](https://discuss.elastic.co/t/esrally-xpack-es7-2-0/197666 "2019-09-03T02:10:36Z")
我的环境是：es7.2.0，esrally1.2.1；es做了xpack加密，执行esrally命令： esrally --advanced-config --target-hosts=12.19.24.92:9200 --pipeline=benchmark-only --client-options="basic\_auth\_user:'elastic',basic\_auth\_password:'123456',use\_ssl:tr… --- ## [Where can I get 'Event Received Rate(/s)' data in .monitoring-logstash-\*?](https://discuss.elastic.co/t/where-can-i-get-event-received-rate-s-data-in-monitoring-logstash/197743)
**Author:** [@MyeongJiShin](https://discuss.elastic.co/u/MyeongJiShin)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 12:46am UTC](https://discuss.elastic.co/t/where-can-i-get-event-received-rate-s-data-in-monitoring-logstash/197743 "2019-09-03T00:46:52Z")
Hi, I have a question. I wanna get event data like these from elasticsearch api.(Event Received Rate, Events Emitted Rate, Event Latency) So, I think these datas are right things about in the previous picture. But, … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1169) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1171)