# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1186 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1187 --- ## [OpenJDK 64-Bit Server VM warning: Cannot open file logs/gc.log due to No such file or directory](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-cannot-open-file-logs-gc-log-due-to-no-such-file-or-directory/195887)
**Author:** [@Mike\_Fritzsche](https://discuss.elastic.co/u/Mike_Fritzsche)\ **Replies:** 1\ **Last updated:** [August 20, 2019, 11:32am UTC](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-cannot-open-file-logs-gc-log-due-to-no-such-file-or-directory/195887 "2019-08-20T11:32:29Z")
I installed on my Mac OS 14.0.6 Elasticsearch with brew. It must be ES V 6 - not 7. But I tied to install 7 too - same error. So must be problem with the jdk? I was also installing java 8 with brew (was asking to install… --- ## [Copying data from one elastic server to different elastic server for specific time interval](https://discuss.elastic.co/t/copying-data-from-one-elastic-server-to-different-elastic-server-for-specific-time-interval/195167)
**Author:** [@amit.karir](https://discuss.elastic.co/u/amit.karir)\ **Replies:** 3\ **Last updated:** [August 20, 2019, 11:25am UTC](https://discuss.elastic.co/t/copying-data-from-one-elastic-server-to-different-elastic-server-for-specific-time-interval/195167 "2019-08-20T11:25:48Z")
We have 2 different elastic search servers, both having same version(5.5.2). 1st elastic search server has latest up to date data. Second server is having stale data, which is like a back up of one weeks old data. We cop… --- ## [Ignore\_above for text datatype in elasticsearch](https://discuss.elastic.co/t/ignore-above-for-text-datatype-in-elasticsearch/195606)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 4\ **Last updated:** [August 20, 2019, 10:33am UTC](https://discuss.elastic.co/t/ignore-above-for-text-datatype-in-elasticsearch/195606 "2019-08-20T10:33:59Z")
In elasticsearch 5 string datatype has been removed as explained nicely in this blog post. ignore\_above is not supported with text datatype. Can someone let me know how does text field is then protected against Lucene’s… --- ## [Migration of dashboard from one instance to another](https://discuss.elastic.co/t/migration-of-dashboard-from-one-instance-to-another/195872)
**Author:** [@Seetharaman\_K](https://discuss.elastic.co/u/Seetharaman_K)\ **Replies:** 1\ **Last updated:** [August 20, 2019, 10:24am UTC](https://discuss.elastic.co/t/migration-of-dashboard-from-one-instance-to-another/195872 "2019-08-20T10:24:10Z")
Hi i am working on some migration project , we need to migrate kibana reports from one instance to another , the source instance is running for some time now . it has all the indices and corresponding kibana indices . … --- ## [Combining two fields into one during Reindex](https://discuss.elastic.co/t/combining-two-fields-into-one-during-reindex/194700)
**Author:** [@Nikhil04](https://discuss.elastic.co/u/Nikhil04)\ **Replies:** 10\ **Last updated:** [August 20, 2019, 10:06am UTC](https://discuss.elastic.co/t/combining-two-fields-into-one-during-reindex/194700 "2019-08-20T10:06:42Z")
Hi, We have a requirement wherein we want to combine two fields into one field during reindex. For Example: Original Index: field1: firstname field2: lastname After reindex: Name: firstname lastname I have checke… --- ## [ES requires me to specify the type of data that I do not want to index](https://discuss.elastic.co/t/es-requires-me-to-specify-the-type-of-data-that-i-do-not-want-to-index/194404)
**Author:** [@GreenX](https://discuss.elastic.co/u/GreenX)\ **Replies:** 4\ **Last updated:** [August 20, 2019, 9:36am UTC](https://discuss.elastic.co/t/es-requires-me-to-specify-the-type-of-data-that-i-do-not-want-to-index/194404 "2019-08-20T09:36:44Z")
I want to save some data just in case (Suddenly, later come in handy). I need them to not be indexed and not involved in the search. If this data is later needed, I will get it from \_source. I tried to add mapping, bu… --- ## [Can search.max\_buckets be applied per index](https://discuss.elastic.co/t/can-search-max-buckets-be-applied-per-index/195870)
**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\ **Replies:** 0\ **Last updated:** [August 20, 2019, 9:10am UTC](https://discuss.elastic.co/t/can-search-max-buckets-be-applied-per-index/195870 "2019-08-20T09:10:27Z")
I know search.max\_buckets is cluster level settings that gets applied for all indices. Can it be applied per index? --- ## [The id query will trigger refresh, but I still can't search with query qsl?](https://discuss.elastic.co/t/the-id-query-will-trigger-refresh-but-i-still-cant-search-with-query-qsl/195829)
**Author:** [@lance](https://discuss.elastic.co/u/lance)\ **Replies:** 11\ **Last updated:** [August 20, 2019, 8:56am UTC](https://discuss.elastic.co/t/the-id-query-will-trigger-refresh-but-i-still-cant-search-with-query-qsl/195829 "2019-08-20T08:56:35Z")
official documentation : the get API will issue a refresh call in-place to make the document visible. id query doc First I call the id query, then call query QSL, the official documentation says it will call refresh, b… --- ## [Hide Elasticsearch and Kibana version](https://discuss.elastic.co/t/hide-elasticsearch-and-kibana-version/195692)
**Author:** [@AdrianRyczek](https://discuss.elastic.co/u/AdrianRyczek)\ **Replies:** 4\ **Last updated:** [August 20, 2019, 7:59am UTC](https://discuss.elastic.co/t/hide-elasticsearch-and-kibana-version/195692 "2019-08-20T07:59:20Z")
Hi, I'm looking for a way to hide information about which version of Elasticsearch and Kibana we are currently using. We are using Elasticsearch and Kibana 6.4.2 version. Thanks, Adrian --- ## [Filter after aggregation](https://discuss.elastic.co/t/filter-after-aggregation/195758)
**Author:** [@ex56ri7](https://discuss.elastic.co/u/ex56ri7)\ **Replies:** 2\ **Last updated:** [August 20, 2019, 7:38am UTC](https://discuss.elastic.co/t/filter-after-aggregation/195758 "2019-08-20T07:38:33Z")
I have documents in the form of: { "result": "failure", "key": "A" } { "result": "failure", "key": "A" } { "result": "failure", "key": "A" } { "result": "failure", "key": "B" } I need to get the value … --- ## [Watcher - Not created return error](https://discuss.elastic.co/t/watcher-not-created-return-error/195763)
**Author:** [@Felipe\_Cabral\_Jeroni](https://discuss.elastic.co/u/Felipe_Cabral_Jeroni)\ **Replies:** 2\ **Last updated:** [August 20, 2019, 7:25am UTC](https://discuss.elastic.co/t/watcher-not-created-return-error/195763 "2019-08-20T07:25:51Z")
Hi guys, I've configured the elasticsearch.yml and the PUT message in order to test if I can receive some emails but I'm not receiving it and I'm getting the follow message when posting the put: { "\_id": "log\_error\_wat… --- ## [Terms Aggregation on Array of String](https://discuss.elastic.co/t/terms-aggregation-on-array-of-string/195775)
**Author:** [@Jayabal\_K](https://discuss.elastic.co/u/Jayabal_K)\ **Replies:** 1\ **Last updated:** [August 20, 2019, 7:24am UTC](https://discuss.elastic.co/t/terms-aggregation-on-array-of-string/195775 "2019-08-20T07:24:53Z")
POST /test/log { "msg": \["text","text"\] } I have indexed the above document and tried term aggregation GET /test/\_search { "aggs": { "NAME": { "terms": { "field": … --- ## [Newbie in ELK](https://discuss.elastic.co/t/newbie-in-elk/195831)
**Author:** [@sk545](https://discuss.elastic.co/u/sk545)\ **Replies:** 1\ **Last updated:** [August 20, 2019, 7:21am UTC](https://discuss.elastic.co/t/newbie-in-elk/195831 "2019-08-20T07:21:13Z")
hello "Elk"ites, I am basically new to ELK (i worked on Splunk), I need some inputs on where do I start my journey to div into ELK, any inputs would greatly be appreciated! --- ## [Using Java API multi-thread snapshot index come across concurrent snapshot execution exception](https://discuss.elastic.co/t/using-java-api-multi-thread-snapshot-index-come-across-concurrent-snapshot-execution-exception/195729)
**Author:** [@guobinhit](https://discuss.elastic.co/u/guobinhit)\ **Replies:** 2\ **Last updated:** [August 20, 2019, 7:17am UTC](https://discuss.elastic.co/t/using-java-api-multi-thread-snapshot-index-come-across-concurrent-snapshot-execution-exception/195729 "2019-08-20T07:17:57Z")
Elasticsearch version: 6.6.0 Plugins installed: install snapshot plugin in es cluster. JVM version: 1.8.0\_131 OS version: Darwin Guobin.local 16.6.0 Darwin Kernel Version 16.6.0: Fri Apr 14 16:21:16 PDT 2017; root:x… --- ## [Parallel Bulk from multiple source files](https://discuss.elastic.co/t/parallel-bulk-from-multiple-source-files/195843)
**Author:** [@David\_Samokovlisky](https://discuss.elastic.co/u/David_Samokovlisky)\ **Replies:** 1\ **Last updated:** [August 20, 2019, 5:57am UTC](https://discuss.elastic.co/t/parallel-bulk-from-multiple-source-files/195843 "2019-08-20T05:57:44Z")
I'm trying to build a parallel track, that will have 2 parallel bulk operations from two different files, using the includes-action-and-meta-data so the index\\type will be set in the data files. Will this work the way I… --- ## [Can't start ES 7.3.0 with x-pack security enabled](https://discuss.elastic.co/t/cant-start-es-7-3-0-with-x-pack-security-enabled/195742)
**Author:** [@ludaca](https://discuss.elastic.co/u/ludaca)\ **Replies:** 6\ **Last updated:** [August 20, 2019, 5:54am UTC](https://discuss.elastic.co/t/cant-start-es-7-3-0-with-x-pack-security-enabled/195742 "2019-08-20T05:54:03Z")
Hello, I'm trying to enable xpack.security in ES 7.3.0 fresh install on k8s. X-pack license type: basic My elasticsearch.yml \ cluster.name: "es7-sec" network.host: 0.0.0.0 path.logs: /var/log discovery.seed\_hos… --- ## [Is it possible : Stream 50k-100k document \< 1sec?](https://discuss.elastic.co/t/is-it-possible-stream-50k-100k-document-1sec/193640)
**Author:** [@saz](https://discuss.elastic.co/u/saz)\ **Replies:** 6\ **Last updated:** [August 20, 2019, 5:25am UTC](https://discuss.elastic.co/t/is-it-possible-stream-50k-100k-document-1sec/193640 "2019-08-20T05:25:23Z")
Hi , We have a usecase in our projects, where elasticsearch is used for search and need to send anywhere from 50,000-100,000 documents for further processing and then send to client. The response document should contai… --- ## [Composite Aggregation without "size" parameter](https://discuss.elastic.co/t/composite-aggregation-without-size-parameter/195845)
**Author:** [@lightning](https://discuss.elastic.co/u/lightning)\ **Replies:** 0\ **Last updated:** [August 20, 2019, 5:12am UTC](https://discuss.elastic.co/t/composite-aggregation-without-size-parameter/195845 "2019-08-20T05:12:28Z")
What exactly will happen if we don't use the "size" parameter when using composite aggregation? Will it aggregate all records? if yes, how does this is different compared to terms aggregation? Thank you for your answer… --- ## [Aggregate into "best fit" buckets?](https://discuss.elastic.co/t/aggregate-into-best-fit-buckets/195822)
**Author:** [@nickovs](https://discuss.elastic.co/u/nickovs)\ **Replies:** 0\ **Last updated:** [August 19, 2019, 11:44pm UTC](https://discuss.elastic.co/t/aggregate-into-best-fit-buckets/195822 "2019-08-19T23:44:23Z")
I'm looking for a way to put my data into one of a set of buckets depending on to which of a list of labels is closest to some field in each document. By way of example, say I have a geo-location point in each document a… --- ## [How can I easily use Elasticsearch libs jars (grok, dissect) in Java code?](https://discuss.elastic.co/t/how-can-i-easily-use-elasticsearch-libs-jars-grok-dissect-in-java-code/195800)
**Author:** [@Luke\_Nezda](https://discuss.elastic.co/u/Luke_Nezda)\ **Replies:** 1\ **Last updated:** [August 19, 2019, 11:40pm UTC](https://discuss.elastic.co/t/how-can-i-easily-use-elasticsearch-libs-jars-grok-dissect-in-java-code/195800 "2019-08-19T23:40:39Z")
Hello, All - I'd like to use Elasticsearch's versions of dissect and grok in my Java code. There doesn't seem to be a Maven dependency which provides this. I've managed to build the libs using gradle but I'd prefer to g… --- ## [Is it possible to customize the machine learning algorithms?](https://discuss.elastic.co/t/is-it-possible-to-customize-the-machine-learning-algorithms/194505)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 5\ **Last updated:** [August 19, 2019, 7:37pm UTC](https://discuss.elastic.co/t/is-it-possible-to-customize-the-machine-learning-algorithms/194505 "2019-08-19T19:37:21Z")
Hi Is it possible to customize the machine learning algorithms? I mean, is it possible to use my own algorithms? Thnak you --- ## [Problem attempting to migrate from self-signed SSL cert to a CA issued SSL cert](https://discuss.elastic.co/t/problem-attempting-to-migrate-from-self-signed-ssl-cert-to-a-ca-issued-ssl-cert/195575)
**Author:** [@Darrell\_Lowrance](https://discuss.elastic.co/u/Darrell_Lowrance)\ **Replies:** 2\ **Last updated:** [August 19, 2019, 4:42pm UTC](https://discuss.elastic.co/t/problem-attempting-to-migrate-from-self-signed-ssl-cert-to-a-ca-issued-ssl-cert/195575 "2019-08-19T16:42:34Z")
Elasticsearch version: 6.1.2 3 node cluster (Ubuntu 16.04) I've installed X-Pack and created a self-signed certificate following the steps at https://www.elastic.co/blog/elasticsearch-security-configure-tls-ssl-pki-aut… --- ## [Possible to restrict force merges to single ElasticSearch nodes?](https://discuss.elastic.co/t/possible-to-restrict-force-merges-to-single-elasticsearch-nodes/195790)
**Author:** [@prungta](https://discuss.elastic.co/u/prungta)\ **Replies:** 0\ **Last updated:** [August 19, 2019, 5:56pm UTC](https://discuss.elastic.co/t/possible-to-restrict-force-merges-to-single-elasticsearch-nodes/195790 "2019-08-19T17:56:14Z")
The API for forcemerge operates per index. I’d like to restrict further to only the segments on a single node. Few different reasons why I'm after this: (1) As things stand, forcemerge(s) cannot be cancelled. Isolating… --- ## [Trying to understand the behaviour of query string with double quotes](https://discuss.elastic.co/t/trying-to-understand-the-behaviour-of-query-string-with-double-quotes/195768)
**Author:** [@peidaqi](https://discuss.elastic.co/u/peidaqi)\ **Replies:** 4\ **Last updated:** [August 19, 2019, 5:20pm UTC](https://discuss.elastic.co/t/trying-to-understand-the-behaviour-of-query-string-with-double-quotes/195768 "2019-08-19T17:20:45Z")
I couldn't find a document that explains how the double quotes (exact string matches) in query strings work, so I did a bit of an experiment. Both the analyzer and search analyzer of my document field was created with a… --- ## [Payload total and output value do not match](https://discuss.elastic.co/t/payload-total-and-output-value-do-not-match/195564)
**Author:** [@Shaw](https://discuss.elastic.co/u/Shaw)\ **Replies:** 2\ **Last updated:** [August 19, 2019, 4:19pm UTC](https://discuss.elastic.co/t/payload-total-and-output-value-do-not-match/195564 "2019-08-19T16:19:05Z")
Hi, When I setup a new Watcher, the payload total has like 38 records but the output result only gives 10, even refresh every time with different total the output stays 10, is it because the Simulation Results only give… --- ## [Unable to add geo\_point mapping with sub lat/lon properties](https://discuss.elastic.co/t/unable-to-add-geo-point-mapping-with-sub-lat-lon-properties/194941)
**Author:** [@r0bot85](https://discuss.elastic.co/u/r0bot85)\ **Replies:** 9\ **Last updated:** [August 19, 2019, 3:46pm UTC](https://discuss.elastic.co/t/unable-to-add-geo-point-mapping-with-sub-lat-lon-properties/194941 "2019-08-19T15:46:36Z")
Hello, Hopefully this is an easy answer but not a stupid question. I am fairly new to the Elastick Stack in general but learning my way around. I am attempting to get a Coordinate Map visualization using the GeoIP data… --- ## [Elasticsearch 7.3.0 - AccessDeniedException: /usr/share/elasticsearch/data/nodes](https://discuss.elastic.co/t/elasticsearch-7-3-0-accessdeniedexception-usr-share-elasticsearch-data-nodes/195619)
**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\ **Replies:** 3\ **Last updated:** [August 19, 2019, 3:45pm UTC](https://discuss.elastic.co/t/elasticsearch-7-3-0-accessdeniedexception-usr-share-elasticsearch-data-nodes/195619 "2019-08-19T15:45:00Z")
Hello, I deployed elasticsearch on IBM IKS cluster but I see some java exception. Please let me know whether this is something with a specific version or different. The same version works fine on GKE. k version Client … --- ## [Investigating Search Rate Spike](https://discuss.elastic.co/t/investigating-search-rate-spike/195769)
**Author:** [@Or\_Arnon](https://discuss.elastic.co/u/Or_Arnon)\ **Replies:** 0\ **Last updated:** [August 19, 2019, 3:42pm UTC](https://discuss.elastic.co/t/investigating-search-rate-spike/195769 "2019-08-19T15:42:08Z")
Hi, Our search rare spiked and is killing our cluster What tools do I have to troubleshoot this issue? Which queries are run and by whom? Is there a way to kill them? --- ## [Documents not visible in kibana](https://discuss.elastic.co/t/documents-not-visible-in-kibana/195764)
**Author:** [@Johnathan\_Herndon](https://discuss.elastic.co/u/Johnathan_Herndon)\ **Replies:** 0\ **Last updated:** [August 19, 2019, 3:19pm UTC](https://discuss.elastic.co/t/documents-not-visible-in-kibana/195764 "2019-08-19T15:19:47Z")
Recently updated to 7.3 beats/elasticsearch/kibana. previously had 7.2 beats working with custom pipeline. I can see counters increasing on pipeline still but 7.3 documents aren't appearing in Kibana discovery. Tried … --- ## [Empty values and reload](https://discuss.elastic.co/t/empty-values-and-reload/195529)
**Author:** [@A\_Felgueiras](https://discuss.elastic.co/u/A_Felgueiras)\ **Replies:** 1\ **Last updated:** [August 19, 2019, 3:17pm UTC](https://discuss.elastic.co/t/empty-values-and-reload/195529 "2019-08-19T15:17:48Z")
Hi, I am loading datas into Elastic (stats from LDAP) and I am facing 2 problems : When, for some reasons, my stats are not generating for a day, a json with no values is pushed to Elastic, and on my dashboard a dot … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1185) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1187)