# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1187

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1188

---

## [How to insert document in index using SQL Query in elasticsearch](https://discuss.elastic.co/t/how-to-insert-document-in-index-using-sql-query-in-elasticsearch/195687)

<div class="topic-metadata">

**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\
**Replies:** 4\
**Last updated:** [August 19, 2019, 1:52pm UTC](https://discuss.elastic.co/t/how-to-insert-document-in-index-using-sql-query-in-elasticsearch/195687 "2019-08-19T13:52:11Z")

</div>

Hi All. i have written SQL Query Like below:- {"query":"select \* from index02 where id=121" } Obove is working fine but i want to insert docs inside current index02:-1: like:- {"query":"insert into index02 values(1…

---

## [Slowlog entries in default log](https://discuss.elastic.co/t/slowlog-entries-in-default-log/195752)

<div class="topic-metadata">

**Author:** [@B\_K](https://discuss.elastic.co/u/B_K)\
**Replies:** 0\
**Last updated:** [August 19, 2019, 1:39pm UTC](https://discuss.elastic.co/t/slowlog-entries-in-default-log/195752 "2019-08-19T13:39:29Z")

</div>

I find slowlog entries in the default log and the slowlog file. Not sure why - I can't figure why they're in both places. 2.4 Here's the slowlog config: index\_indexing\_slow\_log\_file: type: dailyRollingFile f…

---

## [CCR with an BI-directional replication setup and performance impact](https://discuss.elastic.co/t/ccr-with-an-bi-directional-replication-setup-and-performance-impact/195156)

<div class="topic-metadata">

**Author:** [@kley](https://discuss.elastic.co/u/kley)\
**Replies:** 2\
**Last updated:** [August 19, 2019, 1:15pm UTC](https://discuss.elastic.co/t/ccr-with-an-bi-directional-replication-setup-and-performance-impact/195156 "2019-08-19T13:15:57Z")

</div>

Hi :wave: So, we are currently performance testing our CCR setup to get some kind of understanding on how much more hardware we need to accomplish the same indexing numbers as without CCR. As said in the title, we are …

---

## [How to use PostData to send multiple items?](https://discuss.elastic.co/t/how-to-use-postdata-to-send-multiple-items/195747)

<div class="topic-metadata">

**Author:** [@StarLancer](https://discuss.elastic.co/u/StarLancer)\
**Replies:** 0\
**Last updated:** [August 19, 2019, 1:06pm UTC](https://discuss.elastic.co/t/how-to-use-postdata-to-send-multiple-items/195747 "2019-08-19T13:06:27Z")

</div>

Hi all! I need to send an array of raw data to Elastic, for this I wanted to use the auxiliary PostData class, which I pass to the Bulk method, but an error occurs when this method is called. The question is, what data …

---

## [Chained ES query/results](https://discuss.elastic.co/t/chained-es-query-results/195728)

<div class="topic-metadata">

**Author:** [@rosherd](https://discuss.elastic.co/u/rosherd)\
**Replies:** 2\
**Last updated:** [August 19, 2019, 12:47pm UTC](https://discuss.elastic.co/t/chained-es-query-results/195728 "2019-08-19T12:47:16Z")

</div>

Hi, If I have a \_location index, and a \_search index, is there a way to search the \_location index to say convert a language specific string like 'London' or 'Londres' to a number say 2543, and use this as part of the q…

---

## [How to set no of replicas to 0](https://discuss.elastic.co/t/how-to-set-no-of-replicas-to-0/195725)

<div class="topic-metadata">

**Author:** [@Shubham\_Yadav1](https://discuss.elastic.co/u/Shubham_Yadav1)\
**Replies:** 1\
**Last updated:** [August 19, 2019, 12:43pm UTC](https://discuss.elastic.co/t/how-to-set-no-of-replicas-to-0/195725 "2019-08-19T12:43:20Z")

</div>

I have setup aws elasticsearch where a new index is created everyday, when i see the index using \_cat api i see two different size of index that are store.size(7.8) pri.store.size(3.8), I think this is happening because…

---

## [Pipeline aggregation with filtering](https://discuss.elastic.co/t/pipeline-aggregation-with-filtering/195710)

<div class="topic-metadata">

**Author:** [@AdamBoi](https://discuss.elastic.co/u/AdamBoi)\
**Replies:** 0\
**Last updated:** [August 19, 2019, 9:45am UTC](https://discuss.elastic.co/t/pipeline-aggregation-with-filtering/195710 "2019-08-19T09:45:44Z")

</div>

Setup: Elasticsearch v.5.6 Document field called availabilities is the one to perform aggregation on. The desired aggregation is departure\_dates. Departure date can be calculated as follows: availabilities.arrival\_dat…

---

## [Compound word token filter: only\_longest\_match doesn't work as expected in some scenarios](https://discuss.elastic.co/t/compound-word-token-filter-only-longest-match-doesnt-work-as-expected-in-some-scenarios/195470)

<div class="topic-metadata">

**Author:** [@andrebarthelmes](https://discuss.elastic.co/u/andrebarthelmes)\
**Replies:** 1\
**Last updated:** [August 19, 2019, 11:34am UTC](https://discuss.elastic.co/t/compound-word-token-filter-only-longest-match-doesnt-work-as-expected-in-some-scenarios/195470 "2019-08-19T11:34:09Z")

</div>

Hi, I work on a german product search. To make things more clear I "translated" my problem to the following case: lets assume I have four documents each containing one of the following words in my index: "starlight" …

---

## [Cluster health endpoint responses](https://discuss.elastic.co/t/cluster-health-endpoint-responses/195726)

<div class="topic-metadata">

**Author:** [@kanadaj](https://discuss.elastic.co/u/kanadaj)\
**Replies:** 0\
**Last updated:** [August 19, 2019, 11:14am UTC](https://discuss.elastic.co/t/cluster-health-endpoint-responses/195726 "2019-08-19T11:14:49Z")

</div>

Hey there, a quick question here: I'm trying to add an automatic health check endpoint to our web application so we can indicate on our status page whether services based around ElasticSearch are down. How would the Clu…

---

## [Watcher Condition Returning "Null"](https://discuss.elastic.co/t/watcher-condition-returning-null/195640)

<div class="topic-metadata">

**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\
**Replies:** 8\
**Last updated:** [August 19, 2019, 11:08am UTC](https://discuss.elastic.co/t/watcher-condition-returning-null/195640 "2019-08-19T11:08:17Z")

</div>

Hi everyone, My condition is currently returning "null", however I know there are documents. Can you please help me in figuring out why it's returning "null"? // My watcher code thus far: // Stimulated results out…

---

## [How to limit search result size from each index in a multi index search query?](https://discuss.elastic.co/t/how-to-limit-search-result-size-from-each-index-in-a-multi-index-search-query/195722)

<div class="topic-metadata">

**Author:** [@Soumitra\_Goswami](https://discuss.elastic.co/u/Soumitra_Goswami)\
**Replies:** 0\
**Last updated:** [August 19, 2019, 11:05am UTC](https://discuss.elastic.co/t/how-to-limit-search-result-size-from-each-index-in-a-multi-index-search-query/195722 "2019-08-19T11:05:59Z")

</div>

I want to query across multiple indices and for that I am currently providing the index names as comma separated values in the url. However, setting the size parameter limits the overall result size , whereas I want say …

---

## [How to use a script field inside Aggregate?](https://discuss.elastic.co/t/how-to-use-a-script-field-inside-aggregate/191190)

<div class="topic-metadata">

**Author:** [@StarLancer](https://discuss.elastic.co/u/StarLancer)\
**Replies:** 2\
**Last updated:** [August 19, 2019, 10:50am UTC](https://discuss.elastic.co/t/how-to-use-a-script-field-inside-aggregate/191190 "2019-08-19T10:50:23Z")

</div>

Hi! I want to use script fields inside Aggregate, I wrote this query: GET test/\_search { "size":0, "query": { "bool": { "filter": \[ { "term": { "eventType": 5 } }, { "range": { "createdDate": { "gte": "20…

---

## [Elasticsearch exception "type": "illegal\_state\_exception", "reason": "only value lists are allowed in serialized settings"](https://discuss.elastic.co/t/elasticsearch-exception-type-illegal-state-exception-reason-only-value-lists-are-allowed-in-serialized-settings/195631)

<div class="topic-metadata">

**Author:** [@meena](https://discuss.elastic.co/u/meena)\
**Replies:** 4\
**Last updated:** [August 19, 2019, 10:16am UTC](https://discuss.elastic.co/t/elasticsearch-exception-type-illegal-state-exception-reason-only-value-lists-are-allowed-in-serialized-settings/195631 "2019-08-19T10:16:02Z")

</div>

Hi all, Am trying to set up the index in my new environment which is installed with elasticsearch version 6.6.1. The index is already in use in production having elasticsearch version 6.5.1. I get the following Excepti…

---

## [ElasticSearch logging configuration](https://discuss.elastic.co/t/elasticsearch-logging-configuration/195714)

<div class="topic-metadata">

**Author:** [@arpitlov09](https://discuss.elastic.co/u/arpitlov09)\
**Replies:** 0\
**Last updated:** [August 19, 2019, 10:11am UTC](https://discuss.elastic.co/t/elasticsearch-logging-configuration/195714 "2019-08-19T10:11:17Z")

</div>

ElasticSearch uses Log4j 2 to log into a file. Is there a way or configuration to make log4j log the same into Syslogs rather than in a file.

---

## [Unable to Index document for array of any data (string, object, array) together](https://discuss.elastic.co/t/unable-to-index-document-for-array-of-any-data-string-object-array-together/195702)

<div class="topic-metadata">

**Author:** [@Debashis\_Mondal](https://discuss.elastic.co/u/Debashis_Mondal)\
**Replies:** 2\
**Last updated:** [August 19, 2019, 10:05am UTC](https://discuss.elastic.co/t/unable-to-index-document-for-array-of-any-data-string-object-array-together/195702 "2019-08-19T10:05:00Z")

</div>

Hi, I am using ES-7.x, facing issue while indexing document, the data structure is like below { "field1": \[ "string" "object" "array" \] } I am using field type "nested" at the time of index creation Note: If I …

---

## [Advantages of ECS?](https://discuss.elastic.co/t/advantages-of-ecs/195699)

<div class="topic-metadata">

**Author:** [@ramanna\_hk](https://discuss.elastic.co/u/ramanna_hk)\
**Replies:** 3\
**Last updated:** [August 19, 2019, 9:54am UTC](https://discuss.elastic.co/t/advantages-of-ecs/195699 "2019-08-19T09:54:03Z")

</div>

Hello, As i understand ECS is about having proper conventions and best practices. Can you please some one explain me advantages of ECS. so that i can have clear picture of ECS. It is not module which works programatica…

---

## [Using Bucket Fields in Watcher](https://discuss.elastic.co/t/using-bucket-fields-in-watcher/195558)

<div class="topic-metadata">

**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\
**Replies:** 4\
**Last updated:** [August 19, 2019, 9:31am UTC](https://discuss.elastic.co/t/using-bucket-fields-in-watcher/195558 "2019-08-19T09:31:23Z")

</div>

Hi, My goal: To create an alert that tells me when a customer has not received a log. My problem: The name of the customer is within an aggregated field. My question: How do I retrieve the customer name and how can I …

---

## [The more I Open/Close an index, the longer it takes](https://discuss.elastic.co/t/the-more-i-open-close-an-index-the-longer-it-takes/195709)

<div class="topic-metadata">

**Author:** [@Spotich](https://discuss.elastic.co/u/Spotich)\
**Replies:** 0\
**Last updated:** [August 19, 2019, 9:36am UTC](https://discuss.elastic.co/t/the-more-i-open-close-an-index-the-longer-it-takes/195709 "2019-08-19T09:36:56Z")

</div>

Hello, I'm new to elasticsearch and I'm using it to mesure the distance between documents. I have to use the BM25 model for the similarity module. The problem comes when I have to tune the "b" and "k1" parameters. I ha…

---

## [Network.host: 0.0.0.0 is not working in elasticsearch 7.3.0](https://discuss.elastic.co/t/network-host-0-0-0-0-is-not-working-in-elasticsearch-7-3-0/195697)

<div class="topic-metadata">

**Author:** [@mostafa\_kamal](https://discuss.elastic.co/u/mostafa_kamal)\
**Replies:** 2\
**Last updated:** [August 19, 2019, 9:28am UTC](https://discuss.elastic.co/t/network-host-0-0-0-0-is-not-working-in-elasticsearch-7-3-0/195697 "2019-08-19T09:28:29Z")

</div>

Hi there, I am using two elasticsearch in two separate servers. one is 6.8.0 and other is 7.3.0. I am planning to use metricbeat on several servers and visualize in elasticsearch server by kibana. The problem is: when…

---

## [ILM - index already exists error](https://discuss.elastic.co/t/ilm-index-already-exists-error/193541)

<div class="topic-metadata">

**Author:** [@ollyw](https://discuss.elastic.co/u/ollyw)\
**Replies:** 3\
**Last updated:** [August 19, 2019, 8:45am UTC](https://discuss.elastic.co/t/ilm-index-already-exists-error/193541 "2019-08-19T08:45:19Z")

</div>

I am new to the ILM side of things and have got over a number of hurdles but now stuck! I have a set of indexes which include the date in their name e.g. logs-20190708, logs-20190709 My ILM policy has a rollover\_alias …

---

## [Compatible Log Format for Kibana and Elasticsearch](https://discuss.elastic.co/t/compatible-log-format-for-kibana-and-elasticsearch/195701)

<div class="topic-metadata">

**Author:** [@whalien52](https://discuss.elastic.co/u/whalien52)\
**Replies:** 0\
**Last updated:** [August 19, 2019, 8:30am UTC](https://discuss.elastic.co/t/compatible-log-format-for-kibana-and-elasticsearch/195701 "2019-08-19T08:30:40Z")

</div>

Hi, I want to make a log file from Uipath that will also be compatible with Kibana. Is there any way to do this manually?

---

## [Dynamic Mapping works in production?](https://discuss.elastic.co/t/dynamic-mapping-works-in-production/195674)

<div class="topic-metadata">

**Author:** [@ramanna\_hk](https://discuss.elastic.co/u/ramanna_hk)\
**Replies:** 4\
**Last updated:** [August 19, 2019, 8:08am UTC](https://discuss.elastic.co/t/dynamic-mapping-works-in-production/195674 "2019-08-19T08:08:46Z")

</div>

Hello, I am trying to onboard multiple pipelines with different fields. May know how to create mapping for each pipeline data automatically. As i know dynamic mapping will not create proper type for each field. ex: fo…

---

## [Elastisearch-keystore error](https://discuss.elastic.co/t/elastisearch-keystore-error/195683)

<div class="topic-metadata">

**Author:** [@Bob94](https://discuss.elastic.co/u/Bob94)\
**Replies:** 2\
**Last updated:** [August 19, 2019, 7:46am UTC](https://discuss.elastic.co/t/elastisearch-keystore-error/195683 "2019-08-19T07:46:37Z")

</div>

Hi all, I face some issue when i use this below command elasticsearch-keystore list And the error was like below Exception in thread "main" org.apache.lucene.index.corruptindexception: misplaced codec footer .... An…

---

## [Elastic Percentile Rank](https://discuss.elastic.co/t/elastic-percentile-rank/195446)

<div class="topic-metadata">

**Author:** [@620528](https://discuss.elastic.co/u/620528)\
**Replies:** 6\
**Last updated:** [August 19, 2019, 7:36am UTC](https://discuss.elastic.co/t/elastic-percentile-rank/195446 "2019-08-19T07:36:28Z")

</div>

I need to calculate the percentile rank of my client in a set of data when i apply a filter. For Instance when i apply a particular filter , my client might not fall in that dataset , but still i want my client to be in…

---

## [Kubernetes Helm Chart with multiple PV for data path](https://discuss.elastic.co/t/kubernetes-helm-chart-with-multiple-pv-for-data-path/190438)

<div class="topic-metadata">

**Author:** [@tgruenert](https://discuss.elastic.co/u/tgruenert)\
**Replies:** 2\
**Last updated:** [August 19, 2019, 7:25am UTC](https://discuss.elastic.co/t/kubernetes-helm-chart-with-multiple-pv-for-data-path/190438 "2019-08-19T07:25:12Z")

</div>

Hi there, is there any template or solution for defining multiple data paths within a helm chart? The question is not only about the env variable, which i am able to handle. The problem is more about defining extra vo…

---

## [Data Transhipment](https://discuss.elastic.co/t/data-transhipment/195524)

<div class="topic-metadata">

**Author:** [@Diego\_Jota](https://discuss.elastic.co/u/Diego_Jota)\
**Replies:** 1\
**Last updated:** [August 19, 2019, 7:26am UTC](https://discuss.elastic.co/t/data-transhipment/195524 "2019-08-19T07:26:28Z")

</div>

Hello, I am storing my data on a disk, for example, in C. When this disk reaches 90%, I want the new data entered to be allocated on disk D. Is there any way to configure this setting?

---

## [How to Filter the results and show certain array from the list](https://discuss.elastic.co/t/how-to-filter-the-results-and-show-certain-array-from-the-list/195542)

<div class="topic-metadata">

**Author:** [@har1pra](https://discuss.elastic.co/u/har1pra)\
**Replies:** 1\
**Last updated:** [August 19, 2019, 7:24am UTC](https://discuss.elastic.co/t/how-to-filter-the-results-and-show-certain-array-from-the-list/195542 "2019-08-19T07:24:37Z")

</div>

Hi, I am leveraging Elasticsearch logs to retrieve the critical Metrics and showing in BI tool. I am currently facing a challenge in Elasticsearch query: The json document that I am retrieving have multiple segments in…

---

## [elasticSearch installation is stuck, problem with security](https://discuss.elastic.co/t/elasticsearch-installation-is-stuck-problem-with-security/195534)

<div class="topic-metadata">

**Author:** [@Yana\_Karas](https://discuss.elastic.co/u/Yana_Karas)\
**Replies:** 1\
**Last updated:** [August 19, 2019, 7:23am UTC](https://discuss.elastic.co/t/elasticsearch-installation-is-stuck-problem-with-security/195534 "2019-08-19T07:23:14Z")

</div>

elasticsearch installation is stuck:Nothing happens after the last log,the security log \</\> \[2019-08-16T19:22:17,371\]\[INFO \]\[o.e.p.PluginsService \] \[HPC6\] loaded module \[lang-mustache\] \[2019-08-16T19:22:17,372\]\[I…

---

## [Change timestamp format for existing index](https://discuss.elastic.co/t/change-timestamp-format-for-existing-index/195593)

<div class="topic-metadata">

**Author:** [@NominaSumpta](https://discuss.elastic.co/u/NominaSumpta)\
**Replies:** 1\
**Last updated:** [August 19, 2019, 7:20am UTC](https://discuss.elastic.co/t/change-timestamp-format-for-existing-index/195593 "2019-08-19T07:20:24Z")

</div>

I read the date time is one of the only mappings that can be altered for an existing index. I'm attempting to alter the date format as follows: curl http://localhost:9200/web/\_mapping/\_timestamp?include\_type\_name=true -…

---

## [Scheduling search query in Elasticsearch](https://discuss.elastic.co/t/scheduling-search-query-in-elasticsearch/195679)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 1\
**Last updated:** [August 19, 2019, 7:04am UTC](https://discuss.elastic.co/t/scheduling-search-query-in-elasticsearch/195679 "2019-08-19T07:04:16Z")

</div>

Hi , I have a search query that has to execute everyday at 11 AM IST , Can we schedule the queries in elasticsearch? GET my-index-\*/\_search { "query": { .................... searching for something } } I don't …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1186)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1188)
