# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1188

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1189

---

## [How to Enable/Disable watchers automatically](https://discuss.elastic.co/t/how-to-enable-disable-watchers-automatically/195681)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 1\
**Last updated:** [August 19, 2019, 7:03am UTC](https://discuss.elastic.co/t/how-to-enable-disable-watchers-automatically/195681 "2019-08-19T07:03:13Z")

</div>

Hi, We are Alerting our customers when there is a problem in their infrastructure,Basically we are using ELK as a Monitoring solution. We are having around 300+ watcher to notify when something goes wrong based on diff…

---

## [Cloud elastic account,Reindex docs](https://discuss.elastic.co/t/cloud-elastic-account-reindex-docs/194177)

<div class="topic-metadata">

**Author:** [@Ilyoskhuja](https://discuss.elastic.co/u/Ilyoskhuja)\
**Replies:** 8\
**Last updated:** [August 19, 2019, 7:00am UTC](https://discuss.elastic.co/t/cloud-elastic-account-reindex-docs/194177 "2019-08-19T07:00:48Z")

</div>

I use cloud.elastic.co, my first account working (with reindexing docs and search) , but now I created new account with same version I didnt change reindexing code but i got error 2019-08-06 22:56:40.131 +05:00 \[…

---

## [Using scripts to prevent data rewriting](https://discuss.elastic.co/t/using-scripts-to-prevent-data-rewriting/195371)

<div class="topic-metadata">

**Author:** [@korjavin](https://discuss.elastic.co/u/korjavin)\
**Replies:** 3\
**Last updated:** [August 19, 2019, 6:56am UTC](https://discuss.elastic.co/t/using-scripts-to-prevent-data-rewriting/195371 "2019-08-19T06:56:37Z")

</div>

My index has a field DateSeen with the timestamp. . I want to prevent rewriting of index documents if DateSeen is before one that stored. I try to achieve this with a script like this: POST \_scripts/check\_date {"scrip…

---

## [\_cat/indices?v - no winlogbeat](https://discuss.elastic.co/t/cat-indices-v-no-winlogbeat/194701)

<div class="topic-metadata">

**Author:** [@james\_007](https://discuss.elastic.co/u/james_007)\
**Replies:** 4\
**Last updated:** [August 19, 2019, 6:46am UTC](https://discuss.elastic.co/t/cat-indices-v-no-winlogbeat/194701 "2019-08-19T06:46:39Z")

</div>

Hi All. first time with this ELK system, running WS2016, i have installed Kibana, logstash and winlogbeat, all version 7.3 all of the services are up and working. \_cat/indices?v health status index uui…

---

## [Find documents which don't have some field in the doc](https://discuss.elastic.co/t/find-documents-which-dont-have-some-field-in-the-doc/195106)

<div class="topic-metadata">

**Author:** [@ab\_cd](https://discuss.elastic.co/u/ab_cd)\
**Replies:** 5\
**Last updated:** [August 19, 2019, 6:45am UTC](https://discuss.elastic.co/t/find-documents-which-dont-have-some-field-in-the-doc/195106 "2019-08-19T06:45:44Z")

</div>

I'm trying to differentiate between documents that have some field but the value is not set, and the documents that don't have value. I was thinking about term query and script fields but both don't seem to let me achiev…

---

## [How minimum should match works in elasticsearch search](https://discuss.elastic.co/t/how-minimum-should-match-works-in-elasticsearch-search/194353)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 2\
**Last updated:** [August 19, 2019, 6:31am UTC](https://discuss.elastic.co/t/how-minimum-should-match-works-in-elasticsearch-search/194353 "2019-08-19T06:31:30Z")

</div>

Hi Team, I am tryining to use minimum should match on match\_phrase search I have to search for \[STUCK\] EcexuteThreads from the below line out of my data \<\[STUCK\] ExecuteThread: '3' for queue: 'weblogic.kernel.Default…

---

## [Encryption at rest what features comes under the same](https://discuss.elastic.co/t/encryption-at-rest-what-features-comes-under-the-same/194987)

<div class="topic-metadata">

**Author:** [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\
**Replies:** 5\
**Last updated:** [August 19, 2019, 6:09am UTC](https://discuss.elastic.co/t/encryption-at-rest-what-features-comes-under-the-same/194987 "2019-08-19T06:09:20Z")

</div>

Hi, I have activated trial version of elastic search and i want explore on encryption at rest. Requesting anyone to please answer the below queries : I dint find any documentation from elastic site. Where is the offic…

---

## [Elasticsearch stop working after enable x-pack](https://discuss.elastic.co/t/elasticsearch-stop-working-after-enable-x-pack/194955)

<div class="topic-metadata">

**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\
**Replies:** 46\
**Last updated:** [August 19, 2019, 5:56am UTC](https://discuss.elastic.co/t/elasticsearch-stop-working-after-enable-x-pack/194955 "2019-08-19T05:56:22Z")

</div>

I want kibana to ask for the password every time i use it, so i came up with this x-pack thing and tried to enable x-pack in elasticsearch, my bin folder haver x-pack-env, x-pack-security-env, x-pack-watcher-env i did ch…

---

## [Copy data to new index and change data type](https://discuss.elastic.co/t/copy-data-to-new-index-and-change-data-type/195671)

<div class="topic-metadata">

**Author:** [@Koshur](https://discuss.elastic.co/u/Koshur)\
**Replies:** 0\
**Last updated:** [August 19, 2019, 5:16am UTC](https://discuss.elastic.co/t/copy-data-to-new-index-and-change-data-type/195671 "2019-08-19T05:16:51Z")

</div>

I need to change data types of two of my fields. From string to object From Nested (array) to object. I understand that this cannot be changed within the same index and I would have to use \_REINDEX. I am been trying …

---

## [Search failing Elasticsearch](https://discuss.elastic.co/t/search-failing-elasticsearch/195616)

<div class="topic-metadata">

**Author:** [@w0lfxpunk](https://discuss.elastic.co/u/w0lfxpunk)\
**Replies:** 1\
**Last updated:** [August 19, 2019, 4:26am UTC](https://discuss.elastic.co/t/search-failing-elasticsearch/195616 "2019-08-19T04:26:17Z")

</div>

Dear All, I have integrated elasticsearch with magento2 following all the official documents. I can see indices are being created , but whenever I try to search anything I get below error \[DEBUG\]\[o.e.a.s.Transpor…

---

## [Elasticsearch 7.3 Heap Usage](https://discuss.elastic.co/t/elasticsearch-7-3-heap-usage/195543)

<div class="topic-metadata">

**Author:** [@Spock\_Tgai](https://discuss.elastic.co/u/Spock_Tgai)\
**Replies:** 3\
**Last updated:** [August 19, 2019, 1:42am UTC](https://discuss.elastic.co/t/elasticsearch-7-3-heap-usage/195543 "2019-08-19T01:42:55Z")

</div>

Hi, We are running the latest version of elasticsearch on 16GB box with 8GB allocated to the heap. Previously the same was running elasticsearch 6.5 The heap does not seem to be reducing this is the pattern we see over …

---

## [Elasticsearch custom ILM](https://discuss.elastic.co/t/elasticsearch-custom-ilm/195659)

<div class="topic-metadata">

**Author:** [@darrylrmiles](https://discuss.elastic.co/u/darrylrmiles)\
**Replies:** 4\
**Last updated:** [August 18, 2019, 11:59pm UTC](https://discuss.elastic.co/t/elasticsearch-custom-ilm/195659 "2019-08-18T23:59:45Z")

</div>

Hello, I am attempting to setup custom indexes for winlogbeat via logstash using ILM settings in the elasticsearch output. I would like to use the default template for winlogbeat (winlogbeat-7.3.0) but have different c…

---

## [Bulkload performance issue](https://discuss.elastic.co/t/bulkload-performance-issue/195595)

<div class="topic-metadata">

**Author:** [@hjj1000](https://discuss.elastic.co/u/hjj1000)\
**Replies:** 1\
**Last updated:** [August 17, 2019, 2:43pm UTC](https://discuss.elastic.co/t/bulkload-performance-issue/195595 "2019-08-17T14:43:24Z")

</div>

Now we used JAVA to bulk load documents to Elasticsearch. We planned to import 10m documents each document size is almost 8M. Now we only can import 400K documents each day/ 5 documents every second. Our ES infrastructur…

---

## [Update timestamp of logs already indexed into ES](https://discuss.elastic.co/t/update-timestamp-of-logs-already-indexed-into-es/195656)

<div class="topic-metadata">

**Author:** [@Anwar\_Ahmed\_Sayed](https://discuss.elastic.co/u/Anwar_Ahmed_Sayed)\
**Replies:** 2\
**Last updated:** [August 18, 2019, 5:56pm UTC](https://discuss.elastic.co/t/update-timestamp-of-logs-already-indexed-into-es/195656 "2019-08-18T17:56:07Z")

</div>

hi, wondering a best approach to update timestamp of logs already indexed into ES. the new value should be \_timestamp = field1.value + field3.value. @timestamp = August 18th 2019, 11:29:58.271 field1\_time = August 1…

---

## [Incorrect geo\_shape results in both es6.x and 7.x](https://discuss.elastic.co/t/incorrect-geo-shape-results-in-both-es6-x-and-7-x/195386)

<div class="topic-metadata">

**Author:** [@nickoneill](https://discuss.elastic.co/u/nickoneill)\
**Replies:** 14\
**Last updated:** [August 18, 2019, 5:47pm UTC](https://discuss.elastic.co/t/incorrect-geo-shape-results-in-both-es6-x-and-7-x/195386 "2019-08-18T17:47:22Z")

</div>

I'm still seeing the same incorrect shape query behavior that I saw back to ES 1.7 after starting fresh on es 6.7 and 7.x (hosted by elastic.co). Here is the relevant data: Documents with WKT shape data for NY and CT st…

---

## [Setting up ES multiple Instances on Windows Platform](https://discuss.elastic.co/t/setting-up-es-multiple-instances-on-windows-platform/195627)

<div class="topic-metadata">

**Author:** [@AmarjeetSingh](https://discuss.elastic.co/u/AmarjeetSingh)\
**Replies:** 0\
**Last updated:** [August 18, 2019, 3:27am UTC](https://discuss.elastic.co/t/setting-up-es-multiple-instances-on-windows-platform/195627 "2019-08-18T03:27:41Z")

</div>

I am not able to run multiple ES instances on one windows server I want to run multiple ES instances through multiple ES services. I know on paper that you need to config different settings for Path & Data & have dif…

---

## [Why is it so hard to just grab a file and upload to Elasticsearch?](https://discuss.elastic.co/t/why-is-it-so-hard-to-just-grab-a-file-and-upload-to-elasticsearch/195392)

<div class="topic-metadata">

**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\
**Replies:** 6\
**Last updated:** [August 18, 2019, 3:12am UTC](https://discuss.elastic.co/t/why-is-it-so-hard-to-just-grab-a-file-and-upload-to-elasticsearch/195392 "2019-08-18T03:12:13Z")

</div>

so, I was wondering this today: why is it so hard to just grab a log file and punch it into Elasticsearch? I understand when you need to setup Filebeat listeners, other beats, some Logstash pipelines and such... but what…

---

## [Elasticsearch support for ceph storage](https://discuss.elastic.co/t/elasticsearch-support-for-ceph-storage/195551)

<div class="topic-metadata">

**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\
**Replies:** 1\
**Last updated:** [August 17, 2019, 7:20pm UTC](https://discuss.elastic.co/t/elasticsearch-support-for-ceph-storage/195551 "2019-08-17T19:20:04Z")

</div>

Hi, Does elasticsearch support ceph storage? Are there any tests of elasticsearch conducted on ceph wrt functionality, performance? Thanks, Shivani

---

## [Data Relocation](https://discuss.elastic.co/t/data-relocation/195615)

<div class="topic-metadata">

**Author:** [@Diego\_Jota](https://discuss.elastic.co/u/Diego_Jota)\
**Replies:** 1\
**Last updated:** [August 17, 2019, 7:13pm UTC](https://discuss.elastic.co/t/data-relocation/195615 "2019-08-17T19:13:48Z")

</div>

Hello, I am storing my data on a disk, for example, in C. When this disk reaches 90%, I want the new data entered to be allocated on disk D. Is there any way to configure this setting?

---

## [Elasticsearch downloadable documentation](https://discuss.elastic.co/t/elasticsearch-downloadable-documentation/195602)

<div class="topic-metadata">

**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\
**Replies:** 1\
**Last updated:** [August 17, 2019, 4:07pm UTC](https://discuss.elastic.co/t/elasticsearch-downloadable-documentation/195602 "2019-08-17T16:07:35Z")

</div>

Does anyone know if is there a way to get a downloadable version of elasticsearch documentation ? This has been asked in stackoverflow also. Just posting it here if anyone is aware of anything.

---

## [Unexpected search response for nested objects](https://discuss.elastic.co/t/unexpected-search-response-for-nested-objects/195388)

<div class="topic-metadata">

**Author:** [@bterhorst](https://discuss.elastic.co/u/bterhorst)\
**Replies:** 2\
**Last updated:** [August 17, 2019, 12:22pm UTC](https://discuss.elastic.co/t/unexpected-search-response-for-nested-objects/195388 "2019-08-17T12:22:32Z")

</div>

Step 1: Create mapping nested document: curl -XPUT --header 'Content-Type: application/json' http://es:9200/search -d '{"mappings" : { "hometable" : { "properties":{ "recipes":{ "type":"nested", "properties":{…

---

## [Milliseconds in timestamp for Curator](https://discuss.elastic.co/t/milliseconds-in-timestamp-for-curator/195433)

<div class="topic-metadata">

**Author:** [@NominaSumpta](https://discuss.elastic.co/u/NominaSumpta)\
**Replies:** 2\
**Last updated:** [August 17, 2019, 11:10am UTC](https://discuss.elastic.co/t/milliseconds-in-timestamp-for-curator/195433 "2019-08-17T11:10:44Z")

</div>

Based on this doc, I composed a timestring based on the timestamp I send to Elasticsearch. I've gotten this far: %Y-%m-%WT%H:%M:%S.469436 469436 are milliseconds. How do I tell Curator about those? Or should I use rege…

---

## [Performance issues with \_search query](https://discuss.elastic.co/t/performance-issues-with-search-query/195577)

<div class="topic-metadata">

**Author:** [@hrastogi](https://discuss.elastic.co/u/hrastogi)\
**Replies:** 1\
**Last updated:** [August 17, 2019, 11:01am UTC](https://discuss.elastic.co/t/performance-issues-with-search-query/195577 "2019-08-17T11:01:27Z")

</div>

Hi, We are running ES 6.5 cluster with 10 data node and 3 front node on i3.2xlarge. We have daily indices with records-2019-08-10, records-2019-08-11 etc Each index has 50 million records with 20GB daily data size. t…

---

## [Data ingestion into elasticsearch without using logstash](https://discuss.elastic.co/t/data-ingestion-into-elasticsearch-without-using-logstash/195591)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 1\
**Last updated:** [August 17, 2019, 10:28am UTC](https://discuss.elastic.co/t/data-ingestion-into-elasticsearch-without-using-logstash/195591 "2019-08-17T10:28:50Z")

</div>

Hi All, I have pretty huge data in one of the couchbase database, i tried using JDBC plugin and was not able to find out supported "jdbc\_driver\_library" is there any other way through which i can achieve this? please …

---

## [STOPING elasticsearch.bat -NODE JS](https://discuss.elastic.co/t/stoping-elasticsearch-bat-node-js/195589)

<div class="topic-metadata">

**Author:** [@aiswarya](https://discuss.elastic.co/u/aiswarya)\
**Replies:** 0\
**Last updated:** [August 17, 2019, 8:48am UTC](https://discuss.elastic.co/t/stoping-elasticsearch-bat-node-js/195589 "2019-08-17T08:48:28Z")

</div>

i'm using node js child\_process module to run the elasticsearch.bat as follows start:async()=\>{ const { spawn } = require('child\_process'); var bat = require.resolve('C:/elasticsearch-7.0.1/bin/elasticsearch.bat'…

---

## [How to install and configure elk elastic stack 7.3 with auditbeat complete video guide](https://discuss.elastic.co/t/how-to-install-and-configure-elk-elastic-stack-7-3-with-auditbeat-complete-video-guide/195582)

<div class="topic-metadata">

**Author:** [@Dimuthu](https://discuss.elastic.co/u/Dimuthu)\
**Replies:** 0\
**Last updated:** [August 17, 2019, 2:34am UTC](https://discuss.elastic.co/t/how-to-install-and-configure-elk-elastic-stack-7-3-with-auditbeat-complete-video-guide/195582 "2019-08-17T02:34:35Z")

</div>

In this tutorial I will demonstrate how to setup a log server using with Elasticsearch, Logstash and Kibana with Auditbeat. “ELK” is the acronym for the three open source projects call Elasticsearch, Logstash and Kiban…

---

## [ElasticSearch-Spring bean creation Issue while building java code using Gradle](https://discuss.elastic.co/t/elasticsearch-spring-bean-creation-issue-while-building-java-code-using-gradle/195568)

<div class="topic-metadata">

**Author:** [@ajay\_yeruva](https://discuss.elastic.co/u/ajay_yeruva)\
**Replies:** 1\
**Last updated:** [August 17, 2019, 1:14am UTC](https://discuss.elastic.co/t/elasticsearch-spring-bean-creation-issue-while-building-java-code-using-gradle/195568 "2019-08-17T01:14:31Z")

</div>

Hi Folks, I am facing below issue while executing Gradle build. Can you please let me know your thoughts to fix below issue. 2019-08-16 21:41:29.874 ERROR 37147 --- \[ost-startStop-1\] o.s.b.web.embedded.tomcat.TomcatSt…

---

## [\_remote/info?pretty cannot get the accurate/latest information](https://discuss.elastic.co/t/remote-info-pretty-cannot-get-the-accurate-latest-information/193418)

<div class="topic-metadata">

**Author:** [@iShiBin](https://discuss.elastic.co/u/iShiBin)\
**Replies:** 10\
**Last updated:** [August 16, 2019, 8:45pm UTC](https://discuss.elastic.co/t/remote-info-pretty-cannot-get-the-accurate-latest-information/193418 "2019-08-16T20:45:29Z")

</div>

After I set up the cross-cluster search and restarted the ES node, this API doesn't return empty seeds node until I make a cross-cluster search request. Is it a bug? And how to address it? Here is the empty feedback. {…

---

## [Has 7.3.0 Been Removed?](https://discuss.elastic.co/t/has-7-3-0-been-removed/195502)

<div class="topic-metadata">

**Author:** [@SteveP](https://discuss.elastic.co/u/SteveP)\
**Replies:** 3\
**Last updated:** [August 16, 2019, 6:08pm UTC](https://discuss.elastic.co/t/has-7-3-0-been-removed/195502 "2019-08-16T18:08:57Z")

</div>

I no longer can download any of the 7.3.0 components. Should we go back to 7.2.1?

---

## [What permissions are required for ILM?](https://discuss.elastic.co/t/what-permissions-are-required-for-ilm/194514)

<div class="topic-metadata">

**Author:** [@jbrowe](https://discuss.elastic.co/u/jbrowe)\
**Replies:** 1\
**Last updated:** [August 16, 2019, 5:33pm UTC](https://discuss.elastic.co/t/what-permissions-are-required-for-ilm/194514 "2019-08-16T17:33:49Z")

</div>

I am migrating my indices to be managed by ILM. For this, I need to modify my Logstash pipeline outputs. Here's what I'm using now: output { elasticsearch { hosts =\> \["192.168.10.80:9200","192.168.10.81:9200","192…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1187)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1189)
