# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1189 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1190 --- ## [Index Life Cycle Policy Not Working on all Indexes](https://discuss.elastic.co/t/index-life-cycle-policy-not-working-on-all-indexes/194394)
**Author:** [@premkumar](https://discuss.elastic.co/u/premkumar)\ **Replies:** 1\ **Last updated:** [August 16, 2019, 5:20pm UTC](https://discuss.elastic.co/t/index-life-cycle-policy-not-working-on-all-indexes/194394 "2019-08-16T17:20:04Z")
Hi Team, I have the following ilm policy setup via logstash output filter. output { if \[path\] == "/media/sf\_ELK/ATG01log.txt" { elasticsearch { hosts =\> \["localhost:9200"\] index =\> "atg" ilm\_rollover\_alias =\> "atg… --- ## [Indice rollower](https://discuss.elastic.co/t/indice-rollower/194448)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 1\ **Last updated:** [August 16, 2019, 5:16pm UTC](https://discuss.elastic.co/t/indice-rollower/194448 "2019-08-16T17:16:52Z")
during the rollover - we notice the document count is already in the old index and when updating during that second the document count gets to the newly created indice as well. is there any way to prevent the duplication… --- ## [Get all distincts values of a field ( more than 10k values)](https://discuss.elastic.co/t/get-all-distincts-values-of-a-field-more-than-10k-values/195101)
**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\ **Replies:** 3\ **Last updated:** [August 16, 2019, 3:04pm UTC](https://discuss.elastic.co/t/get-all-distincts-values-of-a-field-more-than-10k-values/195101 "2019-08-16T15:04:06Z")
Hi there, Perhaps this question was asked many times but I haven't seen an answer that fits me. Im looking for the best way to get all the distincts values of a field in a group of indices and I manage to create a scrip… --- ## [How to access Records from Elasticsearch using python dynamically](https://discuss.elastic.co/t/how-to-access-records-from-elasticsearch-using-python-dynamically/192248)
**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\ **Replies:** 4\ **Last updated:** [August 16, 2019, 3:00pm UTC](https://discuss.elastic.co/t/how-to-access-records-from-elasticsearch-using-python-dynamically/192248 "2019-08-16T15:00:53Z")
Dear all. i have below in python but that one static value passed. but need access the same code from services in dynamic way. Import Elasticsearch package from elasticsearch import Elasticsearch Connect to the elast… --- ## [Too many slices lead to bloat of thread pool queue and degradation of performance](https://discuss.elastic.co/t/too-many-slices-lead-to-bloat-of-thread-pool-queue-and-degradation-of-performance/189833)
**Author:** [@lonlylocly](https://discuss.elastic.co/u/lonlylocly)\ **Replies:** 3\ **Last updated:** [August 16, 2019, 1:51pm UTC](https://discuss.elastic.co/t/too-many-slices-lead-to-bloat-of-thread-pool-queue-and-degradation-of-performance/189833 "2019-08-16T13:51:11Z")
Hello dear sirs, We are using .esJsonRDD() to copy an index from an Elasticsearch cluster to Spark cluster, and lately we started to observe that this copy is taking 10-14 hours instead of 2-3. Here's what is going on. … --- ## [Nest cutting off trailing zero](https://discuss.elastic.co/t/nest-cutting-off-trailing-zero/195264)
**Author:** [@plawler92](https://discuss.elastic.co/u/plawler92)\ **Replies:** 6\ **Last updated:** [August 16, 2019, 1:35pm UTC](https://discuss.elastic.co/t/nest-cutting-off-trailing-zero/195264 "2019-08-16T13:35:28Z")
I have Latitude and Longitude fields in my index stored as double that can contain trailing zero's which we treat as important ex: 37.15580. When I query elasticsearch through curl or kibana this field correctly returns… --- ## [Painless scripting: Update a OBJECT FIELD](https://discuss.elastic.co/t/painless-scripting-update-a-object-field/195488)
**Author:** [@Koshur](https://discuss.elastic.co/u/Koshur)\ **Replies:** 1\ **Last updated:** [August 16, 2019, 12:43pm UTC](https://discuss.elastic.co/t/painless-scripting-update-a-object-field/195488 "2019-08-16T12:43:32Z")
We have a field called access2 that is currently mapped with object (json). Now I want to add some data to it based on some logic. I want to check the value of another field access (which is mapped to nested/array) and … --- ## [Type of data/logs to start with Elastic GEO capabilities](https://discuss.elastic.co/t/type-of-data-logs-to-start-with-elastic-geo-capabilities/195086)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 3\ **Last updated:** [August 16, 2019, 12:32pm UTC](https://discuss.elastic.co/t/type-of-data-logs-to-start-with-elastic-geo-capabilities/195086 "2019-08-16T12:32:49Z")
Hi I want to test the GEO capabilities of Elastic. If my logs do not have any "geo\_ coordinates", does that mean that I cannot test the GEO capabilities? Is it possible to add the geo coordinates (or other type of GEO)… --- ## [Elasticsearch - how to make shorter phrase more relevant in result](https://discuss.elastic.co/t/elasticsearch-how-to-make-shorter-phrase-more-relevant-in-result/195452)
**Author:** [@Vladimir](https://discuss.elastic.co/u/Vladimir)\ **Replies:** 1\ **Last updated:** [August 16, 2019, 11:31am UTC](https://discuss.elastic.co/t/elasticsearch-how-to-make-shorter-phrase-more-relevant-in-result/195452 "2019-08-16T11:31:56Z")
Hi can somebody explain me please how to achieve higher score in search result for shorter phrase in compare with longer phrase? E.g. if I have two words ABCXXX and ABCXXXXX with edge ngram tokenizer and if I want to… --- ## [Request cannot be executed i/o reactor status stopped](https://discuss.elastic.co/t/request-cannot-be-executed-i-o-reactor-status-stopped/195438)
**Author:** [@Rajashekarchelpuri](https://discuss.elastic.co/u/Rajashekarchelpuri)\ **Replies:** 5\ **Last updated:** [August 16, 2019, 11:30am UTC](https://discuss.elastic.co/t/request-cannot-be-executed-i-o-reactor-status-stopped/195438 "2019-08-16T11:30:59Z")
request cannot be executed i/o reactor status stopped. Please help me how to solve this issue --- ## [NoSuchMethodError for org.elasticsearch.action.support.IndicesOptions.ignoreThrottled()](https://discuss.elastic.co/t/nosuchmethoderror-for-org-elasticsearch-action-support-indicesoptions-ignorethrottled/195440)
**Author:** [@ManuMP](https://discuss.elastic.co/u/ManuMP)\ **Replies:** 4\ **Last updated:** [August 16, 2019, 9:36am UTC](https://discuss.elastic.co/t/nosuchmethoderror-for-org-elasticsearch-action-support-indicesoptions-ignorethrottled/195440 "2019-08-16T09:36:47Z")
Hi, I get the java.lang.NoSuchMethodError for org.elasticsearch.action.support.IndicesOptions.ignoreThrottled(), when I execute the the line client.search(searchRequest, RequestOptions.DEFAULT); in the following code. I… --- ## [No me recoje los Logs de /var/log/httpd/access\_log](https://discuss.elastic.co/t/no-me-recoje-los-logs-de-var-log-httpd-access-log/195463)
**Author:** [@cristianaxion](https://discuss.elastic.co/u/cristianaxion)\ **Replies:** 0\ **Last updated:** [August 16, 2019, 9:23am UTC](https://discuss.elastic.co/t/no-me-recoje-los-logs-de-var-log-httpd-access-log/195463 "2019-08-16T09:23:22Z")
Hola,quiero enlazar los logs de /var/log/httpd/access\_log en kibana pero no me los recoje...solo me recoje los logs ubicado en var/log/messages.... --- ## [How do I make filebeat file stored and created new file daily?](https://discuss.elastic.co/t/how-do-i-make-filebeat-file-stored-and-created-new-file-daily/195460)
**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\ **Replies:** 0\ **Last updated:** [August 16, 2019, 9:02am UTC](https://discuss.elastic.co/t/how-do-i-make-filebeat-file-stored-and-created-new-file-daily/195460 "2019-08-16T09:02:08Z")
If I go to the index management, I can see all the data has been stored on a single file "filebeat-7.3.0-2019.08.14-000001" and no new file has been created, unlike the rest. Do you guys experience this before? This is… --- ## [Is increasing cluster max shards is the best way of managing indies](https://discuss.elastic.co/t/is-increasing-cluster-max-shards-is-the-best-way-of-managing-indies/195188)
**Author:** [@SCL\_ADMIN](https://discuss.elastic.co/u/SCL_ADMIN)\ **Replies:** 2\ **Last updated:** [August 16, 2019, 9:00am UTC](https://discuss.elastic.co/t/is-increasing-cluster-max-shards-is-the-best-way-of-managing-indies/195188 "2019-08-16T09:00:09Z")
Hello All Starting logstash gave this error: Aug 13 10:07:30 SCL-SIEM-01 logstash\[5784\]: \[2019-08-13T10:07:30,784\]\[WARN \]\[log stash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>4 00, :action… --- ## [Returning full elasticsearch document containing a provided String](https://discuss.elastic.co/t/returning-full-elasticsearch-document-containing-a-provided-string/195421)
**Author:** [@jamshaid](https://discuss.elastic.co/u/jamshaid)\ **Replies:** 1\ **Last updated:** [August 16, 2019, 8:39am UTC](https://discuss.elastic.co/t/returning-full-elasticsearch-document-containing-a-provided-string/195421 "2019-08-16T08:39:04Z")
I'm having an index named as recipe in which I have a document like this { "took" : 4, "timed\_out" : false, "\_shards" : { "total" : 5, "successful" : 5, "skipped" : 0, "failed" : 0 }, "hits" : { "total" : 2, … --- ## [How do I solve this without application level overhead?](https://discuss.elastic.co/t/how-do-i-solve-this-without-application-level-overhead/195436)
**Author:** [@abhisheksoni27](https://discuss.elastic.co/u/abhisheksoni27)\ **Replies:** 1\ **Last updated:** [August 16, 2019, 8:32am UTC](https://discuss.elastic.co/t/how-do-i-solve-this-without-application-level-overhead/195436 "2019-08-16T08:32:49Z")
Problem: Find similar movies matching the given movie's name, by a particular Production House, sorted by number of total claps the movie has received. We have three indices: ProductionHouse: {"houseId", "name"} - (Fo… --- ## [Issues creating custom\_analyzer](https://discuss.elastic.co/t/issues-creating-custom-analyzer/195325)
**Author:** [@MinHan](https://discuss.elastic.co/u/MinHan)\ **Replies:** 3\ **Last updated:** [August 16, 2019, 7:41am UTC](https://discuss.elastic.co/t/issues-creating-custom-analyzer/195325 "2019-08-16T07:41:05Z")
I'm currently using python along with elasticsearch. My data only has 2 columns: "sms\_id" "msg\_txt" I'm basically creating a custom n-gram analyzer and calling the ngram analyzer within my mapping for "msg\_txt" field… --- ## [Setting script.max\_compilations\_per\_minute error](https://discuss.elastic.co/t/setting-script-max-compilations-per-minute-error/195344)
**Author:** [@PeterPain](https://discuss.elastic.co/u/PeterPain)\ **Replies:** 2\ **Last updated:** [August 16, 2019, 7:36am UTC](https://discuss.elastic.co/t/setting-script-max-compilations-per-minute-error/195344 "2019-08-16T07:36:26Z")
Hey Elastic-Team im getting following Error when changing the max\_compilations\_per\_minute via Kibana Following Syntax was used for the chaning the setting PUT /\_cluster/settings { "transient" : { "script.m… --- ## [Higher CPU usage in cluster than a single node](https://discuss.elastic.co/t/higher-cpu-usage-in-cluster-than-a-single-node/195439)
**Author:** [@shinmaeng](https://discuss.elastic.co/u/shinmaeng)\ **Replies:** 0\ **Last updated:** [August 16, 2019, 6:40am UTC](https://discuss.elastic.co/t/higher-cpu-usage-in-cluster-than-a-single-node/195439 "2019-08-16T06:40:11Z")
I am operating an Elasticsearch single node and Kibana in a prod to monitor access log and WAS log. But some queries of Kibana dashboard were too late ( about over 7 sec ) to get information into the dashboard. So we ar… --- ## [Restrict dynamic template path\_match to 1 level](https://discuss.elastic.co/t/restrict-dynamic-template-path-match-to-1-level/195426)
**Author:** [@Welsh](https://discuss.elastic.co/u/Welsh)\ **Replies:** 0\ **Last updated:** [August 16, 2019, 4:49am UTC](https://discuss.elastic.co/t/restrict-dynamic-template-path-match-to-1-level/195426 "2019-08-16T04:49:10Z")
Hey, I'm trying to use a common mapping template to set a field to a nested type but to not set fields under it to also nested. The trouble I'm running into is the dynamic mapping template I'm using is setting the field… --- ## [\[hadoop\] Why does the default value of es.batch.write.refresh is true?](https://discuss.elastic.co/t/hadoop-why-does-the-default-value-of-es-batch-write-refresh-is-true/191955)
**Author:** [@f9865](https://discuss.elastic.co/u/f9865)\ **Replies:** 4\ **Last updated:** [August 16, 2019, 3:45am UTC](https://discuss.elastic.co/t/hadoop-why-does-the-default-value-of-es-batch-write-refresh-is-true/191955 "2019-08-16T03:45:23Z")
elasticsearch-hadoop document link says es.batch.write.refresh (default true) Whether to invoke an index refresh or not after a bulk update has been completed. Note this is called only after the entire write (meaning … --- ## [Failed to establish a new connection: \[Errno 11004\] getaddrinfo failed](https://discuss.elastic.co/t/failed-to-establish-a-new-connection-errno-11004-getaddrinfo-failed/195413)
**Author:** [@wenchaodu](https://discuss.elastic.co/u/wenchaodu)\ **Replies:** 1\ **Last updated:** [August 16, 2019, 2:01am UTC](https://discuss.elastic.co/t/failed-to-establish-a-new-connection-errno-11004-getaddrinfo-failed/195413 "2019-08-16T02:01:44Z")
When I enable xpack security, I need to use basic authorization to access elasticsearch api to fetch data or update data. I use python API, when I use server id address, I could fetch data successful, but when i use aw… --- ## [How can I send a ML job to a dashboard?](https://discuss.elastic.co/t/how-can-i-send-a-ml-job-to-a-dashboard/195381)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 1\ **Last updated:** [August 16, 2019, 12:02am UTC](https://discuss.elastic.co/t/how-can-i-send-a-ml-job-to-a-dashboard/195381 "2019-08-16T00:02:45Z")
Hi I would like to make the ML Anomaly explorer and Single metric viewer available in a dashboard. Is that possible? I cannot find a "save" button to do it. Thank you --- ## [Is it normal for client nodes in a cluster to have high OS memory usage?](https://discuss.elastic.co/t/is-it-normal-for-client-nodes-in-a-cluster-to-have-high-os-memory-usage/195251)
**Author:** [@John\_Doe1](https://discuss.elastic.co/u/John_Doe1)\ **Replies:** 2\ **Last updated:** [August 15, 2019, 10:33pm UTC](https://discuss.elastic.co/t/is-it-normal-for-client-nodes-in-a-cluster-to-have-high-os-memory-usage/195251 "2019-08-15T22:33:04Z")
I have an elastic cluster with two client nodes. When I look at the /es/\_nodes/stats/os metric, I notice the used\_percent for each of them is around 95% even though elastic and java are the only thing running on the serv… --- ## [Compare two columns with fuzziness or slops](https://discuss.elastic.co/t/compare-two-columns-with-fuzziness-or-slops/195286)
**Author:** [@alltheway99](https://discuss.elastic.co/u/alltheway99)\ **Replies:** 2\ **Last updated:** [August 15, 2019, 10:24pm UTC](https://discuss.elastic.co/t/compare-two-columns-with-fuzziness-or-slops/195286 "2019-08-15T22:24:11Z")
Hi, I'm trying to compare two columns such as address1 and address2, but also want to apply fuzziness or slop values. I could get the exact match in the following in Kibana. GET /my\_index/\_search { "query": { "bool"… --- ## [Logstash and Elasticsearch using HTTPS](https://discuss.elastic.co/t/logstash-and-elasticsearch-using-https/190847)
**Author:** [@zpraxis](https://discuss.elastic.co/u/zpraxis)\ **Replies:** 5\ **Last updated:** [August 15, 2019, 7:09pm UTC](https://discuss.elastic.co/t/logstash-and-elasticsearch-using-https/190847 "2019-08-15T19:09:52Z")
Hi! I'm having trouble using HTTPS between Logstash and Elasticsearch. I have already enabled xpack.security features via: xpack.security.enabled: true And added the corresponding \*.transport.\* and \*.ssl.\* properti… --- ## [How to create a repository for ES snapshots](https://discuss.elastic.co/t/how-to-create-a-repository-for-es-snapshots/195383)
**Author:** [@nicks1993](https://discuss.elastic.co/u/nicks1993)\ **Replies:** 0\ **Last updated:** [August 15, 2019, 6:58pm UTC](https://discuss.elastic.co/t/how-to-create-a-repository-for-es-snapshots/195383 "2019-08-15T18:58:40Z")
I am looking to backup my elastic search logs from Kibana. How do I go about this? --- ## [How to create an external Table on ES document uisng Spark SQL(ES-Hadoop 6.7.0 and ES 6.7.0)](https://discuss.elastic.co/t/how-to-create-an-external-table-on-es-document-uisng-spark-sql-es-hadoop-6-7-0-and-es-6-7-0/195228)
**Author:** [@Srinivas2](https://discuss.elastic.co/u/Srinivas2)\ **Replies:** 2\ **Last updated:** [August 15, 2019, 6:39pm UTC](https://discuss.elastic.co/t/how-to-create-an-external-table-on-es-document-uisng-spark-sql-es-hadoop-6-7-0-and-es-6-7-0/195228 "2019-08-15T18:39:41Z")
Hi Team, Requesting you help. Is it possible to create a table using spark-sql like mentioned here (https://docs.databricks.com/spark/latest/data-sources/elasticsearch.html \[Use SQL to access Elasticsearch index\]) I … --- ## [Default Sort Order in Constant Score Query](https://discuss.elastic.co/t/default-sort-order-in-constant-score-query/195112)
**Author:** [@Spock\_Tgai](https://discuss.elastic.co/u/Spock_Tgai)\ **Replies:** 4\ **Last updated:** [August 15, 2019, 6:03pm UTC](https://discuss.elastic.co/t/default-sort-order-in-constant-score-query/195112 "2019-08-15T18:03:23Z")
Hi, I wanted to know what is the default sort order for elasticsearch when using a constant score query. Also what is the mechanism for tie breaking. Thanks. --- ## [Can't delete index template](https://discuss.elastic.co/t/cant-delete-index-template/194671)
**Author:** [@jwalls](https://discuss.elastic.co/u/jwalls)\ **Replies:** 3\ **Last updated:** [August 14, 2019, 8:45pm UTC](https://discuss.elastic.co/t/cant-delete-index-template/194671 "2019-08-14T20:45:12Z")
Hello, I am having issues with "final mapping would have more than one type" errors, so I checked to see if logstash has multiple templates left over. I have one, logstash-index-template that when trying curl -X DELETE … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1188) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1190)