# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1195

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1196

---

## [JAVA\_HOME not found when following the install directions?](https://discuss.elastic.co/t/java-home-not-found-when-following-the-install-directions/193391)

<div class="topic-metadata">

**Author:** [@antonio84](https://discuss.elastic.co/u/antonio84)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 4:46pm UTC](https://discuss.elastic.co/t/java-home-not-found-when-following-the-install-directions/193391 "2019-08-09T16:46:09Z")

</div>

CentOS 6.10 (latest) ES 7.3 (latest) I'm using the link below to perform an rpm install: https://www.elastic.co/guide/en/elasticsearch/reference/current/rpm.html#rpm I followed the steps above, and tried to start ela…

---

## [Creating index without id throws an error](https://discuss.elastic.co/t/creating-index-without-id-throws-an-error/194656)

<div class="topic-metadata">

**Author:** [@venkateshreddypala](https://discuss.elastic.co/u/venkateshreddypala)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 4:40pm UTC](https://discuss.elastic.co/t/creating-index-without-id-throws-an-error/194656 "2019-08-09T16:40:47Z")

</div>

The error says that I'm using a deprecated version of indexing. Can someone please point me to the right format of index? PUT /\_index/\_type I just did the above and it says 404, I must use POST

---

## [Indexes - path in disk?](https://discuss.elastic.co/t/indexes-path-in-disk/194644)

<div class="topic-metadata">

**Author:** [@javidr](https://discuss.elastic.co/u/javidr)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 3:44pm UTC](https://discuss.elastic.co/t/indexes-path-in-disk/194644 "2019-08-09T15:44:48Z")

</div>

Hi My .kibana\_1 index is corrupted and i have lost the visualisations and dashboards stored in that file. However, i have a backup from no long ago, and i can retrieve that file from there. Where can i find information…

---

## [Agent.hostname unique search](https://discuss.elastic.co/t/agent-hostname-unique-search/194245)

<div class="topic-metadata">

**Author:** [@jwwags92](https://discuss.elastic.co/u/jwwags92)\
**Replies:** 2\
**Last updated:** [August 9, 2019, 3:04pm UTC](https://discuss.elastic.co/t/agent-hostname-unique-search/194245 "2019-08-09T15:04:38Z")

</div>

Hi, I'm forwarding event logs for 75 servers to elasticsearch. I would like to be able to run a query that lets me check the past 24 hours for all the UNIQUE entries in the agent.hostnames field. It should come back wi…

---

## [Sum size indices](https://discuss.elastic.co/t/sum-size-indices/194640)

<div class="topic-metadata">

**Author:** [@GedeoN](https://discuss.elastic.co/u/GedeoN)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 2:55pm UTC](https://discuss.elastic.co/t/sum-size-indices/194640 "2019-08-09T14:55:57Z")

</div>

Hi, I'm trying to sum store.size of my indices by type of indices. In first time, i'm listing my indice name: GET \_cat/indices/\*portailsc\*?v health status index uuid …

---

## [Rollover Index based on timestamp field](https://discuss.elastic.co/t/rollover-index-based-on-timestamp-field/192229)

<div class="topic-metadata">

**Author:** [@Jayabal\_K](https://discuss.elastic.co/u/Jayabal_K)\
**Replies:** 7\
**Last updated:** [August 9, 2019, 2:54pm UTC](https://discuss.elastic.co/t/rollover-index-based-on-timestamp-field/192229 "2019-08-09T14:54:50Z")

</div>

I need to rollover the index on daily basis. currently I am using curator rollover action (max\_size: 1d) and my index pattern : test-YYYY.MM.DD-1. my cronjob is running every hour once. Our scenario: Index created at 4:…

---

## [Indexing Jupyter Notebooks](https://discuss.elastic.co/t/indexing-jupyter-notebooks/194639)

<div class="topic-metadata">

**Author:** [@venkateshreddypala](https://discuss.elastic.co/u/venkateshreddypala)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 2:54pm UTC](https://discuss.elastic.co/t/indexing-jupyter-notebooks/194639 "2019-08-09T14:54:10Z")

</div>

I am trying to index, jupyter notebooks in raw format. Jupyter notebooks are pretty much the new line delimited JSON. I need help in ignoring some of the fields which only indicates the type of markdown. PUT \_template/i…

---

## [Elastic search processing slow](https://discuss.elastic.co/t/elastic-search-processing-slow/192972)

<div class="topic-metadata">

**Author:** [@Tejesh](https://discuss.elastic.co/u/Tejesh)\
**Replies:** 0\
**Last updated:** [July 30, 2019, 6:58pm UTC](https://discuss.elastic.co/t/elastic-search-processing-slow/192972 "2019-07-30T18:58:08Z")

</div>

Filebeat sending logs with old time stamp

---

## [ELK configuration with kubernetes](https://discuss.elastic.co/t/elk-configuration-with-kubernetes/194627)

<div class="topic-metadata">

**Author:** [@sreenivasulu](https://discuss.elastic.co/u/sreenivasulu)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 2:34pm UTC](https://discuss.elastic.co/t/elk-configuration-with-kubernetes/194627 "2019-08-09T14:34:09Z")

</div>

I have already deployed stackstorm container into k8s and configured Prometheus for rules and alerts. Could you please advice how can I integrate ELK with kubernetes.

---

## [Completion Suggester Syntax Using NEST](https://discuss.elastic.co/t/completion-suggester-syntax-using-nest/194633)

<div class="topic-metadata">

**Author:** [@han1](https://discuss.elastic.co/u/han1)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 2:13pm UTC](https://discuss.elastic.co/t/completion-suggester-syntax-using-nest/194633 "2019-08-09T14:13:54Z")

</div>

Hi We have been trying to figure out how to provide several values for a single Suggester Context Category using the NEST Api but have failed. It seems to be so simple without NEST by just supplying an array of values b…

---

## [Elasticsearch Unreachable - Docker](https://discuss.elastic.co/t/elasticsearch-unreachable-docker/194574)

<div class="topic-metadata">

**Author:** [@Louis-Clement](https://discuss.elastic.co/u/Louis-Clement)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 8:43am UTC](https://discuss.elastic.co/t/elasticsearch-unreachable-docker/194574 "2019-08-09T08:43:57Z")

</div>

Hi! I'm using the ELK Stack with Docker. Everything worked fine, except the day when my server ran out of space because I didn't manage well the lifetime of my data. I had to remove and build again my Docker container…

---

## [Currency Field / Currency function](https://discuss.elastic.co/t/currency-field-currency-function/194619)

<div class="topic-metadata">

**Author:** [@rosherd](https://discuss.elastic.co/u/rosherd)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 1:17pm UTC](https://discuss.elastic.co/t/currency-field-currency-function/194619 "2019-08-09T13:17:11Z")

</div>

Hi All, I'm new to ES but in Solr I've implemented a custom ValueSourceParser that can read an exchange rate file, and using currency and currency\_amount fields, I can for example incorporate a USD value into the scorin…

---

## [Elasticsearch unable to parse date](https://discuss.elastic.co/t/elasticsearch-unable-to-parse-date/193206)

<div class="topic-metadata">

**Author:** [@Osama\_Tariq](https://discuss.elastic.co/u/Osama_Tariq)\
**Replies:** 4\
**Last updated:** [August 9, 2019, 1:11pm UTC](https://discuss.elastic.co/t/elasticsearch-unable-to-parse-date/193206 "2019-08-09T13:11:08Z")

</div>

Hi, I am getting following error on elasticsearch. Please help me to get rid off this error. I have hide the real ip info in below code. \[2019-07-31T22:37:58,459\]\[DEBUG\]\[o.e.a.b.TransportBulkAction\] \[IP ADDRESS\] failed …

---

## [Error: getaddrinfo failed](https://discuss.elastic.co/t/error-getaddrinfo-failed/194618)

<div class="topic-metadata">

**Author:** [@Ioana](https://discuss.elastic.co/u/Ioana)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 1:08pm UTC](https://discuss.elastic.co/t/error-getaddrinfo-failed/194618 "2019-08-09T13:08:39Z")

</div>

Hello! I am new on working with ELK and when I run my code I get the following error : 2019-08-09 15:43:04,526 CRITICAL: N/A\<urllib3.connection.HTTPConnection object at 0x000002916B9EC780\>: Failed to establish a new co…

---

## [Can not able to get search results Need some help with query](https://discuss.elastic.co/t/can-not-able-to-get-search-results-need-some-help-with-query/194614)

<div class="topic-metadata">

**Author:** [@vishwas\_jadav](https://discuss.elastic.co/u/vishwas_jadav)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 12:58pm UTC](https://discuss.elastic.co/t/can-not-able-to-get-search-results-need-some-help-with-query/194614 "2019-08-09T12:58:26Z")

</div>

I have already created an index and I daily add some records and use in a site for searching. Now, I have created another index and in that I used Data types as I have used in my previous index. but I am not getting an…

---

## [Failed to put template \[filebeat\]](https://discuss.elastic.co/t/failed-to-put-template-filebeat/194611)

<div class="topic-metadata">

**Author:** [@dm1987](https://discuss.elastic.co/u/dm1987)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 12:45pm UTC](https://discuss.elastic.co/t/failed-to-put-template-filebeat/194611 "2019-08-09T12:45:59Z")

</div>

\[2019-08-09T15:42:33,107\]\[DEBUG\]\[o.e.a.a.i.t.p.TransportPutIndexTemplateAction\] failed to put template \[filebeat\] org.elasticsearch.index.mapper.MapperParsingException: Failed to parse mapping \[\_doc\]: Root mapping defi…

---

## [Date processor on ingest do not create a date type on elasticsearch](https://discuss.elastic.co/t/date-processor-on-ingest-do-not-create-a-date-type-on-elasticsearch/194459)

<div class="topic-metadata">

**Author:** [@thuck](https://discuss.elastic.co/u/thuck)\
**Replies:** 2\
**Last updated:** [August 9, 2019, 12:45pm UTC](https://discuss.elastic.co/t/date-processor-on-ingest-do-not-create-a-date-type-on-elasticsearch/194459 "2019-08-09T12:45:42Z")

</div>

When parsing a field on the ingest pipeline; I would expect that the field would be created as Date on elasticsearch, but what I see is that they are created as String. I tried two different ways of parsing, below the s…

---

## [Does removing field actually deletes data?](https://discuss.elastic.co/t/does-removing-field-actually-deletes-data/193511)

<div class="topic-metadata">

**Author:** [@74db36a597f21b891b3f](https://discuss.elastic.co/u/74db36a597f21b891b3f)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 12:39pm UTC](https://discuss.elastic.co/t/does-removing-field-actually-deletes-data/193511 "2019-08-09T12:39:18Z")

</div>

Hello. I want to free some space on HDD so I decided to remove unneeded field from my indices. I made a reindex with field deletion on some index. Then I compared sizes of old index and new index without some fields. An…

---

## [Log data join](https://discuss.elastic.co/t/log-data-join/194610)

<div class="topic-metadata">

**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 12:33pm UTC](https://discuss.elastic.co/t/log-data-join/194610 "2019-08-09T12:33:45Z")

</div>

Hi there, I’ve got a question, is it possible to “join” data in ELK, so we have such a use case: Application sends two types of logs: a. \<session\_id\>, \<cartridge\_id\> b. \<session\_id\>, \<data\_volume\> We need report (…

---

## [Requests and segments](https://discuss.elastic.co/t/requests-and-segments/194446)

<div class="topic-metadata">

**Author:** [@newbie1](https://discuss.elastic.co/u/newbie1)\
**Replies:** 4\
**Last updated:** [August 9, 2019, 12:25pm UTC](https://discuss.elastic.co/t/requests-and-segments/194446 "2019-08-09T12:25:51Z")

</div>

Hi, During the course "Elasticsearch Engineer II", it is said : "A search request is distributed to the shards and on each shard it is performed sequentially over the segments" Does that means that if tow requests ar…

---

## [Refresh & flush](https://discuss.elastic.co/t/refresh-flush/194444)

<div class="topic-metadata">

**Author:** [@newbie1](https://discuss.elastic.co/u/newbie1)\
**Replies:** 4\
**Last updated:** [August 9, 2019, 12:24pm UTC](https://discuss.elastic.co/t/refresh-flush/194444 "2019-08-09T12:24:57Z")

</div>

Hy, Is the answer to this post https://discuss.elastic.co/t/relationship-between-refresh-flush/51260 still valid ? id "Yes that is expected, a refresh calls a flush and writes files to the filesystem"

---

## [Grand access to specific fields](https://discuss.elastic.co/t/grand-access-to-specific-fields/194581)

<div class="topic-metadata">

**Author:** [@Noebas](https://discuss.elastic.co/u/Noebas)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 12:15pm UTC](https://discuss.elastic.co/t/grand-access-to-specific-fields/194581 "2019-08-09T12:15:27Z")

</div>

I'am struggeling to get the filter working. This filter is working but i like to match mutliple tags and can not find how to do this. Can i use a OR in the bool filter? https://www.elastic.co/guide/en/elasticsearch/re…

---

## [SMTP failed exception 500 bad request](https://discuss.elastic.co/t/smtp-failed-exception-500-bad-request/194161)

<div class="topic-metadata">

**Author:** [@rj23495](https://discuss.elastic.co/u/rj23495)\
**Replies:** 2\
**Last updated:** [August 9, 2019, 12:03pm UTC](https://discuss.elastic.co/t/smtp-failed-exception-500-bad-request/194161 "2019-08-09T12:03:52Z")

</div>

xpack.notification.email.account: mail1: profile: standard smtp.host: ##### smtp.port: 80 smtp.auth: true smtp.starttls.enable: true smtp.user: #### smtp.password: #### Exception- \[o.e.x.…

---

## [BulkProcessor never executing AfterBulk](https://discuss.elastic.co/t/bulkprocessor-never-executing-afterbulk/194575)

<div class="topic-metadata">

**Author:** [@Jozifo](https://discuss.elastic.co/u/Jozifo)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 11:28am UTC](https://discuss.elastic.co/t/bulkprocessor-never-executing-afterbulk/194575 "2019-08-09T11:28:08Z")

</div>

Hello everyone, I'm trying to insert data into ElasticSearch using RestHighLevelClient and BulkProcessor. The code I'm using for the BulkProcessor is the following. BulkProcessor getBulkProcessor(RestHighLevelClien…

---

## [Elastic Search 2.2 Logging Configuration](https://discuss.elastic.co/t/elastic-search-2-2-logging-configuration/193730)

<div class="topic-metadata">

**Author:** [@iaskdoubt](https://discuss.elastic.co/u/iaskdoubt)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 11:18am UTC](https://discuss.elastic.co/t/elastic-search-2-2-logging-configuration/193730 "2019-08-09T11:18:43Z")

</div>

Hi is it possible to share the logging configuration and log file rotation available in the elastic search 2.2

---

## [Elasticsearch 2.4.0 stdout logging size restriction](https://discuss.elastic.co/t/elasticsearch-2-4-0-stdout-logging-size-restriction/194131)

<div class="topic-metadata">

**Author:** [@prabhurajreddy](https://discuss.elastic.co/u/prabhurajreddy)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 11:04am UTC](https://discuss.elastic.co/t/elasticsearch-2-4-0-stdout-logging-size-restriction/194131 "2019-08-09T11:04:50Z")

</div>

We have elasticsearch 2.4 installation, sometimes stdout logs go over 100GB size. Though I have configured the log4j settings to file: type: rollingFile file: {path.logs}/{cluster.name}.log maxFileSize: 10MB maxBac…

---

## [Scripted fields throwing error](https://discuss.elastic.co/t/scripted-fields-throwing-error/194555)

<div class="topic-metadata">

**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\
**Replies:** 7\
**Last updated:** [August 9, 2019, 10:11am UTC](https://discuss.elastic.co/t/scripted-fields-throwing-error/194555 "2019-08-09T10:11:34Z")

</div>

I have few scripted fields which are causing error post migrations from 5x to 7.0.0. Then i noticed in breaking changes that i need to include a check like below to confirm if the fields exist: A document doesn't have …

---

## [How to set index.mapping.ignore\_malformed to true, when using bulk api](https://discuss.elastic.co/t/how-to-set-index-mapping-ignore-malformed-to-true-when-using-bulk-api/194583)

<div class="topic-metadata">

**Author:** [@Saurabh\_Sharma\_IIT](https://discuss.elastic.co/u/Saurabh_Sharma_IIT)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 9:59am UTC](https://discuss.elastic.co/t/how-to-set-index-mapping-ignore-malformed-to-true-when-using-bulk-api/194583 "2019-08-09T09:59:55Z")

</div>

Hi, I am experimenting with bulk api, and want to set "index.mapping.ignore\_malformed": true for all new indexes created using bulk api. What is the best way to set ignore\_malformed to true when using bulk api. Thanks

---

## [A shard closed suddenly on indexing data](https://discuss.elastic.co/t/a-shard-closed-suddenly-on-indexing-data/194170)

<div class="topic-metadata">

**Author:** [@chenchuangc](https://discuss.elastic.co/u/chenchuangc)\
**Replies:** 5\
**Last updated:** [August 9, 2019, 9:47am UTC](https://discuss.elastic.co/t/a-shard-closed-suddenly-on-indexing-data/194170 "2019-08-09T09:47:13Z")

</div>

Elasticsearch version bin/elasticsearch --version 7.1.1 Logstash version 7.1.1 Plugins installed bin/elasticsearch-plugin list analysis-ik JVM version java -version java version "1.8.0\_91" Java(TM) SE Runtime Env…

---

## [Kibana and Elasticsearch not communicating with each other](https://discuss.elastic.co/t/kibana-and-elasticsearch-not-communicating-with-each-other/194124)

<div class="topic-metadata">

**Author:** [@ljacobs7211](https://discuss.elastic.co/u/ljacobs7211)\
**Replies:** 7\
**Last updated:** [August 9, 2019, 9:19am UTC](https://discuss.elastic.co/t/kibana-and-elasticsearch-not-communicating-with-each-other/194124 "2019-08-09T09:19:58Z")

</div>

Elasticsearch and Kibana are running on different VMs. I have tried about every setting in each of them to get them to communicate. Each are version 7.3. When I test Kibana I get the message Kibana not ready yet. Not…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1194)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1196)
