# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1198 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1199 --- ## [Concatenate 2 values to make a geo\_point field](https://discuss.elastic.co/t/concatenate-2-values-to-make-a-geo-point-field/194175)
**Author:** [@Ragnar](https://discuss.elastic.co/u/Ragnar)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 6:42pm UTC](https://discuss.elastic.co/t/concatenate-2-values-to-make-a-geo-point-field/194175 "2019-08-07T18:42:14Z")
I have an index where from an ip field from the data source I have added the filter geoip to logstash that get the data. I got in my index a brand new bunch of field about latitude, longitude, city... but it's not usable… --- ## [Disk space alert from ElasticSearch or Logstash](https://discuss.elastic.co/t/disk-space-alert-from-elasticsearch-or-logstash/194262)
**Author:** [@bharatwaj](https://discuss.elastic.co/u/bharatwaj)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 5:43pm UTC](https://discuss.elastic.co/t/disk-space-alert-from-elasticsearch-or-logstash/194262 "2019-08-07T17:43:45Z")
I need to trigger a mail whenever logstash or elastic server is about to hit 95% of the disk space. Like i would like to trigger mail when the usage is almost 85%. Is this possible. --- ## [Need advices about my stack](https://discuss.elastic.co/t/need-advices-about-my-stack/194296)
**Author:** [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\ **Replies:** 0\ **Last updated:** [August 7, 2019, 5:27pm UTC](https://discuss.elastic.co/t/need-advices-about-my-stack/194296 "2019-08-07T17:27:01Z")
Hello I'm looking for some advices about my elk stack before upgrade to 6.8, then to version 7. I'm in 6.7.1 version, I use ELK to agregate windows logs from differents server (DC, DNS, software logs etc...). Few linux… --- ## [Replica Shard Allocation to Nodes with a Specific Attribute](https://discuss.elastic.co/t/replica-shard-allocation-to-nodes-with-a-specific-attribute/193414)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 3\ **Last updated:** [August 7, 2019, 4:48pm UTC](https://discuss.elastic.co/t/replica-shard-allocation-to-nodes-with-a-specific-attribute/193414 "2019-08-07T16:48:34Z")
I am trying to allocate shard replicas to nodes in a different region than where my primaries live. I'm looking for a way to specify in the index mapping template that replicas must live in a different region. I'm able t… --- ## [Body object contents in "Elasticsearch Node.js Client" API return values](https://discuss.elastic.co/t/body-object-contents-in-elasticsearch-node-js-client-api-return-values/194286)
**Author:** [@n2nelastic](https://discuss.elastic.co/u/n2nelastic)\ **Replies:** 0\ **Last updated:** [August 7, 2019, 4:19pm UTC](https://discuss.elastic.co/t/body-object-contents-in-elasticsearch-node-js-client-api-return-values/194286 "2019-08-07T16:19:33Z")
The documentation forElasticsearch Node.js Client says that "The returned value of every API call is formed as follows": { body: object | boolean statusCode: number headers: object warnings: \[string\], meta: ob… --- ## [Elastic X-Pack vs Splunk MLTK](https://discuss.elastic.co/t/elastic-x-pack-vs-splunk-mltk/194284)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 0\ **Last updated:** [August 7, 2019, 4:14pm UTC](https://discuss.elastic.co/t/elastic-x-pack-vs-splunk-mltk/194284 "2019-08-07T16:14:19Z")
Hello all! I am a Data Scientist but I am new to Elastic. As I have some databases in Elastic and others in Splunk and it would be very interesting to correlate data, I was wondering if it would be better to ingest Ela… --- ## [NGram search troubles(Is it possible to match entire string)](https://discuss.elastic.co/t/ngram-search-troubles-is-it-possible-to-match-entire-string/194111)
**Author:** [@N\_Antech](https://discuss.elastic.co/u/N_Antech)\ **Replies:** 4\ **Last updated:** [August 7, 2019, 4:03pm UTC](https://discuss.elastic.co/t/ngram-search-troubles-is-it-possible-to-match-entire-string/194111 "2019-08-07T16:03:52Z")
I am almost positive that this is a simple misunderstanding on my part as I'm very new to Elasticsearch. I am trying to implement a substring matching search using ngrams. I've got it set as max\_ngram\_diff of 10. My se… --- ## [Is this type of query possible in one go?](https://discuss.elastic.co/t/is-this-type-of-query-possible-in-one-go/194275)
**Author:** [@Jason\_Baumgartner](https://discuss.elastic.co/u/Jason_Baumgartner)\ **Replies:** 0\ **Last updated:** [August 7, 2019, 3:43pm UTC](https://discuss.elastic.co/t/is-this-type-of-query-possible-in-one-go/194275 "2019-08-07T15:43:21Z")
I am working with reddit comments and want to extract bots for analysis. What I'd like to do is: Find all unique authors where the comment reply\_delay is less than a specific value. Example: curl -s -H "Content-Type: … --- ## [Reindex - add new fields not working](https://discuss.elastic.co/t/reindex-add-new-fields-not-working/194271)
**Author:** [@brjisc](https://discuss.elastic.co/u/brjisc)\ **Replies:** 0\ **Last updated:** [August 7, 2019, 3:33pm UTC](https://discuss.elastic.co/t/reindex-add-new-fields-not-working/194271 "2019-08-07T15:33:51Z")
Reindexing data from one index to a new index with a new mappings seems to be losing fields. My old index contains a document with the fields: "service": { "jid": "J00008", "action": { "species": "NEWS", "genus": "… --- ## [Bounding boxes in images](https://discuss.elastic.co/t/bounding-boxes-in-images/186692)
**Author:** [@covolution](https://discuss.elastic.co/u/covolution)\ **Replies:** 4\ **Last updated:** [August 7, 2019, 3:23pm UTC](https://discuss.elastic.co/t/bounding-boxes-in-images/186692 "2019-08-07T15:23:04Z")
I am interested in indexing metadata about images. In particular, what's the best way to be able to store and search on image tags with bounding boxes? For example a single image could have many items tagged in it, e.g … --- ## [Ignore relevance score completely by using post\_filter only](https://discuss.elastic.co/t/ignore-relevance-score-completely-by-using-post-filter-only/192660)
**Author:** [@kshi\_yelpale000](https://discuss.elastic.co/u/kshi_yelpale000)\ **Replies:** 12\ **Last updated:** [August 7, 2019, 3:05pm UTC](https://discuss.elastic.co/t/ignore-relevance-score-completely-by-using-post-filter-only/192660 "2019-08-07T15:05:16Z")
Hi, In my product, i don't want to use relevance score in my search queries. I have my own sorting algorithm once i have results. On searching i found that to avoid scoring, use post\_filter insread of query clause. He… --- ## [How to visit elasticsearch in docker in another docker?](https://discuss.elastic.co/t/how-to-visit-elasticsearch-in-docker-in-another-docker/194083)
**Author:** [@riverbuilding](https://discuss.elastic.co/u/riverbuilding)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 1:57pm UTC](https://discuss.elastic.co/t/how-to-visit-elasticsearch-in-docker-in-another-docker/194083 "2019-08-07T13:57:29Z")
I deploy elasticsearch in docker with below command: sudo docker run --name es1 -p 6200:9200 -p 6300:9300 -e "xpack.security.enabled=false" -e discovery.type=single-node -e "ES\_JAVA\_OPTS=-Xms2048m -Xmx2048m" docker.elas… --- ## [Unfounded script recompilations](https://discuss.elastic.co/t/unfounded-script-recompilations/193575)
**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\ **Replies:** 6\ **Last updated:** [August 7, 2019, 1:37pm UTC](https://discuss.elastic.co/t/unfounded-script-recompilations/193575 "2019-08-07T13:37:28Z")
In preparation for upgrading our Prod environment, we've built up our Dev environment to have more processors and memory and are testing out our heavy watcher load to see if all is well there before doing the same upgrad… --- ## [Machine learning anomaly correlation](https://discuss.elastic.co/t/machine-learning-anomaly-correlation/193954)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 4\ **Last updated:** [August 7, 2019, 1:35pm UTC](https://discuss.elastic.co/t/machine-learning-anomaly-correlation/193954 "2019-08-07T13:35:36Z")
0 Is there a way to achieve the following with elastic machine learning: A sample demo structure: Index data has the following fields: job\_duration\_time,server, boot\_time, run\_time the first field:job\_duration\_time, … --- ## [Is it possible to load fresh data in elasticsearch index again and again using logstash](https://discuss.elastic.co/t/is-it-possible-to-load-fresh-data-in-elasticsearch-index-again-and-again-using-logstash/194184)
**Author:** [@amritaraj23](https://discuss.elastic.co/u/amritaraj23)\ **Replies:** 3\ **Last updated:** [August 7, 2019, 1:34pm UTC](https://discuss.elastic.co/t/is-it-possible-to-load-fresh-data-in-elasticsearch-index-again-and-again-using-logstash/194184 "2019-08-07T13:34:22Z")
Hi, I am new to logstash and elasticsearch. I have a query. I have a csv file and the data in the file will keep on changing after every 3 hours. Is it possible to load fresh data to elasticsearch index everytime and d… --- ## [How much data can we keep or many months of log data do we retain in Elasticsearch?](https://discuss.elastic.co/t/how-much-data-can-we-keep-or-many-months-of-log-data-do-we-retain-in-elasticsearch/194106)
**Author:** [@Bjen\_Shah](https://discuss.elastic.co/u/Bjen_Shah)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 1:25pm UTC](https://discuss.elastic.co/t/how-much-data-can-we-keep-or-many-months-of-log-data-do-we-retain-in-elasticsearch/194106 "2019-08-07T13:25:06Z")
Is it' okay to keep the all the 150 - 300 servers logs data on one cluster three node cluster ? if we can then how could we set up back up procedure or log rotation and what is best tools that I can use ? --- ## [Failed to recover from translog CurrentState\[CLOSED\]](https://discuss.elastic.co/t/failed-to-recover-from-translog-currentstate-closed/192529)
**Author:** [@Bukhtawar\_Khan](https://discuss.elastic.co/u/Bukhtawar_Khan)\ **Replies:** 2\ **Last updated:** [August 7, 2019, 12:51pm UTC](https://discuss.elastic.co/t/failed-to-recover-from-translog-currentstate-closed/192529 "2019-08-07T12:51:09Z")
The cluster has unassigned shards possibly due to shard corruption. The process on the node was flaky due to OOM errors and was frequently starting. Disk space was sufficient on the node. I'm yet to verify the hardware f… --- ## [Dedup Records According to Percentage](https://discuss.elastic.co/t/dedup-records-according-to-percentage/194025)
**Author:** [@Dawood\_Siddiq](https://discuss.elastic.co/u/Dawood_Siddiq)\ **Replies:** 7\ **Last updated:** [August 7, 2019, 12:44pm UTC](https://discuss.elastic.co/t/dedup-records-according-to-percentage/194025 "2019-08-07T12:44:17Z")
Greetings : I have Above than 1M records in ES. Now i want to dedup data on bases of percentage. For Example "Give me list of all records whose title are 90% matched or above". Lets take another example. "I need to retr… --- ## [I've been getting "retrying failed action with response code: 403" can someone help me fix this?](https://discuss.elastic.co/t/ive-been-getting-retrying-failed-action-with-response-code-403-can-someone-help-me-fix-this/194230)
**Author:** [@bharatwaj](https://discuss.elastic.co/u/bharatwaj)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 12:36pm UTC](https://discuss.elastic.co/t/ive-been-getting-retrying-failed-action-with-response-code-403-can-someone-help-me-fix-this/194230 "2019-08-07T12:36:19Z")
I'm getting the following error "retrying failed action with response code: 403 ({"type"=\>"cluster\_block\_exception", "reason"=\>"index \[es\_attorney\] blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];"})" C… --- ## [Elasticsearch two nodes config](https://discuss.elastic.co/t/elasticsearch-two-nodes-config/194193)
**Author:** [@khergner](https://discuss.elastic.co/u/khergner)\ **Replies:** 8\ **Last updated:** [August 7, 2019, 12:11pm UTC](https://discuss.elastic.co/t/elasticsearch-two-nodes-config/194193 "2019-08-07T12:11:19Z")
Hi everyone; I have a question for high availability System Info -5 different logs -Data size ~75 GB per daily -Total servers 2 nodes (1 master and node) -Daily Indices -ı use xms and xmx 8GB -Master = ram 56 GB … --- ## [Getting error in importing multiple collections from mongodb to elasticsearch 7.7.0](https://discuss.elastic.co/t/getting-error-in-importing-multiple-collections-from-mongodb-to-elasticsearch-7-7-0/194226)
**Author:** [@Kunal\_Adhikari](https://discuss.elastic.co/u/Kunal_Adhikari)\ **Replies:** 0\ **Last updated:** [August 7, 2019, 11:38am UTC](https://discuss.elastic.co/t/getting-error-in-importing-multiple-collections-from-mongodb-to-elasticsearch-7-7-0/194226 "2019-08-07T11:38:33Z")
\ ERRO\[0001\] \_bulk failed list \[0\] error="&elastic.ErrorDetails{Type:"illegal\_argument\_exception", Reason:"Rejecting mapping update to \[my\_application1\] as the final mapping would have more tha… --- ## [Deleting an index does not seem to delete external versioning](https://discuss.elastic.co/t/deleting-an-index-does-not-seem-to-delete-external-versioning/194091)
**Author:** [@Philiiiiiipp](https://discuss.elastic.co/u/Philiiiiiipp)\ **Replies:** 10\ **Last updated:** [August 7, 2019, 11:35am UTC](https://discuss.elastic.co/t/deleting-an-index-does-not-seem-to-delete-external-versioning/194091 "2019-08-07T11:35:01Z")
I am running into an issue using the external versioning where deleting the index does not seem to clear the external versioning for that given index. Steps to recreate: Create an index Put an item with id: 'someid',… --- ## [Logs are not showing up](https://discuss.elastic.co/t/logs-are-not-showing-up/193374)
**Author:** [@sahilmohile](https://discuss.elastic.co/u/sahilmohile)\ **Replies:** 4\ **Last updated:** [August 7, 2019, 11:22am UTC](https://discuss.elastic.co/t/logs-are-not-showing-up/193374 "2019-08-07T11:22:35Z")
Hi, I have configured filebeats file to send logs to elastic but my logs are showing up in index or logs page I have tried creating the file and new system 3 time by now can someone please help me getting the logs. --- ## [Net core 2.1 elasticsearch working in development, it doesn't work in release](https://discuss.elastic.co/t/net-core-2-1-elasticsearch-working-in-development-it-doesnt-work-in-release/191503)
**Author:** [@Ilyoskhuja](https://discuss.elastic.co/u/Ilyoskhuja)\ **Replies:** 10\ **Last updated:** [August 7, 2019, 11:19am UTC](https://discuss.elastic.co/t/net-core-2-1-elasticsearch-working-in-development-it-doesnt-work-in-release/191503 "2019-08-07T11:19:18Z")
net core 2.1 elasticsearch working in development, it doesn't work in release, this is my elasticsearch class {public static class ElasticsearchExtensions { public static void AddElasticsearch( … --- ## [Elasticsearch Performance between Linux Vs Window](https://discuss.elastic.co/t/elasticsearch-performance-between-linux-vs-window/194218)
**Author:** [@amitmjadav](https://discuss.elastic.co/u/amitmjadav)\ **Replies:** 0\ **Last updated:** [August 7, 2019, 11:10am UTC](https://discuss.elastic.co/t/elasticsearch-performance-between-linux-vs-window/194218 "2019-08-07T11:10:45Z")
Can any one tell me on which platform elasticsearch performs best ??? Windows or Linux ??? --- ## [ElasticSearch completion suggester without respecting terms order when typing](https://discuss.elastic.co/t/elasticsearch-completion-suggester-without-respecting-terms-order-when-typing/193975)
**Author:** [@ahlem](https://discuss.elastic.co/u/ahlem)\ **Replies:** 4\ **Last updated:** [August 7, 2019, 11:07am UTC](https://discuss.elastic.co/t/elasticsearch-completion-suggester-without-respecting-terms-order-when-typing/193975 "2019-08-07T11:07:16Z")
I wanna make an autocomplete feature to search by full name(first name(s)+ last name) using Elastic Search completion suggester. when tapping, user can start with any term composing the full name. for example to look … --- ## [Elasticsearch 7.3.0 Enable Security - Windows System](https://discuss.elastic.co/t/elasticsearch-7-3-0-enable-security-windows-system/194206)
**Author:** [@pramod.kumar2](https://discuss.elastic.co/u/pramod.kumar2)\ **Replies:** 0\ **Last updated:** [August 7, 2019, 10:07am UTC](https://discuss.elastic.co/t/elasticsearch-7-3-0-enable-security-windows-system/194206 "2019-08-07T10:07:45Z")
Hi Team, I have installed Elasticsearch 7.3.0 on windows machine. And I am able to use elastic url using IP. Below are configuration which I have used - cluster.name: "my-app" node.name: "master\_node" network.host: 1… --- ## [NodeClosedException while auto-following indices](https://discuss.elastic.co/t/nodeclosedexception-while-auto-following-indices/193963)
**Author:** [@kley](https://discuss.elastic.co/u/kley)\ **Replies:** 5\ **Last updated:** [August 7, 2019, 9:46am UTC](https://discuss.elastic.co/t/nodeclosedexception-while-auto-following-indices/193963 "2019-08-07T09:46:23Z")
Hi! So, we do have two elasticsearch environments up and running with CCR configured. Everything works fine so far. But after checking the document count we noticed a mismatch in numbers. This only seems to affect "big… --- ## [Cannot start elasticsearch from Docker](https://discuss.elastic.co/t/cannot-start-elasticsearch-from-docker/193853)
**Author:** [@tomsk](https://discuss.elastic.co/u/tomsk)\ **Replies:** 4\ **Last updated:** [August 5, 2019, 6:12pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-from-docker/193853 "2019-08-05T18:12:27Z")
Hello, I want to install elasticsearch using Docker, this is in docker-compose.yml: version: '2' services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:5.6.16 container\_name: elasticsear… --- ## [Where are Dockerfiles](https://discuss.elastic.co/t/where-are-dockerfiles/193867)
**Author:** [@tomsk](https://discuss.elastic.co/u/tomsk)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 9:22am UTC](https://discuss.elastic.co/t/where-are-dockerfiles/193867 "2019-08-07T09:22:31Z")
Hello, I wonder where is Dockerfile from docker.elastic.co/elasticsearch/elasticsearch:5.6.16, because I would like to download it to local storage (as backup). Thanks [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1197) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1199)