# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1202

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1203

---

## [How to put the value of {{ctx.payload.aggregations.bucketAgg.buckets.key}} into Watcher body](https://discuss.elastic.co/t/how-to-put-the-value-of-ctx-payload-aggregations-bucketagg-buckets-key-into-watcher-body/193694)

<div class="topic-metadata">

**Author:** [@isabel](https://discuss.elastic.co/u/isabel)\
**Replies:** 5\
**Last updated:** [August 5, 2019, 1:44pm UTC](https://discuss.elastic.co/t/how-to-put-the-value-of-ctx-payload-aggregations-bucketagg-buckets-key-into-watcher-body/193694 "2019-08-05T13:44:25Z")

</div>

Hello :slight\_smile: What i am trying to do is to hand over the value of "{{ctx.payload.aggregations.bucketAgg.buckets.key}}" to the body of my Watcher. However, the value is always empty. But in truth it is not! H…

---

## [Node not connected at org.elasticsearch.transport.TcpTransport.get](https://discuss.elastic.co/t/node-not-connected-at-org-elasticsearch-transport-tcptransport-get/193804)

<div class="topic-metadata">

**Author:** [@MichalF1](https://discuss.elastic.co/u/MichalF1)\
**Replies:** 0\
**Last updated:** [August 5, 2019, 1:26pm UTC](https://discuss.elastic.co/t/node-not-connected-at-org-elasticsearch-transport-tcptransport-get/193804 "2019-08-05T13:26:52Z")

</div>

Hello, i have a problem with nodes connections. When i start them everything seems OK and then i try to send to master some data and getting this error. I think problem is at master node but do not know exactly where. I…

---

## [Development cluster bootstrap error](https://discuss.elastic.co/t/development-cluster-bootstrap-error/193533)

<div class="topic-metadata">

**Author:** [@Imrankhan\_Patan](https://discuss.elastic.co/u/Imrankhan_Patan)\
**Replies:** 6\
**Last updated:** [August 5, 2019, 1:19pm UTC](https://discuss.elastic.co/t/development-cluster-bootstrap-error/193533 "2019-08-05T13:19:29Z")

</div>

I am trying to start elasticsearch 7.2 in development server after installation. when I started first I saw error related to "master not discovered or elected yet, an election requires two nodes ..", then I have tried t…

---

## [Searching tokenized field containing "." returns unexpected results](https://discuss.elastic.co/t/searching-tokenized-field-containing-returns-unexpected-results/192425)

<div class="topic-metadata">

**Author:** [@nverrill](https://discuss.elastic.co/u/nverrill)\
**Replies:** 2\
**Last updated:** [August 5, 2019, 1:13pm UTC](https://discuss.elastic.co/t/searching-tokenized-field-containing-returns-unexpected-results/192425 "2019-08-05T13:13:10Z")

</div>

I have a newly tokenized field of type text for domains. It is a reverse path hierarchy tokenizer on the "." So a field like "adservice.google.com" becomes the following 3 tokens: com google.com adservice.google.com …

---

## [How custom mapping at elasticsearch?](https://discuss.elastic.co/t/how-custom-mapping-at-elasticsearch/193765)

<div class="topic-metadata">

**Author:** [@psanggabuana](https://discuss.elastic.co/u/psanggabuana)\
**Replies:** 5\
**Last updated:** [August 5, 2019, 12:59pm UTC](https://discuss.elastic.co/t/how-custom-mapping-at-elasticsearch/193765 "2019-08-05T12:59:11Z")

</div>

I have a problem to showing string variable on grafana graph. I have a error like this: "Fielddata is disabled on text fields by default. Set fielddata=true on \[....\] in order to load fielddata in memory by uninverting…

---

## [ILM doesn't work after upgrade from 6.7 to 7.2](https://discuss.elastic.co/t/ilm-doesnt-work-after-upgrade-from-6-7-to-7-2/193518)

<div class="topic-metadata">

**Author:** [@\_yumi](https://discuss.elastic.co/u/_yumi)\
**Replies:** 1\
**Last updated:** [August 5, 2019, 12:16pm UTC](https://discuss.elastic.co/t/ilm-doesnt-work-after-upgrade-from-6-7-to-7-2/193518 "2019-08-05T12:16:48Z")

</div>

Hello! Recently I upgraded from 6.7 to 7.2 (non-OSS free edition, upgraded with entire cluster restart). Previously I've been using ILM policies and they were working like a charm since release. But after I upgraded, th…

---

## [Data too large, data for \[\<transport\_request\>\] would be \[10554893106/9.8gb\], which is larger than the limit of \[10092838912/9.3gb\], real usage: \[10523239224/9.8gb\], new bytes reserved: \[31653882/30.1mb\]\]\]\]](https://discuss.elastic.co/t/data-too-large-data-for-transport-request-would-be-10554893106-9-8gb-which-is-larger-than-the-limit-of-10092838912-9-3gb-real-usage-10523239224-9-8gb-new-bytes-reserved-31653882-30-1mb/192215)

<div class="topic-metadata">

**Author:** [@Rakesh4](https://discuss.elastic.co/u/Rakesh4)\
**Replies:** 16\
**Last updated:** [August 5, 2019, 11:54am UTC](https://discuss.elastic.co/t/data-too-large-data-for-transport-request-would-be-10554893106-9-8gb-which-is-larger-than-the-limit-of-10092838912-9-3gb-real-usage-10523239224-9-8gb-new-bytes-reserved-31653882-30-1mb/192215 "2019-08-05T11:54:37Z")

</div>

Hi, We have elastic search configuration : version : 7.1.1 3 master node 3 data node 2 coordinating node memory configuration Data node : 64 machine java heap allocation : 10 gb coord : 32 gb java heap aloc …

---

## [How to have \_all mapping in es6 without indexing the source field](https://discuss.elastic.co/t/how-to-have-all-mapping-in-es6-without-indexing-the-source-field/193130)

<div class="topic-metadata">

**Author:** [@Adam\_Hawkins](https://discuss.elastic.co/u/Adam_Hawkins)\
**Replies:** 3\
**Last updated:** [August 5, 2019, 11:43am UTC](https://discuss.elastic.co/t/how-to-have-all-mapping-in-es6-without-indexing-the-source-field/193130 "2019-08-05T11:43:28Z")

</div>

I'm trying to index a document that has 1000s of fields, i'm only interested if the search text exists in the document. not searching on the specific field. I understand that v5 had an \_all field which indexed the aggre…

---

## [How to better design a system where a document language can be changed?](https://discuss.elastic.co/t/how-to-better-design-a-system-where-a-document-language-can-be-changed/193275)

<div class="topic-metadata">

**Author:** [@amitmbm](https://discuss.elastic.co/u/amitmbm)\
**Replies:** 2\
**Last updated:** [August 5, 2019, 11:27am UTC](https://discuss.elastic.co/t/how-to-better-design-a-system-where-a-document-language-can-be-changed/193275 "2019-08-05T11:27:00Z")

</div>

I have a legacy system , which stores documents of a specific language in its own index, for example, English based index will store all the documents which have language English, the german-based index will store all t…

---

## [Elasticsearch alarm payload not working](https://discuss.elastic.co/t/elasticsearch-alarm-payload-not-working/193670)

<div class="topic-metadata">

**Author:** [@Piyush\_Safaya](https://discuss.elastic.co/u/Piyush_Safaya)\
**Replies:** 3\
**Last updated:** [August 5, 2019, 11:26am UTC](https://discuss.elastic.co/t/elasticsearch-alarm-payload-not-working/193670 "2019-08-05T11:26:50Z")

</div>

I am facing issues when I try to use the Elastic alarm option. I basically want to monitor 1 specific event and once it happens I want contents of the event to be inserted into the new index . Email works fine for me. C…

---

## [How to search exact string in array of string values](https://discuss.elastic.co/t/how-to-search-exact-string-in-array-of-string-values/193564)

<div class="topic-metadata">

**Author:** [@111189](https://discuss.elastic.co/u/111189)\
**Replies:** 1\
**Last updated:** [August 5, 2019, 11:25am UTC](https://discuss.elastic.co/t/how-to-search-exact-string-in-array-of-string-values/193564 "2019-08-05T11:25:30Z")

</div>

This is my index { "mappings": { "page": { "properties": { "company-product-skus": { "type": "text", "include\_in\_all": false, "analyzer": "keyword", "index":…

---

## [NoSuchMethodError: org.elasticsearch.common.xcontent.XContentBuilder.string()Ljava/lang/String](https://discuss.elastic.co/t/nosuchmethoderror-org-elasticsearch-common-xcontent-xcontentbuilder-string-ljava-lang-string/193734)

<div class="topic-metadata">

**Author:** [@Vladimir\_Routine](https://discuss.elastic.co/u/Vladimir_Routine)\
**Replies:** 7\
**Last updated:** [August 5, 2019, 11:20am UTC](https://discuss.elastic.co/t/nosuchmethoderror-org-elasticsearch-common-xcontent-xcontentbuilder-string-ljava-lang-string/193734 "2019-08-05T11:20:59Z")

</div>

I am using elasticsearch 6.1.1 alongside spring and I am getting the following error NoSuchMethodError: org.elasticsearch.common.xcontent.XContentBuilder.string()Ljava/lang/String what might be the reason?

---

## [Unable to access kibana from my machine](https://discuss.elastic.co/t/unable-to-access-kibana-from-my-machine/193772)

<div class="topic-metadata">

**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\
**Replies:** 0\
**Last updated:** [August 5, 2019, 10:41am UTC](https://discuss.elastic.co/t/unable-to-access-kibana-from-my-machine/193772 "2019-08-05T10:41:09Z")

</div>

I installed kibana in google vm instance and now I am trying to use kibana from my machine browser : http://35.209.46.170:5601/ This site can't be reached this is the message i am getting. kibana .yml file: # Kibana …

---

## [Path\_match object name Dynamic templates](https://discuss.elastic.co/t/path-match-object-name-dynamic-templates/193715)

<div class="topic-metadata">

**Author:** [@golmartvietnam](https://discuss.elastic.co/u/golmartvietnam)\
**Replies:** 1\
**Last updated:** [August 5, 2019, 9:52am UTC](https://discuss.elastic.co/t/path-match-object-name-dynamic-templates/193715 "2019-08-05T09:52:37Z")

</div>

Hello, I created the following dynamic template to apply a custom mapping on the "kubernetes" object and it's subobjects and fields: It should match these: kubernetes.container.name kubernetes.pod.name kubernetes.po…

---

## [How to compare data for 1 hr to the data for the same 1 hour 7 days ago](https://discuss.elastic.co/t/how-to-compare-data-for-1-hr-to-the-data-for-the-same-1-hour-7-days-ago/193313)

<div class="topic-metadata">

**Author:** [@kalyani](https://discuss.elastic.co/u/kalyani)\
**Replies:** 3\
**Last updated:** [August 5, 2019, 9:40am UTC](https://discuss.elastic.co/t/how-to-compare-data-for-1-hr-to-the-data-for-the-same-1-hour-7-days-ago/193313 "2019-08-05T09:40:45Z")

</div>

Hello, I have a set of data from an elastic search index for a period of 1 hour today. I want to compare that count with the data for the same 1 hrs but 7days ago. And then calculate the percentage change. Please s…

---

## [NEST result loses aggregates](https://discuss.elastic.co/t/nest-result-loses-aggregates/193589)

<div class="topic-metadata">

**Author:** [@rwb](https://discuss.elastic.co/u/rwb)\
**Replies:** 2\
**Last updated:** [August 5, 2019, 9:15am UTC](https://discuss.elastic.co/t/nest-result-loses-aggregates/193589 "2019-08-05T09:15:52Z")

</div>

This is my query { "query":{ "match\_all":{ } }, "size":20, "aggs":{ "CompanyName.raw":{ "terms":{ "field":"CompanyName.raw", "size":20, "order"…

---

## [Dynamically generate watch actions using Painless to support multiple actions?](https://discuss.elastic.co/t/dynamically-generate-watch-actions-using-painless-to-support-multiple-actions/193527)

<div class="topic-metadata">

**Author:** [@ypid-geberit](https://discuss.elastic.co/u/ypid-geberit)\
**Replies:** 2\
**Last updated:** [August 5, 2019, 9:12am UTC](https://discuss.elastic.co/t/dynamically-generate-watch-actions-using-painless-to-support-multiple-actions/193527 "2019-08-05T09:12:46Z")

</div>

Yet another rehash of https://discuss.elastic.co/t/multiple-actions-in-the-watcher-yet/136925, I am also aware of the workaround with Logstash, however, I would be interested in a solution for this limitation and would l…

---

## [Urdu language support for ELK](https://discuss.elastic.co/t/urdu-language-support-for-elk/193751)

<div class="topic-metadata">

**Author:** [@asad\_ali](https://discuss.elastic.co/u/asad_ali)\
**Replies:** 0\
**Last updated:** [August 5, 2019, 8:31am UTC](https://discuss.elastic.co/t/urdu-language-support-for-elk/193751 "2019-08-05T08:31:12Z")

</div>

Dear Community, I want to know how can I decode content coming from URDU language, I don't see the support of URDU language over the link The closest is arabic but its encoded as "???". Do i need to write custom…

---

## [Info about recovery from snapshots](https://discuss.elastic.co/t/info-about-recovery-from-snapshots/193750)

<div class="topic-metadata">

**Author:** [@anowak](https://discuss.elastic.co/u/anowak)\
**Replies:** 0\
**Last updated:** [August 5, 2019, 8:22am UTC](https://discuss.elastic.co/t/info-about-recovery-from-snapshots/193750 "2019-08-05T08:22:05Z")

</div>

Hello Is there any way to get information about all previous status of recovery from snapshot. I tried to use GET /\_recovery?human and GET \_cat/recovery?v but this show me only few latests internal restore process (type…

---

## [Elasticsearch Java RestHighLevelClient not sending authorization with every search request](https://discuss.elastic.co/t/elasticsearch-java-resthighlevelclient-not-sending-authorization-with-every-search-request/193747)

<div class="topic-metadata">

**Author:** [@steghio](https://discuss.elastic.co/u/steghio)\
**Replies:** 0\
**Last updated:** [August 5, 2019, 7:51am UTC](https://discuss.elastic.co/t/elasticsearch-java-resthighlevelclient-not-sending-authorization-with-every-search-request/193747 "2019-08-05T07:51:35Z")

</div>

As described here: https://stackoverflow.com/questions/57222549/elasticsearch-java-resthighlevelclient-not-sending-authorization-with-every-sear Do you guys have an idea of what we might be missing? Thanks and cheers

---

## [Elasticsearch .NET 7.1.0 issue](https://discuss.elastic.co/t/elasticsearch-net-7-1-0-issue/193674)

<div class="topic-metadata">

**Author:** [@roman.pavliuk](https://discuss.elastic.co/u/roman.pavliuk)\
**Replies:** 9\
**Last updated:** [August 5, 2019, 7:11am UTC](https://discuss.elastic.co/t/elasticsearch-net-7-1-0-issue/193674 "2019-08-05T07:11:30Z")

</div>

I have updated my project into last elasticsearch version. But after this, when I trying to get data from my elastic, I have next exception. My nugets: Elasticsearch.Net v7.1.0, NEST 7.1.0 Before update, when I using 6.7…

---

## [Duplicate field during reindex](https://discuss.elastic.co/t/duplicate-field-during-reindex/193534)

<div class="topic-metadata">

**Author:** [@GabrielM](https://discuss.elastic.co/u/GabrielM)\
**Replies:** 3\
**Last updated:** [August 5, 2019, 7:09am UTC](https://discuss.elastic.co/t/duplicate-field-during-reindex/193534 "2019-08-05T07:09:30Z")

</div>

Hello ! I am doing a reindex from a 1.3.4 cluster to a 7.1.1 cluster but I have an error during the reindex : curl -X POST "$ES/\_reindex?wait\_for\_completion=true" -H 'Content-Type: application/json' -d' { …

---

## [How to order by child nodes in ElasticSearch](https://discuss.elastic.co/t/how-to-order-by-child-nodes-in-elasticsearch/193729)

<div class="topic-metadata">

**Author:** [@gatisrid](https://discuss.elastic.co/u/gatisrid)\
**Replies:** 0\
**Last updated:** [August 5, 2019, 6:22am UTC](https://discuss.elastic.co/t/how-to-order-by-child-nodes-in-elasticsearch/193729 "2019-08-05T06:22:29Z")

</div>

I'm trying to sort some products by child nodes. I have products, for each product has child node "stock" (contains productId (join field), stockId, stockQuantity, stockOnTheWay...) there can be multiple child nodes and …

---

## [java.lang.IllegalStateException: The index \[\[.kibana/t1LHjtFXSKWK9oD76iBYIQ\]\]](https://discuss.elastic.co/t/java-lang-illegalstateexception-the-index-kibana-t1lhjtfxskwk9od76ibyiq/193439)

<div class="topic-metadata">

**Author:** [@Trevorp](https://discuss.elastic.co/u/Trevorp)\
**Replies:** 3\
**Last updated:** [August 5, 2019, 6:14am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-the-index-kibana-t1lhjtfxskwk9od76ibyiq/193439 "2019-08-05T06:14:43Z")

</div>

I am trying to install Elasticsearch on one of our servers. It was used for an upgrade test of ELK before. I now want to put a clean install ELK 7.3 on this server. I deleted all the old ELK files. Or so i thought but n…

---

## [Fully automated upgrading of Elasticsearch cluster](https://discuss.elastic.co/t/fully-automated-upgrading-of-elasticsearch-cluster/193665)

<div class="topic-metadata">

**Author:** [@haotian9850](https://discuss.elastic.co/u/haotian9850)\
**Replies:** 3\
**Last updated:** [August 5, 2019, 6:07am UTC](https://discuss.elastic.co/t/fully-automated-upgrading-of-elasticsearch-cluster/193665 "2019-08-05T06:07:42Z")

</div>

Hey there, currently working on a project that aims to automate upgrading of an Elasticsearch cluster (a typical cluster size is ~20 nodes, the majority of which are master-eligible) to a higher minor version (eg. 7.1.1 …

---

## [Elasticsearch and Kibana version 6 and 7 Windows 2019 support](https://discuss.elastic.co/t/elasticsearch-and-kibana-version-6-and-7-windows-2019-support/192844)

<div class="topic-metadata">

**Author:** [@ropal](https://discuss.elastic.co/u/ropal)\
**Replies:** 1\
**Last updated:** [August 5, 2019, 5:08am UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-version-6-and-7-windows-2019-support/192844 "2019-08-05T05:08:45Z")

</div>

I could see from the support matrix that ES version starting from 5.5.x is supported on Windows Server 2016. Just wanted to know if it is supported in Windows Server 2019 as well? Are there any potential issues that were…

---

## [Solaris 10 Syslog cannot forwarding custom logs to logstatsh](https://discuss.elastic.co/t/solaris-10-syslog-cannot-forwarding-custom-logs-to-logstatsh/193712)

<div class="topic-metadata">

**Author:** [@vinaymukkala](https://discuss.elastic.co/u/vinaymukkala)\
**Replies:** 0\
**Last updated:** [August 5, 2019, 3:54am UTC](https://discuss.elastic.co/t/solaris-10-syslog-cannot-forwarding-custom-logs-to-logstatsh/193712 "2019-08-05T03:54:30Z")

</div>

Hi All, Any one Could you help provide your expertise to send the custom logs ( /app/logs/mqaudit.logs \*) forwarding to logstagsh server for ELK. We tried to use the syslog ( soalris 10 sparc system) but did not find t…

---

## [Snapshot failed](https://discuss.elastic.co/t/snapshot-failed/193218)

<div class="topic-metadata">

**Author:** [@elk3](https://discuss.elastic.co/u/elk3)\
**Replies:** 3\
**Last updated:** [August 1, 2019, 6:51am UTC](https://discuss.elastic.co/t/snapshot-failed/193218 "2019-08-01T06:51:19Z")

</div>

{ "error": { "root\_cause": \[ { "type": "snapshot\_restore\_exception", "reason": "\[student\_backup\_clay:student\_backup\_clay/Wdlq3XOnTWuXGxjTqZt0cQ\] the snapshot was created with Elasticsearch ver…

---

## [Elastic Search Hierarchical Data Need Helpp](https://discuss.elastic.co/t/elastic-search-hierarchical-data-need-helpp/193466)

<div class="topic-metadata">

**Author:** [@Bidzina\_Goginashvili](https://discuss.elastic.co/u/Bidzina_Goginashvili)\
**Replies:** 2\
**Last updated:** [August 4, 2019, 11:40pm UTC](https://discuss.elastic.co/t/elastic-search-hierarchical-data-need-helpp/193466 "2019-08-04T23:40:15Z")

</div>

I have a little problem with elastic search... I have products table.which looks something like this ID NAME MODELNAME IsParentModel 1 IPhone 7 16 gb IPhone 7 1 2 IPhone 7 32 gb IPhone 7 0 3 IPhone 7 64 gb IPhone 7 …

---

## [When elasticsearch gets full, what do I do?](https://discuss.elastic.co/t/when-elasticsearch-gets-full-what-do-i-do/193555)

<div class="topic-metadata">

**Author:** [@madcvvs](https://discuss.elastic.co/u/madcvvs)\
**Replies:** 1\
**Last updated:** [August 4, 2019, 11:30pm UTC](https://discuss.elastic.co/t/when-elasticsearch-gets-full-what-do-i-do/193555 "2019-08-04T23:30:32Z")

</div>

Hello! I have an elasticsearch + kibana installation and soon I'll start handling lots of data. The server I'm using has 8GB of RAM, so after a while I will have used up using all the servers RAM. When this happens I wa…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1201)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1203)
