# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1206

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1207

---

## [I installed elasticsearch 7 in google cloud instance its working fine with localhost, but i want to run it in my machine using browser](https://discuss.elastic.co/t/i-installed-elasticsearch-7-in-google-cloud-instance-its-working-fine-with-localhost-but-i-want-to-run-it-in-my-machine-using-browser/193327)

<div class="topic-metadata">

**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 1:08pm UTC](https://discuss.elastic.co/t/i-installed-elasticsearch-7-in-google-cloud-instance-its-working-fine-with-localhost-but-i-want-to-run-it-in-my-machine-using-browser/193327 "2019-08-01T13:08:21Z")

</div>

This is the log file : \[2019-08-01T12:57:48,617\]\[DEBUG\]\[o.e.a.ActionModule \] \[elastic-stage-vyakar\] Using REST wrapper from plugin org.elasticsearch.xpack.security.Security \[2019-08-01T12:57:49,307\]\[INFO \]\[o.e.d.D…

---

## [Is there an easy way that can search specify indices, if not, search all?](https://discuss.elastic.co/t/is-there-an-easy-way-that-can-search-specify-indices-if-not-search-all/193023)

<div class="topic-metadata">

**Author:** [@imqishi](https://discuss.elastic.co/u/imqishi)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:57pm UTC](https://discuss.elastic.co/t/is-there-an-easy-way-that-can-search-specify-indices-if-not-search-all/193023 "2019-08-01T12:57:33Z")

</div>

Now I have many data and indices, and search is slower, but most data can be searched in a year's indices(I split data by month), so I want to search latest 1 year first, if not get result, try to search all. I can do t…

---

## [Logstash to elasticsearch TCP connection limit](https://discuss.elastic.co/t/logstash-to-elasticsearch-tcp-connection-limit/193323)

<div class="topic-metadata">

**Author:** [@ravitandur](https://discuss.elastic.co/u/ravitandur)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 12:55pm UTC](https://discuss.elastic.co/t/logstash-to-elasticsearch-tcp-connection-limit/193323 "2019-08-01T12:55:59Z")

</div>

We are using elasticsearch output in logstash. What we are observing during the peak load is, from one logstash node it is able to establish only 400 TCP connections to elasticsearch nodes. Why it is not going beyond 400…

---

## [URI query help](https://discuss.elastic.co/t/uri-query-help/192431)

<div class="topic-metadata">

**Author:** [@JB\_Pollard](https://discuss.elastic.co/u/JB_Pollard)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:53pm UTC](https://discuss.elastic.co/t/uri-query-help/192431 "2019-08-01T12:53:31Z")

</div>

Trying to pull a query via the url without the index information just the data and querying the log file path. I've tried adding ?q=log.file.path:"\*TeamViewer11\_Logfile.log" and the full path to the url query with no luc…

---

## [ElastiSearch Supports GlusterFS and Rook Storage System?](https://discuss.elastic.co/t/elastisearch-supports-glusterfs-and-rook-storage-system/193319)

<div class="topic-metadata">

**Author:** [@Varun\_S](https://discuss.elastic.co/u/Varun_S)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:52pm UTC](https://discuss.elastic.co/t/elastisearch-supports-glusterfs-and-rook-storage-system/193319 "2019-08-01T12:52:38Z")

</div>

Hi, Does ElastiSearch Supports GlusterFS and Rook Storage System? Regards, Varun S

---

## [Assistance with a proper searching technique](https://discuss.elastic.co/t/assistance-with-a-proper-searching-technique/193198)

<div class="topic-metadata">

**Author:** [@Steven\_Garcia](https://discuss.elastic.co/u/Steven_Garcia)\
**Replies:** 2\
**Last updated:** [August 1, 2019, 12:45pm UTC](https://discuss.elastic.co/t/assistance-with-a-proper-searching-technique/193198 "2019-08-01T12:45:09Z")

</div>

Hey everyone, Question: I tried looking around (my searching skills probably sucks) to see if there is an example of getting partial matches. Would anyone have any idea? So for example my list of search terms would be…

---

## [Index size increase after configuring patterns](https://discuss.elastic.co/t/index-size-increase-after-configuring-patterns/193321)

<div class="topic-metadata">

**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 12:42pm UTC](https://discuss.elastic.co/t/index-size-increase-after-configuring-patterns/193321 "2019-08-01T12:42:09Z")

</div>

I’ve been ingesting log files from a firewall for a few months now. The monthly reindex size would be a couple of gigabytes on average. Since I’ve introduced filter patterns which create separate fields my daily indexes…

---

## [Export data from hadoop to elastic using java](https://discuss.elastic.co/t/export-data-from-hadoop-to-elastic-using-java/193056)

<div class="topic-metadata">

**Author:** [@examin](https://discuss.elastic.co/u/examin)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:42pm UTC](https://discuss.elastic.co/t/export-data-from-hadoop-to-elastic-using-java/193056 "2019-08-01T12:42:08Z")

</div>

I have to do some pre-processing( denormalization) of hadoop tables before inserting it to ElasticSearch. My plan is to use java to do this task. Could you please guide me how to do this, Or please share some doc link et…

---

## [Could not install Analysis Plugin that I created](https://discuss.elastic.co/t/could-not-install-analysis-plugin-that-i-created/193070)

<div class="topic-metadata">

**Author:** [@naughie](https://discuss.elastic.co/u/naughie)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:40pm UTC](https://discuss.elastic.co/t/could-not-install-analysis-plugin-that-i-created/193070 "2019-08-01T12:40:51Z")

</div>

I have created a new analysis plugin with mvn, but installation bin/elasticsearch-plugin install failed. Env CentOS 7 elasticsearch 7.2.0 java 1.8 Files pom.xml src/main/assemblies/plugin.xml src/main/resources/plugi…

---

## [Legal character set for field names](https://discuss.elastic.co/t/legal-character-set-for-field-names/190796)

<div class="topic-metadata">

**Author:** [@iamredlus](https://discuss.elastic.co/u/iamredlus)\
**Replies:** 2\
**Last updated:** [August 1, 2019, 12:31pm UTC](https://discuss.elastic.co/t/legal-character-set-for-field-names/190796 "2019-08-01T12:31:40Z")

</div>

Hey, I'd like to add some validation on my side for field names before indexing documents into elsaticsearch. However, I cannot find any documentation describing what is an invalid field name. The only thing I found was…

---

## [Unable to parse json logs](https://discuss.elastic.co/t/unable-to-parse-json-logs/193143)

<div class="topic-metadata">

**Author:** [@Raghav\_Agrawal](https://discuss.elastic.co/u/Raghav_Agrawal)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:28pm UTC](https://discuss.elastic.co/t/unable-to-parse-json-logs/193143 "2019-08-01T12:28:33Z")

</div>

2019-07-31T14:29:12.644Z DEBUG \[elasticsearch\] elasticsearch/client.go:507 Bulk item insert failed (i=12, status=500): {"type":"exception","reason":"java.lang.IllegalArgumentException: java.lang.IllegalArgumentException:…

---

## [Incompatible Low Version](https://discuss.elastic.co/t/incompatible-low-version/193233)

<div class="topic-metadata">

**Author:** [@laijianbin](https://discuss.elastic.co/u/laijianbin)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:26pm UTC](https://discuss.elastic.co/t/incompatible-low-version/193233 "2019-08-01T12:26:54Z")

</div>

when java client jar use Elasticsearch 6.8.0,Elastic Server use 6.6.1 Is there any soluation to resolve this problem?

---

## [Watcher status Failure](https://discuss.elastic.co/t/watcher-status-failure/191588)

<div class="topic-metadata">

**Author:** [@anaxagoras.kosta](https://discuss.elastic.co/u/anaxagoras.kosta)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:17pm UTC](https://discuss.elastic.co/t/watcher-status-failure/191588 "2019-08-01T12:17:08Z")

</div>

I happened to install ELK 7.2 for testing purposes. We came across the alert system (Watchers) but unfortunately we cant make it work. Log file is in txt file (json format): // \[{"date":"19-07-2019 04:33:46pm","error"…

---

## [Watch for Login failure in windows events with watcher](https://discuss.elastic.co/t/watch-for-login-failure-in-windows-events-with-watcher/190277)

<div class="topic-metadata">

**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:09pm UTC](https://discuss.elastic.co/t/watch-for-login-failure-in-windows-events-with-watcher/190277 "2019-08-01T12:09:48Z")

</div>

I want to alert when there is some number of windows authentication failure events within certain period of time. Can somebody help me with the code? i am new to this.

---

## [Kibana watcher alert error](https://discuss.elastic.co/t/kibana-watcher-alert-error/190601)

<div class="topic-metadata">

**Author:** [@techrichit](https://discuss.elastic.co/u/techrichit)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:07pm UTC](https://discuss.elastic.co/t/kibana-watcher-alert-error/190601 "2019-08-01T12:07:14Z")

</div>

I am try to create a watcher alert for this I am trying to write a json logic to grep from kibana logs i am unsucessfull. my requirement: I have three fields a\_uniquejobid and b\_status and c\_timestamp. from the logs i…

---

## [Watcher: List of recipients from stored script/template](https://discuss.elastic.co/t/watcher-list-of-recipients-from-stored-script-template/191382)

<div class="topic-metadata">

**Author:** [@mario\_zet](https://discuss.elastic.co/u/mario_zet)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:06pm UTC](https://discuss.elastic.co/t/watcher-list-of-recipients-from-stored-script-template/191382 "2019-08-01T12:06:15Z")

</div>

Hello there! I have configured several watchers in elastic version 7.0.1. In all watchers I have e-mail action with the same list of recipients. I'd like to ask is there any possibility to include that list from stored…

---

## [Watcher transform runtime error illegal\_argument\_exception: "dynamic method \[java.lang.String, getMillis/0\] not found"](https://discuss.elastic.co/t/watcher-transform-runtime-error-illegal-argument-exception-dynamic-method-java-lang-string-getmillis-0-not-found/191774)

<div class="topic-metadata">

**Author:** [@Josip\_Cagalj](https://discuss.elastic.co/u/Josip_Cagalj)\
**Replies:** 2\
**Last updated:** [August 1, 2019, 12:03pm UTC](https://discuss.elastic.co/t/watcher-transform-runtime-error-illegal-argument-exception-dynamic-method-java-lang-string-getmillis-0-not-found/191774 "2019-08-01T12:03:32Z")

</div>

Hi, I've created a watch containing transform for which I get a runtime error when executing: "type" : "illegal\_argument\_exception", "reason" : "dynamic method \[java.lang.String, getMillis/0\] not found…

---

## [Invalid format: "2019-05-16" is too short](https://discuss.elastic.co/t/invalid-format-2019-05-16-is-too-short/191988)

<div class="topic-metadata">

**Author:** [@zxyyxzzxy001](https://discuss.elastic.co/u/zxyyxzzxy001)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 12:01pm UTC](https://discuss.elastic.co/t/invalid-format-2019-05-16-is-too-short/191988 "2019-08-01T12:01:59Z")

</div>

I use logstash transfer data from mysql to elasticsearch.When logstash output data to elasticsearch,it throw an exception : Invalid format: "2019-05-16" is too short. the column start\_date in mysql data type is date.…

---

## [Body email watcher](https://discuss.elastic.co/t/body-email-watcher/192160)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 11:59am UTC](https://discuss.elastic.co/t/body-email-watcher/192160 "2019-08-01T11:59:33Z")

</div>

hello guys, i just wanna ask is there any format to show the "user", "geo", "hits" on body email. thanks

---

## [All shards failed for phase: \[query\] on Elasticsearch 7.2.0](https://discuss.elastic.co/t/all-shards-failed-for-phase-query-on-elasticsearch-7-2-0/193270)

<div class="topic-metadata">

**Author:** [@Extinguo](https://discuss.elastic.co/u/Extinguo)\
**Replies:** 4\
**Last updated:** [August 1, 2019, 11:23am UTC](https://discuss.elastic.co/t/all-shards-failed-for-phase-query-on-elasticsearch-7-2-0/193270 "2019-08-01T11:23:47Z")

</div>

Hey guys, I'm running Elastic 7.2.0 on a single machine in docker containers. It works fine except for some problems with the shards. I let Elastic run for a few days and looked at the logs today. The look fine, except…

---

## [Shards vs Indexes: which when for chunkable data?](https://discuss.elastic.co/t/shards-vs-indexes-which-when-for-chunkable-data/193213)

<div class="topic-metadata">

**Author:** [@IanRC72](https://discuss.elastic.co/u/IanRC72)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 11:02am UTC](https://discuss.elastic.co/t/shards-vs-indexes-which-when-for-chunkable-data/193213 "2019-08-01T11:02:07Z")

</div>

Hopefully a different take on an old question... I'm wondering if there's a known formula for choosing when to have many indexes with, say, one shard each vs. one index with many shards, or some point in between, for th…

---

## [ElasticSearch Timeout Error during heavy write load](https://discuss.elastic.co/t/elasticsearch-timeout-error-during-heavy-write-load/193305)

<div class="topic-metadata">

**Author:** [@vishnu-team8](https://discuss.elastic.co/u/vishnu-team8)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 11:01am UTC](https://discuss.elastic.co/t/elasticsearch-timeout-error-during-heavy-write-load/193305 "2019-08-01T11:01:03Z")

</div>

Error: Update taking more than 60 seconds. WARNING:elasticsearch:POST http://elasticsearch.es:9200/profiles/doc/x\_DeumMBCUnYUtZ/\_update?refresh=false&version=9 \[status:N/A request:60.059s\] Also getting Caused by: or…

---

## [Change ES cluster\_uuid](https://discuss.elastic.co/t/change-es-cluster-uuid/193092)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 7\
**Last updated:** [August 1, 2019, 10:57am UTC](https://discuss.elastic.co/t/change-es-cluster-uuid/193092 "2019-08-01T10:57:44Z")

</div>

hi, I saw that I have two different cluster with the same cluster\_uuid. I don't know how this could happened but I can say that I cloned one node from the first cluster to create the new one. is there a way to change t…

---

## [Indexing a large number of fields](https://discuss.elastic.co/t/indexing-a-large-number-of-fields/193304)

<div class="topic-metadata">

**Author:** [@vaibhav97garg](https://discuss.elastic.co/u/vaibhav97garg)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 10:46am UTC](https://discuss.elastic.co/t/indexing-a-large-number-of-fields/193304 "2019-08-01T10:46:08Z")

</div>

I am trying to bulk index a cluster with a large number of fields and everytime i send a request, it results in a timeout. I read somewhere this could happen because of mapping explosion. I am using the JAVA API and w…

---

## [Way to perform case insensitive regexp search on keyword field](https://discuss.elastic.co/t/way-to-perform-case-insensitive-regexp-search-on-keyword-field/193303)

<div class="topic-metadata">

**Author:** [@avinash\_07](https://discuss.elastic.co/u/avinash_07)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 10:39am UTC](https://discuss.elastic.co/t/way-to-perform-case-insensitive-regexp-search-on-keyword-field/193303 "2019-08-01T10:39:43Z")

</div>

I have an index with the following mappings: "mappings": { "event": { "properties": { "id": { "type": "keyword" }, "name": { "type": "keyword" }, "description": { …

---

## ["Too many open files in system" error from Elasticsearch](https://discuss.elastic.co/t/too-many-open-files-in-system-error-from-elasticsearch/193059)

<div class="topic-metadata">

**Author:** [@subha1](https://discuss.elastic.co/u/subha1)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 10:15am UTC](https://discuss.elastic.co/t/too-many-open-files-in-system-error-from-elasticsearch/193059 "2019-08-01T10:15:35Z")

</div>

Hi, We are using Elastic search version 6.5.4 , and with 3 Master , 2 Data & 5 Client pods on a Kubernetes environment. We could see there are 155 unassigned shards , when checked , it shows the below error: \[root@cs…

---

## [Issue securing Elastic Search and Kibana](https://discuss.elastic.co/t/issue-securing-elastic-search-and-kibana/192730)

<div class="topic-metadata">

**Author:** [@elasuser](https://discuss.elastic.co/u/elasuser)\
**Replies:** 3\
**Last updated:** [August 1, 2019, 10:02am UTC](https://discuss.elastic.co/t/issue-securing-elastic-search-and-kibana/192730 "2019-08-01T10:02:14Z")

</div>

Hello, I'm new to elastic search and having some issues with securing it together with Kibana security. This is what I've done: 1- Secure elasticsearch in the yaml with file realm xpack.security.enabled: true …

---

## [Aggregation on a scripted field](https://discuss.elastic.co/t/aggregation-on-a-scripted-field/193286)

<div class="topic-metadata">

**Author:** [@HansPeterSloot](https://discuss.elastic.co/u/HansPeterSloot)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 9:34am UTC](https://discuss.elastic.co/t/aggregation-on-a-scripted-field/193286 "2019-08-01T09:34:12Z")

</div>

Hello all, I have created a scripted field to an index. As far as I can see it is aggregatable. See below: GET master\*/\_field\_caps?fields=Size { "fields" : { "Size" : { "text" : { "type" : "text", "searchable" …

---

## [Multiple filter on alias](https://discuss.elastic.co/t/multiple-filter-on-alias/193284)

<div class="topic-metadata">

**Author:** [@parosio](https://discuss.elastic.co/u/parosio)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 9:29am UTC](https://discuss.elastic.co/t/multiple-filter-on-alias/193284 "2019-08-01T09:29:03Z")

</div>

Hello, I wish it could be possible to define an alias with multiple filters, like in: POST /\_aliases { "actions": \[ { "add": { "index": "av-asset", "alias": "av-server-recent", "filt…

---

## [Java High Level REST Client - GetRequest sequence number and primary term](https://discuss.elastic.co/t/java-high-level-rest-client-getrequest-sequence-number-and-primary-term/193083)

<div class="topic-metadata">

**Author:** [@edovac](https://discuss.elastic.co/u/edovac)\
**Replies:** 4\
**Last updated:** [August 1, 2019, 7:44am UTC](https://discuss.elastic.co/t/java-high-level-rest-client-getrequest-sequence-number-and-primary-term/193083 "2019-08-01T07:44:34Z")

</div>

Hi, I'm using elasticsearch version 7.2.0 and implementing in my application the optimistic concurrency control with sequence number and primary term parameters. As I understand, before these two parameters were introd…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1205)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1207)
