# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1230 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1231 --- ## [Searching on a transformation/interpretation of a field](https://discuss.elastic.co/t/searching-on-a-transformation-interpretation-of-a-field/189966)
**Author:** [@m1ke](https://discuss.elastic.co/u/m1ke)\ **Replies:** 2\ **Last updated:** [July 11, 2019, 3:37pm UTC](https://discuss.elastic.co/t/searching-on-a-transformation-interpretation-of-a-field/189966 "2019-07-11T15:37:06Z")
I have an index of 30m items; I indexed them using cURL reading a CSV from the command line, as suggested by an article I found on the ES blog. So did not use logstash. The index process took a few days. I do not expect … --- ## [What options to set in mapping for string that's a JSON representation?](https://discuss.elastic.co/t/what-options-to-set-in-mapping-for-string-thats-a-json-representation/189039)
**Author:** [@i333](https://discuss.elastic.co/u/i333)\ **Replies:** 8\ **Last updated:** [July 11, 2019, 3:05pm UTC](https://discuss.elastic.co/t/what-options-to-set-in-mapping-for-string-thats-a-json-representation/189039 "2019-07-11T15:05:13Z")
I have a field that's a JSON string representation and I don't need to sort or search on it. Is it correct that I should use text type instead of keyword type? Which options should I set at https://www.elastic.co/guide/… --- ## [Open closed index with older version](https://discuss.elastic.co/t/open-closed-index-with-older-version/190039)
**Author:** [@s55man](https://discuss.elastic.co/u/s55man)\ **Replies:** 2\ **Last updated:** [July 11, 2019, 2:43pm UTC](https://discuss.elastic.co/t/open-closed-index-with-older-version/190039 "2019-07-11T14:43:50Z")
Hi everyone, I have doubts about how to retrieve documents from a closed index in older version of Elasticsearch. Suppose we close an index because it is already out of the “online” query range and that index when we c… --- ## [Issues with elastic index templates](https://discuss.elastic.co/t/issues-with-elastic-index-templates/190043)
**Author:** [@Ranjith\_M](https://discuss.elastic.co/u/Ranjith_M)\ **Replies:** 0\ **Last updated:** [July 11, 2019, 2:39pm UTC](https://discuss.elastic.co/t/issues-with-elastic-index-templates/190043 "2019-07-11T14:39:39Z")
We are using index templates to define mapping, and we create more than 200 indices every day and we have defined templates for all of them. And depending on need we keep updating templates to add additional alias/fiel… --- ## [How does one setup a clustered elasticsearch?](https://discuss.elastic.co/t/how-does-one-setup-a-clustered-elasticsearch/190017)
**Author:** [@maasid](https://discuss.elastic.co/u/maasid)\ **Replies:** 2\ **Last updated:** [July 11, 2019, 2:34pm UTC](https://discuss.elastic.co/t/how-does-one-setup-a-clustered-elasticsearch/190017 "2019-07-11T14:34:44Z")
Hello, I'm on the verge of raging and flipping my desk. I have tried to setup a elasticsearch cluster version 7.2.0 and this is just not working. Here's my problem: Each master node is creating their own single node clu… --- ## [Elasticsearch 7.2.0 MSI installer - Bundled Java cannot be deployed](https://discuss.elastic.co/t/elasticsearch-7-2-0-msi-installer-bundled-java-cannot-be-deployed/190032)
**Author:** [@mailcube](https://discuss.elastic.co/u/mailcube)\ **Replies:** 0\ **Last updated:** [July 11, 2019, 2:02pm UTC](https://discuss.elastic.co/t/elasticsearch-7-2-0-msi-installer-bundled-java-cannot-be-deployed/190032 "2019-07-11T14:02:10Z")
Hi all, We are in the midst of deploying a new Elasticsearch instance on different workstations on VMs and noticed that, even though the documentation mentions that the installer is bundled with a OpenJDK package (see h… --- ## [Failing shards during indexing. Storage issue or misconfiguration? Using kubernetes](https://discuss.elastic.co/t/failing-shards-during-indexing-storage-issue-or-misconfiguration-using-kubernetes/190021)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [July 11, 2019, 1:58pm UTC](https://discuss.elastic.co/t/failing-shards-during-indexing-storage-issue-or-misconfiguration-using-kubernetes/190021 "2019-07-11T13:58:30Z")
Hi, I've setup kubernetes on baremetal and try to run a three node cluster there. In my dev environment I am currently using glusterfs which also runs in kubernetes for storage. I am getting these kinds of errors: "ty… --- ## [Elasticsearch-rest-high-level-client SearchRequest returns partial result](https://discuss.elastic.co/t/elasticsearch-rest-high-level-client-searchrequest-returns-partial-result/190025)
**Author:** [@Avinash\_D\_Silva](https://discuss.elastic.co/u/Avinash_D_Silva)\ **Replies:** 2\ **Last updated:** [July 11, 2019, 1:47pm UTC](https://discuss.elastic.co/t/elasticsearch-rest-high-level-client-searchrequest-returns-partial-result/190025 "2019-07-11T13:47:48Z")
I have some java code as follows: SearchRequest searchRequest = new SearchRequest(index); SearchSourceBuilder searchSourceBuilder = new SearchSourceBuilder(); searchSourceBuilder.query(QueryBuilders.matchAll… --- ## [Suggester filter by certain condition](https://discuss.elastic.co/t/suggester-filter-by-certain-condition/189647)
**Author:** [@jslim](https://discuss.elastic.co/u/jslim)\ **Replies:** 1\ **Last updated:** [July 11, 2019, 1:15pm UTC](https://discuss.elastic.co/t/suggester-filter-by-certain-condition/189647 "2019-07-11T13:15:48Z")
Example, I have this data id title subtitle country\_id 1 Cheapest iPhone in town Lorem ipsum 123 2 iOS 13 beta released Lorem ipsum 25 3 iPadOS public beta Lorem ipsum 123 I want to get the suggestion fro… --- ## [Need to create user with specific server \[7.1.1\]](https://discuss.elastic.co/t/need-to-create-user-with-specific-server-7-1-1/190002)
**Author:** [@sumitpramanik](https://discuss.elastic.co/u/sumitpramanik)\ **Replies:** 4\ **Last updated:** [July 11, 2019, 1:12pm UTC](https://discuss.elastic.co/t/need-to-create-user-with-specific-server-7-1-1/190002 "2019-07-11T13:12:38Z")
As the title say, is it possible to create users in kibana who has permission to view specific server logs? Like if I have three server x, y, z and I want to create a user "mike" who can only view logs from server y when… --- ## [Delay in beats documents to get stored into Elasticsearch](https://discuss.elastic.co/t/delay-in-beats-documents-to-get-stored-into-elasticsearch/189947)
**Author:** [@vipulnewaskar7](https://discuss.elastic.co/u/vipulnewaskar7)\ **Replies:** 1\ **Last updated:** [July 11, 2019, 1:04pm UTC](https://discuss.elastic.co/t/delay-in-beats-documents-to-get-stored-into-elasticsearch/189947 "2019-07-11T13:04:51Z")
Hello Guys, I am having a monitoring stack, in which, I am sending beats data directly to elasticsearch without logstash in between. Data sent by beats is not get stored in elasticsearch immediately. It lags ~4-5 Min, … --- ## [Execute not-existing filter on nested document that may not be present in mapping](https://discuss.elastic.co/t/execute-not-existing-filter-on-nested-document-that-may-not-be-present-in-mapping/190004)
**Author:** [@Emil](https://discuss.elastic.co/u/Emil)\ **Replies:** 0\ **Last updated:** [July 11, 2019, 12:14pm UTC](https://discuss.elastic.co/t/execute-not-existing-filter-on-nested-document-that-may-not-be-present-in-mapping/190004 "2019-07-11T12:14:24Z")
I have a question that is related to this one (execute a filter on nested document only if it exists), but with a twist. The older question is about filtering on a nested document, but this approach fails if a nested fi… --- ## [JDK for ElasticStack](https://discuss.elastic.co/t/jdk-for-elasticstack/189973)
**Author:** [@sjabiulla](https://discuss.elastic.co/u/sjabiulla)\ **Replies:** 4\ **Last updated:** [July 11, 2019, 11:58am UTC](https://discuss.elastic.co/t/jdk-for-elasticstack/189973 "2019-07-11T11:58:17Z")
I have downloaded latest Elastic search for windows and I can see that JDK folder is available in the ElasticSearch folder. Does this mean that we don't need to depend on external jdk for whole Elastic Stack ? Since Ela… --- ## [\[6.8.x\] X-Pack License Issue](https://discuss.elastic.co/t/6-8-x-x-pack-license-issue/189978)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 1\ **Last updated:** [July 11, 2019, 11:57am UTC](https://discuss.elastic.co/t/6-8-x-x-pack-license-issue/189978 "2019-07-11T11:57:21Z")
Hi, I'm seeing this in the log of 6.8.0 nodes in our lab: \[2019-07-11T10:48:13,733\]\[INFO \]\[o.e.l.LicenseService \] \[test-master-001\] license \[68d81834-0b87-4b4a-baeb-222a621f4141\] mode \[trial\] - valid \[2019-07-11T10… --- ## [How long does it take for elastic to clean watcher-history indices after enabling \`xpack.watcher.history.cleaner\_service.enabled\`?](https://discuss.elastic.co/t/how-long-does-it-take-for-elastic-to-clean-watcher-history-indices-after-enabling-xpack-watcher-history-cleaner-service-enabled/189814)
**Author:** [@jmartori](https://discuss.elastic.co/u/jmartori)\ **Replies:** 1\ **Last updated:** [July 11, 2019, 11:47am UTC](https://discuss.elastic.co/t/how-long-does-it-take-for-elastic-to-clean-watcher-history-indices-after-enabling-xpack-watcher-history-cleaner-service-enabled/189814 "2019-07-11T11:47:31Z")
Hi everyone, We noticed that we had over 490 indices from watcher-history, that we probably should have deleted a while ago. I enabled xpack.watcher.history.cleaner\_service.enabled and with the current configuration in… --- ## [Crash using elasticsearch-shard tool to recover corrupt index (EOF)](https://discuss.elastic.co/t/crash-using-elasticsearch-shard-tool-to-recover-corrupt-index-eof/189155)
**Author:** [@craigsheppard](https://discuss.elastic.co/u/craigsheppard)\ **Replies:** 5\ **Last updated:** [July 11, 2019, 11:12am UTC](https://discuss.elastic.co/t/crash-using-elasticsearch-shard-tool-to-recover-corrupt-index-eof/189155 "2019-07-11T11:12:46Z")
Had a power outage that took down a small (one node, 2 shards, two replicas) locally hosted elastic stack (was using sebp/elk 7.1 at the time, since upgraded to 7.2). Bringing the stack back online resulted in Kibana co… --- ## [Understanding curator filters for aging out old indices](https://discuss.elastic.co/t/understanding-curator-filters-for-aging-out-old-indices/189862)
**Author:** [@luma](https://discuss.elastic.co/u/luma)\ **Replies:** 4\ **Last updated:** [July 11, 2019, 10:49am UTC](https://discuss.elastic.co/t/understanding-curator-filters-for-aging-out-old-indices/189862 "2019-07-11T10:49:02Z")
I'm running Elastic Stack 7.2 to support an ElastiFlow installation. In my use case the data being collected is ephemeral and I have no need to keep it longer than a few days. It appears that curator is the tool of cho… --- ## [Kubernetes: cannot allocate memory during bootstrap](https://discuss.elastic.co/t/kubernetes-cannot-allocate-memory-during-bootstrap/186514)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [July 11, 2019, 10:46am UTC](https://discuss.elastic.co/t/kubernetes-cannot-allocate-memory-during-bootstrap/186514 "2019-07-11T10:46:19Z")
Hi, I am trying to get an elasticsearch cluster running in kubernetes. I am getting following bootstrap error: OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely … --- ## [Mapping for multiple users (mapping conflicts)](https://discuss.elastic.co/t/mapping-for-multiple-users-mapping-conflicts/188268)
**Author:** [@vincentvm](https://discuss.elastic.co/u/vincentvm)\ **Replies:** 1\ **Last updated:** [July 11, 2019, 9:56am UTC](https://discuss.elastic.co/t/mapping-for-multiple-users-mapping-conflicts/188268 "2019-07-11T09:56:28Z")
I'm trying to implement mapping for multiple users without triggering mapping conflict errors for log data. As of now we have about a 1000 users storing data in the cluster for 30 days. Right now we're storing data in a… --- ## [Filebeat and Winlogbeat problem](https://discuss.elastic.co/t/filebeat-and-winlogbeat-problem/189958)
**Author:** [@antonopo](https://discuss.elastic.co/u/antonopo)\ **Replies:** 1\ **Last updated:** [July 11, 2019, 9:40am UTC](https://discuss.elastic.co/t/filebeat-and-winlogbeat-problem/189958 "2019-07-11T09:40:43Z")
Hi, A couple of days now i have problem of providing logs on kibana. (filebeat - winlogbeat) All these logs are parsing through logstash. Logstash error logs: \[2019-07-11T12:34:12,246\]\[INFO \]\[logstash.outputs.elastic… --- ## [Heartbeat error dashbord](https://discuss.elastic.co/t/heartbeat-error-dashbord/189954)
**Author:** [@zmira\_meriem](https://discuss.elastic.co/u/zmira_meriem)\ **Replies:** 0\ **Last updated:** [July 11, 2019, 9:27am UTC](https://discuss.elastic.co/t/heartbeat-error-dashbord/189954 "2019-07-11T09:27:29Z")
hi pllzz help me i install heartbeat to monitor URLS but the problem is urls is up but in dashboard show "down" heartbeat.yml : - type: icmp schedule: '\*/5 \* \* \* \* \* \*' hosts: \["51.77.."\] type: tcp schedule: '@ev… --- ## [Data might be incomplete because your request timed out](https://discuss.elastic.co/t/data-might-be-incomplete-because-your-request-timed-out/189912)
**Author:** [@swb](https://discuss.elastic.co/u/swb)\ **Replies:** 2\ **Last updated:** [July 11, 2019, 9:13am UTC](https://discuss.elastic.co/t/data-might-be-incomplete-because-your-request-timed-out/189912 "2019-07-11T09:13:17Z")
Hi! We have the cluster - 1 master nodes and 3 data nodes. Every Data nodes have cpu - 12 cores, RAM - 48 GB (Xms Xmx 16 GB), Disk - 450 GB SSD . Three Indices are created every day – logstash, elasticflow and elastaler… --- ## [Elasticsearch sort query](https://discuss.elastic.co/t/elasticsearch-sort-query/189790)
**Author:** [@Ahmet\_Kartal](https://discuss.elastic.co/u/Ahmet_Kartal)\ **Replies:** 9\ **Last updated:** [July 11, 2019, 8:51am UTC](https://discuss.elastic.co/t/elasticsearch-sort-query/189790 "2019-07-11T08:51:36Z")
I have some data that I want to sort but when I sort them sort query didn't work very well. So, here what I got after making my query: "Group3": { "buckets": \[ { … --- ## [How can i influence the "directionality" of a trigram match?](https://discuss.elastic.co/t/how-can-i-influence-the-directionality-of-a-trigram-match/189943)
**Author:** [@mkoehler](https://discuss.elastic.co/u/mkoehler)\ **Replies:** 0\ **Last updated:** [July 11, 2019, 8:49am UTC](https://discuss.elastic.co/t/how-can-i-influence-the-directionality-of-a-trigram-match/189943 "2019-07-11T08:49:03Z")
Hi, we use elasticsearch to search on address data and for the purpose of non-exact matches wie include a field variant of the streetname that is analyzed with an ngram tokenizer (trigrams to be specific). and we use a … --- ## [Alternatives to wildcard search for "contains" type searching](https://discuss.elastic.co/t/alternatives-to-wildcard-search-for-contains-type-searching/189623)
**Author:** [@onearmedscissor](https://discuss.elastic.co/u/onearmedscissor)\ **Replies:** 5\ **Last updated:** [July 11, 2019, 8:30am UTC](https://discuss.elastic.co/t/alternatives-to-wildcard-search-for-contains-type-searching/189623 "2019-07-11T08:30:43Z")
Hi, I'm dealing with unstructured documents where we're indexing the contents of the text of the document. Generally right now we just have a fairly basic configuration where we use the standard analyzer on the body of t… --- ## [Failed add node](https://discuss.elastic.co/t/failed-add-node/187715)
**Author:** [@Dave\_Hafid](https://discuss.elastic.co/u/Dave_Hafid)\ **Replies:** 13\ **Last updated:** [July 11, 2019, 7:56am UTC](https://discuss.elastic.co/t/failed-add-node/187715 "2019-07-11T07:56:01Z")
Dear All, i cannot add node data to dedicated master-eligible node, we have one master-eligible and 2 dedicated data node master configuration 192.168.11.12 node.name: ${HOSTNAME} node.data: false node.ingest: fals… --- ## [Memory grows](https://discuss.elastic.co/t/memory-grows/189792)
**Author:** [@MiZio\_E\_Basta](https://discuss.elastic.co/u/MiZio_E_Basta)\ **Replies:** 2\ **Last updated:** [July 11, 2019, 7:40am UTC](https://discuss.elastic.co/t/memory-grows/189792 "2019-07-11T07:40:27Z")
Hello everyone, my environment: 3 master nodes 3 data nodes (64GB with 32GB heap) 2 logstash 100+ server with auditbeat for access log management This is heap grows for my data nodes: My index/shards details: … --- ## [Delete the fields in the elasticsearch index](https://discuss.elastic.co/t/delete-the-fields-in-the-elasticsearch-index/189538)
**Author:** [@Hengheng1](https://discuss.elastic.co/u/Hengheng1)\ **Replies:** 2\ **Last updated:** [July 11, 2019, 6:44am UTC](https://discuss.elastic.co/t/delete-the-fields-in-the-elasticsearch-index/189538 "2019-07-11T06:44:33Z")
What should I do to delete the fields in the elasticsearch index? --- ## [TLS v1.0 has been removed from default TLS/SSL protocols](https://discuss.elastic.co/t/tls-v1-0-has-been-removed-from-default-tls-ssl-protocols/189910)
**Author:** [@swapnali](https://discuss.elastic.co/u/swapnali)\ **Replies:** 2\ **Last updated:** [July 11, 2019, 6:40am UTC](https://discuss.elastic.co/t/tls-v1-0-has-been-removed-from-default-tls-ssl-protocols/189910 "2019-07-11T06:40:27Z")
Hi, I am trying to update elasticsearch from 6.7 to 7.0 i got warning from 7.0 assistant as below TLS v1.0 has been removed from default TLS/SSL protocols so in my elasticsearch.yml i have added below codeto remove thi… --- ## [Account authentication settings must use the keystore](https://discuss.elastic.co/t/account-authentication-settings-must-use-the-keystore/189549)
**Author:** [@swapnali](https://discuss.elastic.co/u/swapnali)\ **Replies:** 5\ **Last updated:** [July 11, 2019, 6:14am UTC](https://discuss.elastic.co/t/account-authentication-settings-must-use-the-keystore/189549 "2019-07-11T06:14:44Z")
Hi, I Am trying to update my elasticsearch 6.7.1 to 7.0 assistant suggest me to change account authentication settings must use the keystore From document i got to know i need to do changes as below mentioned \*\*xpa… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1229) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1231)