# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1240

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1241

---

## [Date\_time format change in elasticsearch from version 6.5 to 7.2](https://discuss.elastic.co/t/date-time-format-change-in-elasticsearch-from-version-6-5-to-7-2/188546)

<div class="topic-metadata">

**Author:** [@tomassino](https://discuss.elastic.co/u/tomassino)\
**Replies:** 3\
**Last updated:** [July 4, 2019, 9:51am UTC](https://discuss.elastic.co/t/date-time-format-change-in-elasticsearch-from-version-6-5-to-7-2/188546 "2019-07-04T09:51:13Z")

</div>

Hi all, I noticed that some dates that were correctly handled by elasticsearch version 6.5 are rejected by elasticsearch 7.2. Here is an example: Elasticseach 7.2.0 PUT localhost:9200/my\_index { "mappings": { "pr…

---

## [Elasticsearch getting killed automatically](https://discuss.elastic.co/t/elasticsearch-getting-killed-automatically/188872)

<div class="topic-metadata">

**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\
**Replies:** 0\
**Last updated:** [July 4, 2019, 9:40am UTC](https://discuss.elastic.co/t/elasticsearch-getting-killed-automatically/188872 "2019-07-04T09:40:38Z")

</div>

i have a setup of elk 6.5.4. Earlier it was working fine now it is giving me error .It is getting killed automatically and logs are also not getting generated. this is my error. \[oes\_setup@appserver2 elasticsearch-…

---

## [Lifecycle Policies](https://discuss.elastic.co/t/lifecycle-policies/188855)

<div class="topic-metadata">

**Author:** [@antonopo](https://discuss.elastic.co/u/antonopo)\
**Replies:** 3\
**Last updated:** [July 4, 2019, 8:58am UTC](https://discuss.elastic.co/t/lifecycle-policies/188855 "2019-07-04T08:58:44Z")

</div>

Hi all, Can someone help to to understand what is lifecycle policies and how i enable a right life cycle police for 30 days for all my indexes? I see many times that the Index Management informs me that some indexes ha…

---

## [Match on nested field is not working](https://discuss.elastic.co/t/match-on-nested-field-is-not-working/188712)

<div class="topic-metadata">

**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\
**Replies:** 3\
**Last updated:** [July 4, 2019, 8:57am UTC](https://discuss.elastic.co/t/match-on-nested-field-is-not-working/188712 "2019-07-04T08:57:18Z")

</div>

Hi I am using ES 6.4 I have a nested object with example as below { "docs": { "Flwkt2sBvcxxWw1qkfxk": { "o\_oper\_state": "active", "p\_ver": "v1", "h\_ver": "v1", "stats\_list": \[ { "app": "ubuntu"…

---

## [How to update data automatically in elastic search when we deleted files in log stash input path](https://discuss.elastic.co/t/how-to-update-data-automatically-in-elastic-search-when-we-deleted-files-in-log-stash-input-path/186600)

<div class="topic-metadata">

**Author:** [@Harshavardhan\_Reddy](https://discuss.elastic.co/u/Harshavardhan_Reddy)\
**Replies:** 4\
**Last updated:** [July 4, 2019, 7:18am UTC](https://discuss.elastic.co/t/how-to-update-data-automatically-in-elastic-search-when-we-deleted-files-in-log-stash-input-path/186600 "2019-07-04T07:18:41Z")

</div>

i uploaded source files into elastic search by log stash. whenever new file is added in source path (input) it automatically reflecting in elastic search index . but if any files we deleted in source path , it showing s…

---

## [Configuration for a future cluster with 30b documents](https://discuss.elastic.co/t/configuration-for-a-future-cluster-with-30b-documents/188808)

<div class="topic-metadata">

**Author:** [@azro352](https://discuss.elastic.co/u/azro352)\
**Replies:** 2\
**Last updated:** [July 4, 2019, 7:17am UTC](https://discuss.elastic.co/t/configuration-for-a-future-cluster-with-30b-documents/188808 "2019-07-04T07:17:27Z")

</div>

I have to design an ES cluster, I'm far from understanding everything, I've read different articles (like those of Fred de Villamil ( Designing the Perfect Elasticsearch Cluster)) and ES documentation, and I have no IRL …

---

## [Help convert sql to elasticsearch query](https://discuss.elastic.co/t/help-convert-sql-to-elasticsearch-query/188843)

<div class="topic-metadata">

**Author:** [@111170](https://discuss.elastic.co/u/111170)\
**Replies:** 0\
**Last updated:** [July 4, 2019, 6:26am UTC](https://discuss.elastic.co/t/help-convert-sql-to-elasticsearch-query/188843 "2019-07-04T06:26:56Z")

</div>

i tried to use innerhits but it was not easy. select parent.key , count(child.key) as cnt from Docu parent left join Docu child on parent.key = child.parentKey group by parnet.key order by cnt desc pleas…

---

## [Multi\_match search with filtering working intermittently](https://discuss.elastic.co/t/multi-match-search-with-filtering-working-intermittently/188829)

<div class="topic-metadata">

**Author:** [@ryoga](https://discuss.elastic.co/u/ryoga)\
**Replies:** 5\
**Last updated:** [July 4, 2019, 6:18am UTC](https://discuss.elastic.co/t/multi-match-search-with-filtering-working-intermittently/188829 "2019-07-04T06:18:07Z")

</div>

Hi, I am having issues trying to get muti\_match with filtering, it seems to be working very intermittently depending on the term that I am filtering on and I can't pinpoint what the cause is. This is for ES 7.1. The quer…

---

## [Using copy\_to in the dynamic templates for nested documents](https://discuss.elastic.co/t/using-copy-to-in-the-dynamic-templates-for-nested-documents/188839)

<div class="topic-metadata">

**Author:** [@muthualagappan](https://discuss.elastic.co/u/muthualagappan)\
**Replies:** 0\
**Last updated:** [July 4, 2019, 6:16am UTC](https://discuss.elastic.co/t/using-copy-to-in-the-dynamic-templates-for-nested-documents/188839 "2019-07-04T06:16:46Z")

</div>

Hi Team, I saw the thread https://github.com/elastic/elasticsearch/issues/12461 where there is a plan to deprecate include\_in\_parent. The suggestion is to us copy\_to Our requirement is to search for values with the fie…

---

## [How to create auto generated ids while reindexing?](https://discuss.elastic.co/t/how-to-create-auto-generated-ids-while-reindexing/188782)

<div class="topic-metadata">

**Author:** [@praveengadugin1](https://discuss.elastic.co/u/praveengadugin1)\
**Replies:** 3\
**Last updated:** [July 4, 2019, 6:10am UTC](https://discuss.elastic.co/t/how-to-create-auto-generated-ids-while-reindexing/188782 "2019-07-04T06:10:43Z")

</div>

On using reindex API for reindexing 5 TB of data, to make the process faster I would like to create auto generated ids for new index as mentioned here.How do we do it?? https://www.elastic.co/guide/en/elasticsearch/refe…

---

## [Kibana User Can Not Log In](https://discuss.elastic.co/t/kibana-user-can-not-log-in/188624)

<div class="topic-metadata">

**Author:** [@Jeniffer](https://discuss.elastic.co/u/Jeniffer)\
**Replies:** 2\
**Last updated:** [July 4, 2019, 5:25am UTC](https://discuss.elastic.co/t/kibana-user-can-not-log-in/188624 "2019-07-04T05:25:45Z")

</div>

I Enabeld Xpack in elasticsearch.yml. In kibana.yml I added: Elastisearch.usrname: kibana Elasticsearch.password:my password but itt only allows me to log in with elastic user. I tried using Incognito and to deleted…

---

## [Why must, should is not working in highlight part of elasticsearch?](https://discuss.elastic.co/t/why-must-should-is-not-working-in-highlight-part-of-elasticsearch/187224)

<div class="topic-metadata">

**Author:** [@princesahu04](https://discuss.elastic.co/u/princesahu04)\
**Replies:** 2\
**Last updated:** [July 4, 2019, 5:18am UTC](https://discuss.elastic.co/t/why-must-should-is-not-working-in-highlight-part-of-elasticsearch/187224 "2019-07-04T05:18:53Z")

</div>

This is my query GET bond\_covenant/\_search { "\_source": false, "query": { "nested": { "path": "doc", "query": { "nested": { "path": "doc.container", "query": { …

---

## [Not able to access 9200, 5601, 8200 port from outside the installed ELK APM server](https://discuss.elastic.co/t/not-able-to-access-9200-5601-8200-port-from-outside-the-installed-elk-apm-server/185678)

<div class="topic-metadata">

**Author:** [@Susmit07](https://discuss.elastic.co/u/Susmit07)\
**Replies:** 8\
**Last updated:** [July 4, 2019, 5:17am UTC](https://discuss.elastic.co/t/not-able-to-access-9200-5601-8200-port-from-outside-the-installed-elk-apm-server/185678 "2019-07-04T05:17:38Z")

</div>

Hi Team, I am able to view the kibana dashboard from the sever where they are being installed but not from outside the server. Can you please help me out to solve the issue Did a netstat : \[root@potman1 ~\]# netstat -n…

---

## [Expected behavior for Upgrade Assistant 7.0 to show automatic field expansion warning even after changing max\_clause\_count?](https://discuss.elastic.co/t/expected-behavior-for-upgrade-assistant-7-0-to-show-automatic-field-expansion-warning-even-after-changing-max-clause-count/188491)

<div class="topic-metadata">

**Author:** [@slmingol](https://discuss.elastic.co/u/slmingol)\
**Replies:** 1\
**Last updated:** [July 4, 2019, 3:34am UTC](https://discuss.elastic.co/t/expected-behavior-for-upgrade-assistant-7-0-to-show-automatic-field-expansion-warning-even-after-changing-max-clause-count/188491 "2019-07-04T03:34:41Z")

</div>

We're in the middle of upgrading from ES 6.8 to 7.1 and are trying to address guidances regarding 7.0 Upgrade Assistant. The Assistant is calling out the following issues on several indicies: This index has \[1178\] fiel…

---

## [Enquire about xpack License for 5.6.15](https://discuss.elastic.co/t/enquire-about-xpack-license-for-5-6-15/188820)

<div class="topic-metadata">

**Author:** [@sandipatmca](https://discuss.elastic.co/u/sandipatmca)\
**Replies:** 1\
**Last updated:** [July 4, 2019, 1:55am UTC](https://discuss.elastic.co/t/enquire-about-xpack-license-for-5-6-15/188820 "2019-07-04T01:55:28Z")

</div>

Is xpack license Free for ElasticSearch Kibana 5.6.15?

---

## [Map JSON from Cloudflare](https://discuss.elastic.co/t/map-json-from-cloudflare/184457)

<div class="topic-metadata">

**Author:** [@magr](https://discuss.elastic.co/u/magr)\
**Replies:** 0\
**Last updated:** [June 5, 2019, 9:09pm UTC](https://discuss.elastic.co/t/map-json-from-cloudflare/184457 "2019-06-05T21:09:28Z")

</div>

Hi there, I pull API data from Cloudflare through the http\_poller\_plugin from Logstash to Elasticsearch. That works fine. Except for the JSON response and the regarding mapping in Elasticsearch. I am going to understand…

---

## [File-based role management roles.yml](https://discuss.elastic.co/t/file-based-role-management-roles-yml/187947)

<div class="topic-metadata">

**Author:** [@dave1234](https://discuss.elastic.co/u/dave1234)\
**Replies:** 2\
**Last updated:** [July 3, 2019, 8:26pm UTC](https://discuss.elastic.co/t/file-based-role-management-roles-yml/187947 "2019-07-03T20:26:08Z")

</div>

roles.yml is not being loaded and I can't see the entry in GET \_security/role. The roles.yml is copied over to all instances. Is there something I'm missing? Anymore logs for me to look at of it getting applied? LOGS…

---

## [Changing number of replicas](https://discuss.elastic.co/t/changing-number-of-replicas/188740)

<div class="topic-metadata">

**Author:** [@zatom](https://discuss.elastic.co/u/zatom)\
**Replies:** 1\
**Last updated:** [July 3, 2019, 7:18pm UTC](https://discuss.elastic.co/t/changing-number-of-replicas/188740 "2019-07-03T19:18:27Z")

</div>

Hi, I am trying to reindex huge index using reindex api. It fails everytime. Now, I am thinking if I can initially make the number of replica to 0 and later to 1. Is it possible with my case? How do I do it? Do I set th…

---

## [S3 Snapshot backing up newly made indexes](https://discuss.elastic.co/t/s3-snapshot-backing-up-newly-made-indexes/188710)

<div class="topic-metadata">

**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\
**Replies:** 5\
**Last updated:** [July 3, 2019, 7:10pm UTC](https://discuss.elastic.co/t/s3-snapshot-backing-up-newly-made-indexes/188710 "2019-07-03T19:10:07Z")

</div>

Hello, I am having issues backing up a new index to my S3 bucket About my setup I am using Elk 6.8.0 with a new index being made each day with the following format LogStash-(Year, month day) I am also using the Elas…

---

## [Upgrade from 6.4 to 7.2](https://discuss.elastic.co/t/upgrade-from-6-4-to-7-2/188531)

<div class="topic-metadata">

**Author:** [@han1](https://discuss.elastic.co/u/han1)\
**Replies:** 44\
**Last updated:** [July 3, 2019, 6:20pm UTC](https://discuss.elastic.co/t/upgrade-from-6-4-to-7-2/188531 "2019-07-03T18:20:36Z")

</div>

We have just upgraded our deployment from 6 to version 7.2 We have created 7 indices and in Kabana it show all of them having documents. However, when we try to view the documents, only one of the indices shows the doc…

---

## [I Am loading huge size messagess in Kibana UI take time to open or it is stop](https://discuss.elastic.co/t/i-am-loading-huge-size-messagess-in-kibana-ui-take-time-to-open-or-it-is-stop/188689)

<div class="topic-metadata">

**Author:** [@Gnanendra](https://discuss.elastic.co/u/Gnanendra)\
**Replies:** 3\
**Last updated:** [July 3, 2019, 6:02pm UTC](https://discuss.elastic.co/t/i-am-loading-huge-size-messagess-in-kibana-ui-take-time-to-open-or-it-is-stop/188689 "2019-07-03T18:02:46Z")

</div>

Hi, I am sending huge size of messages logstash to direct elasticsearch.loading messagess are take time or kibana stoped.how to send huge size of messages logstash to elasticsearch. please help me. Thanks, gnanendra

---

## [Slow search response time (low CPU utilization)](https://discuss.elastic.co/t/slow-search-response-time-low-cpu-utilization/188633)

<div class="topic-metadata">

**Author:** [@jwistrom](https://discuss.elastic.co/u/jwistrom)\
**Replies:** 6\
**Last updated:** [July 3, 2019, 6:02pm UTC](https://discuss.elastic.co/t/slow-search-response-time-low-cpu-utilization/188633 "2019-07-03T18:02:38Z")

</div>

Hi We are currently experiencing performance issues with our ES setup. We can see that our system load is close to max while the CPU utilization is only about 50%. Setup: Es version: 6.5.3 Nodes: 6 20 shards/index 1 …

---

## [How to monitor processing query search time?](https://discuss.elastic.co/t/how-to-monitor-processing-query-search-time/188777)

<div class="topic-metadata">

**Author:** [@rogito\_manda](https://discuss.elastic.co/u/rogito_manda)\
**Replies:** 0\
**Last updated:** [July 3, 2019, 4:41pm UTC](https://discuss.elastic.co/t/how-to-monitor-processing-query-search-time/188777 "2019-07-03T16:41:48Z")

</div>

What is the easiest way to monitor the processing duration time of a User search query in Elasticsearch? I have installed Kibana and under: Monitoring / Elasticsearch indices, the Search Rate (/s) is showing nothing. I…

---

## [Bulk Index with version or sequence number](https://discuss.elastic.co/t/bulk-index-with-version-or-sequence-number/188761)

<div class="topic-metadata">

**Author:** [@Shu\_Shan](https://discuss.elastic.co/u/Shu_Shan)\
**Replies:** 0\
**Last updated:** [July 3, 2019, 3:42pm UTC](https://discuss.elastic.co/t/bulk-index-with-version-or-sequence-number/188761 "2019-07-03T15:42:29Z")

</div>

Hello , In order to perform optimistic concurrency locking, we use version OR if\_seq\_no in UPDATE api . from my understanding, the usual practice is we will have to GET the documents version from ElasticSearch. and t…

---

## [Slow query for large size values](https://discuss.elastic.co/t/slow-query-for-large-size-values/188719)

<div class="topic-metadata">

**Author:** [@Victor\_Guimaraes](https://discuss.elastic.co/u/Victor_Guimaraes)\
**Replies:** 5\
**Last updated:** [July 3, 2019, 3:27pm UTC](https://discuss.elastic.co/t/slow-query-for-large-size-values/188719 "2019-07-03T15:27:29Z")

</div>

Hello, I have an ElasticSearch 6.4 index with 5 shards, 1 replica for each shard and 1.5 billions of documents. I use Elastic from textual search, getting the result's ids andusing then to query on MongoDB. We need ge…

---

## [Reindexing over 80 indices with one script](https://discuss.elastic.co/t/reindexing-over-80-indices-with-one-script/188711)

<div class="topic-metadata">

**Author:** [@SCL\_ADMIN](https://discuss.elastic.co/u/SCL_ADMIN)\
**Replies:** 3\
**Last updated:** [July 3, 2019, 3:24pm UTC](https://discuss.elastic.co/t/reindexing-over-80-indices-with-one-script/188711 "2019-07-03T15:24:40Z")

</div>

I've upgraded to version 7.2 from 6.6.1 in the upgrade assistant via Kibana 7.2 it shows that indices should be re-index to at least version 7. the question is, how can re-index 80 indices in a single command or script…

---

## [Aliases permanently to specified indexes](https://discuss.elastic.co/t/aliases-permanently-to-specified-indexes/188630)

<div class="topic-metadata">

**Author:** [@Gidi\_Kalef](https://discuss.elastic.co/u/Gidi_Kalef)\
**Replies:** 7\
**Last updated:** [July 3, 2019, 3:24pm UTC](https://discuss.elastic.co/t/aliases-permanently-to-specified-indexes/188630 "2019-07-03T15:24:00Z")

</div>

HI Guys , I have few indexes patterns that i want to create alias for "wakeupsms" by default. i already did POST \_aliases and it work but didn't effect for new indices . i tried to put template by the following comman…

---

## [Source filtering with Java High Level Rest Client](https://discuss.elastic.co/t/source-filtering-with-java-high-level-rest-client/188717)

<div class="topic-metadata">

**Author:** [@krakenbauss](https://discuss.elastic.co/u/krakenbauss)\
**Replies:** 2\
**Last updated:** [July 3, 2019, 2:49pm UTC](https://discuss.elastic.co/t/source-filtering-with-java-high-level-rest-client/188717 "2019-07-03T14:49:16Z")

</div>

How can you perform source filtering with the Java High Level Rest Client For example if I'm doing a reindex request, I would do something like the following to only include the fields which are relevant to me. POST \_r…

---

## [Elasticsearch failed to start plz help me](https://discuss.elastic.co/t/elasticsearch-failed-to-start-plz-help-me/188734)

<div class="topic-metadata">

**Author:** [@zmira\_meriem](https://discuss.elastic.co/u/zmira_meriem)\
**Replies:** 5\
**Last updated:** [July 3, 2019, 2:39pm UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-start-plz-help-me/188734 "2019-07-03T14:39:17Z")

</div>

i run systemctl status elasticsearch.service and log show this:

---

## [Shards go unassigned and recovery mode](https://discuss.elastic.co/t/shards-go-unassigned-and-recovery-mode/188736)

<div class="topic-metadata">

**Author:** [@zatom](https://discuss.elastic.co/u/zatom)\
**Replies:** 0\
**Last updated:** [July 3, 2019, 2:14pm UTC](https://discuss.elastic.co/t/shards-go-unassigned-and-recovery-mode/188736 "2019-07-03T14:14:15Z")

</div>

Hi, Lately one of my huge reindexing failed in the middle. It stopped after reindexing 1.5TB. Since then, when you try to reindex everytime, some shards gets unassigned and some goes on recovery mode, Cluster health goe…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1239)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1241)
