# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1246

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1247

---

## [Problem creating an index having any field with data type "string"](https://discuss.elastic.co/t/problem-creating-an-index-having-any-field-with-data-type-string/188052)

<div class="topic-metadata">

**Author:** [@Nirajan](https://discuss.elastic.co/u/Nirajan)\
**Replies:** 3\
**Last updated:** [June 28, 2019, 4:36pm UTC](https://discuss.elastic.co/t/problem-creating-an-index-having-any-field-with-data-type-string/188052 "2019-06-28T16:36:15Z")

</div>

Hello Everybody, I want to create an index having many fields with different data types. But i am facing some strange problems lately. I have an index mapping with fields of data types "double", "integer", "string"; wh…

---

## [Elastics search .bat not opening after downloading](https://discuss.elastic.co/t/elastics-search-bat-not-opening-after-downloading/187422)

<div class="topic-metadata">

**Author:** [@Ansh\_Chaudhary](https://discuss.elastic.co/u/Ansh_Chaudhary)\
**Replies:** 3\
**Last updated:** [June 28, 2019, 4:17pm UTC](https://discuss.elastic.co/t/elastics-search-bat-not-opening-after-downloading/187422 "2019-06-28T16:17:04Z")

</div>

I have just installed the ELK stack and I am trying to launch the elasticseatch.bat file like it says in the setup guide. However when try to open the file a command script opens for a a split second and then closes. H…

---

## [Shipping PCF application logs to Elastic Stack](https://discuss.elastic.co/t/shipping-pcf-application-logs-to-elastic-stack/188085)

<div class="topic-metadata">

**Author:** [@mhsh64](https://discuss.elastic.co/u/mhsh64)\
**Replies:** 0\
**Last updated:** [June 28, 2019, 4:02pm UTC](https://discuss.elastic.co/t/shipping-pcf-application-logs-to-elastic-stack/188085 "2019-06-28T16:02:49Z")

</div>

Hello all, Have you ever configured PCF (Cloud Foundry) to send application logs to Logstash? I read an article which we can create a syslog service and bind it to the application on PCF, like bellow: cf cups log-drai…

---

## [Search bar on "discuss" portal?](https://discuss.elastic.co/t/search-bar-on-discuss-portal/188083)

<div class="topic-metadata">

**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\
**Replies:** 0\
**Last updated:** [June 28, 2019, 3:48pm UTC](https://discuss.elastic.co/t/search-bar-on-discuss-portal/188083 "2019-06-28T15:48:14Z")

</div>

this was the fuzzy search i did on our "discuss" portal search bar. although actual one was "the lightening fast" !!! :smiley:

---

## [Result of Search bigger then expected](https://discuss.elastic.co/t/result-of-search-bigger-then-expected/188074)

<div class="topic-metadata">

**Author:** [@schneider](https://discuss.elastic.co/u/schneider)\
**Replies:** 2\
**Last updated:** [June 28, 2019, 3:30pm UTC](https://discuss.elastic.co/t/result-of-search-bigger-then-expected/188074 "2019-06-28T15:30:00Z")

</div>

I want to receive the last part of the response but the response a receive is this: { "took" : 264, "timed\_out" : false, "\_shards" : { "total" : 5, "successful" : 5, "skipped" : 0, "failed" : 0 }, "hits" : { "total" : 2…

---

## [XML to JSON conversion with Multi-Valued Fields](https://discuss.elastic.co/t/xml-to-json-conversion-with-multi-valued-fields/188056)

<div class="topic-metadata">

**Author:** [@sandrakim](https://discuss.elastic.co/u/sandrakim)\
**Replies:** 1\
**Last updated:** [June 28, 2019, 3:26pm UTC](https://discuss.elastic.co/t/xml-to-json-conversion-with-multi-valued-fields/188056 "2019-06-28T15:26:16Z")

</div>

If I have the following XML: \<Article\_Keywords\> \< keyword\>dog\< /keyword\> \< keyword\>pony\< /keyword\> \</Article\_Keywords\> And want to convert it to (using groovy) an elasticsearch item: {"Article\_Keywords":\["dog","pon…

---

## [Need to select appropriate technology](https://discuss.elastic.co/t/need-to-select-appropriate-technology/188065)

<div class="topic-metadata">

**Author:** [@jigar\_shah1](https://discuss.elastic.co/u/jigar_shah1)\
**Replies:** 1\
**Last updated:** [June 28, 2019, 3:22pm UTC](https://discuss.elastic.co/t/need-to-select-appropriate-technology/188065 "2019-06-28T15:22:54Z")

</div>

Hi All, I need some guidance on Technology Selection. 50GB Data (Every Day more than 50 million raw data every day. Keep data for 5 Years in our solution. Also needs to perform computation or summary on Data insert…

---

## [Aggregation nested field min value](https://discuss.elastic.co/t/aggregation-nested-field-min-value/185512)

<div class="topic-metadata">

**Author:** [@PForsgard](https://discuss.elastic.co/u/PForsgard)\
**Replies:** 1\
**Last updated:** [June 28, 2019, 3:07pm UTC](https://discuss.elastic.co/t/aggregation-nested-field-min-value/185512 "2019-06-28T15:07:23Z")

</div>

I trying to get a facet filter out from prices that user has access to. I have tried with the following data model and data but I don't get what I want out. PUT /test { "mappings": { "properties": { "prices…

---

## [Managing ILM policies](https://discuss.elastic.co/t/managing-ilm-policies/187516)

<div class="topic-metadata">

**Author:** [@AlessandroKP](https://discuss.elastic.co/u/AlessandroKP)\
**Replies:** 1\
**Last updated:** [June 28, 2019, 3:00pm UTC](https://discuss.elastic.co/t/managing-ilm-policies/187516 "2019-06-28T15:00:31Z")

</div>

Hi all, I would like some information about index lifecycle management. I have some data stored in ES under indices whose names are of the form: my-logs-A.2019-01, my-logs-A.2019-02, my-logs-A.2019-03, ... my-logs-B.…

---

## [Does all indexation requests pass by the master node?](https://discuss.elastic.co/t/does-all-indexation-requests-pass-by-the-master-node/188006)

<div class="topic-metadata">

**Author:** [@Askia\_Mohamed\_Kadri](https://discuss.elastic.co/u/Askia_Mohamed_Kadri)\
**Replies:** 4\
**Last updated:** [June 28, 2019, 2:53pm UTC](https://discuss.elastic.co/t/does-all-indexation-requests-pass-by-the-master-node/188006 "2019-06-28T14:53:35Z")

</div>

Hi! I have a question here. When a node receives an indexation query and doesn't have the primary shard. What is it's behavior? Does it transfert the request to the master node that ships it to the dedicated node to an…

---

## [Discovery.zen.minimum\_master\_nodes templated by Ansible](https://discuss.elastic.co/t/discovery-zen-minimum-master-nodes-templated-by-ansible/185680)

<div class="topic-metadata">

**Author:** [@skydancer](https://discuss.elastic.co/u/skydancer)\
**Replies:** 4\
**Last updated:** [June 28, 2019, 2:46pm UTC](https://discuss.elastic.co/t/discovery-zen-minimum-master-nodes-templated-by-ansible/185680 "2019-06-28T14:46:20Z")

</div>

I am using Ansible to configure the ELK cluster and this includes templating of the elasticsearch.yml configuration file. I want to make discovery.zen.minimum\_master\_nodes key dependent on the master-eligible nodes in th…

---

## [Uploding a csv file from kibana with updating mapping](https://discuss.elastic.co/t/uploding-a-csv-file-from-kibana-with-updating-mapping/187621)

<div class="topic-metadata">

**Author:** [@Adil\_Bakkouri](https://discuss.elastic.co/u/Adil_Bakkouri)\
**Replies:** 1\
**Last updated:** [June 28, 2019, 1:43pm UTC](https://discuss.elastic.co/t/uploding-a-csv-file-from-kibana-with-updating-mapping/187621 "2019-06-28T13:43:49Z")

</div>

Hello, I'm trying to upload my csv file to elasticsearch via Kibana machine learning tool, I succeeded the add but i want to redefine my mapping, so juste before creating the index, i update my mapping to this : { …

---

## [Elasticsearch 7.0 - changed date format](https://discuss.elastic.co/t/elasticsearch-7-0-changed-date-format/188059)

<div class="topic-metadata">

**Author:** [@kluvi](https://discuss.elastic.co/u/kluvi)\
**Replies:** 0\
**Last updated:** [June 28, 2019, 1:38pm UTC](https://discuss.elastic.co/t/elasticsearch-7-0-changed-date-format/188059 "2019-06-28T13:38:00Z")

</div>

Hi. I think, that I dont get the difference between Symbol Meaning Presentation Examples ------ ------- ------------ ------- u year …

---

## [Error while installing the index - unsupported parameters](https://discuss.elastic.co/t/error-while-installing-the-index-unsupported-parameters/187425)

<div class="topic-metadata">

**Author:** [@Ahana\_Ambshri](https://discuss.elastic.co/u/Ahana_Ambshri)\
**Replies:** 2\
**Last updated:** [June 28, 2019, 1:31pm UTC](https://discuss.elastic.co/t/error-while-installing-the-index-unsupported-parameters/187425 "2019-06-28T13:31:28Z")

</div>

Hi, I am following https://github.com/sm-biz/paloalto-elasticstack-viz/wiki tutorial to import PA traffic to my kibana. While trying to install the index "curl -XPUT http://x.x.x.x:9200/\_template/panos-threat?pretty -H …

---

## [Detect anomalies for specified time](https://discuss.elastic.co/t/detect-anomalies-for-specified-time/187874)

<div class="topic-metadata">

**Author:** [@Bharath\_Kumar\_R](https://discuss.elastic.co/u/Bharath_Kumar_R)\
**Replies:** 1\
**Last updated:** [June 28, 2019, 1:30pm UTC](https://discuss.elastic.co/t/detect-anomalies-for-specified-time/187874 "2019-06-28T13:30:58Z")

</div>

From the image, we can see that the job has triggered 3 anomalies. 1 severe and 2 minor anomalies. I am ok with the 1st anomaly (minor) since it Is just a temporary drop. I am also ok with the 2nd anomaly (critical) …

---

## [Automatic Reindex at the end of the month](https://discuss.elastic.co/t/automatic-reindex-at-the-end-of-the-month/188044)

<div class="topic-metadata">

**Author:** [@Bellicapelli0](https://discuss.elastic.co/u/Bellicapelli0)\
**Replies:** 1\
**Last updated:** [June 28, 2019, 1:29pm UTC](https://discuss.elastic.co/t/automatic-reindex-at-the-end-of-the-month/188044 "2019-06-28T13:29:06Z")

</div>

I was wondering if the following feature was possible to be implemented without outside scripts. I have a series of small indexes created daily, and I would like to reindex them into a monthly index at the end of each m…

---

## [Direct index mapping vs index mapping with directory](https://discuss.elastic.co/t/direct-index-mapping-vs-index-mapping-with-directory/187979)

<div class="topic-metadata">

**Author:** [@manish\_kaushik](https://discuss.elastic.co/u/manish_kaushik)\
**Replies:** 8\
**Last updated:** [June 28, 2019, 1:14pm UTC](https://discuss.elastic.co/t/direct-index-mapping-vs-index-mapping-with-directory/187979 "2019-06-28T13:14:08Z")

</div>

hey, I am unable to understand the difference between indexing data directly by making an index and by making particulars in an index. ex:- how I create index from mysql to elastic via logstash is by providing index an…

---

## [NullPointerException in Elasticsearch when adding Index Pattern in kibana](https://discuss.elastic.co/t/nullpointerexception-in-elasticsearch-when-adding-index-pattern-in-kibana/187817)

<div class="topic-metadata">

**Author:** [@marekm](https://discuss.elastic.co/u/marekm)\
**Replies:** 5\
**Last updated:** [June 28, 2019, 12:37pm UTC](https://discuss.elastic.co/t/nullpointerexception-in-elasticsearch-when-adding-index-pattern-in-kibana/187817 "2019-06-28T12:37:49Z")

</div>

Hey, I noticed the following exception in the Elasticsearch logs \[2019-06-27T13:05:54,761\]\[DEBUG\]\[o.e.a.f.TransportFieldCapabilitiesIndexAction\] \[mpps-st-elastic-1\] null: failed to execute \[org.elasticsearch.action.fie…

---

## [I use Spring-data-elasticsearch 3.1.2 to connect to elasticsearch6.2.4 but has some error](https://discuss.elastic.co/t/i-use-spring-data-elasticsearch-3-1-2-to-connect-to-elasticsearch6-2-4-but-has-some-error/187847)

<div class="topic-metadata">

**Author:** [@zangju2](https://discuss.elastic.co/u/zangju2)\
**Replies:** 1\
**Last updated:** [June 28, 2019, 12:19pm UTC](https://discuss.elastic.co/t/i-use-spring-data-elasticsearch-3-1-2-to-connect-to-elasticsearch6-2-4-but-has-some-error/187847 "2019-06-28T12:19:15Z")

</div>

java.lang.IllegalArgumentException: maxNumComponents: 1 (expected: \>= 2) at io.netty.buffer.CompositeByteBuf.(CompositeByteBuf.java:68) at io.netty.buffer.CompositeByteBuf.(CompositeByteBuf.java:78) at io.netty.buffer…

---

## [Master not discovered yet, this node has not previously joined a bootstrapped](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped/187963)

<div class="topic-metadata">

**Author:** [@mhsh64](https://discuss.elastic.co/u/mhsh64)\
**Replies:** 6\
**Last updated:** [June 28, 2019, 11:41am UTC](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped/187963 "2019-06-28T11:41:13Z")

</div>

Hello, My environment: ============================================================= DNS Configuration: 192.168.0.71 vm1.local.com vm1 qa-node-1 192.168.0.72 vm2.local.com vm2 qa-node-2 Ports 9200 , 9300 open on…

---

## [How can i put an xml file into elasticsearch by spring data elasticseach](https://discuss.elastic.co/t/how-can-i-put-an-xml-file-into-elasticsearch-by-spring-data-elasticseach/184860)

<div class="topic-metadata">

**Author:** [@leyla1](https://discuss.elastic.co/u/leyla1)\
**Replies:** 10\
**Last updated:** [June 28, 2019, 11:32am UTC](https://discuss.elastic.co/t/how-can-i-put-an-xml-file-into-elasticsearch-by-spring-data-elasticseach/184860 "2019-06-28T11:32:39Z")

</div>

hi, i'm new in elasticsearch, i tried to load xml file into elasticsearch by logstash, but sometimes it loads and sometimes it doesnt load, that's why decide to use filebeat to load it, it loads the file but the logstas…

---

## [Elastic search in kubernetes only on Linux node](https://discuss.elastic.co/t/elastic-search-in-kubernetes-only-on-linux-node/188025)

<div class="topic-metadata">

**Author:** [@Paulius\_K](https://discuss.elastic.co/u/Paulius_K)\
**Replies:** 1\
**Last updated:** [June 28, 2019, 11:21am UTC](https://discuss.elastic.co/t/elastic-search-in-kubernetes-only-on-linux-node/188025 "2019-06-28T11:21:35Z")

</div>

I'm trying to install elasticsearch on kubernetes using helm. I have cluster of linux and windows nodes and i can't find a way to run elasticsearch only on linux nodes, how to do it? To run on linux nodes only i need to …

---

## [Not getting data into Elasticsearch](https://discuss.elastic.co/t/not-getting-data-into-elasticsearch/187848)

<div class="topic-metadata">

**Author:** [@markov](https://discuss.elastic.co/u/markov)\
**Replies:** 7\
**Last updated:** [June 28, 2019, 11:15am UTC](https://discuss.elastic.co/t/not-getting-data-into-elasticsearch/187848 "2019-06-28T11:15:45Z")

</div>

Hi all, i'm sending logs using filebeat but i don't receive anything in kibana x-pack is enabled I created a logstash writer role \> POST \_xpack/security/role/logstash\_writer \> { \> "cluster": \["manage\_index\_templates"…

---

## [Elasticsearch Failure node lock error](https://discuss.elastic.co/t/elasticsearch-failure-node-lock-error/188015)

<div class="topic-metadata">

**Author:** [@Xelrod](https://discuss.elastic.co/u/Xelrod)\
**Replies:** 1\
**Last updated:** [June 28, 2019, 11:15am UTC](https://discuss.elastic.co/t/elasticsearch-failure-node-lock-error/188015 "2019-06-28T11:15:43Z")

</div>

Hi, I've changed the data path to a shared folder under /mnt/share/elasticsearch. And moved the elasticsearch folder there. When I try to start elasticsearch I get the following error. Caused by: java.nio.file.AccessDe…

---

## [Security feature for 7.1, failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin\]](https://discuss.elastic.co/t/security-feature-for-7-1-failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/187139)

<div class="topic-metadata">

**Author:** [@Saurabh\_Sharma\_IIT](https://discuss.elastic.co/u/Saurabh_Sharma_IIT)\
**Replies:** 4\
**Last updated:** [June 26, 2019, 5:12am UTC](https://discuss.elastic.co/t/security-feature-for-7-1-failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/187139 "2019-06-26T05:12:18Z")

</div>

Hi, I am following tutorial given on for adding security to elastic search and kibana. After running this command bin/elasticsearch-certutil cert -out config/elastic-certificates.p12 -pass "" on windows, when I fo…

---

## [Calculate count based on the latest document](https://discuss.elastic.co/t/calculate-count-based-on-the-latest-document/188028)

<div class="topic-metadata">

**Author:** [@statsabdessamad](https://discuss.elastic.co/u/statsabdessamad)\
**Replies:** 0\
**Last updated:** [June 28, 2019, 10:32am UTC](https://discuss.elastic.co/t/calculate-count-based-on-the-latest-document/188028 "2019-06-28T10:32:29Z")

</div>

Suppose we have log files with the following structure : Doc 1 : Recieved\_at Risk "2019-06-26T20:32:57.008Z", "High", "VULN1" "2019-06-26T20:32:57.008Z", "High", "VULN2…

---

## [Is there any way in bulk api to update all documents present in index in one short](https://discuss.elastic.co/t/is-there-any-way-in-bulk-api-to-update-all-documents-present-in-index-in-one-short/188008)

<div class="topic-metadata">

**Author:** [@BleedCode](https://discuss.elastic.co/u/BleedCode)\
**Replies:** 1\
**Last updated:** [June 28, 2019, 9:53am UTC](https://discuss.elastic.co/t/is-there-any-way-in-bulk-api-to-update-all-documents-present-in-index-in-one-short/188008 "2019-06-28T09:53:03Z")

</div>

Is there any way to update all the documents present in index without mentioning id in request body.

---

## [Incorrect highlight when using Intervals query (Elastic 7.1.1)](https://discuss.elastic.co/t/incorrect-highlight-when-using-intervals-query-elastic-7-1-1/186660)

<div class="topic-metadata">

**Author:** [@dmitriev-kir](https://discuss.elastic.co/u/dmitriev-kir)\
**Replies:** 1\
**Last updated:** [June 28, 2019, 9:38am UTC](https://discuss.elastic.co/t/incorrect-highlight-when-using-intervals-query-elastic-7-1-1/186660 "2019-06-28T09:38:54Z")

</div>

Hello! Please, clarify how intervals query works with highlighting in Elastic 7.1.1? I researched features of interval query. Mapping: PUT test\_intervals\_index { "mappings": { "dynamic": "strict", "propert…

---

## [Failed to parse field \[location\] of type \[geo\_shape\]](https://discuss.elastic.co/t/failed-to-parse-field-location-of-type-geo-shape/187773)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 3\
**Last updated:** [June 28, 2019, 9:24am UTC](https://discuss.elastic.co/t/failed-to-parse-field-location-of-type-geo-shape/187773 "2019-06-28T09:24:06Z")

</div>

Hi, I have a single geojson file that Elastic refuses to ingest. The file opens fine in QGIS and online viewers and also is accepted by Geoserver when exported as a shapefile. If I convert the polygons to lines then I…

---

## [How to check if a Field from a JSON Data exists in the Index bevor send another Data with same Field to Elasticsearch](https://discuss.elastic.co/t/how-to-check-if-a-field-from-a-json-data-exists-in-the-index-bevor-send-another-data-with-same-field-to-elasticsearch/187815)

<div class="topic-metadata">

**Author:** [@samyo](https://discuss.elastic.co/u/samyo)\
**Replies:** 0\
**Last updated:** [June 27, 2019, 11:39am UTC](https://discuss.elastic.co/t/how-to-check-if-a-field-from-a-json-data-exists-in-the-index-bevor-send-another-data-with-same-field-to-elasticsearch/187815 "2019-06-27T11:39:46Z")

</div>

Hello Folks, i have this JSON Data in Elastic , and i want to check in mytest Index , if it contains the application\_id=6 , so i can avoid sending the same JSON DATA twice with the same application\_id=6 . Is there any…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1245)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1247)
