# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1255

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1256

---

## [Combining fields from two indexes](https://discuss.elastic.co/t/combining-fields-from-two-indexes/186659)

<div class="topic-metadata">

**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\
**Replies:** 3\
**Last updated:** [June 21, 2019, 11:24am UTC](https://discuss.elastic.co/t/combining-fields-from-two-indexes/186659 "2019-06-21T11:24:23Z")

</div>

hi team, i have index1 and index2. I need to get field value from index1 to transform it with field from index2 and then receive field3 as result of transforming fields from these two indexes. what the way to do it with …

---

## [How can I delete all the stored scripts?](https://discuss.elastic.co/t/how-can-i-delete-all-the-stored-scripts/183274)

<div class="topic-metadata">

**Author:** [@goniaks](https://discuss.elastic.co/u/goniaks)\
**Replies:** 2\
**Last updated:** [June 21, 2019, 10:59am UTC](https://discuss.elastic.co/t/how-can-i-delete-all-the-stored-scripts/183274 "2019-06-21T10:59:39Z")

</div>

This way I can delete 1: DELETE \_scripts/my\_script I just want to delete them all, I don't know the list of scripts I have stored.

---

## [Too many Lucene merge threads while indexing](https://discuss.elastic.co/t/too-many-lucene-merge-threads-while-indexing/186822)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 6\
**Last updated:** [June 21, 2019, 10:55am UTC](https://discuss.elastic.co/t/too-many-lucene-merge-threads-while-indexing/186822 "2019-06-21T10:55:16Z")

</div>

We are doing indexing on 2 indices with one shard and a replica each. Avg size of document is 15Kb. Total documents=35million ES version 7.1.1 2 data nodes, 3 master and 2 coord nodes. refresh\_interval is disabled. …

---

## [Curator run only first action](https://discuss.elastic.co/t/curator-run-only-first-action/186857)

<div class="topic-metadata">

**Author:** [@lpouzac](https://discuss.elastic.co/u/lpouzac)\
**Replies:** 0\
**Last updated:** [June 21, 2019, 9:56am UTC](https://discuss.elastic.co/t/curator-run-only-first-action/186857 "2019-06-21T09:56:17Z")

</div>

Hi, When I run curator with multiple actions, only first action was executed. I use curator 5.7.6 and elasticsearch 7.1.0 curator --config config.yml actions.yml Configuration file --- actions: 1: action: delet…

---

## [Can we create index template without mappings?](https://discuss.elastic.co/t/can-we-create-index-template-without-mappings/186697)

<div class="topic-metadata">

**Author:** [@Jeetu19](https://discuss.elastic.co/u/Jeetu19)\
**Replies:** 6\
**Last updated:** [June 21, 2019, 10:14am UTC](https://discuss.elastic.co/t/can-we-create-index-template-without-mappings/186697 "2019-06-21T10:14:44Z")

</div>

I dont know the types of field coming from log, so can we create template without mapping of field like below. PUT \_template/test { "index\_patterns": "test\*", "settings": { "number\_of\_shards": 3, "number\_of\_replic…

---

## [How to write this as a ES query for the below example](https://discuss.elastic.co/t/how-to-write-this-as-a-es-query-for-the-below-example/186855)

<div class="topic-metadata">

**Author:** [@ek9boy](https://discuss.elastic.co/u/ek9boy)\
**Replies:** 0\
**Last updated:** [June 21, 2019, 9:47am UTC](https://discuss.elastic.co/t/how-to-write-this-as-a-es-query-for-the-below-example/186855 "2019-06-21T09:47:44Z")

</div>

Hi, I have the below query: I wanted to know how i could write this in ES? (COUNT\_of\_People \>= High\_Threshold AND COUNT\_of\_People != 0), 8 Please if you could help. Thanks

---

## [Access denied admin/aliases](https://discuss.elastic.co/t/access-denied-admin-aliases/186847)

<div class="topic-metadata">

**Author:** [@wmcleod](https://discuss.elastic.co/u/wmcleod)\
**Replies:** 0\
**Last updated:** [June 21, 2019, 9:27am UTC](https://discuss.elastic.co/t/access-denied-admin-aliases/186847 "2019-06-21T09:27:38Z")

</div>

I have setup a role to allow beats data to be indexed. I followed this article: https://www.elastic.co/guide/en/beats/metricbeat/current/feature-roles.html The indexes aren't created and I receive the following entry i…

---

## [Purpose and usage of index at ES](https://discuss.elastic.co/t/purpose-and-usage-of-index-at-es/186843)

<div class="topic-metadata">

**Author:** [@NAHA](https://discuss.elastic.co/u/NAHA)\
**Replies:** 1\
**Last updated:** [June 21, 2019, 9:23am UTC](https://discuss.elastic.co/t/purpose-and-usage-of-index-at-es/186843 "2019-06-21T09:23:12Z")

</div>

Hi , I am using ES version 6.7.0. I am sending to ES , so I created index every day. I just want to know Purpose and usage of index at ES. Which is the best way to store logs, per day or all in one index. Thanks in a…

---

## [ELK based CMDB](https://discuss.elastic.co/t/elk-based-cmdb/183269)

<div class="topic-metadata">

**Author:** [@mkain](https://discuss.elastic.co/u/mkain)\
**Replies:** 1\
**Last updated:** [June 21, 2019, 8:56am UTC](https://discuss.elastic.co/t/elk-based-cmdb/183269 "2019-06-21T08:56:05Z")

</div>

Hi, I am planning to develop a CMDB sort of tool which can Hold list of hosts/servers , network devices, NMS, n/w device port level connections. Mark relation between apps (hosts/servers) and network devices, NMS…

---

## [Elasticsearch's output to logstash](https://discuss.elastic.co/t/elasticsearchs-output-to-logstash/186167)

<div class="topic-metadata">

**Author:** [@Tianji\_Zhao](https://discuss.elastic.co/u/Tianji_Zhao)\
**Replies:** 5\
**Last updated:** [June 21, 2019, 8:36am UTC](https://discuss.elastic.co/t/elasticsearchs-output-to-logstash/186167 "2019-06-21T08:36:31Z")

</div>

My problem is: we need a re-matching process to the content in elasticsearch using logstash. So how to export the the data stored in the elasticsearch to logstash

---

## [Strange cachebehaviour](https://discuss.elastic.co/t/strange-cachebehaviour/186827)

<div class="topic-metadata">

**Author:** [@mfries](https://discuss.elastic.co/u/mfries)\
**Replies:** 0\
**Last updated:** [June 21, 2019, 8:20am UTC](https://discuss.elastic.co/t/strange-cachebehaviour/186827 "2019-06-21T08:20:20Z")

</div>

Hi, I have a cachebehaviour which I cannot explain. Our environment: 4 Nodes each with 88 cores, 792GB RAM and 20 spinnings disk (RAID10) as datastorage OS: RHEL 7.6 Docker: docker-1.13.1-94.gitb2f74b2.el7.x86\_64 (…

---

## [Command to change fieldtype of an index](https://discuss.elastic.co/t/command-to-change-fieldtype-of-an-index/186275)

<div class="topic-metadata">

**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\
**Replies:** 10\
**Last updated:** [June 21, 2019, 7:58am UTC](https://discuss.elastic.co/t/command-to-change-fieldtype-of-an-index/186275 "2019-06-21T07:58:38Z")

</div>

I am trying changing the fieldtype using of a field from string to integer and not able to find out to correct syntax. preferably using \_mapping API Please help Thanks in advance

---

## [Getting an error when using boost for multiple fields](https://discuss.elastic.co/t/getting-an-error-when-using-boost-for-multiple-fields/186187)

<div class="topic-metadata">

**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\
**Replies:** 26\
**Last updated:** [June 21, 2019, 7:02am UTC](https://discuss.elastic.co/t/getting-an-error-when-using-boost-for-multiple-fields/186187 "2019-06-21T07:02:14Z")

</div>

Hello, When i am trying to add boost for multiple queries : POST /new\_master\_query/\_search { "query": { "match" : { "title": { "query": "test", "boost": 2 }, "object\_summary":{ "query":"Test", "boost": 1 } …

---

## [Concave geo shapes in 1.7.x](https://discuss.elastic.co/t/concave-geo-shapes-in-1-7-x/185948)

<div class="topic-metadata">

**Author:** [@nickoneill](https://discuss.elastic.co/u/nickoneill)\
**Replies:** 5\
**Last updated:** [June 21, 2019, 6:34am UTC](https://discuss.elastic.co/t/concave-geo-shapes-in-1-7-x/185948 "2019-06-21T06:34:34Z")

</div>

I'm maintaining an application running 1.7.x that heavily uses geoshapes and querying by points within those shapes. As far as I can tell 1.7.x is not handling concave shapes well and queries for shapes are returning po…

---

## [SSLHandshakeException when enabling security](https://discuss.elastic.co/t/sslhandshakeexception-when-enabling-security/186680)

<div class="topic-metadata">

**Author:** [@MacAni](https://discuss.elastic.co/u/MacAni)\
**Replies:** 5\
**Last updated:** [June 21, 2019, 6:13am UTC](https://discuss.elastic.co/t/sslhandshakeexception-when-enabling-security/186680 "2019-06-21T06:13:25Z")

</div>

Hi we have a working cluster but when we enable xpack security the transport communication fails. Configuration: bootstrap.memory\_lock: true cluster.initial\_master\_nodes: - elk.mydomain.dk - elk-02.mydomain.dk - el…

---

## [Analysis-icu plugin usage at client side](https://discuss.elastic.co/t/analysis-icu-plugin-usage-at-client-side/186381)

<div class="topic-metadata">

**Author:** [@tiwari.piyush7](https://discuss.elastic.co/u/tiwari.piyush7)\
**Replies:** 13\
**Last updated:** [June 21, 2019, 6:18am UTC](https://discuss.elastic.co/t/analysis-icu-plugin-usage-at-client-side/186381 "2019-06-21T06:18:27Z")

</div>

Hi, I would like to use analysis-icu plugin (https://www.elastic.co/guide/en/elasticsearch/plugins/6.6/analysis-icu.html) for ICU Folding with ElasticSearch 6.6.2. While doing so, I was able to install analysis-icu plug…

---

## [Help! I want to use high level client with weblogic, but deployment is failed](https://discuss.elastic.co/t/help-i-want-to-use-high-level-client-with-weblogic-but-deployment-is-failed/186635)

<div class="topic-metadata">

**Author:** [@CodeSpeaker](https://discuss.elastic.co/u/CodeSpeaker)\
**Replies:** 6\
**Last updated:** [June 21, 2019, 6:16am UTC](https://discuss.elastic.co/t/help-i-want-to-use-high-level-client-with-weblogic-but-deployment-is-failed/186635 "2019-06-21T06:16:51Z")

</div>

These are weblogic’s error logs. I deployed the same application on tomcat, and it ran successfully. I has played with this error for almost a week. I can’t wait to kill this bug! Please help me! Thanks!

---

## [How to define dynamic date formats in index template](https://discuss.elastic.co/t/how-to-define-dynamic-date-formats-in-index-template/186689)

<div class="topic-metadata">

**Author:** [@RamanGupta16](https://discuss.elastic.co/u/RamanGupta16)\
**Replies:** 0\
**Last updated:** [June 20, 2019, 12:55pm UTC](https://discuss.elastic.co/t/how-to-define-dynamic-date-formats-in-index-template/186689 "2019-06-20T12:55:56Z")

</div>

I tried to customize the dynamic\_date\_formats as part of Index template in ElasticSearch version 6.7.2. But I am facing issues:- PUT \_template/template\_1 { "index\_patterns":"\*", "version": 1, "mappings": { "dy…

---

## [Using Index template - how to configure rolling over property](https://discuss.elastic.co/t/using-index-template-how-to-configure-rolling-over-property/186663)

<div class="topic-metadata">

**Author:** [@ANKIT\_SINGHAI](https://discuss.elastic.co/u/ANKIT_SINGHAI)\
**Replies:** 2\
**Last updated:** [June 21, 2019, 5:11am UTC](https://discuss.elastic.co/t/using-index-template-how-to-configure-rolling-over-property/186663 "2019-06-21T05:11:58Z")

</div>

Hi Team, I would like to configure max\_age property for an index which follows an template. How to set this configuration in template so that I don't have to do it for all the indexes which matches index\_patterns indivi…

---

## [Scripted filter with fields from the top AND the nested document](https://discuss.elastic.co/t/scripted-filter-with-fields-from-the-top-and-the-nested-document/186024)

<div class="topic-metadata">

**Author:** [@Yuan\_Hong](https://discuss.elastic.co/u/Yuan_Hong)\
**Replies:** 2\
**Last updated:** [June 21, 2019, 4:19am UTC](https://discuss.elastic.co/t/scripted-filter-with-fields-from-the-top-and-the-nested-document/186024 "2019-06-21T04:19:49Z")

</div>

Hi, Suppose I have an order index with the following mapping: { "leadTime": 2, "shipments": \[{ "packageId": 1, "shipped": "2019-06-10", "received": null }, { "packageId": 2, "shipped": "2019-0…

---

## [JAVA Access denied - ES upgrade to 7.1](https://discuss.elastic.co/t/java-access-denied-es-upgrade-to-7-1/186409)

<div class="topic-metadata">

**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Replies:** 4\
**Last updated:** [June 21, 2019, 2:55am UTC](https://discuss.elastic.co/t/java-access-denied-es-upgrade-to-7-1/186409 "2019-06-21T02:55:05Z")

</div>

Hi all I have this issue when I try to run ES. ERROR Could not register mbeans java.security.AccessControlException: access denied ("javax.management.MBeanT rustPermission" "register") ERROR: \[1\] bootstrap checks fail…

---

## [Assigning roles to allow watcher management](https://discuss.elastic.co/t/assigning-roles-to-allow-watcher-management/186701)

<div class="topic-metadata">

**Author:** [@nbelanger](https://discuss.elastic.co/u/nbelanger)\
**Replies:** 1\
**Last updated:** [June 21, 2019, 2:12am UTC](https://discuss.elastic.co/t/assigning-roles-to-allow-watcher-management/186701 "2019-06-21T02:12:54Z")

</div>

Having trouble assigning roles so that they can add/update a watcher. When the user logs in, and attempts to click on manage watcher link - they receive: "you do not have permission to manage watches" The role has the…

---

## [Script - round an average](https://discuss.elastic.co/t/script-round-an-average/184320)

<div class="topic-metadata">

**Author:** [@simple\_commentateur](https://discuss.elastic.co/u/simple_commentateur)\
**Replies:** 3\
**Last updated:** [June 20, 2019, 11:36pm UTC](https://discuss.elastic.co/t/script-round-an-average/184320 "2019-06-20T23:36:38Z")

</div>

Hello, In Kibana, i want to display the average of a field in Metric Vizualization Average value : 24573.222 But the display don't change, it still show 2453.222 I even try this but it still don't work : { "scri…

---

## [Painless script not working as expected](https://discuss.elastic.co/t/painless-script-not-working-as-expected/185978)

<div class="topic-metadata">

**Author:** [@Nitish\_Jain](https://discuss.elastic.co/u/Nitish_Jain)\
**Replies:** 2\
**Last updated:** [June 20, 2019, 11:25pm UTC](https://discuss.elastic.co/t/painless-script-not-working-as-expected/185978 "2019-06-20T23:25:17Z")

</div>

Hi, I am trinyg to run this script and it's not working as expected. String messageValue = doc\['message.keyword'\]; if ( messageValue != null) { String val = messageValue .substring(0,30); return val + "678"; } else…

---

## [Aggregate-on-fields-and-get-distinct-documents](https://discuss.elastic.co/t/aggregate-on-fields-and-get-distinct-documents/186778)

<div class="topic-metadata">

**Author:** [@Rachana\_Maniyar](https://discuss.elastic.co/u/Rachana_Maniyar)\
**Replies:** 0\
**Last updated:** [June 20, 2019, 10:32pm UTC](https://discuss.elastic.co/t/aggregate-on-fields-and-get-distinct-documents/186778 "2019-06-20T22:32:27Z")

</div>

Hi, I was going through the following thread that talks about how you could get distinct documents with aggregation terms and top hits. my question is, this will work with typically what size of documents ? I have som…

---

## [Node not getting shards allocated back to it after upgrade](https://discuss.elastic.co/t/node-not-getting-shards-allocated-back-to-it-after-upgrade/186546)

<div class="topic-metadata">

**Author:** [@RayS](https://discuss.elastic.co/u/RayS)\
**Replies:** 5\
**Last updated:** [June 20, 2019, 9:38pm UTC](https://discuss.elastic.co/t/node-not-getting-shards-allocated-back-to-it-after-upgrade/186546 "2019-06-20T21:38:13Z")

</div>

I tried my hand at a roll update for my cluster. I have 3 nodes (elastic01,elastic02 and elastic03). Elastic03 is currently the master so I started with 02 first. That upgrade went fine and cluster rebuilt no problem.…

---

## [Significant text order](https://discuss.elastic.co/t/significant-text-order/186768)

<div class="topic-metadata">

**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\
**Replies:** 1\
**Last updated:** [June 20, 2019, 9:17pm UTC](https://discuss.elastic.co/t/significant-text-order/186768 "2019-06-20T21:17:57Z")

</div>

ORDER NOT WORKİNG!!!!!!

---

## [Searchgurad implementation](https://discuss.elastic.co/t/searchgurad-implementation/186706)

<div class="topic-metadata">

**Author:** [@arun.kumar92](https://discuss.elastic.co/u/arun.kumar92)\
**Replies:** 1\
**Last updated:** [June 20, 2019, 8:43pm UTC](https://discuss.elastic.co/t/searchgurad-implementation/186706 "2019-06-20T20:43:58Z")

</div>

Hello, I have a proposal to implement SearchGaurd in my ElasticSearch cluster. The ES cluster has so many indices currently. After implementation of Search Gaurd I need to enable the shards allocation, but unfortunately…

---

## [Hunspell dictionaries](https://discuss.elastic.co/t/hunspell-dictionaries/186055)

<div class="topic-metadata">

**Author:** [@aiswarya](https://discuss.elastic.co/u/aiswarya)\
**Replies:** 2\
**Last updated:** [June 20, 2019, 8:30pm UTC](https://discuss.elastic.co/t/hunspell-dictionaries/186055 "2019-06-20T20:30:22Z")

</div>

i'm having an index 'main' where i'm having headings of a site. my requirement is to search this index with some keywords/phrases . Then to create a new index 'result' with the matches. i'm using 'Hunspell' i need …

---

## [Grok pattern fails in pipeline, but works in grok builder?](https://discuss.elastic.co/t/grok-pattern-fails-in-pipeline-but-works-in-grok-builder/186755)

<div class="topic-metadata">

**Author:** [@SnakeByte](https://discuss.elastic.co/u/SnakeByte)\
**Replies:** 0\
**Last updated:** [June 20, 2019, 8:04pm UTC](https://discuss.elastic.co/t/grok-pattern-fails-in-pipeline-but-works-in-grok-builder/186755 "2019-06-20T20:04:55Z")

</div>

Here's a multiline log entry I'm using to test: May 10, 2019 10:14:48 PM com.company.servers.Server \<clinit\> INFO: Running vpc ABC, in environment DEV, region is USEAST1, host is https://app.abc.company.com This is the…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1254)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1256)
