# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1259

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1260

---

## [Does ES provide a User Interface to search Indexed documents?](https://discuss.elastic.co/t/does-es-provide-a-user-interface-to-search-indexed-documents/186326)

<div class="topic-metadata">

**Author:** [@armharish](https://discuss.elastic.co/u/armharish)\
**Replies:** 1\
**Last updated:** [June 18, 2019, 7:16pm UTC](https://discuss.elastic.co/t/does-es-provide-a-user-interface-to-search-indexed-documents/186326 "2019-06-18T19:16:13Z")

</div>

Does ES provide a User Interface to search Indexed documents?

---

## [How to get all the outputs in one run using sql api?](https://discuss.elastic.co/t/how-to-get-all-the-outputs-in-one-run-using-sql-api/185968)

<div class="topic-metadata">

**Author:** [@zatom](https://discuss.elastic.co/u/zatom)\
**Replies:** 6\
**Last updated:** [June 18, 2019, 6:59pm UTC](https://discuss.elastic.co/t/how-to-get-all-the-outputs-in-one-run-using-sql-api/185968 "2019-06-18T18:59:02Z")

</div>

Using Sql Api in ES, kibana console only displays 1000 outputs. But, my outputs are in millions. So far, I am only able to see other batches of outputs using cursor id. But, that takes a long time and is not convenient. …

---

## [Leveraging ES in AWS Gov Cloud - Question](https://discuss.elastic.co/t/leveraging-es-in-aws-gov-cloud-question/186135)

<div class="topic-metadata">

**Author:** [@RLLINTONii](https://discuss.elastic.co/u/RLLINTONii)\
**Replies:** 6\
**Last updated:** [June 18, 2019, 6:11pm UTC](https://discuss.elastic.co/t/leveraging-es-in-aws-gov-cloud-question/186135 "2019-06-18T18:11:39Z")

</div>

ES has to be able to listen on both ports 9200 and 9300. Does anyone know why AWS doesn’t allow ES to listen in port 9300? Any Advice appreciated.

---

## [Error Putting JSON onto Elasticsearch](https://discuss.elastic.co/t/error-putting-json-onto-elasticsearch/186329)

<div class="topic-metadata">

**Author:** [@jssjogren](https://discuss.elastic.co/u/jssjogren)\
**Replies:** 1\
**Last updated:** [June 18, 2019, 6:08pm UTC](https://discuss.elastic.co/t/error-putting-json-onto-elasticsearch/186329 "2019-06-18T18:08:25Z")

</div>

Hello, I'm attempting to use the \_bulk endpoint to post some data to Elasticsearch via a curl command but I continually receive the error: Error{ "error" : { "root\_cause" : \[ { "type" …

---

## [Email Analyzer and Domain Field](https://discuss.elastic.co/t/email-analyzer-and-domain-field/186328)

<div class="topic-metadata">

**Author:** [@Vincent\_Stevenson](https://discuss.elastic.co/u/Vincent_Stevenson)\
**Replies:** 0\
**Last updated:** [June 18, 2019, 6:02pm UTC](https://discuss.elastic.co/t/email-analyzer-and-domain-field/186328 "2019-06-18T18:02:17Z")

</div>

I have a Json field called UserId in each document. I would like to create a new field that contains only the email domain. Example: { "FirstName" : "John", "LastName" : "Smith", "Email" : "jsmith@gmail.com" } How do …

---

## [New install of ElasticSearch Fail](https://discuss.elastic.co/t/new-install-of-elasticsearch-fail/185882)

<div class="topic-metadata">

**Author:** [@sean-39](https://discuss.elastic.co/u/sean-39)\
**Replies:** 4\
**Last updated:** [June 18, 2019, 5:12pm UTC](https://discuss.elastic.co/t/new-install-of-elasticsearch-fail/185882 "2019-06-18T17:12:55Z")

</div>

ElasticSearch Service Fails Any help would be nice! trying to play with and start learning ElasticStack but when i try to install on CentOS I hit failure straight away. Below I included information about the system, fa…

---

## [Curl witch Aggs and Time](https://discuss.elastic.co/t/curl-witch-aggs-and-time/186106)

<div class="topic-metadata">

**Author:** [@schneider](https://discuss.elastic.co/u/schneider)\
**Replies:** 3\
**Last updated:** [June 18, 2019, 3:57pm UTC](https://discuss.elastic.co/t/curl-witch-aggs-and-time/186106 "2019-06-18T15:57:17Z")

</div>

I have a curl that can search the top sender: curl -XGET "http://localhost:9200/\_search" -H 'Content-Type: application/json' -d' { "size": 0, "aggs": { "group\_by\_state": { "terms": { "field": "remetente.keyword" …

---

## [Timezone update to a date field](https://discuss.elastic.co/t/timezone-update-to-a-date-field/186313)

<div class="topic-metadata">

**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\
**Replies:** 0\
**Last updated:** [June 18, 2019, 4:31pm UTC](https://discuss.elastic.co/t/timezone-update-to-a-date-field/186313 "2019-06-18T16:31:30Z")

</div>

Hi, In ES I have a date field without a timezone. I see , Kibana assumes it as GMT if timezone is not present . How can i set the timezone for a field in ES using painless ? I want to set the timezone for that existi…

---

## [Content type in Elasticsearch 6.0](https://discuss.elastic.co/t/content-type-in-elasticsearch-6-0/186302)

<div class="topic-metadata">

**Author:** [@patis](https://discuss.elastic.co/u/patis)\
**Replies:** 1\
**Last updated:** [June 18, 2019, 4:07pm UTC](https://discuss.elastic.co/t/content-type-in-elasticsearch-6-0/186302 "2019-06-18T16:07:47Z")

</div>

Hello, I have installed Elasticsearch 6.0 on my machine and I have no data on kibana. how add Content-Type: application/json on elasticsearch ? can i do this from kibana dev tool ?

---

## [How to match trailing spaces in searches?](https://discuss.elastic.co/t/how-to-match-trailing-spaces-in-searches/186292)

<div class="topic-metadata">

**Author:** [@Bart\_de\_Man](https://discuss.elastic.co/u/Bart_de_Man)\
**Replies:** 0\
**Last updated:** [June 18, 2019, 3:07pm UTC](https://discuss.elastic.co/t/how-to-match-trailing-spaces-in-searches/186292 "2019-06-18T15:07:55Z")

</div>

Hello all, I'm currently trying to match trailing/leading spaces in searches such as: "de " "het " "een " " baan" the field that im searching on is of type "text" with a search\_analyzer "simple" 'my\_searching\_field'…

---

## [JVM crash for Logstash and Elasticsearch 7.1.1](https://discuss.elastic.co/t/jvm-crash-for-logstash-and-elasticsearch-7-1-1/186081)

<div class="topic-metadata">

**Author:** [@arberg](https://discuss.elastic.co/u/arberg)\
**Replies:** 2\
**Last updated:** [June 18, 2019, 2:52pm UTC](https://discuss.elastic.co/t/jvm-crash-for-logstash-and-elasticsearch-7-1-1/186081 "2019-06-18T14:52:06Z")

</div>

I'm using the official docker-images for logstash, kibana and elasticsearch, version 7.1.1. I'm getting JVM crashes on elasticsearch and logstash. Sometimes after a few days. Elasticsearch logs: https://pastebin.com/h4b…

---

## [Ingest Node: Fixing Conflicts](https://discuss.elastic.co/t/ingest-node-fixing-conflicts/186247)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 5\
**Last updated:** [June 18, 2019, 2:37pm UTC](https://discuss.elastic.co/t/ingest-node-fixing-conflicts/186247 "2019-06-18T14:37:48Z")

</div>

Hi, Can someone show me how I can convert a simple string to an object using an ingestion pipeline? For example, I have logs including error objects containing entires such as error.message. And there are other inbound…

---

## [Elasticsearch SQL CLI usage](https://discuss.elastic.co/t/elasticsearch-sql-cli-usage/185180)

<div class="topic-metadata">

**Author:** [@birko](https://discuss.elastic.co/u/birko)\
**Replies:** 3\
**Last updated:** [June 17, 2019, 5:01pm UTC](https://discuss.elastic.co/t/elasticsearch-sql-cli-usage/185180 "2019-06-17T17:01:09Z")

</div>

Is it possible to use standalone Elasticsearch SQL CLI in windows environment? We are running Elasticsearch 6.8 cluster on Debian servers, but SQL CLI would be nice to use in windows because of additional connection to …

---

## [Slow searches in docker \[gc\]\[54958\] overhead, spent \[344ms\] collecting in the last \[1s\]](https://discuss.elastic.co/t/slow-searches-in-docker-gc-54958-overhead-spent-344ms-collecting-in-the-last-1s/186270)

<div class="topic-metadata">

**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\
**Replies:** 0\
**Last updated:** [June 18, 2019, 1:53pm UTC](https://discuss.elastic.co/t/slow-searches-in-docker-gc-54958-overhead-spent-344ms-collecting-in-the-last-1s/186270 "2019-06-18T13:53:08Z")

</div>

Hello, I am trying to run a Composite quarry over my data set. Dataset size (20GB) Elastic 6.8.0 My searches are extremely slow and I need some wisdom. the server has NVMe drives. 15GB of ram index settings { "set…

---

## [Unable to register NFS for snapshot](https://discuss.elastic.co/t/unable-to-register-nfs-for-snapshot/186026)

<div class="topic-metadata">

**Author:** [@aqiank](https://discuss.elastic.co/u/aqiank)\
**Replies:** 4\
**Last updated:** [June 18, 2019, 1:23pm UTC](https://discuss.elastic.co/t/unable-to-register-nfs-for-snapshot/186026 "2019-06-18T13:23:18Z")

</div>

Hi guys, I'm unable to do the following cURL command: curl -XPUT http://localhost:9200/\_snapshot/backup -H 'Content-Type: application/json' -d ' { "type": "fs", "settings": { "location": "/mnt/NFS/NFS/l…

---

## [File upload: Error\_timeout\_exception 25s](https://discuss.elastic.co/t/file-upload-error-timeout-exception-25s/185322)

<div class="topic-metadata">

**Author:** [@Trinh\_Pham](https://discuss.elastic.co/u/Trinh_Pham)\
**Replies:** 2\
**Last updated:** [June 18, 2019, 1:37pm UTC](https://discuss.elastic.co/t/file-upload-error-timeout-exception-25s/185322 "2019-06-18T13:37:09Z")

</div>

I use Data Visuallizer in Machine Learning ( Kibana ) to load file log to Elasticsearch. But I received the following the error \[timeout\_exception\] Aborting structure analysis during \[full message Grok pattern field ex…

---

## [Cannot setup single node elasticsearch in docker](https://discuss.elastic.co/t/cannot-setup-single-node-elasticsearch-in-docker/186193)

<div class="topic-metadata">

**Author:** [@agreatfool](https://discuss.elastic.co/u/agreatfool)\
**Replies:** 10\
**Last updated:** [June 18, 2019, 1:36pm UTC](https://discuss.elastic.co/t/cannot-setup-single-node-elasticsearch-in-docker/186193 "2019-06-18T13:36:54Z")

</div>

docker-compose config: es\_1: image: "elasticsearch:7.0.0" container\_name: "es\_1" hostname: "es\_1" volumes: - es\_vol\_1\_data:/usr/share/elasticsearch/data - es\_vol\_1\_logs:/usr/share/elasticsearch/logs …

---

## [Problem with accents](https://discuss.elastic.co/t/problem-with-accents/185565)

<div class="topic-metadata">

**Author:** [@soufiane1](https://discuss.elastic.co/u/soufiane1)\
**Replies:** 11\
**Last updated:** [June 18, 2019, 1:31pm UTC](https://discuss.elastic.co/t/problem-with-accents/185565 "2019-06-18T13:31:21Z")

</div>

Hello everyone, I am trying to load data from a csv file to elasticsearch, but I can't get the accents "é", I get \\xE0 for "à", there is some solution to solve this ? Here is my config, and the accents exist in the co…

---

## [Webhook watcher action to elastic no\_http\_response\_exception](https://discuss.elastic.co/t/webhook-watcher-action-to-elastic-no-http-response-exception/186240)

<div class="topic-metadata">

**Author:** [@nitzan.karni](https://discuss.elastic.co/u/nitzan.karni)\
**Replies:** 3\
**Last updated:** [June 18, 2019, 12:45pm UTC](https://discuss.elastic.co/t/webhook-watcher-action-to-elastic-no-http-response-exception/186240 "2019-06-18T12:45:49Z")

</div>

Keep on getting no\_http\_response\_exception on my watcher's webhook action. ctx.payload.body is the body of an update by query request. I create it in the transform section. the watcher: { . . . "actions": { "update\_…

---

## [In Elasticsearch, what is the difference between es.discovery.nodes=false and es.nodes.wan.only=true?](https://discuss.elastic.co/t/in-elasticsearch-what-is-the-difference-between-es-discovery-nodes-false-and-es-nodes-wan-only-true/186255)

<div class="topic-metadata">

**Author:** [@jmartori](https://discuss.elastic.co/u/jmartori)\
**Replies:** 0\
**Last updated:** [June 18, 2019, 12:38pm UTC](https://discuss.elastic.co/t/in-elasticsearch-what-is-the-difference-between-es-discovery-nodes-false-and-es-nodes-wan-only-true/186255 "2019-06-18T12:38:14Z")

</div>

While reading about the different configuration options in https://www.elastic.co/guide/en/elasticsearch/hadoop/5.6/configuration.html I came around the options es.discovery.nodes and es.nodes.wan.only . While they se…

---

## [Index data with '0' in the date format as 'Not available' when processing date formats](https://discuss.elastic.co/t/index-data-with-0-in-the-date-format-as-not-available-when-processing-date-formats/186238)

<div class="topic-metadata">

**Author:** [@PeterHeming](https://discuss.elastic.co/u/PeterHeming)\
**Replies:** 1\
**Last updated:** [June 18, 2019, 12:28pm UTC](https://discuss.elastic.co/t/index-data-with-0-in-the-date-format-as-not-available-when-processing-date-formats/186238 "2019-06-18T12:28:42Z")

</div>

Hello! I do have a large data set from VirusTotal and this data set needs to be indexed. I would like to interpret a few field names as date instead of keywords/strings. While processing, I discovered that hundreds of …

---

## [Elasticsearch search with regex involving space](https://discuss.elastic.co/t/elasticsearch-search-with-regex-involving-space/186251)

<div class="topic-metadata">

**Author:** [@baidurjya](https://discuss.elastic.co/u/baidurjya)\
**Replies:** 0\
**Last updated:** [June 18, 2019, 12:22pm UTC](https://discuss.elastic.co/t/elasticsearch-search-with-regex-involving-space/186251 "2019-06-18T12:22:18Z")

</div>

Hello everyone, I am using ElastAlert Kibana Plugin in Kibana, I want to set up an alert that invokes email if I get 500+ http error from any container. e.g. 217.114.212.180 - - \[18/Jun/2019:12:09:21 +0000\] "GET /statu…

---

## [Elasticsearch giving dynamic result](https://discuss.elastic.co/t/elasticsearch-giving-dynamic-result/186249)

<div class="topic-metadata">

**Author:** [@Amit\_Kumar2](https://discuss.elastic.co/u/Amit_Kumar2)\
**Replies:** 0\
**Last updated:** [June 18, 2019, 12:19pm UTC](https://discuss.elastic.co/t/elasticsearch-giving-dynamic-result/186249 "2019-06-18T12:19:26Z")

</div>

Recently we have upgraded from 6.5 to 7.1 after this we are facing an issue in which we are getting different score of same document for same query. We study it and in some discussion there was solution of forcemerge and…

---

## [Elasticsearch DSL Python query\_string Lucene Syntax](https://discuss.elastic.co/t/elasticsearch-dsl-python-query-string-lucene-syntax/184539)

<div class="topic-metadata">

**Author:** [@aalmir](https://discuss.elastic.co/u/aalmir)\
**Replies:** 0\
**Last updated:** [June 6, 2019, 9:29am UTC](https://discuss.elastic.co/t/elasticsearch-dsl-python-query-string-lucene-syntax/184539 "2019-06-06T09:29:39Z")

</div>

Elasticsearch DSL

---

## [How to install/enable ingest-geoip and ingest-user-agent in ELK STACK 7.1](https://discuss.elastic.co/t/how-to-install-enable-ingest-geoip-and-ingest-user-agent-in-elk-stack-7-1/186216)

<div class="topic-metadata">

**Author:** [@mark.quilates](https://discuss.elastic.co/u/mark.quilates)\
**Replies:** 3\
**Last updated:** [June 18, 2019, 10:52am UTC](https://discuss.elastic.co/t/how-to-install-enable-ingest-geoip-and-ingest-user-agent-in-elk-stack-7-1/186216 "2019-06-18T10:52:05Z")

</div>

Hi, Anyone can help me solve? Is their anyone has idea why I can't install ingest-geoip and ingest-user-agent in my newly installed ELK STACK 7.1 in Ubuntu 16.04 LTS? Ran these: # sudo bin/elasticsearch-plugin insta…

---

## [Elasticsearch node Sizing for production](https://discuss.elastic.co/t/elasticsearch-node-sizing-for-production/186204)

<div class="topic-metadata">

**Author:** [@TsuWeiQuan](https://discuss.elastic.co/u/TsuWeiQuan)\
**Replies:** 4\
**Last updated:** [June 18, 2019, 10:14am UTC](https://discuss.elastic.co/t/elasticsearch-node-sizing-for-production/186204 "2019-06-18T10:14:36Z")

</div>

Hello, I am currently doing some research and designing the architecture for the ELK stack to be used in production. My team has purchased 9 elastic nodes for this setup. However, I have some questions on the sizing of…

---

## [Skip Anomalous data in job](https://discuss.elastic.co/t/skip-anomalous-data-in-job/186213)

<div class="topic-metadata">

**Author:** [@Bharath\_Kumar\_R](https://discuss.elastic.co/u/Bharath_Kumar_R)\
**Replies:** 1\
**Last updated:** [June 18, 2019, 10:12am UTC](https://discuss.elastic.co/t/skip-anomalous-data-in-job/186213 "2019-06-18T10:12:19Z")

</div>

Hey, As you can see in this screenshot, the series of anomalies detected was caused due to unknown outage, which I found out today. Is there any way to make the model skip the anomalous data in the past and run the job…

---

## [Repository error is generated while creating snapshot](https://discuss.elastic.co/t/repository-error-is-generated-while-creating-snapshot/186209)

<div class="topic-metadata">

**Author:** [@Vineeth\_Ananthula1](https://discuss.elastic.co/u/Vineeth_Ananthula1)\
**Replies:** 3\
**Last updated:** [June 18, 2019, 9:45am UTC](https://discuss.elastic.co/t/repository-error-is-generated-while-creating-snapshot/186209 "2019-06-18T09:45:43Z")

</div>

I have configured path.repo = \["/tata"\] in elasticsearch.yml of both master and child node. My snapshot query looks like this. PUT /\_snapshot/my\_backup { "type": "fs", "settings": { "location": "/tata" } } Bu…

---

## [Bash script for reindex](https://discuss.elastic.co/t/bash-script-for-reindex/185849)

<div class="topic-metadata">

**Author:** [@test\_qweqwe](https://discuss.elastic.co/u/test_qweqwe)\
**Replies:** 1\
**Last updated:** [June 17, 2019, 12:28pm UTC](https://discuss.elastic.co/t/bash-script-for-reindex/185849 "2019-06-17T12:28:27Z")

</div>

Hi I never had a deal with scripting and API. I have one ELK on-demand instance and for example there are 10 clients and all indices have format aka "logstash-2019.01.01-000001". How to build script that will reindex…

---

## [Connect Elasticsearch in AWS with Cognito autnetication enabled](https://discuss.elastic.co/t/connect-elasticsearch-in-aws-with-cognito-autnetication-enabled/183146)

<div class="topic-metadata">

**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\
**Replies:** 4\
**Last updated:** [June 18, 2019, 9:44am UTC](https://discuss.elastic.co/t/connect-elasticsearch-in-aws-with-cognito-autnetication-enabled/183146 "2019-06-18T09:44:01Z")

</div>

Hi everyone, I just testing elasticsearch service on AWS. In my environment, i enabled Cognito authentication for kibana. Now i want access ES via http call (because i need excute some query from outsite to ES by http…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1258)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1260)
