# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1289

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1290

---

## [Elastic geo\_point](https://discuss.elastic.co/t/elastic-geo-point/182519)

<div class="topic-metadata">

**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\
**Replies:** 1\
**Last updated:** [May 23, 2019, 9:38pm UTC](https://discuss.elastic.co/t/elastic-geo-point/182519 "2019-05-23T21:38:57Z")

</div>

Hope its not a repeat :slight\_smile: so here is my setup. filebeat out put to logstash (Apache access logs . due to some reasons we don't want to use Apache module ) . As elastic 7 has geoip plugin embeded all im doing …

---

## [Cannot connect to localhost:9200](https://discuss.elastic.co/t/cannot-connect-to-localhost-9200/181974)

<div class="topic-metadata">

**Author:** [@kingram](https://discuss.elastic.co/u/kingram)\
**Replies:** 8\
**Last updated:** [May 23, 2019, 8:24pm UTC](https://discuss.elastic.co/t/cannot-connect-to-localhost-9200/181974 "2019-05-23T20:24:42Z")

</div>

Installation: Raspberry Pi 3+ Raspbian GNU/Linux 9 (stretch)" ===================== Installation ===$ sudo apt-get install elasticsearch Reading package lists... Done Building dependency tree Reading state informat…

---

## [Can I change the query logic, or boosting based on what is in the query?](https://discuss.elastic.co/t/can-i-change-the-query-logic-or-boosting-based-on-what-is-in-the-query/182513)

<div class="topic-metadata">

**Author:** [@mkural](https://discuss.elastic.co/u/mkural)\
**Replies:** 0\
**Last updated:** [May 23, 2019, 8:08pm UTC](https://discuss.elastic.co/t/can-i-change-the-query-logic-or-boosting-based-on-what-is-in-the-query/182513 "2019-05-23T20:08:35Z")

</div>

I am looking for ways to make the specific query issued against the index, determining the boosting distribution across fields, perhaps, or excluding certain indices, or switching between unanalyzed keyword match vs anal…

---

## [How to send data post data to jobs api elasticsearch](https://discuss.elastic.co/t/how-to-send-data-post-data-to-jobs-api-elasticsearch/181893)

<div class="topic-metadata">

**Author:** [@Ryan\_Boch](https://discuss.elastic.co/u/Ryan_Boch)\
**Replies:** 4\
**Last updated:** [May 23, 2019, 6:30pm UTC](https://discuss.elastic.co/t/how-to-send-data-post-data-to-jobs-api-elasticsearch/181893 "2019-05-23T18:30:03Z")

</div>

I cannot figure out how to send json data via python for posting data to jobs. The documentation is not clear on the format the json file needs to be in. I've tried many different options, but I continue getting differen…

---

## [Unable to create users and roles](https://discuss.elastic.co/t/unable-to-create-users-and-roles/181911)

<div class="topic-metadata">

**Author:** [@Dhrumil](https://discuss.elastic.co/u/Dhrumil)\
**Replies:** 11\
**Last updated:** [May 23, 2019, 6:23pm UTC](https://discuss.elastic.co/t/unable-to-create-users-and-roles/181911 "2019-05-23T18:23:54Z")

</div>

Hi here, I am trying to create users and roles in my elastic cluster. But, every time I run the REST API, I get this error { "error": { "root\_cause": \[ { "type": "security\_exception", "reason": "current license i…

---

## [How to map 2 level object field in elastic search?](https://discuss.elastic.co/t/how-to-map-2-level-object-field-in-elastic-search/182501)

<div class="topic-metadata">

**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\
**Replies:** 0\
**Last updated:** [May 23, 2019, 6:17pm UTC](https://discuss.elastic.co/t/how-to-map-2-level-object-field-in-elastic-search/182501 "2019-05-23T18:17:38Z")

</div>

I have to index the below document in elastic search and need suggestion for the mapping template. { "system": { "filler2": "", "INIT\_LOOKUP\_TM": "2019-05-21T14:34:49.648Z" }, "pmx": { "coeKey": { "a": "ISG"…

---

## [Index Rollup delay effect](https://discuss.elastic.co/t/index-rollup-delay-effect/180383)

<div class="topic-metadata">

**Author:** [@mcguacon](https://discuss.elastic.co/u/mcguacon)\
**Replies:** 9\
**Last updated:** [May 23, 2019, 5:45pm UTC](https://discuss.elastic.co/t/index-rollup-delay-effect/180383 "2019-05-23T17:45:33Z")

</div>

I previously experimented with a rollup job that ran every 30 minutes, with an interval of 1 hour, and a delay of 12 hours. I wanted to experiment with rolling up older data. I have a new job that runs every 30 minutes…

---

## [Is jvm.options file ignored if ES\_JAVA\_OPTS is set?](https://discuss.elastic.co/t/is-jvm-options-file-ignored-if-es-java-opts-is-set/181069)

<div class="topic-metadata">

**Author:** [@riches](https://discuss.elastic.co/u/riches)\
**Replies:** 1\
**Last updated:** [May 23, 2019, 5:12pm UTC](https://discuss.elastic.co/t/is-jvm-options-file-ignored-if-es-java-opts-is-set/181069 "2019-05-23T17:12:45Z")

</div>

"supporting setting JVM options via the jvm.options file or the environment variable ES\_JAVA\_OPTS" Does elasticsearch merge settings from both sources? We set java options in jvm.options and JAVA\_OPTS. When I ru…

---

## [Take account of repeat words (duplicate words)](https://discuss.elastic.co/t/take-account-of-repeat-words-duplicate-words/182492)

<div class="topic-metadata">

**Author:** [@grefon](https://discuss.elastic.co/u/grefon)\
**Replies:** 0\
**Last updated:** [May 23, 2019, 5:07pm UTC](https://discuss.elastic.co/t/take-account-of-repeat-words-duplicate-words/182492 "2019-05-23T17:07:42Z")

</div>

Tell me, how can uchitvat number of occurrences of the term in the search? Index { "mappings": { "properties": { "text": { "type": "text", "analyzer": "my\_analyzer" } } }, "sett…

---

## [Change match score mode from "sum of" to "max"](https://discuss.elastic.co/t/change-match-score-mode-from-sum-of-to-max/178949)

<div class="topic-metadata">

**Author:** [@grefon](https://discuss.elastic.co/u/grefon)\
**Replies:** 1\
**Last updated:** [May 23, 2019, 4:30pm UTC](https://discuss.elastic.co/t/change-match-score-mode-from-sum-of-to-max/178949 "2019-05-23T16:30:36Z")

</div>

Hello! Sorry for my English )) Tell me how I can change score mode from "sum of" to "max" on nGram field?? Due to the summation, the elasticsearch gives results that do not suit me. I need to get the maximum value, n…

---

## [Elasticsearch (6.8) is causing server load](https://discuss.elastic.co/t/elasticsearch-6-8-is-causing-server-load/182416)

<div class="topic-metadata">

**Author:** [@Marko\_Todoric](https://discuss.elastic.co/u/Marko_Todoric)\
**Replies:** 4\
**Last updated:** [May 23, 2019, 4:22pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-is-causing-server-load/182416 "2019-05-23T16:22:10Z")

</div>

Hello everyone, I'm having strange issue with elasticsearch. Basically it's causing high server load occasionally on one of three nodes in a cluster. I mean, considering the amount of CPUs (2 physical, 16 logical) it's …

---

## [Deployment Question](https://discuss.elastic.co/t/deployment-question/182328)

<div class="topic-metadata">

**Author:** [@Joe\_Kingston](https://discuss.elastic.co/u/Joe_Kingston)\
**Replies:** 3\
**Last updated:** [May 23, 2019, 4:14pm UTC](https://discuss.elastic.co/t/deployment-question/182328 "2019-05-23T16:14:53Z")

</div>

I have four servers each with 64 GB of RAM, 24 Cores, and 4TB SSD Storage. I have been reviewing videos about the best way to deploy Elasticsearch in a cluster environment. Should I create use three of the servers for t…

---

## [Elastic JDBC connectivity failing from Tableau,Dbeaver clients](https://discuss.elastic.co/t/elastic-jdbc-connectivity-failing-from-tableau-dbeaver-clients/180494)

<div class="topic-metadata">

**Author:** [@mukeshdantuluri](https://discuss.elastic.co/u/mukeshdantuluri)\
**Replies:** 3\
**Last updated:** [May 23, 2019, 4:11pm UTC](https://discuss.elastic.co/t/elastic-jdbc-connectivity-failing-from-tableau-dbeaver-clients/180494 "2019-05-23T16:11:47Z")

</div>

We are trying to connect elastic search from Dbeaver and Tableau , but unable to do the same . Below is the client we are using : https://www.elastic.co/downloads/jdbc-client We are facing issues while connecting . Be…

---

## [SAML configuration - Azure Active Directory](https://discuss.elastic.co/t/saml-configuration-azure-active-directory/182314)

<div class="topic-metadata">

**Author:** [@keenan.sequeira](https://discuss.elastic.co/u/keenan.sequeira)\
**Replies:** 3\
**Last updated:** [May 23, 2019, 3:18pm UTC](https://discuss.elastic.co/t/saml-configuration-azure-active-directory/182314 "2019-05-23T15:18:18Z")

</div>

Hey, I've followed the SAML config documentation and setup elasticsearch & kibana. However, I am encountering errors when attempting to use the SAML login (basic still works). Version info: v7.0.1 (elasticsearch and kib…

---

## [Count of items matched in array in elasticsearch aggregation](https://discuss.elastic.co/t/count-of-items-matched-in-array-in-elasticsearch-aggregation/182369)

<div class="topic-metadata">

**Author:** [@Sangeeth\_Kumar](https://discuss.elastic.co/u/Sangeeth_Kumar)\
**Replies:** 9\
**Last updated:** [May 23, 2019, 2:59pm UTC](https://discuss.elastic.co/t/count-of-items-matched-in-array-in-elasticsearch-aggregation/182369 "2019-05-23T14:59:12Z")

</div>

I need to get count of matched elements in array from elasticsearch. here is my data model { "ProcessInstance": \[ { "\_status": "InProgress", "AssignedTo": \[ …

---

## [Snapshot and Restore - Cluster](https://discuss.elastic.co/t/snapshot-and-restore-cluster/182267)

<div class="topic-metadata">

**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\
**Replies:** 16\
**Last updated:** [May 23, 2019, 2:46pm UTC](https://discuss.elastic.co/t/snapshot-and-restore-cluster/182267 "2019-05-23T14:46:51Z")

</div>

Is there a way we could do a snapshot of a cluster without restarting the cluster after config changes ? please let me know.

---

## [Help in index life cycle management](https://discuss.elastic.co/t/help-in-index-life-cycle-management/182197)

<div class="topic-metadata">

**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\
**Replies:** 4\
**Last updated:** [May 23, 2019, 2:43pm UTC](https://discuss.elastic.co/t/help-in-index-life-cycle-management/182197 "2019-05-23T14:43:37Z")

</div>

Is there anyway through which I can directly add ILM to my indices during creation???

---

## [Help on merging 2 indices in production](https://discuss.elastic.co/t/help-on-merging-2-indices-in-production/182356)

<div class="topic-metadata">

**Author:** [@vijaykriishna](https://discuss.elastic.co/u/vijaykriishna)\
**Replies:** 10\
**Last updated:** [May 23, 2019, 2:32pm UTC](https://discuss.elastic.co/t/help-on-merging-2-indices-in-production/182356 "2019-05-23T14:32:58Z")

</div>

Hi i have 2 indices being used by an app which is in production. Now, i need to merge these 2 indices so that there is minimal code change or activity to be done from my end. The activity should also not break the exist…

---

## [Best practice for aggs query](https://discuss.elastic.co/t/best-practice-for-aggs-query/182466)

<div class="topic-metadata">

**Author:** [@klaus82](https://discuss.elastic.co/u/klaus82)\
**Replies:** 0\
**Last updated:** [May 23, 2019, 2:26pm UTC](https://discuss.elastic.co/t/best-practice-for-aggs-query/182466 "2019-05-23T14:26:09Z")

</div>

In aggs query, if I want to have: "doc\_count\_error\_upper\_bound" : 0, "sum\_other\_doc\_count" : 0, or very small. Is a good practice to run before, the aggs query, another query to have the number of hits and the set th…

---

## [\[WARN \]\[o.e.c.r.a.DiskThresholdMonitor\] \[jSjxvbp\] flood stage disk watermark \[95%\] exceeded on](https://discuss.elastic.co/t/warn-o-e-c-r-a-diskthresholdmonitor-jsjxvbp-flood-stage-disk-watermark-95-exceeded-on/182373)

<div class="topic-metadata">

**Author:** [@idris](https://discuss.elastic.co/u/idris)\
**Replies:** 3\
**Last updated:** [May 23, 2019, 12:55pm UTC](https://discuss.elastic.co/t/warn-o-e-c-r-a-diskthresholdmonitor-jsjxvbp-flood-stage-disk-watermark-95-exceeded-on/182373 "2019-05-23T12:55:22Z")

</div>

i ve got a problem when i need to create an index for elasticsearch . Here is the error: {"error":{"root\_cause":\[{"type":"cluster\_block\_exception","reason":"blocked by: \[FORBIDDEN/12/index read-only / allow delete (ap…

---

## [Same Elasticsearch Query takes different time to give the response back](https://discuss.elastic.co/t/same-elasticsearch-query-takes-different-time-to-give-the-response-back/182462)

<div class="topic-metadata">

**Author:** [@ashit\_pupu](https://discuss.elastic.co/u/ashit_pupu)\
**Replies:** 0\
**Last updated:** [May 23, 2019, 2:05pm UTC](https://discuss.elastic.co/t/same-elasticsearch-query-takes-different-time-to-give-the-response-back/182462 "2019-05-23T14:05:08Z")

</div>

Hi I am using Elasticsearch for my project, where in it searches for result on the given indices. For the same query I can see that the time in which response is being returned to my service varies, minimal variation c…

---

## [Processor that converts integers to proper booleans](https://discuss.elastic.co/t/processor-that-converts-integers-to-proper-booleans/182456)

<div class="topic-metadata">

**Author:** [@Jensxy](https://discuss.elastic.co/u/Jensxy)\
**Replies:** 0\
**Last updated:** [May 23, 2019, 1:49pm UTC](https://discuss.elastic.co/t/processor-that-converts-integers-to-proper-booleans/182456 "2019-05-23T13:49:01Z")

</div>

Currently, I try to use reindex from remote to migrate indices from your old cluster to a new 7.1.0 cluster. However, ES 7.1 does not support booleans like 1 and 0 anymore so that the reindexing fails. My problem is simi…

---

## [Is there way to automatically call my application service from Elasticsearch when new document inserted in index?](https://discuss.elastic.co/t/is-there-way-to-automatically-call-my-application-service-from-elasticsearch-when-new-document-inserted-in-index/182439)

<div class="topic-metadata">

**Author:** [@nitin.jangid](https://discuss.elastic.co/u/nitin.jangid)\
**Replies:** 1\
**Last updated:** [May 23, 2019, 1:47pm UTC](https://discuss.elastic.co/t/is-there-way-to-automatically-call-my-application-service-from-elasticsearch-when-new-document-inserted-in-index/182439 "2019-05-23T13:47:09Z")

</div>

My use-case is that whenever new document inserted in elasticsearch index, elasticsearch should automatically inform/hit my application service that new document inserted.

---

## [Elasticsearch multilevel filter and update](https://discuss.elastic.co/t/elasticsearch-multilevel-filter-and-update/182447)

<div class="topic-metadata">

**Author:** [@User77](https://discuss.elastic.co/u/User77)\
**Replies:** 0\
**Last updated:** [May 23, 2019, 1:28pm UTC](https://discuss.elastic.co/t/elasticsearch-multilevel-filter-and-update/182447 "2019-05-23T13:28:35Z")

</div>

Elasticsearch : 6.3 I'm trying to update the nested field by filtering the particular Book. Below is the sample record. { "StoreName":"test", "StoreID":"12435", "BookInfo":\[ { "Name":"Book1", "Comments":\[ { "da…

---

## [Email is not been sent at the time when my portal is down , but it gets sent after a minute while using watcher elasticsearch](https://discuss.elastic.co/t/email-is-not-been-sent-at-the-time-when-my-portal-is-down-but-it-gets-sent-after-a-minute-while-using-watcher-elasticsearch/182409)

<div class="topic-metadata">

**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\
**Replies:** 4\
**Last updated:** [May 23, 2019, 1:09pm UTC](https://discuss.elastic.co/t/email-is-not-been-sent-at-the-time-when-my-portal-is-down-but-it-gets-sent-after-a-minute-while-using-watcher-elasticsearch/182409 "2019-05-23T13:09:32Z")

</div>

PUT \_xpack/watcher/watch/watchertry { "trigger" : { "schedule" : { "interval" : "1m" } }, "input" : { "search…

---

## [Any way of specifying a tag within a watch?](https://discuss.elastic.co/t/any-way-of-specifying-a-tag-within-a-watch/182101)

<div class="topic-metadata">

**Author:** [@drivera](https://discuss.elastic.co/u/drivera)\
**Replies:** 3\
**Last updated:** [May 23, 2019, 1:02pm UTC](https://discuss.elastic.co/t/any-way-of-specifying-a-tag-within-a-watch/182101 "2019-05-23T13:02:30Z")

</div>

ES 5.6 with x-pack I'm trying to extract a field that matches a specific tag in my watch. My watch looks like this: PUT \_xpack/watcher/watch/error\_logs { "trigger" : { "schedule" : { "interval" : "20s" } }, …

---

## [Curl: (7) Failed connect to localhost:9200;](https://discuss.elastic.co/t/curl-7-failed-connect-to-localhost-9200/182044)

<div class="topic-metadata">

**Author:** [@Light](https://discuss.elastic.co/u/Light)\
**Replies:** 12\
**Last updated:** [May 23, 2019, 12:58pm UTC](https://discuss.elastic.co/t/curl-7-failed-connect-to-localhost-9200/182044 "2019-05-23T12:58:52Z")

</div>

Hello, I'm new here, and not too skilled with programming/setting up tools on servers either. I'm trying to install ElasticSearch on my CentOS7 server. I followed the istructions from this website, exactly as they are …

---

## [Google-like search behaviors : wildcards, exact match](https://discuss.elastic.co/t/google-like-search-behaviors-wildcards-exact-match/182397)

<div class="topic-metadata">

**Author:** [@Keb](https://discuss.elastic.co/u/Keb)\
**Replies:** 1\
**Last updated:** [May 23, 2019, 12:52pm UTC](https://discuss.elastic.co/t/google-like-search-behaviors-wildcards-exact-match/182397 "2019-05-23T12:52:43Z")

</div>

Hello, I'm trying to add some well-known behaviors on my search engine, so users can use what they already know with Google search engine : double quotes for exact matchs, wildcards... From what I've seen, a query\_stri…

---

## [Docker network encryption vs security encryption?](https://discuss.elastic.co/t/docker-network-encryption-vs-security-encryption/182179)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [May 23, 2019, 12:49pm UTC](https://discuss.elastic.co/t/docker-network-encryption-vs-security-encryption/182179 "2019-05-23T12:49:53Z")

</div>

Hi, We will run elasticsearch, logstash, redis and kibana in a docker environment. I have been asked about encryption between all components because the log data is sensitive. For external filebeat communication I plac…

---

## [Elasticsearch in heroku](https://discuss.elastic.co/t/elasticsearch-in-heroku/182034)

<div class="topic-metadata">

**Author:** [@leobaiano](https://discuss.elastic.co/u/leobaiano)\
**Replies:** 2\
**Last updated:** [May 23, 2019, 12:19pm UTC](https://discuss.elastic.co/t/elasticsearch-in-heroku/182034 "2019-05-23T12:19:35Z")

</div>

I would like a help / example deploy elasticsearch in heroku. I have already seen that there are some add ons like Bonsai, however as far as I can see it does not allow modifying elasticsearch.yml and kibana.yml and I n…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1288)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1290)
