# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1310 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1311 --- ## [Find matching word in text file using elk](https://discuss.elastic.co/t/find-matching-word-in-text-file-using-elk/179162)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 13\ **Last updated:** [May 6, 2019, 2:21pm UTC](https://discuss.elastic.co/t/find-matching-word-in-text-file-using-elk/179162 "2019-05-06T14:21:31Z")
hi, can anyone help me, i want to find all sentneces containing a word in log or txt file using ELK, any examples plz --- ## [Can't access 9300 port](https://discuss.elastic.co/t/cant-access-9300-port/179281)
**Author:** [@yyfdayin](https://discuss.elastic.co/u/yyfdayin)\ **Replies:** 14\ **Last updated:** [May 6, 2019, 1:39pm UTC](https://discuss.elastic.co/t/cant-access-9300-port/179281 "2019-05-06T13:39:05Z")
I got two problems here. My CentOS version: 3.10.0-957.12.1.el7.x86\_64. I can't use 6.x and 7.0.0 elasticsearch on my system, but 5.x is OK! as you can see, here is something different between. ES02 will stop itself… --- ## [Elasticsearch.spark.sql queries return null](https://discuss.elastic.co/t/elasticsearch-spark-sql-queries-return-null/179777)
**Author:** [@niloo-sh](https://discuss.elastic.co/u/niloo-sh)\ **Replies:** 0\ **Last updated:** [May 6, 2019, 1:09pm UTC](https://discuss.elastic.co/t/elasticsearch-spark-sql-queries-return-null/179777 "2019-05-06T13:09:50Z")
I connect to remote elastic search. when I load my index data metadata column has information but all of other fields that are in "doc" column are null. spark 2.4.0 elasticsearch-hadoop-7.0.1.jar output: schema: roo… --- ## [Error: mapper\_parsing\_exception](https://discuss.elastic.co/t/error-mapper-parsing-exception/179763)
**Author:** [@fim](https://discuss.elastic.co/u/fim)\ **Replies:** 1\ **Last updated:** [May 6, 2019, 12:36pm UTC](https://discuss.elastic.co/t/error-mapper-parsing-exception/179763 "2019-05-06T12:36:05Z")
I try to create a new template with the following mapping in ES7. So far it worked in ES6.7 but do not find what's wrong. PUT \_template/connect { "index\_patterns": \[ "connect" \], "settings": { "index": { … --- ## [Match\_phrase not giving expected output](https://discuss.elastic.co/t/match-phrase-not-giving-expected-output/179560)
**Author:** [@sanjaykirushnan](https://discuss.elastic.co/u/sanjaykirushnan)\ **Replies:** 3\ **Last updated:** [May 6, 2019, 12:22pm UTC](https://discuss.elastic.co/t/match-phrase-not-giving-expected-output/179560 "2019-05-06T12:22:12Z")
This is my sample json in elastic search { "\_index": "logstash-dds-2019.05.03", "\_type": "dds\_next", "\_id": "AWp-Y\_-uIGa9uJGBjmoM", "\_version": 1, "\_score": null, "\_source": { "runDateTime": "2019-05-03… --- ## [How my logs are stored in elasticsearch UTC or IST](https://discuss.elastic.co/t/how-my-logs-are-stored-in-elasticsearch-utc-or-ist/177292)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 4\ **Last updated:** [May 6, 2019, 12:21pm UTC](https://discuss.elastic.co/t/how-my-logs-are-stored-in-elasticsearch-utc-or-ist/177292 "2019-05-06T12:21:10Z")
I want to know how my logs are stored in elasticsearch IST or UTC Regards --- ## [Will a field with nested type holding array of single object be indexed as separate document by ES](https://discuss.elastic.co/t/will-a-field-with-nested-type-holding-array-of-single-object-be-indexed-as-separate-document-by-es/179760)
**Author:** [@Ram\_Prasath](https://discuss.elastic.co/u/Ram_Prasath)\ **Replies:** 1\ **Last updated:** [May 6, 2019, 12:01pm UTC](https://discuss.elastic.co/t/will-a-field-with-nested-type-holding-array-of-single-object-be-indexed-as-separate-document-by-es/179760 "2019-05-06T12:01:30Z")
The field with nested type will be indexed be indexed as a separate document and creates a relationship with the parent document internally. My question is that if the nested filed has a array of single object instead o… --- ## [Where to add additional watcher scripts?](https://discuss.elastic.co/t/where-to-add-additional-watcher-scripts/179539)
**Author:** [@6tUBp3gwd9Zp](https://discuss.elastic.co/u/6tUBp3gwd9Zp)\ **Replies:** 3\ **Last updated:** [May 6, 2019, 11:31am UTC](https://discuss.elastic.co/t/where-to-add-additional-watcher-scripts/179539 "2019-05-06T11:31:11Z")
These sample watchers from here have additional scripts for the condition and transform. How do I add these to Kibana when creating a new advanced watcher? --- ## [Curator Rollover index - mapping changed for new index](https://discuss.elastic.co/t/curator-rollover-index-mapping-changed-for-new-index/179739)
**Author:** [@Jayabal\_K](https://discuss.elastic.co/u/Jayabal_K)\ **Replies:** 1\ **Last updated:** [May 6, 2019, 11:27am UTC](https://discuss.elastic.co/t/curator-rollover-index-mapping-changed-for-new-index/179739 "2019-05-06T11:27:33Z")
I have one index with some static mapping ,When rollover the index based on max age (1 day), new index mapping changes to dynamic mapping. The old index mapping and new index mapping doesn't sync. The goal is to have s… --- ## [Gmail watcher , exception during elastic search](https://discuss.elastic.co/t/gmail-watcher-exception-during-elastic-search/179730)
**Author:** [@aksadvance](https://discuss.elastic.co/u/aksadvance)\ **Replies:** 4\ **Last updated:** [May 6, 2019, 10:09am UTC](https://discuss.elastic.co/t/gmail-watcher-exception-during-elastic-search/179730 "2019-05-06T10:09:03Z")
Hi, I am trying to setup watcher on index and send notification on my gmail account. Done below settings in elasticsearch.yml , indentation is correct. xpack.notification.email.account: gmail\_account: profile: gmail … --- ## [Nested documents performance anomaly](https://discuss.elastic.co/t/nested-documents-performance-anomaly/176774)
**Author:** [@roiwexler](https://discuss.elastic.co/u/roiwexler)\ **Replies:** 5\ **Last updated:** [May 6, 2019, 10:05am UTC](https://discuss.elastic.co/t/nested-documents-performance-anomaly/176774 "2019-05-06T10:05:30Z")
Hi, we're at the process of testing Es vs Solr for its indexing speed which is very impotent to our application. we've witnessed strange behavior that we wish to understand before using it. when we indexed 1M docs it … --- ## [Charts to represent information extraxted from pdf and images with fscrawler, elasticsearch and kibana](https://discuss.elastic.co/t/charts-to-represent-information-extraxted-from-pdf-and-images-with-fscrawler-elasticsearch-and-kibana/179521)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 3\ **Last updated:** [May 6, 2019, 10:03am UTC](https://discuss.elastic.co/t/charts-to-represent-information-extraxted-from-pdf-and-images-with-fscrawler-elasticsearch-and-kibana/179521 "2019-05-06T10:03:22Z")
I implemented fscrawler, Tesseract with kibana, and elastic search for pdf, and it is possible to know if it is possible to some statistics in graphical charts (example: to know the occurrence of word in each pdf or imag… --- ## [Recommendation for Elastic Search sizing for 45,000 Events per second](https://discuss.elastic.co/t/recommendation-for-elastic-search-sizing-for-45-000-events-per-second/179181)
**Author:** [@oany\_81](https://discuss.elastic.co/u/oany_81)\ **Replies:** 5\ **Last updated:** [May 6, 2019, 9:29am UTC](https://discuss.elastic.co/t/recommendation-for-elastic-search-sizing-for-45-000-events-per-second/179181 "2019-05-06T09:29:56Z")
Hi techies, What would be recommended infrastructure for Elastic Search for a workload of 45,000 events per second? What would be the recommended compute requirements? How many clusters I should have with bare minim… --- ## [Access Field in Ingest-Pipeline](https://discuss.elastic.co/t/access-field-in-ingest-pipeline/179367)
**Author:** [@nimda](https://discuss.elastic.co/u/nimda)\ **Replies:** 5\ **Last updated:** [May 6, 2019, 8:43am UTC](https://discuss.elastic.co/t/access-field-in-ingest-pipeline/179367 "2019-05-06T08:43:34Z")
Hello Everyone, I'm currently trying out Ingest-Pipelines, but I'm stuck because of some "field access" issues. My Pipeline is the following. POST \_ingest/pipeline/\_simulate { "pipeline" : { "description" : "pipeli… --- ## [HTTP logs for calls coming to elasticsearch](https://discuss.elastic.co/t/http-logs-for-calls-coming-to-elasticsearch/179706)
**Author:** [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\ **Replies:** 3\ **Last updated:** [May 6, 2019, 8:27am UTC](https://discuss.elastic.co/t/http-logs-for-calls-coming-to-elasticsearch/179706 "2019-05-06T08:27:01Z")
Is there any way to find the calls (http call logs) which are coming to elasticsearch? We recently migrated our data from one cluster to another. However we still see search rate in our kibana (monitoring graph). We wan… --- ## ["Cooldown" for watches](https://discuss.elastic.co/t/cooldown-for-watches/178937)
**Author:** [@6tUBp3gwd9Zp](https://discuss.elastic.co/u/6tUBp3gwd9Zp)\ **Replies:** 5\ **Last updated:** [May 3, 2019, 3:13pm UTC](https://discuss.elastic.co/t/cooldown-for-watches/178937 "2019-05-03T15:13:22Z")
Is it possible to set some type of "cooldown" for the watches? Because if the interval is increased the reaction time would go up. So for example i want to watch a value and check if it was below a certain threshold for … --- ## [Is there some way to reindex all documents of an index?](https://discuss.elastic.co/t/is-there-some-way-to-reindex-all-documents-of-an-index/179674)
**Author:** [@EFJunior](https://discuss.elastic.co/u/EFJunior)\ **Replies:** 1\ **Last updated:** [May 6, 2019, 8:15am UTC](https://discuss.elastic.co/t/is-there-some-way-to-reindex-all-documents-of-an-index/179674 "2019-05-06T08:15:42Z")
I was having issues about handling multi word synonyms and the solution i've found was contracting the synonym to a "canonical form" at index time like explained here. But when i add a new synonym to the list, all docum… --- ## [Advanced JSON Input Script doesnt work](https://discuss.elastic.co/t/advanced-json-input-script-doesnt-work/179534)
**Author:** [@6tUBp3gwd9Zp](https://discuss.elastic.co/u/6tUBp3gwd9Zp)\ **Replies:** 1\ **Last updated:** [May 6, 2019, 8:14am UTC](https://discuss.elastic.co/t/advanced-json-input-script-doesnt-work/179534 "2019-05-06T08:14:07Z")
When I try to run this script it tells me 5 shards of 240 failed. { "script": { "inline": "float u\_x = Math.abs(doc\['x'\].value-doc\['x'\].value)-doc\['x'\].value;float u\_y = Math.abs(doc\['y'\].value-doc\['y'\].value)-doc\['y'… --- ## [I am trying to write a query for the below input(array of objects)](https://discuss.elastic.co/t/i-am-trying-to-write-a-query-for-the-below-input-array-of-objects/179459)
**Author:** [@vnrj1995](https://discuss.elastic.co/u/vnrj1995)\ **Replies:** 1\ **Last updated:** [May 6, 2019, 8:09am UTC](https://discuss.elastic.co/t/i-am-trying-to-write-a-query-for-the-below-input-array-of-objects/179459 "2019-05-06T08:09:08Z")
I am trying to write a query for the below input(array of objects). "UserDetails": \[ { "Name" : "Vanaraj", "Age" : "27", "country" : "India" }, { "Name" : "Ranjit", "Age" : … --- ## [Assistance with ELK](https://discuss.elastic.co/t/assistance-with-elk/179297)
**Author:** [@Eva](https://discuss.elastic.co/u/Eva)\ **Replies:** 13\ **Last updated:** [May 6, 2019, 8:06am UTC](https://discuss.elastic.co/t/assistance-with-elk/179297 "2019-05-06T08:06:35Z")
Hello I have been using ELK for quite some time now and currently facing issues with memory utilization and timeouts on Kibana when running long search queries. My elk is a single node cluster and running htop i see lot… --- ## [How to Create a Field (Location)](https://discuss.elastic.co/t/how-to-create-a-field-location/179352)
**Author:** [@sergiovallejr](https://discuss.elastic.co/u/sergiovallejr)\ **Replies:** 1\ **Last updated:** [May 6, 2019, 8:00am UTC](https://discuss.elastic.co/t/how-to-create-a-field-location/179352 "2019-05-06T08:00:04Z")
Hello good Morning. I have a problem. After reading the documentation numerous times and I'm about to give up. I'm trying to add the field of type geo\_point. In the documentations that I saw here in the forum, they a… --- ## [Slack watcher settings - v7.0. keystore requirements](https://discuss.elastic.co/t/slack-watcher-settings-v7-0-keystore-requirements/177256)
**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\ **Replies:** 4\ **Last updated:** [May 6, 2019, 7:57am UTC](https://discuss.elastic.co/t/slack-watcher-settings-v7-0-keystore-requirements/177256 "2019-05-06T07:57:42Z")
Hi, We have an Elastic Cloud hosted version of ELK. I am trying to follow these instructions - to setup my Slack watcher settings in the keystore - in order to upgrade to v7: https://www.elastic.co/guide/en/elasticsea… --- ## [Email setup not working in elasticsearch.yml](https://discuss.elastic.co/t/email-setup-not-working-in-elasticsearch-yml/178601)
**Author:** [@MiddlewareTeam](https://discuss.elastic.co/u/MiddlewareTeam)\ **Replies:** 8\ **Last updated:** [May 6, 2019, 7:52am UTC](https://discuss.elastic.co/t/email-setup-not-working-in-elasticsearch-yml/178601 "2019-05-06T07:52:27Z")
Below is the snippet of my elasticsearch.yml related to email setup for alert triggerring. #file xpack.notification.email.account: exchange\_account: profile: outlook smtp: auth: true starttls.enable: true host: h… --- ## [/\_cat/thread\_pool not showing threadpool stats from all nodes](https://discuss.elastic.co/t/cat-thread-pool-not-showing-threadpool-stats-from-all-nodes/179711)
**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\ **Replies:** 2\ **Last updated:** [May 6, 2019, 7:30am UTC](https://discuss.elastic.co/t/cat-thread-pool-not-showing-threadpool-stats-from-all-nodes/179711 "2019-05-06T07:30:37Z")
We have ES cluster with 3 nodes. All 3 nodes acts as master and data nodes. In /\_cat/nodes I see them tagged as "mdi". ES version is 6.6.1. If i try getting threadpool status using :9200/\_cat/thread\_pool, It actually li… --- ## [Why Elasticsearch doesn't serialize LocalDate?](https://discuss.elastic.co/t/why-elasticsearch-doesnt-serialize-localdate/179714)
**Author:** [@tworogue](https://discuss.elastic.co/u/tworogue)\ **Replies:** 1\ **Last updated:** [May 6, 2019, 7:24am UTC](https://discuss.elastic.co/t/why-elasticsearch-doesnt-serialize-localdate/179714 "2019-05-06T07:24:20Z")
Hello, I'd like to pass my LocalDate as parameter to methods in QueryBuilder. For example, to QueryBuilders#matchQuery. But if I do so, I face following exception: 09:52:59.757 \[pool-4-thread-1\] ERROR o.n.i.g.sear… --- ## [Elasticsearch 7.0, unknown setting \[index.mapping.single\_type\]](https://discuss.elastic.co/t/elasticsearch-7-0-unknown-setting-index-mapping-single-type/179699)
**Author:** [@Lin\_Zhu](https://discuss.elastic.co/u/Lin_Zhu)\ **Replies:** 2\ **Last updated:** [May 6, 2019, 5:17am UTC](https://discuss.elastic.co/t/elasticsearch-7-0-unknown-setting-index-mapping-single-type/179699 "2019-05-06T05:17:18Z")
I installed ES 7.0 recently, but I find that it's different from old versions. I tried official tutorials, but failed, I don't know why. This is official tutorial link: https://www.elastic.co/guide/en/elasticsearch/ref… --- ## [How can we visulize fscrawler index in kibana without using dev tool console](https://discuss.elastic.co/t/how-can-we-visulize-fscrawler-index-in-kibana-without-using-dev-tool-console/179545)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 3\ **Last updated:** [May 6, 2019, 5:17am UTC](https://discuss.elastic.co/t/how-can-we-visulize-fscrawler-index-in-kibana-without-using-dev-tool-console/179545 "2019-05-06T05:17:01Z")
hi dears, i crated index in fscrawler (i indexed pdf and images files in fscrawler in /tmp/es directory) but i want to visualize the idexed file content in kibana (like what we use in logstash) without using using kibana… --- ## [Few queries pertaining to elasticsearch cluster](https://discuss.elastic.co/t/few-queries-pertaining-to-elasticsearch-cluster/176321)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 6\ **Last updated:** [May 6, 2019, 3:29am UTC](https://discuss.elastic.co/t/few-queries-pertaining-to-elasticsearch-cluster/176321 "2019-05-06T03:29:09Z")
Hi Team, I am trying to build my first cluster on elasticsearch and I do have few queries regarding the same. My retention period will be around 6-8 months I am thinking of 2 elastic nodes So in a cluster, per my und… --- ## [About writing elasticsearch subquery DSL](https://discuss.elastic.co/t/about-writing-elasticsearch-subquery-dsl/178926)
**Author:** [@ivanli1990](https://discuss.elastic.co/u/ivanli1990)\ **Replies:** 4\ **Last updated:** [May 6, 2019, 2:35am UTC](https://discuss.elastic.co/t/about-writing-elasticsearch-subquery-dsl/178926 "2019-05-06T02:35:52Z")
I having a template mappings like this: { "template": "ones\_bug-\*", "settings": { "index": { "number\_of\_shards": "5", "number\_of\_replicas": "1" } }, "mappings": { "bug\_info": { "\_al… --- ## [Elasticsearch documentation - single pdf](https://discuss.elastic.co/t/elasticsearch-documentation-single-pdf/179691)
**Author:** [@sl1729](https://discuss.elastic.co/u/sl1729)\ **Replies:** 0\ **Last updated:** [May 6, 2019, 2:22am UTC](https://discuss.elastic.co/t/elasticsearch-documentation-single-pdf/179691 "2019-05-06T02:22:30Z")
Hi Team, Is there any way I can download the elasticsearch documentation as a PDF. As I would like to load it in my Kindle. Thanks [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1309) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1311)