# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1327 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1328 --- ## [Using regular expression](https://discuss.elastic.co/t/using-regular-expression/177444)
**Author:** [@Ummugulsum\_Goktas](https://discuss.elastic.co/u/Ummugulsum_Goktas)\ **Replies:** 1\ **Last updated:** [April 18, 2019, 12:54pm UTC](https://discuss.elastic.co/t/using-regular-expression/177444 "2019-04-18T12:54:10Z")
I have a question regarding a query. I have a file named 'file121.docx', I am using the following query to search for the file: GET demoindex/\_search { "\_source": "documentName", "query": { "regexp": { "… --- ## [Data from an external source](https://discuss.elastic.co/t/data-from-an-external-source/177040)
**Author:** [@obones](https://discuss.elastic.co/u/obones)\ **Replies:** 7\ **Last updated:** [April 18, 2019, 10:01am UTC](https://discuss.elastic.co/t/data-from-an-external-source/177040 "2019-04-18T10:01:19Z")
Hello, I'm still in the early stages of discovering ElasticSearch so I'll surely make some bogus assertions or assumptions here, please do not hesitate to correct me. What I understand so far is that data is fed into E… --- ## [Split source-file into many indicies](https://discuss.elastic.co/t/split-source-file-into-many-indicies/176175)
**Author:** [@vmasarik](https://discuss.elastic.co/u/vmasarik)\ **Replies:** 6\ **Last updated:** [April 18, 2019, 12:34pm UTC](https://discuss.elastic.co/t/split-source-file-into-many-indicies/176175 "2019-04-18T12:34:10Z")
Hi, I have a case where I would like to split one huge source-file document into many (hundreds) indices. Could Rally help me? I might know why Rally would not support this, but I would be happy to be wrong. My dream s… --- ## [How delete\_by\_query works internally?](https://discuss.elastic.co/t/how-delete-by-query-works-internally/177460)
**Author:** [@sushama](https://discuss.elastic.co/u/sushama)\ **Replies:** 0\ **Last updated:** [April 18, 2019, 12:24pm UTC](https://discuss.elastic.co/t/how-delete-by-query-works-internally/177460 "2019-04-18T12:24:35Z")
Hi, I am using delete\_by\_query plugin to delete the documents based on date range criteria, ES version is 2.3. When I run the query using java API I get the response of type DeleteByQueryResponse holding some fields li… --- ## [Can't curl from host to elasticsearch docker](https://discuss.elastic.co/t/cant-curl-from-host-to-elasticsearch-docker/176775)
**Author:** [@Roberto\_Moravia](https://discuss.elastic.co/u/Roberto_Moravia)\ **Replies:** 6\ **Last updated:** [April 18, 2019, 12:22pm UTC](https://discuss.elastic.co/t/cant-curl-from-host-to-elasticsearch-docker/176775 "2019-04-18T12:22:42Z")
Hy, I'm trying to set up a "lab" dev environment with 3 Elasticsearch nodes and a Kibana in order to practice managing a cluster. However, even with a single node, I can't access the Elasticsearch node from the host ma… --- ## [Where is the exception in “json\_parse\_exception”?](https://discuss.elastic.co/t/where-is-the-exception-in-json-parse-exception/175845)
**Author:** [@ronyarmon](https://discuss.elastic.co/u/ronyarmon)\ **Replies:** 3\ **Last updated:** [April 18, 2019, 12:00pm UTC](https://discuss.elastic.co/t/where-is-the-exception-in-json-parse-exception/175845 "2019-04-18T12:00:37Z")
I'm using Kibana/ES 6.5 to index around 470 documents crawled from a Hebrew website with: POST /index\_name/\_doc/\_bulk I can post/get few individual documents but some probably carry some illegal characters as when I'm … --- ## [After putting index setting, cannot add document](https://discuss.elastic.co/t/after-putting-index-setting-cannot-add-document/177311)
**Author:** [@lemon\_soft](https://discuss.elastic.co/u/lemon_soft)\ **Replies:** 9\ **Last updated:** [April 18, 2019, 10:49am UTC](https://discuss.elastic.co/t/after-putting-index-setting-cannot-add-document/177311 "2019-04-18T10:49:46Z")
I failed to create my ElasticSearch index, again. Here are my steps: created index with name clef2018, number of shard=1, number of replicas=0 closed index put settings of clef2018 (website) put mappings of clef2018 (w… --- ## [Why is a trigram search on firstName so much faster than a trigram search on lastName?](https://discuss.elastic.co/t/why-is-a-trigram-search-on-firstname-so-much-faster-than-a-trigram-search-on-lastname/173910)
**Author:** [@mkoehler](https://discuss.elastic.co/u/mkoehler)\ **Replies:** 11\ **Last updated:** [April 18, 2019, 10:43am UTC](https://discuss.elastic.co/t/why-is-a-trigram-search-on-firstname-so-much-faster-than-a-trigram-search-on-lastname/173910 "2019-04-18T10:43:55Z")
We use ElasticSearch to index customer records (name + address) and in our queries we use trigram searches. When i profiled some of the queries i noticed something peculiar that i don't understand, and i was hoping to g… --- ## [Cloud can not send logs to elasticsearch](https://discuss.elastic.co/t/cloud-can-not-send-logs-to-elasticsearch/177442)
**Author:** [@Xu\_Zhao](https://discuss.elastic.co/u/Xu_Zhao)\ **Replies:** 0\ **Last updated:** [April 18, 2019, 10:23am UTC](https://discuss.elastic.co/t/cloud-can-not-send-logs-to-elasticsearch/177442 "2019-04-18T10:23:25Z")
I have a elasticesearch server installed. when I access curl 'http://192.168.3.1:9200/?pretty' { "name" : "Tom Foster", "cluster\_name" : "elasticsearch", "version" : { "number" : "2.1.0", "build\_hash" : "72cd1f1… --- ## [Set Default Filter in Kibana for latest id in DSL](https://discuss.elastic.co/t/set-default-filter-in-kibana-for-latest-id-in-dsl/177430)
**Author:** [@sakina](https://discuss.elastic.co/u/sakina)\ **Replies:** 0\ **Last updated:** [April 18, 2019, 9:41am UTC](https://discuss.elastic.co/t/set-default-filter-in-kibana-for-latest-id-in-dsl/177430 "2019-04-18T09:41:12Z")
I want the filter to be set on dashboard which will fetch only latest record So Used below query in DSL { "query": { "match\_all": {} }, "size": 1, "sort": \[ { "\_id": { "order": "desc" … --- ## ['x-pack' in documentation for 7.0 and ILM](https://discuss.elastic.co/t/x-pack-in-documentation-for-7-0-and-ilm/177413)
**Author:** [@pup\_seba](https://discuss.elastic.co/u/pup_seba)\ **Replies:** 1\ **Last updated:** [April 18, 2019, 9:24am UTC](https://discuss.elastic.co/t/x-pack-in-documentation-for-7-0-and-ilm/177413 "2019-04-18T09:24:18Z")
Hi, It is a little detail, but the on-line documentation for 7.0 still refers to the newly named "stack features" as "X-Pack", at least for the elasticsearch 7.0 part of the documentation. … --- ## [\_cat/nodeattrs - empty echo](https://discuss.elastic.co/t/cat-nodeattrs-empty-echo/177225)
**Author:** [@erde](https://discuss.elastic.co/u/erde)\ **Replies:** 3\ **Last updated:** [April 18, 2019, 8:00am UTC](https://discuss.elastic.co/t/cat-nodeattrs-empty-echo/177225 "2019-04-18T08:00:24Z")
Hello, ES: elasticsearch-5.5.2-1.noarch I need to assign node id to bash variable and I expected to get it this way: # curl -s -XGET 'http://ip:9200/\_cat/nodeattrs' # curl -s -XGET 'http://ip:9200/\_cat/nodeattrs?v&h=n… --- ## [Avoid split brain with new Elasticsearch 7.0 after discovery.zen.minimum\_master\_nodes removal](https://discuss.elastic.co/t/avoid-split-brain-with-new-elasticsearch-7-0-after-discovery-zen-minimum-master-nodes-removal/176877)
**Author:** [@Askia\_Mohamed\_Kadri](https://discuss.elastic.co/u/Askia_Mohamed_Kadri)\ **Replies:** 5\ **Last updated:** [April 18, 2019, 7:58am UTC](https://discuss.elastic.co/t/avoid-split-brain-with-new-elasticsearch-7-0-after-discovery-zen-minimum-master-nodes-removal/176877 "2019-04-18T07:58:46Z")
Hi everybody, In the current release of Elasticsearch, the dicovery.zen.minimum\_master\_nodes settings have been removed. I have a cluster of 5 nodes cross data center (yes I KNOW it's not a good idea but I don't really … --- ## [Enable Index Writer Info stream](https://discuss.elastic.co/t/enable-index-writer-info-stream/177411)
**Author:** [@dbakti7](https://discuss.elastic.co/u/dbakti7)\ **Replies:** 0\ **Last updated:** [April 18, 2019, 7:34am UTC](https://discuss.elastic.co/t/enable-index-writer-info-stream/177411 "2019-04-18T07:34:15Z")
How to enable IndexWriter Info stream? I found the following https://github.com/elastic/elasticsearch/issues/5891 but I can't find the documentation on how to enable this. --- ## [Elasticsearch performance when dynamic mapping vs strict/false](https://discuss.elastic.co/t/elasticsearch-performance-when-dynamic-mapping-vs-strict-false/177376)
**Author:** [@seperman](https://discuss.elastic.co/u/seperman)\ **Replies:** 2\ **Last updated:** [April 18, 2019, 5:24am UTC](https://discuss.elastic.co/t/elasticsearch-performance-when-dynamic-mapping-vs-strict-false/177376 "2019-04-18T05:24:14Z")
Hello, I couldn't find any material regarding benchmarking of Elasticsearch with dynamic mapping vs strict/false. Has anybody experienced performance issues when using dynamic mapping? From what I understand when dynam… --- ## [Can I use ip\_range in composite source?](https://discuss.elastic.co/t/can-i-use-ip-range-in-composite-source/177398)
**Author:** [@and2352000](https://discuss.elastic.co/u/and2352000)\ **Replies:** 0\ **Last updated:** [April 18, 2019, 3:36am UTC](https://discuss.elastic.co/t/can-i-use-ip-range-in-composite-source/177398 "2019-04-18T03:36:57Z")
As title and I there's the code & result downbelow , thanks Elastic version 6.7 Query { "\_source": \["timestamp"\], "size":0, "query": { "constant\_score": { "filter": { "bool":{ "must":\[ … --- ## [I mis-operation to update a piece of data, you can find the previous version of the data？](https://discuss.elastic.co/t/i-mis-operation-to-update-a-piece-of-data-you-can-find-the-previous-version-of-the-data/177391)
**Author:** [@somnro](https://discuss.elastic.co/u/somnro)\ **Replies:** 3\ **Last updated:** [April 18, 2019, 2:28am UTC](https://discuss.elastic.co/t/i-mis-operation-to-update-a-piece-of-data-you-can-find-the-previous-version-of-the-data/177391 "2019-04-18T02:28:28Z")
I mis-operate to update a piece of data, and then the data is not backed up, How can I find the data of the previous version? --- ## [Unable to send Data from Metricbeat to Elasticsearch over SSL getting error Failed to connect to backoff(elasticsearch(https://xxx.xx.xxx.xx:9202)): Get https://xxx.xx.xxx.xx:9202: Forbidden](https://discuss.elastic.co/t/unable-to-send-data-from-metricbeat-to-elasticsearch-over-ssl-getting-error-failed-to-connect-to-backoff-elasticsearch-https-xxx-xx-xxx-xx-9202-get-https-xxx-xx-xxx-xx-forbidden/177242)
**Author:** [@vsalunkhe](https://discuss.elastic.co/u/vsalunkhe)\ **Replies:** 1\ **Last updated:** [April 18, 2019, 1:34am UTC](https://discuss.elastic.co/t/unable-to-send-data-from-metricbeat-to-elasticsearch-over-ssl-getting-error-failed-to-connect-to-backoff-elasticsearch-https-xxx-xx-xxx-xx-9202-get-https-xxx-xx-xxx-xx-forbidden/177242 "2019-04-18T01:34:52Z")
Hi, I am unable to send the data from metricbeat to elasticsearch over SSL. My setup is: Elasticsearch 6.4.2 Metricbeat 6.6.1 I have done the following steps: Install Elasticsearch Create CA and Certificates … --- ## [ELK cluster？](https://discuss.elastic.co/t/elk-cluster/176836)
**Author:** [@aabababba](https://discuss.elastic.co/u/aabababba)\ **Replies:** 6\ **Last updated:** [April 18, 2019, 1:08am UTC](https://discuss.elastic.co/t/elk-cluster/176836 "2019-04-18T01:08:52Z")
Can be equipped with filebeat out to multiple logstash, logstash and then out to multiple elasticsearch? So logstash, elastic hanging one of them will not affect the cluster? --- ## [Watcher ignores metadata fields](https://discuss.elastic.co/t/watcher-ignores-metadata-fields/177243)
**Author:** [@agone](https://discuss.elastic.co/u/agone)\ **Replies:** 1\ **Last updated:** [April 18, 2019, 12:30am UTC](https://discuss.elastic.co/t/watcher-ignores-metadata-fields/177243 "2019-04-18T00:30:03Z")
Hi, I am trying to use some static data in my watch, but for some reason metadata fields are not being passed into watch configuration. This is what I get in watch log: { "watch\_id": "test", "node": "QR\_NojCGT3WwG… --- ## [Elasticseach 7 intervals query on nested documents](https://discuss.elastic.co/t/elasticseach-7-intervals-query-on-nested-documents/177380)
**Author:** [@glug](https://discuss.elastic.co/u/glug)\ **Replies:** 0\ **Last updated:** [April 17, 2019, 10:16pm UTC](https://discuss.elastic.co/t/elasticseach-7-intervals-query-on-nested-documents/177380 "2019-04-17T22:16:35Z")
Is it possible to query nested documents using the new intervals query from ES 7? That is, I want to write a query that will search terms of contained within nested documents? If so, can someone provide a simple example?… --- ## [Elasticsearch search is not working properly](https://discuss.elastic.co/t/elasticsearch-search-is-not-working-properly/177354)
**Author:** [@Jones\_Thomas](https://discuss.elastic.co/u/Jones_Thomas)\ **Replies:** 1\ **Last updated:** [April 17, 2019, 9:23pm UTC](https://discuss.elastic.co/t/elasticsearch-search-is-not-working-properly/177354 "2019-04-17T21:23:26Z")
Elasticsearch search is very slow and some times search is not working accurately in application. Elasticsearch version: 5.6.5 OS: CentOS, version: 7 HeapSize: 28Gb My cluster Health { "cluster\_name" : "app-prdx", … --- ## [Bug ? Elasticsearch 7 failing to parse custom date format](https://discuss.elastic.co/t/bug-elasticsearch-7-failing-to-parse-custom-date-format/177104)
**Author:** [@Vikas\_Mestry](https://discuss.elastic.co/u/Vikas_Mestry)\ **Replies:** 5\ **Last updated:** [April 17, 2019, 9:17pm UTC](https://discuss.elastic.co/t/bug-elasticsearch-7-failing-to-parse-custom-date-format/177104 "2019-04-17T21:17:47Z")
Hello, I am unable to create an index using the following date format using the latest version of elasticsearch PUT http://localhost:9200/demo HTTP/1.1 Accept: application/json Content-Type: application/json Content-Le… --- ## [Query Regarding Watcher on ES 6.7](https://discuss.elastic.co/t/query-regarding-watcher-on-es-6-7/176800)
**Author:** [@venusf1ytrap](https://discuss.elastic.co/u/venusf1ytrap)\ **Replies:** 3\ **Last updated:** [April 17, 2019, 9:15pm UTC](https://discuss.elastic.co/t/query-regarding-watcher-on-es-6-7/176800 "2019-04-17T21:15:48Z")
Hello All, I'm currently using ES 6.7 stack (Basic License) & i wanted to understand if i'd need a paid subscription of X-Pack to be able to use Watcher for alerting purposes ? Is watcher included as a part of Basic / O… --- ## [Host Elastic Search in IP address](https://discuss.elastic.co/t/host-elastic-search-in-ip-address/177014)
**Author:** [@sjabiulla](https://discuss.elastic.co/u/sjabiulla)\ **Replies:** 6\ **Last updated:** [April 17, 2019, 7:26pm UTC](https://discuss.elastic.co/t/host-elastic-search-in-ip-address/177014 "2019-04-17T19:26:04Z")
Hi, I have modified the below attribute in elasticsearch.yml so that I can access from other machine which is within network. network.host: \ But, I'm getting the below error. \[2019-04-16T13:04:30… --- ## [Snapshot and restore - Time](https://discuss.elastic.co/t/snapshot-and-restore-time/176780)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 2\ **Last updated:** [April 17, 2019, 6:42pm UTC](https://discuss.elastic.co/t/snapshot-and-restore-time/176780 "2019-04-17T18:42:34Z")
Just wondering how long would it take to take a snapshot of 1 TB cluster data and how much time to restore the same. Is there any data available in terms of how much time would it take ? --- ## [Error while loading shared libraries: libjli.so](https://discuss.elastic.co/t/error-while-loading-shared-libraries-libjli-so/177319)
**Author:** [@m\_tothe\_c](https://discuss.elastic.co/u/m_tothe_c)\ **Replies:** 1\ **Last updated:** [April 17, 2019, 6:40pm UTC](https://discuss.elastic.co/t/error-while-loading-shared-libraries-libjli-so/177319 "2019-04-17T18:40:10Z")
When I try to start an instance of Elasticsearch 7, I get this error. Some backstory, I am running on port 443 instead of 9200. Previous versions worked fine after running sudo setcap 'CAP\_NET\_BIND\_SERVICE=+eip' /usr/l… --- ## [ElasticSearch error - org.elasticsearch.action.search.SearchPhaseExecutionException: all shards failed](https://discuss.elastic.co/t/elasticsearch-error-org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed/177350)
**Author:** [@robp21751](https://discuss.elastic.co/u/robp21751)\ **Replies:** 1\ **Last updated:** [April 17, 2019, 6:03pm UTC](https://discuss.elastic.co/t/elasticsearch-error-org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed/177350 "2019-04-17T18:03:32Z")
I am not collecting any logs. The drive became 85% full which is what started this issue I believe. It is now at 60% I ran the following, which did not help curl -X PUT "localhost:9200/.kibana/\_settings" -H 'Content-Ty… --- ## [Fast way to find recent unique fields](https://discuss.elastic.co/t/fast-way-to-find-recent-unique-fields/177351)
**Author:** [@ivan.computer](https://discuss.elastic.co/u/ivan.computer)\ **Replies:** 0\ **Last updated:** [April 17, 2019, 6:03pm UTC](https://discuss.elastic.co/t/fast-way-to-find-recent-unique-fields/177351 "2019-04-17T18:03:18Z")
I'm using Jaeger for tracing with Elasticsearch 6.5.2 as the backend. Mapping looks like this: mapping{ "jaeger-span-2019-04-16" : { "mappings" : { "span" : { "\_all… --- ## [Nest Client - Searching nested properties](https://discuss.elastic.co/t/nest-client-searching-nested-properties/177345)
**Author:** [@bo.clifton](https://discuss.elastic.co/u/bo.clifton)\ **Replies:** 0\ **Last updated:** [April 17, 2019, 4:38pm UTC](https://discuss.elastic.co/t/nest-client-searching-nested-properties/177345 "2019-04-17T16:38:44Z")
I'm having a tough time finding information on how to search nested properties using the Nest client in C#. I have email objects in an index with approximately this shape: { subject: “This is a test”, content: “Th… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1326) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1328)