# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1350

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1351

---

## [Watcher advise in searching and filtering](https://discuss.elastic.co/t/watcher-advise-in-searching-and-filtering/174375)

<div class="topic-metadata">

**Author:** [@forestnd](https://discuss.elastic.co/u/forestnd)\
**Replies:** 0\
**Last updated:** [March 28, 2019, 3:09pm UTC](https://discuss.elastic.co/t/watcher-advise-in-searching-and-filtering/174375 "2019-03-28T15:09:36Z")

</div>

Hay all I am still basic, at watcher and would love some advise, The below sample i am working on in an trigger to check system load, what works but i want to add an part where it checks for an hostname name, if that m…

---

## [How to retry with high level rest client when there are intermittent issues like](https://discuss.elastic.co/t/how-to-retry-with-high-level-rest-client-when-there-are-intermittent-issues-like/174373)

<div class="topic-metadata">

**Author:** [@nikuland](https://discuss.elastic.co/u/nikuland)\
**Replies:** 0\
**Last updated:** [March 28, 2019, 3:07pm UTC](https://discuss.elastic.co/t/how-to-retry-with-high-level-rest-client-when-there-are-intermittent-issues-like/174373 "2019-03-28T15:07:02Z")

</div>

How to retry with high level rest client when there are intermittent issues like Connection reset by peer Listener timedout after 30000ms. This option is available in python is what i heard

---

## [Querying elastic search through REST API with dynamic inputs](https://discuss.elastic.co/t/querying-elastic-search-through-rest-api-with-dynamic-inputs/174372)

<div class="topic-metadata">

**Author:** [@maddysqlpro](https://discuss.elastic.co/u/maddysqlpro)\
**Replies:** 0\
**Last updated:** [March 28, 2019, 3:03pm UTC](https://discuss.elastic.co/t/querying-elastic-search-through-rest-api-with-dynamic-inputs/174372 "2019-03-28T15:03:17Z")

</div>

Hi, Please help with the below scenario. Scenario: The documents stored in ES will have keys "Key1" and "Key2". When from the application I send parameters for both Key1 and Key2 I need to do an "AND" condition and f…

---

## [Increase track data with for range statement,but meet java.lang.ClassCastException](https://discuss.elastic.co/t/increase-track-data-with-for-range-statement-but-meet-java-lang-classcastexception/173885)

<div class="topic-metadata">

**Author:** [@Kevins\_Si](https://discuss.elastic.co/u/Kevins_Si)\
**Replies:** 9\
**Last updated:** [March 28, 2019, 2:34pm UTC](https://discuss.elastic.co/t/increase-track-data-with-for-range-statement-but-meet-java-lang-classcastexception/173885 "2019-03-28T14:34:47Z")

</div>

when do increase data with exists data, add for range statements,meet Execption when run rally test. ClassCastException as follow: warn 2019-03-26T14:32:20.001Z path: /geonames, params: {index=geonames} java.lang.Class…

---

## [Storing of user-tags](https://discuss.elastic.co/t/storing-of-user-tags/173764)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [March 28, 2019, 1:43pm UTC](https://discuss.elastic.co/t/storing-of-user-tags/173764 "2019-03-28T13:43:22Z")

</div>

Hi, I start esrally with such commands: esrally --offline --track=geonames --target-hosts=es-server:9200 --pipeline=benchmark-only --user-tag="testrunName:bindmount\_3,cluster:bindmount,env:docker,ver:6.6.2,cpu:8,JMX:4G…

---

## [Error when trying to put ML into upgrade mode (6.5 to 6.7)](https://discuss.elastic.co/t/error-when-trying-to-put-ml-into-upgrade-mode-6-5-to-6-7/174277)

<div class="topic-metadata">

**Author:** [@John\_Swift](https://discuss.elastic.co/u/John_Swift)\
**Replies:** 1\
**Last updated:** [March 28, 2019, 1:07pm UTC](https://discuss.elastic.co/t/error-when-trying-to-put-ml-into-upgrade-mode-6-5-to-6-7/174277 "2019-03-28T13:07:45Z")

</div>

Following this doc to upgrade our 6.5 nodes to 6.7 https://www.elastic.co/guide/en/elasticsearch/reference/current/ml-set-upgrade-mode.html running POST http://xxxxxxx.xxxxx.com:9200/\_ml/set\_upgrade\_mode?enabled=true&t…

---

## [Regular Expression doesn't work](https://discuss.elastic.co/t/regular-expression-doesnt-work/172356)

<div class="topic-metadata">

**Author:** [@haythem\_Arfaoui](https://discuss.elastic.co/u/haythem_Arfaoui)\
**Replies:** 1\
**Last updated:** [March 28, 2019, 12:58pm UTC](https://discuss.elastic.co/t/regular-expression-doesnt-work/172356 "2019-03-28T12:58:42Z")

</div>

Hello everyone, I have a old regex query that doesn't work for me : \> C:\\\\Windows\\\\SYSTEM32\\\\ntdll\\.dll\\+\[a-zA-Z0-9\]{1,}\\|C:\\\\Windows\\\\system32\\\\KERNELBASE\\.dll\\+\[a-zA-Z0-9\]{1,}\\|UNKNOWN\\(\[a-zA-Z0-9\]{16}\\) and you can…

---

## [Data field pushed as "text" type in elastic](https://discuss.elastic.co/t/data-field-pushed-as-text-type-in-elastic/174336)

<div class="topic-metadata">

**Author:** [@Nik\_1106](https://discuss.elastic.co/u/Nik_1106)\
**Replies:** 0\
**Last updated:** [March 28, 2019, 12:51pm UTC](https://discuss.elastic.co/t/data-field-pushed-as-text-type-in-elastic/174336 "2019-03-28T12:51:03Z")

</div>

I am trying to push SNMP trap output field of logstash to elastic. It is pushing as "text" type. I understand that "string" type data will be pushed as "text". I want it to be as "keyword" type to do some analytics on t…

---

## [Not able to install Elasticsearch 6.7 - Windows 10](https://discuss.elastic.co/t/not-able-to-install-elasticsearch-6-7-windows-10/174181)

<div class="topic-metadata">

**Author:** [@elasticgirl](https://discuss.elastic.co/u/elasticgirl)\
**Replies:** 2\
**Last updated:** [March 28, 2019, 12:45pm UTC](https://discuss.elastic.co/t/not-able-to-install-elasticsearch-6-7-windows-10/174181 "2019-03-28T12:45:08Z")

</div>

New to Elasticsearch, want to try it out and configure it on my workstation Windows 10. Here is the value of JAVA\_HOME : C:\\Program Files (x86)\\Java\\jre1.8.0\_191 ... and here is java -version java version "1.8.0\_191" …

---

## [Is there a way to use dynamic indexing through “es.index.write = {index}/type” in writeStream method in spark sturtured streaming?](https://discuss.elastic.co/t/is-there-a-way-to-use-dynamic-indexing-through-es-index-write-index-type-in-writestream-method-in-spark-sturtured-streaming/174334)

<div class="topic-metadata">

**Author:** [@Fahad\_Khan](https://discuss.elastic.co/u/Fahad_Khan)\
**Replies:** 0\
**Last updated:** [March 28, 2019, 12:44pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-use-dynamic-indexing-through-es-index-write-index-type-in-writestream-method-in-spark-sturtured-streaming/174334 "2019-03-28T12:44:56Z")

</div>

I'm using spark structured streaming to read so many files recursively and writing them into elasticsearch, I want to know is there a way to create index at runtime according to the file name spark reading from folder. s…

---

## [Event-data-track](https://discuss.elastic.co/t/event-data-track/174157)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [March 28, 2019, 12:41pm UTC](https://discuss.elastic.co/t/event-data-track/174157 "2019-03-28T12:41:17Z")

</div>

Hi, the eventdata track on githup https://github.com/elastic/rally-eventdata-track has a lot of challenges. I am really interested in the following challenges : elasticlogs-querying combined-indexing-and-querying He…

---

## [How to determine which terms where matched in a query using the fuzziness parameter](https://discuss.elastic.co/t/how-to-determine-which-terms-where-matched-in-a-query-using-the-fuzziness-parameter/174318)

<div class="topic-metadata">

**Author:** [@SmashingQuasar](https://discuss.elastic.co/u/SmashingQuasar)\
**Replies:** 2\
**Last updated:** [March 28, 2019, 12:41pm UTC](https://discuss.elastic.co/t/how-to-determine-which-terms-where-matched-in-a-query-using-the-fuzziness-parameter/174318 "2019-03-28T12:41:08Z")

</div>

Hello! So I'm working on a search engine for a customer and I'm using the fuzziness parameter in my query. The query is as follows: { "from": 0, "size": 12, "query": { "bool": { "should…

---

## [Building Rest Api that use Elasticsearch](https://discuss.elastic.co/t/building-rest-api-that-use-elasticsearch/174328)

<div class="topic-metadata">

**Author:** [@med\_barka](https://discuss.elastic.co/u/med_barka)\
**Replies:** 0\
**Last updated:** [March 28, 2019, 12:20pm UTC](https://discuss.elastic.co/t/building-rest-api-that-use-elasticsearch/174328 "2019-03-28T12:20:23Z")

</div>

Hi guys, i have an elastic server running well containing all the data In my application, i don't want to expose elasticsearch directly . Instead, i have to create a REST api that use elasticsearch. Any suggestions of…

---

## [Java RestClient: Connection closed](https://discuss.elastic.co/t/java-restclient-connection-closed/174325)

<div class="topic-metadata">

**Author:** [@zoltan-toth-mw](https://discuss.elastic.co/u/zoltan-toth-mw)\
**Replies:** 0\
**Last updated:** [March 28, 2019, 12:02pm UTC](https://discuss.elastic.co/t/java-restclient-connection-closed/174325 "2019-03-28T12:02:22Z")

</div>

Hi There, I have a business logic that visits elasticsearch in every minute to query some data. After a while the client has connection issues, while the Elasticsearch v6.4 in AWS with 2 nodes are up and running withou…

---

## [Elasticsearch 6.3.0 doesn't retry on index replica bulk write failure](https://discuss.elastic.co/t/elasticsearch-6-3-0-doesnt-retry-on-index-replica-bulk-write-failure/174305)

<div class="topic-metadata">

**Author:** [@andrejbl](https://discuss.elastic.co/u/andrejbl)\
**Replies:** 1\
**Last updated:** [March 28, 2019, 11:13am UTC](https://discuss.elastic.co/t/elasticsearch-6-3-0-doesnt-retry-on-index-replica-bulk-write-failure/174305 "2019-03-28T11:13:28Z")

</div>

(original discussion on github - https://github.com/elastic/elasticsearch/issues/39259) We are running a number of large-scale Elasticsearch clusters (40+ nodes, TBs of data, ingestion and search rates in 100-1000s per …

---

## [6.7 docker crashes on ingest-geoip - expected database \[GeoLite2-ASN.mmdb\] to not exist in \[/usr/share/elasticsearch/config/ingest-geoip\]](https://discuss.elastic.co/t/6-7-docker-crashes-on-ingest-geoip-expected-database-geolite2-asn-mmdb-to-not-exist-in-usr-share-elasticsearch-config-ingest-geoip/174125)

<div class="topic-metadata">

**Author:** [@mortenb123](https://discuss.elastic.co/u/mortenb123)\
**Replies:** 4\
**Last updated:** [March 28, 2019, 10:53am UTC](https://discuss.elastic.co/t/6-7-docker-crashes-on-ingest-geoip-expected-database-geolite2-asn-mmdb-to-not-exist-in-usr-share-elasticsearch-config-ingest-geoip/174125 "2019-03-28T10:53:00Z")

</div>

I'm unable to get geoip-ingest to work with latest 6.7 elastic search container When I start: docker.elastic.co/elasticsearch/elasticsearch 6.7.0 02982be5777d 5 days ago 810MB \[2019-03-27T10:28:55,197\]\[INFO \]\[o.e.p.Pl…

---

## [Conversion of date field from string to date format](https://discuss.elastic.co/t/conversion-of-date-field-from-string-to-date-format/174282)

<div class="topic-metadata">

**Author:** [@Swati123](https://discuss.elastic.co/u/Swati123)\
**Replies:** 1\
**Last updated:** [March 28, 2019, 10:22am UTC](https://discuss.elastic.co/t/conversion-of-date-field-from-string-to-date-format/174282 "2019-03-28T10:22:55Z")

</div>

Hi All, I want to convert one date field which is of string to date type. I am trying the same with the convert processor available but it will throw error as "date format is not supported" and from the document as …

---

## [Conversion of ip field from string to ip datatype](https://discuss.elastic.co/t/conversion-of-ip-field-from-string-to-ip-datatype/174285)

<div class="topic-metadata">

**Author:** [@Swati123](https://discuss.elastic.co/u/Swati123)\
**Replies:** 0\
**Last updated:** [March 28, 2019, 9:30am UTC](https://discuss.elastic.co/t/conversion-of-ip-field-from-string-to-ip-datatype/174285 "2019-03-28T09:30:16Z")

</div>

Hi All, I want to convert one date field which is of string to ip type. I am trying the same with the convert processor available but it will throw error as "ipformat is not supported" and from the document as well I …

---

## [Elasticsearch 6.2 bulk indexations ends in Bad Gateway](https://discuss.elastic.co/t/elasticsearch-6-2-bulk-indexations-ends-in-bad-gateway/173774)

<div class="topic-metadata">

**Author:** [@SmashingQuasar](https://discuss.elastic.co/u/SmashingQuasar)\
**Replies:** 4\
**Last updated:** [March 28, 2019, 9:18am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-bulk-indexations-ends-in-bad-gateway/173774 "2019-03-28T09:18:50Z")

</div>

Hey! So I'm currently running a 6.2 instance of Elasticsearch on a docker container using the official image. (Our CTO did the configuration so I don't have all the info) I'm trying to bulk index documents but it alway…

---

## [ES process dies after some minutes of searching](https://discuss.elastic.co/t/es-process-dies-after-some-minutes-of-searching/172600)

<div class="topic-metadata">

**Author:** [@mayer](https://discuss.elastic.co/u/mayer)\
**Replies:** 1\
**Last updated:** [March 28, 2019, 9:16am UTC](https://discuss.elastic.co/t/es-process-dies-after-some-minutes-of-searching/172600 "2019-03-28T09:16:22Z")

</div>

Dear Community, I am not sure if I am right here with my question. Hopefully I am. My environment ELK stack ( elasticsearch, logstash and kibana ) all version 6.6.1 running on Debian 3.16.43-2+deb8u5 with java version …

---

## [How to update the templates](https://discuss.elastic.co/t/how-to-update-the-templates/174275)

<div class="topic-metadata">

**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\
**Replies:** 0\
**Last updated:** [March 28, 2019, 8:49am UTC](https://discuss.elastic.co/t/how-to-update-the-templates/174275 "2019-03-28T08:49:56Z")

</div>

Hi I am using 6.4 version of ES My scenario is, I have two templates for same mapping ex: temp1 and temp2 i want to get union of properties when i apply temp1 and then temp2. Currently temp2 is overriding temp1. Is th…

---

## [Mapping update timeout when doing shard recovering](https://discuss.elastic.co/t/mapping-update-timeout-when-doing-shard-recovering/174036)

<div class="topic-metadata">

**Author:** [@shjdwxy](https://discuss.elastic.co/u/shjdwxy)\
**Replies:** 3\
**Last updated:** [March 28, 2019, 8:45am UTC](https://discuss.elastic.co/t/mapping-update-timeout-when-doing-shard-recovering/174036 "2019-03-28T08:45:54Z")

</div>

hi, guys We use Elasticsearch as log management solution. In daily operation, we often encounter this problem: "mapping update timeout occurred when logs of shard were recovering, so index speed was reduced ". When t…

---

## [Can we index .zip file using ingest attachment plugin?](https://discuss.elastic.co/t/can-we-index-zip-file-using-ingest-attachment-plugin/172710)

<div class="topic-metadata">

**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\
**Replies:** 12\
**Last updated:** [March 28, 2019, 5:32am UTC](https://discuss.elastic.co/t/can-we-index-zip-file-using-ingest-attachment-plugin/172710 "2019-03-28T05:32:04Z")

</div>

Hi, As we can indexed .txt, .xlsx, .pptx , .pdf files using ingest attachment plugin. Can we indexed zip files using same plugin? I tried it but i don’t see attachment content is getting indexed. Can anyone help me wit…

---

## [Elasticsearch group data](https://discuss.elastic.co/t/elasticsearch-group-data/174040)

<div class="topic-metadata">

**Author:** [@Timotius\_Pamungkas](https://discuss.elastic.co/u/Timotius_Pamungkas)\
**Replies:** 3\
**Last updated:** [March 28, 2019, 8:06am UTC](https://discuss.elastic.co/t/elasticsearch-group-data/174040 "2019-03-28T08:06:00Z")

</div>

Hello, if I have data like this ID Username Role Email 1001 johndoe admin johndoe@mail.com 1001 jonathan.doe user johndoe@mail.com 1001 johnnydoe user johndoe@mail.com Can I do some kind of grouping? Not…

---

## [Add authentication to elasticsearch without xpack and reverse proxies](https://discuss.elastic.co/t/add-authentication-to-elasticsearch-without-xpack-and-reverse-proxies/174241)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 1\
**Last updated:** [March 28, 2019, 7:54am UTC](https://discuss.elastic.co/t/add-authentication-to-elasticsearch-without-xpack-and-reverse-proxies/174241 "2019-03-28T07:54:24Z")

</div>

Hi, I am looking for a way to add authentication to elasticsearch without xpack and reverse proxies, is there any way to do this. Do i need to look into any file in particular. Thanks

---

## [Can elasticsearch handle long text?](https://discuss.elastic.co/t/can-elasticsearch-handle-long-text/173991)

<div class="topic-metadata">

**Author:** [@flash](https://discuss.elastic.co/u/flash)\
**Replies:** 5\
**Last updated:** [March 28, 2019, 7:52am UTC](https://discuss.elastic.co/t/can-elasticsearch-handle-long-text/173991 "2019-03-28T07:52:03Z")

</div>

I am trying to use elasticsearch to do some document understanding. Here is the index settings DELETE index PUT index/\_doc/type\_name { "id": "id1" "name": "Lake Tahoe" "indexed\_at": "2019-03-01" } PUT index/\_do…

---

## [Elasticsearch for dev environment](https://discuss.elastic.co/t/elasticsearch-for-dev-environment/174257)

<div class="topic-metadata">

**Author:** [@Denis\_Shilov](https://discuss.elastic.co/u/Denis_Shilov)\
**Replies:** 0\
**Last updated:** [March 28, 2019, 7:46am UTC](https://discuss.elastic.co/t/elasticsearch-for-dev-environment/174257 "2019-03-28T07:46:23Z")

</div>

Hi all. For development purposes we use elasticsearch 6 in docker container with those additional limits: ES\_JAVA\_OPTS: '-Xms384m -Xmx384m' mem\_limit: 768000000 Test data just about 70mb, so it seems minimal memory re…

---

## [Snapshot and restore Sharda failed issue](https://discuss.elastic.co/t/snapshot-and-restore-sharda-failed-issue/174045)

<div class="topic-metadata">

**Author:** [@Vinit\_ParadoX](https://discuss.elastic.co/u/Vinit_ParadoX)\
**Replies:** 6\
**Last updated:** [March 28, 2019, 7:16am UTC](https://discuss.elastic.co/t/snapshot-and-restore-sharda-failed-issue/174045 "2019-03-28T07:16:25Z")

</div>

I am using ES 6.2.4 I have a remote server which cannot be accessed by our Network. It has the data which I need to take backup of. I created a snapshot there and physically copied created files to my system an restored…

---

## [Unknown setting \[cluster.initial\_master\_nodes\]](https://discuss.elastic.co/t/unknown-setting-cluster-initial-master-nodes/174102)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 5\
**Last updated:** [March 28, 2019, 7:12am UTC](https://discuss.elastic.co/t/unknown-setting-cluster-initial-master-nodes/174102 "2019-03-28T07:12:31Z")

</div>

Hello, Just updated 1 of my DV Elastic clusters to 6.7. Tried running the 7.0 Upgrade Assistant. The 7.0 Upgrade Assistant suggested I need to fix 'discovery configuration' After looking into https://www.elastic.co/g…

---

## [Elasticsearch using SSD vs HDD comparison](https://discuss.elastic.co/t/elasticsearch-using-ssd-vs-hdd-comparison/174242)

<div class="topic-metadata">

**Author:** [@jasony](https://discuss.elastic.co/u/jasony)\
**Replies:** 4\
**Last updated:** [March 28, 2019, 7:09am UTC](https://discuss.elastic.co/t/elasticsearch-using-ssd-vs-hdd-comparison/174242 "2019-03-28T07:09:30Z")

</div>

Hello, I wonder if there are good blog or page describes Elasticsearch performance comparison with SSD vs HDD. I know Elasticsearch recommends SSD for better performance, but if there are comparison information in deta…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1349)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1351)
