# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1358 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1359 --- ## [Unable to allocate .security index](https://discuss.elastic.co/t/unable-to-allocate-security-index/173234)
**Author:** [@Jathin](https://discuss.elastic.co/u/Jathin)\ **Replies:** 3\ **Last updated:** [March 21, 2019, 1:22pm UTC](https://discuss.elastic.co/t/unable-to-allocate-security-index/173234 "2019-03-21T13:22:20Z")
I have a alert on Kibana monitoring index stating a node got removed and got added later and I see the cluster in yellow state. No running GET \_cluster/allocation/explain i get .security index is not allocated as all no… --- ## [Output of aggregation query to another index in elastic](https://discuss.elastic.co/t/output-of-aggregation-query-to-another-index-in-elastic/173313)
**Author:** [@DSPN](https://discuss.elastic.co/u/DSPN)\ **Replies:** 0\ **Last updated:** [March 21, 2019, 1:16pm UTC](https://discuss.elastic.co/t/output-of-aggregation-query-to-another-index-in-elastic/173313 "2019-03-21T13:16:14Z")
I have an index in elastic like below. Is there an optimum way to store the aggregation of the below data into another index. I use logstash to index the original data. Original Data |SerialNo|Src|SubSrc|Filename|Statu… --- ## [ES BUG? Filter excluding "-" still brings results with dash "-"](https://discuss.elastic.co/t/es-bug-filter-excluding-still-brings-results-with-dash/173096)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 5\ **Last updated:** [March 21, 2019, 12:38pm UTC](https://discuss.elastic.co/t/es-bug-filter-excluding-still-brings-results-with-dash/173096 "2019-03-21T12:38:42Z")
We have an index with documents which have the value "-" in a field "referrer". However when we try to exclude these values in Kibana, the documents are not filtered out. Digging deeper we see that ElasticSearch does not… --- ## [Sql-like query in elastic](https://discuss.elastic.co/t/sql-like-query-in-elastic/173305)
**Author:** [@lostinelasticland](https://discuss.elastic.co/u/lostinelasticland)\ **Replies:** 0\ **Last updated:** [March 21, 2019, 12:23pm UTC](https://discuss.elastic.co/t/sql-like-query-in-elastic/173305 "2019-03-21T12:23:43Z")
Hello! Here is an example of a kind of a query I am after: I have an index containing 300 million JSON documents. Each of these documents, references one of 3 million items (let's call them "item" - they are numbered f… --- ## [Multipe terms and date range](https://discuss.elastic.co/t/multipe-terms-and-date-range/173125)
**Author:** [@Ahmad\_Asyary](https://discuss.elastic.co/u/Ahmad_Asyary)\ **Replies:** 3\ **Last updated:** [March 21, 2019, 10:11am UTC](https://discuss.elastic.co/t/multipe-terms-and-date-range/173125 "2019-03-21T10:11:53Z")
hi, i try to run this query curl -H 'Content-Type: application/json' -XGET 'http://10.42.97.15:9200/project.prod-esb.\*/\_search?q=logLevel:AUDIT&pretty=true' -d @payload.in { "\_source":\["logMessage"\], "query": … --- ## [Trying to use Aggregate, "Fielddata is disabled on text fields by default. Set fielddata=true"](https://discuss.elastic.co/t/trying-to-use-aggregate-fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true/173259)
**Author:** [@Noctis17](https://discuss.elastic.co/u/Noctis17)\ **Replies:** 3\ **Last updated:** [March 21, 2019, 9:39am UTC](https://discuss.elastic.co/t/trying-to-use-aggregate-fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true/173259 "2019-03-21T09:39:10Z")
ElasticSearch version: 6.6 Language: PHP Hello and good day! I'm using Laravel PHP Framework and ElasticSearch as our database / search engine. In my Index, I'm trying to get a list of Authors who had produced the mos… --- ## [Elasticsearch nodes iowait every day at around 10AM (UTC time 8AM)](https://discuss.elastic.co/t/elasticsearch-nodes-iowait-every-day-at-around-10am-utc-time-8am/173260)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 7\ **Last updated:** [March 21, 2019, 9:31am UTC](https://discuss.elastic.co/t/elasticsearch-nodes-iowait-every-day-at-around-10am-utc-time-8am/173260 "2019-03-21T09:31:51Z")
Hi Elastic 6.6.1 Centos 7.6 I have discovered that, every day at around 10AM (we are on UTC+2h, so UTC time would be 8AM) elastic cluster nodes iowait rapidly increases, including weekends, where there are not that mu… --- ## [Curator Job to move data from hot to warm](https://discuss.elastic.co/t/curator-job-to-move-data-from-hot-to-warm/173272)
**Author:** [@Ram1](https://discuss.elastic.co/u/Ram1)\ **Replies:** 0\ **Last updated:** [March 21, 2019, 8:59am UTC](https://discuss.elastic.co/t/curator-job-to-move-data-from-hot-to-warm/173272 "2019-03-21T08:59:11Z")
Hi, We are using the curator job to move the data from hot to warm node.It works fine for daily indices and we are using the below parameters. timestring: '%Y.%m.%d' unit: days unit\_count: 4 Getting the below er… --- ## [\_recovery returned an empty response even if I have correct indices](https://discuss.elastic.co/t/recovery-returned-an-empty-response-even-if-i-have-correct-indices/173268)
**Author:** [@gyorgybakocs](https://discuss.elastic.co/u/gyorgybakocs)\ **Replies:** 0\ **Last updated:** [March 21, 2019, 8:42am UTC](https://discuss.elastic.co/t/recovery-returned-an-empty-response-even-if-i-have-correct-indices/173268 "2019-03-21T08:42:48Z")
Hello. We have around 500GB catalog every day. We create daily-snapshots. In my new task, I had to restore the latest snapshot on Monday and on Thursday. My bash script works with this logic: I search in the latest… --- ## [Elasticsearch NET NEST 6.5.1 API - recoverable errors](https://discuss.elastic.co/t/elasticsearch-net-nest-6-5-1-api-recoverable-errors/173257)
**Author:** [@Jonathan1](https://discuss.elastic.co/u/Jonathan1)\ **Replies:** 0\ **Last updated:** [March 21, 2019, 7:35am UTC](https://discuss.elastic.co/t/elasticsearch-net-nest-6-5-1-api-recoverable-errors/173257 "2019-03-21T07:35:21Z")
Hi I am using the NEST API 6.5.1. When indexing data I need to separate the errors for operations that should be automatically retried and the errors for operations that should not be retried. I am using the BulkDescri… --- ## [Determine which terms exist in which doc from Multifield Search](https://discuss.elastic.co/t/determine-which-terms-exist-in-which-doc-from-multifield-search/173194)
**Author:** [@Yonatan\_Omer](https://discuss.elastic.co/u/Yonatan_Omer)\ **Replies:** 2\ **Last updated:** [March 21, 2019, 7:00am UTC](https://discuss.elastic.co/t/determine-which-terms-exist-in-which-doc-from-multifield-search/173194 "2019-03-21T07:00:04Z")
I am performing a search with 100 terms on various fields. How can I determine, which combination of the searched terms exist in each found doc, without manually parsing the docs? GET /logs/\_search { "query": { "… --- ## [Elasticsearch Watcher for multiple hosts](https://discuss.elastic.co/t/elasticsearch-watcher-for-multiple-hosts/173077)
**Author:** [@Nishant\_Suman](https://discuss.elastic.co/u/Nishant_Suman)\ **Replies:** 4\ **Last updated:** [March 21, 2019, 6:49am UTC](https://discuss.elastic.co/t/elasticsearch-watcher-for-multiple-hosts/173077 "2019-03-21T06:49:43Z")
Hi, I am new to the elastic stack and trying to set up some basic alerts based on server metrics. The stack that I have configured will be used as a centralized logging system. Right now I am setting up watcher for each… --- ## [How to get all index on a specific machine?](https://discuss.elastic.co/t/how-to-get-all-index-on-a-specific-machine/172906)
**Author:** [@Todd](https://discuss.elastic.co/u/Todd)\ **Replies:** 2\ **Last updated:** [March 21, 2019, 6:39am UTC](https://discuss.elastic.co/t/how-to-get-all-index-on-a-specific-machine/172906 "2019-03-21T06:39:57Z")
Hi, Now, I want to exclude a machine from cluster, but there are some closed indices located on it,so they will not be allocated to other nodes. How can I get all indexes that located on this machine? Thanks. --- ## [How does Elasticsearch search / filter Numeric types](https://discuss.elastic.co/t/how-does-elasticsearch-search-filter-numeric-types/173235)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 2\ **Last updated:** [March 21, 2019, 6:32am UTC](https://discuss.elastic.co/t/how-does-elasticsearch-search-filter-numeric-types/173235 "2019-03-21T06:32:34Z")
I understand the inverted index concept for optimized text search as explained here. I was wondering how does it work under the hood for other data types (numeric, dates, etc...). If there is any literature that I can re… --- ## [Redirect HTTP requests to HTTPS](https://discuss.elastic.co/t/redirect-http-requests-to-https/173245)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 1\ **Last updated:** [March 21, 2019, 4:33am UTC](https://discuss.elastic.co/t/redirect-http-requests-to-https/173245 "2019-03-21T04:33:19Z")
I modified initchannel() method in the netty4HttpServerTransport file , https is working fine,but i want to redirect http to https.. The code is, char password = "your5663".toCharArray(); KeyStore ks = KeyStore.getIn… --- ## [How to filter the aggregated data](https://discuss.elastic.co/t/how-to-filter-the-aggregated-data/173167)
**Author:** [@brian123](https://discuss.elastic.co/u/brian123)\ **Replies:** 2\ **Last updated:** [March 21, 2019, 3:14am UTC](https://discuss.elastic.co/t/how-to-filter-the-aggregated-data/173167 "2019-03-21T03:14:16Z")
I use bucket\_script in my search, and I got a new field called "useagerss" by bucket\_script. Now, i holp to filter the data.When the "useagerss" is greater than 0.85,print it to the result,conversely, not print to the re… --- ## [AccessDeniedException](https://discuss.elastic.co/t/accessdeniedexception/173127)
**Author:** [@junhyuk](https://discuss.elastic.co/u/junhyuk)\ **Replies:** 2\ **Last updated:** [March 21, 2019, 1:12am UTC](https://discuss.elastic.co/t/accessdeniedexception/173127 "2019-03-21T01:12:45Z")
Hi there, I am beginner user to elasticsearch. I have set network.host: 0.0.0.0 (also try to my local IP), http.port: 9200, and give executive authority to my new account. I use centOs6, Java 1.8, and doesn't use root a… --- ## [Watchers not auto resolving in Pager Duty](https://discuss.elastic.co/t/watchers-not-auto-resolving-in-pager-duty/171651)
**Author:** [@Brandondqm](https://discuss.elastic.co/u/Brandondqm)\ **Replies:** 2\ **Last updated:** [March 21, 2019, 12:41am UTC](https://discuss.elastic.co/t/watchers-not-auto-resolving-in-pager-duty/171651 "2019-03-21T00:41:06Z")
Hi there I have built some watchers that fire off to our Pager Duty service, below is an example of a watcher. The alert triggers and works perfectly, however, the issue I am having is that the alert doesn't auto resol… --- ## [All data nodes died on the cluster](https://discuss.elastic.co/t/all-data-nodes-died-on-the-cluster/172443)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 6\ **Last updated:** [March 20, 2019, 11:48pm UTC](https://discuss.elastic.co/t/all-data-nodes-died-on-the-cluster/172443 "2019-03-20T23:48:35Z")
For the very first time after upgrading to 5.6.8.2 version (in last 3 months), we observed a strange and fatal error on production in elasticsearch cluster. What happened: All dedicated data nodes died one after anothe… --- ## [Curator -- Getting AttributeError: 'str' object has no attribute 'items'](https://discuss.elastic.co/t/curator-getting-attributeerror-str-object-has-no-attribute-items/171569)
**Author:** [@Vikas1](https://discuss.elastic.co/u/Vikas1)\ **Replies:** 13\ **Last updated:** [March 20, 2019, 10:11pm UTC](https://discuss.elastic.co/t/curator-getting-attributeerror-str-object-has-no-attribute-items/171569 "2019-03-20T22:11:08Z")
Attached is my config file client: hosts: use\_ssl:True certificate:'' ssl\_no\_validate:False timeout:90 master\_only:False logging: loglevel:DEBUG logfile:'/elasticsearch/logs/curator.log' logformat:default bla… --- ## [Uncaught exception Client error response \[status code\] 400](https://discuss.elastic.co/t/uncaught-exception-client-error-response-status-code-400/173009)
**Author:** [@Liaqat\_Bangash](https://discuss.elastic.co/u/Liaqat_Bangash)\ **Replies:** 0\ **Last updated:** [March 19, 2019, 4:01pm UTC](https://discuss.elastic.co/t/uncaught-exception-client-error-response-status-code-400/173009 "2019-03-19T16:01:57Z")
my version is elasticsearch-6.1.3 . It is working for me for development server, but when I deploy to my customer. the elastic index is ok, and load drugs, http://localhost:9200/drugs/\_search but the php script fails … --- ## [Uax\_url\_email tokenizer unexpected result](https://discuss.elastic.co/t/uax-url-email-tokenizer-unexpected-result/172694)
**Author:** [@doaks](https://discuss.elastic.co/u/doaks)\ **Replies:** 2\ **Last updated:** [March 20, 2019, 9:15pm UTC](https://discuss.elastic.co/t/uax-url-email-tokenizer-unexpected-result/172694 "2019-03-20T21:15:30Z")
I define a sub-field like so: "tokenizer": { "my\_email\_tokenizer": { "type": "uax\_url\_email", "max\_token\_length": 100, } }, .... … --- ## [Unable to send emails from Watcher Service](https://discuss.elastic.co/t/unable-to-send-emails-from-watcher-service/172869)
**Author:** [@jreuth200](https://discuss.elastic.co/u/jreuth200)\ **Replies:** 5\ **Last updated:** [March 20, 2019, 9:04pm UTC](https://discuss.elastic.co/t/unable-to-send-emails-from-watcher-service/172869 "2019-03-20T21:04:19Z")
Hello, I'm using ELK 6.5 currently vetting out the Platinum Trial (Xpack) and am attempting to send notifications using the Watcher service. When trying to send a 'test' email from Kibana, the following error message is… --- ## [Automatic Elasticsearch snapshot backup](https://discuss.elastic.co/t/automatic-elasticsearch-snapshot-backup/173223)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 0\ **Last updated:** [March 20, 2019, 8:45pm UTC](https://discuss.elastic.co/t/automatic-elasticsearch-snapshot-backup/173223 "2019-03-20T20:45:09Z")
This is not a question but information. I spend few hours to get this works, because nothing I found was what I wanted, hence posting it here for other people Once you setup first few variable this script will do backup… --- ## [ELK deployment using Kubernetes](https://discuss.elastic.co/t/elk-deployment-using-kubernetes/172954)
**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\ **Replies:** 1\ **Last updated:** [March 20, 2019, 7:41pm UTC](https://discuss.elastic.co/t/elk-deployment-using-kubernetes/172954 "2019-03-20T19:41:10Z")
Hi, Could you please let us know the standard procedure for ELK production deployment using Kubernetes. We could not able to find any documentation in Elastic official site. Thanks, Vivek --- ## [Cluster health vs indices health](https://discuss.elastic.co/t/cluster-health-vs-indices-health/173202)
**Author:** [@Ninad\_Pradhan](https://discuss.elastic.co/u/Ninad_Pradhan)\ **Replies:** 2\ **Last updated:** [March 20, 2019, 6:41pm UTC](https://discuss.elastic.co/t/cluster-health-vs-indices-health/173202 "2019-03-20T18:41:05Z")
We have an IOT project in an embedded system environment where we have limited linux box and resources, so we our application and elasticsearch on the same 3 machine cluster. Now it can happen the linux machines can boun… --- ## [How to match words already indexed?](https://discuss.elastic.co/t/how-to-match-words-already-indexed/173121)
**Author:** [@Wassim\_Ben\_Amor](https://discuss.elastic.co/u/Wassim_Ben_Amor)\ **Replies:** 4\ **Last updated:** [March 20, 2019, 5:54pm UTC](https://discuss.elastic.co/t/how-to-match-words-already-indexed/173121 "2019-03-20T17:54:55Z")
Hello, I have a big list of words. Each word have a meaning. Example : { word : "new york", meaning :"city" } { word : "today", meaning :"date" } I have indexed all these words, each one in a document. Now I have… --- ## [Elasticsearch API SourceAsMap](https://discuss.elastic.co/t/elasticsearch-api-sourceasmap/173191)
**Author:** [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\ **Replies:** 15\ **Last updated:** [March 20, 2019, 5:10pm UTC](https://discuss.elastic.co/t/elasticsearch-api-sourceasmap/173191 "2019-03-20T17:10:46Z")
I use this take only SourceAsMap List\ llist = new ArrayList\(); SearchResponse response = client.search(new SearchRequest("test"), RequestOptions.DEFAULT); for (SearchHit hit : response.getHits()) { l… --- ## [Elasticsearch Java Rest Api output](https://discuss.elastic.co/t/elasticsearch-java-rest-api-output/172917)
**Author:** [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\ **Replies:** 17\ **Last updated:** [March 20, 2019, 4:54pm UTC](https://discuss.elastic.co/t/elasticsearch-java-rest-api-output/172917 "2019-03-20T16:54:54Z")
I am using Java High level client to fetch data from elasticsearch @GetMapping("/search") public @ResponseBody Object search() throws IOException { Map\ finalresponse = new HashMap\()… --- ## [Authorization header and Rally](https://discuss.elastic.co/t/authorization-header-and-rally/173039)
**Author:** [@marb](https://discuss.elastic.co/u/marb)\ **Replies:** 1\ **Last updated:** [March 20, 2019, 4:21pm UTC](https://discuss.elastic.co/t/authorization-header-and-rally/173039 "2019-03-20T16:21:16Z")
Hi, First, thank you for Rally! This is an amazing tool! :slight\_smile: Maybe I'm not looking at the right place, but I was not able to find out how to define my operations to pass an authorization header in the reques… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1357) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1359)