# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1360

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1361

---

## [How to filter the information in the Kibana Watcher attachment?](https://discuss.elastic.co/t/how-to-filter-the-information-in-the-kibana-watcher-attachment/170550)

<div class="topic-metadata">

**Author:** [@MrGetfit1234](https://discuss.elastic.co/u/MrGetfit1234)\
**Replies:** 1\
**Last updated:** [March 20, 2019, 8:58am UTC](https://discuss.elastic.co/t/how-to-filter-the-information-in-the-kibana-watcher-attachment/170550 "2019-03-20T08:58:05Z")

</div>

hi, I am using a Kibana watcher to send an email with attachments. The attachments will be of ".csv "format. I will need only two columns in the csv( list of ip's) followed by number of logs collected per ip. Here is m…

---

## [How to get right relevance in my eCommerce project](https://discuss.elastic.co/t/how-to-get-right-relevance-in-my-ecommerce-project/173098)

<div class="topic-metadata">

**Author:** [@bash\_script](https://discuss.elastic.co/u/bash_script)\
**Replies:** 1\
**Last updated:** [March 20, 2019, 8:57am UTC](https://discuss.elastic.co/t/how-to-get-right-relevance-in-my-ecommerce-project/173098 "2019-03-20T08:57:08Z")

</div>

Hey! I'm new in elasticsearch. In my eCommerce project, I have many various products. And when I want to search for a smartphone let's say iPhone 7 (iphone 7 red), I get results with cases for iPhone 7 (case for iphone 7…

---

## [searchAfter cannot work with terminateAfter properly](https://discuss.elastic.co/t/searchafter-cannot-work-with-terminateafter-properly/172946)

<div class="topic-metadata">

**Author:** [@Caleb\_Shan](https://discuss.elastic.co/u/Caleb_Shan)\
**Replies:** 1\
**Last updated:** [March 20, 2019, 8:41am UTC](https://discuss.elastic.co/t/searchafter-cannot-work-with-terminateafter-properly/172946 "2019-03-20T08:41:40Z")

</div>

elastic version : 6.4.2 Let's say page size is 10, shard count is 1, the matched total hits is 100. If we set terminateAfter to 10, we can optain the first page. Then we use searchAfter to get the second page, will get…

---

## [Script\_fields calcul in nested](https://discuss.elastic.co/t/script-fields-calcul-in-nested/172725)

<div class="topic-metadata">

**Author:** [@rria](https://discuss.elastic.co/u/rria)\
**Replies:** 1\
**Last updated:** [March 20, 2019, 8:41am UTC](https://discuss.elastic.co/t/script-fields-calcul-in-nested/172725 "2019-03-20T08:41:26Z")

</div>

I created new Index like This POST times/available { "name": "Nursery one", "available": \[ { "number\_places": 1, "date": "2018-04-01" }, { "number…

---

## [Error in heap.dump.path](https://discuss.elastic.co/t/error-in-heap-dump-path/172727)

<div class="topic-metadata">

**Author:** [@Pradana](https://discuss.elastic.co/u/Pradana)\
**Replies:** 1\
**Last updated:** [March 20, 2019, 8:39am UTC](https://discuss.elastic.co/t/error-in-heap-dump-path/172727 "2019-03-20T08:39:38Z")

</div>

Hi, I am try to start the elasticsearch service but got error in elasticsearch.log like below : Mar 18 15:28:44 localhost.localdomain elasticsearch\[28230\]: \[1\]: encountered improperly formatted JVM option line \[{heap.d…

---

## [Error from ES Querystring query when fields are mentioned](https://discuss.elastic.co/t/error-from-es-querystring-query-when-fields-are-mentioned/172365)

<div class="topic-metadata">

**Author:** [@srikanthkadem](https://discuss.elastic.co/u/srikanthkadem)\
**Replies:** 6\
**Last updated:** [March 20, 2019, 8:28am UTC](https://discuss.elastic.co/t/error-from-es-querystring-query-when-fields-are-mentioned/172365 "2019-03-20T08:28:23Z")

</div>

Hi , I have below query which is working fine when I don't specify fields , but when I want to search on few fields then I am getting something like All Shards failed...can you please resolve my issue.. Below is my que…

---

## [Does elasticsearch support functionality like before insert trigger](https://discuss.elastic.co/t/does-elasticsearch-support-functionality-like-before-insert-trigger/173033)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 1\
**Last updated:** [March 20, 2019, 8:15am UTC](https://discuss.elastic.co/t/does-elasticsearch-support-functionality-like-before-insert-trigger/173033 "2019-03-20T08:15:10Z")

</div>

Hello Team, Is it possible to create trigger to check if document with some field value already exist and depending on condition either insert or drop document. Thank you for your help and support. Thank you, Aditya

---

## [Searching Google Books](https://discuss.elastic.co/t/searching-google-books/173074)

<div class="topic-metadata">

**Author:** [@Laurie\_Stearn](https://discuss.elastic.co/u/Laurie_Stearn)\
**Replies:** 4\
**Last updated:** [March 20, 2019, 7:54am UTC](https://discuss.elastic.co/t/searching-google-books/173074 "2019-03-20T07:54:15Z")

</div>

Hi there, Can ElasticSearch be used to search through Google Books? There are some issues with how search results are organised- they are best explained over at Stack Exchange- where they didn't initially appear to be …

---

## [How to access particular field in objects present in array](https://discuss.elastic.co/t/how-to-access-particular-field-in-objects-present-in-array/173089)

<div class="topic-metadata">

**Author:** [@PRUDHVI\_CHOWDHARY\_NE](https://discuss.elastic.co/u/PRUDHVI_CHOWDHARY_NE)\
**Replies:** 1\
**Last updated:** [March 20, 2019, 7:32am UTC](https://discuss.elastic.co/t/how-to-access-particular-field-in-objects-present-in-array/173089 "2019-03-20T07:32:22Z")

</div>

how to access particular field in objects present in array

---

## [How to do aggregation in Elastic search with a field which has both keyword and text types](https://discuss.elastic.co/t/how-to-do-aggregation-in-elastic-search-with-a-field-which-has-both-keyword-and-text-types/173083)

<div class="topic-metadata">

**Author:** [@Sreejith\_Ms](https://discuss.elastic.co/u/Sreejith_Ms)\
**Replies:** 1\
**Last updated:** [March 20, 2019, 6:51am UTC](https://discuss.elastic.co/t/how-to-do-aggregation-in-elastic-search-with-a-field-which-has-both-keyword-and-text-types/173083 "2019-03-20T06:51:23Z")

</div>

Im new to ES, Please help me to do the aggregation in Elastic search with a field which has both keyword and text types.

---

## [Index settings recommendations](https://discuss.elastic.co/t/index-settings-recommendations/172987)

<div class="topic-metadata">

**Author:** [@Josef\_Fritzer](https://discuss.elastic.co/u/Josef_Fritzer)\
**Replies:** 2\
**Last updated:** [March 20, 2019, 5:55am UTC](https://discuss.elastic.co/t/index-settings-recommendations/172987 "2019-03-20T05:55:09Z")

</div>

Hello folks, we run an index of about 700.000 (growing..) documents in our company. The number of fields of the documents varies between 1000 - 5000 fields. The number of shards is 5 and the number of replicas is 1. Are …

---

## [Deleting a file in elasticsearch index](https://discuss.elastic.co/t/deleting-a-file-in-elasticsearch-index/172334)

<div class="topic-metadata">

**Author:** [@saqibjavid](https://discuss.elastic.co/u/saqibjavid)\
**Replies:** 7\
**Last updated:** [March 20, 2019, 5:50am UTC](https://discuss.elastic.co/t/deleting-a-file-in-elasticsearch-index/172334 "2019-03-20T05:50:18Z")

</div>

I am unable to delete a file in the elasticsearch index using the DELETE command, as my document id is: "E:/ELK\_Stack\_6.6.0/100 files compare/parsed xml 7.6v\\USA\_ENG\_10077.doc001.out". So how do I delete the document? I…

---

## [Reindex fails with array mapped to geo\_point](https://discuss.elastic.co/t/reindex-fails-with-array-mapped-to-geo-point/172853)

<div class="topic-metadata">

**Author:** [@getorca](https://discuss.elastic.co/u/getorca)\
**Replies:** 3\
**Last updated:** [March 20, 2019, 5:47am UTC](https://discuss.elastic.co/t/reindex-fails-with-array-mapped-to-geo-point/172853 "2019-03-20T05:47:21Z")

</div>

I'm attempting to reindex after changing the mapping of one field from type text to type geo\_point. The existing data in the source index looks like (but the lat\_long mapping type = text): "location" : { …

---

## [Filtering specific range of lines from log using Filebeat](https://discuss.elastic.co/t/filtering-specific-range-of-lines-from-log-using-filebeat/172894)

<div class="topic-metadata">

**Author:** [@avj1986](https://discuss.elastic.co/u/avj1986)\
**Replies:** 0\
**Last updated:** [March 19, 2019, 4:45am UTC](https://discuss.elastic.co/t/filtering-specific-range-of-lines-from-log-using-filebeat/172894 "2019-03-19T04:45:58Z")

</div>

Hello, I am working on setting up ELK stack. My use case suggests to filter specific lines from logs using filebeat and send them to Logstash with custom fields appended. E.g. Sample Log file: Log process starte…

---

## [Role privileges issue in elasticserach](https://discuss.elastic.co/t/role-privileges-issue-in-elasticserach/171673)

<div class="topic-metadata">

**Author:** [@B123](https://discuss.elastic.co/u/B123)\
**Replies:** 1\
**Last updated:** [March 20, 2019, 1:59am UTC](https://discuss.elastic.co/t/role-privileges-issue-in-elasticserach/171673 "2019-03-20T01:59:45Z")

</div>

Hi, I have assigned the privilege monitor to a role in elasticserach . As provided in the documentation of elasticsearch the monitor privilege - Can access all cluster read-only operations, like cluster health and setti…

---

## [Could not find java; set JAVA\_HOME or ensure java is in PATH in ubuntu](https://discuss.elastic.co/t/could-not-find-java-set-java-home-or-ensure-java-is-in-path-in-ubuntu/172931)

<div class="topic-metadata">

**Author:** [@jiantao\_wu](https://discuss.elastic.co/u/jiantao_wu)\
**Replies:** 2\
**Last updated:** [March 20, 2019, 1:54am UTC](https://discuss.elastic.co/t/could-not-find-java-set-java-home-or-ensure-java-is-in-path-in-ubuntu/172931 "2019-03-20T01:54:09Z")

</div>

How to resolve it.

---

## [7.0 Upgrade Assistant](https://discuss.elastic.co/t/7-0-upgrade-assistant/169289)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 9\
**Last updated:** [March 20, 2019, 12:48am UTC](https://discuss.elastic.co/t/7-0-upgrade-assistant/169289 "2019-03-20T00:48:51Z")

</div>

Hello World! I'm running Elastic Stack 6.6.1 and per Kibana's 7.0 Upgrade Assistant (Management-\>7.0 Upgrade Assistant), I'm seeing following: Cluster GCS Repository settings changed (Documentation) - warning nodes …

---

## [Get Elasticsearch Index Volume by Search](https://discuss.elastic.co/t/get-elasticsearch-index-volume-by-search/173057)

<div class="topic-metadata">

**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\
**Replies:** 2\
**Last updated:** [March 19, 2019, 11:14pm UTC](https://discuss.elastic.co/t/get-elasticsearch-index-volume-by-search/173057 "2019-03-19T23:14:16Z")

</div>

Hi All, I know with latest versions we can get index size easy via the Kibana console. However, wondering it its possible to run a search in elasticsearch that comes back by volume of data by a tag e.g. for example I ha…

---

## [Geoshape orientation right-hand-rule for indexation](https://discuss.elastic.co/t/geoshape-orientation-right-hand-rule-for-indexation/173041)

<div class="topic-metadata">

**Author:** [@jnick1982](https://discuss.elastic.co/u/jnick1982)\
**Replies:** 6\
**Last updated:** [March 19, 2019, 9:55pm UTC](https://discuss.elastic.co/t/geoshape-orientation-right-hand-rule-for-indexation/173041 "2019-03-19T21:55:50Z")

</div>

I am having problem with indexing geoshape polygon data some of my polygon don't want to index. From what I understant from this article : http://mapster.me/right-hand-rule-geojson-fixer/ In 2016, the geoJSON specific…

---

## [Configure main instance with puppet module](https://discuss.elastic.co/t/configure-main-instance-with-puppet-module/172623)

<div class="topic-metadata">

**Author:** [@Tommy2](https://discuss.elastic.co/u/Tommy2)\
**Replies:** 2\
**Last updated:** [March 19, 2019, 9:53pm UTC](https://discuss.elastic.co/t/configure-main-instance-with-puppet-module/172623 "2019-03-19T21:53:28Z")

</div>

I have "inherited" some puppet code that is using the elasticsearch-puppet module to manage our "ELK" stack, and was trying to use it to create a separate (unrelated) Elasticsearch cluster. What I cannot figure out, is w…

---

## [Problem when creating an index not analyzed, to perform term searches in texts](https://discuss.elastic.co/t/problem-when-creating-an-index-not-analyzed-to-perform-term-searches-in-texts/173056)

<div class="topic-metadata">

**Author:** [@Elvis\_Goncalves](https://discuss.elastic.co/u/Elvis_Goncalves)\
**Replies:** 1\
**Last updated:** [March 19, 2019, 9:14pm UTC](https://discuss.elastic.co/t/problem-when-creating-an-index-not-analyzed-to-perform-term-searches-in-texts/173056 "2019-03-19T21:14:45Z")

</div>

Try to create an index with a field that is not analyzed in order to perform a string search. But when I try to create the index it generates errors. In this way I create the index: PUT / contents { "mappings": { "c…

---

## [Deprecated field](https://discuss.elastic.co/t/deprecated-field/172994)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 1\
**Last updated:** [March 19, 2019, 8:04pm UTC](https://discuss.elastic.co/t/deprecated-field/172994 "2019-03-19T20:04:08Z")

</div>

Hello World! I'm using Elastic stack 6.6.2 and following WARN messages is flooding my logs: esXX | \[2019-03-15T06:04:13,162\]\[WARN \]\[o.e.d.c.ParseField \] \[esXX\] Deprecated field \[\_retry\_on\_conflict\] us…

---

## [Python script for reindex](https://discuss.elastic.co/t/python-script-for-reindex/173040)

<div class="topic-metadata">

**Author:** [@He\_Pamela](https://discuss.elastic.co/u/He_Pamela)\
**Replies:** 2\
**Last updated:** [March 19, 2019, 7:31pm UTC](https://discuss.elastic.co/t/python-script-for-reindex/173040 "2019-03-19T19:31:52Z")

</div>

Hi, I want to make a python script to reindex the data from nodeA to nodeB. I want to send the credentials through the request. Somebody nows how to do this? I've seen a elasticsearch-py library but I don\`t know If this…

---

## [Can't connect to AWS S3 with S3 Repository](https://discuss.elastic.co/t/cant-connect-to-aws-s3-with-s3-repository/173003)

<div class="topic-metadata">

**Author:** [@aleksei.saiko](https://discuss.elastic.co/u/aleksei.saiko)\
**Replies:** 1\
**Last updated:** [March 19, 2019, 7:04pm UTC](https://discuss.elastic.co/t/cant-connect-to-aws-s3-with-s3-repository/173003 "2019-03-19T19:04:53Z")

</div>

Hello! After upgrading from ELK 6.5.4 to 6.6.2, I can't connect to my S3 Repository for a Backup. My ELK ver - 6.6.2 S3 Repository version - 6.6.2 elasticsearch.yml S3 Repository config: s3.client.default.proxy.host…

---

## [NEST client 6.x / Elastic Server 1.x](https://discuss.elastic.co/t/nest-client-6-x-elastic-server-1-x/173020)

<div class="topic-metadata">

**Author:** [@fahrigoktuna](https://discuss.elastic.co/u/fahrigoktuna)\
**Replies:** 1\
**Last updated:** [March 19, 2019, 5:43pm UTC](https://discuss.elastic.co/t/nest-client-6-x-elastic-server-1-x/173020 "2019-03-19T17:43:23Z")

</div>

Hi, I need guidance/help regarding to migration of ElasticSearch 1.x to 6.x. Here is my question and what I need. I have to use NEST client on .Net Core version 6.x but I dont want to change elasticSearch version of ser…

---

## [How to create S3 bucket using ES 5.1 s3 repository plugin](https://discuss.elastic.co/t/how-to-create-s3-bucket-using-es-5-1-s3-repository-plugin/173018)

<div class="topic-metadata">

**Author:** [@saikettewary](https://discuss.elastic.co/u/saikettewary)\
**Replies:** 0\
**Last updated:** [March 19, 2019, 4:50pm UTC](https://discuss.elastic.co/t/how-to-create-s3-bucket-using-es-5-1-s3-repository-plugin/173018 "2019-03-19T16:50:41Z")

</div>

Hi, I am exploring the path to use ES 5.1 s3 repository plugin for snapshot & restore. I can get this working when i have a per-existing s3 bucket in AWS. Trying to understand how ES can create a bucket if it doesn't a…

---

## [Regexps with lots of punctuation](https://discuss.elastic.co/t/regexps-with-lots-of-punctuation/172819)

<div class="topic-metadata">

**Author:** [@goochjs](https://discuss.elastic.co/u/goochjs)\
**Replies:** 14\
**Last updated:** [March 19, 2019, 4:41pm UTC](https://discuss.elastic.co/t/regexps-with-lots-of-punctuation/172819 "2019-03-19T16:41:00Z")

</div>

Hi, We've got a text field in Elasticsearch into which is being written a JSON document, which has been escaped. We're trying to find instances with a particular pattern of fields in, but cannot formulate the regexp re…

---

## [Does a search request timeout include time in queue?](https://discuss.elastic.co/t/does-a-search-request-timeout-include-time-in-queue/172436)

<div class="topic-metadata">

**Author:** [@maxshortzp](https://discuss.elastic.co/u/maxshortzp)\
**Replies:** 1\
**Last updated:** [March 19, 2019, 4:33pm UTC](https://discuss.elastic.co/t/does-a-search-request-timeout-include-time-in-queue/172436 "2019-03-19T16:33:28Z")

</div>

Hi, I saw a search request take far longer than the timeout value set (multiple minutes). I understand that the timeout is imprecise but that seems a bit high. One thing I thought of -- does this timeout include time s…

---

## [Elastalert module not triggering alerts](https://discuss.elastic.co/t/elastalert-module-not-triggering-alerts/172687)

<div class="topic-metadata">

**Author:** [@Kaviarasan](https://discuss.elastic.co/u/Kaviarasan)\
**Replies:** 2\
**Last updated:** [March 19, 2019, 4:27pm UTC](https://discuss.elastic.co/t/elastalert-module-not-triggering-alerts/172687 "2019-03-19T16:27:29Z")

</div>

Hi Team, I have been trying to get an alert when my CPU load value(system.load.1 \>0.8). I could see the rule is parsed without any errors but I am unable to get any alerts/hits. Configuration files attached for your ref…

---

## [Painless string to int](https://discuss.elastic.co/t/painless-string-to-int/172963)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 2\
**Last updated:** [March 19, 2019, 4:00pm UTC](https://discuss.elastic.co/t/painless-string-to-int/172963 "2019-03-19T16:00:02Z")

</div>

Hi All, Due to a mapping mistake I have a number field mapped as a string. I have updated my mapping already to integer so that is fixed. Due to the amount of indices and the amount of data is re-indexing not an option.…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1359)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1361)
