# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1372

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1373

---

## [Elasticsearch not loaded](https://discuss.elastic.co/t/elasticsearch-not-loaded/171443)

<div class="topic-metadata">

**Author:** [@keco](https://discuss.elastic.co/u/keco)\
**Replies:** 0\
**Last updated:** [March 8, 2019, 7:28am UTC](https://discuss.elastic.co/t/elasticsearch-not-loaded/171443 "2019-03-08T07:28:47Z")

</div>

Dear all, I am newbie in docker/elasticsearch, just took over the project of my colleague, but elasticsearch is not loading on a linux machine under the address http://172.23.65.11:9215/ I am starting docker with init…

---

## [Export and re import templates](https://discuss.elastic.co/t/export-and-re-import-templates/170597)

<div class="topic-metadata">

**Author:** [@niki](https://discuss.elastic.co/u/niki)\
**Replies:** 1\
**Last updated:** [March 8, 2019, 6:52am UTC](https://discuss.elastic.co/t/export-and-re-import-templates/170597 "2019-03-08T06:52:16Z")

</div>

if i do not care about my old data, is there any way to export an index template with dynamic fields and put it back after some changes into elasticsearch?

---

## [Need Help for Elasticsearch error "Invalid format: "11/19/2014" is malformed at "/19/2014""](https://discuss.elastic.co/t/need-help-for-elasticsearch-error-invalid-format-11-19-2014-is-malformed-at-19-2014/171257)

<div class="topic-metadata">

**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\
**Replies:** 0\
**Last updated:** [March 7, 2019, 9:00am UTC](https://discuss.elastic.co/t/need-help-for-elasticsearch-error-invalid-format-11-19-2014-is-malformed-at-19-2014/171257 "2019-03-07T09:00:43Z")

</div>

Hi Team, I am facing an error related with date in elasticsearch. Below is the detail information, can you please help advice what's the problem? 1. I have below CSV file which contains a date information "COMMIT\_DATE"…

---

## [Prevent Elasticsearch 6.5 from loading xpack?](https://discuss.elastic.co/t/prevent-elasticsearch-6-5-from-loading-xpack/171403)

<div class="topic-metadata">

**Author:** [@jw-ovgd](https://discuss.elastic.co/u/jw-ovgd)\
**Replies:** 1\
**Last updated:** [March 8, 2019, 6:13am UTC](https://discuss.elastic.co/t/prevent-elasticsearch-6-5-from-loading-xpack/171403 "2019-03-08T06:13:21Z")

</div>

Hi, I am upgrading from ES 5.5 to ES 6.5 and I see now that xpack is being bundled with ES 6.5 (since ES 6.3). Is there anyway to prevent Elasticsearch from trying to load the xpack plugin? Something I can put in my ela…

---

## [Filter by field only if the field exists](https://discuss.elastic.co/t/filter-by-field-only-if-the-field-exists/171219)

<div class="topic-metadata">

**Author:** [@all9lives](https://discuss.elastic.co/u/all9lives)\
**Replies:** 4\
**Last updated:** [March 8, 2019, 4:43am UTC](https://discuss.elastic.co/t/filter-by-field-only-if-the-field-exists/171219 "2019-03-08T04:43:00Z")

</div>

I need to filter items by a certain field value, only if that field exists, otherwise it should include items which don't have that field value Here's the example, a Todo app with assigned users and projects. I need to …

---

## [ES behaviour with characters like $ and @ in a query?](https://discuss.elastic.co/t/es-behaviour-with-characters-like-and-in-a-query/171400)

<div class="topic-metadata">

**Author:** [@neesha](https://discuss.elastic.co/u/neesha)\
**Replies:** 0\
**Last updated:** [March 7, 2019, 11:30pm UTC](https://discuss.elastic.co/t/es-behaviour-with-characters-like-and-in-a-query/171400 "2019-03-07T23:30:52Z")

</div>

I'm trying to test out how our system (and ES) actually change what a user is submitting into a query and what the expected response back should be. I have a post that has in it's content "Nee$ha". So I have submitted th…

---

## [Mapping: Is it possible to set a parameter for a field data type globally](https://discuss.elastic.co/t/mapping-is-it-possible-to-set-a-parameter-for-a-field-data-type-globally/171396)

<div class="topic-metadata">

**Author:** [@cplankl](https://discuss.elastic.co/u/cplankl)\
**Replies:** 0\
**Last updated:** [March 7, 2019, 11:06pm UTC](https://discuss.elastic.co/t/mapping-is-it-possible-to-set-a-parameter-for-a-field-data-type-globally/171396 "2019-03-07T23:06:49Z")

</div>

Hello together, I was researching the documentation of Elasticsearch and also looking StackOverflow &Co but I couldn't find an answer. I will be happy about any hint in any direction. Questions: Maybe that are not the …

---

## [Aggregate value for kubernetes.container.cpu.request.cores showing 0 even though it isnt](https://discuss.elastic.co/t/aggregate-value-for-kubernetes-container-cpu-request-cores-showing-0-even-though-it-isnt/171393)

<div class="topic-metadata">

**Author:** [@Vishnu59](https://discuss.elastic.co/u/Vishnu59)\
**Replies:** 0\
**Last updated:** [March 7, 2019, 10:56pm UTC](https://discuss.elastic.co/t/aggregate-value-for-kubernetes-container-cpu-request-cores-showing-0-even-though-it-isnt/171393 "2019-03-07T22:56:55Z")

</div>

Hello There, So I used Metricbeat Kubernetes module to push Kubernetes metrics into Elasticsearch and built dashboards on those. As I was creating one specific to kubernetes.container.cpu.request.cores metric, noticed t…

---

## [Creating ssl cert for elastics search endpoint using GKE ingress and nginx load balancer](https://discuss.elastic.co/t/creating-ssl-cert-for-elastics-search-endpoint-using-gke-ingress-and-nginx-load-balancer/171173)

<div class="topic-metadata">

**Author:** [@Gruido](https://discuss.elastic.co/u/Gruido)\
**Replies:** 1\
**Last updated:** [March 7, 2019, 10:46pm UTC](https://discuss.elastic.co/t/creating-ssl-cert-for-elastics-search-endpoint-using-gke-ingress-and-nginx-load-balancer/171173 "2019-03-07T22:46:08Z")

</div>

Hi, I have elastic search deployed on GKE and am looking to expose the api with let's encrypt so that I could encrypt that endpoint for sending data to. I have ingress setup but the problem is that it's not connecting to…

---

## [Watcher Kibana : How can i use double condition in a "compare"](https://discuss.elastic.co/t/watcher-kibana-how-can-i-use-double-condition-in-a-compare/170999)

<div class="topic-metadata">

**Author:** [@hmezoughi](https://discuss.elastic.co/u/hmezoughi)\
**Replies:** 6\
**Last updated:** [March 7, 2019, 10:43pm UTC](https://discuss.elastic.co/t/watcher-kibana-how-can-i-use-double-condition-in-a-compare/170999 "2019-03-07T22:43:45Z")

</div>

I want to compare two conditon to send an alert mail My exemple : "query": { "bool": { "must": \[ { "range": { "AUDITTIMESTAMP": { "gte": "now-15m" } …

---

## [Triggering index creation via an index template's alias](https://discuss.elastic.co/t/triggering-index-creation-via-an-index-templates-alias/171385)

<div class="topic-metadata">

**Author:** [@dan-blanchard](https://discuss.elastic.co/u/dan-blanchard)\
**Replies:** 0\
**Last updated:** [March 7, 2019, 9:13pm UTC](https://discuss.elastic.co/t/triggering-index-creation-via-an-index-templates-alias/171385 "2019-03-07T21:13:12Z")

</div>

We use versioned time-based indices at Parse.ly that are roughly of the form v1-foo-2019.03.05.20 (v{version}-{name}-{YYYY}.{MM}.{DD}.{HH}). Currently, we have a cron job that runs every 30 minutes that creates the next …

---

## [Make custom term suggestion in ElasticSearch](https://discuss.elastic.co/t/make-custom-term-suggestion-in-elasticsearch/171384)

<div class="topic-metadata">

**Author:** [@anasbk](https://discuss.elastic.co/u/anasbk)\
**Replies:** 0\
**Last updated:** [March 7, 2019, 9:03pm UTC](https://discuss.elastic.co/t/make-custom-term-suggestion-in-elasticsearch/171384 "2019-03-07T21:03:45Z")

</div>

I want to make a custom term suggestion instead of having suggestions by using "edit distance", I want to define suggestions for some words, for example, if I type "Dryer", I want to have "washer" instead of "dry", is it…

---

## [Took is having a different value than the time ES is taking to show the result in Kibana](https://discuss.elastic.co/t/took-is-having-a-different-value-than-the-time-es-is-taking-to-show-the-result-in-kibana/171182)

<div class="topic-metadata">

**Author:** [@Subir\_Adhikari](https://discuss.elastic.co/u/Subir_Adhikari)\
**Replies:** 5\
**Last updated:** [March 7, 2019, 8:21pm UTC](https://discuss.elastic.co/t/took-is-having-a-different-value-than-the-time-es-is-taking-to-show-the-result-in-kibana/171182 "2019-03-07T20:21:47Z")

</div>

I have a query in Elastic Search which is fetching 10000 records having approximately 8MB of data. In the "took" tag in the JSON response, it is showing "1071" . However the response is actually appearing in Kibana after…

---

## [Elasticsearch crashing every 7 days or so](https://discuss.elastic.co/t/elasticsearch-crashing-every-7-days-or-so/171206)

<div class="topic-metadata">

**Author:** [@gmfreak](https://discuss.elastic.co/u/gmfreak)\
**Replies:** 8\
**Last updated:** [March 7, 2019, 6:53pm UTC](https://discuss.elastic.co/t/elasticsearch-crashing-every-7-days-or-so/171206 "2019-03-07T18:53:25Z")

</div>

I'm running SugarCRM which uses Elasticsearch and i'm dealing with Elasticsearch crashing every week on my server. I did some digging and found some info online that talked about setting the heap size and various other …

---

## [Cardinality over Date Histogram](https://discuss.elastic.co/t/cardinality-over-date-histogram/171373)

<div class="topic-metadata">

**Author:** [@Marcellus\_Tavares](https://discuss.elastic.co/u/Marcellus_Tavares)\
**Replies:** 0\
**Last updated:** [March 7, 2019, 6:41pm UTC](https://discuss.elastic.co/t/cardinality-over-date-histogram/171373 "2019-03-07T18:41:16Z")

</div>

Hi all, What would be the best way to query Elasticsearch in order to implement a date histogram representing the total number of unique visitors metric? Considering the following data: PUT /events { "mappings" : …

---

## [Help merging multiple filters](https://discuss.elastic.co/t/help-merging-multiple-filters/171370)

<div class="topic-metadata">

**Author:** [@chowpay](https://discuss.elastic.co/u/chowpay)\
**Replies:** 0\
**Last updated:** [March 7, 2019, 6:31pm UTC](https://discuss.elastic.co/t/help-merging-multiple-filters/171370 "2019-03-07T18:31:24Z")

</div>

(Version: 6.4.2) I have 2 filters that work well : 1. Matches to the phrase "NA" { "query": { "match": { "region.keyword": { "query": "NA", "type": "phrase" } } } } 2.Uses a scr…

---

## [How to enable trace with Nest with .NET Core?](https://discuss.elastic.co/t/how-to-enable-trace-with-nest-with-net-core/171366)

<div class="topic-metadata">

**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\
**Replies:** 0\
**Last updated:** [March 7, 2019, 6:16pm UTC](https://discuss.elastic.co/t/how-to-enable-trace-with-nest-with-net-core/171366 "2019-03-07T18:16:21Z")

</div>

Back in the days of the full .net framework, you could call ConnectionSettings.EnableTrace and it would dump all the queries it runs into the Output window of Visual Studio. Now with Nest 6.x, .EnableTrace method is go…

---

## [Migrate elastic search data from one cluster to other](https://discuss.elastic.co/t/migrate-elastic-search-data-from-one-cluster-to-other/171301)

<div class="topic-metadata">

**Author:** [@Parvatayya\_Malimath](https://discuss.elastic.co/u/Parvatayya_Malimath)\
**Replies:** 3\
**Last updated:** [March 7, 2019, 4:24pm UTC](https://discuss.elastic.co/t/migrate-elastic-search-data-from-one-cluster-to-other/171301 "2019-03-07T16:24:40Z")

</div>

Hi, We have 3 node elastic search cluster and for certain reason we have to get rid of those VMs, now i need to migrate the data from the existing cluster to new one without a down time. I thought of adding 3 new nodes…

---

## [Understand CPU based auto scaling of ElasticSearch cluster](https://discuss.elastic.co/t/understand-cpu-based-auto-scaling-of-elasticsearch-cluster/171347)

<div class="topic-metadata">

**Author:** [@Priti\_Gangrade](https://discuss.elastic.co/u/Priti_Gangrade)\
**Replies:** 1\
**Last updated:** [March 7, 2019, 4:18pm UTC](https://discuss.elastic.co/t/understand-cpu-based-auto-scaling-of-elasticsearch-cluster/171347 "2019-03-07T16:18:38Z")

</div>

Assumption: We are able to predict traffic pattern - increase/decrease number of users hitting our Search system. Usecase: CPU based autoscaling when traffic increases With SolrCloud: With SolrCloud sharded cluster, we…

---

## [How to get the result of the division between two sum fields By Using Java High REST Client](https://discuss.elastic.co/t/how-to-get-the-result-of-the-division-between-two-sum-fields-by-using-java-high-rest-client/171307)

<div class="topic-metadata">

**Author:** [@horaceli](https://discuss.elastic.co/u/horaceli)\
**Replies:** 1\
**Last updated:** [March 7, 2019, 3:47pm UTC](https://discuss.elastic.co/t/how-to-get-the-result-of-the-division-between-two-sum-fields-by-using-java-high-rest-client/171307 "2019-03-07T15:47:29Z")

</div>

How to get the result of the division between two sum fields By Using Java High REST Client

---

## [Use CephFS as Elasticsearch data storage](https://discuss.elastic.co/t/use-cephfs-as-elasticsearch-data-storage/171324)

<div class="topic-metadata">

**Author:** [@TWalter](https://discuss.elastic.co/u/TWalter)\
**Replies:** 3\
**Last updated:** [March 7, 2019, 2:56pm UTC](https://discuss.elastic.co/t/use-cephfs-as-elasticsearch-data-storage/171324 "2019-03-07T14:56:25Z")

</div>

Hello guys, i want to deploy an Elasticsearch cluster (3 Nodes, ES-Version: 6.x) on Kubernetes and want to know, which storage types are efficient to use for data. Do you think CephFS would be a proper solution or is i…

---

## [How to filter field return](https://discuss.elastic.co/t/how-to-filter-field-return/171334)

<div class="topic-metadata">

**Author:** [@Tiago\_Guirro](https://discuss.elastic.co/u/Tiago_Guirro)\
**Replies:** 0\
**Last updated:** [March 7, 2019, 2:52pm UTC](https://discuss.elastic.co/t/how-to-filter-field-return/171334 "2019-03-07T14:52:59Z")

</div>

I have a data structure by product, in which it has an array with multiple positions, but I need to limit, returning only those that match the search conditions. { "idproduto": 11512, "idgradex": 3, "idmarca": 3, …

---

## [Elasticsearch and log load](https://discuss.elastic.co/t/elasticsearch-and-log-load/170139)

<div class="topic-metadata">

**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\
**Replies:** 8\
**Last updated:** [March 7, 2019, 2:41pm UTC](https://discuss.elastic.co/t/elasticsearch-and-log-load/170139 "2019-03-07T14:41:03Z")

</div>

Hello, we're currently on Elasticsearch 6.3.2 with the log sources sending their data to Elasticsearch via Logstash. I've recently noticed that Elasticsearch doesn't seem to be indexing anywhere near the number of docum…

---

## [Add new field to existing documents in an index](https://discuss.elastic.co/t/add-new-field-to-existing-documents-in-an-index/171186)

<div class="topic-metadata">

**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\
**Replies:** 2\
**Last updated:** [March 7, 2019, 2:37pm UTC](https://discuss.elastic.co/t/add-new-field-to-existing-documents-in-an-index/171186 "2019-03-07T14:37:28Z")

</div>

Hi, I need to add a new field to all the docs present in the index. Is there a way to accomplish this ?

---

## [Index corruption with .tim file checksum mismatch](https://discuss.elastic.co/t/index-corruption-with-tim-file-checksum-mismatch/171253)

<div class="topic-metadata">

**Author:** [@Rushikesh\_Pathak](https://discuss.elastic.co/u/Rushikesh_Pathak)\
**Replies:** 3\
**Last updated:** [March 7, 2019, 2:36pm UTC](https://discuss.elastic.co/t/index-corruption-with-tim-file-checksum-mismatch/171253 "2019-03-07T14:36:36Z")

</div>

Have elastic search setup with cluster size of 20+ nodes. Last week encountered an issue related to index corruption with following traceback in logs. org.apache.lucene.index.CorruptIndexException: checksum failed (hard…

---

## [NoSuchMethodError: org.elasticsearch.search.fetch.subphase.highlight.HighlightPhase](https://discuss.elastic.co/t/nosuchmethoderror-org-elasticsearch-search-fetch-subphase-highlight-highlightphase/171319)

<div class="topic-metadata">

**Author:** [@SolderOfFortune](https://discuss.elastic.co/u/SolderOfFortune)\
**Replies:** 0\
**Last updated:** [March 7, 2019, 2:05pm UTC](https://discuss.elastic.co/t/nosuchmethoderror-org-elasticsearch-search-fetch-subphase-highlight-highlightphase/171319 "2019-03-07T14:05:41Z")

</div>

Pom.xml: \<dependency\> \<groupId\>org.elasticsearch.client\</groupId\> \<artifactId\>transport\</artifactId\> \<version\>6.6.1\</version\> \</dependency\> Java Code: Client client = new PreBuiltTransportClient( …

---

## [Need elasticsearch to timeout early when service is down rather than waiting for 10secs and throw connection error](https://discuss.elastic.co/t/need-elasticsearch-to-timeout-early-when-service-is-down-rather-than-waiting-for-10secs-and-throw-connection-error/171313)

<div class="topic-metadata">

**Author:** [@vaibhavnegi](https://discuss.elastic.co/u/vaibhavnegi)\
**Replies:** 0\
**Last updated:** [March 7, 2019, 1:39pm UTC](https://discuss.elastic.co/t/need-elasticsearch-to-timeout-early-when-service-is-down-rather-than-waiting-for-10secs-and-throw-connection-error/171313 "2019-03-07T13:39:57Z")

</div>

I am deleting a document in elasticsearch. When elasticsearch service is not running, it throws connection error but takes about 10 secs. Can i specify connection timeout to timeout within 1 sec ? timeout param does no…

---

## ["illegal\_argument\_exception"](https://discuss.elastic.co/t/illegal-argument-exception/171123)

<div class="topic-metadata">

**Author:** [@saqibjavid](https://discuss.elastic.co/u/saqibjavid)\
**Replies:** 10\
**Last updated:** [March 7, 2019, 12:45pm UTC](https://discuss.elastic.co/t/illegal-argument-exception/171123 "2019-03-07T12:45:40Z")

</div>

{ "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "mapper \[resume.experience.job.daterange.start\] of different type, current\_type \[text\], merged\_type \[ObjectMapper\]" } \], "type": "ill…

---

## [Install elasticsearch plugins through compiled source code of elasticsearch](https://discuss.elastic.co/t/install-elasticsearch-plugins-through-compiled-source-code-of-elasticsearch/171275)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 3\
**Last updated:** [March 7, 2019, 12:44pm UTC](https://discuss.elastic.co/t/install-elasticsearch-plugins-through-compiled-source-code-of-elasticsearch/171275 "2019-03-07T12:44:14Z")

</div>

In the default elasticsearch installation we use plugin install to install plugins. So how to install plugins through the compiled source code of elasticsearch in eclipse

---

## [Escaping backslash in grok pattern giving error](https://discuss.elastic.co/t/escaping-backslash-in-grok-pattern-giving-error/171300)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 0\
**Last updated:** [March 7, 2019, 12:26pm UTC](https://discuss.elastic.co/t/escaping-backslash-in-grok-pattern-giving-error/171300 "2019-03-07T12:26:21Z")

</div>

This is the message I am working with: C:\\Data\\Projects\\Demo\\2019-03-06-14-35-07\_check.log In the grok debugger this was the pattern I checked and it worked. %{PATH:dontwant}\\\\%{USERNAME:identifier}\_%{GREEDYDATA:drop}…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1371)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1373)
