# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1460 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1461 --- ## [Index Alias stopped receiving data](https://discuss.elastic.co/t/index-alias-stopped-receiving-data/159834)
**Author:** [@rueldu](https://discuss.elastic.co/u/rueldu)\ **Replies:** 2\ **Last updated:** [December 7, 2018, 3:47am UTC](https://discuss.elastic.co/t/index-alias-stopped-receiving-data/159834 "2018-12-07T03:47:27Z")
Hello, i need help. This is my case: I am receiving flow data from two firewalls to the logstash and indexing with the names: Branch1= Index1 Branch2= Index2 Now I have created an index alias: AliasIndex = Branch1… --- ## [Increasing cluster event (put-mapping) timeout from 30s](https://discuss.elastic.co/t/increasing-cluster-event-put-mapping-timeout-from-30s/159821)
**Author:** [@bobbyi](https://discuss.elastic.co/u/bobbyi)\ **Replies:** 1\ **Last updated:** [December 7, 2018, 3:41am UTC](https://discuss.elastic.co/t/increasing-cluster-event-put-mapping-timeout-from-30s/159821 "2018-12-07T03:41:03Z")
While bulk-loading data into a new ES index, I am hitting the "failed to process cluster event (put-mapping) within 30s" error on the first chunk of data. I have read the previous threads on this topic and understand wha… --- ## [Unable to send the Alert using watcher](https://discuss.elastic.co/t/unable-to-send-the-alert-using-watcher/159373)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 1\ **Last updated:** [December 7, 2018, 2:39am UTC](https://discuss.elastic.co/t/unable-to-send-the-alert-using-watcher/159373 "2018-12-07T02:39:58Z")
HI Team, I'm using ELK 6.2 and trying to send advance alert but im getting below error, "id": "send\_email", "type": "email", "status": "failure", "error": { "root\_cause": \[ … --- ## [Want to elasticsearch sql select the decimal column output more decimal place](https://discuss.elastic.co/t/want-to-elasticsearch-sql-select-the-decimal-column-output-more-decimal-place/158274)
**Author:** [@zxc654951](https://discuss.elastic.co/u/zxc654951)\ **Replies:** 11\ **Last updated:** [December 7, 2018, 1:22am UTC](https://discuss.elastic.co/t/want-to-elasticsearch-sql-select-the-decimal-column-output-more-decimal-place/158274 "2018-12-07T01:22:15Z")
I am using elastic 6.4, and using /\_xpack/sql to output some columns. Due to use order by command, have to average number columns that output just have 1 decimal place. In my case, I use my local vbox with ubuntu 18.04… --- ## [Ignore failures while performing \_reindex](https://discuss.elastic.co/t/ignore-failures-while-performing-reindex/159822)
**Author:** [@gnumoksha](https://discuss.elastic.co/u/gnumoksha)\ **Replies:** 0\ **Last updated:** [December 7, 2018, 12:03am UTC](https://discuss.elastic.co/t/ignore-failures-while-performing-reindex/159822 "2018-12-07T00:03:57Z")
I just want to create a new index in order to apply this pipeline: PUT \_ingest/pipeline/foobar { "description": "Converts foobar data into json", "processors": \[ { "gsub": { "field": "message", "pattern": """\[fo… --- ## [Rollup Index is Empty](https://discuss.elastic.co/t/rollup-index-is-empty/159820)
**Author:** [@Supernomad](https://discuss.elastic.co/u/Supernomad)\ **Replies:** 0\ **Last updated:** [December 6, 2018, 11:58pm UTC](https://discuss.elastic.co/t/rollup-index-is-empty/159820 "2018-12-06T23:58:41Z")
I have added a new rollup job: { "config": { "id": "testing-rollups", "index\_pattern": "metricbeat-\*", "rollup\_index": "rollup-works", "cron": "0 \* \* \* \* ?", "groups": { "date\_histogram": { … --- ## [New ES User - Creating Persistent Field Mappings on Newly Created Indices](https://discuss.elastic.co/t/new-es-user-creating-persistent-field-mappings-on-newly-created-indices/159815)
**Author:** [@KenS](https://discuss.elastic.co/u/KenS)\ **Replies:** 0\ **Last updated:** [December 6, 2018, 11:37pm UTC](https://discuss.elastic.co/t/new-es-user-creating-persistent-field-mappings-on-newly-created-indices/159815 "2018-12-06T23:37:25Z")
We are using an ELK stack (6.2.4) as a centralized logging platform. All our remote servers are using Filebeat or WinLogBeat to push their logs to the stack. Each different operating system puts their log entries in to… --- ## [How many shards are hit when using day-wise indices](https://discuss.elastic.co/t/how-many-shards-are-hit-when-using-day-wise-indices/159645)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 6\ **Last updated:** [December 6, 2018, 11:01pm UTC](https://discuss.elastic.co/t/how-many-shards-are-hit-when-using-day-wise-indices/159645 "2018-12-06T23:01:09Z")
Say, I'm using day-wise indices with 5 shards and 1 replica. In kibana dashboards, when I fire a dashboard for last 7-days which in turn fires a number of underlying visualisations in that dashboard, the queries - do the… --- ## [How to replace field with another field value for entire index?](https://discuss.elastic.co/t/how-to-replace-field-with-another-field-value-for-entire-index/159810)
**Author:** [@BHAVIK\_CHITRODA](https://discuss.elastic.co/u/BHAVIK_CHITRODA)\ **Replies:** 0\ **Last updated:** [December 6, 2018, 9:45pm UTC](https://discuss.elastic.co/t/how-to-replace-field-with-another-field-value-for-entire-index/159810 "2018-12-06T21:45:55Z")
Hi, I am new to Elasticsearch and still trying to figure the APIs for update and modifying documents/data on elasticsearch indexes. I forwarded certain logs from Logstash to ES indexes. My logstash file is pretty comple… --- ## [Elasticsearch geo distance query exclude water bodies](https://discuss.elastic.co/t/elasticsearch-geo-distance-query-exclude-water-bodies/159808)
**Author:** [@rahrah](https://discuss.elastic.co/u/rahrah)\ **Replies:** 0\ **Last updated:** [December 6, 2018, 9:23pm UTC](https://discuss.elastic.co/t/elasticsearch-geo-distance-query-exclude-water-bodies/159808 "2018-12-06T21:23:17Z")
--- ## [Error in Elasticsearch After upgrading from 5.6 - 6.4](https://discuss.elastic.co/t/error-in-elasticsearch-after-upgrading-from-5-6-6-4/159806)
**Author:** [@Anam1](https://discuss.elastic.co/u/Anam1)\ **Replies:** 0\ **Last updated:** [December 6, 2018, 9:12pm UTC](https://discuss.elastic.co/t/error-in-elasticsearch-after-upgrading-from-5-6-6-4/159806 "2018-12-06T21:12:22Z")
After I upgrade ELK stack from 5.6 to 6.4 I am getting an error in Elasticsearch. Dec 06 12:00:47 logstash-sf elasticsearch\[24855\]: at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:294) Dec 06 12:00… --- ## [How do I know if I have open source vs basic](https://discuss.elastic.co/t/how-do-i-know-if-i-have-open-source-vs-basic/159776)
**Author:** [@hadingerb](https://discuss.elastic.co/u/hadingerb)\ **Replies:** 3\ **Last updated:** [December 6, 2018, 8:50pm UTC](https://discuss.elastic.co/t/how-do-i-know-if-i-have-open-source-vs-basic/159776 "2018-12-06T20:50:11Z")
So I downloaded elasticsearch (clicked on the download for opensource/basic), and I am wondering which one I have. The download button is the same for both, and there are features that basic has that open source doesnt. … --- ## [Re-indexing past day-wise indices to reduce no of shards](https://discuss.elastic.co/t/re-indexing-past-day-wise-indices-to-reduce-no-of-shards/159648)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 4\ **Last updated:** [December 6, 2018, 8:38pm UTC](https://discuss.elastic.co/t/re-indexing-past-day-wise-indices-to-reduce-no-of-shards/159648 "2018-12-06T20:38:09Z")
In our ES 5.x cluster, we've 5 shards and 1 replica and we use day-wise indices with a retention of 150 days (150 indices at any time). The pri.store.size for a day-wise index is around 17 GB and with 1 replica the tota… --- ## [Elastic-Search Heap issues](https://discuss.elastic.co/t/elastic-search-heap-issues/159790)
**Author:** [@suresh\_itha](https://discuss.elastic.co/u/suresh_itha)\ **Replies:** 1\ **Last updated:** [December 6, 2018, 7:22pm UTC](https://discuss.elastic.co/t/elastic-search-heap-issues/159790 "2018-12-06T19:22:58Z")
Hi Team, We are facing heap issues in elastic search 1.7.3 version for all the data nodes. Please find the below steps what we have implemented in my cluster. Step-1: We have total 16 data nodes and each node is having… --- ## [What are pros & cons to implementing elasticsearch on Azure from either the Azure Template or from scratch?](https://discuss.elastic.co/t/what-are-pros-cons-to-implementing-elasticsearch-on-azure-from-either-the-azure-template-or-from-scratch/159787)
**Author:** [@bbauer](https://discuss.elastic.co/u/bbauer)\ **Replies:** 0\ **Last updated:** [December 6, 2018, 7:02pm UTC](https://discuss.elastic.co/t/what-are-pros-cons-to-implementing-elasticsearch-on-azure-from-either-the-azure-template-or-from-scratch/159787 "2018-12-06T19:02:31Z")
We're implementing elasticsearch on Azure and were looking for some insight to the best method. We want to use linux. --- ## [ES goes on RED with master node left](https://discuss.elastic.co/t/es-goes-on-red-with-master-node-left/159682)
**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\ **Replies:** 3\ **Last updated:** [December 6, 2018, 6:44pm UTC](https://discuss.elastic.co/t/es-goes-on-red-with-master-node-left/159682 "2018-12-06T18:44:32Z")
I have ES 2.4 cluster with one data node and one master node. Pumping the traffic for perf testing. Everything went fine for 2 days and 3rd day master goes weird and doesnt connect to datanode. when i restart the master … --- ## [DSL range query omits valid hits](https://discuss.elastic.co/t/dsl-range-query-omits-valid-hits/159782)
**Author:** [@ceekyay](https://discuss.elastic.co/u/ceekyay)\ **Replies:** 0\ **Last updated:** [December 6, 2018, 6:34pm UTC](https://discuss.elastic.co/t/dsl-range-query-omits-valid-hits/159782 "2018-12-06T18:34:11Z")
I'm making this below query in Kibana (Dev Tools tab). The event I'm specifically looking for has the timestamp (unix epoch) of "1544061136965" (17:52:16 PST). The problem is, when I do a range query as below, with a tim… --- ## [Why doesn't Curator follow the same versioning as ELK?](https://discuss.elastic.co/t/why-doesnt-curator-follow-the-same-versioning-as-elk/159770)
**Author:** [@DarrienG](https://discuss.elastic.co/u/DarrienG)\ **Replies:** 2\ **Last updated:** [December 6, 2018, 6:34pm UTC](https://discuss.elastic.co/t/why-doesnt-curator-follow-the-same-versioning-as-elk/159770 "2018-12-06T18:34:04Z")
It is clearly updated regularly, the last update happened like 20-odd days ago. If curator isn't dead, why isn't the version numbering the same as all of the other ELK products? This makes zero sense and is very conf… --- ## [Rest High level client performance](https://discuss.elastic.co/t/rest-high-level-client-performance/159735)
**Author:** [@gzeskas](https://discuss.elastic.co/u/gzeskas)\ **Replies:** 3\ **Last updated:** [December 6, 2018, 6:32pm UTC](https://discuss.elastic.co/t/rest-high-level-client-performance/159735 "2018-12-06T18:32:32Z")
Hi I'm doing some research how to utilize elasticsearch cluster in best way. I have written simple java application that is using Rest High level client and setup of 2 elasticsearch nodes with 1 index that contains 2 … --- ## [Scripted field in Elastic aggregation using High level Client](https://discuss.elastic.co/t/scripted-field-in-elastic-aggregation-using-high-level-client/158923)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 2\ **Last updated:** [December 6, 2018, 6:05pm UTC](https://discuss.elastic.co/t/scripted-field-in-elastic-aggregation-using-high-level-client/158923 "2018-12-06T18:05:55Z")
How do i create a aggregation with scripted field using Elastic High level client ? Kibana query like below GET itil\_incidents/\_search { "size": 0, "aggs": { "create\_date": { "date\_histogram": { "… --- ## [UIPATH\_KIBANA](https://discuss.elastic.co/t/uipath-kibana/159771)
**Author:** [@Syed\_Pasha](https://discuss.elastic.co/u/Syed_Pasha)\ **Replies:** 0\ **Last updated:** [December 6, 2018, 4:57pm UTC](https://discuss.elastic.co/t/uipath-kibana/159771 "2018-12-06T16:57:23Z")
Dear Team, Could someone share the insights of starting uo UIPATH Orchestraor logs with ELK.. i am just about to integrate need expertise assistance, Assistance over phone would be great! --- ## [How to edit elasticsearch.yml file on cloud.elastic](https://discuss.elastic.co/t/how-to-edit-elasticsearch-yml-file-on-cloud-elastic/159695)
**Author:** [@Darshan\_Turakhia](https://discuss.elastic.co/u/Darshan_Turakhia)\ **Replies:** 3\ **Last updated:** [December 6, 2018, 4:33pm UTC](https://discuss.elastic.co/t/how-to-edit-elasticsearch-yml-file-on-cloud-elastic/159695 "2018-12-06T16:33:03Z")
I am trying to edit elasticsearch.yml file on cloud.elastic but I'm unable to find a way to edit. Please kindly help me how to connect to cloud.elastic via an FTP application. --- ## [How to change java when X-Pack is not supported and Machine Learning is not available for \[windows-x86\]?](https://discuss.elastic.co/t/how-to-change-java-when-x-pack-is-not-supported-and-machine-learning-is-not-available-for-windows-x86/159734)
**Author:** [@MikeE](https://discuss.elastic.co/u/MikeE)\ **Replies:** 1\ **Last updated:** [December 6, 2018, 4:28pm UTC](https://discuss.elastic.co/t/how-to-change-java-when-x-pack-is-not-supported-and-machine-learning-is-not-available-for-windows-x86/159734 "2018-12-06T16:28:40Z")
Hi there, I'm trying Elasticseach 6.5.2 on Windows 10 following this link but I have a problem with X-Pack and Machine Learning. When I start elasticsearch.bat file , I have an exception : (base) C:\\Users\\antoi\\Docu… --- ## [Corrupt Index Exception Guidance](https://discuss.elastic.co/t/corrupt-index-exception-guidance/159593)
**Author:** [@rohail\_kidwai1](https://discuss.elastic.co/u/rohail_kidwai1)\ **Replies:** 1\ **Last updated:** [December 6, 2018, 4:06pm UTC](https://discuss.elastic.co/t/corrupt-index-exception-guidance/159593 "2018-12-06T16:06:19Z")
I'm looking for guidance on what my options are when I have a corrupt index. I found this out when trying to snapshot and it failed due to a corrupt index. For more Info: https://discuss.elastic.co/t/understanding-ind… --- ## [How to assign index to a group of nodes](https://discuss.elastic.co/t/how-to-assign-index-to-a-group-of-nodes/159742)
**Author:** [@Jason\_Wee](https://discuss.elastic.co/u/Jason_Wee)\ **Replies:** 2\ **Last updated:** [December 6, 2018, 2:41pm UTC](https://discuss.elastic.co/t/how-to-assign-index-to-a-group-of-nodes/159742 "2018-12-06T14:41:51Z")
i have a cluster with 6 nodes, is it possible to have 3 of them assigned indices/shards of a,b whilst another 3 nodes assigned indices/shards of c,d? if possible, can you give the documentation how this can be accomplish… --- ## [ES shuts down automatically](https://discuss.elastic.co/t/es-shuts-down-automatically/159716)
**Author:** [@Neeraj\_Pandey](https://discuss.elastic.co/u/Neeraj_Pandey)\ **Replies:** 4\ **Last updated:** [December 6, 2018, 2:39pm UTC](https://discuss.elastic.co/t/es-shuts-down-automatically/159716 "2018-12-06T14:39:58Z")
I have installed elasticsearch 6.5.2 and I when I start this it gets shut down automatically. Here is the log https://gist.github.com/np97190/9904ac644ff43787ede677a747d9824d I could not find the exact reason why is it… --- ## [Most efficient way to do a lookup (\<100 items) in a painless script](https://discuss.elastic.co/t/most-efficient-way-to-do-a-lookup-100-items-in-a-painless-script/159718)
**Author:** [@Jamalarm](https://discuss.elastic.co/u/Jamalarm)\ **Replies:** 2\ **Last updated:** [December 6, 2018, 1:00pm UTC](https://discuss.elastic.co/t/most-efficient-way-to-do-a-lookup-100-items-in-a-painless-script/159718 "2018-12-06T13:00:38Z")
Hi, I need to do some aggregations on a scripted term. The term will be calculated from a keyword field stored in my index. The script will need to: Grab the first substring before a whitespace character Check it aga… --- ## [Discard documents when indexing with rules](https://discuss.elastic.co/t/discard-documents-when-indexing-with-rules/159696)
**Author:** [@xavierfacq](https://discuss.elastic.co/u/xavierfacq)\ **Replies:** 4\ **Last updated:** [December 6, 2018, 12:59pm UTC](https://discuss.elastic.co/t/discard-documents-when-indexing-with-rules/159696 "2018-12-06T12:59:26Z")
Hi, Is it possible to add something like a "rule" into the index mapping/description or whatever configuration that could to resolve the following trick: We want to inject lot of data into a dedicated indice, but we wo… --- ## [Failed to create index](https://discuss.elastic.co/t/failed-to-create-index/159662)
**Author:** [@inandi](https://discuss.elastic.co/u/inandi)\ **Replies:** 11\ **Last updated:** [December 6, 2018, 12:39pm UTC](https://discuss.elastic.co/t/failed-to-create-index/159662 "2018-12-06T12:39:58Z")
using Ubuntu 16.04 rev1.conf file input { file { path =\> "/home/skills34/es/templetes/test1.txt" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" codec =\> "json" } }… --- ## [Elastic Cloud SAML Logout loop](https://discuss.elastic.co/t/elastic-cloud-saml-logout-loop/159193)
**Author:** [@hogbinj](https://discuss.elastic.co/u/hogbinj)\ **Replies:** 2\ **Last updated:** [December 6, 2018, 12:09pm UTC](https://discuss.elastic.co/t/elastic-cloud-saml-logout-loop/159193 "2018-12-06T12:09:58Z")
I've set up my SAML authentication. Login works like a champ now, however the logout is stuck in a loop, as set out in theSAML Logout section I'm testing Okta & OneLogin and both need the Logout to be signed. How do y… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1459) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1461)