# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1472 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1473 --- ## [Snapshot - Correct order to manage them](https://discuss.elastic.co/t/snapshot-correct-order-to-manage-them/158200)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 5\ **Last updated:** [November 26, 2018, 10:57pm UTC](https://discuss.elastic.co/t/snapshot-correct-order-to-manage-them/158200 "2018-11-26T22:57:12Z")
hi all, I would like to understand the correct way to work with snapshots. This is my scenario: NFS space disk: 100 GB First snapshot created: 94 GB. After that I changed more or less 10 GB of documents Tried to crea… --- ## [VisualStudio using .Nest with hierarchy](https://discuss.elastic.co/t/visualstudio-using-nest-with-hierarchy/158158)
**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\ **Replies:** 1\ **Last updated:** [November 26, 2018, 9:59pm UTC](https://discuss.elastic.co/t/visualstudio-using-nest-with-hierarchy/158158 "2018-11-26T21:59:13Z")
Hi all!! First of all, sorry if this topic is an wrong thread. I am using the nest to update or get the documents in ElasticSearch, but now I have a problem and I don't know if is possible solved it I have these class… --- ## [Painless unit testing](https://discuss.elastic.co/t/painless-unit-testing/83317)
**Author:** [@jillesvangurp](https://discuss.elastic.co/u/jillesvangurp)\ **Replies:** 4\ **Last updated:** [November 26, 2018, 8:38pm UTC](https://discuss.elastic.co/t/painless-unit-testing/83317 "2018-11-26T20:38:01Z")
I spent way more time last week than I would have liked to getting a few lines of painless script to work (not quite as painless as advertised). A lot of my pain came from having to relaunch our integration tests repeate… --- ## [Configurer un nombre de shards éggal à1 et une nombre de réplicas égal à0](https://discuss.elastic.co/t/configurer-un-nombre-de-shards-eggal-a1-et-une-nombre-de-replicas-egal-a0/158199)
**Author:** [@nono](https://discuss.elastic.co/u/nono)\ **Replies:** 5\ **Last updated:** [November 26, 2018, 5:21pm UTC](https://discuss.elastic.co/t/configurer-un-nombre-de-shards-eggal-a1-et-une-nombre-de-replicas-egal-a0/158199 "2018-11-26T17:21:56Z")
Je souhaiterais savoir comment faire pour démarrer la stack ELK avec un nombre de shards ègal à 1 et un nombre de réplicas egal à 0 --- ## [Super slow bool query with terms filter array](https://discuss.elastic.co/t/super-slow-bool-query-with-terms-filter-array/156549)
**Author:** [@Teddis](https://discuss.elastic.co/u/Teddis)\ **Replies:** 6\ **Last updated:** [November 26, 2018, 5:11pm UTC](https://discuss.elastic.co/t/super-slow-bool-query-with-terms-filter-array/156549 "2018-11-26T17:11:20Z")
My query is running insanely slow. This one is over 1.3 seconds with just one should matches and I need 3-4 more which can take it up to 14-15 seconds! First I run a store search to yield a set of menuIds to filter again… --- ## [HOW to restore a snapshot from another location](https://discuss.elastic.co/t/how-to-restore-a-snapshot-from-another-location/158208)
**Author:** [@elastic\_mostafa](https://discuss.elastic.co/u/elastic_mostafa)\ **Replies:** 1\ **Last updated:** [November 26, 2018, 5:11pm UTC](https://discuss.elastic.co/t/how-to-restore-a-snapshot-from-another-location/158208 "2018-11-26T17:11:15Z")
Hello , I try to restore a snapshot located on another local reader (B:) The Elasticsearch directory is located on C: here the snapshot content located on B:\\ what spets should I follow to restore this snapshot ? … --- ## [Elastic change ip](https://discuss.elastic.co/t/elastic-change-ip/156426)
**Author:** [@nandha\_88](https://discuss.elastic.co/u/nandha_88)\ **Replies:** 5\ **Last updated:** [November 26, 2018, 4:49pm UTC](https://discuss.elastic.co/t/elastic-change-ip/156426 "2018-11-26T16:49:31Z")
Hi Team, The ELK setup running fine for past 1 years without any issue I tried to change elasticsearch ip from localhost to the public IP XX:XX:XX:XX but it is unsuccessfull. The logstash is not taking up the new ip … --- ## [X-Pack reporting watcher slack](https://discuss.elastic.co/t/x-pack-reporting-watcher-slack/157801)
**Author:** [@Mihail\_Homenko](https://discuss.elastic.co/u/Mihail_Homenko)\ **Replies:** 2\ **Last updated:** [November 26, 2018, 4:47pm UTC](https://discuss.elastic.co/t/x-pack-reporting-watcher-slack/157801 "2018-11-26T16:47:05Z")
Hi, we're using Elastic Cloud SaaS (v6.3.0). Going to periodically send X-Pack reports to a Slack channel using watcher. I could be wrong but, as I understand, we cannot send reporting files in such a way. Here attachme… --- ## [Watch transform works in 6.3/6.4 but fails in 6.5](https://discuss.elastic.co/t/watch-transform-works-in-6-3-6-4-but-fails-in-6-5/157494)
**Author:** [@jakn](https://discuss.elastic.co/u/jakn)\ **Replies:** 2\ **Last updated:** [November 26, 2018, 4:41pm UTC](https://discuss.elastic.co/t/watch-transform-works-in-6-3-6-4-but-fails-in-6-5/157494 "2018-11-26T16:41:11Z")
This watcher code works in 6.3 and 6.4, but not in 6.5 where it results in a "failed to execute watch transform" error. Why? What should it look like to work in 6.5? POST \_xpack/watcher/watch/\_execute { "watch":{ … --- ## [Source of @timestamp field in elasticsearch](https://discuss.elastic.co/t/source-of-timestamp-field-in-elasticsearch/158161)
**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\ **Replies:** 4\ **Last updated:** [November 26, 2018, 4:39pm UTC](https://discuss.elastic.co/t/source-of-timestamp-field-in-elasticsearch/158161 "2018-11-26T16:39:29Z")
I have an elastic setup which consist of Beats, Logstash and Elasticsearch. I just wanna know if what application generates the @timestamp field? Is it generated by elasticsearch at the time it was index? or at the tim… --- ## [I need to concatenate two fields one from date and the other from time and send to Elasticsearc 4.6.4](https://discuss.elastic.co/t/i-need-to-concatenate-two-fields-one-from-date-and-the-other-from-time-and-send-to-elasticsearc-4-6-4/158165)
**Author:** [@Eduardo\_Bertolucci1](https://discuss.elastic.co/u/Eduardo_Bertolucci1)\ **Replies:** 9\ **Last updated:** [November 26, 2018, 4:33pm UTC](https://discuss.elastic.co/t/i-need-to-concatenate-two-fields-one-from-date-and-the-other-from-time-and-send-to-elasticsearc-4-6-4/158165 "2018-11-26T16:33:09Z")
Dear, I need to concatenate two fields to send to Elasticsearc 4.6.4, one field is of date and the other field is time and that field is mapped automatically. Example of a txt file: 0;0;0;0;0;ENTRADA;;;;;;09/06/2014;0… --- ## [String to geo\_point for kafka connect](https://discuss.elastic.co/t/string-to-geo-point-for-kafka-connect/157382)
**Author:** [@markteehan](https://discuss.elastic.co/u/markteehan)\ **Replies:** 1\ **Last updated:** [November 26, 2018, 4:23pm UTC](https://discuss.elastic.co/t/string-to-geo-point-for-kafka-connect/157382 "2018-11-26T16:23:30Z")
I'm using the elastic kafka-connector to push topic contents to an elastic index. As the Confluent schema registry doesn't contain a "geo\_point" type, I'm passing the lat,long as a string; but I've been unable to get it… --- ## [ES 6.3.1 Heap Utilization and Active Search Thread Queue](https://discuss.elastic.co/t/es-6-3-1-heap-utilization-and-active-search-thread-queue/156382)
**Author:** [@haifidelity](https://discuss.elastic.co/u/haifidelity)\ **Replies:** 1\ **Last updated:** [November 26, 2018, 4:21pm UTC](https://discuss.elastic.co/t/es-6-3-1-heap-utilization-and-active-search-thread-queue/156382 "2018-11-26T16:21:27Z")
We recently upgrade a 5.6 cluster to 6.3.1 and started having issues with high heap utilization correlated with Active Search Thread Queue exhaustion/locking/blocking. We are logging queries from kibana and the client si… --- ## [Curious about query differences](https://discuss.elastic.co/t/curious-about-query-differences/156489)
**Author:** [@kurtiskurtis](https://discuss.elastic.co/u/kurtiskurtis)\ **Replies:** 1\ **Last updated:** [November 26, 2018, 3:53pm UTC](https://discuss.elastic.co/t/curious-about-query-differences/156489 "2018-11-26T15:53:03Z")
Just wondering why these two queries give different results. Hoping someone can explain. The one that works { "query": { "bool": { "must\_not": { "nested": { "path": "breadcrumbs", "query": { "exists": { "field"… --- ## [Migrate indexes elasticsearch 1.6 vers 5.6?](https://discuss.elastic.co/t/migrate-indexes-elasticsearch-1-6-vers-5-6/158205)
**Author:** [@aymenoss](https://discuss.elastic.co/u/aymenoss)\ **Replies:** 2\ **Last updated:** [November 26, 2018, 3:50pm UTC](https://discuss.elastic.co/t/migrate-indexes-elasticsearch-1-6-vers-5-6/158205 "2018-11-26T15:50:41Z")
hello, I have elasticsearch 1.6 installed on my machine, I am trying to migrate to 5.6.2, I need to keep my indexes.Have you any solutions ? --- ## [\[SOLVED\] Install a plugin in a distribution started from a Gradle run task?](https://discuss.elastic.co/t/solved-install-a-plugin-in-a-distribution-started-from-a-gradle-run-task/158203)
**Author:** [@cbismuth](https://discuss.elastic.co/u/cbismuth)\ **Replies:** 1\ **Last updated:** [November 26, 2018, 3:30pm UTC](https://discuss.elastic.co/t/solved-install-a-plugin-in-a-distribution-started-from-a-gradle-run-task/158203 "2018-11-26T15:30:27Z")
Hi, I'm working on #34142 and I have some trouble to install the ingest-attachment plugin into a distribution started from a gradlew run task. Plugin is said to be installed from the command line but I can't see it fro… --- ## [Elasticsearch aggregation not hits](https://discuss.elastic.co/t/elasticsearch-aggregation-not-hits/158182)
**Author:** [@limengmingx](https://discuss.elastic.co/u/limengmingx)\ **Replies:** 4\ **Last updated:** [November 26, 2018, 1:47pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-not-hits/158182 "2018-11-26T13:47:44Z")
I want to use aggregation to statistic how many types in my data ,but failed with command , the command hits nothing GET /\_search { "size": 0, "aggs": { "aggs\_name": { "terms": { … --- ## [Support for other geoip db](https://discuss.elastic.co/t/support-for-other-geoip-db/158189)
**Author:** [@prakas](https://discuss.elastic.co/u/prakas)\ **Replies:** 0\ **Last updated:** [November 26, 2018, 1:47pm UTC](https://discuss.elastic.co/t/support-for-other-geoip-db/158189 "2018-11-26T13:47:28Z")
Dear Team, I see that the GeoIP default DB (GeoLite2 City) does not give correct lat,lon for most IP Address that i am using. I dont want to use maxmind paid DBs. Can you please suggest if there are other plugins suppo… --- ## [Can't install elasticsearch in Ubuntu 16.04](https://discuss.elastic.co/t/cant-install-elasticsearch-in-ubuntu-16-04/158123)
**Author:** [@Altiano\_Gerung](https://discuss.elastic.co/u/Altiano_Gerung)\ **Replies:** 2\ **Last updated:** [November 26, 2018, 12:49pm UTC](https://discuss.elastic.co/t/cant-install-elasticsearch-in-ubuntu-16-04/158123 "2018-11-26T12:49:45Z")
I can't install elastic search via the package manager or manually download it. I got this error when installing: Preparing to unpack elasticsearch-6.5.1.deb ... dpkg: error processing archive elasticsearch-6.5.1.deb … --- ## [Not possible to count documents in search query](https://discuss.elastic.co/t/not-possible-to-count-documents-in-search-query/158166)
**Author:** [@dickgoosen](https://discuss.elastic.co/u/dickgoosen)\ **Replies:** 5\ **Last updated:** [November 26, 2018, 12:36pm UTC](https://discuss.elastic.co/t/not-possible-to-count-documents-in-search-query/158166 "2018-11-26T12:36:54Z")
Hi, I am trying to alternate sort documents in Elasticsearch on date and a certain field value, if found then the document is pushed to the top of the results. So a result set needs to be like this: first the most recen… --- ## [Delete 7 days old data everyday](https://discuss.elastic.co/t/delete-7-days-old-data-everyday/156418)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 18\ **Last updated:** [November 26, 2018, 12:36pm UTC](https://discuss.elastic.co/t/delete-7-days-old-data-everyday/156418 "2018-11-26T12:36:28Z")
Hi I want to delete 7 days old data in my index everyday. I have not used time based index. In that scenario, will curator help? If so, I prefer to write java scheduler,can i write a java code using curator? Or Is it on… --- ## [Unable to set custom analyzer on text field](https://discuss.elastic.co/t/unable-to-set-custom-analyzer-on-text-field/158170)
**Author:** [@jannick](https://discuss.elastic.co/u/jannick)\ **Replies:** 2\ **Last updated:** [November 26, 2018, 12:23pm UTC](https://discuss.elastic.co/t/unable-to-set-custom-analyzer-on-text-field/158170 "2018-11-26T12:23:59Z")
Hi, I'm trying to define a custom analyzer for use on a 'text' type field in Elasticsearch 6.3. At index creation time at get an error on the form: Caused by: ElasticsearchException\[Elasticsearch exception \[type=mapper… --- ## [java.io.IOException: java.util.concurrent.TimeoutException: Idle timeout expired](https://discuss.elastic.co/t/java-io-ioexception-java-util-concurrent-timeoutexception-idle-timeout-expired/158167)
**Author:** [@BLZB0B](https://discuss.elastic.co/u/BLZB0B)\ **Replies:** 2\ **Last updated:** [November 26, 2018, 12:10pm UTC](https://discuss.elastic.co/t/java-io-ioexception-java-util-concurrent-timeoutexception-idle-timeout-expired/158167 "2018-11-26T12:10:53Z")
Whilst updating records in the index this morning, our elastic service decided to spit out it's dummy and come to an abrupt halt. In the logs we can see lots of GC activity, and if I'm understanding the numbers correctl… --- ## [Delete old index- curator is not an option](https://discuss.elastic.co/t/delete-old-index-curator-is-not-an-option/158149)
**Author:** [@Parvatayya\_Malimath](https://discuss.elastic.co/u/Parvatayya_Malimath)\ **Replies:** 1\ **Last updated:** [November 26, 2018, 12:09pm UTC](https://discuss.elastic.co/t/delete-old-index-curator-is-not-an-option/158149 "2018-11-26T12:09:24Z")
Hi, I want to delete old index in elastic search on regular basis, and curator is not an option cause. we dont have root permissions on our VMs. no internet connection from the VMs. so is there a quick way, i can creat… --- ## [Elasticsearch query to check last entries](https://discuss.elastic.co/t/elasticsearch-query-to-check-last-entries/157520)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 4\ **Last updated:** [November 26, 2018, 12:06pm UTC](https://discuss.elastic.co/t/elasticsearch-query-to-check-last-entries/157520 "2018-11-26T12:06:28Z")
Hi, I am using ELK GA 6.3.0. I have the below query; "body": { "query": { "bool": { "filter": { "range": { "@timestamp": { "gte": "now-30s/s", "lte": "now/s", "format": "epoch\_millis" } } … --- ## [Not able to start elasticsearch due to failed memory lock](https://discuss.elastic.co/t/not-able-to-start-elasticsearch-due-to-failed-memory-lock/158009)
**Author:** [@frasmd](https://discuss.elastic.co/u/frasmd)\ **Replies:** 11\ **Last updated:** [November 26, 2018, 11:13am UTC](https://discuss.elastic.co/t/not-able-to-start-elasticsearch-due-to-failed-memory-lock/158009 "2018-11-26T11:13:19Z")
I am trying to install elasticstash 6.2.4 using RPMs. When i was tring to start service i was was getting below errors my elasticsearch logs. \[2\] bootstrap checks failed \[1\]: memory locking requested for elasticsearch … --- ## [Order by aggs result will cause nested percentiles return NaN](https://discuss.elastic.co/t/order-by-aggs-result-will-cause-nested-percentiles-return-nan/158141)
**Author:** [@tengattack1](https://discuss.elastic.co/u/tengattack1)\ **Replies:** 1\ **Last updated:** [November 26, 2018, 10:34am UTC](https://discuss.elastic.co/t/order-by-aggs-result-will-cause-nested-percentiles-return-nan/158141 "2018-11-26T10:34:18Z")
request: POST filebeat-6.0.1-2018.11.25/\_search { "size": 0, "query": { "bool": { "filter": \[ { "range": { "@timestamp": { "gte": "1543111691803", … --- ## [GeoIP lat lon fields are always number inspite of mapping it to float](https://discuss.elastic.co/t/geoip-lat-lon-fields-are-always-number-inspite-of-mapping-it-to-float/158040)
**Author:** [@prakas](https://discuss.elastic.co/u/prakas)\ **Replies:** 3\ **Last updated:** [November 26, 2018, 10:04am UTC](https://discuss.elastic.co/t/geoip-lat-lon-fields-are-always-number-inspite-of-mapping-it-to-float/158040 "2018-11-26T10:04:48Z")
My Mapping is as follows: { "mapping": { "doc": { "properties": { "@timestamp": { "type": "date" }, "@version": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore\_above": 256 } } }, "c… --- ## [Cant set action.auto\_create\_index to false](https://discuss.elastic.co/t/cant-set-action-auto-create-index-to-false/158144)
**Author:** [@jacobot](https://discuss.elastic.co/u/jacobot)\ **Replies:** 1\ **Last updated:** [November 26, 2018, 9:42am UTC](https://discuss.elastic.co/t/cant-set-action-auto-create-index-to-false/158144 "2018-11-26T09:42:01Z")
I try PUT /\_all/\_settings { "action.auto\_create\_index": false } and I get this resposne { "error": { "root\_cause": \[ { "type": "cluster\_block\_exception", "reason": "blocked by: \[FORBIDDE… --- ## [One Master Node removes and adds cluster nodes on regular base](https://discuss.elastic.co/t/one-master-node-removes-and-adds-cluster-nodes-on-regular-base/156700)
**Author:** [@Thomas\_Tomski](https://discuss.elastic.co/u/Thomas_Tomski)\ **Replies:** 2\ **Last updated:** [November 26, 2018, 9:39am UTC](https://discuss.elastic.co/t/one-master-node-removes-and-adds-cluster-nodes-on-regular-base/156700 "2018-11-26T09:39:52Z")
Hello, I have an ELS Cluster running with 8 Data nodes and 3 Master only Nodes. One of these Master nodes remove and adds cluster members on regular base. Here is an extract from the log file: Here, the Node gets rem… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1471) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1473)