# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1485

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1486

---

## [Read time out error](https://discuss.elastic.co/t/read-time-out-error/156453)

<div class="topic-metadata">

**Author:** [@Kulasekaran\_R](https://discuss.elastic.co/u/Kulasekaran_R)\
**Replies:** 2\
**Last updated:** [November 14, 2018, 4:58am UTC](https://discuss.elastic.co/t/read-time-out-error/156453 "2018-11-14T04:58:13Z")

</div>

Hi, We are getting the read time out error while checking the cluster health and the version we are using 6.2.4 Please can you suggest us the reason for the cause, and let us know if any other details are required. Tha…

---

## [Splitting (or not) bulk requests](https://discuss.elastic.co/t/splitting-or-not-bulk-requests/156463)

<div class="topic-metadata">

**Author:** [@kluvi](https://discuss.elastic.co/u/kluvi)\
**Replies:** 1\
**Last updated:** [November 14, 2018, 4:57am UTC](https://discuss.elastic.co/t/splitting-or-not-bulk-requests/156463 "2018-11-14T04:57:31Z")

</div>

Hi. I'm trying to make some optimizations to bulk requests and have one question in mind... I have for example 600 operations (large data, mixed index/update), thats targeted to 3 indices. (100 index operations to inde…

---

## [The equivalent query method to search documents by explicit type, as if specified in the URL (like in ES \< 6.x)](https://discuss.elastic.co/t/the-equivalent-query-method-to-search-documents-by-explicit-type-as-if-specified-in-the-url-like-in-es-6-x/156464)

<div class="topic-metadata">

**Author:** [@juiip](https://discuss.elastic.co/u/juiip)\
**Replies:** 1\
**Last updated:** [November 14, 2018, 4:56am UTC](https://discuss.elastic.co/t/the-equivalent-query-method-to-search-documents-by-explicit-type-as-if-specified-in-the-url-like-in-es-6-x/156464 "2018-11-14T04:56:58Z")

</div>

In Elasticsearch \< 6.x, you would search through documents of a specific type within the query url like so: GET index\_name/type\_name/\_search However, in Elasticsearch 6.x, with the removal of multiple mapping types, th…

---

## [Split Log Message That harvested by filebeat](https://discuss.elastic.co/t/split-log-message-that-harvested-by-filebeat/156577)

<div class="topic-metadata">

**Author:** [@axon](https://discuss.elastic.co/u/axon)\
**Replies:** 1\
**Last updated:** [November 14, 2018, 4:29am UTC](https://discuss.elastic.co/t/split-log-message-that-harvested-by-filebeat/156577 "2018-11-14T04:29:18Z")

</div>

Hi guys, i got problem to splitting the log message that i store into elasticsearch using filebeat. This is my log from kibana i want to split the 'timestamp' and 'info' to single value, and each value of 'message' …

---

## [Daily indices](https://discuss.elastic.co/t/daily-indices/156524)

<div class="topic-metadata">

**Author:** [@Anam1](https://discuss.elastic.co/u/Anam1)\
**Replies:** 1\
**Last updated:** [November 14, 2018, 2:38am UTC](https://discuss.elastic.co/t/daily-indices/156524 "2018-11-14T02:38:34Z")

</div>

Hi I am looking for a Process to Create Daily Indices . That can Generate Logs report On daily basis

---

## [Print User Information within Query Log Statements (Log4j2)](https://discuss.elastic.co/t/print-user-information-within-query-log-statements-log4j2/156541)

<div class="topic-metadata">

**Author:** [@hadingerb](https://discuss.elastic.co/u/hadingerb)\
**Replies:** 1\
**Last updated:** [November 14, 2018, 2:36am UTC](https://discuss.elastic.co/t/print-user-information-within-query-log-statements-log4j2/156541 "2018-11-14T02:36:16Z")

</div>

I am wondering if there is a way to log what user ran a query statement to elasticsearch. Right now I have it set up such that slowlog prints everything, just so I see what is happening, but I do not necessarily know who…

---

## [Tokenize fix protocol non-printable delimiter](https://discuss.elastic.co/t/tokenize-fix-protocol-non-printable-delimiter/156569)

<div class="topic-metadata">

**Author:** [@jpresley](https://discuss.elastic.co/u/jpresley)\
**Replies:** 0\
**Last updated:** [November 14, 2018, 2:33am UTC](https://discuss.elastic.co/t/tokenize-fix-protocol-non-printable-delimiter/156569 "2018-11-14T02:33:35Z")

</div>

The fix protocol uses a non-printable character \\001 as a delimiter with a key value pair separated by =. At this stage, we just need to search for the key value pair, e.g. "35=5". Is there a way to create a tokenizer th…

---

## [Reduce size data logs](https://discuss.elastic.co/t/reduce-size-data-logs/156548)

<div class="topic-metadata">

**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\
**Replies:** 1\
**Last updated:** [November 14, 2018, 2:16am UTC](https://discuss.elastic.co/t/reduce-size-data-logs/156548 "2018-11-14T02:16:03Z")

</div>

I have many Terabyte of logs. There is a solution to create logs aggregates data to have a report with large windows time and avoid to elaborate a big numbers of logs? An example is this: every day 1000 people access t…

---

## [TLS/SSL Encryption and Cert Issues FATAL Error 0906D06C:PEM routines:PEM\_read\_bio:no start line](https://discuss.elastic.co/t/tls-ssl-encryption-and-cert-issues-fatal-error-0906d06c-pem-routinesno-start-line/156538)

<div class="topic-metadata">

**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Replies:** 2\
**Last updated:** [November 14, 2018, 12:49am UTC](https://discuss.elastic.co/t/tls-ssl-encryption-and-cert-issues-fatal-error-0906d06c-pem-routinesno-start-line/156538 "2018-11-14T00:49:53Z")

</div>

I have Elasticsearch on one server named 789 and Kibana on another named 1260. I've currently made it up to the point where x-pack is enabled, xpack.security.transport.ssl settings "seem" ok; that is nothing stops commu…

---

## [Grok pattern for dynamic field](https://discuss.elastic.co/t/grok-pattern-for-dynamic-field/156490)

<div class="topic-metadata">

**Author:** [@satyaban](https://discuss.elastic.co/u/satyaban)\
**Replies:** 1\
**Last updated:** [November 13, 2018, 11:23pm UTC](https://discuss.elastic.co/t/grok-pattern-for-dynamic-field/156490 "2018-11-13T23:23:09Z")

</div>

I have some log file having pattern like Platform = iOS || iOSRegdID = 1034 || Status = Login || LoggedIn successfully Platform = Android || AndroidRegdID = 1024 || Status = Login || LoggedIn successfully Platform =…

---

## [Document Level Security Based On External Data](https://discuss.elastic.co/t/document-level-security-based-on-external-data/156537)

<div class="topic-metadata">

**Author:** [@kmontagne](https://discuss.elastic.co/u/kmontagne)\
**Replies:** 3\
**Last updated:** [November 13, 2018, 9:17pm UTC](https://discuss.elastic.co/t/document-level-security-based-on-external-data/156537 "2018-11-13T21:17:46Z")

</div>

I have a use case where I need to restrict access to documents in an Elasticsearch index based on the user executing the query and one of the attributes in the document. The catch is that this is dynamic and the logic to…

---

## [TSL/SSL failing elastic not working](https://discuss.elastic.co/t/tsl-ssl-failing-elastic-not-working/156299)

<div class="topic-metadata">

**Author:** [@jacobot](https://discuss.elastic.co/u/jacobot)\
**Replies:** 8\
**Last updated:** [November 13, 2018, 5:49pm UTC](https://discuss.elastic.co/t/tsl-ssl-failing-elastic-not-working/156299 "2018-11-13T17:49:50Z")

</div>

I have problem understanding some entries in the elasticsearch.yml file in perticalar the xpack.security.transport.ssl.certificate\_authorities entry elasticsearch.yml cluster.name: "docker-cluster" network.host: 0.0.0…

---

## [Elasticsearch official benchmarking results](https://discuss.elastic.co/t/elasticsearch-official-benchmarking-results/156315)

<div class="topic-metadata">

**Author:** [@rajisankar](https://discuss.elastic.co/u/rajisankar)\
**Replies:** 1\
**Last updated:** [November 13, 2018, 5:36pm UTC](https://discuss.elastic.co/t/elasticsearch-official-benchmarking-results/156315 "2018-11-13T17:36:26Z")

</div>

Hi, I was going through the official Elasticsearch benchmarking results provided online at https://elasticsearch-benchmarks.elastic.co/index.html#tracks/http-logs/nightly/30d I noticed something intriguing. The number…

---

## [AutoComplete Posted Tags](https://discuss.elastic.co/t/autocomplete-posted-tags/156518)

<div class="topic-metadata">

**Author:** [@pavankrishna116](https://discuss.elastic.co/u/pavankrishna116)\
**Replies:** 0\
**Last updated:** [November 13, 2018, 5:20pm UTC](https://discuss.elastic.co/t/autocomplete-posted-tags/156518 "2018-11-13T17:20:06Z")

</div>

I have an Object in that I have a field Name Tags of type string. Ex: "Dubai,India, Australia" I implemeted AutoComplete for this, if I try to search Dubai i.e; Dub will Dubai be shown as a autocomplete tag or the comp…

---

## [Terms aggregation: filter buckets based on parent bucket](https://discuss.elastic.co/t/terms-aggregation-filter-buckets-based-on-parent-bucket/156517)

<div class="topic-metadata">

**Author:** [@vincetrumental](https://discuss.elastic.co/u/vincetrumental)\
**Replies:** 0\
**Last updated:** [November 13, 2018, 5:00pm UTC](https://discuss.elastic.co/t/terms-aggregation-filter-buckets-based-on-parent-bucket/156517 "2018-11-13T17:00:12Z")

</div>

Hello, We are dealing with categorized documents, with a category tree modelized by flattened fields. The category is: product.category.code (example values: R01, R02, R12...) The subcategories and sub-subcategories a…

---

## [How can I save the aggregated results to another index?](https://discuss.elastic.co/t/how-can-i-save-the-aggregated-results-to-another-index/156243)

<div class="topic-metadata">

**Author:** [@fookfook](https://discuss.elastic.co/u/fookfook)\
**Replies:** 8\
**Last updated:** [November 13, 2018, 4:11pm UTC](https://discuss.elastic.co/t/how-can-i-save-the-aggregated-results-to-another-index/156243 "2018-11-13T16:11:38Z")

</div>

Now, I can save the results of the query to another index,like this: POST \_reindex { "source": { "index": "twitter", "query":{ "term":{"author.keyword":"Alex"} } }, "dest": { "index": "new…

---

## [Can't post in the X-pack forum. Post elsewhere?](https://discuss.elastic.co/t/cant-post-in-the-x-pack-forum-post-elsewhere/156499)

<div class="topic-metadata">

**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Replies:** 2\
**Last updated:** [November 13, 2018, 3:57pm UTC](https://discuss.elastic.co/t/cant-post-in-the-x-pack-forum-post-elsewhere/156499 "2018-11-13T15:57:10Z")

</div>

I've got an x-pack related question that I would like to post but the New Topic button is grayed out when I go into the x-pack forums. Are xpack questions supposed to be asked elsewhere and I'm just missing it?

---

## [Filter context within query context](https://discuss.elastic.co/t/filter-context-within-query-context/156171)

<div class="topic-metadata">

**Author:** [@gschneel](https://discuss.elastic.co/u/gschneel)\
**Replies:** 3\
**Last updated:** [November 13, 2018, 3:49pm UTC](https://discuss.elastic.co/t/filter-context-within-query-context/156171 "2018-11-13T15:49:46Z")

</div>

I have an index containing documents which have the object\_type field set to comment or post. For comment I want to search only the text field, for post I want to search both text and post\_title. Essentially I'd like to …

---

## [Error while copying content to a stream](https://discuss.elastic.co/t/error-while-copying-content-to-a-stream/153637)

<div class="topic-metadata">

**Author:** [@HARSHAL\_CHAUDHARI](https://discuss.elastic.co/u/HARSHAL_CHAUDHARI)\
**Replies:** 5\
**Last updated:** [November 13, 2018, 3:38pm UTC](https://discuss.elastic.co/t/error-while-copying-content-to-a-stream/153637 "2018-11-13T15:38:11Z")

</div>

I am trying to push 80mb document to elasticsearch cluster and getting "Error while copying content to a stream". I have also increase heap size as -Xms6g, -Xmx6g still getting an error. Error details as below Origin…

---

## [Limit to indices in a Query](https://discuss.elastic.co/t/limit-to-indices-in-a-query/156487)

<div class="topic-metadata">

**Author:** [@eFiiel](https://discuss.elastic.co/u/eFiiel)\
**Replies:** 2\
**Last updated:** [November 13, 2018, 2:21pm UTC](https://discuss.elastic.co/t/limit-to-indices-in-a-query/156487 "2018-11-13T14:21:17Z")

</div>

I'd like to know if there is a limit to the number of indices I can query using the multi-index API. For example, if a have a cluster that create new small sized indices in a daily basis and I need to query all of them,…

---

## [Document Overwrites](https://discuss.elastic.co/t/document-overwrites/153005)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 2\
**Last updated:** [November 13, 2018, 1:53pm UTC](https://discuss.elastic.co/t/document-overwrites/153005 "2018-11-13T13:53:40Z")

</div>

Hi, If an update to elasticsearch has a duplicate document id and the record gets overwritten, does the overwrite event get logged? Regards, D

---

## [Elasticsearch search speed](https://discuss.elastic.co/t/elasticsearch-search-speed/156411)

<div class="topic-metadata">

**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\
**Replies:** 4\
**Last updated:** [November 13, 2018, 1:14pm UTC](https://discuss.elastic.co/t/elasticsearch-search-speed/156411 "2018-11-13T13:14:14Z")

</div>

I know that elasticsearch has a search time of around one second. Here is an answer. If there is no search condition and there is one condition, is there a difference in search speed?

---

## [Which network.host to use to connect nodes running inside docker-containers on separate machines?](https://discuss.elastic.co/t/which-network-host-to-use-to-connect-nodes-running-inside-docker-containers-on-separate-machines/153204)

<div class="topic-metadata">

**Author:** [@bluecoffee](https://discuss.elastic.co/u/bluecoffee)\
**Replies:** 2\
**Last updated:** [November 13, 2018, 1:12pm UTC](https://discuss.elastic.co/t/which-network-host-to-use-to-connect-nodes-running-inside-docker-containers-on-separate-machines/153204 "2018-11-13T13:12:56Z")

</div>

Hi, I have a question on networking when clustering two ElasticSearch nodes which run on separate machines in docker containers. To enable discovery, I specify 0.0.0.0 as network.host, as I cannot bind to the real IP /…

---

## [Who visited my dashboard](https://discuss.elastic.co/t/who-visited-my-dashboard/156268)

<div class="topic-metadata">

**Author:** [@M.alsioufi](https://discuss.elastic.co/u/M.alsioufi)\
**Replies:** 2\
**Last updated:** [November 13, 2018, 12:59pm UTC](https://discuss.elastic.co/t/who-visited-my-dashboard/156268 "2018-11-13T12:59:46Z")

</div>

I do not know where exactly to post this, but I think it is related to Elasticsearch API. I want to have information about who visited my Kibana Dashbords or called Elasticsearch API. I am working with version 6.4 with…

---

## [Reindexing during index switch](https://discuss.elastic.co/t/reindexing-during-index-switch/156471)

<div class="topic-metadata">

**Author:** [@Animesh\_singh](https://discuss.elastic.co/u/Animesh_singh)\
**Replies:** 0\
**Last updated:** [November 13, 2018, 12:41pm UTC](https://discuss.elastic.co/t/reindexing-during-index-switch/156471 "2018-11-13T12:41:42Z")

</div>

Hello, I am new to elastic search so treat me in that way , currently i am working on elastic search version 6.3 and successfully implemented and deployed elastic search . But i am facing problems when there are changes…

---

## [Slow bulk indexing performance](https://discuss.elastic.co/t/slow-bulk-indexing-performance/156365)

<div class="topic-metadata">

**Author:** [@TDZ](https://discuss.elastic.co/u/TDZ)\
**Replies:** 5\
**Last updated:** [November 13, 2018, 11:56am UTC](https://discuss.elastic.co/t/slow-bulk-indexing-performance/156365 "2018-11-13T11:56:05Z")

</div>

Im using ES 6.4.3 on Google Compute. Im indexing documents where each doc has 6 fields, 4 ints, 2 floats. Index has 5 shards and replication factor of 1. All fields are indexed (didnt add anything in the mapping, only ty…

---

## [Tune on Disk Usage with \_source, doc\_values and store?](https://discuss.elastic.co/t/tune-on-disk-usage-with-source-doc-values-and-store/156383)

<div class="topic-metadata">

**Author:** [@dongfeng](https://discuss.elastic.co/u/dongfeng)\
**Replies:** 4\
**Last updated:** [November 13, 2018, 11:42am UTC](https://discuss.elastic.co/t/tune-on-disk-usage-with-source-doc-values-and-store/156383 "2018-11-13T11:42:15Z")

</div>

I recently do some working with tune on disk usage following the doc: https://www.elastic.co/guide/en/elasticsearch/reference/6.4/tune-for-disk-usage.html. Then I tried store those values in those three settings: with…

---

## [Using of task management API](https://discuss.elastic.co/t/using-of-task-management-api/156439)

<div class="topic-metadata">

**Author:** [@sebnic](https://discuss.elastic.co/u/sebnic)\
**Replies:** 1\
**Last updated:** [November 13, 2018, 11:34am UTC](https://discuss.elastic.co/t/using-of-task-management-api/156439 "2018-11-13T11:34:00Z")

</div>

Hi, I want to cancel a request in progress by using the task API management. But, I don't understand how correlate a request and its tasks? I thank for your help. Best regards. Sébastien Nicaisse

---

## [Elastic hard delete](https://discuss.elastic.co/t/elastic-hard-delete/156432)

<div class="topic-metadata">

**Author:** [@nileshsoor](https://discuss.elastic.co/u/nileshsoor)\
**Replies:** 12\
**Last updated:** [November 13, 2018, 11:23am UTC](https://discuss.elastic.co/t/elastic-hard-delete/156432 "2018-11-13T11:23:17Z")

</div>

Hello, I have created an Index of 200M docs and will be updated frequently. 50M docs will be updated in a month. In short, the Index is read/write heavy in nature. As Elastic/Lucene says it will not do an actual updat…

---

## [Re-indexing](https://discuss.elastic.co/t/re-indexing/156446)

<div class="topic-metadata">

**Author:** [@Animesh\_singh](https://discuss.elastic.co/u/Animesh_singh)\
**Replies:** 1\
**Last updated:** [November 13, 2018, 10:59am UTC](https://discuss.elastic.co/t/re-indexing/156446 "2018-11-13T10:59:08Z")

</div>

Can anyone help me with the java api to check the progress of reindexing in elastic search ?

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1484)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1486)
