# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1496 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1497 --- ## [Spanish Lanugage support](https://discuss.elastic.co/t/spanish-lanugage-support/155109)
**Author:** [@ralimaye](https://discuss.elastic.co/u/ralimaye)\ **Replies:** 3\ **Last updated:** [November 2, 2018, 12:34pm UTC](https://discuss.elastic.co/t/spanish-lanugage-support/155109 "2018-11-02T12:34:25Z")
Hi experts, I have spanish ticket data in csv file. is there any API I can use to translate this data ? Is it available in current elastic product.? --- ## [Find length of array in that doc](https://discuss.elastic.co/t/find-length-of-array-in-that-doc/155120)
**Author:** [@GitSpree23](https://discuss.elastic.co/u/GitSpree23)\ **Replies:** 3\ **Last updated:** [November 2, 2018, 12:34pm UTC](https://discuss.elastic.co/t/find-length-of-array-in-that-doc/155120 "2018-11-02T12:34:14Z")
I have a field in my index which is an integer array. I want to add another field which contains the count of the number of elements. Even an API call that gives the count is fine. I have found something relevant : "s… --- ## [Replica shards with a negative impact in percolation](https://discuss.elastic.co/t/replica-shards-with-a-negative-impact-in-percolation/155169)
**Author:** [@Bernt\_Rostad](https://discuss.elastic.co/u/Bernt_Rostad)\ **Replies:** 0\ **Last updated:** [November 2, 2018, 12:24pm UTC](https://discuss.elastic.co/t/replica-shards-with-a-negative-impact-in-percolation/155169 "2018-11-02T12:24:52Z")
I'm not sure if this is a bug or a misunderstood feature of percolation but over the last few months I've been trying to optimize a percolation solution, based on a percolator index with roughly 18200 queries. I know yo… --- ## [When I use normalizer in field, it can't work in group by of SQL statement?](https://discuss.elastic.co/t/when-i-use-normalizer-in-field-it-cant-work-in-group-by-of-sql-statement/154953)
**Author:** [@Angela\_Hsieh](https://discuss.elastic.co/u/Angela_Hsieh)\ **Replies:** 3\ **Last updated:** [November 2, 2018, 12:12pm UTC](https://discuss.elastic.co/t/when-i-use-normalizer-in-field-it-cant-work-in-group-by-of-sql-statement/154953 "2018-11-02T12:12:47Z")
I want the query can be insensitive, so set up the mapping has normalizer when i use group by , it can't work... Here is index: { "settings": { "analysis": { "normalizer": { "my\_normalizer": { "type": "custom", … --- ## [Applying analyzer to certain field in mapping](https://discuss.elastic.co/t/applying-analyzer-to-certain-field-in-mapping/155159)
**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\ **Replies:** 0\ **Last updated:** [November 2, 2018, 11:34am UTC](https://discuss.elastic.co/t/applying-analyzer-to-certain-field-in-mapping/155159 "2018-11-02T11:34:56Z")
Hello. I have defined analyzer for stripping off the html tags from data ingested by logstash by rss feed and outputted to Elasticsearch. My index settings are: GET rss-news { "rss-news": { "aliases": {}, "mappin… --- ## [Does Elasticsearch ensures that all the replica shards are distributed in other data nodes?](https://discuss.elastic.co/t/does-elasticsearch-ensures-that-all-the-replica-shards-are-distributed-in-other-data-nodes/155149)
**Author:** [@melvilgit](https://discuss.elastic.co/u/melvilgit)\ **Replies:** 2\ **Last updated:** [November 2, 2018, 11:02am UTC](https://discuss.elastic.co/t/does-elasticsearch-ensures-that-all-the-replica-shards-are-distributed-in-other-data-nodes/155149 "2018-11-02T11:02:56Z")
Does Elasticsearch automatically ensures that all the replica shards are distributed in other data nodes irrespective of the number of shards and no of data nodes ? Say I have 3 ES nodes and For an Index A , I have 10 … --- ## [Exact Match](https://discuss.elastic.co/t/exact-match/155020)
**Author:** [@Euan](https://discuss.elastic.co/u/Euan)\ **Replies:** 6\ **Last updated:** [November 2, 2018, 10:39am UTC](https://discuss.elastic.co/t/exact-match/155020 "2018-11-02T10:39:21Z")
Hey all How could I in elastic search do my search in such a way that only if both fields given are a match will a result be given? Like an AND statement. Here is what I am trying to do (minified code): var searchResu… --- ## ["compare" : { "ctx.payload.hits.total" : { "gt" : 5}} is not working](https://discuss.elastic.co/t/compare-ctx-payload-hits-total-gt-5-is-not-working/154376)
**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\ **Replies:** 4\ **Last updated:** [November 2, 2018, 9:58am UTC](https://discuss.elastic.co/t/compare-ctx-payload-hits-total-gt-5-is-not-working/154376 "2018-11-02T09:58:07Z")
Hi Team, "compare" : { "ctx.payload.hits.total" : { "gt" : 5}} is not working for me while creating the watch alert. We are getting mail alerts if we remove the below block: "condition" : { "compare" : { "ctx.payload.… --- ## [Why match query and common term query acts different?](https://discuss.elastic.co/t/why-match-query-and-common-term-query-acts-different/155142)
**Author:** [@david30907d](https://discuss.elastic.co/u/david30907d)\ **Replies:** 0\ **Last updated:** [November 2, 2018, 9:56am UTC](https://discuss.elastic.co/t/why-match-query-and-common-term-query-acts-different/155142 "2018-11-02T09:56:15Z")
GET /\_search { "query": { "match" : { "message" : "this is a test", "cutoff\_frequency" : 0.001, "minimum\_should\_match": 2, "operator" : "or" } } } {… --- ## [Error while sending data from mysql to Logstash](https://discuss.elastic.co/t/error-while-sending-data-from-mysql-to-logstash/154908)
**Author:** [@emma1](https://discuss.elastic.co/u/emma1)\ **Replies:** 3\ **Last updated:** [November 2, 2018, 9:32am UTC](https://discuss.elastic.co/t/error-while-sending-data-from-mysql-to-logstash/154908 "2018-11-02T09:32:15Z")
Hi All, below is my config file for sending data from mysql to logstash input { jdbc { jdbc\_driver\_library =\> "C:/ELK/logstash-6.2.3/mysql-connector-java-5.1.47/mysql-connector-java-5.1.47-bin.jar" jdbc\_driver\_class… --- ## [Indexing text using Java Rest Client](https://discuss.elastic.co/t/indexing-text-using-java-rest-client/154156)
**Author:** [@Mariusz\_Pala](https://discuss.elastic.co/u/Mariusz_Pala)\ **Replies:** 1\ **Last updated:** [November 2, 2018, 9:23am UTC](https://discuss.elastic.co/t/indexing-text-using-java-rest-client/154156 "2018-11-02T09:23:56Z")
Hi, I am indexing data using Java High Rest Client and have a question. Everything works fine, but I have a very long text that need to be indexed and it should be indexed in the same way as the attachment ingestion wor… --- ## [Watcher won't send email action after enabling the security in ELK](https://discuss.elastic.co/t/watcher-wont-send-email-action-after-enabling-the-security-in-elk/154653)
**Author:** [@bab](https://discuss.elastic.co/u/bab)\ **Replies:** 1\ **Last updated:** [November 2, 2018, 9:19am UTC](https://discuss.elastic.co/t/watcher-wont-send-email-action-after-enabling-the-security-in-elk/154653 "2018-11-02T09:19:38Z")
Hi, i have a problem to send email action using watcher after i install x-pack security on all ELk element (Es, kiba...), befor i didn't have a x-pack security enable i was able to send emails but now i get this below … --- ## [Dynamic Variable in Query - Match Phrase](https://discuss.elastic.co/t/dynamic-variable-in-query-match-phrase/154263)
**Author:** [@lochinvar](https://discuss.elastic.co/u/lochinvar)\ **Replies:** 1\ **Last updated:** [November 2, 2018, 9:14am UTC](https://discuss.elastic.co/t/dynamic-variable-in-query-match-phrase/154263 "2018-11-02T09:14:51Z")
I was using kibana watcher for monitoring and alerts. In Watcher i have used the user defined variable in the condition script(painless script) and it is working fine. Is there any ways i can use a variable in http reque… --- ## [How do Elasticsearch calculate term freq when using CutoffFrequency in CommonTermsQuery?](https://discuss.elastic.co/t/how-do-elasticsearch-calculate-term-freq-when-using-cutofffrequency-in-commontermsquery/155126)
**Author:** [@david30907d](https://discuss.elastic.co/u/david30907d)\ **Replies:** 1\ **Last updated:** [November 2, 2018, 9:10am UTC](https://discuss.elastic.co/t/how-do-elasticsearch-calculate-term-freq-when-using-cutofffrequency-in-commontermsquery/155126 "2018-11-02T09:10:23Z")
I'm trying to understand how CutoffFrequency works. And i found that the frequency calculated by elastic is not what i assumed. here's my env: i builded my index with 1 shard , 0 replicas my query written in GO: e… --- ## [Return a few log lines before and after an ELASTIC watcher match query](https://discuss.elastic.co/t/return-a-few-log-lines-before-and-after-an-elastic-watcher-match-query/154412)
**Author:** [@mark-otcxn](https://discuss.elastic.co/u/mark-otcxn)\ **Replies:** 3\ **Last updated:** [November 2, 2018, 9:05am UTC](https://discuss.elastic.co/t/return-a-few-log-lines-before-and-after-an-elastic-watcher-match-query/154412 "2018-11-02T09:05:04Z")
I have an ELASTIC watcher that searches for "ERROR" in logs, and then sends an e-mail when this happens. Is it possible for the watcher to return, say the next 2 or 3 lines after the ERROR. This could help give additiona… --- ## [TLS for 5.6.12 version](https://discuss.elastic.co/t/tls-for-5-6-12-version/155125)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 1\ **Last updated:** [November 2, 2018, 7:51am UTC](https://discuss.elastic.co/t/tls-for-5-6-12-version/155125 "2018-11-02T07:51:34Z")
Would like to know for 5.6.12 version whether the TLS setup is mandatory for elasticsearch cluster if we have the subscription and using the X-Pack Security. --- ## [Elasicsearch- Indexing documents based on change of sequence of characters](https://discuss.elastic.co/t/elasicsearch-indexing-documents-based-on-change-of-sequence-of-characters/155112)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 2\ **Last updated:** [November 2, 2018, 6:11am UTC](https://discuss.elastic.co/t/elasicsearch-indexing-documents-based-on-change-of-sequence-of-characters/155112 "2018-11-02T06:11:11Z")
I have a set of documents that has to be indexed in the following way: fs$#56s as fs,$#,56,s FSand-hgfh as fsand,-,hgfh Is there a way to do so? Thank you! --- ## [Not able to install elasticsearch in Windows 7](https://discuss.elastic.co/t/not-able-to-install-elasticsearch-in-windows-7/154095)
**Author:** [@arunvinodh](https://discuss.elastic.co/u/arunvinodh)\ **Replies:** 3\ **Last updated:** [November 2, 2018, 5:02am UTC](https://discuss.elastic.co/t/not-able-to-install-elasticsearch-in-windows-7/154095 "2018-11-02T05:02:51Z")
Hi team, Can you help me to resolve this error. C:\\Users\\foxin\\Downloads\\elasticsearch-6.4.2\\elasticsearch-6.4.2\\bin\>elasticsearch could not find java; set JAVA\_HOME or ensure java is in PATH I have successfully set … --- ## [How to use use query with Suggester](https://discuss.elastic.co/t/how-to-use-use-query-with-suggester/154973)
**Author:** [@vnitdeepak](https://discuss.elastic.co/u/vnitdeepak)\ **Replies:** 0\ **Last updated:** [November 1, 2018, 8:09am UTC](https://discuss.elastic.co/t/how-to-use-use-query-with-suggester/154973 "2018-11-01T08:09:46Z")
I want suggestion for the given text and the entitlement . How can I achieve this "text" : "ora" "entitlements" : \[ "entitlement#1","entitlement#2"\] POST autocompletetest/\_search { "suggest": { "song-suggest" : { … --- ## [Confirming exact definition of "red" and "yellow" for index status for a multi data node cluster](https://discuss.elastic.co/t/confirming-exact-definition-of-red-and-yellow-for-index-status-for-a-multi-data-node-cluster/154933)
**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\ **Replies:** 3\ **Last updated:** [November 2, 2018, 2:33am UTC](https://discuss.elastic.co/t/confirming-exact-definition-of-red-and-yellow-for-index-status-for-a-multi-data-node-cluster/154933 "2018-11-02T02:33:41Z")
Hi! Is this correct: RE: the GET \_cat/indices? api: if it returns red for an index (on a multi data node cluster), it means that at least one primary shard and all its replicas are unavailable, and if it returns yellow… --- ## [Need help for Indexes rotation policy](https://discuss.elastic.co/t/need-help-for-indexes-rotation-policy/155092)
**Author:** [@valentin2105](https://discuss.elastic.co/u/valentin2105)\ **Replies:** 2\ **Last updated:** [November 2, 2018, 12:22am UTC](https://discuss.elastic.co/t/need-help-for-indexes-rotation-policy/155092 "2018-11-02T00:22:28Z")
Hello, I currently use a 3 node ES-cluster for store my Web servers' logs. 3 Master/Data node with same config. I added a tag to the third node that got more disk than the two other. Filebeat indexes are created each… --- ## [Ordering by a field value in Terms Aggregation](https://discuss.elastic.co/t/ordering-by-a-field-value-in-terms-aggregation/155100)
**Author:** [@Karthik\_ek](https://discuss.elastic.co/u/Karthik_ek)\ **Replies:** 0\ **Last updated:** [November 2, 2018, 1:57am UTC](https://discuss.elastic.co/t/ordering-by-a-field-value-in-terms-aggregation/155100 "2018-11-02T01:57:52Z")
Hi, I'm looking to order the search results by specific field values. I'm not able to do it using the Aggregation Order. When I tried using the scripted metric, I'm getting below error: org.elasticsearch.search.aggrega… --- ## [Elasticsearch 6.4.2 crashes after some time running perfectly fine](https://discuss.elastic.co/t/elasticsearch-6-4-2-crashes-after-some-time-running-perfectly-fine/155091)
**Author:** [@orivera](https://discuss.elastic.co/u/orivera)\ **Replies:** 4\ **Last updated:** [November 2, 2018, 12:46am UTC](https://discuss.elastic.co/t/elasticsearch-6-4-2-crashes-after-some-time-running-perfectly-fine/155091 "2018-11-02T00:46:09Z")
Elasticsearch dies after some time running perfectly fine, it leaves no entry in the elasticsearch error but there is JVM error which I uploaded here: https://gist.github.com/ofrivera/ece25bbd7d451c85241ca45517b6b85d Th… --- ## [How do I index an \_id with + symbol?](https://discuss.elastic.co/t/how-do-i-index-an-id-with-symbol/154946)
**Author:** [@Apollo](https://discuss.elastic.co/u/Apollo)\ **Replies:** 6\ **Last updated:** [November 2, 2018, 12:18am UTC](https://discuss.elastic.co/t/how-do-i-index-an-id-with-symbol/154946 "2018-11-02T00:18:41Z")
Making the switch from ES2 to ES6 and having a serious problem. Whenever I index a record with an id that contains a + symbol, Elasticsearch replaces the + with a space. The “id” field is correct, but the “\_id” field c… --- ## [Field level security for writes](https://discuss.elastic.co/t/field-level-security-for-writes/155072)
**Author:** [@Rich\_Sutton](https://discuss.elastic.co/u/Rich_Sutton)\ **Replies:** 2\ **Last updated:** [November 2, 2018, 12:13am UTC](https://discuss.elastic.co/t/field-level-security-for-writes/155072 "2018-11-02T00:13:58Z")
Are there any plans for adding field-level security for writes? I would like to allow users in a specific role to add information to existing documents, but only under a certain top level field. All other fields should … --- ## [Finding Registry in Elk](https://discuss.elastic.co/t/finding-registry-in-elk/155086)
**Author:** [@Ralph\_Lawrence](https://discuss.elastic.co/u/Ralph_Lawrence)\ **Replies:** 3\ **Last updated:** [November 1, 2018, 11:49pm UTC](https://discuss.elastic.co/t/finding-registry-in-elk/155086 "2018-11-01T23:49:03Z")
Is there a way registry events can be located in ELK using Winlogbeats for windows. event\_id does not seem to have a true representation. --- ## [Uneven Primary Shard Distribution](https://discuss.elastic.co/t/uneven-primary-shard-distribution/152755)
**Author:** [@Sam\_Wang](https://discuss.elastic.co/u/Sam_Wang)\ **Replies:** 4\ **Last updated:** [November 1, 2018, 11:27pm UTC](https://discuss.elastic.co/t/uneven-primary-shard-distribution/152755 "2018-11-01T23:27:26Z")
Hi, I'm experiencing a problem to do with uneven primary shards across datanodes, for some reason, all the primary shards are just going to the same datanode, regardless all the datanodes are running on the same version … --- ## [Retry with RestHighLevelClient sync](https://discuss.elastic.co/t/retry-with-resthighlevelclient-sync/155087)
**Author:** [@ashokm](https://discuss.elastic.co/u/ashokm)\ **Replies:** 0\ **Last updated:** [November 1, 2018, 10:08pm UTC](https://discuss.elastic.co/t/retry-with-resthighlevelclient-sync/155087 "2018-11-01T22:08:29Z")
Hi, Can someone provide a sample code on how to retry index on rejection using RestHighLevelClient bulk sync operation? Thank in advance Ashok --- ## [Setting number\_of\_replicas value to 0 makes the cluster unavailable](https://discuss.elastic.co/t/setting-number-of-replicas-value-to-0-makes-the-cluster-unavailable/155083)
**Author:** [@vnallamothu](https://discuss.elastic.co/u/vnallamothu)\ **Replies:** 3\ **Last updated:** [November 1, 2018, 9:29pm UTC](https://discuss.elastic.co/t/setting-number-of-replicas-value-to-0-makes-the-cluster-unavailable/155083 "2018-11-01T21:29:05Z")
I've installed elasticsearch 5.4 and kibana 5.4 on a single node cluster. after creating index, my shard status went to yellow. So, I thought to edit the number\_of\_replicas value in elasticsearch.yml to "0". Then I am ge… --- ## [Error while using ingest attachment plugin on some docs](https://discuss.elastic.co/t/error-while-using-ingest-attachment-plugin-on-some-docs/153836)
**Author:** [@7ca884569f2642e2c488](https://discuss.elastic.co/u/7ca884569f2642e2c488)\ **Replies:** 12\ **Last updated:** [November 1, 2018, 9:20pm UTC](https://discuss.elastic.co/t/error-while-using-ingest-attachment-plugin-on-some-docs/153836 "2018-11-01T21:20:30Z")
Hello, I have some problems with ingest attachment plugin. It works most of the time but fails on some docs (.docx) with exception 2018-10-24T15:00:44,595\]\[DEBUG\]\[o.e.a.b.TransportBulkAction\] \[kz-el03-node2\] failed to e… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1495) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1497)