# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1511 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1512 --- ## [S3 Restore hanging on 6.4.2](https://discuss.elastic.co/t/s3-restore-hanging-on-6-4-2/153209)
**Author:** [@mgvarley](https://discuss.elastic.co/u/mgvarley)\ **Replies:** 0\ **Last updated:** [October 19, 2018, 6:07pm UTC](https://discuss.elastic.co/t/s3-restore-hanging-on-6-4-2/153209 "2018-10-19T18:07:08Z")
I have a fresh es 6.4.2 instance running on AWS on an i3.xlarge instance storing data on instance storage. I created an index, populated with data (around 30m records, only 2gb on disk) snapshotted successfully and then… --- ## [Data does not get loaded into ElasticSearch](https://discuss.elastic.co/t/data-does-not-get-loaded-into-elasticsearch/153206)
**Author:** [@DevGhdh](https://discuss.elastic.co/u/DevGhdh)\ **Replies:** 3\ **Last updated:** [October 19, 2018, 5:58pm UTC](https://discuss.elastic.co/t/data-does-not-get-loaded-into-elasticsearch/153206 "2018-10-19T17:58:06Z")
I am trying to load into my AWS ElasticSearch module from my EC2 instance but am not able to load any data into my ES - am very new to this and any help is highly appreciated. I created the index below in Kibana: PUT l… --- ## [Search occasionally return empty hits](https://discuss.elastic.co/t/search-occasionally-return-empty-hits/153203)
**Author:** [@khangnguyen](https://discuss.elastic.co/u/khangnguyen)\ **Replies:** 0\ **Last updated:** [October 19, 2018, 4:47pm UTC](https://discuss.elastic.co/t/search-occasionally-return-empty-hits/153203 "2018-10-19T16:47:09Z")
I am observing a non-consistent behavior of ElasticSearch where the same query that yields data would occasionally return empty {u'hits': {u'hits': \[\], u'total': 22724, u'max\_score': 0.0}, u'\_shards': {u'successful': 5,… --- ## [ES Curator Delete Indices Age Filter Fail](https://discuss.elastic.co/t/es-curator-delete-indices-age-filter-fail/151951)
**Author:** [@duhang](https://discuss.elastic.co/u/duhang)\ **Replies:** 3\ **Last updated:** [October 19, 2018, 4:37pm UTC](https://discuss.elastic.co/t/es-curator-delete-indices-age-filter-fail/151951 "2018-10-19T16:37:00Z")
Today, we hit a really strange issue with Elasticsearch Curator 5.5.4 delete\_indices. Here is our action rule: 6: action: delete\_indices options: ignore\_empty\_list: True timeout\_over… --- ## [SQL REST API - Need to return part of a text field](https://discuss.elastic.co/t/sql-rest-api-need-to-return-part-of-a-text-field/153191)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 1\ **Last updated:** [October 19, 2018, 4:38pm UTC](https://discuss.elastic.co/t/sql-rest-api-need-to-return-part-of-a-text-field/153191 "2018-10-19T16:38:14Z")
I'm on ES 6.4 and am trying to write a sql query using the SQL REST API and one of the requirements is that I display a time which is part of a text field. So far I'm not able to find anything like SUBSTRING & PATINDEX e… --- ## [uberAgent Index Rollover - Steps](https://discuss.elastic.co/t/uberagent-index-rollover-steps/151668)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 10\ **Last updated:** [October 19, 2018, 4:30pm UTC](https://discuss.elastic.co/t/uberagent-index-rollover-steps/151668 "2018-10-19T16:30:42Z")
I've been working on rolling over an already established index that we have called uberAgent in our stack and I'm clearly misunderstanding the steps referenced in the Rollover Index docs. I've started out with a basic G… --- ## [Curator not working for me](https://discuss.elastic.co/t/curator-not-working-for-me/152346)
**Author:** [@Wurzelseppi](https://discuss.elastic.co/u/Wurzelseppi)\ **Replies:** 1\ **Last updated:** [October 19, 2018, 4:29pm UTC](https://discuss.elastic.co/t/curator-not-working-for-me/152346 "2018-10-19T16:29:45Z")
Hi everybody, I´m trying the get curator working for me, but I wasn´t successful so far: Here´s what I´m doing: curator.config.yml client: hosts: \[ "10.135.0.14" \] port: 9200 url\_prefix: use\_ssl: False cert… --- ## [Connection Exception: "An existing connection was forcibly closed by the remote host"](https://discuss.elastic.co/t/connection-exception-an-existing-connection-was-forcibly-closed-by-the-remote-host/152952)
**Author:** [@marpa](https://discuss.elastic.co/u/marpa)\ **Replies:** 6\ **Last updated:** [October 19, 2018, 4:16pm UTC](https://discuss.elastic.co/t/connection-exception-an-existing-connection-was-forcibly-closed-by-the-remote-host/152952 "2018-10-19T16:16:09Z")
I'm using the RestHighLevelClient to create indices and mappings on the ES cluster. The problem is that when I attempt to connect to the cluster after a period of inactivity, the first call throws the following: "Elast… --- ## [Common fields](https://discuss.elastic.co/t/common-fields/152980)
**Author:** [@Florent\_Fauvin](https://discuss.elastic.co/u/Florent_Fauvin)\ **Replies:** 3\ **Last updated:** [October 19, 2018, 3:06pm UTC](https://discuss.elastic.co/t/common-fields/152980 "2018-10-19T15:06:59Z")
Hi ! My proxy logs provide "URL" and "user" fields. I would like to discover all the common "URL" between 2 user. Is it possible ? Thank you, Florent --- ## [Mac SHA512 Hash Doesn't Match Download](https://discuss.elastic.co/t/mac-sha512-hash-doesnt-match-download/153101)
**Author:** [@Spellinator](https://discuss.elastic.co/u/Spellinator)\ **Replies:** 3\ **Last updated:** [October 19, 2018, 2:46pm UTC](https://discuss.elastic.co/t/mac-sha512-hash-doesnt-match-download/153101 "2018-10-19T14:46:56Z")
Anyone else encounter this discrepancy? Did Elastic forget to update the SHA512 hash text for comparison with the Oct. 2nd release? Or has the download been corrupted? --- ## [Mapping to dynamic type of index](https://discuss.elastic.co/t/mapping-to-dynamic-type-of-index/153036)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 1\ **Last updated:** [October 19, 2018, 2:24pm UTC](https://discuss.elastic.co/t/mapping-to-dynamic-type-of-index/153036 "2018-10-19T14:24:51Z")
Hi all, I try to map to all my dynamic type a mapping like that: PUT my\_index { "mappings" : { "\_doc": { "properties":{ "magnitude":{"type": "float"}, "phase":{"type": "float"}, "time":{"… --- ## [Unable to put settings for Index template](https://discuss.elastic.co/t/unable-to-put-settings-for-index-template/153156)
**Author:** [@prasdmc](https://discuss.elastic.co/u/prasdmc)\ **Replies:** 6\ **Last updated:** [October 19, 2018, 1:11pm UTC](https://discuss.elastic.co/t/unable-to-put-settings-for-index-template/153156 "2018-10-19T13:11:02Z")
Hi, I tried to apply Index template setting parameter { "ignore\_malformed: true"} and it changes to {"ignore\_malformed": "true" } , from boolean to string. I used kibana console. // PUT \_template/myindex { "order… --- ## [Adding users is failing](https://discuss.elastic.co/t/adding-users-is-failing/153169)
**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Replies:** 3\ **Last updated:** [October 19, 2018, 12:34pm UTC](https://discuss.elastic.co/t/adding-users-is-failing/153169 "2018-10-19T12:34:34Z")
Hi All, ES version 6.4.2 I am executing: bin/elasticsearch-setup-passwords auto But that gives me the following error: Unexpected response code \[404\] from calling GET http://10.80.4.1:9200/\_xpack/security/\_authenti… --- ## [Elasticsearch installation](https://discuss.elastic.co/t/elasticsearch-installation/152969)
**Author:** [@MiddlewareTeam](https://discuss.elastic.co/u/MiddlewareTeam)\ **Replies:** 4\ **Last updated:** [October 19, 2018, 11:48am UTC](https://discuss.elastic.co/t/elasticsearch-installation/152969 "2018-10-19T11:48:25Z")
After installtion Elasticsearch pid for the same getting generated but it gets killed after few seconds throwing error as below: \< \[2018-10-18T10:10:15,136\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] uncaught… --- ## [Aggregate & Count by two fields](https://discuss.elastic.co/t/aggregate-count-by-two-fields/152121)
**Author:** [@esafwan](https://discuss.elastic.co/u/esafwan)\ **Replies:** 1\ **Last updated:** [October 19, 2018, 11:35am UTC](https://discuss.elastic.co/t/aggregate-count-by-two-fields/152121 "2018-10-19T11:35:07Z")
I am having the following data.e songs play\_event In songs the data is as below: song\_id total\_plays 1 2000 2 4532 3 9999 4 2343 And in play event the data is as below: user\_id song\_id 102 1 103 4 102 … --- ## [Strange behaviour when i fetch data from elastic](https://discuss.elastic.co/t/strange-behaviour-when-i-fetch-data-from-elastic/152982)
**Author:** [@Yash\_Sharma](https://discuss.elastic.co/u/Yash_Sharma)\ **Replies:** 5\ **Last updated:** [October 19, 2018, 10:40am UTC](https://discuss.elastic.co/t/strange-behaviour-when-i-fetch-data-from-elastic/152982 "2018-10-19T10:40:41Z")
My dataset in elastic looks like this. Category Scat Sscat Products Measure Price Beverages Soft Drinks Cans Pepsi My Soft Drink 250Ml 250Ml 30 Household Needs Laundry Detergents Detergent Powders Ariel Matic … --- ## [Kibana M/L API validate check error](https://discuss.elastic.co/t/kibana-m-l-api-validate-check-error/152142)
**Author:** [@GibbsKim](https://discuss.elastic.co/u/GibbsKim)\ **Replies:** 5\ **Last updated:** [October 17, 2018, 12:34pm UTC](https://discuss.elastic.co/t/kibana-m-l-api-validate-check-error/152142 "2018-10-17T12:34:04Z")
Hi there. I'm ELK 6.3.1 user. When I tested M/L API of Kibana, cannot understanding thing occur. My data based on MongoDB like below I uploaded data to ES and type check also 'Date'. However, at validate check on K… --- ## [Execute actions in a Watcher independently based on result payload](https://discuss.elastic.co/t/execute-actions-in-a-watcher-independently-based-on-result-payload/152917)
**Author:** [@gautu7](https://discuss.elastic.co/u/gautu7)\ **Replies:** 3\ **Last updated:** [October 19, 2018, 9:05am UTC](https://discuss.elastic.co/t/execute-actions-in-a-watcher-independently-based-on-result-payload/152917 "2018-10-19T09:05:02Z")
Hi, I am trying to execute 2 actions, one when the condition is always met, the other is when condition is met and custom index does not have the data I am looking for. Is there a way to do it in the same Watcher or bot… --- ## [Is case-insensitive sort on keyword aggregation possible ? (ES 6.4)](https://discuss.elastic.co/t/is-case-insensitive-sort-on-keyword-aggregation-possible-es-6-4/153003)
**Author:** [@mmaury](https://discuss.elastic.co/u/mmaury)\ **Replies:** 5\ **Last updated:** [October 19, 2018, 9:04am UTC](https://discuss.elastic.co/t/is-case-insensitive-sort-on-keyword-aggregation-possible-es-6-4/153003 "2018-10-19T09:04:28Z")
Hi all ! I want to set up a case-insensitive sort order in an aggregation, made from a keyword field. Apparently, it wasn't possible with ES 5.2 (see Keyword type: aggregation case insensitive). I tried to deal with i… --- ## [Watcher history index - use case and good practices](https://discuss.elastic.co/t/watcher-history-index-use-case-and-good-practices/153067)
**Author:** [@mpandey](https://discuss.elastic.co/u/mpandey)\ **Replies:** 1\ **Last updated:** [October 19, 2018, 9:03am UTC](https://discuss.elastic.co/t/watcher-history-index-use-case-and-good-practices/153067 "2018-10-19T09:03:28Z")
Hi everyone, I have enabled monitoring on my production cluster and pushing the logs to the monitoring cluster. But I see .watcher-history-7 index is getting created every day in my prod cluster. It would be great someo… --- ## [What is the difference between analyzer and search analyzer?](https://discuss.elastic.co/t/what-is-the-difference-between-analyzer-and-search-analyzer/153141)
**Author:** [@newnewb](https://discuss.elastic.co/u/newnewb)\ **Replies:** 1\ **Last updated:** [October 19, 2018, 8:38am UTC](https://discuss.elastic.co/t/what-is-the-difference-between-analyzer-and-search-analyzer/153141 "2018-10-19T08:38:20Z")
From what I've been reading, index\_analyzer should analyze during indexing, and search\_analyzer when querying. But I still can't wrap my head around this completely, it sounds pretty simple and straightforward, but when … --- ## [Cluster sizing - Time-series data](https://discuss.elastic.co/t/cluster-sizing-time-series-data/153139)
**Author:** [@stevizik](https://discuss.elastic.co/u/stevizik)\ **Replies:** 0\ **Last updated:** [October 19, 2018, 8:15am UTC](https://discuss.elastic.co/t/cluster-sizing-time-series-data/153139 "2018-10-19T08:15:09Z")
Hi all, planning to use Elasticsearch in a production environment for time-series data. More specifically logs from Apache, Nginx and metrics using Metricbeat. I was pretty sure that i would start with 2 nodes, for red… --- ## [How to create if conditional statement in logstash config file](https://discuss.elastic.co/t/how-to-create-if-conditional-statement-in-logstash-config-file/153118)
**Author:** [@Nethaji](https://discuss.elastic.co/u/Nethaji)\ **Replies:** 11\ **Last updated:** [October 19, 2018, 7:53am UTC](https://discuss.elastic.co/t/how-to-create-if-conditional-statement-in-logstash-config-file/153118 "2018-10-19T07:53:56Z")
Hi, how to select the mysql query in elasticsearch config file based on if condition statement? --- ## [What happen about error:can't specify parent if no parent field has been configured](https://discuss.elastic.co/t/what-happen-about-error-cant-specify-parent-if-no-parent-field-has-been-configured/153133)
**Author:** [@weiyou](https://discuss.elastic.co/u/weiyou)\ **Replies:** 0\ **Last updated:** [October 19, 2018, 7:53am UTC](https://discuss.elastic.co/t/what-happen-about-error-cant-specify-parent-if-no-parent-field-has-been-configured/153133 "2018-10-19T07:53:54Z")
kibina version:5.6.4 my commands are: PUT company { "mappings": { "branch":{}, "employee":{ "\_parent": { "type": "branch" } } } } PUT /company/branch/london { "name": "London Westminster", "city": "London… --- ## [Is it required to set MetaSpace Limit for ElasticSearch](https://discuss.elastic.co/t/is-it-required-to-set-metaspace-limit-for-elasticsearch/153109)
**Author:** [@jibsonline](https://discuss.elastic.co/u/jibsonline)\ **Replies:** 31\ **Last updated:** [October 19, 2018, 7:48am UTC](https://discuss.elastic.co/t/is-it-required-to-set-metaspace-limit-for-elasticsearch/153109 "2018-10-19T07:48:14Z")
Hi, My configuration: ES: 6.3.2 Java : 1.8.0\_171 CPU : 8 RAM : 16 GB Java Settings : -Xms12g -Xmx12g -XX:MaxMetaspaceSize=1g -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatin… --- ## [Compare two different indexes and create new ones](https://discuss.elastic.co/t/compare-two-different-indexes-and-create-new-ones/152696)
**Author:** [@JohnOllhorn](https://discuss.elastic.co/u/JohnOllhorn)\ **Replies:** 4\ **Last updated:** [October 19, 2018, 6:46am UTC](https://discuss.elastic.co/t/compare-two-different-indexes-and-create-new-ones/152696 "2018-10-19T06:46:03Z")
HI people, I'm just starting to analyze my data with Elasticsearch, so I have practically no idea -\_- I would like to try text mining based on all the data I have stored. Is the following possible, and if so where do … --- ## [Update\_by\_query not supported for track's operations?](https://discuss.elastic.co/t/update-by-query-not-supported-for-tracks-operations/153090)
**Author:** [@junkoshimane](https://discuss.elastic.co/u/junkoshimane)\ **Replies:** 2\ **Last updated:** [October 19, 2018, 6:33am UTC](https://discuss.elastic.co/t/update-by-query-not-supported-for-tracks-operations/153090 "2018-10-19T06:33:02Z")
Hi all, I have confirmation for "update\_by\_query". It is not supported for track's operations. Is my understanding correct? I have checked both Rally doc and sample tracks within rally-tracks in advance. --- ## [Elasticsearch- How to make the aggregation to return only the key matched](https://discuss.elastic.co/t/elasticsearch-how-to-make-the-aggregation-to-return-only-the-key-matched/153113)
**Author:** [@Alexandra1](https://discuss.elastic.co/u/Alexandra1)\ **Replies:** 0\ **Last updated:** [October 19, 2018, 6:18am UTC](https://discuss.elastic.co/t/elasticsearch-how-to-make-the-aggregation-to-return-only-the-key-matched/153113 "2018-10-19T06:18:50Z")
I'm using elasticsearch 6.2.3 and i'm trying to make a filter on the aggregation to return only the keys matched not all of them from the buckets. Or maybe i need to do a script and iterate over the buckets to get only t… --- ## [How to import mysql data into elastic search](https://discuss.elastic.co/t/how-to-import-mysql-data-into-elastic-search/152085)
**Author:** [@Nethaji](https://discuss.elastic.co/u/Nethaji)\ **Replies:** 13\ **Last updated:** [October 19, 2018, 5:38am UTC](https://discuss.elastic.co/t/how-to-import-mysql-data-into-elastic-search/152085 "2018-10-19T05:38:48Z")
hi, i need to know about how to import the mysql data into elasticsearch, can u people please explain about what are software required for kibana visualize. i'm not clearly understand about procedures, what are steps… --- ## [Desktop Version Suppport Matrix](https://discuss.elastic.co/t/desktop-version-suppport-matrix/152885)
**Author:** [@muthualagappan](https://discuss.elastic.co/u/muthualagappan)\ **Replies:** 5\ **Last updated:** [October 19, 2018, 5:31am UTC](https://discuss.elastic.co/t/desktop-version-suppport-matrix/152885 "2018-10-19T05:31:04Z")
I couldn’t find the list of supported Desktop OS versions for Elasticsearch. It would be better if you can provide information about windows 7, 8, 10, Vista, MAC & Linux version compatibility matrix. This is only about D… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1510) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1512)