# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1603 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1604 --- ## [Reindex and Garbage Collection](https://discuss.elastic.co/t/reindex-and-garbage-collection/141712)
**Author:** [@mw\_jko](https://discuss.elastic.co/u/mw_jko)\ **Replies:** 5\ **Last updated:** [July 26, 2018, 9:34am UTC](https://discuss.elastic.co/t/reindex-and-garbage-collection/141712 "2018-07-26T09:34:33Z")
Hi there, we run a very simple docker based 1node-setup of elastic 5.4.x to aggregate some logfiles. We have the luxury problem (which probably a lot of ppl have at some point) that elastic is working out of the box wit… --- ## [\[Watcher\]If else like conditionals?](https://discuss.elastic.co/t/watcher-if-else-like-conditionals/141719)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 1\ **Last updated:** [July 26, 2018, 9:30am UTC](https://discuss.elastic.co/t/watcher-if-else-like-conditionals/141719 "2018-07-26T09:30:19Z")
Hi, Is it possible to use some form of conditionals to run different conditionals and actions based on a query? e.g. I want to write a query that returns a SUM for field A and returns true/false for field B and C and t… --- ## [Zipping log files once they reach a threshold of 1 Gb](https://discuss.elastic.co/t/zipping-log-files-once-they-reach-a-threshold-of-1-gb/141078)
**Author:** [@Sakshi\_Aggarwal](https://discuss.elastic.co/u/Sakshi_Aggarwal)\ **Replies:** 7\ **Last updated:** [July 26, 2018, 9:21am UTC](https://discuss.elastic.co/t/zipping-log-files-once-they-reach-a-threshold-of-1-gb/141078 "2018-07-26T09:21:42Z")
Hello Everyone! We are taking logs from around 50 machines throughout the day . So we need to reduce the size of the log files. I wanted to ask if we can zip the log files once they become so many in number that they r… --- ## [Counting occurrences of logs ignoring some numerical values](https://discuss.elastic.co/t/counting-occurrences-of-logs-ignoring-some-numerical-values/141722)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 0\ **Last updated:** [July 26, 2018, 9:07am UTC](https://discuss.elastic.co/t/counting-occurrences-of-logs-ignoring-some-numerical-values/141722 "2018-07-26T09:07:50Z")
Hi, We are storing our product logs into Elasticsearch. I want to count the number of occurrences of each log to find the high runners. Now problem is many logs contain some session specific numerical ID. Due to that th… --- ## [Rollup API Autogenerated Index Strategy](https://discuss.elastic.co/t/rollup-api-autogenerated-index-strategy/140740)
**Author:** [@Domenico\_Raimondi](https://discuss.elastic.co/u/Domenico_Raimondi)\ **Replies:** 2\ **Last updated:** [July 26, 2018, 8:48am UTC](https://discuss.elastic.co/t/rollup-api-autogenerated-index-strategy/140740 "2018-07-26T08:48:20Z")
Hello, In my team, we've been enthusiastically using the new Rollup API. It provides the functionality that we were waiting for! However, once we started using it, we noticed that the autogenerated \_id for our new roll… --- ## [Email alert configuration](https://discuss.elastic.co/t/email-alert-configuration/141496)
**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\ **Replies:** 2\ **Last updated:** [July 26, 2018, 8:31am UTC](https://discuss.elastic.co/t/email-alert-configuration/141496 "2018-07-26T08:31:50Z")
I am looking for an open source solution for alerting needs. I checked watcher they talk about installing a license: Is the license GPL ? How to install watcher in windows machine ? Thanks, Raghuveer --- ## [How to do join in aggregation result](https://discuss.elastic.co/t/how-to-do-join-in-aggregation-result/141717)
**Author:** [@cool\_arun](https://discuss.elastic.co/u/cool_arun)\ **Replies:** 0\ **Last updated:** [July 26, 2018, 8:32am UTC](https://discuss.elastic.co/t/how-to-do-join-in-aggregation-result/141717 "2018-07-26T08:32:41Z")
I perform aggregation query that return result like this one { aggregation : { top\_books : { buckets: \[ { key: "book-543', doc\_count: 20 } ..... \] } } } Now i want all the details for the key "book-5… --- ## [Enabling watcher](https://discuss.elastic.co/t/enabling-watcher/141695)
**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\ **Replies:** 0\ **Last updated:** [July 26, 2018, 6:15am UTC](https://discuss.elastic.co/t/enabling-watcher/141695 "2018-07-26T06:15:24Z")
I am using 6.3 version of ELK. Using the following configuration in elasticsearch.yml : What is the username for elasticsearch ? Can i set in yml like bootstrap.username=myname ? I need to enable the email option with … --- ## [Most popular term for lowercase forms (multivalue field)](https://discuss.elastic.co/t/most-popular-term-for-lowercase-forms-multivalue-field/141707)
**Author:** [@Vladimir\_Khil](https://discuss.elastic.co/u/Vladimir_Khil)\ **Replies:** 0\ **Last updated:** [July 26, 2018, 7:22am UTC](https://discuss.elastic.co/t/most-popular-term-for-lowercase-forms-multivalue-field/141707 "2018-07-26T07:22:12Z")
Hello! Is there a way of retrieving most frequent term for all distinct lowercase values of some multivalue string field in Elastic? I need to create a dictionary matching lowercase forms to their most popular uppercase… --- ## [I meet a problem when i reindex](https://discuss.elastic.co/t/i-meet-a-problem-when-i-reindex/141498)
**Author:** [@chenzilong444](https://discuss.elastic.co/u/chenzilong444)\ **Replies:** 4\ **Last updated:** [July 26, 2018, 6:59am UTC](https://discuss.elastic.co/t/i-meet-a-problem-when-i-reindex/141498 "2018-07-26T06:59:20Z")
POST \_reindex { "source": { "index": "logstash(2018.04.14)" }, "dest": { "index": "logstash(2018.34.2)" } } { "statusCode": 504, "error": "Gateway Time-out", "message": "Client request timeout" } … --- ## [Need Help for ES query](https://discuss.elastic.co/t/need-help-for-es-query/141415)
**Author:** [@Kalyan\_Dey](https://discuss.elastic.co/u/Kalyan_Dey)\ **Replies:** 1\ **Last updated:** [July 26, 2018, 6:43am UTC](https://discuss.elastic.co/t/need-help-for-es-query/141415 "2018-07-26T06:43:06Z")
I want to know the respective query in elastic search for a SQl query with LIKE in where clause as follows: WHERE LIKE 'brown fox%' WHERE LIKE '%brown fox%' WHERE LIKE '%brown fox' Thanks --- ## [ESRally: Problems cloning tracks git repo](https://discuss.elastic.co/t/esrally-problems-cloning-tracks-git-repo/141645)
**Author:** [@Justin\_Wells](https://discuss.elastic.co/u/Justin_Wells)\ **Replies:** 1\ **Last updated:** [July 26, 2018, 6:14am UTC](https://discuss.elastic.co/t/esrally-problems-cloning-tracks-git-repo/141645 "2018-07-26T06:14:53Z")
I am attempting to run a rally benchmark from a benchmark coordinator using the configuration described in "Benchmarking a remote cluster" in https://esrally.readthedocs.io/en/stable/recipes.html. Operating system is Ama… --- ## [More\_like\_this not returning right results](https://discuss.elastic.co/t/more-like-this-not-returning-right-results/141693)
**Author:** [@anandjoshi77](https://discuss.elastic.co/u/anandjoshi77)\ **Replies:** 0\ **Last updated:** [July 26, 2018, 5:58am UTC](https://discuss.elastic.co/t/more-like-this-not-returning-right-results/141693 "2018-07-26T05:58:52Z")
Hello team, I'm exploring more\_like\_this option but not getting expected results. I have data from application logs and I want to find all entries which have "backup" in them. Now this can be present in multiple ways … --- ## [How to write bool query in completion suggestor?](https://discuss.elastic.co/t/how-to-write-bool-query-in-completion-suggestor/141691)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 0\ **Last updated:** [July 26, 2018, 5:20am UTC](https://discuss.elastic.co/t/how-to-write-bool-query-in-completion-suggestor/141691 "2018-07-26T05:20:07Z")
Hi All, I have occurred a situation where we need to get suggestions based text they entered and we need to authentication id.How to achieve this. Thanks in advance, Kartheek Gummaluri --- ## [Frequency of cluster state update](https://discuss.elastic.co/t/frequency-of-cluster-state-update/141667)
**Author:** [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\ **Replies:** 2\ **Last updated:** [July 26, 2018, 4:26am UTC](https://discuss.elastic.co/t/frequency-of-cluster-state-update/141667 "2018-07-26T04:26:54Z")
Hi, I was going through one of discussion for "Only send diff of cluster state instead of full cluster state" I would like to know what is frequency Master node update cluster state and other nodes … --- ## [Plug-in elasticsearch in react](https://discuss.elastic.co/t/plug-in-elasticsearch-in-react/141677)
**Author:** [@mkaczor](https://discuss.elastic.co/u/mkaczor)\ **Replies:** 1\ **Last updated:** [July 26, 2018, 4:05am UTC](https://discuss.elastic.co/t/plug-in-elasticsearch-in-react/141677 "2018-07-26T04:05:47Z")
Hello, I would like to know how I can create a plug-in elasticsearch for a web application in react. Thank for help? --- ## [What I am wrong with this query?](https://discuss.elastic.co/t/what-i-am-wrong-with-this-query/141681)
**Author:** [@Moon](https://discuss.elastic.co/u/Moon)\ **Replies:** 1\ **Last updated:** [July 26, 2018, 4:04am UTC](https://discuss.elastic.co/t/what-i-am-wrong-with-this-query/141681 "2018-07-26T04:04:01Z")
I want to filter data =\> DataType : T bucket =\> Term : PLANT\_CD I wrote "query" : { "bool":{ "must" : \[{ "match" : { "DataType" : "T" } }\] }, "aggs": { "plants": { 'terms': {"field": "PLANT\_CD"} } } } Bu… --- ## [Recovery network rate](https://discuss.elastic.co/t/recovery-network-rate/141533)
**Author:** [@boboo](https://discuss.elastic.co/u/boboo)\ **Replies:** 0\ **Last updated:** [July 25, 2018, 9:18am UTC](https://discuss.elastic.co/t/recovery-network-rate/141533 "2018-07-25T09:18:45Z")
when my clusters with the defalut value of indices.recovery.max\_bytes\_per\_sec, i found the network rate almost stay at the level of 150Mb/s while i restart one node. After i set it as 10mb,i got a network rate level of … --- ## [Masters leave for no apparent reason](https://discuss.elastic.co/t/masters-leave-for-no-apparent-reason/141505)
**Author:** [@jazoom](https://discuss.elastic.co/u/jazoom)\ **Replies:** 2\ **Last updated:** [July 25, 2018, 11:13pm UTC](https://discuss.elastic.co/t/masters-leave-for-no-apparent-reason/141505 "2018-07-25T23:13:51Z")
I have been using Elasticsearch for several years now. Last year I tried to update to 5.x but had heaps of issues getting it to even run in a Docker environment. I stayed with 2.4 up until now and everything has been run… --- ## [Syncing data between two different clusters of different version](https://discuss.elastic.co/t/syncing-data-between-two-different-clusters-of-different-version/141467)
**Author:** [@ravi432](https://discuss.elastic.co/u/ravi432)\ **Replies:** 5\ **Last updated:** [July 25, 2018, 9:16pm UTC](https://discuss.elastic.co/t/syncing-data-between-two-different-clusters-of-different-version/141467 "2018-07-25T21:16:46Z")
Hi , Is there a way to sync data between two different clusters which are running under different versions..? If not is there a way to get any alerts from elastic search when there is an insert,update or delete..? a… --- ## [Cannot import name BoolQuery, swagger-client python](https://discuss.elastic.co/t/cannot-import-name-boolquery-swagger-client-python/141612)
**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\ **Replies:** 1\ **Last updated:** [July 25, 2018, 9:01pm UTC](https://discuss.elastic.co/t/cannot-import-name-boolquery-swagger-client-python/141612 "2018-07-25T21:01:28Z")
Hi, I'm trying out the swagger client to connect with ECE using python. For now I'm attempting this on my windows workstation running python 2.7. The swagger-client installs but trying to import it yields this error. … --- ## [Mongodb output plugin](https://discuss.elastic.co/t/mongodb-output-plugin/141270)
**Author:** [@bossi6of9](https://discuss.elastic.co/u/bossi6of9)\ **Replies:** 2\ **Last updated:** [July 25, 2018, 8:54pm UTC](https://discuss.elastic.co/t/mongodb-output-plugin/141270 "2018-07-25T20:54:30Z")
Hi, Are there any benchmarks on the elasticsearch output plugins? For example, I want to export my data to mongodb, but I wonder if the plugin can handle the volume. --- ## [GeoJson GeometryCollection failed to parse](https://discuss.elastic.co/t/geojson-geometrycollection-failed-to-parse/141441)
**Author:** [@Artem\_Sh](https://discuss.elastic.co/u/Artem_Sh)\ **Replies:** 1\ **Last updated:** [July 25, 2018, 8:27pm UTC](https://discuss.elastic.co/t/geojson-geometrycollection-failed-to-parse/141441 "2018-07-25T20:27:45Z")
{'index': {'status': 400, 'data': {'slug': 'kohma', 'timezone': 'Europe/Moscow', 'population\_type': 15000, 'region': 'Ивановская область, Россия', 'declension\_rus': {'pretext': 'в Кохме', 'gen': 'Кохмы', 'nom': 'Кохма', … --- ## [Not able to take snapshots](https://discuss.elastic.co/t/not-able-to-take-snapshots/141538)
**Author:** [@Rahulkumar](https://discuss.elastic.co/u/Rahulkumar)\ **Replies:** 1\ **Last updated:** [July 25, 2018, 8:24pm UTC](https://discuss.elastic.co/t/not-able-to-take-snapshots/141538 "2018-07-25T20:24:47Z")
Hi, I am getting below error: Deployment health issues: There is a problem with the master node Snapshots out of date (latest success was 4 days ago) Something went wrong with trying to take a snapshot. Failed to load … --- ## [Shapes throw parse errors](https://discuss.elastic.co/t/shapes-throw-parse-errors/140715)
**Author:** [@Destroy666](https://discuss.elastic.co/u/Destroy666)\ **Replies:** 2\ **Last updated:** [July 25, 2018, 8:17pm UTC](https://discuss.elastic.co/t/shapes-throw-parse-errors/140715 "2018-07-25T20:17:59Z")
Hello, I'm not sure if that's your validation or a 5.6.x bug and I should upgrade, but the following shapes throw errors: https://pastebin.com/LeJpNish https://pastebin.com/ZyB4shHb https://pastebin.com/pdyP8pSR T… --- ## [Essql](https://discuss.elastic.co/t/essql/141298)
**Author:** [@wenfang6](https://discuss.elastic.co/u/wenfang6)\ **Replies:** 1\ **Last updated:** [July 25, 2018, 8:09pm UTC](https://discuss.elastic.co/t/essql/141298 "2018-07-25T20:09:52Z")
does ESSQL support this syntax like（select c1,c2,count(\*) from index1 group by c1,c2）in elasticsearch6.3 --- ## [Inter-node communication protocol used in Elasticsearch?](https://discuss.elastic.co/t/inter-node-communication-protocol-used-in-elasticsearch/141656)
**Author:** [@abzter10690](https://discuss.elastic.co/u/abzter10690)\ **Replies:** 1\ **Last updated:** [July 25, 2018, 8:05pm UTC](https://discuss.elastic.co/t/inter-node-communication-protocol-used-in-elasticsearch/141656 "2018-07-25T20:05:24Z")
What is the application level (Layer 7) inter-node communication protocol used in Elasticsearch? Where can I get more info about that protocol? --- ## [Efficient time-based multi index searches in ES6](https://discuss.elastic.co/t/efficient-time-based-multi-index-searches-in-es6/138423)
**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\ **Replies:** 4\ **Last updated:** [July 25, 2018, 8:03pm UTC](https://discuss.elastic.co/t/efficient-time-based-multi-index-searches-in-es6/138423 "2018-07-25T20:03:45Z")
I recently upgraded from ES 1.7 to 6.3, so have a lot to learn. I thought i head read in some documentation that ES is smart enough to know what indices to query based on timestamp fields. If i wanted to search 7/1 thru… --- ## [Java REST API - No way to perform filters on aggregations?](https://discuss.elastic.co/t/java-rest-api-no-way-to-perform-filters-on-aggregations/141658)
**Author:** [@rarestg](https://discuss.elastic.co/u/rarestg)\ **Replies:** 0\ **Last updated:** [July 25, 2018, 8:01pm UTC](https://discuss.elastic.co/t/java-rest-api-no-way-to-perform-filters-on-aggregations/141658 "2018-07-25T20:01:19Z")
I'm trying to do two things: Filter results with a geo-bounding box Filter results within a timeframe Query for an aggregation, the average of a certain data field I've been able to do this with the following POST: … --- ## [How best create parent child relationship](https://discuss.elastic.co/t/how-best-create-parent-child-relationship/141618)
**Author:** [@emanresu](https://discuss.elastic.co/u/emanresu)\ **Replies:** 0\ **Last updated:** [July 25, 2018, 3:51pm UTC](https://discuss.elastic.co/t/how-best-create-parent-child-relationship/141618 "2018-07-25T15:51:47Z")
I have two real time streams. One contains news articles and the other comments about the same articles. I'd like to create a parent-child relationship between each article and that articles comments. There is no common … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1602) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1604)