# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1615 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1616 --- ## [SSL validation issue while sending alerts via email](https://discuss.elastic.co/t/ssl-validation-issue-while-sending-alerts-via-email/140289)
**Author:** [@madou23](https://discuss.elastic.co/u/madou23)\ **Replies:** 0\ **Last updated:** [July 17, 2018, 9:06am UTC](https://discuss.elastic.co/t/ssl-validation-issue-while-sending-alerts-via-email/140289 "2018-07-17T09:06:42Z")
Hi all, I'm trying to send alerts via email. This is the configuration that I added to elasticsearch.yml xpack.notification.email.account: exchange\_account: profile: outlook email\_defaults: … --- ## [Which mapping is appropriate for url field?](https://discuss.elastic.co/t/which-mapping-is-appropriate-for-url-field/140287)
**Author:** [@Olexandr](https://discuss.elastic.co/u/Olexandr)\ **Replies:** 0\ **Last updated:** [July 17, 2018, 9:00am UTC](https://discuss.elastic.co/t/which-mapping-is-appropriate-for-url-field/140287 "2018-07-17T09:00:05Z")
I have a field where I store urls. Should it be mapped as keyword or there is something more specific to urls? --- ## [Problem when changing : data.path](https://discuss.elastic.co/t/problem-when-changing-data-path/140275)
**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\ **Replies:** 1\ **Last updated:** [July 17, 2018, 8:14am UTC](https://discuss.elastic.co/t/problem-when-changing-data-path/140275 "2018-07-17T08:14:53Z")
Hi, I don't know why my cluster stoped working when I change my data.path. PS : I kept the rights when I copied the file /var/lib/elasticsearch logs node 1 : \[WARN \]\[o.e.g.DanglingIndicesState\] \[network-1\] \[\[.kibana/… --- ## [Esrally run failed for "Cannot find documents-2.json.bz2"](https://discuss.elastic.co/t/esrally-run-failed-for-cannot-find-documents-2-json-bz2/137109)
**Author:** [@Jessica254](https://discuss.elastic.co/u/Jessica254)\ **Replies:** 53\ **Last updated:** [July 17, 2018, 7:33am UTC](https://discuss.elastic.co/t/esrally-run-failed-for-cannot-find-documents-2-json-bz2/137109 "2018-07-17T07:33:43Z")
it report errors as following: \*\*\*\*\*\* Use this pipeline only if you are aware of the tradeoffs. \*\*\*\*\*\* \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* Watch your step! \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* \[INFO\] Racing on track \[geonames\], cha… --- ## [Aggregation doesn't work with decimal numbers](https://discuss.elastic.co/t/aggregation-doesnt-work-with-decimal-numbers/140261)
**Author:** [@camabeh](https://discuss.elastic.co/u/camabeh)\ **Replies:** 0\ **Last updated:** [July 17, 2018, 7:13am UTC](https://discuss.elastic.co/t/aggregation-doesnt-work-with-decimal-numbers/140261 "2018-07-17T07:13:22Z")
Hello, I am having problem with aggregations. They don't seem to work with decimal numbers - it always returns 0. If I change system.filesystem.used.pct to system.filesystem.files, it works. Both system.filesystem.use… --- ## [Set up watcher for alerting high CPU usage by some process](https://discuss.elastic.co/t/set-up-watcher-for-alerting-high-cpu-usage-by-some-process/139353)
**Author:** [@Oleksandr\_Novozhylov](https://discuss.elastic.co/u/Oleksandr_Novozhylov)\ **Replies:** 3\ **Last updated:** [July 17, 2018, 7:05am UTC](https://discuss.elastic.co/t/set-up-watcher-for-alerting-high-cpu-usage-by-some-process/139353 "2018-07-17T07:05:26Z")
Hello! I'm trying to create a Watcher Alert that will be triggered when some process on a node uses over 0.95% of CPU for the last one hour. Here is an example of my config: { "trigger": { "schedule": { "i… --- ## [Heartbeat monitor.status watch giving "Fielddata is disabled on text fields by default."](https://discuss.elastic.co/t/heartbeat-monitor-status-watch-giving-fielddata-is-disabled-on-text-fields-by-default/140196)
**Author:** [@Rob2](https://discuss.elastic.co/u/Rob2)\ **Replies:** 2\ **Last updated:** [July 17, 2018, 6:56am UTC](https://discuss.elastic.co/t/heartbeat-monitor-status-watch-giving-fielddata-is-disabled-on-text-fields-by-default/140196 "2018-07-17T06:56:53Z")
I had to remove my elasticsearch data folder to get by a Kibana issue that's not allowing me to get back into the Watches management section. After getting back into the Watches management section, I copy-pasted in the … --- ## [Performance concerns on using UUIDv4 generated ID](https://discuss.elastic.co/t/performance-concerns-on-using-uuidv4-generated-id/139775)
**Author:** [@Ali\_Nazemian](https://discuss.elastic.co/u/Ali_Nazemian)\ **Replies:** 5\ **Last updated:** [July 17, 2018, 6:56am UTC](https://discuss.elastic.co/t/performance-concerns-on-using-uuidv4-generated-id/139775 "2018-07-17T06:56:50Z")
I was wondering if there are any performance concerns on using UUIDv4 generated ID at the client side? I've got an application that sends documents with a randomly generated id. I've noticed the ID is generated by using … --- ## [Snmp trap alert action](https://discuss.elastic.co/t/snmp-trap-alert-action/139975)
**Author:** [@MikaelLindstrom](https://discuss.elastic.co/u/MikaelLindstrom)\ **Replies:** 3\ **Last updated:** [July 17, 2018, 6:55am UTC](https://discuss.elastic.co/t/snmp-trap-alert-action/139975 "2018-07-17T06:55:14Z")
Has anyone implemented an SNMP trap action for the X-pack watcher to allow SNMP traps to be sent out if thresholds are crossed? Our customer uses HP openview and traps to monitor all nodes and would like to integrate th… --- ## [Adding node configurations to elasticsearch.yml file doesn't work](https://discuss.elastic.co/t/adding-node-configurations-to-elasticsearch-yml-file-doesnt-work/140257)
**Author:** [@redhd0410](https://discuss.elastic.co/u/redhd0410)\ **Replies:** 1\ **Last updated:** [July 17, 2018, 6:54am UTC](https://discuss.elastic.co/t/adding-node-configurations-to-elasticsearch-yml-file-doesnt-work/140257 "2018-07-17T06:54:48Z")
Hello. I'm new to elasticsearch and I'm trying to change the configuration file. So I uncommented cluster.name and node.name lines and renamed them, which work fine after waiting for a few seconds. However, I tried addi… --- ## [Posting my watcher body to a server via webhook](https://discuss.elastic.co/t/posting-my-watcher-body-to-a-server-via-webhook/140179)
**Author:** [@max17](https://discuss.elastic.co/u/max17)\ **Replies:** 2\ **Last updated:** [July 17, 2018, 6:52am UTC](https://discuss.elastic.co/t/posting-my-watcher-body-to-a-server-via-webhook/140179 "2018-07-17T06:52:55Z")
Hello, I have created a watcher to monitor my server memory usage, which is working fine but here I want to post the email result to a 3rd platform or the same server. I searched about it and found that we can do it via… --- ## [Checking if ANY logstash index exists](https://discuss.elastic.co/t/checking-if-any-logstash-index-exists/140250)
**Author:** [@nick-george](https://discuss.elastic.co/u/nick-george)\ **Replies:** 0\ **Last updated:** [July 17, 2018, 6:17am UTC](https://discuss.elastic.co/t/checking-if-any-logstash-index-exists/140250 "2018-07-17T06:17:09Z")
Hi, Elasticsearch version 6.2.4 I'm trying to see if any logstash index exists using the Python API and with dev\_tools. I'm following these docs: https://www.elastic.co/guide/en/elasticsearch/reference/6.3/indices-ex… --- ## [How to filter document count?](https://discuss.elastic.co/t/how-to-filter-document-count/140245)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 0\ **Last updated:** [July 17, 2018, 4:53am UTC](https://discuss.elastic.co/t/how-to-filter-document-count/140245 "2018-07-17T04:53:35Z")
Hi, I want to filter document count. If there's an IP which document count doesn't exceed 10 then I want to filter it out. my REST API query: GET /\_search { "size" : 0, "query": { "bool": { "should": \[ … --- ## [Index mapping error](https://discuss.elastic.co/t/index-mapping-error/140224)
**Author:** [@Krishna2](https://discuss.elastic.co/u/Krishna2)\ **Replies:** 2\ **Last updated:** [July 17, 2018, 6:00am UTC](https://discuss.elastic.co/t/index-mapping-error/140224 "2018-07-17T06:00:14Z")
I am trying to create index as below. It throws error either thru curl or kibana dev console. curl -XPUT localhost:9200/fassicountry -d '{ "settings" : { "number\_of\_shards" : 1 }, "mappings" : { "type1" : { "pro… --- ## [Elasticsearch start ：failed to resolve host \[host1\]](https://discuss.elastic.co/t/elasticsearch-start-failed-to-resolve-host-host1/136399)
**Author:** [@SimpleCC](https://discuss.elastic.co/u/SimpleCC)\ **Replies:** 1\ **Last updated:** [June 19, 2018, 5:53am UTC](https://discuss.elastic.co/t/elasticsearch-start-failed-to-resolve-host-host1/136399 "2018-06-19T05:53:30Z")
I deploy my project on the cloud server.My OS is Linux. I launch the Elasticsearch and recieve the log: \[2018-06-19T10:57:01,485\]\[INFO \]\[o.e.t.TransportService \] \[OYN0im5\] publish\_address {172.18.183.220:9300}, boun… --- ## [Ealsticsearch Testing-5.x version-FAILURE](https://discuss.elastic.co/t/ealsticsearch-testing-5-x-version-failure/139091)
**Author:** [@harshbajaj16](https://discuss.elastic.co/u/harshbajaj16)\ **Replies:** 6\ **Last updated:** [July 17, 2018, 5:50am UTC](https://discuss.elastic.co/t/ealsticsearch-testing-5-x-version-failure/139091 "2018-07-17T05:50:45Z")
Hi, I'm refereeing the TESTING.ascii document available in elasticsearch repo. While performing testing getting below error on some test cases. 02:37:00.693 \[LIFECYCLE\] \[org.gradle.api.Task\] 1\> \[2018-07-09T07:37:00,… --- ## [Copying elastic indexes](https://discuss.elastic.co/t/copying-elastic-indexes/140106)
**Author:** [@safhw91](https://discuss.elastic.co/u/safhw91)\ **Replies:** 6\ **Last updated:** [July 17, 2018, 5:27am UTC](https://discuss.elastic.co/t/copying-elastic-indexes/140106 "2018-07-17T05:27:08Z")
Hi, \*edit So we can copy the \\elastic\\data\\nodes\\ folder manually from one machine to another after shutting down, other sources confirm that this should work but is unsupproted. But this is a 1-off copy. Can we contin… --- ## [Must query error working to match two terms](https://discuss.elastic.co/t/must-query-error-working-to-match-two-terms/140242)
**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\ **Replies:** 0\ **Last updated:** [July 17, 2018, 3:11am UTC](https://discuss.elastic.co/t/must-query-error-working-to-match-two-terms/140242 "2018-07-17T03:11:12Z")
my elastic search result is.... ....... string\_facet": \[ { "facet-value": "puma", "facet-name": "brand" }, { "facet-value": "amazon", "facet-name": "site" } \], ................ query not working.... nested"… --- ## [Is ELK stack good fit for Business Analysis purpose or not?](https://discuss.elastic.co/t/is-elk-stack-good-fit-for-business-analysis-purpose-or-not/140238)
**Author:** [@nandan\_bigdata](https://discuss.elastic.co/u/nandan_bigdata)\ **Replies:** 0\ **Last updated:** [July 17, 2018, 1:43am UTC](https://discuss.elastic.co/t/is-elk-stack-good-fit-for-business-analysis-purpose-or-not/140238 "2018-07-17T01:43:30Z")
Hi Team, This post I am creating for just for discussion purpose. As we know ELK stack is the best fit for centralized log system. but I want to know "Is ELK stack good fit for Business analysis purpose or not?" What … --- ## [Update documents](https://discuss.elastic.co/t/update-documents/140234)
**Author:** [@pri](https://discuss.elastic.co/u/pri)\ **Replies:** 4\ **Last updated:** [July 17, 2018, 1:41am UTC](https://discuss.elastic.co/t/update-documents/140234 "2018-07-17T01:41:22Z")
I have a generic question on updating existing documents. From almost a year of using Elasticsearch, I have come to believe that updating an elasticseach document is not the same as updating a record in an RDBMS. We are … --- ## [Elasticsearch networking on AWS](https://discuss.elastic.co/t/elasticsearch-networking-on-aws/140236)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 0\ **Last updated:** [July 17, 2018, 1:02am UTC](https://discuss.elastic.co/t/elasticsearch-networking-on-aws/140236 "2018-07-17T01:02:21Z")
I'm curious if there has been any discussion around the ideal network infrastructure setup for Elasticsearch running on EC2 instances on AWS. I set up a few clusters before using public EC2 instances that had been config… --- ## [Concept questions index names multiple customers and archive](https://discuss.elastic.co/t/concept-questions-index-names-multiple-customers-and-archive/140028)
**Author:** [@hank](https://discuss.elastic.co/u/hank)\ **Replies:** 9\ **Last updated:** [July 16, 2018, 10:07pm UTC](https://discuss.elastic.co/t/concept-questions-index-names-multiple-customers-and-archive/140028 "2018-07-16T22:07:16Z")
Hi I'm very new in ELK and read a lot about. I like this very much and will go deeper and deeper for better understanding. Now I've build a lab and test ELK for log management. In our company we have a lot of dedicat… --- ## [Array definition in XContentBuilder Causes Exception](https://discuss.elastic.co/t/array-definition-in-xcontentbuilder-causes-exception/140005)
**Author:** [@gmarshall56](https://discuss.elastic.co/u/gmarshall56)\ **Replies:** 4\ **Last updated:** [July 16, 2018, 9:38pm UTC](https://discuss.elastic.co/t/array-definition-in-xcontentbuilder-causes-exception/140005 "2018-07-16T21:38:08Z")
All: First, I plead guilty for being naive about setting up a mapping for an ES Index. Ultimately I would like to set up an aggregation on an array that I have defined in my mapping. See "pathWithType" here: … --- ## [Kibana - no living connection](https://discuss.elastic.co/t/kibana-no-living-connection/139880)
**Author:** [@aksa](https://discuss.elastic.co/u/aksa)\ **Replies:** 5\ **Last updated:** [July 16, 2018, 8:31pm UTC](https://discuss.elastic.co/t/kibana-no-living-connection/139880 "2018-07-16T20:31:54Z")
Elasticsearch is running, but gives no living connection. Attached is the screenshot. elastic connection How to fix it? thanks --- ## [Cannot install x-pack on default docker image](https://discuss.elastic.co/t/cannot-install-x-pack-on-default-docker-image/140207)
**Author:** [@Rajesh\_Kodali](https://discuss.elastic.co/u/Rajesh_Kodali)\ **Replies:** 2\ **Last updated:** [July 16, 2018, 8:30pm UTC](https://discuss.elastic.co/t/cannot-install-x-pack-on-default-docker-image/140207 "2018-07-16T20:30:04Z")
I have installed https://github.com/kubernetes/charts/tree/master/incubator/elasticsearch and changed the image to non-oss and x-pack installed to false. elasticsearch-plugin list ingest-geoip ingest-user-agent elas… --- ## [/var/run/elasticsaerch has incorrect owner on reboot](https://discuss.elastic.co/t/var-run-elasticsaerch-has-incorrect-owner-on-reboot/140197)
**Author:** [@mikeme1988](https://discuss.elastic.co/u/mikeme1988)\ **Replies:** 1\ **Last updated:** [July 16, 2018, 5:39pm UTC](https://discuss.elastic.co/t/var-run-elasticsaerch-has-incorrect-owner-on-reboot/140197 "2018-07-16T17:39:20Z")
Hey everyone, We run elasticsearch as a different user so we have the /etc/systemd/system/elasticsearch.service.d/override.conf in place with the user we run the service as. The problem is every time we reboot our node… --- ## [Issue running elasticsearch](https://discuss.elastic.co/t/issue-running-elasticsearch/140200)
**Author:** [@Nicolas\_Prange](https://discuss.elastic.co/u/Nicolas_Prange)\ **Replies:** 0\ **Last updated:** [July 16, 2018, 5:40pm UTC](https://discuss.elastic.co/t/issue-running-elasticsearch/140200 "2018-07-16T17:40:16Z")
Hello everyone, I am installing elasticsearch in ubuntu, but when I follow the steep to run elasticsearch, this happens: I enter this cmd: /usr/share/elasticsearch$ ./bin/elasticsearch I get this error: ./bin/elasti… --- ## [Machine learning Alerts are failing for java error](https://discuss.elastic.co/t/machine-learning-alerts-are-failing-for-java-error/138629)
**Author:** [@Dinesh\_Senthil\_Kumar](https://discuss.elastic.co/u/Dinesh_Senthil_Kumar)\ **Replies:** 10\ **Last updated:** [July 16, 2018, 5:30pm UTC](https://discuss.elastic.co/t/machine-learning-alerts-are-failing-for-java-error/138629 "2018-07-16T17:30:30Z")
HI, i am using the latest 6.3 elastic stack with 30 day trial license to explore the machine learning features. i am using metricbeat to monitor my infra and using machine learning to identify potential bottle necks and… --- ## [Unknown key for a START\_OBJECT in \[should\]](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-should/140008)
**Author:** [@nola111](https://discuss.elastic.co/u/nola111)\ **Replies:** 5\ **Last updated:** [July 16, 2018, 4:20pm UTC](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-should/140008 "2018-07-16T16:20:03Z")
Hi all, Still brand new to ElasticSearch (and JSON for that matter). I get this error: { "error": { "root\_cause": \[ { "type": "parsing\_exception", "reason": "Unk… --- ## [\[2.4\] Unexpected \_tasks wait\_for\_completion=true output](https://discuss.elastic.co/t/2-4-unexpected-tasks-wait-for-completion-true-output/140171)
**Author:** [@strayerror](https://discuss.elastic.co/u/strayerror)\ **Replies:** 0\ **Last updated:** [July 16, 2018, 3:07pm UTC](https://discuss.elastic.co/t/2-4-unexpected-tasks-wait-for-completion-true-output/140171 "2018-07-16T15:07:58Z")
When using the \_tasks endpoint with wait\_for\_completion=true the response appears to be from the point in time that the request was initiated, rather than the (to my mind) expected point in time that the task completed. … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1614) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1616)