# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1630 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1631 --- ## [Beginner help: Elasticsearch -\> Kibana || GoLang](https://discuss.elastic.co/t/beginner-help-elasticsearch-kibana-golang/138282)
**Author:** [@sairajes](https://discuss.elastic.co/u/sairajes)\ **Replies:** 3\ **Last updated:** [July 4, 2018, 12:41am UTC](https://discuss.elastic.co/t/beginner-help-elasticsearch-kibana-golang/138282 "2018-07-04T00:41:37Z")
I am trying to create a new index using go. Here's what I have right now (very simple) : createindex, err := client.CreateIndex("test\_ind").BodyString(mapping).Do(ctx) if err != nil { // Handle Error panic(err) } … --- ## [Elasticsearch install on windows](https://discuss.elastic.co/t/elasticsearch-install-on-windows/138457)
**Author:** [@d2hiru](https://discuss.elastic.co/u/d2hiru)\ **Replies:** 0\ **Last updated:** [July 3, 2018, 9:43pm UTC](https://discuss.elastic.co/t/elasticsearch-install-on-windows/138457 "2018-07-03T21:43:41Z")
Hi , I have 2 environment for elasticsearch running on windows and Linux In Linux we have an opertunity to put some argument in jvm startup by putting some entry in /etc/elasticsearch/config/jvm.options Similarly I wa… --- ## [Are parents required with join fields?](https://discuss.elastic.co/t/are-parents-required-with-join-fields/138009)
**Author:** [@jaddison](https://discuss.elastic.co/u/jaddison)\ **Replies:** 1\ **Last updated:** [July 3, 2018, 9:05pm UTC](https://discuss.elastic.co/t/are-parents-required-with-join-fields/138009 "2018-07-03T21:05:39Z")
The docs at https://www.elastic.co/guide/en/elasticsearch/reference/master/parent-join.html don't make the following clear (or I couldn't see it): Can I index a child document without referencing a parent? With the ES\<6… --- ## [How create a watcher for Xpack detected anomalies in all severity?](https://discuss.elastic.co/t/how-create-a-watcher-for-xpack-detected-anomalies-in-all-severity/138349)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 2\ **Last updated:** [July 3, 2018, 8:58pm UTC](https://discuss.elastic.co/t/how-create-a-watcher-for-xpack-detected-anomalies-in-all-severity/138349 "2018-07-03T20:58:37Z")
Hi , My ML job is detecting all anomalies . Sending email alerts for only critical severity anomalies . Please help me to create a watcher for email alert all types of anomalies . In my case i want to create alert for … --- ## [Slow ingestion rate](https://discuss.elastic.co/t/slow-ingestion-rate/138445)
**Author:** [@ryan.dyer](https://discuss.elastic.co/u/ryan.dyer)\ **Replies:** 0\ **Last updated:** [July 3, 2018, 7:39pm UTC](https://discuss.elastic.co/t/slow-ingestion-rate/138445 "2018-07-03T19:39:01Z")
I have a cluster where the ingestion rate has gone to significantly lower values than we have seen previously. Currently we're processing ~2.5keps. We have seen previously peaks in the 15k range. Our cluster runs in k… --- ## [Help with search results](https://discuss.elastic.co/t/help-with-search-results/138285)
**Author:** [@jor3l](https://discuss.elastic.co/u/jor3l)\ **Replies:** 2\ **Last updated:** [July 3, 2018, 6:53pm UTC](https://discuss.elastic.co/t/help-with-search-results/138285 "2018-07-03T18:53:16Z")
Hello there! I'm new to elastic and have been trying the whole day to figure out a way of achieve the following: Imagine I have a list of users, some of them named "Carrie Elastic" and "Car Lastname", when I do a query… --- ## [Elasticsearch Solr updated river/plugin](https://discuss.elastic.co/t/elasticsearch-solr-updated-river-plugin/138440)
**Author:** [@ahazan98](https://discuss.elastic.co/u/ahazan98)\ **Replies:** 0\ **Last updated:** [July 3, 2018, 6:37pm UTC](https://discuss.elastic.co/t/elasticsearch-solr-updated-river-plugin/138440 "2018-07-03T18:37:04Z")
Hey all, I am trying to index my data from solr 5.3 to elasticsearch 6.2.4. I have seen plenty of plugins and rivers for older versions of both services, but I was wondering if there has been anything that I've been mis… --- ## [Unable to create temporary keystore at \[/etc/elasticsearch/elasticsearch.keystore.tmp\]](https://discuss.elastic.co/t/unable-to-create-temporary-keystore-at-etc-elasticsearch-elasticsearch-keystore-tmp/136411)
**Author:** [@arimus](https://discuss.elastic.co/u/arimus)\ **Replies:** 1\ **Last updated:** [July 3, 2018, 6:23pm UTC](https://discuss.elastic.co/t/unable-to-create-temporary-keystore-at-etc-elasticsearch-elasticsearch-keystore-tmp/136411 "2018-07-03T18:23:02Z")
Brand new installation of ElasticSearch with the elasticsearch-6.3.0-1.noarch RPM. The following message shows up in the logs. On further inspection I decided to try to manually initialize the keystore using: sudo -u el… --- ## [SDK cannot reach AWS S3 repository after upgrading to ES 6.3.0](https://discuss.elastic.co/t/sdk-cannot-reach-aws-s3-repository-after-upgrading-to-es-6-3-0/135895)
**Author:** [@Mr.King](https://discuss.elastic.co/u/Mr.King)\ **Replies:** 5\ **Last updated:** [July 3, 2018, 6:00pm UTC](https://discuss.elastic.co/t/sdk-cannot-reach-aws-s3-repository-after-upgrading-to-es-6-3-0/135895 "2018-07-03T18:00:21Z")
I upgraded from ES 6.2.3 to 6.3.0 and my whole cluster cannot reach my AWS S3 bucket anymore. Notice that I use the ES docker build. GET \_snapshot/elk-repo/\* { "error": { "root\_cause": \[ { "type": "repository\_mis… --- ## [Any ML job I create runs for the first time and then stops and never runs](https://discuss.elastic.co/t/any-ml-job-i-create-runs-for-the-first-time-and-then-stops-and-never-runs/135962)
**Author:** [@kaushiksoft](https://discuss.elastic.co/u/kaushiksoft)\ **Replies:** 3\ **Last updated:** [July 3, 2018, 5:39pm UTC](https://discuss.elastic.co/t/any-ml-job-i-create-runs-for-the-first-time-and-then-stops-and-never-runs/135962 "2018-07-03T17:39:20Z")
Symptom - Any ML job I create runs for the first time and then stops and never runs. Here is an example Job - { "job\_id": "tibco-celect", "job\_type": "anomaly\_detector", "job\_version": "6.0.0", "description": "Celect … --- ## [Integrating postgresql with elk](https://discuss.elastic.co/t/integrating-postgresql-with-elk/138381)
**Author:** [@Gokul\_15](https://discuss.elastic.co/u/Gokul_15)\ **Replies:** 2\ **Last updated:** [July 3, 2018, 4:09pm UTC](https://discuss.elastic.co/t/integrating-postgresql-with-elk/138381 "2018-07-03T16:09:28Z")
Am new to elk,how can i integrate my postgres db with elastic search.. all have said about jdbc , i did not understand properly.. any body have suggesstion?? --- ## [Tree structure query on flat objects](https://discuss.elastic.co/t/tree-structure-query-on-flat-objects/138418)
**Author:** [@magician](https://discuss.elastic.co/u/magician)\ **Replies:** 0\ **Last updated:** [July 3, 2018, 3:43pm UTC](https://discuss.elastic.co/t/tree-structure-query-on-flat-objects/138418 "2018-07-03T15:43:05Z")
I have the following data model (just an example) stored in one index: object { id: 1, parent: null, title: ....} object { id: 2, parent: 1, title: ....} object { id: 3, parent: 1, title: ....} ... Now, suppose I want… --- ## [Custom analyzer not working](https://discuss.elastic.co/t/custom-analyzer-not-working/138396)
**Author:** [@fhalde](https://discuss.elastic.co/u/fhalde)\ **Replies:** 1\ **Last updated:** [July 3, 2018, 1:32pm UTC](https://discuss.elastic.co/t/custom-analyzer-not-working/138396 "2018-07-03T13:32:46Z")
I'm using the below mapping where the payload.body field will contain json as a string. i want to get rid of all the braces, quotes colons e.t.c from the json and leave out only the keys \[the values will be empty string … --- ## [How to read ScriptField from search response using NEST](https://discuss.elastic.co/t/how-to-read-scriptfield-from-search-response-using-nest/138392)
**Author:** [@Hooman\_Bahreini](https://discuss.elastic.co/u/Hooman_Bahreini)\ **Replies:** 0\ **Last updated:** [July 3, 2018, 12:49pm UTC](https://discuss.elastic.co/t/how-to-read-scriptfield-from-search-response-using-nest/138392 "2018-07-03T12:49:04Z")
I am using Elasticsearch V6, Nest V6. I am searching ES as below and I am using ScriptFields to calculate the distance and include it the result. var searchResponse = \_elasticClient.Search\(new SearchRequest\<… --- ## [Removing a node](https://discuss.elastic.co/t/removing-a-node/138219)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 1\ **Last updated:** [July 3, 2018, 12:06pm UTC](https://discuss.elastic.co/t/removing-a-node/138219 "2018-07-03T12:06:41Z")
Attempting to remove a node from a 5.6 cluster and did: # cat /tmp/rmnode { "transient" :{ "cluster.routing.allocation.exclude.\_ip" : "10.3.3.12" } } # curl -s -XPUT 10.3.3.12:9200/\_cluster/settings -H 'Conte… --- ## [Boolean searching a multi-value multi-field](https://discuss.elastic.co/t/boolean-searching-a-multi-value-multi-field/138359)
**Author:** [@bkazez](https://discuss.elastic.co/u/bkazez)\ **Replies:** 2\ **Last updated:** [July 3, 2018, 11:57am UTC](https://discuss.elastic.co/t/boolean-searching-a-multi-value-multi-field/138359 "2018-07-03T11:57:06Z")
Hello all, I have some documents that look something like this: { "dataset\_id": 1, "table\_name": "some names", "columns": \["col1", "col2", "surname"\], "records": \[ { "values": \["val1", "", "JOHNSON"\], "names":… --- ## [Add or update a new item into the nested objects](https://discuss.elastic.co/t/add-or-update-a-new-item-into-the-nested-objects/138360)
**Author:** [@magorbe](https://discuss.elastic.co/u/magorbe)\ **Replies:** 0\ **Last updated:** [July 3, 2018, 11:09am UTC](https://discuss.elastic.co/t/add-or-update-a-new-item-into-the-nested-objects/138360 "2018-07-03T11:09:50Z")
I have the next mapping : "c\_index": { "aliases": {}, "mappings": { "an": { "properties": { "id": { "type": "string" }, "sm… --- ## [Get index size result](https://discuss.elastic.co/t/get-index-size-result/138228)
**Author:** [@emil.mirzayev](https://discuss.elastic.co/u/emil.mirzayev)\ **Replies:** 8\ **Last updated:** [July 3, 2018, 11:14am UTC](https://discuss.elastic.co/t/get-index-size-result/138228 "2018-07-03T11:14:37Z")
Hi ! When I run GET indexname/\_stats do I get the size of that index without it's replicas, or with replicas included? If the 2nd, where I can find how many replicas of that index I have? thanks beforehand. Part of… --- ## [Defining different metadata "\_id" field value](https://discuss.elastic.co/t/defining-different-metadata-id-field-value/138356)
**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\ **Replies:** 0\ **Last updated:** [July 3, 2018, 10:44am UTC](https://discuss.elastic.co/t/defining-different-metadata-id-field-value/138356 "2018-07-03T10:44:10Z")
Hello colleagues! I am loading documents structured as follows: {"vulnid": "CVE-2018-0001", "product": \["juniper junos 12.1x46 d10", "juniper junos 15.1x53 d63"\], "description": "A remote, unauthenticated attacker may… --- ## [Wildcard searches](https://discuss.elastic.co/t/wildcard-searches/137594)
**Author:** [@Rakesh\_Shiriyara](https://discuss.elastic.co/u/Rakesh_Shiriyara)\ **Replies:** 5\ **Last updated:** [July 3, 2018, 10:37am UTC](https://discuss.elastic.co/t/wildcard-searches/137594 "2018-07-03T10:37:44Z")
Currently i use below wildcard search for my service, { "query": { "bool": { "must": \[ { "wildcard": { "PRODUCT\_DESCRIPTION": "\\\*collaboration\\\*services\\\*shiriyara\\\*" … --- ## [Install Elasticsearch 5.6 on a new port](https://discuss.elastic.co/t/install-elasticsearch-5-6-on-a-new-port/137807)
**Author:** [@CJ\_AIG](https://discuss.elastic.co/u/CJ_AIG)\ **Replies:** 1\ **Last updated:** [July 3, 2018, 10:13am UTC](https://discuss.elastic.co/t/install-elasticsearch-5-6-on-a-new-port/137807 "2018-07-03T10:13:55Z")
Hi, SugarCRM recommends to install Elasticsearch 5.4 or 5.6 on a new port in order to allow the upgrade to the next platform. For years they've recommended 1.7.5 which I currently have and now in order to do the transi… --- ## [Access SearchContext from a Rescorer](https://discuss.elastic.co/t/access-searchcontext-from-a-rescorer/137758)
**Author:** [@Shai\_Erera](https://discuss.elastic.co/u/Shai_Erera)\ **Replies:** 1\ **Last updated:** [July 3, 2018, 10:00am UTC](https://discuss.elastic.co/t/access-searchcontext-from-a-rescorer/137758 "2018-07-03T10:00:02Z")
Hi. I am implementing a custom Rescorer. Currently, RescorerBuilder.innerBuild() receives the QueryShardContext. However, my rescorer needs to have the source query, rather than a rescore\_query. Is there any way to obtai… --- ## [How to calculate the missing documents per minute](https://discuss.elastic.co/t/how-to-calculate-the-missing-documents-per-minute/132394)
**Author:** [@saikrishnagaddipati](https://discuss.elastic.co/u/saikrishnagaddipati)\ **Replies:** 1\ **Last updated:** [July 3, 2018, 9:12am UTC](https://discuss.elastic.co/t/how-to-calculate-the-missing-documents-per-minute/132394 "2018-07-03T09:12:48Z")
Hi Elastic Team, with the below query i was able to query the index and get the count of all documents per minute for a specified max and min time. I am trying to integrate the below query into watcher script and calcu… --- ## [Condition in html action section not working](https://discuss.elastic.co/t/condition-in-html-action-section-not-working/133469)
**Author:** [@leela\_kumili](https://discuss.elastic.co/u/leela_kumili)\ **Replies:** 1\ **Last updated:** [July 3, 2018, 9:06am UTC](https://discuss.elastic.co/t/condition-in-html-action-section-not-working/133469 "2018-07-03T09:06:06Z")
Hi all, I want to send email from x-pack watcher and content in email varies depending on values. I tried writing if else condition, its not evaluating the condition treating as a text. Any idea how to do it? "actions… --- ## [Search logs entered in previous 15 minutes](https://discuss.elastic.co/t/search-logs-entered-in-previous-15-minutes/133684)
**Author:** [@varun48](https://discuss.elastic.co/u/varun48)\ **Replies:** 1\ **Last updated:** [July 3, 2018, 8:42am UTC](https://discuss.elastic.co/t/search-logs-entered-in-previous-15-minutes/133684 "2018-07-03T08:42:20Z")
I am new to Elasticsearch/Kibana. I am trying to create a watcher which searches The system here is crashed in logs entered in previous 15 minutes. I have created the following JSON as per my knowledge { "trigger": { … --- ## [How include the hostname and location of the log within Watcher alerts?](https://discuss.elastic.co/t/how-include-the-hostname-and-location-of-the-log-within-watcher-alerts/135833)
**Author:** [@rishabh](https://discuss.elastic.co/u/rishabh)\ **Replies:** 1\ **Last updated:** [July 3, 2018, 8:40am UTC](https://discuss.elastic.co/t/how-include-the-hostname-and-location-of-the-log-within-watcher-alerts/135833 "2018-07-03T08:40:18Z")
How to include the hostname and location of the log within Watcher alerts? My watcher alerts are going to slack but not showing hostname. I am preety new in using kibana. Please help me know step by step How to do it… --- ## [Authentifcation for REST Client](https://discuss.elastic.co/t/authentifcation-for-rest-client/136807)
**Author:** [@Hichem\_Noomeni](https://discuss.elastic.co/u/Hichem_Noomeni)\ **Replies:** 1\ **Last updated:** [July 3, 2018, 8:38am UTC](https://discuss.elastic.co/t/authentifcation-for-rest-client/136807 "2018-07-03T08:38:17Z")
Hello everyone, I am using x\_pack security to secure my elasticsearch nodes. I am using a REST client via my java application to send REST request to elasticsearch server. But I didn't find any token based authentifica… --- ## [Query in 6.2 removeing multitypes](https://discuss.elastic.co/t/query-in-6-2-removeing-multitypes/138334)
**Author:** [@Jouad\_Mohammed](https://discuss.elastic.co/u/Jouad_Mohammed)\ **Replies:** 0\ **Last updated:** [July 3, 2018, 8:29am UTC](https://discuss.elastic.co/t/query-in-6-2-removeing-multitypes/138334 "2018-07-03T08:29:46Z")
HI I had in es 6.2 multitypes: type person fields name id type home fields adresse surface when i moved to es 6.2 i removed types as multitypes are removed? i addes the following fields person fields name id … --- ## [Automatic Searches](https://discuss.elastic.co/t/automatic-searches/135037)
**Author:** [@kthare10](https://discuss.elastic.co/u/kthare10)\ **Replies:** 1\ **Last updated:** [July 3, 2018, 8:29am UTC](https://discuss.elastic.co/t/automatic-searches/135037 "2018-07-03T08:29:35Z")
I have Elastic search configured to work on a logstash index. The data in this index has following mapping. I want to define a watcher which generates automatic searches on the index which can then be used to generate vi… --- ## [Unable to return multiple returns from transform](https://discuss.elastic.co/t/unable-to-return-multiple-returns-from-transform/134814)
**Author:** [@prasad\_dls](https://discuss.elastic.co/u/prasad_dls)\ **Replies:** 1\ **Last updated:** [July 3, 2018, 8:28am UTC](https://discuss.elastic.co/t/unable-to-return-multiple-returns-from-transform/134814 "2018-07-03T08:28:01Z")
I am new to writing watchers, could you please help on below usecase Trying to write a watcher which has requirement to have two table in the body of e-mail. Attachment contains table information. \[output\] I am unable… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1629) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1631)