# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1638 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1639 --- ## [Transform or Other Solution to set null value to 0 on first run](https://discuss.elastic.co/t/transform-or-other-solution-to-set-null-value-to-0-on-first-run/137075)
**Author:** [@dmdm](https://discuss.elastic.co/u/dmdm)\ **Replies:** 6\ **Last updated:** [June 27, 2018, 2:27pm UTC](https://discuss.elastic.co/t/transform-or-other-solution-to-set-null-value-to-0-on-first-run/137075 "2018-06-27T14:27:26Z")
In the below example for: yellow state for ({{ctx.payload.first.hits.total}}) and red state ({{ctx.payload.second.hits.total}}). The first time a yellow status triggers the alert there is nothing in the index so the … --- ## [Underlying file changed by an external force](https://discuss.elastic.co/t/underlying-file-changed-by-an-external-force/137555)
**Author:** [@xiaomage](https://discuss.elastic.co/u/xiaomage)\ **Replies:** 4\ **Last updated:** [June 27, 2018, 1:50pm UTC](https://discuss.elastic.co/t/underlying-file-changed-by-an-external-force/137555 "2018-06-27T13:50:19Z")
Using elasticsearch cluster( 3 servers) with kubernetes, but elasticsearch cluster can not wrok fine and log show as below: \[2018-06-27T05:48:31,798\]\[WARN \]\[o.e.c.r.a.AllocationService\] \[sBJEWnS\] failing shard \[failed … --- ## [X-pack features are not visible](https://discuss.elastic.co/t/x-pack-features-are-not-visible/136314)
**Author:** [@joshua625](https://discuss.elastic.co/u/joshua625)\ **Replies:** 3\ **Last updated:** [June 27, 2018, 12:52pm UTC](https://discuss.elastic.co/t/x-pack-features-are-not-visible/136314 "2018-06-27T12:52:52Z")
Hello, Currently, I am using 6.3 v Elastic stack which was updated on Jun 14th. I am running this on a single node cluster with filebeat installed on a client machine. After, auto updation my Elastic stack was down and … --- ## ["Wide" cluster](https://discuss.elastic.co/t/wide-cluster/137603)
**Author:** [@LesioS](https://discuss.elastic.co/u/LesioS)\ **Replies:** 10\ **Last updated:** [June 27, 2018, 12:16pm UTC](https://discuss.elastic.co/t/wide-cluster/137603 "2018-06-27T12:16:09Z")
I wonder if multinode cluster has any limitations with geographical localization of nodes (mainly master). Is it possible (and efficient) to install 3 master nodes in e.g London, NY and Sydney respectively and connect th… --- ## [Not able to output two or multiple aggregations in a loop](https://discuss.elastic.co/t/not-able-to-output-two-or-multiple-aggregations-in-a-loop/133693)
**Author:** [@addanuj](https://discuss.elastic.co/u/addanuj)\ **Replies:** 7\ **Last updated:** [June 27, 2018, 11:49am UTC](https://discuss.elastic.co/t/not-able-to-output-two-or-multiple-aggregations-in-a-loop/133693 "2018-06-27T11:49:43Z")
Hi all, i am able to print values in loop but i am stuck in one condition, i have a chain query where i am able to print values from first chain using its aggregations but "I am not able to print values from Second chai… --- ## [Connect two laptops, one with elasticsearch on it using a WiFI network](https://discuss.elastic.co/t/connect-two-laptops-one-with-elasticsearch-on-it-using-a-wifi-network/137224)
**Author:** [@radumir](https://discuss.elastic.co/u/radumir)\ **Replies:** 2\ **Last updated:** [June 27, 2018, 11:49am UTC](https://discuss.elastic.co/t/connect-two-laptops-one-with-elasticsearch-on-it-using-a-wifi-network/137224 "2018-06-27T11:49:01Z")
Hi! I have a laptop with ElasticSearch on it registered in a WiFI network. I want to open the laptop to my colleague in order to allow him to use the same instance. The firewall on my machine is not activated. I trie… --- ## [Geolocation help](https://discuss.elastic.co/t/geolocation-help/137582)
**Author:** [@Oren\_Cohen](https://discuss.elastic.co/u/Oren_Cohen)\ **Replies:** 2\ **Last updated:** [June 27, 2018, 11:19am UTC](https://discuss.elastic.co/t/geolocation-help/137582 "2018-06-27T11:19:43Z")
The json that is being fed to elastic looks like this: { "type": "event", "timestamp": "2018-06-18 18:22:59.848", "event": "FlightStats", "params": { "deviceID": "e347afe90c65c19e12789c4e297ed865b4… --- ## [Bulk create silently failing](https://discuss.elastic.co/t/bulk-create-silently-failing/137476)
**Author:** [@murtaugh](https://discuss.elastic.co/u/murtaugh)\ **Replies:** 1\ **Last updated:** [June 27, 2018, 10:32am UTC](https://discuss.elastic.co/t/bulk-create-silently-failing/137476 "2018-06-27T10:32:26Z")
Elasticsearch 2.4.4 Hi, I have a script where I'm creating trying to create a large number of documents in an index that already exist, testing something before it goes in production. I have a scroll size of 50k, numbe… --- ## [Get explain flag value in a custom query/scorer](https://discuss.elastic.co/t/get-explain-flag-value-in-a-custom-query-scorer/137589)
**Author:** [@vgindin](https://discuss.elastic.co/u/vgindin)\ **Replies:** 0\ **Last updated:** [June 27, 2018, 9:51am UTC](https://discuss.elastic.co/t/get-explain-flag-value-in-a-custom-query-scorer/137589 "2018-06-27T09:51:33Z")
I've found that explain flag (that is set via URL) is transferred to org.elasticsearch.search.DefaultSearchContext. I'd like to check this flag in my custom query or custom scorer. I expected that SearchContext will be p… --- ## [Sorting an array of objects](https://discuss.elastic.co/t/sorting-an-array-of-objects/137453)
**Author:** [@Aymen\_Fezai](https://discuss.elastic.co/u/Aymen_Fezai)\ **Replies:** 2\ **Last updated:** [June 27, 2018, 9:31am UTC](https://discuss.elastic.co/t/sorting-an-array-of-objects/137453 "2018-06-27T09:31:16Z")
I am new to elasticsearch. The documents I got look like this : user\_name : "test", piInfo: { profile: { word\_count: 535, word\_count\_message: "There were 535 words in the input.", processed\_language: "en", p… --- ## [Elastic @timestamp off by almost 3 years](https://discuss.elastic.co/t/elastic-timestamp-off-by-almost-3-years/137574)
**Author:** [@safhw91](https://discuss.elastic.co/u/safhw91)\ **Replies:** 2\ **Last updated:** [June 27, 2018, 9:13am UTC](https://discuss.elastic.co/t/elastic-timestamp-off-by-almost-3-years/137574 "2018-06-27T09:13:07Z")
My machine time is correct (i.e. June 2018) and I have no reference to timestamp in my grok parser. But when I parse my log file with logstash, my @timestamp field for all documents is always "January 1st 2015, 00:10:00… --- ## [Restart elasticsearch with Ansible](https://discuss.elastic.co/t/restart-elasticsearch-with-ansible/137382)
**Author:** [@cedbale](https://discuss.elastic.co/u/cedbale)\ **Replies:** 2\ **Last updated:** [June 27, 2018, 9:10am UTC](https://discuss.elastic.co/t/restart-elasticsearch-with-ansible/137382 "2018-06-27T09:10:52Z")
Hello everybody, I am using ES Ansible's playbooks (on Debian 9 - I only have a single ES node) to install my environment and i am not able to restart the service after a process kill. I can not found any clear descript… --- ## [How to delete indice data from disk?](https://discuss.elastic.co/t/how-to-delete-indice-data-from-disk/137568)
**Author:** [@PolterFox](https://discuss.elastic.co/u/PolterFox)\ **Replies:** 2\ **Last updated:** [June 27, 2018, 9:08am UTC](https://discuss.elastic.co/t/how-to-delete-indice-data-from-disk/137568 "2018-06-27T09:08:12Z")
Hey guys, I want to delete all indices which are older than 30 days. I have successfully created a curator script which deletes the indices from ES, the indices which are deleted are not shown in kibana but the storage … --- ## [Yellow health for my indicies from Filebeat and Winlogbeat](https://discuss.elastic.co/t/yellow-health-for-my-indicies-from-filebeat-and-winlogbeat/137399)
**Author:** [@antonopo](https://discuss.elastic.co/u/antonopo)\ **Replies:** 4\ **Last updated:** [June 27, 2018, 9:06am UTC](https://discuss.elastic.co/t/yellow-health-for-my-indicies-from-filebeat-and-winlogbeat/137399 "2018-06-27T09:06:37Z")
Hi, All my indicies from filebeat and winlogbeat have yellow status on Kibana monitoring. I have some shards on Unassigned Shards. What does it means that and how i can fix it? Best Regards, Thanos --- ## [Is my index/ES install corrupt?](https://discuss.elastic.co/t/is-my-index-es-install-corrupt/137575)
**Author:** [@TobyC](https://discuss.elastic.co/u/TobyC)\ **Replies:** 4\ **Last updated:** [June 27, 2018, 9:04am UTC](https://discuss.elastic.co/t/is-my-index-es-install-corrupt/137575 "2018-06-27T09:04:10Z")
Hey all, I have a few indexes locally. I index a load of data and occasionally, an index seems to delete all but two documents. This has happened a few times now to different indexes. There seems to be a mismatch in d… --- ## [How to do a elasticsearch query search from NodeJS using wildcard and space](https://discuss.elastic.co/t/how-to-do-a-elasticsearch-query-search-from-nodejs-using-wildcard-and-space/137569)
**Author:** [@Akila\_Mendis](https://discuss.elastic.co/u/Akila_Mendis)\ **Replies:** 1\ **Last updated:** [June 27, 2018, 8:45am UTC](https://discuss.elastic.co/t/how-to-do-a-elasticsearch-query-search-from-nodejs-using-wildcard-and-space/137569 "2018-06-27T08:45:33Z")
I have set of products indexed in elasticsearch. I\`m searching for "title" on my schema. When I search "fre" or "fresh" I see a result. But when I search for "small fresh" I don't see any result. Is it possible to use wi… --- ## [Backup and restore es 5.6.x restoring to a different cluster](https://discuss.elastic.co/t/backup-and-restore-es-5-6-x-restoring-to-a-different-cluster/137566)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 1\ **Last updated:** [June 27, 2018, 8:24am UTC](https://discuss.elastic.co/t/backup-and-restore-es-5-6-x-restoring-to-a-different-cluster/137566 "2018-06-27T08:24:27Z")
i have two clusters also is es 5.6.x . cluster a cluster b in one cluster a i with shard nfs backup data. i wan't to know how restore the backup in cluster a to cluster b, i find it support in https://www.elasti… --- ## [Deleting old Docs from particular index using curator plugin](https://discuss.elastic.co/t/deleting-old-docs-from-particular-index-using-curator-plugin/137546)
**Author:** [@kish](https://discuss.elastic.co/u/kish)\ **Replies:** 5\ **Last updated:** [June 27, 2018, 7:26am UTC](https://discuss.elastic.co/t/deleting-old-docs-from-particular-index-using-curator-plugin/137546 "2018-06-27T07:26:58Z")
Hello - I have installed curator plugin for deleting docs of particular index. So Can curator plugin can be used to delete a Doc's of a index/indices OR it is only used to delete the entire indices. If possible can … --- ## [Painless syntax error](https://discuss.elastic.co/t/painless-syntax-error/137547)
**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Replies:** 3\ **Last updated:** [June 27, 2018, 7:17am UTC](https://discuss.elastic.co/t/painless-syntax-error/137547 "2018-06-27T07:17:33Z")
Hi All, On the below watcher I am getting a error: Watcher: An internal server error occurred My guess it is in the condition where I execute a piece of painless code but I cannot seem to figure out what I am doing … --- ## [Watcher not sending email to alert on disk space](https://discuss.elastic.co/t/watcher-not-sending-email-to-alert-on-disk-space/135742)
**Author:** [@StillReclaim](https://discuss.elastic.co/u/StillReclaim)\ **Replies:** 4\ **Last updated:** [June 27, 2018, 7:11am UTC](https://discuss.elastic.co/t/watcher-not-sending-email-to-alert-on-disk-space/135742 "2018-06-27T07:11:22Z")
Hello, I wrote a watch to send an email and make a log output if the disk space on any host goes over 90% usage. It has run a bunch of times and I know that the indexes have hosts that have over 90% usage, but the watch… --- ## [Scrolling and Paging in Elastic/Nest 6+](https://discuss.elastic.co/t/scrolling-and-paging-in-elastic-nest-6/137527)
**Author:** [@Paulo\_Silva](https://discuss.elastic.co/u/Paulo_Silva)\ **Replies:** 5\ **Last updated:** [June 27, 2018, 6:51am UTC](https://discuss.elastic.co/t/scrolling-and-paging-in-elastic-nest-6/137527 "2018-06-27T06:51:14Z")
Hi guys, Intro I'm upgrading the elastic version to 6.3 (previously we were using 5.4. Our app is written in C#, thus we use NEST.NET dll to talk with the Elastic server, so we are also updating it to the version 6.0.… --- ## [Lasticsearch integration with SCV file show search results on asp.net application](https://discuss.elastic.co/t/lasticsearch-integration-with-scv-file-show-search-results-on-asp-net-application/137542)
**Author:** [@lax](https://discuss.elastic.co/u/lax)\ **Replies:** 1\ **Last updated:** [June 27, 2018, 6:28am UTC](https://discuss.elastic.co/t/lasticsearch-integration-with-scv-file-show-search-results-on-asp-net-application/137542 "2018-06-27T06:28:41Z")
Can someone share sample solution to feed a csv file to elastic search create index based on CSV file and show the results on web front end(asp.net or jsp application)? --- ## [\[5.6.8\] Trigerred "could not find or load main class" with -cp command](https://discuss.elastic.co/t/5-6-8-trigerred-could-not-find-or-load-main-class-with-cp-command/137544)
**Author:** [@Alexandre\_Roux](https://discuss.elastic.co/u/Alexandre_Roux)\ **Replies:** 0\ **Last updated:** [June 27, 2018, 6:08am UTC](https://discuss.elastic.co/t/5-6-8-trigerred-could-not-find-or-load-main-class-with-cp-command/137544 "2018-06-27T06:08:05Z")
Hello there, First time I'm posting here, I've tried to add as much details as I can. My purpose, is to install elasticsearch-5.6.8 with custom values for : -Edefault.path.logs=/opt/application/elasticsearch/logs -Ed… --- ## [Discovering dynamic port assignment](https://discuss.elastic.co/t/discovering-dynamic-port-assignment/137328)
**Author:** [@Chris\_White](https://discuss.elastic.co/u/Chris_White)\ **Replies:** 8\ **Last updated:** [June 27, 2018, 5:53am UTC](https://discuss.elastic.co/t/discovering-dynamic-port-assignment/137328 "2018-06-27T05:53:28Z")
Is there a method by which you can easily / programmatically obtain the HTTP / Transport port number when starting a node using the -Ehttp.port=0 or -Etransport.tcp.port=0 arguments? Specifically, i'm bringing up an ES … --- ## [Document Bailing Out Errors in Bulk Update Mode Resulting in Crashing the Entire Spark Job](https://discuss.elastic.co/t/document-bailing-out-errors-in-bulk-update-mode-resulting-in-crashing-the-entire-spark-job/137163)
**Author:** [@rajivchodisetti](https://discuss.elastic.co/u/rajivchodisetti)\ **Replies:** 2\ **Last updated:** [June 27, 2018, 5:44am UTC](https://discuss.elastic.co/t/document-bailing-out-errors-in-bulk-update-mode-resulting-in-crashing-the-entire-spark-job/137163 "2018-06-27T05:44:15Z")
HI Guys, First of all will explain my use case and the problem that am facing right now, We have a use case where we have modeled the data as time-series indices i.e one index for each month and again each monthly inde… --- ## [\[v6.2.2\]ES often happen Frequently error of timeout question now and then](https://discuss.elastic.co/t/v6-2-2-es-often-happen-frequently-error-of-timeout-question-now-and-then/137526)
**Author:** [@kervin521](https://discuss.elastic.co/u/kervin521)\ **Replies:** 2\ **Last updated:** [June 27, 2018, 5:19am UTC](https://discuss.elastic.co/t/v6-2-2-es-often-happen-frequently-error-of-timeout-question-now-and-then/137526 "2018-06-27T05:19:13Z")
\[image\] \[image\] Errors (1、2) often happen Frequently,how to solve? --- ## [How to search for exact matches in either one of two fields?](https://discuss.elastic.co/t/how-to-search-for-exact-matches-in-either-one-of-two-fields/137338)
**Author:** [@rajeevrmenon97](https://discuss.elastic.co/u/rajeevrmenon97)\ **Replies:** 7\ **Last updated:** [June 27, 2018, 4:14am UTC](https://discuss.elastic.co/t/how-to-search-for-exact-matches-in-either-one-of-two-fields/137338 "2018-06-27T04:14:48Z")
I have two fields field\_1 and field\_2. I have a to find exact match for my query in either field\_1 or field\_2. multi\_match is not giving me exact matches. And constant\_score does not support multi\_match. The elasticsear… --- ## [Default index (.kibana) not created](https://discuss.elastic.co/t/default-index-kibana-not-created/135836)
**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\ **Replies:** 73\ **Last updated:** [June 27, 2018, 4:01am UTC](https://discuss.elastic.co/t/default-index-kibana-not-created/135836 "2018-06-27T04:01:45Z")
Hi, we have installed 6.2.4 elasticsearch and kibana. But .kibana index not present in elasticsearch. Why it is not created. I have started both the applications but index not found. please provide solution on this. --- ## [Elastic String Types](https://discuss.elastic.co/t/elastic-string-types/137413)
**Author:** [@safhw91](https://discuss.elastic.co/u/safhw91)\ **Replies:** 3\ **Last updated:** [June 27, 2018, 3:59am UTC](https://discuss.elastic.co/t/elastic-string-types/137413 "2018-06-27T03:59:53Z")
Now a "String" can be either (or both) a "Text" or "Keyword" type. If it's "text", then Elastic can do a full text search on it. If it's "keyword", then Elastic can do structured search on it. Which one takes less of … --- ## [X-pack security for elastic search](https://discuss.elastic.co/t/x-pack-security-for-elastic-search/137523)
**Author:** [@Krishna2](https://discuss.elastic.co/u/Krishna2)\ **Replies:** 4\ **Last updated:** [June 27, 2018, 3:56am UTC](https://discuss.elastic.co/t/x-pack-security-for-elastic-search/137523 "2018-06-27T03:56:51Z")
I had setup x-pack security in elastic search.yml. I had enabled xpack.secuirty.enabled: true and using 30 trial license. When I try to access localhost :9200 it is asking userid and password. I know only super user '… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1637) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1639)