# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1693

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1694

---

## [Changing the path of the data and logs directories](https://discuss.elastic.co/t/changing-the-path-of-the-data-and-logs-directories/131284)

<div class="topic-metadata">

**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\
**Replies:** 0\
**Last updated:** [May 10, 2018, 10:26am UTC](https://discuss.elastic.co/t/changing-the-path-of-the-data-and-logs-directories/131284 "2018-05-10T10:26:12Z")

</div>

I installed ElasticSearch using defaults. . I'd like to change path of the data and logs directories to other location than default location Create new directory structure - e.g; \> makdir /data/elkdata && makdir /data/…

---

## [Indexing emails to elasticsearch](https://discuss.elastic.co/t/indexing-emails-to-elasticsearch/131275)

<div class="topic-metadata">

**Author:** [@rouchad\_rouchad](https://discuss.elastic.co/u/rouchad_rouchad)\
**Replies:** 2\
**Last updated:** [May 10, 2018, 9:31am UTC](https://discuss.elastic.co/t/indexing-emails-to-elasticsearch/131275 "2018-05-10T09:31:25Z")

</div>

hello everyone .. finally my indexing code worked just there is an error when the messages are transmitted from gmail to kibana they do not pass all i found just a few input { imap { host =\> "imap.gmail.com" password…

---

## [ELasticsearch unassigned node removal](https://discuss.elastic.co/t/elasticsearch-unassigned-node-removal/131206)

<div class="topic-metadata">

**Author:** [@Dazith\_Kj](https://discuss.elastic.co/u/Dazith_Kj)\
**Replies:** 5\
**Last updated:** [May 10, 2018, 9:30am UTC](https://discuss.elastic.co/t/elasticsearch-unassigned-node-removal/131206 "2018-05-10T09:30:51Z")

</div>

HI All, I have configured an elastic search cluster with one node. But After I started the cluster with the single node. I am seeing an unassigned node. Please help me to sort this off. NOTE: This ES cluster only havin…

---

## [Analyzer in Java API](https://discuss.elastic.co/t/analyzer-in-java-api/131101)

<div class="topic-metadata">

**Author:** [@aarthinim](https://discuss.elastic.co/u/aarthinim)\
**Replies:** 2\
**Last updated:** [May 9, 2018, 9:01am UTC](https://discuss.elastic.co/t/analyzer-in-java-api/131101 "2018-05-09T09:01:03Z")

</div>

I want to analyze a phrase in java . I'm using this code Header\[\] headers = {new BasicHeader("authorization", "Basic ZWxhc3RpYzplbGFzdGlj")}; RestHighLevelClient client = new RestHighLevelClient( RestClient.builder( …

---

## [Curl access to elasticsearch](https://discuss.elastic.co/t/curl-access-to-elasticsearch/131144)

<div class="topic-metadata">

**Author:** [@chenzilong444](https://discuss.elastic.co/u/chenzilong444)\
**Replies:** 6\
**Last updated:** [May 10, 2018, 7:36am UTC](https://discuss.elastic.co/t/curl-access-to-elasticsearch/131144 "2018-05-10T07:36:51Z")

</div>

C:\\Users\>curl -H "Content-Type: application/json" -XGET "http://local host:9200/logstash-pc-(2018-05-09)/\_search?pretty" -d "{"query":{"match":{"MSG": "Test3"}}}" { "error" : { "root\_cause" : \[ { "type" : "json\_pa…

---

## [Adding percolator settings and mapping with Python](https://discuss.elastic.co/t/adding-percolator-settings-and-mapping-with-python/131256)

<div class="topic-metadata">

**Author:** [@keremcan](https://discuss.elastic.co/u/keremcan)\
**Replies:** 0\
**Last updated:** [May 10, 2018, 6:38am UTC](https://discuss.elastic.co/t/adding-percolator-settings-and-mapping-with-python/131256 "2018-05-10T06:38:59Z")

</div>

I added default percolator index with the python code: class Document(DocType): title = Text() query = Percolator() class Meta: index = 'my-index' doc\_type = '\_doc' def save(self, \*\*…

---

## [Any way to force only primary shards on 1 site/zone?](https://discuss.elastic.co/t/any-way-to-force-only-primary-shards-on-1-site-zone/131098)

<div class="topic-metadata">

**Author:** [@Edmund\_Cheng](https://discuss.elastic.co/u/Edmund_Cheng)\
**Replies:** 11\
**Last updated:** [May 10, 2018, 6:24am UTC](https://discuss.elastic.co/t/any-way-to-force-only-primary-shards-on-1-site-zone/131098 "2018-05-10T06:24:08Z")

</div>

Hi, Lets say we have 2 logical sites in a ES cluster. Can we allocate only primary shards on 1 site and only replicas on another ? With the combination of shard awareness I mean.. Thanks..

---

## [Synchronizing oracle database and elastic search](https://discuss.elastic.co/t/synchronizing-oracle-database-and-elastic-search/131244)

<div class="topic-metadata">

**Author:** [@MaralErdene\_Tumursuh](https://discuss.elastic.co/u/MaralErdene_Tumursuh)\
**Replies:** 1\
**Last updated:** [May 10, 2018, 6:07am UTC](https://discuss.elastic.co/t/synchronizing-oracle-database-and-elastic-search/131244 "2018-05-10T06:07:52Z")

</div>

Hey folks, I've some problem about how to real time synchronize oracle database /tables and views/ and elastic source . I have to synchronize to elastic search just after commit on oracle database. My RDBMS tables is c…

---

## [Elasticsearch stops indexing logs after upgrading from 5.2.4 to 6.x](https://discuss.elastic.co/t/elasticsearch-stops-indexing-logs-after-upgrading-from-5-2-4-to-6-x/131089)

<div class="topic-metadata">

**Author:** [@shankarps](https://discuss.elastic.co/u/shankarps)\
**Replies:** 4\
**Last updated:** [May 10, 2018, 12:34am UTC](https://discuss.elastic.co/t/elasticsearch-stops-indexing-logs-after-upgrading-from-5-2-4-to-6-x/131089 "2018-05-10T00:34:00Z")

</div>

We upgraded our ELK stack from 5.2.4 to 6. We had installed X-Pack and rebuilt the indices before the upgrade. After restarting the new log entries after upgrade are not showing up in Kibana. We see several entries like…

---

## [Elasticsearch query dsl](https://discuss.elastic.co/t/elasticsearch-query-dsl/131222)

<div class="topic-metadata">

**Author:** [@elktotherescue](https://discuss.elastic.co/u/elktotherescue)\
**Replies:** 5\
**Last updated:** [May 9, 2018, 10:09pm UTC](https://discuss.elastic.co/t/elasticsearch-query-dsl/131222 "2018-05-09T22:09:30Z")

</div>

I posted some simple json documents within a 'message' property in an index. here is the mapping I have: Mappings for the WSLogging index: { "ws.loggingtesting-20180504": { "mappings": { "fluentd": { …

---

## [Security Error on scheduled watches](https://discuss.elastic.co/t/security-error-on-scheduled-watches/128433)

<div class="topic-metadata">

**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Replies:** 27\
**Last updated:** [May 9, 2018, 9:04pm UTC](https://discuss.elastic.co/t/security-error-on-scheduled-watches/128433 "2018-05-09T21:04:25Z")

</div>

I'm able to sucessfully execute the watch with http input via enforced execution. POST \_xpack/watcher/watch/\<\>/\_execute NOTE: http input is another Elastic search. But if the same is scheduled, getting security except…

---

## [What should i do to trigger a watch only when condition matches to a certain requirement](https://discuss.elastic.co/t/what-should-i-do-to-trigger-a-watch-only-when-condition-matches-to-a-certain-requirement/130750)

<div class="topic-metadata">

**Author:** [@addanuj](https://discuss.elastic.co/u/addanuj)\
**Replies:** 6\
**Last updated:** [May 9, 2018, 7:23pm UTC](https://discuss.elastic.co/t/what-should-i-do-to-trigger-a-watch-only-when-condition-matches-to-a-certain-requirement/130750 "2018-05-09T19:23:14Z")

</div>

Hi I am trying to create a watch which should alert our Team only when a certain condition matches, For example: "whenever a Failed Login Attempt Detected" RightNow it is sending me an email after each 1 hour with sam…

---

## [Error when indexing using elasticsearch\_dsl library in python](https://discuss.elastic.co/t/error-when-indexing-using-elasticsearch-dsl-library-in-python/131212)

<div class="topic-metadata">

**Author:** [@Ammar\_Khan](https://discuss.elastic.co/u/Ammar_Khan)\
**Replies:** 0\
**Last updated:** [May 9, 2018, 5:44pm UTC](https://discuss.elastic.co/t/error-when-indexing-using-elasticsearch-dsl-library-in-python/131212 "2018-05-09T17:44:20Z")

</div>

Hello everyone! I am working in django, a python framework. I am having an error while I am indexing my data. The error is just related when I insert Nested type when defining a doctype. I have the following models: c…

---

## [Circuit breaker to prevent ES client from having OOM problem](https://discuss.elastic.co/t/circuit-breaker-to-prevent-es-client-from-having-oom-problem/131178)

<div class="topic-metadata">

**Author:** [@seanwang30](https://discuss.elastic.co/u/seanwang30)\
**Replies:** 4\
**Last updated:** [May 9, 2018, 5:14pm UTC](https://discuss.elastic.co/t/circuit-breaker-to-prevent-es-client-from-having-oom-problem/131178 "2018-05-09T17:14:46Z")

</div>

Hi all: Our elasticsearch cluster runs well for the most part, except that the client node would crash because of out-of-memory problem when executing large queries. (I think) It crashes in the gathering phase when all …

---

## [Define the index with same UUID ID](https://discuss.elastic.co/t/define-the-index-with-same-uuid-id/131209)

<div class="topic-metadata">

**Author:** [@TechGeek](https://discuss.elastic.co/u/TechGeek)\
**Replies:** 0\
**Last updated:** [May 9, 2018, 4:58pm UTC](https://discuss.elastic.co/t/define-the-index-with-same-uuid-id/131209 "2018-05-09T16:58:36Z")

</div>

Can we re-create the index with same UUID, If not how can we acheive below objective. Objective is to recreate the index and recover it visualization in Kibana. For Kibana visualization we have taken the back. Is there…

---

## [Some logs are not being ingested to Elasticsearch index](https://discuss.elastic.co/t/some-logs-are-not-being-ingested-to-elasticsearch-index/131184)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 6\
**Last updated:** [May 9, 2018, 4:44pm UTC](https://discuss.elastic.co/t/some-logs-are-not-being-ingested-to-elasticsearch-index/131184 "2018-05-09T16:44:34Z")

</div>

Hi, I am experiencing a weird problem with Elasticsearch. Some logs are being ingested and some are not to a particular index. All other indexes are working perfectly fine. I thought the problem was with index.mapping.…

---

## [ES 6.1.1 Server with small data goes into GC loop](https://discuss.elastic.co/t/es-6-1-1-server-with-small-data-goes-into-gc-loop/130340)

<div class="topic-metadata">

**Author:** [@reedzhao](https://discuss.elastic.co/u/reedzhao)\
**Replies:** 14\
**Last updated:** [May 9, 2018, 4:18pm UTC](https://discuss.elastic.co/t/es-6-1-1-server-with-small-data-goes-into-gc-loop/130340 "2018-05-09T16:18:48Z")

</div>

I have a small ES deployment that has been running fine for about 4 months. Today it suddenly start to use up all CPU. No change in query code, no change in traffic load. It just suddenly start to do a lot of GC. My d…

---

## [Bulk Processor taking too long](https://discuss.elastic.co/t/bulk-processor-taking-too-long/131183)

<div class="topic-metadata">

**Author:** [@Sivapriya\_1](https://discuss.elastic.co/u/Sivapriya_1)\
**Replies:** 9\
**Last updated:** [May 9, 2018, 4:12pm UTC](https://discuss.elastic.co/t/bulk-processor-taking-too-long/131183 "2018-05-09T16:12:12Z")

</div>

I'm using the bulk API to index my docs and it is taking longer than expected. My bulk processor client is as follows \</BulkProcessor.Builder bulkProcessorBuilder = BulkProcessor.builder(client::bulkAsync, listener); b…

---

## [Manage indexes](https://discuss.elastic.co/t/manage-indexes/131195)

<div class="topic-metadata">

**Author:** [@NOUR](https://discuss.elastic.co/u/NOUR)\
**Replies:** 2\
**Last updated:** [May 9, 2018, 4:00pm UTC](https://discuss.elastic.co/t/manage-indexes/131195 "2018-05-09T16:00:12Z")

</div>

Hello everyone, I wana ask if i could manage indexes : i mean if i have 2 kibana one run on the "http://localhost:5601/" and the other on the "http://localhost:5602/" and the two use the same elasticsearch . My quest…

---

## [Help - Uninstalled 5.4.3 and now cannot start service](https://discuss.elastic.co/t/help-uninstalled-5-4-3-and-now-cannot-start-service/131198)

<div class="topic-metadata">

**Author:** [@miloiii123](https://discuss.elastic.co/u/miloiii123)\
**Replies:** 0\
**Last updated:** [May 9, 2018, 3:57pm UTC](https://discuss.elastic.co/t/help-uninstalled-5-4-3-and-now-cannot-start-service/131198 "2018-05-09T15:57:35Z")

</div>

I had 5.4.3 installed on my local machine (windows 8.1). I uninstalled the windows service and then deleted the ES folder. Now when I try to install a new version of ES (5.4.6) and try to run it as a service, it stops ri…

---

## [ELK 5.4 data node is failing to join the cluster, it is stuck at discovery phase](https://discuss.elastic.co/t/elk-5-4-data-node-is-failing-to-join-the-cluster-it-is-stuck-at-discovery-phase/131197)

<div class="topic-metadata">

**Author:** [@chakri276](https://discuss.elastic.co/u/chakri276)\
**Replies:** 0\
**Last updated:** [May 9, 2018, 3:53pm UTC](https://discuss.elastic.co/t/elk-5-4-data-node-is-failing-to-join-the-cluster-it-is-stuck-at-discovery-phase/131197 "2018-05-09T15:53:03Z")

</div>

I am using Elasticsearch 5.4, I have 3 master nodes and 8 data notes in which one data node stopped its elastic search process abruptly as its supervisord is down. I have 111 unassigned shrads and the reason for that i…

---

## [Filter vs bool Query Performance , getting bad performance on using Filters](https://discuss.elastic.co/t/filter-vs-bool-query-performance-getting-bad-performance-on-using-filters/130182)

<div class="topic-metadata">

**Author:** [@jalaj](https://discuss.elastic.co/u/jalaj)\
**Replies:** 6\
**Last updated:** [May 9, 2018, 1:55pm UTC](https://discuss.elastic.co/t/filter-vs-bool-query-performance-getting-bad-performance-on-using-filters/130182 "2018-05-09T13:55:06Z")

</div>

Hi, Generally it is recommended to use filters for optimal performance, but I am getting 5 times more latency when using filters compared to bool query. However for me it does not make sense to use bool as logically I …

---

## [Getting latest record of each day](https://discuss.elastic.co/t/getting-latest-record-of-each-day/129449)

<div class="topic-metadata">

**Author:** [@veerabhadraiah](https://discuss.elastic.co/u/veerabhadraiah)\
**Replies:** 1\
**Last updated:** [May 9, 2018, 1:02pm UTC](https://discuss.elastic.co/t/getting-latest-record-of-each-day/129449 "2018-05-09T13:02:37Z")

</div>

Hi , In mysql i had query like select id, eventIdx, sitename,machine, nid, nocstatus, reportDate,priority from (select id, eventIdx, sitename,machine, nid, nocstatus, reportDate,priority from event.tempGraphSummary whe…

---

## [Not able to search POS text in ElasticSearch](https://discuss.elastic.co/t/not-able-to-search-pos-text-in-elasticsearch/131020)

<div class="topic-metadata">

**Author:** [@veerabhadraiah](https://discuss.elastic.co/u/veerabhadraiah)\
**Replies:** 6\
**Last updated:** [May 9, 2018, 12:29pm UTC](https://discuss.elastic.co/t/not-able-to-search-pos-text-in-elasticsearch/131020 "2018-05-09T12:29:07Z")

</div>

Hi, In my data have a text like 'POS1','POS2','POS3' using match criteria am not able search with text like 'POS' Example : { "query":{ "bool":{ "must":\[ { "mult…

---

## [Analyzer in Kibana](https://discuss.elastic.co/t/analyzer-in-kibana/131137)

<div class="topic-metadata">

**Author:** [@aarthinim](https://discuss.elastic.co/u/aarthinim)\
**Replies:** 4\
**Last updated:** [May 9, 2018, 12:27pm UTC](https://discuss.elastic.co/t/analyzer-in-kibana/131137 "2018-05-09T12:27:18Z")

</div>

In kibana I m analyzing a phrase POST /lrptest/\_analyze { "analyzer": "my\_analyzer", "text": "BLISS LOGISTICS & SHIPPING PRIVATE LIMITED" } and output is { "tokens": \[ { "token": "bliss", "start\_offset": 0, …

---

## [Performance issue at elastic search for actionFuture.actionGet()](https://discuss.elastic.co/t/performance-issue-at-elastic-search-for-actionfuture-actionget/131001)

<div class="topic-metadata">

**Author:** [@rajibsoft](https://discuss.elastic.co/u/rajibsoft)\
**Replies:** 7\
**Last updated:** [May 9, 2018, 12:22pm UTC](https://discuss.elastic.co/t/performance-issue-at-elastic-search-for-actionfuture-actionget/131001 "2018-05-09T12:22:39Z")

</div>

Hi, Below call is taking time (Avg 550 milliseconds) in my Elasticsearch application which leads to performance issue. ListenableActionFuture actionFuture.actionGet().hasFailures() Has there any way to optimize this…

---

## [Monitoring LDAP server](https://discuss.elastic.co/t/monitoring-ldap-server/130653)

<div class="topic-metadata">

**Author:** [@franco.federico](https://discuss.elastic.co/u/franco.federico)\
**Replies:** 4\
**Last updated:** [May 9, 2018, 12:22pm UTC](https://discuss.elastic.co/t/monitoring-ldap-server/130653 "2018-05-09T12:22:07Z")

</div>

I'm thinking how to monitoring LDAP server. For example I'd like to store every hour the situation of LDAP server and I'd like to respond to question like this How many users are active on LDAP? How many groups are act…

---

## [Multi-Synonym feature in ES](https://discuss.elastic.co/t/multi-synonym-feature-in-es/131028)

<div class="topic-metadata">

**Author:** [@Dhivya\_K](https://discuss.elastic.co/u/Dhivya_K)\
**Replies:** 2\
**Last updated:** [May 9, 2018, 12:21pm UTC](https://discuss.elastic.co/t/multi-synonym-feature-in-es/131028 "2018-05-09T12:21:20Z")

</div>

Hi, This Multi-Synonym feature is supported in ElasticSearch from 5.2.x version, as referred in below link. I would like to know is there any possibility to support this Multi-synonym feature in Elasticsearch lower …

---

## [Elastic group query for multiple fileds](https://discuss.elastic.co/t/elastic-group-query-for-multiple-fileds/128724)

<div class="topic-metadata">

**Author:** [@veerabhadraiah](https://discuss.elastic.co/u/veerabhadraiah)\
**Replies:** 0\
**Last updated:** [April 19, 2018, 2:18pm UTC](https://discuss.elastic.co/t/elastic-group-query-for-multiple-fileds/128724 "2018-04-19T14:18:38Z")

</div>

Hi Team, Help me to convert mysql query to ElasticSearch query. select id, eventIdx, sitename,machine, nid, nocstatus, reportDate,priority from (select id, eventIdx, sitename,machine, nid, nocstatus, reportDate,priorit…

---

## [Perform compression in Elasticsearch in a good ratio](https://discuss.elastic.co/t/perform-compression-in-elasticsearch-in-a-good-ratio/131163)

<div class="topic-metadata">

**Author:** [@br14nb0](https://discuss.elastic.co/u/br14nb0)\
**Replies:** 1\
**Last updated:** [May 9, 2018, 11:41am UTC](https://discuss.elastic.co/t/perform-compression-in-elasticsearch-in-a-good-ratio/131163 "2018-05-09T11:41:21Z")

</div>

How can I perform compression in Elasticsearch ? I tried best\_compression but not good at all and also disabled some fields. Wherease Splunk stores index data equal a half of raw data, Elasticsearch stores index data bi…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1692)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1694)
