# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1712 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1713 --- ## [Ip-filtering](https://discuss.elastic.co/t/ip-filtering/128328)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 5\ **Last updated:** [April 22, 2018, 9:34pm UTC](https://discuss.elastic.co/t/ip-filtering/128328 "2018-04-22T21:34:32Z")
Hello, I want to migrate from configuration property ip-filtering to dynamic: https://www.elastic.co/guide/en/x-pack/current/ip-filtering.html#dynamic-ip-filtering If I want to add a host, or remove a host can I do it… --- ## [When to use \_forcemerge?](https://discuss.elastic.co/t/when-to-use-forcemerge/128986)
**Author:** [@shshnk28](https://discuss.elastic.co/u/shshnk28)\ **Replies:** 6\ **Last updated:** [April 22, 2018, 4:33pm UTC](https://discuss.elastic.co/t/when-to-use-forcemerge/128986 "2018-04-22T16:33:26Z")
As per the elasticsearch documentation the segment merging is background process that keeps running. So my question is that in what cases is this segment merging insufficient so that I need to run forcemerge via the API… --- ## [Failed to execute action \[email\_watch/send \_email\]](https://discuss.elastic.co/t/failed-to-execute-action-email-watch-send-email/128236)
**Author:** [@vaishali1](https://discuss.elastic.co/u/vaishali1)\ **Replies:** 3\ **Last updated:** [April 22, 2018, 4:24pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-email-watch-send-email/128236 "2018-04-22T16:24:21Z")
Hi, I am facing issue in elasticsearch, can anyone help me out to solve this issue? Basically I am using company email. elasticsearch.yml xpack.notification.email.account: outlook\_account: profile: outloo… --- ## [How to enforce order of events in cardinality aggregation](https://discuss.elastic.co/t/how-to-enforce-order-of-events-in-cardinality-aggregation/128420)
**Author:** [@saranyav](https://discuss.elastic.co/u/saranyav)\ **Replies:** 1\ **Last updated:** [April 22, 2018, 4:20pm UTC](https://discuss.elastic.co/t/how-to-enforce-order-of-events-in-cardinality-aggregation/128420 "2018-04-22T16:20:47Z")
Hello, I have a case where I need to enable alerting when there is an event "FUN" is followed by another event "UPE" from a particular IP. First I have filtered the data for the event codes FUN and UPE , then I grouped … --- ## [Get Nearest Unique Locations](https://discuss.elastic.co/t/get-nearest-unique-locations/129008)
**Author:** [@Syed\_ali\_abbas\_shah](https://discuss.elastic.co/u/Syed_ali_abbas_shah)\ **Replies:** 0\ **Last updated:** [April 22, 2018, 2:12pm UTC](https://discuss.elastic.co/t/get-nearest-unique-locations/129008 "2018-04-22T14:12:41Z")
I need to fetch nearest distinct locations from my index Here is my mapping { "properties": { "id": { "type": "keyword" }, "location\_name": { "type": "keyword" }, … --- ## [Issue storing binary fields in 6.2.2](https://discuss.elastic.co/t/issue-storing-binary-fields-in-6-2-2/128290)
**Author:** [@Vinayak\_Sapre](https://discuss.elastic.co/u/Vinayak_Sapre)\ **Replies:** 10\ **Last updated:** [April 22, 2018, 12:54pm UTC](https://discuss.elastic.co/t/issue-storing-binary-fields-in-6-2-2/128290 "2018-04-22T12:54:12Z")
My application stores long text (\>32K) values in binary field. The code works well in 5.2.1. However when I upgraded to 6.2.2 I am seeing strange behavior. Blob of one document gets attached to other documents. Here are… --- ## [Index recovery from translog takes infinity time](https://discuss.elastic.co/t/index-recovery-from-translog-takes-infinity-time/128965)
**Author:** [@timurn](https://discuss.elastic.co/u/timurn)\ **Replies:** 1\ **Last updated:** [April 22, 2018, 12:26pm UTC](https://discuss.elastic.co/t/index-recovery-from-translog-takes-infinity-time/128965 "2018-04-22T12:26:53Z")
I'm new one with Elasticsearch. I have a cluster 2 data-master nodes + 1 master node running in docker contaner. Yesterday one data node was killed by OOM killer, restarted and starded recovery process. This recovery pro… --- ## [Multiple join type fields in a index](https://discuss.elastic.co/t/multiple-join-type-fields-in-a-index/128974)
**Author:** [@Syed\_ali\_abbas\_shah](https://discuss.elastic.co/u/Syed_ali_abbas_shah)\ **Replies:** 4\ **Last updated:** [April 22, 2018, 11:55am UTC](https://discuss.elastic.co/t/multiple-join-type-fields-in-a-index/128974 "2018-04-22T11:55:50Z")
I want to confirm I have to achieve a scenario where I want to filter those who blocked\_me or I blocked, is the any support of multiple join types in current ES version "join\_type1": { "type": "join",… --- ## [Is there a way to add a NGram field without reindexing documents?](https://discuss.elastic.co/t/is-there-a-way-to-add-a-ngram-field-without-reindexing-documents/128932)
**Author:** [@totessusan](https://discuss.elastic.co/u/totessusan)\ **Replies:** 1\ **Last updated:** [April 22, 2018, 8:19am UTC](https://discuss.elastic.co/t/is-there-a-way-to-add-a-ngram-field-without-reindexing-documents/128932 "2018-04-22T08:19:48Z")
Say that I have a text field called "content," and I already have a field like content.raw - but I want to add a field that indexes documents with NGram applied (i.e. data would then be called by content.ngram). Is there… --- ## [Handling repository snapshots](https://discuss.elastic.co/t/handling-repository-snapshots/126343)
**Author:** [@ChaosMTA](https://discuss.elastic.co/u/ChaosMTA)\ **Replies:** 3\ **Last updated:** [April 22, 2018, 6:41am UTC](https://discuss.elastic.co/t/handling-repository-snapshots/126343 "2018-04-22T06:41:34Z")
Hey, I'm wondering what the recommended way is to backup a repository of elasticsearch? I want to push a snapshot to B2 Storage. Would it be acceptable to tar the whole thing and upload it and then delete any snapshots … --- ## [Elasticsearch - How to update/index multiple documents](https://discuss.elastic.co/t/elasticsearch-how-to-update-index-multiple-documents/128972)
**Author:** [@thebigk](https://discuss.elastic.co/u/thebigk)\ **Replies:** 1\ **Last updated:** [April 22, 2018, 12:21am UTC](https://discuss.elastic.co/t/elasticsearch-how-to-update-index-multiple-documents/128972 "2018-04-22T00:21:07Z")
I'm faced with a situation where I need to build an index of about 500,000 records. I'm using the official php client and wondering what should be the right way to do the update. The only solution I can think of is to h… --- ## [How to Filter Parent based on Children terms](https://discuss.elastic.co/t/how-to-filter-parent-based-on-children-terms/128978)
**Author:** [@Syed\_ali\_abbas\_shah](https://discuss.elastic.co/u/Syed_ali_abbas_shah)\ **Replies:** 0\ **Last updated:** [April 21, 2018, 8:01pm UTC](https://discuss.elastic.co/t/how-to-filter-parent-based-on-children-terms/128978 "2018-04-21T20:01:12Z")
I want to get those parent users where users not blocked particular user Here is my mapping { "properties": { "id": { "type": "keyword" }, "username": { "type": "text", "fields": { "raw": { "… --- ## [Increasing limit on inner hits](https://discuss.elastic.co/t/increasing-limit-on-inner-hits/128943)
**Author:** [@Vijay\_arora1](https://discuss.elastic.co/u/Vijay_arora1)\ **Replies:** 1\ **Last updated:** [April 21, 2018, 6:11pm UTC](https://discuss.elastic.co/t/increasing-limit-on-inner-hits/128943 "2018-04-21T18:11:35Z")
I want to get the filtered list of nested documents, so i started working with inner\_hits, which allows to get the filtered nested items. However the inner hits has a size constraint of 100. I have more than 100 items p… --- ## [Login is currently dissabled. Administrator should consult the Kibana Log](https://discuss.elastic.co/t/login-is-currently-dissabled-administrator-should-consult-the-kibana-log/128946)
**Author:** [@shsh](https://discuss.elastic.co/u/shsh)\ **Replies:** 4\ **Last updated:** [April 21, 2018, 5:58pm UTC](https://discuss.elastic.co/t/login-is-currently-dissabled-administrator-should-consult-the-kibana-log/128946 "2018-04-21T17:58:12Z")
I'M unable to start Kibana. The Main pages display "Login Is currently Disable. Administrator should consult kibana log". The setup is installed with X-pack. I have disable the security in Elasticsearch.yml and Kibana.… --- ## [Sorting parents on property of inner hits](https://discuss.elastic.co/t/sorting-parents-on-property-of-inner-hits/128969)
**Author:** [@Syed\_ali\_abbas\_shah](https://discuss.elastic.co/u/Syed_ali_abbas_shah)\ **Replies:** 0\ **Last updated:** [April 21, 2018, 1:21pm UTC](https://discuss.elastic.co/t/sorting-parents-on-property-of-inner-hits/128969 "2018-04-21T13:21:19Z")
We have an index with Parent and Child Model, users and posts. Now we have a has\_child query on posts, to be able to sort users based on desc order of post creation. in other words I need the user on top which has very … --- ## [How to open indices for last 30 days only](https://discuss.elastic.co/t/how-to-open-indices-for-last-30-days-only/128958)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 1\ **Last updated:** [April 21, 2018, 9:35am UTC](https://discuss.elastic.co/t/how-to-open-indices-for-last-30-days-only/128958 "2018-04-21T09:35:39Z")
Hi, Using curator or any other way , how can i open indices for last 30 days only. -- Niraj --- ## [Group by consecutive values in elastic search](https://discuss.elastic.co/t/group-by-consecutive-values-in-elastic-search/128081)
**Author:** [@rajjangir](https://discuss.elastic.co/u/rajjangir)\ **Replies:** 2\ **Last updated:** [April 21, 2018, 9:08am UTC](https://discuss.elastic.co/t/group-by-consecutive-values-in-elastic-search/128081 "2018-04-21T09:08:38Z")
I have document structure like below :-1: { "id" : 1, "imei" : "1002786191", "date" : 2018-04-15", "totalData" : \[ { "latitude" : 1.89754, "longitude" : 2.89765, "speed" : 0, "gpsdt" : "2018-04-15T09:18:23" }, … --- ## [Regex for \_close indices](https://discuss.elastic.co/t/regex-for-close-indices/128929)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 4\ **Last updated:** [April 21, 2018, 8:12am UTC](https://discuss.elastic.co/t/regex-for-close-indices/128929 "2018-04-21T08:12:02Z")
Hi, I have few indices that are named like cloudtrail-dev-abc-2017 cloudtrail-dev-abc-2018 cloudtrail-dev-def-2017 cloudtrail-dev-def-2018 If i need to close all indices that ends with 2017. Is there a way i can do… --- ## [Regular expression as a parameter in painless](https://discuss.elastic.co/t/regular-expression-as-a-parameter-in-painless/128838)
**Author:** [@anoopvalluthadam](https://discuss.elastic.co/u/anoopvalluthadam)\ **Replies:** 3\ **Last updated:** [April 21, 2018, 6:43am UTC](https://discuss.elastic.co/t/regular-expression-as-a-parameter-in-painless/128838 "2018-04-21T06:43:54Z")
{ "query": { "bool": { "must": \[ { "query\_string": { "query": "a\*", "quote\_analyzer": "standard", "allow\_leading\_wildc… --- ## [How to get sql rest api working from kibana?](https://discuss.elastic.co/t/how-to-get-sql-rest-api-working-from-kibana/128954)
**Author:** [@dalinqin](https://discuss.elastic.co/u/dalinqin)\ **Replies:** 2\ **Last updated:** [April 21, 2018, 6:10am UTC](https://discuss.elastic.co/t/how-to-get-sql-rest-api-working-from-kibana/128954 "2018-04-21T06:10:13Z")
Hello everyone , i'm trying with sql rest api my elasticsearch version is 6.2.4. after installed xpack for both es and kibana ,i tried the following command from kibana dev tools, it give me the error below . Also i… --- ## [Centralized Pipeline Viewer and Nested IF](https://discuss.elastic.co/t/centralized-pipeline-viewer-and-nested-if/128787)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 3\ **Last updated:** [April 21, 2018, 12:31am UTC](https://discuss.elastic.co/t/centralized-pipeline-viewer-and-nested-if/128787 "2018-04-21T00:31:49Z")
I'm sure you guys have already seen this type of behavior but when dealing with nested IF statements, the pipeline viewer seems to have a stroke, lol. This is one of my more complex pipelines: \[image\] --- ## [Latest LS X-Pack still using a deprecated feature](https://discuss.elastic.co/t/latest-ls-x-pack-still-using-a-deprecated-feature/128866)
**Author:** [@Mojster](https://discuss.elastic.co/u/Mojster)\ **Replies:** 4\ **Last updated:** [April 20, 2018, 6:05pm UTC](https://discuss.elastic.co/t/latest-ls-x-pack-still-using-a-deprecated-feature/128866 "2018-04-20T18:05:33Z")
LS & X-Pack are home based product. So why are they still using deprecated feature in 6.2.4? \[2018-04-20T13:32:52,331\]\[WARN \]\[logstash.outputs.elasticsearch\] You are using a deprecated config setting "document\_type" set… --- ## [Rally data load fails 80/20 all the time](https://discuss.elastic.co/t/rally-data-load-fails-80-20-all-the-time/128595)
**Author:** [@sarba](https://discuss.elastic.co/u/sarba)\ **Replies:** 5\ **Last updated:** [April 20, 2018, 5:34pm UTC](https://discuss.elastic.co/t/rally-data-load-fails-80-20-all-the-time/128595 "2018-04-20T17:34:27Z")
Running on Elastic Search data load using Rally and it is failing 80/20 all the time. esrally --track=contactdata --target-hosts=esdb01-cqs01.db.us-west-1a.stg1.ebs.ebcolo.com:9200 --track-params="bulk\_size:2000" --pipe… --- ## [Fscrawler index large file](https://discuss.elastic.co/t/fscrawler-index-large-file/128823)
**Author:** [@asmael](https://discuss.elastic.co/u/asmael)\ **Replies:** 10\ **Last updated:** [April 20, 2018, 5:15pm UTC](https://discuss.elastic.co/t/fscrawler-index-large-file/128823 "2018-04-20T17:15:08Z")
hello , I want to know how can I index a large file I want the whole content to be added , I already tried this : "\_indexed\_chars": "100%" but it dosen't work thank you --- ## [Ingest attachmnet increase file content size to index](https://discuss.elastic.co/t/ingest-attachmnet-increase-file-content-size-to-index/127624)
**Author:** [@Vikentyi](https://discuss.elastic.co/u/Vikentyi)\ **Replies:** 15\ **Last updated:** [April 20, 2018, 4:59pm UTC](https://discuss.elastic.co/t/ingest-attachmnet-increase-file-content-size-to-index/127624 "2018-04-20T16:59:37Z")
Hello. I am using Elasticsearch 5.4 and ingest-attachment plugin. It works fine with index, search, analyzing with file content up to 32kb, but I have a requirement for indexing and searching big files. I found the solu… --- ## [Does elastic search support transaction?](https://discuss.elastic.co/t/does-elastic-search-support-transaction/128913)
**Author:** [@Rei](https://discuss.elastic.co/u/Rei)\ **Replies:** 1\ **Last updated:** [April 20, 2018, 4:38pm UTC](https://discuss.elastic.co/t/does-elastic-search-support-transaction/128913 "2018-04-20T16:38:02Z")
Does elastic search support transaction? I want to perform locking and rollback. --- ## [\[terms\] malformed query, expected \[END\_OBJECT\] but found \[FIELD\_NAME\]](https://discuss.elastic.co/t/terms-malformed-query-expected-end-object-but-found-field-name/128765)
**Author:** [@Syed\_ali\_abbas\_shah](https://discuss.elastic.co/u/Syed_ali_abbas_shah)\ **Replies:** 2\ **Last updated:** [April 20, 2018, 3:50pm UTC](https://discuss.elastic.co/t/terms-malformed-query-expected-end-object-but-found-field-name/128765 "2018-04-20T15:50:44Z")
Here is my mapping { "mappings": { "movie": { "properties": { "film\_to\_franchise": { "type": "join", "relations": { "franchise": "film", "film":"cast" … --- ## [Sortproblem using the cURL API](https://discuss.elastic.co/t/sortproblem-using-the-curl-api/127781)
**Author:** [@virapp](https://discuss.elastic.co/u/virapp)\ **Replies:** 1\ **Last updated:** [April 20, 2018, 3:33pm UTC](https://discuss.elastic.co/t/sortproblem-using-the-curl-api/127781 "2018-04-20T15:33:23Z")
Hi! I'm trying to use the cURL API together with the request library i python and having problems with the parameters for sorting my response isn't affecting the result I'm receving. The same parameters works fine runn… --- ## [Document missing when processing bulk operation](https://discuss.elastic.co/t/document-missing-when-processing-bulk-operation/128852)
**Author:** [@Ganesh\_Ravikumar](https://discuss.elastic.co/u/Ganesh_Ravikumar)\ **Replies:** 2\ **Last updated:** [April 20, 2018, 1:21pm UTC](https://discuss.elastic.co/t/document-missing-when-processing-bulk-operation/128852 "2018-04-20T13:21:24Z")
Documents are missing when processing bulk operation. Pushing 12000 records but in the response it shows only 6500. When looked in to elastic search logs, found the following information. Also verified all 12000 are uniq… --- ## [Avoiding the Split Brain](https://discuss.elastic.co/t/avoiding-the-split-brain/128746)
**Author:** [@aslamy1](https://discuss.elastic.co/u/aslamy1)\ **Replies:** 12\ **Last updated:** [April 20, 2018, 1:15pm UTC](https://discuss.elastic.co/t/avoiding-the-split-brain/128746 "2018-04-20T13:15:14Z")
Hi ! I have a cluster with two nodes. Can I avoid split brain if I always send create/update/delete requests to one of this nodes ? (I know there are other solutions) [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1711) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1713)