# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1719 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1720 --- ## [Indexing different type logs](https://discuss.elastic.co/t/indexing-different-type-logs/127877)
**Author:** [@Sebastian\_Herrera](https://discuss.elastic.co/u/Sebastian_Herrera)\ **Replies:** 1\ **Last updated:** [April 15, 2018, 3:24am UTC](https://discuss.elastic.co/t/indexing-different-type-logs/127877 "2018-04-15T03:24:47Z")
Hi guys, i am parsing syslog logs from different sources (firewal, polyphone,etc), my question is what is better, to use only one index or have multiple index (one per source) Regards --- ## [List/backup/restore watchers](https://discuss.elastic.co/t/list-backup-restore-watchers/123403)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 11\ **Last updated:** [April 14, 2018, 9:44pm UTC](https://discuss.elastic.co/t/list-backup-restore-watchers/123403 "2018-04-14T21:44:33Z")
I created several Watches via Kibana and after looking over at Watcher APIs | Elasticsearch Reference \[6.2\] | Elastic I have following questions: Is there a way to get list all watchers? Is there a way to GET watcher … --- ## [Indexing CIDR block e.g.: 192.168.1.0/24](https://discuss.elastic.co/t/indexing-cidr-block-e-g-192-168-1-0-24/128036)
**Author:** [@vramakrishnan](https://discuss.elastic.co/u/vramakrishnan)\ **Replies:** 5\ **Last updated:** [April 14, 2018, 9:24pm UTC](https://discuss.elastic.co/t/indexing-cidr-block-e-g-192-168-1-0-24/128036 "2018-04-14T21:24:29Z")
Is there a solution to index fields in CIDR block format and have the same "ip" datatype like functionality with CIDR query. ? Using ip-type mapping, I got this error. "error": { "root\_cause": \[ { … --- ## [Elasticsearch for DNA sequence analysis](https://discuss.elastic.co/t/elasticsearch-for-dna-sequence-analysis/128057)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 1\ **Last updated:** [April 14, 2018, 9:11pm UTC](https://discuss.elastic.co/t/elasticsearch-for-dna-sequence-analysis/128057 "2018-04-14T21:11:29Z")
I am interested if Elasticsearch has been used for this before. I saw one article about using Elasticsearch for DNA, but it didn't go into much detail about how it was used and from the looks of it I'd imagine with wasn'… --- ## [Failed to connect to IP STATIC port 9200: Connexion refusée](https://discuss.elastic.co/t/failed-to-connect-to-ip-static-port-9200-connexion-refusee/127335)
**Author:** [@asamlal](https://discuss.elastic.co/u/asamlal)\ **Replies:** 15\ **Last updated:** [April 14, 2018, 7:46pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-ip-static-port-9200-connexion-refusee/127335 "2018-04-14T19:46:23Z")
Hi all, I have this message :"connect to IP STATIC port 9200: Connexion refusée" when I try to connect to Elasticsearch with static ip address in elastecsearch.yml as below: network.host: 10.10.10.50 but when I put lo… --- ## [Unable to launch elasticsearch](https://discuss.elastic.co/t/unable-to-launch-elasticsearch/128050)
**Author:** [@a1cb1d2dbb857896bbf0](https://discuss.elastic.co/u/a1cb1d2dbb857896bbf0)\ **Replies:** 1\ **Last updated:** [April 14, 2018, 4:57pm UTC](https://discuss.elastic.co/t/unable-to-launch-elasticsearch/128050 "2018-04-14T16:57:34Z")
$ /opt/elasticsearch-6.2.3/bin/elasticsearch Exception in thread "main" java.nio.file.AccessDeniedException: /opt/elasticsearch-6.2.3/config/jvm.options at sun.nio.fs.UnixException.translateToIOException(UnixException.… --- ## [Understanding the custom rescore plugin execution flow](https://discuss.elastic.co/t/understanding-the-custom-rescore-plugin-execution-flow/127776)
**Author:** [@pere.urbon](https://discuss.elastic.co/u/pere.urbon)\ **Replies:** 2\ **Last updated:** [April 14, 2018, 1:05pm UTC](https://discuss.elastic.co/t/understanding-the-custom-rescore-plugin-execution-flow/127776 "2018-04-14T13:05:03Z")
Hi, my name is Pere Urbon, I am currently building a plugin for elasticsearch to implement fair ranking/search strategies. My initial idea has been to build this as a recore plugin due to the fact that the original pape… --- ## [Apply analyzer to multiple documents properties (or on index) at once](https://discuss.elastic.co/t/apply-analyzer-to-multiple-documents-properties-or-on-index-at-once/124482)
**Author:** [@nmathur](https://discuss.elastic.co/u/nmathur)\ **Replies:** 12\ **Last updated:** [April 14, 2018, 12:26pm UTC](https://discuss.elastic.co/t/apply-analyzer-to-multiple-documents-properties-or-on-index-at-once/124482 "2018-04-14T12:26:08Z")
I am working on elasticsearch Nest. I am trying to set analyzer to property of a document but process is always unsuccessful because another document has property with same name .. I am getting below error message: {Ty… --- ## [Query for sum of two nested object fields of a document](https://discuss.elastic.co/t/query-for-sum-of-two-nested-object-fields-of-a-document/127750)
**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\ **Replies:** 7\ **Last updated:** [April 14, 2018, 6:33am UTC](https://discuss.elastic.co/t/query-for-sum-of-two-nested-object-fields-of-a-document/127750 "2018-04-14T06:33:27Z")
Hi All, Could any one help me for a ES query for sum of two nested object fields of a document, for example, "\_source": { "Identification": { "PAYL\_HDR": { "DUNS\_NBR": "212003857", "GEO\_REF\_ID": "1067", "GSRL\_DT"… --- ## [Msearch Map request and response](https://discuss.elastic.co/t/msearch-map-request-and-response/126459)
**Author:** [@Aravind](https://discuss.elastic.co/u/Aravind)\ **Replies:** 6\ **Last updated:** [April 13, 2018, 10:51pm UTC](https://discuss.elastic.co/t/msearch-map-request-and-response/126459 "2018-04-13T22:51:26Z")
Hi I'm exploring multi search capability to see if it can cater to our requirement. My requirement simply is to perform single bulk search, rather than making series of individual calls. Once we get the response payload… --- ## [How to access json body in plugin](https://discuss.elastic.co/t/how-to-access-json-body-in-plugin/127882)
**Author:** [@sdeck51](https://discuss.elastic.co/u/sdeck51)\ **Replies:** 2\ **Last updated:** [April 13, 2018, 3:25pm UTC](https://discuss.elastic.co/t/how-to-access-json-body-in-plugin/127882 "2018-04-13T15:25:02Z")
Hello, I'm making an endpoint/plugin and am having trouble understanding how to access fields in POST bodies. For example, in RestTermVectorsAction it looks like it uses request.params("fieldname") to access the field.… --- ## [X-Pack monitoring caches DNS indefinitely?](https://discuss.elastic.co/t/x-pack-monitoring-caches-dns-indefinitely/124191)
**Author:** [@amcinnes](https://discuss.elastic.co/u/amcinnes)\ **Replies:** 6\ **Last updated:** [April 13, 2018, 4:21pm UTC](https://discuss.elastic.co/t/x-pack-monitoring-caches-dns-indefinitely/124191 "2018-04-13T16:21:13Z")
I've encountered the same problem as described in https://discuss.elastic.co/t/consistantly-losing-monitoring-data-for-clusters/92512: I have a separate monitoring cluster, and sometimes my cluster stops sending data to … --- ## [Issue with consecutive ElasticSearch Query with Java API](https://discuss.elastic.co/t/issue-with-consecutive-elasticsearch-query-with-java-api/127997)
**Author:** [@arghya.b](https://discuss.elastic.co/u/arghya.b)\ **Replies:** 4\ **Last updated:** [April 13, 2018, 3:43pm UTC](https://discuss.elastic.co/t/issue-with-consecutive-elasticsearch-query-with-java-api/127997 "2018-04-13T15:43:05Z")
We have two different queries built using ElasticSearch Java API. First is update & second is delete on the same type of dicument. If the difference between firing the first & second query from user action is more than 2… --- ## [Index not replicated but split up in ES 1.4.2](https://discuss.elastic.co/t/index-not-replicated-but-split-up-in-es-1-4-2/127464)
**Author:** [@rgarz](https://discuss.elastic.co/u/rgarz)\ **Replies:** 1\ **Last updated:** [April 13, 2018, 3:04pm UTC](https://discuss.elastic.co/t/index-not-replicated-but-split-up-in-es-1-4-2/127464 "2018-04-13T15:04:05Z")
Hi we recognised that something is wrong with one of our indices. curl -XPOST 'http://user:password@localhost:9200/indice/devices/\_search' -d '{ "query": { "query\_string": { "query": "panel:abcdefg AND is:fixed AND last… --- ## [When does the version come? 12.1.2](https://discuss.elastic.co/t/when-does-the-version-come-12-1-2/127753)
**Author:** [@wancode](https://discuss.elastic.co/u/wancode)\ **Replies:** 1\ **Last updated:** [April 13, 2018, 2:58pm UTC](https://discuss.elastic.co/t/when-does-the-version-come-12-1-2/127753 "2018-04-13T14:58:53Z")
Hello, -When does the version come? --- ## [Signification terms per document](https://discuss.elastic.co/t/signification-terms-per-document/127937)
**Author:** [@fdevillard](https://discuss.elastic.co/u/fdevillard)\ **Replies:** 2\ **Last updated:** [April 13, 2018, 2:56pm UTC](https://discuss.elastic.co/t/signification-terms-per-document/127937 "2018-04-13T14:56:43Z")
Dear all, I’d like to perform a search query over some indices and compute documents’ significant terms directly in it. The use case is to be able to give these keywords to the user in order to help her/him to select … --- ## [Scripted field How to retrieve recursive values](https://discuss.elastic.co/t/scripted-field-how-to-retrieve-recursive-values/126959)
**Author:** [@fxolivieri](https://discuss.elastic.co/u/fxolivieri)\ **Replies:** 1\ **Last updated:** [April 13, 2018, 2:43pm UTC](https://discuss.elastic.co/t/scripted-field-how-to-retrieve-recursive-values/126959 "2018-04-13T14:43:50Z")
Hi ! I'm working with Kibana V5. I use mainly the Painless language with of scripted fields. In scripted fields, I use the "doc\['field.keyword'\].value" method to retrieve the value. In this project , there are many recu… --- ## [Switching off the indexing on specific fields](https://discuss.elastic.co/t/switching-off-the-indexing-on-specific-fields/123954)
**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\ **Replies:** 6\ **Last updated:** [April 13, 2018, 2:42pm UTC](https://discuss.elastic.co/t/switching-off-the-indexing-on-specific-fields/123954 "2018-04-13T14:42:22Z")
Hi I went through ES documentation bit confusing for me I have a document with 50fields... in that i want to index on 5 fields. 45 fields i dont want to index or dont want to search or sort or filter or aggregate... I … --- ## [Adding new calculated field to an object inside an array (foreach)](https://discuss.elastic.co/t/adding-new-calculated-field-to-an-object-inside-an-array-foreach/127947)
**Author:** [@LGans316](https://discuss.elastic.co/u/LGans316)\ **Replies:** 2\ **Last updated:** [April 13, 2018, 1:55pm UTC](https://discuss.elastic.co/t/adding-new-calculated-field-to-an-object-inside-an-array-foreach/127947 "2018-04-13T13:55:15Z")
My first post here. So please bear with me. Sample document: { "persons" : \[ { "id" : "1", "name" : "John Doe" }, { "id" : "2", "name" : "Jane Doe" } \] } I would like to add … --- ## [Enable xpack authentication without TLS with GOLD license](https://discuss.elastic.co/t/enable-xpack-authentication-without-tls-with-gold-license/127974)
**Author:** [@jgb](https://discuss.elastic.co/u/jgb)\ **Replies:** 1\ **Last updated:** [April 13, 2018, 1:41pm UTC](https://discuss.elastic.co/t/enable-xpack-authentication-without-tls-with-gold-license/127974 "2018-04-13T13:41:01Z")
Hello, In our project we have a GOLD elastic license, but in order to put it into elastic cluster it says that we need to enable TLS or disable security (setting xpack.security.enabled: false). There is a way to use xp… --- ## [Elasticsearch snapshot with s3 plugin with compatible service](https://discuss.elastic.co/t/elasticsearch-snapshot-with-s3-plugin-with-compatible-service/126922)
**Author:** [@davepanarese](https://discuss.elastic.co/u/davepanarese)\ **Replies:** 1\ **Last updated:** [April 13, 2018, 1:37pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-with-s3-plugin-with-compatible-service/126922 "2018-04-13T13:37:03Z")
Hi Guys, i'm trying to setup snapshot of my elasticsearch cluster with a compatible S3 service but i got an error on setup. I'm using ES 1.7.6 with cloud-aws 2.7.1. Plugin rebuild my endpoint with .endpoint\_url that o… --- ## [Merging document \_source from 2 indices to a 3rd index](https://discuss.elastic.co/t/merging-document-source-from-2-indices-to-a-3rd-index/119365)
**Author:** [@ehtishamkhan](https://discuss.elastic.co/u/ehtishamkhan)\ **Replies:** 3\ **Last updated:** [April 13, 2018, 1:32pm UTC](https://discuss.elastic.co/t/merging-document-source-from-2-indices-to-a-3rd-index/119365 "2018-04-13T13:32:57Z")
I have a couple of indices with the following document structure. Index 1 "\_source": { "guid": "abc123", "documentdescription": "document description", } Index 2 "\_source": { "guid": "abc123", "documenttitle": "… --- ## [Date format interchangeable](https://discuss.elastic.co/t/date-format-interchangeable/127935)
**Author:** [@Varan](https://discuss.elastic.co/u/Varan)\ **Replies:** 6\ **Last updated:** [April 13, 2018, 1:16pm UTC](https://discuss.elastic.co/t/date-format-interchangeable/127935 "2018-04-13T13:16:37Z")
Hi, I'm using ES 6.2.2 I have multiple date format, so I have precised them in the format like this: "format": "date|| basic\_date", So 20060606 can be indexed via "basic\_date" and 2005-05-05 can be indexed via "date"… --- ## [How can i save disk space in elasticsearch](https://discuss.elastic.co/t/how-can-i-save-disk-space-in-elasticsearch/127782)
**Author:** [@raja\_gopal](https://discuss.elastic.co/u/raja_gopal)\ **Replies:** 2\ **Last updated:** [April 13, 2018, 1:11pm UTC](https://discuss.elastic.co/t/how-can-i-save-disk-space-in-elasticsearch/127782 "2018-04-13T13:11:24Z")
I have a three nodes cluster each of 114 GB disk capacity. I am pushing syslog events from around 190 devices to this server. The events flow at a rate of 100k withing 15 mins. The index has 5 shards and uses best\_compre… --- ## [Query Multiple Indexes, but apply queries to specific index](https://discuss.elastic.co/t/query-multiple-indexes-but-apply-queries-to-specific-index/127858)
**Author:** [@Airn5475](https://discuss.elastic.co/u/Airn5475)\ **Replies:** 5\ **Last updated:** [April 13, 2018, 1:03pm UTC](https://discuss.elastic.co/t/query-multiple-indexes-but-apply-queries-to-specific-index/127858 "2018-04-13T13:03:16Z")
I am querying two indexes. They both have the same field. I want to apply one of my queries to one of the indexes and not both. Here's an extremely basic example that represents what I'm trying to do: PUT places { … --- ## [Ingest-user-agent Plugin](https://discuss.elastic.co/t/ingest-user-agent-plugin/127949)
**Author:** [@Rolf\_Anderegg](https://discuss.elastic.co/u/Rolf_Anderegg)\ **Replies:** 3\ **Last updated:** [April 13, 2018, 12:50pm UTC](https://discuss.elastic.co/t/ingest-user-agent-plugin/127949 "2018-04-13T12:50:34Z")
I updated the elasticsearch trought yum to 6.2.3. After the update the elasticsearch did not start after investigating the logfile i found out that plugins are not compatible. As described in the documentation i tried t… --- ## [Bulk indexing crashes](https://discuss.elastic.co/t/bulk-indexing-crashes/127946)
**Author:** [@Islam\_Elshobokshy](https://discuss.elastic.co/u/Islam_Elshobokshy)\ **Replies:** 6\ **Last updated:** [April 13, 2018, 11:59am UTC](https://discuss.elastic.co/t/bulk-indexing-crashes/127946 "2018-04-13T11:59:35Z")
Hello all, I've got a problem, an urgent one. I'm trying to bulk insert 500.000 data into elastic search, but it keeps loading forever and then crashes, he doesn't like it. My mapping contains 20 elements, my query co… --- ## [Define an index name when the file is already created](https://discuss.elastic.co/t/define-an-index-name-when-the-file-is-already-created/127926)
**Author:** [@pablo\_gracia](https://discuss.elastic.co/u/pablo_gracia)\ **Replies:** 8\ **Last updated:** [April 13, 2018, 10:44am UTC](https://discuss.elastic.co/t/define-an-index-name-when-the-file-is-already-created/127926 "2018-04-13T10:44:10Z")
How can i create an index in elasticsearch when a file is already created and it contains logs? the path is /var/log/tcp.log and i want to call the index "tcp" Apr 5 16:11:01 T30\_PABLO (2018-04-05T14:11:01) http-prox… --- ## [Upgrades are SO FRAGILE](https://discuss.elastic.co/t/upgrades-are-so-fragile/127930)
**Author:** [@markdaku](https://discuss.elastic.co/u/markdaku)\ **Replies:** 3\ **Last updated:** [April 13, 2018, 9:57am UTC](https://discuss.elastic.co/t/upgrades-are-so-fragile/127930 "2018-04-13T09:57:40Z")
Every single time I perform an upgrade there is a long host of activities that needs to be done. The more addons in the system the more fragile it gets. Resulting in extended down times. Which also usually means lost … --- ## [Synonym IDF documentation](https://discuss.elastic.co/t/synonym-idf-documentation/127948)
**Author:** [@imranazad](https://discuss.elastic.co/u/imranazad)\ **Replies:** 0\ **Last updated:** [April 13, 2018, 9:47am UTC](https://discuss.elastic.co/t/synonym-idf-documentation/127948 "2018-04-13T09:47:57Z")
Does the advice on the advantages and disadvantages of synonym expansion need updating: https://www.elastic.co/guide/en/elasticsearch/guide/current/synonyms-expand-or-contract.html It seems that query side or index sid… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1718) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1720)