# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1737 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1738 --- ## [Static mapping looks like dynamic in Kibana](https://discuss.elastic.co/t/static-mapping-looks-like-dynamic-in-kibana/125977)
**Author:** [@Doritos250](https://discuss.elastic.co/u/Doritos250)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 5:32pm UTC](https://discuss.elastic.co/t/static-mapping-looks-like-dynamic-in-kibana/125977 "2018-03-28T17:32:08Z")
Hi everyone, I'm currently changing my template mapping from Dynamic to Static. I've done the following actions on Kibana regardless old data: Delete Index in Kibana Delete template delete related indice Then: Upl… --- ## [Security trimming in elastic search result](https://discuss.elastic.co/t/security-trimming-in-elastic-search-result/125975)
**Author:** [@fengfly](https://discuss.elastic.co/u/fengfly)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 5:12pm UTC](https://discuss.elastic.co/t/security-trimming-in-elastic-search-result/125975 "2018-03-28T17:12:31Z")
We want to use Elastic Search to crawl and index the file server and then end user could search the files. However we do need the security trimming on the search result so the current end user could only see the files he… --- ## [Buckets\_path parameter percents not accepting a double value](https://discuss.elastic.co/t/buckets-path-parameter-percents-not-accepting-a-double-value/125798)
**Author:** [@saii](https://discuss.elastic.co/u/saii)\ **Replies:** 8\ **Last updated:** [March 28, 2018, 4:22pm UTC](https://discuss.elastic.co/t/buckets-path-parameter-percents-not-accepting-a-double-value/125798 "2018-03-28T16:22:05Z")
I have written a watch program which uses percentile to calculate the 90th percentile of the aggregated data and when plotted against threshold,it should alert if its crossing the threshold. The percents parameter conta… --- ## [Setting unique \_id](https://discuss.elastic.co/t/setting-unique-id/125968)
**Author:** [@ventrca](https://discuss.elastic.co/u/ventrca)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 4:08pm UTC](https://discuss.elastic.co/t/setting-unique-id/125968 "2018-03-28T16:08:25Z")
Hi, in my application I have to prevent the insertion of duplicates, so what I did until now is to set as \_id a digest of my message. But I realized that two documents in different index can have same \_id. My index pat… --- ## [Fragment texts starting with "..."](https://discuss.elastic.co/t/fragment-texts-starting-with/125829)
**Author:** [@MolloKhan](https://discuss.elastic.co/u/MolloKhan)\ **Replies:** 2\ **Last updated:** [March 28, 2018, 3:57pm UTC](https://discuss.elastic.co/t/fragment-texts-starting-with/125829 "2018-03-28T15:57:53Z")
Hi, I've been searching for documentation that guides me to how to prepend/append a fragmented text with "..." (3 dots), just like this site does, but all that I've found is this: https://www.elastic.co/guide/en/elastics… --- ## [Getting only items from "array\_compare" condition is met](https://discuss.elastic.co/t/getting-only-items-from-array-compare-condition-is-met/123959)
**Author:** [@saranyav](https://discuss.elastic.co/u/saranyav)\ **Replies:** 4\ **Last updated:** [March 28, 2018, 3:01pm UTC](https://discuss.elastic.co/t/getting-only-items-from-array-compare-condition-is-met/123959 "2018-03-28T15:01:55Z")
Hello Everyone, I am trying to get IP-address that is been used to register more that 2 users and flag the IP as anomolous. I tried to do "aggs" by grouping by IPaddress with the "array\_compare" condition. Once the co… --- ## [Unable to find scripts file on disk exception](https://discuss.elastic.co/t/unable-to-find-scripts-file-on-disk-exception/125365)
**Author:** [@saii](https://discuss.elastic.co/u/saii)\ **Replies:** 14\ **Last updated:** [March 28, 2018, 1:41pm UTC](https://discuss.elastic.co/t/unable-to-find-scripts-file-on-disk-exception/125365 "2018-03-28T13:41:46Z")
I have found a script on the following link https://www.elastic.co/blog/implementing-a-statistical-anomaly-deetector-part-3 The data collection watch in this link contains a script, which when it runs on rest api gives… --- ## [POST analyzed, Index](https://discuss.elastic.co/t/post-analyzed-index/125718)
**Author:** [@Varan](https://discuss.elastic.co/u/Varan)\ **Replies:** 18\ **Last updated:** [March 28, 2018, 1:18pm UTC](https://discuss.elastic.co/t/post-analyzed-index/125718 "2018-03-28T13:18:58Z")
Hi, Sorry for this basic question, but I can't find any sense to it. I have an analyzer and wish it to analyze the data I index. But when I do this: POST my\_index/\_analyze { "analyzer": "my\_analyzer", "text": "Th… --- ## [Need to read Groke Filter Script and also conversion of File Format](https://discuss.elastic.co/t/need-to-read-groke-filter-script-and-also-conversion-of-file-format/125529)
**Author:** [@rakeshroshan](https://discuss.elastic.co/u/rakeshroshan)\ **Replies:** 3\ **Last updated:** [March 28, 2018, 1:18pm UTC](https://discuss.elastic.co/t/need-to-read-groke-filter-script-and-also-conversion-of-file-format/125529 "2018-03-28T13:18:25Z")
1 ) Where to Read Grok Filter . Could you please provide any GROK filter PDF. I don't want grok filter generator. For Ex. How to split, \UCID\ 02:33:55,889 FINE \[facelets… --- ## [Integration tests involving repository s3 and docker](https://discuss.elastic.co/t/integration-tests-involving-repository-s3-and-docker/125896)
**Author:** [@pvales](https://discuss.elastic.co/u/pvales)\ **Replies:** 3\ **Last updated:** [March 28, 2018, 1:17pm UTC](https://discuss.elastic.co/t/integration-tests-involving-repository-s3-and-docker/125896 "2018-03-28T13:17:47Z")
Hi, I'm struggling to create an integration test for our code orchestrating snapshots to S3. I've following setup: Docker compose of external services: services: s3: build: s3/ ports: - "9495:9495" el… --- ## [Poor performance Elasticsearch](https://discuss.elastic.co/t/poor-performance-elasticsearch/125591)
**Author:** [@alexruizdlc](https://discuss.elastic.co/u/alexruizdlc)\ **Replies:** 5\ **Last updated:** [March 28, 2018, 1:09pm UTC](https://discuss.elastic.co/t/poor-performance-elasticsearch/125591 "2018-03-28T13:09:24Z")
Hi, I'm having problem with my elasticsearch running server. At the beginning it was working fine, when I needed to update Data. But suddenly after trying to update several files at once (5 files), the system is performi… --- ## [Elasticsearch nodes keep restarting on Kubernetes](https://discuss.elastic.co/t/elasticsearch-nodes-keep-restarting-on-kubernetes/125936)
**Author:** [@mightwork](https://discuss.elastic.co/u/mightwork)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 12:47pm UTC](https://discuss.elastic.co/t/elasticsearch-nodes-keep-restarting-on-kubernetes/125936 "2018-03-28T12:47:34Z")
Hi, I have a 8 node cluster setup, with 3 master, 2 ingest and 3 data nodes running on Kubernetes(1.9.2). I am using a custom build image based on the official 6.2.2-x-pack image. The Dockerfile is below: FROM docker.e… --- ## [Aggregation on non-indexed fields](https://discuss.elastic.co/t/aggregation-on-non-indexed-fields/125912)
**Author:** [@Sundar\_V](https://discuss.elastic.co/u/Sundar_V)\ **Replies:** 1\ **Last updated:** [March 28, 2018, 12:46pm UTC](https://discuss.elastic.co/t/aggregation-on-non-indexed-fields/125912 "2018-03-28T12:46:45Z")
Hello, We are having in one ES 5.4, with 3 nodes and in total 80 shard. We have 800 million documents in these shards. When we are aggregating on certain fields, we see that it is very slow. The fields we are aggregat… --- ## [Secure the ELK password in config files](https://discuss.elastic.co/t/secure-the-elk-password-in-config-files/125931)
**Author:** [@Laxman](https://discuss.elastic.co/u/Laxman)\ **Replies:** 1\ **Last updated:** [March 28, 2018, 12:27pm UTC](https://discuss.elastic.co/t/secure-the-elk-password-in-config-files/125931 "2018-03-28T12:27:30Z")
I'm using x-pack to secure ELK stack , I don't want to specify plain text "password" in ELK Config files. Is any way to encrypt & decrypt --- ## [Not able to create watcher](https://discuss.elastic.co/t/not-able-to-create-watcher/125915)
**Author:** [@Rahulkumar](https://discuss.elastic.co/u/Rahulkumar)\ **Replies:** 7\ **Last updated:** [March 28, 2018, 12:23pm UTC](https://discuss.elastic.co/t/not-able-to-create-watcher/125915 "2018-03-28T12:23:11Z")
Hi, I have created a watcher. When I am trying to execute the same, I am getting below error: { "error": { "root\_cause": \[ { "type": "cluster\_block\_exception", "reason": "blocked by: \[SERVIC… --- ## [I want use scrpit in email action, but the param not working](https://discuss.elastic.co/t/i-want-use-scrpit-in-email-action-but-the-param-not-working/125888)
**Author:** [@Feng\_Mi](https://discuss.elastic.co/u/Feng_Mi)\ **Replies:** 2\ **Last updated:** [March 28, 2018, 12:08pm UTC](https://discuss.elastic.co/t/i-want-use-scrpit-in-email-action-but-the-param-not-working/125888 "2018-03-28T12:08:41Z")
{ "actions" : { "email\_notification" : { "email" : { "subject" : { "inline" : "{{color}} alert", "params" : { "color" : "red" } } } } } } --- ## [【6.x】tree search query](https://discuss.elastic.co/t/6-x-tree-search-query/125929)
**Author:** [@kgtkr](https://discuss.elastic.co/u/kgtkr)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 11:58am UTC](https://discuss.elastic.co/t/6-x-tree-search-query/125929 "2018-03-28T11:58:12Z")
Query and mapping to search for notifications { id:"comment1", user:"user1", reply:null } { id:"comment2", user:"user2", reply:"comment1" } { id:"comment3", user:"user3", reply:"comment2" } { id:"comment… --- ## [Bool Query - Find all values of "should"](https://discuss.elastic.co/t/bool-query-find-all-values-of-should/125917)
**Author:** [@Valter\_Gomes](https://discuss.elastic.co/u/Valter_Gomes)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 11:34am UTC](https://discuss.elastic.co/t/bool-query-find-all-values-of-should/125917 "2018-03-28T11:34:54Z")
Hello everyone! I need to create a query which search for a list of values and returns those values only if all values were found. Otherwise, it should return empty. For example: I'm trying to find out if a combinati… --- ## [Proximity Search with wildcard](https://discuss.elastic.co/t/proximity-search-with-wildcard/125907)
**Author:** [@kamalgupta0808](https://discuss.elastic.co/u/kamalgupta0808)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 10:20am UTC](https://discuss.elastic.co/t/proximity-search-with-wildcard/125907 "2018-03-28T10:20:41Z")
Hello, I am working on a patent doc. Is there a way where Query string Query be used to search in near(proximity) as well as with wildcard? I am not able to use span query because then I have to take care of many cases … --- ## [Field \[\_id\] is a metadata field and cannot be added inside a document](https://discuss.elastic.co/t/field-id-is-a-metadata-field-and-cannot-be-added-inside-a-document/125898)
**Author:** [@satyarajp](https://discuss.elastic.co/u/satyarajp)\ **Replies:** 1\ **Last updated:** [March 28, 2018, 10:42am UTC](https://discuss.elastic.co/t/field-id-is-a-metadata-field-and-cannot-be-added-inside-a-document/125898 "2018-03-28T10:42:28Z")
Hi Team, I've found some references with no luck to resolve the \_id field error. Please help me with following. Below is complete log trace. And I'm trying to set json source like this while persisting document in ES … --- ## [ElasticSearch log search query for user](https://discuss.elastic.co/t/elasticsearch-log-search-query-for-user/125901)
**Author:** [@Vignesh\_Kalai](https://discuss.elastic.co/u/Vignesh_Kalai)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 9:56am UTC](https://discuss.elastic.co/t/elasticsearch-log-search-query-for-user/125901 "2018-03-28T09:56:28Z")
We have built a Repo Document Search Engine\[RDSE\] using ElasticSearch. Multiple users from multiple organisation will use the RDSE. We need to audit those query along with the user information this would enable us to a… --- ## [Elasticsearch query output in table format](https://discuss.elastic.co/t/elasticsearch-query-output-in-table-format/125882)
**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\ **Replies:** 1\ **Last updated:** [March 28, 2018, 9:23am UTC](https://discuss.elastic.co/t/elasticsearch-query-output-in-table-format/125882 "2018-03-28T09:23:34Z")
Hi , Is theare any way to get elasticsearch curl query output in table format or I need to write a wrapper script to process this output to archived the data in tabular format. I have the following query: curl -XGET "h… --- ## [Language Detector Processor in Elasticsearch Ingest pipeline](https://discuss.elastic.co/t/language-detector-processor-in-elasticsearch-ingest-pipeline/125659)
**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\ **Replies:** 3\ **Last updated:** [March 28, 2018, 9:20am UTC](https://discuss.elastic.co/t/language-detector-processor-in-elasticsearch-ingest-pipeline/125659 "2018-03-28T09:20:07Z")
Hello, Is there any way where i can detect the different languages present in the message or text through ingest pipeline ? Regards,, Rohan --- ## [Watcher error after upgrade from 5.6.8 to 6.2.2](https://discuss.elastic.co/t/watcher-error-after-upgrade-from-5-6-8-to-6-2-2/125891)
**Author:** [@massimo](https://discuss.elastic.co/u/massimo)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 8:59am UTC](https://discuss.elastic.co/t/watcher-error-after-upgrade-from-5-6-8-to-6-2-2/125891 "2018-03-28T08:59:47Z")
Hello, after upgrading the stack from 5.6.8 to 6.2.2 the logs show: \[2018-03-28T10:56:21,684\]\[DEBUG\]\[o.e.a.s.TransportSearchAction\] \[elk02\] All shards failed for phase: \[query\] org.elasticsearch.search.SearchContextExc… --- ## [About parent child relationship usage](https://discuss.elastic.co/t/about-parent-child-relationship-usage/125890)
**Author:** [@die\_seltsame](https://discuss.elastic.co/u/die_seltsame)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 8:52am UTC](https://discuss.elastic.co/t/about-parent-child-relationship-usage/125890 "2018-03-28T08:52:08Z")
NEST/Elasticsearch.Net version: 6.0.0 Elasticsearch version: 6.2.0 I try to create parent/child relationship like here: https://www.elastic.co/guide/en/elasticsearch/client/net-api/current/parent-child-relationships.ht… --- ## [Can I also make a statistical grouping of my events?](https://discuss.elastic.co/t/can-i-also-make-a-statistical-grouping-of-my-events/125884)
**Author:** [@chenzilong444](https://discuss.elastic.co/u/chenzilong444)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 7:57am UTC](https://discuss.elastic.co/t/can-i-also-make-a-statistical-grouping-of-my-events/125884 "2018-03-28T07:57:03Z")
For example, I have a ID field that divides the fields of the same ID into one group, and I count all the data in the group at the time of Statistics --- ## [How can i contact multiple events by a field](https://discuss.elastic.co/t/how-can-i-contact-multiple-events-by-a-field/125879)
**Author:** [@chenzilong444](https://discuss.elastic.co/u/chenzilong444)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 7:18am UTC](https://discuss.elastic.co/t/how-can-i-contact-multiple-events-by-a-field/125879 "2018-03-28T07:18:21Z")
i have a field named ID ，maybe 3 or 4 events use the same ID for example a field named Result ，it contain four result leave ，cancel ，success ， error， now events \[ID:5728\]\[Result:leave\], \[ID:5728\]\[Result:s… --- ## [Elasticsearch-6.2.2 installation issue](https://discuss.elastic.co/t/elasticsearch-6-2-2-installation-issue/125700)
**Author:** [@sureshboiina](https://discuss.elastic.co/u/sureshboiina)\ **Replies:** 10\ **Last updated:** [March 28, 2018, 7:14am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-2-installation-issue/125700 "2018-03-28T07:14:06Z")
hi, Installed elasicsearch-6.2.2 When running using sudo service elasticsearch start elasticsearch is not starting and even not getting log files aslo so, went to messages and see there find Mar 27 12:34:54 RFG-LOG… --- ## [Start ES on Centos 7.4 problem](https://discuss.elastic.co/t/start-es-on-centos-7-4-problem/125709)
**Author:** [@Mojster](https://discuss.elastic.co/u/Mojster)\ **Replies:** 5\ **Last updated:** [March 28, 2018, 6:45am UTC](https://discuss.elastic.co/t/start-es-on-centos-7-4-problem/125709 "2018-03-28T06:45:17Z")
I'm running ES 6.2.3 stack on Windows server for more then half a year. Now when ma stack is fully configured and running, we've decided to move to Centos. So far I've installed ES and KB with X-Pack. KB is working, bu… --- ## [Connect to a remote server via. SSH - Using elasticsearch package (Node JS)](https://discuss.elastic.co/t/connect-to-a-remote-server-via-ssh-using-elasticsearch-package-node-js/125842)
**Author:** [@Abhilash\_Sathe](https://discuss.elastic.co/u/Abhilash_Sathe)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 3:24am UTC](https://discuss.elastic.co/t/connect-to-a-remote-server-via-ssh-using-elasticsearch-package-node-js/125842 "2018-03-28T03:24:17Z")
I'm currently using Node's elasticsearch package. Until now, I connected to the ES instance in the following way. let esClient = new elasticsearch.Client({ host: '127.0.0.1:9200', log: 'trace' }); Now, … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1736) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1738)