# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1748 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1749 --- ## [How can i extract data from elasticsearch](https://discuss.elastic.co/t/how-can-i-extract-data-from-elasticsearch/124347)
**Author:** [@djobes31770](https://discuss.elastic.co/u/djobes31770)\ **Replies:** 3\ **Last updated:** [March 19, 2018, 6:56pm UTC](https://discuss.elastic.co/t/how-can-i-extract-data-from-elasticsearch/124347 "2018-03-19T18:56:30Z")
I need to extract/export all winlogbeat data from once elk instance and reload/replay it into another for testing. What is the best and easiest way to get this done. --- ## [IllegalStateException Error when performing multisearch](https://discuss.elastic.co/t/illegalstateexception-error-when-performing-multisearch/124628)
**Author:** [@Brent\_Farrell](https://discuss.elastic.co/u/Brent_Farrell)\ **Replies:** 0\ **Last updated:** [March 19, 2018, 7:22pm UTC](https://discuss.elastic.co/t/illegalstateexception-error-when-performing-multisearch/124628 "2018-03-19T19:22:43Z")
Hello, We perform a large number of Multisearch queries in our application and we occasionally see this error come back from Elasticsearch: \< Caused by: java.lang.IllegalStateException: Negative longs unsupported, use… --- ## [Elasticsearch crash](https://discuss.elastic.co/t/elasticsearch-crash/124606)
**Author:** [@motts](https://discuss.elastic.co/u/motts)\ **Replies:** 6\ **Last updated:** [March 19, 2018, 7:07pm UTC](https://discuss.elastic.co/t/elasticsearch-crash/124606 "2018-03-19T19:07:24Z")
So it appears my Elasticsearch node crashed due to lucene memory issues. I have increased the memory and restarted Elasticsearch, but my logs are no longer showing in Kibana though they are in Elasticsearch. It looks li… --- ## [Different number of documents when querying Kibana vs Elasticsearch](https://discuss.elastic.co/t/different-number-of-documents-when-querying-kibana-vs-elasticsearch/124613)
**Author:** [@kyle1441](https://discuss.elastic.co/u/kyle1441)\ **Replies:** 1\ **Last updated:** [March 19, 2018, 6:36pm UTC](https://discuss.elastic.co/t/different-number-of-documents-when-querying-kibana-vs-elasticsearch/124613 "2018-03-19T18:36:32Z")
Hi everyone, I'm running the following query via the Kibana Dev Tools tab: GET \_search { "query": { "bool": { "must": { "match":{ "event.name":"client.player\_start" } }, … --- ## [Timeouts when indexing](https://discuss.elastic.co/t/timeouts-when-indexing/124591)
**Author:** [@mgo](https://discuss.elastic.co/u/mgo)\ **Replies:** 0\ **Last updated:** [March 19, 2018, 3:13pm UTC](https://discuss.elastic.co/t/timeouts-when-indexing/124591 "2018-03-19T15:13:52Z")
Dear All, I am using ES for logging requests/responses to an external API. In case of a problem, these logs are searched to resolve the issue. 99% of requests to ES are index/update queries. Most of the time it works,… --- ## [Update the mappings and settings of an existing index](https://discuss.elastic.co/t/update-the-mappings-and-settings-of-an-existing-index/124620)
**Author:** [@surajbs](https://discuss.elastic.co/u/surajbs)\ **Replies:** 1\ **Last updated:** [March 19, 2018, 5:57pm UTC](https://discuss.elastic.co/t/update-the-mappings-and-settings-of-an-existing-index/124620 "2018-03-19T17:57:28Z")
Hi All, I need to update the properties of index field as ''true" of noteText. I believe because of this "\_all" query is not retrieving the value from that field. Please share you opinions and ideas for this. Thank yo… --- ## [Best practices for automated incremental backups](https://discuss.elastic.co/t/best-practices-for-automated-incremental-backups/124504)
**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\ **Replies:** 1\ **Last updated:** [March 19, 2018, 5:31pm UTC](https://discuss.elastic.co/t/best-practices-for-automated-incremental-backups/124504 "2018-03-19T17:31:56Z")
Hi, I've been looking into the backup and restore plan for our modest elasticsearch cluster. We are currently setup in a "Hot/Warm" architecture with curator moving old indexs from hot to warm. We currently have 2x Hot … --- ## [Keystore and docker](https://discuss.elastic.co/t/keystore-and-docker/124618)
**Author:** [@mitchellmaler](https://discuss.elastic.co/u/mitchellmaler)\ **Replies:** 0\ **Last updated:** [March 19, 2018, 5:29pm UTC](https://discuss.elastic.co/t/keystore-and-docker/124618 "2018-03-19T17:29:04Z")
Hello I am getting started with using Docker for our elasticsearch cluster but when I use the truststore.password I get the warning about the deprecation. I think the reason for this is to move users over to the keystore… --- ## [Dynamic fields and searches](https://discuss.elastic.co/t/dynamic-fields-and-searches/124614)
**Author:** [@xsallowed](https://discuss.elastic.co/u/xsallowed)\ **Replies:** 0\ **Last updated:** [March 19, 2018, 5:14pm UTC](https://discuss.elastic.co/t/dynamic-fields-and-searches/124614 "2018-03-19T17:14:44Z")
Hi I am new to elasticsearch and lucene and trying to get my hands dirty with the data searches and the capability it provides in general. I am wondering if there is a way to create new fields in the documents as a resu… --- ## [Elasticsearch Default Replica Value](https://discuss.elastic.co/t/elasticsearch-default-replica-value/124593)
**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\ **Replies:** 4\ **Last updated:** [March 19, 2018, 5:09pm UTC](https://discuss.elastic.co/t/elasticsearch-default-replica-value/124593 "2018-03-19T17:09:36Z")
In Elasticsearch 6.2 is there a setting somewhere that assigns a default replica value of "1" somewhere? Our index templates do not assign a replica value, but our indexes are indeed replicated. We would like to know wh… --- ## [How to make a search result which can filter by options like amazon.com?](https://discuss.elastic.co/t/how-to-make-a-search-result-which-can-filter-by-options-like-amazon-com/124538)
**Author:** [@patrickwai](https://discuss.elastic.co/u/patrickwai)\ **Replies:** 6\ **Last updated:** [March 19, 2018, 4:35pm UTC](https://discuss.elastic.co/t/how-to-make-a-search-result-which-can-filter-by-options-like-amazon-com/124538 "2018-03-19T16:35:52Z")
Hello I am building a search project for products with following requirement: get results by a keyword then can filter results by some options in the web page. filter options , for example filter by categories, by br… --- ## [Help Required:- Forecast in Machine learning is not working as expected](https://discuss.elastic.co/t/help-required-forecast-in-machine-learning-is-not-working-as-expected/124294)
**Author:** [@Shridhar\_Malagi](https://discuss.elastic.co/u/Shridhar_Malagi)\ **Replies:** 2\ **Last updated:** [March 19, 2018, 4:31pm UTC](https://discuss.elastic.co/t/help-required-forecast-in-machine-learning-is-not-working-as-expected/124294 "2018-03-19T16:31:47Z")
Hi Team, I Tried using machine learning for anomaly detection & prediction using forecast feature.... I have loaded 1 year events(alarms) data & trying to do prediction of alert count by splitting domains(domain wise al… --- ## [Default Value for IP data type](https://discuss.elastic.co/t/default-value-for-ip-data-type/124547)
**Author:** [@Patricia\_Narvasa](https://discuss.elastic.co/u/Patricia_Narvasa)\ **Replies:** 1\ **Last updated:** [March 19, 2018, 3:31pm UTC](https://discuss.elastic.co/t/default-value-for-ip-data-type/124547 "2018-03-19T15:31:52Z")
Hi, I have this object with this mapping, "IpAddress": { "type": "ip", "index": "true", "null\_value": "NULL" }, I tried to persist a document with this value: Ex: ipAddress="" It successfully persisted but I have… --- ## [IP type: exclude 0.0.0.255/32](https://discuss.elastic.co/t/ip-type-exclude-0-0-0-255-32/124578)
**Author:** [@Sergio7000](https://discuss.elastic.co/u/Sergio7000)\ **Replies:** 0\ **Last updated:** [March 19, 2018, 2:33pm UTC](https://discuss.elastic.co/t/ip-type-exclude-0-0-0-255-32/124578 "2018-03-19T14:33:07Z")
Prior to upgrading to 6.2.2 the following query used to work perfectly fine: -DestAddress:"0.0.0.255/32" and was used to exclude any IP address with last octet equal to 255. "DestAddress" is of "IP" type. The query n… --- ## [Creating a default template as part of deployment](https://discuss.elastic.co/t/creating-a-default-template-as-part-of-deployment/124574)
**Author:** [@anonymouslemming](https://discuss.elastic.co/u/anonymouslemming)\ **Replies:** 0\ **Last updated:** [March 19, 2018, 2:30pm UTC](https://discuss.elastic.co/t/creating-a-default-template-as-part-of-deployment/124574 "2018-03-19T14:30:41Z")
Hi all, I'm deploying a new Elasticsearch application, and I'm trying to enforce some settings (such as replica shard count) as part of deployment. I know that I can create / update a template to set this value, but th… --- ## [Index action multi document performance](https://discuss.elastic.co/t/index-action-multi-document-performance/123028)
**Author:** [@None123455555](https://discuss.elastic.co/u/None123455555)\ **Replies:** 1\ **Last updated:** [March 19, 2018, 2:28pm UTC](https://discuss.elastic.co/t/index-action-multi-document-performance/123028 "2018-03-19T14:28:36Z")
I use a scripted metric aggregation to create a summary of all entities in an index and write them using a multi document index action to a new index. If I limit the index action to like 10k inserts it works okish. But i… --- ## [Elasticsearch \_CAT to excel spreadsheet](https://discuss.elastic.co/t/elasticsearch-cat-to-excel-spreadsheet/124567)
**Author:** [@Jeremy\_Foran](https://discuss.elastic.co/u/Jeremy_Foran)\ **Replies:** 0\ **Last updated:** [March 19, 2018, 1:52pm UTC](https://discuss.elastic.co/t/elasticsearch-cat-to-excel-spreadsheet/124567 "2018-03-19T13:52:38Z")
Wrote a little script to generate an excel spreadsheet with the results of a GET \_cat/indices. Thought I would share. from elasticsearch import Elasticsearch import xlsxwriter #########################################… --- ## [What is "minimun\_should\_match" in ES?](https://discuss.elastic.co/t/what-is-minimun-should-match-in-es/124539)
**Author:** [@Shaik\_Thowsif](https://discuss.elastic.co/u/Shaik_Thowsif)\ **Replies:** 1\ **Last updated:** [March 19, 2018, 1:41pm UTC](https://discuss.elastic.co/t/what-is-minimun-should-match-in-es/124539 "2018-03-19T13:41:22Z")
Can Anyone tell me what exactly is this clause "minimun\_should\_match " and how it is used? --- ## [Exception in thread "main" BindTransportException\[Failed to bind to \[9300-9400\]\]; nested: ChannelException\[Failed to bind to: /167.99.56.190:9400\]; when running on digital ocean cloud server](https://discuss.elastic.co/t/exception-in-thread-main-bindtransportexception-failed-to-bind-to-9300-9400-nested-channelexception-failed-to-bind-to-167-99-56-190-9400-when-running-on-digital-ocean-cloud-server/124470)
**Author:** [@edwardGunawan](https://discuss.elastic.co/u/edwardGunawan)\ **Replies:** 4\ **Last updated:** [March 19, 2018, 12:48pm UTC](https://discuss.elastic.co/t/exception-in-thread-main-bindtransportexception-failed-to-bind-to-9300-9400-nested-channelexception-failed-to-bind-to-167-99-56-190-9400-when-running-on-digital-ocean-cloud-server/124470 "2018-03-19T12:48:05Z")
I want to host my multi-container docker application and elasticsearch is one of the service in the container. I use docker-compose.yml file to host it in digital ocean cloud server 2GB Memory. I am just trying to host … --- ## [X-pack installation](https://discuss.elastic.co/t/x-pack-installation/123867)
**Author:** [@Nada\_I](https://discuss.elastic.co/u/Nada_I)\ **Replies:** 4\ **Last updated:** [March 19, 2018, 9:27am UTC](https://discuss.elastic.co/t/x-pack-installation/123867 "2018-03-19T09:27:34Z")
Hello, I want to install x-pack and the first step in the installation steps that install x-pack into elasticsearch i installed the msi package of elasticsearch and mark on x-pack through installation after that the el… --- ## [Recommended elasticsearch version for metrics](https://discuss.elastic.co/t/recommended-elasticsearch-version-for-metrics/124557)
**Author:** [@Retenodus](https://discuss.elastic.co/u/Retenodus)\ **Replies:** 0\ **Last updated:** [March 19, 2018, 12:32pm UTC](https://discuss.elastic.co/t/recommended-elasticsearch-version-for-metrics/124557 "2018-03-19T12:32:44Z")
Hello, Is there any recommended elasticsearch version for metrics ? Metrics often use Date Histogram Aggregations and it seems that ES 6.1 is heavily impacted by https://github.com/elastic/elasticsearch/issues/28727. I… --- ## [Unknow funciton call while reindex with ES5.6.8](https://discuss.elastic.co/t/unknow-funciton-call-while-reindex-with-es5-6-8/124553)
**Author:** [@xlc](https://discuss.elastic.co/u/xlc)\ **Replies:** 0\ **Last updated:** [March 19, 2018, 12:13pm UTC](https://discuss.elastic.co/t/unknow-funciton-call-while-reindex-with-es5-6-8/124553 "2018-03-19T12:13:42Z")
I'm doing with ES5.6.8 reindex from remote ES2.3.2.Here is my script { "source": { "remote": { "host": "http://track-test:9200" }, "index": "track\_report\_basic\_date\_17" }, "dest": { "index": "track\_report\_basic\_… --- ## [Reindexing, mapping and templating errors](https://discuss.elastic.co/t/reindexing-mapping-and-templating-errors/124336)
**Author:** [@Celso\_Santos](https://discuss.elastic.co/u/Celso_Santos)\ **Replies:** 1\ **Last updated:** [March 19, 2018, 11:47am UTC](https://discuss.elastic.co/t/reindexing-mapping-and-templating-errors/124336 "2018-03-19T11:47:32Z")
Hello everyone, I've recently upgraded from ES 5.5 to ES 6.2 by snapshotting the old indexes and restoring them onto 6.2. So far, so good. Now, I've started to notice that, because there was still some filebeat 5.5.x I… --- ## [Bypassing stemming while performing term suggestion](https://discuss.elastic.co/t/bypassing-stemming-while-performing-term-suggestion/124540)
**Author:** [@nicolagambini](https://discuss.elastic.co/u/nicolagambini)\ **Replies:** 0\ **Last updated:** [March 19, 2018, 11:24am UTC](https://discuss.elastic.co/t/bypassing-stemming-while-performing-term-suggestion/124540 "2018-03-19T11:24:37Z")
Hello, kind of a newbie with ElasticSearch here. I'm trying to figure out how to avoid my search terms being stemmed right before the term suggestion phase. My index settings/mapping look something like this: { "set… --- ## [Fallback to default values](https://discuss.elastic.co/t/fallback-to-default-values/124541)
**Author:** [@kurasanthoshkumar](https://discuss.elastic.co/u/kurasanthoshkumar)\ **Replies:** 0\ **Last updated:** [March 19, 2018, 11:30am UTC](https://discuss.elastic.co/t/fallback-to-default-values/124541 "2018-03-19T11:30:35Z")
Sample Tax data country Province tax USA Texas 10 USA others 15 India Kerala 12 others others 17 Usecases If I give , country as 'USA' and province as … --- ## [5.5.2 Query multiple word search of a specify field/s](https://discuss.elastic.co/t/5-5-2-query-multiple-word-search-of-a-specify-field-s/124291)
**Author:** [@uber1923](https://discuss.elastic.co/u/uber1923)\ **Replies:** 1\ **Last updated:** [March 19, 2018, 10:29am UTC](https://discuss.elastic.co/t/5-5-2-query-multiple-word-search-of-a-specify-field-s/124291 "2018-03-19T10:29:02Z")
Hi We currently have upgraded from 2.3.4 to version 5.5.2 and we are running the same query in 5.5.2 that we used to run in 2.3.4. The results do not come back as expected and when we look for that particular record it i… --- ## [ES has lost a portion of its data by importing the json data using python3 helpers.bulk and specifying \_id](https://discuss.elastic.co/t/es-has-lost-a-portion-of-its-data-by-importing-the-json-data-using-python3-helpers-bulk-and-specifying-id/122719)
**Author:** [@6c4518ef6a5980b3e6ef](https://discuss.elastic.co/u/6c4518ef6a5980b3e6ef)\ **Replies:** 2\ **Last updated:** [March 8, 2018, 6:56am UTC](https://discuss.elastic.co/t/es-has-lost-a-portion-of-its-data-by-importing-the-json-data-using-python3-helpers-bulk-and-specifying-id/122719 "2018-03-08T06:56:29Z")
Elasticsearch version number is 2.3.3 this is my json file: {"\_source": {"bd\_id": 12345, "date\_type": "BEFORE\_SEVEN\_DAY"}, "\_score": 7.5887613, "\_id": "153380527BEFORE\_SEVEN\_DAY", "\_index": "ex\_data\_1", "\_type": "ex\_s… --- ## [How to use "minimum\_should\_match" clause in ES for retrieving exact matched string record?](https://discuss.elastic.co/t/how-to-use-minimum-should-match-clause-in-es-for-retrieving-exact-matched-string-record/124495)
**Author:** [@Shaik\_Thowsif](https://discuss.elastic.co/u/Shaik_Thowsif)\ **Replies:** 0\ **Last updated:** [March 19, 2018, 7:33am UTC](https://discuss.elastic.co/t/how-to-use-minimum-should-match-clause-in-es-for-retrieving-exact-matched-string-record/124495 "2018-03-19T07:33:14Z")
i want to extract the must matched string data, so i want to apply this "minimum\_should\_match ", i am not able to understand of this use case? Please help me --- ## [Close Channel Exceptions while using transport client with bulkprocessor](https://discuss.elastic.co/t/close-channel-exceptions-while-using-transport-client-with-bulkprocessor/124490)
**Author:** [@kumar1993](https://discuss.elastic.co/u/kumar1993)\ **Replies:** 0\ **Last updated:** [March 19, 2018, 6:48am UTC](https://discuss.elastic.co/t/close-channel-exceptions-while-using-transport-client-with-bulkprocessor/124490 "2018-03-19T06:48:35Z")
I have a Java SE application which is using transport client and high level rest client for indexing data into elasticsearch, I am using a bulk processor to process the requests (index,delete,update) in bulk, like this … --- ## [Possible to have specific Documents excluded from X-Pack Filtering?](https://discuss.elastic.co/t/possible-to-have-specific-documents-excluded-from-x-pack-filtering/124483)
**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\ **Replies:** 1\ **Last updated:** [March 19, 2018, 6:37am UTC](https://discuss.elastic.co/t/possible-to-have-specific-documents-excluded-from-x-pack-filtering/124483 "2018-03-19T06:37:06Z")
Is it possible to have certain documents to be excluded from X-Pack filtering? For example, a user is assigned a role which filters documents containing a certain keyword. However, once in a while, a few documents conta… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1747) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1749)