# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1837

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1838

---

## [Is the docs equal to events?](https://discuss.elastic.co/t/is-the-docs-equal-to-events/114211)

<div class="topic-metadata">

**Author:** [@Robin\_Guo](https://discuss.elastic.co/u/Robin_Guo)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 7:06am UTC](https://discuss.elastic.co/t/is-the-docs-equal-to-events/114211 "2018-01-05T07:06:44Z")

</div>

Hi folks, we've been used ELK for a while, there is a thing that I am not understood well. what is the difference between events in metricbeat and docs in ES index? Are they the same in terms of expression? it's bett…

---

## [Is it okay to keep product data only in Elasticsearch?](https://discuss.elastic.co/t/is-it-okay-to-keep-product-data-only-in-elasticsearch/113553)

<div class="topic-metadata">

**Author:** [@Piyush\_Aggarwal](https://discuss.elastic.co/u/Piyush_Aggarwal)\
**Replies:** 3\
**Last updated:** [January 5, 2018, 6:44am UTC](https://discuss.elastic.co/t/is-it-okay-to-keep-product-data-only-in-elasticsearch/113553 "2018-01-05T06:44:54Z")

</div>

Hello, I am trying to build an e-commerce platform in which I am going to put the products into the elasticsearch Index. I am referencing this for the modeling of the Product. Is it okay to keep the products only in the …

---

## [ERR SSL client failed to connect with: read tcp:5044: i/o timeout](https://discuss.elastic.co/t/err-ssl-client-failed-to-connect-with-read-tcp-5044-i-o-timeout/114043)

<div class="topic-metadata">

**Author:** [@ravirjn](https://discuss.elastic.co/u/ravirjn)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 6:20am UTC](https://discuss.elastic.co/t/err-ssl-client-failed-to-connect-with-read-tcp-5044-i-o-timeout/114043 "2018-01-05T06:20:34Z")

</div>

Hi, Everything was working fine until I installed x-pack. After installing x-pack I am getting following error in client system's filebeat log file. ERR SSL client failed to connect with: read tcp :5044: i/o timeout E…

---

## [Can X-pack help in achieving full multi-tennat environment](https://discuss.elastic.co/t/can-x-pack-help-in-achieving-full-multi-tennat-environment/114194)

<div class="topic-metadata">

**Author:** [@atul1](https://discuss.elastic.co/u/atul1)\
**Replies:** 3\
**Last updated:** [January 5, 2018, 6:09am UTC](https://discuss.elastic.co/t/can-x-pack-help-in-achieving-full-multi-tennat-environment/114194 "2018-01-05T06:09:19Z")

</div>

HI Team, We have requirement to setup ELK chain , which will be consumed by different internal projects in our organization. As what I got from x-pack documentation, we can achieve multi-tennacy through it at ElasticSea…

---

## [Getting error when try to create embedded elasticseach server. org.elasticsearch.common.settings.Settings.settingsBuilder()Lorg/elasticsearch/common/settings/Settings$Builder;](https://discuss.elastic.co/t/getting-error-when-try-to-create-embedded-elasticseach-server-org-elasticsearch-common-settings-settings-settingsbuilder-lorg-elasticsearch-common-settings-settings-builder/114102)

<div class="topic-metadata">

**Author:** [@mansoor67890](https://discuss.elastic.co/u/mansoor67890)\
**Replies:** 4\
**Last updated:** [January 5, 2018, 4:37am UTC](https://discuss.elastic.co/t/getting-error-when-try-to-create-embedded-elasticseach-server-org-elasticsearch-common-settings-settings-settingsbuilder-lorg-elasticsearch-common-settings-settings-builder/114102 "2018-01-05T04:37:21Z")

</div>

Here is my pom: org.springframework.boot spring-boot-starter-parent 1.5.8.RELEASE \<properties\> \<!-- \<org.springframework-version\>4.2.5.RELEASE\</org.springframework-version\> \<org.aspectj-version\>1.6.10\</org.as…

---

## [PUT watcher API call using CURL](https://discuss.elastic.co/t/put-watcher-api-call-using-curl/114188)

<div class="topic-metadata">

**Author:** [@saradac](https://discuss.elastic.co/u/saradac)\
**Replies:** 2\
**Last updated:** [January 5, 2018, 1:49am UTC](https://discuss.elastic.co/t/put-watcher-api-call-using-curl/114188 "2018-01-05T01:49:27Z")

</div>

Hi All, I have watcher with id fuse-file-management While trying to execute GET watcher API I get error "No route to host ". Is the URL correct? curl -H "Content-Type: application/json" -X GET http://localhost:5601/\_…

---

## [Change field type from filter dissect](https://discuss.elastic.co/t/change-field-type-from-filter-dissect/114068)

<div class="topic-metadata">

**Author:** [@Timotius\_Pamungkas](https://discuss.elastic.co/u/Timotius_Pamungkas)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 12:47am UTC](https://discuss.elastic.co/t/change-field-type-from-filter-dissect/114068 "2018-01-05T00:47:39Z")

</div>

I use logstash-logback-encoder to send java log files to logstash, and then to elasticsearch. To parse the message in java log, I use following filter to dissect message input { file { path =\> "/Users/MacBook-2019…

---

## [Invoke elastic search query from Spring boot application](https://discuss.elastic.co/t/invoke-elastic-search-query-from-spring-boot-application/112832)

<div class="topic-metadata">

**Author:** [@Punam.Palekar](https://discuss.elastic.co/u/Punam.Palekar)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 12:44am UTC](https://discuss.elastic.co/t/invoke-elastic-search-query-from-spring-boot-application/112832 "2018-01-05T00:44:01Z")

</div>

Hi , I am having difficulty invoking elastic search from my spring boot application. I want to invoke the below query from my java spring boot application. GET "http://localhost:9200/somedata/someaddress/\_search" -H 'Co…

---

## [Unable to retrieve fields in email](https://discuss.elastic.co/t/unable-to-retrieve-fields-in-email/114017)

<div class="topic-metadata">

**Author:** [@saradac](https://discuss.elastic.co/u/saradac)\
**Replies:** 2\
**Last updated:** [January 4, 2018, 10:35pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-fields-in-email/114017 "2018-01-04T22:35:05Z")

</div>

Hi All, I have set email configuration and I am able to receive the static email. When I changed body to dynamic I can't retrieve e.x. hostname. I can see the fields in Kibana Search. I am able to get only the fields …

---

## [Watcher 500 Server Error](https://discuss.elastic.co/t/watcher-500-server-error/111371)

<div class="topic-metadata">

**Author:** [@cadab](https://discuss.elastic.co/u/cadab)\
**Replies:** 3\
**Last updated:** [January 4, 2018, 9:10pm UTC](https://discuss.elastic.co/t/watcher-500-server-error/111371 "2018-01-04T21:10:48Z")

</div>

I've upgraded es and Kibana from 5.6.4 to 6.0.1, when attempting to view the 'watcher' from within Kibana\>Management I get a 'Watcher: Error 500 Internal Server Error: An internal server error occurred' error. Kibana lo…

---

## [Another question: unable to authenticate user \[admin\] for REST request, please advise](https://discuss.elastic.co/t/another-question-unable-to-authenticate-user-admin-for-rest-request-please-advise/112834)

<div class="topic-metadata">

**Author:** [@Derrick](https://discuss.elastic.co/u/Derrick)\
**Replies:** 2\
**Last updated:** [January 4, 2018, 9:04pm UTC](https://discuss.elastic.co/t/another-question-unable-to-authenticate-user-admin-for-rest-request-please-advise/112834 "2018-01-04T21:04:56Z")

</div>

Hi, I just setup ssl in ES5.6, and use highlevelrestclient to query data, but I got this error, anyone knows the reason? is my user:admin setup wrong. {"error":{"root\_cause":\[{"type":"security\_exception","reason":"unab…

---

## [Curl usage with Elasticsearch 6.1.1](https://discuss.elastic.co/t/curl-usage-with-elasticsearch-6-1-1/114027)

<div class="topic-metadata">

**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\
**Replies:** 6\
**Last updated:** [January 4, 2018, 7:52pm UTC](https://discuss.elastic.co/t/curl-usage-with-elasticsearch-6-1-1/114027 "2018-01-04T19:52:32Z")

</div>

Hi, I just update my Elasticsearch 4.6 to 6.1.1 With 4.6 version, I use this command line to get all VISUALISATION ans all DASHBOARD: curl -XPOST 'http://xx.xx.xx.xx:9200/.kibana/\_search?type=visualization&pretty=2&s…

---

## [Field conflict today?](https://discuss.elastic.co/t/field-conflict-today/113678)

<div class="topic-metadata">

**Author:** [@bruno-d](https://discuss.elastic.co/u/bruno-d)\
**Replies:** 1\
**Last updated:** [January 4, 2018, 7:43pm UTC](https://discuss.elastic.co/t/field-conflict-today/113678 "2018-01-04T19:43:49Z")

</div>

\[37\] I don't know what append but the conflict appear alone ? i did nothing and don't know how to solve ? (my field as always been format long) is it possible to find the cause and correct ? how? my configuration wa…

---

## [Curator execution doesnt seem to give any output](https://discuss.elastic.co/t/curator-execution-doesnt-seem-to-give-any-output/113477)

<div class="topic-metadata">

**Author:** [@Daniel\_Braga](https://discuss.elastic.co/u/Daniel_Braga)\
**Replies:** 15\
**Last updated:** [January 4, 2018, 6:43pm UTC](https://discuss.elastic.co/t/curator-execution-doesnt-seem-to-give-any-output/113477 "2018-01-04T18:43:21Z")

</div>

Hello. I have installed curator (5.4.1) on one of my elatic nodes. When i try to run the following command (with or without the --dry-install) there is no output nor logs. Any ideas? It follows my config and action file…

---

## [Reindexing from one cluster to another](https://discuss.elastic.co/t/reindexing-from-one-cluster-to-another/114139)

<div class="topic-metadata">

**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\
**Replies:** 0\
**Last updated:** [January 4, 2018, 5:49pm UTC](https://discuss.elastic.co/t/reindexing-from-one-cluster-to-another/114139 "2018-01-04T17:49:30Z")

</div>

I have a situation where the main division elastic cluster is collecting logs from divisional applications, out group being a small part. We would like to pull our data out of the main cluster, into our departments small…

---

## [Timezone in range query builder for epoch timestamp](https://discuss.elastic.co/t/timezone-in-range-query-builder-for-epoch-timestamp/111940)

<div class="topic-metadata">

**Author:** [@jpmiitian](https://discuss.elastic.co/u/jpmiitian)\
**Replies:** 2\
**Last updated:** [January 4, 2018, 4:36pm UTC](https://discuss.elastic.co/t/timezone-in-range-query-builder-for-epoch-timestamp/111940 "2018-01-04T16:36:28Z")

</div>

Hi I have timestamp field in the ES Doc which has epoch timestamp UTC \[long value\]. Ques : How can I retrieve data in other time zone from the epoch timestamps in ES. As we have support in DateHistogramAggregatio…

---

## [Regarding cluster.routing.allocation.disk.include\_relocations](https://discuss.elastic.co/t/regarding-cluster-routing-allocation-disk-include-relocations/110255)

<div class="topic-metadata">

**Author:** [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\
**Replies:** 5\
**Last updated:** [January 4, 2018, 4:10pm UTC](https://discuss.elastic.co/t/regarding-cluster-routing-allocation-disk-include-relocations/110255 "2018-01-04T16:10:39Z")

</div>

Hi, I have a confusion regarding the setting cluster.routing.allocation.disk.include\_relocations =\> Defaults to true, which means that Elasticsearch will take into account shards that are currently being relocated to t…

---

## [Ideal settings for buffer\_size, chunk size, retry\_count, max\_snapshot\_bytes\_per\_sec for s3 backup](https://discuss.elastic.co/t/ideal-settings-for-buffer-size-chunk-size-retry-count-max-snapshot-bytes-per-sec-for-s3-backup/113628)

<div class="topic-metadata">

**Author:** [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\
**Replies:** 1\
**Last updated:** [January 4, 2018, 4:09pm UTC](https://discuss.elastic.co/t/ideal-settings-for-buffer-size-chunk-size-retry-count-max-snapshot-bytes-per-sec-for-s3-backup/113628 "2018-01-04T16:09:07Z")

</div>

Hi, We have around 150 nodes (Data size:14TB) in our elastic-search cluster and want to take snapshot of our data using an s3 compatible service. We want to restrict the overall bandwidth being used the by the cluster …

---

## [Problems to search a entry](https://discuss.elastic.co/t/problems-to-search-a-entry/114092)

<div class="topic-metadata">

**Author:** [@Claudio\_Ract\_Costa](https://discuss.elastic.co/u/Claudio_Ract_Costa)\
**Replies:** 4\
**Last updated:** [January 4, 2018, 3:57pm UTC](https://discuss.elastic.co/t/problems-to-search-a-entry/114092 "2018-01-04T15:57:55Z")

</div>

HI Guys, I have the following entry in ES: "\_index" : "dcr\_openet", "\_type" : "dcr", "\_id" : "rGntvmABbc4FmuhdAoi3", "\_score" : null, "\_source" : { "session" : "RJMCJ04-LTE-Gx;980251386;147470…

---

## [Requring object field names to be lowercase to search](https://discuss.elastic.co/t/requring-object-field-names-to-be-lowercase-to-search/114000)

<div class="topic-metadata">

**Author:** [@duydle](https://discuss.elastic.co/u/duydle)\
**Replies:** 2\
**Last updated:** [January 4, 2018, 3:00pm UTC](https://discuss.elastic.co/t/requring-object-field-names-to-be-lowercase-to-search/114000 "2018-01-04T15:00:57Z")

</div>

I'm experimenting with indexing my search results. It seems like I have to have my object field names to be lower case (not the data) when I create an index and populate my index to be able to do a Search via Match. If…

---

## [ES 6.1 dynamic template with multiple match\_mapping\_type](https://discuss.elastic.co/t/es-6-1-dynamic-template-with-multiple-match-mapping-type/113815)

<div class="topic-metadata">

**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\
**Replies:** 1\
**Last updated:** [January 4, 2018, 2:40pm UTC](https://discuss.elastic.co/t/es-6-1-dynamic-template-with-multiple-match-mapping-type/113815 "2018-01-04T14:40:10Z")

</div>

Hi, In previous versions a template like this worked fine: "other\_fields": { "mapping": { "norms" : false, "type": "{dynamic\_type}", "index": "true" }, "match\_mapping\_type"…

---

## [Text mining : mtermvectors for multiple fields](https://discuss.elastic.co/t/text-mining-mtermvectors-for-multiple-fields/114103)

<div class="topic-metadata">

**Author:** [@ACJ](https://discuss.elastic.co/u/ACJ)\
**Replies:** 0\
**Last updated:** [January 4, 2018, 1:53pm UTC](https://discuss.elastic.co/t/text-mining-mtermvectors-for-multiple-fields/114103 "2018-01-04T13:53:29Z")

</div>

Hi everyone! I'm currently doing some text mining. I'm looking for a way to insert a second field (storyline) in my following code: res=es.mtermvectors(index="movies",doc\_type="movie",ids=",".join(str(x) for x in docI…

---

## [Transaction locking](https://discuss.elastic.co/t/transaction-locking/114082)

<div class="topic-metadata">

**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\
**Replies:** 2\
**Last updated:** [January 4, 2018, 1:50pm UTC](https://discuss.elastic.co/t/transaction-locking/114082 "2018-01-04T13:50:01Z")

</div>

Hi , is there any way where i can lock the transaction? If there is a situation where two users are trying to update data in ES at same time or more precisely if data is added offline and has to be synchronized when com…

---

## [Xpack, slack, elastic5.6, and certificates](https://discuss.elastic.co/t/xpack-slack-elastic5-6-and-certificates/113953)

<div class="topic-metadata">

**Author:** [@jamesliu\_london](https://discuss.elastic.co/u/jamesliu_london)\
**Replies:** 1\
**Last updated:** [January 4, 2018, 1:22pm UTC](https://discuss.elastic.co/t/xpack-slack-elastic5-6-and-certificates/113953 "2018-01-04T13:22:46Z")

</div>

I've setup SlackNotifications on my ES5.6/X-Pack (RHEL7.3). But I see this alert: \[2018-01-03T14:59:44,427\]\[ERROR\]\[o.e.x.n.s.SlackService \] \[XXXXXXXXXXXX\] failed to execute slack api http request javax.net.ssl.SSLHand…

---

## [Single unresponsive node stalls overall cluster performance](https://discuss.elastic.co/t/single-unresponsive-node-stalls-overall-cluster-performance/113978)

<div class="topic-metadata">

**Author:** [@drs](https://discuss.elastic.co/u/drs)\
**Replies:** 2\
**Last updated:** [January 4, 2018, 1:19pm UTC](https://discuss.elastic.co/t/single-unresponsive-node-stalls-overall-cluster-performance/113978 "2018-01-04T13:19:40Z")

</div>

At seemingly random times, one of my data nodes becomes unresponsive. The box's disk i/o reads get pegged at about 200 MB/s until the Elasticsearch service is restarted. \[es5-data05 diskio\] (the service was restarted a…

---

## [IS there a maximum field size limit for content when using ingest plugin?](https://discuss.elastic.co/t/is-there-a-maximum-field-size-limit-for-content-when-using-ingest-plugin/113986)

<div class="topic-metadata">

**Author:** [@ESCoder](https://discuss.elastic.co/u/ESCoder)\
**Replies:** 2\
**Last updated:** [January 4, 2018, 12:57pm UTC](https://discuss.elastic.co/t/is-there-a-maximum-field-size-limit-for-content-when-using-ingest-plugin/113986 "2018-01-04T12:57:51Z")

</div>

Hi, we are using the ingest plugin to index pdf documents. i have like a 100 page 40 mb pdf file, which i uploaded through ingest plugin, and it seems to index only the first 30 pages or so and ignored the rest...is th…

---

## [How to open my cluster](https://discuss.elastic.co/t/how-to-open-my-cluster/113787)

<div class="topic-metadata">

**Author:** [@Nada\_I](https://discuss.elastic.co/u/Nada_I)\
**Replies:** 11\
**Last updated:** [January 4, 2018, 12:29pm UTC](https://discuss.elastic.co/t/how-to-open-my-cluster/113787 "2018-01-04T12:29:48Z")

</div>

Hi, I have these questions: -How can I monitor my network on Elasticsearch ? -What is the difference between Elasticsearch and Kibana ? -When I insert the username and the password In Kibana it doesn't work what is t…

---

## [Drop processor in Ingest Pipeline](https://discuss.elastic.co/t/drop-processor-in-ingest-pipeline/114075)

<div class="topic-metadata">

**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\
**Replies:** 3\
**Last updated:** [January 4, 2018, 12:28pm UTC](https://discuss.elastic.co/t/drop-processor-in-ingest-pipeline/114075 "2018-01-04T12:28:00Z")

</div>

Is there any processor or any option where i can drop the event based some condition? similar to remove field processor

---

## [A watch alert example based on two different searches using CHAIN input and Painless script condition](https://discuss.elastic.co/t/a-watch-alert-example-based-on-two-different-searches-using-chain-input-and-painless-script-condition/113829)

<div class="topic-metadata">

**Author:** [@joedissmeyer](https://discuss.elastic.co/u/joedissmeyer)\
**Replies:** 4\
**Last updated:** [January 4, 2018, 12:22pm UTC](https://discuss.elastic.co/t/a-watch-alert-example-based-on-two-different-searches-using-chain-input-and-painless-script-condition/113829 "2018-01-04T12:22:51Z")

</div>

Good afternoon! I wanted to share this solution with the community. This is an example of a watch where you need to run two searches against the same data index looking for two different strings (such as "ERROR" and "TI…

---

## [X-pack installation to ELK stack](https://discuss.elastic.co/t/x-pack-installation-to-elk-stack/113944)

<div class="topic-metadata">

**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Replies:** 4\
**Last updated:** [January 4, 2018, 12:16pm UTC](https://discuss.elastic.co/t/x-pack-installation-to-elk-stack/113944 "2018-01-04T12:16:43Z")

</div>

Hi All , i have a working ELK stack with Filebeat and kafka . I want to secure it with X-pack . I have gone through the documents but i am facing issue while implementing it . Can someone help on this ? i can share …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1836)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1838)