# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1849

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1850

---

## [X-pack watcher](https://discuss.elastic.co/t/x-pack-watcher/112370)

<div class="topic-metadata">

**Author:** [@Dhiraj\_Singh\_Chauhan](https://discuss.elastic.co/u/Dhiraj_Singh_Chauhan)\
**Replies:** 11\
**Last updated:** [December 19, 2017, 1:01pm UTC](https://discuss.elastic.co/t/x-pack-watcher/112370 "2017-12-19T13:01:08Z")

</div>

Hi Guys, I am creating a new x-pack watcher to trigger a email when condition met. but while executing the create api through Kibana console I am getting below error. Please help me to create new watcher. "No handler f…

---

## [Cannot Create a keystore in elasticsearch 5.6.5](https://discuss.elastic.co/t/cannot-create-a-keystore-in-elasticsearch-5-6-5/112417)

<div class="topic-metadata">

**Author:** [@shwan](https://discuss.elastic.co/u/shwan)\
**Replies:** 5\
**Last updated:** [December 19, 2017, 12:52pm UTC](https://discuss.elastic.co/t/cannot-create-a-keystore-in-elasticsearch-5-6-5/112417 "2017-12-19T12:52:50Z")

</div>

Hello, I'm following the documentation on the official website of elastic. However, it gives me this error: ERROR: String value must contain only ASCII the steps i'm doing are the following: bin/elasticsearch-keystor…

---

## [Possible effects of not closing scroll](https://discuss.elastic.co/t/possible-effects-of-not-closing-scroll/112321)

<div class="topic-metadata">

**Author:** [@jmlucjav](https://discuss.elastic.co/u/jmlucjav)\
**Replies:** 4\
**Last updated:** [December 19, 2017, 12:13pm UTC](https://discuss.elastic.co/t/possible-effects-of-not-closing-scroll/112321 "2017-12-19T12:13:04Z")

</div>

Hi, I have the following setup. A java program, using ES6.0 high/low level libraries, it: queries an ES2.2 cluster, using scrolling creates new docs out of the 2.2 ones indexes them into a ES6.0 cluster Of course, wr…

---

## [Move config files elasticsearch 6.10 (Windows)](https://discuss.elastic.co/t/move-config-files-elasticsearch-6-10-windows/112399)

<div class="topic-metadata">

**Author:** [@teejayuu](https://discuss.elastic.co/u/teejayuu)\
**Replies:** 1\
**Last updated:** [December 19, 2017, 11:42am UTC](https://discuss.elastic.co/t/move-config-files-elasticsearch-6-10-windows/112399 "2017-12-19T11:42:35Z")

</div>

Hello, Installing Elasticsearch 6.1.0 on a new Windows 2012 R2 server using the zip file. I'd like to change the location of the config files. Just a couple of questions: Do I need to manually create the environment…

---

## [Do X-Pack ML Capabilities Only Include Temporal Data?](https://discuss.elastic.co/t/do-x-pack-ml-capabilities-only-include-temporal-data/112309)

<div class="topic-metadata">

**Author:** [@jturner900](https://discuss.elastic.co/u/jturner900)\
**Replies:** 1\
**Last updated:** [December 19, 2017, 10:49am UTC](https://discuss.elastic.co/t/do-x-pack-ml-capabilities-only-include-temporal-data/112309 "2017-12-19T10:49:17Z")

</div>

I've only seen time series data in tutorials...

---

## [License for academic purposes](https://discuss.elastic.co/t/license-for-academic-purposes/112405)

<div class="topic-metadata">

**Author:** [@Arthur\_Silva\_Sens](https://discuss.elastic.co/u/Arthur_Silva_Sens)\
**Replies:** 0\
**Last updated:** [December 19, 2017, 10:38am UTC](https://discuss.elastic.co/t/license-for-academic-purposes/112405 "2017-12-19T10:38:53Z")

</div>

Greetings, Is there any kind of licenses that Elastic provide to universities for academic/research purposes? Thanks in advance.

---

## [Change version](https://discuss.elastic.co/t/change-version/112395)

<div class="topic-metadata">

**Author:** [@Raushan\_jha](https://discuss.elastic.co/u/Raushan_jha)\
**Replies:** 1\
**Last updated:** [December 19, 2017, 10:19am UTC](https://discuss.elastic.co/t/change-version/112395 "2017-12-19T10:19:35Z")

</div>

can I change the version name? like default: elasticsearch-7.0.0-alpha1-SNAPSHOT I want to create : elasticsearch-7.0.0+abc

---

## [Highlight doesn't work if not in first position](https://discuss.elastic.co/t/highlight-doesnt-work-if-not-in-first-position/110865)

<div class="topic-metadata">

**Author:** [@Sylvain\_Attoumani](https://discuss.elastic.co/u/Sylvain_Attoumani)\
**Replies:** 9\
**Last updated:** [December 19, 2017, 10:13am UTC](https://discuss.elastic.co/t/highlight-doesnt-work-if-not-in-first-position/110865 "2017-12-19T10:13:35Z")

</div>

I'm working with elasticsearch and my highlight doesn't give me what I expect .My mappings looks like that : PUT my\_index { "settings": { "analysis": { "analyzer": { …

---

## [Summing up maximum values per device per specific time](https://discuss.elastic.co/t/summing-up-maximum-values-per-device-per-specific-time/110700)

<div class="topic-metadata">

**Author:** [@emil.mirzayev](https://discuss.elastic.co/u/emil.mirzayev)\
**Replies:** 6\
**Last updated:** [December 19, 2017, 9:05am UTC](https://discuss.elastic.co/t/summing-up-maximum-values-per-device-per-specific-time/110700 "2017-12-19T09:05:54Z")

</div>

Hi! I have data with timestamp, device\_id and value. I have around 1k devices which signal me their values. Value in t is always smaller or equal to the value in t+1. Which means, values are gradually increasing (in t if…

---

## [Updating timefield by query](https://discuss.elastic.co/t/updating-timefield-by-query/112379)

<div class="topic-metadata">

**Author:** [@emil.mirzayev](https://discuss.elastic.co/u/emil.mirzayev)\
**Replies:** 0\
**Last updated:** [December 19, 2017, 8:53am UTC](https://discuss.elastic.co/t/updating-timefield-by-query/112379 "2017-12-19T08:53:26Z")

</div>

Hi. I have an index called devices where device created is my timefield. I want to shift all device created fields by several days, let's say by 20 days, back. Is it possible to do it via scripts?

---

## [\[plugin-development\] Custom transport actions and X-Pack integration](https://discuss.elastic.co/t/plugin-development-custom-transport-actions-and-x-pack-integration/110805)

<div class="topic-metadata">

**Author:** [@dcausse](https://discuss.elastic.co/u/dcausse)\
**Replies:** 6\
**Last updated:** [December 19, 2017, 8:26am UTC](https://discuss.elastic.co/t/plugin-development-custom-transport-actions-and-x-pack-integration/110805 "2017-12-19T08:26:20Z")

</div>

Hi, I just received a bug report concerning a plugin we wrote. The user reports that despite being the superuser it receives: {"error":{"root\_cause":\[{"type":"security\_exception","reason":"action \[ltr:featurestore/data…

---

## [Send an alert for each item in aggregation list](https://discuss.elastic.co/t/send-an-alert-for-each-item-in-aggregation-list/112316)

<div class="topic-metadata">

**Author:** [@xanthus29](https://discuss.elastic.co/u/xanthus29)\
**Replies:** 1\
**Last updated:** [December 19, 2017, 7:44am UTC](https://discuss.elastic.co/t/send-an-alert-for-each-item-in-aggregation-list/112316 "2017-12-19T07:44:59Z")

</div>

After searching around for a while, I'm at a loss on how to accomplish my goal. I'm aggregating a list of items and would like to run the action for each item in the list. I found a post back in Jun '16 where that abilit…

---

## [Need elasticsearch deb-src details](https://discuss.elastic.co/t/need-elasticsearch-deb-src-details/112218)

<div class="topic-metadata">

**Author:** [@Raushan\_jha](https://discuss.elastic.co/u/Raushan_jha)\
**Replies:** 2\
**Last updated:** [December 19, 2017, 7:43am UTC](https://discuss.elastic.co/t/need-elasticsearch-deb-src-details/112218 "2017-12-19T07:43:13Z")

</div>

I change the source.list file and add "deb https://artifacts.elastic.co/packages/5.x/apt stable main". I got the elasticsearch package 5.x.deb. I want to download the source, add in source.list file "deb-src https://ar…

---

## [ElasticSearch source fore debian stretch](https://discuss.elastic.co/t/elasticsearch-source-fore-debian-stretch/112170)

<div class="topic-metadata">

**Author:** [@Raushan\_jha](https://discuss.elastic.co/u/Raushan_jha)\
**Replies:** 10\
**Last updated:** [December 18, 2017, 1:11pm UTC](https://discuss.elastic.co/t/elasticsearch-source-fore-debian-stretch/112170 "2017-12-18T13:11:30Z")

</div>

Please provide me the link from where I will download the elasticsearch latest source for debian stretch. I downloaded from debian snapshot (http://snapshot.debian.org/archive/debian/20160520T171605Z/pool/main/e/elastic…

---

## [Create date error](https://discuss.elastic.co/t/create-date-error/112325)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 5\
**Last updated:** [December 19, 2017, 7:41am UTC](https://discuss.elastic.co/t/create-date-error/112325 "2017-12-19T07:41:19Z")

</div>

\[2017-12-19T08:00:00,494\]\[INFO \]\[o.e.c.m.MetaDataCreateIndexService\] \[xxxxxhostname\] .monitoring-es-6-2017.12.19\] creating index, cause \[auto(bulk api)\], templates \[.monitoring-es\], shards \[1\]/\[1\], mappings \[doc\] the da…

---

## [502 Error with add data](https://discuss.elastic.co/t/502-error-with-add-data/110672)

<div class="topic-metadata">

**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\
**Replies:** 6\
**Last updated:** [December 19, 2017, 5:59am UTC](https://discuss.elastic.co/t/502-error-with-add-data/110672 "2017-12-19T05:59:16Z")

</div>

Hi While adding some huge data to elastic search is giving 502 error I am trying batch insert of 1000 at a time with Bulk insert. Thanks Aneesh L

---

## [Elasticsearch memory requirements](https://discuss.elastic.co/t/elasticsearch-memory-requirements/112008)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 2\
**Last updated:** [December 19, 2017, 4:38am UTC](https://discuss.elastic.co/t/elasticsearch-memory-requirements/112008 "2017-12-19T04:38:52Z")

</div>

My ELK Elastic Stack environment: elasticsearch-6.X nodes role: 3 x master node 2 x data node 2 x ingest node - app 2 x none (coordinate only) - kibana ... for master and data node I'm using high memory instances ~5…

---

## [Elasticsearch 6 and JDK9 GA](https://discuss.elastic.co/t/elasticsearch-6-and-jdk9-ga/101559)

<div class="topic-metadata">

**Author:** [@nkoothrappahli](https://discuss.elastic.co/u/nkoothrappahli)\
**Replies:** 4\
**Last updated:** [December 19, 2017, 4:31am UTC](https://discuss.elastic.co/t/elasticsearch-6-and-jdk9-ga/101559 "2017-12-19T04:31:10Z")

</div>

JDK9 GA has finally arrived and my question is wether it will be fully supported by upcoming Elasticsearch 6?

---

## [Elasticsearch cluster issue](https://discuss.elastic.co/t/elasticsearch-cluster-issue/112175)

<div class="topic-metadata">

**Author:** [@hsiuming](https://discuss.elastic.co/u/hsiuming)\
**Replies:** 2\
**Last updated:** [December 19, 2017, 3:26am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-issue/112175 "2017-12-19T03:26:14Z")

</div>

Hello We now set a elasticsearch cluster with two nodes. We set another IP address on one node machine and the network domain is different. Host1=\>IP1:192.168.XX.XXX, IP2:10.XXX.XX.XX Host2=\>IP3:192.168.XX.XXX And t…

---

## [High CPU on bulk update/insert](https://discuss.elastic.co/t/high-cpu-on-bulk-update-insert/112326)

<div class="topic-metadata">

**Author:** [@Zuhaib\_Siddique](https://discuss.elastic.co/u/Zuhaib_Siddique)\
**Replies:** 1\
**Last updated:** [December 19, 2017, 3:12am UTC](https://discuss.elastic.co/t/high-cpu-on-bulk-update-insert/112326 "2017-12-19T03:12:14Z")

</div>

So I have attached our Hot Thread, https://gist.github.com/zsiddique/5cf5212582f87dd1cf8c9332c553d8c9, we are using an update script (Groovy right now) to handle updates. We need a script to update because we use nested…

---

## [Elastic Stack deployment through configuration management tool](https://discuss.elastic.co/t/elastic-stack-deployment-through-configuration-management-tool/109516)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 4\
**Last updated:** [December 18, 2017, 8:15pm UTC](https://discuss.elastic.co/t/elastic-stack-deployment-through-configuration-management-tool/109516 "2017-12-18T20:15:09Z")

</div>

Is there Ansible supported configurations for Elastic stack deployment? What all the activities supported - Deployment, configuration, version upgrade..etc

---

## [Elasticsearch 5.5.2 Matrix Stats Aggregation on Date histogram](https://discuss.elastic.co/t/elasticsearch-5-5-2-matrix-stats-aggregation-on-date-histogram/112299)

<div class="topic-metadata">

**Author:** [@tamisalex](https://discuss.elastic.co/u/tamisalex)\
**Replies:** 0\
**Last updated:** [December 18, 2017, 8:11pm UTC](https://discuss.elastic.co/t/elasticsearch-5-5-2-matrix-stats-aggregation-on-date-histogram/112299 "2017-12-18T20:11:42Z")

</div>

I am trying to use Matrix Stats aggregation to get the skew and kurtosis of a date histogram. Its the possible? My knowledge of nesting aggs together is very basic. I've tried to do this query but it does not work. Is t…

---

## [New Cluster Setup](https://discuss.elastic.co/t/new-cluster-setup/112264)

<div class="topic-metadata">

**Author:** [@rudolphk](https://discuss.elastic.co/u/rudolphk)\
**Replies:** 4\
**Last updated:** [December 18, 2017, 4:45pm UTC](https://discuss.elastic.co/t/new-cluster-setup/112264 "2017-12-18T16:45:35Z")

</div>

We are in the process of moving one of our datasets from an on-premise cluster to a self-managed cluster on AWS. We are planning on setting up some dedicated master nodes (something we have not done in the past) and we …

---

## [Elasticsearch 6.0.0 gce discovery failing](https://discuss.elastic.co/t/elasticsearch-6-0-0-gce-discovery-failing/109718)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 12\
**Last updated:** [December 18, 2017, 4:40pm UTC](https://discuss.elastic.co/t/elasticsearch-6-0-0-gce-discovery-failing/109718 "2017-12-18T16:40:19Z")

</div>

Hello, I have setup an elasticsearch cluster on GCE with gce discovery plugin. Yesterday everything was OK and the nodes joined the cluster correctly but when I checked today I have noticed that the nodes are disconnect…

---

## [Keyword analyzer but allow redundant white spaces](https://discuss.elastic.co/t/keyword-analyzer-but-allow-redundant-white-spaces/110441)

<div class="topic-metadata">

**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\
**Replies:** 2\
**Last updated:** [December 18, 2017, 4:34pm UTC](https://discuss.elastic.co/t/keyword-analyzer-but-allow-redundant-white-spaces/110441 "2017-12-18T16:34:36Z")

</div>

My requirement is, that for example POST /index/type/1 { "title": "Hello Elasticsearch" } I want to return the doc with exactly matched title but allowing redundant white spaces between words. For example, Searchi…

---

## [Watcher error after upgrade to 6.1](https://discuss.elastic.co/t/watcher-error-after-upgrade-to-6-1/112244)

<div class="topic-metadata">

**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\
**Replies:** 3\
**Last updated:** [December 18, 2017, 3:47pm UTC](https://discuss.elastic.co/t/watcher-error-after-upgrade-to-6-1/112244 "2017-12-18T15:47:11Z")

</div>

Hi All, I've been using watcher with ES 5.6.3 and after updating to 6.1 the condition code is not working anymore. Any help will be appreciated Here is the error I have "exception": { "type": "script\_exception",…

---

## [Impossible to create Repository for a snapshot : location \[...\] doesn't match any of the locations specified by path.repo because this setting is empty](https://discuss.elastic.co/t/impossible-to-create-repository-for-a-snapshot-location-doesnt-match-any-of-the-locations-specified-by-path-repo-because-this-setting-is-empty/110228)

<div class="topic-metadata">

**Author:** [@elastic\_mostafa](https://discuss.elastic.co/u/elastic_mostafa)\
**Replies:** 14\
**Last updated:** [December 18, 2017, 3:17pm UTC](https://discuss.elastic.co/t/impossible-to-create-repository-for-a-snapshot-location-doesnt-match-any-of-the-locations-specified-by-path-repo-because-this-setting-is-empty/110228 "2017-12-18T15:17:42Z")

</div>

Okey let me start from the beginning , I created this directory : /home/mostafa/public\_html/ES\_repository I added path.repo: \["/mount/backups"\] to the elasticsearch.yml a the end of file then I saved that file after…

---

## [Search after doesn't work with date type. Is it bug?](https://discuss.elastic.co/t/search-after-doesnt-work-with-date-type-is-it-bug/112262)

<div class="topic-metadata">

**Author:** [@Vitaly\_Igorevich](https://discuss.elastic.co/u/Vitaly_Igorevich)\
**Replies:** 0\
**Last updated:** [December 18, 2017, 3:04pm UTC](https://discuss.elastic.co/t/search-after-doesnt-work-with-date-type-is-it-bug/112262 "2017-12-18T15:04:44Z")

</div>

Elasticsearch 6.1 Mapping: { "posts" : { "mappings" : { "post" : { "dynamic" : "false", "properties" : { "created\_at" : { "type" : "date", }, "format" : "epoch\_second" }, } } } } } Query: { "size":25, …

---

## [Cannot Create A Cluster in Vmware ElasticSearch 5.6.5](https://discuss.elastic.co/t/cannot-create-a-cluster-in-vmware-elasticsearch-5-6-5/112243)

<div class="topic-metadata">

**Author:** [@shwan](https://discuss.elastic.co/u/shwan)\
**Replies:** 3\
**Last updated:** [December 18, 2017, 2:59pm UTC](https://discuss.elastic.co/t/cannot-create-a-cluster-in-vmware-elasticsearch-5-6-5/112243 "2017-12-18T14:59:44Z")

</div>

Hello, Im trying to Create a Cluster between some virtual Machines inside Vmware. Elasticsaerch is running on both machines and i have changes the config files as but still no success. here are my config files: GES1 c…

---

## [Slack Attachment Actions](https://discuss.elastic.co/t/slack-attachment-actions/111978)

<div class="topic-metadata">

**Author:** [@jamesspi](https://discuss.elastic.co/u/jamesspi)\
**Replies:** 2\
**Last updated:** [December 18, 2017, 2:40pm UTC](https://discuss.elastic.co/t/slack-attachment-actions/111978 "2017-12-18T14:40:04Z")

</div>

Hi! I'd like to use actions within Slack attachments (buttons etc). This works fine in the slack message builder, but watcher doesn't seem to like the syntax: "attachments": \[ { "color": "danger…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1848)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1850)
