# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1856

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1857

---

## [ElasticSearch standard Analyzer - exceptional case](https://discuss.elastic.co/t/elasticsearch-standard-analyzer-exceptional-case/111534)

<div class="topic-metadata">

**Author:** [@sanjaykanani](https://discuss.elastic.co/u/sanjaykanani)\
**Replies:** 9\
**Last updated:** [December 13, 2017, 11:40am UTC](https://discuss.elastic.co/t/elasticsearch-standard-analyzer-exceptional-case/111534 "2017-12-13T11:40:05Z")

</div>

Continuing the discussion from ElasticSearch standard Analyzer - problematic case: \[quote="Igor\_Romanov, post:1, topic:16782"\] Hi I have read this article but no one has replied on it. I am facing same issue.please p…

---

## [Can't setup roles with active directory](https://discuss.elastic.co/t/cant-setup-roles-with-active-directory/111543)

<div class="topic-metadata">

**Author:** [@Arthur\_Silva\_Sens](https://discuss.elastic.co/u/Arthur_Silva_Sens)\
**Replies:** 2\
**Last updated:** [December 13, 2017, 11:37am UTC](https://discuss.elastic.co/t/cant-setup-roles-with-active-directory/111543 "2017-12-13T11:37:00Z")

</div>

Greetings, I am trying to give the superuser role to my user, but I'm failing miserably. When I try: curl 'localhost:9200' -u myuser I get the response: ' { "error" : { "root\_cause" : \[ { "type" : "security\_exc…

---

## [Can date ingest processor process a String to extract a Date from it](https://discuss.elastic.co/t/can-date-ingest-processor-process-a-string-to-extract-a-date-from-it/111493)

<div class="topic-metadata">

**Author:** [@Augustus1995](https://discuss.elastic.co/u/Augustus1995)\
**Replies:** 5\
**Last updated:** [December 13, 2017, 11:23am UTC](https://discuss.elastic.co/t/can-date-ingest-processor-process-a-string-to-extract-a-date-from-it/111493 "2017-12-13T11:23:37Z")

</div>

Hi guys I find a question about Can date ingest processor process a String to extract a Date from it. And i follow the guide and use Date Processor, but my log message is complex 2017-12-13 11:10:30.000 \[pool-10-thre…

---

## [Using Datadog with ES hosted version](https://discuss.elastic.co/t/using-datadog-with-es-hosted-version/111548)

<div class="topic-metadata">

**Author:** [@mary\_curry](https://discuss.elastic.co/u/mary_curry)\
**Replies:** 0\
**Last updated:** [December 13, 2017, 11:23am UTC](https://discuss.elastic.co/t/using-datadog-with-es-hosted-version/111548 "2017-12-13T11:23:09Z")

</div>

Hello there! We use Datadog to monitor our systems and we'd like to also use it to monitor our ES cluster's health. There is an integration plugin on Datadog but we are using Elastic Cloud to host our ES cluster. Has a…

---

## [Mapper-attachment plugin](https://discuss.elastic.co/t/mapper-attachment-plugin/111530)

<div class="topic-metadata">

**Author:** [@ZiOS07](https://discuss.elastic.co/u/ZiOS07)\
**Replies:** 3\
**Last updated:** [December 13, 2017, 10:39am UTC](https://discuss.elastic.co/t/mapper-attachment-plugin/111530 "2017-12-13T10:39:48Z")

</div>

Hello, I'm working on a Java project using spring framework and I have to use elasticsearch to index some documents (pdf, doc ..). I found that mapper-attachment plugin provides a new type 'attachment' which helps in my …

---

## [Watcher conditional input](https://discuss.elastic.co/t/watcher-conditional-input/109537)

<div class="topic-metadata">

**Author:** [@admlko](https://discuss.elastic.co/u/admlko)\
**Replies:** 3\
**Last updated:** [December 13, 2017, 8:40am UTC](https://discuss.elastic.co/t/watcher-conditional-input/109537 "2017-12-13T08:40:58Z")

</div>

I'm trying to set up a watch to join data from multiple indices. Here's how I would like it to work: first, I look up if there are anti-virus alerts from the firewall log, if there are, then look up the IP address from …

---

## [Adding S3 bucket for snapshot](https://discuss.elastic.co/t/adding-s3-bucket-for-snapshot/110643)

<div class="topic-metadata">

**Author:** [@mudgilgaurav](https://discuss.elastic.co/u/mudgilgaurav)\
**Replies:** 35\
**Last updated:** [December 13, 2017, 10:28am UTC](https://discuss.elastic.co/t/adding-s3-bucket-for-snapshot/110643 "2017-12-13T10:28:26Z")

</div>

I am trying to add S3 bucket for taking snapshot of my elastic cluster. I am running Elasticsearch 2.3.3 and installed plugin cloud-aws. Following is syntax of my request curl -X POST "http://XXX.XXX.XXX.XXX:9200/\_snaps…

---

## [Issue with Suggester](https://discuss.elastic.co/t/issue-with-suggester/110400)

<div class="topic-metadata">

**Author:** [@Akshay\_Deep\_Lamba](https://discuss.elastic.co/u/Akshay_Deep_Lamba)\
**Replies:** 2\
**Last updated:** [December 13, 2017, 10:28am UTC](https://discuss.elastic.co/t/issue-with-suggester/110400 "2017-12-13T10:28:12Z")

</div>

Hi Below are the Details:- GET /books1/\_mapping { "books1": { "mappings": { "book": { "properties": { "author": { "type": "text", "fields": { "keywo…

---

## [Aggregations on innerhits with Elastic 6.0](https://discuss.elastic.co/t/aggregations-on-innerhits-with-elastic-6-0/111532)

<div class="topic-metadata">

**Author:** [@Arth](https://discuss.elastic.co/u/Arth)\
**Replies:** 0\
**Last updated:** [December 13, 2017, 10:17am UTC](https://discuss.elastic.co/t/aggregations-on-innerhits-with-elastic-6-0/111532 "2017-12-13T10:17:42Z")

</div>

Hi, Is it possible to make aggregations on nested innerhits in Java please ? { "product": { "properties": { "productid": { "type": "integer" }, "productname": { "type": "text" }, "categoryid": { "type": "integer" …

---

## [How to migrate data from AWS elasticsearch to local elasticsearch?](https://discuss.elastic.co/t/how-to-migrate-data-from-aws-elasticsearch-to-local-elasticsearch/111522)

<div class="topic-metadata">

**Author:** [@cheleyace](https://discuss.elastic.co/u/cheleyace)\
**Replies:** 1\
**Last updated:** [December 13, 2017, 10:04am UTC](https://discuss.elastic.co/t/how-to-migrate-data-from-aws-elasticsearch-to-local-elasticsearch/111522 "2017-12-13T10:04:15Z")

</div>

I need help guys. How to migrate data from AWS elasticsearch to local elasticsearch?

---

## [Error with filtered, date ranged, search query](https://discuss.elastic.co/t/error-with-filtered-date-ranged-search-query/111271)

<div class="topic-metadata">

**Author:** [@jbendotnet](https://discuss.elastic.co/u/jbendotnet)\
**Replies:** 6\
**Last updated:** [December 13, 2017, 9:55am UTC](https://discuss.elastic.co/t/error-with-filtered-date-ranged-search-query/111271 "2017-12-13T09:55:48Z")

</div>

Hi, Elastic (2.4) is unhappy with this search query, from the docs it looks approx right, any pointers gratefully received :slight\_smile: { "query":{ "query\_string":{ "query":"news", "default…

---

## [How can i find events from elasticsearch which contains forward slash](https://discuss.elastic.co/t/how-can-i-find-events-from-elasticsearch-which-contains-forward-slash/111524)

<div class="topic-metadata">

**Author:** [@raja\_gopal](https://discuss.elastic.co/u/raja_gopal)\
**Replies:** 0\
**Last updated:** [December 13, 2017, 9:31am UTC](https://discuss.elastic.co/t/how-can-i-find-events-from-elasticsearch-which-contains-forward-slash/111524 "2017-12-13T09:31:04Z")

</div>

Hi i have a set of 19 events in my cluster and i want to get events which matches the wildcard "\*wtryy1p/backup" but it does not work out. Only if i give "\*wtryy1p" it filters or if i give "backup\_", it works but not a…

---

## [How can use esrally import data to es cloud?](https://discuss.elastic.co/t/how-can-use-esrally-import-data-to-es-cloud/111467)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 8\
**Last updated:** [December 13, 2017, 9:10am UTC](https://discuss.elastic.co/t/how-can-use-esrally-import-data-to-es-cloud/111467 "2017-12-13T09:10:57Z")

</div>

how can use esrally import data to es cloud ? can give a example. the host connect internet with proxy how can configure about it.

---

## [Connect to Cloud Elastic / Cloud Elasticsearch instance with ssh](https://discuss.elastic.co/t/connect-to-cloud-elastic-cloud-elasticsearch-instance-with-ssh/111266)

<div class="topic-metadata">

**Author:** [@Milad\_Hamid](https://discuss.elastic.co/u/Milad_Hamid)\
**Replies:** 9\
**Last updated:** [December 13, 2017, 8:53am UTC](https://discuss.elastic.co/t/connect-to-cloud-elastic-cloud-elasticsearch-instance-with-ssh/111266 "2017-12-13T08:53:08Z")

</div>

Hi, How i can connect to my Cloud Elastic trial with ssh or WinSCP? so i can install Logstash and manage directories.

---

## [Upgrade from 5.6 to 6.0. Problem with mapping](https://discuss.elastic.co/t/upgrade-from-5-6-to-6-0-problem-with-mapping/111328)

<div class="topic-metadata">

**Author:** [@Paul\_Letski](https://discuss.elastic.co/u/Paul_Letski)\
**Replies:** 3\
**Last updated:** [December 13, 2017, 7:19am UTC](https://discuss.elastic.co/t/upgrade-from-5-6-to-6-0-problem-with-mapping/111328 "2017-12-13T07:19:31Z")

</div>

Hello! I'm using Elastic stack to collect logs from application nodes. My setup is: Filebeat -\> Logstash -\> Elasticsearh. I have upgraded my cluster from version 5.6 to version 6.0. Cluster consists of 5 nodes: 1 maste…

---

## [Elasticsearch Cluster topology](https://discuss.elastic.co/t/elasticsearch-cluster-topology/111418)

<div class="topic-metadata">

**Author:** [@dbhatia](https://discuss.elastic.co/u/dbhatia)\
**Replies:** 3\
**Last updated:** [December 13, 2017, 7:18am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-topology/111418 "2017-12-13T07:18:09Z")

</div>

Hello Experts, I am new to elastic search world, I need advice setting with the cluster topology. I am planning to have 5 nodes in the cluster. Can you guys suggest how many nodes should act as Master ? how many node…

---

## [Elasticsearch php relevant results while searching product names and brands](https://discuss.elastic.co/t/elasticsearch-php-relevant-results-while-searching-product-names-and-brands/111241)

<div class="topic-metadata">

**Author:** [@sreeju1](https://discuss.elastic.co/u/sreeju1)\
**Replies:** 1\
**Last updated:** [December 13, 2017, 5:35am UTC](https://discuss.elastic.co/t/elasticsearch-php-relevant-results-while-searching-product-names-and-brands/111241 "2017-12-13T05:35:22Z")

</div>

Hi, I have created a elasticsearch index for an ecommerce database. It contains id,name, brand, brandid, description, category and color columns for each product. I am querying the index using the following parameters. …

---

## [How can I fetch in between documents using Java API?](https://discuss.elastic.co/t/how-can-i-fetch-in-between-documents-using-java-api/111245)

<div class="topic-metadata">

**Author:** [@PinkiMondal](https://discuss.elastic.co/u/PinkiMondal)\
**Replies:** 8\
**Last updated:** [December 13, 2017, 5:08am UTC](https://discuss.elastic.co/t/how-can-i-fetch-in-between-documents-using-java-api/111245 "2017-12-13T05:08:40Z")

</div>

I want to fetch documents from 200 to 300 using search query of JAVA API implementation but unable to find any option How to do this? Thanks

---

## [Need Info for "es.set.netty.runtime.available.processors"](https://discuss.elastic.co/t/need-info-for-es-set-netty-runtime-available-processors/111322)

<div class="topic-metadata">

**Author:** [@antitech](https://discuss.elastic.co/u/antitech)\
**Replies:** 5\
**Last updated:** [December 13, 2017, 5:08am UTC](https://discuss.elastic.co/t/need-info-for-es-set-netty-runtime-available-processors/111322 "2017-12-13T05:08:24Z")

</div>

Hi, I have upgraded Elastic search from 5.3.1 to 6.0.0. I need some documentation about "es.set.netty.runtime.available.processors" , what is the purpose, or how to use etc. I didn't find much details.

---

## [How to override @timestamp field by elasticsearch pipeline](https://discuss.elastic.co/t/how-to-override-timestamp-field-by-elasticsearch-pipeline/111262)

<div class="topic-metadata">

**Author:** [@Augustus1995](https://discuss.elastic.co/u/Augustus1995)\
**Replies:** 7\
**Last updated:** [December 13, 2017, 3:36am UTC](https://discuss.elastic.co/t/how-to-override-timestamp-field-by-elasticsearch-pipeline/111262 "2017-12-13T03:36:14Z")

</div>

Hi guys I use filebeat to collect logs and send to elasticesearch directly. And the log contain the time such as 2017-12-12 15:41:30.000 \[pool-8-thread-18\] DEBUG c.h.i.c.m.servicemanager.task.PassiveNodeHbTask - Passiv…

---

## [Date\_histogram\_aggs interval always 0](https://discuss.elastic.co/t/date-histogram-aggs-interval-always-0/111472)

<div class="topic-metadata">

**Author:** [@whuang2](https://discuss.elastic.co/u/whuang2)\
**Replies:** 0\
**Last updated:** [December 13, 2017, 2:02am UTC](https://discuss.elastic.co/t/date-histogram-aggs-interval-always-0/111472 "2017-12-13T02:02:10Z")

</div>

Have java code to build the aggregation and set interval to be "1d", but always get interval:0 in the result query. We are moving from ES2.0 to ES5.5.2, the interval value was "day" in 2.0, now it's "1d". I even print o…

---

## [Instrumenting CPU usage of logstash and elasticsearch](https://discuss.elastic.co/t/instrumenting-cpu-usage-of-logstash-and-elasticsearch/111460)

<div class="topic-metadata">

**Author:** [@Supermathie](https://discuss.elastic.co/u/Supermathie)\
**Replies:** 0\
**Last updated:** [December 13, 2017, 12:01am UTC](https://discuss.elastic.co/t/instrumenting-cpu-usage-of-logstash-and-elasticsearch/111460 "2017-12-13T00:01:06Z")

</div>

We made some changes to our elasticsearch install (upgrading to 6, enabling beats, pipeline changes...) and the CPU usage of our logstash/elastic server has shot up: \[image\] The CPU% usage is roughly split between logs…

---

## [Connection Pool Limit in Elastic Search Server or Client](https://discuss.elastic.co/t/connection-pool-limit-in-elastic-search-server-or-client/111426)

<div class="topic-metadata">

**Author:** [@antonpious](https://discuss.elastic.co/u/antonpious)\
**Replies:** 0\
**Last updated:** [December 12, 2017, 7:57pm UTC](https://discuss.elastic.co/t/connection-pool-limit-in-elastic-search-server-or-client/111426 "2017-12-12T19:57:37Z")

</div>

Is there a Connect Pool Limit in either the Elastic Search Server or Java Client. If we have 1 Node, how many concurrent connections or calls can be made to this node. If we have N Nodes, how many concurrent connection…

---

## [Safest path from 1 to 3 Master nodes](https://discuss.elastic.co/t/safest-path-from-1-to-3-master-nodes/111457)

<div class="topic-metadata">

**Author:** [@DaveM](https://discuss.elastic.co/u/DaveM)\
**Replies:** 2\
**Last updated:** [December 12, 2017, 11:37pm UTC](https://discuss.elastic.co/t/safest-path-from-1-to-3-master-nodes/111457 "2017-12-12T23:37:48Z")

</div>

We currently have a cluster with 1 master node and 10 data nodes. We're planning to add 2 more masters. I want to avoid split brain when adding the new masters to the cluster. What is the best way to add them in this si…

---

## [Regex + phrase search](https://discuss.elastic.co/t/regex-phrase-search/111143)

<div class="topic-metadata">

**Author:** [@bb1234](https://discuss.elastic.co/u/bb1234)\
**Replies:** 4\
**Last updated:** [December 12, 2017, 9:49pm UTC](https://discuss.elastic.co/t/regex-phrase-search/111143 "2017-12-12T21:49:58Z")

</div>

Hello everybody. I'm trying to create a search query that would allow me to find only documents e.g. with the string like this: "some kind of text 1000 other text 200 new text 3" "some kind of text 2000 other text 320…

---

## [Rollover and deleting indices using curator](https://discuss.elastic.co/t/rollover-and-deleting-indices-using-curator/111393)

<div class="topic-metadata">

**Author:** [@kunam](https://discuss.elastic.co/u/kunam)\
**Replies:** 1\
**Last updated:** [December 12, 2017, 8:50pm UTC](https://discuss.elastic.co/t/rollover-and-deleting-indices-using-curator/111393 "2017-12-12T20:50:13Z")

</div>

Hi, I want to rollover and delete indices which are older than 15days using curator 5.4.1 created two configuration files cat curator.yml client: hosts: - xxxxxxxxxxxxx port: 9243 url\_prefix: use\_ssl: true cer…

---

## [Elasticsearch cluster health is "status": "yellow"](https://discuss.elastic.co/t/elasticsearch-cluster-health-is-status-yellow/111171)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 5\
**Last updated:** [December 12, 2017, 8:57pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-health-is-status-yellow/111171 "2017-12-12T20:57:18Z")

</div>

I have elasticsearch 6.x cluster and I just noticed that status is yellow GET \_cluster/health { "cluster\_name": "X", "status": "yellow", "timed\_out": false, "number\_of\_nodes": 5, "number\_of\_data\_nodes": 5, …

---

## [Elasticsearch Service won't start after full cluster upgrade from 5.4 to 6.0](https://discuss.elastic.co/t/elasticsearch-service-wont-start-after-full-cluster-upgrade-from-5-4-to-6-0/108048)

<div class="topic-metadata">

**Author:** [@Anarmun\_Munkhbayar](https://discuss.elastic.co/u/Anarmun_Munkhbayar)\
**Replies:** 9\
**Last updated:** [December 12, 2017, 6:54pm UTC](https://discuss.elastic.co/t/elasticsearch-service-wont-start-after-full-cluster-upgrade-from-5-4-to-6-0/108048 "2017-12-12T18:54:51Z")

</div>

Hi, I was running elasticsearch cluster with 3 nodes version 5.4 on Centos. And I decided to upgrade it to version 6. I did full cluster restart upgrade followed all the https://www.elastic.co/guide/en/elasticsearch/ref…

---

## [Problem when upgrading from ES-5.4.0 to ES-6.0.0](https://discuss.elastic.co/t/problem-when-upgrading-from-es-5-4-0-to-es-6-0-0/111345)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 1\
**Last updated:** [December 12, 2017, 6:31pm UTC](https://discuss.elastic.co/t/problem-when-upgrading-from-es-5-4-0-to-es-6-0-0/111345 "2017-12-12T18:31:31Z")

</div>

Hi all..... here are the steps which i have followed to upgrade from from ES-5.4.0 to ES-6.0.0 Step-1: i have Disable shard allocation and Stop indexing and perform a synced flush and then i have extracted tar files …

---

## [Creating new types in 6.0](https://discuss.elastic.co/t/creating-new-types-in-6-0/111350)

<div class="topic-metadata">

**Author:** [@percona.jayj](https://discuss.elastic.co/u/percona.jayj)\
**Replies:** 5\
**Last updated:** [December 12, 2017, 6:16pm UTC](https://discuss.elastic.co/t/creating-new-types-in-6-0/111350 "2017-12-12T18:16:46Z")

</div>

I can appreciate the decision to remove mapping types going forward in ES, I can also appreciate that version 6 has support for existing indexes with types, but we have until version 7 to totally remove the types. As I …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1855)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1857)
