# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1910 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1911 --- ## [ElasticSearch performance problem for dynamic field mapping](https://discuss.elastic.co/t/elasticsearch-performance-problem-for-dynamic-field-mapping/105094)
**Author:** [@live4forever](https://discuss.elastic.co/u/live4forever)\ **Replies:** 8\ **Last updated:** [October 25, 2017, 7:03pm UTC](https://discuss.elastic.co/t/elasticsearch-performance-problem-for-dynamic-field-mapping/105094 "2017-10-25T19:03:28Z")
I have an ES on linux and I index the documents using Nest framework. But the problem is there is one object that containes dynamic field. For exp: there is a class named Product and one of its properties is dynamic whic… --- ## [Problem with elasticsearch performance when excuting aggregations](https://discuss.elastic.co/t/problem-with-elasticsearch-performance-when-excuting-aggregations/105271)
**Author:** [@Sarra\_Bouhenni](https://discuss.elastic.co/u/Sarra_Bouhenni)\ **Replies:** 0\ **Last updated:** [October 25, 2017, 3:01pm UTC](https://discuss.elastic.co/t/problem-with-elasticsearch-performance-when-excuting-aggregations/105271 "2017-10-25T15:01:05Z")
Hello Elastic community, First of all, I would like to thank the ELK team for their support and rich online documentation. But, I'm facing a performance problem that I didn't know how to solve, let me explain: I have … --- ## [Event Based Filtering of Windows correlation rules](https://discuss.elastic.co/t/event-based-filtering-of-windows-correlation-rules/104833)
**Author:** [@Noel\_George](https://discuss.elastic.co/u/Noel_George)\ **Replies:** 3\ **Last updated:** [October 25, 2017, 6:53pm UTC](https://discuss.elastic.co/t/event-based-filtering-of-windows-correlation-rules/104833 "2017-10-25T18:53:21Z")
Where can I find match filters for different windows correlation rules in elastic search so that I can avoid false positives?? --- ## [Windows path (backslash-rich) regexp not working](https://discuss.elastic.co/t/windows-path-backslash-rich-regexp-not-working/105275)
**Author:** [@oldenbur](https://discuss.elastic.co/u/oldenbur)\ **Replies:** 0\ **Last updated:** [October 25, 2017, 4:15pm UTC](https://discuss.elastic.co/t/windows-path-backslash-rich-regexp-not-working/105275 "2017-10-25T16:15:34Z")
I'm using elastic v5.5.1. I have data that basically looks like windows network path globs that I would like to search for using a regexp. I have simplified the problem down to the following example: PUT regexp-test {… --- ## [Aggregate Top Hits source elements](https://discuss.elastic.co/t/aggregate-top-hits-source-elements/105280)
**Author:** [@shikha130vv](https://discuss.elastic.co/u/shikha130vv)\ **Replies:** 0\ **Last updated:** [October 25, 2017, 5:10pm UTC](https://discuss.elastic.co/t/aggregate-top-hits-source-elements/105280 "2017-10-25T17:10:41Z")
I am getting units\_agg = 0 . What am i doing wrong? I want to sum units in id\_agg '{ "size":1, "aggs": { "article\_agg": { "terms": { "field":"articleid" }, "aggs": { "sku\_agg": { "terms": { "field": "sto… --- ## [What is the execution sequence of watcher actions?](https://discuss.elastic.co/t/what-is-the-execution-sequence-of-watcher-actions/105129)
**Author:** [@naziyakhan](https://discuss.elastic.co/u/naziyakhan)\ **Replies:** 4\ **Last updated:** [October 25, 2017, 5:04pm UTC](https://discuss.elastic.co/t/what-is-the-execution-sequence-of-watcher-actions/105129 "2017-10-25T17:04:48Z")
Are the actions synchronous or asynchronous? Are they sequential? I would like to use the output of the first action written to watcher-history in the second action of the watcher? Is this possible and / or recommended… --- ## [Log4j2 questions](https://discuss.elastic.co/t/log4j2-questions/105276)
**Author:** [@Michael\_S\_Ryder](https://discuss.elastic.co/u/Michael_S_Ryder)\ **Replies:** 0\ **Last updated:** [October 25, 2017, 4:41pm UTC](https://discuss.elastic.co/t/log4j2-questions/105276 "2017-10-25T16:41:36Z")
Hello folks I'd like to update the /etc/elasticsearch/log4j2.properties to automatically prune log files. I followed some advice I read about here: https://www.elastic.co/guide/en/elasticsearch/reference/current/settin… --- ## [Processor for csv filter](https://discuss.elastic.co/t/processor-for-csv-filter/104922)
**Author:** [@Pratiksha\_Tewary](https://discuss.elastic.co/u/Pratiksha_Tewary)\ **Replies:** 7\ **Last updated:** [October 25, 2017, 3:14pm UTC](https://discuss.elastic.co/t/processor-for-csv-filter/104922 "2017-10-25T15:14:24Z")
Hi, I wanted to know if there are any Ingest node plugins similar to the "csv" filter in Logstash. I need to separate a tab delimited event into separate fields using ingest pipeline. Any help would be much appreciated. … --- ## [Configuring elastic search not to be localhost](https://discuss.elastic.co/t/configuring-elastic-search-not-to-be-localhost/105256)
**Author:** [@bilpor](https://discuss.elastic.co/u/bilpor)\ **Replies:** 1\ **Last updated:** [October 25, 2017, 3:13pm UTC](https://discuss.elastic.co/t/configuring-elastic-search-not-to-be-localhost/105256 "2017-10-25T15:13:53Z")
HI All, After installing Elasticsearch 5.6.3 and setting Nodename to the server name. I tried to browse to Elasticsearch using IP:9200 but it didn't work. If I browse to localhost:9200 it works. Where do I go to chang… --- ## [Unassigned shards due to awareness allocation](https://discuss.elastic.co/t/unassigned-shards-due-to-awareness-allocation/105202)
**Author:** [@Dhara\_Desai](https://discuss.elastic.co/u/Dhara_Desai)\ **Replies:** 1\ **Last updated:** [October 25, 2017, 2:44pm UTC](https://discuss.elastic.co/t/unassigned-shards-due-to-awareness-allocation/105202 "2017-10-25T14:44:14Z")
We are using elasticsearch 1.7.4, cluster settings are following with around ~400 nodes evenly distributed across aws\_availability\_zone cluster.routing.allocation.awareness.attributes: aws\_availability\_zone cluster.rou… --- ## [GPU accelerated Machine learning](https://discuss.elastic.co/t/gpu-accelerated-machine-learning/104197)
**Author:** [@vbs1214](https://discuss.elastic.co/u/vbs1214)\ **Replies:** 1\ **Last updated:** [October 25, 2017, 2:16pm UTC](https://discuss.elastic.co/t/gpu-accelerated-machine-learning/104197 "2017-10-25T14:16:09Z")
Hello! I would like to know if it is possible to boost X-pack machine learning with GPU acceleration (if not - other recommended means to boost performance for this kind of jobs?) The reason I am asking this is because… --- ## [Test case failures related to seccomp](https://discuss.elastic.co/t/test-case-failures-related-to-seccomp/105228)
**Author:** [@Anuja](https://discuss.elastic.co/u/Anuja)\ **Replies:** 1\ **Last updated:** [October 25, 2017, 2:01pm UTC](https://discuss.elastic.co/t/test-case-failures-related-to-seccomp/105228 "2017-10-25T14:01:34Z")
Elasticsearch version: 5.1.6 Plugins installed: No Java Version: Openjdk version "1.8.0\_131" Description of the problem I have added architecture support in SystemCallFilter.java for seccomp. However after making the… --- ## [Mapping changes in Elasticsearch 5.x](https://discuss.elastic.co/t/mapping-changes-in-elasticsearch-5-x/104975)
**Author:** [@dhondup](https://discuss.elastic.co/u/dhondup)\ **Replies:** 2\ **Last updated:** [October 25, 2017, 1:25pm UTC](https://discuss.elastic.co/t/mapping-changes-in-elasticsearch-5-x/104975 "2017-10-25T13:25:00Z")
According to 5.x doc, the index option now accepts only true or false. My question: Is it set to true by default or do I have to set it as true every time I want field values to be indexed? { "my\_index": { "mapp… --- ## [Elasticsearch \_source include a specific array item from the document](https://discuss.elastic.co/t/elasticsearch-source-include-a-specific-array-item-from-the-document/105247)
**Author:** [@singsuyash](https://discuss.elastic.co/u/singsuyash)\ **Replies:** 0\ **Last updated:** [October 25, 2017, 1:11pm UTC](https://discuss.elastic.co/t/elasticsearch-source-include-a-specific-array-item-from-the-document/105247 "2017-10-25T13:11:34Z")
My document looks like this { "\_index": "mydb", "\_type": "target", "\_id": "AV8vO5O0eCTee14x6VZQ", "\_score": 1, "\_source": { "line": "77.001", … --- ## [How to use 'run as' in the Java transport client](https://discuss.elastic.co/t/how-to-use-run-as-in-the-java-transport-client/104566)
**Author:** [@adesouza](https://discuss.elastic.co/u/adesouza)\ **Replies:** 2\ **Last updated:** [October 25, 2017, 12:37pm UTC](https://discuss.elastic.co/t/how-to-use-run-as-in-the-java-transport-client/104566 "2017-10-25T12:37:13Z")
Hi, I'm using the 5.5.0 Java transport client and I'd like to submit a search request using the 'run as' feature, but I'm not sure how I go about it. Are there any examples available? Thanks, Aaron --- ## [Install Elasticsearch on Debian Jessie failed](https://discuss.elastic.co/t/install-elasticsearch-on-debian-jessie-failed/105013)
**Author:** [@Nos2016](https://discuss.elastic.co/u/Nos2016)\ **Replies:** 4\ **Last updated:** [October 25, 2017, 12:32pm UTC](https://discuss.elastic.co/t/install-elasticsearch-on-debian-jessie-failed/105013 "2017-10-25T12:32:39Z")
Hi, As my elasticsearch stop frequently, I decide to reinstall it on my debian jessie. I did the following commands : sudo apt-get --purge autoremove elasticsearch sudo rm -rf /var/lib/elasticsearch/ sudo rm -rf /et… --- ## [Watcher alert on buckets data](https://discuss.elastic.co/t/watcher-alert-on-buckets-data/105041)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 4\ **Last updated:** [October 25, 2017, 11:40am UTC](https://discuss.elastic.co/t/watcher-alert-on-buckets-data/105041 "2017-10-25T11:40:26Z")
Hello all, Sorry if my question is "too basic", but I'm stuck. I'm implementing a prototype in order to detect fraudulent phone calls. I have made a query that given a time interval, returns the total duration of all … --- ## [Question about index aliasing](https://discuss.elastic.co/t/question-about-index-aliasing/104623)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 2\ **Last updated:** [October 25, 2017, 11:15am UTC](https://discuss.elastic.co/t/question-about-index-aliasing/104623 "2017-10-25T11:15:58Z")
I am wondering if the following use case will work with indiex aliasing? I have two indices index1 and index2, both of them aliased to index combinedindex. Both these indices have different fields. Basically, I have an… --- ## [Sharding Strategy](https://discuss.elastic.co/t/sharding-strategy/103573)
**Author:** [@Manikanth\_Reddy](https://discuss.elastic.co/u/Manikanth_Reddy)\ **Replies:** 17\ **Last updated:** [October 25, 2017, 9:56am UTC](https://discuss.elastic.co/t/sharding-strategy/103573 "2017-10-25T09:56:07Z")
Hi, We have a cluster of 8nodes with 3,248 indices and 29,544 shards with 1 replica. We have 5shards per each index. These are daily indices with size ranging from 10MB to max 2GB. Out of these 8 nodes, 3Master,3Data a… --- ## [Changing Elasticsearch from Localhost to IP on Windows](https://discuss.elastic.co/t/changing-elasticsearch-from-localhost-to-ip-on-windows/105157)
**Author:** [@Mahmood\_Shehab](https://discuss.elastic.co/u/Mahmood_Shehab)\ **Replies:** 1\ **Last updated:** [October 25, 2017, 9:06am UTC](https://discuss.elastic.co/t/changing-elasticsearch-from-localhost-to-ip-on-windows/105157 "2017-10-25T09:06:07Z")
After installing Elasticsearch, Kibana, logstash to my windows 7 local machine, everything was perfect however, when I want to change the address from “localhost” to “192.168.1.100” I faced a problem so I made the below … --- ## [Old release template.log file can't work in release 6.0.0](https://discuss.elastic.co/t/old-release-template-log-file-cant-work-in-release-6-0-0/104686)
**Author:** [@qrshat\_gl](https://discuss.elastic.co/u/qrshat_gl)\ **Replies:** 1\ **Last updated:** [October 25, 2017, 8:47am UTC](https://discuss.elastic.co/t/old-release-template-log-file-cant-work-in-release-6-0-0/104686 "2017-10-25T08:47:11Z")
we had used to elasticsearch 2.1and logstasth 2.1 release. Today we installed elasticsearch 6.0.0 and logstash 6.0.0. then we migrated old release logstash configration file to new platform. But after migration we got … --- ## [In Kibana Ui get status:Red heap used how to fix?](https://discuss.elastic.co/t/in-kibana-ui-get-status-red-heap-used-how-to-fix/105201)
**Author:** [@Dima\_Shechtman](https://discuss.elastic.co/u/Dima_Shechtman)\ **Replies:** 0\ **Last updated:** [October 25, 2017, 8:36am UTC](https://discuss.elastic.co/t/in-kibana-ui-get-status-red-heap-used-how-to-fix/105201 "2017-10-25T08:36:36Z")
I get a status: Red heap used more than heap total. I have a total of 65mb heap. I tried to change it but didn't succeed. am I missing something? steps i did: export ES\_HEAP\_SIZE=10g /etc/elasticsearch/jvm.options … --- ## [Can anybody write a tutorial about how to use btrace with ES since there is permission issue](https://discuss.elastic.co/t/can-anybody-write-a-tutorial-about-how-to-use-btrace-with-es-since-there-is-permission-issue/105196)
**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\ **Replies:** 0\ **Last updated:** [October 25, 2017, 8:20am UTC](https://discuss.elastic.co/t/can-anybody-write-a-tutorial-about-how-to-use-btrace-with-es-since-there-is-permission-issue/105196 "2017-10-25T08:20:54Z")
when try to attach to ES process and there is permission issue. so I wonder if anyone can give a guide about this --- ## [Create new index or update existing mapping to dynamic using Java API](https://discuss.elastic.co/t/create-new-index-or-update-existing-mapping-to-dynamic-using-java-api/104996)
**Author:** [@eyasso](https://discuss.elastic.co/u/eyasso)\ **Replies:** 5\ **Last updated:** [October 25, 2017, 8:04am UTC](https://discuss.elastic.co/t/create-new-index-or-update-existing-mapping-to-dynamic-using-java-api/104996 "2017-10-25T08:04:00Z")
Hello, Is there an option to create new index using High level REST client with mapping set to dynamic? Thanks? --- ## [Running elasticsearch source code in eclipse luna](https://discuss.elastic.co/t/running-elasticsearch-source-code-in-eclipse-luna/105000)
**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\ **Replies:** 1\ **Last updated:** [October 25, 2017, 7:45am UTC](https://discuss.elastic.co/t/running-elasticsearch-source-code-in-eclipse-luna/105000 "2017-10-25T07:45:07Z")
OS: Windows 7 Professional Eclipse Luna, JDK 1.8, apache-maven-3.3 Hi, Imported elasticsearch 2.1 branch from github in eclipse luna. Then converted it into a maven project. Configured eclipse to use external apache-… --- ## [Double aggregation with unique documents](https://discuss.elastic.co/t/double-aggregation-with-unique-documents/105183)
**Author:** [@Ruben\_Fanjul](https://discuss.elastic.co/u/Ruben_Fanjul)\ **Replies:** 0\ **Last updated:** [October 25, 2017, 7:37am UTC](https://discuss.elastic.co/t/double-aggregation-with-unique-documents/105183 "2017-10-25T07:37:25Z")
Tables Orders orderstate time\_reserved user\_id product\_id Product id refid This query hit 76 documents. select \* from Orders inner join Products on Orders.productid = Products.id where Products.\`refid\`… --- ## [Monitoring - error 400](https://discuss.elastic.co/t/monitoring-error-400/105066)
**Author:** [@knights](https://discuss.elastic.co/u/knights)\ **Replies:** 2\ **Last updated:** [October 25, 2017, 7:20am UTC](https://discuss.elastic.co/t/monitoring-error-400/105066 "2017-10-25T07:20:00Z")
Hello, I'm currently testing the monitoring options given by x-pack. In my development environment, I set up 2 clusters, sending their monitoring data into a 3rd cluster. When I try to visualize the monitoring data vi… --- ## [Monitoring indices names](https://discuss.elastic.co/t/monitoring-indices-names/104547)
**Author:** [@knights](https://discuss.elastic.co/u/knights)\ **Replies:** 2\ **Last updated:** [October 25, 2017, 7:17am UTC](https://discuss.elastic.co/t/monitoring-indices-names/104547 "2017-10-25T07:17:11Z")
Hello, everyone. I'm currently testing the various functionalities offered by X-pack to decide wether or not we'll use them in production or not. We currently have several clusters needing monitoring, So, I set up a te… --- ## [How to do authorization in elasticsearch](https://discuss.elastic.co/t/how-to-do-authorization-in-elasticsearch/105051)
**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\ **Replies:** 4\ **Last updated:** [October 25, 2017, 5:52am UTC](https://discuss.elastic.co/t/how-to-do-authorization-in-elasticsearch/105051 "2017-10-25T05:52:19Z")
I wanna to integrate user authorization part.how it possible without using xpack. --- ## [How to setup synonym using ES 5.6.2](https://discuss.elastic.co/t/how-to-setup-synonym-using-es-5-6-2/104909)
**Author:** [@Shahrul\_Azhar](https://discuss.elastic.co/u/Shahrul_Azhar)\ **Replies:** 3\ **Last updated:** [October 25, 2017, 5:23am UTC](https://discuss.elastic.co/t/how-to-setup-synonym-using-es-5-6-2/104909 "2017-10-25T05:23:54Z")
hi, Can someone assiSt me how to setup synonym using ES 5.6.2? I have to import data from oracle into index in ES Currently, what i'm doing is: step 1: // file logstash-ora-01.conf input { jdbc { jdbc\_validate\_c… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1909) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1911)