# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1913 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1914 --- ## [Backup and store data in Elastic search](https://discuss.elastic.co/t/backup-and-store-data-in-elastic-search/103307)
**Author:** [@ramesh205](https://discuss.elastic.co/u/ramesh205)\ **Replies:** 6\ **Last updated:** [October 23, 2017, 2:20pm UTC](https://discuss.elastic.co/t/backup-and-store-data-in-elastic-search/103307 "2017-10-23T14:20:04Z")
Hi team,We are using ELK 5.5.2 stack in our organization in a windows machine had free space of 250 GB,please let me know how to take backup and restore data in Elastic search 5.5.2. --- ## [I´d like to make tiers from the score](https://discuss.elastic.co/t/i-d-like-to-make-tiers-from-the-score/104830)
**Author:** [@mrblue](https://discuss.elastic.co/u/mrblue)\ **Replies:** 4\ **Last updated:** [October 23, 2017, 2:18pm UTC](https://discuss.elastic.co/t/i-d-like-to-make-tiers-from-the-score/104830 "2017-10-23T14:18:33Z")
Hi everybody, this might be an advanced Topic. We have some kind of internal rating system for our database, wich is used for sorting the results. Works fine so far. However, right now even completely irrelevant result… --- ## [Append new object to nested Array without using script](https://discuss.elastic.co/t/append-new-object-to-nested-array-without-using-script/104903)
**Author:** [@eswar](https://discuss.elastic.co/u/eswar)\ **Replies:** 0\ **Last updated:** [October 23, 2017, 1:45pm UTC](https://discuss.elastic.co/t/append-new-object-to-nested-array-without-using-script/104903 "2017-10-23T13:45:12Z")
Hi, Is there any way to append new Object to Nested Array without using scripts . Thanks, Eswar Chandra --- ## [Merging of indices from two elasticsearch environments](https://discuss.elastic.co/t/merging-of-indices-from-two-elasticsearch-environments/104898)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 1\ **Last updated:** [October 23, 2017, 12:58pm UTC](https://discuss.elastic.co/t/merging-of-indices-from-two-elasticsearch-environments/104898 "2017-10-23T12:58:43Z")
Is it possible to merge the indices from two environments with different versions of elasticsearch (5.4.0 and 5.4.3) . --- ## [Copy template from elastic to elastic](https://discuss.elastic.co/t/copy-template-from-elastic-to-elastic/104895)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 2\ **Last updated:** [October 23, 2017, 12:57pm UTC](https://discuss.elastic.co/t/copy-template-from-elastic-to-elastic/104895 "2017-10-23T12:57:51Z")
Hi, I have a template on one machine and want the same exact template copied into my other ES. Help will be amazing! Here is the template (sorry it's in a pic. and not text I can't ctl+c/ctl+p from this machine) : \[i… --- ## [Timespan filter inside Elasticsearch index](https://discuss.elastic.co/t/timespan-filter-inside-elasticsearch-index/104896)
**Author:** [@pkshara](https://discuss.elastic.co/u/pkshara)\ **Replies:** 0\ **Last updated:** [October 23, 2017, 12:41pm UTC](https://discuss.elastic.co/t/timespan-filter-inside-elasticsearch-index/104896 "2017-10-23T12:41:54Z")
Hi All, I have an index called filebeat-\* which gets appended with date everyday when we run the server. Example apache-2017-10-23, Now i want to use the filebeat-\* index as input in logstash configuration file and… --- ## [Action - Sending Email Alert through Gmail or Outlook](https://discuss.elastic.co/t/action-sending-email-alert-through-gmail-or-outlook/103533)
**Author:** [@Sanju\_Mon](https://discuss.elastic.co/u/Sanju_Mon)\ **Replies:** 11\ **Last updated:** [October 23, 2017, 11:41am UTC](https://discuss.elastic.co/t/action-sending-email-alert-through-gmail-or-outlook/103533 "2017-10-23T11:41:24Z")
Hi, In my setup, there is an Elasticsearch running which has XS logs being pumped in it through Broadworks. X-Pack is also installed. My requirement is to send and email alert in case of a specific condition. For this p… --- ## [Elasticsearch date functions](https://discuss.elastic.co/t/elasticsearch-date-functions/104890)
**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\ **Replies:** 0\ **Last updated:** [October 23, 2017, 11:33am UTC](https://discuss.elastic.co/t/elasticsearch-date-functions/104890 "2017-10-23T11:33:26Z")
Hi all.... Here i am trying to update @timestamp field every time when i partially update the doc POST /titanic\_kfk/doc/22/\_update?pretty { "doc": { "@timestamp": 1508756153000 } } but in the above statement i have … --- ## [Elasticsearch shards are UNASSIGNED CLUSTER\_RECOVERED after I changed path.data](https://discuss.elastic.co/t/elasticsearch-shards-are-unassigned-cluster-recovered-after-i-changed-path-data/104871)
**Author:** [@daaakeee](https://discuss.elastic.co/u/daaakeee)\ **Replies:** 1\ **Last updated:** [October 23, 2017, 9:34am UTC](https://discuss.elastic.co/t/elasticsearch-shards-are-unassigned-cluster-recovered-after-i-changed-path-data/104871 "2017-10-23T09:34:12Z")
Hi all. I need help here, I wanted to change path.data settings in elasticsearch.yml and now I have 78 shards UNASSIGNED CLUSTER\_RECOVERED. What can I do to recover my data? --- ## [Problems understanding Anomaly Explorer](https://discuss.elastic.co/t/problems-understanding-anomaly-explorer/104266)
**Author:** [@Badger](https://discuss.elastic.co/u/Badger)\ **Replies:** 1\ **Last updated:** [October 23, 2017, 9:24am UTC](https://discuss.elastic.co/t/problems-understanding-anomaly-explorer/104266 "2017-10-23T09:24:17Z")
I have 23 years worth of house price data, and I run a run that looks at median(price) with one influencer. I am having problems understanding the data shown in Anomaly Explorer. It displays 23 coloured rectangles in a r… --- ## [Boosting doc score based on the search](https://discuss.elastic.co/t/boosting-doc-score-based-on-the-search/104809)
**Author:** [@gilisade](https://discuss.elastic.co/u/gilisade)\ **Replies:** 3\ **Last updated:** [October 23, 2017, 9:19am UTC](https://discuss.elastic.co/t/boosting-doc-score-based-on-the-search/104809 "2017-10-23T09:19:42Z")
Hi i have a a field that contains an ID and then description. looks like this: "37463448454 this is the description". i'm using ngram based analyser on this field (while indexing). i want the user to be able to sea… --- ## [Search based on FullText Meta Information](https://discuss.elastic.co/t/search-based-on-fulltext-meta-information/104069)
**Author:** [@PascalTurbo](https://discuss.elastic.co/u/PascalTurbo)\ **Replies:** 4\ **Last updated:** [October 23, 2017, 9:16am UTC](https://discuss.elastic.co/t/search-based-on-fulltext-meta-information/104069 "2017-10-23T09:16:48Z")
Hi There, we've written a plugin that adds some linguistic information to the fulltext index like Stem and POS. Now we wanna search based on this information. Example: Indexed Text: a) "The cars are driving around… --- ## [\_update\_by\_query updating just 1 batch (1000) docs](https://discuss.elastic.co/t/update-by-query-updating-just-1-batch-1000-docs/104678)
**Author:** [@dashiad](https://discuss.elastic.co/u/dashiad)\ **Replies:** 1\ **Last updated:** [October 23, 2017, 9:09am UTC](https://discuss.elastic.co/t/update-by-query-updating-just-1-batch-1000-docs/104678 "2017-10-23T09:09:35Z")
Warning: using ES 6.0.0-rc1 I've this index: GET /dfp-base-2017-01-01/\_count {"count": 35961,"\_shards": { "total": 2, "successful": 2, "skipped": 0, "failed": 0}} Then i run: POST /dfp-b… --- ## [How to use ESIntegTestCase to load plugins in elasticsearch 5.6.3?](https://discuss.elastic.co/t/how-to-use-esintegtestcase-to-load-plugins-in-elasticsearch-5-6-3/104807)
**Author:** [@tavandung12](https://discuss.elastic.co/u/tavandung12)\ **Replies:** 4\ **Last updated:** [October 23, 2017, 8:54am UTC](https://discuss.elastic.co/t/how-to-use-esintegtestcase-to-load-plugins-in-elasticsearch-5-6-3/104807 "2017-10-23T08:54:04Z")
here is my source code: @ClusterScope(scope = Scope.SUITE) public class MyExpertScriptEngineTest extends ESIntegTestCase { public MyExpertScriptEngineTest() { System.setProperty(TESTS\_CLUSTER, "localhost:9300"); … --- ## [How do I configure PreBuiltTransportClient to use Multithreading?](https://discuss.elastic.co/t/how-do-i-configure-prebuilttransportclient-to-use-multithreading/104868)
**Author:** [@Christopher\_Cheng](https://discuss.elastic.co/u/Christopher_Cheng)\ **Replies:** 0\ **Last updated:** [October 23, 2017, 8:52am UTC](https://discuss.elastic.co/t/how-do-i-configure-prebuilttransportclient-to-use-multithreading/104868 "2017-10-23T08:52:32Z")
I am using the latest HighLevelClient to connect to ES 5.6. How do I configure it to use multithreading and configure number of threads to use? client = new PreBuiltTransportClient(Settings.EMPTY) .a… --- ## [Change the return order](https://discuss.elastic.co/t/change-the-return-order/104851)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 1\ **Last updated:** [October 23, 2017, 8:51am UTC](https://discuss.elastic.co/t/change-the-return-order/104851 "2017-10-23T08:51:38Z")
this is one of return data: { "\_index": "ntopng-2017.10.22", "\_type": "ntopng", "\_id": "AV9Ef4XlWkHrd\_Wf01w6", "\_score": 3, "\_source": { "L7\_PROTO\_NAME": "SSL", "L4\_DST\_PORT": 443, "IPV4\_SRC\_ADDR": "120.127.163.… --- ## [When to use the Bulk API](https://discuss.elastic.co/t/when-to-use-the-bulk-api/104734)
**Author:** [@ChrisFord](https://discuss.elastic.co/u/ChrisFord)\ **Replies:** 2\ **Last updated:** [October 23, 2017, 8:41am UTC](https://discuss.elastic.co/t/when-to-use-the-bulk-api/104734 "2017-10-23T08:41:37Z")
Hi We are currently using the Bulk API to insert documents on initial load of a new index. When it comes to updates and keeping the index in sync with our database, should we still be using the Bulk API or should we ju… --- ## [How to convert UTC to Unix time](https://discuss.elastic.co/t/how-to-convert-utc-to-unix-time/104785)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 1\ **Last updated:** [October 23, 2017, 8:36am UTC](https://discuss.elastic.co/t/how-to-convert-utc-to-unix-time/104785 "2017-10-23T08:36:08Z")
the FIRST\_SWITCHED field is Unix, and when I query the range of the time I need to map the time from UTC to Unix. Could I have the way to convert UTC to Unix directly? this is my query syntax GET \_search { "\_source": … --- ## [ElasticSearch Freezes on Start](https://discuss.elastic.co/t/elasticsearch-freezes-on-start/103388)
**Author:** [@kelevra](https://discuss.elastic.co/u/kelevra)\ **Replies:** 4\ **Last updated:** [October 23, 2017, 8:29am UTC](https://discuss.elastic.co/t/elasticsearch-freezes-on-start/103388 "2017-10-23T08:29:50Z")
Hi, I am trying to open elasticsearch with bin/elasticsearch it loads some modules and when it comes to x-pack it completely freezes the computer so I need to force-restart it. I followed the instructions here: https://… --- ## [270k documents a month Server Setup](https://discuss.elastic.co/t/270k-documents-a-month-server-setup/104852)
**Author:** [@korara00](https://discuss.elastic.co/u/korara00)\ **Replies:** 1\ **Last updated:** [October 23, 2017, 8:18am UTC](https://discuss.elastic.co/t/270k-documents-a-month-server-setup/104852 "2017-10-23T08:18:34Z")
Hello Everyone I'm new to Elasticsearch and I don't have much knowledge yet in server setup how would you recommend to setup a server that will going to hold atleast 270k documents a month for atleast 4 months, how man… --- ## [How to prevent writing user credentials into .watcher-history index?](https://discuss.elastic.co/t/how-to-prevent-writing-user-credentials-into-watcher-history-index/104521)
**Author:** [@Martin\_Becker](https://discuss.elastic.co/u/Martin_Becker)\ **Replies:** 5\ **Last updated:** [October 23, 2017, 7:57am UTC](https://discuss.elastic.co/t/how-to-prevent-writing-user-credentials-into-watcher-history-index/104521 "2017-10-23T07:57:35Z")
I have a watch which checks the request\_cache. Therefore I need to query the elasticsearch API using basic auth for the watch which looks as follows: PUT \_xpack/watcher/watch/request-cache-watcher { "trigg… --- ## [Node not finding the master node](https://discuss.elastic.co/t/node-not-finding-the-master-node/103718)
**Author:** [@Maxclac](https://discuss.elastic.co/u/Maxclac)\ **Replies:** 16\ **Last updated:** [October 23, 2017, 7:22am UTC](https://discuss.elastic.co/t/node-not-finding-the-master-node/103718 "2017-10-23T07:22:10Z")
Hello everyone! I am using ES 5.6.2 and I created two nodes within a cluster. I simply want to have one master node and one slave node. Here are the configuration files for both of them: cluster.name: nomad-cluster… --- ## [Get count of specified field (unique-value)](https://discuss.elastic.co/t/get-count-of-specified-field-unique-value/104846)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 2\ **Last updated:** [October 23, 2017, 7:13am UTC](https://discuss.elastic.co/t/get-count-of-specified-field-unique-value/104846 "2017-10-23T07:13:56Z")
Hi, everyone. I want to get the count of every different value of specified field. Now I am using the genre syntax "genres" "aggs": { "genres" : { "terms" : { "field" : "L4\_SRC\_PORT"} } } but the return doesn't look … --- ## [Per min, how many documents can get updated using their bulk update API](https://discuss.elastic.co/t/per-min-how-many-documents-can-get-updated-using-their-bulk-update-api/104838)
**Author:** [@hello4usharath](https://discuss.elastic.co/u/hello4usharath)\ **Replies:** 1\ **Last updated:** [October 23, 2017, 6:40am UTC](https://discuss.elastic.co/t/per-min-how-many-documents-can-get-updated-using-their-bulk-update-api/104838 "2017-10-23T06:40:40Z")
per min, how many documents can get updated using their bulk update API --- ## [Questions about ES snapshot/restore](https://discuss.elastic.co/t/questions-about-es-snapshot-restore/104826)
**Author:** [@shrenikgala](https://discuss.elastic.co/u/shrenikgala)\ **Replies:** 1\ **Last updated:** [October 23, 2017, 6:06am UTC](https://discuss.elastic.co/t/questions-about-es-snapshot-restore/104826 "2017-10-23T06:06:46Z")
I'm using Elasticsearch 2.4.4 and need to use the snapshot/restore mechanism to backup data. But I have a few questions about it. 1. Can a snapshot be taken without any issues while data is being written into ES. 2. Do… --- ## [Slow query in a singal server with big data for the first query](https://discuss.elastic.co/t/slow-query-in-a-singal-server-with-big-data-for-the-first-query/104827)
**Author:** [@permanz](https://discuss.elastic.co/u/permanz)\ **Replies:** 0\ **Last updated:** [October 23, 2017, 1:47am UTC](https://discuss.elastic.co/t/slow-query-in-a-singal-server-with-big-data-for-the-first-query/104827 "2017-10-23T01:47:10Z")
I'm using elasticsearch 5.6.2 in a signal server and give heap memory for elasticsearch is 16GB, the disk is SAS 10krpm。 The indices with 5 shards and 1 replica by default. 1 day data for one indices is about 20GB (the… --- ## [Trying to breakdown query into ES query](https://discuss.elastic.co/t/trying-to-breakdown-query-into-es-query/104625)
**Author:** [@Ryan\_T](https://discuss.elastic.co/u/Ryan_T)\ **Replies:** 1\ **Last updated:** [October 22, 2017, 9:01pm UTC](https://discuss.elastic.co/t/trying-to-breakdown-query-into-es-query/104625 "2017-10-22T21:01:58Z")
hey all, Needed some help. Im trying to do some query type stuff with ES, and wanted to know if it would even be possible, if so, how would I accomplish something like this. SELECT \* FROM Tickets WHERE (status = open … --- ## [Elastic Search java.lang.ArrayIndexOutOfBoundsException at ToXContent on initialization of client](https://discuss.elastic.co/t/elastic-search-java-lang-arrayindexoutofboundsexception-at-toxcontent-on-initialization-of-client/104622)
**Author:** [@moneydance](https://discuss.elastic.co/u/moneydance)\ **Replies:** 1\ **Last updated:** [October 22, 2017, 8:10pm UTC](https://discuss.elastic.co/t/elastic-search-java-lang-arrayindexoutofboundsexception-at-toxcontent-on-initialization-of-client/104622 "2017-10-22T20:10:42Z")
Stack Trace: Caused by: java.lang.ExceptionInInitializerError at com.fmrco.sai.sod.common.elasticsearch.config.ElasticConfig.client(ElasticConfig.java:33) ~\[ElasticConfig.class:?\] ............. Caused by: ja… --- ## [Garbage Collection initialisation](https://discuss.elastic.co/t/garbage-collection-initialisation/104732)
**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\ **Replies:** 4\ **Last updated:** [October 22, 2017, 8:05pm UTC](https://discuss.elastic.co/t/garbage-collection-initialisation/104732 "2017-10-22T20:05:49Z")
Hello, from reading the documentation garbage collection will occur if the JVM heap percentage is 75% or above - I'm wondering does GC happen as soon as 75% is reached or does it need to spend some time at 75% or above b… --- ## [Question about non-dynamic settings](https://discuss.elastic.co/t/question-about-non-dynamic-settings/104739)
**Author:** [@Michael\_Perez](https://discuss.elastic.co/u/Michael_Perez)\ **Replies:** 1\ **Last updated:** [October 22, 2017, 1:23pm UTC](https://discuss.elastic.co/t/question-about-non-dynamic-settings/104739 "2017-10-22T13:23:24Z")
Hi, I wanted to know the reason why changing the analysis settings requires the index to be closed and opened? Thanks. [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1912) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1914)