# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1963

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1964

---

## [Openfire customisation with elasticsearch](https://discuss.elastic.co/t/openfire-customisation-with-elasticsearch/98887)

<div class="topic-metadata">

**Author:** [@Abdul](https://discuss.elastic.co/u/Abdul)\
**Replies:** 2\
**Last updated:** [August 31, 2017, 5:22am UTC](https://discuss.elastic.co/t/openfire-customisation-with-elasticsearch/98887 "2017-08-31T05:22:24Z")

</div>

Dear all , I am customizing the openfire and moving the openfire archive messages to elasticsearch instead of db but My build is failing due to monitoring plugin of openfire(Using Lucene.jar) and elasticaearch using Lu…

---

## [In elasticsearch 5.4.2 can merge indexs?](https://discuss.elastic.co/t/in-elasticsearch-5-4-2-can-merge-indexs/98920)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 3\
**Last updated:** [August 31, 2017, 3:54am UTC](https://discuss.elastic.co/t/in-elasticsearch-5-4-2-can-merge-indexs/98920 "2017-08-31T03:54:31Z")

</div>

in elasticsearch 5.4.2 can merge indexs? in my env , have so match shards, can merge indexs to only, the shards can’t have so match data.

---

## [Ok to reindex in yellow state?](https://discuss.elastic.co/t/ok-to-reindex-in-yellow-state/98893)

<div class="topic-metadata">

**Author:** [@Matt\_Chambers](https://discuss.elastic.co/u/Matt_Chambers)\
**Replies:** 1\
**Last updated:** [August 31, 2017, 2:14am UTC](https://discuss.elastic.co/t/ok-to-reindex-in-yellow-state/98893 "2017-08-31T02:14:31Z")

</div>

Using elastic 2.4 currently. I have this application that auto-migrates itself on startup if the new mapping is incompatible with the old mapping. The problem is, sometimes during a full cluster restart, it starts the r…

---

## [Whats the time lapse for updates to get indexed on Elastic Search](https://discuss.elastic.co/t/whats-the-time-lapse-for-updates-to-get-indexed-on-elastic-search/97476)

<div class="topic-metadata">

**Author:** [@sbuddhi](https://discuss.elastic.co/u/sbuddhi)\
**Replies:** 5\
**Last updated:** [August 30, 2017, 9:43pm UTC](https://discuss.elastic.co/t/whats-the-time-lapse-for-updates-to-get-indexed-on-elastic-search/97476 "2017-08-30T21:43:10Z")

</div>

We are trying to Implement Elastic Search on our WordPress site. So far it looks great but we couldn’t find anywhere about the time lapse for new updates on the WordPress site to get indexed. Does the new updates get i…

---

## [curator.actions.IndexSettings missing in Curator python lib?](https://discuss.elastic.co/t/curator-actions-indexsettings-missing-in-curator-python-lib/98868)

<div class="topic-metadata">

**Author:** [@Cornoualis](https://discuss.elastic.co/u/Cornoualis)\
**Replies:** 2\
**Last updated:** [August 30, 2017, 4:21pm UTC](https://discuss.elastic.co/t/curator-actions-indexsettings-missing-in-curator-python-lib/98868 "2017-08-30T16:21:52Z")

</div>

I’m trying to use the IndexSettings action class in the curator python library: ilo = curator.IndexList(es) e= curator.actions.IndexSettings(ilo.all\_indices, index\_settings={"number\_of\_replicas": 1}) And I have this re…

---

## [Elasticsearch data in Datatable (Last indexed Data)](https://discuss.elastic.co/t/elasticsearch-data-in-datatable-last-indexed-data/98883)

<div class="topic-metadata">

**Author:** [@mahadevaprasadap](https://discuss.elastic.co/u/mahadevaprasadap)\
**Replies:** 0\
**Last updated:** [August 30, 2017, 3:53pm UTC](https://discuss.elastic.co/t/elasticsearch-data-in-datatable-last-indexed-data/98883 "2017-08-30T15:53:06Z")

</div>

How to get the last indexed data in from the Elasticsearch data into the data table? For example, visualize the heartbeat data in the data table

---

## [Nprobe flows drops when sending to elasticsearch cluster](https://discuss.elastic.co/t/nprobe-flows-drops-when-sending-to-elasticsearch-cluster/98878)

<div class="topic-metadata">

**Author:** [@Tomasz\_Zielinski](https://discuss.elastic.co/u/Tomasz_Zielinski)\
**Replies:** 0\
**Last updated:** [August 30, 2017, 3:30pm UTC](https://discuss.elastic.co/t/nprobe-flows-drops-when-sending-to-elasticsearch-cluster/98878 "2017-08-30T15:30:22Z")

</div>

Hi, i have an nprobe probe what collect a flows from network and transport it to elastic cluster. For testing purposes i have one elastic node with following hardware o CPU: 8C o RAM: 16GB o HDD: 1T This is …

---

## ["Strange" behaviour multimatch with fuzziness](https://discuss.elastic.co/t/strange-behaviour-multimatch-with-fuzziness/98867)

<div class="topic-metadata">

**Author:** [@barry1](https://discuss.elastic.co/u/barry1)\
**Replies:** 1\
**Last updated:** [August 30, 2017, 2:34pm UTC](https://discuss.elastic.co/t/strange-behaviour-multimatch-with-fuzziness/98867 "2017-08-30T14:34:52Z")

</div>

So I have 3 documents with 2 fields: title and brand Title: Björn Borg R400 Low SNB schoenen heren marine/groen/wit, Brand: Björn Borg Title: Baby Born Schoenen 2-Pack Assorti, Brand: Baby Born Title: Born In The Echoe…

---

## [Category examples not available in Machine Learning module 5.5](https://discuss.elastic.co/t/category-examples-not-available-in-machine-learning-module-5-5/97756)

<div class="topic-metadata">

**Author:** [@gautamv](https://discuss.elastic.co/u/gautamv)\
**Replies:** 3\
**Last updated:** [August 30, 2017, 2:25pm UTC](https://discuss.elastic.co/t/category-examples-not-available-in-machine-learning-module-5-5/97756 "2017-08-30T14:25:24Z")

</div>

Hi, I'm trying out the new Machine learning module 5.5. I'm running a job where I want to identify anomalies using function count and by\_field\_name mlcategory (categorization\_field\_name is message). However, in the ano…

---

## [Fast checking on integer values?](https://discuss.elastic.co/t/fast-checking-on-integer-values/98865)

<div class="topic-metadata">

**Author:** [@ESCoder](https://discuss.elastic.co/u/ESCoder)\
**Replies:** 0\
**Last updated:** [August 30, 2017, 2:22pm UTC](https://discuss.elastic.co/t/fast-checking-on-integer-values/98865 "2017-08-30T14:22:00Z")

</div>

hi, i have a document structure: { category\_id : "1" description: "Long descriptions etc. etc. " } When searching, i want to only search across specific category\_id’s, like : category\_id = 1 && description = “som…

---

## [Is it possible to change doc\_count and key to something else](https://discuss.elastic.co/t/is-it-possible-to-change-doc-count-and-key-to-something-else/98856)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 3\
**Last updated:** [August 30, 2017, 2:15pm UTC](https://discuss.elastic.co/t/is-it-possible-to-change-doc-count-and-key-to-something-else/98856 "2017-08-30T14:15:27Z")

</div>

When i do a aggregation i got result as this Is it possible to change doc\_count and key to something else ? { “took”: 4, “timed\_out”: false, "\_shards": { “total”: 5, “successful”: 5, “failed”: 0 }, “hits”: { “…

---

## [Mapping Netflow Data (NSEL)](https://discuss.elastic.co/t/mapping-netflow-data-nsel/97316)

<div class="topic-metadata">

**Author:** [@cdomansky](https://discuss.elastic.co/u/cdomansky)\
**Replies:** 10\
**Last updated:** [August 30, 2017, 2:14pm UTC](https://discuss.elastic.co/t/mapping-netflow-data-nsel/97316 "2017-08-30T14:14:20Z")

</div>

Am new to the Elastic Stack and my 1st project with it is to analyze Netflow data from a Cisco ASA which actually pushes out NSEL as opposed to regular Netflow \[v5,9\] packets. The problem that I am running into is that …

---

## [Issue with Elastic search data](https://discuss.elastic.co/t/issue-with-elastic-search-data/98555)

<div class="topic-metadata">

**Author:** [@Ramchandram](https://discuss.elastic.co/u/Ramchandram)\
**Replies:** 4\
**Last updated:** [August 30, 2017, 1:56pm UTC](https://discuss.elastic.co/t/issue-with-elastic-search-data/98555 "2017-08-30T13:56:54Z")

</div>

Hi, I am just new to elastic search. Recently, I have tried executing the below query { “from”: 0, “size”: 1, “query”: { “bool”: { “must”: \[ { “match”: { “receiver”: { “query”: “AN”, “type”: “boolean” } } } …

---

## [Machine learning - host stopped sending logs or events](https://discuss.elastic.co/t/machine-learning-host-stopped-sending-logs-or-events/96938)

<div class="topic-metadata">

**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\
**Replies:** 14\
**Last updated:** [August 30, 2017, 1:55pm UTC](https://discuss.elastic.co/t/machine-learning-host-stopped-sending-logs-or-events/96938 "2017-08-30T13:55:54Z")

</div>

Hi All, Iam using elastic stack 5.5 to monitor the netflow and sflow and I have two separate indexes , I view them in kibana , for search and dashboards. If i stop receiving the logs in the indexes, from logstash or th…

---

## [Machine learning algorithm in Elastic?](https://discuss.elastic.co/t/machine-learning-algorithm-in-elastic/98482)

<div class="topic-metadata">

**Author:** [@LeKhoa](https://discuss.elastic.co/u/LeKhoa)\
**Replies:** 6\
**Last updated:** [August 30, 2017, 12:54pm UTC](https://discuss.elastic.co/t/machine-learning-algorithm-in-elastic/98482 "2017-08-30T12:54:51Z")

</div>

Dear Sir/Madam, I'm learning about elastic. But I do not know what elastic use machine learning algorithm?? Do I read some documents that mentions it using classification algorithms from log data? So to classify we need…

---

## [Unable to delete a failed job in Machine Learning Beta](https://discuss.elastic.co/t/unable-to-delete-a-failed-job-in-machine-learning-beta/97747)

<div class="topic-metadata">

**Author:** [@nktvys](https://discuss.elastic.co/u/nktvys)\
**Replies:** 4\
**Last updated:** [August 30, 2017, 12:24pm UTC](https://discuss.elastic.co/t/unable-to-delete-a-failed-job-in-machine-learning-beta/97747 "2017-08-30T12:24:57Z")

</div>

Hi, I want to delete a failed job. A pop-up appears and an error is displayed. The stopping and deleting datafeed fails because the datafeed was already deleted when I tried to delete it the job the first time. …

---

## [Snapshot register](https://discuss.elastic.co/t/snapshot-register/98836)

<div class="topic-metadata">

**Author:** [@Vivek\_Samaga](https://discuss.elastic.co/u/Vivek_Samaga)\
**Replies:** 1\
**Last updated:** [August 30, 2017, 11:56am UTC](https://discuss.elastic.co/t/snapshot-register/98836 "2017-08-30T11:56:31Z")

</div>

Hi I want to register snapshot to backup my indices. But my ES cluster is down i cant do it via SENSE UI my command is curl -XPUT 'elk.\*\*\*.com:9200/\_snapshot/my\_backup' { "type": "fs", "settings": { "locat…

---

## [Elasticsearch time chart](https://discuss.elastic.co/t/elasticsearch-time-chart/98532)

<div class="topic-metadata">

**Author:** [@Akhil\_Prashar](https://discuss.elastic.co/u/Akhil_Prashar)\
**Replies:** 8\
**Last updated:** [August 30, 2017, 11:45am UTC](https://discuss.elastic.co/t/elasticsearch-time-chart/98532 "2017-08-30T11:45:03Z")

</div>

I would like to create a time chart which searches a keyword through multiple indexes and finally forms a graph which shows the repetition of keyword through days. Can anyone help me with how to do this?

---

## [Error:multiple process in single config file](https://discuss.elastic.co/t/error-multiple-process-in-single-config-file/98846)

<div class="topic-metadata">

**Author:** [@abhiraj\_gowda](https://discuss.elastic.co/u/abhiraj_gowda)\
**Replies:** 0\
**Last updated:** [August 30, 2017, 11:18am UTC](https://discuss.elastic.co/t/error-multiple-process-in-single-config-file/98846 "2017-08-30T11:18:30Z")

</div>

output { if \[type\] == “foo” { elasticsearch { index =\> “foo-index” } } else { elasticsearch { #hosts =\> "localhost" index =\> “bar-index” } } } bin/logstash -f config/jira\_entire\_project\_report.conf --debug …

---

## [List of stopwords in Elastic search version 1.3.2](https://discuss.elastic.co/t/list-of-stopwords-in-elastic-search-version-1-3-2/98844)

<div class="topic-metadata">

**Author:** [@Ramchandram](https://discuss.elastic.co/u/Ramchandram)\
**Replies:** 0\
**Last updated:** [August 30, 2017, 11:13am UTC](https://discuss.elastic.co/t/list-of-stopwords-in-elastic-search-version-1-3-2/98844 "2017-08-30T11:13:21Z")

</div>

Hi Guys, Could you please let me know the list of stop words in the case of Elastic search version 1.3.2. Also, What could be the default anaylizer in 1.3.2

---

## [Returning a map from scripted metric aggregation](https://discuss.elastic.co/t/returning-a-map-from-scripted-metric-aggregation/98556)

<div class="topic-metadata">

**Author:** [@Ashish\_Goel](https://discuss.elastic.co/u/Ashish_Goel)\
**Replies:** 2\
**Last updated:** [August 28, 2017, 7:15pm UTC](https://discuss.elastic.co/t/returning-a-map-from-scripted-metric-aggregation/98556 "2017-08-28T19:15:25Z")

</div>

Hi there, I have been using ElasticSearch 1.5 before. And in that, there was a scripted metric aggregation with groovy as the language where I was returning a map. Now, we are working on upgrading to ElasticSearch 5.4 …

---

## [Elasticsearch multi node failover](https://discuss.elastic.co/t/elasticsearch-multi-node-failover/98842)

<div class="topic-metadata">

**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\
**Replies:** 2\
**Last updated:** [August 30, 2017, 11:04am UTC](https://discuss.elastic.co/t/elasticsearch-multi-node-failover/98842 "2017-08-30T11:04:13Z")

</div>

I have 2 nodes in a cluster. I tried to disconnect one node and the other node was also disconnected/cannot access. I thought that one of the advantage of multiple nodes is that, I can use one node if the other node is …

---

## [Setting up index for maximum search ability (with front end typeahead)](https://discuss.elastic.co/t/setting-up-index-for-maximum-search-ability-with-front-end-typeahead/98716)

<div class="topic-metadata">

**Author:** [@YeeP](https://discuss.elastic.co/u/YeeP)\
**Replies:** 1\
**Last updated:** [August 30, 2017, 10:55am UTC](https://discuss.elastic.co/t/setting-up-index-for-maximum-search-ability-with-front-end-typeahead/98716 "2017-08-30T10:55:33Z")

</div>

Most of my experience with elasticsearch has been for storing timebased data that comes from logs we track on the network. We are trying to expand it for use as a database for a web based application being written. I am …

---

## [Index rollover using curator](https://discuss.elastic.co/t/index-rollover-using-curator/98392)

<div class="topic-metadata">

**Author:** [@Ihjaz](https://discuss.elastic.co/u/Ihjaz)\
**Replies:** 2\
**Last updated:** [August 30, 2017, 10:37am UTC](https://discuss.elastic.co/t/index-rollover-using-curator/98392 "2017-08-30T10:37:52Z")

</div>

Hi, I’m trying to get the indices rolled over once it reaches a given number of documents. I have the curator action as shown below: 2: action: rollover description: \>- Rollover the index associated wit…

---

## [Gui in Python example](https://discuss.elastic.co/t/gui-in-python-example/98839)

<div class="topic-metadata">

**Author:** [@alainc](https://discuss.elastic.co/u/alainc)\
**Replies:** 0\
**Last updated:** [August 30, 2017, 10:29am UTC](https://discuss.elastic.co/t/gui-in-python-example/98839 "2017-08-30T10:29:58Z")

</div>

Hi, I’m trying to search some examples in python to create Graphical interface to manually insert data to ES. no retreive needed as I can do it with KB. Something containing examples or text fields/ radio button/ drop…

---

## [Kibana dashboard- index out of bound exception](https://discuss.elastic.co/t/kibana-dashboard-index-out-of-bound-exception/98775)

<div class="topic-metadata">

**Author:** [@joejoe1](https://discuss.elastic.co/u/joejoe1)\
**Replies:** 2\
**Last updated:** [August 30, 2017, 10:09am UTC](https://discuss.elastic.co/t/kibana-dashboard-index-out-of-bound-exception/98775 "2017-08-30T10:09:26Z")

</div>

how to remove/filter array index out of bound exception alerts from dashboard kibana 5.5.

---

## [ES for logging - what to look after with high indexing rate](https://discuss.elastic.co/t/es-for-logging-what-to-look-after-with-high-indexing-rate/98397)

<div class="topic-metadata">

**Author:** [@lorenzo-dr](https://discuss.elastic.co/u/lorenzo-dr)\
**Replies:** 7\
**Last updated:** [August 30, 2017, 9:42am UTC](https://discuss.elastic.co/t/es-for-logging-what-to-look-after-with-high-indexing-rate/98397 "2017-08-30T09:42:04Z")

</div>

Hello everybody, first post here in the community. I setup an ES 5.4.0 cluster on AWS made of 5 data-nodes and 3 masters (only), to collect all the logs from our application. The data nodes are pretty OK servers (8CPU…

---

## [Pagination using the java api](https://discuss.elastic.co/t/pagination-using-the-java-api/98675)

<div class="topic-metadata">

**Author:** [@YvesC](https://discuss.elastic.co/u/YvesC)\
**Replies:** 1\
**Last updated:** [August 30, 2017, 8:26am UTC](https://discuss.elastic.co/t/pagination-using-the-java-api/98675 "2017-08-30T08:26:42Z")

</div>

Hi all, I am currently in the progress of migrating our code to be compatible with ES 5.4 (we came from 2.3) I am using the Java API as described in the elasticsearch documentation (5.4) but came across something weird…

---

## [How to set multi value about http.cors.allow-origin in es 5.x](https://discuss.elastic.co/t/how-to-set-multi-value-about-http-cors-allow-origin-in-es-5-x/98146)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 8\
**Last updated:** [August 30, 2017, 7:59am UTC](https://discuss.elastic.co/t/how-to-set-multi-value-about-http-cors-allow-origin-in-es-5-x/98146 "2017-08-30T07:59:38Z")

</div>

how to set http.cors.allow-origin in es when i wan’t to only two ip can use elasticsearch-head connect to es? how can set teh http.cors.allow-origin this is one ip http.cors.allow-origin: /https?://localhost(:\[0-9\]+)?…

---

## [Clear notifications from watcher](https://discuss.elastic.co/t/clear-notifications-from-watcher/98704)

<div class="topic-metadata">

**Author:** [@Richard\_Neely](https://discuss.elastic.co/u/Richard_Neely)\
**Replies:** 3\
**Last updated:** [August 30, 2017, 7:40am UTC](https://discuss.elastic.co/t/clear-notifications-from-watcher/98704 "2017-08-30T07:40:34Z")

</div>

Is there a way to send clear notifications on watchers that i have setup? i have created an index for watcher history but can’t seem to think up a way to get clears to go out.

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1962)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1964)
