# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=808 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 809 --- ## [Watcher actions body](https://discuss.elastic.co/t/watcher-actions-body/247943)
**Author:** [@hero](https://discuss.elastic.co/u/hero)\ **Replies:** 1\ **Last updated:** [September 16, 2020, 10:01am UTC](https://discuss.elastic.co/t/watcher-actions-body/247943 "2020-09-16T10:01:38Z")
Watcher actions body How to save search query watcher configure: { "trigger": { "schedule": { "interval": "10s" } }, "input": { "search": { "request": { "search\_type": "query\_the… --- ## [Use painless variable across watch segments](https://discuss.elastic.co/t/use-painless-variable-across-watch-segments/247715)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 1\ **Last updated:** [September 16, 2020, 9:57am UTC](https://discuss.elastic.co/t/use-painless-variable-across-watch-segments/247715 "2020-09-16T09:57:55Z")
i want to set name\_of\_server in condition area and use it inside logging action. is this possible? "actions": { "my-logging-action": { "condition":{ "script": { "source": " … --- ## [Watcher alerts not working as expected](https://discuss.elastic.co/t/watcher-alerts-not-working-as-expected/248593)
**Author:** [@kiwibel](https://discuss.elastic.co/u/kiwibel)\ **Replies:** 1\ **Last updated:** [September 16, 2020, 9:56am UTC](https://discuss.elastic.co/t/watcher-alerts-not-working-as-expected/248593 "2020-09-16T09:56:14Z")
Hi all, We use ES v7.9.0 in Elastic Cloud. Each cluster forwards monitoring data to the dedicated monitoring deployment. We've added a few watches to alert on cluster health issues e.g. cluster status not green, heap … --- ## [Watcher multiple query with \< and \> in match](https://discuss.elastic.co/t/watcher-multiple-query-with-and-in-match/248691)
**Author:** [@suryanaj](https://discuss.elastic.co/u/suryanaj)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 9:46am UTC](https://discuss.elastic.co/t/watcher-multiple-query-with-and-in-match/248691 "2020-09-16T09:46:10Z")
i am not getting any output and getting number match exception in output in 2nd query. Please suggest. i want to use match like { "match": { "http.response.status\_code": "\<500 && \>599" } }, … --- ## [2.x change to 6.x agg bug or not，what can i do？](https://discuss.elastic.co/t/2-x-change-to-6-x-agg-bug-or-not-what-can-i-do/248793)
**Author:** [@CSuperC](https://discuss.elastic.co/u/CSuperC)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 9:28am UTC](https://discuss.elastic.co/t/2-x-change-to-6-x-agg-bug-or-not-what-can-i-do/248793 "2020-09-16T09:28:53Z")
our 2.x agg very good，bug agg 6.x is worst one day 3kw logs，then agg logs by a,b,c,d, very well in 2.x，when use in 6.x ，server is bad ，out of memery 2.x and 6.x java heap is almost the same ，6.x is more heap one day i… --- ## [Adding credentials to helm chart](https://discuss.elastic.co/t/adding-credentials-to-helm-chart/242420)
**Author:** [@joshuacox](https://discuss.elastic.co/u/joshuacox)\ **Replies:** 6\ **Last updated:** [September 16, 2020, 8:11am UTC](https://discuss.elastic.co/t/adding-credentials-to-helm-chart/242420 "2020-09-16T08:11:00Z")
On this page the section on adding a snapshot says: Add any required secrets or credentials into an Elasticsearch keystore following the how to use the keystore guide. But I am confused as to what to name the secret? … --- ## [How to disable http in elasticsearch](https://discuss.elastic.co/t/how-to-disable-http-in-elasticsearch/248359)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 14\ **Last updated:** [September 16, 2020, 6:14am UTC](https://discuss.elastic.co/t/how-to-disable-http-in-elasticsearch/248359 "2020-09-16T06:14:40Z")
How to disable http on data or master nodes , how to specify in cr file. Please anyone help me out. --- ## [Problem with elasticsearch service](https://discuss.elastic.co/t/problem-with-elasticsearch-service/248482)
**Author:** [@Weathmious](https://discuss.elastic.co/u/Weathmious)\ **Replies:** 7\ **Last updated:** [September 16, 2020, 6:09am UTC](https://discuss.elastic.co/t/problem-with-elasticsearch-service/248482 "2020-09-16T06:09:34Z")
Hello, I know there have been topics on this before, but none of them have helped me solve my problem. The drive of my graylog server (on centOS) was filling up way too fast, and I wanted to put elasticsearch on a separ… --- ## [Migrate data from AWS ELK service to my server](https://discuss.elastic.co/t/migrate-data-from-aws-elk-service-to-my-server/248640)
**Author:** [@vidhyadhara](https://discuss.elastic.co/u/vidhyadhara)\ **Replies:** 4\ **Last updated:** [September 16, 2020, 5:44am UTC](https://discuss.elastic.co/t/migrate-data-from-aws-elk-service-to-my-server/248640 "2020-09-16T05:44:29Z")
Hello Everyone, I have a AWS Elasticsearch service (NOTE that its a service i have not installed anything on AWS) , i have been using for 8-9 months, now that i have installed ELK on my own server, i want to move all da… --- ## [Cannot connect to remote cluster in proxy mode](https://discuss.elastic.co/t/cannot-connect-to-remote-cluster-in-proxy-mode/248764)
**Author:** [@onhachoe](https://discuss.elastic.co/u/onhachoe)\ **Replies:** 0\ **Last updated:** [September 16, 2020, 4:45am UTC](https://discuss.elastic.co/t/cannot-connect-to-remote-cluster-in-proxy-mode/248764 "2020-09-16T04:45:53Z")
Hi, I'm trying to add remote cluster through the PUT \_cluster/settings, and was able to successfully add one. { "acknowledged": true, "persistent": { "cluster": { "remote": { … --- ## [Feasibility in joining two indexes in elasticsearch](https://discuss.elastic.co/t/feasibility-in-joining-two-indexes-in-elasticsearch/248577)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 4\ **Last updated:** [September 16, 2020, 4:14am UTC](https://discuss.elastic.co/t/feasibility-in-joining-two-indexes-in-elasticsearch/248577 "2020-09-16T04:14:57Z")
Hi All, I have a index named "dev-ticket" which stores the data of all the incidents created and "dev-perf" which stores the data related to respective server performance Is there are way to join these two index into … --- ## [Aggregation Script with ID and use it in condition](https://discuss.elastic.co/t/aggregation-script-with-id-and-use-it-in-condition/248749)
**Author:** [@saradac](https://discuss.elastic.co/u/saradac)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 12:16am UTC](https://discuss.elastic.co/t/aggregation-script-with-id-and-use-it-in-condition/248749 "2020-09-16T00:16:07Z")
Hi All, I am using script in aggregation and need two things min\_doc\_count Use aggerartion in condition All I am trying is to group by outlet and statationno and if count \> 3 send alert. Below is my script: "aggs"… --- ## [Best practices on indexing/querying nested document in elasticsearch](https://discuss.elastic.co/t/best-practices-on-indexing-querying-nested-document-in-elasticsearch/248745)
**Author:** [@Deepanshu\_Gupta](https://discuss.elastic.co/u/Deepanshu_Gupta)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 10:49pm UTC](https://discuss.elastic.co/t/best-practices-on-indexing-querying-nested-document-in-elasticsearch/248745 "2020-09-15T22:49:19Z")
Team, I am reaching out to you regarding best practices on indexing/querying elasticsearch in order to minimize latencies we are seeing with our cluster. We had a use-case where we needed to ingest data which is nested… --- ## [Can ES SQL do things JSON search DSL can't?](https://discuss.elastic.co/t/can-es-sql-do-things-json-search-dsl-cant/248741)
**Author:** [@dvisz-inf](https://discuss.elastic.co/u/dvisz-inf)\ **Replies:** 1\ **Last updated:** [September 15, 2020, 9:52pm UTC](https://discuss.elastic.co/t/can-es-sql-do-things-json-search-dsl-cant/248741 "2020-09-15T21:52:00Z")
Hi all, I've been working with Elasticsearch a lot for the past two years. Although I come from a relational background, I've avoided using ES' SQL altogether, assuming that it couldn't do anything that the ES JSON sea… --- ## [Need to extract the records as per below requirement](https://discuss.elastic.co/t/need-to-extract-the-records-as-per-below-requirement/248646)
**Author:** [@Prasanth\_Kuna](https://discuss.elastic.co/u/Prasanth_Kuna)\ **Replies:** 1\ **Last updated:** [September 15, 2020, 9:38pm UTC](https://discuss.elastic.co/t/need-to-extract-the-records-as-per-below-requirement/248646 "2020-09-15T21:38:20Z")
\--------------------------------------------------------------------- Requirement is as below. please have a look: I want res… --- ## [My first attempt to export events into ELK](https://discuss.elastic.co/t/my-first-attempt-to-export-events-into-elk/248702)
**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\ **Replies:** 3\ **Last updated:** [September 15, 2020, 9:14pm UTC](https://discuss.elastic.co/t/my-first-attempt-to-export-events-into-elk/248702 "2020-09-15T21:14:33Z")
Hi guys. I have a little application that generates a numeric result after performing some processing every 24hs. I, logging following log lines: Sep 15 15:06:30 UBUNTU-SMOKE 15 new customers created by system1 Sep 15… --- ## [Calculate time difference between 2 date fields : scripted field](https://discuss.elastic.co/t/calculate-time-difference-between-2-date-fields-scripted-field/248730)
**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\ **Replies:** 2\ **Last updated:** [September 15, 2020, 9:04pm UTC](https://discuss.elastic.co/t/calculate-time-difference-between-2-date-fields-scripted-field/248730 "2020-09-15T21:04:28Z")
HI, I need to calculate duration using 2 date fields in watcher API. I tried using painless script and to test using scripted field. But it is errors out stating invalid syntax. What is missing in below ? if (!doc.con… --- ## [Windows Service & Password-protected Keystore](https://discuss.elastic.co/t/windows-service-password-protected-keystore/248734)
**Author:** [@Coinology](https://discuss.elastic.co/u/Coinology)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 8:13pm UTC](https://discuss.elastic.co/t/windows-service-password-protected-keystore/248734 "2020-09-15T20:13:59Z")
All, I see that the Elasticsearch keystore doc here advises that, if a password is used to protect the keystore, that password must be provided each time upon startup. Is there a way to provide this automatically for El… --- ## [(Elasticsearch NEST C#) How to apply CopyTo to any field in an index](https://discuss.elastic.co/t/elasticsearch-nest-c-how-to-apply-copyto-to-any-field-in-an-index/248224)
**Author:** [@WestCoastWondering](https://discuss.elastic.co/u/WestCoastWondering)\ **Replies:** 3\ **Last updated:** [September 15, 2020, 6:56pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-c-how-to-apply-copyto-to-any-field-in-an-index/248224 "2020-09-15T18:56:08Z")
Hi, My team is using Elasticsearch NEST to implement search within a .Net application. The documents in this index include static text fields, such as title and description as well as dynamic fields such as field1234. … --- ## [Access \_ingest using Painless script](https://discuss.elastic.co/t/access-ingest-using-painless-script/245610)
**Author:** [@BkQc](https://discuss.elastic.co/u/BkQc)\ **Replies:** 1\ **Last updated:** [September 15, 2020, 5:33pm UTC](https://discuss.elastic.co/t/access-ingest-using-painless-script/245610 "2020-09-15T17:33:24Z")
I'm trying to populate an array during ingestion within a sub-pipeline. To do so, I'm using a painless script like the following that gives this error. What am I doing wrong? Script: { "script":{ "source":"ctx.… --- ## [The set ingest processor converts json to string](https://discuss.elastic.co/t/the-set-ingest-processor-converts-json-to-string/245625)
**Author:** [@BkQc](https://discuss.elastic.co/u/BkQc)\ **Replies:** 1\ **Last updated:** [September 15, 2020, 5:31pm UTC](https://discuss.elastic.co/t/the-set-ingest-processor-converts-json-to-string/245625 "2020-09-15T17:31:15Z")
Hello, I have an array of objecs that I create in a temporary field on my document. I then want to use the value from that temporary field in place of the actual value of another field (originally an array of string). … --- ## [Use Visualization with nested objects](https://discuss.elastic.co/t/use-visualization-with-nested-objects/248716)
**Author:** [@BkQc](https://discuss.elastic.co/u/BkQc)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 5:21pm UTC](https://discuss.elastic.co/t/use-visualization-with-nested-objects/248716 "2020-09-15T17:21:11Z")
I have an index which is comprised of entries like the following. Is it possible to create Visualization that respects the nested nature of it? When I tried, with the X-Axis being SiteId and a split on Count and Distin… --- ## [Export Elasticsearch Banchmark results](https://discuss.elastic.co/t/export-elasticsearch-banchmark-results/247353)
**Author:** [@IncioMan](https://discuss.elastic.co/u/IncioMan)\ **Replies:** 1\ **Last updated:** [September 15, 2020, 4:01pm UTC](https://discuss.elastic.co/t/export-elasticsearch-banchmark-results/247353 "2020-09-15T16:01:05Z")
Hi, I would like to export the data shown in the public nightly runs of the benchmarks (here https://elasticsearch-benchmarks.elastic.co/#tracks/geonames/nightly/default/30d) e.g as CSV, for further analysis. Is that po… --- ## [How to make shorter (closer) token match more relevant? (edge\_ngram)](https://discuss.elastic.co/t/how-to-make-shorter-closer-token-match-more-relevant-edge-ngram/248703)
**Author:** [@rebelfreq](https://discuss.elastic.co/u/rebelfreq)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 3:21pm UTC](https://discuss.elastic.co/t/how-to-make-shorter-closer-token-match-more-relevant-edge-ngram/248703 "2020-09-15T15:21:39Z")
Hello, I'm getting very weird results with edge\_ngram tokenizer I'm using for autocomplete. I'm trying to figure out how to make my results more relevant. I copied the example from the elasticsearch documentation. I ha… --- ## [Store and query generic attributes/fields](https://discuss.elastic.co/t/store-and-query-generic-attributes-fields/248671)
**Author:** [@ggrune](https://discuss.elastic.co/u/ggrune)\ **Replies:** 3\ **Last updated:** [September 15, 2020, 2:58pm UTC](https://discuss.elastic.co/t/store-and-query-generic-attributes-fields/248671 "2020-09-15T14:58:41Z")
We have a software that allows custom attributes for products. Example: "products" : \[ { "id" : "222222", "sku" : "12345", "name" : "Fancy notebook", "category" : "computer", ... "a… --- ## [OOM Error](https://discuss.elastic.co/t/oom-error/248154)
**Author:** [@Shreesha\_Gundmi](https://discuss.elastic.co/u/Shreesha_Gundmi)\ **Replies:** 7\ **Last updated:** [September 15, 2020, 2:44pm UTC](https://discuss.elastic.co/t/oom-error/248154 "2020-09-15T14:44:03Z")
Hi Team, I am using Elasticsearch 7.6.2, sometimes when we request query I am getting OOM (Out Of Memory) may I know how to tackle this issue? Hardware environment as follows: Server capacity vCPUs: 8 RAM: 32GB Sto… --- ## [Conversion type pipeline](https://discuss.elastic.co/t/conversion-type-pipeline/248638)
**Author:** [@graimato](https://discuss.elastic.co/u/graimato)\ **Replies:** 6\ **Last updated:** [September 15, 2020, 2:23pm UTC](https://discuss.elastic.co/t/conversion-type-pipeline/248638 "2020-09-15T14:23:11Z")
Hello, I'm trying to write a pipeline to parse following part of data ua="192.168.211.109:443" I implement it as ua=\\"%{IP:wkaddress}:%{NUMBER:port:integer}\\" but always I have wkaddress and port as Text field. Wh… --- ## [Changing kubernetes storage class for data nodes without data loss](https://discuss.elastic.co/t/changing-kubernetes-storage-class-for-data-nodes-without-data-loss/248693)
**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\ **Replies:** 0\ **Last updated:** [September 15, 2020, 2:18pm UTC](https://discuss.elastic.co/t/changing-kubernetes-storage-class-for-data-nodes-without-data-loss/248693 "2020-09-15T14:18:28Z")
Elasticsearch version: 7.6.2 $ kubectl version Client Version: version.Info{Major:"1", Minor:"18", GitVersion:"v1.18.2", GitCommit:"52c56ce7a8272c798dbc29846288d7cd9fbae032", GitTreeState:"clean", BuildDate:"2020-04-16T… --- ## [Node class, Client interface and RestHighLevelClient](https://discuss.elastic.co/t/node-class-client-interface-and-resthighlevelclient/248665)
**Author:** [@Pete\_Watcharawit](https://discuss.elastic.co/u/Pete_Watcharawit)\ **Replies:** 3\ **Last updated:** [September 15, 2020, 1:25pm UTC](https://discuss.elastic.co/t/node-class-client-interface-and-resthighlevelclient/248665 "2020-09-15T13:25:38Z")
import org.elasticsearch.node.Node; import org.elasticsearch.client.Client; Settings settings = Settings.builder().loadFromPath(Paths.get("config/elasticsearch.yml").toAbsolutePath()).build(); Path path = Paths.get("con… --- ## [Reading Elasticsearch error in logs - ML](https://discuss.elastic.co/t/reading-elasticsearch-error-in-logs-ml/247790)
**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\ **Replies:** 3\ **Last updated:** [September 15, 2020, 12:56pm UTC](https://discuss.elastic.co/t/reading-elasticsearch-error-in-logs-ml/247790 "2020-09-15T12:56:51Z")
Hello All, I am using ELK v 7.9.1. Have seen the below error. I have been itching my head with where this has come from or where I would look to help over come this issue. The below is the error message: \[instance-00… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=807) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=809)