# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=909 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 910 --- ## [How to enable infoStream](https://discuss.elastic.co/t/how-to-enable-infostream/234457)
**Author:** [@ravitandur](https://discuss.elastic.co/u/ravitandur)\ **Replies:** 1\ **Last updated:** [May 27, 2020, 5:13am UTC](https://discuss.elastic.co/t/how-to-enable-infostream/234457 "2020-05-27T05:13:12Z")
How to enable info stream for various operations in elasticsearch? --- ## [Indexes automatically re open after closed](https://discuss.elastic.co/t/indexes-automatically-re-open-after-closed/234393)
**Author:** [@Carlos\_Lopez](https://discuss.elastic.co/u/Carlos_Lopez)\ **Replies:** 4\ **Last updated:** [May 27, 2020, 5:08am UTC](https://discuss.elastic.co/t/indexes-automatically-re-open-after-closed/234393 "2020-05-27T05:08:17Z")
I have a cluster with multiple indexes with the same format where the name changes month after month. index\_name\_\* I am closing indexes 3 months after they are created to save resources since the data is no longer need… --- ## [FSCrawler giving File does not exist issue](https://discuss.elastic.co/t/fscrawler-giving-file-does-not-exist-issue/234377)
**Author:** [@Umesh\_S\_Bhimani](https://discuss.elastic.co/u/Umesh_S_Bhimani)\ **Replies:** 5\ **Last updated:** [May 27, 2020, 4:47am UTC](https://discuss.elastic.co/t/fscrawler-giving-file-does-not-exist-issue/234377 "2020-05-27T04:47:25Z")
Hi, I am trying to work on indexing attachments through fscrwaler using SSH (22). I have elastic search installed on one machine & trying to read through data from other machine in the same network, but getting a file … --- ## [Array of objects in pipeline](https://discuss.elastic.co/t/array-of-objects-in-pipeline/234356)
**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\ **Replies:** 1\ **Last updated:** [May 27, 2020, 3:39am UTC](https://discuss.elastic.co/t/array-of-objects-in-pipeline/234356 "2020-05-27T03:39:37Z")
Hi i m trying to write a pipeline to find a missing field in an array of objects. So this is what i wrote. PUT \_ingest/pipeline/header-missing { "description": "header missing", "version": 1, "processors" : \[ {… --- ## [How to include link in watcher action](https://discuss.elastic.co/t/how-to-include-link-in-watcher-action/234441)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 0\ **Last updated:** [May 27, 2020, 2:39am UTC](https://discuss.elastic.co/t/how-to-include-link-in-watcher-action/234441 "2020-05-27T02:39:37Z")
How to include a link to the incident in the incident report? --- ## [Ingest with FSCrawler and open the file from path.real value](https://discuss.elastic.co/t/ingest-with-fscrawler-and-open-the-file-from-path-real-value/234227)
**Author:** [@richylyq](https://discuss.elastic.co/u/richylyq)\ **Replies:** 10\ **Last updated:** [May 27, 2020, 2:23am UTC](https://discuss.elastic.co/t/ingest-with-fscrawler-and-open-the-file-from-path-real-value/234227 "2020-05-27T02:23:58Z")
Hi @dadoonet, i think i will direct the question to you since this is on FSCrawler. Am i able to set anything in the settings of FSCrawler to enable myself to be able to open the file that i ingested from the path.real … --- ## [Safeguard / Circuit-breakers to prevent accidental deletion of a large number of documents](https://discuss.elastic.co/t/safeguard-circuit-breakers-to-prevent-accidental-deletion-of-a-large-number-of-documents/234431)
**Author:** [@sg.esearch](https://discuss.elastic.co/u/sg.esearch)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 11:46pm UTC](https://discuss.elastic.co/t/safeguard-circuit-breakers-to-prevent-accidental-deletion-of-a-large-number-of-documents/234431 "2020-05-26T23:46:35Z")
We have a couple of clusters where it is extremely hard to re-ingest data again. Some of them use nested docs, some don't. But all of them want to use DBQ (Delete By Query). But deletion-by-query is a bit scary featur… --- ## [I configure elk with filebeat,elasticsearch,kibana, where do i can apply sigma rules?](https://discuss.elastic.co/t/i-configure-elk-with-filebeat-elasticsearch-kibana-where-do-i-can-apply-sigma-rules/234375)
**Author:** [@man](https://discuss.elastic.co/u/man)\ **Replies:** 1\ **Last updated:** [May 26, 2020, 11:17pm UTC](https://discuss.elastic.co/t/i-configure-elk-with-filebeat-elasticsearch-kibana-where-do-i-can-apply-sigma-rules/234375 "2020-05-26T23:17:59Z")
filebeat ship all the logs to elasticsearch , in kibana i can able to see, but where can apply converted sigma rules? i am new to elk, please help. --- ## [Subdomain term Query](https://discuss.elastic.co/t/subdomain-term-query/234329)
**Author:** [@ankitsynX](https://discuss.elastic.co/u/ankitsynX)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 12:21pm UTC](https://discuss.elastic.co/t/subdomain-term-query/234329 "2020-05-26T12:21:31Z")
Hi All, I am building a lookup query for matching domain names using terms query. My lookup index is indexed as keyword. My search index has the domain field indexed as text and keyword both. There are possible four … --- ## [Elasticsearch high CPU usage on a mostly bulk indexing use case](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage-on-a-mostly-bulk-indexing-use-case/233196)
**Author:** [@ssouris](https://discuss.elastic.co/u/ssouris)\ **Replies:** 10\ **Last updated:** [May 26, 2020, 9:59pm UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage-on-a-mostly-bulk-indexing-use-case/233196 "2020-05-26T21:59:35Z")
Hi, we are running Elasticsearch 7.6.2 on our own in AWS. We have: 6 data nodes on i3en.xlarge instances 3 dedicated master nodes 200 indices storing ~800million documents. Total size ~5TB 30s refresh interval We are… --- ## [Use aggregation to recommend items](https://discuss.elastic.co/t/use-aggregation-to-recommend-items/234385)
**Author:** [@Kushikawa](https://discuss.elastic.co/u/Kushikawa)\ **Replies:** 1\ **Last updated:** [May 26, 2020, 9:14pm UTC](https://discuss.elastic.co/t/use-aggregation-to-recommend-items/234385 "2020-05-26T21:14:47Z")
I have order objects indexed with the client id and the order's items. I'd like to know what products recommend to a client based on the items he bought, using a collaborative filtering I'm new to elasticsearch, and I'… --- ## [How to define dynamic\_template for an json type data?](https://discuss.elastic.co/t/how-to-define-dynamic-template-for-an-json-type-data/234414)
**Author:** [@rishabh\_jain](https://discuss.elastic.co/u/rishabh_jain)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 8:14pm UTC](https://discuss.elastic.co/t/how-to-define-dynamic-template-for-an-json-type-data/234414 "2020-05-26T20:14:30Z")
Consider the example: { "id":"abcd", "name":"xyz", "extra\_details":{ "a":1, "b":2 } } Need to define dynamic template for the extra\_details type data ?? How can i define this? --- ## [Document field type (integer) does not match mapping (keyword)](https://discuss.elastic.co/t/document-field-type-integer-does-not-match-mapping-keyword/234412)
**Author:** [@goldfish](https://discuss.elastic.co/u/goldfish)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 7:54pm UTC](https://discuss.elastic.co/t/document-field-type-integer-does-not-match-mapping-keyword/234412 "2020-05-26T19:54:43Z")
A document in my Elasticsearch cluster has a field whose type conflicts with the mapping for that index. In this case, the mapping type is keyword, whereas the value of the field in the document is an integer. The field… --- ## [How simple query string and query string works internally?](https://discuss.elastic.co/t/how-simple-query-string-and-query-string-works-internally/234399)
**Author:** [@rishabh\_jain](https://discuss.elastic.co/u/rishabh_jain)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 6:58pm UTC](https://discuss.elastic.co/t/how-simple-query-string-and-query-string-works-internally/234399 "2020-05-26T18:58:11Z")
Explain how does simple query string and query string work internally and how these are different from match query --- ## [Safepoint "Cleanup" after update 7.7.0](https://discuss.elastic.co/t/safepoint-cleanup-after-update-7-7-0/234349)
**Author:** [@willouuu](https://discuss.elastic.co/u/willouuu)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 1:47pm UTC](https://discuss.elastic.co/t/safepoint-cleanup-after-update-7-7-0/234349 "2020-05-26T13:47:11Z")
Hello I have this messages after update to 7.7.0 on logs elasticsearch \[2020-05-26T13:40:32.045+0000\]\[5768\]\[safepoint \] Safepoint "Cleanup", Time since last: 1000124847 ns, Reaching safepoint: 110408 ns, At safepoin… --- ## [Is there a recommended pipeline to benchmark an existent cluster](https://discuss.elastic.co/t/is-there-a-recommended-pipeline-to-benchmark-an-existent-cluster/233532)
**Author:** [@xandmaga](https://discuss.elastic.co/u/xandmaga)\ **Replies:** 4\ **Last updated:** [May 26, 2020, 12:59pm UTC](https://discuss.elastic.co/t/is-there-a-recommended-pipeline-to-benchmark-an-existent-cluster/233532 "2020-05-26T12:59:40Z")
We've built an es cluster and indexed our data. How do i benchmark this cluster? Suppose we already have our tracks, we only want to evaluate search latency and that we know the throughput we'll need. Do i use the … --- ## [Can't connect to elasticsearch with kibana](https://discuss.elastic.co/t/cant-connect-to-elasticsearch-with-kibana/233623)
**Author:** [@Phoenix\_Flame](https://discuss.elastic.co/u/Phoenix_Flame)\ **Replies:** 10\ **Last updated:** [May 26, 2020, 12:23pm UTC](https://discuss.elastic.co/t/cant-connect-to-elasticsearch-with-kibana/233623 "2020-05-26T12:23:48Z")
I just installed elasticsearch and kibana but when i try to start kibana i get this error "Error: \[mapper\_parsing\_exception\] No handler for type \[flattened\] declared on field \[state\]". How do i fix this? --- ## [7.7.0 aarch64 downloads not found](https://discuss.elastic.co/t/7-7-0-aarch64-downloads-not-found/234325)
**Author:** [@Kyle\_House](https://discuss.elastic.co/u/Kyle_House)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 12:16pm UTC](https://discuss.elastic.co/t/7-7-0-aarch64-downloads-not-found/234325 "2020-05-26T12:16:41Z")
hello! I was hoping to try out the aarch64 builds of Elasticsearch 7.7.0, but i'm getting an error from the provided link: https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.7.0-aarch64.deb https://ww… --- ## [ElasticSearch Performance tuning with 3 nodes](https://discuss.elastic.co/t/elasticsearch-performance-tuning-with-3-nodes/234229)
**Author:** [@Roshan\_Jha](https://discuss.elastic.co/u/Roshan_Jha)\ **Replies:** 17\ **Last updated:** [May 26, 2020, 12:12pm UTC](https://discuss.elastic.co/t/elasticsearch-performance-tuning-with-3-nodes/234229 "2020-05-26T12:12:11Z")
Hi below is the configuration of my elasticstack. total of 3 nodes with all the nodes eligible for master as well as master node. each node system configuration RAM :- 8GB on each node CORE:- 4 core i have provided… --- ## [Is requestTimeout is passed in ms in NPM Elasticsearch Client](https://discuss.elastic.co/t/is-requesttimeout-is-passed-in-ms-in-npm-elasticsearch-client/234287)
**Author:** [@rishabh\_jain](https://discuss.elastic.co/u/rishabh_jain)\ **Replies:** 1\ **Last updated:** [May 26, 2020, 12:05pm UTC](https://discuss.elastic.co/t/is-requesttimeout-is-passed-in-ms-in-npm-elasticsearch-client/234287 "2020-05-26T12:05:05Z")
https://www.elastic.co/guide/en/elasticsearch/client/javascript-api/current/client-configuration.html What is the unit of requestTimeout in Client Configuration. --- ## [CCR and number of licensed nodes](https://discuss.elastic.co/t/ccr-and-number-of-licensed-nodes/234307)
**Author:** [@KidFashion](https://discuss.elastic.co/u/KidFashion)\ **Replies:** 2\ **Last updated:** [May 26, 2020, 11:51am UTC](https://discuss.elastic.co/t/ccr-and-number-of-licensed-nodes/234307 "2020-05-26T11:51:17Z")
Hello, I know that CCR feature requires a Platinum License but I would like to understand if, in a DR scenario, nodes of the DR cluster needs to be counted or not: To make things clearer I was looking at the webinar at… --- ## [How to get score based on the matched field value in multi match (cross\_fields)](https://discuss.elastic.co/t/how-to-get-score-based-on-the-matched-field-value-in-multi-match-cross-fields/233644)
**Author:** [@Sangmin\_Lee](https://discuss.elastic.co/u/Sangmin_Lee)\ **Replies:** 1\ **Last updated:** [May 26, 2020, 10:54am UTC](https://discuss.elastic.co/t/how-to-get-score-based-on-the-matched-field-value-in-multi-match-cross-fields/233644 "2020-05-26T10:54:16Z")
Hi ! I'm looking for the way to get score based on the matched field value in the query of cross field in multi match. This is how one of my index field looks like, "field\_with\_value" : \[ { … --- ## [Is this score wrong?](https://discuss.elastic.co/t/is-this-score-wrong/234301)
**Author:** [@hezhiqiang](https://discuss.elastic.co/u/hezhiqiang)\ **Replies:** 1\ **Last updated:** [May 26, 2020, 10:50am UTC](https://discuss.elastic.co/t/is-this-score-wrong/234301 "2020-05-26T10:50:30Z")
query is: GET kid\_book/\_search?search\_type=dfs\_query\_then\_fetch { "query": { "bool": { "must": \[ { "bool": { "must": \[ { "match": { … --- ## [How to configure secure\_password for an xpack email?](https://discuss.elastic.co/t/how-to-configure-secure-password-for-an-xpack-email/233957)
**Author:** [@manofjoy](https://discuss.elastic.co/u/manofjoy)\ **Replies:** 1\ **Last updated:** [May 26, 2020, 10:47am UTC](https://discuss.elastic.co/t/how-to-configure-secure-password-for-an-xpack-email/233957 "2020-05-26T10:47:38Z")
I have configured email/smtp/user in my docker-compose.yml file. Added action to send email from watcher. Watcher executed and throwing error. I need to configure secure\_password when i add into docker compose, Elasti… --- ## [How to do subqueries in Elastic search](https://discuss.elastic.co/t/how-to-do-subqueries-in-elastic-search/234311)
**Author:** [@Asha\_Lodhi](https://discuss.elastic.co/u/Asha_Lodhi)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 10:46am UTC](https://discuss.elastic.co/t/how-to-do-subqueries-in-elastic-search/234311 "2020-05-26T10:46:09Z")
Hi, I have a sql query which has subquery, can any one help me how this could be done in Elastic search 5 and above. \> select sum(a.netamt) , \> (select sum(total\_amount) \> from ( \> select dis… --- ## [How to join 2 index using 2 common values](https://discuss.elastic.co/t/how-to-join-2-index-using-2-common-values/234248)
**Author:** [@aannee](https://discuss.elastic.co/u/aannee)\ **Replies:** 3\ **Last updated:** [May 26, 2020, 10:19am UTC](https://discuss.elastic.co/t/how-to-join-2-index-using-2-common-values/234248 "2020-05-26T10:19:55Z")
Hi, is it possible to join 2 index in elasticsearch? Maybe using query. Or I'm thinking if I could do a logstash pipeline that will query the two index and join them inside the pipeline. First time to face a request lik… --- ## [FSCrawler - windows - path does not exist](https://discuss.elastic.co/t/fscrawler-windows-path-does-not-exist/234230)
**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\ **Replies:** 2\ **Last updated:** [May 26, 2020, 10:14am UTC](https://discuss.elastic.co/t/fscrawler-windows-path-does-not-exist/234230 "2020-05-26T10:14:26Z")
Hi, I am trying to index files from remote windows server using fsCrawler. I gave the path in \_settings file as c:\\\\ESFiles and c:/ESFiles. but below error is coming in logs. 03:12:56,586 INFO \[f.p.e.c.f.c.BootstrapCh… --- ## [FIPS enabled but can not it show warning](https://discuss.elastic.co/t/fips-enabled-but-can-not-it-show-warning/233830)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 4\ **Last updated:** [May 26, 2020, 9:44am UTC](https://discuss.elastic.co/t/fips-enabled-but-can-not-it-show-warning/233830 "2020-05-26T09:44:00Z")
Hi Here I configured FIPS in elasticsearch-7.6.2 but it shows below error please anyone help here--------------- \[2020-05-21T20:17:58,238\]\[INFO \]\[o.e.c.s.MasterService \] \[node01\] elected-as-master (\[1\] nodes joined)… --- ## [Alerting with a chain-input](https://discuss.elastic.co/t/alerting-with-a-chain-input/231989)
**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\ **Replies:** 5\ **Last updated:** [May 26, 2020, 9:43am UTC](https://discuss.elastic.co/t/alerting-with-a-chain-input/231989 "2020-05-26T09:43:58Z")
Hi, We are getting NPS logs and want to monitor when a certain string appears. We want to create an alert if we receive a log containing the field "CISCOTAG" containing the value "%ASA-2-113022". But, we only want to se… --- ## [Math operation with aggregated fields](https://discuss.elastic.co/t/math-operation-with-aggregated-fields/233569)
**Author:** [@Thanura\_Kannangara](https://discuss.elastic.co/u/Thanura_Kannangara)\ **Replies:** 2\ **Last updated:** [May 26, 2020, 9:41am UTC](https://discuss.elastic.co/t/math-operation-with-aggregated-fields/233569 "2020-05-26T09:41:35Z")
Hello Folks, A newbie (to watchers at least) is here :slight\_smile: I'm trying to create a watcher for disk\_space usage we have multiple hosts send data to same index pattern, so I was planning to aggregate hits with … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=908) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=910)