# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=911

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 912

---

## [Elasticsearch Alert Email not working - Watcher](https://discuss.elastic.co/t/elasticsearch-alert-email-not-working-watcher/231386)

<div class="topic-metadata">

**Author:** [@david-vazquez](https://discuss.elastic.co/u/david-vazquez)\
**Replies:** 11\
**Last updated:** [May 25, 2020, 5:12pm UTC](https://discuss.elastic.co/t/elasticsearch-alert-email-not-working-watcher/231386 "2020-05-25T17:12:31Z")

</div>

Dear all, I configured SMTP following the guide https://www.elastic.co/guide/en/elasticsearch/reference/7.6/actions-email.html#configuring-email My configuration is as follows: xpack.notification.email.account: gmail…

---

## [Disabling date detection from Java API](https://discuss.elastic.co/t/disabling-date-detection-from-java-api/234180)

<div class="topic-metadata">

**Author:** [@dwaipayan](https://discuss.elastic.co/u/dwaipayan)\
**Replies:** 0\
**Last updated:** [May 25, 2020, 4:13pm UTC](https://discuss.elastic.co/t/disabling-date-detection-from-java-api/234180 "2020-05-25T16:13:52Z")

</div>

Hi, I am trying to index a large JSON file in Elasticsearch but, some malformed date variables (containing '\\n' inside date) is causing exception. I already came across this: https://www.elastic.co/guide/en/elasticsearc…

---

## [Elasticsearch tests not running againts system installed java jdk](https://discuss.elastic.co/t/elasticsearch-tests-not-running-againts-system-installed-java-jdk/231571)

<div class="topic-metadata">

**Author:** [@adpopescu-ibm](https://discuss.elastic.co/u/adpopescu-ibm)\
**Replies:** 1\
**Last updated:** [May 25, 2020, 3:40pm UTC](https://discuss.elastic.co/t/elasticsearch-tests-not-running-againts-system-installed-java-jdk/231571 "2020-05-25T15:40:18Z")

</div>

Hi, I was running the tests with: ./gradlew --continue test My environment variables are: JAVA\_HOME=/usr/local/jdk-13.0.2+8/ JAVA13\_HOME=/usr/local/jdk-13.0.2+8/ RUNTIME\_JAVA\_HOME is not set. I noticed that only whi…

---

## [Is localhost self-signed certificate eligible to make trust connection to external OIDC identity provider?](https://discuss.elastic.co/t/is-localhost-self-signed-certificate-eligible-to-make-trust-connection-to-external-oidc-identity-provider/230998)

<div class="topic-metadata">

**Author:** [@KTH](https://discuss.elastic.co/u/KTH)\
**Replies:** 3\
**Last updated:** [May 25, 2020, 2:55pm UTC](https://discuss.elastic.co/t/is-localhost-self-signed-certificate-eligible-to-make-trust-connection-to-external-oidc-identity-provider/230998 "2020-05-25T14:55:13Z")

</div>

Hi, I managed to make localhost Kibana to be functioned in https environment.(The warning stated that it is not trusted). However my localhost elasticsearch node is still in http environment. The elasticsearch console …

---

## [SQL Query convert to ES query](https://discuss.elastic.co/t/sql-query-convert-to-es-query/231507)

<div class="topic-metadata">

**Author:** [@Ramesh\_balasubramani](https://discuss.elastic.co/u/Ramesh_balasubramani)\
**Replies:** 4\
**Last updated:** [May 25, 2020, 2:15pm UTC](https://discuss.elastic.co/t/sql-query-convert-to-es-query/231507 "2020-05-25T14:15:50Z")

</div>

Hi Guys, (message == "Accpted" OR message == "Password) OR (Hostname == "SSDESK-003) AND (( src\_ip != 10.100.7.102) AND (engine\_log\_id == "7")) How to convert above query to ES Query? Any quick help would be appreciat…

---

## [How to achieve sum(distinct(columnName)) in Elastic search with out using terms and cardinality in aggregation](https://discuss.elastic.co/t/how-to-achieve-sum-distinct-columnname-in-elastic-search-with-out-using-terms-and-cardinality-in-aggregation/233979)

<div class="topic-metadata">

**Author:** [@Asha\_Lodhi](https://discuss.elastic.co/u/Asha_Lodhi)\
**Replies:** 0\
**Last updated:** [May 23, 2020, 7:21am UTC](https://discuss.elastic.co/t/how-to-achieve-sum-distinct-columnname-in-elastic-search-with-out-using-terms-and-cardinality-in-aggregation/233979 "2020-05-23T07:21:32Z")

</div>

Suppose this is the record set in sql. number net amt total amount 229W0330014229 0.69 11.07 229W0330014229 0.05 11.07 21380365288472 26.25 44.02 21380365288472 1.2 44.02 64950353437733 19.95 57.39 649…

---

## [Tif files in fscrawler](https://discuss.elastic.co/t/tif-files-in-fscrawler/231880)

<div class="topic-metadata">

**Author:** [@avishai.d](https://discuss.elastic.co/u/avishai.d)\
**Replies:** 24\
**Last updated:** [May 25, 2020, 1:11pm UTC](https://discuss.elastic.co/t/tif-files-in-fscrawler/231880 "2020-05-25T13:11:24Z")

</div>

Hello, I'm trying to index a tif file using fscrawler and don't get any contet while PDF works fine. Please assist

---

## [Error creating 3 nodes Elasticsearch in docker](https://discuss.elastic.co/t/error-creating-3-nodes-elasticsearch-in-docker/234149)

<div class="topic-metadata">

**Author:** [@securigeek](https://discuss.elastic.co/u/securigeek)\
**Replies:** 0\
**Last updated:** [May 25, 2020, 12:28pm UTC](https://discuss.elastic.co/t/error-creating-3-nodes-elasticsearch-in-docker/234149 "2020-05-25T12:28:11Z")

</div>

Hello Community, I am pretty new with docker and have been tasked with testing the complete ELK cluster on docker . WIth the example given on the website it only has 2 nodes and hence I reused the format to add a 3node …

---

## [Deleting unassigned shard replicas](https://discuss.elastic.co/t/deleting-unassigned-shard-replicas/233896)

<div class="topic-metadata">

**Author:** [@olivierwa](https://discuss.elastic.co/u/olivierwa)\
**Replies:** 4\
**Last updated:** [May 25, 2020, 11:37am UTC](https://discuss.elastic.co/t/deleting-unassigned-shard-replicas/233896 "2020-05-25T11:37:46Z")

</div>

I have a 3 node cluster (i2a, i2b and i2c) with a replica factor of 2 (1 primary, 2 copies). We noticed the cluster became yellow, as we have UNASSIGNED shards. Reason is that a copy of the share already exists. When we…

---

## [Search query for a contents in the file](https://discuss.elastic.co/t/search-query-for-a-contents-in-the-file/234110)

<div class="topic-metadata">

**Author:** [@Anirudhan](https://discuss.elastic.co/u/Anirudhan)\
**Replies:** 1\
**Last updated:** [May 25, 2020, 9:43am UTC](https://discuss.elastic.co/t/search-query-for-a-contents-in-the-file/234110 "2020-05-25T09:43:48Z")

</div>

I indexing the contents of PDF files using FSCrawler.Now the content of the whole PDF file is stored in the content key in elastic. Below is a sample record. { "content": "\\n\\n\\n WHY TRAVEL INSURANCE?\\n\\…

---

## [Getting nested values in Multi Indices approach](https://discuss.elastic.co/t/getting-nested-values-in-multi-indices-approach/234116)

<div class="topic-metadata">

**Author:** [@Muna](https://discuss.elastic.co/u/Muna)\
**Replies:** 0\
**Last updated:** [May 25, 2020, 9:24am UTC](https://discuss.elastic.co/t/getting-nested-values-in-multi-indices-approach/234116 "2020-05-25T09:24:02Z")

</div>

Hi, i am trying to get the nested value in multi indices approach. used below query but didn't help. please advise. GET \_all,/\_search { "query": { "bool": { "should": \[ { "nested": { "path": "\_index.student\_obj…

---

## [How to sort the indices through it's property in multi Indices approach](https://discuss.elastic.co/t/how-to-sort-the-indices-through-its-property-in-multi-indices-approach/234113)

<div class="topic-metadata">

**Author:** [@Muna](https://discuss.elastic.co/u/Muna)\
**Replies:** 0\
**Last updated:** [May 25, 2020, 9:20am UTC](https://discuss.elastic.co/t/how-to-sort-the-indices-through-its-property-in-multi-indices-approach/234113 "2020-05-25T09:20:39Z")

</div>

Hi, below is my query multi Indices approach. here i want to sort the 'abc\_class' by it's "classId" . tried applying sort at the beginning it's not working. please advise. GET \_all/\_search { "query": { "bool": { "…

---

## [Filter buckets after top\_hits aggregation](https://discuss.elastic.co/t/filter-buckets-after-top-hits-aggregation/231913)

<div class="topic-metadata">

**Author:** [@ajonat](https://discuss.elastic.co/u/ajonat)\
**Replies:** 11\
**Last updated:** [May 25, 2020, 9:12am UTC](https://discuss.elastic.co/t/filter-buckets-after-top-hits-aggregation/231913 "2020-05-25T09:12:17Z")

</div>

Hi, I have an index with documents that only have 3 fields: id, timestamp and status. I want to retrieve the newest document for each id, but: if that document's status is equals to "something", then I would like to ig…

---

## [Reindex gets stuck](https://discuss.elastic.co/t/reindex-gets-stuck/234108)

<div class="topic-metadata">

**Author:** [@nayestaran](https://discuss.elastic.co/u/nayestaran)\
**Replies:** 0\
**Last updated:** [May 25, 2020, 8:56am UTC](https://discuss.elastic.co/t/reindex-gets-stuck/234108 "2020-05-25T08:56:44Z")

</div>

Hello Elastic community, Context We have two Elasticsearch clusters with 6 and 3 nodes each. The cluster with 6 nodes is the one we use in production environment and we use the one with 3 nodes for testing purposes. (W…

---

## [Sql's AND like operation in elasticsearch java-api](https://discuss.elastic.co/t/sqls-and-like-operation-in-elasticsearch-java-api/234097)

<div class="topic-metadata">

**Author:** [@rohit.singh3](https://discuss.elastic.co/u/rohit.singh3)\
**Replies:** 1\
**Last updated:** [May 25, 2020, 8:43am UTC](https://discuss.elastic.co/t/sqls-and-like-operation-in-elasticsearch-java-api/234097 "2020-05-25T08:43:32Z")

</div>

can anyone suggest how to write AND like oparation in java

---

## [Show "latest" document, actually a composite of latest seen field values](https://discuss.elastic.co/t/show-latest-document-actually-a-composite-of-latest-seen-field-values/233932)

<div class="topic-metadata">

**Author:** [@J\_C](https://discuss.elastic.co/u/J_C)\
**Replies:** 3\
**Last updated:** [May 25, 2020, 8:08am UTC](https://discuss.elastic.co/t/show-latest-document-actually-a-composite-of-latest-seen-field-values/233932 "2020-05-25T08:08:08Z")

</div>

In an index I have a series of events, but they're usually incomplete. They will all have a "source" and a "timestamp" but different attributes will be present or not. Is there a way to visualize them in Kibana, for eac…

---

## [Painless : Loop through all documents of index](https://discuss.elastic.co/t/painless-loop-through-all-documents-of-index/233302)

<div class="topic-metadata">

**Author:** [@elisavet](https://discuss.elastic.co/u/elisavet)\
**Replies:** 5\
**Last updated:** [May 25, 2020, 8:07am UTC](https://discuss.elastic.co/t/painless-loop-through-all-documents-of-index/233302 "2020-05-25T08:07:26Z")

</div>

Hi! Is there a way to loop through all documents with scripted fields? I want to divide two sums for a given day, and since dividing two aggregated values is impossible, I was thinking if there is a workaround with scr…

---

## [Elastic and Kibana Keystore - upgrading](https://discuss.elastic.co/t/elastic-and-kibana-keystore-upgrading/233897)

<div class="topic-metadata">

**Author:** [@vladtepes](https://discuss.elastic.co/u/vladtepes)\
**Replies:** 1\
**Last updated:** [May 25, 2020, 7:25am UTC](https://discuss.elastic.co/t/elastic-and-kibana-keystore-upgrading/233897 "2020-05-25T07:25:50Z")

</div>

I am looking at securing some string in the elasticsearch.yml and kibana.yml. From what I read in this doc it is possible to create a keystore and then use it to store passwords securely. (for example elasticsearch.passw…

---

## [Unable to run elasticsearch code as ./gradlew :run stalled (Newbie contributor)](https://discuss.elastic.co/t/unable-to-run-elasticsearch-code-as-gradlew-run-stalled-newbie-contributor/234081)

<div class="topic-metadata">

**Author:** [@Priya\_Raut](https://discuss.elastic.co/u/Priya_Raut)\
**Replies:** 1\
**Last updated:** [May 25, 2020, 6:08am UTC](https://discuss.elastic.co/t/unable-to-run-elasticsearch-code-as-gradlew-run-stalled-newbie-contributor/234081 "2020-05-25T06:08:02Z")

</div>

Hi, I am trying to contribute to elasticsearch for the first time. After following instructions from CONTRIBUTING.md, Here's what's done: JAVA\_HOME is set to JDK 14 The project is imported in Intellij 2020.1 Docker …

---

## [Certain question on rollups](https://discuss.elastic.co/t/certain-question-on-rollups/234048)

<div class="topic-metadata">

**Author:** [@Yannis\_Psarras](https://discuss.elastic.co/u/Yannis_Psarras)\
**Replies:** 6\
**Last updated:** [May 25, 2020, 5:55am UTC](https://discuss.elastic.co/t/certain-question-on-rollups/234048 "2020-05-25T05:55:38Z")

</div>

Hey all, I have a few questions on rollup jobs. Mind that we are new to ES so please bear with me. 1.I wanted to understand the effect of settings certain index fields to index: false when there are certain rollup jobs…

---

## [Elasticsearch Data Loss in Index in ELK 6.4.2](https://discuss.elastic.co/t/elasticsearch-data-loss-in-index-in-elk-6-4-2/233866)

<div class="topic-metadata">

**Author:** [@Shreyash](https://discuss.elastic.co/u/Shreyash)\
**Replies:** 6\
**Last updated:** [May 25, 2020, 5:06am UTC](https://discuss.elastic.co/t/elasticsearch-data-loss-in-index-in-elk-6-4-2/233866 "2020-05-25T05:06:40Z")

</div>

Hi All, I am using ELK stack 6.4.2 with Microsoft SQL Server. The Elasticsearch, Logstash are running in a Windows Virtual Machine. We have observed that a randomw document which was already index before goes missing fr…

---

## [I have configured ELK for linux](https://discuss.elastic.co/t/i-have-configured-elk-for-linux/233911)

<div class="topic-metadata">

**Author:** [@NISHANT\_KHARAT](https://discuss.elastic.co/u/NISHANT_KHARAT)\
**Replies:** 2\
**Last updated:** [May 25, 2020, 2:44am UTC](https://discuss.elastic.co/t/i-have-configured-elk-for-linux/233911 "2020-05-25T02:44:40Z")

</div>

I have configured ELK (one server for Logstash, One for Elasticsearch and one Kibana)for linux . Can i get the logs from windows also with winlogbeat.

---

## [Question about server specs](https://discuss.elastic.co/t/question-about-server-specs/234006)

<div class="topic-metadata">

**Author:** [@LiL\_Devil](https://discuss.elastic.co/u/LiL_Devil)\
**Replies:** 1\
**Last updated:** [May 25, 2020, 1:08am UTC](https://discuss.elastic.co/t/question-about-server-specs/234006 "2020-05-25T01:08:09Z")

</div>

Hi I built some software for my friend which uses elasticsearch. Whole thing that this program does is that it indexes documents and searches in elasticseach thats it. As it's personal project he can't justify paying mon…

---

## [Elastic cluster performance impact](https://discuss.elastic.co/t/elastic-cluster-performance-impact/234070)

<div class="topic-metadata">

**Author:** [@Velmurugan\_Baskaran](https://discuss.elastic.co/u/Velmurugan_Baskaran)\
**Replies:** 1\
**Last updated:** [May 25, 2020, 12:41am UTC](https://discuss.elastic.co/t/elastic-cluster-performance-impact/234070 "2020-05-25T00:41:45Z")

</div>

Have 5 nodes cluster(each node has 16GB RAM out of which 8GB allocated to Elastic); The cluster has round 80% of analytics data which will be used for various heavy Kibana dashboard (accessed in less frequency) and remai…

---

## [Document with multiple individual GeoPoints](https://discuss.elastic.co/t/document-with-multiple-individual-geopoints/233513)

<div class="topic-metadata">

**Author:** [@khusseini](https://discuss.elastic.co/u/khusseini)\
**Replies:** 3\
**Last updated:** [May 25, 2020, 12:11am UTC](https://discuss.elastic.co/t/document-with-multiple-individual-geopoints/233513 "2020-05-25T00:11:13Z")

</div>

Hello everyone, I have an index of manufacturers each having warehouses in multiple locations. For example manufacturer A has Warehouse Z, X, and Y where X,Z and Y are long and lat coordinates. I was thinking of storin…

---

## [Curator 5.8.1 question // no output on curator logs](https://discuss.elastic.co/t/curator-5-8-1-question-no-output-on-curator-logs/234021)

<div class="topic-metadata">

**Author:** [@Tombal](https://discuss.elastic.co/u/Tombal)\
**Replies:** 1\
**Last updated:** [May 24, 2020, 11:03pm UTC](https://discuss.elastic.co/t/curator-5-8-1-question-no-output-on-curator-logs/234021 "2020-05-24T23:03:14Z")

</div>

Hello elastic team, I have a problem with curator. It just stops without any error or anything after 2 secs. Both tried normal and dryrun no change. I have 3 nodes elastic cluster running on Rhel 7.7 VMs. ELK version …

---

## [Efficient and fault-tolerant way to "merge" two indexes](https://discuss.elastic.co/t/efficient-and-fault-tolerant-way-to-merge-two-indexes/234069)

<div class="topic-metadata">

**Author:** [@gabriel.goncalves](https://discuss.elastic.co/u/gabriel.goncalves)\
**Replies:** 0\
**Last updated:** [May 24, 2020, 9:33pm UTC](https://discuss.elastic.co/t/efficient-and-fault-tolerant-way-to-merge-two-indexes/234069 "2020-05-24T21:33:24Z")

</div>

Hi there. I'd like and efficient and fault tolerant (connection problems, failed operations etc) way to do the following: I need to "merge" two indexes. Lets call them A and B being merged into C; For every entry in A,…

---

## [Help on Rollover (manually forcing the rollover)](https://discuss.elastic.co/t/help-on-rollover-manually-forcing-the-rollover/234002)

<div class="topic-metadata">

**Author:** [@plymouth78](https://discuss.elastic.co/u/plymouth78)\
**Replies:** 3\
**Last updated:** [May 24, 2020, 6:00pm UTC](https://discuss.elastic.co/t/help-on-rollover-manually-forcing-the-rollover/234002 "2020-05-24T18:00:24Z")

</div>

Hello all, we are using rollover index lifecycle management. This way our indices are being rotated once they hit 50GB. From time to time we are in the need to change something in the index design so that we do these c…

---

## [Index sql statements into elasticsearch](https://discuss.elastic.co/t/index-sql-statements-into-elasticsearch/234053)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 5\
**Last updated:** [May 24, 2020, 5:50pm UTC](https://discuss.elastic.co/t/index-sql-statements-into-elasticsearch/234053 "2020-05-24T17:50:34Z")

</div>

Hello I would like to clean sql statements that im indexing into elastic Any recommended method?

---

## [ElasticSearch add more nodes to cluster](https://discuss.elastic.co/t/elasticsearch-add-more-nodes-to-cluster/233542)

<div class="topic-metadata">

**Author:** [@linuks](https://discuss.elastic.co/u/linuks)\
**Replies:** 2\
**Last updated:** [May 24, 2020, 10:44am UTC](https://discuss.elastic.co/t/elasticsearch-add-more-nodes-to-cluster/233542 "2020-05-24T10:44:09Z")

</div>

i have Elasticsearch cluster which contains 3 nodes - node-1 (master-eligible and data node) - node-2 (master-eligible and data node) - node-3 (data node) and in the elasticsearch.yml config i have following line di…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=910)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=912)
