# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=915 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 916 --- ## [While using curator for bulk size elasticsearch data. curator throw error](https://discuss.elastic.co/t/while-using-curator-for-bulk-size-elasticsearch-data-curator-throw-error/233286)
**Author:** [@Dragon9](https://discuss.elastic.co/u/Dragon9)\ **Replies:** 3\ **Last updated:** [May 20, 2020, 4:44pm UTC](https://discuss.elastic.co/t/while-using-curator-for-bulk-size-elasticsearch-data-curator-throw-error/233286 "2020-05-20T16:44:15Z")
i am using curator in production . i have total 12 actions in my actions.yml but curator throws exception at action 9 .So the remaining actions are not executed following exception are come. 2020-05-19 07:32:20,257 I… --- ## [How is process.cpu.percent calculated?](https://discuss.elastic.co/t/how-is-process-cpu-percent-calculated/233573)
**Author:** [@jeffzhao](https://discuss.elastic.co/u/jeffzhao)\ **Replies:** 0\ **Last updated:** [May 20, 2020, 4:22pm UTC](https://discuss.elastic.co/t/how-is-process-cpu-percent-calculated/233573 "2020-05-20T16:22:13Z")
Hi, I'm trying to understand the meaning of this metric returned from \_cluster/stats/nodes API. I noticed this number can be greater than 100. So what's the formula for calculating it? --- ## [SAML response state does not have corresponding request id](https://discuss.elastic.co/t/saml-response-state-does-not-have-corresponding-request-id/233372)
**Author:** [@Jesse\_Bye](https://discuss.elastic.co/u/Jesse_Bye)\ **Replies:** 3\ **Last updated:** [May 20, 2020, 4:03pm UTC](https://discuss.elastic.co/t/saml-response-state-does-not-have-corresponding-request-id/233372 "2020-05-20T16:03:58Z")
We have SAML auth configured for 3 of our ES clusters. When SSO'ing to Kibana, we sometimes get a 401 "access token expired" error. Retrying the SSO will give us a different 401, "SAML response state does not have corres… --- ## [Elasticsearch Curator restore only if there are changes](https://discuss.elastic.co/t/elasticsearch-curator-restore-only-if-there-are-changes/233155)
**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\ **Replies:** 8\ **Last updated:** [May 20, 2020, 2:11pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-restore-only-if-there-are-changes/233155 "2020-05-20T14:11:24Z")
Hello, Since restoring the .kibana index requires closing the .kibana index, restoring the .kibana index and then reopening the .kibana index, thus creating downtime in Kibana, I would like Curator to restore the .kiban… --- ## [Compare documents from two indexes](https://discuss.elastic.co/t/compare-documents-from-two-indexes/233448)
**Author:** [@Veer](https://discuss.elastic.co/u/Veer)\ **Replies:** 3\ **Last updated:** [May 20, 2020, 1:22pm UTC](https://discuss.elastic.co/t/compare-documents-from-two-indexes/233448 "2020-05-20T13:22:25Z")
Hello. I'm trying to compare two indexes. Index 1 will have the raw data and I'll use Index 2 to store processed data from Index 1. However, I have noticed that when the records in Index 1 are not in sequential order by … --- ## [Use Copy-to with different delimiters i.e "," , ";" etc](https://discuss.elastic.co/t/use-copy-to-with-different-delimiters-i-e-etc/233494)
**Author:** [@farhanAamir](https://discuss.elastic.co/u/farhanAamir)\ **Replies:** 3\ **Last updated:** [May 20, 2020, 1:12pm UTC](https://discuss.elastic.co/t/use-copy-to-with-different-delimiters-i-e-etc/233494 "2020-05-20T13:12:18Z")
hi, I am trying to concatenate two fields firstName and last name to build a field as fullName. After some R&D I have found copy-to feature in mapping that can help to copy fields to a certain field. But here I am tryin… --- ## [Sum of average metrics](https://discuss.elastic.co/t/sum-of-average-metrics/233534)
**Author:** [@vbohata](https://discuss.elastic.co/u/vbohata)\ **Replies:** 0\ **Last updated:** [May 20, 2020, 12:30pm UTC](https://discuss.elastic.co/t/sum-of-average-metrics/233534 "2020-05-20T12:30:03Z")
I have following data: source | processed\_by\_logstash | rate\_15m filebeat1 | logstash1 | 10 filebeat1 | logstash2 | 20.5 filebeat2 | logstash1 | 20.1 filebeat2 | logs… --- ## [Performance tuning from Kibana to Elastic](https://discuss.elastic.co/t/performance-tuning-from-kibana-to-elastic/233413)
**Author:** [@Velmurugan\_Baskaran](https://discuss.elastic.co/u/Velmurugan_Baskaran)\ **Replies:** 2\ **Last updated:** [May 20, 2020, 11:30am UTC](https://discuss.elastic.co/t/performance-tuning-from-kibana-to-elastic/233413 "2020-05-20T11:30:30Z")
Hello, Have 5 nodes elastic cluster; we have a requirement to give very high priority to the live-applications which are processing the data to Elastic. Kibana takes very low priority; However, sometimes, heavy kibana … --- ## [Migrating multi-type indices to single-type indices](https://discuss.elastic.co/t/migrating-multi-type-indices-to-single-type-indices/233472)
**Author:** [@aninda\_halder](https://discuss.elastic.co/u/aninda_halder)\ **Replies:** 4\ **Last updated:** [May 20, 2020, 11:10am UTC](https://discuss.elastic.co/t/migrating-multi-type-indices-to-single-type-indices/233472 "2020-05-20T11:10:33Z")
We start to use elasticsearch 5.6 couple of years back for our product search . Now we want to switch in a more recent version . As we all know from version 6.0 elasticsearch don't support multi-type indices, we need to… --- ## [Elastic tokenizer customization question](https://discuss.elastic.co/t/elastic-tokenizer-customization-question/233378)
**Author:** [@Attila816](https://discuss.elastic.co/u/Attila816)\ **Replies:** 3\ **Last updated:** [May 20, 2020, 8:48am UTC](https://discuss.elastic.co/t/elastic-tokenizer-customization-question/233378 "2020-05-20T08:48:00Z")
How can I use a tokenizer which is similar to the Word Delimiter Graph Token tokenizer but without using the following rules: • Split tokens at letter case transitions. For example: PowerShot → Power, Shot • Split toke… --- ## [Can someone explain how "analysis" is used on this mapping?](https://discuss.elastic.co/t/can-someone-explain-how-analysis-is-used-on-this-mapping/233503)
**Author:** [@anto\_gian](https://discuss.elastic.co/u/anto_gian)\ **Replies:** 1\ **Last updated:** [May 20, 2020, 10:12am UTC](https://discuss.elastic.co/t/can-someone-explain-how-analysis-is-used-on-this-mapping/233503 "2020-05-20T10:12:31Z")
This is my mapping. I can't understand what is "analysis" under settings object. The filters and analyzers specified under analysis are used against "my-field-id property"? { "my-id" : { "aliases" : { "… --- ## [Logstash and elasticsearch on different machines](https://discuss.elastic.co/t/logstash-and-elasticsearch-on-different-machines/233352)
**Author:** [@persepherone](https://discuss.elastic.co/u/persepherone)\ **Replies:** 2\ **Last updated:** [May 20, 2020, 9:55am UTC](https://discuss.elastic.co/t/logstash-and-elasticsearch-on-different-machines/233352 "2020-05-20T09:55:42Z")
I have logstash and Elastsearch on different machines. When i run Logstash on same machine it works all fine(with 'localhost' in hosts) but when i specify IP address in the Hosts section of Conf file it does not creates … --- ## [IS "Fetch" phase really needed during seach](https://discuss.elastic.co/t/is-fetch-phase-really-needed-during-seach/233461)
**Author:** [@nages](https://discuss.elastic.co/u/nages)\ **Replies:** 7\ **Last updated:** [May 20, 2020, 9:41am UTC](https://discuss.elastic.co/t/is-fetch-phase-really-needed-during-seach/233461 "2020-05-20T09:41:23Z")
This question always comes up during discussions and there is "no" strong answer to say Is "Fetch" phase really needed during search - As we understand , the coordinating node executes the search in two phases - "Query"… --- ## [Filtered Transform aggregations](https://discuss.elastic.co/t/filtered-transform-aggregations/233492)
**Author:** [@Xavier\_Marti\_Bofill](https://discuss.elastic.co/u/Xavier_Marti_Bofill)\ **Replies:** 2\ **Last updated:** [May 20, 2020, 9:37am UTC](https://discuss.elastic.co/t/filtered-transform-aggregations/233492 "2020-05-20T09:37:00Z")
We want to extract the first time an occurrence happened. For now, we use a scripted metric, which works fine: "creation": { "scripted\_metric": { "init\_script": "state.timestamps = \[\]", "map… --- ## [Pulled OpenDistro ELasticsearch image but it is not running from inside a docker](https://discuss.elastic.co/t/pulled-opendistro-elasticsearch-image-but-it-is-not-running-from-inside-a-docker/232863)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 12\ **Last updated:** [May 20, 2020, 8:51am UTC](https://discuss.elastic.co/t/pulled-opendistro-elasticsearch-image-but-it-is-not-running-from-inside-a-docker/232863 "2020-05-20T08:51:16Z")
I am trying to test how open distro's elasticsearch works when I pull its image and run it. But when I do the curl command from inside the conatiner with container's ip, ELasticsearch isnt reachable. Any idea what to do… --- ## [POST data from C++](https://discuss.elastic.co/t/post-data-from-c/233451)
**Author:** [@Anowar](https://discuss.elastic.co/u/Anowar)\ **Replies:** 4\ **Last updated:** [May 20, 2020, 8:43am UTC](https://discuss.elastic.co/t/post-data-from-c/233451 "2020-05-20T08:43:07Z")
POST data from C++ using cURL and executing the cURL command by system(). #include\ #include\ using namespace std; int main() { system("curl -XPOST \\"http://localhos… --- ## [Painless/ Scripted Fields : How to do a group by](https://discuss.elastic.co/t/painless-scripted-fields-how-to-do-a-group-by/233488)
**Author:** [@elisavet](https://discuss.elastic.co/u/elisavet)\ **Replies:** 0\ **Last updated:** [May 20, 2020, 8:25am UTC](https://discuss.elastic.co/t/painless-scripted-fields-how-to-do-a-group-by/233488 "2020-05-20T08:25:37Z")
Hi! I would like to do something like the following using painless: select day,sum(price)/sum(quantity) from data group by day Is it possible? --- ## [Upgrade ELK from 6.3 to 7.6](https://discuss.elastic.co/t/upgrade-elk-from-6-3-to-7-6/233296)
**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\ **Replies:** 2\ **Last updated:** [May 20, 2020, 8:18am UTC](https://discuss.elastic.co/t/upgrade-elk-from-6-3-to-7-6/233296 "2020-05-20T08:18:17Z")
Hi , we are planning to upgrade our ELK cluster from version 6.3 to 7.6 what are the most appropriate approach to do so 1 . without downtime 2. with downtime 3. how to do a backup of 9 nodes cluster before upgrade … --- ## [Use Analyzer on search text](https://discuss.elastic.co/t/use-analyzer-on-search-text/233480)
**Author:** [@Ridma\_Gamage](https://discuss.elastic.co/u/Ridma_Gamage)\ **Replies:** 1\ **Last updated:** [May 20, 2020, 8:10am UTC](https://discuss.elastic.co/t/use-analyzer-on-search-text/233480 "2020-05-20T08:10:49Z")
I'm relatively new for elastic search. I have used edge\_ngram analyzer at the index time and It created ngrams like this. (elastic -\> elas,elast,elasti, elastic) { "analysis":{ "analyzer":{ … --- ## [Unable to sync repo in Red Hat Satellite](https://discuss.elastic.co/t/unable-to-sync-repo-in-red-hat-satellite/233092)
**Author:** [@Morrisong](https://discuss.elastic.co/u/Morrisong)\ **Replies:** 3\ **Last updated:** [May 20, 2020, 7:54am UTC](https://discuss.elastic.co/t/unable-to-sync-repo-in-red-hat-satellite/233092 "2020-05-20T07:54:47Z")
Hi, I wasn't sure where to post this. I'm new to elastic and I'm a bit stuck. I'm unable to sync the repository at https://artifacts.elastic.co/packages/7.x/yum to the channel our Satellite 5 server. There seems to be … --- ## [Snapshot retention with GCS repository](https://discuss.elastic.co/t/snapshot-retention-with-gcs-repository/233369)
**Author:** [@sjoeboo](https://discuss.elastic.co/u/sjoeboo)\ **Replies:** 1\ **Last updated:** [May 20, 2020, 7:26am UTC](https://discuss.elastic.co/t/snapshot-retention-with-gcs-repository/233369 "2020-05-20T07:26:14Z")
So I'm setting up snapshots and will be use GCS as my repository. I'd like to use the build in retention settings in GCS to automatically remove old snapshot data, instead of managing the rotation (removal) of old snapsh… --- ## [Strictness of strict\_date\_optional\_time date format in 7.0.0](https://discuss.elastic.co/t/strictness-of-strict-date-optional-time-date-format-in-7-0-0/233467)
**Author:** [@Mayank\_Srivastava](https://discuss.elastic.co/u/Mayank_Srivastava)\ **Replies:** 3\ **Last updated:** [May 20, 2020, 6:43am UTC](https://discuss.elastic.co/t/strictness-of-strict-date-optional-time-date-format-in-7-0-0/233467 "2020-05-20T06:43:58Z")
hi , How can we fix https://github.com/elastic/elasticsearch/issues/41927 issue in elastic search 7.0.1 version . --- ## [Copy multiple fields from Transform to entity](https://discuss.elastic.co/t/copy-multiple-fields-from-transform-to-entity/233410)
**Author:** [@xbeumala](https://discuss.elastic.co/u/xbeumala)\ **Replies:** 1\ **Last updated:** [May 20, 2020, 6:05am UTC](https://discuss.elastic.co/t/copy-multiple-fields-from-transform-to-entity/233410 "2020-05-20T06:05:36Z")
Hi all, I have an analytics system and for every user action I log an event. The document contains event specific fields but also session level properties. I've created a transform to create a user centric entity. on t… --- ## [Elasticsearch how to save user and it's tweets](https://discuss.elastic.co/t/elasticsearch-how-to-save-user-and-its-tweets/233177)
**Author:** [@Rinku\_Budania](https://discuss.elastic.co/u/Rinku_Budania)\ **Replies:** 6\ **Last updated:** [May 20, 2020, 5:00am UTC](https://discuss.elastic.co/t/elasticsearch-how-to-save-user-and-its-tweets/233177 "2020-05-20T05:00:08Z")
--- ## [Too many small segments getting created](https://discuss.elastic.co/t/too-many-small-segments-getting-created/233433)
**Author:** [@ravitandur](https://discuss.elastic.co/u/ravitandur)\ **Replies:** 2\ **Last updated:** [May 20, 2020, 4:39am UTC](https://discuss.elastic.co/t/too-many-small-segments-getting-created/233433 "2020-05-20T04:39:40Z")
We are using most of the default settings and increased the refresh interval to 30 sec. We are observing too many small segments are getting created. Can you please let us know what might be issue for creating too many … --- ## [High CPU on Data Nodes](https://discuss.elastic.co/t/high-cpu-on-data-nodes/233450)
**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\ **Replies:** 2\ **Last updated:** [May 20, 2020, 4:24am UTC](https://discuss.elastic.co/t/high-cpu-on-data-nodes/233450 "2020-05-20T04:24:56Z")
Hi All, Running 7.6.2 on elastic cloud and observing increasing CPU over time on our cluster. Some background to our configuration: 2x Nodes x 2 Zone 58GB Data Nodes. 1x Nodes x 2 Zone 8GB ML Nodes 3x Master Nodes a… --- ## [Can't install elastic as a windows service](https://discuss.elastic.co/t/cant-install-elastic-as-a-windows-service/233131)
**Author:** [@Mahdieh\_Hosseini](https://discuss.elastic.co/u/Mahdieh_Hosseini)\ **Replies:** 3\ **Last updated:** [May 20, 2020, 2:52am UTC](https://discuss.elastic.co/t/cant-install-elastic-as-a-windows-service/233131 "2020-05-20T02:52:27Z")
I'm trying to install ElasticSearch 7.7.0 on my windows server 2016 64bit. First I downloaded the zip version, running elasticsearch.bat from CMD, everything is ok. Then I create a service using this instruction. It cre… --- ## [Can't start service it stops (7.7.0)](https://discuss.elastic.co/t/cant-start-service-it-stops-7-7-0/233231)
**Author:** [@Burak\_Tarim](https://discuss.elastic.co/u/Burak_Tarim)\ **Replies:** 2\ **Last updated:** [May 20, 2020, 1:41am UTC](https://discuss.elastic.co/t/cant-start-service-it-stops-7-7-0/233231 "2020-05-20T01:41:43Z")
I installed it with msi. When i try to start the service it stops immediately... By the way 7.6.2 works perfectly. This is the error text on event logs; Elastic.ProcessHosts.Process.StartupException: Could not evaluat… --- ## [Snaphost with closed indices](https://discuss.elastic.co/t/snaphost-with-closed-indices/233421)
**Author:** [@khzied](https://discuss.elastic.co/u/khzied)\ **Replies:** 2\ **Last updated:** [May 20, 2020, 12:01am UTC](https://discuss.elastic.co/t/snaphost-with-closed-indices/233421 "2020-05-20T00:01:55Z")
hello, If I close indices to reduce the number of shards, the process of the creation of snaphot continue without problem? BR --- ## [Using multi search via curl to export data from ES](https://discuss.elastic.co/t/using-multi-search-via-curl-to-export-data-from-es/233425)
**Author:** [@t3fsx](https://discuss.elastic.co/u/t3fsx)\ **Replies:** 0\ **Last updated:** [May 19, 2020, 11:56pm UTC](https://discuss.elastic.co/t/using-multi-search-via-curl-to-export-data-from-es/233425 "2020-05-19T23:56:47Z")
I've been looking at the documentation for multisearch API with the objective of exporting specific values of a field in Elasticsearch with for a given time period. It might be that I'm not used to interacting with the … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=914) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=916)