# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=960

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 961

---

## [Email alerts for built-in Watchers](https://discuss.elastic.co/t/email-alerts-for-built-in-watchers/227187)

<div class="topic-metadata">

**Author:** [@wpitt13](https://discuss.elastic.co/u/wpitt13)\
**Replies:** 3\
**Last updated:** [April 10, 2020, 4:51am UTC](https://discuss.elastic.co/t/email-alerts-for-built-in-watchers/227187 "2020-04-10T04:51:16Z")

</div>

Where do you set up the default email address for the built-in watchers? I've tried setting the " Admin email" setting within Kibana -\> Management -\> Advanced Settings but I am still not getting the email alerts. Custom …

---

## [Initializing elasticsearch db](https://discuss.elastic.co/t/initializing-elasticsearch-db/227391)

<div class="topic-metadata">

**Author:** [@Paul\_Stevens](https://discuss.elastic.co/u/Paul_Stevens)\
**Replies:** 2\
**Last updated:** [April 10, 2020, 4:19am UTC](https://discuss.elastic.co/t/initializing-elasticsearch-db/227391 "2020-04-10T04:19:04Z")

</div>

Openstack running VM(s) running 'Red Hat Enterprise Linux Server release 7.7 (Maipo)' elasticsearch-oss:6.8.2 Kibana was the first clue things were bad. This is lab. I would be happy to initialize database and loose a…

---

## [ELK cluster installation on 3 nodes + 1 node for Kibana only](https://discuss.elastic.co/t/elk-cluster-installation-on-3-nodes-1-node-for-kibana-only/226966)

<div class="topic-metadata">

**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Replies:** 2\
**Last updated:** [April 10, 2020, 3:59am UTC](https://discuss.elastic.co/t/elk-cluster-installation-on-3-nodes-1-node-for-kibana-only/226966 "2020-04-10T03:59:53Z")

</div>

Dears, I need your help and opinions in my case. I've got a request for installation ELK Cluster in such configuration: 3 x nodes for Elasticsearch, each node will be master/data/ingest node, on each node will be inst…

---

## [Index document count is 0 after reindexing](https://discuss.elastic.co/t/index-document-count-is-0-after-reindexing/227199)

<div class="topic-metadata">

**Author:** [@achang77](https://discuss.elastic.co/u/achang77)\
**Replies:** 1\
**Last updated:** [April 10, 2020, 3:16am UTC](https://discuss.elastic.co/t/index-document-count-is-0-after-reindexing/227199 "2020-04-10T03:16:25Z")

</div>

I am attempting to validate some reindex from remote operations I am reindexing from a "source" cluster to a "destination" cluster for an index "IndexName" I run the following r = esDest.reindex(body=query, wait\_f…

---

## [Query time increases on a particular index out of many indexes in es](https://discuss.elastic.co/t/query-time-increases-on-a-particular-index-out-of-many-indexes-in-es/227421)

<div class="topic-metadata">

**Author:** [@Mohit\_Ojha](https://discuss.elastic.co/u/Mohit_Ojha)\
**Replies:** 1\
**Last updated:** [April 10, 2020, 12:15am UTC](https://discuss.elastic.co/t/query-time-increases-on-a-particular-index-out-of-many-indexes-in-es/227421 "2020-04-10T00:15:43Z")

</div>

Query time increases on a particular index out of many indexes in es. This happens for 6-7 hours on some random days. The start time always is from 10:30 PM IST(occurs at same time on the day it happens), but there is no…

---

## [For search-as-type scenario with 10 million very simple documents what is the recommended approach](https://discuss.elastic.co/t/for-search-as-type-scenario-with-10-million-very-simple-documents-what-is-the-recommended-approach/227410)

<div class="topic-metadata">

**Author:** [@jimisdrpc](https://discuss.elastic.co/u/jimisdrpc)\
**Replies:** 0\
**Last updated:** [April 9, 2020, 10:11pm UTC](https://discuss.elastic.co/t/for-search-as-type-scenario-with-10-million-very-simple-documents-what-is-the-recommended-approach/227410 "2020-04-09T22:11:57Z")

</div>

I have this requirement: create SEARCH-AS-TYPE solution with Spring and Elasticsearch couple. There will be one 10 million documents on Elasticsearch. Each document is really simple json like {“id”:9999, “FullName”}. Aft…

---

## [Elasticsearch 7.6 TLS/SSl Organization signing certificate](https://discuss.elastic.co/t/elasticsearch-7-6-tls-ssl-organization-signing-certificate/227003)

<div class="topic-metadata">

**Author:** [@Ahmed\_Abdulaleem](https://discuss.elastic.co/u/Ahmed_Abdulaleem)\
**Replies:** 4\
**Last updated:** [April 9, 2020, 9:38pm UTC](https://discuss.elastic.co/t/elasticsearch-7-6-tls-ssl-organization-signing-certificate/227003 "2020-04-09T21:38:20Z")

</div>

Dears, Kindly, I need your support where elastic search 7.6 documentation does not cover using an organization signing certificate . if I use my organization signing certificate does the generated CSR's by certutil…

---

## [Production and Monitoring Cluster with metricbeat](https://discuss.elastic.co/t/production-and-monitoring-cluster-with-metricbeat/227405)

<div class="topic-metadata">

**Author:** [@bcastilho90](https://discuss.elastic.co/u/bcastilho90)\
**Replies:** 0\
**Last updated:** [April 9, 2020, 8:41pm UTC](https://discuss.elastic.co/t/production-and-monitoring-cluster-with-metricbeat/227405 "2020-04-09T20:41:00Z")

</div>

Hi, I'm setting up two elastic search clusters with helm charts. The clusters are up and running fine on Kubernetes. Now I would like to use metricbeat to ship ES metrics from cluster 1 to cluster 2 (monitoring cluste…

---

## [Error while installing elasticsearch license](https://discuss.elastic.co/t/error-while-installing-elasticsearch-license/227222)

<div class="topic-metadata">

**Author:** [@manoj123](https://discuss.elastic.co/u/manoj123)\
**Replies:** 4\
**Last updated:** [April 9, 2020, 7:38pm UTC](https://discuss.elastic.co/t/error-while-installing-elasticsearch-license/227222 "2020-04-09T19:38:38Z")

</div>

Recently I tried to install elastic search license for the version 5.6.8. The error I am seeing is Curl I ran: curl -XPUT -u elastic 'http://es-d3-logs.int.stage.tmocce.com:9200/ …

---

## [Search with \_routing on indices without \_routing](https://discuss.elastic.co/t/search-with-routing-on-indices-without-routing/227366)

<div class="topic-metadata">

**Author:** [@jeffzhao](https://discuss.elastic.co/u/jeffzhao)\
**Replies:** 9\
**Last updated:** [April 9, 2020, 7:38pm UTC](https://discuss.elastic.co/t/search-with-routing-on-indices-without-routing/227366 "2020-04-09T19:38:21Z")

</div>

Hi, We have time-based data in Elasticsearch cluster: one index per month and use alias to join them. So the user only need to search on the index alias. In the past when creating the index for each month, we didn't sp…

---

## [Kibana is unable to start with all shards failed message](https://discuss.elastic.co/t/kibana-is-unable-to-start-with-all-shards-failed-message/227046)

<div class="topic-metadata">

**Author:** [@brb44](https://discuss.elastic.co/u/brb44)\
**Replies:** 5\
**Last updated:** [April 9, 2020, 7:15pm UTC](https://discuss.elastic.co/t/kibana-is-unable-to-start-with-all-shards-failed-message/227046 "2020-04-09T19:15:45Z")

</div>

After encrypting elasticsearch and changing the ALB from HTTP to https for ES and Kibana. I'm getting below error. Also, metricbeat is also in a failed state. kibana: {"type":"error","@timestamp":"2020-04-08T03:33:47Z",…

---

## [I'm not able to start kibana on my web browser but running properly on my terminal](https://discuss.elastic.co/t/im-not-able-to-start-kibana-on-my-web-browser-but-running-properly-on-my-terminal/227394)

<div class="topic-metadata">

**Author:** [@Jyoti\_Singh1](https://discuss.elastic.co/u/Jyoti_Singh1)\
**Replies:** 0\
**Last updated:** [April 9, 2020, 7:06pm UTC](https://discuss.elastic.co/t/im-not-able-to-start-kibana-on-my-web-browser-but-running-properly-on-my-terminal/227394 "2020-04-09T19:06:32Z")

</div>

I have an ubuntu instance on which i have installed elasticsearch. I also installed kibana, but on starting it, it is showing that it is not ready. on doing sudo journalctl --unit kibana i am getting logs as follows: A…

---

## [Index creation on bulk update](https://discuss.elastic.co/t/index-creation-on-bulk-update/227344)

<div class="topic-metadata">

**Author:** [@111313](https://discuss.elastic.co/u/111313)\
**Replies:** 3\
**Last updated:** [April 9, 2020, 4:15pm UTC](https://discuss.elastic.co/t/index-creation-on-bulk-update/227344 "2020-04-09T16:15:49Z")

</div>

Hello. I noticed for operation bulk update, for example POST http://localhost:9200/\_bulk {"update":{"\_id":"1", "\_index" : "index", "\_type": "type"}} {"doc": {"id": "1", "name": "test"}} if index with name "index" do…

---

## [Error with bulk upload & Role permissions](https://discuss.elastic.co/t/error-with-bulk-upload-role-permissions/227363)

<div class="topic-metadata">

**Author:** [@hogbinj](https://discuss.elastic.co/u/hogbinj)\
**Replies:** 1\
**Last updated:** [April 9, 2020, 4:03pm UTC](https://discuss.elastic.co/t/error-with-bulk-upload-role-permissions/227363 "2020-04-09T16:03:22Z")

</div>

I'm trying to bulk upload using a specific user/role and getting an error I don't understand given my configuration. Other than a .yml security file (which I'm not using) I can't work out how to set the specific permiss…

---

## [Unit Test Case for the High Level Rest Client?](https://discuss.elastic.co/t/unit-test-case-for-the-high-level-rest-client/195253)

<div class="topic-metadata">

**Author:** [@Clark\_Wright](https://discuss.elastic.co/u/Clark_Wright)\
**Replies:** 5\
**Last updated:** [April 9, 2020, 3:58pm UTC](https://discuss.elastic.co/t/unit-test-case-for-the-high-level-rest-client/195253 "2020-04-09T15:58:43Z")

</div>

I am in the process of moving our applications search functionality from Elasticsearch 1.x to 7.x, and from the TransportClient to the HighLevelRestClient, while trying to avoid using all the deprecated (or known to bec…

---

## [In memory testing with RestHighLevelClient](https://discuss.elastic.co/t/in-memory-testing-with-resthighlevelclient/106196)

<div class="topic-metadata">

**Author:** [@kieran](https://discuss.elastic.co/u/kieran)\
**Replies:** 6\
**Last updated:** [April 9, 2020, 3:58pm UTC](https://discuss.elastic.co/t/in-memory-testing-with-resthighlevelclient/106196 "2020-04-09T15:58:02Z")

</div>

I'm using elasticsearch 5.6, and the brand new RestHighLevelClient. I know that previously, with the nodebuilder, it was possible to configure elastic to run in-memory for testing (i.e. as part of a unit test after the …

---

## [Not able connect with Rest High Level Client in ESIntegTestCase of ElasticSearch 7.0.0](https://discuss.elastic.co/t/not-able-connect-with-rest-high-level-client-in-esintegtestcase-of-elasticsearch-7-0-0/179307)

<div class="topic-metadata">

**Author:** [@rohitpatil](https://discuss.elastic.co/u/rohitpatil)\
**Replies:** 4\
**Last updated:** [April 9, 2020, 3:57pm UTC](https://discuss.elastic.co/t/not-able-connect-with-rest-high-level-client-in-esintegtestcase-of-elasticsearch-7-0-0/179307 "2020-04-09T15:57:26Z")

</div>

Hello, I have written some integration tests for my project which uses ElasticSearch as database. I was using Rest High Level Client with ElasticSearch version 6.6.0. But recently I upgraded the version to 7.0.0. Now, …

---

## [Authentication Error After Configuring SSL](https://discuss.elastic.co/t/authentication-error-after-configuring-ssl/226979)

<div class="topic-metadata">

**Author:** [@Emre\_Altan](https://discuss.elastic.co/u/Emre_Altan)\
**Replies:** 2\
**Last updated:** [April 9, 2020, 3:28pm UTC](https://discuss.elastic.co/t/authentication-error-after-configuring-ssl/226979 "2020-04-09T15:28:06Z")

</div>

Hi, I'm trying to configure ssl and basic authentication in an Amazon EC2 instance. I've installed the elasticsearch, opened authentication by setting xpack.security.enabled to true, and set a password to built-in users…

---

## [Elasticsearch Timeout issue (Attempted to send a bulk request to elasticsearch)](https://discuss.elastic.co/t/elasticsearch-timeout-issue-attempted-to-send-a-bulk-request-to-elasticsearch/227315)

<div class="topic-metadata">

**Author:** [@Afsal](https://discuss.elastic.co/u/Afsal)\
**Replies:** 1\
**Last updated:** [April 9, 2020, 3:12pm UTC](https://discuss.elastic.co/t/elasticsearch-timeout-issue-attempted-to-send-a-bulk-request-to-elasticsearch/227315 "2020-04-09T15:12:45Z")

</div>

Hi guys, We are using Elasticsearch and Logstash 6.8.2 and we are facing the below issue intermittent in the logstash logs. \[2020-04-05T11:33:06,492\]\[ERROR\]\[logstash.outputs.elasticsearch\] Attempted to send a bulk requ…

---

## [Query to fetch Document if certain nested document does not exists](https://discuss.elastic.co/t/query-to-fetch-document-if-certain-nested-document-does-not-exists/224904)

<div class="topic-metadata">

**Author:** [@farhanAamir](https://discuss.elastic.co/u/farhanAamir)\
**Replies:** 4\
**Last updated:** [April 9, 2020, 2:49pm UTC](https://discuss.elastic.co/t/query-to-fetch-document-if-certain-nested-document-does-not-exists/224904 "2020-04-09T14:49:00Z")

</div>

Hi, I am new to elastic search and got stuck in a scenario. I have document mapping as below: { "mappings": { "customer": { "properties": { "customerEmails": …

---

## [Analyzers and Content Length](https://discuss.elastic.co/t/analyzers-and-content-length/226254)

<div class="topic-metadata">

**Author:** [@mrbarret](https://discuss.elastic.co/u/mrbarret)\
**Replies:** 7\
**Last updated:** [April 9, 2020, 2:42pm UTC](https://discuss.elastic.co/t/analyzers-and-content-length/226254 "2020-04-09T14:42:54Z")

</div>

I have a wonderful little document and index that I use to ingest document. Unfortunately, a few of the documents have long fields and the ingest process fails for those documents. An example document that I have conta…

---

## [Is there a way to rename an ingest pipeline](https://discuss.elastic.co/t/is-there-a-way-to-rename-an-ingest-pipeline/226173)

<div class="topic-metadata">

**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\
**Replies:** 4\
**Last updated:** [April 9, 2020, 2:07pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-rename-an-ingest-pipeline/226173 "2020-04-09T14:07:52Z")

</div>

Hello all, I found nothing on this searching the forum so opening a new topic. I also found nothing suggesting this would be possible in the comprehensive official documentation but I thought I would ask anyway :smiley…

---

## [Aggregation: number of new users over last week](https://discuss.elastic.co/t/aggregation-number-of-new-users-over-last-week/226477)

<div class="topic-metadata">

**Author:** [@smirnov10](https://discuss.elastic.co/u/smirnov10)\
**Replies:** 2\
**Last updated:** [April 9, 2020, 1:38pm UTC](https://discuss.elastic.co/t/aggregation-number-of-new-users-over-last-week/226477 "2020-04-09T13:38:16Z")

</div>

Hi, I read/tried plenty of aggregation examples but I still cannot come up with the complete solution :frowning: I need to display new users over the week (day/month) trend chart. In SQL it may look like this: select …

---

## [WRITE threadpool rejected stats](https://discuss.elastic.co/t/write-threadpool-rejected-stats/227306)

<div class="topic-metadata">

**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\
**Replies:** 2\
**Last updated:** [April 9, 2020, 1:38pm UTC](https://discuss.elastic.co/t/write-threadpool-rejected-stats/227306 "2020-04-09T13:38:15Z")

</div>

Hello all, I'm using Elasticsearch 7.6.1 - I was looking at the indexing stats with the following command: GET /\_cat/thread\_pool/write?v&h=id,name,active,queue,rejected,completed Which gives the following output: id…

---

## [Local query parameter for the GetFieldMapping API](https://discuss.elastic.co/t/local-query-parameter-for-the-getfieldmapping-api/227319)

<div class="topic-metadata">

**Author:** [@yfful](https://discuss.elastic.co/u/yfful)\
**Replies:** 1\
**Last updated:** [April 9, 2020, 1:34pm UTC](https://discuss.elastic.co/t/local-query-parameter-for-the-getfieldmapping-api/227319 "2020-04-09T13:34:25Z")

</div>

Hi, It is possible to pass a boolean query parameter local \[1\] that controls whether or not the master node should be accessed when resolving a field's mapping. Can you clarify how the information differs when that is …

---

## [Is there a way query 2 indx base on their same field?](https://discuss.elastic.co/t/is-there-a-way-query-2-indx-base-on-their-same-field/227330)

<div class="topic-metadata">

**Author:** [@bainan19820202](https://discuss.elastic.co/u/bainan19820202)\
**Replies:** 0\
**Last updated:** [April 9, 2020, 1:27pm UTC](https://discuss.elastic.co/t/is-there-a-way-query-2-indx-base-on-their-same-field/227330 "2020-04-09T13:27:20Z")

</div>

for example index 1 has field A error\_code:value B error\_group:value index 2 was imported from a csv file which includes the explanation for those error logs so what I want to achieve is based on the index1 ' error …

---

## [Is it possible for two or more different es instances accessing/searching the same cross cluster search remotes?](https://discuss.elastic.co/t/is-it-possible-for-two-or-more-different-es-instances-accessing-searching-the-same-cross-cluster-search-remotes/227148)

<div class="topic-metadata">

**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\
**Replies:** 2\
**Last updated:** [April 9, 2020, 12:19pm UTC](https://discuss.elastic.co/t/is-it-possible-for-two-or-more-different-es-instances-accessing-searching-the-same-cross-cluster-search-remotes/227148 "2020-04-09T12:19:30Z")

</div>

Hi All, Is it possible to have two or more different es instances (local clusters) accessing the same set of remote clusters? E.g. es\_a -\> es\_b, es\_c, es\_d, es\_e, es\_f and in the same time es\_a1 -\> es\_b, es\_c, es\_d,…

---

## [Optimised Keep Alive Time for Scroll API](https://discuss.elastic.co/t/optimised-keep-alive-time-for-scroll-api/227284)

<div class="topic-metadata">

**Author:** [@Ulpcan](https://discuss.elastic.co/u/Ulpcan)\
**Replies:** 4\
**Last updated:** [April 9, 2020, 10:14am UTC](https://discuss.elastic.co/t/optimised-keep-alive-time-for-scroll-api/227284 "2020-04-09T10:14:12Z")

</div>

Hello, I want export my documents using Scroll API or search after request but I can't decide which one should I use. First of all, I have 2 different index. First one is constant, I mean index document size is constan…

---

## [How to add new item inside Array in elastic search?](https://discuss.elastic.co/t/how-to-add-new-item-inside-array-in-elastic-search/227057)

<div class="topic-metadata">

**Author:** [@Pankaj\_Jadhav](https://discuss.elastic.co/u/Pankaj_Jadhav)\
**Replies:** 6\
**Last updated:** [April 9, 2020, 9:54am UTC](https://discuss.elastic.co/t/how-to-add-new-item-inside-array-in-elastic-search/227057 "2020-04-09T09:54:52Z")

</div>

Hi Guys, I am new in Elastic Search, I want to add new object inside JArray, How I can achive this? "OrgDetailsLst" : \[ { "EntityId" : 3, "EntityDetailCode" : 0, "EntityName" : "PlantCode", "EntityCode" : "DRES", …

---

## [How to create an index\_2 containing Index\_1's aggregations results?](https://discuss.elastic.co/t/how-to-create-an-index-2-containing-index-1s-aggregations-results/227285)

<div class="topic-metadata">

**Author:** [@oula\_oula](https://discuss.elastic.co/u/oula_oula)\
**Replies:** 0\
**Last updated:** [April 9, 2020, 9:14am UTC](https://discuss.elastic.co/t/how-to-create-an-index-2-containing-index-1s-aggregations-results/227285 "2020-04-09T09:14:28Z")

</div>

How to create an index\_2 containing Index\_1's aggregations results as fields ? Is it possible to use a command like this on kibana dev tools ? PUT /index\_2/doc\_aggs\_results\_of\_index1 { field\_aggs1: ... field\_aggs2: …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=959)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=961)
