# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=966 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 967 --- ## [Not able to change server.host to 0.0.0.0](https://discuss.elastic.co/t/not-able-to-change-server-host-to-0-0-0-0/226467)
**Author:** [@bikramsingh](https://discuss.elastic.co/u/bikramsingh)\ **Replies:** 2\ **Last updated:** [April 4, 2020, 9:31am UTC](https://discuss.elastic.co/t/not-able-to-change-server-host-to-0-0-0-0/226467 "2020-04-04T09:31:39Z")
I have elasticsearch running on a vm. I am trying to access it outside the vm. when i tired to assign the server.host to either the vm's ip or 0.0.0.0 elasticsearch service doesn't start. any tips? --- ## [\\Java\\jre1.8.0\_241\\bin\\java.exe" -cp "!ES\_CLASSPATH!" "org.elasticsearch.tools.launchers.TempDirectory""\` was unexpected at this time](https://discuss.elastic.co/t/java-jre1-8-0-241-bin-java-exe-cp-es-classpath-org-elasticsearch-tools-launchers-tempdirectory-was-unexpected-at-this-time/226503)
**Author:** [@Abhishek\_Pasupullete](https://discuss.elastic.co/u/Abhishek_Pasupullete)\ **Replies:** 0\ **Last updated:** [April 4, 2020, 9:23am UTC](https://discuss.elastic.co/t/java-jre1-8-0-241-bin-java-exe-cp-es-classpath-org-elasticsearch-tools-launchers-tempdirectory-was-unexpected-at-this-time/226503 "2020-04-04T09:23:32Z")
Hi All, I am getting following error when starting elastic search. \\Java\\jre1.8.0\_241\\bin\\java.exe" -cp "!ES\_CLASSPATH!" "org.elasticsearch.tools.launchers.TempDirectory""\` was unexpected at this time. JAVA\_HOME and … --- ## [For policies that include the rollover action, you must also bootstrap the index with a write alias after creating the index template](https://discuss.elastic.co/t/for-policies-that-include-the-rollover-action-you-must-also-bootstrap-the-index-with-a-write-alias-after-creating-the-index-template/226495)
**Author:** [@Daud\_Ahmed](https://discuss.elastic.co/u/Daud_Ahmed)\ **Replies:** 0\ **Last updated:** [April 4, 2020, 4:01am UTC](https://discuss.elastic.co/t/for-policies-that-include-the-rollover-action-you-must-also-bootstrap-the-index-with-a-write-alias-after-creating-the-index-template/226495 "2020-04-04T04:01:06Z")
I was reading this great article ... https://www.elastic.co/blog/implementing-hot-warm-cold-in-elasticsearch-with-index-lifecycle-management But in this article there is a line as following For policies that include t… --- ## [Terms Aggregration on Array of Strings with repeated values](https://discuss.elastic.co/t/terms-aggregration-on-array-of-strings-with-repeated-values/226490)
**Author:** [@daveisfera](https://discuss.elastic.co/u/daveisfera)\ **Replies:** 0\ **Last updated:** [April 4, 2020, 2:21am UTC](https://discuss.elastic.co/t/terms-aggregration-on-array-of-strings-with-repeated-values/226490 "2020-04-04T02:21:54Z")
As a follow on to this previous post ( https://discuss.elastic.co/t/terms-aggregation-on-array-of-string/195775 ), how can value\_count be used to get the actual count of repeated values in an array? If a value\_count is u… --- ## [Elastic Search Query to fetch data control or special characters](https://discuss.elastic.co/t/elastic-search-query-to-fetch-data-control-or-special-characters/223839)
**Author:** [@MangeshTech](https://discuss.elastic.co/u/MangeshTech)\ **Replies:** 4\ **Last updated:** [April 3, 2020, 10:38pm UTC](https://discuss.elastic.co/t/elastic-search-query-to-fetch-data-control-or-special-characters/223839 "2020-04-03T22:38:58Z")
Trying to search for severity values with special characters in it e.g. "1 - Critical". tried with backslashes to see if I can get the exact results. If I change the query below with "\*2 \\\\- Cri\*", it also returns doc… --- ## [High Level Rest Client client.inces().create(...) is deprecated](https://discuss.elastic.co/t/high-level-rest-client-client-inces-create-is-deprecated/225708)
**Author:** [@Cat](https://discuss.elastic.co/u/Cat)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 7:56pm UTC](https://discuss.elastic.co/t/high-level-rest-client-client-inces-create-is-deprecated/225708 "2020-04-03T19:56:49Z")
what is the replacement method for this? --- ## [Cisco ASA Logging to Elastic Stack](https://discuss.elastic.co/t/cisco-asa-logging-to-elastic-stack/226386)
**Author:** [@msalax](https://discuss.elastic.co/u/msalax)\ **Replies:** 3\ **Last updated:** [April 3, 2020, 7:43pm UTC](https://discuss.elastic.co/t/cisco-asa-logging-to-elastic-stack/226386 "2020-04-03T19:43:56Z")
Hi All, I'm new to elastic stack and have built x2 dedicated logstash servers and a cluster of 3 elasticsearch servers and kibana install on all of them. I'm not sure if that last part is correct but any advise would be… --- ## [Nested flow to flat](https://discuss.elastic.co/t/nested-flow-to-flat/226448)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 0\ **Last updated:** [April 3, 2020, 5:49pm UTC](https://discuss.elastic.co/t/nested-flow-to-flat/226448 "2020-04-03T17:49:58Z")
This is json document that I get from one of the kafka topic. Steps are different and more/less in quantity. { "jobid" : 300872305, "dataflow" : { "phases" : { "SETUP" : { "s… --- ## [How to create a custom analyzer to ignore accents and pt-br stopwords using elasticsearch nest api?](https://discuss.elastic.co/t/how-to-create-a-custom-analyzer-to-ignore-accents-and-pt-br-stopwords-using-elasticsearch-nest-api/223211)
**Author:** [@gutospinelli](https://discuss.elastic.co/u/gutospinelli)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 5:43pm UTC](https://discuss.elastic.co/t/how-to-create-a-custom-analyzer-to-ignore-accents-and-pt-br-stopwords-using-elasticsearch-nest-api/223211 "2020-04-03T17:43:24Z")
Hi community! First of all, consider that I am using a "News" Class (Noticia, in portuguese) that has a string field called "Content" (Conteudo in portuguese) public class Noticia { public string Conteudo { get; set; … --- ## [SQL commands from Tutorial - SQL command skips "type"](https://discuss.elastic.co/t/sql-commands-from-tutorial-sql-command-skips-type/224582)
**Author:** [@debasisc](https://discuss.elastic.co/u/debasisc)\ **Replies:** 8\ **Last updated:** [April 3, 2020, 4:26pm UTC](https://discuss.elastic.co/t/sql-commands-from-tutorial-sql-command-skips-type/224582 "2020-04-03T16:26:26Z")
Although we mention Index (library) and type (book) when inserting records, SQL query only mentions index name. Can you please explain this? Thank you POST /\_sql?format=txt { "query": "SELECT \* FROM library WHERE rele… --- ## [Elasticsearch 6.8.6 pending\_tasks grows after 24 hours](https://discuss.elastic.co/t/elasticsearch-6-8-6-pending-tasks-grows-after-24-hours/226269)
**Author:** [@Chris\_Denneen](https://discuss.elastic.co/u/Chris_Denneen)\ **Replies:** 12\ **Last updated:** [April 3, 2020, 4:06pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-6-pending-tasks-grows-after-24-hours/226269 "2020-04-03T16:06:54Z")
CentOS 7.7 Elasticsearch 6.8.6 OpenJDK Runtime Environment (build 1.8.0\_242-b08) # curl -s localhost:9200/\_cluster/health?pretty { "cluster\_name" : "dev-gi-logging", "status" : "green", "time… --- ## [Join like operation java](https://discuss.elastic.co/t/join-like-operation-java/225717)
**Author:** [@rohit.singh3](https://discuss.elastic.co/u/rohit.singh3)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 4:02pm UTC](https://discuss.elastic.co/t/join-like-operation-java/225717 "2020-04-03T16:02:31Z")
i have two indices employee and organisation, both are linked via a common attribute organisationId. i want to do a search where searchString will be matched with EmpName, EmpDesignation and organisationName, and search … --- ## [Not able to put data in Kibana dev tools, any ideas?](https://discuss.elastic.co/t/not-able-to-put-data-in-kibana-dev-tools-any-ideas/225268)
**Author:** [@vernal](https://discuss.elastic.co/u/vernal)\ **Replies:** 5\ **Last updated:** [April 3, 2020, 3:56pm UTC](https://discuss.elastic.co/t/not-able-to-put-data-in-kibana-dev-tools-any-ideas/225268 "2020-04-03T15:56:54Z")
I installed new Kibana and elasticsearch. Then I typed in the following commands in "dev tools": PUT /ag2\_vehicle\_stats { "mappings": { "doc": { "properties": { "vin": { "type": "keyword" }, "error\_reported": { "type": … --- ## [Set Password and user with Docker-compose](https://discuss.elastic.co/t/set-password-and-user-with-docker-compose/225075)
**Author:** [@Teed](https://discuss.elastic.co/u/Teed)\ **Replies:** 10\ **Last updated:** [April 3, 2020, 3:54pm UTC](https://discuss.elastic.co/t/set-password-and-user-with-docker-compose/225075 "2020-04-03T15:54:26Z")
Good afternoon, I need help with elastic and docker-compose, the point is to add username and password to my elastic database with either kibana or no kibana. I can't figure out how to do it without adding all the cert… --- ## [Connecting to port 9300 running inside a Docker container](https://discuss.elastic.co/t/connecting-to-port-9300-running-inside-a-docker-container/223916)
**Author:** [@calin](https://discuss.elastic.co/u/calin)\ **Replies:** 8\ **Last updated:** [April 3, 2020, 3:48pm UTC](https://discuss.elastic.co/t/connecting-to-port-9300-running-inside-a-docker-container/223916 "2020-04-03T15:48:13Z")
I think I have the same issue as here: But I am not sure how to implement the fix. Elastic (5.4.3) running in Docker, started with docker-compose. The relevant part of the docker-compose is: my-elastic: image: … --- ## [Weird match\_phrase\_prefix search behaviour with french analyzer](https://discuss.elastic.co/t/weird-match-phrase-prefix-search-behaviour-with-french-analyzer/222739)
**Author:** [@rursprung](https://discuss.elastic.co/u/rursprung)\ **Replies:** 7\ **Last updated:** [April 3, 2020, 3:42pm UTC](https://discuss.elastic.co/t/weird-match-phrase-prefix-search-behaviour-with-french-analyzer/222739 "2020-04-03T15:42:04Z")
i noticed a weird search behaviour with the french analyzer (could probably also affect other languages). i have boiled down our example to a minimal PoC, the original index & query were much bigger. our query is used i… --- ## [Work on elasticsearch data](https://discuss.elastic.co/t/work-on-elasticsearch-data/222688)
**Author:** [@Vishkaha](https://discuss.elastic.co/u/Vishkaha)\ **Replies:** 3\ **Last updated:** [April 3, 2020, 3:34pm UTC](https://discuss.elastic.co/t/work-on-elasticsearch-data/222688 "2020-04-03T15:34:15Z")
Dear All, I am working with logstash , by logstash query elastic search got data ad it shows in index of kibana and then I create the visualization. But now I want to apply some calculation or code on data which is com… --- ## [Shared limit](https://discuss.elastic.co/t/shared-limit/222057)
**Author:** [@Amna\_sayed\_ali](https://discuss.elastic.co/u/Amna_sayed_ali)\ **Replies:** 18\ **Last updated:** [April 3, 2020, 3:33pm UTC](https://discuss.elastic.co/t/shared-limit/222057 "2020-04-03T15:33:24Z")
Hi, i got this error when i tried to add some indices in AWS-ES but this cluster currently has \[1992\]/\[2000\] maximum shards open how can i solve this, if i want to keep that ES creates a delay index for each logs --- ## [QueryString to search String with colon](https://discuss.elastic.co/t/querystring-to-search-string-with-colon/226369)
**Author:** [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\ **Replies:** 4\ **Last updated:** [April 3, 2020, 3:20pm UTC](https://discuss.elastic.co/t/querystring-to-search-string-with-colon/226369 "2020-04-03T15:20:28Z")
i am trying to achieve below condition loginId = "z2store" and type = "web" and dateTime = "12:17:08" below query i have written GET /sample/\_search { "bool" : { "must" : \[ { "term" : { "… --- ## [Sorting for date field](https://discuss.elastic.co/t/sorting-for-date-field/226205)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 8\ **Last updated:** [April 3, 2020, 3:14pm UTC](https://discuss.elastic.co/t/sorting-for-date-field/226205 "2020-04-03T15:14:37Z")
Hello, I am using last\_modified\_date field from my index. I am sorting my results using this same field. field data is enabled on this column. but i am not getting correct results for sorting. I want to convert this … --- ## [Moving Elasticsearch 6.2.4 data to Elasticsearch 7.6.1](https://discuss.elastic.co/t/moving-elasticsearch-6-2-4-data-to-elasticsearch-7-6-1/226364)
**Author:** [@TheOne](https://discuss.elastic.co/u/TheOne)\ **Replies:** 6\ **Last updated:** [April 3, 2020, 3:13pm UTC](https://discuss.elastic.co/t/moving-elasticsearch-6-2-4-data-to-elasticsearch-7-6-1/226364 "2020-04-03T15:13:51Z")
Hi, I am trying to copy the data from our old Elasticsearch 6.2.4 to the new elasticsearch 7.6.1 I tried the following methods. Snapshot and restore Re-index from a remote cluster. Both methods seem working but I go… --- ## [Timestamp of When ElasticSearch Receives Data?](https://discuss.elastic.co/t/timestamp-of-when-elasticsearch-receives-data/226408)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 3:12pm UTC](https://discuss.elastic.co/t/timestamp-of-when-elasticsearch-receives-data/226408 "2020-04-03T15:12:44Z")
Hi ELK Gurus, I have a pipeline of Docker containers, ending in an ELK stack of Logstash/Elasticsearch/Kibana. (ELK versions are 7.4.0, I know I need to upgrade.) Data flows into the pipeline from an external source, … --- ## [Doc vs \_doc again](https://discuss.elastic.co/t/doc-vs-doc-again/226417)
**Author:** [@OffColour](https://discuss.elastic.co/u/OffColour)\ **Replies:** 0\ **Last updated:** [April 3, 2020, 2:52pm UTC](https://discuss.elastic.co/t/doc-vs-doc-again/226417 "2020-04-03T14:52:29Z")
Hi, Can we have a single page put together explaining best practice to upgrade to v7.0 with regard to document\_type and "doc" and "\_doc" please? I don't need an explanation of why this is being done as that's already be… --- ## [Metricbeat behind logstash (index and dashboard generation)](https://discuss.elastic.co/t/metricbeat-behind-logstash-index-and-dashboard-generation/226295)
**Author:** [@Trolldemorted](https://discuss.elastic.co/u/Trolldemorted)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 2:36pm UTC](https://discuss.elastic.co/t/metricbeat-behind-logstash-index-and-dashboard-generation/226295 "2020-04-03T14:36:59Z")
Hi, I have several servers with beats which talk to my logstash, and each should go into a separate index: input { beats { port =\> 5044 } } output { elasticsearch { hosts =\> \["http://elasticsearch:9200"\]… --- ## [Predefined boost scores](https://discuss.elastic.co/t/predefined-boost-scores/226353)
**Author:** [@Venkatram\_Akkineni](https://discuss.elastic.co/u/Venkatram_Akkineni)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 2:36pm UTC](https://discuss.elastic.co/t/predefined-boost-scores/226353 "2020-04-03T14:36:36Z")
Hi I found the documentation which says one should use boost queries to enable boosting. But is there a way to specify the boost scores inside the index so that the clients don't have to specify on each call ? --- ## [Unable to start the elastic search in centos 7](https://discuss.elastic.co/t/unable-to-start-the-elastic-search-in-centos-7/226039)
**Author:** [@vikas2](https://discuss.elastic.co/u/vikas2)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 2:27pm UTC](https://discuss.elastic.co/t/unable-to-start-the-elastic-search-in-centos-7/226039 "2020-04-03T14:27:28Z")
Hi Team am setting up Elasticsearch kibana instance to setup Wazuh . I am facing the below error while checking the status of service. Please let me know where I went wrong. I have modified /etc/elasticsearch/elasticse… --- ## [Watcher querying data within indices from the day before](https://discuss.elastic.co/t/watcher-querying-data-within-indices-from-the-day-before/225902)
**Author:** [@13ill13urr](https://discuss.elastic.co/u/13ill13urr)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 2:24pm UTC](https://discuss.elastic.co/t/watcher-querying-data-within-indices-from-the-day-before/225902 "2020-04-03T14:24:55Z")
Hi there, another question from another ES noob. So I've managed to set up a Watch to alert on any successful logins, however, when the Watch executes, it appears to be querying data from the day before, even when I've i… --- ## [Data synchronization between databases](https://discuss.elastic.co/t/data-synchronization-between-databases/226200)
**Author:** [@111310](https://discuss.elastic.co/u/111310)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 2:18pm UTC](https://discuss.elastic.co/t/data-synchronization-between-databases/226200 "2020-04-03T14:18:00Z")
I have a website, the main database is MYSQL, I add a search for entities that are often updated and new ones are added. Elastic as the second DB. Question: how to avoid data inconsistency? some values ​​in mysql, others… --- ## [Ingest pipeline in Update Api](https://discuss.elastic.co/t/ingest-pipeline-in-update-api/226412)
**Author:** [@mattiacareddu](https://discuss.elastic.co/u/mattiacareddu)\ **Replies:** 0\ **Last updated:** [April 3, 2020, 2:11pm UTC](https://discuss.elastic.co/t/ingest-pipeline-in-update-api/226412 "2020-04-03T14:11:12Z")
Hi, I'm trying to use an ingest pipeline in an update api: POST /my\_index/\_update/\_id?pipeline=attachment I find out this issue but it is 4 years old. Is there any update on that after 4 years? I really don't like the… --- ## [Match each token just once against each clause](https://discuss.elastic.co/t/match-each-token-just-once-against-each-clause/226261)
**Author:** [@sgomez](https://discuss.elastic.co/u/sgomez)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 2:10pm UTC](https://discuss.elastic.co/t/match-each-token-just-once-against-each-clause/226261 "2020-04-03T14:10:12Z")
Hi, I have a query that contains 2 different clauses. One for term query and one for prefix query. I want to know if there's a way for each of the tokens of the match field in the document I'm searching, to match just o… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=965) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=967)