# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=999

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1000

---

## [Email sending failed on my watcher alert](https://discuss.elastic.co/t/email-sending-failed-on-my-watcher-alert/221501)

<div class="topic-metadata">

**Author:** [@mark.quilates](https://discuss.elastic.co/u/mark.quilates)\
**Replies:** 6\
**Last updated:** [March 3, 2020, 1:46pm UTC](https://discuss.elastic.co/t/email-sending-failed-on-my-watcher-alert/221501 "2020-03-03T13:46:24Z")

</div>

Hi, I have configured my watcher in my ELK stack 7.6.0 installed that in my Ubuntu 18.04 LTS. my elasticsearch.yml config. xpack.watcher.enabled: true xpack.notification.email.account: gmail\_account: prof…

---

## [Elasticsearch service getting aborted](https://discuss.elastic.co/t/elasticsearch-service-getting-aborted/221857)

<div class="topic-metadata">

**Author:** [@Ihjaz](https://discuss.elastic.co/u/Ihjaz)\
**Replies:** 2\
**Last updated:** [March 3, 2020, 1:31pm UTC](https://discuss.elastic.co/t/elasticsearch-service-getting-aborted/221857 "2020-03-03T13:31:42Z")

</div>

Hi, I'm running Elasticsearch 6.2.2 on Rhel 7.6 and Java openjdk 1.8.0\_242. When the Elasticsearch is started, it keeps getting aborted with the following error: Mar 03 16:07:15 barnda044 systemd\[1\]: Started Elasticse…

---

## [Error: 'tuple' object is not callable](https://discuss.elastic.co/t/error-tuple-object-is-not-callable/220952)

<div class="topic-metadata">

**Author:** [@Ramazan\_dd](https://discuss.elastic.co/u/Ramazan_dd)\
**Replies:** 1\
**Last updated:** [March 3, 2020, 1:19pm UTC](https://discuss.elastic.co/t/error-tuple-object-is-not-callable/220952 "2020-03-03T13:19:06Z")

</div>

Hello I run this FROM python:3.6-alpine COPY ./config /config RUN pip install elasticsearch-curator==5.8.0 &&\\ pip install elasticsearch==7.0.4 &&\\ rm -rf /var/cache/apk/\* CMD curator --config /config/confi…

---

## [Looking for a Consultant to Write ES Plugin](https://discuss.elastic.co/t/looking-for-a-consultant-to-write-es-plugin/221887)

<div class="topic-metadata">

**Author:** [@TigerMae](https://discuss.elastic.co/u/TigerMae)\
**Replies:** 0\
**Last updated:** [March 3, 2020, 1:02pm UTC](https://discuss.elastic.co/t/looking-for-a-consultant-to-write-es-plugin/221887 "2020-03-03T13:02:16Z")

</div>

IntraHealth International seeks a Technical Expert to write ES plugins. If interested, please see the two Activities listed below: Activity #1 - Upgrade this entity resolution plugin from ES version 2.2 to ES version 7.…

---

## [Using bulk index](https://discuss.elastic.co/t/using-bulk-index/221246)

<div class="topic-metadata">

**Author:** [@Alder](https://discuss.elastic.co/u/Alder)\
**Replies:** 4\
**Last updated:** [March 3, 2020, 12:37pm UTC](https://discuss.elastic.co/t/using-bulk-index/221246 "2020-03-03T12:37:58Z")

</div>

Hello everyone! I'm trying to index multiple documents using bulk with c#. Elastic version 7.5.1 Nest version 7.5.1 First I make a query excluding some fields, this query retun 1937 doc's. The response to the query …

---

## [Script with input from one particular bucket, or from a higher level aggregation](https://discuss.elastic.co/t/script-with-input-from-one-particular-bucket-or-from-a-higher-level-aggregation/221880)

<div class="topic-metadata">

**Author:** [@rad](https://discuss.elastic.co/u/rad)\
**Replies:** 0\
**Last updated:** [March 3, 2020, 12:17pm UTC](https://discuss.elastic.co/t/script-with-input-from-one-particular-bucket-or-from-a-higher-level-aggregation/221880 "2020-03-03T12:17:05Z")

</div>

I want to compare the daily average of a metric (the frequency of words appearing in texts) to the value of a specific day. This is during a week. My goal is to check whether there's a spike. If the last day is way highe…

---

## [Change one element array to structure](https://discuss.elastic.co/t/change-one-element-array-to-structure/221878)

<div class="topic-metadata">

**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\
**Replies:** 0\
**Last updated:** [March 3, 2020, 12:06pm UTC](https://discuss.elastic.co/t/change-one-element-array-to-structure/221878 "2020-03-03T12:06:29Z")

</div>

I am using Elasticsearch 6.5. In one of the indexes in the documents, there is a field, that should always be a structure. Because of error in the loading scripts for some of the documents data in this field was insert…

---

## [Different sorting aggregation results for slightly different queries](https://discuss.elastic.co/t/different-sorting-aggregation-results-for-slightly-different-queries/221873)

<div class="topic-metadata">

**Author:** [@fungus](https://discuss.elastic.co/u/fungus)\
**Replies:** 0\
**Last updated:** [March 3, 2020, 11:27am UTC](https://discuss.elastic.co/t/different-sorting-aggregation-results-for-slightly-different-queries/221873 "2020-03-03T11:27:02Z")

</div>

I have to split documents in index based on field values, and then calculate sum of other field's value in each bucket, and sort by buckets by this resulting sum. I came up with two approaches to solve this: { "size"…

---

## [Create ILM policy for monthly index](https://discuss.elastic.co/t/create-ilm-policy-for-monthly-index/221869)

<div class="topic-metadata">

**Author:** [@shadu88](https://discuss.elastic.co/u/shadu88)\
**Replies:** 0\
**Last updated:** [March 3, 2020, 11:21am UTC](https://discuss.elastic.co/t/create-ilm-policy-for-monthly-index/221869 "2020-03-03T11:21:43Z")

</div>

Hello there, In my setup i'm creating indices month on month EG. \<indexname202001, indexname202002 and indexname202003\>. I want to set ILM policy for below scenario. set ILM based on age Anything \>30 days move to warm …

---

## [During writing data to Elasticsearch I get "object mapping for \[fields.args\] tried to parse field \[null\] as object, but found a concrete value"](https://discuss.elastic.co/t/during-writing-data-to-elasticsearch-i-get-object-mapping-for-fields-args-tried-to-parse-field-null-as-object-but-found-a-concrete-value/221863)

<div class="topic-metadata">

**Author:** [@George\_Wainwright](https://discuss.elastic.co/u/George_Wainwright)\
**Replies:** 0\
**Last updated:** [March 3, 2020, 11:03am UTC](https://discuss.elastic.co/t/during-writing-data-to-elasticsearch-i-get-object-mapping-for-fields-args-tried-to-parse-field-null-as-object-but-found-a-concrete-value/221863 "2020-03-03T11:03:25Z")

</div>

I have the next Warning message when logstash tries to push data to Elasticsearch: object mapping for \[fields.args\] tried to parse field \[null\] as object, but found a concrete value I've noticed that in logs fields.arg…

---

## [SLM indices list does not support date math format?](https://discuss.elastic.co/t/slm-indices-list-does-not-support-date-math-format/221697)

<div class="topic-metadata">

**Author:** [@josejfb](https://discuss.elastic.co/u/josejfb)\
**Replies:** 0\
**Last updated:** [March 2, 2020, 2:16pm UTC](https://discuss.elastic.co/t/slm-indices-list-does-not-support-date-math-format/221697 "2020-03-02T14:16:42Z")

</div>

Hello. In my Elasticsearch setup (7.5.2) we have daily indices named myindex-2020.03.01, myindex-2020.03.02, .... I'm trying to setup a SLM policy that runs everyday and includes all indices for the past month. For that…

---

## [Grok pattern with special character (2)](https://discuss.elastic.co/t/grok-pattern-with-special-character-2/221846)

<div class="topic-metadata">

**Author:** [@Cuju](https://discuss.elastic.co/u/Cuju)\
**Replies:** 1\
**Last updated:** [March 3, 2020, 10:54am UTC](https://discuss.elastic.co/t/grok-pattern-with-special-character-2/221846 "2020-03-03T10:54:03Z")

</div>

Hello, I recreate the post because I think I have done something wrong with the first one. It's actually a question but I didn't manage to get the answer : I would like to create a grok but in the field I parse, someti…

---

## [Cat api indices understanding](https://discuss.elastic.co/t/cat-api-indices-understanding/221829)

<div class="topic-metadata">

**Author:** [@granier](https://discuss.elastic.co/u/granier)\
**Replies:** 4\
**Last updated:** [March 3, 2020, 10:14am UTC](https://discuss.elastic.co/t/cat-api-indices-understanding/221829 "2020-03-03T10:14:29Z")

</div>

Hi, I used the cat api to get information about our indices : GET http://localhost:9200/\_cat/indices?v. We change our mapping and this impacts the indices store sizes and i try to figure the size increases. I am not s…

---

## [Leaderboard with player ranking. Calculating player position](https://discuss.elastic.co/t/leaderboard-with-player-ranking-calculating-player-position/221725)

<div class="topic-metadata">

**Author:** [@sblon](https://discuss.elastic.co/u/sblon)\
**Replies:** 0\
**Last updated:** [March 2, 2020, 4:15pm UTC](https://discuss.elastic.co/t/leaderboard-with-player-ranking-calculating-player-position/221725 "2020-03-02T16:15:28Z")

</div>

Im trying to find the best solution to implement leaderboard by Elasticsearch. I store the next date in elastic: playerId, challengeId and score. Now I wanna add "position" column (based on score) but could not find th…

---

## [ElasticSearch How to sort by document/field weight?](https://discuss.elastic.co/t/elasticsearch-how-to-sort-by-document-field-weight/221834)

<div class="topic-metadata">

**Author:** [@aniruddha.raje](https://discuss.elastic.co/u/aniruddha.raje)\
**Replies:** 0\
**Last updated:** [March 3, 2020, 8:41am UTC](https://discuss.elastic.co/t/elasticsearch-how-to-sort-by-document-field-weight/221834 "2020-03-03T08:41:53Z")

</div>

I am trying to query and sort the search results by the weights of the documents, I used the following queries to create and query the data, ElasticSearch version: 7.6, Kibana Version: 7.2 DELETE movies PUT movi…

---

## [Service Unavailable for \[audit\]beat](https://discuss.elastic.co/t/service-unavailable-for-audit-beat/221398)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 1\
**Last updated:** [March 3, 2020, 7:52am UTC](https://discuss.elastic.co/t/service-unavailable-for-audit-beat/221398 "2020-03-03T07:52:45Z")

</div>

Attempting to install an audibeat on a Linux End Point - EP. But it eludes me why it fails to output to my cluster. 2020-02-28T11:07:55.196+0100 DEBUG \[elasticsearch\] elasticsearch/client.go:737 Ping request failed with…

---

## [Confusions about how globlal checkpoint advances in es 7.6](https://discuss.elastic.co/t/confusions-about-how-globlal-checkpoint-advances-in-es-7-6/221698)

<div class="topic-metadata">

**Author:** [@iamorchid](https://discuss.elastic.co/u/iamorchid)\
**Replies:** 8\
**Last updated:** [March 3, 2020, 7:47am UTC](https://discuss.elastic.co/t/confusions-about-how-globlal-checkpoint-advances-in-es-7-6/221698 "2020-03-03T07:47:19Z")

</div>

In es 7.6, I see that we introduced persisted local checkpoint and processed local checkpoint. After each update replication, replicas return their persisted local checkpoint to primary shard. And based on these checkpoi…

---

## [ElasticSearch NEST - all fields are NULL](https://discuss.elastic.co/t/elasticsearch-nest-all-fields-are-null/221754)

<div class="topic-metadata">

**Author:** [@Julius\_Kukonenko](https://discuss.elastic.co/u/Julius_Kukonenko)\
**Replies:** 2\
**Last updated:** [March 3, 2020, 7:43am UTC](https://discuss.elastic.co/t/elasticsearch-nest-all-fields-are-null/221754 "2020-03-03T07:43:37Z")

</div>

I'm trying to retrieve data from elastic search with NEST. Everything would be good, but NEST all fields return null. However, in debug mode I see that it counts the documents correctly but not showing the value of field…

---

## [Elasticsearch 7.5 unable to retrieve complete result set](https://discuss.elastic.co/t/elasticsearch-7-5-unable-to-retrieve-complete-result-set/221819)

<div class="topic-metadata">

**Author:** [@Vismay\_Shah](https://discuss.elastic.co/u/Vismay_Shah)\
**Replies:** 0\
**Last updated:** [March 3, 2020, 7:13am UTC](https://discuss.elastic.co/t/elasticsearch-7-5-unable-to-retrieve-complete-result-set/221819 "2020-03-03T07:13:32Z")

</div>

Hello, I have imported 0.7 million records in elasticsearch using logstash , find below the mapping details. \< { "mappings":{ "properties":{ "date\_time": { "type": "date", "format": "yyyyMMddHHmmss", "index": fal…

---

## [Index should be re-indexed while being sent from Streamsets. How can i make this automatically?](https://discuss.elastic.co/t/index-should-be-re-indexed-while-being-sent-from-streamsets-how-can-i-make-this-automatically/221795)

<div class="topic-metadata">

**Author:** [@Jangunee](https://discuss.elastic.co/u/Jangunee)\
**Replies:** 7\
**Last updated:** [March 3, 2020, 7:10am UTC](https://discuss.elastic.co/t/index-should-be-re-indexed-while-being-sent-from-streamsets-how-can-i-make-this-automatically/221795 "2020-03-03T07:10:20Z")

</div>

Hi , I'm using 6.4 with Streamsets. Data exported and transported from DB to ES by Streamsets with hourly base. Since my index in ES is set up with nori-tokenizer which cannot be set in Streamsets, reindexing in ES proc…

---

## [Latest full document in transform](https://discuss.elastic.co/t/latest-full-document-in-transform/221435)

<div class="topic-metadata">

**Author:** [@Reshad](https://discuss.elastic.co/u/Reshad)\
**Replies:** 4\
**Last updated:** [March 3, 2020, 4:10am UTC](https://discuss.elastic.co/t/latest-full-document-in-transform/221435 "2020-03-03T04:10:44Z")

</div>

Hi, I am using elasticsearch, kibana and metricbeat to gather metrics from my systems. I want to build a few Data Table visualisation that have a list of: hosts that are currently at more than 80% RAM hosts that curre…

---

## [Elasticsearch 7 Slower Indexing than 6](https://discuss.elastic.co/t/elasticsearch-7-slower-indexing-than-6/221794)

<div class="topic-metadata">

**Author:** [@Brent\_Farrell](https://discuss.elastic.co/u/Brent_Farrell)\
**Replies:** 0\
**Last updated:** [March 3, 2020, 1:23am UTC](https://discuss.elastic.co/t/elasticsearch-7-slower-indexing-than-6/221794 "2020-03-03T01:23:30Z")

</div>

We have been testing Elasticsearch 7.4.0 and comparing it to our previous deployment of Elasticsearch 6.4.3. I have tried running both versions on a Mac and the indexing workload takes about 30% longer with Elasticsearc…

---

## [Video: How To Install Elasticsearch and Kibana on Ubuntu Linux](https://discuss.elastic.co/t/video-how-to-install-elasticsearch-and-kibana-on-ubuntu-linux/221786)

<div class="topic-metadata">

**Author:** [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Replies:** 0\
**Last updated:** [March 2, 2020, 11:44pm UTC](https://discuss.elastic.co/t/video-how-to-install-elasticsearch-and-kibana-on-ubuntu-linux/221786 "2020-03-02T23:44:03Z")

</div>

The Elastic Stack is a great platform for various data analytics use-cases. But how do you get started? This video goes beyond a simple default installation of Elasticsearch and Kibana. It discusses real-world best pract…

---

## [Indexing plain text files](https://discuss.elastic.co/t/indexing-plain-text-files/221745)

<div class="topic-metadata">

**Author:** [@Adspectus](https://discuss.elastic.co/u/Adspectus)\
**Replies:** 3\
**Last updated:** [March 2, 2020, 11:37pm UTC](https://discuss.elastic.co/t/indexing-plain-text-files/221745 "2020-03-02T23:37:40Z")

</div>

Hello, just installed Elasticsearch as a full text engine for my nextcloud installation. I noticed that plain text files such as .txt or .tex (LaTeX source code) are not getting indexed - or at least a search for text sh…

---

## [Help to choose hardware](https://discuss.elastic.co/t/help-to-choose-hardware/221775)

<div class="topic-metadata">

**Author:** [@yann9602](https://discuss.elastic.co/u/yann9602)\
**Replies:** 1\
**Last updated:** [March 2, 2020, 11:35pm UTC](https://discuss.elastic.co/t/help-to-choose-hardware/221775 "2020-03-02T23:35:02Z")

</div>

Hello guys ! I work for a company who used elastic search to serve data to customers. I would like to get help in choosing our elastic search configuration. Our case : We use elastic version 1.5 and no shard. We have…

---

## [Using synonym graph filter VS adding OR clause in search query](https://discuss.elastic.co/t/using-synonym-graph-filter-vs-adding-or-clause-in-search-query/221778)

<div class="topic-metadata">

**Author:** [@Zhang\_Jack](https://discuss.elastic.co/u/Zhang_Jack)\
**Replies:** 0\
**Last updated:** [March 2, 2020, 9:47pm UTC](https://discuss.elastic.co/t/using-synonym-graph-filter-vs-adding-or-clause-in-search-query/221778 "2020-03-02T21:47:49Z")

</div>

Hi, I am wondering is there any difference between using synonym graph filter and construct my search query adding OR clause with synonyms. Eg. as the example described here: https://www.elastic.co/guide/en/elasticsear…

---

## [Watcher threshold rule does not trigger automatically but manual executes fine](https://discuss.elastic.co/t/watcher-threshold-rule-does-not-trigger-automatically-but-manual-executes-fine/220246)

<div class="topic-metadata">

**Author:** [@kaushikrishna](https://discuss.elastic.co/u/kaushikrishna)\
**Replies:** 7\
**Last updated:** [March 2, 2020, 9:40pm UTC](https://discuss.elastic.co/t/watcher-threshold-rule-does-not-trigger-automatically-but-manual-executes-fine/220246 "2020-03-02T21:40:05Z")

</div>

List item Hello, I have just written an advanced watcher rule for threshold alerting (CPU), this rule works fine when I execute the rule using simulate and even sends the alert to slack. However, after saving the rule…

---

## [My Kibana dashboard has Kibana processed time stamp , instead I want source log file time stamp](https://discuss.elastic.co/t/my-kibana-dashboard-has-kibana-processed-time-stamp-instead-i-want-source-log-file-time-stamp/221737)

<div class="topic-metadata">

**Author:** [@pjvijay](https://discuss.elastic.co/u/pjvijay)\
**Replies:** 0\
**Last updated:** [March 2, 2020, 4:48pm UTC](https://discuss.elastic.co/t/my-kibana-dashboard-has-kibana-processed-time-stamp-instead-i-want-source-log-file-time-stamp/221737 "2020-03-02T16:48:34Z")

</div>

Hello All Seems the issue is simple , but struggling from long time. I want to view my Source log time stamp in the Kibana dashboard intead of Kibana processed time . As I want to visualize using Log time stamp and th…

---

## [Too Many Scrolls | Kibana](https://discuss.elastic.co/t/too-many-scrolls-kibana/221557)

<div class="topic-metadata">

**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\
**Replies:** 0\
**Last updated:** [March 1, 2020, 5:10am UTC](https://discuss.elastic.co/t/too-many-scrolls-kibana/221557 "2020-03-01T05:10:45Z")

</div>

Hi all, I keep getting this error message. How I can reproduce the issue: Querying through dev tools Status 500 error will appear ("Internal Service Error") Refresh the page and this error message would appear Refres…

---

## [Migrate from daily indices to ILM rollover with same index pattern?](https://discuss.elastic.co/t/migrate-from-daily-indices-to-ilm-rollover-with-same-index-pattern/221733)

<div class="topic-metadata">

**Author:** [@Dan\_Cohen](https://discuss.elastic.co/u/Dan_Cohen)\
**Replies:** 0\
**Last updated:** [March 2, 2020, 4:34pm UTC](https://discuss.elastic.co/t/migrate-from-daily-indices-to-ilm-rollover-with-same-index-pattern/221733 "2020-03-02T16:34:18Z")

</div>

We have a bunch of daily indices matched by the index pattern lambda-\* e.g. lambda-2020-02-02. We want to start using a size-based ilm rollover policy but we don't want to break our existing visualisations etc. Is it po…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=998)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1000)
