# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1061 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1062 --- ## [Date field saved as default timezone](https://discuss.elastic.co/t/date-field-saved-as-default-timezone/211143)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 9\ **Last updated:** [December 20, 2019, 4:31pm UTC](https://discuss.elastic.co/t/date-field-saved-as-default-timezone/211143 "2019-12-20T16:31:10Z")
I am back at this. I am seating in CST time zone. most all my source are in CST time zone but all my date field is saved in Elasticsearch as GMT time zone. and my kibana (default setup as ) browser timezone is convert… --- ## [Elasticsearch cluser traffic distribution](https://discuss.elastic.co/t/elasticsearch-cluser-traffic-distribution/212676)
**Author:** [@mkalinowski](https://discuss.elastic.co/u/mkalinowski)\ **Replies:** 1\ **Last updated:** [December 20, 2019, 4:28pm UTC](https://discuss.elastic.co/t/elasticsearch-cluser-traffic-distribution/212676 "2019-12-20T16:28:51Z")
Hello, I have a performance question. Suppose we have three elasticsearch nodes. The number of logstash is X :wink: Is it possible to configure the cluster in such a way that traffic from these logstash is distributed… --- ## [Elastic cluster slow down afre a few weeks of uptime(cluster recommendations)](https://discuss.elastic.co/t/elastic-cluster-slow-down-afre-a-few-weeks-of-uptime-cluster-recommendations/211678)
**Author:** [@Toma\_Popov](https://discuss.elastic.co/u/Toma_Popov)\ **Replies:** 16\ **Last updated:** [December 20, 2019, 4:19pm UTC](https://discuss.elastic.co/t/elastic-cluster-slow-down-afre-a-few-weeks-of-uptime-cluster-recommendations/211678 "2019-12-20T16:19:12Z")
Hello everyone. I am new to the ELK world and this is my first post so I hope you will go easy on me. I am currently working on a reporting system for one of our inhouse projects. The problem is that we have a lots and … --- ## [Resolving Jar hell](https://discuss.elastic.co/t/resolving-jar-hell/212632)
**Author:** [@Newbie111985](https://discuss.elastic.co/u/Newbie111985)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 9:12am UTC](https://discuss.elastic.co/t/resolving-jar-hell/212632 "2019-12-20T09:12:33Z")
I have a custom plugin for Elasticsearch which has a dependency on httpclient and httpcore jar files. I see that these jars are part of Elasticsearch installation and hence want to use them instead of packaging these jar… --- ## [How to calculate score by dividing number of occurences per field length?](https://discuss.elastic.co/t/how-to-calculate-score-by-dividing-number-of-occurences-per-field-length/212625)
**Author:** [@Slawomir\_Balcerzak](https://discuss.elastic.co/u/Slawomir_Balcerzak)\ **Replies:** 4\ **Last updated:** [December 20, 2019, 3:05pm UTC](https://discuss.elastic.co/t/how-to-calculate-score-by-dividing-number-of-occurences-per-field-length/212625 "2019-12-20T15:05:14Z")
I would like to implement my own scoring algorithm using script\_score. It should to take count of occurrences of searched words and divide this number by field length. But I don't know how to gather those two variables f… --- ## [Script caching](https://discuss.elastic.co/t/script-caching/212622)
**Author:** [@skowron-line](https://discuss.elastic.co/u/skowron-line)\ **Replies:** 8\ **Last updated:** [December 20, 2019, 2:16pm UTC](https://discuss.elastic.co/t/script-caching/212622 "2019-12-20T14:16:15Z")
Im having script like if (doc\['type'\].value == 'pwp') { if (doc\['rodzaj\_pwp'\].value == 1) {if (\_score \< params.pwp\['1'\]) {return 0;} else {return \_score;}} if (doc\['rodzaj\_pwp'\].value == 2) {if (… --- ## [Monitoring Cluster Elastic](https://discuss.elastic.co/t/monitoring-cluster-elastic/211304)
**Author:** [@Avlise](https://discuss.elastic.co/u/Avlise)\ **Replies:** 0\ **Last updated:** [December 10, 2019, 1:18pm UTC](https://discuss.elastic.co/t/monitoring-cluster-elastic/211304 "2019-12-10T13:18:25Z")
Hi everyone, I decided to create thiis topic because of a misunderstood graph. I'm currently working for a firm, and I'm in charge of the administration of the ELK Stack. In the Monitoring Tab on Kibana, I've this gra… --- ## [ES DSL Query](https://discuss.elastic.co/t/es-dsl-query/212028)
**Author:** [@Ghaith\_Haddad](https://discuss.elastic.co/u/Ghaith_Haddad)\ **Replies:** 0\ **Last updated:** [December 16, 2019, 3:39pm UTC](https://discuss.elastic.co/t/es-dsl-query/212028 "2019-12-16T15:39:56Z")
So im trying to make a monitor on Alerts for Kibana OSS but im not sure how to search through the data/logs that i have using the extraction query. This is an example of one of the hits: { "\_shards": { "tota… --- ## [Part of string multi\_match bool](https://discuss.elastic.co/t/part-of-string-multi-match-bool/212644)
**Author:** [@ajouve](https://discuss.elastic.co/u/ajouve)\ **Replies:** 1\ **Last updated:** [December 20, 2019, 12:43pm UTC](https://discuss.elastic.co/t/part-of-string-multi-match-bool/212644 "2019-12-20T12:43:46Z")
I just duplicated mu customer database into Elasticsearch for faster result. On my listing page I have a search field to search any string into my customer db. the search should be able to match a result on email, first… --- ## [Elasticsearch Security plugin exception](https://discuss.elastic.co/t/elasticsearch-security-plugin-exception/212461)
**Author:** [@akr](https://discuss.elastic.co/u/akr)\ **Replies:** 1\ **Last updated:** [December 20, 2019, 12:24pm UTC](https://discuss.elastic.co/t/elasticsearch-security-plugin-exception/212461 "2019-12-20T12:24:00Z")
I am getting error while working on ssl part of elasticsearch. stacktrace": \["org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: failed to load plugin class \[org.elasticsearch.xpack.core.XPac… --- ## [Fluent::Plugin::ElasticsearchOutput::RecoverableRequestFailure error="could not push logs to Elasticsearch cluster](https://discuss.elastic.co/t/fluent-recoverablerequestfailure-error-could-not-push-logs-to-elasticsearch-cluster/212658)
**Author:** [@Tania\_Saez](https://discuss.elastic.co/u/Tania_Saez)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 11:57am UTC](https://discuss.elastic.co/t/fluent-recoverablerequestfailure-error-could-not-push-logs-to-elasticsearch-cluster/212658 "2019-12-20T11:57:44Z")
Hello, I am having this error trying to send logs from fluentd/td-agent. 2019-12-20 12:46:00 +0100 \[warn\]: #0 failed to flush the buffer. retry\_time=18 next\_retry\_seconds=2019-12-20 12:46:27 +0100 chunk="59a205d168e33d… --- ## [How to run integTest with a remote cluster?](https://discuss.elastic.co/t/how-to-run-integtest-with-a-remote-cluster/212652)
**Author:** [@Ethan-Zhang](https://discuss.elastic.co/u/Ethan-Zhang)\ **Replies:** 1\ **Last updated:** [December 20, 2019, 11:25am UTC](https://discuss.elastic.co/t/how-to-run-integtest-with-a-remote-cluster/212652 "2019-12-20T11:25:33Z")
How to run integTest with a remote cluster? --- ## [\[7.5.0\] Field mapped as a long appears as a string](https://discuss.elastic.co/t/7-5-0-field-mapped-as-a-long-appears-as-a-string/212453)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 2\ **Last updated:** [December 20, 2019, 11:17am UTC](https://discuss.elastic.co/t/7-5-0-field-mapped-as-a-long-appears-as-a-string/212453 "2019-12-20T11:17:36Z")
Hi there! I'm experiencing a strange issue. I've got an index with a template where a given mapping is specified. Such a mapping includes a specific field which should be a long. It works perfectly for almost all the … --- ## [Task integTestCluster did not run automatically when run task integTest on version 7.5](https://discuss.elastic.co/t/task-integtestcluster-did-not-run-automatically-when-run-task-integtest-on-version-7-5/212637)
**Author:** [@Ethan-Zhang](https://discuss.elastic.co/u/Ethan-Zhang)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 9:54am UTC](https://discuss.elastic.co/t/task-integtestcluster-did-not-run-automatically-when-run-task-integtest-on-version-7-5/212637 "2019-12-20T09:54:06Z")
When I upgrade the ES version from 7.4.0 to 7.5.1 in the plugin build, the integTestCluster task did not run automatically before task integTestRunner. Giving the error of Caused by: java.lang.NullPointerException: Can'… --- ## [Elasticsearch crashes with "Certificate chain is not valid" exception](https://discuss.elastic.co/t/elasticsearch-crashes-with-certificate-chain-is-not-valid-exception/212611)
**Author:** [@fetch](https://discuss.elastic.co/u/fetch)\ **Replies:** 1\ **Last updated:** [December 20, 2019, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-crashes-with-certificate-chain-is-not-valid-exception/212611 "2019-12-20T10:43:48Z")
Hello, I have a cluster of 3 servers with ELK 6.8.6 stack. I'm trying to setup the 3rd server of the cluster, but it behaves somehow different. I specify the following configuration for ssl: xpack.security.enabled: t… --- ## [How to use MavenFilteringHack to replace var from YAML files](https://discuss.elastic.co/t/how-to-use-mavenfilteringhack-to-replace-var-from-yaml-files/209959)
**Author:** [@Ethan-Zhang](https://discuss.elastic.co/u/Ethan-Zhang)\ **Replies:** 3\ **Last updated:** [December 20, 2019, 9:47am UTC](https://discuss.elastic.co/t/how-to-use-mavenfilteringhack-to-replace-var-from-yaml-files/209959 "2019-12-20T09:47:46Z")
I wrote my own rest-api-spec above, and I want to replace the ${} from in gradle build processTestResources { Map\ expansions = \[ 'bucket': cosBucket, 'base\_path': cosBasePath, \] inputs.properti… --- ## [Ingest user has autherntication failures to the default\_native realm](https://discuss.elastic.co/t/ingest-user-has-autherntication-failures-to-the-default-native-realm/212635)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 9:22am UTC](https://discuss.elastic.co/t/ingest-user-has-autherntication-failures-to-the-default-native-realm/212635 "2019-12-20T09:22:11Z")
Hello, I have enabled security on elasticsearch and created a ingest user with a dedicated role that it is used by the beats and logstash to ingest data into the elasticsearch. However I keep seing the following into th… --- ## [Boshrelease 208.0.0 v 209.1.0](https://discuss.elastic.co/t/boshrelease-208-0-0-v-209-1-0/211708)
**Author:** [@usr20190913](https://discuss.elastic.co/u/usr20190913)\ **Replies:** 2\ **Last updated:** [December 20, 2019, 9:21am UTC](https://discuss.elastic.co/t/boshrelease-208-0-0-v-209-1-0/211708 "2019-12-20T09:21:35Z")
We currently have logsearch 208.0.0 deployed, which contains: \[elasticsearch\_master/0\] version\[5.5.2\] Looking through all logsearch\_boshrelease, it appears version 209.1.0 would be compatible with the 5.5.2 release as … --- ## [Data disappeared but \_stats doesn't say the same](https://discuss.elastic.co/t/data-disappeared-but-stats-doesnt-say-the-same/212464)
**Author:** [@HugooBauer](https://discuss.elastic.co/u/HugooBauer)\ **Replies:** 3\ **Last updated:** [December 20, 2019, 9:08am UTC](https://discuss.elastic.co/t/data-disappeared-but-stats-doesnt-say-the-same/212464 "2019-12-20T09:08:45Z")
Hello, I just noticed that my data before April 1 has disappeared. I have one index per month, and the indexes 2019.03 and below no longer return documents. When I do a \_search or \_count, the return gives me : { "c… --- ## [Elasticsearch jvm memory usage show on x-pack](https://discuss.elastic.co/t/elasticsearch-jvm-memory-usage-show-on-x-pack/212630)
**Author:** [@imperio-wxm](https://discuss.elastic.co/u/imperio-wxm)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 8:49am UTC](https://discuss.elastic.co/t/elasticsearch-jvm-memory-usage-show-on-x-pack/212630 "2019-12-20T08:49:00Z")
I know the jvm memory of es is divided into these parts： Query cache Index buffer Request cache Field data cache Lecence memory A machine in my cluster: Query cache = 1G Index buffer = 600MB+ Lecence memory = 8G … --- ## [How can I set the range against an existing fields in the same document?](https://discuss.elastic.co/t/how-can-i-set-the-range-against-an-existing-fields-in-the-same-document/212410)
**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\ **Replies:** 3\ **Last updated:** [December 20, 2019, 9:03am UTC](https://discuss.elastic.co/t/how-can-i-set-the-range-against-an-existing-fields-in-the-same-document/212410 "2019-12-20T09:03:40Z")
How can I set the range against an existing fields in the same document? GET my\_index/\_search { "query": { "range" : { "date" : { "gte" : "now-\[period\]d/d", "lte" … --- ## [Optimize Global Aggregation that became slower after increase of terms subaggregations count](https://discuss.elastic.co/t/optimize-global-aggregation-that-became-slower-after-increase-of-terms-subaggregations-count/212309)
**Author:** [@aspacca-gfg](https://discuss.elastic.co/u/aspacca-gfg)\ **Replies:** 3\ **Last updated:** [December 20, 2019, 8:56am UTC](https://discuss.elastic.co/t/optimize-global-aggregation-that-became-slower-after-increase-of-terms-subaggregations-count/212309 "2019-12-20T08:56:56Z")
We have and index with 500.000 documents ca with 3 shards and 3 replicas This is the mapping { "mappings": { "\_doc": { "dynamic\_templates": \[{ "attr\_template": { "mapping": { "type": "text", … --- ## [Cluster upgrade from 5.4 -\> 5.6 doubled disk usage](https://discuss.elastic.co/t/cluster-upgrade-from-5-4-5-6-doubled-disk-usage/212539)
**Author:** [@jmwilkinson](https://discuss.elastic.co/u/jmwilkinson)\ **Replies:** 5\ **Last updated:** [December 20, 2019, 8:37am UTC](https://discuss.elastic.co/t/cluster-upgrade-from-5-4-5-6-doubled-disk-usage/212539 "2019-12-20T08:37:05Z")
Was requested to post a discussion topic to start rather than a github issue. Original link: https://github.com/elastic/elasticsearch/issues/50323 The problem, as described in the issue, is that following the standard … --- ## [Rejected thread pool](https://discuss.elastic.co/t/rejected-thread-pool/212395)
**Author:** [@jdambly](https://discuss.elastic.co/u/jdambly)\ **Replies:** 6\ **Last updated:** [December 20, 2019, 8:18am UTC](https://discuss.elastic.co/t/rejected-thread-pool/212395 "2019-12-20T08:18:29Z")
I am getting rejected thread pools on just one node, how can I resolve this? node\_name name active rejected completed elastic-es-data-2 analyze 0 0 0 elastic… --- ## [Query doesn't have any hits with date condition](https://discuss.elastic.co/t/query-doesnt-have-any-hits-with-date-condition/212492)
**Author:** [@bingchuan](https://discuss.elastic.co/u/bingchuan)\ **Replies:** 7\ **Last updated:** [December 20, 2019, 7:41am UTC](https://discuss.elastic.co/t/query-doesnt-have-any-hits-with-date-condition/212492 "2019-12-20T07:41:38Z")
Hi everyone, I'm beginner and i have a question. I created a index which contains some documents. But there are no any hits when i search the documents with the below query. Then, I deleted the date condition,and t… --- ## [SSL error while setting up passwords](https://discuss.elastic.co/t/ssl-error-while-setting-up-passwords/212509)
**Author:** [@rajat\_badjatya](https://discuss.elastic.co/u/rajat_badjatya)\ **Replies:** 1\ **Last updated:** [December 20, 2019, 6:19am UTC](https://discuss.elastic.co/t/ssl-error-while-setting-up-passwords/212509 "2019-12-20T06:19:55Z")
I have followed this elastic blog for configuring SSL in the elastic stack and tried using verification mode as certificate as well as none in elastic's configuration YAML but when I am trying to set up a password using … --- ## [ELK Stack Configuration for UiPath logs](https://discuss.elastic.co/t/elk-stack-configuration-for-uipath-logs/212604)
**Author:** [@Praveen\_Yallala](https://discuss.elastic.co/u/Praveen_Yallala)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 6:04am UTC](https://discuss.elastic.co/t/elk-stack-configuration-for-uipath-logs/212604 "2019-12-20T06:04:55Z")
Hi, Currently I am using ElasticSearch and Kibana. UiPath Orchestrator is configured that logs are transmitted to Elasticsearch-\>Kibana. Everything is working fine. Do I also need to configure Filebeat and Logstash als… --- ## [Two data nodes: One node left, get stale shards and cluster status goes red](https://discuss.elastic.co/t/two-data-nodes-one-node-left-get-stale-shards-and-cluster-status-goes-red/212442)
**Author:** [@itchy91](https://discuss.elastic.co/u/itchy91)\ **Replies:** 2\ **Last updated:** [December 20, 2019, 5:45am UTC](https://discuss.elastic.co/t/two-data-nodes-one-node-left-get-stale-shards-and-cluster-status-goes-red/212442 "2019-12-20T05:45:59Z")
Two data nodes: One node left, get stale shards and cluster status goes red Hello. Searched for this scenario, only get the hint that this could happen in situations, but i dont know how to solve it. We're using ES 6.… --- ## [ES Snapshot to File System on the k8s (multiple node)](https://discuss.elastic.co/t/es-snapshot-to-file-system-on-the-k8s-multiple-node/212601)
**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\ **Replies:** 0\ **Last updated:** [December 20, 2019, 5:41am UTC](https://discuss.elastic.co/t/es-snapshot-to-file-system-on-the-k8s-multiple-node/212601 "2019-12-20T05:41:15Z")
I want to take a snapshot on the filesystem on more than one node. However, i should find a path that is accessible from all nodes. i have to mount the filesystem. What can i do in a Kubernetes environment? PVC canno… --- ## [SSL errors remaining after upgrade to 7.5.0](https://discuss.elastic.co/t/ssl-errors-remaining-after-upgrade-to-7-5-0/212520)
**Author:** [@happycampo](https://discuss.elastic.co/u/happycampo)\ **Replies:** 1\ **Last updated:** [December 20, 2019, 5:31am UTC](https://discuss.elastic.co/t/ssl-errors-remaining-after-upgrade-to-7-5-0/212520 "2019-12-20T05:31:28Z")
I'm getting the following error upon startup and I'm not sure how to get rid of them. Any quick thoughts? elasticsearch\_1 | {"type": "server", "timestamp": "2019-12-19T15:44:31,574Z", "level": "WARN", "component": "o.… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1060) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1062)