# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1091 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1092 --- ## [3 master nodes all creating individual clusters](https://discuss.elastic.co/t/3-master-nodes-all-creating-individual-clusters/208321)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 3:00pm UTC](https://discuss.elastic.co/t/3-master-nodes-all-creating-individual-clusters/208321 "2019-11-18T15:00:50Z")
Hello, I have 3 master nodes all meant to be part of 1 cluster. I have added the nodes to the discovery.zen.ping.unicast.hosts field in the yml files. However, they are creating 3 separate clusters. How can I remove thos… --- ## [Can't find ElasticSearch on Magento 2](https://discuss.elastic.co/t/cant-find-elasticsearch-on-magento-2/208323)
**Author:** [@Erpicor](https://discuss.elastic.co/u/Erpicor)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 2:06pm UTC](https://discuss.elastic.co/t/cant-find-elasticsearch-on-magento-2/208323 "2019-11-18T14:06:11Z")
Hi! I have installed ElasticSearch on my vps, i want to put it on Magento 2.2.5, but when i go in Magento 2 back-end, in Store-\>Settings-\>Configuration-\>Catalog-\>catalog-\>Catalog Search i can't find it in the Search En… --- ## [Role\_mapping file not able to point users if it does not have full DN](https://discuss.elastic.co/t/role-mapping-file-not-able-to-point-users-if-it-does-not-have-full-dn/207812)
**Author:** [@ksarkar](https://discuss.elastic.co/u/ksarkar)\ **Replies:** 5\ **Last updated:** [November 18, 2019, 1:39pm UTC](https://discuss.elastic.co/t/role-mapping-file-not-able-to-point-users-if-it-does-not-have-full-dn/207812 "2019-11-18T13:39:33Z")
While configuring Elastcsearch with LDAP authentication, I am able to connect LDAP users and getting authenticated as per following configuration. elasticsearch.yml , xpack: security: authc: realms: … --- ## [Applying post\_filter to limit inner\_hits in nested document](https://discuss.elastic.co/t/applying-post-filter-to-limit-inner-hits-in-nested-document/207925)
**Author:** [@Emil](https://discuss.elastic.co/u/Emil)\ **Replies:** 2\ **Last updated:** [November 18, 2019, 1:09pm UTC](https://discuss.elastic.co/t/applying-post-filter-to-limit-inner-hits-in-nested-document/207925 "2019-11-18T13:09:46Z")
Hi, I'm struggling how to apply a post\_filter to some nested documents. What I'd like to do is have some aggregation on all my nested documents, but have only certain nested documents returned (the general idea of a pos… --- ## [Query\_string with "+" operator](https://discuss.elastic.co/t/query-string-with-operator/208308)
**Author:** [@guilherme\_maranhao](https://discuss.elastic.co/u/guilherme_maranhao)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 12:38pm UTC](https://discuss.elastic.co/t/query-string-with-operator/208308 "2019-11-18T12:38:10Z")
Hi there, I have an issue related to query\_string using the "+" operator. Suppose that my index contains the documents below: doc\_1 { field1: "foo bar", field2: "zoo" } doc\_2 { field1: "foo", … --- ## [Linux Logs from Elasticsearch are not showing in Discover tab](https://discuss.elastic.co/t/linux-logs-from-elasticsearch-are-not-showing-in-discover-tab/207866)
**Author:** [@Mohit\_Kunjir](https://discuss.elastic.co/u/Mohit_Kunjir)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 12:11pm UTC](https://discuss.elastic.co/t/linux-logs-from-elasticsearch-are-not-showing-in-discover-tab/207866 "2019-11-18T12:11:00Z")
Hello, Kibana's Discover tab not showing the data comming from Filebeat on its corresponding Elasticsearch index pattern. Tried ingesting logs into a new index with different index pattern. The logs are visible on … --- ## [Find difference between two fields of two different values](https://discuss.elastic.co/t/find-difference-between-two-fields-of-two-different-values/208303)
**Author:** [@Yossi\_Saadi](https://discuss.elastic.co/u/Yossi_Saadi)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 11:47am UTC](https://discuss.elastic.co/t/find-difference-between-two-fields-of-two-different-values/208303 "2019-11-18T11:47:19Z")
Hello, I want to know how to get it done, and I just can't figure it out. Let's say I have 3 logs. Each log has fields 'buildNumber', 'startedAt', 'finishedAt' (and more unrelevant fields). I want to calculate the: d… --- ## [Multi-language content](https://discuss.elastic.co/t/multi-language-content/208296)
**Author:** [@Lauxley](https://discuss.elastic.co/u/Lauxley)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 11:06am UTC](https://discuss.elastic.co/t/multi-language-content/208296 "2019-11-18T11:06:00Z")
Hello, I'm trying to figure out the best way to index multi-language content without a definitive list of supported languages, meaning the list is dynamic and will grow quickly depending on user input (we work with histo… --- ## [Elasticsearch running in local failing](https://discuss.elastic.co/t/elasticsearch-running-in-local-failing/208294)
**Author:** [@chandresh-pancholi](https://discuss.elastic.co/u/chandresh-pancholi)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 11:00am UTC](https://discuss.elastic.co/t/elasticsearch-running-in-local-failing/208294 "2019-11-18T11:00:26Z")
Steps: ./gradlew assemble ./gradlew run --debug-jvm Task :distribution:run Running elasticsearch in debug mode, node{:distribution:runTask-0} suspending until connected on debugPort 5005 Exec output and error: | Ou… --- ## [Elasticsearch cluster crashed when 1 node got IO issues](https://discuss.elastic.co/t/elasticsearch-cluster-crashed-when-1-node-got-io-issues/208289)
**Author:** [@Andriy\_Pyshchyk](https://discuss.elastic.co/u/Andriy_Pyshchyk)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 10:52am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-crashed-when-1-node-got-io-issues/208289 "2019-11-18T10:52:00Z")
Hi Everyone, currently I'm using ES 6.6.1, in 48 nodes cluster, replication factor 1, and faced an issue when 1 of nodes had IO issues - whole cluster got to Red state, all indices got red, couldn't execute \_cat/nodes. … --- ## [Metricbeat output not in elasticsearch](https://discuss.elastic.co/t/metricbeat-output-not-in-elasticsearch/207678)
**Author:** [@Lieven](https://discuss.elastic.co/u/Lieven)\ **Replies:** 6\ **Last updated:** [November 18, 2019, 10:30am UTC](https://discuss.elastic.co/t/metricbeat-output-not-in-elasticsearch/207678 "2019-11-18T10:30:07Z")
Hi, I'm trying to setup a metricbeat on a MacBook for test purposes. My ELK Stack is running in docker dontainers (docker-elk) which I updated to 7.4.2. I setup the metricbeat in Kibana, setup the dashboards and the me… --- ## [Elastic Stack v7.5 on RHEL/CentOS 8](https://discuss.elastic.co/t/elastic-stack-v7-5-on-rhel-centos-8/208284)
**Author:** [@Emilio\_Lorente\_Ramon](https://discuss.elastic.co/u/Emilio_Lorente_Ramon)\ **Replies:** 0\ **Last updated:** [November 18, 2019, 10:13am UTC](https://discuss.elastic.co/t/elastic-stack-v7-5-on-rhel-centos-8/208284 "2019-11-18T10:13:36Z")
Hi, We are creating a new elastic cluster with 7.4 version and IT team offers virtual machines with RHEL 8. Is this RHEL version compatible with elastic stack? if not, When will it be certified? Thanks Best regards --- ## [Verification of http\_logs results](https://discuss.elastic.co/t/verification-of-http-logs-results/208269)
**Author:** [@Kailas](https://discuss.elastic.co/u/Kailas)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 9:50am UTC](https://discuss.elastic.co/t/verification-of-http-logs-results/208269 "2019-11-18T09:50:35Z")
Hello I have a master node and 2 Data Nodes with 64 GB of RAM each. When I run http\_logs bechmarking test, I get 298,000 docs/s as average indexing throughput. Are these results good ? Do we have any standard baselines… --- ## [Geo\_shape query accuracy](https://discuss.elastic.co/t/geo-shape-query-accuracy/208244)
**Author:** [@Raven\_Ariola](https://discuss.elastic.co/u/Raven_Ariola)\ **Replies:** 13\ **Last updated:** [November 18, 2019, 9:41am UTC](https://discuss.elastic.co/t/geo-shape-query-accuracy/208244 "2019-11-18T09:41:01Z")
My geo\_shape query filters points based from a region polygon. I'm having results that is out of bounds of the polygon and I'm using within relation. Can someone help me to make the results accurate. Thanks. --- ## [About remove tansport client performance](https://discuss.elastic.co/t/about-remove-tansport-client-performance/207632)
**Author:** [@acrawlsnail](https://discuss.elastic.co/u/acrawlsnail)\ **Replies:** 8\ **Last updated:** [November 18, 2019, 8:10am UTC](https://discuss.elastic.co/t/about-remove-tansport-client-performance/207632 "2019-11-18T08:10:02Z")
I want to know why remove tansport client . HTTP1.1 that I know uses the text protocol and does not support multiplexing , so I think there is a huge performance difference between jest client and tansport client in high… --- ## [Index Lifecycle Error - Not Write Index](https://discuss.elastic.co/t/index-lifecycle-error-not-write-index/207068)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 4\ **Last updated:** [November 18, 2019, 6:54am UTC](https://discuss.elastic.co/t/index-lifecycle-error-not-write-index/207068 "2019-11-18T06:54:39Z")
Hello guys, i tried to implement an ilm-policy. Now i always get the following error: illegal\_argument\_exception: source alias \[Syslog\] does not point to a write index Now, i don't really get how i make this inde… --- ## [Can we use Significant Terms Aggregation with parent-child structure](https://discuss.elastic.co/t/can-we-use-significant-terms-aggregation-with-parent-child-structure/208206)
**Author:** [@darkwarrior](https://discuss.elastic.co/u/darkwarrior)\ **Replies:** 2\ **Last updated:** [November 18, 2019, 5:59am UTC](https://discuss.elastic.co/t/can-we-use-significant-terms-aggregation-with-parent-child-structure/208206 "2019-11-18T05:59:11Z")
Hello, I am following this eg =\> https://opensourceconnections.com/blog/2016/09/09/better-recsys-elasticsearch/. But Instead of using array(as shown in the example) I want to create Parent-child structure for user-vide… --- ## [Unable to define custom ILM phases](https://discuss.elastic.co/t/unable-to-define-custom-ilm-phases/208120)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 3\ **Last updated:** [November 18, 2019, 4:16am UTC](https://discuss.elastic.co/t/unable-to-define-custom-ilm-phases/208120 "2019-11-18T04:16:48Z")
I am interested in creating a custom phase. My request is as follows: PUT \_ilm/policy/test1 { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "set\_priority": { … --- ## [Role permissions to read \`.monitoring-\*\` indices?](https://discuss.elastic.co/t/role-permissions-to-read-monitoring-indices/208241)
**Author:** [@IamaBase](https://discuss.elastic.co/u/IamaBase)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 2:19am UTC](https://discuss.elastic.co/t/role-permissions-to-read-monitoring-indices/208241 "2019-11-18T02:19:13Z")
I want to read the .monitoring-\* indices (provided by x-pack) within Grafana. What privileges do I need to grant the grafana user role? I have tried creating a role that allows read and read\_cross\_cluster to the index p… --- ## [Unexpected response code \[503\] from calling PUT http://172.16.6.63:9200/\_xpack/security/user/apm\_system/\_password?pretty Cause: Cluster state has not been recovered yet, cannot write to the security index](https://discuss.elastic.co/t/unexpected-response-code-503-from-calling-put-http-172-16-6-63-9200-xpack-security-user-apm-system-password-pretty-cause-cluster-state-has-not-been-recovered-yet-cannot-write-to-the-security-index/205226)
**Author:** [@kiran\_kumar1](https://discuss.elastic.co/u/kiran_kumar1)\ **Replies:** 1\ **Last updated:** [November 17, 2019, 7:32pm UTC](https://discuss.elastic.co/t/unexpected-response-code-503-from-calling-put-http-172-16-6-63-9200-xpack-security-user-apm-system-password-pretty-cause-cluster-state-has-not-been-recovered-yet-cannot-write-to-the-security-index/205226 "2019-11-17T19:32:21Z")
Hi team, could you help on this issue, when am trying get cluster password. getting issue like below. exec -it es-coordinating-0 bash -n 2304670352 Defaulting container name to es-coordinating. Use 'kubectl describe … --- ## [Error inserting data into Elastic 7.4.2: Can't get text on a START\_OBJECT at 6:20](https://discuss.elastic.co/t/error-inserting-data-into-elastic-7-4-2-cant-get-text-on-a-start-object-at-6-20/208233)
**Author:** [@Keith\_Driver](https://discuss.elastic.co/u/Keith_Driver)\ **Replies:** 0\ **Last updated:** [November 17, 2019, 5:58pm UTC](https://discuss.elastic.co/t/error-inserting-data-into-elastic-7-4-2-cant-get-text-on-a-start-object-at-6-20/208233 "2019-11-17T17:58:21Z")
I am using the following command to insert data into my index: curl -H "Content-Type: application/json" -X POST "http://localhost:9200/test-syntax/\_doc/10" --data-binary @1278.json The contents of 1278.json is: { "au… --- ## [Why aren't my indexes being managed by ILM?](https://discuss.elastic.co/t/why-arent-my-indexes-being-managed-by-ilm/206600)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 2\ **Last updated:** [November 17, 2019, 2:10pm UTC](https://discuss.elastic.co/t/why-arent-my-indexes-being-managed-by-ilm/206600 "2019-11-17T14:10:37Z")
I have an index for packetbeat. Needless to say, this pulls down lots of data so Im wanting to a) roll it over often b) delete it after 12 hours It isn't doing either activity and Im struggling to understand why. GET… --- ## [Composite Aggregation with Nested Field in Terms](https://discuss.elastic.co/t/composite-aggregation-with-nested-field-in-terms/208220)
**Author:** [@nili1](https://discuss.elastic.co/u/nili1)\ **Replies:** 0\ **Last updated:** [November 17, 2019, 1:45pm UTC](https://discuss.elastic.co/t/composite-aggregation-with-nested-field-in-terms/208220 "2019-11-17T13:45:25Z")
Hi, Is there a way to use nested fields in the sources of a composite aggregation in version 6.8? If so, is it possible to combine both nested and not-nested fields as sources? Thanks --- ## [Difference between the timeout param mentioned in query-string parameters and request body](https://discuss.elastic.co/t/difference-between-the-timeout-param-mentioned-in-query-string-parameters-and-request-body/208217)
**Author:** [@amitmbm](https://discuss.elastic.co/u/amitmbm)\ **Replies:** 0\ **Last updated:** [November 17, 2019, 11:00am UTC](https://discuss.elastic.co/t/difference-between-the-timeout-param-mentioned-in-query-string-parameters-and-request-body/208217 "2019-11-17T11:00:23Z")
I am trying to understand the ES timeout and found different resources which talked about different things. Timeout param in query String As per this ES doc: The timeout parameter tells shards how long they are allowe… --- ## [\_restore shards failed](https://discuss.elastic.co/t/restore-shards-failed/208190)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 1\ **Last updated:** [November 17, 2019, 8:55am UTC](https://discuss.elastic.co/t/restore-shards-failed/208190 "2019-11-17T08:55:52Z")
Hello World! I just used \_restore (Snapshot And Restore), yet ran into following issue: "shards" : { "total" : 654, "failed" : 6, "successful" : 648 How does one figures out which shards have failed? Please adv… --- ## [Unfilled fields](https://discuss.elastic.co/t/unfilled-fields/208188)
**Author:** [@Charlotte\_Mar](https://discuss.elastic.co/u/Charlotte_Mar)\ **Replies:** 1\ **Last updated:** [November 16, 2019, 11:07pm UTC](https://discuss.elastic.co/t/unfilled-fields/208188 "2019-11-16T23:07:31Z")
Hi I am new to elasticsearch and I wanna ask about mapping. If I have the following mapping : { "mappings":{ "properties":{ "customer\_id": {"type": "integer"}, "customer\_name": {"type": "text"}, "city": {"type": … --- ## [ILM timing - based on index pattern name](https://discuss.elastic.co/t/ilm-timing-based-on-index-pattern-name/208163)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 5\ **Last updated:** [November 16, 2019, 9:25pm UTC](https://discuss.elastic.co/t/ilm-timing-based-on-index-pattern-name/208163 "2019-11-16T21:25:30Z")
I think, ILM is a kind of user-friendly replacement for Curator :slight\_smile: Am I right? That would be great to have all the curator's features in ILM! For instance, I'd like to define a policy to delete old indices,… --- ## [Xpack.security on Elastic Search - error](https://discuss.elastic.co/t/xpack-security-on-elastic-search-error/208160)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 1\ **Last updated:** [November 16, 2019, 6:17pm UTC](https://discuss.elastic.co/t/xpack-security-on-elastic-search-error/208160 "2019-11-16T18:17:04Z")
I generated the P12 file on the Elasticsearch node: sudo ./bin/elasticsearch-certutil cert This file was after generating in /usr /share/elasticsearch ... However, I moved it to /etc/elasticsearch/certs/ I have added… --- ## [Delete phase in the ILM policy](https://discuss.elastic.co/t/delete-phase-in-the-ilm-policy/208178)
**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\ **Replies:** 0\ **Last updated:** [November 16, 2019, 5:52pm UTC](https://discuss.elastic.co/t/delete-phase-in-the-ilm-policy/208178 "2019-11-16T17:52:39Z")
A quick question about timing under the delete phase in the ILM policy. Right now (in Kibana), timing for the delete phase has only two options: days from rollover hours from rollover Let's say the hot phase is … --- ## [Select date range with first date criteria?](https://discuss.elastic.co/t/select-date-range-with-first-date-criteria/208036)
**Author:** [@Koen\_Wouters](https://discuss.elastic.co/u/Koen_Wouters)\ **Replies:** 5\ **Last updated:** [November 16, 2019, 5:51pm UTC](https://discuss.elastic.co/t/select-date-range-with-first-date-criteria/208036 "2019-11-16T17:51:04Z")
Hi there, I know how to select a time range in elastic, but would it also be possible to select a time range defining a 'first date' setting. Something like this totally fictional thing : { "range": {"min": {"my\_date":… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1090) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1092)