# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1093 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1094 --- ## [Geoip error (expected database)](https://discuss.elastic.co/t/geoip-error-expected-database/208049)
**Author:** [@pharald](https://discuss.elastic.co/u/pharald)\ **Replies:** 0\ **Last updated:** [November 15, 2019, 10:46am UTC](https://discuss.elastic.co/t/geoip-error-expected-database/208049 "2019-11-15T10:46:31Z")
Hello, I have installed elasticsearch 7.4.2. I want to use the geoip processor. The documentation says I need to download and copy the geolite DB into dir /etc/elasticsearch/ingest-geoip https://www.elastic.co/guide/en… --- ## [Migrating master & data node to just a data node & some general advice on setting up our clsuter](https://discuss.elastic.co/t/migrating-master-data-node-to-just-a-data-node-some-general-advice-on-setting-up-our-clsuter/208034)
**Author:** [@John\_Swift](https://discuss.elastic.co/u/John_Swift)\ **Replies:** 2\ **Last updated:** [November 15, 2019, 10:19am UTC](https://discuss.elastic.co/t/migrating-master-data-node-to-just-a-data-node-some-general-advice-on-setting-up-our-clsuter/208034 "2019-11-15T10:19:13Z")
Looking for some advice on rejigging my elastic cluster. Currently have 7 nodes with 3 set to masters & data nodes & 5 set to just Data nodes. The cluster is used for monitoing of applications so very much log entry or… --- ## [Watcher settings](https://discuss.elastic.co/t/watcher-settings/208032)
**Author:** [@vishnuvardhan](https://discuss.elastic.co/u/vishnuvardhan)\ **Replies:** 1\ **Last updated:** [November 15, 2019, 10:06am UTC](https://discuss.elastic.co/t/watcher-settings/208032 "2019-11-15T10:06:25Z")
previous i created the watcher in my local server 1 elasticsearch and kibana server. now my requirement is my cluster having 3 es nodes ,2 logstash nodes ,1 ml node,1 kibana .. how to setup watcher and email conf in ela… --- ## [Rank Eval Expect No Results](https://discuss.elastic.co/t/rank-eval-expect-no-results/207606)
**Author:** [@tomjohn1028](https://discuss.elastic.co/u/tomjohn1028)\ **Replies:** 3\ **Last updated:** [November 15, 2019, 10:03am UTC](https://discuss.elastic.co/t/rank-eval-expect-no-results/207606 "2019-11-15T10:03:53Z")
I'm really enjoying the Rank Eval API. But I have a use case for one of my indices where I would like to test queries where there shouldn't be any hits in the results. Is there an existing EvaluationMetric that handles … --- ## [Date histogram Week start from day 1 to day 7](https://discuss.elastic.co/t/date-histogram-week-start-from-day-1-to-day-7/208031)
**Author:** [@examin](https://discuss.elastic.co/u/examin)\ **Replies:** 0\ **Last updated:** [November 15, 2019, 10:01am UTC](https://discuss.elastic.co/t/date-histogram-week-start-from-day-1-to-day-7/208031 "2019-11-15T10:01:10Z")
How can i have week start from day 1 of month not from moday . means i need result in interval of 1-7 8-14 15-21 21-28 28-30 etc . How should my query look like . i tried with day histogram inteval =7 , but it is not ab… --- ## [Ingress for ElasticSearch using ECK](https://discuss.elastic.co/t/ingress-for-elasticsearch-using-eck/208012)
**Author:** [@sebastianlindblom](https://discuss.elastic.co/u/sebastianlindblom)\ **Replies:** 1\ **Last updated:** [November 15, 2019, 9:33am UTC](https://discuss.elastic.co/t/ingress-for-elasticsearch-using-eck/208012 "2019-11-15T09:33:28Z")
I'm having trouble setting up a working ingress for ElasticSearch on kubernetes using the ECK API. My elastic.yaml looks like this: (ingress.yaml is included at the bottom) apiVersion: elasticsearch.k8s.elastic.co/v1be… --- ## [Elasticsearch cluster setup on 3 nodes](https://discuss.elastic.co/t/elasticsearch-cluster-setup-on-3-nodes/207510)
**Author:** [@balamurugan\_ravi](https://discuss.elastic.co/u/balamurugan_ravi)\ **Replies:** 10\ **Last updated:** [November 15, 2019, 9:21am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-setup-on-3-nodes/207510 "2019-11-15T09:21:22Z")
I am trying to setup the elasticsearch cluster on 3 nodes with AWS ELB. docker run \\ -p 9200:9200 \\ -p 9300:9300 \\ --name es-master1 \\ -v es-master1:/usr/share/elasticsearch/data \\ -v es-master1\_… --- ## [Does elastic search work with Sql database](https://discuss.elastic.co/t/does-elastic-search-work-with-sql-database/208016)
**Author:** [@vatsalnarry2](https://discuss.elastic.co/u/vatsalnarry2)\ **Replies:** 1\ **Last updated:** [November 15, 2019, 8:38am UTC](https://discuss.elastic.co/t/does-elastic-search-work-with-sql-database/208016 "2019-11-15T08:38:24Z")
I want to use elastic search on MySQL db, is it possible to integrate elastic search with SQL database. --- ## [Unable to start elastic search](https://discuss.elastic.co/t/unable-to-start-elastic-search/207957)
**Author:** [@rehannali](https://discuss.elastic.co/u/rehannali)\ **Replies:** 3\ **Last updated:** [November 15, 2019, 8:37am UTC](https://discuss.elastic.co/t/unable-to-start-elastic-search/207957 "2019-11-15T08:37:09Z")
Hi, I install Elasticsearch using sudo dpkg -i /path-to-file/installer.deb on ubuntu. Recently I tried to enable the security feature but after i add lines in elasticsearch.yml, service refuse to start it. I tried to rea… --- ## [Index Mappings using Java API using Elastic 6.2.2 library](https://discuss.elastic.co/t/index-mappings-using-java-api-using-elastic-6-2-2-library/207976)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 1\ **Last updated:** [November 15, 2019, 8:36am UTC](https://discuss.elastic.co/t/index-mappings-using-java-api-using-elastic-6-2-2-library/207976 "2019-11-15T08:36:27Z")
How do i get the Index mappings using Elastic 6.2.2 java library? Is there any api available to get the index mappings ? --- ## [How to reduce elasticsearch client node memory usage](https://discuss.elastic.co/t/how-to-reduce-elasticsearch-client-node-memory-usage/208004)
**Author:** [@lovelly](https://discuss.elastic.co/u/lovelly)\ **Replies:** 1\ **Last updated:** [November 15, 2019, 7:50am UTC](https://discuss.elastic.co/t/how-to-reduce-elasticsearch-client-node-memory-usage/208004 "2019-11-15T07:50:08Z")
I have a client node. Node.master: false Node.data: false I allocated memory to jvm: -Xms10g -Xmx10g I use the bulk api to insert data for a long time. The elasticsearch client node runs for about 10 minutes, and … --- ## [Watcher slack alert not working](https://discuss.elastic.co/t/watcher-slack-alert-not-working/207214)
**Author:** [@mathur7vidit](https://discuss.elastic.co/u/mathur7vidit)\ **Replies:** 1\ **Last updated:** [November 15, 2019, 7:46am UTC](https://discuss.elastic.co/t/watcher-slack-alert-not-working/207214 "2019-11-15T07:46:38Z")
Team, we have 6.8.4 setup and we are moving to 7.4.2. we have slack and email alerts configured. email alerts are working fine. whoever slack alerts are not working. attached is the error and elasticsearch.yml file. thi… --- ## [How to reduce elasticsearch memory usage](https://discuss.elastic.co/t/how-to-reduce-elasticsearch-memory-usage/207997)
**Author:** [@lovelly](https://discuss.elastic.co/u/lovelly)\ **Replies:** 1\ **Last updated:** [November 15, 2019, 7:44am UTC](https://discuss.elastic.co/t/how-to-reduce-elasticsearch-memory-usage/207997 "2019-11-15T07:44:39Z")
I use the bulk api to insert a lot of data. Elasticsearch will quickly consume memory and then crash. elasticsearcg log : \[2019-11-15T14:13:00,235\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[es1\] \[gc\]\[1287\] overhead, spent \[… --- ## [Java/Corretto - Elastic OSS vs Elastic Basic](https://discuss.elastic.co/t/java-corretto-elastic-oss-vs-elastic-basic/207784)
**Author:** [@udaytylertech](https://discuss.elastic.co/u/udaytylertech)\ **Replies:** 5\ **Last updated:** [November 15, 2019, 7:38am UTC](https://discuss.elastic.co/t/java-corretto-elastic-oss-vs-elastic-basic/207784 "2019-11-15T07:38:00Z")
In this discussion, I am only referring to Elastic Basic and OSS versions. Elastic requires Java 7 and above to run. But, can I run Elastic Basic with Amazon Corretto? Can I run Elastic OSS with Amazon Corretto? Also… --- ## [I/O dispatch worker terminated abnormally](https://discuss.elastic.co/t/i-o-dispatch-worker-terminated-abnormally/208002)
**Author:** [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\ **Replies:** 0\ **Last updated:** [November 15, 2019, 7:06am UTC](https://discuss.elastic.co/t/i-o-dispatch-worker-terminated-abnormally/208002 "2019-11-15T07:06:51Z")
Below code i have written to fetch all the records based on index, but getting exception try (RestHighLevelClient client = new RestHighLevelClient( RestClient.builder(HttpHost.create("http://localhost:9200")))) { … --- ## [Filter on a list of values](https://discuss.elastic.co/t/filter-on-a-list-of-values/207998)
**Author:** [@Ashish1](https://discuss.elastic.co/u/Ashish1)\ **Replies:** 0\ **Last updated:** [November 15, 2019, 6:28am UTC](https://discuss.elastic.co/t/filter-on-a-list-of-values/207998 "2019-11-15T06:28:49Z")
I want to filter documents from a list of values. Say, i have an index which contains a field "customer\_id". I have a list of customer\_ids to lookup from the above index and the list is around 10000 ids. Is there any … --- ## [Query field doesn't exist or have a special value](https://discuss.elastic.co/t/query-field-doesnt-exist-or-have-a-special-value/206065)
**Author:** [@fetch](https://discuss.elastic.co/u/fetch)\ **Replies:** 2\ **Last updated:** [November 15, 2019, 5:47am UTC](https://discuss.elastic.co/t/query-field-doesnt-exist-or-have-a-special-value/206065 "2019-11-15T05:47:56Z")
Hello, I'm using ELK 6.8.2. I have a set of data where the field "system" can either have a value or doesn't exist at all. The queries NOT \_exists\_: system and system: value works fine. However, as soon as I try to … --- ## [Visualize bar chart Kibana](https://discuss.elastic.co/t/visualize-bar-chart-kibana/207971)
**Author:** [@Diego\_Ruggirello](https://discuss.elastic.co/u/Diego_Ruggirello)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 11:05pm UTC](https://discuss.elastic.co/t/visualize-bar-chart-kibana/207971 "2019-11-14T23:05:08Z")
Good afternoon, nice to meet you I am new with the kibana tool and I am trying to make a visualization with bar graph. What I want to correct is that it shows me in the graph only two dates (in this case 2019-11-09 and … --- ## [Process to import periodic text file](https://discuss.elastic.co/t/process-to-import-periodic-text-file/207969)
**Author:** [@K29](https://discuss.elastic.co/u/K29)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 10:56pm UTC](https://discuss.elastic.co/t/process-to-import-periodic-text-file/207969 "2019-11-14T22:56:48Z")
Hello, I'm using ES recently. After having read several posts, I don't see how to use the best method to import datas from a text file in an index. I need to import this file each month and update the index with the new… --- ## [Elasticsearch 5.2.0 vs 7.4 architecture](https://discuss.elastic.co/t/elasticsearch-5-2-0-vs-7-4-architecture/207965)
**Author:** [@J\_Warner](https://discuss.elastic.co/u/J_Warner)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 10:37pm UTC](https://discuss.elastic.co/t/elasticsearch-5-2-0-vs-7-4-architecture/207965 "2019-11-14T22:37:54Z")
Hey folks newbie Question: I'm in the process of deploying a new elk stack on GKE currently using the helm templating tool In my elk stack I've inherited there's a es-client \<--- es-data . \<---- es-master ) = 5… --- ## [Why search.max\_buckets soft limit is 10000 ? What are the cons of increasing this size limit?](https://discuss.elastic.co/t/why-search-max-buckets-soft-limit-is-10000-what-are-the-cons-of-increasing-this-size-limit/207190)
**Author:** [@Seetha93](https://discuss.elastic.co/u/Seetha93)\ **Replies:** 3\ **Last updated:** [November 14, 2019, 9:56pm UTC](https://discuss.elastic.co/t/why-search-max-buckets-soft-limit-is-10000-what-are-the-cons-of-increasing-this-size-limit/207190 "2019-11-14T21:56:10Z")
Also, why top\_hits window inside aggregation buckets is 100. Does that mean, increasing the window size to 10 times will have a significant toll on performance ? --- ## [Hadoop/Mapr and ELK](https://discuss.elastic.co/t/hadoop-mapr-and-elk/204912)
**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\ **Replies:** 1\ **Last updated:** [November 14, 2019, 8:47pm UTC](https://discuss.elastic.co/t/hadoop-mapr-and-elk/204912 "2019-11-14T20:47:18Z")
Hello there: We have a request to use ELK to access/fetch some log files stored on a Mapr cluster file system (HDFS or MFS), but don't know how and where to setup the ES for Hadoop... Any suggestions on how to fetch (l… --- ## [C# NEST Client Elasticsearch 7.x DeleteIndex](https://discuss.elastic.co/t/c-nest-client-elasticsearch-7-x-deleteindex/207772)
**Author:** [@codyspeck](https://discuss.elastic.co/u/codyspeck)\ **Replies:** 2\ **Last updated:** [November 14, 2019, 8:06pm UTC](https://discuss.elastic.co/t/c-nest-client-elasticsearch-7-x-deleteindex/207772 "2019-11-14T20:06:54Z")
According to the NEST breaking change list in version 7.0.0, the DeleteIndex method is no longer available. Does anyone know if the same behavior (deleting an index or clearing all documents in an index) is able to be pe… --- ## [Is JVM heap size a function of GC algorithm?](https://discuss.elastic.co/t/is-jvm-heap-size-a-function-of-gc-algorithm/207954)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 7:36pm UTC](https://discuss.elastic.co/t/is-jvm-heap-size-a-function-of-gc-algorithm/207954 "2019-11-14T19:36:55Z")
https://discuss.elastic.co/t/jvm-heap-size-too-large/207312 This topic described it all. I understand the reasoning to avoid long stop the world GC. So reducing the RAM will shorten such event. But it would make old … --- ## [Changed grok pattern for ingest pipeline and now grok pattern matching is timing out after 1000ms](https://discuss.elastic.co/t/changed-grok-pattern-for-ingest-pipeline-and-now-grok-pattern-matching-is-timing-out-after-1000ms/207775)
**Author:** [@thethomp](https://discuss.elastic.co/u/thethomp)\ **Replies:** 3\ **Last updated:** [November 14, 2019, 7:31pm UTC](https://discuss.elastic.co/t/changed-grok-pattern-for-ingest-pipeline-and-now-grok-pattern-matching-is-timing-out-after-1000ms/207775 "2019-11-14T19:31:41Z")
Hello, I'm using ingest pipelines to do some grokking and formatting before inserting documents into Elasticsearch, I've been using this grok pattern for months without any issue. Today the format of my logs changed a l… --- ## [Faceted search with aggregations](https://discuss.elastic.co/t/faceted-search-with-aggregations/205135)
**Author:** [@decodeit](https://discuss.elastic.co/u/decodeit)\ **Replies:** 20\ **Last updated:** [November 14, 2019, 6:42pm UTC](https://discuss.elastic.co/t/faceted-search-with-aggregations/205135 "2019-11-14T18:42:47Z")
I am trying to do faceted search with aggregation (which I think is the way to do, suggestions are welcome). so the query below is sending the search term with the aggs. POST events/event/\_search { "query": { "multi\_ma… --- ## [ES 6.4.3 Highlight response has unexpected content for query\_string type of query](https://discuss.elastic.co/t/es-6-4-3-highlight-response-has-unexpected-content-for-query-string-type-of-query/207950)
**Author:** [@amitbyahoo](https://discuss.elastic.co/u/amitbyahoo)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 6:07pm UTC](https://discuss.elastic.co/t/es-6-4-3-highlight-response-has-unexpected-content-for-query-string-type-of-query/207950 "2019-11-14T18:07:23Z")
Hi I was able to get highlighting to work correctly with some sample queries from documentation website. However, for my real queries I am facing a strange problem where the highlight tags are displayed many times over … --- ## [Need to implement a Lifecycle, but I have daily named indicies](https://discuss.elastic.co/t/need-to-implement-a-lifecycle-but-i-have-daily-named-indicies/207945)
**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\ **Replies:** 1\ **Last updated:** [November 14, 2019, 5:55pm UTC](https://discuss.elastic.co/t/need-to-implement-a-lifecycle-but-i-have-daily-named-indicies/207945 "2019-11-14T17:55:00Z")
I hope I'm just not seeing something. I have version 7.4 of the Elastic Stack Logstash creates indices as: output { elasticsearch { action =\> "index" hosts =\> \[ "localhost:9200" \] index =\> "memleak-%{+YYYY.MM.dd}" … --- ## [Ingest only Node and Cold Nodes machine Spec](https://discuss.elastic.co/t/ingest-only-node-and-cold-nodes-machine-spec/207741)
**Author:** [@vsubrama](https://discuss.elastic.co/u/vsubrama)\ **Replies:** 1\ **Last updated:** [November 14, 2019, 5:51pm UTC](https://discuss.elastic.co/t/ingest-only-node-and-cold-nodes-machine-spec/207741 "2019-11-14T17:51:49Z")
We have an Elastic stack cluster now upgraded to 7.4.2 ingesting about 600 GB of data per day running in Hot Warm architecture in our AWS account. We keep data for 90 days. Our Hot nodes are AWS i3en.2x large (8 VCPU, 6… --- ## [Different order gives different results](https://discuss.elastic.co/t/different-order-gives-different-results/207938)
**Author:** [@Swetha\_Mallika\_Guntu](https://discuss.elastic.co/u/Swetha_Mallika_Guntu)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 4:46pm UTC](https://discuss.elastic.co/t/different-order-gives-different-results/207938 "2019-11-14T16:46:53Z")
I have created a customised analyzer which looks like this { 'type': 'custom', 'tokenizer': 'standard', 'filter': \[ 'standard', 'lowercase', 'unique' \] }\\ I am using this analyzer for different fields in my dat… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1092) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1094)