# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1112

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1113

---

## [How to send data from my system to remote elasticsearch server](https://discuss.elastic.co/t/how-to-send-data-from-my-system-to-remote-elasticsearch-server/205224)

<div class="topic-metadata">

**Author:** [@bhushanudupa](https://discuss.elastic.co/u/bhushanudupa)\
**Replies:** 0\
**Last updated:** [October 25, 2019, 9:46am UTC](https://discuss.elastic.co/t/how-to-send-data-from-my-system-to-remote-elasticsearch-server/205224 "2019-10-25T09:46:46Z")

</div>

Hi folks, I have installed and setup elasticsearch, kibana and logstash. Now I want to send some data(example: space available, last login etc..,) to elasticsearch with my own fields(Example: space\_available: 1GB and la…

---

## [Elasticsearch does not sort on double field](https://discuss.elastic.co/t/elasticsearch-does-not-sort-on-double-field/205222)

<div class="topic-metadata">

**Author:** [@May](https://discuss.elastic.co/u/May)\
**Replies:** 0\
**Last updated:** [October 25, 2019, 9:44am UTC](https://discuss.elastic.co/t/elasticsearch-does-not-sort-on-double-field/205222 "2019-10-25T09:44:18Z")

</div>

I am querying index in ES using below code def cat\_results\_tmp(response,field): results=\[\] for hit in response\['hits'\]\['hits'\]: result\_tuple = ( hit\["\_source"\]\[field\] ) results.append(result\_tuple) re…

---

## [How to rotate elastic log files using logrotate instead of log4j](https://discuss.elastic.co/t/how-to-rotate-elastic-log-files-using-logrotate-instead-of-log4j/205210)

<div class="topic-metadata">

**Author:** [@nicolai](https://discuss.elastic.co/u/nicolai)\
**Replies:** 0\
**Last updated:** [October 25, 2019, 8:49am UTC](https://discuss.elastic.co/t/how-to-rotate-elastic-log-files-using-logrotate-instead-of-log4j/205210 "2019-10-25T08:49:19Z")

</div>

Hi, This is to answer a question I've been working on this morning and found no good answers for using google. We put our logs into a cloud log solution. We're using a collection agent (fluentd) to slurp all files matc…

---

## [Geo\_shape: Circle query not supported](https://discuss.elastic.co/t/geo-shape-circle-query-not-supported/203436)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 2\
**Last updated:** [October 25, 2019, 9:00am UTC](https://discuss.elastic.co/t/geo-shape-circle-query-not-supported/203436 "2019-10-25T09:00:27Z")

</div>

I have a field indexed using below: "geometry": { "type": "geo\_shape" } Above geometry is a LineString. I want to see if my spatial query i.e. a circle query intersects this line for given radius. "filter": { …

---

## [Indexes were missing after ES upgrade from 6.3 to 6.8](https://discuss.elastic.co/t/indexes-were-missing-after-es-upgrade-from-6-3-to-6-8/205203)

<div class="topic-metadata">

**Author:** [@Rosales\_Joebert](https://discuss.elastic.co/u/Rosales_Joebert)\
**Replies:** 0\
**Last updated:** [October 25, 2019, 8:09am UTC](https://discuss.elastic.co/t/indexes-were-missing-after-es-upgrade-from-6-3-to-6-8/205203 "2019-10-25T08:09:41Z")

</div>

i am currently upgrading my elasticsearch helm deployment from 6.3 to 6.8. After changing the image, all of my indices were gone, but if I return it to 6.3, the nodes are back there. Any help would be very much appreciat…

---

## [Setting passwords of builtin users to crypts](https://discuss.elastic.co/t/setting-passwords-of-builtin-users-to-crypts/201406)

<div class="topic-metadata">

**Author:** [@nicolai](https://discuss.elastic.co/u/nicolai)\
**Replies:** 2\
**Last updated:** [October 25, 2019, 8:03am UTC](https://discuss.elastic.co/t/setting-passwords-of-builtin-users-to-crypts/201406 "2019-10-25T08:03:19Z")

</div>

I'm working on chef recipes to install elasticsearch 7 (7.2.1) with all kinds of security enabled. I've gotten it to make self signed certificates. I've run the elasticsearch-setup-passwords to set the passwords of the s…

---

## [Accessing SQL API from http(s)](https://discuss.elastic.co/t/accessing-sql-api-from-http-s/205047)

<div class="topic-metadata">

**Author:** [@madhusoodanan](https://discuss.elastic.co/u/madhusoodanan)\
**Replies:** 1\
**Last updated:** [October 25, 2019, 7:30am UTC](https://discuss.elastic.co/t/accessing-sql-api-from-http-s/205047 "2019-10-25T07:30:38Z")

</div>

wonder if there are any way to call ES SQL API, say like http://localhost:9200/\_sql?format=json&source={“query”: “SELECT 1” } similer to http://localhost:9200//hockey/\_search?q=johnny This gives error. "source and so…

---

## [Templated Roles with Open ID Realm](https://discuss.elastic.co/t/templated-roles-with-open-id-realm/205191)

<div class="topic-metadata">

**Author:** [@stongia](https://discuss.elastic.co/u/stongia)\
**Replies:** 2\
**Last updated:** [October 25, 2019, 6:41am UTC](https://discuss.elastic.co/t/templated-roles-with-open-id-realm/205191 "2019-10-25T06:41:25Z")

</div>

I am trying to create the templated role, where I want to use the user metadata info to provide user with role access. I am using the document available at https://www.elastic.co/blog/attribute-based-access-control-with…

---

## [Elasticsearch master node having high memory pressure](https://discuss.elastic.co/t/elasticsearch-master-node-having-high-memory-pressure/205079)

<div class="topic-metadata">

**Author:** [@Komal\_Agarwal](https://discuss.elastic.co/u/Komal_Agarwal)\
**Replies:** 4\
**Last updated:** [October 25, 2019, 6:16am UTC](https://discuss.elastic.co/t/elasticsearch-master-node-having-high-memory-pressure/205079 "2019-10-25T06:16:17Z")

</div>

We have our elastic cluster set up in 3 zones right now. The current setup is: 6 data nodes - 2 in each zone - having 58GB RAM each 3 master nodes - 1 in each zone - having 8GB RAM each We are noticing that a master n…

---

## [Failed with result 'exit-code'](https://discuss.elastic.co/t/failed-with-result-exit-code/204957)

<div class="topic-metadata">

**Author:** [@Pulko](https://discuss.elastic.co/u/Pulko)\
**Replies:** 1\
**Last updated:** [October 25, 2019, 6:11am UTC](https://discuss.elastic.co/t/failed-with-result-exit-code/204957 "2019-10-25T06:11:39Z")

</div>

Hi guys, Thx for having me here. I'm a newbie :slight\_smile: I need your help : My company would like to use ActiveCollab as a project management tool. AC requires ElasticSearch (but not supporting the 7.x version ye…

---

## [Elasticsearch sort works on and off](https://discuss.elastic.co/t/elasticsearch-sort-works-on-and-off/205188)

<div class="topic-metadata">

**Author:** [@May](https://discuss.elastic.co/u/May)\
**Replies:** 0\
**Last updated:** [October 25, 2019, 6:03am UTC](https://discuss.elastic.co/t/elasticsearch-sort-works-on-and-off/205188 "2019-10-25T06:03:31Z")

</div>

I am querying index in ES using below code def cat\_results\_tmp(response): results=\[\] for hit in response\['hits'\]\['hits'\]: result\_tuple = (hit\["\_source"\]\["fieldA"\],hit\["\_source"\]\["fieldB"\] ) results.append(re…

---

## [Maximum shards open 3000；es 7.3.0](https://discuss.elastic.co/t/maximum-shards-open-3000-es-7-3-0/205167)

<div class="topic-metadata">

**Author:** [@xyx](https://discuss.elastic.co/u/xyx)\
**Replies:** 2\
**Last updated:** [October 25, 2019, 6:03am UTC](https://discuss.elastic.co/t/maximum-shards-open-3000-es-7-3-0/205167 "2019-10-25T06:03:15Z")

</div>

today，my cluster has a warning ：maximum shards open 3000； How should I do？

---

## [Jan Ramón is indexed as JanRamón](https://discuss.elastic.co/t/jan-ramon-is-indexed-as-janramon/205184)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 2\
**Last updated:** [October 25, 2019, 5:44am UTC](https://discuss.elastic.co/t/jan-ramon-is-indexed-as-janramon/205184 "2019-10-25T05:44:18Z")

</div>

Hi all, I noticed that Jan Ramón (any diacritic values in general) is indexed as JanRamón by omitting the space. how do i avoid this? This the filter i used. "filter": { "my\_ascii\_folding": { "type": "asciifolding", "…

---

## [Getting the Warning message as master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster, and this node must discover master-eligible nodes](https://discuss.elastic.co/t/getting-the-warning-message-as-master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-and-this-node-must-discover-master-eligible-nodes/204815)

<div class="topic-metadata">

**Author:** [@Ozil](https://discuss.elastic.co/u/Ozil)\
**Replies:** 10\
**Last updated:** [October 25, 2019, 5:07am UTC](https://discuss.elastic.co/t/getting-the-warning-message-as-master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-and-this-node-must-discover-master-eligible-nodes/204815 "2019-10-25T05:07:29Z")

</div>

I'm trying to create Elasticsearch cluster with 9 nodes. i'm working on Elastic 7.3.2 version .i have 3 master only nodes , 1 voting only nodes, rest are date node,cordinate node and ingest node. i am getting the error a…

---

## [Elastic Index not rolling over on Elastic Cloud 7.4](https://discuss.elastic.co/t/elastic-index-not-rolling-over-on-elastic-cloud-7-4/205181)

<div class="topic-metadata">

**Author:** [@necrolingus](https://discuss.elastic.co/u/necrolingus)\
**Replies:** 0\
**Last updated:** [October 25, 2019, 4:48am UTC](https://discuss.elastic.co/t/elastic-index-not-rolling-over-on-elastic-cloud-7-4/205181 "2019-10-25T04:48:30Z")

</div>

Good day M index (filebeat-\*) in Elastic Cloud 7.4 is not rolling over. The index has a policy assigned and the policy is set to roll over at 5GB or 15 days. When I run this query, the output below says 50GB or 30 …

---

## [Concerns about Dynamic Field Mapping](https://discuss.elastic.co/t/concerns-about-dynamic-field-mapping/205175)

<div class="topic-metadata">

**Author:** [@ycydsxy](https://discuss.elastic.co/u/ycydsxy)\
**Replies:** 0\
**Last updated:** [October 25, 2019, 3:42am UTC](https://discuss.elastic.co/t/concerns-about-dynamic-field-mapping/205175 "2019-10-25T03:42:10Z")

</div>

I'm new to Elastic Search and I read about the feature of dynamic field mapping at https://www.elastic.co/guide/en/elasticsearch/reference/6.8/dynamic-field-mapping.html. It's not possible to change an exist field mappi…

---

## [Unable to elect master node in ecs elastic cluster](https://discuss.elastic.co/t/unable-to-elect-master-node-in-ecs-elastic-cluster/205064)

<div class="topic-metadata">

**Author:** [@devops1](https://discuss.elastic.co/u/devops1)\
**Replies:** 1\
**Last updated:** [October 25, 2019, 3:42am UTC](https://discuss.elastic.co/t/unable-to-elect-master-node-in-ecs-elastic-cluster/205064 "2019-10-25T03:42:02Z")

</div>

We have 4 node elasticsearch ecs cluster. now problem is two nodes keep restarting elastic search containers and other two stable containers. but unable to get masternode. bash-4.1# cat /usr/share/elasticsearch/config/…

---

## [ES fails to start on reboot with systemctl but starts fine manually](https://discuss.elastic.co/t/es-fails-to-start-on-reboot-with-systemctl-but-starts-fine-manually/205174)

<div class="topic-metadata">

**Author:** [@Quin\_Tran](https://discuss.elastic.co/u/Quin_Tran)\
**Replies:** 0\
**Last updated:** [October 25, 2019, 3:39am UTC](https://discuss.elastic.co/t/es-fails-to-start-on-reboot-with-systemctl-but-starts-fine-manually/205174 "2019-10-25T03:39:57Z")

</div>

So I had ES installed in local directory, and I had indices there. I decided to use deb package and installed it system wide (running under elasticsearch user) Then I went and found the data directory of new instance. I…

---

## [Finding nearest timestamps](https://discuss.elastic.co/t/finding-nearest-timestamps/205171)

<div class="topic-metadata">

**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\
**Replies:** 0\
**Last updated:** [October 25, 2019, 3:24am UTC](https://discuss.elastic.co/t/finding-nearest-timestamps/205171 "2019-10-25T03:24:38Z")

</div>

Is there a way to find a nearest timestamp? Let's say I'm looking for the nearest registry (both before and after) 2019-10-09T19:02:22.000Z At first I was tackling this problem like I had to find this exact timestamp... …

---

## [Rollover only when logstash finished its job successfully](https://discuss.elastic.co/t/rollover-only-when-logstash-finished-its-job-successfully/205172)

<div class="topic-metadata">

**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\
**Replies:** 0\
**Last updated:** [October 25, 2019, 3:26am UTC](https://discuss.elastic.co/t/rollover-only-when-logstash-finished-its-job-successfully/205172 "2019-10-25T03:26:40Z")

</div>

Is there any way how to rollover an index only when logstash finished its scheduled job? Are there any notification from elasticsearch when logstash job finished indexing?

---

## [Parallel execution of bulk request](https://discuss.elastic.co/t/parallel-execution-of-bulk-request/205030)

<div class="topic-metadata">

**Author:** [@nishant.saini](https://discuss.elastic.co/u/nishant.saini)\
**Replies:** 2\
**Last updated:** [October 25, 2019, 3:03am UTC](https://discuss.elastic.co/t/parallel-execution-of-bulk-request/205030 "2019-10-25T03:03:44Z")

</div>

As it is known that the order of execution of requests in a bulk request is not guaranteed, reason being the execution can happen on different nodes. But I'm curious to know what would happen in a case when the bulk requ…

---

## [SSL Certificates Installing in Elasticsearch](https://discuss.elastic.co/t/ssl-certificates-installing-in-elasticsearch/204953)

<div class="topic-metadata">

**Author:** [@Sreekanth3](https://discuss.elastic.co/u/Sreekanth3)\
**Replies:** 3\
**Last updated:** [October 24, 2019, 11:40pm UTC](https://discuss.elastic.co/t/ssl-certificates-installing-in-elasticsearch/204953 "2019-10-24T23:40:43Z")

</div>

I want to install SSL certificates in my elastic search and kibana to make them secure. SSL installation setps link This link i have followed and when i start elastic search . When i commented that pki setting in yaml…

---

## [Timestamp field in a document throws an error when updating the time but passes on create](https://discuss.elastic.co/t/timestamp-field-in-a-document-throws-an-error-when-updating-the-time-but-passes-on-create/205160)

<div class="topic-metadata">

**Author:** [@afzal](https://discuss.elastic.co/u/afzal)\
**Replies:** 0\
**Last updated:** [October 24, 2019, 10:01pm UTC](https://discuss.elastic.co/t/timestamp-field-in-a-document-throws-an-error-when-updating-the-time-but-passes-on-create/205160 "2019-10-24T22:01:23Z")

</div>

I have a spring boot application which talks to elastic search db. My entity looks similar to this: @Data @NoArgsConstructor @AllArgsConstructor @ToString @Document(indexName = "preferences", type = "preference") publ…

---

## [Accuracy/guarantee around refresh\_interval](https://discuss.elastic.co/t/accuracy-guarantee-around-refresh-interval/205159)

<div class="topic-metadata">

**Author:** [@loren](https://discuss.elastic.co/u/loren)\
**Replies:** 0\
**Last updated:** [October 24, 2019, 9:47pm UTC](https://discuss.elastic.co/t/accuracy-guarantee-around-refresh-interval/205159 "2019-10-24T21:47:42Z")

</div>

I have an ES7.2 index set up with a refresh\_interval of 30s. Docs get inserted, a notification is sent to a SQS queue with a 31 sec delivery delay, and then a job reads from the queue and does a search against that index…

---

## [Monthly indices with size-based rollover, alias questions](https://discuss.elastic.co/t/monthly-indices-with-size-based-rollover-alias-questions/205117)

<div class="topic-metadata">

**Author:** [@sharvey](https://discuss.elastic.co/u/sharvey)\
**Replies:** 0\
**Last updated:** [October 24, 2019, 4:00pm UTC](https://discuss.elastic.co/t/monthly-indices-with-size-based-rollover-alias-questions/205117 "2019-10-24T16:00:43Z")

</div>

Hello, I am attempting to setup index lifecycle policies for monthly log indexes. Currently, I have Logstash indexing to multiple monthly indices based on log type. The pattern is as follows: index =\> "logtype1-%{+YY…

---

## [ES 7.4.0 "lifecycle" configuration via Helm chart](https://discuss.elastic.co/t/es-7-4-0-lifecycle-configuration-via-helm-chart/204707)

<div class="topic-metadata">

**Author:** [@cuzzo333](https://discuss.elastic.co/u/cuzzo333)\
**Replies:** 1\
**Last updated:** [October 24, 2019, 9:14pm UTC](https://discuss.elastic.co/t/es-7-4-0-lifecycle-configuration-via-helm-chart/204707 "2019-10-24T21:14:48Z")

</div>

We've been managing a limitation we've found with Elasticsearch and Kibana when deployed on a Kubernetes cluster using Helm charts in that there doesn't seem to be any way to configure ILM programatically. Instead once …

---

## [What are the ways to migrate indices from 1.x to 7.x?](https://discuss.elastic.co/t/what-are-the-ways-to-migrate-indices-from-1-x-to-7-x/204848)

<div class="topic-metadata">

**Author:** [@sanjeevpande](https://discuss.elastic.co/u/sanjeevpande)\
**Replies:** 1\
**Last updated:** [October 24, 2019, 9:10pm UTC](https://discuss.elastic.co/t/what-are-the-ways-to-migrate-indices-from-1-x-to-7-x/204848 "2019-10-24T21:10:06Z")

</div>

We have an old version of elasticsearch(1.7) and we are trying to migrate that to version 7.2 Is there a way to migrate the current 1.7 indices to 7.x indices ?

---

## [High Level Rest Client - Setting Custom Tokenizer take 2](https://discuss.elastic.co/t/high-level-rest-client-setting-custom-tokenizer-take-2/205153)

<div class="topic-metadata">

**Author:** [@linus](https://discuss.elastic.co/u/linus)\
**Replies:** 0\
**Last updated:** [October 24, 2019, 8:55pm UTC](https://discuss.elastic.co/t/high-level-rest-client-setting-custom-tokenizer-take-2/205153 "2019-10-24T20:55:06Z")

</div>

Hi, I previously asked about this but it looks like the last thread was closed. I basically tried to setup a custom tokenizer on my index using the High Level Rest Client with the following: CreateIndexRequest createR…

---

## [Recovering from a clusterFormationFailure](https://discuss.elastic.co/t/recovering-from-a-clusterformationfailure/205142)

<div class="topic-metadata">

**Author:** [@sentient](https://discuss.elastic.co/u/sentient)\
**Replies:** 4\
**Last updated:** [October 24, 2019, 8:52pm UTC](https://discuss.elastic.co/t/recovering-from-a-clusterformationfailure/205142 "2019-10-24T20:52:56Z")

</div>

I'm on version 7.1.1 background: I was trimming down the cluster for 11 to 5 nodes. I made sure all data was moved to 5 nodes. I took the empty nodes out. But I might have made a mistake when I set the flag "discover…

---

## [Elasticsearch - Result order](https://discuss.elastic.co/t/elasticsearch-result-order/205151)

<div class="topic-metadata">

**Author:** [@anand1](https://discuss.elastic.co/u/anand1)\
**Replies:** 0\
**Last updated:** [October 24, 2019, 8:47pm UTC](https://discuss.elastic.co/t/elasticsearch-result-order/205151 "2019-10-24T20:47:25Z")

</div>

Hi All, i have created an index and have ingested around 250K documents to this index. Every document has 40 to 50 fields. { "query": { "bool": { "must": \[ { "multi\_match": { "query": "search keyw…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1111)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1113)
