# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1123

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1124

---

## [Elastic search couldnt start after deleting the nodes-HELP! URGENT](https://discuss.elastic.co/t/elastic-search-couldnt-start-after-deleting-the-nodes-help-urgent/203741)

<div class="topic-metadata">

**Author:** [@anusree\_arun](https://discuss.elastic.co/u/anusree_arun)\
**Replies:** 25\
**Last updated:** [October 16, 2019, 4:37pm UTC](https://discuss.elastic.co/t/elastic-search-couldnt-start-after-deleting-the-nodes-help-urgent/203741 "2019-10-16T16:37:23Z")

</div>

systemctl status elasticsearch â elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Wed 2019…

---

## [Paginate SQL queries (in Canvas)](https://discuss.elastic.co/t/paginate-sql-queries-in-canvas/203285)

<div class="topic-metadata">

**Author:** [@daq](https://discuss.elastic.co/u/daq)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 4:33pm UTC](https://discuss.elastic.co/t/paginate-sql-queries-in-canvas/203285 "2019-10-16T16:33:53Z")

</div>

I need to build a Canvas chart from a query that returns ~100K results. I'm building it using an enormously helpful suggestion I found on this forum for grouping counts into columns: filters | essql query="SELECT CO…

---

## [Translate sql query](https://discuss.elastic.co/t/translate-sql-query/203827)

<div class="topic-metadata">

**Author:** [@Masdi](https://discuss.elastic.co/u/Masdi)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 4:28pm UTC](https://discuss.elastic.co/t/translate-sql-query/203827 "2019-10-16T16:28:06Z")

</div>

Hi, Is it possible to translate the month name from a datetime? For example, I would like to get the result in Spanish for this query: SELECT MONTH\_NAME(CAST('2018-02-19T10:23:27Z' AS TIMESTAMP)) AS month;

---

## [Using search\_after with a number larger than a 64bit integer crashes ES in 7.x](https://discuss.elastic.co/t/using-search-after-with-a-number-larger-than-a-64bit-integer-crashes-es-in-7-x/203874)

<div class="topic-metadata">

**Author:** [@fperks](https://discuss.elastic.co/u/fperks)\
**Replies:** 0\
**Last updated:** [October 16, 2019, 3:26pm UTC](https://discuss.elastic.co/t/using-search-after-with-a-number-larger-than-a-64bit-integer-crashes-es-in-7-x/203874 "2019-10-16T15:26:34Z")

</div>

Version: 7.3.1 Java: Java(TM) SE Runtime Environment (build 1.8.0\_201-b09) Passing search\_after parameter with a numeric value larger than 64bit causes Elasticsearch service to terminate. Doing this: curl -X POST \\ …

---

## [Log Http requests in production](https://discuss.elastic.co/t/log-http-requests-in-production/203871)

<div class="topic-metadata">

**Author:** [@jcampos](https://discuss.elastic.co/u/jcampos)\
**Replies:** 0\
**Last updated:** [October 16, 2019, 3:07pm UTC](https://discuss.elastic.co/t/log-http-requests-in-production/203871 "2019-10-16T15:07:39Z")

</div>

I need to capture Http request to Elasticsearch in production. Does anyone know how i can do this?

---

## [Make a count on a list of values](https://discuss.elastic.co/t/make-a-count-on-a-list-of-values/203868)

<div class="topic-metadata">

**Author:** [@Alon\_Goldenberg](https://discuss.elastic.co/u/Alon_Goldenberg)\
**Replies:** 0\
**Last updated:** [October 16, 2019, 2:58pm UTC](https://discuss.elastic.co/t/make-a-count-on-a-list-of-values/203868 "2019-10-16T14:58:24Z")

</div>

Hello, I want to create a query that will count the appearance of every value in a list of values. example: each line represents a different doc: |doc\_id|Name| |1|Sam| |2|Dan| |3|Sam| |4|Sam| |5|Billy| |6|Billy…

---

## [Adding fields to an index has caused a performance hit](https://discuss.elastic.co/t/adding-fields-to-an-index-has-caused-a-performance-hit/203865)

<div class="topic-metadata">

**Author:** [@J-Darv](https://discuss.elastic.co/u/J-Darv)\
**Replies:** 0\
**Last updated:** [October 16, 2019, 2:53pm UTC](https://discuss.elastic.co/t/adding-fields-to-an-index-has-caused-a-performance-hit/203865 "2019-10-16T14:53:29Z")

</div>

Hi all, was hoping someone could offer some advice. Elastic version 5.6 We have an elastic index (pretty large - around 300Gb) that we have recently added some additional fields to, and have seen a performance drop wit…

---

## [Dedicated master nodes, do data nodes need to be considered also?](https://discuss.elastic.co/t/dedicated-master-nodes-do-data-nodes-need-to-be-considered-also/203860)

<div class="topic-metadata">

**Author:** [@Ant](https://discuss.elastic.co/u/Ant)\
**Replies:** 0\
**Last updated:** [October 16, 2019, 2:35pm UTC](https://discuss.elastic.co/t/dedicated-master-nodes-do-data-nodes-need-to-be-considered-also/203860 "2019-10-16T14:35:30Z")

</div>

I know that dedicated master nodes allow for better cluster operations as you get larger node counts and I am currently growing my cluster. I have some fairly low power boxes in storage that I think would make good maste…

---

## [UPTIME bucket limit](https://discuss.elastic.co/t/uptime-bucket-limit/203857)

<div class="topic-metadata">

**Author:** [@Andres\_Man](https://discuss.elastic.co/u/Andres_Man)\
**Replies:** 0\
**Last updated:** [October 16, 2019, 2:32pm UTC](https://discuss.elastic.co/t/uptime-bucket-limit/203857 "2019-10-16T14:32:05Z")

</div>

I installed elastic 7.1 and I have everything working correctly as far as I can tell. I configure heartbeat with ICMP and tcp monitors that run every 5 seconds. When I try to use Uptime to view the status of my monitored…

---

## [Removing items from an ArrayList with script](https://discuss.elastic.co/t/removing-items-from-an-arraylist-with-script/203729)

<div class="topic-metadata">

**Author:** [@Dennis\_Monsewicz](https://discuss.elastic.co/u/Dennis_Monsewicz)\
**Replies:** 3\
**Last updated:** [October 16, 2019, 1:48pm UTC](https://discuss.elastic.co/t/removing-items-from-an-arraylist-with-script/203729 "2019-10-16T13:48:44Z")

</div>

I'm attempting to try to remove items from an ArrayList on a doc, but not having any luck. source: "for(item in params.tags) { if(ctx.\_source.tag\_list.indexOf(item) !== -1) { ctx.\_source.tag\_list.remove(item) } …

---

## [Is there any way to search for only one element from an array?](https://discuss.elastic.co/t/is-there-any-way-to-search-for-only-one-element-from-an-array/203851)

<div class="topic-metadata">

**Author:** [@Nirajan](https://discuss.elastic.co/u/Nirajan)\
**Replies:** 0\
**Last updated:** [October 16, 2019, 1:46pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-search-for-only-one-element-from-an-array/203851 "2019-10-16T13:46:09Z")

</div>

Hello Everyone, I am searching for any suggestions that would get me only one element from an array in Elasticsearch index. I have tried the composite aggregation, nested aggregation and nested query but all of these a…

---

## [Elastic searh Query problem](https://discuss.elastic.co/t/elastic-searh-query-problem/203809)

<div class="topic-metadata">

**Author:** [@Andree\_Tago](https://discuss.elastic.co/u/Andree_Tago)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 1:16pm UTC](https://discuss.elastic.co/t/elastic-searh-query-problem/203809 "2019-10-16T13:16:05Z")

</div>

Hi all i have this query and when i un it i get some result error { "query": { "bool": { "must": \[ { "range": { "timestamp":{"from" : "01/01/2015 00:00:00.0", "to" : "12/01/2015 23:59:59.999" } } } \] } } } B…

---

## [Histogram bucket first and last record](https://discuss.elastic.co/t/histogram-bucket-first-and-last-record/203751)

<div class="topic-metadata">

**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 12:58pm UTC](https://discuss.elastic.co/t/histogram-bucket-first-and-last-record/203751 "2019-10-16T12:58:46Z")

</div>

Hi I am using ES 6.6.0 I have time series cumulative data, i want to do histogram on the data with time being the field and get first and last records in each bucket. How can we do this? One crude way am thinking is, …

---

## [Watcher and Microsoft Teams webhook](https://discuss.elastic.co/t/watcher-and-microsoft-teams-webhook/203189)

<div class="topic-metadata">

**Author:** [@wellerbar](https://discuss.elastic.co/u/wellerbar)\
**Replies:** 11\
**Last updated:** [October 16, 2019, 12:57pm UTC](https://discuss.elastic.co/t/watcher-and-microsoft-teams-webhook/203189 "2019-10-16T12:57:35Z")

</div>

Hi there, I would like to use watcher UI to send messages to a microsoft teams webhook. However, when I send a notification, on my firewall, I find "tcp-rst-from-server". I do not understand why. how could I fix this …

---

## [Showing relevancy in percentage](https://discuss.elastic.co/t/showing-relevancy-in-percentage/203764)

<div class="topic-metadata">

**Author:** [@Rick\_Choo](https://discuss.elastic.co/u/Rick_Choo)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 12:54pm UTC](https://discuss.elastic.co/t/showing-relevancy-in-percentage/203764 "2019-10-16T12:54:58Z")

</div>

Hi may I know how do I show the relevancy of the search result? I understand the search will have some score for the result, however, in order to make sense of the number I was hoping for a best score which I can draw c…

---

## [Watcher Microsoft teams webhook](https://discuss.elastic.co/t/watcher-microsoft-teams-webhook/203811)

<div class="topic-metadata">

**Author:** [@wellerbar](https://discuss.elastic.co/u/wellerbar)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 12:53pm UTC](https://discuss.elastic.co/t/watcher-microsoft-teams-webhook/203811 "2019-10-16T12:53:30Z")

</div>

Hi, I would like to send a notification to a Microsoft Teams webhook but I don't understand why this isn't workin, can someone help me please? Here is my watch : { "trigger": { "schedule": { "interval": "2…

---

## [Too many dynamic script compilations within max](https://discuss.elastic.co/t/too-many-dynamic-script-compilations-within-max/203793)

<div class="topic-metadata">

**Author:** [@rvanegmond](https://discuss.elastic.co/u/rvanegmond)\
**Replies:** 2\
**Last updated:** [October 16, 2019, 12:50pm UTC](https://discuss.elastic.co/t/too-many-dynamic-script-compilations-within-max/203793 "2019-10-16T12:50:58Z")

</div>

I know there are some posts about this but they didn't completely awnser my question. I'm processing millions of data in terms of documents which need to be updated by a "where query" using two fields. The data in the q…

---

## [Elastic no throttling index for shard](https://discuss.elastic.co/t/elastic-no-throttling-index-for-shard/203828)

<div class="topic-metadata">

**Author:** [@Tianji\_Zhao](https://discuss.elastic.co/u/Tianji_Zhao)\
**Replies:** 4\
**Last updated:** [October 16, 2019, 12:21pm UTC](https://discuss.elastic.co/t/elastic-no-throttling-index-for-shard/203828 "2019-10-16T12:21:51Z")

</div>

I use elastic to get information from logstash. With the index's number increase the elastic crash down.The log of elastic is as follow: \[2019-10-16T06:59:50,535\]\[WARN \]\[o.e.m.j.JvmGcMonitorService\] \[chimeo-docker-sin …

---

## [Monitoring view in Kibana with OSS version](https://discuss.elastic.co/t/monitoring-view-in-kibana-with-oss-version/203826)

<div class="topic-metadata">

**Author:** [@Katulus](https://discuss.elastic.co/u/Katulus)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 12:01pm UTC](https://discuss.elastic.co/t/monitoring-view-in-kibana-with-oss-version/203826 "2019-10-16T12:01:25Z")

</div>

Hello, I use OSS version of Elasticsearch 6.8.0 + Kibana and I'm not able to turn on monitoring features. This page - https://www.elastic.co/what-is/open-x-pack - says that "Starting with version 6.3, all of the free X-…

---

## [Load about 1 million document from elastic search in .net application using nest](https://discuss.elastic.co/t/load-about-1-million-document-from-elastic-search-in-net-application-using-nest/201188)

<div class="topic-metadata">

**Author:** [@Irakli](https://discuss.elastic.co/u/Irakli)\
**Replies:** 3\
**Last updated:** [October 16, 2019, 11:40am UTC](https://discuss.elastic.co/t/load-about-1-million-document-from-elastic-search-in-net-application-using-nest/201188 "2019-10-16T11:40:48Z")

</div>

Hi there, I am trying to get about 1.5 million document which includes less then 6 field from elasticsearch index to .net app and it is unreachable, super slow. Is there any way to get such number of documents in real t…

---

## [Upgrade ELK Stack from 5.x -\> 6.5 - Now have stability issues / errors!](https://discuss.elastic.co/t/upgrade-elk-stack-from-5-x-6-5-now-have-stability-issues-errors/203458)

<div class="topic-metadata">

**Author:** [@huowen](https://discuss.elastic.co/u/huowen)\
**Replies:** 7\
**Last updated:** [October 16, 2019, 11:25am UTC](https://discuss.elastic.co/t/upgrade-elk-stack-from-5-x-6-5-now-have-stability-issues-errors/203458 "2019-10-16T11:25:02Z")

</div>

HI all, really would appreciated your help on the following. I have been running an ELK stack very successfully for over 2 years on version 5.x. There was a requirement to upgrade which I have done for all components (El…

---

## [Why can't I use the specified tokenizer query?](https://discuss.elastic.co/t/why-cant-i-use-the-specified-tokenizer-query/203621)

<div class="topic-metadata">

**Author:** [@yanglingqiang](https://discuss.elastic.co/u/yanglingqiang)\
**Replies:** 3\
**Last updated:** [October 16, 2019, 11:22am UTC](https://discuss.elastic.co/t/why-cant-i-use-the-specified-tokenizer-query/203621 "2019-10-16T11:22:13Z")

</div>

I am going to specify a tokenizer query for a field when I query, why is it invalid?

---

## [Object recursion with ES and Kibana](https://discuss.elastic.co/t/object-recursion-with-es-and-kibana/203820)

<div class="topic-metadata">

**Author:** [@klmos](https://discuss.elastic.co/u/klmos)\
**Replies:** 0\
**Last updated:** [October 16, 2019, 11:21am UTC](https://discuss.elastic.co/t/object-recursion-with-es-and-kibana/203820 "2019-10-16T11:21:37Z")

</div>

Hi All! In my application I'm using an activity tree to represent what someone can do. It's looking like this: Whenever someone register their timespend I store the id of the activity they chose. After that in Kib…

---

## [Search query returns empty items after applying index template](https://discuss.elastic.co/t/search-query-returns-empty-items-after-applying-index-template/203810)

<div class="topic-metadata">

**Author:** [@ManuMP](https://discuss.elastic.co/u/ManuMP)\
**Replies:** 0\
**Last updated:** [October 16, 2019, 10:13am UTC](https://discuss.elastic.co/t/search-query-returns-empty-items-after-applying-index-template/203810 "2019-10-16T10:13:01Z")

</div>

I have applied the following index template for changing attribute type of LineNumber for sorting { "index\_patterns": \["elksearch\*"\], "settings": { "number\_of\_shards": 1 }, "mappings": { …

---

## [Moving elk data path to dedicated volume](https://discuss.elastic.co/t/moving-elk-data-path-to-dedicated-volume/203779)

<div class="topic-metadata">

**Author:** [@agiorgi](https://discuss.elastic.co/u/agiorgi)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 10:16am UTC](https://discuss.elastic.co/t/moving-elk-data-path-to-dedicated-volume/203779 "2019-10-16T10:16:05Z")

</div>

Hello everyone, I've been asked to move Elasticsearch's data path from default path, to a new dedicated volume. I still do not have any detail (except that cluster is running on RHEL VMs), but i'm afraid that the volum…

---

## [Xpack security enabling](https://discuss.elastic.co/t/xpack-security-enabling/203797)

<div class="topic-metadata">

**Author:** [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 10:10am UTC](https://discuss.elastic.co/t/xpack-security-enabling/203797 "2019-10-16T10:10:54Z")

</div>

Hello , Is there any helpful tutorial to enable xpack security pack and create users for 6.5 version cluster setup? This feature is no more paid now, as it was before ? Thank You

---

## [Why BulkProcessor retries only on EsRejectedExecutionException?](https://discuss.elastic.co/t/why-bulkprocessor-retries-only-on-esrejectedexecutionexception/203804)

<div class="topic-metadata">

**Author:** [@lee.dongkyu](https://discuss.elastic.co/u/lee.dongkyu)\
**Replies:** 0\
**Last updated:** [October 16, 2019, 9:56am UTC](https://discuss.elastic.co/t/why-bulkprocessor-retries-only-on-esrejectedexecutionexception/203804 "2019-10-16T09:56:18Z")

</div>

I'm using Elasticsearch transport client and it seems BulkProcessor only retries on EsRejectedExecutionException. We're facing a lot of ProcessClusterEventTimeoutException on midnight when our daily indexes should be cre…

---

## [ElasticSearch Suggestion not working](https://discuss.elastic.co/t/elasticsearch-suggestion-not-working/203799)

<div class="topic-metadata">

**Author:** [@shweta.zilpe](https://discuss.elastic.co/u/shweta.zilpe)\
**Replies:** 0\
**Last updated:** [October 16, 2019, 9:33am UTC](https://discuss.elastic.co/t/elasticsearch-suggestion-not-working/203799 "2019-10-16T09:33:51Z")

</div>

Hi, I am trying to add ElasticSearch Suggestion in my response and implementing it using SearchRequestBuilder as:- SearchResponse searchResponse = searchRequestBuilder.execute().actionGet(1m); Query is correct as I tr…

---

## [Unable to Visualize (max/avg) a Long Value](https://discuss.elastic.co/t/unable-to-visualize-max-avg-a-long-value/203387)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 5\
**Last updated:** [October 16, 2019, 9:32am UTC](https://discuss.elastic.co/t/unable-to-visualize-max-avg-a-long-value/203387 "2019-10-16T09:32:59Z")

</div>

I am unable to visualize a long value using any chart type (line, bar...) in Kibana. Only if I choose "Count" do I see my data: Max, Average all empty. Mapping { "msaperf-all": { "mappings": { "d…

---

## [Search data for each date](https://discuss.elastic.co/t/search-data-for-each-date/203233)

<div class="topic-metadata">

**Author:** [@NAL](https://discuss.elastic.co/u/NAL)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 9:05am UTC](https://discuss.elastic.co/t/search-data-for-each-date/203233 "2019-10-16T09:05:41Z")

</div>

Hello, I have somes index with data containing a date field, a geo\_point field and a value field. I develop a method with c# and NEST. It must be able to search values corresponding to a geo point and a date a multip…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1122)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1124)
