# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1139

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1140

---

## [Difference between Basic License and Elastic license](https://discuss.elastic.co/t/difference-between-basic-license-and-elastic-license/201618)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 4\
**Last updated:** [September 30, 2019, 5:06pm UTC](https://discuss.elastic.co/t/difference-between-basic-license-and-elastic-license/201618 "2019-09-30T17:06:57Z")

</div>

Hi all, I am clear about Apache 2.0 and Elastic license but I would like to know the difference between these two license . Thanks

---

## [Can we use the free ElasticSearch encryption for production environments?](https://discuss.elastic.co/t/can-we-use-the-free-elasticsearch-encryption-for-production-environments/201678)

<div class="topic-metadata">

**Author:** [@strouja](https://discuss.elastic.co/u/strouja)\
**Replies:** 3\
**Last updated:** [September 30, 2019, 4:58pm UTC](https://discuss.elastic.co/t/can-we-use-the-free-elasticsearch-encryption-for-production-environments/201678 "2019-09-30T16:58:06Z")

</div>

Hi I read this "Elasticsearch now includes free security features by default, which will help ensure you don’t need to run an unprotected cluster." Which is in in https://www.elastic.co/blog/dear-search-guard-users We…

---

## [ILM not working after licence expires](https://discuss.elastic.co/t/ilm-not-working-after-licence-expires/199646)

<div class="topic-metadata">

**Author:** [@Mesmer](https://discuss.elastic.co/u/Mesmer)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 3:53pm UTC](https://discuss.elastic.co/t/ilm-not-working-after-licence-expires/199646 "2019-09-30T15:53:44Z")

</div>

After trying out Machine Learning trial licence i notice that Index Lifecycle Management is no longer working. The error i get is 403: Forbidden. You cannot use Index Management because your trial license has expired. …

---

## [How to use search\_after in Elastic High Level Rest Client for pagination](https://discuss.elastic.co/t/how-to-use-search-after-in-elastic-high-level-rest-client-for-pagination/201656)

<div class="topic-metadata">

**Author:** [@apachunuri](https://discuss.elastic.co/u/apachunuri)\
**Replies:** 1\
**Last updated:** [September 30, 2019, 3:45pm UTC](https://discuss.elastic.co/t/how-to-use-search-after-in-elastic-high-level-rest-client-for-pagination/201656 "2019-09-30T15:45:41Z")

</div>

Hi, I am using elastic high level rest client 6.4.3 and i cant find a way to use the search\_after functionality using this library. For more details, i have asked my question here https://stackoverflow.com/questions/58…

---

## [Any way to get ingest node stats/metrics/visibility?](https://discuss.elastic.co/t/any-way-to-get-ingest-node-stats-metrics-visibility/201548)

<div class="topic-metadata">

**Author:** [@tadgh](https://discuss.elastic.co/u/tadgh)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 3:45pm UTC](https://discuss.elastic.co/t/any-way-to-get-ingest-node-stats-metrics-visibility/201548 "2019-09-30T15:45:17Z")

</div>

Hey there, I was just wondering if there is any way to get throughput/failure metrics to ingest pipelines. I don't know of any way to query this currently. Stuff like: How many documents has this pipeline ingested How…

---

## [Error while installing X-pack on windows](https://discuss.elastic.co/t/error-while-installing-x-pack-on-windows/201310)

<div class="topic-metadata">

**Author:** [@humza-cyber](https://discuss.elastic.co/u/humza-cyber)\
**Replies:** 5\
**Last updated:** [September 30, 2019, 2:14pm UTC](https://discuss.elastic.co/t/error-while-installing-x-pack-on-windows/201310 "2019-09-30T14:14:13Z")

</div>

I have elastic 5.5.0, downloaded in zip format, on Windows. I'm trying to install X-pack 5.5.3. As per Elastic support matrix it is compatible but getting an error will installing it. Here is the error log C:\\elasticse…

---

## [Aggregating and searching data from only the latest records of an identifier](https://discuss.elastic.co/t/aggregating-and-searching-data-from-only-the-latest-records-of-an-identifier/199703)

<div class="topic-metadata">

**Author:** [@yc2019](https://discuss.elastic.co/u/yc2019)\
**Replies:** 1\
**Last updated:** [September 30, 2019, 1:38pm UTC](https://discuss.elastic.co/t/aggregating-and-searching-data-from-only-the-latest-records-of-an-identifier/199703 "2019-09-30T13:38:29Z")

</div>

{'name': 'student1', 'date': '2019-03-12', 'grade': 3} {'name': 'student2', 'date': '2019-03-12', 'grade': 4} {'name': 'student3', 'date': '2019-03-12', 'grade': 5} {'name': 'student4', 'date': '2019-03-12', 'grade': 4} …

---

## [Metrics aggregation query](https://discuss.elastic.co/t/metrics-aggregation-query/201596)

<div class="topic-metadata">

**Author:** [@rj23495](https://discuss.elastic.co/u/rj23495)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 1:25pm UTC](https://discuss.elastic.co/t/metrics-aggregation-query/201596 "2019-09-30T13:25:50Z")

</div>

Hi, I have an ELK pipeline to read logs and capture metrics, now i am unable to figure out the following statement or query the datapoints for the ELK watcher, metric\_x \>= 500 for 5 datapoints within 5 minutes with sta…

---

## [Understanding watermarks](https://discuss.elastic.co/t/understanding-watermarks/201624)

<div class="topic-metadata">

**Author:** [@AvivCohn](https://discuss.elastic.co/u/AvivCohn)\
**Replies:** 5\
**Last updated:** [September 30, 2019, 1:23pm UTC](https://discuss.elastic.co/t/understanding-watermarks/201624 "2019-09-30T13:23:15Z")

</div>

Hi, I understand (and please correct me if I'm wrong ), that: When a node reaches low disk watermark, shards will no longer be allocated on it. And when a node reaches high disk watermark, shards will be attempted to …

---

## [Elastic search Group by count for particular field](https://discuss.elastic.co/t/elastic-search-group-by-count-for-particular-field/201644)

<div class="topic-metadata">

**Author:** [@tripti\_tiwari](https://discuss.elastic.co/u/tripti_tiwari)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 1:10pm UTC](https://discuss.elastic.co/t/elastic-search-group-by-count-for-particular-field/201644 "2019-09-30T13:10:17Z")

</div>

I have a elastic search index with following documents { "id":1 "mainid ": "497940311988134801282012-04-10 ", } { "id":2 "mainid ": "4979…

---

## [Failed to execute the Index](https://discuss.elastic.co/t/failed-to-execute-the-index/201459)

<div class="topic-metadata">

**Author:** [@Sudharsankotti](https://discuss.elastic.co/u/Sudharsankotti)\
**Replies:** 1\
**Last updated:** [September 30, 2019, 12:31pm UTC](https://discuss.elastic.co/t/failed-to-execute-the-index/201459 "2019-09-30T12:31:52Z")

</div>

We are getting this below error when every we try to reindex . application.log.2019-09-25:\[2019-09-25 05:51:09,317\]\[DEBUG\]\[action.index \] \[atlspres1\] failed to execute \[index {\[partner\_location\]\[com.tuo.cust…

---

## [APM AGENT INSTALL](https://discuss.elastic.co/t/apm-agent-install/201467)

<div class="topic-metadata">

**Author:** [@fefo69](https://discuss.elastic.co/u/fefo69)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 12:28pm UTC](https://discuss.elastic.co/t/apm-agent-install/201467 "2019-09-30T12:28:52Z")

</div>

Dear all, Im trying to setup the standalone method mentioned in elastic site, but the file is not available. In elastic site: https://www.elastic.co/guide/en/apm/agent/java/current/setup-attach-cli.html Refers to down…

---

## [How to debug when the search result doesn't return any highlight objects?](https://discuss.elastic.co/t/how-to-debug-when-the-search-result-doesnt-return-any-highlight-objects/201472)

<div class="topic-metadata">

**Author:** [@apraditya](https://discuss.elastic.co/u/apraditya)\
**Replies:** 1\
**Last updated:** [September 30, 2019, 12:27pm UTC](https://discuss.elastic.co/t/how-to-debug-when-the-search-result-doesnt-return-any-highlight-objects/201472 "2019-09-30T12:27:52Z")

</div>

I have the following search structure payload GET es\_index1,es\_index2/\_search?pretty { "query": { "function\_score": { } }, "highlight": { "fields": { "summary.analyzed": {}, "detail.analyze…

---

## [Failed to find metadata for existing index after node restart](https://discuss.elastic.co/t/failed-to-find-metadata-for-existing-index-after-node-restart/191507)

<div class="topic-metadata">

**Author:** [@Vertigo](https://discuss.elastic.co/u/Vertigo)\
**Replies:** 5\
**Last updated:** [September 30, 2019, 12:25pm UTC](https://discuss.elastic.co/t/failed-to-find-metadata-for-existing-index-after-node-restart/191507 "2019-09-30T12:25:08Z")

</div>

Recently we upgraded from 6.7.1 to 7.2.0. After the upgrade, if a node leaves the cluster it sometimes runs into the below error. The only way we have found to fix this issue is delete the data directly and lose any data…

---

## [Elasticsearch status show faild](https://discuss.elastic.co/t/elasticsearch-status-show-faild/201590)

<div class="topic-metadata">

**Author:** [@ask664](https://discuss.elastic.co/u/ask664)\
**Replies:** 1\
**Last updated:** [September 30, 2019, 12:24pm UTC](https://discuss.elastic.co/t/elasticsearch-status-show-faild/201590 "2019-09-30T12:24:18Z")

</div>

● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Mon 2019-09-30 13:32:10 IST; 14s ago Doc…

---

## [Fuzzy contains on wild card fields](https://discuss.elastic.co/t/fuzzy-contains-on-wild-card-fields/201633)

<div class="topic-metadata">

**Author:** [@tiptobi](https://discuss.elastic.co/u/tiptobi)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 12:18pm UTC](https://discuss.elastic.co/t/fuzzy-contains-on-wild-card-fields/201633 "2019-09-30T12:18:36Z")

</div>

Hi guys, I'm struggling to do a "fuzzy contains" search on fields with wildcards. The index looks like: "property": { "title": { "\_en": "sample movie", "\_fr": "exemple" } My first try was sth. like "fuzzy": { "…

---

## [Index Lifecycle Policies and existing index](https://discuss.elastic.co/t/index-lifecycle-policies-and-existing-index/201607)

<div class="topic-metadata">

**Author:** [@L33T](https://discuss.elastic.co/u/L33T)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 9:24am UTC](https://discuss.elastic.co/t/index-lifecycle-policies-and-existing-index/201607 "2019-09-30T09:24:43Z")

</div>

Hi, I have a rather large index that id like to be split daily. I have setup the lifecycle policy but as the index was already in commission the ILP wont kick in. How do i get ingest data to start on a new index with th…

---

## [Watcher: alert when new value seen](https://discuss.elastic.co/t/watcher-alert-when-new-value-seen/201302)

<div class="topic-metadata">

**Author:** [@jusmitch](https://discuss.elastic.co/u/jusmitch)\
**Replies:** 1\
**Last updated:** [September 30, 2019, 11:59am UTC](https://discuss.elastic.co/t/watcher-alert-when-new-value-seen/201302 "2019-09-30T11:59:10Z")

</div>

There's an elastalert feature that I currently depend on, and I'm curious if there's a way to do it with Watcher. Elastalert can alert when a new value has been seen. For instance, it could alert when a new IP address sh…

---

## [Elastic Search Query DSL Getting full search result](https://discuss.elastic.co/t/elastic-search-query-dsl-getting-full-search-result/201625)

<div class="topic-metadata">

**Author:** [@vivek\_t](https://discuss.elastic.co/u/vivek_t)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 11:44am UTC](https://discuss.elastic.co/t/elastic-search-query-dsl-getting-full-search-result/201625 "2019-09-30T11:44:29Z")

</div>

Hi Team, I am trying to search using queryDSL for the below condition { "size" : 1000, "min\_score": 1, "query": { "bool": { "must": { "bool" : { "should": \[ { "match": { "field1": "X" }}, { "match": { "field1":…

---

## [Elastic Search Auto completion return only the first match prefix in completion suggest field input](https://discuss.elastic.co/t/elastic-search-auto-completion-return-only-the-first-match-prefix-in-completion-suggest-field-input/201611)

<div class="topic-metadata">

**Author:** [@Muhamad\_Eissa](https://discuss.elastic.co/u/Muhamad_Eissa)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 10:10am UTC](https://discuss.elastic.co/t/elastic-search-auto-completion-return-only-the-first-match-prefix-in-completion-suggest-field-input/201611 "2019-09-30T10:10:18Z")

</div>

I tried to use the completion suggester feature of elastic but when i fill the suggest input field with words with the same prefix it return only one of them. for example a sample of my document suggest field "msSugges…

---

## [Count distinct by date](https://discuss.elastic.co/t/count-distinct-by-date/200845)

<div class="topic-metadata">

**Author:** [@Quang\_D\_Tr\_n](https://discuss.elastic.co/u/Quang_D_Tr_n)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 9:16am UTC](https://discuss.elastic.co/t/count-distinct-by-date/200845 "2019-09-30T09:16:35Z")

</div>

I am trying to count distinct date in a field so I followed the cardinality aggregation to do it but it failed to return the expected result, any suggestion on what I am doing wrong please? { "query": { "bool": { "fi…

---

## [How to use size API in composite aggregation for unique terms](https://discuss.elastic.co/t/how-to-use-size-api-in-composite-aggregation-for-unique-terms/201587)

<div class="topic-metadata">

**Author:** [@Sakthivanan](https://discuss.elastic.co/u/Sakthivanan)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 7:58am UTC](https://discuss.elastic.co/t/how-to-use-size-api-in-composite-aggregation-for-unique-terms/201587 "2019-09-30T07:58:29Z")

</div>

GET teacher\_dashboard\_student\_kpi\_master\_index/\_search { "size": 0, "query": { "bool": { "filter": \[ \], "must": \[ \] } }, "aggs": { "my\_buckets": { "composite": { "size": 2, "sources": \[ { "school\_year": …

---

## [How to export index based on hour range?](https://discuss.elastic.co/t/how-to-export-index-based-on-hour-range/201583)

<div class="topic-metadata">

**Author:** [@Bob94](https://discuss.elastic.co/u/Bob94)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 7:11am UTC](https://discuss.elastic.co/t/how-to-export-index-based-on-hour-range/201583 "2019-09-30T07:11:52Z")

</div>

Hi, im try to do index export based on hour using elasticdump..is this available ? Thanks and any help is highly appreciated

---

## [Aggregation, group by and histogram in a single query for nested fields](https://discuss.elastic.co/t/aggregation-group-by-and-histogram-in-a-single-query-for-nested-fields/201578)

<div class="topic-metadata">

**Author:** [@Yamuna\_Mallikarjun](https://discuss.elastic.co/u/Yamuna_Mallikarjun)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 6:36am UTC](https://discuss.elastic.co/t/aggregation-group-by-and-histogram-in-a-single-query-for-nested-fields/201578 "2019-09-30T06:36:13Z")

</div>

Query: { "size": 0, "query": { "bool": { "must": \[ { "range": { "timestamp": { "from": 1568110120010, "to": 1569824176000, "include\_lower": true, "include\_up…

---

## [Using keystore in curator](https://discuss.elastic.co/t/using-keystore-in-curator/200610)

<div class="topic-metadata">

**Author:** [@cowensel](https://discuss.elastic.co/u/cowensel)\
**Replies:** 4\
**Last updated:** [September 30, 2019, 6:21am UTC](https://discuss.elastic.co/t/using-keystore-in-curator/200610 "2019-09-30T06:21:10Z")

</div>

Hi There, Does anyone use Curator where the username and password are stored in a keystore rather than being plain text in the config file. I need to try and avoid passwords in plain text in configuration files. Any su…

---

## [Not seeing any exported fields for MySQL logs](https://discuss.elastic.co/t/not-seeing-any-exported-fields-for-mysql-logs/201561)

<div class="topic-metadata">

**Author:** [@ashadp](https://discuss.elastic.co/u/ashadp)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 3:56am UTC](https://discuss.elastic.co/t/not-seeing-any-exported-fields-for-mysql-logs/201561 "2019-09-30T03:56:45Z")

</div>

I am using following setup to ingest MySQL logs . Filebeat -\> Logstash -\> Elasticsearch -\> Kibana For filebeat, I have enabled mysql module and specified Error and Slowlog path locations. After creating index in Kiban…

---

## [Elasticsearch Percolate with 6.x](https://discuss.elastic.co/t/elasticsearch-percolate-with-6-x/201552)

<div class="topic-metadata">

**Author:** [@Indu\_Nallithodi](https://discuss.elastic.co/u/Indu_Nallithodi)\
**Replies:** 0\
**Last updated:** [September 30, 2019, 12:33am UTC](https://discuss.elastic.co/t/elasticsearch-percolate-with-6-x/201552 "2019-09-30T00:33:00Z")

</div>

The 6.x doco says document\_type is deprecated for Percolate (https://www.elastic.co/guide/en/elasticsearch/reference/6.0/breaking\_60\_search\_changes.html) The percolate query’s document\_type has been deprecated. Fro…

---

## [All shards failed for phase error in elastic](https://discuss.elastic.co/t/all-shards-failed-for-phase-error-in-elastic/201527)

<div class="topic-metadata">

**Author:** [@Behzad\_Rezaie](https://discuss.elastic.co/u/Behzad_Rezaie)\
**Replies:** 1\
**Last updated:** [September 29, 2019, 11:46am UTC](https://discuss.elastic.co/t/all-shards-failed-for-phase-error-in-elastic/201527 "2019-09-29T11:46:20Z")

</div>

Hi pals, When running the Kibana, I am getting the following error. Could you please help me solve the issue? \[2019-09-29T12:47:00,780\]\[WARN \]\[r.suppressed \] \[ELASTIC-SRV1\] path: /.kibana/doc/kql-telemetry…

---

## [SSL Security](https://discuss.elastic.co/t/ssl-security/201369)

<div class="topic-metadata">

**Author:** [@NNN](https://discuss.elastic.co/u/NNN)\
**Replies:** 1\
**Last updated:** [September 29, 2019, 9:28am UTC](https://discuss.elastic.co/t/ssl-security/201369 "2019-09-29T09:28:53Z")

</div>

Hope you can help me. I am using es 6.8 So, my problem is that I want to use java high level client with SSL with an ingest plugin. First I tried to configure my client in a simple main method and it works perfectly. …

---

## [List open file descriptors](https://discuss.elastic.co/t/list-open-file-descriptors/201521)

<div class="topic-metadata">

**Author:** [@baya\_weaver](https://discuss.elastic.co/u/baya_weaver)\
**Replies:** 0\
**Last updated:** [September 29, 2019, 7:47am UTC](https://discuss.elastic.co/t/list-open-file-descriptors/201521 "2019-09-29T07:47:29Z")

</div>

I setup elasticsearch 6.8 from docker-hub. How can list opened file-descriptors by elasticsearch process?

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1138)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1140)
