# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1162 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1163 --- ## [Mutual tls/ssl on elasticsearch](https://discuss.elastic.co/t/mutual-tls-ssl-on-elasticsearch/197768)
**Author:** [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\ **Replies:** 24\ **Last updated:** [September 10, 2019, 9:37am UTC](https://discuss.elastic.co/t/mutual-tls-ssl-on-elasticsearch/197768 "2019-09-10T09:37:43Z")
Hi, I want to know how to enable mutual tls/ssl on elastic. I have added the below lines in my elastic.yml file : xpack.security.enabled: true xpack.security.http.ssl.enabled: true xpack.security.http.ssl.key: certs/de… --- ## [How do I compute bucket size distribution?](https://discuss.elastic.co/t/how-do-i-compute-bucket-size-distribution/198857)
**Author:** [@Matteo\_Grolla](https://discuss.elastic.co/u/Matteo_Grolla)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 9:22am UTC](https://discuss.elastic.co/t/how-do-i-compute-bucket-size-distribution/198857 "2019-09-10T09:22:06Z")
I'd like to group documents by a field (cluster\_id) and find the distribution of group sizes Ex: 200 groups have size 1 150 have size 2 ... 50 have size 30 I tried with { "size": 0, "aggs" : { "clusters": { "te… --- ## [Term size in memory does not decrease on index:false](https://discuss.elastic.co/t/term-size-in-memory-does-not-decrease-on-index-false/198047)
**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\ **Replies:** 1\ **Last updated:** [September 10, 2019, 9:07am UTC](https://discuss.elastic.co/t/term-size-in-memory-does-not-decrease-on-index-false/198047 "2019-09-10T09:07:12Z")
I have indexed about 10k docs indexed on a data node Case A. I have about 140 fields in my document, all analyzed (index: true). Did a \_forcemerge. /\_cluster/stats API returns "terms\_memory\_in\_bytes: 'x' bytes" Case B … --- ## [Esrally manometric xpack encrypted es7.2.0](https://discuss.elastic.co/t/esrally-manometric-xpack-encrypted-es7-2-0/197748)
**Author:** [@rljie](https://discuss.elastic.co/u/rljie)\ **Replies:** 19\ **Last updated:** [September 10, 2019, 8:56am UTC](https://discuss.elastic.co/t/esrally-manometric-xpack-encrypted-es7-2-0/197748 "2019-09-10T08:56:53Z")
My environment is es7.2.0, esrally1.2.1; Es does xpack encryption and executes the esrally command: esrally --target-hosts=12.19.24.92:9200 --pipeline=benchmark-only --client-options="basic\_auth\_user:'elastic',basic\_aut… --- ## [How to have timestamp on my docs and kibana show a count of docs per timestamp range](https://discuss.elastic.co/t/how-to-have-timestamp-on-my-docs-and-kibana-show-a-count-of-docs-per-timestamp-range/198531)
**Author:** [@FRegis](https://discuss.elastic.co/u/FRegis)\ **Replies:** 5\ **Last updated:** [September 10, 2019, 8:47am UTC](https://discuss.elastic.co/t/how-to-have-timestamp-on-my-docs-and-kibana-show-a-count-of-docs-per-timestamp-range/198531 "2019-09-10T08:47:26Z")
Hi, Absolutely newbie here. I have some data that I'm sending to elasticsearch in JSON. The index is created automatically. I almost have no idea of how to setup indexes and visualization the way I like. So, other ind… --- ## [java.lang.IllegalArgumentException: cannot write xcontent for unknown value of type class java.util.UUID?](https://discuss.elastic.co/t/java-lang-illegalargumentexception-cannot-write-xcontent-for-unknown-value-of-type-class-java-util-uuid/198638)
**Author:** [@Prasanth\_MP](https://discuss.elastic.co/u/Prasanth_MP)\ **Replies:** 4\ **Last updated:** [September 10, 2019, 8:35am UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-cannot-write-xcontent-for-unknown-value-of-type-class-java-util-uuid/198638 "2019-09-10T08:35:06Z")
Hi I am using java high level rest api client to read some documents from an elastic search index and i am getting the following error . I get this error when i do perform a request on elasticsearch client as below. el… --- ## [Update synonym in real time](https://discuss.elastic.co/t/update-synonym-in-real-time/198169)
**Author:** [@zidane28](https://discuss.elastic.co/u/zidane28)\ **Replies:** 5\ **Last updated:** [September 10, 2019, 8:29am UTC](https://discuss.elastic.co/t/update-synonym-in-real-time/198169 "2019-09-10T08:29:35Z")
Background: For all this while, I always thought that, if there is any changes in the synonym file, you will need to reindex the whole index. Sure, if the index size is small, the process is not that slow, but the proce… --- ## [All indices reside in "unassigned shards"](https://discuss.elastic.co/t/all-indices-reside-in-unassigned-shards/198836)
**Author:** [@Franco](https://discuss.elastic.co/u/Franco)\ **Replies:** 2\ **Last updated:** [September 10, 2019, 8:08am UTC](https://discuss.elastic.co/t/all-indices-reside-in-unassigned-shards/198836 "2019-09-10T08:08:41Z")
Hi, I'm a newbie to ELK and did an out-of-the-box setup with ELK 7.2.0 some weeks ago. After getting familiar with grok patterns I succeeded to ship my different log sources into ES. While the amount of data grows and… --- ## [Limit number of documents returned by each clause in Search query](https://discuss.elastic.co/t/limit-number-of-documents-returned-by-each-clause-in-search-query/198801)
**Author:** [@indiekid](https://discuss.elastic.co/u/indiekid)\ **Replies:** 2\ **Last updated:** [September 10, 2019, 7:55am UTC](https://discuss.elastic.co/t/limit-number-of-documents-returned-by-each-clause-in-search-query/198801 "2019-09-10T07:55:42Z")
I have a category field in my documents, which is mapped as a keyword. I am trying to run a search query that fetches the latest n documents for each category specified in the query. I am able to achieve this using a mu… --- ## [How to return only inner hits in nested field](https://discuss.elastic.co/t/how-to-return-only-inner-hits-in-nested-field/198842)
**Author:** [@salihklc](https://discuss.elastic.co/u/salihklc)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 7:53am UTC](https://discuss.elastic.co/t/how-to-return-only-inner-hits-in-nested-field/198842 "2019-09-10T07:53:24Z")
Hi everyone, Just like I mention in the title, I have data set with the mapping below which has nested field. I am trying to get data with inner hits which are match with the written query. If I write "\_source":false a… --- ## [Elastic search Query issue with case sensitive](https://discuss.elastic.co/t/elastic-search-query-issue-with-case-sensitive/198800)
**Author:** [@Sudharsankotti](https://discuss.elastic.co/u/Sudharsankotti)\ **Replies:** 1\ **Last updated:** [September 10, 2019, 7:49am UTC](https://discuss.elastic.co/t/elastic-search-query-issue-with-case-sensitive/198800 "2019-09-10T07:49:41Z")
Elastic search show result opposite to case requested Below i have requested for lowercaset "test\*" but it give output as upper case Example : {"query":{"bool":{"must":{"wildcard":{"partnerLocationCode":{"value":"tes… --- ## [Logstash API error](https://discuss.elastic.co/t/logstash-api-error/198835)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 7:22am UTC](https://discuss.elastic.co/t/logstash-api-error/198835 "2019-09-10T07:22:04Z")
Im trying to create an API connection in Logstash and push the data to elasticsearch. Both Elasticsearch and Logstash versions are 7.1.0. Below id the logstash file: input { http\_poller { urls =\> {… --- ## [Kiabana discover tab issue -\> no apm index!](https://discuss.elastic.co/t/kiabana-discover-tab-issue-no-apm-index/198677)
**Author:** [@egarim](https://discuss.elastic.co/u/egarim)\ **Replies:** 1\ **Last updated:** [September 10, 2019, 7:16am UTC](https://discuss.elastic.co/t/kiabana-discover-tab-issue-no-apm-index/198677 "2019-09-10T07:16:03Z")
Hi i've correctly installed kibana 7.3.1 but when I try to go to discover tab I got: Error fetching fields No indices match pattern "apm-\*" Error: No indices match pattern "apm-\*" at http://172.25.20:5601/bundles/… --- ## [Action \[cluster:monitor/health\] is unauthorized for user](https://discuss.elastic.co/t/action-cluster-monitor-health-is-unauthorized-for-user/198624)
**Author:** [@Nikhil\_Pillai](https://discuss.elastic.co/u/Nikhil_Pillai)\ **Replies:** 2\ **Last updated:** [September 10, 2019, 6:52am UTC](https://discuss.elastic.co/t/action-cluster-monitor-health-is-unauthorized-for-user/198624 "2019-09-10T06:52:00Z")
Hi, I have configured LDAP with my single ELK node running locally. I have a user created on LDAP but that user is facing "unauthorized error" when I try to login to kibana UI or check the cluster health using curl comm… --- ## [Garbage Collection Not Working](https://discuss.elastic.co/t/garbage-collection-not-working/197173)
**Author:** [@stevenkrawczyk](https://discuss.elastic.co/u/stevenkrawczyk)\ **Replies:** 4\ **Last updated:** [September 10, 2019, 6:01am UTC](https://discuss.elastic.co/t/garbage-collection-not-working/197173 "2019-09-10T06:01:20Z")
Hi, We have a 4 node cluster with "heap\_size": "29500m", and we're consistently seeing heap usage go over 80% for hours, reaching up to 99%, and no garbage collection takes place. Does anyone know why GC would not be ta… --- ## [Shard Level Allocation Filtering](https://discuss.elastic.co/t/shard-level-allocation-filtering/195621)
**Author:** [@eightnoteight](https://discuss.elastic.co/u/eightnoteight)\ **Replies:** 9\ **Last updated:** [September 10, 2019, 5:05am UTC](https://discuss.elastic.co/t/shard-level-allocation-filtering/195621 "2019-09-10T05:05:20Z")
Hey, I'm thinking of working on individual shard level allocation filtering settings of a particular index rather than the entire index's shard allocation filtering. Basically, I want to do manual shard level allocation… --- ## [Abbreviation Search not working as expected](https://discuss.elastic.co/t/abbreviation-search-not-working-as-expected/198361)
**Author:** [@GuruPrasath\_Ramesh](https://discuss.elastic.co/u/GuruPrasath_Ramesh)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 5:46am UTC](https://discuss.elastic.co/t/abbreviation-search-not-working-as-expected/198361 "2019-09-09T05:46:38Z")
Hi there, I have a condition, if I search with either reg A or regulation A, it should return the documents which contain both reg A and regulation A as results. For which, I have used the synonym filter, but it is not … --- ## [X-pack security what are core security features provided in Basic subscription](https://discuss.elastic.co/t/x-pack-security-what-are-core-security-features-provided-in-basic-subscription/198798)
**Author:** [@shradhatx](https://discuss.elastic.co/u/shradhatx)\ **Replies:** 1\ **Last updated:** [September 10, 2019, 4:58am UTC](https://discuss.elastic.co/t/x-pack-security-what-are-core-security-features-provided-in-basic-subscription/198798 "2019-09-10T04:58:56Z")
Looking at subscription model, it is not very clear on the features provided in security for various subscription model. https://www.elastic.co/subscriptions Can someone please clarify? Is this true- Basic security: … --- ## [Sum aggregate of field stored in non integer data type](https://discuss.elastic.co/t/sum-aggregate-of-field-stored-in-non-integer-data-type/198747)
**Author:** [@hashdappcoder](https://discuss.elastic.co/u/hashdappcoder)\ **Replies:** 1\ **Last updated:** [September 10, 2019, 4:25am UTC](https://discuss.elastic.co/t/sum-aggregate-of-field-stored-in-non-integer-data-type/198747 "2019-09-10T04:25:00Z")
Hi Team, I am working on a data set where a number is 32 bytes with max value 2 ^ 256 -1. I cant store this into Integer data type. How can I run sum aggregation on this field? In below example \_tokenAmount is that fi… --- ## [Unable to set elastic search log file path](https://discuss.elastic.co/t/unable-to-set-elastic-search-log-file-path/198812)
**Author:** [@abhishek\_Shetty](https://discuss.elastic.co/u/abhishek_Shetty)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 2:49am UTC](https://discuss.elastic.co/t/unable-to-set-elastic-search-log-file-path/198812 "2019-09-10T02:49:46Z")
I have installed elasticsearch, kibana of 6.8.2 version on centos using RPM file and I have enabled basic authentication. I need to modify all log paths to /apps/log instead of /var. For now I did modify log path but lo… --- ## [Synonym token filter and edge\_ngram tokenizer conflicts](https://discuss.elastic.co/t/synonym-token-filter-and-edge-ngram-tokenizer-conflicts/198328)
**Author:** [@jjarthur](https://discuss.elastic.co/u/jjarthur)\ **Replies:** 5\ **Last updated:** [September 9, 2019, 10:21pm UTC](https://discuss.elastic.co/t/synonym-token-filter-and-edge-ngram-tokenizer-conflicts/198328 "2019-09-09T22:21:00Z")
Hello, I'm facing a small issue with my implementation of the synonym token filter combined with an edge\_ngram tokenizer. For example, I have a synonym mapping for sa =\> south\_australia and an entry with a field of san… --- ## [Help Using Python to Load Data into ES](https://discuss.elastic.co/t/help-using-python-to-load-data-into-es/198134)
**Author:** [@beezit](https://discuss.elastic.co/u/beezit)\ **Replies:** 5\ **Last updated:** [September 9, 2019, 8:45pm UTC](https://discuss.elastic.co/t/help-using-python-to-load-data-into-es/198134 "2019-09-09T20:45:29Z")
I am having some issues getting the following python script to load data into ElasticSearch, can someone please guide me. Here is my python script. My goal is to use python to load this into ElastiSearch and also view … --- ## [Watcher send\_email and update\_documents Function Inquiry](https://discuss.elastic.co/t/watcher-send-email-and-update-documents-function-inquiry/198772)
**Author:** [@Shaw](https://discuss.elastic.co/u/Shaw)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 7:13pm UTC](https://discuss.elastic.co/t/watcher-send-email-and-update-documents-function-inquiry/198772 "2019-09-09T19:13:42Z")
Hi, I encountered an issue where "update\_documents" failed to execute and "send\_email" is still sending the result, which is causing multiple duplicate contents from emails. Is anywhere I can make a condition that if "u… --- ## [Elasticsearch: transpose and aggregate?](https://discuss.elastic.co/t/elasticsearch-transpose-and-aggregate/198310)
**Author:** [@Mihir\_Kothari](https://discuss.elastic.co/u/Mihir_Kothari)\ **Replies:** 3\ **Last updated:** [September 9, 2019, 4:02pm UTC](https://discuss.elastic.co/t/elasticsearch-transpose-and-aggregate/198310 "2019-09-09T16:02:13Z")
I am using the ES 6.5. When I fetch the required messages, I have to transpose and aggregate it. See example for more details. Message retrieved - 2 messages retried for example: { "\_index": "index\_name", "\_typ… --- ## [Alerts in elastic](https://discuss.elastic.co/t/alerts-in-elastic/197223)
**Author:** [@Karthik2411](https://discuss.elastic.co/u/Karthik2411)\ **Replies:** 5\ **Last updated:** [September 9, 2019, 5:48am UTC](https://discuss.elastic.co/t/alerts-in-elastic/197223 "2019-09-09T05:48:26Z")
I am working creating alerts in elastic. I have a complex requirement of checking failures every hour and then summing them up to alert when the sum is exceeding 10 and then checking every hour and doing the same. I am a… --- ## [Confusion on Aggregation Sum Datatype](https://discuss.elastic.co/t/confusion-on-aggregation-sum-datatype/197894)
**Author:** [@mikeagileedgecom](https://discuss.elastic.co/u/mikeagileedgecom)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 5:58pm UTC](https://discuss.elastic.co/t/confusion-on-aggregation-sum-datatype/197894 "2019-09-09T17:58:51Z")
I am missing something w/ ES Sum Aggregations. I want to sum a field that is mapped to as an integer vs a float. I specifically would like the resulting sum value to be an integer too. I have simplified my query and am … --- ## [Number of Master nodes across two data centers](https://discuss.elastic.co/t/number-of-master-nodes-across-two-data-centers/198753)
**Author:** [@Vertigo](https://discuss.elastic.co/u/Vertigo)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 5:55pm UTC](https://discuss.elastic.co/t/number-of-master-nodes-across-two-data-centers/198753 "2019-09-09T17:55:14Z")
We are working on redesigning our currently cluster. Our 40 ES data nodes are split between 2 data centers, 20 in each. Currently there are 3 master dedicated nodes, 2 in one DC, and 1 in the other. The goal with the two… --- ## [Subtraction of 90th and 10th percentile (percentile range)](https://discuss.elastic.co/t/subtraction-of-90th-and-10th-percentile-percentile-range/197910)
**Author:** [@Piotr\_Wasilewski](https://discuss.elastic.co/u/Piotr_Wasilewski)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 5:48pm UTC](https://discuss.elastic.co/t/subtraction-of-90th-and-10th-percentile-percentile-range/197910 "2019-09-09T17:48:41Z")
Hi, I was asked to create a query for records with response times in range between 10th and 90th percentile. These data are in single numeric field in documents. I know I can get both of them with aggregation query, bu… --- ## [Create new user to create and write any index](https://discuss.elastic.co/t/create-new-user-to-create-and-write-any-index/198755)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 5:47pm UTC](https://discuss.elastic.co/t/create-new-user-to-create-and-write-any-index/198755 "2019-09-09T17:47:17Z")
Hi, i'm new to Elastic and I would like to create a new user in elasticsearch from Kibana. I want this user to be able to create any index regardless of the index pattern. The only way i have found is to create index pa… --- ## [Securing Elastic Search single node](https://discuss.elastic.co/t/securing-elastic-search-single-node/198069)
**Author:** [@Joseph\_Mak](https://discuss.elastic.co/u/Joseph_Mak)\ **Replies:** 3\ **Last updated:** [September 9, 2019, 5:35pm UTC](https://discuss.elastic.co/t/securing-elastic-search-single-node/198069 "2019-09-09T17:35:39Z")
I have a single node Elastic Search 6.4, and trying to see if I can add some security on it, like adding a user/password. Trying to follow this guide here I also have Kibana installed. But I do not see Management-\>User… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1161) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1163)