# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1163 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1164 --- ## [How to use DOMAIN NAME for CERTIFICATE, one certificate for entire cluster and adding more nodes without creating a new cert](https://discuss.elastic.co/t/how-to-use-domain-name-for-certificate-one-certificate-for-entire-cluster-and-adding-more-nodes-without-creating-a-new-cert/197892)
**Author:** [@mhsh64](https://discuss.elastic.co/u/mhsh64)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 4:55pm UTC](https://discuss.elastic.co/t/how-to-use-domain-name-for-certificate-one-certificate-for-entire-cluster-and-adding-more-nodes-without-creating-a-new-cert/197892 "2019-09-09T16:55:48Z")
Hi All, I want to use one CERTIFICATE for all ES nodes (es1.srv.com ,es2.srv.com , es3.srv.com )as well as KIBANA (es2.srv.com), I created a CSR like bellow: \[ dn \] C=US ST=LA L=TEST O=SOMETHING OU=SOMETHING CN=es2.sr… --- ## [StackOverflowError: null and elasticsearch dying](https://discuss.elastic.co/t/stackoverflowerror-null-and-elasticsearch-dying/198595)
**Author:** [@Kate\_Fox](https://discuss.elastic.co/u/Kate_Fox)\ **Replies:** 4\ **Last updated:** [September 9, 2019, 4:09pm UTC](https://discuss.elastic.co/t/stackoverflowerror-null-and-elasticsearch-dying/198595 "2019-09-09T16:09:57Z")
Getting a stack overlow error with Elasticsearch version\[6.6.2\] \[2019-09-09T04:01:07,798\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[da-data2\] fatal error in thread \[elasticsearch\[da-data2\]\[flush\]\[T#1\]\], exit… --- ## [Cluster State Red after node restart](https://discuss.elastic.co/t/cluster-state-red-after-node-restart/198715)
**Author:** [@Bellicapelli0](https://discuss.elastic.co/u/Bellicapelli0)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 3:38pm UTC](https://discuss.elastic.co/t/cluster-state-red-after-node-restart/198715 "2019-09-09T15:38:08Z")
I'm running a three node cluster, and over the weekend one of the machines hosting one of the ES nodes failed. I restarted it this morning, but the cluster state remains red hours after restart, with the node seemingly r… --- ## [Elasticsearch service fails in Microsoft Team Foundation Server after upgrade from TFS 2017 to 2018](https://discuss.elastic.co/t/elasticsearch-service-fails-in-microsoft-team-foundation-server-after-upgrade-from-tfs-2017-to-2018/198731)
**Author:** [@PaulNovelli](https://discuss.elastic.co/u/PaulNovelli)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 3:34pm UTC](https://discuss.elastic.co/t/elasticsearch-service-fails-in-microsoft-team-foundation-server-after-upgrade-from-tfs-2017-to-2018/198731 "2019-09-09T15:34:36Z")
Posting here at Elissa J's request after initial email exchange. We recently upgraded an installation of Microsoft Team Foundation Server (TFS) running on Windows Server 2016 Standard from TFS 2017 to TFS 2018. The upg… --- ## [Distinct names of all matching attributes](https://discuss.elastic.co/t/distinct-names-of-all-matching-attributes/198724)
**Author:** [@tobias\_c](https://discuss.elastic.co/u/tobias_c)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 3:18pm UTC](https://discuss.elastic.co/t/distinct-names-of-all-matching-attributes/198724 "2019-09-09T15:18:32Z")
Dear all, i have a list of search results and want that the user can filter by the attributes where the search term is found. The list with the search results can be loaded in one elasticsearch request and the list of … --- ## [How to optimize a reindex operation to perform really fast on big source index](https://discuss.elastic.co/t/how-to-optimize-a-reindex-operation-to-perform-really-fast-on-big-source-index/198721)
**Author:** [@viniciof](https://discuss.elastic.co/u/viniciof)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 3:11pm UTC](https://discuss.elastic.co/t/how-to-optimize-a-reindex-operation-to-perform-really-fast-on-big-source-index/198721 "2019-09-09T15:11:01Z")
Hi everyone, I need to reindex a 4.1TB index that was created with very little amount of shards originally (no capacity planning & growth forecast was done) Nothing is being written currently in the source index and it… --- ## [Re-index operation fails due to search context no longer found](https://discuss.elastic.co/t/re-index-operation-fails-due-to-search-context-no-longer-found/198717)
**Author:** [@viniciof](https://discuss.elastic.co/u/viniciof)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 2:58pm UTC](https://discuss.elastic.co/t/re-index-operation-fails-due-to-search-context-no-longer-found/198717 "2019-09-09T14:58:59Z")
Hello everyone, I'm executing the following reindex task from a 4.1TB~ source index (quite big) POST \_reindex?wait\_for\_completion=false&slices=20 { "source": { "index": "puma.compilation.pipeline.96f19f5b-bc84-4d… --- ## [Update by query performance in single index vs multiple indices](https://discuss.elastic.co/t/update-by-query-performance-in-single-index-vs-multiple-indices/198711)
**Author:** [@kowsik](https://discuss.elastic.co/u/kowsik)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 2:35pm UTC](https://discuss.elastic.co/t/update-by-query-performance-in-single-index-vs-multiple-indices/198711 "2019-09-09T14:35:52Z")
I used update by query to update two fields in approximately 10 million documents in a single index and it took around 21-22 minutes to get updated. I want to know if there will be a significant difference in time taken… --- ## [How to set Elliptic-curve Diffie–Hellman curve?](https://discuss.elastic.co/t/how-to-set-elliptic-curve-diffie-hellman-curve/197736)
**Author:** [@vklimovs](https://discuss.elastic.co/u/vklimovs)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 2:31pm UTC](https://discuss.elastic.co/t/how-to-set-elliptic-curve-diffie-hellman-curve/197736 "2019-09-09T14:31:00Z")
Setting cipher suite is possible using xpack.security.transport.ssl.cipher\_suites, for example: xpack.security.transport.ssl.cipher\_suites: TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256 but there appears to be no setting to … --- ## [Get logs from different EC2 instance](https://discuss.elastic.co/t/get-logs-from-different-ec2-instance/198451)
**Author:** [@Ghaith\_Haddad](https://discuss.elastic.co/u/Ghaith_Haddad)\ **Replies:** 3\ **Last updated:** [September 9, 2019, 2:03pm UTC](https://discuss.elastic.co/t/get-logs-from-different-ec2-instance/198451 "2019-09-09T14:03:45Z")
Hello everyone, So i have one EC2 instance with logstash, elastichsearch and kibana installed on it. and i have another EC2 instance thats running a dummy apache server. Now i know that i should install filebeat on the … --- ## [Pushing logs from Qradar to ELK Platform](https://discuss.elastic.co/t/pushing-logs-from-qradar-to-elk-platform/198687)
**Author:** [@sabyasachi](https://discuss.elastic.co/u/sabyasachi)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 1:21pm UTC](https://discuss.elastic.co/t/pushing-logs-from-qradar-to-elk-platform/198687 "2019-09-09T13:21:05Z")
How can we forwards logs collected in QRADAR to Elasticsearch? --- ## [Rolling restart Elasticsearch 5.5 (multi instance on node)](https://discuss.elastic.co/t/rolling-restart-elasticsearch-5-5-multi-instance-on-node/198685)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 12:57pm UTC](https://discuss.elastic.co/t/rolling-restart-elasticsearch-5-5-multi-instance-on-node/198685 "2019-09-09T12:57:56Z")
Hey All, I'm in trouble. I want perform rolling restart (so any service break) on our Elasticsearch Cluster (v 5.5). Particularity : One node contains four java instance of Elasticsearch. It's ok this procedure : D… --- ## [Elasticsearch conditional filter](https://discuss.elastic.co/t/elasticsearch-conditional-filter/198398)
**Author:** [@mgvarley](https://discuss.elastic.co/u/mgvarley)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 11:28am UTC](https://discuss.elastic.co/t/elasticsearch-conditional-filter/198398 "2019-09-09T11:28:00Z")
We have a use case where around 65% of our documents can be uniquely identified by a single field however we cannot guarantee that this will match, in which case we want to fall back to a complex full text search query u… --- ## [Exception from packetbeat ILM](https://discuss.elastic.co/t/exception-from-packetbeat-ilm/198671)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 11:20am UTC](https://discuss.elastic.co/t/exception-from-packetbeat-ilm/198671 "2019-09-09T11:20:13Z")
Im attempting to use packetbeat though am having issues as the ILM doesn't seem to want to execute properly. I installed it via packetbeat setup but changed it as follows: "phase\_definition" : { "min\_age" : "0… --- ## [The following method did not exist: org.elasticsearch.common.settings.Settings$Builder.put(\[Ljava/lang/Object;)Lorg/elasticsearch/common/settings/Settings$Builder](https://discuss.elastic.co/t/the-following-method-did-not-exist-org-elasticsearch-common-settings-settings-builder-put-ljava-lang-object-lorg-elasticsearch-common-settings-settings-builder/198668)
**Author:** [@praffuln](https://discuss.elastic.co/u/praffuln)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 11:11am UTC](https://discuss.elastic.co/t/the-following-method-did-not-exist-org-elasticsearch-common-settings-settings-builder-put-ljava-lang-object-lorg-elasticsearch-common-settings-settings-builder/198668 "2019-09-09T11:11:10Z")
We are getting below error, both error and mvn tree as below. jo.a.c.loader.WebappClassLoaderBase : The web application \[#v1\] appears to have started a thread named \[springCache\] but has failed to stop it. This is… --- ## [Calculate percentages bases on elapsed duration](https://discuss.elastic.co/t/calculate-percentages-bases-on-elapsed-duration/198665)
**Author:** [@Alisa\_Faingold](https://discuss.elastic.co/u/Alisa_Faingold)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 11:01am UTC](https://discuss.elastic.co/t/calculate-percentages-bases-on-elapsed-duration/198665 "2019-09-09T11:01:28Z")
Hi, I have logs from a phone device, and I would like to calculate how long from the time the device was operating, the wifi was active ( I use the elapsed filter to calculate the activity times (there are a start log … --- ## [Stats os.cpu.percent is -1](https://discuss.elastic.co/t/stats-os-cpu-percent-is-1/198605)
**Author:** [@Jasper\_Nygaard](https://discuss.elastic.co/u/Jasper_Nygaard)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 10:35am UTC](https://discuss.elastic.co/t/stats-os-cpu-percent-is-1/198605 "2019-09-09T10:35:01Z")
Hi Just added another node to my cluster and for some reason I cannot get it to show the CPU Usage (os.cpu.percent) in Kibana - It just says -1. Looking directly in the stats endpoint, it also says -1. Facts: I have 3… --- ## [Is it possible to run dynamic sql query in elastic search](https://discuss.elastic.co/t/is-it-possible-to-run-dynamic-sql-query-in-elastic-search/198276)
**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\ **Replies:** 9\ **Last updated:** [September 9, 2019, 9:40am UTC](https://discuss.elastic.co/t/is-it-possible-to-run-dynamic-sql-query-in-elastic-search/198276 "2019-09-09T09:40:30Z")
Dear All. i have use case in elastic search that is matching with below sql query:- DECLARE @EmpID AS SMALLINT DECLARE @SQLQuery AS NVARCHAR(500) DECLARE @ParameterDefinition AS NVARCHAR(100) SET @EmpID = 1001 SET @SQ… --- ## [Increase snapshot time interval](https://discuss.elastic.co/t/increase-snapshot-time-interval/198654)
**Author:** [@karim\_soliman](https://discuss.elastic.co/u/karim_soliman)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 9:55am UTC](https://discuss.elastic.co/t/increase-snapshot-time-interval/198654 "2019-09-09T09:55:32Z")
Hello, I want to increase snapshots time interval of my deployment on elastic cloud, the available intervals are 30 minutes, 4 hours and 1 day, but I want to increase it to be more than one day (e.g 7 days), how can I do… --- ## [I want to create an elastic query for following response](https://discuss.elastic.co/t/i-want-to-create-an-elastic-query-for-following-response/198643)
**Author:** [@lakmina\_chathurya](https://discuss.elastic.co/u/lakmina_chathurya)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 9:19am UTC](https://discuss.elastic.co/t/i-want-to-create-an-elastic-query-for-following-response/198643 "2019-09-09T09:19:50Z")
{ "items": \[ { "data": "a", "status": "#FF0000", "level": "0", "children": \[ { "data": "b", "status": "#FF0000", "level": "1" }, { "data": "c", "status": "#FF0000", … --- ## [Trying to configure Master and Data nodes on the same system](https://discuss.elastic.co/t/trying-to-configure-master-and-data-nodes-on-the-same-system/198522)
**Author:** [@revglen](https://discuss.elastic.co/u/revglen)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 9:20am UTC](https://discuss.elastic.co/t/trying-to-configure-master-and-data-nodes-on-the-same-system/198522 "2019-09-09T09:20:58Z")
Hello All, I am trying to get an understanding of the Elasticsearch cluster system. Hence, I have set up the Elasticsearch.yml file in the following. I have created 2 folders - one for Master and the other is Data. Ho… --- ## [Elasticsearch is multiplying data per \*.conf I have](https://discuss.elastic.co/t/elasticsearch-is-multiplying-data-per-conf-i-have/198383)
**Author:** [@HikariNTB](https://discuss.elastic.co/u/HikariNTB)\ **Replies:** 2\ **Last updated:** [September 9, 2019, 8:56am UTC](https://discuss.elastic.co/t/elasticsearch-is-multiplying-data-per-conf-i-have/198383 "2019-09-09T08:56:16Z")
Hi, I'm setting my ELK system and I need to input 3 different \*.conf as to input the data from my logs. The problem is that for some reason, when I reboot Logstash, the logs goes to Elasticsearch correctly but it shows … --- ## [Elasticsearch 6.5 returns serch results with some shards reported as failed](https://discuss.elastic.co/t/elasticsearch-6-5-returns-serch-results-with-some-shards-reported-as-failed/198632)
**Author:** [@alexander\_bromberg](https://discuss.elastic.co/u/alexander_bromberg)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 8:33am UTC](https://discuss.elastic.co/t/elasticsearch-6-5-returns-serch-results-with-some-shards-reported-as-failed/198632 "2019-09-09T08:33:28Z")
Hi, Sometimes I get search results from elasticserch with OK status but there are some shards reported as failed. The logs look clean. Then I rerun the the query all shards reported as successful. I have 1 replica confi… --- ## [Finding time difference between two events with in a single batch of logstash](https://discuss.elastic.co/t/finding-time-difference-between-two-events-with-in-a-single-batch-of-logstash/196813)
**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\ **Replies:** 5\ **Last updated:** [September 9, 2019, 8:14am UTC](https://discuss.elastic.co/t/finding-time-difference-between-two-events-with-in-a-single-batch-of-logstash/196813 "2019-09-09T08:14:24Z")
Hi all... Here I am trying to calculate the time difference between two events with the help of input plugin file, filter plugin ruby and elasticsearch here is my configuration input { file{ path =\> "/root/message\_… --- ## [ElasticsearchException\[Failed to load plugin class \[org.elasticsearch.xpack.XPackPlugin\]\]; nested: InvocationTargetException; nested: NoSuchFieldError\[V\_5\_6\_0\]](https://discuss.elastic.co/t/elasticsearchexception-failed-to-load-plugin-class-org-elasticsearch-xpack-xpackplugin-nested-invocationtargetexception-nested-nosuchfielderror-v-5-6-0/198570)
**Author:** [@praffuln](https://discuss.elastic.co/u/praffuln)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 7:57am UTC](https://discuss.elastic.co/t/elasticsearchexception-failed-to-load-plugin-class-org-elasticsearch-xpack-xpackplugin-nested-invocationtargetexception-nested-nosuchfielderror-v-5-6-0/198570 "2019-09-09T07:57:14Z")
Hi, We are getting below exception while working with elastic search x-pack. stack trace is as below. ElasticsearchException\[Failed to load plugin class \[org.elasticsearch.xpack.XPackPlugin\]\]; nested: InvocationTarget… --- ## [Is there a way to combine "script" and "doc" type updates in elasticsearch into a single query](https://discuss.elastic.co/t/is-there-a-way-to-combine-script-and-doc-type-updates-in-elasticsearch-into-a-single-query/198623)
**Author:** [@yash.tandon](https://discuss.elastic.co/u/yash.tandon)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 7:54am UTC](https://discuss.elastic.co/t/is-there-a-way-to-combine-script-and-doc-type-updates-in-elasticsearch-into-a-single-query/198623 "2019-09-09T07:54:01Z")
--- ## [How to control the memory for es](https://discuss.elastic.co/t/how-to-control-the-memory-for-es/198621)
**Author:** [@lurongjiang](https://discuss.elastic.co/u/lurongjiang)\ **Replies:** 0\ **Last updated:** [September 9, 2019, 7:40am UTC](https://discuss.elastic.co/t/how-to-control-the-memory-for-es/198621 "2019-09-09T07:40:46Z")
I set the es jvm option with -Xmx8g -Xms8g,but it didn't seem to work,the memory of es is not expected.While running with spark job,the CPU raise to 700%.How can I controller the es? --- ## [S3 Snapshot Repository storage\_class settings: OneZone IA?](https://discuss.elastic.co/t/s3-snapshot-repository-storage-class-settings-onezone-ia/198384)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 3\ **Last updated:** [September 9, 2019, 7:17am UTC](https://discuss.elastic.co/t/s3-snapshot-repository-storage-class-settings-onezone-ia/198384 "2019-09-09T07:17:15Z")
AWS have, for a while now, offered another storage class called OneZone Infrequent Access. This doesn't appear to be an option on the S3 Repository storage\_class settings. Are there plans to make this option available?… --- ## ["invalid\_shape\_exception: Y values \[127.03280083907562 to 127.0164930082651\] not in boundary Rect(minX=-180.0,maxX=180.0,minY=-90.0,maxY=90.0)"](https://discuss.elastic.co/t/invalid-shape-exception-y-values-127-03280083907562-to-127-0164930082651-not-in-boundary-rect-minx-180-0-maxx-180-0-miny-90-0-maxy-90-0/198612)
**Author:** [@ohoroyoi](https://discuss.elastic.co/u/ohoroyoi)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 7:09am UTC](https://discuss.elastic.co/t/invalid-shape-exception-y-values-127-03280083907562-to-127-0164930082651-not-in-boundary-rect-minx-180-0-maxx-180-0-miny-90-0-maxy-90-0/198612 "2019-09-09T07:09:44Z")
I want to gather regions within specific area. curl -X GET "https://atlas-search.test.com/regions\_19090403/\_search?pretty" -H 'Content-Type: application/json' -d' { "query":{ "bool": { "must": { "match\_all": {} }, … --- ## [What's the difference for score theory and sort principle between elasticsearch6.8.0 and elasticsearch5.4.3?](https://discuss.elastic.co/t/whats-the-difference-for-score-theory-and-sort-principle-between-elasticsearch6-8-0-and-elasticsearch5-4-3/198145)
**Author:** [@sunweiconfidence](https://discuss.elastic.co/u/sunweiconfidence)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 7:08am UTC](https://discuss.elastic.co/t/whats-the-difference-for-score-theory-and-sort-principle-between-elasticsearch6-8-0-and-elasticsearch5-4-3/198145 "2019-09-09T07:08:56Z")
hi, i want to know what's the difference for score theory and sort principle between elasticsearch6.8.0 and elasticsearch5.4.3? i use match clause and \_all in elasticsearch5.4.3 as below: { "query" : { "match" : { … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1162) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1164)