# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1171 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1172 --- ## [Where can I get 'Event Received Rate(/s)' data in .monitoring-logstash-\*?](https://discuss.elastic.co/t/where-can-i-get-event-received-rate-s-data-in-monitoring-logstash/197743)
**Author:** [@MyeongJiShin](https://discuss.elastic.co/u/MyeongJiShin)\ **Replies:** 0\ **Last updated:** [September 3, 2019, 12:46am UTC](https://discuss.elastic.co/t/where-can-i-get-event-received-rate-s-data-in-monitoring-logstash/197743 "2019-09-03T00:46:52Z")
Hi, I have a question. I wanna get event data like these from elasticsearch api.(Event Received Rate, Events Emitted Rate, Event Latency) So, I think these datas are right things about in the previous picture. But, … --- ## [Elasticsearch not allowing POST requests](https://discuss.elastic.co/t/elasticsearch-not-allowing-post-requests/197731)
**Author:** [@Keith\_Sanks](https://discuss.elastic.co/u/Keith_Sanks)\ **Replies:** 3\ **Last updated:** [September 3, 2019, 12:22am UTC](https://discuss.elastic.co/t/elasticsearch-not-allowing-post-requests/197731 "2019-09-03T00:22:46Z")
I've run into an issue that Elasticsearch is not allowing POST requests using Postman, even after adding the following: http.cors.enabled: true http.cors.allow-origin: "\*" http.cors.allow-methods: OPTIONS, HEAD, POST,… --- ## [Time format of output](https://discuss.elastic.co/t/time-format-of-output/197643)
**Author:** [@JohnM](https://discuss.elastic.co/u/JohnM)\ **Replies:** 2\ **Last updated:** [September 2, 2019, 11:44pm UTC](https://discuss.elastic.co/t/time-format-of-output/197643 "2019-09-02T23:44:32Z")
In the logstash (ver 7) output I have index =\> "logstash-asterisk-%{+YYYY.MM.dd.HH}" and I was expecting ES (ver 7) makes index something like logstash-asterisk-2019.09.02.15 for 3pm. but when I look at kibana hour s… --- ## [I really need ypur help to my thesis. More\_like\_this and fields](https://discuss.elastic.co/t/i-really-need-ypur-help-to-my-thesis-more-like-this-and-fields/197726)
**Author:** [@eisklat](https://discuss.elastic.co/u/eisklat)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 11:32pm UTC](https://discuss.elastic.co/t/i-really-need-ypur-help-to-my-thesis-more-like-this-and-fields/197726 "2019-09-02T23:32:59Z")
I am using the More\_like\_this query for getting the similarity between medical reports and then put them in a matrix for a university work. The problem is that somehow it is only giving me 10 results instead of all of th… --- ## [Max Date Agg on The same Document for Multiple Fields](https://discuss.elastic.co/t/max-date-agg-on-the-same-document-for-multiple-fields/197737)
**Author:** [@Lucas\_Rezende](https://discuss.elastic.co/u/Lucas_Rezende)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 11:20pm UTC](https://discuss.elastic.co/t/max-date-agg-on-the-same-document-for-multiple-fields/197737 "2019-09-02T23:20:31Z")
Hi there. I have millions of documents with a block like this one: { "useraccountid": 123456, "purchases\_history" : { "last\_updated" : "Sat Apr 27 13:41:46 UTC 2019", "purchases" : \[ { "purchas… --- ## [Translog recovery stuck\[ES 6.0\]](https://discuss.elastic.co/t/translog-recovery-stuck-es-6-0/196658)
**Author:** [@Bukhtawar\_Khan](https://discuss.elastic.co/u/Bukhtawar_Khan)\ **Replies:** 4\ **Last updated:** [September 2, 2019, 6:46pm UTC](https://discuss.elastic.co/t/translog-recovery-stuck-es-6-0/196658 "2019-09-02T18:46:50Z")
It seems that the shard recovery for replica is stuck in translog recovery loop. The recovery stage for index goes through but the translog stage gets stuck at 100% with no activity for 30m causing a shard-failed and the… --- ## [Elasticsearch 7.1x + Java 11: Possible GC misconfiguration](https://discuss.elastic.co/t/elasticsearch-7-1x-java-11-possible-gc-misconfiguration/197709)
**Author:** [@Bruno\_Andrade](https://discuss.elastic.co/u/Bruno_Andrade)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 5:52pm UTC](https://discuss.elastic.co/t/elasticsearch-7-1x-java-11-possible-gc-misconfiguration/197709 "2019-09-02T17:52:28Z")
Hey guys, We're facing some problems with instances going down from time to time with "exiting java.lang.OutOfMemoryError: Java heap space". Currently: Elasticsearch 7.1.1 Java 11 G1GC and default jvm.options config… --- ## [\[ES Gradle Tasks\] Could not find method nebula() for arguments](https://discuss.elastic.co/t/es-gradle-tasks-could-not-find-method-nebula-for-arguments/197719)
**Author:** [@varundbest](https://discuss.elastic.co/u/varundbest)\ **Replies:** 0\ **Last updated:** [September 2, 2019, 4:50pm UTC](https://discuss.elastic.co/t/es-gradle-tasks-could-not-find-method-nebula-for-arguments/197719 "2019-09-02T16:50:54Z")
./gradlew -version ------------------------------------------------------------ Gradle 5.5 ------------------------------------------------------------ Build time: 2019-06-28 17:36:05 UTC Revision: 83820928f3ada1… --- ## [Logstash logs to "logstash" index instead of "logstash-\" after update](https://discuss.elastic.co/t/logstash-logs-to-logstash-index-instead-of-logstash-date-after-update/197717)
**Author:** [@holobolo0815](https://discuss.elastic.co/u/holobolo0815)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 4:48pm UTC](https://discuss.elastic.co/t/logstash-logs-to-logstash-index-instead-of-logstash-date-after-update/197717 "2019-09-02T16:48:55Z")
Hello, I've upgraded without too much hassle from ELK 5.5 across 6.8 to 7.3. Arriving at 7.3 I notice that the index in ES that LS seems to use is "logstash". Why? Why won't it continue writing to the existing logstash… --- ## [Is possible to license just one node?](https://discuss.elastic.co/t/is-possible-to-license-just-one-node/193799)
**Author:** [@Rohlik](https://discuss.elastic.co/u/Rohlik)\ **Replies:** 2\ **Last updated:** [September 2, 2019, 2:38pm UTC](https://discuss.elastic.co/t/is-possible-to-license-just-one-node/193799 "2019-09-02T14:38:51Z")
Hello all, It is possible to license (Platinum subscription) just one node if I have just one server in my elastic cluster? --- ## [Parse syslog-ng to elasticsearch and analyze with kibana](https://discuss.elastic.co/t/parse-syslog-ng-to-elasticsearch-and-analyze-with-kibana/197714)
**Author:** [@ravipemmasani](https://discuss.elastic.co/u/ravipemmasani)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 4:00pm UTC](https://discuss.elastic.co/t/parse-syslog-ng-to-elasticsearch-and-analyze-with-kibana/197714 "2019-09-02T16:00:22Z")
Hi, Following is our POC setup. Syslog-ng 3.21-log collector Elasticsearch-7.3-store logs Kibana 7.3-Analyse logs. Syslog-ng collects remote logs fine,but when i Create index pattern,i keep getting Couldn't find any… --- ## [Facing Issue - Elasticsearch Cluster Setting - 7.2](https://discuss.elastic.co/t/facing-issue-elasticsearch-cluster-setting-7-2/197682)
**Author:** [@amitmjadav](https://discuss.elastic.co/u/amitmjadav)\ **Replies:** 3\ **Last updated:** [September 2, 2019, 2:46pm UTC](https://discuss.elastic.co/t/facing-issue-elasticsearch-cluster-setting-7-2/197682 "2019-09-02T14:46:50Z")
Hi... I have configured 5 node of elasticsearch 7.2.0 Now not able to connect them... They are not discovering them selves.. I have done following setting on each node configuration file. discovery\_hosts : \[node1,nod… --- ## [Can we have 1 master only node and 2 data only node in a 3 nodes cluster](https://discuss.elastic.co/t/can-we-have-1-master-only-node-and-2-data-only-node-in-a-3-nodes-cluster/197662)
**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\ **Replies:** 2\ **Last updated:** [September 2, 2019, 2:46pm UTC](https://discuss.elastic.co/t/can-we-have-1-master-only-node-and-2-data-only-node-in-a-3-nodes-cluster/197662 "2019-09-02T14:46:35Z")
I am using elasticsearch 7.3, I have 3 node in total, i try to have to 1 master only node and 2 data only nodes. But this configuration is not working, but when i also configure other node as master node then it start wo… --- ## [DATEDIFF EQUIVALENT](https://discuss.elastic.co/t/datediff-equivalent/197701)
**Author:** [@charlinhos](https://discuss.elastic.co/u/charlinhos)\ **Replies:** 0\ **Last updated:** [September 2, 2019, 2:13pm UTC](https://discuss.elastic.co/t/datediff-equivalent/197701 "2019-09-02T14:13:49Z")
I’ve been using elasticsearch to store data and kibana to create dashboards. I want to visualize in the dashboard the date difference between different rows. In the panel above, there is an example of what rows are ret… --- ## ["repository-s3" plugin is missing in 7.3.0](https://discuss.elastic.co/t/repository-s3-plugin-is-missing-in-7-3-0/197048)
**Author:** [@mohamamd](https://discuss.elastic.co/u/mohamamd)\ **Replies:** 2\ **Last updated:** [September 2, 2019, 1:58pm UTC](https://discuss.elastic.co/t/repository-s3-plugin-is-missing-in-7-3-0/197048 "2019-09-02T13:58:04Z")
Hello, I am deploying elasticsearch v7.3.0 according to the following documentation - https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-quickstart.html However, in the docker image for elasticsearch, the plugin… --- ## [Replica allocation awareness](https://discuss.elastic.co/t/replica-allocation-awareness/197491)
**Author:** [@JacovanZyl](https://discuss.elastic.co/u/JacovanZyl)\ **Replies:** 14\ **Last updated:** [September 2, 2019, 1:33pm UTC](https://discuss.elastic.co/t/replica-allocation-awareness/197491 "2019-09-02T13:33:55Z")
Hi there Does cluster routing awareness route replicas based on number data nodes as default if routing attribute is not set specifically in the elasticsearch.yml? I only set an attribute to differentiate between hot/w… --- ## [Disable DELETE option for superuser](https://discuss.elastic.co/t/disable-delete-option-for-superuser/197688)
**Author:** [@JustinJ](https://discuss.elastic.co/u/JustinJ)\ **Replies:** 0\ **Last updated:** [September 2, 2019, 12:57pm UTC](https://discuss.elastic.co/t/disable-delete-option-for-superuser/197688 "2019-09-02T12:57:31Z")
Hi All, Is there anyway to disable delete option for the elastic superuser? The requirement is: No user should be able to delete or modify logs. even the superuser. --- ## [Re-index all the indices in elasticsearch](https://discuss.elastic.co/t/re-index-all-the-indices-in-elasticsearch/197660)
**Author:** [@Tianji\_Zhao](https://discuss.elastic.co/u/Tianji_Zhao)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 11:03am UTC](https://discuss.elastic.co/t/re-index-all-the-indices-in-elasticsearch/197660 "2019-09-02T11:03:03Z")
I have to re-index all the indices in the elastic to change the type of several fields. For the reason that it has two many indices, I could not use the re-index API to change them one by one. So is there any method th… --- ## [Watcher Error (Runtime error) | Elasticsearch](https://discuss.elastic.co/t/watcher-error-runtime-error-elasticsearch/197648)
**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\ **Replies:** 2\ **Last updated:** [September 2, 2019, 10:31am UTC](https://discuss.elastic.co/t/watcher-error-runtime-error-elasticsearch/197648 "2019-09-02T10:31:51Z")
Hi, I am getting an error message, however when I check and read through my code, it should be returning as it should be. // Output Any help is greatly appreciated to help me identify where I went wrong Thanks! N… --- ## [Remove stopwords while querying using GET Request in Elasticsearch](https://discuss.elastic.co/t/remove-stopwords-while-querying-using-get-request-in-elasticsearch/197670)
**Author:** [@jamshaid](https://discuss.elastic.co/u/jamshaid)\ **Replies:** 0\ **Last updated:** [September 2, 2019, 10:30am UTC](https://discuss.elastic.co/t/remove-stopwords-while-querying-using-get-request-in-elasticsearch/197670 "2019-09-02T10:30:13Z")
I'm trying to implement Stop Token Filter in an index of Elasticsearch. I've following code taken from here. PUT /test1 { "settings": { "analysis": { "filter": { "my\_stop": { "typ… --- ## [Unable to sort results using script\_score function](https://discuss.elastic.co/t/unable-to-sort-results-using-script-score-function/194946)
**Author:** [@aniruddha.raje](https://discuss.elastic.co/u/aniruddha.raje)\ **Replies:** 2\ **Last updated:** [September 2, 2019, 10:27am UTC](https://discuss.elastic.co/t/unable-to-sort-results-using-script-score-function/194946 "2019-09-02T10:27:57Z")
I have a field called price in my elasticsearch index whose values I need to convert before sorting - { "took" : 0, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1, "skipped" : 0, … --- ## [Better function score query function explanation retrieval](https://discuss.elastic.co/t/better-function-score-query-function-explanation-retrieval/197668)
**Author:** [@lrynek](https://discuss.elastic.co/u/lrynek)\ **Replies:** 0\ **Last updated:** [September 2, 2019, 10:21am UTC](https://discuss.elastic.co/t/better-function-score-query-function-explanation-retrieval/197668 "2019-09-02T10:21:40Z")
Please take a look at the proposed new feature to enable precise retrieval of computed function value in function score query \_explanation. Thanks! :point\_right: https://github.com/elastic/elasticsearch/issues/46007 --- ## [Multi Level Nested Queries](https://discuss.elastic.co/t/multi-level-nested-queries/197611)
**Author:** [@Onkar\_Kore](https://discuss.elastic.co/u/Onkar_Kore)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 10:09am UTC](https://discuss.elastic.co/t/multi-level-nested-queries/197611 "2019-09-02T10:09:50Z")
I have a multi-level nested document. I want to query based on multiple nested queries with all the conditions must match. Example Document 1 { "publishing\_rule": { "publishing\_orders": \[{ "transporters": \[{ … --- ## [Request rejected when multiple search request](https://discuss.elastic.co/t/request-rejected-when-multiple-search-request/197476)
**Author:** [@bobin](https://discuss.elastic.co/u/bobin)\ **Replies:** 8\ **Last updated:** [September 2, 2019, 7:45am UTC](https://discuss.elastic.co/t/request-rejected-when-multiple-search-request/197476 "2019-09-02T07:45:33Z")
Hi Guys, I am trying to call multiple(300) elasticsearch search request Async and I got the following error. It seems like some of my requests being rejected. Anyone experience this before. I am still new to Elasticsea… --- ## [Elasticsearch SQL LIMIT returns last 10 results instead of first 10 results](https://discuss.elastic.co/t/elasticsearch-sql-limit-returns-last-10-results-instead-of-first-10-results/197450)
**Author:** [@herrBez](https://discuss.elastic.co/u/herrBez)\ **Replies:** 2\ **Last updated:** [September 2, 2019, 9:20am UTC](https://discuss.elastic.co/t/elasticsearch-sql-limit-returns-last-10-results-instead-of-first-10-results/197450 "2019-09-02T09:20:09Z")
Hi, I am trying to visualize some data in a Canvas and I am using elasticsearch sql to build some visualizations. I am importing data from winlogbeat and I have written this query: SELECT count(\*) as c, winlog.event\_id… --- ## [Different Result when Query has Double Slash Escape (\\\\)](https://discuss.elastic.co/t/different-result-when-query-has-double-slash-escape/197434)
**Author:** [@salvadorcanillas](https://discuss.elastic.co/u/salvadorcanillas)\ **Replies:** 6\ **Last updated:** [September 2, 2019, 8:40am UTC](https://discuss.elastic.co/t/different-result-when-query-has-double-slash-escape/197434 "2019-09-02T08:40:19Z")
Hello, I am using Elasticsearch in Magento. Elasticsearch version 5.6 Magento Enterprise 2.2.9 I have set the sku type to keyword but getting a different result when query has escape character "sku": { "type": "key… --- ## [User Roles](https://discuss.elastic.co/t/user-roles/197532)
**Author:** [@cowensel](https://discuss.elastic.co/u/cowensel)\ **Replies:** 2\ **Last updated:** [September 2, 2019, 8:50am UTC](https://discuss.elastic.co/t/user-roles/197532 "2019-09-02T08:50:08Z")
I am looking at the User Roles and wondered if someone has created a couple of admin roles like a global admin and admin role? I would like to have a user role that can view and change the built in users passwords and p… --- ## [Two nodes on the same Debian server](https://discuss.elastic.co/t/two-nodes-on-the-same-debian-server/193956)
**Author:** [@Nonow53](https://discuss.elastic.co/u/Nonow53)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 8:40am UTC](https://discuss.elastic.co/t/two-nodes-on-the-same-debian-server/193956 "2019-09-02T08:40:09Z")
Hello, We installed a first ES node on a Debian server with the dedicated package distribution. It works well. Environment variables are in /etc/default/elasticsearch. Then, we have been tried to install a second ES n… --- ## [ES test java.io.IOException: Could not remove the following files](https://discuss.elastic.co/t/es-test-java-io-ioexception-could-not-remove-the-following-files/197588)
**Author:** [@111201](https://discuss.elastic.co/u/111201)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 8:37am UTC](https://discuss.elastic.co/t/es-test-java-io-ioexception-could-not-remove-the-following-files/197588 "2019-09-02T08:37:15Z")
when I test EncryptDirectoryWrapperTest which extends BaseDirectoryTestCase, it shows error: java.io.IOException: Could not remove the following files (in the order of attempts): C:\\Users\\anthonypeng\\AppData\\Local\\Temp… --- ## [Error when try to configure password with keystore using elasticsearch 7](https://discuss.elastic.co/t/error-when-try-to-configure-password-with-keystore-using-elasticsearch-7/197597)
**Author:** [@maria1](https://discuss.elastic.co/u/maria1)\ **Replies:** 1\ **Last updated:** [September 2, 2019, 8:35am UTC](https://discuss.elastic.co/t/error-when-try-to-configure-password-with-keystore-using-elasticsearch-7/197597 "2019-09-02T08:35:41Z")
Hello, I'm trying to configure email action in my watcher, and when I try to configure the password using this command bin/elasticsearch-keystore add xpack.notification.email.account.gmail\_account.smtp.secure\_password … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1170) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1172)