# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1177 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1178 --- ## [Elasticsearch 7.0 can't bind to private address](https://discuss.elastic.co/t/elasticsearch-7-0-cant-bind-to-private-address/195353)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 4\ **Last updated:** [August 28, 2019, 10:37am UTC](https://discuss.elastic.co/t/elasticsearch-7-0-cant-bind-to-private-address/195353 "2019-08-28T10:37:55Z")
Hi! I've just set up two ES nodes on GCP VMs. However, I can't set up it in a way the two of those can discover each other by private IP and no requests for the public IP would be answered. The configuration on both nod… --- ## [Elastic search working after install but then I again it show this error when I restart](https://discuss.elastic.co/t/elastic-search-working-after-install-but-then-i-again-it-show-this-error-when-i-restart/197031)
**Author:** [@nijanthan0](https://discuss.elastic.co/u/nijanthan0)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 9:49am UTC](https://discuss.elastic.co/t/elastic-search-working-after-install-but-then-i-again-it-show-this-error-when-i-restart/197031 "2019-08-28T09:49:41Z")
Macintosh:~ developer$ elasticsearch Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release. Exception in thread "main" 2019-08-2… --- ## [How to use custom GeoIP2 database in elasticsearch?](https://discuss.elastic.co/t/how-to-use-custom-geoip2-database-in-elasticsearch/196507)
**Author:** [@icamys](https://discuss.elastic.co/u/icamys)\ **Replies:** 3\ **Last updated:** [August 28, 2019, 9:47am UTC](https://discuss.elastic.co/t/how-to-use-custom-geoip2-database-in-elasticsearch/196507 "2019-08-28T09:47:35Z")
Hello! I'm using dockerized elasticsearch7.3 on my local machine and I'm trying to use my GeoIP2-City.mmdb to add geoip info. I've read the length and breadth of the official geoip processor description and I still can… --- ## [Shrinking a large cluster](https://discuss.elastic.co/t/shrinking-a-large-cluster/197076)
**Author:** [@dolsson](https://discuss.elastic.co/u/dolsson)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 9:37am UTC](https://discuss.elastic.co/t/shrinking-a-large-cluster/197076 "2019-08-28T09:37:45Z")
Hi, We have a scenario where we need to shrink a 60 data-node (+ 1 master) cluster down to just 30 data nodes. The cluster currently holds about 1.8PB of data and each data node is a powerful bare metal server connected… --- ## [How to remove elasticsearch indices storage completly](https://discuss.elastic.co/t/how-to-remove-elasticsearch-indices-storage-completly/195904)
**Author:** [@amolp](https://discuss.elastic.co/u/amolp)\ **Replies:** 3\ **Last updated:** [August 28, 2019, 9:24am UTC](https://discuss.elastic.co/t/how-to-remove-elasticsearch-indices-storage-completly/195904 "2019-08-28T09:24:09Z")
Hi Experts I have configured elasticsearch on aws ec2 instance and I am keeping data of one month over ebs volume, and deleting it after every one month by using curator, but still, storage is increasing day by day. he… --- ## [Migrating elasticsearch data](https://discuss.elastic.co/t/migrating-elasticsearch-data/196905)
**Author:** [@ShahafSW](https://discuss.elastic.co/u/ShahafSW)\ **Replies:** 7\ **Last updated:** [August 28, 2019, 9:03am UTC](https://discuss.elastic.co/t/migrating-elasticsearch-data/196905 "2019-08-28T09:03:07Z")
Hey Everyone, I have this situation that I have a disconnected elasticsearch\[1\] environment and I need to transfer the data to another elasticsearch\[2\] cluster. I was thinking to export all of the data from \[1\] to a Js… --- ## [Problem in running elasticsearch](https://discuss.elastic.co/t/problem-in-running-elasticsearch/197035)
**Author:** [@nijanthan0](https://discuss.elastic.co/u/nijanthan0)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 7:51am UTC](https://discuss.elastic.co/t/problem-in-running-elasticsearch/197035 "2019-08-28T07:51:14Z")
Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release. Exception in thread "main" 2019-08-28 10:44:46,645 main ERROR No Log4j 2 … --- ## [Use lucene FacetField instead of Elasticsearch MutiBucketCollector to improve performance](https://discuss.elastic.co/t/use-lucene-facetfield-instead-of-elasticsearch-mutibucketcollector-to-improve-performance/197044)
**Author:** [@YinRong](https://discuss.elastic.co/u/YinRong)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 7:03am UTC](https://discuss.elastic.co/t/use-lucene-facetfield-instead-of-elasticsearch-mutibucketcollector-to-improve-performance/197044 "2019-08-28T07:03:03Z")
I'm doing aggs.terms (StringTermsAggregator) on 300 fields, which takes 60~100ms (there are 300 docs after query/filter). If using lucene org.apache.lucene.facet.FacetsCollector, it takes 10ms. Is there a way to use lu… --- ## [Root mapping definition has unsupported parameters: \[\_size : {enabled=true}\]](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-size-enabled-true/193971)
**Author:** [@loknath\_sudhakar](https://discuss.elastic.co/u/loknath_sudhakar)\ **Replies:** 5\ **Last updated:** [August 28, 2019, 7:04am UTC](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-size-enabled-true/193971 "2019-08-28T07:04:22Z")
Hello, I have installed ES 6.5.4 in my cluster. Also installed Size plugin 6.5.4. After restarting the cluster, tried creating an index with mappings as follows: PUT test\_index/ { "mappings": { "my\_type": { … --- ## [Data node’s cluster uuid diffrent from master node's cluster uuid](https://discuss.elastic.co/t/data-node-s-cluster-uuid-diffrent-from-master-nodes-cluster-uuid/196737)
**Author:** [@111197](https://discuss.elastic.co/u/111197)\ **Replies:** 7\ **Last updated:** [August 28, 2019, 6:53am UTC](https://discuss.elastic.co/t/data-node-s-cluster-uuid-diffrent-from-master-nodes-cluster-uuid/196737 "2019-08-28T06:53:53Z")
Hi, all. I’m trying to build elasticsearch version 7.3.0 cluster.(on docker on AWS ECS) Now, master and ingest nodes are built successfully as below. (Domain name and IPs are example name for explain.) curl EXAMPLE-D… --- ## [Applying Bucket aggregation to the output of Pipeline aggregation](https://discuss.elastic.co/t/applying-bucket-aggregation-to-the-output-of-pipeline-aggregation/197040)
**Author:** [@G-K-Patel](https://discuss.elastic.co/u/G-K-Patel)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 6:24am UTC](https://discuss.elastic.co/t/applying-bucket-aggregation-to-the-output-of-pipeline-aggregation/197040 "2019-08-28T06:24:51Z")
Hi all ES lovers, I was wondering if it is somehow possible to apply bucket aggregation to the output of a pipeline aggregation. I have the following usecase, There is a software that runs over variable amount of time… --- ## [Windows event not picked by elasticsearch](https://discuss.elastic.co/t/windows-event-not-picked-by-elasticsearch/197029)
**Author:** [@JustinJ](https://discuss.elastic.co/u/JustinJ)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 5:06am UTC](https://discuss.elastic.co/t/windows-event-not-picked-by-elasticsearch/197029 "2019-08-28T05:06:50Z")
I am using the following architecture: Central event Collector(CEC) (With winlogbeat and filebeat)--\>\>\>Ingest Nodes--\>\>\>Data Nodes--\>\>\>Kibana. The CEC is a windows server and is configured to push all security events. F… --- ## [Rename fields in the search output](https://discuss.elastic.co/t/rename-fields-in-the-search-output/196850)
**Author:** [@arsenmk](https://discuss.elastic.co/u/arsenmk)\ **Replies:** 3\ **Last updated:** [August 28, 2019, 12:12am UTC](https://discuss.elastic.co/t/rename-fields-in-the-search-output/196850 "2019-08-28T00:12:15Z")
Is there a way to rename the fields in the output similar to how you can do field aliases in SQL, e.g.: "SELECT lastname AS surname FROM people" ? Note, I want only the output be changed, not the stored fields or any map… --- ## [How to specify number\_of\_shards when putting data into ES using elasticsearch-hadoop SDK](https://discuss.elastic.co/t/how-to-specify-number-of-shards-when-putting-data-into-es-using-elasticsearch-hadoop-sdk/197001)
**Author:** [@yuecong](https://discuss.elastic.co/u/yuecong)\ **Replies:** 2\ **Last updated:** [August 27, 2019, 11:09pm UTC](https://discuss.elastic.co/t/how-to-specify-number-of-shards-when-putting-data-into-es-using-elasticsearch-hadoop-sdk/197001 "2019-08-27T23:09:40Z")
From this page for the elasticsearch hadoop SDK, I can not find how to configure number\_of\_shards when creating one index automatically like .option("es.resource.write", "log-{dateHour}") In this doc, it menthioned i… --- ## [Find-master-node-timeout needed](https://discuss.elastic.co/t/find-master-node-timeout-needed/196827)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 12\ **Last updated:** [August 27, 2019, 10:28pm UTC](https://discuss.elastic.co/t/find-master-node-timeout-needed/196827 "2019-08-27T22:28:39Z")
Cluster has 3 master nodes: I typically bring up 1 as the 'seed' node and then add two others to point to it. Once the nodes have all agreed on who is the boss I kill the 'seed' node and scale up the others to 3. This m… --- ## [Is it possible to filter documents based on a field in the most recent version, but still get all the documents?](https://discuss.elastic.co/t/is-it-possible-to-filter-documents-based-on-a-field-in-the-most-recent-version-but-still-get-all-the-documents/196845)
**Author:** [@btr](https://discuss.elastic.co/u/btr)\ **Replies:** 0\ **Last updated:** [August 26, 2019, 10:15pm UTC](https://discuss.elastic.co/t/is-it-possible-to-filter-documents-based-on-a-field-in-the-most-recent-version-but-still-get-all-the-documents/196845 "2019-08-26T22:15:07Z")
I have a wildcard index (let's call it foo-\*) that gets created once per day. So for example, I have the following indexes now that I search across: foo-2019-08-23 foo-2019-08-24 foo-2019-08-25 foo-2019-08-26 One field… --- ## [Performance tuning for indexing between using dedicated coordinator code and using data nodes directly](https://discuss.elastic.co/t/performance-tuning-for-indexing-between-using-dedicated-coordinator-code-and-using-data-nodes-directly/197002)
**Author:** [@yuecong](https://discuss.elastic.co/u/yuecong)\ **Replies:** 0\ **Last updated:** [August 27, 2019, 8:46pm UTC](https://discuss.elastic.co/t/performance-tuning-for-indexing-between-using-dedicated-coordinator-code-and-using-data-nodes-directly/197002 "2019-08-27T20:46:25Z")
In my use case, I have a heavy load to index data continuously. I configured my data nodes with quite big CPU/Memory and using SSD. Also I have 3 dedicated coordinator nodes. At this point, both data read and write are t… --- ## [Script difference between 1.7 and 6.8](https://discuss.elastic.co/t/script-difference-between-1-7-and-6-8/196998)
**Author:** [@waldson](https://discuss.elastic.co/u/waldson)\ **Replies:** 0\ **Last updated:** [August 27, 2019, 8:01pm UTC](https://discuss.elastic.co/t/script-difference-between-1-7-and-6-8/196998 "2019-08-27T20:01:38Z")
Hello, Does anyone can help on how the following search can be translated to be compatible with ES 6.8? GET access-\*/\_search { "query": { "range": { "request.time": { "gte": "201… --- ## [Elastic Search 7.3 not working with ip address in redhat 7 server](https://discuss.elastic.co/t/elastic-search-7-3-not-working-with-ip-address-in-redhat-7-server/196996)
**Author:** [@SachinRaj](https://discuss.elastic.co/u/SachinRaj)\ **Replies:** 1\ **Last updated:** [August 27, 2019, 7:58pm UTC](https://discuss.elastic.co/t/elastic-search-7-3-not-working-with-ip-address-in-redhat-7-server/196996 "2019-08-27T19:58:04Z")
hello, Elasticsearch not responding to ip address please advise on this changes done in elasticsearch.yml :: cluster.name: "my\_cluster" node.name: testing network.host: 15.140.2.227 http.port: 9200 discovery.seed… --- ## [Reindex API not working as expected from remote](https://discuss.elastic.co/t/reindex-api-not-working-as-expected-from-remote/196963)
**Author:** [@\_greg](https://discuss.elastic.co/u/_greg)\ **Replies:** 1\ **Last updated:** [August 27, 2019, 6:36pm UTC](https://discuss.elastic.co/t/reindex-api-not-working-as-expected-from-remote/196963 "2019-08-27T18:36:05Z")
Hi, I want to reindex my daily indices into one 'master index'. When I execute the following command from the Dev Tools in Kibana in the Elastic Cloud, it's working like expected: POST \_reindex { "source": { "in… --- ## [Rewrite\_time in \_search takes a lot longer after upgrading from 6.4.2 to 6.8.2](https://discuss.elastic.co/t/rewrite-time-in-search-takes-a-lot-longer-after-upgrading-from-6-4-2-to-6-8-2/196960)
**Author:** [@imrimt](https://discuss.elastic.co/u/imrimt)\ **Replies:** 0\ **Last updated:** [August 27, 2019, 1:56pm UTC](https://discuss.elastic.co/t/rewrite-time-in-search-takes-a-lot-longer-after-upgrading-from-6-4-2-to-6-8-2/196960 "2019-08-27T13:56:04Z")
We recently upgraded our ES cluster from 6.4.2 to 6.8.2 without any changes to the data. One thing we notice is that the same search query takes a lot longer in 6.8.2, and after turning on profiling, we notice the signif… --- ## [Restore history](https://discuss.elastic.co/t/restore-history/195664)
**Author:** [@murali12180](https://discuss.elastic.co/u/murali12180)\ **Replies:** 2\ **Last updated:** [August 27, 2019, 3:52pm UTC](https://discuss.elastic.co/t/restore-history/195664 "2019-08-27T15:52:14Z")
Hi, I have restored some of snapshot from the backup and I'd like to pull the history of indices restored so that I can run some audit on it. Please help. Thanks --- ## [Error in Kibana logs](https://discuss.elastic.co/t/error-in-kibana-logs/196971)
**Author:** [@billoreavinash12](https://discuss.elastic.co/u/billoreavinash12)\ **Replies:** 0\ **Last updated:** [August 27, 2019, 3:30pm UTC](https://discuss.elastic.co/t/error-in-kibana-logs/196971 "2019-08-27T15:30:13Z")
I think issue might have occurred but i am still not able to solve this. I am new to this. Below is what i am doing and getting errors in Kibana as Error message i see in " No Living Connection" "Unable to revie conne… --- ## [Security/Basic Authentication/Transport TLS - One node failing No Subject Alternative names present](https://discuss.elastic.co/t/security-basic-authentication-transport-tls-one-node-failing-no-subject-alternative-names-present/196841)
**Author:** [@hueyg](https://discuss.elastic.co/u/hueyg)\ **Replies:** 2\ **Last updated:** [August 27, 2019, 3:08pm UTC](https://discuss.elastic.co/t/security-basic-authentication-transport-tls-one-node-failing-no-subject-alternative-names-present/196841 "2019-08-27T15:08:19Z")
Four node cluster, not sure if best setup but another time. node1 - LS + ES, master eligible node2 - LS + ES, master eligible node3 - LS + ES, master eligible node4 - KB + ES, ingest(?) only node Following the secur… --- ## [Stop sending duplicate error in mail alert in watcher](https://discuss.elastic.co/t/stop-sending-duplicate-error-in-mail-alert-in-watcher/196867)
**Author:** [@saurabh06](https://discuss.elastic.co/u/saurabh06)\ **Replies:** 1\ **Last updated:** [August 27, 2019, 2:54pm UTC](https://discuss.elastic.co/t/stop-sending-duplicate-error-in-mail-alert-in-watcher/196867 "2019-08-27T14:54:53Z")
How to stop executing action if their is same hits came again for the matched condition.i.e i want to send mail alert if their are distinct error came. I want to scan the log every 10 min interval but if their occurs sa… --- ## [Dataframe restart](https://discuss.elastic.co/t/dataframe-restart/195190)
**Author:** [@rvanegmond](https://discuss.elastic.co/u/rvanegmond)\ **Replies:** 3\ **Last updated:** [August 27, 2019, 2:21pm UTC](https://discuss.elastic.co/t/dataframe-restart/195190 "2019-08-27T14:21:23Z")
I created a few dataframes which I can successfully run but I can never restart them to update the results. Not by using the API or the (greyed out) start button. Am I missing something? --- ## [Getting error while processing Nested Document :org.elasticsearch.hadoop.mr.WritableArrayWritable cannot be cast to org.apache.hadoop.io.MapWritable](https://discuss.elastic.co/t/getting-error-while-processing-nested-document-org-elasticsearch-hadoop-mr-writablearraywritable-cannot-be-cast-to-org-apache-hadoop-io-mapwritable/196359)
**Author:** [@Srinivas2](https://discuss.elastic.co/u/Srinivas2)\ **Replies:** 6\ **Last updated:** [August 27, 2019, 1:20pm UTC](https://discuss.elastic.co/t/getting-error-while-processing-nested-document-org-elasticsearch-hadoop-mr-writablearraywritable-cannot-be-cast-to-org-apache-hadoop-io-mapwritable/196359 "2019-08-27T13:20:31Z")
Hi Team, I am creating an external table on a nested JSON document looks like below. { "rootcol1": "val1", "rootcol2": "vla2", "rootcol3": "val2", "rootcol4": "val3", "rootcol5": \[ { "childcol1": "v… --- ## [Issue with High Level Rest Client Api](https://discuss.elastic.co/t/issue-with-high-level-rest-client-api/195853)
**Author:** [@shantanu\_bhardwaj](https://discuss.elastic.co/u/shantanu_bhardwaj)\ **Replies:** 6\ **Last updated:** [August 27, 2019, 12:47pm UTC](https://discuss.elastic.co/t/issue-with-high-level-rest-client-api/195853 "2019-08-27T12:47:35Z")
RestHighLevelClient restHighLevelClient = new RestHighLevelClient(RestClient.builder(new HttpHost("localhost", 9200))); CreateIndexRequest indexRequest = new CreateIndexRequest("sample-index"); restHighLevel… --- ## [Mappings get messed up - Any way to enforce mappings](https://discuss.elastic.co/t/mappings-get-messed-up-any-way-to-enforce-mappings/196449)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 6\ **Last updated:** [August 27, 2019, 12:41pm UTC](https://discuss.elastic.co/t/mappings-get-messed-up-any-way-to-enforce-mappings/196449 "2019-08-27T12:41:45Z")
I create my indices with a nice tidy mapping where most fields are keywords but, over time, the mapping mutates into a monster of text fields with a ".keyword" property. How can this happen and is there any way to stop i… --- ## [Update elastic stack from 7.0 to 7.3](https://discuss.elastic.co/t/update-elastic-stack-from-7-0-to-7-3/196907)
**Author:** [@omardawed](https://discuss.elastic.co/u/omardawed)\ **Replies:** 1\ **Last updated:** [August 27, 2019, 11:53am UTC](https://discuss.elastic.co/t/update-elastic-stack-from-7-0-to-7-3/196907 "2019-08-27T11:53:59Z")
Hello , i'm using currently the version 7.0.1 (ELK) i want to upgrade to the version 7.3 (ELK), how to perform the upgrade in the right way ? [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1176) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1178)