# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1179 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1180 --- ## [Unable to connect to elasticsearch after upgrading to 7.3.0](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-after-upgrading-to-7-3-0/193611)
**Author:** [@jxz](https://discuss.elastic.co/u/jxz)\ **Replies:** 4\ **Last updated:** [August 26, 2019, 2:13pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-after-upgrading-to-7-3-0/193611 "2019-08-26T14:13:53Z")
I upgraded to elastisearch 7.3.0 on Windows and the service is running. With the default elasticsearch.yml, I am able to connect to localhost:9200 but I cannot connect to it with IpAddress:9200 on the local machine or fr… --- ## [Nfs filesystem: DirectoryIteratorException No error information](https://discuss.elastic.co/t/nfs-filesystem-directoryiteratorexception-no-error-information/195596)
**Author:** [@hsarkar](https://discuss.elastic.co/u/hsarkar)\ **Replies:** 5\ **Last updated:** [August 26, 2019, 2:11pm UTC](https://discuss.elastic.co/t/nfs-filesystem-directoryiteratorexception-no-error-information/195596 "2019-08-26T14:11:58Z")
I am running a 3 node elasticsearch cluster with the following configuration Version: 6.5.4 Environment: Docker Xmx = 3.75 Filesystem type: nfs Replication: 1 I am getting following error in stdout logs. \[pastebin\]… --- ## [Slow date\_histogram after upgrading to 7.3.0 on "dense" indexes](https://discuss.elastic.co/t/slow-date-histogram-after-upgrading-to-7-3-0-on-dense-indexes/196475)
**Author:** [@Bertrand](https://discuss.elastic.co/u/Bertrand)\ **Replies:** 7\ **Last updated:** [August 26, 2019, 2:09pm UTC](https://discuss.elastic.co/t/slow-date-histogram-after-upgrading-to-7-3-0-on-dense-indexes/196475 "2019-08-26T14:09:28Z")
Hi there, We noticed a serious performance degradation of date\_histogram aggregations on our cluster after migrating from ES 6.8.2 to 7.3.0. Queries are at least 2 times slower with 7.3.0. We managed to reproduce the i… --- ## [Some confusion about translog](https://discuss.elastic.co/t/some-confusion-about-translog/195592)
**Author:** [@KellyK313](https://discuss.elastic.co/u/KellyK313)\ **Replies:** 5\ **Last updated:** [August 26, 2019, 2:05pm UTC](https://discuss.elastic.co/t/some-confusion-about-translog/195592 "2019-08-26T14:05:32Z")
Hello everyone，I have known that "index.translog.durability" make the data from page cache fsync to translog file,but what is the mechanism about fsync the data from page cache to segment file?Is it controlled by OS not … --- ## [Elasticsearch failed immediately](https://discuss.elastic.co/t/elasticsearch-failed-immediately/196777)
**Author:** [@rvb\_n](https://discuss.elastic.co/u/rvb_n)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 2:02pm UTC](https://discuss.elastic.co/t/elasticsearch-failed-immediately/196777 "2019-08-26T14:02:19Z")
\[6:49 PM\] Keerthi B R org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: cannot downgrade a node from version \[7.3.1\] to version \[7.3.0\] at org.elasticsearch.bootstrap.Elasticsearch.init(Ela… --- ## [Elasticsearch 6.5.4 - Can we force Index creation on specific data node?](https://discuss.elastic.co/t/elasticsearch-6-5-4-can-we-force-index-creation-on-specific-data-node/195536)
**Author:** [@Sathish\_kumar\_Marimu](https://discuss.elastic.co/u/Sathish_kumar_Marimu)\ **Replies:** 2\ **Last updated:** [August 26, 2019, 2:00pm UTC](https://discuss.elastic.co/t/elasticsearch-6-5-4-can-we-force-index-creation-on-specific-data-node/195536 "2019-08-26T14:00:34Z")
Hi, I am trying to restore an index dump into Elastic. I am creating an index with 1 shard and 2 replica. I have 6 data nodes in my prod cluster. Is there a way can i force the index creation on particular 3 data nodes … --- ## [Nodes are not joining cluster](https://discuss.elastic.co/t/nodes-are-not-joining-cluster/195248)
**Author:** [@David04](https://discuss.elastic.co/u/David04)\ **Replies:** 2\ **Last updated:** [August 26, 2019, 1:59pm UTC](https://discuss.elastic.co/t/nodes-are-not-joining-cluster/195248 "2019-08-26T13:59:32Z")
Hello, I am trying to build a 3-node Elasticsearch cluster. I am using Elasticsearch 7.3. When I check the health of the cluster, it tells me the number of nodes = 1. Here are the node settings for all three: Start … --- ## [Elasticsearch cluster does not show all nodes](https://discuss.elastic.co/t/elasticsearch-cluster-does-not-show-all-nodes/195181)
**Author:** [@Ofer\_Peled](https://discuss.elastic.co/u/Ofer_Peled)\ **Replies:** 4\ **Last updated:** [August 26, 2019, 1:58pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-does-not-show-all-nodes/195181 "2019-08-26T13:58:20Z")
Hi there, Although I am using the docker compose attached, I see ONLY ONE node in my elasticsearch cluster (running http://X.X.X.X:9200/\_cat/nodes?v) Nothing suspicious in the logs. Any idea what am I doing wrong. … --- ## [Elasticsearch status red and shard percent stop at 85%](https://discuss.elastic.co/t/elasticsearch-status-red-and-shard-percent-stop-at-85/194949)
**Author:** [@Specs](https://discuss.elastic.co/u/Specs)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 1:56pm UTC](https://discuss.elastic.co/t/elasticsearch-status-red-and-shard-percent-stop-at-85/194949 "2019-08-26T13:56:05Z")
My ELK stack stoped yesterday, and I found it was because elasticsearch stoped. And I restart it, but logstash can not write data into it. I checked /\_cat/health, and got this: Later I restart it again, the active\_sha… --- ## [ELK basic config](https://discuss.elastic.co/t/elk-basic-config/196411)
**Author:** [@NewmazN24](https://discuss.elastic.co/u/NewmazN24)\ **Replies:** 8\ **Last updated:** [August 26, 2019, 1:43pm UTC](https://discuss.elastic.co/t/elk-basic-config/196411 "2019-08-26T13:43:23Z")
Hey Guys, I am turning to this forum since I can't get to the bottom of it. I installed ELK Stack on CentOS7, however I do not seem to be able to make my configuration working with my network. I am trying to get Winlogb… --- ## [Will replica's do same amount of work as primaries?](https://discuss.elastic.co/t/will-replicas-do-same-amount-of-work-as-primaries/195044)
**Author:** [@eightnoteight](https://discuss.elastic.co/u/eightnoteight)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 1:39pm UTC](https://discuss.elastic.co/t/will-replicas-do-same-amount-of-work-as-primaries/195044 "2019-08-26T13:39:48Z")
Hi, for our cluster, now the disk is not an issue anymore but the cpu is, if I increase the replica's how much increase cpu usage should I expect? is it 2x of the previous usage? i.e will the replica's do the same amou… --- ## [FORBIDDEN/12/index read-only / allow delete (api)\] : indexes are set to "read only mode"](https://discuss.elastic.co/t/forbidden-12-index-read-only-allow-delete-api-indexes-are-set-to-read-only-mode/194843)
**Author:** [@wadhah](https://discuss.elastic.co/u/wadhah)\ **Replies:** 3\ **Last updated:** [August 26, 2019, 1:39pm UTC](https://discuss.elastic.co/t/forbidden-12-index-read-only-allow-delete-api-indexes-are-set-to-read-only-mode/194843 "2019-08-26T13:39:25Z")
Hello, I have deployed ELK stack (version 7.2.0) on kubernetes, and everything was working just fine till I got this error " \[FORBIDDEN/12/index read-only / allow delete (api)\]\]" while doing some stuff on kibana. What I… --- ## [Connecting hadoop and elasticsearch](https://discuss.elastic.co/t/connecting-hadoop-and-elasticsearch/196170)
**Author:** [@varunakuraju](https://discuss.elastic.co/u/varunakuraju)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 7:45pm UTC](https://discuss.elastic.co/t/connecting-hadoop-and-elasticsearch/196170 "2019-08-23T19:45:10Z")
Hi all, I am new to Elasticsearch and kibana I want establish two-way connection between hdfs and elasticsearch. I used Hive external tables but its not working. I am not finding a way , steps i have done installed… --- ## [Unable to create client connection to Elasticsearch. Error: TransportError(401, u'security\_exception', u'missing authentication credentials for REST request \[/\]')](https://discuss.elastic.co/t/unable-to-create-client-connection-to-elasticsearch-error-transporterror-401-usecurity-exception-umissing-authentication-credentials-for-rest-request/196740)
**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\ **Replies:** 3\ **Last updated:** [August 26, 2019, 1:28pm UTC](https://discuss.elastic.co/t/unable-to-create-client-connection-to-elasticsearch-error-transporterror-401-usecurity-exception-umissing-authentication-credentials-for-rest-request/196740 "2019-08-26T13:28:04Z")
Hi, i am using elk stack with version 7.1.0 with x-pack and i want to snapshot the index using curator and when im executing the curator im getting the following errors : ig ./curator.yml --dry-run 2019-08-26 15:02:25… --- ## [Watcher Alert](https://discuss.elastic.co/t/watcher-alert/196751)
**Author:** [@gsece](https://discuss.elastic.co/u/gsece)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 1:07pm UTC](https://discuss.elastic.co/t/watcher-alert/196751 "2019-08-26T13:07:57Z")
I want to trigger an email alert when the document.field.status = fail reaches the defined threshold level. This email alert should be sent only once. How can I do this? --- ## [Questions about \[FORBIDDEN/12/index read-only](https://discuss.elastic.co/t/questions-about-forbidden-12-index-read-only/196731)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 12:05pm UTC](https://discuss.elastic.co/t/questions-about-forbidden-12-index-read-only/196731 "2019-08-26T12:05:46Z")
Hi, I have a small dev cluster running in kubernetes. Since I have quite limited diskspace elasticsearch is often throwing the following error to indexing applications like logstash or kibana: ... blocked by: \[FORBIDD… --- ## [Elastic stack license problem](https://discuss.elastic.co/t/elastic-stack-license-problem/196730)
**Author:** [@tng](https://discuss.elastic.co/u/tng)\ **Replies:** 6\ **Last updated:** [August 26, 2019, 11:54am UTC](https://discuss.elastic.co/t/elastic-stack-license-problem/196730 "2019-08-26T11:54:56Z")
Hello, I installed the Elastic stack with 'basic' license on Docker 4 days ago. I initialized the built-in users passwords and created a user for accessing the Kibana web UI and another user for storing into Elasticsear… --- ## [Factor aggregate score on child collection into query on parent](https://discuss.elastic.co/t/factor-aggregate-score-on-child-collection-into-query-on-parent/196757)
**Author:** [@shertu](https://discuss.elastic.co/u/shertu)\ **Replies:** 0\ **Last updated:** [August 26, 2019, 11:49am UTC](https://discuss.elastic.co/t/factor-aggregate-score-on-child-collection-into-query-on-parent/196757 "2019-08-26T11:49:10Z")
I want to create a search system where a user's search is analyzed against similar searches. Here is an example of the data in my system: Each document in my system contains a list of events wherein the document was r… --- ## [Edge-NGram Ranking Results Incorrectly?](https://discuss.elastic.co/t/edge-ngram-ranking-results-incorrectly/196755)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 0\ **Last updated:** [August 26, 2019, 11:44am UTC](https://discuss.elastic.co/t/edge-ngram-ranking-results-incorrectly/196755 "2019-08-26T11:44:40Z")
I noticed the edge\_ngram analyzer scoring exact matches of a query lower than poor matches so I copied the data into a second field with the standard analyzer to compare. I now have 2 fields with the same content but di… --- ## [Replicating the APM behavior for log search](https://discuss.elastic.co/t/replicating-the-apm-behavior-for-log-search/196747)
**Author:** [@gajanan8086](https://discuss.elastic.co/u/gajanan8086)\ **Replies:** 0\ **Last updated:** [August 26, 2019, 10:20am UTC](https://discuss.elastic.co/t/replicating-the-apm-behavior-for-log-search/196747 "2019-08-26T10:20:42Z")
Hi Team, We are using Elasticsearch APM for performance monitoring and also using the log correction feature to stamp the traceID for each application log line. These log lines are published as an individual document to… --- ## [In Elasticsearch SQL using group by year(date-field) is slow, should I create a standalone year-of-date field when importing?](https://discuss.elastic.co/t/in-elasticsearch-sql-using-group-by-year-date-field-is-slow-should-i-create-a-standalone-year-of-date-field-when-importing/196480)
**Author:** [@Jack\_Wu](https://discuss.elastic.co/u/Jack_Wu)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 10:07am UTC](https://discuss.elastic.co/t/in-elasticsearch-sql-using-group-by-year-date-field-is-slow-should-i-create-a-standalone-year-of-date-field-when-importing/196480 "2019-08-26T10:07:52Z")
Hi all, the "year" function in group by is slow. Here is the example: "select year(docdate), sum(docamt) FROM indexA GROUP BY year(docdate)" is much slower than "select docdate\_year, sum(docamt) FROM indexA GROUP … --- ## [CircuitBreakingException in elasticsearch](https://discuss.elastic.co/t/circuitbreakingexception-in-elasticsearch/196744)
**Author:** [@amolp](https://discuss.elastic.co/u/amolp)\ **Replies:** 0\ **Last updated:** [August 26, 2019, 10:06am UTC](https://discuss.elastic.co/t/circuitbreakingexception-in-elasticsearch/196744 "2019-08-26T10:06:43Z")
Hi Experts Below are the error logs of elasticsearch and logstash any one please help me in this. Elasticserach 6.x Logs ------\> at java.lang.Thread.run(Thread.java:748) \[?:1.8.0\_222\] \[2019-08-26T09:47:30,920\]\[WARN \]… --- ## [Bool filter and must - must not Query with nested not right response](https://discuss.elastic.co/t/bool-filter-and-must-must-not-query-with-nested-not-right-response/196481)
**Author:** [@z-Dapor](https://discuss.elastic.co/u/z-Dapor)\ **Replies:** 2\ **Last updated:** [August 26, 2019, 10:03am UTC](https://discuss.elastic.co/t/bool-filter-and-must-must-not-query-with-nested-not-right-response/196481 "2019-08-26T10:03:37Z")
This is my mappings: "mappings": { "\_doc":{ "properties": { "channels": { "type": "nested", "properties":{ "name":{ "type":"keyword" }, "value":{ "type":"long" } } } This is my DSL: GET my\_index2/\_search … --- ## [Sub Aggregated Field | Watcher Action Elasticsearch](https://discuss.elastic.co/t/sub-aggregated-field-watcher-action-elasticsearch/196734)
**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 9:41am UTC](https://discuss.elastic.co/t/sub-aggregated-field-watcher-action-elasticsearch/196734 "2019-08-26T09:41:39Z")
Hi all, I was wondering if you could help me in figuring out how I can reference an aggregated field AND sub-aggregated field in my watcher action? In this example, I wish to reference key and elasticid in my watcher a… --- ## [EsHadoopIllegalStateException when using ranges](https://discuss.elastic.co/t/eshadoopillegalstateexception-when-using-ranges/195733)
**Author:** [@markoutso](https://discuss.elastic.co/u/markoutso)\ **Replies:** 2\ **Last updated:** [August 26, 2019, 6:54am UTC](https://discuss.elastic.co/t/eshadoopillegalstateexception-when-using-ranges/195733 "2019-08-26T06:54:18Z")
Hello, I have the following index and data: PUT range\_index { "settings": { "number\_of\_shards": 2 }, "mappings": { "\_doc": { "properties": { "expected\_attendees": { "type": "integer… --- ## [Is there an automated solution for the rollover pattern?](https://discuss.elastic.co/t/is-there-an-automated-solution-for-the-rollover-pattern/196726)
**Author:** [@SphiaTower](https://discuss.elastic.co/u/SphiaTower)\ **Replies:** 2\ **Last updated:** [August 26, 2019, 9:15am UTC](https://discuss.elastic.co/t/is-there-an-automated-solution-for-the-rollover-pattern/196726 "2019-08-26T09:15:52Z")
Hi there, As is described in this post, the rollover pattern is very effective and can often boost performance if implemented correctly. However, implementing the rollover pattern involves too many steps, some of which … --- ## [Multiple filters in the query return always the last](https://discuss.elastic.co/t/multiple-filters-in-the-query-return-always-the-last/196666)
**Author:** [@rudy42](https://discuss.elastic.co/u/rudy42)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 9:03am UTC](https://discuss.elastic.co/t/multiple-filters-in-the-query-return-always-the-last/196666 "2019-08-26T09:03:20Z")
Hello, I am a beginner with elasticsearch. I try to integrate it in my Laravel project. I use, at the moment ES v6.3, with the following mapping in my index; $params = \[ 'index' =\> 'stocks', … --- ## [Reaching elasticsearch externally](https://discuss.elastic.co/t/reaching-elasticsearch-externally/196600)
**Author:** [@codecandy](https://discuss.elastic.co/u/codecandy)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 8:54am UTC](https://discuss.elastic.co/t/reaching-elasticsearch-externally/196600 "2019-08-26T08:54:19Z")
I am trying to reach ES via a GO Client - the official GO Client from ES is able to connect. however, I am trying to see is this client is reaching the ES instance It is not working because the transport publish addr… --- ## [Finding correct painless request for Kibana Webhook](https://discuss.elastic.co/t/finding-correct-painless-request-for-kibana-webhook/193122)
**Author:** [@isabel](https://discuss.elastic.co/u/isabel)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 8:48am UTC](https://discuss.elastic.co/t/finding-correct-painless-request-for-kibana-webhook/193122 "2019-08-26T08:48:34Z")
Hello, I'm trying to hand over an ID from my Watcher context to my Watcher Action (Webhook). There are the following Fields: workerId.keyword = string f1score = number assignment\_completed = boolean I want to fin… --- ## [Script Condition - Count](https://discuss.elastic.co/t/script-condition-count/196708)
**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 8:45am UTC](https://discuss.elastic.co/t/script-condition-count/196708 "2019-08-26T08:45:59Z")
Hi all, I was wondering if it was possible to incorporate count in the script condition, instead of the query? If so, how do you do it? Thanks in advance, Nhung [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1178) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1180)