# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1180

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1181

---

## [Elastic and kibana send resets on Ubuntu server](https://discuss.elastic.co/t/elastic-and-kibana-send-resets-on-ubuntu-server/196216)

<div class="topic-metadata">

**Author:** [@Mezoloth](https://discuss.elastic.co/u/Mezoloth)\
**Replies:** 7\
**Last updated:** [August 26, 2019, 8:20am UTC](https://discuss.elastic.co/t/elastic-and-kibana-send-resets-on-ubuntu-server/196216 "2019-08-26T08:20:53Z")

</div>

I have elastic and kibana setup and running. I can curl to localhost:9200 as show below: root@elk:~# curl http://127.0.0.1:9200 { "name" : "elk", "cluster\_name" : "elasticsearch", "cluster\_uuid" : …

---

## [How to improve performance in this case?](https://discuss.elastic.co/t/how-to-improve-performance-in-this-case/196267)

<div class="topic-metadata">

**Author:** [@b0nes](https://discuss.elastic.co/u/b0nes)\
**Replies:** 6\
**Last updated:** [August 26, 2019, 7:22am UTC](https://discuss.elastic.co/t/how-to-improve-performance-in-this-case/196267 "2019-08-26T07:22:27Z")

</div>

Hi there, I've setup a single node Elastic stack instance with 48G Ram (24G Heap) and 8 cores. Everything was working fine until I actually started ingesting some real logs. Kibana discover tab is now actually unusabl…

---

## [One index or seperate indices for logfiles](https://discuss.elastic.co/t/one-index-or-seperate-indices-for-logfiles/196656)

<div class="topic-metadata">

**Author:** [@lcer00](https://discuss.elastic.co/u/lcer00)\
**Replies:** 2\
**Last updated:** [August 26, 2019, 6:30am UTC](https://discuss.elastic.co/t/one-index-or-seperate-indices-for-logfiles/196656 "2019-08-26T06:30:49Z")

</div>

Hallo, I'm implementing elasticsearch for storing log-data from different sources. Its log-data from windows dhcp an nps/radius servers but also syslog data from different sources. I have a logstash instance that filter…

---

## [Json fields not placed in elasticsearch properly](https://discuss.elastic.co/t/json-fields-not-placed-in-elasticsearch-properly/196343)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 2\
**Last updated:** [August 26, 2019, 6:43am UTC](https://discuss.elastic.co/t/json-fields-not-placed-in-elasticsearch-properly/196343 "2019-08-26T06:43:51Z")

</div>

HI All, We have ingested a json file of data through logstash, now the data has not been properly placed in elasticsearch without this we cant utilize this data to build dashboards in kibana. JSON file for your referen…

---

## [Elastic search working after install but then I again it show this error when I restart my mac](https://discuss.elastic.co/t/elastic-search-working-after-install-but-then-i-again-it-show-this-error-when-i-restart-my-mac/196703)

<div class="topic-metadata">

**Author:** [@nijanthan0](https://discuss.elastic.co/u/nijanthan0)\
**Replies:** 4\
**Last updated:** [August 26, 2019, 5:49am UTC](https://discuss.elastic.co/t/elastic-search-working-after-install-but-then-i-again-it-show-this-error-when-i-restart-my-mac/196703 "2019-08-26T05:49:15Z")

</div>

Macintosh:~ rs$ elasticsearch Java HotSpot(TM) 64-Bit Server VM warning: Cannot open file logs/gc.log due to No such file or directory \[2019-08-26T10:28:04,353\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[unkno…

---

## [Elasticsearch mapping \_parsing\_exception](https://discuss.elastic.co/t/elasticsearch-mapping-parsing-exception/196561)

<div class="topic-metadata">

**Author:** [@Vishnu\_Singhal](https://discuss.elastic.co/u/Vishnu_Singhal)\
**Replies:** 8\
**Last updated:** [August 26, 2019, 5:25am UTC](https://discuss.elastic.co/t/elasticsearch-mapping-parsing-exception/196561 "2019-08-26T05:25:36Z")

</div>

Hi, I'm using ELasticsearch as docker . I havent created mapping indexes there . I'm getting following exception org.apache.spark.SparkException: Job aborted due to stage failure: Task 43 in stage 516846.0 failed 4 ti…

---

## [Enable xpack autentication on live clusters](https://discuss.elastic.co/t/enable-xpack-autentication-on-live-clusters/196650)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 3\
**Last updated:** [August 26, 2019, 4:09am UTC](https://discuss.elastic.co/t/enable-xpack-autentication-on-live-clusters/196650 "2019-08-26T04:09:19Z")

</div>

Got two live 6.8 clusters both with basic license and no TLS in communication on which I've like to enable authentication. Currently using nginx proxy basic auth on kibana. Got multiple data shippers (beats and logstash…

---

## [Parent Child always query parent but might filter children?](https://discuss.elastic.co/t/parent-child-always-query-parent-but-might-filter-children/196662)

<div class="topic-metadata">

**Author:** [@nickjacobs](https://discuss.elastic.co/u/nickjacobs)\
**Replies:** 1\
**Last updated:** [August 26, 2019, 2:53am UTC](https://discuss.elastic.co/t/parent-child-always-query-parent-but-might-filter-children/196662 "2019-08-26T02:53:57Z")

</div>

So I'm trying to determine the best way to handle the house hold occupant kind of question for our membership roster. We would always query something of the household. Address, or something like that, but at times, we…

---

## [Geo spatial query - Using NEST (version 7) to Query WKT Field](https://discuss.elastic.co/t/geo-spatial-query-using-nest-version-7-to-query-wkt-field/196673)

<div class="topic-metadata">

**Author:** [@han1](https://discuss.elastic.co/u/han1)\
**Replies:** 4\
**Last updated:** [August 26, 2019, 2:43am UTC](https://discuss.elastic.co/t/geo-spatial-query-using-nest-version-7-to-query-wkt-field/196673 "2019-08-26T02:43:34Z")

</div>

We have an index with a GeoShape field that contains boundaries of counties in WKT format such as MULTIPOLYGON (((-9.50189821688122 51.6790656404768, -9.52975113548365 51.6846028881403, -9.49436480898325 51.700202086198…

---

## [Praeco - Free alerting GUI for elasticsearch - now with v7 support](https://discuss.elastic.co/t/praeco-free-alerting-gui-for-elasticsearch-now-with-v7-support/196685)

<div class="topic-metadata">

**Author:** [@johnsusek](https://discuss.elastic.co/u/johnsusek)\
**Replies:** 0\
**Last updated:** [August 26, 2019, 12:53am UTC](https://discuss.elastic.co/t/praeco-free-alerting-gui-for-elasticsearch-now-with-v7-support/196685 "2019-08-26T00:53:11Z")

</div>

Hey everyone, I posted about this tool I created last year. I just wanted to let everyone know it's been updated for elasticsearch 7. Give it a spin and let me know if you have any problems! Praeco is a GUI for building…

---

## [Queries regarding Elasticsearch](https://discuss.elastic.co/t/queries-regarding-elasticsearch/196674)

<div class="topic-metadata">

**Author:** [@Mitali\_Saxena](https://discuss.elastic.co/u/Mitali_Saxena)\
**Replies:** 1\
**Last updated:** [August 25, 2019, 7:22pm UTC](https://discuss.elastic.co/t/queries-regarding-elasticsearch/196674 "2019-08-25T19:22:37Z")

</div>

Does the limit of Elasticsearch to hold data depends on Hard disk size ? Can we control the size of data stored by ES ? If yes, can we limit the expand limit ? How the data is flushed out from ES ?

---

## [Keyword, doc\_value and analysis](https://discuss.elastic.co/t/keyword-doc-value-and-analysis/196634)

<div class="topic-metadata">

**Author:** [@newbie1](https://discuss.elastic.co/u/newbie1)\
**Replies:** 2\
**Last updated:** [August 25, 2019, 3:04pm UTC](https://discuss.elastic.co/t/keyword-doc-value-and-analysis/196634 "2019-08-25T15:04:39Z")

</div>

Hi, I am confused about keyowrd, doc\_value and analysis. I found two topics (/keyword-datatype-and-analysis/66359 and help-understanding-keyword-vs-not-analyzed/10374 ) on this subjet but i am not able to understant if…

---

## [ElasticSearch cannot perform large searches when the index is being updated](https://discuss.elastic.co/t/elasticsearch-cannot-perform-large-searches-when-the-index-is-being-updated/193240)

<div class="topic-metadata">

**Author:** [@jpgklassen](https://discuss.elastic.co/u/jpgklassen)\
**Replies:** 3\
**Last updated:** [August 25, 2019, 9:13am UTC](https://discuss.elastic.co/t/elasticsearch-cannot-perform-large-searches-when-the-index-is-being-updated/193240 "2019-08-25T09:13:10Z")

</div>

My server has a MongoDB database, ElasticSearch, Monstache (keeps the MongoDB database and ElasticSearch index in sync), and a Node.js REST API running at the same time. Users are conducting searches via a web app. The w…

---

## [Is there way to update or insert index from another indexes](https://discuss.elastic.co/t/is-there-way-to-update-or-insert-index-from-another-indexes/196645)

<div class="topic-metadata">

**Author:** [@namali](https://discuss.elastic.co/u/namali)\
**Replies:** 3\
**Last updated:** [August 25, 2019, 8:19am UTC](https://discuss.elastic.co/t/is-there-way-to-update-or-insert-index-from-another-indexes/196645 "2019-08-25T08:19:57Z")

</div>

I am a beginner in ELK . tried to insert and update an index from another indexes from ingest node , pipelines . but still couldn't find how to do.

---

## [Search Multiple indices in a cluster](https://discuss.elastic.co/t/search-multiple-indices-in-a-cluster/196636)

<div class="topic-metadata">

**Author:** [@krish1](https://discuss.elastic.co/u/krish1)\
**Replies:** 1\
**Last updated:** [August 25, 2019, 8:01am UTC](https://discuss.elastic.co/t/search-multiple-indices-in-a-cluster/196636 "2019-08-25T08:01:56Z")

</div>

I have two different indices(index-1, index-2) in a cluster with the same schema. I know I can query the two indices together in a single query, so if I set in the query "size":1000 elastic search will return 1000 result…

---

## [Illegal\_argument\_exception | Elasticsearch](https://discuss.elastic.co/t/illegal-argument-exception-elasticsearch/196648)

<div class="topic-metadata">

**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\
**Replies:** 1\
**Last updated:** [August 25, 2019, 7:47am UTC](https://discuss.elastic.co/t/illegal-argument-exception-elasticsearch/196648 "2019-08-25T07:47:34Z")

</div>

Hi, I am getting an illegal argument exception, however when I look at the output, the aggregated field and names are correct. Could anyone please help me? // Output

---

## [How can I fix yellow state cluster?](https://discuss.elastic.co/t/how-can-i-fix-yellow-state-cluster/196644)

<div class="topic-metadata">

**Author:** [@hurryup](https://discuss.elastic.co/u/hurryup)\
**Replies:** 3\
**Last updated:** [August 25, 2019, 5:16am UTC](https://discuss.elastic.co/t/how-can-i-fix-yellow-state-cluster/196644 "2019-08-25T05:16:18Z")

</div>

Hello. I have to reboot one of my 3 node cluster node and now one index is in the yellow state . curl -XGET localhost:9200/\_cluster/health/my\_index | jq '.' { "cluster\_name": "cl1", "status": "yellow", "timed\_out…

---

## [Regenerate Packets From EK format](https://discuss.elastic.co/t/regenerate-packets-from-ek-format/196639)

<div class="topic-metadata">

**Author:** [@baig](https://discuss.elastic.co/u/baig)\
**Replies:** 0\
**Last updated:** [August 24, 2019, 10:11pm UTC](https://discuss.elastic.co/t/regenerate-packets-from-ek-format/196639 "2019-08-24T22:11:49Z")

</div>

Hi, I have a framework for packet analysis that I have built on ELK stack. Mainly, I have been using this for network traces analysis and monitoring. There is one issue that I have been struggling and that may not be rel…

---

## [Rank feature field/query on nested field](https://discuss.elastic.co/t/rank-feature-field-query-on-nested-field/195359)

<div class="topic-metadata">

**Author:** [@jasoncodingguru](https://discuss.elastic.co/u/jasoncodingguru)\
**Replies:** 1\
**Last updated:** [August 24, 2019, 8:20pm UTC](https://discuss.elastic.co/t/rank-feature-field-query-on-nested-field/195359 "2019-08-24T20:20:12Z")

</div>

Hey guys, I am trying to use the rank feature field/query on a nested object field. The index is like below: { "id": { "type": "integer" }, "sources": { "type": "nested", "properties": { "source": { "type": "t…

---

## [What is the \*right\* way to setup Elasticsearch on a service?](https://discuss.elastic.co/t/what-is-the-right-way-to-setup-elasticsearch-on-a-service/196627)

<div class="topic-metadata">

**Author:** [@Jacob\_Rosenzweig](https://discuss.elastic.co/u/Jacob_Rosenzweig)\
**Replies:** 3\
**Last updated:** [August 24, 2019, 6:23pm UTC](https://discuss.elastic.co/t/what-is-the-right-way-to-setup-elasticsearch-on-a-service/196627 "2019-08-24T18:23:29Z")

</div>

I've used elasticsearch before on a small project. The project basically cataloged threads from a forum and presented them in a listview. I enabled search by connecting Elasticsearch through my MongoDB server via a Go da…

---

## [Replacing node with same name](https://discuss.elastic.co/t/replacing-node-with-same-name/196622)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 3\
**Last updated:** [August 24, 2019, 5:37pm UTC](https://discuss.elastic.co/t/replacing-node-with-same-name/196622 "2019-08-24T17:37:18Z")

</div>

I have 3 node cluster, all of them are master+data all rpms/binary are on standard place all data are on /data01 I would like to replace them with new better hardware but keep same name. Can I do following? Shutdown…

---

## [Data ingestion into ElasticSearch from Spark Structured Streaming](https://discuss.elastic.co/t/data-ingestion-into-elasticsearch-from-spark-structured-streaming/196075)

<div class="topic-metadata">

**Author:** [@SandeepReddy](https://discuss.elastic.co/u/SandeepReddy)\
**Replies:** 2\
**Last updated:** [August 24, 2019, 4:36pm UTC](https://discuss.elastic.co/t/data-ingestion-into-elasticsearch-from-spark-structured-streaming/196075 "2019-08-24T16:36:44Z")

</div>

Hi, I have created dataset/dataframe using the watermark and window function and writing the output to ElasticSearch is not working. However dataset/dataframe created without watermark and window inserts data into Elas…

---

## [Help, cant elect master](https://discuss.elastic.co/t/help-cant-elect-master/196587)

<div class="topic-metadata">

**Author:** [@drdevil44](https://discuss.elastic.co/u/drdevil44)\
**Replies:** 4\
**Last updated:** [August 24, 2019, 4:24pm UTC](https://discuss.elastic.co/t/help-cant-elect-master/196587 "2019-08-24T16:24:10Z")

</div>

Hi I have a six node cluster trying to upgrade to 7 from 6.8. Can't elect a master. Each node is a docker container on seperate machines. The config files on master are set: cluster.name: "docker-cluster" network.ho…

---

## [Nested objects queries](https://discuss.elastic.co/t/nested-objects-queries/193637)

<div class="topic-metadata">

**Author:** [@rodrigue](https://discuss.elastic.co/u/rodrigue)\
**Replies:** 2\
**Last updated:** [August 24, 2019, 9:35am UTC](https://discuss.elastic.co/t/nested-objects-queries/193637 "2019-08-24T09:35:49Z")

</div>

Hello, I'm writing to you, because I can't find the answer myself. I've searched everywhere, others have the same problem, but it seems that there are no solution in the old elastic versions. I'm actualy using elastic 6…

---

## [Unable to access elasticsearch opendistro from browser](https://discuss.elastic.co/t/unable-to-access-elasticsearch-opendistro-from-browser/196454)

<div class="topic-metadata">

**Author:** [@cool\_guy99](https://discuss.elastic.co/u/cool_guy99)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 11:43pm UTC](https://discuss.elastic.co/t/unable-to-access-elasticsearch-opendistro-from-browser/196454 "2019-08-23T23:43:13Z")

</div>

Hi Guys, I'm trying to install opendistro elasticsearch https://opendistro.github.io/for-elasticsearch-docs/docs/install/rpm/ on a centos machine and I was able to perform that. I even removed the security plugins menti…

---

## [Error while creating elastic cluster on docker](https://discuss.elastic.co/t/error-while-creating-elastic-cluster-on-docker/194070)

<div class="topic-metadata">

**Author:** [@yves.samen](https://discuss.elastic.co/u/yves.samen)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 11:35pm UTC](https://discuss.elastic.co/t/error-while-creating-elastic-cluster-on-docker/194070 "2019-08-23T23:35:16Z")

</div>

Hi, I'am creating an elastic cluster on a local docker on my macbook. I'm having this message while launching the 3rd node of elastic. "stacktrace": \["org.elasticsearch.bootstrap.StartupException: ElasticsearchExceptio…

---

## [Elasticsearch \[6.8.2\]: Cross Cluster Search Config](https://discuss.elastic.co/t/elasticsearch-6-8-2-cross-cluster-search-config/196518)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 1\
**Last updated:** [August 23, 2019, 11:29pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-2-cross-cluster-search-config/196518 "2019-08-23T23:29:11Z")

</div>

Hi, I'm trying to configure cross-cluster-search to query specific remote nodes with the setting node.attr.search: true. To do that I'm updating the settings of the local cluster as follows: { "persistent": { "cl…

---

## [Use script to select from non-numeric buckets -- possible?](https://discuss.elastic.co/t/use-script-to-select-from-non-numeric-buckets-possible/196415)

<div class="topic-metadata">

**Author:** [@anelson-edge](https://discuss.elastic.co/u/anelson-edge)\
**Replies:** 3\
**Last updated:** [August 23, 2019, 9:44pm UTC](https://discuss.elastic.co/t/use-script-to-select-from-non-numeric-buckets-possible/196415 "2019-08-23T21:44:07Z")

</div>

To solve my problem, I think what I want is to use scripting to select buckets, but I can't figure out how to do it. All my attempts run into complaints that I must point to a numeric aggregation In the data below, I w…

---

## [\[CI\] XPackRestIT different test cases are failing](https://discuss.elastic.co/t/ci-xpackrestit-different-test-cases-are-failing/195893)

<div class="topic-metadata">

**Author:** [@9deniz](https://discuss.elastic.co/u/9deniz)\
**Replies:** 1\
**Last updated:** [August 23, 2019, 9:30pm UTC](https://discuss.elastic.co/t/ci-xpackrestit-different-test-cases-are-failing/195893 "2019-08-23T21:30:42Z")

</div>

Each time I run ./gradlew :x-pack:plugin:integTestRunner locally on latest ES master branch, there is one test case failing, always different, some logs examples below: https://scans.gradle.com/s/lws3q7ozokxmc https:…

---

## [Saving ElasticSearch Backups into Google Cloud Storage](https://discuss.elastic.co/t/saving-elasticsearch-backups-into-google-cloud-storage/193535)

<div class="topic-metadata">

**Author:** [@Ab\_Avramidis](https://discuss.elastic.co/u/Ab_Avramidis)\
**Replies:** 12\
**Last updated:** [August 23, 2019, 7:51pm UTC](https://discuss.elastic.co/t/saving-elasticsearch-backups-into-google-cloud-storage/193535 "2019-08-23T19:51:24Z")

</div>

Hello, Currently I am using Elasticsearch "version" : { "number" : "6.8.1" and I am trying to create snapshots to the gce storage But I need your help to explain me something because I am receiving an error when I a…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1179)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1181)
