# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1183

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1184

---

## [Filter query URI in elasticsearch based on dates](https://discuss.elastic.co/t/filter-query-uri-in-elasticsearch-based-on-dates/196053)

<div class="topic-metadata">

**Author:** [@Anshuman\_Kirty](https://discuss.elastic.co/u/Anshuman_Kirty)\
**Replies:** 1\
**Last updated:** [August 22, 2019, 12:34pm UTC](https://discuss.elastic.co/t/filter-query-uri-in-elasticsearch-based-on-dates/196053 "2019-08-22T12:34:19Z")

</div>

Not able to filter the elasticsearch data based on dates. Not able to correctly figure out the syntax. Have tried all below given queries. localhost:9200/index/\_search?q=date:\>=2019-01-01 localhost:9200/index/\_search…

---

## [Exists query is quiet slower than terms query](https://discuss.elastic.co/t/exists-query-is-quiet-slower-than-terms-query/196132)

<div class="topic-metadata">

**Author:** [@willam\_boss](https://discuss.elastic.co/u/willam_boss)\
**Replies:** 1\
**Last updated:** [August 22, 2019, 12:31pm UTC](https://discuss.elastic.co/t/exists-query-is-quiet-slower-than-terms-query/196132 "2019-08-22T12:31:47Z")

</div>

document like { "address": { "street": "ss", "city": "ffff", "country": "jjjj" }, "links": \[ { "name": "Google", "url": "http://www.google.com" }, { "name": "Baidu", …

---

## [Google Drive Beat](https://discuss.elastic.co/t/google-drive-beat/196158)

<div class="topic-metadata">

**Author:** [@j-rewerts](https://discuss.elastic.co/u/j-rewerts)\
**Replies:** 1\
**Last updated:** [August 22, 2019, 12:30pm UTC](https://discuss.elastic.co/t/google-drive-beat/196158 "2019-08-22T12:30:03Z")

</div>

I'm looking into continuously ingesting a large amount of data from Google Drive (and a few other sources) into Elasticsearch to provide application search. Would it make sense for this ingestion to be done as an Elasti…

---

## [Query string query - including relation in range](https://discuss.elastic.co/t/query-string-query-including-relation-in-range/196222)

<div class="topic-metadata">

**Author:** [@krish3](https://discuss.elastic.co/u/krish3)\
**Replies:** 1\
**Last updated:** [August 22, 2019, 12:20pm UTC](https://discuss.elastic.co/t/query-string-query-including-relation-in-range/196222 "2019-08-22T12:20:01Z")

</div>

I have an index with this mapping: { "iprange\_index": { "mappings": { "properties": { "iplist": { "type": "ip\_range" } } } } } Now I want to do the following query using query string query. { "query": { "…

---

## [Coordinating node with writes and reads by ID](https://discuss.elastic.co/t/coordinating-node-with-writes-and-reads-by-id/195045)

<div class="topic-metadata">

**Author:** [@Andy0708](https://discuss.elastic.co/u/Andy0708)\
**Replies:** 3\
**Last updated:** [August 22, 2019, 12:18pm UTC](https://discuss.elastic.co/t/coordinating-node-with-writes-and-reads-by-id/195045 "2019-08-22T12:18:56Z")

</div>

Hello, I have a question related to coordinating nodes. I understand the purpose of coordinating nodes, at least in regards to search queries and bulk indexing. However, I am unsure how things work with writes and reads…

---

## [UI for elasticsearch](https://discuss.elastic.co/t/ui-for-elasticsearch/196300)

<div class="topic-metadata">

**Author:** [@Kanika\_Sahni](https://discuss.elastic.co/u/Kanika_Sahni)\
**Replies:** 1\
**Last updated:** [August 22, 2019, 11:56am UTC](https://discuss.elastic.co/t/ui-for-elasticsearch/196300 "2019-08-22T11:56:23Z")

</div>

I am looking for opensource front-end for my elasticsearch application. I tried connecting django with ES and I am facing issues with the connection. Looking forward for some effective solution for this issue.

---

## [List or View Indexes That Are Frozen](https://discuss.elastic.co/t/list-or-view-indexes-that-are-frozen/195980)

<div class="topic-metadata">

**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\
**Replies:** 3\
**Last updated:** [August 22, 2019, 11:48am UTC](https://discuss.elastic.co/t/list-or-view-indexes-that-are-frozen/195980 "2019-08-22T11:48:22Z")

</div>

How would one go about determining or viewing which indexes are frozen?

---

## [Ctx.payload.hits.total.value in condition not working](https://discuss.elastic.co/t/ctx-payload-hits-total-value-in-condition-not-working/195578)

<div class="topic-metadata">

**Author:** [@maria1](https://discuss.elastic.co/u/maria1)\
**Replies:** 6\
**Last updated:** [August 22, 2019, 11:18am UTC](https://discuss.elastic.co/t/ctx-payload-hits-total-value-in-condition-not-working/195578 "2019-08-22T11:18:08Z")

</div>

hello, I'm trying to configure a watch that get eventologs from winlogbeat, in my condition I compare "ctx.payload.hits.total.value" in order to make actions when is greater than 10, but my condition is always false, I h…

---

## [Elasticsearch security PKI](https://discuss.elastic.co/t/elasticsearch-security-pki/195838)

<div class="topic-metadata">

**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\
**Replies:** 12\
**Last updated:** [August 22, 2019, 11:13am UTC](https://discuss.elastic.co/t/elasticsearch-security-pki/195838 "2019-08-22T11:13:52Z")

</div>

Hi everyone, I'm trying to set up security in ES by following this guide here: I've hit a roadblock and can't seem to work it out on my own First issue is due to possibly breaking changes in latest elasticsearch (7.3…

---

## [Unable to register a repo with repository-s3 plugin](https://discuss.elastic.co/t/unable-to-register-a-repo-with-repository-s3-plugin/196083)

<div class="topic-metadata">

**Author:** [@umarshaik5](https://discuss.elastic.co/u/umarshaik5)\
**Replies:** 1\
**Last updated:** [August 22, 2019, 11:01am UTC](https://discuss.elastic.co/t/unable-to-register-a-repo-with-repository-s3-plugin/196083 "2019-08-22T11:01:08Z")

</div>

I am getting an error while trying to register a repo with type s3. I am using Elasticsearch 6.6.0 i have created the secure string as per below https://www.elastic.co/guide/en/elasticsearch/plugins/6.6/repository-s3-u…

---

## [Unable to use allow\_insecure\_settings with elasticsearch 6.6.0](https://discuss.elastic.co/t/unable-to-use-allow-insecure-settings-with-elasticsearch-6-6-0/194420)

<div class="topic-metadata">

**Author:** [@umarshaik5](https://discuss.elastic.co/u/umarshaik5)\
**Replies:** 6\
**Last updated:** [August 22, 2019, 10:59am UTC](https://discuss.elastic.co/t/unable-to-use-allow-insecure-settings-with-elasticsearch-6-6-0/194420 "2019-08-22T10:59:46Z")

</div>

When i am adding the allow\_insecure\_settings: true and try to resgister a repo with s3. i am getting service unavailable. It complains that allow\_insecure\_settings is not but i have added the setting to the elasticsearc…

---

## [Getting An issue by Saying Cluster nodes source must not be null or empty after upgrading Spring Boot 2.1.7](https://discuss.elastic.co/t/getting-an-issue-by-saying-cluster-nodes-source-must-not-be-null-or-empty-after-upgrading-spring-boot-2-1-7/196253)

<div class="topic-metadata">

**Author:** [@Shradha\_Bharti](https://discuss.elastic.co/u/Shradha_Bharti)\
**Replies:** 4\
**Last updated:** [August 22, 2019, 10:09am UTC](https://discuss.elastic.co/t/getting-an-issue-by-saying-cluster-nodes-source-must-not-be-null-or-empty-after-upgrading-spring-boot-2-1-7/196253 "2019-08-22T10:09:21Z")

</div>

HI I am trying to upgrade my Spring boot application 2.1.7, we have used elastic search over there , while upgrading I am getting below issue Caused by: org.springframework.beans.factory.BeanCreationException: Error cr…

---

## [How to add first index fields in second index, if one field is common in both](https://discuss.elastic.co/t/how-to-add-first-index-fields-in-second-index-if-one-field-is-common-in-both/196287)

<div class="topic-metadata">

**Author:** [@Sajal](https://discuss.elastic.co/u/Sajal)\
**Replies:** 0\
**Last updated:** [August 22, 2019, 9:44am UTC](https://discuss.elastic.co/t/how-to-add-first-index-fields-in-second-index-if-one-field-is-common-in-both/196287 "2019-08-22T09:44:02Z")

</div>

Hi There are two indexes and i want to add first all index fields in second index if it matches one common field (eg . If both index has common username then add first index fields in second index ). Is it possible in E…

---

## [Alternative search using “Scroll” API and “Search After” API for real-time queries](https://discuss.elastic.co/t/alternative-search-using-scroll-api-and-search-after-api-for-real-time-queries/196270)

<div class="topic-metadata">

**Author:** [@SuperSpike77](https://discuss.elastic.co/u/SuperSpike77)\
**Replies:** 4\
**Last updated:** [August 22, 2019, 9:35am UTC](https://discuss.elastic.co/t/alternative-search-using-scroll-api-and-search-after-api-for-real-time-queries/196270 "2019-08-22T09:35:17Z")

</div>

I need to send real-time queries for getting data from the dynamic index, that can be changed anytime. I speak about millions of docs in the index. The usage of Scroll API was useful to me, given that it stored state …

---

## [Mapping reccomendations](https://discuss.elastic.co/t/mapping-reccomendations/196273)

<div class="topic-metadata">

**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\
**Replies:** 0\
**Last updated:** [August 22, 2019, 8:40am UTC](https://discuss.elastic.co/t/mapping-reccomendations/196273 "2019-08-22T08:40:41Z")

</div>

I am using 7.3 to display transactions in my mobile app. When user logs in, it shows last 5 transactions. If he clicks on "transaction history" (opens new page with the same list but with filter in header and load more b…

---

## [Trying to connect to elastic search in Microstrategy](https://discuss.elastic.co/t/trying-to-connect-to-elastic-search-in-microstrategy/196274)

<div class="topic-metadata">

**Author:** [@AKSHAY\_R](https://discuss.elastic.co/u/AKSHAY_R)\
**Replies:** 0\
**Last updated:** [August 22, 2019, 8:41am UTC](https://discuss.elastic.co/t/trying-to-connect-to-elastic-search-in-microstrategy/196274 "2019-08-22T08:41:42Z")

</div>

, though we followed all the steps mentioned in the document required to connect still getting an error "Unable to get Elastic search indices, unable to connect to host or CORS request was denied" We have updated the el…

---

## [Elasticsearch Cluster setup with security 7.2](https://discuss.elastic.co/t/elasticsearch-cluster-setup-with-security-7-2/192631)

<div class="topic-metadata">

**Author:** [@Shivarhce](https://discuss.elastic.co/u/Shivarhce)\
**Replies:** 11\
**Last updated:** [August 22, 2019, 8:05am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-setup-with-security-7-2/192631 "2019-08-22T08:05:49Z")

</div>

I have setup elasticsearch cluster, with three linux vm servers, its working fine without security, but if i am enabling xpack security i am getting following error, And for your information i am using trail License in …

---

## [Improper detection of available CPUs](https://discuss.elastic.co/t/improper-detection-of-available-cpus/194282)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 5\
**Last updated:** [August 22, 2019, 8:00am UTC](https://discuss.elastic.co/t/improper-detection-of-available-cpus/194282 "2019-08-22T08:00:53Z")

</div>

Im running a 5 node cluster in kubernetes. Each k8 host has 56 cores but when I query for node information I get these values: "available\_processors" : 1, "allocated\_processors" : 1 Im using Java 12 so accordin…

---

## [Elastic Cluster Went Down](https://discuss.elastic.co/t/elastic-cluster-went-down/196249)

<div class="topic-metadata">

**Author:** [@Hitesh\_Baldaniya1](https://discuss.elastic.co/u/Hitesh_Baldaniya1)\
**Replies:** 4\
**Last updated:** [August 22, 2019, 7:44am UTC](https://discuss.elastic.co/t/elastic-cluster-went-down/196249 "2019-08-22T07:44:00Z")

</div>

Hi Team, We have cluster on cloud.elastic.co, which went down due to JVM heap memory pressure(My assumptions). Following is my cluster configuration: 2 Data Nodes(8GB for each) 1 Master Node(8GB) Cluster was not abl…

---

## [Upgrading cluster resource still the consumptions remains same](https://discuss.elastic.co/t/upgrading-cluster-resource-still-the-consumptions-remains-same/196250)

<div class="topic-metadata">

**Author:** [@Hitesh\_Baldaniya1](https://discuss.elastic.co/u/Hitesh_Baldaniya1)\
**Replies:** 3\
**Last updated:** [August 22, 2019, 7:26am UTC](https://discuss.elastic.co/t/upgrading-cluster-resource-still-the-consumptions-remains-same/196250 "2019-08-22T07:26:26Z")

</div>

Hi Team, We were working on the cluster of 2 data nodes(8 GB of each) + 1 master node(8GB)(I/O Optimized template), with data size of 7.7GB (16GB with replication). We have only 1 index with 5 shards. Cluster used to a…

---

## [Reloadable Secure Settings | Elasticsearch](https://discuss.elastic.co/t/reloadable-secure-settings-elasticsearch/196127)

<div class="topic-metadata">

**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\
**Replies:** 2\
**Last updated:** [August 22, 2019, 7:17am UTC](https://discuss.elastic.co/t/reloadable-secure-settings-elasticsearch/196127 "2019-08-22T07:17:10Z")

</div>

Hi, How do I know if a setting is reloadable? I was reading the documentation on Secure Settings, however, I'm unsure if I am missing something which signifies this. Additionally, what happens if the secure setting i…

---

## [Real Price of ELK Stack](https://discuss.elastic.co/t/real-price-of-elk-stack/196004)

<div class="topic-metadata">

**Author:** [@pmco23](https://discuss.elastic.co/u/pmco23)\
**Replies:** 2\
**Last updated:** [August 22, 2019, 6:49am UTC](https://discuss.elastic.co/t/real-price-of-elk-stack/196004 "2019-08-22T06:49:36Z")

</div>

Hi guys , i'm almost in the production phase of a Project and I have a doubt . How much costs ELK stack ? Im running the source code of the applications of the stack on a Azure Vm , and i wanna know id i will have any …

---

## [Closed all indices by mistake using wildcard \*](https://discuss.elastic.co/t/closed-all-indices-by-mistake-using-wildcard/196244)

<div class="topic-metadata">

**Author:** [@lakhwinder](https://discuss.elastic.co/u/lakhwinder)\
**Replies:** 1\
**Last updated:** [August 22, 2019, 6:48am UTC](https://discuss.elastic.co/t/closed-all-indices-by-mistake-using-wildcard/196244 "2019-08-22T06:48:42Z")

</div>

Hi I am using Elastic 6.5.3 version. I closed all the indices by mistake using curl -XPOST "https://localhost:9200/.\*/\_close" Now that I am trying to open any of the indices, or even doing a get on \_cat/ or \_snapshot…

---

## [Watcher results into new index](https://discuss.elastic.co/t/watcher-results-into-new-index/196051)

<div class="topic-metadata">

**Author:** [@Denis.topa](https://discuss.elastic.co/u/Denis.topa)\
**Replies:** 2\
**Last updated:** [August 22, 2019, 6:39am UTC](https://discuss.elastic.co/t/watcher-results-into-new-index/196051 "2019-08-22T06:39:06Z")

</div>

Hello. Is there a way to copy the entire document from a index to another as an watcher action? Here is what I want to achieve: I have several watchers configured which currently are sending alerts to email, but I wou…

---

## [ILM not running on Elastic Cloud](https://discuss.elastic.co/t/ilm-not-running-on-elastic-cloud/196102)

<div class="topic-metadata">

**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\
**Replies:** 2\
**Last updated:** [August 22, 2019, 5:46am UTC](https://discuss.elastic.co/t/ilm-not-running-on-elastic-cloud/196102 "2019-08-22T05:46:30Z")

</div>

Hi, I've migrated a cluster to a new cluster based on the hot/warm template on the Elastic Cloud an restored all indices from the old cluster to the new cluster. Now I've noticed, that ILM is not running on any of the …

---

## [Trouble importing json log file to ELK via Elasticsearch (or other method)](https://discuss.elastic.co/t/trouble-importing-json-log-file-to-elk-via-elasticsearch-or-other-method/196210)

<div class="topic-metadata">

**Author:** [@0x00](https://discuss.elastic.co/u/0x00)\
**Replies:** 5\
**Last updated:** [August 22, 2019, 5:17am UTC](https://discuss.elastic.co/t/trouble-importing-json-log-file-to-elk-via-elasticsearch-or-other-method/196210 "2019-08-22T05:17:08Z")

</div>

I've been fighting this for a while now and may have run into a bit of a roadblock. PROBLEM: I'm trying to import 5GB worth of Zeek/Bro logs (see sample log below) WHAT I TRIED: I've tried to use CURL to send the log…

---

## [One datanode stalled will cause master fail](https://discuss.elastic.co/t/one-datanode-stalled-will-cause-master-fail/196225)

<div class="topic-metadata">

**Author:** [@Jehutywong](https://discuss.elastic.co/u/Jehutywong)\
**Replies:** 0\
**Last updated:** [August 22, 2019, 3:58am UTC](https://discuss.elastic.co/t/one-datanode-stalled-will-cause-master-fail/196225 "2019-08-22T03:58:19Z")

</div>

Elastcsearch verion: 7.0.1 Somehow when my cluster was under heavy load, one or two datanodes were continuously timing out requests. Then i see following Error message. This would fail leader master node, and broke down…

---

## [How to find duplicate numbers in multiple fields?](https://discuss.elastic.co/t/how-to-find-duplicate-numbers-in-multiple-fields/194346)

<div class="topic-metadata">

**Author:** [@Smkumaran](https://discuss.elastic.co/u/Smkumaran)\
**Replies:** 6\
**Last updated:** [August 22, 2019, 4:04am UTC](https://discuss.elastic.co/t/how-to-find-duplicate-numbers-in-multiple-fields/194346 "2019-08-22T04:04:01Z")

</div>

Hello, Can anyone help me on this please?. I need to match the same values with two different index's and 4 fields in total and then get the results if all four only matches. Example : Index-1 : log-1 Fields : cause…

---

## [Snapshot using a s3 bucket and xpack security](https://discuss.elastic.co/t/snapshot-using-a-s3-bucket-and-xpack-security/195962)

<div class="topic-metadata">

**Author:** [@jsandri](https://discuss.elastic.co/u/jsandri)\
**Replies:** 2\
**Last updated:** [August 22, 2019, 3:35am UTC](https://discuss.elastic.co/t/snapshot-using-a-s3-bucket-and-xpack-security/195962 "2019-08-22T03:35:38Z")

</div>

Hi all, I deploy an ELK version 7.2.0 on AWS and when I run this command curl -XPUT "http://localhost:9200/\_snapshot/s3\_backups" -H "Content-Type: application/json" -d ' { "type": "s3", "settings": { "bu…

---

## [Elastic client access using http in Kubernetes](https://discuss.elastic.co/t/elastic-client-access-using-http-in-kubernetes/196199)

<div class="topic-metadata">

**Author:** [@frellus](https://discuss.elastic.co/u/frellus)\
**Replies:** 0\
**Last updated:** [August 21, 2019, 10:18pm UTC](https://discuss.elastic.co/t/elastic-client-access-using-http-in-kubernetes/196199 "2019-08-21T22:18:47Z")

</div>

We are experimenting with ECK (on-prem). LoadBalancer is not an option, we only have NodePort as a way to expose Elastic outside the cluster, or Ingress. For Ingress, we terminate SSL at the ingress controller. Enabli…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1182)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1184)
