# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1208

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1209

---

## [Automatic rerouting of old indices](https://discuss.elastic.co/t/automatic-rerouting-of-old-indices/193080)

<div class="topic-metadata">

**Author:** [@siginigin](https://discuss.elastic.co/u/siginigin)\
**Replies:** 1\
**Last updated:** [July 31, 2019, 9:40am UTC](https://discuss.elastic.co/t/automatic-rerouting-of-old-indices/193080 "2019-07-31T09:40:41Z")

</div>

Hi, I have 3 nodes and indices with 3 shards and one replica. I see some of my old indices have primary shards on the same node. I believe this happened during midnights, when indice was created, but some node was down.…

---

## [Installing ELK7 - Configuration changes](https://discuss.elastic.co/t/installing-elk7-configuration-changes/193065)

<div class="topic-metadata">

**Author:** [@moti.mor](https://discuss.elastic.co/u/moti.mor)\
**Replies:** 3\
**Last updated:** [July 31, 2019, 9:38am UTC](https://discuss.elastic.co/t/installing-elk7-configuration-changes/193065 "2019-07-31T09:38:51Z")

</div>

Hi Guys, we are working with ELK 6.8.1 until today. we are going to install a fresh ELK7 with fresh and clean. i understand that the cluster configuration changed. Please see the configuration that i have on my master…

---

## [Elasticsearch asking to authenticate with no security on a basic licence](https://discuss.elastic.co/t/elasticsearch-asking-to-authenticate-with-no-security-on-a-basic-licence/193075)

<div class="topic-metadata">

**Author:** [@ethranes](https://discuss.elastic.co/u/ethranes)\
**Replies:** 2\
**Last updated:** [July 31, 2019, 9:36am UTC](https://discuss.elastic.co/t/elasticsearch-asking-to-authenticate-with-no-security-on-a-basic-licence/193075 "2019-07-31T09:36:24Z")

</div>

Hi, I've downloaded an elasticsearch zip, have no licence setup and have explicitly set xpack.security.enabled: false When I startup elasticsearch on a localhost, it is asking for me to login, I try to use the default e…

---

## [Best way to visualize storage utilization for indices?](https://discuss.elastic.co/t/best-way-to-visualize-storage-utilization-for-indices/193079)

<div class="topic-metadata">

**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\
**Replies:** 0\
**Last updated:** [July 31, 2019, 9:21am UTC](https://discuss.elastic.co/t/best-way-to-visualize-storage-utilization-for-indices/193079 "2019-07-31T09:21:14Z")

</div>

Hi, We have a bunch of different indices using different templates etc and we need a way to see which indices are taking up the most space and in what node each index is allocated to. Is this possible? I know that we c…

---

## [Kibana is not working in google cloud platform](https://discuss.elastic.co/t/kibana-is-not-working-in-google-cloud-platform/193044)

<div class="topic-metadata">

**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\
**Replies:** 2\
**Last updated:** [July 31, 2019, 7:23am UTC](https://discuss.elastic.co/t/kibana-is-not-working-in-google-cloud-platform/193044 "2019-07-31T07:23:55Z")

</div>

I installed elasticsearch and kibana in google cloud(OS is ubuntu) service of elasticsearch is working fine , but kibana is not working. These command is used to install kibana : wget https://artifacts.elastic.co/down…

---

## [DocId bit flip after routing \[Document retrievable by \_search, but doesn't return in get api\]](https://discuss.elastic.co/t/docid-bit-flip-after-routing-document-retrievable-by-search-but-doesnt-return-in-get-api/192424)

<div class="topic-metadata">

**Author:** [@muralikpbhat](https://discuss.elastic.co/u/muralikpbhat)\
**Replies:** 33\
**Last updated:** [July 31, 2019, 8:03am UTC](https://discuss.elastic.co/t/docid-bit-flip-after-routing-document-retrievable-by-search-but-doesnt-return-in-get-api/192424 "2019-07-31T08:03:30Z")

</div>

Hi, I have a document indexed a month back in Elasticsearch version 6.3.1. If I try searching by id or any other term in that doc, it returns that doc. However get api responds with found:false indicating that the doc i…

---

## [Can i use elasticsearch like an RDBMS?](https://discuss.elastic.co/t/can-i-use-elasticsearch-like-an-rdbms/193061)

<div class="topic-metadata">

**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\
**Replies:** 0\
**Last updated:** [July 31, 2019, 7:50am UTC](https://discuss.elastic.co/t/can-i-use-elasticsearch-like-an-rdbms/193061 "2019-07-31T07:50:51Z")

</div>

Can I store in elasticsearch what I have stored in the RDBMS? It is data that is not deleted, and it is used to inquire only necessary information once.

---

## [Single Node Performance and periodic latency spikes](https://discuss.elastic.co/t/single-node-performance-and-periodic-latency-spikes/192855)

<div class="topic-metadata">

**Author:** [@Samy\_Ateia](https://discuss.elastic.co/u/Samy_Ateia)\
**Replies:** 4\
**Last updated:** [July 31, 2019, 7:34am UTC](https://discuss.elastic.co/t/single-node-performance-and-periodic-latency-spikes/192855 "2019-07-31T07:34:29Z")

</div>

Hi Everyone, we are currently conducting experiments to evaluate Elasticsearch for our Use-Case. While doing performance tests on a single Node instance, we came across some periodic search-latency spikes. We are runni…

---

## [Search\_after giving wrong result with backward pagination in elasticsearch](https://discuss.elastic.co/t/search-after-giving-wrong-result-with-backward-pagination-in-elasticsearch/190983)

<div class="topic-metadata">

**Author:** [@akhilmathew001](https://discuss.elastic.co/u/akhilmathew001)\
**Replies:** 2\
**Last updated:** [July 31, 2019, 7:27am UTC](https://discuss.elastic.co/t/search-after-giving-wrong-result-with-backward-pagination-in-elasticsearch/190983 "2019-07-31T07:27:11Z")

</div>

With elasticsearch, I am trying to implement pagination with the help of search\_after. I am getting an issue when I am doing backward pagination, ie. wrong result (Differs from actual results from the previous page). Fo…

---

## [Aggregations issue in response of elastic search 5.6](https://discuss.elastic.co/t/aggregations-issue-in-response-of-elastic-search-5-6/193042)

<div class="topic-metadata">

**Author:** [@jayasree](https://discuss.elastic.co/u/jayasree)\
**Replies:** 0\
**Last updated:** [July 31, 2019, 6:05am UTC](https://discuss.elastic.co/t/aggregations-issue-in-response-of-elastic-search-5-6/193042 "2019-07-31T06:05:06Z")

</div>

Elastic search 2.4 was used previously and now it has been upgraded to 5.6. I am using the below structure to query the result: { "query": { "multi\_match": { "query": "' . $searchstringmsg . '", "type": "most\_field…

---

## [Store Stopwatch time in Elasticsearch and visualize in Kibana](https://discuss.elastic.co/t/store-stopwatch-time-in-elasticsearch-and-visualize-in-kibana/193049)

<div class="topic-metadata">

**Author:** [@utkarshsudhakar](https://discuss.elastic.co/u/utkarshsudhakar)\
**Replies:** 0\
**Last updated:** [July 31, 2019, 7:08am UTC](https://discuss.elastic.co/t/store-stopwatch-time-in-elasticsearch-and-visualize-in-kibana/193049 "2019-07-31T07:08:04Z")

</div>

Is it possible to store stopwatch time (hh:mm:ss) in Elasticsearch and visualize it in kibana. For example- t1= 11:50:02 t2=26:34:100 t3=08:30:00 Thanks, Utkarsh

---

## [Cluster crash after exceeding cluster.max\_shards\_per\_node](https://discuss.elastic.co/t/cluster-crash-after-exceeding-cluster-max-shards-per-node/192933)

<div class="topic-metadata">

**Author:** [@jmb](https://discuss.elastic.co/u/jmb)\
**Replies:** 3\
**Last updated:** [July 31, 2019, 6:29am UTC](https://discuss.elastic.co/t/cluster-crash-after-exceeding-cluster-max-shards-per-node/192933 "2019-07-31T06:29:58Z")

</div>

With the introduction of the cluster.max\_shards\_per\_node setting, we found on upgrading 6.8-\>7.x that we had to prune a lot of old indices to bring our shard count down. At the weekend, we had a cluster outage (QA, thank…

---

## [Elasticsearch with guaranteed transactional consistency at all times](https://discuss.elastic.co/t/elasticsearch-with-guaranteed-transactional-consistency-at-all-times/193013)

<div class="topic-metadata">

**Author:** [@schamaraj](https://discuss.elastic.co/u/schamaraj)\
**Replies:** 1\
**Last updated:** [July 31, 2019, 6:03am UTC](https://discuss.elastic.co/t/elasticsearch-with-guaranteed-transactional-consistency-at-all-times/193013 "2019-07-31T06:03:22Z")

</div>

We moved from Oracle DB to a clustered (all master eligible, all data eligible) Elasticsearch 2.4.1 without really changing the data model too much. We recently found an issue that when the network latency is higher, the…

---

## [How can i approach to object in object using scripted fields?](https://discuss.elastic.co/t/how-can-i-approach-to-object-in-object-using-scripted-fields/193037)

<div class="topic-metadata">

**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\
**Replies:** 0\
**Last updated:** [July 31, 2019, 5:30am UTC](https://discuss.elastic.co/t/how-can-i-approach-to-object-in-object-using-scripted-fields/193037 "2019-07-31T05:30:16Z")

</div>

How can i approach to object in object using scripted fields? I have data like below: human : \[ { info : \[ { type: "A" user: "a@domain.com" }, { type: "B" user: "a@domain.com" } \] }, { info : \[ { type:…

---

## [Import data into nested document using logstash](https://discuss.elastic.co/t/import-data-into-nested-document-using-logstash/193033)

<div class="topic-metadata">

**Author:** [@vschaefer](https://discuss.elastic.co/u/vschaefer)\
**Replies:** 0\
**Last updated:** [July 31, 2019, 5:04am UTC](https://discuss.elastic.co/t/import-data-into-nested-document-using-logstash/193033 "2019-07-31T05:04:47Z")

</div>

Hello, I have created an index with the following mappings. PUT /article\_data { "mappings" : { "properties" : { "articles" : { "type": "nested", "properties" : { "pkm\_article" : { …

---

## [Cannot install v6 on Buster](https://discuss.elastic.co/t/cannot-install-v6-on-buster/191505)

<div class="topic-metadata">

**Author:** [@1-2.dev](https://discuss.elastic.co/u/1-2.dev)\
**Replies:** 8\
**Last updated:** [July 31, 2019, 3:55am UTC](https://discuss.elastic.co/t/cannot-install-v6-on-buster/191505 "2019-07-31T03:55:46Z")

</div>

I am trying to install ES-6.8.1 on a fresh Debian (Buster) server. While v7\* installed fine, v6 doesn't: Setting up elasticsearch (6.8.1) ... Exception in thread "main" java.lang.ExceptionInInitializerError at j…

---

## [Curator to AWS ES via a squid proxy](https://discuss.elastic.co/t/curator-to-aws-es-via-a-squid-proxy/192921)

<div class="topic-metadata">

**Author:** [@Amol\_Shende](https://discuss.elastic.co/u/Amol_Shende)\
**Replies:** 2\
**Last updated:** [July 31, 2019, 3:41am UTC](https://discuss.elastic.co/t/curator-to-aws-es-via-a-squid-proxy/192921 "2019-07-31T03:41:11Z")

</div>

Hi there, I am using curator (5.7.6 version) to manage my AWS ES (6.3 version) indices, My curator is running on machine which needs proxy for internet access, so i have configured squid proxy and able to connect interne…

---

## [URL analyzer : remove www](https://discuss.elastic.co/t/url-analyzer-remove-www/192989)

<div class="topic-metadata">

**Author:** [@WinElastic](https://discuss.elastic.co/u/WinElastic)\
**Replies:** 0\
**Last updated:** [July 30, 2019, 8:45pm UTC](https://discuss.elastic.co/t/url-analyzer-remove-www/192989 "2019-07-30T20:45:55Z")

</div>

Hi, I am using below analyzer to get the tokens of a URL. I want to remove the : 'www.' as well from my tokens. Any suggestions on how this be achieved ?

---

## [Coordinating node for load balancing both Kibana as well as logstash](https://discuss.elastic.co/t/coordinating-node-for-load-balancing-both-kibana-as-well-as-logstash/192983)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 0\
**Last updated:** [July 30, 2019, 8:26pm UTC](https://discuss.elastic.co/t/coordinating-node-for-load-balancing-both-kibana-as-well-as-logstash/192983 "2019-07-30T20:26:59Z")

</div>

Hi All... I have a cluster of 10 data/master eligible nodes, each node has 64GB of Memory and 3TB of disk. I am going to index 40GB of data daily and I have separate logstash instances of 16GB of Memory to index the da…

---

## [How do I tell Elastic which mount to use for disk statistics](https://discuss.elastic.co/t/how-do-i-tell-elastic-which-mount-to-use-for-disk-statistics/192979)

<div class="topic-metadata">

**Author:** [@data\_smith](https://discuss.elastic.co/u/data_smith)\
**Replies:** 2\
**Last updated:** [July 30, 2019, 8:09pm UTC](https://discuss.elastic.co/t/how-do-i-tell-elastic-which-mount-to-use-for-disk-statistics/192979 "2019-07-30T20:09:32Z")

</div>

I have various mounts on the host that Elastic runs on and Elastic is getting disk statistics from the wrong mount. How do I specify the right mount? Filesystem Type Size Mounted on ov…

---

## [Elastic disk stats not correct with Kubernetes local storage](https://discuss.elastic.co/t/elastic-disk-stats-not-correct-with-kubernetes-local-storage/192956)

<div class="topic-metadata">

**Author:** [@data\_smith](https://discuss.elastic.co/u/data_smith)\
**Replies:** 1\
**Last updated:** [July 30, 2019, 8:07pm UTC](https://discuss.elastic.co/t/elastic-disk-stats-not-correct-with-kubernetes-local-storage/192956 "2019-07-30T20:07:00Z")

</div>

I'm running Elasticsearch in a Docker container in Kubernetes with local storage. Elastic only sees an overlay mount, which is at the root. It doesn't see the local storage mount. And so it's not reporting the correct…

---

## [Index templates - Rejecting mapping update as the final mapping would have more than 1 type: \[map2, map1\]](https://discuss.elastic.co/t/index-templates-rejecting-mapping-update-as-the-final-mapping-would-have-more-than-1-type-map2-map1/192977)

<div class="topic-metadata">

**Author:** [@Kumar5](https://discuss.elastic.co/u/Kumar5)\
**Replies:** 0\
**Last updated:** [July 30, 2019, 7:22pm UTC](https://discuss.elastic.co/t/index-templates-rejecting-mapping-update-as-the-final-mapping-would-have-more-than-1-type-map2-map1/192977 "2019-07-30T19:22:15Z")

</div>

In ES 1.x, i've used index template with multiple mapping. But the same is failing with below error in ES 6.x, Note: No issue if I've remove one of the mapping. Now the questions are Do we have any settings to enable …

---

## [Import a JSON file?](https://discuss.elastic.co/t/import-a-json-file/192872)

<div class="topic-metadata">

**Author:** [@elasticHT](https://discuss.elastic.co/u/elasticHT)\
**Replies:** 2\
**Last updated:** [July 30, 2019, 7:21pm UTC](https://discuss.elastic.co/t/import-a-json-file/192872 "2019-07-30T19:21:51Z")

</div>

After searching posts like this one: I am still unable to import a JSON file. It seems that the file needs to be specially formatted in some way with a "type" prefix or similar (but where?). My JSON file is a simple …

---

## [Reset index lifecycle settings](https://discuss.elastic.co/t/reset-index-lifecycle-settings/192970)

<div class="topic-metadata">

**Author:** [@topher](https://discuss.elastic.co/u/topher)\
**Replies:** 0\
**Last updated:** [July 30, 2019, 6:45pm UTC](https://discuss.elastic.co/t/reset-index-lifecycle-settings/192970 "2019-07-30T18:45:57Z")

</div>

OK, I was slow to the ILM awareness party - I upgraded to 7.0 originally back in late April, and didn't notice until much later that all the data I was looking at was sitting in a single "logstash" index that kept growin…

---

## [Example of a UTF8 text which does not generate tokens](https://discuss.elastic.co/t/example-of-a-utf8-text-which-does-not-generate-tokens/192965)

<div class="topic-metadata">

**Author:** [@germax](https://discuss.elastic.co/u/germax)\
**Replies:** 0\
**Last updated:** [July 30, 2019, 6:33pm UTC](https://discuss.elastic.co/t/example-of-a-utf8-text-which-does-not-generate-tokens/192965 "2019-07-30T18:33:31Z")

</div>

I have a text ಪೋರ್ಟ್‌ಲ್ಯಾಂಡ್‌ which passes the utf-8 encoding checks and causes no issues when I use it inside javascript or print to the console. However, elasticsearch cannot build a token from it and throws no alerts …

---

## [How to compute meaningful Query Latency our users are experiencing (near real time)](https://discuss.elastic.co/t/how-to-compute-meaningful-query-latency-our-users-are-experiencing-near-real-time/192772)

<div class="topic-metadata">

**Author:** [@Jacko-ski](https://discuss.elastic.co/u/Jacko-ski)\
**Replies:** 1\
**Last updated:** [July 30, 2019, 6:28pm UTC](https://discuss.elastic.co/t/how-to-compute-meaningful-query-latency-our-users-are-experiencing-near-real-time/192772 "2019-07-30T18:28:06Z")

</div>

We are running Elasticsearch 6.3 (Basic License). We gather Indices Stats data, specifially these fields: indices.search.query\_time\_in\_millis| |68,541,282| indices.search.query\_total| |9,417,494| I wou…

---

## [Monitoring search queries in elasticsearch](https://discuss.elastic.co/t/monitoring-search-queries-in-elasticsearch/192950)

<div class="topic-metadata">

**Author:** [@dojutsu-user](https://discuss.elastic.co/u/dojutsu-user)\
**Replies:** 1\
**Last updated:** [July 30, 2019, 6:20pm UTC](https://discuss.elastic.co/t/monitoring-search-queries-in-elasticsearch/192950 "2019-07-30T18:20:25Z")

</div>

Hi We have a project that allows users to upload and shares documents. We have implemented the search in the documents with Elasticsearch v6.3. We want to provide search analytics to the user -- like what are the top …

---

## [New Elasticsearch Index Template](https://discuss.elastic.co/t/new-elasticsearch-index-template/192903)

<div class="topic-metadata">

**Author:** [@stefan2017](https://discuss.elastic.co/u/stefan2017)\
**Replies:** 2\
**Last updated:** [July 30, 2019, 6:17pm UTC](https://discuss.elastic.co/t/new-elasticsearch-index-template/192903 "2019-07-30T18:17:09Z")

</div>

Hello All, When installing a new index template, do you need to install it on all Elasticsearch nodes? Does the cluster need to be re-indexed? Thanks you!!!

---

## [How To tune query performance while searching for terms in Kibana](https://discuss.elastic.co/t/how-to-tune-query-performance-while-searching-for-terms-in-kibana/192505)

<div class="topic-metadata">

**Author:** [@MadhavManne](https://discuss.elastic.co/u/MadhavManne)\
**Replies:** 3\
**Last updated:** [July 30, 2019, 6:06pm UTC](https://discuss.elastic.co/t/how-to-tune-query-performance-while-searching-for-terms-in-kibana/192505 "2019-07-30T18:06:21Z")

</div>

We have single Node cluster. which have logstash, elasticsearch, kibana installed on it. when we try to search for a terms in the message field and if the messages are huge like(3MB) . query would be very slow to give …

---

## [What are the difrrents between ELK 6 And 7?](https://discuss.elastic.co/t/what-are-the-difrrents-between-elk-6-and-7/192954)

<div class="topic-metadata">

**Author:** [@moti.mor](https://discuss.elastic.co/u/moti.mor)\
**Replies:** 0\
**Last updated:** [July 30, 2019, 5:25pm UTC](https://discuss.elastic.co/t/what-are-the-difrrents-between-elk-6-and-7/192954 "2019-07-30T17:25:21Z")

</div>

Hi guys, we are using ELK 6.8.1 (Elastic, Logstash, Kibana) open source version. whem i'm doing yum update we are getting 6.8.2. Version 7 is free ? no free? i will be happy if someone can explain why do we have versi…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1207)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1209)
