# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1211

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1212

---

## [Not able to access 9200 and 5601 but connection with 9100 is fine](https://discuss.elastic.co/t/not-able-to-access-9200-and-5601-but-connection-with-9100-is-fine/192594)

<div class="topic-metadata">

**Author:** [@pchoix](https://discuss.elastic.co/u/pchoix)\
**Replies:** 2\
**Last updated:** [July 29, 2019, 11:05am UTC](https://discuss.elastic.co/t/not-able-to-access-9200-and-5601-but-connection-with-9100-is-fine/192594 "2019-07-29T11:05:02Z")

</div>

I am new to ELK and this forum, if my first post should be posted somewhere else, please feel free to do so and thank you in advance. I installed the following on a CentOS guest within my vmware in my desktop: elastics…

---

## [Match Query with input word order maintain](https://discuss.elastic.co/t/match-query-with-input-word-order-maintain/192677)

<div class="topic-metadata">

**Author:** [@harkesh\_kumar](https://discuss.elastic.co/u/harkesh_kumar)\
**Replies:** 0\
**Last updated:** [July 29, 2019, 10:39am UTC](https://discuss.elastic.co/t/match-query-with-input-word-order-maintain/192677 "2019-07-29T10:39:53Z")

</div>

0 I am working or Elastic search 7 I am facing some issue with Match query with elastic search My Issue i want to search all Possible result we match with sequence of words Like below Example:- Input is - Pawan Shrim…

---

## [Searching like using grep in Kibana](https://discuss.elastic.co/t/searching-like-using-grep-in-kibana/188499)

<div class="topic-metadata">

**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\
**Replies:** 1\
**Last updated:** [July 29, 2019, 10:39am UTC](https://discuss.elastic.co/t/searching-like-using-grep-in-kibana/188499 "2019-07-29T10:39:51Z")

</div>

Hello, some people in our company would like to search in message field like in in (e)grep utility. Exact match. Example: STRING="\[userID=\[W192ADM-x/AM41\], LC=4557-A/IL, T=78, DATE=2019-07-02 14:15:16.0\]" echo "$STRIN…

---

## [Basic Java Example Not Working for me](https://discuss.elastic.co/t/basic-java-example-not-working-for-me/192569)

<div class="topic-metadata">

**Author:** [@elasticHT](https://discuss.elastic.co/u/elasticHT)\
**Replies:** 4\
**Last updated:** [July 29, 2019, 10:13am UTC](https://discuss.elastic.co/t/basic-java-example-not-working-for-me/192569 "2019-07-29T10:13:01Z")

</div>

Using the basic Java example, here: https://www.elastic.co/guide/en/elasticsearch/client/java-api/current/java-search.html And having the following Maven dependencies installed: \<dependency\> \<groupId\>org.elast…

---

## [Why snapshot API requires shared file system?](https://discuss.elastic.co/t/why-snapshot-api-requires-shared-file-system/192612)

<div class="topic-metadata">

**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\
**Replies:** 7\
**Last updated:** [July 29, 2019, 9:16am UTC](https://discuss.elastic.co/t/why-snapshot-api-requires-shared-file-system/192612 "2019-07-29T09:16:51Z")

</div>

My case wanted to backup only one node of a cluster, I know it is good practice to backup the whole cluster, but my ELK infrastructure do not have a shared file system, if there is no other choice, of course I will creat…

---

## [My ElasticSearch Query is too slow (.net)](https://discuss.elastic.co/t/my-elasticsearch-query-is-too-slow-net/192650)

<div class="topic-metadata">

**Author:** [@Bidzina\_Goginashvili](https://discuss.elastic.co/u/Bidzina_Goginashvili)\
**Replies:** 0\
**Last updated:** [July 29, 2019, 8:53am UTC](https://discuss.elastic.co/t/my-elasticsearch-query-is-too-slow-net/192650 "2019-07-29T08:53:25Z")

</div>

When i added elastic search in my project and test it on the first day it was way too fast.Next day it become too slow.I dont know what is heppening. See Code Bellow. Kibana :Took 264 GET /products/\_search { "query…

---

## [Elasticsearch pod uses huge kmem especially entry](https://discuss.elastic.co/t/elasticsearch-pod-uses-huge-kmem-especially-entry/192649)

<div class="topic-metadata">

**Author:** [@alauda](https://discuss.elastic.co/u/alauda)\
**Replies:** 0\
**Last updated:** [July 29, 2019, 8:52am UTC](https://discuss.elastic.co/t/elasticsearch-pod-uses-huge-kmem-especially-entry/192649 "2019-07-29T08:52:10Z")

</div>

Elasticsearch version : 5.6.1 Plugins installed : \*\* Docker version\*\* : 18.09.2 \*\* K8S version\*\*: 1.11 \*\* linux kernel \*\*: 3.10.0-862.e17.x86\_64 I set the pod memory limit to 10GB. After about 5 days, the node run…

---

## [Install elasticsearch in openshift online](https://discuss.elastic.co/t/install-elasticsearch-in-openshift-online/192642)

<div class="topic-metadata">

**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\
**Replies:** 0\
**Last updated:** [July 29, 2019, 8:24am UTC](https://discuss.elastic.co/t/install-elasticsearch-in-openshift-online/192642 "2019-07-29T08:24:56Z")

</div>

I want to install elasticsearch6.7.0 in openshift online. So, I downloaded the Elasticsearch image and set the variables. like this... However, the bootstrap.check failed and the Elasticsearch did not start. So I…

---

## [Reusing Nested Documents](https://discuss.elastic.co/t/reusing-nested-documents/192637)

<div class="topic-metadata">

**Author:** [@nili1](https://discuss.elastic.co/u/nili1)\
**Replies:** 0\
**Last updated:** [July 29, 2019, 8:08am UTC](https://discuss.elastic.co/t/reusing-nested-documents/192637 "2019-07-29T08:08:49Z")

</div>

Our data structure contains documents where each one has one or more nested documents. The nested documents may be duplicated across many of the main documents. Is there a way to "reuse" the same nested document across m…

---

## [Index Creation on a Specific Node](https://discuss.elastic.co/t/index-creation-on-a-specific-node/192622)

<div class="topic-metadata">

**Author:** [@lakshykar](https://discuss.elastic.co/u/lakshykar)\
**Replies:** 2\
**Last updated:** [July 29, 2019, 7:45am UTC](https://discuss.elastic.co/t/index-creation-on-a-specific-node/192622 "2019-07-29T07:45:31Z")

</div>

Hi, I have ELK setup with 3 nodes, all the nodes are configured as data node, and 1 node is configured as master node. Now my problem is all the data getting sync on every node which is fine. Now i have one case where …

---

## [java.lang.IllegalArgumentException by percolator plugin](https://discuss.elastic.co/t/java-lang-illegalargumentexception-by-percolator-plugin/192611)

<div class="topic-metadata">

**Author:** [@ksunil](https://discuss.elastic.co/u/ksunil)\
**Replies:** 0\
**Last updated:** [July 29, 2019, 6:58am UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-by-percolator-plugin/192611 "2019-07-29T06:58:06Z")

</div>

Hi @Andrew\_Cholakian1, I am facing the issue related to percolator plugin while starting elasticsearch service as started working recently on this from other person who left this project. So i am new to this but seeing …

---

## [Must\_not query is not working in Watcher](https://discuss.elastic.co/t/must-not-query-is-not-working-in-watcher/192603)

<div class="topic-metadata">

**Author:** [@madhan8](https://discuss.elastic.co/u/madhan8)\
**Replies:** 0\
**Last updated:** [July 29, 2019, 5:37am UTC](https://discuss.elastic.co/t/must-not-query-is-not-working-in-watcher/192603 "2019-07-29T05:37:36Z")

</div>

Hi, I'm working on watcher and in the input section I'm writing the below query - "input": { "search": { "request": { "search\_type": "query\_then\_fetch", "indices": \[ "filebeat\*" \], "types": , "body": { "query"…

---

## [Handle unsupported API calls to java client](https://discuss.elastic.co/t/handle-unsupported-api-calls-to-java-client/192567)

<div class="topic-metadata">

**Author:** [@michal1](https://discuss.elastic.co/u/michal1)\
**Replies:** 2\
**Last updated:** [July 29, 2019, 5:19am UTC](https://discuss.elastic.co/t/handle-unsupported-api-calls-to-java-client/192567 "2019-07-29T05:19:31Z")

</div>

Hi, I need to run api "GET /\_remote/info" on a java client. This is not supported nor by JestClient nor by Elastic High Level Client. How can i make this api call? Should i run directly using a lower level client and w…

---

## [Add nodes to secured cluster](https://discuss.elastic.co/t/add-nodes-to-secured-cluster/191815)

<div class="topic-metadata">

**Author:** [@Stevens\_Laurent](https://discuss.elastic.co/u/Stevens_Laurent)\
**Replies:** 1\
**Last updated:** [July 29, 2019, 3:39am UTC](https://discuss.elastic.co/t/add-nodes-to-secured-cluster/191815 "2019-07-29T03:39:20Z")

</div>

Hello, Simple question here. I'm using ES 7.2 and i have a running cluster with 3 nodes. Everything is ok all nodes have joined the cluster successfully. Now that I've initialized the Role Based Access security on the …

---

## [Elasticsearch upgrade 6.3 to 6.8 with security](https://discuss.elastic.co/t/elasticsearch-upgrade-6-3-to-6-8-with-security/191433)

<div class="topic-metadata">

**Author:** [@adrianolimit](https://discuss.elastic.co/u/adrianolimit)\
**Replies:** 0\
**Last updated:** [July 19, 2019, 5:20pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-6-3-to-6-8-with-security/191433 "2019-07-19T17:20:00Z")

</div>

Hello, I tried to upgrade my Elasticsearch cluster (4 nodes) from 6.3 to 6.8 and I failed. In my actual cluster (6.3), I don't have the security enable, in version 6.8 the security is free so I want to enable it. This i…

---

## [Missing field "File"](https://discuss.elastic.co/t/missing-field-file/192494)

<div class="topic-metadata">

**Author:** [@JGT](https://discuss.elastic.co/u/JGT)\
**Replies:** 1\
**Last updated:** [July 28, 2019, 2:50pm UTC](https://discuss.elastic.co/t/missing-field-file/192494 "2019-07-28T14:50:37Z")

</div>

I am using logstash to feed elasticsearch various log formats. One of them has a field "File". When I look in Kibana, I don't see that field. Is "File" a reserved word?

---

## [Couldn't resolve error: java.lang.NoSuchFieldError: FAIL\_ON\_SYMBOL\_HASH\_OVERFLOW- elasticsearch java client api](https://discuss.elastic.co/t/couldnt-resolve-error-java-lang-nosuchfielderror-fail-on-symbol-hash-overflow-elasticsearch-java-client-api/188751)

<div class="topic-metadata">

**Author:** [@ahlem](https://discuss.elastic.co/u/ahlem)\
**Replies:** 14\
**Last updated:** [July 28, 2019, 2:42pm UTC](https://discuss.elastic.co/t/couldnt-resolve-error-java-lang-nosuchfielderror-fail-on-symbol-hash-overflow-elasticsearch-java-client-api/188751 "2019-07-28T14:42:26Z")

</div>

Hello Elastic developer community, I'm trying to implement autocomple feature using elaticsearch 6.2.4 and its java rest client api on my maven web application which is running under glassfish 4.1 despite all my effor…

---

## [Snapshots stopped working after switching from a single server to cluster (getting the server married?)](https://discuss.elastic.co/t/snapshots-stopped-working-after-switching-from-a-single-server-to-cluster-getting-the-server-married/192531)

<div class="topic-metadata">

**Author:** [@rihad](https://discuss.elastic.co/u/rihad)\
**Replies:** 10\
**Last updated:** [July 28, 2019, 10:56am UTC](https://discuss.elastic.co/t/snapshots-stopped-working-after-switching-from-a-single-server-to-cluster-getting-the-server-married/192531 "2019-07-28T10:56:44Z")

</div>

Simple as that. I'm attempting to take snapshots from the same server as before, which isn't the master anymore. path.repo: \["/var/db/elasticsearch"\] Snapshot directory is /var/db/elasticsearch/backup. For some reason …

---

## [Range query for dates with IN clause](https://discuss.elastic.co/t/range-query-for-dates-with-in-clause/191897)

<div class="topic-metadata">

**Author:** [@kasi](https://discuss.elastic.co/u/kasi)\
**Replies:** 9\
**Last updated:** [July 28, 2019, 2:17am UTC](https://discuss.elastic.co/t/range-query-for-dates-with-in-clause/191897 "2019-07-28T02:17:33Z")

</div>

How to query for a range of dates using the IN clause in Elastic Search? I am using Java Rest services. I want to be able to query for timestamp for a range of dates? like timestamp in (list of dates) Thanks

---

## [Suggested mappings for highly structured data](https://discuss.elastic.co/t/suggested-mappings-for-highly-structured-data/192547)

<div class="topic-metadata">

**Author:** [@TeraInferno](https://discuss.elastic.co/u/TeraInferno)\
**Replies:** 0\
**Last updated:** [July 28, 2019, 1:31am UTC](https://discuss.elastic.co/t/suggested-mappings-for-highly-structured-data/192547 "2019-07-28T01:31:35Z")

</div>

Hello. I have over a trillion documents that are similar to the following: { "ip": "192.168.1.1", "mac\_address": "00:0a:95:9d:68:16", "email\_address": "somebody@domain.com", "url": "some.domain.com/with/…

---

## [Elasticsearch unreachable :](https://discuss.elastic.co/t/elasticsearch-unreachable/192375)

<div class="topic-metadata">

**Author:** [@Kdhillon](https://discuss.elastic.co/u/Kdhillon)\
**Replies:** 1\
**Last updated:** [July 28, 2019, 1:28am UTC](https://discuss.elastic.co/t/elasticsearch-unreachable/192375 "2019-07-28T01:28:07Z")

</div>

while loading logstash receving this error: kindly tell how to resolve this.

---

## [Filter](https://discuss.elastic.co/t/filter/192538)

<div class="topic-metadata">

**Author:** [@jsdhiman](https://discuss.elastic.co/u/jsdhiman)\
**Replies:** 0\
**Last updated:** [July 27, 2019, 8:56pm UTC](https://discuss.elastic.co/t/filter/192538 "2019-07-27T20:56:13Z")

</div>

Need to show count based on string filteration. For example, I have column with name of title. And I want to show the count only for those title which contains "test" word. How we can achieve it.

---

## [Reporting Alternative?](https://discuss.elastic.co/t/reporting-alternative/192277)

<div class="topic-metadata">

**Author:** [@Donny\_Nightfrost](https://discuss.elastic.co/u/Donny_Nightfrost)\
**Replies:** 6\
**Last updated:** [July 27, 2019, 2:27pm UTC](https://discuss.elastic.co/t/reporting-alternative/192277 "2019-07-27T14:27:51Z")

</div>

Greetings everyone, hope you guys have a good day. I have a problem with reporting in ELK: Is there any free alternative reporting tools that can integrate with ELK? I'm using 7.0 version so Sentinl is not a choice.

---

## [Getting java.security.AccessControlException error on service startup](https://discuss.elastic.co/t/getting-java-security-accesscontrolexception-error-on-service-startup/191884)

<div class="topic-metadata">

**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\
**Replies:** 6\
**Last updated:** [July 27, 2019, 2:12pm UTC](https://discuss.elastic.co/t/getting-java-security-accesscontrolexception-error-on-service-startup/191884 "2019-07-27T14:12:34Z")

</div>

The specific error is: Getting java.security.AccessControlException: access denied ("java.io.FilePermission" "D:\\ELK\\appdynamics\\conf\\SAPPLOG01\\processPersistenceFile.ser" "read") error I've installed an APM agent in m…

---

## [Load-Balancing the Elastic-Service](https://discuss.elastic.co/t/load-balancing-the-elastic-service/192389)

<div class="topic-metadata">

**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\
**Replies:** 1\
**Last updated:** [July 27, 2019, 2:06pm UTC](https://discuss.elastic.co/t/load-balancing-the-elastic-service/192389 "2019-07-27T14:06:23Z")

</div>

Hi Guys, so i've recently picked up ElasticStack at my new WorkPlace, and now i have to optimize the Cluster which was built by a previous co-worker. The Cluster consits of a Master Node (6.8v) with the Kibana Installat…

---

## [Avoid to lose data with full restart cluster](https://discuss.elastic.co/t/avoid-to-lose-data-with-full-restart-cluster/192522)

<div class="topic-metadata">

**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\
**Replies:** 1\
**Last updated:** [July 27, 2019, 1:58pm UTC](https://discuss.elastic.co/t/avoid-to-lose-data-with-full-restart-cluster/192522 "2019-07-27T13:58:15Z")

</div>

When a full restart cluster is needed, what is the best solution to avoid to lose data? For example , if many server send syslog to logstash and logstash sends logs to elasticsearch, when I restart elasticsearch I lose …

---

## [Elasticsearch nested aggregate query with filter](https://discuss.elastic.co/t/elasticsearch-nested-aggregate-query-with-filter/192523)

<div class="topic-metadata">

**Author:** [@kgp](https://discuss.elastic.co/u/kgp)\
**Replies:** 0\
**Last updated:** [July 27, 2019, 12:28pm UTC](https://discuss.elastic.co/t/elasticsearch-nested-aggregate-query-with-filter/192523 "2019-07-27T12:28:29Z")

</div>

I'm trying to apply a filter to a nested aggregate query. I'm unable to apply the filter. I have data like below. Nested dictionaries(each represent an address) in a list. Some of the addresses have "geo\_location" and s…

---

## [Remote access to elasticsearch 7.2](https://discuss.elastic.co/t/remote-access-to-elasticsearch-7-2/192509)

<div class="topic-metadata">

**Author:** [@mbrown009](https://discuss.elastic.co/u/mbrown009)\
**Replies:** 1\
**Last updated:** [July 27, 2019, 5:32am UTC](https://discuss.elastic.co/t/remote-access-to-elasticsearch-7-2/192509 "2019-07-27T05:32:18Z")

</div>

I am not running a cluster and just setting up an internal configuration for ES for a few of my servers. I have ELK up but I have monitorbeats on another machine. That can not access elk remotely. Any time I change netwo…

---

## [Warm Nodes - high data from new ingestion](https://discuss.elastic.co/t/warm-nodes-high-data-from-new-ingestion/188513)

<div class="topic-metadata">

**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\
**Replies:** 2\
**Last updated:** [July 26, 2019, 8:57pm UTC](https://discuss.elastic.co/t/warm-nodes-high-data-from-new-ingestion/188513 "2019-07-26T20:57:11Z")

</div>

Hi Team, I recently added warm nodes to our deployments in elastic cloud in prep to add ILM Policies (nothing added yet). Last night, I got low space warnings and noticed almost all of the space on warm nodes was consu…

---

## [How to reindex a Index with new data field types?](https://discuss.elastic.co/t/how-to-reindex-a-index-with-new-data-field-types/192475)

<div class="topic-metadata">

**Author:** [@matheusribeirogarcia](https://discuss.elastic.co/u/matheusribeirogarcia)\
**Replies:** 1\
**Last updated:** [July 26, 2019, 6:25pm UTC](https://discuss.elastic.co/t/how-to-reindex-a-index-with-new-data-field-types/192475 "2019-07-26T18:25:32Z")

</div>

Hi, I'm trying to change a field type to another type, I've seem that I cannot do that directly in my current Index, so I'm trying to use the REINDEX API. I've tried something like this, I know it's wrong, but it's just…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1210)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1212)
