# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1213 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1214 --- ## [Elastic search docker container stops automatically](https://discuss.elastic.co/t/elastic-search-docker-container-stops-automatically/192110)
**Author:** [@soumya2](https://discuss.elastic.co/u/soumya2)\ **Replies:** 2\ **Last updated:** [July 26, 2019, 5:14am UTC](https://discuss.elastic.co/t/elastic-search-docker-container-stops-automatically/192110 "2019-07-26T05:14:44Z")
Hi Team, I am trying to configure ELK stack in docker container. But the Elastisearch docker container exited automatically. Please help me on this. #here is my docker-compose file version: '2' services: elasticsea… --- ## [Cross inner-hits sort and pagination](https://discuss.elastic.co/t/cross-inner-hits-sort-and-pagination/192343)
**Author:** [@Wan\_Hui](https://discuss.elastic.co/u/Wan_Hui)\ **Replies:** 0\ **Last updated:** [July 26, 2019, 2:54am UTC](https://discuss.elastic.co/t/cross-inner-hits-sort-and-pagination/192343 "2019-07-26T02:54:52Z")
From the document, sort and pagination can be done per inner-hits. Is there any way I can sort and paginate across all inner-hits? --- ## [ELK stack include only required modules](https://discuss.elastic.co/t/elk-stack-include-only-required-modules/191931)
**Author:** [@tarun\_puri03](https://discuss.elastic.co/u/tarun_puri03)\ **Replies:** 2\ **Last updated:** [July 26, 2019, 1:53am UTC](https://discuss.elastic.co/t/elk-stack-include-only-required-modules/191931 "2019-07-26T01:53:05Z")
I am trying to install ELK stack but as observed, the total size of the whole stack after installation is around 1.3 GB. I was wondering if there is a way to cherry pick the modules I want running on my stack and bring d… --- ## [How to validated index templates](https://discuss.elastic.co/t/how-to-validated-index-templates/192313)
**Author:** [@TeraInferno](https://discuss.elastic.co/u/TeraInferno)\ **Replies:** 1\ **Last updated:** [July 26, 2019, 12:05am UTC](https://discuss.elastic.co/t/how-to-validated-index-templates/192313 "2019-07-26T00:05:28Z")
Hello, I am trying to use multiple index templates in elasticsearch and need to verify that the final index template, after they are merged together by elasticsearch, is what I was aiming for. For example, if I add the … --- ## [How to add data nodes into a running cluster with X-pack-security:enabled](https://discuss.elastic.co/t/how-to-add-data-nodes-into-a-running-cluster-with-x-pack-security-enabled/192329)
**Author:** [@cpedalino](https://discuss.elastic.co/u/cpedalino)\ **Replies:** 0\ **Last updated:** [July 25, 2019, 10:09pm UTC](https://discuss.elastic.co/t/how-to-add-data-nodes-into-a-running-cluster-with-x-pack-security-enabled/192329 "2019-07-25T22:09:59Z")
I need to add some data nodes into a running cluster, if i build the cluster without xpack-security only with a new "..apply -f data1.yaml .." the cluster increases the nodes but if i build the cluster with x-pack-securi… --- ## [Curator issue](https://discuss.elastic.co/t/curator-issue/192321)
**Author:** [@sridharreddy1994](https://discuss.elastic.co/u/sridharreddy1994)\ **Replies:** 1\ **Last updated:** [July 25, 2019, 9:37pm UTC](https://discuss.elastic.co/t/curator-issue/192321 "2019-07-25T21:37:06Z")
Hi I am using curator and trying to delete some of indices which are older than 30 days and I got following error message,Can someone help me ? curator --config /u001/users/elasticsearch/curator.yml /u001/users/elastic… --- ## [Is ElasticSearch the correct solution to index \>300 websites?](https://discuss.elastic.co/t/is-elasticsearch-the-correct-solution-to-index-300-websites/192024)
**Author:** [@prawsthorne](https://discuss.elastic.co/u/prawsthorne)\ **Replies:** 3\ **Last updated:** [July 25, 2019, 9:21pm UTC](https://discuss.elastic.co/t/is-elasticsearch-the-correct-solution-to-index-300-websites/192024 "2019-07-25T21:21:17Z")
I'm new to elastic and thinking meta elastic is the correct place to ask architectural questions. TLDR: Should I use ES 7.o and Nutch 1.15 to index a few hundred industry specific sites to build a faceted search? I hav… --- ## [Indexing Becomes Inconsistent and Problematic With Additional Capacity Added](https://discuss.elastic.co/t/indexing-becomes-inconsistent-and-problematic-with-additional-capacity-added/189147)
**Author:** [@Sometimes](https://discuss.elastic.co/u/Sometimes)\ **Replies:** 31\ **Last updated:** [July 25, 2019, 9:16pm UTC](https://discuss.elastic.co/t/indexing-becomes-inconsistent-and-problematic-with-additional-capacity-added/189147 "2019-07-25T21:16:33Z")
Tl;dr - We have added additional capacity to our Elasticsearch cluster and now indexing is actually performing worse than before. We have a fairly large ELK stack that runs across two data centers. Before I get to our e… --- ## [Subsequent bulk index fail after first index](https://discuss.elastic.co/t/subsequent-bulk-index-fail-after-first-index/192121)
**Author:** [@Jtaks](https://discuss.elastic.co/u/Jtaks)\ **Replies:** 2\ **Last updated:** [July 25, 2019, 8:23pm UTC](https://discuss.elastic.co/t/subsequent-bulk-index-fail-after-first-index/192121 "2019-07-25T20:23:56Z")
Hi There, ES: 6.6 elastic/elasticsearch-js: 6.8 GKE: 1.12.7-gke.24 nodejs: 10.16.0 I currently have a Kubernetes cluster on GCP. What I usually do is kubectl port-forward elasticsearch-client... 9200 and test my nod… --- ## [Is it possible to perform an operation on fields from two different indexes?](https://discuss.elastic.co/t/is-it-possible-to-perform-an-operation-on-fields-from-two-different-indexes/191883)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 10\ **Last updated:** [July 25, 2019, 7:25pm UTC](https://discuss.elastic.co/t/is-it-possible-to-perform-an-operation-on-fields-from-two-different-indexes/191883 "2019-07-25T19:25:39Z")
These are my indexes: stage-api-athena-fruitcount: upload\_time \[other fields\] stage-cloudwatch: Timestamp \[other fields\] I want to perform the following action. Is it possible to do this operation on two separate … --- ## [Connectivity issues to Elasticsearch via tcp\\9200](https://discuss.elastic.co/t/connectivity-issues-to-elasticsearch-via-tcp-9200/191900)
**Author:** [@littlejob](https://discuss.elastic.co/u/littlejob)\ **Replies:** 17\ **Last updated:** [July 25, 2019, 6:40pm UTC](https://discuss.elastic.co/t/connectivity-issues-to-elasticsearch-via-tcp-9200/191900 "2019-07-25T18:40:55Z")
Testing out winlogbeat to send syslogs to elastic instance with a kibana front end. kibana status page shows all things are green two network options set in elasticsearch.yml are: network.host: 127.0.0.1 http.port:… --- ## [Elasticsearch client node's log is flooded with "Values less than -1 bytes are deprecated and will not be supported in the next major version: \[-5915230208b\]"](https://discuss.elastic.co/t/elasticsearch-client-nodes-log-is-flooded-with-values-less-than-1-bytes-are-deprecated-and-will-not-be-supported-in-the-next-major-version-5915230208b/189410)
**Author:** [@xchai](https://discuss.elastic.co/u/xchai)\ **Replies:** 1\ **Last updated:** [July 25, 2019, 6:29pm UTC](https://discuss.elastic.co/t/elasticsearch-client-nodes-log-is-flooded-with-values-less-than-1-bytes-are-deprecated-and-will-not-be-supported-in-the-next-major-version-5915230208b/189410 "2019-07-25T18:29:57Z")
Hi, we are testing ELK 6.6.1 on s390x platform (Linux on Z). We have 3 elasticsearch nodes configured as: client: discovery.zen.ping.unicast.hosts: master-discovery discovery.zen.minimum\_master\_nodes: 1 node.master:… --- ## [\[Elasticsearch 7.1.1\] Node failed to join cluster with GCE discovery plugin due to different cluster uuid](https://discuss.elastic.co/t/elasticsearch-7-1-1-node-failed-to-join-cluster-with-gce-discovery-plugin-due-to-different-cluster-uuid/191294)
**Author:** [@haotian9850](https://discuss.elastic.co/u/haotian9850)\ **Replies:** 7\ **Last updated:** [July 25, 2019, 6:18pm UTC](https://discuss.elastic.co/t/elasticsearch-7-1-1-node-failed-to-join-cluster-with-gce-discovery-plugin-due-to-different-cluster-uuid/191294 "2019-07-25T18:18:20Z")
Hey there, I am currently making an automated elasticsearch cluster deployment on Google Compute Platform with terraform and packer. For a testing 2-node test deployment, the config files (elasticsearch.yml) were as belo… --- ## [Security connection for Elastic and Logstash](https://discuss.elastic.co/t/security-connection-for-elastic-and-logstash/191009)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 2\ **Last updated:** [July 25, 2019, 5:27pm UTC](https://discuss.elastic.co/t/security-connection-for-elastic-and-logstash/191009 "2019-07-25T17:27:41Z")
Is there any kind of security for the Elastic application, not using X-Pack, so that not anyone can make a REST call or have any sort of connection to Elastic without needing using a proper id or login? --- ## [Change Codec Via ILM](https://discuss.elastic.co/t/change-codec-via-ilm/192274)
**Author:** [@Evesy](https://discuss.elastic.co/u/Evesy)\ **Replies:** 1\ **Last updated:** [July 25, 2019, 4:27pm UTC](https://discuss.elastic.co/t/change-codec-via-ilm/192274 "2019-07-25T16:27:30Z")
Hi, I was looking at migrating over index management from using Curator to using ILM, however, one of the actions we currently perform with Curator is to temporarily close the index and change the codec to best\_compress… --- ## [Hearbeat multiple URLS](https://discuss.elastic.co/t/hearbeat-multiple-urls/192279)
**Author:** [@zmira\_meriem](https://discuss.elastic.co/u/zmira_meriem)\ **Replies:** 0\ **Last updated:** [July 25, 2019, 3:33pm UTC](https://discuss.elastic.co/t/hearbeat-multiple-urls/192279 "2019-07-25T15:33:27Z")
hi help me plllz i wanna monitor multiple urls in kibana 7.2 the problem is 2 urls are up but in kibana show that one of them is down\` this my config: \`\`heartbeat.monitors: type: http enable: true schedule: '@eve… --- ## [ELK Stack - not creating indexes by day](https://discuss.elastic.co/t/elk-stack-not-creating-indexes-by-day/191051)
**Author:** [@MColeman](https://discuss.elastic.co/u/MColeman)\ **Replies:** 2\ **Last updated:** [July 25, 2019, 3:25pm UTC](https://discuss.elastic.co/t/elk-stack-not-creating-indexes-by-day/191051 "2019-07-25T15:25:27Z")
Hi! I'm not sure if this should be here in this category or over in Logstash, but here goes. I've brought up a new 7.2 ELK stack cluster and have started ingesting data. When I started Logstash, it created the logstash-… --- ## [Running Invoke-Method](https://discuss.elastic.co/t/running-invoke-method/192267)
**Author:** [@jonathan01](https://discuss.elastic.co/u/jonathan01)\ **Replies:** 0\ **Last updated:** [July 25, 2019, 2:20pm UTC](https://discuss.elastic.co/t/running-invoke-method/192267 "2019-07-25T14:20:30Z")
I am trying to run the fallowing code Invoke-RestMethod -Uri https://2252511c59834f50838ea41429bc8792.us-east-1.aws.found.io:9243/\_template/uberagent?include\_type\_name=true -Method Put -InFile .\\elasticsearch-uberagent.… --- ## [Elastic search index not being created for some log file input paths](https://discuss.elastic.co/t/elastic-search-index-not-being-created-for-some-log-file-input-paths/192255)
**Author:** [@ghanshyam\_Sehgal](https://discuss.elastic.co/u/ghanshyam_Sehgal)\ **Replies:** 0\ **Last updated:** [July 25, 2019, 1:35pm UTC](https://discuss.elastic.co/t/elastic-search-index-not-being-created-for-some-log-file-input-paths/192255 "2019-07-25T13:35:23Z")
whenever I give the log file input path in /var/log directory my index gets created but whenever I give the input log file path something other than /var/log directory my index does not get created.Could anyonle please … --- ## [Potential Race Condition during Document Updates in ES 6.7](https://discuss.elastic.co/t/potential-race-condition-during-document-updates-in-es-6-7/192089)
**Author:** [@Ryan\_Bales](https://discuss.elastic.co/u/Ryan_Bales)\ **Replies:** 1\ **Last updated:** [July 25, 2019, 1:27pm UTC](https://discuss.elastic.co/t/potential-race-condition-during-document-updates-in-es-6-7/192089 "2019-07-25T13:27:29Z")
We've recently upgraded our stand-by cluster to ES 6.7.1 from ES 5.6. Since our upgrade we're seeing a situation where some updates to our documents are not being applied correctly. Some additional details on our use c… --- ## [Index space usage with text and keyword datatype](https://discuss.elastic.co/t/index-space-usage-with-text-and-keyword-datatype/191413)
**Author:** [@ypid-geberit](https://discuss.elastic.co/u/ypid-geberit)\ **Replies:** 2\ **Last updated:** [July 25, 2019, 1:27pm UTC](https://discuss.elastic.co/t/index-space-usage-with-text-and-keyword-datatype/191413 "2019-07-25T13:27:22Z")
Dear Elastic community, We have a logging use case where the message field is quite big, specifically Windows logs collected using winlogbeat. We currently index the message field as text and also as keyword. We were cu… --- ## [Elastic Index - Changing Data](https://discuss.elastic.co/t/elastic-index-changing-data/190722)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 4\ **Last updated:** [July 25, 2019, 1:20pm UTC](https://discuss.elastic.co/t/elastic-index-changing-data/190722 "2019-07-25T13:20:40Z")
I am wondering if someone else has faced a similar use case that I have and if so how did they handle it. I have a master list of data say it has 100 rows with unique IDs, over a period of time those 100 will change. But… --- ## [Best way to search for extremely long hash-code similarity?](https://discuss.elastic.co/t/best-way-to-search-for-extremely-long-hash-code-similarity/192220)
**Author:** [@SuperSimon](https://discuss.elastic.co/u/SuperSimon)\ **Replies:** 3\ **Last updated:** [July 25, 2019, 1:05pm UTC](https://discuss.elastic.co/t/best-way-to-search-for-extremely-long-hash-code-similarity/192220 "2019-07-25T13:05:06Z")
Hey! We are a group of students that uses ElasticSearch to search for possible matches between stored hash-codes (or numeric values) in an index and a query with a hash-code. As we are totally new to ElasticSearch, we w… --- ## [Openstack swift plugin for elasticsearch 7.2 for snapshot and restore](https://discuss.elastic.co/t/openstack-swift-plugin-for-elasticsearch-7-2-for-snapshot-and-restore/192243)
**Author:** [@Virendar.Kmr](https://discuss.elastic.co/u/Virendar.Kmr)\ **Replies:** 0\ **Last updated:** [July 25, 2019, 12:33pm UTC](https://discuss.elastic.co/t/openstack-swift-plugin-for-elasticsearch-7-2-for-snapshot-and-restore/192243 "2019-07-25T12:33:47Z")
I am looking for openstack swift plugin for elasticsearch 7.2 tried swift-repository-plugin-2.4.1.jar but its failing with below error. bash-4.2$ bash-4.2$ ./bin/elasticsearch-plugin install file:/tmp/swift-repository… --- ## [Unable to activate machine learning on my windows 10](https://discuss.elastic.co/t/unable-to-activate-machine-learning-on-my-windows-10/192222)
**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Replies:** 2\ **Last updated:** [July 25, 2019, 11:49am UTC](https://discuss.elastic.co/t/unable-to-activate-machine-learning-on-my-windows-10/192222 "2019-07-25T11:49:11Z")
Hi..I am using this windows 10 where I am trying to activate trial machine learning features but whenever I clicking start trial nothing happens..p.s. any help --- ## [From our exchange server and active directory server securty events delay several hours to elasticsearch](https://discuss.elastic.co/t/from-our-exchange-server-and-active-directory-server-securty-events-delay-several-hours-to-elasticsearch/192226)
**Author:** [@Lehugo](https://discuss.elastic.co/u/Lehugo)\ **Replies:** 0\ **Last updated:** [July 25, 2019, 11:11am UTC](https://discuss.elastic.co/t/from-our-exchange-server-and-active-directory-server-securty-events-delay-several-hours-to-elasticsearch/192226 "2019-07-25T11:11:45Z")
security Events (winlogbeat 6.4.1) from exchange servers delay 2 hours and security Events from active directory servers delay 30min to elasticsearch (Kibana). Does someone knows the reason? Or there is a bug with the … --- ## [How to make aggregations work for text fields](https://discuss.elastic.co/t/how-to-make-aggregations-work-for-text-fields/191984)
**Author:** [@Malik\_Khan](https://discuss.elastic.co/u/Malik_Khan)\ **Replies:** 2\ **Last updated:** [July 25, 2019, 9:54am UTC](https://discuss.elastic.co/t/how-to-make-aggregations-work-for-text-fields/191984 "2019-07-25T09:54:54Z")
am trying to write a elasticsearch query to get unique locality towns. my locality\_town is of text type, when I used aggregations I came to know my field need to be of keyword type, so I tried to add a keyword field to l… --- ## [Not able to access vpc based aws elasticsearch domain using proxy server](https://discuss.elastic.co/t/not-able-to-access-vpc-based-aws-elasticsearch-domain-using-proxy-server/192209)
**Author:** [@a2hksy](https://discuss.elastic.co/u/a2hksy)\ **Replies:** 0\ **Last updated:** [July 25, 2019, 9:28am UTC](https://discuss.elastic.co/t/not-able-to-access-vpc-based-aws-elasticsearch-domain-using-proxy-server/192209 "2019-07-25T09:28:49Z")
Hi, I have created a cluster of AWS Elasticsearch service in a VPC. There are many services in my organization that are in different VPC and want to access my Elasticsearch domain. To do that a public proxy server can … --- ## [Xpack - How to create kibana user](https://discuss.elastic.co/t/xpack-how-to-create-kibana-user/191165)
**Author:** [@Gidi\_Kalef](https://discuss.elastic.co/u/Gidi_Kalef)\ **Replies:** 5\ **Last updated:** [July 25, 2019, 9:31am UTC](https://discuss.elastic.co/t/xpack-how-to-create-kibana-user/191165 "2019-07-25T09:31:28Z")
Hi Guys, I'm trying to understand how X-Pack work but i think i miss something, Lets say in my Kibana i have the following patterns: prod-java\* prod-nodejs\* and i would like to create a role, that role will map a re… --- ## [Why one of nodes rejected more requests?](https://discuss.elastic.co/t/why-one-of-nodes-rejected-more-requests/192198)
**Author:** [@Magister](https://discuss.elastic.co/u/Magister)\ **Replies:** 1\ **Last updated:** [July 25, 2019, 8:46am UTC](https://discuss.elastic.co/t/why-one-of-nodes-rejected-more-requests/192198 "2019-07-25T08:46:53Z")
Hi! Elasticsearch cluster has 2 nodes. But when I start stress test using esrally, I found that one of them has more rejections than the other like this: node\_name name active queue rejected completed … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1212) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1214)