# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1218

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1219

---

## [Elk version](https://discuss.elastic.co/t/elk-version/191666)

<div class="topic-metadata">

**Author:** [@sirichandana](https://discuss.elastic.co/u/sirichandana)\
**Replies:** 1\
**Last updated:** [July 22, 2019, 3:38pm UTC](https://discuss.elastic.co/t/elk-version/191666 "2019-07-22T15:38:58Z")

</div>

Hello all, As ELK have many versions. what is the stable version to use? Thanks.

---

## [SQL Query not executing](https://discuss.elastic.co/t/sql-query-not-executing/191301)

<div class="topic-metadata">

**Author:** [@Khirod\_Panda](https://discuss.elastic.co/u/Khirod_Panda)\
**Replies:** 6\
**Last updated:** [July 22, 2019, 3:29pm UTC](https://discuss.elastic.co/t/sql-query-not-executing/191301 "2019-07-22T15:29:28Z")

</div>

Hello, i have index names as alpha-\* and when i try to run SQL query on the index it throws error POST /\_xpack/sql?format=txt { "query": "SELECT \* FROM alpha-\* " } error :-1: "type": "parsing\_exception", "reason":…

---

## [Cant make cluster work](https://discuss.elastic.co/t/cant-make-cluster-work/191655)

<div class="topic-metadata">

**Author:** [@tamirh2019](https://discuss.elastic.co/u/tamirh2019)\
**Replies:** 2\
**Last updated:** [July 22, 2019, 3:14pm UTC](https://discuss.elastic.co/t/cant-make-cluster-work/191655 "2019-07-22T15:14:06Z")

</div>

hi, i cant make the clustering work, ive staticly defined: cluster.name: elasti-flow node.name: node-1 on one of the nodes, and node.name: node-2 on the other. discovery.seed\_hosts: \["10.60.35.252", "10.60.35.253"\] …

---

## [Log stash fails to index events into elastic search](https://discuss.elastic.co/t/log-stash-fails-to-index-events-into-elastic-search/191660)

<div class="topic-metadata">

**Author:** [@manjudr](https://discuss.elastic.co/u/manjudr)\
**Replies:** 0\
**Last updated:** [July 22, 2019, 2:30pm UTC](https://discuss.elastic.co/t/log-stash-fails-to-index-events-into-elastic-search/191660 "2019-07-22T14:30:12Z")

</div>

When try to index {"ets":1.56380271344E12} this event into elastic search it's throwing an illegal\_argument\_exception Spec: Log stash Version:2.3.4 Elastic search Version: 2.4.5 Input events: Event1: {"ets":1.563802…

---

## [Make a filter on sub folders - I want to see the files inside the sub folder I selected](https://discuss.elastic.co/t/make-a-filter-on-sub-folders-i-want-to-see-the-files-inside-the-sub-folder-i-selected/191536)

<div class="topic-metadata">

**Author:** [@manideep](https://discuss.elastic.co/u/manideep)\
**Replies:** 5\
**Last updated:** [July 22, 2019, 1:50pm UTC](https://discuss.elastic.co/t/make-a-filter-on-sub-folders-i-want-to-see-the-files-inside-the-sub-folder-i-selected/191536 "2019-07-22T13:50:00Z")

</div>

Dear Community, I am a week old to Elasticsearch and trying to achieve a solution. I have a folder say test with files and sub folders inside it. test - folder test1 - sub folder test2 - sub folder test3 - sub fold…

---

## [Migrate data 6.4 \> 6.8 \> 7.2](https://discuss.elastic.co/t/migrate-data-6-4-6-8-7-2/191623)

<div class="topic-metadata">

**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\
**Replies:** 1\
**Last updated:** [July 22, 2019, 1:47pm UTC](https://discuss.elastic.co/t/migrate-data-6-4-6-8-7-2/191623 "2019-07-22T13:47:26Z")

</div>

Hello, my environment: Windows 2012 I have migrated data from 6.4 to 6.8: backup data on 6.4 restore backup on 6.8 everything works fine. Next I have migrated data from 6.8 to 7.2. backup data on 6.8 restore back…

---

## [Problem while running multiple rollup jobs on same rollup-index](https://discuss.elastic.co/t/problem-while-running-multiple-rollup-jobs-on-same-rollup-index/191645)

<div class="topic-metadata">

**Author:** [@darkwarrior](https://discuss.elastic.co/u/darkwarrior)\
**Replies:** 0\
**Last updated:** [July 22, 2019, 1:16pm UTC](https://discuss.elastic.co/t/problem-while-running-multiple-rollup-jobs-on-same-rollup-index/191645 "2019-07-22T13:16:57Z")

</div>

Hello, I created one index as, PUT prod-index-20190101/\_doc/1 { "subject":"cpp", "event\_at":"2019-01-01T00:00:00.000Z" } PUT prod-index-20190101/\_doc/2 { "subject”:”java”, "even…

---

## [How to reset or change Rollup-job’s indexer’s time](https://discuss.elastic.co/t/how-to-reset-or-change-rollup-job-s-indexer-s-time/191642)

<div class="topic-metadata">

**Author:** [@darkwarrior](https://discuss.elastic.co/u/darkwarrior)\
**Replies:** 0\
**Last updated:** [July 22, 2019, 1:07pm UTC](https://discuss.elastic.co/t/how-to-reset-or-change-rollup-job-s-indexer-s-time/191642 "2019-07-22T13:07:16Z")

</div>

Hello, We are doing rollup on our production indices which contains a large number of documents. So the rollup-job is running from August 2018 till todays date. And we create indices on daily basis like index-20180801 …

---

## [Https://www.elastic.co/guide/ unavailable](https://discuss.elastic.co/t/https-www-elastic-co-guide-unavailable/191637)

<div class="topic-metadata">

**Author:** [@orakl3r](https://discuss.elastic.co/u/orakl3r)\
**Replies:** 2\
**Last updated:** [July 22, 2019, 12:52pm UTC](https://discuss.elastic.co/t/https-www-elastic-co-guide-unavailable/191637 "2019-07-22T12:52:04Z")

</div>

Hello https://www.elastic.co/guide/ is down who can we contact ? Can we have an update for this issue ? Thanks NT

---

## [Active threads in Thread pool is not changing](https://discuss.elastic.co/t/active-threads-in-thread-pool-is-not-changing/191638)

<div class="topic-metadata">

**Author:** [@Akhil\_M\_S](https://discuss.elastic.co/u/Akhil_M_S)\
**Replies:** 0\
**Last updated:** [July 22, 2019, 12:39pm UTC](https://discuss.elastic.co/t/active-threads-in-thread-pool-is-not-changing/191638 "2019-07-22T12:39:16Z")

</div>

Hi,I'm new to elasticsearch and currently i'm facing an issue of 'es\_rejected\_execution\_exception'.I just checked the thread pool by \_cat/thread\_pool?v. here I can see,(only one is mentioned here) node\_name …

---

## [Completion Suggester and list of values](https://discuss.elastic.co/t/completion-suggester-and-list-of-values/191631)

<div class="topic-metadata">

**Author:** [@Vova\_Marchev](https://discuss.elastic.co/u/Vova_Marchev)\
**Replies:** 0\
**Last updated:** [July 22, 2019, 12:03pm UTC](https://discuss.elastic.co/t/completion-suggester-and-list-of-values/191631 "2019-07-22T12:03:48Z")

</div>

Hi all! I found the issue with Completion Suggester API if I use it for a field which have list of values. For example I have the next document: PUT /example { "mappings": { "\_doc": { "properti…

---

## [Elasticsearch internal password rules](https://discuss.elastic.co/t/elasticsearch-internal-password-rules/191431)

<div class="topic-metadata">

**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\
**Replies:** 2\
**Last updated:** [July 22, 2019, 12:03pm UTC](https://discuss.elastic.co/t/elasticsearch-internal-password-rules/191431 "2019-07-22T12:03:29Z")

</div>

Hello, Is there any setup that can be used to define rules for internal user password, for example Minimum length Minimul Capital Letter Minimum special caracter ?

---

## [How to authenticate using Active directory & LDAP in ELK](https://discuss.elastic.co/t/how-to-authenticate-using-active-directory-ldap-in-elk/190729)

<div class="topic-metadata">

**Author:** [@Pankaj\_Navneet](https://discuss.elastic.co/u/Pankaj_Navneet)\
**Replies:** 7\
**Last updated:** [July 22, 2019, 11:53am UTC](https://discuss.elastic.co/t/how-to-authenticate-using-active-directory-ldap-in-elk/190729 "2019-07-22T11:53:31Z")

</div>

Hi, Can somebody please help me in getting the right configuration to set authentication using Active directory & LDAP? I googled a lot but didn't find the right information to set up the same. So, please ELK professio…

---

## [Improving Query Performance](https://discuss.elastic.co/t/improving-query-performance/190737)

<div class="topic-metadata">

**Author:** [@emrealtan](https://discuss.elastic.co/u/emrealtan)\
**Replies:** 20\
**Last updated:** [July 22, 2019, 11:53am UTC](https://discuss.elastic.co/t/improving-query-performance/190737 "2019-07-22T11:53:12Z")

</div>

Hello all, I'm new in Elasticsearch and trying to find out why my query performance is so slow. I have an index with 1M documents called "variantlist". I'm searching in "VariantIds" values with this query: {"from":0,"…

---

## [Trim all text fields](https://discuss.elastic.co/t/trim-all-text-fields/191630)

<div class="topic-metadata">

**Author:** [@Ayala](https://discuss.elastic.co/u/Ayala)\
**Replies:** 0\
**Last updated:** [July 22, 2019, 11:53am UTC](https://discuss.elastic.co/t/trim-all-text-fields/191630 "2019-07-22T11:53:05Z")

</div>

Hi, I would like all saved text fields to be trimmed, for all indexes, such that the leading and end spaces will be removed. I am using Java API for indexing documents etc. Not sure how to use the ingest processors, a…

---

## [Authenticate with user:passowrd with elasticsearch node.js module](https://discuss.elastic.co/t/authenticate-with-user-passowrd-with-elasticsearch-node-js-module/191627)

<div class="topic-metadata">

**Author:** [@Yonatan\_Omer](https://discuss.elastic.co/u/Yonatan_Omer)\
**Replies:** 0\
**Last updated:** [July 22, 2019, 11:42am UTC](https://discuss.elastic.co/t/authenticate-with-user-passowrd-with-elasticsearch-node-js-module/191627 "2019-07-22T11:42:35Z")

</div>

I can successfully connect to ES from Java and Curl, bu using 'myUserName:myPassword' but when initializing the node.js client as shown in the doc, i receive 403 const { Client } = require('@elastic/elasticsearch') co…

---

## [Elasticsearch6.8.0 verify global certificate exception](https://discuss.elastic.co/t/elasticsearch6-8-0-verify-global-certificate-exception/190877)

<div class="topic-metadata">

**Author:** [@sunweiconfidence](https://discuss.elastic.co/u/sunweiconfidence)\
**Replies:** 1\
**Last updated:** [July 22, 2019, 11:32am UTC](https://discuss.elastic.co/t/elasticsearch6-8-0-verify-global-certificate-exception/190877 "2019-07-22T11:32:56Z")

</div>

hi, when i configure 3 nodes to enable internode communication, i use pfx and p12 certificate from applying global cert, now i meet with below exception when start 3 nodes elasticsearch service btw, i use self signe…

---

## [100% CPU and GC on all nodes](https://discuss.elastic.co/t/100-cpu-and-gc-on-all-nodes/191485)

<div class="topic-metadata">

**Author:** [@xenoid](https://discuss.elastic.co/u/xenoid)\
**Replies:** 5\
**Last updated:** [July 21, 2019, 12:11pm UTC](https://discuss.elastic.co/t/100-cpu-and-gc-on-all-nodes/191485 "2019-07-21T12:11:10Z")

</div>

Hi guys, we recently did a rolling upgrade on our ES Cluster (40+ Nodes, 120+ indices) from 5.6.14 to 6.8.1. We had many issues which we could eventually fix. One of the issues we still have however is, that the whole…

---

## [Index only first N words of field?](https://discuss.elastic.co/t/index-only-first-n-words-of-field/191620)

<div class="topic-metadata">

**Author:** [@gavenkoa](https://discuss.elastic.co/u/gavenkoa)\
**Replies:** 0\
**Last updated:** [July 22, 2019, 11:15am UTC](https://discuss.elastic.co/t/index-only-first-n-words-of-field/191620 "2019-07-22T11:15:39Z")

</div>

Sometimes we save XML dumps into app logs. They can be 10kb-100kb long and we are not interested in indexing full content. Is it possible to limit indexing to only first 1kb on text? We are only interesting in "\_sourc…

---

## [I want to increase the number of total for each index,is it by vm. max\_map\_count?](https://discuss.elastic.co/t/i-want-to-increase-the-number-of-total-for-each-index-is-it-by-vm-max-map-count/191618)

<div class="topic-metadata">

**Author:** [@idris](https://discuss.elastic.co/u/idris)\
**Replies:** 0\
**Last updated:** [July 22, 2019, 11:09am UTC](https://discuss.elastic.co/t/i-want-to-increase-the-number-of-total-for-each-index-is-it-by-vm-max-map-count/191618 "2019-07-22T11:09:45Z")

</div>

Basically, i 've got two indexes referring to swiss news in french and German, i noticed that i have some documents of each language about 200 ,it is a small size,before i added a new index in German , i had for french i…

---

## [Sort unmapped field](https://discuss.elastic.co/t/sort-unmapped-field/191614)

<div class="topic-metadata">

**Author:** [@tomsk](https://discuss.elastic.co/u/tomsk)\
**Replies:** 0\
**Last updated:** [July 22, 2019, 10:40am UTC](https://discuss.elastic.co/t/sort-unmapped-field/191614 "2019-07-22T10:40:49Z")

</div>

Hello, I use this code for sorting products according the price: "sort":\[ { "price": { "order": "desc" } } \] I know that it doesn't work because field price is unmapped, so it takes probably as "text" so I wonder if…

---

## [Elasticsearch crashed suddenly with 7.1.1](https://discuss.elastic.co/t/elasticsearch-crashed-suddenly-with-7-1-1/191613)

<div class="topic-metadata">

**Author:** [@chenchuangc](https://discuss.elastic.co/u/chenchuangc)\
**Replies:** 2\
**Last updated:** [July 22, 2019, 10:35am UTC](https://discuss.elastic.co/t/elasticsearch-crashed-suddenly-with-7-1-1/191613 "2019-07-22T10:35:31Z")

</div>

Elasticsearch version bin/elasticsearch --version 7.1.1 Plugins installed bin/elasticsearch-plugin list analysis-ik JVM version java -version java version "1.8.0\_91" Java(TM) SE Runtime Environment (build 1.8.0\_91-…

---

## [Important factor on the required time for opening a closed shard?](https://discuss.elastic.co/t/important-factor-on-the-required-time-for-opening-a-closed-shard/191469)

<div class="topic-metadata">

**Author:** [@Ali\_Reza\_Haghighat](https://discuss.elastic.co/u/Ali_Reza_Haghighat)\
**Replies:** 8\
**Last updated:** [July 22, 2019, 10:19am UTC](https://discuss.elastic.co/t/important-factor-on-the-required-time-for-opening-a-closed-shard/191469 "2019-07-22T10:19:34Z")

</div>

I'd like to know the important factor on the time of opening a closed shard. I've run a few tests, but I got unreasonable results: No of Shards, Size of Each Shard, Opening Time 50, 10 MB, 5 s 50, 150 MB, 12 s 50, 2 …

---

## [ES 7.2.0 Master fails to join cluster](https://discuss.elastic.co/t/es-7-2-0-master-fails-to-join-cluster/191605)

<div class="topic-metadata">

**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\
**Replies:** 2\
**Last updated:** [July 22, 2019, 9:58am UTC](https://discuss.elastic.co/t/es-7-2-0-master-fails-to-join-cluster/191605 "2019-07-22T09:58:35Z")

</div>

I am using ES 7.2.0 cluster with 3 Masters and 2 Slaves. Bump into the following exception in the master node: {"type": "server", "timestamp": "2019-07-22T08:20:00,042+0000", "level": "WARN", "component": "o.e.c.c.Coord…

---

## [Any way to save raw log data prior to converting and indexing](https://discuss.elastic.co/t/any-way-to-save-raw-log-data-prior-to-converting-and-indexing/191611)

<div class="topic-metadata">

**Author:** [@a.gavric](https://discuss.elastic.co/u/a.gavric)\
**Replies:** 0\
**Last updated:** [July 22, 2019, 9:57am UTC](https://discuss.elastic.co/t/any-way-to-save-raw-log-data-prior-to-converting-and-indexing/191611 "2019-07-22T09:57:49Z")

</div>

Hello Everyone, i have a very specific use case that was requested of me to look into and after days of research came up empty. Namely what was requested is an option to have log data output-ed and kept in its original f…

---

## [Join 2 indices. merge the columns](https://discuss.elastic.co/t/join-2-indices-merge-the-columns/191609)

<div class="topic-metadata">

**Author:** [@kiewza](https://discuss.elastic.co/u/kiewza)\
**Replies:** 0\
**Last updated:** [July 22, 2019, 9:44am UTC](https://discuss.elastic.co/t/join-2-indices-merge-the-columns/191609 "2019-07-22T09:44:23Z")

</div>

Hi, I would like to ask for you guys advice on how to join 2 indices and show the result containing all related columns. Let say I have 2 indices for my application logs. the second index is static one I imported from …

---

## [How to reset no of rejected count in thread-pools](https://discuss.elastic.co/t/how-to-reset-no-of-rejected-count-in-thread-pools/191353)

<div class="topic-metadata">

**Author:** [@Jeetu19](https://discuss.elastic.co/u/Jeetu19)\
**Replies:** 4\
**Last updated:** [July 22, 2019, 9:03am UTC](https://discuss.elastic.co/t/how-to-reset-no-of-rejected-count-in-thread-pools/191353 "2019-07-22T09:03:08Z")

</div>

How to reset no of rejected count in thread-pools. Please help!

---

## [Can I use gzip or some other compression algorithms when I create snapshots to HDFS?](https://discuss.elastic.co/t/can-i-use-gzip-or-some-other-compression-algorithms-when-i-create-snapshots-to-hdfs/188600)

<div class="topic-metadata">

**Author:** [@wangxr1985](https://discuss.elastic.co/u/wangxr1985)\
**Replies:** 20\
**Last updated:** [July 22, 2019, 8:48am UTC](https://discuss.elastic.co/t/can-i-use-gzip-or-some-other-compression-algorithms-when-i-create-snapshots-to-hdfs/188600 "2019-07-22T08:48:38Z")

</div>

This is the document of repository-hdfs: https://www.elastic.co/guide/en/elasticsearch/plugins/master/repository-hdfs-config.html I can't find any compression algorithms arguments about HDFS when I use snapshot to do …

---

## [Reindex daily index into the correct monthly index a few days later](https://discuss.elastic.co/t/reindex-daily-index-into-the-correct-monthly-index-a-few-days-later/191602)

<div class="topic-metadata">

**Author:** [@Wellguys](https://discuss.elastic.co/u/Wellguys)\
**Replies:** 0\
**Last updated:** [July 22, 2019, 8:19am UTC](https://discuss.elastic.co/t/reindex-daily-index-into-the-correct-monthly-index-a-few-days-later/191602 "2019-07-22T08:19:00Z")

</div>

Hello, I am currently testing curators functionnalities and would like to know how it was possible for me to reindex 7days old daily indices into the correct monthly index. Here is my current code in which the last seve…

---

## [External Docker Volume for Elasticsearch Snapshot](https://discuss.elastic.co/t/external-docker-volume-for-elasticsearch-snapshot/191598)

<div class="topic-metadata">

**Author:** [@alza](https://discuss.elastic.co/u/alza)\
**Replies:** 0\
**Last updated:** [July 22, 2019, 7:46am UTC](https://discuss.elastic.co/t/external-docker-volume-for-elasticsearch-snapshot/191598 "2019-07-22T07:46:22Z")

</div>

I'm trying to use snapshot for backup and restore, I added the backup path in elasticsearch.yml as: path.repo: \["/opt/elasticsearch/backup"\] Also in my elasticsearch docker-compose.yml I bind this path to an external v…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1217)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1219)
