# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1263 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1264 --- ## [How to get logs for system call filters failed to install](https://discuss.elastic.co/t/how-to-get-logs-for-system-call-filters-failed-to-install/185596)
**Author:** [@byeong\_seok\_park](https://discuss.elastic.co/u/byeong_seok_park)\ **Replies:** 5\ **Last updated:** [June 14, 2019, 6:52am UTC](https://discuss.elastic.co/t/how-to-get-logs-for-system-call-filters-failed-to-install/185596 "2019-06-14T06:52:00Z")
Hi, I'm working on installing elasticsearch for dev purpose. I'm having trouble to start a node like below: \[2019-06-13T19:15:32,594\]\[WARN \]\[o.e.b.JNANatives \] unable to install syscall filter: java.lang.Unsupp… --- ## [Elasticsearch 7.0 SQL ACCESS, Priority of multiple order by commands](https://discuss.elastic.co/t/elasticsearch-7-0-sql-access-priority-of-multiple-order-by-commands/185578)
**Author:** [@c81b4c93b1f70af5398f](https://discuss.elastic.co/u/c81b4c93b1f70af5398f)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 6:42am UTC](https://discuss.elastic.co/t/elasticsearch-7-0-sql-access-priority-of-multiple-order-by-commands/185578 "2019-06-14T06:42:05Z")
This is the query I'm trying below. SELECT "hour", "gender", SUM("aggrCount") AS "cnt" FROM "my.index" WHERE "batchDate" \< XXX AND \\"batchDate\\" \>= XXX AND "hour" in ( 10, 11, 12, 13, 14) GROUP BY "hour", "gender" \*\*ORD… --- ## [ELK not working after upgrading from v6.7 to v7.1](https://discuss.elastic.co/t/elk-not-working-after-upgrading-from-v6-7-to-v7-1/185659)
**Author:** [@abdulsofts](https://discuss.elastic.co/u/abdulsofts)\ **Replies:** 3\ **Last updated:** [June 14, 2019, 5:58am UTC](https://discuss.elastic.co/t/elk-not-working-after-upgrading-from-v6-7-to-v7-1/185659 "2019-06-14T05:58:36Z")
Hello, Recently I have upgraded my ELK stack setup from 6.7 to 7.1 and verified that the versions of kibana, elasticsearch and logstash are up to date. Problem: After upgrading to v7.1, I am unable to open kibana page… --- ## [Nodes not discovering in ELK 7.0](https://discuss.elastic.co/t/nodes-not-discovering-in-elk-7-0/185612)
**Author:** [@Vineeth\_Ananthula1](https://discuss.elastic.co/u/Vineeth_Ananthula1)\ **Replies:** 2\ **Last updated:** [June 14, 2019, 5:35am UTC](https://discuss.elastic.co/t/nodes-not-discovering-in-elk-7-0/185612 "2019-06-14T05:35:59Z")
I running two ES instances. I am using the ELK stack version 7.0. In kibana only the master is shown and the other node is not shown. How can I get the other node? In the elasticsearch.yml i have given the same cluster n… --- ## [Problems with entering data using Elasticsearch DSL](https://discuss.elastic.co/t/problems-with-entering-data-using-elasticsearch-dsl/185643)
**Author:** [@semplicesteak](https://discuss.elastic.co/u/semplicesteak)\ **Replies:** 0\ **Last updated:** [June 13, 2019, 12:45pm UTC](https://discuss.elastic.co/t/problems-with-entering-data-using-elasticsearch-dsl/185643 "2019-06-13T12:45:55Z")
Hello, I try to use Elasticsearch DSL docs' Persistence Example to input data. (https://elasticsearch-dsl.readthedocs.io/en/latest/) But it can't run on python3. Code show as below: from datetime import datetime from … --- ## [Unable to create HA with Elasticsearch with 2 master nodes](https://discuss.elastic.co/t/unable-to-create-ha-with-elasticsearch-with-2-master-nodes/185753)
**Author:** [@Prashant\_Shirsath](https://discuss.elastic.co/u/Prashant_Shirsath)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 4:55am UTC](https://discuss.elastic.co/t/unable-to-create-ha-with-elasticsearch-with-2-master-nodes/185753 "2019-06-14T04:55:46Z")
I am new to ES. I am trying to set up a cluster on the same machine(Windows) I have 2 copy of elasticsearch-7.1.1-masterA & elasticsearch-7.1.1-masterB I am using basic version of ELK. elasticsearch-7.1.1-masterA has… --- ## [Difference between Elasticsearch basic license and opensource license](https://discuss.elastic.co/t/difference-between-elasticsearch-basic-license-and-opensource-license/185584)
**Author:** [@kanapuliAthavan](https://discuss.elastic.co/u/kanapuliAthavan)\ **Replies:** 2\ **Last updated:** [June 14, 2019, 4:29am UTC](https://discuss.elastic.co/t/difference-between-elasticsearch-basic-license-and-opensource-license/185584 "2019-06-14T04:29:21Z")
What is ES opensource license and ES basic license? I can see from the license page that both are free. Some feature which is supported in the basic license is not available in the opensource license? --- ## [Elasticsearch(6.7.1): \[test1\] path is not accessible on master node](https://discuss.elastic.co/t/elasticsearch-6-7-1-test1-path-is-not-accessible-on-master-node/185136)
**Author:** [@xiaochuan\_lin](https://discuss.elastic.co/u/xiaochuan_lin)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 1:43am UTC](https://discuss.elastic.co/t/elasticsearch-6-7-1-test1-path-is-not-accessible-on-master-node/185136 "2019-06-14T01:43:40Z")
Hey, I tried to use oss (Alibaba Cloud Storage) to add some errors when adding elasticsarch(6.7.1) backup. Here are my steps. 1、Mount oss to all elasticsearch servers and change directory permissions to elasticsearch … --- ## [How to implement fuzzy search for phrase/phrase\_prefix in elasticsearch6.8?](https://discuss.elastic.co/t/how-to-implement-fuzzy-search-for-phrase-phrase-prefix-in-elasticsearch6-8/185551)
**Author:** [@sunweiconfidence](https://discuss.elastic.co/u/sunweiconfidence)\ **Replies:** 6\ **Last updated:** [June 14, 2019, 1:42am UTC](https://discuss.elastic.co/t/how-to-implement-fuzzy-search-for-phrase-phrase-prefix-in-elasticsearch6-8/185551 "2019-06-14T01:42:57Z")
hi i want to know how to implement fuzzy search for match/match\_phrase/match\_phrase\_prefix in elasticsearch6.8? previously i implement it using below clause in es5.4 "match" : { "\_all" : { "query" : "test", "operat… --- ## [Secure Elasticsearch with TLS encryption and role-based access control](https://discuss.elastic.co/t/secure-elasticsearch-with-tls-encryption-and-role-based-access-control/185576)
**Author:** [@Yuna\_YU](https://discuss.elastic.co/u/Yuna_YU)\ **Replies:** 1\ **Last updated:** [June 13, 2019, 11:47pm UTC](https://discuss.elastic.co/t/secure-elasticsearch-with-tls-encryption-and-role-based-access-control/185576 "2019-06-13T23:47:07Z")
I want to follow the below article to secure my elasticsearch, link But I had installed elasticsearch by using debian, So I don't know how to make master and node just like the article demonstrated? P.S. I built ELK r… --- ## [Kibana only display logo no content -elasticsearch error shard](https://discuss.elastic.co/t/kibana-only-display-logo-no-content-elasticsearch-error-shard/185529)
**Author:** [@callmejon](https://discuss.elastic.co/u/callmejon)\ **Replies:** 18\ **Last updated:** [June 13, 2019, 11:46pm UTC](https://discuss.elastic.co/t/kibana-only-display-logo-no-content-elasticsearch-error-shard/185529 "2019-06-13T23:46:27Z")
im new to the elastic search, we use it to capture cisco callmanager cdr record. but it seems stop working recently. it keeped 2yr of data. could you please help to get it working again? tried restart the ubuntu ser… --- ## [Elasticsearch running as service on Ubuntu is failing](https://discuss.elastic.co/t/elasticsearch-running-as-service-on-ubuntu-is-failing/185505)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 17\ **Last updated:** [June 13, 2019, 10:28pm UTC](https://discuss.elastic.co/t/elasticsearch-running-as-service-on-ubuntu-is-failing/185505 "2019-06-13T22:28:07Z")
I am trying to run elastisearch as a service on an ubuntu server but it keeps failing and I can't figure out what is wrong. Never installed elasticsearch on an ubuntu server. Version is 6.7.1 P.S. server.com isnt the na… --- ## [How to search through ingest attachments](https://discuss.elastic.co/t/how-to-search-through-ingest-attachments/185703)
**Author:** [@fedoroko](https://discuss.elastic.co/u/fedoroko)\ **Replies:** 1\ **Last updated:** [June 13, 2019, 9:52pm UTC](https://discuss.elastic.co/t/how-to-search-through-ingest-attachments/185703 "2019-06-13T21:52:02Z")
Hello, i'm installed elastic and ingest plagin but can't understand how to search through indexed attachments. Can you please explain how to build search query for attachments content? PUT \_ingest/pipeline/attachment?pr… --- ## [No masternode selected](https://discuss.elastic.co/t/no-masternode-selected/185692)
**Author:** [@ho\_al](https://discuss.elastic.co/u/ho_al)\ **Replies:** 4\ **Last updated:** [June 13, 2019, 6:38pm UTC](https://discuss.elastic.co/t/no-masternode-selected/185692 "2019-06-13T18:38:37Z")
Hi, I am new to the elastic world and am currently testing the elastic stack in a non production setting. I previously set up ELK + filebeat and got everything running (first logs from filebeat visible in Kibana via Log… --- ## [SortField in NEST 7.0 alpha 2 with Elasticsearch 7.1](https://discuss.elastic.co/t/sortfield-in-nest-7-0-alpha-2-with-elasticsearch-7-1/185421)
**Author:** [@vinkesh](https://discuss.elastic.co/u/vinkesh)\ **Replies:** 2\ **Last updated:** [June 13, 2019, 6:12pm UTC](https://discuss.elastic.co/t/sortfield-in-nest-7-0-alpha-2-with-elasticsearch-7-1/185421 "2019-06-13T18:12:24Z")
Hello, I recently upgraded elasticsearch to 7.1 and NEST to version 7.0 alpha 2 in my existing .NET core based application. I am generating search request where I am using SortField class to specify field to perform so… --- ## [Can we add a normalizer while adding a new field to an existing index. I tried to but it doesn't seem to be working](https://discuss.elastic.co/t/can-we-add-a-normalizer-while-adding-a-new-field-to-an-existing-index-i-tried-to-but-it-doesnt-seem-to-be-working/184543)
**Author:** [@aastha](https://discuss.elastic.co/u/aastha)\ **Replies:** 2\ **Last updated:** [June 13, 2019, 5:47pm UTC](https://discuss.elastic.co/t/can-we-add-a-normalizer-while-adding-a-new-field-to-an-existing-index-i-tried-to-but-it-doesnt-seem-to-be-working/184543 "2019-06-13T17:47:00Z")
The index is already in elasticsearch, I'm trying to add a new field "my\_field" with a custom analyzer but this doesn't work. PUT my\_index { "settings": { "analysis": { "normalizer": { "my\_normalizer": { "type": "… --- ## [No \[query\] registered for \[has\_child\] for ESIntegTestCase in 5.6.8](https://discuss.elastic.co/t/no-query-registered-for-has-child-for-esintegtestcase-in-5-6-8/185262)
**Author:** [@Chris\_H1](https://discuss.elastic.co/u/Chris_H1)\ **Replies:** 2\ **Last updated:** [June 13, 2019, 5:19pm UTC](https://discuss.elastic.co/t/no-query-registered-for-has-child-for-esintegtestcase-in-5-6-8/185262 "2019-06-13T17:19:02Z")
We have integration tests set up using the ESIntegTestCase, in upgrading to 5.6.8 from 5.1.2 all of our has\_child queries get the following errors: {"error":{"root\_cause":\[{"type":"parsing\_exception","reason":"no \[query… --- ## [What ${source\_elasticsearch} is in Elasticsearch docker file](https://discuss.elastic.co/t/what-source-elasticsearch-is-in-elasticsearch-docker-file/185707)
**Author:** [@riverbuilding](https://discuss.elastic.co/u/riverbuilding)\ **Replies:** 0\ **Last updated:** [June 13, 2019, 5:13pm UTC](https://discuss.elastic.co/t/what-source-elasticsearch-is-in-elasticsearch-docker-file/185707 "2019-06-13T17:13:45Z")
in Elasticsearch docker file: https://github.com/elastic/elasticsearch/blob/7.1/distribution/docker/src/docker/Dockerfile I found line 25: ${source\_elasticsearch} what is this in docker file? why need this ? how does it… --- ## [Spark structured streaming Elasticsearch integration issue](https://discuss.elastic.co/t/spark-structured-streaming-elasticsearch-integration-issue/185366)
**Author:** [@Manishvsaraf](https://discuss.elastic.co/u/Manishvsaraf)\ **Replies:** 1\ **Last updated:** [June 13, 2019, 4:34pm UTC](https://discuss.elastic.co/t/spark-structured-streaming-elasticsearch-integration-issue/185366 "2019-06-13T16:34:29Z")
I am writing a Spark structured streaming application in which data processed with Spark needs be sink'ed to Elasticsearch. This is my development environment. Hadoop 2.6.0-cdh5.16.1 Spark version 2.3.0.cloudera4 ela… --- ## [Machile Learning - supervised learning](https://discuss.elastic.co/t/machile-learning-supervised-learning/185677)
**Author:** [@Adamos](https://discuss.elastic.co/u/Adamos)\ **Replies:** 1\ **Last updated:** [June 13, 2019, 3:15pm UTC](https://discuss.elastic.co/t/machile-learning-supervised-learning/185677 "2019-06-13T15:15:23Z")
Dear Sir/Madam, I have concerns related to a supervised learning using X-Pack ML. I didn't find any information confirming that the supervised learning is feasible. Is there any solution to train models using custom dat… --- ## [Limit hit count for a indice?](https://discuss.elastic.co/t/limit-hit-count-for-a-indice/185226)
**Author:** [@mstzn](https://discuss.elastic.co/u/mstzn)\ **Replies:** 5\ **Last updated:** [June 13, 2019, 2:53pm UTC](https://discuss.elastic.co/t/limit-hit-count-for-a-indice/185226 "2019-06-13T14:53:36Z")
I have two separate indices A and B. Both indices have same document structure. Let's say A contains 50 documents and B contains 5 documents. When i search over these indices with limit 20, resultSet should contains 17 … --- ## [Elastic search license cost](https://discuss.elastic.co/t/elastic-search-license-cost/185674)
**Author:** [@Rishi\_Singh](https://discuss.elastic.co/u/Rishi_Singh)\ **Replies:** 1\ **Last updated:** [June 13, 2019, 2:53pm UTC](https://discuss.elastic.co/t/elastic-search-license-cost/185674 "2019-06-13T14:53:34Z")
Can you please let me know monthly and yearly license cost of the Elastic search on premis and Azure cloud for a Corporate. Let me know support cost as well --- ## [How to track user actions (process list)?](https://discuss.elastic.co/t/how-to-track-user-actions-process-list/185008)
**Author:** [@111126](https://discuss.elastic.co/u/111126)\ **Replies:** 2\ **Last updated:** [June 13, 2019, 2:52pm UTC](https://discuss.elastic.co/t/how-to-track-user-actions-process-list/185008 "2019-06-13T14:52:47Z")
Hello How to track user activity by username? Understand what data users use? What requests are sent to the elastic? Looking for users who send large elastic requests? Search for specific queries that led to the failure… --- ## [Index Lifecycle Management configuration file setup](https://discuss.elastic.co/t/index-lifecycle-management-configuration-file-setup/185189)
**Author:** [@karl\_murray](https://discuss.elastic.co/u/karl_murray)\ **Replies:** 4\ **Last updated:** [June 13, 2019, 2:25pm UTC](https://discuss.elastic.co/t/index-lifecycle-management-configuration-file-setup/185189 "2019-06-13T14:25:05Z")
Hi, Currently have a set up on linux host, using 6.7.1 in the stack - elasticsearch, logstash, kibana, filebeat, metricbeat, etc. I'm trying to set this up for the data we currently have, and to management indexes yet … --- ## [6.4 to 6.7.1: MultiPolygon cannot be indexed anymore using new geo\_shape field](https://discuss.elastic.co/t/6-4-to-6-7-1-multipolygon-cannot-be-indexed-anymore-using-new-geo-shape-field/177480)
**Author:** [@timost](https://discuss.elastic.co/u/timost)\ **Replies:** 14\ **Last updated:** [June 13, 2019, 2:07pm UTC](https://discuss.elastic.co/t/6-4-to-6-7-1-multipolygon-cannot-be-indexed-anymore-using-new-geo-shape-field/177480 "2019-06-13T14:07:25Z")
Hi, I've migrated my clusters from ES 6.4 to ES 6.7.1. On these I have some indices which have some geo\_shape fields. The mappings were defined using the "old" geo\_shape parameters: { "location": { "type":… --- ## [Spring Data Elasticsearch](https://discuss.elastic.co/t/spring-data-elasticsearch/185660)
**Author:** [@fiifa](https://discuss.elastic.co/u/fiifa)\ **Replies:** 1\ **Last updated:** [June 13, 2019, 2:04pm UTC](https://discuss.elastic.co/t/spring-data-elasticsearch/185660 "2019-06-13T14:04:01Z")
I'm using Elasticsearch 7.1.0 and I want to create a spring-boot application and connect with elastic search using spring data elastic search. But I have not found a solution to use query and aggregation. HELP please --- ## [Regexp for Mac Addresses](https://discuss.elastic.co/t/regexp-for-mac-addresses/185622)
**Author:** [@thomas.heuberger](https://discuss.elastic.co/u/thomas.heuberger)\ **Replies:** 3\ **Last updated:** [June 13, 2019, 1:57pm UTC](https://discuss.elastic.co/t/regexp-for-mac-addresses/185622 "2019-06-13T13:57:14Z")
So, I have a keyword field (yes, type is keyword as well, not just the name) that I want to match against MAC addresses. The field contains just the MAC address and nothing else, so anchoring is not a problem. However,… --- ## [How to use term aggregation with search and pagination?](https://discuss.elastic.co/t/how-to-use-term-aggregation-with-search-and-pagination/185636)
**Author:** [@tushar\_chevulkar](https://discuss.elastic.co/u/tushar_chevulkar)\ **Replies:** 1\ **Last updated:** [June 13, 2019, 1:35pm UTC](https://discuss.elastic.co/t/how-to-use-term-aggregation-with-search-and-pagination/185636 "2019-06-13T13:35:17Z")
Is it possible to use pagination in term aggregation query with a search term? I need to paginate the result of the following query I am not able to find any solution ? { "sort": \[{ "create\_date": { "order": "de… --- ## [Elasticsearch startup error with 0.0.0.0](https://discuss.elastic.co/t/elasticsearch-startup-error-with-0-0-0-0/185635)
**Author:** [@Imrankhan\_Patan](https://discuss.elastic.co/u/Imrankhan_Patan)\ **Replies:** 3\ **Last updated:** [June 13, 2019, 1:27pm UTC](https://discuss.elastic.co/t/elasticsearch-startup-error-with-0-0-0-0/185635 "2019-06-13T13:27:18Z")
I am trying to set up single node elasticsearch on RHEL virtual machine. It is running fine with default configuration of 127.0.0.1, but its not available outside the VM. when I changed the network.host "0.0.0.0" its not… --- ## [All of indices change to ready](https://discuss.elastic.co/t/all-of-indices-change-to-ready/185649)
**Author:** [@wenchaodu](https://discuss.elastic.co/u/wenchaodu)\ **Replies:** 0\ **Last updated:** [June 13, 2019, 1:05pm UTC](https://discuss.elastic.co/t/all-of-indices-change-to-ready/185649 "2019-06-13T13:05:59Z")
Hi Team I had do nothing setting, but of indices change to ready, What happened cause this issue ? Please advise thanks [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1262) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1264)