# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1273

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1274

---

## [Unable to view the newly configured filebeat serer logs on kibana console](https://discuss.elastic.co/t/unable-to-view-the-newly-configured-filebeat-serer-logs-on-kibana-console/184408)

<div class="topic-metadata">

**Author:** [@anand\_raju](https://discuss.elastic.co/u/anand_raju)\
**Replies:** 0\
**Last updated:** [June 5, 2019, 3:15pm UTC](https://discuss.elastic.co/t/unable-to-view-the-newly-configured-filebeat-serer-logs-on-kibana-console/184408 "2019-06-05T15:15:11Z")

</div>

Have installed the filebeat on windows server and able to see a successful logs but, i cant view the logs on kibana console ( linux VM) Have verified the connection for windows to linux vm the port is opened able to do …

---

## [How to add new documents to an existing index](https://discuss.elastic.co/t/how-to-add-new-documents-to-an-existing-index/184260)

<div class="topic-metadata">

**Author:** [@jdemp0913](https://discuss.elastic.co/u/jdemp0913)\
**Replies:** 5\
**Last updated:** [June 5, 2019, 9:00pm UTC](https://discuss.elastic.co/t/how-to-add-new-documents-to-an-existing-index/184260 "2019-06-05T21:00:43Z")

</div>

What is the best way to add about 10,000 documents to an existing index each day. Or how can I merge to indexes? I am using the .net c# Nest client.

---

## [Injection for ActionPlugin](https://discuss.elastic.co/t/injection-for-actionplugin/184251)

<div class="topic-metadata">

**Author:** [@Chris\_H1](https://discuss.elastic.co/u/Chris_H1)\
**Replies:** 2\
**Last updated:** [June 5, 2019, 8:19pm UTC](https://discuss.elastic.co/t/injection-for-actionplugin/184251 "2019-06-05T20:19:26Z")

</div>

A plugin we use has stopped working after upgrading to 5.6 from 5.1. The plugin adds a RestHandler. Here is the old constructor for the RestHandler: public class TranslateAction implements RestHandler { private fina…

---

## [Premade dashboard/viz](https://discuss.elastic.co/t/premade-dashboard-viz/184056)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 3\
**Last updated:** [June 5, 2019, 8:15pm UTC](https://discuss.elastic.co/t/premade-dashboard-viz/184056 "2019-06-05T20:15:49Z")

</div>

Is there pre-made dashboard/viz like metricbeats for Rally? Once I run a test I have index created in Elasticsearch it would be good if there is something premade for it.

---

## [Ability to use function\_score with the value of a nested tag](https://discuss.elastic.co/t/ability-to-use-function-score-with-the-value-of-a-nested-tag/184434)

<div class="topic-metadata">

**Author:** [@stephenkiers](https://discuss.elastic.co/u/stephenkiers)\
**Replies:** 0\
**Last updated:** [June 5, 2019, 5:50pm UTC](https://discuss.elastic.co/t/ability-to-use-function-score-with-the-value-of-a-nested-tag/184434 "2019-06-05T17:50:01Z")

</div>

I have a index that looks like this stripped down example: { "elastic-demo": { "mappings": { "demo\_index": { "properties": { "id": { "type": "text", "index": false …

---

## [I can not find exact lucene version for elasticsearch 7.1.1](https://discuss.elastic.co/t/i-can-not-find-exact-lucene-version-for-elasticsearch-7-1-1/184443)

<div class="topic-metadata">

**Author:** [@begemoth](https://discuss.elastic.co/u/begemoth)\
**Replies:** 1\
**Last updated:** [June 5, 2019, 8:03pm UTC](https://discuss.elastic.co/t/i-can-not-find-exact-lucene-version-for-elasticsearch-7-1-1/184443 "2019-06-05T20:03:29Z")

</div>

Where does Elasticsearch 7.1.1 documentation specify the exact Lucene version ?

---

## [Sync mysql and elasticsearch without logstash](https://discuss.elastic.co/t/sync-mysql-and-elasticsearch-without-logstash/184445)

<div class="topic-metadata">

**Author:** [@john\_jay](https://discuss.elastic.co/u/john_jay)\
**Replies:** 2\
**Last updated:** [June 5, 2019, 8:01pm UTC](https://discuss.elastic.co/t/sync-mysql-and-elasticsearch-without-logstash/184445 "2019-06-05T20:01:01Z")

</div>

Hi! Is is possible to sync MySQL to Elasticsearch without using logstash or any kind of scripts? someone said to me elasticsearch supports it to do it without using any stuff? Is it right?if yes, How?

---

## [Finding duplication using sql api](https://discuss.elastic.co/t/finding-duplication-using-sql-api/184345)

<div class="topic-metadata">

**Author:** [@gurunga011](https://discuss.elastic.co/u/gurunga011)\
**Replies:** 0\
**Last updated:** [June 5, 2019, 11:43am UTC](https://discuss.elastic.co/t/finding-duplication-using-sql-api/184345 "2019-06-05T11:43:02Z")

</div>

I am trying to first see and count all of my duplicates in an index using sql api and if possible delete it. Looks like DISTINCT, COUNT is not working on my fields since all the fields has a type"text". COUNT Error: can…

---

## [How to share ClassLoader bewteen different Plugins](https://discuss.elastic.co/t/how-to-share-classloader-bewteen-different-plugins/181076)

<div class="topic-metadata">

**Author:** [@pazugan](https://discuss.elastic.co/u/pazugan)\
**Replies:** 6\
**Last updated:** [June 5, 2019, 6:51pm UTC](https://discuss.elastic.co/t/how-to-share-classloader-bewteen-different-plugins/181076 "2019-06-05T18:51:17Z")

</div>

Hi, I am trying develop Elatsicsearch plugins and currently facing some issue as how to share single request model and allow one plugin to accept the request in the TransportAction from other plugin. Error I message I …

---

## [Creation\_date](https://discuss.elastic.co/t/creation-date/184440)

<div class="topic-metadata">

**Author:** [@Chris\_Denneen](https://discuss.elastic.co/u/Chris_Denneen)\
**Replies:** 0\
**Last updated:** [June 5, 2019, 6:35pm UTC](https://discuss.elastic.co/t/creation-date/184440 "2019-06-05T18:35:43Z")

</div>

In Elastic \< 5.x you could create an index and provide a creation\_date. https://www.elastic.co/guide/en/elasticsearch/reference/2.3/indices-create-index.html#\_creation\_date This is no longer an option it appears in \>=5…

---

## [How to aggregate data with type of long and add a string after each data record?](https://discuss.elastic.co/t/how-to-aggregate-data-with-type-of-long-and-add-a-string-after-each-data-record/184439)

<div class="topic-metadata">

**Author:** [@vschaefer](https://discuss.elastic.co/u/vschaefer)\
**Replies:** 0\
**Last updated:** [June 5, 2019, 6:22pm UTC](https://discuss.elastic.co/t/how-to-aggregate-data-with-type-of-long-and-add-a-string-after-each-data-record/184439 "2019-06-05T18:22:02Z")

</div>

I want to aggregate the data with the following query and add a string after each data record GET /artikeldaten\_de/\_search { "size": 0, "aggs": { "leuchtenstrom": { "terms": { "field": "u\_leuchten…

---

## [Elasticsearch 7.1.1 Failed to create native process factories for Machine Learning](https://discuss.elastic.co/t/elasticsearch-7-1-1-failed-to-create-native-process-factories-for-machine-learning/184006)

<div class="topic-metadata">

**Author:** [@Cadu\_Alves](https://discuss.elastic.co/u/Cadu_Alves)\
**Replies:** 7\
**Last updated:** [June 5, 2019, 6:08pm UTC](https://discuss.elastic.co/t/elasticsearch-7-1-1-failed-to-create-native-process-factories-for-machine-learning/184006 "2019-06-05T18:08:07Z")

</div>

Hi, I am trying to run the service from elastichsearch, when I start the service it runs for a few seconds and then it returns error, seeing the execution logs of elasticsearch I noticed the following error. And I …

---

## [How do I upload a SAML bundle into Elastic Cloud](https://discuss.elastic.co/t/how-do-i-upload-a-saml-bundle-into-elastic-cloud/184437)

<div class="topic-metadata">

**Author:** [@erickjordan](https://discuss.elastic.co/u/erickjordan)\
**Replies:** 0\
**Last updated:** [June 5, 2019, 6:01pm UTC](https://discuss.elastic.co/t/how-do-i-upload-a-saml-bundle-into-elastic-cloud/184437 "2019-06-05T18:01:46Z")

</div>

Hello I'm trying to setup SAML and need to sign logout messages per IDP requirements. This requires generating a signing key and self signed certificate. I have read this documentation: https://www.elastic.co/guide/en…

---

## [Unable to read 'synonym' file while creating index](https://discuss.elastic.co/t/unable-to-read-synonym-file-while-creating-index/183596)

<div class="topic-metadata">

**Author:** [@gauresh\_chavan](https://discuss.elastic.co/u/gauresh_chavan)\
**Replies:** 5\
**Last updated:** [June 5, 2019, 3:56pm UTC](https://discuss.elastic.co/t/unable-to-read-synonym-file-while-creating-index/183596 "2019-06-05T15:56:14Z")

</div>

I am trying to build a synonym dictionary and write it to an index. Index is being created in the following way: PUT /test\_index { "settings": { "index" : { "analysis" : { "filter…

---

## [Error \[Manticore::ResolutionFailure\] elasticsearch: Name or service not known"} at docker-compose](https://discuss.elastic.co/t/error-manticore-resolutionfailure-elasticsearch-name-or-service-not-known-at-docker-compose/184384)

<div class="topic-metadata">

**Author:** [@freelanseod](https://discuss.elastic.co/u/freelanseod)\
**Replies:** 2\
**Last updated:** [June 5, 2019, 3:53pm UTC](https://discuss.elastic.co/t/error-manticore-resolutionfailure-elasticsearch-name-or-service-not-known-at-docker-compose/184384 "2019-06-05T15:53:11Z")

</div>

Hello to everyone! Can anyone help with this? \[WARN \]\[logstash.outputs.elasticsearch\] Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"http://localhost:9200/", :error\_type=\>LogStash::Out…

---

## [Painless - access non-analyzed version of analyzed text field](https://discuss.elastic.co/t/painless-access-non-analyzed-version-of-analyzed-text-field/183863)

<div class="topic-metadata">

**Author:** [@Eran\_H](https://discuss.elastic.co/u/Eran_H)\
**Replies:** 2\
**Last updated:** [June 5, 2019, 3:29pm UTC](https://discuss.elastic.co/t/painless-access-non-analyzed-version-of-analyzed-text-field/183863 "2019-06-05T15:29:53Z")

</div>

For every analyzed text field, ES creates by default a non-analyzed version for a text field under the name keyword. We should be able to use it, however doc\["text\_field.keyword"\].value doesn't work in painless. It thr…

---

## [Elasticsearch and workload](https://discuss.elastic.co/t/elasticsearch-and-workload/184411)

<div class="topic-metadata">

**Author:** [@dstromberg](https://discuss.elastic.co/u/dstromberg)\
**Replies:** 0\
**Last updated:** [June 5, 2019, 3:29pm UTC](https://discuss.elastic.co/t/elasticsearch-and-workload/184411 "2019-06-05T15:29:44Z")

</div>

Hi folks. We're thinking about having all our logs go to Elasticsearch: One document per log entry. How should we expect Elasticsearch to perform at about 10\*\*9 small documents of about 150 characters each, across abou…

---

## [The third node cannot join the cluster (ES-7.1.0)](https://discuss.elastic.co/t/the-third-node-cannot-join-the-cluster-es-7-1-0/183660)

<div class="topic-metadata">

**Author:** [@ellison001](https://discuss.elastic.co/u/ellison001)\
**Replies:** 8\
**Last updated:** [June 5, 2019, 2:49pm UTC](https://discuss.elastic.co/t/the-third-node-cannot-join-the-cluster-es-7-1-0/183660 "2019-06-05T14:49:55Z")

</div>

Hi, I am using the ES 7.1.0 with below config. The second node can join the cluster successfully, but when I start to the third node, it failed to join the cluster due to below error. \`--- cluster.name: dev-elasticsea…

---

## [Separate clauses while index in elastic search with FScrawler](https://discuss.elastic.co/t/separate-clauses-while-index-in-elastic-search-with-fscrawler/184333)

<div class="topic-metadata">

**Author:** [@masume](https://discuss.elastic.co/u/masume)\
**Replies:** 6\
**Last updated:** [June 5, 2019, 2:04pm UTC](https://discuss.elastic.co/t/separate-clauses-while-index-in-elastic-search-with-fscrawler/184333 "2019-06-05T14:04:03Z")

</div>

Hi All, I indexed a pdf file in elastic search with fscrawler (elastic version 7.1) in kibana every thing is ok and I can see the index but the problem is all pdf file index as one content filed and when i search the…

---

## [Bulk api and loading roles/users](https://discuss.elastic.co/t/bulk-api-and-loading-roles-users/184375)

<div class="topic-metadata">

**Author:** [@mikeq](https://discuss.elastic.co/u/mikeq)\
**Replies:** 0\
**Last updated:** [June 5, 2019, 2:02pm UTC](https://discuss.elastic.co/t/bulk-api-and-loading-roles-users/184375 "2019-06-05T14:02:29Z")

</div>

Can you use the bulk api to load a number of roles and users? Have tried a few things but can't get it working and not much info in the securing ES or the bulk documentation. Just need to know if possible or not so I c…

---

## [Defining IDs and routing keys for documents in custom workloads in Rally](https://discuss.elastic.co/t/defining-ids-and-routing-keys-for-documents-in-custom-workloads-in-rally/184186)

<div class="topic-metadata">

**Author:** [@luisrpp](https://discuss.elastic.co/u/luisrpp)\
**Replies:** 3\
**Last updated:** [June 5, 2019, 1:57pm UTC](https://discuss.elastic.co/t/defining-ids-and-routing-keys-for-documents-in-custom-workloads-in-rally/184186 "2019-06-05T13:57:41Z")

</div>

Hi, It seems that there was a way to create a custom track with an index operation to load documents in ES with custom IDs and routing keys, as described in the following post: As this is not valid for rally's curren…

---

## [Elasticsearch/Kibana Unknown Deployment](https://discuss.elastic.co/t/elasticsearch-kibana-unknown-deployment/180697)

<div class="topic-metadata">

**Author:** [@max17](https://discuss.elastic.co/u/max17)\
**Replies:** 1\
**Last updated:** [June 5, 2019, 1:34pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-unknown-deployment/180697 "2019-06-05T13:34:00Z")

</div>

Hi, I am using elasticsearch cloud and I've been provided a long URL of kibana i.e. - https://5e765d3c21d84e8f8d6bd362d8bf6564.us-central1.gcp.cloud.es.io:9243 I have configured the DNS routing in my GCP cloudDNS for …

---

## [Docs out of interval](https://discuss.elastic.co/t/docs-out-of-interval/184365)

<div class="topic-metadata">

**Author:** [@Cooky](https://discuss.elastic.co/u/Cooky)\
**Replies:** 0\
**Last updated:** [June 5, 2019, 1:24pm UTC](https://discuss.elastic.co/t/docs-out-of-interval/184365 "2019-06-05T13:24:56Z")

</div>

Hi my elasticsearch is running on a windows server 2016 (version 7.0) incl. kibana and logstash Currently i visualized the memory usage some processes by different uses. The processes are running on CentOS and i am usi…

---

## [Elasticsearch 7.1.1 not forming a cluster using EC2 auto discovery plugin](https://discuss.elastic.co/t/elasticsearch-7-1-1-not-forming-a-cluster-using-ec2-auto-discovery-plugin/184199)

<div class="topic-metadata">

**Author:** [@Pat\_Humphreys](https://discuss.elastic.co/u/Pat_Humphreys)\
**Replies:** 5\
**Last updated:** [June 5, 2019, 12:43pm UTC](https://discuss.elastic.co/t/elasticsearch-7-1-1-not-forming-a-cluster-using-ec2-auto-discovery-plugin/184199 "2019-06-05T12:43:32Z")

</div>

I have a 3 node cluster which I have setup in AWS using the AWS EC2 discovery plugin, each of the nodes can communicate with each other and autodiscovery finds the other nodes, but they dont form a cluster. I am using a …

---

## [Elasticsearch query\_string - getting more accurate score](https://discuss.elastic.co/t/elasticsearch-query-string-getting-more-accurate-score/184357)

<div class="topic-metadata">

**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\
**Replies:** 0\
**Last updated:** [June 5, 2019, 12:38pm UTC](https://discuss.elastic.co/t/elasticsearch-query-string-getting-more-accurate-score/184357 "2019-06-05T12:38:16Z")

</div>

I would like to get the higher score as I will get closer to the 1:1 match with for what I am querying it. For example: I query for: s3-us-west-1.amazonaws.com Destination document contains: s3-us-west-1.amazonaws.com…

---

## [Newbie question about adding data files to elasticsearch](https://discuss.elastic.co/t/newbie-question-about-adding-data-files-to-elasticsearch/184354)

<div class="topic-metadata">

**Author:** [@KathyTheGreat](https://discuss.elastic.co/u/KathyTheGreat)\
**Replies:** 0\
**Last updated:** [June 5, 2019, 12:20pm UTC](https://discuss.elastic.co/t/newbie-question-about-adding-data-files-to-elasticsearch/184354 "2019-06-05T12:20:41Z")

</div>

I am trying to import tab delimited log files into elasticsearch. I will be using some kind of powershell to move the files to the server where elasticsearch is installed. I already have created the mapping and an index.…

---

## [Ingest-attachment can't recognize content type for text encoded in win-1251](https://discuss.elastic.co/t/ingest-attachment-cant-recognize-content-type-for-text-encoded-in-win-1251/183538)

<div class="topic-metadata">

**Author:** [@aledyad](https://discuss.elastic.co/u/aledyad)\
**Replies:** 1\
**Last updated:** [June 5, 2019, 12:15pm UTC](https://discuss.elastic.co/t/ingest-attachment-cant-recognize-content-type-for-text-encoded-in-win-1251/183538 "2019-06-05T12:15:30Z")

</div>

Hi. Use ES 6.7.2 with ingest-attachment plugin. I have text files (\*.txt) in win-1251 encoding with russian chars. After put binary data to index, documents in index have no source, because ingest processor dont recogn…

---

## [AutoMap with different indices](https://discuss.elastic.co/t/automap-with-different-indices/184344)

<div class="topic-metadata">

**Author:** [@jpeg729](https://discuss.elastic.co/u/jpeg729)\
**Replies:** 0\
**Last updated:** [June 5, 2019, 11:41am UTC](https://discuss.elastic.co/t/automap-with-different-indices/184344 "2019-06-05T11:41:53Z")

</div>

Hi everyone, we have a largish database setup using EntityFramework with many entities linked to each other in many different ways. We have four different indices that present four different views of this data. For eac…

---

## [Inserting data to Elasticsearch - Retrying failed action with response code: 429 - circuit\_breaking\_exception - Data too large](https://discuss.elastic.co/t/inserting-data-to-elasticsearch-retrying-failed-action-with-response-code-429-circuit-breaking-exception-data-too-large/183939)

<div class="topic-metadata">

**Author:** [@white\_rabbit](https://discuss.elastic.co/u/white_rabbit)\
**Replies:** 7\
**Last updated:** [June 5, 2019, 11:01am UTC](https://discuss.elastic.co/t/inserting-data-to-elasticsearch-retrying-failed-action-with-response-code-429-circuit-breaking-exception-data-too-large/183939 "2019-06-05T11:01:15Z")

</div>

I try to insert data to Elasticsearch both using Logstash and Bulk API from Helpers in Python. Do you have any ideas why I get the error shown below? I tried to change indices.breaker.request.limit to 80% and I have set L…

---

## [Wildcard query with '?' does not work with Snapshot](https://discuss.elastic.co/t/wildcard-query-with-does-not-work-with-snapshot/184329)

<div class="topic-metadata">

**Author:** [@kokidinivi](https://discuss.elastic.co/u/kokidinivi)\
**Replies:** 0\
**Last updated:** [June 5, 2019, 10:30am UTC](https://discuss.elastic.co/t/wildcard-query-with-does-not-work-with-snapshot/184329 "2019-06-05T10:30:58Z")

</div>

This is the actual query: \`curl -X PUT "localhost:9200/\_snapshot/backup\_test/test\_0?wait\_for\_completion=true" -H 'Content-Type: application/json' -d' { "indices": "graylog2\_?", "ignore\_unavailable": true, "include…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1272)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1274)
