# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1276 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1277 --- ## [VM warning occared when elasticsearch start](https://discuss.elastic.co/t/vm-warning-occared-when-elasticsearch-start/184091)
**Author:** [@riverstack\_ma](https://discuss.elastic.co/u/riverstack_ma)\ **Replies:** 0\ **Last updated:** [June 4, 2019, 5:33am UTC](https://discuss.elastic.co/t/vm-warning-occared-when-elasticsearch-start/184091 "2019-06-04T05:33:59Z")
I try to make ELK. but elasticsearch is not work. (of course, i can\`t ^^; ) it is using s/w version. and H/W is vm (citrix) OS : Windows Server 2012 R2 elasticsearch : 7.0.0 jvm : 1.8.0\_211 when start elasticsearch,… --- ## [Having issues installing ElasticSearch](https://discuss.elastic.co/t/having-issues-installing-elasticsearch/184061)
**Author:** [@Amazing](https://discuss.elastic.co/u/Amazing)\ **Replies:** 20\ **Last updated:** [June 4, 2019, 5:21am UTC](https://discuss.elastic.co/t/having-issues-installing-elasticsearch/184061 "2019-06-04T05:21:40Z")
I had 6x installed and something went wrong and it stopped working after it had been fine for months so I decided to go ahead and remove the 6x version and do a fresh install of 7.1.1. But so far I have not been able to … --- ## [Please explain how to perform a bulk update with partials using UpdateMany](https://discuss.elastic.co/t/please-explain-how-to-perform-a-bulk-update-with-partials-using-updatemany/183873)
**Author:** [@mFriemann](https://discuss.elastic.co/u/mFriemann)\ **Replies:** 3\ **Last updated:** [June 4, 2019, 1:20am UTC](https://discuss.elastic.co/t/please-explain-how-to-perform-a-bulk-update-with-partials-using-updatemany/183873 "2019-06-04T01:20:41Z")
I am really surprised by the lack of documentation for the NEST client. I am using NEST 6.6.0. I have an array of partial documents (anonymous objects) -- each includes an id field and the fields that I want to update. … --- ## [Highlights in nested list (NEST client)](https://discuss.elastic.co/t/highlights-in-nested-list-nest-client/184054)
**Author:** [@bo.clifton](https://discuss.elastic.co/u/bo.clifton)\ **Replies:** 0\ **Last updated:** [June 3, 2019, 8:40pm UTC](https://discuss.elastic.co/t/highlights-in-nested-list-nest-client/184054 "2019-06-03T20:40:31Z")
I'm working with a large index of emails (using the Enron dataset here for testing). I’ve got highlights working in the Subject line of the email, but I’m also wanting to display highlights in custodian names (nested pr… --- ## [Composite and excluding results](https://discuss.elastic.co/t/composite-and-excluding-results/184042)
**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\ **Replies:** 1\ **Last updated:** [June 3, 2019, 7:36pm UTC](https://discuss.elastic.co/t/composite-and-excluding-results/184042 "2019-06-03T19:36:37Z")
Is there any way to exclude something when running a composite? trying to get all my Src\_IP addresses from all my sources except from one and I am trying to exclude that. Any recommendations? I can't use a quarry or I… --- ## [Good mapping for recursively nested documents](https://discuss.elastic.co/t/good-mapping-for-recursively-nested-documents/184043)
**Author:** [@flow](https://discuss.elastic.co/u/flow)\ **Replies:** 0\ **Last updated:** [June 3, 2019, 7:28pm UTC](https://discuss.elastic.co/t/good-mapping-for-recursively-nested-documents/184043 "2019-06-03T19:28:04Z")
Hello all, I need advice to find a good design for my documents. The data I want to ingest comes from a big, recursively nested XML file (I could translate it into JSON fwiw) which looks similar to this: \ \ **Author:** [@drivera](https://discuss.elastic.co/u/drivera)\ **Replies:** 3\ **Last updated:** [June 3, 2019, 7:13pm UTC](https://discuss.elastic.co/t/elasticsearch-yml-and-keystore-examples/183185 "2019-06-03T19:13:53Z") Does anyone have an example of how to call the keystore password from the yml file? I'm clear on how to create the keystore from the link below, but unsure how to call the password from inside the elasticsearch.yml file… --- ## [Help in Creating a Cluster](https://discuss.elastic.co/t/help-in-creating-a-cluster/183784)
**Author:** [@ryh](https://discuss.elastic.co/u/ryh)\ **Replies:** 4\ **Last updated:** [June 3, 2019, 6:49pm UTC](https://discuss.elastic.co/t/help-in-creating-a-cluster/183784 "2019-06-03T18:49:59Z")
Hi All, I'm trying to create an elasticsearch cluster but wasn't sure how to go about it. Here's a brief overview of our stack. SERVER 1 - runs a python app with elasticsearch in the background SERVER 2 - ELK stack W… --- ## [ElasticSearch Cluster JVM Heap Increasing level while doing Queries and Writting](https://discuss.elastic.co/t/elasticsearch-cluster-jvm-heap-increasing-level-while-doing-queries-and-writting/183772)
**Author:** [@matheusribeirogarcia](https://discuss.elastic.co/u/matheusribeirogarcia)\ **Replies:** 3\ **Last updated:** [June 3, 2019, 6:30pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-jvm-heap-increasing-level-while-doing-queries-and-writting/183772 "2019-06-03T18:30:24Z")
Hello, I have three Indexes, one have 11 million documents, I need to do 35.000 searches in that index. Is there a way to that and not increase my JVM Heap to the point where elastic fails? I'm using the Scroll API, and… --- ## [Index management error: "Index is not the write index for alias"](https://discuss.elastic.co/t/index-management-error-index-is-not-the-write-index-for-alias/180894)
**Author:** [@bartong](https://discuss.elastic.co/u/bartong)\ **Replies:** 3\ **Last updated:** [June 3, 2019, 6:04pm UTC](https://discuss.elastic.co/t/index-management-error-index-is-not-the-write-index-for-alias/180894 "2019-06-03T18:04:39Z")
Hello all, While trying to configure Index Lifecycle Policies for my first time, I've encountered an error that I can't resolve. Context: ELK stack v7.0.1 Single-node cluster All indexes were automatically created by… --- ## [Index not rolling over](https://discuss.elastic.co/t/index-not-rolling-over/183603)
**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\ **Replies:** 4\ **Last updated:** [June 3, 2019, 5:50pm UTC](https://discuss.elastic.co/t/index-not-rolling-over/183603 "2019-06-03T17:50:01Z")
Hi I performed below steps as per https://github.com/elastic/kibana/issues/27967 Index rolls over only once but not after that. I have logstash setup with ilm settings as below ilm\_enabled =\> true ilm\_rollover\_alias… --- ## [Confused on bool queries results](https://discuss.elastic.co/t/confused-on-bool-queries-results/184029)
**Author:** [@b179d8020cf9d624abb2](https://discuss.elastic.co/u/b179d8020cf9d624abb2)\ **Replies:** 0\ **Last updated:** [June 3, 2019, 5:15pm UTC](https://discuss.elastic.co/t/confused-on-bool-queries-results/184029 "2019-06-03T17:15:23Z")
The following two queries gives me different results when some documents has missing fields: Query1, SELECT \* FROM table WHERE colE \<= 9 OR colD \>= 6 { "query": { "bool": { "should": \[ { "… --- ## [Use of \_version, \_primary\_term, \_seq\_no in APIS](https://discuss.elastic.co/t/use-of-version-primary-term-seq-no-in-apis/183972)
**Author:** [@vptech20nn](https://discuss.elastic.co/u/vptech20nn)\ **Replies:** 2\ **Last updated:** [June 3, 2019, 5:12pm UTC](https://discuss.elastic.co/t/use-of-version-primary-term-seq-no-in-apis/183972 "2019-06-03T17:12:10Z")
It appears \_version should not be used at all by REST API clients, as it not guaranteed to be unique. Can \_seq\_no, \_primary\_term be represented as single number to to clients of APIs ? Having to to work with 2 numbers o… --- ## [Getting "master not discovered or elected yet" causing cluster not up in version 7.1.0](https://discuss.elastic.co/t/getting-master-not-discovered-or-elected-yet-causing-cluster-not-up-in-version-7-1-0/182489)
**Author:** [@niudaye123](https://discuss.elastic.co/u/niudaye123)\ **Replies:** 27\ **Last updated:** [June 3, 2019, 4:46pm UTC](https://discuss.elastic.co/t/getting-master-not-discovered-or-elected-yet-causing-cluster-not-up-in-version-7-1-0/182489 "2019-06-03T16:46:34Z")
Hi, I am building a 6 nodes cluster, node 1-3 master nodes, and node 4-6 data nodes. I have the following in elasticsearch.yml on each node: bootstrap.memory\_lock: false cluster.initial\_master\_nodes: awselsdevlap01.e… --- ## [How does elastic search move shards from hot to warm/warm to hot nodes?](https://discuss.elastic.co/t/how-does-elastic-search-move-shards-from-hot-to-warm-warm-to-hot-nodes/183005)
**Author:** [@haps\_01](https://discuss.elastic.co/u/haps_01)\ **Replies:** 9\ **Last updated:** [June 3, 2019, 4:43pm UTC](https://discuss.elastic.co/t/how-does-elastic-search-move-shards-from-hot-to-warm-warm-to-hot-nodes/183005 "2019-06-03T16:43:11Z")
Hi, I wonder, how does shard relocation happens from hot to warm nodes. I have test cluster with 2 hot, 4 warm, 2 master,1 client node. I am using multiple indices with different shard combinations(1,2,4,8,16 shards) t… --- ## [Index lifecycle management for existing indices?](https://discuss.elastic.co/t/index-lifecycle-management-for-existing-indices/181749)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 4\ **Last updated:** [June 3, 2019, 4:41pm UTC](https://discuss.elastic.co/t/index-lifecycle-management-for-existing-indices/181749 "2019-06-03T16:41:44Z")
Hi all, I am currently checking out the index lifecycle management in 6.6.2. As I understand the docs I can add a policy to an index at index creation or indirectly by an index template. How can I add / update to an … --- ## [Elasticsearch service console error](https://discuss.elastic.co/t/elasticsearch-service-console-error/183703)
**Author:** [@ajayraghuraj](https://discuss.elastic.co/u/ajayraghuraj)\ **Replies:** 1\ **Last updated:** [June 3, 2019, 4:29pm UTC](https://discuss.elastic.co/t/elasticsearch-service-console-error/183703 "2019-06-03T16:29:45Z")
I am receiving an error like "'xpack.security.authc.realms.cloud-saml.type': is not allowed" after editing the "user settings" on the elasticsearch service console Do I need to enable something prior to entering the se… --- ## [Analyzer processing when indexing and searching](https://discuss.elastic.co/t/analyzer-processing-when-indexing-and-searching/183028)
**Author:** [@ludehon](https://discuss.elastic.co/u/ludehon)\ **Replies:** 9\ **Last updated:** [June 3, 2019, 4:26pm UTC](https://discuss.elastic.co/t/analyzer-processing-when-indexing-and-searching/183028 "2019-06-03T16:26:07Z")
Hello, I am using the Elastic Python API and having difficulties to process a document through analyzer. My goal is to process the content of ingest's document with analyzer, but I cannot achieve any result with a regula… --- ## [GeoShape query with Java High Level Rest Client fails](https://discuss.elastic.co/t/geoshape-query-with-java-high-level-rest-client-fails/183396)
**Author:** [@Ganesh\_Kudva](https://discuss.elastic.co/u/Ganesh_Kudva)\ **Replies:** 2\ **Last updated:** [June 3, 2019, 3:57pm UTC](https://discuss.elastic.co/t/geoshape-query-with-java-high-level-rest-client-fails/183396 "2019-06-03T15:57:14Z")
I have the following mapping in AWS Elasticsearch index "Location": { "type": "geo\_shape", "tree": "quadtree" } The following geo\_shape query works perfectly fine on my Kibana console GET test/doc/\_search { … --- ## [ElasticSearch fail to start with error java.lang.NullPointerException](https://discuss.elastic.co/t/elasticsearch-fail-to-start-with-error-java-lang-nullpointerexception/184017)
**Author:** [@Balaji](https://discuss.elastic.co/u/Balaji)\ **Replies:** 0\ **Last updated:** [June 3, 2019, 3:35pm UTC](https://discuss.elastic.co/t/elasticsearch-fail-to-start-with-error-java-lang-nullpointerexception/184017 "2019-06-03T15:35:12Z")
Hi, I have downloaded ElasticSearch 7.0 tar file and installed (by untar-ing) on RHEL v7.5. When I start by ./bin/elasticsearch I get NullPointerException. I pointed my Java home to the JDK that is shipped with Elastics… --- ## [Monitoring Cluster Sizing Advice](https://discuss.elastic.co/t/monitoring-cluster-sizing-advice/184015)
**Author:** [@claudiordgz](https://discuss.elastic.co/u/claudiordgz)\ **Replies:** 0\ **Last updated:** [June 3, 2019, 3:33pm UTC](https://discuss.elastic.co/t/monitoring-cluster-sizing-advice/184015 "2019-06-03T15:33:49Z")
I haven't found any advice on how to size a monitoring cluster for my production cluster. Right now I'm doing it empirically and monitoring the performance and scaling up when needed. Is there any blog post or guide on w… --- ## [Upgrade from basic to gold](https://discuss.elastic.co/t/upgrade-from-basic-to-gold/183762)
**Author:** [@Fedele\_Mantuano](https://discuss.elastic.co/u/Fedele_Mantuano)\ **Replies:** 3\ **Last updated:** [June 3, 2019, 3:29pm UTC](https://discuss.elastic.co/t/upgrade-from-basic-to-gold/183762 "2019-06-03T15:29:50Z")
Hi community, I have an Elastic cluster version 6.7.0: 6 elastic nodes 2 logstash nodes 3 kibana nodes We enabled basic license without security module. All cluster is installed with ansible. Now we bought gold lice… --- ## [Invoke-restmethod: unable to connect to remote server](https://discuss.elastic.co/t/invoke-restmethod-unable-to-connect-to-remote-server/184011)
**Author:** [@ap412](https://discuss.elastic.co/u/ap412)\ **Replies:** 0\ **Last updated:** [June 3, 2019, 3:22pm UTC](https://discuss.elastic.co/t/invoke-restmethod-unable-to-connect-to-remote-server/184011 "2019-06-03T15:22:46Z")
Hi, I've installed Elasticsearch 7.1.1 using the .msi package. When I open localhost:9200 it gives me " This site can’t be reached xxx.xxx.xxx.xxx refused to connect. I also opened powershell and typed in: "invoke-res… --- ## [\[Solved\] Cannot start ES 7.0.1 on Fedora 30 unless "xpack.ml.enabled: false" is set](https://discuss.elastic.co/t/solved-cannot-start-es-7-0-1-on-fedora-30-unless-xpack-ml-enabled-false-is-set/179693)
**Author:** [@Damian\_Jimenez](https://discuss.elastic.co/u/Damian_Jimenez)\ **Replies:** 5\ **Last updated:** [June 3, 2019, 1:34pm UTC](https://discuss.elastic.co/t/solved-cannot-start-es-7-0-1-on-fedora-30-unless-xpack-ml-enabled-false-is-set/179693 "2019-06-03T13:34:03Z")
Solution: The solution was to install libxcrypt-compat (sudo dnf install libxcrypt-compat) as pointed out in the thread below. After installing that no further custom configuration was necessary and the service started w… --- ## [Machine Learning module is triggering alerts when there is no anomaly](https://discuss.elastic.co/t/machine-learning-module-is-triggering-alerts-when-there-is-no-anomaly/178974)
**Author:** [@Josh\_A](https://discuss.elastic.co/u/Josh_A)\ **Replies:** 26\ **Last updated:** [June 3, 2019, 1:28pm UTC](https://discuss.elastic.co/t/machine-learning-module-is-triggering-alerts-when-there-is-no-anomaly/178974 "2019-06-03T13:28:25Z")
We are using the Machine Learning module to identify an unusual rate of firewall logs by host and by severity (e.g., warning, informational, error). We keep receiving Watch alerts that look like this: But when we cli… --- ## [Elasticsearch and a complex relationship](https://discuss.elastic.co/t/elasticsearch-and-a-complex-relationship/179625)
**Author:** [@hiroshi](https://discuss.elastic.co/u/hiroshi)\ **Replies:** 2\ **Last updated:** [May 6, 2019, 1:26pm UTC](https://discuss.elastic.co/t/elasticsearch-and-a-complex-relationship/179625 "2019-05-06T13:26:01Z")
For design reasons, the relationship between my entities is as follows: Having entities A, B, C and AB where AB is the relationship many to many. I want to index the values of the entity C that has a many to many relatio… --- ## [TLS Certificate Issue on Elastic cluster](https://discuss.elastic.co/t/tls-certificate-issue-on-elastic-cluster/183303)
**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\ **Replies:** 12\ **Last updated:** [June 3, 2019, 12:30pm UTC](https://discuss.elastic.co/t/tls-certificate-issue-on-elastic-cluster/183303 "2019-06-03T12:30:43Z")
Hi, We are trying to form two node ELK 6.8.0 cluster using procedure mentioned in the following link. https://www.elastic.co/guide/en/elasticsearch/reference/6.8/configuring-tls.html#node-certificates Generated certi… --- ## [Elasticsearch 7.1 Installation issues](https://discuss.elastic.co/t/elasticsearch-7-1-installation-issues/183714)
**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\ **Replies:** 6\ **Last updated:** [June 3, 2019, 12:24pm UTC](https://discuss.elastic.co/t/elasticsearch-7-1-installation-issues/183714 "2019-06-03T12:24:27Z")
Hi I Installed install java-1.8.0-openjdk java-1.8.0-openjdk-devel and installed Elasticsearch 7.1 when I start elasticsearch with default configuration I mean elasticsearch.yml and jvm.options I can verify elasticsearc… --- ## [How is webhook used in elasticsearch , and how is logstash used for webhook](https://discuss.elastic.co/t/how-is-webhook-used-in-elasticsearch-and-how-is-logstash-used-for-webhook/183291)
**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\ **Replies:** 3\ **Last updated:** [June 3, 2019, 12:07pm UTC](https://discuss.elastic.co/t/how-is-webhook-used-in-elasticsearch-and-how-is-logstash-used-for-webhook/183291 "2019-06-03T12:07:41Z")
Please help.. --- ## [DSL query match doesnt work](https://discuss.elastic.co/t/dsl-query-match-doesnt-work/183207)
**Author:** [@madhan\_dc](https://discuss.elastic.co/u/madhan_dc)\ **Replies:** 3\ **Last updated:** [June 3, 2019, 12:06pm UTC](https://discuss.elastic.co/t/dsl-query-match-doesnt-work/183207 "2019-06-03T12:06:03Z")
GET /qstats\_index/\_search { "query": { "match": { "queue\_name": "SYSTEM" } doesnt match even though there are documents out there "hits" : \[ { "\_index" : "qstats\_index", "\_type" : "qstats", "\_id" … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1275) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1277)