# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1284 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1285 --- ## [Watcher advanced](https://discuss.elastic.co/t/watcher-advanced/182352)
**Author:** [@AndreasJA](https://discuss.elastic.co/u/AndreasJA)\ **Replies:** 2\ **Last updated:** [May 28, 2019, 8:45am UTC](https://discuss.elastic.co/t/watcher-advanced/182352 "2019-05-28T08:45:21Z")
Hello to all, i want to use the watcher advanced but i am struggling with the syntax. For example i want to see if there is any traffic on a specific port from a specific host. The syntax itself should be right, but i … --- ## [How can you remove node ID form cluster?](https://discuss.elastic.co/t/how-can-you-remove-node-id-form-cluster/182646)
**Author:** [@Theoooooo](https://discuss.elastic.co/u/Theoooooo)\ **Replies:** 3\ **Last updated:** [May 28, 2019, 7:58am UTC](https://discuss.elastic.co/t/how-can-you-remove-node-id-form-cluster/182646 "2019-05-28T07:58:57Z")
Hello Everyone, i'm in a situation i've never seen anywhere else and i really need you help on this one. I decomissioned a master eligible node while following the guide : https://www.elastic.co/guide/en/elasticsearch/… --- ## [When elasticsearch6.8.1 will be released?](https://discuss.elastic.co/t/when-elasticsearch6-8-1-will-be-released/183001)
**Author:** [@sunweiconfidence](https://discuss.elastic.co/u/sunweiconfidence)\ **Replies:** 2\ **Last updated:** [May 28, 2019, 7:51am UTC](https://discuss.elastic.co/t/when-elasticsearch6-8-1-will-be-released/183001 "2019-05-28T07:51:23Z")
elasticsearch6.8.0 release several days ago, but according to product release usual practice, this is belong to an alpha version for elasticsearch6.8, am i right? if it is right, when elasticsearch6.8.1 will be release? … --- ## [Elasticsearch not working due to flood stage disk watermark \[95%\] exceeded on](https://discuss.elastic.co/t/elasticsearch-not-working-due-to-flood-stage-disk-watermark-95-exceeded-on/183000)
**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\ **Replies:** 1\ **Last updated:** [May 28, 2019, 7:49am UTC](https://discuss.elastic.co/t/elasticsearch-not-working-due-to-flood-stage-disk-watermark-95-exceeded-on/183000 "2019-05-28T07:49:35Z")
Hi , I have installed elasticsearch version 6.6.7. \[2019-05-28T12:28:36,597\]\[WARN \]\[o.e.c.r.a.DiskThresholdMonitor\] \[node-1\] flood stage disk watermark \[95%\] exceeded on \[LFHtUIe6T8uyaoTfS1jjeg\]\[node-1\]\[/home/oes\_setup… --- ## [Not able to get correct data using painless scripting](https://discuss.elastic.co/t/not-able-to-get-correct-data-using-painless-scripting/179905)
**Author:** [@Ishan\_deep](https://discuss.elastic.co/u/Ishan_deep)\ **Replies:** 2\ **Last updated:** [May 28, 2019, 7:44am UTC](https://discuss.elastic.co/t/not-able-to-get-correct-data-using-painless-scripting/179905 "2019-05-28T07:44:34Z")
I'm having 3 different TEXT fields containing NUMBERS and i'm trying to add all those values to a new fields as numeric data. one of those field is: // deliveryGroups.0.deliveryGroupId : 1 the painless script i'm usin… --- ## [Is it possible to eliminate duplication of search response when dealing with so long text?](https://discuss.elastic.co/t/is-it-possible-to-eliminate-duplication-of-search-response-when-dealing-with-so-long-text/182021)
**Author:** [@Masanori\_Ohnishi](https://discuss.elastic.co/u/Masanori_Ohnishi)\ **Replies:** 2\ **Last updated:** [May 28, 2019, 7:39am UTC](https://discuss.elastic.co/t/is-it-possible-to-eliminate-duplication-of-search-response-when-dealing-with-so-long-text/182021 "2019-05-28T07:39:04Z")
mapping PUT /my\_index/\_mapping/blogpost { "properties": { “document”: { "properties": { "content": { "type": "text", "fields": { "raw": { "type": "keyw… --- ## [Have large queue in generic threads](https://discuss.elastic.co/t/have-large-queue-in-generic-threads/183004)
**Author:** [@saeednasehi](https://discuss.elastic.co/u/saeednasehi)\ **Replies:** 0\ **Last updated:** [May 28, 2019, 7:15am UTC](https://discuss.elastic.co/t/have-large-queue-in-generic-threads/183004 "2019-05-28T07:15:31Z")
Hi every body. I have cluster consists of three elasticsearch nodes. Unfortunately After restarting the cluster I have found that my cluster have large number of thread queue in generic part. Could you please help me abo… --- ## [Which is best for configuring Elastic search, Windows or Linux?](https://discuss.elastic.co/t/which-is-best-for-configuring-elastic-search-windows-or-linux/182998)
**Author:** [@SudevPK](https://discuss.elastic.co/u/SudevPK)\ **Replies:** 0\ **Last updated:** [May 28, 2019, 7:00am UTC](https://discuss.elastic.co/t/which-is-best-for-configuring-elastic-search-windows-or-linux/182998 "2019-05-28T07:00:35Z")
I am planning to install elastic search as a service, tell me which OS will be best windows or linux? --- ## [Is Azure virtual server is good for configuring Elastic search?](https://discuss.elastic.co/t/is-azure-virtual-server-is-good-for-configuring-elastic-search/182996)
**Author:** [@SudevPK](https://discuss.elastic.co/u/SudevPK)\ **Replies:** 0\ **Last updated:** [May 28, 2019, 6:57am UTC](https://discuss.elastic.co/t/is-azure-virtual-server-is-good-for-configuring-elastic-search/182996 "2019-05-28T06:57:12Z")
I am planning to install elastic search as a windows service in new Azure virtual server.can you say the pros and cons ? --- ## [How can i add field in ingest pipeline:](https://discuss.elastic.co/t/how-can-i-add-field-in-ingest-pipeline/182913)
**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\ **Replies:** 2\ **Last updated:** [May 28, 2019, 6:02am UTC](https://discuss.elastic.co/t/how-can-i-add-field-in-ingest-pipeline/182913 "2019-05-28T06:02:08Z")
PUT \_ingest/pipeline/test { "description" : "fscrawler res2", "processors" : \[ { "grok": { "field": "content", "patterns": \["(^|\\\\s)(?\(\\\\+\\\\d{1,3}\[- \]?)?\\\\d{10})($|\\\\s)"\] … --- ## [NetApp integration with ELK](https://discuss.elastic.co/t/netapp-integration-with-elk/182860)
**Author:** [@swapnali](https://discuss.elastic.co/u/swapnali)\ **Replies:** 2\ **Last updated:** [May 28, 2019, 5:42am UTC](https://discuss.elastic.co/t/netapp-integration-with-elk/182860 "2019-05-28T05:42:35Z")
Is prepackages are available for Netapp NAS And integration of same with ELK?? If yes then please Tell me how to do it. --- ## [X-Pack Security: no pw for beats\_system?](https://discuss.elastic.co/t/x-pack-security-no-pw-for-beats-system/182259)
**Author:** [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\ **Replies:** 4\ **Last updated:** [May 28, 2019, 5:38am UTC](https://discuss.elastic.co/t/x-pack-security-no-pw-for-beats-system/182259 "2019-05-28T05:38:39Z")
Hi all, thanks for making X-Pack Security free with 7.1. I am trying to set it up right now. I don't want to need a password for the monitoirng beats data, so how can I disable the need for a password for the beats\_sy… --- ## [Unable to parse private key for saml encryption](https://discuss.elastic.co/t/unable-to-parse-private-key-for-saml-encryption/182902)
**Author:** [@Ronnie16](https://discuss.elastic.co/u/Ronnie16)\ **Replies:** 3\ **Last updated:** [May 28, 2019, 4:41am UTC](https://discuss.elastic.co/t/unable-to-parse-private-key-for-saml-encryption/182902 "2019-05-28T04:41:19Z")
Hi, I'm using SAML for kibana. SAML is working fine without enabling encryption from IDP end. I want to test now with encryption enabled and have generated saml cert and key using:- bin/x-pack/certutil cert -pem -days… --- ## [How to reset elasticsearch security back to the original state](https://discuss.elastic.co/t/how-to-reset-elasticsearch-security-back-to-the-original-state/182970)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 2\ **Last updated:** [May 28, 2019, 1:26am UTC](https://discuss.elastic.co/t/how-to-reset-elasticsearch-security-back-to-the-original-state/182970 "2019-05-28T01:26:06Z")
Hello, I was playing around with xpack security feature and now nothing seam to work. Is there a way that I can revert back to the original state and start it over? Regards, Peter --- ## [Range query is not working in elasticsearch JAVA Client API](https://discuss.elastic.co/t/range-query-is-not-working-in-elasticsearch-java-client-api/182954)
**Author:** [@Yamuna\_Mallikarjun](https://discuss.elastic.co/u/Yamuna_Mallikarjun)\ **Replies:** 1\ **Last updated:** [May 27, 2019, 7:30pm UTC](https://discuss.elastic.co/t/range-query-is-not-working-in-elasticsearch-java-client-api/182954 "2019-05-27T19:30:52Z")
Hello, I am using ES 6.6.0 version. I have two indices, both the indices have the fallowing field : "ts": { "type": "date" } able to query from one index and not from the other. If i execute the below query throug… --- ## [Aggregations are not working in ES when doc\_values=false](https://discuss.elastic.co/t/aggregations-are-not-working-in-es-when-doc-values-false/182959)
**Author:** [@Yamuna\_Mallikarjun](https://discuss.elastic.co/u/Yamuna_Mallikarjun)\ **Replies:** 0\ **Last updated:** [May 27, 2019, 6:54pm UTC](https://discuss.elastic.co/t/aggregations-are-not-working-in-es-when-doc-values-false/182959 "2019-05-27T18:54:17Z")
Hello, Initially we were using ES 2.4.1 and doc\_values=false for long datatype: and Aggregations were fine with the below configuration. "ts": { "norms": { "enabled": false }, "index": "not\_analyzed", "type": "l… --- ## [Reindexing size understanding](https://discuss.elastic.co/t/reindexing-size-understanding/182944)
**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\ **Replies:** 5\ **Last updated:** [May 27, 2019, 5:18pm UTC](https://discuss.elastic.co/t/reindexing-size-understanding/182944 "2019-05-27T17:18:15Z")
I have 1 index logs-test tKpZpC8LQPqZdCZd7foPkA 5 1 2091273 0 1gb 1gb now i have created 1 more index logs-test-reindex with only 1 shard and no replica. logs-test-reindex … --- ## [Elasticsearch 5.1.1 custom plugin to capture delete request](https://discuss.elastic.co/t/elasticsearch-5-1-1-custom-plugin-to-capture-delete-request/180926)
**Author:** [@Chitransh](https://discuss.elastic.co/u/Chitransh)\ **Replies:** 1\ **Last updated:** [May 27, 2019, 4:22pm UTC](https://discuss.elastic.co/t/elasticsearch-5-1-1-custom-plugin-to-capture-delete-request/180926 "2019-05-27T16:22:47Z")
Hi, I am new to Elasticsearch. I have to create custom plugin which will capture delete request and log that request in log file. I can not use XPACK or other tools as these are paid. Kindly provide information or link… --- ## [Kibana Data Not Receiving](https://discuss.elastic.co/t/kibana-data-not-receiving/182945)
**Author:** [@max17](https://discuss.elastic.co/u/max17)\ **Replies:** 0\ **Last updated:** [May 27, 2019, 4:02pm UTC](https://discuss.elastic.co/t/kibana-data-not-receiving/182945 "2019-05-27T16:02:48Z")
Hi Team, I have elasticsearch and kibana on cloud. But after configuring kibana, I am not receiving any data from the elasticsearch in my kibana. My ES is also on cloud. I have configured 2 pipeline in the Kibana but I… --- ## [Elasticsearch status failed (code=exited, status=78)](https://discuss.elastic.co/t/elasticsearch-status-failed-code-exited-status-78/182934)
**Author:** [@Aytekin\_Done](https://discuss.elastic.co/u/Aytekin_Done)\ **Replies:** 0\ **Last updated:** [May 27, 2019, 2:42pm UTC](https://discuss.elastic.co/t/elasticsearch-status-failed-code-exited-status-78/182934 "2019-05-27T14:42:51Z")
hi all, After i changed elasticsearch.yml , i get this error. Preformatted text● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled) Activ… --- ## [TLS/SSL on Elasticsearch (new version 7.1) (Basic License)](https://discuss.elastic.co/t/tls-ssl-on-elasticsearch-new-version-7-1-basic-license/182623)
**Author:** [@Victor\_Vicente](https://discuss.elastic.co/u/Victor_Vicente)\ **Replies:** 4\ **Last updated:** [May 27, 2019, 1:13pm UTC](https://discuss.elastic.co/t/tls-ssl-on-elasticsearch-new-version-7-1-basic-license/182623 "2019-05-27T13:13:27Z")
Hi, now with version 7.1 TLS and RBAC are licensed under the free-of-charge Elastic Basic license. I was able to configure TLS from Kibana to Browser. But in the documentation, to do the same for elasticsearch (HTTPS) … --- ## [How to access idf values if index is having only one shard](https://discuss.elastic.co/t/how-to-access-idf-values-if-index-is-having-only-one-shard/182834)
**Author:** [@Harika\_Samala](https://discuss.elastic.co/u/Harika_Samala)\ **Replies:** 3\ **Last updated:** [May 27, 2019, 12:59pm UTC](https://discuss.elastic.co/t/how-to-access-idf-values-if-index-is-having-only-one-shard/182834 "2019-05-27T12:59:58Z")
I have tried accessing idf using explanation API. I'm getting idf values as required. But it consumes more time and my application performance time also increases. If we are able to access idf using explanation API there… --- ## [Cluster with 3 Nodes on 2 Hosts?](https://discuss.elastic.co/t/cluster-with-3-nodes-on-2-hosts/182892)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [May 27, 2019, 11:57am UTC](https://discuss.elastic.co/t/cluster-with-3-nodes-on-2-hosts/182892 "2019-05-27T11:57:34Z")
Hi, until now I only used elasticsearch as single node cluster. Now we want to head for a cluster for a new installation. I read that I should use 3 nodes to prevent split brain situation, after a master failed and re… --- ## [Beat and x-pack monitoring](https://discuss.elastic.co/t/beat-and-x-pack-monitoring/182051)
**Author:** [@franco.federico](https://discuss.elastic.co/u/franco.federico)\ **Replies:** 5\ **Last updated:** [May 27, 2019, 11:52am UTC](https://discuss.elastic.co/t/beat-and-x-pack-monitoring/182051 "2019-05-27T11:52:05Z")
Hello Is it possible to monitor the beat. I have a winlogbeat service on the DC and I'd like to know if this service goes down. I know that winlogbeat send monitoring information, but in the monitor system I don't find… --- ## [Truncate/delete the entire index once new data arrives from Logstash](https://discuss.elastic.co/t/truncate-delete-the-entire-index-once-new-data-arrives-from-logstash/181163)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 3\ **Last updated:** [May 27, 2019, 8:28am UTC](https://discuss.elastic.co/t/truncate-delete-the-entire-index-once-new-data-arrives-from-logstash/181163 "2019-05-27T08:28:11Z")
Hello Guys, We are preparing a pipeline, responsible for getting the 'current state' of data in our source table. What it means is that the source table contains let's say 10 records. We would like to reflect those 10 … --- ## [Elastic Stack @ RHEL / CentOS 8?](https://discuss.elastic.co/t/elastic-stack-rhel-centos-8/182862)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [May 27, 2019, 10:45am UTC](https://discuss.elastic.co/t/elastic-stack-rhel-centos-8/182862 "2019-05-27T10:45:52Z")
Hi, your support matrix is not listing Centos / REHL in version 8.x. Is the new version of RHEL officially supported yet for productive use of elastic stack? Thanks, Andreas --- ## [N of n shards failed error persists](https://discuss.elastic.co/t/n-of-n-shards-failed-error-persists/182585)
**Author:** [@ShilpaT](https://discuss.elastic.co/u/ShilpaT)\ **Replies:** 2\ **Last updated:** [May 27, 2019, 10:41am UTC](https://discuss.elastic.co/t/n-of-n-shards-failed-error-persists/182585 "2019-05-27T10:41:56Z")
The error 'n of n shards failed' is always there every time I change the the time range. It was happening in version 6.5.3, and now on 6.7.2 as well. In between I have installed Curator to remove older indices. And have … --- ## [ElasticsearchException\[Failed to create native process factories for Machine Learning\] - version 7.1.0](https://discuss.elastic.co/t/elasticsearchexception-failed-to-create-native-process-factories-for-machine-learning-version-7-1-0/182888)
**Author:** [@eliassal](https://discuss.elastic.co/u/eliassal)\ **Replies:** 1\ **Last updated:** [May 27, 2019, 10:30am UTC](https://discuss.elastic.co/t/elasticsearchexception-failed-to-create-native-process-factories-for-machine-learning-version-7-1-0/182888 "2019-05-27T10:30:38Z")
I am trying to run elasticsearch in a docker container, getting the following error in the logs. I understood that it was a known bug and fixed in recent versions. I use elasticsearch version 7.1.0. Thanks for your help … --- ## [Facing error in query](https://discuss.elastic.co/t/facing-error-in-query/181520)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 6\ **Last updated:** [May 27, 2019, 10:25am UTC](https://discuss.elastic.co/t/facing-error-in-query/181520 "2019-05-27T10:25:06Z")
Hello, When I am running a query in elasticsearch I am facing a error #! Deprecation: returning default values for missing document values is deprecated. Set system property '-Des.scripting.exception\_for\_missing\_value=… --- ## [ElasticSearch Config - Issues SSHing into default linux machine](https://discuss.elastic.co/t/elasticsearch-config-issues-sshing-into-default-linux-machine/182804)
**Author:** [@jasonmull](https://discuss.elastic.co/u/jasonmull)\ **Replies:** 4\ **Last updated:** [May 27, 2019, 10:24am UTC](https://discuss.elastic.co/t/elasticsearch-config-issues-sshing-into-default-linux-machine/182804 "2019-05-27T10:24:16Z")
I've recently installed Docker on Windows 10 Enterprise in order to run an Elasticsearch environment. Going through the documentation here, I'm instructed to run docker-machine ssh and sudo sysctl -w vm.max\_map\_count=26… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1283) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1285)