# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1298

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1299

---

## [Elasticsearch-py support for Elasticsearch 7](https://discuss.elastic.co/t/elasticsearch-py-support-for-elasticsearch-7/178536)

<div class="topic-metadata">

**Author:** [@dnwobu](https://discuss.elastic.co/u/dnwobu)\
**Replies:** 3\
**Last updated:** [May 16, 2019, 3:57am UTC](https://discuss.elastic.co/t/elasticsearch-py-support-for-elasticsearch-7/178536 "2019-05-16T03:57:11Z")

</div>

Is there a timeline of when the elasticsearch-py and elasticsearch-dsl-py python modules will be updated and released to support Elasticsearch 7?

---

## [Fastest way to send logs from Kafka to Elasticsearch](https://discuss.elastic.co/t/fastest-way-to-send-logs-from-kafka-to-elasticsearch/181304)

<div class="topic-metadata">

**Author:** [@thangld](https://discuss.elastic.co/u/thangld)\
**Replies:** 0\
**Last updated:** [May 16, 2019, 3:31am UTC](https://discuss.elastic.co/t/fastest-way-to-send-logs-from-kafka-to-elasticsearch/181304 "2019-05-16T03:31:51Z")

</div>

I am looking for the fastest log shipper which can directly transfer my logs to elasticsearch from kafka. I can name some ways to do this: Kafka -\> Elasticsearch Kafka -\> Logstash -\> Elasticsearch Kafka -\> Golang -\> …

---

## [Master node issue](https://discuss.elastic.co/t/master-node-issue/181286)

<div class="topic-metadata">

**Author:** [@jackA](https://discuss.elastic.co/u/jackA)\
**Replies:** 0\
**Last updated:** [May 16, 2019, 12:29am UTC](https://discuss.elastic.co/t/master-node-issue/181286 "2019-05-16T00:29:58Z")

</div>

Hello All, I am working on an Elasticsearch installation on Azure with 3 Master nodes and 3 Data nodes. For some reason, the Master-1 node doesn't want seem to join the group. I'm not sure if it's always been this way or…

---

## [Unable ro run Elasticsearch on windows 7](https://discuss.elastic.co/t/unable-ro-run-elasticsearch-on-windows-7/181285)

<div class="topic-metadata">

**Author:** [@oumayma](https://discuss.elastic.co/u/oumayma)\
**Replies:** 0\
**Last updated:** [May 16, 2019, 12:15am UTC](https://discuss.elastic.co/t/unable-ro-run-elasticsearch-on-windows-7/181285 "2019-05-16T00:15:13Z")

</div>

Hi When I run the elasticsearch.bat I get this error : \\java\\jdk1.8.0\_162\\bin\\java.exe" -cp "!ES\_CLASSPATH!" "org.elasticsearch.tools.launchers.TempDirectory"" ' était inattendu. My java version is 1.8.0\_162 and I alr…

---

## [Elasticsearch Ansible install getting getting error: "Not a public key: https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.0.1-x86\_64.rpm.sha512"](https://discuss.elastic.co/t/elasticsearch-ansible-install-getting-getting-error-not-a-public-key-https-artifacts-elastic-co-downloads-elasticsearch-elasticsearch-7-0-1-x86-64-rpm-sha512/181283)

<div class="topic-metadata">

**Author:** [@niudaye123](https://discuss.elastic.co/u/niudaye123)\
**Replies:** 0\
**Last updated:** [May 16, 2019, 12:04am UTC](https://discuss.elastic.co/t/elasticsearch-ansible-install-getting-getting-error-not-a-public-key-https-artifacts-elastic-co-downloads-elasticsearch-elasticsearch-7-0-1-x86-64-rpm-sha512/181283 "2019-05-16T00:04:58Z")

</div>

Hi, All, I am getting the not a public key error when I tried to install Elasticsearch 7.0.1 with Ansible script, which is from the GITHub, https://github.com/elastic/ansible-elasticsearch. Anyone ran into the same issu…

---

## [How to combine similar items in aggregations](https://discuss.elastic.co/t/how-to-combine-similar-items-in-aggregations/181234)

<div class="topic-metadata">

**Author:** [@andres\_512](https://discuss.elastic.co/u/andres_512)\
**Replies:** 1\
**Last updated:** [May 15, 2019, 9:55pm UTC](https://discuss.elastic.co/t/how-to-combine-similar-items-in-aggregations/181234 "2019-05-15T21:55:36Z")

</div>

I'm trying to create a color filter. The colors being returned are mostly normal but there's a bunch of other off ones. Example, my results show up like this: { key: "WHITE", doc\_count: 300 }, { key: "OFFWHITE", doc\_co…

---

## [Where can I actually set index.allocation.max\_retries](https://discuss.elastic.co/t/where-can-i-actually-set-index-allocation-max-retries/181272)

<div class="topic-metadata">

**Author:** [@preddy75](https://discuss.elastic.co/u/preddy75)\
**Replies:** 1\
**Last updated:** [May 15, 2019, 9:29pm UTC](https://discuss.elastic.co/t/where-can-i-actually-set-index-allocation-max-retries/181272 "2019-05-15T21:29:50Z")

</div>

I cannot find a way to set the property cluster wide. The API only allows in on an index, I want to set it for every index and every index created after that.

---

## [Kibana not showing log, but showing it after I remove some fields](https://discuss.elastic.co/t/kibana-not-showing-log-but-showing-it-after-i-remove-some-fields/181275)

<div class="topic-metadata">

**Author:** [@kristijorgji](https://discuss.elastic.co/u/kristijorgji)\
**Replies:** 0\
**Last updated:** [May 15, 2019, 8:53pm UTC](https://discuss.elastic.co/t/kibana-not-showing-log-but-showing-it-after-i-remove-some-fields/181275 "2019-05-15T20:53:29Z")

</div>

Hi, I have JSON logs for a nginx container in which I host a web application. These logs are not shown always to Kibana (more below), but I can see them processed by Logstash docker container logs. When I remove some f…

---

## [How do add a third party plugin to integ test cluster before running tests?](https://discuss.elastic.co/t/how-do-add-a-third-party-plugin-to-integ-test-cluster-before-running-tests/181094)

<div class="topic-metadata">

**Author:** [@kuruf](https://discuss.elastic.co/u/kuruf)\
**Replies:** 2\
**Last updated:** [May 15, 2019, 8:37pm UTC](https://discuss.elastic.co/t/how-do-add-a-third-party-plugin-to-integ-test-cluster-before-running-tests/181094 "2019-05-15T20:37:50Z")

</div>

I have a plugin I'm developing that relies on another person's plugin. I would like to add their plugin to the list of plugins installed on the integ test cluster in my gradle file. What's the best way to do that?

---

## [3 node cluster suggestion](https://discuss.elastic.co/t/3-node-cluster-suggestion/180668)

<div class="topic-metadata">

**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\
**Replies:** 17\
**Last updated:** [May 15, 2019, 8:29pm UTC](https://discuss.elastic.co/t/3-node-cluster-suggestion/180668 "2019-05-15T20:29:40Z")

</div>

Hi I am trying to setup a cluster for my production environment. I will be using three nodes. I am planning to use one node as master node with no data . and two nodes as data nodes. (I want to use indices as one prim…

---

## [How can I query on a date range in an array...?](https://discuss.elastic.co/t/how-can-i-query-on-a-date-range-in-an-array/181267)

<div class="topic-metadata">

**Author:** [@cjokinen](https://discuss.elastic.co/u/cjokinen)\
**Replies:** 0\
**Last updated:** [May 15, 2019, 8:03pm UTC](https://discuss.elastic.co/t/how-can-i-query-on-a-date-range-in-an-array/181267 "2019-05-15T20:03:44Z")

</div>

The format we are looking to load into elasticsearch is... \_source.publish\_date\['timestamp'\]; there is also a \_source.publish\_date\['datetime'\]; But I was trying to figure out how I could do a date range query on …

---

## [Does Elastic consider Elasticsearch a (mostly) pure implementation of the SEDA software architecture for Internet servers?](https://discuss.elastic.co/t/does-elastic-consider-elasticsearch-a-mostly-pure-implementation-of-the-seda-software-architecture-for-internet-servers/174941)

<div class="topic-metadata">

**Author:** [@khyron4eva](https://discuss.elastic.co/u/khyron4eva)\
**Replies:** 7\
**Last updated:** [May 15, 2019, 7:42pm UTC](https://discuss.elastic.co/t/does-elastic-consider-elasticsearch-a-mostly-pure-implementation-of-the-seda-software-architecture-for-internet-servers/174941 "2019-05-15T19:42:56Z")

</div>

For reference, the original SEDA paper is here. My question for any Elastic team members reading (who are deeply intimate with Elasticsearch architecture/internals) is whether Elastic (core developers/company) thinks of…

---

## [Exclude empty-string, null and non-existant](https://discuss.elastic.co/t/exclude-empty-string-null-and-non-existant/181140)

<div class="topic-metadata">

**Author:** [@Pictor](https://discuss.elastic.co/u/Pictor)\
**Replies:** 1\
**Last updated:** [May 15, 2019, 7:36pm UTC](https://discuss.elastic.co/t/exclude-empty-string-null-and-non-existant/181140 "2019-05-15T19:36:20Z")

</div>

How does one query for all documents having a field with non empty value? (aka mandatory value) I can exclude the null values or non existing fields via the exists (negated) query, but I also need to ensure that the val…

---

## [Should I install Filebeat and Metricbeat on the ELK server?](https://discuss.elastic.co/t/should-i-install-filebeat-and-metricbeat-on-the-elk-server/181207)

<div class="topic-metadata">

**Author:** [@zenimagine](https://discuss.elastic.co/u/zenimagine)\
**Replies:** 1\
**Last updated:** [May 15, 2019, 7:26pm UTC](https://discuss.elastic.co/t/should-i-install-filebeat-and-metricbeat-on-the-elk-server/181207 "2019-05-15T19:26:27Z")

</div>

Hi, I have an ELK server (Elasticsearch, Logstash and Kibana on the same server) and I monitor a remote server with Filebeat and Metricbeat installed on it. Should I install Filebeat and Metricbeat on the ELK server? Is …

---

## [7.0 master not discovered yet](https://discuss.elastic.co/t/7-0-master-not-discovered-yet/181040)

<div class="topic-metadata">

**Author:** [@jun.li](https://discuss.elastic.co/u/jun.li)\
**Replies:** 2\
**Last updated:** [May 15, 2019, 7:19pm UTC](https://discuss.elastic.co/t/7-0-master-not-discovered-yet/181040 "2019-05-15T19:19:09Z")

</div>

I am having difficulty to migrate from 6.4 to 7. In QA env, I would like to form a cluster with 2 hosts psclxd00546 and psclxd00547. The error message I'm getting is: \[2019-05-14T11:38:49,908\]\[WARN \]\[o.e.c.c.ClusterFor…

---

## [Add AWS System Account into S3 repo for Elasticsearch snapshot](https://discuss.elastic.co/t/add-aws-system-account-into-s3-repo-for-elasticsearch-snapshot/181256)

<div class="topic-metadata">

**Author:** [@kevinc](https://discuss.elastic.co/u/kevinc)\
**Replies:** 0\
**Last updated:** [May 15, 2019, 6:30pm UTC](https://discuss.elastic.co/t/add-aws-system-account-into-s3-repo-for-elasticsearch-snapshot/181256 "2019-05-15T18:30:51Z")

</div>

When trying to add a client's secret by using the command: /usr/share/elasticsearch/bin/elasticsearch-keystore add s3.client.xxxxx-----xxxxx.secret\_key I got this error message: ERROR: String value must contain only A…

---

## [Voting Configuration Exclusion api support in elasticsearchpy client](https://discuss.elastic.co/t/voting-configuration-exclusion-api-support-in-elasticsearchpy-client/181249)

<div class="topic-metadata">

**Author:** [@nishantkum](https://discuss.elastic.co/u/nishantkum)\
**Replies:** 0\
**Last updated:** [May 15, 2019, 6:11pm UTC](https://discuss.elastic.co/t/voting-configuration-exclusion-api-support-in-elasticsearchpy-client/181249 "2019-05-15T18:11:15Z")

</div>

Hello everyone, I am looking for support of setting "voting\_configuration\_exclusions" in v7.x via the 7.x python client, but it appears that it is not supported in the python client yet. I think the implementation should…

---

## [Too large data for \_id](https://discuss.elastic.co/t/too-large-data-for-id/179500)

<div class="topic-metadata">

**Author:** [@Trucke](https://discuss.elastic.co/u/Trucke)\
**Replies:** 3\
**Last updated:** [May 15, 2019, 5:55pm UTC](https://discuss.elastic.co/t/too-large-data-for-id/179500 "2019-05-15T17:55:17Z")

</div>

Hey Guys, I'm developing my own centralized log management and using Elasticsearch with daily indices which matches my claims perfectly, so far. Now i have a problem on my search queries due to the amount of data and th…

---

## [Wanted to know how can i delete the no of logs stored so that it displays only for 2 days](https://discuss.elastic.co/t/wanted-to-know-how-can-i-delete-the-no-of-logs-stored-so-that-it-displays-only-for-2-days/181248)

<div class="topic-metadata">

**Author:** [@syed\_faheem\_Hussain](https://discuss.elastic.co/u/syed_faheem_Hussain)\
**Replies:** 0\
**Last updated:** [May 15, 2019, 5:49pm UTC](https://discuss.elastic.co/t/wanted-to-know-how-can-i-delete-the-no-of-logs-stored-so-that-it-displays-only-for-2-days/181248 "2019-05-15T17:49:08Z")

</div>

Where and what do i need the configuration to be given so that when i select the index in Kibana i should see only 2 days logs and previous all should be deleted ? Is the configuration in Kibana or Elastic search

---

## [Elasticsearch exited with code 78](https://discuss.elastic.co/t/elasticsearch-exited-with-code-78/181247)

<div class="topic-metadata">

**Author:** [@decodeit](https://discuss.elastic.co/u/decodeit)\
**Replies:** 0\
**Last updated:** [May 15, 2019, 5:33pm UTC](https://discuss.elastic.co/t/elasticsearch-exited-with-code-78/181247 "2019-05-15T17:33:58Z")

</div>

I run the docker-compose up the code I downloaded from repo now I get the error exited with 78. ERROR: \[1\] bootstrap checks failed elasticsearch | \[1\]: max virtual memory areas vm.max\_map\_count \[65530\] is too low, i…

---

## [How to Migrate the cloudbees Jenkins Enterprise analytics to set our own Elasticsearch Analytics](https://discuss.elastic.co/t/how-to-migrate-the-cloudbees-jenkins-enterprise-analytics-to-set-our-own-elasticsearch-analytics/181243)

<div class="topic-metadata">

**Author:** [@raosri1992](https://discuss.elastic.co/u/raosri1992)\
**Replies:** 0\
**Last updated:** [May 15, 2019, 5:00pm UTC](https://discuss.elastic.co/t/how-to-migrate-the-cloudbees-jenkins-enterprise-analytics-to-set-our-own-elasticsearch-analytics/181243 "2019-05-15T17:00:24Z")

</div>

Hello, We our jenkins environment running with elaticsearch which configured by cloudbees analytics and we are planning to set up our own elasticsearch set up for our Jenkins environment. Refer to this article(https://g…

---

## [Mapping for finding keywords in domains](https://discuss.elastic.co/t/mapping-for-finding-keywords-in-domains/179267)

<div class="topic-metadata">

**Author:** [@hacker\_21](https://discuss.elastic.co/u/hacker_21)\
**Replies:** 8\
**Last updated:** [May 15, 2019, 3:40pm UTC](https://discuss.elastic.co/t/mapping-for-finding-keywords-in-domains/179267 "2019-05-15T15:40:33Z")

</div>

hi there, I recently ran a search called "toronto dental" on google and noticed it even matches for keywords inside of domain names too: the domain is a single word, yet they are able to search for the two words (i…

---

## [Elasticsearch and DHCP Logs](https://discuss.elastic.co/t/elasticsearch-and-dhcp-logs/181231)

<div class="topic-metadata">

**Author:** [@retroisbest](https://discuss.elastic.co/u/retroisbest)\
**Replies:** 0\
**Last updated:** [May 15, 2019, 3:23pm UTC](https://discuss.elastic.co/t/elasticsearch-and-dhcp-logs/181231 "2019-05-15T15:23:49Z")

</div>

Hi there, Can anybody point me to a guide on how to display Windows DHCP logs nicely with elasticsearch? Im using Windows filebeat and the log files have transfered over to elasticsearch in an indices called "Filebeat…

---

## [Effect on having one or more path.data?](https://discuss.elastic.co/t/effect-on-having-one-or-more-path-data/181226)

<div class="topic-metadata">

**Author:** [@sferry](https://discuss.elastic.co/u/sferry)\
**Replies:** 1\
**Last updated:** [May 15, 2019, 3:23pm UTC](https://discuss.elastic.co/t/effect-on-having-one-or-more-path-data/181226 "2019-05-15T15:23:11Z")

</div>

HEllo there, I am studying the ELK stack, and i cannot find the answer: what is the use of multiple path ? It looks like indices are copied to the x number of paths, so no space gain. Is that correct? Does it give mo…

---

## [ELK Latest stable Version for Production deployment](https://discuss.elastic.co/t/elk-latest-stable-version-for-production-deployment/177948)

<div class="topic-metadata">

**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\
**Replies:** 5\
**Last updated:** [May 15, 2019, 3:12pm UTC](https://discuss.elastic.co/t/elk-latest-stable-version-for-production-deployment/177948 "2019-05-15T15:12:27Z")

</div>

Hi, Could you please let us know what is the latest stable Version of ELK for production deployment? Thanks, Vivek

---

## [Elasticsearch returning empty result](https://discuss.elastic.co/t/elasticsearch-returning-empty-result/180962)

<div class="topic-metadata">

**Author:** [@gaurav](https://discuss.elastic.co/u/gaurav)\
**Replies:** 5\
**Last updated:** [May 15, 2019, 3:02pm UTC](https://discuss.elastic.co/t/elasticsearch-returning-empty-result/180962 "2019-05-15T15:02:38Z")

</div>

I am using a 2.3 version elastic search. Sometimes, elastic search returns an empty result even when data is present. It usually gives the right data on retry. But why does it return empty in the first try. Any known…

---

## [Indexing array list of tags (string)](https://discuss.elastic.co/t/indexing-array-list-of-tags-string/181220)

<div class="topic-metadata">

**Author:** [@Enzo\_RC](https://discuss.elastic.co/u/Enzo_RC)\
**Replies:** 0\
**Last updated:** [May 15, 2019, 2:39pm UTC](https://discuss.elastic.co/t/indexing-array-list-of-tags-string/181220 "2019-05-15T14:39:29Z")

</div>

Hi, I am stuck on indexing array of strings. i have a field "tags" with array of strings as you can see on the following picture: But after indexing it, i can't filter for specific values within the array. For ex…

---

## [Filter\_duplicate\_text doesn't run on background](https://discuss.elastic.co/t/filter-duplicate-text-doesnt-run-on-background/181200)

<div class="topic-metadata">

**Author:** [@Eran\_H](https://discuss.elastic.co/u/Eran_H)\
**Replies:** 0\
**Last updated:** [May 15, 2019, 12:53pm UTC](https://discuss.elastic.co/t/filter-duplicate-text-doesnt-run-on-background/181200 "2019-05-15T12:53:24Z")

</div>

When setting "filter\_duplicate\_text": true in significant\_text aggregation, it changes the count only for the doc\_count and not for the bg\_count. Meaning the score will count documents that the word appear in as documen…

---

## [How to load the index and dashboards from a remote server?](https://discuss.elastic.co/t/how-to-load-the-index-and-dashboards-from-a-remote-server/181208)

<div class="topic-metadata">

**Author:** [@zenimagine](https://discuss.elastic.co/u/zenimagine)\
**Replies:** 0\
**Last updated:** [May 15, 2019, 1:59pm UTC](https://discuss.elastic.co/t/how-to-load-the-index-and-dashboards-from-a-remote-server/181208 "2019-05-15T13:59:49Z")

</div>

I have an ELK server (Elasticsearch, Logstash and Kibana on the same server) and a remote server on which I installed Filebeat. How to load the index and dashboards from a remote server? I'm using version 7.1 and Ubuntu …

---

## [Get document by searching for a field value](https://discuss.elastic.co/t/get-document-by-searching-for-a-field-value/181203)

<div class="topic-metadata">

**Author:** [@davidbien](https://discuss.elastic.co/u/davidbien)\
**Replies:** 0\
**Last updated:** [May 15, 2019, 1:35pm UTC](https://discuss.elastic.co/t/get-document-by-searching-for-a-field-value/181203 "2019-05-15T13:35:19Z")

</div>

Hi, So I have a search query written in python to look for cloudtrail events. This works fine, however I would like to move this even further and access more data from the document my search finds. This is what I have …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1297)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1299)
