# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1315 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1316 --- ## [ES XPACK security for conditional field based access?](https://discuss.elastic.co/t/es-xpack-security-for-conditional-field-based-access/179120)
**Author:** [@jharrisonpnnl](https://discuss.elastic.co/u/jharrisonpnnl)\ **Replies:** 0\ **Last updated:** [April 30, 2019, 4:33pm UTC](https://discuss.elastic.co/t/es-xpack-security-for-conditional-field-based-access/179120 "2019-04-30T16:33:29Z")
So, I know XPACK security can do document level security (IE, only allow users to interact with or see documents that match query X), and field level security (IE, only allow users to interact with or see specific fields… --- ## [Date Issue](https://discuss.elastic.co/t/date-issue/178310)
**Author:** [@Andrae](https://discuss.elastic.co/u/Andrae)\ **Replies:** 3\ **Last updated:** [April 30, 2019, 3:48pm UTC](https://discuss.elastic.co/t/date-issue/178310 "2019-04-30T15:48:12Z")
I am unable to display my data using the recommended/accepted date format. I am not sure why all the data is appearing as a single line when this should be displayed as an area chart --- ## [Readonly cerebro](https://discuss.elastic.co/t/readonly-cerebro/179113)
**Author:** [@surya2](https://discuss.elastic.co/u/surya2)\ **Replies:** 0\ **Last updated:** [April 30, 2019, 3:09pm UTC](https://discuss.elastic.co/t/readonly-cerebro/179113 "2019-04-30T15:09:19Z")
Hi, I want to enable read only cerebro for elasticsearch. Right now we have cerebro installed on all the nodes. I want to share cerebro with developers for cluster interface with Readonly. I don't want some one to delet… --- ## ["Custom Rollover" index name in ILM policy configuration](https://discuss.elastic.co/t/custom-rollover-index-name-in-ilm-policy-configuration/179003)
**Author:** [@Hitesh\_Baldaniya1](https://discuss.elastic.co/u/Hitesh_Baldaniya1)\ **Replies:** 2\ **Last updated:** [April 30, 2019, 2:55pm UTC](https://discuss.elastic.co/t/custom-rollover-index-name-in-ilm-policy-configuration/179003 "2019-04-30T14:55:44Z")
Hi Team, I wanted to know if there is any way where I can specify the roll\_over index name in the ILM policy. I see only condition parameter supported. "logs-hotwarm-policy" : { "version" : 2, "modified\_date" : "xx… --- ## [Rollover alias \[mylogs\] can point to multiple indices](https://discuss.elastic.co/t/rollover-alias-mylogs-can-point-to-multiple-indices/179108)
**Author:** [@Hitesh\_Baldaniya1](https://discuss.elastic.co/u/Hitesh_Baldaniya1)\ **Replies:** 0\ **Last updated:** [April 30, 2019, 2:53pm UTC](https://discuss.elastic.co/t/rollover-alias-mylogs-can-point-to-multiple-indices/179108 "2019-04-30T14:53:32Z")
I am getting above mentioned error, following are the steps which I am doing. Created ILM policy PUT \_ilm/policy/mylogspolicy { "policy": { "phases": { "hot": { "actions": { "set\_priority… --- ## [\[SERVICE\_UNAVAILABLE/1/state not recovered / initialized\];](https://discuss.elastic.co/t/service-unavailable-1-state-not-recovered-initialized/178639)
**Author:** [@mkalinowski](https://discuss.elastic.co/u/mkalinowski)\ **Replies:** 6\ **Last updated:** [April 30, 2019, 2:50pm UTC](https://discuss.elastic.co/t/service-unavailable-1-state-not-recovered-initialized/178639 "2019-04-30T14:50:47Z")
Hello, I have problem with my elasticsearch. I have only one node. For several days elasticsearch does not want to collect data. In logs I see this : \[2019-04-26T13:07:51,242\]\[INFO \]\[o.e.n.Node \] \[BbThy… --- ## [Architecture centralisation logs](https://discuss.elastic.co/t/architecture-centralisation-logs/179102)
**Author:** [@icirco](https://discuss.elastic.co/u/icirco)\ **Replies:** 0\ **Last updated:** [April 30, 2019, 2:18pm UTC](https://discuss.elastic.co/t/architecture-centralisation-logs/179102 "2019-04-30T14:18:29Z")
hello, What is the best practice to load logs data in elasticsearch when you have more than 200 servers ? I think I have 2 choices for my architecture : On each server , I configure the elasticsearch host in my logst… --- ## [\[Ingest-Node\] Accessing Data in Pipelines \[Beginner\]](https://discuss.elastic.co/t/ingest-node-accessing-data-in-pipelines-beginner/179091)
**Author:** [@PeterPain](https://discuss.elastic.co/u/PeterPain)\ **Replies:** 0\ **Last updated:** [April 30, 2019, 1:39pm UTC](https://discuss.elastic.co/t/ingest-node-accessing-data-in-pipelines-beginner/179091 "2019-04-30T13:39:17Z")
Hey there, So the processors in a pipeline have read and write access to documents that pass through the pipeline and i want to access data in a pipeline. My Data i want to change comes from metricbeat via http-module… --- ## [Date math explanation](https://discuss.elastic.co/t/date-math-explanation/178849)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 1\ **Last updated:** [April 30, 2019, 12:25pm UTC](https://discuss.elastic.co/t/date-math-explanation/178849 "2019-04-30T12:25:18Z")
I want to use visualization in dashboard to show number of logs for one day (from midnight to midnight). Used aggregation "Date Range" by field "log.timestamp", from now-1d/d to now/d, but I'm not sure it's showing corre… --- ## [Moving data from one cluster to other cluster](https://discuss.elastic.co/t/moving-data-from-one-cluster-to-other-cluster/178495)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 7\ **Last updated:** [April 30, 2019, 12:11pm UTC](https://discuss.elastic.co/t/moving-data-from-one-cluster-to-other-cluster/178495 "2019-04-30T12:11:45Z")
there are situations where we need to copy the data (indices or timestamp range) from one cluster to another cluster. is there a tool or efficient way to get this done ? Any pointers will be useful. Thanks. --- ## [Watcher Use Source Fields](https://discuss.elastic.co/t/watcher-use-source-fields/178732)
**Author:** [@Ericrs22](https://discuss.elastic.co/u/Ericrs22)\ **Replies:** 1\ **Last updated:** [April 30, 2019, 12:05pm UTC](https://discuss.elastic.co/t/watcher-use-source-fields/178732 "2019-04-30T12:05:15Z")
I'm hoping to get source fields to notify for bruteforce attempts. Any recommendations? My results beyond attempts are blank. { "trigger": { "schedule": { "interval": "10s" } }, "input": { "searc… --- ## [Get all values for a given field?](https://discuss.elastic.co/t/get-all-values-for-a-given-field/179014)
**Author:** [@Evelyn38](https://discuss.elastic.co/u/Evelyn38)\ **Replies:** 1\ **Last updated:** [April 30, 2019, 11:39am UTC](https://discuss.elastic.co/t/get-all-values-for-a-given-field/179014 "2019-04-30T11:39:53Z")
Is it possible to query for all of the values a specific field? Say I have "articles" and each article has an author, is there a query I can perform to find a list of all authors? --- ## [Upgrading elastic search in spring boot](https://discuss.elastic.co/t/upgrading-elastic-search-in-spring-boot/178918)
**Author:** [@BlueSpirit](https://discuss.elastic.co/u/BlueSpirit)\ **Replies:** 7\ **Last updated:** [April 30, 2019, 11:34am UTC](https://discuss.elastic.co/t/upgrading-elastic-search-in-spring-boot/178918 "2019-04-30T11:34:48Z")
Hi, I need to use ES 6.7.1 in myproject project, but it is using 6.4.3 only. My project hierarchy: root +-services +-datamanagement +-myproject Contents of the file are: root pom.xml \ **Author:** [@rakshify](https://discuss.elastic.co/u/rakshify)\ **Replies:** 0\ **Last updated:** [April 30, 2019, 11:25am UTC](https://discuss.elastic.co/t/how-to-apply-language-analyzer-and-synonym-filter-on-a-particular-field/179071 "2019-04-30T11:25:06Z") Hi, I'm using Elasticsearch's prebuilt english language analyzer on a field in my index. I would like to know if there is anyway I can add synonym filtering too on that field. I can add synonym filtering if I had a cus… --- ## [Clean elasticsearch data without rolling indices](https://discuss.elastic.co/t/clean-elasticsearch-data-without-rolling-indices/179053)
**Author:** [@Uzo](https://discuss.elastic.co/u/Uzo)\ **Replies:** 3\ **Last updated:** [April 30, 2019, 11:07am UTC](https://discuss.elastic.co/t/clean-elasticsearch-data-without-rolling-indices/179053 "2019-04-30T11:07:01Z")
Hello ! I am trying to implement a way to automaticly clean up our data stored into elasticsearch. We want to kept only recent data for example \< 6 months. I have seen that the best practice for temporal data is rollin… --- ## [Unable to connect to Elastic Search nodes on Docker from Java](https://discuss.elastic.co/t/unable-to-connect-to-elastic-search-nodes-on-docker-from-java/179061)
**Author:** [@Francesco\_Centrone](https://discuss.elastic.co/u/Francesco_Centrone)\ **Replies:** 3\ **Last updated:** [April 30, 2019, 10:49am UTC](https://discuss.elastic.co/t/unable-to-connect-to-elastic-search-nodes-on-docker-from-java/179061 "2019-04-30T10:49:30Z")
Hello, I am not able to connect to Elasticsearch instance runned on docker via Java. I use to run: docker run -p 9200:9200 -p 9300:9300 -e "http.host=0.0.0.0" -e "transport.host=127.0.0.1" -e "xpack.security.enabled=f… --- ## [Gold Node on ELK](https://discuss.elastic.co/t/gold-node-on-elk/179038)
**Author:** [@OlivierT](https://discuss.elastic.co/u/OlivierT)\ **Replies:** 3\ **Last updated:** [April 30, 2019, 9:50am UTC](https://discuss.elastic.co/t/gold-node-on-elk/179038 "2019-04-30T09:50:51Z")
Hello, I would like to know if ELK give support on a One node installation with gold licence ? Thanks in advance, Olivier --- ## [Access elastic search globally](https://discuss.elastic.co/t/access-elastic-search-globally/179033)
**Author:** [@Arun\_Kumar5](https://discuss.elastic.co/u/Arun_Kumar5)\ **Replies:** 4\ **Last updated:** [April 30, 2019, 9:50am UTC](https://discuss.elastic.co/t/access-elastic-search-globally/179033 "2019-04-30T09:50:38Z")
Hi, I installed elastic search 7.0 and locally this is accessible. so in order to access remotely i have set up network.host: 0.0.0.0 in elasticsearch.yml and restart service but it did not work. below is elasticsearch… --- ## [Analyzed tokens to array on document](https://discuss.elastic.co/t/analyzed-tokens-to-array-on-document/179052)
**Author:** [@Jochen](https://discuss.elastic.co/u/Jochen)\ **Replies:** 0\ **Last updated:** [April 30, 2019, 9:32am UTC](https://discuss.elastic.co/t/analyzed-tokens-to-array-on-document/179052 "2019-04-30T09:32:12Z")
Good morning, I am trying to create an index with products where I need to store keywords for each individual product. I am using an analyzer to create tokens for each product description (It is a standard analyzer wit… --- ## [Painless: Collection.contains() not working](https://discuss.elastic.co/t/painless-collection-contains-not-working/178944)
**Author:** [@alex\_b](https://discuss.elastic.co/u/alex_b)\ **Replies:** 4\ **Last updated:** [April 30, 2019, 9:24am UTC](https://discuss.elastic.co/t/painless-collection-contains-not-working/178944 "2019-04-30T09:24:20Z")
I have a simple test object indexed. It has a collection "IntCollection" and the indexed object has this property set to the array {1, 2, 3, 4, 5}. Here is the (simplified) indexed object: "\_source": { // ... "IntC… --- ## [Mapping types are being removed, so why am I still expected to provide type information in bulk requests?](https://discuss.elastic.co/t/mapping-types-are-being-removed-so-why-am-i-still-expected-to-provide-type-information-in-bulk-requests/179031)
**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\ **Replies:** 2\ **Last updated:** [April 30, 2019, 8:00am UTC](https://discuss.elastic.co/t/mapping-types-are-being-removed-so-why-am-i-still-expected-to-provide-type-information-in-bulk-requests/179031 "2019-04-30T08:00:03Z")
I use ElasticSearch 6.7.0. According to ElasticSearch documentation, mapping types are being removed. I want to create lots of documents in a single bulk request. My JSON document looks something like this: "index":{"… --- ## [ES cardinality got zero when set precision\_threshold large](https://discuss.elastic.co/t/es-cardinality-got-zero-when-set-precision-threshold-large/179028)
**Author:** [@li\_zhengqiu](https://discuss.elastic.co/u/li_zhengqiu)\ **Replies:** 2\ **Last updated:** [April 30, 2019, 7:16am UTC](https://discuss.elastic.co/t/es-cardinality-got-zero-when-set-precision-threshold-large/179028 "2019-04-30T07:16:51Z")
Hello, My elasticsearch' version is 6.2.4, like the title said, there is something wrong with the cardinality aggregation. When I change the precision\_threshold from 300 to 10000, I got zero for the cardinality. I suppo… --- ## [All Shards Unassigned due to Data Node Restarts](https://discuss.elastic.co/t/all-shards-unassigned-due-to-data-node-restarts/179001)
**Author:** [@tami](https://discuss.elastic.co/u/tami)\ **Replies:** 2\ **Last updated:** [April 30, 2019, 7:12am UTC](https://discuss.elastic.co/t/all-shards-unassigned-due-to-data-node-restarts/179001 "2019-04-30T07:12:10Z")
We are using ElasticSearch version 6.2.4 deployed on kubernetes, with 2 data shards, 3 masters, and 1 replica per shard. All of our shards are currently unassigned and unable to be reassigned. curl -X GET "http://$ES\_H… --- ## [Ngram](https://discuss.elastic.co/t/ngram/179021)
**Author:** [@spsanthoshi](https://discuss.elastic.co/u/spsanthoshi)\ **Replies:** 0\ **Last updated:** [April 30, 2019, 6:24am UTC](https://discuss.elastic.co/t/ngram/179021 "2019-04-30T06:24:15Z")
When bigram analyzer is applied to text field called Name,then doc\[Name\].value.length() is always returning 2.Is Es can return no. of pairs formed for a string? or I need origin length of text when bigram analyzer is app… --- ## [It is possible to monitor services like, for example, DNS?](https://discuss.elastic.co/t/it-is-possible-to-monitor-services-like-for-example-dns/178912)
**Author:** [@JoseLuis](https://discuss.elastic.co/u/JoseLuis)\ **Replies:** 3\ **Last updated:** [April 30, 2019, 5:56am UTC](https://discuss.elastic.co/t/it-is-possible-to-monitor-services-like-for-example-dns/178912 "2019-04-30T05:56:05Z")
I don't know if this is the appropiate category but I'm new using elastic stack and in general any tool of this style (because I'm in practice, just out of studying computer science) and the truth is that I am quite fond… --- ## [Advanced Watch of serial diff of value](https://discuss.elastic.co/t/advanced-watch-of-serial-diff-of-value/178925)
**Author:** [@6tUBp3gwd9Zp](https://discuss.elastic.co/u/6tUBp3gwd9Zp)\ **Replies:** 2\ **Last updated:** [April 30, 2019, 5:50am UTC](https://discuss.elastic.co/t/advanced-watch-of-serial-diff-of-value/178925 "2019-04-30T05:50:41Z")
I want to create an advanced watcher that monitors a value and if that value does make a jump greater than x then i want to be informed. My guess was to do this with a serial\_diff of the average aggregation of that value… --- ## [Bulk process stuck](https://discuss.elastic.co/t/bulk-process-stuck/179007)
**Author:** [@happy5035](https://discuss.elastic.co/u/happy5035)\ **Replies:** 1\ **Last updated:** [April 30, 2019, 5:14am UTC](https://discuss.elastic.co/t/bulk-process-stuck/179007 "2019-04-30T05:14:14Z")
when bulk document ,Bulk operation stuck in running state. What may be the reason? elasticsearch:6.4.2 3 nodes indices:data/write/bulk CpJ4Sde5TXqvPG\_UKFSRZQ:233020 - … --- ## [What's the benefit of splitting nodes instead of large instance with more shards?](https://discuss.elastic.co/t/whats-the-benefit-of-splitting-nodes-instead-of-large-instance-with-more-shards/179000)
**Author:** [@Devon\_Yoo](https://discuss.elastic.co/u/Devon_Yoo)\ **Replies:** 2\ **Last updated:** [April 30, 2019, 2:53am UTC](https://discuss.elastic.co/t/whats-the-benefit-of-splitting-nodes-instead-of-large-instance-with-more-shards/179000 "2019-04-30T02:53:19Z")
Please correct me if I am wrong, When create domain, if I decide to create 3 instances, data will be split into three nodes. I am just wondering what would be the exact benefit of having more nodes instead of one big in… --- ## [Encryption Options](https://discuss.elastic.co/t/encryption-options/178832)
**Author:** [@dbarros](https://discuss.elastic.co/u/dbarros)\ **Replies:** 7\ **Last updated:** [April 30, 2019, 2:45am UTC](https://discuss.elastic.co/t/encryption-options/178832 "2019-04-30T02:45:46Z")
I have a few questions around what encryption options are available in Elasticsearch: • Does Elasticsearch offer encryption of data at rest (in other words, of all the data it is storing)? • Does it offer encryption at… --- ## [Docker container receive "master not discovered exception" after authentication](https://discuss.elastic.co/t/docker-container-receive-master-not-discovered-exception-after-authentication/178778)
**Author:** [@abelchun](https://discuss.elastic.co/u/abelchun)\ **Replies:** 1\ **Last updated:** [April 30, 2019, 2:11am UTC](https://discuss.elastic.co/t/docker-container-receive-master-not-discovered-exception-after-authentication/178778 "2019-04-30T02:11:13Z")
I'm setting up elastic search production docker-compose environment, I copied exactly the same as in the official website here. Everything worked fine after deploy. When I add ELASTIC\_PASSWORD env with xpack enable and x… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1314) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1316)