# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1317

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1318

---

## [Setting path.repo for kubernetes pods](https://discuss.elastic.co/t/setting-path-repo-for-kubernetes-pods/178186)

<div class="topic-metadata">

**Author:** [@fbede4](https://discuss.elastic.co/u/fbede4)\
**Replies:** 1\
**Last updated:** [April 29, 2019, 8:14am UTC](https://discuss.elastic.co/t/setting-path-repo-for-kubernetes-pods/178186 "2019-04-29T08:14:56Z")

</div>

I understand you have to set the path.repo in elasticsearch.yml to create a backup like this: path.repo: /mnt/backup But I have elasticsearch running on Kubernetes, and I would like to set the path.repo from a stateful…

---

## [V7.0.0 upgrade pain "\_type" now all doc, which field shoud I use instead?](https://discuss.elastic.co/t/v7-0-0-upgrade-pain-type-now-all-doc-which-field-shoud-i-use-instead/178637)

<div class="topic-metadata">

**Author:** [@mortenb123](https://discuss.elastic.co/u/mortenb123)\
**Replies:** 2\
**Last updated:** [April 29, 2019, 7:12am UTC](https://discuss.elastic.co/t/v7-0-0-upgrade-pain-type-now-all-doc-which-field-shoud-i-use-instead/178637 "2019-04-29T07:12:01Z")

</div>

I know removal of mapping types in v7: https://www.elastic.co/guide/en/elasticsearch/reference/master/removal-of-types.html#\_schedule\_for\_removal\_of\_mapping\_types But \_type is now all \_doc We use "\_type" field very muc…

---

## [Elastic stack monitoring using Nagios](https://discuss.elastic.co/t/elastic-stack-monitoring-using-nagios/177844)

<div class="topic-metadata">

**Author:** [@kaushalshriyan](https://discuss.elastic.co/u/kaushalshriyan)\
**Replies:** 2\
**Last updated:** [April 29, 2019, 5:31am UTC](https://discuss.elastic.co/t/elastic-stack-monitoring-using-nagios/177844 "2019-04-29T05:31:05Z")

</div>

Hi, I will appreciate if anyone can point me to monitor Elastic Stack using Nagios Monitoring. I am running 2 Nodes for Kibana and Logstash and three ES nodes. Thanks in Advance. Best Regards, Kaushal

---

## [Grafana 6.1.4 502 error connecting to elasticsearch 7.0.0 datasource](https://discuss.elastic.co/t/grafana-6-1-4-502-error-connecting-to-elasticsearch-7-0-0-datasource/178766)

<div class="topic-metadata">

**Author:** [@samcro1967](https://discuss.elastic.co/u/samcro1967)\
**Replies:** 3\
**Last updated:** [April 29, 2019, 5:28am UTC](https://discuss.elastic.co/t/grafana-6-1-4-502-error-connecting-to-elasticsearch-7-0-0-datasource/178766 "2019-04-29T05:28:03Z")

</div>

I updated to the latest version of docker container sebp/elk on 4/17/2019. Since then I have been unable to get Telegraf to start on my host. It fails connecting to Elasticsearch. I also get a 502 error connecting to Ela…

---

## [Scripted field to get next doc value in Kibana using painless script](https://discuss.elastic.co/t/scripted-field-to-get-next-doc-value-in-kibana-using-painless-script/178645)

<div class="topic-metadata">

**Author:** [@Kathir\_J](https://discuss.elastic.co/u/Kathir_J)\
**Replies:** 2\
**Last updated:** [April 29, 2019, 5:25am UTC](https://discuss.elastic.co/t/scripted-field-to-get-next-doc-value-in-kibana-using-painless-script/178645 "2019-04-29T05:25:06Z")

</div>

Hi Team, Below is the sample scripted field we use in Kibana side. What I would like to receive is, when path becomes null, I would like to read next document value.(something like path = doc\['message.keyword'\]+1.value;…

---

## [Elastic Search CPU Utilization.. on one cluster node Version1.7.2](https://discuss.elastic.co/t/elastic-search-cpu-utilization-on-one-cluster-node-version1-7-2/178365)

<div class="topic-metadata">

**Author:** [@kamesh\_siva](https://discuss.elastic.co/u/kamesh_siva)\
**Replies:** 4\
**Last updated:** [April 29, 2019, 5:12am UTC](https://discuss.elastic.co/t/elastic-search-cpu-utilization-on-one-cluster-node-version1-7-2/178365 "2019-04-29T05:12:26Z")

</div>

Hi Team, I am observing that there is a high CPU utilization on one my culster server. This has been regular.. I am helpless to my team.. I request you to please let me know what i need to do on this regards.. I res…

---

## [Delete index (/log-nginx-%{bu\_id}-2019.04.25)](https://discuss.elastic.co/t/delete-index-log-nginx-bu-id-2019-04-25/178823)

<div class="topic-metadata">

**Author:** [@54efffbe5961982e61c0](https://discuss.elastic.co/u/54efffbe5961982e61c0)\
**Replies:** 2\
**Last updated:** [April 29, 2019, 5:08am UTC](https://discuss.elastic.co/t/delete-index-log-nginx-bu-id-2019-04-25/178823 "2019-04-29T05:08:04Z")

</div>

I can't delete index (/log-nginx-%{bu\_id}-2019.04.25) DELETE /log-nginx-%{bu\_id}-2019.04.25 { "error": { "root\_cause": \[ { "type": "index\_not\_found\_exception", "reason": "no such index", …

---

## [EsSparkSQL.saveToEs join type(urgent)](https://discuss.elastic.co/t/essparksql-savetoes-join-type-urgent/178828)

<div class="topic-metadata">

**Author:** [@001kulou](https://discuss.elastic.co/u/001kulou)\
**Replies:** 0\
**Last updated:** [April 29, 2019, 3:18am UTC](https://discuss.elastic.co/t/essparksql-savetoes-join-type-urgent/178828 "2019-04-29T03:18:02Z")

</div>

I want to import a sub-document of join type, but the official document does not give an example. The sub-document needs to set name and parame and specify roting. "my\_join\_field": { "name": "answer", "parent": "1" } …

---

## [Elasticsearch 2.4 Shard Rebalancing](https://discuss.elastic.co/t/elasticsearch-2-4-shard-rebalancing/178537)

<div class="topic-metadata">

**Author:** [@jcameron](https://discuss.elastic.co/u/jcameron)\
**Replies:** 6\
**Last updated:** [April 29, 2019, 2:09am UTC](https://discuss.elastic.co/t/elasticsearch-2-4-shard-rebalancing/178537 "2019-04-29T02:09:31Z")

</div>

Hi all, Service: Elasticsearch Number of Nodes: 9 Version: 2.4 We currently run an Elasticsearch cluster under v2.4 that consists of 9 nodes. Each node has a relatively even number of shards on it, and we have not a…

---

## [Curator and Elasticsearch 7.0](https://discuss.elastic.co/t/curator-and-elasticsearch-7-0/176929)

<div class="topic-metadata">

**Author:** [@wiliamauc85](https://discuss.elastic.co/u/wiliamauc85)\
**Replies:** 5\
**Last updated:** [April 28, 2019, 6:33pm UTC](https://discuss.elastic.co/t/curator-and-elasticsearch-7-0/176929 "2019-04-28T18:33:13Z")

</div>

Hi there, I've just installed Curator 5.6 and nothing seems to be working, I've checked /opt/elasticsearch-curator and /usr/bin/curator and thcurator and curator\_cli files are present, but even running just curator --…

---

## [Nest 6.x GetAsync sets IsValid=false for 404 response](https://discuss.elastic.co/t/nest-6-x-getasync-sets-isvalid-false-for-404-response/178688)

<div class="topic-metadata">

**Author:** [@keithpeck](https://discuss.elastic.co/u/keithpeck)\
**Replies:** 0\
**Last updated:** [April 26, 2019, 4:08pm UTC](https://discuss.elastic.co/t/nest-6-x-getasync-sets-isvalid-false-for-404-response/178688 "2019-04-26T16:08:51Z")

</div>

We are updating from Nest and ElasticSearch 5.6 to 6.6 and have found that GetAsync sets IsValid=false when the document is not found. This is change from 5.6 where IsValid=true and Found=false. This is on .NET Core. I …

---

## [Elasticsearch did not passed bootstrap](https://discuss.elastic.co/t/elasticsearch-did-not-passed-bootstrap/178791)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 4\
**Last updated:** [April 28, 2019, 3:15pm UTC](https://discuss.elastic.co/t/elasticsearch-did-not-passed-bootstrap/178791 "2019-04-28T15:15:48Z")

</div>

Hello, I am trying to install new elasticsearch using version 7 for log storage. FIrst I have tried to configure it with locked memory I have configured all the requirements that are in the documentation but it did not …

---

## [Index READONLY](https://discuss.elastic.co/t/index-readonly/178802)

<div class="topic-metadata">

**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\
**Replies:** 1\
**Last updated:** [April 28, 2019, 2:28pm UTC](https://discuss.elastic.co/t/index-readonly/178802 "2019-04-28T14:28:26Z")

</div>

I am having a weird issue where my index keeps going into a readonly status. I understand that when the disk space is low, the index does this as a safety measure. The disk was getting full up to a certain point and then…

---

## [java.lang.NoSuchMethodError: org.elasticsearch.action.index.IndexRequest.ifSeqNo()J](https://discuss.elastic.co/t/java-lang-nosuchmethoderror-org-elasticsearch-action-index-indexrequest-ifseqno-j/176881)

<div class="topic-metadata">

**Author:** [@Zyuxing](https://discuss.elastic.co/u/Zyuxing)\
**Replies:** 4\
**Last updated:** [April 28, 2019, 12:18pm UTC](https://discuss.elastic.co/t/java-lang-nosuchmethoderror-org-elasticsearch-action-index-indexrequest-ifseqno-j/176881 "2019-04-28T12:18:17Z")

</div>

在我使用elasticsearch-rest-high-level-client7.0版本连接elasticsearch7.0的时候使用官网提供的示例： IndexRequest indexRequest = new IndexRequest("pubmed2","\_doc","2").source(jsonMap); var indexResponse = restHighLevelClient.index(indexReques…

---

## [Elasticsearch abortion in docker for MacOS](https://discuss.elastic.co/t/elasticsearch-abortion-in-docker-for-macos/178775)

<div class="topic-metadata">

**Author:** [@vogel](https://discuss.elastic.co/u/vogel)\
**Replies:** 2\
**Last updated:** [April 28, 2019, 9:38am UTC](https://discuss.elastic.co/t/elasticsearch-abortion-in-docker-for-macos/178775 "2019-04-28T09:38:41Z")

</div>

I'm running ealsticsearch 7.0.0 in docker. But the elasticsearch container always terminates just after I start it. I've configured docker as what official reference said. $ screen ~/Library/Containers/com.docker.docke…

---

## [Elasticsearch active is running but port 9200 doesn't listen](https://discuss.elastic.co/t/elasticsearch-active-is-running-but-port-9200-doesnt-listen/178745)

<div class="topic-metadata">

**Author:** [@Nguyen\_Hieu](https://discuss.elastic.co/u/Nguyen_Hieu)\
**Replies:** 8\
**Last updated:** [April 28, 2019, 8:32am UTC](https://discuss.elastic.co/t/elasticsearch-active-is-running-but-port-9200-doesnt-listen/178745 "2019-04-28T08:32:04Z")

</div>

Hi everyone, I start elasticsearch and check status, it's running. But when I use curl to access, I receive an message: Connection refused. Here is my code when I check in command line: root@hieu: ser…

---

## [Elastic search in openshift data problem](https://discuss.elastic.co/t/elastic-search-in-openshift-data-problem/178788)

<div class="topic-metadata">

**Author:** [@ZrytyAHD](https://discuss.elastic.co/u/ZrytyAHD)\
**Replies:** 0\
**Last updated:** [April 28, 2019, 8:13am UTC](https://discuss.elastic.co/t/elastic-search-in-openshift-data-problem/178788 "2019-04-28T08:13:35Z")

</div>

Hello, I try to deploy Elastic Search but i need to know which type of storage choose. I got glusterfs deployed already but in documentation is not recomended storage for ES. Can you provide me which type use. I try to…

---

## [Elk capacity](https://discuss.elastic.co/t/elk-capacity/178781)

<div class="topic-metadata">

**Author:** [@lokmanopt](https://discuss.elastic.co/u/lokmanopt)\
**Replies:** 1\
**Last updated:** [April 28, 2019, 5:35am UTC](https://discuss.elastic.co/t/elk-capacity/178781 "2019-04-28T05:35:05Z")

</div>

Hi, I want to know how much data handle of ELK, I have 4 firewalls & 150 routers I want to add in elk but you know the firewall generated much more event. If I will add all device in ELK then ELK handles all event at th…

---

## [Need shorter Elasticsearch endpoint URL](https://discuss.elastic.co/t/need-shorter-elasticsearch-endpoint-url/178771)

<div class="topic-metadata">

**Author:** [@tpmccallum](https://discuss.elastic.co/u/tpmccallum)\
**Replies:** 1\
**Last updated:** [April 28, 2019, 1:37am UTC](https://discuss.elastic.co/t/need-shorter-elasticsearch-endpoint-url/178771 "2019-04-28T01:37:43Z")

</div>

I am getting the following error when using Amazon Elasticsearch UnicodeError: encoding with 'idna' codec failed (UnicodeError: label empty or too long) The Amazon Endpoint URL is super long and I believe that this is …

---

## [Elasticsearch box\_type switch from hot to warm automatically](https://discuss.elastic.co/t/elasticsearch-box-type-switch-from-hot-to-warm-automatically/178177)

<div class="topic-metadata">

**Author:** [@kaojunsong](https://discuss.elastic.co/u/kaojunsong)\
**Replies:** 1\
**Last updated:** [April 28, 2019, 1:04am UTC](https://discuss.elastic.co/t/elasticsearch-box-type-switch-from-hot-to-warm-automatically/178177 "2019-04-28T01:04:16Z")

</div>

hi, I am using Elasticsearch 6.2.4, and I migrate some historical data from old cluster to a new one.The historical data would not be used recently,so I set box\_type to warm. But after I migrate the data to the new cl…

---

## [Collecting Logs](https://discuss.elastic.co/t/collecting-logs/178761)

<div class="topic-metadata">

**Author:** [@Kajol\_Nimesh](https://discuss.elastic.co/u/Kajol_Nimesh)\
**Replies:** 0\
**Last updated:** [April 27, 2019, 4:13pm UTC](https://discuss.elastic.co/t/collecting-logs/178761 "2019-04-27T16:13:13Z")

</div>

Hi there, I have an question, Actually I want to send logs of my client system to the server. I want to know that can I do it with logstash and elasticsearch only or do I need ngnix to reverse the proxy, so elasticsearc…

---

## [Geo points lat/lon](https://discuss.elastic.co/t/geo-points-lat-lon/178759)

<div class="topic-metadata">

**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\
**Replies:** 3\
**Last updated:** [April 27, 2019, 9:35pm UTC](https://discuss.elastic.co/t/geo-points-lat-lon/178759 "2019-04-27T21:35:59Z")

</div>

I have data which is mapped with: "location" : { "properties" : { "lon" : { "type" : "long" }, "lat" : { "ty…

---

## [Elasticsearch integrated with Google Map Clustering Marker (Aggregate Geolocation)](https://discuss.elastic.co/t/elasticsearch-integrated-with-google-map-clustering-marker-aggregate-geolocation/178760)

<div class="topic-metadata">

**Author:** [@LinJIngYun](https://discuss.elastic.co/u/LinJIngYun)\
**Replies:** 0\
**Last updated:** [April 27, 2019, 4:00pm UTC](https://discuss.elastic.co/t/elasticsearch-integrated-with-google-map-clustering-marker-aggregate-geolocation/178760 "2019-04-27T16:00:37Z")

</div>

Hello everyone now I use Elasticsearch 7.0, I try to aggregate the data from people this area and show it in elastic search for the example; I can zoom in-out in the Google Map API on my Frontend website and when the mar…

---

## [How are Geo Querys working in Elasticsearch?](https://discuss.elastic.co/t/how-are-geo-querys-working-in-elasticsearch/178660)

<div class="topic-metadata">

**Author:** [@gemo1011](https://discuss.elastic.co/u/gemo1011)\
**Replies:** 2\
**Last updated:** [April 27, 2019, 12:10pm UTC](https://discuss.elastic.co/t/how-are-geo-querys-working-in-elasticsearch/178660 "2019-04-27T12:10:36Z")

</div>

Hello, I’m currently writing my master thesis about the the geo functionalities of Elasticsearch. I’m testing the geo querys and compare them to PostGIS. For this purpose I’m trying to understand how this querys work. I…

---

## [5 node cluster setup for elk](https://discuss.elastic.co/t/5-node-cluster-setup-for-elk/178740)

<div class="topic-metadata">

**Author:** [@unmil](https://discuss.elastic.co/u/unmil)\
**Replies:** 1\
**Last updated:** [April 27, 2019, 10:11am UTC](https://discuss.elastic.co/t/5-node-cluster-setup-for-elk/178740 "2019-04-27T10:11:56Z")

</div>

Hello, So, I have 5 nodes available of RHEL, I have to setup ELK as cluster on these nodes, I did this before with 2 masters, 3 data nodes, with each master will have logstash and kibana. What happened was the cluster…

---

## [Filter over dynamic nested fields with aggregation](https://discuss.elastic.co/t/filter-over-dynamic-nested-fields-with-aggregation/178513)

<div class="topic-metadata">

**Author:** [@DenisAlliswell](https://discuss.elastic.co/u/DenisAlliswell)\
**Replies:** 4\
**Last updated:** [April 26, 2019, 8:23pm UTC](https://discuss.elastic.co/t/filter-over-dynamic-nested-fields-with-aggregation/178513 "2019-04-26T20:23:14Z")

</div>

I have products with dynamic attributes (filters). I need to get dynamically counts for each value for the filter according to the search query. I have following mapping for products index: { "products":{ …

---

## [Bulk update caused DocumentMissing after Bulk Insert](https://discuss.elastic.co/t/bulk-update-caused-documentmissing-after-bulk-insert/176808)

<div class="topic-metadata">

**Author:** [@Zt\_Zeng](https://discuss.elastic.co/u/Zt_Zeng)\
**Replies:** 6\
**Last updated:** [April 27, 2019, 5:17am UTC](https://discuss.elastic.co/t/bulk-update-caused-documentmissing-after-bulk-insert/176808 "2019-04-27T05:17:42Z")

</div>

I am working on a tool which sync change from MySQL to ES. When I am testing the tool, I find some thing that can't understand. Then following is some log: # bulk insert about 100 docs 2019-04-14 11:16:26,049 index {\[te…

---

## [Pipeline Foreach "\[processors\] required property is missing",](https://discuss.elastic.co/t/pipeline-foreach-processors-required-property-is-missing/178716)

<div class="topic-metadata">

**Author:** [@PeterPain](https://discuss.elastic.co/u/PeterPain)\
**Replies:** 1\
**Last updated:** [April 26, 2019, 11:50pm UTC](https://discuss.elastic.co/t/pipeline-foreach-processors-required-property-is-missing/178716 "2019-04-26T23:50:46Z")

</div>

Hey there I started with the Foreach processor for pipelines today. Went through the Documentation and i tried it out using the Console in Kibana Doc: https://www.elastic.co/guide/en/elasticsearch/reference/current/for…

---

## [Elastic cluster fell](https://discuss.elastic.co/t/elastic-cluster-fell/178728)

<div class="topic-metadata">

**Author:** [@Igor\_Beltek](https://discuss.elastic.co/u/Igor_Beltek)\
**Replies:** 0\
**Last updated:** [April 26, 2019, 10:02pm UTC](https://discuss.elastic.co/t/elastic-cluster-fell/178728 "2019-04-26T22:02:56Z")

</div>

Hello, community, I'm new here and I need help My elastic cluster (elasticsearch-5.6.10 )fell with an error: \[2019-04-26T22:47:08,882\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[front18\] \[gc\]\[1830096\] overhead, spent \[269ms…

---

## [Master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster, and \[cluster.initial\_master\_nodes\] is empty on this node](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-and-cluster-initial-master-nodes-is-empty-on-this-node/177649)

<div class="topic-metadata">

**Author:** [@meiyuan](https://discuss.elastic.co/u/meiyuan)\
**Replies:** 14\
**Last updated:** [April 26, 2019, 8:47pm UTC](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-and-cluster-initial-master-nodes-is-empty-on-this-node/177649 "2019-04-26T20:47:08Z")

</div>

Hi, we just moved to Elasticseach 7.0.0. We're running into issues shown as below: \[2019-04-18T00:02:49,213\]\[WARN \]\[o.e.c.c.ClusterFormationFailureHelper\] \[dev-efk-backend03\] master not discovered yet, this node has no…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1316)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1318)
