# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1324 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1325 --- ## [Rollover + Single Index + mapping update =?](https://discuss.elastic.co/t/rollover-single-index-mapping-update/177868)
**Author:** [@rozling](https://discuss.elastic.co/u/rozling)\ **Replies:** 0\ **Last updated:** [April 22, 2019, 2:46pm UTC](https://discuss.elastic.co/t/rollover-single-index-mapping-update/177868 "2019-04-22T14:46:26Z")
Hi, We use Elasticsearch for logs, and we're currently: adopting the rollover pattern transitioning to a single index for all our services (versus the ~30 or so that we have currently) implementing ECS Rollover seems… --- ## [\[ERROR\]\[o.e.b.Bootstrap \] \[X.Y.Z\] Exception](https://discuss.elastic.co/t/error-o-e-b-bootstrap-x-y-z-exception/177340)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 4\ **Last updated:** [April 22, 2019, 2:38pm UTC](https://discuss.elastic.co/t/error-o-e-b-bootstrap-x-y-z-exception/177340 "2019-04-22T14:38:45Z")
Hello World! My environment: # cat /etc/redhat-release Red Hat Enterprise Linux Server release 7.6 (Maipo) # uname -a Linux X 3.10.0-957.5.1.el7.x86\_64 #1 SMP Wed Dec 19 10:46:58 EST 2018 x86\_64 x86\_64 x86\_64 GNU/Linu… --- ## [Elastic search 7.0 not setting up on windows server for local dev](https://discuss.elastic.co/t/elastic-search-7-0-not-setting-up-on-windows-server-for-local-dev/177865)
**Author:** [@atulrungta](https://discuss.elastic.co/u/atulrungta)\ **Replies:** 0\ **Last updated:** [April 22, 2019, 2:15pm UTC](https://discuss.elastic.co/t/elastic-search-7-0-not-setting-up-on-windows-server-for-local-dev/177865 "2019-04-22T14:15:06Z")
We were using Elastic search 6.7.1 on local windows server for development purpose. Today I tried to install 7.0.0 on same server and it was throwing issues. Every time I tried to restart service, it shuts down automatic… --- ## [Applying Fields Parsed From a Few Logs to Many Logs](https://discuss.elastic.co/t/applying-fields-parsed-from-a-few-logs-to-many-logs/175261)
**Author:** [@ShaqFanClub](https://discuss.elastic.co/u/ShaqFanClub)\ **Replies:** 4\ **Last updated:** [April 22, 2019, 12:59pm UTC](https://discuss.elastic.co/t/applying-fields-parsed-from-a-few-logs-to-many-logs/175261 "2019-04-22T12:59:48Z")
Hello! I am working with Nessus scan results, and have been using Logstash to parse out additional fields based on specific logs that are ingested. For example, a "mac\_address" field is parsed out IF the "name" field is… --- ## [Getting a "Login is disabled" error when trying to log in to elastic/kibana](https://discuss.elastic.co/t/getting-a-login-is-disabled-error-when-trying-to-log-in-to-elastic-kibana/177631)
**Author:** [@jmr317](https://discuss.elastic.co/u/jmr317)\ **Replies:** 2\ **Last updated:** [April 22, 2019, 1:17pm UTC](https://discuss.elastic.co/t/getting-a-login-is-disabled-error-when-trying-to-log-in-to-elastic-kibana/177631 "2019-04-22T13:17:18Z")
Login is currently disabled. Administrators should consult the Kibana logs for more details. Out of nowhere, Kibana and Elastic seem to have locked up on us. When we try to access kibana via the web ui, we get the abo… --- ## [Trouble getting Elasticsearch 7 to start with X-pack security enabled](https://discuss.elastic.co/t/trouble-getting-elasticsearch-7-to-start-with-x-pack-security-enabled/177850)
**Author:** [@bigdamhero](https://discuss.elastic.co/u/bigdamhero)\ **Replies:** 1\ **Last updated:** [April 22, 2019, 1:03pm UTC](https://discuss.elastic.co/t/trouble-getting-elasticsearch-7-to-start-with-x-pack-security-enabled/177850 "2019-04-22T13:03:26Z")
I feel like its something to do with the way the Java is bundled with the install. I have tried to find some doc on how to direct elasticsearch to use the java I have installed in the os. I try to start Elasticsearch a… --- ## [Alias field not working](https://discuss.elastic.co/t/alias-field-not-working/177328)
**Author:** [@jvolpi](https://discuss.elastic.co/u/jvolpi)\ **Replies:** 2\ **Last updated:** [April 22, 2019, 12:54pm UTC](https://discuss.elastic.co/t/alias-field-not-working/177328 "2019-04-22T12:54:33Z")
Hello everyone, i'm having an issue: When i create an alias field linking to an existing field, it creates succesfully but has no value. I create the field in the following manner: "deviceID": { "type": "alias", … --- ## [Grouping by similarity](https://discuss.elastic.co/t/grouping-by-similarity/177774)
**Author:** [@Ozymandy](https://discuss.elastic.co/u/Ozymandy)\ **Replies:** 5\ **Last updated:** [April 22, 2019, 12:51pm UTC](https://discuss.elastic.co/t/grouping-by-similarity/177774 "2019-04-22T12:51:35Z")
Hi. I've faced with a challenge in elasticsearch. I have an index which has many similar documents. It can be detected by more like this query. So I wanted somehow group these similar documents during querying. For examp… --- ## [Elastic search query for multiple term usage](https://discuss.elastic.co/t/elastic-search-query-for-multiple-term-usage/177849)
**Author:** [@rmanju2020](https://discuss.elastic.co/u/rmanju2020)\ **Replies:** 0\ **Last updated:** [April 22, 2019, 12:34pm UTC](https://discuss.elastic.co/t/elastic-search-query-for-multiple-term-usage/177849 "2019-04-22T12:34:20Z")
Hi, Its regarding elasticdump tool.I have required to output the result in a file with filters. elasticdump --input=http://localhost:9200/2\_logmon\_eventlog-2019\_04\_22 --output="C:\\2\_logmon\_eventlog-2019\_04\_22\_\_2019… --- ## [What are different subscription available in ES 5.5.2](https://discuss.elastic.co/t/what-are-different-subscription-available-in-es-5-5-2/177825)
**Author:** [@rahulka](https://discuss.elastic.co/u/rahulka)\ **Replies:** 13\ **Last updated:** [April 22, 2019, 12:02pm UTC](https://discuss.elastic.co/t/what-are-different-subscription-available-in-es-5-5-2/177825 "2019-04-22T12:02:13Z")
Hi, We are planning to use ES 5.5.2 version. Can you help me understand different subscription available for this release. Information about latest one is already available on the internet site. --- ## [Which side of CAP theorem Elasticsearch satisfy?](https://discuss.elastic.co/t/which-side-of-cap-theorem-elasticsearch-satisfy/177810)
**Author:** [@adnanbutt050](https://discuss.elastic.co/u/adnanbutt050)\ **Replies:** 1\ **Last updated:** [April 22, 2019, 11:52am UTC](https://discuss.elastic.co/t/which-side-of-cap-theorem-elasticsearch-satisfy/177810 "2019-04-22T11:52:12Z")
Hello Everyone, I hope everyone is fine, I'm new to this Elasticsearch and I just wanted to know which side of CAP theorem Elasticsearch satisfy?. I am very thankful to you. Kind Regards, adnan --- ## [How to add nodes to cluster through source code](https://discuss.elastic.co/t/how-to-add-nodes-to-cluster-through-source-code/173716)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 5\ **Last updated:** [April 22, 2019, 9:51am UTC](https://discuss.elastic.co/t/how-to-add-nodes-to-cluster-through-source-code/173716 "2019-04-22T09:51:21Z")
I want to add a node to my cluster(currently single node),but i want to add a node through source code. Which file i should look into. --- ## [OnPremise installation: Upgrade from Basic to Gold or Platinum (5.5.2)](https://discuss.elastic.co/t/onpremise-installation-upgrade-from-basic-to-gold-or-platinum-5-5-2/177827)
**Author:** [@rahulka](https://discuss.elastic.co/u/rahulka)\ **Replies:** 4\ **Last updated:** [April 22, 2019, 9:39am UTC](https://discuss.elastic.co/t/onpremise-installation-upgrade-from-basic-to-gold-or-platinum-5-5-2/177827 "2019-04-22T09:39:58Z")
How can i upgrade my free or basic Elastic Search installation to either gold or platinum. I believe when we talk about in ES/Kibana (Costing and features prespective) we have X-pack Gold or Platinum license till now… --- ## [Lots of disconnected logs and then OOM](https://discuss.elastic.co/t/lots-of-disconnected-logs-and-then-oom/177758)
**Author:** [@shjdwxy](https://discuss.elastic.co/u/shjdwxy)\ **Replies:** 3\ **Last updated:** [April 22, 2019, 9:17am UTC](https://discuss.elastic.co/t/lots-of-disconnected-logs-and-then-oom/177758 "2019-04-22T09:17:06Z")
hi, ES version: 5.4.3 java version: 1.8.0\_162 ES cluster: 3 dedicated master, 7 hot datanode, 14 cold datanode, 31GB heap for each node 9,425 indices and 23000 shards ES cluster was running normally. But one node s… --- ## [Update mapping is throttled while update index templates?](https://discuss.elastic.co/t/update-mapping-is-throttled-while-update-index-templates/177257)
**Author:** [@Todd](https://discuss.elastic.co/u/Todd)\ **Replies:** 6\ **Last updated:** [April 22, 2019, 9:13am UTC](https://discuss.elastic.co/t/update-mapping-is-throttled-while-update-index-templates/177257 "2019-04-22T09:13:45Z")
Hi! when I update a lot of index templates, there are some data indexed into a new Index Index-a,so Index-a need to update mapping, but from the master node log, I found a lot of log like: \[2019-04-17T17:32:48,271\]\[DEB… --- ## [\[Elasticsearch\]Java High Level REST Client](https://discuss.elastic.co/t/elasticsearch-java-high-level-rest-client/177820)
**Author:** [@hyhong](https://discuss.elastic.co/u/hyhong)\ **Replies:** 0\ **Last updated:** [April 22, 2019, 8:32am UTC](https://discuss.elastic.co/t/elasticsearch-java-high-level-rest-client/177820 "2019-04-22T08:32:10Z")
How to create thread pools according to different users with Java High Level REST Client? --- ## [How get top compound words from text in elasticsearch?](https://discuss.elastic.co/t/how-get-top-compound-words-from-text-in-elasticsearch/177815)
**Author:** [@Osama\_Rasheed](https://discuss.elastic.co/u/Osama_Rasheed)\ **Replies:** 0\ **Last updated:** [April 22, 2019, 8:09am UTC](https://discuss.elastic.co/t/how-get-top-compound-words-from-text-in-elasticsearch/177815 "2019-04-22T08:09:57Z")
I need to get top terms from elasticsearch, currently we are using significant terms functionality provided by elasticsearch but in our case we need multiple words which come frequently and significantly together. Pleas… --- ## [Indexing eml File](https://discuss.elastic.co/t/indexing-eml-file/177791)
**Author:** [@vaibhav8600](https://discuss.elastic.co/u/vaibhav8600)\ **Replies:** 4\ **Last updated:** [April 22, 2019, 7:46am UTC](https://discuss.elastic.co/t/indexing-eml-file/177791 "2019-04-22T07:46:08Z")
i am Trying to index eml file can anybody help me ... how to index eml file....? --- ## [Force Merge Segments - Avoid Throttling](https://discuss.elastic.co/t/force-merge-segments-avoid-throttling/177020)
**Author:** [@dbakti7](https://discuss.elastic.co/u/dbakti7)\ **Replies:** 2\ **Last updated:** [April 22, 2019, 7:38am UTC](https://discuss.elastic.co/t/force-merge-segments-avoid-throttling/177020 "2019-04-22T07:38:06Z")
Is there any way to disable throttling that happens upon invoking force merge segments? I can't find any API in documentation to avoid this throttling logic. --- ## [Nested aggregation prints different value than I expected](https://discuss.elastic.co/t/nested-aggregation-prints-different-value-than-i-expected/177804)
**Author:** [@b73048dd6c58ce804425](https://discuss.elastic.co/u/b73048dd6c58ce804425)\ **Replies:** 0\ **Last updated:** [April 22, 2019, 6:39am UTC](https://discuss.elastic.co/t/nested-aggregation-prints-different-value-than-i-expected/177804 "2019-04-22T06:39:59Z")
Hello. I'm stuck on the nested aggregation problem, and need your help. In my examples, there are two 'volunteer' documents, and they have five, two nested documents each. I want to give equally divided score to each … --- ## [Kibana state shange to red](https://discuss.elastic.co/t/kibana-state-shange-to-red/177219)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 2\ **Last updated:** [April 20, 2019, 4:05am UTC](https://discuss.elastic.co/t/kibana-state-shange-to-red/177219 "2019-04-20T04:05:23Z")
hi all, I have a cluster with three nodes (235, 236 ,237) on windows; kibana installed in all three servers so that each kibana connects to elasticsearch of its server. sometimes the state of kibana changes from green… --- ## [Ways to access/request elasticsearch](https://discuss.elastic.co/t/ways-to-access-request-elasticsearch/177751)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 5\ **Last updated:** [April 22, 2019, 5:22am UTC](https://discuss.elastic.co/t/ways-to-access-request-elasticsearch/177751 "2019-04-22T05:22:51Z")
Hi, Is there any other ways to send request to elasticsearch other than through 9200 port. Thanks. --- ## [How to config esrally to benchmark transport ssl settings with pem cert?](https://discuss.elastic.co/t/how-to-config-esrally-to-benchmark-transport-ssl-settings-with-pem-cert/177793)
**Author:** [@Kevins\_Si](https://discuss.elastic.co/u/Kevins_Si)\ **Replies:** 0\ **Last updated:** [April 22, 2019, 4:51am UTC](https://discuss.elastic.co/t/how-to-config-esrally-to-benchmark-transport-ssl-settings-with-pem-cert/177793 "2019-04-22T04:51:15Z")
i want to benchmark a existing cluster with transport ssl settings. but can not find the right ways to do that . --- ## [How to merge shareds in elasticsearch](https://discuss.elastic.co/t/how-to-merge-shareds-in-elasticsearch/177638)
**Author:** [@Abdul\_Jaleel](https://discuss.elastic.co/u/Abdul_Jaleel)\ **Replies:** 2\ **Last updated:** [April 22, 2019, 4:31am UTC](https://discuss.elastic.co/t/how-to-merge-shareds-in-elasticsearch/177638 "2019-04-22T04:31:39Z")
My cluster status returns as follows, { "\_nodes": { "total": 1, "successful": 1, "failed": 0 }, "cluster\_name": "elasticsearch", "timestamp": 1555593693195, "status": "yellow", "indices": { "count": 15, "sha… --- ## [Java HotSpot(TM) 64-Bit Server VM warning: Cannot open file logs/gc.log due to Permission denied](https://discuss.elastic.co/t/java-hotspot-tm-64-bit-server-vm-warning-cannot-open-file-logs-gc-log-due-to-permission-denied/177780)
**Author:** [@Maesuri\_Fauziah](https://discuss.elastic.co/u/Maesuri_Fauziah)\ **Replies:** 4\ **Last updated:** [April 22, 2019, 4:25am UTC](https://discuss.elastic.co/t/java-hotspot-tm-64-bit-server-vm-warning-cannot-open-file-logs-gc-log-due-to-permission-denied/177780 "2019-04-22T04:25:15Z")
I just learned about elasticsearch, and I was confused how to overcome the problems that I am currently experiencing. may I ask for help:menangis::berdoa: --- ## [Create routes for custom routing](https://discuss.elastic.co/t/create-routes-for-custom-routing/177786)
**Author:** [@bhavayAnand9](https://discuss.elastic.co/u/bhavayAnand9)\ **Replies:** 0\ **Last updated:** [April 22, 2019, 2:36am UTC](https://discuss.elastic.co/t/create-routes-for-custom-routing/177786 "2019-04-22T02:36:29Z")
Hi! I'm pretty new with elastic search and now exploring custom-routing, so I need a piece of advice. I need to create an index which will contain a field clientID and some related data with it. I want to create a custom… --- ## [Single search for multiple sites](https://discuss.elastic.co/t/single-search-for-multiple-sites/177784)
**Author:** [@digitalwise](https://discuss.elastic.co/u/digitalwise)\ **Replies:** 2\ **Last updated:** [April 22, 2019, 2:24am UTC](https://discuss.elastic.co/t/single-search-for-multiple-sites/177784 "2019-04-22T02:24:00Z")
We have a client that hired a design firm to move to a WordPress site. They are using Elasticsearch with the WordPress plug-in for the search for the new site. The client also has a few legacy apps that did not move in… --- ## [How to fix " Failed starting 'elasticsearch-service-x64' service"](https://discuss.elastic.co/t/how-to-fix-failed-starting-elasticsearch-service-x64-service/177367)
**Author:** [@benqxf](https://discuss.elastic.co/u/benqxf)\ **Replies:** 3\ **Last updated:** [April 21, 2019, 10:30pm UTC](https://discuss.elastic.co/t/how-to-fix-failed-starting-elasticsearch-service-x64-service/177367 "2019-04-21T22:30:25Z")
Trying to install the Elasticsearch + logstash + Kibana + Beats in Windows 10 64bit --.1 Installed Java Jdk 12 ok. --.2 Downloaded 'Windows sha' from Download Elasticsearch | Elastic --.3 Unzipped elasticsearch-7.0.… --- ## [Elastic search and IBM Qradar integration](https://discuss.elastic.co/t/elastic-search-and-ibm-qradar-integration/177772)
**Author:** [@John.s](https://discuss.elastic.co/u/John.s)\ **Replies:** 0\ **Last updated:** [April 21, 2019, 6:42pm UTC](https://discuss.elastic.co/t/elastic-search-and-ibm-qradar-integration/177772 "2019-04-21T18:42:26Z")
Hello Team, We are running IBM Qradar as our SIEM solution. But we are planning to add ELK stack as well for dashboard creation and some particular application review. Ours is a distributed environment , We have couple… --- ## [How can I split the value of field to “xxxxx” and then aggregate for this "xxxxx"](https://discuss.elastic.co/t/how-can-i-split-the-value-of-field-to-xxxxx-and-then-aggregate-for-this-xxxxx/177567)
**Author:** [@jaxma](https://discuss.elastic.co/u/jaxma)\ **Replies:** 5\ **Last updated:** [April 21, 2019, 3:13pm UTC](https://discuss.elastic.co/t/how-can-i-split-the-value-of-field-to-xxxxx-and-then-aggregate-for-this-xxxxx/177567 "2019-04-21T15:13:18Z")
Here is a demo : message: send alarm success, code:195, content:{"code":195,"ip":"172.16.92.22","desc":"\[dmp-custom-api\] reqId: \[2073d1ef3971ef2e\] 查询async-hbase异常 table: fraud:general\_feature\_m\_v2, rowKey: 8611890300904… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1323) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1325)