# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1337 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1338 --- ## [No improvement in query timings after improved mapping](https://discuss.elastic.co/t/no-improvement-in-query-timings-after-improved-mapping/176148)
**Author:** [@Praneet\_Khandelwal](https://discuss.elastic.co/u/Praneet_Khandelwal)\ **Replies:** 0\ **Last updated:** [April 10, 2019, 6:52am UTC](https://discuss.elastic.co/t/no-improvement-in-query-timings-after-improved-mapping/176148 "2019-04-10T06:52:56Z")
I currently have an index pattern in ES which has around 6k fields indexed (because the "dynamic" was set to true). As an enhancement, I created a new index pattern with around only 70 fields indexed in the mapping and … --- ## [Blocked by: \[SERVICE\_UNAVAILABLE/1/state not recovered / initialized\]](https://discuss.elastic.co/t/blocked-by-service-unavailable-1-state-not-recovered-initialized/174210)
**Author:** [@sblancocr](https://discuss.elastic.co/u/sblancocr)\ **Replies:** 7\ **Last updated:** [April 10, 2019, 6:37am UTC](https://discuss.elastic.co/t/blocked-by-service-unavailable-1-state-not-recovered-initialized/174210 "2019-04-10T06:37:14Z")
Hi... I have a Elastic with 8 nodes (2 client, 3 master, 3 data) and when i ask the healt the system showme: \[root@log-elasticsearch-client-01 elasticsearch\]# curl -X GET 'http://log-elasticsearch-client-01.alpha.ci.u… --- ## [How to stop \[System\]\[syslog\] kibana log in filebeat or kibana](https://discuss.elastic.co/t/how-to-stop-system-syslog-kibana-log-in-filebeat-or-kibana/175985)
**Author:** [@vinodh023](https://discuss.elastic.co/u/vinodh023)\ **Replies:** 0\ **Last updated:** [April 9, 2019, 8:51am UTC](https://discuss.elastic.co/t/how-to-stop-system-syslog-kibana-log-in-filebeat-or-kibana/175985 "2019-04-09T08:51:58Z")
In my kibana dashboard I am getting system log like : \[System\]\[syslog\] kibana - {"type":"response","@timestamp":"2019-04-09T08:36:08Z","tags":,"pid":1371,"method":"post","statusCode":200,"req":{"url":"/api/infra/graphql… --- ## [Elasticsearch gmail config works in windows fails in MAC](https://discuss.elastic.co/t/elasticsearch-gmail-config-works-in-windows-fails-in-mac/175737)
**Author:** [@vkank](https://discuss.elastic.co/u/vkank)\ **Replies:** 6\ **Last updated:** [April 10, 2019, 6:33am UTC](https://discuss.elastic.co/t/elasticsearch-gmail-config-works-in-windows-fails-in-mac/175737 "2019-04-10T06:33:19Z")
I am new to ElasticSearch. My email configurations are working in Windows but same config fails on MAC (Or Ubuntu). My ElasticSearch.yml: xpack.license.self\_generated.type: basic xpack.security.enabled: false xpack.not… --- ## [Basic and Trail Licence](https://discuss.elastic.co/t/basic-and-trail-licence/176120)
**Author:** [@huzefabootwala](https://discuss.elastic.co/u/huzefabootwala)\ **Replies:** 4\ **Last updated:** [April 10, 2019, 5:55am UTC](https://discuss.elastic.co/t/basic-and-trail-licence/176120 "2019-04-10T05:55:26Z")
Hello, I am using Elastic search 6.7.1 on my local machine for testing. Have configured xpack security by upgrading to Trail licence for 30 days. What if I need xpack security on our production? Do I need to purchase … --- ## [Elasticsearch Service won't active long](https://discuss.elastic.co/t/elasticsearch-service-wont-active-long/175965)
**Author:** [@levi\_munthe](https://discuss.elastic.co/u/levi_munthe)\ **Replies:** 4\ **Last updated:** [April 10, 2019, 5:02am UTC](https://discuss.elastic.co/t/elasticsearch-service-wont-active-long/175965 "2019-04-10T05:02:44Z")
I start elasticsearch service on centos 7, but a few second after it active, it turn deactive and status = 1 / failure. \<\> log \<\> --- ## [Couldn't connect to elasticsearch remotely](https://discuss.elastic.co/t/couldnt-connect-to-elasticsearch-remotely/175981)
**Author:** [@srimathi](https://discuss.elastic.co/u/srimathi)\ **Replies:** 5\ **Last updated:** [April 10, 2019, 3:34am UTC](https://discuss.elastic.co/t/couldnt-connect-to-elasticsearch-remotely/175981 "2019-04-10T03:34:41Z")
Hi All, I'm new to Elasticsearch. I've installed elasticsearch 6.7.0 on Centos6.9. It is a single cluster node. I can successfully curl it on same machine. curl -XGET "http://xxx.xxx.xx.xx:9200" I get the following resu… --- ## [ERROR: X-Pack Security is disabled by configuration](https://discuss.elastic.co/t/error-x-pack-security-is-disabled-by-configuration/175497)
**Author:** [@huzefabootwala](https://discuss.elastic.co/u/huzefabootwala)\ **Replies:** 7\ **Last updated:** [April 9, 2019, 11:26pm UTC](https://discuss.elastic.co/t/error-x-pack-security-is-disabled-by-configuration/175497 "2019-04-09T23:26:34Z")
Hello, I have installed Elastic Search version number 6.5.4. It says xpack is available by default in this version. I have upgraded from Basic Licence to Trial Licence but I am not able to get xpack running. It gives… --- ## [ServiceNow integration](https://discuss.elastic.co/t/servicenow-integration/176029)
**Author:** [@Richard899](https://discuss.elastic.co/u/Richard899)\ **Replies:** 1\ **Last updated:** [April 9, 2019, 10:37pm UTC](https://discuss.elastic.co/t/servicenow-integration/176029 "2019-04-09T22:37:38Z")
Hey, We’re using ELK Stack 6.3 to visualize/analyse different kind of logs in our company. Now, we would need to raise a ticket in ServiceNow if there are any warnings or critical messages in the logs. Is there anyway … --- ## [Elasticsearch and jvm version](https://discuss.elastic.co/t/elasticsearch-and-jvm-version/176109)
**Author:** [@stevemw](https://discuss.elastic.co/u/stevemw)\ **Replies:** 1\ **Last updated:** [April 9, 2019, 10:34pm UTC](https://discuss.elastic.co/t/elasticsearch-and-jvm-version/176109 "2019-04-09T22:34:58Z")
When I built the clusters I currently manage, we installed java 8 (we are running es 6.6.2 on Ubuntu 18.04). My Dev team is telling me that Java version above 9 have particular improvements in the GC and I should upgrade… --- ## [How to query special characters](https://discuss.elastic.co/t/how-to-query-special-characters/176114)
**Author:** [@samyamoy](https://discuss.elastic.co/u/samyamoy)\ **Replies:** 0\ **Last updated:** [April 9, 2019, 9:52pm UTC](https://discuss.elastic.co/t/how-to-query-special-characters/176114 "2019-04-09T21:52:06Z")
Hi, I have been trying to search for a full match for "D&H" as a string from website content dumps but the results I have been getting do not seem to have the result at all. what is the correct way of querying? I have t… --- ## [\[SERVICE\_UNAVAILABLE/1/state not recovered / initialized\]](https://discuss.elastic.co/t/service-unavailable-1-state-not-recovered-initialized/175913)
**Author:** [@sblancocr](https://discuss.elastic.co/u/sblancocr)\ **Replies:** 0\ **Last updated:** [April 8, 2019, 8:09pm UTC](https://discuss.elastic.co/t/service-unavailable-1-state-not-recovered-initialized/175913 "2019-04-08T20:09:49Z")
Hello I have installed an Elasticsearch 6.2.2 cluster but it shows up in red when I check its health status \[root@log-elasticsearch-client-01 cigestion\]# curl -X GET 'http://log-elasticsearch-client-01.alpha.ci.ucr.ac.… --- ## [First time elasticizing, need some guidance. (Making a searchable PDF repository)](https://discuss.elastic.co/t/first-time-elasticizing-need-some-guidance-making-a-searchable-pdf-repository/176082)
**Author:** [@gbh2](https://discuss.elastic.co/u/gbh2)\ **Replies:** 3\ **Last updated:** [April 9, 2019, 6:56pm UTC](https://discuss.elastic.co/t/first-time-elasticizing-need-some-guidance-making-a-searchable-pdf-repository/176082 "2019-04-09T18:56:13Z")
I am using C# to populate an Elastic node with searchable PDF data. I'm using Elastic.Net to do so. Any guidance on how to do this, or where to start with a tutorial, would be greatly appreciated. I have the PDF content… --- ## [KIbana 6.7.1 monitoring appears to show Primary shards white instead of the right color](https://discuss.elastic.co/t/kibana-6-7-1-monitoring-appears-to-show-primary-shards-white-instead-of-the-right-color/176083)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 1\ **Last updated:** [April 9, 2019, 6:33pm UTC](https://discuss.elastic.co/t/kibana-6-7-1-monitoring-appears-to-show-primary-shards-white-instead-of-the-right-color/176083 "2019-04-09T18:33:45Z")
Has anyone else noticed this? It was a little confusing, but I think it's just using the wrong color. --- ## [What's the downside of making all data nodes master eligible](https://discuss.elastic.co/t/whats-the-downside-of-making-all-data-nodes-master-eligible/175495)
**Author:** [@riches](https://discuss.elastic.co/u/riches)\ **Replies:** 6\ **Last updated:** [April 9, 2019, 6:10pm UTC](https://discuss.elastic.co/t/whats-the-downside-of-making-all-data-nodes-master-eligible/175495 "2019-04-09T18:10:39Z")
I understand it's recommended to configure 3 dedicated master nodes. I'm curious what's the downside of making all N, N \> 3, nodes both data nodes and master eligible in practice? One I can think of is that the elected … --- ## [Contributing to Elastic Search on Github](https://discuss.elastic.co/t/contributing-to-elastic-search-on-github/176079)
**Author:** [@Vivek-Dh](https://discuss.elastic.co/u/Vivek-Dh)\ **Replies:** 0\ **Last updated:** [April 9, 2019, 5:49pm UTC](https://discuss.elastic.co/t/contributing-to-elastic-search-on-github/176079 "2019-04-09T17:49:53Z")
Hello everyone, I am trying to setup the ElasticSearch environment in my system to start contributing to the Github repo. I have been following the steps in Contributing.MD and I am facing an error when i ran "./gradlew… --- ## [Composite date aggregation not consistent](https://discuss.elastic.co/t/composite-date-aggregation-not-consistent/172666)
**Author:** [@morlokdk](https://discuss.elastic.co/u/morlokdk)\ **Replies:** 1\ **Last updated:** [April 9, 2019, 3:35pm UTC](https://discuss.elastic.co/t/composite-date-aggregation-not-consistent/172666 "2019-04-09T15:35:54Z")
Hi, i using elastic 6.3.2 and have issue with date\_aggregation and timezones This is me aggregation "aggs": { "histograms2": { "date\_histogram": { "field": "createdAt", "interval": "hour", "form… --- ## [Updating docs in multiple indices](https://discuss.elastic.co/t/updating-docs-in-multiple-indices/176023)
**Author:** [@Pottendla\_Nagma](https://discuss.elastic.co/u/Pottendla_Nagma)\ **Replies:** 1\ **Last updated:** [April 9, 2019, 1:08pm UTC](https://discuss.elastic.co/t/updating-docs-in-multiple-indices/176023 "2019-04-09T13:08:33Z")
How to create and handle data in multiple indexes simultaneously through java or kibana. If i am updating one index data the other should also be updated. Please help me out --- ## [NodeDisconnect Exception](https://discuss.elastic.co/t/nodedisconnect-exception/175936)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 3\ **Last updated:** [April 9, 2019, 1:02pm UTC](https://discuss.elastic.co/t/nodedisconnect-exception/175936 "2019-04-09T13:02:15Z")
I see whole load of below exceptions in the log. May i know what could be causing this issue ? tried to fail engine but could not acquire lock - engine should be failed by now \[primary shar d \[\[index\_1\]\[13\], node\[e\_\_dq… --- ## [Colon in search value](https://discuss.elastic.co/t/colon-in-search-value/176026)
**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\ **Replies:** 0\ **Last updated:** [April 9, 2019, 12:58pm UTC](https://discuss.elastic.co/t/colon-in-search-value/176026 "2019-04-09T12:58:36Z")
Hello, how should I write query with colon in search value? {"size":0,"\_source":\["attrs.from"\], "query":{"bool":{"must":\[ {"range":{"@timestamp":{"gte":1554792885000,"lte":1554814485000,"format":"epoch\_millis"}}}, {"… --- ## [AD authentication not working correctly](https://discuss.elastic.co/t/ad-authentication-not-working-correctly/176006)
**Author:** [@wiliamauc85](https://discuss.elastic.co/u/wiliamauc85)\ **Replies:** 2\ **Last updated:** [April 9, 2019, 12:42pm UTC](https://discuss.elastic.co/t/ad-authentication-not-working-correctly/176006 "2019-04-09T12:42:58Z")
Hi, I'm trying out AD authentication and managed to get it working when I map a group to the superuser role, however when i create a new mapping and map it to a role that has less privileges, i always get the following … --- ## [My filebeat registry file has no data i.e "empty/\[\]"](https://discuss.elastic.co/t/my-filebeat-registry-file-has-no-data-i-e-empty/175998)
**Author:** [@sunil0706.nayak](https://discuss.elastic.co/u/sunil0706.nayak)\ **Replies:** 1\ **Last updated:** [April 9, 2019, 12:27pm UTC](https://discuss.elastic.co/t/my-filebeat-registry-file-has-no-data-i-e-empty/175998 "2019-04-09T12:27:14Z")
Hi Team, I want to process the log file using filebeat and dump into the elasticsearch. filebeat.yml entries : filebeat.inputs: Each - is an input. Most options can be set at the input level, so you can use different… --- ## [Failed to create valid geo\_shape](https://discuss.elastic.co/t/failed-to-create-valid-geo-shape/175975)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 10\ **Last updated:** [April 9, 2019, 12:17pm UTC](https://discuss.elastic.co/t/failed-to-create-valid-geo-shape/175975 "2019-04-09T12:17:59Z")
Appreciate if someone can shed some light on why ES complains about the seemingly valid geo\_shape I'm trying to create. The question has been asked on SO (Discuss whined about the length of the body) Thank you very … --- ## [Cluster config not working](https://discuss.elastic.co/t/cluster-config-not-working/175740)
**Author:** [@haux](https://discuss.elastic.co/u/haux)\ **Replies:** 1\ **Last updated:** [April 9, 2019, 12:17pm UTC](https://discuss.elastic.co/t/cluster-config-not-working/175740 "2019-04-09T12:17:56Z")
Hi, Trying to setup two ES clusters: "cluster1" & "cluster2" (each cluster has one node), but both dockers crash after few seconds The first cluster: docker-compose.yml: version: '3.3' services: elasticsearch1: … --- ## [Multiple indices are indexing in sequence](https://discuss.elastic.co/t/multiple-indices-are-indexing-in-sequence/175462)
**Author:** [@suvarna](https://discuss.elastic.co/u/suvarna)\ **Replies:** 1\ **Last updated:** [April 9, 2019, 12:14pm UTC](https://discuss.elastic.co/t/multiple-indices-are-indexing-in-sequence/175462 "2019-04-09T12:14:19Z")
Hi I am using Rally's existing tracks to perform benchmarking. I noticed that nyc taxis is the largest track with 4.5GB compressed and 74.3 GB uncompressed docs. I want to test with larger data volume. I have used the … --- ## [Possible reason for \> 30% difference between iterations of geonames -\> painless\_static](https://discuss.elastic.co/t/possible-reason-for-30-difference-between-iterations-of-geonames-painless-static/174493)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 3\ **Last updated:** [April 9, 2019, 12:05pm UTC](https://discuss.elastic.co/t/possible-reason-for-30-difference-between-iterations-of-geonames-painless-static/174493 "2019-04-09T12:05:04Z")
During my task to compare performance between dockerized elasticsearch and running elasticsearch as native service / on shell, I discovered big fluctuation between the tests - when rerunning the same testset! First I co… --- ## [Is that possible to show testing progress while using esrallyd status?](https://discuss.elastic.co/t/is-that-possible-to-show-testing-progress-while-using-esrallyd-status/175042)
**Author:** [@Kevins\_Si](https://discuss.elastic.co/u/Kevins_Si)\ **Replies:** 1\ **Last updated:** [April 9, 2019, 11:40am UTC](https://discuss.elastic.co/t/is-that-possible-to-show-testing-progress-while-using-esrallyd-status/175042 "2019-04-09T11:40:27Z")
as title. is that possible to show testing progress while using esrallyd status??? such as : esrallyd status Running all xxxx current xxxxx current\_job\_progress \[ xxx \] Running all\_job 25 current\_job 12 current… --- ## [Rally: compare multiple races / compare in kibana?](https://discuss.elastic.co/t/rally-compare-multiple-races-compare-in-kibana/173047)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 6\ **Last updated:** [April 9, 2019, 11:38am UTC](https://discuss.elastic.co/t/rally-compare-multiple-races-compare-in-kibana/173047 "2019-04-09T11:38:09Z")
Hi all, I want to evaluate the impact of running elasticsearch as docker container instead of a classic / native installation. So I wanted to run and compare the external car of docker container and classic installatio… --- ## [Enriching data in index by data from another index](https://discuss.elastic.co/t/enriching-data-in-index-by-data-from-another-index/175802)
**Author:** [@jneuschl](https://discuss.elastic.co/u/jneuschl)\ **Replies:** 2\ **Last updated:** [April 9, 2019, 11:33am UTC](https://discuss.elastic.co/t/enriching-data-in-index-by-data-from-another-index/175802 "2019-04-09T11:33:50Z")
Hi guys, we have a need to enrich user data (e.g uid=19212012) coming from all applications to include additional data about user (e.g branch=xxx;region=yyy). At first we wanted to use static jdbc in logstash, but sec… --- ## [Lots of "cluster state update task \[zen-disco-receive(from master " above the warn threshold of 30s"](https://discuss.elastic.co/t/lots-of-cluster-state-update-task-zen-disco-receive-from-master-above-the-warn-threshold-of-30s/175961)
**Author:** [@shjdwxy](https://discuss.elastic.co/u/shjdwxy)\ **Replies:** 3\ **Last updated:** [April 9, 2019, 10:36am UTC](https://discuss.elastic.co/t/lots-of-cluster-state-update-task-zen-disco-receive-from-master-above-the-warn-threshold-of-30s/175961 "2019-04-09T10:36:38Z")
hi, We use ES for log management and ES cluster is built by hot-cold architecture. One physical host holds one hot node and one cold node. Hot node and cold node share Cpu, memory, but use different storage( ssd for hot… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1336) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1338)