# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1342

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1343

---

## [\[ELK\] jstack doesn't produce results](https://discuss.elastic.co/t/elk-jstack-doesnt-produce-results/175478)

<div class="topic-metadata">

**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\
**Replies:** 2\
**Last updated:** [April 5, 2019, 9:07am UTC](https://discuss.elastic.co/t/elk-jstack-doesnt-produce-results/175478 "2019-04-05T09:07:21Z")

</div>

Hi there, I'm having some troubles with a server, part of a 3 nodes cluster in a production environment, running ELK 6.7 that goes out of memory. To do some troubleshooting I've tried to execute jstack -l pid to see h…

---

## [Setting up ES distributed architecture in different geographical locations. Need suggestions](https://discuss.elastic.co/t/setting-up-es-distributed-architecture-in-different-geographical-locations-need-suggestions/175548)

<div class="topic-metadata">

**Author:** [@maddysqlpro](https://discuss.elastic.co/u/maddysqlpro)\
**Replies:** 1\
**Last updated:** [April 5, 2019, 9:02am UTC](https://discuss.elastic.co/t/setting-up-es-distributed-architecture-in-different-geographical-locations-need-suggestions/175548 "2019-04-05T09:02:39Z")

</div>

For our Test application, We are storing Logs in Elastic Search. Our application is used by users in four different geographical regions. We want to setup a distributed architecture so that the reads and writes dont ha…

---

## [Log was not appeared in elastic search and kibana](https://discuss.elastic.co/t/log-was-not-appeared-in-elastic-search-and-kibana/175518)

<div class="topic-metadata">

**Author:** [@vinodh023](https://discuss.elastic.co/u/vinodh023)\
**Replies:** 20\
**Last updated:** [April 5, 2019, 8:48am UTC](https://discuss.elastic.co/t/log-was-not-appeared-in-elastic-search-and-kibana/175518 "2019-04-05T08:48:43Z")

</div>

Hi, I new to go language development. In my product development, I want to see the logger in kibana dashboard. I installed elastic search,logstach, kibana and file beat. but unable to get logger in kibana dashboard. Can …

---

## [Failed to execute action \[LCunrRXlStS-vH4o05YY8w\_elasticsearch\_nodes/send\_email\_to\_admin\] java.lang.IllegalArgumentException: no accounts of type \[email\] configured. Please set up an account using the \[xpack.notification.email\] settings](https://discuss.elastic.co/t/failed-to-execute-action-lcunrrxlsts-vh4o05yy8w-elasticsearch-nodes-send-email-to-admin-java-lang-illegalargumentexception-no-accounts-of-type-email-configured-please-set-up-an-account-using-the-xpack-notification-email-settings/175260)

<div class="topic-metadata">

**Author:** [@vkank](https://discuss.elastic.co/u/vkank)\
**Replies:** 2\
**Last updated:** [April 5, 2019, 8:41am UTC](https://discuss.elastic.co/t/failed-to-execute-action-lcunrrxlsts-vh4o05yy8w-elasticsearch-nodes-send-email-to-admin-java-lang-illegalargumentexception-no-accounts-of-type-email-configured-please-set-up-an-account-using-the-xpack-notification-email-settings/175260 "2019-04-05T08:41:54Z")

</div>

It says, no accounts of type \[email\] configured. Please set up an account using the \[xpack.notification.email\] settings I tried adding the information but it closes. \[2019-04-03T11:08:54,349\]\[INFO \]\[o.e.n.Node …

---

## [Best way to add a new field in existing index](https://discuss.elastic.co/t/best-way-to-add-a-new-field-in-existing-index/175314)

<div class="topic-metadata">

**Author:** [@msk\_76](https://discuss.elastic.co/u/msk_76)\
**Replies:** 3\
**Last updated:** [April 5, 2019, 8:40am UTC](https://discuss.elastic.co/t/best-way-to-add-a-new-field-in-existing-index/175314 "2019-04-05T08:40:57Z")

</div>

My scenario is that I have 5 fields in an existing index "emp\_data" in elasticsearch. One of these field is employee\_name. I have to add two new sixth & seventh fields "department", "company" to which this employee belon…

---

## [Elasticsearch 6.7.0 status Yellow in Magento 2.3.1](https://discuss.elastic.co/t/elasticsearch-6-7-0-status-yellow-in-magento-2-3-1/175018)

<div class="topic-metadata">

**Author:** [@manue](https://discuss.elastic.co/u/manue)\
**Replies:** 16\
**Last updated:** [April 5, 2019, 8:10am UTC](https://discuss.elastic.co/t/elasticsearch-6-7-0-status-yellow-in-magento-2-3-1/175018 "2019-04-05T08:10:41Z")

</div>

I have an Ubuntu 18.04 system installed on a Digital Ocean server. I have installed the Magento 2.3.1 version. I have installed Java and Elasticsearch using the following commands: JAVA sudo add-apt-repository -y ppa:…

---

## [Logstash cannot index data to Elasticsearch \[FORBIDDEN/8/index write (api)\]](https://discuss.elastic.co/t/logstash-cannot-index-data-to-elasticsearch-forbidden-8-index-write-api/175340)

<div class="topic-metadata">

**Author:** [@thangld](https://discuss.elastic.co/u/thangld)\
**Replies:** 8\
**Last updated:** [April 5, 2019, 7:50am UTC](https://discuss.elastic.co/t/logstash-cannot-index-data-to-elasticsearch-forbidden-8-index-write-api/175340 "2019-04-05T07:50:03Z")

</div>

I'm trying to use logstash to index data into Elasticsearch. At first, it indexes successfully but after a few moments, when I tail tailf /var/log/logstash/logstash-plain.log, it gives me this error: retrying failed act…

---

## [CCR - Soft deletes limits and prevention of data loss because of premature merging](https://discuss.elastic.co/t/ccr-soft-deletes-limits-and-prevention-of-data-loss-because-of-premature-merging/175523)

<div class="topic-metadata">

**Author:** [@kley](https://discuss.elastic.co/u/kley)\
**Replies:** 3\
**Last updated:** [April 5, 2019, 7:47am UTC](https://discuss.elastic.co/t/ccr-soft-deletes-limits-and-prevention-of-data-loss-because-of-premature-merging/175523 "2019-04-05T07:47:37Z")

</div>

Hi everybody! After digging more into the new CCR functionality and its capability of storing a history of events for possible folllowers I started to get curious on how high I could set the soft\_delete setting on an in…

---

## [How to use shared drive location for path.repo between linux and Windows machines in cluster?](https://discuss.elastic.co/t/how-to-use-shared-drive-location-for-path-repo-between-linux-and-windows-machines-in-cluster/173584)

<div class="topic-metadata">

**Author:** [@Prashant\_Rana](https://discuss.elastic.co/u/Prashant_Rana)\
**Replies:** 9\
**Last updated:** [April 5, 2019, 7:39am UTC](https://discuss.elastic.co/t/how-to-use-shared-drive-location-for-path-repo-between-linux-and-windows-machines-in-cluster/173584 "2019-04-05T07:39:33Z")

</div>

I am using a cluster of about 3-4 nodes in which Master is always a Windows machine. How can I use linux node in this setup with the shared drive in Windows to take the snapshot? Is there any documentation for this?

---

## [DANGLING\_INDEX\_IMPORTED: How to cleanup old deleted indices](https://discuss.elastic.co/t/dangling-index-imported-how-to-cleanup-old-deleted-indices/175526)

<div class="topic-metadata">

**Author:** [@christian\_ha](https://discuss.elastic.co/u/christian_ha)\
**Replies:** 3\
**Last updated:** [April 5, 2019, 7:36am UTC](https://discuss.elastic.co/t/dangling-index-imported-how-to-cleanup-old-deleted-indices/175526 "2019-04-05T07:36:56Z")

</div>

Hello together, right now we have a 7 Node Cluster with Version 6.3.0. One Node is only for kibana. Every other Node hast the following options in elasticsearch.yml: node.master: True node.data: True node.ingest: True …

---

## [How can I disable or uninstall x-pack in ELK stack version 6.7](https://discuss.elastic.co/t/how-can-i-disable-or-uninstall-x-pack-in-elk-stack-version-6-7/175339)

<div class="topic-metadata">

**Author:** [@Hazoopr](https://discuss.elastic.co/u/Hazoopr)\
**Replies:** 4\
**Last updated:** [April 5, 2019, 7:16am UTC](https://discuss.elastic.co/t/how-can-i-disable-or-uninstall-x-pack-in-elk-stack-version-6-7/175339 "2019-04-05T07:16:45Z")

</div>

How can I completely disable or uninstall x-pack in ELK stack version 6.7. curl -XGET 'ip1:9200/\_nodes/\_all/version' {"\_nodes":{"total":3,"successful":3,"failed":0},"cluster\_name":"XXXXX","nodes":{"Z3IzSLEADjSUcjRigiRW…

---

## [Elasticsearch behind ingress issue 'index\_not\_found\_exception'](https://discuss.elastic.co/t/elasticsearch-behind-ingress-issue-index-not-found-exception/175203)

<div class="topic-metadata">

**Author:** [@shiveshabhishek](https://discuss.elastic.co/u/shiveshabhishek)\
**Replies:** 1\
**Last updated:** [April 5, 2019, 7:16am UTC](https://discuss.elastic.co/t/elasticsearch-behind-ingress-issue-index-not-found-exception/175203 "2019-04-05T07:16:14Z")

</div>

Hello all, I am getting this message: index\_not\_found\_exception . While deploying elasticsearch on cloud, I am seeing this strange issue like whenever I set my elasticsearch behind ingress at / path (for example: https…

---

## [Rally-results - with or without warmup?](https://discuss.elastic.co/t/rally-results-with-or-without-warmup/174920)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [April 5, 2019, 7:00am UTC](https://discuss.elastic.co/t/rally-results-with-or-without-warmup/174920 "2019-04-05T07:00:11Z")

</div>

Hi all, when storing esrally's results in elasticsearch, an index named rally-results is created. As I understand we should neglect the warmup period in our results. Are warmup events already out of scope by values in r…

---

## [How add a second node to my cluster?](https://discuss.elastic.co/t/how-add-a-second-node-to-my-cluster/175226)

<div class="topic-metadata">

**Author:** [@manue](https://discuss.elastic.co/u/manue)\
**Replies:** 6\
**Last updated:** [April 5, 2019, 6:55am UTC](https://discuss.elastic.co/t/how-add-a-second-node-to-my-cluster/175226 "2019-04-05T06:55:00Z")

</div>

I am trying to solve a problem that I have with elasticsearch and magento 2.3, and I have been recommended to add a new node but I do not know how to launch the query from the terminal, can someone help me? I have elasti…

---

## [Get different and specific results from Index](https://discuss.elastic.co/t/get-different-and-specific-results-from-index/175395)

<div class="topic-metadata">

**Author:** [@utkarshhis](https://discuss.elastic.co/u/utkarshhis)\
**Replies:** 5\
**Last updated:** [April 5, 2019, 6:38am UTC](https://discuss.elastic.co/t/get-different-and-specific-results-from-index/175395 "2019-04-05T06:38:38Z")

</div>

{ "\_index" : "test\_index", "\_type" : "test\_type", "\_id" : "test\_id", "\_version" : 7, "\_seq\_no" : 7, "\_primary\_term" : 4, "found" : true, "\_source" : { "attachments"…

---

## [Detect duplicates of \_id](https://discuss.elastic.co/t/detect-duplicates-of-id/175519)

<div class="topic-metadata">

**Author:** [@Hiroki\_Otsuka](https://discuss.elastic.co/u/Hiroki_Otsuka)\
**Replies:** 1\
**Last updated:** [April 5, 2019, 6:14am UTC](https://discuss.elastic.co/t/detect-duplicates-of-id/175519 "2019-04-05T06:14:01Z")

</div>

I use two indexes. The two indexes contain the same \_id by the program. For example, IndexA has "\_id 777", and also indexB has "\_id 777". I want to output the same \_id in something nested form like collapse, when I s…

---

## [Java, Build query builder](https://discuss.elastic.co/t/java-build-query-builder/175499)

<div class="topic-metadata">

**Author:** [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\
**Replies:** 6\
**Last updated:** [April 5, 2019, 5:59am UTC](https://discuss.elastic.co/t/java-build-query-builder/175499 "2019-04-05T05:59:48Z")

</div>

I am using Elasticsarch Java High level client, i have year field in my document i.e(2013,2014,2015....etc) I need fetch how many unique year like (2013,2014,2016),2017 and count of specific year for that what querybuil…

---

## [Search template for xpack/graph/explore](https://discuss.elastic.co/t/search-template-for-xpack-graph-explore/173258)

<div class="topic-metadata">

**Author:** [@1fmusic](https://discuss.elastic.co/u/1fmusic)\
**Replies:** 1\
**Last updated:** [April 5, 2019, 2:40am UTC](https://discuss.elastic.co/t/search-template-for-xpack-graph-explore/173258 "2019-04-05T02:40:58Z")

</div>

Is it possible to make a search template for an xpack graph query? I want to set up an app to populate a query and prefer to create a template if possible. POST my\_index/\_xpack/graph/\_explore { "query": { "match\_p…

---

## [Upgraded node to 6.7.0 =\> stuck in master\_left/detected\_master loop](https://discuss.elastic.co/t/upgraded-node-to-6-7-0-stuck-in-master-left-detected-master-loop/175435)

<div class="topic-metadata">

**Author:** [@tomhel](https://discuss.elastic.co/u/tomhel)\
**Replies:** 3\
**Last updated:** [April 4, 2019, 9:22pm UTC](https://discuss.elastic.co/t/upgraded-node-to-6-7-0-stuck-in-master-left-detected-master-loop/175435 "2019-04-04T21:22:47Z")

</div>

We run a four-node cluster, currently at 6.6.1. I just started a rolling upgrade to 6.7.0 but the first node (node-004) I upgraded failed to join the cluster. It appears that: node-004 detects master node-003 node-004 …

---

## [Alert that responds to result of webhook](https://discuss.elastic.co/t/alert-that-responds-to-result-of-webhook/174810)

<div class="topic-metadata">

**Author:** [@nielsoncr](https://discuss.elastic.co/u/nielsoncr)\
**Replies:** 8\
**Last updated:** [April 4, 2019, 9:05pm UTC](https://discuss.elastic.co/t/alert-that-responds-to-result-of-webhook/174810 "2019-04-04T21:05:59Z")

</div>

I would like to be able to write an alert (watch) that executes a webhook on a schedule like every hour and sends a notification email if error http statuses occur. Is this supported, or do I have to have one watch to r…

---

## [Unable to set headers in Java rest client Bulk request](https://discuss.elastic.co/t/unable-to-set-headers-in-java-rest-client-bulk-request/175443)

<div class="topic-metadata">

**Author:** [@avinash\_07](https://discuss.elastic.co/u/avinash_07)\
**Replies:** 1\
**Last updated:** [April 4, 2019, 5:41pm UTC](https://discuss.elastic.co/t/unable-to-set-headers-in-java-rest-client-bulk-request/175443 "2019-04-04T17:41:32Z")

</div>

I am following the example provided in the documentation for creating the bulk request using bulkprocessor. However, I am not sure how to pass headers to bulkAsync. I am using X-Pack and would like to send the auth heade…

---

## [Unable to set passwords in elasticsearch with xpack](https://discuss.elastic.co/t/unable-to-set-passwords-in-elasticsearch-with-xpack/175307)

<div class="topic-metadata">

**Author:** [@kishorerv93](https://discuss.elastic.co/u/kishorerv93)\
**Replies:** 9\
**Last updated:** [April 4, 2019, 5:30pm UTC](https://discuss.elastic.co/t/unable-to-set-passwords-in-elasticsearch-with-xpack/175307 "2019-04-04T17:30:58Z")

</div>

ES Version : 6.2.4 Running with configuration path: /home/ubuntu/elasticsearch/config Testing if bootstrap password is valid for https://localhost:9200/\_xpack/security/\_authenticate?pretty Exception in thread "main" ja…

---

## [\[ELK\] node shutdown](https://discuss.elastic.co/t/elk-node-shutdown/175348)

<div class="topic-metadata">

**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\
**Replies:** 8\
**Last updated:** [April 4, 2019, 5:12pm UTC](https://discuss.elastic.co/t/elk-node-shutdown/175348 "2019-04-04T17:12:02Z")

</div>

Good Morning, I'm in a strange situation. I started with a single node cluster where were runnning Elasticsearch, Kibana and Logstash. After the analysis of data volumes we decide to expand our cluster, so we added 2 n…

---

## [How To Archive Logs in Elasticsearch](https://discuss.elastic.co/t/how-to-archive-logs-in-elasticsearch/175452)

<div class="topic-metadata">

**Author:** [@savetom](https://discuss.elastic.co/u/savetom)\
**Replies:** 1\
**Last updated:** [April 4, 2019, 4:47pm UTC](https://discuss.elastic.co/t/how-to-archive-logs-in-elasticsearch/175452 "2019-04-04T16:47:58Z")

</div>

Hi Everyone, I am new to elastic stack so please bear with my ignorant questions. Our company has been required to follow a Cybersecurity requirement and one of it's requirement is to have a centralized logging server.…

---

## [About bucket aggregation](https://discuss.elastic.co/t/about-bucket-aggregation/175186)

<div class="topic-metadata">

**Author:** [@med\_barka](https://discuss.elastic.co/u/med_barka)\
**Replies:** 1\
**Last updated:** [April 4, 2019, 4:07pm UTC](https://discuss.elastic.co/t/about-bucket-aggregation/175186 "2019-04-04T16:07:54Z")

</div>

hello, i want to bucket my documents according to a change of a field e.g : i have 3 fields : timestamp, name, switch (boolean field that i want to change bucket accordingly to it) and data : 2019-02-08T07:06:01.106Z |…

---

## [Having an issue with "/\_nodes/stats?all=true](https://discuss.elastic.co/t/having-an-issue-with-nodes-stats-all-true/174389)

<div class="topic-metadata">

**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\
**Replies:** 1\
**Last updated:** [April 4, 2019, 3:46pm UTC](https://discuss.elastic.co/t/having-an-issue-with-nodes-stats-all-true/174389 "2019-04-04T15:46:46Z")

</div>

I have installed Elasticsearch 6.7.0 i am having an issue when i have configured datadog agent, it's failing to connect to elasticsearch. 02:32 PM | 2019-03-27 18:27:42 UTC | ERROR | dd.collector | checks.elastic(init.…

---

## [Event-data-track from github does not work](https://discuss.elastic.co/t/event-data-track-from-github-does-not-work/174298)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 4\
**Last updated:** [April 4, 2019, 3:23pm UTC](https://discuss.elastic.co/t/event-data-track-from-github-does-not-work/174298 "2019-04-04T15:23:50Z")

</div>

Hi, I have issues running the event-data-track from github by @Christian\_Dahlqvist. I modified my rally.ini in tracks area to this here: \[tracks\] default.url = https://github.com/elastic/rally-tracks eventdata.url = …

---

## [Help - Create Plugin 6.6](https://discuss.elastic.co/t/help-create-plugin-6-6/173543)

<div class="topic-metadata">

**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\
**Replies:** 5\
**Last updated:** [April 4, 2019, 2:55pm UTC](https://discuss.elastic.co/t/help-create-plugin-6-6/173543 "2019-04-04T14:55:44Z")

</div>

Hi guys, I need a little help. Ante in ElasticSearch version 2.4 to add several scripts to a plugin was with 'module.registerScript ()' now in version 6.6 how should I add my various scripts? I have not found the way it …

---

## [Duplicate field - Plugin custom](https://discuss.elastic.co/t/duplicate-field-plugin-custom/175078)

<div class="topic-metadata">

**Author:** [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\
**Replies:** 4\
**Last updated:** [April 4, 2019, 2:47pm UTC](https://discuss.elastic.co/t/duplicate-field-plugin-custom/175078 "2019-04-04T14:47:42Z")

</div>

Hi guys, I have an error when creating the new CampoMapa that is specified in the add-on I'm working on. It tells me that the field is created duplicated. Any idea why it can be? Query JSON PUT example\_event { "set…

---

## [Shard initialization stuck on Cluster recovering - SameShardAllocationDecider](https://discuss.elastic.co/t/shard-initialization-stuck-on-cluster-recovering-sameshardallocationdecider/174793)

<div class="topic-metadata">

**Author:** [@chana804](https://discuss.elastic.co/u/chana804)\
**Replies:** 4\
**Last updated:** [April 4, 2019, 2:29pm UTC](https://discuss.elastic.co/t/shard-initialization-stuck-on-cluster-recovering-sameshardallocationdecider/174793 "2019-04-04T14:29:13Z")

</div>

Hi, I’m using Elasticsearch 5.4, and have a cluster initialization problem It seems that shards do not manage to finish their initialization for more than 3 days. I keep getting the following exception in the logs for…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1341)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1343)
