# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1397 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1398 --- ## [Bucket Script Syntax to Sum at Point in Time](https://discuss.elastic.co/t/bucket-script-syntax-to-sum-at-point-in-time/168098)
**Author:** [@sbvader](https://discuss.elastic.co/u/sbvader)\ **Replies:** 0\ **Last updated:** [February 12, 2019, 6:45pm UTC](https://discuss.elastic.co/t/bucket-script-syntax-to-sum-at-point-in-time/168098 "2019-02-12T18:45:47Z")
Hi, I have a single index and I am interested in the value fields when the 'host' is either A or B. It's easy to search for host: A OR host: B to get the list of documents that I am interested in, but then I basically wa… --- ## [Logstash cannot Index to Elasticsearch for http\_poller plugin](https://discuss.elastic.co/t/logstash-cannot-index-to-elasticsearch-for-http-poller-plugin/167940)
**Author:** [@imortalsolitude](https://discuss.elastic.co/u/imortalsolitude)\ **Replies:** 1\ **Last updated:** [February 12, 2019, 6:13pm UTC](https://discuss.elastic.co/t/logstash-cannot-index-to-elasticsearch-for-http-poller-plugin/167940 "2019-02-12T18:13:38Z")
I am running ELK 6.5.4 and trying to use the http\_poller to poll data into ELK but my logstash is unable to index to Elasticsearch and throws error message \]logstash.outputs.elasticsearch\] Could not index event to Elasti… --- ## [Cluster TLS encryption, master nodes and certificate syntax specifics](https://discuss.elastic.co/t/cluster-tls-encryption-master-nodes-and-certificate-syntax-specifics/167878)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 2\ **Last updated:** [February 12, 2019, 5:57pm UTC](https://discuss.elastic.co/t/cluster-tls-encryption-master-nodes-and-certificate-syntax-specifics/167878 "2019-02-12T17:57:34Z")
Version 6.5.4 9 node ES cluster 3 node Kibana cluster I recently had a problem implementing TLS within our cluster. After implementing TLS in our QA environment and taking a lot of notes along the way, I thought that… --- ## [How to index state changes?](https://discuss.elastic.co/t/how-to-index-state-changes/167941)
**Author:** [@NiclasK](https://discuss.elastic.co/u/NiclasK)\ **Replies:** 2\ **Last updated:** [February 12, 2019, 5:06pm UTC](https://discuss.elastic.co/t/how-to-index-state-changes/167941 "2019-02-12T17:06:27Z")
Hi, I have a process that I want to monitor/analyze using elastic search. The process takes place on thousand's of embedded devices. I am wondering what is the preferred format to send the data to elastic search to have… --- ## [Encryption between ES nodes using SSL/TLS](https://discuss.elastic.co/t/encryption-between-es-nodes-using-ssl-tls/167168)
**Author:** [@kaushalshriyan](https://discuss.elastic.co/u/kaushalshriyan)\ **Replies:** 4\ **Last updated:** [February 12, 2019, 4:40pm UTC](https://discuss.elastic.co/t/encryption-between-es-nodes-using-ssl-tls/167168 "2019-02-12T16:40:32Z")
Hi, Is there a way to encrypt traffic between three Elasticsearch nodes using SSL/TLS? For example we have set up ES cluster and the details are as mentioned below:- es1.example.com es2.example.com es3.example.com Ca… --- ## [Master nodes](https://discuss.elastic.co/t/master-nodes/168057)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 4\ **Last updated:** [February 12, 2019, 4:39pm UTC](https://discuss.elastic.co/t/master-nodes/168057 "2019-02-12T16:39:31Z")
cat master nodes .... will it not provide all the master eligible nodes. it always shows only one ... --- ## [Percentiles aggregation does not behave as expected](https://discuss.elastic.co/t/percentiles-aggregation-does-not-behave-as-expected/164962)
**Author:** [@iamredlus](https://discuss.elastic.co/u/iamredlus)\ **Replies:** 6\ **Last updated:** [February 12, 2019, 3:22pm UTC](https://discuss.elastic.co/t/percentiles-aggregation-does-not-behave-as-expected/164962 "2019-02-12T15:22:01Z")
Hey I've been experimenting with percentile aggregations on some dataset after receiving some odd results in elasticsearch 6.3.2. My dataset consists of 467 floating point numbers, which can be found here. Just to rule… --- ## [Archived minio files](https://discuss.elastic.co/t/archived-minio-files/166561)
**Author:** [@macdadi112](https://discuss.elastic.co/u/macdadi112)\ **Replies:** 1\ **Last updated:** [February 5, 2019, 12:33pm UTC](https://discuss.elastic.co/t/archived-minio-files/166561 "2019-02-05T12:33:47Z")
Hi What I have is files get archived to minio after a certain duration. So how would I play these files again? Thanks and apologies if I sent this to the wrong group, Mac --- ## [Set limits on Elasticsearch & Kibana](https://discuss.elastic.co/t/set-limits-on-elasticsearch-kibana/167070)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 10\ **Last updated:** [February 12, 2019, 2:59pm UTC](https://discuss.elastic.co/t/set-limits-on-elasticsearch-kibana/167070 "2019-02-12T14:59:47Z")
Hi, everyone :slight\_smile: I would like to know if it is possible to set a limit on Elasticsearch or Kibana to avoid a service down. I have seen that Kibana has the parameter elasticsearch.requestTimeout: 30000. For … --- ## [Finding multiple exact value](https://discuss.elastic.co/t/finding-multiple-exact-value/168043)
**Author:** [@dinaWork](https://discuss.elastic.co/u/dinaWork)\ **Replies:** 1\ **Last updated:** [February 12, 2019, 2:19pm UTC](https://discuss.elastic.co/t/finding-multiple-exact-value/168043 "2019-02-12T14:19:45Z")
I would like to query elastic search , query if field is one of a list how do I do that in elastic 6.0.0? for example these are my documents: {"name" : "jim","company": "a"} {"name" : "jack","company": "a"} {"name" : … --- ## [How many fields do I have in my index?](https://discuss.elastic.co/t/how-many-fields-do-i-have-in-my-index/168044)
**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\ **Replies:** 0\ **Last updated:** [February 12, 2019, 2:07pm UTC](https://discuss.elastic.co/t/how-many-fields-do-i-have-in-my-index/168044 "2019-02-12T14:07:19Z")
I'd like to know how close I am to the limit of fields within my index. Is there any way to get it with a get request? --- ## [Roles problem with x-pack and LDAP](https://discuss.elastic.co/t/roles-problem-with-x-pack-and-ldap/167986)
**Author:** [@DevXoo](https://discuss.elastic.co/u/DevXoo)\ **Replies:** 4\ **Last updated:** [February 12, 2019, 1:13pm UTC](https://discuss.elastic.co/t/roles-problem-with-x-pack-and-ldap/167986 "2019-02-12T13:13:30Z")
Hi, I have a problem with the Kibana/Elasticserach rules. I enabled the x-pack on Kibana and after I connected my LDAP server (OpenDJ) with Elasticsearch. On elasticsearch.yml I had insert these line: xpack.security.e… --- ## [Index lifecycle management, deleting by "name age"](https://discuss.elastic.co/t/index-lifecycle-management-deleting-by-name-age/168025)
**Author:** [@Mattias\_Arbin](https://discuss.elastic.co/u/Mattias_Arbin)\ **Replies:** 1\ **Last updated:** [February 12, 2019, 1:11pm UTC](https://discuss.elastic.co/t/index-lifecycle-management-deleting-by-name-age/168025 "2019-02-12T13:11:07Z")
I am using ELK for log analysis. I use this type of index names myindex-%{+xxxx.ww} i.e. weekly indices. I would like to use the index lifecycle management to delete indices that CONTAINS data older than 90 days. Note… --- ## [Strange Fluent-Bit logs](https://discuss.elastic.co/t/strange-fluent-bit-logs/167881)
**Author:** [@JDev](https://discuss.elastic.co/u/JDev)\ **Replies:** 2\ **Last updated:** [February 12, 2019, 1:03pm UTC](https://discuss.elastic.co/t/strange-fluent-bit-logs/167881 "2019-02-12T13:03:38Z")
As a log collector, I installed fluent-bit. It is installed on each node of the cluster. All right. He sends logs to elastic. I see them. All OK! But if i look in the log of fluent-bit pod, then I see the following. I… --- ## [Terms Aggregation return multiple fields (min\_doc\_count: 0)](https://discuss.elastic.co/t/terms-aggregation-return-multiple-fields-min-doc-count-0/168033)
**Author:** [@gertjanwytynck](https://discuss.elastic.co/u/gertjanwytynck)\ **Replies:** 0\ **Last updated:** [February 12, 2019, 12:57pm UTC](https://discuss.elastic.co/t/terms-aggregation-return-multiple-fields-min-doc-count-0/168033 "2019-02-12T12:57:25Z")
I'm making a Terms Aggregation but I want to return multiple fields. I want a user to select buckets via "slug" (my-name), but show the actual "name" (My Name). At this moment I'm making a TopHits SubAggregation like th… --- ## [Native Authentication in ElasticSearch 2.3.4](https://discuss.elastic.co/t/native-authentication-in-elasticsearch-2-3-4/167570)
**Author:** [@jkthetechie](https://discuss.elastic.co/u/jkthetechie)\ **Replies:** 3\ **Last updated:** [February 12, 2019, 12:52pm UTC](https://discuss.elastic.co/t/native-authentication-in-elasticsearch-2-3-4/167570 "2019-02-12T12:52:54Z")
Hi, I am using ElasticSearch 2.3.4 version. Trying to implement native authentication in 2.3.4. Have added the below configuration in elasticsearch.yml. shield: authc: realms: native1: type: native order: 0 enabl… --- ## [Are global ordinals needed for sort by keyword?](https://discuss.elastic.co/t/are-global-ordinals-needed-for-sort-by-keyword/168027)
**Author:** [@ddorian43](https://discuss.elastic.co/u/ddorian43)\ **Replies:** 0\ **Last updated:** [February 12, 2019, 12:20pm UTC](https://discuss.elastic.co/t/are-global-ordinals-needed-for-sort-by-keyword/168027 "2019-02-12T12:20:15Z")
On the docs page it says global-ordinals is only used for terms-aggregation. Is it used for anything else ? Mostly interested in sorting and collapsing. Regarsd, \[0\] https://www.elastic.co/guide/en/elasticsearch/refe… --- ## [Iterate over Object keys](https://discuss.elastic.co/t/iterate-over-object-keys/168026)
**Author:** [@cyclohexan](https://discuss.elastic.co/u/cyclohexan)\ **Replies:** 0\ **Last updated:** [February 12, 2019, 12:18pm UTC](https://discuss.elastic.co/t/iterate-over-object-keys/168026 "2019-02-12T12:18:37Z")
I have a painless script inside of an update query. The Script receives a parameter containing an array with different hashes like this: { "fields": \[ {"keyA": 1, "keyB": 2, "keyC": "something"}, {"keyD": "anythin… --- ## [Proper indexing to improve query speed in elasticsearch](https://discuss.elastic.co/t/proper-indexing-to-improve-query-speed-in-elasticsearch/168019)
**Author:** [@Praneet\_Khandelwal](https://discuss.elastic.co/u/Praneet_Khandelwal)\ **Replies:** 0\ **Last updated:** [February 12, 2019, 11:29am UTC](https://discuss.elastic.co/t/proper-indexing-to-improve-query-speed-in-elasticsearch/168019 "2019-02-12T11:29:09Z")
I am currently working on an ELK stack where we have a large number of documents (~50k in 1min) coming into our cluster. All the documents are coming from a bunch of log sources with a large number of fields. Currently a… --- ## [Rollup Granularity and Aggregation](https://discuss.elastic.co/t/rollup-granularity-and-aggregation/168017)
**Author:** [@cmallios](https://discuss.elastic.co/u/cmallios)\ **Replies:** 0\ **Last updated:** [February 12, 2019, 11:23am UTC](https://discuss.elastic.co/t/rollup-granularity-and-aggregation/168017 "2019-02-12T11:23:17Z")
I am investigating whether I can use rollup as a sort of optimization for some queries. In general, we use Elasticsearch mostly as a Data Analytics engine, so we are doing lots of ad-hoc nested aggregations (with possibl… --- ## [Safe way to Restart the ElasticSearch Cluster](https://discuss.elastic.co/t/safe-way-to-restart-the-elasticsearch-cluster/168013)
**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\ **Replies:** 1\ **Last updated:** [February 12, 2019, 10:51am UTC](https://discuss.elastic.co/t/safe-way-to-restart-the-elasticsearch-cluster/168013 "2019-02-12T10:51:13Z")
Hi- I have 4 nodes added to my Elastic Search Cluster in Production, I have installed a plugin, which would require a restart of the cluster. Could someone point out to me to documentation of a safe restart of all the N… --- ## [Rollover With Snapshot Restore](https://discuss.elastic.co/t/rollover-with-snapshot-restore/168007)
**Author:** [@Nakshathri](https://discuss.elastic.co/u/Nakshathri)\ **Replies:** 0\ **Last updated:** [February 12, 2019, 9:57am UTC](https://discuss.elastic.co/t/rollover-with-snapshot-restore/168007 "2019-02-12T09:57:47Z")
Hello All, We have time-based data which is getting saved in an index. As a common challenge with such patterns, the index is becoming huge and it's affecting the performance. And also having a single index limits the c… --- ## [Scripted fields from Message](https://discuss.elastic.co/t/scripted-fields-from-message/168002)
**Author:** [@priya08](https://discuss.elastic.co/u/priya08)\ **Replies:** 2\ **Last updated:** [February 12, 2019, 9:51am UTC](https://discuss.elastic.co/t/scripted-fields-from-message/168002 "2019-02-12T09:51:36Z")
Hi , How can we created the scripted field(datetime) from "message" field. Please find the sample input { "\_index": "abcd", "\_type": "doc", "\_id": "abcd", "\_version": 1, "\_score": null, "\_source": { "@version": … --- ## [Find number of rows/documents inserted by curl command](https://discuss.elastic.co/t/find-number-of-rows-documents-inserted-by-curl-command/167577)
**Author:** [@Bhupendra\_Bagde](https://discuss.elastic.co/u/Bhupendra_Bagde)\ **Replies:** 3\ **Last updated:** [February 12, 2019, 9:42am UTC](https://discuss.elastic.co/t/find-number-of-rows-documents-inserted-by-curl-command/167577 "2019-02-12T09:42:23Z")
Hi , Can anyone please tell hwo to find number of rows/documents inserted by curl command in elastic search. Lets say I have json file with 2k rowcount. I want to verify all 2k rows has been inserted by curl successful… --- ## [CORS policy error message with ElasticsearchJS (Kibana plugin visualization)](https://discuss.elastic.co/t/cors-policy-error-message-with-elasticsearchjs-kibana-plugin-visualization/167993)
**Author:** [@bard0x](https://discuss.elastic.co/u/bard0x)\ **Replies:** 1\ **Last updated:** [February 12, 2019, 9:21am UTC](https://discuss.elastic.co/t/cors-policy-error-message-with-elasticsearchjs-kibana-plugin-visualization/167993 "2019-02-12T09:21:07Z")
Hi guys, I developed a kibana plugin visualization integrating elasticsearch-browser to comunicate with elasticsearch. When I configure elasticsearch-browser with an angularJS application, if I try to ping my ES instan… --- ## [How to execute remote command in elastic?](https://discuss.elastic.co/t/how-to-execute-remote-command-in-elastic/167992)
**Author:** [@vsalunkhe](https://discuss.elastic.co/u/vsalunkhe)\ **Replies:** 1\ **Last updated:** [February 12, 2019, 9:12am UTC](https://discuss.elastic.co/t/how-to-execute-remote-command-in-elastic/167992 "2019-02-12T09:12:13Z")
Hi, I am a newbie in elastic. I have a usecase wherein I need to execute some command on the remote machine. Further I also need to send the results to elasticsearch for further monitoring. Is there any option to exec… --- ## [ThreadContext loses headers between threads](https://discuss.elastic.co/t/threadcontext-loses-headers-between-threads/166741)
**Author:** [@Sergey\_Ivanov](https://discuss.elastic.co/u/Sergey_Ivanov)\ **Replies:** 1\ **Last updated:** [February 12, 2019, 8:56am UTC](https://discuss.elastic.co/t/threadcontext-loses-headers-between-threads/166741 "2019-02-12T08:56:44Z")
Hello, We're using our custom plugin for Elasticsearch and we faced the following problem after upgrade from ES 5.6.6 to 6.5.0: Looks like ThreadContext loses headers between http\_server\_worker and updateTask threads. … --- ## [Can't start ElasticSearch service (unknwon setting script.inline)](https://discuss.elastic.co/t/cant-start-elasticsearch-service-unknwon-setting-script-inline/167886)
**Author:** [@Lyro1](https://discuss.elastic.co/u/Lyro1)\ **Replies:** 3\ **Last updated:** [February 12, 2019, 8:29am UTC](https://discuss.elastic.co/t/cant-start-elasticsearch-service-unknwon-setting-script-inline/167886 "2019-02-12T08:29:57Z")
Hello everyone, I wanted to use a service called TheHive, which rely on ElasticSearch. So I installed it on a Centos 7 computer, and it seems to be working well. But to use it with TheHive, the following settings are r… --- ## [Combine fields in query](https://discuss.elastic.co/t/combine-fields-in-query/167858)
**Author:** [@Josef\_Fritzer](https://discuss.elastic.co/u/Josef_Fritzer)\ **Replies:** 2\ **Last updated:** [February 12, 2019, 6:56am UTC](https://discuss.elastic.co/t/combine-fields-in-query/167858 "2019-02-12T06:56:26Z")
Hi, I have the following document in my index: { "\_id": "0012020310", "\_source": { "ConstructionProject": { "Candidates": \[ { "InterestIndicator": "NORMAL", "State": "CONTRACTO… --- ## [Pagination Elastic Search](https://discuss.elastic.co/t/pagination-elastic-search/167071)
**Author:** [@Yash\_Kapoor](https://discuss.elastic.co/u/Yash_Kapoor)\ **Replies:** 7\ **Last updated:** [February 12, 2019, 6:45am UTC](https://discuss.elastic.co/t/pagination-elastic-search/167071 "2019-02-12T06:45:48Z")
How do we use pagination in elastic search ? I have been using the size field with from field with size field set to 1000 and from field to 0. { "from : 0, "sort": .... , "\_source": ... , "size": 1000 } Even after thi… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1396) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1398)