# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1399

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1400

---

## [Removing indices using Curator](https://discuss.elastic.co/t/removing-indices-using-curator/167860)

<div class="topic-metadata">

**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\
**Replies:** 0\
**Last updated:** [February 11, 2019, 1:12pm UTC](https://discuss.elastic.co/t/removing-indices-using-curator/167860 "2019-02-11T13:12:29Z")

</div>

Hello I would like to ensure similar size of indices and at the same time I need ensure different retention policy for some indices. Could you please give me some tip how to do that? SIMILAR SIZE OF INDICES I would li…

---

## [Enabling authentication for a live cluster](https://discuss.elastic.co/t/enabling-authentication-for-a-live-cluster/167486)

<div class="topic-metadata">

**Author:** [@Chris\_Blackwell](https://discuss.elastic.co/u/Chris_Blackwell)\
**Replies:** 2\
**Last updated:** [February 11, 2019, 12:33pm UTC](https://discuss.elastic.co/t/enabling-authentication-for-a-live-cluster/167486 "2019-02-11T12:33:02Z")

</div>

We have a live cluster with platinum level license, but it's running with no authentication. I'd like to enable xpack security, and take advantage of the user/roles & spaces features of kibana to segment access. Are the…

---

## [Elasticsearch - Monitoring user's search details](https://discuss.elastic.co/t/elasticsearch-monitoring-users-search-details/166294)

<div class="topic-metadata">

**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\
**Replies:** 2\
**Last updated:** [February 11, 2019, 12:00pm UTC](https://discuss.elastic.co/t/elasticsearch-monitoring-users-search-details/166294 "2019-02-11T12:00:57Z")

</div>

Hi all, I am looking to log user's search details like queries, date and time. I have gone through few links that says this can be achieved through having a dedicated monitoring cluster and has something to do with beat…

---

## [HTTP/1.1 500 Server Error{"message":null} from \_bulk ES 5.5.3](https://discuss.elastic.co/t/http-1-1-500-server-error-message-null-from-bulk-es-5-5-3/167826)

<div class="topic-metadata">

**Author:** [@lonzodc](https://discuss.elastic.co/u/lonzodc)\
**Replies:** 1\
**Last updated:** [February 11, 2019, 11:41am UTC](https://discuss.elastic.co/t/http-1-1-500-server-error-message-null-from-bulk-es-5-5-3/167826 "2019-02-11T11:41:47Z")

</div>

Hi, I am encountering error from \_bulk endpoint but I can't solve since the error message sent by ES is null. I am calling the \_bulk endpoint via ES REST API. Here is a snippet of the stacktrace I am getting: HTTP/1.1 …

---

## [Elasticsearch post-processing using phonetics](https://discuss.elastic.co/t/elasticsearch-post-processing-using-phonetics/167834)

<div class="topic-metadata">

**Author:** [@Smolvis](https://discuss.elastic.co/u/Smolvis)\
**Replies:** 0\
**Last updated:** [February 11, 2019, 11:36am UTC](https://discuss.elastic.co/t/elasticsearch-post-processing-using-phonetics/167834 "2019-02-11T11:36:14Z")

</div>

I'm playing with Elasticsearch for future implementation in a production environment. My problem is that I need to use fuzzy search and phonetics to achieve my objective, as follows: Query using fuzzy matching GET \_s…

---

## [Comparing lists in painless scripts](https://discuss.elastic.co/t/comparing-lists-in-painless-scripts/167833)

<div class="topic-metadata">

**Author:** [@kanu](https://discuss.elastic.co/u/kanu)\
**Replies:** 0\
**Last updated:** [February 11, 2019, 11:33am UTC](https://discuss.elastic.co/t/comparing-lists-in-painless-scripts/167833 "2019-02-11T11:33:12Z")

</div>

Hi, I am looking for an efficient way to compare the items of list. PUT list\_demo/doc/1 { "items": \[1, 2, 3\] } GET list\_demo/\_search { "query": { "script": { "script": { "source": "(doc\['items'…

---

## [Audit log study](https://discuss.elastic.co/t/audit-log-study/167613)

<div class="topic-metadata">

**Author:** [@Elango-mas](https://discuss.elastic.co/u/Elango-mas)\
**Replies:** 8\
**Last updated:** [February 11, 2019, 10:52am UTC](https://discuss.elastic.co/t/audit-log-study/167613 "2019-02-11T10:52:40Z")

</div>

Hi All, Elasticsearch 6.2.3 , I am doing a study on the audit log (\<clustername\>\_access.log) what details are registered when an action is done. I don't see any any different in the access or syslog logs when I chang…

---

## [Multiple templates in single file in logstash's elasticsearch output plugin](https://discuss.elastic.co/t/multiple-templates-in-single-file-in-logstashs-elasticsearch-output-plugin/167155)

<div class="topic-metadata">

**Author:** [@siginigin](https://discuss.elastic.co/u/siginigin)\
**Replies:** 2\
**Last updated:** [February 11, 2019, 10:41am UTC](https://discuss.elastic.co/t/multiple-templates-in-single-file-in-logstashs-elasticsearch-output-plugin/167155 "2019-02-11T10:41:58Z")

</div>

Hi guys, I'm trying to install multiple templates (=2) in single index, based on name pattern. The point is to minimize number of fileds in indexes. I want to achieve to have default and proxy fields in logstash-proxy i…

---

## [Index.codec in template is not accepting anymore in ES6.5?](https://discuss.elastic.co/t/index-codec-in-template-is-not-accepting-anymore-in-es6-5/167807)

<div class="topic-metadata">

**Author:** [@Suryadip\_Nag](https://discuss.elastic.co/u/Suryadip_Nag)\
**Replies:** 6\
**Last updated:** [February 11, 2019, 10:37am UTC](https://discuss.elastic.co/t/index-codec-in-template-is-not-accepting-anymore-in-es6-5/167807 "2019-02-11T10:37:56Z")

</div>

We have migrated to Elasticsearch from 5.5 to 6.5. We have field in template index.codec but it is not accepting anymore when I try to create the template in ES6.5. But same template is getting created in ES5.5. curl -X…

---

## [Java High Level Rest Client response time is lower than Transport client](https://discuss.elastic.co/t/java-high-level-rest-client-response-time-is-lower-than-transport-client/167809)

<div class="topic-metadata">

**Author:** [@ganil.89](https://discuss.elastic.co/u/ganil.89)\
**Replies:** 3\
**Last updated:** [February 11, 2019, 10:26am UTC](https://discuss.elastic.co/t/java-high-level-rest-client-response-time-is-lower-than-transport-client/167809 "2019-02-11T10:26:55Z")

</div>

I have upgraded code from transport client to High Level client. Java: JDK 8 ES version: 6.5.4 When api response time of transport client is compared to High Level client, there is a difference, especially EXTERNAL-CA…

---

## [Java api dsl](https://discuss.elastic.co/t/java-api-dsl/167802)

<div class="topic-metadata">

**Author:** [@examin](https://discuss.elastic.co/u/examin)\
**Replies:** 3\
**Last updated:** [February 11, 2019, 10:26am UTC](https://discuss.elastic.co/t/java-api-dsl/167802 "2019-02-11T10:26:15Z")

</div>

I have code in java . it is working fine but i want to reproduce results using kibana. How can i get final dsl being produced by code.

---

## [Issue with storing access keys using elasticsearch-keystore](https://discuss.elastic.co/t/issue-with-storing-access-keys-using-elasticsearch-keystore/167821)

<div class="topic-metadata">

**Author:** [@Sireesha\_Madabhushi](https://discuss.elastic.co/u/Sireesha_Madabhushi)\
**Replies:** 0\
**Last updated:** [February 11, 2019, 10:13am UTC](https://discuss.elastic.co/t/issue-with-storing-access-keys-using-elasticsearch-keystore/167821 "2019-02-11T10:13:23Z")

</div>

Continuing the discussion from Issue with s3 repository: I am facing exactly the same issue. I know that the access key and secret key are set to correct values when I enter them from command line. But when I try to cre…

---

## [ELK server minimum specs](https://discuss.elastic.co/t/elk-server-minimum-specs/167819)

<div class="topic-metadata">

**Author:** [@aloulo47](https://discuss.elastic.co/u/aloulo47)\
**Replies:** 0\
**Last updated:** [February 11, 2019, 10:08am UTC](https://discuss.elastic.co/t/elk-server-minimum-specs/167819 "2019-02-11T10:08:12Z")

</div>

Hello Guys ! I Am Creating a log management system using ELK stack i wanna know the minimum specs for ELK server getting 60mb log/Day . thank you !

---

## [Query DSL to retrieve from index specific fields like a Select in SQL](https://discuss.elastic.co/t/query-dsl-to-retrieve-from-index-specific-fields-like-a-select-in-sql/167812)

<div class="topic-metadata">

**Author:** [@bard0x](https://discuss.elastic.co/u/bard0x)\
**Replies:** 1\
**Last updated:** [February 11, 2019, 9:59am UTC](https://discuss.elastic.co/t/query-dsl-to-retrieve-from-index-specific-fields-like-a-select-in-sql/167812 "2019-02-11T09:59:12Z")

</div>

Hi guys, I would to get from my index a specific fields like a simply select query in SQL with a DSL query... Thank's in advance for the replies!

---

## [Failed to execute search phase](https://discuss.elastic.co/t/failed-to-execute-search-phase/167607)

<div class="topic-metadata">

**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\
**Replies:** 3\
**Last updated:** [February 11, 2019, 9:58am UTC](https://discuss.elastic.co/t/failed-to-execute-search-phase/167607 "2019-02-11T09:58:43Z")

</div>

We are seeing a lot of warnings in our cluster whenever we use the SCROLL API to search for data. \[2019-02-08T16:03:53,314\]\[DEBUG\]\[o.e.a.s.TransportSearchScrollAction\] \[node01\] \[594681\] Failed to execute query phase org…

---

## [Please help newbie to create hot and warm cluster nodes](https://discuss.elastic.co/t/please-help-newbie-to-create-hot-and-warm-cluster-nodes/167269)

<div class="topic-metadata">

**Author:** [@nessero](https://discuss.elastic.co/u/nessero)\
**Replies:** 4\
**Last updated:** [February 11, 2019, 9:41am UTC](https://discuss.elastic.co/t/please-help-newbie-to-create-hot-and-warm-cluster-nodes/167269 "2019-02-11T09:41:45Z")

</div>

Hi everyone ! I have one hot and one warm node of elasticsearch. And need to enlarge cluster. May i create two hot nodes and use 3 hot and one warm ? Or i must have 3 hot and 3 warm nodes ? And how elasticsearch will ke…

---

## [Search over large documents](https://discuss.elastic.co/t/search-over-large-documents/167768)

<div class="topic-metadata">

**Author:** [@makitka2007](https://discuss.elastic.co/u/makitka2007)\
**Replies:** 4\
**Last updated:** [February 11, 2019, 9:25am UTC](https://discuss.elastic.co/t/search-over-large-documents/167768 "2019-02-11T09:25:43Z")

</div>

hi all we have an index in ES which we use both for search and display on UI for resource card. this card is shown for user when he clicks on a title from search results, and document is get there by it's id. so, about …

---

## [Cannot install Search-Guard plugin and enable xPacks. Version 6.4.2](https://discuss.elastic.co/t/cannot-install-search-guard-plugin-and-enable-xpacks-version-6-4-2/167751)

<div class="topic-metadata">

**Author:** [@JDev](https://discuss.elastic.co/u/JDev)\
**Replies:** 9\
**Last updated:** [February 11, 2019, 9:25am UTC](https://discuss.elastic.co/t/cannot-install-search-guard-plugin-and-enable-xpacks-version-6-4-2/167751 "2019-02-11T09:25:17Z")

</div>

Hello, I installed the elastic stack on the Kubernetes cluster. I wanted to enable Search-guard plugin. Before that, the installation did not work at all, added two variables to the environment. Elastiksearch/Kibana …

---

## [\[Elasticsearch\]Data Migration](https://discuss.elastic.co/t/elasticsearch-data-migration/167781)

<div class="topic-metadata">

**Author:** [@hyhong](https://discuss.elastic.co/u/hyhong)\
**Replies:** 4\
**Last updated:** [February 11, 2019, 8:40am UTC](https://discuss.elastic.co/t/elasticsearch-data-migration/167781 "2019-02-11T08:40:29Z")

</div>

I need to migrate data from one cluster to another, what are the methods?

---

## [Regarding Possible Indexing Rate Error](https://discuss.elastic.co/t/regarding-possible-indexing-rate-error/167649)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 0\
**Last updated:** [February 8, 2019, 2:58pm UTC](https://discuss.elastic.co/t/regarding-possible-indexing-rate-error/167649 "2019-02-08T14:58:00Z")

</div>

Hi, I have a daily index being written by opentracing that has the following attributes reported by xpack: size: 63GB (primaries) docs: 1 billion indexing rate: 1500 msg/sec approx However, for an index with over 1 …

---

## [Need advise on how to building a 4 billions documents index with Elasticsearch](https://discuss.elastic.co/t/need-advise-on-how-to-building-a-4-billions-documents-index-with-elasticsearch/167549)

<div class="topic-metadata">

**Author:** [@TheOrbix](https://discuss.elastic.co/u/TheOrbix)\
**Replies:** 2\
**Last updated:** [February 11, 2019, 8:37am UTC](https://discuss.elastic.co/t/need-advise-on-how-to-building-a-4-billions-documents-index-with-elasticsearch/167549 "2019-02-11T08:37:04Z")

</div>

Hi all, I need to estimate the storage and computing requirements required to deploy an Elasticsearch solution capable of handling a quite large document collection. Here are some of the key requirements: the reposito…

---

## [Stored procedure in Elastic search](https://discuss.elastic.co/t/stored-procedure-in-elastic-search/165882)

<div class="topic-metadata">

**Author:** [@Raghunadhan](https://discuss.elastic.co/u/Raghunadhan)\
**Replies:** 10\
**Last updated:** [February 11, 2019, 8:29am UTC](https://discuss.elastic.co/t/stored-procedure-in-elastic-search/165882 "2019-02-11T08:29:49Z")

</div>

Dear All, I from relational database background. In MySQL we use to store datas in database based on conditions for requirements.We used to write script that is stored procedures .Using stored procedure we used to store…

---

## [Elasticsearch master not discoverable after ansible deployment](https://discuss.elastic.co/t/elasticsearch-master-not-discoverable-after-ansible-deployment/167803)

<div class="topic-metadata">

**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Replies:** 1\
**Last updated:** [February 11, 2019, 7:57am UTC](https://discuss.elastic.co/t/elasticsearch-master-not-discoverable-after-ansible-deployment/167803 "2019-02-11T07:57:28Z")

</div>

I have a 1 data - 1 master es cluster. On my master01: ==\> /opt/elasticsearch/logs/master01-elastic.dev.my-local-domain-master01-elastic/esa-local-stg-cluster.log \<== \[2019-02-08T11:06:21,267\]\[INFO \]\[o.e.n.Node …

---

## [Can i delete old documents automatically? (without Curator)](https://discuss.elastic.co/t/can-i-delete-old-documents-automatically-without-curator/167784)

<div class="topic-metadata">

**Author:** [@teemoGod](https://discuss.elastic.co/u/teemoGod)\
**Replies:** 2\
**Last updated:** [February 11, 2019, 6:27am UTC](https://discuss.elastic.co/t/can-i-delete-old-documents-automatically-without-curator/167784 "2019-02-11T06:27:38Z")

</div>

hi. i'm using ElasticSearch 6.4.1 i'm using built-in vega(3.3.1) in Kibana 6.4.1, and vega referencing designated index. so i cant use date-based-name indices. (so i cant using Curator API.) of course, i can re-index…

---

## [Showing list of all configuration changes against their values before the change & Highlighting Configuration/files changes in selected duration from past.H](https://discuss.elastic.co/t/showing-list-of-all-configuration-changes-against-their-values-before-the-change-highlighting-configuration-files-changes-in-selected-duration-from-past-h/167789)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 0\
**Last updated:** [February 11, 2019, 4:47am UTC](https://discuss.elastic.co/t/showing-list-of-all-configuration-changes-against-their-values-before-the-change-highlighting-configuration-files-changes-in-selected-duration-from-past-h/167789 "2019-02-11T04:47:27Z")

</div>

I want to Highlighting Configuration/files changes in selected duration from past.H Can it be possible a help would be really appreciated Best Regards Shrikant

---

## [Elasticsearch failed to start due to TEMP directory contains whitespace](https://discuss.elastic.co/t/elasticsearch-failed-to-start-due-to-temp-directory-contains-whitespace/167787)

<div class="topic-metadata">

**Author:** [@Zhengcong\_Yin](https://discuss.elastic.co/u/Zhengcong_Yin)\
**Replies:** 0\
**Last updated:** [February 11, 2019, 4:02am UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-start-due-to-temp-directory-contains-whitespace/167787 "2019-02-11T04:02:38Z")

</div>

Hi, I recently and suddenly encounter an error message "Could not find or load main class XXXX\\AppData\\Local\\Temp\\elasticsearch" when I tried to start an Elasticsearch instance. My username contains whitespace. It seem…

---

## [Confuse with Array](https://discuss.elastic.co/t/confuse-with-array/167780)

<div class="topic-metadata">

**Author:** [@david\_loh](https://discuss.elastic.co/u/david_loh)\
**Replies:** 0\
**Last updated:** [February 11, 2019, 1:24am UTC](https://discuss.elastic.co/t/confuse-with-array/167780 "2019-02-11T01:24:33Z")

</div>

Hello guys, I'm trying to learn Elasticsearh and I'm getting confused with Array data types. I have define 2 text type fields and I have put some test data in to the index. To my surprise, the index accept combination …

---

## [\[Kibana\]\[Machine learning\]Custom Rule](https://discuss.elastic.co/t/kibana-machine-learning-custom-rule/166809)

<div class="topic-metadata">

**Author:** [@hyhong](https://discuss.elastic.co/u/hyhong)\
**Replies:** 3\
**Last updated:** [February 11, 2019, 1:00am UTC](https://discuss.elastic.co/t/kibana-machine-learning-custom-rule/166809 "2019-02-11T01:00:36Z")

</div>

When I use Machine learning , I need write myself rule , I just see the conditions is number,I need the time range , how can I use by conditions.

---

## [How to change password for Elasticsearch Default users like elastic,kiban... etc](https://discuss.elastic.co/t/how-to-change-password-for-elasticsearch-default-users-like-elastic-kiban-etc/167430)

<div class="topic-metadata">

**Author:** [@Amitittech](https://discuss.elastic.co/u/Amitittech)\
**Replies:** 1\
**Last updated:** [February 11, 2019, 12:17am UTC](https://discuss.elastic.co/t/how-to-change-password-for-elasticsearch-default-users-like-elastic-kiban-etc/167430 "2019-02-11T00:17:42Z")

</div>

Hi Team, I am using kibana 6.4 and elasticsearch 6.4 on window 10 local machine. how to get password to put below \`elasticsearch.username: "kibana" elasticsearch.password: "kibanapassword"\`

---

## [Various Build issues with Master](https://discuss.elastic.co/t/various-build-issues-with-master/167776)

<div class="topic-metadata">

**Author:** [@smonasco](https://discuss.elastic.co/u/smonasco)\
**Replies:** 0\
**Last updated:** [February 11, 2019, 12:13am UTC](https://discuss.elastic.co/t/various-build-issues-with-master/167776 "2019-02-11T00:13:28Z")

</div>

I'm trying to set myself up so I can contribute code. Here is my fork: GitHub - smonasco/elasticsearch: Open Source, Distributed, RESTful Search Engine Just typing \`gradlew build' fails. It's looking for elasticsearch:…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1398)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1400)
