# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1425 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1426 --- ## [Aliases auto-update](https://discuss.elastic.co/t/aliases-auto-update/164291)
**Author:** [@GregoryB-T](https://discuss.elastic.co/u/GregoryB-T)\ **Replies:** 0\ **Last updated:** [January 15, 2019, 10:34am UTC](https://discuss.elastic.co/t/aliases-auto-update/164291 "2019-01-15T10:34:00Z")
Hi I have created some filtered aliases mapped on multiple index with "\*" by the /\_aliases API but i need to refresh them by hand is it possible to auto refresh the aliases ? thanks --- ## [Define explicit mapping/settings per job](https://discuss.elastic.co/t/define-explicit-mapping-settings-per-job/164158)
**Author:** [@David\_Green](https://discuss.elastic.co/u/David_Green)\ **Replies:** 1\ **Last updated:** [January 15, 2019, 10:23am UTC](https://discuss.elastic.co/t/define-explicit-mapping-settings-per-job/164158 "2019-01-15T10:23:30Z")
I wish to index a number of research papers so that I may analyse such features as: word proximity, sentence length, word count, spelling variations etc. I wish to index each document as a single unit of text together w… --- ## [Add new storage for elasticsearch](https://discuss.elastic.co/t/add-new-storage-for-elasticsearch/164273)
**Author:** [@Miguel\_Leite](https://discuss.elastic.co/u/Miguel_Leite)\ **Replies:** 1\ **Last updated:** [January 15, 2019, 10:14am UTC](https://discuss.elastic.co/t/add-new-storage-for-elasticsearch/164273 "2019-01-15T10:14:06Z")
Hello! I need some help on Elasticsearch and adding another storage device in Elastic. The thing is: I have a server running Elasticsearch, Logstash and Kibana. But Elasticsearch data path is running on a disk with only… --- ## [Do I need to have kibana installed when I use a trial license?](https://discuss.elastic.co/t/do-i-need-to-have-kibana-installed-when-i-use-a-trial-license/164139)
**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\ **Replies:** 1\ **Last updated:** [January 15, 2019, 9:51am UTC](https://discuss.elastic.co/t/do-i-need-to-have-kibana-installed-when-i-use-a-trial-license/164139 "2019-01-15T09:51:40Z")
Do I need to install kibana and have it configured when I uses a trial license? --- ## [Start and Stop order of Elastic stack components](https://discuss.elastic.co/t/start-and-stop-order-of-elastic-stack-components/164262)
**Author:** [@DineshTripathi](https://discuss.elastic.co/u/DineshTripathi)\ **Replies:** 1\ **Last updated:** [January 15, 2019, 9:06am UTC](https://discuss.elastic.co/t/start-and-stop-order-of-elastic-stack-components/164262 "2019-01-15T09:06:02Z")
Hello, I don't find sequence of starting and stopping elastic stack components. Elasticsearch logstash kibana beats Also, To start and stop these components, what level of OS permission is needed. --- ## [Elasticsearch Cluster mode - FS for /var/lib/elasticsearch](https://discuss.elastic.co/t/elasticsearch-cluster-mode-fs-for-var-lib-elasticsearch/162336)
**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\ **Replies:** 2\ **Last updated:** [January 15, 2019, 9:02am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-mode-fs-for-var-lib-elasticsearch/162336 "2019-01-15T09:02:31Z")
Hi, I've set up a 3 nodes elasticsearch cluster. My cluster seems healthy. :grinning: { "cluster\_name" : "pprd-log", "status" : "green", "timed\_out" : false, "number\_of\_nodes" : 3, "number\_of\_data\_nodes" : 2, "a… --- ## [Random slow query, many futex time](https://discuss.elastic.co/t/random-slow-query-many-futex-time/164226)
**Author:** [@d1fff15e6947696dfc4a](https://discuss.elastic.co/u/d1fff15e6947696dfc4a)\ **Replies:** 1\ **Last updated:** [January 15, 2019, 8:40am UTC](https://discuss.elastic.co/t/random-slow-query-many-futex-time/164226 "2019-01-15T08:40:55Z")
System Info Debian GNU/Linux 8.11 (jessie) ElasticSearch 2.3.5 128G RAM, 1T SSD Elasticsearch 122node, 100 shard， Data size near 100G per shard.（may be too big） Detail We use elasticsearch in production, but there ar… --- ## [What does “docCount” and "docFreq" mean in the Explain API?](https://discuss.elastic.co/t/what-does-doccount-and-docfreq-mean-in-the-explain-api/163850)
**Author:** [@Masanori\_Ohnishi](https://discuss.elastic.co/u/Masanori_Ohnishi)\ **Replies:** 7\ **Last updated:** [January 15, 2019, 8:37am UTC](https://discuss.elastic.co/t/what-does-doccount-and-docfreq-mean-in-the-explain-api/163850 "2019-01-15T08:37:23Z")
Here's the sample of mapping, register, and search query. mapping curl -X PUT "es:9200/english1" -H 'Content-Type: application/json' -d' { "mappings": { "\_doc": { "properties": { "header" : { … --- ## [Unknown field only in visualise and field number problem](https://discuss.elastic.co/t/unknown-field-only-in-visualise-and-field-number-problem/164261)
**Author:** [@Guillaume\_RENARD](https://discuss.elastic.co/u/Guillaume_RENARD)\ **Replies:** 0\ **Last updated:** [January 15, 2019, 8:29am UTC](https://discuss.elastic.co/t/unknown-field-only-in-visualise-and-field-number-problem/164261 "2019-01-15T08:29:21Z")
Hello, I'm using an elasticsearch cluster (6.5.4) but I have a strange behaviour in management In this image we can see the sum of fields per index pattern is way lower than the one in \_all (3727) The issue I have i… --- ## [We are looking security on elastic search](https://discuss.elastic.co/t/we-are-looking-security-on-elastic-search/163900)
**Author:** [@Bhanu\_Chandar](https://discuss.elastic.co/u/Bhanu_Chandar)\ **Replies:** 2\ **Last updated:** [January 15, 2019, 8:05am UTC](https://discuss.elastic.co/t/we-are-looking-security-on-elastic-search/163900 "2019-01-15T08:05:42Z")
Hi, We are looking role-based control on the elastic search, can you suggest the tool to allow the access controls on ELK --- ## [Aggregation: Order by bucket count descending](https://discuss.elastic.co/t/aggregation-order-by-bucket-count-descending/164164)
**Author:** [@hello](https://discuss.elastic.co/u/hello)\ **Replies:** 1\ **Last updated:** [January 15, 2019, 8:03am UTC](https://discuss.elastic.co/t/aggregation-order-by-bucket-count-descending/164164 "2019-01-15T08:03:39Z")
If I use the following aggregation as an example: { "aggs" : { "actors" : { "terms" : { "field" : "actors" }, "aggs" : { "costars" : { … --- ## [Use static data as a "pseudo-aggregation" in Elasticsearch query?](https://discuss.elastic.co/t/use-static-data-as-a-pseudo-aggregation-in-elasticsearch-query/164258)
**Author:** [@Marc\_Zahn](https://discuss.elastic.co/u/Marc_Zahn)\ **Replies:** 0\ **Last updated:** [January 15, 2019, 8:01am UTC](https://discuss.elastic.co/t/use-static-data-as-a-pseudo-aggregation-in-elasticsearch-query/164258 "2019-01-15T08:01:03Z")
Hi, I have a quite simple question: Since I need some data in an aggregation for filtering documents I need some static data that I can use for comparing to other values. Somehow like this: ... "group\_by\_sth": { "t… --- ## [Suspicious memory leak due to netty PoolThreadCache](https://discuss.elastic.co/t/suspicious-memory-leak-due-to-netty-poolthreadcache/163730)
**Author:** [@howardhuang](https://discuss.elastic.co/u/howardhuang)\ **Replies:** 7\ **Last updated:** [January 15, 2019, 7:57am UTC](https://discuss.elastic.co/t/suspicious-memory-leak-due-to-netty-poolthreadcache/163730 "2019-01-15T07:57:32Z")
Hi, We have 10 nodes based on ES 5.6.4, and each node 8Core, 8GB memory. The cluster only have one index with 10 shards 1 replica. Each shard has around 180GB data (single big shard is a history issue). One day, cluste… --- ## [Elasticsearch couldn't start and no logs](https://discuss.elastic.co/t/elasticsearch-couldnt-start-and-no-logs/163535)
**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\ **Replies:** 2\ **Last updated:** [January 15, 2019, 7:48am UTC](https://discuss.elastic.co/t/elasticsearch-couldnt-start-and-no-logs/163535 "2019-01-15T07:48:08Z")
I have a cluster with 2 nodes. As of now I cannot start the other node. I didn't know what happen. It does now give logs also. when i try to command service elasticsearch start this is the output: ================… --- ## [Elasticsearch-setup-passwords ssl connection issue](https://discuss.elastic.co/t/elasticsearch-setup-passwords-ssl-connection-issue/163382)
**Author:** [@rani](https://discuss.elastic.co/u/rani)\ **Replies:** 4\ **Last updated:** [January 15, 2019, 7:42am UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords-ssl-connection-issue/163382 "2019-01-15T07:42:22Z")
Hello there I need to change the passwords via the "elasticsearch-setup-passwords" command. It's been working without any problems until I secured my connections with TLS. Now I get the following error: SSL connection… --- ## [com.google.common.util.concurrent.ExecutionError: java.lang.NoClassDefFoundError: com/carrotsearch/hppc/IntSet](https://discuss.elastic.co/t/com-google-common-util-concurrent-executionerror-java-lang-noclassdeffounderror-com-carrotsearch-hppc-intset/164238)
**Author:** [@Dale](https://discuss.elastic.co/u/Dale)\ **Replies:** 1\ **Last updated:** [January 15, 2019, 7:41am UTC](https://discuss.elastic.co/t/com-google-common-util-concurrent-executionerror-java-lang-noclassdeffounderror-com-carrotsearch-hppc-intset/164238 "2019-01-15T07:41:09Z")
Hi.Recently i try to use ES 2.4.4.But i am getting an Exception when i try to connect java client.I have no idea to solve this.Maven dependencies? I need your help.Thanks. Exception: com.google.common.util.concurrent.… --- ## [Elasticsearch First Response is very slow](https://discuss.elastic.co/t/elasticsearch-first-response-is-very-slow/164245)
**Author:** [@nuwancs](https://discuss.elastic.co/u/nuwancs)\ **Replies:** 4\ **Last updated:** [January 15, 2019, 7:30am UTC](https://discuss.elastic.co/t/elasticsearch-first-response-is-very-slow/164245 "2019-01-15T07:30:10Z")
I have 7 days of data in 3 node cluster. 1 shard per index with one segment. I am planning to have data for 90 days later. I try to view data for last 90 days(only 7 days of data really available) using date picker in k… --- ## [Update Elasticsearch for newbie](https://discuss.elastic.co/t/update-elasticsearch-for-newbie/164092)
**Author:** [@Dmitrij](https://discuss.elastic.co/u/Dmitrij)\ **Replies:** 6\ **Last updated:** [January 15, 2019, 5:43am UTC](https://discuss.elastic.co/t/update-elasticsearch-for-newbie/164092 "2019-01-15T05:43:35Z")
Hello. Please tell me, if when updating the version of the elastic, it does not matter to me that the old index is saved - can I just delete the old version and install the new one? --- ## [Do I still have to setup roles and users after I successfully added one user in file realm?](https://discuss.elastic.co/t/do-i-still-have-to-setup-roles-and-users-after-i-successfully-added-one-user-in-file-realm/164143)
**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\ **Replies:** 3\ **Last updated:** [January 15, 2019, 3:27am UTC](https://discuss.elastic.co/t/do-i-still-have-to-setup-roles-and-users-after-i-successfully-added-one-user-in-file-realm/164143 "2019-01-15T03:27:50Z")
In the online document - Configuring security in elasticsearch, https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-security.html# the step 7 is Choose which types of realms you want to use to … --- ## [Trial license](https://discuss.elastic.co/t/trial-license/164116)
**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\ **Replies:** 3\ **Last updated:** [January 15, 2019, 1:09am UTC](https://discuss.elastic.co/t/trial-license/164116 "2019-01-15T01:09:05Z")
After I changed back to basic license after starting trail license, I found that I can't start trail license again, though it hasn't reached the deadline of one month since I first started it. The response is ""eligibl… --- ## [Number of master nodes](https://discuss.elastic.co/t/number-of-master-nodes/164207)
**Author:** [@thinkdffrnt](https://discuss.elastic.co/u/thinkdffrnt)\ **Replies:** 2\ **Last updated:** [January 15, 2019, 1:06am UTC](https://discuss.elastic.co/t/number-of-master-nodes/164207 "2019-01-15T01:06:19Z")
I have two clouds, with 12 data nodes in each cloud = 24 data nodes 2 master nodes in each cloud = 4 master nodes Does this configuration look good? Can I adjust the above configuration? Or should I go for the below c… --- ## [Turning off Elasticsearch's logrotation (2.2)](https://discuss.elastic.co/t/turning-off-elasticsearchs-logrotation-2-2/164216)
**Author:** [@chikorita](https://discuss.elastic.co/u/chikorita)\ **Replies:** 0\ **Last updated:** [January 15, 2019, 12:56am UTC](https://discuss.elastic.co/t/turning-off-elasticsearchs-logrotation-2-2/164216 "2019-01-15T00:56:41Z")
Hello, I have a cluster running ES 2.2. I am trying to disable the automatic log rotating that log4j is doing with dailyRollingFile without restarting nodes in my cluster (so without editing logging.yml). I tried to se… --- ## [Docker swarm support](https://discuss.elastic.co/t/docker-swarm-support/164203)
**Author:** [@Ram\_Ibaset](https://discuss.elastic.co/u/Ram_Ibaset)\ **Replies:** 0\ **Last updated:** [January 14, 2019, 10:10pm UTC](https://discuss.elastic.co/t/docker-swarm-support/164203 "2019-01-14T22:10:25Z")
Up until version 6.3.0 I was able to run elasticstack with master, data and coordinator nodes in a docker swarm. After upgrading to 6.5.x I have had no success. The limits.conf overrides dont work and the MEMLOCK does … --- ## [RollOver API - Add Mapping](https://discuss.elastic.co/t/rollover-api-add-mapping/164060)
**Author:** [@Fabricio\_Archanjo](https://discuss.elastic.co/u/Fabricio_Archanjo)\ **Replies:** 3\ **Last updated:** [January 14, 2019, 10:03pm UTC](https://discuss.elastic.co/t/rollover-api-add-mapping/164060 "2019-01-14T22:03:30Z")
Hi everyone, I'm trying to create a service to rollover an index to me, but before to rollover I have to copy my setting and mapping to add a new index to be created. Basically: I'm getting a primary mapping: GetMap… --- ## [Unable to delete by query](https://discuss.elastic.co/t/unable-to-delete-by-query/164198)
**Author:** [@sdndude](https://discuss.elastic.co/u/sdndude)\ **Replies:** 0\ **Last updated:** [January 14, 2019, 9:02pm UTC](https://discuss.elastic.co/t/unable-to-delete-by-query/164198 "2019-01-14T21:02:26Z")
I do some post processing on some logs for another system that we use and I am trying to get rid of docs that have invalid/missing data in them. This is not the best way to solve this, but for now it's what I have to do… --- ## [Searching multiple words in multiple fields using C# NEST](https://discuss.elastic.co/t/searching-multiple-words-in-multiple-fields-using-c-nest/163468)
**Author:** [@waleedkaramat](https://discuss.elastic.co/u/waleedkaramat)\ **Replies:** 3\ **Last updated:** [January 14, 2019, 8:32pm UTC](https://discuss.elastic.co/t/searching-multiple-words-in-multiple-fields-using-c-nest/163468 "2019-01-14T20:32:16Z")
Hello All, I want to write an elasticsearch query in C# which can search multiple words in multiple fields. For example. Query: John California Honda Fields: Name, State, Car This query should search the term John i… --- ## [Could I query all docs where there are multiple occurrences of my term?](https://discuss.elastic.co/t/could-i-query-all-docs-where-there-are-multiple-occurrences-of-my-term/163276)
**Author:** [@tchung](https://discuss.elastic.co/u/tchung)\ **Replies:** 2\ **Last updated:** [January 14, 2019, 7:39pm UTC](https://discuss.elastic.co/t/could-i-query-all-docs-where-there-are-multiple-occurrences-of-my-term/163276 "2019-01-14T19:39:32Z")
I want to use Elasticsearch to index event data and as events come in, I want to append to an "events" array in the document. Say it ends up looking like this: { "user":"abc", "events": \[ { "action": "foo… --- ## [Scheduled Watches not Triggering](https://discuss.elastic.co/t/scheduled-watches-not-triggering/162523)
**Author:** [@ccampbell](https://discuss.elastic.co/u/ccampbell)\ **Replies:** 9\ **Last updated:** [January 14, 2019, 7:14pm UTC](https://discuss.elastic.co/t/scheduled-watches-not-triggering/162523 "2019-01-14T19:14:17Z")
I have 3 Scheduled Watches running on my 3-Node ES cluster. Since I took the nodes down for patching at the start of December, the watches no longer fire at 6 AM as scheduled. All three watches show the status of "Firing… --- ## [Elasticsearch Production Mode](https://discuss.elastic.co/t/elasticsearch-production-mode/164189)
**Author:** [@Rivar](https://discuss.elastic.co/u/Rivar)\ **Replies:** 0\ **Last updated:** [January 14, 2019, 7:03pm UTC](https://discuss.elastic.co/t/elasticsearch-production-mode/164189 "2019-01-14T19:03:14Z")
Hi!! For hardware reasons I want to put three Elasticsearch nodes in a server. I created a virtual network interface to each node and I assigned an ip for each, but i want to put it in production mode all nodes. Is the… --- ## [Restore kibana json file via curl](https://discuss.elastic.co/t/restore-kibana-json-file-via-curl/164176)
**Author:** [@Hanneu](https://discuss.elastic.co/u/Hanneu)\ **Replies:** 1\ **Last updated:** [January 14, 2019, 4:43pm UTC](https://discuss.elastic.co/t/restore-kibana-json-file-via-curl/164176 "2019-01-14T16:43:51Z")
Hello expert, I want to backup and restore kibana saved objects via curl command. For backup purpose, I created kibana\_backup.sh which and below is the backup curl command:- curl --user ericadmin:xxxxx -XPOST "http://l… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1424) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1426)