# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1431

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1432

---

## [Unable to upgrade platinum license on elasticsearch 6.3.0](https://discuss.elastic.co/t/unable-to-upgrade-platinum-license-on-elasticsearch-6-3-0/163516)

<div class="topic-metadata">

**Author:** [@Ronnie16](https://discuss.elastic.co/u/Ronnie16)\
**Replies:** 1\
**Last updated:** [January 9, 2019, 12:26pm UTC](https://discuss.elastic.co/t/unable-to-upgrade-platinum-license-on-elasticsearch-6-3-0/163516 "2019-01-09T12:26:29Z")

</div>

I was trying to upgrade to platinum license for my non prod elk cluster but it threw an error saying either TLS has to be configured or security should be disabled. But even after disabling the security, I'm not able to…

---

## [How frequently do we upgrade the cluster version?](https://discuss.elastic.co/t/how-frequently-do-we-upgrade-the-cluster-version/163519)

<div class="topic-metadata">

**Author:** [@Madhukar](https://discuss.elastic.co/u/Madhukar)\
**Replies:** 1\
**Last updated:** [January 9, 2019, 11:45am UTC](https://discuss.elastic.co/t/how-frequently-do-we-upgrade-the-cluster-version/163519 "2019-01-09T11:45:00Z")

</div>

How frequently do we upgrade the cluster version?

---

## [Elasticsearch log size](https://discuss.elastic.co/t/elasticsearch-log-size/163518)

<div class="topic-metadata">

**Author:** [@Madhukar](https://discuss.elastic.co/u/Madhukar)\
**Replies:** 1\
**Last updated:** [January 9, 2019, 11:40am UTC](https://discuss.elastic.co/t/elasticsearch-log-size/163518 "2019-01-09T11:40:42Z")

</div>

Hi all, How do we calculate the event size in Elasticsearch? Size of data before parsing (enrichment) Enrichment factor Size of data after enrichment Size of data after compression (if used best\_compression codec) Th…

---

## [Problem launching Elasticsearch on Windows 10](https://discuss.elastic.co/t/problem-launching-elasticsearch-on-windows-10/163396)

<div class="topic-metadata">

**Author:** [@Peterleforlag](https://discuss.elastic.co/u/Peterleforlag)\
**Replies:** 3\
**Last updated:** [January 9, 2019, 11:39am UTC](https://discuss.elastic.co/t/problem-launching-elasticsearch-on-windows-10/163396 "2019-01-09T11:39:55Z")

</div>

I get the following error log while launching elasticsearch. \[2019-01-08T16:18:02,337\]\[ERROR\]\[o.e.b.Bootstrap \] \[LRI-L03240\] Exception org.elasticsearch.transport.BindTransportException: Failed to bind to \[930…

---

## [Elasticsearch filters](https://discuss.elastic.co/t/elasticsearch-filters/163453)

<div class="topic-metadata">

**Author:** [@renjiie](https://discuss.elastic.co/u/renjiie)\
**Replies:** 3\
**Last updated:** [January 9, 2019, 11:36am UTC](https://discuss.elastic.co/t/elasticsearch-filters/163453 "2019-01-09T11:36:07Z")

</div>

I will receive the filter inputs from the front-end some may be null or empty but in the elasticsearch query filter all the field should be present . How to get response even the inputs are empty for some filters ? { …

---

## [Multi tenancy with varying document mappings](https://discuss.elastic.co/t/multi-tenancy-with-varying-document-mappings/163508)

<div class="topic-metadata">

**Author:** [@jameso](https://discuss.elastic.co/u/jameso)\
**Replies:** 3\
**Last updated:** [January 9, 2019, 11:24am UTC](https://discuss.elastic.co/t/multi-tenancy-with-varying-document-mappings/163508 "2019-01-09T11:24:53Z")

</div>

We have an elasticsearch cluster where we store search data for multiple customers. Right now, we use an index per type of document and filter based on customer ID. This works well for us as all documents are the same. W…

---

## [ES Cluster not importing dangled indices after restart](https://discuss.elastic.co/t/es-cluster-not-importing-dangled-indices-after-restart/163371)

<div class="topic-metadata">

**Author:** [@KevinK](https://discuss.elastic.co/u/KevinK)\
**Replies:** 6\
**Last updated:** [January 9, 2019, 11:07am UTC](https://discuss.elastic.co/t/es-cluster-not-importing-dangled-indices-after-restart/163371 "2019-01-09T11:07:17Z")

</div>

Hi, I'm running an ES cluster version 6.3.0 in Kubernetes (composed of 3 master nodes, 2 ingest nodes and 4 data nodes). I needed to move the cluster to new servers with more memory, but after I restarted the cluster, i…

---

## [Upgrade advice](https://discuss.elastic.co/t/upgrade-advice/163517)

<div class="topic-metadata">

**Author:** [@Madhukar](https://discuss.elastic.co/u/Madhukar)\
**Replies:** 0\
**Last updated:** [January 9, 2019, 11:19am UTC](https://discuss.elastic.co/t/upgrade-advice/163517 "2019-01-09T11:19:20Z")

</div>

Hi all, I want to upgrade my cluster from 6.2.4 to 6.5.4 (latest version) Below are the components: 1 master node 1 data node 1 kibana node 1 elastalert engine 1 kafka node (Kafka version kafka\_2.11) 2 logstash nodes …

---

## [Optimizing Kibana / Elastic for SIEM to stop Discover: Gateway Timeout errors](https://discuss.elastic.co/t/optimizing-kibana-elastic-for-siem-to-stop-discover-gateway-timeout-errors/163501)

<div class="topic-metadata">

**Author:** [@CamTheMan](https://discuss.elastic.co/u/CamTheMan)\
**Replies:** 3\
**Last updated:** [January 9, 2019, 10:40am UTC](https://discuss.elastic.co/t/optimizing-kibana-elastic-for-siem-to-stop-discover-gateway-timeout-errors/163501 "2019-01-09T10:40:43Z")

</div>

Hello, I have a 5 server cluster running each with: 24 CPU Cores 64 GB RAM (30 for elastic the rest for file caches) Lots of SSD disk (No spinners) We have: Nodes: 5 Indices: 455 Memory: 38.9 GB / 154.5 GB To…

---

## [Merge not starting automatically](https://discuss.elastic.co/t/merge-not-starting-automatically/163408)

<div class="topic-metadata">

**Author:** [@Matteo\_Grolla](https://discuss.elastic.co/u/Matteo_Grolla)\
**Replies:** 4\
**Last updated:** [January 9, 2019, 9:44am UTC](https://discuss.elastic.co/t/merge-not-starting-automatically/163408 "2019-01-09T09:44:23Z")

</div>

Hi all! I'm using ES 5.3 and I have an index with 800k docs ~16GB of data I deleted ~500k docs and refreshed the index cpus and disks are not under load I expected a merge to happen but after several minutes (20 mi…

---

## [Elasticsearch Resource requirements](https://discuss.elastic.co/t/elasticsearch-resource-requirements/163215)

<div class="topic-metadata">

**Author:** [@Ali\_Reza\_Akbarian](https://discuss.elastic.co/u/Ali_Reza_Akbarian)\
**Replies:** 3\
**Last updated:** [January 9, 2019, 9:41am UTC](https://discuss.elastic.co/t/elasticsearch-resource-requirements/163215 "2019-01-09T09:41:18Z")

</div>

Hi , We are a small business and we currently provide payment services to 60,000 users. We use Elasticsearch to search our logs. Our current resources for using elasticsearch are as follows : 3 elasticsearch master no…

---

## [Query Elastic Search via the query string URL (from a mobile client)](https://discuss.elastic.co/t/query-elastic-search-via-the-query-string-url-from-a-mobile-client/163174)

<div class="topic-metadata">

**Author:** [@wissil](https://discuss.elastic.co/u/wissil)\
**Replies:** 2\
**Last updated:** [January 9, 2019, 9:30am UTC](https://discuss.elastic.co/t/query-elastic-search-via-the-query-string-url-from-a-mobile-client/163174 "2019-01-09T09:30:14Z")

</div>

We have a use - case where we have a backend service and mobile clients of that service. Think of something like the Uber app. The requirement is that our mobile clients should be able to search entities based on multip…

---

## [Insert into externe table Hive](https://discuss.elastic.co/t/insert-into-externe-table-hive/163482)

<div class="topic-metadata">

**Author:** [@anass](https://discuss.elastic.co/u/anass)\
**Replies:** 0\
**Last updated:** [January 9, 2019, 9:06am UTC](https://discuss.elastic.co/t/insert-into-externe-table-hive/163482 "2019-01-09T09:06:31Z")

</div>

Hi, i want to insert into externe table Hive but i have this error. Error: java.lang.NoClassDefFoundError: org/elasticsearch/hadoop/mr/EsOutputFormat$EsOutputCommitter ADD JAR hdfs:/user/lib/elastic/commons-httpclie…

---

## [Can we create Dynamic fields in schema?](https://discuss.elastic.co/t/can-we-create-dynamic-fields-in-schema/163464)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 2\
**Last updated:** [January 9, 2019, 9:03am UTC](https://discuss.elastic.co/t/can-we-create-dynamic-fields-in-schema/163464 "2019-01-09T09:03:33Z")

</div>

Hello Team, Is it possible to create Dynamic fields in schema? Use case :if I am ingesting a document with 5 fields and all of them are typicallye double and have same properties.so instead of creating 5 different fie…

---

## [Reindex to join field type](https://discuss.elastic.co/t/reindex-to-join-field-type/163472)

<div class="topic-metadata">

**Author:** [@M.alsioufi](https://discuss.elastic.co/u/M.alsioufi)\
**Replies:** 0\
**Last updated:** [January 9, 2019, 8:25am UTC](https://discuss.elastic.co/t/reindex-to-join-field-type/163472 "2019-01-09T08:25:32Z")

</div>

Hi, I have an index with a field which has a value of array of objects, I want to reindex this to a field of type join (parent-child relation) in other words I want to move from this: { "field\_A": "test field", "field\_…

---

## [How can we eliminate the extra fields from elasticsearch query result?](https://discuss.elastic.co/t/how-can-we-eliminate-the-extra-fields-from-elasticsearch-query-result/163462)

<div class="topic-metadata">

**Author:** [@vinodanumarla](https://discuss.elastic.co/u/vinodanumarla)\
**Replies:** 1\
**Last updated:** [January 9, 2019, 7:33am UTC](https://discuss.elastic.co/t/how-can-we-eliminate-the-extra-fields-from-elasticsearch-query-result/163462 "2019-01-09T07:33:07Z")

</div>

{ "\_id": "0048160a463a73faaa6c90f5af027772", "\_rev": "1-ff6255309f1b873a4e482310843a8a15", "timestamp": 1496275536932.6602, "results": { "lines": { "S1": \[ { "needed\_key": "foo", "not\_needed\_ke…

---

## [High Cpu usage in elasticsearch nodes](https://discuss.elastic.co/t/high-cpu-usage-in-elasticsearch-nodes/161504)

<div class="topic-metadata">

**Author:** [@sukku77](https://discuss.elastic.co/u/sukku77)\
**Replies:** 4\
**Last updated:** [January 9, 2019, 6:27am UTC](https://discuss.elastic.co/t/high-cpu-usage-in-elasticsearch-nodes/161504 "2019-01-09T06:27:16Z")

</div>

Hi , I am using ELK 6.4.0. ES cluster nodes are using high cpu usage with out much load. I observed garbage collection pauses in logs. ES configurations: 1. 5 node cluster 2. 8 core and 32gb 3. Shards 5 per index I…

---

## [Elasticsearch Analyzer:Stemmer giving different results](https://discuss.elastic.co/t/elasticsearch-analyzer-stemmer-giving-different-results/163456)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 0\
**Last updated:** [January 9, 2019, 6:19am UTC](https://discuss.elastic.co/t/elasticsearch-analyzer-stemmer-giving-different-results/163456 "2019-01-09T06:19:20Z")

</div>

Hi Team Below are my settings for custom analyzer "analyzer": { "my\_analyzer": { "type": "custom", "tokenizer": "standard", "filter": \[ "possessive\_stemmer", "lowercase", …

---

## [How to Verify that the xpack.monitoring.enabled setting is true](https://discuss.elastic.co/t/how-to-verify-that-the-xpack-monitoring-enabled-setting-is-true/163447)

<div class="topic-metadata">

**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\
**Replies:** 2\
**Last updated:** [January 9, 2019, 3:18am UTC](https://discuss.elastic.co/t/how-to-verify-that-the-xpack-monitoring-enabled-setting-is-true/163447 "2019-01-09T03:18:41Z")

</div>

I add "xpack.monitoring.enabled: true" in elasticsearch.yml. But when I use "curl: Host IP:9200/\_nodes?filter\_path=\*\*.xpack&pretty", it only returns the following: "xpack" : { "installed" : "true" } and no further in…

---

## [Backup for Elasticsearch](https://discuss.elastic.co/t/backup-for-elasticsearch/163426)

<div class="topic-metadata">

**Author:** [@Maddy\_M](https://discuss.elastic.co/u/Maddy_M)\
**Replies:** 3\
**Last updated:** [January 9, 2019, 1:05am UTC](https://discuss.elastic.co/t/backup-for-elasticsearch/163426 "2019-01-09T01:05:52Z")

</div>

Hi, Currently, I am using weekly indicies and I would like to take back ups for multiple indicies on weekly basis. I need to take a full back up for the first time and then I need to take weekly back up. The reason I n…

---

## [Join mappings under one index using common key](https://discuss.elastic.co/t/join-mappings-under-one-index-using-common-key/163010)

<div class="topic-metadata">

**Author:** [@alf\_sender](https://discuss.elastic.co/u/alf_sender)\
**Replies:** 2\
**Last updated:** [January 9, 2019, 12:57am UTC](https://discuss.elastic.co/t/join-mappings-under-one-index-using-common-key/163010 "2019-01-09T00:57:49Z")

</div>

Hi, I have index which has multiple mappings defined under it. Is there a way to join two mappings to get data from both by common key? Regards.

---

## [Fluent Mapping Dictionary\<string, MyDto\>](https://discuss.elastic.co/t/fluent-mapping-dictionary-string-mydto/163434)

<div class="topic-metadata">

**Author:** [@Hossein\_Nassiri](https://discuss.elastic.co/u/Hossein_Nassiri)\
**Replies:** 1\
**Last updated:** [January 9, 2019, 12:41am UTC](https://discuss.elastic.co/t/fluent-mapping-dictionary-string-mydto/163434 "2019-01-09T00:41:32Z")

</div>

Hi I have a dictionary which I want to map using fluent mapping, and for some properties of MyDto class, I need to add normalizer. // ... // Dictionary\<string, MyDto\> SomeCollection {get;set;} // ... // class MyDto …

---

## [Elastic Search disk/storage usage identification](https://discuss.elastic.co/t/elastic-search-disk-storage-usage-identification/163282)

<div class="topic-metadata">

**Author:** [@naveengauba](https://discuss.elastic.co/u/naveengauba)\
**Replies:** 2\
**Last updated:** [January 8, 2019, 10:41pm UTC](https://discuss.elastic.co/t/elastic-search-disk-storage-usage-identification/163282 "2019-01-08T22:41:43Z")

</div>

Hi All I am running Elastic Search 6.2.4 on a 150 GB virtual machine. The disk is 31% utilized which means more than 100 GB is free. df -k . Filesystem 1K-blocks Used Available Use% Mounted on /dev/m…

---

## [ElasticSearch high CPU load and Excessive garbage collection](https://discuss.elastic.co/t/elasticsearch-high-cpu-load-and-excessive-garbage-collection/163422)

<div class="topic-metadata">

**Author:** [@Shwetank\_Tripathi](https://discuss.elastic.co/u/Shwetank_Tripathi)\
**Replies:** 0\
**Last updated:** [January 8, 2019, 6:27pm UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-load-and-excessive-garbage-collection/163422 "2019-01-08T18:27:27Z")

</div>

Hi, I am using 3 node cluster in elastic search having configuration 4core 16GB. Heap size allocated for elastic search is 8GB. I have only 3 indices in my cluster having a total of 17lac records (in all 3 indices combin…

---

## [Sending json data into elasticsearch using filebeat and logstash](https://discuss.elastic.co/t/sending-json-data-into-elasticsearch-using-filebeat-and-logstash/163419)

<div class="topic-metadata">

**Author:** [@mgolubov55](https://discuss.elastic.co/u/mgolubov55)\
**Replies:** 0\
**Last updated:** [January 8, 2019, 6:14pm UTC](https://discuss.elastic.co/t/sending-json-data-into-elasticsearch-using-filebeat-and-logstash/163419 "2019-01-08T18:14:48Z")

</div>

I have a utility written in C#/Ado.Net that produces a text file in the following (json) format: \[{"Description":"Import AgoraOrder - APAC","NextStartTime":"2019-01-08T15:05:00","LastRunTime":"2019-01-07T15:05:26.78","J…

---

## [Having trouble with dynamic template, not working](https://discuss.elastic.co/t/having-trouble-with-dynamic-template-not-working/163414)

<div class="topic-metadata">

**Author:** [@drsaison](https://discuss.elastic.co/u/drsaison)\
**Replies:** 0\
**Last updated:** [January 8, 2019, 5:34pm UTC](https://discuss.elastic.co/t/having-trouble-with-dynamic-template-not-working/163414 "2019-01-08T17:34:01Z")

</div>

I created schema with the following dynamic\_template { "mappings": { "site": { "properties": { "id": { "type": "text", "fields": { …

---

## [Curator: allocating / moving shards to non-existing nodes](https://discuss.elastic.co/t/curator-allocating-moving-shards-to-non-existing-nodes/163386)

<div class="topic-metadata">

**Author:** [@hage42](https://discuss.elastic.co/u/hage42)\
**Replies:** 1\
**Last updated:** [January 8, 2019, 5:51pm UTC](https://discuss.elastic.co/t/curator-allocating-moving-shards-to-non-existing-nodes/163386 "2019-01-08T17:51:37Z")

</div>

Hi, consider the following action defined in curator: 1: action: allocation description: "move data from hot to warm nodes after 14 days" options: key: box\_type value: warm allocation\_type: require wait\_for\_com…

---

## [Migrate Data from Elastic Cloud to AWS ES](https://discuss.elastic.co/t/migrate-data-from-elastic-cloud-to-aws-es/163380)

<div class="topic-metadata">

**Author:** [@kaushik.vankayala](https://discuss.elastic.co/u/kaushik.vankayala)\
**Replies:** 10\
**Last updated:** [January 8, 2019, 5:36pm UTC](https://discuss.elastic.co/t/migrate-data-from-elastic-cloud-to-aws-es/163380 "2019-01-08T17:36:58Z")

</div>

Hello, I am trying to migrate some indices from my Elastic Cloud Cluster to AWS ES. Since everything is on cloud i am unable to achieve it with the tutorials and demos listed out in the internet; While there are coupl…

---

## [Json data file to elasticsearch via filebeat and logstash](https://discuss.elastic.co/t/json-data-file-to-elasticsearch-via-filebeat-and-logstash/163404)

<div class="topic-metadata">

**Author:** [@mgolubov55](https://discuss.elastic.co/u/mgolubov55)\
**Replies:** 0\
**Last updated:** [January 8, 2019, 4:23pm UTC](https://discuss.elastic.co/t/json-data-file-to-elasticsearch-via-filebeat-and-logstash/163404 "2019-01-08T16:23:44Z")

</div>

I have a little utility in C#/Ado.Net that will be running a query multiple times during the day and rewriting a text file in a folder in the following json format: \[{"Description":"Import AgoraOrder - APAC","NextStartT…

---

## [Curl: (7) couldn't connect to host](https://discuss.elastic.co/t/curl-7-couldnt-connect-to-host/162709)

<div class="topic-metadata">

**Author:** [@simpsonr](https://discuss.elastic.co/u/simpsonr)\
**Replies:** 42\
**Last updated:** [January 8, 2019, 4:13pm UTC](https://discuss.elastic.co/t/curl-7-couldnt-connect-to-host/162709 "2019-01-08T16:13:41Z")

</div>

Good Afternoon team, I keeping receiving this error. any help is appreciated. Thanks, rob

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1430)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1432)
