# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1439 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1440 --- ## [Safely deleting indices](https://discuss.elastic.co/t/safely-deleting-indices/162525)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 3\ **Last updated:** [December 31, 2018, 5:50pm UTC](https://discuss.elastic.co/t/safely-deleting-indices/162525 "2018-12-31T17:50:46Z")
I wanted to clean up old indices so I deleted them. Now, I have started seeing the following exceptions. \[2018-12-31T07:22:02,260\]\[WARN \]\[o.e.i.s.GlobalCheckpointSyncAction\] \[elkelastic01.host1\] unexpected error during … --- ## [Deleting daily indices](https://discuss.elastic.co/t/deleting-daily-indices/162514)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 4\ **Last updated:** [December 31, 2018, 5:08pm UTC](https://discuss.elastic.co/t/deleting-daily-indices/162514 "2018-12-31T17:08:15Z")
I am having daily indices. I want to delete past indices beyond the last seven days. I read about date maths in index names but I dont find a direct way of doing that in a single query. My current strategy is as follows… --- ## [Mismatched CPU usages on data nodes](https://discuss.elastic.co/t/mismatched-cpu-usages-on-data-nodes/161570)
**Author:** [@CityofRome](https://discuss.elastic.co/u/CityofRome)\ **Replies:** 5\ **Last updated:** [December 31, 2018, 3:01pm UTC](https://discuss.elastic.co/t/mismatched-cpu-usages-on-data-nodes/161570 "2018-12-31T15:01:44Z")
We've got three Elasticsearch data nodes and one master node. One of them generally uses approximately 25-33% the CPU usage of the other two and I can't figure out why. I ran a query yesterday and this one node was at … --- ## [Difference of distance calculation between ES version 1.7.4 and 6.3.2 (distanceInkm in 1.7.4 vs arcDistance in 6.3.2)](https://discuss.elastic.co/t/difference-of-distance-calculation-between-es-version-1-7-4-and-6-3-2-distanceinkm-in-1-7-4-vs-arcdistance-in-6-3-2/162512)
**Author:** [@Jeeson\_Jacob](https://discuss.elastic.co/u/Jeeson_Jacob)\ **Replies:** 1\ **Last updated:** [December 31, 2018, 2:56pm UTC](https://discuss.elastic.co/t/difference-of-distance-calculation-between-es-version-1-7-4-and-6-3-2-distanceinkm-in-1-7-4-vs-arcdistance-in-6-3-2/162512 "2018-12-31T14:56:36Z")
Hi, I have recently upgraded ES from 1.7.4 to 6.3.2. After upgrading the distance calculation between the given point and geopoints in ES are showing different results. For example, in 1.7.4, distance between 2 geo poi… --- ## ["cluster\_block\_exception", "reason"=\>"blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];"})](https://discuss.elastic.co/t/cluster-block-exception-reason-blocked-by-forbidden-12-index-read-only-allow-delete-api/162449)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 4\ **Last updated:** [December 31, 2018, 2:25pm UTC](https://discuss.elastic.co/t/cluster-block-exception-reason-blocked-by-forbidden-12-index-read-only-allow-delete-api/162449 "2018-12-31T14:25:57Z")
it looks like I ran out of space. I free up some space by deleted bunch of unneeded indices and docs. ... yet still keep getting following error: logstash | \[2018-12-30T15:38:10,978\]\[INFO \]\[logstash.outputs.elasticsea… --- ## [Wrong date math expression calculation with week value](https://discuss.elastic.co/t/wrong-date-math-expression-calculation-with-week-value/162521)
**Author:** [@singrahu](https://discuss.elastic.co/u/singrahu)\ **Replies:** 0\ **Last updated:** [December 31, 2018, 1:38pm UTC](https://discuss.elastic.co/t/wrong-date-math-expression-calculation-with-week-value/162521 "2018-12-31T13:38:25Z")
While trying to create an index in Elasticsearch with date math exprssion in it, wrong index is being created. Today is 31st Dec 2018, and running following command creates an index named tests-2018.01 #PUT /\ **Author:** [@IlyaG](https://discuss.elastic.co/u/IlyaG)\ **Replies:** 1\ **Last updated:** [December 31, 2018, 12:53pm UTC](https://discuss.elastic.co/t/routing-is-missing-for-join-field-relation/162502 "2018-12-31T12:53:20Z") Process: I receive data from spark as Dataset. Then it is mapped to MyObject (according to the ES mapping) using map() function. Result is converted to RDD and passed to JavaEsSpark.saveToEs(). public class MyObject im… --- ## [Beats central management](https://discuss.elastic.co/t/beats-central-management/162508)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 3\ **Last updated:** [December 31, 2018, 11:01am UTC](https://discuss.elastic.co/t/beats-central-management/162508 "2018-12-31T11:01:40Z")
hi all, I am using elasticsearch, kibana, filebeat and x-pack; their version is 6.1.1. Can i make the "beats central management" enable for this version? --- ## [Multi tenancy](https://discuss.elastic.co/t/multi-tenancy/162443)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 4\ **Last updated:** [December 31, 2018, 10:52am UTC](https://discuss.elastic.co/t/multi-tenancy/162443 "2018-12-31T10:52:31Z")
hi all i am using x-pack to have security feature. suppose, i have two indices in the discover part of kibana console. i have superuser access and want to define access for other users. for example there are user1 and … --- ## [Need help in settingup ELK stack in kubernetes without HELM Charts](https://discuss.elastic.co/t/need-help-in-settingup-elk-stack-in-kubernetes-without-helm-charts/162303)
**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\ **Replies:** 1\ **Last updated:** [December 31, 2018, 10:28am UTC](https://discuss.elastic.co/t/need-help-in-settingup-elk-stack-in-kubernetes-without-helm-charts/162303 "2018-12-31T10:28:53Z")
I am thinking of having ELK stack in kubernetes cluster. I do not have helm configured in the cluster. Need yaml files for installing ELK stack in k8s (1.12.2) version. --- ## [Primary shard not available](https://discuss.elastic.co/t/primary-shard-not-available/161687)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 7\ **Last updated:** [December 31, 2018, 10:19am UTC](https://discuss.elastic.co/t/primary-shard-not-available/161687 "2018-12-31T10:19:25Z")
Hi I am facing issues because the primary shard is not available. What could be the reason for it? Please suggest. Caused by: org.elasticsearch.action.UnavailableShardsException: \[.monitoring-kibana-6-2018.12.20\]\[0\] pr… --- ## [Cannot use non-grouped column \[sales\_manager\_name\], expected \[\]](https://discuss.elastic.co/t/cannot-use-non-grouped-column-sales-manager-name-expected/162331)
**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\ **Replies:** 2\ **Last updated:** [December 31, 2018, 10:13am UTC](https://discuss.elastic.co/t/cannot-use-non-grouped-column-sales-manager-name-expected/162331 "2018-12-31T10:13:08Z")
What's wrong with this SQL syntax in ES: SELECT sum(net\_value), sales\_manager\_name FROM "sales\*" ? It generates error: Whoops! Expression failed Expression failed with the message: \[essql\] \> Unexpected error from … --- ## [Join two indices using alias](https://discuss.elastic.co/t/join-two-indices-using-alias/162490)
**Author:** [@Loki](https://discuss.elastic.co/u/Loki)\ **Replies:** 3\ **Last updated:** [December 31, 2018, 10:05am UTC](https://discuss.elastic.co/t/join-two-indices-using-alias/162490 "2018-12-31T10:05:07Z")
Hi, I am still newbie in elasticsearch and I have also read that we cannot join two indices. But is it possible to use alias in this case? I mean, can we join indices using alias? Or is there any alternative or workar… --- ## [Shard failed at ElasticSearch / Docker / Windows](https://discuss.elastic.co/t/shard-failed-at-elasticsearch-docker-windows/162459)
**Author:** [@eiri](https://discuss.elastic.co/u/eiri)\ **Replies:** 4\ **Last updated:** [December 31, 2018, 8:51am UTC](https://discuss.elastic.co/t/shard-failed-at-elasticsearch-docker-windows/162459 "2018-12-31T08:51:32Z")
I have a (development) single node elasticsearch server under Windows 10/Docker. Creating the server and an index completes successfully. After filling the index with about 1.7 milion documents the shard fails, causing a… --- ## [Can Elasticsearch insecure by default?](https://discuss.elastic.co/t/can-elasticsearch-insecure-by-default/162440)
**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Replies:** 6\ **Last updated:** [December 31, 2018, 8:47am UTC](https://discuss.elastic.co/t/can-elasticsearch-insecure-by-default/162440 "2018-12-31T08:47:34Z")
Hello. I installed the last version of OpenSUSE and installed Elasticsearch and Kibana on it and nothing else. This Linux server is not ready yet and we never work with it but OpenSUSE uploaded many files and...Somethin… --- ## [What is the correct unit to specify for threhold of GC Overhead?](https://discuss.elastic.co/t/what-is-the-correct-unit-to-specify-for-threhold-of-gc-overhead/162465)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 1\ **Last updated:** [December 31, 2018, 8:46am UTC](https://discuss.elastic.co/t/what-is-the-correct-unit-to-specify-for-threhold-of-gc-overhead/162465 "2018-12-31T08:46:08Z")
I would like to ask question about threshold setting for GC Overehead . I checked this on elasticsearch v 6.4.2 . I am testing the GC setting to understand the concept of threshold of GC Overhead and GC Collections. … --- ## [A question on index templates](https://discuss.elastic.co/t/a-question-on-index-templates/162471)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 0\ **Last updated:** [December 31, 2018, 5:58am UTC](https://discuss.elastic.co/t/a-question-on-index-templates/162471 "2018-12-31T05:58:29Z")
Suppose I have an index in Elasticsearch version 5.2.2 and it has a template associated with it which is having "type": "string" and "index" : "analyzed" instead of the expected "type" : "text" and "index" : "true". So… --- ## [SQL Query with "NOT IN" keyword replacement in ES](https://discuss.elastic.co/t/sql-query-with-not-in-keyword-replacement-in-es/158455)
**Author:** [@W.anjum](https://discuss.elastic.co/u/W.anjum)\ **Replies:** 5\ **Last updated:** [December 5, 2018, 10:23am UTC](https://discuss.elastic.co/t/sql-query-with-not-in-keyword-replacement-in-es/158455 "2018-12-05T10:23:09Z")
I need to filter results from my indices based on this scenario: Select \* from TblName where status='ERROR' not in (select \* from TbleName where status='OK' ) I am unable to get desired results using must, must not etc… --- ## [Getting the keys array from max\_bucket output](https://discuss.elastic.co/t/getting-the-keys-array-from-max-bucket-output/162476)
**Author:** [@genesis\_en](https://discuss.elastic.co/u/genesis_en)\ **Replies:** 0\ **Last updated:** [December 31, 2018, 6:52am UTC](https://discuss.elastic.co/t/getting-the-keys-array-from-max-bucket-output/162476 "2018-12-31T06:52:34Z")
Hi, I'm have the following query to get the max\_bucket and it's time (as keys). Is there a way to have additional bucket\_script that uses the keys from max\_bucket. In the example script below, I have the keys from max\_… --- ## [{"error":{"root\_cause":\[{"type":"parsing\_exception","reason":"Unknown key for a START\_OBJECT in \[try\].","line":1,"col":8}\],"type":"parsing\_exception","reason":"Unknown key for a START\_OBJECT in \[try\].","line":1,"col":8},"status":400}](https://discuss.elastic.co/t/error-root-cause-type-parsing-exception-reason-unknown-key-for-a-start-object-in-try-line-1-col-8-type-parsing-exception-reason-unknown-key-for-a-start-object-in-try-line-1-col-8-status-400/162417)
**Author:** [@lsuchi](https://discuss.elastic.co/u/lsuchi)\ **Replies:** 2\ **Last updated:** [December 31, 2018, 6:40am UTC](https://discuss.elastic.co/t/error-root-cause-type-parsing-exception-reason-unknown-key-for-a-start-object-in-try-line-1-col-8-type-parsing-exception-reason-unknown-key-for-a-start-object-in-try-line-1-col-8-status-400/162417 "2018-12-31T06:40:53Z")
\ **Author:** [@venu.pgi](https://discuss.elastic.co/u/venu.pgi)\ **Replies:** 2\ **Last updated:** [December 31, 2018, 5:56am UTC](https://discuss.elastic.co/t/getting-java-error-when-i-run-elasticsearch-on-ubuntu/162466 "2018-12-31T05:56:28Z") Hi All, I have installed the elasticsearch on my Ubuntu laptop . I have Java version 11 as well. However when I run the command ./elasticsearch , it is giving me the following errors. I am new to the elasticsearch, kindl… --- ## [Failed to flush export bulks / bulk \[my\_local\] reports failures when exporting documents](https://discuss.elastic.co/t/failed-to-flush-export-bulks-bulk-my-local-reports-failures-when-exporting-documents/162462)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 0\ **Last updated:** [December 31, 2018, 12:04am UTC](https://discuss.elastic.co/t/failed-to-flush-export-bulks-bulk-my-local-reports-failures-when-exporting-documents/162462 "2018-12-31T00:04:27Z")
I'm trying to start Elasticsearch cluster and getting following error(s): esm4 | Caused by: org.elasticsearch.xpack.monitoring.exporter.ExportException: failed to flush export bulks esm4 | at or… --- ## [Reference for tomcat, wildfly, Jboss log analysis with elasticsearch](https://discuss.elastic.co/t/reference-for-tomcat-wildfly-jboss-log-analysis-with-elasticsearch/162454)
**Author:** [@Hamed\_khosravi](https://discuss.elastic.co/u/Hamed_khosravi)\ **Replies:** 0\ **Last updated:** [December 30, 2018, 9:06pm UTC](https://discuss.elastic.co/t/reference-for-tomcat-wildfly-jboss-log-analysis-with-elasticsearch/162454 "2018-12-30T21:06:34Z")
hello everyone i want to analyze tomcat, wildfly and JBoss logs with elastic stack, could you help me to find a reference for it? --- ## [Flatten nested documents as part of re-index process (using painless)](https://discuss.elastic.co/t/flatten-nested-documents-as-part-of-re-index-process-using-painless/162450)
**Author:** [@tom\_es](https://discuss.elastic.co/u/tom_es)\ **Replies:** 0\ **Last updated:** [December 30, 2018, 4:47pm UTC](https://discuss.elastic.co/t/flatten-nested-documents-as-part-of-re-index-process-using-painless/162450 "2018-12-30T16:47:38Z")
Hi... we have a nested mapping, which we'd like to reindex into a non-nested structure - i.e. each nested object + the 'parent' document becomes a new document. Is this possible by reindexing this structure using painl… --- ## [Help about this scenario](https://discuss.elastic.co/t/help-about-this-scenario/162421)
**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Replies:** 3\ **Last updated:** [December 30, 2018, 11:50am UTC](https://discuss.elastic.co/t/help-about-this-scenario/162421 "2018-12-30T11:50:13Z")
Hello. I have two Linux servers. Server1 running Nginx and other web services, Server1 is a server that I installed Elasticsearch and Kibana on it. I want to send some log files from Server1 to Server2. 1- Can I send m… --- ## [Elasticsearch 6.0 Removal of mapping types - Alternatives](https://discuss.elastic.co/t/elasticsearch-6-0-removal-of-mapping-types-alternatives/162435)
**Author:** [@Yehonatan](https://discuss.elastic.co/u/Yehonatan)\ **Replies:** 1\ **Last updated:** [December 30, 2018, 8:43am UTC](https://discuss.elastic.co/t/elasticsearch-6-0-removal-of-mapping-types-alternatives/162435 "2018-12-30T08:43:35Z")
Background I migrating my ES index into ES version 6. I currenly stuck because ES6 removed the using on "\_type" field. Old Implementation (ES2) My software has many users (\>100K). Each user has at least one document in … --- ## [Time based indices query strategy](https://discuss.elastic.co/t/time-based-indices-query-strategy/162087)
**Author:** [@Silas\_Hansen](https://discuss.elastic.co/u/Silas_Hansen)\ **Replies:** 6\ **Last updated:** [December 30, 2018, 8:11am UTC](https://discuss.elastic.co/t/time-based-indices-query-strategy/162087 "2018-12-30T08:11:13Z")
Hi I'm curious to know how Elasticsearch handles queries on time based indices. ex. If I have 5 years of time based indices named eventdata-{dd-MM-yyyy} and I am querying them using eventdata-\*, does that lead to the o… --- ## [Kibana server is not ready yet - 6.3 to 6.5](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-6-3-to-6-5/162396)
**Author:** [@akhisar](https://discuss.elastic.co/u/akhisar)\ **Replies:** 2\ **Last updated:** [December 30, 2018, 7:35am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-6-3-to-6-5/162396 "2018-12-30T07:35:12Z")
Hello, I have tried upgrade of Kibana from 6.3 to 6.5 and am getting "Kibana server is not ready yet" on Kibana. I have also tried removing the .kibana index but still the error persisit. Any help in here will be much … --- ## [What is difference between POST and GET in aggregation request?](https://discuss.elastic.co/t/what-is-difference-between-post-and-get-in-aggregation-request/162432)
**Author:** [@Hyojoung\_Shin](https://discuss.elastic.co/u/Hyojoung_Shin)\ **Replies:** 2\ **Last updated:** [December 30, 2018, 3:06am UTC](https://discuss.elastic.co/t/what-is-difference-between-post-and-get-in-aggregation-request/162432 "2018-12-30T03:06:54Z")
Hi, I am studying aggregation part. Some aggregation examples are using POST request type and others are using GET request type. Both of them show me the same result. Is it ok to use any one of them or there is reason… --- ## [Use of x-pack](https://discuss.elastic.co/t/use-of-x-pack/162430)
**Author:** [@adai\_elk](https://discuss.elastic.co/u/adai_elk)\ **Replies:** 1\ **Last updated:** [December 30, 2018, 1:26am UTC](https://discuss.elastic.co/t/use-of-x-pack/162430 "2018-12-30T01:26:02Z")
Hi，I'm going to install x-pack in elk for security. But I'm confused that can I install x-pack only in es? [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1438) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1440)