# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1461 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1462 --- ## [Elastic Search Pagination in Term Aggrigation](https://discuss.elastic.co/t/elastic-search-pagination-in-term-aggrigation/159540)
**Author:** [@RITESH\_AGARWAL](https://discuss.elastic.co/u/RITESH_AGARWAL)\ **Replies:** 9\ **Last updated:** [December 6, 2018, 11:11am UTC](https://discuss.elastic.co/t/elastic-search-pagination-in-term-aggrigation/159540 "2018-12-06T11:11:07Z")
How can we achieve the Pagination in ES Term Aggregation to avoid Memory issues. --- ## [X-Pack Licensing Cost](https://discuss.elastic.co/t/x-pack-licensing-cost/159694)
**Author:** [@iamaakashgoyal](https://discuss.elastic.co/u/iamaakashgoyal)\ **Replies:** 1\ **Last updated:** [December 6, 2018, 10:55am UTC](https://discuss.elastic.co/t/x-pack-licensing-cost/159694 "2018-12-06T10:55:56Z")
Hi, I am currently working on a trial version of X-Pack which provides license for a month. I wish to further use this in my organisation's project. What is the cost of licensing X-Pack and what are the different packa… --- ## [Connection of logstash hosted in one server with the elastic search hosted in another server](https://discuss.elastic.co/t/connection-of-logstash-hosted-in-one-server-with-the-elastic-search-hosted-in-another-server/159703)
**Author:** [@Archana\_Moharana](https://discuss.elastic.co/u/Archana_Moharana)\ **Replies:** 1\ **Last updated:** [December 6, 2018, 10:34am UTC](https://discuss.elastic.co/t/connection-of-logstash-hosted-in-one-server-with-the-elastic-search-hosted-in-another-server/159703 "2018-12-06T10:34:41Z")
Hello, I am trying to push the files to elastic search hosted in a different server. But unable to make the connection from logstash to elastic search as both are in different servers. I even tried to change the config … --- ## [Logstash on one EC2 instance and ES & Kibana on another - how to provide creds in LS output?](https://discuss.elastic.co/t/logstash-on-one-ec2-instance-and-es-kibana-on-another-how-to-provide-creds-in-ls-output/159483)
**Author:** [@GitSpree23](https://discuss.elastic.co/u/GitSpree23)\ **Replies:** 1\ **Last updated:** [December 6, 2018, 10:22am UTC](https://discuss.elastic.co/t/logstash-on-one-ec2-instance-and-es-kibana-on-another-how-to-provide-creds-in-ls-output/159483 "2018-12-06T10:22:24Z")
I've split the Elastic Stack into 2 EC2 instances: instance1 : 2Gig, 1CPU : Logstash instance2 : 8Gig, 2CPUs : ElasticSearch & Kibana I will be providing the public IP of instance2 in the logstash elasticsearch output… --- ## ['Illegal access' error](https://discuss.elastic.co/t/illegal-access-error/158957)
**Author:** [@s0r1n](https://discuss.elastic.co/u/s0r1n)\ **Replies:** 6\ **Last updated:** [December 6, 2018, 10:01am UTC](https://discuss.elastic.co/t/illegal-access-error/158957 "2018-12-06T10:01:53Z")
A docker with Apache, Tomcat and Elasticsearch images starts and runs without issue. But after restart with docker-compose down/up , the following error occurs: 30-Nov-2018 14:49:58.857 INFO \[main\] org.apache.catalina.c… --- ## [Filebeat not connected to Logstash as per my understanding](https://discuss.elastic.co/t/filebeat-not-connected-to-logstash-as-per-my-understanding/159543)
**Author:** [@ashvinanto](https://discuss.elastic.co/u/ashvinanto)\ **Replies:** 7\ **Last updated:** [December 6, 2018, 9:18am UTC](https://discuss.elastic.co/t/filebeat-not-connected-to-logstash-as-per-my-understanding/159543 "2018-12-06T09:18:30Z")
Hi, I have configured filebeat to harvest logs from a certain path. And the same logs can be discovered in Kibana. However, I wanted to parse the logs which is obtained in message field in kibana. For that I was trying … --- ## [Field name beat unknown in elasicseach](https://discuss.elastic.co/t/field-name-beat-unknown-in-elasicseach/159688)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 0\ **Last updated:** [December 6, 2018, 9:00am UTC](https://discuss.elastic.co/t/field-name-beat-unknown-in-elasicseach/159688 "2018-12-06T09:00:59Z")
Hi All , 5 node elasticsearch is running(6.5.1) . TLS is enabled in ES. File beat(6.4) sending json logs to Logstash(6.5.1) . Logstash is indexing ( default mapping) to ES. in elasicsearch some fileds are showing unkn… --- ## [LDAP for elastic search](https://discuss.elastic.co/t/ldap-for-elastic-search/159473)
**Author:** [@sudha81422](https://discuss.elastic.co/u/sudha81422)\ **Replies:** 3\ **Last updated:** [December 6, 2018, 8:29am UTC](https://discuss.elastic.co/t/ldap-for-elastic-search/159473 "2018-12-06T08:29:51Z")
Hi All, we are planning to implement LDAP for kibana . We are using elastic search version 6.3. and our ELK stack is running on kubernetes. we have one elasticsearch and three data nodes and kibana pods . Can any one he… --- ## [Aggregation - Calculate the number of distinct values](https://discuss.elastic.co/t/aggregation-calculate-the-number-of-distinct-values/159499)
**Author:** [@Alexandra1](https://discuss.elastic.co/u/Alexandra1)\ **Replies:** 4\ **Last updated:** [December 6, 2018, 8:22am UTC](https://discuss.elastic.co/t/aggregation-calculate-the-number-of-distinct-values/159499 "2018-12-06T08:22:23Z")
Hello, I'm doing an aggregation over all the documents of my index. The problem is that Elasticsearch doesn't return all the buckets because of the default size. How i can find out the number of all the distinct buckets… --- ## [A new replication type: physical replication](https://discuss.elastic.co/t/a-new-replication-type-physical-replication/157296)
**Author:** [@djjsindy](https://discuss.elastic.co/u/djjsindy)\ **Replies:** 9\ **Last updated:** [December 6, 2018, 8:16am UTC](https://discuss.elastic.co/t/a-new-replication-type-physical-replication/157296 "2018-12-06T08:16:03Z")
I read this blog a few months ago ：http://blog.mikemccandless.com/2017/09/lucenes-near-real-time-segment-index.html ,There is indeed a very core case in my work that can be used for this function.I developed the functio… --- ## [Elasticsearch HOT/WARM infrastructure with S3 mounted as a filesystem using S3FS problem](https://discuss.elastic.co/t/elasticsearch-hot-warm-infrastructure-with-s3-mounted-as-a-filesystem-using-s3fs-problem/159660)
**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\ **Replies:** 2\ **Last updated:** [December 6, 2018, 8:14am UTC](https://discuss.elastic.co/t/elasticsearch-hot-warm-infrastructure-with-s3-mounted-as-a-filesystem-using-s3fs-problem/159660 "2018-12-06T08:14:27Z")
Hello ! So I've got a cluster of 3xMASTER | 4x HOT | 4x WARM nodes. The goal of my project is to store indices on HOT nodes for about 1-2 weeks and then allocate them (with the help of Curator) on WARM nodes. We are t… --- ## [How can we limit the output with multiple term aggregation](https://discuss.elastic.co/t/how-can-we-limit-the-output-with-multiple-term-aggregation/159670)
**Author:** [@RITESH\_AGARWAL](https://discuss.elastic.co/u/RITESH_AGARWAL)\ **Replies:** 0\ **Last updated:** [December 6, 2018, 7:39am UTC](https://discuss.elastic.co/t/how-can-we-limit-the-output-with-multiple-term-aggregation/159670 "2018-12-06T07:39:53Z")
If we have 2 or more Term aggregation in the Query and requirement is the to limit it to the top 10 records on any field then how do restrict the output as it gives cartesian result. --- ## [Unable to perform search query after 14 days](https://discuss.elastic.co/t/unable-to-perform-search-query-after-14-days/159487)
**Author:** [@Tafsir\_Alam](https://discuss.elastic.co/u/Tafsir_Alam)\ **Replies:** 6\ **Last updated:** [December 6, 2018, 6:43am UTC](https://discuss.elastic.co/t/unable-to-perform-search-query-after-14-days/159487 "2018-12-06T06:43:25Z")
Hi All, I am able to search logs till 14 days in graylog but if I search for 30 days or 60 days it prompt could not execute search error. Please help me to solve this problem. Graylog version - 2.4.6 Elasticsearch… --- ## [Install ES Docker Compose](https://discuss.elastic.co/t/install-es-docker-compose/159268)
**Author:** [@diagriyanto](https://discuss.elastic.co/u/diagriyanto)\ **Replies:** 6\ **Last updated:** [December 6, 2018, 6:45am UTC](https://discuss.elastic.co/t/install-es-docker-compose/159268 "2018-12-06T06:45:53Z")
hello, i'm new here and i want to ask something. i've install ES using docker compose with tutorial on the docs. but the container won't run status exited and i found message like this . \[root@s1 ~\]# docker ps -a CON… --- ## [Search Template API Question,,](https://discuss.elastic.co/t/search-template-api-question/159639)
**Author:** [@ksb304](https://discuss.elastic.co/u/ksb304)\ **Replies:** 2\ **Last updated:** [December 6, 2018, 6:12am UTC](https://discuss.elastic.co/t/search-template-api-question/159639 "2018-12-06T06:12:05Z")
Execution SearchTemplateResponse response = client.searchTemplate(request, RequestOptions.DEFAULT); what is the 'client'????? Can not find 'client' on this page. --- ## [Kibana 6.5 Status code 500](https://discuss.elastic.co/t/kibana-6-5-status-code-500/159656)
**Author:** [@Amit\_Hora](https://discuss.elastic.co/u/Amit_Hora)\ **Replies:** 0\ **Last updated:** [December 6, 2018, 6:03am UTC](https://discuss.elastic.co/t/kibana-6-5-status-code-500/159656 "2018-12-06T06:03:24Z")
After upgrading ES/Kibana from version 5.6 to 6.5 I am facing few problems. When i try to access Kibana URL I get this error Below are the logs in Kibana {"type":"log","@timestamp":"2018-12-06T05:55:28Z","tags":\["lis… --- ## [How do I pass the query variable in client.search?](https://discuss.elastic.co/t/how-do-i-pass-the-query-variable-in-client-search/159644)
**Author:** [@hemantgovekar](https://discuss.elastic.co/u/hemantgovekar)\ **Replies:** 0\ **Last updated:** [December 6, 2018, 3:09am UTC](https://discuss.elastic.co/t/how-do-i-pass-the-query-variable-in-client-search/159644 "2018-12-06T03:09:46Z")
myapp.factory('dataervice', \['$q', 'esFactory', '$location', function ($q, elasticsearch, $location) { var client = elasticsearch({ host: 'https://mywebsitelink.in' }); var search = … --- ## [TLS handshake timeout using 6.5.1 docker images](https://discuss.elastic.co/t/tls-handshake-timeout-using-6-5-1-docker-images/159633)
**Author:** [@ronchav](https://discuss.elastic.co/u/ronchav)\ **Replies:** 0\ **Last updated:** [December 6, 2018, 2:11am UTC](https://discuss.elastic.co/t/tls-handshake-timeout-using-6-5-1-docker-images/159633 "2018-12-06T02:11:52Z")
Hi, I have docker for windows and I am running 3 elastic containers and 1 kibana on version 6.5.1 and they are communicating well over TLS/SSL setup. I was able to browse dashboard and other features in Kibana but at so… --- ## [org.elasticsearch.index.query.QueryShardException: failed to find geo\_point field \[geoip.location\]](https://discuss.elastic.co/t/org-elasticsearch-index-query-queryshardexception-failed-to-find-geo-point-field-geoip-location/155815)
**Author:** [@mauriciothomsen](https://discuss.elastic.co/u/mauriciothomsen)\ **Replies:** 4\ **Last updated:** [December 6, 2018, 2:00am UTC](https://discuss.elastic.co/t/org-elasticsearch-index-query-queryshardexception-failed-to-find-geo-point-field-geoip-location/155815 "2018-12-06T02:00:25Z")
When creating a new visualization using geohash aggregation, I get the following error: "Courier fetch: 5 of 10 shards failed." Monitoring the elasticsearch log when performing this action, I get the following line: "… --- ## [List of characters that must be escaped?](https://discuss.elastic.co/t/list-of-characters-that-must-be-escaped/159613)
**Author:** [@Matthew\_Allan](https://discuss.elastic.co/u/Matthew_Allan)\ **Replies:** 0\ **Last updated:** [December 5, 2018, 10:27pm UTC](https://discuss.elastic.co/t/list-of-characters-that-must-be-escaped/159613 "2018-12-05T22:27:11Z")
Hello, While indexing some user provided content I have come across some unicode characters that cannot be indexed without escaping them first. For example: DELETE /my\_index PUT /my\_index { "mappings": { "thing… --- ## [Elasticsearch cannot find java](https://discuss.elastic.co/t/elasticsearch-cannot-find-java/159234)
**Author:** [@Gegi\_K](https://discuss.elastic.co/u/Gegi_K)\ **Replies:** 2\ **Last updated:** [December 6, 2018, 12:52am UTC](https://discuss.elastic.co/t/elasticsearch-cannot-find-java/159234 "2018-12-06T00:52:09Z")
Dear All, I feel a bit dumb as I was able to Elasticsearch/Kibana/Logstash running at our company and did some PoC, for which I decieded to make some tests with different data sets. Here I'm strugling to get it running … --- ## [Disable shard allocation awareness](https://discuss.elastic.co/t/disable-shard-allocation-awareness/159621)
**Author:** [@HugoP](https://discuss.elastic.co/u/HugoP)\ **Replies:** 10\ **Last updated:** [December 6, 2018, 12:19am UTC](https://discuss.elastic.co/t/disable-shard-allocation-awareness/159621 "2018-12-06T00:19:48Z")
Hello, Is it possible to disable shard allocation awareness ? Thanks, --- ## [Elasticsearch\_dsl set query size to 0 automaticly](https://discuss.elastic.co/t/elasticsearch-dsl-set-query-size-to-0-automaticly/159620)
**Author:** [@Aviran](https://discuss.elastic.co/u/Aviran)\ **Replies:** 1\ **Last updated:** [December 5, 2018, 11:31pm UTC](https://discuss.elastic.co/t/elasticsearch-dsl-set-query-size-to-0-automaticly/159620 "2018-12-05T23:31:43Z")
Im getting very odd behavior from elasticseach\_dsl Im running the following from python es\_controller.es\_dsl.index('management\_users') \\ .doc\_type('user') \\ .filter('term', email=email).execute() When … --- ## [Machine Learning Watcher](https://discuss.elastic.co/t/machine-learning-watcher/159585)
**Author:** [@lowdmt](https://discuss.elastic.co/u/lowdmt)\ **Replies:** 1\ **Last updated:** [December 5, 2018, 11:03pm UTC](https://discuss.elastic.co/t/machine-learning-watcher/159585 "2018-12-05T23:03:35Z")
Hi, I have a metricbeat index in Elastic and have created a new machine learning job looking at cpu usage. The index is gathering data from 25 installed beats all rolled up into a single index (metricbeat-\*) How do I c… --- ## [Is there any way to get the next word when word is matched](https://discuss.elastic.co/t/is-there-any-way-to-get-the-next-word-when-word-is-matched/159243)
**Author:** [@sudhakar\_katakara](https://discuss.elastic.co/u/sudhakar_katakara)\ **Replies:** 1\ **Last updated:** [December 5, 2018, 10:24pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-get-the-next-word-when-word-is-matched/159243 "2018-12-05T22:24:22Z")
we have csv file which contains data(basically events data from different sources) and it has one field named Body. we have uploaded those file data into elasticsearch index. the Body field has multiple lines and it has … --- ## [Type: mapper\_parsing\_exception Reason: "object mapping for \[data.tags\] tried to parse field \[tags\] as object, but found a concrete value](https://discuss.elastic.co/t/type-mapper-parsing-exception-reason-object-mapping-for-data-tags-tried-to-parse-field-tags-as-object-but-found-a-concrete-value/159269)
**Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\ **Replies:** 1\ **Last updated:** [December 5, 2018, 9:34pm UTC](https://discuss.elastic.co/t/type-mapper-parsing-exception-reason-object-mapping-for-data-tags-tried-to-parse-field-tags-as-object-but-found-a-concrete-value/159269 "2018-12-05T21:34:46Z")
ES: 6.1.1 .Net NEST: 6.1.0 I have several environments in which I have the exact same "dynamic": "false" mapping. In one, I'm unable to index new documents into this index due to the titular exception I receive: mappe… --- ## [Max Bucket Aggregation: Only return that result?](https://discuss.elastic.co/t/max-bucket-aggregation-only-return-that-result/158955)
**Author:** [@Speedman](https://discuss.elastic.co/u/Speedman)\ **Replies:** 1\ **Last updated:** [December 5, 2018, 9:29pm UTC](https://discuss.elastic.co/t/max-bucket-aggregation-only-return-that-result/158955 "2018-12-05T21:29:15Z")
Here's the query I'm running: { "size": 0, "query": { "range": { "timestamp": { "gte": "2018-11-28", "lte": "2018-11-28" } } }, "ag… --- ## [Cant access the marvel GUI](https://discuss.elastic.co/t/cant-access-the-marvel-gui/159587)
**Author:** [@Alejandro\_Gonzalez](https://discuss.elastic.co/u/Alejandro_Gonzalez)\ **Replies:** 3\ **Last updated:** [December 5, 2018, 9:14pm UTC](https://discuss.elastic.co/t/cant-access-the-marvel-gui/159587 "2018-12-05T21:14:19Z")
Good morning. I wanted to play around with the docker image for elastic search 6.5.1 and installed on a linux container on my windows pc. I did a postman get on post 9200 and i got the response and the tagline "you know… --- ## [The index time partifier is different from the word breaker of the query time partifier](https://discuss.elastic.co/t/the-index-time-partifier-is-different-from-the-word-breaker-of-the-query-time-partifier/159524)
**Author:** [@Walkers](https://discuss.elastic.co/u/Walkers)\ **Replies:** 0\ **Last updated:** [December 5, 2018, 12:07pm UTC](https://discuss.elastic.co/t/the-index-time-partifier-is-different-from-the-word-breaker-of-the-query-time-partifier/159524 "2018-12-05T12:07:01Z")
when we excute this search, we can't found anything GET rsearch/\_search { "query": { "bool": { "must": \[ { "multi\_match": { "query": "CoreALM智慧云", "fields": \["title"\], "minimum\_should\_match": "100%" } } \], … --- ## [Should field mapping boosting with wildcard term (e.g. term\*) work?](https://discuss.elastic.co/t/should-field-mapping-boosting-with-wildcard-term-e-g-term-work/159563)
**Author:** [@adamw](https://discuss.elastic.co/u/adamw)\ **Replies:** 1\ **Last updated:** [December 5, 2018, 7:20pm UTC](https://discuss.elastic.co/t/should-field-mapping-boosting-with-wildcard-term-e-g-term-work/159563 "2018-12-05T19:20:24Z")
Hi, Have searched for boost related posts but cant find anything specific to this. I've added field level boosting to my field mapping. So in simple terms my raw mapping looks like this: { "properties":{ "title… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1460) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1462)