# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1480

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1481

---

## [Connection refuse issue in Elasticsearch cluster](https://discuss.elastic.co/t/connection-refuse-issue-in-elasticsearch-cluster/157234)

<div class="topic-metadata">

**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\
**Replies:** 2\
**Last updated:** [November 19, 2018, 5:20am UTC](https://discuss.elastic.co/t/connection-refuse-issue-in-elasticsearch-cluster/157234 "2018-11-19T05:20:26Z")

</div>

Hi All I have setup 3 mode ELK cluster and it worked well. But recently I upgrade it to latest version now Elasticsearch service and kibana service working well but when I execute curl command to verify elasticsearch I …

---

## [Beginner: Basic Problem -\> Localhost:9200 failed](https://discuss.elastic.co/t/beginner-basic-problem-localhost-9200-failed/153487)

<div class="topic-metadata">

**Author:** [@Prisilla\_Ade\_Haryant](https://discuss.elastic.co/u/Prisilla_Ade_Haryant)\
**Replies:** 5\
**Last updated:** [November 19, 2018, 4:47am UTC](https://discuss.elastic.co/t/beginner-basic-problem-localhost-9200-failed/153487 "2018-11-19T04:47:51Z")

</div>

Hi, I'm newbie here. I just installed the elasticsearch in windows, i use java too, and need to run the localhost:9200, but it was failed and it brought me to the bing or a normal google pages with the keywords "localho…

---

## [Ingest volume](https://discuss.elastic.co/t/ingest-volume/157245)

<div class="topic-metadata">

**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\
**Replies:** 3\
**Last updated:** [November 19, 2018, 4:44am UTC](https://discuss.elastic.co/t/ingest-volume/157245 "2018-11-19T04:44:51Z")

</div>

I want to get the value of total volume of data ingested on any index in Elasticsearch. What is the right way to do it? There are multiple pipelines pushing data to it and I do not have control over the data sources so I…

---

## [Changing the analyzer type fields are no longer aggregatable](https://discuss.elastic.co/t/changing-the-analyzer-type-fields-are-no-longer-aggregatable/156554)

<div class="topic-metadata">

**Author:** [@CamTheMan](https://discuss.elastic.co/u/CamTheMan)\
**Replies:** 3\
**Last updated:** [November 19, 2018, 4:11am UTC](https://discuss.elastic.co/t/changing-the-analyzer-type-fields-are-no-longer-aggregatable/156554 "2018-11-19T04:11:36Z")

</div>

Hi All, I changed the index mapping for my index, and now I can't perform visualisations on the fields! Example index template: PUT /\_template/my\_logstash { "order": 1000, "index\_patterns": \[ "logstash-\*", "docker…

---

## [PreBuiltTransportClient :available processors value \[30\] did not match current value \[45\], IllegalStateException](https://discuss.elastic.co/t/prebuilttransportclient-available-processors-value-30-did-not-match-current-value-45-illegalstateexception/157036)

<div class="topic-metadata">

**Author:** [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\
**Replies:** 0\
**Last updated:** [November 16, 2018, 11:14am UTC](https://discuss.elastic.co/t/prebuilttransportclient-available-processors-value-30-did-not-match-current-value-45-illegalstateexception/157036 "2018-11-16T11:14:04Z")

</div>

Hi, I am using ES 5.6.10 : My ES Tcp Client component resides on multiple JVM, so multiple instances Of TranpsortClient send request to Elastic Search cluster. I am seeing following IllegalStateExcep…

---

## [How to query with nested json in Elastic Search(Dev Tools in Kibana)](https://discuss.elastic.co/t/how-to-query-with-nested-json-in-elastic-search-dev-tools-in-kibana/157014)

<div class="topic-metadata">

**Author:** [@Jin1129](https://discuss.elastic.co/u/Jin1129)\
**Replies:** 0\
**Last updated:** [November 16, 2018, 9:31am UTC](https://discuss.elastic.co/t/how-to-query-with-nested-json-in-elastic-search-dev-tools-in-kibana/157014 "2018-11-16T09:31:39Z")

</div>

I created a test json log file and sent it to my elasticsearch by using filebeat. aftet that, I created index pattern for it and tryping to query in "Discover" menu. it seems like all my json data is stored in "message…

---

## [Correct src\_ip field datatype to 'ip'](https://discuss.elastic.co/t/correct-src-ip-field-datatype-to-ip/154100)

<div class="topic-metadata">

**Author:** [@CamTheMan](https://discuss.elastic.co/u/CamTheMan)\
**Replies:** 7\
**Last updated:** [November 19, 2018, 2:29am UTC](https://discuss.elastic.co/t/correct-src-ip-field-datatype-to-ip/154100 "2018-11-19T02:29:56Z")

</div>

Hello, I have only recently discovered the field datatype 'ip' I have most of the my IP addresses labeled as 'src\_ip' looking at the current data type it's a 'string'. Can i force the change somehow? How do i fix it? …

---

## [Create custom analyzer in index template](https://discuss.elastic.co/t/create-custom-analyzer-in-index-template/155637)

<div class="topic-metadata">

**Author:** [@CamTheMan](https://discuss.elastic.co/u/CamTheMan)\
**Replies:** 1\
**Last updated:** [November 19, 2018, 2:28am UTC](https://discuss.elastic.co/t/create-custom-analyzer-in-index-template/155637 "2018-11-19T02:28:19Z")

</div>

Hi All, I am using Elastic as a logging system, and one of the optimizations I would like to make is changing the 'analyzer' (https://www.elastic.co/guide/en/elasticsearch/reference/current/analysis-analyzers.html) for …

---

## [Migration SearchGuard to X-Pack](https://discuss.elastic.co/t/migration-searchguard-to-x-pack/156637)

<div class="topic-metadata">

**Author:** [@Jerry1](https://discuss.elastic.co/u/Jerry1)\
**Replies:** 1\
**Last updated:** [November 19, 2018, 12:41am UTC](https://discuss.elastic.co/t/migration-searchguard-to-x-pack/156637 "2018-11-19T00:41:26Z")

</div>

Hello, Is it possible to migrate Search Guard to X-Pack ? Regards, Jerry

---

## [Visualisations for curator](https://discuss.elastic.co/t/visualisations-for-curator/157251)

<div class="topic-metadata">

**Author:** [@cowensel](https://discuss.elastic.co/u/cowensel)\
**Replies:** 0\
**Last updated:** [November 18, 2018, 11:10pm UTC](https://discuss.elastic.co/t/visualisations-for-curator/157251 "2018-11-18T23:10:38Z")

</div>

I have recently setup curator on our ELK Stack and I have the log file going into elasticsearch via logstash. Has anyone got any examples of visualisations they have created to allow them to see whether the jobs have run…

---

## [Howto Use Elasticsearch with PiHole DNS](https://discuss.elastic.co/t/howto-use-elasticsearch-with-pihole-dns/157240)

<div class="topic-metadata">

**Author:** [@FredM](https://discuss.elastic.co/u/FredM)\
**Replies:** 1\
**Last updated:** [November 18, 2018, 7:40pm UTC](https://discuss.elastic.co/t/howto-use-elasticsearch-with-pihole-dns/157240 "2018-11-18T19:40:04Z")

</div>

PiHole is a free utility for monitoring and blocking adware and malware, and also in providing you with insight on the type of traffic on your network. Getting this data into Elasticsearch is the purpose for our post : …

---

## [Reindex task completed but no response was returned](https://discuss.elastic.co/t/reindex-task-completed-but-no-response-was-returned/157224)

<div class="topic-metadata">

**Author:** [@naoko](https://discuss.elastic.co/u/naoko)\
**Replies:** 4\
**Last updated:** [November 18, 2018, 4:34pm UTC](https://discuss.elastic.co/t/reindex-task-completed-but-no-response-was-returned/157224 "2018-11-18T16:34:37Z")

</div>

I reindex the index that has about 9 million doc \_cat/indices shows 9 million but \_count shows 3.6 million. docs\_deleted count in \_cat/indices shows less than 40k so my first question is why there is so many discrepanc…

---

## [Snapshot and different version](https://discuss.elastic.co/t/snapshot-and-different-version/157087)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 6\
**Last updated:** [November 18, 2018, 2:42pm UTC](https://discuss.elastic.co/t/snapshot-and-different-version/157087 "2018-11-18T14:42:25Z")

</div>

Hi everybody, I have one doubt about snapshot mechanism. I imported shakespeare index with 111k documents and then I created a snapshot (ver.1). its size is 21 mb (the same of index). after that I created a second snap…

---

## [Elasticsearch set password error](https://discuss.elastic.co/t/elasticsearch-set-password-error/157181)

<div class="topic-metadata">

**Author:** [@wuwo1952368901](https://discuss.elastic.co/u/wuwo1952368901)\
**Replies:** 0\
**Last updated:** [November 17, 2018, 3:53pm UTC](https://discuss.elastic.co/t/elasticsearch-set-password-error/157181 "2018-11-17T15:53:19Z")

</div>

When i setup password,but it have an error. How cant to fix it? Connection failure to: http://127.0.0.1:9200/\_xpack/security/user/kibana/\_password?pretty failed: Read timed out ERROR: Failed to set password for user \[k…

---

## [Diff query between two documents](https://discuss.elastic.co/t/diff-query-between-two-documents/156887)

<div class="topic-metadata">

**Author:** [@elastic\_guy](https://discuss.elastic.co/u/elastic_guy)\
**Replies:** 2\
**Last updated:** [November 18, 2018, 1:16pm UTC](https://discuss.elastic.co/t/diff-query-between-two-documents/156887 "2018-11-18T13:16:42Z")

</div>

Hi, say I have a type that is modeled in the following way: document { id: x, nested\_object: \[ {objects}, {objects}... \] } I am looking for a way to execute a diff query between two documents of this type, so t…

---

## [Query to display terms associated to a filter aggregation on particular event](https://discuss.elastic.co/t/query-to-display-terms-associated-to-a-filter-aggregation-on-particular-event/157183)

<div class="topic-metadata">

**Author:** [@Nikhil\_Nambiar](https://discuss.elastic.co/u/Nikhil_Nambiar)\
**Replies:** 0\
**Last updated:** [November 17, 2018, 3:57pm UTC](https://discuss.elastic.co/t/query-to-display-terms-associated-to-a-filter-aggregation-on-particular-event/157183 "2018-11-17T15:57:54Z")

</div>

Hi, I need a help for an elastic search query, My query below is as follows { "size":0, "aggs":{ "group-by-customerid":{ "terms":{ "field":"customer\_id.keyword" }, …

---

## [Uninstall older versions of elasticsearch and kibana](https://discuss.elastic.co/t/uninstall-older-versions-of-elasticsearch-and-kibana/156868)

<div class="topic-metadata">

**Author:** [@ronyarmon](https://discuss.elastic.co/u/ronyarmon)\
**Replies:** 2\
**Last updated:** [November 18, 2018, 6:22am UTC](https://discuss.elastic.co/t/uninstall-older-versions-of-elasticsearch-and-kibana/156868 "2018-11-18T06:22:37Z")

</div>

Hello, I just installed elasticsearch and kibana 6.5 on Ubuntu 18.04.1 . Can you explain how to remove the older versions? (elasticsearch 6.4.2, kibana 6.4.3)

---

## [Cannot see new indices getting created in es 6.4.2](https://discuss.elastic.co/t/cannot-see-new-indices-getting-created-in-es-6-4-2/157206)

<div class="topic-metadata">

**Author:** [@sreeja\_gogineni](https://discuss.elastic.co/u/sreeja_gogineni)\
**Replies:** 0\
**Last updated:** [November 18, 2018, 3:54am UTC](https://discuss.elastic.co/t/cannot-see-new-indices-getting-created-in-es-6-4-2/157206 "2018-11-18T03:54:53Z")

</div>

after migrating from 5.4 to 6.4.2 when i try to run logstash.conf file using bin/logstash --debug -f logstash-XXXX.conf \[2018-11-17T22:33:02,516\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elastics…

---

## [Add a method to compute alias names for index templates](https://discuss.elastic.co/t/add-a-method-to-compute-alias-names-for-index-templates/157199)

<div class="topic-metadata">

**Author:** [@test987654123](https://discuss.elastic.co/u/test987654123)\
**Replies:** 0\
**Last updated:** [November 18, 2018, 1:52am UTC](https://discuss.elastic.co/t/add-a-method-to-compute-alias-names-for-index-templates/157199 "2018-11-18T01:52:44Z")

</div>

I want to implement automatic mapping of aliases when created by index。 Use the following link。 This is my profile. { "order": 5, "version": 60001, "index\_patterns": \[ "debug\*" \], "settings": { "index": { …

---

## [Elasticsearch fails on start](https://discuss.elastic.co/t/elasticsearch-fails-on-start/157179)

<div class="topic-metadata">

**Author:** [@litti](https://discuss.elastic.co/u/litti)\
**Replies:** 0\
**Last updated:** [November 17, 2018, 2:56pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-on-start/157179 "2018-11-17T14:56:21Z")

</div>

Hi, after an upgrade and an issue where the .kibana\_2 index had to be removed because kibana didn't start (Error "Kibana server is not ready yet"), now elasticsearch fails to start with the following error: \[2018-11-17…

---

## [Import into IntelliJ failing after running gradle idea with Gradle 4.10.3](https://discuss.elastic.co/t/import-into-intellij-failing-after-running-gradle-idea-with-gradle-4-10-3/156875)

<div class="topic-metadata">

**Author:** [@WOO\_CHEOL\_CHOI](https://discuss.elastic.co/u/WOO_CHEOL_CHOI)\
**Replies:** 0\
**Last updated:** [November 15, 2018, 1:31pm UTC](https://discuss.elastic.co/t/import-into-intellij-failing-after-running-gradle-idea-with-gradle-4-10-3/156875 "2018-11-15T13:31:12Z")

</div>

i run gradle assembly on cmd before importing into Intellij \[error message\] You must run gradle idea from the root of elasticsearch before importing into IntelliJ Open File \[code\] if (System.getProperty('idea.active…

---

## [NoNodeAvailableException\[None of the configured nodes are available: \[{#transport#-1}{-1B4rVOaSTeiXbjYjpWnCQ}{127.0.0.1}{127.0.0.1:9300}\]\]](https://discuss.elastic.co/t/nonodeavailableexception-none-of-the-configured-nodes-are-available-transport-1-1b4rvoasteixbjyjpwncq-127-0-0-1-127-0-0-1-9300/157159)

<div class="topic-metadata">

**Author:** [@Kuldeep\_Poonia](https://discuss.elastic.co/u/Kuldeep_Poonia)\
**Replies:** 0\
**Last updated:** [November 17, 2018, 6:37am UTC](https://discuss.elastic.co/t/nonodeavailableexception-none-of-the-configured-nodes-are-available-transport-1-1b4rvoasteixbjyjpwncq-127-0-0-1-127-0-0-1-9300/157159 "2018-11-17T06:37:08Z")

</div>

Hi All, From last 2 days, I am searching over google to find out the solution and do the same as suggested by replies but still I am unable to find out the solution. I am using elasticsearach version 6.4.2 in both serve…

---

## [Elasticsearch-PHP reindex not working as expected](https://discuss.elastic.co/t/elasticsearch-php-reindex-not-working-as-expected/156883)

<div class="topic-metadata">

**Author:** [@dhondup](https://discuss.elastic.co/u/dhondup)\
**Replies:** 1\
**Last updated:** [November 16, 2018, 8:32pm UTC](https://discuss.elastic.co/t/elasticsearch-php-reindex-not-working-as-expected/156883 "2018-11-16T20:32:53Z")

</div>

Documentation on reindex API: https://www.elastic.co/guide/en/elasticsearch/client/php-api/6.0/ElasticsearchPHP\_Endpoints.html#Elasticsearch\_Clientreindex\_reindex /\* $params\['refresh'\] = (boolean) Should the…

---

## [ES 6.5.0 : Custom mapping isn't taken into account whereas it is in 6.4.2](https://discuss.elastic.co/t/es-6-5-0-custom-mapping-isnt-taken-into-account-whereas-it-is-in-6-4-2/156874)

<div class="topic-metadata">

**Author:** [@mbutton77](https://discuss.elastic.co/u/mbutton77)\
**Replies:** 1\
**Last updated:** [November 16, 2018, 7:50pm UTC](https://discuss.elastic.co/t/es-6-5-0-custom-mapping-isnt-taken-into-account-whereas-it-is-in-6-4-2/156874 "2018-11-16T19:50:58Z")

</div>

I've lost some time trying to figure out what was wrong with my custom mapping while working with the brand new ElasticStack 6.5.0. Just out of curiosity I tried my configuration on a 6.4.2 and everything went fine. He…

---

## [Composite aggregation sorting](https://discuss.elastic.co/t/composite-aggregation-sorting/156936)

<div class="topic-metadata">

**Author:** [@csdrane](https://discuss.elastic.co/u/csdrane)\
**Replies:** 2\
**Last updated:** [November 16, 2018, 7:12pm UTC](https://discuss.elastic.co/t/composite-aggregation-sorting/156936 "2018-11-16T19:12:17Z")

</div>

I'm performing a composite aggregation, and then performing a subaggregation (a sum) in each bucket. I am curious if there is any way to sort the resulting buckets array based upon the this sum, rather than the natural …

---

## [Dump an error event: error\_class=Fluent::Plugin::ElasticsearchErrorHandler::ElasticsearchError error="400](https://discuss.elastic.co/t/dump-an-error-event-error-class-fluent-elasticsearcherror-error-400/157122)

<div class="topic-metadata">

**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\
**Replies:** 0\
**Last updated:** [November 16, 2018, 7:02pm UTC](https://discuss.elastic.co/t/dump-an-error-event-error-class-fluent-elasticsearcherror-error-400/157122 "2018-11-16T19:02:25Z")

</div>

Hi, i see below error keep logging in fluentd any suggestion please.. dump an error event: error\_class=Fluent::Plugin::ElasticsearchErrorHandler::ElasticsearchError error="400 - Rejected by Elasticsearch" location=nil t…

---

## [Indexing new data automatically from a folder in desktop to the existing index in elasticstack](https://discuss.elastic.co/t/indexing-new-data-automatically-from-a-folder-in-desktop-to-the-existing-index-in-elasticstack/157106)

<div class="topic-metadata">

**Author:** [@samnayak](https://discuss.elastic.co/u/samnayak)\
**Replies:** 4\
**Last updated:** [November 16, 2018, 6:56pm UTC](https://discuss.elastic.co/t/indexing-new-data-automatically-from-a-folder-in-desktop-to-the-existing-index-in-elasticstack/157106 "2018-11-16T18:56:41Z")

</div>

Hi All, I am a CSE grad student and I use Elasticstack for my research. Could you please help me with below question? Can I index the data automatically from a folder in the computer to Elasticstack so that when new da…

---

## [How Shards and Replicas distributed on the cluster](https://discuss.elastic.co/t/how-shards-and-replicas-distributed-on-the-cluster/156108)

<div class="topic-metadata">

**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\
**Replies:** 2\
**Last updated:** [November 16, 2018, 6:53pm UTC](https://discuss.elastic.co/t/how-shards-and-replicas-distributed-on-the-cluster/156108 "2018-11-16T18:53:52Z")

</div>

Hi, I have provisioned Elastic Cluster with 1 node and index has been divided into 5 shards, Later i have added another node into the cluster and it's by default shows 5 shards on new node, how this Shards mechanism wor…

---

## [Sort Order Inconsistent](https://discuss.elastic.co/t/sort-order-inconsistent/156922)

<div class="topic-metadata">

**Author:** [@sshaw](https://discuss.elastic.co/u/sshaw)\
**Replies:** 1\
**Last updated:** [November 16, 2018, 6:14pm UTC](https://discuss.elastic.co/t/sort-order-inconsistent/156922 "2018-11-16T18:14:53Z")

</div>

Elasticsearch is running in a cluster with multiple shards. Two are primary, the rest are not. Using version 5.5.2. I have several records with the same address but different document id. When I sort by address the orde…

---

## [Issue upgrading Elasticsearch cloud from 5.6 to 6.0](https://discuss.elastic.co/t/issue-upgrading-elasticsearch-cloud-from-5-6-to-6-0/157117)

<div class="topic-metadata">

**Author:** [@PArnold](https://discuss.elastic.co/u/PArnold)\
**Replies:** 0\
**Last updated:** [November 16, 2018, 6:09pm UTC](https://discuss.elastic.co/t/issue-upgrading-elasticsearch-cloud-from-5-6-to-6-0/157117 "2018-11-16T18:09:41Z")

</div>

Hello I am trying to upgrade my elasticsearch cloud cluster from version 5.6.13 to 6.0 . I am using the Upgrade Assistant in Kibana to do prepare for the upgrade. I have performed a backup of the 5.6 indices. When vi…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1479)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1481)
