# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1492 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1493 --- ## [Documentation of elasticsearch-certutil is wrong for parameter --pass](https://discuss.elastic.co/t/documentation-of-elasticsearch-certutil-is-wrong-for-parameter-pass/155412)
**Author:** [@muffl0n](https://discuss.elastic.co/u/muffl0n)\ **Replies:** 3\ **Last updated:** [November 7, 2018, 8:40am UTC](https://discuss.elastic.co/t/documentation-of-elasticsearch-certutil-is-wrong-for-parameter-pass/155412 "2018-11-07T08:40:32Z")
The documentation states that If you want to specify a blank password (without prompting), use --pass "" (with no =). But that seems to be wrong: $ /usr/share/elasticsearch/bin/elasticsearch-certutil cert ca --pem -… --- ## [Scroll api vs Search after api to query large time series data](https://discuss.elastic.co/t/scroll-api-vs-search-after-api-to-query-large-time-series-data/155684)
**Author:** [@bilalsha](https://discuss.elastic.co/u/bilalsha)\ **Replies:** 0\ **Last updated:** [November 7, 2018, 8:27am UTC](https://discuss.elastic.co/t/scroll-api-vs-search-after-api-to-query-large-time-series-data/155684 "2018-11-07T08:27:23Z")
I am using elastic search as time series db. I want to run queries on large data but I am confused about using scroll API or search after API. IMO scroll API is expensive for large data due to file descriptor handlers ke… --- ## [Need help with suggest in NEST](https://discuss.elastic.co/t/need-help-with-suggest-in-nest/155571)
**Author:** [@jasman](https://discuss.elastic.co/u/jasman)\ **Replies:** 1\ **Last updated:** [November 7, 2018, 8:25am UTC](https://discuss.elastic.co/t/need-help-with-suggest-in-nest/155571 "2018-11-07T08:25:57Z")
Hi Using C# Nest client Elasticsearch 6.3 I'm attempting to add suggest when search queries return zero results. However, I get this error message UnexpectedElasticsearchClientException: Error setting value to 'Sugges… --- ## [Architecture question - ETL](https://discuss.elastic.co/t/architecture-question-etl/155671)
**Author:** [@freakwave10](https://discuss.elastic.co/u/freakwave10)\ **Replies:** 1\ **Last updated:** [November 7, 2018, 8:15am UTC](https://discuss.elastic.co/t/architecture-question-etl/155671 "2018-11-07T08:15:08Z")
Hi all, I have the following use cases. We are pushing file, directory, attribute and user data into elasticsearch. Now we want to do reporting on top of it. The data needs to be transformed because the initial format… --- ## [High CPU](https://discuss.elastic.co/t/high-cpu/155151)
**Author:** [@David\_Sedeno](https://discuss.elastic.co/u/David_Sedeno)\ **Replies:** 3\ **Last updated:** [November 7, 2018, 8:14am UTC](https://discuss.elastic.co/t/high-cpu/155151 "2018-11-07T08:14:56Z")
We have a 6 node cluster (1 ingest, 5 data, 8G jvm heap each) Sometimes we have a peak cpu in the data nodes, going to 100% cpu and the ingest node refuse to process more querys. One of the node has a GC at that time… --- ## [ElasticSearch Dockers container stop](https://discuss.elastic.co/t/elasticsearch-dockers-container-stop/155661)
**Author:** [@shahid](https://discuss.elastic.co/u/shahid)\ **Replies:** 0\ **Last updated:** [November 7, 2018, 6:51am UTC](https://discuss.elastic.co/t/elasticsearch-dockers-container-stop/155661 "2018-11-07T06:51:43Z")
Hi teach team i observed my elasticsearch container stopped after some time but rest of containers (LogStash, Kibana) on the same host is running perfectly. I have to start the elasticsearch container manually on dail… --- ## [Get properties when search text](https://discuss.elastic.co/t/get-properties-when-search-text/155339)
**Author:** [@tung\_do](https://discuss.elastic.co/u/tung_do)\ **Replies:** 4\ **Last updated:** [November 6, 2018, 10:34am UTC](https://discuss.elastic.co/t/get-properties-when-search-text/155339 "2018-11-06T10:34:36Z")
example: {"name":"john", "attribute": \[1,2,3\]}, {"name":"Dr john", "attibute":\[2,3,4\]},{"name":"david john", "attibute":\[4,6,7\]}. How to search "john" return array attribute \[1,2,3,4,6,7\] --- ## [Change Deployment to Hot/Warm](https://discuss.elastic.co/t/change-deployment-to-hot-warm/155627)
**Author:** [@jenyphur](https://discuss.elastic.co/u/jenyphur)\ **Replies:** 1\ **Last updated:** [November 7, 2018, 2:09am UTC](https://discuss.elastic.co/t/change-deployment-to-hot-warm/155627 "2018-11-07T02:09:03Z")
Hello, I have a Production deployment with 3 nodes. What I would like to do is change the deployment type to a Hot / Warm deployment so that I can make accessing the most recent logs much faster and keep older logs in a… --- ## [Does elasticsearch cluster assume all nodes have the same hardwares?](https://discuss.elastic.co/t/does-elasticsearch-cluster-assume-all-nodes-have-the-same-hardwares/155641)
**Author:** [@Jianzhou\_Z](https://discuss.elastic.co/u/Jianzhou_Z)\ **Replies:** 1\ **Last updated:** [November 7, 2018, 1:51am UTC](https://discuss.elastic.co/t/does-elasticsearch-cluster-assume-all-nodes-have-the-same-hardwares/155641 "2018-11-07T01:51:47Z")
In my cluster, there are two kinds of nodes type A) 32CPU, 60G Mem, 700G SSD, 10G network type B) 36CPU, 70G Mem, 900G SSD, 10G network I found when I send queries to the cluster in a faster speed type B runs 50 pro… --- ## [Import Visualization from ELK5.6 and Export to EK6.3, L5.6 breaks](https://discuss.elastic.co/t/import-visualization-from-elk5-6-and-export-to-ek6-3-l5-6-breaks/153865)
**Author:** [@Jigar\_Patel1](https://discuss.elastic.co/u/Jigar_Patel1)\ **Replies:** 6\ **Last updated:** [November 7, 2018, 12:18am UTC](https://discuss.elastic.co/t/import-visualization-from-elk5-6-and-export-to-ek6-3-l5-6-breaks/153865 "2018-11-07T00:18:49Z")
How to Export Visualization and Dashboard from ES 5.6, Kibana 5.6, LogStash 5.6 and Import to ES 6.3, Kibana 6.3, Logstash 5.6? I have index and mapping same for both the systems. --- ## [ElasticSearch: Filtered aliases , Filters are not always applied?](https://discuss.elastic.co/t/elasticsearch-filtered-aliases-filters-are-not-always-applied/155552)
**Author:** [@ssg](https://discuss.elastic.co/u/ssg)\ **Replies:** 1\ **Last updated:** [November 7, 2018, 12:00am UTC](https://discuss.elastic.co/t/elasticsearch-filtered-aliases-filters-are-not-always-applied/155552 "2018-11-07T00:00:39Z")
Hi , I was referring to documentation i.e It has below definition for Filtered aliases: Filtered aliases: Aliases can hold a filter, which allows to select a subset of documents that can be accessed out of all the… --- ## [What exactly means 'Logout request is not signed' in SAML SSO?](https://discuss.elastic.co/t/what-exactly-means-logout-request-is-not-signed-in-saml-sso/155588)
**Author:** [@bruno.henriques](https://discuss.elastic.co/u/bruno.henriques)\ **Replies:** 2\ **Last updated:** [November 6, 2018, 11:08pm UTC](https://discuss.elastic.co/t/what-exactly-means-logout-request-is-not-signed-in-saml-sso/155588 "2018-11-06T23:08:37Z")
Hello, I have SSO (using simplesamlphp as IdP) a environment with three services: MyServiceA, MyServiceB and Kibana. I have session on all three services and when I attempt to logout (SLO) from either MyServiceA or MySe… --- ## [Java error elasticsearch-certutil](https://discuss.elastic.co/t/java-error-elasticsearch-certutil/155600)
**Author:** [@jacobot](https://discuss.elastic.co/u/jacobot)\ **Replies:** 1\ **Last updated:** [November 6, 2018, 8:15pm UTC](https://discuss.elastic.co/t/java-error-elasticsearch-certutil/155600 "2018-11-06T20:15:25Z")
I can run elastic-search , no problem there, so i guess java is correctly configured But this tool (command -\>) bin/elasticsearch-certutil cert -ca elastic-stack-ca.p12 Gives this error Enter password for CA (elastic-… --- ## [Data node not getting shards automatically](https://discuss.elastic.co/t/data-node-not-getting-shards-automatically/155602)
**Author:** [@ChrisW](https://discuss.elastic.co/u/ChrisW)\ **Replies:** 1\ **Last updated:** [November 6, 2018, 8:00pm UTC](https://discuss.elastic.co/t/data-node-not-getting-shards-automatically/155602 "2018-11-06T20:00:55Z")
I have an elasticsearch cluster with the following configuration All versions are ES 6.4.2 es1 - coordinating node only (also runs logstash and kibana) es2 - master node, data node, ingest node es3 - master node, dat… --- ## [Only change date format on mapping with 6.X](https://discuss.elastic.co/t/only-change-date-format-on-mapping-with-6-x/155606)
**Author:** [@toshi78](https://discuss.elastic.co/u/toshi78)\ **Replies:** 0\ **Last updated:** [November 6, 2018, 7:38pm UTC](https://discuss.elastic.co/t/only-change-date-format-on-mapping-with-6-x/155606 "2018-11-06T19:38:54Z")
Hi ! I've discovered that I need milisecond on a field with type date, however I already stored some data with it. On Elasticsearch 2.X, it was possible to only change the date format of a field: The format setting mu… --- ## [Deeper into threadpool](https://discuss.elastic.co/t/deeper-into-threadpool/155518)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 3\ **Last updated:** [November 6, 2018, 7:34pm UTC](https://discuss.elastic.co/t/deeper-into-threadpool/155518 "2018-11-06T19:34:47Z")
Hi all, currently I have a cluster with 11 nodes (3 master, 6 data, 2 coordinating only role). I would like to understand correctly how to configure thread pool key value but I have several doubts: should I configure… --- ## [Unable to get watcher to work in elastic search 6.3.2](https://discuss.elastic.co/t/unable-to-get-watcher-to-work-in-elastic-search-6-3-2/155604)
**Author:** [@Jevi](https://discuss.elastic.co/u/Jevi)\ **Replies:** 1\ **Last updated:** [November 6, 2018, 7:29pm UTC](https://discuss.elastic.co/t/unable-to-get-watcher-to-work-in-elastic-search-6-3-2/155604 "2018-11-06T19:29:51Z")
I have elastic search 6.3.2 version running in a node, i want to use the watcher capability but enabling watcher in elaststicsearch.yml seems not to get the the watche up as no watcher index is created. here is a sampl… --- ## [Query to return missing value from known values](https://discuss.elastic.co/t/query-to-return-missing-value-from-known-values/155603)
**Author:** [@ryannelle](https://discuss.elastic.co/u/ryannelle)\ **Replies:** 0\ **Last updated:** [November 6, 2018, 7:10pm UTC](https://discuss.elastic.co/t/query-to-return-missing-value-from-known-values/155603 "2018-11-06T19:10:31Z")
I have created a static custom index to hold the known hostnames of my machines and have the following items as shown below. index: hosts "hostname": \[ "betty", "bob", "fred" \] I want to query my index below with the ho… --- ## [Delete\_by\_query task API returns some slices as null](https://discuss.elastic.co/t/delete-by-query-task-api-returns-some-slices-as-null/155599)
**Author:** [@mats990](https://discuss.elastic.co/u/mats990)\ **Replies:** 0\ **Last updated:** [November 6, 2018, 6:58pm UTC](https://discuss.elastic.co/t/delete-by-query-task-api-returns-some-slices-as-null/155599 "2018-11-06T18:58:40Z")
Hi, I'm using delete\_by\_query in ES version 5.6.4 and I'm using it with slices. Example of my request: POST index-pattern/doc/\_delete\_by\_query?slices=20&wait\_for\_completion=false&scroll\_size=3000 After that I'm using … --- ## [Windows Install Newbie- Installing Elasticsearch using Zip](https://discuss.elastic.co/t/windows-install-newbie-installing-elasticsearch-using-zip/155316)
**Author:** [@alta\_01](https://discuss.elastic.co/u/alta_01)\ **Replies:** 5\ **Last updated:** [November 5, 2018, 6:46am UTC](https://discuss.elastic.co/t/windows-install-newbie-installing-elasticsearch-using-zip/155316 "2018-11-05T06:46:49Z")
My issue before after extracting was that I kept getting the "\\Common was unexpected at this time" in the cmd prompt. I was able to get this to work using the following fix. \\Common was unexpected at this time I've att… --- ## [Fuzzy in searchs with asciifolding](https://discuss.elastic.co/t/fuzzy-in-searchs-with-asciifolding/155586)
**Author:** [@Jose\_Victor\_da\_Silva](https://discuss.elastic.co/u/Jose_Victor_da_Silva)\ **Replies:** 0\ **Last updated:** [November 6, 2018, 5:43pm UTC](https://discuss.elastic.co/t/fuzzy-in-searchs-with-asciifolding/155586 "2018-11-06T17:43:31Z")
Good afternoon, I'm trying to use a "custom analyzer" called test\_fuzzy in a fuzzy search, but it does not work when I insert the "preserve\_original" option to "true" in the "asciifolding" filter. When I create a "cust… --- ## [Shards not allocating after rolling upgrade](https://discuss.elastic.co/t/shards-not-allocating-after-rolling-upgrade/155573)
**Author:** [@juiip](https://discuss.elastic.co/u/juiip)\ **Replies:** 1\ **Last updated:** [November 6, 2018, 5:39pm UTC](https://discuss.elastic.co/t/shards-not-allocating-after-rolling-upgrade/155573 "2018-11-06T17:39:52Z")
I have a 2 node cluster on Elasticsearch 5.6.12 I followed this upgrade guide: https://www.elastic.co/guide/en/elasticsearch/reference/5.6/rolling-upgrades.html After running: PUT \_cluster/settings { "transient": { … --- ## [Automatically delete old indexes on ElasticCloud](https://discuss.elastic.co/t/automatically-delete-old-indexes-on-elasticcloud/155570)
**Author:** [@kungfu](https://discuss.elastic.co/u/kungfu)\ **Replies:** 4\ **Last updated:** [November 6, 2018, 5:15pm UTC](https://discuss.elastic.co/t/automatically-delete-old-indexes-on-elasticcloud/155570 "2018-11-06T17:15:28Z")
Hello, people. I'm using an ElasticCloud instance. I was searching for a way to automatically delete old indexes in ES. But the only tool I found is a script called Curator. Since I'm using an ElasticCloud instance I'… --- ## [Cannot start ES 6.4](https://discuss.elastic.co/t/cannot-start-es-6-4/155470)
**Author:** [@jkevan](https://discuss.elastic.co/u/jkevan)\ **Replies:** 2\ **Last updated:** [November 6, 2018, 5:06pm UTC](https://discuss.elastic.co/t/cannot-start-es-6-4/155470 "2018-11-06T17:06:24Z")
I am working on a new Elastic stack cluster and I am unable to start Elastic. I am assuming it is a filesystem/permissions issue, but I cant pin it down. I have a 1TB Samba share that is mounted to /home/elastic/esstorag… --- ## [Fields repeating same values](https://discuss.elastic.co/t/fields-repeating-same-values/155558)
**Author:** [@vvn84](https://discuss.elastic.co/u/vvn84)\ **Replies:** 5\ **Last updated:** [November 6, 2018, 4:31pm UTC](https://discuss.elastic.co/t/fields-repeating-same-values/155558 "2018-11-06T16:31:31Z")
I have three indices which are sent across from Logstash to Elasticsearch. The logs are of the same format. The difference being they come from different servers and are received at different ports on logstash. The grok … --- ## [Range filter and max\_clause\_count](https://discuss.elastic.co/t/range-filter-and-max-clause-count/155584)
**Author:** [@DmitriV](https://discuss.elastic.co/u/DmitriV)\ **Replies:** 0\ **Last updated:** [November 6, 2018, 4:27pm UTC](https://discuss.elastic.co/t/range-filter-and-max-clause-count/155584 "2018-11-06T16:27:51Z")
Hi, I am having trouble with a use-case where I need to filter the content of an index based on multiple x-coordinate ranges. The number of ranges can go up to 500 000 distinct intervals (dynamically defined by the end-… --- ## [Using index aliases instead of mapping types as part of migration](https://discuss.elastic.co/t/using-index-aliases-instead-of-mapping-types-as-part-of-migration/155583)
**Author:** [@victorhearnyeates](https://discuss.elastic.co/u/victorhearnyeates)\ **Replies:** 0\ **Last updated:** [November 6, 2018, 4:24pm UTC](https://discuss.elastic.co/t/using-index-aliases-instead-of-mapping-types-as-part-of-migration/155583 "2018-11-06T16:24:32Z")
Hi, I'm looking at migrating a cluster running on ES 5.3 to either ES 6.3 or 6.4. As part of our migration, we need to remove our mapping types. My original idea is to split each type out as an alias, and add a postfix … --- ## [Multiple Instances of Curator simultaneously, possible?](https://discuss.elastic.co/t/multiple-instances-of-curator-simultaneously-possible/155568)
**Author:** [@hage42](https://discuss.elastic.co/u/hage42)\ **Replies:** 1\ **Last updated:** [November 6, 2018, 3:36pm UTC](https://discuss.elastic.co/t/multiple-instances-of-curator-simultaneously-possible/155568 "2018-11-06T15:36:05Z")
What if I run curator on machines outside of my cluster, and for reasons of availability i have more than one of those machines (each running its own instance of curator) running. Would that lead to a conflicting situati… --- ## [Can not install elasticsearch 6.4.2 on windows 7 32 bit?](https://discuss.elastic.co/t/can-not-install-elasticsearch-6-4-2-on-windows-7-32-bit/155564)
**Author:** [@SailorJupiter](https://discuss.elastic.co/u/SailorJupiter)\ **Replies:** 2\ **Last updated:** [November 6, 2018, 3:34pm UTC](https://discuss.elastic.co/t/can-not-install-elasticsearch-6-4-2-on-windows-7-32-bit/155564 "2018-11-06T15:34:20Z")
Can not install elasticsearch 6.4.2 on windows 7 32-bit? When I executed elasticsearch 6.4.2.bat, it will stop in a half way. So I can't install it, does it support windows 7 32-bit? How about packbeat? Could I instal… --- ## [Can not send alert via gmail(already disable 2FA)](https://discuss.elastic.co/t/can-not-send-alert-via-gmail-already-disable-2fa/154325)
**Author:** [@SailorJupiter](https://discuss.elastic.co/u/SailorJupiter)\ **Replies:** 5\ **Last updated:** [November 6, 2018, 3:08pm UTC](https://discuss.elastic.co/t/can-not-send-alert-via-gmail-already-disable-2fa/154325 "2018-11-06T15:08:22Z")
Can not send alert via gmail(already disable 2FA) I am sure my password and account is right! And I already disabled 2 factors authtications. The log is //at java.lang.Thread.run(Unknown Source) \[?:1.8.0\_181\] Caused … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1491) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1493)