# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1534 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1535 --- ## [Using Xpack Transport client for multiple nodes with certificate/key](https://discuss.elastic.co/t/using-xpack-transport-client-for-multiple-nodes-with-certificate-key/149692)
**Author:** [@lengoyvaerts](https://discuss.elastic.co/u/lengoyvaerts)\ **Replies:** 3\ **Last updated:** [September 28, 2018, 6:25am UTC](https://discuss.elastic.co/t/using-xpack-transport-client-for-multiple-nodes-with-certificate-key/149692 "2018-09-28T06:25:40Z")
I have 3 Elasticsearch nodes each configured with X-Pack including keys and certificates for https connections. The certificates and keys are different per node, the certificate authority (ca.crt) is the same. How can I… --- ## [X-pack alternatives](https://discuss.elastic.co/t/x-pack-alternatives/150294)
**Author:** [@Mohammed\_Ihsan](https://discuss.elastic.co/u/Mohammed_Ihsan)\ **Replies:** 0\ **Last updated:** [September 28, 2018, 5:55am UTC](https://discuss.elastic.co/t/x-pack-alternatives/150294 "2018-09-28T05:55:13Z")
Please suggest me an open source alerting and scheduling tool to integrate with ELK Stack --- ## [Error when running elasticsearch](https://discuss.elastic.co/t/error-when-running-elasticsearch/150166)
**Author:** [@Mohammed\_Ihsan](https://discuss.elastic.co/u/Mohammed_Ihsan)\ **Replies:** 2\ **Last updated:** [September 28, 2018, 5:48am UTC](https://discuss.elastic.co/t/error-when-running-elasticsearch/150166 "2018-09-28T05:48:47Z")
When I run elasticsearch, I got the errors max file descriptors \[4096\] for elasticsearch process is too low, increase to at least \[65536\] max virtual memory areas vm.max\_map\_count \[65530\] is too low, increase to at le… --- ## [Why does the search active threads equal 0?](https://discuss.elastic.co/t/why-does-the-search-active-threads-equal-0/150155)
**Author:** [@minhua1983](https://discuss.elastic.co/u/minhua1983)\ **Replies:** 0\ **Last updated:** [September 27, 2018, 8:57am UTC](https://discuss.elastic.co/t/why-does-the-search-active-threads-equal-0/150155 "2018-09-27T08:57:17Z")
I set the search queue capacity up to 2000 a few days ago. Why does the search active threads equal 0 when the search queue is over than 2000? My ec2 environment of elasticsearch bases on the info below: 4 core cpu … --- ## [Cannot access elasticsearch on port 9200 (WIndows 10 MSI Install)](https://discuss.elastic.co/t/cannot-access-elasticsearch-on-port-9200-windows-10-msi-install/150282)
**Author:** [@SpaceMoose](https://discuss.elastic.co/u/SpaceMoose)\ **Replies:** 1\ **Last updated:** [September 28, 2018, 5:13am UTC](https://discuss.elastic.co/t/cannot-access-elasticsearch-on-port-9200-windows-10-msi-install/150282 "2018-09-28T05:13:56Z")
Hello... Yesterday I downloaded the elasticsearch 6.4.0 Windows (MSI) Installer. I have a preexisting Java 8 install on my machine and also have JAVA\_HOME set appropriately. The installer appears to run just fine. I'… --- ## [How to avoid repeating the same sub-queries in a single POST request?](https://discuss.elastic.co/t/how-to-avoid-repeating-the-same-sub-queries-in-a-single-post-request/148766)
**Author:** [@NewHere](https://discuss.elastic.co/u/NewHere)\ **Replies:** 6\ **Last updated:** [September 28, 2018, 1:55am UTC](https://discuss.elastic.co/t/how-to-avoid-repeating-the-same-sub-queries-in-a-single-post-request/148766 "2018-09-28T01:55:45Z")
Hi I have a set of sub-queries that I first need to find the MAX score of sub-queries (using dis\_max) then add together the SUM of the sub-queries scores as the final score. Is there a way to put them together in one POS… --- ## [Converting template to work in elasticsearch 6.x](https://discuss.elastic.co/t/converting-template-to-work-in-elasticsearch-6-x/150273)
**Author:** [@Bob\_Benson](https://discuss.elastic.co/u/Bob_Benson)\ **Replies:** 0\ **Last updated:** [September 27, 2018, 11:51pm UTC](https://discuss.elastic.co/t/converting-template-to-work-in-elasticsearch-6-x/150273 "2018-09-27T23:51:05Z")
I am trying to have this json template uploaded to elasticsearch 6 but get the following error, Please what do I need to do to have this working on elasticsearch 6. New to ELK world, Thanks "root\_cause" : \[ { "… --- ## [Watcher Parse Exception Unknown Input Type Condition](https://discuss.elastic.co/t/watcher-parse-exception-unknown-input-type-condition/150242)
**Author:** [@jc034240](https://discuss.elastic.co/u/jc034240)\ **Replies:** 1\ **Last updated:** [September 27, 2018, 11:49pm UTC](https://discuss.elastic.co/t/watcher-parse-exception-unknown-input-type-condition/150242 "2018-09-27T23:49:29Z")
When trying to create a watch I'm receiving: Watcher: \[parse\_exception\] could not parse input for watch \[watch name\]. unknown input type \[condition\] I have put the below in a JSON formatter to help ensure validity. My… --- ## [Are queries routed to the primary OR a replica, or the primary AND all replicas?](https://discuss.elastic.co/t/are-queries-routed-to-the-primary-or-a-replica-or-the-primary-and-all-replicas/150073)
**Author:** [@andrew\_rueckert](https://discuss.elastic.co/u/andrew_rueckert)\ **Replies:** 1\ **Last updated:** [September 27, 2018, 10:39pm UTC](https://discuss.elastic.co/t/are-queries-routed-to-the-primary-or-a-replica-or-the-primary-and-all-replicas/150073 "2018-09-27T22:39:14Z")
I have an index that is 1 shard with 2 replicas, and only 3 nodes in the cluster. If I make a query against this index, is it randomly routed to 1 node in the cluster, or is it routed to all nodes in the cluster (and a r… --- ## [Curator Closed Index Deletion](https://discuss.elastic.co/t/curator-closed-index-deletion/150260)
**Author:** [@cappy](https://discuss.elastic.co/u/cappy)\ **Replies:** 1\ **Last updated:** [September 27, 2018, 10:24pm UTC](https://discuss.elastic.co/t/curator-closed-index-deletion/150260 "2018-09-27T22:24:28Z")
It seems like I can use a filtertype of age to grab closed indices if I want to run a delete action , however, it seems I cannot use a filtertype of space. I've read that Elasticsearch cannot determine the size of close… --- ## [Why docCount differs on primary and replicas of the same shard](https://discuss.elastic.co/t/why-doccount-differs-on-primary-and-replicas-of-the-same-shard/150271)
**Author:** [@krlm](https://discuss.elastic.co/u/krlm)\ **Replies:** 0\ **Last updated:** [September 27, 2018, 10:17pm UTC](https://discuss.elastic.co/t/why-doccount-differs-on-primary-and-replicas-of-the-same-shard/150271 "2018-09-27T22:17:58Z")
I'm trying to figure out why executing the same query multiple times gives different results when there's no background indexing involved. What I've found so far (using "explain: true") is that docCount returns different… --- ## [Removing date fields inside one record](https://discuss.elastic.co/t/removing-date-fields-inside-one-record/150258)
**Author:** [@djrondon](https://discuss.elastic.co/u/djrondon)\ **Replies:** 0\ **Last updated:** [September 27, 2018, 9:10pm UTC](https://discuss.elastic.co/t/removing-date-fields-inside-one-record/150258 "2018-09-27T21:10:17Z")
Folks, How can I extract just dates movimento.dataHora from 2017. this is an example of json record. there are dates from dataHora: 2017, but I want the full record but with just 2017 and it's coming 2016 also. Any … --- ## [How to implement document level security based on ldap groups](https://discuss.elastic.co/t/how-to-implement-document-level-security-based-on-ldap-groups/150253)
**Author:** [@Yello](https://discuss.elastic.co/u/Yello)\ **Replies:** 0\ **Last updated:** [September 27, 2018, 8:39pm UTC](https://discuss.elastic.co/t/how-to-implement-document-level-security-based-on-ldap-groups/150253 "2018-09-27T20:39:47Z")
I'm trying to find out how to implement document level security based on ldap groups.I have installed xpack plugin and configured ldap realm in elastic search.yml file successfully. Login /out is working based on ldap us… --- ## [WARN ScalaRowValueReader: Field 'hits.hits.\_score' is backed by an array but the associated Spark Schema does not reflect this](https://discuss.elastic.co/t/warn-scalarowvaluereader-field-hits-hits-score-is-backed-by-an-array-but-the-associated-spark-schema-does-not-reflect-this/150248)
**Author:** [@Madhur\_Chopra](https://discuss.elastic.co/u/Madhur_Chopra)\ **Replies:** 0\ **Last updated:** [September 27, 2018, 7:55pm UTC](https://discuss.elastic.co/t/warn-scalarowvaluereader-field-hits-hits-score-is-backed-by-an-array-but-the-associated-spark-schema-does-not-reflect-this/150248 "2018-09-27T19:55:09Z")
i am trying to access \_id field from metadata @udf('string') def get\_id(metadata): return metadata\['\_id'\] def get\_index(server,index\_name,query): df = sqlContext.read.format("org.elasticsearch.spark.sql")\\ … --- ## [Azure Repository Plugin access denied to elasticsearch.keystore](https://discuss.elastic.co/t/azure-repository-plugin-access-denied-to-elasticsearch-keystore/149904)
**Author:** [@brandonmichaelhunter](https://discuss.elastic.co/u/brandonmichaelhunter)\ **Replies:** 3\ **Last updated:** [September 27, 2018, 7:40pm UTC](https://discuss.elastic.co/t/azure-repository-plugin-access-denied-to-elasticsearch-keystore/149904 "2018-09-27T19:40:44Z")
I've installed Azure Repository plugin into my 6.4 ES instance on my Ubuntu 16.04.5 LTS box which is hosted inside of a VM in Azure. I'm trying to perform backups and restores using a storage account I created in azure. … --- ## [Can't open Kibana because it says I'm using Elasticsearch 6.2.4](https://discuss.elastic.co/t/cant-open-kibana-because-it-says-im-using-elasticsearch-6-2-4/147246)
**Author:** [@ksantone](https://discuss.elastic.co/u/ksantone)\ **Replies:** 1\ **Last updated:** [September 27, 2018, 7:17pm UTC](https://discuss.elastic.co/t/cant-open-kibana-because-it-says-im-using-elasticsearch-6-2-4/147246 "2018-09-27T19:17:24Z")
So I downloaded Elasticsearch and Kibana (both versions 6.4) but when I run bin/kibana (after having ran bin/elasticsearch) I get the error: log \[16:53:08.247\] \[error\]\[status\]\[plugin:security@6.4.0\] Status changed fro… --- ## [How would you suggest to create these synonyms?](https://discuss.elastic.co/t/how-would-you-suggest-to-create-these-synonyms/148884)
**Author:** [@Rettspraksis](https://discuss.elastic.co/u/Rettspraksis)\ **Replies:** 3\ **Last updated:** [September 27, 2018, 6:43pm UTC](https://discuss.elastic.co/t/how-would-you-suggest-to-create-these-synonyms/148884 "2018-09-27T18:43:02Z")
Hi, I'm configuring ElasticSearch for a website that gives free access to court decisions and need some help to create synonyms for different ways to write the same page title/court decision name. ie. Rt-2007-1051 = Rt… --- ## [Possible to use truncate filter on keyword subfield to limit length?](https://discuss.elastic.co/t/possible-to-use-truncate-filter-on-keyword-subfield-to-limit-length/150231)
**Author:** [@jaddison](https://discuss.elastic.co/u/jaddison)\ **Replies:** 0\ **Last updated:** [September 27, 2018, 5:32pm UTC](https://discuss.elastic.co/t/possible-to-use-truncate-filter-on-keyword-subfield-to-limit-length/150231 "2018-09-27T17:32:00Z")
I'm looking to overcome Fielddata is disabled on text fields by default. ... Alternatively use a keyword field... I have a text field - it can be very large. I want to be able to test for field existence/length in scrip… --- ## [Not able to make a search query match\_all after I cahnged my field mapping](https://discuss.elastic.co/t/not-able-to-make-a-search-query-match-all-after-i-cahnged-my-field-mapping/147738)
**Author:** [@chitresh\_jain](https://discuss.elastic.co/u/chitresh_jain)\ **Replies:** 1\ **Last updated:** [September 27, 2018, 5:26pm UTC](https://discuss.elastic.co/t/not-able-to-make-a-search-query-match-all-after-i-cahnged-my-field-mapping/147738 "2018-09-27T17:26:50Z")
Hello, I have a field named "candidate\_name". Initially, I had a mapping for this field like this - "candidate\_name" : { "type" : "text", "fields" : { "keyword" : { "type" : "keyword", "ignore\_above" : 256 } } … --- ## [Is it possible to query for unbounded/not set range fields?](https://discuss.elastic.co/t/is-it-possible-to-query-for-unbounded-not-set-range-fields/149523)
**Author:** [@jaddison](https://discuss.elastic.co/u/jaddison)\ **Replies:** 1\ **Last updated:** [September 27, 2018, 5:21pm UTC](https://discuss.elastic.co/t/is-it-possible-to-query-for-unbounded-not-set-range-fields/149523 "2018-09-27T17:21:42Z")
I have an age\_range field of type float\_range. I'm looking to excluded dual unbounded range values (both upper and lower bounds are not set - ie null). I'm using range queries, playing with within, intersects, and contai… --- ## [Index creation templates](https://discuss.elastic.co/t/index-creation-templates/150224)
**Author:** [@dboss101](https://discuss.elastic.co/u/dboss101)\ **Replies:** 2\ **Last updated:** [September 27, 2018, 5:07pm UTC](https://discuss.elastic.co/t/index-creation-templates/150224 "2018-09-27T17:07:18Z")
I was wondering if I'm missing something here. when an index is created on elasticsearch dynamically (from logstash, fluent, etc.), where does it get it's setting from (like shard amount, etc.)? I was under the impress… --- ## [Curator rollover new\_index failing](https://discuss.elastic.co/t/curator-rollover-new-index-failing/150214)
**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\ **Replies:** 3\ **Last updated:** [September 27, 2018, 4:16pm UTC](https://discuss.elastic.co/t/curator-rollover-new-index-failing/150214 "2018-09-27T16:16:19Z")
Curator action file: actions: 1: action: rollover options: disable\_action: False name: index\_prod\_active new\_index: "\" # have also tried "\ **Author:** [@webofmars](https://discuss.elastic.co/u/webofmars)\ **Replies:** 3\ **Last updated:** [September 27, 2018, 4:09pm UTC](https://discuss.elastic.co/t/how-xpack-license-self-generated-type-basic-setting-is-really-working/150210 "2018-09-27T16:09:59Z") Running a demo with ES 6.4.0 i have a strange feeling about how is handled the setting xpack.license.self\_generated.type: basic in elasticsearch.yml. My need is to have SSL (encryption in transit) and no certs authentic… --- ## [Curator Rollover not working](https://discuss.elastic.co/t/curator-rollover-not-working/150078)
**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\ **Replies:** 5\ **Last updated:** [September 27, 2018, 2:35pm UTC](https://discuss.elastic.co/t/curator-rollover-not-working/150078 "2018-09-27T14:35:43Z")
ES version - 6.3.2 Curator version - 5.5.4 Installed Curator from RPM on RHEL7 My Curator file: actions: 1: action: rollover description: \>- Rollover the index associated with alias 'index\_prod\_active… --- ## [Rally gets stuck while benchmarking](https://discuss.elastic.co/t/rally-gets-stuck-while-benchmarking/148878)
**Author:** [@akhil-rane](https://discuss.elastic.co/u/akhil-rane)\ **Replies:** 4\ **Last updated:** [September 27, 2018, 2:35pm UTC](https://discuss.elastic.co/t/rally-gets-stuck-while-benchmarking/148878 "2018-09-27T14:35:38Z")
I am benchmarking a elaticsearch cluster but Rally gets stuck with the following output on the command line. / \_\_ \_\_\_\_ / / / \_\_ / // / \_\_ \`/ / / / / / / , / // / / / // / // ||\_,///\_, / /\_\_\_\_/ \[INFO\] You did not p… --- ## [Explain API and GET](https://discuss.elastic.co/t/explain-api-and-get/150194)
**Author:** [@marcinn](https://discuss.elastic.co/u/marcinn)\ **Replies:** 5\ **Last updated:** [September 27, 2018, 2:16pm UTC](https://discuss.elastic.co/t/explain-api-and-get/150194 "2018-09-27T14:16:02Z")
We already know that ES HTTP/JSON API is NOT a REST, but nobody cares (marketing wins). I wrote about this few times. But why a GET with body is used for querying explain API? It is against rfc2616, where body for GET h… --- ## [Unable to start Elastic 5-6-3 under Docker](https://discuss.elastic.co/t/unable-to-start-elastic-5-6-3-under-docker/149681)
**Author:** [@ybello](https://discuss.elastic.co/u/ybello)\ **Replies:** 0\ **Last updated:** [September 24, 2018, 1:17pm UTC](https://discuss.elastic.co/t/unable-to-start-elastic-5-6-3-under-docker/149681 "2018-09-24T13:17:02Z")
Hi Folks I have error right after the "elasticsearch" startup script is start It's seam that we have " Failed to resolve host null" or " Caused by: java.net.UnknownHostException: elastic: Name or service not known " … --- ## [Cluster state as yellow and unassigned](https://discuss.elastic.co/t/cluster-state-as-yellow-and-unassigned/150174)
**Author:** [@johnrabi](https://discuss.elastic.co/u/johnrabi)\ **Replies:** 2\ **Last updated:** [September 27, 2018, 1:58pm UTC](https://discuss.elastic.co/t/cluster-state-as-yellow-and-unassigned/150174 "2018-09-27T13:58:07Z")
Hi Team, can anyone help me to resolve this issue ? i am having elasticsearch with more than 1lakh datas, i have requested to download the data suddenly Es has stopped, then i have restarted the es , my cluster health… --- ## [Windows containers: unable to access path.data when using volume mount](https://discuss.elastic.co/t/windows-containers-unable-to-access-path-data-when-using-volume-mount/150207)
**Author:** [@numilex](https://discuss.elastic.co/u/numilex)\ **Replies:** 0\ **Last updated:** [September 27, 2018, 1:52pm UTC](https://discuss.elastic.co/t/windows-containers-unable-to-access-path-data-when-using-volume-mount/150207 "2018-09-27T13:52:27Z")
Hey, I've been trying to setup Elasticsearch 6.4.1 on Windows containers. My image is built as follows: \`# Use Nanoserver image FROM microsoft/nanoserver # Arguments to make managing versions easier ARG ELASTICSEARCH\_… --- ## [X-Pack trail](https://discuss.elastic.co/t/x-pack-trail/149895)
**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\ **Replies:** 1\ **Last updated:** [September 27, 2018, 1:38pm UTC](https://discuss.elastic.co/t/x-pack-trail/149895 "2018-09-27T13:38:19Z")
Hello there, We have 2 ELK clusters.... one is going to be production one is testing/development, we wanted to try X-pack on them. My question is, can I enable trail version X-Pack on both (testing goes first, if everyt… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1533) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1535)