# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1556 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1557 --- ## [Nested condition in watcher](https://discuss.elastic.co/t/nested-condition-in-watcher/147365)
**Author:** [@kmk](https://discuss.elastic.co/u/kmk)\ **Replies:** 0\ **Last updated:** [September 5, 2018, 9:59am UTC](https://discuss.elastic.co/t/nested-condition-in-watcher/147365 "2018-09-05T09:59:40Z")
Hi All, my requirement is check the nested watcher conditions. if ( message = "File received" ) if ( message = "file not loaded" ) then send alert for not loading else send alert for not receiving We already imple… --- ## [I need to re-create my .watcher & monitoring-6 index](https://discuss.elastic.co/t/i-need-to-re-create-my-watcher-monitoring-6-index/146289)
**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\ **Replies:** 2\ **Last updated:** [September 7, 2018, 10:38am UTC](https://discuss.elastic.co/t/i-need-to-re-create-my-watcher-monitoring-6-index/146289 "2018-09-07T10:38:07Z")
Hi. I had a major system outage this morning and when I booted all nodes up again both my .watcher and .monitoring indices would not allocate to the data nodes, cluster was red. I tried closing and re opening them but t… --- ## [Answer for: ES cluster with SSH and port forwarding, transport port 9300](https://discuss.elastic.co/t/answer-for-es-cluster-with-ssh-and-port-forwarding-transport-port-9300/147694)
**Author:** [@daveyx](https://discuss.elastic.co/u/daveyx)\ **Replies:** 0\ **Last updated:** [September 7, 2018, 10:21am UTC](https://discuss.elastic.co/t/answer-for-es-cluster-with-ssh-and-port-forwarding-transport-port-9300/147694 "2018-09-07T10:21:48Z")
Hi, sorry to open a new thread, but i can not answer on the old thread anymore: the answer is: transport.publish\_host: localhost --- ## [How to use docker without xpack features (aka how to make the license expiration message go away)](https://discuss.elastic.co/t/how-to-use-docker-without-xpack-features-aka-how-to-make-the-license-expiration-message-go-away/147236)
**Author:** [@bluecoffee](https://discuss.elastic.co/u/bluecoffee)\ **Replies:** 5\ **Last updated:** [September 7, 2018, 10:11am UTC](https://discuss.elastic.co/t/how-to-use-docker-without-xpack-features-aka-how-to-make-the-license-expiration-message-go-away/147236 "2018-09-07T10:11:40Z")
Problem: I run an ElasticSearch instance in a docker container. I am not using any xpack.security features (or at least, not knowingly - that may be the problem...). I keep getting License Expiration warnings: elastics… --- ## [More fine grained privilege than "manage" on indices?](https://discuss.elastic.co/t/more-fine-grained-privilege-than-manage-on-indices/147678)
**Author:** [@JohanRask](https://discuss.elastic.co/u/JohanRask)\ **Replies:** 3\ **Last updated:** [September 7, 2018, 10:03am UTC](https://discuss.elastic.co/t/more-fine-grained-privilege-than-manage-on-indices/147678 "2018-09-07T10:03:31Z")
We are forced to use a specific user for deployment and we are performing a /\_flush/synced during installation. As I understand, I can not have more fine grained control than "manage" which means that this user can also … --- ## [Multiline parsing patterns](https://discuss.elastic.co/t/multiline-parsing-patterns/147171)
**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\ **Replies:** 4\ **Last updated:** [September 7, 2018, 9:41am UTC](https://discuss.elastic.co/t/multiline-parsing-patterns/147171 "2018-09-07T09:41:57Z")
I want to parse a standard JAVA exception which looks like : 2018-09-04 05:29:03.955 \[default task-38\] ERROR c.r.e.u.util.MongoConnectionUtil.createMongoUser - Exception occured while creating mongo userCommand failed w… --- ## [Using Multiple saved searched in a single View](https://discuss.elastic.co/t/using-multiple-saved-searched-in-a-single-view/147658)
**Author:** [@AKSHAY\_R](https://discuss.elastic.co/u/AKSHAY_R)\ **Replies:** 1\ **Last updated:** [September 7, 2018, 9:36am UTC](https://discuss.elastic.co/t/using-multiple-saved-searched-in-a-single-view/147658 "2018-09-07T09:36:45Z")
Hello team, We are trying to make a dashboard by combining different visualization, we have a use case where we want to use multiple saved searches into a single pie, can it be done ? if yes then kindly advice how to … --- ## [Data nodes are not able to join master node and failed to make a cluster](https://discuss.elastic.co/t/data-nodes-are-not-able-to-join-master-node-and-failed-to-make-a-cluster/147657)
**Author:** [@dhananjay88](https://discuss.elastic.co/u/dhananjay88)\ **Replies:** 13\ **Last updated:** [September 7, 2018, 9:21am UTC](https://discuss.elastic.co/t/data-nodes-are-not-able-to-join-master-node-and-failed-to-make-a-cluster/147657 "2018-09-07T09:21:39Z")
Hi All, I have created elasticsearch cluster beofre and it is working fine without any issue with the same configuration as given below. But I am not sure why I am getting message "not enough master nodes discovered du… --- ## [New field as N-gram of another field](https://discuss.elastic.co/t/new-field-as-n-gram-of-another-field/147382)
**Author:** [@programagor](https://discuss.elastic.co/u/programagor)\ **Replies:** 1\ **Last updated:** [September 7, 2018, 9:17am UTC](https://discuss.elastic.co/t/new-field-as-n-gram-of-another-field/147382 "2018-09-07T09:17:29Z")
Greetings I have a field called hdr\_subject and I would like to create a new field such as hdr\_subject\_ngram, which I would like to be an array of all word N-grams of the field hdr\_subject, up to certain size (e.g. 4). … --- ## [Noob) Put json file on elastic, there is an error](https://discuss.elastic.co/t/noob-put-json-file-on-elastic-there-is-an-error/146656)
**Author:** [@da02d4d6e86247f19849](https://discuss.elastic.co/u/da02d4d6e86247f19849)\ **Replies:** 1\ **Last updated:** [September 7, 2018, 9:11am UTC](https://discuss.elastic.co/t/noob-put-json-file-on-elastic-there-is-an-error/146656 "2018-09-07T09:11:26Z")
my json file is here, https://drive.google.com/open?id=1e8zkXX5zyIgIgPb0amwsPE0lnXWu0KHh and i try put it on my elasticsearch with curl -H 'Content-type: application/json' -XPOST 'localhost:9200:news/new -d @/home/sang… --- ## [Creation of Kibana visualization using curl fails in version 6.1.2](https://discuss.elastic.co/t/creation-of-kibana-visualization-using-curl-fails-in-version-6-1-2/147681)
**Author:** [@kamleshjoshi](https://discuss.elastic.co/u/kamleshjoshi)\ **Replies:** 0\ **Last updated:** [September 7, 2018, 9:09am UTC](https://discuss.elastic.co/t/creation-of-kibana-visualization-using-curl-fails-in-version-6-1-2/147681 "2018-09-07T09:09:46Z")
I am getting error while trying to create Kibana visualization using following curl: Error is: "Invalid request payload JSON format" curl -X POST "http://localhost:5601/api/saved-objects/visualization/my-visualization"… --- ## [SHA512 checksum for Elastic](https://discuss.elastic.co/t/sha512-checksum-for-elastic/143867)
**Author:** [@rshetty](https://discuss.elastic.co/u/rshetty)\ **Replies:** 3\ **Last updated:** [September 7, 2018, 8:39am UTC](https://discuss.elastic.co/t/sha512-checksum-for-elastic/143867 "2018-09-07T08:39:05Z")
Hi, I need to perform the sha512 checksum for my elastic tar files in our Linux servers. The article I have referred: The curl commands in this article require a internet connection to perform the checksum. But, th… --- ## [Improve search results for fields](https://discuss.elastic.co/t/improve-search-results-for-fields/147498)
**Author:** [@Yash\_Sharma](https://discuss.elastic.co/u/Yash_Sharma)\ **Replies:** 1\ **Last updated:** [September 7, 2018, 8:16am UTC](https://discuss.elastic.co/t/improve-search-results-for-fields/147498 "2018-09-07T08:16:24Z")
I am using elastic search to display and search products in my app. My data base looks like this- Category Scat Sscat Products Measure Price Beverages Soft Drinks Cans Pepsi My Soft Drink 250Ml 250Ml 30 Househ… --- ## [Cluster state often yellow: data node failed to ping master](https://discuss.elastic.co/t/cluster-state-often-yellow-data-node-failed-to-ping-master/147642)
**Author:** [@eranhirs](https://discuss.elastic.co/u/eranhirs)\ **Replies:** 3\ **Last updated:** [September 7, 2018, 8:08am UTC](https://discuss.elastic.co/t/cluster-state-often-yellow-data-node-failed-to-ping-master/147642 "2018-09-07T08:08:28Z")
We have 6 nodes running ES 5.5.1, a few times a day the cluster is yellow and logs show that a random node which is not master disconnected. Data node and master failed to ping each other while services are all running … --- ## [Date\_histogram in SQL](https://discuss.elastic.co/t/date-histogram-in-sql/147526)
**Author:** [@ranranxiaoya](https://discuss.elastic.co/u/ranranxiaoya)\ **Replies:** 1\ **Last updated:** [September 7, 2018, 7:21am UTC](https://discuss.elastic.co/t/date-histogram-in-sql/147526 "2018-09-07T07:21:34Z")
Hi all, Will elasticsearch SQL support for Histograms in grouping at version 6.4 ? --- ## [Need help to find ELK config required for 30 lakh logs in one minute](https://discuss.elastic.co/t/need-help-to-find-elk-config-required-for-30-lakh-logs-in-one-minute/147662)
**Author:** [@sumeet\_dembra](https://discuss.elastic.co/u/sumeet_dembra)\ **Replies:** 1\ **Last updated:** [September 7, 2018, 6:56am UTC](https://discuss.elastic.co/t/need-help-to-find-elk-config-required-for-30-lakh-logs-in-one-minute/147662 "2018-09-07T06:56:53Z")
Hello, We are having servers in our system which are going to produce around 30 lakh log lines every minute. These logs need to be inserted into ES through logstash. We have some regex's written in logstash. Logs are p… --- ## ["processor \[remove\] doesn't support one or more provided configuration parameters \[ignore\_missing\]](https://discuss.elastic.co/t/processor-remove-doesnt-support-one-or-more-provided-configuration-parameters-ignore-missing/147653)
**Author:** [@guanghaofan](https://discuss.elastic.co/u/guanghaofan)\ **Replies:** 2\ **Last updated:** [September 7, 2018, 5:44am UTC](https://discuss.elastic.co/t/processor-remove-doesnt-support-one-or-more-provided-configuration-parameters-ignore-missing/147653 "2018-09-07T05:44:59Z")
I'm studying the ingest node and just write a simple pipeline, PUT \_ingest/pipeline/my-lab1 { "description": "to parse the filebeat message", "version": 101, "processors": \[ { "kv": { … --- ## [RestHighLevelClient timeout exception](https://discuss.elastic.co/t/resthighlevelclient-timeout-exception/147652)
**Author:** [@satish2](https://discuss.elastic.co/u/satish2)\ **Replies:** 0\ **Last updated:** [September 7, 2018, 5:15am UTC](https://discuss.elastic.co/t/resthighlevelclient-timeout-exception/147652 "2018-09-07T05:15:07Z")
We are randomly getting the below exception. We have observed that these exceptions are coming irrespective of load. Could you please help me understanding the root cause and fixing the issue. java.lang.RuntimeException… --- ## [Elasticsearch docker image for i386 architecture is needed](https://discuss.elastic.co/t/elasticsearch-docker-image-for-i386-architecture-is-needed/146425)
**Author:** [@Turmer](https://discuss.elastic.co/u/Turmer)\ **Replies:** 7\ **Last updated:** [September 7, 2018, 4:50am UTC](https://discuss.elastic.co/t/elasticsearch-docker-image-for-i386-architecture-is-needed/146425 "2018-09-07T04:50:54Z")
Where can I find elasticsearch docker image for i386 architecture? I know it is not officially supported, but an unofficial one would suffice. If there is no such image, how can I build one locally? Any help would be muc… --- ## [Long value last 3 digits always gets 000](https://discuss.elastic.co/t/long-value-last-3-digits-always-gets-000/147506)
**Author:** [@RRSR](https://discuss.elastic.co/u/RRSR)\ **Replies:** 2\ **Last updated:** [September 7, 2018, 4:12am UTC](https://discuss.elastic.co/t/long-value-last-3-digits-always-gets-000/147506 "2018-09-07T04:12:46Z")
I created an index using the below endpoint: PUT test/doc/1 { "id":1, "test\_long": 2305843036566024123 } Then when I try to get the same document using: GET test/doc/1 The result I get is: { "\_index": "tes… --- ## [Authenticate and Segregate Customer Data](https://discuss.elastic.co/t/authenticate-and-segregate-customer-data/146785)
**Author:** [@marksndp](https://discuss.elastic.co/u/marksndp)\ **Replies:** 7\ **Last updated:** [September 7, 2018, 2:00am UTC](https://discuss.elastic.co/t/authenticate-and-segregate-customer-data/146785 "2018-09-07T02:00:41Z")
If several systems (customers) are shipping logs via Filebeat-Logstash combination to a common Elasticsearch instance, can Elastic Security: Ensure customers are authenticated when the log documents are indexed, and th… --- ## [Is it possible to store logs for elastic search remotely?](https://discuss.elastic.co/t/is-it-possible-to-store-logs-for-elastic-search-remotely/147607)
**Author:** [@fcukinyahoo](https://discuss.elastic.co/u/fcukinyahoo)\ **Replies:** 1\ **Last updated:** [September 6, 2018, 11:57pm UTC](https://discuss.elastic.co/t/is-it-possible-to-store-logs-for-elastic-search-remotely/147607 "2018-09-06T23:57:13Z")
The goal is to have ELK stack running on cloud, however storing log data remotely in our data center. We would like to go with this approach because we have a lot of data and storage is expensive on ELK in cloud. So we … --- ## [Type mapping conflict during reindex](https://discuss.elastic.co/t/type-mapping-conflict-during-reindex/147638)
**Author:** [@MaKro](https://discuss.elastic.co/u/MaKro)\ **Replies:** 0\ **Last updated:** [September 6, 2018, 10:23pm UTC](https://discuss.elastic.co/t/type-mapping-conflict-during-reindex/147638 "2018-09-06T22:23:19Z")
Hi. I'm trying to automate the process of schema update and after reading the docs I decided to use the approach with aliases and reindex API. Everything was fine when I added for example new analysers or new fields. T… --- ## [Offline install of curator failing](https://discuss.elastic.co/t/offline-install-of-curator-failing/147623)
**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\ **Replies:** 2\ **Last updated:** [September 6, 2018, 10:05pm UTC](https://discuss.elastic.co/t/offline-install-of-curator-failing/147623 "2018-09-06T22:05:29Z")
I'm trying to install curator in an offline CentOS 7 server. I am running 5.6 of ELK with x-pack installed. This CentOS server does not have any ELK components installed on it, but it is in the same subnet as my cluste… --- ## [Elasticsearch 6.3.2 master node high CPU & load average](https://discuss.elastic.co/t/elasticsearch-6-3-2-master-node-high-cpu-load-average/147627)
**Author:** [@Malc0lm](https://discuss.elastic.co/u/Malc0lm)\ **Replies:** 0\ **Last updated:** [September 6, 2018, 7:59pm UTC](https://discuss.elastic.co/t/elasticsearch-6-3-2-master-node-high-cpu-load-average/147627 "2018-09-06T19:59:43Z")
Hello, I've upgraded from Elasticsearch version 2 to 6.3.2 on Debian Jessie from the official Elasticsearch repo. After the upgrade I've started fresh and re-imported the data I needed. I noticed that the cluster is s… --- ## [Date type mapping not recognised](https://discuss.elastic.co/t/date-type-mapping-not-recognised/147335)
**Author:** [@nskalis](https://discuss.elastic.co/u/nskalis)\ **Replies:** 1\ **Last updated:** [September 6, 2018, 5:54pm UTC](https://discuss.elastic.co/t/date-type-mapping-not-recognised/147335 "2018-09-06T17:54:55Z")
hi, I have upgraded to the latest version of elasticsearch, when I use the following mapping { "mappings": { "\_default\_": { "\_all": { "enabled": false }, "\_source": { "enabled": tr… --- ## [Request Timeout after 30000ms | kibana 4 error](https://discuss.elastic.co/t/request-timeout-after-30000ms-kibana-4-error/146892)
**Author:** [@rajkumar.m](https://discuss.elastic.co/u/rajkumar.m)\ **Replies:** 10\ **Last updated:** [September 6, 2018, 5:54pm UTC](https://discuss.elastic.co/t/request-timeout-after-30000ms-kibana-4-error/146892 "2018-09-06T17:54:47Z")
when i click on indices tab on Kibana settings Menu, i am getting "Request Timeout after 30000ms " error. someone please help and advise how can i increase the value. I am using elastic/kibana version 4. --- ## [Not getting parsed logs to Elasticsearch but able to see in logstash](https://discuss.elastic.co/t/not-getting-parsed-logs-to-elasticsearch-but-able-to-see-in-logstash/147617)
**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\ **Replies:** 0\ **Last updated:** [September 6, 2018, 5:40pm UTC](https://discuss.elastic.co/t/not-getting-parsed-logs-to-elasticsearch-but-able-to-see-in-logstash/147617 "2018-09-06T17:40:30Z")
Hello Community, I am trying to parse simple log and here is my log and logstash parsed output. 2018-09-06 12:31:50,289 INFO \[http-nio-8080-exec-10\] \[test@test.com\] \[POST - /platform-services/api/v1/static-data/pickli… --- ## [How to get multi valued field values in painless](https://discuss.elastic.co/t/how-to-get-multi-valued-field-values-in-painless/147554)
**Author:** [@chandrapraba](https://discuss.elastic.co/u/chandrapraba)\ **Replies:** 1\ **Last updated:** [September 6, 2018, 5:23pm UTC](https://discuss.elastic.co/t/how-to-get-multi-valued-field-values-in-painless/147554 "2018-09-06T17:23:57Z")
Hi, I'm new to Elastic Search and Painless. I have a field in my index which has multiple values as shown below. FieldName Language Value "Computer Science" In painless, When i try to get the value o… --- ## [Continous GC on Master Node](https://discuss.elastic.co/t/continous-gc-on-master-node/147475)
**Author:** [@praveen.vemuri](https://discuss.elastic.co/u/praveen.vemuri)\ **Replies:** 6\ **Last updated:** [September 6, 2018, 5:21pm UTC](https://discuss.elastic.co/t/continous-gc-on-master-node/147475 "2018-09-06T17:21:28Z")
we have a huge cluster which holds 200TB data. 50 physical servers(150 data nodes). 3 instances running on each node 30gb heap each ( total physical ram 124gb) 3 master nodes ( Total ram 16gb) heap assigned 12gb 3clie… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1555) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1557)