# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1557

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1558

---

## [Installing custom plugins with elasticsearch version upgrades](https://discuss.elastic.co/t/installing-custom-plugins-with-elasticsearch-version-upgrades/147613)

<div class="topic-metadata">

**Author:** [@gautu7](https://discuss.elastic.co/u/gautu7)\
**Replies:** 1\
**Last updated:** [September 6, 2018, 5:21pm UTC](https://discuss.elastic.co/t/installing-custom-plugins-with-elasticsearch-version-upgrades/147613 "2018-09-06T17:21:19Z")

</div>

Hi, I am looking to see if there's a way where we can upgrade elasticsearch version on clusters without having to build the custom plugin with that version. Let's say for example, I have a plugin built off of 6.3.2 and …

---

## [Elasticsearch throws 'not enough master nodes discovered during pinging' error](https://discuss.elastic.co/t/elasticsearch-throws-not-enough-master-nodes-discovered-during-pinging-error/146371)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 3\
**Last updated:** [September 6, 2018, 3:16pm UTC](https://discuss.elastic.co/t/elasticsearch-throws-not-enough-master-nodes-discovered-during-pinging-error/146371 "2018-09-06T15:16:33Z")

</div>

Hi, I am trying to setup Elasticsearch cluster(6.3.2) with 4 nodes(1 coordinating node and 3 Master Eligible and Data nodes). Elasticsearch is starting on all 4 nodes separately but it's not forming a cluster. Error I g…

---

## [Shrink vs Reindex](https://discuss.elastic.co/t/shrink-vs-reindex/147426)

<div class="topic-metadata">

**Author:** [@Micah\_Hunsberger](https://discuss.elastic.co/u/Micah_Hunsberger)\
**Replies:** 8\
**Last updated:** [September 6, 2018, 3:10pm UTC](https://discuss.elastic.co/t/shrink-vs-reindex/147426 "2018-09-06T15:10:32Z")

</div>

I am using curator to manage time-based indices, and am wanting to know if it would be better to use shrink action or the reindex action. My cluster has 2 "hot" nodes and one "cold" node. The hot nodes store incoming lo…

---

## [Unable to match index](https://discuss.elastic.co/t/unable-to-match-index/147600)

<div class="topic-metadata">

**Author:** [@touchstonemark](https://discuss.elastic.co/u/touchstonemark)\
**Replies:** 0\
**Last updated:** [September 6, 2018, 3:08pm UTC](https://discuss.elastic.co/t/unable-to-match-index/147600 "2018-09-06T15:08:38Z")

</div>

hi all, we have a problem with Elasticsearch installed locally on our windows 10 build laptops in that when we import data then try and add the first default index it shows the index name of the imported data - for examp…

---

## [Log settings for failed queries](https://discuss.elastic.co/t/log-settings-for-failed-queries/147596)

<div class="topic-metadata">

**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\
**Replies:** 0\
**Last updated:** [September 6, 2018, 2:40pm UTC](https://discuss.elastic.co/t/log-settings-for-failed-queries/147596 "2018-09-06T14:40:11Z")

</div>

I get occasional failed inserts/indexes because of malformed data (as does everyone, I assume). With the new version, I'm getting a lot of the "Can't merge a non-object mapping with an object mapping" error, in part bec…

---

## [“reason”: “action \[cluster:monitor/task/get\] is unauthorized for user \[X\]”](https://discuss.elastic.co/t/reason-action-cluster-monitor-task-get-is-unauthorized-for-user-x/147464)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 2\
**Last updated:** [September 6, 2018, 2:15pm UTC](https://discuss.elastic.co/t/reason-action-cluster-monitor-task-get-is-unauthorized-for-user-x/147464 "2018-09-06T14:15:37Z")

</div>

I'm using Elastic Stack 6.4.0 and while trying to look up status for current task via Dev Tools (in Kibana) with non-superadmin user, I'm getting following error: “reason”: “action \[cluster:monitor/task/get\] is unautho…

---

## [Kibana watcher - SocketTimeoutException](https://discuss.elastic.co/t/kibana-watcher-sockettimeoutexception/147589)

<div class="topic-metadata">

**Author:** [@Serhii\_Savruk](https://discuss.elastic.co/u/Serhii_Savruk)\
**Replies:** 0\
**Last updated:** [September 6, 2018, 1:53pm UTC](https://discuss.elastic.co/t/kibana-watcher-sockettimeoutexception/147589 "2018-09-06T13:53:33Z")

</div>

Hey, I try to create Kibana watcher that will monitor elastic task queue. Input plugin: "input": { "http": { "request": { "url": "https://myelastic.com/\_cluster/pending\_tasks", "auth": {} …

---

## [How do i change time in elasticsearch result according to local timezone?](https://discuss.elastic.co/t/how-do-i-change-time-in-elasticsearch-result-according-to-local-timezone/147584)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 0\
**Last updated:** [September 6, 2018, 1:33pm UTC](https://discuss.elastic.co/t/how-do-i-change-time-in-elasticsearch-result-according-to-local-timezone/147584 "2018-09-06T13:33:44Z")

</div>

How can i get search result of elastic , with all the datetime-field value in local time instead of UTC (system timezone)? what do i need to do for that ?

---

## [Unable to add "total\_fields.limit" in template in ELK 6.3.0](https://discuss.elastic.co/t/unable-to-add-total-fields-limit-in-template-in-elk-6-3-0/146620)

<div class="topic-metadata">

**Author:** [@deepsing](https://discuss.elastic.co/u/deepsing)\
**Replies:** 23\
**Last updated:** [September 6, 2018, 1:13pm UTC](https://discuss.elastic.co/t/unable-to-add-total-fields-limit-in-template-in-elk-6-3-0/146620 "2018-09-06T13:13:02Z")

</div>

Hi Followed this link to update the template Increase total fields limit via creation of index in logstash to add "index.mapping.total\_fields.limit": 10000 in template.json Below is the part of my updated template.json…

---

## [How to enable Xpack in Elasticsearch](https://discuss.elastic.co/t/how-to-enable-xpack-in-elasticsearch/147551)

<div class="topic-metadata">

**Author:** [@binishababu](https://discuss.elastic.co/u/binishababu)\
**Replies:** 1\
**Last updated:** [September 6, 2018, 11:51am UTC](https://discuss.elastic.co/t/how-to-enable-xpack-in-elasticsearch/147551 "2018-09-06T11:51:24Z")

</div>

I'm using Azure for creating elasticsearch and i got 6.3.2 version. I want to know how I can enable Xpack in 6.3.2 elasticsearch?

---

## [Snapshots not working](https://discuss.elastic.co/t/snapshots-not-working/145653)

<div class="topic-metadata">

**Author:** [@amit.patra](https://discuss.elastic.co/u/amit.patra)\
**Replies:** 13\
**Last updated:** [September 6, 2018, 11:22am UTC](https://discuss.elastic.co/t/snapshots-not-working/145653 "2018-09-06T11:22:15Z")

</div>

Hi , I have installed and configured Elastic-search (Multi Node) Cluster on RHEL 6.9. Master : 192.168.2.79 Data-Node1 : 192.168.2.80 Data-Node2 : 192.168.2.81 I have set path.repo: \["/home/es-backup/es\_backup\_basic…

---

## [Running Curator causes missing shards for indices with reason NO\_VALID\_SHARD\_COPY](https://discuss.elastic.co/t/running-curator-causes-missing-shards-for-indices-with-reason-no-valid-shard-copy/147497)

<div class="topic-metadata">

**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\
**Replies:** 1\
**Last updated:** [September 6, 2018, 10:46am UTC](https://discuss.elastic.co/t/running-curator-causes-missing-shards-for-indices-with-reason-no-valid-shard-copy/147497 "2018-09-06T10:46:55Z")

</div>

Hi, Since last week we've been getting that our ELK cluster status is RED after we've been running curator. The curator job is set to forcemerge indices older than 2 days and shrink indices older than 7 days and then se…

---

## [One node not joining a cluster - 5.6.4](https://discuss.elastic.co/t/one-node-not-joining-a-cluster-5-6-4/146899)

<div class="topic-metadata">

**Author:** [@DanV](https://discuss.elastic.co/u/DanV)\
**Replies:** 1\
**Last updated:** [September 6, 2018, 10:44am UTC](https://discuss.elastic.co/t/one-node-not-joining-a-cluster-5-6-4/146899 "2018-09-06T10:44:32Z")

</div>

Hello all, i have the following situation, 3 Elasticsearch nodes in the same server, with IP adresses 10.20.30.1, 10.20.30.2, 10.20.30.3 but one of these nodes doesn't join the cluster, it's not even a specific one. He…

---

## [S3 repository snapshot human readable folder name?](https://discuss.elastic.co/t/s3-repository-snapshot-human-readable-folder-name/147492)

<div class="topic-metadata">

**Author:** [@nutchalum.k](https://discuss.elastic.co/u/nutchalum.k)\
**Replies:** 3\
**Last updated:** [September 6, 2018, 10:38am UTC](https://discuss.elastic.co/t/s3-repository-snapshot-human-readable-folder-name/147492 "2018-09-06T10:38:15Z")

</div>

Hello, Is it possible to create a snapshot as a human readable folder? I've snapshot indices that are older than 7 days and store them in s3 as a backup And I want to delete them after 30 days via bucket policies us…

---

## [GET /\_cat/shards](https://discuss.elastic.co/t/get-cat-shards/147530)

<div class="topic-metadata">

**Author:** [@ytzlax](https://discuss.elastic.co/u/ytzlax)\
**Replies:** 5\
**Last updated:** [September 6, 2018, 10:29am UTC](https://discuss.elastic.co/t/get-cat-shards/147530 "2018-09-06T10:29:44Z")

</div>

Hi, When I run GET /\_cat/shards I get the next output: .kibana 0 p STARTED 21 60.6kb xxx.xx.x.xxx elk-1 What the zero means? Thanks

---

## [Elasticsearch master slave configuration](https://discuss.elastic.co/t/elasticsearch-master-slave-configuration/147525)

<div class="topic-metadata">

**Author:** [@kobesado](https://discuss.elastic.co/u/kobesado)\
**Replies:** 1\
**Last updated:** [September 6, 2018, 8:34am UTC](https://discuss.elastic.co/t/elasticsearch-master-slave-configuration/147525 "2018-09-06T08:34:10Z")

</div>

Hi, I'm trying to configuration a cluster with 1 Master node , 2 slave nodes. After restarting the service, master elascticseach.bat is okey but slave elascticseach.bat been getting the following error: \[node\_154\] not…

---

## [Save quotation ans slash In ES](https://discuss.elastic.co/t/save-quotation-ans-slash-in-es/147009)

<div class="topic-metadata">

**Author:** [@amit.patra](https://discuss.elastic.co/u/amit.patra)\
**Replies:** 2\
**Last updated:** [September 6, 2018, 6:23am UTC](https://discuss.elastic.co/t/save-quotation-ans-slash-in-es/147009 "2018-09-06T06:23:45Z")

</div>

Hi, How to save quotations like "" and slash like \\ in json in elasticsearch. I am running below command but it fails: PUT my\_index/\_doc/1 { "name": "Some information", "value": "//\\/" } Thanks,

---

## [No throughput metrics available for \[bulk\]. Likely cause: The benchmark ended already during warmup](https://discuss.elastic.co/t/no-throughput-metrics-available-for-bulk-likely-cause-the-benchmark-ended-already-during-warmup/147368)

<div class="topic-metadata">

**Author:** [@Todd](https://discuss.elastic.co/u/Todd)\
**Replies:** 9\
**Last updated:** [September 6, 2018, 5:43am UTC](https://discuss.elastic.co/t/no-throughput-metrics-available-for-bulk-likely-cause-the-benchmark-ended-already-during-warmup/147368 "2018-09-06T05:43:00Z")

</div>

Rally version (get with esrally --version): esrally 1.0.0 Invoked command: esrally race --pipeline=benchmark-only --target-hosts="/root/.rally/benchmarks/tracks/billions-rally-tracks/jssz\_benchmark\_scene\_1/target\_host…

---

## [Unsuccessfu Low Level Call on Post](https://discuss.elastic.co/t/unsuccessfu-low-level-call-on-post/147308)

<div class="topic-metadata">

**Author:** [@neurongaragesale](https://discuss.elastic.co/u/neurongaragesale)\
**Replies:** 1\
**Last updated:** [September 6, 2018, 5:23am UTC](https://discuss.elastic.co/t/unsuccessfu-low-level-call-on-post/147308 "2018-09-06T05:23:07Z")

</div>

Hi all, I’m having an issue when calling Elastic from a dotnet core web api application. Below is my setup, description of the issue, and debug information. My Setup Web api built with dotnet core 2.1 Class library …

---

## [Filter columns that are in array,](https://discuss.elastic.co/t/filter-columns-that-are-in-array/147487)

<div class="topic-metadata">

**Author:** [@aashishgahlawat](https://discuss.elastic.co/u/aashishgahlawat)\
**Replies:** 0\
**Last updated:** [September 6, 2018, 3:47am UTC](https://discuss.elastic.co/t/filter-columns-that-are-in-array/147487 "2018-09-06T03:47:16Z")

</div>

I have: 1 2 3 4 5 1 55 4 8 7 8 6 80 40 1 I have my pandas dataframe saved on elasticsearch index, each row is a document. Now I want to retrieve all columns that are in list \[1,5\] i…

---

## [Understanding shard promotion: how can I tell it occurred/what should I look for?](https://discuss.elastic.co/t/understanding-shard-promotion-how-can-i-tell-it-occurred-what-should-i-look-for/147493)

<div class="topic-metadata">

**Author:** [@khyron4eva](https://discuss.elastic.co/u/khyron4eva)\
**Replies:** 0\
**Last updated:** [September 6, 2018, 4:22am UTC](https://discuss.elastic.co/t/understanding-shard-promotion-how-can-i-tell-it-occurred-what-should-i-look-for/147493 "2018-09-06T04:22:30Z")

</div>

I've got a few somewhat theoretical questions about replica shard promotion in the face of node failure. All questions are relative to version 2.4.4 and 6.2+ (as my next upgrade will be from the former to the latter). F…

---

## [Match list in list](https://discuss.elastic.co/t/match-list-in-list/147489)

<div class="topic-metadata">

**Author:** [@aashishgahlawat](https://discuss.elastic.co/u/aashishgahlawat)\
**Replies:** 0\
**Last updated:** [September 6, 2018, 4:12am UTC](https://discuss.elastic.co/t/match-list-in-list/147489 "2018-09-06T04:12:28Z")

</div>

I have my apriori result save on elasticsearch index as: index | antecedents | consequents ...other fields 1 | \[1,2\] | \[8\] 2 | \[1\] | \[55\] 3 | \[82\] …

---

## [Nested object aggs query](https://discuss.elastic.co/t/nested-object-aggs-query/147483)

<div class="topic-metadata">

**Author:** [@Shuai\_Yan](https://discuss.elastic.co/u/Shuai_Yan)\
**Replies:** 0\
**Last updated:** [September 6, 2018, 2:22am UTC](https://discuss.elastic.co/t/nested-object-aggs-query/147483 "2018-09-06T02:22:20Z")

</div>

Hi, I have one index which has document as follows: { "\_index": "issue\_index\_v1", "\_type": "issue", "\_id": "830275", "\_score": null, "\_source": { "id": 830275, "projectCustom2159": { "customField832": 3 } }, …

---

## [Wiping data from ELK](https://discuss.elastic.co/t/wiping-data-from-elk/147467)

<div class="topic-metadata">

**Author:** [@RussellBateman](https://discuss.elastic.co/u/RussellBateman)\
**Replies:** 6\
**Last updated:** [September 6, 2018, 12:42am UTC](https://discuss.elastic.co/t/wiping-data-from-elk/147467 "2018-09-06T00:42:05Z")

</div>

I'm in rabid experimentation mode here. I'm set up like this: Filebeat -\> Elasticsearch | Logstash | nginx | Kibana. I'd like to know how to wipe data from an ELK stack (6.4.0) I'm running (on Ubuntu Server 18.04) wi…

---

## [org.elasticsearch.tools.launchers.JavaVersionChecker](https://discuss.elastic.co/t/org-elasticsearch-tools-launchers-javaversionchecker/147179)

<div class="topic-metadata">

**Author:** [@akuma](https://discuss.elastic.co/u/akuma)\
**Replies:** 6\
**Last updated:** [September 5, 2018, 4:49pm UTC](https://discuss.elastic.co/t/org-elasticsearch-tools-launchers-javaversionchecker/147179 "2018-09-05T16:49:13Z")

</div>

Hello, I have a question. My ElasticSearch version: 6.2.4. os: centos7. java 1.8. Prompt when I run: org.elasticsearch.tools.launchers.JavaVersionChecker. Please help me.

---

## [Nested Array Object](https://discuss.elastic.co/t/nested-array-object/145580)

<div class="topic-metadata">

**Author:** [@DjDigvijay](https://discuss.elastic.co/u/DjDigvijay)\
**Replies:** 4\
**Last updated:** [September 5, 2018, 4:30pm UTC](https://discuss.elastic.co/t/nested-array-object/145580 "2018-09-05T16:30:29Z")

</div>

Having different members with nested mailOpens Array of Objects. Have to solve this query: The list of users who have \>3 distinct mailOpens.mailingId records { "\_index": "members", "\_type": "doc", "\_id": "1234567", …

---

## [Use multi\_search&sort&highlight on Windows, performance problem](https://discuss.elastic.co/t/use-multi-search-sort-highlight-on-windows-performance-problem/147443)

<div class="topic-metadata">

**Author:** [@withcancer](https://discuss.elastic.co/u/withcancer)\
**Replies:** 0\
**Last updated:** [September 5, 2018, 4:15pm UTC](https://discuss.elastic.co/t/use-multi-search-sort-highlight-on-windows-performance-problem/147443 "2018-09-05T16:15:43Z")

</div>

Recently I tried to search some BT seed data on ES, which has about two million data.I want to full text search the name and path field. Here is my mapping: { "settings": { "number\_of\_shards": 1…

---

## [Custom type fields example doesn't work for me](https://discuss.elastic.co/t/custom-type-fields-example-doesnt-work-for-me/147435)

<div class="topic-metadata">

**Author:** [@trex](https://discuss.elastic.co/u/trex)\
**Replies:** 0\
**Last updated:** [September 5, 2018, 3:44pm UTC](https://discuss.elastic.co/t/custom-type-fields-example-doesnt-work-for-me/147435 "2018-09-05T15:44:19Z")

</div>

Elasticsearch 6.2.4 I execute the following in the Dev Tools: PUT twitter { "mappings": { "user": { "properties": { "name": { "type": "text" }, "user\_name": { "ty…

---

## [Accuracy in ES search](https://discuss.elastic.co/t/accuracy-in-es-search/147170)

<div class="topic-metadata">

**Author:** [@JPelastic](https://discuss.elastic.co/u/JPelastic)\
**Replies:** 5\
**Last updated:** [September 5, 2018, 3:27pm UTC](https://discuss.elastic.co/t/accuracy-in-es-search/147170 "2018-09-05T15:27:02Z")

</div>

We have a stock of about 2 million documents containing invoice information in an Elastic db. We want to understand: If I do a count of documents with certain fixed properties (like terms) Or a sum over all those docu…

---

## [Very slow cluster, cannot find "\_cluster" index?](https://discuss.elastic.co/t/very-slow-cluster-cannot-find-cluster-index/147408)

<div class="topic-metadata">

**Author:** [@emilija](https://discuss.elastic.co/u/emilija)\
**Replies:** 9\
**Last updated:** [September 5, 2018, 3:01pm UTC](https://discuss.elastic.co/t/very-slow-cluster-cannot-find-cluster-index/147408 "2018-09-05T15:01:19Z")

</div>

Hi, we have a cluster of 34 nodes running Elastic version 2.2 . The cluster started to behave very weirdly now the shard allocation is very slow and there are "URGENT" pending tasks with over 8 hours in the queue. GET \_c…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1556)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1558)
