# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1572

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1573

---

## [Single Shard 0 replicas 3 nodes](https://discuss.elastic.co/t/single-shard-0-replicas-3-nodes/145184)

<div class="topic-metadata">

**Author:** [@sanjaykrishna12](https://discuss.elastic.co/u/sanjaykrishna12)\
**Replies:** 1\
**Last updated:** [August 22, 2018, 12:32pm UTC](https://discuss.elastic.co/t/single-shard-0-replicas-3-nodes/145184 "2018-08-22T12:32:37Z")

</div>

Hi, I am trying to understand the shards and replicas in elasticsearch. I have 3 nodes in my elastic cluster. My indices are created with 1 shard and 0 replicas. I assume in this scenario each of my node would have 1 co…

---

## [Forcemerge and merge policies](https://discuss.elastic.co/t/forcemerge-and-merge-policies/145532)

<div class="topic-metadata">

**Author:** [@Silas\_Hansen](https://discuss.elastic.co/u/Silas_Hansen)\
**Replies:** 4\
**Last updated:** [August 22, 2018, 12:13pm UTC](https://discuss.elastic.co/t/forcemerge-and-merge-policies/145532 "2018-08-22T12:13:14Z")

</div>

Hi In our current setup, we're scraping a site every day and indexing the results, basically overwriting the same data over and over again, every 24 hours. Since I know the index is going to be read-only for 24 hours a…

---

## [Rollup job failed to find field](https://discuss.elastic.co/t/rollup-job-failed-to-find-field/144233)

<div class="topic-metadata">

**Author:** [@Paul\_Ainslie](https://discuss.elastic.co/u/Paul_Ainslie)\
**Replies:** 3\
**Last updated:** [August 22, 2018, 11:32am UTC](https://discuss.elastic.co/t/rollup-job-failed-to-find-field/144233 "2018-08-22T11:32:21Z")

</div>

I tried to create a data rollup on data that was pulled in from Logstash but I was getting error: failed to find field \[@timestamp\] and \[missing\] is not provided. This is the error in the /var/log/elasticsearch folder. …

---

## [In JAVA how to pass list of indexes as paramater to search api](https://discuss.elastic.co/t/in-java-how-to-pass-list-of-indexes-as-paramater-to-search-api/145542)

<div class="topic-metadata">

**Author:** [@BleedCode](https://discuss.elastic.co/u/BleedCode)\
**Replies:** 0\
**Last updated:** [August 22, 2018, 11:20am UTC](https://discuss.elastic.co/t/in-java-how-to-pass-list-of-indexes-as-paramater-to-search-api/145542 "2018-08-22T11:20:19Z")

</div>

I am trying to use multi-index search api of ES in java. The list of indexes over which i will be performing search operation will be known at run-time only. Using below snippet of code i am able to perform search when t…

---

## [Working with elasticsearch cluster](https://discuss.elastic.co/t/working-with-elasticsearch-cluster/145520)

<div class="topic-metadata">

**Author:** [@rgaduput](https://discuss.elastic.co/u/rgaduput)\
**Replies:** 12\
**Last updated:** [August 22, 2018, 10:39am UTC](https://discuss.elastic.co/t/working-with-elasticsearch-cluster/145520 "2018-08-22T10:39:47Z")

</div>

Hi, we use elasticsearch for storing some metadata of CI, we have automation's to collect metadata and push to elasticsearch. Our elasticsearch cluster has below configuration, 2 - master nodes 3 - data nodes all no…

---

## ["exception":{"stackTrace":"ClusterBlockException\[blocked by: \[FORBIDDEN/4/index closed\];\]\\n\\tat](https://discuss.elastic.co/t/exception-stacktrace-clusterblockexception-blocked-by-forbidden-4-index-closed-n-tat/145483)

<div class="topic-metadata">

**Author:** [@parisha.sethi](https://discuss.elastic.co/u/parisha.sethi)\
**Replies:** 2\
**Last updated:** [August 22, 2018, 10:30am UTC](https://discuss.elastic.co/t/exception-stacktrace-clusterblockexception-blocked-by-forbidden-4-index-closed-n-tat/145483 "2018-08-22T10:30:37Z")

</div>

Hi All, From past one month, at few instances diagnosis services failing at logstash we are getting a strange issue "exception":{"stackTrace":"ClusterBlockException\[blocked by: \[FORBIDDEN/4/index closed\];\]\\n\\tat org.ela…

---

## [How to write a query using query's response as part of the query?](https://discuss.elastic.co/t/how-to-write-a-query-using-querys-response-as-part-of-the-query/145523)

<div class="topic-metadata">

**Author:** [@Satish\_Kumar2](https://discuss.elastic.co/u/Satish_Kumar2)\
**Replies:** 2\
**Last updated:** [August 22, 2018, 9:53am UTC](https://discuss.elastic.co/t/how-to-write-a-query-using-querys-response-as-part-of-the-query/145523 "2018-08-22T09:53:11Z")

</div>

Hi, I had to write a query that , where field matches the text , ids is one among the keys in the time dictionary , like in this case =\> items = { "id1": "time1", "id2": "time2".....} { "size": 1000, "\_source"…

---

## [Check if an index is using a specific template](https://discuss.elastic.co/t/check-if-an-index-is-using-a-specific-template/145514)

<div class="topic-metadata">

**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Replies:** 3\
**Last updated:** [August 22, 2018, 8:22am UTC](https://discuss.elastic.co/t/check-if-an-index-is-using-a-specific-template/145514 "2018-08-22T08:22:29Z")

</div>

Is there a way to check if the mapping of an index comes from a specific template? When performing GET index\_name I am getting a mappings json field but how can I say if this was auto generated or came from a template…

---

## [How to completely disable Inverse document frequency?](https://discuss.elastic.co/t/how-to-completely-disable-inverse-document-frequency/145390)

<div class="topic-metadata">

**Author:** [@porunov](https://discuss.elastic.co/u/porunov)\
**Replies:** 4\
**Last updated:** [August 22, 2018, 8:01am UTC](https://discuss.elastic.co/t/how-to-completely-disable-inverse-document-frequency/145390 "2018-08-22T08:01:18Z")

</div>

I need to make a full text search for names. I would like to disable Inverse document frequency because it is irrelevant in my use case. Is it possible not only ignore Inverse document frequency but also to turn it off t…

---

## [Search API example](https://discuss.elastic.co/t/search-api-example/145500)

<div class="topic-metadata">

**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\
**Replies:** 0\
**Last updated:** [August 22, 2018, 7:12am UTC](https://discuss.elastic.co/t/search-api-example/145500 "2018-08-22T07:12:51Z")

</div>

I am new to search so just started learning. I am trying to connect to an existing node and do a basic search. RestHighLevelClient client = new RestHighLevelClient( RestClient.builder(new HttpHost("localhost", 9200,…

---

## [Elasticsearch default user created . How to use it?](https://discuss.elastic.co/t/elasticsearch-default-user-created-how-to-use-it/145367)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 5\
**Last updated:** [August 22, 2018, 7:07am UTC](https://discuss.elastic.co/t/elasticsearch-default-user-created-how-to-use-it/145367 "2018-08-22T07:07:21Z")

</div>

Hi All , I am previously used tar (5.6 to 6.3.1) files for ELK stack creation . That ELK stacks and xpack were working well. That time i am used a manually created user named " elastic" Now i am tried rpm installation …

---

## [Rollup fails with: ElasticsearchParseException: failed to parse date field \[0\] with format \[date\_time\]](https://discuss.elastic.co/t/rollup-fails-with-elasticsearchparseexception-failed-to-parse-date-field-0-with-format-date-time/145098)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 2\
**Last updated:** [August 22, 2018, 6:17am UTC](https://discuss.elastic.co/t/rollup-fails-with-elasticsearchparseexception-failed-to-parse-date-field-0-with-format-date-time/145098 "2018-08-22T06:17:53Z")

</div>

We are using the RollUp API to process tomcat access logs. The logs have a "timestamp" field formatted as follows (mapping): "timestamp": { "type": "date", "format": "date\_time" } The Rollup fails with the following…

---

## [Elasticsearch NEST API handle failed bulk updates](https://discuss.elastic.co/t/elasticsearch-nest-api-handle-failed-bulk-updates/144986)

<div class="topic-metadata">

**Author:** [@muthucse](https://discuss.elastic.co/u/muthucse)\
**Replies:** 5\
**Last updated:** [August 22, 2018, 2:18am UTC](https://discuss.elastic.co/t/elasticsearch-nest-api-handle-failed-bulk-updates/144986 "2018-08-22T02:18:52Z")

</div>

Updating a nested document using painless script. The document will be updated only when the condition is met. Trying to get noop response for the failed conditions but not able to get the response in dotNet's NEST bulk …

---

## [ElasticSearch Clustering](https://discuss.elastic.co/t/elasticsearch-clustering/145144)

<div class="topic-metadata">

**Author:** [@vishnuduttpv](https://discuss.elastic.co/u/vishnuduttpv)\
**Replies:** 1\
**Last updated:** [August 22, 2018, 2:12am UTC](https://discuss.elastic.co/t/elasticsearch-clustering/145144 "2018-08-22T02:12:46Z")

</div>

Hi, I have an Elastic stack server in which I installed the following, ES - 6.2 Logstash - 6.2 Kibana - 6.2 I am using only one ES node and not yet using the clustering set up. But when I verified the ES status thr…

---

## [How to backup the index data in cloud](https://discuss.elastic.co/t/how-to-backup-the-index-data-in-cloud/145401)

<div class="topic-metadata">

**Author:** [@pankaj.pankasin](https://discuss.elastic.co/u/pankaj.pankasin)\
**Replies:** 2\
**Last updated:** [August 22, 2018, 2:12am UTC](https://discuss.elastic.co/t/how-to-backup-the-index-data-in-cloud/145401 "2018-08-22T02:12:28Z")

</div>

We are building a datalake in cloud and intent to setup 5-7 nodes cluster in cloud. I would like to know whats the best way to deploy the cluster in cloud making sure data is never corrupted and instances are up and run…

---

## [Can't login to Kibana](https://discuss.elastic.co/t/cant-login-to-kibana/145159)

<div class="topic-metadata">

**Author:** [@Michake](https://discuss.elastic.co/u/Michake)\
**Replies:** 1\
**Last updated:** [August 22, 2018, 2:11am UTC](https://discuss.elastic.co/t/cant-login-to-kibana/145159 "2018-08-22T02:11:59Z")

</div>

Hi After I installed EFK in K8S cluster, I tried to login Kibana, but I can't login, could you help me figure it out? Thanks! I got Kibana link address by running following command: kubectl cluster-info Kibana is runn…

---

## [Index source version info](https://discuss.elastic.co/t/index-source-version-info/145219)

<div class="topic-metadata">

**Author:** [@Buntu\_Dev](https://discuss.elastic.co/u/Buntu_Dev)\
**Replies:** 1\
**Last updated:** [August 22, 2018, 2:10am UTC](https://discuss.elastic.co/t/index-source-version-info/145219 "2018-08-22T02:10:27Z")

</div>

New to ES - I need to ingest the docs into ES frequently based on the code changes and want to identify the branch or commit that is associated with building the index. Do I need to create additional mapping or is there …

---

## [How can i Pull Data from Solarwinds to Kibana?](https://discuss.elastic.co/t/how-can-i-pull-data-from-solarwinds-to-kibana/145123)

<div class="topic-metadata">

**Author:** [@pezthebasic](https://discuss.elastic.co/u/pezthebasic)\
**Replies:** 3\
**Last updated:** [August 22, 2018, 1:56am UTC](https://discuss.elastic.co/t/how-can-i-pull-data-from-solarwinds-to-kibana/145123 "2018-08-22T01:56:30Z")

</div>

How can i Pull Data from Solarwinds to Display Visualize on Kibana ??

---

## [How can I force Elasticsearch to return 429?](https://discuss.elastic.co/t/how-can-i-force-elasticsearch-to-return-429/145442)

<div class="topic-metadata">

**Author:** [@jgimenez](https://discuss.elastic.co/u/jgimenez)\
**Replies:** 2\
**Last updated:** [August 22, 2018, 1:43am UTC](https://discuss.elastic.co/t/how-can-i-force-elasticsearch-to-return-429/145442 "2018-08-22T01:43:04Z")

</div>

I would like to try how my client application reacts to backpressure, so I would like the server to always respond with 429. Is this possible somehow? Thanks!

---

## [Elasticsearch get results only appeared in last 30 seconds](https://discuss.elastic.co/t/elasticsearch-get-results-only-appeared-in-last-30-seconds/145299)

<div class="topic-metadata">

**Author:** [@yolo\_1900](https://discuss.elastic.co/u/yolo_1900)\
**Replies:** 1\
**Last updated:** [August 22, 2018, 1:27am UTC](https://discuss.elastic.co/t/elasticsearch-get-results-only-appeared-in-last-30-seconds/145299 "2018-08-22T01:27:47Z")

</div>

I have two Python client code. One runs each 30 seconds and submits data to elasticsearch. The other one runs each 30 seconds, download the data that is submitted by the first program and analyze the data. In the second…

---

## [Full Access for user with document level security enabled](https://discuss.elastic.co/t/full-access-for-user-with-document-level-security-enabled/145175)

<div class="topic-metadata">

**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\
**Replies:** 2\
**Last updated:** [August 22, 2018, 1:23am UTC](https://discuss.elastic.co/t/full-access-for-user-with-document-level-security-enabled/145175 "2018-08-22T01:23:20Z")

</div>

Hi, With document level security enabled, we were able to restrict document access to certain users based on their role. These users login usually login from their personal laptops. But, we want same users to be able t…

---

## [Using NEST (.NET client) with Elastic Cloud](https://discuss.elastic.co/t/using-nest-net-client-with-elastic-cloud/144240)

<div class="topic-metadata">

**Author:** [@tmenier](https://discuss.elastic.co/u/tmenier)\
**Replies:** 4\
**Last updated:** [August 22, 2018, 12:40am UTC](https://discuss.elastic.co/t/using-nest-net-client-with-elastic-cloud/144240 "2018-08-22T00:40:36Z")

</div>

I'm connecting to an Elastic Cloud deployment of Elasticsearch with the NEST client for .NET. The deployment is based on the default "I/O Optimized" template. It has a single "instance", but 2 "zones." I am assuming that…

---

## [JSON Payload to Elastic.py](https://discuss.elastic.co/t/json-payload-to-elastic-py/145394)

<div class="topic-metadata">

**Author:** [@Matthew\_Butler](https://discuss.elastic.co/u/Matthew_Butler)\
**Replies:** 5\
**Last updated:** [August 21, 2018, 5:36pm UTC](https://discuss.elastic.co/t/json-payload-to-elastic-py/145394 "2018-08-21T17:36:07Z")

</div>

Here is my JSON payload: {"device":"368640","deviceType":"Sigfox-Tracker","version":3,"time":"Tue Aug 21 2018 02:33:05 GMT+0000 (UTC)","rssi":"-120.00","battery":3.28,"temp":20.87,"soil":1915,"xAxis":59,"yAxis":-38,"zAx…

---

## [How to delete task document created by \_delete\_by\_query?](https://discuss.elastic.co/t/how-to-delete-task-document-created-by-delete-by-query/145475)

<div class="topic-metadata">

**Author:** [@mrubin](https://discuss.elastic.co/u/mrubin)\
**Replies:** 0\
**Last updated:** [August 22, 2018, 12:09am UTC](https://discuss.elastic.co/t/how-to-delete-task-document-created-by-delete-by-query/145475 "2018-08-22T00:09:40Z")

</div>

The documentation for \_delete\_by\_query states that: Elasticsearch will also create a record of this task as a document at .tasks/task/${taskId} . This is yours to keep or remove as you see fit. When you are done with …

---

## [Cannot delete templates - template upgrade service](https://discuss.elastic.co/t/cannot-delete-templates-template-upgrade-service/144398)

<div class="topic-metadata">

**Author:** [@chobbs](https://discuss.elastic.co/u/chobbs)\
**Replies:** 1\
**Last updated:** [August 21, 2018, 11:54pm UTC](https://discuss.elastic.co/t/cannot-delete-templates-template-upgrade-service/144398 "2018-08-21T23:54:13Z")

</div>

Just start working with elasticsearch and using a docker dev insurance. I've tried deleting all templates from the node using: curl -XDELETE 'http://localhost:9200/\_template/\*' This seems to work, but then in the logs i…

---

## [Visualizations displays other user's visualization titles](https://discuss.elastic.co/t/visualizations-displays-other-users-visualization-titles/145308)

<div class="topic-metadata">

**Author:** [@vemula.pranavi](https://discuss.elastic.co/u/vemula.pranavi)\
**Replies:** 1\
**Last updated:** [August 21, 2018, 10:00pm UTC](https://discuss.elastic.co/t/visualizations-displays-other-users-visualization-titles/145308 "2018-08-21T22:00:12Z")

</div>

Hello, I created two users - user1 and user2 and gave indices index1 and index2. Now, if user1 creates a new visualization in index1, that shows in user2's visualization titles, however I'm not able to see the data. I…

---

## [How do I sort buckets by Term Aggregation's doc\_count?](https://discuss.elastic.co/t/how-do-i-sort-buckets-by-term-aggregations-doc-count/145453)

<div class="topic-metadata">

**Author:** [@kriyate](https://discuss.elastic.co/u/kriyate)\
**Replies:** 1\
**Last updated:** [August 21, 2018, 8:21pm UTC](https://discuss.elastic.co/t/how-do-i-sort-buckets-by-term-aggregations-doc-count/145453 "2018-08-21T20:21:45Z")

</div>

Hi everyone: I have an index, invoices, that I need to aggregate into yearly buckets, then sort. I have succeeded in using Bucket Sort to sort my buckets by simple sum values (revenue and tax). However, I am struggling…

---

## [How to scroll through an Elasticsearch index using elasticsearch-spark?](https://discuss.elastic.co/t/how-to-scroll-through-an-elasticsearch-index-using-elasticsearch-spark/144618)

<div class="topic-metadata">

**Author:** [@Swapnil\_Nawale](https://discuss.elastic.co/u/Swapnil_Nawale)\
**Replies:** 4\
**Last updated:** [August 21, 2018, 6:24pm UTC](https://discuss.elastic.co/t/how-to-scroll-through-an-elasticsearch-index-using-elasticsearch-spark/144618 "2018-08-21T18:24:32Z")

</div>

With the Java Client.prepareSearch() and Client.prepareSearchScroll() APIs, we can query an Elasticsearch index using the scrolls as mentioned in the documentation. With these APIs, we can select only a specific numbe…

---

## [Old .monitoring indices aren't being deleted](https://discuss.elastic.co/t/old-monitoring-indices-arent-being-deleted/145436)

<div class="topic-metadata">

**Author:** [@oblakeerickson](https://discuss.elastic.co/u/oblakeerickson)\
**Replies:** 4\
**Last updated:** [August 21, 2018, 6:24pm UTC](https://discuss.elastic.co/t/old-monitoring-indices-arent-being-deleted/145436 "2018-08-21T18:24:23Z")

</div>

I'm having a similar issue as this topic where old monitoring indices aren't being deleted: But we are using exporters of type local as far as I know because the monitoring indices are on the same nodes as our other i…

---

## [DNS Round-robin causing errors](https://discuss.elastic.co/t/dns-round-robin-causing-errors/144950)

<div class="topic-metadata">

**Author:** [@kurtiskurtis](https://discuss.elastic.co/u/kurtiskurtis)\
**Replies:** 2\
**Last updated:** [August 21, 2018, 5:01pm UTC](https://discuss.elastic.co/t/dns-round-robin-causing-errors/144950 "2018-08-21T17:01:57Z")

</div>

So this may sound a bit odd, try to follow with me. I was trying to be clever and I used DNS Round-Robining to simplify the deployment of Elasticsearch nodes. For those of you unfamiliar, this is achieved by making mult…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1571)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1573)
