# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1575

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1576

---

## [Readonly dashboard user in elastic cloud not working](https://discuss.elastic.co/t/readonly-dashboard-user-in-elastic-cloud-not-working/144514)

<div class="topic-metadata">

**Author:** [@hugohendriks](https://discuss.elastic.co/u/hugohendriks)\
**Replies:** 9\
**Last updated:** [August 20, 2018, 1:21pm UTC](https://discuss.elastic.co/t/readonly-dashboard-user-in-elastic-cloud-not-working/144514 "2018-08-20T13:21:18Z")

</div>

Hi, I'm using the trail version of an Cloud instance( 6.3.2) and I'm trying to create a user which only has dashboard rights to my dashboard. I've created a user and a specific dashboard role as I read here: https://www.…

---

## [OutOfMemmoryIssue](https://discuss.elastic.co/t/outofmemmoryissue/145169)

<div class="topic-metadata">

**Author:** [@amaljose123](https://discuss.elastic.co/u/amaljose123)\
**Replies:** 0\
**Last updated:** [August 20, 2018, 1:01pm UTC](https://discuss.elastic.co/t/outofmemmoryissue/145169 "2018-08-20T13:01:58Z")

</div>

everything went perfectly until i added a synonyms file to elasticsearch, -\> i have two synonyms file one with 1.1GB size and another with 512MB, -\>after that when i am starting elasticsearch ,i just getting the follo…

---

## [How to add mapping to existing index for GeoIP?](https://discuss.elastic.co/t/how-to-add-mapping-to-existing-index-for-geoip/145167)

<div class="topic-metadata">

**Author:** [@mprzygrodzki](https://discuss.elastic.co/u/mprzygrodzki)\
**Replies:** 0\
**Last updated:** [August 20, 2018, 12:55pm UTC](https://discuss.elastic.co/t/how-to-add-mapping-to-existing-index-for-geoip/145167 "2018-08-20T12:55:26Z")

</div>

Hello everyone, i'm new to ES and after reading multiple topics i'm still facing an issue with adding missing mapping to existing index. The main thing is that i'm missing geoip fields in Elasticsearch. I've found some e…

---

## [What's in the bulk queue?](https://discuss.elastic.co/t/whats-in-the-bulk-queue/144556)

<div class="topic-metadata">

**Author:** [@mind\_scratch](https://discuss.elastic.co/u/mind_scratch)\
**Replies:** 1\
**Last updated:** [August 20, 2018, 12:24pm UTC](https://discuss.elastic.co/t/whats-in-the-bulk-queue/144556 "2018-08-20T12:24:22Z")

</div>

I have a situation where the size of the bulk queue climbs and I'd like to know what's in that queue. Is there some way to diagnose the issue? Thanks

---

## [Api to get indexing rate](https://discuss.elastic.co/t/api-to-get-indexing-rate/144159)

<div class="topic-metadata">

**Author:** [@vissu](https://discuss.elastic.co/u/vissu)\
**Replies:** 1\
**Last updated:** [August 20, 2018, 12:13pm UTC](https://discuss.elastic.co/t/api-to-get-indexing-rate/144159 "2018-08-20T12:13:11Z")

</div>

Hi Team, Is there any api to get indexing rate of an index ? When i use stats api i get only these, even for he current index. "indexing": { "index\_total": 2440, "index\_time\_in\_millis": 936, "index\_current": 0, "i…

---

## [How to configure Java RestClient to talk to ElasticCluster?](https://discuss.elastic.co/t/how-to-configure-java-restclient-to-talk-to-elasticcluster/143890)

<div class="topic-metadata">

**Author:** [@preraktiwari](https://discuss.elastic.co/u/preraktiwari)\
**Replies:** 1\
**Last updated:** [August 20, 2018, 12:05pm UTC](https://discuss.elastic.co/t/how-to-configure-java-restclient-to-talk-to-elasticcluster/143890 "2018-08-20T12:05:46Z")

</div>

I am running ES v6.3.2. I have 2 master nodes and 2 data nodes in my cluster (lets call them M1 & M2 and D1 & D2). Lets say they are running on following IPs M1 : 10.20.30.1:9200 M2 : 10.20.30.2:9200 D1 : 1…

---

## [Elasticsearch Dashboard in Grafana](https://discuss.elastic.co/t/elasticsearch-dashboard-in-grafana/144914)

<div class="topic-metadata">

**Author:** [@khulfreedos](https://discuss.elastic.co/u/khulfreedos)\
**Replies:** 1\
**Last updated:** [August 20, 2018, 12:03pm UTC](https://discuss.elastic.co/t/elasticsearch-dashboard-in-grafana/144914 "2018-08-20T12:03:52Z")

</div>

Hello, I am kind of new with Elasticsearch and I would appreciate if you can help me with this. I am trying to create a dashboard in Grafana by following the below link. Now my question is, how/where to look for ES\_M…

---

## [Python + SQL](https://discuss.elastic.co/t/python-sql/144170)

<div class="topic-metadata">

**Author:** [@ll\_elastic](https://discuss.elastic.co/u/ll_elastic)\
**Replies:** 1\
**Last updated:** [August 20, 2018, 11:59am UTC](https://discuss.elastic.co/t/python-sql/144170 "2018-08-20T11:59:41Z")

</div>

Hi there! I was about to rewrite all the functions that I have in DSL to the new SQL functionality for testing and learning purposes. Once I got into it, I wasn't able to find any functionality to query using SQL and Py…

---

## [How to use 6.4.0-SNAPSHOT in gradle?](https://discuss.elastic.co/t/how-to-use-6-4-0-snapshot-in-gradle/145148)

<div class="topic-metadata">

**Author:** [@porunov](https://discuss.elastic.co/u/porunov)\
**Replies:** 0\
**Last updated:** [August 20, 2018, 11:09am UTC](https://discuss.elastic.co/t/how-to-use-6-4-0-snapshot-in-gradle/145148 "2018-08-20T11:09:23Z")

</div>

Hello, I need to use some functionality from 6.4.0 version but I can't figure out how to use a snapshot version. My gradle file looks like: ext { ELASTICSEARCH = '6.4.0-SNAPSHOT' } repositories { mavenCentral…

---

## [How can I retrieve 'mapping parameters' like "index", "index\_options" and "norms"?](https://discuss.elastic.co/t/how-can-i-retrieve-mapping-parameters-like-index-index-options-and-norms/144370)

<div class="topic-metadata">

**Author:** [@lucademichele](https://discuss.elastic.co/u/lucademichele)\
**Replies:** 5\
**Last updated:** [August 20, 2018, 10:57am UTC](https://discuss.elastic.co/t/how-can-i-retrieve-mapping-parameters-like-index-index-options-and-norms/144370 "2018-08-20T10:57:30Z")

</div>

Hi to all! I'm working on Elastic 5.4 I want to retrieve all mapping parameters (values for "index", "index\_options", "norms") currently defined for a mapped object, but i can't find the way... Here is what I'm doin…

---

## [Must be a git repository](https://discuss.elastic.co/t/must-be-a-git-repository/143773)

<div class="topic-metadata">

**Author:** [@username123](https://discuss.elastic.co/u/username123)\
**Replies:** 5\
**Last updated:** [August 20, 2018, 10:53am UTC](https://discuss.elastic.co/t/must-be-a-git-repository/143773 "2018-08-20T10:53:32Z")

</div>

When I run esrally /root/.rally/benchmarks/tracks/custom\] must be a git repository But ~/.rally/benchmarks/tracks/custom# git status On branch master Changes not staged for commit: Log is: return race(cfg, exte…

---

## [Minimum\_should\_match ignored in ES 2.4.6](https://discuss.elastic.co/t/minimum-should-match-ignored-in-es-2-4-6/144374)

<div class="topic-metadata">

**Author:** [@Elena\_DevAccount](https://discuss.elastic.co/u/Elena_DevAccount)\
**Replies:** 1\
**Last updated:** [August 20, 2018, 10:53am UTC](https://discuss.elastic.co/t/minimum-should-match-ignored-in-es-2-4-6/144374 "2018-08-20T10:53:24Z")

</div>

@jimczi Posted it here too! I am getting weird behaviour with "minimum\_should\_match" used inside "multi\_match". ES version: 2.4.6 Plugins installed: Kibana, sense Java version: java version "1.8.0\_102" Java(TM) SE …

---

## [Install 2 differents versions on the same server](https://discuss.elastic.co/t/install-2-differents-versions-on-the-same-server/145138)

<div class="topic-metadata">

**Author:** [@khl3o](https://discuss.elastic.co/u/khl3o)\
**Replies:** 1\
**Last updated:** [August 20, 2018, 10:43am UTC](https://discuss.elastic.co/t/install-2-differents-versions-on-the-same-server/145138 "2018-08-20T10:43:57Z")

</div>

Hi, I have an installed version 2.4.2 on my server and I want to install elastic 6 on this server but keep the 2.4.2 running. Can I install a new version on a different port (9201) ? I'm using Debian 8 Thx

---

## [How to capture "now" and "now-15m" in mail body?](https://discuss.elastic.co/t/how-to-capture-now-and-now-15m-in-mail-body/144905)

<div class="topic-metadata">

**Author:** [@Debashis\_Adak](https://discuss.elastic.co/u/Debashis_Adak)\
**Replies:** 3\
**Last updated:** [August 20, 2018, 10:10am UTC](https://discuss.elastic.co/t/how-to-capture-now-and-now-15m-in-mail-body/144905 "2018-08-20T10:10:43Z")

</div>

Hi All, I am trying to capture the time "now" and "now-15m" in my mail body of the kibana watcher. Can you help me with the syntax? Thanks & Regards, Debashis

---

## [Shipping jenkins job console gives object mapping error](https://discuss.elastic.co/t/shipping-jenkins-job-console-gives-object-mapping-error/145130)

<div class="topic-metadata">

**Author:** [@mrashid](https://discuss.elastic.co/u/mrashid)\
**Replies:** 0\
**Last updated:** [August 20, 2018, 9:59am UTC](https://discuss.elastic.co/t/shipping-jenkins-job-console-gives-object-mapping-error/145130 "2018-08-20T09:59:39Z")

</div>

I am using the logstash plugin to ship console logs from Jenkins jobs.I am able to ship logs from all the jenkins job , except in one where I get the below error: RESPONSE: HttpResponseProxy{HTTP/1.1 400 Bad Request \[Wa…

---

## [Elasticsearch Reallocation](https://discuss.elastic.co/t/elasticsearch-reallocation/145120)

<div class="topic-metadata">

**Author:** [@mayur\_chauhan](https://discuss.elastic.co/u/mayur_chauhan)\
**Replies:** 0\
**Last updated:** [August 20, 2018, 9:13am UTC](https://discuss.elastic.co/t/elasticsearch-reallocation/145120 "2018-08-20T09:13:01Z")

</div>

I have a Elastic cluster version 6.1.2 of few nodes. Each node has multiple shards. on a data node one of the shard got unassigned (No information available in the logs why this happen). The initial allocation setting …

---

## [Java High level rest client update](https://discuss.elastic.co/t/java-high-level-rest-client-update/144158)

<div class="topic-metadata">

**Author:** [@darsan55](https://discuss.elastic.co/u/darsan55)\
**Replies:** 3\
**Last updated:** [August 20, 2018, 8:14am UTC](https://discuss.elastic.co/t/java-high-level-rest-client-update/144158 "2018-08-20T08:14:56Z")

</div>

Hi All, I m trying to update a nested field using java high level client . Here i am using script to update the document . While executing it its throwing error which i have mentioned below. CODE : …

---

## [Elasticsearch not getting the new log updates](https://discuss.elastic.co/t/elasticsearch-not-getting-the-new-log-updates/145112)

<div class="topic-metadata">

**Author:** [@Rocky\_RK](https://discuss.elastic.co/u/Rocky_RK)\
**Replies:** 0\
**Last updated:** [August 20, 2018, 8:08am UTC](https://discuss.elastic.co/t/elasticsearch-not-getting-the-new-log-updates/145112 "2018-08-20T08:08:11Z")

</div>

Hello Experts, I have configured a ELK on a Standalone physical Server with 8 CPU & 32GB of ram and it was running fine until now for few months however we have added few more logs on th servers and now on the Kibana po…

---

## [Cluster intermittently goes down](https://discuss.elastic.co/t/cluster-intermittently-goes-down/145106)

<div class="topic-metadata">

**Author:** [@pradeep\_nair](https://discuss.elastic.co/u/pradeep_nair)\
**Replies:** 0\
**Last updated:** [August 20, 2018, 7:34am UTC](https://discuss.elastic.co/t/cluster-intermittently-goes-down/145106 "2018-08-20T07:34:09Z")

</div>

Hi , I have a cluster of 4 nodes. I see the nodes are unavailable intermittently. I see the following error in the logs: \[2018-08-20T00:06:06,384\]\[WARN \]\[o.e.d.z.ZenDiscovery \] \[abc-node-1\] master left (reason = t…

---

## [Create a simple frequency based alert using Watcher](https://discuss.elastic.co/t/create-a-simple-frequency-based-alert-using-watcher/143586)

<div class="topic-metadata">

**Author:** [@rouble](https://discuss.elastic.co/u/rouble)\
**Replies:** 5\
**Last updated:** [August 20, 2018, 7:28am UTC](https://discuss.elastic.co/t/create-a-simple-frequency-based-alert-using-watcher/143586 "2018-08-20T07:28:53Z")

</div>

Gurus, I am looking to create a frequency based watch. Very simply, if the query returns any results at all in the last N seconds, send an alert. I have written something that works, but since I am new to writing watche…

---

## [Match query does not give expected result](https://discuss.elastic.co/t/match-query-does-not-give-expected-result/144878)

<div class="topic-metadata">

**Author:** [@bongoD6](https://discuss.elastic.co/u/bongoD6)\
**Replies:** 4\
**Last updated:** [August 20, 2018, 6:45am UTC](https://discuss.elastic.co/t/match-query-does-not-give-expected-result/144878 "2018-08-20T06:45:30Z")

</div>

Hi, I am not sure if I am doing something wrong, but I cant see expected results for match query. I have followed ES documents and tried making a curl request with below json body { "query": { "match" : { …

---

## [Elastic cluster always down wihtout apparent cause](https://discuss.elastic.co/t/elastic-cluster-always-down-wihtout-apparent-cause/145077)

<div class="topic-metadata">

**Author:** [@haiyuancheng](https://discuss.elastic.co/u/haiyuancheng)\
**Replies:** 0\
**Last updated:** [August 20, 2018, 1:49am UTC](https://discuss.elastic.co/t/elastic-cluster-always-down-wihtout-apparent-cause/145077 "2018-08-20T01:49:29Z")

</div>

018-08-20T00:35:03,367\]\[DEBUG\]\[o.e.a.a.c.h.TransportClusterHealthAction\] \[plat-ecloud01-db-es01\] timed out while retrying \[cluster:monitor/health\] after failure (timeout \[30s\]) \[2018-08-20T00:35:03,368\]\[DEBUG\]\[o.e.a.a.c…

---

## [Oracle vs Open JDK version](https://discuss.elastic.co/t/oracle-vs-open-jdk-version/144553)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 2\
**Last updated:** [August 20, 2018, 1:53am UTC](https://discuss.elastic.co/t/oracle-vs-open-jdk-version/144553 "2018-08-20T01:53:01Z")

</div>

I see in the documentation (https://www.elastic.co/guide/en/elasticsearch/reference/current/\_installation.html) it is recommended to use the oracle JDK version. Let me know whether we can use Open JDK instead of Oracle J…

---

## [Aggs on scrited fields](https://discuss.elastic.co/t/aggs-on-scrited-fields/145063)

<div class="topic-metadata">

**Author:** [@arshadsa](https://discuss.elastic.co/u/arshadsa)\
**Replies:** 1\
**Last updated:** [August 20, 2018, 1:30am UTC](https://discuss.elastic.co/t/aggs-on-scrited-fields/145063 "2018-08-20T01:30:37Z")

</div>

Can someone share an example on how to run aggregations (avg, sum) on script field. I am getting 0 when value is present. Thanks in advance

---

## [Export index for validation](https://discuss.elastic.co/t/export-index-for-validation/144981)

<div class="topic-metadata">

**Author:** [@pavanneeli](https://discuss.elastic.co/u/pavanneeli)\
**Replies:** 2\
**Last updated:** [August 20, 2018, 1:28am UTC](https://discuss.elastic.co/t/export-index-for-validation/144981 "2018-08-20T01:28:58Z")

</div>

Hi Everyone, my developer is reading a index from ES by building a hive table, as a QE I want to validate the data by exporting the index as a json or csv file based on some filter conditions, how can I do that? Thanks …

---

## [Apache2 AND Nginx logs, store in same index or separate?](https://discuss.elastic.co/t/apache2-and-nginx-logs-store-in-same-index-or-separate/145069)

<div class="topic-metadata">

**Author:** [@lucasjkr](https://discuss.elastic.co/u/lucasjkr)\
**Replies:** 1\
**Last updated:** [August 19, 2018, 11:46pm UTC](https://discuss.elastic.co/t/apache2-and-nginx-logs-store-in-same-index-or-separate/145069 "2018-08-19T23:46:53Z")

</div>

I'm working on web monitoring for a couple different services, some servers are Apache2 based, and some are Nginx based. Trying to figure out how to store the different document types. I'm thinking the proper route woul…

---

## [\[data1\] not enough master nodes discovered during pinging (found \[\[\]\], but needed \[-1\])](https://discuss.elastic.co/t/data1-not-enough-master-nodes-discovered-during-pinging-found-but-needed-1/145045)

<div class="topic-metadata">

**Author:** [@Rahul.Deshmukh](https://discuss.elastic.co/u/Rahul.Deshmukh)\
**Replies:** 1\
**Last updated:** [August 19, 2018, 8:12pm UTC](https://discuss.elastic.co/t/data1-not-enough-master-nodes-discovered-during-pinging-found-but-needed-1/145045 "2018-08-19T20:12:55Z")

</div>

Hi There, having issue with discovering data node in elastic, tried all of the all posts about same issue but could not resolve it, please help!! My Environemt: Two Centos Vmware workstation Vm's NODE 1 Config: Master…

---

## [How to sort nested documents](https://discuss.elastic.co/t/how-to-sort-nested-documents/144431)

<div class="topic-metadata">

**Author:** [@cele\_ormaechea](https://discuss.elastic.co/u/cele_ormaechea)\
**Replies:** 4\
**Last updated:** [August 19, 2018, 7:22pm UTC](https://discuss.elastic.co/t/how-to-sort-nested-documents/144431 "2018-08-19T19:22:18Z")

</div>

Hi, I have been trying to sort nested documents but this solution https://www.elastic.co/guide/en/elasticsearch/reference/6.3/search-request-sort.html#nested-sorting is not what I need or at least couldn't come with my r…

---

## [Cant merge the objects while upserting a document in specific index](https://discuss.elastic.co/t/cant-merge-the-objects-while-upserting-a-document-in-specific-index/145057)

<div class="topic-metadata">

**Author:** [@Sangeeth\_Kumar](https://discuss.elastic.co/u/Sangeeth_Kumar)\
**Replies:** 5\
**Last updated:** [August 19, 2018, 3:22pm UTC](https://discuss.elastic.co/t/cant-merge-the-objects-while-upserting-a-document-in-specific-index/145057 "2018-08-19T15:22:21Z")

</div>

I have index called "channel", first document has attribute "Members" and its type is list. \[{'\_id': 'everyone', 'Name': 'Everyone', 'Type': 'Group', '\_created\_at': datetime.datetime(2018, 8, 2, 10, 36, 3, 369000), '\_c…

---

## [SAML Issues with Sales Force IPd](https://discuss.elastic.co/t/saml-issues-with-sales-force-ipd/145056)

<div class="topic-metadata">

**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\
**Replies:** 2\
**Last updated:** [August 19, 2018, 2:34pm UTC](https://discuss.elastic.co/t/saml-issues-with-sales-force-ipd/145056 "2018-08-19T14:34:27Z")

</div>

Hi there, I am getting the following error when I use salesforce.com for SAML: Elasticsearch Logs: \[2018-08-19T13:11:37,693\]\[WARN \]\[o.e.x.s.a.AuthenticationService\] \[MYtrM5v\] Authentication to realm saml1 failed - Pro…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1574)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1576)
