# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1591 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1592 --- ## [ES 6.3 doesnot pickup date type feilds](https://discuss.elastic.co/t/es-6-3-doesnot-pickup-date-type-feilds/141481)
**Author:** [@nikhilkvn](https://discuss.elastic.co/u/nikhilkvn)\ **Replies:** 3\ **Last updated:** [August 6, 2018, 8:10am UTC](https://discuss.elastic.co/t/es-6-3-doesnot-pickup-date-type-feilds/141481 "2018-08-06T08:10:32Z")
I was trying to copy my data from dev to test environments. dev = 6.2X test = 6.3x 6.3X "time": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore\_above": 256 } } 6.2X "time": { "type": "… --- ## [Copy of the index with specified sample size](https://discuss.elastic.co/t/copy-of-the-index-with-specified-sample-size/142646)
**Author:** [@Buntu\_Dev](https://discuss.elastic.co/u/Buntu_Dev)\ **Replies:** 3\ **Last updated:** [August 6, 2018, 8:08am UTC](https://discuss.elastic.co/t/copy-of-the-index-with-specified-sample-size/142646 "2018-08-06T08:08:10Z")
Is there a way to make a copy of the index into another cluster with just a sample of the source index? I'm using ES6 and wanted to see if there are any easier ways to get a sample of the index for testing purposes? Tha… --- ## [Import Visualizations, Searches, Dashboards via comand line](https://discuss.elastic.co/t/import-visualizations-searches-dashboards-via-comand-line/142605)
**Author:** [@b22565875b81d856c5b0](https://discuss.elastic.co/u/b22565875b81d856c5b0)\ **Replies:** 2\ **Last updated:** [August 6, 2018, 7:40am UTC](https://discuss.elastic.co/t/import-visualizations-searches-dashboards-via-comand-line/142605 "2018-08-06T07:40:58Z")
Hello there! I got a question. Is it possible to import new JSON file with new visualizations and dashboards WITHOUT using Kibana\`s visual interface (browser inteface)? For example, i connect with PUTTY to some machine,… --- ## [Joining a Single Node Cluster with 2 more nodes](https://discuss.elastic.co/t/joining-a-single-node-cluster-with-2-more-nodes/143106)
**Author:** [@X\_Calibur](https://discuss.elastic.co/u/X_Calibur)\ **Replies:** 0\ **Last updated:** [August 6, 2018, 7:26am UTC](https://discuss.elastic.co/t/joining-a-single-node-cluster-with-2-more-nodes/143106 "2018-08-06T07:26:42Z")
Hi, At the moment we have a single cluster with a single node. The total data on this cluster spans about 3tb including hundreds of indices created on a daily basis. All indices have been configured with 1 shard and 0 … --- ## [How to filter roles which are having cluster is all privileges](https://discuss.elastic.co/t/how-to-filter-roles-which-are-having-cluster-is-all-privileges/142151)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 1\ **Last updated:** [August 6, 2018, 7:17am UTC](https://discuss.elastic.co/t/how-to-filter-roles-which-are-having-cluster-is-all-privileges/142151 "2018-08-06T07:17:06Z")
Hi Team, Could any one suggest How to filter roles which are having cluster is all privileges. Thanks in Advance. --- ## [Skip previous queries](https://discuss.elastic.co/t/skip-previous-queries/143099)
**Author:** [@Ole](https://discuss.elastic.co/u/Ole)\ **Replies:** 0\ **Last updated:** [August 6, 2018, 6:58am UTC](https://discuss.elastic.co/t/skip-previous-queries/143099 "2018-08-06T06:58:46Z")
I'm developing a PHP script that use Elasticsearch. The use of this script is comparing two "companies" to see if they share any connection. The user will input two companies and the script will query Elasticsearch and g… --- ## [Missing authentication token for REST error](https://discuss.elastic.co/t/missing-authentication-token-for-rest-error/142291)
**Author:** [@Miho](https://discuss.elastic.co/u/Miho)\ **Replies:** 1\ **Last updated:** [August 6, 2018, 6:26am UTC](https://discuss.elastic.co/t/missing-authentication-token-for-rest-error/142291 "2018-08-06T06:26:20Z")
Hello! I'm getting a missing authentication error and was wondering if anyone can help me. I'm using version 6.1.1 My code without credentials: PUT \_xpack/watcher/watch/cluster\_yellow3 { "trigger": { "schedule"… --- ## [Unable to create new indexe because of Logstash and ELastic error](https://discuss.elastic.co/t/unable-to-create-new-indexe-because-of-logstash-and-elastic-error/142543)
**Author:** [@Nithani25](https://discuss.elastic.co/u/Nithani25)\ **Replies:** 3\ **Last updated:** [August 6, 2018, 5:10am UTC](https://discuss.elastic.co/t/unable-to-create-new-indexe-because-of-logstash-and-elastic-error/142543 "2018-08-06T05:10:35Z")
Hi Team, Its been some days since the last index which i have created, today while trying to create a new index for apache access log,I am getting the below error while executing the logstash.conf file. I am working on … --- ## [Week of the year aggregations using Painless](https://discuss.elastic.co/t/week-of-the-year-aggregations-using-painless/140071)
**Author:** [@Paulo\_Silva](https://discuss.elastic.co/u/Paulo_Silva)\ **Replies:** 3\ **Last updated:** [August 6, 2018, 5:01am UTC](https://discuss.elastic.co/t/week-of-the-year-aggregations-using-painless/140071 "2018-08-06T05:01:46Z")
Hi guys, I'm facing a challenge while aggregating data by the "Week of Year" number. The use case is: The first day of the week is set as Sunday on my PC. create a data range: start='2018-06-24 Sunday' and end='2018-… --- ## [Right way access parent field in nested aggs script?](https://discuss.elastic.co/t/right-way-access-parent-field-in-nested-aggs-script/143086)
**Author:** [@yjp211](https://discuss.elastic.co/u/yjp211)\ **Replies:** 0\ **Last updated:** [August 6, 2018, 4:09am UTC](https://discuss.elastic.co/t/right-way-access-parent-field-in-nested-aggs-script/143086 "2018-08-06T04:09:09Z")
Elasticsearch Version: 5.6.3 I have a mapping like this: PUT /my\_stock { "mappings": { "stock": { "properties": { "industry": { "type": "nested", "properties": { … --- ## [Ingest node from rsyslog](https://discuss.elastic.co/t/ingest-node-from-rsyslog/143082)
**Author:** [@kelvinsmj](https://discuss.elastic.co/u/kelvinsmj)\ **Replies:** 0\ **Last updated:** [August 6, 2018, 3:52am UTC](https://discuss.elastic.co/t/ingest-node-from-rsyslog/143082 "2018-08-06T03:52:36Z")
Hi, I'm just wondering if ingest node for Elastic Search can receive logs directly from rsyslog (ie, without logstash/beats) --- ## [I can not see the document in the result](https://discuss.elastic.co/t/i-can-not-see-the-document-in-the-result/143063)
**Author:** [@Masoumeh\_Shavikloo](https://discuss.elastic.co/u/Masoumeh_Shavikloo)\ **Replies:** 1\ **Last updated:** [August 5, 2018, 11:14pm UTC](https://discuss.elastic.co/t/i-can-not-see-the-document-in-the-result/143063 "2018-08-05T23:14:28Z")
I am using elasticsearch-PHP and new to it. I wrote two scripts, one is for indexing a document under a custom analyzer: \ **Author:** [@BrobaFett](https://discuss.elastic.co/u/BrobaFett)\ **Replies:** 0\ **Last updated:** [August 5, 2018, 8:56pm UTC](https://discuss.elastic.co/t/composite-aggregations-in-the-java-api-and-question-about-terms-aggregation-partitioning/143075 "2018-08-05T20:56:40Z") Hello, I would appreciate any help/insight that can be provided on the below issues. I was trying to implement Composite Aggregations with the 6.3 Rest Client and noticed that it didn't seem to be supported yet. Am I c… --- ## [Query for gis points of some objects dinamically](https://discuss.elastic.co/t/query-for-gis-points-of-some-objects-dinamically/143074)
**Author:** [@1862347ba9566e72a47d](https://discuss.elastic.co/u/1862347ba9566e72a47d)\ **Replies:** 0\ **Last updated:** [August 5, 2018, 8:47pm UTC](https://discuss.elastic.co/t/query-for-gis-points-of-some-objects-dinamically/143074 "2018-08-05T20:47:17Z")
There is geo-data on the movement of some object. How to get a query for points in the radius of which the location of the object was fixed? --- ## [Elasticsearch service failed](https://discuss.elastic.co/t/elasticsearch-service-failed/143032)
**Author:** [@Deepakny](https://discuss.elastic.co/u/Deepakny)\ **Replies:** 1\ **Last updated:** [August 5, 2018, 8:37pm UTC](https://discuss.elastic.co/t/elasticsearch-service-failed/143032 "2018-08-05T20:37:25Z")
I have installed elasticsearch on linux and i get the below error, and unable to access on port 9200. please provide your inputs Aug 04 20:15:15 ip-172-31-21-248.us-east-2.compute.internal systemd\[1\]: Starting Starts an… --- ## [Elasticsearch 6.2 - How to specify bucket\_path with Composite Aggregations - How to specify Key?](https://discuss.elastic.co/t/elasticsearch-6-2-how-to-specify-bucket-path-with-composite-aggregations-how-to-specify-key/142876)
**Author:** [@BrobaFett](https://discuss.elastic.co/u/BrobaFett)\ **Replies:** 4\ **Last updated:** [August 5, 2018, 7:36pm UTC](https://discuss.elastic.co/t/elasticsearch-6-2-how-to-specify-bucket-path-with-composite-aggregations-how-to-specify-key/142876 "2018-08-05T19:36:08Z")
Hi, I've run into an issue with using Composite Aggregations and Pipeline Aggregations. Currently, I create buckets according to my sources using the Composite Bucket Aggregation, but I am only using one source field (… --- ## [Parent-Child query for 6.3.2](https://discuss.elastic.co/t/parent-child-query-for-6-3-2/142999)
**Author:** [@Larry\_Schrader](https://discuss.elastic.co/u/Larry_Schrader)\ **Replies:** 5\ **Last updated:** [August 5, 2018, 2:04pm UTC](https://discuss.elastic.co/t/parent-child-query-for-6-3-2/142999 "2018-08-05T14:04:17Z")
I have created a template file with mapping for a parent-child relationship: ### Template file { "index\_patterns" : \[ "test-\*" \], "settings" : { "index" : { "number\_of\_shards" : "1", "number\_of\_repli… --- ## [Issue - getting multi index data based on bool filters (must\_not, should)](https://discuss.elastic.co/t/issue-getting-multi-index-data-based-on-bool-filters-must-not-should/143029)
**Author:** [@rajb](https://discuss.elastic.co/u/rajb)\ **Replies:** 1\ **Last updated:** [August 5, 2018, 11:45am UTC](https://discuss.elastic.co/t/issue-getting-multi-index-data-based-on-bool-filters-must-not-should/143029 "2018-08-05T11:45:20Z")
Hi, I have 2 indexes (Item and Product). I'm trying to get all records from Product index and records from Item index (filtered by memberID). But my query is not working. played with different boost values but no luck… --- ## [How to dynamically update documents in ingestnode pipeline?](https://discuss.elastic.co/t/how-to-dynamically-update-documents-in-ingestnode-pipeline/143046)
**Author:** [@pushanbhattacharya](https://discuss.elastic.co/u/pushanbhattacharya)\ **Replies:** 0\ **Last updated:** [August 5, 2018, 6:34am UTC](https://discuss.elastic.co/t/how-to-dynamically-update-documents-in-ingestnode-pipeline/143046 "2018-08-05T06:34:14Z")
So, I have a list of some String values which are essentially document ids and some other field value which I would like to update. I am trying to use an ingest node pipeline as I failed to achieve the same through logs… --- ## [Getting elasticsearch generated ids?](https://discuss.elastic.co/t/getting-elasticsearch-generated-ids/143023)
**Author:** [@cool\_arun](https://discuss.elastic.co/u/cool_arun)\ **Replies:** 1\ **Last updated:** [August 5, 2018, 6:15am UTC](https://discuss.elastic.co/t/getting-elasticsearch-generated-ids/143023 "2018-08-05T06:15:27Z")
is there any query available to get all the document which having elasticsearch generated id. i have both elasticsearch generated id and my own custom ids, i want to get all the document which has elasticsearch genera… --- ## [Unit elasticsearch.service entered failed state.--X](https://discuss.elastic.co/t/unit-elasticsearch-service-entered-failed-state-x/143034)
**Author:** [@Deepakny](https://discuss.elastic.co/u/Deepakny)\ **Replies:** 1\ **Last updated:** [August 5, 2018, 6:14am UTC](https://discuss.elastic.co/t/unit-elasticsearch-service-entered-failed-state-x/143034 "2018-08-05T06:14:23Z")
\[root@ip-\*\*\*\*\*\*\*\*\*\* ~\]# sudo service elasticsearch start Starting elasticsearch (via systemctl): \[ OK \] \[root@ip-\*\*\*\*\*\*\*\*\*\* ~\]# sudo service elasticsearch status ● elasticsearch.service - Starts… --- ## [ElasticSearch transport server get Handler](https://discuss.elastic.co/t/elasticsearch-transport-server-get-handler/143036)
**Author:** [@Ajay\_Kumar\_Mishra](https://discuss.elastic.co/u/Ajay_Kumar_Mishra)\ **Replies:** 0\ **Last updated:** [August 4, 2018, 11:41pm UTC](https://discuss.elastic.co/t/elasticsearch-transport-server-get-handler/143036 "2018-08-04T23:41:57Z")
Hello, Can someone help me with the handler function in elastic search server? For example: When the Java transport client invokes the following: // GetResponse response = client.prepareGet("movies", "movie", "1").exe… --- ## [Heelp](https://discuss.elastic.co/t/heelp/142937)
**Author:** [@meriem\_el\_boumashoul](https://discuss.elastic.co/u/meriem_el_boumashoul)\ **Replies:** 5\ **Last updated:** [August 4, 2018, 11:49am UTC](https://discuss.elastic.co/t/heelp/142937 "2018-08-04T11:49:39Z")
I need to create a mappings for 4 type in one index elasticsearch 6.3.0 any idea?? --- ## [Advance suggestions](https://discuss.elastic.co/t/advance-suggestions/143014)
**Author:** [@Jacques\_du\_Plessis](https://discuss.elastic.co/u/Jacques_du_Plessis)\ **Replies:** 0\ **Last updated:** [August 4, 2018, 11:04am UTC](https://discuss.elastic.co/t/advance-suggestions/143014 "2018-08-04T11:04:38Z")
Assuming I have a company document, I implemented a complete suggest query soIif i search for the following "Barloworld" I might get the below results. I am using the Prefix query to search for suggestions. Now from my … --- ## [Suricata with ElasticStack](https://discuss.elastic.co/t/suricata-with-elasticstack/141948)
**Author:** [@DK1206](https://discuss.elastic.co/u/DK1206)\ **Replies:** 1\ **Last updated:** [August 4, 2018, 10:46am UTC](https://discuss.elastic.co/t/suricata-with-elasticstack/141948 "2018-08-04T10:46:27Z")
Hey guys, OVERVIEW I managed to set up ElasticStack on my Ubuntu VM (my host is Windows). I installed on my host Sysmon and succesfully connected it with winlogbeat. I can now see in Kibana UI Winlogbeat logs - this is… --- ## [Do i need the license for xpack features such as machine learning?](https://discuss.elastic.co/t/do-i-need-the-license-for-xpack-features-such-as-machine-learning/143013)
**Author:** [@alizadehei](https://discuss.elastic.co/u/alizadehei)\ **Replies:** 1\ **Last updated:** [August 4, 2018, 10:24am UTC](https://discuss.elastic.co/t/do-i-need-the-license-for-xpack-features-such-as-machine-learning/143013 "2018-08-04T10:24:28Z")
hello, on this page: It has been said that You have opened the code of X-Pack features such as machine learning, But on this page: https://www.elastic.co/subscriptions#request-info you say that use of machine lear… --- ## [Set up index template with 0 replicas, always creates with 1](https://discuss.elastic.co/t/set-up-index-template-with-0-replicas-always-creates-with-1/143010)
**Author:** [@Kieren\_Johnstone](https://discuss.elastic.co/u/Kieren_Johnstone)\ **Replies:** 0\ **Last updated:** [August 4, 2018, 8:07am UTC](https://discuss.elastic.co/t/set-up-index-template-with-0-replicas-always-creates-with-1/143010 "2018-08-04T08:07:03Z")
I'm using filebeat: filebeat.prospectors: - type: log enabled: true json.keys\_under\_root: true json.overwrite\_keys: true paths: - /etc/logs/\*.txt filebeat.config.modules: path: ${path.config}/modules.d/\*.y… --- ## [Failed to execute query exception](https://discuss.elastic.co/t/failed-to-execute-query-exception/143006)
**Author:** [@ammu](https://discuss.elastic.co/u/ammu)\ **Replies:** 0\ **Last updated:** [August 4, 2018, 7:33am UTC](https://discuss.elastic.co/t/failed-to-execute-query-exception/143006 "2018-08-04T07:33:16Z")
Hi All, I ma getting below error in my elastic logs. \[2018-08-04T12:34:23,177\]\[DEBUG\]\[o.e.a.s.TransportSearchAction\] \[MASTER-DATA-\] \[ao\_axa\_session\_hdr\_1\]\[2\], node\[NFD6h\_7ETSu\_Prp2W4bVxg\], \[R\], s\[STARTED\], a\[id=vPX\_h\_h… --- ## [Cluster wont start after upgrade from 5.6 to 6.3.1/6.3.2](https://discuss.elastic.co/t/cluster-wont-start-after-upgrade-from-5-6-to-6-3-1-6-3-2/142940)
**Author:** [@matejzero](https://discuss.elastic.co/u/matejzero)\ **Replies:** 1\ **Last updated:** [August 4, 2018, 6:13am UTC](https://discuss.elastic.co/t/cluster-wont-start-after-upgrade-from-5-6-to-6-3-1-6-3-2/142940 "2018-08-04T06:13:52Z")
Hello, I upgraded our ELK cluster from 5.6.9 to 6.3.1 last week. I check upgrade assistant before I started the upgrade and it gave a GO to upgrade. It was a rolling upgrade and most of the things went fine (and because… --- ## [Splitting up winlogbeat](https://discuss.elastic.co/t/splitting-up-winlogbeat/143000)
**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\ **Replies:** 0\ **Last updated:** [August 4, 2018, 3:42am UTC](https://discuss.elastic.co/t/splitting-up-winlogbeat/143000 "2018-08-04T03:42:42Z")
I think i have to split up my index, because i was seeing errors about there being too many fields. I was collecting all of security, system, application, and a bunch of other windows logs into a single index, and i thi… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1590) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1592)