# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1606 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1607 --- ## [Syslog to Linux](https://discuss.elastic.co/t/syslog-to-linux/141211)
**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\ **Replies:** 3\ **Last updated:** [July 24, 2018, 10:45am UTC](https://discuss.elastic.co/t/syslog-to-linux/141211 "2018-07-24T10:45:03Z")
Hello, I don't know if I am on the right section but here it goes: I have a syslog server and I already connected for it to send the logs to my linux box where I have ELK installed. I have the IP and everything but I a… --- ## [Curator CRON problem](https://discuss.elastic.co/t/curator-cron-problem/140313)
**Author:** [@frenkye](https://discuss.elastic.co/u/frenkye)\ **Replies:** 5\ **Last updated:** [July 24, 2018, 1:32pm UTC](https://discuss.elastic.co/t/curator-cron-problem/140313 "2018-07-24T13:32:11Z")
Hi, I having problem with curator set as cron and last think I could think of is there is some check in the binary which don't allow it. When I run it in shell it work OK, write into the /var/log/curator.log and does i… --- ## [What are the pricing for Gold & Platinum Subscriptions?](https://discuss.elastic.co/t/what-are-the-pricing-for-gold-platinum-subscriptions/141379)
**Author:** [@katiyar](https://discuss.elastic.co/u/katiyar)\ **Replies:** 1\ **Last updated:** [July 24, 2018, 1:21pm UTC](https://discuss.elastic.co/t/what-are-the-pricing-for-gold-platinum-subscriptions/141379 "2018-07-24T13:21:58Z")
What are the pricing for Gold & Platinum Subscriptions ? --- ## [Watcher Service not working](https://discuss.elastic.co/t/watcher-service-not-working/140348)
**Author:** [@vkrishna91](https://discuss.elastic.co/u/vkrishna91)\ **Replies:** 4\ **Last updated:** [July 24, 2018, 1:02pm UTC](https://discuss.elastic.co/t/watcher-service-not-working/140348 "2018-07-24T13:02:53Z")
I have a three node elasticsearch cluster, One node is not connecting to the cluster. The elasticsearch service running on it but i saw this error. \[2018-07-17T00:00:07,000\]\[ERROR\]\[o.e.x.w.e.ExecutionService\] \[elk-data-… --- ## [Cassandra Elasticsearch Integration](https://discuss.elastic.co/t/cassandra-elasticsearch-integration/141381)
**Author:** [@sandeepgdba](https://discuss.elastic.co/u/sandeepgdba)\ **Replies:** 0\ **Last updated:** [July 24, 2018, 12:50pm UTC](https://discuss.elastic.co/t/cassandra-elasticsearch-integration/141381 "2018-07-24T12:50:04Z")
Hi I am new to elasticsearch, I have elasticsearch setup on my machine, I would like to know to to integrate it with my local cassandra instance, I've searched all over the Internet could not find the lead. What is the… --- ## [Query\_string query returns unexpected results using dotnet core 2.1.1](https://discuss.elastic.co/t/query-string-query-returns-unexpected-results-using-dotnet-core-2-1-1/139794)
**Author:** [@Mike\_Langley](https://discuss.elastic.co/u/Mike_Langley)\ **Replies:** 5\ **Last updated:** [July 24, 2018, 12:35pm UTC](https://discuss.elastic.co/t/query-string-query-returns-unexpected-results-using-dotnet-core-2-1-1/139794 "2018-07-24T12:35:07Z")
Infrastructure: Elasticsearch, Kibana 6.3 (Azure, Kubernetes, Docker Cluster) Masters: 2, Clients: 3, Data: 2 NEST, Elasticsearch.NET 6.2 - netstandard2.1? dotnet core 2.1.1 We are having issues with a simple object… --- ## [Need help: histogram & time zone](https://discuss.elastic.co/t/need-help-histogram-time-zone/141378)
**Author:** [@kklingjie](https://discuss.elastic.co/u/kklingjie)\ **Replies:** 0\ **Last updated:** [July 24, 2018, 12:20pm UTC](https://discuss.elastic.co/t/need-help-histogram-time-zone/141378 "2018-07-24T12:20:15Z")
Data source: "hits": \[{ "\_index": "log", "\_type": "accesslog", "\_id": "5b2977e843644c8a7e8b4582", "\_score": 1, "\_source": { "id": { "$id": "5b2977e843644c8a7e8b4582" }, "ip": "117.30.209.86", "source\_url": "www", … --- ## [Need help to create mapping](https://discuss.elastic.co/t/need-help-to-create-mapping/141358)
**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\ **Replies:** 5\ **Last updated:** [July 24, 2018, 11:16am UTC](https://discuss.elastic.co/t/need-help-to-create-mapping/141358 "2018-07-24T11:16:19Z")
Hi, Could you please help me to create mapping for the json file in following format { "2018-07-22 06:00" : { "Global Initiatives" : { "service1" : 0, "service2" : 0.02, "service3" : 10 }, "ABC" : { "service1" … --- ## [How to get a list of GeoShapes containing a GeoPoint?](https://discuss.elastic.co/t/how-to-get-a-list-of-geoshapes-containing-a-geopoint/141361)
**Author:** [@anon24174512](https://discuss.elastic.co/u/anon24174512)\ **Replies:** 0\ **Last updated:** [July 24, 2018, 11:14am UTC](https://discuss.elastic.co/t/how-to-get-a-list-of-geoshapes-containing-a-geopoint/141361 "2018-07-24T11:14:01Z")
Hello, Given a list of geographic areas stored as GeoShapes in ES, is there a way to get the set of areas (GeoShape) containing a given GeoPoint ? Thanks, --- ## [How to aggregate based on latest value?](https://discuss.elastic.co/t/how-to-aggregate-based-on-latest-value/140737)
**Author:** [@tpraizler](https://discuss.elastic.co/u/tpraizler)\ **Replies:** 16\ **Last updated:** [July 24, 2018, 11:13am UTC](https://discuss.elastic.co/t/how-to-aggregate-based-on-latest-value/140737 "2018-07-24T11:13:19Z")
Hi, I am trying to understand if I can do the following aggregation. Let's say I have the following documents: { "\_id": "auy6a25C7ofiYFJ1f", "my\_id": 1, "type": "A" "timestamp": "2018-10-27 10:00" }, { "\_id": "l… --- ## [Finding resource bottleneck in elasticsearch cluster](https://discuss.elastic.co/t/finding-resource-bottleneck-in-elasticsearch-cluster/138706)
**Author:** [@palashkulsh](https://discuss.elastic.co/u/palashkulsh)\ **Replies:** 3\ **Last updated:** [July 24, 2018, 10:50am UTC](https://discuss.elastic.co/t/finding-resource-bottleneck-in-elasticsearch-cluster/138706 "2018-07-24T10:50:53Z")
hi elastic ninjas, Currently we have made our cluster live with hot warm architecture as mentioned in How hot/warm architecture enhances query performance? . We are now in rollout phase where we are sending controlled l… --- ## [Elasticsearch Cluster Inside MapR Cluster](https://discuss.elastic.co/t/elasticsearch-cluster-inside-mapr-cluster/141305)
**Author:** [@Mark\_Dendrix\_Garcia](https://discuss.elastic.co/u/Mark_Dendrix_Garcia)\ **Replies:** 8\ **Last updated:** [July 24, 2018, 10:39am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-inside-mapr-cluster/141305 "2018-07-24T10:39:31Z")
Hi Elasticsearch Team, We are creating a Document Management System using FSCrawler, Elasticsearch & MapR-FS (File system) We choose a Big Data Platform since the usecases can be scaled to analytics. And is it possib… --- ## [Create query help](https://discuss.elastic.co/t/create-query-help/141163)
**Author:** [@lebilien](https://discuss.elastic.co/u/lebilien)\ **Replies:** 6\ **Last updated:** [July 24, 2018, 10:24am UTC](https://discuss.elastic.co/t/create-query-help/141163 "2018-07-24T10:24:00Z")
hi i have the question about the query i have the information with the keyword with a date and a position i want all the keyword one a range date and where the position of the first date is superior of the position in … --- ## [Differentiate type of child for aggregation](https://discuss.elastic.co/t/differentiate-type-of-child-for-aggregation/141345)
**Author:** [@Guillaume\_Abautret](https://discuss.elastic.co/u/Guillaume_Abautret)\ **Replies:** 0\ **Last updated:** [July 24, 2018, 9:55am UTC](https://discuss.elastic.co/t/differentiate-type-of-child-for-aggregation/141345 "2018-07-24T09:55:10Z")
Hi all, I have an issue that i can not resolved by myself. I have a parent (called "user") and children (called visit\_competitor and visit\_direct). Each user have an id and can have lot of visits (competitor and direct)… --- ## [Filter returns 0 hits. Why?](https://discuss.elastic.co/t/filter-returns-0-hits-why/140952)
**Author:** [@Jevgenij](https://discuss.elastic.co/u/Jevgenij)\ **Replies:** 3\ **Last updated:** [July 24, 2018, 9:43am UTC](https://discuss.elastic.co/t/filter-returns-0-hits-why/140952 "2018-07-24T09:43:52Z")
Hello! Just trying to get familiar with Query DSL. While having some index http://localhost:9200/\_search?q=status:Published returns me all records with status field equal to Published. And it's fine. But when I try… --- ## [Index log file in elasticsearch](https://discuss.elastic.co/t/index-log-file-in-elasticsearch/141332)
**Author:** [@vikas1994](https://discuss.elastic.co/u/vikas1994)\ **Replies:** 1\ **Last updated:** [July 24, 2018, 9:22am UTC](https://discuss.elastic.co/t/index-log-file-in-elasticsearch/141332 "2018-07-24T09:22:36Z")
Hi team, I am trying to index java application generated log file into elasticsearch. How can I do it directly without using any programming language. some of the logs I am pasting here . 2018-07-23 11:46:16,885 INFO … --- ## [My kibana has nothing but i think is elasticsearch problem](https://discuss.elastic.co/t/my-kibana-has-nothing-but-i-think-is-elasticsearch-problem/140661)
**Author:** [@chenzilong444](https://discuss.elastic.co/u/chenzilong444)\ **Replies:** 10\ **Last updated:** [July 24, 2018, 9:06am UTC](https://discuss.elastic.co/t/my-kibana-has-nothing-but-i-think-is-elasticsearch-problem/140661 "2018-07-24T09:06:08Z")
\[2018-07-19T14:28:53,165\]\[DEBUG\]\[o.e.a.a.i.m.p.TransportPutMappingAction\] \[cvhieo8\] failed to put mappings on indices \[\[\[logstash-zww-ios-(2018-07-11)/n5LGnXYRQs2OaGVAuo9K8w\]\]\], type \[zww-ios\] org.elasticsearch.cluster.m… --- ## [Script Query DSL Question](https://discuss.elastic.co/t/script-query-dsl-question/140176)
**Author:** [@strayerror](https://discuss.elastic.co/u/strayerror)\ **Replies:** 3\ **Last updated:** [July 24, 2018, 8:39am UTC](https://discuss.elastic.co/t/script-query-dsl-question/140176 "2018-07-24T08:39:05Z")
This isn't any sort of issue so much as it is a request to help me satisfy my own curiosity. :slight\_smile: The DSL for using a script in a query looks like: { "query": { "script": { "script": { "fi… --- ## [Fail to connect Java api and elasticsearch](https://discuss.elastic.co/t/fail-to-connect-java-api-and-elasticsearch/141300)
**Author:** [@vivekranjan](https://discuss.elastic.co/u/vivekranjan)\ **Replies:** 8\ **Last updated:** [July 24, 2018, 8:26am UTC](https://discuss.elastic.co/t/fail-to-connect-java-api-and-elasticsearch/141300 "2018-07-24T08:26:26Z")
Hi I have wrote a java program to perform CRUD operation and now when I tried running my code First I got this on the console window :- "Started Application in 8.539 seconds (JVM running for 9.069)" and later just after … --- ## [Use the date from range query in painless script](https://discuss.elastic.co/t/use-the-date-from-range-query-in-painless-script/141321)
**Author:** [@Bartors](https://discuss.elastic.co/u/Bartors)\ **Replies:** 0\ **Last updated:** [July 24, 2018, 7:54am UTC](https://discuss.elastic.co/t/use-the-date-from-range-query-in-painless-script/141321 "2018-07-24T07:54:30Z")
Hello. I am trying to use Scripted Metric Aggregation to perform some analysis on my data set. The end user will be using a ranged query and I need to be able to import the date (gte and lt values) into a script param.… --- ## [Advantages of using shrink API](https://discuss.elastic.co/t/advantages-of-using-shrink-api/141315)
**Author:** [@Miho](https://discuss.elastic.co/u/Miho)\ **Replies:** 1\ **Last updated:** [July 24, 2018, 7:39am UTC](https://discuss.elastic.co/t/advantages-of-using-shrink-api/141315 "2018-07-24T07:39:53Z")
Hello. I was looking into Shrink API and in what cases it can be used, and I found three main reasons to use shrinking: Resource economy Faster search Big shards are more suited for long-term data storage However, I d… --- ## [Read files from local directory and Build Index](https://discuss.elastic.co/t/read-files-from-local-directory-and-build-index/141288)
**Author:** [@thompsonlau](https://discuss.elastic.co/u/thompsonlau)\ **Replies:** 1\ **Last updated:** [July 24, 2018, 7:14am UTC](https://discuss.elastic.co/t/read-files-from-local-directory-and-build-index/141288 "2018-07-24T07:14:38Z")
Hi, I have configured my Linux (CentOS) server to collect logs from different sources and stores then in defined directories. Elastic search package is installed on the same server. How can I configure elasticsearch re… --- ## [Elasticsearch aggregation query having value as null and non-null](https://discuss.elastic.co/t/elasticsearch-aggregation-query-having-value-as-null-and-non-null/141307)
**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\ **Replies:** 0\ **Last updated:** [July 24, 2018, 6:49am UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-query-having-value-as-null-and-non-null/141307 "2018-07-24T06:49:09Z")
Hi All, I have a requirement like, I need to get the aggregation of the documents having value as null and not-null for a given field. I am able to get individually but together in a single query i don't know. Could som… --- ## [ES-6.3.0 PHP get() Namespace Elasticsearch-\>Namespaces-\>IndicesNamespace](https://discuss.elastic.co/t/es-6-3-0-php-get-namespace-elasticsearch-namespaces-indicesnamespace/141296)
**Author:** [@svarup](https://discuss.elastic.co/u/svarup)\ **Replies:** 0\ **Last updated:** [July 24, 2018, 6:19am UTC](https://discuss.elastic.co/t/es-6-3-0-php-get-namespace-elasticsearch-namespaces-indicesnamespace/141296 "2018-07-24T06:19:49Z")
When i call a function get() from Elasticsearch\\Namespaces\\IndicesNamespace with multiple comma-separated list of features then it gives me error. Uncaught Elasticsearch\\Common\\Exceptions\\BadRequest400Exception: {"error… --- ## [Connect\_exception null error during reindex](https://discuss.elastic.co/t/connect-exception-null-error-during-reindex/141293)
**Author:** [@jamesjin](https://discuss.elastic.co/u/jamesjin)\ **Replies:** 1\ **Last updated:** [July 24, 2018, 6:11am UTC](https://discuss.elastic.co/t/connect-exception-null-error-during-reindex/141293 "2018-07-24T06:11:01Z")
Hello, I'm trying to use the /\_reindex from remote api with the query: POST /\_reindex { "source": { "index": "existing\_index" }, "dest": { "index": "new\_index" } } I got: { "error": { "root\_cause… --- ## [How to get unique docment from elastic db from start time and end time?](https://discuss.elastic.co/t/how-to-get-unique-docment-from-elastic-db-from-start-time-and-end-time/141076)
**Author:** [@RameshNagargoje](https://discuss.elastic.co/u/RameshNagargoje)\ **Replies:** 7\ **Last updated:** [July 24, 2018, 5:48am UTC](https://discuss.elastic.co/t/how-to-get-unique-docment-from-elastic-db-from-start-time-and-end-time/141076 "2018-07-24T05:48:03Z")
Here is my python snippet query to get documents from ES res = es.search(index="test-data", timeout=500000, body={"query": {"bool": {"must": \[ … --- ## [Ldap Authentication not working for multiple groups](https://discuss.elastic.co/t/ldap-authentication-not-working-for-multiple-groups/141105)
**Author:** [@rohit02bits](https://discuss.elastic.co/u/rohit02bits)\ **Replies:** 3\ **Last updated:** [July 24, 2018, 4:19am UTC](https://discuss.elastic.co/t/ldap-authentication-not-working-for-multiple-groups/141105 "2018-07-24T04:19:10Z")
I am using the following property xpack: security: authc: realms: ldap1: type: ldap order: 1 url: "ldaps://abc.example.com:1111" ssl.verification\_mode: none user\_dn\_templates: - "CN={0}, OU=xx, DC=xx, DC=xx, D… --- ## [Per dashboard user access?](https://discuss.elastic.co/t/per-dashboard-user-access/141073)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 5\ **Last updated:** [July 24, 2018, 3:04am UTC](https://discuss.elastic.co/t/per-dashboard-user-access/141073 "2018-07-24T03:04:17Z")
Hi, I want to try and push management to move to Elastic cloud (again) so we can use the X-pack features but is it possible to set up fine grained access to dashboards on a user level? E.g. User A can access Dashboard A… --- ## [Which filter should i use](https://discuss.elastic.co/t/which-filter-should-i-use/141274)
**Author:** [@ghcho](https://discuss.elastic.co/u/ghcho)\ **Replies:** 0\ **Last updated:** [July 24, 2018, 2:15am UTC](https://discuss.elastic.co/t/which-filter-should-i-use/141274 "2018-07-24T02:15:36Z")
data stream is like that 2018/01/01 12:00:00, 1564, 8465, 4231, ... 2018/01/01 12:00:03, 8644, 8945, 2462, ... . . . simply date, val1, val2, ... , val100 and I want to separate it into 'date string' and 'values … --- ## [Multi\_match query](https://discuss.elastic.co/t/multi-match-query/140879)
**Author:** [@vadiraj\_bidarahalli](https://discuss.elastic.co/u/vadiraj_bidarahalli)\ **Replies:** 3\ **Last updated:** [July 24, 2018, 1:47am UTC](https://discuss.elastic.co/t/multi-match-query/140879 "2018-07-24T01:47:17Z")
I have the following query to match firstname or lastname let searchQuery = { "query": { "bool": { "must": { "multi\_match": { "query": key,… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1605) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1607)