# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1635

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1636

---

## [Different IDF for different documents](https://discuss.elastic.co/t/different-idf-for-different-documents/137726)

<div class="topic-metadata">

**Author:** [@onami](https://discuss.elastic.co/u/onami)\
**Replies:** 1\
**Last updated:** [June 29, 2018, 1:23pm UTC](https://discuss.elastic.co/t/different-idf-for-different-documents/137726 "2018-06-29T13:23:52Z")

</div>

Hello, I'm trying to figure out why my documents are ranked the way they are, so here are two samples which are puzzling me. The top result has docFreq = 45, docCount = 476 and weight(Synonym(descRu:лн descRu:ол descRu…

---

## [Alert for disk space on server with multiple disks](https://discuss.elastic.co/t/alert-for-disk-space-on-server-with-multiple-disks/137856)

<div class="topic-metadata">

**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\
**Replies:** 3\
**Last updated:** [June 29, 2018, 1:18pm UTC](https://discuss.elastic.co/t/alert-for-disk-space-on-server-with-multiple-disks/137856 "2018-06-29T13:18:40Z")

</div>

Hello Community, I working to get an alert for diskspace over 75% on server which have multiple drives (A, B, C, D). I having difficulty to in compare condition with multiple drives in a bucket. I hope below snippet of …

---

## [Elasticsearch crashes on filebeat pipeline](https://discuss.elastic.co/t/elasticsearch-crashes-on-filebeat-pipeline/137112)

<div class="topic-metadata">

**Author:** [@ben5556](https://discuss.elastic.co/u/ben5556)\
**Replies:** 1\
**Last updated:** [June 29, 2018, 1:16pm UTC](https://discuss.elastic.co/t/elasticsearch-crashes-on-filebeat-pipeline/137112 "2018-06-29T13:16:14Z")

</div>

Would like some input Elasticsearch on why our cluster is crashing. Below is an excerpt of the full stack trace of the error as the message body has a limit and I can't paste the full stack trace (How to upload the full …

---

## [Configuring LDAP with Elasticsearch 6.2.3](https://discuss.elastic.co/t/configuring-ldap-with-elasticsearch-6-2-3/137896)

<div class="topic-metadata">

**Author:** [@Devesh\_Pandey](https://discuss.elastic.co/u/Devesh_Pandey)\
**Replies:** 4\
**Last updated:** [June 29, 2018, 1:10pm UTC](https://discuss.elastic.co/t/configuring-ldap-with-elasticsearch-6-2-3/137896 "2018-06-29T13:10:11Z")

</div>

Hi there, I am trying to build infrastructure for elastic. I was able to setup elastic and kibana with x-pack. I am facing issue while configuring ldap, and here is what I have done till now. Step 1- used open\_ssl to …

---

## [How to restrict user to access only Kibana dashboard](https://discuss.elastic.co/t/how-to-restrict-user-to-access-only-kibana-dashboard/137945)

<div class="topic-metadata">

**Author:** [@Sudharshan\_Katha](https://discuss.elastic.co/u/Sudharshan_Katha)\
**Replies:** 5\
**Last updated:** [June 29, 2018, 1:00pm UTC](https://discuss.elastic.co/t/how-to-restrict-user-to-access-only-kibana-dashboard/137945 "2018-06-29T13:00:37Z")

</div>

Created a user with "kibana\_dashboard\_only\_user" role even though the user has admin level access and used x-path basic license. Thanks

---

## [Aggregation count for email Body](https://discuss.elastic.co/t/aggregation-count-for-email-body/137675)

<div class="topic-metadata">

**Author:** [@rajumkc](https://discuss.elastic.co/u/rajumkc)\
**Replies:** 1\
**Last updated:** [June 29, 2018, 12:49pm UTC](https://discuss.elastic.co/t/aggregation-count-for-email-body/137675 "2018-06-29T12:49:26Z")

</div>

Hello: I've an Aggregation Response in the below format, and would like to report on {{ctx.payload.aggregations.errors.buckets.COM.errorDetails.errorDetails.doc\_count}}. Aggregation Response: aggregations": { "erro…

---

## [Hearbeat watcher template](https://discuss.elastic.co/t/hearbeat-watcher-template/137561)

<div class="topic-metadata">

**Author:** [@Dinesh\_Senthil\_Kumar](https://discuss.elastic.co/u/Dinesh_Senthil_Kumar)\
**Replies:** 3\
**Last updated:** [June 29, 2018, 12:46pm UTC](https://discuss.elastic.co/t/hearbeat-watcher-template/137561 "2018-06-29T12:46:38Z")

</div>

HI do we have default watcher for heartbeat monitoring. i need an alert by mail when a server goes down.

---

## [Long type field is getting converted to integer](https://discuss.elastic.co/t/long-type-field-is-getting-converted-to-integer/136886)

<div class="topic-metadata">

**Author:** [@siddharth\_jain](https://discuss.elastic.co/u/siddharth_jain)\
**Replies:** 1\
**Last updated:** [June 29, 2018, 12:43pm UTC](https://discuss.elastic.co/t/long-type-field-is-getting-converted-to-integer/136886 "2018-06-29T12:43:36Z")

</div>

I have a field id which is stored as long. The mapping is - "id": { "type": "long", "store": true }, If the value of id is small and I retrieve the id it is returning an integer type data, which is causing a Clas…

---

## [Transform a groovy code to painless](https://discuss.elastic.co/t/transform-a-groovy-code-to-painless/137962)

<div class="topic-metadata">

**Author:** [@lutundula\_jeanchris](https://discuss.elastic.co/u/lutundula_jeanchris)\
**Replies:** 0\
**Last updated:** [June 29, 2018, 12:34pm UTC](https://discuss.elastic.co/t/transform-a-groovy-code-to-painless/137962 "2018-06-29T12:34:34Z")

</div>

I wanna translate this groovy code to a painless one : use (groovy.time.TimeCategory) { println new Date() println 20.days.from.now } I tried this : def date = new Date() date = date-20.days.from.now return date …

---

## [Connecting from Host](https://discuss.elastic.co/t/connecting-from-host/137598)

<div class="topic-metadata">

**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\
**Replies:** 6\
**Last updated:** [June 29, 2018, 12:14pm UTC](https://discuss.elastic.co/t/connecting-from-host/137598 "2018-06-29T12:14:37Z")

</div>

Hello All, Yesterday took all day for me to set up ELK, it seems to be working because within my VM I can open the browser and go to Kibana web interface. Besides that, I don't know how else to check to see if it is act…

---

## ["unable to start elasticsearch"](https://discuss.elastic.co/t/unable-to-start-elasticsearch/136857)

<div class="topic-metadata">

**Author:** [@satish\_k\_y18](https://discuss.elastic.co/u/satish_k_y18)\
**Replies:** 1\
**Last updated:** [June 29, 2018, 11:13am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch/136857 "2018-06-29T11:13:28Z")

</div>

error /usr/share/elasticsearch/bin/elasticsearch-env: line 70: /etc/default/elasticsearch: Permission denied Note : Line 70 is "source /etc/default/elasticsearch " in elasticsearch-env ls -dl /etc/default/ drw-r--r-- …

---

## [A problem when I search data from "now-24h" to "now"](https://discuss.elastic.co/t/a-problem-when-i-search-data-from-now-24h-to-now/136843)

<div class="topic-metadata">

**Author:** [@Kevin.Wu](https://discuss.elastic.co/u/Kevin.Wu)\
**Replies:** 1\
**Last updated:** [June 29, 2018, 11:05am UTC](https://discuss.elastic.co/t/a-problem-when-i-search-data-from-now-24h-to-now/136843 "2018-06-29T11:05:12Z")

</div>

Hey, I'm trying to search some data from ES, here's my curl command from kibana: GET filebeat\*/\_search?size=0 { "query":{ "bool": { "filter": { "range": { "@timestamp": { "gte": "now-24h", "lte": "now" } } } …

---

## [Elasticsearch service stop rapidly](https://discuss.elastic.co/t/elasticsearch-service-stop-rapidly/137940)

<div class="topic-metadata">

**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\
**Replies:** 1\
**Last updated:** [June 29, 2018, 11:04am UTC](https://discuss.elastic.co/t/elasticsearch-service-stop-rapidly/137940 "2018-06-29T11:04:16Z")

</div>

Sometimes elasticsearch just stopp but sadly the daemon does not - so it does not automatically restart. Blockquote Jun 28 03:16:54 915452-IngestionDemo.newfrontierdata.com elasticsearch\[129705\]: OpenJDK 64-Bit Serve…

---

## [Performance searching single index vs multiple indices](https://discuss.elastic.co/t/performance-searching-single-index-vs-multiple-indices/137926)

<div class="topic-metadata">

**Author:** [@tjliu](https://discuss.elastic.co/u/tjliu)\
**Replies:** 8\
**Last updated:** [June 29, 2018, 10:53am UTC](https://discuss.elastic.co/t/performance-searching-single-index-vs-multiple-indices/137926 "2018-06-29T10:53:32Z")

</div>

Hi All, How to understand this tip? From The Definitive Guide Searching 1 index of 50 shards is exactly equivalent to searching 50 indices with 1 shard each: both search requests hit 50 shards. I have 2048G of Data …

---

## [Uncaught TypeError: elasticsearch.Client is not a constructor (elasticsearch.js)](https://discuss.elastic.co/t/uncaught-typeerror-elasticsearch-client-is-not-a-constructor-elasticsearch-js/137932)

<div class="topic-metadata">

**Author:** [@rs123](https://discuss.elastic.co/u/rs123)\
**Replies:** 0\
**Last updated:** [June 29, 2018, 10:14am UTC](https://discuss.elastic.co/t/uncaught-typeerror-elasticsearch-client-is-not-a-constructor-elasticsearch-js/137932 "2018-06-29T10:14:20Z")

</div>

Thirld line of the function show Uncaught TypeError: elasticsearch.Client is not a constructor I do not know why it is like this function newAutocomplete(){ var elasticsearch = 'elasticsearch'; require(\[elastics…

---

## [Deployment of Elasticsearch on Azure from the scratch](https://discuss.elastic.co/t/deployment-of-elasticsearch-on-azure-from-the-scratch/137363)

<div class="topic-metadata">

**Author:** [@shah.karan657](https://discuss.elastic.co/u/shah.karan657)\
**Replies:** 3\
**Last updated:** [June 29, 2018, 10:17am UTC](https://discuss.elastic.co/t/deployment-of-elasticsearch-on-azure-from-the-scratch/137363 "2018-06-29T10:17:13Z")

</div>

I am beginner in elastic search.I have implemented elastic search for single node with NEST Client in my C# Web Application successfully.Now I want to scale my data horizontally and want to deploy this application on Azu…

---

## [ML Job failed: autodetect process stopped unexpectedly: Fatal error](https://discuss.elastic.co/t/ml-job-failed-autodetect-process-stopped-unexpectedly-fatal-error/137867)

<div class="topic-metadata">

**Author:** [@robrotheram](https://discuss.elastic.co/u/robrotheram)\
**Replies:** 1\
**Last updated:** [June 29, 2018, 9:12am UTC](https://discuss.elastic.co/t/ml-job-failed-autodetect-process-stopped-unexpectedly-fatal-error/137867 "2018-06-29T09:12:42Z")

</div>

Hi I am trying to use ML but it is failing with auto-detect process stopped unexpectedly The job is the nginx job from the filebeat-\* index that is preinstalled. The elastic log: \[2018-06-28T21:59:12,698\]\[INFO \]\[o.e.x…

---

## [Heavy bulk request on single index is slow](https://discuss.elastic.co/t/heavy-bulk-request-on-single-index-is-slow/137919)

<div class="topic-metadata">

**Author:** [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Replies:** 1\
**Last updated:** [June 29, 2018, 9:07am UTC](https://discuss.elastic.co/t/heavy-bulk-request-on-single-index-is-slow/137919 "2018-06-29T09:07:24Z")

</div>

Hi guys, I am experiencing some weird thing. I am having 20 indexes. So when i do bulk insert/update on all index, The thread pool shows me curl -XGET http://localhost:9200/\_cat/thread\_pool localhost bulk …

---

## [Find the hosts whose hits are 5% more/less than the mean of hits of all hosts](https://discuss.elastic.co/t/find-the-hosts-whose-hits-are-5-more-less-than-the-mean-of-hits-of-all-hosts/137531)

<div class="topic-metadata">

**Author:** [@naveensrikanth](https://discuss.elastic.co/u/naveensrikanth)\
**Replies:** 3\
**Last updated:** [June 29, 2018, 8:47am UTC](https://discuss.elastic.co/t/find-the-hosts-whose-hits-are-5-more-less-than-the-mean-of-hits-of-all-hosts/137531 "2018-06-29T08:47:23Z")

</div>

Hi, I am new to ElasticSearch watcher scripts. Can you help me with the below problem: We get hits/transactions to 50 hosts/nodes. We would like to send an email notification with the host names whose hits are 5% more …

---

## [How to get Hostname in email subject for Diskspace alert](https://discuss.elastic.co/t/how-to-get-hostname-in-email-subject-for-diskspace-alert/137510)

<div class="topic-metadata">

**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\
**Replies:** 3\
**Last updated:** [June 29, 2018, 8:43am UTC](https://discuss.elastic.co/t/how-to-get-hostname-in-email-subject-for-diskspace-alert/137510 "2018-06-29T08:43:18Z")

</div>

My issue also similar to this topic but I am not using any advance query, I can see my threshold query is executing but I want to see the host name in email subject Here is my Threshold alert \[33%20AM\] I want to see e…

---

## [Hostname error in Watcher | Heartbeat](https://discuss.elastic.co/t/hostname-error-in-watcher-heartbeat/137712)

<div class="topic-metadata">

**Author:** [@max17](https://discuss.elastic.co/u/max17)\
**Replies:** 1\
**Last updated:** [June 29, 2018, 8:40am UTC](https://discuss.elastic.co/t/hostname-error-in-watcher-heartbeat/137712 "2018-06-29T08:40:35Z")

</div>

Hello, I am trying to set a Heartbeat monitor watcher so whenever the monitor status for a host goes down, I can get an email alert with the hostname, which I am not able to set correctly. Kindly look to at the Watcher …

---

## [2-node cluster configuration](https://discuss.elastic.co/t/2-node-cluster-configuration/137802)

<div class="topic-metadata">

**Author:** [@LesioS](https://discuss.elastic.co/u/LesioS)\
**Replies:** 4\
**Last updated:** [June 29, 2018, 8:12am UTC](https://discuss.elastic.co/t/2-node-cluster-configuration/137802 "2018-06-29T08:12:29Z")

</div>

I've 2 VM running under Hyper-V with Centos7, ES and Kibana - everything installed max. 2 days ago, so all is pretty new. On both VM I've istalled ES to have multinode cluster. But still each node does not see another a…

---

## [What is 'elasticseach' in require('elasticsearch')](https://discuss.elastic.co/t/what-is-elasticseach-in-require-elasticsearch/137912)

<div class="topic-metadata">

**Author:** [@rs123](https://discuss.elastic.co/u/rs123)\
**Replies:** 0\
**Last updated:** [June 29, 2018, 7:13am UTC](https://discuss.elastic.co/t/what-is-elasticseach-in-require-elasticsearch/137912 "2018-06-29T07:13:24Z")

</div>

In below code what does 'elasticsearch' stands for, is it the path of elasticsearch.js file? var elasticsearch = require('elasticsearch'); var client = new elasticsearch.Client({ host: 'localhost:9200', log: 'trace' …

---

## [FSCrawler not indexing certain fields](https://discuss.elastic.co/t/fscrawler-not-indexing-certain-fields/137875)

<div class="topic-metadata">

**Author:** [@kish1](https://discuss.elastic.co/u/kish1)\
**Replies:** 1\
**Last updated:** [June 29, 2018, 6:59am UTC](https://discuss.elastic.co/t/fscrawler-not-indexing-certain-fields/137875 "2018-06-29T06:59:40Z")

</div>

Hello, I'm using FSCrawler 2.4 and it does well to scan the root directory and index the files. However, I notice that FSCrawler does not index all the fields. Eg. "file.filename" is searchable but "file.url" is not sea…

---

## [Java api for nested field sorting and normal field sorting](https://discuss.elastic.co/t/java-api-for-nested-field-sorting-and-normal-field-sorting/137909)

<div class="topic-metadata">

**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\
**Replies:** 0\
**Last updated:** [June 29, 2018, 6:28am UTC](https://discuss.elastic.co/t/java-api-for-nested-field-sorting-and-normal-field-sorting/137909 "2018-06-29T06:28:56Z")

</div>

Hi All, I am new to ES with Java API. Please help me on the below requirement. In my index I have a combination of fields like, nested fields and normal fields. I need to do sorting on these fields dynamically based on…

---

## [Cluster instability if master leader is stopped](https://discuss.elastic.co/t/cluster-instability-if-master-leader-is-stopped/136180)

<div class="topic-metadata">

**Author:** [@rocketraman](https://discuss.elastic.co/u/rocketraman)\
**Replies:** 6\
**Last updated:** [June 29, 2018, 6:25am UTC](https://discuss.elastic.co/t/cluster-instability-if-master-leader-is-stopped/136180 "2018-06-29T06:25:58Z")

</div>

I have an ES 6.2.4 cluster. The cluster runs inside Kubernetes and contains 3 master and 3 data nodes with zen discovery. The cluster is idle. I am testing some failure scenarios and trying to get a handle on some odd be…

---

## [How to scrub data in Elasticsearch](https://discuss.elastic.co/t/how-to-scrub-data-in-elasticsearch/137888)

<div class="topic-metadata">

**Author:** [@\_kyllr](https://discuss.elastic.co/u/_kyllr)\
**Replies:** 2\
**Last updated:** [June 29, 2018, 5:48am UTC](https://discuss.elastic.co/t/how-to-scrub-data-in-elasticsearch/137888 "2018-06-29T05:48:02Z")

</div>

Is there any possible way to hide/encrypt users information? Data should not be deleted. It should be scrubbed and we should not be able to identify the actual user of these logs. Thanks!

---

## [How much will be the cost for X-Pack?](https://discuss.elastic.co/t/how-much-will-be-the-cost-for-x-pack/137897)

<div class="topic-metadata">

**Author:** [@Aslam](https://discuss.elastic.co/u/Aslam)\
**Replies:** 3\
**Last updated:** [June 29, 2018, 5:15am UTC](https://discuss.elastic.co/t/how-much-will-be-the-cost-for-x-pack/137897 "2018-06-29T05:15:26Z")

</div>

Hello, I would like to know the pricing for the X-Pack. Can anyone help me on this? Is that onetime payment? I tried contacting elastic team via enquiry form. I didn't got any response. Please help me on this. Thanks …

---

## [Auto Complete in full text](https://discuss.elastic.co/t/auto-complete-in-full-text/137900)

<div class="topic-metadata">

**Author:** [@Dharmateja\_Tummala](https://discuss.elastic.co/u/Dharmateja_Tummala)\
**Replies:** 0\
**Last updated:** [June 29, 2018, 5:13am UTC](https://discuss.elastic.co/t/auto-complete-in-full-text/137900 "2018-06-29T05:13:41Z")

</div>

Hi, Am new to elastic search.Am trying to use auto complete feature in elastic search. Data am searching on:- The data am using is a comma separated sentence. Example:- elastic,kibana. Attempt1:- While creating ma…

---

## [Failed installing 'elasticsearch-service-x64' service](https://discuss.elastic.co/t/failed-installing-elasticsearch-service-x64-service/137889)

<div class="topic-metadata">

**Author:** [@jintian](https://discuss.elastic.co/u/jintian)\
**Replies:** 1\
**Last updated:** [June 29, 2018, 3:15am UTC](https://discuss.elastic.co/t/failed-installing-elasticsearch-service-x64-service/137889 "2018-06-29T03:15:16Z")

</div>

D:\\elasticsearch-6.3.0\\bin\>elasticsearch-service install Installing service : "elasticsearch-service-x64" Using JAVA\_HOME (64-bit): "D:\\java\_jdk" -XX:+UseConcMarkSweepGC;-XX:CMSInitiatingOccupancyFraction=75;-X…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1634)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1636)
