# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1637

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1638

---

## [Aggr count subjects, unique from addresses and ips](https://discuss.elastic.co/t/aggr-count-subjects-unique-from-addresses-and-ips/137595)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 1\
**Last updated:** [June 28, 2018, 9:52am UTC](https://discuss.elastic.co/t/aggr-count-subjects-unique-from-addresses-and-ips/137595 "2018-06-28T09:52:34Z")

</div>

Hi All, I am working on a aggregation and I am looking from a count of uniqueue senders and source ip's derived from a email subject. I am trying the following but it does not seem to give what I need, I hope some one …

---

## [Weights to Geo Bounding Boxes](https://discuss.elastic.co/t/weights-to-geo-bounding-boxes/137767)

<div class="topic-metadata">

**Author:** [@kgsd](https://discuss.elastic.co/u/kgsd)\
**Replies:** 0\
**Last updated:** [June 28, 2018, 9:12am UTC](https://discuss.elastic.co/t/weights-to-geo-bounding-boxes/137767 "2018-06-28T09:12:27Z")

</div>

In a function score calculation, if I assign a weight to a geo-bounding box as below, weight : 4 filter : geo\_bounding\_box : location : top\_right : tg bottom\_left : t3 Do I get my results with equal weights(4, i…

---

## [Error](https://discuss.elastic.co/t/error/136973)

<div class="topic-metadata">

**Author:** [@varsha\_ann](https://discuss.elastic.co/u/varsha_ann)\
**Replies:** 40\
**Last updated:** [June 28, 2018, 8:44am UTC](https://discuss.elastic.co/t/error/136973 "2018-06-28T08:44:57Z")

</div>

hey am not able to do mapping for the following code PUT washroom { "mapping" : { "jsondata" : { "properties" : { "sno" : {"type": "integer"}, "feedback\_toilet\_id": {"type": "keyword"}, "sensor\_value": {"typ…

---

## [DSL query thats compares the same data from different dates](https://discuss.elastic.co/t/dsl-query-thats-compares-the-same-data-from-different-dates/137763)

<div class="topic-metadata">

**Author:** [@lutundula\_jeanchris](https://discuss.elastic.co/u/lutundula_jeanchris)\
**Replies:** 0\
**Last updated:** [June 28, 2018, 8:20am UTC](https://discuss.elastic.co/t/dsl-query-thats-compares-the-same-data-from-different-dates/137763 "2018-06-28T08:20:23Z")

</div>

Hello everyone , i'am trying to make a query like that in DSL , the goal is to be able compare terms based on a date range . is it possible to do that we DSL Query ? Query : SELECT fqdn FROM visited\_urls WHERE MI…

---

## [Compatibility issue Elastic - X-Pack](https://discuss.elastic.co/t/compatibility-issue-elastic-x-pack/137736)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 6\
**Last updated:** [June 28, 2018, 7:00am UTC](https://discuss.elastic.co/t/compatibility-issue-elastic-x-pack/137736 "2018-06-28T07:00:13Z")

</div>

Hi All, I am in the process of upgrade a elasticsearch cluster from 5.3.0 to 5.6.10. According to the upgrade matrix this should not be a problem. And the installation of elastic goes with a problem. However if I want t…

---

## [Fscrawler pipeline feature](https://discuss.elastic.co/t/fscrawler-pipeline-feature/136041)

<div class="topic-metadata">

**Author:** [@pa26992](https://discuss.elastic.co/u/pa26992)\
**Replies:** 10\
**Last updated:** [June 28, 2018, 6:02am UTC](https://discuss.elastic.co/t/fscrawler-pipeline-feature/136041 "2018-06-28T06:02:17Z")

</div>

Hey I am unable to use the fscrawler pipeline feature. I wanted to use it to replace '\_' in path.real to '/'. I am using 6.X kibana and elasticsearch and 2.4 fscrawler. Config is as follows. { "name" : "test1…

---

## [Elasticsearch rack or zone awareness limitation](https://discuss.elastic.co/t/elasticsearch-rack-or-zone-awareness-limitation/137715)

<div class="topic-metadata">

**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\
**Replies:** 1\
**Last updated:** [June 28, 2018, 5:43am UTC](https://discuss.elastic.co/t/elasticsearch-rack-or-zone-awareness-limitation/137715 "2018-06-28T05:43:25Z")

</div>

Hi I am intending to set up a multi jvm nodes on one machine. I have 4 racks and 12 powerful machines in each of these racks. As such, i am using rack and zone awareness to ensure the replicas are nicely distributed. …

---

## [How to disable the monitoring completely?](https://discuss.elastic.co/t/how-to-disable-the-monitoring-completely/137728)

<div class="topic-metadata">

**Author:** [@Vikrant\_Aggarwal](https://discuss.elastic.co/u/Vikrant_Aggarwal)\
**Replies:** 1\
**Last updated:** [June 28, 2018, 5:32am UTC](https://discuss.elastic.co/t/how-to-disable-the-monitoring-completely/137728 "2018-06-28T05:32:03Z")

</div>

I am using following docker-compose.yml file to disable the monitoring on ELK stack. I have removed the lines for kibana intentionally because kibana was crashing continuously if I add the monitoring parameter in it als…

---

## [Configuring LDAP Auth causes status=1/FAILURE](https://discuss.elastic.co/t/configuring-ldap-auth-causes-status-1-failure/137683)

<div class="topic-metadata">

**Author:** [@Jose\_Tobar](https://discuss.elastic.co/u/Jose_Tobar)\
**Replies:** 8\
**Last updated:** [June 28, 2018, 4:56am UTC](https://discuss.elastic.co/t/configuring-ldap-auth-causes-status-1-failure/137683 "2018-06-28T04:56:13Z")

</div>

I've been going through the documentation for setting up authentication with LDAP but I must be missing something because after adding my changes to the file /etc/elasticsearch/elasticsearch.yml the service refuses to st…

---

## [Elasticsearch how to support transaction involving multiple documents](https://discuss.elastic.co/t/elasticsearch-how-to-support-transaction-involving-multiple-documents/137725)

<div class="topic-metadata">

**Author:** [@fdb58704a2c5cc6a3286](https://discuss.elastic.co/u/fdb58704a2c5cc6a3286)\
**Replies:** 1\
**Last updated:** [June 28, 2018, 4:28am UTC](https://discuss.elastic.co/t/elasticsearch-how-to-support-transaction-involving-multiple-documents/137725 "2018-06-28T04:28:20Z")

</div>

i use elasticsearch,and Denormalizing Data,like PUT /my\_index/user/1 { "name": "John Smith", "email": "john@smith.com", "dob": "1970/10/24" } PUT /my\_index/blogpost/2 { "title": "Relationships", "body": "It's complicat…

---

## [Bool filter vs query using query\_string in Lucene syntax](https://discuss.elastic.co/t/bool-filter-vs-query-using-query-string-in-lucene-syntax/137720)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 0\
**Last updated:** [June 28, 2018, 2:58am UTC](https://discuss.elastic.co/t/bool-filter-vs-query-using-query-string-in-lucene-syntax/137720 "2018-06-28T02:58:23Z")

</div>

Is there a performance difference between using these two queries, one using lucene syntax in query\_string, and another writing out the filters directly? { "query": { "bool": { "must\_not": \[ …

---

## [Reboot elastic after power off, the status is red, What should I do?](https://discuss.elastic.co/t/reboot-elastic-after-power-off-the-status-is-red-what-should-i-do/137221)

<div class="topic-metadata">

**Author:** [@yuluopiaoyang](https://discuss.elastic.co/u/yuluopiaoyang)\
**Replies:** 2\
**Last updated:** [June 28, 2018, 1:35am UTC](https://discuss.elastic.co/t/reboot-elastic-after-power-off-the-status-is-red-what-should-i-do/137221 "2018-06-28T01:35:33Z")

</div>

I have installed elasticsearch on two nodes. Our lab power off last weekend. Then I reboot elasticsearch today, but the cluster status is red, what should I do? Thank you!

---

## [Combine two databases in one visualization](https://discuss.elastic.co/t/combine-two-databases-in-one-visualization/137611)

<div class="topic-metadata">

**Author:** [@PhilippeCourtemanche](https://discuss.elastic.co/u/PhilippeCourtemanche)\
**Replies:** 1\
**Last updated:** [June 27, 2018, 10:43pm UTC](https://discuss.elastic.co/t/combine-two-databases-in-one-visualization/137611 "2018-06-27T22:43:49Z")

</div>

Hi, How do I combine the results of two sql statements from two different databases in one visualization? I'd like to add them up. Thanks

---

## [bulkAsync in JS?](https://discuss.elastic.co/t/bulkasync-in-js/137702)

<div class="topic-metadata">

**Author:** [@dmongit](https://discuss.elastic.co/u/dmongit)\
**Replies:** 0\
**Last updated:** [June 27, 2018, 10:43pm UTC](https://discuss.elastic.co/t/bulkasync-in-js/137702 "2018-06-27T22:43:30Z")

</div>

Is there a client.bulkAsync in the JS API that I'm overlooking?

---

## [AWS Cli Command to create elasticsearch domain gives error](https://discuss.elastic.co/t/aws-cli-command-to-create-elasticsearch-domain-gives-error/137639)

<div class="topic-metadata">

**Author:** [@Shweta\_Priyadarshani](https://discuss.elastic.co/u/Shweta_Priyadarshani)\
**Replies:** 1\
**Last updated:** [June 27, 2018, 10:43pm UTC](https://discuss.elastic.co/t/aws-cli-command-to-create-elasticsearch-domain-gives-error/137639 "2018-06-27T22:43:21Z")

</div>

I am trying to create elasticsearch domain using AWS Cli using command : aws es create-elasticsearch-domain --domain-name weblogs --elasticsearch-version 5.5 --elasticsearch-cluster-config InstanceType=m4.large.elastics…

---

## [Expose X-Pack API to MS System Center Operations Manager](https://discuss.elastic.co/t/expose-x-pack-api-to-ms-system-center-operations-manager/137666)

<div class="topic-metadata">

**Author:** [@sschins](https://discuss.elastic.co/u/sschins)\
**Replies:** 1\
**Last updated:** [June 27, 2018, 10:42pm UTC](https://discuss.elastic.co/t/expose-x-pack-api-to-ms-system-center-operations-manager/137666 "2018-06-27T22:42:45Z")

</div>

Is it possible to expose the X-Pack API to Microsoft SCOM? Can X-Pack data be sent to Microsoft SCOM?

---

## [Is a separate license required for co-ordinator node?](https://discuss.elastic.co/t/is-a-separate-license-required-for-co-ordinator-node/137418)

<div class="topic-metadata">

**Author:** [@rshetty](https://discuss.elastic.co/u/rshetty)\
**Replies:** 3\
**Last updated:** [June 27, 2018, 10:24pm UTC](https://discuss.elastic.co/t/is-a-separate-license-required-for-co-ordinator-node/137418 "2018-06-27T22:24:04Z")

</div>

Hi, I have a doubt regarding the co-ordinating only node. Is there a licensing requirement for setting up a Co-ordinator node? This node will be used for kibana load balancing only.

---

## [Closed indexes](https://discuss.elastic.co/t/closed-indexes/137367)

<div class="topic-metadata">

**Author:** [@roshni](https://discuss.elastic.co/u/roshni)\
**Replies:** 3\
**Last updated:** [June 27, 2018, 10:23pm UTC](https://discuss.elastic.co/t/closed-indexes/137367 "2018-06-27T22:23:06Z")

</div>

Hi I had closed an index using the following - curl -X POST "node1:9200/filebeat-index123/\_close" When reopened the same curl -X POST "node1:9200/filebeat-index123/\_open" The status changed to yellow which was initi…

---

## [Puppet - Found multiple default providers for elasticsearch\_license](https://discuss.elastic.co/t/puppet-found-multiple-default-providers-for-elasticsearch-license/137441)

<div class="topic-metadata">

**Author:** [@bilsch](https://discuss.elastic.co/u/bilsch)\
**Replies:** 7\
**Last updated:** [June 27, 2018, 9:54pm UTC](https://discuss.elastic.co/t/puppet-found-multiple-default-providers-for-elasticsearch-license/137441 "2018-06-27T21:54:34Z")

</div>

We are in the process of upgrading our puppet module from ~3 years ago with some manual shield hacks to the elastic supported module. Using puppet 4.5.3 ( pe ) , module is 6.3 , host os is rhel 7 I'm getting an error -…

---

## [Elasticseach completion strange behavior](https://discuss.elastic.co/t/elasticseach-completion-strange-behavior/137692)

<div class="topic-metadata">

**Author:** [@b-cil](https://discuss.elastic.co/u/b-cil)\
**Replies:** 0\
**Last updated:** [June 27, 2018, 8:38pm UTC](https://discuss.elastic.co/t/elasticseach-completion-strange-behavior/137692 "2018-06-27T20:38:56Z")

</div>

I'm pretty new in ElasticSearch. I have tried most tutorial and looked at forum but I can't find a good solution. For the workaround, I'm feeding using R and elastic package and Elastic API is bridged using Laravel/PHP. …

---

## [ES Service not loading ES\_PATH\_CONF or CONF\_DIR](https://discuss.elastic.co/t/es-service-not-loading-es-path-conf-or-conf-dir/136942)

<div class="topic-metadata">

**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\
**Replies:** 2\
**Last updated:** [June 27, 2018, 8:24pm UTC](https://discuss.elastic.co/t/es-service-not-loading-es-path-conf-or-conf-dir/136942 "2018-06-27T20:24:56Z")

</div>

ES Version Installed 6.1.2 Machine - RHEL 7.5 FILE: es-data0.service \[Unit\] Description=Elasticsearch Documentation=http://www.elastic.co Wants=network-online.target After=n…

---

## [How to increase relevancy for duplicate documents?](https://discuss.elastic.co/t/how-to-increase-relevancy-for-duplicate-documents/137689)

<div class="topic-metadata">

**Author:** [@jmiller](https://discuss.elastic.co/u/jmiller)\
**Replies:** 0\
**Last updated:** [June 27, 2018, 8:18pm UTC](https://discuss.elastic.co/t/how-to-increase-relevancy-for-duplicate-documents/137689 "2018-06-27T20:18:29Z")

</div>

TF-IDF is causing unwanted behavior for my query. I have a set of documents in the following format: { "name": "brown fox", "description": "a sentence-long description" } Many documents have the same name with …

---

## [Watcher Not Trigger for CPU utilization](https://discuss.elastic.co/t/watcher-not-trigger-for-cpu-utilization/136960)

<div class="topic-metadata">

**Author:** [@Pushpak\_Bhawsar](https://discuss.elastic.co/u/Pushpak_Bhawsar)\
**Replies:** 2\
**Last updated:** [June 22, 2018, 12:55pm UTC](https://discuss.elastic.co/t/watcher-not-trigger-for-cpu-utilization/136960 "2018-06-22T12:55:20Z")

</div>

Hello, I am trying to set a metricbeat watcher to get CPU utilization for a host, but it is not triggering. Below is the JSON and the simulate result, Kindly suggest what am I missing or doing wrong: JSON: { "trigger…

---

## [Too many clauses when indexing an attachment field](https://discuss.elastic.co/t/too-many-clauses-when-indexing-an-attachment-field/137684)

<div class="topic-metadata">

**Author:** [@silversun](https://discuss.elastic.co/u/silversun)\
**Replies:** 0\
**Last updated:** [June 27, 2018, 7:37pm UTC](https://discuss.elastic.co/t/too-many-clauses-when-indexing-an-attachment-field/137684 "2018-06-27T19:37:39Z")

</div>

I'm running Elasticsearch 2.4 for about 250 documents. Most of those documents have attachments, and hence I am using a field called 'field\_attachment\_base64' with type 'attachment' (mapper plugin). This field contains …

---

## [List of Requests Sent To Elasticsearch Cluster](https://discuss.elastic.co/t/list-of-requests-sent-to-elasticsearch-cluster/137667)

<div class="topic-metadata">

**Author:** [@tphillips-att](https://discuss.elastic.co/u/tphillips-att)\
**Replies:** 1\
**Last updated:** [June 27, 2018, 7:12pm UTC](https://discuss.elastic.co/t/list-of-requests-sent-to-elasticsearch-cluster/137667 "2018-06-27T19:12:13Z")

</div>

Is there a way to get a list of search requests and indexing requests currently being sent to the Elasticsearch Cluster? It would be nice to see the following info: Request Type (Search, indexing, etc..) Timestamp of …

---

## [Cannot start Elasticsearch 6.2.1 on Centos7](https://discuss.elastic.co/t/cannot-start-elasticsearch-6-2-1-on-centos7/137669)

<div class="topic-metadata">

**Author:** [@longuyen](https://discuss.elastic.co/u/longuyen)\
**Replies:** 5\
**Last updated:** [June 27, 2018, 6:56pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-6-2-1-on-centos7/137669 "2018-06-27T18:56:52Z")

</div>

I've installed Elasticsearch 6.2.1 via RPM but when I try to run it gives me on several files. This is my Dockerfile: FROM centos:centos7 ADD elasticsearch.repo /etc/yum.repos.d/elasticsearch.repo RUN rpm --import h…

---

## [X-pack document level filtering not operating as expected](https://discuss.elastic.co/t/x-pack-document-level-filtering-not-operating-as-expected/134497)

<div class="topic-metadata">

**Author:** [@jennworks40](https://discuss.elastic.co/u/jennworks40)\
**Replies:** 15\
**Last updated:** [June 27, 2018, 6:45pm UTC](https://discuss.elastic.co/t/x-pack-document-level-filtering-not-operating-as-expected/134497 "2018-06-27T18:45:22Z")

</div>

Base version information: this work is being done on an ELK stack running version 5.6.3 of elasticsearch, kibana, logstash, and x-pack. I am trying to define multiple levels of roles that can be combined to allow users …

---

## [Is repository-s3 plugin fixed in 6.3?](https://discuss.elastic.co/t/is-repository-s3-plugin-fixed-in-6-3/135997)

<div class="topic-metadata">

**Author:** [@windowsrefund\_refund](https://discuss.elastic.co/u/windowsrefund_refund)\
**Replies:** 4\
**Last updated:** [June 27, 2018, 6:19pm UTC](https://discuss.elastic.co/t/is-repository-s3-plugin-fixed-in-6-3/135997 "2018-06-27T18:19:48Z")

</div>

Running 6.2.4 here and repository-s3 plugin is not allowing me to create a repository despite the fact I have used the new elasticsearch-keystore binary to create both s3.client.default.access\_key and s3.client.default.s…

---

## [How hot/warm architecture enhances query performance?](https://discuss.elastic.co/t/how-hot-warm-architecture-enhances-query-performance/134781)

<div class="topic-metadata">

**Author:** [@palashkulsh](https://discuss.elastic.co/u/palashkulsh)\
**Replies:** 10\
**Last updated:** [June 27, 2018, 4:53pm UTC](https://discuss.elastic.co/t/how-hot-warm-architecture-enhances-query-performance/134781 "2018-06-27T16:53:19Z")

</div>

In our current running architecture we are not having hot /warm nodes. So all open indices are almost equally distributed across all data nodes. All our queries specify multiple indices to query, we dont use wildcards. I…

---

## [Watcher Configuration to print results in Email](https://discuss.elastic.co/t/watcher-configuration-to-print-results-in-email/136410)

<div class="topic-metadata">

**Author:** [@sanky186](https://discuss.elastic.co/u/sanky186)\
**Replies:** 12\
**Last updated:** [June 27, 2018, 3:33pm UTC](https://discuss.elastic.co/t/watcher-configuration-to-print-results-in-email/136410 "2018-06-27T15:33:51Z")

</div>

Guys, I have looked all over the internet, and i cant seem to get a simple answer at all. So, we have an watcher configuration which triggers an email when a particular condition is satisfied. But, it prints only the …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1636)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1638)
