# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1652 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1653 --- ## [How to get a distinct count over a moving period?](https://discuss.elastic.co/t/how-to-get-a-distinct-count-over-a-moving-period/136045)
**Author:** [@jack.verstappen](https://discuss.elastic.co/u/jack.verstappen)\ **Replies:** 0\ **Last updated:** [June 15, 2018, 7:40am UTC](https://discuss.elastic.co/t/how-to-get-a-distinct-count-over-a-moving-period/136045 "2018-06-15T07:40:48Z")
There are several examples on how to retrieve a moving average, but what about a distinct count over a moving period? Best known example why this is useful is ... daily active users, which should give a distinct count o… --- ## [Unable to store the data in index](https://discuss.elastic.co/t/unable-to-store-the-data-in-index/135332)
**Author:** [@kish](https://discuss.elastic.co/u/kish)\ **Replies:** 31\ **Last updated:** [June 15, 2018, 7:33am UTC](https://discuss.elastic.co/t/unable-to-store-the-data-in-index/135332 "2018-06-15T07:33:22Z")
Hello - I have the below format to store the data and in my logs i able to see that data is stored but when i execute indices or see data stored i am getting nothing. API used to store the data: put1, err := elasticSe… --- ## [Could not get cluster status after master node goes down](https://discuss.elastic.co/t/could-not-get-cluster-status-after-master-node-goes-down/132455)
**Author:** [@Vahid](https://discuss.elastic.co/u/Vahid)\ **Replies:** 50\ **Last updated:** [June 15, 2018, 7:33am UTC](https://discuss.elastic.co/t/could-not-get-cluster-status-after-master-node-goes-down/132455 "2018-06-15T07:33:17Z")
Hi, recently we have upgraded ES to 5.6.7 I have a two nodes cluster. After stopping master node, the command "curl -X GET localhost:9211/\_cluster/health doesn't respond. I've run jstack and seen that many threads are… --- ## [X-pack installation error](https://discuss.elastic.co/t/x-pack-installation-error/133097)
**Author:** [@manojbhupatiraju](https://discuss.elastic.co/u/manojbhupatiraju)\ **Replies:** 11\ **Last updated:** [June 15, 2018, 7:16am UTC](https://discuss.elastic.co/t/x-pack-installation-error/133097 "2018-06-15T07:16:31Z")
Hi Experts, I have installed X-pack for security in my laptop. I am getting below error logs from kibana. Please find the attachment of screen shot for kibana. It would be great if it get resolved. log \[05:53:30.427\]… --- ## [Queries for stem words or synonyms dont yield results](https://discuss.elastic.co/t/queries-for-stem-words-or-synonyms-dont-yield-results/135879)
**Author:** [@Apostol\_Marinov](https://discuss.elastic.co/u/Apostol_Marinov)\ **Replies:** 1\ **Last updated:** [June 15, 2018, 7:11am UTC](https://discuss.elastic.co/t/queries-for-stem-words-or-synonyms-dont-yield-results/135879 "2018-06-15T07:11:43Z")
Mapping and settings: { "settings": { "number\_of\_shards": 1, "number\_of\_replicas": 0, "analysis": { "filter": { "stop": { "type": "stop", "stopwords": "\_bulgarian\_" … --- ## [KIbana Basic Auth Login](https://discuss.elastic.co/t/kibana-basic-auth-login/135894)
**Author:** [@Rob\_Davidson](https://discuss.elastic.co/u/Rob_Davidson)\ **Replies:** 2\ **Last updated:** [June 15, 2018, 5:32am UTC](https://discuss.elastic.co/t/kibana-basic-auth-login/135894 "2018-06-15T05:32:30Z")
I'm looking to use the free version of Kibana, elastic, logstash stack. Will be using it to search for logs and eventually produce visualizations. I would like the Kibana screen to have some basic authentication. The … --- ## [Getting Started with ElasticSearch to be hosted On windows server](https://discuss.elastic.co/t/getting-started-with-elasticsearch-to-be-hosted-on-windows-server/136026)
**Author:** [@Anwar\_Baig\_Mogal](https://discuss.elastic.co/u/Anwar_Baig_Mogal)\ **Replies:** 1\ **Last updated:** [June 15, 2018, 4:22am UTC](https://discuss.elastic.co/t/getting-started-with-elasticsearch-to-be-hosted-on-windows-server/136026 "2018-06-15T04:22:46Z")
Hi, We are planning to use elasticsearch to save PDF documents from an angular 5 application to be retrieved later. While I do see a lot of code samples which describes how to save json documents from various plat forms… --- ## [In-correct document index order](https://discuss.elastic.co/t/in-correct-document-index-order/136014)
**Author:** [@vikasgb](https://discuss.elastic.co/u/vikasgb)\ **Replies:** 1\ **Last updated:** [June 15, 2018, 4:19am UTC](https://discuss.elastic.co/t/in-correct-document-index-order/136014 "2018-06-15T04:19:51Z")
Elasticsearch 5.4.1 Filebeat with Ingest nodes are used for grok. Problem noticed: In Kibana console, if we search for last 15 minutes, the query returns data which is anywhere from 5min to 5 days old. However, the @t… --- ## [Snapshots of new indices](https://discuss.elastic.co/t/snapshots-of-new-indices/135969)
**Author:** [@Devin\_Quince](https://discuss.elastic.co/u/Devin_Quince)\ **Replies:** 1\ **Last updated:** [June 14, 2018, 11:21pm UTC](https://discuss.elastic.co/t/snapshots-of-new-indices/135969 "2018-06-14T23:21:52Z")
I did some searching and nothing seems to match our process. I am new to ES 5.4, so if I missed it, please forgive me and let me know where I need to look. We have 3 servers clustered and our application creates 2 indice… --- ## [Dangling indices :- coordinating node](https://discuss.elastic.co/t/dangling-indices-coordinating-node/135231)
**Author:** [@praveen.vemuri](https://discuss.elastic.co/u/praveen.vemuri)\ **Replies:** 4\ **Last updated:** [June 14, 2018, 11:12pm UTC](https://discuss.elastic.co/t/dangling-indices-coordinating-node/135231 "2018-06-14T23:12:45Z")
Hi, My cluster turned red due to dangling indexes. i saw below warning message on the coordinating nodes. none of the nodes were restarted during this time. all the nodes in cluster were up and running from 20 days and … --- ## [Proper way to index document with many child documents?](https://discuss.elastic.co/t/proper-way-to-index-document-with-many-child-documents/135993)
**Author:** [@plexcellmedia](https://discuss.elastic.co/u/plexcellmedia)\ **Replies:** 1\ **Last updated:** [June 14, 2018, 10:30pm UTC](https://discuss.elastic.co/t/proper-way-to-index-document-with-many-child-documents/135993 "2018-06-14T22:30:59Z")
Hey! I just moved into ES, because I'm builder larger scale application, that simply would get slow because of MySQL in future. Problem is that, I have no idea how to properly index document, that must be easy to exten… --- ## [Elasticsearch-keystore tool](https://discuss.elastic.co/t/elasticsearch-keystore-tool/136004)
**Author:** [@zpraxis](https://discuss.elastic.co/u/zpraxis)\ **Replies:** 0\ **Last updated:** [June 14, 2018, 9:58pm UTC](https://discuss.elastic.co/t/elasticsearch-keystore-tool/136004 "2018-06-14T21:58:24Z")
Hi all, In order to keep things the same across all components, It would be useful to let the elasticsearch-keystore tool to store custom properties. Currently, it seems to be the case that only X-Pack-related configura… --- ## [Issues with stability in mixed (Physical/Virtual) Environment](https://discuss.elastic.co/t/issues-with-stability-in-mixed-physical-virtual-environment/136000)
**Author:** [@jcspino](https://discuss.elastic.co/u/jcspino)\ **Replies:** 2\ **Last updated:** [June 14, 2018, 8:29pm UTC](https://discuss.elastic.co/t/issues-with-stability-in-mixed-physical-virtual-environment/136000 "2018-06-14T20:29:48Z")
Hello, I have an ELK stack that has been up and running for a few years now. Until recently the cluster was made up of all VMWare VMs, 3 master/data nodes and 2 data only nodes for older log data. We use the hot/cold ar… --- ## [Unable to deploy application using ElasticSearch RestHighLevelClient to TomEE 7.0.4 when upgrading from 6.1.4 to 6.2.4](https://discuss.elastic.co/t/unable-to-deploy-application-using-elasticsearch-resthighlevelclient-to-tomee-7-0-4-when-upgrading-from-6-1-4-to-6-2-4/134132)
**Author:** [@djr4488](https://discuss.elastic.co/u/djr4488)\ **Replies:** 2\ **Last updated:** [June 14, 2018, 6:37pm UTC](https://discuss.elastic.co/t/unable-to-deploy-application-using-elasticsearch-resthighlevelclient-to-tomee-7-0-4-when-upgrading-from-6-1-4-to-6-2-4/134132 "2018-06-14T18:37:48Z")
I get the following stack trace during deployment: 01-Jun-2018 03:12:44.497 INFO \[localhost-startStop-1\] org.apache.openejb.util.JarExtractor.extract Extracted path: /usr/local/tomee/webapps/ROOT 01-Jun-2018 03:12:46.42… --- ## [6.2.4 to 6.3 upgrade broke kibana monitoring](https://discuss.elastic.co/t/6-2-4-to-6-3-upgrade-broke-kibana-monitoring/135964)
**Author:** [@avboivin](https://discuss.elastic.co/u/avboivin)\ **Replies:** 3\ **Last updated:** [June 14, 2018, 5:31pm UTC](https://discuss.elastic.co/t/6-2-4-to-6-3-upgrade-broke-kibana-monitoring/135964 "2018-06-14T17:31:14Z")
After upgrading my 3-nodes cluster from 6.2.4 to 6.3 using the rolling update documentation page, the kibana monitoring graphs no longer get filled with data. I had X-pack free version prior to the upgrade. \[image\] Al… --- ## [MapperParsingException - No content provided](https://discuss.elastic.co/t/mapperparsingexception-no-content-provided/135967)
**Author:** [@silversun](https://discuss.elastic.co/u/silversun)\ **Replies:** 0\ **Last updated:** [June 14, 2018, 5:01pm UTC](https://discuss.elastic.co/t/mapperparsingexception-no-content-provided/135967 "2018-06-14T17:01:46Z")
I am using ES 2.4 with Mapper Attachment Plugin. I am indexing publications, some of them have attachments and some of them don't. I am assuming that is why mapper attachment is complaining "No content is provided" as i… --- ## [Initializing a RestHighLevelClient for ElasticSearch](https://discuss.elastic.co/t/initializing-a-resthighlevelclient-for-elasticsearch/135957)
**Author:** [@anna10](https://discuss.elastic.co/u/anna10)\ **Replies:** 1\ **Last updated:** [June 14, 2018, 4:42pm UTC](https://discuss.elastic.co/t/initializing-a-resthighlevelclient-for-elasticsearch/135957 "2018-06-14T16:42:14Z")
In the documentation here, they initialize an instance of the client with the following code: RestHighLevelClient client = new RestHighLevelClient( RestClient.builder( new HttpHost("localhost", 9… --- ## [Bootstrap error: Duplicate key org.elasticsearch.plugins.PluginsService$Bundle@24a783dd when Upgrade ES 6.2.1 to 6.30](https://discuss.elastic.co/t/bootstrap-error-duplicate-key-org-elasticsearch-plugins-pluginsservice-bundle-24a783dd-when-upgrade-es-6-2-1-to-6-30/135788)
**Author:** [@kaem2111](https://discuss.elastic.co/u/kaem2111)\ **Replies:** 2\ **Last updated:** [June 14, 2018, 4:16pm UTC](https://discuss.elastic.co/t/bootstrap-error-duplicate-key-org-elasticsearch-plugins-pluginsservice-bundle-24a783dd-when-upgrade-es-6-2-1-to-6-30/135788 "2018-06-14T16:16:55Z")
I upgraded Elasticsearch from Version 6.2.1 to 6.3.0 using yum upgrade /tmp/elasticsearch-6.3.0.rpm after start I got error: \[2018-06-13T21:34:40,344\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[by0rqo\] unca… --- ## [java.net.ConnectException: Connection Refused](https://discuss.elastic.co/t/java-net-connectexception-connection-refused/135803)
**Author:** [@anna10](https://discuss.elastic.co/u/anna10)\ **Replies:** 8\ **Last updated:** [June 14, 2018, 4:01pm UTC](https://discuss.elastic.co/t/java-net-connectexception-connection-refused/135803 "2018-06-14T16:01:08Z")
I am using the Java HighLevelRestClient to connect to my elastic instance hosted on AWS. I can make requests against the URL on postman and from my browser just fine, but when I use the client library I get a java.net.Co… --- ## [Post\_filter and collapse. Is that possible?](https://discuss.elastic.co/t/post-filter-and-collapse-is-that-possible/135959)
**Author:** [@Stephan\_Daratha](https://discuss.elastic.co/u/Stephan_Daratha)\ **Replies:** 0\ **Last updated:** [June 14, 2018, 3:52pm UTC](https://discuss.elastic.co/t/post-filter-and-collapse-is-that-possible/135959 "2018-06-14T15:52:19Z")
Hi, I was glad that I found by help of this page that elasticsearch has the collapse function. But now I have the problem why I search for collapse again. It is the post\_filter. I want to aggragate some conditions of… --- ## [Error in documentation: The Search API](https://discuss.elastic.co/t/error-in-documentation-the-search-api/135738)
**Author:** [@andrea.agnesse](https://discuss.elastic.co/u/andrea.agnesse)\ **Replies:** 4\ **Last updated:** [June 14, 2018, 3:35pm UTC](https://discuss.elastic.co/t/error-in-documentation-the-search-api/135738 "2018-06-14T15:35:00Z")
In new to Elastic Search, and I am following the online documentation. When introducing the Search API (and in the following pages), all the query with a body use the HTTP GET method; shouldn't it use the POST method? T… --- ## [Elasticsearch will not start, no logs, (code=exited, status=1/FAILURE)](https://discuss.elastic.co/t/elasticsearch-will-not-start-no-logs-code-exited-status-1-failure/135797)
**Author:** [@Guanilo](https://discuss.elastic.co/u/Guanilo)\ **Replies:** 3\ **Last updated:** [June 14, 2018, 3:16pm UTC](https://discuss.elastic.co/t/elasticsearch-will-not-start-no-logs-code-exited-status-1-failure/135797 "2018-06-14T15:16:57Z")
Fresh ES 6.2.4 install on RHE 7.4, install is performed by downloading rpms to local machine, ftping rpms (and GPG key) to server), then yum localinstall. All values are default, excepting one: /etc/sysconfig/elastics… --- ## [How to POST multiple documents at a time using Elastic RestClient](https://discuss.elastic.co/t/how-to-post-multiple-documents-at-a-time-using-elastic-restclient/135793)
**Author:** [@Suryatejreddy](https://discuss.elastic.co/u/Suryatejreddy)\ **Replies:** 3\ **Last updated:** [June 14, 2018, 3:10pm UTC](https://discuss.elastic.co/t/how-to-post-multiple-documents-at-a-time-using-elastic-restclient/135793 "2018-06-14T15:10:34Z")
I am trying to POST data into elastic search using this below code in java. Response indexResponse = restClient.performRequest("POST", "/myindex/mydoc/", Collections.\emptyMap(), entity); My entity is … --- ## [Multi-phrase multi-field match](https://discuss.elastic.co/t/multi-phrase-multi-field-match/135952)
**Author:** [@Fish](https://discuss.elastic.co/u/Fish)\ **Replies:** 0\ **Last updated:** [June 14, 2018, 3:06pm UTC](https://discuss.elastic.co/t/multi-phrase-multi-field-match/135952 "2018-06-14T15:06:45Z")
I want to search any one of multiple phrases across multiple fields. If it is one field, I can do as below: GET my\_index/\_search { "query": { "bool":{ "should":\[ {"match\_phrase" : {"text" … --- ## [Unable to store monitoring credentials in ES Keystore](https://discuss.elastic.co/t/unable-to-store-monitoring-credentials-in-es-keystore/134365)
**Author:** [@rshetty](https://discuss.elastic.co/u/rshetty)\ **Replies:** 0\ **Last updated:** [June 4, 2018, 7:08am UTC](https://discuss.elastic.co/t/unable-to-store-monitoring-credentials-in-es-keystore/134365 "2018-06-04T07:08:18Z")
Hi, I would like to know if there is any extra documentation regarding the Keystore feature of ES. I have been trying to secure the credentials used for xpack.monitoring.exporters settings but it's failing every time an… --- ## [Using ? to display a ratio of two queries or other advanced calculations](https://discuss.elastic.co/t/using-to-display-a-ratio-of-two-queries-or-other-advanced-calculations/135163)
**Author:** [@topel](https://discuss.elastic.co/u/topel)\ **Replies:** 4\ **Last updated:** [June 14, 2018, 2:18pm UTC](https://discuss.elastic.co/t/using-to-display-a-ratio-of-two-queries-or-other-advanced-calculations/135163 "2018-06-14T14:18:12Z")
I have been struggling to find a visualization solution that fits my company's needs. I do not only need to visualize time series data but also need to be able to do calculations "vertically" across all the data at one p… --- ## [Keystore for Monitoring Cluster settings](https://discuss.elastic.co/t/keystore-for-monitoring-cluster-settings/135942)
**Author:** [@rshetty](https://discuss.elastic.co/u/rshetty)\ **Replies:** 0\ **Last updated:** [June 14, 2018, 2:12pm UTC](https://discuss.elastic.co/t/keystore-for-monitoring-cluster-settings/135942 "2018-06-14T14:12:42Z")
I have tried to store the xpack.monitoring.exporters.auth.password settings in the keystore but it is not getting picked up elasticsearch during start up. Is this because the keystore does not support this setting or is … --- ## [Persisting or Caching query results for future retrieval speed up](https://discuss.elastic.co/t/persisting-or-caching-query-results-for-future-retrieval-speed-up/135552)
**Author:** [@dfhg](https://discuss.elastic.co/u/dfhg)\ **Replies:** 1\ **Last updated:** [June 14, 2018, 1:58pm UTC](https://discuss.elastic.co/t/persisting-or-caching-query-results-for-future-retrieval-speed-up/135552 "2018-06-14T13:58:26Z")
Hello, Is it possible to launch a query "X", and have the results persisted/cached/saved so that I may write a new query "Y" with definition (query X AND filter Z) so that it uses the results from query X to speed up th… --- ## [How to search rank of a document in hits of elasticsearch query?](https://discuss.elastic.co/t/how-to-search-rank-of-a-document-in-hits-of-elasticsearch-query/135939)
**Author:** [@bhagat95](https://discuss.elastic.co/u/bhagat95)\ **Replies:** 0\ **Last updated:** [June 14, 2018, 1:51pm UTC](https://discuss.elastic.co/t/how-to-search-rank-of-a-document-in-hits-of-elasticsearch-query/135939 "2018-06-14T13:51:01Z")
I'm searching a list of documents sorted by "sortScore". query: GET /myindex/\_search { "from": 0, "size": 1000, "sort": \[ { "sortScore":{"order":"desc"} } \] } sample output: { "took": 2… --- ## [Active primary shards too many? Health status Yellow](https://discuss.elastic.co/t/active-primary-shards-too-many-health-status-yellow/135674)
**Author:** [@thitami](https://discuss.elastic.co/u/thitami)\ **Replies:** 28\ **Last updated:** [June 14, 2018, 1:40pm UTC](https://discuss.elastic.co/t/active-primary-shards-too-many-health-status-yellow/135674 "2018-06-14T13:40:18Z")
Hello all, I am quite new to ElasticSearch and experiencing some issues. I am using the AWS ES service and this is its health: StatusYellow Number of nodes 3 Number of data nodes 3 Active primary shards 26 Active s… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1651) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1653)