# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1667 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1668 --- ## [Log from a firewall 24hours .json](https://discuss.elastic.co/t/log-from-a-firewall-24hours-json/134323)
**Author:** [@Reverse\_Flash\_DC](https://discuss.elastic.co/u/Reverse_Flash_DC)\ **Replies:** 0\ **Last updated:** [June 3, 2018, 4:24pm UTC](https://discuss.elastic.co/t/log-from-a-firewall-24hours-json/134323 "2018-06-03T16:24:21Z")
I nees a log from a firewall 24hours and .json I need it to test something. Where can I find one? --- ## [Should I use field datatypes when performing hard matches?](https://discuss.elastic.co/t/should-i-use-field-datatypes-when-performing-hard-matches/134303)
**Author:** [@yeikel](https://discuss.elastic.co/u/yeikel)\ **Replies:** 4\ **Last updated:** [June 3, 2018, 3:39pm UTC](https://discuss.elastic.co/t/should-i-use-field-datatypes-when-performing-hard-matches/134303 "2018-06-03T15:39:31Z")
I am trying to understand if field datatypes add any value when the goal is to do hard matches. For example, let's say I'd like to index { "name": "Sophie", "age": "20" } What is the difference between using the t… --- ## [Elasticsearch Died on me](https://discuss.elastic.co/t/elasticsearch-died-on-me/134093)
**Author:** [@kurtiskurtis](https://discuss.elastic.co/u/kurtiskurtis)\ **Replies:** 21\ **Last updated:** [June 3, 2018, 8:45am UTC](https://discuss.elastic.co/t/elasticsearch-died-on-me/134093 "2018-06-03T08:45:49Z")
Last night during some document processing, a MASSIVE query was run that would have returned something like 30GB worth of data. As a result, the nodes started to die. Each machine has 30GB of JVM and 60GB total of RAM. … --- ## [Multiword search term with contiguos character matching](https://discuss.elastic.co/t/multiword-search-term-with-contiguos-character-matching/133602)
**Author:** [@echander](https://discuss.elastic.co/u/echander)\ **Replies:** 2\ **Last updated:** [June 3, 2018, 8:21am UTC](https://discuss.elastic.co/t/multiword-search-term-with-contiguos-character-matching/133602 "2018-06-03T08:21:16Z")
I am trying to write a query in ElasticSearch which matches contiguous characters in the words. So, if my index has "John Doe", I should still see "John Doe" returned by Elasticsearch for the below searches. 1.john doe … --- ## [Elasticsearch-6.2.4 +PHP fuzzinnes](https://discuss.elastic.co/t/elasticsearch-6-2-4-php-fuzzinnes/134185)
**Author:** [@Vadim\_Klimenko](https://discuss.elastic.co/u/Vadim_Klimenko)\ **Replies:** 1\ **Last updated:** [June 3, 2018, 7:22am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-4-php-fuzzinnes/134185 "2018-06-03T07:22:54Z")
When I add fuzzines, search break down How to fix it? \[Selection\_005\] --- ## [Geop.location not of geo\_pooint. elastic.co 5.6.4 on RPI3](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416)
**Author:** [@bruno-d](https://discuss.elastic.co/u/bruno-d)\ **Replies:** 14\ **Last updated:** [June 3, 2018, 12:09am UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416 "2018-06-03T00:09:47Z")
Hey, i did some change, renew my conf and my MAP is gone. No field of geo\_point type. I use the geoip pipeline filter and all is running fine except the map. GET /logstash-2018.05/\_mapping return a struct showing that … --- ## [Index dynamically created using Template ignores defined shards settings](https://discuss.elastic.co/t/index-dynamically-created-using-template-ignores-defined-shards-settings/134295)
**Author:** [@patricio.gorin](https://discuss.elastic.co/u/patricio.gorin)\ **Replies:** 5\ **Last updated:** [June 2, 2018, 10:15pm UTC](https://discuss.elastic.co/t/index-dynamically-created-using-template-ignores-defined-shards-settings/134295 "2018-06-02T22:15:22Z")
Hi, I hope that anyone can help me with this issue. I have a few indexes created using a Template (time-framed index pattern), defining 5 primary shards and 3 replicas. But for my surprise a few indexes (not all), have … --- ## [Multiple log4j2.properties?](https://discuss.elastic.co/t/multiple-log4j2-properties/134297)
**Author:** [@memelet](https://discuss.elastic.co/u/memelet)\ **Replies:** 0\ **Last updated:** [June 2, 2018, 8:39pm UTC](https://discuss.elastic.co/t/multiple-log4j2-properties/134297 "2018-06-02T20:39:05Z")
The docs say Multiple configuration files can be loaded (in which case they will get merged) as long as they are named log4j2.properties and have the Elasticsearch config directory as an ancestor; this is useful for pl… --- ## [Bulk queue exceeding limit](https://discuss.elastic.co/t/bulk-queue-exceeding-limit/134242)
**Author:** [@rlampe](https://discuss.elastic.co/u/rlampe)\ **Replies:** 0\ **Last updated:** [June 1, 2018, 2:39pm UTC](https://discuss.elastic.co/t/bulk-queue-exceeding-limit/134242 "2018-06-01T14:39:33Z")
I am running ElasticSearch 5.2.0. I noticed the queue for the bulk thread is exceeding the limit. My understanding from showing the thread stats that the queue\_size column is the max number of entries in the queue and … --- ## [Turning 1 node off kills whole cluster](https://discuss.elastic.co/t/turning-1-node-off-kills-whole-cluster/134253)
**Author:** [@kurtiskurtis](https://discuss.elastic.co/u/kurtiskurtis)\ **Replies:** 1\ **Last updated:** [June 2, 2018, 9:57am UTC](https://discuss.elastic.co/t/turning-1-node-off-kills-whole-cluster/134253 "2018-06-02T09:57:32Z")
While investigating an outage on our production cluster, I noticed that if I turn off one of the data nodes, it kills the entire cluster. The cluster immediately becomes operational when I turn it back on. What is going… --- ## [Node Configuration config in 'elasticsearch.yml'](https://discuss.elastic.co/t/node-configuration-config-in-elasticsearch-yml/132023)
**Author:** [@stargate](https://discuss.elastic.co/u/stargate)\ **Replies:** 4\ **Last updated:** [June 2, 2018, 6:39am UTC](https://discuss.elastic.co/t/node-configuration-config-in-elasticsearch-yml/132023 "2018-06-02T06:39:06Z")
Hi, I am wondering what should the below settings be on a three node cluster in the 'elasticsearch.yml' file. node.name: Node1 node.master: node.data: discovery.zen.minimum\_master\_nodes: node.name: Node2 node.mast… --- ## [Query mssql elasticsearch 2.3.4 with jdbc 2.3.4.1](https://discuss.elastic.co/t/query-mssql-elasticsearch-2-3-4-with-jdbc-2-3-4-1/134281)
**Author:** [@Hamze\_Lue](https://discuss.elastic.co/u/Hamze_Lue)\ **Replies:** 0\ **Last updated:** [June 2, 2018, 6:37am UTC](https://discuss.elastic.co/t/query-mssql-elasticsearch-2-3-4-with-jdbc-2-3-4-1/134281 "2018-06-02T06:37:16Z")
I'm using elasticsearch 2.3.4 on jdk1.8.0\_172 with elasticsearch-jdbc-2.3.4.1. I've tried any sqljdbc4.jar on the Internet but when I start the batch this error is shown in cmd: "Jun 02, 2018 10:34:19 AM com.microsoft.s… --- ## [Manage machine learnings](https://discuss.elastic.co/t/manage-machine-learnings/131842)
**Author:** [@alah64](https://discuss.elastic.co/u/alah64)\ **Replies:** 8\ **Last updated:** [June 2, 2018, 5:53am UTC](https://discuss.elastic.co/t/manage-machine-learnings/131842 "2018-06-02T05:53:44Z")
i need something (folders) for categorize machine learnings. there is no feature for import and export machine learnings. --- ## [Vagrant+docker+kibana](https://discuss.elastic.co/t/vagrant-docker-kibana/134074)
**Author:** [@Alejandro\_Leon\_Mora](https://discuss.elastic.co/u/Alejandro_Leon_Mora)\ **Replies:** 1\ **Last updated:** [June 2, 2018, 1:56am UTC](https://discuss.elastic.co/t/vagrant-docker-kibana/134074 "2018-06-02T01:56:00Z")
May 31, 2018 4:23 PM (Europe: Paris), May 31, 2018 7:23 AM (America: Los Angeles) Hello! I've created a Vagrant multimachine script to run an elasticsearch cluster and kibana. I'm using docker provisioning to create th… --- ## [Native Auth fails on master only node](https://discuss.elastic.co/t/native-auth-fails-on-master-only-node/134269)
**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\ **Replies:** 2\ **Last updated:** [June 2, 2018, 1:25am UTC](https://discuss.elastic.co/t/native-auth-fails-on-master-only-node/134269 "2018-06-02T01:25:27Z")
Hello all, I started to break out my nodes to different types and am kind of confused. I created a master/coordinator only done via: master: True data: False ingest: False ml: False But my log just keeps spewi… --- ## [Xpack security(formerly SHIELD) module source code](https://discuss.elastic.co/t/xpack-security-formerly-shield-module-source-code/134114)
**Author:** [@sachinjose](https://discuss.elastic.co/u/sachinjose)\ **Replies:** 6\ **Last updated:** [June 2, 2018, 12:21am UTC](https://discuss.elastic.co/t/xpack-security-formerly-shield-module-source-code/134114 "2018-06-02T00:21:11Z")
Looks like elastic open sourced xpack last month through this announcement, I search for xpack - security(SHIELD) in the elastic public github repo, however I couldn't find the sourcecode. Can someone help me to find Xp… --- ## [Curator Snapshot Error with Closed indices](https://discuss.elastic.co/t/curator-snapshot-error-with-closed-indices/134259)
**Author:** [@wanshishi](https://discuss.elastic.co/u/wanshishi)\ **Replies:** 6\ **Last updated:** [June 1, 2018, 8:51pm UTC](https://discuss.elastic.co/t/curator-snapshot-error-with-closed-indices/134259 "2018-06-01T20:51:37Z")
Snapshot is having an error with close indices. I have this curator script that runs multiple actions. I am not sure if I am doing it correctly or the order of the action affects how it ran. allocation forcemerge clos… --- ## [ES timestamp index not working while creating index](https://discuss.elastic.co/t/es-timestamp-index-not-working-while-creating-index/134104)
**Author:** [@chakriv](https://discuss.elastic.co/u/chakriv)\ **Replies:** 3\ **Last updated:** [June 1, 2018, 8:35pm UTC](https://discuss.elastic.co/t/es-timestamp-index-not-working-while-creating-index/134104 "2018-06-01T20:35:59Z")
Elastic search index template // { "order": 0, "template": "jobbot", "settings": {}, "mappings": { "doc": { "properties": { "request": { "type": "keyword" }, "timestamp": { "type": "date" , "format": "yyyy-… --- ## [Elastic search cannot connect to kibana](https://discuss.elastic.co/t/elastic-search-cannot-connect-to-kibana/134099)
**Author:** [@sandeepnarla22322](https://discuss.elastic.co/u/sandeepnarla22322)\ **Replies:** 2\ **Last updated:** [June 1, 2018, 8:00pm UTC](https://discuss.elastic.co/t/elastic-search-cannot-connect-to-kibana/134099 "2018-06-01T20:00:17Z")
elastic search is getting connected after installing x-pack added the following line after the xpack.security.enabled: false login currently disabled administrator should consult kibana logs for more details the follo… --- ## [Exclude specific terms from term aggregation's buckets list](https://discuss.elastic.co/t/exclude-specific-terms-from-term-aggregations-buckets-list/131122)
**Author:** [@randomuser](https://discuss.elastic.co/u/randomuser)\ **Replies:** 10\ **Last updated:** [June 1, 2018, 7:10pm UTC](https://discuss.elastic.co/t/exclude-specific-terms-from-term-aggregations-buckets-list/131122 "2018-06-01T19:10:27Z")
Hello, Is there any way to filter the searched term from the results? I'm using a standard tokeniser, the field "word" usually contains values like "green table", "big table", "yellow tables".. my aggregation will put … --- ## [Elasticsearch query and sorting by parameters Ask](https://discuss.elastic.co/t/elasticsearch-query-and-sorting-by-parameters-ask/134252)
**Author:** [@amiralii](https://discuss.elastic.co/u/amiralii)\ **Replies:** 1\ **Last updated:** [June 1, 2018, 6:45pm UTC](https://discuss.elastic.co/t/elasticsearch-query-and-sorting-by-parameters-ask/134252 "2018-06-01T18:45:43Z")
How can I query and sort text by below parameter in elasticsearch 1 - search query be exact in the first part of results 2 - search query be exact in another part of the result 3 - results contain all words of the sea… --- ## [TransportClient with Xpack](https://discuss.elastic.co/t/transportclient-with-xpack/134134)
**Author:** [@ashok.gadiraju](https://discuss.elastic.co/u/ashok.gadiraju)\ **Replies:** 3\ **Last updated:** [June 1, 2018, 5:15pm UTC](https://discuss.elastic.co/t/transportclient-with-xpack/134134 "2018-06-01T17:15:46Z")
I am using the x-pack-transport client for connecting to ES cluster with x-pack installed. Settings esSettings = Settings.builder().put("cluster.name", EsClusterName) .put("xpack.security.user", "username:passwrd") .b… --- ## [How to implement dynamic aggregation?](https://discuss.elastic.co/t/how-to-implement-dynamic-aggregation/133917)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 1\ **Last updated:** [June 1, 2018, 4:31pm UTC](https://discuss.elastic.co/t/how-to-implement-dynamic-aggregation/133917 "2018-06-01T16:31:39Z")
I posted same question on stackoverflow, but would like posting here as well. By dynamic aggregation I means, the aggregation buckets are different per search query. Take ebay as example, if search for "iphone" https://… --- ## [Elacticsearch.yml CLOUD](https://discuss.elastic.co/t/elacticsearch-yml-cloud/134222)
**Author:** [@Reverse\_Flash\_DC](https://discuss.elastic.co/u/Reverse_Flash_DC)\ **Replies:** 5\ **Last updated:** [June 1, 2018, 3:57pm UTC](https://discuss.elastic.co/t/elacticsearch-yml-cloud/134222 "2018-06-01T15:57:00Z")
How can I configure that in the cloud? It´s because I can´t alerts by email xpack.notification.email.account: gmail\_account: profile: gmail smtp: auth: true starttls.enable: true host: smtp.gmail.com port: 587 … --- ## [Watch looking for mounts disappearing per host](https://discuss.elastic.co/t/watch-looking-for-mounts-disappearing-per-host/133919)
**Author:** [@robrang558](https://discuss.elastic.co/u/robrang558)\ **Replies:** 1\ **Last updated:** [June 1, 2018, 3:43pm UTC](https://discuss.elastic.co/t/watch-looking-for-mounts-disappearing-per-host/133919 "2018-06-01T15:43:30Z")
I have a watch that I copied and tweaked from another watch that I know works. The working watch is only looking at a DB and does not need to look at multiple hosts. The watch that I have for use is as follows: { "… --- ## [CORS configuration for authenticated users through access\_by\_lua\_file](https://discuss.elastic.co/t/cors-configuration-for-authenticated-users-through-access-by-lua-file/134183)
**Author:** [@bialy\_rb](https://discuss.elastic.co/u/bialy_rb)\ **Replies:** 1\ **Last updated:** [June 1, 2018, 3:17pm UTC](https://discuss.elastic.co/t/cors-configuration-for-authenticated-users-through-access-by-lua-file/134183 "2018-06-01T15:17:29Z")
Apologies if this post shouldn't be here and would be grateful;l if you point me in the right direction. I hope I can get some help here as I'm struggling to get it solved. We're using openresty as proxy service to ela… --- ## [StackOverflowError in Lucene](https://discuss.elastic.co/t/stackoverflowerror-in-lucene/133659)
**Author:** [@a.korshunov](https://discuss.elastic.co/u/a.korshunov)\ **Replies:** 6\ **Last updated:** [June 1, 2018, 3:10pm UTC](https://discuss.elastic.co/t/stackoverflowerror-in-lucene/133659 "2018-06-01T15:10:10Z")
Hi! I have cluster, that includes 4 nodes: ubuntu-es5 (rack-1), ubuntu-es6 (rack-1), ubuntu-es7 (rack-2), ubuntu-es8 (rack-2). In ubuntu-es8 StackOverflowError occured, that broke the whole cluster: \[2018-05-29T12:… --- ## [Get unique users in db](https://discuss.elastic.co/t/get-unique-users-in-db/134201)
**Author:** [@Wouter\_Durnez](https://discuss.elastic.co/u/Wouter_Durnez)\ **Replies:** 5\ **Last updated:** [June 1, 2018, 2:55pm UTC](https://discuss.elastic.co/t/get-unique-users-in-db/134201 "2018-06-01T14:55:54Z")
Hey everyone, I'm trying to get a list of unique users in my db. I'm using python. I've looked at other, similar questions, but I still can't manage to get what I want. My buckets are topped off at a length of 10. I tri… --- ## [No shards migrating to 2 newly added data nodes](https://discuss.elastic.co/t/no-shards-migrating-to-2-newly-added-data-nodes/134117)
**Author:** [@mwbogucki](https://discuss.elastic.co/u/mwbogucki)\ **Replies:** 3\ **Last updated:** [June 1, 2018, 2:11pm UTC](https://discuss.elastic.co/t/no-shards-migrating-to-2-newly-added-data-nodes/134117 "2018-06-01T14:11:51Z")
Hello, We recently lost two data-nodes, from our cluster, within the same aws-region. The cluster eventually rebalanced and is 100%/GREEN; however after re-adding the 2 missing datanodes, I am not seeing any shards mi… --- ## [What is the best way to copy Elasticsearch index to other server?](https://discuss.elastic.co/t/what-is-the-best-way-to-copy-elasticsearch-index-to-other-server/134088)
**Author:** [@Dolph\_2709](https://discuss.elastic.co/u/Dolph_2709)\ **Replies:** 2\ **Last updated:** [June 1, 2018, 1:56pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-copy-elasticsearch-index-to-other-server/134088 "2018-06-01T13:56:29Z")
I need to copy data from old ElasticSearch (v. 1.1.1) to other server running ver. 6.2. I have no physical access to old server, but it doesn't have any security (X-Pack) installed, so I can easily navigate thru data wi… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1666) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1668)