# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1687 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1688 --- ## [Discovery.zen.fd.ping\_retries: 5](https://discuss.elastic.co/t/discovery-zen-fd-ping-retries-5/131859)
**Author:** [@jalaja](https://discuss.elastic.co/u/jalaja)\ **Replies:** 3\ **Last updated:** [May 16, 2018, 5:06am UTC](https://discuss.elastic.co/t/discovery-zen-fd-ping-retries-5/131859 "2018-05-16T05:06:03Z")
Is it possible to configure discovery.zen.fd.ping\_retries to be forever. here is the usecase I am looking at. ES is brought up when there is no connectivity between any of the nodes in the cluster and eventually the ne… --- ## [Store different price per day?](https://discuss.elastic.co/t/store-different-price-per-day/131999)
**Author:** [@remco\_zwaan](https://discuss.elastic.co/u/remco_zwaan)\ **Replies:** 1\ **Last updated:** [May 16, 2018, 5:04am UTC](https://discuss.elastic.co/t/store-different-price-per-day/131999 "2018-05-16T05:04:35Z")
Hi, Just started earning ES. We have 1000+ accommodations. Each accommodation has different price ranges per day. By example in accommodation X, customer pay in june 100 euro per day and in may its 85 per day ect. Wh… --- ## [OutOfMemoryError on adequately sized cluster](https://discuss.elastic.co/t/outofmemoryerror-on-adequately-sized-cluster/131192)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 17\ **Last updated:** [May 16, 2018, 4:47am UTC](https://discuss.elastic.co/t/outofmemoryerror-on-adequately-sized-cluster/131192 "2018-05-16T04:47:04Z")
Hi, running 6.2.4 Cluster topology: 3 masters 2 ingest nodes 1 Coordinator 3 Data nodes The masters and the ingest nodes borked with OutOfMemoryError, the data nodes seemed to have survived. Master (each): 16GB of w… --- ## [More than 1 document\_Type in an index](https://discuss.elastic.co/t/more-than-1-document-type-in-an-index/132004)
**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\ **Replies:** 1\ **Last updated:** [May 16, 2018, 4:25am UTC](https://discuss.elastic.co/t/more-than-1-document-type-in-an-index/132004 "2018-05-16T04:25:43Z")
Can we have more than 1 document\_Type in an index ? "Rejecting mapping update to \[green\] as the final mapping would have more than 1 type: \[traj2013, trajj2014\]" --- ## [Bulk upload misses few data entries in elastic](https://discuss.elastic.co/t/bulk-upload-misses-few-data-entries-in-elastic/131486)
**Author:** [@Dhivya\_Buvanesh](https://discuss.elastic.co/u/Dhivya_Buvanesh)\ **Replies:** 1\ **Last updated:** [May 16, 2018, 3:59am UTC](https://discuss.elastic.co/t/bulk-upload-misses-few-data-entries-in-elastic/131486 "2018-05-16T03:59:00Z")
We are trying to upload packet captures files (tshark -r capture.pcap -T ek \> packets.json) , randomly data are getting missed to upload while using BULK upload to elastic curl -s -H "Content-Type: application/x-ndjson"… --- ## [What is the best way to monitor the health of the elk ecosystem?](https://discuss.elastic.co/t/what-is-the-best-way-to-monitor-the-health-of-the-elk-ecosystem/131756)
**Author:** [@bossi6of9](https://discuss.elastic.co/u/bossi6of9)\ **Replies:** 1\ **Last updated:** [May 16, 2018, 3:55am UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-monitor-the-health-of-the-elk-ecosystem/131756 "2018-05-16T03:55:12Z")
Hi, We are attempting to spin-up ELK for Netflow data, but running into performance issues. What is the best way to monitor the health of the entire ecosystem, assuming that we don't want to purchase X-Pack? --- ## [Application of elasticsearch Ansible role hangs indefinitely adding APT repos (Debian 9)](https://discuss.elastic.co/t/application-of-elasticsearch-ansible-role-hangs-indefinitely-adding-apt-repos-debian-9/131762)
**Author:** [@dss](https://discuss.elastic.co/u/dss)\ **Replies:** 3\ **Last updated:** [May 16, 2018, 12:40am UTC](https://discuss.elastic.co/t/application-of-elasticsearch-ansible-role-hangs-indefinitely-adding-apt-repos-debian-9/131762 "2018-05-16T00:40:25Z")
Hi! I'm trying to install a single-node ES instance on Debian GNU/Linux 9.4 (stretch) using the Ansible role and I see the play hanging in the following task (appears to execute the first item (the old APT repo) and neve… --- ## [Analyze on text field](https://discuss.elastic.co/t/analyze-on-text-field/131452)
**Author:** [@Prashant\_Mishra](https://discuss.elastic.co/u/Prashant_Mishra)\ **Replies:** 6\ **Last updated:** [May 16, 2018, 12:25am UTC](https://discuss.elastic.co/t/analyze-on-text-field/131452 "2018-05-16T00:25:08Z")
https://www.elastic.co/guide/en/elasticsearch/client/javascript-api/current/api-reference.html#api-msearch I creating index using Bulk api from the above API references. where my type has a field with text which contain… --- ## [Range query not working with format](https://discuss.elastic.co/t/range-query-not-working-with-format/131659)
**Author:** [@Steven\_Ensslen](https://discuss.elastic.co/u/Steven_Ensslen)\ **Replies:** 2\ **Last updated:** [May 16, 2018, 12:05am UTC](https://discuss.elastic.co/t/range-query-not-working-with-format/131659 "2018-05-16T00:05:10Z")
Hi all, I think that I've come across a defect. I have an index with a date field, start\_datetime This more restrictive query returns data GET /\_search { "query": { "range" : { "start\_datetime" : { "gte": "10-05… --- ## [Aggregation after dedup across indices](https://discuss.elastic.co/t/aggregation-after-dedup-across-indices/132008)
**Author:** [@wmcdonald](https://discuss.elastic.co/u/wmcdonald)\ **Replies:** 0\ **Last updated:** [May 15, 2018, 11:23pm UTC](https://discuss.elastic.co/t/aggregation-after-dedup-across-indices/132008 "2018-05-15T23:23:40Z")
I have the following setup filebeats -\> logstash -\> elasticsearch with logstash output { elasticsearch { index =\> "idx-%{+YYYY-MM-dd}" document\_id =\> "%{myDocID}" } where myDocID is created in the filter section by … --- ## [java.lang.IllegalArgumentException: no accounts of type \[email\] configured. Please set up an account using the \[xpack.notification.email\] settings](https://discuss.elastic.co/t/java-lang-illegalargumentexception-no-accounts-of-type-email-configured-please-set-up-an-account-using-the-xpack-notification-email-settings/123798)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 7\ **Last updated:** [April 12, 2018, 3:28pm UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-no-accounts-of-type-email-configured-please-set-up-an-account-using-the-xpack-notification-email-settings/123798 "2018-04-12T15:28:09Z")
I followed Email Action | X-Pack for the Elastic Stack \[6.2\] | Elastic, yet keep getting following error: esd4 | \[2018-03-13T19:24:15,542\]\[ERROR\]\[o.e.x.w.a.e.ExecutableEmailAction\] \[esd4\] failed to execute … --- ## [Elasticsearch appears to be unreachable or down!](https://discuss.elastic.co/t/elasticsearch-appears-to-be-unreachable-or-down/131986)
**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\ **Replies:** 1\ **Last updated:** [May 15, 2018, 8:44pm UTC](https://discuss.elastic.co/t/elasticsearch-appears-to-be-unreachable-or-down/131986 "2018-05-15T20:44:55Z")
Hello , I need x-pack so i have installed it in : 1)Elasticsearch 2)Kibana then and finally i have installed it for logstash as descriped here : bin/logstash-plugin install x-pack and then i added in logstash… --- ## [Using minio for elastic snapshots](https://discuss.elastic.co/t/using-minio-for-elastic-snapshots/131991)
**Author:** [@ijazadm](https://discuss.elastic.co/u/ijazadm)\ **Replies:** 0\ **Last updated:** [May 15, 2018, 7:23pm UTC](https://discuss.elastic.co/t/using-minio-for-elastic-snapshots/131991 "2018-05-15T19:23:46Z")
hi I followed this article to setup minio for elasticsearch snapshots for my local cluster and local minio storage: I have setup the keys in elasticsearch key store accoding to the documentation. My query: PUT \_sna… --- ## [Calculate difference between two consecutive rows](https://discuss.elastic.co/t/calculate-difference-between-two-consecutive-rows/131855)
**Author:** [@nabha](https://discuss.elastic.co/u/nabha)\ **Replies:** 3\ **Last updated:** [May 15, 2018, 7:21pm UTC](https://discuss.elastic.co/t/calculate-difference-between-two-consecutive-rows/131855 "2018-05-15T19:21:29Z")
We need to calculate diff between two readings in two consecutive records. Rec 1 = time1, meter reading 1 Rec 2 = time 2, meter reading 2 Consumption between time 2 – time 1 = meter reading 2 – meter reading 1 --- ## [Creating a snapshot of indices created with alias](https://discuss.elastic.co/t/creating-a-snapshot-of-indices-created-with-alias/131979)
**Author:** [@bm1391](https://discuss.elastic.co/u/bm1391)\ **Replies:** 2\ **Last updated:** [May 15, 2018, 6:29pm UTC](https://discuss.elastic.co/t/creating-a-snapshot-of-indices-created-with-alias/131979 "2018-05-15T18:29:09Z")
I am using curator to create snapshots of my indices. I am also rolling over my indices with the rollover API. Here is what my index looks like when creating and rolling over. audit-2018.05.14-1 audit-2018.05.14-000002 … --- ## [Facing issue to start elasticsearch "permission denied"](https://discuss.elastic.co/t/facing-issue-to-start-elasticsearch-permission-denied/131970)
**Author:** [@Harshal\_Yeole1](https://discuss.elastic.co/u/Harshal_Yeole1)\ **Replies:** 7\ **Last updated:** [May 15, 2018, 6:25pm UTC](https://discuss.elastic.co/t/facing-issue-to-start-elasticsearch-permission-denied/131970 "2018-05-15T18:25:54Z")
Hi, I have added x-pack to the elastic search but after doing so, I am not able to start using service elasticsearch start sudo service elasticsearch start bin/elasticsearch but I'm getting permission denied errors… --- ## [Unable to install Custom Realm for X-Pack Extension](https://discuss.elastic.co/t/unable-to-install-custom-realm-for-x-pack-extension/131801)
**Author:** [@slockhart](https://discuss.elastic.co/u/slockhart)\ **Replies:** 1\ **Last updated:** [May 15, 2018, 6:10pm UTC](https://discuss.elastic.co/t/unable-to-install-custom-realm-for-x-pack-extension/131801 "2018-05-15T18:10:44Z")
Hi! (I am aware that there is another topic similar if not the exact same issue, but there were no replies to it... ) I am currently trying to install a custom realm using the 'bin/x-pack/extension install' command, an… --- ## [About an exception when running ES-2.4.6-alpine in a docker-compose file](https://discuss.elastic.co/t/about-an-exception-when-running-es-2-4-6-alpine-in-a-docker-compose-file/131923)
**Author:** [@alonsoir](https://discuss.elastic.co/u/alonsoir)\ **Replies:** 1\ **Last updated:** [May 15, 2018, 5:25pm UTC](https://discuss.elastic.co/t/about-an-exception-when-running-es-2-4-6-alpine-in-a-docker-compose-file/131923 "2018-05-15T17:25:42Z")
Hi, i have a problem running ES-2.4.6-alpine within a docker container, i just had written the post in Stackoverflow, this is the link. I have read in this forum all the posts related with my issue, i think none of them… --- ## [Issue with Regex in Kibana searchbar/query\_string](https://discuss.elastic.co/t/issue-with-regex-in-kibana-searchbar-query-string/131980)
**Author:** [@Tao\_Liu1](https://discuss.elastic.co/u/Tao_Liu1)\ **Replies:** 0\ **Last updated:** [May 15, 2018, 5:11pm UTC](https://discuss.elastic.co/t/issue-with-regex-in-kibana-searchbar-query-string/131980 "2018-05-15T17:11:36Z")
Hi, I am using ES 2.3.3 and Kibana 4.5.1 and trying to match a pattern in the log entry with regex, but it doesn't work as expected. The field I am using is message.raw and below is the mapping and an example: Mapping: … --- ## [Warm nodes consistently using ~10% of CPU even though the node is basically idle](https://discuss.elastic.co/t/warm-nodes-consistently-using-10-of-cpu-even-though-the-node-is-basically-idle/130724)
**Author:** [@cactus](https://discuss.elastic.co/u/cactus)\ **Replies:** 4\ **Last updated:** [May 15, 2018, 3:36pm UTC](https://discuss.elastic.co/t/warm-nodes-consistently-using-10-of-cpu-even-though-the-node-is-basically-idle/130724 "2018-05-15T15:36:27Z")
On a 6 warm nodes which contain 53 indices each of them with 10 shards and 10 segments per index on a quad-core CPU and 26GB of ram(13GB heap size) CPU usage even at deep night isn't low. \[34\] We are using hdd for warm… --- ## [Searching all my hits in elasticsearch](https://discuss.elastic.co/t/searching-all-my-hits-in-elasticsearch/131972)
**Author:** [@anasov](https://discuss.elastic.co/u/anasov)\ **Replies:** 0\ **Last updated:** [May 15, 2018, 3:26pm UTC](https://discuss.elastic.co/t/searching-all-my-hits-in-elasticsearch/131972 "2018-05-15T15:26:52Z")
I migrated my table with 6 records, but when i apply this command line curl -XGET 'http://localhost:9200/nameofmyindex/\_search , it returned just one record --- ## [Terms Aggregation request returning empty Bucket list in Java TransportClient](https://discuss.elastic.co/t/terms-aggregation-request-returning-empty-bucket-list-in-java-transportclient/131963)
**Author:** [@najib](https://discuss.elastic.co/u/najib)\ **Replies:** 0\ **Last updated:** [May 15, 2018, 2:48pm UTC](https://discuss.elastic.co/t/terms-aggregation-request-returning-empty-bucket-list-in-java-transportclient/131963 "2018-05-15T14:48:36Z")
Hey there, I am using ES 6.2.4 with the Java TransportClient to perform a search request (through an inline Script). The search request has a Terms aggregation by field. When I run the search request in Kibana, I properl… --- ## [Solved: Where is elasticsearch.yml file on Ubuntu machine?](https://discuss.elastic.co/t/solved-where-is-elasticsearch-yml-file-on-ubuntu-machine/131956)
**Author:** [@Harshal\_Yeole1](https://discuss.elastic.co/u/Harshal_Yeole1)\ **Replies:** 0\ **Last updated:** [May 15, 2018, 2:27pm UTC](https://discuss.elastic.co/t/solved-where-is-elasticsearch-yml-file-on-ubuntu-machine/131956 "2018-05-15T14:27:03Z")
As specified in this Link We need to copy the node certificate to the appropriate locations. Copy the applicable .p12 file into a directory within the Elasticsearch configuration directory on each node. For example, /h… --- ## [Non multi-part Emails with Watch Email Action](https://discuss.elastic.co/t/non-multi-part-emails-with-watch-email-action/131348)
**Author:** [@aaronloesattv](https://discuss.elastic.co/u/aaronloesattv)\ **Replies:** 3\ **Last updated:** [May 15, 2018, 2:32pm UTC](https://discuss.elastic.co/t/non-multi-part-emails-with-watch-email-action/131348 "2018-05-15T14:32:04Z")
We have a requirement to send automated emails to another monitoring system. We wanted to use watcher for this but unfortunately that second system cannot handle multi-part emails, only text/plain emails. I know its a st… --- ## [How to stream results from a composite aggregation](https://discuss.elastic.co/t/how-to-stream-results-from-a-composite-aggregation/131955)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 0\ **Last updated:** [May 15, 2018, 2:25pm UTC](https://discuss.elastic.co/t/how-to-stream-results-from-a-composite-aggregation/131955 "2018-05-15T14:25:04Z")
Hi Team, I am doing a composite aggregation and from the docs: This aggregation provides a way to stream all buckets of a specific aggregation similarly to what scroll does for documents. But I am unsure how I can d… --- ## [Query ES -combine exists with term query](https://discuss.elastic.co/t/query-es-combine-exists-with-term-query/131945)
**Author:** [@yaara](https://discuss.elastic.co/u/yaara)\ **Replies:** 1\ **Last updated:** [May 15, 2018, 2:06pm UTC](https://discuss.elastic.co/t/query-es-combine-exists-with-term-query/131945 "2018-05-15T14:06:48Z")
Hi all, I trying to get the latest row that has the field "inventory", but I also want to filter it with specific ip: something like that: GET discovery/hosts/\_search { "\_source": \[ "inventory" \], "query": … --- ## [Bulk index error during ingestion \[Challenge\]](https://discuss.elastic.co/t/bulk-index-error-during-ingestion-challenge/131933)
**Author:** [@uderline](https://discuss.elastic.co/u/uderline)\ **Replies:** 2\ **Last updated:** [May 15, 2018, 1:54pm UTC](https://discuss.elastic.co/t/bulk-index-error-during-ingestion-challenge/131933 "2018-05-15T13:54:17Z")
Hello, My team and I are running a custom plugin that we made this year. This elasticsearch instance is running over two nodes. Our big problem is that the machine that we are using is slow (2 \* Intel core i3 - 1.3GHz) … --- ## [Solved: fragCharSize(0) is too small. It must be 18 or higher](https://discuss.elastic.co/t/solved-fragcharsize-0-is-too-small-it-must-be-18-or-higher/131891)
**Author:** [@astrodi](https://discuss.elastic.co/u/astrodi)\ **Replies:** 1\ **Last updated:** [May 15, 2018, 1:53pm UTC](https://discuss.elastic.co/t/solved-fragcharsize-0-is-too-small-it-must-be-18-or-higher/131891 "2018-05-15T13:53:20Z")
Hi there, I needed to resolve a bug with "plain" highlighter (very same like here: Highlighter trim a field, why?) My use case: "plain" highlighter returned "United States (USA" instead of "United States (USA)", no\_ma… --- ## [Template - settings max\_result\_window (doesn't affect new index)](https://discuss.elastic.co/t/template-settings-max-result-window-doesnt-affect-new-index/130754)
**Author:** [@yaara](https://discuss.elastic.co/u/yaara)\ **Replies:** 4\ **Last updated:** [May 15, 2018, 1:38pm UTC](https://discuss.elastic.co/t/template-settings-max-result-window-doesnt-affect-new-index/130754 "2018-05-15T13:38:16Z")
Hi, I've created a template PUT /\_template/logstash { "index\_patterns" : \["logstash\*"\], "settings": { "max\_result\_window": 500000 }, "mappings": { ....} } but the max\_result\_window on new indexes is still 10,00… --- ## [Elastic Search aggregation query results are case incentive](https://discuss.elastic.co/t/elastic-search-aggregation-query-results-are-case-incentive/131930)
**Author:** [@srikanth\_nagineni](https://discuss.elastic.co/u/srikanth_nagineni)\ **Replies:** 5\ **Last updated:** [May 15, 2018, 1:38pm UTC](https://discuss.elastic.co/t/elastic-search-aggregation-query-results-are-case-incentive/131930 "2018-05-15T13:38:14Z")
I am using Elasticsearch 6.2 Version. In the aggregation, query results are returned like \` Apple 10, apple 20, aPple 30 But I need all the names to be lower case and the final count will be apple 60 Is there any… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1686) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1688)