# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1690

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1691

---

## [ElasticSearch crashing on docker elk containerr](https://discuss.elastic.co/t/elasticsearch-crashing-on-docker-elk-containerr/131670)

<div class="topic-metadata">

**Author:** [@ajouve](https://discuss.elastic.co/u/ajouve)\
**Replies:** 1\
**Last updated:** [May 14, 2018, 7:59am UTC](https://discuss.elastic.co/t/elasticsearch-crashing-on-docker-elk-containerr/131670 "2018-05-14T07:59:03Z")

</div>

I am using Elasticsearch in e ELK docker container. GitHub - spujadas/elk-docker: Elasticsearch, Logstash, Kibana (ELK) Docker image. I raised this issue a few months ago, but I still have the problem elasticsearch serv…

---

## [Watcher: Internal Server Error](https://discuss.elastic.co/t/watcher-internal-server-error/131471)

<div class="topic-metadata">

**Author:** [@FYP\_2018](https://discuss.elastic.co/u/FYP_2018)\
**Replies:** 8\
**Last updated:** [May 14, 2018, 7:23am UTC](https://discuss.elastic.co/t/watcher-internal-server-error/131471 "2018-05-14T07:23:30Z")

</div>

Whenever I try to execute a watch i get a Watcher : Internal server error. Also when I try to test the watch using development tools , i get following error { "error": { "root\_cause": \[ { "type": "null\_pointer\_exc…

---

## [What is the best way to monitor log sources?](https://discuss.elastic.co/t/what-is-the-best-way-to-monitor-log-sources/131543)

<div class="topic-metadata">

**Author:** [@addanuj](https://discuss.elastic.co/u/addanuj)\
**Replies:** 2\
**Last updated:** [May 14, 2018, 5:45am UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-monitor-log-sources/131543 "2018-05-14T05:45:31Z")

</div>

Please suggest the best way of monitoring log sources, If any log source not sending logs more than 5 minutes then how can I get alerted or notified. for Ex: if any windows server is not sending logs for more than 5 mi…

---

## [Unable to parse custom X-pack watcher](https://discuss.elastic.co/t/unable-to-parse-custom-x-pack-watcher/130944)

<div class="topic-metadata">

**Author:** [@ishantanu](https://discuss.elastic.co/u/ishantanu)\
**Replies:** 8\
**Last updated:** [May 14, 2018, 5:04am UTC](https://discuss.elastic.co/t/unable-to-parse-custom-x-pack-watcher/130944 "2018-05-14T05:04:56Z")

</div>

Hi, I am unable to parse the custom watcher which I've written. I am getting errors in chain transform: Watcher: \[parse\_exception\] could not parse \[search\] transform for watch \[inlined\]. unexpected field \[indices\] Her…

---

## [How to install the basic License](https://discuss.elastic.co/t/how-to-install-the-basic-license/131586)

<div class="topic-metadata">

**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\
**Replies:** 3\
**Last updated:** [May 14, 2018, 5:01am UTC](https://discuss.elastic.co/t/how-to-install-the-basic-license/131586 "2018-05-14T05:01:57Z")

</div>

Hello, I need x-pack so i need to install the free basic license. in the subscriptions, i can download my license but how to install it and make it functional ?

---

## [Understanding multiple ES nodes](https://discuss.elastic.co/t/understanding-multiple-es-nodes/131518)

<div class="topic-metadata">

**Author:** [@jlixfeld](https://discuss.elastic.co/u/jlixfeld)\
**Replies:** 1\
**Last updated:** [May 14, 2018, 4:59am UTC](https://discuss.elastic.co/t/understanding-multiple-es-nodes/131518 "2018-05-14T04:59:30Z")

</div>

I have just added a second ES node and created a cluster of those two nodes. The index I am using has replication disabled. One ES node is master, both are data and ingest. I have a logstash instance pointing to one E…

---

## [Confused about certain yml settings](https://discuss.elastic.co/t/confused-about-certain-yml-settings/131644)

<div class="topic-metadata">

**Author:** [@panthersquirrel](https://discuss.elastic.co/u/panthersquirrel)\
**Replies:** 2\
**Last updated:** [May 14, 2018, 4:53am UTC](https://discuss.elastic.co/t/confused-about-certain-yml-settings/131644 "2018-05-14T04:53:43Z")

</div>

Scenario 1 Suppose i have a 3 node cluster(n1,n2,n3) + a kibana node that has an ES coordinating node(n4) on its box that it uses to communicate with the 3 node cluster. n1,n2,n3 are all master/data. 1a) On which nodes(…

---

## [Parent-child v/s multiple indexes - Elasticsearch 6.0+](https://discuss.elastic.co/t/parent-child-v-s-multiple-indexes-elasticsearch-6-0/131648)

<div class="topic-metadata">

**Author:** [@Nithin\_Chandy](https://discuss.elastic.co/u/Nithin_Chandy)\
**Replies:** 0\
**Last updated:** [May 14, 2018, 1:28am UTC](https://discuss.elastic.co/t/parent-child-v-s-multiple-indexes-elasticsearch-6-0/131648 "2018-05-14T01:28:09Z")

</div>

We currently have a ES 5.3 cluster which uses parent-child mapping as our data follows this model. Parent-child mapping was the best option as it supported cluster-side joins and provided performance benefits from being …

---

## [I should create a new node?](https://discuss.elastic.co/t/i-should-create-a-new-node/131534)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 3\
**Last updated:** [May 13, 2018, 6:40am UTC](https://discuss.elastic.co/t/i-should-create-a-new-node/131534 "2018-05-13T06:40:59Z")

</div>

I currently have 5 indexes on a single node of Elasticsearch, one of these indexes has about 750000 documents. The average document insertion / update is 80 documents per minute in each index. For this case is it recom…

---

## [How to issue \_optimize on Elastic Cloud](https://discuss.elastic.co/t/how-to-issue-optimize-on-elastic-cloud/131235)

<div class="topic-metadata">

**Author:** [@mrubin](https://discuss.elastic.co/u/mrubin)\
**Replies:** 3\
**Last updated:** [May 13, 2018, 2:11am UTC](https://discuss.elastic.co/t/how-to-issue-optimize-on-elastic-cloud/131235 "2018-05-13T02:11:27Z")

</div>

I am trying to issue an \_optimize command via curl. I've tried both of the below styles: $ curl --user username:password -XPOST "https://redacted.us-east-1.aws.found.io:9243/foo/\_optimize?max\_num\_segments=1" {"error":{"…

---

## [Default UID of Docker Image](https://discuss.elastic.co/t/default-uid-of-docker-image/131593)

<div class="topic-metadata">

**Author:** [@kbolino](https://discuss.elastic.co/u/kbolino)\
**Replies:** 0\
**Last updated:** [May 12, 2018, 9:06pm UTC](https://discuss.elastic.co/t/default-uid-of-docker-image/131593 "2018-05-12T21:06:40Z")

</div>

On many (most?) Linux systems, /etc/login.defs sets UID\_MIN to 1000. This means that, on many systems, there is going to be a real, non-system user with UID 1000. It seems to me like the default should be something less …

---

## [Problem installing analysis-icu plugin](https://discuss.elastic.co/t/problem-installing-analysis-icu-plugin/131568)

<div class="topic-metadata">

**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\
**Replies:** 2\
**Last updated:** [May 12, 2018, 8:24pm UTC](https://discuss.elastic.co/t/problem-installing-analysis-icu-plugin/131568 "2018-05-12T20:24:37Z")

</div>

running ubuntu 18.04 just installed elasticsearch and kibana and jq analysis-icu-6.2.4.zip located in Download folder tried "sudo bin/elasticsearch-plugin install analysis-icu" as suggested https://www.elastic.co/guid…

---

## [Trying to run tests from the test suite](https://discuss.elastic.co/t/trying-to-run-tests-from-the-test-suite/131579)

<div class="topic-metadata">

**Author:** [@matth](https://discuss.elastic.co/u/matth)\
**Replies:** 2\
**Last updated:** [May 12, 2018, 8:13pm UTC](https://discuss.elastic.co/t/trying-to-run-tests-from-the-test-suite/131579 "2018-05-12T20:13:02Z")

</div>

I'm just getting into the source code from elastic search. However, I can not seem to be able to run the test suite. This is one example of the command I ran. I tried some different classes or methods but all of them gav…

---

## [Elastic Search Nested Aggregations](https://discuss.elastic.co/t/elastic-search-nested-aggregations/131588)

<div class="topic-metadata">

**Author:** [@onlinejava](https://discuss.elastic.co/u/onlinejava)\
**Replies:** 0\
**Last updated:** [May 12, 2018, 5:54pm UTC](https://discuss.elastic.co/t/elastic-search-nested-aggregations/131588 "2018-05-12T17:54:22Z")

</div>

Hi i am new to elastic search Query and aggregation. I have a nested document with the following mapping PUT /company { "mappings": { "data": { "properties": { "deptId": { "type": "keyword" }, "deptName": { …

---

## [Issue with Elasticsearch performance](https://discuss.elastic.co/t/issue-with-elasticsearch-performance/131535)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 4\
**Last updated:** [May 12, 2018, 3:07pm UTC](https://discuss.elastic.co/t/issue-with-elasticsearch-performance/131535 "2018-05-12T15:07:38Z")

</div>

Hi, When I try to query data from ES using Kibana, I am getting Gateway Timeout. I am using Nginx as a reverse proxy(Nginx, Kibana, ES coordinating node are installed on the same server and I have 3 Data nodes with 10 d…

---

## [ELK stack docker support](https://discuss.elastic.co/t/elk-stack-docker-support/131542)

<div class="topic-metadata">

**Author:** [@mkemalm](https://discuss.elastic.co/u/mkemalm)\
**Replies:** 3\
**Last updated:** [May 12, 2018, 2:22pm UTC](https://discuss.elastic.co/t/elk-stack-docker-support/131542 "2018-05-12T14:22:12Z")

</div>

Hi, I want to install elk stack (platinium subscription) docker images on docker-ce+docker swarm. Are there any support issue for this case? (should I use docker-ee?) Regards.

---

## [Support for configuration-for-3-node-cluster](https://discuss.elastic.co/t/support-for-configuration-for-3-node-cluster/131550)

<div class="topic-metadata">

**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\
**Replies:** 5\
**Last updated:** [May 12, 2018, 4:23am UTC](https://discuss.elastic.co/t/support-for-configuration-for-3-node-cluster/131550 "2018-05-12T04:23:38Z")

</div>

Hi, I have want to configure 3 node elasticsearch Cuter . I want to know what would be the best configuration of elasticsearch. Elastic01 172.24.32.209 ( Elasticsearch, Kibana, Logstash installed) Elastic02 172.24.3…

---

## [Configuration-for-3-node-cluster](https://discuss.elastic.co/t/configuration-for-3-node-cluster/131512)

<div class="topic-metadata">

**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\
**Replies:** 1\
**Last updated:** [May 12, 2018, 4:07am UTC](https://discuss.elastic.co/t/configuration-for-3-node-cluster/131512 "2018-05-12T04:07:46Z")

</div>

Please guide me how can I configuration-for-3-node-cluster. 915454-elastic3.newfrontierdata.com 172.24.32.218 915453-elastic2.newfrontierdata.com 172.24.32.217 915423-elastic1.newfrontierdata.com 172.24.32.209 vi /et…

---

## [Why is subscription not mentioned in X-Pack introduction page?](https://discuss.elastic.co/t/why-is-subscription-not-mentioned-in-x-pack-introduction-page/131529)

<div class="topic-metadata">

**Author:** [@Justin\_Wells](https://discuss.elastic.co/u/Justin_Wells)\
**Replies:** 1\
**Last updated:** [May 12, 2018, 3:42am UTC](https://discuss.elastic.co/t/why-is-subscription-not-mentioned-in-x-pack-introduction-page/131529 "2018-05-12T03:42:32Z")

</div>

Hate to post a complaint here to start, but I'm really frustrated that I just now discovered that X-Pack requires a subscription to use some features. It almost feels like a "bait and switch". I would like to kindly requ…

---

## [\]\[WARN \]\[o.e.d.r.RestController \] Content type detection for rest requests is deprecated. Specify the content type using the \[Content-Type\] header](https://discuss.elastic.co/t/warn-o-e-d-r-restcontroller-content-type-detection-for-rest-requests-is-deprecated-specify-the-content-type-using-the-content-type-header/131461)

<div class="topic-metadata">

**Author:** [@suchand](https://discuss.elastic.co/u/suchand)\
**Replies:** 1\
**Last updated:** [May 12, 2018, 3:40am UTC](https://discuss.elastic.co/t/warn-o-e-d-r-restcontroller-content-type-detection-for-rest-requests-is-deprecated-specify-the-content-type-using-the-content-type-header/131461 "2018-05-12T03:40:53Z")

</div>

Hi , @Ivan @mrubin I am using Elsticsearch 5.5.3 , 4 node cluster. I am getting this below log from one Node and CPU usage in this node is always 100%. \]\[WARN \]\[o.e.d.r.RestController \] Content type detection for r…

---

## [How to migrate index in Elastic Cloud](https://discuss.elastic.co/t/how-to-migrate-index-in-elastic-cloud/131530)

<div class="topic-metadata">

**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\
**Replies:** 2\
**Last updated:** [May 12, 2018, 3:37am UTC](https://discuss.elastic.co/t/how-to-migrate-index-in-elastic-cloud/131530 "2018-05-12T03:37:53Z")

</div>

I am using Elastic Cloud. I have 2 clusters. I'd like to move an index from one cluster to another cluster. Anyone know how to do this? Also, can I carry over my suggestions? I am using this for a search engine.

---

## [Overall cluster performance is relation to number of shards](https://discuss.elastic.co/t/overall-cluster-performance-is-relation-to-number-of-shards/131540)

<div class="topic-metadata">

**Author:** [@danielhu](https://discuss.elastic.co/u/danielhu)\
**Replies:** 1\
**Last updated:** [May 12, 2018, 1:00am UTC](https://discuss.elastic.co/t/overall-cluster-performance-is-relation-to-number-of-shards/131540 "2018-05-12T01:00:26Z")

</div>

So I'm new to our dev team and I'm trying to trouble shoot our ElasticSearch Performance issues. I noticed that our data retrieval from the ES instance takes 800ms -1200ms for a result-set as small as 1000 records. I'v…

---

## [Elasticsearch Upgrade from 5.x to 5.y](https://discuss.elastic.co/t/elasticsearch-upgrade-from-5-x-to-5-y/131545)

<div class="topic-metadata">

**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\
**Replies:** 1\
**Last updated:** [May 12, 2018, 12:55am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-5-x-to-5-y/131545 "2018-05-12T00:55:22Z")

</div>

Hi, I am trying to update my ES from 5.x to 5.y. Currently i am using 5.5.3 and eventually wants to upgrade it to 6.x. As i see that there is no current option to do rolling upgrade from 5.5.3 to 6 so i was thinking to …

---

## [ElasticSearch Snapshot why?](https://discuss.elastic.co/t/elasticsearch-snapshot-why/131537)

<div class="topic-metadata">

**Author:** [@0NE](https://discuss.elastic.co/u/0NE)\
**Replies:** 1\
**Last updated:** [May 11, 2018, 9:41pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-why/131537 "2018-05-11T21:41:03Z")

</div>

Hello, What is the purpose of a snapshot? I've read https://www.elastic.co/blog/introducing-snapshot-restore If we are using elasticsearch for grab data and present it really quick... im just confused :S

---

## [Using PKI realms with email role\_mapping](https://discuss.elastic.co/t/using-pki-realms-with-email-role-mapping/131525)

<div class="topic-metadata">

**Author:** [@rezie](https://discuss.elastic.co/u/rezie)\
**Replies:** 1\
**Last updated:** [May 11, 2018, 7:31pm UTC](https://discuss.elastic.co/t/using-pki-realms-with-email-role-mapping/131525 "2018-05-11T19:31:40Z")

</div>

I'm currently using ES 5.5 and am trying to enable client authentication via PKI and so far everything seems to work if the certificates I use only contain a common name (or email address by itself), but if I try to also…

---

## [Giving access to subset of data](https://discuss.elastic.co/t/giving-access-to-subset-of-data/131399)

<div class="topic-metadata">

**Author:** [@przemolb](https://discuss.elastic.co/u/przemolb)\
**Replies:** 2\
**Last updated:** [May 11, 2018, 6:09pm UTC](https://discuss.elastic.co/t/giving-access-to-subset-of-data/131399 "2018-05-11T18:09:14Z")

</div>

Is there any way I can give someone access to subset of data in Elasticsearch ? I mean he/she/some company could search only subset of data stored in database ?

---

## [Ask Elasticsearch where its configuration path is](https://discuss.elastic.co/t/ask-elasticsearch-where-its-configuration-path-is/131035)

<div class="topic-metadata">

**Author:** [@loren](https://discuss.elastic.co/u/loren)\
**Replies:** 4\
**Last updated:** [May 11, 2018, 6:02pm UTC](https://discuss.elastic.co/t/ask-elasticsearch-where-its-configuration-path-is/131035 "2018-05-11T18:02:34Z")

</div>

Is there an API call that returns what a cluster's configuration path is? (e.g., /usr/local/etc/elasticsearch/, /etc/elasticsearch).

---

## [Watcher can alert for visualization request?](https://discuss.elastic.co/t/watcher-can-alert-for-visualization-request/131444)

<div class="topic-metadata">

**Author:** [@cherubic](https://discuss.elastic.co/u/cherubic)\
**Replies:** 3\
**Last updated:** [May 11, 2018, 4:24pm UTC](https://discuss.elastic.co/t/watcher-can-alert-for-visualization-request/131444 "2018-05-11T16:24:45Z")

</div>

Hi, I want to use the visualization request make some fields alert. Is the watcher can do this? And will the watcher open source at version 6.3 with X-Pack? Thanks. C.

---

## [ES special chars issue](https://discuss.elastic.co/t/es-special-chars-issue/131508)

<div class="topic-metadata">

**Author:** [@DanyTSG](https://discuss.elastic.co/u/DanyTSG)\
**Replies:** 0\
**Last updated:** [May 11, 2018, 3:46pm UTC](https://discuss.elastic.co/t/es-special-chars-issue/131508 "2018-05-11T15:46:05Z")

</div>

Hello, I am using a Python script to import data in my ES index. The script successfully import data to ES but when I try to get the data, it presents special chars issue such as : curl -X GET "10.0.1.99:9200/stops/sto…

---

## [Exceptions after install x-pack](https://discuss.elastic.co/t/exceptions-after-install-x-pack/131507)

<div class="topic-metadata">

**Author:** [@MartinPecheur](https://discuss.elastic.co/u/MartinPecheur)\
**Replies:** 0\
**Last updated:** [May 11, 2018, 3:34pm UTC](https://discuss.elastic.co/t/exceptions-after-install-x-pack/131507 "2018-05-11T15:34:05Z")

</div>

Dear all ! I followed the install x-pack to elasticsearch documents. Everything was ok. But when i started up elastic, i there was some exception about \[SERVICE\_UNAVAILABLE/1/state not recovered / initialized\]; Block…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1689)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1691)
