# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1697

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1698

---

## [Xpack username and password](https://discuss.elastic.co/t/xpack-username-and-password/130744)

<div class="topic-metadata">

**Author:** [@Vijayakumar\_Kannan](https://discuss.elastic.co/u/Vijayakumar_Kannan)\
**Replies:** 3\
**Last updated:** [May 6, 2018, 4:52pm UTC](https://discuss.elastic.co/t/xpack-username-and-password/130744 "2018-05-06T16:52:51Z")

</div>

XPACK is mandatory for setting up the elasticsearch with username and password ? Also is it applicable for SSL settings?

---

## [Is it possible to give fix score for specific field search](https://discuss.elastic.co/t/is-it-possible-to-give-fix-score-for-specific-field-search/130559)

<div class="topic-metadata">

**Author:** [@karanlevaral](https://discuss.elastic.co/u/karanlevaral)\
**Replies:** 1\
**Last updated:** [May 6, 2018, 2:49pm UTC](https://discuss.elastic.co/t/is-it-possible-to-give-fix-score-for-specific-field-search/130559 "2018-05-06T14:49:55Z")

</div>

Is it possible to give fix score based on every field match. for e.g one field matched then increment score for document by 1 , second field matched then increment document score by 1, so if there are one fields matched …

---

## [Index phrase query as percolator](https://discuss.elastic.co/t/index-phrase-query-as-percolator/129932)

<div class="topic-metadata">

**Author:** [@keremcan](https://discuss.elastic.co/u/keremcan)\
**Replies:** 1\
**Last updated:** [May 6, 2018, 3:45pm UTC](https://discuss.elastic.co/t/index-phrase-query-as-percolator/129932 "2018-05-06T15:45:57Z")

</div>

Hi there! I'm trying to percolate some texts and add hyperlink to matches. But before adding hyperlink, I couldnt figure how to highlight words more than one. Here is my happy path: Adding mapping like this: curl -X …

---

## [Remote monitoring cluster, no ES data](https://discuss.elastic.co/t/remote-monitoring-cluster-no-es-data/130743)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 1\
**Last updated:** [May 6, 2018, 1:50pm UTC](https://discuss.elastic.co/t/remote-monitoring-cluster-no-es-data/130743 "2018-05-06T13:50:41Z")

</div>

Hi All, I have followed this guide: monitoring-production to setup my elasticsearch / logstash / kibana monitoring and when I look on my monitor cluster trough kibana -\> monitoring I have an overview of elasticsearch, k…

---

## [Creating indices and update\_mapping tasks take way too long](https://discuss.elastic.co/t/creating-indices-and-update-mapping-tasks-take-way-too-long/130718)

<div class="topic-metadata">

**Author:** [@iamredlus](https://discuss.elastic.co/u/iamredlus)\
**Replies:** 14\
**Last updated:** [May 6, 2018, 12:04pm UTC](https://discuss.elastic.co/t/creating-indices-and-update-mapping-tasks-take-way-too-long/130718 "2018-05-06T12:04:18Z")

</div>

Hi everyone, We're experiencing some slowness on our elasticsearch 6.2.3 clusters when performing update\_mapping and create indices tasks. One such cluster consists of 3 master nodes (4 cores / 14gb memory / 7gb heap), …

---

## [Starting and stopping elasticsearch without root privileges in linux centOS](https://discuss.elastic.co/t/starting-and-stopping-elasticsearch-without-root-privileges-in-linux-centos/130442)

<div class="topic-metadata">

**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\
**Replies:** 7\
**Last updated:** [May 6, 2018, 11:25am UTC](https://discuss.elastic.co/t/starting-and-stopping-elasticsearch-without-root-privileges-in-linux-centos/130442 "2018-05-06T11:25:03Z")

</div>

Hi. I want to install the ELK stack in a production machine that has CentOS on it. It dosen't have internet connection and I don't have root privileges . I can easly provid an install the ELK stack from manually delive…

---

## [How is an update handled when an integer field is incremented?](https://discuss.elastic.co/t/how-is-an-update-handled-when-an-integer-field-is-incremented/130697)

<div class="topic-metadata">

**Author:** [@Jason\_Baumgartner](https://discuss.elastic.co/u/Jason_Baumgartner)\
**Replies:** 2\
**Last updated:** [May 6, 2018, 10:29am UTC](https://discuss.elastic.co/t/how-is-an-update-handled-when-an-integer-field-is-incremented/130697 "2018-05-06T10:29:24Z")

</div>

I was curious how Lucene handles updates to documents where an integer field is incremented. I am designing a system that will make a lot of script updates to documents by incrementing the value of an integer field and …

---

## [Decrementing a counter concurrently in ElasticSearch using versioning fails](https://discuss.elastic.co/t/decrementing-a-counter-concurrently-in-elasticsearch-using-versioning-fails/130069)

<div class="topic-metadata">

**Author:** [@devj1988](https://discuss.elastic.co/u/devj1988)\
**Replies:** 1\
**Last updated:** [May 6, 2018, 10:39am UTC](https://discuss.elastic.co/t/decrementing-a-counter-concurrently-in-elasticsearch-using-versioning-fails/130069 "2018-05-06T10:39:53Z")

</div>

Hi, I am using ES 5.5 (AWS ElasticSearch service). I am trying to use a shared ES document to assign ids to multiple machines which have access to this index. Basically, the document looks like this: index/my\_type/co…

---

## [How does request cache work when there are multiple indices involved?](https://discuss.elastic.co/t/how-does-request-cache-work-when-there-are-multiple-indices-involved/130727)

<div class="topic-metadata">

**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\
**Replies:** 2\
**Last updated:** [May 6, 2018, 10:25am UTC](https://discuss.elastic.co/t/how-does-request-cache-work-when-there-are-multiple-indices-involved/130727 "2018-05-06T10:25:26Z")

</div>

I understand that as long as the request JSON doesn't change and the shards don't get refreshed, request cache can be utilized. Let's consider this scenario where I have daily indices and I do a wildcard search on these…

---

## [Query the list of changes for a keyword field](https://discuss.elastic.co/t/query-the-list-of-changes-for-a-keyword-field/129912)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 2\
**Last updated:** [May 6, 2018, 9:53am UTC](https://discuss.elastic.co/t/query-the-list-of-changes-for-a-keyword-field/129912 "2018-05-06T09:53:29Z")

</div>

I have a serie of documents like this: timestamp CAR.keyword ENGINE\_SERIAL\_NUMBER.keyword 20-02-2017 CAR1 A0001 20-02-2017 CAR2 B0001 21-02-2017 CAR1 A0001 21-02-2017 CAR2 B0001 22-02-2017 CAR1 A0001 2…

---

## [Mapping - error illegal\_argument\_exception when defining new date forma](https://discuss.elastic.co/t/mapping-error-illegal-argument-exception-when-defining-new-date-forma/130736)

<div class="topic-metadata">

**Author:** [@Aviyoosh](https://discuss.elastic.co/u/Aviyoosh)\
**Replies:** 1\
**Last updated:** [May 6, 2018, 9:49am UTC](https://discuss.elastic.co/t/mapping-error-illegal-argument-exception-when-defining-new-date-forma/130736 "2018-05-06T09:49:54Z")

</div>

Kibana + Elastic version: 6.2.4 JDK version: 10.0.1 OS version: Win10 Hi, I'm new to this world so please be gentle :slight\_smile: when trying to add a date format, I generated both queries: this one worked: put /…

---

## [Index in red](https://discuss.elastic.co/t/index-in-red/130677)

<div class="topic-metadata">

**Author:** [@Yaroslav\_Glodov](https://discuss.elastic.co/u/Yaroslav_Glodov)\
**Replies:** 3\
**Last updated:** [May 6, 2018, 9:07am UTC](https://discuss.elastic.co/t/index-in-red/130677 "2018-05-06T09:07:00Z")

</div>

Elasticsearch not working periodically. Version: 5.5.0 Error: curl http://localhost:9200/\_cluster/allocation/explain?pretty { "index" : "donprinton", "shard" : 0, "primary" : true, "current\_state" : "unassigne…

---

## [Snapshots for daily indices - best practice?](https://discuss.elastic.co/t/snapshots-for-daily-indices-best-practice/130732)

<div class="topic-metadata">

**Author:** [@AndreasB](https://discuss.elastic.co/u/AndreasB)\
**Replies:** 3\
**Last updated:** [May 6, 2018, 8:59am UTC](https://discuss.elastic.co/t/snapshots-for-daily-indices-best-practice/130732 "2018-05-06T08:59:42Z")

</div>

Hi There, we are currently searching for the best way to backup our ES-Cluster. Maybe the pros could give us some advice. Background: ES-Cluster (6.2.x) running on Azure VMs Repository target is a blob (using reposit…

---

## [Is there any esxisting configuration file in elasticserch?](https://discuss.elastic.co/t/is-there-any-esxisting-configuration-file-in-elasticserch/130428)

<div class="topic-metadata">

**Author:** [@Tamal\_Kundu](https://discuss.elastic.co/u/Tamal_Kundu)\
**Replies:** 2\
**Last updated:** [May 6, 2018, 8:11am UTC](https://discuss.elastic.co/t/is-there-any-esxisting-configuration-file-in-elasticserch/130428 "2018-05-06T08:11:59Z")

</div>

I have configured the elastic search with the existing logstash server. Please let me know if we can fetch the existing dashboard configuration to new elasticserach server

---

## [Heapdump - out of memory java heap space](https://discuss.elastic.co/t/heapdump-out-of-memory-java-heap-space/130416)

<div class="topic-metadata">

**Author:** [@TaskDead](https://discuss.elastic.co/u/TaskDead)\
**Replies:** 21\
**Last updated:** [May 6, 2018, 8:11am UTC](https://discuss.elastic.co/t/heapdump-out-of-memory-java-heap-space/130416 "2018-05-06T08:11:15Z")

</div>

Greetings We are running a 3 node cluster(version-1.4.4) (all masters) with 30G heap with JRE 1.7.80 and replication as 1. Data: 2.5TB(live) Total: 25TB shard per index is 3 daily data is around 70-80GB indexes are…

---

## [File based discovery does not work](https://discuss.elastic.co/t/file-based-discovery-does-not-work/130711)

<div class="topic-metadata">

**Author:** [@dustinrue](https://discuss.elastic.co/u/dustinrue)\
**Replies:** 4\
**Last updated:** [May 5, 2018, 10:28pm UTC](https://discuss.elastic.co/t/file-based-discovery-does-not-work/130711 "2018-05-05T22:28:04Z")

</div>

Similar to this ticket - File Based Discovery plugin not working - I've setup a small, two node test cluster that uses docker and is configured to use file based discovery. The configuration directory is mounted/mapped t…

---

## [Delete data older than 7 days (Ubuntu 18.04)](https://discuss.elastic.co/t/delete-data-older-than-7-days-ubuntu-18-04/130716)

<div class="topic-metadata">

**Author:** [@sindred](https://discuss.elastic.co/u/sindred)\
**Replies:** 1\
**Last updated:** [May 5, 2018, 10:14pm UTC](https://discuss.elastic.co/t/delete-data-older-than-7-days-ubuntu-18-04/130716 "2018-05-05T22:14:32Z")

</div>

When trying to delete data older than 7 days I get this error: curator delete indices --older-than 7 --time-unit days --timestring %Y.%m.%d Error: no such option: --older-than

---

## [Cannot start node in cluster](https://discuss.elastic.co/t/cannot-start-node-in-cluster/130486)

<div class="topic-metadata">

**Author:** [@L33T](https://discuss.elastic.co/u/L33T)\
**Replies:** 1\
**Last updated:** [May 5, 2018, 8:56pm UTC](https://discuss.elastic.co/t/cannot-start-node-in-cluster/130486 "2018-05-05T20:56:59Z")

</div>

Hi, I cannot start up a node in my cluster, when the elastic service starts it just times out and stops again. All i can see in the elastic log is: \[2018-05-03T15:59:10,714\]\[INFO \]\[o.e.n.Node \] \[elastic-n…

---

## [How can I parse Windows Logs?](https://discuss.elastic.co/t/how-can-i-parse-windows-logs/128519)

<div class="topic-metadata">

**Author:** [@Tempy](https://discuss.elastic.co/u/Tempy)\
**Replies:** 6\
**Last updated:** [May 5, 2018, 7:56pm UTC](https://discuss.elastic.co/t/how-can-i-parse-windows-logs/128519 "2018-05-05T19:56:17Z")

</div>

Hello, I am a junior system administrator working mainly with windows, getting used to using Linux. I'm trying to setup the Elastic stack to visualize logs from Windows Services which are part of our production enviro…

---

## [Scroll API(C# NEST) fails](https://discuss.elastic.co/t/scroll-api-c-nest-fails/129320)

<div class="topic-metadata">

**Author:** [@mww1](https://discuss.elastic.co/u/mww1)\
**Replies:** 7\
**Last updated:** [May 5, 2018, 5:17pm UTC](https://discuss.elastic.co/t/scroll-api-c-nest-fails/129320 "2018-05-05T17:17:51Z")

</div>

Hello guys, I am using scan and scroll api for ES nest 5.5 to retrieve documents over 1.3 million in size(6 fields/document) my scroll api works fine if I retrieve less number of documents(around 800000) but when I want…

---

## [Get the only failed document response in Bulk API Elasticsearch](https://discuss.elastic.co/t/get-the-only-failed-document-response-in-bulk-api-elasticsearch/128873)

<div class="topic-metadata">

**Author:** [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Replies:** 4\
**Last updated:** [May 5, 2018, 5:07pm UTC](https://discuss.elastic.co/t/get-the-only-failed-document-response-in-bulk-api-elasticsearch/128873 "2018-05-05T17:07:28Z")

</div>

I am struggling with Bulk API. I am sending 100 request (index, update) in every Bulk request. It gives me response with status of each request. Suppose my 97th request got fail, I have to make it loop to find the partic…

---

## [6 fields defined in my mappings. How is it possible to exceed the 1000 field size limit?](https://discuss.elastic.co/t/6-fields-defined-in-my-mappings-how-is-it-possible-to-exceed-the-1000-field-size-limit/130536)

<div class="topic-metadata">

**Author:** [@Jack\_Park](https://discuss.elastic.co/u/Jack_Park)\
**Replies:** 10\
**Last updated:** [May 5, 2018, 5:03pm UTC](https://discuss.elastic.co/t/6-fields-defined-in-my-mappings-how-is-it-possible-to-exceed-the-1000-field-size-limit/130536 "2018-05-05T17:03:40Z")

</div>

I am not making fields on the fly, unless there is a new bug; I've been running ES 6.1 on lots of "rows" of data, then suddenly, I am seeing the error message that I exceeded the 1000 limit on that index. I am intereste…

---

## [Get error when install elasticsearch 6.2.4 with RPM](https://discuss.elastic.co/t/get-error-when-install-elasticsearch-6-2-4-with-rpm/130694)

<div class="topic-metadata">

**Author:** [@showmeall](https://discuss.elastic.co/u/showmeall)\
**Replies:** 1\
**Last updated:** [May 5, 2018, 2:38pm UTC](https://discuss.elastic.co/t/get-error-when-install-elasticsearch-6-2-4-with-rpm/130694 "2018-05-05T14:38:01Z")

</div>

get error when install elasticsearch 6.2.4 with RPM, please help , what is the problem? the error info is \[root@localhost ~\]# rpm -ivh elasticsearch-6.2.4.rpm warning: elasticsearch-6.2.4.rpm: Header V4 RSA/SHA512 Sig…

---

## [Help updating index for 6.\*](https://discuss.elastic.co/t/help-updating-index-for-6/129800)

<div class="topic-metadata">

**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\
**Replies:** 18\
**Last updated:** [May 5, 2018, 10:13am UTC](https://discuss.elastic.co/t/help-updating-index-for-6/129800 "2018-05-05T10:13:20Z")

</div>

A silent upgrade from 5.3 to 6.2 has killed Elasticsearch in an application due to the new structure of indices. The existing (now wrong) format has multiple types, which I'm told by the error messages is not supported.…

---

## [Sort on multiple Buckets value](https://discuss.elastic.co/t/sort-on-multiple-buckets-value/130645)

<div class="topic-metadata">

**Author:** [@gargnaukri](https://discuss.elastic.co/u/gargnaukri)\
**Replies:** 2\
**Last updated:** [May 5, 2018, 9:32am UTC](https://discuss.elastic.co/t/sort-on-multiple-buckets-value/130645 "2018-05-05T09:32:33Z")

</div>

Hi, I have an Index named "requirement" which has a child named as "application\_activity". In this case i need to sort the multiple bucket based on their value. I am able to prepare the buckets as I want using multi le…

---

## [Has\_child query returns parsing exception](https://discuss.elastic.co/t/has-child-query-returns-parsing-exception/129881)

<div class="topic-metadata">

**Author:** [@maw65](https://discuss.elastic.co/u/maw65)\
**Replies:** 1\
**Last updated:** [May 5, 2018, 5:36am UTC](https://discuss.elastic.co/t/has-child-query-returns-parsing-exception/129881 "2018-05-05T05:36:08Z")

</div>

Hi, When sending a has\_child query to ES5.6.8 I get the following parsing exception {"error":{"root\_cause":\[{"type":"parsing\_exception","reason":"no \[query\] registered for \[has\_child\]","line":4,"col":22}\],"type":"parsin…

---

## [Empty Elasticsearch "search" log](https://discuss.elastic.co/t/empty-elasticsearch-search-log/129888)

<div class="topic-metadata">

**Author:** [@bsamorim](https://discuss.elastic.co/u/bsamorim)\
**Replies:** 1\
**Last updated:** [May 5, 2018, 5:33am UTC](https://discuss.elastic.co/t/empty-elasticsearch-search-log/129888 "2018-05-05T05:33:01Z")

</div>

I've been trying for some time now to log the queries made to my ElasticSearch version 6.2.3 service. This is the configuration I've set up so far: elasticsearch.yml: path.data: /var/log/elasticsearch/data path.logs: /…

---

## [Invision community - Operation timed out](https://discuss.elastic.co/t/invision-community-operation-timed-out/130321)

<div class="topic-metadata">

**Author:** [@waccoe](https://discuss.elastic.co/u/waccoe)\
**Replies:** 1\
**Last updated:** [May 5, 2018, 5:24am UTC](https://discuss.elastic.co/t/invision-community-operation-timed-out/130321 "2018-05-05T05:24:21Z")

</div>

We're running elasticsearch on a self hosted Invision Community using nginx server and getting the below error and tasks locking. IPS\\Http\\Request\\CurlException (28) Operation timed out after 10001 milliseconds with 0 b…

---

## [Masters are ramping up GC times, using more heap every minute](https://discuss.elastic.co/t/masters-are-ramping-up-gc-times-using-more-heap-every-minute/130275)

<div class="topic-metadata">

**Author:** [@xrl](https://discuss.elastic.co/u/xrl)\
**Replies:** 2\
**Last updated:** [May 5, 2018, 4:49am UTC](https://discuss.elastic.co/t/masters-are-ramping-up-gc-times-using-more-heap-every-minute/130275 "2018-05-05T04:49:51Z")

</div>

I am running a cluster with 20 9TB data nodes (32GB heap), 3 client nodes (24GB heap), and 3 master nodes (20GB heap). This cluster has been running stable under monitoring for the past 90 days. Yesterday, nowhere near …

---

## [We can not restore use the snapshot backup files](https://discuss.elastic.co/t/we-can-not-restore-use-the-snapshot-backup-files/130582)

<div class="topic-metadata">

**Author:** [@showmeall](https://discuss.elastic.co/u/showmeall)\
**Replies:** 2\
**Last updated:** [May 5, 2018, 4:29am UTC](https://discuss.elastic.co/t/we-can-not-restore-use-the-snapshot-backup-files/130582 "2018-05-05T04:29:37Z")

</div>

hi,all. we have backup data by snapshot, want restore to a new es server. we have cp all snapshot file to new server already , can create backup repository ,and check it ok, {"backup":{"type":"fs","settings":{"locatio…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1696)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1698)
