# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1710 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1711 --- ## [Basic License expires after 1 month](https://discuss.elastic.co/t/basic-license-expires-after-1-month/129055)
**Author:** [@joeweoj](https://discuss.elastic.co/u/joeweoj)\ **Replies:** 3\ **Last updated:** [April 24, 2018, 9:49am UTC](https://discuss.elastic.co/t/basic-license-expires-after-1-month/129055 "2018-04-24T09:49:24Z")
Hi. We are using X-pack solely for it's monitoring capabilities at the moment (which are very good). Our Elasticsearch clusters are generated via automation (Cattle vs Pets style) and we generate a new cluster fairly f… --- ## [Difference between logstash .conf file and elastic template file](https://discuss.elastic.co/t/difference-between-logstash-conf-file-and-elastic-template-file/129269)
**Author:** [@SRIpandu1729](https://discuss.elastic.co/u/SRIpandu1729)\ **Replies:** 6\ **Last updated:** [April 24, 2018, 9:40am UTC](https://discuss.elastic.co/t/difference-between-logstash-conf-file-and-elastic-template-file/129269 "2018-04-24T09:40:39Z")
Why do we need templates even though we have logstash configuraion files or the question would be reiterated as what is the difference between logstash's configuration file and elastic's template file? (Here what I mean … --- ## [Changing elastic template to accomodate ip and geoip fields](https://discuss.elastic.co/t/changing-elastic-template-to-accomodate-ip-and-geoip-fields/129109)
**Author:** [@SRIpandu1729](https://discuss.elastic.co/u/SRIpandu1729)\ **Replies:** 0\ **Last updated:** [April 23, 2018, 1:06pm UTC](https://discuss.elastic.co/t/changing-elastic-template-to-accomodate-ip-and-geoip-fields/129109 "2018-04-23T13:06:48Z")
My current template for elasticstack(v6.2) is as follows: { "template": "log\*", "settings": { "number\_of\_shards": 2 }, "mappings": { "\_default\_": { "dynamic\_templates": \[{ "date\_fields": { "mapping": { "… --- ## [Restart ELS Cluster](https://discuss.elastic.co/t/restart-els-cluster/129252)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 1\ **Last updated:** [April 24, 2018, 8:58am UTC](https://discuss.elastic.co/t/restart-els-cluster/129252 "2018-04-24T08:58:14Z")
Hello, How to perform a automatic rolling restart on cluster ELS. I have three servers with 5 instances each. (4 data and 1 master) =\> 12 data instances, 3 master instances. The documentation is poor about this subje… --- ## [How to fetch hierarchical data using elastic search](https://discuss.elastic.co/t/how-to-fetch-hierarchical-data-using-elastic-search/128631)
**Author:** [@preetidashore](https://discuss.elastic.co/u/preetidashore)\ **Replies:** 3\ **Last updated:** [April 24, 2018, 8:54am UTC](https://discuss.elastic.co/t/how-to-fetch-hierarchical-data-using-elastic-search/128631 "2018-04-24T08:54:49Z")
I want to fetch hierarchical data using elastic search I have tried 'has\_parent' ,'has\_child' and 'term- aggregation' but it is returning hierarchy only up to 1 level. But I want to get complete hierarchy for specific o… --- ## [Nested JSon does getting indexed if mapping does not exist](https://discuss.elastic.co/t/nested-json-does-getting-indexed-if-mapping-does-not-exist/129231)
**Author:** [@Yasaswani\_Koduri](https://discuss.elastic.co/u/Yasaswani_Koduri)\ **Replies:** 1\ **Last updated:** [April 24, 2018, 8:53am UTC](https://discuss.elastic.co/t/nested-json-does-getting-indexed-if-mapping-does-not-exist/129231 "2018-04-24T08:53:01Z")
In elasticsearch2.x, I created an index which has dynamic template set as dynamic\_templates": \[ { "others": { "mapping": { "norms": { "enabled": false }, "index": "analyzed", "store": false, "type": "string" }… --- ## [Disabling TieredCompilation leads to timeout](https://discuss.elastic.co/t/disabling-tieredcompilation-leads-to-timeout/128664)
**Author:** [@Retenodus](https://discuss.elastic.co/u/Retenodus)\ **Replies:** 1\ **Last updated:** [April 24, 2018, 8:48am UTC](https://discuss.elastic.co/t/disabling-tieredcompilation-leads-to-timeout/128664 "2018-04-24T08:48:57Z")
Hello, I actually hesitate to create an issue on github but I think I found an issue which can impact several deployments. TLDR : Disabling TieredCompilation on Elasticsearch 5.5 to 6.1 can lead to: Increased time fo… --- ## [When using IntPoint/LongPoint or StringField as Document primary key, which performance is the best, why?](https://discuss.elastic.co/t/when-using-intpoint-longpoint-or-stringfield-as-document-primary-key-which-performance-is-the-best-why/129260)
**Author:** [@shijiebei2009](https://discuss.elastic.co/u/shijiebei2009)\ **Replies:** 0\ **Last updated:** [April 24, 2018, 8:37am UTC](https://discuss.elastic.co/t/when-using-intpoint-longpoint-or-stringfield-as-document-primary-key-which-performance-is-the-best-why/129260 "2018-04-24T08:37:44Z")
I wonder to know, what's the difference between IntPoint/LongPoint and StringField as primary key of a Document, and when searching which one is the most fast? --- ## [Elasticsearch-6.x norms false not working](https://discuss.elastic.co/t/elasticsearch-6-x-norms-false-not-working/129241)
**Author:** [@1a8e272e90cd3e11c4cb](https://discuss.elastic.co/u/1a8e272e90cd3e11c4cb)\ **Replies:** 0\ **Last updated:** [April 24, 2018, 7:22am UTC](https://discuss.elastic.co/t/elasticsearch-6-x-norms-false-not-working/129241 "2018-04-24T07:22:43Z")
That is what I have Done: First: curl -X PUT "localhost:9200/log\_20180419" Second curl -X PUT "localhost:9200/log\_20180419/\_mapping/\_doc" -H 'Content-Type: application/json' -d' { "properties": { … --- ## [Calculate stoppage time for a vehicle](https://discuss.elastic.co/t/calculate-stoppage-time-for-a-vehicle/129218)
**Author:** [@rajjangir](https://discuss.elastic.co/u/rajjangir)\ **Replies:** 1\ **Last updated:** [April 24, 2018, 7:49am UTC](https://discuss.elastic.co/t/calculate-stoppage-time-for-a-vehicle/129218 "2018-04-24T07:49:45Z")
We are using ElasticSearch to store GPS data. And we are storing documents in following format : - { imei : 12345678, date : "2017-04-24", Docs : \[ { latitude : 1.4567, longitude : 2.8765, speed : 67, created\_at… --- ## [Term Query to Exclude Others](https://discuss.elastic.co/t/term-query-to-exclude-others/129244)
**Author:** [@NewHere](https://discuss.elastic.co/u/NewHere)\ **Replies:** 0\ **Last updated:** [April 24, 2018, 7:29am UTC](https://discuss.elastic.co/t/term-query-to-exclude-others/129244 "2018-04-24T07:29:43Z")
Hi this may seem too elementary but I am also new to elasticsearch, so please bare with me. Say I have two documents, one with "name" : "ABC Company" and one with "name" : "ABC". Setting for the "name" field is of "text"… --- ## [Elasticsearch returning a document that is missing a term](https://discuss.elastic.co/t/elasticsearch-returning-a-document-that-is-missing-a-term/128941)
**Author:** [@harirajd](https://discuss.elastic.co/u/harirajd)\ **Replies:** 3\ **Last updated:** [April 24, 2018, 7:00am UTC](https://discuss.elastic.co/t/elasticsearch-returning-a-document-that-is-missing-a-term/128941 "2018-04-24T07:00:58Z")
I am looking for 2 terms in a document (innovu and implement) by using the following query in Kibana: GET esdbfindcases/esdbfindcases\_map/500d000000sOxzuAAC/\_explain { "query": { "bool": { "must"… --- ## [ADFS SAML Authentication in Elastic Stack](https://discuss.elastic.co/t/adfs-saml-authentication-in-elastic-stack/129127)
**Author:** [@soch234](https://discuss.elastic.co/u/soch234)\ **Replies:** 3\ **Last updated:** [April 24, 2018, 6:49am UTC](https://discuss.elastic.co/t/adfs-saml-authentication-in-elastic-stack/129127 "2018-04-24T06:49:33Z")
Hi there, I've tested Kibana /Elasticsearch 6.2.4 SAML Authentication with MS ADFS and noticed a strange behavoir. The elasticsearch.yml file contains the following config: xpack.security.authc.realms.saml1: type: sa… --- ## [Unable to communicate between the two elasticsearch clusters of different datacenters](https://discuss.elastic.co/t/unable-to-communicate-between-the-two-elasticsearch-clusters-of-different-datacenters/128627)
**Author:** [@Priyanka\_M](https://discuss.elastic.co/u/Priyanka_M)\ **Replies:** 2\ **Last updated:** [April 24, 2018, 4:53am UTC](https://discuss.elastic.co/t/unable-to-communicate-between-the-two-elasticsearch-clusters-of-different-datacenters/128627 "2018-04-24T04:53:14Z")
Hi, I have two elasticsearch clusters, each in different datacenter. We maintaining them in kubernetes pods. I am trying to implement cross-cluster search between two clusters. So, when provide node information of one D… --- ## [Mapping\_path option in char filter](https://discuss.elastic.co/t/mapping-path-option-in-char-filter/129020)
**Author:** [@Kumar\_Narottam](https://discuss.elastic.co/u/Kumar_Narottam)\ **Replies:** 1\ **Last updated:** [April 24, 2018, 4:28am UTC](https://discuss.elastic.co/t/mapping-path-option-in-char-filter/129020 "2018-04-24T04:28:24Z")
Hi All, Can some one guide me how to write own custom char filter using Mapping\_path parameter.. We can write with Mapping parameter where we can give key value pair. I do not want to reindex my data every time, hence … --- ## [Run ES on two servers and store the index in NAS](https://discuss.elastic.co/t/run-es-on-two-servers-and-store-the-index-in-nas/128982)
**Author:** [@aswinkumart](https://discuss.elastic.co/u/aswinkumart)\ **Replies:** 5\ **Last updated:** [April 24, 2018, 4:24am UTC](https://discuss.elastic.co/t/run-es-on-two-servers-and-store-the-index-in-nas/128982 "2018-04-24T04:24:20Z")
Hello All, Is there a way to achieve the following approach? I want to setup an High Availability on ES. I can setup an HAProxy on top of two different ES servers and route the traffic if one node is down. But my quest… --- ## [Query\_string query not matching on date field](https://discuss.elastic.co/t/query-string-query-not-matching-on-date-field/129210)
**Author:** [@Gabriel\_Skoropada](https://discuss.elastic.co/u/Gabriel_Skoropada)\ **Replies:** 0\ **Last updated:** [April 24, 2018, 3:59am UTC](https://discuss.elastic.co/t/query-string-query-not-matching-on-date-field/129210 "2018-04-24T03:59:53Z")
Our app is using a bool query that may have aquery\_string string query in it. When searching for date values I get no results from the query\_string query but if I use a range query it works. Those two queries come from … --- ## [Weakly repetitive pattern and real-time alert](https://discuss.elastic.co/t/weakly-repetitive-pattern-and-real-time-alert/129190)
**Author:** [@rbeg](https://discuss.elastic.co/u/rbeg)\ **Replies:** 6\ **Last updated:** [April 24, 2018, 1:48am UTC](https://discuss.elastic.co/t/weakly-repetitive-pattern-and-real-time-alert/129190 "2018-04-24T01:48:01Z")
Hello, I have Weekly repetitive pattern. Each Monday, Tuesday, Wednesday, Thursday and Friday, pattern is sensibly the same : count data is growing at 8am, decrease at 12, growing at 2 pm and finally decrease at 6pm. d… --- ## [org.elasticsearch.index.mapper.MapperParsingException: failed to parse \[target.gb\_size\]](https://discuss.elastic.co/t/org-elasticsearch-index-mapper-mapperparsingexception-failed-to-parse-target-gb-size/129196)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 0\ **Last updated:** [April 24, 2018, 12:21am UTC](https://discuss.elastic.co/t/org-elasticsearch-index-mapper-mapperparsingexception-failed-to-parse-target-gb-size/129196 "2018-04-24T00:21:50Z")
I have a new instance using 6.2 and i am duplicating same PUT/POST requests to both 5.x and 6.2 In 6.2 i get this error because gb\_size is usually a float value but some times it is a N/A org.elasticsearch.index.mapper… --- ## [Delete old index offline when disk is full](https://discuss.elastic.co/t/delete-old-index-offline-when-disk-is-full/129113)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 2\ **Last updated:** [April 24, 2018, 12:15am UTC](https://discuss.elastic.co/t/delete-old-index-offline-when-disk-is-full/129113 "2018-04-24T00:15:09Z")
How can i delete old index offline when disk is full and i cant use API because elasticsearch API doesnt work and refuse connection because data disk is full? /dev/sdb1 100% /mnt/elastic\_data elasticsearch will no… --- ## [How to access the X-Pack API on hosted Elastic Cloud?](https://discuss.elastic.co/t/how-to-access-the-x-pack-api-on-hosted-elastic-cloud/129192)
**Author:** [@David\_Klebanoff](https://discuss.elastic.co/u/David_Klebanoff)\ **Replies:** 1\ **Last updated:** [April 23, 2018, 10:29pm UTC](https://discuss.elastic.co/t/how-to-access-the-x-pack-api-on-hosted-elastic-cloud/129192 "2018-04-23T22:29:45Z")
I've attempted to get all roles available via this url: https://XXXXXXXXXXX.us-east-1.aws.found.io:9243/\_xpack/security/role but I'm receiving a 404 - Not Found. I suspect I may be trying to access the wrong URL, but I… --- ## [Greater than based on value from another field](https://discuss.elastic.co/t/greater-than-based-on-value-from-another-field/129089)
**Author:** [@Dave\_Clissold](https://discuss.elastic.co/u/Dave_Clissold)\ **Replies:** 8\ **Last updated:** [April 23, 2018, 10:17pm UTC](https://discuss.elastic.co/t/greater-than-based-on-value-from-another-field/129089 "2018-04-23T22:17:20Z")
Hi, I am trying to build a query that will match when an value of a field is greater than another nested field, but am stuck as to where to begin. Can anyone help or suggest somewhere to begin reading. Example data: { … --- ## [Monitoring ES - Free Tools](https://discuss.elastic.co/t/monitoring-es-free-tools/127936)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 8\ **Last updated:** [April 23, 2018, 10:03pm UTC](https://discuss.elastic.co/t/monitoring-es-free-tools/127936 "2018-04-23T22:03:17Z")
Hello, I search a free tools to moniroting my es cluster. X-pack is not free .... :cry: Here my short list to important metrics : Heap Shards allocation Disk Usage Refresh and FLush Latency Request average GC I/O D… --- ## [Massive Heap Usage (99%) on our "Warm" nodes](https://discuss.elastic.co/t/massive-heap-usage-99-on-our-warm-nodes/129178)
**Author:** [@diranged](https://discuss.elastic.co/u/diranged)\ **Replies:** 2\ **Last updated:** [April 23, 2018, 9:10pm UTC](https://discuss.elastic.co/t/massive-heap-usage-99-on-our-warm-nodes/129178 "2018-04-23T21:10:27Z")
Our cluster is operating pretty well .. but we noticed that our warm data nodes are under some intense JVM pressure. This could be self inflicted with our mappings and data size, but I am looking for a way to confirm thi… --- ## [Too many DNS request to 8.8.8.8](https://discuss.elastic.co/t/too-many-dns-request-to-8-8-8-8/129181)
**Author:** [@imortalsolitude](https://discuss.elastic.co/u/imortalsolitude)\ **Replies:** 0\ **Last updated:** [April 23, 2018, 8:55pm UTC](https://discuss.elastic.co/t/too-many-dns-request-to-8-8-8-8/129181 "2018-04-23T20:55:24Z")
I am running ELK 6.2.3 and with ingest geoip plugin my ELK is sending over 500 DNS requests to 8.8.8.8 per minute this is generating too many log files. If i drop packet on the server itself no data in ingested in to the… --- ## [ES 6.2 Multiple Function Scores/Boost Modes](https://discuss.elastic.co/t/es-6-2-multiple-function-scores-boost-modes/127557)
**Author:** [@Jon\_Hourany](https://discuss.elastic.co/u/Jon_Hourany)\ **Replies:** 2\ **Last updated:** [April 23, 2018, 7:57pm UTC](https://discuss.elastic.co/t/es-6-2-multiple-function-scores-boost-modes/127557 "2018-04-23T19:57:08Z")
I'm trying to add the Page Rank to the score of a document, adjusted by date decay. I know I can multiply the Rank and Date Decay together with a "score\_mode": "multiply", but I have other factors that I want summed, and… --- ## [Sorting by nested values in Javascript (Node.js)](https://discuss.elastic.co/t/sorting-by-nested-values-in-javascript-node-js/129171)
**Author:** [@YeeP](https://discuss.elastic.co/u/YeeP)\ **Replies:** 0\ **Last updated:** [April 23, 2018, 7:39pm UTC](https://discuss.elastic.co/t/sorting-by-nested-values-in-javascript-node-js/129171 "2018-04-23T19:39:40Z")
I have a sort that works great in Kibana, but cannot seem to get it to work with the Node.js client. Can anyone tell me how I can convert this to something that node will understand? GET sev\_incidents/\_search { "… --- ## [Install elsaticsearch on Ubuntu16](https://discuss.elastic.co/t/install-elsaticsearch-on-ubuntu16/129163)
**Author:** [@PieterV](https://discuss.elastic.co/u/PieterV)\ **Replies:** 0\ **Last updated:** [April 23, 2018, 6:47pm UTC](https://discuss.elastic.co/t/install-elsaticsearch-on-ubuntu16/129163 "2018-04-23T18:47:59Z")
Is there a complete and definite guide for installing ES on Ubuntu16? I only find bits and pieces... What I know so far is: Install Java apt-get update apt-get -y upgrade apt-get install default-jre apt-get insta… --- ## [Recommendations: Lifecycle, do I store them or no?](https://discuss.elastic.co/t/recommendations-lifecycle-do-i-store-them-or-no/129162)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 0\ **Last updated:** [April 23, 2018, 6:45pm UTC](https://discuss.elastic.co/t/recommendations-lifecycle-do-i-store-them-or-no/129162 "2018-04-23T18:45:22Z")
I'm successfully creating recommendations using Elasticsearch. How should I utilize the recommendations? Should I store them, then send them out periodically? If I sent (emailed) a recommendation to a user, should I d… --- ## [Watcher payload modification converts list to object](https://discuss.elastic.co/t/watcher-payload-modification-converts-list-to-object/128760)
**Author:** [@iamthealex](https://discuss.elastic.co/u/iamthealex)\ **Replies:** 2\ **Last updated:** [April 23, 2018, 6:19pm UTC](https://discuss.elastic.co/t/watcher-payload-modification-converts-list-to-object/128760 "2018-04-23T18:19:44Z")
I create a watch, The watch action transform tries to replace the payload. I'm partially successful, but several items do not work as I expected The payload is replaced, but I want to create a list of name-value pai… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1709) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1711)