# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1723

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1724

---

## [ElasticSearch Fails to Start with -server Option](https://discuss.elastic.co/t/elasticsearch-fails-to-start-with-server-option/127508)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [April 10, 2018, 8:27pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-with-server-option/127508 "2018-04-10T20:27:30Z")

</div>

Elasticsearch 6.2.2 Windows installation installed as a service refuses to start with the -server option configured. Java 8u152 is installed and JAVA\_HOME variable is set. This has been running fine for months and has …

---

## [\[ERROR\]\[shield.authc.esnative\] error occurred while checking the native users for changes](https://discuss.elastic.co/t/error-shield-authc-esnative-error-occurred-while-checking-the-native-users-for-changes/127542)

<div class="topic-metadata">

**Author:** [@ankumar](https://discuss.elastic.co/u/ankumar)\
**Replies:** 2\
**Last updated:** [April 10, 2018, 8:09pm UTC](https://discuss.elastic.co/t/error-shield-authc-esnative-error-occurred-while-checking-the-native-users-for-changes/127542 "2018-04-10T20:09:09Z")

</div>

App team is seeing errors in app servers " None of the configured nodes were available:" at the same time we are seeing error message on all the nodes as below:. The issue resolved itself. I am just just curious is the e…

---

## [Unable to rollback the elasticsearch load](https://discuss.elastic.co/t/unable-to-rollback-the-elasticsearch-load/127153)

<div class="topic-metadata">

**Author:** [@nevilleonline](https://discuss.elastic.co/u/nevilleonline)\
**Replies:** 8\
**Last updated:** [April 10, 2018, 8:05pm UTC](https://discuss.elastic.co/t/unable-to-rollback-the-elasticsearch-load/127153 "2018-04-10T20:05:39Z")

</div>

Hi we are using elastic on edx analytics and while running moduleengagementworkflowtask. I am very new to elasticsearch. can anyone help me with the below error. 2018-04-07 10:01:36,862 INFO 80774 \[luigi-interface\] work…

---

## [Can't start elasticsearch with config saml](https://discuss.elastic.co/t/cant-start-elasticsearch-with-config-saml/127529)

<div class="topic-metadata">

**Author:** [@zonete](https://discuss.elastic.co/u/zonete)\
**Replies:** 5\
**Last updated:** [April 10, 2018, 7:06pm UTC](https://discuss.elastic.co/t/cant-start-elasticsearch-with-config-saml/127529 "2018-04-10T19:06:30Z")

</div>

Hi, we are trying configure ELK with SAML (with ADFS) but when we add the realm configuration to elasticsearch.yml we get the following error. Elasticseach.yml bootstrap.memory\_lock: false cluster.name: elasticsearch …

---

## [After & before pagination](https://discuss.elastic.co/t/after-before-pagination/127495)

<div class="topic-metadata">

**Author:** [@rrader](https://discuss.elastic.co/u/rrader)\
**Replies:** 3\
**Last updated:** [April 10, 2018, 6:42pm UTC](https://discuss.elastic.co/t/after-before-pagination/127495 "2018-04-10T18:42:19Z")

</div>

From facebook api: before : This is the cursor that points to the start of the page of data that has been returned. after : This is the cursor that points to the end of the page of data that has been returned. in Elas…

---

## [Exiting: Error in initing prospector: No paths were defined for prospector accessing config](https://discuss.elastic.co/t/exiting-error-in-initing-prospector-no-paths-were-defined-for-prospector-accessing-config/127530)

<div class="topic-metadata">

**Author:** [@APJ](https://discuss.elastic.co/u/APJ)\
**Replies:** 0\
**Last updated:** [April 10, 2018, 6:04pm UTC](https://discuss.elastic.co/t/exiting-error-in-initing-prospector-no-paths-were-defined-for-prospector-accessing-config/127530 "2018-04-10T18:04:30Z")

</div>

Can someone please help me out here? I am using a Windows machine.

---

## [Logs not visible in Discover](https://discuss.elastic.co/t/logs-not-visible-in-discover/126902)

<div class="topic-metadata">

**Author:** [@arun3](https://discuss.elastic.co/u/arun3)\
**Replies:** 1\
**Last updated:** [April 10, 2018, 5:47pm UTC](https://discuss.elastic.co/t/logs-not-visible-in-discover/126902 "2018-04-10T17:47:23Z")

</div>

I create a role : Role1 and assigned it to user : User1 Granted fields : some fields. Upon logging with User1 and checking the Discover , logs are not appearing. Toggled with the Timepicker but still not working. But …

---

## [Curator environment variables for hosts](https://discuss.elastic.co/t/curator-environment-variables-for-hosts/127513)

<div class="topic-metadata">

**Author:** [@treyd](https://discuss.elastic.co/u/treyd)\
**Replies:** 3\
**Last updated:** [April 10, 2018, 4:47pm UTC](https://discuss.elastic.co/t/curator-environment-variables-for-hosts/127513 "2018-04-10T16:47:48Z")

</div>

How can I specify a list of hosts for curator's config file using an environment variable? I have the following in my curator-config.yml: client: hosts: ${ELASTICSEARCH\_HOSTS:127.0.0.1} When I try something like: $ …

---

## [Curator delete\_indices. \<type 'exceptions.KeyError'\>: 'indices'](https://discuss.elastic.co/t/curator-delete-indices-type-exceptions-keyerror-indices/126954)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 16\
**Last updated:** [April 10, 2018, 3:21pm UTC](https://discuss.elastic.co/t/curator-delete-indices-type-exceptions-keyerror-indices/126954 "2018-04-10T15:21:29Z")

</div>

Hi, running curator job and once a while I get the following error... Failed to complete action: delete\_indices. \<type 'exceptions.KeyError'\>: 'indices' Otherwise it works. Here is the action... actions: 2: …

---

## [No logs appearing in Kibana](https://discuss.elastic.co/t/no-logs-appearing-in-kibana/126937)

<div class="topic-metadata">

**Author:** [@jarnold](https://discuss.elastic.co/u/jarnold)\
**Replies:** 22\
**Last updated:** [April 10, 2018, 2:50pm UTC](https://discuss.elastic.co/t/no-logs-appearing-in-kibana/126937 "2018-04-10T14:50:33Z")

</div>

See title. There are no errors in any of the log files for filebeat/logstash/elasticsearch/kibana. My pipeline is starting up & running properly. I've used this pipeline before on a previous install so I can confirm it's…

---

## [Settings SSL/TLS setup with PKCS8 keys](https://discuss.elastic.co/t/settings-ssl-tls-setup-with-pkcs8-keys/127496)

<div class="topic-metadata">

**Author:** [@souf\_el\_badraoui](https://discuss.elastic.co/u/souf_el_badraoui)\
**Replies:** 1\
**Last updated:** [April 10, 2018, 2:27pm UTC](https://discuss.elastic.co/t/settings-ssl-tls-setup-with-pkcs8-keys/127496 "2018-04-10T14:27:37Z")

</div>

Hi, I'm trying to set up SSL/TLS with x-pack and running into this on all nodes Caused by: java.lang.IllegalArgumentException: parsed an unsupported object \[PKCS8EncryptedPrivateKeyInfo\] My configuration elasticsearch.…

---

## [How to set a socks5 proxy for ElasticsearchTemplate (Java Client)](https://discuss.elastic.co/t/how-to-set-a-socks5-proxy-for-elasticsearchtemplate-java-client/126796)

<div class="topic-metadata">

**Author:** [@blalasaadri](https://discuss.elastic.co/u/blalasaadri)\
**Replies:** 3\
**Last updated:** [April 10, 2018, 2:18pm UTC](https://discuss.elastic.co/t/how-to-set-a-socks5-proxy-for-elasticsearchtemplate-java-client/126796 "2018-04-10T14:18:20Z")

</div>

Hi! I'm trying to connect to a remote Elasticsearch instance; to do so, I have to tunnel my traffic through a socks5 proxy. In my Java code, I'm using the ElasticsearchTemplate which in turn uses a PreBuiltTransportCli…

---

## [Repair index after a wrong scripted field](https://discuss.elastic.co/t/repair-index-after-a-wrong-scripted-field/127491)

<div class="topic-metadata">

**Author:** [@florentmair](https://discuss.elastic.co/u/florentmair)\
**Replies:** 1\
**Last updated:** [April 10, 2018, 1:54pm UTC](https://discuss.elastic.co/t/repair-index-after-a-wrong-scripted-field/127491 "2018-04-10T13:54:37Z")

</div>

hello i have created a scripted field on metricbeat index to know the lifetime of some process. Well now i am not able to see anymore ont he Kibana discover page. I have the warning "Courier Fetch: 2 of 8 shards faile…

---

## [Pulling data from a table in mysql to elatic search periodically](https://discuss.elastic.co/t/pulling-data-from-a-table-in-mysql-to-elatic-search-periodically/127458)

<div class="topic-metadata">

**Author:** [@manjur](https://discuss.elastic.co/u/manjur)\
**Replies:** 3\
**Last updated:** [April 10, 2018, 1:19pm UTC](https://discuss.elastic.co/t/pulling-data-from-a-table-in-mysql-to-elatic-search-periodically/127458 "2018-04-10T13:19:27Z")

</div>

Hi , i am new to ES. I have created one poc which fetch data from mysql and visualize in kibana.Now i need to fetch newly added records in every 5 minutes and show it in kibana dashboard. Please suggest how can i do i…

---

## [Mustache transform script throwing "Failed to compile inline script" error](https://discuss.elastic.co/t/mustache-transform-script-throwing-failed-to-compile-inline-script-error/127364)

<div class="topic-metadata">

**Author:** [@singrahu](https://discuss.elastic.co/u/singrahu)\
**Replies:** 4\
**Last updated:** [April 10, 2018, 1:18pm UTC](https://discuss.elastic.co/t/mustache-transform-script-throwing-failed-to-compile-inline-script-error/127364 "2018-04-10T13:18:22Z")

</div>

Elastic stack: 6.2.2 I am trying to convert the payload to JSON and then pass it to a Webhook action. My Watcher transform script looks like: { "trigger": { "schedule": { "interval": "1m" } }, "inp…

---

## [Return multiple values from script engine plugin](https://discuss.elastic.co/t/return-multiple-values-from-script-engine-plugin/127390)

<div class="topic-metadata">

**Author:** [@stephencoffman](https://discuss.elastic.co/u/stephencoffman)\
**Replies:** 2\
**Last updated:** [April 10, 2018, 1:11pm UTC](https://discuss.elastic.co/t/return-multiple-values-from-script-engine-plugin/127390 "2018-04-10T13:11:32Z")

</div>

ES 6.2.3 My index contains docs like this: { str1: "some string", str2: "other string" } I'm using a custom plugin that implements a ScriptEngine based on these examples: Advanced scripts using script engines Exp…

---

## [Slow Bulk Updates on 6.2.3](https://discuss.elastic.co/t/slow-bulk-updates-on-6-2-3/125513)

<div class="topic-metadata">

**Author:** [@ctrix](https://discuss.elastic.co/u/ctrix)\
**Replies:** 2\
**Last updated:** [April 10, 2018, 12:57pm UTC](https://discuss.elastic.co/t/slow-bulk-updates-on-6-2-3/125513 "2018-04-10T12:57:24Z")

</div>

Hello all, i'm following up on this comment on github and the following suggestion. I have a cluster of 8 blades, 32G RAM and Xeon Processors. I receive, from a kafka topic, a lot of documents that need to be inserted…

---

## [Contradicting Docs](https://discuss.elastic.co/t/contradicting-docs/127330)

<div class="topic-metadata">

**Author:** [@sachin\_frayne](https://discuss.elastic.co/u/sachin_frayne)\
**Replies:** 3\
**Last updated:** [April 10, 2018, 12:57pm UTC](https://discuss.elastic.co/t/contradicting-docs/127330 "2018-04-10T12:57:00Z")

</div>

Which docs is correct? https://www.elastic.co/guide/en/elasticsearch/reference/current/max-number-threads-check.html https://www.elastic.co/guide/en/elasticsearch/reference/current/max-number-of-threads.html One menti…

---

## [Custom Realm Set Security permissions](https://discuss.elastic.co/t/custom-realm-set-security-permissions/127482)

<div class="topic-metadata">

**Author:** [@jhn134910](https://discuss.elastic.co/u/jhn134910)\
**Replies:** 0\
**Last updated:** [April 10, 2018, 12:46pm UTC](https://discuss.elastic.co/t/custom-realm-set-security-permissions/127482 "2018-04-10T12:46:41Z")

</div>

My custom realm x-pack plugin makes an authorization attempt over HTTP to an external user-store. This worked okay in previous versions of x-pack. However, x-pack security permissions may have been re-organized slightly …

---

## [Can I perform derivative aggregation without date\_histogram?](https://discuss.elastic.co/t/can-i-perform-derivative-aggregation-without-date-histogram/127480)

<div class="topic-metadata">

**Author:** [@vinayakfutak](https://discuss.elastic.co/u/vinayakfutak)\
**Replies:** 0\
**Last updated:** [April 10, 2018, 12:28pm UTC](https://discuss.elastic.co/t/can-i-perform-derivative-aggregation-without-date-histogram/127480 "2018-04-10T12:28:09Z")

</div>

I want to perform derivative aggregation on following query { "size": 0, "aggs": { "sales\_per\_month": { "date\_histogram": { "field": "device\_time", "format": "dd-MM-yyyy", "interval": "day" }, "aggs": { "a1": …

---

## [Does query\_string split on whitespaces for text fields](https://discuss.elastic.co/t/does-query-string-split-on-whitespaces-for-text-fields/127477)

<div class="topic-metadata">

**Author:** [@mainameiz](https://discuss.elastic.co/u/mainameiz)\
**Replies:** 0\
**Last updated:** [April 10, 2018, 12:16pm UTC](https://discuss.elastic.co/t/does-query-string-split-on-whitespaces-for-text-fields/127477 "2018-04-10T12:16:17Z")

</div>

Whitespaces are not considered operators, this means that new york city will be passed "as is" to the analyzer configured for the field. If the field is a keyword field the analyzer will create a single term new york …

---

## [Cutom Realm build JarHell with Guava](https://discuss.elastic.co/t/cutom-realm-build-jarhell-with-guava/127338)

<div class="topic-metadata">

**Author:** [@jhn134910](https://discuss.elastic.co/u/jhn134910)\
**Replies:** 3\
**Last updated:** [April 10, 2018, 12:12pm UTC](https://discuss.elastic.co/t/cutom-realm-build-jarhell-with-guava/127338 "2018-04-10T12:12:51Z")

</div>

Hello there, I'm using elastic-search v6.2.3, with x-pack plugin-in v6.2.3 installed. The deployment used RPMs and my OS is centos 7. I've conducted a recent upgrade from 5.4.0 to 5.6.8 to 6.2.3. As part of the upgrad…

---

## [NEST Client opens new connection for any request](https://discuss.elastic.co/t/nest-client-opens-new-connection-for-any-request/125144)

<div class="topic-metadata">

**Author:** [@Sauter\_Vector](https://discuss.elastic.co/u/Sauter_Vector)\
**Replies:** 3\
**Last updated:** [April 10, 2018, 11:39am UTC](https://discuss.elastic.co/t/nest-client-opens-new-connection-for-any-request/125144 "2018-04-10T11:39:25Z")

</div>

Hello there and welcome Elastic community, we are using Elastic search with NEST 5.5. One thing we realized is, that the Elastic Client seems to open a new TCP connection for every request. One of our usecases uses the …

---

## [I have a visualization in a elasticseacrch node, I want this visualization in another elasticsearch node with same data. visualization in json format:](https://discuss.elastic.co/t/i-have-a-visualization-in-a-elasticseacrch-node-i-want-this-visualization-in-another-elasticsearch-node-with-same-data-visualization-in-json-format/127468)

<div class="topic-metadata">

**Author:** [@Piyushpky](https://discuss.elastic.co/u/Piyushpky)\
**Replies:** 0\
**Last updated:** [April 10, 2018, 11:03am UTC](https://discuss.elastic.co/t/i-have-a-visualization-in-a-elasticseacrch-node-i-want-this-visualization-in-another-elasticsearch-node-with-same-data-visualization-in-json-format/127468 "2018-04-10T11:03:55Z")

</div>

I have a visualization in a elasticseacrch node, I want this visualization in another elasticsearch node with same data. visualization in json format: { "type": "visualization", "visualization": { "title": "Monthly P…

---

## [Out of Memory Error on ElasticSearch running master only with 8 GB with version 5.2.2](https://discuss.elastic.co/t/out-of-memory-error-on-elasticsearch-running-master-only-with-8-gb-with-version-5-2-2/127441)

<div class="topic-metadata">

**Author:** [@Jayakrishnan\_Nair](https://discuss.elastic.co/u/Jayakrishnan_Nair)\
**Replies:** 7\
**Last updated:** [April 10, 2018, 10:00am UTC](https://discuss.elastic.co/t/out-of-memory-error-on-elasticsearch-running-master-only-with-8-gb-with-version-5-2-2/127441 "2018-04-10T10:00:32Z")

</div>

\[2018-04-10T07:38:28,846\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[\_ras\_master\_9200\] fatal error in thread \[Thread-22\], exiting java.lang.OutOfMemoryError: Java heap space at org.elasticsearch.common.…

---

## [Partial match with ngram. How to avoid\\minimize excessive search result](https://discuss.elastic.co/t/partial-match-with-ngram-how-to-avoid-minimize-excessive-search-result/126785)

<div class="topic-metadata">

**Author:** [@Denis\_Zakharchuk](https://discuss.elastic.co/u/Denis_Zakharchuk)\
**Replies:** 1\
**Last updated:** [April 10, 2018, 9:21am UTC](https://discuss.elastic.co/t/partial-match-with-ngram-how-to-avoid-minimize-excessive-search-result/126785 "2018-04-10T09:21:53Z")

</div>

Hi, I have a task to implement search among some records by some different fields. One of them - "Title" and regarding this specific field there are few demands: internal match (e.g. "esti" in search request should m…

---

## [Java heap space on Rasp 3 : Elast 5.6.4](https://discuss.elastic.co/t/java-heap-space-on-rasp-3-elast-5-6-4/127304)

<div class="topic-metadata">

**Author:** [@bruno-d](https://discuss.elastic.co/u/bruno-d)\
**Replies:** 2\
**Last updated:** [April 10, 2018, 9:09am UTC](https://discuss.elastic.co/t/java-heap-space-on-rasp-3-elast-5-6-4/127304 "2018-04-10T09:09:45Z")

</div>

Hi , i have a RPI3 who ran from 4 months like a charm and from couple days it reboots every 20min.... i am using version 5.6.4. /usr/bin/java -Xms540m -Xmx540m -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=…

---

## [Logs duplicated in all indices](https://discuss.elastic.co/t/logs-duplicated-in-all-indices/127375)

<div class="topic-metadata">

**Author:** [@killbartonking](https://discuss.elastic.co/u/killbartonking)\
**Replies:** 1\
**Last updated:** [April 10, 2018, 9:08am UTC](https://discuss.elastic.co/t/logs-duplicated-in-all-indices/127375 "2018-04-10T09:08:28Z")

</div>

currently running the latest release of the whole stack- at the moment, i have several inputs with a different logstash config file for each, but for some reason, data from one input is showing up in a different index. f…

---

## [EFS:disk quota exceeded](https://discuss.elastic.co/t/efs-disk-quota-exceeded/127334)

<div class="topic-metadata">

**Author:** [@anuj6664](https://discuss.elastic.co/u/anuj6664)\
**Replies:** 2\
**Last updated:** [April 10, 2018, 8:24am UTC](https://discuss.elastic.co/t/efs-disk-quota-exceeded/127334 "2018-04-10T08:24:09Z")

</div>

every day around 5 A.M i hava to restart the elasticsearch and logstash to push the logs to index. while viewing log i got the error " neste d: IndexShardRecoveryException\[failed to recover from gateway\]; nested: Engin…

---

## [Signing requests of Java High Level REST Client](https://discuss.elastic.co/t/signing-requests-of-java-high-level-rest-client/127435)

<div class="topic-metadata">

**Author:** [@Prakhar\_Mishra](https://discuss.elastic.co/u/Prakhar_Mishra)\
**Replies:** 1\
**Last updated:** [April 10, 2018, 8:23am UTC](https://discuss.elastic.co/t/signing-requests-of-java-high-level-rest-client/127435 "2018-04-10T08:23:26Z")

</div>

I am using AWS Elasticsearch service. To implement proper security policies, we need to sign requests sent to elasticsearch. We are using Java High Level REST Client to query elasticsearch. Is it possible to sign (by si…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1722)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1724)
