# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1736 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1737 --- ## [Analyzing for missing count](https://discuss.elastic.co/t/analyzing-for-missing-count/125556)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 0\ **Last updated:** [March 26, 2018, 7:14am UTC](https://discuss.elastic.co/t/analyzing-for-missing-count/125556 "2018-03-26T07:14:11Z")
hi there let me ask one thing. my scenario is that let's say i have 3 requests to A system and i expected 3 responses from A system. but in real i got 2 responses from A system. one response was dropout. probably, … --- ## [Monitor actions on Elasticsearch](https://discuss.elastic.co/t/monitor-actions-on-elasticsearch/126073)
**Author:** [@Amit\_Hora](https://discuss.elastic.co/u/Amit_Hora)\ **Replies:** 0\ **Last updated:** [March 29, 2018, 10:33am UTC](https://discuss.elastic.co/t/monitor-actions-on-elasticsearch/126073 "2018-03-29T10:33:04Z")
Hi, We have 1000's of index patterns created on our cluster and there are many people who access these patterns. but every now and then someone would either changes the Index pattern settings or someone will alter the d… --- ## [One issue about elastic-docker](https://discuss.elastic.co/t/one-issue-about-elastic-docker/126035)
**Author:** [@yu2003w](https://discuss.elastic.co/u/yu2003w)\ **Replies:** 5\ **Last updated:** [March 29, 2018, 10:21am UTC](https://discuss.elastic.co/t/one-issue-about-elastic-docker/126035 "2018-03-29T10:21:21Z")
Hi guys, I tried to launch elastic-docker images 6.2.2. I could configure path.data in elasticsearch.yml and mount to external directories. However, I failed to mount path.logs to external volumes. Could path.logs in… --- ## [X-Pack & LDAP user group role mapping](https://discuss.elastic.co/t/x-pack-ldap-user-group-role-mapping/123077)
**Author:** [@Darius](https://discuss.elastic.co/u/Darius)\ **Replies:** 11\ **Last updated:** [March 29, 2018, 9:54am UTC](https://discuss.elastic.co/t/x-pack-ldap-user-group-role-mapping/123077 "2018-03-29T09:54:06Z")
Hello, I'm running elastic 6.2.2 /w x-pack and integrating it with LDAP. The problem I am having is that I'm able to define users by specifying each user individually, but not an LDAP group. Let me try to clarify: Co… --- ## [Update default stemmer settings](https://discuss.elastic.co/t/update-default-stemmer-settings/126065)
**Author:** [@Palanikumark](https://discuss.elastic.co/u/Palanikumark)\ **Replies:** 0\ **Last updated:** [March 29, 2018, 9:50am UTC](https://discuss.elastic.co/t/update-default-stemmer-settings/126065 "2018-03-29T09:50:13Z")
Hi, Below is my elastic search settings. { "magento2\_product\_3\_v4": { "settings": { "index": { "creation\_date": "1522234922811", "analysis": { "filter": { "default\_stemmer": { "type": "stemmer", "language": "cjk" }, "u… --- ## [Multiple field search is not working in field having array of object in Elasticsearch 6](https://discuss.elastic.co/t/multiple-field-search-is-not-working-in-field-having-array-of-object-in-elasticsearch-6/126036)
**Author:** [@Tarun\_Jangra](https://discuss.elastic.co/u/Tarun_Jangra)\ **Replies:** 5\ **Last updated:** [March 29, 2018, 9:46am UTC](https://discuss.elastic.co/t/multiple-field-search-is-not-working-in-field-having-array-of-object-in-elasticsearch-6/126036 "2018-03-29T09:46:08Z")
Here is the type of document i have: { "id": 41, "invoice\_number": "INV-0022", "order\_number": null, "status": "Draft", "object\_id": "invoice\_41", "viewed\_date": null, "total\_amount": 21640, "total\_amount\_formatted": "₹… --- ## [Aggregation is skipping needed data and not give expected results](https://discuss.elastic.co/t/aggregation-is-skipping-needed-data-and-not-give-expected-results/124837)
**Author:** [@Grimmjow13r](https://discuss.elastic.co/u/Grimmjow13r)\ **Replies:** 15\ **Last updated:** [March 29, 2018, 9:42am UTC](https://discuss.elastic.co/t/aggregation-is-skipping-needed-data-and-not-give-expected-results/124837 "2018-03-29T09:42:43Z")
Hello guys. When i'm using the following aggregation: "2": { "terms": { "field": "name", "size": 100, "order": { "1": "desc" } }, "aggs": { "1": { "avg": { … --- ## [Installation Woes on Ubuntu/Linux](https://discuss.elastic.co/t/installation-woes-on-ubuntu-linux/125482)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 8\ **Last updated:** [March 29, 2018, 9:26am UTC](https://discuss.elastic.co/t/installation-woes-on-ubuntu-linux/125482 "2018-03-29T09:26:16Z")
Tried out installing Elastic, Logstash and Kibana on Ubuntu 17.6 (running on VMWare Player on Windows 10) and it was a bit difficult. Not sure if it's because I'm not a Linux guru or what. Installing elasticsearch via… --- ## [Accessing doc value fields from painless in update](https://discuss.elastic.co/t/accessing-doc-value-fields-from-painless-in-update/124771)
**Author:** [@Attila\_Nagy](https://discuss.elastic.co/u/Attila_Nagy)\ **Replies:** 6\ **Last updated:** [March 29, 2018, 8:52am UTC](https://discuss.elastic.co/t/accessing-doc-value-fields-from-painless-in-update/124771 "2018-03-29T08:52:29Z")
Hi, I can do this: https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-update.html#\_scripted\_updates which increments the previously stored counter field by 4. But what if I want to exclude the count… --- ## [Unsigned sharding](https://discuss.elastic.co/t/unsigned-sharding/126054)
**Author:** [@WanliTian](https://discuss.elastic.co/u/WanliTian)\ **Replies:** 1\ **Last updated:** [March 29, 2018, 8:50am UTC](https://discuss.elastic.co/t/unsigned-sharding/126054 "2018-03-29T08:50:06Z")
\[2018-03-29T08:15:08,500\]\[WARN \]\[o.e.c.a.s.ShardStateAction\] \[master-node-3\] \[100002555313-1510542891\]\[14\] received shard failed for shard id \[\[100002555313-1510542891\]\[14\]\], allocation id \[h1ICRYzCT5qmAmZYHPkhbg\], prima… --- ## [Very high refresh time](https://discuss.elastic.co/t/very-high-refresh-time/126040)
**Author:** [@mgo](https://discuss.elastic.co/u/mgo)\ **Replies:** 0\ **Last updated:** [March 29, 2018, 7:41am UTC](https://discuss.elastic.co/t/very-high-refresh-time/126040 "2018-03-29T07:41:09Z")
Dear all, Could you help me eliminate jumps of Refresh Time? I wonder what else I can check/change. I would be grateful for any ideas. \[09-37-55\] Thank you! Marcin --- ## [Elasticsearch curl failed to connect to port 9200 conncetion refused](https://discuss.elastic.co/t/elasticsearch-curl-failed-to-connect-to-port-9200-conncetion-refused/126012)
**Author:** [@zqy961](https://discuss.elastic.co/u/zqy961)\ **Replies:** 4\ **Last updated:** [March 29, 2018, 7:36am UTC](https://discuss.elastic.co/t/elasticsearch-curl-failed-to-connect-to-port-9200-conncetion-refused/126012 "2018-03-29T07:36:19Z")
i install elasticsearch.6.2.3 by apt-get i didn't change elasticsearch.yml os:ubuntu 16 run elasticsearch by systemctl start elasticsearch.service when i input the command 'systemctl status elasticsearch.service' i… --- ## [Custom score for fuzzy matching based on Levenshtein distance score](https://discuss.elastic.co/t/custom-score-for-fuzzy-matching-based-on-levenshtein-distance-score/125544)
**Author:** [@maarab](https://discuss.elastic.co/u/maarab)\ **Replies:** 5\ **Last updated:** [March 29, 2018, 7:25am UTC](https://discuss.elastic.co/t/custom-score-for-fuzzy-matching-based-on-levenshtein-distance-score/125544 "2018-03-29T07:25:47Z")
I have a requirement where there needs to be custom scoring on name field based on the Levenshtein distance and not the score returned by elastic search e.g Smith vs Smith = 100%, Smith vs Smithh = 90%, Smith vs SSmi… --- ## [How to install xpack on elasticsearch hosted on docker](https://discuss.elastic.co/t/how-to-install-xpack-on-elasticsearch-hosted-on-docker/125858)
**Author:** [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\ **Replies:** 17\ **Last updated:** [March 29, 2018, 7:07am UTC](https://discuss.elastic.co/t/how-to-install-xpack-on-elasticsearch-hosted-on-docker/125858 "2018-03-29T07:07:26Z")
Please let me know how to install xpack on docker the elasticsearch version which I am using on docker is 5.6.8 . --- ## [X-pack Dashboards Split by Role](https://discuss.elastic.co/t/x-pack-dashboards-split-by-role/125208)
**Author:** [@Samau4ka](https://discuss.elastic.co/u/Samau4ka)\ **Replies:** 2\ **Last updated:** [March 29, 2018, 6:48am UTC](https://discuss.elastic.co/t/x-pack-dashboards-split-by-role/125208 "2018-03-29T06:48:16Z")
Is there any chance to use Roles in combination with Saved Objects, for example a Dashboard? To assign a user to a Dashboard or a saved search ? --- ## [Is there any authentication plugin for elasticsearch which allows me to offload all read queries from my app server?](https://discuss.elastic.co/t/is-there-any-authentication-plugin-for-elasticsearch-which-allows-me-to-offload-all-read-queries-from-my-app-server/125797)
**Author:** [@Tarun\_Jangra](https://discuss.elastic.co/u/Tarun_Jangra)\ **Replies:** 6\ **Last updated:** [March 29, 2018, 6:43am UTC](https://discuss.elastic.co/t/is-there-any-authentication-plugin-for-elasticsearch-which-allows-me-to-offload-all-read-queries-from-my-app-server/125797 "2018-03-29T06:43:57Z")
Hi Guys, I have separate elasticsearch cluster and since Elasticsearch offers API call on http(s): So i want my client to directly interface elasticsearch API using javascript. we can not allow one customer to see the … --- ## [Index storage size growth on reindex](https://discuss.elastic.co/t/index-storage-size-growth-on-reindex/126034)
**Author:** [@uoberdorf](https://discuss.elastic.co/u/uoberdorf)\ **Replies:** 0\ **Last updated:** [March 29, 2018, 6:43am UTC](https://discuss.elastic.co/t/index-storage-size-growth-on-reindex/126034 "2018-03-29T06:43:49Z")
Hi, I am using an elasticsearch cluster in version 6.2.2 for gathering and analyzing logs. The stack also includes Logstash and Kibana, both in version 6.2.2. The index mappings underwent some rework and resulted in a… --- ## [How to recover my elasticsearch cluster status to \`green\`](https://discuss.elastic.co/t/how-to-recover-my-elasticsearch-cluster-status-to-green/126030)
**Author:** [@anson\_ch](https://discuss.elastic.co/u/anson_ch)\ **Replies:** 0\ **Last updated:** [March 29, 2018, 6:16am UTC](https://discuss.elastic.co/t/how-to-recover-my-elasticsearch-cluster-status-to-green/126030 "2018-03-29T06:16:35Z")
My elasticsearch cluster have 3 nodes and both are data and master node.there are some unassigned\_shardsare UNASSIGNED, how can i resolve this problem? elasticsearch version: 2.2.0 root@elasticsearch-logging-v1-6rldl:/… --- ## [Query to match two separate events where one follows the other](https://discuss.elastic.co/t/query-to-match-two-separate-events-where-one-follows-the-other/126018)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 1\ **Last updated:** [March 29, 2018, 5:39am UTC](https://discuss.elastic.co/t/query-to-match-two-separate-events-where-one-follows-the-other/126018 "2018-03-29T05:39:19Z")
Hi, This is what my team is currently doing for log analysis using grep & excel Step 1) Find all occurrences of logs that contain PATTERN1 OR PATTERN 2. Example output: t1: Log with PATTERN1 t2: Log with PATTERN1 t… --- ## [Integration of Azure AD with Elastic for central User management](https://discuss.elastic.co/t/integration-of-azure-ad-with-elastic-for-central-user-management/124331)
**Author:** [@Jay.Dhillon](https://discuss.elastic.co/u/Jay.Dhillon)\ **Replies:** 14\ **Last updated:** [March 29, 2018, 4:59am UTC](https://discuss.elastic.co/t/integration-of-azure-ad-with-elastic-for-central-user-management/124331 "2018-03-29T04:59:27Z")
Any available guide/custom realm to integrate Azure AD with elastic? As Azure AD doesn't uses traditional ports, It seems it required to use custom realm for API. Any help will be appreciated. Thanks --- ## [Package file for X-Pack](https://discuss.elastic.co/t/package-file-for-x-pack/126002)
**Author:** [@jfreeman](https://discuss.elastic.co/u/jfreeman)\ **Replies:** 3\ **Last updated:** [March 29, 2018, 3:51am UTC](https://discuss.elastic.co/t/package-file-for-x-pack/126002 "2018-03-29T03:51:43Z")
Our elastic search environment is managed by redhat satellite server and it works well for all elastic products expect X-Pack. It's because the satellite package sync is not supported for zip file. Is there a different … --- ## [Cannot change jna file directory from /tmp to new dir || elasticsearch 6.2.3 ver](https://discuss.elastic.co/t/cannot-change-jna-file-directory-from-tmp-to-new-dir-elasticsearch-6-2-3-ver/125919)
**Author:** [@pradeep2](https://discuss.elastic.co/u/pradeep2)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 11:39am UTC](https://discuss.elastic.co/t/cannot-change-jna-file-directory-from-tmp-to-new-dir-elasticsearch-6-2-3-ver/125919 "2018-03-28T11:39:09Z")
Hi I have installed latest elasticsearch 6.2.3 ver on linux machine, i can able to start the elastic with out any errors in logs. When i verify the /tmp directory , i could see lot of directories creating with elastics… --- ## [Text-search using URI param query failing after upgrade to 6.2.2 from 5.4.1](https://discuss.elastic.co/t/text-search-using-uri-param-query-failing-after-upgrade-to-6-2-2-from-5-4-1/123368)
**Author:** [@vramakrishnan](https://discuss.elastic.co/u/vramakrishnan)\ **Replies:** 20\ **Last updated:** [March 29, 2018, 1:07am UTC](https://discuss.elastic.co/t/text-search-using-uri-param-query-failing-after-upgrade-to-6-2-2-from-5-4-1/123368 "2018-03-29T01:07:06Z")
I have a mapping for a field Tenant defined as follows. "Tenant": { "type": "keyword" }, And I use to do elastic query using URI param localhost:9200/\_search?q=foo (simple text search on "foo") and used to get ma… --- ## [Maximum number of data nodes per cluster](https://discuss.elastic.co/t/maximum-number-of-data-nodes-per-cluster/125982)
**Author:** [@mario12](https://discuss.elastic.co/u/mario12)\ **Replies:** 1\ **Last updated:** [March 28, 2018, 11:36pm UTC](https://discuss.elastic.co/t/maximum-number-of-data-nodes-per-cluster/125982 "2018-03-28T23:36:16Z")
We are running elasticsearch 2.4. One of our cluster has 123 data nodes and 5 master nodes. The cluster is provisioned on AWS and we use the i2.2xlarge instance type (8 vcpu's, 61 GB of RAM, Up to 10 Gigabit of network … --- ## [How to conditionally clone incoming documents to a different index and add a field](https://discuss.elastic.co/t/how-to-conditionally-clone-incoming-documents-to-a-different-index-and-add-a-field/125534)
**Author:** [@stoth](https://discuss.elastic.co/u/stoth)\ **Replies:** 2\ **Last updated:** [March 28, 2018, 10:16pm UTC](https://discuss.elastic.co/t/how-to-conditionally-clone-incoming-documents-to-a-different-index-and-add-a-field/125534 "2018-03-28T22:16:25Z")
I have a custom Beat publishing documents for a number of "system" types (ex. Web Server, App Server, Client Device, Database Server, etc.). Each system type can have tens, hundreds or thousands of instances (ex. Databa… --- ## [Can't get python client wait\_for\_status to work](https://discuss.elastic.co/t/cant-get-python-client-wait-for-status-to-work/123163)
**Author:** [@melissachang](https://discuss.elastic.co/u/melissachang)\ **Replies:** 1\ **Last updated:** [March 28, 2018, 8:47pm UTC](https://discuss.elastic.co/t/cant-get-python-client-wait-for-status-to-work/123163 "2018-03-28T20:47:29Z")
I'm using docker-compose to run two services: elasticsearch and a Python indexer. This works: es = Elasticsearch(\[elasticsearch\_url\]) time.sleep(30) es.indices.delete(index=index\_name) I'm trying to use wait\_for\_stat… --- ## [Elastic Elasticsearch load balancer handshake failed](https://discuss.elastic.co/t/elastic-elasticsearch-load-balancer-handshake-failed/124767)
**Author:** [@whiranpat](https://discuss.elastic.co/u/whiranpat)\ **Replies:** 0\ **Last updated:** [March 20, 2018, 1:17pm UTC](https://discuss.elastic.co/t/elastic-elasticsearch-load-balancer-handshake-failed/124767 "2018-03-20T13:17:48Z")
How do I deploy the load balancing Elasticsearch node to communicate elasticsearch cluster within Docker containers? I am running an basic elastic license. Because I am failing on the handshake between the Kibana with E… --- ## [Chain input for customized alerts during throttled period](https://discuss.elastic.co/t/chain-input-for-customized-alerts-during-throttled-period/123135)
**Author:** [@lalitlouis](https://discuss.elastic.co/u/lalitlouis)\ **Replies:** 4\ **Last updated:** [March 28, 2018, 7:13pm UTC](https://discuss.elastic.co/t/chain-input-for-customized-alerts-during-throttled-period/123135 "2018-03-28T19:13:58Z")
Hi, I'm trying to do a filesystem disk threshold alert and based on the watcher history, am trying to see if the hostname has already been alerted and if yes, remove the hostname from the first bucket. Reason we're doin… --- ## [How to force elastic to make an and between should and filter (not an or query)](https://discuss.elastic.co/t/how-to-force-elastic-to-make-an-and-between-should-and-filter-not-an-or-query/125983)
**Author:** [@David\_Michael\_Gang](https://discuss.elastic.co/u/David_Michael_Gang)\ **Replies:** 1\ **Last updated:** [March 28, 2018, 6:49pm UTC](https://discuss.elastic.co/t/how-to-force-elastic-to-make-an-and-between-should-and-filter-not-an-or-query/125983 "2018-03-28T18:49:02Z")
Hi, I want to get a message on all failed pods in the last 10 minutes. What i am getting now is all the messages of the pods failed or messages in the last 10 minutes. How can this be fixed. I tried to understand how … --- ## [Skip unavailable cluster](https://discuss.elastic.co/t/skip-unavailable-cluster/125928)
**Author:** [@Diego\_Nogueira1](https://discuss.elastic.co/u/Diego_Nogueira1)\ **Replies:** 1\ **Last updated:** [March 28, 2018, 5:48pm UTC](https://discuss.elastic.co/t/skip-unavailable-cluster/125928 "2018-03-28T17:48:24Z")
Is there any way to do this in version 5.6 of elasticsearch? Tks [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1735) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1737)