# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1768 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1769 --- ## [More\_like\_this via Nest for document results in 500 error from ES 6.2.2](https://discuss.elastic.co/t/more-like-this-via-nest-for-document-results-in-500-error-from-es-6-2-2/122272)
**Author:** [@radleta](https://discuss.elastic.co/u/radleta)\ **Replies:** 0\ **Last updated:** [March 2, 2018, 2:32pm UTC](https://discuss.elastic.co/t/more-like-this-via-nest-for-document-results-in-500-error-from-es-6-2-2/122272 "2018-03-02T14:32:45Z")
We upgraded from ES 5.6 to ES 6.2.2 and started having an issue using .NET Nest 6.1.0 to call ES for more\_like\_this queries. This use to work against ES 5.6 but fails with ES 6.2.2. The more\_like\_this are done via docum… --- ## [Audit logs in O365 and Activity Logs in Azure](https://discuss.elastic.co/t/audit-logs-in-o365-and-activity-logs-in-azure/122269)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 0\ **Last updated:** [March 2, 2018, 2:13pm UTC](https://discuss.elastic.co/t/audit-logs-in-o365-and-activity-logs-in-azure/122269 "2018-03-02T14:13:49Z")
Hi All, Is there any way to monitor Audit logs in Office365 and Activity Logs in Azure through elasticsearch , so we could create dashboards with kibana and XPack for additional benefits. Thanks, Raj --- ## [Too many connections to active directory](https://discuss.elastic.co/t/too-many-connections-to-active-directory/122264)
**Author:** [@zeenon](https://discuss.elastic.co/u/zeenon)\ **Replies:** 0\ **Last updated:** [March 2, 2018, 2:00pm UTC](https://discuss.elastic.co/t/too-many-connections-to-active-directory/122264 "2018-03-02T14:00:34Z")
We have authentication with Active directory and all is OK. Our administrator complains about too many requests and in our log file, we have 4 messages each 10 seconds for the single connected user. Is it possible to re… --- ## [Bulk-update using Rest Client throws IOException](https://discuss.elastic.co/t/bulk-update-using-rest-client-throws-ioexception/121205)
**Author:** [@shobhana](https://discuss.elastic.co/u/shobhana)\ **Replies:** 1\ **Last updated:** [March 2, 2018, 1:36pm UTC](https://discuss.elastic.co/t/bulk-update-using-rest-client-throws-ioexception/121205 "2018-03-02T13:36:08Z")
I am trying to bulk update few fields in my documents using Rest Client. Here is how my code looks like : String updateLastUsedTimeInBulkPath = "/\_bulk"; // Tried with just "\_bulk" also StringEntity updateLastUsedTimeRe… --- ## [Elastic Stack and GDPR (reloaded)](https://discuss.elastic.co/t/elastic-stack-and-gdpr-reloaded/121121)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 3\ **Last updated:** [March 2, 2018, 1:15pm UTC](https://discuss.elastic.co/t/elastic-stack-and-gdpr-reloaded/121121 "2018-03-02T13:15:43Z")
Since the topic is closed, I'm continuing the discussion from General Data Protection Regulation (GDPR) because I believe it can be of general interest (especially given the timing): First of all thank you @sihil for br… --- ## [DataTable in json](https://discuss.elastic.co/t/datatable-in-json/122211)
**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\ **Replies:** 5\ **Last updated:** [March 2, 2018, 1:03pm UTC](https://discuss.elastic.co/t/datatable-in-json/122211 "2018-03-02T13:03:06Z")
Hello,I'm going to use elasticsearch with php so i need to make some queries using json.0 i've searched throw the documentation but i didn't find how to make a datatable using json. --- ## [Elasticsearch Timelion search exception error](https://discuss.elastic.co/t/elasticsearch-timelion-search-exception-error/122251)
**Author:** [@Paul\_Cadd](https://discuss.elastic.co/u/Paul_Cadd)\ **Replies:** 0\ **Last updated:** [March 2, 2018, 12:36pm UTC](https://discuss.elastic.co/t/elasticsearch-timelion-search-exception-error/122251 "2018-03-02T12:36:53Z")
Hi all, I have searched through the forum and found 'similar' issues but no solution to an issue that I am having with a new Timelion ES search which I created. What happens is the search causes one of 2 errors. Either … --- ## [Aggregate / reformat search results from buckets into new fields](https://discuss.elastic.co/t/aggregate-reformat-search-results-from-buckets-into-new-fields/122240)
**Author:** [@vicpav](https://discuss.elastic.co/u/vicpav)\ **Replies:** 0\ **Last updated:** [March 2, 2018, 11:40am UTC](https://discuss.elastic.co/t/aggregate-reformat-search-results-from-buckets-into-new-fields/122240 "2018-03-02T11:40:13Z")
We are using ELK 5.6.8 and I am trying to setup search for a watcher that would periodically go through the logs and do the following: search for a certain string in a field aggregate the results per host filter out th… --- ## [Maximum limit of chunk size parameter in python client](https://discuss.elastic.co/t/maximum-limit-of-chunk-size-parameter-in-python-client/122239)
**Author:** [@paulocoehlo1992](https://discuss.elastic.co/u/paulocoehlo1992)\ **Replies:** 0\ **Last updated:** [March 2, 2018, 11:38am UTC](https://discuss.elastic.co/t/maximum-limit-of-chunk-size-parameter-in-python-client/122239 "2018-03-02T11:38:25Z")
Hi all i am using python client/ bulk API for inserting my data . I want to know the maximum number of records that i can insert in one go ? What factors determine this ? Does the size of individual docs affects this ? --- ## [java.net.SocketPermission access denied for custom plugin for ES 6.1.2](https://discuss.elastic.co/t/java-net-socketpermission-access-denied-for-custom-plugin-for-es-6-1-2/121895)
**Author:** [@ropal](https://discuss.elastic.co/u/ropal)\ **Replies:** 4\ **Last updated:** [March 2, 2018, 11:16am UTC](https://discuss.elastic.co/t/java-net-socketpermission-access-denied-for-custom-plugin-for-es-6-1-2/121895 "2018-03-02T11:16:38Z")
I am using apache httpcore-nio to make an http request from my ES plugin to another application. Even after adding permission in plugin security policy file and wrapping the call with AccessController.doPrivileged in my … --- ## [Completion suggester score for prefix search](https://discuss.elastic.co/t/completion-suggester-score-for-prefix-search/121971)
**Author:** [@Andy\_Zhou](https://discuss.elastic.co/u/Andy_Zhou)\ **Replies:** 0\ **Last updated:** [March 1, 2018, 2:41am UTC](https://discuss.elastic.co/t/completion-suggester-score-for-prefix-search/121971 "2018-03-01T02:41:00Z")
I am trying to understand how the score works for completion suggester. When I tested with the prefix search, the score always returns 1.0. Below is my testing: 1): Create one index with suggest field: PUT testidx { … --- ## [Filtering log file](https://discuss.elastic.co/t/filtering-log-file/122029)
**Author:** [@joshi12](https://discuss.elastic.co/u/joshi12)\ **Replies:** 1\ **Last updated:** [March 1, 2018, 12:44pm UTC](https://discuss.elastic.co/t/filtering-log-file/122029 "2018-03-01T12:44:56Z")
I have inserted a database log file into elasticsearch and viewed in kibana, now when i search for a error it justs matches those lines and displays , but i want the matched line and also the next consecutive lines of t… --- ## [Forcing shard reroute during rolling restart is faster than waiting for recovery](https://discuss.elastic.co/t/forcing-shard-reroute-during-rolling-restart-is-faster-than-waiting-for-recovery/122224)
**Author:** [@Guillaume\_Lederrey](https://discuss.elastic.co/u/Guillaume_Lederrey)\ **Replies:** 0\ **Last updated:** [March 2, 2018, 10:19am UTC](https://discuss.elastic.co/t/forcing-shard-reroute-during-rolling-restart-is-faster-than-waiting-for-recovery/122224 "2018-03-02T10:19:37Z")
I have been experimenting to optimize the time it takes to restart our 2 elasticsearch clusters of 36 notes each. And I found a somewhat unorthodox way to speed up things. Some context: We are at the moment running elas… --- ## [Does increase in shards per index increase the performance?](https://discuss.elastic.co/t/does-increase-in-shards-per-index-increase-the-performance/120141)
**Author:** [@SRIpandu1729](https://discuss.elastic.co/u/SRIpandu1729)\ **Replies:** 12\ **Last updated:** [March 2, 2018, 8:58am UTC](https://discuss.elastic.co/t/does-increase-in-shards-per-index-increase-the-performance/120141 "2018-03-02T08:58:11Z")
I am running elasticstack on a single machine, so I am unable to create replicas and I don't want to run multiple nodes on the same machine. So does the increase in number of shards increase the query performance of elas… --- ## [Elasticsearch 6.2.2 Edition 9300 port startup failure?](https://discuss.elastic.co/t/elasticsearch-6-2-2-edition-9300-port-startup-failure/122180)
**Author:** [@abc965432](https://discuss.elastic.co/u/abc965432)\ **Replies:** 1\ **Last updated:** [March 2, 2018, 8:39am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-2-edition-9300-port-startup-failure/122180 "2018-03-02T08:39:43Z")
The configuration information is as follows : transport.host: 192.168.33.10 transport.tcp.port: 9300 network.host: 192.168.33.10 http.port: 9200 Start the times wrong: \[2018-03-01T09:56:53,348\]\[INFO \]\[o.e.t.Transpo… --- ## [Elasticsearch using Java](https://discuss.elastic.co/t/elasticsearch-using-java/122181)
**Author:** [@Rohit\_Garate](https://discuss.elastic.co/u/Rohit_Garate)\ **Replies:** 1\ **Last updated:** [March 2, 2018, 8:38am UTC](https://discuss.elastic.co/t/elasticsearch-using-java/122181 "2018-03-02T08:38:01Z")
I have a use case where i want to make search within the billions of records. I wanted to display that much data on my UI. I knw i can do with pagination but the thing is data is huge nd we dont want to create any perfor… --- ## [Creating visualizations directly using REST API](https://discuss.elastic.co/t/creating-visualizations-directly-using-rest-api/122202)
**Author:** [@Sungsu\_Kim](https://discuss.elastic.co/u/Sungsu_Kim)\ **Replies:** 0\ **Last updated:** [March 2, 2018, 6:54am UTC](https://discuss.elastic.co/t/creating-visualizations-directly-using-rest-api/122202 "2018-03-02T06:54:03Z")
Hi, I had created visualization by using elasticsearch REST API. In elk 2.x version, this method worked fine. However, after I updated my elk to 6.2.1, there are some problems. Version 2.x... I created visualization … --- ## [Question about behavior of query\_string](https://discuss.elastic.co/t/question-about-behavior-of-query-string/122193)
**Author:** [@Tao\_Liu1](https://discuss.elastic.co/u/Tao_Liu1)\ **Replies:** 0\ **Last updated:** [March 2, 2018, 5:34am UTC](https://discuss.elastic.co/t/question-about-behavior-of-query-string/122193 "2018-03-02T05:34:40Z")
Hi, I was searching for multiple fields in Kibana and I knew that the search string would be part of the query\_string. However, there are something I don't fully understand. When I use an empty string like status:"", K… --- ## [Get Last Document Stored based on the Unique Field Type](https://discuss.elastic.co/t/get-last-document-stored-based-on-the-unique-field-type/122192)
**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\ **Replies:** 0\ **Last updated:** [March 2, 2018, 5:21am UTC](https://discuss.elastic.co/t/get-last-document-stored-based-on-the-unique-field-type/122192 "2018-03-02T05:21:41Z")
Hi, I have the documents storing on elastic search every hour and have the index as (testing-2018-03-12) which has some fields. How do I return only the last documents based on a field ? Example: Doc1: User: Paul a… --- ## [Assignment of QueryBuilder variable is by refrence?](https://discuss.elastic.co/t/assignment-of-querybuilder-variable-is-by-refrence/122190)
**Author:** [@joker](https://discuss.elastic.co/u/joker)\ **Replies:** 0\ **Last updated:** [March 2, 2018, 4:50am UTC](https://discuss.elastic.co/t/assignment-of-querybuilder-variable-is-by-refrence/122190 "2018-03-02T04:50:08Z")
While doing this =\> public void fun1(){ QueryBuilder qb1 = ...build a query by, say, two must conditions... fun2(qb1); } public void fun2(QueryBuilder qb1){ QueryBuilder qb2 = qb1;// why they have same refr… --- ## ["attribute" feature in elasticsearch](https://discuss.elastic.co/t/attribute-feature-in-elasticsearch/122178)
**Author:** [@Gaurav\_Harsola](https://discuss.elastic.co/u/Gaurav_Harsola)\ **Replies:** 0\ **Last updated:** [March 2, 2018, 3:13am UTC](https://discuss.elastic.co/t/attribute-feature-in-elasticsearch/122178 "2018-03-02T03:13:35Z")
Using "attribute" feature, how can we group nodes within a Elastic search cluster for auto-discovery purpose. --- ## [Painless scripted fields with regex](https://discuss.elastic.co/t/painless-scripted-fields-with-regex/121430)
**Author:** [@bluemalkin](https://discuss.elastic.co/u/bluemalkin)\ **Replies:** 7\ **Last updated:** [March 2, 2018, 2:32am UTC](https://discuss.elastic.co/t/painless-scripted-fields-with-regex/121430 "2018-03-02T02:32:52Z")
Hi, ES/Kibana version: 6.2.1 + fluentd I'm trying to workout why simple regex do not work I have enabled script.painless.regex.enabled in elasticsearch.yml I've followed Using Painless in Kibana scripted fields | Ela… --- ## [Paged search data duplication](https://discuss.elastic.co/t/paged-search-data-duplication/121995)
**Author:** [@f31c59547d1455e5f346](https://discuss.elastic.co/u/f31c59547d1455e5f346)\ **Replies:** 3\ **Last updated:** [March 2, 2018, 2:09am UTC](https://discuss.elastic.co/t/paged-search-data-duplication/121995 "2018-03-02T02:09:32Z")
Elasticsearc version (5.3.0) The first page of the page is normal, and the second page has the same data as the first page. \[image\] How to optimize --- ## [Renaming an index](https://discuss.elastic.co/t/renaming-an-index/122134)
**Author:** [@jchannon](https://discuss.elastic.co/u/jchannon)\ **Replies:** 1\ **Last updated:** [March 2, 2018, 1:26am UTC](https://discuss.elastic.co/t/renaming-an-index/122134 "2018-03-02T01:26:45Z")
Hi, I'm trying to think of a better approach than this (bearing in mind our application and logs and ES is on-prem): a) Customer sends an elasticdump of their data and their indexes will be in the format of fluend-YYYY… --- ## [Elastic.co new cluster: set reindex.remote.whitelist](https://discuss.elastic.co/t/elastic-co-new-cluster-set-reindex-remote-whitelist/121947)
**Author:** [@ar21](https://discuss.elastic.co/u/ar21)\ **Replies:** 2\ **Last updated:** [March 2, 2018, 1:16am UTC](https://discuss.elastic.co/t/elastic-co-new-cluster-set-reindex-remote-whitelist/121947 "2018-03-02T01:16:16Z")
I am trying to upgrade from ES 2.4 to 6.2 using the "reindex from remote" approach. I am using elastic.co hosted service for the existing 2.4 cluster. I am trying to create a new 6.2 cluster, also on elastic.co. If I set… --- ## [Ingest attachment plugin not analysing some html files](https://discuss.elastic.co/t/ingest-attachment-plugin-not-analysing-some-html-files/121777)
**Author:** [@aniket\_savanand](https://discuss.elastic.co/u/aniket_savanand)\ **Replies:** 14\ **Last updated:** [March 2, 2018, 1:02am UTC](https://discuss.elastic.co/t/ingest-attachment-plugin-not-analysing-some-html-files/121777 "2018-03-02T01:02:44Z")
Hi I'm using elasticsearch ingest attachment plugin to ingest HTML files into the Elasticsearch 6.1.3. Whenever I am seeing contents of my attachment, some HTML files are getting parsed(removing html tag and all) but so… --- ## [Word / PDF document snippet rendering in search](https://discuss.elastic.co/t/word-pdf-document-snippet-rendering-in-search/122171)
**Author:** [@twild](https://discuss.elastic.co/u/twild)\ **Replies:** 0\ **Last updated:** [March 2, 2018, 12:30am UTC](https://discuss.elastic.co/t/word-pdf-document-snippet-rendering-in-search/122171 "2018-03-02T00:30:37Z")
I'm interested in building a software system which will connect to various document sources, extract the content from the documents contained within each source, and make the extracted content available to a search engin… --- ## [Watcher alerting for winlogbeat](https://discuss.elastic.co/t/watcher-alerting-for-winlogbeat/122096)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 1\ **Last updated:** [March 1, 2018, 11:15pm UTC](https://discuss.elastic.co/t/watcher-alerting-for-winlogbeat/122096 "2018-03-01T23:15:20Z")
Hi, I need to have watcher enabled or machine learning enabled for this specific function. I have a saved search in kibana named as – Windows Event ID - 4740 - Account Lockout It is a filter for only the event id 474… --- ## [Count property ocurrence in documents](https://discuss.elastic.co/t/count-property-ocurrence-in-documents/122165)
**Author:** [@kunde](https://discuss.elastic.co/u/kunde)\ **Replies:** 0\ **Last updated:** [March 1, 2018, 11:08pm UTC](https://discuss.elastic.co/t/count-property-ocurrence-in-documents/122165 "2018-03-01T23:08:01Z")
I'm not sure that title is descriptive enough, but here is the situation. I have languages in my mappings like this: { .... "description": { "properties": { "en": { "type": "… --- ## [Warning Messages](https://discuss.elastic.co/t/warning-messages/121952)
**Author:** [@phil.zac](https://discuss.elastic.co/u/phil.zac)\ **Replies:** 6\ **Last updated:** [March 1, 2018, 11:01pm UTC](https://discuss.elastic.co/t/warning-messages/121952 "2018-03-01T23:01:32Z")
Newbie here. Tried to search all google but not sure where to get solution. Could you please let me know what went wrong. Here is the part of the Warning I am getting. Blockquote T22:05:16.847Z\] \[2018-02-28T17:05:1… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1767) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1769)