# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1782 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1783 --- ## [Can't visualize heartbeat in Kibana 5.6](https://discuss.elastic.co/t/cant-visualize-heartbeat-in-kibana-5-6/120604)
**Author:** [@ocebeci](https://discuss.elastic.co/u/ocebeci)\ **Replies:** 0\ **Last updated:** [February 20, 2018, 10:28am UTC](https://discuss.elastic.co/t/cant-visualize-heartbeat-in-kibana-5-6/120604 "2018-02-20T10:28:02Z")
Hi all, I made an upgrade to 5.6 from 5.4, now I noticed that some dashboards do not work. Everytime I select a dashboard, an error occurs with the content "Set fielddata=true or alternatively use keywords". Now I've ch… --- ## [Significant Terms aggregation around some specific event](https://discuss.elastic.co/t/significant-terms-aggregation-around-some-specific-event/120576)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 4\ **Last updated:** [February 20, 2018, 10:05am UTC](https://discuss.elastic.co/t/significant-terms-aggregation-around-some-specific-event/120576 "2018-02-20T10:05:13Z")
Hi, I am doing log analytics to debug an issue where few of our devices are randomly going for reboot. I have the uptime parameter which tell me when the device rebooted. I want to find any interesting event that occurs… --- ## [How to start elastic search in brower after installation of xpack zip in elastic search in Windows machine](https://discuss.elastic.co/t/how-to-start-elastic-search-in-brower-after-installation-of-xpack-zip-in-elastic-search-in-windows-machine/119739)
**Author:** [@John\_saida](https://discuss.elastic.co/u/John_saida)\ **Replies:** 5\ **Last updated:** [February 20, 2018, 10:04am UTC](https://discuss.elastic.co/t/how-to-start-elastic-search-in-brower-after-installation-of-xpack-zip-in-elastic-search-in-windows-machine/119739 "2018-02-20T10:04:15Z")
I was installed elastic search using zip folder in Windows machine. Xpack zip installed in elastic search... How to start elastic search in Windows machine ,How to authenticate in brower? Is there any Pop up will come… --- ## [Ingest pipeline is not being used in the events sent by filebeat](https://discuss.elastic.co/t/ingest-pipeline-is-not-being-used-in-the-events-sent-by-filebeat/120596)
**Author:** [@jeraldsm](https://discuss.elastic.co/u/jeraldsm)\ **Replies:** 0\ **Last updated:** [February 20, 2018, 9:56am UTC](https://discuss.elastic.co/t/ingest-pipeline-is-not-being-used-in-the-events-sent-by-filebeat/120596 "2018-02-20T09:56:49Z")
I have an issue where Ingest pipeline is not being used in the events sent by filebeat. I have created an ingest pipeline with simple grok patterns using put ingest API. and I use filebeat to sent events to elasticsea… --- ## [Rally Track Report Analysis](https://discuss.elastic.co/t/rally-track-report-analysis/117589)
**Author:** [@ize0j10](https://discuss.elastic.co/u/ize0j10)\ **Replies:** 6\ **Last updated:** [February 20, 2018, 9:30am UTC](https://discuss.elastic.co/t/rally-track-report-analysis/117589 "2018-02-20T09:30:29Z")
Hello, we want to get a measurement on resources that still might be available in our elasticsearch cluster. To get an idea we run Rally 0.9.: esrally --track="http\_logs" --target-hosts="node1, node2" --pipeline=bench… --- ## [Reenable \_all field](https://discuss.elastic.co/t/reenable-all-field/120580)
**Author:** [@atom](https://discuss.elastic.co/u/atom)\ **Replies:** 2\ **Last updated:** [February 20, 2018, 9:30am UTC](https://discuss.elastic.co/t/reenable-all-field/120580 "2018-02-20T09:30:14Z")
Hi There, i am upgrading our elasticsearch instance and read that \_all field is by default disabled in ES 6.x. Is there a way to reenable it temporary? Regards, Ahmet --- ## [Ingest Attachment vs Mapper Attachment - Performance/memory Issues](https://discuss.elastic.co/t/ingest-attachment-vs-mapper-attachment-performance-memory-issues/120578)
**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\ **Replies:** 0\ **Last updated:** [February 20, 2018, 9:14am UTC](https://discuss.elastic.co/t/ingest-attachment-vs-mapper-attachment-performance-memory-issues/120578 "2018-02-20T09:14:09Z")
Hi All, Earlier we were using mapper attachments with ES 2.3.2 for attachments parsing. Now with ES 5.6.4 we are making use of ingest attachment plugin by creating pipelines. What we have noticed is for the same set of … --- ## [Handle Failures in Index and Search API of High Level Client](https://discuss.elastic.co/t/handle-failures-in-index-and-search-api-of-high-level-client/119350)
**Author:** [@apoorv024](https://discuss.elastic.co/u/apoorv024)\ **Replies:** 3\ **Last updated:** [February 20, 2018, 8:49am UTC](https://discuss.elastic.co/t/handle-failures-in-index-and-search-api-of-high-level-client/119350 "2018-02-20T08:49:58Z")
I am using the Java High Level Client for indexing and searching documents in the AWS ES Cluster. I want to get answers for some basic conceptual questions: For the Index API, what is the criteria for a successful In… --- ## [Can't install X-Pack in a offline machine if Elasticseach was installed by RPM](https://discuss.elastic.co/t/cant-install-x-pack-in-a-offline-machine-if-elasticseach-was-installed-by-rpm/118911)
**Author:** [@matiasf](https://discuss.elastic.co/u/matiasf)\ **Replies:** 16\ **Last updated:** [February 20, 2018, 8:12am UTC](https://discuss.elastic.co/t/cant-install-x-pack-in-a-offline-machine-if-elasticseach-was-installed-by-rpm/118911 "2018-02-20T08:12:41Z")
Hi all, I follow this installation guide https://www.elastic.co/guide/en/elasticearch/reference/6.2/installing-xpack-es.html with Internet connection and all work fine. But now I what to do the same with the downloadin… --- ## [Backup ELK data on a URL](https://discuss.elastic.co/t/backup-elk-data-on-a-url/120557)
**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\ **Replies:** 4\ **Last updated:** [February 20, 2018, 8:01am UTC](https://discuss.elastic.co/t/backup-elk-data-on-a-url/120557 "2018-02-20T08:01:31Z")
Hi, Is there any way that I can take the snapshot of Elastic search data and push it to an URL (http) like an JFROG Artifactory (https://jfrog.com/artifactory). Thanks ! --- ## [Elastic search connection problems](https://discuss.elastic.co/t/elastic-search-connection-problems/120562)
**Author:** [@Prajakta\_Sonawane](https://discuss.elastic.co/u/Prajakta_Sonawane)\ **Replies:** 3\ **Last updated:** [February 20, 2018, 7:39am UTC](https://discuss.elastic.co/t/elastic-search-connection-problems/120562 "2018-02-20T07:39:59Z")
Hello, I am new to elasticsearch. Our project is: We have 3 servers from which the logs would be taken using filebeat. There will be one machine for alerting. So is it possible to connect filebeat which is on one machine… --- ## [Nodes leaves cluster and rejoin after sometime](https://discuss.elastic.co/t/nodes-leaves-cluster-and-rejoin-after-sometime/120543)
**Author:** [@mittal\_shah](https://discuss.elastic.co/u/mittal_shah)\ **Replies:** 2\ **Last updated:** [February 20, 2018, 6:40am UTC](https://discuss.elastic.co/t/nodes-leaves-cluster-and-rejoin-after-sometime/120543 "2018-02-20T06:40:55Z")
Hi Every one . we have two clusters . with 7 nodes in each . both of them has same config. ES 5.3.3. and ports are 9201 and 9301 one cluster is working fine. We are facing issue with another cluster. now days Nodes … --- ## [Displaying the value of the property that best matches a given search](https://discuss.elastic.co/t/displaying-the-value-of-the-property-that-best-matches-a-given-search/120555)
**Author:** [@munduruca](https://discuss.elastic.co/u/munduruca)\ **Replies:** 0\ **Last updated:** [February 20, 2018, 5:25am UTC](https://discuss.elastic.co/t/displaying-the-value-of-the-property-that-best-matches-a-given-search/120555 "2018-02-20T05:25:22Z")
Hello! I have a search box which I should use to search across multiple fields a given text. The problem is that I need to display the top ten values according to the property matching score. My "restaurant\_crew" index… --- ## [ElasticSearch BulkProcessor in elasticsearch managed service](https://discuss.elastic.co/t/elasticsearch-bulkprocessor-in-elasticsearch-managed-service/120455)
**Author:** [@chhavi\_bahekar](https://discuss.elastic.co/u/chhavi_bahekar)\ **Replies:** 8\ **Last updated:** [February 20, 2018, 5:19am UTC](https://discuss.elastic.co/t/elasticsearch-bulkprocessor-in-elasticsearch-managed-service/120455 "2018-02-20T05:19:12Z")
Hi All, i want use elasticsearch service as elasticsearch managed service .But i want know whether elasticsearch is supporting BulkProcessor support in manage sservice.For more detail about BulkProcessor Please find … --- ## [Update by query to rename fields](https://discuss.elastic.co/t/update-by-query-to-rename-fields/120552)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 2\ **Last updated:** [February 20, 2018, 4:38am UTC](https://discuss.elastic.co/t/update-by-query-to-rename-fields/120552 "2018-02-20T04:38:09Z")
Hi, I've looked all over for how to rename a field and everyone mentions doing a reindex. But isn't a script just as if not more effective (if you don't want to reindex). I just want to make sure I'm not missing somethin… --- ## [Half-dead node lead to cluster hang](https://discuss.elastic.co/t/half-dead-node-lead-to-cluster-hang/113658)
**Author:** [@ginger](https://discuss.elastic.co/u/ginger)\ **Replies:** 31\ **Last updated:** [February 20, 2018, 2:24am UTC](https://discuss.elastic.co/t/half-dead-node-lead-to-cluster-hang/113658 "2018-02-20T02:24:49Z")
Elasticsearch version (bin/elasticsearch --version): 5.6.4 JVM version (java -version): 1.8.0\_91 Description of the problem including expected versus actual behavior: In production enviroment, we have encounter hard… --- ## [X-pack on es 6.1.0 and configsync not working](https://discuss.elastic.co/t/x-pack-on-es-6-1-0-and-configsync-not-working/120532)
**Author:** [@acossette1979](https://discuss.elastic.co/u/acossette1979)\ **Replies:** 3\ **Last updated:** [February 20, 2018, 1:27am UTC](https://discuss.elastic.co/t/x-pack-on-es-6-1-0-and-configsync-not-working/120532 "2018-02-20T01:27:45Z")
Plugin is installed, but cant start \[2018-02-19T22:43:19,697\]\[ERROR\]\[o.c.e.c.s.ConfigSyncService\] \[node01\] Failed to start ConfigFileUpdater. org.elasticsearch.ElasticsearchSecurityException: action \[indices:admin/exis… --- ## [Job scheduler for ES?](https://discuss.elastic.co/t/job-scheduler-for-es/120511)
**Author:** [@Igor\_Yakushin](https://discuss.elastic.co/u/Igor_Yakushin)\ **Replies:** 3\ **Last updated:** [February 19, 2018, 9:52pm UTC](https://discuss.elastic.co/t/job-scheduler-for-es/120511 "2018-02-19T21:52:21Z")
Hello, What does ES do when multiple jobs by multiple users are submitted to ES cluster? Is it FIFO? Is there any kind of scheduler? Are jobs put on some queue or rejected while the cluster is running some job? Or do … --- ## [Deprecated field \[template\] used, replaced by \[index\_patterns\]](https://discuss.elastic.co/t/deprecated-field-template-used-replaced-by-index-patterns/120528)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 0\ **Last updated:** [February 19, 2018, 9:18pm UTC](https://discuss.elastic.co/t/deprecated-field-template-used-replaced-by-index-patterns/120528 "2018-02-19T21:18:21Z")
While I was deleting one of my old snapshot, I noticed following message: \< Warning: 299 Elasticsearch-6.2.1-7299dc3 "Deprecated field \[template\] used, replaced by \[index\_patterns\]" "Mon, 19 Feb 2018 16:52:33 GMT" ho… --- ## [Metricbeat Not Showing Up On Kibana](https://discuss.elastic.co/t/metricbeat-not-showing-up-on-kibana/116949)
**Author:** [@elJoeyJojo](https://discuss.elastic.co/u/elJoeyJojo)\ **Replies:** 3\ **Last updated:** [February 19, 2018, 8:49pm UTC](https://discuss.elastic.co/t/metricbeat-not-showing-up-on-kibana/116949 "2018-02-19T20:49:22Z")
Hello Sorry to bother you, I have a running Elasticsearch/Kibana 6.1.2 and it works fine. I can see in the "Discover" the logs that are coming from my other VM called "beat.hostname: ansible" but how the heck do you add… --- ## [Scoring In Search Result](https://discuss.elastic.co/t/scoring-in-search-result/120389)
**Author:** [@Hanish\_Bansal](https://discuss.elastic.co/u/Hanish_Bansal)\ **Replies:** 1\ **Last updated:** [February 19, 2018, 7:57pm UTC](https://discuss.elastic.co/t/scoring-in-search-result/120389 "2018-02-19T19:57:03Z")
We are building search functionality on our platform using ElasticSearch. Currently our use case is not to handle spelling mistake cases so we are not using Fuzzy search. We are using match query to return most relevant … --- ## [Long-running ForceMerge from Python API Hangs](https://discuss.elastic.co/t/long-running-forcemerge-from-python-api-hangs/120521)
**Author:** [@matt.hagenbuch](https://discuss.elastic.co/u/matt.hagenbuch)\ **Replies:** 0\ **Last updated:** [February 19, 2018, 7:51pm UTC](https://discuss.elastic.co/t/long-running-forcemerge-from-python-api-hangs/120521 "2018-02-19T19:51:17Z")
I'm requesting a long-running forcemerge (usually 1-2 hours) via Python. The issue is that even when I specify a long timeout, the Python HTTP request blocks indefinitely, even after the merge tasks finish on the ES clu… --- ## [Different memory on different nodes](https://discuss.elastic.co/t/different-memory-on-different-nodes/120513)
**Author:** [@Igor\_Yakushin](https://discuss.elastic.co/u/Igor_Yakushin)\ **Replies:** 1\ **Last updated:** [February 19, 2018, 7:47pm UTC](https://discuss.elastic.co/t/different-memory-on-different-nodes/120513 "2018-02-19T19:47:18Z")
Hello, Is it OK to configure ES on different nodes to use different amount of memory? Can one configure one node to serve as a login node to submit ES jobs but do not do any computations? Thank you, Igor --- ## [ES under Docker Swarm fails with "found existing node with the same id but is a different node instance"](https://discuss.elastic.co/t/es-under-docker-swarm-fails-with-found-existing-node-with-the-same-id-but-is-a-different-node-instance/120520)
**Author:** [@saultocsin](https://discuss.elastic.co/u/saultocsin)\ **Replies:** 0\ **Last updated:** [February 19, 2018, 7:45pm UTC](https://discuss.elastic.co/t/es-under-docker-swarm-fails-with-found-existing-node-with-the-same-id-but-is-a-different-node-instance/120520 "2018-02-19T19:45:22Z")
Hello All, Although I know my way (some) around Docker, I am very new to ES. Some environmental information: centos-release-7-4.1708.el7.centos.x86\_64 Docker version 17.12.0-ce, build c97c6d6 ES Version: 5.6.7, Buil… --- ## [Unique Index names using elastic rest client](https://discuss.elastic.co/t/unique-index-names-using-elastic-rest-client/120344)
**Author:** [@Akib\_Ali](https://discuss.elastic.co/u/Akib_Ali)\ **Replies:** 10\ **Last updated:** [February 19, 2018, 7:40pm UTC](https://discuss.elastic.co/t/unique-index-names-using-elastic-rest-client/120344 "2018-02-19T19:40:32Z")
Using ES rest client, How to get List of all unique index based on some search criterion. Below code gives my all index names but duplicate ones too. Please help. SearchSourceBuilder sourceBuilder = new SearchSou… --- ## [Elasticsearch 6.2.1](https://discuss.elastic.co/t/elasticsearch-6-2-1/120517)
**Author:** [@questar](https://discuss.elastic.co/u/questar)\ **Replies:** 2\ **Last updated:** [February 19, 2018, 7:39pm UTC](https://discuss.elastic.co/t/elasticsearch-6-2-1/120517 "2018-02-19T19:39:54Z")
Having trouble pulling down the 6.2.1 elasticsearch.jar from Maven Central. Get a SHA1-INPROGRESS and a truncated jar file. All related jars, client, core, rest-high-level and sniffer come down correctly. Tried success… --- ## [Send Index Data (data) from Elasticsearch to External Server SIEM](https://discuss.elastic.co/t/send-index-data-data-from-elasticsearch-to-external-server-siem/120512)
**Author:** [@felixon](https://discuss.elastic.co/u/felixon)\ **Replies:** 0\ **Last updated:** [February 19, 2018, 6:44pm UTC](https://discuss.elastic.co/t/send-index-data-data-from-elasticsearch-to-external-server-siem/120512 "2018-02-19T18:44:20Z")
Hi, Is there any possible way to send or pull the data stored in elasticsearch to an external server (SIEM for example)? --- ## [PKI Authentication can't map users](https://discuss.elastic.co/t/pki-authentication-cant-map-users/120385)
**Author:** [@koebane](https://discuss.elastic.co/u/koebane)\ **Replies:** 4\ **Last updated:** [February 19, 2018, 2:50pm UTC](https://discuss.elastic.co/t/pki-authentication-cant-map-users/120385 "2018-02-19T14:50:11Z")
Hello all, I am trying to setup PKI authentication on my ES cluster with X-Pack but I must have done something wrong. I have setup the roles, mappings and certificates but my filebeat (the only thing that I have tested … --- ## [Convert mongo "OR" query to equivalent ES DSL](https://discuss.elastic.co/t/convert-mongo-or-query-to-equivalent-es-dsl/120496)
**Author:** [@Zelfapp](https://discuss.elastic.co/u/Zelfapp)\ **Replies:** 0\ **Last updated:** [February 19, 2018, 4:59pm UTC](https://discuss.elastic.co/t/convert-mongo-or-query-to-equivalent-es-dsl/120496 "2018-02-19T16:59:15Z")
This mongo OR statement is a bit confusing translating to an ES DSL. Below is my attempt. Appears to be working, but would like someone more seasoned to stamp it correct or provide insight into how to do it the ES DSL wa… --- ## [Elasticsearch getting lot of logs and no memory found when trying to save record](https://discuss.elastic.co/t/elasticsearch-getting-lot-of-logs-and-no-memory-found-when-trying-to-save-record/120498)
**Author:** [@JinnaBalu](https://discuss.elastic.co/u/JinnaBalu)\ **Replies:** 0\ **Last updated:** [February 19, 2018, 5:12pm UTC](https://discuss.elastic.co/t/elasticsearch-getting-lot-of-logs-and-no-memory-found-when-trying-to-save-record/120498 "2018-02-19T17:12:07Z")
There are many logs with the same message Elasticsearch making me to resatrt every twodays. It used whole 100 GB in 4days. How to resolve this issue. \[DEBUG\]\[action.search \] \[Araki\] \[tag\]\[4\], node\[Kg3TEiKrST… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1781) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1783)