# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1848

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1849

---

## [Should the bootstrap.password in Keystore be added on all nodes?](https://discuss.elastic.co/t/should-the-bootstrap-password-in-keystore-be-added-on-all-nodes/112469)

<div class="topic-metadata">

**Author:** [@ivten](https://discuss.elastic.co/u/ivten)\
**Replies:** 2\
**Last updated:** [December 20, 2017, 8:32am UTC](https://discuss.elastic.co/t/should-the-bootstrap-password-in-keystore-be-added-on-all-nodes/112469 "2017-12-20T08:32:08Z")

</div>

Stupid question but It is not clear from the documentation of Elasticsearch 6. Should bootstrap.password be added to the Keystore on only one of the nodes, only the master nodes or all of the nodes (or maybe the nodes f…

---

## [Which one is the best to connect Mongodb and Elasticserch](https://discuss.elastic.co/t/which-one-is-the-best-to-connect-mongodb-and-elasticserch/112579)

<div class="topic-metadata">

**Author:** [@Swe\_Zin\_Phyoe](https://discuss.elastic.co/u/Swe_Zin_Phyoe)\
**Replies:** 0\
**Last updated:** [December 20, 2017, 8:05am UTC](https://discuss.elastic.co/t/which-one-is-the-best-to-connect-mongodb-and-elasticserch/112579 "2017-12-20T08:05:18Z")

</div>

These days, i found several ways to connect Mongodb with Elastic seach! But i can't still get clearly which one to use, please advice me a little? -Mongoosastic module -Mongo-ES connector -Elasticsearch-river-mongodb …

---

## [How to create Custom Discover UI like Kibana](https://discuss.elastic.co/t/how-to-create-custom-discover-ui-like-kibana/112367)

<div class="topic-metadata">

**Author:** [@nitin](https://discuss.elastic.co/u/nitin)\
**Replies:** 1\
**Last updated:** [December 20, 2017, 7:52am UTC](https://discuss.elastic.co/t/how-to-create-custom-discover-ui-like-kibana/112367 "2017-12-20T07:52:37Z")

</div>

Hi Experts, Our need is to create a search UI with same faceted search as on Kibana Discover tab. Search will be on random jsons in any Index. Can somebody tell me how to get the faceted data (What should be my ES que…

---

## [Gather timing data needed to troubleshoot latency problems in microservice architectures](https://discuss.elastic.co/t/gather-timing-data-needed-to-troubleshoot-latency-problems-in-microservice-architectures/112570)

<div class="topic-metadata">

**Author:** [@nitulkukadia](https://discuss.elastic.co/u/nitulkukadia)\
**Replies:** 0\
**Last updated:** [December 20, 2017, 7:12am UTC](https://discuss.elastic.co/t/gather-timing-data-needed-to-troubleshoot-latency-problems-in-microservice-architectures/112570 "2017-12-20T07:12:46Z")

</div>

How can I gather timing data needed to troubleshoot latency problems in microservice architectures? It could provide details same as zipkin (https://zipkin.io/).

---

## [\[elasticsearch-hadoop\] How to specify es.mapping.id value from inside a map?](https://discuss.elastic.co/t/elasticsearch-hadoop-how-to-specify-es-mapping-id-value-from-inside-a-map/112562)

<div class="topic-metadata">

**Author:** [@akshru](https://discuss.elastic.co/u/akshru)\
**Replies:** 1\
**Last updated:** [December 20, 2017, 7:03am UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-how-to-specify-es-mapping-id-value-from-inside-a-map/112562 "2017-12-20T07:03:11Z")

</div>

Hi, I am working using elasticsearch-hadoop dependency for uploading dataframes to AWS ES service. I want to specify \_id for every document that has to be uploaded. However the document id resides inside a map in my do…

---

## [Upload a license](https://discuss.elastic.co/t/upload-a-license/112499)

<div class="topic-metadata">

**Author:** [@yayitaing](https://discuss.elastic.co/u/yayitaing)\
**Replies:** 1\
**Last updated:** [December 20, 2017, 6:12am UTC](https://discuss.elastic.co/t/upload-a-license/112499 "2017-12-20T06:12:21Z")

</div>

I am trying to load the license and it generates the following error: \[image\]

---

## [ElasticSearch remove types from index](https://discuss.elastic.co/t/elasticsearch-remove-types-from-index/112429)

<div class="topic-metadata">

**Author:** [@HilalB](https://discuss.elastic.co/u/HilalB)\
**Replies:** 6\
**Last updated:** [December 19, 2017, 8:06pm UTC](https://discuss.elastic.co/t/elasticsearch-remove-types-from-index/112429 "2017-12-19T20:06:28Z")

</div>

I have an index that has several types for languages. For example, school/english, school/german. I will update the elasticsearch so I should remove the types. The index per type is not necessary. I am confused whether I…

---

## [Authentication of \[elastic\] was terminated by realm \[reserved\]](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/112206)

<div class="topic-metadata">

**Author:** [@kas-umi](https://discuss.elastic.co/u/kas-umi)\
**Replies:** 9\
**Last updated:** [December 20, 2017, 5:17am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/112206 "2017-12-20T05:17:23Z")

</div>

when install the x-pack Plugin，startup elasticsearch occurred the next ERROR INFO: Authentication of \[elastic\] was terminated by realm \[reserved\]

---

## [Structured Streaming - "Failed to find data source: es"](https://discuss.elastic.co/t/structured-streaming-failed-to-find-data-source-es/112144)

<div class="topic-metadata">

**Author:** [@polomarcus](https://discuss.elastic.co/u/polomarcus)\
**Replies:** 3\
**Last updated:** [December 20, 2017, 4:46am UTC](https://discuss.elastic.co/t/structured-streaming-failed-to-find-data-source-es/112144 "2017-12-20T04:46:52Z")

</div>

Hi, I am writing a code example for Structured streaming and elasticsearch-hadoop 6.1.0 and I encounter this error Failed to find data source: es. Would someone know why ? .format("es") My complete code example is ava…

---

## [X-forwarded-for in audit logs](https://discuss.elastic.co/t/x-forwarded-for-in-audit-logs/112531)

<div class="topic-metadata">

**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\
**Replies:** 0\
**Last updated:** [December 20, 2017, 12:52am UTC](https://discuss.elastic.co/t/x-forwarded-for-in-audit-logs/112531 "2017-12-20T00:52:26Z")

</div>

Does anyone have a good method for getting the client IP in the security index when you pass through a load balancer? I'm set up in AWS and I can see tons of anonymous\_access\_denied errors but they have the src address a…

---

## [Elaticsearch service doesn't start automatically (Windows)](https://discuss.elastic.co/t/elaticsearch-service-doesnt-start-automatically-windows/112433)

<div class="topic-metadata">

**Author:** [@teejayuu](https://discuss.elastic.co/u/teejayuu)\
**Replies:** 2\
**Last updated:** [December 19, 2017, 11:06pm UTC](https://discuss.elastic.co/t/elaticsearch-service-doesnt-start-automatically-windows/112433 "2017-12-19T23:06:18Z")

</div>

Trying to install ES to a Windows 2012 R2 server from a zip file following https://www.elastic.co/guide/en/elasticsearch/reference/current/zip-windows.html. Have set the logs and data folder to a separate location and a…

---

## [Docker image root access](https://discuss.elastic.co/t/docker-image-root-access/112515)

<div class="topic-metadata">

**Author:** [@StianOvrevage](https://discuss.elastic.co/u/StianOvrevage)\
**Replies:** 1\
**Last updated:** [December 19, 2017, 10:39pm UTC](https://discuss.elastic.co/t/docker-image-root-access/112515 "2017-12-19T22:39:55Z")

</div>

How can I log in to the official docker image as root? For example, using kubectl on Kubernetes to start a session within a container gives an unprivileged user shell. I have not found any way to start a root shell, or …

---

## [Search queries prioritization](https://discuss.elastic.co/t/search-queries-prioritization/112510)

<div class="topic-metadata">

**Author:** [@pavel-sbor](https://discuss.elastic.co/u/pavel-sbor)\
**Replies:** 1\
**Last updated:** [December 19, 2017, 9:46pm UTC](https://discuss.elastic.co/t/search-queries-prioritization/112510 "2017-12-19T21:46:48Z")

</div>

Hi, everyone! Is there any possibility to set priority to specific search queries to ElasticSearch cluster? For example, I want Kibana search queries have more priority than queries from other applications, because it's…

---

## [Failure to update x-pack license](https://discuss.elastic.co/t/failure-to-update-x-pack-license/112275)

<div class="topic-metadata">

**Author:** [@alepuccetti](https://discuss.elastic.co/u/alepuccetti)\
**Replies:** 1\
**Last updated:** [December 19, 2017, 9:04pm UTC](https://discuss.elastic.co/t/failure-to-update-x-pack-license/112275 "2017-12-19T21:04:13Z")

</div>

Hi everyone, I tried to update my license form trial to my platinum one. I was able to update the license on my production ES5.6 cluster, but I want to run some test on ES6.0 and when I try to upload the license I get t…

---

## [Elastic search snapshots to Cohesity S3 repository](https://discuss.elastic.co/t/elastic-search-snapshots-to-cohesity-s3-repository/108625)

<div class="topic-metadata">

**Author:** [@nedl](https://discuss.elastic.co/u/nedl)\
**Replies:** 1\
**Last updated:** [December 19, 2017, 8:57pm UTC](https://discuss.elastic.co/t/elastic-search-snapshots-to-cohesity-s3-repository/108625 "2017-12-19T20:57:00Z")

</div>

We would like to direct our elastic search cluster snapshots to our Cohesity S3 compliant object storage. Is there any documentation or experience in performing this? I have searched but have yet to find anything on snap…

---

## [ES 6.1.0 Aggregations Empty](https://discuss.elastic.co/t/es-6-1-0-aggregations-empty/112100)

<div class="topic-metadata">

**Author:** [@shreyask](https://discuss.elastic.co/u/shreyask)\
**Replies:** 5\
**Last updated:** [December 19, 2017, 7:50pm UTC](https://discuss.elastic.co/t/es-6-1-0-aggregations-empty/112100 "2017-12-19T19:50:54Z")

</div>

I have about 400K documents in ES (3 node cluster), the documents have following format: { "@timestamp": "2017-11-21T06:49:39.800Z", "message": "xxxx", "username": "xxxx", "geoip": { "country\_nam…

---

## [Adding a new search feature in a plugin](https://discuss.elastic.co/t/adding-a-new-search-feature-in-a-plugin/110984)

<div class="topic-metadata">

**Author:** [@Shai\_Erera](https://discuss.elastic.co/u/Shai_Erera)\
**Replies:** 16\
**Last updated:** [December 19, 2017, 7:43pm UTC](https://discuss.elastic.co/t/adding-a-new-search-feature-in-a-plugin/110984 "2017-12-19T19:43:11Z")

</div>

Hi. I am trying to add a search feature in a plugin. The feature is not e.g. a FetchSubPhase, but rather something similar to suggest/aggregation -- that is, in addition to performing the regular search request, I would …

---

## [Elasticsearch changed the field type automacatilly](https://discuss.elastic.co/t/elasticsearch-changed-the-field-type-automacatilly/112424)

<div class="topic-metadata">

**Author:** [@joao](https://discuss.elastic.co/u/joao)\
**Replies:** 2\
**Last updated:** [December 19, 2017, 7:02pm UTC](https://discuss.elastic.co/t/elasticsearch-changed-the-field-type-automacatilly/112424 "2017-12-19T19:02:44Z")

</div>

Hello, Today I saw a strange behavior in Elasticsearch. Yesterday I did this configuration: This is my log: LIBIA|42383595187|IPASGO|10.240.0.108|2017-12-18|11:23:30|LF I use this Grok: %{WORD:hostname}|%{WORD:user…

---

## [Elasticsearch puppet module issue](https://discuss.elastic.co/t/elasticsearch-puppet-module-issue/111567)

<div class="topic-metadata">

**Author:** [@AYakimenko](https://discuss.elastic.co/u/AYakimenko)\
**Replies:** 7\
**Last updated:** [December 19, 2017, 6:56pm UTC](https://discuss.elastic.co/t/elasticsearch-puppet-module-issue/111567 "2017-12-19T18:56:14Z")

</div>

Hi All, I'm trying to install Elasticsearch 6.0 via Puppet Enterprise 2016.5.x using the mod 'elastic-elasticsearch', '6.0.0' (with all necessary dependencies). In the manifest I'm calling: class { 'elasticsearch': …

---

## [Query returning false results when term exceeds ngram length](https://discuss.elastic.co/t/query-returning-false-results-when-term-exceeds-ngram-length/112392)

<div class="topic-metadata">

**Author:** [@Paul\_Davies](https://discuss.elastic.co/u/Paul_Davies)\
**Replies:** 5\
**Last updated:** [December 19, 2017, 6:54pm UTC](https://discuss.elastic.co/t/query-returning-false-results-when-term-exceeds-ngram-length/112392 "2017-12-19T18:54:12Z")

</div>

The requirement is to search partial phrases in a block of text. Most of the words will be standard length. I want to keep the max\_gram value down to 10. But there may be the occasional id/code with more characters than …

---

## [6.1.x de-guiced ActionFilter: how to get IndexResolver and TransportService?](https://discuss.elastic.co/t/6-1-x-de-guiced-actionfilter-how-to-get-indexresolver-and-transportservice/112061)

<div class="topic-metadata">

**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\
**Replies:** 3\
**Last updated:** [December 19, 2017, 6:17pm UTC](https://discuss.elastic.co/t/6-1-x-de-guiced-actionfilter-how-to-get-indexresolver-and-transportservice/112061 "2017-12-19T18:17:58Z")

</div>

Hi, I saw in 6.1. you have de-guiced the ActionFilters. How can I now get to get a grip of the things like IndexResolver and TransportService in my ActionFilter implementation? I used to inject them with Guice in my A…

---

## [Define custom ID to a document with saveJsonToES()](https://discuss.elastic.co/t/define-custom-id-to-a-document-with-savejsontoes/112490)

<div class="topic-metadata">

**Author:** [@lonlylocly](https://discuss.elastic.co/u/lonlylocly)\
**Replies:** 0\
**Last updated:** [December 19, 2017, 6:07pm UTC](https://discuss.elastic.co/t/define-custom-id-to-a-document-with-savejsontoes/112490 "2017-12-19T18:07:31Z")

</div>

I am trying to write a collection of objects in Elasticsearch from Spark. I have to meet two requirements: Document is already serialized in JSON and should be written as is Elasticsearch document \_id should be provide…

---

## [Shard's primary and replica documents inconsistency](https://discuss.elastic.co/t/shards-primary-and-replica-documents-inconsistency/112487)

<div class="topic-metadata">

**Author:** [@anosulchik](https://discuss.elastic.co/u/anosulchik)\
**Replies:** 0\
**Last updated:** [December 19, 2017, 6:00pm UTC](https://discuss.elastic.co/t/shards-primary-and-replica-documents-inconsistency/112487 "2017-12-19T18:00:58Z")

</div>

Elasticsearch version: 2.4.0 Plugins installed: cloud-aws, hq, kopf, reindexing, whatson JVM version: 1.8.0\_92 OS version: Amazon Linux Elasticsearch setup: 24 nodes with -Xms10529m -Xmx10529m for elasticsearch on e…

---

## [Elastic 6 Proof Of Concept on DC/OS and Marathon](https://discuss.elastic.co/t/elastic-6-proof-of-concept-on-dc-os-and-marathon/112484)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 0\
**Last updated:** [December 19, 2017, 5:41pm UTC](https://discuss.elastic.co/t/elastic-6-proof-of-concept-on-dc-os-and-marathon/112484 "2017-12-19T17:41:11Z")

</div>

Hi, I did a proof of concept to deploy Elastic 6 using pure marathon services. Works quite well. Here is my original post: https://groups.google.com/a/dcos.io/forum/#!topic/users/rAlicp0xbe4 Enjoy!

---

## [Count Key Occurrences in Index](https://discuss.elastic.co/t/count-key-occurrences-in-index/112477)

<div class="topic-metadata">

**Author:** [@jong99](https://discuss.elastic.co/u/jong99)\
**Replies:** 0\
**Last updated:** [December 19, 2017, 4:49pm UTC](https://discuss.elastic.co/t/count-key-occurrences-in-index/112477 "2017-12-19T16:49:47Z")

</div>

Is there a simple way to count the number of occurrences of keys in documents in an index? For example: Documents: {"a":"blah","b":2} {"a":"foo","c":4,"d":"baz"} {"a":"bar","b":2,"c":1} Result: {"a":3, "b":2, "c":…

---

## [Elasticsearch.service file issue during upgrade to 6.1](https://discuss.elastic.co/t/elasticsearch-service-file-issue-during-upgrade-to-6-1/112225)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 6\
**Last updated:** [December 19, 2017, 2:09pm UTC](https://discuss.elastic.co/t/elasticsearch-service-file-issue-during-upgrade-to-6-1/112225 "2017-12-19T14:09:55Z")

</div>

I tried to install 6.1 on my cluster which was running originally on 5.6.3. I got the same error as here. What was new to me was this statement: Yet in the elasticsearch.service file itself this was mentioned. Specif…

---

## [Multiple data paths in data node](https://discuss.elastic.co/t/multiple-data-paths-in-data-node/112239)

<div class="topic-metadata">

**Author:** [@Dibyakanta](https://discuss.elastic.co/u/Dibyakanta)\
**Replies:** 4\
**Last updated:** [December 19, 2017, 1:52pm UTC](https://discuss.elastic.co/t/multiple-data-paths-in-data-node/112239 "2017-12-19T13:52:56Z")

</div>

Hi, I have 6 Data Nodes. And I want to use multiple data paths for saving the data of all nodes. So how many paths shall I mention in each node's elasticsearch.yml file? Thanks, Dibyakanta

---

## [X-Pack installation, does not seem to be creating indices](https://discuss.elastic.co/t/x-pack-installation-does-not-seem-to-be-creating-indices/111398)

<div class="topic-metadata">

**Author:** [@ajwillo](https://discuss.elastic.co/u/ajwillo)\
**Replies:** 8\
**Last updated:** [December 19, 2017, 1:58pm UTC](https://discuss.elastic.co/t/x-pack-installation-does-not-seem-to-be-creating-indices/111398 "2017-12-19T13:58:14Z")

</div>

Hi, Im following the guide for installing x-pack https://www.elastic.co/guide/en/elasticsearch/reference/6.0/installing-xpack-es.html but when it comes to generate the passwords I am met with error: ubuntu@ip-10:~$ su…

---

## [Curl via script: Content-Type header \[application/x-www-form-urlencoded\] is not supported","status":406}curl: (6) Could not resolve host: application](https://discuss.elastic.co/t/curl-via-script-content-type-header-application-x-www-form-urlencoded-is-not-supported-status-406-curl-6-could-not-resolve-host-application/112426)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 2\
**Last updated:** [December 19, 2017, 1:49pm UTC](https://discuss.elastic.co/t/curl-via-script-content-type-header-application-x-www-form-urlencoded-is-not-supported-status-406-curl-6-could-not-resolve-host-application/112426 "2017-12-19T13:49:17Z")

</div>

Hi there, I upgraded to 6.1.0 - coming from 5.1.2. My script was running fine on 5.1.2 but I have problems with using scripted curl with 6.1.0. Maybe there is sth. wrong on my dev environment. Haven't reverted to 5.1.2…

---

## [Is it possible to have an isolated node in a cluster?](https://discuss.elastic.co/t/is-it-possible-to-have-an-isolated-node-in-a-cluster/112441)

<div class="topic-metadata">

**Author:** [@WoJ](https://discuss.elastic.co/u/WoJ)\
**Replies:** 0\
**Last updated:** [December 19, 2017, 1:32pm UTC](https://discuss.elastic.co/t/is-it-possible-to-have-an-isolated-node-in-a-cluster/112441 "2017-12-19T13:32:10Z")

</div>

Hello everyone, I have a cluster of a few nodes, all on the same subnet. They all see each other and I can query either for data (or push data to). A classical basic setup of sorts. I am now faced with the problem of h…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1847)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1849)
