# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1859

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1860

---

## [How create an Elastic-search index from browser with username and password](https://discuss.elastic.co/t/how-create-an-elastic-search-index-from-browser-with-username-and-password/111104)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 2\
**Last updated:** [December 11, 2017, 4:02pm UTC](https://discuss.elastic.co/t/how-create-an-elastic-search-index-from-browser-with-username-and-password/111104 "2017-12-11T16:02:57Z")

</div>

Hi All , I have an working Elastic-search ( 5.6.4 ) . Lots of data indexed with logstash( Default indexes) and it is working well . All data is available in kibana also . But I want to create a new index through any br…

---

## [All shards failed exception and Elasticsearch service stopped](https://discuss.elastic.co/t/all-shards-failed-exception-and-elasticsearch-service-stopped/109961)

<div class="topic-metadata">

**Author:** [@iluvcode](https://discuss.elastic.co/u/iluvcode)\
**Replies:** 4\
**Last updated:** [December 11, 2017, 4:02pm UTC](https://discuss.elastic.co/t/all-shards-failed-exception-and-elasticsearch-service-stopped/109961 "2017-12-11T16:02:55Z")

</div>

Hi, Elasticsearch 5.3 service installed in our production server stopped by itself and after looking at the log files, i found below information. since the query is requesting 85580 records, all shards failed and elasti…

---

## [How to query empty values of number type and date type fields](https://discuss.elastic.co/t/how-to-query-empty-values-of-number-type-and-date-type-fields/108938)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 2\
**Last updated:** [December 11, 2017, 3:54pm UTC](https://discuss.elastic.co/t/how-to-query-empty-values-of-number-type-and-date-type-fields/108938 "2017-12-11T15:54:25Z")

</div>

Hi all..... we have a index having number type field which holds some empty values as well but when we try to filter empty(null) event from kibana discovery we are getting error Discover: \[parsing\_exception\] \[match\] …

---

## [Asciifolding doesn't exist anymore in 6.0.x?](https://discuss.elastic.co/t/asciifolding-doesnt-exist-anymore-in-6-0-x/111119)

<div class="topic-metadata">

**Author:** [@obruchez](https://discuss.elastic.co/u/obruchez)\
**Replies:** 3\
**Last updated:** [December 11, 2017, 3:41pm UTC](https://discuss.elastic.co/t/asciifolding-doesnt-exist-anymore-in-6-0-x/111119 "2017-12-11T15:41:52Z")

</div>

I was using a custom analyzer with two filters: lowercase + asciifolding. It doesn't work anymore in 6.0.0 and 6.0.1. The easiest way to reproduce the problem: POST /\_analyze { "tokenizer": "standard", "filter": …

---

## [Whie exporting Kibana dashboard is that possible to enable option for timeline section without enabling main left panel?](https://discuss.elastic.co/t/whie-exporting-kibana-dashboard-is-that-possible-to-enable-option-for-timeline-section-without-enabling-main-left-panel/111133)

<div class="topic-metadata">

**Author:** [@Pratik\_Kagda](https://discuss.elastic.co/u/Pratik_Kagda)\
**Replies:** 0\
**Last updated:** [December 11, 2017, 3:36pm UTC](https://discuss.elastic.co/t/whie-exporting-kibana-dashboard-is-that-possible-to-enable-option-for-timeline-section-without-enabling-main-left-panel/111133 "2017-12-11T15:36:05Z")

</div>

Hello, We have one requirement in which we wanted to export Kibana dashboard into our web application. When I try to export in iFrame I cannot see top eight timeline search selection, and when I try to remove embade=tr…

---

## [Terms lookup mechanism cause too\_many\_clauses exception](https://discuss.elastic.co/t/terms-lookup-mechanism-cause-too-many-clauses-exception/109766)

<div class="topic-metadata">

**Author:** [@xavierfacq](https://discuss.elastic.co/u/xavierfacq)\
**Replies:** 14\
**Last updated:** [December 11, 2017, 3:11pm UTC](https://discuss.elastic.co/t/terms-lookup-mechanism-cause-too-many-clauses-exception/109766 "2017-12-11T15:11:43Z")

</div>

Hi guys, I have a problem with big queries using the Terms lookup mechanism. @see https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-terms-query.html#query-dsl-terms-lookup As we have more and m…

---

## [Can Elasticsearch 1.x Discover Clusters on an IP Range?](https://discuss.elastic.co/t/can-elasticsearch-1-x-discover-clusters-on-an-ip-range/111125)

<div class="topic-metadata">

**Author:** [@Donglecow](https://discuss.elastic.co/u/Donglecow)\
**Replies:** 0\
**Last updated:** [December 11, 2017, 3:08pm UTC](https://discuss.elastic.co/t/can-elasticsearch-1-x-discover-clusters-on-an-ip-range/111125 "2017-12-11T15:08:27Z")

</div>

0 down vote favorite I have two Elasticsearch clusters set up on AWS using EC2 servers, sat behind a load balancer. I want to configure AWS to start up new instances when the load hits a certain threshold on the load ba…

---

## [Delete document in elastic in ingest based on condition](https://discuss.elastic.co/t/delete-document-in-elastic-in-ingest-based-on-condition/110838)

<div class="topic-metadata">

**Author:** [@vivekthangathurai](https://discuss.elastic.co/u/vivekthangathurai)\
**Replies:** 5\
**Last updated:** [December 11, 2017, 2:34pm UTC](https://discuss.elastic.co/t/delete-document-in-elastic-in-ingest-based-on-condition/110838 "2017-12-11T14:34:14Z")

</div>

my requirement is that I need to drop the records which are matching a condition. I am able to delete the records once it is indexed. but i would like to delete the documents using the ingest pipeline or filebeat filter. …

---

## [Unexpected behavior while restoring snapshots from 2.x to 5.x](https://discuss.elastic.co/t/unexpected-behavior-while-restoring-snapshots-from-2-x-to-5-x/110930)

<div class="topic-metadata">

**Author:** [@JohnDone](https://discuss.elastic.co/u/JohnDone)\
**Replies:** 6\
**Last updated:** [December 11, 2017, 1:35pm UTC](https://discuss.elastic.co/t/unexpected-behavior-while-restoring-snapshots-from-2-x-to-5-x/110930 "2017-12-11T13:35:26Z")

</div>

I've tried to restore snapshots from es 2.x to 5.x. I've connected newly created es 5.x to the same S3 repo as es 2.x. But let me point out that only es 2.x has been creating snapshots. Everything was fine, es 5.x has s…

---

## [Watcher Filter](https://discuss.elastic.co/t/watcher-filter/110695)

<div class="topic-metadata">

**Author:** [@Samau4ka](https://discuss.elastic.co/u/Samau4ka)\
**Replies:** 5\
**Last updated:** [December 11, 2017, 1:10pm UTC](https://discuss.elastic.co/t/watcher-filter/110695 "2017-12-11T13:10:41Z")

</div>

Hi everyone, is there somewhere A filter function for the Watcher Agent in X-pack. I wont him to count all faild logins so he can send me a email if its count over 10 trys in 15min.

---

## [Securing data by creating AD roles](https://discuss.elastic.co/t/securing-data-by-creating-ad-roles/111092)

<div class="topic-metadata">

**Author:** [@eamonn](https://discuss.elastic.co/u/eamonn)\
**Replies:** 0\
**Last updated:** [December 11, 2017, 1:07pm UTC](https://discuss.elastic.co/t/securing-data-by-creating-ad-roles/111092 "2017-12-11T13:07:54Z")

</div>

In the log collection system i am designing I want to integrate with AD and map the inbuilt roles to AD roles. Additional Elastic roles (and mapped equivalent AD roles)will be created based on the creation of new indexe…

---

## [Autocomplete suggestion XXX in Category](https://discuss.elastic.co/t/autocomplete-suggestion-xxx-in-category/111091)

<div class="topic-metadata">

**Author:** [@satz](https://discuss.elastic.co/u/satz)\
**Replies:** 0\
**Last updated:** [December 11, 2017, 1:03pm UTC](https://discuss.elastic.co/t/autocomplete-suggestion-xxx-in-category/111091 "2017-12-11T13:03:30Z")

</div>

Hello all, How to implement amazon or any other e-commerce like ' XXX in category' suggestions for products. As of elasticsearch version 5.0 , the payloads has been removed. Is there any other solution to implement …

---

## [Curator 5.4.1 exits gracefully but does nothing](https://discuss.elastic.co/t/curator-5-4-1-exits-gracefully-but-does-nothing/111071)

<div class="topic-metadata">

**Author:** [@jalker](https://discuss.elastic.co/u/jalker)\
**Replies:** 4\
**Last updated:** [December 11, 2017, 1:01pm UTC](https://discuss.elastic.co/t/curator-5-4-1-exits-gracefully-but-does-nothing/111071 "2017-12-11T13:01:37Z")

</div>

I have just installed curator 5.4.1 on a CentOS 7 machine to access an Elasticsearch 5.6 instance. The install seems okay $curator --version curator, version 5.4.1 but curator always exits gracefully with an exit sta…

---

## [Filtering nested documents](https://discuss.elastic.co/t/filtering-nested-documents/110975)

<div class="topic-metadata">

**Author:** [@jakobdo](https://discuss.elastic.co/u/jakobdo)\
**Replies:** 4\
**Last updated:** [December 11, 2017, 12:18pm UTC](https://discuss.elastic.co/t/filtering-nested-documents/110975 "2017-12-11T12:18:33Z")

</div>

Hello, i have this data (simplified): { id: 1, subs: \[ { date: "DUMMY\_DATE\_YESTERDAY" },{ date: "DUMMY\_DATE\_TODAY" },{ date: "DUMMY\_DATE\_TOMORROW" } \] } Is it possible to create…

---

## [How do you show all data in X-Pack Graph?](https://discuss.elastic.co/t/how-do-you-show-all-data-in-x-pack-graph/110365)

<div class="topic-metadata">

**Author:** [@I\_like\_dogs](https://discuss.elastic.co/u/I_like_dogs)\
**Replies:** 2\
**Last updated:** [December 11, 2017, 10:06am UTC](https://discuss.elastic.co/t/how-do-you-show-all-data-in-x-pack-graph/110365 "2017-12-11T10:06:25Z")

</div>

I want to visualize my honeypot data by showing the source IP connection to destination port. Not necessarily for analysis or drill downs, just for a visualization. I want to show all connections for all source IP's and …

---

## [Fscrawler job\_name is error](https://discuss.elastic.co/t/fscrawler-job-name-is-error/111045)

<div class="topic-metadata">

**Author:** [@wuwo1952368901](https://discuss.elastic.co/u/wuwo1952368901)\
**Replies:** 0\
**Last updated:** [December 11, 2017, 9:11am UTC](https://discuss.elastic.co/t/fscrawler-job-name-is-error/111045 "2017-12-11T09:11:20Z")

</div>

error \[f.p.e.c.f.FsCrawler\] Fatal error received while running the crawler: \[Elasticsearch exception \[type=security\_exception, reason=missing authentication token for REST request \[/\]\]\] setting: { "name" : "job\_name"…

---

## [High Ram.Percent](https://discuss.elastic.co/t/high-ram-percent/110998)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 3\
**Last updated:** [December 11, 2017, 8:59am UTC](https://discuss.elastic.co/t/high-ram-percent/110998 "2017-12-11T08:59:45Z")

</div>

Hi ALL, I have a 5 node ES 2.3.2 cluster all running as master-data enabled nodes. When I execute \_cat/nodes i see all my nodes have ram.percent having \> 95%. Each of these machines have 28GB Ram and have allocated 14G…

---

## [Returning doc values with document API?](https://discuss.elastic.co/t/returning-doc-values-with-document-api/107408)

<div class="topic-metadata">

**Author:** [@Attila\_Nagy](https://discuss.elastic.co/u/Attila_Nagy)\
**Replies:** 2\
**Last updated:** [December 11, 2017, 8:36am UTC](https://discuss.elastic.co/t/returning-doc-values-with-document-api/107408 "2017-12-11T08:36:01Z")

</div>

Hi, Search API has the possibility to return doc value fields: https://www.elastic.co/guide/en/elasticsearch/reference/current/search-request-docvalue-fields.html Is it possible to do the same, but with the document A…

---

## [Boost per search time token](https://discuss.elastic.co/t/boost-per-search-time-token/110419)

<div class="topic-metadata">

**Author:** [@karejonsson](https://discuss.elastic.co/u/karejonsson)\
**Replies:** 1\
**Last updated:** [December 11, 2017, 8:35am UTC](https://discuss.elastic.co/t/boost-per-search-time-token/110419 "2017-12-11T08:35:47Z")

</div>

From experience I want sensitivity on subwords. By adding an extensive wordlist I find the subwords but I get undesired behavior. If the subwords are frequent or appear in two fields they are higher scored than the full …

---

## [Basic word\_list problem](https://discuss.elastic.co/t/basic-word-list-problem/109661)

<div class="topic-metadata">

**Author:** [@karejonsson](https://discuss.elastic.co/u/karejonsson)\
**Replies:** 4\
**Last updated:** [December 11, 2017, 8:23am UTC](https://discuss.elastic.co/t/basic-word-list-problem/109661 "2017-12-11T08:23:55Z")

</div>

I have this { "analysis": { "filter": { "swedish\_stop": { "type": "stop", "stopwords": "\_swedish\_" }, "swedish\_stemmer": { "type": "stemmer",…

---

## [Unknown filter type \[stemmer\]](https://discuss.elastic.co/t/unknown-filter-type-stemmer/109567)

<div class="topic-metadata">

**Author:** [@karejonsson](https://discuss.elastic.co/u/karejonsson)\
**Replies:** 6\
**Last updated:** [December 11, 2017, 8:20am UTC](https://discuss.elastic.co/t/unknown-filter-type-stemmer/109567 "2017-12-11T08:20:51Z")

</div>

I have this { "analysis": { "analyzer": { "sv\_analyzer": { "type": "custom", "filter": \["standard", "lowercase", "sv\_stop\_filter", "sv\_stem"\], "tokenizer": "standard" } }…

---

## [Reindexing indices between clusters](https://discuss.elastic.co/t/reindexing-indices-between-clusters/109316)

<div class="topic-metadata">

**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\
**Replies:** 31\
**Last updated:** [December 11, 2017, 8:09am UTC](https://discuss.elastic.co/t/reindexing-indices-between-clusters/109316 "2017-12-11T08:09:55Z")

</div>

Hi @Igor\_Motov, Following our thread (closed), We consider upgrading from 1.4.7 to Elasticsearch 6 in both clusters (the one how baked the index and the serving) for using the reindex feature. It is going to be very ch…

---

## [Error code ES\_PUT\_SETTING\_ERROR and ES\_INSERT\_DOCUMENT\_ERROR with AWS ElastichSearch](https://discuss.elastic.co/t/error-code-es-put-setting-error-and-es-insert-document-error-with-aws-elastichsearch/111000)

<div class="topic-metadata">

**Author:** [@Cao\_S\_n](https://discuss.elastic.co/u/Cao_S_n)\
**Replies:** 3\
**Last updated:** [December 11, 2017, 5:25am UTC](https://discuss.elastic.co/t/error-code-es-put-setting-error-and-es-insert-document-error-with-aws-elastichsearch/111000 "2017-12-11T05:25:05Z")

</div>

Hi, I often receive error code ES\_PUT\_SETTING\_ERROR and ES\_INSERT\_DOCUMENT\_ERROR when creating indexes and document. My Elasticsearch spec AWS Elasticsearch Instances: 16 Instance type: m4.4xlarge.elasticsearch Dedic…

---

## [Enquiry about X-Pack Role Based Control for Documents](https://discuss.elastic.co/t/enquiry-about-x-pack-role-based-control-for-documents/110961)

<div class="topic-metadata">

**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\
**Replies:** 1\
**Last updated:** [December 11, 2017, 5:01am UTC](https://discuss.elastic.co/t/enquiry-about-x-pack-role-based-control-for-documents/110961 "2017-12-11T05:01:28Z")

</div>

I am looking at implementing role based access control using X-Pack on a document level. From the documentation, a role could be defined for my document like this: { "indices": \[ { "names": \[ "events-\*" \], "privileges":…

---

## [Data, config and logs are not visible](https://discuss.elastic.co/t/data-config-and-logs-are-not-visible/109747)

<div class="topic-metadata">

**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\
**Replies:** 2\
**Last updated:** [December 11, 2017, 4:51am UTC](https://discuss.elastic.co/t/data-config-and-logs-are-not-visible/109747 "2017-12-11T04:51:04Z")

</div>

Hi C:\\ProgramData\\Elastic\\Elasticsearch\\data C:\\ProgramData\\Elastic\\Elasticsearch\\config C:\\ProgramData\\Elastic\\Elasticsearch\\logs How can I see these folders? Thanks Aneesh L

---

## [I'm a noob at subnets / network masks and can't get my nodes to discover each other](https://discuss.elastic.co/t/im-a-noob-at-subnets-network-masks-and-cant-get-my-nodes-to-discover-each-other/110932)

<div class="topic-metadata">

**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\
**Replies:** 7\
**Last updated:** [December 11, 2017, 4:38am UTC](https://discuss.elastic.co/t/im-a-noob-at-subnets-network-masks-and-cant-get-my-nodes-to-discover-each-other/110932 "2017-12-11T04:38:27Z")

</div>

Can someone please tell me what I'm doing wrong? I'm using three Amazon EC2 servers and I just want them to discover each other and form a cluster. They are part of a private subnet. How should I add this to their elast…

---

## [X-Pack Security Not Working](https://discuss.elastic.co/t/x-pack-security-not-working/110408)

<div class="topic-metadata">

**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\
**Replies:** 20\
**Last updated:** [December 11, 2017, 4:10am UTC](https://discuss.elastic.co/t/x-pack-security-not-working/110408 "2017-12-11T04:10:49Z")

</div>

Hey Guys, I followed the instructions https://www.elastic.co/downloads/x-pack and configured X-PACK. I set all the passwords and then tried to go to Kibana and got Login is currently disabled. Administrators should con…

---

## [Optimal chunk size for bulk & scan](https://discuss.elastic.co/t/optimal-chunk-size-for-bulk-scan/110941)

<div class="topic-metadata">

**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\
**Replies:** 3\
**Last updated:** [December 10, 2017, 9:59pm UTC](https://discuss.elastic.co/t/optimal-chunk-size-for-bulk-scan/110941 "2017-12-10T21:59:22Z")

</div>

We are using Elasticsearch python lib. We are doing a lot of bulk and scan operations. I wonder if there is any recommendation about the optimal bulk size for write/update operations and chuck size for scan read operatio…

---

## [Does "indices.segments.memory\_in\_bytes" in Node stats API show actual memory usage in OS cache?](https://discuss.elastic.co/t/does-indices-segments-memory-in-bytes-in-node-stats-api-show-actual-memory-usage-in-os-cache/110979)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 0\
**Last updated:** [December 10, 2017, 6:22pm UTC](https://discuss.elastic.co/t/does-indices-segments-memory-in-bytes-in-node-stats-api-show-actual-memory-usage-in-os-cache/110979 "2017-12-10T18:22:30Z")

</div>

I would like to ask question about indices.segments.memory\_in\_bytes in Node Stats API . Before asking the question I have read definitive guide and understood that segments are also exists in OS cache. In my system, v…

---

## [Question about segment merging](https://discuss.elastic.co/t/question-about-segment-merging/110752)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 2\
**Last updated:** [December 10, 2017, 5:46pm UTC](https://discuss.elastic.co/t/question-about-segment-merging/110752 "2017-12-10T17:46:02Z")

</div>

Hello. I am trying to understand the Definitive Guide and would appreciate if someone can help me out clarifying my thoughts. I would like to ask two questions. \[1\] In the book it says , Elasticsearch added a tra…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1858)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1860)
