# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1865

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1866

---

## [How to create a visualization to show password changes](https://discuss.elastic.co/t/how-to-create-a-visualization-to-show-password-changes/110401)

<div class="topic-metadata">

**Author:** [@bambam](https://discuss.elastic.co/u/bambam)\
**Replies:** 0\
**Last updated:** [December 5, 2017, 5:46pm UTC](https://discuss.elastic.co/t/how-to-create-a-visualization-to-show-password-changes/110401 "2017-12-05T17:46:11Z")

</div>

I'd like to create a visualization to show if password changes are made on any of the devices?

---

## [Dynamically update cloud.aws.signer on all es nodes](https://discuss.elastic.co/t/dynamically-update-cloud-aws-signer-on-all-es-nodes/110254)

<div class="topic-metadata">

**Author:** [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\
**Replies:** 3\
**Last updated:** [December 5, 2017, 5:26pm UTC](https://discuss.elastic.co/t/dynamically-update-cloud-aws-signer-on-all-es-nodes/110254 "2017-12-05T17:26:19Z")

</div>

Hi, We are using elasticsearch version 5.5.1. We are using a s3 compatible service for taking snapshots which is using the older APIs to sign the request. Hence we need to set the below setting on every node in elastic…

---

## [Error: Object field starting or ending with \[.\]](https://discuss.elastic.co/t/error-object-field-starting-or-ending-with/108994)

<div class="topic-metadata">

**Author:** [@dC7](https://discuss.elastic.co/u/dC7)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 4:01pm UTC](https://discuss.elastic.co/t/error-object-field-starting-or-ending-with/108994 "2017-12-05T16:01:40Z")

</div>

Our service is logging via fluentd to elasticsearch and I've been starting recently to fix all errors seen in the Fluentd-Logs (so I'm not quite sure if I should ask here or the fluentd-team). I'm nearly done, but I hav…

---

## [Failed to load plugin class \[org.elasticsearch.xpack.XPackPlugin\] ELASTICSEARCH](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-xpackplugin-elasticsearch/110381)

<div class="topic-metadata">

**Author:** [@yakiza](https://discuss.elastic.co/u/yakiza)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 4:00pm UTC](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-xpackplugin-elasticsearch/110381 "2017-12-05T16:00:42Z")

</div>

HEllo i have just installed x-pack on elasticsearch ,kibana, logstash and once i start elasticsearch i get this, any clues? thanks in advance Blockquote\[2017-12-05T15:00:29,194\]\[INFO \]\[o.e.n.Node \] init…

---

## [DocAsUpdate from .Net with NEST Client delay](https://discuss.elastic.co/t/docasupdate-from-net-with-nest-client-delay/110386)

<div class="topic-metadata">

**Author:** [@pdesimone](https://discuss.elastic.co/u/pdesimone)\
**Replies:** 0\
**Last updated:** [December 5, 2017, 3:38pm UTC](https://discuss.elastic.co/t/docasupdate-from-net-with-nest-client-delay/110386 "2017-12-05T15:38:48Z")

</div>

Elasticsearch server: 2.3 Elasticsearch .Net: 2.4.6 NEST: 2.4.6 var aClient = await GetElasticSearchConnection(objIndex); await aClient.UpdateAsync(new DocumentPath (objDocument), u =\> u.Index(objIndex).Doc(objDocu…

---

## [No config or log files and folders after reinstallation](https://discuss.elastic.co/t/no-config-or-log-files-and-folders-after-reinstallation/108866)

<div class="topic-metadata">

**Author:** [@ErikvdVen](https://discuss.elastic.co/u/ErikvdVen)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 3:30pm UTC](https://discuss.elastic.co/t/no-config-or-log-files-and-folders-after-reinstallation/108866 "2017-12-05T15:30:55Z")

</div>

I tried installing elasticsearch on Ubuntu Desktop 16.04.2 lts. At first, all went fine, installation including creation of configuration and log folders (and symlinks). Except for the part I forgot about installing Java…

---

## [How to set Content-type header to application/x-ndjson?](https://discuss.elastic.co/t/how-to-set-content-type-header-to-application-x-ndjson/109781)

<div class="topic-metadata">

**Author:** [@saii](https://discuss.elastic.co/u/saii)\
**Replies:** 4\
**Last updated:** [December 5, 2017, 3:21pm UTC](https://discuss.elastic.co/t/how-to-set-content-type-header-to-application-x-ndjson/109781 "2017-12-05T15:21:45Z")

</div>

Hi..I am using \_bulk for sending bulk requests to rest api..But when I run the code, I find the warning "Content type detection for rest requests is deprecated. Specify the content type using the \[Content-Type\] header.De…

---

## [Plugin security with dynamic class loading](https://discuss.elastic.co/t/plugin-security-with-dynamic-class-loading/110056)

<div class="topic-metadata">

**Author:** [@Shai\_Erera](https://discuss.elastic.co/u/Shai_Erera)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 3:05pm UTC](https://discuss.elastic.co/t/plugin-security-with-dynamic-class-loading/110056 "2017-12-05T15:05:48Z")

</div>

Hi. I implement a plugin for language analysis. It uses an Apache UIMA annotation framework, and for reasons I have not yet figured out why, that framework loads some .jar files dynamically. That is, the plugin packages …

---

## [Elastic Docker Replica Error](https://discuss.elastic.co/t/elastic-docker-replica-error/110256)

<div class="topic-metadata">

**Author:** [@Ronak\_Agrawal](https://discuss.elastic.co/u/Ronak_Agrawal)\
**Replies:** 0\
**Last updated:** [December 5, 2017, 6:18am UTC](https://discuss.elastic.co/t/elastic-docker-replica-error/110256 "2017-12-05T06:18:06Z")

</div>

I am trying to test the elastic docker. I want to create 2 node cluster (One master and the other replica). However, I am unable to create the replica node. Replica node throws an exception saying unable to connect maste…

---

## [ES 7 join datatype aggregations](https://discuss.elastic.co/t/es-7-join-datatype-aggregations/107965)

<div class="topic-metadata">

**Author:** [@franck.lefebure](https://discuss.elastic.co/u/franck.lefebure)\
**Replies:** 3\
**Last updated:** [December 5, 2017, 2:33pm UTC](https://discuss.elastic.co/t/es-7-join-datatype-aggregations/107965 "2017-12-05T14:33:19Z")

</div>

Hi, I've seen (in this blog post for example : https://www.elastic.co/blog/index-type-parent-child-join-now-future-in-elasticsearch) that has\_parent/has\_child relationships (and types) will be deprecated in favour of th…

---

## [New Structure for 6.0](https://discuss.elastic.co/t/new-structure-for-6-0/110373)

<div class="topic-metadata">

**Author:** [@DedMorozzz.kh](https://discuss.elastic.co/u/DedMorozzz.kh)\
**Replies:** 0\
**Last updated:** [December 5, 2017, 2:24pm UTC](https://discuss.elastic.co/t/new-structure-for-6-0/110373 "2017-12-05T14:24:37Z")

</div>

Hi all, I already have structure for 2.4 version. I want migrate on 6.0, and read about breaking changes about types. So, current structure is next: I have main type - publisher. And 3 "sub-types": accounts, audience a…

---

## [Elastic Search Timestamp format](https://discuss.elastic.co/t/elastic-search-timestamp-format/110199)

<div class="topic-metadata">

**Author:** [@jakelaws](https://discuss.elastic.co/u/jakelaws)\
**Replies:** 6\
**Last updated:** [December 5, 2017, 1:59pm UTC](https://discuss.elastic.co/t/elastic-search-timestamp-format/110199 "2017-12-05T13:59:06Z")

</div>

Hi, I am currently have NiFi ingesting data into our elastic search environment. We are trying to get elastic to recognize the timestamp format '2017-12-04 18:25:30.114000+00:00' but no matter what we have tried it fail…

---

## [Use default longstash template for custom index pattern](https://discuss.elastic.co/t/use-default-longstash-template-for-custom-index-pattern/110361)

<div class="topic-metadata">

**Author:** [@Nandor\_Soma\_Abonyi](https://discuss.elastic.co/u/Nandor_Soma_Abonyi)\
**Replies:** 0\
**Last updated:** [December 5, 2017, 1:25pm UTC](https://discuss.elastic.co/t/use-default-longstash-template-for-custom-index-pattern/110361 "2017-12-05T13:25:37Z")

</div>

Hello! I've recently realized, that elasticsearch uses templates that tells which types should map to variables. As far as I know without any configuration elasticsearch only uses a default template for the logstash-%{+…

---

## [Kibana not loading on chrome](https://discuss.elastic.co/t/kibana-not-loading-on-chrome/110358)

<div class="topic-metadata">

**Author:** [@pragadeesh\_dharsha](https://discuss.elastic.co/u/pragadeesh_dharsha)\
**Replies:** 0\
**Last updated:** [December 5, 2017, 1:15pm UTC](https://discuss.elastic.co/t/kibana-not-loading-on-chrome/110358 "2017-12-05T13:15:51Z")

</div>

I've installed kibana and elasticsearch of the proper version. Both of them were running properly. But now I'm unable to load kibana on my browser. But my elasticsearch is running properly on the port 9200. When I try t…

---

## [\[elasticsearch-py\] problem update array of json](https://discuss.elastic.co/t/elasticsearch-py-problem-update-array-of-json/110163)

<div class="topic-metadata">

**Author:** [@tab](https://discuss.elastic.co/u/tab)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 11:32am UTC](https://discuss.elastic.co/t/elasticsearch-py-problem-update-array-of-json/110163 "2017-12-05T11:32:53Z")

</div>

Hello, this is my first post but I spent a lot of time for searching a solution to my problem. I have a document of this type: doc = { "id": 1, "sites": { "google.com": \[{ "date": "01/01/1970", "last\_visit": "30/…

---

## [Created field not avail in ML fields](https://discuss.elastic.co/t/created-field-not-avail-in-ml-fields/110008)

<div class="topic-metadata">

**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\
**Replies:** 6\
**Last updated:** [December 5, 2017, 10:41am UTC](https://discuss.elastic.co/t/created-field-not-avail-in-ml-fields/110008 "2017-12-05T10:41:08Z")

</div>

With alot of help from the discussion board I'm getting closer to this... I created a field ... filter { if \[event\_id\] == 4688 and \[event\_data\]\[CommandLine\] !~ /"(.\*?)"/ { mutate { add\_field =\> {"event\_data.Suspici…

---

## [Aggs return details](https://discuss.elastic.co/t/aggs-return-details/110307)

<div class="topic-metadata">

**Author:** [@PENG\_ZHANG](https://discuss.elastic.co/u/PENG_ZHANG)\
**Replies:** 0\
**Last updated:** [December 5, 2017, 10:05am UTC](https://discuss.elastic.co/t/aggs-return-details/110307 "2017-12-05T10:05:49Z")

</div>

I want to know, the aggs in elasticsearch can not return column value, ok?

---

## [How to delete duplicate data on ES via fingerprint](https://discuss.elastic.co/t/how-to-delete-duplicate-data-on-es-via-fingerprint/110306)

<div class="topic-metadata">

**Author:** [@pope843](https://discuss.elastic.co/u/pope843)\
**Replies:** 0\
**Last updated:** [December 5, 2017, 10:05am UTC](https://discuss.elastic.co/t/how-to-delete-duplicate-data-on-es-via-fingerprint/110306 "2017-12-05T10:05:12Z")

</div>

hello Guys Can you help me please how to delete duplicate data on ES via fingerprint. I've already resolved the duplicate on my logstash setup/conf and now i want to clean up the duplicate data. I have sample field bel…

---

## [LDAP Realm User Cache configuration](https://discuss.elastic.co/t/ldap-realm-user-cache-configuration/110295)

<div class="topic-metadata">

**Author:** [@ize0j10](https://discuss.elastic.co/u/ize0j10)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 10:01am UTC](https://discuss.elastic.co/t/ldap-realm-user-cache-configuration/110295 "2017-12-05T10:01:22Z")

</div>

Hello, we are using elastic stack 5.6.4 and we configured elasticsearch to use LDAP realm with user cache: security: transport.ssl.enabled: true http.ssl.enabled: true authc: realms: therealm: cache: ttl: 20m t…

---

## [Boundary\_char not working as expected ES 2.3.4](https://discuss.elastic.co/t/boundary-char-not-working-as-expected-es-2-3-4/110293)

<div class="topic-metadata">

**Author:** [@valerioorfano](https://discuss.elastic.co/u/valerioorfano)\
**Replies:** 0\
**Last updated:** [December 5, 2017, 9:00am UTC](https://discuss.elastic.co/t/boundary-char-not-working-as-expected-es-2-3-4/110293 "2017-12-05T09:00:19Z")

</div>

I m using ES 2.3.4 and would like to highlight sentence cantaining matching words bordered by "." character, pratically the whole sentence. I know it was impossible with previouis versions. Is it possible now? GET /\_sea…

---

## [Does elasticsearch index file can be used in Mahout?](https://discuss.elastic.co/t/does-elasticsearch-index-file-can-be-used-in-mahout/110099)

<div class="topic-metadata">

**Author:** [@hubo3085632](https://discuss.elastic.co/u/hubo3085632)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 8:42am UTC](https://discuss.elastic.co/t/does-elasticsearch-index-file-can-be-used-in-mahout/110099 "2017-12-05T08:42:59Z")

</div>

The mahout can use lucene and solr index file to create termvector,i know the es also base on lucene,does the index can be used directly?

---

## [Index settings creation date](https://discuss.elastic.co/t/index-settings-creation-date/109380)

<div class="topic-metadata">

**Author:** [@EloaCardoso](https://discuss.elastic.co/u/EloaCardoso)\
**Replies:** 4\
**Last updated:** [December 5, 2017, 8:28am UTC](https://discuss.elastic.co/t/index-settings-creation-date/109380 "2017-12-05T08:28:53Z")

</div>

I would like to know if there is a way to use query to get the creation\_date value of an index? I really need to use query and not just: GET /\_all/\_settings/index.creation\_date

---

## [Spark: optimize partitioning](https://discuss.elastic.co/t/spark-optimize-partitioning/107425)

<div class="topic-metadata">

**Author:** [@amyantis](https://discuss.elastic.co/u/amyantis)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 8:28am UTC](https://discuss.elastic.co/t/spark-optimize-partitioning/107425 "2017-12-05T08:28:41Z")

</div>

Hi, In Spark, I am reading data from Elasticsearch. I need to group documents over the value of a specific field in order to map those groups to a function. My mapper is therefore waiting for a list of documents that as…

---

## [Executable bash script file, is possible to index into Elasticsearch](https://discuss.elastic.co/t/executable-bash-script-file-is-possible-to-index-into-elasticsearch/110280)

<div class="topic-metadata">

**Author:** [@mark.quilates](https://discuss.elastic.co/u/mark.quilates)\
**Replies:** 0\
**Last updated:** [December 5, 2017, 8:13am UTC](https://discuss.elastic.co/t/executable-bash-script-file-is-possible-to-index-into-elasticsearch/110280 "2017-12-05T08:13:01Z")

</div>

Hi Guys, Just what to ask if is it posible to get the data on executable bash script file and index it into Elasticsearch? and how to make it if posible? Can you give me an idea please. many Thanks!

---

## [Jvm heap monitoring](https://discuss.elastic.co/t/jvm-heap-monitoring/109251)

<div class="topic-metadata">

**Author:** [@msjyosh](https://discuss.elastic.co/u/msjyosh)\
**Replies:** 17\
**Last updated:** [December 5, 2017, 7:44am UTC](https://discuss.elastic.co/t/jvm-heap-monitoring/109251 "2017-12-05T07:44:45Z")

</div>

I am receiving below error message when I am trying to configure watcher for jvm heap size memory. { "error" : { "root\_cause" : \[ { "type" : "general\_script\_exception", "reason" : "failed to compile script \[ScriptE…

---

## [Elasticsearch curator not deleting indices](https://discuss.elastic.co/t/elasticsearch-curator-not-deleting-indices/110253)

<div class="topic-metadata">

**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 7:10am UTC](https://discuss.elastic.co/t/elasticsearch-curator-not-deleting-indices/110253 "2017-12-05T07:10:58Z")

</div>

Here's our actionfile :slight\_smile: actions: 1: action: delete\_indices description: \>- Delete indices older than 3 days (based on index name), for logstash- prefixed indices. Ignore the error if t…

---

## [How to modify ES to create field default values?](https://discuss.elastic.co/t/how-to-modify-es-to-create-field-default-values/110081)

<div class="topic-metadata">

**Author:** [@mark6688](https://discuss.elastic.co/u/mark6688)\
**Replies:** 4\
**Last updated:** [December 5, 2017, 6:54am UTC](https://discuss.elastic.co/t/how-to-modify-es-to-create-field-default-values/110081 "2017-12-05T06:54:55Z")

</div>

Hi Everyone. I want to know how to modify the default value of the ES creation field? For example: I'm going to insert a piece of data. Add the dizhi field, the default type is text, the participle. I want to add th…

---

## [Nest 6.0.0?](https://discuss.elastic.co/t/nest-6-0-0/108488)

<div class="topic-metadata">

**Author:** [@jxz](https://discuss.elastic.co/u/jxz)\
**Replies:** 7\
**Last updated:** [December 5, 2017, 5:35am UTC](https://discuss.elastic.co/t/nest-6-0-0/108488 "2017-12-05T05:35:25Z")

</div>

I installed Elasticsearch 6.0.0 and Kibana 6.0.0 on a new machine and tried to run a C# project built with NEST 5.5.0 on it. I then got the following error when trying to index a 2nd type against the same index: Rejecti…

---

## [What is best hardware recommendation in my use case?](https://discuss.elastic.co/t/what-is-best-hardware-recommendation-in-my-use-case/110151)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 11\
**Last updated:** [December 5, 2017, 5:20am UTC](https://discuss.elastic.co/t/what-is-best-hardware-recommendation-in-my-use-case/110151 "2017-12-05T05:20:41Z")

</div>

Hi ES Experts, I have following use case , please suggest if I am in the right direction . Daily Data volume :- 140 GB Total ES Clusters :- 7, this means I will be having total 7 different clusters (ES1 to ES7) and in…

---

## [FREE license expired and now I can't do anything](https://discuss.elastic.co/t/free-license-expired-and-now-i-cant-do-anything/110229)

<div class="topic-metadata">

**Author:** [@Adam\_Medeiros](https://discuss.elastic.co/u/Adam_Medeiros)\
**Replies:** 12\
**Last updated:** [December 5, 2017, 5:13am UTC](https://discuss.elastic.co/t/free-license-expired-and-now-i-cant-do-anything/110229 "2017-12-05T05:13:45Z")

</div>

curl -v -XPUT -u adam 'http://0.0.0.0:9200/\_license' -d /home/deploy/adam-medeiros-c6e3e22c-18c0-4b72-8023-5810ee4bed5a-v5.json Trying 0.0.0.0... Connected to 0.0.0.0 (127.0.0.1) port 9200 (#0) Server auth using Basic …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1864)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1866)
