# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1873 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1874 --- ## [Please delete 4](https://discuss.elastic.co/t/please-delete-4/109492)
**Author:** [@AndyB](https://discuss.elastic.co/u/AndyB)\ **Replies:** 2\ **Last updated:** [November 29, 2017, 12:13am UTC](https://discuss.elastic.co/t/please-delete-4/109492 "2017-11-29T00:13:22Z")
please delete --- ## [Elasticsearch 6.0: how to install license plugin](https://discuss.elastic.co/t/elasticsearch-6-0-how-to-install-license-plugin/109455)
**Author:** [@bradley](https://discuss.elastic.co/u/bradley)\ **Replies:** 3\ **Last updated:** [November 28, 2017, 10:04pm UTC](https://discuss.elastic.co/t/elasticsearch-6-0-how-to-install-license-plugin/109455 "2017-11-28T22:04:21Z")
See my question here: https://stackoverflow.com/questions/47539110/elasticsearch-6-0-how-to-install-license-plugin I can't seem to install the license plugin from the guide. It is not clear from the documentation what E… --- ## [Grouping values of specific field with count](https://discuss.elastic.co/t/grouping-values-of-specific-field-with-count/109082)
**Author:** [@wassx](https://discuss.elastic.co/u/wassx)\ **Replies:** 2\ **Last updated:** [November 28, 2017, 9:40pm UTC](https://discuss.elastic.co/t/grouping-values-of-specific-field-with-count/109082 "2017-11-28T21:40:27Z")
Hi! I can't find a query to get all distinct values of a field grouped and with a count of their occurrance. So i have e.g. 10 documents with a field "info". "Info" has various values. Output should be something like: … --- ## [Group data on aggregations](https://discuss.elastic.co/t/group-data-on-aggregations/109476)
**Author:** [@arkkanoid](https://discuss.elastic.co/u/arkkanoid)\ **Replies:** 0\ **Last updated:** [November 28, 2017, 9:28pm UTC](https://discuss.elastic.co/t/group-data-on-aggregations/109476 "2017-11-28T21:28:40Z")
Hi, I've some related terms in a field, with the graph tool I can connect it: \[59\] What I'm looking for is a way to group all this terms as one in an aggregation. What I get now: skills: Descending | Count agile and… --- ## [French logs](https://discuss.elastic.co/t/french-logs/109081)
**Author:** [@s.essa](https://discuss.elastic.co/u/s.essa)\ **Replies:** 9\ **Last updated:** [November 28, 2017, 9:05pm UTC](https://discuss.elastic.co/t/french-logs/109081 "2017-11-28T21:05:05Z")
Can the Elastic Stack accept and parse logs in French? The logs would be coming from equipment that is configured in french and, for example, fields will be arriving in french. Can ES parse these properly? As far as I… --- ## [Datehistogram returning key\_as\_string in different formats between different clusters?](https://discuss.elastic.co/t/datehistogram-returning-key-as-string-in-different-formats-between-different-clusters/109470)
**Author:** [@esmattdawson](https://discuss.elastic.co/u/esmattdawson)\ **Replies:** 0\ **Last updated:** [November 28, 2017, 8:38pm UTC](https://discuss.elastic.co/t/datehistogram-returning-key-as-string-in-different-formats-between-different-clusters/109470 "2017-11-28T20:38:03Z")
ES version 5.6.3 / 5.6.4 I have an index with a date field of format "strict\_date\_time\_no\_millis||strict\_date\_time" When I do a date histogram in 5.6.4 it returns the key\_as\_string using strict\_date\_time\_no\_millis form… --- ## [Open source software for basic and role-managed access / authentication to Kibana and ElasticSearch](https://discuss.elastic.co/t/open-source-software-for-basic-and-role-managed-access-authentication-to-kibana-and-elasticsearch/109467)
**Author:** [@parora236](https://discuss.elastic.co/u/parora236)\ **Replies:** 1\ **Last updated:** [November 28, 2017, 8:19pm UTC](https://discuss.elastic.co/t/open-source-software-for-basic-and-role-managed-access-authentication-to-kibana-and-elasticsearch/109467 "2017-11-28T20:19:32Z")
Could someone recommend an open source software for basic and role-managed access / authentication to Kibana and ElasticSearch? Since X-pack is paid after 30-days trial version is used, so we are looking to find an alte… --- ## [Cluster Horizontal Scaling](https://discuss.elastic.co/t/cluster-horizontal-scaling/109447)
**Author:** [@Zhengcong\_Yin](https://discuss.elastic.co/u/Zhengcong_Yin)\ **Replies:** 4\ **Last updated:** [November 28, 2017, 7:30pm UTC](https://discuss.elastic.co/t/cluster-horizontal-scaling/109447 "2017-11-28T19:30:30Z")
ES is designed for horizontal scaling. Does it mean more node add to the cluster, the search performance could performance faster? I executed the same query on a single node and a cluster contains 3 master, 4 data, 1 cl… --- ## [Delete / Update Document impact in document frequency](https://discuss.elastic.co/t/delete-update-document-impact-in-document-frequency/109458)
**Author:** [@rkrombho](https://discuss.elastic.co/u/rkrombho)\ **Replies:** 0\ **Last updated:** [November 28, 2017, 7:21pm UTC](https://discuss.elastic.co/t/delete-update-document-impact-in-document-frequency/109458 "2017-11-28T19:21:57Z")
Hi, it looks like updating a document (which just marks the old one as deleted) does not remove term statictics from the old version of the document. The old/deleted Document still seem to be included in the document f… --- ## [Elasticsearch: OpenJDK 64-Bit Server VM warning](https://discuss.elastic.co/t/elasticsearch-openjdk-64-bit-server-vm-warning/109428)
**Author:** [@chenfan](https://discuss.elastic.co/u/chenfan)\ **Replies:** 1\ **Last updated:** [November 28, 2017, 6:46pm UTC](https://discuss.elastic.co/t/elasticsearch-openjdk-64-bit-server-vm-warning/109428 "2017-11-28T18:46:49Z")
i hava a quesstion for it,when i have install x-pack6.0 and add "action.auto\_create\_index: .security,.monitoring\*,.watches,.triggered\_watches,.watcher-history\*,.ml\*"=\>/etc/elasticsearch/elasticsearch.yml /usr/share/ela… --- ## [Default.path.data issue when path.data is changed in elasticsearch](https://discuss.elastic.co/t/default-path-data-issue-when-path-data-is-changed-in-elasticsearch/107288)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 13\ **Last updated:** [November 28, 2017, 5:47pm UTC](https://discuss.elastic.co/t/default-path-data-issue-when-path-data-is-changed-in-elasticsearch/107288 "2017-11-28T17:47:34Z")
Hi, I am getting the following error when I change path.data to /opt/elk, java.lang.IllegalStateException: detected index data in default.path.data \[/var/lib/elasticsearch\] where there should not be any; check the logs… --- ## [Get given number of aggregations and merge values to a single array](https://discuss.elastic.co/t/get-given-number-of-aggregations-and-merge-values-to-a-single-array/109450)
**Author:** [@eshlox](https://discuss.elastic.co/u/eshlox)\ **Replies:** 0\ **Last updated:** [November 28, 2017, 5:45pm UTC](https://discuss.elastic.co/t/get-given-number-of-aggregations-and-merge-values-to-a-single-array/109450 "2017-11-28T17:45:22Z")
Hi, I have an index with mapping like this: { "index-name": { "mappings": { "my\_search": { "dynamic": "strict", "properties": { "event\_categor… --- ## [Dynamic resource writes does not work](https://discuss.elastic.co/t/dynamic-resource-writes-does-not-work/109314)
**Author:** [@lea4n](https://discuss.elastic.co/u/lea4n)\ **Replies:** 1\ **Last updated:** [November 28, 2017, 5:40pm UTC](https://discuss.elastic.co/t/dynamic-resource-writes-does-not-work/109314 "2017-11-28T17:40:35Z")
We use es-hadoop in our storm topo, and get the index name from the data being streamed to Elasticsearch according to the doc. Unfortunately, It always report an error, the variable does not exist. My code is like \[im… --- ## [Elastic search error after restart](https://discuss.elastic.co/t/elastic-search-error-after-restart/109440)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 0\ **Last updated:** [November 28, 2017, 4:37pm UTC](https://discuss.elastic.co/t/elastic-search-error-after-restart/109440 "2017-11-28T16:37:22Z")
Hi all , I am installed ELK 5.4.1 and Xpack 5.4.1 Successfully and Uploaded Apache log in it ( Almost 100000 logs) When I am indexing first time it is working well . Showed data in Kibana. ( I am deleted some wrogly in… --- ## [MLT on keyword fields](https://discuss.elastic.co/t/mlt-on-keyword-fields/109272)
**Author:** [@adam3](https://discuss.elastic.co/u/adam3)\ **Replies:** 1\ **Last updated:** [November 28, 2017, 4:27pm UTC](https://discuss.elastic.co/t/mlt-on-keyword-fields/109272 "2017-11-28T16:27:29Z")
Using Elasticsearch 5.3. this query yields no results despite there being a bunch of docs with those tracks in them. { "from" : 0, "size" : 10, "query" : { "more\_like\_this" : { "fields" : \["tracks" \], "like" : \[ … --- ## [Query with multiple indices vs a unique index?](https://discuss.elastic.co/t/query-with-multiple-indices-vs-a-unique-index/109430)
**Author:** [@samia](https://discuss.elastic.co/u/samia)\ **Replies:** 1\ **Last updated:** [November 28, 2017, 4:17pm UTC](https://discuss.elastic.co/t/query-with-multiple-indices-vs-a-unique-index/109430 "2017-11-28T16:17:51Z")
Hello, I have a daily index of log where I have something like : \[date and time\] \[ Client ID \] \[Other fields\] My daily indices are created on a daily basis via Logstash. I'd like to create a vizualisation in Kibana… --- ## [ElasticSearch suddenly stops](https://discuss.elastic.co/t/elasticsearch-suddenly-stops/106188)
**Author:** [@ImMike](https://discuss.elastic.co/u/ImMike)\ **Replies:** 2\ **Last updated:** [November 28, 2017, 3:05pm UTC](https://discuss.elastic.co/t/elasticsearch-suddenly-stops/106188 "2017-11-28T15:05:44Z")
it works 3 or 4 days and then suddenly stop working :frowning: here is the log \[2017-10-31T02:21:34,345\]\[INFO \]\[o.e.c.r.a.DiskThresholdMonitor\] \[loMT4go\] low disk watermark \[85%\] exceeded on \[loMT4goJQc6ws1s0AgTVcg\]\[lo… --- ## [How to ship slow log to kibana](https://discuss.elastic.co/t/how-to-ship-slow-log-to-kibana/109410)
**Author:** [@Moadh](https://discuss.elastic.co/u/Moadh)\ **Replies:** 1\ **Last updated:** [November 28, 2017, 2:49pm UTC](https://discuss.elastic.co/t/how-to-ship-slow-log-to-kibana/109410 "2017-11-28T14:49:51Z")
Hi, I am wondering if there is a way to ship elasticsearch slow.log to display it in kibana, maybe via X-Pack. Without having to use FileBeats and logstash on each node. Thanks a lot. Moadh --- ## [How to search xml data precisely](https://discuss.elastic.co/t/how-to-search-xml-data-precisely/109319)
**Author:** [@HelloUniverse](https://discuss.elastic.co/u/HelloUniverse)\ **Replies:** 2\ **Last updated:** [November 28, 2017, 2:49pm UTC](https://discuss.elastic.co/t/how-to-search-xml-data-precisely/109319 "2017-11-28T14:49:31Z")
We have an es index storing some xml data. With the english analyzer, the angular brackets will be treated as stop words. Searching "value" equals searching "element value". How can I manage to search with the angular… --- ## [Report with a Watch doesnt work (Elastic Cloud)](https://discuss.elastic.co/t/report-with-a-watch-doesnt-work-elastic-cloud/109052)
**Author:** [@lueneburger](https://discuss.elastic.co/u/lueneburger)\ **Replies:** 3\ **Last updated:** [November 28, 2017, 2:40pm UTC](https://discuss.elastic.co/t/report-with-a-watch-doesnt-work-elastic-cloud/109052 "2017-11-28T14:40:48Z")
Hi Everyone, it started with 5.6.4 and also is still in 6.0 a problem :confused: i got a simple Watch that will create every morning a report based on a dashboard and sent it to one of our emails (ticket creation) it … --- ## [Search statistics](https://discuss.elastic.co/t/search-statistics/109396)
**Author:** [@aslamy](https://discuss.elastic.co/u/aslamy)\ **Replies:** 1\ **Last updated:** [November 28, 2017, 2:14pm UTC](https://discuss.elastic.co/t/search-statistics/109396 "2017-11-28T14:14:37Z")
I need to create search statistics about what people have searched, number of searches, locations, time and etc. What is the best way to achieve this? --- ## [Index Failure exception returns null JAVA API](https://discuss.elastic.co/t/index-failure-exception-returns-null-java-api/109404)
**Author:** [@guediagael](https://discuss.elastic.co/u/guediagael)\ **Replies:** 0\ **Last updated:** [November 28, 2017, 1:46pm UTC](https://discuss.elastic.co/t/index-failure-exception-returns-null-java-api/109404 "2017-11-28T13:46:10Z")
Hello I'm trying to build an index using elasticsearch java api with java restHighLevelClient, but for some reasons I have an and index failure exception which returns null. I'll like to know the reason so that I can im… --- ## [Is there a "Multi Count API" in ES](https://discuss.elastic.co/t/is-there-a-multi-count-api-in-es/109394)
**Author:** [@fpillo](https://discuss.elastic.co/u/fpillo)\ **Replies:** 2\ **Last updated:** [November 28, 2017, 1:27pm UTC](https://discuss.elastic.co/t/is-there-a-multi-count-api-in-es/109394 "2017-11-28T13:27:48Z")
Hello guys, I am new here and I have a simple question for you. Is there a multi count API en ES. I know we have the Count API and Multi Search API. Thanks! --- ## [Elasticsearch basic performance](https://discuss.elastic.co/t/elasticsearch-basic-performance/109053)
**Author:** [@elastic\_paul](https://discuss.elastic.co/u/elastic_paul)\ **Replies:** 11\ **Last updated:** [November 28, 2017, 1:04pm UTC](https://discuss.elastic.co/t/elasticsearch-basic-performance/109053 "2017-11-28T13:04:44Z")
I have 12 servers running logstash. They are sending data to 4 ES nodes. Each ES node has 24 cores, 36TB of spinning disks and 128GB RAM. The 12 logstash machines are sending round robin to the 4 ES nodes. All going into… --- ## [SearchDoubt in research with compound terms, but part of the term is equal to other searches](https://discuss.elastic.co/t/searchdoubt-in-research-with-compound-terms-but-part-of-the-term-is-equal-to-other-searches/109352)
**Author:** [@RafaelPosthaus](https://discuss.elastic.co/u/RafaelPosthaus)\ **Replies:** 2\ **Last updated:** [November 28, 2017, 1:01pm UTC](https://discuss.elastic.co/t/searchdoubt-in-research-with-compound-terms-but-part-of-the-term-is-equal-to-other-searches/109352 "2017-11-28T13:01:25Z")
Good morning, how are you? I own an application where my e-commerce products search directly into my ElasticSearch database. As our segment is Clothing, I have a situation, I wonder if you can help me. Before the doubt… --- ## [Best practice for expiring data in v6](https://discuss.elastic.co/t/best-practice-for-expiring-data-in-v6/109386)
**Author:** [@clarkeash](https://discuss.elastic.co/u/clarkeash)\ **Replies:** 2\ **Last updated:** [November 28, 2017, 12:58pm UTC](https://discuss.elastic.co/t/best-practice-for-expiring-data-in-v6/109386 "2017-11-28T12:58:42Z")
Perviously we had the \_ttl option (i've not used it) but now thats gone what is the recommended way to delete old data? My data will have a timestamp, so I could regularly call the api and delete records past a certain … --- ## [Restore in remote cluster](https://discuss.elastic.co/t/restore-in-remote-cluster/109335)
**Author:** [@MuthuRamalingam](https://discuss.elastic.co/u/MuthuRamalingam)\ **Replies:** 3\ **Last updated:** [November 28, 2017, 12:50pm UTC](https://discuss.elastic.co/t/restore-in-remote-cluster/109335 "2017-11-28T12:50:09Z")
How to restore the snapshot taken in one cluster into the another remote cluster? --- ## [ELK 6.0.0 And Xpack 6.0.0 Username password is not working](https://discuss.elastic.co/t/elk-6-0-0-and-xpack-6-0-0-username-password-is-not-working/109196)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 4\ **Last updated:** [November 28, 2017, 12:45pm UTC](https://discuss.elastic.co/t/elk-6-0-0-and-xpack-6-0-0-username-password-is-not-working/109196 "2017-11-28T12:45:41Z")
Hi All , can you please explain the method of username and password entering criteria in Xpack installed ELK ( 6.0.0 ). Before installing Xpack , 6.0.0, ELK is working well. Xpack installed successfully. First I am t… --- ## [Elastic Stack](https://discuss.elastic.co/t/elastic-stack/109364)
**Author:** [@regiereyes15](https://discuss.elastic.co/u/regiereyes15)\ **Replies:** 1\ **Last updated:** [November 28, 2017, 12:06pm UTC](https://discuss.elastic.co/t/elastic-stack/109364 "2017-11-28T12:06:47Z")
Could someone help us to provide the pricing reference for Azure Elastic Stack? --- ## [Repository\_missing\_exception with existing repo](https://discuss.elastic.co/t/repository-missing-exception-with-existing-repo/109369)
**Author:** [@fetch](https://discuss.elastic.co/u/fetch)\ **Replies:** 0\ **Last updated:** [November 28, 2017, 11:09am UTC](https://discuss.elastic.co/t/repository-missing-exception-with-existing-repo/109369 "2017-11-28T11:09:08Z")
Hi, I'm using a simple script to make backups of my cluster. All it does: Read snapshot number & increment it Mount shared folder to /mnt/elkbackup/ curl -XPUT "http://localhost:9200/\_snapshot/my\_backup/snapshot\_$NUM?… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1872) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1874)