# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1952 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1953 --- ## [Elasticsearch bulk queue unbalanced, one node close to full](https://discuss.elastic.co/t/elasticsearch-bulk-queue-unbalanced-one-node-close-to-full/100160)
**Author:** [@zuomang](https://discuss.elastic.co/u/zuomang)\ **Replies:** 6\ **Last updated:** [September 12, 2017, 10:44am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-queue-unbalanced-one-node-close-to-full/100160 "2017-09-12T10:44:18Z")
Recently we found one issue: our es cluster had three nodes which storage our product env log, one node of cluster bulk queue size always close to full, other nodes not. i adjust our send client config file, remove the … --- ## [Where does Ingest pipeline setting get stored in elasticsearch?](https://discuss.elastic.co/t/where-does-ingest-pipeline-setting-get-stored-in-elasticsearch/100192)
**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\ **Replies:** 1\ **Last updated:** [September 12, 2017, 10:35am UTC](https://discuss.elastic.co/t/where-does-ingest-pipeline-setting-get-stored-in-elasticsearch/100192 "2017-09-12T10:35:06Z")
Need a path where these ingest pipeline or dynamic index template setting get stored? Thanks, Rohan --- ## [5.5.1 post count compare with 1.7.1](https://discuss.elastic.co/t/5-5-1-post-count-compare-with-1-7-1/96896)
**Author:** [@yaoqijun](https://discuss.elastic.co/u/yaoqijun)\ **Replies:** 2\ **Last updated:** [September 12, 2017, 10:11am UTC](https://discuss.elastic.co/t/5-5-1-post-count-compare-with-1-7-1/96896 "2017-09-12T10:11:11Z")
i want test post count between es-5.5.1 version and es-1.7.1 version i user java client in document. download 1.7. and 5.5.1 version, and execute in single. in five minutes, 1.7 has 356260 success post. but 5.5.1 onl… --- ## [Invalid epoch\_millis for Java client when adding document with Date.getTime()](https://discuss.elastic.co/t/invalid-epoch-millis-for-java-client-when-adding-document-with-date-gettime/100188)
**Author:** [@David\_Pocivalnik](https://discuss.elastic.co/u/David_Pocivalnik)\ **Replies:** 0\ **Last updated:** [September 12, 2017, 9:51am UTC](https://discuss.elastic.co/t/invalid-epoch-millis-for-java-client-when-adding-document-with-date-gettime/100188 "2017-09-12T09:51:41Z")
I have the following mapping defined: "stopDate": { "type": "date", "index": true, "store": false, "format": "yyyy-MM-dd HH:mm:ss:SSS||yyyy-MM-dd HH:mm:ss||epoch\_millis" } and with Java… --- ## [Do too many indexes (like .monitoring-kibana-6-2017.09.11 or .monitoring-es-6-2017.09.11) slow down the index and search?](https://discuss.elastic.co/t/do-too-many-indexes-like-monitoring-kibana-6-2017-09-11-or-monitoring-es-6-2017-09-11-slow-down-the-index-and-search/100181)
**Author:** [@shijiebei2009](https://discuss.elastic.co/u/shijiebei2009)\ **Replies:** 8\ **Last updated:** [September 12, 2017, 9:45am UTC](https://discuss.elastic.co/t/do-too-many-indexes-like-monitoring-kibana-6-2017-09-11-or-monitoring-es-6-2017-09-11-slow-down-the-index-and-search/100181 "2017-09-12T09:45:04Z")
these indexes are auto created by monitoring in x-pack. --- ## [ElasticSearch include parent source in child search](https://discuss.elastic.co/t/elasticsearch-include-parent-source-in-child-search/99966)
**Author:** [@Marco\_Count](https://discuss.elastic.co/u/Marco_Count)\ **Replies:** 2\ **Last updated:** [September 12, 2017, 9:11am UTC](https://discuss.elastic.co/t/elasticsearch-include-parent-source-in-child-search/99966 "2017-09-12T09:11:30Z")
I have a parent/child relationship between an user and many posts. I know that elasticsearch is not a relational db and there are no joins but I would like to find the best way to achieve this goal. When I search for a… --- ## [Configuring RPM based Elasticsearch - CentOS6](https://discuss.elastic.co/t/configuring-rpm-based-elasticsearch-centos6/100063)
**Author:** [@ORich](https://discuss.elastic.co/u/ORich)\ **Replies:** 1\ **Last updated:** [September 12, 2017, 8:52am UTC](https://discuss.elastic.co/t/configuring-rpm-based-elasticsearch-centos6/100063 "2017-09-12T08:52:29Z")
Dear experts, as detailed in doc, Elasticsearch loads its configuration from the /etc/elasticsearch/elasticsearch.yml which includes path.data and path.logs On the other hand, same doc does state that the RPM also has … --- ## [Watcher alert for ml jobs](https://discuss.elastic.co/t/watcher-alert-for-ml-jobs/99389)
**Author:** [@gautamv](https://discuss.elastic.co/u/gautamv)\ **Replies:** 2\ **Last updated:** [September 12, 2017, 7:49am UTC](https://discuss.elastic.co/t/watcher-alert-for-ml-jobs/99389 "2017-09-12T07:49:31Z")
Hi, I want to create alerts for an ml job. I’m finding anomalies in the error log. Please find the JSON below: { "job\_id": "errorlog\_pattern\_analysis", "job\_type": "anomaly\_detector", "job\_version": "5.5.2", "d… --- ## [Bulk query not working correctly](https://discuss.elastic.co/t/bulk-query-not-working-correctly/100044)
**Author:** [@tjh](https://discuss.elastic.co/u/tjh)\ **Replies:** 2\ **Last updated:** [September 12, 2017, 7:32am UTC](https://discuss.elastic.co/t/bulk-query-not-working-correctly/100044 "2017-09-12T07:32:46Z")
Long parameter id strings lead to errors: POST \_bulk {"create": {"\_type": "classified\_patentsubset", "\_parent": "32273201735", "\_index": "patclassifier", "\_id": "368\_1h"}} {"doc": {"date\_provided": "11.09.2017", "owne… --- ## [Logs do not displayed in ELK. What is the problem? How to fix the error?](https://discuss.elastic.co/t/logs-do-not-displayed-in-elk-what-is-the-problem-how-to-fix-the-error/100058)
**Author:** [@rchumarin](https://discuss.elastic.co/u/rchumarin)\ **Replies:** 10\ **Last updated:** [September 12, 2017, 7:13am UTC](https://discuss.elastic.co/t/logs-do-not-displayed-in-elk-what-is-the-problem-how-to-fix-the-error/100058 "2017-09-12T07:13:23Z")
Hello. Kibana version: 5.4.2 Elasticsearch version: 5.4.2 Logstash version: 5.4.2 Server OS version: Linux Red Hat, docker container kibana, logstash, elasticsearch and curator. Logs do not displayed in ELK. What is… --- ## [Closer is better](https://discuss.elastic.co/t/closer-is-better/100071)
**Author:** [@aslamy](https://discuss.elastic.co/u/aslamy)\ **Replies:** 3\ **Last updated:** [September 12, 2017, 7:03am UTC](https://discuss.elastic.co/t/closer-is-better/100071 "2017-09-12T07:03:26Z")
Hi ! If I have two documents like: Doc1: \["title": "A single sheet within a book is a leaf, and each side of a leaf is a page"\] Doc2: \["title" : "A book is a set of sheets of paper and parchment"\] How can I get highe… --- ## [Elasticsearch Status Active Failed](https://discuss.elastic.co/t/elasticsearch-status-active-failed/100143)
**Author:** [@yrizal](https://discuss.elastic.co/u/yrizal)\ **Replies:** 13\ **Last updated:** [September 12, 2017, 6:59am UTC](https://discuss.elastic.co/t/elasticsearch-status-active-failed/100143 "2017-09-12T06:59:45Z")
Hello, OS = centos7, install in vm java version ========================================================================== openjdk version "1.8.0\_102" OpenJDK Runtime Environment (build 1.8.0\_102-b14) OpenJDK 64-Bi… --- ## [This task can cancel?](https://discuss.elastic.co/t/this-task-can-cancel/100017)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 4\ **Last updated:** [September 12, 2017, 6:57am UTC](https://discuss.elastic.co/t/this-task-can-cancel/100017 "2017-09-12T06:57:36Z")
this task can cancel? \], "tasks" : { "gYW2DQ-2TgK6j4Wqdk9vVw:878350650" : { "node" : "gYW2DQ-2TgK6j4Wqdk9vVw", "id" : 878350650, "type" : "direct", "action" : "indices:data/write/bulk\[s\]\[… --- ## [Is it possible to implement index level access control depending on the client certificate](https://discuss.elastic.co/t/is-it-possible-to-implement-index-level-access-control-depending-on-the-client-certificate/99390)
**Author:** [@Bozzerreaneaux](https://discuss.elastic.co/u/Bozzerreaneaux)\ **Replies:** 4\ **Last updated:** [September 11, 2017, 11:35am UTC](https://discuss.elastic.co/t/is-it-possible-to-implement-index-level-access-control-depending-on-the-client-certificate/99390 "2017-09-11T11:35:20Z")
Hi guys, I did some research and found that Logstash offers mutual SSL authentication so I can once authenticate servers on which filebeat runs and also authenticate the Logstash server itself. Our future centralized l… --- ## [Curator fails to shrink index](https://discuss.elastic.co/t/curator-fails-to-shrink-index/100010)
**Author:** [@massimo](https://discuss.elastic.co/u/massimo)\ **Replies:** 3\ **Last updated:** [September 12, 2017, 5:54am UTC](https://discuss.elastic.co/t/curator-fails-to-shrink-index/100010 "2017-09-12T05:54:06Z")
Hello, I wanted to test the shrink action with curator which fails with: 2017-09-11 09:04:56,314 ERROR curator.cli run:184 Failed to complete action: shrink. \ **Author:** [@overelastic](https://discuss.elastic.co/u/overelastic)\ **Replies:** 2\ **Last updated:** [September 12, 2017, 5:48am UTC](https://discuss.elastic.co/t/new-vm-install-fail-to-run/100157 "2017-09-12T05:48:37Z") Hi, I'm trying to run Elasticsearch using Virtualbox VM (Ubuntu 16.04 server). I'm using this guide and install latest 5.6.0 edition. http://www.elasticsearchtutorial.com/elasticsearch-in-5-minutes.html After I run bin… --- ## [Help with doing "Join"](https://discuss.elastic.co/t/help-with-doing-join/99524)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 11\ **Last updated:** [September 12, 2017, 5:47am UTC](https://discuss.elastic.co/t/help-with-doing-join/99524 "2017-09-12T05:47:23Z")
Hi, I saw the ES explenation to do “JOIN” in ES, but I am confused and I think I have a complicated case, so will be happy for more help. First I will lay out my problem: I have about 5 logs that represent 5 stages in… --- ## [Not seeing the logs data in Kibana](https://discuss.elastic.co/t/not-seeing-the-logs-data-in-kibana/99664)
**Author:** [@Narasimha\_Gajje](https://discuss.elastic.co/u/Narasimha_Gajje)\ **Replies:** 4\ **Last updated:** [September 12, 2017, 4:24am UTC](https://discuss.elastic.co/t/not-seeing-the-logs-data-in-kibana/99664 "2017-09-12T04:24:39Z")
HI All, I am newbie to ElasticSearch and Kibana. I had set up the configuration as FileBeat --\> ElasticSearch --\> Kiabana. All the 3 instances are started properly and pointed FileBeat to log file in one of the folder … --- ## [Wildcard query can't find the detail info](https://discuss.elastic.co/t/wildcard-query-cant-find-the-detail-info/100012)
**Author:** [@laoyang360](https://discuss.elastic.co/u/laoyang360)\ **Replies:** 2\ **Last updated:** [September 12, 2017, 3:10am UTC](https://discuss.elastic.co/t/wildcard-query-cant-find-the-detail-info/100012 "2017-09-12T03:10:50Z")
my es version is: 5.4.0 one of my index document like "....\\ntest\\n\\n\\n|taga|..." when I use wildcard query \[11\] but when I use wildcard like below: POST kwindex/kwtype/\_search { "query": { "wildcard": { "extra… --- ## [Can I monitor SQL server ERRORLOG in ES without using Logstash?](https://discuss.elastic.co/t/can-i-monitor-sql-server-errorlog-in-es-without-using-logstash/100060)
**Author:** [@rkpotdar](https://discuss.elastic.co/u/rkpotdar)\ **Replies:** 1\ **Last updated:** [September 12, 2017, 3:04am UTC](https://discuss.elastic.co/t/can-i-monitor-sql-server-errorlog-in-es-without-using-logstash/100060 "2017-09-12T03:04:30Z")
In my setup, the SQL server resides on a Windows machine and it generates ERRORLOG which records for any errors occurring in SQL server. I'd like these logs to be pushed on to an Ubuntu machine (where I currently run ES … --- ## [Aws elasticsearch LDAP authentication](https://discuss.elastic.co/t/aws-elasticsearch-ldap-authentication/100149)
**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\ **Replies:** 0\ **Last updated:** [September 12, 2017, 2:46am UTC](https://discuss.elastic.co/t/aws-elasticsearch-ldap-authentication/100149 "2017-09-12T02:46:27Z")
Hi Team, I worked on hosted Elasticsearch (2.4 and 5.1) and configured to authenticate from active directory. Now i am doing a POC with AWS managed Elasticsearch (5.1). Can we configure active directory authentication w… --- ## [Monitor the indexing rate of specific index?](https://discuss.elastic.co/t/monitor-the-indexing-rate-of-specific-index/99781)
**Author:** [@quanta84](https://discuss.elastic.co/u/quanta84)\ **Replies:** 4\ **Last updated:** [September 12, 2017, 2:38am UTC](https://discuss.elastic.co/t/monitor-the-indexing-rate-of-specific-index/99781 "2017-09-12T02:38:00Z")
We are using fluentd to send logs to ElasticSearch: \ @type elasticsearch host elasticsearch port 9200 logstash\_format true index\_name logstash type\_name logstash \ For some reasons… --- ## [Indices.query.bool.max\_clause\_count](https://discuss.elastic.co/t/indices-query-bool-max-clause-count/100109)
**Author:** [@tjroyy](https://discuss.elastic.co/u/tjroyy)\ **Replies:** 1\ **Last updated:** [September 12, 2017, 1:48am UTC](https://discuss.elastic.co/t/indices-query-bool-max-clause-count/100109 "2017-09-12T01:48:51Z")
If i change this setting on the elasticsearch yml after i had created does it apply to previous created indices? --- ## [Define shards that are both primary and replicas of each other](https://discuss.elastic.co/t/define-shards-that-are-both-primary-and-replicas-of-each-other/100118)
**Author:** [@Jenia](https://discuss.elastic.co/u/Jenia)\ **Replies:** 1\ **Last updated:** [September 12, 2017, 1:47am UTC](https://discuss.elastic.co/t/define-shards-that-are-both-primary-and-replicas-of-each-other/100118 "2017-09-12T01:47:38Z")
Hi, I have two nodes, and would like to define one index with 2 shards that are both primary and replica of each other. In other words, on node1 will be the first shard, on node2 the second shard. Each time a document… --- ## [Multi Node - Same Cluster Same hosts](https://discuss.elastic.co/t/multi-node-same-cluster-same-hosts/99974)
**Author:** [@naoy](https://discuss.elastic.co/u/naoy)\ **Replies:** 6\ **Last updated:** [September 12, 2017, 1:46am UTC](https://discuss.elastic.co/t/multi-node-same-cluster-same-hosts/99974 "2017-09-12T01:46:12Z")
Hello, On our Production Platform we have Heap troubles which obliges us to restart our cluster every 10days~ (Heap of each nodes increase to 100%, so timeout on all cluster etc...) data : 33TB, 700indx replicat 1 We… --- ## [Elasticsearch active failed](https://discuss.elastic.co/t/elasticsearch-active-failed/100140)
**Author:** [@yrizal](https://discuss.elastic.co/u/yrizal)\ **Replies:** 1\ **Last updated:** [September 12, 2017, 1:24am UTC](https://discuss.elastic.co/t/elasticsearch-active-failed/100140 "2017-09-12T01:24:18Z")
Hello, OS = centos7, install in vm java version openjdk version "1.8.0\_102" OpenJDK Runtime Environment (build 1.8.0\_102-b14) OpenJDK 64-Bit Server VM (build 25.102-b14, mixed mode) the first time when install elas… --- ## [Detecting gaps in numeric range using ElasticSearch](https://discuss.elastic.co/t/detecting-gaps-in-numeric-range-using-elasticsearch/100138)
**Author:** [@Leinad0033](https://discuss.elastic.co/u/Leinad0033)\ **Replies:** 0\ **Last updated:** [September 11, 2017, 11:17pm UTC](https://discuss.elastic.co/t/detecting-gaps-in-numeric-range-using-elasticsearch/100138 "2017-09-11T23:17:11Z")
We have a cluster that serves data similar to that shown below: { "identifier" : "A" "sequenceNumber" : 1 } { "identifier" : "A" "sequenceNumber" : 2 } { "identifier" : "A" "sequenceNumber" : 4… --- ## [Updating Elasticsearch Document Popularity by number of times it gets queried](https://discuss.elastic.co/t/updating-elasticsearch-document-popularity-by-number-of-times-it-gets-queried/99448)
**Author:** [@ankit2](https://discuss.elastic.co/u/ankit2)\ **Replies:** 3\ **Last updated:** [September 11, 2017, 9:44pm UTC](https://discuss.elastic.co/t/updating-elasticsearch-document-popularity-by-number-of-times-it-gets-queried/99448 "2017-09-11T21:44:51Z")
I was wondering if elasticsearch provides any kind of functionality that lets you keep track & update the documents in indices based on the number of times any document gets queried directly using document\_id. Would that… --- ## [Elasticsearch- Xpack- MLAPI: Unable To Retrieve The Results](https://discuss.elastic.co/t/elasticsearch-xpack-mlapi-unable-to-retrieve-the-results/99872)
**Author:** [@Rohithnama](https://discuss.elastic.co/u/Rohithnama)\ **Replies:** 14\ **Last updated:** [September 11, 2017, 9:15pm UTC](https://discuss.elastic.co/t/elasticsearch-xpack-mlapi-unable-to-retrieve-the-results/99872 "2017-09-11T21:15:42Z")
I'm working towards developing an API Wrapper X-Pack ML. So far, I was able to create multiple jobs but recently, the jobs that I created aren't showing any results at all. I verified the mapping and even the records wer… --- ## [Max Bucket Aggregation on subaggregation?](https://discuss.elastic.co/t/max-bucket-aggregation-on-subaggregation/100130)
**Author:** [@AndreKR](https://discuss.elastic.co/u/AndreKR)\ **Replies:** 0\ **Last updated:** [September 11, 2017, 8:22pm UTC](https://discuss.elastic.co/t/max-bucket-aggregation-on-subaggregation/100130 "2017-09-11T20:22:03Z")
Here I'm aggregating by tag and by time: { "aggregations": { "tags": { "aggregations": { "volume": { "histogram": { "field": "timestamp", "interval": 7200000 … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1951) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1953)