# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1986 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1987 --- ## [Top 10 IPs visiting a website](https://discuss.elastic.co/t/top-10-ips-visiting-a-website/96133)
**Author:** [@hding](https://discuss.elastic.co/u/hding)\ **Replies:** 6\ **Last updated:** [August 8, 2017, 9:29am UTC](https://discuss.elastic.co/t/top-10-ips-visiting-a-website/96133 "2017-08-08T09:29:02Z")
I have indexed some network logs. How do I search for the top 10 IP addresses that have visited a given website within a time range? Do I use aggregations? Do I need to enable “doc\_values”, and also set “index\_options” … --- ## [Mapping conflicts across cluster?](https://discuss.elastic.co/t/mapping-conflicts-across-cluster/95882)
**Author:** [@Balamurali](https://discuss.elastic.co/u/Balamurali)\ **Replies:** 2\ **Last updated:** [August 8, 2017, 9:28am UTC](https://discuss.elastic.co/t/mapping-conflicts-across-cluster/95882 "2017-08-08T09:28:44Z")
Hi all, Now we are using elastic search 1.3.7 and planning to do upgrade to 5.5 by data reindexing https://www.elastic.co/guide/en/elasticsearch/reference/5.4/reindex-upgrade.html We have numerous of mapping conflict… --- ## [Elasticsearch URL not accessible outside of the server publicly](https://discuss.elastic.co/t/elasticsearch-url-not-accessible-outside-of-the-server-publicly/96044)
**Author:** [@Bishwadeep\_Kc](https://discuss.elastic.co/u/Bishwadeep_Kc)\ **Replies:** 4\ **Last updated:** [August 8, 2017, 9:21am UTC](https://discuss.elastic.co/t/elasticsearch-url-not-accessible-outside-of-the-server-publicly/96044 "2017-08-08T09:21:25Z")
Hi there, I installed elasticsearch following the article on https://www.howtoforge.com/tutorial/how-to-install-elastic-stack-on-ubuntu-16-04/. I manage to run it successfully on my local machine because I was accessing… --- ## [Watcher false alerts (query wrong? )](https://discuss.elastic.co/t/watcher-false-alerts-query-wrong/96207)
**Author:** [@lueneburger](https://discuss.elastic.co/u/lueneburger)\ **Replies:** 4\ **Last updated:** [August 8, 2017, 9:03am UTC](https://discuss.elastic.co/t/watcher-false-alerts-query-wrong/96207 "2017-08-08T09:03:18Z")
Hi Everyone, i got some watcher alerts to check if the separated indexes are getting new entries, if for example a SMTP server isn’t sending anything within 1 hours, then we will get an alert to check whats going on the… --- ## [How to change the target location of a snapshot repo?](https://discuss.elastic.co/t/how-to-change-the-target-location-of-a-snapshot-repo/96203)
**Author:** [@paul\_m](https://discuss.elastic.co/u/paul_m)\ **Replies:** 2\ **Last updated:** [August 8, 2017, 7:57am UTC](https://discuss.elastic.co/t/how-to-change-the-target-location-of-a-snapshot-repo/96203 "2017-08-08T07:57:14Z")
Hi all, I need to move my snapshot files to a different bucket on S3 - I accidentally put my snappies on a Glacier-enabled bucket, which kills snapshotting when the metadata files get taken offline into Glacier. If I m… --- ## [What are supported date unit in Decay function?](https://discuss.elastic.co/t/what-are-supported-date-unit-in-decay-function/96199)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 0\ **Last updated:** [August 8, 2017, 7:12am UTC](https://discuss.elastic.co/t/what-are-supported-date-unit-in-decay-function/96199 "2017-08-08T07:12:59Z")
I tried decay function on ES 5.2 as follows: "functions": \[ { "gauss": { "AvailableDate": { "scale": "3w", "offset": "6w", … --- ## [Create user with limited watches](https://discuss.elastic.co/t/create-user-with-limited-watches/96036)
**Author:** [@abpabab](https://discuss.elastic.co/u/abpabab)\ **Replies:** 2\ **Last updated:** [August 8, 2017, 7:51am UTC](https://discuss.elastic.co/t/create-user-with-limited-watches/96036 "2017-08-08T07:51:31Z")
I’m going to create new user with specific index and watches related to this index. But all watches in .watches and .watch\_history-\*, this user can see and edit all watches. How can I limit this? Thanks. --- ## [Need a help to import log.conf (with x-pack installed)](https://discuss.elastic.co/t/need-a-help-to-import-log-conf-with-x-pack-installed/96212)
**Author:** [@echai0](https://discuss.elastic.co/u/echai0)\ **Replies:** 1\ **Last updated:** [August 8, 2017, 7:49am UTC](https://discuss.elastic.co/t/need-a-help-to-import-log-conf-with-x-pack-installed/96212 "2017-08-08T07:49:30Z")
Hi, I am newbie on elasticsearch. I tried to import my "logstash\_general.conf" to elasticsearch. However, It didn't work. when I entered following command, /usr/share/logstash/bin/logstash -f /home/cylee/logstash\_g… --- ## [Elastic Search With JReport](https://discuss.elastic.co/t/elastic-search-with-jreport/96200)
**Author:** [@gaurav\_khandelwal](https://discuss.elastic.co/u/gaurav_khandelwal)\ **Replies:** 0\ **Last updated:** [August 8, 2017, 7:15am UTC](https://discuss.elastic.co/t/elastic-search-with-jreport/96200 "2017-08-08T07:15:19Z")
Hello People, I am trying to connect Elastic Search with JReport, JReport is a BI tool for analytics. I want to do grouping on a particular field and get count of it. Below is the SQL counterpart of it, SELECT CUSTOM… --- ## [How to append new document to a nested field?](https://discuss.elastic.co/t/how-to-append-new-document-to-a-nested-field/96175)
**Author:** [@Red](https://discuss.elastic.co/u/Red)\ **Replies:** 6\ **Last updated:** [August 8, 2017, 7:15am UTC](https://discuss.elastic.co/t/how-to-append-new-document-to-a-nested-field/96175 "2017-08-08T07:15:00Z")
how to append new document to a nested field? --- ## [Plugin:elasticsearch@5.5.1 Authentication Exception Error coming when loading kibana page?](https://discuss.elastic.co/t/plugin-elasticsearch-5-5-1-authentication-exception-error-coming-when-loading-kibana-page/96190)
**Author:** [@aditya\_soni](https://discuss.elastic.co/u/aditya_soni)\ **Replies:** 0\ **Last updated:** [August 8, 2017, 6:12am UTC](https://discuss.elastic.co/t/plugin-elasticsearch-5-5-1-authentication-exception-error-coming-when-loading-kibana-page/96190 "2017-08-08T06:12:04Z")
I have installed ElasticSearch as window service. Kibana as window service. logstash as window service. file beat . this is my kibana.yml file. Kibana is served by a back end server. This setting specifies the po… --- ## [Map numeric data to float , integer, long and double datatype](https://discuss.elastic.co/t/map-numeric-data-to-float-integer-long-and-double-datatype/96185)
**Author:** [@begemot](https://discuss.elastic.co/u/begemot)\ **Replies:** 0\ **Last updated:** [August 8, 2017, 5:17am UTC](https://discuss.elastic.co/t/map-numeric-data-to-float-integer-long-and-double-datatype/96185 "2017-08-08T05:17:39Z")
I’d like to use template and map fields accordingly to field’s name suffix to : interger, long, float and double. I use the following template: “dynamic\_templates”: \[ { “integer\_fields”: { “match”: “\_i\_en", “match\_… --- ## [Always green before shutdown, always red after startup](https://discuss.elastic.co/t/always-green-before-shutdown-always-red-after-startup/95635)
**Author:** [@jhaar](https://discuss.elastic.co/u/jhaar)\ **Replies:** 4\ **Last updated:** [August 8, 2017, 4:50am UTC](https://discuss.elastic.co/t/always-green-before-shutdown-always-red-after-startup/95635 "2017-08-08T04:50:19Z")
Hi there We use graylog in front of elasticsearch-2.4.6 and I’ve noticed an oddity. If “the system” is working well and I run curl http://ip.add.ress:9200/\_cluster/health I get back ‘“status”:“green”,…“unassigned\_shar… --- ## [How to get list of preregistered search template by REST api](https://discuss.elastic.co/t/how-to-get-list-of-preregistered-search-template-by-rest-api/96176)
**Author:** [@Sai\_Zin](https://discuss.elastic.co/u/Sai_Zin)\ **Replies:** 0\ **Last updated:** [August 8, 2017, 4:07am UTC](https://discuss.elastic.co/t/how-to-get-list-of-preregistered-search-template-by-rest-api/96176 "2017-08-08T04:07:34Z")
I registered these search template to Elasticsearch with this query. POST \_search/template/myTemplate { "template": { "query": { "match": { "title": "{{query\_string}}" … --- ## [This is my mapping, I would like to know where should I define type? after index I tried but it didn't work](https://discuss.elastic.co/t/this-is-my-mapping-i-would-like-to-know-where-should-i-define-type-after-index-i-tried-but-it-didnt-work/96178)
**Author:** [@Akhil\_Prashar](https://discuss.elastic.co/u/Akhil_Prashar)\ **Replies:** 0\ **Last updated:** [August 8, 2017, 4:13am UTC](https://discuss.elastic.co/t/this-is-my-mapping-i-would-like-to-know-where-should-i-define-type-after-index-i-tried-but-it-didnt-work/96178 "2017-08-08T04:13:24Z")
\ **Author:** [@haizaar](https://discuss.elastic.co/u/haizaar)\ **Replies:** 0\ **Last updated:** [August 8, 2017, 4:09am UTC](https://discuss.elastic.co/t/moving-filter-from-query-to-filtered-agg-slows-things-at-times-x3-x30/96177 "2017-08-08T04:09:18Z") Good day, ES 2.3.5 is here (yeah, old, I know). I have index with several billion documents of metrics data and run filtering query with aggregations on it. Then I tried to move some of the filters into the aggregations… --- ## [Read data from Elasticsearh into Tableau](https://discuss.elastic.co/t/read-data-from-elasticsearh-into-tableau/92123)
**Author:** [@moabbas](https://discuss.elastic.co/u/moabbas)\ **Replies:** 3\ **Last updated:** [August 8, 2017, 3:29am UTC](https://discuss.elastic.co/t/read-data-from-elasticsearh-into-tableau/92123 "2017-08-08T03:29:38Z")
I was looking for how to connect elasticsearch with Tableau? Thanks --- ## [PKI authentication issue for xpack monitoring exporter](https://discuss.elastic.co/t/pki-authentication-issue-for-xpack-monitoring-exporter/95704)
**Author:** [@vb4t](https://discuss.elastic.co/u/vb4t)\ **Replies:** 4\ **Last updated:** [August 8, 2017, 2:46am UTC](https://discuss.elastic.co/t/pki-authentication-issue-for-xpack-monitoring-exporter/95704 "2017-08-08T02:46:28Z")
Hello. I want to set monitoring exporter on my prod ES cluster to send monitoring data to my monitoring cluster. I enable PKI authentication on my monitoring cluster and I am able to authenticate with my client certifica… --- ## [Elastic heapdumponoutofmemoryerror](https://discuss.elastic.co/t/elastic-heapdumponoutofmemoryerror/96166)
**Author:** [@ny2359](https://discuss.elastic.co/u/ny2359)\ **Replies:** 1\ **Last updated:** [August 8, 2017, 1:43am UTC](https://discuss.elastic.co/t/elastic-heapdumponoutofmemoryerror/96166 "2017-08-08T01:43:15Z")
heapdumponoutofmemoryerror received when trying to start elastic --- ## [Spark to ES NoSuchMethodError - DataFrameFieldExtractor.extractField](https://discuss.elastic.co/t/spark-to-es-nosuchmethoderror-dataframefieldextractor-extractfield/96042)
**Author:** [@dragick](https://discuss.elastic.co/u/dragick)\ **Replies:** 3\ **Last updated:** [August 8, 2017, 1:24am UTC](https://discuss.elastic.co/t/spark-to-es-nosuchmethoderror-dataframefieldextractor-extractfield/96042 "2017-08-08T01:24:41Z")
Hello! I am trying to figure out how to upsert rows to ElasticSearch from Spark. I am using elasticsearch-spark-20\_2.10-5.5.1.jar, on a Spark cluster running Spark2.1 with Scala 2.1 My DataFrame printSchema() looks lik… --- ## [Shards unassigned after elasticsearch restart](https://discuss.elastic.co/t/shards-unassigned-after-elasticsearch-restart/95994)
**Author:** [@Drift](https://discuss.elastic.co/u/Drift)\ **Replies:** 15\ **Last updated:** [August 8, 2017, 12:28am UTC](https://discuss.elastic.co/t/shards-unassigned-after-elasticsearch-restart/95994 "2017-08-08T00:28:00Z")
My elasticsearch instances were restarted, but it looks like after that I have about 10 unassisned shards :frowning: The reason seems to be node\_left, how can I re-assign the shards to the respective nodes? { “cluster… --- ## [X-pack installation in elasticsearch](https://discuss.elastic.co/t/x-pack-installation-in-elasticsearch/95808)
**Author:** [@ny2359](https://discuss.elastic.co/u/ny2359)\ **Replies:** 2\ **Last updated:** [August 7, 2017, 9:22pm UTC](https://discuss.elastic.co/t/x-pack-installation-in-elasticsearch/95808 "2017-08-07T21:22:31Z")
x-pack 5.5.0 zip file installation failure using elasticsearch-plugin.bat install file:\\\\ and logstash install issue Kibana install of x-pack was successful Host server is windows 2012 R2 standard 2 CPU 1.9 GH… --- ## [Shard balancing in same machine](https://discuss.elastic.co/t/shard-balancing-in-same-machine/96076)
**Author:** [@elk\_user1](https://discuss.elastic.co/u/elk_user1)\ **Replies:** 1\ **Last updated:** [August 7, 2017, 8:56pm UTC](https://discuss.elastic.co/t/shard-balancing-in-same-machine/96076 "2017-08-07T20:56:15Z")
Hi there, I have an ES node with mount point of 256 GB, out of which 77% is utilized and another 256 GB mount was added later which is not really utilized. So will shards be moved to new mount based on the data growth? … --- ## [ElasticSearch Long Time Range](https://discuss.elastic.co/t/elasticsearch-long-time-range/96148)
**Author:** [@rymoore](https://discuss.elastic.co/u/rymoore)\ **Replies:** 1\ **Last updated:** [August 7, 2017, 8:38pm UTC](https://discuss.elastic.co/t/elasticsearch-long-time-range/96148 "2017-08-07T20:38:35Z")
Hi - this is likely a newbie question… I have limited experience with Grafana and ElasticSearch, but love my experience with both so far. I have a set of data streaming into Elastic, and it displays perfectly in Grafan… --- ## [Latitude Error Upon Reindexing](https://discuss.elastic.co/t/latitude-error-upon-reindexing/96135)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 1\ **Last updated:** [August 7, 2017, 5:27pm UTC](https://discuss.elastic.co/t/latitude-error-upon-reindexing/96135 "2017-08-07T17:27:38Z")
ES: 5.4.1 I'm looking for a way to debug this issue, as it is non-standard and likely doesn't have an easy fix.. I'm trying to get all my data in the same form, including geolocation data, yet receiving the following e… --- ## [Multiple terms](https://discuss.elastic.co/t/multiple-terms/96131)
**Author:** [@the\_foxit](https://discuss.elastic.co/u/the_foxit)\ **Replies:** 1\ **Last updated:** [August 7, 2017, 4:35pm UTC](https://discuss.elastic.co/t/multiple-terms/96131 "2017-08-07T16:35:06Z")
hello, I am a newbie with elasticstack . I am working with filebeats, logstash and elasticsearch 5.5. after creating an index I found out that the terms are duplicated . example user and user.keyword Any idea how to… --- ## [Why does a node restart reclaim heap?](https://discuss.elastic.co/t/why-does-a-node-restart-reclaim-heap/95928)
**Author:** [@hh\_marshall](https://discuss.elastic.co/u/hh_marshall)\ **Replies:** 1\ **Last updated:** [August 7, 2017, 3:19pm UTC](https://discuss.elastic.co/t/why-does-a-node-restart-reclaim-heap/95928 "2017-08-07T15:19:46Z")
Hi gang! es is great stuff! Happy es-ing to all! Here's a snapshot of heap usage and GC before/after a rolling restart. As time goes on, the range between the max/mins of the heap saw-tooth pattern becomes compressed un… --- ## [Purge the data, but keep the trend graph data](https://discuss.elastic.co/t/purge-the-data-but-keep-the-trend-graph-data/96127)
**Author:** [@nijov](https://discuss.elastic.co/u/nijov)\ **Replies:** 0\ **Last updated:** [August 7, 2017, 2:46pm UTC](https://discuss.elastic.co/t/purge-the-data-but-keep-the-trend-graph-data/96127 "2017-08-07T14:46:11Z")
We are pushing multi app log data into elastic for problem analysis. But we don’t need to keep the logs in elastic after some days, so we purge them frequently. But we noticed we have some interest to keep the trend grap… --- ## [Searching based on last modified](https://discuss.elastic.co/t/searching-based-on-last-modified/96079)
**Author:** [@bilpor](https://discuss.elastic.co/u/bilpor)\ **Replies:** 3\ **Last updated:** [August 7, 2017, 2:33pm UTC](https://discuss.elastic.co/t/searching-based-on-last-modified/96079 "2017-08-07T14:33:06Z")
Hi All, I have Elasticsearch 5.5.1 running with Fscrawler. My initial searches based on document content are working, using a search in the form: \`GET myindex/\_search?q='Large profitable'&filter\_path=hits.hits.\_source.… --- ## [Issue with adding nodes to cluster](https://discuss.elastic.co/t/issue-with-adding-nodes-to-cluster/95945)
**Author:** [@infamous](https://discuss.elastic.co/u/infamous)\ **Replies:** 2\ **Last updated:** [August 7, 2017, 2:31pm UTC](https://discuss.elastic.co/t/issue-with-adding-nodes-to-cluster/95945 "2017-08-07T14:31:12Z")
Hi all, I have 2 EC2 Windows instances running with Elasticsearch 5.5.1 and I want to connect them into a cluster, but I’m having trouble having them find eachother. Here are their YMLs: cluster.name: mycluster node.na… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1985) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1987)