# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1991

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1992

---

## [Index aliases and daily indices](https://discuss.elastic.co/t/index-aliases-and-daily-indices/95686)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 1\
**Last updated:** [August 3, 2017, 12:56pm UTC](https://discuss.elastic.co/t/index-aliases-and-daily-indices/95686 "2017-08-03T12:56:16Z")

</div>

Hi, Can i ask what the recommendations are regarding aliases and time based indices? I ask because we encourage constrained searching with our users apps. if we use an alias for these indices (wildcarding) then all sear…

---

## [Elasticserach Error](https://discuss.elastic.co/t/elasticserach-error/95627)

<div class="topic-metadata">

**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\
**Replies:** 2\
**Last updated:** [August 3, 2017, 12:41pm UTC](https://discuss.elastic.co/t/elasticserach-error/95627 "2017-08-03T12:41:52Z")

</div>

File “/usr/lib/python2.7/site-packages/elasticsearch/connection/base.py”, line 125, in \_raise\_error raise HTTP\_EXCEPTIONS.get(status\_code, TransportError)(status\_code, error\_message, additional\_info) elasticsearch.exce…

---

## [Get Document lock using java api](https://discuss.elastic.co/t/get-document-lock-using-java-api/95689)

<div class="topic-metadata">

**Author:** [@Harender\_Dudi](https://discuss.elastic.co/u/Harender_Dudi)\
**Replies:** 2\
**Last updated:** [August 3, 2017, 12:39pm UTC](https://discuss.elastic.co/t/get-document-lock-using-java-api/95689 "2017-08-03T12:39:03Z")

</div>

Hi, can anyone help me with how to get Elasticsearch document lock using java api?

---

## [How can i do Elastic Search on Encrypted data](https://discuss.elastic.co/t/how-can-i-do-elastic-search-on-encrypted-data/95683)

<div class="topic-metadata">

**Author:** [@gauravgarg](https://discuss.elastic.co/u/gauravgarg)\
**Replies:** 6\
**Last updated:** [August 3, 2017, 11:53am UTC](https://discuss.elastic.co/t/how-can-i-do-elastic-search-on-encrypted-data/95683 "2017-08-03T11:53:43Z")

</div>

Hi team, I am new to elastic search. I am having one application where all of my data stored in encrypted form. I need to do elastic search on this encrypted data. Is it possible i can achieve ES on encrypted data ? I…

---

## [Slow index creation and indexing when many indices must be created at once](https://discuss.elastic.co/t/slow-index-creation-and-indexing-when-many-indices-must-be-created-at-once/95521)

<div class="topic-metadata">

**Author:** [@imehl](https://discuss.elastic.co/u/imehl)\
**Replies:** 5\
**Last updated:** [August 3, 2017, 11:08am UTC](https://discuss.elastic.co/t/slow-index-creation-and-indexing-when-many-indices-must-be-created-at-once/95521 "2017-08-03T11:08:39Z")

</div>

Hi, I'm using daily indices and index templates in my Elasticsearch environment. The time is based on a field in the document. Now I have I problem with bulk indexing: For example if I import data from 1 year, 365 ind…

---

## [Upgrade of Elasticsearch](https://discuss.elastic.co/t/upgrade-of-elasticsearch/95687)

<div class="topic-metadata">

**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\
**Replies:** 5\
**Last updated:** [August 3, 2017, 10:32am UTC](https://discuss.elastic.co/t/upgrade-of-elasticsearch/95687 "2017-08-03T10:32:28Z")

</div>

How can i upgrade elasticsearch from 2.2 to 5.5? As I install the rpm package, there a conflict. Do I need to uninstall the previous elasticsearch? TIA

---

## [Parsing mod\_security JSON logs](https://discuss.elastic.co/t/parsing-mod-security-json-logs/95692)

<div class="topic-metadata">

**Author:** [@cuttlefishjones](https://discuss.elastic.co/u/cuttlefishjones)\
**Replies:** 0\
**Last updated:** [August 3, 2017, 10:23am UTC](https://discuss.elastic.co/t/parsing-mod-security-json-logs/95692 "2017-08-03T10:23:57Z")

</div>

Hi. I’m hoping someone can provide me with a little guidance and illumination. I am new to using the ELK stack (as in green as grass) and have been given the task of putting together a system to visualise the output of …

---

## [Limit results count when using sliced scroll api](https://discuss.elastic.co/t/limit-results-count-when-using-sliced-scroll-api/95498)

<div class="topic-metadata">

**Author:** [@Josca](https://discuss.elastic.co/u/Josca)\
**Replies:** 3\
**Last updated:** [August 3, 2017, 10:09am UTC](https://discuss.elastic.co/t/limit-results-count-when-using-sliced-scroll-api/95498 "2017-08-03T10:09:28Z")

</div>

Hi, I use sliced scroll api to fetch results from Elasticsearch in parallel (https://www.elastic.co/guide/en/elasticsearch/reference/current/search-request-scroll.html#sliced-scroll). But I am not able to set Elasticsea…

---

## [Localhost:9200 not working after install](https://discuss.elastic.co/t/localhost-9200-not-working-after-install/95625)

<div class="topic-metadata">

**Author:** [@jarves](https://discuss.elastic.co/u/jarves)\
**Replies:** 13\
**Last updated:** [August 3, 2017, 9:45am UTC](https://discuss.elastic.co/t/localhost-9200-not-working-after-install/95625 "2017-08-03T09:45:15Z")

</div>

Hi, I first installed ELK where i got the installer from github on my laptop and its working fine. I then installed it on a windows 2008 r2 server and it by typing in my browser localhost:9200 and localhost:5601 gives m…

---

## [Search data from Mongodb directly](https://discuss.elastic.co/t/search-data-from-mongodb-directly/95677)

<div class="topic-metadata">

**Author:** [@ChelseaCao](https://discuss.elastic.co/u/ChelseaCao)\
**Replies:** 1\
**Last updated:** [August 3, 2017, 9:27am UTC](https://discuss.elastic.co/t/search-data-from-mongodb-directly/95677 "2017-08-03T09:27:03Z")

</div>

Hi there, Is that possible to use ELK search engine to call data directly from Mongodb? in other words, using Elasticsearch to search data only but storing data in MongoDB instead of syncing data to ELK. If that is pos…

---

## [Make \_all's analyzer to not\_analyzed](https://discuss.elastic.co/t/make--alls-analyzer-to-not-analyzed/95553)

<div class="topic-metadata">

**Author:** [@Yuval](https://discuss.elastic.co/u/Yuval)\
**Replies:** 3\
**Last updated:** [August 3, 2017, 9:06am UTC](https://discuss.elastic.co/t/make--alls-analyzer-to-not-analyzed/95553 "2017-08-03T09:06:15Z")

</div>

I’m trying to run a regexp query on the \_all field, this query is failing because \_all is analyzed. Is there a way to make the \_all field not analyzed? Thanks.

---

## [How to Elasticsearch 5.5 as service RH Linux](https://discuss.elastic.co/t/how-to-elasticsearch-5-5-as-service-rh-linux/94606)

<div class="topic-metadata">

**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\
**Replies:** 3\
**Last updated:** [August 3, 2017, 8:49am UTC](https://discuss.elastic.co/t/how-to-elasticsearch-5-5-as-service-rh-linux/94606 "2017-08-03T08:49:10Z")

</div>

Hello ! After some tests on preproduction with rpm, i begin to configure production environment. Problem : Elasticsearch doesn't work in root user + It's not a service (source : tar.gz) Currently context : Elastic…

---

## [Upgrade Elastic Search from 1.7.2 to 2.4.6 not happening](https://discuss.elastic.co/t/upgrade-elastic-search-from-1-7-2-to-2-4-6-not-happening/95647)

<div class="topic-metadata">

**Author:** [@kumar1](https://discuss.elastic.co/u/kumar1)\
**Replies:** 1\
**Last updated:** [August 3, 2017, 8:21am UTC](https://discuss.elastic.co/t/upgrade-elastic-search-from-1-7-2-to-2-4-6-not-happening/95647 "2017-08-03T08:21:25Z")

</div>

Hi team, When we are trying to upgrade Elastic Search from 1.7.2 to 2.4.6.It was saying provision in progress and after if we check it still in old version (1.7.2).We’ve tried 3-4 times till now and waited for a long ti…

---

## [Indexing From MS Excel](https://discuss.elastic.co/t/indexing-from-ms-excel/95649)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 1\
**Last updated:** [August 3, 2017, 8:12am UTC](https://discuss.elastic.co/t/indexing-from-ms-excel/95649 "2017-08-03T08:12:43Z")

</div>

HI All , I want to indexing data from MS Excel to Elastic search . My project is read data from XL sheet and display it in Kibana . Kibana visualizing the data of Live servers , Users , alerts in an Infra . I know ho…

---

## [Terms lookup mechanism - in reverse?](https://discuss.elastic.co/t/terms-lookup-mechanism-in-reverse/95572)

<div class="topic-metadata">

**Author:** [@chrisburrell](https://discuss.elastic.co/u/chrisburrell)\
**Replies:** 2\
**Last updated:** [August 3, 2017, 8:00am UTC](https://discuss.elastic.co/t/terms-lookup-mechanism-in-reverse/95572 "2017-08-03T08:00:58Z")

</div>

Hi My understanding of the terms lookup mechanism is that you can provide a term and then as a result of that surface the documents that match a particular term name. So for example if you had an User and a Transaction,…

---

## [Can nested fields prevent mapping explosion?](https://discuss.elastic.co/t/can-nested-fields-prevent-mapping-explosion/95464)

<div class="topic-metadata">

**Author:** [@widhalmt](https://discuss.elastic.co/u/widhalmt)\
**Replies:** 2\
**Last updated:** [August 3, 2017, 6:00am UTC](https://discuss.elastic.co/t/can-nested-fields-prevent-mapping-explosion/95464 "2017-08-03T06:00:26Z")

</div>

Hi, We have a situation where we put lot’s of JSON data via Logstash into Elasticsearch. The JSON differs a lot so we get many distinct fieldnames and hit the limit of 1000 fields per Index. As far as I understand the …

---

## [\[geoip.location is not of type geo\_point\] Index pattern does not contain any of the following field types: geo\_point](https://discuss.elastic.co/t/geoip-location-is-not-of-type-geo-point-index-pattern-does-not-contain-any-of-the-following-field-types-geo-point/95536)

<div class="topic-metadata">

**Author:** [@Kshitij\_Karthick](https://discuss.elastic.co/u/Kshitij_Karthick)\
**Replies:** 3\
**Last updated:** [August 3, 2017, 5:51am UTC](https://discuss.elastic.co/t/geoip-location-is-not-of-type-geo-point-index-pattern-does-not-contain-any-of-the-following-field-types-geo-point/95536 "2017-08-03T05:51:41Z")

</div>

Problem I am not able to plot any coordinate map as index pattern does not contain any of the following field types: geo\_point. Upon further investigating the index pattern - the geoip.location has properties \[loc, lat\]…

---

## [Date parsing error](https://discuss.elastic.co/t/date-parsing-error/95493)

<div class="topic-metadata">

**Author:** [@asgoh05](https://discuss.elastic.co/u/asgoh05)\
**Replies:** 10\
**Last updated:** [August 3, 2017, 5:31am UTC](https://discuss.elastic.co/t/date-parsing-error/95493 "2017-08-03T05:31:15Z")

</div>

Hello, I’m beginner of ELK. I got a problem while mapping date of my log file. Does anybody know how to map this kind of date format ? (20170802-022130.497289) My mapping source --\> “column1”: { “type”: “date”, “fo…

---

## [About ELK](https://discuss.elastic.co/t/about-elk/95634)

<div class="topic-metadata">

**Author:** [@zbr1](https://discuss.elastic.co/u/zbr1)\
**Replies:** 4\
**Last updated:** [August 3, 2017, 5:02am UTC](https://discuss.elastic.co/t/about-elk/95634 "2017-08-03T05:02:34Z")

</div>

Hi, Was introduced to ELK suite, ie, Elastic, Logstack, Kibana., it is on open source. However need to know more Its Licencing applicable for on-premise installation Is there local community in in Malaysia, need mor…

---

## [How many nodes at most can be there in one ES cluster?](https://discuss.elastic.co/t/how-many-nodes-at-most-can-be-there-in-one-es-cluster/95639)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 2\
**Last updated:** [August 3, 2017, 4:34am UTC](https://discuss.elastic.co/t/how-many-nodes-at-most-can-be-there-in-one-es-cluster/95639 "2017-08-03T04:34:57Z")

</div>

How many nodes at most can be there in one ES cluster?

---

## [Ulimit issue in elasticsearch](https://discuss.elastic.co/t/ulimit-issue-in-elasticsearch/95576)

<div class="topic-metadata">

**Author:** [@aliyesami](https://discuss.elastic.co/u/aliyesami)\
**Replies:** 2\
**Last updated:** [August 3, 2017, 1:23am UTC](https://discuss.elastic.co/t/ulimit-issue-in-elasticsearch/95576 "2017-08-03T01:23:47Z")

</div>

moderators : I am pretty sure I created this post but i cant see it in my list of questions so please delete the other one if its visible to you. I downloaded and untarred the elasticsearch-5.5.1 into a directory, creat…

---

## [Query on \_id field](https://discuss.elastic.co/t/query-on--id-field/95430)

<div class="topic-metadata">

**Author:** [@xwang12345](https://discuss.elastic.co/u/xwang12345)\
**Replies:** 1\
**Last updated:** [August 2, 2017, 8:59pm UTC](https://discuss.elastic.co/t/query-on--id-field/95430 "2017-08-02T20:59:14Z")

</div>

I had some trouble trying to query the id\_ field The following query works: GET my\_index/my\_type/\_search { "query" : { "match":{ "\_id": "ABC\_my\_content1" } } } But what if I want to search for …

---

## [Specify format in sort query](https://discuss.elastic.co/t/specify-format-in-sort-query/95435)

<div class="topic-metadata">

**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\
**Replies:** 1\
**Last updated:** [August 2, 2017, 8:52pm UTC](https://discuss.elastic.co/t/specify-format-in-sort-query/95435 "2017-08-02T20:52:13Z")

</div>

I have a query, where someDate is of type date. I don’t have control over mapping while creating an index. I wanted to get the value in millis for the following query. Is there a way to do that in ES (via API) GET /myin…

---

## [Multi-index, multi-type field comparison query](https://discuss.elastic.co/t/multi-index-multi-type-field-comparison-query/95579)

<div class="topic-metadata">

**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\
**Replies:** 3\
**Last updated:** [August 2, 2017, 8:44pm UTC](https://discuss.elastic.co/t/multi-index-multi-type-field-comparison-query/95579 "2017-08-02T20:44:45Z")

</div>

I'm trying to do a join-esque type of query, where I want to find results where fieldA == fieldB, where fieldA is of typeA and is in indexA, and fieldB is of typeB and is in indexB. The consensus on how to perform this …

---

## [Exception making Search Query using SearchSourceBuilder](https://discuss.elastic.co/t/exception-making-search-query-using-searchsourcebuilder/95451)

<div class="topic-metadata">

**Author:** [@pankajkchothe](https://discuss.elastic.co/u/pankajkchothe)\
**Replies:** 2\
**Last updated:** [August 2, 2017, 8:21pm UTC](https://discuss.elastic.co/t/exception-making-search-query-using-searchsourcebuilder/95451 "2017-08-02T20:21:18Z")

</div>

Hi Team, I started using Elastic Search 5.3 and I used jest client to query elastic search. I used SearchSourceBuilder to build query. I am setting soft timeout in SearchSourceBuilder but elastic search throwing followi…

---

## [X-pack version](https://discuss.elastic.co/t/x-pack-version/95567)

<div class="topic-metadata">

**Author:** [@ny2359](https://discuss.elastic.co/u/ny2359)\
**Replies:** 3\
**Last updated:** [August 2, 2017, 7:48pm UTC](https://discuss.elastic.co/t/x-pack-version/95567 "2017-08-02T19:48:44Z")

</div>

Plugin installation was unsuccessful due to error “Incorrect Kibana version in p lugin \[x-pack\]. Expected \[5.4.0\]; found \[5.4.3\]” Trying to find correct version in x-pack dowload unsuccessfully.

---

## [Problem with external load balancer hangs occasionally](https://discuss.elastic.co/t/problem-with-external-load-balancer-hangs-occasionally/95595)

<div class="topic-metadata">

**Author:** [@KeninHouston](https://discuss.elastic.co/u/KeninHouston)\
**Replies:** 0\
**Last updated:** [August 2, 2017, 6:44pm UTC](https://discuss.elastic.co/t/problem-with-external-load-balancer-hangs-occasionally/95595 "2017-08-02T18:44:41Z")

</div>

Has anyone else seen the issue that querying the elasticsearch cluster (version 2.4, 3 nodes) behind an external Azure load balancer occasionally times out trying to query? When I query the individual nodes directly, the…

---

## [Fatal error on the network layer](https://discuss.elastic.co/t/fatal-error-on-the-network-layer/95425)

<div class="topic-metadata">

**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\
**Replies:** 10\
**Last updated:** [August 2, 2017, 6:38pm UTC](https://discuss.elastic.co/t/fatal-error-on-the-network-layer/95425 "2017-08-02T18:38:55Z")

</div>

Hi Everyone, I am almost stumped now. My elasticsearch went dead and all shards were in unassigned state. We started the services back and when the shards started getting relocated things were fine upto certain point bu…

---

## [Is there a "real" autocomplete anymore in elastic?](https://discuss.elastic.co/t/is-there-a-real-autocomplete-anymore-in-elastic/95531)

<div class="topic-metadata">

**Author:** [@initproto](https://discuss.elastic.co/u/initproto)\
**Replies:** 7\
**Last updated:** [August 2, 2017, 6:28pm UTC](https://discuss.elastic.co/t/is-there-a-real-autocomplete-anymore-in-elastic/95531 "2017-08-02T18:28:21Z")

</div>

Hi, For the life of me, I can’t understand why elastic changed the useful and common use-case of finding autocompletion words and abandoned it for entire document results? Who and why was this decision made? It creates …

---

## [Apache and IIS Logs on single instance of ElasticSearch, recommended approach?](https://discuss.elastic.co/t/apache-and-iis-logs-on-single-instance-of-elasticsearch-recommended-approach/94969)

<div class="topic-metadata">

**Author:** [@hexpirate](https://discuss.elastic.co/u/hexpirate)\
**Replies:** 3\
**Last updated:** [August 2, 2017, 5:56pm UTC](https://discuss.elastic.co/t/apache-and-iis-logs-on-single-instance-of-elasticsearch-recommended-approach/94969 "2017-08-02T17:56:49Z")

</div>

Relatively new to Elastic products, hopefully this is a simple question. I have Apache logs and I have IIS logs. Can I store both on Elastic at once, how? Looking for advice on how to approach the problem but open to s…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1990)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1992)
