# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=383 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 384 --- ## [Date histogram omitting buckets](https://discuss.elastic.co/t/date-histogram-omitting-buckets/311209)
**Author:** [@thahgr](https://discuss.elastic.co/u/thahgr)\ **Replies:** 1\ **Last updated:** [August 30, 2022, 10:41am UTC](https://discuss.elastic.co/t/date-histogram-omitting-buckets/311209 "2022-08-30T10:41:39Z")
I am trying to get a result like the kibana "discover" tab like below via date\_histogram functionality my request is as below GET index-\*/\_search { "size": 0, "aggs": { "stats": { "date\_histogram": { … --- ## [How to install elasticsearch in ubuntu and configure it to be standalone?](https://discuss.elastic.co/t/how-to-install-elasticsearch-in-ubuntu-and-configure-it-to-be-standalone/313237)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 5\ **Last updated:** [August 30, 2022, 10:19am UTC](https://discuss.elastic.co/t/how-to-install-elasticsearch-in-ubuntu-and-configure-it-to-be-standalone/313237 "2022-08-30T10:19:54Z")
how to install elasticsearch in ubuntu and configure it to be standalone? --- ## [Elastic: Filtering data after grouping](https://discuss.elastic.co/t/elastic-filtering-data-after-grouping/313240)
**Author:** [@fchen521](https://discuss.elastic.co/u/fchen521)\ **Replies:** 0\ **Last updated:** [August 30, 2022, 9:52am UTC](https://discuss.elastic.co/t/elastic-filtering-data-after-grouping/313240 "2022-08-30T09:52:53Z")
First aggregate according to the people, then count the data in each group, and filter out the people whose start time field is \> minimum time - 10 days and whose start time is \< minimum time + 10 days Is this all right… --- ## [Modeling product data with frequent updates](https://discuss.elastic.co/t/modeling-product-data-with-frequent-updates/312712)
**Author:** [@t0mer](https://discuss.elastic.co/u/t0mer)\ **Replies:** 1\ **Last updated:** [August 30, 2022, 9:00am UTC](https://discuss.elastic.co/t/modeling-product-data-with-frequent-updates/312712 "2022-08-30T09:00:38Z")
Hi, We're struggling with modeling our data in Elasticsearch, and decided to change it. What we have today: single index to store product data, which holds data of 2 types - \[1\] Some product data that changes rarely - … --- ## [Error No index created - reason"=\>"Validation Failed: 1: this action would add \[2\] shards](https://discuss.elastic.co/t/error-no-index-created-reason-validation-failed-1-this-action-would-add-2-shards/313144)
**Author:** [@ehmontesinos](https://discuss.elastic.co/u/ehmontesinos)\ **Replies:** 7\ **Last updated:** [August 30, 2022, 8:39am UTC](https://discuss.elastic.co/t/error-no-index-created-reason-validation-failed-1-this-action-would-add-2-shards/313144 "2022-08-30T08:39:49Z")
Good morning, I have an ELK environment installed in version 8.1. Within this environment, I have configured several pipelines that collect daily csv files to process them and convert them into indexes in Elasticsearch … --- ## [Using MISP alerts on my network](https://discuss.elastic.co/t/using-misp-alerts-on-my-network/313168)
**Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\ **Replies:** 2\ **Last updated:** [August 30, 2022, 8:27am UTC](https://discuss.elastic.co/t/using-misp-alerts-on-my-network/313168 "2022-08-30T08:27:45Z")
Hello, Can I use Misp alerts on my network? One exemple, i access one website and this site have alerts on MISP, can i connect the MISP alert of this website to my elasticsearch? --- ## [Date\_time\_exception: Invalid value for MonthOfYear (valid values 1 - 12): 28](https://discuss.elastic.co/t/date-time-exception-invalid-value-for-monthofyear-valid-values-1-12-28/313208)
**Author:** [@Gex1](https://discuss.elastic.co/u/Gex1)\ **Replies:** 11\ **Last updated:** [August 30, 2022, 7:50am UTC](https://discuss.elastic.co/t/date-time-exception-invalid-value-for-monthofyear-valid-values-1-12-28/313208 "2022-08-30T07:50:14Z")
I am using ES 7.10.0 In my case I expect date values like: Case1: 28/09/2022:02:00:00 Case2: 09/28/2022:02:00:00 Case3: 2022-09-28T02:00:00 Below is the template, which I am using: PUT \_template/template\_1 { "ind… --- ## [Create and edit elasticseaarch index](https://discuss.elastic.co/t/create-and-edit-elasticseaarch-index/313152)
**Author:** [@Ismet](https://discuss.elastic.co/u/Ismet)\ **Replies:** 3\ **Last updated:** [August 30, 2022, 7:13am UTC](https://discuss.elastic.co/t/create-and-edit-elasticseaarch-index/313152 "2022-08-30T07:13:15Z")
I have created an index with default mapping. In my case, I need to search data with special characters like čćš, and nested data up to 3 levels. Questions: Is it possible to override default settings, analyzer and fi… --- ## [ES 6.8.23 too many Full GC](https://discuss.elastic.co/t/es-6-8-23-too-many-full-gc/312478)
**Author:** [@Andrey\_Tyutyunov](https://discuss.elastic.co/u/Andrey_Tyutyunov)\ **Replies:** 3\ **Last updated:** [August 30, 2022, 3:55am UTC](https://discuss.elastic.co/t/es-6-8-23-too-many-full-gc/312478 "2022-08-30T03:55:31Z")
Good day! Version 6.8.23 3 nodes, 26GB heap per node, 64GB RAM on each node java 14 Indices: 49 Documents 516,257,116 Disk Usage 872.0 GB Primary Shards 165 Replica Shards 165 Search Rate (/s) ~ 750 /s (total sh… --- ## [Resolving mapping parser errors](https://discuss.elastic.co/t/resolving-mapping-parser-errors/312840)
**Author:** [@Austin\_ES\_Questions](https://discuss.elastic.co/u/Austin_ES_Questions)\ **Replies:** 3\ **Last updated:** [August 29, 2022, 11:40pm UTC](https://discuss.elastic.co/t/resolving-mapping-parser-errors/312840 "2022-08-29T23:40:41Z")
I'm using filebeat -\> pipeline -\> Elasticsearch, so at the moment everything is going to one index. at some point this field structure was inferred from my data "name": { "properties":… --- ## [.monitoring-es indexes blow up, have no policies associated?](https://discuss.elastic.co/t/monitoring-es-indexes-blow-up-have-no-policies-associated/313186)
**Author:** [@wrobitza\_aveq](https://discuss.elastic.co/u/wrobitza_aveq)\ **Replies:** 6\ **Last updated:** [August 29, 2022, 5:55pm UTC](https://discuss.elastic.co/t/monitoring-es-indexes-blow-up-have-no-policies-associated/313186 "2022-08-29T17:55:41Z")
I've enabled Stack Monitoring in Kibana, just for the purpose of trying it out. Now, after a couple of days, I see that my stack is using a lot of disk memory. I was able to delete the individual .es-monitoring\* indices… --- ## [How to apply the right stopwords langage depending on the field of a document?](https://discuss.elastic.co/t/how-to-apply-the-right-stopwords-langage-depending-on-the-field-of-a-document/313156)
**Author:** [@minikali](https://discuss.elastic.co/u/minikali)\ **Replies:** 1\ **Last updated:** [August 29, 2022, 4:31pm UTC](https://discuss.elastic.co/t/how-to-apply-the-right-stopwords-langage-depending-on-the-field-of-a-document/313156 "2022-08-29T16:31:16Z")
Let's say I have an index of News with many documents of different langages. Users have one search bar to look for the title they desire among the different langages. I don't know which langage the user is typing so I wo… --- ## [AWS service vpce name](https://discuss.elastic.co/t/aws-service-vpce-name/313160)
**Author:** [@Xiaoyu\_Que](https://discuss.elastic.co/u/Xiaoyu_Que)\ **Replies:** 1\ **Last updated:** [August 29, 2022, 3:43pm UTC](https://discuss.elastic.co/t/aws-service-vpce-name/313160 "2022-08-29T15:43:06Z")
Hi I'm seeing new version 8.4.0 migrating aws service domain name from aws.elastic-cloud.com to .aws.found.io. I'm quite concerned about the following things: I didn't see any related release note in #8.4.0. Any tutori… --- ## [Backup indices and data stored in ELK](https://discuss.elastic.co/t/backup-indices-and-data-stored-in-elk/313003)
**Author:** [@Clonky](https://discuss.elastic.co/u/Clonky)\ **Replies:** 8\ **Last updated:** [August 29, 2022, 2:58pm UTC](https://discuss.elastic.co/t/backup-indices-and-data-stored-in-elk/313003 "2022-08-29T14:58:03Z")
HI guys, I am rather new to ELK (7.16). So far I have registered a repository and can create now snapshots. I have used the following API command: PUT /\_snapshot/BackUpELKData/snapshot\_2?wait\_for\_completion=true { "ind… --- ## [How to aggregate runtime\_mappings fields](https://discuss.elastic.co/t/how-to-aggregate-runtime-mappings-fields/313173)
**Author:** [@eguenou](https://discuss.elastic.co/u/eguenou)\ **Replies:** 0\ **Last updated:** [August 29, 2022, 1:52pm UTC](https://discuss.elastic.co/t/how-to-aggregate-runtime-mappings-fields/313173 "2022-08-29T13:52:32Z")
Hi, I'm trying to join two indices using the runtime\_mappings as described here. The join seems OK however the aggregation always returns 0. Can someone help ? Here is the code : POST parent\_index/\_search { "size": 0… --- ## [Anomaly detector query to find IPs that only visit a specific page?](https://discuss.elastic.co/t/anomaly-detector-query-to-find-ips-that-only-visit-a-specific-page/312647)
**Author:** [@parkerjthomas](https://discuss.elastic.co/u/parkerjthomas)\ **Replies:** 14\ **Last updated:** [August 29, 2022, 1:59pm UTC](https://discuss.elastic.co/t/anomaly-detector-query-to-find-ips-that-only-visit-a-specific-page/312647 "2022-08-29T13:59:53Z")
I am looking for a way to find IPs that are only hitting a specific page repeatedly to detect credential stuffing with an anomaly detector. I currently have a detector setup to look for 401 responses coming from visits … --- ## [Elastic rule throwing error when checking for preview](https://discuss.elastic.co/t/elastic-rule-throwing-error-when-checking-for-preview/312643)
**Author:** [@siemdude](https://discuss.elastic.co/u/siemdude)\ **Replies:** 8\ **Last updated:** [August 29, 2022, 1:25pm UTC](https://discuss.elastic.co/t/elastic-rule-throwing-error-when-checking-for-preview/312643 "2022-08-29T13:25:26Z")
I have built a rule in Elastic following my search keywords in Discover. However the rule throws error while checking for preview and never fires. I think logic is solid, indexing is solid as well. But not sure what is c… --- ## [Kibana server is not ready yet . (Error: Failure installing common resources shared between all indices.)](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-error-failure-installing-common-resources-shared-between-all-indices/313142)
**Author:** [@bbkunbi](https://discuss.elastic.co/u/bbkunbi)\ **Replies:** 2\ **Last updated:** [August 29, 2022, 9:28am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-error-failure-installing-common-resources-shared-between-all-indices/313142 "2022-08-29T09:28:18Z")
Error: Kibana server is not ready yet, My kibana.log file is below sudo tail /var/log/kibana/kibana.log bhaveshk@linux:~$ sudo tail /var/log/kibana/kibana.log {"type":"log","@timestamp":"2022-08-29T13:12:06+05… --- ## [Illegal\_argument\_exception when trying to see Security/Hosts](https://discuss.elastic.co/t/illegal-argument-exception-when-trying-to-see-security-hosts/313140)
**Author:** [@cheshirecat](https://discuss.elastic.co/u/cheshirecat)\ **Replies:** 0\ **Last updated:** [August 29, 2022, 9:03am UTC](https://discuss.elastic.co/t/illegal-argument-exception-when-trying-to-see-security-hosts/313140 "2022-08-29T09:03:42Z")
Hello! I am trying to see hosts on one of my clusters (self-hosted). I have got three nodes here. When I go to Security/Host I get error 400: Full error message: { "message": "status\_exception", "statusCode": … --- ## [Is there any way to use the search result from one index to search on another index?](https://discuss.elastic.co/t/is-there-any-way-to-use-the-search-result-from-one-index-to-search-on-another-index/313131)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 1\ **Last updated:** [August 29, 2022, 9:04am UTC](https://discuss.elastic.co/t/is-there-any-way-to-use-the-search-result-from-one-index-to-search-on-another-index/313131 "2022-08-29T09:04:42Z")
I wanted to search for some data on the first index. Then I need to find the unique values of a specific field in the above search result, and search for the them in the second index. The names of the indices are diffe… --- ## [Word\_delimiter behaviour using match query with operator and](https://discuss.elastic.co/t/word-delimiter-behaviour-using-match-query-with-operator-and/313135)
**Author:** [@the\_hoff](https://discuss.elastic.co/u/the_hoff)\ **Replies:** 0\ **Last updated:** [August 29, 2022, 8:35am UTC](https://discuss.elastic.co/t/word-delimiter-behaviour-using-match-query-with-operator-and/313135 "2022-08-29T08:35:20Z")
Hi folks, I am currently using the word\_delimiter for splitting up tokens to subtokens with Elastic Version 7.9.2.I do get an unexpected outcome using the delimiter filter with a match query and operator "and" and I am … --- ## [Indices of elasticsearch](https://discuss.elastic.co/t/indices-of-elasticsearch/313073)
**Author:** [@Milan\_Dangol](https://discuss.elastic.co/u/Milan_Dangol)\ **Replies:** 2\ **Last updated:** [August 29, 2022, 8:51am UTC](https://discuss.elastic.co/t/indices-of-elasticsearch/313073 "2022-08-29T08:51:38Z")
Hello there! I am new to elasticsearch. So i was looking around ILM and it was a quite useful tool to remove old indices. But my concern here is, when i looked into /var/lib/elasticsearch. There was a folder named indice… --- ## [Max count of a index in a day](https://discuss.elastic.co/t/max-count-of-a-index-in-a-day/313133)
**Author:** [@maruf](https://discuss.elastic.co/u/maruf)\ **Replies:** 0\ **Last updated:** [August 29, 2022, 8:30am UTC](https://discuss.elastic.co/t/max-count-of-a-index-in-a-day/313133 "2022-08-29T08:30:59Z")
Hi, I am new to elasticsearch. We are using ELK stack for logging nginx and various logs. Is there a way to aggregate today's max for an index pattern? Example: In Kibana I can see the spike, I want to get that ti… --- ## [How to get the health status of a single index in elasticsearch?](https://discuss.elastic.co/t/how-to-get-the-health-status-of-a-single-index-in-elasticsearch/313129)
**Author:** [@dishant.sharma](https://discuss.elastic.co/u/dishant.sharma)\ **Replies:** 1\ **Last updated:** [August 29, 2022, 8:09am UTC](https://discuss.elastic.co/t/how-to-get-the-health-status-of-a-single-index-in-elasticsearch/313129 "2022-08-29T08:09:39Z")
I am using elasticsearch 5.6.16. I know about the cluster health and cat health APIs which come bundled with elasticsearch 5.6 I want to know the status of a particular index found inside my elasticsearch local instance… --- ## [How to access old indices from rollover alias after rollover in ES 7.16](https://discuss.elastic.co/t/how-to-access-old-indices-from-rollover-alias-after-rollover-in-es-7-16/313081)
**Author:** [@sambhav\_khare](https://discuss.elastic.co/u/sambhav_khare)\ **Replies:** 1\ **Last updated:** [August 29, 2022, 6:36am UTC](https://discuss.elastic.co/t/how-to-access-old-indices-from-rollover-alias-after-rollover-in-es-7-16/313081 "2022-08-29T06:36:59Z")
I have a template and policy to rollover and delete the indexes after 2 days but after rollover old indices will not be pointing to rollover alias and will have data that will be needed for 2 more days. Template: { "… --- ## [Remove elastic auth page but use x-pack](https://discuss.elastic.co/t/remove-elastic-auth-page-but-use-x-pack/313105)
**Author:** [@Murali\_Krishna2](https://discuss.elastic.co/u/Murali_Krishna2)\ **Replies:** 1\ **Last updated:** [August 29, 2022, 5:32am UTC](https://discuss.elastic.co/t/remove-elastic-auth-page-but-use-x-pack/313105 "2022-08-29T05:32:57Z")
Hi Team, In our company, we are using the elastic stack for the last 4 years. As x-pack security was only for paid users before. Instead of x-pack, we used google authentication for login. Once a user log-in with the… --- ## [Elastic Cloud Pricing Question](https://discuss.elastic.co/t/elastic-cloud-pricing-question/313079)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [August 29, 2022, 3:43am UTC](https://discuss.elastic.co/t/elastic-cloud-pricing-question/313079 "2022-08-29T03:43:44Z")
Hi there, I was reading this article: and I have a question to better understand the pricing mode. Let us say I have choose (as stated in the example) a “Compute Optimized” profile. This means in the first place mor… --- ## [Help me...! Error Caused by: java.lang.IllegalStateException: jar hell!](https://discuss.elastic.co/t/help-me-error-caused-by-java-lang-illegalstateexception-jar-hell/313116)
**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\ **Replies:** 1\ **Last updated:** [August 29, 2022, 2:39am UTC](https://discuss.elastic.co/t/help-me-error-caused-by-java-lang-illegalstateexception-jar-hell/313116 "2022-08-29T02:39:28Z")
The following error is occurring So I deleted the lib in elasticsearch/lib, but if I delete it, another error occurs If I try to delete it from the java project, a code compilation error occurs, what should I do? grad… --- ## [Resolving master node election issues](https://discuss.elastic.co/t/resolving-master-node-election-issues/313054)
**Author:** [@christhegrand](https://discuss.elastic.co/u/christhegrand)\ **Replies:** 1\ **Last updated:** [August 29, 2022, 1:36am UTC](https://discuss.elastic.co/t/resolving-master-node-election-issues/313054 "2022-08-29T01:36:11Z")
Hello, I'm using the ECK stack to run Elasticsearch. Right now it looks like there is no known master node and the election attempts are failing. How do I fix this? Some logs are included below: {"type": "server", "tim… --- ## [Debugging error when using suggest in elastic search](https://discuss.elastic.co/t/debugging-error-when-using-suggest-in-elastic-search/313115)
**Author:** [@Duc\_Vo](https://discuss.elastic.co/u/Duc_Vo)\ **Replies:** 0\ **Last updated:** [August 29, 2022, 1:34am UTC](https://discuss.elastic.co/t/debugging-error-when-using-suggest-in-elastic-search/313115 "2022-08-29T01:34:50Z")
Invalid NEST response built from a unsuccessful (400) low level call on POST: /demo\_products/\_search?pretty=true&typed\_keys=true Audit trail of this API call: \[1\] ProductCheckOnStartup: Took: 00:00:00.2614523 \[2\] Produ… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=382) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=384)