# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=794 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 795 --- ## [How to apply a histogram aggregation from the set of doc\_counts from a previous aggregation?](https://discuss.elastic.co/t/how-to-apply-a-histogram-aggregation-from-the-set-of-doc-counts-from-a-previous-aggregation/250883)
**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\ **Replies:** 2\ **Last updated:** [October 5, 2020, 9:26am UTC](https://discuss.elastic.co/t/how-to-apply-a-histogram-aggregation-from-the-set-of-doc-counts-from-a-previous-aggregation/250883 "2020-10-05T09:26:54Z")
I ran a terms aggregation and got back a bunch of buckets with keys and doc\_counts. I want to treat the doc\_counts from all the buckets returned as the input for a histogram aggregation (treat the doc\_counts as a set). T… --- ## [Gradle Build failing with Java 11](https://discuss.elastic.co/t/gradle-build-failing-with-java-11/250862)
**Author:** [@afeesps](https://discuss.elastic.co/u/afeesps)\ **Replies:** 1\ **Last updated:** [October 5, 2020, 9:06am UTC](https://discuss.elastic.co/t/gradle-build-failing-with-java-11/250862 "2020-10-05T09:06:23Z")
Getting an Exception like this while compiling with Gradle ./gradlew :distribution:archives:windows-zip:assemble \*\*Execution failed for task ':x-pack:plugin:moni\*\* \*\*\> java.lang.AssertionError: isSubtype UNKNOWN\*\* OS … --- ## [Elasticsearch and ARM processors (Allwinner H6)](https://discuss.elastic.co/t/elasticsearch-and-arm-processors-allwinner-h6/250926)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 0\ **Last updated:** [October 5, 2020, 5:29am UTC](https://discuss.elastic.co/t/elasticsearch-and-arm-processors-allwinner-h6/250926 "2020-10-05T05:29:05Z")
Hi, I have a question about Elasticsearch on platforms with ARM processors. I want to test Elasticsearch on the latest version of Orange Pi 4. I'm thinking about: Orange Pi 4 4GB DDR4 with Rockchip RK3399 Dual-core C… --- ## [Query Nested Array](https://discuss.elastic.co/t/query-nested-array/250921)
**Author:** [@arinjay97](https://discuss.elastic.co/u/arinjay97)\ **Replies:** 0\ **Last updated:** [October 5, 2020, 4:42am UTC](https://discuss.elastic.co/t/query-nested-array/250921 "2020-10-05T04:42:37Z")
I have an object that I want to index into an Elasticsearch index. Some of the fields inside the object have a nested array of JSON objects inside them. For example: "history":\[ {"color":"w","from":"g2","to":"g4","fla… --- ## [Elasticsearch Mapping to ECS](https://discuss.elastic.co/t/elasticsearch-mapping-to-ecs/250913)
**Author:** [@bn1980](https://discuss.elastic.co/u/bn1980)\ **Replies:** 0\ **Last updated:** [October 5, 2020, 1:37am UTC](https://discuss.elastic.co/t/elasticsearch-mapping-to-ecs/250913 "2020-10-05T01:37:40Z")
I have logstash creating a daily index index =\> "logstash-suricata-%{+YYYY.MM.dd}" In order to create a mapping i am using a template which is assigned in logstash config template =\> "/usr/local/etc/logstash/suricat… --- ## [How to increase elasticsearch disk space](https://discuss.elastic.co/t/how-to-increase-elasticsearch-disk-space/250132)
**Author:** [@hourtest](https://discuss.elastic.co/u/hourtest)\ **Replies:** 2\ **Last updated:** [October 5, 2020, 2:22am UTC](https://discuss.elastic.co/t/how-to-increase-elasticsearch-disk-space/250132 "2020-10-05T02:22:42Z")
Not enough capacity I want to increase capacity maybe 50gb to 500gb how should I do --- ## [Help needed in making a query for elastic search](https://discuss.elastic.co/t/help-needed-in-making-a-query-for-elastic-search/250477)
**Author:** [@vishalYadav](https://discuss.elastic.co/u/vishalYadav)\ **Replies:** 8\ **Last updated:** [October 4, 2020, 8:20am UTC](https://discuss.elastic.co/t/help-needed-in-making-a-query-for-elastic-search/250477 "2020-10-04T08:20:26Z")
Hey,I am working on a index which has 300 fieds in it.Now there is a requirement where i have to make 2 field irrelevent for searching in that index.As of now i am using \*.\* to search . i studied somewhere we can mak… --- ## [Audit Events for Elasticsearch](https://discuss.elastic.co/t/audit-events-for-elasticsearch/250885)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 0\ **Last updated:** [October 4, 2020, 6:06am UTC](https://discuss.elastic.co/t/audit-events-for-elasticsearch/250885 "2020-10-04T06:06:43Z")
Hello, Can someone explain me what is the difference between the Elasticsearch Audit Events and Kibana audit Events. I observed that my elasticsearch audit event file is much larger its is like 18 GB or much more than … --- ## [3 ESXi virtual machines, versus 3 dockers on a single ESXi virtual machine](https://discuss.elastic.co/t/3-esxi-virtual-machines-versus-3-dockers-on-a-single-esxi-virtual-machine/250884)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [October 4, 2020, 4:04am UTC](https://discuss.elastic.co/t/3-esxi-virtual-machines-versus-3-dockers-on-a-single-esxi-virtual-machine/250884 "2020-10-04T04:04:25Z")
Currently I have 3 nodes on docker on the same virtual machine , the size of a monthly indexing is 200GB, a colleague recently install APM on elastic producing an index of 135GB so now monthly indexing is 335GB, we where… --- ## [Cannot open data from 5.x in 6.x : Mappings](https://discuss.elastic.co/t/cannot-open-data-from-5-x-in-6-x-mappings/250346)
**Author:** [@yBother](https://discuss.elastic.co/u/yBother)\ **Replies:** 12\ **Last updated:** [October 3, 2020, 3:40pm UTC](https://discuss.elastic.co/t/cannot-open-data-from-5-x-in-6-x-mappings/250346 "2020-10-03T15:40:51Z")
I've created a routine that updates ES clients from 5.x to 6.x and finally 7.x Somehow some clients cannot be updated. Loading existing data in 6.8 fails. Appearently some mappings are causing this. But there are not… --- ## [Elasticsearch ignores the \`xpack.security.transport.ssl.certificate\_authorities\` parameter](https://discuss.elastic.co/t/elasticsearch-ignores-the-xpack-security-transport-ssl-certificate-authorities-parameter/250836)
**Author:** [@gimpastic](https://discuss.elastic.co/u/gimpastic)\ **Replies:** 1\ **Last updated:** [October 3, 2020, 3:36pm UTC](https://discuss.elastic.co/t/elasticsearch-ignores-the-xpack-security-transport-ssl-certificate-authorities-parameter/250836 "2020-10-03T15:36:02Z")
Hi, It seems like there is some misleading or a bug with the parameters: key, certificate, certificate\_authorities Elasticsearch ignores the xpack.security.transport.ssl.certificate\_authorities parameter The Elasticsea… --- ## [Execute a kibana pipeline from kibana cloud platform](https://discuss.elastic.co/t/execute-a-kibana-pipeline-from-kibana-cloud-platform/250875)
**Author:** [@Jordi](https://discuss.elastic.co/u/Jordi)\ **Replies:** 0\ **Last updated:** [October 3, 2020, 3:03pm UTC](https://discuss.elastic.co/t/execute-a-kibana-pipeline-from-kibana-cloud-platform/250875 "2020-10-03T15:03:34Z")
I am using kibana from the cloud and not from a local server. I have an index with data in Elastic, and I have created a pipeline from kibana that imports the data from a csv file and inserts it into the elastic index. M… --- ## [Elasticsearch random ConnectionnTimeout error](https://discuss.elastic.co/t/elasticsearch-random-connectionntimeout-error/250867)
**Author:** [@Ara\_Nguyen](https://discuss.elastic.co/u/Ara_Nguyen)\ **Replies:** 1\ **Last updated:** [October 3, 2020, 2:56pm UTC](https://discuss.elastic.co/t/elasticsearch-random-connectionntimeout-error/250867 "2020-10-03T14:56:07Z")
Hi all, I'm using Amazon Elasticsearch with RestHighLevelClient for our team application and have noticed occasional small dips in our success rate from canary traffic calling our API due to the error below. Caused… --- ## [Multiple Nodes Single Machine](https://discuss.elastic.co/t/multiple-nodes-single-machine/247298)
**Author:** [@scaferton](https://discuss.elastic.co/u/scaferton)\ **Replies:** 15\ **Last updated:** [October 3, 2020, 2:19pm UTC](https://discuss.elastic.co/t/multiple-nodes-single-machine/247298 "2020-10-03T14:19:03Z")
Good Evening, I've been researching this use case for a couple of days and it looks like there is about a thread per year on it. It also looks like the answers have changed over time. I believe I have a valid use case f… --- ## [Modeling parent/child relationship boosting child search with parent attribute](https://discuss.elastic.co/t/modeling-parent-child-relationship-boosting-child-search-with-parent-attribute/250829)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 2\ **Last updated:** [October 3, 2020, 12:46pm UTC](https://discuss.elastic.co/t/modeling-parent-child-relationship-boosting-child-search-with-parent-attribute/250829 "2020-10-03T12:46:51Z")
Hello I'd like to find out what your thoughts are on the following use case: We have a service that indexes thousands o products from each of our individual client's Those clients buy monthly an amount of credits Each… --- ## [Why numbers don't match when profiling an Elasticsearch slow request](https://discuss.elastic.co/t/why-numbers-dont-match-when-profiling-an-elasticsearch-slow-request/250072)
**Author:** [@Glamdring](https://discuss.elastic.co/u/Glamdring)\ **Replies:** 2\ **Last updated:** [October 3, 2020, 10:41am UTC](https://discuss.elastic.co/t/why-numbers-dont-match-when-profiling-an-elasticsearch-slow-request/250072 "2020-10-03T10:41:30Z")
I'm having some unexpectedly slow queries and so I ran the profiling API (Elasticsearch 7.4). However, it doesn't explain the slowness, as all components take at most a couple of milliseconods, whereas the query "took" m… --- ## [Unable to Start Elasticsearch](https://discuss.elastic.co/t/unable-to-start-elasticsearch/250625)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 2\ **Last updated:** [October 3, 2020, 10:36am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch/250625 "2020-10-03T10:36:25Z")
OS:- RHEL 7 ES Version: 6.7 ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Thu 2020-1… --- ## [ConfigurationError: Missing node(s)](https://discuss.elastic.co/t/configurationerror-missing-node-s/250841)
**Author:** [@glimmbo](https://discuss.elastic.co/u/glimmbo)\ **Replies:** 1\ **Last updated:** [October 3, 2020, 2:44am UTC](https://discuss.elastic.co/t/configurationerror-missing-node-s/250841 "2020-10-03T02:44:37Z")
I am using the JS client to connect to AWS Elasticsearch Service. With the setup: import { Client, ClientOptions } from "@elastic/elasticsearch" const { ES\_AWS\_ENDPOINT, ES\_AWS\_USER, ES\_AWS\_PASSWORD, } = process.… --- ## [Elasticseach filter on logstash not working?](https://discuss.elastic.co/t/elasticseach-filter-on-logstash-not-working/250849)
**Author:** [@sdonkey](https://discuss.elastic.co/u/sdonkey)\ **Replies:** 0\ **Last updated:** [October 2, 2020, 10:38pm UTC](https://discuss.elastic.co/t/elasticseach-filter-on-logstash-not-working/250849 "2020-10-02T22:38:24Z")
Hi, I'm trying to use the elastic search filter on logstash for make some Data Enrichment. I got two indexes, and my goal it's get some data from one of them and add it to the other. I configured a logstash filter who… --- ## [Updating plugins with the ansible\\elasticsearch playbook](https://discuss.elastic.co/t/updating-plugins-with-the-ansible-elasticsearch-playbook/245952)
**Author:** [@biggtimber](https://discuss.elastic.co/u/biggtimber)\ **Replies:** 2\ **Last updated:** [October 2, 2020, 7:38pm UTC](https://discuss.elastic.co/t/updating-plugins-with-the-ansible-elasticsearch-playbook/245952 "2020-10-02T19:38:52Z")
How do you use the ansible\\elasticsearch playbook to update the es\_plugins? I did an update from 7.8 to 7.9 and it's not updating the plugin. --- ## [Elasticsearch crashing Java Runtime Environment](https://discuss.elastic.co/t/elasticsearch-crashing-java-runtime-environment/250835)
**Author:** [@Cain310](https://discuss.elastic.co/u/Cain310)\ **Replies:** 0\ **Last updated:** [October 2, 2020, 6:16pm UTC](https://discuss.elastic.co/t/elasticsearch-crashing-java-runtime-environment/250835 "2020-10-02T18:16:57Z")
Tried debugging this issue myself not sure whats up. Just crashes when not running or doing anything at random time. elastic version 7.9.2 H/W path Device Class Description =============… --- ## [How to use select bucket aggregation](https://discuss.elastic.co/t/how-to-use-select-bucket-aggregation/250181)
**Author:** [@wifi](https://discuss.elastic.co/u/wifi)\ **Replies:** 4\ **Last updated:** [October 2, 2020, 2:43pm UTC](https://discuss.elastic.co/t/how-to-use-select-bucket-aggregation/250181 "2020-10-02T14:43:36Z")
I want to get a list of processes that utilize more than 1% CPU. So I created a nested bucket aggregation query which ends in an avg aggregation: GET metricbeat-\*/\_search { "aggs": { "host": { "terms": { … --- ## [Profile API/ Debugging Slow queries](https://discuss.elastic.co/t/profile-api-debugging-slow-queries/250800)
**Author:** [@abhinav\_elk](https://discuss.elastic.co/u/abhinav_elk)\ **Replies:** 0\ **Last updated:** [October 2, 2020, 2:20pm UTC](https://discuss.elastic.co/t/profile-api-debugging-slow-queries/250800 "2020-10-02T14:20:23Z")
I am using Elastic Version Number - 5.6.16 Lucene\_version - 6.6.1 I have some slow queries running on production environment. Upon profiling the requests, and adding the total times of individual components on differ… --- ## [Aggregation & max value from doc\_count](https://discuss.elastic.co/t/aggregation-max-value-from-doc-count/250376)
**Author:** [@KRISHNAPRASAD\_HG](https://discuss.elastic.co/u/KRISHNAPRASAD_HG)\ **Replies:** 2\ **Last updated:** [October 2, 2020, 2:04pm UTC](https://discuss.elastic.co/t/aggregation-max-value-from-doc-count/250376 "2020-10-02T14:04:10Z")
Hello, Hello, I need help for aggregation query. Query : GET index-\*/\_search { "aggs": { "genres": { "terms": { "field": "COMPONENT\_NAME", "min\_doc\_count": 5 } } }, "query": { "bool": { "filter": \[ { "r… --- ## [Upgrading Elastic Search from 5.6.3 to 6.8.2](https://discuss.elastic.co/t/upgrading-elastic-search-from-5-6-3-to-6-8-2/250797)
**Author:** [@Philippe1](https://discuss.elastic.co/u/Philippe1)\ **Replies:** 0\ **Last updated:** [October 2, 2020, 1:54pm UTC](https://discuss.elastic.co/t/upgrading-elastic-search-from-5-6-3-to-6-8-2/250797 "2020-10-02T13:54:19Z")
Hi, I'm upgrading my ES node from 5.6.3 to 6.8.2 on Linux CentOS 7.8. After installing ES, it fails to start with this error : Exception in thread "main" java.lang.NoSuchMethodError: org.elasticsearch.common.xcontent.… --- ## [Install and configure elasticsearch 6.8 and 7.9 on a Single Ubuntu server](https://discuss.elastic.co/t/install-and-configure-elasticsearch-6-8-and-7-9-on-a-single-ubuntu-server/250785)
**Author:** [@hemangc](https://discuss.elastic.co/u/hemangc)\ **Replies:** 3\ **Last updated:** [October 2, 2020, 1:52pm UTC](https://discuss.elastic.co/t/install-and-configure-elasticsearch-6-8-and-7-9-on-a-single-ubuntu-server/250785 "2020-10-02T13:52:43Z")
Hi Guys, I am trying to configure Elasticsearch version 6.8 and version 7.9 on one Ubuntu server. Both versions will be communicate with diffrent TCP port. I am having a trouble while configuring this scenarion in one … --- ## [Can not parse valid JSON message in LogStash](https://discuss.elastic.co/t/can-not-parse-valid-json-message-in-logstash/250791)
**Author:** [@dencowboy](https://discuss.elastic.co/u/dencowboy)\ **Replies:** 0\ **Last updated:** [October 2, 2020, 1:27pm UTC](https://discuss.elastic.co/t/can-not-parse-valid-json-message-in-logstash/250791 "2020-10-02T13:27:00Z")
I'm using ElasticSearch 7.7 and logstash 7.9.2. This is my configuration: input { kinesis { kinesis\_stream\_name =\> "xxx-${ENV}" application\_name =\> "xxx-${ENV}" region =\> "eu-west-1" tags =\> \["log"\] … --- ## [Filter\_path in POST Body](https://discuss.elastic.co/t/filter-path-in-post-body/250776)
**Author:** [@Dev-Flo](https://discuss.elastic.co/u/Dev-Flo)\ **Replies:** 2\ **Last updated:** [October 2, 2020, 12:09pm UTC](https://discuss.elastic.co/t/filter-path-in-post-body/250776 "2020-10-02T12:09:57Z")
Hey, the responses I get from Elastisearch are rather huge. I've found out that it is possible to remove data of responses by using response filtering: Is there any way to put the filter inside a POST body so that I … --- ## [Kibana is not able to fetch data from kibana collector](https://discuss.elastic.co/t/kibana-is-not-able-to-fetch-data-from-kibana-collector/250694)
**Author:** [@sudhakar1](https://discuss.elastic.co/u/sudhakar1)\ **Replies:** 7\ **Last updated:** [October 2, 2020, 11:55am UTC](https://discuss.elastic.co/t/kibana-is-not-able-to-fetch-data-from-kibana-collector/250694 "2020-10-02T11:55:39Z")
Kibana is not able to fetch data from kibana collector error is showing as screen shot below. Also Elastic Search is crashing , I am running ES 6.5.4 http://localhost:9200/\_cluster/stats {"\_nodes":{"total":1,"successfu… --- ## [ES service keeps crashing](https://discuss.elastic.co/t/es-service-keeps-crashing/250661)
**Author:** [@Craig2188](https://discuss.elastic.co/u/Craig2188)\ **Replies:** 11\ **Last updated:** [October 2, 2020, 10:38am UTC](https://discuss.elastic.co/t/es-service-keeps-crashing/250661 "2020-10-02T10:38:48Z")
Hi, Just realised that after I start the service for Elastic it stops running after about 2 minutes. Checked the event logs and see some errors: Application: elasticsearch.exe Framework Version: v4.0.30319 Descripti… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=793) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=795)