# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=800 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 801 --- ## [Cluster not forming](https://discuss.elastic.co/t/cluster-not-forming/249948)
**Author:** [@ggrocott](https://discuss.elastic.co/u/ggrocott)\ **Replies:** 2\ **Last updated:** [September 25, 2020, 10:23am UTC](https://discuss.elastic.co/t/cluster-not-forming/249948 "2020-09-25T10:23:12Z")
I have two servers, both Ubuntu servers running 20.04.1 and Java versions 11.0.8 No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 20.04.1 LTS Release: 20.04 Codename: focal r… --- ## [Sending alert to Opsgenie](https://discuss.elastic.co/t/sending-alert-to-opsgenie/249955)
**Author:** [@mokashi](https://discuss.elastic.co/u/mokashi)\ **Replies:** 0\ **Last updated:** [September 25, 2020, 10:19am UTC](https://discuss.elastic.co/t/sending-alert-to-opsgenie/249955 "2020-09-25T10:19:40Z")
Hi, I created a a watcher in Elasticsearch to send alert to Opsgenie, below is the Watcher configuration toward Opsgenie: { "trigger": { "schedule": { "cron": "0 0 7-15 \* \* ?" } }, "input": { "… --- ## [Date serialization and shading](https://discuss.elastic.co/t/date-serialization-and-shading/249944)
**Author:** [@jnioche](https://discuss.elastic.co/u/jnioche)\ **Replies:** 1\ **Last updated:** [September 25, 2020, 10:07am UTC](https://discuss.elastic.co/t/date-serialization-and-shading/249944 "2020-09-25T10:07:17Z")
I am experiencing the same issue as this one. I copied the code snippet provided by @baz and am able to run it without problems with mvn compile exec:java or from Eclipse but when building the uber jar with Maven shade … --- ## [Log4j2.properties: An example of a multiple conditions configuration for an elasticsearch 7 cluster (7.6.1)](https://discuss.elastic.co/t/log4j2-properties-an-example-of-a-multiple-conditions-configuration-for-an-elasticsearch-7-cluster-7-6-1/249939)
**Author:** [@ginolegigot](https://discuss.elastic.co/u/ginolegigot)\ **Replies:** 0\ **Last updated:** [September 25, 2020, 9:22am UTC](https://discuss.elastic.co/t/log4j2-properties-an-example-of-a-multiple-conditions-configuration-for-an-elasticsearch-7-cluster-7-6-1/249939 "2020-09-25T09:22:44Z")
Due to the lack of a proper documentation on this matter (yes it's not that obvious how you write a log4j.properties based on xml examples from log4j2 documentation), I thought it would have been useful to share my log4j… --- ## [Transfer (Dell EMC PowerMax)-Data from Grafana to Elastic Index](https://discuss.elastic.co/t/transfer-dell-emc-powermax-data-from-grafana-to-elastic-index/249932)
**Author:** [@BoKu](https://discuss.elastic.co/u/BoKu)\ **Replies:** 0\ **Last updated:** [September 25, 2020, 8:42am UTC](https://discuss.elastic.co/t/transfer-dell-emc-powermax-data-from-grafana-to-elastic-index/249932 "2020-09-25T08:42:18Z")
Hello community, we do have a DELL EMC Powermax Storage and want to monitor the storage with elastic. We ask yourself if it is possible to grep data which is available in an grafana influx DB and send this data to elast… --- ## [Elastic Search Version Conflict](https://discuss.elastic.co/t/elastic-search-version-conflict/249699)
**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\ **Replies:** 7\ **Last updated:** [September 25, 2020, 5:49am UTC](https://discuss.elastic.co/t/elastic-search-version-conflict/249699 "2020-09-25T05:49:00Z")
I am using an elastic search for search purpose. But recently I observer that some random error while adding data into elastic search. The error looks like: version conflict, required seqNo \[113789\], primary term \[19\]. … --- ## [Throttle messages arriving to elastic, in elastic?](https://discuss.elastic.co/t/throttle-messages-arriving-to-elastic-in-elastic/249909)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 6\ **Last updated:** [September 25, 2020, 6:35am UTC](https://discuss.elastic.co/t/throttle-messages-arriving-to-elastic-in-elastic/249909 "2020-09-25T06:35:07Z")
Hello All, Is there a way to throttle messages sent to elastic and indexing? I saw a document on how to increase indexing speed. Is there a way to decrease the index rate? For example, if elastic gets 1 million messa… --- ## [Elasticsearch in docker - data folder empty](https://discuss.elastic.co/t/elasticsearch-in-docker-data-folder-empty/249688)
**Author:** [@javidr](https://discuss.elastic.co/u/javidr)\ **Replies:** 1\ **Last updated:** [September 24, 2020, 9:32pm UTC](https://discuss.elastic.co/t/elasticsearch-in-docker-data-folder-empty/249688 "2020-09-24T21:32:14Z")
Hi Im creating a volume for elasticsearch and it comes empty. When getting into the docker image, the path /usr/share/elasticsearch/data is empty. however, when i run \_cat/indices it displays the indices Can you advis… --- ## [Watcher Troubleshooting](https://discuss.elastic.co/t/watcher-troubleshooting/247587)
**Author:** [@vvwood](https://discuss.elastic.co/u/vvwood)\ **Replies:** 4\ **Last updated:** [September 24, 2020, 8:37pm UTC](https://discuss.elastic.co/t/watcher-troubleshooting/247587 "2020-09-24T20:37:38Z")
Greetings all, For this post, I am seeking advice on how to go about troubleshooting watcher configurations. I have 2 different use cases that I am seeking to use watcher for and so far I have run in to a few challenges… --- ## [How to view ES cluster CPU load?](https://discuss.elastic.co/t/how-to-view-es-cluster-cpu-load/249685)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 3\ **Last updated:** [September 24, 2020, 7:14pm UTC](https://discuss.elastic.co/t/how-to-view-es-cluster-cpu-load/249685 "2020-09-24T19:14:39Z")
Hi, is there a curl command I can run to pull the CPU load from each server in my ES cluster? --- ## [Elasticsearch will not start "error loading whitelist(s)"](https://discuss.elastic.co/t/elasticsearch-will-not-start-error-loading-whitelist-s/245314)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 20\ **Last updated:** [September 24, 2020, 5:58pm UTC](https://discuss.elastic.co/t/elasticsearch-will-not-start-error-loading-whitelist-s/245314 "2020-09-24T17:58:15Z")
My cluster ran low on space and ended up red due to unallocated shards. After cleaning out some data and doing my best to get the shards all allocated again, I tried restarting the node with the most disk space. Now it … --- ## [Sentiment Analysis in ELK cloud](https://discuss.elastic.co/t/sentiment-analysis-in-elk-cloud/249860)
**Author:** [@antony\_kavin](https://discuss.elastic.co/u/antony_kavin)\ **Replies:** 1\ **Last updated:** [September 24, 2020, 5:36pm UTC](https://discuss.elastic.co/t/sentiment-analysis-in-elk-cloud/249860 "2020-09-24T17:36:13Z")
Hi team, I have a trial version of the Platinum plan in Elastic Cloud. I have chosen the Platinum plan because of the Machine Learning platform. I am trying to use the ELK solution in order to do a text analytics on su… --- ## [How to import GeoJSON into elastic search and Filter using a polygon](https://discuss.elastic.co/t/how-to-import-geojson-into-elastic-search-and-filter-using-a-polygon/249752)
**Author:** [@Surag\_MT](https://discuss.elastic.co/u/Surag_MT)\ **Replies:** 1\ **Last updated:** [September 24, 2020, 5:13pm UTC](https://discuss.elastic.co/t/how-to-import-geojson-into-elastic-search-and-filter-using-a-polygon/249752 "2020-09-24T17:13:58Z")
I want to import a collection of linestrings from GeoJSON into elastic search. The number of features that I want to import will be in the range of millions. I am planning to show these features using Mapbox GL by query… --- ## [Watcher Enabling in ES configuration](https://discuss.elastic.co/t/watcher-enabling-in-es-configuration/249672)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 6\ **Last updated:** [September 24, 2020, 4:19pm UTC](https://discuss.elastic.co/t/watcher-enabling-in-es-configuration/249672 "2020-09-24T16:19:50Z")
HI Team, I want to configure watcher in my ES 6.4 version. Before that i have few question and i need answer for it and really appreciate if i can able to rectify my questions. 1. I have 3 master and 3 data node,do i … --- ## [Forward elasticsearch log to external server](https://discuss.elastic.co/t/forward-elasticsearch-log-to-external-server/249785)
**Author:** [@borna\_talebi](https://discuss.elastic.co/u/borna_talebi)\ **Replies:** 3\ **Last updated:** [September 24, 2020, 2:55pm UTC](https://discuss.elastic.co/t/forward-elasticsearch-log-to-external-server/249785 "2020-09-24T14:55:08Z")
Hi, I know it's a rare use case but Is there any way to forward elasticsearch audit logs to another syslog server? all I find is this but it's deprecated. --- ## [If I enable xpack , Elasticsearch stops working and my license won't work](https://discuss.elastic.co/t/if-i-enable-xpack-elasticsearch-stops-working-and-my-license-wont-work/248690)
**Author:** [@cctk](https://discuss.elastic.co/u/cctk)\ **Replies:** 9\ **Last updated:** [September 24, 2020, 2:27pm UTC](https://discuss.elastic.co/t/if-i-enable-xpack-elasticsearch-stops-working-and-my-license-wont-work/248690 "2020-09-24T14:27:36Z")
I have been having an issue viewing the Kibana login page. Since the update to 7x for Elasticsearch and Kibana, I have not been able to access the login page nor has it been prompted for me. Is there any way that this ca… --- ## [ILM policy is changing without editing it](https://discuss.elastic.co/t/ilm-policy-is-changing-without-editing-it/249539)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 2\ **Last updated:** [September 24, 2020, 2:24pm UTC](https://discuss.elastic.co/t/ilm-policy-is-changing-without-editing-it/249539 "2020-09-24T14:24:45Z")
Hello everybody, I created an ILM policy : PUT \_ilm/policy/hot-warm-cold-delete-60days-policy { "policy": { "phases": { "hot": { "actions": { "rollover": { "max\_size":"20gb", … --- ## [Elasticsearh failing at 3am](https://discuss.elastic.co/t/elasticsearh-failing-at-3am/249824)
**Author:** [@paulherk](https://discuss.elastic.co/u/paulherk)\ **Replies:** 2\ **Last updated:** [September 24, 2020, 1:43pm UTC](https://discuss.elastic.co/t/elasticsearh-failing-at-3am/249824 "2020-09-24T13:43:46Z")
The last 2 nights at ~3am elasticsearch stops and kibana hangs. the message in /var/log/messages is Unable to retrieve version information from Elasticsearch nodes Any help would be greatly appreciated. --- ## [Painless in score context doesn't work with more\_like\_this query](https://discuss.elastic.co/t/painless-in-score-context-doesnt-work-with-more-like-this-query/249821)
**Author:** [@Sangmin\_Lee](https://discuss.elastic.co/u/Sangmin_Lee)\ **Replies:** 0\ **Last updated:** [September 24, 2020, 1:25pm UTC](https://discuss.elastic.co/t/painless-in-score-context-doesnt-work-with-more-like-this-query/249821 "2020-09-24T13:25:22Z")
Hi. To get a score of my query, I used this painless query below. But it doesn't work. GET \_scripts/painless/\_execute { "script": { "source": "\_score" }, "context": "score", "context\_se… --- ## [Implementing security on a live production stack](https://discuss.elastic.co/t/implementing-security-on-a-live-production-stack/249818)
**Author:** [@jfs1](https://discuss.elastic.co/u/jfs1)\ **Replies:** 0\ **Last updated:** [September 24, 2020, 1:02pm UTC](https://discuss.elastic.co/t/implementing-security-on-a-live-production-stack/249818 "2020-09-24T13:02:32Z")
I'm in the process of upgrading a (very) old stack. Now at version 6.8.12, I want to implement security. The issue is : it's a live, production system. It's ingesting 2.6K e/s and altough I have a little bit of spooling… --- ## [What is the default edit distance for query\_string](https://discuss.elastic.co/t/what-is-the-default-edit-distance-for-query-string/249810)
**Author:** [@eclipse](https://discuss.elastic.co/u/eclipse)\ **Replies:** 0\ **Last updated:** [September 24, 2020, 12:22pm UTC](https://discuss.elastic.co/t/what-is-the-default-edit-distance-for-query-string/249810 "2020-09-24T12:22:11Z")
Hi, I wonder about the default edit distance of query\_string For a document containing quick, the following query { "query": { "query\_string": { "query": "quakc~2" } } } can return the docume… --- ## [Elasticsearch - Design Question?](https://discuss.elastic.co/t/elasticsearch-design-question/248073)
**Author:** [@chintushah46](https://discuss.elastic.co/u/chintushah46)\ **Replies:** 9\ **Last updated:** [September 24, 2020, 11:18am UTC](https://discuss.elastic.co/t/elasticsearch-design-question/248073 "2020-09-24T11:18:00Z")
I want to migrate the data from SQL to Elasticsearch, but looking for some help. I am having 4 tables for each client and I am having 500+ such clients. How Can I achieve such design in Elasticsearch? --- ## [Scripting - How to find functions / methods in documentation of Elasticsearch](https://discuss.elastic.co/t/scripting-how-to-find-functions-methods-in-documentation-of-elasticsearch/249776)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 8\ **Last updated:** [September 24, 2020, 10:52am UTC](https://discuss.elastic.co/t/scripting-how-to-find-functions-methods-in-documentation-of-elasticsearch/249776 "2020-09-24T10:52:24Z")
Hello, can anyone help me where I can find in documentation of Elasticsearch 7.x statements like: "".equals(ctx\['field'\]) or ctx\['field'\].empty or doc.containsKey('field.keyword')) --- ## [Change Retention period](https://discuss.elastic.co/t/change-retention-period/249781)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 1\ **Last updated:** [September 24, 2020, 10:12am UTC](https://discuss.elastic.co/t/change-retention-period/249781 "2020-09-24T10:12:32Z")
Hi there and sorry for my poor english. My question : is there a way to change retention time of data (if exists a way). --- ## [Lifecycle error](https://discuss.elastic.co/t/lifecycle-error/248987)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 5\ **Last updated:** [September 24, 2020, 10:00am UTC](https://discuss.elastic.co/t/lifecycle-error/248987 "2020-09-24T10:00:07Z")
Hi, Getting a bit desperate of all things that go wrong. This time I bump into this lifecycle error. I really want to split indexes op since they grow to hundreds of Gb. But... Index lifecycle error illegal\_argument… --- ## [Getting manual preferred/weighted results](https://discuss.elastic.co/t/getting-manual-preferred-weighted-results/249766)
**Author:** [@peepdurple](https://discuss.elastic.co/u/peepdurple)\ **Replies:** 2\ **Last updated:** [September 24, 2020, 9:50am UTC](https://discuss.elastic.co/t/getting-manual-preferred-weighted-results/249766 "2020-09-24T09:50:40Z")
Hey there, I hope I'm in the right spot for my question. I'm currently facing an issue that I think is easier than I make it out to be and I need some input on that. We are consuming location data from several APIs, a… --- ## [Yellow heath, Unassigned shards after restart](https://discuss.elastic.co/t/yellow-heath-unassigned-shards-after-restart/249775)
**Author:** [@Graham\_Smart](https://discuss.elastic.co/u/Graham_Smart)\ **Replies:** 6\ **Last updated:** [September 24, 2020, 9:22am UTC](https://discuss.elastic.co/t/yellow-heath-unassigned-shards-after-restart/249775 "2020-09-24T09:22:13Z")
Hi Guys, Im sure this is a simple one, but i cant seem to resolve. My ES node ran our of JVM space. So i modified its upper limit and restarted ES as ive done many times. This time round, it refuses to go Green. Its be… --- ## [Thread pool size and the cluster settings API](https://discuss.elastic.co/t/thread-pool-size-and-the-cluster-settings-api/249741)
**Author:** [@Pradyumna\_Achar](https://discuss.elastic.co/u/Pradyumna_Achar)\ **Replies:** 4\ **Last updated:** [September 24, 2020, 8:32am UTC](https://discuss.elastic.co/t/thread-pool-size-and-the-cluster-settings-api/249741 "2020-09-24T08:32:37Z")
Hello, I am a bit confused on the cluster settings API. The thread pool settings seem to be specific to a node. For example, in the same cluster, some nodes have 1 CPU and some have 5 CPUs. When I run the \_cluster/sett… --- ## [Kibana v7.9.1 export to csv with '/n' in log only give first line](https://discuss.elastic.co/t/kibana-v7-9-1-export-to-csv-with-n-in-log-only-give-first-line/249757)
**Author:** [@mortenb123](https://discuss.elastic.co/u/mortenb123)\ **Replies:** 1\ **Last updated:** [September 24, 2020, 8:03am UTC](https://discuss.elastic.co/t/kibana-v7-9-1-export-to-csv-with-n-in-log-only-give-first-line/249757 "2020-09-24T08:03:03Z")
Hi kibana only export the fist line of a multiline logline. How can I change it to include all lines. I find this strange because other files this work fine, but just not my ldap logs. Thanks MortenB, Oslo Norway --- ## [High latency queries appear every 20 minutes](https://discuss.elastic.co/t/high-latency-queries-appear-every-20-minutes/249095)
**Author:** [@wangxr1985](https://discuss.elastic.co/u/wangxr1985)\ **Replies:** 2\ **Last updated:** [September 24, 2020, 6:57am UTC](https://discuss.elastic.co/t/high-latency-queries-appear-every-20-minutes/249095 "2020-09-24T06:57:29Z")
ES performance reliablity issue After I fix the issue above, I find another strange issue. The process of our es query is: \[user application\] -\> \[nginx load balance\] -\> \[ coordinating nodes\] -\> \[data nodes\] The sear… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=799) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=801)