# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=910 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 911 --- ## [Cannot Connect Elasticsearch in Docker](https://discuss.elastic.co/t/cannot-connect-elasticsearch-in-docker/233687)
**Author:** [@Vaibhav\_Saxena](https://discuss.elastic.co/u/Vaibhav_Saxena)\ **Replies:** 3\ **Last updated:** [May 26, 2020, 9:38am UTC](https://discuss.elastic.co/t/cannot-connect-elasticsearch-in-docker/233687 "2020-05-26T09:38:35Z")
I am trying to launch my app using docker that connects to elasticsearch but I am not able to do so. I get the following exception: vaibhavsaxena@Vaibhavs-MacBook-Pro Final Project % docker-compose up … --- ## [Need help with watcher to send the correct fields of result in the email](https://discuss.elastic.co/t/need-help-with-watcher-to-send-the-correct-fields-of-result-in-the-email/231158)
**Author:** [@GiridharKonda](https://discuss.elastic.co/u/GiridharKonda)\ **Replies:** 5\ **Last updated:** [May 26, 2020, 9:33am UTC](https://discuss.elastic.co/t/need-help-with-watcher-to-send-the-correct-fields-of-result-in-the-email/231158 "2020-05-26T09:33:32Z")
Hello Team, I am trying to setup a watcher for uptime using heartbeat to trigger a mail with proper message. I've got the watcher setup and is working but the issue is that one triggered mail has more than 10 alerts so … --- ## [How to get list as term value in params for custom script plugin](https://discuss.elastic.co/t/how-to-get-list-as-term-value-in-params-for-custom-script-plugin/234279)
**Author:** [@Dahea\_Moon](https://discuss.elastic.co/u/Dahea_Moon)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 8:30am UTC](https://discuss.elastic.co/t/how-to-get-list-as-term-value-in-params-for-custom-script-plugin/234279 "2020-05-26T08:30:20Z")
I'm making custom score script plugin for scoring based on payload value. I've done with scoring logic, but it's working properly when it receives only one term. I want to receive several analyzed terms in query. How c… --- ## [Forbidden error when connnecting after setting up SAML on Elastic Cloud](https://discuss.elastic.co/t/forbidden-error-when-connnecting-after-setting-up-saml-on-elastic-cloud/234140)
**Author:** [@Yannis\_Psarras](https://discuss.elastic.co/u/Yannis_Psarras)\ **Replies:** 8\ **Last updated:** [May 26, 2020, 8:32am UTC](https://discuss.elastic.co/t/forbidden-error-when-connnecting-after-setting-up-saml-on-elastic-cloud/234140 "2020-05-26T08:32:51Z")
Hi all, I am trying to setup SAML via Azure Active Directory on an Elastic Cloud cluster. Before I go into the details about the error, I just wanted to say that I ve read pretty much anything I could find on the inter… --- ## [Help writing a custom plugin to allow only GET requests](https://discuss.elastic.co/t/help-writing-a-custom-plugin-to-allow-only-get-requests/234266)
**Author:** [@rahulkarajgikar](https://discuss.elastic.co/u/rahulkarajgikar)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 8:03am UTC](https://discuss.elastic.co/t/help-writing-a-custom-plugin-to-allow-only-get-requests/234266 "2020-05-26T08:03:15Z")
Hi, I'm trying to write an action plugin that will intercept REST requests using the getRestHandlerWrapper()method in the ActionPlugin class. However, it says that only one plugin can implement this method. How do I remo… --- ## [ILM with custom index names](https://discuss.elastic.co/t/ilm-with-custom-index-names/232570)
**Author:** [@michielM](https://discuss.elastic.co/u/michielM)\ **Replies:** 3\ **Last updated:** [May 26, 2020, 8:02am UTC](https://discuss.elastic.co/t/ilm-with-custom-index-names/232570 "2020-05-26T08:02:12Z")
Hi, I have set-up my stack to use custom index names like filebeat-department-01/01/2000 To do this I had to disable ILM, but this means Elasticsearch creates daily indexes. Is it possible to have these custom index nam… --- ## [Sync Elasticsearch with MySQL Database](https://discuss.elastic.co/t/sync-elasticsearch-with-mysql-database/234032)
**Author:** [@Punj\_Shah](https://discuss.elastic.co/u/Punj_Shah)\ **Replies:** 14\ **Last updated:** [May 26, 2020, 7:54am UTC](https://discuss.elastic.co/t/sync-elasticsearch-with-mysql-database/234032 "2020-05-26T07:54:33Z")
Hello! As per our application requirement, we need to sync Elasticsearch with MySQL. We will apply the best optimal way according to your advice. Below is the DB EER Diagram just for the reference Now we need to app… --- ## [Why translog phase in recovery took a long time](https://discuss.elastic.co/t/why-translog-phase-in-recovery-took-a-long-time/234260)
**Author:** [@yc1024](https://discuss.elastic.co/u/yc1024)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 7:47am UTC](https://discuss.elastic.co/t/why-translog-phase-in-recovery-took-a-long-time/234260 "2020-05-26T07:47:56Z")
Elasticsearch-version：7.6.0 Translog stage recovered is 0, but it took 5min.What settings can optimize it? my settings: indices.recovery.max\_concurrent\_file\_chunks : 5 indices.recovery.max\_bytes\_per\_sec : 50MB cluster… --- ## [Dissect Processor not working correctly in elastic search](https://discuss.elastic.co/t/dissect-processor-not-working-correctly-in-elastic-search/233738)
**Author:** [@saket\_gupta](https://discuss.elastic.co/u/saket_gupta)\ **Replies:** 8\ **Last updated:** [May 26, 2020, 7:20am UTC](https://discuss.elastic.co/t/dissect-processor-not-working-correctly-in-elastic-search/233738 "2020-05-26T07:20:29Z")
Hi Team, I am trying to parse logs using dissect processor in elastic search . However I dont get the appropriate output. When I run the log through logstash using dissect filter, it works fine. \` PUT \_ingest/pipeline… --- ## [Need Architectural Support](https://discuss.elastic.co/t/need-architectural-support/234240)
**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\ **Replies:** 5\ **Last updated:** [May 26, 2020, 6:36am UTC](https://discuss.elastic.co/t/need-architectural-support/234240 "2020-05-26T06:36:47Z")
Hey, I need some support regarding Architecture for MY Elasticsearch setup I will be having logs from 120+ devices through UDP port and i have to parse them I would like your help for Hardware Configuration for my Ela… --- ## [Create a field based on the values from future log](https://discuss.elastic.co/t/create-a-field-based-on-the-values-from-future-log/234093)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 16\ **Last updated:** [May 26, 2020, 6:49am UTC](https://discuss.elastic.co/t/create-a-field-based-on-the-values-from-future-log/234093 "2020-05-26T06:49:51Z")
My use case is like this: I have to create a data table from an index. The value of one of the column of the table is based on the data from another field of the same index in the next 5 seconds. Is it possible to do s… --- ## [Limit results per page per field](https://discuss.elastic.co/t/limit-results-per-page-per-field/234249)
**Author:** [@Adnan\_Khabbaz](https://discuss.elastic.co/u/Adnan_Khabbaz)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 6:34am UTC](https://discuss.elastic.co/t/limit-results-per-page-per-field/234249 "2020-05-26T06:34:28Z")
Hello I have a case when I need to get only one or two documents per page that have the same field value I can use collapse for that but the problem I don't want to ignore other documents in the next pages, So suppose… --- ## [\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-could-not-index-event-to-elasticsearch/234241)
**Author:** [@Raj\_Techie](https://discuss.elastic.co/u/Raj_Techie)\ **Replies:** 7\ **Last updated:** [May 26, 2020, 6:16am UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-could-not-index-event-to-elasticsearch/234241 "2020-05-26T06:16:46Z")
Logstash version I am using -logstash 6.0.1 Elasticsearch version below are there in my system. /appserver/elk4pq/elasticsearch-2.3.2/config/elasticsearch.yml /data/software/elk/elasticsearch-2.4.5/config/elasticsearc… --- ## [\[ES Cluster\] X-Pack Security in Basic License](https://discuss.elastic.co/t/es-cluster-x-pack-security-in-basic-license/234243)
**Author:** [@singh.piyush862](https://discuss.elastic.co/u/singh.piyush862)\ **Replies:** 4\ **Last updated:** [May 26, 2020, 5:52am UTC](https://discuss.elastic.co/t/es-cluster-x-pack-security-in-basic-license/234243 "2020-05-26T05:52:15Z")
Hi Team, Can I enable transport.ssl security feature for ES cluster authentication in basic license ? X-pack works well in single node in basic license but can I use it in cluster. I want to enable role based authenti… --- ## [Logstash integration with elastic cloud](https://discuss.elastic.co/t/logstash-integration-with-elastic-cloud/234050)
**Author:** [@Guddu\_Prasad](https://discuss.elastic.co/u/Guddu_Prasad)\ **Replies:** 2\ **Last updated:** [May 26, 2020, 5:12am UTC](https://discuss.elastic.co/t/logstash-integration-with-elastic-cloud/234050 "2020-05-26T05:12:55Z")
Hi Team, I am getting below error message with logstash. \[2020-05-24T15:11:59,888\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_in… --- ## [Why not terms act same as multi term?](https://discuss.elastic.co/t/why-not-terms-act-same-as-multi-term/234239)
**Author:** [@weiwang\_zhang](https://discuss.elastic.co/u/weiwang_zhang)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 4:13am UTC](https://discuss.elastic.co/t/why-not-terms-act-same-as-multi-term/234239 "2020-05-26T04:13:32Z")
At ES version 7.6.0 As I found out recently, score is not same between term and terms When I use "term" query: score consider tf-idf score of multi term queries will sum together When I use "terms" query sc… --- ## [Unique search for BiDirectional CCR](https://discuss.elastic.co/t/unique-search-for-bidirectional-ccr/234238)
**Author:** [@vikram1](https://discuss.elastic.co/u/vikram1)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 4:06am UTC](https://discuss.elastic.co/t/unique-search-for-bidirectional-ccr/234238 "2020-05-26T04:06:00Z")
Hello, I have setup CCR between 2 clusters, and based on the blog from elastic I have set it up. Below is the link, However, when I search either cluster using alias, I'm getting duplicate (same record from both leade… --- ## [How to statistics the success rate from some logs](https://discuss.elastic.co/t/how-to-statistics-the-success-rate-from-some-logs/233692)
**Author:** [@LeeYearJ](https://discuss.elastic.co/u/LeeYearJ)\ **Replies:** 1\ **Last updated:** [May 26, 2020, 3:02am UTC](https://discuss.elastic.co/t/how-to-statistics-the-success-rate-from-some-logs/233692 "2020-05-26T03:02:55Z")
the log data following: {"time":"2020-05-21 10:10:56.210","level":"Info","transID":1,"span":{"traceID":521,"spanID":1,"tags":\[{"userID":93}\]},"msg":"TransStart","extend":{"type":"Login"}} {"time":"2020-05-21 10:10:57.21… --- ## [Prefix Query on Custom \_id Field](https://discuss.elastic.co/t/prefix-query-on-custom-id-field/234226)
**Author:** [@TheTechromancer](https://discuss.elastic.co/u/TheTechromancer)\ **Replies:** 0\ **Last updated:** [May 26, 2020, 1:52am UTC](https://discuss.elastic.co/t/prefix-query-on-custom-id-field/234226 "2020-05-26T01:52:06Z")
Greetings, I am looking for a way to perform a prefix query on \_id without duplicating its value to another field. I am overriding \_id with a custom string value as a "primary key" to prevent duplicates. Is it possibl… --- ## [Transerfer index from one server to antoher](https://discuss.elastic.co/t/transerfer-index-from-one-server-to-antoher/233953)
**Author:** [@deep9300](https://discuss.elastic.co/u/deep9300)\ **Replies:** 1\ **Last updated:** [May 26, 2020, 1:21am UTC](https://discuss.elastic.co/t/transerfer-index-from-one-server-to-antoher/233953 "2020-05-26T01:21:07Z")
I'm using kibana set up with a cluster, elasticsearch and kibana node. have a logstash filter loading data into kibana with filebeat agents. This was an old servver and contains single node elastisearch data under /node… --- ## [I have a question about elasticsearch configuration](https://discuss.elastic.co/t/i-have-a-question-about-elasticsearch-configuration/234142)
**Author:** [@111344](https://discuss.elastic.co/u/111344)\ **Replies:** 2\ **Last updated:** [May 26, 2020, 12:54am UTC](https://discuss.elastic.co/t/i-have-a-question-about-elasticsearch-configuration/234142 "2020-05-26T00:54:39Z")
I need to configure the service with 2 web servers and 2 servers assigned for elasticsearch. I'm going to make cluster configuration with 2 elasticsearch server like below. Server 1 : 1 Master node, 2 data node Server… --- ## [Index lifecycle for multi-tenant app with different tiers](https://discuss.elastic.co/t/index-lifecycle-for-multi-tenant-app-with-different-tiers/234087)
**Author:** [@Yannis\_Psarras](https://discuss.elastic.co/u/Yannis_Psarras)\ **Replies:** 1\ **Last updated:** [May 26, 2020, 12:47am UTC](https://discuss.elastic.co/t/index-lifecycle-for-multi-tenant-app-with-different-tiers/234087 "2020-05-26T00:47:08Z")
Hi team! Got a question that I ve been thinking about for the past couple of days but can't come up with an elegant solution. We have a multi-tenant app. Many users are accessing a cloud software. Different users have … --- ## [Rollover doesn't point to index](https://discuss.elastic.co/t/rollover-doesnt-point-to-index/234124)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 0\ **Last updated:** [May 25, 2020, 9:55am UTC](https://discuss.elastic.co/t/rollover-doesnt-point-to-index/234124 "2020-05-25T09:55:57Z")
Hello everybody, To begin I am sorry if it's a simple error that I couldn't solve as I just began working with elastic Stack I am getting exceptions in elasticsearch logs \[2020-05-25T11:41:07,095\]\[ERROR\]\[o.e.x.i.IndexL… --- ## [Elasticsearch configuration please contact us](https://discuss.elastic.co/t/elasticsearch-configuration-please-contact-us/234129)
**Author:** [@111344](https://discuss.elastic.co/u/111344)\ **Replies:** 1\ **Last updated:** [May 26, 2020, 12:36am UTC](https://discuss.elastic.co/t/elasticsearch-configuration-please-contact-us/234129 "2020-05-26T00:36:27Z")
I wanted to inquire about the makeup of Elasticsearch In order to use the server, one needs 2 servers from webserver and 2 servers from elasticsearch. Elasticsearch requires two servers to be used: Server 1: 1 master… --- ## [Master not discovered yet](https://discuss.elastic.co/t/master-not-discovered-yet/234215)
**Author:** [@grantcurell](https://discuss.elastic.co/u/grantcurell)\ **Replies:** 2\ **Last updated:** [May 25, 2020, 11:05pm UTC](https://discuss.elastic.co/t/master-not-discovered-yet/234215 "2020-05-25T23:05:52Z")
Trying to figure out what is missing from this configuration. I've exec'd into the containers and all hosts can see each other by name and all ports are open and working yet I'm still getting master node not discovered y… --- ## [Snapshot failed every time - failing update snapshot state](https://discuss.elastic.co/t/snapshot-failed-every-time-failing-update-snapshot-state/234199)
**Author:** [@Newbieuser](https://discuss.elastic.co/u/Newbieuser)\ **Replies:** 0\ **Last updated:** [May 25, 2020, 7:47pm UTC](https://discuss.elastic.co/t/snapshot-failed-every-time-failing-update-snapshot-state/234199 "2020-05-25T19:47:09Z")
I am trying to get backup for my node but for some reason definitely not working, I tried like 5 times last 2days .. I am using standart process, i have only 1 node its pretty basic setup. #Declare informations curl -X … --- ## [Cardinality query takes more than 10 seconds to return for buckets of unique values ~15K](https://discuss.elastic.co/t/cardinality-query-takes-more-than-10-seconds-to-return-for-buckets-of-unique-values-15k/234073)
**Author:** [@ssouris](https://discuss.elastic.co/u/ssouris)\ **Replies:** 6\ **Last updated:** [May 25, 2020, 9:01pm UTC](https://discuss.elastic.co/t/cardinality-query-takes-more-than-10-seconds-to-return-for-buckets-of-unique-values-15k/234073 "2020-05-25T21:01:26Z")
Due to the nature of the data I work with I have to create buckets of 5 minutes and then inside the bucket to calculate the count of the unique values (cardinality). Up until recently in our system those unique values w… --- ## [Master eligible node won't rejoin cluster after reboot](https://discuss.elastic.co/t/master-eligible-node-wont-rejoin-cluster-after-reboot/234192)
**Author:** [@adrian0](https://discuss.elastic.co/u/adrian0)\ **Replies:** 5\ **Last updated:** [May 25, 2020, 7:08pm UTC](https://discuss.elastic.co/t/master-eligible-node-wont-rejoin-cluster-after-reboot/234192 "2020-05-25T19:08:54Z")
We have a cluster of multiple nodes, of which are 3 dedicated master nodes. I wanted to do a normal rolling package (apt) update/upgrade and reboot, but when I restarted the first eligible master node, it wouldn't join t… --- ## [Elasticsearch high availability across availability zones](https://discuss.elastic.co/t/elasticsearch-high-availability-across-availability-zones/232079)
**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\ **Replies:** 11\ **Last updated:** [May 25, 2020, 7:01pm UTC](https://discuss.elastic.co/t/elasticsearch-high-availability-across-availability-zones/232079 "2020-05-25T19:01:59Z")
Hi Team, I am planning to test implement my ES cluster in cloud so thought to get some best practices from you. My most requirement is to have High Availability of ELK all 3 services as well as index data. I have 10 no… --- ## [Watcher action: substitute the found data in the "path" of action](https://discuss.elastic.co/t/watcher-action-substitute-the-found-data-in-the-path-of-action/234158)
**Author:** [@kurdit](https://discuss.elastic.co/u/kurdit)\ **Replies:** 1\ **Last updated:** [May 25, 2020, 7:01pm UTC](https://discuss.elastic.co/t/watcher-action-substitute-the-found-data-in-the-path-of-action/234158 "2020-05-25T19:01:48Z")
hi! I have a system for blocking IP addresses. you can send a lock request to this system using curl: curl -u username: password http://ipban.myhostname.com:4389/index.php?action=add&ip=122.54.95.111 I have a watcher… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=909) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=911)