# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=983

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 984

---

## [Configure HTTPS on Elastic](https://discuss.elastic.co/t/configure-https-on-elastic/224124)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 3\
**Last updated:** [March 18, 2020, 4:07pm UTC](https://discuss.elastic.co/t/configure-https-on-elastic/224124 "2020-03-18T16:07:08Z")

</div>

If I secure elasticsearch with HTTPS, that means that I have to secure logstash and kibana? or I just have to change the logstash configuration, and kibana configuration to point to an HTTPS instead of HTTP

---

## [Count API returning zero intermittely](https://discuss.elastic.co/t/count-api-returning-zero-intermittely/224145)

<div class="topic-metadata">

**Author:** [@Senthil\_ak](https://discuss.elastic.co/u/Senthil_ak)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 3:58pm UTC](https://discuss.elastic.co/t/count-api-returning-zero-intermittely/224145 "2020-03-18T15:58:10Z")

</div>

I have a alert check on my elastic search for last 5 min count, if its zero then its send email alert. The problem is elastic search intermittently returning zero count for last 5 min count. The curl url is curl --hea…

---

## [Debian elasticsearch.service: start operation timed out. Terminating](https://discuss.elastic.co/t/debian-elasticsearch-service-start-operation-timed-out-terminating/223262)

<div class="topic-metadata">

**Author:** [@Joel\_wangolo](https://discuss.elastic.co/u/Joel_wangolo)\
**Replies:** 5\
**Last updated:** [March 18, 2020, 3:50pm UTC](https://discuss.elastic.co/t/debian-elasticsearch-service-start-operation-timed-out-terminating/223262 "2020-03-18T15:50:30Z")

</div>

I have a development machine that I use to develop production ready web apps. At first Elasticsearch worked very fine on my local development system, when developing the search of my Site. I stopped Elasticsearch beca…

---

## [Azure Virtual Machine Discovery](https://discuss.elastic.co/t/azure-virtual-machine-discovery/224125)

<div class="topic-metadata">

**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\
**Replies:** 1\
**Last updated:** [March 18, 2020, 3:37pm UTC](https://discuss.elastic.co/t/azure-virtual-machine-discovery/224125 "2020-03-18T15:37:28Z")

</div>

Not understanding direction here. I have done this on GCE and works fine spinning up new nodes without restarting nodes. I have a 3 node cluster on azure ubuntu installed. How should I configure the eslasticsearch.yml…

---

## [Queries on Index LifeCycle Management](https://discuss.elastic.co/t/queries-on-index-lifecycle-management/223920)

<div class="topic-metadata">

**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\
**Replies:** 9\
**Last updated:** [March 18, 2020, 3:29pm UTC](https://discuss.elastic.co/t/queries-on-index-lifecycle-management/223920 "2020-03-18T15:29:13Z")

</div>

Hi Team, I have a doubt about ILM. Do I have to explicitly enable ILM in elastic search configuration or it is enabled by default? I am using elastcsearch-7.5.2 version. I have pasted output of the elasticsearch.yaml …

---

## [Include entire query result in Watcher email](https://discuss.elastic.co/t/include-entire-query-result-in-watcher-email/223988)

<div class="topic-metadata">

**Author:** [@mkaiser101](https://discuss.elastic.co/u/mkaiser101)\
**Replies:** 1\
**Last updated:** [March 18, 2020, 3:16pm UTC](https://discuss.elastic.co/t/include-entire-query-result-in-watcher-email/223988 "2020-03-18T15:16:43Z")

</div>

I am attempting to include all fields from my search query results in an watcher email, currently I can only see what I am matching directly in my query. { "trigger": { "schedule": { "interval": "90s" …

---

## [What type of nosql elasticsearch database does it belong to?](https://discuss.elastic.co/t/what-type-of-nosql-elasticsearch-database-does-it-belong-to/224093)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 3\
**Last updated:** [March 18, 2020, 3:14pm UTC](https://discuss.elastic.co/t/what-type-of-nosql-elasticsearch-database-does-it-belong-to/224093 "2020-03-18T15:14:40Z")

</div>

Hi, ElasticSearch is a document-oriented or column-oriented NoSQL engine. Any help please !

---

## [Using date\_range with no upper bound with date\_histogram fails](https://discuss.elastic.co/t/using-date-range-with-no-upper-bound-with-date-histogram-fails/224001)

<div class="topic-metadata">

**Author:** [@ajacob](https://discuss.elastic.co/u/ajacob)\
**Replies:** 1\
**Last updated:** [March 18, 2020, 3:12pm UTC](https://discuss.elastic.co/t/using-date-range-with-no-upper-bound-with-date-histogram-fails/224001 "2020-03-18T15:12:48Z")

</div>

I'm trying to use date\_range data type with date\_histogram aggregation and have difficulties when I don't have upper bound. Index mapping: { "mappings": { "properties": { "dateRange": { "type": "date\_range" } }…

---

## [Native controller process has stopped - no new native processes can be started?](https://discuss.elastic.co/t/native-controller-process-has-stopped-no-new-native-processes-can-be-started/224035)

<div class="topic-metadata">

**Author:** [@Prabhav](https://discuss.elastic.co/u/Prabhav)\
**Replies:** 6\
**Last updated:** [March 18, 2020, 2:32pm UTC](https://discuss.elastic.co/t/native-controller-process-has-stopped-no-new-native-processes-can-be-started/224035 "2020-03-18T14:32:09Z")

</div>

I am trying to install Elasicsearch 7.1.0 but I am failing to do so. I am not doing it on Docker or using it for production mode I am using Ubuntu on Virtual Box And i am not able to install it. \[2020-03-18T05:31:13,…

---

## [Elasticsearch "stuck" indices](https://discuss.elastic.co/t/elasticsearch-stuck-indices/224109)

<div class="topic-metadata">

**Author:** [@hlamsc](https://discuss.elastic.co/u/hlamsc)\
**Replies:** 1\
**Last updated:** [March 18, 2020, 2:21pm UTC](https://discuss.elastic.co/t/elasticsearch-stuck-indices/224109 "2020-03-18T14:21:16Z")

</div>

Hello, we have a problem with a few indicies which are not "moveable". We have a ILM with a warm and cold phase. Warm phase: After 48 hours, shrinks and force merge Cold phase: After 17 days Freeze and move to oth…

---

## [Have certain ids ignore parts of query](https://discuss.elastic.co/t/have-certain-ids-ignore-parts-of-query/224113)

<div class="topic-metadata">

**Author:** [@SeverinDK](https://discuss.elastic.co/u/SeverinDK)\
**Replies:** 1\
**Last updated:** [March 18, 2020, 2:13pm UTC](https://discuss.elastic.co/t/have-certain-ids-ignore-parts-of-query/224113 "2020-03-18T14:13:20Z")

</div>

Hi there. I'm having a bit of an issue figuring out how to write a query that my project needs need. We have an endpoint where we can pass in a keyword and find users based on this. In our docs, we have an is\_private fi…

---

## [For the same data with data format integer and long works in 5.6 ES but not in 7.6 ES](https://discuss.elastic.co/t/for-the-same-data-with-data-format-integer-and-long-works-in-5-6-es-but-not-in-7-6-es/223406)

<div class="topic-metadata">

**Author:** [@Bharath\_Italapur](https://discuss.elastic.co/u/Bharath_Italapur)\
**Replies:** 3\
**Last updated:** [March 18, 2020, 1:43pm UTC](https://discuss.elastic.co/t/for-the-same-data-with-data-format-integer-and-long-works-in-5-6-es-but-not-in-7-6-es/223406 "2020-03-18T13:43:28Z")

</div>

Hi, Thank you in advance, I am reindexing data from 5.6 ES to 7.6 ES cluster. Before reindexing, we have created an index same name and mapping as in 5.6 es cluster. But When we started reindexing, the data values are …

---

## [Search with phonetic plugin, Elasticsearch-7.6.1](https://discuss.elastic.co/t/search-with-phonetic-plugin-elasticsearch-7-6-1/223950)

<div class="topic-metadata">

**Author:** [@bobflip](https://discuss.elastic.co/u/bobflip)\
**Replies:** 4\
**Last updated:** [March 18, 2020, 1:41pm UTC](https://discuss.elastic.co/t/search-with-phonetic-plugin-elasticsearch-7-6-1/223950 "2020-03-18T13:41:34Z")

</div>

Hi, I'm trying to search with analysis-phonetic plugin and cannot get matching results. Please help! I've installed plugin, and took example from documentation PUT /phonetic\_sample { "settings": { "index": { …

---

## [Log4j2 syslog appender ignoring facility](https://discuss.elastic.co/t/log4j2-syslog-appender-ignoring-facility/224122)

<div class="topic-metadata">

**Author:** [@Vincent\_DOS\_SANTOS](https://discuss.elastic.co/u/Vincent_DOS_SANTOS)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 1:37pm UTC](https://discuss.elastic.co/t/log4j2-syslog-appender-ignoring-facility/224122 "2020-03-18T13:37:11Z")

</div>

Hi. I tried to configure syslog appender on elasticsearch version 6.6. Here is my /etc/elasticsearch/log4j2.properties file appender.syslog.type = syslog appender.syslog.name = syslog appender.syslog.facility = local7…

---

## [Elasticsearch is not reallocating shards after the primary shards were recovered. Unable to perform bulk indexing](https://discuss.elastic.co/t/elasticsearch-is-not-reallocating-shards-after-the-primary-shards-were-recovered-unable-to-perform-bulk-indexing/223971)

<div class="topic-metadata">

**Author:** [@Jehu\_T](https://discuss.elastic.co/u/Jehu_T)\
**Replies:** 9\
**Last updated:** [March 18, 2020, 12:27pm UTC](https://discuss.elastic.co/t/elasticsearch-is-not-reallocating-shards-after-the-primary-shards-were-recovered-unable-to-perform-bulk-indexing/223971 "2020-03-18T12:27:34Z")

</div>

We have a 5 node cluster that is not reallocating shards after the primary shards were recovered. To fix this issue we increased the heap size of the server from 80GB (160GB RAM) to 192GB (384GB RAM). This is also becaus…

---

## [Data transfer between Elasticsearch Data Nodes](https://discuss.elastic.co/t/data-transfer-between-elasticsearch-data-nodes/224106)

<div class="topic-metadata">

**Author:** [@rupam](https://discuss.elastic.co/u/rupam)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 12:20pm UTC](https://discuss.elastic.co/t/data-transfer-between-elasticsearch-data-nodes/224106 "2020-03-18T12:20:59Z")

</div>

Hi Everyone, In my deployment, I have 3 node elasticsearch cluster in kubernetes environment and 5 clients are writing data to this cluster at rate of ~7MB/s per elasticsearch data node and NO READ operation is performe…

---

## [Query Shard Exception: Failed to create query](https://discuss.elastic.co/t/query-shard-exception-failed-to-create-query/224101)

<div class="topic-metadata">

**Author:** [@Raul\_Speroni](https://discuss.elastic.co/u/Raul_Speroni)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 12:04pm UTC](https://discuss.elastic.co/t/query-shard-exception-failed-to-create-query/224101 "2020-03-18T12:04:25Z")

</div>

Hello, i'm having trouble with a query for some of the input (with other texts works just fine). At first i thought it might be an encoding issue, but same input with different query also works. Mapping: { "mapping":…

---

## [How to access a nested event using painless script in conf file?](https://discuss.elastic.co/t/how-to-access-a-nested-event-using-painless-script-in-conf-file/224094)

<div class="topic-metadata">

**Author:** [@sandeep1-0](https://discuss.elastic.co/u/sandeep1-0)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 11:46am UTC](https://discuss.elastic.co/t/how-to-access-a-nested-event-using-painless-script-in-conf-file/224094 "2020-03-18T11:46:54Z")

</div>

I am having netflow data and some fields need to be aggregated for a certain time. The config file which i have created is following. output{ elasticsearch { index =\> "vunet-1-1-netflowaggr" …

---

## [Indices disapeared](https://discuss.elastic.co/t/indices-disapeared/224087)

<div class="topic-metadata">

**Author:** [@Archimaine](https://discuss.elastic.co/u/Archimaine)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 11:16am UTC](https://discuss.elastic.co/t/indices-disapeared/224087 "2020-03-18T11:16:53Z")

</div>

Hello, So, I put about 500Go of data in elasticsearch, snapshoted it and went on to another project for about two weeks. I now have to go back to my elasticsearch data, but every indices I created, as well as the snapsh…

---

## [How to use kibana map in plugin made by plugin generator?](https://discuss.elastic.co/t/how-to-use-kibana-map-in-plugin-made-by-plugin-generator/224077)

<div class="topic-metadata">

**Author:** [@pranay\_bhatnagar](https://discuss.elastic.co/u/pranay_bhatnagar)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 10:44am UTC](https://discuss.elastic.co/t/how-to-use-kibana-map-in-plugin-made-by-plugin-generator/224077 "2020-03-18T10:44:47Z")

</div>

Can you guide me how to use kibana map in plugin made by plugin generator ? I want to use Kibana map in my default plugin which is generated by plugin generator.

---

## [Immutable write only (no versionning allowed) index](https://discuss.elastic.co/t/immutable-write-only-no-versionning-allowed-index/224076)

<div class="topic-metadata">

**Author:** [@kais\_baccour](https://discuss.elastic.co/u/kais_baccour)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 10:44am UTC](https://discuss.elastic.co/t/immutable-write-only-no-versionning-allowed-index/224076 "2020-03-18T10:44:38Z")

</div>

I know search guard offers this but I would like to know if there is any possibility to make an index immutable and by immutable I mean make it impossible to create a document with \_version \> 1. I would like to log docum…

---

## [Circuit breaker with durability permanent auto fixed?](https://discuss.elastic.co/t/circuit-breaker-with-durability-permanent-auto-fixed/224064)

<div class="topic-metadata">

**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 10:03am UTC](https://discuss.elastic.co/t/circuit-breaker-with-durability-permanent-auto-fixed/224064 "2020-03-18T10:03:39Z")

</div>

Where do I find out what kinds of errors lead to a transient circuit breaker exceptions vs permanent? Yesterday we got this exception, but it auto resolved surprisingly? Won't permanent exceptions require some sort of m…

---

## [Circuit\_breaking\_exception Error](https://discuss.elastic.co/t/circuit-breaking-exception-error/224063)

<div class="topic-metadata">

**Author:** [@Krunal\_Panchal](https://discuss.elastic.co/u/Krunal_Panchal)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 9:54am UTC](https://discuss.elastic.co/t/circuit-breaking-exception-error/224063 "2020-03-18T09:54:55Z")

</div>

0 filebeat-7.4.2-2020.03.18 W4oRgS9YSI-fRviBL-NFsw circuit\_breaking\_exception 0 filebeat-7.4.2-2020.03.17 W4oRgS9YSI-fRviBL-NFsw circuit\_breaking\_exception Type circuit\_breaking\_exception Reason \[parent\] Data …

---

## [Elastic Search not accessible using public IP](https://discuss.elastic.co/t/elastic-search-not-accessible-using-public-ip/223714)

<div class="topic-metadata">

**Author:** [@Apurv\_Jain](https://discuss.elastic.co/u/Apurv_Jain)\
**Replies:** 2\
**Last updated:** [March 18, 2020, 9:13am UTC](https://discuss.elastic.co/t/elastic-search-not-accessible-using-public-ip/223714 "2020-03-18T09:13:26Z")

</div>

Hi, I have installed Elastic Search on RHEL 6.9. I am facing a weird issue, I am running elastic on port 17000. when I am trying to access ElasticSearch through IP address it says Connection Refused, from internal as we…

---

## [Rally does not work for multiple Elasticsearch clusters](https://discuss.elastic.co/t/rally-does-not-work-for-multiple-elasticsearch-clusters/224006)

<div class="topic-metadata">

**Author:** [@b\_hossein](https://discuss.elastic.co/u/b_hossein)\
**Replies:** 1\
**Last updated:** [March 18, 2020, 8:37am UTC](https://discuss.elastic.co/t/rally-does-not-work-for-multiple-elasticsearch-clusters/224006 "2020-03-18T08:37:08Z")

</div>

I have the following configuration to run esrally: "target\_hosts.json" { "default": \[ {"host": "127.0.0.1", "port": 9200}, {"host": "127.0.0.1", "port": 9201} \], "remote":\[ {"host": "10.1.1.1", "port": 9200}, {…

---

## [Reindex parsing failure how to debug](https://discuss.elastic.co/t/reindex-parsing-failure-how-to-debug/224046)

<div class="topic-metadata">

**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\
**Replies:** 0\
**Last updated:** [March 18, 2020, 8:33am UTC](https://discuss.elastic.co/t/reindex-parsing-failure-how-to-debug/224046 "2020-03-18T08:33:48Z")

</div>

I tried to reindex today with the following: POST \_reindex { "source": { "index": "var\_log\_nginx\_access-2020.03.16" }, "dest": { "index": "var\_log\_nginx\_access-2020.03.16-new" } } After this I get the f…

---

## [Restoring ES 7.6.1 snapshot into ES 7.1.1](https://discuss.elastic.co/t/restoring-es-7-6-1-snapshot-into-es-7-1-1/223523)

<div class="topic-metadata">

**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\
**Replies:** 2\
**Last updated:** [March 18, 2020, 8:22am UTC](https://discuss.elastic.co/t/restoring-es-7-6-1-snapshot-into-es-7-1-1/223523 "2020-03-18T08:22:01Z")

</div>

Hi, I'd like to know if there is a way to restore a manual snapshot made with ES 7.6.1 into ES 7.1.1. I tried and I got the error: the snapshot was created with Elasticsearch version \[7.6.1\] which is higher than the ve…

---

## [Deleting field mapping](https://discuss.elastic.co/t/deleting-field-mapping/223974)

<div class="topic-metadata">

**Author:** [@m-o-t-h](https://discuss.elastic.co/u/m-o-t-h)\
**Replies:** 2\
**Last updated:** [March 18, 2020, 8:10am UTC](https://discuss.elastic.co/t/deleting-field-mapping/223974 "2020-03-18T08:10:43Z")

</div>

Elastic/Kibana vs: 6.7.1 I'm searching for solution for fixing mapping explosion in index pattern. Indices under this contains logs from Winlogbeat. There is one problematic field: Pipelineexecutiondetailsforcommandline…

---

## [Elastic privilege to create index](https://discuss.elastic.co/t/elastic-privilege-to-create-index/223955)

<div class="topic-metadata">

**Author:** [@nicolasSoares](https://discuss.elastic.co/u/nicolasSoares)\
**Replies:** 1\
**Last updated:** [March 18, 2020, 7:46am UTC](https://discuss.elastic.co/t/elastic-privilege-to-create-index/223955 "2020-03-18T07:46:11Z")

</div>

Hello, Is there a role privilege in elasticsearch 7.X giving only new index creation rights? Also, is there a way to automatically give write and/or read privileges on an index to the user who created it?

---

## [How to find out memory usage while aggregating some fields?](https://discuss.elastic.co/t/how-to-find-out-memory-usage-while-aggregating-some-fields/223895)

<div class="topic-metadata">

**Author:** [@AshokBachchan](https://discuss.elastic.co/u/AshokBachchan)\
**Replies:** 4\
**Last updated:** [March 18, 2020, 6:10am UTC](https://discuss.elastic.co/t/how-to-find-out-memory-usage-while-aggregating-some-fields/223895 "2020-03-18T06:10:10Z")

</div>

Hello Everyone, We are facing some latency issues while aggregating on some fields, due to this it is getting Java heap issue. I have few queries on these, we have 30GB Java heap for data node, index size was 100GB per…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=982)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=984)
