# Error

**URL:** <https://discuss.elastic.co/t/error/136973>\
**Category:** Elasticsearch\
**Created:** [June 22, 2018, 5:47am UTC](https://discuss.elastic.co/t/error/136973 "2018-06-22T05:47:43Z")\
**Posts on this page:** 20\
**Page:** 2

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 25, 2018, 7:23am UTC](https://discuss.elastic.co/t/error/136973/21 "2018-06-25T07:23:58Z")

</div>

What is the output of the [cluster health API](https://www.elastic.co/guide/en/elasticsearch/reference/current/cluster-health.html)?

---

<div class="post-metadata">

**Author:** ![varsha\_ann](https://avatars.discourse-cdn.com/v4/letter/v/3d9bf3/32.png) [@varsha\_ann](https://discuss.elastic.co/u/varsha_ann)\
**Post date:** [June 25, 2018, 8:13am UTC](https://discuss.elastic.co/t/error/136973/22 "2018-06-25T08:13:46Z")

</div>

1530000764 13:42:44 elasticsearch red 1 1 19 19 0 0 60 0 - 24.1%

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 25, 2018, 8:16am UTC](https://discuss.elastic.co/t/error/136973/23 "2018-06-25T08:16:49Z")

</div>

Which version of Elasticsearch are you using?

---

<div class="post-metadata">

**Author:** ![varsha\_ann](https://avatars.discourse-cdn.com/v4/letter/v/3d9bf3/32.png) [@varsha\_ann](https://discuss.elastic.co/u/varsha_ann)\
**Post date:** [June 25, 2018, 8:17am UTC](https://discuss.elastic.co/t/error/136973/24 "2018-06-25T08:17:36Z")

</div>

am using version 6.3

---

<div class="post-metadata">

**Author:** ![varsha\_ann](https://avatars.discourse-cdn.com/v4/letter/v/3d9bf3/32.png) [@varsha\_ann](https://discuss.elastic.co/u/varsha_ann)\
**Post date:** [June 25, 2018, 8:32am UTC](https://discuss.elastic.co/t/error/136973/25 "2018-06-25T08:32:32Z")

</div>

please help.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 25, 2018, 9:05am UTC](https://discuss.elastic.co/t/error/136973/26 "2018-06-25T09:05:03Z")

</div>

The output you posted does not match what my 6.3 cluster outputs. Can you please run the clusters health API again as shown in the documentation?

Is there anything in the Elasticsearch logs?

---

<div class="post-metadata">

**Author:** ![varsha\_ann](https://avatars.discourse-cdn.com/v4/letter/v/3d9bf3/32.png) [@varsha\_ann](https://discuss.elastic.co/u/varsha_ann)\
**Post date:** [June 25, 2018, 9:35am UTC](https://discuss.elastic.co/t/error/136973/27 "2018-06-25T09:35:57Z")

</div>

**red open .monitoring-es-6-2018.06.24 HZr1UkyES7qCnRh-f7jQkA 1 0 \*\*  
 red open .monitoring-es-6-2018.06.20 qODL0kJDRyKD9BAsBQdQ\_g 1 0 \*\*  
 yellow open api cMW8S6DQRJW6ziHFD2U1ng 5 1 2 0 4.7kb 4.7kb  
red open .monitoring-es-6-2018.06.23 f\_rpnIziTT-VuvaXTjMvcg 1 0 \*\*  
red open .monitoring-es-6-2018.06.22 3eYztlHfRviIdZ8c1aPnug 1 0 \*\*  
red open .monitoring-kibana-6-2018.06.25 6mfSAkEtSz6DtQebYNHvzg 1 0 \*\*  
red open .monitoring-kibana-6-2018.06.22 plSaO0ZIRsqRq6FVOxPvmw 1 0 \*\*  
red open .monitoring-es-6-2018.06.26 kasRJuM8TX-RfzinKTA43g 1 0 \*\*  
red open .monitoring-kibana-6-2018.06.20 tZGn0DpbSLCfCgUtAf88Ow 1 0 \*\*  
 green open .kibana 1W2ZwVz1RlC859anQBVvpw 1 0 14 3 57.9kb 57.9kb  
 red open .monitoring-kibana-6-2018.06.21 Q5n9dMLXSrSHbulkS56L2g 1 0 \*\*  
 green open .monitoring-kibana-6-2018.06.19 mI1izqTHTHmyhU-V2PMVsw 1 0 5034 0 1.4mb 1.4mb  
green open .monitoring-es-6-2018.06.19 U8y6mqbIRruoyQL3O6lOHw 1 0 131533 1463 58.2mb 58.2mb  
 red open .monitoring-es-6-2018.06.25 P5iobxvFQsSwf07I\_4N-sA 1 0 \*\*  
red open .monitoring-kibana-6-2018.06.24 zBdyMiFMQ9aX70eoE3Hnrw 1 0 \*\*  
yellow open toilet 7G9G7Nm7Rdi17l4-Xt-nOA 5 1 71 0 229.8kb 229.8kb  
red open .monitoring-kibana-6-2018.06.23 yH40\_25vSXKDsbAM\_xVYzA 1 0 \*\*  
red open .monitoring-kibana-6-2018.06.26 Ej4RyvUrTh-PG0R\_GrNtiw 1 0 \*\*  
yellow open .kibana-6 zoH5kWoiRGuwgLTYCSqkCw 1 1 0 0 261b 261b  
red open .monitoring-es-6-2018.06.21 tznjhNEBRUCJoeR9ouAQ8w 1 0  
yellow open logstash-2015.05.18 b674OZTPQJaX7A7vbh3N-A 5 1 0 0 1.2kb 1.2kb**

this is what I get when GET \_cat/indices have be used

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 25, 2018, 9:46am UTC](https://discuss.elastic.co/t/error/136973/28 "2018-06-25T09:46:51Z")

</div>

It seems like a lot of monitoring indices are in a red state. Not sure how you got into that state, but you can delete them by running `curl -XDELETE localhost:9200/.monitoring*`.

---

<div class="post-metadata">

**Author:** ![varsha\_ann](https://avatars.discourse-cdn.com/v4/letter/v/3d9bf3/32.png) [@varsha\_ann](https://discuss.elastic.co/u/varsha_ann)\
**Post date:** [June 25, 2018, 10:05am UTC](https://discuss.elastic.co/t/error/136973/29 "2018-06-25T10:05:27Z")

</div>

I want to install x pack , which is available in version 6.2.4 .And I am having my kibana and elasticsearch installed in version 6.3 . Is there any issue?

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 25, 2018, 10:09am UTC](https://discuss.elastic.co/t/error/136973/30 "2018-06-25T10:09:21Z")

</div>

If you installed the default 6.3 distribution, X-Pack is already installed and you have access to all the free features, so there is no need to install anything further.

---

<div class="post-metadata">

**Author:** ![varsha\_ann](https://avatars.discourse-cdn.com/v4/letter/v/3d9bf3/32.png) [@varsha\_ann](https://discuss.elastic.co/u/varsha_ann)\
**Post date:** [June 25, 2018, 10:10am UTC](https://discuss.elastic.co/t/error/136973/31 "2018-06-25T10:10:14Z")

</div>

oh okay  
thank you so much.

---

<div class="post-metadata">

**Author:** ![varsha\_ann](https://avatars.discourse-cdn.com/v4/letter/v/3d9bf3/32.png) [@varsha\_ann](https://discuss.elastic.co/u/varsha_ann)\
**Post date:** [June 28, 2018, 7:14am UTC](https://discuss.elastic.co/t/error/136973/39 "2018-06-28T07:14:15Z")

</div>

My data looks like this:

\*\*{"index":{"\_index":"tcswashroom","\_type":"doc"}}  
{"sno": 0,"feedback\_toilet\_id": "TOI100", "sensor\_value": 3,"people\_count": 6,"satisfied": 1,"med\_satisfied": 1,"not\_satisfied": 2,"rfid\_value": "3","timestamp": "1529775125"} \*\*  
\*\* {"index":{"\_index":"tcswashroom","\_type":"doc"}}  
{"sno": 1,"feedback\_toilet\_id": "TOI101", "sensor\_value": 4,"people\_count": 7,"satisfied": 2,"med\_satisfied": 2,"not\_satisfied": 3,"rfid\_value": "4","timestamp": "1529775125"} \*\*  
\*\* {"index":{"\_index":"tcswashroom","\_type":"doc"}}  
{"sno": 2,"feedback\_toilet\_id": "TOI102", "sensor\_value": 5,"people\_count": 8,"satisfied": 3,"med\_satisfied": 3,"not\_satisfied": 4,"rfid\_value": "5","timestamp": "1529775125"} \*\*  
\*\* {"index":{"\_index":"tcswashroom","\_type":"doc"}}  
{"sno": 3,"feedback\_toilet\_id": "TOI103", "sensor\_value": 6,"people\_count": 9,"satisfied": 4,"med\_satisfied": 4,"not\_satisfied": 5,"rfid\_value": "6","timestamp": "1529775125"} \*\*  
\*\* {"index":{"\_index":"tcswashroom","\_type":"doc"}}  
{"sno": 4,"feedback\_toilet\_id": "TOI104", "sensor\_value": 7,"people\_count": 10,"satisfied": 5,"med\_satisfied": 5,"not\_satisfied": 6,"rfid\_value": "7","timestamp": "1529775125"} \*\*  
\*\* {"index":{"\_index":"tcswashroom","\_type":"doc"}}  
{"sno": 5,"feedback\_toilet\_id": "TOI105", "sensor\_value": 8,"people\_count": 11,"satisfied": 6,"med\_satisfied": 6,"not\_satisfied": 7,"rfid\_value": "8","timestamp": "1529775125"}

and my mapping is like this:  
PUT washroom/\_mapping/\_doc  
{  
"properties" : {  
"sno" : {"type": "integer"},  
"feedback\_toilet\_id": {"type": "keyword"},  
"sensor\_value": {"type": "integer"},  
"people\_count": {"type": "integer"},  
"satisfied": {"type": "integer"},  
"med\_satisfied": {"type": "integer"},  
"not\_satified": {"type": "integer"},  
"rfid\_value": {"type": "keyword"},  
"timestamp": {"type": "date"}

}  
}

and when i went to the discover section,am not able to get the data.It saya no results found.  
the time stamp is set for last 15 min.I tried changing the time.Yet it is not working.What should I do? Please help me.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 28, 2018, 7:45am UTC](https://discuss.elastic.co/t/error/136973/40 "2018-06-28T07:45:16Z")

</div>

Can you show us what a document look like when you inspect in the Discover app? Did you define your index pattern to use the `timestamp` field? What exactly do you mean by `not working`?

---

<div class="post-metadata">

**Author:** ![varsha\_ann](https://avatars.discourse-cdn.com/v4/letter/v/3d9bf3/32.png) [@varsha\_ann](https://discuss.elastic.co/u/varsha_ann)\
**Post date:** [June 28, 2018, 7:56am UTC](https://discuss.elastic.co/t/error/136973/41 "2018-06-28T07:56:05Z")

</div>

Yes, while the index pattern was being created ,they asked for the time field and I selected timestamp from the drop down box.  
Then when i took discover app for viewing the histogram, It said no result found.  
I tried adjusting the time.Then also I was not able to find anything.  
What should I do now? Please help

---

<div class="post-metadata">

**Author:** ![varsha\_ann](https://avatars.discourse-cdn.com/v4/letter/v/3d9bf3/32.png) [@varsha\_ann](https://discuss.elastic.co/u/varsha_ann)\
**Post date:** [June 28, 2018, 8:00am UTC](https://discuss.elastic.co/t/error/136973/42 "2018-06-28T08:00:59Z")

</div>

Is it because the timestamp that I have provided differ from the default .

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 28, 2018, 8:14am UTC](https://discuss.elastic.co/t/error/136973/43 "2018-06-28T08:14:11Z")

</div>

If you are not specifying a date format for your date mapping, Elasticsearch assumes [a standard date string or epoch milliseconds](https://www.elastic.co/guide/en/elasticsearch/reference/6.3/date.html). As you timestamp seems to be in seconds I assume this means the timestamp gets interpreted incorrectly. You will probably need to change your mappings and specify the `epoch_second` ([link to docs](https://www.elastic.co/guide/en/elasticsearch/reference/6.3/mapping-date-format.html#built-in-date-formats)) format for your `timestamp` field.

---

<div class="post-metadata">

**Author:** ![varsha\_ann](https://avatars.discourse-cdn.com/v4/letter/v/3d9bf3/32.png) [@varsha\_ann](https://discuss.elastic.co/u/varsha_ann)\
**Post date:** [June 28, 2018, 8:31am UTC](https://discuss.elastic.co/t/error/136973/44 "2018-06-28T08:31:20Z")

</div>

Can I make a change now?Will it affect the data stored in the index pattern?

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 28, 2018, 8:32am UTC](https://discuss.elastic.co/t/error/136973/45 "2018-06-28T08:32:21Z")

</div>

You can't change existing mappings, so will need to reindex the data.

---

<div class="post-metadata">

**Author:** ![varsha\_ann](https://avatars.discourse-cdn.com/v4/letter/v/3d9bf3/32.png) [@varsha\_ann](https://discuss.elastic.co/u/varsha_ann)\
**Post date:** [June 28, 2018, 8:34am UTC](https://discuss.elastic.co/t/error/136973/46 "2018-06-28T08:34:18Z")

</div>

Okay so i should specify :  
Format:epoch\_second ?

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 28, 2018, 8:38am UTC](https://discuss.elastic.co/t/error/136973/47 "2018-06-28T08:38:06Z")

</div>

Yes.

[Previous page](https://discuss.elastic.co/t/error/136973.md?page=1)

[Next page](https://discuss.elastic.co/t/error/136973.md?page=3)
