# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1313 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1314 --- ## [Elasticsearch: adding a second node to the cluster - \[node-1\] master not discovered yet: have discovered \[{node-1}](https://discuss.elastic.co/t/elasticsearch-adding-a-second-node-to-the-cluster-node-1-master-not-discovered-yet-have-discovered-node-1/242529)
**Author:** [@pauleccm](https://discuss.elastic.co/u/pauleccm)\ **Replies:** 7\ **Last updated:** [July 27, 2020, 10:37am UTC](https://discuss.elastic.co/t/elasticsearch-adding-a-second-node-to-the-cluster-node-1-master-not-discovered-yet-have-discovered-node-1/242529 "2020-07-27T10:37:44Z")
I am trying to obtain a two nodes cluster. First node, master (master-1): cluster.name: "admin\_system\_elk" network.host: 0.0.0.0 node.name: "master-1" discovery.seed\_hosts: "localhost:9300" cluster.initial\_master\_nodes… --- ## [Overwriting new document?](https://discuss.elastic.co/t/overwriting-new-document/242729)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 4\ **Last updated:** [July 27, 2020, 10:19am UTC](https://discuss.elastic.co/t/overwriting-new-document/242729 "2020-07-27T10:19:27Z")
Hi, Recently I did a fresh install of elk 7.7 . I did a successfull attempt of creaing a POC and now try to build up a full environment. However, When I send a log via filebeatand logstash to ES, somehow every new docum… --- ## [Elasticsearch query for 2 Parts without changing/splitting query in PHP](https://discuss.elastic.co/t/elasticsearch-query-for-2-parts-without-changing-splitting-query-in-php/242681)
**Author:** [@bastimm](https://discuss.elastic.co/u/bastimm)\ **Replies:** 0\ **Last updated:** [July 27, 2020, 4:37am UTC](https://discuss.elastic.co/t/elasticsearch-query-for-2-parts-without-changing-splitting-query-in-php/242681 "2020-07-27T04:37:23Z")
Hello, everyone, many years ago I built a search for a webshop with Elasticsearch. Now I like to update it. One question, if i.e. i search for "iphone 11 MWLT2ZD", i want to search for "iphone" or "11" or "MWLT2ZD". N… --- ## [I'm new and can you help me with the meaning](https://discuss.elastic.co/t/im-new-and-can-you-help-me-with-the-meaning/242724)
**Author:** [@fatih\_erol](https://discuss.elastic.co/u/fatih_erol)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 9:52am UTC](https://discuss.elastic.co/t/im-new-and-can-you-help-me-with-the-meaning/242724 "2020-07-27T09:52:04Z")
Hello, my data is on Sql server and I want to use ElasticSearch. Does ElasticSearch mean that there will also be a copy of the data? Thank you --- ## [I need Help for sort ordering most words occurrence with Query string Search](https://discuss.elastic.co/t/i-need-help-for-sort-ordering-most-words-occurrence-with-query-string-search/242511)
**Author:** [@anup786saini](https://discuss.elastic.co/u/anup786saini)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 9:26am UTC](https://discuss.elastic.co/t/i-need-help-for-sort-ordering-most-words-occurrence-with-query-string-search/242511 "2020-07-27T09:26:34Z")
{ "title":"javascript,seo,javascript,c#,html,javascript"} { "title":"javascript,wordpress,seo,javascript,c#,html"} { "title":"javascript,wordpress,seo,c#,html,wordpress,wordpress"} { "title":"javascript,wordpress,seo,… --- ## [How to determine if one of master gone from cluster?](https://discuss.elastic.co/t/how-to-determine-if-one-of-master-gone-from-cluster/241171)
**Author:** [@byumov](https://discuss.elastic.co/u/byumov)\ **Replies:** 12\ **Last updated:** [July 27, 2020, 9:08am UTC](https://discuss.elastic.co/t/how-to-determine-if-one-of-master-gone-from-cluster/241171 "2020-07-27T09:08:35Z")
Hi! I have a clean and simple installation os ES: 9 nodes: 6 data and 3 masters(without data). I want to determine situation when one of masters gone for some reason(power off). How I can do it on 7 ES? I looked at /\_… --- ## [Pagination for REST API Via Logstash](https://discuss.elastic.co/t/pagination-for-rest-api-via-logstash/242714)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 0\ **Last updated:** [July 27, 2020, 8:49am UTC](https://discuss.elastic.co/t/pagination-for-rest-api-via-logstash/242714 "2020-07-27T08:49:23Z")
Hi, How can I import from a REST API to Elasticsearch via Logstash using Pagination? I was able to import using http\_poller, how can I write force a custom script or "for loop" to check for other records to import. C… --- ## [Logstash jdbc sybase connect fails](https://discuss.elastic.co/t/logstash-jdbc-sybase-connect-fails/242217)
**Author:** [@xcitan](https://discuss.elastic.co/u/xcitan)\ **Replies:** 3\ **Last updated:** [July 27, 2020, 8:02am UTC](https://discuss.elastic.co/t/logstash-jdbc-sybase-connect-fails/242217 "2020-07-27T08:02:57Z")
Working on: SMP Debian 4.19.118-2+deb10u1 (2020-06-07) x86\_64 GNU/Linux logstash 7.8.0 I need to connect to a sybase ASE16, using jconn4 driver. The driver for example works in squirrel without any problems. input {… --- ## [Identification of development mode vs production mode in Elasticsearch](https://discuss.elastic.co/t/identification-of-development-mode-vs-production-mode-in-elasticsearch/242701)
**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 7:38am UTC](https://discuss.elastic.co/t/identification-of-development-mode-vs-production-mode-in-elasticsearch/242701 "2020-07-27T07:38:31Z")
Currently, we are using below mention values in network.host param in elasticsearch.yml. network.host: \["localhost", "::1", "10.0.x.xx"\] Here we have used both localhost and non-localhost address. Which mode is this co… --- ## [Delete old indeces data](https://discuss.elastic.co/t/delete-old-indeces-data/242651)
**Author:** [@Yaniv\_Israel](https://discuss.elastic.co/u/Yaniv_Israel)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 7:35am UTC](https://discuss.elastic.co/t/delete-old-indeces-data/242651 "2020-07-27T07:35:25Z")
Hi, I'm trying to make some drill down to our system ELK before upgrading. We are running ElasticSearch with 1.7 (old, I know). I've found that on ES data directory, we have some indices that not exists by ES (not sho… --- ## [Failed to execute bulk item (update) BulkShardRequest](https://discuss.elastic.co/t/failed-to-execute-bulk-item-update-bulkshardrequest/242687)
**Author:** [@devinderpal](https://discuss.elastic.co/u/devinderpal)\ **Replies:** 3\ **Last updated:** [July 27, 2020, 7:20am UTC](https://discuss.elastic.co/t/failed-to-execute-bulk-item-update-bulkshardrequest/242687 "2020-07-27T07:20:04Z")
I am facing Live server problem on elastisearch. My RAM is 32 GB and Heap Memory is 8GB. But still i am facing the problem in elastisearch. Bellow are the logs // Error Log \[2020-07-26T20:15:05,456\]\[DEBUG\]\[o.e.a.b.Tra… --- ## [Change elastic ip from localhost to x.x.x.x](https://discuss.elastic.co/t/change-elastic-ip-from-localhost-to-x-x-x-x/242534)
**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 7:16am UTC](https://discuss.elastic.co/t/change-elastic-ip-from-localhost-to-x-x-x-x/242534 "2020-07-27T07:16:38Z")
Hi, Elastic search by default running on 127.0.0.1:9200. I change it to some IP address. Question is how I can change or tell logstash to connect with given IP address. Thanks in Advance --- ## [ELK Multi index in signle logstash.conf file](https://discuss.elastic.co/t/elk-multi-index-in-signle-logstash-conf-file/242548)
**Author:** [@jeetugangwar11](https://discuss.elastic.co/u/jeetugangwar11)\ **Replies:** 4\ **Last updated:** [July 27, 2020, 5:21am UTC](https://discuss.elastic.co/t/elk-multi-index-in-signle-logstash-conf-file/242548 "2020-07-27T05:21:45Z")
Hi, I'm trying to push data from logstash to more then 2 index using single logstash.conf file. below is my configuration: input { beats { port =\> 5044 } } input { file { type =\> "java" path =\> "C:/ELK/Projects… --- ## [Add frequency to elatize data logstash](https://discuss.elastic.co/t/add-frequency-to-elatize-data-logstash/242552)
**Author:** [@Gabriel\_Mare](https://discuss.elastic.co/u/Gabriel_Mare)\ **Replies:** 5\ **Last updated:** [July 27, 2020, 7:09am UTC](https://discuss.elastic.co/t/add-frequency-to-elatize-data-logstash/242552 "2020-07-27T07:09:15Z")
Hi, I need to add frequency to elastize data in my elasticsearch. I'm using stdin input and I don't know which the parameter/variable relationated with frequency. Somebody can help me? --- ## [Logstash-forwarder](https://discuss.elastic.co/t/logstash-forwarder/240204)
**Author:** [@mustafa.husny](https://discuss.elastic.co/u/mustafa.husny)\ **Replies:** 3\ **Last updated:** [July 27, 2020, 7:07am UTC](https://discuss.elastic.co/t/logstash-forwarder/240204 "2020-07-27T07:07:19Z")
I am using logstash forwarder to ship my logs from AIX machine to my ELK stack on linux machine I am trying to make an index as (hostname-ip) but it is not working my config is as below input { lumberjack { port =\> … --- ## [How to set the order of aggregations](https://discuss.elastic.co/t/how-to-set-the-order-of-aggregations/242025)
**Author:** [@gitterhh](https://discuss.elastic.co/u/gitterhh)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 7:00am UTC](https://discuss.elastic.co/t/how-to-set-the-order-of-aggregations/242025 "2020-07-27T07:00:54Z")
is it possible to set the order of aggregations in the response to be the same as they are added in the request? --- ## [Kibana in docker, issues with installation of plugins](https://discuss.elastic.co/t/kibana-in-docker-issues-with-installation-of-plugins/236866)
**Author:** [@twright8](https://discuss.elastic.co/u/twright8)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 6:43am UTC](https://discuss.elastic.co/t/kibana-in-docker-issues-with-installation-of-plugins/236866 "2020-07-27T06:43:13Z")
Hey All - and thanks for any help in advance. Im trying to install this plugin into kibana in docker: https://github.com/dlumbrer/kbn\_network my version is 7.7.1 which should work based on the docs. After copying from … --- ## [How to change home link?](https://discuss.elastic.co/t/how-to-change-home-link/242570)
**Author:** [@sdndude](https://discuss.elastic.co/u/sdndude)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 6:38am UTC](https://discuss.elastic.co/t/how-to-change-home-link/242570 "2020-07-27T06:38:47Z")
I have several disparate containers doing data collection with both logstash and filebeat. Each of these has their own set of visualizations and dashboards. I have created a dashboard that has icons/links to the "overv… --- ## ["org.elasticsearch.action.search.SearchPhaseExecutionException: all shards failed - ES 7.6](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed-es-7-6/242555)
**Author:** [@srikhark](https://discuss.elastic.co/u/srikhark)\ **Replies:** 3\ **Last updated:** [July 27, 2020, 5:07am UTC](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed-es-7-6/242555 "2020-07-27T05:07:32Z")
I got below error on ES 7.6 and queries were taking time to execute. Can any one help on this. ? I have deployed our cluster on docker {"log":"\[2020-07-24T12:35:34,270\]\[WARN \]\[r.suppressed \] \[cindex\_name… --- ## [Cannot Login to Enterprise Search 7.7](https://discuss.elastic.co/t/cannot-login-to-enterprise-search-7-7/242517)
**Author:** [@ckough](https://discuss.elastic.co/u/ckough)\ **Replies:** 1\ **Last updated:** [July 27, 2020, 3:55am UTC](https://discuss.elastic.co/t/cannot-login-to-enterprise-search-7-7/242517 "2020-07-27T03:55:26Z")
Hi There, I'm testing out ent search 7.7 and i have successfully start ent search and can see the landing page. \[root@elk-entsearch01 ~\]# ENT\_SEARCH\_DEFAULT\_PASSWORD=passwordexample /usr/share/enterprise-search/bin/ent… --- ## [【Datatable】Top hits Aggregationについて②](https://discuss.elastic.co/t/datatable-top-hits-aggregation/237985)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 4\ **Last updated:** [July 27, 2020, 3:12am UTC](https://discuss.elastic.co/t/datatable-top-hits-aggregation/237985 "2020-07-27T03:12:11Z")
お世話になります。 以前質問させて頂いた、DatatableのTop hits Aggregationに関して再度質問させて頂きます。 ▼実現したいこと 下記indexデータにおいて 同一のnameの中でtimeが最も過去日付のデータのみ、Datatableに表示 かつ 同一のnameの中でidが異なり、timeが最も過去日付が複数あった場合、全件Datatableに表示 ▼indexデータ name id t… --- ## [RAM and Data size](https://discuss.elastic.co/t/ram-and-data-size/239904)
**Author:** [@jigsm\_shah](https://discuss.elastic.co/u/jigsm_shah)\ **Replies:** 5\ **Last updated:** [July 26, 2020, 11:59pm UTC](https://discuss.elastic.co/t/ram-and-data-size/239904 "2020-07-26T23:59:25Z")
Hello, I am a newbie exploring Elastic Search and having hard time understanding how does Elastic Search handle data which is larger than the RAM size. I am going through the documentations and it says to allocate 50% … --- ## [Is it effective to divide data into multiple indexes instead of multiple shards/nodes?](https://discuss.elastic.co/t/is-it-effective-to-divide-data-into-multiple-indexes-instead-of-multiple-shards-nodes/242324)
**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\ **Replies:** 2\ **Last updated:** [July 26, 2020, 11:07pm UTC](https://discuss.elastic.co/t/is-it-effective-to-divide-data-into-multiple-indexes-instead-of-multiple-shards-nodes/242324 "2020-07-26T23:07:48Z")
I have ~100GB data and would like to build a search application with the data. The each document has a field like category id, besides ordinal text fields. Users usually filter the documents specifying the category ids… --- ## [Elastic search as a service](https://discuss.elastic.co/t/elastic-search-as-a-service/242384)
**Author:** [@deyujjal70](https://discuss.elastic.co/u/deyujjal70)\ **Replies:** 1\ **Last updated:** [July 26, 2020, 11:02pm UTC](https://discuss.elastic.co/t/elastic-search-as-a-service/242384 "2020-07-26T23:02:41Z")
Hello All ,I am new to elastic search .I have recenly built 4 node elastic search .1 master node,2 master+data and 1 Dedicated data node.We have installed ES using the tar file on redhat 7. We are not using Root access.… --- ## [Get a count of values from the most recent document](https://discuss.elastic.co/t/get-a-count-of-values-from-the-most-recent-document/242474)
**Author:** [@Miguel\_BA](https://discuss.elastic.co/u/Miguel_BA)\ **Replies:** 0\ **Last updated:** [July 24, 2020, 7:49am UTC](https://discuss.elastic.co/t/get-a-count-of-values-from-the-most-recent-document/242474 "2020-07-24T07:49:10Z")
I can't get a count of fields with a filtered document value. I have this json { "took" : 6, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1, "skipped" : 0, "failed" : 0 }, "hi… --- ## [Mapping different logs into a single index or keep separate?](https://discuss.elastic.co/t/mapping-different-logs-into-a-single-index-or-keep-separate/242482)
**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\ **Replies:** 1\ **Last updated:** [July 26, 2020, 10:58pm UTC](https://discuss.elastic.co/t/mapping-different-logs-into-a-single-index-or-keep-separate/242482 "2020-07-26T22:58:21Z")
Hello, we are considering mapping all the ELB, ALB, CloudFront and API Gateway logs into a single json structure and pushing this for analysis in an ES cluster. is this the right way to go about or should we push each … --- ## [Create index pattern with python](https://discuss.elastic.co/t/create-index-pattern-with-python/242633)
**Author:** [@momora9809](https://discuss.elastic.co/u/momora9809)\ **Replies:** 0\ **Last updated:** [July 26, 2020, 7:22am UTC](https://discuss.elastic.co/t/create-index-pattern-with-python/242633 "2020-07-26T07:22:14Z")
Hi, How can I set index pattern with python, before putting any docs? I came up with this, am I on the right tracks? query = "settings": { "number\_of\_shards": 2, "number\_of\_replicas": 1, "mapp… --- ## [Kibana stuck on Elastic loading screen on Chrome](https://discuss.elastic.co/t/kibana-stuck-on-elastic-loading-screen-on-chrome/240504)
**Author:** [@NoNu](https://discuss.elastic.co/u/NoNu)\ **Replies:** 3\ **Last updated:** [July 26, 2020, 10:25pm UTC](https://discuss.elastic.co/t/kibana-stuck-on-elastic-loading-screen-on-chrome/240504 "2020-07-26T22:25:40Z")
I updated Chrome and now I can log into Kibana, but right after it gets stuck on the "Loading Elastic" screen. Chrome console has these errors: kibana#/discover:342 Refused to execute inline script because it violates t… --- ## [Facing issues while installing kibana version 7.8.0 on windows 10](https://discuss.elastic.co/t/facing-issues-while-installing-kibana-version-7-8-0-on-windows-10/240492)
**Author:** [@nilbak](https://discuss.elastic.co/u/nilbak)\ **Replies:** 6\ **Last updated:** [July 26, 2020, 10:23pm UTC](https://discuss.elastic.co/t/facing-issues-while-installing-kibana-version-7-8-0-on-windows-10/240492 "2020-07-26T22:23:08Z")
Hi All, I am new to ELK stack. I was trying to download and install ELK with latest version . I was able to install Elasticsearch successfully but was not able to install Kibana because of below errors. log \[04:42… --- ## [Bulk API item error types](https://discuss.elastic.co/t/bulk-api-item-error-types/242639)
**Author:** [@Munawwar1](https://discuss.elastic.co/u/Munawwar1)\ **Replies:** 1\ **Last updated:** [July 26, 2020, 12:11pm UTC](https://discuss.elastic.co/t/bulk-api-item-error-types/242639 "2020-07-26T12:11:02Z")
Hi. I am trying to differentiate validation errors from intermittent errors from bulk index API. So let's say I tried to index 3 documents, and one failed.. I want to retry the indexing only if it was an intermittent er… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1312) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1314)