# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1262 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1263 --- ## [How to investigate heap usage spikes?](https://discuss.elastic.co/t/how-to-investigate-heap-usage-spikes/184538)
**Author:** [@Michael\_Logutov](https://discuss.elastic.co/u/Michael_Logutov)\ **Replies:** 2\ **Last updated:** [June 15, 2019, 7:35am UTC](https://discuss.elastic.co/t/how-to-investigate-heap-usage-spikes/184538 "2019-06-15T07:35:41Z")
We're running ES 5.5.2 and facing sporadic long GC problems. Getting GC logs and analyzing them we see two main reasons for long GC - allocation and promotion failures. Which correlates with hudge spikes of heap usage on… --- ## [Template installation error](https://discuss.elastic.co/t/template-installation-error/185799)
**Author:** [@Vineeth\_Ananthula1](https://discuss.elastic.co/u/Vineeth_Ananthula1)\ **Replies:** 1\ **Last updated:** [June 15, 2019, 5:48am UTC](https://discuss.elastic.co/t/template-installation-error/185799 "2019-06-15T05:48:39Z")
When i start running my conf file, I am getting an error as shown below. How can I correct this error? my conf file: input { tcp { port =\> 514 type =\> syslog } udp { port =\> 514 type =\> syslog } } output { … --- ## [Querying elastic search data by query api](https://discuss.elastic.co/t/querying-elastic-search-data-by-query-api/185803)
**Author:** [@Aayush\_Chaudhary](https://discuss.elastic.co/u/Aayush_Chaudhary)\ **Replies:** 1\ **Last updated:** [June 15, 2019, 5:48am UTC](https://discuss.elastic.co/t/querying-elastic-search-data-by-query-api/185803 "2019-06-15T05:48:09Z")
i am passing in the request body {"query":{"bool":{"must": {"match":{"LogEvent.logData.message":"aa"}}}}} but it is throwing 406 saying invalid inputs in elk 6.8 but it is working in 5.5 elk stack .. can anyone please lo… --- ## [Update request not updating documents in index](https://discuss.elastic.co/t/update-request-not-updating-documents-in-index/185861)
**Author:** [@vyas.radhakrishnan](https://discuss.elastic.co/u/vyas.radhakrishnan)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 11:36pm UTC](https://discuss.elastic.co/t/update-request-not-updating-documents-in-index/185861 "2019-06-14T23:36:15Z")
in Elastic 6.5.4 update request for a field does not update the field correctly. The existing content is (partial content from doc) "PrimaryEmail": { "ContactPointId": 100000016065020, "\_secured": "Y", "EmailAddress… --- ## [Calculate values over aggregation results](https://discuss.elastic.co/t/calculate-values-over-aggregation-results/184556)
**Author:** [@jasony](https://discuss.elastic.co/u/jasony)\ **Replies:** 4\ **Last updated:** [June 14, 2019, 10:53pm UTC](https://discuss.elastic.co/t/calculate-values-over-aggregation-results/184556 "2019-06-14T22:53:47Z")
Hello, I am trying to ‘minus’ operation after below terms aggregation. GET test02/\_search { "aggs": { "txid\_aggs": { "terms": { "field": "txid.keyword", "size": 10 }, "aggs": { … --- ## [Elasticsearch downgrade 7.1-\>6.7.2 fails](https://discuss.elastic.co/t/elasticsearch-downgrade-7-1-6-7-2-fails/185853)
**Author:** [@Kamil\_Stars](https://discuss.elastic.co/u/Kamil_Stars)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 10:22pm UTC](https://discuss.elastic.co/t/elasticsearch-downgrade-7-1-6-7-2-fails/185853 "2019-06-14T22:22:46Z")
I stopped ES service, then used: sudo yum remove elasticsearch To get it out of here. I changed repos files to use 6.x versions. Then i tried installing it with sudo yum install elasticsearch-6.7.2 But i get this er… --- ## [Usual sorting with elasticsearch (boost/sort based on other documents)](https://discuss.elastic.co/t/usual-sorting-with-elasticsearch-boost-sort-based-on-other-documents/184672)
**Author:** [@abcarroll](https://discuss.elastic.co/u/abcarroll)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 8:16pm UTC](https://discuss.elastic.co/t/usual-sorting-with-elasticsearch-boost-sort-based-on-other-documents/184672 "2019-06-14T20:16:38Z")
The website in question is simply about 100k+ documents from about 300 different "sellers". Each seller has 1 or more location which is stored in the documents to be searched. Everything works fine except when we try t… --- ## [Large visualization query stops cluster](https://discuss.elastic.co/t/large-visualization-query-stops-cluster/184599)
**Author:** [@mjohnson-phx](https://discuss.elastic.co/u/mjohnson-phx)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 8:00pm UTC](https://discuss.elastic.co/t/large-visualization-query-stops-cluster/184599 "2019-06-14T20:00:40Z")
Hi to all. We have been attempting to run a visualization query against a section of our indexes for about a week now and every time we run the visualization, Kibana gets an unknown error and all of the Data Nodes appear… --- ## [Source Code Finite State Transducer Elasticsearch completion suggester](https://discuss.elastic.co/t/source-code-finite-state-transducer-elasticsearch-completion-suggester/184774)
**Author:** [@rogito\_manda](https://discuss.elastic.co/u/rogito_manda)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 7:41pm UTC](https://discuss.elastic.co/t/source-code-finite-state-transducer-elasticsearch-completion-suggester/184774 "2019-06-14T19:41:01Z")
Can someone point me to the implementation of the Finite State Transducer for the completion suggester? I want to analyze it. Thank you --- ## [Date histogram cache?](https://discuss.elastic.co/t/date-histogram-cache/184903)
**Author:** [@liujin](https://discuss.elastic.co/u/liujin)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 7:33pm UTC](https://discuss.elastic.co/t/date-histogram-cache/184903 "2019-06-14T19:33:47Z")
We hava huge amount of date histogram query, so i want to know whether the partial result of date histogram query can be cached. For example, i query avg(cost) of last 1 hour group by 1m interval at 01:00, and then i d… --- ## [Which helm repo?](https://discuss.elastic.co/t/which-helm-repo/183188)
**Author:** [@ceastman-ibm](https://discuss.elastic.co/u/ceastman-ibm)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 5:49pm UTC](https://discuss.elastic.co/t/which-helm-repo/183188 "2019-06-14T17:49:17Z")
https://github.com/helm/charts/tree/master/stable/elasticsearch - "public helm chart" repo vs https://github.com/elastic/helm-charts they both look to be actively maintained. The "public helm chart" repo seems to have… --- ## [How to intercept each request using java plugin in ElasticSearch 6.7.0](https://discuss.elastic.co/t/how-to-intercept-each-request-using-java-plugin-in-elasticsearch-6-7-0/185364)
**Author:** [@Guna](https://discuss.elastic.co/u/Guna)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 4:43pm UTC](https://discuss.elastic.co/t/how-to-intercept-each-request-using-java-plugin-in-elasticsearch-6-7-0/185364 "2019-06-14T16:43:45Z")
Hi All, I need to handle all request in Elastic Search, it should work like interceptor. I found some example but its all about 5.1.x but I need 6.7.0 version elastic search. Thanks Guna --- ## [Elasticsearch Scripting on Identical fields](https://discuss.elastic.co/t/elasticsearch-scripting-on-identical-fields/185174)
**Author:** [@shivi\_k](https://discuss.elastic.co/u/shivi_k)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 4:39pm UTC](https://discuss.elastic.co/t/elasticsearch-scripting-on-identical-fields/185174 "2019-06-14T16:39:17Z")
I am using elasticsearch 6.2 My problem is I have saved docs in a index with similar key and value names. I want to filter contents using script query. Data is saved as data:\[{key:"howdy", value:"im good"},{key:"Size… --- ## [ES in Docker fails to start](https://discuss.elastic.co/t/es-in-docker-fails-to-start/183904)
**Author:** [@msat-kx](https://discuss.elastic.co/u/msat-kx)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 3:38pm UTC](https://discuss.elastic.co/t/es-in-docker-fails-to-start/183904 "2019-06-14T15:38:30Z")
I tried to run ES in docker under Ubuntu 18.04 64b host with command: docker run -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" docker.elastic.co/elasticsearch/elasticsearch:7.1.1 It failed to start, see the… --- ## [Show peak thread search stats](https://discuss.elastic.co/t/show-peak-thread-search-stats/184608)
**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 2:07pm UTC](https://discuss.elastic.co/t/show-peak-thread-search-stats/184608 "2019-06-14T14:07:47Z")
I would like to calculate peak thread search of my elasticsearch. It's possible with marvel plugin? Is there another way? --- ## [Issues with multiple categories of tag aggregations](https://discuss.elastic.co/t/issues-with-multiple-categories-of-tag-aggregations/185630)
**Author:** [@Sodium](https://discuss.elastic.co/u/Sodium)\ **Replies:** 6\ **Last updated:** [June 14, 2019, 1:48pm UTC](https://discuss.elastic.co/t/issues-with-multiple-categories-of-tag-aggregations/185630 "2019-06-14T13:48:57Z")
Hello, I have an issues managing aggregations in a products based search engine and was hoping someone could give me some pointers about a specific issue. My product have different categories of tags (brand, packaging,… --- ## [ML jobs- aggregations](https://discuss.elastic.co/t/ml-jobs-aggregations/185820)
**Author:** [@Bharath\_Kumar\_R](https://discuss.elastic.co/u/Bharath_Kumar_R)\ **Replies:** 3\ **Last updated:** [June 14, 2019, 12:55pm UTC](https://discuss.elastic.co/t/ml-jobs-aggregations/185820 "2019-06-14T12:55:18Z")
Hey, Im unable to understand how the several aggregation techniques we use for ML jobs. Is there any blog which explains how these aggregation techniques work or can anyone explain about it? thanks in advance --- ## [POST SQL query using Python requests - not working](https://discuss.elastic.co/t/post-sql-query-using-python-requests-not-working/185851)
**Author:** [@Ged](https://discuss.elastic.co/u/Ged)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 12:52pm UTC](https://discuss.elastic.co/t/post-sql-query-using-python-requests-not-working/185851 "2019-06-14T12:52:30Z")
Hi, I'm trying run below SQL query which works in Kibana console: POST /\_sql?format=csv { "query": "DESCRIBE \\"as-log-metrics-2019.06.14\\" " } using Python and requests module: json\_data = {"query": "DESCRIBE \\… --- ## [Good practice in distributing data in indexes](https://discuss.elastic.co/t/good-practice-in-distributing-data-in-indexes/185835)
**Author:** [@Mathias\_Muntz](https://discuss.elastic.co/u/Mathias_Muntz)\ **Replies:** 2\ **Last updated:** [June 14, 2019, 12:48pm UTC](https://discuss.elastic.co/t/good-practice-in-distributing-data-in-indexes/185835 "2019-06-14T12:48:07Z")
Hello everyone, Here is a small description of the situtation. We have approximately 5,000 customers who use a tool connected to a Postgres database. Each client can manipulate the data in a database of its own. Each d… --- ## [Object mapping for \[host\] tried to parse field \[host\] as object, but found a concrete value](https://discuss.elastic.co/t/object-mapping-for-host-tried-to-parse-field-host-as-object-but-found-a-concrete-value/184200)
**Author:** [@Luis\_Alejandro\_Galan](https://discuss.elastic.co/u/Luis_Alejandro_Galan)\ **Replies:** 5\ **Last updated:** [June 14, 2019, 8:25am UTC](https://discuss.elastic.co/t/object-mapping-for-host-tried-to-parse-field-host-as-object-but-found-a-concrete-value/184200 "2019-06-14T08:25:42Z")
We have just upgraded Kibana, Logstash, Filebeat and Elasticseach from 6.3 to 7.1.1 and I have been trying to solve the issue in the following logs /var/log/elasticsearch/elasticsearch.log: \[2019-06-04T09:33:31,761\]\[DEB… --- ## [Which repo holds stack-graph implementation?](https://discuss.elastic.co/t/which-repo-holds-stack-graph-implementation/182164)
**Author:** [@bryan\_rasmussen](https://discuss.elastic.co/u/bryan_rasmussen)\ **Replies:** 1\ **Last updated:** [May 22, 2019, 8:41am UTC](https://discuss.elastic.co/t/which-repo-holds-stack-graph-implementation/182164 "2019-05-22T08:41:16Z")
When I read the graph page https://www.elastic.co/products/stack/graph it says that " The code for graph features is now open and available in our public GitHub repo." Is that in the ElasticSearch repo itself, or some … --- ## [ElasticSearch NLog integration](https://discuss.elastic.co/t/elasticsearch-nlog-integration/185589)
**Author:** [@NAHA](https://discuss.elastic.co/u/NAHA)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 9:18am UTC](https://discuss.elastic.co/t/elasticsearch-nlog-integration/185589 "2019-06-14T09:18:29Z")
Hi , I want to write logs to ElasticSearch. So , I added NLog.Targets.ElasticSearch in nugets package and I configured my Nlog.config file. I can see in ElasticSearch only dll level logs, My NLog configuration: … --- ## [SSL Issue with ES](https://discuss.elastic.co/t/ssl-issue-with-es/185810)
**Author:** [@Santhosh1](https://discuss.elastic.co/u/Santhosh1)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 9:14am UTC](https://discuss.elastic.co/t/ssl-issue-with-es/185810 "2019-06-14T09:14:10Z")
Hi All, Hope everyone is good. I had installed ES 5.2.2 in my laptop. Installation is OK and I can connect to the ES URL and can see the indexes. I had configured SSL but when I access the url with HTTPS, I have the SS… --- ## [Filter Nested Objects](https://discuss.elastic.co/t/filter-nested-objects/185797)
**Author:** [@Mohamad\_Alkerdi](https://discuss.elastic.co/u/Mohamad_Alkerdi)\ **Replies:** 0\ **Last updated:** [June 14, 2019, 8:34am UTC](https://discuss.elastic.co/t/filter-nested-objects/185797 "2019-06-14T08:34:00Z")
Hello guys i have this nested schema what i want to do is to search episodes.objects.name and filter the returned array based on the matching objects Any help { "mappings":{ "properties":{ "epis… --- ## [New field with ingest node](https://discuss.elastic.co/t/new-field-with-ingest-node/185778)
**Author:** [@Denis.topa](https://discuss.elastic.co/u/Denis.topa)\ **Replies:** 0\ **Last updated:** [June 14, 2019, 7:09am UTC](https://discuss.elastic.co/t/new-field-with-ingest-node/185778 "2019-06-14T07:09:06Z")
Hello, On a locally installed version with ELK I'm using logstash with filters to create some new filed from message pulled from an xml file using filebeat. Here are the filters xml{ source =\> "message" store\_xml =\> … --- ## [Is query total counts affects the size of the index](https://discuss.elastic.co/t/is-query-total-counts-affects-the-size-of-the-index/185794)
**Author:** [@Rajat\_Singh](https://discuss.elastic.co/u/Rajat_Singh)\ **Replies:** 0\ **Last updated:** [June 14, 2019, 8:29am UTC](https://discuss.elastic.co/t/is-query-total-counts-affects-the-size-of-the-index/185794 "2019-06-14T08:29:37Z")
Hi Folks, In Es i am seeing the field query\_total which is query\_total is the total number of queries across all lucene instances of a node. So i am having two indices having same number of documents indexed but query … --- ## [Monitoring-es behavior](https://discuss.elastic.co/t/monitoring-es-behavior/185608)
**Author:** [@h1r0sh1ma](https://discuss.elastic.co/u/h1r0sh1ma)\ **Replies:** 0\ **Last updated:** [June 13, 2019, 10:21am UTC](https://discuss.elastic.co/t/monitoring-es-behavior/185608 "2019-06-13T10:21:04Z")
Hail, guys! the preliminary basic info: es version: 6.7 nodes in cluster: 1 Heap size: 30gb license type: basic os: Debian 9 The question is about the monitoring-es-6 indices (further: system indices ). The whole… --- ## [Elastic search dashboards are not loading](https://discuss.elastic.co/t/elastic-search-dashboards-are-not-loading/185782)
**Author:** [@harish.g](https://discuss.elastic.co/u/harish.g)\ **Replies:** 0\ **Last updated:** [June 14, 2019, 7:27am UTC](https://discuss.elastic.co/t/elastic-search-dashboards-are-not-loading/185782 "2019-06-14T07:27:42Z")
Hi , We have the elastic-search environment with three node cluster .Currently the environment is not stable and dashboard are not loading as expected . Here is the log data Node 1 SQ8w\]\] can not be imported as a dan… --- ## [Elasticsearch Allocation ERROR WINDOWS](https://discuss.elastic.co/t/elasticsearch-allocation-error-windows/185722)
**Author:** [@ahmed\_charafouddine](https://discuss.elastic.co/u/ahmed_charafouddine)\ **Replies:** 2\ **Last updated:** [June 14, 2019, 7:11am UTC](https://discuss.elastic.co/t/elasticsearch-allocation-error-windows/185722 "2019-06-14T07:11:57Z")
Hello, After having properly installed elasticsearch on a windows PC, when I run kibana by the command. \\ Bin \\ kibana.bat -\> it does not work and yet elasticsearch seems to work well. { "name" : "GL885S1N", "cluster… --- ## [Accurate Paging](https://discuss.elastic.co/t/accurate-paging/184366)
**Author:** [@NashSLX](https://discuss.elastic.co/u/NashSLX)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 7:01am UTC](https://discuss.elastic.co/t/accurate-paging/184366 "2019-06-14T07:01:39Z")
Hi All, We're currently implementing our search with help of the Elastic Stack, but we're having some trouble providing accurate paging for our users. Since we are using collapsed hits/inner hits as part of our query, … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1261) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1263)