# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1294

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1295

---

## [Post upgrade](https://discuss.elastic.co/t/post-upgrade/181875)

<div class="topic-metadata">

**Author:** [@Jonathan\_Tarro](https://discuss.elastic.co/u/Jonathan_Tarro)\
**Replies:** 2\
**Last updated:** [May 20, 2019, 6:57pm UTC](https://discuss.elastic.co/t/post-upgrade/181875 "2019-05-20T18:57:21Z")

</div>

Recently upgrade my elasticsearch to version 6.7.2 (along with upgrading graylog to 3.0.2). Now whenever rotate my active write index my elasticsearch cluster goes to red (this is a VM and so I have since reverted to be…

---

## [How to increase message size limit of elasticsearch API (max\_clause\_count)](https://discuss.elastic.co/t/how-to-increase-message-size-limit-of-elasticsearch-api-max-clause-count/181770)

<div class="topic-metadata">

**Author:** [@Guillaumee](https://discuss.elastic.co/u/Guillaumee)\
**Replies:** 2\
**Last updated:** [May 20, 2019, 6:39pm UTC](https://discuss.elastic.co/t/how-to-increase-message-size-limit-of-elasticsearch-api-max-clause-count/181770 "2019-05-20T18:39:13Z")

</div>

Hello elastic world, I'm currently trying to solve a problem regarding log display in Kibana. I'm using elasticsearch 6.6.1 and Kibana 6.6.1. When creating vizualization for my log, the data set is missing every long …

---

## [Memory usage increased to more than 90 while running Elastic search service on window machine](https://discuss.elastic.co/t/memory-usage-increased-to-more-than-90-while-running-elastic-search-service-on-window-machine/181590)

<div class="topic-metadata">

**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\
**Replies:** 18\
**Last updated:** [May 20, 2019, 6:07pm UTC](https://discuss.elastic.co/t/memory-usage-increased-to-more-than-90-while-running-elastic-search-service-on-window-machine/181590 "2019-05-20T18:07:11Z")

</div>

Hi Team, Memory usage increased to more than 90 while running Elastic search service on window machine. I am using elastic version 7.0.1 / my system RAM is 4gb. Can you please help me how to handle / what configurati…

---

## [Aws automated snapshots](https://discuss.elastic.co/t/aws-automated-snapshots/181869)

<div class="topic-metadata">

**Author:** [@Mohit\_Ruke](https://discuss.elastic.co/u/Mohit_Ruke)\
**Replies:** 3\
**Last updated:** [May 20, 2019, 6:04pm UTC](https://discuss.elastic.co/t/aws-automated-snapshots/181869 "2019-05-20T18:04:50Z")

</div>

so the aws has the ability to take automated snapshots of elasticsearch clusters. it creates a cs-automated repo, in which it stores all the snapshots. Is there anyway to know which s3 bucket it creates to store the snap…

---

## [ILM policy not working](https://discuss.elastic.co/t/ilm-policy-not-working/181544)

<div class="topic-metadata">

**Author:** [@indreek](https://discuss.elastic.co/u/indreek)\
**Replies:** 1\
**Last updated:** [May 20, 2019, 5:47pm UTC](https://discuss.elastic.co/t/ilm-policy-not-working/181544 "2019-05-20T17:47:03Z")

</div>

Hello I created ilm policy /\_ilm/policy/datastream\_policy { "policy": { "phases": { "hot": { "actions": { "rollover": { …

---

## [Install elasticsearch with Dockerfile](https://discuss.elastic.co/t/install-elasticsearch-with-dockerfile/181873)

<div class="topic-metadata">

**Author:** [@leobaiano](https://discuss.elastic.co/u/leobaiano)\
**Replies:** 0\
**Last updated:** [May 20, 2019, 4:40pm UTC](https://discuss.elastic.co/t/install-elasticsearch-with-dockerfile/181873 "2019-05-20T16:40:31Z")

</div>

I followed the https://www.elastic.co/en/blog/how-to-make-a-dockerfile-for-elasticsearch tutorial to create a Dockerfile and install elasticsearch on Heroku, but when I deploy I get the message from error: Unable to lo…

---

## [Elastisearch requirements for OTRS 7](https://discuss.elastic.co/t/elastisearch-requirements-for-otrs-7/181592)

<div class="topic-metadata">

**Author:** [@adbud866](https://discuss.elastic.co/u/adbud866)\
**Replies:** 3\
**Last updated:** [May 20, 2019, 5:28pm UTC](https://discuss.elastic.co/t/elastisearch-requirements-for-otrs-7/181592 "2019-05-20T17:28:32Z")

</div>

Hello, I’m completely new to Elasticsearch but I need it for one of our applications and I hope I can get some recommendations on my query. I plan to install OTRS 7. OTRS uses Elasticsearch for its document search func…

---

## [Cross-Origin Request Blocked](https://discuss.elastic.co/t/cross-origin-request-blocked/181647)

<div class="topic-metadata">

**Author:** [@Presto](https://discuss.elastic.co/u/Presto)\
**Replies:** 2\
**Last updated:** [May 20, 2019, 5:12pm UTC](https://discuss.elastic.co/t/cross-origin-request-blocked/181647 "2019-05-20T17:12:40Z")

</div>

Hello, I am attempting to access data from elasticsearch for use in D3. I am running elasticsearch and kibana in docker containers with ports 9200 and 5601 mapped to localhost:9200 and 5601 respectively, and am testing …

---

## [Unhashable type: 'dict' (python)](https://discuss.elastic.co/t/unhashable-type-dict-python/181876)

<div class="topic-metadata">

**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\
**Replies:** 0\
**Last updated:** [May 20, 2019, 4:57pm UTC](https://discuss.elastic.co/t/unhashable-type-dict-python/181876 "2019-05-20T16:57:11Z")

</div>

Hello, I keep on getting the following error message, and I am scratching my head now pretty hard. Any suggestions? res = es.search( scroll = '2m', index = "logstash-\*", body = { {…

---

## [Release of 7.1.0 elasticsearch-spark-20](https://discuss.elastic.co/t/release-of-7-1-0-elasticsearch-spark-20/181523)

<div class="topic-metadata">

**Author:** [@yogiraj99](https://discuss.elastic.co/u/yogiraj99)\
**Replies:** 1\
**Last updated:** [May 20, 2019, 4:45pm UTC](https://discuss.elastic.co/t/release-of-7-1-0-elasticsearch-spark-20/181523 "2019-05-20T16:45:00Z")

</div>

Hi Team, When do you plan to release the elasticsearch-spark-20\_2.11 7.1.0 version. We are looking for a fix on #1276.

---

## [Single-value metrics aggregations](https://discuss.elastic.co/t/single-value-metrics-aggregations/181638)

<div class="topic-metadata">

**Author:** [@cecoke](https://discuss.elastic.co/u/cecoke)\
**Replies:** 3\
**Last updated:** [May 20, 2019, 4:30pm UTC](https://discuss.elastic.co/t/single-value-metrics-aggregations/181638 "2019-05-20T16:30:03Z")

</div>

Hi Elastic, I want to learn how Elasticsearch does the simplest single-value metrics aggregation (count, sum, avg, max, min) on large data. Does each shard aggregate first and the final node aggregates the shard-level a…

---

## [Remove duplicate results in output of search](https://discuss.elastic.co/t/remove-duplicate-results-in-output-of-search/181691)

<div class="topic-metadata">

**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\
**Replies:** 4\
**Last updated:** [May 20, 2019, 3:58pm UTC](https://discuss.elastic.co/t/remove-duplicate-results-in-output-of-search/181691 "2019-05-20T15:58:23Z")

</div>

Hello, attached a picture of my current output search quarry. I am trying to search through all my logs and grab all the src\_ips from my Nginx server. They are located in a field called src\_ip. I am able to get just…

---

## [How to Index multiple fields receiving an Array](https://discuss.elastic.co/t/how-to-index-multiple-fields-receiving-an-array/181866)

<div class="topic-metadata">

**Author:** [@matheusribeirogarcia](https://discuss.elastic.co/u/matheusribeirogarcia)\
**Replies:** 0\
**Last updated:** [May 20, 2019, 3:47pm UTC](https://discuss.elastic.co/t/how-to-index-multiple-fields-receiving-an-array/181866 "2019-05-20T15:47:27Z")

</div>

I've tried to index it like this: body: { name: form.value.name, title: form.value.title, description: form.value.description, published: new Date().toLocaleString(), …

---

## [The speed for Query "Time-Based-Index" and without "Time-Based" （Ordinary）index](https://discuss.elastic.co/t/the-speed-for-query-time-based-index-and-without-time-based-ordinary-index/181780)

<div class="topic-metadata">

**Author:** [@ennian001](https://discuss.elastic.co/u/ennian001)\
**Replies:** 3\
**Last updated:** [May 20, 2019, 3:42pm UTC](https://discuss.elastic.co/t/the-speed-for-query-time-based-index-and-without-time-based-ordinary-index/181780 "2019-05-20T15:42:55Z")

</div>

Query for "Time-Based-index" and without "Time-Based" index. My "Time-Based-INdex" Rules Like this "test-index-2019.05.20",but it contains so many days,and the Time-Based-index by days , if i get query for the followin…

---

## [Painless Script on Top Hit of Average Aggregation](https://discuss.elastic.co/t/painless-script-on-top-hit-of-average-aggregation/181849)

<div class="topic-metadata">

**Author:** [@6tUBp3gwd9Zp](https://discuss.elastic.co/u/6tUBp3gwd9Zp)\
**Replies:** 1\
**Last updated:** [May 20, 2019, 2:59pm UTC](https://discuss.elastic.co/t/painless-script-on-top-hit-of-average-aggregation/181849 "2019-05-20T14:59:11Z")

</div>

I want to do some scripting on a top hit average aggregation. (I think the images are pretty much self-explanatory. Script is just an example). But when I do so I get an "Internal Server Error". What am I doing wrong? …

---

## [Flash to disk](https://discuss.elastic.co/t/flash-to-disk/181332)

<div class="topic-metadata">

**Author:** [@roiwexler](https://discuss.elastic.co/u/roiwexler)\
**Replies:** 4\
**Last updated:** [May 20, 2019, 2:07pm UTC](https://discuss.elastic.co/t/flash-to-disk/181332 "2019-05-20T14:07:55Z")

</div>

Hi, at ES documentations is says - By default, Elasticsearch uses heuristics in order to automatically trigger flushes as required. does anyone knows when ES triggers flush to disk and if there is a way to configure it…

---

## [How to sort with "indices\_boost"?](https://discuss.elastic.co/t/how-to-sort-with-indices-boost/181838)

<div class="topic-metadata">

**Author:** [@surkis](https://discuss.elastic.co/u/surkis)\
**Replies:** 0\
**Last updated:** [May 20, 2019, 1:48pm UTC](https://discuss.elastic.co/t/how-to-sort-with-indices-boost/181838 "2019-05-20T13:48:18Z")

</div>

In the query for the two indexes, I use "indices\_boost" with the corresponding coefficients. I need to additionally sort by a specific field, so that the results from one index are sent first, and then from another

---

## [Error while sniffing](https://discuss.elastic.co/t/error-while-sniffing/180978)

<div class="topic-metadata">

**Author:** [@avinash\_07](https://discuss.elastic.co/u/avinash_07)\
**Replies:** 2\
**Last updated:** [May 20, 2019, 1:50pm UTC](https://discuss.elastic.co/t/error-while-sniffing/180978 "2019-05-20T13:50:21Z")

</div>

Getting the following error when I am trying to use sniff. Can someone help me fix it? Elasticsearch version - 6.1.2 Client - Java high level rest client \[nt\_sniffer\[T#1\]\] org.elasticsearch.client.sniff.Sniffer : erro…

---

## [Elasticsearch leaking Memory beyond Max Heap Memory](https://discuss.elastic.co/t/elasticsearch-leaking-memory-beyond-max-heap-memory/181829)

<div class="topic-metadata">

**Author:** [@amitmjadav](https://discuss.elastic.co/u/amitmjadav)\
**Replies:** 2\
**Last updated:** [May 20, 2019, 1:45pm UTC](https://discuss.elastic.co/t/elasticsearch-leaking-memory-beyond-max-heap-memory/181829 "2019-05-20T13:45:09Z")

</div>

Hi, I am facing issue of elasticsearch leaking memory beyond what is heap memory given... for e.g I have server with 32GB memory and heap memory given is 20GB. But after some time It goes beyong 20GB and server reaches …

---

## [Plugin installtion error](https://discuss.elastic.co/t/plugin-installtion-error/181822)

<div class="topic-metadata">

**Author:** [@adeppa](https://discuss.elastic.co/u/adeppa)\
**Replies:** 0\
**Last updated:** [May 20, 2019, 1:16pm UTC](https://discuss.elastic.co/t/plugin-installtion-error/181822 "2019-05-20T13:16:24Z")

</div>

I build the deb packge from source using the gradle assemble and try to install plugin using the " sudo /usr/share/elasticsearch/bin/elasticsearch-plugin install analysis-icu" but getting error "ERROR: attempted to ins…

---

## [Watcher Compare 2 fields from the same index](https://discuss.elastic.co/t/watcher-compare-2-fields-from-the-same-index/179797)

<div class="topic-metadata">

**Author:** [@gurpal](https://discuss.elastic.co/u/gurpal)\
**Replies:** 2\
**Last updated:** [May 20, 2019, 12:55pm UTC](https://discuss.elastic.co/t/watcher-compare-2-fields-from-the-same-index/179797 "2019-05-20T12:55:09Z")

</div>

Hello, I am trying to create a simple watcher that compares 2 fields in the same index every 5 minutes. My index contains the following fields "Temperature" : "22.6", "Temp Hi" : "30.1", "Temp Lo" : "25.5", "@tim…

---

## [Getting wrong search result](https://discuss.elastic.co/t/getting-wrong-search-result/181804)

<div class="topic-metadata">

**Author:** [@mandar.raj](https://discuss.elastic.co/u/mandar.raj)\
**Replies:** 1\
**Last updated:** [May 20, 2019, 11:50am UTC](https://discuss.elastic.co/t/getting-wrong-search-result/181804 "2019-05-20T11:50:57Z")

</div>

When i search lastName:A ward, it results like zz, T\*\*\*\*\*\*\*\*\*\*\*\*Y could you please help me in this

---

## [Reindexing with new field mapping still keeps bytes field as string](https://discuss.elastic.co/t/reindexing-with-new-field-mapping-still-keeps-bytes-field-as-string/180837)

<div class="topic-metadata">

**Author:** [@Gerard](https://discuss.elastic.co/u/Gerard)\
**Replies:** 1\
**Last updated:** [May 20, 2019, 11:42am UTC](https://discuss.elastic.co/t/reindexing-with-new-field-mapping-still-keeps-bytes-field-as-string/180837 "2019-05-20T11:42:16Z")

</div>

Hi all, I’m trying to have some json fields typed/mapped as integer, but they keep ending up in Elastic as text fields. My setup: Apache \> logfile.json \> filebeat \> … Other side -\> logstash \> Elastic (6.7) \> Kibana My…

---

## [All my indexes "read\_only\_allow\_delete" were set to true](https://discuss.elastic.co/t/all-my-indexes-read-only-allow-delete-were-set-to-true/181788)

<div class="topic-metadata">

**Author:** [@i333](https://discuss.elastic.co/u/i333)\
**Replies:** 1\
**Last updated:** [May 20, 2019, 10:51am UTC](https://discuss.elastic.co/t/all-my-indexes-read-only-allow-delete-were-set-to-true/181788 "2019-05-20T10:51:21Z")

</div>

My system almost ran out of disk space so elasticsearch put itself into that offline mode or whatever it is. But when I cleared up the disk space and restarted elasticsearch, it started fine but I found that all my index…

---

## [Unable to connect remotely to elastic search 6.3.2](https://discuss.elastic.co/t/unable-to-connect-remotely-to-elastic-search-6-3-2/181795)

<div class="topic-metadata">

**Author:** [@Mahadevappa\_M\_Utagi](https://discuss.elastic.co/u/Mahadevappa_M_Utagi)\
**Replies:** 0\
**Last updated:** [May 20, 2019, 10:49am UTC](https://discuss.elastic.co/t/unable-to-connect-remotely-to-elastic-search-6-3-2/181795 "2019-05-20T10:49:03Z")

</div>

I am trying to ingest data into remote elastic search 6.3.2 with index \[es\_historic\_dev\] like es.net.proxy.http.host - https://xyz.com es.net.proxy.http.port - 443 (port for https endpoint) I am facing below issue: E…

---

## [setTrackTotalHits (Java transport client) default in docs is wrong](https://discuss.elastic.co/t/settracktotalhits-java-transport-client-default-in-docs-is-wrong/180800)

<div class="topic-metadata">

**Author:** [@e-orz](https://discuss.elastic.co/u/e-orz)\
**Replies:** 4\
**Last updated:** [May 20, 2019, 10:46am UTC](https://discuss.elastic.co/t/settracktotalhits-java-transport-client-default-in-docs-is-wrong/180800 "2019-05-20T10:46:09Z")

</div>

Hi, according to the docs: "Indicates if the total hit count for the query should be tracked. Defaults to true". When I use client.prepareSearch(...) and don't set setTrackTotalHits I still get the result with "gte" t…

---

## [Multiplle index](https://discuss.elastic.co/t/multiplle-index/181068)

<div class="topic-metadata">

**Author:** [@elk3](https://discuss.elastic.co/u/elk3)\
**Replies:** 1\
**Last updated:** [May 20, 2019, 10:13am UTC](https://discuss.elastic.co/t/multiplle-index/181068 "2019-05-20T10:13:11Z")

</div>

My requirement is i am having index twitter i need two table in index like twitts,user it is possible PUT twitters { "mappings": { "user": { "properties": { "name": { "type": "text" }, "user\_…

---

## [Curl: (7) Failed to connect to localhost port 9200: Connection refused - Docker](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-localhost-port-9200-connection-refused-docker/180754)

<div class="topic-metadata">

**Author:** [@senthilgsk](https://discuss.elastic.co/u/senthilgsk)\
**Replies:** 3\
**Last updated:** [May 20, 2019, 10:01am UTC](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-localhost-port-9200-connection-refused-docker/180754 "2019-05-20T10:01:10Z")

</div>

I am using Docker. The elasticsearch and kibana containers are running. When I tried curl http://192.168.99.100, I am getting error curl: (7) Failed to connect to localhost port 9200: Connection refused I tried browsi…

---

## [503 Elastic APM Server Response](https://discuss.elastic.co/t/503-elastic-apm-server-response/181774)

<div class="topic-metadata">

**Author:** [@anushshukla](https://discuss.elastic.co/u/anushshukla)\
**Replies:** 0\
**Last updated:** [May 20, 2019, 9:27am UTC](https://discuss.elastic.co/t/503-elastic-apm-server-response/181774 "2019-05-20T09:27:36Z")

</div>

Please refer the below screenshot for the exact error response we got during the custom transaction API RUM event to APM server on page load. Please help us in resolving this issue.

---

## [What causes high node Heap Memory more than 75%?](https://discuss.elastic.co/t/what-causes-high-node-heap-memory-more-than-75/179741)

<div class="topic-metadata">

**Author:** [@Hitesh\_Baldaniya1](https://discuss.elastic.co/u/Hitesh_Baldaniya1)\
**Replies:** 8\
**Last updated:** [May 20, 2019, 9:26am UTC](https://discuss.elastic.co/t/what-causes-high-node-heap-memory-more-than-75/179741 "2019-05-20T09:26:57Z")

</div>

Hi Team, I am receiving high memory alerts on our cluster, we are hosted on "cloud.elastic.co". 3 Nodes - 2 (data/master eligible node) + 1 tie breaker node. Total 28 GB of data on a single index which has 5 shards an…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1293)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1295)
