# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1301

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1302

---

## [Java API - how to get the Cluster Settings on ES 6.0](https://discuss.elastic.co/t/java-api-how-to-get-the-cluster-settings-on-es-6-0/180877)

<div class="topic-metadata">

**Author:** [@Thales\_Valias](https://discuss.elastic.co/u/Thales_Valias)\
**Replies:** 0\
**Last updated:** [May 13, 2019, 8:15pm UTC](https://discuss.elastic.co/t/java-api-how-to-get-the-cluster-settings-on-es-6-0/180877 "2019-05-13T20:15:54Z")

</div>

Hi there. I'm implementing on my Java application a feature where it will be possible the admin to check and update cluster settings like cluster.routing.allocation.disk.watermark.flood\_stage dynamically. The Update pa…

---

## [Dot prefix in index name gives me an error (?)](https://discuss.elastic.co/t/dot-prefix-in-index-name-gives-me-an-error/180675)

<div class="topic-metadata">

**Author:** [@David\_Martins](https://discuss.elastic.co/u/David_Martins)\
**Replies:** 3\
**Last updated:** [May 13, 2019, 8:37pm UTC](https://discuss.elastic.co/t/dot-prefix-in-index-name-gives-me-an-error/180675 "2019-05-13T20:37:51Z")

</div>

Hey guys, I've a quick question about a behavior of elasticsearch indexes. So, I use logstash to import data into my AWS elasticsearch cluster. When I create a normal index and insert, lets say, 10 rows, everything wo…

---

## [The Debian/Ubuntu PPA is returning a 404](https://discuss.elastic.co/t/the-debian-ubuntu-ppa-is-returning-a-404/180868)

<div class="topic-metadata">

**Author:** [@linuxdynasty](https://discuss.elastic.co/u/linuxdynasty)\
**Replies:** 2\
**Last updated:** [May 13, 2019, 8:21pm UTC](https://discuss.elastic.co/t/the-debian-ubuntu-ppa-is-returning-a-404/180868 "2019-05-13T20:21:53Z")

</div>

The Debian installation instructions is failing at the ppa step based on this link https://www.elastic.co/guide/en/elasticsearch/reference/current/deb.html https://artifacts.elastic.co/packages/6.x/apt https://artifact…

---

## [More like this querying](https://discuss.elastic.co/t/more-like-this-querying/180721)

<div class="topic-metadata">

**Author:** [@Ozymandy](https://discuss.elastic.co/u/Ozymandy)\
**Replies:** 1\
**Last updated:** [May 13, 2019, 7:44pm UTC](https://discuss.elastic.co/t/more-like-this-querying/180721 "2019-05-13T19:44:26Z")

</div>

I am trying to use more like this query for finding similar documents and faced with two issues I set min\_should\_match to 70% and got results like matched documents only by one word. And strange thing that these words …

---

## [Different locations for one IP address 89.248.171.144](https://discuss.elastic.co/t/different-locations-for-one-ip-address-89-248-171-144/180870)

<div class="topic-metadata">

**Author:** [@mayer](https://discuss.elastic.co/u/mayer)\
**Replies:** 0\
**Last updated:** [May 13, 2019, 7:34pm UTC](https://discuss.elastic.co/t/different-locations-for-one-ip-address-89-248-171-144/180870 "2019-05-13T19:34:02Z")

</div>

Dear All, my environment ELK 6.6.1 there I run two different applications on the same ELK stack. These are elastiflow 3.4.1 which receives the flows from a Cisco boarder gw router. And there is a filebeat which receive…

---

## [Elasticsearch won’t start after mounting new hard drive](https://discuss.elastic.co/t/elasticsearch-won-t-start-after-mounting-new-hard-drive/180867)

<div class="topic-metadata">

**Author:** [@Alec\_Carpenter](https://discuss.elastic.co/u/Alec_Carpenter)\
**Replies:** 0\
**Last updated:** [May 13, 2019, 7:11pm UTC](https://discuss.elastic.co/t/elasticsearch-won-t-start-after-mounting-new-hard-drive/180867 "2019-05-13T19:11:45Z")

</div>

When creating dashboards and visualizations I recurved a forbidden error. I then found out that I ran out of space in /var/log. I proceeded to logically mount a 100GB hard disk to /var/log. I restarted the box and elasti…

---

## [Sort string with NEST](https://discuss.elastic.co/t/sort-string-with-nest/180370)

<div class="topic-metadata">

**Author:** [@Ruben\_Baeza\_Colin](https://discuss.elastic.co/u/Ruben_Baeza_Colin)\
**Replies:** 2\
**Last updated:** [May 13, 2019, 6:58pm UTC](https://discuss.elastic.co/t/sort-string-with-nest/180370 "2019-05-13T18:58:37Z")

</div>

I have a problem when use "sort" with a string field this is my code var sortClauses = new List\<ISort\>(); sortClauses.Add(new SortField { Field = "aBC", Order = SortOrder.Ascending }); but when I use decimal field I …

---

## [Rollover API for Transport Client](https://discuss.elastic.co/t/rollover-api-for-transport-client/180863)

<div class="topic-metadata">

**Author:** [@Chris\_Stack\_BB](https://discuss.elastic.co/u/Chris_Stack_BB)\
**Replies:** 0\
**Last updated:** [May 13, 2019, 6:38pm UTC](https://discuss.elastic.co/t/rollover-api-for-transport-client/180863 "2019-05-13T18:38:41Z")

</div>

I'm working on upgrading to version 7, but due to time constraints am limited to continued use of the Transport Client. I did not see it announced as a breaking change, but the method I was using for conducting a rollove…

---

## [Painless scripted value versus field cardinality discrepancy \[ES 7.0\]](https://discuss.elastic.co/t/painless-scripted-value-versus-field-cardinality-discrepancy-es-7-0/180855)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 0\
**Last updated:** [May 13, 2019, 5:43pm UTC](https://discuss.elastic.co/t/painless-scripted-value-versus-field-cardinality-discrepancy-es-7-0/180855 "2019-05-13T17:43:14Z")

</div>

Hi! I have IP addresses mapped as IP and I stumbled upon a weird issue (or I'm missing sth). If I request an aggregation where I use a painless script, I get more unique values than the "simple" field cardinality. I du…

---

## [Locking the Memory](https://discuss.elastic.co/t/locking-the-memory/180852)

<div class="topic-metadata">

**Author:** [@snorris](https://discuss.elastic.co/u/snorris)\
**Replies:** 0\
**Last updated:** [May 13, 2019, 5:16pm UTC](https://discuss.elastic.co/t/locking-the-memory/180852 "2019-05-13T17:16:09Z")

</div>

Need help locking the memory. I followed the instructions provided by Elasticsearch for my version to a “T,” however I on Linux nodes I get the dreaded “memory locking requested but memory not locked.” I have had to reve…

---

## [EFK. Fluentd with GROK plugin. Field type change from string to any other doesn't work](https://discuss.elastic.co/t/efk-fluentd-with-grok-plugin-field-type-change-from-string-to-any-other-doesnt-work/180848)

<div class="topic-metadata">

**Author:** [@Taras\_Fog](https://discuss.elastic.co/u/Taras_Fog)\
**Replies:** 0\
**Last updated:** [May 13, 2019, 4:28pm UTC](https://discuss.elastic.co/t/efk-fluentd-with-grok-plugin-field-type-change-from-string-to-any-other-doesnt-work/180848 "2019-05-13T16:28:09Z")

</div>

Hi guys, Please assist if you have a spare minute or two. The logging stack is as follow: ES v.6.3.1 as a service on AWS. Fluentd version is 1.3.3 Grok plugin as described here: https://github.com/fluent/fluent-plug…

---

## [Client did not trust this server's certificate for the Cluster](https://discuss.elastic.co/t/client-did-not-trust-this-servers-certificate-for-the-cluster/178987)

<div class="topic-metadata">

**Author:** [@kharvey](https://discuss.elastic.co/u/kharvey)\
**Replies:** 15\
**Last updated:** [May 13, 2019, 4:19pm UTC](https://discuss.elastic.co/t/client-did-not-trust-this-servers-certificate-for-the-cluster/178987 "2019-05-13T16:19:59Z")

</div>

I have been working on this for a while now and I still havn't been able to figure it out. I have SSL working from Logstash to ElasticSearch, and from Kibana to ElasticSearch, but those settings don't work for adding no…

---

## [Elastic Search - C# Nest Nuget package library for platform x64](https://discuss.elastic.co/t/elastic-search-c-nest-nuget-package-library-for-platform-x64/180772)

<div class="topic-metadata">

**Author:** [@HPVRNP](https://discuss.elastic.co/u/HPVRNP)\
**Replies:** 1\
**Last updated:** [May 13, 2019, 3:47pm UTC](https://discuss.elastic.co/t/elastic-search-c-nest-nuget-package-library-for-platform-x64/180772 "2019-05-13T15:47:30Z")

</div>

Hi, I downloaded ElasticSearch Nest dlls (Elasticsearch.net, AysncIO.dll) libraries . All binaries are targeted for platform x86 (Windows machine && 32 bit) Is 64 bit platform supported in ElasticSearch Nest? Could yo…

---

## [Dynamic rename a field name](https://discuss.elastic.co/t/dynamic-rename-a-field-name/180573)

<div class="topic-metadata">

**Author:** [@ylin](https://discuss.elastic.co/u/ylin)\
**Replies:** 2\
**Last updated:** [May 13, 2019, 3:44pm UTC](https://discuss.elastic.co/t/dynamic-rename-a-field-name/180573 "2019-05-13T15:44:43Z")

</div>

We want to index lab results in Elasticsearch. Because result readouts can be numeric, string or date. And the readouts of different lab results can be dynamic. So in logstash, we prefix the readouts with either 'numberi…

---

## [Error writing array of objects?](https://discuss.elastic.co/t/error-writing-array-of-objects/180842)

<div class="topic-metadata">

**Author:** [@lvic](https://discuss.elastic.co/u/lvic)\
**Replies:** 0\
**Last updated:** [May 13, 2019, 3:39pm UTC](https://discuss.elastic.co/t/error-writing-array-of-objects/180842 "2019-05-13T15:39:01Z")

</div>

Hello, I am trying to create mapping for the array of objects: "my\_vector" : \[ { "my\_id": "2c5f056d-4ab9-4aff-85b6-be16a6d26fb2", "my\_name": "test1", "my\_value": \[ { "name": "state", "value": 0, "cc\_value": 0.81 …

---

## [Query a nested object](https://discuss.elastic.co/t/query-a-nested-object/180830)

<div class="topic-metadata">

**Author:** [@Theodoros\_Moschos](https://discuss.elastic.co/u/Theodoros_Moschos)\
**Replies:** 0\
**Last updated:** [May 13, 2019, 2:28pm UTC](https://discuss.elastic.co/t/query-a-nested-object/180830 "2019-05-13T14:28:31Z")

</div>

Hello all, I have got the following document and am trying to query its ids.ema\_id value : { "took": 5, "timed\_out": false, "\_shards": { "total": 5, "successful": 5, "skipped": 0, "failed": 0 }, "hits": { "total":…

---

## [Differences between keyword and icu\_collation\_keyword](https://discuss.elastic.co/t/differences-between-keyword-and-icu-collation-keyword/180828)

<div class="topic-metadata">

**Author:** [@\_dan](https://discuss.elastic.co/u/_dan)\
**Replies:** 0\
**Last updated:** [May 13, 2019, 2:19pm UTC](https://discuss.elastic.co/t/differences-between-keyword-and-icu-collation-keyword/180828 "2019-05-13T14:19:47Z")

</div>

Hi, our mappings contain keyword field (type is keyword) for all properties which have type "text". This keyword is then used for term queries, sorting, aggregations, ... But sorting doesn't work well for some languages.…

---

## [ES Python API behaves strangely when used for search right after ingestion](https://discuss.elastic.co/t/es-python-api-behaves-strangely-when-used-for-search-right-after-ingestion/180586)

<div class="topic-metadata">

**Author:** [@mehdi-gital](https://discuss.elastic.co/u/mehdi-gital)\
**Replies:** 2\
**Last updated:** [May 13, 2019, 2:18pm UTC](https://discuss.elastic.co/t/es-python-api-behaves-strangely-when-used-for-search-right-after-ingestion/180586 "2019-05-13T14:18:23Z")

</div>

I run a search right after ingesting documents through my Python client and get an empty response even though in Kibana I can see that everything is ingested correctly. Here's a simple demo code: from elasticsearch impo…

---

## [Start Elasticsearch with root user](https://discuss.elastic.co/t/start-elasticsearch-with-root-user/180816)

<div class="topic-metadata">

**Author:** [@shah.ravi52](https://discuss.elastic.co/u/shah.ravi52)\
**Replies:** 2\
**Last updated:** [May 13, 2019, 2:00pm UTC](https://discuss.elastic.co/t/start-elasticsearch-with-root-user/180816 "2019-05-13T14:00:41Z")

</div>

Hi, I have installed elasticsearch 6.5.4 and I am just trying to start elasticsearch with root user. Unfortunately, It is not getting started. I went through a few of the questions posted in forums, It says that it can…

---

## [Deprecation warnings on system indices](https://discuss.elastic.co/t/deprecation-warnings-on-system-indices/180827)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 0\
**Last updated:** [May 13, 2019, 2:09pm UTC](https://discuss.elastic.co/t/deprecation-warnings-on-system-indices/180827 "2019-05-13T14:09:37Z")

</div>

Hello, I'm trying to repare our clusters for migration to 7. So I started going through the deprecation logs and was able to clean out most of them. What is left now seems to be mostly related to the system indices .wat…

---

## [Default field\_value\_factor query construction](https://discuss.elastic.co/t/default-field-value-factor-query-construction/180820)

<div class="topic-metadata">

**Author:** [@roelg](https://discuss.elastic.co/u/roelg)\
**Replies:** 0\
**Last updated:** [May 13, 2019, 1:15pm UTC](https://discuss.elastic.co/t/default-field-value-factor-query-construction/180820 "2019-05-13T13:15:51Z")

</div>

I have constructed a pretty default field\_value\_factor function\_score query in the java api (6.5): return new FunctionScoreQueryBuilder.FilterFunctionBuilder( fieldValueFactorFunction("fieldname") …

---

## [Best practices documents with large field count with an eye to performance](https://discuss.elastic.co/t/best-practices-documents-with-large-field-count-with-an-eye-to-performance/180817)

<div class="topic-metadata">

**Author:** [@Niels\_van\_Rijn](https://discuss.elastic.co/u/Niels_van_Rijn)\
**Replies:** 0\
**Last updated:** [May 13, 2019, 1:00pm UTC](https://discuss.elastic.co/t/best-practices-documents-with-large-field-count-with-an-eye-to-performance/180817 "2019-05-13T13:00:53Z")

</div>

Hi! Im pretty new to the whole ELK stack. My data consists of around 10.600 json documents, each document having between 1000 - 50.000 properties/fields(here is an example of a small document). A large amount of the fi…

---

## [Index size suggestions](https://discuss.elastic.co/t/index-size-suggestions/180692)

<div class="topic-metadata">

**Author:** [@klaus82](https://discuss.elastic.co/u/klaus82)\
**Replies:** 5\
**Last updated:** [May 13, 2019, 12:56pm UTC](https://discuss.elastic.co/t/index-size-suggestions/180692 "2019-05-13T12:56:17Z")

</div>

Hi all, actually, my cluster is composed by two nodes, and my index setting is 1 primary and 1 replica. The size for my indexes is about 1 - 1.3 Gb each index. Could be better to reindex these indexes in 2 primary and …

---

## [Using Watcher in basic version of the license](https://discuss.elastic.co/t/using-watcher-in-basic-version-of-the-license/180778)

<div class="topic-metadata">

**Author:** [@deshpasheeto192](https://discuss.elastic.co/u/deshpasheeto192)\
**Replies:** 1\
**Last updated:** [May 13, 2019, 12:28pm UTC](https://discuss.elastic.co/t/using-watcher-in-basic-version-of-the-license/180778 "2019-05-13T12:28:45Z")

</div>

Hi there I'm very new to the elastic stack and at present, I am on the basic license and I want to use the watcher. After going through the documents it looks like I cannot use the watcher in basic license version. If …

---

## [Raise HTTP\_EXCEPTIONS.get(status\_code, TransportError)(status\_code, error\_message, additional\_info) elasticsearch.exceptions.TransportError: TransportError(406, 'Content-Type header \[\] is not supported')](https://discuss.elastic.co/t/raise-http-exceptions-get-status-code-transporterror-status-code-error-message-additional-info-elasticsearch-exceptions-transporterror-transporterror-406-content-type-header-is-not-supported/180379)

<div class="topic-metadata">

**Author:** [@idris](https://discuss.elastic.co/u/idris)\
**Replies:** 8\
**Last updated:** [May 13, 2019, 11:59am UTC](https://discuss.elastic.co/t/raise-http-exceptions-get-status-code-transporterror-status-code-error-message-additional-info-elasticsearch-exceptions-transporterror-transporterror-406-content-type-header-is-not-supported/180379 "2019-05-13T11:59:20Z")

</div>

GET /newsout/\_search?size=10000 \[status:406 request:0.004s\] Traceback (most recent call last): File "run.py", line 2, in from webapp import app File "/home/default/idr/portal/webapp/init.py", line 5, in import web…

---

## [The best platform in base to disk](https://discuss.elastic.co/t/the-best-platform-in-base-to-disk/180676)

<div class="topic-metadata">

**Author:** [@Santi\_Santi](https://discuss.elastic.co/u/Santi_Santi)\
**Replies:** 2\
**Last updated:** [May 13, 2019, 11:41am UTC](https://discuss.elastic.co/t/the-best-platform-in-base-to-disk/180676 "2019-05-13T11:41:22Z")

</div>

Hi community, I got a disk of 1TB, could you help me a create the BEST cluster? For example : 3 master (250GB per Server) and 1 node with 250 GB...or allinone without cluster....any idea? Could you help me about RAM si…

---

## [How many Elasticsearch instances I should have in a node](https://discuss.elastic.co/t/how-many-elasticsearch-instances-i-should-have-in-a-node/180599)

<div class="topic-metadata">

**Author:** [@worapojc](https://discuss.elastic.co/u/worapojc)\
**Replies:** 2\
**Last updated:** [May 13, 2019, 10:04am UTC](https://discuss.elastic.co/t/how-many-elasticsearch-instances-i-should-have-in-a-node/180599 "2019-05-13T10:04:16Z")

</div>

Hi Elasticsearch Team, I'm using EC2 instance (i3.4xlarge) for hot-data node. Memory 122Gb Disk 2 x 1.9 NVMe SSD There are 2 ES instances on this node. I assign the 2 disks for both instances. I configure -Xmx31g -X…

---

## [Elasticsearch showing 89 % memory use and VIRT, RES in red with HTOP](https://discuss.elastic.co/t/elasticsearch-showing-89-memory-use-and-virt-res-in-red-with-htop/180765)

<div class="topic-metadata">

**Author:** [@Dilip\_Kumar](https://discuss.elastic.co/u/Dilip_Kumar)\
**Replies:** 0\
**Last updated:** [May 13, 2019, 9:09am UTC](https://discuss.elastic.co/t/elasticsearch-showing-89-memory-use-and-virt-res-in-red-with-htop/180765 "2019-05-13T09:09:13Z")

</div>

Hi I am suing es 5.6 and java 1.8 when using htop command on server getting 89- to 91 % memory used and VIRT , RES in red color, what action i should take and what is meaning? please help. Please see in attached image…

---

## [Elasticsearch 6.x: How to tune translog retention for small indices?](https://discuss.elastic.co/t/elasticsearch-6-x-how-to-tune-translog-retention-for-small-indices/180762)

<div class="topic-metadata">

**Author:** [@Thollon\_Arthur](https://discuss.elastic.co/u/Thollon_Arthur)\
**Replies:** 0\
**Last updated:** [May 13, 2019, 9:02am UTC](https://discuss.elastic.co/t/elasticsearch-6-x-how-to-tune-translog-retention-for-small-indices/180762 "2019-05-13T09:02:10Z")

</div>

Hi, Currently working on an e-commerce solution, we are using Elasticsearch 6.x to enable full-text search on products. We have 88 indices, each one having a primary and a replica. For each index, primary.store.size is…

---

## [Rollover snapshot - Creation error](https://discuss.elastic.co/t/rollover-snapshot-creation-error/180738)

<div class="topic-metadata">

**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\
**Replies:** 2\
**Last updated:** [May 13, 2019, 7:34am UTC](https://discuss.elastic.co/t/rollover-snapshot-creation-error/180738 "2019-05-13T07:34:15Z")

</div>

As per the documentation here We should be able to have a rollover date-math name for the snapshot (eg. snapshot-2019.05.13). However on executing the below via kibana, I run into the following error. How do I rectify th…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1300)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1302)
