# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1321

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1322

---

## [Java Client Create](https://discuss.elastic.co/t/java-client-create/178338)

<div class="topic-metadata">

**Author:** [@hyhong](https://discuss.elastic.co/u/hyhong)\
**Replies:** 4\
**Last updated:** [April 25, 2019, 5:35am UTC](https://discuss.elastic.co/t/java-client-create/178338 "2019-04-25T05:35:44Z")

</div>

When create Java High Level REST Client and concurrent is much.Is need create a client pool like jdbc pool or only a Singleton？

---

## [IDF calculation in Elasticsearch 7.0](https://discuss.elastic.co/t/idf-calculation-in-elasticsearch-7-0/178362)

<div class="topic-metadata">

**Author:** [@Harsha\_Yerasi](https://discuss.elastic.co/u/Harsha_Yerasi)\
**Replies:** 0\
**Last updated:** [April 25, 2019, 5:15am UTC](https://discuss.elastic.co/t/idf-calculation-in-elasticsearch-7-0/178362 "2019-04-25T05:15:47Z")

</div>

Hi, I am unable to understand n and N that are being used to calculate IDF. { "value" : 1.1631508, "description" : "idf, computed as log(1 + (N - n + 0.5) / (n + 0.5)…

---

## [How can we use ELK for proactive decision making in an IT operation](https://discuss.elastic.co/t/how-can-we-use-elk-for-proactive-decision-making-in-an-it-operation/175317)

<div class="topic-metadata">

**Author:** [@malindu](https://discuss.elastic.co/u/malindu)\
**Replies:** 6\
**Last updated:** [April 25, 2019, 5:12am UTC](https://discuss.elastic.co/t/how-can-we-use-elk-for-proactive-decision-making-in-an-it-operation/175317 "2019-04-25T05:12:22Z")

</div>

Hi, I am looking for evaluating ELK to use it for proactive decision making while reducing interruptions due to incidents. I've installed the ELK and started forwarding logs of selected test servers. when it comes to K…

---

## [Aggregations involving parent-child are too slow in ES 6.7](https://discuss.elastic.co/t/aggregations-involving-parent-child-are-too-slow-in-es-6-7/177610)

<div class="topic-metadata">

**Author:** [@Shankar\_Daruga](https://discuss.elastic.co/u/Shankar_Daruga)\
**Replies:** 1\
**Last updated:** [April 25, 2019, 4:14am UTC](https://discuss.elastic.co/t/aggregations-involving-parent-child-are-too-slow-in-es-6-7/177610 "2019-04-25T04:14:46Z")

</div>

Hi, We've recently migrated from ES 5.2.1 to ES 6.7.0. However, after migration, we've observed that aggregations involving parent-child relationships are too slow (almost 10 times slower) when compared to our earlier '…

---

## [Query multi index or relations index](https://discuss.elastic.co/t/query-multi-index-or-relations-index/178337)

<div class="topic-metadata">

**Author:** [@Katherinne\_Quintero](https://discuss.elastic.co/u/Katherinne_Quintero)\
**Replies:** 2\
**Last updated:** [April 25, 2019, 3:34am UTC](https://discuss.elastic.co/t/query-multi-index-or-relations-index/178337 "2019-04-25T03:34:00Z")

</div>

Hello, I have two indexes, for example, one with company data, which have the fields company\_id, sector, number of entrepreneurs, among others, and another index with employee data that has the data of company\_id, id\_em…

---

## [Failed to start elasticsearch 7.0 from service](https://discuss.elastic.co/t/failed-to-start-elasticsearch-7-0-from-service/177798)

<div class="topic-metadata">

**Author:** [@yama2k](https://discuss.elastic.co/u/yama2k)\
**Replies:** 6\
**Last updated:** [April 25, 2019, 2:21am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-7-0-from-service/177798 "2019-04-25T02:21:45Z")

</div>

Hi all. I' m trying to start elasticsearch from service following this instruction. https://www.elastic.co/guide/en/elasticsearch/reference/7.0/starting-elasticsearch.html I cannot start elasticsearch. Cannot find jav…

---

## [Custom plugin Content Security Policy problem](https://discuss.elastic.co/t/custom-plugin-content-security-policy-problem/178047)

<div class="topic-metadata">

**Author:** [@iamazy](https://discuss.elastic.co/u/iamazy)\
**Replies:** 2\
**Last updated:** [April 25, 2019, 1:34am UTC](https://discuss.elastic.co/t/custom-plugin-content-security-policy-problem/178047 "2019-04-25T01:34:28Z")

</div>

hello i wrote a sql plugin for es7，and after installed it，query dataset by sql in kibana，i found kibana cause a Content Security Policy problem, the complete message as followed Refused to execute inline script becaus…

---

## [After upgrade to Elastic 6.7, watcher execution fails to parse ctx.trigger.triggered\_time in watcher query](https://discuss.elastic.co/t/after-upgrade-to-elastic-6-7-watcher-execution-fails-to-parse-ctx-trigger-triggered-time-in-watcher-query/178094)

<div class="topic-metadata">

**Author:** [@naziyakhan](https://discuss.elastic.co/u/naziyakhan)\
**Replies:** 4\
**Last updated:** [April 24, 2019, 8:54pm UTC](https://discuss.elastic.co/t/after-upgrade-to-elastic-6-7-watcher-execution-fails-to-parse-ctx-trigger-triggered-time-in-watcher-query/178094 "2019-04-24T20:54:30Z")

</div>

We have a bunch of Watchers where the Query includes time calculation using ctx.trigger.triggered\_time in the following manner: "filter": \[ { "range": { "@timestam…

---

## [How to fix the cluster health yellow with Elastic Search](https://discuss.elastic.co/t/how-to-fix-the-cluster-health-yellow-with-elastic-search/178320)

<div class="topic-metadata">

**Author:** [@Tanseer](https://discuss.elastic.co/u/Tanseer)\
**Replies:** 1\
**Last updated:** [April 24, 2019, 7:57pm UTC](https://discuss.elastic.co/t/how-to-fix-the-cluster-health-yellow-with-elastic-search/178320 "2019-04-24T19:57:56Z")

</div>

I have created a ES instance on aws server. and it's working fine from last 1 Months, today i found that suddenly it's health status goes from green to yellow. and it is also increase the response time. While another in…

---

## [Almost 4 hour delay in documents being received and showing up in Kibana Discover](https://discuss.elastic.co/t/almost-4-hour-delay-in-documents-being-received-and-showing-up-in-kibana-discover/175067)

<div class="topic-metadata">

**Author:** [@xq1xq1xq1](https://discuss.elastic.co/u/xq1xq1xq1)\
**Replies:** 16\
**Last updated:** [April 24, 2019, 7:17pm UTC](https://discuss.elastic.co/t/almost-4-hour-delay-in-documents-being-received-and-showing-up-in-kibana-discover/175067 "2019-04-24T19:17:54Z")

</div>

Kibana: Version: 5.6.13 ElasticSearch: 5.6.13 Ubuntu 18.04 CPUs: 4 Memory: 28 GB This is running inside a QEMU KVM VM and the box is not heavily taxed. I ingesting live packets into elasticsearch using tshark. W…

---

## [Elastic Cloud Kibana Index Lifecycle Policies is not working](https://discuss.elastic.co/t/elastic-cloud-kibana-index-lifecycle-policies-is-not-working/178232)

<div class="topic-metadata">

**Author:** [@Robin\_Guo](https://discuss.elastic.co/u/Robin_Guo)\
**Replies:** 11\
**Last updated:** [April 24, 2019, 5:51pm UTC](https://discuss.elastic.co/t/elastic-cloud-kibana-index-lifecycle-policies-is-not-working/178232 "2019-04-24T17:51:41Z")

</div>

Dear Elastic team members， Today I did an Index Lifecycle policies on index metricbeat-2019 on Kibana. But it's not working. Before I posted the issue here, I want to talk about a little bit of backgrounds of use case…

---

## [Linked indices shown 0 even after adding it to lifecycle](https://discuss.elastic.co/t/linked-indices-shown-0-even-after-adding-it-to-lifecycle/176706)

<div class="topic-metadata">

**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\
**Replies:** 3\
**Last updated:** [April 24, 2019, 4:36pm UTC](https://discuss.elastic.co/t/linked-indices-shown-0-even-after-adding-it-to-lifecycle/176706 "2019-04-24T16:36:40Z")

</div>

Hi I am usning Elastic search 6.7. I have created policies in the lifecycle management index and added indices to it. But the status is shown 0. Any idea how can I see what inxdex is connected to which lifecycle policy…

---

## [ILM waiting for allocation](https://discuss.elastic.co/t/ilm-waiting-for-allocation/177538)

<div class="topic-metadata">

**Author:** [@Tripodal](https://discuss.elastic.co/u/Tripodal)\
**Replies:** 4\
**Last updated:** [April 24, 2019, 4:35pm UTC](https://discuss.elastic.co/t/ilm-waiting-for-allocation/177538 "2019-04-24T16:35:22Z")

</div>

I have several days of indexes stopped at this step. However I'm unable to determine why exactly ILM won't progress. Advice on where I could look to find the mis-configuration would be appreciated. Excerpt from GET …

---

## [S3 repository exception](https://discuss.elastic.co/t/s3-repository-exception/178071)

<div class="topic-metadata">

**Author:** [@Bubunia\_Patra](https://discuss.elastic.co/u/Bubunia_Patra)\
**Replies:** 5\
**Last updated:** [April 24, 2019, 4:13pm UTC](https://discuss.elastic.co/t/s3-repository-exception/178071 "2019-04-24T16:13:14Z")

</div>

Hi all, I am trying to setup elastic search (5.6.x) using S3 compatible storage such as minio as the backend. I am following the steps mentioned at below link: I am unable to create the repository (Step-6). {"error…

---

## [How to optimize the term query?](https://discuss.elastic.co/t/how-to-optimize-the-term-query/178280)

<div class="topic-metadata">

**Author:** [@huangjs](https://discuss.elastic.co/u/huangjs)\
**Replies:** 0\
**Last updated:** [April 24, 2019, 3:01pm UTC](https://discuss.elastic.co/t/how-to-optimize-the-term-query/178280 "2019-04-24T15:01:10Z")

</div>

I used term query to search some entries and the search result contains 4714 entries, but it cost 7 min. My index setting and mapping look like: { "settings": { "number\_of\_shards": 1, "number\_of\_replicas": 0…

---

## [Document size in elastic 7.0](https://discuss.elastic.co/t/document-size-in-elastic-7-0/178239)

<div class="topic-metadata">

**Author:** [@aksadvance](https://discuss.elastic.co/u/aksadvance)\
**Replies:** 7\
**Last updated:** [April 24, 2019, 2:51pm UTC](https://discuss.elastic.co/t/document-size-in-elastic-7-0/178239 "2019-04-24T14:51:07Z")

</div>

I have done below steps but still not getting the document size in result. Installed mapper-size plugin. Enabled \_size also and its reflecting in index mapping curl -X PUT "localhost:9200//\_mapping" -H 'Content-Type: …

---

## [Please help in understanding this query?](https://discuss.elastic.co/t/please-help-in-understanding-this-query/178277)

<div class="topic-metadata">

**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\
**Replies:** 0\
**Last updated:** [April 24, 2019, 2:46pm UTC](https://discuss.elastic.co/t/please-help-in-understanding-this-query/178277 "2019-04-24T14:46:33Z")

</div>

query from kibana\_Sample\_data\_ecommerce index anyone having bit of the spare time then please help in understanding below query, i just want to see the product.price aggregated on day\_of\_week basis then why customer\_dat…

---

## [Bulk Queue Size and Thread Count](https://discuss.elastic.co/t/bulk-queue-size-and-thread-count/178274)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 1\
**Last updated:** [April 24, 2019, 2:44pm UTC](https://discuss.elastic.co/t/bulk-queue-size-and-thread-count/178274 "2019-04-24T14:44:04Z")

</div>

Hi, Is there any relationship between bulk queue size and bulk thread count? Does it increase in proportion with the number of threads? Regards, D

---

## [Custom aggregation - mean of squared values in a time bucket](https://discuss.elastic.co/t/custom-aggregation-mean-of-squared-values-in-a-time-bucket/178273)

<div class="topic-metadata">

**Author:** [@Roland\_Groza](https://discuss.elastic.co/u/Roland_Groza)\
**Replies:** 0\
**Last updated:** [April 24, 2019, 2:20pm UTC](https://discuss.elastic.co/t/custom-aggregation-mean-of-squared-values-in-a-time-bucket/178273 "2019-04-24T14:20:37Z")

</div>

Hi, I'm trying to create a custom aggregation for buckets of time (I'm also using the date histogram) on a certain field following the formula: log(mean(I.^2)/mean(I)^2) Where I is all the values in the bucket of time…

---

## [Custom term frequencies](https://discuss.elastic.co/t/custom-term-frequencies/177898)

<div class="topic-metadata">

**Author:** [@amyc](https://discuss.elastic.co/u/amyc)\
**Replies:** 1\
**Last updated:** [April 24, 2019, 1:39pm UTC](https://discuss.elastic.co/t/custom-term-frequencies/177898 "2019-04-24T13:39:28Z")

</div>

Hi; I found this new feature "custom term frequencies" in lucene 7 \[LUCENE-7854\] (also related to \[LUCENE-7866\]). I am interested in using that feature to replace payload, as my custom payload Similarity plugin stopped …

---

## [How to sort alphanumeric and numeric values in a field in elasticsearch](https://discuss.elastic.co/t/how-to-sort-alphanumeric-and-numeric-values-in-a-field-in-elasticsearch/178259)

<div class="topic-metadata">

**Author:** [@DadyByte](https://discuss.elastic.co/u/DadyByte)\
**Replies:** 0\
**Last updated:** [April 24, 2019, 1:14pm UTC](https://discuss.elastic.co/t/how-to-sort-alphanumeric-and-numeric-values-in-a-field-in-elasticsearch/178259 "2019-04-24T13:14:56Z")

</div>

---

## [Indexing Rate Graph full of gaps, not indexing?](https://discuss.elastic.co/t/indexing-rate-graph-full-of-gaps-not-indexing/176440)

<div class="topic-metadata">

**Author:** [@Iso\_Ripper](https://discuss.elastic.co/u/Iso_Ripper)\
**Replies:** 1\
**Last updated:** [April 24, 2019, 1:11pm UTC](https://discuss.elastic.co/t/indexing-rate-graph-full-of-gaps-not-indexing/176440 "2019-04-24T13:11:13Z")

</div>

Hi All, Going into the monitoring page, and checking indexing rate I noticed the graph is full of gaps Is there an issue with my ES server not logging all documents being sent?

---

## [Updating doc using update API](https://discuss.elastic.co/t/updating-doc-using-update-api/177858)

<div class="topic-metadata">

**Author:** [@gued](https://discuss.elastic.co/u/gued)\
**Replies:** 4\
**Last updated:** [April 24, 2019, 12:47pm UTC](https://discuss.elastic.co/t/updating-doc-using-update-api/177858 "2019-04-24T12:47:04Z")

</div>

Hello. I am trying to append a list inside Elasticsearch using the python API. However the data incoming is in JSON-format. My query can take a single string item such as 'Blue' or 'Gimli: Dwarf' however it throws an exc…

---

## ["action \[indices:data/write/index\]" is unauthorized for user: UserName](https://discuss.elastic.co/t/action-indices-data-write-index-is-unauthorized-for-user-username/178252)

<div class="topic-metadata">

**Author:** [@RRapariya](https://discuss.elastic.co/u/RRapariya)\
**Replies:** 0\
**Last updated:** [April 24, 2019, 12:44pm UTC](https://discuss.elastic.co/t/action-indices-data-write-index-is-unauthorized-for-user-username/178252 "2019-04-24T12:44:08Z")

</div>

Hi All, I am using below query to get a particular transaction\_id in the transaction index but getting error i.e."action \[indices:data/write/index\]" is unauthorized for user: UserName GET /transactions\_XYZ(Index name\_/…

---

## [How to coonect to elasticsearch service of aws?](https://discuss.elastic.co/t/how-to-coonect-to-elasticsearch-service-of-aws/178235)

<div class="topic-metadata">

**Author:** [@Mohammed\_khan](https://discuss.elastic.co/u/Mohammed_khan)\
**Replies:** 1\
**Last updated:** [April 24, 2019, 12:10pm UTC](https://discuss.elastic.co/t/how-to-coonect-to-elasticsearch-service-of-aws/178235 "2019-04-24T12:10:01Z")

</div>

I need to send data from my local machine to elasticsearch service on aws. Do you know, what and all to add in the configuration file of apm server along with host?

---

## [Error test elasticsearch 7.0.0](https://discuss.elastic.co/t/error-test-elasticsearch-7-0-0/178237)

<div class="topic-metadata">

**Author:** [@HelderMarques91](https://discuss.elastic.co/u/HelderMarques91)\
**Replies:** 3\
**Last updated:** [April 24, 2019, 12:01pm UTC](https://discuss.elastic.co/t/error-test-elasticsearch-7-0-0/178237 "2019-04-24T12:01:41Z")

</div>

I installed a new version of elasticsearch on my linux server and got the following result: curl -X GET "192.168.1.9:9200/" { "name" : "Test-Node", "cluster\_name" : "Test-Cluster", "cluster\_uuid" : "\_na\_", "vers…

---

## [Unable to load MSSQL C2 audit trc files](https://discuss.elastic.co/t/unable-to-load-mssql-c2-audit-trc-files/178233)

<div class="topic-metadata">

**Author:** [@mdowling](https://discuss.elastic.co/u/mdowling)\
**Replies:** 0\
**Last updated:** [April 24, 2019, 11:18am UTC](https://discuss.elastic.co/t/unable-to-load-mssql-c2-audit-trc-files/178233 "2019-04-24T11:18:50Z")

</div>

I was hoping to load MS SQL Server C2 audit trace files in elastic search. However this is not yet possible. Does anybody have a guide how to accomplish this?

---

## [Low Watermark disk space](https://discuss.elastic.co/t/low-watermark-disk-space/177253)

<div class="topic-metadata">

**Author:** [@ek9boy](https://discuss.elastic.co/u/ek9boy)\
**Replies:** 10\
**Last updated:** [April 24, 2019, 10:57am UTC](https://discuss.elastic.co/t/low-watermark-disk-space/177253 "2019-04-24T10:57:26Z")

</div>

I keep getting the error of low watermark disk space. i checked my ES config file. There are currently no settings. I have 220 TB Free, What are the best settings to apply?

---

## [Indices creation using gzip\_lines codec](https://discuss.elastic.co/t/indices-creation-using-gzip-lines-codec/178196)

<div class="topic-metadata">

**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\
**Replies:** 4\
**Last updated:** [April 24, 2019, 10:30am UTC](https://discuss.elastic.co/t/indices-creation-using-gzip-lines-codec/178196 "2019-04-24T10:30:46Z")

</div>

If I am using Gzip\_lines codec plugin for importing .gz files....then will it affect the size of indices created???

---

## [To Contaoner or not to Container](https://discuss.elastic.co/t/to-contaoner-or-not-to-container/177417)

<div class="topic-metadata">

**Author:** [@paulsbuxton](https://discuss.elastic.co/u/paulsbuxton)\
**Replies:** 2\
**Last updated:** [April 24, 2019, 10:15am UTC](https://discuss.elastic.co/t/to-contaoner-or-not-to-container/177417 "2019-04-24T10:15:07Z")

</div>

Is there a recommendation on whether ES should be 'native' (for want of a better word) or is containered perfectly acceptable and robust? in a production environment??

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1320)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1322)
