# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1331

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1332

---

## [While executing a Search Request Synchronous or Asynchronous Execution, which should we follow?](https://discuss.elastic.co/t/while-executing-a-search-request-synchronous-or-asynchronous-execution-which-should-we-follow/175713)

<div class="topic-metadata">

**Author:** [@Aswini\_Kumar\_Rout](https://discuss.elastic.co/u/Aswini_Kumar_Rout)\
**Replies:** 3\
**Last updated:** [April 15, 2019, 1:43pm UTC](https://discuss.elastic.co/t/while-executing-a-search-request-synchronous-or-asynchronous-execution-which-should-we-follow/175713 "2019-04-15T13:43:09Z")

</div>

1.In which case we will get the Response quickly? Ex-Like if 500 people making request at the same time

---

## [Cache / performance - possible to have last 48hours in cache, ignore rest?](https://discuss.elastic.co/t/cache-performance-possible-to-have-last-48hours-in-cache-ignore-rest/176912)

<div class="topic-metadata">

**Author:** [@Eoin\_Verling](https://discuss.elastic.co/u/Eoin_Verling)\
**Replies:** 0\
**Last updated:** [April 15, 2019, 1:12pm UTC](https://discuss.elastic.co/t/cache-performance-possible-to-have-last-48hours-in-cache-ignore-rest/176912 "2019-04-15T13:12:56Z")

</div>

Hi, one of our use cases for ES is as a timeseries DB, but the queries we run will only ever be for data from the last few hours (eg search only within the last 24 hours, for data matching a, b, c ...) Is it possible t…

---

## [Curator binaries](https://discuss.elastic.co/t/curator-binaries/176890)

<div class="topic-metadata">

**Author:** [@Mesmer](https://discuss.elastic.co/u/Mesmer)\
**Replies:** 1\
**Last updated:** [April 15, 2019, 12:46pm UTC](https://discuss.elastic.co/t/curator-binaries/176890 "2019-04-15T12:46:17Z")

</div>

Hello, Does anyone know if the binaries (RPM) under Installation page for curator are automatically updated? I see this commit is not in yet, so can't use Curator with Elasticsearch v7.0

---

## [Restoring HDFS Snapshots](https://discuss.elastic.co/t/restoring-hdfs-snapshots/176901)

<div class="topic-metadata">

**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\
**Replies:** 0\
**Last updated:** [April 15, 2019, 12:22pm UTC](https://discuss.elastic.co/t/restoring-hdfs-snapshots/176901 "2019-04-15T12:22:06Z")

</div>

Hi, I have took the ES snapshots with HDFS repository. I'd like to restore the snapshots in a different Elastic Stack Cluster. Could someone let me know the steps of doing it. Thanks !

---

## [Resume indexing](https://discuss.elastic.co/t/resume-indexing/176886)

<div class="topic-metadata">

**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\
**Replies:** 2\
**Last updated:** [April 15, 2019, 11:02am UTC](https://discuss.elastic.co/t/resume-indexing/176886 "2019-04-15T11:02:21Z")

</div>

Hi there, I'm going to "Rolling Upgrade" my ELK cluster. In the docs is written that I should operate POST \_flush/synced to stop indexing. At the end the docs say that I have to resume indexing. Is there a specific AP…

---

## [ELK latest version](https://discuss.elastic.co/t/elk-latest-version/176884)

<div class="topic-metadata">

**Author:** [@cppatel](https://discuss.elastic.co/u/cppatel)\
**Replies:** 1\
**Last updated:** [April 15, 2019, 10:50am UTC](https://discuss.elastic.co/t/elk-latest-version/176884 "2019-04-15T10:50:37Z")

</div>

Hi, I have certain number of queries regarding new version of ELK and it's plugin usage: Is it possible to disable X-Pack feature from elasticsearch and kibana.(If we use ELK 6.6 under elastic version) Is it possible t…

---

## [DLS range query is failing: permission filters are not allowed to use the current timestamp](https://discuss.elastic.co/t/dls-range-query-is-failing-permission-filters-are-not-allowed-to-use-the-current-timestamp/175321)

<div class="topic-metadata">

**Author:** [@nkoothrappahli](https://discuss.elastic.co/u/nkoothrappahli)\
**Replies:** 1\
**Last updated:** [April 15, 2019, 10:46am UTC](https://discuss.elastic.co/t/dls-range-query-is-failing-permission-filters-are-not-allowed-to-use-the-current-timestamp/175321 "2019-04-15T10:46:02Z")

</div>

I try to use the following query as a DLS (Document level security) query: "range": { "@timestamp": { "gt": "now-1d" } } This is failing with the error message: "permission filters are not allowed to use the cu…

---

## [Cluster nodes unable to communicate with each other](https://discuss.elastic.co/t/cluster-nodes-unable-to-communicate-with-each-other/176644)

<div class="topic-metadata">

**Author:** [@rao-uno](https://discuss.elastic.co/u/rao-uno)\
**Replies:** 18\
**Last updated:** [April 15, 2019, 10:37am UTC](https://discuss.elastic.co/t/cluster-nodes-unable-to-communicate-with-each-other/176644 "2019-04-15T10:37:16Z")

</div>

Hi, I have a cluster of 3 nodes. The nodes storage got full (91%) and no new index were being created. But then my servers hanged and had to be rebooted. Now when I am starting the cluster, the cluster is not able to i…

---

## [Collapse after rescore](https://discuss.elastic.co/t/collapse-after-rescore/176633)

<div class="topic-metadata">

**Author:** [@Maxim\_Sychenko](https://discuss.elastic.co/u/Maxim_Sychenko)\
**Replies:** 0\
**Last updated:** [April 12, 2019, 1:26pm UTC](https://discuss.elastic.co/t/collapse-after-rescore/176633 "2019-04-12T13:26:40Z")

</div>

Hello everyone I know that in ver. 5.3 (?) it would be possible to run collapse with rescore https://github.com/elastic/elasticsearch/pull/28521 and it was reverted, but the cases that I have, forcing me to develop this…

---

## [\[ERROR\]\[logstash.outputs.elasticsearch\] Got a bad response code from server, but this code is not considered retryable. Request will be dropped](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-got-a-bad-response-code-from-server-but-this-code-is-not-considered-retryable-request-will-be-dropped/176823)

<div class="topic-metadata">

**Author:** [@weijie.zhu](https://discuss.elastic.co/u/weijie.zhu)\
**Replies:** 2\
**Last updated:** [April 15, 2019, 9:33am UTC](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-got-a-bad-response-code-from-server-but-this-code-is-not-considered-retryable-request-will-be-dropped/176823 "2019-04-15T09:33:10Z")

</div>

Hello, as of recent I've been getting the following error: \`\[2019-04-12T00:00:30,775\]\[ERROR\]\[logstash.outputs.elasticsearch\] Got a bad response code from server, but this code is not considered retryable. Request will b…

---

## [@timestamp 15mn ahead of time](https://discuss.elastic.co/t/timestamp-15mn-ahead-of-time/176861)

<div class="topic-metadata">

**Author:** [@Loup](https://discuss.elastic.co/u/Loup)\
**Replies:** 1\
**Last updated:** [April 15, 2019, 8:58am UTC](https://discuss.elastic.co/t/timestamp-15mn-ahead-of-time/176861 "2019-04-15T08:58:04Z")

</div>

Hi, My Elastic Stack actually received logs from an equipment. The equipment, the Elastic server and the log have the same "date" data but the @timestamp is 15 minutes ahead of time. example of the log in the date: 1…

---

## [Unable to start Elasticsearch 7.0 on Windows 10](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-0-on-windows-10/176858)

<div class="topic-metadata">

**Author:** [@dantonag](https://discuss.elastic.co/u/dantonag)\
**Replies:** 2\
**Last updated:** [April 15, 2019, 8:46am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-0-on-windows-10/176858 "2019-04-15T08:46:49Z")

</div>

Hello, when starting Elasticsearch on my machine, I get this error. Already tried to disable the antivirus, but with no luck: C:\\Program Files\\Elastic\\Elasticsearch\\7.0.0\\bin\>elasticsearch.exe \[2019-04-15T10:23:24,555…

---

## [Exact match on dynamic object field](https://discuss.elastic.co/t/exact-match-on-dynamic-object-field/176859)

<div class="topic-metadata">

**Author:** [@AndreKR](https://discuss.elastic.co/u/AndreKR)\
**Replies:** 0\
**Last updated:** [April 15, 2019, 8:29am UTC](https://discuss.elastic.co/t/exact-match-on-dynamic-object-field/176859 "2019-04-15T08:29:53Z")

</div>

I have a field with a dynamic mapping: "properties": { "tags": { "type": "object", "dynamic": "true" } } Now I want to find the documents that have tags.color = "red" and tags.species = "herring" but no oth…

---

## [What elasticsearch does when restarting a cluster?](https://discuss.elastic.co/t/what-elasticsearch-does-when-restarting-a-cluster/176793)

<div class="topic-metadata">

**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\
**Replies:** 4\
**Last updated:** [April 15, 2019, 8:03am UTC](https://discuss.elastic.co/t/what-elasticsearch-does-when-restarting-a-cluster/176793 "2019-04-15T08:03:31Z")

</div>

I have en elasticsearch cluster consisting 3 nodes, and a pretty big index (~1500 fields), and when it restarts, ether from a "clean" restart or forced shotdown, it takes a while to go back up, and it hoggs the JVM heap …

---

## [ES query is not working for realtime](https://discuss.elastic.co/t/es-query-is-not-working-for-realtime/176853)

<div class="topic-metadata">

**Author:** [@wardakhan149](https://discuss.elastic.co/u/wardakhan149)\
**Replies:** 0\
**Last updated:** [April 15, 2019, 7:52am UTC](https://discuss.elastic.co/t/es-query-is-not-working-for-realtime/176853 "2019-04-15T07:52:40Z")

</div>

data: { url: { // %context%: true // %timefield%: timestamp // current voltage (bem\_ubdm) BEM\_UBDM // target voltage (bem\_ugensoll) BEM\_UGenSoll index: alias1 body: { "\_source": \["timestamp", "value", "vin"…

---

## [org.springframework.web.util.NestedServletException: Handler dispatch failed; nested exception is java.lang.NoSuchMethodError: org.elasticsearch.action.index.IndexRequest.ifSeqNo()J](https://discuss.elastic.co/t/org-springframework-web-util-nestedservletexception-handler-dispatch-failed-nested-exception-is-java-lang-nosuchmethoderror-org-elasticsearch-action-index-indexrequest-ifseqno-j/176627)

<div class="topic-metadata">

**Author:** [@shash4243](https://discuss.elastic.co/u/shash4243)\
**Replies:** 4\
**Last updated:** [April 15, 2019, 7:25am UTC](https://discuss.elastic.co/t/org-springframework-web-util-nestedservletexception-handler-dispatch-failed-nested-exception-is-java-lang-nosuchmethoderror-org-elasticsearch-action-index-indexrequest-ifseqno-j/176627 "2019-04-15T07:25:08Z")

</div>

Hi, I am trying out RestHighLevelClient with spring boot. My current version is 2.1.1.RELEASE and these are my dependencies \<dependency\> \<groupId\>org.elasticsearch.client\</groupId\> \<artifactId\>elasticsearch-rest-h…

---

## [How to get logs of windows and linux in one elasticsearch?](https://discuss.elastic.co/t/how-to-get-logs-of-windows-and-linux-in-one-elasticsearch/176843)

<div class="topic-metadata">

**Author:** [@Kajol\_Nimesh](https://discuss.elastic.co/u/Kajol_Nimesh)\
**Replies:** 0\
**Last updated:** [April 15, 2019, 7:05am UTC](https://discuss.elastic.co/t/how-to-get-logs-of-windows-and-linux-in-one-elasticsearch/176843 "2019-04-15T07:05:25Z")

</div>

Hi, I'm able to get logs of linux and windows through winlogbeat and filebeat simultaneously on different machines. But I want to collect logs of Linux that is created on VMWare and on Window 10. Please suggest.

---

## [Elasticsearch with Helm Charts (Caused by: java.nio.file.AccessDeniedException: /usr/share/elasticsearch/data/nodes)](https://discuss.elastic.co/t/elasticsearch-with-helm-charts-caused-by-java-nio-file-accessdeniedexception-usr-share-elasticsearch-data-nodes/174297)

<div class="topic-metadata">

**Author:** [@bishwajitsamanta1689](https://discuss.elastic.co/u/bishwajitsamanta1689)\
**Replies:** 11\
**Last updated:** [April 15, 2019, 6:57am UTC](https://discuss.elastic.co/t/elasticsearch-with-helm-charts-caused-by-java-nio-file-accessdeniedexception-usr-share-elasticsearch-data-nodes/174297 "2019-04-15T06:57:07Z")

</div>

I am unable to create Elasticsearch by Helm charts. Need some guidance. I am a layman so please explain me in details if possible. root@kubemaster:~/kube\_dir/elasticsearch# kubectl get pvc NAME …

---

## [Elasticsearch indexing is low when there are area fields](https://discuss.elastic.co/t/elasticsearch-indexing-is-low-when-there-are-area-fields/176613)

<div class="topic-metadata">

**Author:** [@joel.ortin](https://discuss.elastic.co/u/joel.ortin)\
**Replies:** 2\
**Last updated:** [April 15, 2019, 6:37am UTC](https://discuss.elastic.co/t/elasticsearch-indexing-is-low-when-there-are-area-fields/176613 "2019-04-15T06:37:51Z")

</div>

Elasticsearch version : 6.4.0 Logstash version: 6.4.0 I'm using logstash to import data to Elasticsearch and indexing speed is really decreased when there are area type fields. The number of documents I'm importing is…

---

## [Elastic search status is red](https://discuss.elastic.co/t/elastic-search-status-is-red/176708)

<div class="topic-metadata">

**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\
**Replies:** 12\
**Last updated:** [April 15, 2019, 6:32am UTC](https://discuss.elastic.co/t/elastic-search-status-is-red/176708 "2019-04-15T06:32:16Z")

</div>

My Elastic search status is red in colour. How can i trouble shoot and fix this. There is no issue accessing and using it. But I was a bit concerned . By the way I am running it on single server. There is no cluster s…

---

## [What is this error? is it going to affect anything](https://discuss.elastic.co/t/what-is-this-error-is-it-going-to-affect-anything/176824)

<div class="topic-metadata">

**Author:** [@Ridwan\_Syarifudin](https://discuss.elastic.co/u/Ridwan_Syarifudin)\
**Replies:** 2\
**Last updated:** [April 15, 2019, 6:31am UTC](https://discuss.elastic.co/t/what-is-this-error-is-it-going-to-affect-anything/176824 "2019-04-15T06:31:43Z")

</div>

PUT \_template/product\_template { "index\_patterns": \[ "master\_product\*" \], "settings": { "number\_of\_shards": 1 }, "mappings": { "message": { "properties": { "id\_product": { "type": "integer" }, "code\_product…

---

## [Interested in visualizing the value inside doc using vega/vega-lite](https://discuss.elastic.co/t/interested-in-visualizing-the-value-inside-doc-using-vega-vega-lite/176835)

<div class="topic-metadata">

**Author:** [@wardakhan149](https://discuss.elastic.co/u/wardakhan149)\
**Replies:** 0\
**Last updated:** [April 15, 2019, 6:05am UTC](https://discuss.elastic.co/t/interested-in-visualizing-the-value-inside-doc-using-vega-vega-lite/176835 "2019-04-15T06:05:51Z")

</div>

Hi, I am using vega for visualizing data. my query fetches the data and gives hits.hits as well as aggregations.time\_buckets.buckets I am only interested in visualizing the information in hits.hits in real time. but it…

---

## [Add basic authentication without xpack and reverse proxies](https://discuss.elastic.co/t/add-basic-authentication-without-xpack-and-reverse-proxies/173911)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 0\
**Last updated:** [March 26, 2019, 11:21am UTC](https://discuss.elastic.co/t/add-basic-authentication-without-xpack-and-reverse-proxies/173911 "2019-03-26T11:21:53Z")

</div>

Is there any way to add basic authentication without using any plugins or reverse proxies,by modifying some code (for example restcontroller.java).

---

## [Error on my json](https://discuss.elastic.co/t/error-on-my-json/176811)

<div class="topic-metadata">

**Author:** [@Ridwan\_Syarifudin](https://discuss.elastic.co/u/Ridwan_Syarifudin)\
**Replies:** 5\
**Last updated:** [April 15, 2019, 4:02am UTC](https://discuss.elastic.co/t/error-on-my-json/176811 "2019-04-15T04:02:11Z")

</div>

this is my code for simulate \</\> POST \_ingest/pipeline/\_simulate { "pipeline": { "description": "parsing master produk indexing", "processors": \[ { "grok": { "field": "message", "patterns": \[ """%{NUMBER:id\_pr…

---

## [Create elasticsearch client throws netty illegalstateexception in server enviroment](https://discuss.elastic.co/t/create-elasticsearch-client-throws-netty-illegalstateexception-in-server-enviroment/176809)

<div class="topic-metadata">

**Author:** [@dodolzg](https://discuss.elastic.co/u/dodolzg)\
**Replies:** 1\
**Last updated:** [April 15, 2019, 3:29am UTC](https://discuss.elastic.co/t/create-elasticsearch-client-throws-netty-illegalstateexception-in-server-enviroment/176809 "2019-04-15T03:29:25Z")

</div>

The error info Caused by: org.springframework.beans.BeanInstantiationException: Failed to instantiate \[org.elasticsearch.client.transport.TransportClient\]: Factory method 'elasticsearchClient' threw exception; nested e…

---

## [Indices status is red](https://discuss.elastic.co/t/indices-status-is-red/176802)

<div class="topic-metadata">

**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\
**Replies:** 1\
**Last updated:** [April 14, 2019, 10:56pm UTC](https://discuss.elastic.co/t/indices-status-is-red/176802 "2019-04-14T22:56:26Z")

</div>

Hi I have ES installed on single node. I see this red status on some of my indices. How can I fix this.

---

## [Issue upgrade from 6.7 to 7 for single node](https://discuss.elastic.co/t/issue-upgrade-from-6-7-to-7-for-single-node/176759)

<div class="topic-metadata">

**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\
**Replies:** 8\
**Last updated:** [April 14, 2019, 6:50pm UTC](https://discuss.elastic.co/t/issue-upgrade-from-6-7-to-7-for-single-node/176759 "2019-04-14T18:50:31Z")

</div>

Hi I am trying to upgrade from 6.7 to 7 for elasticsearch. I am running my elastic search on single server with one node cluster. I see several warnings. How can I fix this. Here is my configuration. network.host: 0.0…

---

## [OOM killer triggered and machine crashes after using up all memory](https://discuss.elastic.co/t/oom-killer-triggered-and-machine-crashes-after-using-up-all-memory/176725)

<div class="topic-metadata">

**Author:** [@Jalaluddeen\_Mohammed](https://discuss.elastic.co/u/Jalaluddeen_Mohammed)\
**Replies:** 9\
**Last updated:** [April 14, 2019, 3:59pm UTC](https://discuss.elastic.co/t/oom-killer-triggered-and-machine-crashes-after-using-up-all-memory/176725 "2019-04-14T15:59:38Z")

</div>

I have a 12 node cluster with 24G RAM running only ELasticsearch. Elasticsearch is configured to use 11G of RAM as below. -Xms11g -Xmx11g There is no indexing or querying happening on this cluster, this is a fresh de…

---

## [NoClassDefFound error for ShapeBuilder](https://discuss.elastic.co/t/noclassdeffound-error-for-shapebuilder/176695)

<div class="topic-metadata">

**Author:** [@avinash\_07](https://discuss.elastic.co/u/avinash_07)\
**Replies:** 3\
**Last updated:** [April 14, 2019, 2:14pm UTC](https://discuss.elastic.co/t/noclassdeffound-error-for-shapebuilder/176695 "2019-04-14T14:14:12Z")

</div>

I am getting the following error during run time when parse method of ShapeBuilder is being called Caused by: java.lang.NoClassDefFoundError: Could not initialize class org.elasticsearch.common.geo.builders.ShapeBuilder…

---

## [How many shards do I need to have?](https://discuss.elastic.co/t/how-many-shards-do-i-need-to-have/176777)

<div class="topic-metadata">

**Author:** [@corvintheus](https://discuss.elastic.co/u/corvintheus)\
**Replies:** 4\
**Last updated:** [April 14, 2019, 12:52pm UTC](https://discuss.elastic.co/t/how-many-shards-do-i-need-to-have/176777 "2019-04-14T12:52:29Z")

</div>

I have 3 nodes setup with default 5 shards and 1 replica. Now I am indexing 1.3TB daily. I have read that shard should atleast max at 50GB now I am wondering how many shards do I need for this kind of setup? Does 10 prim…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1330)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1332)
