# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1352

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1353

---

## [Suggester protected terms](https://discuss.elastic.co/t/suggester-protected-terms/174079)

<div class="topic-metadata">

**Author:** [@bram](https://discuss.elastic.co/u/bram)\
**Replies:** 0\
**Last updated:** [March 27, 2019, 9:53am UTC](https://discuss.elastic.co/t/suggester-protected-terms/174079 "2019-03-27T09:53:11Z")

</div>

Heya, I was wondering if it was somehow possible to create a list of protected terms, that would never get changed by the suggester query. For example: With the input text "hp A4" (Hewlett-Packard), I don't want the s…

---

## [Suggester - ignore asciifolded suggestions](https://discuss.elastic.co/t/suggester-ignore-asciifolded-suggestions/174080)

<div class="topic-metadata">

**Author:** [@bram](https://discuss.elastic.co/u/bram)\
**Replies:** 0\
**Last updated:** [March 27, 2019, 9:58am UTC](https://discuss.elastic.co/t/suggester-ignore-asciifolded-suggestions/174080 "2019-03-27T09:58:39Z")

</div>

Heya, I was wondering if it's possible to ignore suggestions if they're only asciifolded. So with the document "België verzending" (dutch "Belgium shipment") And searching for "Belgie verzending", I want no suggestion…

---

## [Adding a node to a cluster](https://discuss.elastic.co/t/adding-a-node-to-a-cluster/173958)

<div class="topic-metadata">

**Author:** [@sph18](https://discuss.elastic.co/u/sph18)\
**Replies:** 6\
**Last updated:** [March 27, 2019, 8:58am UTC](https://discuss.elastic.co/t/adding-a-node-to-a-cluster/173958 "2019-03-27T08:58:11Z")

</div>

Hi all, I have a graylog server setup as a single host. Version are: Host - Ubuntu 18.04 Graylog - 3.0.0-12 Java - 1.8.0\_191 Elasticsearch - 6.6.2" MongoDB - 4.0.6 Apache - 2.4.29 So I'm I want to add a node the …

---

## [Cannot find symbol IMMEDIATE](https://discuss.elastic.co/t/cannot-find-symbol-immediate/173919)

<div class="topic-metadata">

**Author:** [@utkarsh](https://discuss.elastic.co/u/utkarsh)\
**Replies:** 4\
**Last updated:** [March 27, 2019, 8:47am UTC](https://discuss.elastic.co/t/cannot-find-symbol-immediate/173919 "2019-03-27T08:47:16Z")

</div>

code in v2.3.3 IndexResponse idxResp=getIndex().setId(documentDto.getId().toString()).setSource(source).setRefresh(true).execute().actionGet(); While upgrading from ES v2.3.3 to ES v5.6.2, I am facing the error: "Could…

---

## [What is timeout to write to replica shard](https://discuss.elastic.co/t/what-is-timeout-to-write-to-replica-shard/173966)

<div class="topic-metadata">

**Author:** [@oraclept](https://discuss.elastic.co/u/oraclept)\
**Replies:** 5\
**Last updated:** [March 27, 2019, 8:26am UTC](https://discuss.elastic.co/t/what-is-timeout-to-write-to-replica-shard/173966 "2019-03-27T08:26:50Z")

</div>

What is the timeout for writing to replica shard ? If it is taking long time to write to replica can i specify value to timeout write on replica shard. I am reading below link. https://www.elastic.co/guide/en/elastics…

---

## [Different disk sizes](https://discuss.elastic.co/t/different-disk-sizes/174011)

<div class="topic-metadata">

**Author:** [@zeldor](https://discuss.elastic.co/u/zeldor)\
**Replies:** 1\
**Last updated:** [March 27, 2019, 8:16am UTC](https://discuss.elastic.co/t/different-disk-sizes/174011 "2019-03-27T08:16:10Z")

</div>

Hello ES community, I have a question regarding different disk sizes on data-nodes in a elasticsearch-cluster. Let's say I have 8 data nodes and all of then have different disk sizes: 1: 300GB 2: 300GB 3: 300GB 4:…

---

## [Drop document in ingest pipeline](https://discuss.elastic.co/t/drop-document-in-ingest-pipeline/173394)

<div class="topic-metadata">

**Author:** [@leochavez](https://discuss.elastic.co/u/leochavez)\
**Replies:** 3\
**Last updated:** [March 27, 2019, 6:51am UTC](https://discuss.elastic.co/t/drop-document-in-ingest-pipeline/173394 "2019-03-27T06:51:19Z")

</div>

Hi I need to drop a document in an ingest pipeline , ie to not index it at all, I need to do it filtering the messages by the type of severity and discard them I am testing it in the following way PUT \_ingest/pipel…

---

## [\[Rollup Job\]NumberFormatException](https://discuss.elastic.co/t/rollup-job-numberformatexception/174050)

<div class="topic-metadata">

**Author:** [@hyhong](https://discuss.elastic.co/u/hyhong)\
**Replies:** 1\
**Last updated:** [March 27, 2019, 6:56am UTC](https://discuss.elastic.co/t/rollup-job-numberformatexception/174050 "2019-03-27T06:56:33Z")

</div>

When I start a rollup job and run a period of time，throws a exception:

---

## [CPU utilization crossing 98%](https://discuss.elastic.co/t/cpu-utilization-crossing-98/174047)

<div class="topic-metadata">

**Author:** [@kamesh\_siva](https://discuss.elastic.co/u/kamesh_siva)\
**Replies:** 1\
**Last updated:** [March 27, 2019, 6:13am UTC](https://discuss.elastic.co/t/cpu-utilization-crossing-98/174047 "2019-03-27T06:13:17Z")

</div>

Please suggest.. Observing high CPU utilization on cluster node on one server and queried for nodes hot thread, Below is the response received please help. Always i have restart elastic search service in services.msc an…

---

## [How to send HTTP verbs to ElasticSearch](https://discuss.elastic.co/t/how-to-send-http-verbs-to-elasticsearch/173566)

<div class="topic-metadata">

**Author:** [@Vincent\_Stevenson](https://discuss.elastic.co/u/Vincent_Stevenson)\
**Replies:** 1\
**Last updated:** [March 27, 2019, 4:45am UTC](https://discuss.elastic.co/t/how-to-send-http-verbs-to-elasticsearch/173566 "2019-03-27T04:45:43Z")

</div>

I am running elasticsearch on my Windows computer on port 9200. I am trying to write a method in C# to create an index, but I keep getting erred out. Here's a snippet from C# string jsonPayload = $"{indexName}"; byte\[\]…

---

## [Composite Aggregation with After functionality example](https://discuss.elastic.co/t/composite-aggregation-with-after-functionality-example/174013)

<div class="topic-metadata">

**Author:** [@andrei-galkin](https://discuss.elastic.co/u/andrei-galkin)\
**Replies:** 1\
**Last updated:** [March 27, 2019, 4:37am UTC](https://discuss.elastic.co/t/composite-aggregation-with-after-functionality-example/174013 "2019-03-27T04:37:00Z")

</div>

I am looking for a code snippet of After functionality usage with NEST lib. https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-composite-aggregation.html#\_after. Thanks in advanc…

---

## [Get current bucket value in a Moving function agg](https://discuss.elastic.co/t/get-current-bucket-value-in-a-moving-function-agg/174034)

<div class="topic-metadata">

**Author:** [@nuf](https://discuss.elastic.co/u/nuf)\
**Replies:** 0\
**Last updated:** [March 27, 2019, 2:30am UTC](https://discuss.elastic.co/t/get-current-bucket-value-in-a-moving-function-agg/174034 "2019-03-27T02:30:58Z")

</div>

Hi all, I'm trying to calculate the year over year percentage change, which comes down to finding the percentage change of bucket values in a histogram. I can use the derivative aggregation as discussed here to get the…

---

## [Elasticsearch docker container fails on aws: There is insufficient memory for the Java Runtime Environment to continue docker](https://discuss.elastic.co/t/elasticsearch-docker-container-fails-on-aws-there-is-insufficient-memory-for-the-java-runtime-environment-to-continue-docker/174031)

<div class="topic-metadata">

**Author:** [@Tinuade](https://discuss.elastic.co/u/Tinuade)\
**Replies:** 0\
**Last updated:** [March 27, 2019, 2:13am UTC](https://discuss.elastic.co/t/elasticsearch-docker-container-fails-on-aws-there-is-insufficient-memory-for-the-java-runtime-environment-to-continue-docker/174031 "2019-03-27T02:13:00Z")

</div>

Hi! The elastic search docker container I deployed on aws fails with this error:There is insufficient memory for the Java Runtime Environment to continue docker. I've tried reducing the heap size with "ES\_JAVA\_OPTS=-Xms…

---

## [While starting the Elastic Search on the above Environment (RHEL 7.6, S@S 4.5), it is failing with error during start\_process () in es\_master.py](https://discuss.elastic.co/t/while-starting-the-elastic-search-on-the-above-environment-rhel-7-6-s-s-4-5-it-is-failing-with-error-during-start-process-in-es-master-py/174028)

<div class="topic-metadata">

**Author:** [@hsandhu](https://discuss.elastic.co/u/hsandhu)\
**Replies:** 0\
**Last updated:** [March 27, 2019, 1:50am UTC](https://discuss.elastic.co/t/while-starting-the-elastic-search-on-the-above-environment-rhel-7-6-s-s-4-5-it-is-failing-with-error-during-start-process-in-es-master-py/174028 "2019-03-27T01:50:21Z")

</div>

Hi, We are using ES v 2.3.1 and upgraded our OS to RHEL 7.6 After upgrade, the ES is not starting due to the following error message- 2019-03-20 15:42:07,790 - Process is not up after the polling interval 10 seconds. …

---

## [Unknown key for a START\_ARRAY in \[query\]](https://discuss.elastic.co/t/unknown-key-for-a-start-array-in-query/173989)

<div class="topic-metadata">

**Author:** [@hughplatform](https://discuss.elastic.co/u/hughplatform)\
**Replies:** 1\
**Last updated:** [March 26, 2019, 11:07pm UTC](https://discuss.elastic.co/t/unknown-key-for-a-start-array-in-query/173989 "2019-03-26T23:07:00Z")

</div>

My GET request is returning an error response to my query. Can't figure out what's wrong with my DSL. Error: { "error": { "root\_cause": \[ { "type": "parsing\_exception", "reason": "Un…

---

## [Query String in Lucene syntax vs Term Filter Performance](https://discuss.elastic.co/t/query-string-in-lucene-syntax-vs-term-filter-performance/173622)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 6\
**Last updated:** [March 26, 2019, 11:02pm UTC](https://discuss.elastic.co/t/query-string-in-lucene-syntax-vs-term-filter-performance/173622 "2019-03-26T23:02:59Z")

</div>

Is there any performance difference if I write out the query string in Lucene syntax vs using the term filter in dicts? In my particular use case, I find it easier to type out my logic in a list and join them with ANDs …

---

## [Cannot export monitoring data from a cluster to to monitoring cluster](https://discuss.elastic.co/t/cannot-export-monitoring-data-from-a-cluster-to-to-monitoring-cluster/173926)

<div class="topic-metadata">

**Author:** [@worapojc](https://discuss.elastic.co/u/worapojc)\
**Replies:** 1\
**Last updated:** [March 26, 2019, 9:15pm UTC](https://discuss.elastic.co/t/cannot-export-monitoring-data-from-a-cluster-to-to-monitoring-cluster/173926 "2019-03-26T21:15:53Z")

</div>

It shows connection refused. This monitoring was work before what should I do. Is that cause from the connection timeout issue? \[2019-03-26T11:39:10,592\]\[WARN \]\[o.e.x.m.e.h.NodeFailureListener\] \[10.49.116.129-master-no…

---

## [Serial\_diff in query get error Only sibling pipeline aggregations are allowed at the top level](https://discuss.elastic.co/t/serial-diff-in-query-get-error-only-sibling-pipeline-aggregations-are-allowed-at-the-top-level/173950)

<div class="topic-metadata">

**Author:** [@Stevens\_Laurent](https://discuss.elastic.co/u/Stevens_Laurent)\
**Replies:** 0\
**Last updated:** [March 26, 2019, 2:49pm UTC](https://discuss.elastic.co/t/serial-diff-in-query-get-error-only-sibling-pipeline-aggregations-are-allowed-at-the-top-level/173950 "2019-03-26T14:49:17Z")

</div>

Hi, I'm trying to calculate a serial difference between 2 values in different documents that are related by a project name and a "voie" fields (first part of the query). Here is where i am : { "query": { "bool":…

---

## [ElasticSearch doc\_count not correct in nested aggregation](https://discuss.elastic.co/t/elasticsearch-doc-count-not-correct-in-nested-aggregation/174001)

<div class="topic-metadata">

**Author:** [@psachida](https://discuss.elastic.co/u/psachida)\
**Replies:** 0\
**Last updated:** [March 26, 2019, 7:23pm UTC](https://discuss.elastic.co/t/elasticsearch-doc-count-not-correct-in-nested-aggregation/174001 "2019-03-26T19:23:29Z")

</div>

I am having an issue with nested + term aggregations. I am searching for a keyword type field, the doc\_count in the aggregations is lesser than the expected count. In the example I have uploaded the --Bin Set-- doc\_cou…

---

## [Data inserted via Java API is not visible](https://discuss.elastic.co/t/data-inserted-via-java-api-is-not-visible/173984)

<div class="topic-metadata">

**Author:** [@thebuleon29](https://discuss.elastic.co/u/thebuleon29)\
**Replies:** 1\
**Last updated:** [March 26, 2019, 6:37pm UTC](https://discuss.elastic.co/t/data-inserted-via-java-api-is-not-visible/173984 "2019-03-26T18:37:24Z")

</div>

Hi, I am trying to write a simple client in Java using the High Level REST Client, but I am facing a problem. I have an insert method that creates new documents from a JSON and it seems to be working, but I can't query …

---

## [Unable to aggregate properly country dimension](https://discuss.elastic.co/t/unable-to-aggregate-properly-country-dimension/173986)

<div class="topic-metadata">

**Author:** [@Elson\_Simoes](https://discuss.elastic.co/u/Elson_Simoes)\
**Replies:** 0\
**Last updated:** [March 26, 2019, 5:54pm UTC](https://discuss.elastic.co/t/unable-to-aggregate-properly-country-dimension/173986 "2019-03-26T17:54:17Z")

</div>

Hello ES gurus, I am just starting to trying to figure it out but I am unable to do a proper aggregation of the dimension I want. I just return me the values splitted as per the image in attach, If anyone could help me…

---

## [How to tweak Document Score?](https://discuss.elastic.co/t/how-to-tweak-document-score/173942)

<div class="topic-metadata">

**Author:** [@gauresh\_chavan](https://discuss.elastic.co/u/gauresh_chavan)\
**Replies:** 0\
**Last updated:** [March 26, 2019, 1:56pm UTC](https://discuss.elastic.co/t/how-to-tweak-document-score/173942 "2019-03-26T13:56:57Z")

</div>

I am indexing a chunk of data (about 5 million records) on Kibana. When I search for a particular value say 'Presbyterian Wellness' I get 6 hits out of which the 6th document is the one I want to be highlighted first. …

---

## [Watcher CPU alerts metricbeats](https://discuss.elastic.co/t/watcher-cpu-alerts-metricbeats/173982)

<div class="topic-metadata">

**Author:** [@forestnd](https://discuss.elastic.co/u/forestnd)\
**Replies:** 0\
**Last updated:** [March 26, 2019, 5:28pm UTC](https://discuss.elastic.co/t/watcher-cpu-alerts-metricbeats/173982 "2019-03-26T17:28:23Z")

</div>

I am looking with watcher, to create metric alerts and i am having some problems. I have created one watcher alert for CPU grater then "0.012" for testing only, to send an alert to me. but have worked out that the watc…

---

## [Cannot establish secure (SSL/TLS) connection between elasticsearch clusters](https://discuss.elastic.co/t/cannot-establish-secure-ssl-tls-connection-between-elasticsearch-clusters/173852)

<div class="topic-metadata">

**Author:** [@iShiBin](https://discuss.elastic.co/u/iShiBin)\
**Replies:** 2\
**Last updated:** [March 26, 2019, 4:14pm UTC](https://discuss.elastic.co/t/cannot-establish-secure-ssl-tls-connection-between-elasticsearch-clusters/173852 "2019-03-26T16:14:46Z")

</div>

Hi, I followed the guide on Elastic website "Adding the CA certificate from the local cluster as a trusted CA in each remote cluster (see Transport TLS settings)." However, I found the connection could not be made. Mayb…

---

## [Text field storing both String & Integer datatypes](https://discuss.elastic.co/t/text-field-storing-both-string-integer-datatypes/173953)

<div class="topic-metadata">

**Author:** [@KoPee](https://discuss.elastic.co/u/KoPee)\
**Replies:** 0\
**Last updated:** [March 26, 2019, 2:52pm UTC](https://discuss.elastic.co/t/text-field-storing-both-string-integer-datatypes/173953 "2019-03-26T14:52:58Z")

</div>

Hi, By accident (probably a wrong update script), I now have some text fields in my index that contain both Integers and Strings. My Mapping looks like this: "Test": { "properties": { "Status": { "properties": { …

---

## [How to perform the aggregation with doc\_count value](https://discuss.elastic.co/t/how-to-perform-the-aggregation-with-doc-count-value/173946)

<div class="topic-metadata">

**Author:** [@RajeshAJ](https://discuss.elastic.co/u/RajeshAJ)\
**Replies:** 0\
**Last updated:** [March 26, 2019, 2:19pm UTC](https://discuss.elastic.co/t/how-to-perform-the-aggregation-with-doc-count-value/173946 "2019-03-26T14:19:14Z")

</div>

is there any way to perform the aggregation for the string filed, I tried with bucket\_script, but it required for the int or number value. note: I need to perform the arithmetic operation based on the doc\_count Reques…

---

## [Unavailable\_shards\_exception and primary shard is not active](https://discuss.elastic.co/t/unavailable-shards-exception-and-primary-shard-is-not-active/173899)

<div class="topic-metadata">

**Author:** [@nageswar](https://discuss.elastic.co/u/nageswar)\
**Replies:** 10\
**Last updated:** [March 26, 2019, 12:40pm UTC](https://discuss.elastic.co/t/unavailable-shards-exception-and-primary-shard-is-not-active/173899 "2019-03-26T12:40:17Z")

</div>

Hi All, My Elasticsearch data is keep getting corrupted and latest data will be not available. For this temporarily we are solving like if you delete the last date data then it allows logstash to send the data into el…

---

## [Cannot connect to remote ElasticSearch server](https://discuss.elastic.co/t/cannot-connect-to-remote-elasticsearch-server/173308)

<div class="topic-metadata">

**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\
**Replies:** 42\
**Last updated:** [March 26, 2019, 2:14pm UTC](https://discuss.elastic.co/t/cannot-connect-to-remote-elasticsearch-server/173308 "2019-03-26T14:14:39Z")

</div>

I am aware that a similar question was posted back in 2015, but the answers there unfortunately do not help me. On my remote Windows 10 server (on which Elasticsearch 6.6.2 is installed), I have added an inbound securit…

---

## [How to extract my Search Query Responses into my Desktop](https://discuss.elastic.co/t/how-to-extract-my-search-query-responses-into-my-desktop/173904)

<div class="topic-metadata">

**Author:** [@samyo](https://discuss.elastic.co/u/samyo)\
**Replies:** 0\
**Last updated:** [March 26, 2019, 10:51am UTC](https://discuss.elastic.co/t/how-to-extract-my-search-query-responses-into-my-desktop/173904 "2019-03-26T10:51:11Z")

</div>

Hello Folks, Can Sombody help me , how can i get the result (responses ) of my Search Query wich i wrote on " Kibana Dev Tools Console " into Desktop (Something like extract the Query Result), Example, GET test-2019…

---

## [Querying Elastic Search from App](https://discuss.elastic.co/t/querying-elastic-search-from-app/173714)

<div class="topic-metadata">

**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\
**Replies:** 5\
**Last updated:** [March 26, 2019, 1:42pm UTC](https://discuss.elastic.co/t/querying-elastic-search-from-app/173714 "2019-03-26T13:42:28Z")

</div>

Whats the best way to query elasticsearch from a custom app? What I really want to show, is the discover functionality but more restrictive with filters. For example when I have an account number 12345678, I would like t…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1351)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1353)
