# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1405 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1406 --- ## [Elastic Search Aggregations Issue, first aggregate and then perform search on the buckets](https://discuss.elastic.co/t/elastic-search-aggregations-issue-first-aggregate-and-then-perform-search-on-the-buckets/167014)
**Author:** [@ggedala1](https://discuss.elastic.co/u/ggedala1)\ **Replies:** 0\ **Last updated:** [February 4, 2019, 7:08pm UTC](https://discuss.elastic.co/t/elastic-search-aggregations-issue-first-aggregate-and-then-perform-search-on-the-buckets/167014 "2019-02-04T19:08:39Z")
Hello All, I have been working on getting an use case executed, basically, we will have multiple versions of a given record and we differentiate them using the date they were inserted. use case is that we have to get th… --- ## [Exiting java.lang.OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/exiting-java-lang-outofmemoryerror-java-heap-space/166926)
**Author:** [@53dd57e6c0d57177c379](https://discuss.elastic.co/u/53dd57e6c0d57177c379)\ **Replies:** 9\ **Last updated:** [February 4, 2019, 6:15pm UTC](https://discuss.elastic.co/t/exiting-java-lang-outofmemoryerror-java-heap-space/166926 "2019-02-04T18:15:29Z")
\[2019-02-04T12:33:54,521\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] fatal error in thread \[elasticsearch\[8mTx-ra\]\[search\]\[T#7\]\], exiting java.lang.OutOfMemoryError: Java heap space Please help me solve this … --- ## [Upgrade from \<6.0 -\>6.4 fails with ES\_PATH\_CONF must be set to the configuration path chown: cannot access ‘/etc/elasticsearch/elasticsearch.keystore’: No such file or directory](https://discuss.elastic.co/t/upgrade-from-6-0-6-4-fails-with-es-path-conf-must-be-set-to-the-configuration-path-chown-cannot-access-etc-elasticsearch-elasticsearch-keystore-no-such-file-or-directory/166803)
**Author:** [@lvempati](https://discuss.elastic.co/u/lvempati)\ **Replies:** 3\ **Last updated:** [February 4, 2019, 5:21pm UTC](https://discuss.elastic.co/t/upgrade-from-6-0-6-4-fails-with-es-path-conf-must-be-set-to-the-configuration-path-chown-cannot-access-etc-elasticsearch-elasticsearch-keystore-no-such-file-or-directory/166803 "2019-02-04T17:21:13Z")
Hello, This problem has been raised multiple times but no resolution on any of the threads. I am hoping to get resolution on this one. On CentOS 7, RPM update from a version \< 6.0 -\> 6.4 fails with this message and ser… --- ## [\[term\] query malformed, no start\_object after query name](https://discuss.elastic.co/t/term-query-malformed-no-start-object-after-query-name/166997)
**Author:** [@ngw](https://discuss.elastic.co/u/ngw)\ **Replies:** 0\ **Last updated:** [February 4, 2019, 4:54pm UTC](https://discuss.elastic.co/t/term-query-malformed-no-start-object-after-query-name/166997 "2019-02-04T16:54:44Z")
Hi \*, I have a query that should be rather simple, but for the hell of it I can't get the syntax right. I want to multi\_match on several fields, and filter the resultset on a single field: GET \_search { "query": { … --- ## [Does document ID length affect performance/heap?](https://discuss.elastic.co/t/does-document-id-length-affect-performance-heap/166965)
**Author:** [@gskema](https://discuss.elastic.co/u/gskema)\ **Replies:** 1\ **Last updated:** [February 4, 2019, 4:36pm UTC](https://discuss.elastic.co/t/does-document-id-length-affect-performance-heap/166965 "2019-02-04T16:36:08Z")
Let's say we have 300 million documents. An average document ID looks like this: aaaaaaaaaaaaaaaa\_000000000\_0\_0\_0\_0 There are thousands of MGET operations every second for these documents. We wanted to change the doc… --- ## [Running elaticsearch with seperate user and group](https://discuss.elastic.co/t/running-elaticsearch-with-seperate-user-and-group/166975)
**Author:** [@460](https://discuss.elastic.co/u/460)\ **Replies:** 1\ **Last updated:** [February 4, 2019, 3:18pm UTC](https://discuss.elastic.co/t/running-elaticsearch-with-seperate-user-and-group/166975 "2019-02-04T15:18:49Z")
Hello Team, I have tried to run elasticsearch 6.4.0 with a seperate user and group. But it was not working fine. Can you please help me out. Regards, Likhith. --- ## [Generating duplicate email alerts using watchers](https://discuss.elastic.co/t/generating-duplicate-email-alerts-using-watchers/166979)
**Author:** [@Rajeev\_Prakash](https://discuss.elastic.co/u/Rajeev_Prakash)\ **Replies:** 0\ **Last updated:** [February 4, 2019, 3:10pm UTC](https://discuss.elastic.co/t/generating-duplicate-email-alerts-using-watchers/166979 "2019-02-04T15:10:37Z")
I configure the watcher to send an email alert for every day,but it is generating two email alerts at milliseconds of change in time on the same day. Please help me to solve this issue. --- ## [Unable to create indice with correct number of shard and replica](https://discuss.elastic.co/t/unable-to-create-indice-with-correct-number-of-shard-and-replica/166934)
**Author:** [@Loudone](https://discuss.elastic.co/u/Loudone)\ **Replies:** 5\ **Last updated:** [February 4, 2019, 2:42pm UTC](https://discuss.elastic.co/t/unable-to-create-indice-with-correct-number-of-shard-and-replica/166934 "2019-02-04T14:42:24Z")
Hello all, I'm currently trying to set dynamic template in order to set in setting part the number of shard and number of replica my dynamic template is set like that: { "test\_log" : { "order" : 0, "version" : 1, … --- ## [Keyword fields, Graylog and ElastAlert](https://discuss.elastic.co/t/keyword-fields-graylog-and-elastalert/165877)
**Author:** [@shortstack](https://discuss.elastic.co/u/shortstack)\ **Replies:** 8\ **Last updated:** [February 4, 2019, 1:52pm UTC](https://discuss.elastic.co/t/keyword-fields-graylog-and-elastalert/165877 "2019-02-04T13:52:27Z")
have graylog in front of elasticsearch, getting the following error when trying to generate quick values: Unable to perform search query\\n\\nFielddata is disabled on text fields by default. Set fielddata=true on \[param\_n… --- ## [Deleting nested field object with hyphens via inline scripting](https://discuss.elastic.co/t/deleting-nested-field-object-with-hyphens-via-inline-scripting/164648)
**Author:** [@kamharrah](https://discuss.elastic.co/u/kamharrah)\ **Replies:** 1\ **Last updated:** [February 4, 2019, 1:38pm UTC](https://discuss.elastic.co/t/deleting-nested-field-object-with-hyphens-via-inline-scripting/164648 "2019-02-04T13:38:18Z")
This is an issue I am running into with our v2.4 cluster (using groovy), but I can also reproduce the error in v5.6 (using painless). When I delete fields inside of an object, I send a request to the Update API with an … --- ## [Identify hot shards](https://discuss.elastic.co/t/identify-hot-shards/166961)
**Author:** [@Bukhtawar\_Khan](https://discuss.elastic.co/u/Bukhtawar_Khan)\ **Replies:** 0\ **Last updated:** [February 4, 2019, 1:03pm UTC](https://discuss.elastic.co/t/identify-hot-shards/166961 "2019-02-04T13:03:16Z")
Definition of a hot shard- The shard that consumes high resource consumption on a node i.e JVM/CPU. The /\_index/stats API doesn't clearly account for JVM(field-data/node/shard cache) vs off-heap consumption(segment/doc v… --- ## [Elasticsearch CPU performance](https://discuss.elastic.co/t/elasticsearch-cpu-performance/166958)
**Author:** [@pabloborh](https://discuss.elastic.co/u/pabloborh)\ **Replies:** 0\ **Last updated:** [February 4, 2019, 12:45pm UTC](https://discuss.elastic.co/t/elasticsearch-cpu-performance/166958 "2019-02-04T12:45:09Z")
Hi, I was using elasticsearch with APM and all worked fine. Now I've introduced filebeat and data nodes consume around 1~0,6 cpu all time. I have elasticsearch deployed inside kubernetes. I have 2 ingest nodes with 3G h… --- ## [Use phrase suggester over multiple indices](https://discuss.elastic.co/t/use-phrase-suggester-over-multiple-indices/166956)
**Author:** [@jettro](https://discuss.elastic.co/u/jettro)\ **Replies:** 0\ **Last updated:** [February 4, 2019, 12:34pm UTC](https://discuss.elastic.co/t/use-phrase-suggester-over-multiple-indices/166956 "2019-02-04T12:34:12Z")
Hi, I am trying to understand what happens in the PhraseSuggester. There is something tricky when working with multiple indices. From my experiments, adding more documents to an index can result in missing suggestions. … --- ## [How to search phrase in document on the basis of matched score](https://discuss.elastic.co/t/how-to-search-phrase-in-document-on-the-basis-of-matched-score/166954)
**Author:** [@sachinpatil80](https://discuss.elastic.co/u/sachinpatil80)\ **Replies:** 0\ **Last updated:** [February 4, 2019, 12:19pm UTC](https://discuss.elastic.co/t/how-to-search-phrase-in-document-on-the-basis-of-matched-score/166954 "2019-02-04T12:19:16Z")
Hi, i am looking for a solution where i can search a document in elasticsearch based on a match score of a phrase. Please help. --- ## [Prepare SearchRequest for exact search on multiple fields \[Java\]](https://discuss.elastic.co/t/prepare-searchrequest-for-exact-search-on-multiple-fields-java/166909)
**Author:** [@ravi089](https://discuss.elastic.co/u/ravi089)\ **Replies:** 7\ **Last updated:** [February 4, 2019, 12:04pm UTC](https://discuss.elastic.co/t/prepare-searchrequest-for-exact-search-on-multiple-fields-java/166909 "2019-02-04T12:04:49Z")
I want to form a search request for exact match on multiple fields. Now match query returns all matches whereas term query does the search on inverted index. SearchRequest searchRequest = new SearchRequest(ES\_INDEX); … --- ## [How to install Fs Crawler in ubuntu?](https://discuss.elastic.co/t/how-to-install-fs-crawler-in-ubuntu/166932)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 1\ **Last updated:** [February 4, 2019, 12:02pm UTC](https://discuss.elastic.co/t/how-to-install-fs-crawler-in-ubuntu/166932 "2019-02-04T12:02:29Z")
Can any one let me know how to setup FsCrawler in ubuntu and how to index pdf or text files to elasticsearch. Thanks in advance Kartheek --- ## [When starting elasticsearch - 'can not run elasticsearch as root'](https://discuss.elastic.co/t/when-starting-elasticsearch-can-not-run-elasticsearch-as-root/166914)
**Author:** [@Amitittech](https://discuss.elastic.co/u/Amitittech)\ **Replies:** 3\ **Last updated:** [February 4, 2019, 11:55am UTC](https://discuss.elastic.co/t/when-starting-elasticsearch-can-not-run-elasticsearch-as-root/166914 "2019-02-04T11:55:33Z")
How to resolve ?? I am centos 6... just removed elasticsearch older version and installed v6.5.4 now trying to start service as - \[root@localhost elasticsearch\]# bin/elasticsearch & but getting error as - \[1\] 10317 … --- ## [Doubt in conflicting version behavior](https://discuss.elastic.co/t/doubt-in-conflicting-version-behavior/166924)
**Author:** [@joaquim](https://discuss.elastic.co/u/joaquim)\ **Replies:** 5\ **Last updated:** [February 4, 2019, 11:28am UTC](https://discuss.elastic.co/t/doubt-in-conflicting-version-behavior/166924 "2019-02-04T11:28:28Z")
Hi, I'am having conflit's and just wanna know internal behavior of elastic that cause conflit's. I'am using Java API 5.1.1 for load of documents to elastic. I use bulk upsert and after a cicle with update with a scrip… --- ## [Writing data on Replica Shards is copied from Primary shard?](https://discuss.elastic.co/t/writing-data-on-replica-shards-is-copied-from-primary-shard/166919)
**Author:** [@TomerA](https://discuss.elastic.co/u/TomerA)\ **Replies:** 8\ **Last updated:** [February 4, 2019, 10:54am UTC](https://discuss.elastic.co/t/writing-data-on-replica-shards-is-copied-from-primary-shard/166919 "2019-02-04T10:54:17Z")
Hi I want to understand if when writing data on the Replica Shards is the data being copied from the Primary Shard itself or is the data provided again from the Master node? I understand that Elasticsearch may want to w… --- ## [Is searches cancellation with Task API more effective than setting request timeout?](https://discuss.elastic.co/t/is-searches-cancellation-with-task-api-more-effective-than-setting-request-timeout/166938)
**Author:** [@Ivan\_Bokii](https://discuss.elastic.co/u/Ivan_Bokii)\ **Replies:** 0\ **Last updated:** [February 4, 2019, 10:29am UTC](https://discuss.elastic.co/t/is-searches-cancellation-with-task-api-more-effective-than-setting-request-timeout/166938 "2019-02-04T10:29:25Z")
Hello dear people, I'm doing some tests around protecting an Elasticsearch cluster from long-running queries, and my results show that settings request timeout to, let's say, 20s is not the same as attempting to cancel … --- ## [Pricing in elasticcloud](https://discuss.elastic.co/t/pricing-in-elasticcloud/166931)
**Author:** [@AlonKerem](https://discuss.elastic.co/u/AlonKerem)\ **Replies:** 1\ **Last updated:** [February 4, 2019, 10:14am UTC](https://discuss.elastic.co/t/pricing-in-elasticcloud/166931 "2019-02-04T10:14:27Z")
hi, i'm a trial user at elasticcloud, i've started the trial following the advertised deployments low as 16$ now i'm in the Create a deployment screen and i try to make my deployment cost effective by using 1 zone with… --- ## [Debug Elasticsearch with IntelliJ](https://discuss.elastic.co/t/debug-elasticsearch-with-intellij/110942)
**Author:** [@lukekingbru](https://discuss.elastic.co/u/lukekingbru)\ **Replies:** 3\ **Last updated:** [February 4, 2019, 9:30am UTC](https://discuss.elastic.co/t/debug-elasticsearch-with-intellij/110942 "2019-02-04T09:30:48Z")
How to config Program arguments in IntelliJ ? I got this error when I try to run: ERROR: the system property \[es.path.conf\] must be set --- ## [Field has exceeded the allowed maximum of \[1000000\] set for the next major Elastic version](https://discuss.elastic.co/t/field-has-exceeded-the-allowed-maximum-of-1000000-set-for-the-next-major-elastic-version/166920)
**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\ **Replies:** 0\ **Last updated:** [February 4, 2019, 8:54am UTC](https://discuss.elastic.co/t/field-has-exceeded-the-allowed-maximum-of-1000000-set-for-the-next-major-elastic-version/166920 "2019-02-04T08:54:57Z")
Hello, I use Elasticsearch and Logstash 6.5.4 for storing log data. One application also stores Requests/Responses from webservices. To store those fields I have created a custom mapping, part of it: { "mapping": { … --- ## [Dealing with many unique fields](https://discuss.elastic.co/t/dealing-with-many-unique-fields/165842)
**Author:** [@itamarkr](https://discuss.elastic.co/u/itamarkr)\ **Replies:** 2\ **Last updated:** [February 4, 2019, 7:46am UTC](https://discuss.elastic.co/t/dealing-with-many-unique-fields/165842 "2019-02-04T07:46:30Z")
Hi, I have a system that writes it's logs to elastic for a while now. We have a feature in the system that allows the user to enter tags. The tags can have any name and any value (both are strings). We want to start … --- ## [Security plugin not responding on time](https://discuss.elastic.co/t/security-plugin-not-responding-on-time/166910)
**Author:** [@Nithani25](https://discuss.elastic.co/u/Nithani25)\ **Replies:** 0\ **Last updated:** [February 4, 2019, 7:12am UTC](https://discuss.elastic.co/t/security-plugin-not-responding-on-time/166910 "2019-02-04T07:12:50Z")
HI Team, I was successful in setting up my production instance , which consists of 3 masters, 2 data's and 1 client and setup was working as expected for quite some time now, However, I am getting strnge page response … --- ## [Policies](https://discuss.elastic.co/t/policies/166906)
**Author:** [@akhilsai1499](https://discuss.elastic.co/u/akhilsai1499)\ **Replies:** 0\ **Last updated:** [February 4, 2019, 6:54am UTC](https://discuss.elastic.co/t/policies/166906 "2019-02-04T06:54:56Z")
Hi Elasticsearch team If i am implementing the policy in latest released version of elasticsearch 6.6 still i cant implement my policy Please see my code PUT \_template/my { "index\_patterns": \["abc-\*"\], "settings":… --- ## [How to expose elasticsearch via http://my-domain.com:9200](https://discuss.elastic.co/t/how-to-expose-elasticsearch-via-http-my-domain-com-9200/166878)
**Author:** [@Amitittech](https://discuss.elastic.co/u/Amitittech)\ **Replies:** 5\ **Last updated:** [February 4, 2019, 6:34am UTC](https://discuss.elastic.co/t/how-to-expose-elasticsearch-via-http-my-domain-com-9200/166878 "2019-02-04T06:34:12Z")
Hi, A few days ago, i installed elasticsearch. it is working well with localhost:9200 with curl command showing as - { "name" : "2Ui6lx9", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "kBm0cR\_tTmG3vl3R4sd2eg… --- ## [We couldn't activate monitoring](https://discuss.elastic.co/t/we-couldnt-activate-monitoring/166905)
**Author:** [@DavidLevi](https://discuss.elastic.co/u/DavidLevi)\ **Replies:** 0\ **Last updated:** [February 4, 2019, 6:17am UTC](https://discuss.elastic.co/t/we-couldnt-activate-monitoring/166905 "2019-02-04T06:17:41Z")
Hi guys, I am a newbee in ELK. My Kiabana was working last week but not anymore. I see this on Kibana. How can I troubleshoot this error? No monitoring data found. Try setting the time filter to "Last 1 hour" or check … --- ## [Zen-disco-receive - master node](https://discuss.elastic.co/t/zen-disco-receive-master-node/166902)
**Author:** [@sujatha\_g](https://discuss.elastic.co/u/sujatha_g)\ **Replies:** 0\ **Last updated:** [February 4, 2019, 5:53am UTC](https://discuss.elastic.co/t/zen-disco-receive-master-node/166902 "2019-02-04T05:53:44Z")
I have following cluster configuration: 3 data nodes 3 master nodes 2 client nodes. On one of my data node i have got this exception while indexing. \[2019-02-03T18:10:45,242\]\[WARN \]\[o.e.g.DanglingIndicesState\] \[dV6Mi… --- ## [Unable to print CPU usage values in Watcher email alert](https://discuss.elastic.co/t/unable-to-print-cpu-usage-values-in-watcher-email-alert/166900)
**Author:** [@AjitR](https://discuss.elastic.co/u/AjitR)\ **Replies:** 0\ **Last updated:** [February 4, 2019, 5:34am UTC](https://discuss.elastic.co/t/unable-to-print-cpu-usage-values-in-watcher-email-alert/166900 "2019-02-04T05:34:08Z")
Hi All, I am new to Elastic (v. 6.5) and got stuck in watcher email alert. I have below two issues, Email is printing only server names and not its cpu usage. Threshold filter of 70% not getting applied. Any help… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1404) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1406)