# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1406

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1407

---

## [Cannot access elasticsearch from my browser and curl command not working for public ip from server terminal](https://discuss.elastic.co/t/cannot-access-elasticsearch-from-my-browser-and-curl-command-not-working-for-public-ip-from-server-terminal/166881)

<div class="topic-metadata">

**Author:** [@Arvind\_Singh](https://discuss.elastic.co/u/Arvind_Singh)\
**Replies:** 21\
**Last updated:** [February 4, 2019, 5:07am UTC](https://discuss.elastic.co/t/cannot-access-elasticsearch-from-my-browser-and-curl-command-not-working-for-public-ip-from-server-terminal/166881 "2019-02-04T05:07:10Z")

</div>

Hi, Hope anyone helps me here... I am having two ec2 instances and one of the instance having elasticsearch sucessfully running and accessible from browser. However issue with second instance where i have elasticsearch…

---

## [Spark Bulk Indexing causes downtime](https://discuss.elastic.co/t/spark-bulk-indexing-causes-downtime/166892)

<div class="topic-metadata">

**Author:** [@cfeenstra67](https://discuss.elastic.co/u/cfeenstra67)\
**Replies:** 1\
**Last updated:** [February 4, 2019, 5:07am UTC](https://discuss.elastic.co/t/spark-bulk-indexing-causes-downtime/166892 "2019-02-04T05:07:04Z")

</div>

Currently we have two clusters--one much larger, 15 nodes with 61gb memory each. The second is much smaller, just one node with 8gb memory, but we see very similar behavior with both. On each cluster, we are maintaining…

---

## [Request timeout on longer duration in Discover app of Kibana](https://discuss.elastic.co/t/request-timeout-on-longer-duration-in-discover-app-of-kibana/165933)

<div class="topic-metadata">

**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\
**Replies:** 4\
**Last updated:** [January 29, 2019, 9:31am UTC](https://discuss.elastic.co/t/request-timeout-on-longer-duration-in-discover-app-of-kibana/165933 "2019-01-29T09:31:00Z")

</div>

Hi, If I select a time-range of greater than 7 days (Example: Set it to 15 days), I receive a request timeout in Kibana. I have already increased the elasticsearch.timeout value to 10x its original value. elasticsearc…

---

## [Kibana can not use x-pack feature](https://discuss.elastic.co/t/kibana-can-not-use-x-pack-feature/166849)

<div class="topic-metadata">

**Author:** [@chenjienn](https://discuss.elastic.co/u/chenjienn)\
**Replies:** 13\
**Last updated:** [February 4, 2019, 3:16am UTC](https://discuss.elastic.co/t/kibana-can-not-use-x-pack-feature/166849 "2019-02-04T03:16:30Z")

</div>

I have set up elasticsearch cluster and try to use kibana, but it seems the kibana can not obtained the x-pack information here is my kibana and es config server.host: "10.18.1.50" server.name: "mdw\_dev" elasticsea…

---

## [Beats - Kafka - Elasticsearch](https://discuss.elastic.co/t/beats-kafka-elasticsearch/166888)

<div class="topic-metadata">

**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\
**Replies:** 1\
**Last updated:** [February 4, 2019, 2:53am UTC](https://discuss.elastic.co/t/beats-kafka-elasticsearch/166888 "2019-02-04T02:53:17Z")

</div>

Does anyone here tried to stream data from beats to elasticsearch thru kafka? Is this feasible? Thanks

---

## [Elastic 5.4 - watermarks and multiple disks issues](https://discuss.elastic.co/t/elastic-5-4-watermarks-and-multiple-disks-issues/166826)

<div class="topic-metadata">

**Author:** [@bytemedwb](https://discuss.elastic.co/u/bytemedwb)\
**Replies:** 4\
**Last updated:** [February 3, 2019, 9:45pm UTC](https://discuss.elastic.co/t/elastic-5-4-watermarks-and-multiple-disks-issues/166826 "2019-02-03T21:45:09Z")

</div>

All: I searched this list and only found one message from 2015 related to this and it was not answered. I have an elasticsearch 5.4 cluster. It has 20 data nodes with 5 of them also serving as master nodes. Each no…

---

## [Accidentally deleted the \_state folder of the index](https://discuss.elastic.co/t/accidentally-deleted-the-state-folder-of-the-index/166873)

<div class="topic-metadata">

**Author:** [@Shubhankar\_Sarda](https://discuss.elastic.co/u/Shubhankar_Sarda)\
**Replies:** 3\
**Last updated:** [February 3, 2019, 8:04pm UTC](https://discuss.elastic.co/t/accidentally-deleted-the-state-folder-of-the-index/166873 "2019-02-03T20:04:21Z")

</div>

During an upgrade process I accidentally deleted the \_state folder of an index. Now it shows the following error on starting elasticsearch \[2019-02-03T17:06:13,247\]\[WARN \]\[o.e.c.u.IndexFolderUpgrader\] \[/var/lib/elastic…

---

## [Aggregate counting/sum query](https://discuss.elastic.co/t/aggregate-counting-sum-query/164951)

<div class="topic-metadata">

**Author:** [@ninesalt](https://discuss.elastic.co/u/ninesalt)\
**Replies:** 4\
**Last updated:** [February 3, 2019, 4:33pm UTC](https://discuss.elastic.co/t/aggregate-counting-sum-query/164951 "2019-02-03T16:33:34Z")

</div>

I'm trying to figure out how to sum up many different counts in an elasticsearch index. A document in the index looks like this: { '\_source': { 'my\_field': 'Robert and Alex went with Robert to play in London and t…

---

## [Unknown field , parser not found](https://discuss.elastic.co/t/unknown-field-parser-not-found/166857)

<div class="topic-metadata">

**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\
**Replies:** 1\
**Last updated:** [February 3, 2019, 4:43pm UTC](https://discuss.elastic.co/t/unknown-field-parser-not-found/166857 "2019-02-03T16:43:09Z")

</div>

When I follow the instructions in the getting started with elasticsearch video on https://www.elastic.co/webinars/getting-started-elasticsearch. I found that: "type": "x\_content\_parse\_exception", "reason": "\[10:9\] \[fie…

---

## [Search from vs scroll](https://discuss.elastic.co/t/search-from-vs-scroll/166869)

<div class="topic-metadata">

**Author:** [@lshraga](https://discuss.elastic.co/u/lshraga)\
**Replies:** 0\
**Last updated:** [February 3, 2019, 2:56pm UTC](https://discuss.elastic.co/t/search-from-vs-scroll/166869 "2019-02-03T14:56:06Z")

</div>

Hi, I have a use case which our customers wants to get the data in chunks. Currently, I have 2 APIs for that purpose: one which use scroll from & size and second api which is scroll with sort of \_doc, and I would like…

---

## [Count aggregation in kibana](https://discuss.elastic.co/t/count-aggregation-in-kibana/166865)

<div class="topic-metadata">

**Author:** [@ninesalt](https://discuss.elastic.co/u/ninesalt)\
**Replies:** 0\
**Last updated:** [February 3, 2019, 1:26pm UTC](https://discuss.elastic.co/t/count-aggregation-in-kibana/166865 "2019-02-03T13:26:11Z")

</div>

I have a bunch of documents saved in elasticsearch and they have the below field. conjunctions: \[and, and, and, ..\] The field is saved as conjunctions and conjunctions.keyword and according to the index pattern pag…

---

## [Setting up 2 nodes on same machine](https://discuss.elastic.co/t/setting-up-2-nodes-on-same-machine/166858)

<div class="topic-metadata">

**Author:** [@Filip\_Pavlic](https://discuss.elastic.co/u/Filip_Pavlic)\
**Replies:** 2\
**Last updated:** [February 3, 2019, 9:55am UTC](https://discuss.elastic.co/t/setting-up-2-nodes-on-same-machine/166858 "2019-02-03T09:55:18Z")

</div>

Hi, I have read all that I could find about setting up two nodes, searched entire internet but I'm failing to set two nodes in same cluster on dev machine (test enviroment). What did I miss ? I have 2 elastic installat…

---

## [How to use remove processor in php](https://discuss.elastic.co/t/how-to-use-remove-processor-in-php/166856)

<div class="topic-metadata">

**Author:** [@rajkumar\_E1](https://discuss.elastic.co/u/rajkumar_E1)\
**Replies:** 0\
**Last updated:** [February 3, 2019, 8:27am UTC](https://discuss.elastic.co/t/how-to-use-remove-processor-in-php/166856 "2019-02-03T08:27:13Z")

</div>

I need to remove fields in our documents, elastic search have remove process to remove multiple fields in our documents, please suggest me how to remove multiple fields using curl and php. example I need to remove name…

---

## [Elasticsearch document version is not available?](https://discuss.elastic.co/t/elasticsearch-document-version-is-not-available/166778)

<div class="topic-metadata">

**Author:** [@lvic](https://discuss.elastic.co/u/lvic)\
**Replies:** 1\
**Last updated:** [February 3, 2019, 1:56am UTC](https://discuss.elastic.co/t/elasticsearch-document-version-is-not-available/166778 "2019-02-03T01:56:40Z")

</div>

ES documentation states that every document is versioned, but when i get document via REST API i don't see attribute \_version, for example: http://eshost:9200/my\_index/\_search?q=my\_id:xxxx-xxxx-xxxx-xxxx returns: { "…

---

## [ES version 2.1.1 - How to delete the oldest data sitting in the ES index](https://discuss.elastic.co/t/es-version-2-1-1-how-to-delete-the-oldest-data-sitting-in-the-es-index/166781)

<div class="topic-metadata">

**Author:** [@Neni](https://discuss.elastic.co/u/Neni)\
**Replies:** 1\
**Last updated:** [February 3, 2019, 1:49am UTC](https://discuss.elastic.co/t/es-version-2-1-1-how-to-delete-the-oldest-data-sitting-in-the-es-index/166781 "2019-02-03T01:49:11Z")

</div>

Could you please let me know the best options to delete the oldest data /documents that was created 2 to 3 years ago and the data is still in ES index. Thank you.

---

## [Index Error - Lifecycle Management 6.6 - Elastic Cloud](https://discuss.elastic.co/t/index-error-lifecycle-management-6-6-elastic-cloud/166838)

<div class="topic-metadata">

**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\
**Replies:** 2\
**Last updated:** [February 3, 2019, 12:47am UTC](https://discuss.elastic.co/t/index-error-lifecycle-management-6-6-elastic-cloud/166838 "2019-02-03T00:47:29Z")

</div>

I've updated our dev cluster to 6.6 in Elastic Cloud and follow documentation to try and create an Index Life Cycle Policy. https://www.elastic.co/guide/en/elasticsearch/reference/current/ilm-put-lifecycle.html Message …

---

## [Adding a new node to existing cluster](https://discuss.elastic.co/t/adding-a-new-node-to-existing-cluster/166830)

<div class="topic-metadata">

**Author:** [@Kamesh\_Pratapa](https://discuss.elastic.co/u/Kamesh_Pratapa)\
**Replies:** 1\
**Last updated:** [February 3, 2019, 12:27am UTC](https://discuss.elastic.co/t/adding-a-new-node-to-existing-cluster/166830 "2019-02-03T00:27:20Z")

</div>

Hi all, I have a 5 node elasticsearch cluster (2 client and 3 data nodes,all 3 are master elgible nodes). The cluster is running in Kubernetes. Now i wanted to scale the ES cluster which i am adding a new minion node …

---

## [Accidentally deleted translog for index](https://discuss.elastic.co/t/accidentally-deleted-translog-for-index/166834)

<div class="topic-metadata">

**Author:** [@jtalmi](https://discuss.elastic.co/u/jtalmi)\
**Replies:** 1\
**Last updated:** [February 3, 2019, 12:07am UTC](https://discuss.elastic.co/t/accidentally-deleted-translog-for-index/166834 "2019-02-03T00:07:00Z")

</div>

This is related to a previous issue I encountered where memory issues caused a corrupt index due to empty checkpoints in the translog: https://discuss.elastic.co/t/failed-shard-after-ooming-corrupt-index/155612 I encoun…

---

## [How to upgrade ES from 6.4.2 to 6.5.4](https://discuss.elastic.co/t/how-to-upgrade-es-from-6-4-2-to-6-5-4/166836)

<div class="topic-metadata">

**Author:** [@Amitittech](https://discuss.elastic.co/u/Amitittech)\
**Replies:** 1\
**Last updated:** [February 2, 2019, 10:43pm UTC](https://discuss.elastic.co/t/how-to-upgrade-es-from-6-4-2-to-6-5-4/166836 "2019-02-02T22:43:58Z")

</div>

I am using elasticsearch on production server i.e. centos6. Now i am going to set up kibana also, so for kibana compatibility, i want to upgrade elasticsearch from 6.4.2 to 6.5.4. Please help me !! Thank you.

---

## [Return text with duplicate tokens highlighted](https://discuss.elastic.co/t/return-text-with-duplicate-tokens-highlighted/166831)

<div class="topic-metadata">

**Author:** [@1fmusic](https://discuss.elastic.co/u/1fmusic)\
**Replies:** 0\
**Last updated:** [February 2, 2019, 7:06pm UTC](https://discuss.elastic.co/t/return-text-with-duplicate-tokens-highlighted/166831 "2019-02-02T19:06:23Z")

</div>

I would like to be able to view a document's text (the 'notes' field) that has the duplicated tokens highlighted. (not the original token, just the duplicate). This should only be performed on each document (i.e. I don't…

---

## [Looking for shell based elasticsearch client or something similar to curator run in command line](https://discuss.elastic.co/t/looking-for-shell-based-elasticsearch-client-or-something-similar-to-curator-run-in-command-line/166009)

<div class="topic-metadata">

**Author:** [@morningspace](https://discuss.elastic.co/u/morningspace)\
**Replies:** 6\
**Last updated:** [February 2, 2019, 3:53pm UTC](https://discuss.elastic.co/t/looking-for-shell-based-elasticsearch-client-or-something-similar-to-curator-run-in-command-line/166009 "2019-02-02T15:53:29Z")

</div>

Hi All, I'm curious whether there's any shell based elasticsearch client implementation or something similar to curator exists in community. I can see there are many types of elasticsearch clients documented at https://…

---

## [Problem with ingest node pipeline setup - java.lang.Integer cannot be cast to class java.lang.Long](https://discuss.elastic.co/t/problem-with-ingest-node-pipeline-setup-java-lang-integer-cannot-be-cast-to-class-java-lang-long/166490)

<div class="topic-metadata">

**Author:** [@yucheng](https://discuss.elastic.co/u/yucheng)\
**Replies:** 1\
**Last updated:** [February 2, 2019, 2:14pm UTC](https://discuss.elastic.co/t/problem-with-ingest-node-pipeline-setup-java-lang-integer-cannot-be-cast-to-class-java-lang-long/166490 "2019-02-02T14:14:46Z")

</div>

Hi there, I was trying to use es(6.5) ingest node pipeline (instead of logstash) to extract info from filebeat (6.5) logs, however my pipeline (as following) seemed not work in simulation. POST \_ingest/pipeline/\_simula…

---

## [Collector \[index\_recovery\] timed out when collecting data](https://discuss.elastic.co/t/collector-index-recovery-timed-out-when-collecting-data/166821)

<div class="topic-metadata">

**Author:** [@vnallamothu](https://discuss.elastic.co/u/vnallamothu)\
**Replies:** 0\
**Last updated:** [February 2, 2019, 1:26pm UTC](https://discuss.elastic.co/t/collector-index-recovery-timed-out-when-collecting-data/166821 "2019-02-02T13:26:12Z")

</div>

Recently, we started to see this error in the logs of master nodes. After a series of this error messages, the cluster will remove one of the problematic data nodes. Thereafter automatically, it is adding the data node b…

---

## [Nested query mixed with parent query](https://discuss.elastic.co/t/nested-query-mixed-with-parent-query/165666)

<div class="topic-metadata">

**Author:** [@jenssc](https://discuss.elastic.co/u/jenssc)\
**Replies:** 2\
**Last updated:** [February 2, 2019, 12:11pm UTC](https://discuss.elastic.co/t/nested-query-mixed-with-parent-query/165666 "2019-02-02T12:11:27Z")

</div>

Hi I'm trying to do a nested query in combination with query on fields in the parent. But how do I figure out if a match hits the parent field in the same time as I get an inner hit? Best regards Jens Christiansen

---

## [Unassigned shards after node leave even when node is excluded](https://discuss.elastic.co/t/unassigned-shards-after-node-leave-even-when-node-is-excluded/166818)

<div class="topic-metadata">

**Author:** [@mats990](https://discuss.elastic.co/u/mats990)\
**Replies:** 0\
**Last updated:** [February 2, 2019, 11:55am UTC](https://discuss.elastic.co/t/unassigned-shards-after-node-leave-even-when-node-is-excluded/166818 "2019-02-02T11:55:50Z")

</div>

Hi, We are using ES version : 5.6.4 and have configured : "index.unassigned.node\_left.delayed\_timeout": "5m" We had some issues with a node in the cluster so we had to exclude it ( using Cluster-level shard allocati…

---

## [How to perform exact string match query in ES](https://discuss.elastic.co/t/how-to-perform-exact-string-match-query-in-es/166727)

<div class="topic-metadata">

**Author:** [@suripaleru](https://discuss.elastic.co/u/suripaleru)\
**Replies:** 3\
**Last updated:** [February 2, 2019, 11:44am UTC](https://discuss.elastic.co/t/how-to-perform-exact-string-match-query-in-es/166727 "2019-02-02T11:44:12Z")

</div>

How perform exact query match search operation on ES ? I tried below one but giving contains instead of matching. GET default-2018.\*/\_search { "query": { "match": { "message": "need to find exact message" } } } B…

---

## [Rolling indices for dynamic index names](https://discuss.elastic.co/t/rolling-indices-for-dynamic-index-names/166814)

<div class="topic-metadata">

**Author:** [@Eduardo](https://discuss.elastic.co/u/Eduardo)\
**Replies:** 0\
**Last updated:** [February 2, 2019, 9:10am UTC](https://discuss.elastic.co/t/rolling-indices-for-dynamic-index-names/166814 "2019-02-02T09:10:32Z")

</div>

Hi, I will be receiving documents into the cluster that I will not be aware of the index names. I want to leverage rolling indices either using ILM API and index templating or curator but the problem I see is I will rec…

---

## [Ethereum event logs (need to store values which are 2^256 -1 as integers - not text)](https://discuss.elastic.co/t/ethereum-event-logs-need-to-store-values-which-are-2-256-1-as-integers-not-text/166799)

<div class="topic-metadata">

**Author:** [@tpmccallum](https://discuss.elastic.co/u/tpmccallum)\
**Replies:** 1\
**Last updated:** [February 2, 2019, 2:29am UTC](https://discuss.elastic.co/t/ethereum-event-logs-need-to-store-values-which-are-2-256-1-as-integers-not-text/166799 "2019-02-02T02:29:42Z")

</div>

How does Elasticsearch store blockchain token amounts (which like Ethereum have 18 decimal places)? For example the uint256 variable in an Ethereum smart contract is 2^256 -1. So 1 ETH is physically stored in the block…

---

## [Elastic search time out error frequently when we do 'mget' operation for bulk records](https://discuss.elastic.co/t/elastic-search-time-out-error-frequently-when-we-do-mget-operation-for-bulk-records/166512)

<div class="topic-metadata">

**Author:** [@vinodanumarla](https://discuss.elastic.co/u/vinodanumarla)\
**Replies:** 3\
**Last updated:** [February 2, 2019, 2:35am UTC](https://discuss.elastic.co/t/elastic-search-time-out-error-frequently-when-we-do-mget-operation-for-bulk-records/166512 "2019-02-02T02:35:38Z")

</div>

I have written python code to get the data from elasticsearch using 'mget' function, but soon after my index count is reached to 360k docs, I'm getting elasticsearch timeout error frequently though I keep request\_timeout…

---

## [Crear nodo para replicas en elasticsearch](https://discuss.elastic.co/t/crear-nodo-para-replicas-en-elasticsearch/166788)

<div class="topic-metadata">

**Author:** [@j.beltran](https://discuss.elastic.co/u/j.beltran)\
**Replies:** 0\
**Last updated:** [February 1, 2019, 9:23pm UTC](https://discuss.elastic.co/t/crear-nodo-para-replicas-en-elasticsearch/166788 "2019-02-01T21:23:19Z")

</div>

Hola, realice un index en elastic pero su estado me aparece en amarillo, se que el problema es la replicación de dicho index, me gustaría saber como crear otro nodo para poder almacenar la replica, de antemano muchas gra…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1405)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1407)
