# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1407 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1408 --- ## [Index Lifecycle Management & Curator](https://discuss.elastic.co/t/index-lifecycle-management-curator/166310)
**Author:** [@jong99](https://discuss.elastic.co/u/jong99)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 8:08pm UTC](https://discuss.elastic.co/t/index-lifecycle-management-curator/166310 "2019-02-01T20:08:27Z")
I notice this morning with the release of 6.6.0 the introduction of Index Lifecycle Management which looks very interesting. Since this seems to be doing some of the same things that Elastic Curator already does, I was … --- ## [Shard distribuition](https://discuss.elastic.co/t/shard-distribuition/165660)
**Author:** [@Jonathan\_Mendenhall](https://discuss.elastic.co/u/Jonathan_Mendenhall)\ **Replies:** 2\ **Last updated:** [February 1, 2019, 5:43pm UTC](https://discuss.elastic.co/t/shard-distribuition/165660 "2019-02-01T17:43:19Z")
In our cluster we have a problem where the nature of the data means that some indices will have 80 primary shards each 10gb large, which other indices will have a single primary shard that is only 500mb. My experience w… --- ## [Aggregate field which should appeared in both matched documents?](https://discuss.elastic.co/t/aggregate-field-which-should-appeared-in-both-matched-documents/166764)
**Author:** [@cool\_arun](https://discuss.elastic.co/u/cool_arun)\ **Replies:** 0\ **Last updated:** [February 1, 2019, 5:27pm UTC](https://discuss.elastic.co/t/aggregate-field-which-should-appeared-in-both-matched-documents/166764 "2019-02-01T17:27:38Z")
i have documents like below in my books index. { id: 1, "title": "Story of middle man" "category": \['kids', 'comedy', 'action'\] } { id: 2, title: "The story of young adult", category: \['adult', 'region… --- ## [Elasticsearch cluster IP change without downtime](https://discuss.elastic.co/t/elasticsearch-cluster-ip-change-without-downtime/165638)
**Author:** [@cciaccio](https://discuss.elastic.co/u/cciaccio)\ **Replies:** 3\ **Last updated:** [February 1, 2019, 4:45pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-ip-change-without-downtime/165638 "2019-02-01T16:45:43Z")
Hello, I'm running a cluster with: 2 coordinator nodes 3 master nodes 13 data nodes Version 6.1.3. Each shard in the cluster has 1 replica. I need to change the IP of all the nodes. Is it possible to do it without… --- ## [Synced flush and keep indexing on primary](https://discuss.elastic.co/t/synced-flush-and-keep-indexing-on-primary/166197)
**Author:** [@Matteo\_Grolla](https://discuss.elastic.co/u/Matteo_Grolla)\ **Replies:** 12\ **Last updated:** [February 1, 2019, 4:34pm UTC](https://discuss.elastic.co/t/synced-flush-and-keep-indexing-on-primary/166197 "2019-02-01T16:34:20Z")
Hi, I have the following problem: I need to shut down a replica to perform some operations on it the index contains lots of data so I'd like to use synced flush to speedup replica restart In addition I'd like to cont… --- ## [Can't see the second node whilst attempting to build a cluster](https://discuss.elastic.co/t/cant-see-the-second-node-whilst-attempting-to-build-a-cluster/163187)
**Author:** [@sc1](https://discuss.elastic.co/u/sc1)\ **Replies:** 14\ **Last updated:** [February 1, 2019, 4:30pm UTC](https://discuss.elastic.co/t/cant-see-the-second-node-whilst-attempting-to-build-a-cluster/163187 "2019-02-01T16:30:24Z")
Hello, I am looking to add a second node and create a cluster. I have installed version 6.5.1 of Elasticsearch on 2 servers. The primary node has the full stack (Elasticsearch, Kibana, Logstash) and the second node has … --- ## [How to perform a pipeline aggregation without returning all buckets](https://discuss.elastic.co/t/how-to-perform-a-pipeline-aggregation-without-returning-all-buckets/166424)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 3\ **Last updated:** [February 1, 2019, 3:28pm UTC](https://discuss.elastic.co/t/how-to-perform-a-pipeline-aggregation-without-returning-all-buckets/166424 "2019-02-01T15:28:53Z")
As question here https://stackoverflow.com/questions/38081739/how-to-perform-a-pipeline-aggregation-without-returning-all-buckets-in-elasticse Using a pipeline agg. to calculate average, I dont want to return all the bu… --- ## [Cross-cluster replication](https://discuss.elastic.co/t/cross-cluster-replication/166665)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 2\ **Last updated:** [February 1, 2019, 3:22pm UTC](https://discuss.elastic.co/t/cross-cluster-replication/166665 "2019-02-01T15:22:01Z")
Hello World! I watched Jason Zucchetto' Replicate Elasticsearch Data with Cross-Cluster Replication (CCR) | Elastic and unfortunately I didn't get to ask any of question(s) and I was wondering if Jason or anyone from El… --- ## [A script to create many indices at the same time](https://discuss.elastic.co/t/a-script-to-create-many-indices-at-the-same-time/166726)
**Author:** [@Askia\_Mohamed\_Kadri](https://discuss.elastic.co/u/Askia_Mohamed_Kadri)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 2:48pm UTC](https://discuss.elastic.co/t/a-script-to-create-many-indices-at-the-same-time/166726 "2019-02-01T14:48:01Z")
Hi! Please I would like to create many indices at the same time with a defined pattern. Does anybody know a scipt or has a solution to do that. Thanks --- ## [Numeric overflow due to bad mapping](https://discuss.elastic.co/t/numeric-overflow-due-to-bad-mapping/166749)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 0\ **Last updated:** [February 1, 2019, 2:45pm UTC](https://discuss.elastic.co/t/numeric-overflow-due-to-bad-mapping/166749 "2019-02-01T14:45:49Z")
Hi, I have a simple question. What happens when Logstash sends a data to Elasticsearch and the field which is mapped as integer has a higher value (e.g., 2^32)? Thank you! --- ## [Filter for Known IP Addresses in ML Jobs](https://discuss.elastic.co/t/filter-for-known-ip-addresses-in-ml-jobs/166722)
**Author:** [@TheNmaptomyHeartBeat](https://discuss.elastic.co/u/TheNmaptomyHeartBeat)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 2:12pm UTC](https://discuss.elastic.co/t/filter-for-known-ip-addresses-in-ml-jobs/166722 "2019-02-01T14:12:12Z")
Hello We have set up the default machine learning jobs for the Nginx module on Filebeat. Problem is when doing tests on the site the ML job will detect anomalies and send alerts for my IP address. I am not sure if it's… --- ## [Filter on sub object field, based on other fields value](https://discuss.elastic.co/t/filter-on-sub-object-field-based-on-other-fields-value/166743)
**Author:** [@Robert\_Baelde](https://discuss.elastic.co/u/Robert_Baelde)\ **Replies:** 0\ **Last updated:** [February 1, 2019, 1:51pm UTC](https://discuss.elastic.co/t/filter-on-sub-object-field-based-on-other-fields-value/166743 "2019-02-01T13:51:56Z")
I have a document with two fields, one field is a string. the other a array: { "foo": "bar", "faz": { "bar": "bla bla", "baz": "etc.. " } } I want to be able to filter on faz.bar, but this … --- ## [org.elasticsearch.bootstrap.StartupException: ElasticsearchException\[Failed to create native process factories for Machine Learning\]; nested: FileNotFoundException\[\\\\.\\pipe\\controller\_log\_13044 (The system cannot find the file specified)\]](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-elasticsearchexception-failed-to-create-native-process-factories-for-machine-learning-nested-filenotfoundexception-pipe-controller-log-13044-the-system-cannot-find-the-file-specified/166264)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 1:45pm UTC](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-elasticsearchexception-failed-to-create-native-process-factories-for-machine-learning-nested-filenotfoundexception-pipe-controller-log-13044-the-system-cannot-find-the-file-specified/166264 "2019-02-01T13:45:13Z")
I am new to Elastic search and facing an issue while installing it. I am getting below exception: org.elasticsearch.bootstrap.StartupException: ElasticsearchException\[Failed to create native process factories for Machi… --- ## [Does extended\_stats aggregation return appoximate value or exact value?](https://discuss.elastic.co/t/does-extended-stats-aggregation-return-appoximate-value-or-exact-value/165693)
**Author:** [@kdh6429](https://discuss.elastic.co/u/kdh6429)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 1:32pm UTC](https://discuss.elastic.co/t/does-extended-stats-aggregation-return-appoximate-value-or-exact-value/165693 "2019-02-01T13:32:53Z")
as term aggregation count is appoximate, is extended\_stats query also return approximate value? or does it guarantee exact value? --- ## [Elastic search HTTP URI query length](https://discuss.elastic.co/t/elastic-search-http-uri-query-length/165370)
**Author:** [@srirama](https://discuss.elastic.co/u/srirama)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 12:54pm UTC](https://discuss.elastic.co/t/elastic-search-http-uri-query-length/165370 "2019-02-01T12:54:16Z")
Hi All: What is the URI length limitation for HTTP requests sent to ELASTIC HTTP interface (for passing multiple index names, along with cluster names) ? How to configure this parameter? As per the link, https://discus… --- ## [Splitting a string to fields and values](https://discuss.elastic.co/t/splitting-a-string-to-fields-and-values/166635)
**Author:** [@mhensen](https://discuss.elastic.co/u/mhensen)\ **Replies:** 2\ **Last updated:** [February 1, 2019, 12:10pm UTC](https://discuss.elastic.co/t/splitting-a-string-to-fields-and-values/166635 "2019-02-01T12:10:14Z")
I am using a kubernetes platform an have setup central elasticsearch logging with fluent.. Data comes in nicely but now I want to setup grafana to filter and present any needed logging So no logstash with a grok option… --- ## [Heap | Buff/Cache considerations on WARM nodes](https://discuss.elastic.co/t/heap-buff-cache-considerations-on-warm-nodes/166705)
**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\ **Replies:** 0\ **Last updated:** [February 1, 2019, 9:57am UTC](https://discuss.elastic.co/t/heap-buff-cache-considerations-on-warm-nodes/166705 "2019-02-01T09:57:39Z")
Hi! I've got a Hot/Warm infrastructure. 4 Hot and 4 Warm nodes, 16GB RAM each. I've set a 7GB of HEAP on each node but I've got a question regarding HEAP on WARM nodes: If WARM nodes are used only for storing older dat… --- ## [Failed to parse value \[analyzed\] as only \[true\] or \[false\] are allowed. ES upgrade 5.5 -\> 6.5](https://discuss.elastic.co/t/failed-to-parse-value-analyzed-as-only-true-or-false-are-allowed-es-upgrade-5-5-6-5/166473)
**Author:** [@Suryadip\_Nag](https://discuss.elastic.co/u/Suryadip_Nag)\ **Replies:** 3\ **Last updated:** [February 1, 2019, 10:44am UTC](https://discuss.elastic.co/t/failed-to-parse-value-analyzed-as-only-true-or-false-are-allowed-es-upgrade-5-5-6-5/166473 "2019-02-01T10:44:46Z")
Recently we upgraded ES to 6.5 from 5.5. The same template which we used to push in Elasticsearch 5 is not working in ES 6. It is throwing below error. "type":"illegal\_argument\_exception","reason":"Failed to parse value… --- ## [Add An archived Flat File](https://discuss.elastic.co/t/add-an-archived-flat-file/166603)
**Author:** [@macdadi112](https://discuss.elastic.co/u/macdadi112)\ **Replies:** 8\ **Last updated:** [February 1, 2019, 10:43am UTC](https://discuss.elastic.co/t/add-an-archived-flat-file/166603 "2019-02-01T10:43:24Z")
Hi Is there a way in which to view archived files in elastic search from a month ago? Thanks --- ## [Zen Discovery and the transport ports](https://discuss.elastic.co/t/zen-discovery-and-the-transport-ports/166194)
**Author:** [@darefilz](https://discuss.elastic.co/u/darefilz)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 10:28am UTC](https://discuss.elastic.co/t/zen-discovery-and-the-transport-ports/166194 "2019-02-01T10:28:18Z")
Hi, I maybe fail to understand the principles of zen discovery. But I can not make the Elasticsearch nodes join the cluster. Info: All Elasticsearch nodes live in Docker containers Everything happens on my local mach… --- ## [Add a coordinating/client node to my existing Elasticsearch cluster](https://discuss.elastic.co/t/add-a-coordinating-client-node-to-my-existing-elasticsearch-cluster/166692)
**Author:** [@nikhil1991](https://discuss.elastic.co/u/nikhil1991)\ **Replies:** 3\ **Last updated:** [February 1, 2019, 9:56am UTC](https://discuss.elastic.co/t/add-a-coordinating-client-node-to-my-existing-elasticsearch-cluster/166692 "2019-02-01T09:56:33Z")
I already have a 3 node Elastic search cluster setup with Kibana installed on all the nodes.. PROBLEM: The problem is when we stop master node in Elastic search, the entire Kibana goes down and is inaccessible. What I … --- ## [Whats the best way to query exact match and full text at the same time?](https://discuss.elastic.co/t/whats-the-best-way-to-query-exact-match-and-full-text-at-the-same-time/166430)
**Author:** [@Drammy](https://discuss.elastic.co/u/Drammy)\ **Replies:** 3\ **Last updated:** [February 1, 2019, 9:55am UTC](https://discuss.elastic.co/t/whats-the-best-way-to-query-exact-match-and-full-text-at-the-same-time/166430 "2019-02-01T09:55:23Z")
Hi all, I had an ES search running on ES 2 that was working as I hoped but since upgrading to ES5 and subsequently to ES 6 the relevance has degraded somewhat (probably due to poor DSL I guess). Its just a shame that i… --- ## [Best way to trim results by score?](https://discuss.elastic.co/t/best-way-to-trim-results-by-score/165795)
**Author:** [@jmr317](https://discuss.elastic.co/u/jmr317)\ **Replies:** 2\ **Last updated:** [February 1, 2019, 9:33am UTC](https://discuss.elastic.co/t/best-way-to-trim-results-by-score/165795 "2019-02-01T09:33:29Z")
Some of my search results returns a total of over 10k documents, varying from a high score (in my most recent search, ~75) to a very low score (less than 5). Other queries return a high score of ~20 and a low score of ~1… --- ## [Maximum voting in elastic search](https://discuss.elastic.co/t/maximum-voting-in-elastic-search/165717)
**Author:** [@jack1234](https://discuss.elastic.co/u/jack1234)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 9:25am UTC](https://discuss.elastic.co/t/maximum-voting-in-elastic-search/165717 "2019-02-01T09:25:28Z")
Say I have two fields ID, and queries contains two rows ID=1, queries=\["apple one", "apple two", "apple three"\] ID=2, queries=\["apple one only"\] Given "apple", I want to match it to ID=1 since it has three matches ther… --- ## [Range Query on Nested Keyword field](https://discuss.elastic.co/t/range-query-on-nested-keyword-field/166304)
**Author:** [@Morten\_Trolle](https://discuss.elastic.co/u/Morten_Trolle)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 9:24am UTC](https://discuss.elastic.co/t/range-query-on-nested-keyword-field/166304 "2019-02-01T09:24:01Z")
Hey guys, I'm trying to run a range query on a nested keyword field, but I'm not having any luck: { "query": { "bool": { "filter": \[ { "term": { "kind": "episode" } … --- ## [Unable to create index sorting](https://discuss.elastic.co/t/unable-to-create-index-sorting/166019)
**Author:** [@anjireddy543](https://discuss.elastic.co/u/anjireddy543)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 9:21am UTC](https://discuss.elastic.co/t/unable-to-create-index-sorting/166019 "2019-02-01T09:21:13Z")
Hi, I want to create index sorting for my documents by default on date. In the mappings i have another field which is nested array. In documentation i have read that we cannot create index sorting if index contains nes… --- ## [Elasticsearch - Apache Http Client vs REST low level Client](https://discuss.elastic.co/t/elasticsearch-apache-http-client-vs-rest-low-level-client/166678)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 9:10am UTC](https://discuss.elastic.co/t/elasticsearch-apache-http-client-vs-rest-low-level-client/166678 "2019-02-01T09:10:01Z")
Hi, I am using Apache Http Client to communicate with Elastic. I understand that REST low level Client internally uses Http Client. I am curious to know what is the difference between using Apache Http Client and REST l… --- ## [java.lang.IllegalStateException: Failed to obtain node lock](https://discuss.elastic.co/t/java-lang-illegalstateexception-failed-to-obtain-node-lock/166681)
**Author:** [@Vineet\_Kumar](https://discuss.elastic.co/u/Vineet_Kumar)\ **Replies:** 3\ **Last updated:** [February 1, 2019, 8:55am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-failed-to-obtain-node-lock/166681 "2019-02-01T08:55:40Z")
While starting Sonarqube, it stop and showing error for elastic seaach (es node): 2019.01.29 21:24:44 INFO es\[o.s.p.ProcessEntryPoint\] Starting es 2019.01.29 21:24:44 INFO es\[o.s.s.EsSettings\] Elasticsearch listening… --- ## [Import CVS to Kibana using filebeat](https://discuss.elastic.co/t/import-cvs-to-kibana-using-filebeat/166686)
**Author:** [@Sergejs\_Kuznecovs](https://discuss.elastic.co/u/Sergejs_Kuznecovs)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 8:51am UTC](https://discuss.elastic.co/t/import-cvs-to-kibana-using-filebeat/166686 "2019-02-01T08:51:35Z")
Hello! I'm a beginner in this theme. Maybe someone can help me. I need to import csv file to kibana, to build some graph using filebeat. I did filebeat conf like that: filebeat.prospectors: type: log enabled: true … --- ## [Template "inheritance"](https://discuss.elastic.co/t/template-inheritance/166583)
**Author:** [@RhysEvans](https://discuss.elastic.co/u/RhysEvans)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 7:45am UTC](https://discuss.elastic.co/t/template-inheritance/166583 "2019-02-01T07:45:57Z")
Hi I want to setup a default template for some specific fields, that I want added to every other template. So template 1 has fields x,y,z and template 2 has fields a,b,c The index should know the "types" (don't know… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1406) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1408)