# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1416

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1417

---

## [HighLevel REST Client : Retry requests on failure](https://discuss.elastic.co/t/highlevel-rest-client-retry-requests-on-failure/163497)

<div class="topic-metadata">

**Author:** [@Gopala\_Krishna](https://discuss.elastic.co/u/Gopala_Krishna)\
**Replies:** 1\
**Last updated:** [January 24, 2019, 8:36am UTC](https://discuss.elastic.co/t/highlevel-rest-client-retry-requests-on-failure/163497 "2019-01-24T08:36:01Z")

</div>

Hello! Background: We use an Elasticsearch cluster with a single node for indexing text documents. The High Level REST Client is used for interacting with the cluster. The cluster, the client all run in their own docker…

---

## [Elasticsearch upgrade requires Seach Guard upgrade as well?](https://discuss.elastic.co/t/elasticsearch-upgrade-requires-seach-guard-upgrade-as-well/165525)

<div class="topic-metadata">

**Author:** [@Suryadip\_Nag](https://discuss.elastic.co/u/Suryadip_Nag)\
**Replies:** 4\
**Last updated:** [January 24, 2019, 7:58am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-requires-seach-guard-upgrade-as-well/165525 "2019-01-24T07:58:23Z")

</div>

We are using ES 5.5.1 and also using search-guard 5.5.1 and search-guard-ssl 5.5.1 We are upgrading ES to 6.5.4 so is it mandatory to upgrade the search-guard as well? Or we can continue with the existing search guard? …

---

## [Elasticsearch is gone Red after delete index](https://discuss.elastic.co/t/elasticsearch-is-gone-red-after-delete-index/165538)

<div class="topic-metadata">

**Author:** [@merceskoba](https://discuss.elastic.co/u/merceskoba)\
**Replies:** 2\
**Last updated:** [January 24, 2019, 7:54am UTC](https://discuss.elastic.co/t/elasticsearch-is-gone-red-after-delete-index/165538 "2019-01-24T07:54:57Z")

</div>

This ES instance is in staging server but i am still curious to solve this case. So, yesterday i deleted one index. And then, the server is red suddenly. I am using Cerebro for understand it visually …

---

## [Red cluster](https://discuss.elastic.co/t/red-cluster/165400)

<div class="topic-metadata">

**Author:** [@fadihaddad](https://discuss.elastic.co/u/fadihaddad)\
**Replies:** 6\
**Last updated:** [January 24, 2019, 7:35am UTC](https://discuss.elastic.co/t/red-cluster/165400 "2019-01-24T07:35:34Z")

</div>

I installed elastic search on 2 servers with different ips. and they are found in the cluster one master and one data node and their names are master and data. when I was trying to run kibana on the master it kept hangin…

---

## [Elasticsearch config parsed in Python](https://discuss.elastic.co/t/elasticsearch-config-parsed-in-python/165147)

<div class="topic-metadata">

**Author:** [@merceskoba](https://discuss.elastic.co/u/merceskoba)\
**Replies:** 6\
**Last updated:** [January 24, 2019, 7:18am UTC](https://discuss.elastic.co/t/elasticsearch-config-parsed-in-python/165147 "2019-01-24T07:18:37Z")

</div>

Hello guys So, i have a problem to maintain elasticsearch config in production. There are so many changes to elasticsearch config. So, i need to change the discovery.zen.ping.unicast.hosts: \["1.1.1.2"\] to be discover…

---

## [Increasing indexing performance without sacrificing reliability](https://discuss.elastic.co/t/increasing-indexing-performance-without-sacrificing-reliability/162718)

<div class="topic-metadata">

**Author:** [@amomchilov](https://discuss.elastic.co/u/amomchilov)\
**Replies:** 8\
**Last updated:** [January 24, 2019, 6:37am UTC](https://discuss.elastic.co/t/increasing-indexing-performance-without-sacrificing-reliability/162718 "2019-01-24T06:37:45Z")

</div>

Hey guys, I've got a 6.5 PB cluster, composed of 150 d2.8xlarge instances (36 cores @ 2.5 GHz, 244 GB RAM, 24 hard disks (2 TB each, not in RAID)) that act as both data and ingest nodes. I have Filebeat running on 700+ p…

---

## [Collapse field get](https://discuss.elastic.co/t/collapse-field-get/165532)

<div class="topic-metadata">

**Author:** [@cxfcxf](https://discuss.elastic.co/u/cxfcxf)\
**Replies:** 0\
**Last updated:** [January 24, 2019, 6:20am UTC](https://discuss.elastic.co/t/collapse-field-get/165532 "2019-01-24T06:20:14Z")

</div>

How can i get all results for Collapse field? please help me.

---

## [Deleting a documents using regular expressions](https://discuss.elastic.co/t/deleting-a-documents-using-regular-expressions/165038)

<div class="topic-metadata">

**Author:** [@akhilsai1499](https://discuss.elastic.co/u/akhilsai1499)\
**Replies:** 4\
**Last updated:** [January 24, 2019, 6:17am UTC](https://discuss.elastic.co/t/deleting-a-documents-using-regular-expressions/165038 "2019-01-24T06:17:44Z")

</div>

Hi Lets say there are documents with id 1001,1002,1003,1004 Is there any method to delete the document by using the regular expressions? DELETE indexname/100\*

---

## [Index patterns changed their id and scripted fields disappeared](https://discuss.elastic.co/t/index-patterns-changed-their-id-and-scripted-fields-disappeared/165530)

<div class="topic-metadata">

**Author:** [@gyau](https://discuss.elastic.co/u/gyau)\
**Replies:** 0\
**Last updated:** [January 24, 2019, 5:59am UTC](https://discuss.elastic.co/t/index-patterns-changed-their-id-and-scripted-fields-disappeared/165530 "2019-01-24T05:59:42Z")

</div>

We had logstash to send data continuously to elasticsearch. After we stopped the service, we noticed that all our visualizations showed "Could not locate that index-pattern" and scripted fields were gone, but not the ind…

---

## [Painless updating Array of custom objects](https://discuss.elastic.co/t/painless-updating-array-of-custom-objects/165527)

<div class="topic-metadata">

**Author:** [@Rashid\_Yes](https://discuss.elastic.co/u/Rashid_Yes)\
**Replies:** 0\
**Last updated:** [January 24, 2019, 5:17am UTC](https://discuss.elastic.co/t/painless-updating-array-of-custom-objects/165527 "2019-01-24T05:17:19Z")

</div>

Painless updating Array of custom objects But below script is not working. Please let me know the solution: code = "ctx.\_source.attachments.add(\[" + ""attachmentId" : params.attachmentId," + ""size" : params.size," + …

---

## [Search for nested field in json](https://discuss.elastic.co/t/search-for-nested-field-in-json/165427)

<div class="topic-metadata">

**Author:** [@itsron143](https://discuss.elastic.co/u/itsron143)\
**Replies:** 2\
**Last updated:** [January 24, 2019, 4:09am UTC](https://discuss.elastic.co/t/search-for-nested-field-in-json/165427 "2019-01-24T04:09:29Z")

</div>

I have an index which has documents in this form of nested json. I want to search for values of the field LeftText in the mentioned link using a bool must match. How do I write the query? (ES 5.6)

---

## [io.netty.handler.codec.compression.DecompressionException: Input is not in the GZIP format](https://discuss.elastic.co/t/io-netty-handler-codec-compression-decompressionexception-input-is-not-in-the-gzip-format/165514)

<div class="topic-metadata">

**Author:** [@xiaoyao](https://discuss.elastic.co/u/xiaoyao)\
**Replies:** 1\
**Last updated:** [January 24, 2019, 3:51am UTC](https://discuss.elastic.co/t/io-netty-handler-codec-compression-decompressionexception-input-is-not-in-the-gzip-format/165514 "2019-01-24T03:51:10Z")

</div>

\[2019-01-24T10:04:40,406\]\[WARN \]\[o.e.h.n.Netty4HttpServerTransport\] \[HC-Elasticsearch-node02\_N\] caught exception while handling client http traffic, closing connection \[id: 0xbcdf3dcf, L:/es-ip:9200 ! R:/logstash-ip:5087…

---

## [Caught exception while handling client http traffic, closing connection \[id: 0xbcdf3dcf, L:/es-ip:9200 ! R:/logstash-ip:50878\]](https://discuss.elastic.co/t/caught-exception-while-handling-client-http-traffic-closing-connection-id-0xbcdf3dcf-l-es-ip-9200-r-logstash-ip-50878/165517)

<div class="topic-metadata">

**Author:** [@xiaoyao](https://discuss.elastic.co/u/xiaoyao)\
**Replies:** 2\
**Last updated:** [January 24, 2019, 2:46am UTC](https://discuss.elastic.co/t/caught-exception-while-handling-client-http-traffic-closing-connection-id-0xbcdf3dcf-l-es-ip-9200-r-logstash-ip-50878/165517 "2019-01-24T02:46:08Z")

</div>

\[2019-01-24T10:04:40,406\]\[WARN \]\[o.e.h.n.Netty4HttpServerTransport\] \[HC-Elasticsearch-node02\_N\] caught exception while handling client http traffic, closing connection \[id: 0xbcdf3dcf, L:/es-ip:9200 ! R:/logstash-ip:5087…

---

## [How to create a client with the protect of SearchGuard By Class RestHighLevelClient](https://discuss.elastic.co/t/how-to-create-a-client-with-the-protect-of-searchguard-by-class-resthighlevelclient/165185)

<div class="topic-metadata">

**Author:** [@AveiShriety](https://discuss.elastic.co/u/AveiShriety)\
**Replies:** 5\
**Last updated:** [January 23, 2019, 11:41pm UTC](https://discuss.elastic.co/t/how-to-create-a-client-with-the-protect-of-searchguard-by-class-resthighlevelclient/165185 "2019-01-23T23:41:57Z")

</div>

Now, I use SearchGuard to secure my elasticsearch cluster. And in the search-guard official website, I found the Transport Clients to create A client. But, due to the Elasticsearch official website's declare: We plan…

---

## [Keeping getting this error, please help parse\_exception","reason":"Failed to parse content to map"}](https://discuss.elastic.co/t/keeping-getting-this-error-please-help-parse-exception-reason-failed-to-parse-content-to-map/165501)

<div class="topic-metadata">

**Author:** [@ballr24](https://discuss.elastic.co/u/ballr24)\
**Replies:** 0\
**Last updated:** [January 23, 2019, 11:15pm UTC](https://discuss.elastic.co/t/keeping-getting-this-error-please-help-parse-exception-reason-failed-to-parse-content-to-map/165501 "2019-01-23T23:15:25Z")

</div>

Hi All, I'm a newbie to Elasticsearch, I'm trying to get my code to work with not\_analyzed Please see below curl -X PUT "localhost:9200/\_mapping/jdbc" -H 'Content-Type: application/x-ndjson' -d ' { "mappings": { "jdbc…

---

## [Correct way to set JVM DNS cache](https://discuss.elastic.co/t/correct-way-to-set-jvm-dns-cache/165495)

<div class="topic-metadata">

**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\
**Replies:** 1\
**Last updated:** [January 23, 2019, 10:44pm UTC](https://discuss.elastic.co/t/correct-way-to-set-jvm-dns-cache/165495 "2019-01-23T22:44:28Z")

</div>

Hello I'm trying to change the TTL as I believe it has something to do with creating issues on a remote cluster. (It just stops working after a few days). And I was wondering if this is the correct way to set the DNS TLL…

---

## [Can't undersand curator dry-run logs](https://discuss.elastic.co/t/cant-undersand-curator-dry-run-logs/164909)

<div class="topic-metadata">

**Author:** [@memelet](https://discuss.elastic.co/u/memelet)\
**Replies:** 4\
**Last updated:** [January 23, 2019, 8:46pm UTC](https://discuss.elastic.co/t/cant-undersand-curator-dry-run-logs/164909 "2019-01-23T20:46:26Z")

</div>

I am running a force\_merge in dry-run and getting logs like below. I can't seem to tell if curator would have run the action or not. (I know what I think it should do. But what does curator think it should do?) "\_sour…

---

## [Elasticsearch bucket aggregations with Painless scripts returning invalid division values](https://discuss.elastic.co/t/elasticsearch-bucket-aggregations-with-painless-scripts-returning-invalid-division-values/165481)

<div class="topic-metadata">

**Author:** [@ketans](https://discuss.elastic.co/u/ketans)\
**Replies:** 0\
**Last updated:** [January 23, 2019, 8:21pm UTC](https://discuss.elastic.co/t/elasticsearch-bucket-aggregations-with-painless-scripts-returning-invalid-division-values/165481 "2019-01-23T20:21:08Z")

</div>

Hi , I am a newbie to Elasticsearch and following is my query: I have an index where I have maintained the counters (int) for various HTTP codes. So in order to show the success/ failure which are working as expected.…

---

## [Elasticsearch Programmer](https://discuss.elastic.co/t/elasticsearch-programmer/165477)

<div class="topic-metadata">

**Author:** [@rogernwells](https://discuss.elastic.co/u/rogernwells)\
**Replies:** 0\
**Last updated:** [January 23, 2019, 7:54pm UTC](https://discuss.elastic.co/t/elasticsearch-programmer/165477 "2019-01-23T19:54:41Z")

</div>

I have three Wordpress sites that I have been told that I need to have elasticsearch. My problem is that I have hired two programmers who have both failed to be able to complete the project. Can you recommend someone wh…

---

## [\_search end point not available in Elasticsearch](https://discuss.elastic.co/t/search-end-point-not-available-in-elasticsearch/165472)

<div class="topic-metadata">

**Author:** [@shankarps](https://discuss.elastic.co/u/shankarps)\
**Replies:** 1\
**Last updated:** [January 23, 2019, 7:33pm UTC](https://discuss.elastic.co/t/search-end-point-not-available-in-elasticsearch/165472 "2019-01-23T19:33:50Z")

</div>

I have an index in my Elasticsearch version 6.4.2. I was able to view the index by calling http://:9200/logstash-2018.12.20. I can see that this index has a mapping of "doc" entities. "mappings": { "doc": …

---

## [Index empty after server reboot](https://discuss.elastic.co/t/index-empty-after-server-reboot/165295)

<div class="topic-metadata">

**Author:** [@akjrabe](https://discuss.elastic.co/u/akjrabe)\
**Replies:** 2\
**Last updated:** [January 23, 2019, 7:33pm UTC](https://discuss.elastic.co/t/index-empty-after-server-reboot/165295 "2019-01-23T19:33:09Z")

</div>

The server running ElasticSearch 6.5.4 was rebooted. After reboot and re-launcing ElasticSearch and Kibana I can see the index under management, however they show 0 documents as though the index wasn't run. Under nodes\>…

---

## [ElasticSearch index creation is 4 days behind in 6.5.4](https://discuss.elastic.co/t/elasticsearch-index-creation-is-4-days-behind-in-6-5-4/165469)

<div class="topic-metadata">

**Author:** [@inf2ravikumar](https://discuss.elastic.co/u/inf2ravikumar)\
**Replies:** 4\
**Last updated:** [January 23, 2019, 7:28pm UTC](https://discuss.elastic.co/t/elasticsearch-index-creation-is-4-days-behind-in-6-5-4/165469 "2019-01-23T19:28:25Z")

</div>

I have recently upgraded my production cluster to 6.5.4 Seeing there are so many delays in ingesting high volume logs in Cluster. I'm getting around 3tb from 560 filebeat clients which use multiple prosecutors among the…

---

## [Problem upgrade from 6.1.2 to 6.5.4](https://discuss.elastic.co/t/problem-upgrade-from-6-1-2-to-6-5-4/164950)

<div class="topic-metadata">

**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\
**Replies:** 14\
**Last updated:** [January 23, 2019, 7:07pm UTC](https://discuss.elastic.co/t/problem-upgrade-from-6-1-2-to-6-5-4/164950 "2019-01-23T19:07:25Z")

</div>

I upgraded the data nodes (data=true, master=false), and stood up two new master nodes (data=false, master=true). My final step was to bounce the old master node, with the hope a new master (with new version) was electe…

---

## [Design approach for counting friends unique category counts](https://discuss.elastic.co/t/design-approach-for-counting-friends-unique-category-counts/164667)

<div class="topic-metadata">

**Author:** [@Bujji1](https://discuss.elastic.co/u/Bujji1)\
**Replies:** 1\
**Last updated:** [January 23, 2019, 5:04pm UTC](https://discuss.elastic.co/t/design-approach-for-counting-friends-unique-category-counts/164667 "2019-01-23T17:04:01Z")

</div>

Hello All , I just started using Elastic Search and It is simply awesome . I am looking for a best design approach for my case . In the below Index , Friends and all categories are numeric arrays . I can have up to …

---

## [ElasticSearch High level API create index with custom settings returns error](https://discuss.elastic.co/t/elasticsearch-high-level-api-create-index-with-custom-settings-returns-error/165435)

<div class="topic-metadata">

**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\
**Replies:** 0\
**Last updated:** [January 23, 2019, 3:34pm UTC](https://discuss.elastic.co/t/elasticsearch-high-level-api-create-index-with-custom-settings-returns-error/165435 "2019-01-23T15:34:47Z")

</div>

I'm trying to create ad index with custom settings as explained here with ElasticSearch 6.3 This is my code: public CreateIndexResponse createIndex(@NotNull String indexName) throws IOException { CreateIndexReq…

---

## [Reindex copy not all documents](https://discuss.elastic.co/t/reindex-copy-not-all-documents/165451)

<div class="topic-metadata">

**Author:** [@Behemo1h](https://discuss.elastic.co/u/Behemo1h)\
**Replies:** 0\
**Last updated:** [January 23, 2019, 4:13pm UTC](https://discuss.elastic.co/t/reindex-copy-not-all-documents/165451 "2019-01-23T16:13:05Z")

</div>

Hi guys. I have trouble with "reindex" api. When i use reindex i almost always have different "total" and "created" fields in result. About indecies - same mapping, same data. Version: 6.5.4

---

## [Elastic “from” cannot take effect after aggregation](https://discuss.elastic.co/t/elastic-from-cannot-take-effect-after-aggregation/165416)

<div class="topic-metadata">

**Author:** [@fuhaoliang](https://discuss.elastic.co/u/fuhaoliang)\
**Replies:** 4\
**Last updated:** [January 23, 2019, 3:53pm UTC](https://discuss.elastic.co/t/elastic-from-cannot-take-effect-after-aggregation/165416 "2019-01-23T15:53:21Z")

</div>

POST /dw\_vehicle\_mileage3/\_search { "from": 10, "aggs": { "2": { "terms": { "field": "vehicleid", "size": 1, "order": { "1": "desc" } }, "aggs": { "1": { "sum": { "field": "distance" } }, "3": { "sum":…

---

## [Custom routing, how to prepare new custom routing formula? or get to know the hashing in detail](https://discuss.elastic.co/t/custom-routing-how-to-prepare-new-custom-routing-formula-or-get-to-know-the-hashing-in-detail/164544)

<div class="topic-metadata">

**Author:** [@kshi\_yelpale000](https://discuss.elastic.co/u/kshi_yelpale000)\
**Replies:** 8\
**Last updated:** [January 23, 2019, 11:57am UTC](https://discuss.elastic.co/t/custom-routing-how-to-prepare-new-custom-routing-formula-or-get-to-know-the-hashing-in-detail/164544 "2019-01-23T11:57:10Z")

</div>

In my data model i store data based on language, so i am thinking to distribute documents based on one language per shard. Let say if i have product with id 10, and have fields for product like Label, cost or color So i…

---

## [Cannot start elasticsearch on Centos7](https://discuss.elastic.co/t/cannot-start-elasticsearch-on-centos7/165410)

<div class="topic-metadata">

**Author:** [@giuls](https://discuss.elastic.co/u/giuls)\
**Replies:** 2\
**Last updated:** [January 23, 2019, 2:37pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-on-centos7/165410 "2019-01-23T14:37:27Z")

</div>

---

## [Create day-of-week and hour-of-day fields from date field during indexing](https://discuss.elastic.co/t/create-day-of-week-and-hour-of-day-fields-from-date-field-during-indexing/165418)

<div class="topic-metadata">

**Author:** [@nili1](https://discuss.elastic.co/u/nili1)\
**Replies:** 1\
**Last updated:** [January 23, 2019, 2:34pm UTC](https://discuss.elastic.co/t/create-day-of-week-and-hour-of-day-fields-from-date-field-during-indexing/165418 "2019-01-23T14:34:10Z")

</div>

Our data contains a timestamp that is mapped to a date type and has format yyyy-MM-ddTHH:mm:ssZ (e.g. 2019-01-20T18:00:53Z). We would like to change it to a multi-field containing different properties of the date - day …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1415)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1417)
