# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1449

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1450

---

## [Elasticsearch crashed on development machine, trying to recover](https://discuss.elastic.co/t/elasticsearch-crashed-on-development-machine-trying-to-recover/160548)

<div class="topic-metadata">

**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\
**Replies:** 18\
**Last updated:** [December 18, 2018, 12:05pm UTC](https://discuss.elastic.co/t/elasticsearch-crashed-on-development-machine-trying-to-recover/160548 "2018-12-18T12:05:33Z")

</div>

We have a 3 node elasticsearch/kibana/logstash set up with docker-compose, each node has 8 GB for the Java. I tried working with some firewall rules to secure it a bit, but found out that firewalld (centos) messes up th…

---

## [Aggregation Search Query is slow](https://discuss.elastic.co/t/aggregation-search-query-is-slow/161313)

<div class="topic-metadata">

**Author:** [@bronzik](https://discuss.elastic.co/u/bronzik)\
**Replies:** 2\
**Last updated:** [December 18, 2018, 12:03pm UTC](https://discuss.elastic.co/t/aggregation-search-query-is-slow/161313 "2018-12-18T12:03:38Z")

</div>

Hi guys Cluster Configuration: There are 3 data Nodes hosted on Elastic Cloud. The state below is given per Node: ES version: 6.5.1 Max Heap size configured per Node: 7.9 GB Heap used: 57-61 % Max RAM size c…

---

## [How to set heap size via environment variable ES\_JAVA\_OPTS?](https://discuss.elastic.co/t/how-to-set-heap-size-via-environment-variable-es-java-opts/161116)

<div class="topic-metadata">

**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\
**Replies:** 4\
**Last updated:** [December 18, 2018, 1:40am UTC](https://discuss.elastic.co/t/how-to-set-heap-size-via-environment-variable-es-java-opts/161116 "2018-12-18T01:40:45Z")

</div>

I commented xms and xmx in jvm.options, added export ES\_JAVA\_OPTS="-Xms800m -Xmx800m" in ./bash\_profile. And echo $ES\_JAVA\_OPTS returns "-xms800m -Xmx800m". But when I restart ES by .bin/elasticsearch, such a heap setti…

---

## [Curator Error | Elasticsearch version 6.4.1 incompatible with this version of Curator (5.3.0.dev1)](https://discuss.elastic.co/t/curator-error-elasticsearch-version-6-4-1-incompatible-with-this-version-of-curator-5-3-0-dev1/160696)

<div class="topic-metadata">

**Author:** [@Shashikanth](https://discuss.elastic.co/u/Shashikanth)\
**Replies:** 3\
**Last updated:** [December 14, 2018, 12:49pm UTC](https://discuss.elastic.co/t/curator-error-elasticsearch-version-6-4-1-incompatible-with-this-version-of-curator-5-3-0-dev1/160696 "2018-12-14T12:49:29Z")

</div>

When trying to purge the indices through curator, i'm getting the following error. Elasticsearch version 6.4.1 incompatible with this version of Curator (5.3.0.dev1)

---

## [Upgrade to Elastic version 5.6.12 causes exception](https://discuss.elastic.co/t/upgrade-to-elastic-version-5-6-12-causes-exception/160409)

<div class="topic-metadata">

**Author:** [@trabakoulas](https://discuss.elastic.co/u/trabakoulas)\
**Replies:** 8\
**Last updated:** [December 18, 2018, 9:56am UTC](https://discuss.elastic.co/t/upgrade-to-elastic-version-5-6-12-causes-exception/160409 "2018-12-18T09:56:28Z")

</div>

Hello, I'm trying to upgrade my ElasticSearch from 2.3.4 to 5.6.12. In order to create my Client, due to this upgrade, I use now the PreBuiltTransportClient instead of the TransportClient. During the runtime I get the…

---

## [How to get the Top Hit result from the aggregated 95th percentile](https://discuss.elastic.co/t/how-to-get-the-top-hit-result-from-the-aggregated-95th-percentile/161117)

<div class="topic-metadata">

**Author:** [@\_kyllr](https://discuss.elastic.co/u/_kyllr)\
**Replies:** 3\
**Last updated:** [December 18, 2018, 9:37am UTC](https://discuss.elastic.co/t/how-to-get-the-top-hit-result-from-the-aggregated-95th-percentile/161117 "2018-12-18T09:37:11Z")

</div>

Hello, I have this visualization below to get the 95th percentile per hour: { "size": 0, "\_source": { "excludes": \[\] }, "aggs": { "2": { "date\_histogram": { "field": "AuthorizationUTCTimestamp", "inte…

---

## [High cpu load elasticsearch on logstash output](https://discuss.elastic.co/t/high-cpu-load-elasticsearch-on-logstash-output/161009)

<div class="topic-metadata">

**Author:** [@tim.van.rooijen](https://discuss.elastic.co/u/tim.van.rooijen)\
**Replies:** 9\
**Last updated:** [December 18, 2018, 9:33am UTC](https://discuss.elastic.co/t/high-cpu-load-elasticsearch-on-logstash-output/161009 "2018-12-18T09:33:36Z")

</div>

Hi, Beginner with the elk stack. Have an api thats sends messages to rabbit mq. Logstash reads the messages and adds them to elasticsearch. When the api is under peak load the cpu load on elasticsearch is really high. …

---

## [Monitoring interruptions on nodes](https://discuss.elastic.co/t/monitoring-interruptions-on-nodes/161288)

<div class="topic-metadata">

**Author:** [@redcho](https://discuss.elastic.co/u/redcho)\
**Replies:** 0\
**Last updated:** [December 18, 2018, 9:03am UTC](https://discuss.elastic.co/t/monitoring-interruptions-on-nodes/161288 "2018-12-18T09:03:20Z")

</div>

Hi guys, I have a cluster running on Docker images ( Elasticsearch 6.5) managed by Kubernetes. When I look at the monitoring panel in Kibana it shows interrupted graphs like below. I suspect it is due to Kubernetes serv…

---

## [Field\_name.keyword appended to fields after upgrading to 6.5.x](https://discuss.elastic.co/t/field-name-keyword-appended-to-fields-after-upgrading-to-6-5-x/161264)

<div class="topic-metadata">

**Author:** [@popa](https://discuss.elastic.co/u/popa)\
**Replies:** 5\
**Last updated:** [December 18, 2018, 8:56am UTC](https://discuss.elastic.co/t/field-name-keyword-appended-to-fields-after-upgrading-to-6-5-x/161264 "2018-12-18T08:56:54Z")

</div>

I've noticed that most (if not all) of my field\_names have a .keyword appended to them after upgrading my Elastic Stack from 6.4.x to 6.5.x. One thing that I've noticed is that when doing a unique count of a particular …

---

## [Indexed document](https://discuss.elastic.co/t/indexed-document/161282)

<div class="topic-metadata">

**Author:** [@Raghunadhan](https://discuss.elastic.co/u/Raghunadhan)\
**Replies:** 2\
**Last updated:** [December 18, 2018, 8:37am UTC](https://discuss.elastic.co/t/indexed-document/161282 "2018-12-18T08:37:18Z")

</div>

What does indexing a document mean? can you explain .

---

## [Best way to implement terms query for analyzed field](https://discuss.elastic.co/t/best-way-to-implement-terms-query-for-analyzed-field/161088)

<div class="topic-metadata">

**Author:** [@tom\_es](https://discuss.elastic.co/u/tom_es)\
**Replies:** 1\
**Last updated:** [December 18, 2018, 8:10am UTC](https://discuss.elastic.co/t/best-way-to-implement-terms-query-for-analyzed-field/161088 "2018-12-18T08:10:04Z")

</div>

Hi, I have a document that contains a text field with a hierarchy path doc { path: "some/long/path/to/file.txt" } now, my requirements are that I will be able to query all the documents that their path field en…

---

## [Failed shard recovery after hard shutdown](https://discuss.elastic.co/t/failed-shard-recovery-after-hard-shutdown/160998)

<div class="topic-metadata">

**Author:** [@kamal](https://discuss.elastic.co/u/kamal)\
**Replies:** 3\
**Last updated:** [December 18, 2018, 8:07am UTC](https://discuss.elastic.co/t/failed-shard-recovery-after-hard-shutdown/160998 "2018-12-18T08:07:04Z")

</div>

Hi I was doing a huge indexing job(about 400 billion records), but suddenly one of the nodes went down because the power failed, after fixing the power, one shard is missing, and the error is: shard failure, reason \[f…

---

## [How to hide some data(Sensitive data)](https://discuss.elastic.co/t/how-to-hide-some-data-sensitive-data/160191)

<div class="topic-metadata">

**Author:** [@murtazahzaveri](https://discuss.elastic.co/u/murtazahzaveri)\
**Replies:** 2\
**Last updated:** [December 18, 2018, 8:05am UTC](https://discuss.elastic.co/t/how-to-hide-some-data-sensitive-data/160191 "2018-12-18T08:05:52Z")

</div>

Following is my query: { size: 0, aggs:{ property:{ nested: {path: "dept"}, aggs: { dept\_name: { terms: { field: "dept.dept\_name" size: 10000 }, aggs: { id: { cardinality: { field:"dept\_dept\_name.id" } } …

---

## [Error in Taking Snapshot](https://discuss.elastic.co/t/error-in-taking-snapshot/161273)

<div class="topic-metadata">

**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\
**Replies:** 0\
**Last updated:** [December 18, 2018, 8:02am UTC](https://discuss.elastic.co/t/error-in-taking-snapshot/161273 "2018-12-18T08:02:57Z")

</div>

I updated the path.repo to a Windows shared drive folder and tried starting the ElasticSearch, I get the below error message: path.repo: \["\\\\\\\\10.\*\*.\*\*.\*\*\*\\\\Snapshots"\] \[2018-12-18T07:41:37,014\]\[ERROR\]\[o.e.b.Bootstrap …

---

## [Issue in aggregations in Elasticsearch and kibana](https://discuss.elastic.co/t/issue-in-aggregations-in-elasticsearch-and-kibana/161271)

<div class="topic-metadata">

**Author:** [@yashraj](https://discuss.elastic.co/u/yashraj)\
**Replies:** 0\
**Last updated:** [December 18, 2018, 8:02am UTC](https://discuss.elastic.co/t/issue-in-aggregations-in-elasticsearch-and-kibana/161271 "2018-12-18T08:02:38Z")

</div>

Hi, I am using ELK version 6.1.1 with in my Ubuntu 16.04 LTS. problem statement: I have logs which are getting logged in every hour. First I want to find max of a particular field coming in that log line, now I want t…

---

## [Query execution time](https://discuss.elastic.co/t/query-execution-time/160406)

<div class="topic-metadata">

**Author:** [@Famas](https://discuss.elastic.co/u/Famas)\
**Replies:** 3\
**Last updated:** [December 18, 2018, 7:36am UTC](https://discuss.elastic.co/t/query-execution-time/160406 "2018-12-18T07:36:17Z")

</div>

Hi all, I've a generic question about the query execution time. I'm using Kibana to query a Elasticsearch server. Regardless of the server hardware (I tried to query three different ES cluster) and regardless of the q…

---

## [Are there case studies about using intermediate queries in a search?](https://discuss.elastic.co/t/are-there-case-studies-about-using-intermediate-queries-in-a-search/161018)

<div class="topic-metadata">

**Author:** [@AlexisWilke](https://discuss.elastic.co/u/AlexisWilke)\
**Replies:** 7\
**Last updated:** [December 18, 2018, 6:14am UTC](https://discuss.elastic.co/t/are-there-case-studies-about-using-intermediate-queries-in-a-search/161018 "2018-12-18T06:14:47Z")

</div>

I want to allow my users to filter their search results by various tags. Imagine a WordPress like website where each blog post has a set of tags. When my users go to the advanced search page, they can select a number o…

---

## [Elastic-search Cluster resizing](https://discuss.elastic.co/t/elastic-search-cluster-resizing/161169)

<div class="topic-metadata">

**Author:** [@Suhas\_K](https://discuss.elastic.co/u/Suhas_K)\
**Replies:** 2\
**Last updated:** [December 18, 2018, 5:51am UTC](https://discuss.elastic.co/t/elastic-search-cluster-resizing/161169 "2018-12-18T05:51:22Z")

</div>

Hi, I have a 6 node cluster running in two different servers. I have made some changes in rackid . cluster.routing.allocation.awareness.attributes: rack\_id = Some rackid About rackid I want to restructure the cluster…

---

## [Elasticsearch Query Template Help - Wildcard and Fuzzy](https://discuss.elastic.co/t/elasticsearch-query-template-help-wildcard-and-fuzzy/161211)

<div class="topic-metadata">

**Author:** [@tiagoverissimo](https://discuss.elastic.co/u/tiagoverissimo)\
**Replies:** 1\
**Last updated:** [December 18, 2018, 5:44am UTC](https://discuss.elastic.co/t/elasticsearch-query-template-help-wildcard-and-fuzzy/161211 "2018-12-18T05:44:12Z")

</div>

Hey Guys! I'll need some help - we are trying to build a search system. And we have a few business rules. Right now, our search template is looking like this: GET web-shop-0/\_search { "query": { "bool": { "s…

---

## [Build index problem when batch import](https://discuss.elastic.co/t/build-index-problem-when-batch-import/161234)

<div class="topic-metadata">

**Author:** [@zcx](https://discuss.elastic.co/u/zcx)\
**Replies:** 0\
**Last updated:** [December 18, 2018, 2:17am UTC](https://discuss.elastic.co/t/build-index-problem-when-batch-import/161234 "2018-12-18T02:17:41Z")

</div>

If you're doing bulk imports, consider closing copies by setting index.number\_of\_replicas: 0.When a document is copied, the entire document content is sent to the replica node and the indexing process is repeated verbati…

---

## [Data Node runs out of memory (3.8 million IndexRequest)](https://discuss.elastic.co/t/data-node-runs-out-of-memory-3-8-million-indexrequest/161226)

<div class="topic-metadata">

**Author:** [@robert-blankenship](https://discuss.elastic.co/u/robert-blankenship)\
**Replies:** 0\
**Last updated:** [December 18, 2018, 12:26am UTC](https://discuss.elastic.co/t/data-node-runs-out-of-memory-3-8-million-indexrequest/161226 "2018-12-18T00:26:31Z")

</div>

The "Objects" column (2nd column) shows the total number of instances for that class/package, and the retained size shows the size of that class and all of its members. There are thus 70,000 TransportReplicationAction$…

---

## [Query for current index latency](https://discuss.elastic.co/t/query-for-current-index-latency/161217)

<div class="topic-metadata">

**Author:** [@justinw](https://discuss.elastic.co/u/justinw)\
**Replies:** 0\
**Last updated:** [December 17, 2018, 10:12pm UTC](https://discuss.elastic.co/t/query-for-current-index-latency/161217 "2018-12-17T22:12:28Z")

</div>

Hi, We currently have a monitoring cluster setup on elastic cloud. It has a page, at URL app/monitoring#/elasticsearch/indices/\<name\> that shows stats on the index, including index latency. What API can I hit to build …

---

## [Update \_meta using NEST](https://discuss.elastic.co/t/update-meta-using-nest/161207)

<div class="topic-metadata">

**Author:** [@cas4](https://discuss.elastic.co/u/cas4)\
**Replies:** 0\
**Last updated:** [December 17, 2018, 8:51pm UTC](https://discuss.elastic.co/t/update-meta-using-nest/161207 "2018-12-17T20:51:53Z")

</div>

I'm using the \_meta field to store information about my index. When I initialize the index, I'm able to add the meta-data using the following NEST syntax: await Client.CreateIndexAsync(plugin.IndexName, (index) =\> inde…

---

## [Filter for Iterable containing all values](https://discuss.elastic.co/t/filter-for-iterable-containing-all-values/161197)

<div class="topic-metadata">

**Author:** [@NoZomIBK](https://discuss.elastic.co/u/NoZomIBK)\
**Replies:** 0\
**Last updated:** [December 17, 2018, 6:27pm UTC](https://discuss.elastic.co/t/filter-for-iterable-containing-all-values/161197 "2018-12-17T18:27:26Z")

</div>

Hi, I was updating some old java Code from ES 1.4.4 to ES 6.5 and stumbled over some code i do not find a solution in the new version. I want to filter for documents with an iterable field to contain all given elements…

---

## [Need help in understanding script - compilations from \_nodes/stats](https://discuss.elastic.co/t/need-help-in-understanding-script-compilations-from-nodes-stats/160984)

<div class="topic-metadata">

**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Replies:** 3\
**Last updated:** [December 17, 2018, 6:14pm UTC](https://discuss.elastic.co/t/need-help-in-understanding-script-compilations-from-nodes-stats/160984 "2018-12-17T18:14:03Z")

</div>

Hi All, We are getting circuit breaker exceptions on script compilations during watch deployment, and after increasing from default 75/5m to a higher value viz. 200/5s, it worked. But, wanted to check what is the exact …

---

## [Term vectors filter by search word](https://discuss.elastic.co/t/term-vectors-filter-by-search-word/157154)

<div class="topic-metadata">

**Author:** [@bjo](https://discuss.elastic.co/u/bjo)\
**Replies:** 6\
**Last updated:** [December 17, 2018, 5:44pm UTC](https://discuss.elastic.co/t/term-vectors-filter-by-search-word/157154 "2018-12-17T17:44:43Z")

</div>

I have implemented the examples in Term Vectors and Multi termvectors API but it seems like all these examples are designed to get document/documents based on id/ids. Is there some way of filtering the term results base…

---

## [Fatal error in thread java.lang.StackOverflowError:null](https://discuss.elastic.co/t/fatal-error-in-thread-java-lang-stackoverflowerror-null/161191)

<div class="topic-metadata">

**Author:** [@Melanie\_Zamora](https://discuss.elastic.co/u/Melanie_Zamora)\
**Replies:** 0\
**Last updated:** [December 17, 2018, 4:38pm UTC](https://discuss.elastic.co/t/fatal-error-in-thread-java-lang-stackoverflowerror-null/161191 "2018-12-17T16:38:19Z")

</div>

Hello, we just recently upgraded from ES 2.4 to ES 6.4.0 and randomly across all of our nodes, we have been getting the following stackoverflow exception which complete crashes the elasticsearch process. Anyone ran into …

---

## [Use wildcards to search in Kibana](https://discuss.elastic.co/t/use-wildcards-to-search-in-kibana/161109)

<div class="topic-metadata">

**Author:** [@M.alsioufi](https://discuss.elastic.co/u/M.alsioufi)\
**Replies:** 5\
**Last updated:** [December 17, 2018, 4:08pm UTC](https://discuss.elastic.co/t/use-wildcards-to-search-in-kibana/161109 "2018-12-17T16:08:46Z")

</div>

Hi, I have an index where I store file names and their full paths like this {"file\_name": "abc-01\_00", "full\_path":"D:\\\\UAE\\\\Data\\\\abc-01\\\\abc-01\_00.clc"} These files represent a series, so the next file name in the s…

---

## [Run watcher every 90 minutes with cron](https://discuss.elastic.co/t/run-watcher-every-90-minutes-with-cron/161102)

<div class="topic-metadata">

**Author:** [@Yasser\_Ouakil](https://discuss.elastic.co/u/Yasser_Ouakil)\
**Replies:** 2\
**Last updated:** [December 17, 2018, 2:31pm UTC](https://discuss.elastic.co/t/run-watcher-every-90-minutes-with-cron/161102 "2018-12-17T14:31:22Z")

</div>

Trying to adjust a cron to run every 90 min. It was previously running every 20 min, which was : 0 0/20 \* \* \* ? whatever How can i do the same things with 90min ?

---

## [How to sort after date with own format and bool query](https://discuss.elastic.co/t/how-to-sort-after-date-with-own-format-and-bool-query/161101)

<div class="topic-metadata">

**Author:** [@Nico92](https://discuss.elastic.co/u/Nico92)\
**Replies:** 0\
**Last updated:** [December 17, 2018, 9:19am UTC](https://discuss.elastic.co/t/how-to-sort-after-date-with-own-format-and-bool-query/161101 "2018-12-17T09:19:12Z")

</div>

Hey guys, I'm using c# nest library to create my index with special DateTime Format, because I need the exact millisecond time from my date How it looks like in c#: public class IndexClass { .... \[Date(Format = …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1448)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1450)
