# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1475

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1476

---

## [A new store plugin: native-unix-store](https://discuss.elastic.co/t/a-new-store-plugin-native-unix-store/157843)

<div class="topic-metadata">

**Author:** [@LeMic](https://discuss.elastic.co/u/LeMic)\
**Replies:** 0\
**Last updated:** [November 22, 2018, 9:45am UTC](https://discuss.elastic.co/t/a-new-store-plugin-native-unix-store/157843 "2018-11-22T09:45:14Z")

</div>

Hi all, Following this discussion on Github (https://github.com/elastic/elasticsearch/issues/27748), I released a new store plugin which uses native syscalls on Linux and helps to reduce the search latency especially on…

---

## [Correct sharding and indexes for Logging System](https://discuss.elastic.co/t/correct-sharding-and-indexes-for-logging-system/157826)

<div class="topic-metadata">

**Author:** [@CamTheMan](https://discuss.elastic.co/u/CamTheMan)\
**Replies:** 3\
**Last updated:** [November 22, 2018, 9:00am UTC](https://discuss.elastic.co/t/correct-sharding-and-indexes-for-logging-system/157826 "2018-11-22T09:00:44Z")

</div>

Hello All, I was wondering if anyone can provide any guidance on the following points. I have a 5 server cluster running each with: 24 CPU Cores 64 GB RAM (30 for elastic the rest for file caches) Lots of SSD disk T…

---

## [Filter query taking much time in build\_score why?](https://discuss.elastic.co/t/filter-query-taking-much-time-in-build-score-why/157735)

<div class="topic-metadata">

**Author:** [@pksinghal](https://discuss.elastic.co/u/pksinghal)\
**Replies:** 0\
**Last updated:** [November 21, 2018, 3:31pm UTC](https://discuss.elastic.co/t/filter-query-taking-much-time-in-build-score-why/157735 "2018-11-21T15:31:34Z")

</div>

We have upgraded our ES from ES-2.3 to ES-6.4. So we have done reindexing of all our indexes. Now while running the query to new elasticsearch, we got performance with such queries : { "\_source": false, "query": { "…

---

## [Index Routing Allocation does not move Index](https://discuss.elastic.co/t/index-routing-allocation-does-not-move-index/157503)

<div class="topic-metadata">

**Author:** [@cduong](https://discuss.elastic.co/u/cduong)\
**Replies:** 5\
**Last updated:** [November 22, 2018, 8:46am UTC](https://discuss.elastic.co/t/index-routing-allocation-does-not-move-index/157503 "2018-11-22T08:46:41Z")

</div>

Hi, I'm using Elastic Cloud. I created the cluster with Hot Warm arch for timeseries. I applied the Index Curation in which it will move index after 1 day from Hot node to the Warm node. After 2/3 days, I checked the i…

---

## [Elasticsearch Error: SearchPhaseExecutionException: All Shards Failed](https://discuss.elastic.co/t/elasticsearch-error-searchphaseexecutionexception-all-shards-failed/157816)

<div class="topic-metadata">

**Author:** [@dx123](https://discuss.elastic.co/u/dx123)\
**Replies:** 1\
**Last updated:** [November 22, 2018, 8:40am UTC](https://discuss.elastic.co/t/elasticsearch-error-searchphaseexecutionexception-all-shards-failed/157816 "2018-11-22T08:40:41Z")

</div>

Never encountered this error before until now. I'm indexing the results of an aggregation query performed on hundreds and thousands of documents when things failed and I got this error. \[2018-11-22T10:00:22,291\]\[DEBUG\]\[…

---

## [Why does the ingest-attachment plugin not retrieve dates?](https://discuss.elastic.co/t/why-does-the-ingest-attachment-plugin-not-retrieve-dates/157799)

<div class="topic-metadata">

**Author:** [@ottadini](https://discuss.elastic.co/u/ottadini)\
**Replies:** 1\
**Last updated:** [November 22, 2018, 7:44am UTC](https://discuss.elastic.co/t/why-does-the-ingest-attachment-plugin-not-retrieve-dates/157799 "2018-11-22T07:44:26Z")

</div>

The ingest attachment plugin, with default 'properties' handling (i.e., get all properties), should retrieve a bunch of metadata, but for some files like image formats I've been testing it doesn't return dates, or anythi…

---

## [Get sample documents](https://discuss.elastic.co/t/get-sample-documents/157698)

<div class="topic-metadata">

**Author:** [@Oren\_Friman](https://discuss.elastic.co/u/Oren_Friman)\
**Replies:** 3\
**Last updated:** [November 22, 2018, 7:25am UTC](https://discuss.elastic.co/t/get-sample-documents/157698 "2018-11-22T07:25:22Z")

</div>

Hi, is there a way to fetch sample data from specific index ?

---

## [Unusual High CPU usage of cluster nodes](https://discuss.elastic.co/t/unusual-high-cpu-usage-of-cluster-nodes/157805)

<div class="topic-metadata">

**Author:** [@c1f69af621141d968d7f](https://discuss.elastic.co/u/c1f69af621141d968d7f)\
**Replies:** 0\
**Last updated:** [November 22, 2018, 6:18am UTC](https://discuss.elastic.co/t/unusual-high-cpu-usage-of-cluster-nodes/157805 "2018-11-22T06:18:57Z")

</div>

Describe the feature : High CPU usage of nodes. Elasticsearch version ( bin/elasticsearch --version ): 1.4.5 Plugins installed : JVM version ( java -version ): openjdk version "1.8.0\_191" OS version ( uname -a i…

---

## [Elasticsearch Shards/Indices planning](https://discuss.elastic.co/t/elasticsearch-shards-indices-planning/157728)

<div class="topic-metadata">

**Author:** [@skat80](https://discuss.elastic.co/u/skat80)\
**Replies:** 3\
**Last updated:** [November 22, 2018, 5:29am UTC](https://discuss.elastic.co/t/elasticsearch-shards-indices-planning/157728 "2018-11-22T05:29:55Z")

</div>

Hello, While planning how to allocate shards in 3-nodes Elasticsearch cluster , I was totally overwhelmed. Should anybody please check the following points and shed some light ? What is indices ? I've read that do…

---

## [Count of a particular item in array](https://discuss.elastic.co/t/count-of-a-particular-item-in-array/157719)

<div class="topic-metadata">

**Author:** [@Sangeeth](https://discuss.elastic.co/u/Sangeeth)\
**Replies:** 2\
**Last updated:** [November 22, 2018, 5:22am UTC](https://discuss.elastic.co/t/count-of-a-particular-item-in-array/157719 "2018-11-22T05:22:26Z")

</div>

There are 5 documents each with a field "fruits" which is of type array. #1 fruits = \["apple","apple","orange"\] #2 fruits = \["orange","grapes","mango"\] #3 fruits = \["mango","apple","apple"\] #4 fruits = \["apple","…

---

## [Elastic Search client options for Spring Boot 2.0.6 application](https://discuss.elastic.co/t/elastic-search-client-options-for-spring-boot-2-0-6-application/157794)

<div class="topic-metadata">

**Author:** [@swap](https://discuss.elastic.co/u/swap)\
**Replies:** 0\
**Last updated:** [November 22, 2018, 2:58am UTC](https://discuss.elastic.co/t/elastic-search-client-options-for-spring-boot-2-0-6-application/157794 "2018-11-22T02:58:58Z")

</div>

i) We are planning to build a new application using Spring Boot 2 and use Elastic Search for our application searches. ii) Spring Boot 2.X comes with ElasticSearch 5.5 (ElasticSearch 5.5 doesn't support High-Level-Rest-…

---

## [Aggregation on multiple fields](https://discuss.elastic.co/t/aggregation-on-multiple-fields/157793)

<div class="topic-metadata">

**Author:** [@mctsdmr](https://discuss.elastic.co/u/mctsdmr)\
**Replies:** 0\
**Last updated:** [November 22, 2018, 2:39am UTC](https://discuss.elastic.co/t/aggregation-on-multiple-fields/157793 "2018-11-22T02:39:54Z")

</div>

Hello folks! I need a query in which I can aggregate on multiple fields -4 fields to be more specific- and as far as I understand, the only way to create such a query is using nested aggregations. But when that's the ca…

---

## [Strategy for remove invalid documents](https://discuss.elastic.co/t/strategy-for-remove-invalid-documents/157790)

<div class="topic-metadata">

**Author:** [@Timotius\_Pamungkas](https://discuss.elastic.co/u/Timotius_Pamungkas)\
**Replies:** 1\
**Last updated:** [November 22, 2018, 2:10am UTC](https://discuss.elastic.co/t/strategy-for-remove-invalid-documents/157790 "2018-11-22T02:10:31Z")

</div>

I use elasticsearch to indexing filesystem and create search engine for all PDF documents (around 3 million of them). My current work flow: I create a small java program that runs everyday at midnight, crawling filesy…

---

## [ctx.execution\_time.getMillis() no longer works with Elasticsearch 6.5.0](https://discuss.elastic.co/t/ctx-execution-time-getmillis-no-longer-works-with-elasticsearch-6-5-0/157788)

<div class="topic-metadata">

**Author:** [@tphongio](https://discuss.elastic.co/u/tphongio)\
**Replies:** 1\
**Last updated:** [November 21, 2018, 11:41pm UTC](https://discuss.elastic.co/t/ctx-execution-time-getmillis-no-longer-works-with-elasticsearch-6-5-0/157788 "2018-11-21T23:41:53Z")

</div>

I have been using ctx.execution\_time.getMillis() in painless script for my watcher and it has been working until 6.5.0. Here is the error from watcher execution: "type": "script\_exception", "reason": "runtime er…

---

## [Handling errors during bulk indexing](https://discuss.elastic.co/t/handling-errors-during-bulk-indexing/157783)

<div class="topic-metadata">

**Author:** [@oskar](https://discuss.elastic.co/u/oskar)\
**Replies:** 0\
**Last updated:** [November 21, 2018, 10:25pm UTC](https://discuss.elastic.co/t/handling-errors-during-bulk-indexing/157783 "2018-11-21T22:25:02Z")

</div>

I'm trying to setup a parsing system for a number of different files of different formats (mostly XML). The content of these files are parsed (in parallel) with data partially stored in a relational database and the rest…

---

## [Elasticsearch Kubernetes Private IP Address](https://discuss.elastic.co/t/elasticsearch-kubernetes-private-ip-address/155799)

<div class="topic-metadata">

**Author:** [@mosiddi](https://discuss.elastic.co/u/mosiddi)\
**Replies:** 1\
**Last updated:** [November 21, 2018, 10:04pm UTC](https://discuss.elastic.co/t/elasticsearch-kubernetes-private-ip-address/155799 "2018-11-21T22:04:17Z")

</div>

Hi, Anyone tried creating Elasticsearch cluster with docker image in kubernetes and assigned private IP addresses to nodes (pods)? If yes, can we also have multiple pods in same node and each pod having a distinct priva…

---

## [Get results if every word match is there in any of the fields](https://discuss.elastic.co/t/get-results-if-every-word-match-is-there-in-any-of-the-fields/155065)

<div class="topic-metadata">

**Author:** [@Mayur\_Patel1](https://discuss.elastic.co/u/Mayur_Patel1)\
**Replies:** 1\
**Last updated:** [November 21, 2018, 10:03pm UTC](https://discuss.elastic.co/t/get-results-if-every-word-match-is-there-in-any-of-the-fields/155065 "2018-11-21T22:03:05Z")

</div>

I have an index "all\_people" with the mapping at the end of the question. So I want to write an elastic search query to get the results if all words match somewhere in 3-4 fields. Example: If I search for "Pathway Lond…

---

## [(newbie) Query elasticsearch as term query with multiple terms with AND and OR](https://discuss.elastic.co/t/newbie-query-elasticsearch-as-term-query-with-multiple-terms-with-and-and-or/155061)

<div class="topic-metadata">

**Author:** [@vchauras](https://discuss.elastic.co/u/vchauras)\
**Replies:** 1\
**Last updated:** [November 21, 2018, 9:59pm UTC](https://discuss.elastic.co/t/newbie-query-elasticsearch-as-term-query-with-multiple-terms-with-and-and-or/155061 "2018-11-21T21:59:54Z")

</div>

I have a scenario where I want to get documents from elastic which have any one of the following text: 1- "samsung s8" 2- "silverado" 3- "rims" 4- "ping pong" As one can see here, "samsung s8/"ping pong" should have…

---

## [Measuring Shard hits](https://discuss.elastic.co/t/measuring-shard-hits/157750)

<div class="topic-metadata">

**Author:** [@jayDev](https://discuss.elastic.co/u/jayDev)\
**Replies:** 1\
**Last updated:** [November 21, 2018, 9:55pm UTC](https://discuss.elastic.co/t/measuring-shard-hits/157750 "2018-11-21T21:55:08Z")

</div>

I have my indexes mostly in time-aligned shards, so each 24 hour period results in a new shard. I am interested to know if I can measure the relative search hits per shard across each index. The reason for doing this, …

---

## [How to restart a data node that was stopped for a long time](https://discuss.elastic.co/t/how-to-restart-a-data-node-that-was-stopped-for-a-long-time/157675)

<div class="topic-metadata">

**Author:** [@mahn](https://discuss.elastic.co/u/mahn)\
**Replies:** 2\
**Last updated:** [November 21, 2018, 5:02pm UTC](https://discuss.elastic.co/t/how-to-restart-a-data-node-that-was-stopped-for-a-long-time/157675 "2018-11-21T17:02:55Z")

</div>

We plan to restart a data note that was stopped for a long time ( \> 20 days). Cluster version is 6.4.1 and it is in green state. Can we simply restart elasticsearch on the node or should we perform some operations befo…

---

## [ES6 parent-child join - how do you specify the child doc schema?](https://discuss.elastic.co/t/es6-parent-child-join-how-do-you-specify-the-child-doc-schema/157632)

<div class="topic-metadata">

**Author:** [@Ben\_Weisburd](https://discuss.elastic.co/u/Ben_Weisburd)\
**Replies:** 1\
**Last updated:** [November 21, 2018, 8:11pm UTC](https://discuss.elastic.co/t/es6-parent-child-join-how-do-you-specify-the-child-doc-schema/157632 "2018-11-21T20:11:08Z")

</div>

In the "question"/"answer" example on https://www.elastic.co/guide/en/elasticsearch/reference/current/parent-join.html the parent and child docs have the same schema (a single field called "text"). In my case, the par…

---

## [ElasticSearch Sorting parent documents based on number of child documents satisfying some filter](https://discuss.elastic.co/t/elasticsearch-sorting-parent-documents-based-on-number-of-child-documents-satisfying-some-filter/157773)

<div class="topic-metadata">

**Author:** [@Ashish\_Kumar2](https://discuss.elastic.co/u/Ashish_Kumar2)\
**Replies:** 0\
**Last updated:** [November 21, 2018, 7:47pm UTC](https://discuss.elastic.co/t/elasticsearch-sorting-parent-documents-based-on-number-of-child-documents-satisfying-some-filter/157773 "2018-11-21T19:47:37Z")

</div>

Problem statement I am having nested documents where I have to apply some filters on nested document and want to sort the parent documents based on the number of nested documents satisfying that filter. //Sample proble…

---

## [Access Denied Exception with Shrink and Delete After using Curator](https://discuss.elastic.co/t/access-denied-exception-with-shrink-and-delete-after-using-curator/157761)

<div class="topic-metadata">

**Author:** [@Micah\_Hunsberger](https://discuss.elastic.co/u/Micah_Hunsberger)\
**Replies:** 5\
**Last updated:** [November 21, 2018, 7:47pm UTC](https://discuss.elastic.co/t/access-denied-exception-with-shrink-and-delete-after-using-curator/157761 "2018-11-21T19:47:03Z")

</div>

I'm using curator with Elasticsearch version 6.3.0 to do a shrink and delete after action on indices after they've been rolled over. It appears to operate without errors, since the curator log does not show any errors, …

---

## [Behaviour of match phrase query on english analyzed fields with stopwords](https://discuss.elastic.co/t/behaviour-of-match-phrase-query-on-english-analyzed-fields-with-stopwords/155210)

<div class="topic-metadata">

**Author:** [@Jaspreet\_Singh](https://discuss.elastic.co/u/Jaspreet_Singh)\
**Replies:** 3\
**Last updated:** [November 21, 2018, 6:30pm UTC](https://discuss.elastic.co/t/behaviour-of-match-phrase-query-on-english-analyzed-fields-with-stopwords/155210 "2018-11-21T18:30:52Z")

</div>

Hi, I wanted to confirm a weird behaviour im observing when using match\_phrase query on english analyzed fields with stopwords. Assume my search string is analytics and prediction. Assume again, when searching against…

---

## [Making api call for listing watcher with callWithInternalUser](https://discuss.elastic.co/t/making-api-call-for-listing-watcher-with-callwithinternaluser/157760)

<div class="topic-metadata">

**Author:** [@PradeepDS](https://discuss.elastic.co/u/PradeepDS)\
**Replies:** 0\
**Last updated:** [November 21, 2018, 5:31pm UTC](https://discuss.elastic.co/t/making-api-call-for-listing-watcher-with-callwithinternaluser/157760 "2018-11-21T17:31:30Z")

</div>

How to make an api call to list watcher detail using callWithInternalUser as the logged in user manage\_watcher will be disabled. I have tried the below logic but getting invalid api error. i also tried calling watch…

---

## [Update plus With Script in Bulk](https://discuss.elastic.co/t/update-plus-with-script-in-bulk/157376)

<div class="topic-metadata">

**Author:** [@Loreto\_Parisi](https://discuss.elastic.co/u/Loreto_Parisi)\
**Replies:** 5\
**Last updated:** [November 21, 2018, 4:54pm UTC](https://discuss.elastic.co/t/update-plus-with-script-in-bulk/157376 "2018-11-21T16:54:10Z")

</div>

I'm using the bulk api for update actions with doc\_as\_upsert flag, in order to insert or update a document. This works ok. Now I would like to run a script as well for new or updated documents. Shall I use the script tag…

---

## [Getting error to run the snapshot script to back up indexes](https://discuss.elastic.co/t/getting-error-to-run-the-snapshot-script-to-back-up-indexes/157743)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 0\
**Last updated:** [November 21, 2018, 4:23pm UTC](https://discuss.elastic.co/t/getting-error-to-run-the-snapshot-script-to-back-up-indexes/157743 "2018-11-21T16:23:28Z")

</div>

HI, i want to take back up my indices using snapshot and my ES is running on docker, cluster.name: "docker-cluster" node.name: lpdosput020008.node node.master: true node.data: false node.ingest: false node.ml: false xp…

---

## [Can not be imported as a dangling index](https://discuss.elastic.co/t/can-not-be-imported-as-a-dangling-index/157644)

<div class="topic-metadata">

**Author:** [@cowensel](https://discuss.elastic.co/u/cowensel)\
**Replies:** 9\
**Last updated:** [November 21, 2018, 3:27pm UTC](https://discuss.elastic.co/t/can-not-be-imported-as-a-dangling-index/157644 "2018-11-21T15:27:16Z")

</div>

I have recently setup curator to delete old data but since then I am seeing a large increase in errors for dangling index and it relates to .Kibana which doesn't get touched by curator. \[2018-11-21T07:45:45,876\]\[WARN \]\[…

---

## [HIgh availability of ES](https://discuss.elastic.co/t/high-availability-of-es/155975)

<div class="topic-metadata">

**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\
**Replies:** 28\
**Last updated:** [November 21, 2018, 2:54pm UTC](https://discuss.elastic.co/t/high-availability-of-es/155975 "2018-11-21T14:54:17Z")

</div>

Hi I am using 6 node ES cluster of 3 masters and 3 data nodes. one master and one data node in each vm of the machine. Totally 3 machines. replication factor = 3. num of shards = 3. node left delay being set to 5m. W…

---

## [Cannot use RestHighLevelClient.performRequest() because of protected access](https://discuss.elastic.co/t/cannot-use-resthighlevelclient-performrequest-because-of-protected-access/157615)

<div class="topic-metadata">

**Author:** [@mikeg008](https://discuss.elastic.co/u/mikeg008)\
**Replies:** 1\
**Last updated:** [November 21, 2018, 2:46pm UTC](https://discuss.elastic.co/t/cannot-use-resthighlevelclient-performrequest-because-of-protected-access/157615 "2018-11-21T14:46:58Z")

</div>

I'm currently in the process of switching our system from using the TransportClient, to the RestHighLevel client. We are using the Rest Client v5.6 and following these instructions for migrating: https://www.elastic.co/…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1474)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1476)
