# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1490

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1491

---

## [Painless flatten](https://discuss.elastic.co/t/painless-flatten/155582)

<div class="topic-metadata">

**Author:** [@HU\_Jun](https://discuss.elastic.co/u/HU_Jun)\
**Replies:** 1\
**Last updated:** [November 8, 2018, 9:01pm UTC](https://discuss.elastic.co/t/painless-flatten/155582 "2018-11-08T21:01:41Z")

</div>

Working on a watcher, similar to Flatten nested aggregation but as I am still using ES 5.5, no composition agg avaiable :frowning: in my query, i have a cascade of aggregations: { aggs: { A aggs: …

---

## [Start up Elasticsearch](https://discuss.elastic.co/t/start-up-elasticsearch/155954)

<div class="topic-metadata">

**Author:** [@ELE](https://discuss.elastic.co/u/ELE)\
**Replies:** 1\
**Last updated:** [November 8, 2018, 8:35pm UTC](https://discuss.elastic.co/t/start-up-elasticsearch/155954 "2018-11-08T20:35:06Z")

</div>

Hi, I'm new in elastic When I'm trying to startup elastic I'm getting the following error message: Why it saying elastic CAN'T start as root ? ./bin/elasticsearch at org.elasticsearch.bootstrap.Elasticsearch.m…

---

## [Weird Search behavior for a beginner](https://discuss.elastic.co/t/weird-search-behavior-for-a-beginner/152729)

<div class="topic-metadata">

**Author:** [@saz](https://discuss.elastic.co/u/saz)\
**Replies:** 4\
**Last updated:** [November 8, 2018, 7:04pm UTC](https://discuss.elastic.co/t/weird-search-behavior-for-a-beginner/152729 "2018-11-08T19:04:04Z")

</div>

Hi Team, Just starting out with project on ElasticSearch. Just landed on a solution which actually worked for a problem but I am frustrated how that it actually works ??!!! Would like to understand what's going on beh…

---

## [How to improve refresh time?](https://discuss.elastic.co/t/how-to-improve-refresh-time/155860)

<div class="topic-metadata">

**Author:** [@Pavel\_Pokorny](https://discuss.elastic.co/u/Pavel_Pokorny)\
**Replies:** 0\
**Last updated:** [November 8, 2018, 10:13am UTC](https://discuss.elastic.co/t/how-to-improve-refresh-time/155860 "2018-11-08T10:13:05Z")

</div>

Hello, In our production cluster on AWS we have 8 i3.xlarge ingest+data nodes and 3 m3.medium master nodes. Indices have refresh\_interval=-1, translog.durability=async, 6 shards and 2 replicas. We have a service called…

---

## [Setting for option discovery.zen.ping.unicast.hosts in elasticsearch.yml](https://discuss.elastic.co/t/setting-for-option-discovery-zen-ping-unicast-hosts-in-elasticsearch-yml/155710)

<div class="topic-metadata">

**Author:** [@vmanohar1](https://discuss.elastic.co/u/vmanohar1)\
**Replies:** 11\
**Last updated:** [November 8, 2018, 6:25pm UTC](https://discuss.elastic.co/t/setting-for-option-discovery-zen-ping-unicast-hosts-in-elasticsearch-yml/155710 "2018-11-08T18:25:14Z")

</div>

As per the documentation setting can be - discovery.zen.ping.unicast.hosts: \["host1", "host2"\]. Both hosts host1 and host2 are in their private networks e.g. in 20.x.x.x and 30.x.x.x. These 2 networks can't talk to each…

---

## [Can clusters set up across the same nodes access the same repository?](https://discuss.elastic.co/t/can-clusters-set-up-across-the-same-nodes-access-the-same-repository/155937)

<div class="topic-metadata">

**Author:** [@juiip](https://discuss.elastic.co/u/juiip)\
**Replies:** 0\
**Last updated:** [November 8, 2018, 4:59pm UTC](https://discuss.elastic.co/t/can-clusters-set-up-across-the-same-nodes-access-the-same-repository/155937 "2018-11-08T16:59:39Z")

</div>

I have one cluster across two servers which has a number of snapshots stored within a shared repository. I have another cluster across the same two servers, but when I test whether it can locate the same repo (it is def…

---

## [Kibana not connecting to Nginx](https://discuss.elastic.co/t/kibana-not-connecting-to-nginx/155935)

<div class="topic-metadata">

**Author:** [@Ralph\_Lawrence](https://discuss.elastic.co/u/Ralph_Lawrence)\
**Replies:** 0\
**Last updated:** [November 8, 2018, 4:46pm UTC](https://discuss.elastic.co/t/kibana-not-connecting-to-nginx/155935 "2018-11-08T16:46:31Z")

</div>

Is there a basic configuration for using nginx with kibana as a reverse proxy server. Here is my configuration: server { listen 80 default\_server; listen \[::\]:80 default\_server; server\_name \_; return 301 https://$h…

---

## [Curator does not work correctly](https://discuss.elastic.co/t/curator-does-not-work-correctly/155905)

<div class="topic-metadata">

**Author:** [@Imad\_Bouchakour](https://discuss.elastic.co/u/Imad_Bouchakour)\
**Replies:** 10\
**Last updated:** [November 8, 2018, 4:43pm UTC](https://discuss.elastic.co/t/curator-does-not-work-correctly/155905 "2018-11-08T16:43:05Z")

</div>

I have curator 5.5.4 installed in my debian 9, sometimes curator works when i execute a command like curator --version or curator --help, but most of the time curator does not work and the command gives nothing Why ??

---

## [How to roll back from ES 6.4.3 to 5.6.12 - using snapshot & restore](https://discuss.elastic.co/t/how-to-roll-back-from-es-6-4-3-to-5-6-12-using-snapshot-restore/155923)

<div class="topic-metadata">

**Author:** [@juiip](https://discuss.elastic.co/u/juiip)\
**Replies:** 0\
**Last updated:** [November 8, 2018, 3:50pm UTC](https://discuss.elastic.co/t/how-to-roll-back-from-es-6-4-3-to-5-6-12-using-snapshot-restore/155923 "2018-11-08T15:50:36Z")

</div>

I took a snapshot of my cluster in version 5.6.12, upgraded to 6.4.3 but now want to move back to 5.6.12... Is it possible to roll back by restoring this snapshot? I tried running the following command in Kibana: POST…

---

## [Auto\_import\_dangled for ES 6.3.X](https://discuss.elastic.co/t/auto-import-dangled-for-es-6-3-x/155789)

<div class="topic-metadata">

**Author:** [@fassisrosa](https://discuss.elastic.co/u/fassisrosa)\
**Replies:** 6\
**Last updated:** [November 8, 2018, 4:03pm UTC](https://discuss.elastic.co/t/auto-import-dangled-for-es-6-3-x/155789 "2018-11-08T16:03:36Z")

</div>

Hi there, I am having some issues with dangled indexes. Scenario seems to be: \*) Data node went down, was down for a while. \*) Life went on, some indexes were deleted from cluster. \*) Data node came back, saw indices…

---

## [POC elastic search - correctness & exactitude of stats](https://discuss.elastic.co/t/poc-elastic-search-correctness-exactitude-of-stats/155881)

<div class="topic-metadata">

**Author:** [@msc29](https://discuss.elastic.co/u/msc29)\
**Replies:** 8\
**Last updated:** [November 8, 2018, 3:34pm UTC](https://discuss.elastic.co/t/poc-elastic-search-correctness-exactitude-of-stats/155881 "2018-11-08T15:34:32Z")

</div>

Hi, We're about to start a POC with elastic search. Prior to posting here, I read so many blogs/answers/topics/... regarding the fact ES is fast, but can return incorrect or approximate results... What we need to be a…

---

## [Updating plugins automatically after package-updates](https://discuss.elastic.co/t/updating-plugins-automatically-after-package-updates/155917)

<div class="topic-metadata">

**Author:** [@Hajo](https://discuss.elastic.co/u/Hajo)\
**Replies:** 0\
**Last updated:** [November 8, 2018, 3:06pm UTC](https://discuss.elastic.co/t/updating-plugins-automatically-after-package-updates/155917 "2018-11-08T15:06:22Z")

</div>

Hello, a few days we installed elasticsearch 5.6.12 and 2 plugins (analysis-icu, analysis-phonetic). Installation method is the external repo described here: https://www.elastic.co/guide/en/elasticsearch/reference/5.5/…

---

## [Change the scoring function for array using best score for elements](https://discuss.elastic.co/t/change-the-scoring-function-for-array-using-best-score-for-elements/155807)

<div class="topic-metadata">

**Author:** [@jack1234](https://discuss.elastic.co/u/jack1234)\
**Replies:** 3\
**Last updated:** [November 8, 2018, 2:57pm UTC](https://discuss.elastic.co/t/change-the-scoring-function-for-array-using-best-score-for-elements/155807 "2018-11-08T14:57:45Z")

</div>

Consider I have a text field called 'question' with element \['one','one shift','one apple'\]. Now say the query is 'one' with the following search query: query": { "match": { "question": { "quer…

---

## [One index or many indecies for documents in diffrent groups?](https://discuss.elastic.co/t/one-index-or-many-indecies-for-documents-in-diffrent-groups/155904)

<div class="topic-metadata">

**Author:** [@PeterSkarmyr](https://discuss.elastic.co/u/PeterSkarmyr)\
**Replies:** 0\
**Last updated:** [November 8, 2018, 2:22pm UTC](https://discuss.elastic.co/t/one-index-or-many-indecies-for-documents-in-diffrent-groups/155904 "2018-11-08T14:22:22Z")

</div>

I think this question is best described by using an example. Say I have one index called "myindex". The fields in this index have the following structure: Each document in this index contains a field called "group" …

---

## [Cannot start elastic service from services in windows](https://discuss.elastic.co/t/cannot-start-elastic-service-from-services-in-windows/155902)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 0\
**Last updated:** [November 8, 2018, 2:20pm UTC](https://discuss.elastic.co/t/cannot-start-elastic-service-from-services-in-windows/155902 "2018-11-08T14:20:16Z")

</div>

Getting error when starting elasticsearch in services windows When i check the TEMP folder there is a folder named C:\\Users\\State~\\AppData\\Local\\Temp\\3\\elasticsearch but nothing named C:\\Users\\State~\\AppData\\Local\\Te…

---

## [UpdateRequest always doing partial update?](https://discuss.elastic.co/t/updaterequest-always-doing-partial-update/155896)

<div class="topic-metadata">

**Author:** [@peter-ponzel](https://discuss.elastic.co/u/peter-ponzel)\
**Replies:** 1\
**Last updated:** [November 8, 2018, 2:13pm UTC](https://discuss.elastic.co/t/updaterequest-always-doing-partial-update/155896 "2018-11-08T14:13:11Z")

</div>

Hello, I'm using RestHighLevelClient 6.3.0 and wanted to migrate my "LowLevelClient" implementation of updating documents from client.getLowLevelClient().performRequest("PUT", "/index/type/id", Collections.emptyMap(), …

---

## [Specific Security Permissions for Index Patterns, Collectors, and Watchers](https://discuss.elastic.co/t/specific-security-permissions-for-index-patterns-collectors-and-watchers/155780)

<div class="topic-metadata">

**Author:** [@yesman](https://discuss.elastic.co/u/yesman)\
**Replies:** 2\
**Last updated:** [November 8, 2018, 2:03pm UTC](https://discuss.elastic.co/t/specific-security-permissions-for-index-patterns-collectors-and-watchers/155780 "2018-11-08T14:03:41Z")

</div>

Howdy! Just now joining the elastic community, but we have been using it at work for a little while now. I am currently working on setting up the roles/user for my organization's instance of Kibana. It was requested th…

---

## [Search query for either of the value matches](https://discuss.elastic.co/t/search-query-for-either-of-the-value-matches/155786)

<div class="topic-metadata">

**Author:** [@shiv94](https://discuss.elastic.co/u/shiv94)\
**Replies:** 2\
**Last updated:** [November 8, 2018, 1:32pm UTC](https://discuss.elastic.co/t/search-query-for-either-of-the-value-matches/155786 "2018-11-08T13:32:22Z")

</div>

Hey, search query doesn't return either of the values GET /\_search { "query": { "bool": { "must": \[ { "term": { "source": "/var/log/elasticsearch/server1/xxx-1.log" } }, { "term": { "source": "/var/log/elast…

---

## [Analyzer from plugin works well when \_analyze is called but does not work in search](https://discuss.elastic.co/t/analyzer-from-plugin-works-well-when-analyze-is-called-but-does-not-work-in-search/155559)

<div class="topic-metadata">

**Author:** [@Giannis\_Panagiwtakis](https://discuss.elastic.co/u/Giannis_Panagiwtakis)\
**Replies:** 0\
**Last updated:** [November 6, 2018, 2:05pm UTC](https://discuss.elastic.co/t/analyzer-from-plugin-works-well-when-analyze-is-called-but-does-not-work-in-search/155559 "2018-11-06T14:05:07Z")

</div>

Hello, I am an elastic search newbie and I have created a plugin in java, in order to use it as phonetics transformer for greek language. In the following snippet "analysis": { "filter": { "greek\_stop": {"type": "sto…

---

## [Elasticsearch CCS: client get timeout when remote cluster is isolated by firewall](https://discuss.elastic.co/t/elasticsearch-ccs-client-get-timeout-when-remote-cluster-is-isolated-by-firewall/152019)

<div class="topic-metadata">

**Author:** [@luxiaoxun](https://discuss.elastic.co/u/luxiaoxun)\
**Replies:** 9\
**Last updated:** [November 8, 2018, 1:01pm UTC](https://discuss.elastic.co/t/elasticsearch-ccs-client-get-timeout-when-remote-cluster-is-isolated-by-firewall/152019 "2018-11-08T13:01:38Z")

</div>

ES version: 6.2.4 os: redhat Environment: We have 2 clusters (A and B) in 2 different data centers. For searching, we use "cross cluster search" to get data from one cluster(A), and then cluster A will search relevant …

---

## [Search two slow](https://discuss.elastic.co/t/search-two-slow/155106)

<div class="topic-metadata">

**Author:** [@willam\_boss](https://discuss.elastic.co/u/willam_boss)\
**Replies:** 21\
**Last updated:** [November 8, 2018, 12:52pm UTC](https://discuss.elastic.co/t/search-two-slow/155106 "2018-11-08T12:52:28Z")

</div>

My index use ２T space, I have 10billion document， three nodes ,each node 4 cpus 13G mem , my match search is quite slow , it seem read io is use up , how to increase my search speed?

---

## [Change GC log thresholds](https://discuss.elastic.co/t/change-gc-log-thresholds/155132)

<div class="topic-metadata">

**Author:** [@programagor](https://discuss.elastic.co/u/programagor)\
**Replies:** 5\
**Last updated:** [November 8, 2018, 10:47am UTC](https://discuss.elastic.co/t/change-gc-log-thresholds/155132 "2018-11-08T10:47:05Z")

</div>

Greetings I am seeing a lot of lines in my Elasticsearch logs which look like this: \[2018-11-02T08:00:12,056\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[vie01a-clog-pesd-pe05\] \[gc\]\[24\] overhead, spent \[277ms\] collecting in t…

---

## [ClusterHealthRequest](https://discuss.elastic.co/t/clusterhealthrequest/155822)

<div class="topic-metadata">

**Author:** [@madhan3396](https://discuss.elastic.co/u/madhan3396)\
**Replies:** 2\
**Last updated:** [November 8, 2018, 10:36am UTC](https://discuss.elastic.co/t/clusterhealthrequest/155822 "2018-11-08T10:36:30Z")

</div>

Hi team, Consider I'm having two indices namely twitter1, twitter2. String indexpattern = "twitter\*" ClusterHealthRequest request = new ClusterHealthRequest(indexpattern); ClusterHealthResponse healthResponse = client.…

---

## [About elastic search .monitoring indexes 6.2.0](https://discuss.elastic.co/t/about-elastic-search-monitoring-indexes-6-2-0/155591)

<div class="topic-metadata">

**Author:** [@ortal\_pinhas](https://discuss.elastic.co/u/ortal_pinhas)\
**Replies:** 12\
**Last updated:** [November 8, 2018, 9:58am UTC](https://discuss.elastic.co/t/about-elastic-search-monitoring-indexes-6-2-0/155591 "2018-11-08T09:58:28Z")

</div>

hi, good evening, I wanted to know if the following scenario is a valid scenario from elastic search side. lets say i installed elastic search secure cluster by using xpack-\> .monitoring indexes created. now on same e…

---

## [Create several repositories in a single location](https://discuss.elastic.co/t/create-several-repositories-in-a-single-location/155842)

<div class="topic-metadata">

**Author:** [@sebc](https://discuss.elastic.co/u/sebc)\
**Replies:** 0\
**Last updated:** [November 8, 2018, 8:54am UTC](https://discuss.elastic.co/t/create-several-repositories-in-a-single-location/155842 "2018-11-08T08:54:00Z")

</div>

Hi, Despite reading documentation, I could not figure out all the details about "repositories" used to snapshot/restore indices from/to elasticsearch. I configured a single snapshot/restore folder location for my E/S c…

---

## [Help guide a noob for optimizing elasticsearch in current cluster](https://discuss.elastic.co/t/help-guide-a-noob-for-optimizing-elasticsearch-in-current-cluster/154109)

<div class="topic-metadata">

**Author:** [@rbendik](https://discuss.elastic.co/u/rbendik)\
**Replies:** 5\
**Last updated:** [November 8, 2018, 8:33am UTC](https://discuss.elastic.co/t/help-guide-a-noob-for-optimizing-elasticsearch-in-current-cluster/154109 "2018-11-08T08:33:22Z")

</div>

Hi. I have been reading docs learning about elasticsearch. I would like definitive help and guidance to quickly assess and provide "actual" guidance for optimization. I am really hoping no one says "it depends" as I have…

---

## [I don't know why there are no hits](https://discuss.elastic.co/t/i-dont-know-why-there-are-no-hits/155832)

<div class="topic-metadata">

**Author:** [@ksb304](https://discuss.elastic.co/u/ksb304)\
**Replies:** 4\
**Last updated:** [November 8, 2018, 8:25am UTC](https://discuss.elastic.co/t/i-dont-know-why-there-are-no-hits/155832 "2018-11-08T08:25:16Z")

</div>

no hits hits management index pattern :

---

## [\[Painless script\] i\_o\_exception: can not write type \[class java.lang.StringBuffer\]](https://discuss.elastic.co/t/painless-script-i-o-exception-can-not-write-type-class-java-lang-stringbuffer/154632)

<div class="topic-metadata">

**Author:** [@junkoshimane](https://discuss.elastic.co/u/junkoshimane)\
**Replies:** 2\
**Last updated:** [October 31, 2018, 2:06am UTC](https://discuss.elastic.co/t/painless-script-i-o-exception-can-not-write-type-class-java-lang-stringbuffer/154632 "2018-10-31T02:06:11Z")

</div>

Hi all, I'm new to painless scripting. I faced the exception as described in the above title. Would you please tell my why? 1.All documents \[adminadmin@js ~\]$ cat query\_all.json { "query" : { "match\_all": {} } }…

---

## [Maximum number of slops for span\_near query](https://discuss.elastic.co/t/maximum-number-of-slops-for-span-near-query/155838)

<div class="topic-metadata">

**Author:** [@junkoshimane](https://discuss.elastic.co/u/junkoshimane)\
**Replies:** 0\
**Last updated:** [November 8, 2018, 8:22am UTC](https://discuss.elastic.co/t/maximum-number-of-slops-for-span-near-query/155838 "2018-11-08T08:22:42Z")

</div>

Hi all, Is there the maximum number of slops for span\_near query? If yes, is it Integer.MAX\_VALUE = 2147483647? When I tried to find it on GitHub by searching words "slop max", I guessed that the following line was ap…

---

## [Cannot uninstall x-pack during rolling upgrade from Elasticsearch 5.6.10 to Elasticsearch 6.2.4](https://discuss.elastic.co/t/cannot-uninstall-x-pack-during-rolling-upgrade-from-elasticsearch-5-6-10-to-elasticsearch-6-2-4/155713)

<div class="topic-metadata">

**Author:** [@bsarkar](https://discuss.elastic.co/u/bsarkar)\
**Replies:** 3\
**Last updated:** [November 8, 2018, 6:55am UTC](https://discuss.elastic.co/t/cannot-uninstall-x-pack-during-rolling-upgrade-from-elasticsearch-5-6-10-to-elasticsearch-6-2-4/155713 "2018-11-08T06:55:40Z")

</div>

I have an Elasticsearch 5.6.10 cluster (2 master, 2 client and 3 data nodes) with x-pack 5.6.10 installed. But all x-pack features are disabled with the following configurations in config\\elasticsearch.yml files of all n…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1489)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1491)
