# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1505 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1506 --- ## [Got "Error code 400" bad request from client machine after called search request](https://discuss.elastic.co/t/got-error-code-400-bad-request-from-client-machine-after-called-search-request/153321)
**Author:** [@Kittapas\_Jewjaitham](https://discuss.elastic.co/u/Kittapas_Jewjaitham)\ **Replies:** 3\ **Last updated:** [October 26, 2018, 6:56am UTC](https://discuss.elastic.co/t/got-error-code-400-bad-request-from-client-machine-after-called-search-request/153321 "2018-10-26T06:56:01Z")
I'm using elastic search 5.6.3 with HPE CM 9.20. And I tried to search with advance condition (and / or) then caused this attached error. --- ## [GC Allocation ERROR](https://discuss.elastic.co/t/gc-allocation-error/151383)
**Author:** [@bijay](https://discuss.elastic.co/u/bijay)\ **Replies:** 13\ **Last updated:** [October 26, 2018, 6:50am UTC](https://discuss.elastic.co/t/gc-allocation-error/151383 "2018-10-26T06:50:54Z")
Hi, Can anyone help me in getting this error resolved? \[2018-10-08T04:09:29,360\]\[INFO \]\[o.e.n.Node \] \[lmm-elasticsearch-ingest-0\] JVM arguments \[-Xms10g, -Xmx10g, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatin… --- ## [How to i buy watcher plan?](https://discuss.elastic.co/t/how-to-i-buy-watcher-plan/154003)
**Author:** [@Aftab\_Ali](https://discuss.elastic.co/u/Aftab_Ali)\ **Replies:** 2\ **Last updated:** [October 26, 2018, 6:40am UTC](https://discuss.elastic.co/t/how-to-i-buy-watcher-plan/154003 "2018-10-26T06:40:57Z")
Dear Team, I am using watcher trail version, I am interested to buy a plan for that, please share the estimate, I have 11 machines in the environment. --- ## [Bulk item error](https://discuss.elastic.co/t/bulk-item-error/154052)
**Author:** [@Abhijith\_Vijayan](https://discuss.elastic.co/u/Abhijith_Vijayan)\ **Replies:** 4\ **Last updated:** [October 26, 2018, 5:38am UTC](https://discuss.elastic.co/t/bulk-item-error/154052 "2018-10-26T05:38:04Z")
I am getting the following error very frequently. \[2018-10-25T23:29:53,133\]\[DEBUG\]\[o.e.a.b.TransportShardBulkAction\] \[pm-2018.10.25\]\[0\] failed to execute bulk item (index) BulkShardRequest \[\[pm-2018.10.25\]\[0\]\] containin… --- ## [Query for multiple terms and their order in one text field](https://discuss.elastic.co/t/query-for-multiple-terms-and-their-order-in-one-text-field/153555)
**Author:** [@junkoshimane](https://discuss.elastic.co/u/junkoshimane)\ **Replies:** 4\ **Last updated:** [October 26, 2018, 4:10am UTC](https://discuss.elastic.co/t/query-for-multiple-terms-and-their-order-in-one-text-field/153555 "2018-10-26T04:10:42Z")
Hi all, I'm new to Elasticsearch. As far as I checked Elasticsearch reference and this site about the following query DSL design, seems like it's impossible but I will be able to realize what I'd like to do using Painle… --- ## [Nest 6 JSonConverters](https://discuss.elastic.co/t/nest-6-jsonconverters/151016)
**Author:** [@bert\_vervaele](https://discuss.elastic.co/u/bert_vervaele)\ **Replies:** 3\ **Last updated:** [October 26, 2018, 3:15am UTC](https://discuss.elastic.co/t/nest-6-jsonconverters/151016 "2018-10-26T03:15:46Z")
Hi, we are upgrading our Elastic from 5.2.2 to 6.2.1 but we have a problem with our search requests. We use nest to communicate with our code. We use JSonConverters in our customserialization to read jsons and convert … --- ## [Unable to load CSV data into elastic search](https://discuss.elastic.co/t/unable-to-load-csv-data-into-elastic-search/153868)
**Author:** [@anilpraneeth](https://discuss.elastic.co/u/anilpraneeth)\ **Replies:** 4\ **Last updated:** [October 26, 2018, 2:49am UTC](https://discuss.elastic.co/t/unable-to-load-csv-data-into-elastic-search/153868 "2018-10-26T02:49:22Z")
Hi Team, Trying elasticsearch for the first time, bear with my layman questions. I'm trying to load csv formatted data into kafka topic and eventual load into elastic search index. But i'm facing errors loading data fro… --- ## [Single data source, multiple uses - best approach?](https://discuss.elastic.co/t/single-data-source-multiple-uses-best-approach/154069)
**Author:** [@jpboyce](https://discuss.elastic.co/u/jpboyce)\ **Replies:** 0\ **Last updated:** [October 25, 2018, 9:41pm UTC](https://discuss.elastic.co/t/single-data-source-multiple-uses-best-approach/154069 "2018-10-25T21:41:16Z")
Hi all, Just wondering if anyone has had the sort of scenario I'm going to write about and how you handled it. One scenario I have specifically relates to using filebeat to get chef logs off servers and into ElasticSea… --- ## [Bulk API - Elastic Cloud](https://discuss.elastic.co/t/bulk-api-elastic-cloud/153929)
**Author:** [@sebastiaanspeck](https://discuss.elastic.co/u/sebastiaanspeck)\ **Replies:** 5\ **Last updated:** [October 25, 2018, 9:36pm UTC](https://discuss.elastic.co/t/bulk-api-elastic-cloud/153929 "2018-10-25T21:36:13Z")
How can I use this in Elastic Cloud? --- ## [Understanding "es.input.max.docs.per.partition" configuration](https://discuss.elastic.co/t/understanding-es-input-max-docs-per-partition-configuration/154045)
**Author:** [@Swapnil\_Nawale](https://discuss.elastic.co/u/Swapnil_Nawale)\ **Replies:** 2\ **Last updated:** [October 25, 2018, 8:42pm UTC](https://discuss.elastic.co/t/understanding-es-input-max-docs-per-partition-configuration/154045 "2018-10-25T20:42:19Z")
I am using elasticsearch-hadoop 5.6.2 to read from the elasticsearch 5.6.1 indices and aliases with Spark 2.3. The ES indices are configured to have 5 primary and 1 replica shards. In my case, the RDD returned by JavaEs… --- ## [PySpark - Seeing a 'ConnectionTimedOut' to a local ElasticSearch](https://discuss.elastic.co/t/pyspark-seeing-a-connectiontimedout-to-a-local-elasticsearch/153879)
**Author:** [@initialv](https://discuss.elastic.co/u/initialv)\ **Replies:** 2\ **Last updated:** [October 25, 2018, 8:36pm UTC](https://discuss.elastic.co/t/pyspark-seeing-a-connectiontimedout-to-a-local-elasticsearch/153879 "2018-10-25T20:36:51Z")
I have a simple elasticsearch query that I want to receive that count of. On my local mac environment, the below setup works as expected. On an Ubuntu machine, I see ERROR NetworkClient:144 - Node \[10.0.0.1:9200\] failed … --- ## [How to check if ES has more documents when paginating with search after API?](https://discuss.elastic.co/t/how-to-check-if-es-has-more-documents-when-paginating-with-search-after-api/151419)
**Author:** [@vroad](https://discuss.elastic.co/u/vroad)\ **Replies:** 1\ **Last updated:** [October 25, 2018, 6:41pm UTC](https://discuss.elastic.co/t/how-to-check-if-es-has-more-documents-when-paginating-with-search-after-api/151419 "2018-10-25T18:41:20Z")
I'm trying to implement pagination of my GraphQL API with ElasticSearch's pagination feature. My pagination implementation in GraphQL API follows Relay specification. As far as I know, search after feature in ES only ret… --- ## [How to migrate old data from one server to another server](https://discuss.elastic.co/t/how-to-migrate-old-data-from-one-server-to-another-server/153991)
**Author:** [@agilan](https://discuss.elastic.co/u/agilan)\ **Replies:** 1\ **Last updated:** [October 25, 2018, 5:51pm UTC](https://discuss.elastic.co/t/how-to-migrate-old-data-from-one-server-to-another-server/153991 "2018-10-25T17:51:59Z")
am trying to migrate data logs from old elasticsearch server to new elasticsearch server..reply ASAP --- ## [Scroll vs mget when searching by ids on alias (edit - mget doesn't work on alias)](https://discuss.elastic.co/t/scroll-vs-mget-when-searching-by-ids-on-alias-edit-mget-doesnt-work-on-alias/153854)
**Author:** [@pbathala](https://discuss.elastic.co/u/pbathala)\ **Replies:** 4\ **Last updated:** [October 25, 2018, 2:56pm UTC](https://discuss.elastic.co/t/scroll-vs-mget-when-searching-by-ids-on-alias-edit-mget-doesnt-work-on-alias/153854 "2018-10-25T14:56:05Z")
In a use case I am working on I need to search by ID's on an alias that has about 100 indices. I randomly picked about 30 ID's and ran both mget and scroll by ids and I get inconsistent timings out of each, which is conf… --- ## [How to do OR query using wildcard](https://discuss.elastic.co/t/how-to-do-or-query-using-wildcard/153368)
**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\ **Replies:** 3\ **Last updated:** [October 25, 2018, 2:27pm UTC](https://discuss.elastic.co/t/how-to-do-or-query-using-wildcard/153368 "2018-10-25T14:27:47Z")
Hi all, I'm trying to use a wildcard query inside my watcher to look for either or one of the following: "wildcard": { "raw\_event\_log": \[ "\*{ :;};\*", … --- ## [Dramatic increase in the number of open files after an upgrade from Linux 6 to Linux 7](https://discuss.elastic.co/t/dramatic-increase-in-the-number-of-open-files-after-an-upgrade-from-linux-6-to-linux-7/153693)
**Author:** [@rlampe](https://discuss.elastic.co/u/rlampe)\ **Replies:** 1\ **Last updated:** [October 25, 2018, 1:30pm UTC](https://discuss.elastic.co/t/dramatic-increase-in-the-number-of-open-files-after-an-upgrade-from-linux-6-to-linux-7/153693 "2018-10-25T13:30:43Z")
We recently upgraded one of our Elastic Search servers from Oracle Linux 6.9 to 7.4. After the upgrade the server has over 1 million open files allocated to the ElasticSearch process. I am using version 5.2 of Elastic.… --- ## [Elasticsearch Watcher - convert the milliseconds-since-the-epoch value back into a string](https://discuss.elastic.co/t/elasticsearch-watcher-convert-the-milliseconds-since-the-epoch-value-back-into-a-string/154000)
**Author:** [@Kathir\_J](https://discuss.elastic.co/u/Kathir_J)\ **Replies:** 1\ **Last updated:** [October 25, 2018, 12:57pm UTC](https://discuss.elastic.co/t/elasticsearch-watcher-convert-the-milliseconds-since-the-epoch-value-back-into-a-string/154000 "2018-10-25T12:57:07Z")
Hi, I am currently trying with watcher for anomalies. Here is my text field which gets notified in slack. "text": "Machine Learning Results - Object cache size is going to exceed threshold limit.\\n Anomalies:\\n{{#ctx.… --- ## [If there are any config for garbage collection in Elastic search](https://discuss.elastic.co/t/if-there-are-any-config-for-garbage-collection-in-elastic-search/153953)
**Author:** [@dinesh2](https://discuss.elastic.co/u/dinesh2)\ **Replies:** 8\ **Last updated:** [October 25, 2018, 12:10pm UTC](https://discuss.elastic.co/t/if-there-are-any-config-for-garbage-collection-in-elastic-search/153953 "2018-10-25T12:10:40Z")
Please suggest if there are any config for garbage collection. Regards, Dinesh D --- ## [Elasticsearch Features](https://discuss.elastic.co/t/elasticsearch-features/152749)
**Author:** [@Kathir\_J](https://discuss.elastic.co/u/Kathir_J)\ **Replies:** 3\ **Last updated:** [October 25, 2018, 12:35pm UTC](https://discuss.elastic.co/t/elasticsearch-features/152749 "2018-10-25T12:35:23Z")
I have two questions regarding Elasticsearch feature. When a threshold exceeds, can we perform http POST instead of alert? Simple Use Case: When a threshold exceeds, we need to restart our application. (Application h… --- ## [Hot\_threads result shows WARM nodes are busy always](https://discuss.elastic.co/t/hot-threads-result-shows-warm-nodes-are-busy-always/152922)
**Author:** [@af615dbd55cac2cacf32](https://discuss.elastic.co/u/af615dbd55cac2cacf32)\ **Replies:** 3\ **Last updated:** [October 25, 2018, 12:21pm UTC](https://discuss.elastic.co/t/hot-threads-result-shows-warm-nodes-are-busy-always/152922 "2018-10-25T12:21:37Z")
Hello, My Elasticsearch consists of 2masters(1 is active), 1client, 3HOT and 3WARM data nodes,m and Curator is running at 12PM for allocation / delete works. I am observing high CPU usage on all WARM nodes. 01: Clien… --- ## [ES autocomplete on cities](https://discuss.elastic.co/t/es-autocomplete-on-cities/153978)
**Author:** [@syavel](https://discuss.elastic.co/u/syavel)\ **Replies:** 0\ **Last updated:** [October 25, 2018, 10:59am UTC](https://discuss.elastic.co/t/es-autocomplete-on-cities/153978 "2018-10-25T10:59:29Z")
Hi, I'm trying to create an autocomplete on my own cities base. I've this fields for my documents: { "ac": "london" "population": 7556900, "state": England, ... ... } My mapping for the ac field is "ac" : { "… --- ## [Issue with adding plugins to elasticsearch plugins folder runing as a pod on kubernetes](https://discuss.elastic.co/t/issue-with-adding-plugins-to-elasticsearch-plugins-folder-runing-as-a-pod-on-kubernetes/153994)
**Author:** [@alexgohberg](https://discuss.elastic.co/u/alexgohberg)\ **Replies:** 0\ **Last updated:** [October 25, 2018, 12:05pm UTC](https://discuss.elastic.co/t/issue-with-adding-plugins-to-elasticsearch-plugins-folder-runing-as-a-pod-on-kubernetes/153994 "2018-10-25T12:05:53Z")
Hey All When im adding new plugin by ruining the next command: bin/elasticsearch-plugin install \[plugin\_name\] The plugin added and i can see him when im listing the plugins but after the pod restart the plugin disappe… --- ## [Aggs not working on the current date](https://discuss.elastic.co/t/aggs-not-working-on-the-current-date/151874)
**Author:** [@alexgohberg](https://discuss.elastic.co/u/alexgohberg)\ **Replies:** 2\ **Last updated:** [October 25, 2018, 11:57am UTC](https://discuss.elastic.co/t/aggs-not-working-on-the-current-date/151874 "2018-10-25T11:57:55Z")
Hey all Im trying to aggregate the message field when im trying the next query in DEV TOOLS its working fine: GET filebeat-6.3.2-2018.10.09/\_search { "aggs" : { "message.keyword" : { "terms" :… --- ## [SOLVED: \[query\_shard\_exception failed to create query with index](https://discuss.elastic.co/t/solved-query-shard-exception-failed-to-create-query-with-index/153972)
**Author:** [@Dave\_Clissold](https://discuss.elastic.co/u/Dave_Clissold)\ **Replies:** 1\ **Last updated:** [October 25, 2018, 10:38am UTC](https://discuss.elastic.co/t/solved-query-shard-exception-failed-to-create-query-with-index/153972 "2018-10-25T10:38:37Z")
I have just started getting a strange failed to create query error, I am running the query though elasticsearch.js. When is tried searching across multiple indexes \['gin','wine','whisky','beer'\] it worked as soon as I li… --- ## [Where do I have to place mustache template file for elastic to see it](https://discuss.elastic.co/t/where-do-i-have-to-place-mustache-template-file-for-elastic-to-see-it/153747)
**Author:** [@juriskr](https://discuss.elastic.co/u/juriskr)\ **Replies:** 2\ **Last updated:** [October 25, 2018, 10:33am UTC](https://discuss.elastic.co/t/where-do-i-have-to-place-mustache-template-file-for-elastic-to-see-it/153747 "2018-10-25T10:33:20Z")
Where do I have to place mustache template file for elastic to see it. I'm running elasticsearch-6.3.2-1.noarch, install rpm pre-build package with the following env variable values: ES\_HOME=/usr/share/elasticsearch E… --- ## [Why does Elasticsearch choose to relocate shards?](https://discuss.elastic.co/t/why-does-elasticsearch-choose-to-relocate-shards/153939)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 6\ **Last updated:** [October 25, 2018, 10:12am UTC](https://discuss.elastic.co/t/why-does-elasticsearch-choose-to-relocate-shards/153939 "2018-10-25T10:12:05Z")
I've read https://www.elastic.co/blog/every-shard-deserves-a-home but can't see how any of the cases there apply. ES seems to be spending all its time moving shards around, sometimes apparently taking hours to move mult… --- ## [Elasticsearch cluster display panic](https://discuss.elastic.co/t/elasticsearch-cluster-display-panic/153958)
**Author:** [@test987654123](https://discuss.elastic.co/u/test987654123)\ **Replies:** 2\ **Last updated:** [October 25, 2018, 9:57am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-display-panic/153958 "2018-10-25T09:57:48Z")
I use elasticsearch version is 6.4.2, display question is reject join new node \[2018-10-25T17:24:23,641\]\[WARN \]\[o.e.d.z.ZenDiscovery \] \[xyy-elastic-master-01\] failed to validate incoming join request from node \[{xy… --- ## [Json\_parse\_exception on reindex](https://discuss.elastic.co/t/json-parse-exception-on-reindex/153838)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 4\ **Last updated:** [October 25, 2018, 9:40am UTC](https://discuss.elastic.co/t/json-parse-exception-on-reindex/153838 "2018-10-25T09:40:53Z")
I'm getting json\_parse\_exception on reindex from a bunch of daily indices to a consolidated monthly one, quite likely due to the same field in different daily indices being automapped to different types. How do I tell r… --- ## [Configuration in index file to avoid default keyword type generation](https://discuss.elastic.co/t/configuration-in-index-file-to-avoid-default-keyword-type-generation/153921)
**Author:** [@saraswati](https://discuss.elastic.co/u/saraswati)\ **Replies:** 3\ **Last updated:** [October 25, 2018, 9:32am UTC](https://discuss.elastic.co/t/configuration-in-index-file-to-avoid-default-keyword-type-generation/153921 "2018-10-25T09:32:45Z")
How to create index file which creates only type text and not type keyword. --- ## [How to get all documents with geo\_point within 2-3 polygons(geo\_shape) with single index?](https://discuss.elastic.co/t/how-to-get-all-documents-with-geo-point-within-2-3-polygons-geo-shape-with-single-index/151594)
**Author:** [@Mayur\_Patel1](https://discuss.elastic.co/u/Mayur_Patel1)\ **Replies:** 3\ **Last updated:** [October 25, 2018, 9:25am UTC](https://discuss.elastic.co/t/how-to-get-all-documents-with-geo-point-within-2-3-polygons-geo-shape-with-single-index/151594 "2018-10-25T09:25:05Z")
Hi, I have one index say "all\_geo\_docs" which contains all documents and all have a geo\_shape field with type geo\_shape and geo\_point field with type geo\_point. Now I have one field named 'org\_type' in all docs with va… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1504) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1506)