# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1515 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1516 --- ## [Error in track preparator (\[Errno 28\] No space left on device)](https://discuss.elastic.co/t/error-in-track-preparator-errno-28-no-space-left-on-device/152653)
**Author:** [@junkoshimane](https://discuss.elastic.co/u/junkoshimane)\ **Replies:** 2\ **Last updated:** [October 17, 2018, 5:09am UTC](https://discuss.elastic.co/t/error-in-track-preparator-errno-28-no-space-left-on-device/152653 "2018-10-17T05:09:08Z")
I'm new in elasticsearch and rally. Now I'm trying "Benchmarking an existing cluster" as below. https://esrally.readthedocs.io/en/1.0.1/recipes.html#benchmarking-an-existing-cluster After the following command line was… --- ## [Watcher:failed to send sample slack message to user](https://discuss.elastic.co/t/watcher-failed-to-send-sample-slack-message-to-user/152624)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 6\ **Last updated:** [October 17, 2018, 5:04am UTC](https://discuss.elastic.co/t/watcher-failed-to-send-sample-slack-message-to-user/152624 "2018-10-17T05:04:50Z")
HI, I want to create new threshold alert and alert should send via slack. I have configured my slack webhook URL on elasticsearch.yml. when i try to send sample i'm below error, watcher:failed to send sample slack mess… --- ## [Rotate X-Pack Certificate](https://discuss.elastic.co/t/rotate-x-pack-certificate/152713)
**Author:** [@sschins](https://discuss.elastic.co/u/sschins)\ **Replies:** 1\ **Last updated:** [October 17, 2018, 4:39am UTC](https://discuss.elastic.co/t/rotate-x-pack-certificate/152713 "2018-10-17T04:39:07Z")
I wrote a script to rotate X-Pack certificates but can't get Elasticsearch to start. How should certificates get rotated? --- ## [java.lang.NoSuchMethodError: org.elasticsearch.common.settings.Settings$Builder.put(\[Ljava/lang/Object;)](https://discuss.elastic.co/t/java-lang-nosuchmethoderror-org-elasticsearch-common-settings-settings-builder-put-ljava-lang-object/152553)
**Author:** [@Kstays](https://discuss.elastic.co/u/Kstays)\ **Replies:** 5\ **Last updated:** [October 17, 2018, 4:27am UTC](https://discuss.elastic.co/t/java-lang-nosuchmethoderror-org-elasticsearch-common-settings-settings-builder-put-ljava-lang-object/152553 "2018-10-17T04:27:34Z")
Hi, I am upgrading from ES version 2.x to 6.4.2 and am getting this error while server startup. I am using spring boot version 2.0.5 and have included the 6.4.2 version of ES libraries. Settings settings = Settings.bu… --- ## [Elasticsearch java-rest API exception](https://discuss.elastic.co/t/elasticsearch-java-rest-api-exception/152747)
**Author:** [@guanghaofan](https://discuss.elastic.co/u/guanghaofan)\ **Replies:** 0\ **Last updated:** [October 17, 2018, 4:23am UTC](https://discuss.elastic.co/t/elasticsearch-java-rest-api-exception/152747 "2018-10-17T04:23:48Z")
I use the Java-Rest API to fetch and update the doc in the database, but what I found is if I use the Synchronous Execution for the request, it will be blocked if there's any exception in the request. Even I set the tim… --- ## [Loading json file in ES 6.4](https://discuss.elastic.co/t/loading-json-file-in-es-6-4/152722)
**Author:** [@aliyesami](https://discuss.elastic.co/u/aliyesami)\ **Replies:** 5\ **Last updated:** [October 16, 2018, 9:33pm UTC](https://discuss.elastic.co/t/loading-json-file-in-es-6-4/152722 "2018-10-16T21:33:05Z")
in 6.4 I am getting error trying to load the index $ curl -XPUT node1:9200/test2idx --data-binary -H'Content-Type: application/json' @test.json {"error":"Content-Type header \[application/x-www-form-urlencoded\] is not s… --- ## [Force\_execute email action for simulated watches not working](https://discuss.elastic.co/t/force-execute-email-action-for-simulated-watches-not-working/152577)
**Author:** [@jcoward](https://discuss.elastic.co/u/jcoward)\ **Replies:** 3\ **Last updated:** [October 16, 2018, 9:31pm UTC](https://discuss.elastic.co/t/force-execute-email-action-for-simulated-watches-not-working/152577 "2018-10-16T21:31:08Z")
Hi, having an issue with simulated watches. We have previously used this feature when developing new ones. In particular, the force\_execute for the email watch action has been useful to verify the format of the message. … --- ## [Create elasticsearch index](https://discuss.elastic.co/t/create-elasticsearch-index/152721)
**Author:** [@aliyesami](https://discuss.elastic.co/u/aliyesami)\ **Replies:** 1\ **Last updated:** [October 16, 2018, 8:55pm UTC](https://discuss.elastic.co/t/create-elasticsearch-index/152721 "2018-10-16T20:55:37Z")
I think elasticsearch 6.4 is very different from 6.1 since the commands working in 6.1 doesn't work in 6.4. how can I create a simple index to test in 6.4? the following command is failing curl -X PUT 'http://node1:92… --- ## [Storing new elasticsearch documents while restoring an index](https://discuss.elastic.co/t/storing-new-elasticsearch-documents-while-restoring-an-index/152647)
**Author:** [@coreation](https://discuss.elastic.co/u/coreation)\ **Replies:** 2\ **Last updated:** [October 16, 2018, 7:19pm UTC](https://discuss.elastic.co/t/storing-new-elasticsearch-documents-while-restoring-an-index/152647 "2018-10-16T19:19:09Z")
Hi there, I have a question about storing new documents in an indexed that is being restored. Is such a thing possible? My use case is that we have a large index that will be restored, but upon restoring the index we ha… --- ## [Elasticsearch check index lock(read-only) before insert data](https://discuss.elastic.co/t/elasticsearch-check-index-lock-read-only-before-insert-data/152704)
**Author:** [@veerabhadraiah](https://discuss.elastic.co/u/veerabhadraiah)\ **Replies:** 2\ **Last updated:** [October 16, 2018, 6:36pm UTC](https://discuss.elastic.co/t/elasticsearch-check-index-lock-read-only-before-insert-data/152704 "2018-10-16T18:36:01Z")
Hi, Please help me someone how to check particular index in read-only mode. I use to get continues index ( \[ FORBIDDEN/12/index read-only / allow delete (api)\]\](FORBIDDEN/12/index read-only / allow delete (api)\])) nee… --- ## [Indexing Performance in ES 5.1.1](https://discuss.elastic.co/t/indexing-performance-in-es-5-1-1/152697)
**Author:** [@rayharris-ibm](https://discuss.elastic.co/u/rayharris-ibm)\ **Replies:** 2\ **Last updated:** [October 16, 2018, 6:28pm UTC](https://discuss.elastic.co/t/indexing-performance-in-es-5-1-1/152697 "2018-10-16T18:28:26Z")
We're trying to figure out why we seem to have hit an ingestion limit in our ES cluster. Use case: Logging Version: 5.1.1 Master nodes: 3 HTTP nodes: 3 Data nodes: 50 The servers are OpenStack VMs running on bare m… --- ## [Error when creating a Snapshot Repository](https://discuss.elastic.co/t/error-when-creating-a-snapshot-repository/152587)
**Author:** [@Zamiell](https://discuss.elastic.co/u/Zamiell)\ **Replies:** 2\ **Last updated:** [October 16, 2018, 4:41pm UTC](https://discuss.elastic.co/t/error-when-creating-a-snapshot-repository/152587 "2018-10-16T16:41:31Z")
Greetings! I'm following the Snapshot and Restore guide listed here: https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-snapshots.html I'm running a fairly large ElasticSearch cluster on 6.4.2. Al… --- ## [Painless unable to access any field](https://discuss.elastic.co/t/painless-unable-to-access-any-field/152633)
**Author:** [@Alex\_Zeleznikov](https://discuss.elastic.co/u/Alex_Zeleznikov)\ **Replies:** 1\ **Last updated:** [October 16, 2018, 4:38pm UTC](https://discuss.elastic.co/t/painless-unable-to-access-any-field/152633 "2018-10-16T16:38:45Z")
I'm trying to use painless to extract a substring from a field, however it seems painless is unable to access ANY fields. Tried all of the below and they all fail (and I've checked that the fields exists, it's the defau… --- ## [Chain Transform for an action](https://discuss.elastic.co/t/chain-transform-for-an-action/151659)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 11\ **Last updated:** [October 16, 2018, 3:23pm UTC](https://discuss.elastic.co/t/chain-transform-for-an-action/151659 "2018-10-16T15:23:18Z")
I need to do two queries across two indexes in my email action, however, I cannot get the transform to save. Also I'm not sure setting up the transform, how I can call the context between the two searches without a name.… --- ## [How create index every 4 or 6 hours](https://discuss.elastic.co/t/how-create-index-every-4-or-6-hours/152687)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 1\ **Last updated:** [October 16, 2018, 3:02pm UTC](https://discuss.elastic.co/t/how-create-index-every-4-or-6-hours/152687 "2018-10-16T15:02:55Z")
I have cluster consist of 17 nodes. 3 masters, 12 data, 2 coordinating. My cluster consist of approximately 300 indices right now. Each index have 4 shards and set 2 replicas. Some of my indices has between 400-800 gb (… --- ## [Deleted mapping is still applied by Elasticsearch](https://discuss.elastic.co/t/deleted-mapping-is-still-applied-by-elasticsearch/151820)
**Author:** [@alex\_b](https://discuss.elastic.co/u/alex_b)\ **Replies:** 5\ **Last updated:** [October 16, 2018, 2:28pm UTC](https://discuss.elastic.co/t/deleted-mapping-is-still-applied-by-elasticsearch/151820 "2018-10-16T14:28:46Z")
Hi, after changing a mapping, the old mapping is still applied. I restarted ES, then even restarted Windows, but the problem is still there. An object type, lets call it ExampleType, is saved in an index, lets call it … --- ## [Understanding Performance of Compound Query](https://discuss.elastic.co/t/understanding-performance-of-compound-query/152366)
**Author:** [@workmanw](https://discuss.elastic.co/u/workmanw)\ **Replies:** 4\ **Last updated:** [October 16, 2018, 1:45pm UTC](https://discuss.elastic.co/t/understanding-performance-of-compound-query/152366 "2018-10-16T13:45:34Z")
Hello, I want to understand more about how Compound Queries perform. To help frame the problem, my index has 100M records. We have nearly 1M users, who on average have access to about 100 records. So only 0.001% of the … --- ## [Index files on files system in Elasticsearch](https://discuss.elastic.co/t/index-files-on-files-system-in-elasticsearch/152644)
**Author:** [@M.alsioufi](https://discuss.elastic.co/u/M.alsioufi)\ **Replies:** 2\ **Last updated:** [October 16, 2018, 1:18pm UTC](https://discuss.elastic.co/t/index-files-on-files-system-in-elasticsearch/152644 "2018-10-16T13:18:33Z")
Hi, Is there any ready-to-use tool that indexes metadata about files in a folder. Metadata like full path, file name, date of creation...etc. so it works like a mirror of the files system, and it will reflect any change… --- ## [Update by Query with custom query - Solved](https://discuss.elastic.co/t/update-by-query-with-custom-query-solved/152658)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 0\ **Last updated:** [October 16, 2018, 12:47pm UTC](https://discuss.elastic.co/t/update-by-query-with-custom-query-solved/152658 "2018-10-16T12:47:00Z")
is possible execute a update\_by\_query with custom query? Example: First update\_by\_query where customer\_id \>= 1 and customer\_id \<= 10000; Second update\_by\_query where customer\_id \>= 10001 and customer\_id \<= 20000; I… --- ## [Elasticsearch Update by Query using CTX (2)](https://discuss.elastic.co/t/elasticsearch-update-by-query-using-ctx-2/152661)
**Author:** [@m9aertner](https://discuss.elastic.co/u/m9aertner)\ **Replies:** 0\ **Last updated:** [October 16, 2018, 1:02pm UTC](https://discuss.elastic.co/t/elasticsearch-update-by-query-using-ctx-2/152661 "2018-10-16T13:02:09Z")
Quick note about "ctx.\_now" w.r.t "\_update\_by\_query". Follow-up to Elasticsearch Update by Query using CTX I saw this too, today, and was surprised since "\_update" does support "ctx.\_now", but "\_update\_by\_query" appare… --- ## [Memory leak? - constant memory use increment every day](https://discuss.elastic.co/t/memory-leak-constant-memory-use-increment-every-day/152643)
**Author:** [@frankshad](https://discuss.elastic.co/u/frankshad)\ **Replies:** 2\ **Last updated:** [October 16, 2018, 12:58pm UTC](https://discuss.elastic.co/t/memory-leak-constant-memory-use-increment-every-day/152643 "2018-10-16T12:58:23Z")
Twice in the last two months, the elasticsearch process has been killed by the OS oom-killer, so I've been monitoring things a bit more recently. I'm running a single shard on a Raspberry Pi (so 1GB total, 4 cores, no s… --- ## [Bulk "Service time" - total or per request](https://discuss.elastic.co/t/bulk-service-time-total-or-per-request/152628)
**Author:** [@boris.toninski](https://discuss.elastic.co/u/boris.toninski)\ **Replies:** 2\ **Last updated:** [October 16, 2018, 12:46pm UTC](https://discuss.elastic.co/t/bulk-service-time-total-or-per-request/152628 "2018-10-16T12:46:28Z")
Is "Service time" for bulk operation from the report the total time needed for insert requests to Elastic search? The reference says "period between start of request processing and receiving the complete response", so I… --- ## [Installing Plugin](https://discuss.elastic.co/t/installing-plugin/152513)
**Author:** [@Vahid\_Mouasvi](https://discuss.elastic.co/u/Vahid_Mouasvi)\ **Replies:** 6\ **Last updated:** [October 16, 2018, 12:43pm UTC](https://discuss.elastic.co/t/installing-plugin/152513 "2018-10-16T12:43:39Z")
Hi ! I have a problem with installing my own costume plugin! I've entered the command: .\\elasticsearch-plugin install --batch file:\\\\\\address-to-my-plugin-zip-file and I've got below error: A tool for managing instal… --- ## [Multi-Fields search using Span Queries with fuzziness in Elasticsearch](https://discuss.elastic.co/t/multi-fields-search-using-span-queries-with-fuzziness-in-elasticsearch/152596)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 14\ **Last updated:** [October 16, 2018, 11:23am UTC](https://discuss.elastic.co/t/multi-fields-search-using-span-queries-with-fuzziness-in-elasticsearch/152596 "2018-10-16T11:23:25Z")
Hi all, I am using Span queries to enable match phrase with fuzziness. I am able to do this on single field but since i am using fuzzy query with span\_multi query, I am failing it to use this query for multiple fields b… --- ## [How to send a link with time that watcher check](https://discuss.elastic.co/t/how-to-send-a-link-with-time-that-watcher-check/152234)
**Author:** [@\_Sergey](https://discuss.elastic.co/u/_Sergey)\ **Replies:** 3\ **Last updated:** [October 16, 2018, 10:35am UTC](https://discuss.elastic.co/t/how-to-send-a-link-with-time-that-watcher-check/152234 "2018-10-16T10:35:06Z")
Hello all, We have watchers that send us the notifications with link to visualizations. Almost all watchers check period like "now-1h" or similar. My question is: Is there any possible way that my watchers will send me… --- ## [ElasticSearch possible errors](https://discuss.elastic.co/t/elasticsearch-possible-errors/152623)
**Author:** [@Ahrip](https://discuss.elastic.co/u/Ahrip)\ **Replies:** 0\ **Last updated:** [October 16, 2018, 9:56am UTC](https://discuss.elastic.co/t/elasticsearch-possible-errors/152623 "2018-10-16T09:56:10Z")
Hello everyone, I have a few questions: Is there a list of all possible error return values? I've found only this: https://www.elastic.co/guide/en/elasticsearch/client/javascript-api/current/errors.html But i'm no… --- ## [Operator AND for match queries doesn't work](https://discuss.elastic.co/t/operator-and-for-match-queries-doesnt-work/152461)
**Author:** [@cmenendez](https://discuss.elastic.co/u/cmenendez)\ **Replies:** 8\ **Last updated:** [October 16, 2018, 9:31am UTC](https://discuss.elastic.co/t/operator-and-for-match-queries-doesnt-work/152461 "2018-10-16T09:31:01Z")
I'm using elaticsearch 6.2.3., a index with a field call text where the analyzer has the filters: lowercase, dutch\_stopwords and synonyms and it has a field call stemmer: "text": { "type": "text", … --- ## [Can I use range query using only time not date](https://discuss.elastic.co/t/can-i-use-range-query-using-only-time-not-date/152611)
**Author:** [@byeong\_seok\_park](https://discuss.elastic.co/u/byeong_seok_park)\ **Replies:** 1\ **Last updated:** [October 16, 2018, 9:11am UTC](https://discuss.elastic.co/t/can-i-use-range-query-using-only-time-not-date/152611 "2018-10-16T09:11:43Z")
Hi, I wanna make a simple query that range specific time of the day. But It seems to be necessary to write the date in elasticsearch query. What I want is using only time in range syntax, so that I can use that script… --- ## [How to delete index before 5 days without curator](https://discuss.elastic.co/t/how-to-delete-index-before-5-days-without-curator/152473)
**Author:** [@muthu\_kumar1](https://discuss.elastic.co/u/muthu_kumar1)\ **Replies:** 9\ **Last updated:** [October 16, 2018, 8:50am UTC](https://discuss.elastic.co/t/how-to-delete-index-before-5-days-without-curator/152473 "2018-10-16T08:50:08Z")
How to delete index before 5 days without curator --- ## [Wachter enabled on master](https://discuss.elastic.co/t/wachter-enabled-on-master/152532)
**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Replies:** 5\ **Last updated:** [October 16, 2018, 7:59am UTC](https://discuss.elastic.co/t/wachter-enabled-on-master/152532 "2018-10-16T07:59:18Z")
Hi All, In my (licensed) production cluster I have xpack.watcher.enabled: true And on my masters I want to disable that. If I set it to false and restart the masters I cannot delete or edit the watchers any more. Do … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1514) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1516)