# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1523

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1524

---

## [Anyone keen on working on a project to rebuild a search engine?](https://discuss.elastic.co/t/anyone-keen-on-working-on-a-project-to-rebuild-a-search-engine/151735)

<div class="topic-metadata">

**Author:** [@erickywong](https://discuss.elastic.co/u/erickywong)\
**Replies:** 0\
**Last updated:** [October 10, 2018, 2:28am UTC](https://discuss.elastic.co/t/anyone-keen-on-working-on-a-project-to-rebuild-a-search-engine/151735 "2018-10-10T02:28:48Z")

</div>

Hi All, Don't know if this is the right place to post this, do let me know if I'm breaking any rules and I'll take it down. Am currently working on a search assignment to help one of our client assemble an engineering …

---

## [Index stats - number of matched doc for search](https://discuss.elastic.co/t/index-stats-number-of-matched-doc-for-search/151726)

<div class="topic-metadata">

**Author:** [@huawang](https://discuss.elastic.co/u/huawang)\
**Replies:** 0\
**Last updated:** [October 10, 2018, 12:21am UTC](https://discuss.elastic.co/t/index-stats-number-of-matched-doc-for-search/151726 "2018-10-10T00:21:12Z")

</div>

We want to enforce index retention policy based on query usage patterns, e.g, if an index is not queried in the past XX days, it can be deleted. However, our users can use \* index pattern or alias in the query, so we can…

---

## [Running a second elasticsearch instance](https://discuss.elastic.co/t/running-a-second-elasticsearch-instance/151712)

<div class="topic-metadata">

**Author:** [@jspeer](https://discuss.elastic.co/u/jspeer)\
**Replies:** 1\
**Last updated:** [October 9, 2018, 10:31pm UTC](https://discuss.elastic.co/t/running-a-second-elasticsearch-instance/151712 "2018-10-09T22:31:53Z")

</div>

I'm trying to startup multiple Elasticsearch JVMs on the same node. I've separated all of the configuration files, and when I try to start the first instance I receive the following error: /usr/share/elasticsearch/bin/e…

---

## [Can't get Top Level Inner Hits with search results in 6.x](https://discuss.elastic.co/t/cant-get-top-level-inner-hits-with-search-results-in-6-x/151716)

<div class="topic-metadata">

**Author:** [@Ben\_Wilde](https://discuss.elastic.co/u/Ben_Wilde)\
**Replies:** 0\
**Last updated:** [October 9, 2018, 9:34pm UTC](https://discuss.elastic.co/t/cant-get-top-level-inner-hits-with-search-results-in-6-x/151716 "2018-10-09T21:34:03Z")

</div>

I need to be able to execute a query that returns a set of results while also including an independently filtered set of inner hits for those results. This was easy in version 2.x, I could add a top level inner hits sec…

---

## [Elasticsearch 6.4 filtered aggregation seemingly not running a pre\_filter](https://discuss.elastic.co/t/elasticsearch-6-4-filtered-aggregation-seemingly-not-running-a-pre-filter/151707)

<div class="topic-metadata">

**Author:** [@Kirill\_Afan](https://discuss.elastic.co/u/Kirill_Afan)\
**Replies:** 0\
**Last updated:** [October 9, 2018, 8:43pm UTC](https://discuss.elastic.co/t/elasticsearch-6-4-filtered-aggregation-seemingly-not-running-a-pre-filter/151707 "2018-10-09T20:43:43Z")

</div>

Good afternoon We are struggling to debug an aggregation we are running. index mapping: tags\_keyword: { type: "keyword" } where tags\_keyword is an array of lowercased keyword terms query: { "size": 0, "query"…

---

## [How to test a service which uses RestHighLevelClient?](https://discuss.elastic.co/t/how-to-test-a-service-which-uses-resthighlevelclient/151674)

<div class="topic-metadata">

**Author:** [@Inna\_Korobikhina](https://discuss.elastic.co/u/Inna_Korobikhina)\
**Replies:** 0\
**Last updated:** [October 9, 2018, 3:34pm UTC](https://discuss.elastic.co/t/how-to-test-a-service-which-uses-resthighlevelclient/151674 "2018-10-09T15:34:23Z")

</div>

Hi, I have a service which uses RestHighLevelClient and which I want to unit test. I have a method that has the following lines: .... IndexRequest request = new IndexRequest(index, type).source(getContentBuilder(up…

---

## [Email notification for Alerting/reporting](https://discuss.elastic.co/t/email-notification-for-alerting-reporting/150758)

<div class="topic-metadata">

**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\
**Replies:** 6\
**Last updated:** [October 9, 2018, 8:36pm UTC](https://discuss.elastic.co/t/email-notification-for-alerting-reporting/150758 "2018-10-09T20:36:57Z")

</div>

Hello there, I need to set up the email notification for watchers/alerts and reporting with x-pack on AWS cloud. I read the docs below: https://www.elastic.co/guide/en/elastic-stack-overview/6.3/actions-email.html#ama…

---

## [Adding replication/slave nodes to node running elastic search in production](https://discuss.elastic.co/t/adding-replication-slave-nodes-to-node-running-elastic-search-in-production/149336)

<div class="topic-metadata">

**Author:** [@Sam12](https://discuss.elastic.co/u/Sam12)\
**Replies:** 2\
**Last updated:** [October 9, 2018, 7:55pm UTC](https://discuss.elastic.co/t/adding-replication-slave-nodes-to-node-running-elastic-search-in-production/149336 "2018-10-09T19:55:07Z")

</div>

Hello Everyone, I am little new into elastic search world. I have deployed elastic search single node that includes multiple index in production on one of the systems that contains more than 1L docs. My Questions are …

---

## [Query for latest document of an index](https://discuss.elastic.co/t/query-for-latest-document-of-an-index/151366)

<div class="topic-metadata">

**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\
**Replies:** 1\
**Last updated:** [October 9, 2018, 7:53pm UTC](https://discuss.elastic.co/t/query-for-latest-document-of-an-index/151366 "2018-10-09T19:53:04Z")

</div>

Hi, I want to fetch the content of the latest document of an index through python. I'm using elasticsearch python module. In the elasticsearch python module documentation, es.get() takes an integer 'id'. but '\_id' field…

---

## [PUT mapping API](https://discuss.elastic.co/t/put-mapping-api/151698)

<div class="topic-metadata">

**Author:** [@Timshs](https://discuss.elastic.co/u/Timshs)\
**Replies:** 0\
**Last updated:** [October 9, 2018, 6:51pm UTC](https://discuss.elastic.co/t/put-mapping-api/151698 "2018-10-09T18:51:50Z")

</div>

I want to add a dynamic field in my mappings on my METRICS property. I am wondering if I can do it like this?: PUT tm\_ag\_index/\_mapping/logs { "dynamic": "false", "properties": { "Level": { "type": "text" }, "Tim…

---

## [Watcher Email Notification Settings through API](https://discuss.elastic.co/t/watcher-email-notification-settings-through-api/150910)

<div class="topic-metadata">

**Author:** [@bkelley](https://discuss.elastic.co/u/bkelley)\
**Replies:** 1\
**Last updated:** [October 9, 2018, 4:32pm UTC](https://discuss.elastic.co/t/watcher-email-notification-settings-through-api/150910 "2018-10-09T16:32:21Z")

</div>

Hi - Can Watcher email notification settings be setup through the API to avoid a restart? I'm anticipating needing a few attempts to get this working and it's fine if the changes are transient. Once working I'll add t…

---

## [Search where both filters match](https://discuss.elastic.co/t/search-where-both-filters-match/151682)

<div class="topic-metadata">

**Author:** [@arielperez](https://discuss.elastic.co/u/arielperez)\
**Replies:** 0\
**Last updated:** [October 9, 2018, 4:13pm UTC](https://discuss.elastic.co/t/search-where-both-filters-match/151682 "2018-10-09T16:13:17Z")

</div>

I am doing a search with elasticSearch but I would like to filter it and the search must match both filters. this is the code: "query" =\> \[ "bool" =\> \[ "must" =\> \[ 'multi\_match'=\> …

---

## [Reindex from ES5 to ES6 Failed](https://discuss.elastic.co/t/reindex-from-es5-to-es6-failed/151680)

<div class="topic-metadata">

**Author:** [@vineeshvraj7](https://discuss.elastic.co/u/vineeshvraj7)\
**Replies:** 0\
**Last updated:** [October 9, 2018, 4:01pm UTC](https://discuss.elastic.co/t/reindex-from-es5-to-es6-failed/151680 "2018-10-09T16:01:08Z")

</div>

While re-indexing from elasticsearch v5 to v6 remotely, I am getting an exception: “Caused by: com.fasterxml.jackson.core.JsonParseException: Duplicate field” I was doing re-indexing from V2 =\> V5 =\> V6 V2 = \> V5 re-in…

---

## [Elastic 6.4.2 Cannot Load Main Class](https://discuss.elastic.co/t/elastic-6-4-2-cannot-load-main-class/151508)

<div class="topic-metadata">

**Author:** [@questar](https://discuss.elastic.co/u/questar)\
**Replies:** 1\
**Last updated:** [October 9, 2018, 3:33pm UTC](https://discuss.elastic.co/t/elastic-6-4-2-cannot-load-main-class/151508 "2018-10-09T15:33:44Z")

</div>

In porting from 6.4.1 to 6.4.2 (Windows 10, single node, I7 processor with 16 gig), I have run into the following error exceuting the elasticsearch.bat file Error: Could not find or load main class org.elasticsearch.bo…

---

## [Elasticsearch snapshots failing](https://discuss.elastic.co/t/elasticsearch-snapshots-failing/151285)

<div class="topic-metadata">

**Author:** [@wazzu62](https://discuss.elastic.co/u/wazzu62)\
**Replies:** 5\
**Last updated:** [October 9, 2018, 3:31pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshots-failing/151285 "2018-10-09T15:31:58Z")

</div>

attempting to do some ES snapshots to some nfs mounts - getting a permissions error that the NFS directory is not accessible on the node. The nfs shares seems to work ok, I can create and delete things. I notice when I…

---

## [Multiple elasticsearch running on single server](https://discuss.elastic.co/t/multiple-elasticsearch-running-on-single-server/151449)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 1\
**Last updated:** [October 9, 2018, 3:27pm UTC](https://discuss.elastic.co/t/multiple-elasticsearch-running-on-single-server/151449 "2018-10-09T15:27:31Z")

</div>

HI Team, I'm new to these logic and provide me you valuable points on this, My requirement is need to run various elasticsearch config on one server. Currently, i have 3 server and in that 3 server i need to config ela…

---

## [Adjusting transport/network settings to account for latency](https://discuss.elastic.co/t/adjusting-transport-network-settings-to-account-for-latency/151670)

<div class="topic-metadata">

**Author:** [@kdohpny](https://discuss.elastic.co/u/kdohpny)\
**Replies:** 0\
**Last updated:** [October 9, 2018, 3:25pm UTC](https://discuss.elastic.co/t/adjusting-transport-network-settings-to-account-for-latency/151670 "2018-10-09T15:25:54Z")

</div>

I've been having issues with applications connecting to our Elasticsearch cluster when the client is 30+ ms away from the servers that run our nodes (below that, we have no issues). For clients connecting with 30+ms of l…

---

## [Node stat - number of shards](https://discuss.elastic.co/t/node-stat-number-of-shards/151669)

<div class="topic-metadata">

**Author:** [@cadirol](https://discuss.elastic.co/u/cadirol)\
**Replies:** 0\
**Last updated:** [October 9, 2018, 3:23pm UTC](https://discuss.elastic.co/t/node-stat-number-of-shards/151669 "2018-10-09T15:23:48Z")

</div>

Hy guys Is it possible to get the number of shards on e particular node? I can't find anything in the \_stats. Of course shards per index is listet My toughts are: We run a ES cluster, not bad in performance (atm...) …

---

## [How to install/use x-pack on OSX Homebrew (OSS) version?](https://discuss.elastic.co/t/how-to-install-use-x-pack-on-osx-homebrew-oss-version/151478)

<div class="topic-metadata">

**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\
**Replies:** 5\
**Last updated:** [October 9, 2018, 3:18pm UTC](https://discuss.elastic.co/t/how-to-install-use-x-pack-on-osx-homebrew-oss-version/151478 "2018-10-09T15:18:14Z")

</div>

There was a discussion at \[6.3.0\] homebrew recipe about getting elasticsearch working again with homebrew - and it seems it's now working. It seems. The problem is that now that I installed the homebrew version (which…

---

## [Elasticsearch and curator snapshot error](https://discuss.elastic.co/t/elasticsearch-and-curator-snapshot-error/151614)

<div class="topic-metadata">

**Author:** [@Mozuffer](https://discuss.elastic.co/u/Mozuffer)\
**Replies:** 1\
**Last updated:** [October 9, 2018, 2:50pm UTC](https://discuss.elastic.co/t/elasticsearch-and-curator-snapshot-error/151614 "2018-10-09T14:50:44Z")

</div>

Hi Guys, I'm using elasticsearch and curator 5.x and I want to tak snapshot for specific indeces start with specific pattern I managed to take snapshot for some indices while some other indices I could not. and snapshot …

---

## [\[Solved\] Elasticseach stuck at 213 documents and losing data](https://discuss.elastic.co/t/solved-elasticseach-stuck-at-213-documents-and-losing-data/151517)

<div class="topic-metadata">

**Author:** [@Lucas\_montenegro\_car](https://discuss.elastic.co/u/Lucas_montenegro_car)\
**Replies:** 2\
**Last updated:** [October 9, 2018, 2:43pm UTC](https://discuss.elastic.co/t/solved-elasticseach-stuck-at-213-documents-and-losing-data/151517 "2018-10-09T14:43:28Z")

</div>

I have an elasticsearch setup with 1 node and no replica nodes sharing a droplet with a Kibana setup in digital ocean. My droplet has 2GB ram and enough CPU. My elasticsearch JVM is set to use 768MB RAM (so kibana can ha…

---

## [Wildcard and Fuzzy query together](https://discuss.elastic.co/t/wildcard-and-fuzzy-query-together/148699)

<div class="topic-metadata">

**Author:** [@pranav24](https://discuss.elastic.co/u/pranav24)\
**Replies:** 4\
**Last updated:** [October 9, 2018, 2:21pm UTC](https://discuss.elastic.co/t/wildcard-and-fuzzy-query-together/148699 "2018-10-09T14:21:05Z")

</div>

Hello everyone, I am trying to design a query in which, I can use wildcard and Fuzzy query together. According to me, query\_string is used for wildcard searches and multi\_match can be used for fuzziness. I want a que…

---

## [IndexNotFoundException](https://discuss.elastic.co/t/indexnotfoundexception/151642)

<div class="topic-metadata">

**Author:** [@vnallamothu](https://discuss.elastic.co/u/vnallamothu)\
**Replies:** 1\
**Last updated:** [October 9, 2018, 1:50pm UTC](https://discuss.elastic.co/t/indexnotfoundexception/151642 "2018-10-09T13:50:56Z")

</div>

I have installed Elasticsearch 5.5.3 and Kibana 5.5.3 on the same server and also installed Xpack and buckler plugins. Everything seems to be working but when I hit the monitoring tab in kibana, I see "No monitoring data…

---

## [Synonym search analyzer not updating after update synonyms.txt?](https://discuss.elastic.co/t/synonym-search-analyzer-not-updating-after-update-synonyms-txt/151637)

<div class="topic-metadata">

**Author:** [@jmr317](https://discuss.elastic.co/u/jmr317)\
**Replies:** 0\
**Last updated:** [October 9, 2018, 1:27pm UTC](https://discuss.elastic.co/t/synonym-search-analyzer-not-updating-after-update-synonyms-txt/151637 "2018-10-09T13:27:30Z")

</div>

So I have an index with the synonym mapping defined in the search analyzer. When I first created the index, the synonyms were picked up on search. After that, I updated the synonyms.txt files on the nodes once to update …

---

## [Avoid network overhead/bottleneck due to bulk returning all items](https://discuss.elastic.co/t/avoid-network-overhead-bottleneck-due-to-bulk-returning-all-items/151622)

<div class="topic-metadata">

**Author:** [@AndreCimander](https://discuss.elastic.co/u/AndreCimander)\
**Replies:** 0\
**Last updated:** [October 9, 2018, 11:57am UTC](https://discuss.elastic.co/t/avoid-network-overhead-bottleneck-due-to-bulk-returning-all-items/151622 "2018-10-09T11:57:34Z")

</div>

Is there a hidden request parameter for the bulk api to omit successful items in the /bulk response or get a sane response format (e.g. success count, error count, optional list of errord documents)? When we send a 50MB…

---

## [Join query in elasticsearch](https://discuss.elastic.co/t/join-query-in-elasticsearch/151570)

<div class="topic-metadata">

**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\
**Replies:** 5\
**Last updated:** [October 9, 2018, 11:56am UTC](https://discuss.elastic.co/t/join-query-in-elasticsearch/151570 "2018-10-09T11:56:13Z")

</div>

hi team can anyone convert this sql query to elasticsearch dsl query or lucene query or painless script? select (t2.log\_timestamp - t1.log\_timestamp) as elapsed\_time from tbl\_logs t1 inner join tbl\_logs t2 on t1.ord…

---

## [Facing failed to create repository thrown exception](https://discuss.elastic.co/t/facing-failed-to-create-repository-thrown-exception/150996)

<div class="topic-metadata">

**Author:** [@johnrabi](https://discuss.elastic.co/u/johnrabi)\
**Replies:** 13\
**Last updated:** [October 9, 2018, 11:54am UTC](https://discuss.elastic.co/t/facing-failed-to-create-repository-thrown-exception/150996 "2018-10-09T11:54:04Z")

</div>

Hi Team, can anyone help me to resolve this issue? i have setting path.repo like this path.repo: \["/usr/share/elasticsearch/esbackup"\] , It is in aws elasticserver but while creating the repository facing this error c…

---

## [100% CPU utilization on one of the data node, ES version 2.3](https://discuss.elastic.co/t/100-cpu-utilization-on-one-of-the-data-node-es-version-2-3/151611)

<div class="topic-metadata">

**Author:** [@nagarjunadn](https://discuss.elastic.co/u/nagarjunadn)\
**Replies:** 0\
**Last updated:** [October 9, 2018, 10:41am UTC](https://discuss.elastic.co/t/100-cpu-utilization-on-one-of-the-data-node-es-version-2-3/151611 "2018-10-09T10:41:14Z")

</div>

Hello, I am facing problem where one of my data nodes starts having 100% CPU usage while others don't(Elasticsearch version is 2.3). Restarting elastic process solves the issue for a while. I have referred to multiple…

---

## [Weird DateFormattersTests failure in Git repository](https://discuss.elastic.co/t/weird-dateformatterstests-failure-in-git-repository/151612)

<div class="topic-metadata">

**Author:** [@cbismuth](https://discuss.elastic.co/u/cbismuth)\
**Replies:** 0\
**Last updated:** [October 9, 2018, 10:48am UTC](https://discuss.elastic.co/t/weird-dateformatterstests-failure-in-git-repository/151612 "2018-10-09T10:48:28Z")

</div>

Hi, I encountered a weird DateFormattersTests failure while running a gradlew check. Here is the line to reproduce below, does any one understand why this test fails? Besides, when I run it within IntelliJ, it passes …

---

## [Two elastic servers with one Kibana dashboard](https://discuss.elastic.co/t/two-elastic-servers-with-one-kibana-dashboard/151388)

<div class="topic-metadata">

**Author:** [@shivaprasadrao.b](https://discuss.elastic.co/u/shivaprasadrao.b)\
**Replies:** 4\
**Last updated:** [October 9, 2018, 9:35am UTC](https://discuss.elastic.co/t/two-elastic-servers-with-one-kibana-dashboard/151388 "2018-10-09T09:35:55Z")

</div>

I have a requirement: i need two elastic servers and two logstash to be setup on two unix boxes (unix box1 and unix box2). My kibana will be setup in unix box1. I need kibana to show the data/logs from both unix box 1…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1522)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1524)
