# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1541 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1542 --- ## [ES Data Node crash and now have a heap of file errors](https://discuss.elastic.co/t/es-data-node-crash-and-now-have-a-heap-of-file-errors/148891)
**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\ **Replies:** 3\ **Last updated:** [September 21, 2018, 3:05pm UTC](https://discuss.elastic.co/t/es-data-node-crash-and-now-have-a-heap-of-file-errors/148891 "2018-09-21T15:05:25Z")
Hi. One of my data nodes crashed, had to run a fsck. Server is up again but now have a heap of these errors... In the past I only had a few and was able to delete it but this time there are too many... any way to get ar… --- ## [Elasticsearch 6.x on OpenShift 3](https://discuss.elastic.co/t/elasticsearch-6-x-on-openshift-3/149404)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 3\ **Last updated:** [September 21, 2018, 2:56pm UTC](https://discuss.elastic.co/t/elasticsearch-6-x-on-openshift-3/149404 "2018-09-21T14:56:55Z")
Hi all we are trying to implement elasticsearch 6.x on Openshift 3? But I see we have many disadvantages of doing so. I haven't seen much about support for openshift in documentation too. Also, I read Installing ES on… --- ## [Transform fails with null\_pointer\_exception for nested aggregation on adding a filter condition](https://discuss.elastic.co/t/transform-fails-with-null-pointer-exception-for-nested-aggregation-on-adding-a-filter-condition/149226)
**Author:** [@gautu7](https://discuss.elastic.co/u/gautu7)\ **Replies:** 5\ **Last updated:** [September 21, 2018, 2:04pm UTC](https://discuss.elastic.co/t/transform-fails-with-null-pointer-exception-for-nested-aggregation-on-adding-a-filter-condition/149226 "2018-09-21T14:04:37Z")
I am trying to create a Watcher alert over monitoring indices. I want to aggregate over 'N' different clusters and output the nodes with it's cluster name if the disk utilization goes above a specified threshold % … --- ## [Nested inner\_hits slows query performance](https://discuss.elastic.co/t/nested-inner-hits-slows-query-performance/146024)
**Author:** [@jcornez](https://discuss.elastic.co/u/jcornez)\ **Replies:** 2\ **Last updated:** [September 21, 2018, 1:53pm UTC](https://discuss.elastic.co/t/nested-inner-hits-slows-query-performance/146024 "2018-09-21T13:53:11Z")
I have a query that is very fast (sub-second) without any inner\_hits, but takes 20 - 30 seconds with inner\_hits returned. Here is the query { "from": 0, "size": 2500, "terminate\_after": 2500, "query": { "constant… --- ## [\[SOLVED\] Watcher HTTP Input Templates documentation question](https://discuss.elastic.co/t/solved-watcher-http-input-templates-documentation-question/148437)
**Author:** [@cbismuth](https://discuss.elastic.co/u/cbismuth)\ **Replies:** 2\ **Last updated:** [September 21, 2018, 1:46pm UTC](https://discuss.elastic.co/t/solved-watcher-http-input-templates-documentation-question/148437 "2018-09-21T13:46:10Z")
Hi, I may have missed something, but in this section of the Watcher documentation, why {{ctx.watch\_id}} refers to the index to query? Thank you, Chris --- ## [Relaying X-Pack monitoring from DMZ to LAN](https://discuss.elastic.co/t/relaying-x-pack-monitoring-from-dmz-to-lan/149460)
**Author:** [@Aceman87](https://discuss.elastic.co/u/Aceman87)\ **Replies:** 0\ **Last updated:** [September 21, 2018, 1:10pm UTC](https://discuss.elastic.co/t/relaying-x-pack-monitoring-from-dmz-to-lan/149460 "2018-09-21T13:10:54Z")
Hi, We have a three tier network infrastructure (DMZ1, DMZ2 and LAN) where connections are only allowed between adjacent tiers. We have metricbeat deployed on all tiers and Elasticsearch resides in LAN. Events from DMZ… --- ## [\[6.1.1\] Machine Learning Job: reanalyse datapoints / ignore last bucket](https://discuss.elastic.co/t/6-1-1-machine-learning-job-reanalyse-datapoints-ignore-last-bucket/149159)
**Author:** [@gmatheus](https://discuss.elastic.co/u/gmatheus)\ **Replies:** 3\ **Last updated:** [September 21, 2018, 1:01pm UTC](https://discuss.elastic.co/t/6-1-1-machine-learning-job-reanalyse-datapoints-ignore-last-bucket/149159 "2018-09-21T13:01:56Z")
Hi! I'm trying to configure my ML Job + Watcher in a specific ingestion scenario: Ingestions occurs once in a day and the events timestamps are aggregated in the beginning of the day. The daily ingestion updates the d… --- ## [Slopy\_arc alternative in ES6](https://discuss.elastic.co/t/slopy-arc-alternative-in-es6/149457)
**Author:** [@Muralikrishna\_Maiya](https://discuss.elastic.co/u/Muralikrishna_Maiya)\ **Replies:** 0\ **Last updated:** [September 21, 2018, 12:55pm UTC](https://discuss.elastic.co/t/slopy-arc-alternative-in-es6/149457 "2018-09-21T12:55:39Z")
Hi Team, We were migrating from ES2 to ES6. We were using geo\_distance sorting in ES2 and by default it was using sloppy\_arc algorithm for distance. We see the slopy\_arc option not present now and we see the different… --- ## [How to resolve '530 5.7.0 Must issue a STARTTLS command first. o63-v6sm4041934ywc.36 - gsmtp\\n'?](https://discuss.elastic.co/t/how-to-resolve-530-5-7-0-must-issue-a-starttls-command-first-o63-v6sm4041934ywc-36-gsmtp-n/149447)
**Author:** [@Vyankatesh\_S\_Repal](https://discuss.elastic.co/u/Vyankatesh_S_Repal)\ **Replies:** 1\ **Last updated:** [September 21, 2018, 12:49pm UTC](https://discuss.elastic.co/t/how-to-resolve-530-5-7-0-must-issue-a-starttls-command-first-o63-v6sm4041934ywc-36-gsmtp-n/149447 "2018-09-21T12:49:07Z")
HI, I am creating an application where I need to send an email alert for my logs. Here is input to create a watcher: PUT \_xpack/watcher/watch/log\_error\_watch { "trigger" : { "schedule" : { "interval" : "10s" } … --- ## [How to get the count of particular index](https://discuss.elastic.co/t/how-to-get-the-count-of-particular-index/149451)
**Author:** [@johnrabi](https://discuss.elastic.co/u/johnrabi)\ **Replies:** 0\ **Last updated:** [September 21, 2018, 12:41pm UTC](https://discuss.elastic.co/t/how-to-get-the-count-of-particular-index/149451 "2018-09-21T12:41:16Z")
Hi, can anyone help me how to resolve this issue? langulage :Java i am having one index named like test, in one API i have indexed some records after the need to return the totalcount of index ? Thanks in advance --- ## [How to configure Elasticsearch own logging?](https://discuss.elastic.co/t/how-to-configure-elasticsearch-own-logging/149449)
**Author:** [@WoJ](https://discuss.elastic.co/u/WoJ)\ **Replies:** 0\ **Last updated:** [September 21, 2018, 12:35pm UTC](https://discuss.elastic.co/t/how-to-configure-elasticsearch-own-logging/149449 "2018-09-21T12:35:22Z")
Hello everyone, I centralize all my systems / applications logs in Elasticsearch and one of the most prolific sources is Elasticsearch itself. I thought that I could lower the verbosity in /etc/elasticsearch/log4j2.pro… --- ## [Hide index result if result is in another index](https://discuss.elastic.co/t/hide-index-result-if-result-is-in-another-index/149290)
**Author:** [@Kurzer\_Patrick](https://discuss.elastic.co/u/Kurzer_Patrick)\ **Replies:** 8\ **Last updated:** [September 21, 2018, 12:26pm UTC](https://discuss.elastic.co/t/hide-index-result-if-result-is-in-another-index/149290 "2018-09-21T12:26:26Z")
Hi everybody, I try to get the following working: Lets say I have two indices region and theme. Both of the indices have a field name and both indexed a String named Vienna. At the moment if I search for Vienna I get … --- ## [Changing node type of data nodes for a 3 node cluster with high RAM usage to master-data node](https://discuss.elastic.co/t/changing-node-type-of-data-nodes-for-a-3-node-cluster-with-high-ram-usage-to-master-data-node/149154)
**Author:** [@elastico](https://discuss.elastic.co/u/elastico)\ **Replies:** 2\ **Last updated:** [September 21, 2018, 12:23pm UTC](https://discuss.elastic.co/t/changing-node-type-of-data-nodes-for-a-3-node-cluster-with-high-ram-usage-to-master-data-node/149154 "2018-09-21T12:23:10Z")
I have a three node cluster with 1 master-data node and 2 data-only nodes. I want to make this into a 3 master-data node cluster. To this effect, I need to change config for the data nodes one at a time and restart them.… --- ## [Filter nested hits based on grandchildren](https://discuss.elastic.co/t/filter-nested-hits-based-on-grandchildren/148820)
**Author:** [@elasticalan](https://discuss.elastic.co/u/elasticalan)\ **Replies:** 0\ **Last updated:** [September 17, 2018, 11:30am UTC](https://discuss.elastic.co/t/filter-nested-hits-based-on-grandchildren/148820 "2018-09-17T11:30:15Z")
Hey there. I have a problem finding the right way to do this. I am using the PHP API. --- ## [Unable to connection elastic cloud into online website but working fine into local system](https://discuss.elastic.co/t/unable-to-connection-elastic-cloud-into-online-website-but-working-fine-into-local-system/149423)
**Author:** [@sangeetshah](https://discuss.elastic.co/u/sangeetshah)\ **Replies:** 0\ **Last updated:** [September 21, 2018, 9:35am UTC](https://discuss.elastic.co/t/unable-to-connection-elastic-cloud-into-online-website-but-working-fine-into-local-system/149423 "2018-09-21T09:35:08Z")
i have login into elastic cloud and get the cloud url and password to connect this account from c# language and able to index and search my index data from cloud elastic. I have created application into .net core c# and… --- ## [Ingest pipeline: \_id generation](https://discuss.elastic.co/t/ingest-pipeline-id-generation/149189)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 4\ **Last updated:** [September 21, 2018, 9:28am UTC](https://discuss.elastic.co/t/ingest-pipeline-id-generation/149189 "2018-09-21T09:28:33Z")
is it safe to generate doc IDs in a pipeline as following: { "script": { "ignore\_failure": false, "lang": "painless", "source": "ctx.\_id = 'prfx-'.concat(ctx.message.hashCode().toString())" }… --- ## [No anomalies on live data](https://discuss.elastic.co/t/no-anomalies-on-live-data/149272)
**Author:** [@vinay\_2498](https://discuss.elastic.co/u/vinay_2498)\ **Replies:** 5\ **Last updated:** [September 21, 2018, 9:26am UTC](https://discuss.elastic.co/t/no-anomalies-on-live-data/149272 "2018-09-21T09:26:04Z")
Hi, The machine learning advance job of detecting anomalies in the network data is trained with two months of data. But when I test the model with real-time live data I can see the spike on the graph but no anomalies ar… --- ## [Monitoring not working](https://discuss.elastic.co/t/monitoring-not-working/149277)
**Author:** [@kpover](https://discuss.elastic.co/u/kpover)\ **Replies:** 1\ **Last updated:** [September 21, 2018, 8:35am UTC](https://discuss.elastic.co/t/monitoring-not-working/149277 "2018-09-21T08:35:54Z")
Hi everyone. I'm having an issue with my elastic instance whereby I can't get monitoring working. I've recently upgraded from 5.6 where I had monitor working on a trial xpack licence to 6.4 where I have the standard fre… --- ## [This question is confusing to me, and I hope you can help me](https://discuss.elastic.co/t/this-question-is-confusing-to-me-and-i-hope-you-can-help-me/149416)
**Author:** [@Zhen\_Zhang](https://discuss.elastic.co/u/Zhen_Zhang)\ **Replies:** 0\ **Last updated:** [September 21, 2018, 8:12am UTC](https://discuss.elastic.co/t/this-question-is-confusing-to-me-and-i-hope-you-can-help-me/149416 "2018-09-21T08:12:40Z")
My elastic index has 2 file type, the userinfo: basic information,productinfo: customer purchase products history record, I need the page shows the customer basic information, the user can then according to the basic con… --- ## [Elasticsearch determinte bucket length in aggregation](https://discuss.elastic.co/t/elasticsearch-determinte-bucket-length-in-aggregation/149415)
**Author:** [@94a1388a854580b1f815](https://discuss.elastic.co/u/94a1388a854580b1f815)\ **Replies:** 0\ **Last updated:** [September 21, 2018, 8:10am UTC](https://discuss.elastic.co/t/elasticsearch-determinte-bucket-length-in-aggregation/149415 "2018-09-21T08:10:00Z")
please help me with understanding nested bucket aggregation in elastic search. I have next query aggregation results: \[...\] { "key": "key1", "doc\_count": 1166, "range\_keys": { "doc\_count\_error\_upper\_bound": 0… --- ## [Disk I/O for master-only node?](https://discuss.elastic.co/t/disk-i-o-for-master-only-node/149365)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [September 21, 2018, 7:41am UTC](https://discuss.elastic.co/t/disk-i-o-for-master-only-node/149365 "2018-09-21T07:41:41Z")
Hello. I would like to get advice for hardware requirements for dedicated-master node with es v 6.3.2. This is my first time setting up dediciated master-node so I appreciate if I could get advice. I have read below … --- ## [ElasticsearchException getRootCause infinite loop](https://discuss.elastic.co/t/elasticsearchexception-getrootcause-infinite-loop/149076)
**Author:** [@bdelbosc](https://discuss.elastic.co/u/bdelbosc)\ **Replies:** 2\ **Last updated:** [September 21, 2018, 7:33am UTC](https://discuss.elastic.co/t/elasticsearchexception-getrootcause-infinite-loop/149076 "2018-09-21T07:33:01Z")
Hi, The ElasticsearchException#getRootCause can result in an infinite loop if there is cycle in the causes. We run into such case because the ElasticsearchException was serialized at some point in our code. For inform… --- ## [Default shard allocation method](https://discuss.elastic.co/t/default-shard-allocation-method/149125)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [September 21, 2018, 7:29am UTC](https://discuss.elastic.co/t/default-shard-allocation-method/149125 "2018-09-21T07:29:29Z")
Would like to know out of the following methods which is the default shard allocation method used in elasticsearch 5.4.3 and 6.2.1 Cluster Level Shard Allocation Disk-based Shard Allocation Shard Allocation Awareness … --- ## [What is the shard recommendation for 3 master nodes, 2 data nodes cluster](https://discuss.elastic.co/t/what-is-the-shard-recommendation-for-3-master-nodes-2-data-nodes-cluster/149151)
**Author:** [@rajkumar.m](https://discuss.elastic.co/u/rajkumar.m)\ **Replies:** 8\ **Last updated:** [September 21, 2018, 7:00am UTC](https://discuss.elastic.co/t/what-is-the-shard-recommendation-for-3-master-nodes-2-data-nodes-cluster/149151 "2018-09-21T07:00:29Z")
Hi Team, what is the shard recommendation for 3 master nodes, 2 data nodes cluster? Please advise, how it will impact performance and if we have 1 shard per index, will it impact resiliency of data. Thanks in Advance… --- ## [Elasticsearch - changing search time analyzer ( query time analyzer)](https://discuss.elastic.co/t/elasticsearch-changing-search-time-analyzer-query-time-analyzer/148984)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 3\ **Last updated:** [September 21, 2018, 6:50am UTC](https://discuss.elastic.co/t/elasticsearch-changing-search-time-analyzer-query-time-analyzer/148984 "2018-09-21T06:50:19Z")
Hello, I was going through elastic documentation , Although you can add new types to an index, or add new fields to a type, you can’t add new analyzers or make changes to existing fields. can we not change the sear… --- ## [Watches Not Triggering](https://discuss.elastic.co/t/watches-not-triggering/149326)
**Author:** [@jmccain](https://discuss.elastic.co/u/jmccain)\ **Replies:** 2\ **Last updated:** [September 21, 2018, 6:49am UTC](https://discuss.elastic.co/t/watches-not-triggering/149326 "2018-09-21T06:49:15Z")
Elasticsearch & Kibana version: 6.2.4 Hi, This morning we noticed that several (but not all) of our watches were not triggering and had no watcher history. In particular, one watch should have been firing alerts off b… --- ## [Will elasticsearch SQL support for cardinality aggregation (DISTINCT) in future?](https://discuss.elastic.co/t/will-elasticsearch-sql-support-for-cardinality-aggregation-distinct-in-future/149378)
**Author:** [@ranranxiaoya](https://discuss.elastic.co/u/ranranxiaoya)\ **Replies:** 3\ **Last updated:** [September 21, 2018, 6:36am UTC](https://discuss.elastic.co/t/will-elasticsearch-sql-support-for-cardinality-aggregation-distinct-in-future/149378 "2018-09-21T06:36:02Z")
Hi all, Will elasticsearch SQL support for cardinality aggregation (DISTINCT) in future? --- ## [org.elasticsearch.join.ParentJoinPlugin giving error](https://discuss.elastic.co/t/org-elasticsearch-join-parentjoinplugin-giving-error/149274)
**Author:** [@ritwik1994](https://discuss.elastic.co/u/ritwik1994)\ **Replies:** 5\ **Last updated:** [September 21, 2018, 6:27am UTC](https://discuss.elastic.co/t/org-elasticsearch-join-parentjoinplugin-giving-error/149274 "2018-09-21T06:27:10Z")
Hi, I am creating the connection of elastic search 6.4.1 with my spring boot application with help of transportclient but there are stack of exception coming :- Failed to instantiate \[org.elasticsearch.client.Client\]: … --- ## [Convert amount to standard currency](https://discuss.elastic.co/t/convert-amount-to-standard-currency/149389)
**Author:** [@nickvj](https://discuss.elastic.co/u/nickvj)\ **Replies:** 2\ **Last updated:** [September 21, 2018, 5:23am UTC](https://discuss.elastic.co/t/convert-amount-to-standard-currency/149389 "2018-09-21T05:23:35Z")
I have amounts with different currency that I want to standardize to let's say USD. Is there an example I can follow? --- ## [Upgrade from 5.6.5 to 6.3.2 elasticsearch fails due to "Caused by: java.lang.IllegalStateException: unexpected distribution flavor \[\]; your distribution is broken"](https://discuss.elastic.co/t/upgrade-from-5-6-5-to-6-3-2-elasticsearch-fails-due-to-caused-by-java-lang-illegalstateexception-unexpected-distribution-flavor-your-distribution-is-broken/149147)
**Author:** [@vijayakumar.balraj](https://discuss.elastic.co/u/vijayakumar.balraj)\ **Replies:** 3\ **Last updated:** [September 21, 2018, 12:55am UTC](https://discuss.elastic.co/t/upgrade-from-5-6-5-to-6-3-2-elasticsearch-fails-due-to-caused-by-java-lang-illegalstateexception-unexpected-distribution-flavor-your-distribution-is-broken/149147 "2018-09-21T00:55:29Z")
am trying to upgrade elasticsearch version from 5.6.5 to 6.3.2 in centos7 OS and am seeing below error \[2018-09-19T14:52:15,414\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[ips-estestupgrade\] fatal error in thr… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1540) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1542)