# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1547

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1548

---

## [Parse Exception from a simple POST request](https://discuss.elastic.co/t/parse-exception-from-a-simple-post-request/148754)

<div class="topic-metadata">

**Author:** [@Ben\_Hoffman](https://discuss.elastic.co/u/Ben_Hoffman)\
**Replies:** 0\
**Last updated:** [September 17, 2018, 3:29am UTC](https://discuss.elastic.co/t/parse-exception-from-a-simple-post-request/148754 "2018-09-17T03:29:14Z")

</div>

I am using sockets in C++ to communicate with Elasticsearch. I can communicate with my ELK instance (it is running in a docker compose, the docker files are here). Here is the request that I am sending: POST /twitter/\_…

---

## [Issue using \_doc as type name in dest index when moving data from multi type index in 5.6.10 to single type index in ES 6.3.1](https://discuss.elastic.co/t/issue-using-doc-as-type-name-in-dest-index-when-moving-data-from-multi-type-index-in-5-6-10-to-single-type-index-in-es-6-3-1/145993)

<div class="topic-metadata">

**Author:** [@Gautam\_Priya](https://discuss.elastic.co/u/Gautam_Priya)\
**Replies:** 1\
**Last updated:** [September 16, 2018, 9:33pm UTC](https://discuss.elastic.co/t/issue-using-doc-as-type-name-in-dest-index-when-moving-data-from-multi-type-index-in-5-6-10-to-single-type-index-in-es-6-3-1/145993 "2018-09-16T21:33:56Z")

</div>

TL;DR: This question is about the problem - "cause": { "type": "illegal\_argument\_exception", "reason": "Rejecting mapping update to \[account\] as the final mapping would have more than 1 type: \[Account, \_…

---

## [How do I save array of bytes as actual array in NEST](https://discuss.elastic.co/t/how-do-i-save-array-of-bytes-as-actual-array-in-nest/148747)

<div class="topic-metadata">

**Author:** [@Pzixel](https://discuss.elastic.co/u/Pzixel)\
**Replies:** 0\
**Last updated:** [September 16, 2018, 8:50pm UTC](https://discuss.elastic.co/t/how-do-i-save-array-of-bytes-as-actual-array-in-nest/148747 "2018-09-16T20:50:25Z")

</div>

I have a simple POCO object with following definition public class MyClass { public byte\[\] Assortment {get;set;} } And I want to save it as \[1,2,3\] in elasticsearch. But when I simply create an object of that type …

---

## [Issue with Elasticsearch 6.4 refresh policy on IndexRequest](https://discuss.elastic.co/t/issue-with-elasticsearch-6-4-refresh-policy-on-indexrequest/148746)

<div class="topic-metadata">

**Author:** [@jbalaguero](https://discuss.elastic.co/u/jbalaguero)\
**Replies:** 0\
**Last updated:** [September 16, 2018, 8:42pm UTC](https://discuss.elastic.co/t/issue-with-elasticsearch-6-4-refresh-policy-on-indexrequest/148746 "2018-09-16T20:42:20Z")

</div>

Hello, I'm indexing an ES 6.4 index in this way: cluster.getRestClient().index(new IndexRequest(INDEX\_NAME, TYPE\_NAME, cacheId).source(objCache.getIndexDocument(), XContentType.JSON), cluster.getRequestOptions()); Thi…

---

## [Verifying shards state after changing replication factor](https://discuss.elastic.co/t/verifying-shards-state-after-changing-replication-factor/148485)

<div class="topic-metadata">

**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\
**Replies:** 2\
**Last updated:** [September 16, 2018, 8:12pm UTC](https://discuss.elastic.co/t/verifying-shards-state-after-changing-replication-factor/148485 "2018-09-16T20:12:15Z")

</div>

Hi all, I'm running Elasticsearch 6.3.0 with 8 data serving nodes, 2 data indexing nodes, 3 masters and 5 clients. Each index is being processed in data index node (writes) and then relocated to data serving node (read…

---

## [Elastic Stack with Kafka/Redis H/W requirement](https://discuss.elastic.co/t/elastic-stack-with-kafka-redis-h-w-requirement/148306)

<div class="topic-metadata">

**Author:** [@sumitpramanik](https://discuss.elastic.co/u/sumitpramanik)\
**Replies:** 1\
**Last updated:** [September 16, 2018, 6:21pm UTC](https://discuss.elastic.co/t/elastic-stack-with-kafka-redis-h-w-requirement/148306 "2018-09-16T18:21:57Z")

</div>

Hi All, I want to deploy an Elastic Stack in a production environment. There are 1000+ client instances with around 15000/s logs. After reading various articles regarding this I have found these recommendation: 3x Ela…

---

## [ActiveCollab](https://discuss.elastic.co/t/activecollab/148734)

<div class="topic-metadata">

**Author:** [@bulldzr](https://discuss.elastic.co/u/bulldzr)\
**Replies:** 6\
**Last updated:** [September 16, 2018, 5:10pm UTC](https://discuss.elastic.co/t/activecollab/148734 "2018-09-16T17:10:13Z")

</div>

I have been looking for a solution for quite some time. Activecollab a project management portal uses elasticsearch. I have installed this on my server and followed all of the instructions, I have successfully completed …

---

## [Elasticsearch query\_cache stats](https://discuss.elastic.co/t/elasticsearch-query-cache-stats/148742)

<div class="topic-metadata">

**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\
**Replies:** 0\
**Last updated:** [September 16, 2018, 4:11pm UTC](https://discuss.elastic.co/t/elasticsearch-query-cache-stats/148742 "2018-09-16T16:11:47Z")

</div>

Hi All, Using Elasticsearch 6.3.0, I'm trying to understand the meaning of the following (from /\_nodes/stats): query\_cache: { memory\_size\_in\_bytes: 38247165, total\_count: 11278236, hit\_count: 1672112, miss\_count: 9…

---

## [Translog is already closed error](https://discuss.elastic.co/t/translog-is-already-closed-error/148736)

<div class="topic-metadata">

**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\
**Replies:** 0\
**Last updated:** [September 16, 2018, 8:27am UTC](https://discuss.elastic.co/t/translog-is-already-closed-error/148736 "2018-09-16T08:27:40Z")

</div>

Hello, I have elastic cluster, created from 8 hot nodes, 4 warm nodes, 3 masters and 2 coordinating nodes. I still getting error on some node (randomize), when its disconnected. \[2018-09-11T07:38:48,692\]\[ERROR\]\[o.e.b.El…

---

## [Failed to publish events, write queue "completed" not going down, resource use low](https://discuss.elastic.co/t/failed-to-publish-events-write-queue-completed-not-going-down-resource-use-low/148718)

<div class="topic-metadata">

**Author:** [@Kieren\_Johnstone](https://discuss.elastic.co/u/Kieren_Johnstone)\
**Replies:** 1\
**Last updated:** [September 15, 2018, 9:12pm UTC](https://discuss.elastic.co/t/failed-to-publish-events-write-queue-completed-not-going-down-resource-use-low/148718 "2018-09-15T21:12:10Z")

</div>

I'm using cloud.elastic.co - and seeing: 2018-09-15T19:21:08.717Z ERROR pipeline/output.go:92 Failed to publish events: 500 Internal Server Error: {"took":4,"ignored":false,"errors":true,"error":{"type":"export\_exceptio…

---

## [Elastic query string with time range](https://discuss.elastic.co/t/elastic-query-string-with-time-range/148433)

<div class="topic-metadata">

**Author:** [@yossiv](https://discuss.elastic.co/u/yossiv)\
**Replies:** 1\
**Last updated:** [September 15, 2018, 8:33pm UTC](https://discuss.elastic.co/t/elastic-query-string-with-time-range/148433 "2018-09-15T20:33:46Z")

</div>

Hi , i want to query me elastic but to add also a time range like last 5 min, so it wont pull all the results under that index. i get the messages results but again i want to limit this to spesific time range p.s: i tr…

---

## [Could not open job because no ML nodes with sufficient capacity were found](https://discuss.elastic.co/t/could-not-open-job-because-no-ml-nodes-with-sufficient-capacity-were-found/146882)

<div class="topic-metadata">

**Author:** [@sesha](https://discuss.elastic.co/u/sesha)\
**Replies:** 15\
**Last updated:** [September 15, 2018, 8:21pm UTC](https://discuss.elastic.co/t/could-not-open-job-because-no-ml-nodes-with-sufficient-capacity-were-found/146882 "2018-09-15T20:21:54Z")

</div>

I have dedicated ml node with 64 GB memory, 10 CPU. I am using x-pack 6.4 with small index 900mb data, Right now I can able to run 199 Jobs, but need to run more jobs, but have more remaining RAM nearly 40 GB RAM. Initi…

---

## [Elastic Search AllPermission security manager issue](https://discuss.elastic.co/t/elastic-search-allpermission-security-manager-issue/148676)

<div class="topic-metadata">

**Author:** [@Vishal\_Goel](https://discuss.elastic.co/u/Vishal_Goel)\
**Replies:** 4\
**Last updated:** [September 15, 2018, 6:01pm UTC](https://discuss.elastic.co/t/elastic-search-allpermission-security-manager-issue/148676 "2018-09-15T18:01:27Z")

</div>

I am running elastic search with non loop-back IP (production mode) on Windows. To run ES, I am forking it out (elasticsearch.bat) from a Java app using ProcessBuilder. However, it is giving me following error: \[2018-…

---

## [Elasticsearch snapshot failed](https://discuss.elastic.co/t/elasticsearch-snapshot-failed/148713)

<div class="topic-metadata">

**Author:** [@sukanta](https://discuss.elastic.co/u/sukanta)\
**Replies:** 0\
**Last updated:** [September 15, 2018, 4:14pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-failed/148713 "2018-09-15T16:14:34Z")

</div>

Hi In one of our Elasticsearch cluster backup is failing with following error "state" : "PARTIAL", "start\_time" : "2018-09-15T08:14:27.399Z", "start\_time\_in\_millis" : 1536999267399, "end\_time" : "2018-09-15T08:2…

---

## [How to write alert rule in Elastalert](https://discuss.elastic.co/t/how-to-write-alert-rule-in-elastalert/147575)

<div class="topic-metadata">

**Author:** [@Pradnya](https://discuss.elastic.co/u/Pradnya)\
**Replies:** 1\
**Last updated:** [September 15, 2018, 3:55pm UTC](https://discuss.elastic.co/t/how-to-write-alert-rule-in-elastalert/147575 "2018-09-15T15:55:01Z")

</div>

I have configured metricbeat-Elasticsearch-kibana to monitor docker containers metric. and Elastalert to get email alert. I am getting CPU, memory, Network usage perfectly. and getting docker container status as field:…

---

## [Cannot refresh field list](https://discuss.elastic.co/t/cannot-refresh-field-list/148569)

<div class="topic-metadata">

**Author:** [@theflakes](https://discuss.elastic.co/u/theflakes)\
**Replies:** 9\
**Last updated:** [September 15, 2018, 2:56pm UTC](https://discuss.elastic.co/t/cannot-refresh-field-list/148569 "2018-09-15T14:56:06Z")

</div>

Updated my template and can no longer refresh the field list in Kibana (we have ~ 610 fields). I get an internal server error occurred; status 500. I've restarted Kibana. Also upgraded to 6.4.0 about 14 days ago on al…

---

## [Read only indices](https://discuss.elastic.co/t/read-only-indices/148705)

<div class="topic-metadata">

**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\
**Replies:** 0\
**Last updated:** [September 15, 2018, 1:39pm UTC](https://discuss.elastic.co/t/read-only-indices/148705 "2018-09-15T13:39:59Z")

</div>

I'm running with Elasticsearch 6.3.0. First I'm preparing my indices (by indexing them with bulks) and then when they are ready, we are not updating them anymore, we are only querying / searching / serving from them (wi…

---

## [\[FORBIDDEN / 12 / index read - only / allow delete(api)\] Error with Elasticsearch.Net](https://discuss.elastic.co/t/forbidden-12-index-read-only-allow-delete-api-error-with-elasticsearch-net/148706)

<div class="topic-metadata">

**Author:** [@Rammohan91](https://discuss.elastic.co/u/Rammohan91)\
**Replies:** 1\
**Last updated:** [September 15, 2018, 2:08pm UTC](https://discuss.elastic.co/t/forbidden-12-index-read-only-allow-delete-api-error-with-elasticsearch-net/148706 "2018-09-15T14:08:18Z")

</div>

Hi There, I am having an issue while trying to perform PUT request from ElasticSearch.Net. First run successsfully inserts the document record, however when i update the data for another document and runs again, it just…

---

## [Setting search size to unlimited?](https://discuss.elastic.co/t/setting-search-size-to-unlimited/148682)

<div class="topic-metadata">

**Author:** [@jgburks](https://discuss.elastic.co/u/jgburks)\
**Replies:** 2\
**Last updated:** [September 15, 2018, 12:34pm UTC](https://discuss.elastic.co/t/setting-search-size-to-unlimited/148682 "2018-09-15T12:34:16Z")

</div>

Is there some way to set the search size parameter to unlimited? It defaults to 10, and I can set it to some arbitrary large number, but I was hoping there was some way to just set it to unlimited. I just want to have al…

---

## [Elasticsearch search locked with ransomeware](https://discuss.elastic.co/t/elasticsearch-search-locked-with-ransomeware/148698)

<div class="topic-metadata">

**Author:** [@kavtaradze.s](https://discuss.elastic.co/u/kavtaradze.s)\
**Replies:** 3\
**Last updated:** [September 15, 2018, 12:17pm UTC](https://discuss.elastic.co/t/elasticsearch-search-locked-with-ransomeware/148698 "2018-09-15T12:17:49Z")

</div>

I have not protected elasticsearch, so someone hacked it, left new index with contents where to transfer bitcoins. Data I can regenerate, the questions is how can I get rid of that. Accessing the indices directly works, …

---

## [Merge 3 CSV files based on common column](https://discuss.elastic.co/t/merge-3-csv-files-based-on-common-column/148696)

<div class="topic-metadata">

**Author:** [@ravi\_yadav1](https://discuss.elastic.co/u/ravi_yadav1)\
**Replies:** 1\
**Last updated:** [September 15, 2018, 10:33am UTC](https://discuss.elastic.co/t/merge-3-csv-files-based-on-common-column/148696 "2018-09-15T10:33:39Z")

</div>

Hi, I am trying to merge 3 csv files which have columns like: 1st CSV: \[oid, symbol, price, qty, side, err1\] 2nd CSV: \[oid, tid, symbol, price, qty, side, err2, error\_msg\] 3rd CSV: \[tid, symbol, price, qty, side, err…

---

## [\[Reindexing\] Is there any drawback to writing to a new index while re-indexing?](https://discuss.elastic.co/t/reindexing-is-there-any-drawback-to-writing-to-a-new-index-while-re-indexing/148686)

<div class="topic-metadata">

**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\
**Replies:** 1\
**Last updated:** [September 15, 2018, 3:25am UTC](https://discuss.elastic.co/t/reindexing-is-there-any-drawback-to-writing-to-a-new-index-while-re-indexing/148686 "2018-09-15T03:25:47Z")

</div>

I'm working on a project where we are considering two approaches for zero-downtime re-indexing: Create new index and begin re-indexing data into it. While re-indexing, new indexing requests get written to the new ind…

---

## [Improving the relevancy of documents](https://discuss.elastic.co/t/improving-the-relevancy-of-documents/148646)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 1\
**Last updated:** [September 15, 2018, 3:14am UTC](https://discuss.elastic.co/t/improving-the-relevancy-of-documents/148646 "2018-09-15T03:14:12Z")

</div>

I've indexed a few pdf files but when I search with a specific query I'm not getting relevant results as I expected. I would like to improve the relevancy of each document. we need to perform analysis phase(kind of NL…

---

## [Spring data can not get result list by elasticsearchTemplate](https://discuss.elastic.co/t/spring-data-can-not-get-result-list-by-elasticsearchtemplate/148689)

<div class="topic-metadata">

**Author:** [@freeunion1possible](https://discuss.elastic.co/u/freeunion1possible)\
**Replies:** 0\
**Last updated:** [September 15, 2018, 2:34am UTC](https://discuss.elastic.co/t/spring-data-can-not-get-result-list-by-elasticsearchtemplate/148689 "2018-09-15T02:34:26Z")

</div>

Hi Buddy, In my project, included spring boot(2.0.4) + spring data+ elasticsearch.client(transport:5.6.10). when i try to used elasticsearchTemplate query object list, its return size=0, and no errors or exception. Q…

---

## [Can I set up pipeline processor on index level](https://discuss.elastic.co/t/can-i-set-up-pipeline-processor-on-index-level/148674)

<div class="topic-metadata">

**Author:** [@vvelichkovich](https://discuss.elastic.co/u/vvelichkovich)\
**Replies:** 1\
**Last updated:** [September 14, 2018, 10:31pm UTC](https://discuss.elastic.co/t/can-i-set-up-pipeline-processor-on-index-level/148674 "2018-09-14T22:31:08Z")

</div>

Is there a way to set up pipeline to be always used on an index when new document is indexed? I know I can specify it with each document, but it feels there should be way to just set it up once, since this anyway does p…

---

## [Shards skip on range query](https://discuss.elastic.co/t/shards-skip-on-range-query/148680)

<div class="topic-metadata">

**Author:** [@jimyoo](https://discuss.elastic.co/u/jimyoo)\
**Replies:** 0\
**Last updated:** [September 14, 2018, 9:09pm UTC](https://discuss.elastic.co/t/shards-skip-on-range-query/148680 "2018-09-14T21:09:04Z")

</div>

Based on this thread, I am testing range queries to see skipping shards but the result is not I expected. I have 2 indices (5 shards each with 0 replica); "event-1" and "event-2" where "event-1" has 4 documents whose "c…

---

## [Kibana unable to connect to elatsicsearch](https://discuss.elastic.co/t/kibana-unable-to-connect-to-elatsicsearch/148673)

<div class="topic-metadata">

**Author:** [@rmadoori](https://discuss.elastic.co/u/rmadoori)\
**Replies:** 1\
**Last updated:** [September 14, 2018, 7:31pm UTC](https://discuss.elastic.co/t/kibana-unable-to-connect-to-elatsicsearch/148673 "2018-09-14T19:31:36Z")

</div>

Hi, I am running Kibana with https kibana.yml: | server: name: "elk-stack-example" host: 0.0.0.0 port: 5601 elasticsearch.url: "http://es-master:9200" elasticsearch.requestTimeout: 180000 server.ssl.certificate:…

---

## [Help with hour of day in the date field's timezone](https://discuss.elastic.co/t/help-with-hour-of-day-in-the-date-fields-timezone/147874)

<div class="topic-metadata">

**Author:** [@veqryn](https://discuss.elastic.co/u/veqryn)\
**Replies:** 6\
**Last updated:** [September 14, 2018, 5:31pm UTC](https://discuss.elastic.co/t/help-with-hour-of-day-in-the-date-fields-timezone/147874 "2018-09-14T17:31:50Z")

</div>

I originally posted this over on github, where I was told this behavior was not a bug and was encouraged to seek help here instead. I am using AWS ElasticSearch Service, version 6.2. I am trying to get the hour of the …

---

## [X-Pack Security allow only to create a document but not to update it](https://discuss.elastic.co/t/x-pack-security-allow-only-to-create-a-document-but-not-to-update-it/148660)

<div class="topic-metadata">

**Author:** [@alezama](https://discuss.elastic.co/u/alezama)\
**Replies:** 0\
**Last updated:** [September 14, 2018, 5:28pm UTC](https://discuss.elastic.co/t/x-pack-security-allow-only-to-create-a-document-but-not-to-update-it/148660 "2018-09-14T17:28:45Z")

</div>

Hello Comunity, Is there a role in the security X-Pack that allows only the creation of a document in an index but not updating it? I have tried with the create role but besides creating a document it also allows the us…

---

## [Restore azure snapshot to other cluster](https://discuss.elastic.co/t/restore-azure-snapshot-to-other-cluster/148659)

<div class="topic-metadata">

**Author:** [@KeninHouston](https://discuss.elastic.co/u/KeninHouston)\
**Replies:** 1\
**Last updated:** [September 14, 2018, 5:27pm UTC](https://discuss.elastic.co/t/restore-azure-snapshot-to-other-cluster/148659 "2018-09-14T17:27:45Z")

</div>

Hi, I have successfully taken snapshots to an Azure blob from the primary cluster. On the secondary cluster, I have installed the Azure plugin and also set /usr/share/elasticsearch/bin/elasticsearch-keystore add azure.…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1546)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1548)
