# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1548 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1549 --- ## [Events in queue, illegal\_argument\_exception, final mapping issue](https://discuss.elastic.co/t/events-in-queue-illegal-argument-exception-final-mapping-issue/148453)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 1\ **Last updated:** [September 14, 2018, 5:21pm UTC](https://discuss.elastic.co/t/events-in-queue-illegal-argument-exception-final-mapping-issue/148453 "2018-09-14T17:21:49Z")
We are trying to use uberagent with Elasticsearch but cant seem to get communication between the two. We've set our receiver settings and uberAgent is sending data to Elasticsearch but it's queuing up. The error message… --- ## [Disk space /var](https://discuss.elastic.co/t/disk-space-var/148369)
**Author:** [@nandha\_88](https://discuss.elastic.co/u/nandha_88)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 4:04pm UTC](https://discuss.elastic.co/t/disk-space-var/148369 "2018-09-14T16:04:43Z")
Hi, The var folder is full ELK server. fully indices and please tell a method to remove it /dev/sda1 950M 181M 770M 19% /boot /dev/mapper/rhel\_-var 187G 174G 13G 94% /var tmpfs … --- ## [Invalid initial heap size](https://discuss.elastic.co/t/invalid-initial-heap-size/143248)
**Author:** [@PolterFox](https://discuss.elastic.co/u/PolterFox)\ **Replies:** 32\ **Last updated:** [September 14, 2018, 2:43pm UTC](https://discuss.elastic.co/t/invalid-initial-heap-size/143248 "2018-09-14T14:43:06Z")
Hey guys, I have a machine running elasticsearch as a service, it initially had 3GB of RAM available, which worked, but now I could increase the RAM and get Elasticsearch 9GB of RAM, but I always get the error invalid i… --- ## [Can't send Email from Watcher in Elastic Cloud](https://discuss.elastic.co/t/cant-send-email-from-watcher-in-elastic-cloud/148361)
**Author:** [@nick.fisher](https://discuss.elastic.co/u/nick.fisher)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 2:30pm UTC](https://discuss.elastic.co/t/cant-send-email-from-watcher-in-elastic-cloud/148361 "2018-09-14T14:30:45Z")
I have a simple watcher setup in Elastic Cloud, with a deployment using version 5.6.10. I've tested it with other notification actions (logging and Slack) and they work fine, however I keep getting an error from the Ema… --- ## [Run 2 elasticsearch cluster on one server](https://discuss.elastic.co/t/run-2-elasticsearch-cluster-on-one-server/148614)
**Author:** [@Guy\_Barnea](https://discuss.elastic.co/u/Guy_Barnea)\ **Replies:** 1\ **Last updated:** [September 14, 2018, 1:56pm UTC](https://discuss.elastic.co/t/run-2-elasticsearch-cluster-on-one-server/148614 "2018-09-14T13:56:06Z")
hello, i want to run 2 instances of kibana, such that each one will point to different es cluster. I want that each kibana will have different dashboards. it is possible to do such a thing? Thanks. --- ## [Bag-of-words matching](https://discuss.elastic.co/t/bag-of-words-matching/148628)
**Author:** [@Christos\_Mantas](https://discuss.elastic.co/u/Christos_Mantas)\ **Replies:** 0\ **Last updated:** [September 14, 2018, 1:23pm UTC](https://discuss.elastic.co/t/bag-of-words-matching/148628 "2018-09-14T13:23:24Z")
Hello. there is a very simple thing I have been trying to do with ES, and only managed via a workaround: given a query and a document field, match all the query's terms with all the field's terms. In other words : t… --- ## [How to dump streaming aggregate data to elastic search](https://discuss.elastic.co/t/how-to-dump-streaming-aggregate-data-to-elastic-search/148621)
**Author:** [@sheryl](https://discuss.elastic.co/u/sheryl)\ **Replies:** 0\ **Last updated:** [September 14, 2018, 12:58pm UTC](https://discuss.elastic.co/t/how-to-dump-streaming-aggregate-data-to-elastic-search/148621 "2018-09-14T12:58:11Z")
i have streaming data coming from kafka , and using spark structured streaming i do some filteration . val df=streamingData.selectExpr("\*").groupBy("date","location","name").agg((count(("name")) I want to send stream… --- ## [Does disabling norms for non-text fields make any impact?](https://discuss.elastic.co/t/does-disabling-norms-for-non-text-fields-make-any-impact/148620)
**Author:** [@shobhana](https://discuss.elastic.co/u/shobhana)\ **Replies:** 0\ **Last updated:** [September 14, 2018, 12:36pm UTC](https://discuss.elastic.co/t/does-disabling-norms-for-non-text-fields-make-any-impact/148620 "2018-09-14T12:36:33Z")
I understand that norms are necessary for scoring and if I am not interested in scoring, I can disable it for text fields. If I have an index with approx 15 fields and most of them are mapped as keyword/double/integer/bo… --- ## [Scripts stored via TransportClient lose fields in source](https://discuss.elastic.co/t/scripts-stored-via-transportclient-lose-fields-in-source/148473)
**Author:** [@Hannes\_Korte](https://discuss.elastic.co/u/Hannes_Korte)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 12:27pm UTC](https://discuss.elastic.co/t/scripts-stored-via-transportclient-lose-fields-in-source/148473 "2018-09-14T12:27:01Z")
Hi, I just discovered a strange behavior of the TransportClient in ES 5.6.11. Maybe a bug, maybe just wrong usage. When I store a script via the TransportClient then all fields but the first field get lost in the source… --- ## [Optimize elasticsearch query using highlighting](https://discuss.elastic.co/t/optimize-elasticsearch-query-using-highlighting/148562)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 0\ **Last updated:** [September 14, 2018, 6:55am UTC](https://discuss.elastic.co/t/optimize-elasticsearch-query-using-highlighting/148562 "2018-09-14T06:55:00Z")
I used the highlight feature of elasticsearch and found the time taken for search has increased dramatically. To give you an example on a 50,000 record set, when searching without highlight, the query took 194ms and whi… --- ## [Unable to create ML job](https://discuss.elastic.co/t/unable-to-create-ml-job/148315)
**Author:** [@pradip.d](https://discuss.elastic.co/u/pradip.d)\ **Replies:** 5\ **Last updated:** [September 14, 2018, 12:04pm UTC](https://discuss.elastic.co/t/unable-to-create-ml-job/148315 "2018-09-14T12:04:42Z")
Hi Team, I am using Elasticsearch 6.4.0 and my beats are sending log/ event directly to ES. But when i am trying to create a Machine Learning job its giving me below error. Elasticsearch output: \[2018-09-12T17:33:40… --- ## [Check specific queries for deprecations in ES 2.4?](https://discuss.elastic.co/t/check-specific-queries-for-deprecations-in-es-2-4/148147)
**Author:** [@gskema](https://discuss.elastic.co/u/gskema)\ **Replies:** 0\ **Last updated:** [September 11, 2018, 1:45pm UTC](https://discuss.elastic.co/t/check-specific-queries-for-deprecations-in-es-2-4/148147 "2018-09-11T13:45:33Z")
Hello, we're using ES 2.4 and Migration Helper plugin. In the plugin, we see thousands of deprecation warnings. We'd like to check specific queries to see if they're generating the deprecation warning, then we would chan… --- ## [Restrict payload per chained query](https://discuss.elastic.co/t/restrict-payload-per-chained-query/148352)
**Author:** [@David\_Garza](https://discuss.elastic.co/u/David_Garza)\ **Replies:** 1\ **Last updated:** [September 14, 2018, 11:29am UTC](https://discuss.elastic.co/t/restrict-payload-per-chained-query/148352 "2018-09-14T11:29:54Z")
We are running a watcher every minute which may return many documents (1000s). We run the query results through a few different transformations using chained inputs. Of the 3 scripted transforms, I only need one of the i… --- ## [Fetching Index - type relation](https://discuss.elastic.co/t/fetching-index-type-relation/148607)
**Author:** [@mseccbi](https://discuss.elastic.co/u/mseccbi)\ **Replies:** 0\ **Last updated:** [September 14, 2018, 10:43am UTC](https://discuss.elastic.co/t/fetching-index-type-relation/148607 "2018-09-14T10:43:35Z")
I am trying to fetch index and its corresponding types in a single query. I tried using I tried using filter\_path search like this localhost:9200/\_search?filter\_path=hits.hits.\_index,hits.hits.\_type&pretty But if one in… --- ## [Unable to see index in Elasticsearch](https://discuss.elastic.co/t/unable-to-see-index-in-elasticsearch/148604)
**Author:** [@sogutu](https://discuss.elastic.co/u/sogutu)\ **Replies:** 0\ **Last updated:** [September 14, 2018, 10:31am UTC](https://discuss.elastic.co/t/unable-to-see-index-in-elasticsearch/148604 "2018-09-14T10:31:18Z")
Hi, I have a new installation of ELK. I can see kibana index when I visit http://xx.xx.xx.xx:9200/\_cat/indices?v but I cannot see any other index I create. I have also installed filebeat. This is part of my setting fo… --- ## [Filter snapshot by filename](https://discuss.elastic.co/t/filter-snapshot-by-filename/148409)
**Author:** [@ardel](https://discuss.elastic.co/u/ardel)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 10:05am UTC](https://discuss.elastic.co/t/filter-snapshot-by-filename/148409 "2018-09-14T10:05:51Z")
Hello All, Suppose that we have snapshot that has this format of filename curator-20180813011640, how can I filter that by day? This is the current filter that I used but I cannot get the snapshot that I need to delete … --- ## [Elastic search get one record per hour](https://discuss.elastic.co/t/elastic-search-get-one-record-per-hour/148327)
**Author:** [@Jothi\_Kannan](https://discuss.elastic.co/u/Jothi_Kannan)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 10:01am UTC](https://discuss.elastic.co/t/elastic-search-get-one-record-per-hour/148327 "2018-09-14T10:01:21Z")
I want to get only one record per hours in a date range. For Example, If I want to get the data's between the days (28-08-2018 - 15-09-2018) there are almost 10000 records, but I want to filter the result to show only on… --- ## [Elastic search installation](https://discuss.elastic.co/t/elastic-search-installation/148504)
**Author:** [@Maddy\_M](https://discuss.elastic.co/u/Maddy_M)\ **Replies:** 5\ **Last updated:** [September 14, 2018, 9:32am UTC](https://discuss.elastic.co/t/elastic-search-installation/148504 "2018-09-14T09:32:26Z")
hi, elastic search data directory is removed. how to restore data. elastic search process is still running. --- ## [Elasticsearch 5.6 working set memory](https://discuss.elastic.co/t/elasticsearch-5-6-working-set-memory/148590)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 0\ **Last updated:** [September 14, 2018, 9:16am UTC](https://discuss.elastic.co/t/elasticsearch-5-6-working-set-memory/148590 "2018-09-14T09:16:38Z")
Hi all, I'm running an Elasticsearch cluster with just one node on a Windows Server 2012 R2. JVM configuration uses the default values with -Xms 2g -Xmx 2g but when I checked the memory usage I saw that the working s… --- ## [Default analyzer in elasticsearch](https://discuss.elastic.co/t/default-analyzer-in-elasticsearch/148564)
**Author:** [@Vishnu\_P\_S](https://discuss.elastic.co/u/Vishnu_P_S)\ **Replies:** 1\ **Last updated:** [September 14, 2018, 8:35am UTC](https://discuss.elastic.co/t/default-analyzer-in-elasticsearch/148564 "2018-09-14T08:35:07Z")
I have created a new index with mapping in elasticsearch 5.6. But I haven't specified any specific analyzer. If any analyzer is used by default, what will be the analyzer and how to identify it? --- ## [\[SOLVED\] Gradle run task to start two nodes?](https://discuss.elastic.co/t/solved-gradle-run-task-to-start-two-nodes/148325)
**Author:** [@cbismuth](https://discuss.elastic.co/u/cbismuth)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 7:40am UTC](https://discuss.elastic.co/t/solved-gradle-run-task-to-start-two-nodes/148325 "2018-09-14T07:40:21Z")
Hi, I'm trying to fix issue 32721. Is there any way to run a cluster with two nodes from Gradle run task? Thank you, Chris --- ## [How can i retrieve timebased index from elasticsearch using python script](https://discuss.elastic.co/t/how-can-i-retrieve-timebased-index-from-elasticsearch-using-python-script/147056)
**Author:** [@yash\_mangla](https://discuss.elastic.co/u/yash_mangla)\ **Replies:** 10\ **Last updated:** [September 14, 2018, 7:37am UTC](https://discuss.elastic.co/t/how-can-i-retrieve-timebased-index-from-elasticsearch-using-python-script/147056 "2018-09-14T07:37:51Z")
Hi Folks, I'm trying to retrieve time based events from elasticsearch using python script for few time intervals. could anyone here who can share the example to do it. using core api likes elasticsearch-py or elasticse… --- ## [Is this recycle of soft reference?](https://discuss.elastic.co/t/is-this-recycle-of-soft-reference/148559)
**Author:** [@LLRukia](https://discuss.elastic.co/u/LLRukia)\ **Replies:** 0\ **Last updated:** [September 14, 2018, 6:48am UTC](https://discuss.elastic.co/t/is-this-recycle-of-soft-reference/148559 "2018-09-14T06:48:32Z")
In this picture, there is a steep drop in JVM Heap graph between 8 a.m. to 9 a.m.. I am wondering the reason of this. My log entered smoothly at that time (8 a.m to 9 a.m). What is that? Is recycle of soft referenc… --- ## [Elasticsearch on RHEL 7.4 installation](https://discuss.elastic.co/t/elasticsearch-on-rhel-7-4-installation/147655)
**Author:** [@msomasun](https://discuss.elastic.co/u/msomasun)\ **Replies:** 4\ **Last updated:** [September 14, 2018, 6:52am UTC](https://discuss.elastic.co/t/elasticsearch-on-rhel-7-4-installation/147655 "2018-09-14T06:52:31Z")
Hi I am installing Elasticsearch in RHEL by downloading the RPM. Any suggestions on below issue. in /etc/elasticsearch/elasticsearch.yml i have made below chagne. network.host: 0.0.0.0 \[root@bdm ~\]# ll total 95576 … --- ## [Optimize time for a elasticsearch query using fuzziness](https://discuss.elastic.co/t/optimize-time-for-a-elasticsearch-query-using-fuzziness/148557)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 0\ **Last updated:** [September 14, 2018, 6:25am UTC](https://discuss.elastic.co/t/optimize-time-for-a-elasticsearch-query-using-fuzziness/148557 "2018-09-14T06:25:10Z")
The below search query is taking around 2356 ms to fetch 50 records Fuzziness leads to slower search. How can I improve performance using Fuzziness? (Highlight cannot be skipped) { "from" : 0, "size" : 50, "query": … --- ## [Circuit Breaking Exception](https://discuss.elastic.co/t/circuit-breaking-exception/148555)
**Author:** [@Nitish\_Goyal](https://discuss.elastic.co/u/Nitish_Goyal)\ **Replies:** 3\ **Last updated:** [September 14, 2018, 6:34am UTC](https://discuss.elastic.co/t/circuit-breaking-exception/148555 "2018-09-14T06:34:03Z")
I have recently migrated the cluster from 2.4 to 6.3.0 and I am getting circuit breaking exception every few hours on the nodes Cluster details - Data nodes : 13 Master nodes : 3 Query nodes : 3 We aren't using this… --- ## [Elastic too many open files](https://discuss.elastic.co/t/elastic-too-many-open-files/148549)
**Author:** [@Ilyas\_Ahsan](https://discuss.elastic.co/u/Ilyas_Ahsan)\ **Replies:** 5\ **Last updated:** [September 14, 2018, 6:33am UTC](https://discuss.elastic.co/t/elastic-too-many-open-files/148549 "2018-09-14T06:33:21Z")
Hai, I have several problem after upgrading to elasticsearch, kibana, logstash v 5.6.0. and one of issue cannot assign unassign shard because to many open files. i have incresea open files limit to 20480 and set vm.max… --- ## [Docker Elasticsearch 6.4.0 and Logstash](https://discuss.elastic.co/t/docker-elasticsearch-6-4-0-and-logstash/148438)
**Author:** [@swild2](https://discuss.elastic.co/u/swild2)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 3:15am UTC](https://discuss.elastic.co/t/docker-elasticsearch-6-4-0-and-logstash/148438 "2018-09-14T03:15:36Z")
Hey there, I'm very new to Docker and Elasticsearch so I hope you can help me. I created a ES Cluster with 5 nodes (2x dedicated master nodes, 2 data/ingest nodes and one coordinate node). My containers look like: es\_… --- ## [Elastic port is getting changed after starting of services](https://discuss.elastic.co/t/elastic-port-is-getting-changed-after-starting-of-services/147932)
**Author:** [@dhananjay88](https://discuss.elastic.co/u/dhananjay88)\ **Replies:** 1\ **Last updated:** [September 14, 2018, 12:05am UTC](https://discuss.elastic.co/t/elastic-port-is-getting-changed-after-starting-of-services/147932 "2018-09-14T00:05:59Z")
Hi All, I am getting issue of not enough master discovered during pinging. Here I am not able to understand that although Elastic is binding to 9500 port after start ("publish\_address {10.159.252.99:9500}, bound\_address… --- ## [Sort using painless script](https://discuss.elastic.co/t/sort-using-painless-script/148284)
**Author:** [@nejra](https://discuss.elastic.co/u/nejra)\ **Replies:** 2\ **Last updated:** [September 13, 2018, 11:29pm UTC](https://discuss.elastic.co/t/sort-using-painless-script/148284 "2018-09-13T23:29:05Z")
Hi. I have a large script used for sorting which exceeds maximum characters count so I split it into two separate scripts. I want to avoid writing a plugin but can't find any solution. I don't use both scripts on each d… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1547) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1549)