# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1568

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1569

---

## [Search is not giving expected results](https://discuss.elastic.co/t/search-is-not-giving-expected-results/146108)

<div class="topic-metadata">

**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\
**Replies:** 0\
**Last updated:** [August 27, 2018, 6:09am UTC](https://discuss.elastic.co/t/search-is-not-giving-expected-results/146108 "2018-08-27T06:09:54Z")

</div>

I am trying to connect to elasticsearch and do some basic query. The code am trying is : RestHighLevelClient client = new RestHighLevelClient( RestClient.builder(new HttpHost("localhost", 30100, "http"))); Sear…

---

## [Curl, save me!](https://discuss.elastic.co/t/curl-save-me/146106)

<div class="topic-metadata">

**Author:** [@201100353](https://discuss.elastic.co/u/201100353)\
**Replies:** 0\
**Last updated:** [August 27, 2018, 5:56am UTC](https://discuss.elastic.co/t/curl-save-me/146106 "2018-08-27T05:56:21Z")

</div>

Hello and Please Everyone. I'm working with Java's httpClient because of handle about curl commands. This is shabby codes, but GET method working! but PUT or POST doesn't working with this error I tried to 3 days but .…

---

## [Composite aggregations Issue](https://discuss.elastic.co/t/composite-aggregations-issue/145944)

<div class="topic-metadata">

**Author:** [@sivap](https://discuss.elastic.co/u/sivap)\
**Replies:** 0\
**Last updated:** [August 24, 2018, 4:35pm UTC](https://discuss.elastic.co/t/composite-aggregations-issue/145944 "2018-08-24T16:35:56Z")

</div>

Hi Team, I have used exclude condition in the terms aggregation and then trying to use the composite aggregation buckets to build the combinations of the values. But am getting exceptions ( "type": "parsing\_exception").:…

---

## [How to cancel/stop current long running search request in Elasticsearch?](https://discuss.elastic.co/t/how-to-cancel-stop-current-long-running-search-request-in-elasticsearch/146101)

<div class="topic-metadata">

**Author:** [@sanjaykanani](https://discuss.elastic.co/u/sanjaykanani)\
**Replies:** 3\
**Last updated:** [August 27, 2018, 4:34am UTC](https://discuss.elastic.co/t/how-to-cancel-stop-current-long-running-search-request-in-elasticsearch/146101 "2018-08-27T04:34:42Z")

</div>

My index has almost 50 million records in it and sometime It will take to much time to execute with a search request So can we cancel current running search request? { query:{ search request: { filter criteria:{ /…

---

## [Timed out while waiting for initial discovery state - timeout: 30s](https://discuss.elastic.co/t/timed-out-while-waiting-for-initial-discovery-state-timeout-30s/146055)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 10\
**Last updated:** [August 27, 2018, 4:20am UTC](https://discuss.elastic.co/t/timed-out-while-waiting-for-initial-discovery-state-timeout-30s/146055 "2018-08-27T04:20:46Z")

</div>

I'm using Elastic Stack 6.4.0 (did rolling upgrade from 6.3.2 recently) and after stop of entire elasticsearch cluster (master, data, coordinate and ingest nodes), I'm no longer able to start it; I'm getting following me…

---

## [Running Elasticsearch on AWS - Windows Server \[Walk-trough\]](https://discuss.elastic.co/t/running-elasticsearch-on-aws-windows-server-walk-trough/146063)

<div class="topic-metadata">

**Author:** [@GouravDas](https://discuss.elastic.co/u/GouravDas)\
**Replies:** 1\
**Last updated:** [August 27, 2018, 4:18am UTC](https://discuss.elastic.co/t/running-elasticsearch-on-aws-windows-server-walk-trough/146063 "2018-08-27T04:18:46Z")

</div>

Unable to find any relevant information for Running Elasticsearch on AWS - Windows Server thus as a gratitude for whether ever I have learnt from this forum, I have jotted down all the relevant steps to run your cluster …

---

## [We get error when update ES2 to ES6, info as follow: Remote responded with a chunk that was too large. Use a smaller batch size](https://discuss.elastic.co/t/we-get-error-when-update-es2-to-es6-info-as-follow-remote-responded-with-a-chunk-that-was-too-large-use-a-smaller-batch-size/146097)

<div class="topic-metadata">

**Author:** [@showmeall](https://discuss.elastic.co/u/showmeall)\
**Replies:** 0\
**Last updated:** [August 27, 2018, 3:00am UTC](https://discuss.elastic.co/t/we-get-error-when-update-es2-to-es6-info-as-follow-remote-responded-with-a-chunk-that-was-too-large-use-a-smaller-batch-size/146097 "2018-08-27T03:00:41Z")

</div>

we get error when update ES2 to ES6, info as follow: {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"Remote responded with a chunk that was too large. Use a smaller batch size."}\],"type":"illegal\_…

---

## [How to overwrite the default template](https://discuss.elastic.co/t/how-to-overwrite-the-default-template/145694)

<div class="topic-metadata">

**Author:** [@Jing\_Wang](https://discuss.elastic.co/u/Jing_Wang)\
**Replies:** 5\
**Last updated:** [August 27, 2018, 2:50am UTC](https://discuss.elastic.co/t/how-to-overwrite-the-default-template/145694 "2018-08-27T02:50:10Z")

</div>

hello everyone I have a default template setting using pattern \* and set some dynamic mapping PUT /\_template/template\_default { "index\_patterns" : \["\*"\], "order" : 0, "settings": { "index": { …

---

## [Cerebro and Kerberos](https://discuss.elastic.co/t/cerebro-and-kerberos/146091)

<div class="topic-metadata">

**Author:** [@wangqinghuan](https://discuss.elastic.co/u/wangqinghuan)\
**Replies:** 1\
**Last updated:** [August 27, 2018, 2:25am UTC](https://discuss.elastic.co/t/cerebro-and-kerberos/146091 "2018-08-27T02:25:59Z")

</div>

Hi I have little knowledge in kerberos. So If I enable kerberos in x-pack, Can site plugins like Cerebro work ？

---

## [Object mapping error in ELK](https://discuss.elastic.co/t/object-mapping-error-in-elk/146004)

<div class="topic-metadata">

**Author:** [@mrashid](https://discuss.elastic.co/u/mrashid)\
**Replies:** 1\
**Last updated:** [August 27, 2018, 12:38am UTC](https://discuss.elastic.co/t/object-mapping-error-in-elk/146004 "2018-08-27T00:38:20Z")

</div>

I am using jenkins-logstash plugin to dynamically ship data. The problem however is that I have a field by name 'db2.ci.server' . It is this filed where I am getting the below error- //,"type":"illegal\_argument\_exceptio…

---

## [Future releases distribution email](https://discuss.elastic.co/t/future-releases-distribution-email/146048)

<div class="topic-metadata">

**Author:** [@gurdipe](https://discuss.elastic.co/u/gurdipe)\
**Replies:** 2\
**Last updated:** [August 27, 2018, 12:31am UTC](https://discuss.elastic.co/t/future-releases-distribution-email/146048 "2018-08-27T00:31:33Z")

</div>

Hi All, Is there a distribution email that I can join that will inform me of future releases of Elasticsearch? Kind Regards Gurdipe

---

## [Why elasticsearch creating the user and group elasticsearch](https://discuss.elastic.co/t/why-elasticsearch-creating-the-user-and-group-elasticsearch/145533)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 4\
**Last updated:** [August 26, 2018, 7:10pm UTC](https://discuss.elastic.co/t/why-elasticsearch-creating-the-user-and-group-elasticsearch/145533 "2018-08-26T19:10:59Z")

</div>

When we are installing elasticsearch in Redhat , then one user and user group is automatically creating by ES named elasticsearch . What is the use of this user elasticsearch . All ES files owners are this user elasti…

---

## [Why all new Indexes start with 5 replicas?](https://discuss.elastic.co/t/why-all-new-indexes-start-with-5-replicas/144761)

<div class="topic-metadata">

**Author:** [@uhlhosting](https://discuss.elastic.co/u/uhlhosting)\
**Replies:** 7\
**Last updated:** [August 26, 2018, 5:46pm UTC](https://discuss.elastic.co/t/why-all-new-indexes-start-with-5-replicas/144761 "2018-08-26T17:46:19Z")

</div>

Hi, All my indexes start with 5 indexes when they are created this results in my status running yellow, since I do not run a cluster. In order to fix this, I always run manually this: PUT /logstash-2018\*/\_settings { …

---

## [Upgrade from 6.3.2 to 6.4.0 but have cert errors now and ES won't start](https://discuss.elastic.co/t/upgrade-from-6-3-2-to-6-4-0-but-have-cert-errors-now-and-es-wont-start/145873)

<div class="topic-metadata">

**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\
**Replies:** 1\
**Last updated:** [August 26, 2018, 2:51am UTC](https://discuss.elastic.co/t/upgrade-from-6-3-2-to-6-4-0-but-have-cert-errors-now-and-es-wont-start/145873 "2018-08-26T02:51:40Z")

</div>

Hello. Just started the upgarde of my Elastic Cluster from 6.3.2 to 6.4.0 but I am getting this error message in my cluster.log file and ES isn't starting. I have x.pack configured and everything was working fine until …

---

## [Using queries on Timelion](https://discuss.elastic.co/t/using-queries-on-timelion/145962)

<div class="topic-metadata">

**Author:** [@David\_Azulay](https://discuss.elastic.co/u/David_Azulay)\
**Replies:** 1\
**Last updated:** [August 26, 2018, 2:50am UTC](https://discuss.elastic.co/t/using-queries-on-timelion/145962 "2018-08-26T02:50:56Z")

</div>

Hi guys, Im trying to learn Timelion query syntax for analyzing some data. The lucene query I am having trouble with is: "Pushing message to Queue" AND "\<alertSource.\>6\</alertSource.\>\<alertCode.\>96\</alertCode.\>" I ca…

---

## [Suggestions for web crawler](https://discuss.elastic.co/t/suggestions-for-web-crawler/146046)

<div class="topic-metadata">

**Author:** [@Chelambarasan\_CR](https://discuss.elastic.co/u/Chelambarasan_CR)\
**Replies:** 0\
**Last updated:** [August 25, 2018, 7:40pm UTC](https://discuss.elastic.co/t/suggestions-for-web-crawler/146046 "2018-08-25T19:40:58Z")

</div>

Hi, I am using ES 5.6.3 with xpack and need suggestions for web crawler. Can I use ES site search for crawling and ingest in to my ES 5.6.3 index ? Saw suggestions on Apache storm. Does it have features like include/exc…

---

## [Mapping Wikipedia dump: mapper\_parsing\_exception](https://discuss.elastic.co/t/mapping-wikipedia-dump-mapper-parsing-exception/146035)

<div class="topic-metadata">

**Author:** [@maziyar](https://discuss.elastic.co/u/maziyar)\
**Replies:** 0\
**Last updated:** [August 25, 2018, 5:17pm UTC](https://discuss.elastic.co/t/mapping-wikipedia-dump-mapper-parsing-exception/146035 "2018-08-25T17:17:34Z")

</div>

Hello, I am trying to put Wikipedia cirrus-mapping-dump into an index template, but I am encountering this error: Unfortunately, I can't pinpoint the unsupported parameters as the mapping is quite large and not sure …

---

## [Gc overhead reduces ElasticSearch Performance](https://discuss.elastic.co/t/gc-overhead-reduces-elasticsearch-performance/145065)

<div class="topic-metadata">

**Author:** [@pranay\_sankpal](https://discuss.elastic.co/u/pranay_sankpal)\
**Replies:** 13\
**Last updated:** [August 25, 2018, 7:12am UTC](https://discuss.elastic.co/t/gc-overhead-reduces-elasticsearch-performance/145065 "2018-08-25T07:12:11Z")

</div>

Infrastructure details : 3 \* i3.xlarge instances for ES 1 \* t2.medium instance for logstash Volume type : io1 Software details : ElasticSearch Docker image : 6.3.0 Logstash : 5.3 Beats : 5.3 Requests : 350/sec P…

---

## [Not understanding how to rotate with curator: No actionable items in list: \<class 'curator.exceptions.NoIndices'\>](https://discuss.elastic.co/t/not-understanding-how-to-rotate-with-curator-no-actionable-items-in-list-class-curator-exceptions-noindices/146000)

<div class="topic-metadata">

**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\
**Replies:** 0\
**Last updated:** [August 25, 2018, 7:05am UTC](https://discuss.elastic.co/t/not-understanding-how-to-rotate-with-curator-no-actionable-items-in-list-class-curator-exceptions-noindices/146000 "2018-08-25T07:05:30Z")

</div>

I advance in the understanding of Curator but every step by three I get shocked. First check my repo backups. Ther're 3 snapshots http://paste.tamainut.info/view/17760692 Second try excute http://paste.tamainut.info/vi…

---

## [High ReadThroughput and Search is very slow](https://discuss.elastic.co/t/high-readthroughput-and-search-is-very-slow/145999)

<div class="topic-metadata">

**Author:** [@bruce88](https://discuss.elastic.co/u/bruce88)\
**Replies:** 0\
**Last updated:** [August 25, 2018, 5:37am UTC](https://discuss.elastic.co/t/high-readthroughput-and-search-is-very-slow/145999 "2018-08-25T05:37:34Z")

</div>

I have 12 indices in one ES cluster (3 dedicated master nodes + 10 C4.4Xlarge data nodes). Each index has about 3.5 billions data and size is about 180GB. One index is allocated 8 primary shards + 1 replica. The node C4.…

---

## [Elastic Cloud - S3 Backup Failures](https://discuss.elastic.co/t/elastic-cloud-s3-backup-failures/145994)

<div class="topic-metadata">

**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\
**Replies:** 0\
**Last updated:** [August 24, 2018, 11:55pm UTC](https://discuss.elastic.co/t/elastic-cloud-s3-backup-failures/145994 "2018-08-24T23:55:06Z")

</div>

Anyone on Elastic Cloud getting backup issues? GET /\_snapshot/found-snapshots/\_all Same error when trying to make a POST. Error is: { "error": { "root\_cause": \[ { "type": "repository\_exception", …

---

## [Coorinate map: points are offset by several thousand miles while coords are correct](https://discuss.elastic.co/t/coorinate-map-points-are-offset-by-several-thousand-miles-while-coords-are-correct/143225)

<div class="topic-metadata">

**Author:** [@bthoon](https://discuss.elastic.co/u/bthoon)\
**Replies:** 2\
**Last updated:** [August 24, 2018, 11:36pm UTC](https://discuss.elastic.co/t/coorinate-map-points-are-offset-by-several-thousand-miles-while-coords-are-correct/143225 "2018-08-24T23:36:13Z")

</div>

This image pretty much says it all. As you can see in the tooltip, the coordinates are correct, but they are displayed quite far from where they should be. They are correct relative to OTHER displayed points, but all…

---

## [Elasticsearch sub-queries](https://discuss.elastic.co/t/elasticsearch-sub-queries/145990)

<div class="topic-metadata">

**Author:** [@rsrtl](https://discuss.elastic.co/u/rsrtl)\
**Replies:** 0\
**Last updated:** [August 24, 2018, 10:30pm UTC](https://discuss.elastic.co/t/elasticsearch-sub-queries/145990 "2018-08-24T22:30:16Z")

</div>

Hello, now that SQL Querying into Elasticsearch is supported, are there any plans to add support within this for sub-queries or derived tables? Thank you.

---

## [Curator 5.5 ERROR Singleton action failed due to empty index lis](https://discuss.elastic.co/t/curator-5-5-error-singleton-action-failed-due-to-empty-index-lis/145883)

<div class="topic-metadata">

**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\
**Replies:** 4\
**Last updated:** [August 24, 2018, 7:29pm UTC](https://discuss.elastic.co/t/curator-5-5-error-singleton-action-failed-due-to-empty-index-lis/145883 "2018-08-24T19:29:45Z")

</div>

Hi. I can not understand the operation in the curator 5.5 command line # curator\_cli --host kvm487 --port 9200 show\_indices --verbose .kibana open 50.4KB 10 1 1 2017-08-17T08:40:19Z excellenting ope…

---

## [Assistance with a query - used phone extensions](https://discuss.elastic.co/t/assistance-with-a-query-used-phone-extensions/145807)

<div class="topic-metadata">

**Author:** [@bthoon](https://discuss.elastic.co/u/bthoon)\
**Replies:** 2\
**Last updated:** [August 24, 2018, 6:27pm UTC](https://discuss.elastic.co/t/assistance-with-a-query-used-phone-extensions/145807 "2018-08-24T18:27:06Z")

</div>

We have an application that will send, every minute, the hook status of several dozen phone extensions. The data looks like this: { "mapping": { "\_doc": { "properties": { "date": { "type": "date", "format": "yyyy…

---

## [Script.painless.regex.enabled: true but ES log says it is not](https://discuss.elastic.co/t/script-painless-regex-enabled-true-but-es-log-says-it-is-not/145566)

<div class="topic-metadata">

**Author:** [@JimP](https://discuss.elastic.co/u/JimP)\
**Replies:** 2\
**Last updated:** [August 24, 2018, 6:24pm UTC](https://discuss.elastic.co/t/script-painless-regex-enabled-true-but-es-log-says-it-is-not/145566 "2018-08-24T18:24:17Z")

</div>

ES 5.6.3 elasticsearch.yml has script.painless.regex.enabled: true Caused by: java.lang.IllegalStateException: Regexes are disabled. Set \[script.painless.regex.enabled\] to \[true\] in elasticsearch.yaml to allow them. Be…

---

## [Primary shard is not active, timeout](https://discuss.elastic.co/t/primary-shard-is-not-active-timeout/144406)

<div class="topic-metadata">

**Author:** [@he11oworld](https://discuss.elastic.co/u/he11oworld)\
**Replies:** 4\
**Last updated:** [August 24, 2018, 5:48pm UTC](https://discuss.elastic.co/t/primary-shard-is-not-active-timeout/144406 "2018-08-24T17:48:37Z")

</div>

Getting this when I run elasticsearch in my minikube, Does anyone know a work around to this? Thanks.\< \[2018-08-14T21:00:34,338\]\[WARN \]\[o.e.x.m.MonitoringService\] \[es-master-5b4dd45bf8-vkjtj\] monitoring execution failed …

---

## [Adding a field analyzer to an existing field creates duplicate](https://discuss.elastic.co/t/adding-a-field-analyzer-to-an-existing-field-creates-duplicate/145950)

<div class="topic-metadata">

**Author:** [@rtpk](https://discuss.elastic.co/u/rtpk)\
**Replies:** 0\
**Last updated:** [August 24, 2018, 5:07pm UTC](https://discuss.elastic.co/t/adding-a-field-analyzer-to-an-existing-field-creates-duplicate/145950 "2018-08-24T17:07:29Z")

</div>

Hi everyone, So we just found out that the default analyzer that we are currently using for an index is not doing the job correctly for a specific field. I've looked into adding an analyzer for a specific field and got …

---

## [Searching numeric keyword in text string](https://discuss.elastic.co/t/searching-numeric-keyword-in-text-string/145668)

<div class="topic-metadata">

**Author:** [@Neha\_Gupta](https://discuss.elastic.co/u/Neha_Gupta)\
**Replies:** 1\
**Last updated:** [August 24, 2018, 4:39pm UTC](https://discuss.elastic.co/t/searching-numeric-keyword-in-text-string/145668 "2018-08-24T16:39:25Z")

</div>

Hi, Am trying to search on numeric or special character on text string, but its not able to search. I have created tokenizer something like below, when i analyze tokens i can see numeric or special character tokens as …

---

## [Automating RDFs indexing into Elasticsearch engine](https://discuss.elastic.co/t/automating-rdfs-indexing-into-elasticsearch-engine/145943)

<div class="topic-metadata">

**Author:** [@steam123](https://discuss.elastic.co/u/steam123)\
**Replies:** 0\
**Last updated:** [August 24, 2018, 4:32pm UTC](https://discuss.elastic.co/t/automating-rdfs-indexing-into-elasticsearch-engine/145943 "2018-08-24T16:32:44Z")

</div>

Hi All, I am looking for a best practice case to automate the indexing process of RDF files (ontologies) into Elasticsearch engine. Here is a scenario, A team prepares (responsible for) generating and maintaining RDF…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1567)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1569)
