# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1584

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1585

---

## [Failed to execute bulk item in ES](https://discuss.elastic.co/t/failed-to-execute-bulk-item-in-es/143898)

<div class="topic-metadata">

**Author:** [@cactus](https://discuss.elastic.co/u/cactus)\
**Replies:** 0\
**Last updated:** [August 10, 2018, 4:11pm UTC](https://discuss.elastic.co/t/failed-to-execute-bulk-item-in-es/143898 "2018-08-10T16:11:37Z")

</div>

Hello, Can someone explain what does it mean? We're using ES 5.6 and in ES logs I see a bunch of records like: \[2018-08-10T15:59:14,212\]\[DEBUG\]\[o.e.a.b.TransportShardBulkAction\] \[data-001\] \[logstash-2018.08.10\]\[0\] fa…

---

## [Different parent's type](https://discuss.elastic.co/t/different-parents-type/143892)

<div class="topic-metadata">

**Author:** [@Ekaterina\_Nekrasova](https://discuss.elastic.co/u/Ekaterina_Nekrasova)\
**Replies:** 0\
**Last updated:** [August 10, 2018, 3:28pm UTC](https://discuss.elastic.co/t/different-parents-type/143892 "2018-08-10T15:28:05Z")

</div>

Hello ! I use different parent's type for the same type: my mapping \> "claims" : { "mappings" : { "alert" : { "\_parent" : { "type" : "claim" }, "\_routing" : { "…

---

## [Why doesn't this document match?](https://discuss.elastic.co/t/why-doesnt-this-document-match/143583)

<div class="topic-metadata">

**Author:** [@Badger](https://discuss.elastic.co/u/Badger)\
**Replies:** 6\
**Last updated:** [August 10, 2018, 2:26pm UTC](https://discuss.elastic.co/t/why-doesnt-this-document-match/143583 "2018-08-10T14:26:37Z")

</div>

I create a document in 6.3.1 using output { elasticsearch { hosts =\> "localhost" index =\> "deleteme8" } } input { generator { count =\> 1 message =\> "Foo: 'UserID:xx0001'" } } If in Kibana I request "message: UserID" it…

---

## [Grant no permissions for assemble Visualizations](https://discuss.elastic.co/t/grant-no-permissions-for-assemble-visualizations/143505)

<div class="topic-metadata">

**Author:** [@LEK-LD](https://discuss.elastic.co/u/LEK-LD)\
**Replies:** 1\
**Last updated:** [August 10, 2018, 2:04pm UTC](https://discuss.elastic.co/t/grant-no-permissions-for-assemble-visualizations/143505 "2018-08-10T14:04:36Z")

</div>

Hello there, I installed X-Pack for security purposes in my Elastic Stack. I'm now trying to create a role which has read permissions on my data in Elasticsearch to see logs in the Discover and Dashboard section but can…

---

## [The number of clients in search operation](https://discuss.elastic.co/t/the-number-of-clients-in-search-operation/143255)

<div class="topic-metadata">

**Author:** [@rui\_dong](https://discuss.elastic.co/u/rui_dong)\
**Replies:** 9\
**Last updated:** [August 10, 2018, 1:38pm UTC](https://discuss.elastic.co/t/the-number-of-clients-in-search-operation/143255 "2018-08-10T13:38:55Z")

</div>

When I set the number of clients to 10, rally runs correctly, and when I set the client to 30: "schedule": \[ { "operation": { "name":"N clients randomly query 10,000 data", "operation-type": "search", "param-sou…

---

## [Can't import data after reaching a certain amount in storage capacity](https://discuss.elastic.co/t/cant-import-data-after-reaching-a-certain-amount-in-storage-capacity/143874)

<div class="topic-metadata">

**Author:** [@ganessen23](https://discuss.elastic.co/u/ganessen23)\
**Replies:** 1\
**Last updated:** [August 10, 2018, 1:34pm UTC](https://discuss.elastic.co/t/cant-import-data-after-reaching-a-certain-amount-in-storage-capacity/143874 "2018-08-10T13:34:59Z")

</div>

Hello guys, I am having an issue. My present scenario is that I have 2 indices in my Elasticsearch instance. index 1==\> Used to store logs (86 000 documents/lines) index 2 ==\> Used to store data from a SQL Server Dat…

---

## [Java client: unable to set highlighting encoder for a field](https://discuss.elastic.co/t/java-client-unable-to-set-highlighting-encoder-for-a-field/142783)

<div class="topic-metadata">

**Author:** [@Jean-Baptiste\_Nizet](https://discuss.elastic.co/u/Jean-Baptiste_Nizet)\
**Replies:** 2\
**Last updated:** [August 10, 2018, 1:03pm UTC](https://discuss.elastic.co/t/java-client-unable-to-set-highlighting-encoder-for-a-field/142783 "2018-08-10T13:03:39Z")

</div>

Hello. I'm trying to set the Highlighting encoder option to "html" instead of leaving the default for a specific field, and the Java API apparently has no way to do that (although the ElasticSearch reference documentati…

---

## [Term aggregations from union of nested list](https://discuss.elastic.co/t/term-aggregations-from-union-of-nested-list/143463)

<div class="topic-metadata">

**Author:** [@Csaba\_Peller](https://discuss.elastic.co/u/Csaba_Peller)\
**Replies:** 2\
**Last updated:** [August 10, 2018, 12:50pm UTC](https://discuss.elastic.co/t/term-aggregations-from-union-of-nested-list/143463 "2018-08-10T12:50:33Z")

</div>

Hi All, I would like to do a simple count aggregation from a distinct list of my union of two nested list. But I have no idea, how can i do this. This is my sample structure: "\_source": { "productId": 1, "materialM…

---

## [Adjacency matrix with between 2 nested fields](https://discuss.elastic.co/t/adjacency-matrix-with-between-2-nested-fields/143844)

<div class="topic-metadata">

**Author:** [@Mathieu\_Soyer](https://discuss.elastic.co/u/Mathieu_Soyer)\
**Replies:** 3\
**Last updated:** [August 10, 2018, 12:01pm UTC](https://discuss.elastic.co/t/adjacency-matrix-with-between-2-nested-fields/143844 "2018-08-10T12:01:14Z")

</div>

Hi all, A document looks like : { "name": "myname", "type": "mytype", "values": { "priority": "mypriority", "state": "\`mystate" } } My mapping : { "myindex": { "mappings": { "\_doc": { …

---

## [\[bool\] query does not support \[fiter\]](https://discuss.elastic.co/t/bool-query-does-not-support-fiter/143833)

<div class="topic-metadata">

**Author:** [@dingaimin](https://discuss.elastic.co/u/dingaimin)\
**Replies:** 3\
**Last updated:** [August 10, 2018, 11:07am UTC](https://discuss.elastic.co/t/bool-query-does-not-support-fiter/143833 "2018-08-10T11:07:58Z")

</div>

below is index mapping { "lm\_dsp\_data\_search\_funnel-2018.08.10": { "mappings": { "doc": { "properties": { "@timestamp": { "type": "date" }, "@version": { …

---

## [Query Result Value not in Script available with ctx.payload](https://discuss.elastic.co/t/query-result-value-not-in-script-available-with-ctx-payload/143157)

<div class="topic-metadata">

**Author:** [@djuentgen](https://discuss.elastic.co/u/djuentgen)\
**Replies:** 2\
**Last updated:** [August 10, 2018, 11:05am UTC](https://discuss.elastic.co/t/query-result-value-not-in-script-available-with-ctx-payload/143157 "2018-08-10T11:05:40Z")

</div>

Hi together, i'm not sure whether i am correct in this forum or not :slight\_smile: I am really new to elastic & kibana stuff and cant find a solution to what i'm trying. in the query section: i'am filtering the eventl…

---

## [Indexing multi language documents with langdetect](https://discuss.elastic.co/t/indexing-multi-language-documents-with-langdetect/143676)

<div class="topic-metadata">

**Author:** [@equi](https://discuss.elastic.co/u/equi)\
**Replies:** 0\
**Last updated:** [August 9, 2018, 10:37am UTC](https://discuss.elastic.co/t/indexing-multi-language-documents-with-langdetect/143676 "2018-08-09T10:37:58Z")

</div>

Suppose I want to index my email box. My emails all have "Body" section. The problem is that not all my emails are in the same language. E.g. first email might be in English (so it's "Body" field is in English), the seco…

---

## [Rest and RestHighLevelClient query differences](https://discuss.elastic.co/t/rest-and-resthighlevelclient-query-differences/143557)

<div class="topic-metadata">

**Author:** [@katre](https://discuss.elastic.co/u/katre)\
**Replies:** 3\
**Last updated:** [August 10, 2018, 10:26am UTC](https://discuss.elastic.co/t/rest-and-resthighlevelclient-query-differences/143557 "2018-08-10T10:26:46Z")

</div>

Hi, I have a case where same query via java api returns 0 hits and in kibana dev tools returns document. In java client: SearchRequest{searchType=QUERY\_THEN\_FETCH, indices=\[search-data\], indicesOptions=IndicesOptions\[i…

---

## [Elasticsearch delete\_by\_query version conflict](https://discuss.elastic.co/t/elasticsearch-delete-by-query-version-conflict/142492)

<div class="topic-metadata">

**Author:** [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Replies:** 2\
**Last updated:** [August 10, 2018, 10:07am UTC](https://discuss.elastic.co/t/elasticsearch-delete-by-query-version-conflict/142492 "2018-08-10T10:07:58Z")

</div>

Hi guys, My configuration is : Heap : 30GB core : 24 ES version : 6 We having approx 100cr data (3 months) in single index. We have field date which has format 'yyyymmdd' . Data is pushing in realtime manner it thi…

---

## [When can keyword field with doc values enabled consume fielddata cache?](https://discuss.elastic.co/t/when-can-keyword-field-with-doc-values-enabled-consume-fielddata-cache/127146)

<div class="topic-metadata">

**Author:** [@Ankit\_Malpani](https://discuss.elastic.co/u/Ankit_Malpani)\
**Replies:** 2\
**Last updated:** [August 10, 2018, 9:32am UTC](https://discuss.elastic.co/t/when-can-keyword-field-with-doc-values-enabled-consume-fielddata-cache/127146 "2018-08-10T09:32:05Z")

</div>

ES version - 6.2.3 Sometimes after running an aggregation query on a keyword field enabled with doc\_values, my fielddata cache is still being consumed which was unexpected for me. When can this happen? eg. here is a ma…

---

## [Talking nodes on same machine](https://discuss.elastic.co/t/talking-nodes-on-same-machine/143545)

<div class="topic-metadata">

**Author:** [@Giuseppe\_Merlo](https://discuss.elastic.co/u/Giuseppe_Merlo)\
**Replies:** 1\
**Last updated:** [August 10, 2018, 9:27am UTC](https://discuss.elastic.co/t/talking-nodes-on-same-machine/143545 "2018-08-10T09:27:26Z")

</div>

Hi everyone, i have to test my ElasticSearch behaviour when there are at least 2 nodes and they are in the same machine. I created 2 directories for having 2 elasticsearch.yml to configure (i don't know if this approac…

---

## [Poor performance and a lot of GC overhead](https://discuss.elastic.co/t/poor-performance-and-a-lot-of-gc-overhead/140145)

<div class="topic-metadata">

**Author:** [@dboss101](https://discuss.elastic.co/u/dboss101)\
**Replies:** 18\
**Last updated:** [August 10, 2018, 9:26am UTC](https://discuss.elastic.co/t/poor-performance-and-a-lot-of-gc-overhead/140145 "2018-08-10T09:26:15Z")

</div>

Hi, we are running elasticsearch with the following spec: 1 node on a hardware server 16GB of RAM 2GB assigned for heap 8 CPU cores (Intel Xeon CPU E5620 @ 2.40GHz) HDD disks Elasticsearch 5.6.3 JVM 1.8.0\_171 we…

---

## [FeatureCollection to geo\_shape](https://discuss.elastic.co/t/featurecollection-to-geo-shape/143334)

<div class="topic-metadata">

**Author:** [@yannick-cw](https://discuss.elastic.co/u/yannick-cw)\
**Replies:** 1\
**Last updated:** [August 10, 2018, 9:17am UTC](https://discuss.elastic.co/t/featurecollection-to-geo-shape/143334 "2018-08-10T09:17:51Z")

</div>

Whats the right way to translate a geojson FeatureCollection to a es geo\_shape? I have a FeatureCollection looking like this: { "type": "FeatureCollection", "features": \[ { "type": "Feature", "geomet…

---

## [Return array's elements as separate entities in result and sort them per whole query](https://discuss.elastic.co/t/return-arrays-elements-as-separate-entities-in-result-and-sort-them-per-whole-query/143835)

<div class="topic-metadata">

**Author:** [@maksym.zhokha](https://discuss.elastic.co/u/maksym.zhokha)\
**Replies:** 0\
**Last updated:** [August 10, 2018, 8:43am UTC](https://discuss.elastic.co/t/return-arrays-elements-as-separate-entities-in-result-and-sort-them-per-whole-query/143835 "2018-08-10T08:43:27Z")

</div>

Hi. I have next mapping for index documents: { "mappings": { "domain": { "properties": { "placementid": { "include\_in\_all": true, "type": "…

---

## [Nested Query Returns all Children, not just Children that Match](https://discuss.elastic.co/t/nested-query-returns-all-children-not-just-children-that-match/143218)

<div class="topic-metadata">

**Author:** [@FunkMonkey33](https://discuss.elastic.co/u/FunkMonkey33)\
**Replies:** 1\
**Last updated:** [August 10, 2018, 8:42am UTC](https://discuss.elastic.co/t/nested-query-returns-all-children-not-just-children-that-match/143218 "2018-08-10T08:42:50Z")

</div>

Hi, I'm very new to Elastic so please bear with me. I have an index with a nested type in it. Let's call it an Index of Person, each of which has an array of type Car. So one person can have many cars. A car has a m…

---

## [Script to compare dates](https://discuss.elastic.co/t/script-to-compare-dates/143550)

<div class="topic-metadata">

**Author:** [@Islam\_Elshobokshy](https://discuss.elastic.co/u/Islam_Elshobokshy)\
**Replies:** 4\
**Last updated:** [August 10, 2018, 7:08am UTC](https://discuss.elastic.co/t/script-to-compare-dates/143550 "2018-08-10T07:08:16Z")

</div>

I would like to compare an elastic search date with a format YYY-MM-DD HH:MM:SS as to compare the results of the past 30 days. So if the given date is equal to NOW()-30D it should give me the result wanted. I have tried …

---

## [Is there a way to deploy new watch (Alerting) w/o resetting action throttle](https://discuss.elastic.co/t/is-there-a-way-to-deploy-new-watch-alerting-w-o-resetting-action-throttle/143728)

<div class="topic-metadata">

**Author:** [@nielsoncr](https://discuss.elastic.co/u/nielsoncr)\
**Replies:** 1\
**Last updated:** [August 10, 2018, 7:16am UTC](https://discuss.elastic.co/t/is-there-a-way-to-deploy-new-watch-alerting-w-o-resetting-action-throttle/143728 "2018-08-10T07:16:44Z")

</div>

I'm using ELK + X-Pack Alerting 6.2.3. We deploy multiple watch definitions through an automated process whenever one of our watch definitions changes. This means watches whose actions are throttled are updated even th…

---

## [Can't get Type in Custom Plugin](https://discuss.elastic.co/t/cant-get-type-in-custom-plugin/143805)

<div class="topic-metadata">

**Author:** [@trantrungtruc05](https://discuss.elastic.co/u/trantrungtruc05)\
**Replies:** 1\
**Last updated:** [August 10, 2018, 7:16am UTC](https://discuss.elastic.co/t/cant-get-type-in-custom-plugin/143805 "2018-08-10T07:16:16Z")

</div>

I have writing plugin by Java Code below: public class BasicPlugin extends Plugin implements AnalysisPlugin { private final static Logger LOGGER = LogManager.getLogger(BasicPlugin.class); public BasicPlugin() {…

---

## [Authenticated webhook watcher integrations](https://discuss.elastic.co/t/authenticated-webhook-watcher-integrations/143578)

<div class="topic-metadata">

**Author:** [@kcphysics](https://discuss.elastic.co/u/kcphysics)\
**Replies:** 5\
**Last updated:** [August 10, 2018, 7:09am UTC](https://discuss.elastic.co/t/authenticated-webhook-watcher-integrations/143578 "2018-08-10T07:09:28Z")

</div>

I am trying to figure out a way to get a watcher webhook to authenticate with a Bearer Token style authentication, where a request with credentials is sent, a bearer token is received, and that bearer token can be used i…

---

## [Bulk Index task hangs](https://discuss.elastic.co/t/bulk-index-task-hangs/143794)

<div class="topic-metadata">

**Author:** [@daniel.b.sario](https://discuss.elastic.co/u/daniel.b.sario)\
**Replies:** 4\
**Last updated:** [August 10, 2018, 6:58am UTC](https://discuss.elastic.co/t/bulk-index-task-hangs/143794 "2018-08-10T06:58:52Z")

</div>

I did a bulk index task using java api. After a few successful bulk index requests, suddenly my indexer hangs. I checked the the status of index tasks using the task api of elasticsearch and I found that there are tasks …

---

## [Elastic cluster went to RED State](https://discuss.elastic.co/t/elastic-cluster-went-to-red-state/143206)

<div class="topic-metadata">

**Author:** [@sivap](https://discuss.elastic.co/u/sivap)\
**Replies:** 10\
**Last updated:** [August 10, 2018, 6:27am UTC](https://discuss.elastic.co/t/elastic-cluster-went-to-red-state/143206 "2018-08-10T06:27:06Z")

</div>

Hi Team, I have been running my elk stack in docker. I have activated 30 days free license. Suddenly my elastic cluster went to RED State. JVM Heap & Disk space is good. Please find the error message as below, \[2018…

---

## [Elasticsearch Optimization for Performance](https://discuss.elastic.co/t/elasticsearch-optimization-for-performance/143774)

<div class="topic-metadata">

**Author:** [@ferronrsmith](https://discuss.elastic.co/u/ferronrsmith)\
**Replies:** 1\
**Last updated:** [August 10, 2018, 6:17am UTC](https://discuss.elastic.co/t/elasticsearch-optimization-for-performance/143774 "2018-08-10T06:17:48Z")

</div>

\--- version: "3.4" services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch-oss:6.3.2 environment: - cluster.name=x-cloud - http.cors.enabled=true - http.cors.allow-origi…

---

## [How can I use SNAPSHOT version of elasticsearch-rest-high-level-client'](https://discuss.elastic.co/t/how-can-i-use-snapshot-version-of-elasticsearch-rest-high-level-client/142534)

<div class="topic-metadata">

**Author:** [@Tomoyuki\_Saito](https://discuss.elastic.co/u/Tomoyuki_Saito)\
**Replies:** 2\
**Last updated:** [August 10, 2018, 5:25am UTC](https://discuss.elastic.co/t/how-can-i-use-snapshot-version-of-elasticsearch-rest-high-level-client/142534 "2018-08-10T05:25:34Z")

</div>

How can I use SNAPSHOT version of org.elasticsearch.client:elasticsearch-rest-high-level-client? What SNAPSHOT versions are available? I used the maven repository https://snapshots.elastic.co/maven/ described in the fo…

---

## [Elastic search query containing '!' in regexp query doesnt match against any results](https://discuss.elastic.co/t/elastic-search-query-containing-in-regexp-query-doesnt-match-against-any-results/143799)

<div class="topic-metadata">

**Author:** [@nikitag](https://discuss.elastic.co/u/nikitag)\
**Replies:** 0\
**Last updated:** [August 10, 2018, 5:24am UTC](https://discuss.elastic.co/t/elastic-search-query-containing-in-regexp-query-doesnt-match-against-any-results/143799 "2018-08-10T05:24:17Z")

</div>

Elastic search below query doesn't return any results: 1.) {"query":{"regexp":{"field\_name":".\*f04((?!z).)\*"}} Why a query like above doesn't return any result? I'm expecting results like this : \['f00bar', 'f04bar',…

---

## [Versions of elasticsearch logstash kibana](https://discuss.elastic.co/t/versions-of-elasticsearch-logstash-kibana/140270)

<div class="topic-metadata">

**Author:** [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)\
**Replies:** 4\
**Last updated:** [August 10, 2018, 4:34am UTC](https://discuss.elastic.co/t/versions-of-elasticsearch-logstash-kibana/140270 "2018-08-10T04:34:53Z")

</div>

The latest version of elk is 6.3.1. But why are there alternate versions of 5 and 6 ? The version upgrades are as follows 6.3.1,5.6.10,6.2.4,5.6.9,6.2.3. Just to know, from which version did all these three products get …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1583)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1585)
