# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1594

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1595

---

## [Unable to connect data node on metal to master node on VM](https://discuss.elastic.co/t/unable-to-connect-data-node-on-metal-to-master-node-on-vm/142653)

<div class="topic-metadata">

**Author:** [@some\_dood](https://discuss.elastic.co/u/some_dood)\
**Replies:** 3\
**Last updated:** [August 2, 2018, 2:00pm UTC](https://discuss.elastic.co/t/unable-to-connect-data-node-on-metal-to-master-node-on-vm/142653 "2018-08-02T14:00:46Z")

</div>

I have a 5 node cluster, 3 masters on RHEL VM's and 2 data nodes on RHEL bare metal. The master nodes are able to connect to each other fine, and show a cluster status of green. The data nodes are able to connect but the…

---

## [Closed index error](https://discuss.elastic.co/t/closed-index-error/142557)

<div class="topic-metadata">

**Author:** [@rso249](https://discuss.elastic.co/u/rso249)\
**Replies:** 2\
**Last updated:** [August 2, 2018, 1:52pm UTC](https://discuss.elastic.co/t/closed-index-error/142557 "2018-08-02T13:52:33Z")

</div>

Dear all, latelly I get the following unexpected error: index\_closed\_exception. I dont really why... I recently have also added alias names to my indexes. Is that causing the problem? After I recreate the indexes I am al…

---

## [Structure for object history tracking](https://discuss.elastic.co/t/structure-for-object-history-tracking/142750)

<div class="topic-metadata">

**Author:** [@mikelt](https://discuss.elastic.co/u/mikelt)\
**Replies:** 1\
**Last updated:** [August 2, 2018, 1:21pm UTC](https://discuss.elastic.co/t/structure-for-object-history-tracking/142750 "2018-08-02T13:21:18Z")

</div>

hi guys, I'm totally new working with ES and I need your help with document's structure. We have ~100k objects (pc, laptops, servers, phones, iot etc.). Our celery workers crawl info about them from various sources (ip…

---

## [Elasticsearch-keystore](https://discuss.elastic.co/t/elasticsearch-keystore/142567)

<div class="topic-metadata">

**Author:** [@bigdamhero](https://discuss.elastic.co/u/bigdamhero)\
**Replies:** 6\
**Last updated:** [August 2, 2018, 12:52pm UTC](https://discuss.elastic.co/t/elasticsearch-keystore/142567 "2018-08-02T12:52:11Z")

</div>

I am not sure if this is the correct forum so please forgive me if not. I am trying to wrap my head around the elasticsearch keystore. I set up some settings, I removed some settings, I added a new setting which I foun…

---

## [The msearch request must be terminated by a newline](https://discuss.elastic.co/t/the-msearch-request-must-be-terminated-by-a-newline/142586)

<div class="topic-metadata">

**Author:** [@zwokaros](https://discuss.elastic.co/u/zwokaros)\
**Replies:** 3\
**Last updated:** [August 2, 2018, 12:49pm UTC](https://discuss.elastic.co/t/the-msearch-request-must-be-terminated-by-a-newline/142586 "2018-08-02T12:49:39Z")

</div>

Hello I've been stuck on this problem Basically I have a curl POST request that works when it's written directly on a terminal, but whenever I try to do it in a script, I get this error $data\_string = '{"index":\["trac…

---

## [What are differences between search\_after and range filter?](https://discuss.elastic.co/t/what-are-differences-between-search-after-and-range-filter/142224)

<div class="topic-metadata">

**Author:** [@porunov](https://discuss.elastic.co/u/porunov)\
**Replies:** 2\
**Last updated:** [August 2, 2018, 12:16pm UTC](https://discuss.elastic.co/t/what-are-differences-between-search-after-and-range-filter/142224 "2018-08-02T12:16:06Z")

</div>

Is there any differences in performance or traversal logic when we use search\_after or range filter? For example, this query: GET twitter/\_search { "size": 10, "query": { "range" : { "my\_id…

---

## [Trying to install ingest-geoip but java error](https://discuss.elastic.co/t/trying-to-install-ingest-geoip-but-java-error/141556)

<div class="topic-metadata">

**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\
**Replies:** 4\
**Last updated:** [August 2, 2018, 12:27pm UTC](https://discuss.elastic.co/t/trying-to-install-ingest-geoip-but-java-error/141556 "2018-08-02T12:27:03Z")

</div>

Hi. My Elastic node hung as I was installing the ingest-geoip plugin. Now when I try to run it again it comes up with the below error message. ingest-user-agent does the same. Is there anyway I can fix this up without…

---

## [Extremely slow writing to replicas](https://discuss.elastic.co/t/extremely-slow-writing-to-replicas/142254)

<div class="topic-metadata">

**Author:** [@sambodhi](https://discuss.elastic.co/u/sambodhi)\
**Replies:** 5\
**Last updated:** [August 2, 2018, 11:39am UTC](https://discuss.elastic.co/t/extremely-slow-writing-to-replicas/142254 "2018-08-02T11:39:45Z")

</div>

Hi, Cluster details: 7 node x r4.2xlarge (8 vCPU, 61 GB - 32 assigned to ES) on AWS I have 650 GiB volume per node so around 4.5 TB disk space. Index size: 1.7b documents / 1.8 TB / 28 Shards, 1 replica We had to som…

---

## [Question on how to create a simple ML job](https://discuss.elastic.co/t/question-on-how-to-create-a-simple-ml-job/142155)

<div class="topic-metadata">

**Author:** [@GioXmen](https://discuss.elastic.co/u/GioXmen)\
**Replies:** 11\
**Last updated:** [August 2, 2018, 12:18pm UTC](https://discuss.elastic.co/t/question-on-how-to-create-a-simple-ml-job/142155 "2018-08-02T12:18:55Z")

</div>

Hello! I am new to machine learning in elastic products, it was released here recently and we are on version 5.4 . I want to create a machine learning job, but I am not sure on how to do it. Sample data (obfuscated): …

---

## [Filter elements of a list using painless syntax](https://discuss.elastic.co/t/filter-elements-of-a-list-using-painless-syntax/142752)

<div class="topic-metadata">

**Author:** [@sahil\_sawhney](https://discuss.elastic.co/u/sahil_sawhney)\
**Replies:** 2\
**Last updated:** [August 2, 2018, 12:16pm UTC](https://discuss.elastic.co/t/filter-elements-of-a-list-using-painless-syntax/142752 "2018-08-02T12:16:58Z")

</div>

I need to filter a list and transform the payload. Using Elasticsearch 5.6 Example(Groovy) def list = \[1,2,3,4,5\] def result = list.findAll { it \> 2 } The result would be \[3,4,5\] This is showing syntax exception in …

---

## [Problem combining "copy\_to", "analyzer" and wildcard "query string" query](https://discuss.elastic.co/t/problem-combining-copy-to-analyzer-and-wildcard-query-string-query/141953)

<div class="topic-metadata">

**Author:** [@cherry-wave](https://discuss.elastic.co/u/cherry-wave)\
**Replies:** 7\
**Last updated:** [August 2, 2018, 7:05am UTC](https://discuss.elastic.co/t/problem-combining-copy-to-analyzer-and-wildcard-query-string-query/141953 "2018-08-02T07:05:32Z")

</div>

I have a bit of a weird problem here: I use es 5.6.4 I copy some fields via "copy\_to" mapping into a field named "search" I added a german analyzer to the field mapping of the search field I use a query string query li…

---

## [Mapping Grandparent elasticsearch 6](https://discuss.elastic.co/t/mapping-grandparent-elasticsearch-6/142221)

<div class="topic-metadata">

**Author:** [@Guillaume\_Abautret](https://discuss.elastic.co/u/Guillaume_Abautret)\
**Replies:** 1\
**Last updated:** [August 2, 2018, 11:41am UTC](https://discuss.elastic.co/t/mapping-grandparent-elasticsearch-6/142221 "2018-08-02T11:41:54Z")

</div>

Hi all, I need to map Grandparent-\>parent-\>child but I don't know how to do that. I only know how to define a parent child relationship with "join datatype" but that's all. Can you help me ? Thank you.

---

## [Data Transformation in elasticsearch](https://discuss.elastic.co/t/data-transformation-in-elasticsearch/142521)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 3\
**Last updated:** [August 2, 2018, 11:38am UTC](https://discuss.elastic.co/t/data-transformation-in-elasticsearch/142521 "2018-08-02T11:38:53Z")

</div>

Hi All, We have been pulling data from multiple data sources and storing it in elasticsearch. Basically we use http\_poller method in logstash to pull in all the details. The problem we are facing is, all the data are s…

---

## [ActionFilter in ActionPlugin not being applied for certain actions](https://discuss.elastic.co/t/actionfilter-in-actionplugin-not-being-applied-for-certain-actions/142524)

<div class="topic-metadata">

**Author:** [@martin-huber](https://discuss.elastic.co/u/martin-huber)\
**Replies:** 3\
**Last updated:** [August 2, 2018, 11:38am UTC](https://discuss.elastic.co/t/actionfilter-in-actionplugin-not-being-applied-for-certain-actions/142524 "2018-08-02T11:38:08Z")

</div>

Hi all, we are writing an Plugin that attempts to intercept every write to a Lucene index and retreive http-Headers in there and perform some operations then ... We therefore implemented an ActionPlugin and registered …

---

## [Parallelism Per Request](https://discuss.elastic.co/t/parallelism-per-request/142214)

<div class="topic-metadata">

**Author:** [@User12345](https://discuss.elastic.co/u/User12345)\
**Replies:** 1\
**Last updated:** [August 2, 2018, 11:29am UTC](https://discuss.elastic.co/t/parallelism-per-request/142214 "2018-08-02T11:29:49Z")

</div>

So I’m running Elasticsearch on a single 72 core server. I’ve created a very large 72 shard index, and would like to run searches that leverage all 72 cores. However, when I run a search request, according to the /\_cat…

---

## [Rally fails to untar elastic search](https://discuss.elastic.co/t/rally-fails-to-untar-elastic-search/142711)

<div class="topic-metadata">

**Author:** [@Suraj\_NR](https://discuss.elastic.co/u/Suraj_NR)\
**Replies:** 1\
**Last updated:** [August 2, 2018, 11:24am UTC](https://discuss.elastic.co/t/rally-fails-to-untar-elastic-search/142711 "2018-08-02T11:24:30Z")

</div>

Rally fails to untar Elastic search ES version - 1.7.3 esrally 1.0.0 Checking connectivity... done. \[INFO\] Preparing for race ... \[INFO\] Downloading Elasticsearch 1.7.3 (27.2 MB total size) \[…

---

## [Mixed exact and normal search](https://discuss.elastic.co/t/mixed-exact-and-normal-search/142239)

<div class="topic-metadata">

**Author:** [@0Steve0](https://discuss.elastic.co/u/0Steve0)\
**Replies:** 1\
**Last updated:** [August 2, 2018, 11:24am UTC](https://discuss.elastic.co/t/mixed-exact-and-normal-search/142239 "2018-08-02T11:24:12Z")

</div>

It is clear to know that index both ways (Analyzed and not-Analyzed) could help achieve exact search and normal search on the same content. Show in the official reference: https://www.elastic.co/guide/en/elasticsearch/r…

---

## [Elasticsearch update script is not working](https://discuss.elastic.co/t/elasticsearch-update-script-is-not-working/142319)

<div class="topic-metadata">

**Author:** [@vijay\_kumar\_Ks](https://discuss.elastic.co/u/vijay_kumar_Ks)\
**Replies:** 1\
**Last updated:** [August 2, 2018, 11:19am UTC](https://discuss.elastic.co/t/elasticsearch-update-script-is-not-working/142319 "2018-08-02T11:19:30Z")

</div>

As mentioned in https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-update.html above link tried updating a document in elasticsearch Version: 5.1.2 request tried: URL: http://localhost:9200/idx001/s…

---

## [How to insert geo\_type in bulk insert?](https://discuss.elastic.co/t/how-to-insert-geo-type-in-bulk-insert/142385)

<div class="topic-metadata">

**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\
**Replies:** 1\
**Last updated:** [August 2, 2018, 11:10am UTC](https://discuss.elastic.co/t/how-to-insert-geo-type-in-bulk-insert/142385 "2018-08-02T11:10:09Z")

</div>

I'd like to insert geo coordinates for Region Map and Coordinate Map. How the Json line should look like (bulk insert). I have below example but type is recognized as float { "index" : { "\_index" : "sale", "\_type" : "d…

---

## [Startup with all indices closed?](https://discuss.elastic.co/t/startup-with-all-indices-closed/142528)

<div class="topic-metadata">

**Author:** [@martin-huber](https://discuss.elastic.co/u/martin-huber)\
**Replies:** 3\
**Last updated:** [August 2, 2018, 11:07am UTC](https://discuss.elastic.co/t/startup-with-all-indices-closed/142528 "2018-08-02T11:07:00Z")

</div>

Hi all, is there a configuration option to start a cluster with all indices closed ? And if not, is there a way to write a Plugin that closes "\_all" on shutdown AND to be sure alos on startup ? Thanks! Martin

---

## [Index Mapping - Sub-field mapped instead of root field](https://discuss.elastic.co/t/index-mapping-sub-field-mapped-instead-of-root-field/142745)

<div class="topic-metadata">

**Author:** [@inversion](https://discuss.elastic.co/u/inversion)\
**Replies:** 0\
**Last updated:** [August 2, 2018, 10:46am UTC](https://discuss.elastic.co/t/index-mapping-sub-field-mapped-instead-of-root-field/142745 "2018-08-02T10:46:11Z")

</div>

My index mapping specifies "subjects": { "type": "keyword" }, Normally, when I add a document with the subjects field, it works perfectly. However, if I add a document like this.…

---

## [UpdateByQueryRequestBuilder unit test](https://discuss.elastic.co/t/updatebyqueryrequestbuilder-unit-test/142716)

<div class="topic-metadata">

**Author:** [@dondon](https://discuss.elastic.co/u/dondon)\
**Replies:** 4\
**Last updated:** [August 2, 2018, 10:29am UTC](https://discuss.elastic.co/t/updatebyqueryrequestbuilder-unit-test/142716 "2018-08-02T10:29:02Z")

</div>

Hello, i need some help to working with unit test. I want to create unit test to update data using UpdateByQueryRequestBuilder But i always got an error like these java.lang.NullPointerException at org.elasticsear…

---

## [API calls from within Plugin](https://discuss.elastic.co/t/api-calls-from-within-plugin/142527)

<div class="topic-metadata">

**Author:** [@martin-huber](https://discuss.elastic.co/u/martin-huber)\
**Replies:** 2\
**Last updated:** [August 2, 2018, 9:54am UTC](https://discuss.elastic.co/t/api-calls-from-within-plugin/142527 "2018-08-02T09:54:42Z")

</div>

Hi all, we want to write a Plugin that needs to be able to perform certain operations, that wouldn't be a problem over the API. But I have the feeling, that it is not a good idea, to do a REST call from within a Plugin,…

---

## [Finding gaps in timestamps in documents](https://discuss.elastic.co/t/finding-gaps-in-timestamps-in-documents/142738)

<div class="topic-metadata">

**Author:** [@cohenran](https://discuss.elastic.co/u/cohenran)\
**Replies:** 0\
**Last updated:** [August 2, 2018, 9:53am UTC](https://discuss.elastic.co/t/finding-gaps-in-timestamps-in-documents/142738 "2018-08-02T09:53:52Z")

</div>

I have documents with different timestamps. How can I find out if there are 2 consecutive timestamps with more 10 seconds apart? If I have the timestamps: timestamp1: 1533130500544 timestamp2: 1533130509544 timestamp…

---

## [Need multiple group by and sum of one filed](https://discuss.elastic.co/t/need-multiple-group-by-and-sum-of-one-filed/142537)

<div class="topic-metadata">

**Author:** [@Dilip\_Kumar](https://discuss.elastic.co/u/Dilip_Kumar)\
**Replies:** 2\
**Last updated:** [August 2, 2018, 9:49am UTC](https://discuss.elastic.co/t/need-multiple-group-by-and-sum-of-one-filed/142537 "2018-08-02T09:49:07Z")

</div>

Hi i have write query according to this mysql query.. please suggest :slight\_smile=\> select t.operator\_time,t.name\_country,t.name\_operator,t.name\_ads\_publisher,t.name\_campaign,SUM(t.campaign\_price),t.currency\_code AS …

---

## [Facing exception java.lang.ArrayIndexOutOfBoundsException: 51966 while deploying ear file](https://discuss.elastic.co/t/facing-exception-java-lang-arrayindexoutofboundsexception-51966-while-deploying-ear-file/142498)

<div class="topic-metadata">

**Author:** [@ksupriya](https://discuss.elastic.co/u/ksupriya)\
**Replies:** 1\
**Last updated:** [August 2, 2018, 9:46am UTC](https://discuss.elastic.co/t/facing-exception-java-lang-arrayindexoutofboundsexception-51966-while-deploying-ear-file/142498 "2018-08-02T09:46:31Z")

</div>

Hii all, i am very new to elasticsearch and i don't know much about this but what my need is i am trying to deploy docdoku-server-ear.ear in my glassfish server then i am getting following error, i am not able to findout…

---

## [Scroll api：How to understand “Keeping the search context alive”？](https://discuss.elastic.co/t/scroll-api-how-to-understand-keeping-the-search-context-alive/142051)

<div class="topic-metadata">

**Author:** [@xyx](https://discuss.elastic.co/u/xyx)\
**Replies:** 4\
**Last updated:** [August 2, 2018, 9:33am UTC](https://discuss.elastic.co/t/scroll-api-how-to-understand-keeping-the-search-context-alive/142051 "2018-08-02T09:33:59Z")

</div>

scroll api：How to understand “Keeping the search context alive”？

---

## [Query on search\_after](https://discuss.elastic.co/t/query-on-search-after/142707)

<div class="topic-metadata">

**Author:** [@sanjeebkdeka](https://discuss.elastic.co/u/sanjeebkdeka)\
**Replies:** 1\
**Last updated:** [August 2, 2018, 9:00am UTC](https://discuss.elastic.co/t/query-on-search-after/142707 "2018-08-02T09:00:11Z")

</div>

Hi, One of the column in my database has value of ascending order of time(basically session, so multiple documents belonging to that session have same value ). I have a requirement of deep scrolling\[matches could be i…

---

## [Is ES6.3 disabled static script file?](https://discuss.elastic.co/t/is-es6-3-disabled-static-script-file/142718)

<div class="topic-metadata">

**Author:** [@ccHunter](https://discuss.elastic.co/u/ccHunter)\
**Replies:** 1\
**Last updated:** [August 2, 2018, 8:55am UTC](https://discuss.elastic.co/t/is-es6-3-disabled-static-script-file/142718 "2018-08-02T08:55:46Z")

</div>

I'm using elasticsearch script based sort, In es 2.0 I write the script in a file, In ES6.3 Now I have used, I haven't found the directory where I can put my script file in. Can I still use script file for ES6.3 ?

---

## [Encrypt Translog or completely disable it?](https://discuss.elastic.co/t/encrypt-translog-or-completely-disable-it/142533)

<div class="topic-metadata">

**Author:** [@nukarak](https://discuss.elastic.co/u/nukarak)\
**Replies:** 5\
**Last updated:** [August 2, 2018, 8:03am UTC](https://discuss.elastic.co/t/encrypt-translog-or-completely-disable-it/142533 "2018-08-02T08:03:41Z")

</div>

Hi all, is there a possibility to disable the Translog ? I guess that not. And if we would like to encrypt the Translog, how could we proceed ? In an earlier version of ES, the Translog was using a TransLog - store th…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1593)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1595)
