# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1599

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1600

---

## [Kibana setting of elasricsearch cluster](https://discuss.elastic.co/t/kibana-setting-of-elasricsearch-cluster/142137)

<div class="topic-metadata">

**Author:** [@peterch](https://discuss.elastic.co/u/peterch)\
**Replies:** 2\
**Last updated:** [July 30, 2018, 9:37am UTC](https://discuss.elastic.co/t/kibana-setting-of-elasricsearch-cluster/142137 "2018-07-30T09:37:40Z")

</div>

Hi All, I'm new for elastic. If I built a elasricsearch cluster which have one master node and one data node, the kibana should point to which node? is it master node? Thanks Best Regards,

---

## [How to solve java.lang.NoSuchFieldError: LUCENE\_5\_2\_1](https://discuss.elastic.co/t/how-to-solve-java-lang-nosuchfielderror-lucene-5-2-1/142076)

<div class="topic-metadata">

**Author:** [@PinkBoxerZ](https://discuss.elastic.co/u/PinkBoxerZ)\
**Replies:** 6\
**Last updated:** [July 30, 2018, 8:31am UTC](https://discuss.elastic.co/t/how-to-solve-java-lang-nosuchfielderror-lucene-5-2-1/142076 "2018-07-30T08:31:20Z")

</div>

So I'm running elasticsearch 6.3.1 under a maven project with no other dependencies than \<dependency\> \<groupId\>org.elasticsearch.client\</groupId\> \<artifactId\>transport\</artifactId\> \<version\>6.3.1\</ver…

---

## [Unassigned shards on ES 2.4.4](https://discuss.elastic.co/t/unassigned-shards-on-es-2-4-4/141927)

<div class="topic-metadata">

**Author:** [@Jordi\_Cabre](https://discuss.elastic.co/u/Jordi_Cabre)\
**Replies:** 7\
**Last updated:** [July 30, 2018, 8:15am UTC](https://discuss.elastic.co/t/unassigned-shards-on-es-2-4-4/141927 "2018-07-30T08:15:50Z")

</div>

I'm using an ES 2.4.4. Currently, I'm getting this content response at \_cluster/health?level=nodes { "cluster\_name":"logging-es", "status":"red", "timed\_out":false, "number\_of\_nodes":1, "number\_of\_data\_n…

---

## [How to find euclidean distance for double array data using query in elasticsearch](https://discuss.elastic.co/t/how-to-find-euclidean-distance-for-double-array-data-using-query-in-elasticsearch/142098)

<div class="topic-metadata">

**Author:** [@Rohit\_Roy](https://discuss.elastic.co/u/Rohit_Roy)\
**Replies:** 0\
**Last updated:** [July 30, 2018, 6:20am UTC](https://discuss.elastic.co/t/how-to-find-euclidean-distance-for-double-array-data-using-query-in-elasticsearch/142098 "2018-07-30T06:20:19Z")

</div>

If I have a double array data then, how should I store the data; in different columns or in same column/array? So that I am able to perform maximum operations on the data.

---

## [License Problem](https://discuss.elastic.co/t/license-problem/142018)

<div class="topic-metadata">

**Author:** [@xdholy](https://discuss.elastic.co/u/xdholy)\
**Replies:** 7\
**Last updated:** [July 30, 2018, 7:12am UTC](https://discuss.elastic.co/t/license-problem/142018 "2018-07-30T07:12:16Z")

</div>

Hi, I'm a little confused about the basic/trial license. After 6.3.0 was released, I reinstalled all my Elastic Stack to 6.3.0. I thought, since x-pack was open sourced, the features like security and monitoring will n…

---

## [Could not able to take the snapshot](https://discuss.elastic.co/t/could-not-able-to-take-the-snapshot/141625)

<div class="topic-metadata">

**Author:** [@naresh\_career399](https://discuss.elastic.co/u/naresh_career399)\
**Replies:** 4\
**Last updated:** [July 30, 2018, 7:04am UTC](https://discuss.elastic.co/t/could-not-able-to-take-the-snapshot/141625 "2018-07-30T07:04:52Z")

</div>

{"error":{"root\_cause":\[{"type":"repository\_verification\_exception","reason":"\[logs\_backup\] \[gJSWaV3wROeSjpuYh23AFw, 'RemoteTransportException\[\[node-3\]\[server3:9300\]\[internal:admin/repository/verify\]\]; nested: Repository…

---

## [Range aggregation query inside each range aggregation](https://discuss.elastic.co/t/range-aggregation-query-inside-each-range-aggregation/140653)

<div class="topic-metadata">

**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\
**Replies:** 3\
**Last updated:** [July 30, 2018, 5:44am UTC](https://discuss.elastic.co/t/range-aggregation-query-inside-each-range-aggregation/140653 "2018-07-30T05:44:59Z")

</div>

Hi All, I have a requirement like, I need to get the documents count for two fields based on the given ranges. Like, first field having ranges like 0-50,51-100 and second field having ranges like 0-500,501-1000. Now, as…

---

## [Is my date field being parsed as a text field?](https://discuss.elastic.co/t/is-my-date-field-being-parsed-as-a-text-field/142073)

<div class="topic-metadata">

**Author:** [@Ormesome](https://discuss.elastic.co/u/Ormesome)\
**Replies:** 2\
**Last updated:** [July 30, 2018, 4:54am UTC](https://discuss.elastic.co/t/is-my-date-field-being-parsed-as-a-text-field/142073 "2018-07-30T04:54:58Z")

</div>

I've pushed a lot of data into an index (I admit, poorly named) with a field that looks like this: "creationdate": "2016-05-24 09:31:09.0600000" When I search for it as a date I get zero results: GET /documents/\_searc…

---

## [ELK 6.3.1 - how to delete \_cluster/settings](https://discuss.elastic.co/t/elk-6-3-1-how-to-delete-cluster-settings/141795)

<div class="topic-metadata">

**Author:** [@Harshad\_Velapure](https://discuss.elastic.co/u/Harshad_Velapure)\
**Replies:** 8\
**Last updated:** [July 29, 2018, 8:23pm UTC](https://discuss.elastic.co/t/elk-6-3-1-how-to-delete-cluster-settings/141795 "2018-07-29T20:23:43Z")

</div>

Hello, I am facing issue with updating cluster settings in ES 6.3.1 I tried below command PUT \_cluster/settings { "transient": { "cluster.routing.allocation.disk.watermark.low": "100gb", "cluster.routing.allocatio…

---

## [Save json file to elasticsearch using spark?](https://discuss.elastic.co/t/save-json-file-to-elasticsearch-using-spark/141168)

<div class="topic-metadata">

**Author:** [@Aymen\_Rahal](https://discuss.elastic.co/u/Aymen_Rahal)\
**Replies:** 2\
**Last updated:** [July 29, 2018, 8:20pm UTC](https://discuss.elastic.co/t/save-json-file-to-elasticsearch-using-spark/141168 "2018-07-29T20:20:02Z")

</div>

I am trying to save a json file to Elasticsearch, I am getting this error (Exception in thread "main" java.lang.AbstractMethodError) I am using "spark 2.3.0" and "scala 2.11.6" please find the code Below: // import org…

---

## [Elastic does not see the difference between phrases in search](https://discuss.elastic.co/t/elastic-does-not-see-the-difference-between-phrases-in-search/142032)

<div class="topic-metadata">

**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\
**Replies:** 11\
**Last updated:** [July 29, 2018, 6:19pm UTC](https://discuss.elastic.co/t/elastic-does-not-see-the-difference-between-phrases-in-search/142032 "2018-07-29T18:19:49Z")

</div>

I search for "akg b 6200" and it returns record with "ghj b 7876", "nma b987"... and so on. Searching engine works in this product?

---

## [Driver for Python with TCP](https://discuss.elastic.co/t/driver-for-python-with-tcp/141964)

<div class="topic-metadata">

**Author:** [@iam.Carrot](https://discuss.elastic.co/u/iam.Carrot)\
**Replies:** 1\
**Last updated:** [July 29, 2018, 2:45pm UTC](https://discuss.elastic.co/t/driver-for-python-with-tcp/141964 "2018-07-29T14:45:26Z")

</div>

Hi I am working with the python driver for elasticsearch. according to the docs here And it uses http with port 9200 to connect and work with elastic for the queries. Is there a way I can use TCP 9300 using the python…

---

## [Elasticsearch version conflict Issue](https://discuss.elastic.co/t/elasticsearch-version-conflict-issue/142069)

<div class="topic-metadata">

**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\
**Replies:** 0\
**Last updated:** [July 29, 2018, 1:45pm UTC](https://discuss.elastic.co/t/elasticsearch-version-conflict-issue/142069 "2018-07-29T13:45:47Z")

</div>

I have updated document in the elastic search. after update using, I am fetching the same document by using their ID. It is giving me the following response: { "\_index": "b123456", "\_type": "documents", "\_id": "bltde56d…

---

## [Cluster is healthy but prints "No known master node, scheduling a retry after detected\_master."](https://discuss.elastic.co/t/cluster-is-healthy-but-prints-no-known-master-node-scheduling-a-retry-after-detected-master/142068)

<div class="topic-metadata">

**Author:** [@dvirp](https://discuss.elastic.co/u/dvirp)\
**Replies:** 0\
**Last updated:** [July 29, 2018, 12:41pm UTC](https://discuss.elastic.co/t/cluster-is-healthy-but-prints-no-known-master-node-scheduling-a-retry-after-detected-master/142068 "2018-07-29T12:41:36Z")

</div>

Hey everyone! We are running Elasticsearch 5.5.3, with architecture of 3 master and 2 data nodes. I have upgrade the kernel from 4.9.62-21.56 to 4.14.55-62.37 running on amazon Linux 2018.03. After rebooting the ec2 i…

---

## [Trying to import MongoDB documents as separate types in elasticsearch](https://discuss.elastic.co/t/trying-to-import-mongodb-documents-as-separate-types-in-elasticsearch/142034)

<div class="topic-metadata">

**Author:** [@committer](https://discuss.elastic.co/u/committer)\
**Replies:** 2\
**Last updated:** [July 29, 2018, 12:04pm UTC](https://discuss.elastic.co/t/trying-to-import-mongodb-documents-as-separate-types-in-elasticsearch/142034 "2018-07-29T12:04:01Z")

</div>

If there's anybody who can point me in the right direction, that would be greatly appreciated :slightly\_smiling\_face: I'm able to import a collection from MongoDB to elasticsearch, with the following transform\_file.js c…

---

## [Unassigned shards after upgrade due to different \_all values](https://discuss.elastic.co/t/unassigned-shards-after-upgrade-due-to-different-all-values/142057)

<div class="topic-metadata">

**Author:** [@matejzero](https://discuss.elastic.co/u/matejzero)\
**Replies:** 1\
**Last updated:** [July 29, 2018, 11:14am UTC](https://discuss.elastic.co/t/unassigned-shards-after-upgrade-due-to-different-all-values/142057 "2018-07-29T11:14:28Z")

</div>

I upgraded elasticsearch from 5.6 to 6.3 today and 4 shards stayed in unassigned state (it's replicas that is). Looking at the reasons, it looks like it bugs him that I have different settings for \_all fields in differ…

---

## [How are buckets stored within shard?](https://discuss.elastic.co/t/how-are-buckets-stored-within-shard/142061)

<div class="topic-metadata">

**Author:** [@Jose\_Ramierez](https://discuss.elastic.co/u/Jose_Ramierez)\
**Replies:** 0\
**Last updated:** [July 29, 2018, 10:28am UTC](https://discuss.elastic.co/t/how-are-buckets-stored-within-shard/142061 "2018-07-29T10:28:41Z")

</div>

We are looking to use buckets as our "primary key" (e.g. to keep all documents for a given account together, in one shard). As a single shard will probably have a million or more documents, spanning 50-500 accounts, we …

---

## [Questions on elasticsearch cluster data backup & restore](https://discuss.elastic.co/t/questions-on-elasticsearch-cluster-data-backup-restore/142035)

<div class="topic-metadata">

**Author:** [@ahrtr](https://discuss.elastic.co/u/ahrtr)\
**Replies:** 6\
**Last updated:** [July 29, 2018, 10:03am UTC](https://discuss.elastic.co/t/questions-on-elasticsearch-cluster-data-backup-restore/142035 "2018-07-29T10:03:36Z")

</div>

I have a couple of questions as below on cluster data backup & restore, thanks. There are 3 nodes in the cluster, is it OK to use whichever node to execute the backup command as below? PUT \_snapshot/my\_backup/snapsho…

---

## [Mapping multiple keys to the same name](https://discuss.elastic.co/t/mapping-multiple-keys-to-the-same-name/141572)

<div class="topic-metadata">

**Author:** [@leeleviWib](https://discuss.elastic.co/u/leeleviWib)\
**Replies:** 2\
**Last updated:** [July 29, 2018, 7:53am UTC](https://discuss.elastic.co/t/mapping-multiple-keys-to-the-same-name/141572 "2018-07-29T07:53:50Z")

</div>

Hi! We are looking to save a object in key value structure in the elastic and we encounter mapping issues. are keys are generated dynamic and we would like them to only be saved once in the mapping to avoid mapping exp…

---

## [Elasticsearch Service Fails to Load - KeyRing Errors](https://discuss.elastic.co/t/elasticsearch-service-fails-to-load-keyring-errors/142055)

<div class="topic-metadata">

**Author:** [@ahaw021](https://discuss.elastic.co/u/ahaw021)\
**Replies:** 0\
**Last updated:** [July 29, 2018, 5:16am UTC](https://discuss.elastic.co/t/elasticsearch-service-fails-to-load-keyring-errors/142055 "2018-07-29T05:16:59Z")

</div>

Hi All Haven't had much luck with this. When starting Elasticsearch using Systemd i get the following errors: Tail of Systemd Logs: Jul 29 04:50:22 vps systemd\[1\]: Started Elasticsearch. Jul 29 04:50:22 vps systemd\[5…

---

## [Difference in disk.indices and disk.used](https://discuss.elastic.co/t/difference-in-disk-indices-and-disk-used/142047)

<div class="topic-metadata">

**Author:** [@light94](https://discuss.elastic.co/u/light94)\
**Replies:** 0\
**Last updated:** [July 28, 2018, 9:37pm UTC](https://discuss.elastic.co/t/difference-in-disk-indices-and-disk-used/142047 "2018-07-28T21:37:22Z")

</div>

Hi, This post is a follow-up to Difference between disk.indices vs disk.used in cat allocation. I have a node where disk.indices is 4 .1 gb but disk.used is 50 gb. As per the linked post, if ES is only using 4.1 gb, wha…

---

## [Docs: nofile or nproc?](https://discuss.elastic.co/t/docs-nofile-or-nproc/142049)

<div class="topic-metadata">

**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\
**Replies:** 2\
**Last updated:** [July 29, 2018, 12:35am UTC](https://discuss.elastic.co/t/docs-nofile-or-nproc/142049 "2018-07-29T00:35:47Z")

</div>

On this thread @jasontedor pointed that the user wants "nproc" instead of "nofile", but the documentation says "nofile", here Configuring system settings | Elasticsearch Guide \[master\] | Elastic

---

## [Setting ignore\_malformed via logstash?](https://discuss.elastic.co/t/setting-ignore-malformed-via-logstash/142045)

<div class="topic-metadata">

**Author:** [@alex3](https://discuss.elastic.co/u/alex3)\
**Replies:** 0\
**Last updated:** [July 28, 2018, 6:05pm UTC](https://discuss.elastic.co/t/setting-ignore-malformed-via-logstash/142045 "2018-07-28T18:05:41Z")

</div>

Is there a way I can set ingnore\_malformed to true for each index somehow in the elastic search output plugin? If not, is there a way to set ignore\_malformed to be true on default? Thanks!

---

## [Message Created Twice in Elasticsearch via Logstash](https://discuss.elastic.co/t/message-created-twice-in-elasticsearch-via-logstash/142020)

<div class="topic-metadata">

**Author:** [@stevetso](https://discuss.elastic.co/u/stevetso)\
**Replies:** 7\
**Last updated:** [July 28, 2018, 5:03pm UTC](https://discuss.elastic.co/t/message-created-twice-in-elasticsearch-via-logstash/142020 "2018-07-28T17:03:22Z")

</div>

When I ingest document via logstash, I found the documents are created twice. Setup: Filebeat -\> Logstash -\> Elasticsearch Result: Same messages are ingested into Elasticsearch with different \_id So I tried the foll…

---

## [Refuse to discovery a new node](https://discuss.elastic.co/t/refuse-to-discovery-a-new-node/142027)

<div class="topic-metadata">

**Author:** [@Emilia\_N](https://discuss.elastic.co/u/Emilia_N)\
**Replies:** 3\
**Last updated:** [July 28, 2018, 12:44pm UTC](https://discuss.elastic.co/t/refuse-to-discovery-a-new-node/142027 "2018-07-28T12:44:13Z")

</div>

Hi Using discovery.zen.ping.unicast.hosts: \["host1", "host2"\], I connect two nodes of Elasticsearch, but I want that the nodes ("host1" and "host2") refuse a new node ("host3") if the node doesn't exist in their list (i…

---

## [Format for saving sudo logs in elastic](https://discuss.elastic.co/t/format-for-saving-sudo-logs-in-elastic/139648)

<div class="topic-metadata">

**Author:** [@yellolion](https://discuss.elastic.co/u/yellolion)\
**Replies:** 2\
**Last updated:** [July 28, 2018, 12:41pm UTC](https://discuss.elastic.co/t/format-for-saving-sudo-logs-in-elastic/139648 "2018-07-28T12:41:14Z")

</div>

We want to store all the sudo io log files in elastic. We are defining the schema for it but not sure how the data from TTYIN, TTYOUT, STDIN, STDOUT , STDERR can be stored for each session. we are thinking each of these …

---

## [Change number\_of\_replicas to 0 on existing indices](https://discuss.elastic.co/t/change-number-of-replicas-to-0-on-existing-indices/141622)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 14\
**Last updated:** [July 28, 2018, 12:08pm UTC](https://discuss.elastic.co/t/change-number-of-replicas-to-0-on-existing-indices/141622 "2018-07-28T12:08:23Z")

</div>

I am trying to set number\_of\_replicas to 0 in all indices with: PUT /\_settings { "index" : { "number\_of\_replicas":0 } } but after that it doesnt change any index number\_of\_replicas to 0 and still are 1 get \_setti…

---

## [Javascript Query builder](https://discuss.elastic.co/t/javascript-query-builder/141642)

<div class="topic-metadata">

**Author:** [@saravana\_kumar1](https://discuss.elastic.co/u/saravana_kumar1)\
**Replies:** 3\
**Last updated:** [July 28, 2018, 11:44am UTC](https://discuss.elastic.co/t/javascript-query-builder/141642 "2018-07-28T11:44:26Z")

</div>

Hi All, Is there any Official Query builder or REST Client for javascript for elasticsearch. In java - https://www.elastic.co/guide/en/elasticsearch/client/java-api/current/index.html It is very useful. I am expecting…

---

## [Get sum of doc\_count values in aggregation](https://discuss.elastic.co/t/get-sum-of-doc-count-values-in-aggregation/142022)

<div class="topic-metadata">

**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\
**Replies:** 1\
**Last updated:** [July 28, 2018, 10:25am UTC](https://discuss.elastic.co/t/get-sum-of-doc-count-values-in-aggregation/142022 "2018-07-28T10:25:15Z")

</div>

I'd like to get the total number of doc\_count values for an aggregation. At the moment, I have: { "size": 0, "query":{ "function\_score":{ "query":{ "bool":{ "fi…

---

## [Elasticsearch High Rest Client](https://discuss.elastic.co/t/elasticsearch-high-rest-client/141773)

<div class="topic-metadata">

**Author:** [@chandra0651](https://discuss.elastic.co/u/chandra0651)\
**Replies:** 3\
**Last updated:** [July 28, 2018, 9:27am UTC](https://discuss.elastic.co/t/elasticsearch-high-rest-client/141773 "2018-07-28T09:27:53Z")

</div>

I am new to writing the Client for ES , some how i was able to figure out to write basic client in java, can some one help me out how to pass credentials and self signed certificates private static class RestHighLevelCl…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1598)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1600)
