# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1616 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1617 --- ## [Elasticsearch failed to restart](https://discuss.elastic.co/t/elasticsearch-failed-to-restart/139949)
**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\ **Replies:** 35\ **Last updated:** [July 16, 2018, 3:00pm UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-restart/139949 "2018-07-16T15:00:09Z")
Hi, Please, I need help with this !! \[root@frghcslnetv12 elasticsearch\]# systemctl restart elasticsearch.service Job for elasticsearch.service failed because the control process exited with error code. See "systemctl s… --- ## [Restore snapshot across cluster](https://discuss.elastic.co/t/restore-snapshot-across-cluster/140150)
**Author:** [@m.chu](https://discuss.elastic.co/u/m.chu)\ **Replies:** 0\ **Last updated:** [July 16, 2018, 1:08pm UTC](https://discuss.elastic.co/t/restore-snapshot-across-cluster/140150 "2018-07-16T13:08:38Z")
I notice that current web console supports restore the latest snapshot to a NEW deployment. Is there a way to restore a specific index from a snapshot to an EXISTING deployment. This is supported in the old console. It s… --- ## [Phrase Query breaks with "Compound Word Token Filters"](https://discuss.elastic.co/t/phrase-query-breaks-with-compound-word-token-filters/138858)
**Author:** [@mos](https://discuss.elastic.co/u/mos)\ **Replies:** 5\ **Last updated:** [July 16, 2018, 12:53pm UTC](https://discuss.elastic.co/t/phrase-query-breaks-with-compound-word-token-filters/138858 "2018-07-16T12:53:26Z")
We are evaluating the use of Elastic's "Compound Word Token Filters" and @jprante's "Decompound Plugin" for a large index of German documents. So far both work fine. The one of @jprante works even a little better. :wi… --- ## [Sorting parent documents based on the score of a nested child](https://discuss.elastic.co/t/sorting-parent-documents-based-on-the-score-of-a-nested-child/138925)
**Author:** [@Uli](https://discuss.elastic.co/u/Uli)\ **Replies:** 3\ **Last updated:** [July 16, 2018, 12:50pm UTC](https://discuss.elastic.co/t/sorting-parent-documents-based-on-the-score-of-a-nested-child/138925 "2018-07-16T12:50:05Z")
Hello, i have the following mapping: { "indexname": { "mappings": { "object": { "properties": { "languagedata": { "type": "nested", "properties": { "l… --- ## [Elasticsearch connect to Cosmos DB](https://discuss.elastic.co/t/elasticsearch-connect-to-cosmos-db/140144)
**Author:** [@Saeb](https://discuss.elastic.co/u/Saeb)\ **Replies:** 0\ **Last updated:** [July 16, 2018, 11:59am UTC](https://discuss.elastic.co/t/elasticsearch-connect-to-cosmos-db/140144 "2018-07-16T11:59:38Z")
Hello everybody, I have a small question. Is it possible or better has someone any experience to use an azure cosmos DB with elasticsearch. Thanks in advance. --- ## [Redhat docker image creation](https://discuss.elastic.co/t/redhat-docker-image-creation/140141)
**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\ **Replies:** 0\ **Last updated:** [July 16, 2018, 11:33am UTC](https://discuss.elastic.co/t/redhat-docker-image-creation/140141 "2018-07-16T11:33:57Z")
I want to create a Redhat docker image. Elastic Search is basically trying to build a source on a feather, because it only provides a cent OS image. https://www.elastic.co/guide/en/logstash/6.3/docker.html However, th… --- ## [How can I suspend incoming data flow from server?](https://discuss.elastic.co/t/how-can-i-suspend-incoming-data-flow-from-server/140118)
**Author:** [@EldrosKandar](https://discuss.elastic.co/u/EldrosKandar)\ **Replies:** 2\ **Last updated:** [July 16, 2018, 11:10am UTC](https://discuss.elastic.co/t/how-can-i-suspend-incoming-data-flow-from-server/140118 "2018-07-16T11:10:11Z")
I unfortunately introduced an error in my pipeline seetings, and now it is generating so much errors and traffic, that I can't even edit the pipeline back. In the console I get { "statusCode": 504, "error": "Gateway … --- ## [Elasticsearch Java API add direct generators to phrase suggester](https://discuss.elastic.co/t/elasticsearch-java-api-add-direct-generators-to-phrase-suggester/140136)
**Author:** [@NarimanN2](https://discuss.elastic.co/u/NarimanN2)\ **Replies:** 0\ **Last updated:** [July 16, 2018, 10:46am UTC](https://discuss.elastic.co/t/elasticsearch-java-api-add-direct-generators-to-phrase-suggester/140136 "2018-07-16T10:46:34Z")
I was looking for an example to add direct generator to phrase suggester using elasticsearch java API. There are a lot of weired parameters when I'm creating DirecCandidateGenrator object. for example why should I give i… --- ## [Elasticsearch logstash JDBC giving exception for data type casting float to long and long to float](https://discuss.elastic.co/t/elasticsearch-logstash-jdbc-giving-exception-for-data-type-casting-float-to-long-and-long-to-float/140119)
**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\ **Replies:** 1\ **Last updated:** [July 16, 2018, 10:01am UTC](https://discuss.elastic.co/t/elasticsearch-logstash-jdbc-giving-exception-for-data-type-casting-float-to-long-and-long-to-float/140119 "2018-07-16T10:01:51Z")
Hi Team, I have to create index dynamically using logstash jdbc. I have used sql query in logstash. And my few column contains some decimal and some long values mixed. After starting logstash I am getting exception can… --- ## [Translog size is not equally between primary and replica](https://discuss.elastic.co/t/translog-size-is-not-equally-between-primary-and-replica/139901)
**Author:** [@Ricky](https://discuss.elastic.co/u/Ricky)\ **Replies:** 3\ **Last updated:** [July 16, 2018, 9:51am UTC](https://discuss.elastic.co/t/translog-size-is-not-equally-between-primary-and-replica/139901 "2018-07-16T09:51:53Z")
when i use es 6.2.4 , i encounter primary and replica index 、translog store size are not equal. how to fix that? somebody help me. --- ## [\[Feature Request\] Support \_FILE suffix in docker images](https://discuss.elastic.co/t/feature-request-support-file-suffix-in-docker-images/140107)
**Author:** [@nikeee](https://discuss.elastic.co/u/nikeee)\ **Replies:** 2\ **Last updated:** [July 16, 2018, 9:09am UTC](https://discuss.elastic.co/t/feature-request-support-file-suffix-in-docker-images/140107 "2018-07-16T09:09:58Z")
There is a convention on official docker images that environment variables that end in \_FILE are read as a file and then assigned to a variable without the \_FILE suffix. For example, setting the environment variable ELAS… --- ## [Whole cluster stucked instead of single node](https://discuss.elastic.co/t/whole-cluster-stucked-instead-of-single-node/140105)
**Author:** [@mats990](https://discuss.elastic.co/u/mats990)\ **Replies:** 0\ **Last updated:** [July 16, 2018, 8:42am UTC](https://discuss.elastic.co/t/whole-cluster-stucked-instead-of-single-node/140105 "2018-07-16T08:42:55Z")
Hi, We are running ES 5.6.4 on Java 1.8.0\_171. Lately we can observe that linux process is stucked in zombie state on one VM (not always the same one). At that time, ES cluster doesn't throw any errors, doesn't process… --- ## [How can we percolate with dynamic fields?](https://discuss.elastic.co/t/how-can-we-percolate-with-dynamic-fields/139765)
**Author:** [@Jeroen\_Cools](https://discuss.elastic.co/u/Jeroen_Cools)\ **Replies:** 1\ **Last updated:** [July 16, 2018, 8:36am UTC](https://discuss.elastic.co/t/how-can-we-percolate-with-dynamic-fields/139765 "2018-07-16T08:36:06Z")
Having a similar problem/question as Percolators and Dynamic templates though that got closed without any replies. Our use case: We have products with various dynamic properties, saved as ranges or numeric values. Our … --- ## [Elasticsearch doesn't work!](https://discuss.elastic.co/t/elasticsearch-doesnt-work/140096)
**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\ **Replies:** 4\ **Last updated:** [July 16, 2018, 8:20am UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-work/140096 "2018-07-16T08:20:38Z")
these are the logs : \[root@frghcslnetv12 elasticsearch\]# tail -40 network-logs.log at org.elasticsearch.node.Node.\(Node.java:252) ~\[elasticsearch-6.3.1.jar:6.3.1\] at org.elasticsearch.bootstrap.Boo… --- ## [Global variable in script?](https://discuss.elastic.co/t/global-variable-in-script/139944)
**Author:** [@Guillaume\_Abautret](https://discuss.elastic.co/u/Guillaume_Abautret)\ **Replies:** 1\ **Last updated:** [July 13, 2018, 6:18pm UTC](https://discuss.elastic.co/t/global-variable-in-script/139944 "2018-07-13T18:18:21Z")
Hi all, I want to count the number of elements that have distance greater than 10. I don't know how to save the variable that counts. I can't initialize a variable in the script because at each iteration of elements, t… --- ## [ElasticSearchv1.7.5 - How to pass ES boolQuery (in json string format) using highlevel rest client](https://discuss.elastic.co/t/elasticsearchv1-7-5-how-to-pass-es-boolquery-in-json-string-format-using-highlevel-rest-client/140097)
**Author:** [@suri](https://discuss.elastic.co/u/suri)\ **Replies:** 1\ **Last updated:** [July 16, 2018, 7:50am UTC](https://discuss.elastic.co/t/elasticsearchv1-7-5-how-to-pass-es-boolquery-in-json-string-format-using-highlevel-rest-client/140097 "2018-07-16T07:50:05Z")
Hi, I'm using Elasticsearch v1.7.5 (we cant upgrade to latest version due to other restrictions). To call ES Search APIs I'm using highLevel Rest client (elasticsearch-rest-high-level-clientv5.6.0). I need to pass the… --- ## [Elasticsearch and logstash JDBC giving exception for long and float data type casting](https://discuss.elastic.co/t/elasticsearch-and-logstash-jdbc-giving-exception-for-long-and-float-data-type-casting/140095)
**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\ **Replies:** 0\ **Last updated:** [July 16, 2018, 7:39am UTC](https://discuss.elastic.co/t/elasticsearch-and-logstash-jdbc-giving-exception-for-long-and-float-data-type-casting/140095 "2018-07-16T07:39:27Z")
Hi Team, I have to create index dynamically using logstash jdbc. I have used sql query in logstash. And my few column contains some decimal and some long values mixed. After starting logstash I am getting exception can… --- ## [How to equally split shards storage space?](https://discuss.elastic.co/t/how-to-equally-split-shards-storage-space/140089)
**Author:** [@clash\_of\_clanss](https://discuss.elastic.co/u/clash_of_clanss)\ **Replies:** 1\ **Last updated:** [July 16, 2018, 7:10am UTC](https://discuss.elastic.co/t/how-to-equally-split-shards-storage-space/140089 "2018-07-16T07:10:50Z")
Hi, I know that we can assign number of shards per index by using index-template. but Is there any way to assign shards storage space like 30GB/shard, 45GB/shard manually? In my use case I am generating a index with dat… --- ## [How to do Real Time Alerting in ELK](https://discuss.elastic.co/t/how-to-do-real-time-alerting-in-elk/140090)
**Author:** [@addanuj](https://discuss.elastic.co/u/addanuj)\ **Replies:** 0\ **Last updated:** [July 16, 2018, 6:59am UTC](https://discuss.elastic.co/t/how-to-do-real-time-alerting-in-elk/140090 "2018-07-16T06:59:20Z")
I believe their are two types of alerting Schedule Alert - Specify conditions for triggering the alert based on result or result field counts. When a set of search results meets the trigger conditions, the alert can t… --- ## [How hide filter and mail and other configurations in ELK](https://discuss.elastic.co/t/how-hide-filter-and-mail-and-other-configurations-in-elk/140083)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 2\ **Last updated:** [July 16, 2018, 6:43am UTC](https://discuss.elastic.co/t/how-hide-filter-and-mail-and-other-configurations-in-elk/140083 "2018-07-16T06:43:06Z")
Hi All , It is a theoretical question . If I am installing ELK stack for a client in their machines . How can I hide my configurations from them . I want to hide my filters and configurations in ELK stack . Is it possib… --- ## [Monitoring Elasticsearch using Prometheus](https://discuss.elastic.co/t/monitoring-elasticsearch-using-prometheus/140084)
**Author:** [@Tafsir\_Alam](https://discuss.elastic.co/u/Tafsir_Alam)\ **Replies:** 0\ **Last updated:** [July 16, 2018, 6:42am UTC](https://discuss.elastic.co/t/monitoring-elasticsearch-using-prometheus/140084 "2018-07-16T06:42:34Z")
Hi All I have already read the previous post regarding monitoring Elasticsearch but need to ask one thing .. can you please guide me how can I install x-pack and Prometheus on my centos 7. Thanks in advance. --- ## [24:1 ratio](https://discuss.elastic.co/t/24-1-ratio/140081)
**Author:** [@safhw91](https://discuss.elastic.co/u/safhw91)\ **Replies:** 2\ **Last updated:** [July 16, 2018, 6:20am UTC](https://discuss.elastic.co/t/24-1-ratio/140081 "2018-07-16T06:20:01Z")
Hi! Simple question: is the recommended 24:1 disk:memory ratio using the entire machine's memory or just the memory allocated to Elastic's JVM? E.g. I have a 64GB machine and 30GB is for Elastic (rest for Lucene), does… --- ## [Find the shot field in nested field with python](https://discuss.elastic.co/t/find-the-shot-field-in-nested-field-with-python/139969)
**Author:** [@hrdxwandg](https://discuss.elastic.co/u/hrdxwandg)\ **Replies:** 1\ **Last updated:** [July 16, 2018, 6:19am UTC](https://discuss.elastic.co/t/find-the-shot-field-in-nested-field-with-python/139969 "2018-07-16T06:19:11Z")
I want to find the match field in a nested field. the nested field is comprise of two fields as follows: "text":{ "song":text "lyrics":text } when i use nested query, the score\_mode is set to type max. So i want to… --- ## [X-Pack Elasticsearch Auditing Security Events](https://discuss.elastic.co/t/x-pack-elasticsearch-auditing-security-events/139493)
**Author:** [@gora](https://discuss.elastic.co/u/gora)\ **Replies:** 4\ **Last updated:** [July 16, 2018, 6:15am UTC](https://discuss.elastic.co/t/x-pack-elasticsearch-auditing-security-events/139493 "2018-07-16T06:15:31Z")
I am using X-Pack to keep track of events related to Elasticsearch. Am listening only the authentication\_success event, in that am getting both \[rest\] and \[transport\] calls. How can I listen to only the \[rest\] request? --- ## [Npm ES library - how to do a upsert?](https://discuss.elastic.co/t/npm-es-library-how-to-do-a-upsert/140018)
**Author:** [@Darin\_Hensley](https://discuss.elastic.co/u/Darin_Hensley)\ **Replies:** 1\ **Last updated:** [July 16, 2018, 5:45am UTC](https://discuss.elastic.co/t/npm-es-library-how-to-do-a-upsert/140018 "2018-07-16T05:45:39Z")
Using the ES node library.... how do I do a upsert? After reading documentation, I thought this would work but not having success. My goal is to insert a new document, if it already exists, then update it(or do nothing i… --- ## [How to monitor whether ELK stack along with filebeat is down?](https://discuss.elastic.co/t/how-to-monitor-whether-elk-stack-along-with-filebeat-is-down/140051)
**Author:** [@Watch\_out](https://discuss.elastic.co/u/Watch_out)\ **Replies:** 4\ **Last updated:** [July 16, 2018, 4:07am UTC](https://discuss.elastic.co/t/how-to-monitor-whether-elk-stack-along-with-filebeat-is-down/140051 "2018-07-16T04:07:22Z")
We have no idea that Some one restarted tomcat server where filebeat is running. Filebeat dead since then. So almost 10 days later we observed that filebat on that server not pushing logs, as a result we lost so much da… --- ## [Add and remove alias timeout](https://discuss.elastic.co/t/add-and-remove-alias-timeout/138900)
**Author:** [@ooooldman](https://discuss.elastic.co/u/ooooldman)\ **Replies:** 5\ **Last updated:** [July 16, 2018, 2:49am UTC](https://discuss.elastic.co/t/add-and-remove-alias-timeout/138900 "2018-07-16T02:49:19Z")
es : 5.6.3 1 master and 4 datanode OS : centos 6.9 x86\_64 JAVA : java version "1.8.0\_66" Java(TM) SE Runtime Environment (build 1.8.0\_66-b17) Java HotSpot(TM) 64-Bit Server VM (build 25.66-b17, mixed mode) request r… --- ## [Rest High level client initialization, What are the ports needed](https://discuss.elastic.co/t/rest-high-level-client-initialization-what-are-the-ports-needed/140033)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 1\ **Last updated:** [July 16, 2018, 1:37am UTC](https://discuss.elastic.co/t/rest-high-level-client-initialization-what-are-the-ports-needed/140033 "2018-07-16T01:37:59Z")
RestHighLevelClient client = new RestHighLevelClient( RestClient.builder( new HttpHost("localhost", 9200, "http"), new HttpHost("localhost", 9201, "http"))); Link to High level cl… --- ## [Elasticsearch masternode is not reponding](https://discuss.elastic.co/t/elasticsearch-masternode-is-not-reponding/140065)
**Author:** [@Debarghya\_Chakrabort](https://discuss.elastic.co/u/Debarghya_Chakrabort)\ **Replies:** 2\ **Last updated:** [July 15, 2018, 9:03pm UTC](https://discuss.elastic.co/t/elasticsearch-masternode-is-not-reponding/140065 "2018-07-15T21:03:38Z")
I am seeing this kind of behavior of our ES master node and it becomes unresponsive. I have checked in Kibana xpack Monitoring and I did not get the status (Screenshot attached) Checked the master node log file, found b… --- ## [Large amount of data and pagination](https://discuss.elastic.co/t/large-amount-of-data-and-pagination/140032)
**Author:** [@liban](https://discuss.elastic.co/u/liban)\ **Replies:** 4\ **Last updated:** [July 14, 2018, 10:15pm UTC](https://discuss.elastic.co/t/large-amount-of-data-and-pagination/140032 "2018-07-14T22:15:54Z")
Hello ES community, I am trying to delete a large amount of index data, the script i am using deletes just 10 documents from each index I’ve configured. each index contains 10 000+ documents. is there a way to purge a… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1615) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1617)