# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1623

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1624

---

## [Not able to convert float to integer using convert processor](https://discuss.elastic.co/t/not-able-to-convert-float-to-integer-using-convert-processor/139269)

<div class="topic-metadata">

**Author:** [@roshni](https://discuss.elastic.co/u/roshni)\
**Replies:** 1\
**Last updated:** [July 10, 2018, 5:41am UTC](https://discuss.elastic.co/t/not-able-to-convert-float-to-integer-using-convert-processor/139269 "2018-07-10T05:41:45Z")

</div>

Hi , I first defined a pipeline as follows - curl -X PUT "node1:9200/\_ingest/pipeline/convertpipeline" -H 'Content-Type: application/json' -d' { "description": "convert type pipeline", "processors" : \[ { "convert": { "…

---

## [Cluster becoming red during rolling upgrade](https://discuss.elastic.co/t/cluster-becoming-red-during-rolling-upgrade/139265)

<div class="topic-metadata">

**Author:** [@bsarkar](https://discuss.elastic.co/u/bsarkar)\
**Replies:** 0\
**Last updated:** [July 10, 2018, 5:16am UTC](https://discuss.elastic.co/t/cluster-becoming-red-during-rolling-upgrade/139265 "2018-07-10T05:16:11Z")

</div>

As per the rolling upgrade process documented here, it is advised to set the value of "cluster.routing.allocation.enable" to "none" before bringing a node down for servicing and set it back to "all" once the node is serv…

---

## [Import JSON or CSV in pc](https://discuss.elastic.co/t/import-json-or-csv-in-pc/139248)

<div class="topic-metadata">

**Author:** [@mkaczor](https://discuss.elastic.co/u/mkaczor)\
**Replies:** 1\
**Last updated:** [July 10, 2018, 3:57am UTC](https://discuss.elastic.co/t/import-json-or-csv-in-pc/139248 "2018-07-10T03:57:48Z")

</div>

Hello, I did a JSON in Kibana but now I need to import in my computer the JSON (or better CSV) but I can't find how do that. Thank for helping.

---

## [Not able to check cluster status with curl command](https://discuss.elastic.co/t/not-able-to-check-cluster-status-with-curl-command/139254)

<div class="topic-metadata">

**Author:** [@john\_99](https://discuss.elastic.co/u/john_99)\
**Replies:** 4\
**Last updated:** [July 10, 2018, 3:16am UTC](https://discuss.elastic.co/t/not-able-to-check-cluster-status-with-curl-command/139254 "2018-07-10T03:16:43Z")

</div>

curl -XGET 'localhost:9200/\_cluster/health?pretty' DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"\> html\> link rel="stylesheet" href="http://www.mailcontrol.com/css/proxy.css" type="text/css"\> lin…

---

## [Unable to view cluster status with curl command](https://discuss.elastic.co/t/unable-to-view-cluster-status-with-curl-command/139257)

<div class="topic-metadata">

**Author:** [@john\_99](https://discuss.elastic.co/u/john_99)\
**Replies:** 1\
**Last updated:** [July 10, 2018, 3:02am UTC](https://discuss.elastic.co/t/unable-to-view-cluster-status-with-curl-command/139257 "2018-07-10T03:02:29Z")

</div>

Hi, I am trying to check my cluster status with curl command curl http://localhost:9200 or curl -XGET 'http://localhost:9200/\_cluster/state?pretty' getting below //DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN…

---

## [Elasticsearch: Couldn't login as the user Elastic](https://discuss.elastic.co/t/elasticsearch-couldnt-login-as-the-user-elastic/138335)

<div class="topic-metadata">

**Author:** [@Preethi](https://discuss.elastic.co/u/Preethi)\
**Replies:** 5\
**Last updated:** [July 10, 2018, 2:46am UTC](https://discuss.elastic.co/t/elasticsearch-couldnt-login-as-the-user-elastic/138335 "2018-07-10T02:46:11Z")

</div>

Hi, Since I need teh login page for Kibana, I enabled the xpack.security.enable: true in kibana.yml and added elasticsearc.username: "some\_username" and elasticsearch.password: "some\_pwd" After restarting Elasticsearch…

---

## [XContent and Aggregations replacing agg names](https://discuss.elastic.co/t/xcontent-and-aggregations-replacing-agg-names/139246)

<div class="topic-metadata">

**Author:** [@Matt\_Chambers1](https://discuss.elastic.co/u/Matt_Chambers1)\
**Replies:** 1\
**Last updated:** [July 10, 2018, 1:06am UTC](https://discuss.elastic.co/t/xcontent-and-aggregations-replacing-agg-names/139246 "2018-07-10T01:06:55Z")

</div>

Hi there, kinda an obscure issue here. So basically I'm extracting the aggs from the search result like this: val json = XContentFactory.jsonBuilder().use { json -\> json.startObject() …

---

## [Default\_operator=or on query string not honored within paren grouping?](https://discuss.elastic.co/t/default-operator-or-on-query-string-not-honored-within-paren-grouping/136945)

<div class="topic-metadata">

**Author:** [@orogvany](https://discuss.elastic.co/u/orogvany)\
**Replies:** 2\
**Last updated:** [July 9, 2018, 8:26pm UTC](https://discuss.elastic.co/t/default-operator-or-on-query-string-not-honored-within-paren-grouping/136945 "2018-07-09T20:26:47Z")

</div>

Per the ES docs where the title field contains quick or brown. If you omit the OR operator the default operator will be used title:(quick OR brown) title:(quick brown) If I do { "query\_string":{ "query":"guid:(…

---

## [Filters on both parent and child](https://discuss.elastic.co/t/filters-on-both-parent-and-child/139235)

<div class="topic-metadata">

**Author:** [@anp](https://discuss.elastic.co/u/anp)\
**Replies:** 0\
**Last updated:** [July 9, 2018, 8:24pm UTC](https://discuss.elastic.co/t/filters-on-both-parent-and-child/139235 "2018-07-09T20:24:43Z")

</div>

I'm trying to model a parent-child relationship using the join datatype. For example, department - employee. When I query is it possible to specify a filter on both parent and child at the same time? For example, departm…

---

## [How I can change source for index winlogbeat](https://discuss.elastic.co/t/how-i-can-change-source-for-index-winlogbeat/139195)

<div class="topic-metadata">

**Author:** [@Serhiy\_H\_V](https://discuss.elastic.co/u/Serhiy_H_V)\
**Replies:** 1\
**Last updated:** [July 9, 2018, 7:56pm UTC](https://discuss.elastic.co/t/how-i-can-change-source-for-index-winlogbeat/139195 "2018-07-09T19:56:41Z")

</div>

Hi. All index for winlogbeat looks like with no data. But logstash and auditbeat looks well with source and all fields data. I Try to remove and recreate winlogbeat index but it's not work. than I thy to remove wi…

---

## [Python API Progress Bar](https://discuss.elastic.co/t/python-api-progress-bar/139223)

<div class="topic-metadata">

**Author:** [@alex3](https://discuss.elastic.co/u/alex3)\
**Replies:** 0\
**Last updated:** [July 9, 2018, 6:21pm UTC](https://discuss.elastic.co/t/python-api-progress-bar/139223 "2018-07-09T18:21:51Z")

</div>

I am trying to figure out how many bytes have been indexed through elastic search. I first ingest my files through logstash then forward it to ES. Is there any way I can get the total number of bytes indexed in ES and ca…

---

## [Group By Aggregation by more than 2 fields using Java API](https://discuss.elastic.co/t/group-by-aggregation-by-more-than-2-fields-using-java-api/139221)

<div class="topic-metadata">

**Author:** [@Pritom\_Ahmed](https://discuss.elastic.co/u/Pritom_Ahmed)\
**Replies:** 0\
**Last updated:** [July 9, 2018, 5:58pm UTC](https://discuss.elastic.co/t/group-by-aggregation-by-more-than-2-fields-using-java-api/139221 "2018-07-09T17:58:56Z")

</div>

Hi, I am using the JAVA API of Elasticsearch 6.3.0. I want to create a group by aggregation for more than 2 fields. Currently what I have is the following TermsAggregationBuilder termsAggregationBuilder = null;…

---

## [Is this normal seeing JVM Heap Zigzag chart](https://discuss.elastic.co/t/is-this-normal-seeing-jvm-heap-zigzag-chart/139215)

<div class="topic-metadata">

**Author:** [@saad](https://discuss.elastic.co/u/saad)\
**Replies:** 1\
**Last updated:** [July 9, 2018, 5:32pm UTC](https://discuss.elastic.co/t/is-this-normal-seeing-jvm-heap-zigzag-chart/139215 "2018-07-09T17:32:16Z")

</div>

Hi, I have cluster of elasticsearch and the assigned Heap is 10GB. we are using 6.3 elasticsearch version. I am seeing the JVM heap Chart in the monoritng looks like Zigzag chart groing from about 750MB to 7.5GB gradua…

---

## [Trouble persisting data on kubernetes](https://discuss.elastic.co/t/trouble-persisting-data-on-kubernetes/139071)

<div class="topic-metadata">

**Author:** [@Mike\_H](https://discuss.elastic.co/u/Mike_H)\
**Replies:** 0\
**Last updated:** [July 9, 2018, 1:05am UTC](https://discuss.elastic.co/t/trouble-persisting-data-on-kubernetes/139071 "2018-07-09T01:05:08Z")

</div>

Hi, I have a cluster with a data node and a master node, and I'm trying to retain our ES indices on Kubernetes when our cluster is created/deleted. I've tried to change path.data per this post, but my deployment is fail…

---

## [Generating jks file from existing key, crt and cacert](https://discuss.elastic.co/t/generating-jks-file-from-existing-key-crt-and-cacert/139216)

<div class="topic-metadata">

**Author:** [@fhalde](https://discuss.elastic.co/u/fhalde)\
**Replies:** 0\
**Last updated:** [July 9, 2018, 4:55pm UTC](https://discuss.elastic.co/t/generating-jks-file-from-existing-key-crt-and-cacert/139216 "2018-07-09T16:55:02Z")

</div>

has anyone created keystore and truststores with existing key, crt and ca cert files?

---

## [GEO Location issue 6.3](https://discuss.elastic.co/t/geo-location-issue-6-3/136910)

<div class="topic-metadata">

**Author:** [@Ryan.Ivis](https://discuss.elastic.co/u/Ryan.Ivis)\
**Replies:** 2\
**Last updated:** [July 9, 2018, 4:28pm UTC](https://discuss.elastic.co/t/geo-location-issue-6-3/136910 "2018-07-09T16:28:06Z")

</div>

Good Morning, I get the following error on all location visuals after upgrading to 6.3 Caused by: org.elasticsearch.index.query.QueryShardException: failed to find geo\_point field \[location\] Looking at the index mappin…

---

## [Function\_score with nested query - syntax building](https://discuss.elastic.co/t/function-score-with-nested-query-syntax-building/139213)

<div class="topic-metadata">

**Author:** [@Kornelia\_Watson](https://discuss.elastic.co/u/Kornelia_Watson)\
**Replies:** 0\
**Last updated:** [July 9, 2018, 4:18pm UTC](https://discuss.elastic.co/t/function-score-with-nested-query-syntax-building/139213 "2018-07-09T16:18:10Z")

</div>

Hi, I want to add custom scoring to an already existing query but I'm struggling to generate correct syntax. Would someone be able to advice? If my base query is: { "query": { "bool": { "must": \[ { "bool": { "s…

---

## [High cpu usage when ES loads more and more shards](https://discuss.elastic.co/t/high-cpu-usage-when-es-loads-more-and-more-shards/139211)

<div class="topic-metadata">

**Author:** [@Roman\_Margolis](https://discuss.elastic.co/u/Roman_Margolis)\
**Replies:** 0\
**Last updated:** [July 9, 2018, 4:12pm UTC](https://discuss.elastic.co/t/high-cpu-usage-when-es-loads-more-and-more-shards/139211 "2018-07-09T16:12:55Z")

</div>

Recently I observed a single node cluster (es 6.2.4) with lots and lots of shards. I know it's a bad practice, and I advised the relevant party to change their elastic ways, but out of curiosity I'll appreciate if anyo…

---

## [Why Date Histogram Aggregation Builder doesn't support JSR-310?](https://discuss.elastic.co/t/why-date-histogram-aggregation-builder-doesnt-support-jsr-310/139209)

<div class="topic-metadata">

**Author:** [@Gustavo\_Orsi](https://discuss.elastic.co/u/Gustavo_Orsi)\
**Replies:** 0\
**Last updated:** [July 9, 2018, 4:06pm UTC](https://discuss.elastic.co/t/why-date-histogram-aggregation-builder-doesnt-support-jsr-310/139209 "2018-07-09T16:06:29Z")

</div>

In ES 6.3 DateHistogramAggregationBuilder seems to only support joda DateTimeZone and not JSR-310 ZoneId. Am I missing something ? (I used to use DateHistogramBuilder which support java ZoneId but that class is no longer…

---

## [Multi\_match query issue](https://discuss.elastic.co/t/multi-match-query-issue/136988)

<div class="topic-metadata">

**Author:** [@mohammedEssabri](https://discuss.elastic.co/u/mohammedEssabri)\
**Replies:** 4\
**Last updated:** [July 9, 2018, 4:02pm UTC](https://discuss.elastic.co/t/multi-match-query-issue/136988 "2018-07-09T16:02:38Z")

</div>

Hi Team, I'm using ES 1.7 I have an index containing a field named proceedingslanguage which contains a language EN, FR or DE. The following script using Curl is giving me an empty result : curl -XGET 'http://localho…

---

## [Percolate : msearch with count](https://discuss.elastic.co/t/percolate-msearch-with-count/139023)

<div class="topic-metadata">

**Author:** [@Aravind](https://discuss.elastic.co/u/Aravind)\
**Replies:** 1\
**Last updated:** [July 9, 2018, 4:02pm UTC](https://discuss.elastic.co/t/percolate-msearch-with-count/139023 "2018-07-09T16:02:04Z")

</div>

Hi, I could perform count with the percolate query, just like this - curl -XGET "http://localhost:9200/car/\_count" -H 'Content-Type: application/json' -d '{"query" : { "percolate" : {"field": "criteria", "index" : "rev…

---

## [Under what circumstances does hits.total change while scrolling?](https://discuss.elastic.co/t/under-what-circumstances-does-hits-total-change-while-scrolling/139198)

<div class="topic-metadata">

**Author:** [@reasn](https://discuss.elastic.co/u/reasn)\
**Replies:** 0\
**Last updated:** [July 9, 2018, 2:33pm UTC](https://discuss.elastic.co/t/under-what-circumstances-does-hits-total-change-while-scrolling/139198 "2018-07-09T14:33:35Z")

</div>

Dear community, I searched Google and Stackoverflow but could not find anything on this but 'totalHits' gets changed unexpectedly while scrolling SearchResponse which seems to be from 2010 only offers a workaround. One…

---

## [Chaining derivative aggregation to moving average is delayed by one bucket](https://discuss.elastic.co/t/chaining-derivative-aggregation-to-moving-average-is-delayed-by-one-bucket/139201)

<div class="topic-metadata">

**Author:** [@uyth](https://discuss.elastic.co/u/uyth)\
**Replies:** 1\
**Last updated:** [July 9, 2018, 3:27pm UTC](https://discuss.elastic.co/t/chaining-derivative-aggregation-to-moving-average-is-delayed-by-one-bucket/139201 "2018-07-09T15:27:59Z")

</div>

Elasticsearch v. 6.2.4 Context: I have aggregated some data into buckets. I want the derivative of the data and also stabilize the derivative with a moving average. Problem: When I chain the derivative to a moving aver…

---

## [ES Rebalancing not working?](https://discuss.elastic.co/t/es-rebalancing-not-working/139203)

<div class="topic-metadata">

**Author:** [@mrcsg](https://discuss.elastic.co/u/mrcsg)\
**Replies:** 0\
**Last updated:** [July 9, 2018, 2:49pm UTC](https://discuss.elastic.co/t/es-rebalancing-not-working/139203 "2018-07-09T14:49:40Z")

</div>

Hi All- I'm trying to investigate how ES should be rebalancing our active nodes. Last week I added 10 nodes to our cluster but come Monday it seems we're inserting new data into the new nodes but it isn't rebalancing. …

---

## [Elastic search curator is failing](https://discuss.elastic.co/t/elastic-search-curator-is-failing/137447)

<div class="topic-metadata">

**Author:** [@sandeepnarla22322](https://discuss.elastic.co/u/sandeepnarla22322)\
**Replies:** 11\
**Last updated:** [July 9, 2018, 2:32pm UTC](https://discuss.elastic.co/t/elastic-search-curator-is-failing/137447 "2018-07-09T14:32:09Z")

</div>

\[root@BVELKL03 elasticsearch-curator\]# curator\_cli --host localhost show\_indices --filter\_list '{"filtertype":"age","source":"name","timestring":"%Y.%m.%d","unit":"days","unit\_count":30}' 2018-06-26 07:07:23,177 ERROR …

---

## [Composite aggregation fails on some indices (Failed to build aggregation)](https://discuss.elastic.co/t/composite-aggregation-fails-on-some-indices-failed-to-build-aggregation/139147)

<div class="topic-metadata">

**Author:** [@YNR](https://discuss.elastic.co/u/YNR)\
**Replies:** 2\
**Last updated:** [July 9, 2018, 1:47pm UTC](https://discuss.elastic.co/t/composite-aggregation-fails-on-some-indices-failed-to-build-aggregation/139147 "2018-07-09T13:47:20Z")

</div>

I use Elasticsearch 6.2.4. I read indices from Remote Elasticsearch (ver 2.4) and copy them on my local Elasticsearch (6.2.4) and then I define the mapping for each index and finally I use composite aggregation. The pseu…

---

## [Perform reboot/restart physical nodes](https://discuss.elastic.co/t/perform-reboot-restart-physical-nodes/139183)

<div class="topic-metadata">

**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\
**Replies:** 0\
**Last updated:** [July 9, 2018, 1:45pm UTC](https://discuss.elastic.co/t/perform-reboot-restart-physical-nodes/139183 "2018-07-09T13:45:20Z")

</div>

Hello, How to perform a restart of single node Elasticsearch (with multiple instance in) ? The option "index.unassigned.node\_left.delayed\_timeout" positioned at 10 minutes is sufficient ? Here my script to reboot a s…

---

## [Cluster Elasticsearch of two version](https://discuss.elastic.co/t/cluster-elasticsearch-of-two-version/139181)

<div class="topic-metadata">

**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\
**Replies:** 2\
**Last updated:** [July 9, 2018, 1:43pm UTC](https://discuss.elastic.co/t/cluster-elasticsearch-of-two-version/139181 "2018-07-09T13:43:49Z")

</div>

Hi, I want to know if we can have a cluster elasticsearch of two nodes with different version : the firste one : 6.3 the second one : 5.10 ?

---

## [Cluster restart deletes xpack license and kibana indexes](https://discuss.elastic.co/t/cluster-restart-deletes-xpack-license-and-kibana-indexes/138906)

<div class="topic-metadata">

**Author:** [@hokiegeek2](https://discuss.elastic.co/u/hokiegeek2)\
**Replies:** 16\
**Last updated:** [July 9, 2018, 1:29pm UTC](https://discuss.elastic.co/t/cluster-restart-deletes-xpack-license-and-kibana-indexes/138906 "2018-07-09T13:29:30Z")

</div>

Hi Everyone, I am running a Elasticsearch cluster deployed in Docker containers. When I restarted the cluster the Elasticsearch license appeared to be deleted along with all of the Kibana dashboards. Anyone know why thi…

---

## [Elasticsearch is active, 9200: Connection refused and memory error](https://discuss.elastic.co/t/elasticsearch-is-active-9200-connection-refused-and-memory-error/139178)

<div class="topic-metadata">

**Author:** [@leviscoca](https://discuss.elastic.co/u/leviscoca)\
**Replies:** 0\
**Last updated:** [July 9, 2018, 1:24pm UTC](https://discuss.elastic.co/t/elasticsearch-is-active-9200-connection-refused-and-memory-error/139178 "2018-07-09T13:24:23Z")

</div>

Hello, I've installed Elasticsearch on the new Ubuntu 16, Download and install the Debian package manually, and the service seems to be running fine. \[2018-07-09T17:06:03,486\]\[WARN \]\[o.e.b.JNANatives \] Unable t…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1622)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1624)
