# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1650

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1651

---

## [Elasticsearch not starting, with no errors in the logs](https://discuss.elastic.co/t/elasticsearch-not-starting-with-no-errors-in-the-logs/136169)

<div class="topic-metadata">

**Author:** [@Michael\_Chora](https://discuss.elastic.co/u/Michael_Chora)\
**Replies:** 17\
**Last updated:** [June 17, 2018, 10:45am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-with-no-errors-in-the-logs/136169 "2018-06-17T10:45:02Z")

</div>

Whats confusing is that it was working yesterday, I rebooted the machine, and today im getting this: root@ip-172-31-8-215:/home/admin# sudo service elasticsearch status ● elasticsearch.service - Elasticsearch Loaded:…

---

## [Feature request Additional logging on index creation](https://discuss.elastic.co/t/feature-request-additional-logging-on-index-creation/136203)

<div class="topic-metadata">

**Author:** [@markdaku](https://discuss.elastic.co/u/markdaku)\
**Replies:** 0\
**Last updated:** [June 17, 2018, 9:13am UTC](https://discuss.elastic.co/t/feature-request-additional-logging-on-index-creation/136203 "2018-06-17T09:13:44Z")

</div>

In the case that action.auto\_create\_index is set to something other than default the logs should reflect the fact that no matching index was found and index creation was BLOCKED By Rule.

---

## [DNS Lookup from packetbeat](https://discuss.elastic.co/t/dns-lookup-from-packetbeat/136165)

<div class="topic-metadata">

**Author:** [@Drav3nmc](https://discuss.elastic.co/u/Drav3nmc)\
**Replies:** 2\
**Last updated:** [June 17, 2018, 8:31am UTC](https://discuss.elastic.co/t/dns-lookup-from-packetbeat/136165 "2018-06-17T08:31:21Z")

</div>

Hi I have just set up elasticsearch with kibana and I am currently sending packetbeat data from one of my servers directly to elasticsearch, not using logstash and a plain packetbeat config. The data is being shown per…

---

## [Rollup - no data](https://discuss.elastic.co/t/rollup-no-data/136197)

<div class="topic-metadata">

**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\
**Replies:** 3\
**Last updated:** [June 17, 2018, 8:10am UTC](https://discuss.elastic.co/t/rollup-no-data/136197 "2018-06-17T08:10:19Z")

</div>

Hi, I wanted to experiment with the new Rollup api, so I loaded a small chunk of data over to a dev cluster and configured a rollup job. The job stats object shows this: "stats": { "pages\_processed": 0, "documents\_…

---

## [RPM and DEB packages impractical for use](https://discuss.elastic.co/t/rpm-and-deb-packages-impractical-for-use/136114)

<div class="topic-metadata">

**Author:** [@markdaku](https://discuss.elastic.co/u/markdaku)\
**Replies:** 6\
**Last updated:** [June 17, 2018, 7:59am UTC](https://discuss.elastic.co/t/rpm-and-deb-packages-impractical-for-use/136114 "2018-06-17T07:59:31Z")

</div>

Using the repo version of elastic products has proven to be a no go. For the very simple reason that if you use the method of update repo list and then upgrade packages you will be offline until you perform remediation. …

---

## [Document Level Security & Combining queries together](https://discuss.elastic.co/t/document-level-security-combining-queries-together/136143)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 1\
**Last updated:** [June 17, 2018, 6:45am UTC](https://discuss.elastic.co/t/document-level-security-combining-queries-together/136143 "2018-06-17T06:45:07Z")

</div>

Hello, I'm trying to use Combining queries together (Bool Query and Range Query) with Setting Up Field and Document Level Security and running into issue(s): I get Kibana error: Discover: could not read the current t…

---

## [Starting elasticserver error](https://discuss.elastic.co/t/starting-elasticserver-error/136173)

<div class="topic-metadata">

**Author:** [@Pradana](https://discuss.elastic.co/u/Pradana)\
**Replies:** 1\
**Last updated:** [June 17, 2018, 4:26am UTC](https://discuss.elastic.co/t/starting-elasticserver-error/136173 "2018-06-17T04:26:07Z")

</div>

I just installing elasticsearch 6.3 through yum in RHEL 7. When i try to start the service with systemctl start elasticsearch .. the service wont up. when i check with journalctl -xe -u elasticsearch, i got below error : …

---

## [How to return big result for analysis](https://discuss.elastic.co/t/how-to-return-big-result-for-analysis/136191)

<div class="topic-metadata">

**Author:** [@cool\_arun](https://discuss.elastic.co/u/cool_arun)\
**Replies:** 1\
**Last updated:** [June 17, 2018, 1:30am UTC](https://discuss.elastic.co/t/how-to-return-big-result-for-analysis/136191 "2018-06-17T01:30:06Z")

</div>

I want to perform full-text search against elasticsearch then i want all the possible result because i want to perform some computational heavy analysis on that data in real time and get the result back, my question is c…

---

## [Return only Keys matching a pattern in Aggregations](https://discuss.elastic.co/t/return-only-keys-matching-a-pattern-in-aggregations/136147)

<div class="topic-metadata">

**Author:** [@Mindtech](https://discuss.elastic.co/u/Mindtech)\
**Replies:** 4\
**Last updated:** [June 16, 2018, 8:50pm UTC](https://discuss.elastic.co/t/return-only-keys-matching-a-pattern-in-aggregations/136147 "2018-06-16T20:50:07Z")

</div>

Hello, is there a way to only return keys in aggregations that match a certain pattern? I have an aggregation on sports that returns Football =\> 100, Handball =\> 50, Hockey =\> 40, Racquetball =\> 30, Tennis =\> 20 N…

---

## [Median of count of array field](https://discuss.elastic.co/t/median-of-count-of-array-field/136185)

<div class="topic-metadata">

**Author:** [@Gaurav\_Jindal](https://discuss.elastic.co/u/Gaurav_Jindal)\
**Replies:** 0\
**Last updated:** [June 16, 2018, 6:30pm UTC](https://discuss.elastic.co/t/median-of-count-of-array-field/136185 "2018-06-16T18:30:07Z")

</div>

My document has a nested field(array of messages) I would like to find median and average of the messages per document

---

## [Trouble with Elasticsearch sort](https://discuss.elastic.co/t/trouble-with-elasticsearch-sort/136183)

<div class="topic-metadata">

**Author:** [@StartupFlux](https://discuss.elastic.co/u/StartupFlux)\
**Replies:** 0\
**Last updated:** [June 16, 2018, 5:42pm UTC](https://discuss.elastic.co/t/trouble-with-elasticsearch-sort/136183 "2018-06-16T17:42:19Z")

</div>

We have 3 sorting options in our application: Recommended, Distance and Rating. User can search by a Service and/or a Location. By default, if location is filled we show results that are within 50 miles of the search l…

---

## [What is the best way to query first and last name?](https://discuss.elastic.co/t/what-is-the-best-way-to-query-first-and-last-name/136142)

<div class="topic-metadata">

**Author:** [@undefinedman](https://discuss.elastic.co/u/undefinedman)\
**Replies:** 2\
**Last updated:** [June 16, 2018, 12:56pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-query-first-and-last-name/136142 "2018-06-16T12:56:54Z")

</div>

I am trying to setup search analysis in Elasticsearch to get as close as possible to the following scenario: I have 4 users: Karolina Abc (karolinaabc@example.com) Karolina Def (karolinadef@example.com) Karol Abc (kar…

---

## [Not able to start 6.3 after upgrade from 6.2](https://discuss.elastic.co/t/not-able-to-start-6-3-after-upgrade-from-6-2/136150)

<div class="topic-metadata">

**Author:** [@Koen\_Wouters](https://discuss.elastic.co/u/Koen_Wouters)\
**Replies:** 9\
**Last updated:** [June 16, 2018, 12:51pm UTC](https://discuss.elastic.co/t/not-able-to-start-6-3-after-upgrade-from-6-2/136150 "2018-06-16T12:51:19Z")

</div>

We just upgraded from 6.2 to 6.3 and are no longer able to start. The error message states that I cannot start as root, and it seems to be a very common issue looking at posts here and using google. But I just can't fig…

---

## [How to load old data to elastich search](https://discuss.elastic.co/t/how-to-load-old-data-to-elastich-search/136159)

<div class="topic-metadata">

**Author:** [@Pradana](https://discuss.elastic.co/u/Pradana)\
**Replies:** 2\
**Last updated:** [June 16, 2018, 9:19am UTC](https://discuss.elastic.co/t/how-to-load-old-data-to-elastich-search/136159 "2018-06-16T09:19:59Z")

</div>

I have my elasticsearch running well , with current configuration : filebeat--\>logstash--\>elasticsearch--\>kibana. The filebeat is reading on cdr.log but I have previous data that has been archive by the system with the …

---

## [Arrays & SearchHit java API](https://discuss.elastic.co/t/arrays-searchhit-java-api/136095)

<div class="topic-metadata">

**Author:** [@sureshvytla](https://discuss.elastic.co/u/sureshvytla)\
**Replies:** 0\
**Last updated:** [June 15, 2018, 1:02pm UTC](https://discuss.elastic.co/t/arrays-searchhit-java-api/136095 "2018-06-15T13:02:13Z")

</div>

Hi, We are storing arrays in elastic search (5.4.x) with a naming convension of column, and would like to retrieve array values in search API. We are using SearchRequestBuilder and noticing the following error. { "err…

---

## [Query fields in multimatch, highlight them, but exclude them from results](https://discuss.elastic.co/t/query-fields-in-multimatch-highlight-them-but-exclude-them-from-results/135002)

<div class="topic-metadata">

**Author:** [@hacker\_21](https://discuss.elastic.co/u/hacker_21)\
**Replies:** 2\
**Last updated:** [June 16, 2018, 6:20am UTC](https://discuss.elastic.co/t/query-fields-in-multimatch-highlight-them-but-exclude-them-from-results/135002 "2018-06-16T06:20:20Z")

</div>

hi, I have a field called "pages" which is an array which can store up to 1,000 plain-text web pages. This is useful while querying to identify relevant documents. However, the 1K page array isn't actually displayed to…

---

## [Iterate value by doc\_values](https://discuss.elastic.co/t/iterate-value-by-doc-values/136161)

<div class="topic-metadata">

**Author:** [@bobotu](https://discuss.elastic.co/u/bobotu)\
**Replies:** 0\
**Last updated:** [June 16, 2018, 6:14am UTC](https://discuss.elastic.co/t/iterate-value-by-doc-values/136161 "2018-06-16T06:14:29Z")

</div>

I'm new to Elasticsearch. It seems like doc\_values is a columnar storage for documents fields. I want to do search in Spark and retrieve a few fields of a large mount of documents. It seems a columnar storage format will…

---

## [Possible problems in migration from 2.4 to 5.x](https://discuss.elastic.co/t/possible-problems-in-migration-from-2-4-to-5-x/135812)

<div class="topic-metadata">

**Author:** [@DBS](https://discuss.elastic.co/u/DBS)\
**Replies:** 2\
**Last updated:** [June 16, 2018, 3:08am UTC](https://discuss.elastic.co/t/possible-problems-in-migration-from-2-4-to-5-x/135812 "2018-06-16T03:08:22Z")

</div>

We’ve recently investigated the pros and cons of upgrading elasticsearch from 2.4 to 5.x on centOS 6.9. Here are some questions I’d like to clarify. Most of them are regarding to whether they are versions compatible, fo…

---

## [Python elasticsearch client "Validation Failed: 1: scrollId is missing;"](https://discuss.elastic.co/t/python-elasticsearch-client-validation-failed-1-scrollid-is-missing/136155)

<div class="topic-metadata">

**Author:** [@niceyeti](https://discuss.elastic.co/u/niceyeti)\
**Replies:** 0\
**Last updated:** [June 16, 2018, 12:09am UTC](https://discuss.elastic.co/t/python-elasticsearch-client-validation-failed-1-scrollid-is-missing/136155 "2018-06-16T00:09:22Z")

</div>

I'm using elasticsearch 5.6.4 and py-elasticsearch client (5,5,2) but the client methods are failing to scroll large result sets (~20k documents). When scan()+scroll() are called, or likewise helpers.scan(), the first re…

---

## [Watcher](https://discuss.elastic.co/t/watcher/136126)

<div class="topic-metadata">

**Author:** [@sekhar1033](https://discuss.elastic.co/u/sekhar1033)\
**Replies:** 6\
**Last updated:** [June 15, 2018, 11:21pm UTC](https://discuss.elastic.co/t/watcher/136126 "2018-06-15T23:21:06Z")

</div>

I have created a new watch in the kibana using UI. After that when I am clicking on watcher tab under management -\> Watcher it throws "Watcher: Error 500 Internal Server Error: An internal server error occurred". How cou…

---

## [Reindexing requires reboot of the server/VPS](https://discuss.elastic.co/t/reindexing-requires-reboot-of-the-server-vps/135343)

<div class="topic-metadata">

**Author:** [@vojtamares](https://discuss.elastic.co/u/vojtamares)\
**Replies:** 1\
**Last updated:** [June 15, 2018, 9:32pm UTC](https://discuss.elastic.co/t/reindexing-requires-reboot-of-the-server-vps/135343 "2018-06-15T21:32:23Z")

</div>

Hi, as the title says my issue is a bit weird as well as confusing. I do not use the "update index" feature - we drop the whole search index and then we create same index with new data again. Since I boot VPS for first…

---

## [Elasticsearch Aliasing a field during search](https://discuss.elastic.co/t/elasticsearch-aliasing-a-field-during-search/136025)

<div class="topic-metadata">

**Author:** [@Saiprasad\_Krishnamur](https://discuss.elastic.co/u/Saiprasad_Krishnamur)\
**Replies:** 3\
**Last updated:** [June 15, 2018, 9:03pm UTC](https://discuss.elastic.co/t/elasticsearch-aliasing-a-field-during-search/136025 "2018-06-15T21:03:10Z")

</div>

0 down vote favorite 1 Using Elasticsearch v 5.X. Jumped into a rather strange requirement and need ideas on approach here. I've got a legacy index with fields F1, F2, F3 (Just for illustration purposes). I want to …

---

## [Xpack basic license terms](https://discuss.elastic.co/t/xpack-basic-license-terms/135706)

<div class="topic-metadata">

**Author:** [@shailesh.nandwana](https://discuss.elastic.co/u/shailesh.nandwana)\
**Replies:** 6\
**Last updated:** [June 15, 2018, 8:54pm UTC](https://discuss.elastic.co/t/xpack-basic-license-terms/135706 "2018-06-15T20:54:40Z")

</div>

Hello, What rights Elasticsearch has if I use xpack plugin with basic license for any of my application for my company. Does Elasticsearch have full rights to use my company name for any of its promotion activity? If y…

---

## [Composite aggregation fails with Cannot replay yet](https://discuss.elastic.co/t/composite-aggregation-fails-with-cannot-replay-yet/135596)

<div class="topic-metadata">

**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\
**Replies:** 1\
**Last updated:** [June 15, 2018, 8:46pm UTC](https://discuss.elastic.co/t/composite-aggregation-fails-with-cannot-replay-yet/135596 "2018-06-15T20:46:31Z")

</div>

Hi, I'm working on an aggregation over an application metrics log. I have got the composite aggregate to work except when I had the section "status\_code", which is a nested aggregation, I get a 500 error with the statu…

---

## [Elastic 6.3.0 Error installing discovery and repository plugins](https://discuss.elastic.co/t/elastic-6-3-0-error-installing-discovery-and-repository-plugins/136018)

<div class="topic-metadata">

**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\
**Replies:** 7\
**Last updated:** [June 15, 2018, 8:44pm UTC](https://discuss.elastic.co/t/elastic-6-3-0-error-installing-discovery-and-repository-plugins/136018 "2018-06-15T20:44:01Z")

</div>

Hello, We've been successfully been able to install discovery 5.5 and 6.2.4 plugins on their respective Elastic Versions. We're using CFTs to install ES and these respective plugins. However, we moved to install 6.3.0 t…

---

## [SQL Query response format](https://discuss.elastic.co/t/sql-query-response-format/136139)

<div class="topic-metadata">

**Author:** [@jurquiza](https://discuss.elastic.co/u/jurquiza)\
**Replies:** 0\
**Last updated:** [June 15, 2018, 8:43pm UTC](https://discuss.elastic.co/t/sql-query-response-format/136139 "2018-06-15T20:43:36Z")

</div>

hi there! I´ve been running some test on kibana with sql queries. I´ve noticed that the only two response options (as far as its shown on the documentation page) are json and txt. Is there a way the get the response as …

---

## ["Machine Learning is unavailable" after upgrading to ES 6.3.0](https://discuss.elastic.co/t/machine-learning-is-unavailable-after-upgrading-to-es-6-3-0/136099)

<div class="topic-metadata">

**Author:** [@mrubin](https://discuss.elastic.co/u/mrubin)\
**Replies:** 1\
**Last updated:** [June 15, 2018, 8:42pm UTC](https://discuss.elastic.co/t/machine-learning-is-unavailable-after-upgrading-to-es-6-3-0/136099 "2018-06-15T20:42:44Z")

</div>

After updating to ES 6.3.0, I get a "Machine Learning: Machine Learning is unavailable" whenever I try to get to the ML page. I saw https://www.elastic.co/guide/en/x-pack/current/ml-rollingupgrade.html and tried to do a …

---

## [Setting up something that will scale](https://discuss.elastic.co/t/setting-up-something-that-will-scale/135990)

<div class="topic-metadata">

**Author:** [@Joe\_Caraccio](https://discuss.elastic.co/u/Joe_Caraccio)\
**Replies:** 1\
**Last updated:** [June 15, 2018, 8:31pm UTC](https://discuss.elastic.co/t/setting-up-something-that-will-scale/135990 "2018-06-15T20:31:43Z")

</div>

Hi Everyone, Just looking for general advice. I am trying to setup a scale able instance on google cloud, where as needed I could automatically spin up new identical instances, and load balance requests towards it. Obvi…

---

## [Inserting a document that already exists. Exception?](https://discuss.elastic.co/t/inserting-a-document-that-already-exists-exception/136084)

<div class="topic-metadata">

**Author:** [@javidr](https://discuss.elastic.co/u/javidr)\
**Replies:** 6\
**Last updated:** [June 15, 2018, 6:33pm UTC](https://discuss.elastic.co/t/inserting-a-document-that-already-exists-exception/136084 "2018-06-15T18:33:44Z")

</div>

Hi I will need to add documents to an elasticsearch index i already have. I want to validate if the document i an adding already exists in this index, and if thats the case, dont add it Is elasticsearch controlling tha…

---

## [Count maximum possible score for query](https://discuss.elastic.co/t/count-maximum-possible-score-for-query/135689)

<div class="topic-metadata">

**Author:** [@lastic](https://discuss.elastic.co/u/lastic)\
**Replies:** 2\
**Last updated:** [June 15, 2018, 4:57pm UTC](https://discuss.elastic.co/t/count-maximum-possible-score-for-query/135689 "2018-06-15T16:57:13Z")

</div>

Hello. Does it is possible to count theoretical possible score for query? I have query with a lot of 'shoulds' with different boost for each should. I see 2 possibilities : stupid : make doc which will always corres…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1649)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1651)
