# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1656

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1657

---

## [Can we have views in Elastic Search?](https://discuss.elastic.co/t/can-we-have-views-in-elastic-search/135392)

<div class="topic-metadata">

**Author:** [@Suryatejreddy](https://discuss.elastic.co/u/Suryatejreddy)\
**Replies:** 3\
**Last updated:** [June 12, 2018, 4:20pm UTC](https://discuss.elastic.co/t/can-we-have-views-in-elastic-search/135392 "2018-06-12T16:20:10Z")

</div>

How can we implement views in Elastic Search? like SQL views we have in RDBMS. Is there any query mechanism to implement this? Thanks, Surya

---

## [How to avoid false positive \[Updated\]](https://discuss.elastic.co/t/how-to-avoid-false-positive-updated/135006)

<div class="topic-metadata">

**Author:** [@genPz01](https://discuss.elastic.co/u/genPz01)\
**Replies:** 3\
**Last updated:** [June 12, 2018, 4:04pm UTC](https://discuss.elastic.co/t/how-to-avoid-false-positive-updated/135006 "2018-06-12T16:04:38Z")

</div>

Hi, Elastic.co claims that ML reduces false positive but doesn't tell how. To explain my question let's consider this scenario: My aim is to monitor -using ML and ELK stack- a Java application installed on a Linux Hos…

---

## [Curator\_cli show\_indices gives no output](https://discuss.elastic.co/t/curator-cli-show-indices-gives-no-output/135519)

<div class="topic-metadata">

**Author:** [@jarnold](https://discuss.elastic.co/u/jarnold)\
**Replies:** 7\
**Last updated:** [June 12, 2018, 3:40pm UTC](https://discuss.elastic.co/t/curator-cli-show-indices-gives-no-output/135519 "2018-06-12T15:40:26Z")

</div>

Just trying out creator, so far I've installed the RPM on my elasticsearch node & tried showing my indices which doesn't give any output. I've tried the following commands; \[root@elastic01 ~\]# curator\_cli --host 127.0.0…

---

## [How to visualize search query´s](https://discuss.elastic.co/t/how-to-visualize-search-query-s/135560)

<div class="topic-metadata">

**Author:** [@Florian](https://discuss.elastic.co/u/Florian)\
**Replies:** 0\
**Last updated:** [June 12, 2018, 2:45pm UTC](https://discuss.elastic.co/t/how-to-visualize-search-query-s/135560 "2018-06-12T14:45:16Z")

</div>

Hi, i´m new to Elasticsearch and currently try to get into Elastic by trying out some stuff with Elastic, Kibana and x-pack-basic on my windows machine. So use Kibana to send my requests, build some indexes and visualiz…

---

## [Elasticsearch keeps indexing nested fields as text](https://discuss.elastic.co/t/elasticsearch-keeps-indexing-nested-fields-as-text/135543)

<div class="topic-metadata">

**Author:** [@Mugen](https://discuss.elastic.co/u/Mugen)\
**Replies:** 2\
**Last updated:** [June 12, 2018, 3:03pm UTC](https://discuss.elastic.co/t/elasticsearch-keeps-indexing-nested-fields-as-text/135543 "2018-06-12T15:03:35Z")

</div>

I've got some terribly nested log messages in JSON format. Somehow elasticsearch keeps mapping one of the field as text eventough it contains several subfields. Is there something wrong with my mapping ? Message in Kiba…

---

## [Whats the optimal (Ram,CPUs, disk space) to avoid ES crashing?](https://discuss.elastic.co/t/whats-the-optimal-ram-cpus-disk-space-to-avoid-es-crashing/135562)

<div class="topic-metadata">

**Author:** [@Moka](https://discuss.elastic.co/u/Moka)\
**Replies:** 0\
**Last updated:** [June 12, 2018, 2:52pm UTC](https://discuss.elastic.co/t/whats-the-optimal-ram-cpus-disk-space-to-avoid-es-crashing/135562 "2018-06-12T14:52:42Z")

</div>

Hello, I'm injecting 100000 hits every 30 seconds to my ES index.I have created a dashboard in kibana with timelion to visualize the evolution of my data injection over time. (My goal is to visualize my data after a ye…

---

## [Unique return like GROUP BY](https://discuss.elastic.co/t/unique-return-like-group-by/135537)

<div class="topic-metadata">

**Author:** [@Stephan\_Daratha](https://discuss.elastic.co/u/Stephan_Daratha)\
**Replies:** 2\
**Last updated:** [June 12, 2018, 2:32pm UTC](https://discuss.elastic.co/t/unique-return-like-group-by/135537 "2018-06-12T14:32:17Z")

</div>

Hi there, I thought it would be easy. But I failed. We have an index with objects like {'objectNumber: '123', 'persons':4, 'uniqueKey': 'abc'} {'objectNumber: '456', 'persons':2, 'uniqueKey': 'def'} {'objectNumber: …

---

## [What kind of nodes counted for x-pack charge?](https://discuss.elastic.co/t/what-kind-of-nodes-counted-for-x-pack-charge/135544)

<div class="topic-metadata">

**Author:** [@br14nb0](https://discuss.elastic.co/u/br14nb0)\
**Replies:** 6\
**Last updated:** [June 12, 2018, 1:46pm UTC](https://discuss.elastic.co/t/what-kind-of-nodes-counted-for-x-pack-charge/135544 "2018-06-12T13:46:18Z")

</div>

Does Dedicated only master node count for X-pack charge node ?

---

## [Choosing version](https://discuss.elastic.co/t/choosing-version/135531)

<div class="topic-metadata">

**Author:** [@balasun2](https://discuss.elastic.co/u/balasun2)\
**Replies:** 4\
**Last updated:** [June 12, 2018, 1:40pm UTC](https://discuss.elastic.co/t/choosing-version/135531 "2018-06-12T13:40:48Z")

</div>

Hello All, Am new to this platform, In my project we are having Java 1.6 as Production environment, Now planning to migrate it to Java 1.7\_55 So now the requirement came to upgrade the ELK setup as well. When i did sma…

---

## [Get correct disk usage stats ES API vs. x-pack monitoring](https://discuss.elastic.co/t/get-correct-disk-usage-stats-es-api-vs-x-pack-monitoring/135522)

<div class="topic-metadata">

**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\
**Replies:** 1\
**Last updated:** [June 12, 2018, 1:29pm UTC](https://discuss.elastic.co/t/get-correct-disk-usage-stats-es-api-vs-x-pack-monitoring/135522 "2018-06-12T13:29:25Z")

</div>

Hello all, I'm trying to improve my Elasticsearch monitoring and would need to be able to reliably query the total free disk space (that is available for Elasticsearch) of the cluster. In Kibana \> Monitoring I see U…

---

## [Sort not working with complex query](https://discuss.elastic.co/t/sort-not-working-with-complex-query/135452)

<div class="topic-metadata">

**Author:** [@joropito](https://discuss.elastic.co/u/joropito)\
**Replies:** 4\
**Last updated:** [June 12, 2018, 1:26pm UTC](https://discuss.elastic.co/t/sort-not-working-with-complex-query/135452 "2018-06-12T13:26:17Z")

</div>

I'm doing a complex query and sort returns the same results. Can anybody help me? The query works fine returning the correct values but with or without sort option the results are the same. Here's the search query { …

---

## [Consult X-pack Elasticsearch cluster production model](https://discuss.elastic.co/t/consult-x-pack-elasticsearch-cluster-production-model/135359)

<div class="topic-metadata">

**Author:** [@br14nb0](https://discuss.elastic.co/u/br14nb0)\
**Replies:** 3\
**Last updated:** [June 12, 2018, 1:22pm UTC](https://discuss.elastic.co/t/consult-x-pack-elasticsearch-cluster-production-model/135359 "2018-06-12T13:22:16Z")

</div>

I intend to deploy a cluster with X-pack consisting of: eligible master-data node 1: 32 Gb RAM, 16 core cpu, SSD 1Tb eligible master-data node 2: 32 Gb RAM, 16 core cpu, SSD 1Tb The EPS is approximately 2500 for 250 l…

---

## [Machine learning tools or plugin for elasticsearch?](https://discuss.elastic.co/t/machine-learning-tools-or-plugin-for-elasticsearch/135301)

<div class="topic-metadata">

**Author:** [@komal\_mittal](https://discuss.elastic.co/u/komal_mittal)\
**Replies:** 3\
**Last updated:** [June 12, 2018, 12:34pm UTC](https://discuss.elastic.co/t/machine-learning-tools-or-plugin-for-elasticsearch/135301 "2018-06-12T12:34:13Z")

</div>

can somebody tell me about machine learning tools or plugin for elasticsearch which are open source and free??

---

## [Scale an elasticsearch+xpack single node to a 3 node cluster](https://discuss.elastic.co/t/scale-an-elasticsearch-xpack-single-node-to-a-3-node-cluster/135533)

<div class="topic-metadata">

**Author:** [@yossib](https://discuss.elastic.co/u/yossib)\
**Replies:** 0\
**Last updated:** [June 12, 2018, 12:26pm UTC](https://discuss.elastic.co/t/scale-an-elasticsearch-xpack-single-node-to-a-3-node-cluster/135533 "2018-06-12T12:26:43Z")

</div>

Hi all, W have a single ubuntu 16 machine running elasticsearch (+logstash +kibana) with x-pack enabled, we want to add 2 more machines to this cluster so all will act as masters. What is the procedure to do this? I w…

---

## [ELK restarts fails with exception Status changed from red to red](https://discuss.elastic.co/t/elk-restarts-fails-with-exception-status-changed-from-red-to-red/135354)

<div class="topic-metadata">

**Author:** [@yeruvass](https://discuss.elastic.co/u/yeruvass)\
**Replies:** 0\
**Last updated:** [June 11, 2018, 11:43am UTC](https://discuss.elastic.co/t/elk-restarts-fails-with-exception-status-changed-from-red-to-red/135354 "2018-06-11T11:43:40Z")

</div>

Hi Team, We are using ELK 2.4.1 and deployed HA mode with 3 instances. Every two hours elasticsearch is restarting and getting below exception observed. Elasticsearch api:- { "name" : "node-10.10.0.12", "cluster\_na…

---

## [Grok pattern to insert log files into Elasticsearch through Filebeat](https://discuss.elastic.co/t/grok-pattern-to-insert-log-files-into-elasticsearch-through-filebeat/135507)

<div class="topic-metadata">

**Author:** [@kahoni](https://discuss.elastic.co/u/kahoni)\
**Replies:** 0\
**Last updated:** [June 12, 2018, 10:04am UTC](https://discuss.elastic.co/t/grok-pattern-to-insert-log-files-into-elasticsearch-through-filebeat/135507 "2018-06-12T10:04:05Z")

</div>

Hi everybody, i'm new in the elasticsearch community and I would like your help on something I'm struggeling with. My goal is to send huge quantity of log files to Elasticsearch using Filebeat. In order to do that I ne…

---

## [\_id field duplication after data copy to new index](https://discuss.elastic.co/t/id-field-duplication-after-data-copy-to-new-index/135497)

<div class="topic-metadata">

**Author:** [@hardik\_bhalodia](https://discuss.elastic.co/u/hardik_bhalodia)\
**Replies:** 0\
**Last updated:** [June 12, 2018, 9:44am UTC](https://discuss.elastic.co/t/id-field-duplication-after-data-copy-to-new-index/135497 "2018-06-12T09:44:42Z")

</div>

Hi Community We have one index with documents. We are planning to copy these documents to new index. But we are worried about \_id field. Old index \_id will be copied as it is to new index but what will happen when new…

---

## [Relocation of shards didn't happen as expected](https://discuss.elastic.co/t/relocation-of-shards-didnt-happen-as-expected/135490)

<div class="topic-metadata">

**Author:** [@Vikrant\_Aggarwal](https://discuss.elastic.co/u/Vikrant_Aggarwal)\
**Replies:** 1\
**Last updated:** [June 12, 2018, 9:02am UTC](https://discuss.elastic.co/t/relocation-of-shards-didnt-happen-as-expected/135490 "2018-06-12T09:02:28Z")

</div>

I am following the below link to understand the ES index roll operation. My setup consists of following nodes: 1 client node 3 master nodes 3 data nodes Only change which i have done is relocating the active-logs-1…

---

## [Generic type not support in ES?](https://discuss.elastic.co/t/generic-type-not-support-in-es/135487)

<div class="topic-metadata">

**Author:** [@songtianyi](https://discuss.elastic.co/u/songtianyi)\
**Replies:** 0\
**Last updated:** [June 12, 2018, 8:54am UTC](https://discuss.elastic.co/t/generic-type-not-support-in-es/135487 "2018-06-12T08:54:38Z")

</div>

The mongodb saved java object \_class types, but es not, es will save it as LinkedHashMap which is a disaster for deserializing it after querying from es \[image\]

---

## [Term query retrieved not matched document](https://discuss.elastic.co/t/term-query-retrieved-not-matched-document/135469)

<div class="topic-metadata">

**Author:** [@z3ronp](https://discuss.elastic.co/u/z3ronp)\
**Replies:** 0\
**Last updated:** [June 12, 2018, 7:02am UTC](https://discuss.elastic.co/t/term-query-retrieved-not-matched-document/135469 "2018-06-12T07:02:12Z")

</div>

with following query dsl : { "query": { "bool": { "must": \[ { "term": { "content\_id": "227524474579977216" } }, { "term": { "problem\_type": 22 } } \] } } } but retrieved document ' s problem\_type is 85, not match the…

---

## [Curator delete\_indices fail](https://discuss.elastic.co/t/curator-delete-indices-fail/135365)

<div class="topic-metadata">

**Author:** [@pollux](https://discuss.elastic.co/u/pollux)\
**Replies:** 5\
**Last updated:** [June 12, 2018, 7:53am UTC](https://discuss.elastic.co/t/curator-delete-indices-fail/135365 "2018-06-12T07:53:53Z")

</div>

Hi, I'm aware of this topic: Curator delete\_indices. \<type 'exceptions.KeyError'\>: 'indices' Curator delete\_indices Curator doesn't delete indices I'm using ES 6.2.4 ans curator 5.5.4 My config.yml is: client: ho…

---

## [Set/Create field with query](https://discuss.elastic.co/t/set-create-field-with-query/133016)

<div class="topic-metadata">

**Author:** [@skaldenmet](https://discuss.elastic.co/u/skaldenmet)\
**Replies:** 1\
**Last updated:** [June 12, 2018, 7:53am UTC](https://discuss.elastic.co/t/set-create-field-with-query/133016 "2018-06-12T07:53:32Z")

</div>

Hey, I am using the low level library in python to query all documents with a specific timestamp and want to add a new field to this documents with "script". However I cannot get it working. I just get the error: Synta…

---

## [Installing x-pack for elasticsearch with a proxy authentification problem](https://discuss.elastic.co/t/installing-x-pack-for-elasticsearch-with-a-proxy-authentification-problem/135371)

<div class="topic-metadata">

**Author:** [@Paul\_Goluche](https://discuss.elastic.co/u/Paul_Goluche)\
**Replies:** 5\
**Last updated:** [June 12, 2018, 7:40am UTC](https://discuss.elastic.co/t/installing-x-pack-for-elasticsearch-with-a-proxy-authentification-problem/135371 "2018-06-12T07:40:16Z")

</div>

Hi, I've been trying to install x-pack with a proxy on Elasticsearch for a while now and i've been having the following error when i try : I'm using a proxy and the line we can find in the elasticsearch documentation …

---

## [Linux OS : Failed to create native process factories for Machine Learning](https://discuss.elastic.co/t/linux-os-failed-to-create-native-process-factories-for-machine-learning/134758)

<div class="topic-metadata">

**Author:** [@bharath.krishn2](https://discuss.elastic.co/u/bharath.krishn2)\
**Replies:** 4\
**Last updated:** [June 12, 2018, 7:08am UTC](https://discuss.elastic.co/t/linux-os-failed-to-create-native-process-factories-for-machine-learning/134758 "2018-06-12T07:08:02Z")

</div>

I've installed X-Pack plugin for elastic search. When I try to start the elastic search, I'm getting the below exception. I'm using it in linux OS. Please help me solving it \[2018-06-06T10:09:54,757\]\[WARN \]\[o.e.b.Ela…

---

## [Match query influenced by #shards](https://discuss.elastic.co/t/match-query-influenced-by-shards/135461)

<div class="topic-metadata">

**Author:** [@bert\_vervaele](https://discuss.elastic.co/u/bert_vervaele)\
**Replies:** 3\
**Last updated:** [June 12, 2018, 7:04am UTC](https://discuss.elastic.co/t/match-query-influenced-by-shards/135461 "2018-06-12T07:04:47Z")

</div>

Hi, I have a unit test that puts 10 object in Elastic and then uses a bool must match query to find certain results. I wrote the test when we used 7shards/index. Now we only use 3 and the test fails. Can someone expl…

---

## [Java 9 Dependency](https://discuss.elastic.co/t/java-9-dependency/135214)

<div class="topic-metadata">

**Author:** [@albendz](https://discuss.elastic.co/u/albendz)\
**Replies:** 2\
**Last updated:** [June 12, 2018, 6:30am UTC](https://discuss.elastic.co/t/java-9-dependency/135214 "2018-06-12T06:30:19Z")

</div>

I am trying to set up my development environment to contribute to Elasticsearch. I have forked the repo, cloned it to my machine, and have run the 'idea' target with gradle. When I run './gradlew clean build' I see this …

---

## [Java TransportClient: Number of threads](https://discuss.elastic.co/t/java-transportclient-number-of-threads/135462)

<div class="topic-metadata">

**Author:** [@Jul](https://discuss.elastic.co/u/Jul)\
**Replies:** 0\
**Last updated:** [June 12, 2018, 6:21am UTC](https://discuss.elastic.co/t/java-transportclient-number-of-threads/135462 "2018-06-12T06:21:16Z")

</div>

Hey there, I'm using the Java TransportClient in my application and I've noticed that one instance of my application creates a lot of threads to communicate with Elasticsearch: \[screenshot\_threads\_es2\] I noticed that …

---

## [How to fix seccomp unavailable exception of syscall filter](https://discuss.elastic.co/t/how-to-fix-seccomp-unavailable-exception-of-syscall-filter/135456)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 0\
**Last updated:** [June 12, 2018, 4:50am UTC](https://discuss.elastic.co/t/how-to-fix-seccomp-unavailable-exception-of-syscall-filter/135456 "2018-06-12T04:50:28Z")

</div>

Hi, I am trying out ELK GA 6.2.4. My OS is centos-release-6-6.el6.centos.12.2.x86\_64. I have configured basic configurations in elasticsearch.yml. When I try to start elasticsearch, I am getting the below exception; \[…

---

## [Software RAID0 vs JBOD](https://discuss.elastic.co/t/software-raid0-vs-jbod/135455)

<div class="topic-metadata">

**Author:** [@Ali\_Nazemian](https://discuss.elastic.co/u/Ali_Nazemian)\
**Replies:** 0\
**Last updated:** [June 12, 2018, 4:40am UTC](https://discuss.elastic.co/t/software-raid0-vs-jbod/135455 "2018-06-12T04:40:17Z")

</div>

Hi, I have found multiple articles regarding Elasticsearch to use RAID0 for big Elasticsearch cluster rather than JBOD. I was wondering if it is recommended to use Software RAID0. We are running ES cluster on the cloud …

---

## [\_update\_by\_query - Update with match criteria in other index](https://discuss.elastic.co/t/update-by-query-update-with-match-criteria-in-other-index/135450)

<div class="topic-metadata">

**Author:** [@lyteh](https://discuss.elastic.co/u/lyteh)\
**Replies:** 0\
**Last updated:** [June 12, 2018, 2:50am UTC](https://discuss.elastic.co/t/update-by-query-update-with-match-criteria-in-other-index/135450 "2018-06-12T02:50:22Z")

</div>

I trying to loop thrus a single index (eg: userprofiles) and update the single field (eg: user\_type) if the userprofiles.NAME is exist in other index (eg: badlistedusers) Can "\_update\_by\_query" API do that? userprofile…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1655)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1657)
