# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1660

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1661

---

## [Low level REST client for Java revision history?](https://discuss.elastic.co/t/low-level-rest-client-for-java-revision-history/134429)

<div class="topic-metadata">

**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\
**Replies:** 1\
**Last updated:** [June 8, 2018, 10:49am UTC](https://discuss.elastic.co/t/low-level-rest-client-for-java-revision-history/134429 "2018-06-08T10:49:56Z")

</div>

The documentation says "The low-level REST client is subject to the same release cycle as Elasticsearch. Replace the version with the desired client version, first released with 5.0.0-alpha4. There is no relation between…

---

## [Questions about upgrading from 5.6 to 6.x](https://discuss.elastic.co/t/questions-about-upgrading-from-5-6-to-6-x/134372)

<div class="topic-metadata">

**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\
**Replies:** 13\
**Last updated:** [June 8, 2018, 10:26am UTC](https://discuss.elastic.co/t/questions-about-upgrading-from-5-6-to-6-x/134372 "2018-06-08T10:26:39Z")

</div>

Hi! I've created a snapshot following the advice of z0z0, which I found to be simpler to follow and more informative than the official documentation. Having then had a look inside /etc/elasticsearch/backup, I'm assumin…

---

## [Combining Fuzziness (Levenshtein distance) of multiple fields into one](https://discuss.elastic.co/t/combining-fuzziness-levenshtein-distance-of-multiple-fields-into-one/134245)

<div class="topic-metadata">

**Author:** [@DavidEq](https://discuss.elastic.co/u/DavidEq)\
**Replies:** 1\
**Last updated:** [June 8, 2018, 9:08am UTC](https://discuss.elastic.co/t/combining-fuzziness-levenshtein-distance-of-multiple-fields-into-one/134245 "2018-06-08T09:08:15Z")

</div>

Hello, I was googling and reading documentation for hours and still could not figure out... Below data exists "firstname" : "Michael", "lastname" : "Jackson" PROBLEM: "query":"firstname:Michaelaa~ AND lastname:Jack…

---

## [Query with Hyphen (-) at the beginning always returns all documents of the index](https://discuss.elastic.co/t/query-with-hyphen-at-the-beginning-always-returns-all-documents-of-the-index/135115)

<div class="topic-metadata">

**Author:** [@khoiphan](https://discuss.elastic.co/u/khoiphan)\
**Replies:** 0\
**Last updated:** [June 8, 2018, 8:52am UTC](https://discuss.elastic.co/t/query-with-hyphen-at-the-beginning-always-returns-all-documents-of-the-index/135115 "2018-06-08T08:52:44Z")

</div>

Hi all, I have this problem. I have an index (ivy\_task) with mapping and its field (barCode) like this PUT ivy\_task/\_mapping/ElasticTaskInfo { "properties" : { "barCode" : { "type" : "text", "fielddata" : true, …

---

## [Connecting Elastic search with Spring Boot giving error while running](https://discuss.elastic.co/t/connecting-elastic-search-with-spring-boot-giving-error-while-running/135114)

<div class="topic-metadata">

**Author:** [@Archana\_Kumari](https://discuss.elastic.co/u/Archana_Kumari)\
**Replies:** 0\
**Last updated:** [June 8, 2018, 8:47am UTC](https://discuss.elastic.co/t/connecting-elastic-search-with-spring-boot-giving-error-while-running/135114 "2018-06-08T08:47:33Z")

</div>

I am trying to run the Spring boot application with command. java -jar /home/atrium/ElasticSearch/peakviz-0.0.1-SNAPSHOT. But i am getting the below exception:- Exception in thread "main" java.lang.IllegalStateExcepti…

---

## [Multiple types or multiple indexes? Best practices](https://discuss.elastic.co/t/multiple-types-or-multiple-indexes-best-practices/135107)

<div class="topic-metadata">

**Author:** [@baj1984](https://discuss.elastic.co/u/baj1984)\
**Replies:** 1\
**Last updated:** [June 8, 2018, 8:06am UTC](https://discuss.elastic.co/t/multiple-types-or-multiple-indexes-best-practices/135107 "2018-06-08T08:06:45Z")

</div>

Hi, I'm knew to ES and coming from SQL background, so looking for some advice on best practices. My problem: I have multiple buildings that each contain multiple documents specific to only that building. The mapping i…

---

## [Use standard analyzer for specific field in template](https://discuss.elastic.co/t/use-standard-analyzer-for-specific-field-in-template/135105)

<div class="topic-metadata">

**Author:** [@hvarun](https://discuss.elastic.co/u/hvarun)\
**Replies:** 0\
**Last updated:** [June 8, 2018, 7:55am UTC](https://discuss.elastic.co/t/use-standard-analyzer-for-specific-field-in-template/135105 "2018-06-08T07:55:36Z")

</div>

Hi, i am trying to create a custom analyzer for a field messagep in the template to get tokens out of the message. below is my template. i am not able to tokenize the input field. anything extra needs to be done? { "…

---

## [Modifying data to existing documents](https://discuss.elastic.co/t/modifying-data-to-existing-documents/135096)

<div class="topic-metadata">

**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\
**Replies:** 0\
**Last updated:** [June 8, 2018, 7:22am UTC](https://discuss.elastic.co/t/modifying-data-to-existing-documents/135096 "2018-06-08T07:22:29Z")

</div>

What I want try to do given by example: This below is first index PUT /customer/\_doc/1?pretty { "name": "John Doe" } Again, the above will index the specified document into the customer index, with the ID of 1. If …

---

## [Architecture production Elasticsearch](https://discuss.elastic.co/t/architecture-production-elasticsearch/135086)

<div class="topic-metadata">

**Author:** [@br14nb0](https://discuss.elastic.co/u/br14nb0)\
**Replies:** 1\
**Last updated:** [June 8, 2018, 6:55am UTC](https://discuss.elastic.co/t/architecture-production-elasticsearch/135086 "2018-06-08T06:55:09Z")

</div>

I am planning to ingest 2500-3000 EPS per day with three-month retention. I calculated approximately I need 60-80TB for that retention rate. I intend to have 2 Elasticsearch nodes, maybe 3. Do you have any advice or reco…

---

## [Debian (SELKS) Server installation setup](https://discuss.elastic.co/t/debian-selks-server-installation-setup/135094)

<div class="topic-metadata">

**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Replies:** 0\
**Last updated:** [June 8, 2018, 6:49am UTC](https://discuss.elastic.co/t/debian-selks-server-installation-setup/135094 "2018-06-08T06:49:18Z")

</div>

I would need some advice on the following: SELKS 4.0 desktop. Installed on physical server. /etc/network/interface (File settings) auto lo iface lo inet loopback iface eno1 inet static address 10.0.106.61 netmask…

---

## [Completion Suggester with Fuzzy Search Quries](https://discuss.elastic.co/t/completion-suggester-with-fuzzy-search-quries/135093)

<div class="topic-metadata">

**Author:** [@tha\_07](https://discuss.elastic.co/u/tha_07)\
**Replies:** 0\
**Last updated:** [June 8, 2018, 6:41am UTC](https://discuss.elastic.co/t/completion-suggester-with-fuzzy-search-quries/135093 "2018-06-08T06:41:34Z")

</div>

Basically I'm building is a search box with completion suggestion. I'm using my product title field for suggestions. So once the user types in the field, suggestions has to be there and after clicking the search button …

---

## [What's the gradlew command to run integration tests for the x-pack watcher module?](https://discuss.elastic.co/t/whats-the-gradlew-command-to-run-integration-tests-for-the-x-pack-watcher-module/134721)

<div class="topic-metadata">

**Author:** [@adhulipa](https://discuss.elastic.co/u/adhulipa)\
**Replies:** 2\
**Last updated:** [June 8, 2018, 5:54am UTC](https://discuss.elastic.co/t/whats-the-gradlew-command-to-run-integration-tests-for-the-x-pack-watcher-module/134721 "2018-06-08T05:54:38Z")

</div>

I tried running λ ./gradlew x-pack:plugin:watcher:integTest but that doesn't seem to do anything. I'm new to gradle so I'm not sure if I'm doing something wrong.

---

## [Subquery on Elastic Search](https://discuss.elastic.co/t/subquery-on-elastic-search/135084)

<div class="topic-metadata">

**Author:** [@ranavivek083](https://discuss.elastic.co/u/ranavivek083)\
**Replies:** 0\
**Last updated:** [June 8, 2018, 5:35am UTC](https://discuss.elastic.co/t/subquery-on-elastic-search/135084 "2018-06-08T05:35:45Z")

</div>

Hi, all! I am new to ElasticSearch. I have been translating SQL queries to ElasticSearch queries. I encountered a SQL query that I'm not able to translate. The query is as follows. SELECT subtable.f\_date, ROUND(sum(sub…

---

## [How to reindex without Reindex API](https://discuss.elastic.co/t/how-to-reindex-without-reindex-api/135074)

<div class="topic-metadata">

**Author:** [@Sapmp1155](https://discuss.elastic.co/u/Sapmp1155)\
**Replies:** 1\
**Last updated:** [June 8, 2018, 4:33am UTC](https://discuss.elastic.co/t/how-to-reindex-without-reindex-api/135074 "2018-06-08T04:33:28Z")

</div>

To reduce the number of shards, I changed the configuration file. Now my elasticsearch creates a new index like \[indexname\]-2018.06. Next, I need to reindex the existing indices to consolidate into monthly indices. It l…

---

## [Is anyone aware if any opensource or commercials UEBA solution](https://discuss.elastic.co/t/is-anyone-aware-if-any-opensource-or-commercials-ueba-solution/135077)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 0\
**Last updated:** [June 8, 2018, 4:03am UTC](https://discuss.elastic.co/t/is-anyone-aware-if-any-opensource-or-commercials-ueba-solution/135077 "2018-06-08T04:03:24Z")

</div>

Hi Team, Is anyone aware if any open source or commercials UEBA \[User and Entity Behaviour Analytic\] solution can be integrated with Elasticsearch.

---

## [How to achieve File Integrity Monitoing with elastic Search](https://discuss.elastic.co/t/how-to-achieve-file-integrity-monitoing-with-elastic-search/129841)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 2\
**Last updated:** [June 8, 2018, 4:01am UTC](https://discuss.elastic.co/t/how-to-achieve-file-integrity-monitoing-with-elastic-search/129841 "2018-06-08T04:01:20Z")

</div>

Hi Team, Can we achieve File Integrity Monitoring with elastic stack any open source endpoint tool you are aware of?

---

## [Synonym token filter feature is time-consuming when synonym dict is big](https://discuss.elastic.co/t/synonym-token-filter-feature-is-time-consuming-when-synonym-dict-is-big/135075)

<div class="topic-metadata">

**Author:** [@aimerlee860](https://discuss.elastic.co/u/aimerlee860)\
**Replies:** 0\
**Last updated:** [June 8, 2018, 3:40am UTC](https://discuss.elastic.co/t/synonym-token-filter-feature-is-time-consuming-when-synonym-dict-is-big/135075 "2018-06-08T03:40:09Z")

</div>

Elasticsearch Version: 5.4.2 I try to create a index, some of fields use a self-developed analyzer, and the analyzer use a big list for tokenizer and synonym. I find that it will take a long time like an hour to finish…

---

## [Call command "curator\_cli --help" get error message](https://discuss.elastic.co/t/call-command-curator-cli-help-get-error-message/134948)

<div class="topic-metadata">

**Author:** [@wuwenjie\_cn](https://discuss.elastic.co/u/wuwenjie_cn)\
**Replies:** 2\
**Last updated:** [June 8, 2018, 3:20am UTC](https://discuss.elastic.co/t/call-command-curator-cli-help-get-error-message/134948 "2018-06-08T03:20:50Z")

</div>

\[root@FTJF-ELK-TEST ~\]# curator --help Traceback (most recent call last): File "/usr/local/python2.7/bin/curator", line 7, in \<module\> from curator.cli import cli File "/usr/local/python2.7/lib/python2.7/site-pac…

---

## [Status is red. \_plugins/head return 404](https://discuss.elastic.co/t/status-is-red-plugins-head-return-404/134514)

<div class="topic-metadata">

**Author:** [@Sapmp1155](https://discuss.elastic.co/u/Sapmp1155)\
**Replies:** 3\
**Last updated:** [June 5, 2018, 5:13am UTC](https://discuss.elastic.co/t/status-is-red-plugins-head-return-404/134514 "2018-06-05T05:13:05Z")

</div>

The elasticsearch process in prod currently has high CPU utilization. Would you help me understand what is going on? http://sarvername:9200/\_plugins/head/ Returns 404 http://sarvername:9200/\_cluster/health?pretty=true …

---

## [Node startup failed after one disk fails](https://discuss.elastic.co/t/node-startup-failed-after-one-disk-fails/135070)

<div class="topic-metadata">

**Author:** [@no\_jihun](https://discuss.elastic.co/u/no_jihun)\
**Replies:** 0\
**Last updated:** [June 8, 2018, 2:06am UTC](https://discuss.elastic.co/t/node-startup-failed-after-one-disk-fails/135070 "2018-06-08T02:06:39Z")

</div>

I have 6 data nodes and each nodes have 6disks with path.data\[,,,\] configuration. One disk of a node failed and cluster got RED. java.nio.file.FileSystemException: /data5/elastic\_jpl/nodes/0/indices/IMwTL-ILTqKAC4Bsom7…

---

## [How to query for the most current timestamp](https://discuss.elastic.co/t/how-to-query-for-the-most-current-timestamp/134746)

<div class="topic-metadata">

**Author:** [@yks](https://discuss.elastic.co/u/yks)\
**Replies:** 6\
**Last updated:** [June 8, 2018, 1:33am UTC](https://discuss.elastic.co/t/how-to-query-for-the-most-current-timestamp/134746 "2018-06-08T01:33:00Z")

</div>

Hi, Would like to know how to query for the most current timestamp and display on dashboard. Best regards

---

## [Authorization via Google account/Google Groups?](https://discuss.elastic.co/t/authorization-via-google-account-google-groups/135041)

<div class="topic-metadata">

**Author:** [@melissachang](https://discuss.elastic.co/u/melissachang)\
**Replies:** 1\
**Last updated:** [June 7, 2018, 11:24pm UTC](https://discuss.elastic.co/t/authorization-via-google-account-google-groups/135041 "2018-06-07T23:24:33Z")

</div>

Is it possible to: Authenticate that user is Google user U Limit documents user U can access based on membership in a Google Group

---

## [Monitoring indices take ~75% of request number](https://discuss.elastic.co/t/monitoring-indices-take-75-of-request-number/134931)

<div class="topic-metadata">

**Author:** [@merlinv](https://discuss.elastic.co/u/merlinv)\
**Replies:** 1\
**Last updated:** [June 7, 2018, 11:14pm UTC](https://discuss.elastic.co/t/monitoring-indices-take-75-of-request-number/134931 "2018-06-07T23:14:08Z")

</div>

I'm using Elastic Cloud service and realize that there are many system indices are running together with my index. Does it slow down search speed to my search indices or have any affect to my instance since search rate …

---

## [Roles in a bucket](https://discuss.elastic.co/t/roles-in-a-bucket/134953)

<div class="topic-metadata">

**Author:** [@remo](https://discuss.elastic.co/u/remo)\
**Replies:** 1\
**Last updated:** [June 7, 2018, 10:43pm UTC](https://discuss.elastic.co/t/roles-in-a-bucket/134953 "2018-06-07T22:43:48Z")

</div>

I am trying to create a bucket and add all the roles i have created in the bucket and assign this bucket to the user instead of assigning the roles separately to the user. If I assign roles to user by editing the user p…

---

## [Curator - DeleteSnapshots - Not fully functional](https://discuss.elastic.co/t/curator-deletesnapshots-not-fully-functional/134710)

<div class="topic-metadata">

**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Replies:** 12\
**Last updated:** [June 7, 2018, 9:45pm UTC](https://discuss.elastic.co/t/curator-deletesnapshots-not-fully-functional/134710 "2018-06-07T21:45:32Z")

</div>

Environment: Curator 5.5.1, Elastic Search 6.2.1 Trying to use delete\_snapshots actions using curator, but it fails with below error always 2018-06-05 23:26:03,003 DEBUG curator.utils iterate\_filter…

---

## [Stats on disk space used by each field in an index?](https://discuss.elastic.co/t/stats-on-disk-space-used-by-each-field-in-an-index/135055)

<div class="topic-metadata">

**Author:** [@rezecib](https://discuss.elastic.co/u/rezecib)\
**Replies:** 0\
**Last updated:** [June 7, 2018, 9:28pm UTC](https://discuss.elastic.co/t/stats-on-disk-space-used-by-each-field-in-an-index/135055 "2018-06-07T21:28:25Z")

</div>

I would like to know the impact of various fields in my index on the overall storage required, to better direct efforts to optimize my index mapping. My understanding is that each field has its own set of inverted indice…

---

## [Multiple Node Cluster through Docker](https://discuss.elastic.co/t/multiple-node-cluster-through-docker/135050)

<div class="topic-metadata">

**Author:** [@pavw](https://discuss.elastic.co/u/pavw)\
**Replies:** 0\
**Last updated:** [June 7, 2018, 7:41pm UTC](https://discuss.elastic.co/t/multiple-node-cluster-through-docker/135050 "2018-06-07T19:41:40Z")

</div>

I want an ES cluster to run on multiple VMs using docker-compose and I'm not sure if there's anything special that I need to do with the docker-compose.yml file so that this is set up correctly? I know that I need to add…

---

## [License and kibana dashboards deleted on cluster restart](https://discuss.elastic.co/t/license-and-kibana-dashboards-deleted-on-cluster-restart/134975)

<div class="topic-metadata">

**Author:** [@hokiegeek2](https://discuss.elastic.co/u/hokiegeek2)\
**Replies:** 2\
**Last updated:** [June 7, 2018, 7:31pm UTC](https://discuss.elastic.co/t/license-and-kibana-dashboards-deleted-on-cluster-restart/134975 "2018-06-07T19:31:38Z")

</div>

Hi Everyone, I am running a Elasticsearch cluster deployed in Docker containers. When I restarted the cluster the Elasticsearch license appeared to be deleted along with all of the Kibana dashboards. Anyone know why thi…

---

## [Elasticsearch Vs Influxdb](https://discuss.elastic.co/t/elasticsearch-vs-influxdb/135011)

<div class="topic-metadata">

**Author:** [@annk](https://discuss.elastic.co/u/annk)\
**Replies:** 1\
**Last updated:** [June 7, 2018, 6:17pm UTC](https://discuss.elastic.co/t/elasticsearch-vs-influxdb/135011 "2018-06-07T18:17:45Z")

</div>

Hi, I am looking for more info on benefits of using elasticsearhc for metric data instead of a time series database like influxdb . Are there any performance analysis done on this ?

---

## [Trying to delete a tag](https://discuss.elastic.co/t/trying-to-delete-a-tag/135034)

<div class="topic-metadata">

**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\
**Replies:** 0\
**Last updated:** [June 7, 2018, 5:28pm UTC](https://discuss.elastic.co/t/trying-to-delete-a-tag/135034 "2018-06-07T17:28:18Z")

</div>

I was looking for a way to delete a tag from docs in an index and I found the following two discussions on github I tried the suggestion in the first discussion: And then I tried the suggestion in the second dis…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1659)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1661)
