# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1670

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1671

---

## [Elasticsearch illegal argument exception](https://discuss.elastic.co/t/elasticsearch-illegal-argument-exception/134028)

<div class="topic-metadata">

**Author:** [@clash\_of\_clanss](https://discuss.elastic.co/u/clash_of_clanss)\
**Replies:** 0\
**Last updated:** [May 31, 2018, 10:49am UTC](https://discuss.elastic.co/t/elasticsearch-illegal-argument-exception/134028 "2018-05-31T10:49:18Z")

</div>

Hi, I am new to elasticsearch concept. I am using ELK (Elasticsearch,Logstash,kibana). Logstash Config input { file { path =\> "test.log" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } filter { g…

---

## [Elasticsearch and Kibana not working in browser](https://discuss.elastic.co/t/elasticsearch-and-kibana-not-working-in-browser/133856)

<div class="topic-metadata">

**Author:** [@kishore123](https://discuss.elastic.co/u/kishore123)\
**Replies:** 3\
**Last updated:** [May 31, 2018, 10:27am UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-not-working-in-browser/133856 "2018-05-31T10:27:46Z")

</div>

Both working fine when checked using terminal but not connecting in browser. Both shows: This site can’t be reached

---

## [How to model data?](https://discuss.elastic.co/t/how-to-model-data/133687)

<div class="topic-metadata">

**Author:** [@hym](https://discuss.elastic.co/u/hym)\
**Replies:** 5\
**Last updated:** [May 31, 2018, 10:20am UTC](https://discuss.elastic.co/t/how-to-model-data/133687 "2018-05-31T10:20:04Z")

</div>

Hi, I have an index in which I am trying to have some fields translated in different languages: which approach you think is better: first approach: { "field1": { "en": "book", "de": "buch", "fr": "livre" }, "fie…

---

## [Elasticsearch node is failing to get started](https://discuss.elastic.co/t/elasticsearch-node-is-failing-to-get-started/133682)

<div class="topic-metadata">

**Author:** [@Mrin](https://discuss.elastic.co/u/Mrin)\
**Replies:** 1\
**Last updated:** [May 31, 2018, 10:09am UTC](https://discuss.elastic.co/t/elasticsearch-node-is-failing-to-get-started/133682 "2018-05-31T10:09:11Z")

</div>

I was using ES 5.4.3 version and it was running smoothly with respective Kibana and logstash, until I found the Elasticsearch node is failing to start and showing below error message (attached). \[image\] How to resolve …

---

## [Elasticsearch timeout issues](https://discuss.elastic.co/t/elasticsearch-timeout-issues/134011)

<div class="topic-metadata">

**Author:** [@ishantanu](https://discuss.elastic.co/u/ishantanu)\
**Replies:** 4\
**Last updated:** [May 31, 2018, 10:05am UTC](https://discuss.elastic.co/t/elasticsearch-timeout-issues/134011 "2018-05-31T10:05:32Z")

</div>

Hi, I am repeatedly facing timeout issues while visualizing data ki Kibana. Here are the logs I saw when the timeout used to occur: \[2018-05-31T09:05:08,785\]\[DEBUG\]\[o.e.a.a.c.n.s.TransportNodesStatsAction\] \[GXT24Jx\] f…

---

## [Path to directory where to store the data](https://discuss.elastic.co/t/path-to-directory-where-to-store-the-data/133874)

<div class="topic-metadata">

**Author:** [@babar](https://discuss.elastic.co/u/babar)\
**Replies:** 3\
**Last updated:** [May 31, 2018, 9:44am UTC](https://discuss.elastic.co/t/path-to-directory-where-to-store-the-data/133874 "2018-05-31T09:44:34Z")

</div>

Whenever I change the default path of data and logs to another location then I face the below problem: \[elastic@elsqw1 elastic\]$ systemctl status elasticsearch.service â elasticsearch.service - Elasticsearch Loaded: l…

---

## [Question about elasitcsearch plugin license](https://discuss.elastic.co/t/question-about-elasitcsearch-plugin-license/133986)

<div class="topic-metadata">

**Author:** [@jjsuway](https://discuss.elastic.co/u/jjsuway)\
**Replies:** 1\
**Last updated:** [May 31, 2018, 8:21am UTC](https://discuss.elastic.co/t/question-about-elasitcsearch-plugin-license/133986 "2018-05-31T08:21:51Z")

</div>

I am developing the our solution by using python 3.6. I have tried to use elasitcsearch with mecab plugin for commercial purpose. The elasticsearch license is apache 2.0 The license of mecab plugin is the apache 2.0…

---

## [Getting CPU spikes because of ElasticSearch](https://discuss.elastic.co/t/getting-cpu-spikes-because-of-elasticsearch/133998)

<div class="topic-metadata">

**Author:** [@yoga-sara](https://discuss.elastic.co/u/yoga-sara)\
**Replies:** 0\
**Last updated:** [May 31, 2018, 8:13am UTC](https://discuss.elastic.co/t/getting-cpu-spikes-because-of-elasticsearch/133998 "2018-05-31T08:13:52Z")

</div>

I have my ELK setup like Filebeat =\> Logstash =\> Elasticsearch(single cluster with 1 node) =\> Kibana My allocated memory as followed, Logstash - 1gb Elasticsearch - 9gb I have added 8 CPU for this machine.My log…

---

## [Elasticsearch, how to delete the data in the index by date](https://discuss.elastic.co/t/elasticsearch-how-to-delete-the-data-in-the-index-by-date/133991)

<div class="topic-metadata">

**Author:** [@wuwenjie\_cn](https://discuss.elastic.co/u/wuwenjie_cn)\
**Replies:** 0\
**Last updated:** [May 31, 2018, 7:32am UTC](https://discuss.elastic.co/t/elasticsearch-how-to-delete-the-data-in-the-index-by-date/133991 "2018-05-31T07:32:47Z")

</div>

Created in the elasticsearch named: java\_log index, there are 2017-01 to 2018-05 data, want to delete the 2017 data inside the index, while the index itself is not deleted, how to achieve?

---

## [Elasticsearch Snapshot](https://discuss.elastic.co/t/elasticsearch-snapshot/133630)

<div class="topic-metadata">

**Author:** [@Mozuffer](https://discuss.elastic.co/u/Mozuffer)\
**Replies:** 5\
**Last updated:** [May 31, 2018, 6:45am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot/133630 "2018-05-31T06:45:57Z")

</div>

Hi Guys, I'm using elasticsearch Version "1.4.5" and "lucene\_version" : "4.10.4" on elasticsearch cluster consist of 4 nodes. I want to take anapshot from this cluster, I have configured NFS server and made it available…

---

## [Elasticsearch Hadoop - Issue reading GeoPoint as Dataset](https://discuss.elastic.co/t/elasticsearch-hadoop-issue-reading-geopoint-as-dataset/133865)

<div class="topic-metadata">

**Author:** [@brommer](https://discuss.elastic.co/u/brommer)\
**Replies:** 4\
**Last updated:** [May 31, 2018, 6:39am UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-issue-reading-geopoint-as-dataset/133865 "2018-05-31T06:39:25Z")

</div>

Hi everyone, I am using Elasticsearch Hadoop v. 6.2.3 with Spark 2.3.0 trying to read data from Elasticsearch as a Dataset. However, I am receiving following Exception: WARN TaskSetManager: Lost task 0.0 in stage 0.0 (…

---

## [How does completion suggester work?](https://discuss.elastic.co/t/how-does-completion-suggester-work/133972)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 0\
**Last updated:** [May 31, 2018, 6:06am UTC](https://discuss.elastic.co/t/how-does-completion-suggester-work/133972 "2018-05-31T06:06:56Z")

</div>

Hello. I am in a situation where I will need to implement autocomplete function . I'm thinking of using the completion suggester . I have read below two related sources and would like to ask for help . Completion Sug…

---

## [Query documents based on references to other documents](https://discuss.elastic.co/t/query-documents-based-on-references-to-other-documents/133939)

<div class="topic-metadata">

**Author:** [@tomhel](https://discuss.elastic.co/u/tomhel)\
**Replies:** 0\
**Last updated:** [May 30, 2018, 8:17pm UTC](https://discuss.elastic.co/t/query-documents-based-on-references-to-other-documents/133939 "2018-05-30T20:17:28Z")

</div>

I'm struggling with putting together a Lucene query for Elsticsearch that can select the documents that I need. Let me explain by a simple example: Let's say that we have two types of documents that we want to to operat…

---

## [How to search a text in a field with in a particular time range](https://discuss.elastic.co/t/how-to-search-a-text-in-a-field-with-in-a-particular-time-range/133953)

<div class="topic-metadata">

**Author:** [@dubul](https://discuss.elastic.co/u/dubul)\
**Replies:** 1\
**Last updated:** [May 31, 2018, 5:25am UTC](https://discuss.elastic.co/t/how-to-search-a-text-in-a-field-with-in-a-particular-time-range/133953 "2018-05-31T05:25:44Z")

</div>

I'm trying to run a job which runs every 30 minutes to query the elastic search index and matches the message field with particular text(eg: job ran failed) within the 30 min time range only. Is there any pre-built luce…

---

## [Basic X-Pack Licence against cluster](https://discuss.elastic.co/t/basic-x-pack-licence-against-cluster/133962)

<div class="topic-metadata">

**Author:** [@Jithesh\_Pk](https://discuss.elastic.co/u/Jithesh_Pk)\
**Replies:** 4\
**Last updated:** [May 31, 2018, 3:36am UTC](https://discuss.elastic.co/t/basic-x-pack-licence-against-cluster/133962 "2018-05-31T03:36:55Z")

</div>

Hi, When done basic licence upgrade against a single node, it was a success. But we getting some warning like below when apply the Basic Licence against a cluster with 3 nodes. { "acknowledged" : false, "license\_s…

---

## [Match multiple searchs in single watcher](https://discuss.elastic.co/t/match-multiple-searchs-in-single-watcher/133931)

<div class="topic-metadata">

**Author:** [@Chaitra\_Ranganna](https://discuss.elastic.co/u/Chaitra_Ranganna)\
**Replies:** 1\
**Last updated:** [May 31, 2018, 1:03am UTC](https://discuss.elastic.co/t/match-multiple-searchs-in-single-watcher/133931 "2018-05-31T01:03:39Z")

</div>

Hi I have requirement where I need to match multiple patterns from the same the index and raise a alert for each pattern. For example Index "test\*" contains below data for field text text: cluster is unavailable or mi…

---

## [How to find the number of times a particular log event happened in the ES using query](https://discuss.elastic.co/t/how-to-find-the-number-of-times-a-particular-log-event-happened-in-the-es-using-query/133954)

<div class="topic-metadata">

**Author:** [@dubul](https://discuss.elastic.co/u/dubul)\
**Replies:** 0\
**Last updated:** [May 30, 2018, 11:09pm UTC](https://discuss.elastic.co/t/how-to-find-the-number-of-times-a-particular-log-event-happened-in-the-es-using-query/133954 "2018-05-30T23:09:35Z")

</div>

I'm trying to run a query to find the matching text in a message field and I'm trying to gather the results from the response to analyse the number of such events happening. query = { "query": { "match": {…

---

## [Index name conventions](https://discuss.elastic.co/t/index-name-conventions/133930)

<div class="topic-metadata">

**Author:** [@Sebastian\_Herrera](https://discuss.elastic.co/u/Sebastian_Herrera)\
**Replies:** 1\
**Last updated:** [May 30, 2018, 10:20pm UTC](https://discuss.elastic.co/t/index-name-conventions/133930 "2018-05-30T22:20:52Z")

</div>

Hi all, can anyone tell me why elastcisearch always add the date in the index name, is there any performance reason or is only because they like Regards

---

## [Elasticsearch mapping confusion](https://discuss.elastic.co/t/elasticsearch-mapping-confusion/133898)

<div class="topic-metadata">

**Author:** [@Vikrant\_Aggarwal](https://discuss.elastic.co/u/Vikrant_Aggarwal)\
**Replies:** 1\
**Last updated:** [May 30, 2018, 9:24pm UTC](https://discuss.elastic.co/t/elasticsearch-mapping-confusion/133898 "2018-05-30T21:24:03Z")

</div>

Trying to understand the logic behind the ES index mapping using heka - in existing project. I have following template to create index in ES. # cat es-index-template.json { "template": "logs-\*", "mappings": { …

---

## [Elasticsearch doesn't find the cluster](https://discuss.elastic.co/t/elasticsearch-doesnt-find-the-cluster/133926)

<div class="topic-metadata">

**Author:** [@DanV](https://discuss.elastic.co/u/DanV)\
**Replies:** 4\
**Last updated:** [May 30, 2018, 9:17pm UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-find-the-cluster/133926 "2018-05-30T21:17:25Z")

</div>

Hello, i'm trying to connect a elasticsearch search node (node2) in a server to a already existing elasticsearch node (node1) in another server with the goal of data replication from node1 to node2. The problem appear…

---

## [Named query for "Percolating An Existing Document"](https://discuss.elastic.co/t/named-query-for-percolating-an-existing-document/133940)

<div class="topic-metadata">

**Author:** [@Aravind](https://discuss.elastic.co/u/Aravind)\
**Replies:** 0\
**Last updated:** [May 30, 2018, 8:42pm UTC](https://discuss.elastic.co/t/named-query-for-percolating-an-existing-document/133940 "2018-05-30T20:42:42Z")

</div>

Similar to the naming percolate queries while supplying the actual document - https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-percolate-query.html#\_specifying\_multiple\_percolate\_queries How do…

---

## [Repository on kerberized HDFS](https://discuss.elastic.co/t/repository-on-kerberized-hdfs/133697)

<div class="topic-metadata">

**Author:** [@sgtz](https://discuss.elastic.co/u/sgtz)\
**Replies:** 1\
**Last updated:** [May 30, 2018, 7:53pm UTC](https://discuss.elastic.co/t/repository-on-kerberized-hdfs/133697 "2018-05-30T19:53:08Z")

</div>

Hi! I'm trying to use the HDFS reposity plugin (in version 5.6.5) to write snapshots to HDFS. For testing, the HDFS was not kerberized and everything worked. The curl and the payload looked like this: cat elastic-hdfs…

---

## [Elasticsearch - spark field name](https://discuss.elastic.co/t/elasticsearch-spark-field-name/133598)

<div class="topic-metadata">

**Author:** [@kdh6429](https://discuss.elastic.co/u/kdh6429)\
**Replies:** 1\
**Last updated:** [May 30, 2018, 7:46pm UTC](https://discuss.elastic.co/t/elasticsearch-spark-field-name/133598 "2018-05-30T19:46:39Z")

</div>

No one knows about this? Continuing the discussion from Elasitcsearch-spark field name:

---

## [Insert Overwrite is not working through Hive-Elasticsearch Integration after multiple data import jobs through hive](https://discuss.elastic.co/t/insert-overwrite-is-not-working-through-hive-elasticsearch-integration-after-multiple-data-import-jobs-through-hive/132265)

<div class="topic-metadata">

**Author:** [@krishnaSH](https://discuss.elastic.co/u/krishnaSH)\
**Replies:** 2\
**Last updated:** [May 30, 2018, 7:37pm UTC](https://discuss.elastic.co/t/insert-overwrite-is-not-working-through-hive-elasticsearch-integration-after-multiple-data-import-jobs-through-hive/132265 "2018-05-30T19:37:41Z")

</div>

I have been running multiple jobs on hive to check my performance after optimizing many things. Suddenly, today morning I found that my any table I create as ES table in hive is not able to import data to ES cluster. I…

---

## [How to config elasticsearch nodes remote in pyspark? Node \[127.0.0.1:9200\] failed (Connection refused (Connection refused)); no other nodes left - aborting](https://discuss.elastic.co/t/how-to-config-elasticsearch-nodes-remote-in-pyspark-node-127-0-0-1-9200-failed-connection-refused-connection-refused-no-other-nodes-left-aborting/131735)

<div class="topic-metadata">

**Author:** [@Luan\_Ha\_Thanh](https://discuss.elastic.co/u/Luan_Ha_Thanh)\
**Replies:** 1\
**Last updated:** [May 30, 2018, 7:35pm UTC](https://discuss.elastic.co/t/how-to-config-elasticsearch-nodes-remote-in-pyspark-node-127-0-0-1-9200-failed-connection-refused-connection-refused-no-other-nodes-left-aborting/131735 "2018-05-30T19:35:12Z")

</div>

I want to connect Spark to Elasticsearch. I use command: pyspark --driver-class-path /home/bigdata/elasticsearch-hadoop-5.6.5/elasticsearch-hadoop-5.6.5/dist/elasticsearch-spark-20\_2.10-5.6.5.jar --conf spark.es.nodes=…

---

## [Error when moving data from hive using elasticsearch-hadoop plugin to elasticsearch](https://discuss.elastic.co/t/error-when-moving-data-from-hive-using-elasticsearch-hadoop-plugin-to-elasticsearch/131124)

<div class="topic-metadata">

**Author:** [@Harbeer\_Kadian](https://discuss.elastic.co/u/Harbeer_Kadian)\
**Replies:** 2\
**Last updated:** [May 30, 2018, 7:33pm UTC](https://discuss.elastic.co/t/error-when-moving-data-from-hive-using-elasticsearch-hadoop-plugin-to-elasticsearch/131124 "2018-05-30T19:33:30Z")

</div>

Hi all, I raised following issue in the past. Here the advised solution was to generate unique id for each record to prevent duplicates from getting inserted. I am creating my primary key using md5 function. I take a…

---

## [Writing spark Dataframe/Dataset to Elasticsearch](https://discuss.elastic.co/t/writing-spark-dataframe-dataset-to-elasticsearch/131023)

<div class="topic-metadata">

**Author:** [@wandermonk](https://discuss.elastic.co/u/wandermonk)\
**Replies:** 1\
**Last updated:** [May 30, 2018, 7:28pm UTC](https://discuss.elastic.co/t/writing-spark-dataframe-dataset-to-elasticsearch/131023 "2018-05-30T19:28:49Z")

</div>

I am trying to write a JavaRDD to elasticsearch using the saveToES() method. But, we are getting the exception EsHadoopIllegalArgumentException: Cannot detect ES version - typically this happens if the network/Elastics…

---

## [Elastcisearch Hadoop customized index mapping?](https://discuss.elastic.co/t/elastcisearch-hadoop-customized-index-mapping/130691)

<div class="topic-metadata">

**Author:** [@camelliazhang2018](https://discuss.elastic.co/u/camelliazhang2018)\
**Replies:** 1\
**Last updated:** [May 30, 2018, 7:27pm UTC](https://discuss.elastic.co/t/elastcisearch-hadoop-customized-index-mapping/130691 "2018-05-30T19:27:02Z")

</div>

Is there a way that I can create an index mapping (with customized analyzer for different fields) directly in pig using elasticsearch-hadoop? Or do I have to pre-define the mappings? I am thinking if it is possible to d…

---

## [CIDR query on ip\_range field not working](https://discuss.elastic.co/t/cidr-query-on-ip-range-field-not-working/133932)

<div class="topic-metadata">

**Author:** [@vramakrishnan](https://discuss.elastic.co/u/vramakrishnan)\
**Replies:** 0\
**Last updated:** [May 30, 2018, 7:13pm UTC](https://discuss.elastic.co/t/cidr-query-on-ip-range-field-not-working/133932 "2018-05-30T19:13:51Z")

</div>

I have the following mapping "mappings": { "\_doc": { "properties": { "src\_ip": { "type": "ip\_range", "index": true }, "dst\_ip": { "type": "ip\_range", …

---

## [Elasticsearch fails to start after elasticsearch.yml is changed](https://discuss.elastic.co/t/elasticsearch-fails-to-start-after-elasticsearch-yml-is-changed/133897)

<div class="topic-metadata">

**Author:** [@DanV](https://discuss.elastic.co/u/DanV)\
**Replies:** 2\
**Last updated:** [May 30, 2018, 6:26pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-after-elasticsearch-yml-is-changed/133897 "2018-05-30T18:26:48Z")

</div>

Hello, i'm changing my elasticsearch.yml connfig so he can replicate data in other machines. The problem appear when im defining my path.data and path.logs, after i save the new paths and restart the service i get this …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1669)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1671)
