# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1688

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1689

---

## [ElasticSearch custom Service not working](https://discuss.elastic.co/t/elasticsearch-custom-service-not-working/131712)

<div class="topic-metadata">

**Author:** [@Giuseppe\_Merlo](https://discuss.elastic.co/u/Giuseppe_Merlo)\
**Replies:** 2\
**Last updated:** [May 15, 2018, 1:24pm UTC](https://discuss.elastic.co/t/elasticsearch-custom-service-not-working/131712 "2018-05-15T13:24:58Z")

</div>

Hi everyone! I'm just trying to run Elasticsearch on machine startup. I have Elasticsearch directory and execute ./elasticsearch from bin manually. I can not use elasticsearch.service and i try to make it on my own. S…

---

## [Elasticsearch cross cluster does not work as expected](https://discuss.elastic.co/t/elasticsearch-cross-cluster-does-not-work-as-expected/129201)

<div class="topic-metadata">

**Author:** [@asatsi](https://discuss.elastic.co/u/asatsi)\
**Replies:** 1\
**Last updated:** [May 15, 2018, 1:01pm UTC](https://discuss.elastic.co/t/elasticsearch-cross-cluster-does-not-work-as-expected/129201 "2018-05-15T13:01:32Z")

</div>

Hello, I have two ES clusters of significant sizes of 4 master nodes per cluster. I have another cluster which is configured as cross between the two clusters. Everything works fine when the ES instances are started afr…

---

## [Snapshot ends with partially state](https://discuss.elastic.co/t/snapshot-ends-with-partially-state/131938)

<div class="topic-metadata">

**Author:** [@yuvalb](https://discuss.elastic.co/u/yuvalb)\
**Replies:** 0\
**Last updated:** [May 15, 2018, 1:00pm UTC](https://discuss.elastic.co/t/snapshot-ends-with-partially-state/131938 "2018-05-15T13:00:19Z")

</div>

Hello all , im using elasticsearch 1.3.4 with 5 data nodes + 3 masters trying to do snapshot to one of my indices snapshot partially succeeded. i get this output: "failures": \[ { "node\_id": "XYVA5mIUSPKovhchtps8", …

---

## [Need info on these thread pool types](https://discuss.elastic.co/t/need-info-on-these-thread-pool-types/131937)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 0\
**Last updated:** [May 15, 2018, 12:54pm UTC](https://discuss.elastic.co/t/need-info-on-these-thread-pool-types/131937 "2018-05-15T12:54:28Z")

</div>

I am having a setup with one master node and 2 data nodes. I have my web application sending many search requests to the master node. Query: When i monitor thread dump of my data nodes. I am not able to figure out wha…

---

## [Search thread pool issue](https://discuss.elastic.co/t/search-thread-pool-issue/131934)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 0\
**Last updated:** [May 15, 2018, 12:33pm UTC](https://discuss.elastic.co/t/search-thread-pool-issue/131934 "2018-05-15T12:33:29Z")

</div>

I am having a setup with one master node and 2 data nodes. I have my web application sending many search requests to the master node. Issue: When i monitor thread dump of "search" thread pool all the threads are alway…

---

## [Curator problem!](https://discuss.elastic.co/t/curator-problem/131870)

<div class="topic-metadata">

**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\
**Replies:** 5\
**Last updated:** [May 15, 2018, 12:27pm UTC](https://discuss.elastic.co/t/curator-problem/131870 "2018-05-15T12:27:23Z")

</div>

Hi, I have a problem, I was sending logs from a server using Filebeat to my server. Once I set up the curator and I made the command : curator --config ..... ,The other server stopped sending the logs. Can someone expla…

---

## [Elasticsearch setting field index limit](https://discuss.elastic.co/t/elasticsearch-setting-field-index-limit/131675)

<div class="topic-metadata">

**Author:** [@Dhivya\_Buvanesh](https://discuss.elastic.co/u/Dhivya_Buvanesh)\
**Replies:** 4\
**Last updated:** [May 15, 2018, 12:22pm UTC](https://discuss.elastic.co/t/elasticsearch-setting-field-index-limit/131675 "2018-05-15T12:22:47Z")

</div>

hi How to make the default elastic search field limit setting as more than 1000, for any or all index Tried adding the below line in elasticsearch.yml - but elastic search was unable to start, hope this is not the ri…

---

## [Object in arrays are not well supported Error](https://discuss.elastic.co/t/object-in-arrays-are-not-well-supported-error/131925)

<div class="topic-metadata">

**Author:** [@Dhivya\_Buvanesh](https://discuss.elastic.co/u/Dhivya_Buvanesh)\
**Replies:** 0\
**Last updated:** [May 15, 2018, 12:12pm UTC](https://discuss.elastic.co/t/object-in-arrays-are-not-well-supported-error/131925 "2018-05-15T12:12:36Z")

</div>

Hi Team I have upload a JSON file to the elastic and in below data format, "which has a list of dict", After uploading to elastic we see error as "Object in arrays are not well supported" and data is not mapped properl…

---

## [Curator.yml](https://discuss.elastic.co/t/curator-yml/131750)

<div class="topic-metadata">

**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\
**Replies:** 3\
**Last updated:** [May 15, 2018, 12:02pm UTC](https://discuss.elastic.co/t/curator-yml/131750 "2018-05-15T12:02:19Z")

</div>

Hi, Please, I install the curator but I can't find the file of config curator.yml !!

---

## [Problems with aggregations filtering](https://discuss.elastic.co/t/problems-with-aggregations-filtering/131910)

<div class="topic-metadata">

**Author:** [@davide\_ego](https://discuss.elastic.co/u/davide_ego)\
**Replies:** 0\
**Last updated:** [May 15, 2018, 10:45am UTC](https://discuss.elastic.co/t/problems-with-aggregations-filtering/131910 "2018-05-15T10:45:23Z")

</div>

Hi everyone, I'm trying to implement (using elastic php lib) a group by of 5 fields, filtering for some conditions and next ordering the result. Obviously I need to retrieve a set of all objects. I think i'm wrong beca…

---

## [Elastic search Real time Feature](https://discuss.elastic.co/t/elastic-search-real-time-feature/131888)

<div class="topic-metadata">

**Author:** [@wolecharles\_job](https://discuss.elastic.co/u/wolecharles_job)\
**Replies:** 1\
**Last updated:** [May 15, 2018, 9:55am UTC](https://discuss.elastic.co/t/elastic-search-real-time-feature/131888 "2018-05-15T09:55:55Z")

</div>

Does Elastic search has a real time feature that notify a service when new data is stored in the elastic search

---

## [Filter machine learning actual values](https://discuss.elastic.co/t/filter-machine-learning-actual-values/131841)

<div class="topic-metadata">

**Author:** [@alah64](https://discuss.elastic.co/u/alah64)\
**Replies:** 1\
**Last updated:** [May 15, 2018, 9:16am UTC](https://discuss.elastic.co/t/filter-machine-learning-actual-values/131841 "2018-05-15T09:16:42Z")

</div>

i want to diagnostic brute force attacks on source ip . my query is login fail on logs. i see this type anomalies by machine learning : \[anomaly\] i think there is not anomaly for src ip :192.168.1.61 , because actual…

---

## [Querying scripted field is resulting an error](https://discuss.elastic.co/t/querying-scripted-field-is-resulting-an-error/131705)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 2\
**Last updated:** [May 15, 2018, 9:09am UTC](https://discuss.elastic.co/t/querying-scripted-field-is-resulting-an-error/131705 "2018-05-15T09:09:06Z")

</div>

Hi all.... Here I have created a scripted field for calculating Alarm duration, where i have conditions to calculate duration between two dates. here is my script . if(doc\['CLEARTIME'\].date.year != 1970) { return (…

---

## [How to define mapping for sortable fields](https://discuss.elastic.co/t/how-to-define-mapping-for-sortable-fields/131882)

<div class="topic-metadata">

**Author:** [@jlp1](https://discuss.elastic.co/u/jlp1)\
**Replies:** 0\
**Last updated:** [May 15, 2018, 8:21am UTC](https://discuss.elastic.co/t/how-to-define-mapping-for-sortable-fields/131882 "2018-05-15T08:21:04Z")

</div>

I use ES 5.2.2. I my document I have some fields used only for sorting. I was not able to find if that is proper mapping. PUT sorting/\_mapping/doc { "properties": { "name": { - sortable, not searchable "typ…

---

## [Search JAVA API](https://discuss.elastic.co/t/search-java-api/131858)

<div class="topic-metadata">

**Author:** [@aarthinim](https://discuss.elastic.co/u/aarthinim)\
**Replies:** 1\
**Last updated:** [May 15, 2018, 7:58am UTC](https://discuss.elastic.co/t/search-java-api/131858 "2018-05-15T07:58:33Z")

</div>

In search Java API there is no prepareSearch method as given in https://www.elastic.co/guide/en/elasticsearch/client/java-api/current/java-search.html I m using HighLevelRestClient

---

## [What is a easiest way to rename field?](https://discuss.elastic.co/t/what-is-a-easiest-way-to-rename-field/131864)

<div class="topic-metadata">

**Author:** [@Jong-Pil\_Jeong](https://discuss.elastic.co/u/Jong-Pil_Jeong)\
**Replies:** 1\
**Last updated:** [May 15, 2018, 7:57am UTC](https://discuss.elastic.co/t/what-is-a-easiest-way-to-rename-field/131864 "2018-05-15T07:57:19Z")

</div>

Hi. I want to rename filed without downtime or downtimeless. Already I have fileds belows cpu.total.pct cpu.total.max\_pct I want to rename filed with same value. before …

---

## [Ngram Analyze not working for forward slash '/'](https://discuss.elastic.co/t/ngram-analyze-not-working-for-forward-slash/131866)

<div class="topic-metadata">

**Author:** [@veerabhadraiah](https://discuss.elastic.co/u/veerabhadraiah)\
**Replies:** 0\
**Last updated:** [May 15, 2018, 7:23am UTC](https://discuss.elastic.co/t/ngram-analyze-not-working-for-forward-slash/131866 "2018-05-15T07:23:43Z")

</div>

Hi , Created index with ngram analyser POST my\_index { "settings": { "analysis": { "filter": { "nGram\_filter": { …

---

## [Error following x-pack installation](https://discuss.elastic.co/t/error-following-x-pack-installation/131739)

<div class="topic-metadata">

**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\
**Replies:** 1\
**Last updated:** [May 15, 2018, 5:57am UTC](https://discuss.elastic.co/t/error-following-x-pack-installation/131739 "2018-05-15T05:57:50Z")

</div>

installed elasticsearch and kibana on ubuntu 18:04 both working fine then installed x-pack. also apparently went well d@t5500:/usr/share/kibana$ sudo bin/kibana-plugin install x-pack \[sudo\] password for d: Attempti…

---

## [Elasticsearch in Sails js](https://discuss.elastic.co/t/elasticsearch-in-sails-js/131679)

<div class="topic-metadata">

**Author:** [@Akash\_Tanwar](https://discuss.elastic.co/u/Akash_Tanwar)\
**Replies:** 3\
**Last updated:** [May 15, 2018, 5:53am UTC](https://discuss.elastic.co/t/elasticsearch-in-sails-js/131679 "2018-05-15T05:53:49Z")

</div>

Hi, I am very new to sails js. Can someone please guide me on how to access elastic search in sails js (a particular index) and how to write logic on that particular data on that index. It would be really great if some…

---

## [IDF calculation based on Filter?](https://discuss.elastic.co/t/idf-calculation-based-on-filter/131544)

<div class="topic-metadata">

**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\
**Replies:** 1\
**Last updated:** [May 15, 2018, 5:36am UTC](https://discuss.elastic.co/t/idf-calculation-based-on-filter/131544 "2018-05-15T05:36:54Z")

</div>

I am going to design a multi-tenancy search platform using Elasticsearch. One option is to share index cross tenant. But the problem is, the documents for different tenants in same index might influence the scoring of re…

---

## [Unable to Grok scientific notation numbers using ingest pipelines](https://discuss.elastic.co/t/unable-to-grok-scientific-notation-numbers-using-ingest-pipelines/131440)

<div class="topic-metadata">

**Author:** [@remaselvi](https://discuss.elastic.co/u/remaselvi)\
**Replies:** 0\
**Last updated:** [May 11, 2018, 8:55am UTC](https://discuss.elastic.co/t/unable-to-grok-scientific-notation-numbers-using-ingest-pipelines/131440 "2018-05-11T08:55:20Z")

</div>

Hi there, I'm having the following issue with the Grok Processor in ingest pipeline as defined: PUT \_ingest/pipeline/number-pipe { "processors" : \[ { "grok": { "field": "message", "patterns"…

---

## [Searching text with white space](https://discuss.elastic.co/t/searching-text-with-white-space/131835)

<div class="topic-metadata">

**Author:** [@KenNguyen](https://discuss.elastic.co/u/KenNguyen)\
**Replies:** 1\
**Last updated:** [May 15, 2018, 4:22am UTC](https://discuss.elastic.co/t/searching-text-with-white-space/131835 "2018-05-15T04:22:36Z")

</div>

Hi all, I am quiet new to ElasticSearch and i am facing this issue so hopefully I can find the answer here. I am searching the full name such as "John Smith" and i expected ElasticSearch to return the documents that co…

---

## [Cross cluster search from xpack to opensorce es cluster](https://discuss.elastic.co/t/cross-cluster-search-from-xpack-to-opensorce-es-cluster/131840)

<div class="topic-metadata">

**Author:** [@Sumesh\_p\_s](https://discuss.elastic.co/u/Sumesh_p_s)\
**Replies:** 0\
**Last updated:** [May 15, 2018, 4:07am UTC](https://discuss.elastic.co/t/cross-cluster-search-from-xpack-to-opensorce-es-cluster/131840 "2018-05-15T04:07:28Z")

</div>

Hi, Is it possible to use cluster with xpack to query another cluster without xpack ?

---

## [Is it error Version ？, i cannot use GeoDistanceQueryBuilder](https://discuss.elastic.co/t/is-it-error-version-i-cannot-use-geodistancequerybuilder/131684)

<div class="topic-metadata">

**Author:** [@45fc9af0bd552594c6f8](https://discuss.elastic.co/u/45fc9af0bd552594c6f8)\
**Replies:** 2\
**Last updated:** [May 15, 2018, 2:47am UTC](https://discuss.elastic.co/t/is-it-error-version-i-cannot-use-geodistancequerybuilder/131684 "2018-05-15T02:47:15Z")

</div>

I have share my code in github: https://github.com/junyi5257/elastic-search Exception: java.lang.IllegalStateException: unexpected byte \[0x0a\] at org.elasticsearch.common.io.stream.StreamInput.readBoolean(StreamInput…

---

## [Time Based Indices](https://discuss.elastic.co/t/time-based-indices/131510)

<div class="topic-metadata">

**Author:** [@Jose\_Campos](https://discuss.elastic.co/u/Jose_Campos)\
**Replies:** 5\
**Last updated:** [May 15, 2018, 12:45am UTC](https://discuss.elastic.co/t/time-based-indices/131510 "2018-05-15T00:45:37Z")

</div>

Hi, I was trying to create an index based on time, but with a different name. For example if I want to create an index called "nginx- \*", at the time of consulting will be nginx-2018.11.05, but I need to geolocate, and r…

---

## [Elasticsearch stops ingesting data when node is down](https://discuss.elastic.co/t/elasticsearch-stops-ingesting-data-when-node-is-down/131804)

<div class="topic-metadata">

**Author:** [@igor.leao1](https://discuss.elastic.co/u/igor.leao1)\
**Replies:** 3\
**Last updated:** [May 14, 2018, 11:36pm UTC](https://discuss.elastic.co/t/elasticsearch-stops-ingesting-data-when-node-is-down/131804 "2018-05-14T23:36:50Z")

</div>

Hi there, I have an ES cluster which stops ingesting data every time a node is down. As it is a cluster used for debugging purposes only, it retains logs has no replication for most of its shards. There are 13 data nod…

---

## [Upgrade Woes](https://discuss.elastic.co/t/upgrade-woes/131787)

<div class="topic-metadata">

**Author:** [@Carpesimia](https://discuss.elastic.co/u/Carpesimia)\
**Replies:** 2\
**Last updated:** [May 14, 2018, 11:23pm UTC](https://discuss.elastic.co/t/upgrade-woes/131787 "2018-05-14T23:23:56Z")

</div>

So, I guess let's start at the beginning. We've been working with elasticsearch for a bit of time now. The version we are running is 2.3.3. We run it in a cluster in all of our instances, but now want to upgrade to 6.…

---

## [Will Elasticsearch reject documents based on document size?](https://discuss.elastic.co/t/will-elasticsearch-reject-documents-based-on-document-size/131591)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 1\
**Last updated:** [May 14, 2018, 10:53pm UTC](https://discuss.elastic.co/t/will-elasticsearch-reject-documents-based-on-document-size/131591 "2018-05-14T22:53:58Z")

</div>

Hi, Will Elasticsearch reject or drop documents if document size is too large? I am ingesting documents using logstash but I don’t see any error logs in Logstash or Elasticsearch. How do I know if Elasticsearch rejects…

---

## [Average value of buckets in wide range](https://discuss.elastic.co/t/average-value-of-buckets-in-wide-range/130596)

<div class="topic-metadata">

**Author:** [@slawek367](https://discuss.elastic.co/u/slawek367)\
**Replies:** 6\
**Last updated:** [May 14, 2018, 9:33pm UTC](https://discuss.elastic.co/t/average-value-of-buckets-in-wide-range/130596 "2018-05-14T21:33:24Z")

</div>

Hello, I'm trying to solve problem regarding average value of buckets with small interval in wide range. Example: I have 10 services, each send messages every 5 sec with it's state: "ACTIVATE", "STOPPED" etc. I would…

---

## [Do a query that shows when a value appears n or more times](https://discuss.elastic.co/t/do-a-query-that-shows-when-a-value-appears-n-or-more-times/131813)

<div class="topic-metadata">

**Author:** [@prodrg](https://discuss.elastic.co/u/prodrg)\
**Replies:** 0\
**Last updated:** [May 14, 2018, 9:21pm UTC](https://discuss.elastic.co/t/do-a-query-that-shows-when-a-value-appears-n-or-more-times/131813 "2018-05-14T21:21:14Z")

</div>

Hi guys, I need help formulating a specific query, or at least to know if something like is possible. Let's say I have the following lines on my logs 123.234.134.42 -- es-ar -- pizza 123.234.134.42 -- es-mx -- pizza …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1687)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1689)
