# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1705 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1706 --- ## [Field = field in a fuzzy query](https://discuss.elastic.co/t/field-field-in-a-fuzzy-query/128934)
**Author:** [@dsyring](https://discuss.elastic.co/u/dsyring)\ **Replies:** 1\ **Last updated:** [April 27, 2018, 4:05pm UTC](https://discuss.elastic.co/t/field-field-in-a-fuzzy-query/128934 "2018-04-27T16:05:54Z")
Within elastic you can do a script search for if one field equals another field doc\['field1'\].value = doc\['field 2'\].value is there any way to do this where one of the values (doc\['field1'\].value) is the value used in … --- ## [How to use Mustache script in percolator](https://discuss.elastic.co/t/how-to-use-mustache-script-in-percolator/129577)
**Author:** [@anoopvalluthadam](https://discuss.elastic.co/u/anoopvalluthadam)\ **Replies:** 1\ **Last updated:** [April 27, 2018, 4:01pm UTC](https://discuss.elastic.co/t/how-to-use-mustache-script-in-percolator/129577 "2018-04-27T16:01:28Z")
we are using Mustache script in the query to use params, since script contains Pattern and painless doesn't support parameterizing Pattern. query: PUT test\_index/notification/ID { "source": { "query": { … --- ## [Node to node encryption works, but NOT the HTTP client one](https://discuss.elastic.co/t/node-to-node-encryption-works-but-not-the-http-client-one/129852)
**Author:** [@mlemartien](https://discuss.elastic.co/u/mlemartien)\ **Replies:** 2\ **Last updated:** [April 27, 2018, 3:54pm UTC](https://discuss.elastic.co/t/node-to-node-encryption-works-but-not-the-http-client-one/129852 "2018-04-27T15:54:57Z")
Hi there, I have been trying to encrypt communication between the cluster nodes (this works like a charm), the browser and Kibana (works well too) and finally for the HTTP Client traffic. This latter does NOT work. Wha… --- ## [Running a cluster without replicas](https://discuss.elastic.co/t/running-a-cluster-without-replicas/129846)
**Author:** [@igor.leao1](https://discuss.elastic.co/u/igor.leao1)\ **Replies:** 7\ **Last updated:** [April 27, 2018, 3:19pm UTC](https://discuss.elastic.co/t/running-a-cluster-without-replicas/129846 "2018-04-27T15:19:59Z")
Hi there, I have an ES cluster where I store a few logs. Because these logs are not really important, I only have primary shards for them. Today a node of this cluster died. Because we don't have any replicas and I was … --- ## [High thread\_pool bulk rejection for specific node](https://discuss.elastic.co/t/high-thread-pool-bulk-rejection-for-specific-node/129850)
**Author:** [@igor.leao1](https://discuss.elastic.co/u/igor.leao1)\ **Replies:** 0\ **Last updated:** [April 27, 2018, 3:07pm UTC](https://discuss.elastic.co/t/high-thread-pool-bulk-rejection-for-specific-node/129850 "2018-04-27T15:07:54Z")
Hi there, A node of my ES cluster, without replication, got lost this night. AWS ASG replaced that node, but it started with a high number of thread\_pool bulk rejection. Injection of all cluster got compromised, though. … --- ## [Plugin \[x-pack-security\] is incompatible with version \[6.2.4\]; was designed for version \[6.2.3\]](https://discuss.elastic.co/t/plugin-x-pack-security-is-incompatible-with-version-6-2-4-was-designed-for-version-6-2-3/129319)
**Author:** [@mguttula](https://discuss.elastic.co/u/mguttula)\ **Replies:** 1\ **Last updated:** [April 27, 2018, 2:42pm UTC](https://discuss.elastic.co/t/plugin-x-pack-security-is-incompatible-with-version-6-2-4-was-designed-for-version-6-2-3/129319 "2018-04-27T14:42:19Z")
Hi, I have upgrade ELK to 6.2.3 couple of weeks back. As part of Linux OS patching (I think), the Elasticsearch is upgraded to 6.2.4 and Elasticsearch is not coming up. ELK log file (lpl-elk.log) has below error: \[roo… --- ## [Unable to Calculate Disk IOPS for watcher](https://discuss.elastic.co/t/unable-to-calculate-disk-iops-for-watcher/129248)
**Author:** [@Himanshu\_Rajput](https://discuss.elastic.co/u/Himanshu_Rajput)\ **Replies:** 1\ **Last updated:** [April 27, 2018, 2:40pm UTC](https://discuss.elastic.co/t/unable-to-calculate-disk-iops-for-watcher/129248 "2018-04-27T14:40:00Z")
Hi, I want to implement a watch over marvel data for disk IOPS. All the fields under node\_stats.fs.data are in long which contains bytes. I want to calculate disk IOPS from these fields such as this \[Screenshot%20from%… --- ## [Update document giving status 404](https://discuss.elastic.co/t/update-document-giving-status-404/129818)
**Author:** [@saramali](https://discuss.elastic.co/u/saramali)\ **Replies:** 6\ **Last updated:** [April 27, 2018, 2:34pm UTC](https://discuss.elastic.co/t/update-document-giving-status-404/129818 "2018-04-27T14:34:52Z")
I just updated to 6.1.4. My logstash script is working fine but in the elasticsearch window it is giving me the following "dex=\>"khoji-logs-2018-04-27", :\_type=\>"doc", :\_routing=\>nil, :\_retry\_on\_conflict=\>1}, #LogStash… --- ## [Xpack machine learning boundary](https://discuss.elastic.co/t/xpack-machine-learning-boundary/129803)
**Author:** [@dpkkumar01](https://discuss.elastic.co/u/dpkkumar01)\ **Replies:** 3\ **Last updated:** [April 27, 2018, 2:34pm UTC](https://discuss.elastic.co/t/xpack-machine-learning-boundary/129803 "2018-04-27T14:34:24Z")
We have tested our system metrics (CPU, Memory,Disk IO........etc) with the new version of elasticsearch machine learning system(Version-6.2.3) As per your documentation we understood that the boundary conditions are ca… --- ## [Get all results in aggregations](https://discuss.elastic.co/t/get-all-results-in-aggregations/129287)
**Author:** [@Islam\_Elshobokshy](https://discuss.elastic.co/u/Islam_Elshobokshy)\ **Replies:** 1\ **Last updated:** [April 27, 2018, 2:14pm UTC](https://discuss.elastic.co/t/get-all-results-in-aggregations/129287 "2018-04-27T14:14:40Z")
So when using an aggregation on a field, it returns only the result of that field and the doc count of each. Could we show for each result, all the docs corresponding to it? Example : An aggregation term on an id, gets… --- ## [BulkResponse contains null?](https://discuss.elastic.co/t/bulkresponse-contains-null/129839)
**Author:** [@dirk-olmes](https://discuss.elastic.co/u/dirk-olmes)\ **Replies:** 0\ **Last updated:** [April 27, 2018, 2:01pm UTC](https://discuss.elastic.co/t/bulkresponse-contains-null/129839 "2018-04-27T14:01:39Z")
Hi, I'm using the Java High Level REST Client to build an index. To speed up index creation I'm using bulk operations. As per docs I'm creating a BulkRequest and add 200 IndexRequests to it. Then I send off the BulkRe… --- ## [Elasticsearch warehouse](https://discuss.elastic.co/t/elasticsearch-warehouse/129541)
**Author:** [@Narasimma\_varman](https://discuss.elastic.co/u/Narasimma_varman)\ **Replies:** 1\ **Last updated:** [April 27, 2018, 2:01pm UTC](https://discuss.elastic.co/t/elasticsearch-warehouse/129541 "2018-04-27T14:01:35Z")
Hi We are working on real time data handling which is around 5TB per day,which will scale to 7TB in future.Whether It is good to have Elasticsearch as primary database for database modeling and database warehouse concep… --- ## [Question about Java api vs curl search](https://discuss.elastic.co/t/question-about-java-api-vs-curl-search/129838)
**Author:** [@lengoyvaerts](https://discuss.elastic.co/u/lengoyvaerts)\ **Replies:** 0\ **Last updated:** [April 27, 2018, 1:59pm UTC](https://discuss.elastic.co/t/question-about-java-api-vs-curl-search/129838 "2018-04-27T13:59:02Z")
Hi Currently I'm using Elasticsearch 5.5.3 in a project and I have the following query using the Java api ( searchRequestBuilder.toString() ) { "from" : 0, "size" : 20, "query" : { "function\_score" : { … --- ## [I am making custom esClient in kibana to use API of elasticsearch . i dont wan't to use a kibana's ecClient](https://discuss.elastic.co/t/i-am-making-custom-esclient-in-kibana-to-use-api-of-elasticsearch-i-dont-want-to-use-a-kibanas-ecclient/126381)
**Author:** [@ashutoshningot](https://discuss.elastic.co/u/ashutoshningot)\ **Replies:** 1\ **Last updated:** [April 27, 2018, 1:46pm UTC](https://discuss.elastic.co/t/i-am-making-custom-esclient-in-kibana-to-use-api-of-elasticsearch-i-dont-want-to-use-a-kibanas-ecclient/126381 "2018-04-27T13:46:15Z")
pre-flight request is giving: 200 CORS ERROR: Reson "kbn-version and content-type missing". HOW TO PROCCED? --- ## [Slow performance after upgrade from 2.4](https://discuss.elastic.co/t/slow-performance-after-upgrade-from-2-4/128774)
**Author:** [@arthurlm44](https://discuss.elastic.co/u/arthurlm44)\ **Replies:** 1\ **Last updated:** [April 27, 2018, 1:30pm UTC](https://discuss.elastic.co/t/slow-performance-after-upgrade-from-2-4/128774 "2018-04-27T13:30:17Z")
Hey all, I recently deployed a new logging cluster on Kibana / ES 6.2.4 My old cluster was on 2.4 Performance on the new cluster is terribly slow. Queries that the 2.4 cluster is returning in a matter of 3-5 seconds a… --- ## [How to find correlated messages and time between them](https://discuss.elastic.co/t/how-to-find-correlated-messages-and-time-between-them/129775)
**Author:** [@quooston](https://discuss.elastic.co/u/quooston)\ **Replies:** 2\ **Last updated:** [April 27, 2018, 12:45pm UTC](https://discuss.elastic.co/t/how-to-find-correlated-messages-and-time-between-them/129775 "2018-04-27T12:45:45Z")
Hi, total newb here.. be nice! So, I have previously used Application Insights in Azure to do this and it was very simple. I am however finding it rather frustrating to get the same result using Timelion, which I assume… --- ## [Snapshot failure logs to beats--\>logstash](https://discuss.elastic.co/t/snapshot-failure-logs-to-beats-logstash/129373)
**Author:** [@mww1](https://discuss.elastic.co/u/mww1)\ **Replies:** 3\ **Last updated:** [April 27, 2018, 12:29pm UTC](https://discuss.elastic.co/t/snapshot-failure-logs-to-beats-logstash/129373 "2018-04-27T12:29:53Z")
Hi guys, I want to make a model where I can get the alert/logs of the snapshots attempt to take backups fail. I want it to send the logs to beats. is there any watch job I could make? please guide me. Thanks. :sligh… --- ## [Calculate the time difference between consecutive documents](https://discuss.elastic.co/t/calculate-the-time-difference-between-consecutive-documents/128282)
**Author:** [@vinayakfutak](https://discuss.elastic.co/u/vinayakfutak)\ **Replies:** 19\ **Last updated:** [April 27, 2018, 12:28pm UTC](https://discuss.elastic.co/t/calculate-the-time-difference-between-consecutive-documents/128282 "2018-04-27T12:28:39Z")
Can I calculate time difference between consecutive document in elasticsearch? Suppose there are 3 records,the timestamp of first record is 10:45:00 and timestamp of second record is 10:47:00 and timestamp of next recor… --- ## [Can't select channel size is 0 for types: \[RECOVERY, BULK, STATE\]](https://discuss.elastic.co/t/cant-select-channel-size-is-0-for-types-recovery-bulk-state/129559)
**Author:** [@thuc](https://discuss.elastic.co/u/thuc)\ **Replies:** 1\ **Last updated:** [April 27, 2018, 12:24pm UTC](https://discuss.elastic.co/t/cant-select-channel-size-is-0-for-types-recovery-bulk-state/129559 "2018-04-27T12:24:59Z")
I used the bulk API to index 1000 documents at a time. Some of the requests were failing with this error: BulkIndexError: (u'227 document(s) failed to index.', \[{u'index': {u'status': 500, u'\_type': u'artifacts', u'\_id'… --- ## [Cannot assign numeric values in script on update by query](https://discuss.elastic.co/t/cannot-assign-numeric-values-in-script-on-update-by-query/129802)
**Author:** [@OlivierPetri](https://discuss.elastic.co/u/OlivierPetri)\ **Replies:** 7\ **Last updated:** [April 27, 2018, 12:02pm UTC](https://discuss.elastic.co/t/cannot-assign-numeric-values-in-script-on-update-by-query/129802 "2018-04-27T12:02:00Z")
Hi there, I am using Elasticsearch 6.2 and am trying to assign a nummeric value in a scripted update by query like so: POST aarhuis/\_update\_by\_query { "script" : { "source" : "doc\['SUMAB'\] = doc\['CNTA'\] + doc\['… --- ## [ES 5.6 elasticsearch\_deprecation.log WARN](https://discuss.elastic.co/t/es-5-6-elasticsearch-deprecation-log-warn/129675)
**Author:** [@clgs](https://discuss.elastic.co/u/clgs)\ **Replies:** 4\ **Last updated:** [April 27, 2018, 11:50am UTC](https://discuss.elastic.co/t/es-5-6-elasticsearch-deprecation-log-warn/129675 "2018-04-27T11:50:08Z")
Hello. Tell me the probable cause of these records? \[2018-04-26T15:40:08,206\]\[WARN \]\[o.e.d.r.RestController \] Content type detection for rest requests is deprecated. Specify the content type using the \[Content-Type\]… --- ## [Index action - create document](https://discuss.elastic.co/t/index-action-create-document/129690)
**Author:** [@rickdegreef](https://discuss.elastic.co/u/rickdegreef)\ **Replies:** 2\ **Last updated:** [April 27, 2018, 11:40am UTC](https://discuss.elastic.co/t/index-action-create-document/129690 "2018-04-27T11:40:45Z")
Hi, We're trying to create a new document in the "action" part. We would like to index this document in the alert-index. We're trying this: { "trigger": { "schedule": { "interval": "1m" } }, "input"… --- ## [Off-heap memory leak?](https://discuss.elastic.co/t/off-heap-memory-leak/128202)
**Author:** [@hokiegeek2](https://discuss.elastic.co/u/hokiegeek2)\ **Replies:** 14\ **Last updated:** [April 27, 2018, 11:10am UTC](https://discuss.elastic.co/t/off-heap-memory-leak/128202 "2018-04-27T11:10:12Z")
I continue to observe an elasticsearch on docker instance that continues to grab more and more off-heap memory until Mesos kills the docker container. Since there is no data going in with the exception of the .monitor i… --- ## [Help with "Searching—The Basic Tools" chapter's data input](https://discuss.elastic.co/t/help-with-searching-the-basic-tools-chapters-data-input/129812)
**Author:** [@REDhawaii](https://discuss.elastic.co/u/REDhawaii)\ **Replies:** 3\ **Last updated:** [April 27, 2018, 11:10am UTC](https://discuss.elastic.co/t/help-with-searching-the-basic-tools-chapters-data-input/129812 "2018-04-27T11:10:01Z")
hi there, I'm trying execute the command of this file from this chaper to follow the guide but what i have in response from every PUT that i do is: curl: (52) Empty reply from server what can i do? --- ## [\#Unable to connect to Elasticsearch](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch/128191)
**Author:** [@rajushrajan](https://discuss.elastic.co/u/rajushrajan)\ **Replies:** 38\ **Last updated:** [April 27, 2018, 11:01am UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch/128191 "2018-04-27T11:01:33Z")
After enabling xpack in elasticsearch.yml i am geting the below error in kibana. \[image\] --- ## [How to sort an aggregation in Elastica](https://discuss.elastic.co/t/how-to-sort-an-aggregation-in-elastica/129814)
**Author:** [@Islam\_Elshobokshy](https://discuss.elastic.co/u/Islam_Elshobokshy)\ **Replies:** 0\ **Last updated:** [April 27, 2018, 10:46am UTC](https://discuss.elastic.co/t/how-to-sort-an-aggregation-in-elastica/129814 "2018-04-27T10:46:30Z")
I want to sort an aggregation before adding it to the query. But I can't seem to figure out how to do this in Elastica. Any help? I know that it exists the agg sort in Elasticsearch so I was wondering... --- ## [Elasticsearch garbage collection problem](https://discuss.elastic.co/t/elasticsearch-garbage-collection-problem/129758)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 7\ **Last updated:** [April 27, 2018, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-garbage-collection-problem/129758 "2018-04-27T10:43:20Z")
Hi, I have a cluster with four nodes to collect netflow , and every node has 16G RAM. So I set JAVA heap 8G. After working about three or four days the elasticsearch start to garbage collection(about 30 min) ,which cause… --- ## [As the final mapping would have more than 1 type](https://discuss.elastic.co/t/as-the-final-mapping-would-have-more-than-1-type/129507)
**Author:** [@Jouad\_Mohammed](https://discuss.elastic.co/u/Jouad_Mohammed)\ **Replies:** 10\ **Last updated:** [April 27, 2018, 10:04am UTC](https://discuss.elastic.co/t/as-the-final-mapping-would-have-more-than-1-type/129507 "2018-04-27T10:04:34Z")
Please with 6.2 how to overcome this issue : reason=Rejecting mapping update to \[stock\] as the final mapping would have more than 1 type: \[CUSTOMER, BRAND\]\]\] Code: IndexRequest request = new IndexRequest(this.getName(… --- ## [Timezone on Kibana](https://discuss.elastic.co/t/timezone-on-kibana/129805)
**Author:** [@ghouston10](https://discuss.elastic.co/u/ghouston10)\ **Replies:** 0\ **Last updated:** [April 27, 2018, 9:54am UTC](https://discuss.elastic.co/t/timezone-on-kibana/129805 "2018-04-27T09:54:36Z")
Hi, I am loading datetime data into elasticsearch with a timezone set on the data being loaded in. Kibana is then using the browser time settings and adjusting the data which is loaded in. For example the data is being… --- ## [Conditional Include and Exclude Fields](https://discuss.elastic.co/t/conditional-include-and-exclude-fields/129403)
**Author:** [@ronit\_dhingra](https://discuss.elastic.co/u/ronit_dhingra)\ **Replies:** 1\ **Last updated:** [April 27, 2018, 9:45am UTC](https://discuss.elastic.co/t/conditional-include-and-exclude-fields/129403 "2018-04-27T09:45:28Z")
I am using Terms Aggregation for x-axis. and splitting the series on a specific condition. some terms in x-axis dos not have the field on which split is applied. Can i order the aggregation in such a way that only the … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1704) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1706)