# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1715

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1716

---

## [Kibana Update](https://discuss.elastic.co/t/kibana-update/128646)

<div class="topic-metadata">

**Author:** [@Fatemeh](https://discuss.elastic.co/u/Fatemeh)\
**Replies:** 0\
**Last updated:** [April 19, 2018, 7:26am UTC](https://discuss.elastic.co/t/kibana-update/128646 "2018-04-19T07:26:56Z")

</div>

Hello everybody, I should update my kibana version so that we can use mathematical functions at work, our Kibana version is 4.5.3 and elasticsearch version is 2.3.4. I searched in internet and found ==\> https://www.el…

---

## [Querying the cluster incorrectly, returns the path of the cert in error](https://discuss.elastic.co/t/querying-the-cluster-incorrectly-returns-the-path-of-the-cert-in-error/128592)

<div class="topic-metadata">

**Author:** [@Diadems](https://discuss.elastic.co/u/Diadems)\
**Replies:** 1\
**Last updated:** [April 19, 2018, 6:59am UTC](https://discuss.elastic.co/t/querying-the-cluster-incorrectly-returns-the-path-of-the-cert-in-error/128592 "2018-04-19T06:59:03Z")

</div>

Is this a bug to be addressed or is it supposed to behave this way? I tried querying the Elasticsearch cluster with an xpack query like below: GET http://elastic-cluster-ip:port/\_xpack/ssl/certificates It returne…

---

## [Passing document field value as parameter for advanced script](https://discuss.elastic.co/t/passing-document-field-value-as-parameter-for-advanced-script/126350)

<div class="topic-metadata">

**Author:** [@maarab](https://discuss.elastic.co/u/maarab)\
**Replies:** 4\
**Last updated:** [April 19, 2018, 6:31am UTC](https://discuss.elastic.co/t/passing-document-field-value-as-parameter-for-advanced-script/126350 "2018-04-19T06:31:26Z")

</div>

In elasticsearch, I have implemented a custom script using java and am using it in the query. The java code (created plugin for elasticsearch) is a method that will accept two string and return a value. One is a hard-cod…

---

## [Read timeout](https://discuss.elastic.co/t/read-timeout/128624)

<div class="topic-metadata">

**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\
**Replies:** 0\
**Last updated:** [April 19, 2018, 5:15am UTC](https://discuss.elastic.co/t/read-timeout/128624 "2018-04-19T05:15:05Z")

</div>

Hi, I have a data on multiple indexes and want to search it's last occurrence. Could you please help me on this. Here is the scenario: I have following indexes: acct-2018-03-01 , acct-2018-03-02 , acct-2018-03-03 ...…

---

## [Transport address from elasticsearch.yml config](https://discuss.elastic.co/t/transport-address-from-elasticsearch-yml-config/128623)

<div class="topic-metadata">

**Author:** [@satyarajp](https://discuss.elastic.co/u/satyarajp)\
**Replies:** 0\
**Last updated:** [April 19, 2018, 5:11am UTC](https://discuss.elastic.co/t/transport-address-from-elasticsearch-yml-config/128623 "2018-04-19T05:11:44Z")

</div>

Hi Team, Have a little confusion in elasticsearch.yml to hold transport addresses. In the above post Kimchy commented we cant provide addresses in yml file. //settings contain only cluster.name client = new PreB…

---

## [Is there capability to set size limitation by index for elasticsearch](https://discuss.elastic.co/t/is-there-capability-to-set-size-limitation-by-index-for-elasticsearch/128572)

<div class="topic-metadata">

**Author:** [@lauea](https://discuss.elastic.co/u/lauea)\
**Replies:** 6\
**Last updated:** [April 19, 2018, 4:44am UTC](https://discuss.elastic.co/t/is-there-capability-to-set-size-limitation-by-index-for-elasticsearch/128572 "2018-04-19T04:44:12Z")

</div>

Hi guys, Here has a scenario like below: There are many indexes with different name in my es cluster. Then total es data disk size is 1TB. And in order to avoid some indexes size huge extremely and impact all index ind…

---

## [Snapshot exception and the reason](https://discuss.elastic.co/t/snapshot-exception-and-the-reason/128617)

<div class="topic-metadata">

**Author:** [@springCkWyy](https://discuss.elastic.co/u/springCkWyy)\
**Replies:** 0\
**Last updated:** [April 19, 2018, 4:08am UTC](https://discuss.elastic.co/t/snapshot-exception-and-the-reason/128617 "2018-04-19T04:08:33Z")

</div>

step1: i snapshot a indice use url "?wait\_for\_completion=true" and it sure it hava done . step2: i delete the indice in Elasticsearch cluster, and done. step3: use \_restore to restore the indice. and occurs error "c…

---

## [How to use FSCrawler to send elasticsearch Base64 encoded PDF?](https://discuss.elastic.co/t/how-to-use-fscrawler-to-send-elasticsearch-base64-encoded-pdf/124361)

<div class="topic-metadata">

**Author:** [@aeronesto](https://discuss.elastic.co/u/aeronesto)\
**Replies:** 4\
**Last updated:** [April 19, 2018, 1:30am UTC](https://discuss.elastic.co/t/how-to-use-fscrawler-to-send-elasticsearch-base64-encoded-pdf/124361 "2018-04-19T01:30:34Z")

</div>

Trying to index a PDF into elasticsearch using FSCrawler, since elasticsearch needs Base64 encoded data. I have the following job created in FSCrawler: { "name" : "my\_job\_name", "fs" : { "url" : "/tmp/es", "…

---

## [Unable to delete index](https://discuss.elastic.co/t/unable-to-delete-index/128596)

<div class="topic-metadata">

**Author:** [@tronyx](https://discuss.elastic.co/u/tronyx)\
**Replies:** 4\
**Last updated:** [April 18, 2018, 9:37pm UTC](https://discuss.elastic.co/t/unable-to-delete-index/128596 "2018-04-18T21:37:32Z")

</div>

Experiencing an issue with two indices that were somehow marked as read-only and now I'm unable to remove that restriction. Here is what I have tried and the result: ~\]# curl -XPOST 'http://10.48.184.94:9200/lvs-logstas…

---

## [Using EKL for performance tests's analysis](https://discuss.elastic.co/t/using-ekl-for-performance-testss-analysis/128569)

<div class="topic-metadata">

**Author:** [@ELE](https://discuss.elastic.co/u/ELE)\
**Replies:** 2\
**Last updated:** [April 18, 2018, 6:07pm UTC](https://discuss.elastic.co/t/using-ekl-for-performance-testss-analysis/128569 "2018-04-18T18:07:04Z")

</div>

Hi Guys, I'm new in ELK, and interesting in getting some advices regaridng my specific needs My main goal is to use ELK for performance testing analysis and monitoring like: Monitoring remote server's CPUs, MEM, JAVA…

---

## [How can I name Curator rollover new Index like date prefix-YYYY.MM.DD-1?](https://discuss.elastic.co/t/how-can-i-name-curator-rollover-new-index-like-date-prefix-yyyy-mm-dd-1/128542)

<div class="topic-metadata">

**Author:** [@jugaji](https://discuss.elastic.co/u/jugaji)\
**Replies:** 4\
**Last updated:** [April 18, 2018, 4:21pm UTC](https://discuss.elastic.co/t/how-can-i-name-curator-rollover-new-index-like-date-prefix-yyyy-mm-dd-1/128542 "2018-04-18T16:21:31Z")

</div>

Hi!! I want curator rollover by date (prefix-YYYY.MM.DD-1) like description at: https://www.elastic.co/guide/en/elasticsearch/client/curator/current/rollover.html My configuration is: Create index: PUT /logsservice…

---

## [Elastic cluster HA setup](https://discuss.elastic.co/t/elastic-cluster-ha-setup/128468)

<div class="topic-metadata">

**Author:** [@jbacic](https://discuss.elastic.co/u/jbacic)\
**Replies:** 3\
**Last updated:** [April 18, 2018, 3:59pm UTC](https://discuss.elastic.co/t/elastic-cluster-ha-setup/128468 "2018-04-18T15:59:11Z")

</div>

I've got one question regarding elastic search cluster settings. I managed to setup elastic cluster on Rancher platform but I came across one weird (at least to me) issue. When one node goes down, cluster seems to be una…

---

## [Keyword type can't use field:(value1 value2) in querystring](https://discuss.elastic.co/t/keyword-type-cant-use-field-value1-value2-in-querystring/128279)

<div class="topic-metadata">

**Author:** [@laigood](https://discuss.elastic.co/u/laigood)\
**Replies:** 11\
**Last updated:** [April 18, 2018, 3:51pm UTC](https://discuss.elastic.co/t/keyword-type-cant-use-field-value1-value2-in-querystring/128279 "2018-04-18T15:51:02Z")

</div>

I have a Keyword type field,and can use querystring field:(value1 OR value2) get the result,but if remove the 'OR' it return empty.even though i set default\_operator to "OR" in the querystring body,it still no effect,w…

---

## [IDs query returning incomplete results](https://discuss.elastic.co/t/ids-query-returning-incomplete-results/127934)

<div class="topic-metadata">

**Author:** [@cwinkler](https://discuss.elastic.co/u/cwinkler)\
**Replies:** 5\
**Last updated:** [April 18, 2018, 3:01pm UTC](https://discuss.elastic.co/t/ids-query-returning-incomplete-results/127934 "2018-04-18T15:01:36Z")

</div>

I have a set of distinct document IDs. I know for sure that these documents exist, because the IDs have been retrieved by some previous queries. Now I'm executing an IDs query for these IDs. However, the first executi…

---

## [Will Version 6.3 be released soon?](https://discuss.elastic.co/t/will-version-6-3-be-released-soon/128522)

<div class="topic-metadata">

**Author:** [@Tempy](https://discuss.elastic.co/u/Tempy)\
**Replies:** 1\
**Last updated:** [April 18, 2018, 2:10pm UTC](https://discuss.elastic.co/t/will-version-6-3-be-released-soon/128522 "2018-04-18T14:10:34Z")

</div>

I'm planning to start a new installation of the elastic stack the week after the next week. As I need to have an alerting service, I wonder if version 6.3 which now contains XPack also has the ability to alert and send …

---

## [Elastica PHP Sum Aggregation error](https://discuss.elastic.co/t/elastica-php-sum-aggregation-error/128493)

<div class="topic-metadata">

**Author:** [@Islam\_Elshobokshy](https://discuss.elastic.co/u/Islam_Elshobokshy)\
**Replies:** 1\
**Last updated:** [April 18, 2018, 2:01pm UTC](https://discuss.elastic.co/t/elastica-php-sum-aggregation-error/128493 "2018-04-18T14:01:29Z")

</div>

Hello all, I have, say, an index called X, a type called Y, and a field called number. There are 50 data. I want to calculate the sum of the values of each number field. I tried this but it doesn't work : $numbe…

---

## [Failed to complete action: delete\_indices](https://discuss.elastic.co/t/failed-to-complete-action-delete-indices/128446)

<div class="topic-metadata">

**Author:** [@ardel](https://discuss.elastic.co/u/ardel)\
**Replies:** 7\
**Last updated:** [April 18, 2018, 1:46pm UTC](https://discuss.elastic.co/t/failed-to-complete-action-delete-indices/128446 "2018-04-18T13:46:05Z")

</div>

Hello All, I was receiving this error upon executing a delete\_indices action. Failed to complete action: delete\_indices. \<class 'curator.exceptions.FailedExecution'\>: Exception encountered. Rerun with loglevel DEBUG …

---

## [Nested filter error "child query must only match non-parent docs"](https://discuss.elastic.co/t/nested-filter-error-child-query-must-only-match-non-parent-docs/128523)

<div class="topic-metadata">

**Author:** [@vgrygor](https://discuss.elastic.co/u/vgrygor)\
**Replies:** 0\
**Last updated:** [April 18, 2018, 11:28am UTC](https://discuss.elastic.co/t/nested-filter-error-child-query-must-only-match-non-parent-docs/128523 "2018-04-18T11:28:48Z")

</div>

Hi, elasticsearch response return an error: // \[500 Server Exception\] illegal\_state\_exception: child query must only match non-parent docs, but parent docID=4 matched childScorer=class org.apache.lucene.search.Conjuncti…

---

## [Worked in 5.3, upgraded to 6, now its busted =/](https://discuss.elastic.co/t/worked-in-5-3-upgraded-to-6-now-its-busted/128400)

<div class="topic-metadata">

**Author:** [@jmgarcia](https://discuss.elastic.co/u/jmgarcia)\
**Replies:** 7\
**Last updated:** [April 18, 2018, 1:05pm UTC](https://discuss.elastic.co/t/worked-in-5-3-upgraded-to-6-now-its-busted/128400 "2018-04-18T13:05:10Z")

</div>

Hey fellas, I know its been a while since I have been on the forums but everything was working until our administrator decided to upgrade ES. Not a big deal, newer is better, right? Anyway I am having issues with pytho…

---

## [ES 6.2 Percolator causes very high CPU utilization](https://discuss.elastic.co/t/es-6-2-percolator-causes-very-high-cpu-utilization/128093)

<div class="topic-metadata">

**Author:** [@meghna1292](https://discuss.elastic.co/u/meghna1292)\
**Replies:** 1\
**Last updated:** [April 18, 2018, 12:20pm UTC](https://discuss.elastic.co/t/es-6-2-percolator-causes-very-high-cpu-utilization/128093 "2018-04-18T12:20:25Z")

</div>

Hi, I am currently using AWS ES 6.2 for the percolator. I have a dedicated cluster for the percolator which has a single index that contains ~16,000 percolator queries (~30MB). I have about 10000 percolator query invoc…

---

## [External versioning for update](https://discuss.elastic.co/t/external-versioning-for-update/128521)

<div class="topic-metadata">

**Author:** [@chuckoh](https://discuss.elastic.co/u/chuckoh)\
**Replies:** 0\
**Last updated:** [April 18, 2018, 11:26am UTC](https://discuss.elastic.co/t/external-versioning-for-update/128521 "2018-04-18T11:26:04Z")

</div>

please ignore this posting. i can't find a way to delete this. i was originally wondering why there's no \['version'\] parameter is available for update() . but, then read the update API doesn't support versioning other t…

---

## [Kibana - Elasticsearch plugin is Red and Service Unavailable error](https://discuss.elastic.co/t/kibana-elasticsearch-plugin-is-red-and-service-unavailable-error/128494)

<div class="topic-metadata">

**Author:** [@arun\_prasath1](https://discuss.elastic.co/u/arun_prasath1)\
**Replies:** 0\
**Last updated:** [April 18, 2018, 9:34am UTC](https://discuss.elastic.co/t/kibana-elasticsearch-plugin-is-red-and-service-unavailable-error/128494 "2018-04-18T09:34:14Z")

</div>

I am using Elasticsearch 5.0.1 and suddenly Seeing the Elasticsearch plugin is Red and Service unavailable. I have heartbeat, filebeat and metricbeat in the Elasticsearch. I could see data for metribeat but no data in t…

---

## [Control scoring in case phrase queries?](https://discuss.elastic.co/t/control-scoring-in-case-phrase-queries/128503)

<div class="topic-metadata">

**Author:** [@dimalini](https://discuss.elastic.co/u/dimalini)\
**Replies:** 0\
**Last updated:** [April 18, 2018, 10:01am UTC](https://discuss.elastic.co/t/control-scoring-in-case-phrase-queries/128503 "2018-04-18T10:01:41Z")

</div>

Let's say I have a phrase query "a.b", And the occurrences of this phrase is more within a document compared to the number of documents that has its occurrence. Going over every occurrence within a document to calculate…

---

## [Fielddata for the \_parent field](https://discuss.elastic.co/t/fielddata-for-the-parent-field/128114)

<div class="topic-metadata">

**Author:** [@lingerchouzi](https://discuss.elastic.co/u/lingerchouzi)\
**Replies:** 4\
**Last updated:** [April 18, 2018, 9:52am UTC](https://discuss.elastic.co/t/fielddata-for-the-parent-field/128114 "2018-04-18T09:52:01Z")

</div>

The amount of heap used by fielddata can be checked by： \_stats/fielddata?fields=\* the response is: ... "total": { "fielddata": { "memory\_size\_in\_bytes": 2592, "evictions": 0, "fields": { "\_parent": { "memory\_si…

---

## [Bulk insert issue with ElasticSearch.Net 6.0.2](https://discuss.elastic.co/t/bulk-insert-issue-with-elasticsearch-net-6-0-2/128284)

<div class="topic-metadata">

**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\
**Replies:** 5\
**Last updated:** [April 18, 2018, 9:39am UTC](https://discuss.elastic.co/t/bulk-insert-issue-with-elasticsearch-net-6-0-2/128284 "2018-04-18T09:39:10Z")

</div>

Hi Following code in NEST with lowlevelclient ElasticLowLevelClient objClient = new ElasticLowLevelClient(objSettings); string strData = "{\\"RollNo\\": \\"1\\",\\"Name\\": \\"Abc\\"}"; JObject data =JObject.Parse(str…

---

## [Properly configure ElasticSearch](https://discuss.elastic.co/t/properly-configure-elasticsearch/128164)

<div class="topic-metadata">

**Author:** [@Islam\_Elshobokshy](https://discuss.elastic.co/u/Islam_Elshobokshy)\
**Replies:** 3\
**Last updated:** [April 18, 2018, 9:28am UTC](https://discuss.elastic.co/t/properly-configure-elasticsearch/128164 "2018-04-18T09:28:25Z")

</div>

Hello all. I am using ES to index and use millions of data, I would like to know the correct way to configure the yml file. I am using Elastica, the PHP framework. Here is my elastica elasticsearch.yml : index.number…

---

## [Snapshot with s3 not working](https://discuss.elastic.co/t/snapshot-with-s3-not-working/128489)

<div class="topic-metadata">

**Author:** [@sreejiths](https://discuss.elastic.co/u/sreejiths)\
**Replies:** 0\
**Last updated:** [April 18, 2018, 8:59am UTC](https://discuss.elastic.co/t/snapshot-with-s3-not-working/128489 "2018-04-18T08:59:53Z")

</div>

I am trying to set up a SNAPSHOT BACKUP through S3 on my development Elastisearch (on Centos 7.0) for which i fail to create S3 repo on the VM I have S3 been set up as a mountpoint as below and i can access the S3 from…

---

## [Failed to authenticate user \[elastic\] after restart service](https://discuss.elastic.co/t/failed-to-authenticate-user-elastic-after-restart-service/128477)

<div class="topic-metadata">

**Author:** [@ashok9177](https://discuss.elastic.co/u/ashok9177)\
**Replies:** 1\
**Last updated:** [April 18, 2018, 8:49am UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-elastic-after-restart-service/128477 "2018-04-18T08:49:21Z")

</div>

I have installed x-pack 6.2 , and changed all user passwords with below command bin/x-pack/setup-passwords interactive then updated user and password in kibana.yml and elasticsearch.yml after some time i restart d…

---

## [Stop elasticsearch from updating automatically](https://discuss.elastic.co/t/stop-elasticsearch-from-updating-automatically/128331)

<div class="topic-metadata">

**Author:** [@nevilleonline](https://discuss.elastic.co/u/nevilleonline)\
**Replies:** 2\
**Last updated:** [April 18, 2018, 8:47am UTC](https://discuss.elastic.co/t/stop-elasticsearch-from-updating-automatically/128331 "2018-04-18T08:47:42Z")

</div>

Hi , I am having a weird problem. My elasticsearch is getting updated every night from 1.5.2 to 1.7.3 in my azure VM. Can you help me stop this. I need to make it work with 1.5.2 for application compatibility. This is …

---

## [Got NoNodeAvailableException exception](https://discuss.elastic.co/t/got-nonodeavailableexception-exception/128471)

<div class="topic-metadata">

**Author:** [@jackyshen](https://discuss.elastic.co/u/jackyshen)\
**Replies:** 1\
**Last updated:** [April 18, 2018, 8:44am UTC](https://discuss.elastic.co/t/got-nonodeavailableexception-exception/128471 "2018-04-18T08:44:17Z")

</div>

I got the following NoNodeAvailableException when I connect to my company network ES cluster by 10.14.192.199:9300 . NoNodeAvailableException\[None of the configured nodes are available: \[{#transport#-1}{05Fw3NppTOGkedT…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1714)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1716)
