# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1720 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1721 --- ## [Connecting via Elasticsearch-py with X-pack enabled](https://discuss.elastic.co/t/connecting-via-elasticsearch-py-with-x-pack-enabled/127043)
**Author:** [@emil.mirzayev](https://discuss.elastic.co/u/emil.mirzayev)\ **Replies:** 1\ **Last updated:** [April 13, 2018, 9:38am UTC](https://discuss.elastic.co/t/connecting-via-elasticsearch-py-with-x-pack-enabled/127043 "2018-04-13T09:38:45Z")
Hi there. I have two instances of Elastic. One is cloud ELK and the other is on my local machine. I use the one on my local machine as sandbox. My question is, how I can connect to it when having X-pack security enabled… --- ## [Make elasticsearch nested query](https://discuss.elastic.co/t/make-elasticsearch-nested-query/127699)
**Author:** [@lucasluan](https://discuss.elastic.co/u/lucasluan)\ **Replies:** 3\ **Last updated:** [April 13, 2018, 9:17am UTC](https://discuss.elastic.co/t/make-elasticsearch-nested-query/127699 "2018-04-13T09:17:15Z")
I have a index with some nested informations and right now struggle with how make to make a query. The index below represents a car piece and this piece belongs to 2 cars. { "\_index": "items\_production\_2018041111… --- ## [Timeout HighLevelRestClient](https://discuss.elastic.co/t/timeout-highlevelrestclient/127927)
**Author:** [@twK](https://discuss.elastic.co/u/twK)\ **Replies:** 2\ **Last updated:** [April 13, 2018, 8:16am UTC](https://discuss.elastic.co/t/timeout-highlevelrestclient/127927 "2018-04-13T08:16:49Z")
Hi, im getting the following exception though i set the timeout to 60s: java.io.IOException: listener timeout after waiting for \[30000\] ms at org.elasticsearch.client.RestClient$SyncResponseListener.get(RestClient.java… --- ## [Dealing with node failures](https://discuss.elastic.co/t/dealing-with-node-failures/127931)
**Author:** [@dd\_d](https://discuss.elastic.co/u/dd_d)\ **Replies:** 0\ **Last updated:** [April 13, 2018, 8:33am UTC](https://discuss.elastic.co/t/dealing-with-node-failures/127931 "2018-04-13T08:33:52Z")
My cluster config : ES version : 6.2.3 number of nodes : 3 (master eligible/data) number of replica : 1 I ran tests sending concurrent search requests to ES cluster using java rest client api(3 hosts, with sniffer), … --- ## [Named Query not working for Nested Query](https://discuss.elastic.co/t/named-query-not-working-for-nested-query/127929)
**Author:** [@tarunwx](https://discuss.elastic.co/u/tarunwx)\ **Replies:** 0\ **Last updated:** [April 13, 2018, 8:17am UTC](https://discuss.elastic.co/t/named-query-not-working-for-nested-query/127929 "2018-04-13T08:17:47Z")
I am working on a nested attribute in document. Have two match statement on different field and want to check which of the match statement is getting hit through named\_query tag. In the response I am getting result but n… --- ## [Define first bucket's start time in aggregation query](https://discuss.elastic.co/t/define-first-buckets-start-time-in-aggregation-query/127928)
**Author:** [@cekeriya](https://discuss.elastic.co/u/cekeriya)\ **Replies:** 0\ **Last updated:** [April 13, 2018, 8:12am UTC](https://discuss.elastic.co/t/define-first-buckets-start-time-in-aggregation-query/127928 "2018-04-13T08:12:17Z")
I want to visualize the data stored on Elasticsearch. I have a time filter and bucket filter in my visualization. Let me explain my problem on my data stored in Elasticsearch. For example; according to the "created" val… --- ## [Cluster state often in yellow: data node and master are running but failed to ping each other](https://discuss.elastic.co/t/cluster-state-often-in-yellow-data-node-and-master-are-running-but-failed-to-ping-each-other/127440)
**Author:** [@MarkDai](https://discuss.elastic.co/u/MarkDai)\ **Replies:** 2\ **Last updated:** [April 13, 2018, 6:03am UTC](https://discuss.elastic.co/t/cluster-state-often-in-yellow-data-node-and-master-are-running-but-failed-to-ping-each-other/127440 "2018-04-13T06:03:05Z")
Hello Guys! Would anyone please help on the strange problem I have worked for few days? Question in short: I have a 10 nodes ElasticSearch cluster, running ES 5.1.1. Recently, almost everyday, cluster is often in yel… --- ## [Does one index has one document?](https://discuss.elastic.co/t/does-one-index-has-one-document/127905)
**Author:** [@seungtae](https://discuss.elastic.co/u/seungtae)\ **Replies:** 1\ **Last updated:** [April 13, 2018, 5:59am UTC](https://discuss.elastic.co/t/does-one-index-has-one-document/127905 "2018-04-13T05:59:47Z")
It's very basic. An index has one document? or many documents? --- ## [What exactly do the thread-limits and queue-size for search-thread-pools indicate](https://discuss.elastic.co/t/what-exactly-do-the-thread-limits-and-queue-size-for-search-thread-pools-indicate/127843)
**Author:** [@Dominik\_Stadler](https://discuss.elastic.co/u/Dominik_Stadler)\ **Replies:** 1\ **Last updated:** [April 13, 2018, 2:27am UTC](https://discuss.elastic.co/t/what-exactly-do-the-thread-limits-and-queue-size-for-search-thread-pools-indicate/127843 "2018-04-13T02:27:20Z")
We are seeing some EsRejectedException in the form of "rejected execution of ... on EsThreadPoolExecutor\[search, queue capacity = 1000, ... \[Running, pool size = 4, active threads = 4, queued tasks = 1000, completed task… --- ## [90GB index and percolators](https://discuss.elastic.co/t/90gb-index-and-percolators/127655)
**Author:** [@digitalfiz](https://discuss.elastic.co/u/digitalfiz)\ **Replies:** 1\ **Last updated:** [April 13, 2018, 1:39am UTC](https://discuss.elastic.co/t/90gb-index-and-percolators/127655 "2018-04-13T01:39:02Z")
I am by no means any kind of Elasticsearch guru so I come to you guys to ask about the best way to handle the data we have in regards to indexes. Right now we have 1 huge index of users and percolators on that index but… --- ## [Moving shards is slow](https://discuss.elastic.co/t/moving-shards-is-slow/127363)
**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\ **Replies:** 14\ **Last updated:** [April 12, 2018, 10:48pm UTC](https://discuss.elastic.co/t/moving-shards-is-slow/127363 "2018-04-12T22:48:11Z")
This question is for ES version 6.1.2 I have a 30Gb index split into 60shards (about 500megs each). I turned off allocation, "cluster.routing.allocation.enable": "none" I send move commands to move 6 shards. It is… --- ## [IPC\_LOCK is needed?](https://discuss.elastic.co/t/ipc-lock-is-needed/127873)
**Author:** [@Sonia\_Gupta](https://discuss.elastic.co/u/Sonia_Gupta)\ **Replies:** 0\ **Last updated:** [April 12, 2018, 8:24pm UTC](https://discuss.elastic.co/t/ipc-lock-is-needed/127873 "2018-04-12T20:24:27Z")
Why do we need IPC\_LOCK for elasticsearch? I am using kubernetes, and initially had container capabilities set to add IPC\_LOCK, I tried to run without it, and it still runs fine. Am I missing something? --- ## [ES6x Cross Cluster Search compatible with ES241](https://discuss.elastic.co/t/es6x-cross-cluster-search-compatible-with-es241/127867)
**Author:** [@mcortinas](https://discuss.elastic.co/u/mcortinas)\ **Replies:** 1\ **Last updated:** [April 12, 2018, 8:06pm UTC](https://discuss.elastic.co/t/es6x-cross-cluster-search-compatible-with-es241/127867 "2018-04-12T20:06:44Z")
I'm currently mantain ELK platform all working ES2.4.1 in fact , kibana 4.6 is using a ES2.4.1 Tribe connected to several clusters all in ES2.4.1. I think add a ES6x cross cluster search connected to the same clusters … --- ## [Fresh install stuck](https://discuss.elastic.co/t/fresh-install-stuck/127763)
**Author:** [@nandha\_88](https://discuss.elastic.co/u/nandha_88)\ **Replies:** 5\ **Last updated:** [April 12, 2018, 4:41pm UTC](https://discuss.elastic.co/t/fresh-install-stuck/127763 "2018-04-12T16:41:54Z")
Hi all, I am doing a fresh install and its running this step for a logntime bin\]$ ./elasticsearch \[2018-04-12T13:17:40,127\]\[INFO \]\[o.e.n.Node \] \[\] initializing ... \[2018-04-12T13:17:40,330\]\[INFO \]\[o.e.e.NodeEnvironment… --- ## [Unable to delete indicies using Curator](https://discuss.elastic.co/t/unable-to-delete-indicies-using-curator/127833)
**Author:** [@CDawson1](https://discuss.elastic.co/u/CDawson1)\ **Replies:** 2\ **Last updated:** [April 12, 2018, 2:32pm UTC](https://discuss.elastic.co/t/unable-to-delete-indicies-using-curator/127833 "2018-04-12T14:32:49Z")
I've gone through about every thread on the topic, and have not found any answer or fix to this issue. I've just installed curator today (5.5.1) on top of an existing ELK 6.0 instance. I've configured my files using th… --- ## [Ctx.payload.hits.hits.0.\_source.field to watcher-history index](https://discuss.elastic.co/t/ctx-payload-hits-hits-0-source-field-to-watcher-history-index/127666)
**Author:** [@Alex\_Kefallonitis](https://discuss.elastic.co/u/Alex_Kefallonitis)\ **Replies:** 14\ **Last updated:** [April 12, 2018, 2:22pm UTC](https://discuss.elastic.co/t/ctx-payload-hits-hits-0-source-field-to-watcher-history-index/127666 "2018-04-12T14:22:28Z")
Hi all, I am trying to aggregate ctx source fields (triggered source event fields) and force watcher to write them to watcher-history index. For eg i wanna pass the ctx.payload.hits.hits.0.\_source.computer\_name of a win… --- ## [Multimatch and multiple function scores](https://discuss.elastic.co/t/multimatch-and-multiple-function-scores/127770)
**Author:** [@Arth](https://discuss.elastic.co/u/Arth)\ **Replies:** 1\ **Last updated:** [April 12, 2018, 2:14pm UTC](https://discuss.elastic.co/t/multimatch-and-multiple-function-scores/127770 "2018-04-12T14:14:09Z")
Hi, I'd like to increase/decrease the scores of the results from a multimatch query with several function scores. This following code works : FunctionScoreQueryBuilder functionScoreQuery = QueryBuilders.functionScoreQ… --- ## [PKI authentications causes VERY HIGH CPU usage](https://discuss.elastic.co/t/pki-authentications-causes-very-high-cpu-usage/125145)
**Author:** [@vb4t](https://discuss.elastic.co/u/vb4t)\ **Replies:** 2\ **Last updated:** [April 12, 2018, 2:08pm UTC](https://discuss.elastic.co/t/pki-authentications-causes-very-high-cpu-usage/125145 "2018-04-12T14:08:41Z")
Hello. I recently had to switch Kibana to authenticate against ES client node to use basic auth instead of client certificates. When using client certificates, the Elasticsearch client node CPU is loaded by 50% (it is a … --- ## [How to use updatebyquery with RestHighLevelClient?](https://discuss.elastic.co/t/how-to-use-updatebyquery-with-resthighlevelclient/127834)
**Author:** [@rahulcse](https://discuss.elastic.co/u/rahulcse)\ **Replies:** 0\ **Last updated:** [April 12, 2018, 1:54pm UTC](https://discuss.elastic.co/t/how-to-use-updatebyquery-with-resthighlevelclient/127834 "2018-04-12T13:54:30Z")
Hi, I am trying to use updatebyquery (https://www.elastic.co/guide/en/elasticsearch/client/java-api/current/java-docs-update-by-query.html), when I try to run Code: UpdateByQueryRequestBuilder updateByQuery = UpdateBy… --- ## [ES 6.1.2 Basic Licence - monitoring not accessible](https://discuss.elastic.co/t/es-6-1-2-basic-licence-monitoring-not-accessible/123989)
**Author:** [@michal.kourik](https://discuss.elastic.co/u/michal.kourik)\ **Replies:** 3\ **Last updated:** [April 12, 2018, 1:36pm UTC](https://discuss.elastic.co/t/es-6-1-2-basic-licence-monitoring-not-accessible/123989 "2018-04-12T13:36:17Z")
Hello everyone, we've got a problem with our monitoring tab in Kibana. It's quite easy - we've registered the Basic licence, but the monitoring tab is still displaying we should get one. \[elastic\_monitoring\_no\_active\] … --- ## [org.apache.lucene.store.AlreadyClosedException: Underlying file changed by an external force at 2017-05-15T07:17:37Z](https://discuss.elastic.co/t/org-apache-lucene-store-alreadyclosedexception-underlying-file-changed-by-an-external-force-at-2017-05-15t07-17-37z/126733)
**Author:** [@ggnanasekaran77](https://discuss.elastic.co/u/ggnanasekaran77)\ **Replies:** 4\ **Last updated:** [April 12, 2018, 12:50pm UTC](https://discuss.elastic.co/t/org-apache-lucene-store-alreadyclosedexception-underlying-file-changed-by-an-external-force-at-2017-05-15t07-17-37z/126733 "2018-04-12T12:50:33Z")
Dear Team, Could you please help us on the below error. \[2018-04-04T15:01:38,250\]\[WARN \]\[o.e.c.s.ClusterApplierService\] \[node\_3\] failed to notify ClusterStateListener org.apache.lucene.store.AlreadyClosedException: Un… --- ## [Unknown setting Filter. Settings.json](https://discuss.elastic.co/t/unknown-setting-filter-settings-json/127625)
**Author:** [@satyarajp](https://discuss.elastic.co/u/satyarajp)\ **Replies:** 1\ **Last updated:** [April 12, 2018, 12:49pm UTC](https://discuss.elastic.co/t/unknown-setting-filter-settings-json/127625 "2018-04-12T12:49:08Z")
Hi Team, I'm tryiing to create ngram analyzer for my project. I've tried multiple json formats provided in elasticsearch documentation too. Below is the common error I'm getting. unknown setting filter Please help… --- ## [KIbana - Elasticsearch : Request time out after 3000ms](https://discuss.elastic.co/t/kibana-elasticsearch-request-time-out-after-3000ms/127092)
**Author:** [@charanjitkaur](https://discuss.elastic.co/u/charanjitkaur)\ **Replies:** 31\ **Last updated:** [April 12, 2018, 12:48pm UTC](https://discuss.elastic.co/t/kibana-elasticsearch-request-time-out-after-3000ms/127092 "2018-04-12T12:48:19Z")
Hi, Elasticsearh version: 6.1.2 Kibana version : 6.1.2 We are processing logs through Filebeat - Logstash - ES - Kibana Log file in CSV format with 23 columns , Total logs count upto 2-3lakh We are creating a datata… --- ## [Relevance with short combinations of letters](https://discuss.elastic.co/t/relevance-with-short-combinations-of-letters/127813)
**Author:** [@Snail\_Banshee](https://discuss.elastic.co/u/Snail_Banshee)\ **Replies:** 0\ **Last updated:** [April 12, 2018, 12:25pm UTC](https://discuss.elastic.co/t/relevance-with-short-combinations-of-letters/127813 "2018-04-12T12:25:12Z")
Hello, everyone!:slight\_smile: I\`m trying to make relevant search for cars (inc. brands models and part names), for example search request is: "air filter audi a3". My settings (sorry for php array): 'settings' =\> \[ … --- ## [Installation of delete by query plugin fails](https://discuss.elastic.co/t/installation-of-delete-by-query-plugin-fails/127779)
**Author:** [@jfey](https://discuss.elastic.co/u/jfey)\ **Replies:** 4\ **Last updated:** [April 12, 2018, 12:13pm UTC](https://discuss.elastic.co/t/installation-of-delete-by-query-plugin-fails/127779 "2018-04-12T12:13:43Z")
Hello, I am trying to install the delete by query plugin for an Elasticsearch 2.4.6 instance. I have encountered the following issue: sudo bin/plugin install delete-by-query --verbose -\> Installing delete-by-query..… --- ## [Elasticsearch query search with special characters](https://discuss.elastic.co/t/elasticsearch-query-search-with-special-characters/127805)
**Author:** [@onkar](https://discuss.elastic.co/u/onkar)\ **Replies:** 0\ **Last updated:** [April 12, 2018, 11:37am UTC](https://discuss.elastic.co/t/elasticsearch-query-search-with-special-characters/127805 "2018-04-12T11:37:03Z")
We have the subset of field value as {"id":"193d4489dc545bb930dfd5ef0030514260e0a610"}. Field type is set as text with default analyzer. We want to search as Key:value (e.g., \\"id\\":\\"193d4489dc545bb930dfd5ef0030514260e0… --- ## [How to Insert Uipath Log into elasticsearch](https://discuss.elastic.co/t/how-to-insert-uipath-log-into-elasticsearch/127806)
**Author:** [@mkarthikeyan](https://discuss.elastic.co/u/mkarthikeyan)\ **Replies:** 0\ **Last updated:** [April 12, 2018, 11:37am UTC](https://discuss.elastic.co/t/how-to-insert-uipath-log-into-elasticsearch/127806 "2018-04-12T11:37:56Z")
Have installed 6.2.3 Kibana in the server were Orchestrator is installed. Able to view the ui path logs from the date of elastic search installation but not able to view the logs prior that. How to retrieve/insert those… --- ## [Performance of post\_filterr vs filter](https://discuss.elastic.co/t/performance-of-post-filterr-vs-filter/127797)
**Author:** [@tald](https://discuss.elastic.co/u/tald)\ **Replies:** 0\ **Last updated:** [April 12, 2018, 10:54am UTC](https://discuss.elastic.co/t/performance-of-post-filterr-vs-filter/127797 "2018-04-12T10:54:50Z")
Hi, I'm writing a service that receive as a parameter an elastic query and need to add, automatically, without knowing the query, extra conditions. From what i sow, there are 2 options: post\_filter - more simple, the … --- ## [Cannot index nested documents with ES-Hadoop 6.x.x jar](https://discuss.elastic.co/t/cannot-index-nested-documents-with-es-hadoop-6-x-x-jar/126290)
**Author:** [@hk4](https://discuss.elastic.co/u/hk4)\ **Replies:** 1\ **Last updated:** [April 12, 2018, 10:50am UTC](https://discuss.elastic.co/t/cannot-index-nested-documents-with-es-hadoop-6-x-x-jar/126290 "2018-04-12T10:50:38Z")
I have the following input json data with 'user' as a nested object: {"id":"1","user":\[{"first":"John","last":"Smith","amount":100.0}\]} {"id":"2","user":\[{"first":"Jane","last":"Hay","amount":50.0}\]} Before indexing th… --- ## [Email not trigger](https://discuss.elastic.co/t/email-not-trigger/127578)
**Author:** [@er.naliniranjan](https://discuss.elastic.co/u/er.naliniranjan)\ **Replies:** 4\ **Last updated:** [April 12, 2018, 10:07am UTC](https://discuss.elastic.co/t/email-not-trigger/127578 "2018-04-12T10:07:52Z")
Hi Team, I create watcher in Kibana and its getting trigger which i can see under Management-\> Elasticsearch-\> Watcher-\> Watches-\> system\_process\_watch. but email notification doesn't receive. Metric beat input \* { … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1719) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1721)