# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1728 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1729 --- ## [Spring Boot Starter connecting to ES 6.2.3](https://discuss.elastic.co/t/spring-boot-starter-connecting-to-es-6-2-3/127037)
**Author:** [@drapermd](https://discuss.elastic.co/u/drapermd)\ **Replies:** 0\ **Last updated:** [April 6, 2018, 6:52am UTC](https://discuss.elastic.co/t/spring-boot-starter-connecting-to-es-6-2-3/127037 "2018-04-06T06:52:55Z")
I'm having trouble getting the right code to connect to my 6.2.3 server. I've started a question on Stack Overflow that provides the relevant details: \[Here\] (https://stackoverflow.com/questions/49686505/connecting-to-… --- ## [How to convert json string to number](https://discuss.elastic.co/t/how-to-convert-json-string-to-number/126993)
**Author:** [@Rahulkumar](https://discuss.elastic.co/u/Rahulkumar)\ **Replies:** 3\ **Last updated:** [April 6, 2018, 6:34am UTC](https://discuss.elastic.co/t/how-to-convert-json-string-to-number/126993 "2018-04-06T06:34:54Z")
Hi All, I am sending custom json string with the help of http rest call. When index is created, the document is having string type for all kind of fields. there are few numeric values as well and I want to convert those… --- ## [ES use 100% cpu resource due to same spacial query](https://discuss.elastic.co/t/es-use-100-cpu-resource-due-to-same-spacial-query/126579)
**Author:** [@showmeall](https://discuss.elastic.co/u/showmeall)\ **Replies:** 6\ **Last updated:** [April 6, 2018, 5:54am UTC](https://discuss.elastic.co/t/es-use-100-cpu-resource-due-to-same-spacial-query/126579 "2018-04-06T05:54:30Z")
our es just have one node, and it is dead sometimes, we can see there have a lot of tasks when check http://localhost:9200/\_tasks?pretty&detailed , it will continual a few hours，in this time we can not connected the ES, … --- ## [ES Auto Updating its version (Downgrade and Upgrade)](https://discuss.elastic.co/t/es-auto-updating-its-version-downgrade-and-upgrade/126860)
**Author:** [@vaidabhishek](https://discuss.elastic.co/u/vaidabhishek)\ **Replies:** 2\ **Last updated:** [April 6, 2018, 4:49am UTC](https://discuss.elastic.co/t/es-auto-updating-its-version-downgrade-and-upgrade/126860 "2018-04-06T04:49:02Z")
We deployed a 5 Node cluster on Ubuntu 16.04 using dpkg. Strangely enough we've been facing an issue where ES updates the version. It's sometimes 6.2.2 going to 6.2.1 or the other way. Really don't know what is happ… --- ## [cURL - Could not get simple GET to work](https://discuss.elastic.co/t/curl-could-not-get-simple-get-to-work/126831)
**Author:** [@Aravind](https://discuss.elastic.co/u/Aravind)\ **Replies:** 4\ **Last updated:** [April 5, 2018, 10:10pm UTC](https://discuss.elastic.co/t/curl-could-not-get-simple-get-to-work/126831 "2018-04-05T22:10:39Z")
Sorry this could be a basic question as I'm getting started. I'm performing a simple match all type query via Kibana which just works fine. Then I just did "Copy as cURL" from kibana which looks likes this - curl -XGE… --- ## [RestHighLevelClient mocking](https://discuss.elastic.co/t/resthighlevelclient-mocking/123027)
**Author:** [@infodavid](https://discuss.elastic.co/u/infodavid)\ **Replies:** 9\ **Last updated:** [March 16, 2018, 1:51pm UTC](https://discuss.elastic.co/t/resthighlevelclient-mocking/123027 "2018-03-16T13:51:47Z")
Hi, Is there a way to mock the Java client 'RestHighLevelClient' ? Most of the methods are 'final' and can't be overridden. Thanks for your support. --- ## [Aggregation job kills Elasticsearch nodes](https://discuss.elastic.co/t/aggregation-job-kills-elasticsearch-nodes/126980)
**Author:** [@sknayar](https://discuss.elastic.co/u/sknayar)\ **Replies:** 0\ **Last updated:** [April 5, 2018, 6:06pm UTC](https://discuss.elastic.co/t/aggregation-job-kills-elasticsearch-nodes/126980 "2018-04-05T18:06:12Z")
We run an ES version 5.4.1 cluster. It takes in between 1-2TB of network session data (netflow processed by BRO devices) and a few other logs. We have hot nodes and warm nodes in the cluster and all works fine except we … --- ## [How the heck do you setup the default password?](https://discuss.elastic.co/t/how-the-heck-do-you-setup-the-default-password/126267)
**Author:** [@craigvphillips](https://discuss.elastic.co/u/craigvphillips)\ **Replies:** 2\ **Last updated:** [April 5, 2018, 5:45pm UTC](https://discuss.elastic.co/t/how-the-heck-do-you-setup-the-default-password/126267 "2018-04-05T17:45:02Z")
I download elastic 6.1.4 Unzip elastic 6.1.4 install x-pack start elasticsearch 6.1.4 run setup-passwords auto Unexpected response code \[403\] from calling GET http://127.0.0.1:9200/\_xpack/security/\_authenticate?pret… --- ## [Rollover Alias with date?](https://discuss.elastic.co/t/rollover-alias-with-date/126469)
**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\ **Replies:** 8\ **Last updated:** [April 5, 2018, 5:28pm UTC](https://discuss.elastic.co/t/rollover-alias-with-date/126469 "2018-04-05T17:28:11Z")
Hello All, I'm having difficulty figuring out the correct API call to rollover an index to an hourly index name. Basically I need to rollover every hour if the index is over a certain size, and I have it working with a … --- ## [Composite Aggregation Java API?](https://discuss.elastic.co/t/composite-aggregation-java-api/126642)
**Author:** [@jimyoo](https://discuss.elastic.co/u/jimyoo)\ **Replies:** 1\ **Last updated:** [April 5, 2018, 4:51pm UTC](https://discuss.elastic.co/t/composite-aggregation-java-api/126642 "2018-04-05T16:51:05Z")
I like "Composite Aggregation" - good addition and thanks. :+1: Is there Java API for this? If not, any plan for Transport, Rest Client ... ? For queries, we are using Transport API (with Elasticsearch 5.6) now and pla… --- ## [Elasticsearch Cluster can't join new node](https://discuss.elastic.co/t/elasticsearch-cluster-cant-join-new-node/126964)
**Author:** [@souf\_el\_badraoui](https://discuss.elastic.co/u/souf_el_badraoui)\ **Replies:** 1\ **Last updated:** [April 5, 2018, 3:57pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-cant-join-new-node/126964 "2018-04-05T15:57:57Z")
i'm getting the below warn continuously after installing x-pack 6.2 failed to validate incoming join request from node org.elasticsearch.transport.RemoteTransportException: \[internal:discovery/zen/join/validate\] Caus… --- ## [How to search for objects inside arrays](https://discuss.elastic.co/t/how-to-search-for-objects-inside-arrays/126907)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 4\ **Last updated:** [April 5, 2018, 3:33pm UTC](https://discuss.elastic.co/t/how-to-search-for-objects-inside-arrays/126907 "2018-04-05T15:33:18Z")
I understand that arrays are not well supported in ES, but I would like to know the syntax to search for a nested object as below. My current document source contains fields like this: { "team": "Lorem", "cards": \[… --- ## [How to make Elasticsearch as high available?](https://discuss.elastic.co/t/how-to-make-elasticsearch-as-high-available/126926)
**Author:** [@rvv\_nani](https://discuss.elastic.co/u/rvv_nani)\ **Replies:** 5\ **Last updated:** [April 5, 2018, 3:43pm UTC](https://discuss.elastic.co/t/how-to-make-elasticsearch-as-high-available/126926 "2018-04-05T15:43:39Z")
I have a problem with Elasticsearch. At present we have one elasticsearch for all environment. That Elasticsearch is connected with Logstash (For logs indexing purpose) as well as Zipkin (Logs Streaming Purpose). Here… --- ## [Architecture suggestion](https://discuss.elastic.co/t/architecture-suggestion/126829)
**Author:** [@las](https://discuss.elastic.co/u/las)\ **Replies:** 2\ **Last updated:** [April 5, 2018, 3:38pm UTC](https://discuss.elastic.co/t/architecture-suggestion/126829 "2018-04-05T15:38:09Z")
I have a set of applications and have filebeat sending logs to logstash where they will be aggregated. Is using logstash for aggregating logs of different format a good idea? As logs from multiple servers need to be agg… --- ## [Update Nested](https://discuss.elastic.co/t/update-nested/126540)
**Author:** [@Varan](https://discuss.elastic.co/u/Varan)\ **Replies:** 1\ **Last updated:** [April 4, 2018, 8:08am UTC](https://discuss.elastic.co/t/update-nested/126540 "2018-04-04T08:08:09Z")
Hi, I'm using ES 6.2.2. Could I update a nested object with a new value while keeping the already indexed values? POST /people/\_doc/100 { "num" : \[ { "numero":"789456123", … --- ## [Send "format" logs](https://discuss.elastic.co/t/send-format-logs/126955)
**Author:** [@pablo\_gracia](https://discuss.elastic.co/u/pablo_gracia)\ **Replies:** 0\ **Last updated:** [April 5, 2018, 2:49pm UTC](https://discuss.elastic.co/t/send-format-logs/126955 "2018-04-05T14:49:30Z")
I have an issue by sending the format of my logs to elasticsearch, I've got my logs in a file, they are getting into the file in this format: Apr 5 16:11:01 T30\_PABLO (2018-04-05T14:11:01) http-proxy\[2072\]: msg\_id="1AF… --- ## [Ignore\_malformed fails with file input plugin](https://discuss.elastic.co/t/ignore-malformed-fails-with-file-input-plugin/126952)
**Author:** [@atira](https://discuss.elastic.co/u/atira)\ **Replies:** 0\ **Last updated:** [April 5, 2018, 2:37pm UTC](https://discuss.elastic.co/t/ignore-malformed-fails-with-file-input-plugin/126952 "2018-04-05T14:37:50Z")
I have a field called bytes\_response that can take two types of values: integer - Here's the mapping in ES (version 5.6.8): "bytes\_response": { "type": "integer", "ignore\_malformed": true } Still I get the foll… --- ## [Elastic search redefining mapping of an index](https://discuss.elastic.co/t/elastic-search-redefining-mapping-of-an-index/126931)
**Author:** [@Ongun](https://discuss.elastic.co/u/Ongun)\ **Replies:** 1\ **Last updated:** [April 5, 2018, 2:34pm UTC](https://discuss.elastic.co/t/elastic-search-redefining-mapping-of-an-index/126931 "2018-04-05T14:34:43Z")
I have an index called sql\_session on Elasticsearch and this index has some floating point data which is wrongly indexed as a long data type. I want to correct this, is it possible to do so with a command similar to the … --- ## [How to configure Retention Policy for 7days and it has to execute automatically for Elasticsearch in Windows System](https://discuss.elastic.co/t/how-to-configure-retention-policy-for-7days-and-it-has-to-execute-automatically-for-elasticsearch-in-windows-system/123270)
**Author:** [@rvv\_nani](https://discuss.elastic.co/u/rvv_nani)\ **Replies:** 4\ **Last updated:** [April 5, 2018, 2:12pm UTC](https://discuss.elastic.co/t/how-to-configure-retention-policy-for-7days-and-it-has-to-execute-automatically-for-elasticsearch-in-windows-system/123270 "2018-04-05T14:12:17Z")
Hi Experts, I have few doubts on retention policy . Where we need to write the retention policy code in ELK. If it is a script how we have to write and where we need to execute to get it run automatically for every 7… --- ## [Can't see metricbeat data in Discovery](https://discuss.elastic.co/t/cant-see-metricbeat-data-in-discovery/126944)
**Author:** [@vaishali1](https://discuss.elastic.co/u/vaishali1)\ **Replies:** 1\ **Last updated:** [April 5, 2018, 2:11pm UTC](https://discuss.elastic.co/t/cant-see-metricbeat-data-in-discovery/126944 "2018-04-05T14:11:24Z")
Hi, I can't see any data in Discovery metricbeat.modules: - module: system metricsets: - cpu - filesystem - memory - network - process enabled: true period: 10s processes: \['.\*'\] cpu\_ticks… --- ## [Elasticsearch 6.2.2 after X-pack installation cluster health decreased](https://discuss.elastic.co/t/elasticsearch-6-2-2-after-x-pack-installation-cluster-health-decreased/126696)
**Author:** [@Ongun](https://discuss.elastic.co/u/Ongun)\ **Replies:** 3\ **Last updated:** [April 5, 2018, 12:03pm UTC](https://discuss.elastic.co/t/elasticsearch-6-2-2-after-x-pack-installation-cluster-health-decreased/126696 "2018-04-05T12:03:56Z")
As a new ELK stack user I installed X-pack trial version on Elasticsearch and Kibana on ELK stack on Windows 10. After installation new indices are generated in Elasticsearch and the cluster health decreased from green t… --- ## [Update document field by value of another document](https://discuss.elastic.co/t/update-document-field-by-value-of-another-document/126905)
**Author:** [@Arko](https://discuss.elastic.co/u/Arko)\ **Replies:** 0\ **Last updated:** [April 5, 2018, 11:24am UTC](https://discuss.elastic.co/t/update-document-field-by-value-of-another-document/126905 "2018-04-05T11:24:35Z")
I have problem with Elasticsearch update. It's trivial in sql engines but I can't do it in elasticsearch. Let's say I have fellowing documents in ES: PUT logs/\_doc/1 { "commonId" : "111111", "user" : "abc", "phase" … --- ## [Error: Could not find or load main class org.elasticsearch.bootstrap.Elasticsearch](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-bootstrap-elasticsearch/125826)
**Author:** [@breakAwall](https://discuss.elastic.co/u/breakAwall)\ **Replies:** 7\ **Last updated:** [April 5, 2018, 11:57am UTC](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-bootstrap-elasticsearch/125826 "2018-04-05T11:57:07Z")
I ran the command bin/elasticsearch command and got the error Error: Could not find or load main class org.elasticsearch.bootstrap.Elasticsearch As per previous threads I ensured that my java Home variable was set corr… --- ## [Curator 5.5.1](https://discuss.elastic.co/t/curator-5-5-1/126626)
**Author:** [@ezmani](https://discuss.elastic.co/u/ezmani)\ **Replies:** 5\ **Last updated:** [April 5, 2018, 11:35am UTC](https://discuss.elastic.co/t/curator-5-5-1/126626 "2018-04-05T11:35:36Z")
We have been attempting to use Curator in our elastic environment and are running into a wall. We have Curator installed, setup curator.yml file and an action file to delete indices. We've enabled log at the DEBUG level.… --- ## [Help in query approach needed](https://discuss.elastic.co/t/help-in-query-approach-needed/126863)
**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\ **Replies:** 0\ **Last updated:** [April 5, 2018, 7:05am UTC](https://discuss.elastic.co/t/help-in-query-approach-needed/126863 "2018-04-05T07:05:12Z")
Hi All, I have a sample data in my index as below { "id": 1, "doc": "d1" } { "id": 2, "doc": "d1", "event": "e1" } { "id": 3, "doc": "d1", "event": "e2" } { "id": 4, "doc": "d2", "event": "e1" } { "id": 5, "doc":… --- ## [High cpu usage with marvel-agent (2.4)](https://discuss.elastic.co/t/high-cpu-usage-with-marvel-agent-2-4/126587)
**Author:** [@fnork](https://discuss.elastic.co/u/fnork)\ **Replies:** 8\ **Last updated:** [April 5, 2018, 11:01am UTC](https://discuss.elastic.co/t/high-cpu-usage-with-marvel-agent-2-4/126587 "2018-04-05T11:01:20Z")
We have an 8 node cluster with about 100 indexes and 1000 shards. The node with the primary marvel index shard shows a running \>80% cpu usage (in marvel :), while indexing about 60 docs/sec. hot threads shows the marve… --- ## [Elasticsearch Upgrade to 6.2.3 from 2.3.1](https://discuss.elastic.co/t/elasticsearch-upgrade-to-6-2-3-from-2-3-1/126753)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 2\ **Last updated:** [April 5, 2018, 10:46am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-to-6-2-3-from-2-3-1/126753 "2018-04-05T10:46:50Z")
I have read the documentation about upgrading elasticsearch to the latest 6.2. Can someone let me know if my below understanding is correct ? We can do full cluster upgrade to 5.6 from 2.3.1. There is no need of reind… --- ## [Rest High Level Client Bulk Api write request failing: mapper\_parsing\_exception](https://discuss.elastic.co/t/rest-high-level-client-bulk-api-write-request-failing-mapper-parsing-exception/124600)
**Author:** [@vikaslalwani](https://discuss.elastic.co/u/vikaslalwani)\ **Replies:** 2\ **Last updated:** [April 5, 2018, 8:43am UTC](https://discuss.elastic.co/t/rest-high-level-client-bulk-api-write-request-failing-mapper-parsing-exception/124600 "2018-04-05T08:43:19Z")
Hi We recently migrated to ES 6.1.2 from ES 1.7. in the older version we had index mapping as \[ { "ts\_dynamic\_template": { "mapping": { "norms": { "enabled": false }, "in… --- ## [Group by Request , Respponse and Message](https://discuss.elastic.co/t/group-by-request-respponse-and-message/123864)
**Author:** [@mbvelo](https://discuss.elastic.co/u/mbvelo)\ **Replies:** 3\ **Last updated:** [April 5, 2018, 9:30am UTC](https://discuss.elastic.co/t/group-by-request-respponse-and-message/123864 "2018-04-05T09:30:13Z")
Hi I have a request to build a query or dashboard to group Group by Request , Response and Message in one view has this been done? --- ## [Elasticsearch-Curator](https://discuss.elastic.co/t/elasticsearch-curator/126872)
**Author:** [@flochon](https://discuss.elastic.co/u/flochon)\ **Replies:** 2\ **Last updated:** [April 5, 2018, 9:12am UTC](https://discuss.elastic.co/t/elasticsearch-curator/126872 "2018-04-05T09:12:40Z")
I have a little question about the elasticsearch-curator. When I throw the command, the command is automated for the other days or I must repeat manually the command all days ? I use the last version of elastic. [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1727) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1729)