# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1734 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1735 --- ## [Getting Authorization error for the x-pack internal user \_system after installing x-pack in elastic 5.1.1... action \[indices:admin/aliases/get\] is unauthorized for user \[\_system\]](https://discuss.elastic.co/t/getting-authorization-error-for-the-x-pack-internal-user-system-after-installing-x-pack-in-elastic-5-1-1-action-indices-admin-aliases-get-is-unauthorized-for-user-system/126239)
**Author:** [@sangamesh.asokan](https://discuss.elastic.co/u/sangamesh.asokan)\ **Replies:** 1\ **Last updated:** [March 30, 2018, 11:13pm UTC](https://discuss.elastic.co/t/getting-authorization-error-for-the-x-pack-internal-user-system-after-installing-x-pack-in-elastic-5-1-1-action-indices-admin-aliases-get-is-unauthorized-for-user-system/126239 "2018-03-30T23:13:22Z")
Hi All, Need help in fixing this issue. Getting the below logs while trying to start up the elasticsearch after upgrading the elasticsearch to 5.1 from 1.7 to install x-pack. Caused by: org.elasticsearch.Elasticsear… --- ## [CPU stats on cluster showing -1](https://discuss.elastic.co/t/cpu-stats-on-cluster-showing-1/126295)
**Author:** [@GSCully](https://discuss.elastic.co/u/GSCully)\ **Replies:** 0\ **Last updated:** [March 30, 2018, 10:41pm UTC](https://discuss.elastic.co/t/cpu-stats-on-cluster-showing-1/126295 "2018-03-30T22:41:40Z")
ElasticSearch 6.1.1 on Windows 2012 r2, the cpu display in Kibana shows -1 and a query to the cluster returns the same. What could be the issue? --- ## [Suggester Context](https://discuss.elastic.co/t/suggester-context/125587)
**Author:** [@han1](https://discuss.elastic.co/u/han1)\ **Replies:** 3\ **Last updated:** [March 30, 2018, 7:39pm UTC](https://discuss.elastic.co/t/suggester-context/125587 "2018-03-30T19:39:56Z")
Hi We have an index that uses an Autocomplete Suggester. The index definition is: .Completion(c =\> c.Analyzer("standard") .PreserveSeparators(true) .MaxInputLength(100) .Contexts(ctx=\> ctx .Category(x=\>x.Name("coun… --- ## [Get text fields length with script](https://discuss.elastic.co/t/get-text-fields-length-with-script/125484)
**Author:** [@Bilal\_Demir](https://discuss.elastic.co/u/Bilal_Demir)\ **Replies:** 9\ **Last updated:** [March 30, 2018, 6:52pm UTC](https://discuss.elastic.co/t/get-text-fields-length-with-script/125484 "2018-03-30T18:52:50Z")
Hi, I'm trying to get text fields length to calculate my response size. doc\['filedname.subfield'\].value only geting numeric fields. After Elasticsearc 5.x version we can use "params.\_souerce.fieldname.subfield" but this… --- ## [Unknown char\_filter type \[pattern\_replace\]](https://discuss.elastic.co/t/unknown-char-filter-type-pattern-replace/125779)
**Author:** [@Tosh](https://discuss.elastic.co/u/Tosh)\ **Replies:** 7\ **Last updated:** [March 30, 2018, 6:39pm UTC](https://discuss.elastic.co/t/unknown-char-filter-type-pattern-replace/125779 "2018-03-30T18:39:41Z")
Hi, I'm trying to upgrade java api's to support elastic 6.2.2 . I'm getting below exception for unit tests : Caused by: org.springframework.beans.BeanInstantiationException: Failed to instantiate \[org.elasticsearch.cli… --- ## [FORBIDDEN/12/index read-only / allow delete (api)](https://discuss.elastic.co/t/forbidden-12-index-read-only-allow-delete-api/126067)
**Author:** [@Monica1](https://discuss.elastic.co/u/Monica1)\ **Replies:** 11\ **Last updated:** [March 30, 2018, 5:48pm UTC](https://discuss.elastic.co/t/forbidden-12-index-read-only-allow-delete-api/126067 "2018-03-30T17:48:16Z")
Hi I am getting below error in Logstash again and again. \[2018-03-29T09:56:20,280\]\[INFO \]\[logstash.outputs.elasticsearch\] retrying failed action with response code: 403 ({"type"=\>"cluster\_block\_exception", "reason"=\>"bl… --- ## [DeleteByQuery with searchTemplate filter](https://discuss.elastic.co/t/deletebyquery-with-searchtemplate-filter/126257)
**Author:** [@sudo](https://discuss.elastic.co/u/sudo)\ **Replies:** 0\ **Last updated:** [March 30, 2018, 4:48pm UTC](https://discuss.elastic.co/t/deletebyquery-with-searchtemplate-filter/126257 "2018-03-30T16:48:45Z")
Hi, I am using es 5.2 and trying to use Java API for delete\_by\_query. I am using search template to build get queries which I would like to pass in BulkIndexByScrollResponse response = DeleteByQueryAction.INSTANCE.… --- ## [Elasticsearch v5.0.2 (master eligible) nodes as Docker container keeps on restarting](https://discuss.elastic.co/t/elasticsearch-v5-0-2-master-eligible-nodes-as-docker-container-keeps-on-restarting/126251)
**Author:** [@bintut](https://discuss.elastic.co/u/bintut)\ **Replies:** 4\ **Last updated:** [March 30, 2018, 3:48pm UTC](https://discuss.elastic.co/t/elasticsearch-v5-0-2-master-eligible-nodes-as-docker-container-keeps-on-restarting/126251 "2018-03-30T15:48:33Z")
Hi all, Pardon me if my issue has been answered somewhere or is not the right place to ask. This is my first post to this forum. I built a custom Docker image based on RHEL v7.x using the Elasticsearch v5.0.2 RPM from … --- ## [Top trend/variation in terms aggregation](https://discuss.elastic.co/t/top-trend-variation-in-terms-aggregation/126244)
**Author:** [@VanMicky](https://discuss.elastic.co/u/VanMicky)\ **Replies:** 2\ **Last updated:** [March 30, 2018, 3:44pm UTC](https://discuss.elastic.co/t/top-trend-variation-in-terms-aggregation/126244 "2018-03-30T15:44:26Z")
Hello, Let's say I have a date histogram over a terms aggregation : { "size": 0, "aggs": { "my\_date\_histo": { "date\_histogram": { "field": "date", "interval": "month" }, "aggs"… --- ## [How lucene query works](https://discuss.elastic.co/t/how-lucene-query-works/126232)
**Author:** [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\ **Replies:** 1\ **Last updated:** [March 30, 2018, 1:45pm UTC](https://discuss.elastic.co/t/how-lucene-query-works/126232 "2018-03-30T13:45:27Z")
I am having problem with this query and i want to understand why this is happening and how lucene evaluates fields values. (id:1 OR id:2) OR (type:1 OR type:2) AND product:\* this query gives me 1000 results product:\* A… --- ## [Terms agg not giving all terms for huge text fields](https://discuss.elastic.co/t/terms-agg-not-giving-all-terms-for-huge-text-fields/126132)
**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Replies:** 2\ **Last updated:** [March 30, 2018, 1:56pm UTC](https://discuss.elastic.co/t/terms-agg-not-giving-all-terms-for-huge-text-fields/126132 "2018-03-30T13:56:04Z")
I have a text field which is big. (~3000 char). I am storing the flow/path of the user inside my application. Doc1: flow\_path: "ABCD12345678,ABCD098765432,PQRS56789043,EFG321987309,ABCD12345678,ABCD098765432,PQRS567890… --- ## [Completion Suggester incorrect sorting by weight](https://discuss.elastic.co/t/completion-suggester-incorrect-sorting-by-weight/125871)
**Author:** [@sefik.sahin](https://discuss.elastic.co/u/sefik.sahin)\ **Replies:** 1\ **Last updated:** [March 30, 2018, 1:51pm UTC](https://discuss.elastic.co/t/completion-suggester-incorrect-sorting-by-weight/125871 "2018-03-30T13:51:22Z")
Hi there, I have been used to completion type suggester which implementet nest in . Net. So I added 60M datas in elasticclient. So Completin suggester field model like this .net : public Dictionary\ **Author:** [@aurimas](https://discuss.elastic.co/u/aurimas)\ **Replies:** 1\ **Last updated:** [March 30, 2018, 1:42pm UTC](https://discuss.elastic.co/t/average-aggregation-seems-to-be-wrong/126235 "2018-03-30T13:42:16Z") Hi, I was running a derivative of average query on a metric of a child element and kind of got what I wanted, but noticed that some calculations does not add up precisely. So I decided to build a query step by step and … --- ## [Ngram highlighting differences between 5.3.0 and 6.2.3](https://discuss.elastic.co/t/ngram-highlighting-differences-between-5-3-0-and-6-2-3/125219)
**Author:** [@\_markus](https://discuss.elastic.co/u/_markus)\ **Replies:** 1\ **Last updated:** [March 30, 2018, 1:33pm UTC](https://discuss.elastic.co/t/ngram-highlighting-differences-between-5-3-0-and-6-2-3/125219 "2018-03-30T13:33:50Z")
Whilst switching my application to 6.2.3 I noticed some differences related to highlighting using ngram. I've a document having this content: http://subdomain.domain.tld/path/script.extension?query=param#hash and I've… --- ## [Elasticsearch in Docker--a good idea?](https://discuss.elastic.co/t/elasticsearch-in-docker-a-good-idea/126234)
**Author:** [@hokiegeek2](https://discuss.elastic.co/u/hokiegeek2)\ **Replies:** 0\ **Last updated:** [March 30, 2018, 1:29pm UTC](https://discuss.elastic.co/t/elasticsearch-in-docker-a-good-idea/126234 "2018-03-30T13:29:37Z")
Hi Everyone, I am currently researching an issue I am seeing in my Elasticsearch Docker on Mesos/Marathon whereby it appears that Lucene is slowly grabbing more and more off-heap memory (page cache) until it exceeds the… --- ## [MatchPhrase with zero terms](https://discuss.elastic.co/t/matchphrase-with-zero-terms/125211)
**Author:** [@Jens\_Fogh](https://discuss.elastic.co/u/Jens_Fogh)\ **Replies:** 1\ **Last updated:** [March 30, 2018, 1:28pm UTC](https://discuss.elastic.co/t/matchphrase-with-zero-terms/125211 "2018-03-30T13:28:17Z")
When you write a phrasequery in the "old" way as this: {"match":{"":{"query":"","zero\_terms\_query":"all","type":"phrase"}}}\]}} It is possible to use "zero\_terms\_query":"all" But if I use {"match\_phrase":{"":{"query":… --- ## [Elasticsearch Docker container keeps crashing with exit status of 137](https://discuss.elastic.co/t/elasticsearch-docker-container-keeps-crashing-with-exit-status-of-137/125410)
**Author:** [@hokiegeek2](https://discuss.elastic.co/u/hokiegeek2)\ **Replies:** 6\ **Last updated:** [March 30, 2018, 1:24pm UTC](https://discuss.elastic.co/t/elasticsearch-docker-container-keeps-crashing-with-exit-status-of-137/125410 "2018-03-30T13:24:32Z")
Hi Everyone, I have a docker-xpack docker image that I deploy on marathon/mesos. The image works great and is uber-stable when xplack security is disabled. When I enable xpack security and use encrypted comms, the conta… --- ## [Has\_child query with multiple type?](https://discuss.elastic.co/t/has-child-query-with-multiple-type/125165)
**Author:** [@prasanth](https://discuss.elastic.co/u/prasanth)\ **Replies:** 1\ **Last updated:** [March 30, 2018, 1:23pm UTC](https://discuss.elastic.co/t/has-child-query-with-multiple-type/125165 "2018-03-30T13:23:05Z")
I have a parent which has multiple different types of children. Is it possible to preform a has\_child search over multiple types of children? something like { "has\_child" : { "type" : "\*", "… --- ## [ELK high Availability](https://discuss.elastic.co/t/elk-high-availability/126229)
**Author:** [@jugurtha](https://discuss.elastic.co/u/jugurtha)\ **Replies:** 3\ **Last updated:** [March 30, 2018, 12:50pm UTC](https://discuss.elastic.co/t/elk-high-availability/126229 "2018-03-30T12:50:27Z")
HI I have 3 elestic search node node1 master (data center1) node 2 (master+data) (data center 2) node 3 master+data data center 1 my issue is: if the data center 1 falls down my elastic search is down do you ha… --- ## [What is the hunspell version used by elasticsearch?](https://discuss.elastic.co/t/what-is-the-hunspell-version-used-by-elasticsearch/126224)
**Author:** [@stulentsev](https://discuss.elastic.co/u/stulentsev)\ **Replies:** 1\ **Last updated:** [March 30, 2018, 12:38pm UTC](https://discuss.elastic.co/t/what-is-the-hunspell-version-used-by-elasticsearch/126224 "2018-03-30T12:38:29Z")
I'm trying to use a Dutch hunspell dictionary from LibreOffice: nl\_NL.aff\\nl\_NL - libreoffice/dictionaries - main, development dictionaries repository But it has this warning: BEWARE: THIS AFFIX FILE AND DICTIONARY R… --- ## [Understand Explain API scoring](https://discuss.elastic.co/t/understand-explain-api-scoring/125805)
**Author:** [@keithag](https://discuss.elastic.co/u/keithag)\ **Replies:** 1\ **Last updated:** [March 30, 2018, 12:23pm UTC](https://discuss.elastic.co/t/understand-explain-api-scoring/125805 "2018-03-30T12:23:58Z")
I'm trying to understand the Explain API scoring in the elastic documentation: https://www.elastic.co/guide/en/elasticsearch/reference/current/search-explain.html When I couldn't figure it out on my own simple index wit… --- ## [Elastic Search Language Based](https://discuss.elastic.co/t/elastic-search-language-based/126199)
**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\ **Replies:** 5\ **Last updated:** [March 30, 2018, 11:06am UTC](https://discuss.elastic.co/t/elastic-search-language-based/126199 "2018-03-30T11:06:48Z")
Hi, I have created one index and into that index, I have created two documents, one document contains data in English language and another document contains data in the Japanese language. but when I am searching data of… --- ## [Synonym matching under the hood](https://discuss.elastic.co/t/synonym-matching-under-the-hood/126217)
**Author:** [@imranazad](https://discuss.elastic.co/u/imranazad)\ **Replies:** 0\ **Last updated:** [March 30, 2018, 10:54am UTC](https://discuss.elastic.co/t/synonym-matching-under-the-hood/126217 "2018-03-30T10:54:24Z")
I'm trying to get a better understanding of how the terms from the query are matched against synonyms. I've been adding breakpoints to this file: https://github.com/apache/lucene-solr/blob/master/lucene/analysis/common/s… --- ## [X-Pack notification email](https://discuss.elastic.co/t/x-pack-notification-email/126209)
**Author:** [@flochon](https://discuss.elastic.co/u/flochon)\ **Replies:** 0\ **Last updated:** [March 30, 2018, 8:45am UTC](https://discuss.elastic.co/t/x-pack-notification-email/126209 "2018-03-30T08:45:28Z")
Hello, I want send a mail with the watch of Elasticsearch. The mail is sending with an exim4 mailbox but I don't know how to configure Elasticsearch to send it. I write this: xpack.notification.email.account: sm… --- ## [Index action add \_routing to documents](https://discuss.elastic.co/t/index-action-add-routing-to-documents/126189)
**Author:** [@None123455555](https://discuss.elastic.co/u/None123455555)\ **Replies:** 1\ **Last updated:** [March 30, 2018, 9:00am UTC](https://discuss.elastic.co/t/index-action-add-routing-to-documents/126189 "2018-03-30T09:00:23Z")
Is it possible to add the \_routing to each document when using an index action? --- ## [Synonyms for Sankt and St](https://discuss.elastic.co/t/synonyms-for-sankt-and-st/126057)
**Author:** [@Kurzer\_Patrick](https://discuss.elastic.co/u/Kurzer_Patrick)\ **Replies:** 3\ **Last updated:** [March 30, 2018, 8:52am UTC](https://discuss.elastic.co/t/synonyms-for-sankt-and-st/126057 "2018-03-30T08:52:39Z")
Hi there, I'm trying to get synonyms working for my existing setup. Currently I have this settings: PUT city { "settings": { "analysis": { "analyzer": { "autocomplete": { "tokenizer": "autocomplete", … --- ## [Query Elasticsearch for Cisco telemetry data](https://discuss.elastic.co/t/query-elasticsearch-for-cisco-telemetry-data/126204)
**Author:** [@neerajsapkota](https://discuss.elastic.co/u/neerajsapkota)\ **Replies:** 0\ **Last updated:** [March 30, 2018, 8:11am UTC](https://discuss.elastic.co/t/query-elasticsearch-for-cisco-telemetry-data/126204 "2018-03-30T08:11:48Z")
Here is the telemetry data received from cisco router in json. how do i query elasticsearch so that i get all the InterfaceStatistics per InterfaceName .. Eg: Bundle-Ether3.400.pppoe25235 ----- \> InterfaceStatistics": … --- ## [X-Pack : Monitoring Only?](https://discuss.elastic.co/t/x-pack-monitoring-only/126195)
**Author:** [@Julzor](https://discuss.elastic.co/u/Julzor)\ **Replies:** 1\ **Last updated:** [March 30, 2018, 7:57am UTC](https://discuss.elastic.co/t/x-pack-monitoring-only/126195 "2018-03-30T07:57:23Z")
Hello, I'm kinda new to ELK stack. Currently, i have a cluster of 2 nodes, 3 logstash sources and 1 Kibana. I would like to install the Monitoring tab in Kibana, and i understood correctly, i need to install X-Pack. S… --- ## [Problem with upgrading from ES 2.4 to ES 5.2](https://discuss.elastic.co/t/problem-with-upgrading-from-es-2-4-to-es-5-2/126014)
**Author:** [@MaralErdene\_Tumursuh](https://discuss.elastic.co/u/MaralErdene_Tumursuh)\ **Replies:** 2\ **Last updated:** [March 30, 2018, 7:48am UTC](https://discuss.elastic.co/t/problem-with-upgrading-from-es-2-4-to-es-5-2/126014 "2018-03-30T07:48:39Z")
Hello brothers, I'm upgrading the project from ES2.4 to ES5.2 with Oracle ADF. Unfortunately the following error is encountered in the creation of client. Caused by: java.lang.ClassNotFoundException: org.elasticsearch… --- ## [X-pack Failed to authenticate user \[elastic\]](https://discuss.elastic.co/t/x-pack-failed-to-authenticate-user-elastic/126179)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 7\ **Last updated:** [March 30, 2018, 7:28am UTC](https://discuss.elastic.co/t/x-pack-failed-to-authenticate-user-elastic/126179 "2018-03-30T07:28:54Z")
Hi everyone, after installing x-pack, I know I need to modify the elasticsearch password.But when I use the command on ES bin/x-pack/setup-passwords interactive it show me an error: Failed to authenticate user 'elasti… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1733) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1735)