# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1735

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1736

---

## [How can i get the Highest weight or the lastest events](https://discuss.elastic.co/t/how-can-i-get-the-highest-weight-or-the-lastest-events/126197)

<div class="topic-metadata">

**Author:** [@chenzilong444](https://discuss.elastic.co/u/chenzilong444)\
**Replies:** 0\
**Last updated:** [March 30, 2018, 7:27am UTC](https://discuss.elastic.co/t/how-can-i-get-the-highest-weight-or-the-lastest-events/126197 "2018-03-30T07:27:43Z")

</div>

i have a field like \[ID:result\],the same ID have different result just like\[5728:success\]\[5728:leave\]\[5729:success\]\[5729:cancel\]\[5729:leave\],so how can i get the highest weight under the same ID or the lastest，and i want…

---

## [Elasticsearch with python not showing complete data](https://discuss.elastic.co/t/elasticsearch-with-python-not-showing-complete-data/126193)

<div class="topic-metadata">

**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\
**Replies:** 1\
**Last updated:** [March 30, 2018, 7:04am UTC](https://discuss.elastic.co/t/elasticsearch-with-python-not-showing-complete-data/126193 "2018-03-30T07:04:52Z")

</div>

Hi , I am trying to pull the data from elastisearch through python script. I am using wildcard to select the index, but seems somehow it's not working properly. Here is my script: es = Elasticsearch(\[{'host': 'nofcnl0…

---

## [Elasticsearch disk occupancy](https://discuss.elastic.co/t/elasticsearch-disk-occupancy/126194)

<div class="topic-metadata">

**Author:** [@sebastienf](https://discuss.elastic.co/u/sebastienf)\
**Replies:** 1\
**Last updated:** [March 30, 2018, 6:57am UTC](https://discuss.elastic.co/t/elasticsearch-disk-occupancy/126194 "2018-03-30T06:57:31Z")

</div>

Hi, I am kind of new in the ES word, i work with ES V5 and I have some questions... Thanks in advance to lightening me :slight\_smile: I need to know the total real occupancy of my datas through my ES cluster. To do t…

---

## [Nested: CorruptIndexException\[failed engine (reason: \[corrupt file (source: \[index\])](https://discuss.elastic.co/t/nested-corruptindexexception-failed-engine-reason-corrupt-file-source-index/126178)

<div class="topic-metadata">

**Author:** [@law](https://discuss.elastic.co/u/law)\
**Replies:** 1\
**Last updated:** [March 30, 2018, 6:36am UTC](https://discuss.elastic.co/t/nested-corruptindexexception-failed-engine-reason-corrupt-file-source-index/126178 "2018-03-30T06:36:30Z")

</div>

Hi everyone， My ES node has a index which has a shard with status UNASSIGNED, when i perform cluster reroute using this command: curl -uuser:passwd -XPOST 'localhost:19200/\_cluster/reroute?pretty' -d '{ "comman…

---

## [Query on risks about beta feature in 6.x](https://discuss.elastic.co/t/query-on-risks-about-beta-feature-in-6-x/126000)

<div class="topic-metadata">

**Author:** [@Jigar\_Patel](https://discuss.elastic.co/u/Jigar_Patel)\
**Replies:** 2\
**Last updated:** [March 30, 2018, 6:05am UTC](https://discuss.elastic.co/t/query-on-risks-about-beta-feature-in-6-x/126000 "2018-03-30T06:05:33Z")

</div>

Composite Aggregation is launched in 6.x which is highly useful for our use case but its in beta. What is the risk associated with using a beta feature esp. Composite Aggregation in Production? What are the chances that …

---

## [Elastic Search installation on ubuntu GCP image not starting](https://discuss.elastic.co/t/elastic-search-installation-on-ubuntu-gcp-image-not-starting/125923)

<div class="topic-metadata">

**Author:** [@Kaviya\_Rawat](https://discuss.elastic.co/u/Kaviya_Rawat)\
**Replies:** 2\
**Last updated:** [March 30, 2018, 5:52am UTC](https://discuss.elastic.co/t/elastic-search-installation-on-ubuntu-gcp-image-not-starting/125923 "2018-03-30T05:52:27Z")

</div>

Hi .. I created a GCP instance and installed elasticsearch in it .. The first time, the REST APIs of elasticsearch work fine, but after a restart of the elasticsearch or reconnecting to the instance .. I just does not s…

---

## [Elasticsearch-5.4.1 - failed to start](https://discuss.elastic.co/t/elasticsearch-5-4-1-failed-to-start/126184)

<div class="topic-metadata">

**Author:** [@omendra](https://discuss.elastic.co/u/omendra)\
**Replies:** 0\
**Last updated:** [March 30, 2018, 5:45am UTC](https://discuss.elastic.co/t/elasticsearch-5-4-1-failed-to-start/126184 "2018-03-30T05:45:36Z")

</div>

Hi, I am struggling to restart elastic search. It gives following error - java.io.IOException: failed to write in data directory \[C:\\ELKSetup\\elasticsearch\\data\\SAXOVMS2272\\nodes\\0\\indices\\va1RG-sVS96HvYR-SjmZMQ\\3\] wri…

---

## [Elasticsearch 6.1.3 -- failed to discover master after node restart](https://discuss.elastic.co/t/elasticsearch-6-1-3-failed-to-discover-master-after-node-restart/124827)

<div class="topic-metadata">

**Author:** [@LogBabel](https://discuss.elastic.co/u/LogBabel)\
**Replies:** 5\
**Last updated:** [March 30, 2018, 4:53am UTC](https://discuss.elastic.co/t/elasticsearch-6-1-3-failed-to-discover-master-after-node-restart/124827 "2018-03-30T04:53:16Z")

</div>

Hello all, Our cluster had a node (node3) lose connectivity and now it will not rejoin the cluster. I've used TCPDUMP to study the exchange of traffic and it appears the master node is responding with the heartbeat mes…

---

## [Delta based on running total](https://discuss.elastic.co/t/delta-based-on-running-total/126169)

<div class="topic-metadata">

**Author:** [@danfranks](https://discuss.elastic.co/u/danfranks)\
**Replies:** 2\
**Last updated:** [March 30, 2018, 3:26am UTC](https://discuss.elastic.co/t/delta-based-on-running-total/126169 "2018-03-30T03:26:00Z")

</div>

Hello, I'm a bit new to elastic and am probably missing something simple. I'm trying to figure out how to display a range of dates with their associated numerical values plus one calculated field that takes the differe…

---

## [Elasticsearch Status Red-Heap Memory Issue](https://discuss.elastic.co/t/elasticsearch-status-red-heap-memory-issue/126176)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 0\
**Last updated:** [March 30, 2018, 2:38am UTC](https://discuss.elastic.co/t/elasticsearch-status-red-heap-memory-issue/126176 "2018-03-30T02:38:59Z")

</div>

Hello all, Every time after indexing few fields My elasticsearch is going red. and I see the following screen in kibana. \[image\] Though I have set my Heap memory as 1GB. it says the heap memory is just 70Mb and it's f…

---

## [Elasticsearch repository-s3 plugin in China](https://discuss.elastic.co/t/elasticsearch-repository-s3-plugin-in-china/126174)

<div class="topic-metadata">

**Author:** [@79bcf509ed50dc69709a](https://discuss.elastic.co/u/79bcf509ed50dc69709a)\
**Replies:** 0\
**Last updated:** [March 30, 2018, 2:02am UTC](https://discuss.elastic.co/t/elasticsearch-repository-s3-plugin-in-china/126174 "2018-03-30T02:02:57Z")

</div>

I want to use repository-s3 plugin to make snapshot to China s3, 1、bin/elasticsearch-plugin install repository-s3 2、bin/elasticsearch-keystore add s3.client.default.access\_key bin/elasticsearch-keystore add s3.client.…

---

## [.NET NEST ElasticClient LowLevel.IndexAsync Creating Document with Empty Fields](https://discuss.elastic.co/t/net-nest-elasticclient-lowlevel-indexasync-creating-document-with-empty-fields/125996)

<div class="topic-metadata">

**Author:** [@CodeStone](https://discuss.elastic.co/u/CodeStone)\
**Replies:** 2\
**Last updated:** [March 29, 2018, 11:20pm UTC](https://discuss.elastic.co/t/net-nest-elasticclient-lowlevel-indexasync-creating-document-with-empty-fields/125996 "2018-03-29T23:20:08Z")

</div>

Below is a portion of my code, that I've taken from here. I had to make few changes to make it work with the new v6.X of Elasticsearch .NET libraries. I am running this code inside an Azure Function. It runs without any…

---

## [What is the convention of underscores for?](https://discuss.elastic.co/t/what-is-the-convention-of-underscores-for/126161)

<div class="topic-metadata">

**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 10:27pm UTC](https://discuss.elastic.co/t/what-is-the-convention-of-underscores-for/126161 "2018-03-29T22:27:30Z")

</div>

Sometimes I see index types that are doc and other times I see \_doc. Is there a conventional meaning for this in different contexts in ES?

---

## [Update field with array of objects](https://discuss.elastic.co/t/update-field-with-array-of-objects/126157)

<div class="topic-metadata">

**Author:** [@net](https://discuss.elastic.co/u/net)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 8:52pm UTC](https://discuss.elastic.co/t/update-field-with-array-of-objects/126157 "2018-03-29T20:52:19Z")

</div>

Hi, I'm using the update api to try to update a field. This field has the mapping (below) that works and has allowed for values that look like this: \[{'customer': 'Joe', 'group': 'blah', 'name': 'abc'}, {'customer': 'J…

---

## [Script painless: null pointer exception](https://discuss.elastic.co/t/script-painless-null-pointer-exception/126109)

<div class="topic-metadata">

**Author:** [@Zsullivan](https://discuss.elastic.co/u/Zsullivan)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 7:42pm UTC](https://discuss.elastic.co/t/script-painless-null-pointer-exception/126109 "2018-03-29T19:42:05Z")

</div>

I'm getting a null pointer exception when using null safe (?.) and after checking that the value is not null CALL POST mac\_docs/mac\_doc/\_update\_by\_query?pretty=true&refresh=true { "script":{ "source":"if (params.mac…

---

## [Query on Elasticsearch storage](https://discuss.elastic.co/t/query-on-elasticsearch-storage/116612)

<div class="topic-metadata">

**Author:** [@rrs](https://discuss.elastic.co/u/rrs)\
**Replies:** 3\
**Last updated:** [March 29, 2018, 5:21pm UTC](https://discuss.elastic.co/t/query-on-elasticsearch-storage/116612 "2018-03-29T17:21:18Z")

</div>

Hi All, We have a 3node elasticsearch cluster with both master/data running fine now. Each node has 1TB SAN storage and occupied 2.5TB data and indexes are being created with 5 primary shards and 1 replica distributing …

---

## [Read/Modify/Send QueryDSL in Java](https://discuss.elastic.co/t/read-modify-send-querydsl-in-java/121527)

<div class="topic-metadata">

**Author:** [@derek.nash](https://discuss.elastic.co/u/derek.nash)\
**Replies:** 3\
**Last updated:** [March 29, 2018, 4:48pm UTC](https://discuss.elastic.co/t/read-modify-send-querydsl-in-java/121527 "2018-03-29T16:48:10Z")

</div>

Hello, I am having trouble finding Elasticsearch Java code that will accept a full QueryDSL object as a String. My basic use case is as follows: Our UI code is set up to generate QueryDSL based on user input and user s…

---

## [Unassigned after reopen index INDEX\_REOPENED error](https://discuss.elastic.co/t/unassigned-after-reopen-index-index-reopened-error/126112)

<div class="topic-metadata">

**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\
**Replies:** 0\
**Last updated:** [March 29, 2018, 3:26pm UTC](https://discuss.elastic.co/t/unassigned-after-reopen-index-index-reopened-error/126112 "2018-03-29T15:26:58Z")

</div>

I closed my index and reopen it and now my shards can't assigne. curl -s -XGET localhost:9201/\_cat/shards?h=index,shard,prirep,state,unassigned.reason | grep UNASSIGNED 2018.03.27-team-logs 2 r UNASSIGNED INDEX\_REOPENED…

---

## [Connection could not be made because the target machine actively refused it](https://discuss.elastic.co/t/connection-could-not-be-made-because-the-target-machine-actively-refused-it/126111)

<div class="topic-metadata">

**Author:** [@vaishali1](https://discuss.elastic.co/u/vaishali1)\
**Replies:** 0\
**Last updated:** [March 29, 2018, 3:10pm UTC](https://discuss.elastic.co/t/connection-could-not-be-made-because-the-target-machine-actively-refused-it/126111 "2018-03-29T15:10:04Z")

</div>

Hi, I am facing some issue with metricbeats connection Failed to connect: Get http://ipaddress:9200: proxy connect tcp: dial tcp 127.0.0.1:3128: connectex: No connection could be made because the target machine activel…

---

## [Wrong number of docs in elasticsearch](https://discuss.elastic.co/t/wrong-number-of-docs-in-elasticsearch/126096)

<div class="topic-metadata">

**Author:** [@aliyesami](https://discuss.elastic.co/u/aliyesami)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 3:00pm UTC](https://discuss.elastic.co/t/wrong-number-of-docs-in-elasticsearch/126096 "2018-03-29T15:00:10Z")

</div>

i created an external hive table with EsStorageHandler and then inserted from a large table (61 million rows) into it , but when I look at the index its only giving me 216368692 docs? CREATE EXTERNAL TABLE test\_orc\_es…

---

## [Different Path for each Index](https://discuss.elastic.co/t/different-path-for-each-index/125926)

<div class="topic-metadata">

**Author:** [@amitmjadav](https://discuss.elastic.co/u/amitmjadav)\
**Replies:** 14\
**Last updated:** [March 29, 2018, 2:48pm UTC](https://discuss.elastic.co/t/different-path-for-each-index/125926 "2018-03-29T14:48:00Z")

</div>

Hi, Can any one help me... I want different path while creating Index... Is it possible to give path in API ???

---

## [Can't understand ML plugin Functionalities](https://discuss.elastic.co/t/cant-understand-ml-plugin-functionalities/125973)

<div class="topic-metadata">

**Author:** [@NOUR](https://discuss.elastic.co/u/NOUR)\
**Replies:** 4\
**Last updated:** [March 29, 2018, 2:45pm UTC](https://discuss.elastic.co/t/cant-understand-ml-plugin-functionalities/125973 "2018-03-29T14:45:06Z")

</div>

HeLLO every one, Please , can someone explain this two values(actual and typical). If i based my job on the max of a field(hdopDevice) why i cant see this value?!! \[image\] else when i select this period , i see an an…

---

## [Open Cluster for foreign Applications? Pros and Cons?](https://discuss.elastic.co/t/open-cluster-for-foreign-applications-pros-and-cons/126102)

<div class="topic-metadata">

**Author:** [@mero](https://discuss.elastic.co/u/mero)\
**Replies:** 0\
**Last updated:** [March 29, 2018, 2:27pm UTC](https://discuss.elastic.co/t/open-cluster-for-foreign-applications-pros-and-cons/126102 "2018-03-29T14:27:04Z")

</div>

Hello together, currently we are starting to use Elasticsearch as a component to realize our application search. Now we ask ourselves the question if it is basically okay to offer other foreign applications in our comp…

---

## [ES is taking significant time to start](https://discuss.elastic.co/t/es-is-taking-significant-time-to-start/124993)

<div class="topic-metadata">

**Author:** [@dimalini](https://discuss.elastic.co/u/dimalini)\
**Replies:** 7\
**Last updated:** [March 29, 2018, 2:22pm UTC](https://discuss.elastic.co/t/es-is-taking-significant-time-to-start/124993 "2018-03-29T14:22:49Z")

</div>

We are starting the ES process using the bat file in version 5.4 \[2018-03-21T15:40:42,295\]\[INFO \]\[o.e.n.Node \] \[hxa\_pUV\] starting ... \[2018-03-21T15:46:20,944\]\[INFO \]\[o.e.t.TransportService \] \[hxa\_pUV\] …

---

## [Script painless : null\_pointer\_exception](https://discuss.elastic.co/t/script-painless-null-pointer-exception/125971)

<div class="topic-metadata">

**Author:** [@sabdoul](https://discuss.elastic.co/u/sabdoul)\
**Replies:** 7\
**Last updated:** [March 29, 2018, 1:11pm UTC](https://discuss.elastic.co/t/script-painless-null-pointer-exception/125971 "2018-03-29T13:11:26Z")

</div>

Hello, I have a null\_pointer\_exception error in my painless script when trying to modify all the data in an index. Indeed when I modify a line, the modification passes correctly but if I generalize it to all the data I …

---

## [Command-line action from watcher](https://discuss.elastic.co/t/command-line-action-from-watcher/126092)

<div class="topic-metadata">

**Author:** [@annk](https://discuss.elastic.co/u/annk)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 1:03pm UTC](https://discuss.elastic.co/t/command-line-action-from-watcher/126092 "2018-03-29T13:03:13Z")

</div>

Is it possible to trigger a command-line script from watcher action ? We have scripts that send alert to a ticketing system , I am trying to see if there is any way t trigger this script from watcher and pass parameters…

---

## [Getting a result that I don't want. How to check why](https://discuss.elastic.co/t/getting-a-result-that-i-dont-want-how-to-check-why/125902)

<div class="topic-metadata">

**Author:** [@Peter\_Steenbergen](https://discuss.elastic.co/u/Peter_Steenbergen)\
**Replies:** 6\
**Last updated:** [March 29, 2018, 12:01pm UTC](https://discuss.elastic.co/t/getting-a-result-that-i-dont-want-how-to-check-why/125902 "2018-03-29T12:01:12Z")

</div>

Hi, I am using ElasticSearch 6.1.3 and have the following situation. Let me start sharing the query I am using. POST develop/\_search { "query": { "bool": { "must": \[ { "multi\_match": { …

---

## [Watch for child elements like router interfaces](https://discuss.elastic.co/t/watch-for-child-elements-like-router-interfaces/125217)

<div class="topic-metadata">

**Author:** [@aurimas](https://discuss.elastic.co/u/aurimas)\
**Replies:** 15\
**Last updated:** [March 29, 2018, 11:51am UTC](https://discuss.elastic.co/t/watch-for-child-elements-like-router-interfaces/125217 "2018-03-29T11:51:36Z")

</div>

Hi, We are monitoring hundreds of network devices (routers and switches) and each device has various number of interfaces (ports). I am trying to setup watch that would show on which network device which port is hitting…

---

## [Elasticsearch Rebalance](https://discuss.elastic.co/t/elasticsearch-rebalance/126076)

<div class="topic-metadata">

**Author:** [@sundarcse1216](https://discuss.elastic.co/u/sundarcse1216)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 11:48am UTC](https://discuss.elastic.co/t/elasticsearch-rebalance/126076 "2018-03-29T11:48:22Z")

</div>

Hello, If I have add new node in elastic cluster. What I have to do for re-balancing the cluster? Thanks.

---

## [CORS error on elasticsearch 6.0 running in Docker container](https://discuss.elastic.co/t/cors-error-on-elasticsearch-6-0-running-in-docker-container/126079)

<div class="topic-metadata">

**Author:** [@TMR](https://discuss.elastic.co/u/TMR)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 11:44am UTC](https://discuss.elastic.co/t/cors-error-on-elasticsearch-6-0-running-in-docker-container/126079 "2018-03-29T11:44:11Z")

</div>

Hi there, please find below my elasticsearch.yml content. \[root@2c93c5458b9b elasticsearch\]# cat config/elasticsearch.yml cluster.name: "docker-cluster" network.host: 0.0.0.0 minimum\_master\_nodes need to be explicit…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1734)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1736)
