# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1741 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1742 --- ## [Any best practices documentation on how to bring up elastic cluster multiple client nodes](https://discuss.elastic.co/t/any-best-practices-documentation-on-how-to-bring-up-elastic-cluster-multiple-client-nodes/125458)
**Author:** [@jason\_smith](https://discuss.elastic.co/u/jason_smith)\ **Replies:** 3\ **Last updated:** [March 25, 2018, 8:54am UTC](https://discuss.elastic.co/t/any-best-practices-documentation-on-how-to-bring-up-elastic-cluster-multiple-client-nodes/125458 "2018-03-25T08:54:33Z")
Hello folks, Read up on varioius nodes (client, data and master) that are part of Elasticsearch cluster. Is there any documentation on how to bring down Elasticsearch cluster and bring back up? I read about gatewary.… --- ## [Differences between index/\_stats size and du -h size](https://discuss.elastic.co/t/differences-between-index-stats-size-and-du-h-size/125468)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 0\ **Last updated:** [March 25, 2018, 7:30am UTC](https://discuss.elastic.co/t/differences-between-index-stats-size-and-du-h-size/125468 "2018-03-25T07:30:37Z")
Hi everyone! I have a quick question: I create random JSON files and send them to elasticsearch. When I check the sizes of the files using du -h in my centos machine and when I check the stats in the \_stats section I … --- ## [Rollover Index issue with Elasticsearch 6.2](https://discuss.elastic.co/t/rollover-index-issue-with-elasticsearch-6-2/123852)
**Author:** [@somnath.guthula](https://discuss.elastic.co/u/somnath.guthula)\ **Replies:** 5\ **Last updated:** [March 25, 2018, 1:26am UTC](https://discuss.elastic.co/t/rollover-index-issue-with-elasticsearch-6-2/123852 "2018-03-25T01:26:14Z")
Hi guys, I am having an issue with rolling over indices. So, We were trying a rollover indice with our newly setup cluster with Elasticsearch 6.2 When we are trying to rollover the indice, It gives the following error. … --- ## [Upgrade woes: JDK not accessible, snapshots slow](https://discuss.elastic.co/t/upgrade-woes-jdk-not-accessible-snapshots-slow/125443)
**Author:** [@rozling](https://discuss.elastic.co/u/rozling)\ **Replies:** 1\ **Last updated:** [March 24, 2018, 4:27pm UTC](https://discuss.elastic.co/t/upgrade-woes-jdk-not-accessible-snapshots-slow/125443 "2018-03-24T16:27:56Z")
I'm trying to upgrade our production cluster from 5.6.2 to 6.x and it's not going well. Firstly, snapshotting to S3 was taking forever (~51h for 1TB). After spending some time talking to AWS support with no results I r… --- ## [Curator command error in windows](https://discuss.elastic.co/t/curator-command-error-in-windows/124385)
**Author:** [@malc\_richi](https://discuss.elastic.co/u/malc_richi)\ **Replies:** 5\ **Last updated:** [March 24, 2018, 3:29pm UTC](https://discuss.elastic.co/t/curator-command-error-in-windows/124385 "2018-03-24T15:29:41Z")
Hi There, Under going a couple of issues,below is the list of activities preformed: 1.installed elastic search 5.4.3 - successful 2. Installed Python version 3.6 - successful 3 have pip set. 4.Trying to install cura… --- ## [Write into ES using Hive uses only one reducer](https://discuss.elastic.co/t/write-into-es-using-hive-uses-only-one-reducer/121998)
**Author:** [@fede](https://discuss.elastic.co/u/fede)\ **Replies:** 2\ **Last updated:** [March 24, 2018, 1:32pm UTC](https://discuss.elastic.co/t/write-into-es-using-hive-uses-only-one-reducer/121998 "2018-03-24T13:32:44Z")
Hi, I've testing the ES-hive library (elasticsearch-hadoop-hive-5.6.4.jar to match our cluster version) and I always get 1 reducer, is there any way to force more than 1 reducer, I had the intention of using hive to load… --- ## [Ingesting during snapshot creation](https://discuss.elastic.co/t/ingesting-during-snapshot-creation/125413)
**Author:** [@gzumberge](https://discuss.elastic.co/u/gzumberge)\ **Replies:** 2\ **Last updated:** [March 24, 2018, 12:35pm UTC](https://discuss.elastic.co/t/ingesting-during-snapshot-creation/125413 "2018-03-24T12:35:11Z")
I searched but could not find an answer. My apologies. Our snapshot creation runs for many hours, and we are ingesting data at the same time. Does the snapshot only include index data as of the start of the snapshot? O… --- ## [Getting error while mapping](https://discuss.elastic.co/t/getting-error-while-mapping/125369)
**Author:** [@palash7563](https://discuss.elastic.co/u/palash7563)\ **Replies:** 9\ **Last updated:** [March 24, 2018, 11:55am UTC](https://discuss.elastic.co/t/getting-error-while-mapping/125369 "2018-03-24T11:55:19Z")
PUT /product/default/\_mapping { "properties": { "created":{ "type": "date", "format": "yyyy/MM/dd HH:mm:ss||yyyy/MM/dd" } } } response is like { "error": { "root\_cause": \[ { "type": "cluster\_blo… --- ## [Elastic issue](https://discuss.elastic.co/t/elastic-issue/125348)
**Author:** [@sn001](https://discuss.elastic.co/u/sn001)\ **Replies:** 1\ **Last updated:** [March 24, 2018, 8:26am UTC](https://discuss.elastic.co/t/elastic-issue/125348 "2018-03-24T08:26:37Z")
Couple of questions: Is groovy not supposed to be used? Is there a way around to get values instead of def values = doc\[inputField\].values; (Our system fails at this point with an error stating) \[2018-03-23T17:53:24,4… --- ## [Loading CSV](https://discuss.elastic.co/t/loading-csv/125415)
**Author:** [@Imane\_Bendaouma](https://discuss.elastic.co/u/Imane_Bendaouma)\ **Replies:** 1\ **Last updated:** [March 24, 2018, 2:09am UTC](https://discuss.elastic.co/t/loading-csv/125415 "2018-03-24T02:09:16Z")
how can i uploading CSV to elasticsearch using Python ? --- ## [Access nested/children doc values with Lucene from FilterScript plugin](https://discuss.elastic.co/t/access-nested-children-doc-values-with-lucene-from-filterscript-plugin/124833)
**Author:** [@franck.lefebure](https://discuss.elastic.co/u/franck.lefebure)\ **Replies:** 4\ **Last updated:** [March 23, 2018, 7:59pm UTC](https://discuss.elastic.co/t/access-nested-children-doc-values-with-lucene-from-filterscript-plugin/124833 "2018-03-23T19:59:13Z")
Hi, I'm actually trying to prototype some filter plugin. The objectives are : Optimize access to the nested documents. Actually (in a painless script for example) the only way to process nested entities is to proces… --- ## [How to install and setup x-pack on two node with one cluster?](https://discuss.elastic.co/t/how-to-install-and-setup-x-pack-on-two-node-with-one-cluster/125116)
**Author:** [@Karthik\_Saravanan](https://discuss.elastic.co/u/Karthik_Saravanan)\ **Replies:** 13\ **Last updated:** [March 23, 2018, 9:23pm UTC](https://discuss.elastic.co/t/how-to-install-and-setup-x-pack-on-two-node-with-one-cluster/125116 "2018-03-23T21:23:48Z")
I have configured one cluster with two nodes, one is master node and another one is a data node. Now, have to install and configure xpack on these nodes, Master Node: cluster.name: ELK\_master node.name: node-master n… --- ## [Caused by: org.apache.hadoop.hive.ql.metadata.HiveException: Hive Runtime Error while processing row {](https://discuss.elastic.co/t/caused-by-org-apache-hadoop-hive-ql-metadata-hiveexception-hive-runtime-error-while-processing-row/125281)
**Author:** [@naresh523](https://discuss.elastic.co/u/naresh523)\ **Replies:** 3\ **Last updated:** [March 23, 2018, 8:25pm UTC](https://discuss.elastic.co/t/caused-by-org-apache-hadoop-hive-ql-metadata-hiveexception-hive-runtime-error-while-processing-row/125281 "2018-03-23T20:25:30Z")
Table B has ~60millions records. Elastic Search Hive Insert into table A query from Table B; failed with below error. Caused by: org.elasticsearch.hadoop.rest.EsHadoopNoNodesLeftException: Connection error (check ne… --- ## [What's the best performance, to execute two different queries or a single?](https://discuss.elastic.co/t/whats-the-best-performance-to-execute-two-different-queries-or-a-single/125382)
**Author:** [@tberne](https://discuss.elastic.co/u/tberne)\ **Replies:** 2\ **Last updated:** [March 23, 2018, 7:14pm UTC](https://discuss.elastic.co/t/whats-the-best-performance-to-execute-two-different-queries-or-a-single/125382 "2018-03-23T19:14:41Z")
Hey, guys. I'm planning a new feature and I would like to know what performs better. Explaining a bit the scenario: I have two different filters to be executed and generate different aggregations. I can either: Hav… --- ## [Adding a new node on a different subnet](https://discuss.elastic.co/t/adding-a-new-node-on-a-different-subnet/125377)
**Author:** [@charwill621](https://discuss.elastic.co/u/charwill621)\ **Replies:** 0\ **Last updated:** [March 23, 2018, 1:50pm UTC](https://discuss.elastic.co/t/adding-a-new-node-on-a-different-subnet/125377 "2018-03-23T13:50:40Z")
\[2018-03-23T08:41:16,604\]\[INFO \]\[o.e.d.z.ZenDiscovery \] \[zld01767.vci.att.com-01\] failed to send join request to master \[{roacamu02.gcsc.att.com-01}{C1mZNUdPT460CGjpZ7C\_6w}{W4ztO6y\_SPagu1cVsNProQ}{135.89.30.224}{135.… --- ## [Run multiple Elasticsearch Docker containers on node](https://discuss.elastic.co/t/run-multiple-elasticsearch-docker-containers-on-node/125395)
**Author:** [@mpmichelsen](https://discuss.elastic.co/u/mpmichelsen)\ **Replies:** 0\ **Last updated:** [March 23, 2018, 5:02pm UTC](https://discuss.elastic.co/t/run-multiple-elasticsearch-docker-containers-on-node/125395 "2018-03-23T17:02:47Z")
I am new to Docker and its use with the Elastic stack. I am looking to setup a hot/warm cluster for log collection/analysis with about 15 nodes. For compliance reasons virtualization is out and the time cost to adminis… --- ## [Elastic Search Not Running on Linux](https://discuss.elastic.co/t/elastic-search-not-running-on-linux/125316)
**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\ **Replies:** 10\ **Last updated:** [March 23, 2018, 4:47pm UTC](https://discuss.elastic.co/t/elastic-search-not-running-on-linux/125316 "2018-03-23T16:47:43Z")
Hi, Elastic search server stops working abruptly, and throws this message in the logs: Could you please let me know what could be the reason? Thanks ! org.elasticsearch.transport.ReceiveTimeoutTransportException: \[vCc… --- ## [Delete all documents from specified type in an index based on CreationDateTime](https://discuss.elastic.co/t/delete-all-documents-from-specified-type-in-an-index-based-on-creationdatetime/121530)
**Author:** [@Sunny\_Goel](https://discuss.elastic.co/u/Sunny_Goel)\ **Replies:** 3\ **Last updated:** [March 23, 2018, 4:47pm UTC](https://discuss.elastic.co/t/delete-all-documents-from-specified-type-in-an-index-based-on-creationdatetime/121530 "2018-03-23T16:47:16Z")
Hi, We have a use-case where we're planning to leverage Elastic Search to store application session data. And there are a few user events which UI is not able to capture programmetically so we can't fully rely on them t… --- ## [Map zip code to city name using elasticsearch](https://discuss.elastic.co/t/map-zip-code-to-city-name-using-elasticsearch/125390)
**Author:** [@madou23](https://discuss.elastic.co/u/madou23)\ **Replies:** 1\ **Last updated:** [March 23, 2018, 4:46pm UTC](https://discuss.elastic.co/t/map-zip-code-to-city-name-using-elasticsearch/125390 "2018-03-23T16:46:39Z")
Hi all, I'm integrating some data from a hive table to elasticsearch and everything is OK. In the hive table, I have a column that contains zip codes of cities but I don't have a column that contains the names of cities… --- ## [Painless Scripting Compile Errors](https://discuss.elastic.co/t/painless-scripting-compile-errors/123412)
**Author:** [@Errors](https://discuss.elastic.co/u/Errors)\ **Replies:** 16\ **Last updated:** [March 23, 2018, 4:33pm UTC](https://discuss.elastic.co/t/painless-scripting-compile-errors/123412 "2018-03-23T16:33:04Z")
I'm writing the following and saving it as a scripted field in elasticsearch for(name in parsed.FIRST\_NAME){ if('Steve' in parsed.FIRST\_NAME){ return parsed.FIRST\_NAME } } This givse me the error: Erro… --- ## [6.3 eta and x-pack open source question](https://discuss.elastic.co/t/6-3-eta-and-x-pack-open-source-question/125375)
**Author:** [@seccentral](https://discuss.elastic.co/u/seccentral)\ **Replies:** 3\ **Last updated:** [March 23, 2018, 3:57pm UTC](https://discuss.elastic.co/t/6-3-eta-and-x-pack-open-source-question/125375 "2018-03-23T15:57:05Z")
Heya, Any eta on 6.3 ? And regarding x-pack going open, will it have all features like paid one has now for free ? even for commercial use ? Is it only the support that is paid from 6.3 on ? Thanks --- ## [Two shards stuck INITIALIZING](https://discuss.elastic.co/t/two-shards-stuck-initializing/125031)
**Author:** [@bogomip](https://discuss.elastic.co/u/bogomip)\ **Replies:** 2\ **Last updated:** [March 23, 2018, 2:15pm UTC](https://discuss.elastic.co/t/two-shards-stuck-initializing/125031 "2018-03-23T14:15:19Z")
Hi, I have a two node cluster, one node ran out of disk space, i have added another disk to path.data: so disk space is recovered, however the second disk is not being used yet. And two shared are stuck INITIALIZING. … --- ## [How to change the default type](https://discuss.elastic.co/t/how-to-change-the-default-type/125318)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 9\ **Last updated:** [March 23, 2018, 10:23am UTC](https://discuss.elastic.co/t/how-to-change-the-default-type/125318 "2018-03-23T10:23:43Z")
Hi everyone, when I index the flow data to ES, the IPV4\_SRC\_ADDR and IPV4\_DST\_ADDR are string type, and I want to change it to ip type. this is the mapping config: PUT /\_template/logstash { "index\_patterns": "logstash… --- ## [Some fields is duplicate in a doc](https://discuss.elastic.co/t/some-fields-is-duplicate-in-a-doc/124073)
**Author:** [@wander1024](https://discuss.elastic.co/u/wander1024)\ **Replies:** 1\ **Last updated:** [March 23, 2018, 12:58pm UTC](https://discuss.elastic.co/t/some-fields-is-duplicate-in-a-doc/124073 "2018-03-23T12:58:02Z")
i found some fields is duplicate in a doc. \[image\]. this fields is used to store nginx response code. but the values is repeat sometimes. the part of logstash conf if \[src\_type\] == "office\_nginx\_access" { grok … --- ## [Sliced scroll returns duplicates](https://discuss.elastic.co/t/sliced-scroll-returns-duplicates/125053)
**Author:** [@popina](https://discuss.elastic.co/u/popina)\ **Replies:** 1\ **Last updated:** [March 23, 2018, 12:56pm UTC](https://discuss.elastic.co/t/sliced-scroll-returns-duplicates/125053 "2018-03-23T12:56:52Z")
I have tried using sliced scroll detailed explainedSliced with the following parameters: "sort": \[ { "\_uid": { "order": "desc", "unmapped\_type":"string" } } \], "slice": { "field":"\_uid", "id": 1, "max": 2 } … --- ## [Datafeed frequency must be a multiple of the aggregation interval](https://discuss.elastic.co/t/datafeed-frequency-must-be-a-multiple-of-the-aggregation-interval/124968)
**Author:** [@tvannet](https://discuss.elastic.co/u/tvannet)\ **Replies:** 2\ **Last updated:** [March 23, 2018, 12:29pm UTC](https://discuss.elastic.co/t/datafeed-frequency-must-be-a-multiple-of-the-aggregation-interval/124968 "2018-03-23T12:29:48Z")
After upgrading from 5.x to 6.x, I am getting the following error for some ML jobs: Datafeed frequency must be a multiple of the aggregation interval The bucket span is set to 900s and the datafeed frequency is 450s.… --- ## [Trying to understand high search latency](https://discuss.elastic.co/t/trying-to-understand-high-search-latency/125363)
**Author:** [@Capibara](https://discuss.elastic.co/u/Capibara)\ **Replies:** 1\ **Last updated:** [March 23, 2018, 12:29pm UTC](https://discuss.elastic.co/t/trying-to-understand-high-search-latency/125363 "2018-03-23T12:29:27Z")
I have setup an ES index to index user centered data, each document contains the relevant user ID (either in an owner field on in a contributor field) and 2 fields that need to be searched on with a "contains" semantic. … --- ## [Nested Aggregation in a Transforms Script](https://discuss.elastic.co/t/nested-aggregation-in-a-transforms-script/125068)
**Author:** [@yodasec](https://discuss.elastic.co/u/yodasec)\ **Replies:** 1\ **Last updated:** [March 23, 2018, 12:13pm UTC](https://discuss.elastic.co/t/nested-aggregation-in-a-transforms-script/125068 "2018-03-23T12:13:12Z")
I am trying to apply a filter in a Transform Script and map the results to a new list. I am able to successfully do this when only using 1 aggregation. However, I am not having any luck using a second aggregation that ex… --- ## [Newbie to ES - CURL inquiry/help](https://discuss.elastic.co/t/newbie-to-es-curl-inquiry-help/125253)
**Author:** [@gigabyte](https://discuss.elastic.co/u/gigabyte)\ **Replies:** 2\ **Last updated:** [March 23, 2018, 11:25am UTC](https://discuss.elastic.co/t/newbie-to-es-curl-inquiry-help/125253 "2018-03-23T11:25:59Z")
Having an issue saving a visualization as mentioned in the below post that's been closed, however, needing help converting the solution provided to curl since the newer versions no longer have the bigdesk and desk plugin… --- ## [Complex Queries across several indices](https://discuss.elastic.co/t/complex-queries-across-several-indices/125354)
**Author:** [@JuergenMartin](https://discuss.elastic.co/u/JuergenMartin)\ **Replies:** 0\ **Last updated:** [March 23, 2018, 11:06am UTC](https://discuss.elastic.co/t/complex-queries-across-several-indices/125354 "2018-03-23T11:06:50Z")
Hello Community, we already use Elasticsearch / Kibana on a small scale for Logfiles. Because of its awesomeness we plan to replace Microsoft FAST Search in the near future (~150 million documents, ~7 TB index). So f… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1740) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1742)