# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1747 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1748 --- ## [Elasticsearch bails out ES-HADOOP PLUGIN](https://discuss.elastic.co/t/elasticsearch-bails-out-es-hadoop-plugin/121329)
**Author:** [@chitender](https://discuss.elastic.co/u/chitender)\ **Replies:** 5\ **Last updated:** [March 20, 2018, 10:40am UTC](https://discuss.elastic.co/t/elasticsearch-bails-out-es-hadoop-plugin/121329 "2018-03-20T10:40:45Z")
we are using ES-HADOOP plugin to push data into Elasticsearch cluster from Hadoop HBASE table. below are the cluster details. ELASTICSEARCH VERSION: 2.3.5 DATA NODES: 3 MASTER NODES: 3 CLIENT NODE: 1 the data nodes … --- ## [Inaccurate documentation for not\_analyzed and full text queries](https://discuss.elastic.co/t/inaccurate-documentation-for-not-analyzed-and-full-text-queries/124727)
**Author:** [@david3](https://discuss.elastic.co/u/david3)\ **Replies:** 3\ **Last updated:** [March 20, 2018, 10:23am UTC](https://discuss.elastic.co/t/inaccurate-documentation-for-not-analyzed-and-full-text-queries/124727 "2018-03-20T10:23:21Z")
The documentation here https://www.elastic.co/guide/en/elasticsearch/guide/current/term-vs-full-text.html says "If you query an exact value (not\_analyzed) string field, they will treat the whole query string as a single… --- ## [Buckets.doc\_count \> hits.total](https://discuss.elastic.co/t/buckets-doc-count-hits-total/124015)
**Author:** [@weejim\_sc](https://discuss.elastic.co/u/weejim_sc)\ **Replies:** 1\ **Last updated:** [March 20, 2018, 10:12am UTC](https://discuss.elastic.co/t/buckets-doc-count-hits-total/124015 "2018-03-20T10:12:55Z")
hi, I am searching by identifier and performing aggregation and am able to get a hits.total of 1. However the aggregation agg.buckets\[0\].doc\_count is giving a value of 2 (more than the number of hits). Is there a way … --- ## [Sudden deletion of data](https://discuss.elastic.co/t/sudden-deletion-of-data/124598)
**Author:** [@n1im](https://discuss.elastic.co/u/n1im)\ **Replies:** 3\ **Last updated:** [March 20, 2018, 9:49am UTC](https://discuss.elastic.co/t/sudden-deletion-of-data/124598 "2018-03-20T09:49:38Z")
Elasticsearch version : 5.6.8 Plugins installed: \[\] No plugins JVM version (java -version): 8 OS version (uname -a if on a Unix-like system): Linux Centos 7 Description of the problem including expected versus actual… --- ## [Inconsistent data transfer performance from ES -\> Client](https://discuss.elastic.co/t/inconsistent-data-transfer-performance-from-es-client/124699)
**Author:** [@EvilCachew](https://discuss.elastic.co/u/EvilCachew)\ **Replies:** 5\ **Last updated:** [March 20, 2018, 9:41am UTC](https://discuss.elastic.co/t/inconsistent-data-transfer-performance-from-es-client/124699 "2018-03-20T09:41:07Z")
Hello We are very happy with our internal search performance within ES it self. However, transferring the data from ES to our client seems to perform rather inconsistent. I would be very happy to hear your suggestions a… --- ## [Restarting ES on a node](https://discuss.elastic.co/t/restarting-es-on-a-node/124638)
**Author:** [@shivam.dixit](https://discuss.elastic.co/u/shivam.dixit)\ **Replies:** 1\ **Last updated:** [March 20, 2018, 8:42am UTC](https://discuss.elastic.co/t/restarting-es-on-a-node/124638 "2018-03-20T08:42:59Z")
https://www.elastic.co/guide/en/elasticsearch/guide/current/distrib-write.html Consider a cluster as explained above. The default "write" implementation is to replicate the change to the primary and replica shards in sy… --- ## [Deleting A document from a Index\[\]](https://discuss.elastic.co/t/deleting-a-document-from-a-index/124521)
**Author:** [@Piyushpky](https://discuss.elastic.co/u/Piyushpky)\ **Replies:** 3\ **Last updated:** [March 20, 2018, 8:05am UTC](https://discuss.elastic.co/t/deleting-a-document-from-a-index/124521 "2018-03-20T08:05:35Z")
Hello, I want to delete a specific document from an Index how can I do that? Thanks. --- ## [Choosing the right path for elasticsearch, logstash](https://discuss.elastic.co/t/choosing-the-right-path-for-elasticsearch-logstash/124592)
**Author:** [@ankibalyan](https://discuss.elastic.co/u/ankibalyan)\ **Replies:** 3\ **Last updated:** [March 20, 2018, 8:03am UTC](https://discuss.elastic.co/t/choosing-the-right-path-for-elasticsearch-logstash/124592 "2018-03-20T08:03:05Z")
I'm not understanding the inegration use case for logstash, weather do I should integrate it or not. I want to check some analytics on my transactions data, API requests, platform, as many as things possible to get the … --- ## [Filter with not equal to null](https://discuss.elastic.co/t/filter-with-not-equal-to-null/124680)
**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\ **Replies:** 1\ **Last updated:** [March 20, 2018, 7:55am UTC](https://discuss.elastic.co/t/filter-with-not-equal-to-null/124680 "2018-03-20T07:55:13Z")
Hi How can i filter data with a condition not equal to null { "from": 0, "size": 10000, "query": { "bool": { "must\_not": \[ { "match" : { "SubjectId" : null}} \] } } } giving { "… --- ## [How to search for a data in elasticsearch?](https://discuss.elastic.co/t/how-to-search-for-a-data-in-elasticsearch/124596)
**Author:** [@Souvik\_Ray](https://discuss.elastic.co/u/Souvik_Ray)\ **Replies:** 11\ **Last updated:** [March 20, 2018, 7:43am UTC](https://discuss.elastic.co/t/how-to-search-for-a-data-in-elasticsearch/124596 "2018-03-20T07:43:49Z")
Recently I followed a tutorial provided in the elasticsearch site to push data to elastic cloud and I have successfully been able to do that. I am also able to post a sample document and search for a term in it.But I c… --- ## [Curator Reindex](https://discuss.elastic.co/t/curator-reindex/124328)
**Author:** [@Ben96](https://discuss.elastic.co/u/Ben96)\ **Replies:** 6\ **Last updated:** [March 20, 2018, 7:20am UTC](https://discuss.elastic.co/t/curator-reindex/124328 "2018-03-20T07:20:39Z")
Hi Everyone, Today i wanted to manage my reindex from daily indices to monthly with Curator. The thing is i encoutered a error and i can't debug it, waste a bit time on google to find some help but nothing. Here Actio… --- ## [Status changed from yellow to red - Request Timeout after 1500ms](https://discuss.elastic.co/t/status-changed-from-yellow-to-red-request-timeout-after-1500ms/124542)
**Author:** [@Rajeev\_Gaurav](https://discuss.elastic.co/u/Rajeev_Gaurav)\ **Replies:** 8\ **Last updated:** [March 20, 2018, 7:08am UTC](https://discuss.elastic.co/t/status-changed-from-yellow-to-red-request-timeout-after-1500ms/124542 "2018-03-20T07:08:55Z")
Hi, I am using Kibana 4.4.2 and Elasticsearch 2.2.1. It was all working fine but now suddenly getting Kiaban is showing heap error. - " Status changed from yellow to red - Request Timeout after 1500ms". Can anyone pl… --- ## [Elasticsearch can't active](https://discuss.elastic.co/t/elasticsearch-cant-active/124686)
**Author:** [@fitmren\_lamhr](https://discuss.elastic.co/u/fitmren_lamhr)\ **Replies:** 13\ **Last updated:** [March 20, 2018, 6:49am UTC](https://discuss.elastic.co/t/elasticsearch-cant-active/124686 "2018-03-20T06:49:22Z")
hello, i got some issues in elasticsearch. when i curl -xget ‘http://localhost:9200/\_cluster/health?pretty=true’ i got error: curl: (7) Failed to connect to localhost port 9200: Connection refused then i check my ela… --- ## [\_execute API not working when watch is inactive](https://discuss.elastic.co/t/execute-api-not-working-when-watch-is-inactive/122338)
**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\ **Replies:** 5\ **Last updated:** [March 20, 2018, 6:12am UTC](https://discuss.elastic.co/t/execute-api-not-working-when-watch-is-inactive/122338 "2018-03-20T06:12:51Z")
Created watch in inactive state, and tried using \_execute API to execute manually. But, it is not executing and have to make watch active Not sure of the cause - any fixes released for this or am I missing anything. Tha… --- ## [Conflict with '.'](https://discuss.elastic.co/t/conflict-with/124684)
**Author:** [@Pororo](https://discuss.elastic.co/u/Pororo)\ **Replies:** 0\ **Last updated:** [March 20, 2018, 5:25am UTC](https://discuss.elastic.co/t/conflict-with/124684 "2018-03-20T05:25:46Z")
Hi, There is one field in my json item called "result.internalKeyValuePairs.be.score". {"result.internalKeyValuePairs.be.score": "0.0"} For this type of field, I want it to be a plain text "result.internalKeyValuePair… --- ## [How can I sort results by popular item on ElasticSearch](https://discuss.elastic.co/t/how-can-i-sort-results-by-popular-item-on-elasticsearch/124683)
**Author:** [@nutanek1](https://discuss.elastic.co/u/nutanek1)\ **Replies:** 0\ **Last updated:** [March 20, 2018, 5:20am UTC](https://discuss.elastic.co/t/how-can-i-sort-results-by-popular-item-on-elasticsearch/124683 "2018-03-20T05:20:28Z")
0 down vote favorite I ran into some problem about sorting. If I want to do sorting on ElasticSearch by frequently found results, how can I do it? For example, I have 3 docs that contain keyword like this. { tit… --- ## [Delete Elasticsearch Indices older than 2 months](https://discuss.elastic.co/t/delete-elasticsearch-indices-older-than-2-months/124560)
**Author:** [@vishu.kolki](https://discuss.elastic.co/u/vishu.kolki)\ **Replies:** 5\ **Last updated:** [March 20, 2018, 4:38am UTC](https://discuss.elastic.co/t/delete-elasticsearch-indices-older-than-2-months/124560 "2018-03-20T04:38:21Z")
Hi Team, I want to delete the elastic search indices older than 2 months. Can you please help me how can i do that? My Elasticsearch version is 2.4.1. Thanks --- ## [How to see the indexed data in Elasticsearch](https://discuss.elastic.co/t/how-to-see-the-indexed-data-in-elasticsearch/124250)
**Author:** [@Richawilliams](https://discuss.elastic.co/u/Richawilliams)\ **Replies:** 1\ **Last updated:** [March 20, 2018, 3:27am UTC](https://discuss.elastic.co/t/how-to-see-the-indexed-data-in-elasticsearch/124250 "2018-03-20T03:27:34Z")
I had a problem with ElasticSearch and Rails, where some data was not indexed properly because of attr\_protected. Where does Elastic Search store the indexed data? It would be useful to check if the actual indexed data i… --- ## [Creating cluster does not work with Windows Service](https://discuss.elastic.co/t/creating-cluster-does-not-work-with-windows-service/124297)
**Author:** [@redX](https://discuss.elastic.co/u/redX)\ **Replies:** 1\ **Last updated:** [March 20, 2018, 3:23am UTC](https://discuss.elastic.co/t/creating-cluster-does-not-work-with-windows-service/124297 "2018-03-20T03:23:09Z")
I'm try to set up a cluster between 2 windows machines. It works when I run the elasticsearch.bat file from a command prompt. But it does not work when I run elasticsearch from a Windows Service. What I did: Install … --- ## [Docker: best way to disable security?](https://discuss.elastic.co/t/docker-best-way-to-disable-security/124319)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [March 20, 2018, 3:14am UTC](https://discuss.elastic.co/t/docker-best-way-to-disable-security/124319 "2018-03-20T03:14:57Z")
Hi, I use basic license of xpack. Currently I am trying to get familar with docker. I would like to use the monitoring plugin of logstash to ship it's data to ES. But since I am only using basic license, I need to di… --- ## [Timeout Error using the ReIndex API](https://discuss.elastic.co/t/timeout-error-using-the-reindex-api/124333)
**Author:** [@code\_blue](https://discuss.elastic.co/u/code_blue)\ **Replies:** 1\ **Last updated:** [March 20, 2018, 3:12am UTC](https://discuss.elastic.co/t/timeout-error-using-the-reindex-api/124333 "2018-03-20T03:12:42Z")
We are using ES 5.6 and trying to use Reindex API to copy documents from one Index to another. Both the Index are in the same cluster. When we are using the API for a type which had large number to documents we are facin… --- ## [Elasticsearch fails for future dates 2.4.0](https://discuss.elastic.co/t/elasticsearch-fails-for-future-dates-2-4-0/124343)
**Author:** [@thinkdffrnt](https://discuss.elastic.co/u/thinkdffrnt)\ **Replies:** 1\ **Last updated:** [March 20, 2018, 3:08am UTC](https://discuss.elastic.co/t/elasticsearch-fails-for-future-dates-2-4-0/124343 "2018-03-20T03:08:54Z")
Is this an issue with 2.4.0 and lesser or for all ES versions. I'm guessing ES has a check for number of digits Here is a sample value for what is fails(Human time (GMT): Thursday, March 20, 3000 12:00:00 AM): Format i… --- ## [Querying differences between indexes](https://discuss.elastic.co/t/querying-differences-between-indexes/124371)
**Author:** [@VinnyT](https://discuss.elastic.co/u/VinnyT)\ **Replies:** 1\ **Last updated:** [March 20, 2018, 3:04am UTC](https://discuss.elastic.co/t/querying-differences-between-indexes/124371 "2018-03-20T03:04:22Z")
Hi. I have a main ES data set (span over a number of indicies) of approximately 5 billion entries. For the purpose of this question, let's say the data consists of username, email, first name, last name. (u, e, fn, ln). … --- ## [Explanation API Clarification](https://discuss.elastic.co/t/explanation-api-clarification/124419)
**Author:** [@imranazad](https://discuss.elastic.co/u/imranazad)\ **Replies:** 1\ **Last updated:** [March 20, 2018, 3:00am UTC](https://discuss.elastic.co/t/explanation-api-clarification/124419 "2018-03-20T03:00:45Z")
Take this output of the explanation API: "explanations": \[ { "index": "my\_index", "valid": true, "explanation": "(title:brown title:fox) (body:brown body:fox)" } \] Am I right in thinking the syntax in the explana… --- ## [I want to analysis data from a database, mainly bank account related information.Is Elasticsearch good at financial analysis?](https://discuss.elastic.co/t/i-want-to-analysis-data-from-a-database-mainly-bank-account-related-information-is-elasticsearch-good-at-financial-analysis/123824)
**Author:** [@jaas](https://discuss.elastic.co/u/jaas)\ **Replies:** 2\ **Last updated:** [March 20, 2018, 1:31am UTC](https://discuss.elastic.co/t/i-want-to-analysis-data-from-a-database-mainly-bank-account-related-information-is-elasticsearch-good-at-financial-analysis/123824 "2018-03-20T01:31:14Z")
I have a huge data from a database mainly focus on bank account related information. And I want to analysis them with elasticsearch or CDH, would you please tell me about which one is better? --- ## [How to update the geoip with the new?](https://discuss.elastic.co/t/how-to-update-the-geoip-with-the-new/124205)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 16\ **Last updated:** [March 20, 2018, 1:06am UTC](https://discuss.elastic.co/t/how-to-update-the-geoip-with-the-new/124205 "2018-03-20T01:06:26Z")
how to update the geoip with the new? can give a docs? i find some iP in my geoip can't output the city. --- ## [Realtime anomaly score analysis](https://discuss.elastic.co/t/realtime-anomaly-score-analysis/123619)
**Author:** [@sgeorge](https://discuss.elastic.co/u/sgeorge)\ **Replies:** 2\ **Last updated:** [March 19, 2018, 10:57pm UTC](https://discuss.elastic.co/t/realtime-anomaly-score-analysis/123619 "2018-03-19T22:57:19Z")
I'm looking to use X-Pack's anomaly detection in order to check if the document that I'm creating would be considered an anomaly. Is it possible to get the anomaly score of a document almost immediately after storing it… --- ## [Kibana watcher ctx.payload.hits.hits is empty even though hits.total is a big number](https://discuss.elastic.co/t/kibana-watcher-ctx-payload-hits-hits-is-empty-even-though-hits-total-is-a-big-number/124654)
**Author:** [@Preetiv](https://discuss.elastic.co/u/Preetiv)\ **Replies:** 1\ **Last updated:** [March 19, 2018, 10:54pm UTC](https://discuss.elastic.co/t/kibana-watcher-ctx-payload-hits-hits-is-empty-even-though-hits-total-is-a-big-number/124654 "2018-03-19T22:54:41Z")
A part of my watch is below. Why is hits.hits (array) empty when the hits.total is a big number? "type": "search", "status": "success", "payload": { "\_shards": { "total": 1010, … --- ## [Logstash duplicate index data](https://discuss.elastic.co/t/logstash-duplicate-index-data/124652)
**Author:** [@geethu\_priya](https://discuss.elastic.co/u/geethu_priya)\ **Replies:** 0\ **Last updated:** [March 19, 2018, 10:11pm UTC](https://discuss.elastic.co/t/logstash-duplicate-index-data/124652 "2018-03-19T22:11:59Z")
Hi, Am trying to load 4TB of data into my elastic search server Am using java bulk api for one time load, after which am using logstash to poll and update the existing index for any delta update. But first time after … --- ## [1.7 Billion Document Migration - Circuit Breaking Exception](https://discuss.elastic.co/t/1-7-billion-document-migration-circuit-breaking-exception/124594)
**Author:** [@kurtiskurtis](https://discuss.elastic.co/u/kurtiskurtis)\ **Replies:** 6\ **Last updated:** [March 19, 2018, 8:57pm UTC](https://discuss.elastic.co/t/1-7-billion-document-migration-circuit-breaking-exception/124594 "2018-03-19T20:57:01Z")
Setup: ----All machines hosted on AWS EC2---- 3 Dedicated Masters (15 Gb Ram) 3 D/I Nodes (64 Gb Ram 30 Dedicated to Heap) 1 Network Load Balancer Scenario: We are moving our Elastic Search cluster from a hosted se… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1746) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1748)