# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1758

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1759

---

## [Exception while retrieving instance list from AWS API](https://discuss.elastic.co/t/exception-while-retrieving-instance-list-from-aws-api/123345)

<div class="topic-metadata">

**Author:** [@Amit\_Hora](https://discuss.elastic.co/u/Amit_Hora)\
**Replies:** 5\
**Last updated:** [March 10, 2018, 12:17pm UTC](https://discuss.elastic.co/t/exception-while-retrieving-instance-list-from-aws-api/123345 "2018-03-10T12:17:39Z")

</div>

Hi , I am using same IAM roles for my two opswork stack one stack with ES5.4 other stack has ES6.2 with 5.4 discovery-ec2 plugin works fine. But with 6.0 i am getting below error java.security.AccessControlExcep…

---

## [Two aggregations on different filter in same query](https://discuss.elastic.co/t/two-aggregations-on-different-filter-in-same-query/122055)

<div class="topic-metadata">

**Author:** [@devil\_srj7](https://discuss.elastic.co/u/devil_srj7)\
**Replies:** 2\
**Last updated:** [March 10, 2018, 12:06pm UTC](https://discuss.elastic.co/t/two-aggregations-on-different-filter-in-same-query/122055 "2018-03-10T12:06:46Z")

</div>

I perform two separate request for my aggregations as: For sum of payments of bill number = 3 { "query": { "bool": { "must": \[ {"match": {"num\_ra\_bill\_no": 2 }} \] } }, …

---

## [Curator optimize operation timeout gets override by default value of 21600](https://discuss.elastic.co/t/curator-optimize-operation-timeout-gets-override-by-default-value-of-21600/123376)

<div class="topic-metadata">

**Author:** [@sravan.prince](https://discuss.elastic.co/u/sravan.prince)\
**Replies:** 1\
**Last updated:** [March 10, 2018, 12:05pm UTC](https://discuss.elastic.co/t/curator-optimize-operation-timeout-gets-override-by-default-value-of-21600/123376 "2018-03-10T12:05:08Z")

</div>

In elasticsearch cluster, while performing the curator optimize operation for logstash & marvel indices. This works. However, the timeout configured for the curator optimize is not considered. Configured value 5000 fo…

---

## [Doubling Down on Open - Why not two separate repos?](https://discuss.elastic.co/t/doubling-down-on-open-why-not-two-separate-repos/122266)

<div class="topic-metadata">

**Author:** [@nkoothrappahli](https://discuss.elastic.co/u/nkoothrappahli)\
**Replies:** 3\
**Last updated:** [March 10, 2018, 9:49am UTC](https://discuss.elastic.co/t/doubling-down-on-open-why-not-two-separate-repos/122266 "2018-03-10T09:49:34Z")

</div>

When i read the "Doubling Down on Open" information correctly it looks like that the x-pack source code will reside in the same github repo as elasticsearch code itself and that there is a big confusion about licenses fo…

---

## [Specify "\_size" and "properties" both in mappings for Index](https://discuss.elastic.co/t/specify-size-and-properties-both-in-mappings-for-index/123377)

<div class="topic-metadata">

**Author:** [@mohits1995](https://discuss.elastic.co/u/mohits1995)\
**Replies:** 2\
**Last updated:** [March 10, 2018, 9:07am UTC](https://discuss.elastic.co/t/specify-size-and-properties-both-in-mappings-for-index/123377 "2018-03-10T09:07:57Z")

</div>

Hi, I want to map mappings for documents in index. For that, I have created mappings with properties as of now. But I also want to get the size of documents, for that, I found out that I need to enable "\_size" field as…

---

## [X-pack default password is not working for Elasticsearch 5.6.8 version](https://discuss.elastic.co/t/x-pack-default-password-is-not-working-for-elasticsearch-5-6-8-version/123371)

<div class="topic-metadata">

**Author:** [@bob999c](https://discuss.elastic.co/u/bob999c)\
**Replies:** 3\
**Last updated:** [March 10, 2018, 7:08am UTC](https://discuss.elastic.co/t/x-pack-default-password-is-not-working-for-elasticsearch-5-6-8-version/123371 "2018-03-10T07:08:05Z")

</div>

Hi, I installed X-Pack(5.6.8) plugin on ElasticSearch(5.6.8).Here is the error I see when I try to do curl with default password. \[root@dev01-2 elasticsearch\]# curl -XGET -u elastic:changeme http://10.2.2.5:9200 {"err…

---

## [X-pack Watcher Execution Status: Error!](https://discuss.elastic.co/t/x-pack-watcher-execution-status-error/122312)

<div class="topic-metadata">

**Author:** [@Nikhilpawar1985](https://discuss.elastic.co/u/Nikhilpawar1985)\
**Replies:** 4\
**Last updated:** [March 10, 2018, 5:20am UTC](https://discuss.elastic.co/t/x-pack-watcher-execution-status-error/122312 "2018-03-10T05:20:45Z")

</div>

Hi , i am able to add watcher action but seeing execution error . Can someone help PUT \_xpack/watcher/watch/my-watch { "trigger": { "schedule": { "interval": "10s" } }, "input": { "http": { …

---

## ["runuser: cannot set groups: Operation not permitted" Error While running ES as Service](https://discuss.elastic.co/t/runuser-cannot-set-groups-operation-not-permitted-error-while-running-es-as-service/123293)

<div class="topic-metadata">

**Author:** [@deepanshu\_mittal](https://discuss.elastic.co/u/deepanshu_mittal)\
**Replies:** 1\
**Last updated:** [March 9, 2018, 3:29pm UTC](https://discuss.elastic.co/t/runuser-cannot-set-groups-operation-not-permitted-error-while-running-es-as-service/123293 "2018-03-09T15:29:50Z")

</div>

I am getting "runuser: cannot set groups: Operation not permitted" Error while running ES as service on OEL6 linux machine. I am using following /etc/init.d/elasticsearch file #!/bin/bash elasticsearch chkconfig: …

---

## [Docs still refer to index types](https://discuss.elastic.co/t/docs-still-refer-to-index-types/123337)

<div class="topic-metadata">

**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\
**Replies:** 3\
**Last updated:** [March 10, 2018, 12:03am UTC](https://discuss.elastic.co/t/docs-still-refer-to-index-types/123337 "2018-03-10T00:03:39Z")

</div>

https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-templates.html This has the index type in the mapping block. Isn't this obsolete now that ES removes index types? How do we do it now that there ar…

---

## [How to script to extract the value](https://discuss.elastic.co/t/how-to-script-to-extract-the-value/123362)

<div class="topic-metadata">

**Author:** [@elasticuser1](https://discuss.elastic.co/u/elasticuser1)\
**Replies:** 0\
**Last updated:** [March 9, 2018, 11:43pm UTC](https://discuss.elastic.co/t/how-to-script-to-extract-the-value/123362 "2018-03-09T23:43:44Z")

</div>

Hi, I have following data and I want to extract the value where metadata.items.key equals environment\_\_name.. How can I do that in elastic search and Kibana? thanks "metadata" : { "fingerprint" : "…

---

## [Ingest index with field limit of 2000](https://discuss.elastic.co/t/ingest-index-with-field-limit-of-2000/123361)

<div class="topic-metadata">

**Author:** [@bradley](https://discuss.elastic.co/u/bradley)\
**Replies:** 1\
**Last updated:** [March 9, 2018, 11:40pm UTC](https://discuss.elastic.co/t/ingest-index-with-field-limit-of-2000/123361 "2018-03-09T23:40:31Z")

</div>

When I run: curl -XPUT 'localhost:9200/applicants?pretty' -H 'Content-Type: application/json' -d' { "settings": { "index.mapping.total\_fields.limit": 2000, } } ' I get: { "error" : { "roo…

---

## [Elastic command as CURL](https://discuss.elastic.co/t/elastic-command-as-curl/123355)

<div class="topic-metadata">

**Author:** [@bradley](https://discuss.elastic.co/u/bradley)\
**Replies:** 4\
**Last updated:** [March 9, 2018, 11:15pm UTC](https://discuss.elastic.co/t/elastic-command-as-curl/123355 "2018-03-09T23:15:50Z")

</div>

How would this be written as CURL? I've tried a few things, but it didn't work. PUT my\_index/\_settings { "index.mapping.total\_fields.limit": 2000 }

---

## [Range search - adding month and day make query results wrong](https://discuss.elastic.co/t/range-search-adding-month-and-day-make-query-results-wrong/123354)

<div class="topic-metadata">

**Author:** [@bjo](https://discuss.elastic.co/u/bjo)\
**Replies:** 1\
**Last updated:** [March 9, 2018, 10:30pm UTC](https://discuss.elastic.co/t/range-search-adding-month-and-day-make-query-results-wrong/123354 "2018-03-09T22:30:56Z")

</div>

this query works and shows results from 1771-01-07: curl -XGET 'localhost:9200/\_search?pretty' -H 'Content-Type: application/json' -d' "query": { "range" : { "time\_from" : { "gte" :…

---

## [Indexing stops at low number of records due to GC overhead with proper heap settings](https://discuss.elastic.co/t/indexing-stops-at-low-number-of-records-due-to-gc-overhead-with-proper-heap-settings/123162)

<div class="topic-metadata">

**Author:** [@whicter](https://discuss.elastic.co/u/whicter)\
**Replies:** 9\
**Last updated:** [March 9, 2018, 10:28pm UTC](https://discuss.elastic.co/t/indexing-stops-at-low-number-of-records-due-to-gc-overhead-with-proper-heap-settings/123162 "2018-03-09T22:28:08Z")

</div>

Hello, My Elasticsearch stops to index when after certain number of logs are sent to elastic via logstash and I keep seeing \[2018-03-08T15:44:34,677\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[aTs5egi\] \[gc\]\[14522\] overhead,…

---

## [Object field starting or ending with a \[.\] makes object resolution ambiguous: \[\]](https://discuss.elastic.co/t/object-field-starting-or-ending-with-a-makes-object-resolution-ambiguous/123351)

<div class="topic-metadata">

**Author:** [@bradley](https://discuss.elastic.co/u/bradley)\
**Replies:** 1\
**Last updated:** [March 9, 2018, 9:54pm UTC](https://discuss.elastic.co/t/object-field-starting-or-ending-with-a-makes-object-resolution-ambiguous/123351 "2018-03-09T21:54:30Z")

</div>

I'm getting the error "object field starting or ending with a \[.\] makes object resolution ambiguous: \[\]". But there isn't a single dot \[.\] in my object. Using elasticClient.update() I'm passing: { "index": "applicants"…

---

## [IP address not recognized as valid by geocoding processor](https://discuss.elastic.co/t/ip-address-not-recognized-as-valid-by-geocoding-processor/123344)

<div class="topic-metadata">

**Author:** [@David9](https://discuss.elastic.co/u/David9)\
**Replies:** 1\
**Last updated:** [March 9, 2018, 9:53pm UTC](https://discuss.elastic.co/t/ip-address-not-recognized-as-valid-by-geocoding-processor/123344 "2018-03-09T21:53:39Z")

</div>

This page IP field type | Elasticsearch Guide \[8.11\] | Elastic appears to confirm that a netmask on the end of an IP address is allowable when geocoding IP addresses, e.g. 192.168.0.0/16, however we are getting this erro…

---

## [Elasticsearch 5.x: Is it possible to ignore missing inner object when indexing?](https://discuss.elastic.co/t/elasticsearch-5-x-is-it-possible-to-ignore-missing-inner-object-when-indexing/123328)

<div class="topic-metadata">

**Author:** [@shangsunset](https://discuss.elastic.co/u/shangsunset)\
**Replies:** 3\
**Last updated:** [March 9, 2018, 9:35pm UTC](https://discuss.elastic.co/t/elasticsearch-5-x-is-it-possible-to-ignore-missing-inner-object-when-indexing/123328 "2018-03-09T21:35:56Z")

</div>

So in my mapping shown below, lonlat is geo-shape inside location. "location": { "type": "object", "properties" : { "lonlat" : { "type" : "geo\_shape" }, ... } }, My problem is that when indexi…

---

## [Number of identical documents?](https://discuss.elastic.co/t/number-of-identical-documents/123335)

<div class="topic-metadata">

**Author:** [@DevT](https://discuss.elastic.co/u/DevT)\
**Replies:** 2\
**Last updated:** [March 9, 2018, 8:27pm UTC](https://discuss.elastic.co/t/number-of-identical-documents/123335 "2018-03-09T20:27:39Z")

</div>

Let's say I have an index with 50 documents that contain 5 different names. Is there a way to list the number of repeated names in descending order? For example: { "John": 19, "David": 17, "Susan": 7, "Peter": 4, …

---

## [Problem with Bulk API instantiation](https://discuss.elastic.co/t/problem-with-bulk-api-instantiation/123319)

<div class="topic-metadata">

**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\
**Replies:** 3\
**Last updated:** [March 9, 2018, 6:55pm UTC](https://discuss.elastic.co/t/problem-with-bulk-api-instantiation/123319 "2018-03-09T18:55:02Z")

</div>

This line is not compiling in Eclipse: BulkRequestBuilder bulkRequest = client.prepareBulk(); Error: \` The method prepareBulk() is undefined for the type RestHighLevelClient \` Any ideas what? Am I missing a depen…

---

## [Yellow status sfter creating cluster](https://discuss.elastic.co/t/yellow-status-sfter-creating-cluster/123308)

<div class="topic-metadata">

**Author:** [@saad](https://discuss.elastic.co/u/saad)\
**Replies:** 5\
**Last updated:** [March 9, 2018, 6:42pm UTC](https://discuss.elastic.co/t/yellow-status-sfter-creating-cluster/123308 "2018-03-09T18:42:00Z")

</div>

in the past I had one elasticsearch and today I created another node the cluster created. when I run GET /\_cat/health?v I got status YELLOW. How I will make the status GREEN

---

## [Java REST Client and Multithreading](https://discuss.elastic.co/t/java-rest-client-and-multithreading/123298)

<div class="topic-metadata">

**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\
**Replies:** 6\
**Last updated:** [March 9, 2018, 5:36pm UTC](https://discuss.elastic.co/t/java-rest-client-and-multithreading/123298 "2018-03-09T17:36:41Z")

</div>

Is the Java REST Client Thread safe? Can I instantiate a single client object and share among the threads? Or should I open separate connections in each thread?

---

## [Nested document updation using painless script](https://discuss.elastic.co/t/nested-document-updation-using-painless-script/122831)

<div class="topic-metadata">

**Author:** [@anoopvalluthadam](https://discuss.elastic.co/u/anoopvalluthadam)\
**Replies:** 1\
**Last updated:** [March 9, 2018, 6:04pm UTC](https://discuss.elastic.co/t/nested-document-updation-using-painless-script/122831 "2018-03-09T18:04:15Z")

</div>

POST test/b/1 { "name": "andrew", "b": \[{"x":"c1", "y": 0}, {"x":"c2", "y": 0}\] } GET test/b/1 POST test/b/1/\_update { "script": { "lang": "painless", "source": "Map item; for (int i=0;i\<ctx.\_source.b.…

---

## [Nest C# Remove Setting from Index](https://discuss.elastic.co/t/nest-c-remove-setting-from-index/123315)

<div class="topic-metadata">

**Author:** [@Kim-Kruse-Hansen](https://discuss.elastic.co/u/Kim-Kruse-Hansen)\
**Replies:** 0\
**Last updated:** [March 9, 2018, 6:04pm UTC](https://discuss.elastic.co/t/nest-c-remove-setting-from-index/123315 "2018-03-09T18:04:07Z")

</div>

Hi I have this C# code to add a setting to an index: var req = new UpdateIndexSettingsRequest(); req.FlatSettings = true; req.FilterPath = new\[\] { index }; …

---

## [False positive highlights](https://discuss.elastic.co/t/false-positive-highlights/123313)

<div class="topic-metadata">

**Author:** [@mbatchkarov](https://discuss.elastic.co/u/mbatchkarov)\
**Replies:** 0\
**Last updated:** [March 9, 2018, 5:45pm UTC](https://discuss.elastic.co/t/false-positive-highlights/123313 "2018-03-09T17:45:56Z")

</div>

I am using an nGram tokenizer in ES 6.1.1 and getting some weird highlights: multiple adjacent character ngram highlights are not merged into one tra is incorrectly highlighted in doc 9 The query auftrag matches docu…

---

## [Deploy elasticsearch cluster over internet](https://discuss.elastic.co/t/deploy-elasticsearch-cluster-over-internet/122559)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 6\
**Last updated:** [March 9, 2018, 5:28pm UTC](https://discuss.elastic.co/t/deploy-elasticsearch-cluster-over-internet/122559 "2018-03-09T17:28:17Z")

</div>

Hello, I want to deploy a 3 node cluster of ES with x-pack (security) I was wondering about security: My 3 nodes have to communicate (discovery, etc...). but of course, the question of the security is raised. What is …

---

## [Elastic Search Timeout Property for Search](https://discuss.elastic.co/t/elastic-search-timeout-property-for-search/123310)

<div class="topic-metadata">

**Author:** [@raj.shah1593](https://discuss.elastic.co/u/raj.shah1593)\
**Replies:** 0\
**Last updated:** [March 9, 2018, 5:15pm UTC](https://discuss.elastic.co/t/elastic-search-timeout-property-for-search/123310 "2018-03-09T17:15:39Z")

</div>

Hi, I am currently using ES v6.1.2. I plan to use the timeout property for search in ES. Can someone explain how this property works in ES and how can I integrate it with Java. For example, I have observed that even…

---

## [Dynamic Mapping keyword over text without path\_match](https://discuss.elastic.co/t/dynamic-mapping-keyword-over-text-without-path-match/123307)

<div class="topic-metadata">

**Author:** [@philv](https://discuss.elastic.co/u/philv)\
**Replies:** 0\
**Last updated:** [March 9, 2018, 5:02pm UTC](https://discuss.elastic.co/t/dynamic-mapping-keyword-over-text-without-path-match/123307 "2018-03-09T17:02:26Z")

</div>

Is there a way to force a field to be a 'keyword' type as opposed to a 'text' type without relying on the field name and path\_matching ? I don't know which field names I'll be indexing, but I'd like to be able to submi…

---

## [How can I successfully debug a watcher? My watchers don't seem to do anything](https://discuss.elastic.co/t/how-can-i-successfully-debug-a-watcher-my-watchers-dont-seem-to-do-anything/122221)

<div class="topic-metadata">

**Author:** [@ujjain](https://discuss.elastic.co/u/ujjain)\
**Replies:** 2\
**Last updated:** [March 9, 2018, 4:51pm UTC](https://discuss.elastic.co/t/how-can-i-successfully-debug-a-watcher-my-watchers-dont-seem-to-do-anything/122221 "2018-03-09T16:51:24Z")

</div>

My watchers don´t seem to do anything. Nothing appears in the \_alerts index and no e-mail gets sent. I'm not sure what effective methods of debugging are either. I'm running ElasticSearch 2.4. { "\_index": "alert\_watc…

---

## [What's the difference between fielddata\_fields and docvalue\_fields in inner hits?](https://discuss.elastic.co/t/whats-the-difference-between-fielddata-fields-and-docvalue-fields-in-inner-hits/123304)

<div class="topic-metadata">

**Author:** [@BLZB0B](https://discuss.elastic.co/u/BLZB0B)\
**Replies:** 0\
**Last updated:** [March 9, 2018, 4:39pm UTC](https://discuss.elastic.co/t/whats-the-difference-between-fielddata-fields-and-docvalue-fields-in-inner-hits/123304 "2018-03-09T16:39:58Z")

</div>

Hi, we've noticed a perfomance hit on our inner hits, doing a bit of digging, we worked out that this was being caused by not setting \_source:false on some of our inner hits. the following document https://www.elastic…

---

## [Fuzzy query exclude exact match](https://discuss.elastic.co/t/fuzzy-query-exclude-exact-match/123289)

<div class="topic-metadata">

**Author:** [@acastellano](https://discuss.elastic.co/u/acastellano)\
**Replies:** 2\
**Last updated:** [March 9, 2018, 3:46pm UTC](https://discuss.elastic.co/t/fuzzy-query-exclude-exact-match/123289 "2018-03-09T15:46:54Z")

</div>

Is there any way to express the 'fuzziness' parameter in terms of a range that excludes exact matches or fuzziness = 0 hits? Basically just a return on fuzzy matches of edit distances 1 and 2?

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1757)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1759)
