# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1777

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1778

---

## [Elasticsearch creates new line tag /n](https://discuss.elastic.co/t/elasticsearch-creates-new-line-tag-n/121190)

<div class="topic-metadata">

**Author:** [@JGalds](https://discuss.elastic.co/u/JGalds)\
**Replies:** 1\
**Last updated:** [February 23, 2018, 10:37am UTC](https://discuss.elastic.co/t/elasticsearch-creates-new-line-tag-n/121190 "2018-02-23T10:37:13Z")

</div>

Guys, I use elasticsearch as a search platform for full text search in nextcloud (DMS). In the content after I index the file creates new line tag and tab tag in the content. Please see the image below. \[forum\]

---

## [Watcher Could not connect to SMTP host](https://discuss.elastic.co/t/watcher-could-not-connect-to-smtp-host/120775)

<div class="topic-metadata">

**Author:** [@Ekaterina](https://discuss.elastic.co/u/Ekaterina)\
**Replies:** 5\
**Last updated:** [February 23, 2018, 10:35am UTC](https://discuss.elastic.co/t/watcher-could-not-connect-to-smtp-host/120775 "2018-02-23T10:35:17Z")

</div>

Hi All, I have recently got free elastic cloud trial. I am trying to create simple watcher that would send an emails, but it is failing on email sending stage I have whitelisted needed email addresses, but error seems …

---

## [How to bring a Cluster status to Red?](https://discuss.elastic.co/t/how-to-bring-a-cluster-status-to-red/120790)

<div class="topic-metadata">

**Author:** [@madhur\_yadav](https://discuss.elastic.co/u/madhur_yadav)\
**Replies:** 1\
**Last updated:** [February 23, 2018, 9:58am UTC](https://discuss.elastic.co/t/how-to-bring-a-cluster-status-to-red/120790 "2018-02-23T09:58:54Z")

</div>

I've doing some testing and I want to changes my cluster status from 'Green' to 'Red' . Does any one have any idea how can i do this? What changes changes should I perform? I've tried the methods from the following lin…

---

## [Multiple children relations for single parent in "join" type](https://discuss.elastic.co/t/multiple-children-relations-for-single-parent-in-join-type/120265)

<div class="topic-metadata">

**Author:** [@ei-grad](https://discuss.elastic.co/u/ei-grad)\
**Replies:** 1\
**Last updated:** [February 23, 2018, 9:54am UTC](https://discuss.elastic.co/t/multiple-children-relations-for-single-parent-in-join-type/120265 "2018-02-23T09:54:06Z")

</div>

The join datatype documentation says that relations should be specified in {"parent": "child"} manner. Am I understand correctly, that this means that it is not possible to add multiple relations for a single parent?

---

## [Giving exact match more weight than stemmed match](https://discuss.elastic.co/t/giving-exact-match-more-weight-than-stemmed-match/121194)

<div class="topic-metadata">

**Author:** [@Atul\_Bagga](https://discuss.elastic.co/u/Atul_Bagga)\
**Replies:** 0\
**Last updated:** [February 23, 2018, 9:51am UTC](https://discuss.elastic.co/t/giving-exact-match-more-weight-than-stemmed-match/121194 "2018-02-23T09:51:25Z")

</div>

There are already questions asked on this which are either unanswered or the reply is 3 years old I want to know if ES has something now to solve this without having to index the content twice which I am missing. It is …

---

## [Configuring x-pack and active directory](https://discuss.elastic.co/t/configuring-x-pack-and-active-directory/120572)

<div class="topic-metadata">

**Author:** [@ryext](https://discuss.elastic.co/u/ryext)\
**Replies:** 3\
**Last updated:** [February 23, 2018, 7:40am UTC](https://discuss.elastic.co/t/configuring-x-pack-and-active-directory/120572 "2018-02-23T07:40:49Z")

</div>

Hey, I am trying to configure x-pack and elasticsearch to authenticate through an Active Directory. i feel like i am missing something in my configuration. running Centos 7 with elasticsearch 6.1.3 i added that to my…

---

## [Correlate request and response](https://discuss.elastic.co/t/correlate-request-and-response/121157)

<div class="topic-metadata">

**Author:** [@chris.franklin](https://discuss.elastic.co/u/chris.franklin)\
**Replies:** 0\
**Last updated:** [February 23, 2018, 3:52am UTC](https://discuss.elastic.co/t/correlate-request-and-response/121157 "2018-02-23T03:52:51Z")

</div>

Hello, I have a plugin that was written originally for Elasticsearch 1.x. It has been updated to run in the 2.x series with no problems. When I went to upgrade the plugin to 5.x, I hit a major stumbling block. In the 2…

---

## [Recover index takes lots of time in translog](https://discuss.elastic.co/t/recover-index-takes-lots-of-time-in-translog/120972)

<div class="topic-metadata">

**Author:** [@junkainiu](https://discuss.elastic.co/u/junkainiu)\
**Replies:** 1\
**Last updated:** [February 23, 2018, 1:52am UTC](https://discuss.elastic.co/t/recover-index-takes-lots-of-time-in-translog/120972 "2018-02-23T01:52:42Z")

</div>

Hi, I am using elasticsearch 5.3.0 as a one node cluster with a 3GB heap. It stores about 11GB data. When I use systemctl restart elasticsearch to restart cluster, it will cost about 5s for each index to recovery. The …

---

## [Alerting when search time is long over a period - data values](https://discuss.elastic.co/t/alerting-when-search-time-is-long-over-a-period-data-values/120956)

<div class="topic-metadata">

**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Replies:** 2\
**Last updated:** [February 23, 2018, 1:42am UTC](https://discuss.elastic.co/t/alerting-when-search-time-is-long-over-a-period-data-values/120956 "2018-02-23T01:42:46Z")

</div>

Dear All/Xpack team I'm trying to use .monitoring-es-6-... indice to alert when search time averages more than X seconds over a period. I'm seeing entries of below kind in two places (indices\_stats, index\_stats), where…

---

## [Socket hang up while taking CSV report - X-pack](https://discuss.elastic.co/t/socket-hang-up-while-taking-csv-report-x-pack/121057)

<div class="topic-metadata">

**Author:** [@hadi](https://discuss.elastic.co/u/hadi)\
**Replies:** 1\
**Last updated:** [February 23, 2018, 1:31am UTC](https://discuss.elastic.co/t/socket-hang-up-while-taking-csv-report-x-pack/121057 "2018-02-23T01:31:40Z")

</div>

Hi. When I want to make an not so huge CSV report, less than 300 thousands hits. But I get the socket hang up error in Kibana; which eventually leads to the reporting fails. recent logs in Kibana are as follows! sudo …

---

## [Connection refused on new RHEL7 installation](https://discuss.elastic.co/t/connection-refused-on-new-rhel7-installation/120535)

<div class="topic-metadata">

**Author:** [@pclaudiowsi](https://discuss.elastic.co/u/pclaudiowsi)\
**Replies:** 5\
**Last updated:** [February 23, 2018, 1:09am UTC](https://discuss.elastic.co/t/connection-refused-on-new-rhel7-installation/120535 "2018-02-23T01:09:31Z")

</div>

Hi, I'm new to ELK and just installed elasticsearch on RHEL7 with default configs. I can run curl successfully to http://127.0.0.1:9200 or http://localhost:9200, but not with http://host1:9200: $ curl http://host1 --ve…

---

## [Return all documents that have the highest value in a field](https://discuss.elastic.co/t/return-all-documents-that-have-the-highest-value-in-a-field/121138)

<div class="topic-metadata">

**Author:** [@Vioh](https://discuss.elastic.co/u/Vioh)\
**Replies:** 0\
**Last updated:** [February 22, 2018, 10:33pm UTC](https://discuss.elastic.co/t/return-all-documents-that-have-the-highest-value-in-a-field/121138 "2018-02-22T22:33:33Z")

</div>

Suppose that I have the following mapping: PUT /myindex/\_mappings/people { "properties": { "name": {"type": "keyword"}, "age" : {"type": "integer"}, } } And the following documents: {"name": "Bob…

---

## [Delete this post!](https://discuss.elastic.co/t/delete-this-post/121132)

<div class="topic-metadata">

**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\
**Replies:** 0\
**Last updated:** [February 22, 2018, 9:20pm UTC](https://discuss.elastic.co/t/delete-this-post/121132 "2018-02-22T21:20:26Z")

</div>

DELETE THIS POST!

---

## [Watcher: HTTP input - verify certificate](https://discuss.elastic.co/t/watcher-http-input-verify-certificate/121115)

<div class="topic-metadata">

**Author:** [@xixo](https://discuss.elastic.co/u/xixo)\
**Replies:** 1\
**Last updated:** [February 22, 2018, 9:38pm UTC](https://discuss.elastic.co/t/watcher-http-input-verify-certificate/121115 "2018-02-22T21:38:51Z")

</div>

Hi, I'm creating a watcher to check some values with an API Restful. It is failing with this error: \[2018-02-22T19:07:00,941\]\[ERROR\]\[o.e.x.w.i.h.ExecutableHttpInput\] \[kibana\] failed to execute \[http\] input for watch \[i…

---

## [Unexpected error while indexing monitoring document org.elasticsearch.xpack.monitoring](https://discuss.elastic.co/t/unexpected-error-while-indexing-monitoring-document-org-elasticsearch-xpack-monitoring/120750)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 2\
**Last updated:** [February 22, 2018, 9:30pm UTC](https://discuss.elastic.co/t/unexpected-error-while-indexing-monitoring-document-org-elasticsearch-xpack-monitoring/120750 "2018-02-22T21:30:51Z")

</div>

Hello, I updated from 5.6.2 to 6.2.1 on Sunday and today I started to get this error, which stopped all the indexing on my nodes whic made some data to be lost since I have tcp and udp inputs comingo from logstash that …

---

## [Reindex failure](https://discuss.elastic.co/t/reindex-failure/121133)

<div class="topic-metadata">

**Author:** [@apexi](https://discuss.elastic.co/u/apexi)\
**Replies:** 0\
**Last updated:** [February 22, 2018, 9:29pm UTC](https://discuss.elastic.co/t/reindex-failure/121133 "2018-02-22T21:29:42Z")

</div>

Hello, I'm trying to fix a mapping conflict on a field that is supposed to be a integer but is indexed as text on the index. So i've created a new index with the correct mapping and did the reindex but it fails after a…

---

## [Exception removing x-pack 6.2.2 - duplicated pluging](https://discuss.elastic.co/t/exception-removing-x-pack-6-2-2-duplicated-pluging/121050)

<div class="topic-metadata">

**Author:** [@dcam](https://discuss.elastic.co/u/dcam)\
**Replies:** 2\
**Last updated:** [February 22, 2018, 9:29pm UTC](https://discuss.elastic.co/t/exception-removing-x-pack-6-2-2-duplicated-pluging/121050 "2018-02-22T21:29:37Z")

</div>

ES throws an exception about duplicated pluging. Then trying to reinstall x-pack I get the same exception: /usr/share/elasticsearch # bin/elasticsearch-plugin remove x-pack Exception in thread "main" java.lang.IllegalSt…

---

## [.monitoring-\* indices never cleaned up on non-24hr/d cluster](https://discuss.elastic.co/t/monitoring-indices-never-cleaned-up-on-non-24hr-d-cluster/120190)

<div class="topic-metadata">

**Author:** [@rhinp6](https://discuss.elastic.co/u/rhinp6)\
**Replies:** 2\
**Last updated:** [February 22, 2018, 9:27pm UTC](https://discuss.elastic.co/t/monitoring-indices-never-cleaned-up-on-non-24hr-d-cluster/120190 "2018-02-22T21:27:53Z")

</div>

Would it be possible to support the configuration of the periodicy or execution hour of clean up job which deletes old x-pack system indexes (.monitoring, etc)? Or have it run on startup as well as 01h00? We are running…

---

## [Watcher error when executing the watch](https://discuss.elastic.co/t/watcher-error-when-executing-the-watch/119536)

<div class="topic-metadata">

**Author:** [@Maxime\_Poirier-Journ](https://discuss.elastic.co/u/Maxime_Poirier-Journ)\
**Replies:** 11\
**Last updated:** [February 22, 2018, 9:25pm UTC](https://discuss.elastic.co/t/watcher-error-when-executing-the-watch/119536 "2018-02-22T21:25:01Z")

</div>

Hi, Im pretty new to watcher and painless. I'm getting this error and I have no clue why. Can you guys help me out for this one? What i need to do is retrieve the value of "SAM Account Name: " in the ES item called "me…

---

## [Elasticsearch on Docker, basic failed](https://discuss.elastic.co/t/elasticsearch-on-docker-basic-failed/121130)

<div class="topic-metadata">

**Author:** [@Fei\_Yao](https://discuss.elastic.co/u/Fei_Yao)\
**Replies:** 0\
**Last updated:** [February 22, 2018, 9:14pm UTC](https://discuss.elastic.co/t/elasticsearch-on-docker-basic-failed/121130 "2018-02-22T21:14:41Z")

</div>

Hi, I'm trying the custom image following the official document as of below. It didn't work out of box. I have the following errors. https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html#\_c\_custom…

---

## [Coordinating Node and ELB](https://discuss.elastic.co/t/coordinating-node-and-elb/120929)

<div class="topic-metadata">

**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\
**Replies:** 3\
**Last updated:** [February 22, 2018, 9:04pm UTC](https://discuss.elastic.co/t/coordinating-node-and-elb/120929 "2018-02-22T21:04:04Z")

</div>

I have a odd requirement where we need both ELB (Fronting EC2 Master/Data Nodes) and a Coordinating Node. In this scenario, would the Coordinating Node need to be added to the ELB?

---

## [One index or many index](https://discuss.elastic.co/t/one-index-or-many-index/121127)

<div class="topic-metadata">

**Author:** [@BentCoder](https://discuss.elastic.co/u/BentCoder)\
**Replies:** 0\
**Last updated:** [February 22, 2018, 8:47pm UTC](https://discuss.elastic.co/t/one-index-or-many-index/121127 "2018-02-22T20:47:42Z")

</div>

Hi, Just want to find out if there is a preferred way or not for the case below. I sell products in 40 countries. Each country has about 50,000 products. Product fields/mapping in country X is always same. Product fie…

---

## ["Limits to the number of shards which are searched in parallel"](https://discuss.elastic.co/t/limits-to-the-number-of-shards-which-are-searched-in-parallel/120700)

<div class="topic-metadata">

**Author:** [@bobbyi](https://discuss.elastic.co/u/bobbyi)\
**Replies:** 1\
**Last updated:** [February 22, 2018, 8:19pm UTC](https://discuss.elastic.co/t/limits-to-the-number-of-shards-which-are-searched-in-parallel/120700 "2018-02-22T20:19:33Z")

</div>

The release notes for ES 6 mention: Limits to the number of shards which are searched in parallel, so that a single query cannot dominate the cluster. I haven't found documentation of how this feature works. I am won…

---

## [Do I need x-pack at all?](https://discuss.elastic.co/t/do-i-need-x-pack-at-all/121111)

<div class="topic-metadata">

**Author:** [@Amir\_Salar\_Pourhasan](https://discuss.elastic.co/u/Amir_Salar_Pourhasan)\
**Replies:** 1\
**Last updated:** [February 22, 2018, 8:17pm UTC](https://discuss.elastic.co/t/do-i-need-x-pack-at-all/121111 "2018-02-22T20:17:02Z")

</div>

I do not need any features like machine learning. I\`m using Xpack free only for setting a password for users. If I miss understood, please correct me. I want: install my Elastic search and Kibana on my ubuntu server …

---

## [How to retrieve values from nested json element while using function in query](https://discuss.elastic.co/t/how-to-retrieve-values-from-nested-json-element-while-using-function-in-query/120033)

<div class="topic-metadata">

**Author:** [@debroy2000](https://discuss.elastic.co/u/debroy2000)\
**Replies:** 0\
**Last updated:** [February 15, 2018, 4:56pm UTC](https://discuss.elastic.co/t/how-to-retrieve-values-from-nested-json-element-while-using-function-in-query/120033 "2018-02-15T16:56:23Z")

</div>

I have a Query running against Elastic Search version 5.5.2 where I need to get a custom boost score for a particular document in the scored result so that it goes to the top of the search result based on a particular se…

---

## [What does the rbbi rule for icu\_tokenizer in the docs do?](https://discuss.elastic.co/t/what-does-the-rbbi-rule-for-icu-tokenizer-in-the-docs-do/121026)

<div class="topic-metadata">

**Author:** [@Judy\_Raj](https://discuss.elastic.co/u/Judy_Raj)\
**Replies:** 1\
**Last updated:** [February 22, 2018, 7:28pm UTC](https://discuss.elastic.co/t/what-does-the-rbbi-rule-for-icu-tokenizer-in-the-docs-do/121026 "2018-02-22T19:28:16Z")

</div>

I was trying to work with the icu tokenizer and came across the rbbi rules section in the docs. https://www.elastic.co/guide/en/elasticsearch/plugins/current/analysis-icu-tokenizer.html I used the same rule from the do…

---

## [Error response from daemon: manifest for docker.elastic.co/elasticsearch/elasticsearch-platinum:6.2.2 not found](https://discuss.elastic.co/t/error-response-from-daemon-manifest-for-docker-elastic-co-elasticsearch-elasticsearch-platinum-6-2-2-not-found/119900)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 5\
**Last updated:** [February 22, 2018, 6:55pm UTC](https://discuss.elastic.co/t/error-response-from-daemon-manifest-for-docker-elastic-co-elasticsearch-elasticsearch-platinum-6-2-2-not-found/119900 "2018-02-22T18:55:43Z")

</div>

Per: 6.2.2 Release Notes | Elasticsearch Reference \[6.2\] | Elastic Yet; # docker pull docker.elastic.co/elasticsearch/elasticsearch-platinum:6.2.2 Error response from daemon: manifest for docker.elastic.co/elasticsearc…

---

## [Does multi search request accept any custom params and return the same in response](https://discuss.elastic.co/t/does-multi-search-request-accept-any-custom-params-and-return-the-same-in-response/120990)

<div class="topic-metadata">

**Author:** [@Vijaya\_Bharathy](https://discuss.elastic.co/u/Vijaya_Bharathy)\
**Replies:** 4\
**Last updated:** [February 22, 2018, 6:41pm UTC](https://discuss.elastic.co/t/does-multi-search-request-accept-any-custom-params-and-return-the-same-in-response/120990 "2018-02-22T18:41:02Z")

</div>

Hi, Want to know, Is there any way we can pass a custom parameter in multi search request payload and get that parameter in response? e.g., GET twitter/\_msearch {"query" : {"match\_all" : {}}, "from" : 0, "size" : 10,…

---

## [Odd scoring behavior](https://discuss.elastic.co/t/odd-scoring-behavior/120932)

<div class="topic-metadata">

**Author:** [@atulsudhalkar](https://discuss.elastic.co/u/atulsudhalkar)\
**Replies:** 6\
**Last updated:** [February 22, 2018, 6:38pm UTC](https://discuss.elastic.co/t/odd-scoring-behavior/120932 "2018-02-22T18:38:02Z")

</div>

I’m creating an index via the following: {"mappings": {"Student": {"properties": {"skills": {"type":"text","analyzer":"english"}}}}} Then I’m adding three documents to it: {"index":{"\_id":"unr\_nedra\_north"}} {"id":"u…

---

## [Java Rest Client: I/O Dispatcher threads buildup in Tomcat](https://discuss.elastic.co/t/java-rest-client-i-o-dispatcher-threads-buildup-in-tomcat/108135)

<div class="topic-metadata">

**Author:** [@Neel\_Tiwari](https://discuss.elastic.co/u/Neel_Tiwari)\
**Replies:** 2\
**Last updated:** [February 22, 2018, 6:32pm UTC](https://discuss.elastic.co/t/java-rest-client-i-o-dispatcher-threads-buildup-in-tomcat/108135 "2018-02-22T18:32:11Z")

</div>

We are observing a steady build up of I/O dispatcher threads when firing queries from a Tomcat webapp we've developed. One thing to note... we are using the low-level Java REST client, and we only call close() on the Res…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1776)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1778)
