# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1778

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1779

---

## [Hardware & approach Recommendation to implement elasticsearch](https://discuss.elastic.co/t/hardware-approach-recommendation-to-implement-elasticsearch/120996)

<div class="topic-metadata">

**Author:** [@subhraakanil](https://discuss.elastic.co/u/subhraakanil)\
**Replies:** 4\
**Last updated:** [February 22, 2018, 6:01pm UTC](https://discuss.elastic.co/t/hardware-approach-recommendation-to-implement-elasticsearch/120996 "2018-02-22T18:01:39Z")

</div>

Hi All, We are planning to use Elastic search in production for searching financial transactions considering its exceptional throughput time.We will call the APIs exposed by elasticsearch from our java application not f…

---

## [\[WARN \]\[o.e.m.j.JvmGcMonitorService\] \[esm3\] \[gc\]\[475373\] overhead, spent \[658ms\] collecting in the last \[1.2s\]](https://discuss.elastic.co/t/warn-o-e-m-j-jvmgcmonitorservice-esm3-gc-475373-overhead-spent-658ms-collecting-in-the-last-1-2s/120987)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 1\
**Last updated:** [February 22, 2018, 5:06pm UTC](https://discuss.elastic.co/t/warn-o-e-m-j-jvmgcmonitorservice-esm3-gc-475373-overhead-spent-658ms-collecting-in-the-last-1-2s/120987 "2018-02-22T17:06:22Z")

</div>

I just noticed, my master nodes all producing following in logs: esm3 | \[2018-02-22T04:32:02,931\]\[WARN \]\[o.e.m.j.JvmGcMonitorService\] \[esm3\] \[gc\]\[475373\] overhead, spent \[658ms\] collecting in the last \[1.2s…

---

## [How to change the log4J level for the Java High Rest API client](https://discuss.elastic.co/t/how-to-change-the-log4j-level-for-the-java-high-rest-api-client/121107)

<div class="topic-metadata">

**Author:** [@Johnnyhl](https://discuss.elastic.co/u/Johnnyhl)\
**Replies:** 0\
**Last updated:** [February 22, 2018, 5:44pm UTC](https://discuss.elastic.co/t/how-to-change-the-log4j-level-for-the-java-high-rest-api-client/121107 "2018-02-22T17:44:19Z")

</div>

Hi all, when I'm running the Java high REST client I see all these logs: 18:28:13.991 \[I/O dispatcher 17\] DEBUG org.apache.http.wire - http-outgoing-2 \<\< " \]\[\\n\]" 18:28:13.991 \[I/O dispatcher 17\] DEBUG …

---

## [Blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)](https://discuss.elastic.co/t/blocked-by-forbidden-12-index-read-only-allow-delete-api/121091)

<div class="topic-metadata">

**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\
**Replies:** 4\
**Last updated:** [February 22, 2018, 5:15pm UTC](https://discuss.elastic.co/t/blocked-by-forbidden-12-index-read-only-allow-delete-api/121091 "2018-02-22T17:15:14Z")

</div>

I keep getting the following error in my cluster. What causes this error and how do I fix it? Caused by: org.elasticsearch.cluster.block.ClusterBlockException: blocked by: \[FORBIDDEN/12/index read-only / allow delete (…

---

## [\[6.1.1\] Machine Learning Job + Watcher: Best config for hourly ingestion data](https://discuss.elastic.co/t/6-1-1-machine-learning-job-watcher-best-config-for-hourly-ingestion-data/116907)

<div class="topic-metadata">

**Author:** [@gmatheus](https://discuss.elastic.co/u/gmatheus)\
**Replies:** 8\
**Last updated:** [February 22, 2018, 4:40pm UTC](https://discuss.elastic.co/t/6-1-1-machine-learning-job-watcher-best-config-for-hourly-ingestion-data/116907 "2018-02-22T16:40:10Z")

</div>

Hello! I'm trying to figure out how to configure my Machine Learning Job and respective Watcher to run an hourly analysis + alarm over my Elasticsearch data. Here's my current situation: My team is indexing data to El…

---

## [Rollover by Date - What does \_refresh do and when to call it?](https://discuss.elastic.co/t/rollover-by-date-what-does-refresh-do-and-when-to-call-it/120909)

<div class="topic-metadata">

**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\
**Replies:** 4\
**Last updated:** [February 22, 2018, 3:52pm UTC](https://discuss.elastic.co/t/rollover-by-date-what-does-refresh-do-and-when-to-call-it/120909 "2018-02-22T15:52:40Z")

</div>

Am trying to understand the process of rollover using date in an Elasticsearch Index. Was following this link - while I understood the gist of rolloever, the link mentions TWO Steps before achieving rollover: Write so…

---

## [Elasticsearch is not starting when bootstrap.memory\_lock is set to true](https://discuss.elastic.co/t/elasticsearch-is-not-starting-when-bootstrap-memory-lock-is-set-to-true/120962)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 15\
**Last updated:** [February 22, 2018, 3:42pm UTC](https://discuss.elastic.co/t/elasticsearch-is-not-starting-when-bootstrap-memory-lock-is-set-to-true/120962 "2018-02-22T15:42:00Z")

</div>

Hi, Elasticsearch throws following error when bootstrap.memory\_lock is set to true, \[2018-02-21T15:00:09,690\]\[INFO \]\[o.e.t.TransportService \] \[mynode\] publish\_address {xxxxxx:9300}, bound\_addresses {\[::\]:9300} \[2018-…

---

## [Shard and Zone awareness](https://discuss.elastic.co/t/shard-and-zone-awareness/121033)

<div class="topic-metadata">

**Author:** [@Ranjith\_M](https://discuss.elastic.co/u/Ranjith_M)\
**Replies:** 8\
**Last updated:** [February 22, 2018, 2:26pm UTC](https://discuss.elastic.co/t/shard-and-zone-awareness/121033 "2018-02-22T14:26:14Z")

</div>

We have build a new cluster with rack and zone awareness, and in our testing we have found shards are being distributed on rack properly, but we have issues with distributing shards based on zones Settings in elasticsea…

---

## [Elasticsearch shard size](https://discuss.elastic.co/t/elasticsearch-shard-size/120450)

<div class="topic-metadata">

**Author:** [@kr0gh](https://discuss.elastic.co/u/kr0gh)\
**Replies:** 2\
**Last updated:** [February 22, 2018, 2:24pm UTC](https://discuss.elastic.co/t/elasticsearch-shard-size/120450 "2018-02-22T14:24:05Z")

</div>

Hi Elasticsearch community, I am tasked with implementing the elastic stack for the company i work at. I am not sure how many shards i should allocate to each node. The solution is to be used for log management. We wil…

---

## [Wrong Mapping Syntax after upgrade, help needed](https://discuss.elastic.co/t/wrong-mapping-syntax-after-upgrade-help-needed/121059)

<div class="topic-metadata">

**Author:** [@LethalMaus](https://discuss.elastic.co/u/LethalMaus)\
**Replies:** 2\
**Last updated:** [February 22, 2018, 2:15pm UTC](https://discuss.elastic.co/t/wrong-mapping-syntax-after-upgrade-help-needed/121059 "2018-02-22T14:15:20Z")

</div>

Hi, I'm in need of some help with my Mapping template. I previously had Elasticsearch 1.7.3 which was accidentally upgraded to 5.4.3 within one of our work projects (its a complicated story). We could downgrade it back…

---

## [How do you use the ExampleWhitelistExtension in Terms Aggregations](https://discuss.elastic.co/t/how-do-you-use-the-examplewhitelistextension-in-terms-aggregations/120551)

<div class="topic-metadata">

**Author:** [@byoungb](https://discuss.elastic.co/u/byoungb)\
**Replies:** 4\
**Last updated:** [February 22, 2018, 2:11pm UTC](https://discuss.elastic.co/t/how-do-you-use-the-examplewhitelistextension-in-terms-aggregations/120551 "2018-02-22T14:11:55Z")

</div>

I am trying to whitelist some additional Java functions in painless. I am using the ExampleWhitelistExtension as example. I compiled it and installed it on to my elasticsearch server. \[byoungb@sawmill ~\]$ curl "http://…

---

## [ES 5.2.2 with search guard - access denied ("java.security.SecurityPermission" "getProperty.ssl.KeyManagerFactory.algorithm")](https://discuss.elastic.co/t/es-5-2-2-with-search-guard-access-denied-java-security-securitypermission-getproperty-ssl-keymanagerfactory-algorithm/121053)

<div class="topic-metadata">

**Author:** [@thinkingisall](https://discuss.elastic.co/u/thinkingisall)\
**Replies:** 2\
**Last updated:** [February 22, 2018, 1:26pm UTC](https://discuss.elastic.co/t/es-5-2-2-with-search-guard-access-denied-java-security-securitypermission-getproperty-ssl-keymanagerfactory-algorithm/121053 "2018-02-22T13:26:19Z")

</div>

We are using elastic search 5.2.2 along with search guard pluging for DB indexing, where we are using hte self signed certificate of the nodes for ssl.transport during clustering. And java is openjdk 1.8 of build 151. O…

---

## [Bootstrap exception: error loading whitelist(s)](https://discuss.elastic.co/t/bootstrap-exception-error-loading-whitelist-s/120938)

<div class="topic-metadata">

**Author:** [@jss1clist](https://discuss.elastic.co/u/jss1clist)\
**Replies:** 3\
**Last updated:** [February 22, 2018, 1:21pm UTC](https://discuss.elastic.co/t/bootstrap-exception-error-loading-whitelist-s/120938 "2018-02-22T13:21:20Z")

</div>

I got the following exception while starting elasticsearch on a docker container. \[2018-02-21T21:35:04,941\]\[INFO \]\[o.e.p.PluginsService \] \[682c5c69a4db\] loaded module \[lang-painless\] ... \[2018-02-21T21:35:04,945\]…

---

## [Oracle WebCenter Portal elasticsearch Issue](https://discuss.elastic.co/t/oracle-webcenter-portal-elasticsearch-issue/120788)

<div class="topic-metadata">

**Author:** [@Bassel\_Raslan](https://discuss.elastic.co/u/Bassel_Raslan)\
**Replies:** 10\
**Last updated:** [February 22, 2018, 12:46pm UTC](https://discuss.elastic.co/t/oracle-webcenter-portal-elasticsearch-issue/120788 "2018-02-22T12:46:01Z")

</div>

New version of oracle webcenter portal 12.2.1.3.0 using Elasticsearch , and it is working , but the problem is elasticsearch did not search in portal pages content (text) then generate the web link for page which include…

---

## [Set Unlimited length for Elastic Search json Query](https://discuss.elastic.co/t/set-unlimited-length-for-elastic-search-json-query/121046)

<div class="topic-metadata">

**Author:** [@Mayank\_Garg](https://discuss.elastic.co/u/Mayank_Garg)\
**Replies:** 0\
**Last updated:** [February 22, 2018, 12:31pm UTC](https://discuss.elastic.co/t/set-unlimited-length-for-elastic-search-json-query/121046 "2018-02-22T12:31:34Z")

</div>

I am creating an elasticSearch-5.6.x query but after 10003 characters (Byte) count, I am unable to append more parameters into my query. Please help to set the query length to a specific number or making it unlimited in …

---

## [All field error - Could not index event to Elasticsearch](https://discuss.elastic.co/t/all-field-error-could-not-index-event-to-elasticsearch/120906)

<div class="topic-metadata">

**Author:** [@atom](https://discuss.elastic.co/u/atom)\
**Replies:** 17\
**Last updated:** [February 22, 2018, 11:41am UTC](https://discuss.elastic.co/t/all-field-error-could-not-index-event-to-elasticsearch/120906 "2018-02-22T11:41:53Z")

</div>

HI, i have done an upgraded of my elkstack (elasticsearch, kibana, logstash, filebeat). Everything was fine yesterday. Now i am getting these error messages in logstash: \[2018-02-21T18:29:46,901\]\[WARN \]\[logstash.outpu…

---

## [ESTestCase RuntimeException when running with Gradle- jar hell in test classpath](https://discuss.elastic.co/t/estestcase-runtimeexception-when-running-with-gradle-jar-hell-in-test-classpath/119777)

<div class="topic-metadata">

**Author:** [@dominik.safaric](https://discuss.elastic.co/u/dominik.safaric)\
**Replies:** 8\
**Last updated:** [February 22, 2018, 11:34am UTC](https://discuss.elastic.co/t/estestcase-runtimeexception-when-running-with-gradle-jar-hell-in-test-classpath/119777 "2018-02-22T11:34:58Z")

</div>

I've been trying to run my ElasticSearch plugin unit tests (extending the ESTestcase class) using the following command ./gradlew, but unfortunately I keep getting the following exception: Gradle Test Executor 1 finishe…

---

## [XML through ingest attachment only showing values in attachment.content, not full tree](https://discuss.elastic.co/t/xml-through-ingest-attachment-only-showing-values-in-attachment-content-not-full-tree/121015)

<div class="topic-metadata">

**Author:** [@ekenstiernan](https://discuss.elastic.co/u/ekenstiernan)\
**Replies:** 2\
**Last updated:** [February 22, 2018, 11:29am UTC](https://discuss.elastic.co/t/xml-through-ingest-attachment-only-showing-values-in-attachment-content-not-full-tree/121015 "2018-02-22T11:29:21Z")

</div>

Hi. We're in the process of starting to use Elastic for logging in our integration platform. When sending to Elastic through the ingest-attachment pipeline the payload in attachment.content field is only showing the val…

---

## [Elasticsearch Update Doc String Replacement](https://discuss.elastic.co/t/elasticsearch-update-doc-string-replacement/120992)

<div class="topic-metadata">

**Author:** [@adityosn](https://discuss.elastic.co/u/adityosn)\
**Replies:** 5\
**Last updated:** [February 22, 2018, 11:14am UTC](https://discuss.elastic.co/t/elasticsearch-update-doc-string-replacement/120992 "2018-02-22T11:14:34Z")

</div>

I have some documents on my Elasticsearch. I want to update my document contents by using String Regexp. For example, I would like to replace all http words into https words with in a paragraph, is it possible ? Thank …

---

## [Regarding Configuration Multi-Node Cluster](https://discuss.elastic.co/t/regarding-configuration-multi-node-cluster/121031)

<div class="topic-metadata">

**Author:** [@Hassan\_Shaitou](https://discuss.elastic.co/u/Hassan_Shaitou)\
**Replies:** 0\
**Last updated:** [February 22, 2018, 11:09am UTC](https://discuss.elastic.co/t/regarding-configuration-multi-node-cluster/121031 "2018-02-22T11:09:10Z")

</div>

in elasticsearch.yml discovery.zen.ping.unicast.hosts: - 192.168.1.10:9300 - 192.168.1.11 - seeds.mydomain.com What exactly is the seeds.mydomain.com? In my opinion it is a domain name that can be reachable…

---

## [Uninstalling Elastisearch](https://discuss.elastic.co/t/uninstalling-elastisearch/121023)

<div class="topic-metadata">

**Author:** [@Suryakumar](https://discuss.elastic.co/u/Suryakumar)\
**Replies:** 2\
**Last updated:** [February 22, 2018, 11:03am UTC](https://discuss.elastic.co/t/uninstalling-elastisearch/121023 "2018-02-22T11:03:31Z")

</div>

Hi, I want to completely uninstall elasticsearch, kibana and logstash as I want to start it from scratch again. But I cannot uninstall. I've tried many ways. It is not listed in installed packages too. Can't remove it f…

---

## [Delete\_by\_query using ES JAVA REST Client 6.0](https://discuss.elastic.co/t/delete-by-query-using-es-java-rest-client-6-0/121021)

<div class="topic-metadata">

**Author:** [@neha\_sharma](https://discuss.elastic.co/u/neha_sharma)\
**Replies:** 2\
**Last updated:** [February 22, 2018, 10:53am UTC](https://discuss.elastic.co/t/delete-by-query-using-es-java-rest-client-6-0/121021 "2018-02-22T10:53:59Z")

</div>

Hi, I am using JAVA Rest client 6.0 and looking for \_delete\_by\_query API implementation. Rest client support is not present. org.elasticsearch.client.ElasticsearchClient is not implemented by REST client. BulkByScrollR…

---

## [Unassigned shards docker swarm](https://discuss.elastic.co/t/unassigned-shards-docker-swarm/120597)

<div class="topic-metadata">

**Author:** [@faustf](https://discuss.elastic.co/u/faustf)\
**Replies:** 1\
**Last updated:** [February 22, 2018, 10:09am UTC](https://discuss.elastic.co/t/unassigned-shards-docker-swarm/120597 "2018-02-22T10:09:41Z")

</div>

Hi guys, I'm not an ELK expert. I've a 2 nodes docker Swarm cluster in which I want to deploy the ELK stack. This is my docker-compose.yml: version: '3.4' services: elk: image: docker.elastic.co/elasticsearch…

---

## [Elastic search date histogram query with interval hour returning values from 5am](https://discuss.elastic.co/t/elastic-search-date-histogram-query-with-interval-hour-returning-values-from-5am/121018)

<div class="topic-metadata">

**Author:** [@Siddaram\_Jamagav](https://discuss.elastic.co/u/Siddaram_Jamagav)\
**Replies:** 0\
**Last updated:** [February 22, 2018, 9:24am UTC](https://discuss.elastic.co/t/elastic-search-date-histogram-query-with-interval-hour-returning-values-from-5am/121018 "2018-02-22T09:24:51Z")

</div>

I have date histogram query with interval set to hour and with time zone value set to +05:30 always giving the starting value from 5 am, and followed the date histogram query i have a avg aggregation query. "aggs": { …

---

## [Status Yellow](https://discuss.elastic.co/t/status-yellow/120646)

<div class="topic-metadata">

**Author:** [@atom](https://discuss.elastic.co/u/atom)\
**Replies:** 10\
**Last updated:** [February 22, 2018, 9:23am UTC](https://discuss.elastic.co/t/status-yellow/120646 "2018-02-22T09:23:00Z")

</div>

Hi, i have just did an upgrade of Elasticsearch and my server successfully started and is up for half an hour now. The status changed from red to yellow and stayed yellow for 25 minutes now. Should i be concerned about …

---

## [Elasticsearch plugins missing from maven central](https://discuss.elastic.co/t/elasticsearch-plugins-missing-from-maven-central/120874)

<div class="topic-metadata">

**Author:** [@Graham\_Leggett](https://discuss.elastic.co/u/Graham_Leggett)\
**Replies:** 9\
**Last updated:** [February 22, 2018, 9:11am UTC](https://discuss.elastic.co/t/elasticsearch-plugins-missing-from-maven-central/120874 "2018-02-22T09:11:45Z")

</div>

Elasticsearch v6.2.2 is available from maven central: https://repo1.maven.org/maven2/org/elasticsearch/elasticsearch/6.2.2/ Elasticsearch plugins, like elasticsearch-analysis-icu plugin, are not available from maven ce…

---

## [Elasticsearch going down lot of times](https://discuss.elastic.co/t/elasticsearch-going-down-lot-of-times/120984)

<div class="topic-metadata">

**Author:** [@bvnages](https://discuss.elastic.co/u/bvnages)\
**Replies:** 3\
**Last updated:** [February 22, 2018, 8:46am UTC](https://discuss.elastic.co/t/elasticsearch-going-down-lot-of-times/120984 "2018-02-22T08:46:11Z")

</div>

org.elasticsearch.transport.RemoteTransportException: \[node-1\]\[127.0.0.1:9302\]\[indices:data/read/search\[phase/query\]\] Caused by: org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execution …

---

## [Using More Like This query with language analysed fields](https://discuss.elastic.co/t/using-more-like-this-query-with-language-analysed-fields/121010)

<div class="topic-metadata">

**Author:** [@zloban](https://discuss.elastic.co/u/zloban)\
**Replies:** 0\
**Last updated:** [February 22, 2018, 8:39am UTC](https://discuss.elastic.co/t/using-more-like-this-query-with-language-analysed-fields/121010 "2018-02-22T08:39:38Z")

</div>

HI, I have an index with million documents from all kind of media in all kind of languages. I set up my mapping with multiple languages analyzed fields for both title and body of an article, the default field uses stan…

---

## [Slack Config](https://discuss.elastic.co/t/slack-config/120873)

<div class="topic-metadata">

**Author:** [@Pororo](https://discuss.elastic.co/u/Pororo)\
**Replies:** 1\
**Last updated:** [February 22, 2018, 8:24am UTC](https://discuss.elastic.co/t/slack-config/120873 "2018-02-22T08:24:10Z")

</div>

Hi, I was trying to set up the slack alerting. And I am not really sure the part that I need to put the account name in. I checked out the official website and it said we need to at minimum to specify the account name an…

---

## [5.5.3 Node stalls for no apparent reason](https://discuss.elastic.co/t/5-5-3-node-stalls-for-no-apparent-reason/119801)

<div class="topic-metadata">

**Author:** [@quintonparker](https://discuss.elastic.co/u/quintonparker)\
**Replies:** 18\
**Last updated:** [February 22, 2018, 8:18am UTC](https://discuss.elastic.co/t/5-5-3-node-stalls-for-no-apparent-reason/119801 "2018-02-22T08:18:47Z")

</div>

We're experiencing an intermittent issue for weeks/months since upgrading to elasticsearch 5.5.3 (from 5.2.x) In short, one or both elasticsearch nodes will suddenly and without no apparent warning stop accepting search…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1777)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1779)
