# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1792 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1793 --- ## [High IO when use replica](https://discuss.elastic.co/t/high-io-when-use-replica/119237)
**Author:** [@andrewliuxxx](https://discuss.elastic.co/u/andrewliuxxx)\ **Replies:** 1\ **Last updated:** [February 12, 2018, 8:03am UTC](https://discuss.elastic.co/t/high-io-when-use-replica/119237 "2018-02-12T08:03:14Z")
Dear All: I have a ES 6.0.1 cluster with 64 machine and 256 nodes .with about 200000 records will be indexed to ES index every second. And Some problems occur. if the index has 256 shards ,0 replicas , get a normal IO… --- ## [When can I use the 6.3.0 version of High-Level-Rest-Client in Maven Centrol Repository](https://discuss.elastic.co/t/when-can-i-use-the-6-3-0-version-of-high-level-rest-client-in-maven-centrol-repository/119362)
**Author:** [@bill.chi](https://discuss.elastic.co/u/bill.chi)\ **Replies:** 5\ **Last updated:** [February 12, 2018, 7:48am UTC](https://discuss.elastic.co/t/when-can-i-use-the-6-3-0-version-of-high-level-rest-client-in-maven-centrol-repository/119362 "2018-02-12T07:48:44Z")
Recently, I found few methods not found in the 6.2.1 version of High-Level-Rest-Client and these methods exists in 6.3.0 version, but I don't depend on this version with maven tool. --- ## [Elasticsearch 5.2 to Elasticsearch 6.0 index data(parent-child) migration](https://discuss.elastic.co/t/elasticsearch-5-2-to-elasticsearch-6-0-index-data-parent-child-migration/119227)
**Author:** [@yesu](https://discuss.elastic.co/u/yesu)\ **Replies:** 0\ **Last updated:** [February 9, 2018, 11:54am UTC](https://discuss.elastic.co/t/elasticsearch-5-2-to-elasticsearch-6-0-index-data-parent-child-migration/119227 "2018-02-09T11:54:47Z")
Hi All, We are planing to migrate ElasticSearch(5.2) to ElasticSearch(6.0), but each index has multiple types with parent-child relation. So when i go throw elasticsearch documentation, saw diff way of indexing document… --- ## [How to add multiple tags using script](https://discuss.elastic.co/t/how-to-add-multiple-tags-using-script/119411)
**Author:** [@ESCoder](https://discuss.elastic.co/u/ESCoder)\ **Replies:** 0\ **Last updated:** [February 12, 2018, 4:18am UTC](https://discuss.elastic.co/t/how-to-add-multiple-tags-using-script/119411 "2018-02-12T04:18:23Z")
Hi, I have document with "tags" as one property which has list of values. For example "tags": \[ "red", "blue", "green"\] I want to add \["yellow", "black"\] and remove \["blue"\] tags in one update call in NEST. And how d… --- ## [Elasticsearch taking wrong date from my unix time value](https://discuss.elastic.co/t/elasticsearch-taking-wrong-date-from-my-unix-time-value/119410)
**Author:** [@raja\_gopal](https://discuss.elastic.co/u/raja_gopal)\ **Replies:** 0\ **Last updated:** [February 12, 2018, 4:10am UTC](https://discuss.elastic.co/t/elasticsearch-taking-wrong-date-from-my-unix-time-value/119410 "2018-02-12T04:10:19Z")
Hi I have created an index with date values in this below format "LastChangedAt" : { "type" : "date", "format" : "yyyy-MM-dd HH:mm:ss||yyyy-MM-dd||date\_time||epoch\_millis" }, Now in logstash i just parsed the xml… --- ## [Can i do a full-text search where each word has location metadata?](https://discuss.elastic.co/t/can-i-do-a-full-text-search-where-each-word-has-location-metadata/119405)
**Author:** [@sinofis](https://discuss.elastic.co/u/sinofis)\ **Replies:** 3\ **Last updated:** [February 12, 2018, 3:20am UTC](https://discuss.elastic.co/t/can-i-do-a-full-text-search-where-each-word-has-location-metadata/119405 "2018-02-12T03:20:32Z")
I'm trying to build a text search from voice to text, each word should have a metadata position something like start: 54s; end: 57s. Metadata shouldn't be indexed but only returned with results. Is that possible? I'd ap… --- ## [Match geo\_shape documents that intersect with documents that possess a certain keyword](https://discuss.elastic.co/t/match-geo-shape-documents-that-intersect-with-documents-that-possess-a-certain-keyword/119385)
**Author:** [@24ma13wg](https://discuss.elastic.co/u/24ma13wg)\ **Replies:** 0\ **Last updated:** [February 11, 2018, 6:52pm UTC](https://discuss.elastic.co/t/match-geo-shape-documents-that-intersect-with-documents-that-possess-a-certain-keyword/119385 "2018-02-11T18:52:17Z")
This query, slightly modified from the documentation, should match documents (shapes) that intersect the document (shape) with the id deu. Is it possible to modify this query so that it matches documents that intersect a… --- ## [Using curator delete index](https://discuss.elastic.co/t/using-curator-delete-index/119324)
**Author:** [@Lory\_Hou](https://discuss.elastic.co/u/Lory_Hou)\ **Replies:** 3\ **Last updated:** [February 11, 2018, 6:46pm UTC](https://discuss.elastic.co/t/using-curator-delete-index/119324 "2018-02-11T18:46:30Z")
I am following document to delete index by using curator. running command like curator /home/ubuntu/curator/delete-index/openapi.yml --config /home/ubuntu/curator/curator-staging.yml After command is completed with no… --- ## [Bulk Insert Error Logging](https://discuss.elastic.co/t/bulk-insert-error-logging/119383)
**Author:** [@krmathieu](https://discuss.elastic.co/u/krmathieu)\ **Replies:** 0\ **Last updated:** [February 11, 2018, 6:21pm UTC](https://discuss.elastic.co/t/bulk-insert-error-logging/119383 "2018-02-11T18:21:41Z")
I am using the bulk insert end point to insert batches of 1000 records into Elasticsearch and everything is working as expected. However, I am getting at least some individual errors for some of the index statements and … --- ## [Node throwing exception: NotSslRecordException](https://discuss.elastic.co/t/node-throwing-exception-notsslrecordexception/118274)
**Author:** [@stephenpatten](https://discuss.elastic.co/u/stephenpatten)\ **Replies:** 2\ **Last updated:** [February 11, 2018, 5:13pm UTC](https://discuss.elastic.co/t/node-throwing-exception-notsslrecordexception/118274 "2018-02-11T17:13:04Z")
After installing x-pack and running up the cluster, one node is continually throwing this error whether or not the other nodes in the cluster are up or down. \[2018-02-02T10:19:28,357\]\[WARN \]\[o.e.x.s.t.n.SecurityNetty4Ht… --- ## [Query an index an put it into another index in Ingest plugin](https://discuss.elastic.co/t/query-an-index-an-put-it-into-another-index-in-ingest-plugin/119379)
**Author:** [@chrigui94](https://discuss.elastic.co/u/chrigui94)\ **Replies:** 1\ **Last updated:** [February 11, 2018, 4:24pm UTC](https://discuss.elastic.co/t/query-an-index-an-put-it-into-another-index-in-ingest-plugin/119379 "2018-02-11T16:24:08Z")
I need to copy fields from an index to another one using an ingest plugin. I have used the following query: SearchResponse response = client.prepareSearch("index1", "index2") .setTypes("type1", "type2") .setSearchType… --- ## [Backing up elasticsearch using open source dump tool or official snapshot](https://discuss.elastic.co/t/backing-up-elasticsearch-using-open-source-dump-tool-or-official-snapshot/119378)
**Author:** [@digirave](https://discuss.elastic.co/u/digirave)\ **Replies:** 0\ **Last updated:** [February 11, 2018, 2:51pm UTC](https://discuss.elastic.co/t/backing-up-elasticsearch-using-open-source-dump-tool-or-official-snapshot/119378 "2018-02-11T14:51:51Z")
I am reviewing two options for backing up elasticsearch right now. Unofficial dump tool Seems real easy to use. Official snapshot https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-sna… --- ## [Profile API doesn't seem to explain query time](https://discuss.elastic.co/t/profile-api-doesnt-seem-to-explain-query-time/119375)
**Author:** [@bslinger](https://discuss.elastic.co/u/bslinger)\ **Replies:** 0\ **Last updated:** [February 11, 2018, 12:20pm UTC](https://discuss.elastic.co/t/profile-api-doesnt-seem-to-explain-query-time/119375 "2018-02-11T12:20:11Z")
Hi there, I was wondering if somebody could explain to me what I'm missing about the profile API? I'm trying to diagnose why my queries have suddenly gotten slower, so turned profile on for one of them, but the time sho… --- ## [CentOS7 + rsyslog-elasticsearch.x86\_64 + nginx = charset=utf-8\] is not supported](https://discuss.elastic.co/t/centos7-rsyslog-elasticsearch-x86-64-nginx-charset-utf-8-is-not-supported/117342)
**Author:** [@BiG\_NoBoDy](https://discuss.elastic.co/u/BiG_NoBoDy)\ **Replies:** 0\ **Last updated:** [January 28, 2018, 1:10am UTC](https://discuss.elastic.co/t/centos7-rsyslog-elasticsearch-x86-64-nginx-charset-utf-8-is-not-supported/117342 "2018-01-28T01:10:36Z")
Hi all, I am building a tiny system for log analysis, and not able to install additional agent, so using already working rsyslog to send logs to elasticsearch. My rsyslog and elasticsearch are separate VM's. These VM's… --- ## [Tree structure and using them in cross document queries](https://discuss.elastic.co/t/tree-structure-and-using-them-in-cross-document-queries/119373)
**Author:** [@ftaran](https://discuss.elastic.co/u/ftaran)\ **Replies:** 2\ **Last updated:** [February 11, 2018, 11:19am UTC](https://discuss.elastic.co/t/tree-structure-and-using-them-in-cross-document-queries/119373 "2018-02-11T11:19:04Z")
I am trying to model cities and regions in elasticsearch, these would naturally be stored as a tree, whether they would be nested documents or parent child indexes would be dependent on how often we would have to update … --- ## [Elasticsearch consuming space without even indexing?](https://discuss.elastic.co/t/elasticsearch-consuming-space-without-even-indexing/119367)
**Author:** [@harit](https://discuss.elastic.co/u/harit)\ **Replies:** 1\ **Last updated:** [February 11, 2018, 8:30am UTC](https://discuss.elastic.co/t/elasticsearch-consuming-space-without-even-indexing/119367 "2018-02-11T08:30:00Z")
I start elasticsearch server and I observe the index directory starts swelling, with in a couple of minutes it reaches to few GBs, without even ingesting a single document. I suspected some other es client to be ingesti… --- ## [Why there are always a couple of exceptions on the master instance in the beginning of starting elasticsearch](https://discuss.elastic.co/t/why-there-are-always-a-couple-of-exceptions-on-the-master-instance-in-the-beginning-of-starting-elasticsearch/119146)
**Author:** [@ahrtr](https://discuss.elastic.co/u/ahrtr)\ **Replies:** 4\ **Last updated:** [February 11, 2018, 6:46am UTC](https://discuss.elastic.co/t/why-there-are-always-a-couple-of-exceptions-on-the-master-instance-in-the-beginning-of-starting-elasticsearch/119146 "2018-02-11T06:46:16Z")
I setup a elasticsearch cluster with 3 instances(nodes), it works well so far. But each time when I starting the cluster, I can always see a couple of exceptions in the master elasticsearch instance, although the cluster… --- ## [How much heap size would be good for a machine having 120GB Ram](https://discuss.elastic.co/t/how-much-heap-size-would-be-good-for-a-machine-having-120gb-ram/118814)
**Author:** [@Nitish\_Goyal](https://discuss.elastic.co/u/Nitish_Goyal)\ **Replies:** 5\ **Last updated:** [February 11, 2018, 3:37am UTC](https://discuss.elastic.co/t/how-much-heap-size-would-be-good-for-a-machine-having-120gb-ram/118814 "2018-02-11T03:37:48Z")
I am running elasticsearch 5.4 on a 120 GB machine in production env What should be a good heap size for the machine? Shall we keep the heap size below 32GB as mentioned in the elasticsearch documentation or shall we i… --- ## [Lot of fields](https://discuss.elastic.co/t/lot-of-fields/119347)
**Author:** [@Aayyi](https://discuss.elastic.co/u/Aayyi)\ **Replies:** 1\ **Last updated:** [February 10, 2018, 6:45pm UTC](https://discuss.elastic.co/t/lot-of-fields/119347 "2018-02-10T18:45:42Z")
Hi, My log files are in this format : https://pastebin.com/6aWqWUiY so I use Filebeat to feed elasticsearch with my logs but when I create an index template in Kibana I have 305 fields and some are related to apache2,… --- ## [In Machine learning alerting mechanism how to send all severity alerts as mail?](https://discuss.elastic.co/t/in-machine-learning-alerting-mechanism-how-to-send-all-severity-alerts-as-mail/117791)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 1\ **Last updated:** [February 10, 2018, 12:29pm UTC](https://discuss.elastic.co/t/in-machine-learning-alerting-mechanism-how-to-send-all-severity-alerts-as-mail/117791 "2018-02-10T12:29:37Z")
In machine learning job alerting mechanism only one type of alert is possible to send as mail at a time . For example i can send Critical alerts or Major alerts or Warning alerts at a time . How to send all type of a… --- ## [How Query node actually helps?](https://discuss.elastic.co/t/how-query-node-actually-helps/119338)
**Author:** [@mannoj87](https://discuss.elastic.co/u/mannoj87)\ **Replies:** 0\ **Last updated:** [February 10, 2018, 12:28pm UTC](https://discuss.elastic.co/t/how-query-node-actually-helps/119338 "2018-02-10T12:28:20Z")
Before Query Nodes: 4Hrs Down time I have applications pointing to data nodes earlier. And it always runs into bad queries piled up and then gc, http on that host doesn't respond for cluster host. I had to kill pid of E… --- ## [\[6.1.1\] Machine Learning Job: "Rolling" Datafeed Period](https://discuss.elastic.co/t/6-1-1-machine-learning-job-rolling-datafeed-period/118711)
**Author:** [@gmatheus](https://discuss.elastic.co/u/gmatheus)\ **Replies:** 1\ **Last updated:** [February 10, 2018, 12:27pm UTC](https://discuss.elastic.co/t/6-1-1-machine-learning-job-rolling-datafeed-period/118711 "2018-02-10T12:27:30Z")
Hello! I'm testing some ML Jobs with daily bucket span over my Elasticsearch data for different datafeed periods and I've noticed different anomaly points as I changed the datafeed start time. For example, the job below… --- ## [Highlight results with PHP Client](https://discuss.elastic.co/t/highlight-results-with-php-client/119336)
**Author:** [@syiannop](https://discuss.elastic.co/u/syiannop)\ **Replies:** 0\ **Last updated:** [February 10, 2018, 11:48am UTC](https://discuss.elastic.co/t/highlight-results-with-php-client/119336 "2018-02-10T11:48:29Z")
I created a search bar in a PHP file, that searches my ES index (using the ES PHP client) and shows the results back on it. I want to highlight the searched term in the results like this random image I found online: … --- ## [Encrypting Communications in an Elasticsearch Docker Image](https://discuss.elastic.co/t/encrypting-communications-in-an-elasticsearch-docker-image/119095)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 3\ **Last updated:** [February 10, 2018, 11:21am UTC](https://discuss.elastic.co/t/encrypting-communications-in-an-elasticsearch-docker-image/119095 "2018-02-10T11:21:37Z")
I'm going over Encrypting Communications in an Elasticsearch Docker Image | Elasticsearch Reference. While preparing the environment, I had to create instances.yml file, which will be used by create\_certs later on. Can … --- ## [Function\_score, gaussian decay, handling multiple by zero](https://discuss.elastic.co/t/function-score-gaussian-decay-handling-multiple-by-zero/117086)
**Author:** [@Chris\_Hunt](https://discuss.elastic.co/u/Chris_Hunt)\ **Replies:** 2\ **Last updated:** [February 10, 2018, 8:38am UTC](https://discuss.elastic.co/t/function-score-gaussian-decay-handling-multiple-by-zero/117086 "2018-02-10T08:38:42Z")
Hi I have a function score using a gaussian decay. I would like the scores to never be zero after the multiplier so that when the gaussian function gets to zero, the documents still retained some relevance score. Ideal… --- ## [Street Number Range Search](https://discuss.elastic.co/t/street-number-range-search/119310)
**Author:** [@code\_blue](https://discuss.elastic.co/u/code_blue)\ **Replies:** 2\ **Last updated:** [February 10, 2018, 7:25am UTC](https://discuss.elastic.co/t/street-number-range-search/119310 "2018-02-10T07:25:52Z")
We have two fields Street Number 1 & Street Number 2 in Elastic Search. We also have an Address field in Elastic Search and Address is a combination of 2 fields with some other fields. So we have an address as: 1604-16… --- ## [About "Rolling upgrades" manual](https://discuss.elastic.co/t/about-rolling-upgrades-manual/119284)
**Author:** [@snuffkin](https://discuss.elastic.co/u/snuffkin)\ **Replies:** 2\ **Last updated:** [February 10, 2018, 4:28am UTC](https://discuss.elastic.co/t/about-rolling-upgrades-manual/119284 "2018-02-10T04:28:12Z")
I have a question abont "Rolling upgrades" manual of Elasticsearch Reference. In version 6.0+, "cluster.routing.allocation.enable" is set to "none" with "persistent". https://www.elastic.co/guide/en/elasticsearch/refer… --- ## [How do I use this curator-cli in crontab?](https://discuss.elastic.co/t/how-do-i-use-this-curator-cli-in-crontab/119282)
**Author:** [@omid](https://discuss.elastic.co/u/omid)\ **Replies:** 1\ **Last updated:** [February 10, 2018, 12:28am UTC](https://discuss.elastic.co/t/how-do-i-use-this-curator-cli-in-crontab/119282 "2018-02-10T00:28:25Z")
I used this to erase daily indexes curator\_cli --host 127.0.0.1 --timeout 300 --port 9200 --http\_auth elastic:changeme delete\_indices --filter\_list '\[{"filtertype":"age", "source":"name", "direction":"older", "unit":"da… --- ## [Setup ELK on Multiple Windows servers](https://discuss.elastic.co/t/setup-elk-on-multiple-windows-servers/119301)
**Author:** [@rohitg](https://discuss.elastic.co/u/rohitg)\ **Replies:** 2\ **Last updated:** [February 10, 2018, 12:06am UTC](https://discuss.elastic.co/t/setup-elk-on-multiple-windows-servers/119301 "2018-02-10T00:06:51Z")
Hi, i had setup ELK on one window server successfully and getting logs. I am using winlogbeat for wineventslogs and filebeat to get IIS logs. Now i want to get logs from multiple servers and the question here is: Do i… --- ## [What is the role that enable user to download pdf report?](https://discuss.elastic.co/t/what-is-the-role-that-enable-user-to-download-pdf-report/117937)
**Author:** [@adithep](https://discuss.elastic.co/u/adithep)\ **Replies:** 1\ **Last updated:** [February 9, 2018, 11:52pm UTC](https://discuss.elastic.co/t/what-is-the-role-that-enable-user-to-download-pdf-report/117937 "2018-02-09T23:52:06Z")
I am using elastic cloud and gave reporting\_user role to a user I just created. That user can download CSV report no problem. But when I tried to download printable PDF from dashboard, I get error: max attempted reached… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1791) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1793)