# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1803 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1804 --- ## [Installing X-pack](https://discuss.elastic.co/t/installing-x-pack/118325)
**Author:** [@gingeranyhow](https://discuss.elastic.co/u/gingeranyhow)\ **Replies:** 2\ **Last updated:** [February 4, 2018, 2:07am UTC](https://discuss.elastic.co/t/installing-x-pack/118325 "2018-02-04T02:07:14Z")
I've installed X-pack on a working Elastic/Kibana build for ElasticSearch 6.1.2 However, I have no file called setup-passwords so I am unable to run bin/x-pack/setup-passwords auto. Both kibana and elastic search now re… --- ## [Allocate Shards from status unassigned 5.6.2](https://discuss.elastic.co/t/allocate-shards-from-status-unassigned-5-6-2/118320)
**Author:** [@iam.Carrot](https://discuss.elastic.co/u/iam.Carrot)\ **Replies:** 3\ **Last updated:** [February 3, 2018, 10:17pm UTC](https://discuss.elastic.co/t/allocate-shards-from-status-unassigned-5-6-2/118320 "2018-02-03T22:17:52Z")
I am working up a system with elasticsearch 5.6.2, I did a rolling update to elasticsearch 6.1.3 but something went wrong with the existing applications, so i reverted back to v5.6.2. The Issue I am facing is, my cluster… --- ## [Array of objects max value](https://discuss.elastic.co/t/array-of-objects-max-value/116481)
**Author:** [@arkkanoid](https://discuss.elastic.co/u/arkkanoid)\ **Replies:** 3\ **Last updated:** [February 3, 2018, 10:06pm UTC](https://discuss.elastic.co/t/array-of-objects-max-value/116481 "2018-02-03T22:06:52Z")
For a set of documents like this: { name: "php", related:\[ { "count": 6806, "name": "c#" }, { "count": 4080, "name": "c" }, { "count": 9745, "name": "java" }, { "count": 9141, "name": "javascript" } \] … --- ## [Elasticsearch error after running 4 month](https://discuss.elastic.co/t/elasticsearch-error-after-running-4-month/116809)
**Author:** [@mhaidir32](https://discuss.elastic.co/u/mhaidir32)\ **Replies:** 3\ **Last updated:** [February 3, 2018, 10:08pm UTC](https://discuss.elastic.co/t/elasticsearch-error-after-running-4-month/116809 "2018-02-03T22:08:18Z")
i try to implementation elk stackin my network and its worked until 4 month, kibana cant detect elasticseach . i try to restart service elasticsearch . its can stop but can't start again. in elasticsearch log have error … --- ## [Total hits from \_search\_shard API and \_search API are different](https://discuss.elastic.co/t/total-hits-from-search-shard-api-and-search-api-are-different/117698)
**Author:** [@apanimesh061](https://discuss.elastic.co/u/apanimesh061)\ **Replies:** 0\ **Last updated:** [January 30, 2018, 7:45pm UTC](https://discuss.elastic.co/t/total-hits-from-search-shard-api-and-search-api-are-different/117698 "2018-01-30T19:45:16Z")
I was trying to experiment the scripts given in this tutorial. I am using ES v2.3.2. When I execute a matchAllQuery with scroll with size 50 on the \_search API, I get the total documents in the index and hits with 50 d… --- ## [Concurrent updates to ElasticSearch while \_reindex is in progress](https://discuss.elastic.co/t/concurrent-updates-to-elasticsearch-while-reindex-is-in-progress/118294)
**Author:** [@ssg](https://discuss.elastic.co/u/ssg)\ **Replies:** 1\ **Last updated:** [February 3, 2018, 8:17pm UTC](https://discuss.elastic.co/t/concurrent-updates-to-elasticsearch-while-reindex-is-in-progress/118294 "2018-02-03T20:17:57Z")
Hi team, We have been using this link as a reference to accommodate any change in the mappings for a field in our index with zero downtime. Question: Considering the same example taken in the above link, when we rein… --- ## [Elasticsearch new data directory](https://discuss.elastic.co/t/elasticsearch-new-data-directory/118298)
**Author:** [@Anuar\_Mukatov](https://discuss.elastic.co/u/Anuar_Mukatov)\ **Replies:** 12\ **Last updated:** [February 3, 2018, 6:15pm UTC](https://discuss.elastic.co/t/elasticsearch-new-data-directory/118298 "2018-02-03T18:15:26Z")
Hello! Why after change directory elasticsearch data path, service failed to start. I change path in elasticsearch.yml to my directory. I make chown elasticsearch to directory and set chmod 777, but whithout changes... … --- ## [How can I get child aggregations to respect a query applied to parents?](https://discuss.elastic.co/t/how-can-i-get-child-aggregations-to-respect-a-query-applied-to-parents/118045)
**Author:** [@RayRenteria](https://discuss.elastic.co/u/RayRenteria)\ **Replies:** 1\ **Last updated:** [February 3, 2018, 5:38pm UTC](https://discuss.elastic.co/t/how-can-i-get-child-aggregations-to-respect-a-query-applied-to-parents/118045 "2018-02-03T17:38:33Z")
Greetings, I've successfully created parent and child aggregations matching a query that includes child document match criteria. The aggregations are correct for the "parent" document counts, but the counts for the chi… --- ## [Elastic going down - failed to execute watch \_logstash\_version\_mismatch](https://discuss.elastic.co/t/elastic-going-down-failed-to-execute-watch-logstash-version-mismatch/118235)
**Author:** [@umapada](https://discuss.elastic.co/u/umapada)\ **Replies:** 10\ **Last updated:** [February 3, 2018, 1:54pm UTC](https://discuss.elastic.co/t/elastic-going-down-failed-to-execute-watch-logstash-version-mismatch/118235 "2018-02-03T13:54:51Z")
I have 3 node cluster, deployed in AWS. The elastic service going down now and then with following exception. I am using 3 node(each of 3 node acting as data, master, ingest). Using 6.1.2 version elastic, kibana and x-… --- ## [\_reindex: Validation Failed: 1: id is too long, must be no longer than 512 bytes but was: 1012](https://discuss.elastic.co/t/reindex-validation-failed-1-id-is-too-long-must-be-no-longer-than-512-bytes-but-was-1012/117768)
**Author:** [@willsun5\_2000](https://discuss.elastic.co/u/willsun5_2000)\ **Replies:** 1\ **Last updated:** [February 3, 2018, 1:53pm UTC](https://discuss.elastic.co/t/reindex-validation-failed-1-id-is-too-long-must-be-no-longer-than-512-bytes-but-was-1012/117768 "2018-02-03T13:53:49Z")
This is an elasticsearch platform upgrade project, we are targeting to migrate legacy data which is collected in past 2 years from elasticsearch 1.5.\* to 6.1.. when I perform \_reindex to move the data, I got the follow… --- ## [Replication on data nodes](https://discuss.elastic.co/t/replication-on-data-nodes/118301)
**Author:** [@iam.Carrot](https://discuss.elastic.co/u/iam.Carrot)\ **Replies:** 5\ **Last updated:** [February 3, 2018, 1:38pm UTC](https://discuss.elastic.co/t/replication-on-data-nodes/118301 "2018-02-03T13:38:08Z")
I was upgrading elasticsearch onmy cluster. Successfully been done, I face an issue, the issue is on my data nodes when I see on the dashboard, one data node has all the original data while other has all the replicated … --- ## [Illegal\_state\_exception with reason unexpected byte \[0xff\]](https://discuss.elastic.co/t/illegal-state-exception-with-reason-unexpected-byte-0xff/118310)
**Author:** [@iam.Carrot](https://discuss.elastic.co/u/iam.Carrot)\ **Replies:** 0\ **Last updated:** [February 3, 2018, 11:27am UTC](https://discuss.elastic.co/t/illegal-state-exception-with-reason-unexpected-byte-0xff/118310 "2018-02-03T11:27:02Z")
Hi I am using elasticsearch to search through data. I get the below response: { "error": { "root\_cause": \[ { "type": "illegal\_state\_exception", "reason": "unexpected byte \[0xff\]… --- ## [Disk Usage Tuning](https://discuss.elastic.co/t/disk-usage-tuning/118122)
**Author:** [@fpr](https://discuss.elastic.co/u/fpr)\ **Replies:** 1\ **Last updated:** [February 3, 2018, 11:23am UTC](https://discuss.elastic.co/t/disk-usage-tuning/118122 "2018-02-03T11:23:30Z")
Hi, I want to save disk space for storing syslog data. As I am not interested in full text search I defined the mappings for string fields like this: "SourceLocation" : { "type" : "keyword", }, For testing I indexe… --- ## [How to delete logs from index which came from a particular IP?](https://discuss.elastic.co/t/how-to-delete-logs-from-index-which-came-from-a-particular-ip/118306)
**Author:** [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)\ **Replies:** 3\ **Last updated:** [February 3, 2018, 11:17am UTC](https://discuss.elastic.co/t/how-to-delete-logs-from-index-which-came-from-a-particular-ip/118306 "2018-02-03T11:17:43Z")
Hi folks, I need to delete logs from elasticsearch which came from a particular IP, i ran below query in sense to delete those logs. POST logstash-\*/\_delete\_by\_query { "query": { "match\_phrase": { "src\_i… --- ## [Searching for exact string in big fields (Lucene Limitation)](https://discuss.elastic.co/t/searching-for-exact-string-in-big-fields-lucene-limitation/117288)
**Author:** [@amersabagzad](https://discuss.elastic.co/u/amersabagzad)\ **Replies:** 13\ **Last updated:** [February 3, 2018, 9:40am UTC](https://discuss.elastic.co/t/searching-for-exact-string-in-big-fields-lucene-limitation/117288 "2018-02-03T09:40:53Z")
I spent a long time trying to figure out a way to use Elasticsearch for exact string searches like we do normally in MySQL: SELECT \* FROM mytable WHERE long\_text\_field like "%search\_text%" I am talking about fields long… --- ## [Dynamic mapping did not cast as the docs state](https://discuss.elastic.co/t/dynamic-mapping-did-not-cast-as-the-docs-state/117857)
**Author:** [@IanRC72](https://discuss.elastic.co/u/IanRC72)\ **Replies:** 6\ **Last updated:** [February 3, 2018, 9:26am UTC](https://discuss.elastic.co/t/dynamic-mapping-did-not-cast-as-the-docs-state/117857 "2018-02-03T09:26:58Z")
I ran the following sample from this page: PUT my\_index { "mappings": { "my\_type": { "dynamic\_templates": \[ { "longs\_as\_strings": { "match\_mapping\_type": "string", "… --- ## [Snapshot path.repo](https://discuss.elastic.co/t/snapshot-path-repo/118297)
**Author:** [@Srinivasan\_Ramesh](https://discuss.elastic.co/u/Srinivasan_Ramesh)\ **Replies:** 1\ **Last updated:** [February 3, 2018, 9:24am UTC](https://discuss.elastic.co/t/snapshot-path-repo/118297 "2018-02-03T09:24:36Z")
i have been using elasticsearch 5.5.3 i need to create a backup. This is my path path.repo :\["/home/devadmin/backup"\] i tried this in kibana : PUT /\_snapshot/my\_backup { "type": "fs", "settings": { "location": "… --- ## [First steps troubleshooting ES cluster crashes?](https://discuss.elastic.co/t/first-steps-troubleshooting-es-cluster-crashes/118129)
**Author:** [@rrue](https://discuss.elastic.co/u/rrue)\ **Replies:** 8\ **Last updated:** [February 3, 2018, 1:09am UTC](https://discuss.elastic.co/t/first-steps-troubleshooting-es-cluster-crashes/118129 "2018-02-03T01:09:09Z")
Hi All, We've been running a three-node ELK cluster since last fall, running elasticsearch 5.5.2, with no trouble until last week. Then Friday evening two nodes dumped their heap, which filled the root volume and locked… --- ## [Query performance after 6.1.1 upgrade](https://discuss.elastic.co/t/query-performance-after-6-1-1-upgrade/114415)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 7\ **Last updated:** [February 3, 2018, 12:05am UTC](https://discuss.elastic.co/t/query-performance-after-6-1-1-upgrade/114415 "2018-02-03T00:05:01Z")
We have a development / proof of concept / begging for funds stack that has been running for several months. I upgraded from 5.5 to 5.6.5 and everything seemed OK, then I upgraded to 6.1.1. Platform is physical (junk p… --- ## [Elasticsearch duplicate documents multi fields search error](https://discuss.elastic.co/t/elasticsearch-duplicate-documents-multi-fields-search-error/118290)
**Author:** [@databeata](https://discuss.elastic.co/u/databeata)\ **Replies:** 0\ **Last updated:** [February 2, 2018, 11:24pm UTC](https://discuss.elastic.co/t/elasticsearch-duplicate-documents-multi-fields-search-error/118290 "2018-02-02T23:24:13Z")
This search of duplicate documents for single field is working. curl -XGET 'http://ip:9200/test\_4/test\_4/\_search?pretty=true' -H 'Content-Type: application/json' -d'{ "size": 0, "aggs": { "duplicateCount": { … --- ## [Elasticsearch appears to be down but isn't and status is green](https://discuss.elastic.co/t/elasticsearch-appears-to-be-down-but-isnt-and-status-is-green/118068)
**Author:** [@gungazoo](https://discuss.elastic.co/u/gungazoo)\ **Replies:** 4\ **Last updated:** [February 2, 2018, 11:08pm UTC](https://discuss.elastic.co/t/elasticsearch-appears-to-be-down-but-isnt-and-status-is-green/118068 "2018-02-02T23:08:42Z")
I recently upgraded from ELK 5.x to 6.1. It has been running fine. We have 12 data nodes -- six at each site and have one replica. We keep the logs for 30 days and have 11 billion documents using 15TB of storage. We … --- ## [\[terms\_set\] query does not support \[minimum\_should\_match\_script\]](https://discuss.elastic.co/t/terms-set-query-does-not-support-minimum-should-match-script/115732)
**Author:** [@jchannon](https://discuss.elastic.co/u/jchannon)\ **Replies:** 8\ **Last updated:** [February 2, 2018, 11:01pm UTC](https://discuss.elastic.co/t/terms-set-query-does-not-support-minimum-should-match-script/115732 "2018-02-02T23:01:27Z")
Copying the commands in this document and I get the error in the title when I login as a user and do a search. Anybody know why? https://www.elastic.co/blog/attribute-based-access-control-with-xpack?blade=tw&hulk=social … --- ## [Query help - geopoint with highest concentration of unique customer transactions](https://discuss.elastic.co/t/query-help-geopoint-with-highest-concentration-of-unique-customer-transactions/118288)
**Author:** [@Bird\_Law](https://discuss.elastic.co/u/Bird_Law)\ **Replies:** 0\ **Last updated:** [February 2, 2018, 9:38pm UTC](https://discuss.elastic.co/t/query-help-geopoint-with-highest-concentration-of-unique-customer-transactions/118288 "2018-02-02T21:38:24Z")
If i index geopoints with elasticsearch, what aggregation parameters should I be reading about to query as follows? Let's say i'm storing user transactions, each of which has a geopoint associated with it. Very likely, … --- ## [Synonym file support: upload API & other protocol possible?](https://discuss.elastic.co/t/synonym-file-support-upload-api-other-protocol-possible/118287)
**Author:** [@julieyuorc](https://discuss.elastic.co/u/julieyuorc)\ **Replies:** 0\ **Last updated:** [February 2, 2018, 9:37pm UTC](https://discuss.elastic.co/t/synonym-file-support-upload-api-other-protocol-possible/118287 "2018-02-02T21:37:07Z")
Elasticsearch supports synonyms through their synonym token filter, which expects a file of all the synonyms to be present at a particular location on the server file system. Our cluster is configured to be shared by mu… --- ## [Unable to run set-password in 6.1](https://discuss.elastic.co/t/unable-to-run-set-password-in-6-1/117326)
**Author:** [@intrepid1](https://discuss.elastic.co/u/intrepid1)\ **Replies:** 5\ **Last updated:** [February 2, 2018, 9:19pm UTC](https://discuss.elastic.co/t/unable-to-run-set-password-in-6-1/117326 "2018-02-02T21:19:36Z")
Hi there, I am setting up TLS on 6.1 and am having problems running set-password. I configure ES as follows: rm -rf elasticsearch-6.1.2 unzip elasticsearch-6.1.2.zip cp elasticsearch.yml /config ./bin/elasticsearch… --- ## [Is there anyway to access the \_explanation variable in a re-score script?](https://discuss.elastic.co/t/is-there-anyway-to-access-the-explanation-variable-in-a-re-score-script/118282)
**Author:** [@bernabas](https://discuss.elastic.co/u/bernabas)\ **Replies:** 0\ **Last updated:** [February 2, 2018, 9:05pm UTC](https://discuss.elastic.co/t/is-there-anyway-to-access-the-explanation-variable-in-a-re-score-script/118282 "2018-02-02T21:05:44Z")
I know you can access \_score in a script, but is it possible to access the \_explanation value so i can breakdown and see how the different attributes / queries were scored in my rescore script? --- ## [Elasticsearch Search Threads not making sense](https://discuss.elastic.co/t/elasticsearch-search-threads-not-making-sense/117699)
**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\ **Replies:** 5\ **Last updated:** [February 2, 2018, 8:56pm UTC](https://discuss.elastic.co/t/elasticsearch-search-threads-not-making-sense/117699 "2018-02-02T20:56:40Z")
So, I am seeing interesting metrics that don't really make much sense to me. Given I'm using the datadog integration that tells me these details, but they seem accurate with everything else so I have confidence in the nu… --- ## [Odd freezes and network issues](https://discuss.elastic.co/t/odd-freezes-and-network-issues/118275)
**Author:** [@Vantine82](https://discuss.elastic.co/u/Vantine82)\ **Replies:** 3\ **Last updated:** [February 2, 2018, 8:55pm UTC](https://discuss.elastic.co/t/odd-freezes-and-network-issues/118275 "2018-02-02T20:55:47Z")
I just spun this up in our environment, and it works perfectly for a while. I know this may be reaching, but I am wondering if you guys could help me out with an issue. It seems, at random, it will freeze the entire syst… --- ## [Plugin installation failing](https://discuss.elastic.co/t/plugin-installation-failing/118270)
**Author:** [@frankshad](https://discuss.elastic.co/u/frankshad)\ **Replies:** 5\ **Last updated:** [February 2, 2018, 7:52pm UTC](https://discuss.elastic.co/t/plugin-installation-failing/118270 "2018-02-02T19:52:17Z")
Hi, I'm trying to install the ingest-attachment plugin on an IPv6 only machine (it's actually a Raspberry Pi, so ARM processor, but I don't think that's the issue). It hangs for ages and then says Exception in thread "… --- ## [Controlling Score on Phrase Suggester](https://discuss.elastic.co/t/controlling-score-on-phrase-suggester/117167)
**Author:** [@moy2010](https://discuss.elastic.co/u/moy2010)\ **Replies:** 2\ **Last updated:** [February 2, 2018, 6:26pm UTC](https://discuss.elastic.co/t/controlling-score-on-phrase-suggester/117167 "2018-02-02T18:26:32Z")
Hello, ES community and devs. After expending a considerable time with the phrase suggester, I've come to a point where I need to further control it, specially on the phrase scoring part of it. Besides the smoothing mod… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1802) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1804)