# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1825 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1826 --- ## [ElasticSearch stats API taking too long to respond](https://discuss.elastic.co/t/elasticsearch-stats-api-taking-too-long-to-respond/114819)
**Author:** [@asfyra](https://discuss.elastic.co/u/asfyra)\ **Replies:** 1\ **Last updated:** [January 17, 2018, 11:33am UTC](https://discuss.elastic.co/t/elasticsearch-stats-api-taking-too-long-to-respond/114819 "2018-01-17T11:33:47Z")
We have a 3 node cluster which is working fine. The problem is with the stats calls. Any of the following calls takes too long to respond (30 to 45 seconds) GET \_nodes GET \_nodes/stats GET \_stats Thanks in advance fo… --- ## [Duplicate Servers](https://discuss.elastic.co/t/duplicate-servers/115870)
**Author:** [@baleis](https://discuss.elastic.co/u/baleis)\ **Replies:** 0\ **Last updated:** [January 17, 2018, 11:22am UTC](https://discuss.elastic.co/t/duplicate-servers/115870 "2018-01-17T11:22:51Z")
Good morning. I recently created a virtual search engine for elastic and kibana and it worked very well. Then I cloned this server and created two more servers that work as a cluster. I now have 3 servers. Everything I … --- ## [Unknown key for a START\_OBJECT in \[queryBuilder\]](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-querybuilder/115724)
**Author:** [@ramchjob](https://discuss.elastic.co/u/ramchjob)\ **Replies:** 4\ **Last updated:** [January 17, 2018, 10:13am UTC](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-querybuilder/115724 "2018-01-17T10:13:03Z")
Hello Gurus, I am relatively new to the group. I am posting the below query via JAVA API and seeing error as follows. Not sure what i am missing. Request Body : {"query":{"match\_all":{"boost":1.0}}} Error response: {… --- ## [Bulk index with java rest client](https://discuss.elastic.co/t/bulk-index-with-java-rest-client/113432)
**Author:** [@Ionel-Mihai\_Motoc](https://discuss.elastic.co/u/Ionel-Mihai_Motoc)\ **Replies:** 4\ **Last updated:** [January 17, 2018, 10:03am UTC](https://discuss.elastic.co/t/bulk-index-with-java-rest-client/113432 "2018-01-17T10:03:31Z")
Hello, I'm having a cluster with 2 nodes (one with 8GB and the other with 16 GB heap, both having 4 CPU cors) and i'm trying to index documents using bulk API with RestHighLevelClient. I'm creating bulks of 30000 docs,… --- ## [Elastic password reset error -](https://discuss.elastic.co/t/elastic-password-reset-error/114705)
**Author:** [@vigneshaj](https://discuss.elastic.co/u/vigneshaj)\ **Replies:** 2\ **Last updated:** [January 17, 2018, 9:57am UTC](https://discuss.elastic.co/t/elastic-password-reset-error/114705 "2018-01-17T09:57:58Z")
Hi I am followng the below answer to reset the elastic password. {"error":{"root\_cause":\[{"type":"unavailable\_shards\_exception","reason":"\[.security-6\]\[0\] \[1\] shardIt, \[0\] active : Timeout waiting for \[1m\], request: … --- ## [Elasticearch: Load balanced 2 master nodes](https://discuss.elastic.co/t/elasticearch-load-balanced-2-master-nodes/115660)
**Author:** [@anon99430464](https://discuss.elastic.co/u/anon99430464)\ **Replies:** 9\ **Last updated:** [January 17, 2018, 9:39am UTC](https://discuss.elastic.co/t/elasticearch-load-balanced-2-master-nodes/115660 "2018-01-17T09:39:02Z")
Hello, I want to run loadbalancing on our elasticSearch , in Nest I use a SniffingConnectionPool, that should help our client choose an active node. This seems to work. However I’m having problems setting up my nodes, … --- ## [Delete snapshot fails due to no space on disk](https://discuss.elastic.co/t/delete-snapshot-fails-due-to-no-space-on-disk/115747)
**Author:** [@Arvind\_Rao](https://discuss.elastic.co/u/Arvind_Rao)\ **Replies:** 1\ **Last updated:** [January 17, 2018, 9:03am UTC](https://discuss.elastic.co/t/delete-snapshot-fails-due-to-no-space-on-disk/115747 "2018-01-17T09:03:52Z")
We run ES 5.2.2 on a 8 node CentOS cluster. We are using filesystem repository to store snapshots. The disk volume storing the snapshot repository ran out of space and is now at 100% used. We tried running the delete sn… --- ## [Elasticsearch Ingest node gsub processor replace character](https://discuss.elastic.co/t/elasticsearch-ingest-node-gsub-processor-replace-character/115817)
**Author:** [@anson\_ch](https://discuss.elastic.co/u/anson_ch)\ **Replies:** 2\ **Last updated:** [January 17, 2018, 8:40am UTC](https://discuss.elastic.co/t/elasticsearch-ingest-node-gsub-processor-replace-character/115817 "2018-01-17T08:40:05Z")
I am trying to use the gsub processor to replace characters such as " to \\" curl -XPOST 'localhost:9200/\_ingest/pipeline/\_simulate?pretty' -H 'Content-Type: application/json' -d' { "pipeline": { "description" : "par… --- ## [Cannot use \[sort\] option in conjunction with \[rescore\]](https://discuss.elastic.co/t/cannot-use-sort-option-in-conjunction-with-rescore/115699)
**Author:** [@aslamy1](https://discuss.elastic.co/u/aslamy1)\ **Replies:** 2\ **Last updated:** [January 17, 2018, 8:07am UTC](https://discuss.elastic.co/t/cannot-use-sort-option-in-conjunction-with-rescore/115699 "2018-01-17T08:07:49Z")
Hi ! I updated Elasticsearch 5.6.0 to 6.1.1. Now I get this exception: "reason": { "type": "query\_phase\_execution\_exception", "reason": "Cannot use \[sort\] option in conjunction with \[rescore\]." } In my query I use … --- ## [Regexp Query cannot escape reserved symbols](https://discuss.elastic.co/t/regexp-query-cannot-escape-reserved-symbols/108527)
**Author:** [@Hayk\_Hovhanisyan](https://discuss.elastic.co/u/Hayk_Hovhanisyan)\ **Replies:** 9\ **Last updated:** [December 22, 2017, 9:50am UTC](https://discuss.elastic.co/t/regexp-query-cannot-escape-reserved-symbols/108527 "2017-12-22T09:50:15Z")
My environment: ElasticSearch "2.4.4" Java "1.8.0\_151" Hi there, please clarify for me part of escaping reserved symbols . ? + \* | { } \[ \] ( ) " I used backslash, but result still empty. I stored displayName= A… --- ## [How to check size on an index by field](https://discuss.elastic.co/t/how-to-check-size-on-an-index-by-field/115821)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 3\ **Last updated:** [January 17, 2018, 6:19am UTC](https://discuss.elastic.co/t/how-to-check-size-on-an-index-by-field/115821 "2018-01-17T06:19:16Z")
hi everyone! is there anyway to check the size in bytes on an index by field? let me say my scenario first. pull down from cloudwatch log \> extract some logs @ lostash \> shipping specific log events only to ES and c… --- ## [How to query count of nested elasticsearch inner\_hits document](https://discuss.elastic.co/t/how-to-query-count-of-nested-elasticsearch-inner-hits-document/115622)
**Author:** [@smithyj](https://discuss.elastic.co/u/smithyj)\ **Replies:** 0\ **Last updated:** [January 16, 2018, 2:37am UTC](https://discuss.elastic.co/t/how-to-query-count-of-nested-elasticsearch-inner-hits-document/115622 "2018-01-16T02:37:27Z")
How to count of nested elasticsearch inner\_hits document This is Mappings and Data PUT /xxx\_index { "mappings": { "doc": { "properties": { "interaction": { "type": "object", "pro… --- ## [X-Pack License Requirement](https://discuss.elastic.co/t/x-pack-license-requirement/115792)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 1\ **Last updated:** [January 17, 2018, 6:05am UTC](https://discuss.elastic.co/t/x-pack-license-requirement/115792 "2018-01-17T06:05:55Z")
Hi, I am googling around the x-pack license thing and i seem to find it a bit confusing. My requirement is to use the feature to restrict user to a dashboard with a read only privilege and create superadmins which allow… --- ## [Setup wuatch rule for Search Latency](https://discuss.elastic.co/t/setup-wuatch-rule-for-search-latency/115678)
**Author:** [@Dhiraj\_Singh\_Chauhan](https://discuss.elastic.co/u/Dhiraj_Singh_Chauhan)\ **Replies:** 2\ **Last updated:** [January 17, 2018, 5:58am UTC](https://discuss.elastic.co/t/setup-wuatch-rule-for-search-latency/115678 "2018-01-17T05:58:49Z")
Hi, I want to set watcher(Alert) for Search Latency \> 10 ms. Please suggest me which field from .monitoring-es-\* index will have this parameter. --- ## [Store.size of an index](https://discuss.elastic.co/t/store-size-of-an-index/115818)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 5\ **Last updated:** [January 17, 2018, 3:58am UTC](https://discuss.elastic.co/t/store-size-of-an-index/115818 "2018-01-17T03:58:39Z")
Hi there! i am not clear on store.size and pri.store.size. health status index pri rep docs.count docs.deleted store.size pri.store.size yellow open logstash-2018.01.16 5 1 24… --- ## [Can't seem to grasp query filters](https://discuss.elastic.co/t/cant-seem-to-grasp-query-filters/115811)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 1\ **Last updated:** [January 17, 2018, 3:36am UTC](https://discuss.elastic.co/t/cant-seem-to-grasp-query-filters/115811 "2018-01-17T03:36:36Z")
I'm trying to understand exactly how Elasticsearch queries work, but I'm having a tough time with the concept of filters and exact values. using filter within a query is boolean in the sense that it doesn't contain a … --- ## [Difference between the two cluster level settings](https://discuss.elastic.co/t/difference-between-the-two-cluster-level-settings/115782)
**Author:** [@fhalde](https://discuss.elastic.co/u/fhalde)\ **Replies:** 0\ **Last updated:** [January 16, 2018, 8:25pm UTC](https://discuss.elastic.co/t/difference-between-the-two-cluster-level-settings/115782 "2018-01-16T20:25:17Z")
What is the difference between cluster.routing.allocation.enable & cluster.routing.rebalance.enable? And for cluster restarts which one should be disabled? --- ## [Undo decommissioning of a node](https://discuss.elastic.co/t/undo-decommissioning-of-a-node/115611)
**Author:** [@loren](https://discuss.elastic.co/u/loren)\ **Replies:** 1\ **Last updated:** [January 16, 2018, 8:18pm UTC](https://discuss.elastic.co/t/undo-decommissioning-of-a-node/115611 "2018-01-16T20:18:45Z")
I am in the process of shrinking a 1.7 cluster as indices get moved over to a 6.1 cluster. I shrank it from 35 nodes to 8 using shard allocation filtering, and this worked just great. I then specified another 3 nodes for… --- ## [Security Exception against elastic user](https://discuss.elastic.co/t/security-exception-against-elastic-user/114252)
**Author:** [@4b3l](https://discuss.elastic.co/u/4b3l)\ **Replies:** 7\ **Last updated:** [January 16, 2018, 7:49pm UTC](https://discuss.elastic.co/t/security-exception-against-elastic-user/114252 "2018-01-16T19:49:18Z")
I have an 3 node ES Cluster (version 5.6.3). I have deleted the data from each Node and tried to bring up the cluster (as I am still experimenting with the cluster, the data is not important). I get the below error: \[… --- ## [What Can't I Use "10m" precisions in context queries?](https://discuss.elastic.co/t/what-cant-i-use-10m-precisions-in-context-queries/115389)
**Author:** [@wgottschalk](https://discuss.elastic.co/u/wgottschalk)\ **Replies:** 1\ **Last updated:** [January 16, 2018, 5:32pm UTC](https://discuss.elastic.co/t/what-cant-i-use-10m-precisions-in-context-queries/115389 "2018-01-16T17:32:14Z")
I'm running on Elasticsearch 5.5 I have a document with the following mapping "mappings": { "shops": { "properties": { "locations": { "type": "geo\_point" }, "name": { "type": "ke… --- ## [Getting string-out-of\_bound exception while using Scripted field](https://discuss.elastic.co/t/getting-string-out-of-bound-exception-while-using-scripted-field/115547)
**Author:** [@Shubham\_Mahajan](https://discuss.elastic.co/u/Shubham_Mahajan)\ **Replies:** 2\ **Last updated:** [January 16, 2018, 5:12pm UTC](https://discuss.elastic.co/t/getting-string-out-of-bound-exception-while-using-scripted-field/115547 "2018-01-16T17:12:14Z")
Hi Team, while using scripted field in metricbeat index, I am getting StringIndexOutOfBoundsException: String index out of range: -1 error while searching. my created scripted field is: if (doc.containsKey('beat.name'… --- ## [Can't see all fields after importing sample dataset but I can query](https://discuss.elastic.co/t/cant-see-all-fields-after-importing-sample-dataset-but-i-can-query/115752)
**Author:** [@Abdalla\_Sabri](https://discuss.elastic.co/u/Abdalla_Sabri)\ **Replies:** 10\ **Last updated:** [January 16, 2018, 5:10pm UTC](https://discuss.elastic.co/t/cant-see-all-fields-after-importing-sample-dataset-but-i-can-query/115752 "2018-01-16T17:10:13Z")
Hello, I imported the bank accounts sample dataset (accounts.json) successfully into elastic 5.6.4 then I created my index pattern as ba\* Now in the discover tab, I can do queries like (account\_number:\<100 AND balance:\>… --- ## [Client SSL Handshake Issues](https://discuss.elastic.co/t/client-ssl-handshake-issues/115167)
**Author:** [@Senor](https://discuss.elastic.co/u/Senor)\ **Replies:** 6\ **Last updated:** [January 16, 2018, 4:43pm UTC](https://discuss.elastic.co/t/client-ssl-handshake-issues/115167 "2018-01-16T16:43:40Z")
I am running an Elasticsearch 6.1.1 cluster with 9 nodes on Ubuntu 16.04.3 running JVM 9. One node is a dedicated master, two more are master-eligible and data, and the rest are data nodes. I have setup SSL by following… --- ## [Nested Query - Exclude parent document with nested query and must\_not/filter](https://discuss.elastic.co/t/nested-query-exclude-parent-document-with-nested-query-and-must-not-filter/115185)
**Author:** [@saurav](https://discuss.elastic.co/u/saurav)\ **Replies:** 1\ **Last updated:** [January 16, 2018, 4:37pm UTC](https://discuss.elastic.co/t/nested-query-exclude-parent-document-with-nested-query-and-must-not-filter/115185 "2018-01-16T16:37:24Z")
Trying to exclude top level documents where one of the child documents doesn't match the query. For the example below, I'm trying to exclude all documents where one of it's nested jobs has current: true, and matches with… --- ## [Parsing issues with nested data](https://discuss.elastic.co/t/parsing-issues-with-nested-data/115608)
**Author:** [@ataustin](https://discuss.elastic.co/u/ataustin)\ **Replies:** 7\ **Last updated:** [January 16, 2018, 4:05pm UTC](https://discuss.elastic.co/t/parsing-issues-with-nested-data/115608 "2018-01-16T16:05:35Z")
Hello ES experts, We are running into an issue with certain documents that are ingested in by transport-couchbase. The doc is and error is listed below. Any ideas \[ { "poc": { "cas": 1511944677515919400, "docType": "… --- ## [IDS basend on windows logs](https://discuss.elastic.co/t/ids-basend-on-windows-logs/115749)
**Author:** [@cbastone1](https://discuss.elastic.co/u/cbastone1)\ **Replies:** 0\ **Last updated:** [January 16, 2018, 4:02pm UTC](https://discuss.elastic.co/t/ids-basend-on-windows-logs/115749 "2018-01-16T16:02:16Z")
Hello everyone, I m new in ELK. I would realize an intrusion detection system based on windows logs. I thought I could use machine learning x-pack, but creating multi metric job I don t know which fields I have to use t… --- ## [How to develop a plugin (ingest node) to convert a field from Lambert II to WGS84 (geographic coordination system) and test it?](https://discuss.elastic.co/t/how-to-develop-a-plugin-ingest-node-to-convert-a-field-from-lambert-ii-to-wgs84-geographic-coordination-system-and-test-it/115037)
**Author:** [@chrigui94](https://discuss.elastic.co/u/chrigui94)\ **Replies:** 2\ **Last updated:** [January 16, 2018, 3:07pm UTC](https://discuss.elastic.co/t/how-to-develop-a-plugin-ingest-node-to-convert-a-field-from-lambert-ii-to-wgs84-geographic-coordination-system-and-test-it/115037 "2018-01-16T15:07:24Z")
I have an Index contains (Latitude, longitude ) of a position in Lambert II and I need to convert these coordinates to (Lat, long) in WGS84. I have the java code how to change from Lambert II to WGS84 and I need the step… --- ## [Watcher: Error 500 Internal Server Error](https://discuss.elastic.co/t/watcher-error-500-internal-server-error/115336)
**Author:** [@Frank\_Matera](https://discuss.elastic.co/u/Frank_Matera)\ **Replies:** 8\ **Last updated:** [January 16, 2018, 2:58pm UTC](https://discuss.elastic.co/t/watcher-error-500-internal-server-error/115336 "2018-01-16T14:58:02Z")
Upgraded 5.6 to 6.1.0 with x-pack trial. When I click on watcher, I am receiving a 500 error. I see a mismatch in the logstashwatcher section, but I am not sure how to resolve it or what is mismatched. Checked versions: … --- ## ["dfs\_query\_then\_fetch" and "query\_then\_fetch" return the same score](https://discuss.elastic.co/t/dfs-query-then-fetch-and-query-then-fetch-return-the-same-score/115623)
**Author:** [@hubo3085632](https://discuss.elastic.co/u/hubo3085632)\ **Replies:** 5\ **Last updated:** [January 16, 2018, 2:46pm UTC](https://discuss.elastic.co/t/dfs-query-then-fetch-and-query-then-fetch-return-the-same-score/115623 "2018-01-16T14:46:48Z")
i known the difference between "dfs\_query\_then\_fetch" and "query\_then\_fetch",I think this will return different idf ,but it return the same idf and same score,why is it？ --- ## [Search with GUID](https://discuss.elastic.co/t/search-with-guid/115718)
**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\ **Replies:** 1\ **Last updated:** [January 16, 2018, 1:41pm UTC](https://discuss.elastic.co/t/search-with-guid/115718 "2018-01-16T13:41:39Z")
Hi I am trying to search a cloumn with Guid. Guid is saved in Elastic in upper case. While I searched with lowercase, its not giving result. Is it case sensitive with Guid? Thanks Aneesh L [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1824) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1826)