# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1826 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1827 --- ## [Date range query - 29 of February in "MMdd" format issue](https://discuss.elastic.co/t/date-range-query-29-of-february-in-mmdd-format-issue/115681)
**Author:** [@nejra](https://discuss.elastic.co/u/nejra)\ **Replies:** 2\ **Last updated:** [January 16, 2018, 1:35pm UTC](https://discuss.elastic.co/t/date-range-query-29-of-february-in-mmdd-format-issue/115681 "2018-01-16T13:35:23Z")
I encountered a difficulty when trying to query on "field\_name": { "type": "date", "format": "MMdd" } field. It happened for "0229" date and I got message "failed to parse date field \[0229\] with format \[MMdd\]". What… --- ## [Slow get data](https://discuss.elastic.co/t/slow-get-data/115656)
**Author:** [@tony27](https://discuss.elastic.co/u/tony27)\ **Replies:** 0\ **Last updated:** [January 16, 2018, 7:43am UTC](https://discuss.elastic.co/t/slow-get-data/115656 "2018-01-16T07:43:47Z")
hey, im try get 4500 data, but very slow 7second to complete. im using slice scroll . this my code int slices = 5; SearchSourceBuilder searchSourceBuilder = SearchSourceBuilder.searchSource… --- ## [Any idea why q="4580" is MUCH heavier than q=4580?](https://discuss.elastic.co/t/any-idea-why-q-4580-is-much-heavier-than-q-4580/115567)
**Author:** [@idanhagai](https://discuss.elastic.co/u/idanhagai)\ **Replies:** 4\ **Last updated:** [January 16, 2018, 12:58pm UTC](https://discuss.elastic.co/t/any-idea-why-q-4580-is-much-heavier-than-q-4580/115567 "2018-01-16T12:58:02Z")
(The query is on analyzed field) --- ## [Search xpack users](https://discuss.elastic.co/t/search-xpack-users/115698)
**Author:** [@jchannon](https://discuss.elastic.co/u/jchannon)\ **Replies:** 4\ **Last updated:** [January 16, 2018, 12:11pm UTC](https://discuss.elastic.co/t/search-xpack-users/115698 "2018-01-16T12:11:01Z")
I can't use POST /\_xpack/security/user/\_search {} as that thinks I'm trying to add a new user. What is the API to search users? --- ## [Which language is using in watcher?](https://discuss.elastic.co/t/which-language-is-using-in-watcher/115642)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 2\ **Last updated:** [January 16, 2018, 11:59am UTC](https://discuss.elastic.co/t/which-language-is-using-in-watcher/115642 "2018-01-16T11:59:01Z")
For watcher programming , which programming language study is needed . --- ## [Create dynamic date variable/constant to use in watch](https://discuss.elastic.co/t/create-dynamic-date-variable-constant-to-use-in-watch/115062)
**Author:** [@Viorel\_Florian](https://discuss.elastic.co/u/Viorel_Florian)\ **Replies:** 3\ **Last updated:** [January 16, 2018, 11:48am UTC](https://discuss.elastic.co/t/create-dynamic-date-variable-constant-to-use-in-watch/115062 "2018-01-16T11:48:42Z")
I am trying to create a metadata field of type date to use in input, condition, action : "metadata": { "range\_start" : "now-10m" } In the input it seems to have the desired. In the action I am trying to use range\_star… --- ## [Loading synonyms from file vs from list in settings performance](https://discuss.elastic.co/t/loading-synonyms-from-file-vs-from-list-in-settings-performance/115692)
**Author:** [@Roman\_GR](https://discuss.elastic.co/u/Roman_GR)\ **Replies:** 0\ **Last updated:** [January 16, 2018, 10:46am UTC](https://discuss.elastic.co/t/loading-synonyms-from-file-vs-from-list-in-settings-performance/115692 "2018-01-16T10:46:19Z")
When I use synonyms dictionary from the file it works from the start of the ES node but when I upload it via api as part of index settings it takes a lot of time to "analyze" them (I don't actually know why it takes more… --- ## [Curl Command of Elastic Search](https://discuss.elastic.co/t/curl-command-of-elastic-search/115675)
**Author:** [@nilesh\_85](https://discuss.elastic.co/u/nilesh_85)\ **Replies:** 1\ **Last updated:** [January 16, 2018, 10:10am UTC](https://discuss.elastic.co/t/curl-command-of-elastic-search/115675 "2018-01-16T10:10:23Z")
Hi , I have question related to CLI query of elasticsearch , How to write a Curl Command which will provide the output as number of events of the particular Index for example say my index name is abc\_rcvd --- ## [Unified highlighter on postings or term\_vector fields?](https://discuss.elastic.co/t/unified-highlighter-on-postings-or-term-vector-fields/114614)
**Author:** [@aslamy](https://discuss.elastic.co/u/aslamy)\ **Replies:** 2\ **Last updated:** [January 16, 2018, 10:01am UTC](https://discuss.elastic.co/t/unified-highlighter-on-postings-or-term-vector-fields/114614 "2018-01-16T10:01:54Z")
Hi ! Should I use a unified highlighter on postings or term\_vector fields? Which one gives the fastest highlighter? I have documents with large text fields that will be highlighted. --- ## [Spring data ElasticSearch+ SpringBoot - issue](https://discuss.elastic.co/t/spring-data-elasticsearch-springboot-issue/115668)
**Author:** [@Nikita\_Krasnov](https://discuss.elastic.co/u/Nikita_Krasnov)\ **Replies:** 3\ **Last updated:** [January 16, 2018, 8:47am UTC](https://discuss.elastic.co/t/spring-data-elasticsearch-springboot-issue/115668 "2018-01-16T08:47:05Z")
Hello to everyone. I've a problem with building project when I use spring boot and spring data ElasticSearch. Here my logs of an error: Error starting ApplicationContext. To display the auto-configuration report re-run … --- ## [Why my elasticsearch(5.6.3) node cannot load data on disk?](https://discuss.elastic.co/t/why-my-elasticsearch-5-6-3-node-cannot-load-data-on-disk/115662)
**Author:** [@zacharysu](https://discuss.elastic.co/u/zacharysu)\ **Replies:** 0\ **Last updated:** [January 16, 2018, 8:23am UTC](https://discuss.elastic.co/t/why-my-elasticsearch-5-6-3-node-cannot-load-data-on-disk/115662 "2018-01-16T08:23:07Z")
Hello, I have a cluster which have two nodes; Today morning, the disk space of master node used up and crash. When I restart this node, I can't find any of shards in the node. But data of node is still in data.path. It… --- ## [Problème Elasticsearch every milliseconde](https://discuss.elastic.co/t/probleme-elasticsearch-every-milliseconde/115651)
**Author:** [@adrien-vinet](https://discuss.elastic.co/u/adrien-vinet)\ **Replies:** 1\ **Last updated:** [January 16, 2018, 7:39am UTC](https://discuss.elastic.co/t/probleme-elasticsearch-every-milliseconde/115651 "2018-01-16T07:39:46Z")
Hello all, I contact you because I have a problem with my elasticsearch server. My configuration : Serveur front whit haproxy 2 serveurs with elastic search My haproxy configuration : listen elasticsearch-cluster … --- ## [How to increase connect\_timeout (default 30s) as i am getting ConnectTransportException](https://discuss.elastic.co/t/how-to-increase-connect-timeout-default-30s-as-i-am-getting-connecttransportexception/115653)
**Author:** [@hasan\_sharekhan](https://discuss.elastic.co/u/hasan_sharekhan)\ **Replies:** 0\ **Last updated:** [January 16, 2018, 7:32am UTC](https://discuss.elastic.co/t/how-to-increase-connect-timeout-default-30s-as-i-am-getting-connecttransportexception/115653 "2018-01-16T07:32:59Z")
How to increase connect\_timeout from default 30s to higher value as i am getting ConnectTransportException Below are some of the setting which i have already changed but getting the below exceptions # Default 5s discov… --- ## [Error when installing template "request body is required"](https://discuss.elastic.co/t/error-when-installing-template-request-body-is-required/115607)
**Author:** [@Sylvain-69](https://discuss.elastic.co/u/Sylvain-69)\ **Replies:** 4\ **Last updated:** [January 16, 2018, 5:53am UTC](https://discuss.elastic.co/t/error-when-installing-template-request-body-is-required/115607 "2018-01-16T05:53:11Z")
Hello, Here is the error I get when I try to install Winlogbeat template into Elasticsearch : curl -XPUT -H 'Content-Type: application/json' http://localhost:9200/\_template/winlogbeat-6.1.0 -d@winlogbeat.template-6.1.0… --- ## [Why all the Indices not upgraded in ES 6.1.1 after upgradation from 5.4.1?](https://discuss.elastic.co/t/why-all-the-indices-not-upgraded-in-es-6-1-1-after-upgradation-from-5-4-1/115626)
**Author:** [@PinkiMondal](https://discuss.elastic.co/u/PinkiMondal)\ **Replies:** 4\ **Last updated:** [January 16, 2018, 5:07am UTC](https://discuss.elastic.co/t/why-all-the-indices-not-upgraded-in-es-6-1-1-after-upgradation-from-5-4-1/115626 "2018-01-16T05:07:43Z")
I have upgraded data from 5.4.1 to 6.1.1 using Full Cluster Restart But all the indices not coming in ES 6.1.1 These are the steps that I followed: 1. Start ES 5.4.1 and Kibana 5.4.1 2. Go to DevTools 3. Run PUT \_cl… --- ## [Ansible deployment (new to elastic)](https://discuss.elastic.co/t/ansible-deployment-new-to-elastic/115630)
**Author:** [@elasticdevstd](https://discuss.elastic.co/u/elasticdevstd)\ **Replies:** 0\ **Last updated:** [January 16, 2018, 5:02am UTC](https://discuss.elastic.co/t/ansible-deployment-new-to-elastic/115630 "2018-01-16T05:02:02Z")
Hello, Where can I find latest ansible roles and playbook for elasticsearch 6.1.1 w/ xpack, kibana, logstash, filbeats in 3 clustered nodes? The one in GitHub says it works for 5.x. Thank you, Chris --- ## [Parsing failure](https://discuss.elastic.co/t/parsing-failure/115615)
**Author:** [@lkenetadmin](https://discuss.elastic.co/u/lkenetadmin)\ **Replies:** 5\ **Last updated:** [January 16, 2018, 4:30am UTC](https://discuss.elastic.co/t/parsing-failure/115615 "2018-01-16T04:30:42Z")
Hi currently we have a issue about parsing here below is the json that is returned to us. { "type": "mapper\_parsing\_exception", "reason": "failed to parse \[remote\_addr\]", "caused\_by": { "type": "illegal\_argument\_exc… --- ## [Can you force primary shards to only be on certain nodes, and replica shards on other nodes?](https://discuss.elastic.co/t/can-you-force-primary-shards-to-only-be-on-certain-nodes-and-replica-shards-on-other-nodes/115465)
**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\ **Replies:** 4\ **Last updated:** [January 16, 2018, 4:30am UTC](https://discuss.elastic.co/t/can-you-force-primary-shards-to-only-be-on-certain-nodes-and-replica-shards-on-other-nodes/115465 "2018-01-16T04:30:38Z")
We have a cluster that will contain a mix of hosts, some with spinning disks and some with SSDs. We would like to index only to the hosts with spinning disks, and serve queries only from the hosts with SSDs. How can we… --- ## [Failed to send join request to master on Centos7](https://discuss.elastic.co/t/failed-to-send-join-request-to-master-on-centos7/115625)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 3\ **Last updated:** [January 16, 2018, 3:53am UTC](https://discuss.elastic.co/t/failed-to-send-join-request-to-master-on-centos7/115625 "2018-01-16T03:53:26Z")
Hi, I want to set up a ES cluster on my Centos7 pc, but there are some problems. I have two nodes, and this is the config: node1: # ---------------------------------- Cluster ----------------------------------- # # U… --- ## [Template indexing issue](https://discuss.elastic.co/t/template-indexing-issue/115456)
**Author:** [@kanthimathi](https://discuss.elastic.co/u/kanthimathi)\ **Replies:** 8\ **Last updated:** [January 15, 2018, 11:37pm UTC](https://discuss.elastic.co/t/template-indexing-issue/115456 "2018-01-15T23:37:18Z")
Hi all, We are using elastic search to collect logs and analyze. For this purpose, we are using filebeat and metricbeat. Initially, when we had an issue in indexing the template, support people helped in resolving it. I… --- ## [Curator & AWS ElasticSearch 6.0.0 - Timeout Issue?](https://discuss.elastic.co/t/curator-aws-elasticsearch-6-0-0-timeout-issue/115592)
**Author:** [@Hush077](https://discuss.elastic.co/u/Hush077)\ **Replies:** 2\ **Last updated:** [January 15, 2018, 9:50pm UTC](https://discuss.elastic.co/t/curator-aws-elasticsearch-6-0-0-timeout-issue/115592 "2018-01-15T21:50:05Z")
Issue: Curator seems to get stuck or times out with no information running against ElasticSearch 6.0.0. Curator Version: 5.4.1 Have setup the AWS Cluster using VPC Security (accessible by anything within the VPC). Can… --- ## [As the final mapping would have more than 1 type ERROR](https://discuss.elastic.co/t/as-the-final-mapping-would-have-more-than-1-type-error/115457)
**Author:** [@ramzey1981](https://discuss.elastic.co/u/ramzey1981)\ **Replies:** 3\ **Last updated:** [January 15, 2018, 5:29pm UTC](https://discuss.elastic.co/t/as-the-final-mapping-would-have-more-than-1-type-error/115457 "2018-01-15T17:29:53Z")
I had data going to ES from filebeats with no issues and then yesterday, I get tons of these errors for most of our rest-api services. i looked at the filebeat debug output and see metadata type as doc. I looked at log… --- ## [Unable to create search index](https://discuss.elastic.co/t/unable-to-create-search-index/115575)
**Author:** [@antboll](https://discuss.elastic.co/u/antboll)\ **Replies:** 3\ **Last updated:** [January 15, 2018, 5:27pm UTC](https://discuss.elastic.co/t/unable-to-create-search-index/115575 "2018-01-15T17:27:56Z")
Hi Guys, we installed elasticsearch on Cent OS in Version 5.6.5 with mapper plugins. After A reboot we had some Troubles to get the Service startet, this is fixed. Unfortunately we can not create a Index. We always g… --- ## [Elasticsearch aggregation encounters circuit\_breaking\_exception](https://discuss.elastic.co/t/elasticsearch-aggregation-encounters-circuit-breaking-exception/115454)
**Author:** [@sovanghosh7](https://discuss.elastic.co/u/sovanghosh7)\ **Replies:** 13\ **Last updated:** [January 15, 2018, 4:32pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-encounters-circuit-breaking-exception/115454 "2018-01-15T16:32:42Z")
I am using elasticsearch 6.1.1 and creating a single shard per index. The cluster settings is as follows - { "persistent": { "cluster": { "routing": { "allocation": { … --- ## [Weird range query behavior](https://discuss.elastic.co/t/weird-range-query-behavior/115578)
**Author:** [@lepereira](https://discuss.elastic.co/u/lepereira)\ **Replies:** 0\ **Last updated:** [January 15, 2018, 4:30pm UTC](https://discuss.elastic.co/t/weird-range-query-behavior/115578 "2018-01-15T16:30:49Z")
I am having some problems with nested range query, the value that I am looking is 508 but if I search for 'gte' \> 311 for eg. it works but if I do the same using 309 it doesn't works. Here is my query on gist: Here … --- ## [java.lang.OutOfMemoryError Kubernetes GKE](https://discuss.elastic.co/t/java-lang-outofmemoryerror-kubernetes-gke/115535)
**Author:** [@ritasker](https://discuss.elastic.co/u/ritasker)\ **Replies:** 1\ **Last updated:** [January 15, 2018, 3:49pm UTC](https://discuss.elastic.co/t/java-lang-outofmemoryerror-kubernetes-gke/115535 "2018-01-15T15:49:56Z")
Morning All, I am running Elastricsearch & Kibana with Fluentd in Kubernetes on the GKE. Each node in the cluster is running kubernetes 1.8.5 and has 4 vCPUs, 15 GB memory. I am running ES v6.0.0 with the following co… --- ## [Aggregation still returning duplicates](https://discuss.elastic.co/t/aggregation-still-returning-duplicates/115461)
**Author:** [@mrbushid0](https://discuss.elastic.co/u/mrbushid0)\ **Replies:** 5\ **Last updated:** [January 15, 2018, 3:07pm UTC](https://discuss.elastic.co/t/aggregation-still-returning-duplicates/115461 "2018-01-15T15:07:51Z")
Hi guys, I'm try to get all unique values for a field that is not analyzed but I am still getting duplicates: Mapping: { "County":{ "type":"string", "fielddata":true, "fields":{ "raw":{ "type":"… --- ## [Java Security Exception when inheriting from ESIntegTestCase](https://discuss.elastic.co/t/java-security-exception-when-inheriting-from-esintegtestcase/115546)
**Author:** [@prakharjain17](https://discuss.elastic.co/u/prakharjain17)\ **Replies:** 6\ **Last updated:** [January 15, 2018, 2:15pm UTC](https://discuss.elastic.co/t/java-security-exception-when-inheriting-from-esintegtestcase/115546 "2018-01-15T14:15:43Z")
Hi, I need to run elasticsearch for my tests, so I thought of using ESIntegTestCase. But, I am getting this error when am running tests : java.security.AccessControlException: access denied ("java.lang.RuntimePermissi… --- ## [Running benchmarking on existing index](https://discuss.elastic.co/t/running-benchmarking-on-existing-index/114322)
**Author:** [@Alp1](https://discuss.elastic.co/u/Alp1)\ **Replies:** 9\ **Last updated:** [January 15, 2018, 1:59pm UTC](https://discuss.elastic.co/t/running-benchmarking-on-existing-index/114322 "2018-01-15T13:59:37Z")
Hi We have few already created indexes(with data) on elastic and i want to get search performance on existing indexes. As i understand from docs, we can use "auto-managed":false to stop rally creating new index. I hav… --- ## [Alerting Conditions and Email Body](https://discuss.elastic.co/t/alerting-conditions-and-email-body/114300)
**Author:** [@MultiplierMultiplier](https://discuss.elastic.co/u/MultiplierMultiplier)\ **Replies:** 8\ **Last updated:** [January 15, 2018, 12:47pm UTC](https://discuss.elastic.co/t/alerting-conditions-and-email-body/114300 "2018-01-15T12:47:50Z")
I am having some troubles with the alerting functions in Watcher, below is part of my JSON query which allows you to understand what I'm trying to do and which fields I am using. "aggs": { "2": { "significant… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1825) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1827)