# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1831

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1832

---

## [ETL tool for ElasticSearch](https://discuss.elastic.co/t/etl-tool-for-elasticsearch/113803)

<div class="topic-metadata">

**Author:** [@faoc](https://discuss.elastic.co/u/faoc)\
**Replies:** 16\
**Last updated:** [January 11, 2018, 9:35am UTC](https://discuss.elastic.co/t/etl-tool-for-elasticsearch/113803 "2018-01-11T09:35:33Z")

</div>

Hi Guys, do you know any ETL tool where is possible to have a connector to ElasticSearch and get all data that i need? I was trying talend studio (big data) and oracle data integrator, but without results. if with thi…

---

## [Number Precision](https://discuss.elastic.co/t/number-precision/114996)

<div class="topic-metadata">

**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\
**Replies:** 3\
**Last updated:** [January 11, 2018, 9:12am UTC](https://discuss.elastic.co/t/number-precision/114996 "2018-01-11T09:12:36Z")

</div>

Hi, I am facing an issue with the number precision. We have a field "consumptionvalue" as float which contains numeric values like 0.001, 0.004, 0.054 etc. When i try to search for records with below query consumptio…

---

## [ES nodes disconnects intermittently from the cluster](https://discuss.elastic.co/t/es-nodes-disconnects-intermittently-from-the-cluster/115039)

<div class="topic-metadata">

**Author:** [@Neeraj\_Gupta](https://discuss.elastic.co/u/Neeraj_Gupta)\
**Replies:** 0\
**Last updated:** [January 11, 2018, 8:51am UTC](https://discuss.elastic.co/t/es-nodes-disconnects-intermittently-from-the-cluster/115039 "2018-01-11T08:51:19Z")

</div>

I have a 12 node cluster for elasticsearch(version 2.4), all the machines are on EC2-instances. IN between I am getting errors like master left due to which unassigned shards increases and cluster health turns to red. \[…

---

## [The \[action.auto\_create\_index\] setting value \[.security,.monitoring\*,.watches,.triggered\_watches,.watcher-history\*,.ml\*\] is too restrictive. disable \[action.auto\_create\_index\] or set it to \[.security,.security-6\]](https://discuss.elastic.co/t/the-action-auto-create-index-setting-value-security-monitoring-watches-triggered-watches-watcher-history-ml-is-too-restrictive-disable-action-auto-create-index-or-set-it-to-security-security-6/114822)

<div class="topic-metadata">

**Author:** [@shaonbean](https://discuss.elastic.co/u/shaonbean)\
**Replies:** 5\
**Last updated:** [January 11, 2018, 8:10am UTC](https://discuss.elastic.co/t/the-action-auto-create-index-setting-value-security-monitoring-watches-triggered-watches-watcher-history-ml-is-too-restrictive-disable-action-auto-create-index-or-set-it-to-security-security-6/114822 "2018-01-11T08:10:44Z")

</div>

when i install elasticsearch,then install x-pack,restart elasticsearch will be errrs Caused by: java.lang.IllegalArgumentException: the \[action.auto\_create\_index\] setting value \[.security,.monitoring\*,.watches,.triggere…

---

## [Pagination with Aggregation Queries](https://discuss.elastic.co/t/pagination-with-aggregation-queries/115005)

<div class="topic-metadata">

**Author:** [@Deepak\_Mane](https://discuss.elastic.co/u/Deepak_Mane)\
**Replies:** 2\
**Last updated:** [January 11, 2018, 6:57am UTC](https://discuss.elastic.co/t/pagination-with-aggregation-queries/115005 "2018-01-11T06:57:40Z")

</div>

I have table having more 40 lakhs records. I have to load the data with grouping. After grouping data will be more the 5 lakhs records. I have tried many solutions but not succeed. From and Size is not supported Inclu…

---

## [Issue with Installing X-Pack on ELK - Security Exception Error](https://discuss.elastic.co/t/issue-with-installing-x-pack-on-elk-security-exception-error/115002)

<div class="topic-metadata">

**Author:** [@thelonestargeek](https://discuss.elastic.co/u/thelonestargeek)\
**Replies:** 5\
**Last updated:** [January 11, 2018, 6:47am UTC](https://discuss.elastic.co/t/issue-with-installing-x-pack-on-elk-security-exception-error/115002 "2018-01-11T06:47:16Z")

</div>

I'm trying to install the X-Pack on ELK, but I'm having difficulty. Here is where I'm at: The elasticsearch and kibana installs have completed without issue I've installed X-Pack on logstash Issue #1: the instru…

---

## [Performance of has\_child query in large amounts of data](https://discuss.elastic.co/t/performance-of-has-child-query-in-large-amounts-of-data/115001)

<div class="topic-metadata">

**Author:** [@9ian1i](https://discuss.elastic.co/u/9ian1i)\
**Replies:** 0\
**Last updated:** [January 11, 2018, 5:03am UTC](https://discuss.elastic.co/t/performance-of-has-child-query-in-large-amounts-of-data/115001 "2018-01-11T05:03:03Z")

</div>

Hi everyone, I've had a very big problem recently. When I used the has\_child query, it took a few minutes. Here is the detailed information: About elasticsearch configuration: es version: 5.2.2 total documents：100 b…

---

## [Elasticsearch problem, search thread pool rejected](https://discuss.elastic.co/t/elasticsearch-problem-search-thread-pool-rejected/114446)

<div class="topic-metadata">

**Author:** [@chayapon1219](https://discuss.elastic.co/u/chayapon1219)\
**Replies:** 3\
**Last updated:** [January 11, 2018, 4:21am UTC](https://discuss.elastic.co/t/elasticsearch-problem-search-thread-pool-rejected/114446 "2018-01-11T04:21:56Z")

</div>

Hello everyone, I have 1 node of elasticsearch 6.0 that it has about 100 indices. When I query Visual builder dashboard, sometime I got "The request for this panel failed. The aggregations key is missing from the respons…

---

## [Can I Scope Aggregations to Ignore Certain Query Parameters?](https://discuss.elastic.co/t/can-i-scope-aggregations-to-ignore-certain-query-parameters/114984)

<div class="topic-metadata">

**Author:** [@wgottschalk](https://discuss.elastic.co/u/wgottschalk)\
**Replies:** 1\
**Last updated:** [January 11, 2018, 4:15am UTC](https://discuss.elastic.co/t/can-i-scope-aggregations-to-ignore-certain-query-parameters/114984 "2018-01-11T04:15:27Z")

</div>

I'm using Elasticsearch 5.5 I'm trying to index movies by name and location. { "mappings": { "movie": { "genre": { "type": "keyword" }, "geolocation": { "type": "geo\_point" …

---

## [Elastic nodes goes down as gc kicks in](https://discuss.elastic.co/t/elastic-nodes-goes-down-as-gc-kicks-in/112337)

<div class="topic-metadata">

**Author:** [@dhruvpsaru](https://discuss.elastic.co/u/dhruvpsaru)\
**Replies:** 5\
**Last updated:** [January 11, 2018, 4:13am UTC](https://discuss.elastic.co/t/elastic-nodes-goes-down-as-gc-kicks-in/112337 "2018-01-11T04:13:16Z")

</div>

ES Version: 5.4.1 OS: Ubuntu Java:1.8 Issue We currently upgraded our systems from es 2.3 to es5.4.1, everything was going well till we deployed it on production. It started with es node going for some time randomly. …

---

## [Email alert could not getting the value of a map defined in conditions](https://discuss.elastic.co/t/email-alert-could-not-getting-the-value-of-a-map-defined-in-conditions/114682)

<div class="topic-metadata">

**Author:** [@sunnywalden](https://discuss.elastic.co/u/sunnywalden)\
**Replies:** 3\
**Last updated:** [January 11, 2018, 1:58am UTC](https://discuss.elastic.co/t/email-alert-could-not-getting-the-value-of-a-map-defined-in-conditions/114682 "2018-01-11T01:58:48Z")

</div>

here is my search response: { "took": 638, "timed\_out": false, "\_shards": { "total": 5, "successful": 5, "skipped": 0, "failed": 0 }, "hits": { "total": 2705428, "max\_score": 0, "h…

---

## [ElasticSearch Snapshots only Storing 5 Documents](https://discuss.elastic.co/t/elasticsearch-snapshots-only-storing-5-documents/114750)

<div class="topic-metadata">

**Author:** [@mrbushid0](https://discuss.elastic.co/u/mrbushid0)\
**Replies:** 1\
**Last updated:** [January 10, 2018, 11:49pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshots-only-storing-5-documents/114750 "2018-01-10T23:49:47Z")

</div>

Hi guys, Elasticsearch version: 5.6.3 OS: Windows 10 Home If I run: $ curl -XPUT 'localhost:9200/\_snapshot/my\_backup/test?wait\_for\_completion=true&pretty' -H 'Content-Type: application/json' -d' { "indices": "prope…

---

## [Performance issues of running ES on Linux kernels patched for Meltdown/Spectre side channel attacks](https://discuss.elastic.co/t/performance-issues-of-running-es-on-linux-kernels-patched-for-meltdown-spectre-side-channel-attacks/114084)

<div class="topic-metadata">

**Author:** [@oysteila](https://discuss.elastic.co/u/oysteila)\
**Replies:** 1\
**Last updated:** [January 10, 2018, 10:57pm UTC](https://discuss.elastic.co/t/performance-issues-of-running-es-on-linux-kernels-patched-for-meltdown-spectre-side-channel-attacks/114084 "2018-01-10T22:57:04Z")

</div>

By now, of course, most of us are familiar with the side channel attacks disclosed yesterday detailed in https://meltdownattack.com/ Fixes to mitigate this are rolling out as we speak, with the Red Hat ecosystem having …

---

## [How to exclude percolator documents ES 6.x](https://discuss.elastic.co/t/how-to-exclude-percolator-documents-es-6-x/114972)

<div class="topic-metadata">

**Author:** [@andywilliams](https://discuss.elastic.co/u/andywilliams)\
**Replies:** 0\
**Last updated:** [January 10, 2018, 10:35pm UTC](https://discuss.elastic.co/t/how-to-exclude-percolator-documents-es-6-x/114972 "2018-01-10T22:35:55Z")

</div>

Greetings...I was playing around with percolator with some great results for my use case...the queries are stored in the same index that I have users querying on for UI data....I realize that a breaking change in 5 cause…

---

## [Access\_denied\_exception](https://discuss.elastic.co/t/access-denied-exception/114403)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 13\
**Last updated:** [January 10, 2018, 10:20pm UTC](https://discuss.elastic.co/t/access-denied-exception/114403 "2018-01-10T22:20:34Z")

</div>

I need to look into my backups, so I'm trying to run older version of elasticsearch and register a snapshot repository and getting following error: root@bckp:/# docker run -p 9200:9200 -p 9300:9300 -e "discovery.type=si…

---

## [Not able to trigger a race for a custom track even though track is listed](https://discuss.elastic.co/t/not-able-to-trigger-a-race-for-a-custom-track-even-though-track-is-listed/114941)

<div class="topic-metadata">

**Author:** [@dipanjan44](https://discuss.elastic.co/u/dipanjan44)\
**Replies:** 1\
**Last updated:** [January 10, 2018, 8:23pm UTC](https://discuss.elastic.co/t/not-able-to-trigger-a-race-for-a-custom-track-even-though-track-is-listed/114941 "2018-01-10T20:23:55Z")

</div>

I have setup rally on my local mac and trying to index Elastic search with my custom data. Though the file containing the data is present in the specified directory , rally throws an error message saying the file is not…

---

## [Failed to execute on node Caused by: org.apache.lucene.store.AlreadyClosedException: this IndexReader is closed](https://discuss.elastic.co/t/failed-to-execute-on-node-caused-by-org-apache-lucene-store-alreadyclosedexception-this-indexreader-is-closed/114818)

<div class="topic-metadata">

**Author:** [@xlc](https://discuss.elastic.co/u/xlc)\
**Replies:** 1\
**Last updated:** [January 10, 2018, 8:00pm UTC](https://discuss.elastic.co/t/failed-to-execute-on-node-caused-by-org-apache-lucene-store-alreadyclosedexception-this-indexreader-is-closed/114818 "2018-01-10T20:00:06Z")

</div>

It seems to be an internal error in elsticsearch.I'm using 2.3.2 and one shard can not recover from the restart.Cluster yellow all the day.The log says RemoteTransportException\[\[10.10.3.16\]\[10.10.3.16:9300\]\[cluster:moni…

---

## [Sort an ElasticSearch Geohash Grid Aggregation bucket by Sum of a field](https://discuss.elastic.co/t/sort-an-elasticsearch-geohash-grid-aggregation-bucket-by-sum-of-a-field/114940)

<div class="topic-metadata">

**Author:** [@Dave\_O](https://discuss.elastic.co/u/Dave_O)\
**Replies:** 0\
**Last updated:** [January 10, 2018, 7:28pm UTC](https://discuss.elastic.co/t/sort-an-elasticsearch-geohash-grid-aggregation-bucket-by-sum-of-a-field/114940 "2018-01-10T19:28:41Z")

</div>

Elasticsearch 5.5 linux. I am trying to sort the results of a Geohash Grid Aggregation by the "sum" of a field and NOT the default "doc\_count" desc. Is this possible. In my aggs I basically have this "aggs": { "ge…

---

## [ElasticSearch has stopped working](https://discuss.elastic.co/t/elasticsearch-has-stopped-working/114888)

<div class="topic-metadata">

**Author:** [@wmcgilvery](https://discuss.elastic.co/u/wmcgilvery)\
**Replies:** 3\
**Last updated:** [January 10, 2018, 7:00pm UTC](https://discuss.elastic.co/t/elasticsearch-has-stopped-working/114888 "2018-01-10T19:00:57Z")

</div>

Hello: I have a setup with Logstash, ElasticSearch and Kibana and ElasticSeach is not working properly. I found that before Christmas I had stopped receiving information in Kibana and because of an error in logstash, I…

---

## [Problem started project with SpringBoot](https://discuss.elastic.co/t/problem-started-project-with-springboot/114923)

<div class="topic-metadata">

**Author:** [@andrelucasti](https://discuss.elastic.co/u/andrelucasti)\
**Replies:** 1\
**Last updated:** [January 10, 2018, 5:41pm UTC](https://discuss.elastic.co/t/problem-started-project-with-springboot/114923 "2018-01-10T17:41:24Z")

</div>

I have a problem with the ElastichSearch integration with my springboot org.elasticsearch.transport.NodeDisconnectedException: \[\]\[127.0.0.1:9300\]\[cluster:monitor/nodes/liveness\] disconnected my file elastichsearch.yml …

---

## [When does client need cluster.name?](https://discuss.elastic.co/t/when-does-client-need-cluster-name/114916)

<div class="topic-metadata">

**Author:** [@jacobg](https://discuss.elastic.co/u/jacobg)\
**Replies:** 5\
**Last updated:** [January 10, 2018, 5:20pm UTC](https://discuss.elastic.co/t/when-does-client-need-cluster-name/114916 "2018-01-10T17:20:59Z")

</div>

The documentation for transport client says to specify cluster.name setting, but the rest client does not. When is cluster.name needed, and what is it used for? Is it for sniffing nodes? Thanks.

---

## [How to reindex , with multiple \_id in index](https://discuss.elastic.co/t/how-to-reindex-with-multiple-id-in-index/114879)

<div class="topic-metadata">

**Author:** [@Abhishekh](https://discuss.elastic.co/u/Abhishekh)\
**Replies:** 14\
**Last updated:** [January 10, 2018, 5:01pm UTC](https://discuss.elastic.co/t/how-to-reindex-with-multiple-id-in-index/114879 "2018-01-10T17:01:44Z")

</div>

Hi, I have Index with more than one document and wanted to reindex but while reindexing wanted to change the \_id field of each document in destination index. Followed this but it is for one index. How to do that?

---

## [Curl single quotes vs. double quotes](https://discuss.elastic.co/t/curl-single-quotes-vs-double-quotes/114671)

<div class="topic-metadata">

**Author:** [@boudewijnk](https://discuss.elastic.co/u/boudewijnk)\
**Replies:** 11\
**Last updated:** [January 10, 2018, 4:50pm UTC](https://discuss.elastic.co/t/curl-single-quotes-vs-double-quotes/114671 "2018-01-10T16:50:34Z")

</div>

I follow the Elastic tutorial and experience and error when I use the curl code provided in the tutorial: curl -H "Content-Type: application/json" -XPOST 'localhost:9200/bank/account/\_bulk?pretty&refresh' --data-binary …

---

## [Time Series + Aggregation + Netflow](https://discuss.elastic.co/t/time-series-aggregation-netflow/114568)

<div class="topic-metadata">

**Author:** [@j-white](https://discuss.elastic.co/u/j-white)\
**Replies:** 1\
**Last updated:** [January 10, 2018, 4:46pm UTC](https://discuss.elastic.co/t/time-series-aggregation-netflow/114568 "2018-01-10T16:46:01Z")

</div>

We are looking to generate time series data for Netflow records stored in ES and we’re facing some challenges in determining the appropriate way to perform necessary aggregations. In our case, each Netflow record is sto…

---

## [How to change the field content of an index](https://discuss.elastic.co/t/how-to-change-the-field-content-of-an-index/114833)

<div class="topic-metadata">

**Author:** [@chrigui94](https://discuss.elastic.co/u/chrigui94)\
**Replies:** 1\
**Last updated:** [January 10, 2018, 3:34pm UTC](https://discuss.elastic.co/t/how-to-change-the-field-content-of-an-index/114833 "2018-01-10T15:34:15Z")

</div>

I have an index contains only one document with a field that contains an integer ("lns": 3) and I want to change it to ("lns": 5) ... I did : PUT logstash-2018.01.09/\_type/0 { "lns":3 } when I go to discover of kiba…

---

## [Shards stuck in INITIALIZING state after CLUSTER restart](https://discuss.elastic.co/t/shards-stuck-in-initializing-state-after-cluster-restart/113394)

<div class="topic-metadata">

**Author:** [@Vijaysimha\_Naik](https://discuss.elastic.co/u/Vijaysimha_Naik)\
**Replies:** 3\
**Last updated:** [January 10, 2018, 4:39pm UTC](https://discuss.elastic.co/t/shards-stuck-in-initializing-state-after-cluster-restart/113394 "2018-01-10T16:39:23Z")

</div>

Elasticsearch version (bin/elasticsearch --version): 1.1.1 Plugins installed: \[\] JVM version (java -version):openjdk version "1.8.0\_151" OS version (uname -a if on a Unix-like system): x86\_64 x86\_64 x86\_64 GNU/Linux I…

---

## [Unable to install ingest-geoip](https://discuss.elastic.co/t/unable-to-install-ingest-geoip/114860)

<div class="topic-metadata">

**Author:** [@annk](https://discuss.elastic.co/u/annk)\
**Replies:** 1\
**Last updated:** [January 10, 2018, 4:08pm UTC](https://discuss.elastic.co/t/unable-to-install-ingest-geoip/114860 "2018-01-10T16:08:27Z")

</div>

I am getting this error in filebeat logs after I enabled system module. 2018-01-10T11:18:56Z ERR Failed to connect: Connection marked as failed because the onConnect callback failed: Error loading pipeline for fileset …

---

## [Stopping dynamic mapping of fields from URIs](https://discuss.elastic.co/t/stopping-dynamic-mapping-of-fields-from-uris/113830)

<div class="topic-metadata">

**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\
**Replies:** 1\
**Last updated:** [January 10, 2018, 4:32pm UTC](https://discuss.elastic.co/t/stopping-dynamic-mapping-of-fields-from-uris/113830 "2018-01-10T16:32:06Z")

</div>

So we are indexing events where one of their fields is the URI of a web request. This value goes into the field of URI (obviously). However, as you know, the URI can be fairly complicated. With dynamic mapping enabled…

---

## [Cross cluster search stops working after some time. ES: 6.1.1 Kibana: 6.0](https://discuss.elastic.co/t/cross-cluster-search-stops-working-after-some-time-es-6-1-1-kibana-6-0/114334)

<div class="topic-metadata">

**Author:** [@dantete](https://discuss.elastic.co/u/dantete)\
**Replies:** 5\
**Last updated:** [January 10, 2018, 4:15pm UTC](https://discuss.elastic.co/t/cross-cluster-search-stops-working-after-some-time-es-6-1-1-kibana-6-0/114334 "2018-01-10T16:15:11Z")

</div>

I am testing Cross cluster search. I have 2 cluster with 2 nodes each one, but only works when i restart both clusters. I can see the results from both cluster in Kibana and console (throught search API). I can see th…

---

## [Are Elasticsearch X-Pack Watcher settings dynamic or static?](https://discuss.elastic.co/t/are-elasticsearch-x-pack-watcher-settings-dynamic-or-static/114904)

<div class="topic-metadata">

**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\
**Replies:** 2\
**Last updated:** [January 10, 2018, 4:07pm UTC](https://discuss.elastic.co/t/are-elasticsearch-x-pack-watcher-settings-dynamic-or-static/114904 "2018-01-10T16:07:32Z")

</div>

I need to make one change to the x-pack settings on my ES cluster. According to: https://www.elastic.co/guide/en/elasticsearch/reference/5.6/modules.html some settings can be updated via the cluster-update-settings AP…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1830)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1832)
