# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1836

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1837

---

## [Enable inline scripting (painless)](https://discuss.elastic.co/t/enable-inline-scripting-painless/114296)

<div class="topic-metadata">

**Author:** [@cilzzz](https://discuss.elastic.co/u/cilzzz)\
**Replies:** 3\
**Last updated:** [January 5, 2018, 6:43pm UTC](https://discuss.elastic.co/t/enable-inline-scripting-painless/114296 "2018-01-05T18:43:10Z")

</div>

Hi when trying to write scripted field in kibana i've got an error that says : Scripting disabled: All inline scripting has been disabled in Elasticsearch. You must enable inline scripting for at least one language in o…

---

## [Trouble with multiple synonym filters in a single analyzer](https://discuss.elastic.co/t/trouble-with-multiple-synonym-filters-in-a-single-analyzer/114305)

<div class="topic-metadata">

**Author:** [@paul.m](https://discuss.elastic.co/u/paul.m)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 6:19pm UTC](https://discuss.elastic.co/t/trouble-with-multiple-synonym-filters-in-a-single-analyzer/114305 "2018-01-05T18:19:29Z")

</div>

When playing around with various schemes for implementing synonyms, I'll occasionally get 400s when trying to create the index, with the message 'failed to build synonyms'. Below are settings that replicate the issue: …

---

## [How can I view ALL buckets in aggregations?](https://discuss.elastic.co/t/how-can-i-view-all-buckets-in-aggregations/114303)

<div class="topic-metadata">

**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\
**Replies:** 8\
**Last updated:** [January 5, 2018, 5:30pm UTC](https://discuss.elastic.co/t/how-can-i-view-all-buckets-in-aggregations/114303 "2018-01-05T17:30:10Z")

</div>

For example, I have an aggregation of IP addresses and want to see the counts of them. However, I realized that it only shows however many you set show to. I need a list of every IP address and the total counts of each, …

---

## [Elastic Search with Kafka](https://discuss.elastic.co/t/elastic-search-with-kafka/114310)

<div class="topic-metadata">

**Author:** [@senthil.nathanm](https://discuss.elastic.co/u/senthil.nathanm)\
**Replies:** 0\
**Last updated:** [January 5, 2018, 4:35pm UTC](https://discuss.elastic.co/t/elastic-search-with-kafka/114310 "2018-01-05T16:35:23Z")

</div>

Hi Team We are deliberating the feasibility of adding Confluent Kafka as a message broker to our Elastic Search instance. Now that logstash comes with its own persistence and dead letter queues, I have some questions i…

---

## [integTest failing despite following documentation](https://discuss.elastic.co/t/integtest-failing-despite-following-documentation/114022)

<div class="topic-metadata">

**Author:** [@joanneong](https://discuss.elastic.co/u/joanneong)\
**Replies:** 3\
**Last updated:** [January 5, 2018, 4:25pm UTC](https://discuss.elastic.co/t/integtest-failing-despite-following-documentation/114022 "2018-01-05T16:25:34Z")

</div>

Hello there. I am looking to contribute to Elasticsearch as a GitHub contributor in the near future. I have been following this document closely, but I am now facing some trouble that I cannot resolve without additional …

---

## [Unassigned shards, crashed cluster recovery](https://discuss.elastic.co/t/unassigned-shards-crashed-cluster-recovery/113833)

<div class="topic-metadata">

**Author:** [@wweeder](https://discuss.elastic.co/u/wweeder)\
**Replies:** 8\
**Last updated:** [January 5, 2018, 4:19pm UTC](https://discuss.elastic.co/t/unassigned-shards-crashed-cluster-recovery/113833 "2018-01-05T16:19:41Z")

</div>

Hello, I am trying to get a production ELK stack working again. It is stuck on 'indexing' in kibana. I do not care about past log data at all. I just want it to work again for new data. Here are the details: I have rec…

---

## [Curator SSL Warning Suppression?](https://discuss.elastic.co/t/curator-ssl-warning-suppression/114174)

<div class="topic-metadata">

**Author:** [@timvisher](https://discuss.elastic.co/u/timvisher)\
**Replies:** 6\
**Last updated:** [January 5, 2018, 3:59pm UTC](https://discuss.elastic.co/t/curator-ssl-warning-suppression/114174 "2018-01-05T15:59:36Z")

</div>

I would like to suppress the urllib3 warnings about insecure SSL usage. However, none of the usual means work for me. even PYTHONWARNINGS=ignore which is more of a blanket statement than I'd like to make continues to all…

---

## [Multiple primary shards vs Replicas - why?](https://discuss.elastic.co/t/multiple-primary-shards-vs-replicas-why/113956)

<div class="topic-metadata">

**Author:** [@afrozl](https://discuss.elastic.co/u/afrozl)\
**Replies:** 2\
**Last updated:** [January 5, 2018, 3:17pm UTC](https://discuss.elastic.co/t/multiple-primary-shards-vs-replicas-why/113956 "2018-01-05T15:17:14Z")

</div>

If I understand correctly, the benefits of creating indices with multiple primary shards is to allow for parallelization in reads/writes as well as the ability to segregate documents to specific shards via routing. How…

---

## [How to add new field to existing docs](https://discuss.elastic.co/t/how-to-add-new-field-to-existing-docs/114135)

<div class="topic-metadata">

**Author:** [@dh2001](https://discuss.elastic.co/u/dh2001)\
**Replies:** 5\
**Last updated:** [January 5, 2018, 3:07pm UTC](https://discuss.elastic.co/t/how-to-add-new-field-to-existing-docs/114135 "2018-01-05T15:07:50Z")

</div>

I tried using \_reindex, but I get an error. I want to add a new field and initialize it to an existing value. I added the new field to the mapping and I created the dest index. curl -s -XPOST 'http://localhost:9200/\_rei…

---

## [\[elasticserach performance\] Elasticsearch-spend-all-time-in-build-scorer](https://discuss.elastic.co/t/elasticserach-performance-elasticsearch-spend-all-time-in-build-scorer/113717)

<div class="topic-metadata">

**Author:** [@Holygost](https://discuss.elastic.co/u/Holygost)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 2:21pm UTC](https://discuss.elastic.co/t/elasticserach-performance-elasticsearch-spend-all-time-in-build-scorer/113717 "2018-01-05T14:21:56Z")

</div>

I use ES 5.5.0，and I have the same problem that the time almost cost at build\_scorer, detail as follow:

---

## [Elasticsearch process is running even after Elasticsearch service is stopped](https://discuss.elastic.co/t/elasticsearch-process-is-running-even-after-elasticsearch-service-is-stopped/113887)

<div class="topic-metadata">

**Author:** [@ShilpiRachna](https://discuss.elastic.co/u/ShilpiRachna)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 2:12pm UTC](https://discuss.elastic.co/t/elasticsearch-process-is-running-even-after-elasticsearch-service-is-stopped/113887 "2018-01-05T14:12:38Z")

</div>

We are using Elasticsearch version 5.4.1 on Windows 10. We run it as windows service (using elasticsearch-service.bat). Sometimes, when we try to stop the elasticsearch service, it stops but the elasticsearch process ke…

---

## [Return both aggregation AND field value in ES](https://discuss.elastic.co/t/return-both-aggregation-and-field-value-in-es/113985)

<div class="topic-metadata">

**Author:** [@Natalia\_Kuleniuk](https://discuss.elastic.co/u/Natalia_Kuleniuk)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 2:11pm UTC](https://discuss.elastic.co/t/return-both-aggregation-and-field-value-in-es/113985 "2018-01-05T14:11:05Z")

</div>

Let’s say that each document in my ES index has following fields: ASIN, name, referenceNumber, videoViews, timeWatched There can be many documents with the same ASIN fields. I’m doing teams aggregation, that aggregate…

---

## [Restore multiple months of data](https://discuss.elastic.co/t/restore-multiple-months-of-data/114286)

<div class="topic-metadata">

**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\
**Replies:** 2\
**Last updated:** [January 5, 2018, 1:57pm UTC](https://discuss.elastic.co/t/restore-multiple-months-of-data/114286 "2018-01-05T13:57:09Z")

</div>

Hi, I have been requested to restore multiple months of data for people search historical log files. I have been backing up my elasticsearch indexes for +1 year to S3 via the backup/restore API in Elastic I create an i…

---

## [Elasticsearch after taking some logs passes the message "Attempted bulk request to the elasticsearch"](https://discuss.elastic.co/t/elasticsearch-after-taking-some-logs-passes-the-message-attempted-bulk-request-to-the-elasticsearch/114280)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 5\
**Last updated:** [January 5, 2018, 1:36pm UTC](https://discuss.elastic.co/t/elasticsearch-after-taking-some-logs-passes-the-message-attempted-bulk-request-to-the-elasticsearch/114280 "2018-01-05T13:36:49Z")

</div>

As after passing certain logs logstash is displaying a message \[2018-01-05T12:57:50,735\]\[ERROR\]\[logstash.outputs.elasticsearch\] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreacha…

---

## [Searching Integer with wild cards](https://discuss.elastic.co/t/searching-integer-with-wild-cards/114262)

<div class="topic-metadata">

**Author:** [@Prashant.kasodariya](https://discuss.elastic.co/u/Prashant.kasodariya)\
**Replies:** 5\
**Last updated:** [January 5, 2018, 1:16pm UTC](https://discuss.elastic.co/t/searching-integer-with-wild-cards/114262 "2018-01-05T13:16:26Z")

</div>

Can anyone please help me identifying how to use wild cards for integer searches? I tried using the inline script but no luck. This is what I have tried (I have also tried with different regex pattern which works for jav…

---

## [ELK Stack (version 6 ) for Production](https://discuss.elastic.co/t/elk-stack-version-6-for-production/113029)

<div class="topic-metadata">

**Author:** [@raghureddyads](https://discuss.elastic.co/u/raghureddyads)\
**Replies:** 4\
**Last updated:** [January 5, 2018, 1:13pm UTC](https://discuss.elastic.co/t/elk-stack-version-6-for-production/113029 "2018-01-05T13:13:00Z")

</div>

Hi All, I am installing elasticsearch stack in our environment for testing purpose. Linux -OS : CentOS 6.9 JAVA JDK 1.8 Reference for installtion: elastic.co Elasticsearch 6.0.0 Kibana 6.…

---

## [Bucket script aggregation error](https://discuss.elastic.co/t/bucket-script-aggregation-error/114106)

<div class="topic-metadata">

**Author:** [@Frank\_Matera](https://discuss.elastic.co/u/Frank_Matera)\
**Replies:** 4\
**Last updated:** [January 5, 2018, 12:54pm UTC](https://discuss.elastic.co/t/bucket-script-aggregation-error/114106 "2018-01-05T12:54:30Z")

</div>

I am trying to create a bucket script based off of 2 single metric buckets and am having no luck. My initial bucket query works: { "query": { "bool": { "must": \[ { "match": { "call\_ty": "10"} }, …

---

## [ELK Stack 6.x vs EFK Stack 6.x, general guideline for Hardware Sizing resources (recommendation)?](https://discuss.elastic.co/t/elk-stack-6-x-vs-efk-stack-6-x-general-guideline-for-hardware-sizing-resources-recommendation/114261)

<div class="topic-metadata">

**Author:** [@fchiorascu](https://discuss.elastic.co/u/fchiorascu)\
**Replies:** 0\
**Last updated:** [January 5, 2018, 9:53am UTC](https://discuss.elastic.co/t/elk-stack-6-x-vs-efk-stack-6-x-general-guideline-for-hardware-sizing-resources-recommendation/114261 "2018-01-05T09:53:51Z")

</div>

Hi, I'm sorry for the post. I have read all the Internet recommendation but is not so clear. In fact I want to deploy ELK Stack and EFK Stack and for this I didn't find any "general guideline for Hardware sizing of re…

---

## [Elastic search source extraction](https://discuss.elastic.co/t/elastic-search-source-extraction/113219)

<div class="topic-metadata">

**Author:** [@Deepak\_Mehta1](https://discuss.elastic.co/u/Deepak_Mehta1)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 11:49am UTC](https://discuss.elastic.co/t/elastic-search-source-extraction/113219 "2018-01-05T11:49:37Z")

</div>

We have query where we are excluding long text field "content" from query (including other 7-8 fields) but highlighting on "content" and "description" field ("content is excluded from source") . My question is how many…

---

## [Can't get the Upgrade Assistant to work](https://discuss.elastic.co/t/cant-get-the-upgrade-assistant-to-work/114269)

<div class="topic-metadata">

**Author:** [@Rok](https://discuss.elastic.co/u/Rok)\
**Replies:** 2\
**Last updated:** [January 5, 2018, 11:25am UTC](https://discuss.elastic.co/t/cant-get-the-upgrade-assistant-to-work/114269 "2018-01-05T11:25:57Z")

</div>

Hey everyone, I have ELK stack version 6.1.1 installed with corresponding x-pack plugin, but there is no Upgrade Assistant in Kibana\>Management. The only thing I see is license management under elasticsearch and kibana …

---

## [Date Format UTC in Elastic Search Query](https://discuss.elastic.co/t/date-format-utc-in-elastic-search-query/113903)

<div class="topic-metadata">

**Author:** [@rakesh1](https://discuss.elastic.co/u/rakesh1)\
**Replies:** 2\
**Last updated:** [January 5, 2018, 11:09am UTC](https://discuss.elastic.co/t/date-format-utc-in-elastic-search-query/113903 "2018-01-05T11:09:03Z")

</div>

Hi , Section of my elastic search query - "bool": { "must\_not": { "range": { "lastsynctoes\_date": { "gte": "now/d", "lte": "now/d" } } }, ... } This works well, however, picks up the server date time (UTC) w…

---

## [\[ESv5.6\] Cluster and shards problems](https://discuss.elastic.co/t/esv5-6-cluster-and-shards-problems/112389)

<div class="topic-metadata">

**Author:** [@alias](https://discuss.elastic.co/u/alias)\
**Replies:** 8\
**Last updated:** [January 5, 2018, 9:52am UTC](https://discuss.elastic.co/t/esv5-6-cluster-and-shards-problems/112389 "2018-01-05T09:52:04Z")

</div>

Hi all, I've cluster and shards problem on my ES cluster in v5.6. Node01 : # cat /etc/elasticsearch/elasticsearch.yml | grep -v "^#" cluster.name: escluster node.name: node-01 node.master: true node.data: false path.d…

---

## [After done setting threadpool its not start again](https://discuss.elastic.co/t/after-done-setting-threadpool-its-not-start-again/114249)

<div class="topic-metadata">

**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 9:47am UTC](https://discuss.elastic.co/t/after-done-setting-threadpool-its-not-start-again/114249 "2018-01-05T09:47:05Z")

</div>

Hello.. When I changes the threadpool settings like this in elasticsearch.yml...and after this when I restart elastic search. It always stop. And when I remove below settings, its start. Can anyone tell me any reason f…

---

## [Unassigned shards during rolling upgrade 5.5 -\> 5.6.4](https://discuss.elastic.co/t/unassigned-shards-during-rolling-upgrade-5-5-5-6-4/114233)

<div class="topic-metadata">

**Author:** [@jammann](https://discuss.elastic.co/u/jammann)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 9:23am UTC](https://discuss.elastic.co/t/unassigned-shards-during-rolling-upgrade-5-5-5-6-4/114233 "2018-01-05T09:23:37Z")

</div>

I was doing an upgrade of a 5 node cluster 5.5 -\> 5.6.4. 2 nodes are dataless. All indices have 1 replica. After upgrading the first node, some indices went YELLOW and would stay so (this is in test environment, so I wa…

---

## [How to Disable X-pack security 6.1.1 in Elasticsearch 6.1.1?](https://discuss.elastic.co/t/how-to-disable-x-pack-security-6-1-1-in-elasticsearch-6-1-1/114105)

<div class="topic-metadata">

**Author:** [@Rym\_Guerbi\_Michaut](https://discuss.elastic.co/u/Rym_Guerbi_Michaut)\
**Replies:** 2\
**Last updated:** [January 5, 2018, 8:56am UTC](https://discuss.elastic.co/t/how-to-disable-x-pack-security-6-1-1-in-elasticsearch-6-1-1/114105 "2018-01-05T08:56:06Z")

</div>

Hi there, I've just installed the new version 6.1.1 of Elsticsearch, Kibana and Logstash. At the same time, I installed x-pack for the three of them (thinking it might be interesting to have it in Kibana for the graphs…

---

## [Elasticsearch5.6 for Production No of shards etc](https://discuss.elastic.co/t/elasticsearch5-6-for-production-no-of-shards-etc/114206)

<div class="topic-metadata">

**Author:** [@Dilip\_Kumar](https://discuss.elastic.co/u/Dilip_Kumar)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 8:46am UTC](https://discuss.elastic.co/t/elasticsearch5-6-for-production-no-of-shards-etc/114206 "2018-01-05T08:46:34Z")

</div>

Hi, I have move on production and having 6 indices . One index daily insertion about 5 million records with one record of 200 byte and 2nd index with 1 kb daily 1 million , so how many shard i have to take for this, i h…

---

## [When the index library has no data, the type of the field is date](https://discuss.elastic.co/t/when-the-index-library-has-no-data-the-type-of-the-field-is-date/114195)

<div class="topic-metadata">

**Author:** [@hubiao](https://discuss.elastic.co/u/hubiao)\
**Replies:** 15\
**Last updated:** [January 5, 2018, 8:42am UTC](https://discuss.elastic.co/t/when-the-index-library-has-no-data-the-type-of-the-field-is-date/114195 "2018-01-05T08:42:08Z")

</div>

Environmental Science：Windows 7 Version : elasticsearch 5.5 index mapping "createDate": { "type": "date", "store": "true", "format": "yyyy-MM-dd HH:mm:ss" } GET /data/\_search {"from":0,"s…

---

## [Elastic Search with GUID](https://discuss.elastic.co/t/elastic-search-with-guid/114215)

<div class="topic-metadata">

**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\
**Replies:** 2\
**Last updated:** [January 5, 2018, 8:29am UTC](https://discuss.elastic.co/t/elastic-search-with-guid/114215 "2018-01-05T08:29:46Z")

</div>

Hi I am trying to search with a column having GIUD as value Search Query ElasticsearchResponse\<string\> objElasticResponse = objClient.Search\<string\>("pupil", "pupil", @" { ""query"" : { …

---

## [Finding whole terms](https://discuss.elastic.co/t/finding-whole-terms/114003)

<div class="topic-metadata">

**Author:** [@jnpetty](https://discuss.elastic.co/u/jnpetty)\
**Replies:** 3\
**Last updated:** [January 5, 2018, 8:01am UTC](https://discuss.elastic.co/t/finding-whole-terms/114003 "2018-01-05T08:01:45Z")

</div>

I am having trouble setting up a watcher so it looks for a whole term instead of individual words. For example if I had a message that contained "The red hat hung on the hook" and wanted watcher to send an email every ti…

---

## [Select Operation Holds Insert /Updates reflection](https://discuss.elastic.co/t/select-operation-holds-insert-updates-reflection/113209)

<div class="topic-metadata">

**Author:** [@itsmedoss](https://discuss.elastic.co/u/itsmedoss)\
**Replies:** 5\
**Last updated:** [January 5, 2018, 8:00am UTC](https://discuss.elastic.co/t/select-operation-holds-insert-updates-reflection/113209 "2018-01-05T08:00:55Z")

</div>

We are looking out replacement for our existing SPHINX cluster for search, we are evaluating SOLR & Elasticsearch. We need real time index and fast response for selects. For our POC we are using 2 cent OS (64 bit) boxes …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1835)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1837)
