# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1854

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1855

---

## [Only Process Newly indexed documents](https://discuss.elastic.co/t/only-process-newly-indexed-documents/111785)

<div class="topic-metadata">

**Author:** [@sparklegoat](https://discuss.elastic.co/u/sparklegoat)\
**Replies:** 5\
**Last updated:** [December 14, 2017, 3:26pm UTC](https://discuss.elastic.co/t/only-process-newly-indexed-documents/111785 "2017-12-14T15:26:39Z")

</div>

Is there a way to get the date and time that an elastic search document was written? Looking to run over data hourly and not have to consume data I have already processed in prior runs. The negatives to the options I hav…

---

## [Need Query for delete last 30 days date](https://discuss.elastic.co/t/need-query-for-delete-last-30-days-date/111579)

<div class="topic-metadata">

**Author:** [@Naresh](https://discuss.elastic.co/u/Naresh)\
**Replies:** 7\
**Last updated:** [December 14, 2017, 2:58pm UTC](https://discuss.elastic.co/t/need-query-for-delete-last-30-days-date/111579 "2017-12-14T14:58:32Z")

</div>

Need Query for delete before 30 days date curl -u userid:password -XDELETE 'http://elasticsearch.\*' -d ' { "query": { "filtered" : { "query" : { }, "filter" : { "range" : { "@timestamp" : { "lt" : "now-30d" }} } …

---

## [Elasticsearch record aggregation in Power BI](https://discuss.elastic.co/t/elasticsearch-record-aggregation-in-power-bi/111374)

<div class="topic-metadata">

**Author:** [@wendt](https://discuss.elastic.co/u/wendt)\
**Replies:** 2\
**Last updated:** [December 14, 2017, 2:11pm UTC](https://discuss.elastic.co/t/elasticsearch-record-aggregation-in-power-bi/111374 "2017-12-14T14:11:09Z")

</div>

Hi there! I'm hoping someone here will have encountered a similar problem. I'm trying to query the Elasticsearch API to pull data into Power BI for visualization. What I quickly realized is that with larger datasets (\>1…

---

## [Management threads blocked on TranslogWriter.syncUpTo](https://discuss.elastic.co/t/management-threads-blocked-on-translogwriter-syncupto/110036)

<div class="topic-metadata">

**Author:** [@KBuev](https://discuss.elastic.co/u/KBuev)\
**Replies:** 18\
**Last updated:** [December 14, 2017, 1:18pm UTC](https://discuss.elastic.co/t/management-threads-blocked-on-translogwriter-syncupto/110036 "2017-12-14T13:18:16Z")

</div>

Hi, everyone. I'm currently struggling with a weird issue after upgrading Elasticsearch from 5.6.4 to 6.0.0 GA. I did a rolling upgrade and I'm now seeing threads from the management pool almost constantly blocked on o…

---

## [Phrase Match Inconsistencies using synonyms and slop](https://discuss.elastic.co/t/phrase-match-inconsistencies-using-synonyms-and-slop/111756)

<div class="topic-metadata">

**Author:** [@sasikiran](https://discuss.elastic.co/u/sasikiran)\
**Replies:** 0\
**Last updated:** [December 14, 2017, 11:29am UTC](https://discuss.elastic.co/t/phrase-match-inconsistencies-using-synonyms-and-slop/111756 "2017-12-14T11:29:56Z")

</div>

hi, I'm using elastic search 2.4 - phrase match query with synonyms. Following is the setup and issues faced. Please suggest. I'm trying to index and access the index in the same session. The input to the following in…

---

## [Need suitable method like writeValueAsString (boolQueryWrapper) in ObjectMapper class for prepare query with out quotes for value](https://discuss.elastic.co/t/need-suitable-method-like-writevalueasstring-boolquerywrapper-in-objectmapper-class-for-prepare-query-with-out-quotes-for-value/111763)

<div class="topic-metadata">

**Author:** [@skodari](https://discuss.elastic.co/u/skodari)\
**Replies:** 0\
**Last updated:** [December 14, 2017, 12:11pm UTC](https://discuss.elastic.co/t/need-suitable-method-like-writevalueasstring-boolquerywrapper-in-objectmapper-class-for-prepare-query-with-out-quotes-for-value/111763 "2017-12-14T12:11:05Z")

</div>

Hi Team, I have prepared this query to fetch docs from one index. GET iso\_country\_index/\_search?size=2000 { "query" : { "bool" : { "must" : \[{ "terms" : { "c…

---

## [Elastic query to fetch multiple docs from multiple indexes based on input(multiple param)](https://discuss.elastic.co/t/elastic-query-to-fetch-multiple-docs-from-multiple-indexes-based-on-input-multiple-param/110829)

<div class="topic-metadata">

**Author:** [@skodari](https://discuss.elastic.co/u/skodari)\
**Replies:** 8\
**Last updated:** [December 14, 2017, 11:57am UTC](https://discuss.elastic.co/t/elastic-query-to-fetch-multiple-docs-from-multiple-indexes-based-on-input-multiple-param/110829 "2017-12-14T11:57:13Z")

</div>

Hi Team, Need an elastic query to fetch multiple docs from multiple indexes based on input. If I have given two fields as input, It needs verify both indexes and fetch the docs, or if at least one match should fetch th…

---

## [Browser got stuck on viewing pipline information](https://discuss.elastic.co/t/browser-got-stuck-on-viewing-pipline-information/111759)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 0\
**Last updated:** [December 14, 2017, 11:50am UTC](https://discuss.elastic.co/t/browser-got-stuck-on-viewing-pipline-information/111759 "2017-12-14T11:50:47Z")

</div>

Hi, I am currently on 6.0.1 with basic license on my dev VM. When clicking on the main pipleine (version a44492) nothing happens. Browser gets stuck on loading (for several minutes) \[grafik\] What is the issue? The o…

---

## [How to get the count of the documents inside term aggregation that have doc\_count as 1?](https://discuss.elastic.co/t/how-to-get-the-count-of-the-documents-inside-term-aggregation-that-have-doc-count-as-1/111753)

<div class="topic-metadata">

**Author:** [@Siddaram\_Jamagav](https://discuss.elastic.co/u/Siddaram_Jamagav)\
**Replies:** 0\
**Last updated:** [December 14, 2017, 11:15am UTC](https://discuss.elastic.co/t/how-to-get-the-count-of-the-documents-inside-term-aggregation-that-have-doc-count-as-1/111753 "2017-12-14T11:15:41Z")

</div>

POST alertbrowser/\_search?size=0 { "query": { "bool": { "must": \[ { "match\_phrase": { "projectId.keyword": "aasish-webdemo-1-1498031057532" } } \], "…

---

## [Elasticsearch 6.0 max\_inner\_result\_window](https://discuss.elastic.co/t/elasticsearch-6-0-max-inner-result-window/111740)

<div class="topic-metadata">

**Author:** [@svarup](https://discuss.elastic.co/u/svarup)\
**Replies:** 0\
**Last updated:** [December 14, 2017, 10:35am UTC](https://discuss.elastic.co/t/elasticsearch-6-0-max-inner-result-window/111740 "2017-12-14T10:35:36Z")

</div>

In elasticsearch 6.0 one new parameter is added called index.max\_inner\_result\_window in index setting, the default value of this parameter is 100. So can anybody explain what is the use of this parameter with example. i…

---

## [Insertion/search failure - elasticsearch2.4.0](https://discuss.elastic.co/t/insertion-search-failure-elasticsearch2-4-0/111737)

<div class="topic-metadata">

**Author:** [@aditya7](https://discuss.elastic.co/u/aditya7)\
**Replies:** 3\
**Last updated:** [December 14, 2017, 10:35am UTC](https://discuss.elastic.co/t/insertion-search-failure-elasticsearch2-4-0/111737 "2017-12-14T10:35:52Z")

</div>

Hi, I am using elasticsearch-2.4.0 in cluster having two nodes (configured on seperate servers). I have allocated 15gb of RAM to each of the nodes. (50% of total RAM) and using bulk insertion. Sometimes following seri…

---

## [Reindex to another node without replica](https://discuss.elastic.co/t/reindex-to-another-node-without-replica/111722)

<div class="topic-metadata">

**Author:** [@zeenon](https://discuss.elastic.co/u/zeenon)\
**Replies:** 1\
**Last updated:** [December 14, 2017, 10:16am UTC](https://discuss.elastic.co/t/reindex-to-another-node-without-replica/111722 "2017-12-14T10:16:48Z")

</div>

Hi, I have to copy an index from another cluster to a sandbox cluster. with POST \_reindex { "source": { "remote": { "host": "http://up0tx807:9200" }, "index": "idx\_pmm-2017.11.30" }, "dest": { …

---

## [High indexing rate on .monitoring-es-\*](https://discuss.elastic.co/t/high-indexing-rate-on-monitoring-es/111688)

<div class="topic-metadata">

**Author:** [@dhrm](https://discuss.elastic.co/u/dhrm)\
**Replies:** 1\
**Last updated:** [December 14, 2017, 10:05am UTC](https://discuss.elastic.co/t/high-indexing-rate-on-monitoring-es/111688 "2017-12-14T10:05:32Z")

</div>

I'm currently bulk importing documents from Filebeat to Logstash to ElasticSearch. My overall indexing rate is about 500-600 /s, but the .monitoring-es-\* index is about 160 /s. Is it normal that the monitoring mechanism …

---

## [Cannot create custom track](https://discuss.elastic.co/t/cannot-create-custom-track/111589)

<div class="topic-metadata">

**Author:** [@Andrey\_Masunov](https://discuss.elastic.co/u/Andrey_Masunov)\
**Replies:** 4\
**Last updated:** [December 14, 2017, 9:57am UTC](https://discuss.elastic.co/t/cannot-create-custom-track/111589 "2017-12-14T09:57:30Z")

</div>

I've tried to create my track for rally, step by step based on (http://esrally.readthedocs.io/en/stable/adding\_tracks.html#) But already at step esrally list tracks --track-path=~/rally-tracks/tutorial I've faced error…

---

## [ELK definitive guide book by Clinton Gormley & Zachary Tong](https://discuss.elastic.co/t/elk-definitive-guide-book-by-clinton-gormley-zachary-tong/111691)

<div class="topic-metadata">

**Author:** [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)\
**Replies:** 0\
**Last updated:** [December 14, 2017, 6:53am UTC](https://discuss.elastic.co/t/elk-definitive-guide-book-by-clinton-gormley-zachary-tong/111691 "2017-12-14T06:53:09Z")

</div>

I have been reading this book "ELK definitive guide book by Clinton Gormley & Zachary Tong" for the past week or so. I have some doubts. On this ebook,page 6 under Talking to Elasticsearch. What is meant by "If using Jav…

---

## [Aggregation paging problem](https://discuss.elastic.co/t/aggregation-paging-problem/111674)

<div class="topic-metadata">

**Author:** [@lukekingbru](https://discuss.elastic.co/u/lukekingbru)\
**Replies:** 3\
**Last updated:** [December 14, 2017, 9:25am UTC](https://discuss.elastic.co/t/aggregation-paging-problem/111674 "2017-12-14T09:25:51Z")

</div>

My data set is very even distributed, the buckets is very large, how can we do the paging against the paging buckets ? For instance, the buckets size is 1000,000 ?

---

## [ERROR org.elasticsearch.transport.netty4.Netty4Utils - fatal error on the network layer](https://discuss.elastic.co/t/error-org-elasticsearch-transport-netty4-netty4utils-fatal-error-on-the-network-layer/111693)

<div class="topic-metadata">

**Author:** [@ent\_1](https://discuss.elastic.co/u/ent_1)\
**Replies:** 0\
**Last updated:** [December 14, 2017, 7:08am UTC](https://discuss.elastic.co/t/error-org-elasticsearch-transport-netty4-netty4utils-fatal-error-on-the-network-layer/111693 "2017-12-14T07:08:39Z")

</div>

Hi I am facing "\[elasticsearch\[client\]\[transport\_client\_boss\]\[T#2\]\] ERROR org.elasticsearch.transport.netty4.Netty4Utils - fatal error on the network layer" while loading 1.5 Million bulk data into elastic search . but…

---

## [Searching attachment content with ingest attachment plugin](https://discuss.elastic.co/t/searching-attachment-content-with-ingest-attachment-plugin/111504)

<div class="topic-metadata">

**Author:** [@takleung](https://discuss.elastic.co/u/takleung)\
**Replies:** 2\
**Last updated:** [December 14, 2017, 6:54am UTC](https://discuss.elastic.co/t/searching-attachment-content-with-ingest-attachment-plugin/111504 "2017-12-14T06:54:18Z")

</div>

Hi, I had tried to follow the example. I can success to insert attachment and get in the details. But don't know how to do search with content. For example, I would like to return "filename" & word position in document w…

---

## [Killing 1 node causes hanging bulk requests](https://discuss.elastic.co/t/killing-1-node-causes-hanging-bulk-requests/111520)

<div class="topic-metadata">

**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\
**Replies:** 3\
**Last updated:** [December 14, 2017, 4:32am UTC](https://discuss.elastic.co/t/killing-1-node-causes-hanging-bulk-requests/111520 "2017-12-14T04:32:14Z")

</div>

After killing 1 node (without -9) out of 3 nodes in the cluster, bulk create via transport client hangs for minutes! The logs show: \[2017-12-13T10:52:58,703\]\[INFO \]\[o.e.c.r.a.AllocationService\] \[node-3\] Cluster health …

---

## [Linear sort with state](https://discuss.elastic.co/t/linear-sort-with-state/110685)

<div class="topic-metadata">

**Author:** [@alex-zefo](https://discuss.elastic.co/u/alex-zefo)\
**Replies:** 0\
**Last updated:** [December 7, 2017, 2:09pm UTC](https://discuss.elastic.co/t/linear-sort-with-state/110685 "2017-12-07T14:09:47Z")

</div>

Is there a way in which documents coming from a search can be sorted in a linear fashion using some logic that requires keeping a state. I want to push the documents matching a particular tag that is already seen to the …

---

## [Error while setting up elasticsearch](https://discuss.elastic.co/t/error-while-setting-up-elasticsearch/111585)

<div class="topic-metadata">

**Author:** [@ArunaMaurya221B](https://discuss.elastic.co/u/ArunaMaurya221B)\
**Replies:** 4\
**Last updated:** [December 14, 2017, 3:02am UTC](https://discuss.elastic.co/t/error-while-setting-up-elasticsearch/111585 "2017-12-14T03:02:58Z")

</div>

This is the message that I get when I run it in the terminal. Can anyone help me out? $ sudo systemctl status elasticsearch sudo: unable to resolve host u4cse16113 ● elasticsearch.service - Elasticsearch Loaded: load…

---

## [Docker images not yet available?](https://discuss.elastic.co/t/docker-images-not-yet-available/111637)

<div class="topic-metadata">

**Author:** [@anthony-o](https://discuss.elastic.co/u/anthony-o)\
**Replies:** 2\
**Last updated:** [December 14, 2017, 2:43am UTC](https://discuss.elastic.co/t/docker-images-not-yet-available/111637 "2017-12-14T02:43:27Z")

</div>

I'm trying to pull Docker image docker.elastic.co/elasticsearch/elasticsearch-oss:6.1.0 (actually it's a FROM directive in a Dockerfile) and here is the result: Step 1 : FROM docker.elastic.co/elasticsearch/elasticsearc…

---

## [How can i send an alerting email by watcher successsfully?](https://discuss.elastic.co/t/how-can-i-send-an-alerting-email-by-watcher-successsfully/111672)

<div class="topic-metadata">

**Author:** [@isummersing](https://discuss.elastic.co/u/isummersing)\
**Replies:** 1\
**Last updated:** [December 14, 2017, 2:29am UTC](https://discuss.elastic.co/t/how-can-i-send-an-alerting-email-by-watcher-successsfully/111672 "2017-12-14T02:29:21Z")

</div>

I am new for elastic, and i want to use watcher for alerting. I have tried many times and they were failed, i think i am not really understand how the watcher run and how to use it. anyone who can teach me how to use i…

---

## [Time zone issue](https://discuss.elastic.co/t/time-zone-issue/111665)

<div class="topic-metadata">

**Author:** [@lukekingbru](https://discuss.elastic.co/u/lukekingbru)\
**Replies:** 1\
**Last updated:** [December 14, 2017, 12:09am UTC](https://discuss.elastic.co/t/time-zone-issue/111665 "2017-12-14T00:09:29Z")

</div>

Hi, I need to insert some date type time which is not in UTC time. Is that possible to do that ?

---

## [Error on reindex using WordNet synonyms file](https://discuss.elastic.co/t/error-on-reindex-using-wordnet-synonyms-file/109692)

<div class="topic-metadata">

**Author:** [@techpeace](https://discuss.elastic.co/u/techpeace)\
**Replies:** 4\
**Last updated:** [December 13, 2017, 11:06pm UTC](https://discuss.elastic.co/t/error-on-reindex-using-wordnet-synonyms-file/109692 "2017-12-13T23:06:31Z")

</div>

Running elasticsearch 6.0.0 on macOS 10.12.6, I'm encountering the following error on indexing when trying to use the wn\_s.pl synonyms file (which I've moved to /usr/local/etc/elasticsearch): { "error": { "root\_cause…

---

## [Whats the status of Elasticsearch and G1GC?](https://discuss.elastic.co/t/whats-the-status-of-elasticsearch-and-g1gc/111656)

<div class="topic-metadata">

**Author:** [@Zuhaib\_Siddique](https://discuss.elastic.co/u/Zuhaib_Siddique)\
**Replies:** 1\
**Last updated:** [December 13, 2017, 11:04pm UTC](https://discuss.elastic.co/t/whats-the-status-of-elasticsearch-and-g1gc/111656 "2017-12-13T23:04:12Z")

</div>

We are seeing hourly GC pauses on our cluster (seems to be on old). Looking at the old Java tickets it seems the issue has been addressed tho the warning on the Lucene page about G1GC and Lucene still remains. Comment…

---

## [New ES user : Issue while installation](https://discuss.elastic.co/t/new-es-user-issue-while-installation/111639)

<div class="topic-metadata">

**Author:** [@Elastic\_user](https://discuss.elastic.co/u/Elastic_user)\
**Replies:** 6\
**Last updated:** [December 13, 2017, 10:39pm UTC](https://discuss.elastic.co/t/new-es-user-issue-while-installation/111639 "2017-12-13T22:39:43Z")

</div>

Hi there, i am few hours in to ES now and trying to install elastic one of my nodes, and have been getting this error, i did look upon my path.conf file and .yml file wherein i didnt find problems (offcourse with limtied…

---

## [Interpreting results](https://discuss.elastic.co/t/interpreting-results/110898)

<div class="topic-metadata">

**Author:** [@loren](https://discuss.elastic.co/u/loren)\
**Replies:** 2\
**Last updated:** [December 13, 2017, 10:25pm UTC](https://discuss.elastic.co/t/interpreting-results/110898 "2017-12-13T22:25:16Z")

</div>

I've read Are there docs to help interpret the results? and ESRally Metrics Definition but still have some questions on interpreting results, specifically those from a tournament. In the results below, the index-append t…

---

## [Querying Elastic Search](https://discuss.elastic.co/t/querying-elastic-search/111189)

<div class="topic-metadata">

**Author:** [@oraclept](https://discuss.elastic.co/u/oraclept)\
**Replies:** 5\
**Last updated:** [December 13, 2017, 9:17pm UTC](https://discuss.elastic.co/t/querying-elastic-search/111189 "2017-12-13T21:17:44Z")

</div>

I want to query across all available indices on given elastic search instance and get following information. List available indices unique host names available across available indices All source log in unique host n…

---

## [Setting up elasticsearch 6.0.1](https://discuss.elastic.co/t/setting-up-elasticsearch-6-0-1/111280)

<div class="topic-metadata">

**Author:** [@Rahul\_Pm](https://discuss.elastic.co/u/Rahul_Pm)\
**Replies:** 4\
**Last updated:** [December 13, 2017, 9:09pm UTC](https://discuss.elastic.co/t/setting-up-elasticsearch-6-0-1/111280 "2017-12-13T21:09:25Z")

</div>

Hi, Im trying to install Elasticsearch 6 on windows using .zip file. I unzipped the file, tried running it from cmd using elasticsearch.bat and initially got an error with JAVA\_HOME. So downloaded JDK 9 ,pointed the loc…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1853)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1855)
