# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1860

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1861

---

## [NodeNotConnectedException Exception in logs due to failed cluster:monitor/nodes/info\[n\] operations](https://discuss.elastic.co/t/nodenotconnectedexception-exception-in-logs-due-to-failed-cluster-monitor-nodes-info-n-operations/110784)

<div class="topic-metadata">

**Author:** [@prachiwadekar](https://discuss.elastic.co/u/prachiwadekar)\
**Replies:** 1\
**Last updated:** [December 10, 2017, 4:33pm UTC](https://discuss.elastic.co/t/nodenotconnectedexception-exception-in-logs-due-to-failed-cluster-monitor-nodes-info-n-operations/110784 "2017-12-10T16:33:35Z")

</div>

Hi, We have a new elasticsearch 2.4.5 cluster. We have been seeing the following exceptions in our logs (in DEBUG mode) on some of the CLIENT nodes: SendRequestTransportException\[\[es-data-2a\]\[172.22.66.102:9300\]\[cl…

---

## [Transfer subset of documents to a different cluster](https://discuss.elastic.co/t/transfer-subset-of-documents-to-a-different-cluster/110977)

<div class="topic-metadata">

**Author:** [@bw2](https://discuss.elastic.co/u/bw2)\
**Replies:** 1\
**Last updated:** [December 10, 2017, 4:27pm UTC](https://discuss.elastic.co/t/transfer-subset-of-documents-to-a-different-cluster/110977 "2017-12-10T16:27:14Z")

</div>

Are there API calls or a tool that I could use to transfer 1% of documents from an index in a production cluster to a test cluster? Hopefully there's some trick using snapshot/restore that I'm not seeing.

---

## [java.lang.NoClassDefFoundError: org/elasticsearch/transport/Netty4Plugin](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-org-elasticsearch-transport-netty4plugin/110959)

<div class="topic-metadata">

**Author:** [@Anjana\_Surendrababu](https://discuss.elastic.co/u/Anjana_Surendrababu)\
**Replies:** 11\
**Last updated:** [December 10, 2017, 2:36pm UTC](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-org-elasticsearch-transport-netty4plugin/110959 "2017-12-10T14:36:11Z")

</div>

I am getting this error on tomcat start. java.lang.NoClassDefFoundError: org/elasticsearch/transport/Netty4Plugin I am using elasticsearch-6.0.0.jar, transport-5.6.4.jar. In maven it showed 5 other jars having compiler …

---

## [How to improve the HTTP Connection Rate?](https://discuss.elastic.co/t/how-to-improve-the-http-connection-rate/110507)

<div class="topic-metadata">

**Author:** [@Eric\_Ngan](https://discuss.elastic.co/u/Eric_Ngan)\
**Replies:** 1\
**Last updated:** [December 10, 2017, 2:34pm UTC](https://discuss.elastic.co/t/how-to-improve-the-http-connection-rate/110507 "2017-12-10T14:34:26Z")

</div>

We recently upgraded our Elastic search server. We found that we have 6 /second on the HTTP Connection Rate from Elastic HQ Keys: stats.http.total\_opened / stats.jvm.uptime\_in\_mills \* 1000 Value: 1190096 / 195744563 \*…

---

## [Snapshots to S3, only meta files are being created in bucket](https://discuss.elastic.co/t/snapshots-to-s3-only-meta-files-are-being-created-in-bucket/109994)

<div class="topic-metadata">

**Author:** [@mikebw](https://discuss.elastic.co/u/mikebw)\
**Replies:** 6\
**Last updated:** [December 10, 2017, 6:56am UTC](https://discuss.elastic.co/t/snapshots-to-s3-only-meta-files-are-being-created-in-bucket/109994 "2017-12-10T06:56:34Z")

</div>

I've setup an S3 as a repository for my cluster and when I create a snapshot, it seems to work, though in the bucket the only think I see created is the meta files. For example if I do this request: PUT https://mycreds…

---

## [Controlling b and k1 values on the BM25 of the unified highlighter](https://discuss.elastic.co/t/controlling-b-and-k1-values-on-the-bm25-of-the-unified-highlighter/110935)

<div class="topic-metadata">

**Author:** [@Sheker](https://discuss.elastic.co/u/Sheker)\
**Replies:** 2\
**Last updated:** [December 9, 2017, 8:04pm UTC](https://discuss.elastic.co/t/controlling-b-and-k1-values-on-the-bm25-of-the-unified-highlighter/110935 "2017-12-09T20:04:35Z")

</div>

Hi, The reference states: "The unified highlighter uses the Lucene Unified Highlighter. This highlighter breaks the text into sentences and uses the BM25 algorithm to score individual sentences as if they were document…

---

## [Many-to-many associations modeling - nested objects vs parent/child relationship](https://discuss.elastic.co/t/many-to-many-associations-modeling-nested-objects-vs-parent-child-relationship/110939)

<div class="topic-metadata">

**Author:** [@dikey94](https://discuss.elastic.co/u/dikey94)\
**Replies:** 2\
**Last updated:** [December 9, 2017, 6:00pm UTC](https://discuss.elastic.co/t/many-to-many-associations-modeling-nested-objects-vs-parent-child-relationship/110939 "2017-12-09T18:00:04Z")

</div>

Hello everyone, I wonder which association model is better in my case. I'm going to use ES to store information about customers and their cases. Each customer has 0-5 cases and each case is related to 0-5 customers (ma…

---

## [Remove unnecessary elements from result for inner hits](https://discuss.elastic.co/t/remove-unnecessary-elements-from-result-for-inner-hits/110938)

<div class="topic-metadata">

**Author:** [@morphers82](https://discuss.elastic.co/u/morphers82)\
**Replies:** 0\
**Last updated:** [December 9, 2017, 4:56pm UTC](https://discuss.elastic.co/t/remove-unnecessary-elements-from-result-for-inner-hits/110938 "2017-12-09T16:56:32Z")

</div>

From this inner hits search result I'd like to only get the source of the inner hits, and not include the nested fields section for each hit( just before the score), because if there are numerous inner hits, including t…

---

## [Installing plugins on elasticsearch docker image using custom Dockerfile](https://discuss.elastic.co/t/installing-plugins-on-elasticsearch-docker-image-using-custom-dockerfile/110931)

<div class="topic-metadata">

**Author:** [@Sarra\_Bouhenni](https://discuss.elastic.co/u/Sarra_Bouhenni)\
**Replies:** 0\
**Last updated:** [December 9, 2017, 11:58am UTC](https://discuss.elastic.co/t/installing-plugins-on-elasticsearch-docker-image-using-custom-dockerfile/110931 "2017-12-09T11:58:51Z")

</div>

Hello, I want to install some plugins using the official elasticsearch docker image from: Official Elasticsearch docker image Here is my Dockerfile #!/bin/bash FROM docker.elastic.co/elasticsearch/elasticsearch:5.5.…

---

## [Wildcard can not search non-English text](https://discuss.elastic.co/t/wildcard-can-not-search-non-english-text/110917)

<div class="topic-metadata">

**Author:** [@bruce88](https://discuss.elastic.co/u/bruce88)\
**Replies:** 4\
**Last updated:** [December 9, 2017, 11:46am UTC](https://discuss.elastic.co/t/wildcard-can-not-search-non-english-text/110917 "2017-12-09T11:46:32Z")

</div>

Yesterday, I used wildcard to search some keywords, but it alway failed to hit the non-English text. Informations are as below. Query Clause { "query": { "bool": { "should": \[ { "wildcard": { "temp\_path": "\*kim…

---

## [How to generate candlesticks](https://discuss.elastic.co/t/how-to-generate-candlesticks/110927)

<div class="topic-metadata">

**Author:** [@sandro2017](https://discuss.elastic.co/u/sandro2017)\
**Replies:** 0\
**Last updated:** [December 9, 2017, 9:39am UTC](https://discuss.elastic.co/t/how-to-generate-candlesticks/110927 "2017-12-09T09:39:05Z")

</div>

i'm trying to add first element's property "open" and last element's property "close" to the inner aggregation. The document looks as follows: { "id": "1b73c03c-182e-4092-bf23-7fb6e2525586", "assetId": 5, "ope…

---

## [Context Suggester with MultiLine geometry as Geo Location Context](https://discuss.elastic.co/t/context-suggester-with-multiline-geometry-as-geo-location-context/110924)

<div class="topic-metadata">

**Author:** [@ahmadazimi](https://discuss.elastic.co/u/ahmadazimi)\
**Replies:** 0\
**Last updated:** [December 9, 2017, 9:07am UTC](https://discuss.elastic.co/t/context-suggester-with-multiline-geometry-as-geo-location-context/110924 "2017-12-09T09:07:00Z")

</div>

Hi there, Is there any way to use Multiline geometry instead of Point as Geo Location Context when using Context Suggester? NOTE: I'm using Elastic v6

---

## [Search Queue of a particular node fills up and not routed on other nodes](https://discuss.elastic.co/t/search-queue-of-a-particular-node-fills-up-and-not-routed-on-other-nodes/108835)

<div class="topic-metadata">

**Author:** [@krishan](https://discuss.elastic.co/u/krishan)\
**Replies:** 7\
**Last updated:** [December 9, 2017, 6:37am UTC](https://discuss.elastic.co/t/search-queue-of-a-particular-node-fills-up-and-not-routed-on-other-nodes/108835 "2017-12-09T06:37:21Z")

</div>

Hi , I have a elastic cluster of 6 data nodes running on AWS m4.2x large, each having 8 cores and 32 g of memory.Whenever load increases,it is able to serve upto a certain number which is according to the formula - ((…

---

## [Elasticsearch can't find java!](https://discuss.elastic.co/t/elasticsearch-cant-find-java/110918)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 4\
**Last updated:** [December 9, 2017, 6:30am UTC](https://discuss.elastic.co/t/elasticsearch-cant-find-java/110918 "2017-12-09T06:30:44Z")

</div>

I install elasticsearch 6.0.1(latest version) set up the path \[image\] \[image\] thank you in advance!

---

## [Aggregation query taking longer than expected](https://discuss.elastic.co/t/aggregation-query-taking-longer-than-expected/110915)

<div class="topic-metadata">

**Author:** [@addhawan](https://discuss.elastic.co/u/addhawan)\
**Replies:** 0\
**Last updated:** [December 9, 2017, 3:32am UTC](https://discuss.elastic.co/t/aggregation-query-taking-longer-than-expected/110915 "2017-12-09T03:32:40Z")

</div>

Hi, (Need to understand why does aggregation query Query1 takes longer than the other) I am running some aggregation queries as follows. The following query does this: Query1: Finds out records with iog=XXX and shipme…

---

## [Partial Update and nested type performance](https://discuss.elastic.co/t/partial-update-and-nested-type-performance/110534)

<div class="topic-metadata">

**Author:** [@acchaulk](https://discuss.elastic.co/u/acchaulk)\
**Replies:** 1\
**Last updated:** [December 9, 2017, 1:36am UTC](https://discuss.elastic.co/t/partial-update-and-nested-type-performance/110534 "2017-12-09T01:36:46Z")

</div>

Is any performance advantage to do a scripted partial update for a nested field? The docs seem to indicate that "To update, add, or remove a nested object, we have to reindex the whole document". Other than sending a lar…

---

## [No valid OpenPGP data found](https://discuss.elastic.co/t/no-valid-openpgp-data-found/110227)

<div class="topic-metadata">

**Author:** [@Chibueze\_Ogah](https://discuss.elastic.co/u/Chibueze_Ogah)\
**Replies:** 2\
**Last updated:** [December 8, 2017, 11:31pm UTC](https://discuss.elastic.co/t/no-valid-openpgp-data-found/110227 "2017-12-08T23:31:16Z")

</div>

no valid OpenPGP data found

---

## [Elasticsearch cluster corrupted](https://discuss.elastic.co/t/elasticsearch-cluster-corrupted/110721)

<div class="topic-metadata">

**Author:** [@dualcore](https://discuss.elastic.co/u/dualcore)\
**Replies:** 10\
**Last updated:** [December 8, 2017, 9:55pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-corrupted/110721 "2017-12-08T21:55:24Z")

</div>

I deleted my indices on account it filled up my hard drive and I couldn't login to Graylog. Now my Elasticsearch cluster is corrupted. Is there a way to remedy Elasticsearch to restore functionality to Graylog without a …

---

## [ElasticSearch query challenge that I can't solve](https://discuss.elastic.co/t/elasticsearch-query-challenge-that-i-cant-solve/110907)

<div class="topic-metadata">

**Author:** [@coderlifter](https://discuss.elastic.co/u/coderlifter)\
**Replies:** 0\
**Last updated:** [December 8, 2017, 10:58pm UTC](https://discuss.elastic.co/t/elasticsearch-query-challenge-that-i-cant-solve/110907 "2017-12-08T22:58:02Z")

</div>

Hi ElasticSearch community! I am having trouble finding the right query to solve a challenge. I have made a post in StackOverflow where I describe it in more detail: Can someone please have a look and give me some r…

---

## [Updating an Object field](https://discuss.elastic.co/t/updating-an-object-field/110735)

<div class="topic-metadata">

**Author:** [@kabcampbell](https://discuss.elastic.co/u/kabcampbell)\
**Replies:** 2\
**Last updated:** [December 8, 2017, 10:52pm UTC](https://discuss.elastic.co/t/updating-an-object-field/110735 "2017-12-08T22:52:23Z")

</div>

I'm trying to figure out how to use the Update API to update an object field in my document. Let's say my \_source field looks like this: { "documentID": 123, "originalFilename": "Build a Better Post.pdf", "modDate…

---

## [Request timeout on mget?](https://discuss.elastic.co/t/request-timeout-on-mget/110587)

<div class="topic-metadata">

**Author:** [@loren](https://discuss.elastic.co/u/loren)\
**Replies:** 2\
**Last updated:** [December 8, 2017, 9:42pm UTC](https://discuss.elastic.co/t/request-timeout-on-mget/110587 "2017-12-08T21:42:59Z")

</div>

Can mget requests in realtime mode timeout? Specifically, I'm curious if mget requests via the official Python client can timeout.

---

## [Nodes Out of Sync](https://discuss.elastic.co/t/nodes-out-of-sync/110545)

<div class="topic-metadata">

**Author:** [@Bruce\_Carey](https://discuss.elastic.co/u/Bruce_Carey)\
**Replies:** 6\
**Last updated:** [December 8, 2017, 9:08pm UTC](https://discuss.elastic.co/t/nodes-out-of-sync/110545 "2017-12-08T21:08:01Z")

</div>

Hi, We have several different clusters of ES5.02 running. Most are two nodes. On one, there's a large index with three shards, one replica. What I've noticed is that when queried, I'm getting different search results…

---

## [Error shows in kibana](https://discuss.elastic.co/t/error-shows-in-kibana/109739)

<div class="topic-metadata">

**Author:** [@narasiman1986](https://discuss.elastic.co/u/narasiman1986)\
**Replies:** 1\
**Last updated:** [December 8, 2017, 8:47pm UTC](https://discuss.elastic.co/t/error-shows-in-kibana/109739 "2017-12-08T20:47:01Z")

</div>

Discover: Request to Elasticsearch failed: {"error":{"root\_cause":\[\],"type":"search\_phase\_execution\_exception","reason":"all shards failed","phase":"query","grouped":true,"failed\_shards":\[\]},"status":503} how to solve t…

---

## [Elasticsearch fields](https://discuss.elastic.co/t/elasticsearch-fields/110696)

<div class="topic-metadata">

**Author:** [@baiesi](https://discuss.elastic.co/u/baiesi)\
**Replies:** 1\
**Last updated:** [December 8, 2017, 8:04pm UTC](https://discuss.elastic.co/t/elasticsearch-fields/110696 "2017-12-08T20:04:00Z")

</div>

Is there a default setting in E5.5 that will set any newly created doc fields as not-analyzed / keyword by default?

---

## [Query with CASE condition and SUM](https://discuss.elastic.co/t/query-with-case-condition-and-sum/110889)

<div class="topic-metadata">

**Author:** [@lecobf](https://discuss.elastic.co/u/lecobf)\
**Replies:** 0\
**Last updated:** [December 8, 2017, 7:52pm UTC](https://discuss.elastic.co/t/query-with-case-condition-and-sum/110889 "2017-12-08T19:52:25Z")

</div>

Hi there, I'm very new in Elastic world and I'm stuck with a simple query... How could I code in Kibana language the equivalent to this: SELECT le.ID\_Lote, CASE WHEN SUM (Case when le.ID\_origem = 1 then 1 else 0 end)…

---

## [java.lang.IllegalArgumentException: plugin \[ingest-geoip\] is incompatible with version \[6.0.1\]; was designed for version \[6.0.0\]](https://discuss.elastic.co/t/java-lang-illegalargumentexception-plugin-ingest-geoip-is-incompatible-with-version-6-0-1-was-designed-for-version-6-0-0/110727)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 4\
**Last updated:** [December 8, 2017, 6:53pm UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-plugin-ingest-geoip-is-incompatible-with-version-6-0-1-was-designed-for-version-6-0-0/110727 "2017-12-08T18:53:10Z")

</div>

after I update elasticearch from 6.0 to 6.0.1, elasticsearch.service won't start anymore and I'm getting errors in my error log: # cat /etc/redhat-release Red Hat Enterprise Linux Server release 7.4 (Maipo) # rpm -q el…

---

## [ElasticSearch Ingestion issue](https://discuss.elastic.co/t/elasticsearch-ingestion-issue/110876)

<div class="topic-metadata">

**Author:** [@Sundeepreddyp](https://discuss.elastic.co/u/Sundeepreddyp)\
**Replies:** 2\
**Last updated:** [December 8, 2017, 6:47pm UTC](https://discuss.elastic.co/t/elasticsearch-ingestion-issue/110876 "2017-12-08T18:47:14Z")

</div>

Hi All, We use ES for our search capability. And have our Proprietary plug in for bulk extraction and ingestion purposes. We have started the ingestion process for a new deployment and the ingestion process shows succe…

---

## [Elasticsearch Client node type?](https://discuss.elastic.co/t/elasticsearch-client-node-type/110862)

<div class="topic-metadata">

**Author:** [@prachiwadekar](https://discuss.elastic.co/u/prachiwadekar)\
**Replies:** 5\
**Last updated:** [December 8, 2017, 6:23pm UTC](https://discuss.elastic.co/t/elasticsearch-client-node-type/110862 "2017-12-08T18:23:38Z")

</div>

Hi, In elasticsearch 2.4.5, what type of client does a CLIENT node use to communicate with the DATA and MASTER nodes? Does it use a Node client and try to connect to every other node in the cluster? Or does it use a Tra…

---

## [What are useful API requests for administration?](https://discuss.elastic.co/t/what-are-useful-api-requests-for-administration/109973)

<div class="topic-metadata">

**Author:** [@learner](https://discuss.elastic.co/u/learner)\
**Replies:** 2\
**Last updated:** [December 8, 2017, 4:23pm UTC](https://discuss.elastic.co/t/what-are-useful-api-requests-for-administration/109973 "2017-12-08T16:23:23Z")

</div>

For administration and troubleshooting, these basic ones seem quite useful. GET /\_cat GET /\_cat/indices GET /\_search Any advice on other API queries for sysadmins/devops? Thank you in advance! Young

---

## [Setting "xpack.security.enabled" hasn't been registered](https://discuss.elastic.co/t/setting-xpack-security-enabled-hasnt-been-registered/110573)

<div class="topic-metadata">

**Author:** [@rj-reilly](https://discuss.elastic.co/u/rj-reilly)\
**Replies:** 2\
**Last updated:** [December 8, 2017, 3:40pm UTC](https://discuss.elastic.co/t/setting-xpack-security-enabled-hasnt-been-registered/110573 "2017-12-08T15:40:13Z")

</div>

Hi, I installed x-pack on elasticsearch, logstash and kibana set the appropriate settings kibana and elasticsearch are working just fine but i get the following error in logstash. An unexpected error occurred! {:error=\>#…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1859)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1861)
