# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1861

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1862

---

## [New Template vs Mutate vs Convert](https://discuss.elastic.co/t/new-template-vs-mutate-vs-convert/110758)

<div class="topic-metadata">

**Author:** [@Mark\_Guzzo](https://discuss.elastic.co/u/Mark_Guzzo)\
**Replies:** 1\
**Last updated:** [December 8, 2017, 3:18pm UTC](https://discuss.elastic.co/t/new-template-vs-mutate-vs-convert/110758 "2017-12-08T15:18:18Z")

</div>

Hello, I just installed this (Elastic-6 with included Logstash and Kibana) and I've been playing around with data from my DHCP server. I'm able to send a csv (powershell created) using filebeat and parsing with logstas…

---

## [\`accept\_data\_loss\` where does it go?](https://discuss.elastic.co/t/accept-data-loss-where-does-it-go/110192)

<div class="topic-metadata">

**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\
**Replies:** 1\
**Last updated:** [December 8, 2017, 2:11pm UTC](https://discuss.elastic.co/t/accept-data-loss-where-does-it-go/110192 "2017-12-08T14:11:04Z")

</div>

As per ES6 docs at Cluster reroute API | Elasticsearch Guide \[8.11\] | Elastic this command requires the special field accept\_data\_loss to be explicitly set to true for it to work May I get an example of this? Is thi…

---

## [ES 6.0.1 install crashes with OpenJDK9](https://discuss.elastic.co/t/es-6-0-1-install-crashes-with-openjdk9/110851)

<div class="topic-metadata">

**Author:** [@jeroen1](https://discuss.elastic.co/u/jeroen1)\
**Replies:** 2\
**Last updated:** [December 8, 2017, 1:20pm UTC](https://discuss.elastic.co/t/es-6-0-1-install-crashes-with-openjdk9/110851 "2017-12-08T13:20:17Z")

</div>

Using Ubuntu 16.04 LTS + ES 6.0.1 + OpenJDK9, simple basic config. The service crashes: \[2017-12-08T14:13:40,428\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[test601\] fatal error in thread \[main\], exiting java.…

---

## [Is there a way to delete documents based on \_parent value](https://discuss.elastic.co/t/is-there-a-way-to-delete-documents-based-on-parent-value/110405)

<div class="topic-metadata">

**Author:** [@pamara](https://discuss.elastic.co/u/pamara)\
**Replies:** 4\
**Last updated:** [December 8, 2017, 1:44pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-delete-documents-based-on-parent-value/110405 "2017-12-08T13:44:58Z")

</div>

Hi All, I have indexed parent and child documents , child document mapped to parent document based on \_parent value. How can i delete child documents which all have \_parent value as 'XXX'? Could you please share the q…

---

## [ES node java heap space](https://discuss.elastic.co/t/es-node-java-heap-space/110849)

<div class="topic-metadata">

**Author:** [@s.tkachenko](https://discuss.elastic.co/u/s.tkachenko)\
**Replies:** 1\
**Last updated:** [December 8, 2017, 1:02pm UTC](https://discuss.elastic.co/t/es-node-java-heap-space/110849 "2017-12-08T13:02:03Z")

</div>

Good afternoon. There are two nodes of 32G each. 16G (50%) is allocated for elasticsearch. There are 1000 indices of different sizes on these two nodes. Some indices are empty, some are more than 20G. All indices have …

---

## [Prevent multiply by zero when using Gauss Decay function](https://discuss.elastic.co/t/prevent-multiply-by-zero-when-using-gauss-decay-function/110010)

<div class="topic-metadata">

**Author:** [@mortenxd](https://discuss.elastic.co/u/mortenxd)\
**Replies:** 1\
**Last updated:** [December 8, 2017, 12:50pm UTC](https://discuss.elastic.co/t/prevent-multiply-by-zero-when-using-gauss-decay-function/110010 "2017-12-08T12:50:22Z")

</div>

Hello, I'm using a Gauss Decay function to decrease relevance of old documents in my index (origin is current time). Is there a way to prevent a Gauss function to return 0 for very old documents in this case? I am usin…

---

## [Can't import index from ES1 to ES6](https://discuss.elastic.co/t/cant-import-index-from-es1-to-es6/109782)

<div class="topic-metadata">

**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\
**Replies:** 4\
**Last updated:** [December 8, 2017, 12:32pm UTC](https://discuss.elastic.co/t/cant-import-index-from-es1-to-es6/109782 "2017-12-08T12:32:07Z")

</div>

Hello, I am new with elastic search and I try to move indices from elasticsearch 1 to elasticsearch 6. There is way how to migrate from ES1 to ES2 and than ES2 to ES5 etc.. But it looks very complicated. I would like to…

---

## [How to manage large number of in clause values](https://discuss.elastic.co/t/how-to-manage-large-number-of-in-clause-values/110089)

<div class="topic-metadata">

**Author:** [@nmathur](https://discuss.elastic.co/u/nmathur)\
**Replies:** 1\
**Last updated:** [December 8, 2017, 12:24pm UTC](https://discuss.elastic.co/t/how-to-manage-large-number-of-in-clause-values/110089 "2017-12-08T12:24:44Z")

</div>

Hello, I am performing in clause on elasticsearch NEST. But it is returning 400 if I am passing large number in clause values. In my case it is 1200 values. I am fetching large number of data and using scroll for that .…

---

## [Primary on SSD, replica on HDD](https://discuss.elastic.co/t/primary-on-ssd-replica-on-hdd/110797)

<div class="topic-metadata">

**Author:** [@ov7a](https://discuss.elastic.co/u/ov7a)\
**Replies:** 5\
**Last updated:** [December 8, 2017, 12:21pm UTC](https://discuss.elastic.co/t/primary-on-ssd-replica-on-hdd/110797 "2017-12-08T12:21:29Z")

</div>

How to configure elasticsearch to store replica on HDD, while primary data is on SSD? I can launch two nodes, one on hdd, other on ssd, give each them tag ('hdd\_node' and 'ssd\_node')... What next?

---

## [Aggs don't return all records](https://discuss.elastic.co/t/aggs-dont-return-all-records/109951)

<div class="topic-metadata">

**Author:** [@Miguel\_Michelsongs](https://discuss.elastic.co/u/Miguel_Michelsongs)\
**Replies:** 1\
**Last updated:** [December 8, 2017, 12:13pm UTC](https://discuss.elastic.co/t/aggs-dont-return-all-records/109951 "2017-12-08T12:13:03Z")

</div>

Hi , I've a problem with aggregations , the query we've in production in some scenarios don't return all counts. query = {size: 0, :query=\>{:filtered=\>{:filter=\>{:bool=\>{:must=\>\[{:term=\>{:account\_id=\>1}}, {:term=\>{:user…

---

## [Java failure in the middle of index restore process](https://discuss.elastic.co/t/java-failure-in-the-middle-of-index-restore-process/110689)

<div class="topic-metadata">

**Author:** [@eugene\_pirogov](https://discuss.elastic.co/u/eugene_pirogov)\
**Replies:** 4\
**Last updated:** [December 8, 2017, 12:04pm UTC](https://discuss.elastic.co/t/java-failure-in-the-middle-of-index-restore-process/110689 "2017-12-08T12:04:26Z")

</div>

After rebooting elasticsearch, I am now unable to restore it into a working state. Below are my startup logs, mostly to depict versions and JVM arguments. What I'm seeing is the following: as I restart elasticsearch, …

---

## [Node data synchronize problem](https://discuss.elastic.co/t/node-data-synchronize-problem/110828)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 3\
**Last updated:** [December 8, 2017, 12:04pm UTC](https://discuss.elastic.co/t/node-data-synchronize-problem/110828 "2017-12-08T12:04:15Z")

</div>

Hi everyone, I have two nodes in a cluster. Now, if I close the master node, then another node become master node. But if I reopen the died node,there would become two master node in a cluster. is it correctly? Besi…

---

## [Migration Problem 6.0](https://discuss.elastic.co/t/migration-problem-6-0/108891)

<div class="topic-metadata">

**Author:** [@Rob\_Schwerdtner](https://discuss.elastic.co/u/Rob_Schwerdtner)\
**Replies:** 4\
**Last updated:** [December 8, 2017, 11:57am UTC](https://discuss.elastic.co/t/migration-problem-6-0/108891 "2017-12-08T11:57:02Z")

</div>

After trying to migrate from 5.3 (via 5.6) to 6.0 i have to face sharding errors. My Indecies seemed to be looked and i can not revert from this status. My setting looks like this and read\_only is set to false and writ…

---

## [ElasticSearch migration and backup](https://discuss.elastic.co/t/elasticsearch-migration-and-backup/110664)

<div class="topic-metadata">

**Author:** [@0NE](https://discuss.elastic.co/u/0NE)\
**Replies:** 3\
**Last updated:** [December 8, 2017, 11:56am UTC](https://discuss.elastic.co/t/elasticsearch-migration-and-backup/110664 "2017-12-08T11:56:45Z")

</div>

Can I clone a copy of my version of elasticsearch with the addons (e.g. Marvel) and deploy it to anothe VM? My future plan is: Moving the elastic search to new infrastructure Using a new copy, try updating to 6.0 Usin…

---

## [Will NEST 5.5 work with ES 6.0?](https://discuss.elastic.co/t/will-nest-5-5-work-with-es-6-0/110576)

<div class="topic-metadata">

**Author:** [@Andrey\_Tomilin](https://discuss.elastic.co/u/Andrey_Tomilin)\
**Replies:** 1\
**Last updated:** [December 8, 2017, 11:53am UTC](https://discuss.elastic.co/t/will-nest-5-5-work-with-es-6-0/110576 "2017-12-08T11:53:15Z")

</div>

Didn't find better place for this question. Sorry if it's wrong. I setup the ES 6.0 and when wanted to work with it via the NEST api found that there is only 6.0.0.alpha1 version released 7 month ago. I don't want to mo…

---

## [Elasticsearch-kubernetes](https://discuss.elastic.co/t/elasticsearch-kubernetes/110826)

<div class="topic-metadata">

**Author:** [@marouane](https://discuss.elastic.co/u/marouane)\
**Replies:** 0\
**Last updated:** [December 8, 2017, 10:54am UTC](https://discuss.elastic.co/t/elasticsearch-kubernetes/110826 "2017-12-08T10:54:15Z")

</div>

Hello every one, i'm working on creating a kubernetes elasticsearch pod, In adittion i'm using rancher-server that contains the kubernetes invironment This what i put inside the file apiVersion: v1 kind: Pod metad…

---

## [How to delete UNASSIGNED .watches?](https://discuss.elastic.co/t/how-to-delete-unassigned-watches/110091)

<div class="topic-metadata">

**Author:** [@tjliu](https://discuss.elastic.co/u/tjliu)\
**Replies:** 9\
**Last updated:** [December 8, 2017, 11:05am UTC](https://discuss.elastic.co/t/how-to-delete-unassigned-watches/110091 "2017-12-08T11:05:13Z")

</div>

Hi, The status of my cluster is RED. It seems it will be green if I delete 2 UNASSIGNED ".watches" from the following log. How can I fix this? Thanks. Blockquote $ curl -XGET 'http://xxx:9200/\_cat/shards' .watcher-h…

---

## [Combining filters](https://discuss.elastic.co/t/combining-filters/110824)

<div class="topic-metadata">

**Author:** [@Ihor\_Luhovyi](https://discuss.elastic.co/u/Ihor_Luhovyi)\
**Replies:** 0\
**Last updated:** [December 8, 2017, 10:33am UTC](https://discuss.elastic.co/t/combining-filters/110824 "2017-12-08T10:33:44Z")

</div>

Hello. How can i use 'must' with nested 'should' and nested 'must '? like Select \* ...Where (domainId AND projectId AND (( data\_range AND userid) OR ( data\_range AND userid) ) { "bool" : { "must" : \[ { "term" : …

---

## [Cannot delete watchers when using basic license](https://discuss.elastic.co/t/cannot-delete-watchers-when-using-basic-license/110800)

<div class="topic-metadata">

**Author:** [@tjliu](https://discuss.elastic.co/u/tjliu)\
**Replies:** 2\
**Last updated:** [December 8, 2017, 10:56am UTC](https://discuss.elastic.co/t/cannot-delete-watchers-when-using-basic-license/110800 "2017-12-08T10:56:03Z")

</div>

Hi, I got same issue with this link which happened from trial license to basic license. Cannot delete watchers when using basic license · Issue #23490 · elastic/elasticsearch · GitHub, but I can not find answer at her…

---

## [Average on a percentile bucket](https://discuss.elastic.co/t/average-on-a-percentile-bucket/110822)

<div class="topic-metadata">

**Author:** [@Jean\_Pierre](https://discuss.elastic.co/u/Jean_Pierre)\
**Replies:** 0\
**Last updated:** [December 8, 2017, 10:29am UTC](https://discuss.elastic.co/t/average-on-a-percentile-bucket/110822 "2017-12-08T10:29:24Z")

</div>

I need to compute the average response time of a service hile excluding the 5% cases having the biggest response times. I would like to know if there is a way for me to create a bucket with only the 95% of documents hav…

---

## [Elasticsearch status:red](https://discuss.elastic.co/t/elasticsearch-status-red/109932)

<div class="topic-metadata">

**Author:** [@minidan](https://discuss.elastic.co/u/minidan)\
**Replies:** 14\
**Last updated:** [December 8, 2017, 9:49am UTC](https://discuss.elastic.co/t/elasticsearch-status-red/109932 "2017-12-08T09:49:21Z")

</div>

Hi team and all, Newbie to ELK and evaluating to put live soon, was all working until it stopped... no changes made just adding servers in one by one using winbeatlog direct to elasticsearch. Can someone tell me what I…

---

## [Importer et indexer un document JSON en plusieurs documents](https://discuss.elastic.co/t/importer-et-indexer-un-document-json-en-plusieurs-documents/110701)

<div class="topic-metadata">

**Author:** [@Rym\_Guerbi\_Michaut](https://discuss.elastic.co/u/Rym_Guerbi_Michaut)\
**Replies:** 4\
**Last updated:** [December 8, 2017, 8:51am UTC](https://discuss.elastic.co/t/importer-et-indexer-un-document-json-en-plusieurs-documents/110701 "2017-12-08T08:51:33Z")

</div>

Bonjour à tous, Après moults tentatives et un bon coup de pouce, j'ai enfin réussi à importer et indexer un document en JSON sur Elasticsearch. Le problème est qu'il a importé 36000 lignes dans un seul document. Et Kib…

---

## [Backup 2.4.3.2 to restore 5.1.26](https://discuss.elastic.co/t/backup-2-4-3-2-to-restore-5-1-26/110724)

<div class="topic-metadata">

**Author:** [@ghanshyam](https://discuss.elastic.co/u/ghanshyam)\
**Replies:** 3\
**Last updated:** [December 8, 2017, 8:37am UTC](https://discuss.elastic.co/t/backup-2-4-3-2-to-restore-5-1-26/110724 "2017-12-08T08:37:36Z")

</div>

I have some query, please help me to understand. what i did: I have Dev cluster running 2.4.2.3 and I took a backup. I have another QA cluster running 2.4.2.3. QA cluster has only four indices with few documents. Now …

---

## [Elasticsearch API not designed to be consumed directly by a front-end client?](https://discuss.elastic.co/t/elasticsearch-api-not-designed-to-be-consumed-directly-by-a-front-end-client/110546)

<div class="topic-metadata">

**Author:** [@bradley](https://discuss.elastic.co/u/bradley)\
**Replies:** 2\
**Last updated:** [December 8, 2017, 6:29am UTC](https://discuss.elastic.co/t/elasticsearch-api-not-designed-to-be-consumed-directly-by-a-front-end-client/110546 "2017-12-08T06:29:11Z")

</div>

It's possible, but not recommended. The Elasticsearch API is not designed to be consumed directly by a front end client, and the security constraints that are put in place within X-Pack do not aim to be secure within …

---

## [Optimization question](https://discuss.elastic.co/t/optimization-question/110785)

<div class="topic-metadata">

**Author:** [@rraulinio](https://discuss.elastic.co/u/rraulinio)\
**Replies:** 4\
**Last updated:** [December 8, 2017, 3:30am UTC](https://discuss.elastic.co/t/optimization-question/110785 "2017-12-08T03:30:38Z")

</div>

Hello, I have been trying to optimize an Elasticsearch query for a few days, but I did not manage to get what I wanted. The scenario is the following: there are cars (as the main parent, containing some basic details), u…

---

## [Accumulated daily](https://discuss.elastic.co/t/accumulated-daily/110780)

<div class="topic-metadata">

**Author:** [@negroan](https://discuss.elastic.co/u/negroan)\
**Replies:** 3\
**Last updated:** [December 8, 2017, 1:48am UTC](https://discuss.elastic.co/t/accumulated-daily/110780 "2017-12-08T01:48:17Z")

</div>

Good evening I have an elastic installation, which receives information from logs of different systems, apache iis jbs etc. I find myself in the situation that in my company they want to obtain annual reports on daily hi…

---

## [AWS network issue and data loss](https://discuss.elastic.co/t/aws-network-issue-and-data-loss/110741)

<div class="topic-metadata">

**Author:** [@mario12](https://discuss.elastic.co/u/mario12)\
**Replies:** 11\
**Last updated:** [December 8, 2017, 1:10am UTC](https://discuss.elastic.co/t/aws-network-issue-and-data-loss/110741 "2017-12-08T01:10:04Z")

</div>

We are using es 2.4 version. All our nodes uses AWS ephemeral disk. During the network connectivity issue there is a chance that nodes may drop out of the cluster. This may cause data loss. Is there a settings that can b…

---

## [X-Pack licenses for hobbyists/startups?](https://discuss.elastic.co/t/x-pack-licenses-for-hobbyists-startups/110646)

<div class="topic-metadata">

**Author:** [@nrauhauser](https://discuss.elastic.co/u/nrauhauser)\
**Replies:** 1\
**Last updated:** [December 7, 2017, 9:41pm UTC](https://discuss.elastic.co/t/x-pack-licenses-for-hobbyists-startups/110646 "2017-12-07T21:41:46Z")

</div>

Is there an X-Pack license for hobbyists or startups? I have a project I've been working on since 2013, no paying customers, seems like that might change in 2018, but I abandoned Splunk because there was just no way tha…

---

## [ES 6.0 1 type 1 index issues](https://discuss.elastic.co/t/es-6-0-1-type-1-index-issues/109291)

<div class="topic-metadata">

**Author:** [@iti](https://discuss.elastic.co/u/iti)\
**Replies:** 1\
**Last updated:** [December 7, 2017, 9:04pm UTC](https://discuss.elastic.co/t/es-6-0-1-type-1-index-issues/109291 "2017-12-07T21:04:57Z")

</div>

Currently, my ES(5.6.3) mapping is like this: Index: Parent Type, Child Type 1, Child Type 2, ........ Child Type 70 Each Child Type has its own nested documents. Pare…

---

## [ES6.0: multiple types, indexes, relationships puzzle](https://discuss.elastic.co/t/es6-0-multiple-types-indexes-relationships-puzzle/108984)

<div class="topic-metadata">

**Author:** [@htwj](https://discuss.elastic.co/u/htwj)\
**Replies:** 14\
**Last updated:** [December 7, 2017, 9:02pm UTC](https://discuss.elastic.co/t/es6-0-multiple-types-indexes-relationships-puzzle/108984 "2017-12-07T21:02:31Z")

</div>

The removal of mapping types is giving me some indexing woes. In my system I've got Places, Events, News and Vouchers. Events, News and Vouchers are always related to a specific Place. In a pre-6.0 world, I had all 3 a…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1860)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1862)
