# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1868

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1869

---

## [Keystore is tampered with or corrupted, now what?](https://discuss.elastic.co/t/keystore-is-tampered-with-or-corrupted-now-what/109847)

<div class="topic-metadata">

**Author:** [@morphers82](https://discuss.elastic.co/u/morphers82)\
**Replies:** 7\
**Last updated:** [December 2, 2017, 11:02pm UTC](https://discuss.elastic.co/t/keystore-is-tampered-with-or-corrupted-now-what/109847 "2017-12-02T23:02:56Z")

</div>

There is no documentation on how to recreate the elasticsearch-keystore when getting this message when trying to list or add keys to the keystore file: Exception in thread "main" java.lang.SecurityException: Keystore ha…

---

## [Date Index + Alias question](https://discuss.elastic.co/t/date-index-alias-question/109978)

<div class="topic-metadata">

**Author:** [@beng](https://discuss.elastic.co/u/beng)\
**Replies:** 4\
**Last updated:** [December 2, 2017, 10:31pm UTC](https://discuss.elastic.co/t/date-index-alias-question/109978 "2017-12-02T22:31:43Z")

</div>

We're currently using a date index name pipeline to ingest documents into index based on date (https://www.elastic.co/guide/en/elasticsearch/reference/current/date-index-name-processor.html). We currently have an alias p…

---

## [Painless Script with date: hour\_minute\_second](https://discuss.elastic.co/t/painless-script-with-date-hour-minute-second/109974)

<div class="topic-metadata">

**Author:** [@fpillo](https://discuss.elastic.co/u/fpillo)\
**Replies:** 1\
**Last updated:** [December 2, 2017, 10:04pm UTC](https://discuss.elastic.co/t/painless-script-with-date-hour-minute-second/109974 "2017-12-02T22:04:50Z")

</div>

Hi guys, I have date field with the following format: "start": { "type": "date", "format": "hour\_minute\_second" } Trying to get the field value in a script field using: "doc\['start'\].value" it re…

---

## [Can't install marvel on Windows 10](https://discuss.elastic.co/t/cant-install-marvel-on-windows-10/110013)

<div class="topic-metadata">

**Author:** [@johngerman1984](https://discuss.elastic.co/u/johngerman1984)\
**Replies:** 2\
**Last updated:** [December 2, 2017, 9:11pm UTC](https://discuss.elastic.co/t/cant-install-marvel-on-windows-10/110013 "2017-12-02T21:11:26Z")

</div>

Installed Elasticsearch verson 6 this morning, that part went well. The next step in the tutorial I am following says to install Marvel, that's not going so well. On the official "Getting Started with Marvel" it says t…

---

## [Correct usage of Coordinating role node](https://discuss.elastic.co/t/correct-usage-of-coordinating-role-node/109988)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 17\
**Last updated:** [December 2, 2017, 6:08pm UTC](https://discuss.elastic.co/t/correct-usage-of-coordinating-role-node/109988 "2017-12-02T18:08:33Z")

</div>

hi everybody, currently, I have in theory 2 DATA nodes, 1 active MASTER , 1 passive MASTER (I mean, could only be a master, but it is not elected) and 1 COORDINATOR (with Kibana installed on it). I would like to know i…

---

## [Watcher for percentage drop](https://discuss.elastic.co/t/watcher-for-percentage-drop/109028)

<div class="topic-metadata">

**Author:** [@Pbien](https://discuss.elastic.co/u/Pbien)\
**Replies:** 6\
**Last updated:** [December 2, 2017, 3:33pm UTC](https://discuss.elastic.co/t/watcher-for-percentage-drop/109028 "2017-12-02T15:33:24Z")

</div>

My use case is a watcher for percentage drop. I have a query from a single field say “submit” and I want to get the percentage drop for the “submit”. Something like c\_submit will be the current submit and p\_submit is the…

---

## [Problem with phrase suggestor](https://discuss.elastic.co/t/problem-with-phrase-suggestor/109293)

<div class="topic-metadata">

**Author:** [@Akshay\_Deep\_Lamba](https://discuss.elastic.co/u/Akshay_Deep_Lamba)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 11:49pm UTC](https://discuss.elastic.co/t/problem-with-phrase-suggestor/109293 "2017-12-01T23:49:26Z")

</div>

Hello I created an index using the below code PUT test { "settings": { "index": { "number\_of\_shards": 1, "analysis": { "analyzer": { "trigram": { "type": "custom", …

---

## [How to integrate binary into archlinux environment](https://discuss.elastic.co/t/how-to-integrate-binary-into-archlinux-environment/109993)

<div class="topic-metadata">

**Author:** [@lemongrab](https://discuss.elastic.co/u/lemongrab)\
**Replies:** 0\
**Last updated:** [December 2, 2017, 1:19am UTC](https://discuss.elastic.co/t/how-to-integrate-binary-into-archlinux-environment/109993 "2017-12-02T01:19:48Z")

</div>

while I untarred the tar and am running the binary just fine, I'm doing this from my ~/Downloads folder (iow ~/Downloads/elasticsearch-6.0.0/bin/elasticsearch to run) and was wondering how I can move the distribute the b…

---

## [Avoiding max clause count](https://discuss.elastic.co/t/avoiding-max-clause-count/109991)

<div class="topic-metadata">

**Author:** [@Marty\_Loewenthal](https://discuss.elastic.co/u/Marty_Loewenthal)\
**Replies:** 0\
**Last updated:** [December 2, 2017, 12:31am UTC](https://discuss.elastic.co/t/avoiding-max-clause-count/109991 "2017-12-02T00:31:27Z")

</div>

Hello. I am in the process of migrating my team's Elasticsearch 2.4 clusters to Elasticsearch 5. I am changing the DSL to satisfy the breaking changes in ES 5. Most of our searches were unscored by using filter. Can I w…

---

## [Invalid version format; No endpoint or operation is available at...; and related errors](https://discuss.elastic.co/t/invalid-version-format-no-endpoint-or-operation-is-available-at-and-related-errors/109811)

<div class="topic-metadata">

**Author:** [@Malik\_Rumi](https://discuss.elastic.co/u/Malik_Rumi)\
**Replies:** 1\
**Last updated:** [December 2, 2017, 12:29am UTC](https://discuss.elastic.co/t/invalid-version-format-no-endpoint-or-operation-is-available-at-and-related-errors/109811 "2017-12-02T00:29:00Z")

</div>

This is just a friendly tip to others who might, like me, be wandering around not finding answers that are actually helpful and solve the problem at hand. In my specific case, I got this error when trying to delete my i…

---

## [Monitoring: Display of historical metrics](https://discuss.elastic.co/t/monitoring-display-of-historical-metrics/109230)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 1\
**Last updated:** [December 2, 2017, 12:27am UTC](https://discuss.elastic.co/t/monitoring-display-of-historical-metrics/109230 "2017-12-02T00:27:48Z")

</div>

I see that monitoring visualizations are available for only last one week. Is that the default behavior? Whether this duration is configurable?

---

## [Sorting based on a certain field being true](https://discuss.elastic.co/t/sorting-based-on-a-certain-field-being-true/109987)

<div class="topic-metadata">

**Author:** [@Miguel\_Lopez](https://discuss.elastic.co/u/Miguel_Lopez)\
**Replies:** 0\
**Last updated:** [December 1, 2017, 10:03pm UTC](https://discuss.elastic.co/t/sorting-based-on-a-certain-field-being-true/109987 "2017-12-01T22:03:51Z")

</div>

I am currently on ES V 2.3, and would like to sort on all the records based on a specific value being true. the record may contain the following object: "pinning": { "from": "2017-10-16T16:34:00Z", "order": 0, …

---

## [Error installing licence](https://discuss.elastic.co/t/error-installing-licence/109949)

<div class="topic-metadata">

**Author:** [@Peter\_Boer](https://discuss.elastic.co/u/Peter_Boer)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 9:22pm UTC](https://discuss.elastic.co/t/error-installing-licence/109949 "2017-12-01T21:22:38Z")

</div>

When installing the licence using: curl -XPUT -u elastic 'http://:/\_xpack/license' -H "Content-Type: application/json" -d @license.json I get this error: {"error":"Incorrect HTTP method for uri \[/\_xpack/license\] and m…

---

## [Trouble sorting based on array results](https://discuss.elastic.co/t/trouble-sorting-based-on-array-results/109441)

<div class="topic-metadata">

**Author:** [@DookTibs](https://discuss.elastic.co/u/DookTibs)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 9:16pm UTC](https://discuss.elastic.co/t/trouble-sorting-based-on-array-results/109441 "2017-12-01T21:16:02Z")

</div>

I'm having trouble getting a particular Elasticsearch sort to work. I've got a type in my index that has an array of metadata objects. I want to sort based on a particular type of metadata, irregardless of the query that…

---

## [Geo Query Performance](https://discuss.elastic.co/t/geo-query-performance/109827)

<div class="topic-metadata">

**Author:** [@Zhengcong\_Yin](https://discuss.elastic.co/u/Zhengcong_Yin)\
**Replies:** 3\
**Last updated:** [December 1, 2017, 8:24pm UTC](https://discuss.elastic.co/t/geo-query-performance/109827 "2017-12-01T20:24:49Z")

</div>

HI, Is Geo query scalable in items of query time? I indexed 38 thousand geo point, and run k-nearest neighbor on it. I found the "took" value from each response becomes slower from the cluster with one data node to the…

---

## [Elasticsearch 6.0 on ubuntu 16.04 will only start if network.host is set to 192.168.0.1 and not the actual IP address bound to the adaptor or hostname in hosts file](https://discuss.elastic.co/t/elasticsearch-6-0-on-ubuntu-16-04-will-only-start-if-network-host-is-set-to-192-168-0-1-and-not-the-actual-ip-address-bound-to-the-adaptor-or-hostname-in-hosts-file/109288)

<div class="topic-metadata">

**Author:** [@sconrod](https://discuss.elastic.co/u/sconrod)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 8:13pm UTC](https://discuss.elastic.co/t/elasticsearch-6-0-on-ubuntu-16-04-will-only-start-if-network-host-is-set-to-192-168-0-1-and-not-the-actual-ip-address-bound-to-the-adaptor-or-hostname-in-hosts-file/109288 "2017-12-01T20:13:50Z")

</div>

Elasticsearch 6.0 on ubuntu 16.04 will only start if network.host is set to 192.168.0.1 and not the actual IP address bound to the adaptor or hostname in hosts file. If I follow steps precisely here and and restart elas…

---

## [Filters Bucket Aggregation using script fields and custom params](https://discuss.elastic.co/t/filters-bucket-aggregation-using-script-fields-and-custom-params/109975)

<div class="topic-metadata">

**Author:** [@gabe\_frz](https://discuss.elastic.co/u/gabe_frz)\
**Replies:** 0\
**Last updated:** [December 1, 2017, 6:57pm UTC](https://discuss.elastic.co/t/filters-bucket-aggregation-using-script-fields-and-custom-params/109975 "2017-12-01T18:57:02Z")

</div>

I wonder if it is possible to pass a list of parameters that will be shared through all filter buckets, and if it's also possible to use the value of script fields generated on the query inside the aggregation filter scr…

---

## [Unable to create mapping in Elasticsearch 6.0](https://discuss.elastic.co/t/unable-to-create-mapping-in-elasticsearch-6-0/109842)

<div class="topic-metadata">

**Author:** [@Pratiksha\_Tewary](https://discuss.elastic.co/u/Pratiksha_Tewary)\
**Replies:** 3\
**Last updated:** [December 1, 2017, 7:27pm UTC](https://discuss.elastic.co/t/unable-to-create-mapping-in-elasticsearch-6-0/109842 "2017-12-01T19:27:04Z")

</div>

Hi, I am getting the following error in the console when I am trying to create an index mapping in Elasticsearch 6.0: { "error": { "root\_cause": \[ { "type": "security\_exception", "reason": "…

---

## [Pre-processing Couchbase documents](https://discuss.elastic.co/t/pre-processing-couchbase-documents/107639)

<div class="topic-metadata">

**Author:** [@jscubida](https://discuss.elastic.co/u/jscubida)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 7:00pm UTC](https://discuss.elastic.co/t/pre-processing-couchbase-documents/107639 "2017-12-01T19:00:48Z")

</div>

Hello. What is the best way to transform a document coming from the Couchbase plugin? If using ingest node is the answer, how would one achieve this? Specifically, we would like to transform a timestamp from a double (1…

---

## [Life without mapping types (6.0)](https://discuss.elastic.co/t/life-without-mapping-types-6-0/109858)

<div class="topic-metadata">

**Author:** [@Malik\_Rumi](https://discuss.elastic.co/u/Malik_Rumi)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 6:33pm UTC](https://discuss.elastic.co/t/life-without-mapping-types-6-0/109858 "2017-12-01T18:33:00Z")

</div>

I am trying to wrap my brain around the removal of mapping types in 6.0. Removal of mapping types | Elasticsearch Guide \[8.11\] | Elastic It seems that join and parent-child are almost completely analogous to the one to…

---

## [Monitoring: System Load](https://discuss.elastic.co/t/monitoring-system-load/109228)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 6:22pm UTC](https://discuss.elastic.co/t/monitoring-system-load/109228 "2017-12-01T18:22:23Z")

</div>

Why the System Load visualization for elasticsearch is showing only the last 1 minute average load, wherein for the logstash node it is last 1 minute, 5 minutes and 13 minutes average load.

---

## [How do I assign a second analyzer to my mapping](https://discuss.elastic.co/t/how-do-i-assign-a-second-analyzer-to-my-mapping/109728)

<div class="topic-metadata">

**Author:** [@bilpor](https://discuss.elastic.co/u/bilpor)\
**Replies:** 17\
**Last updated:** [December 1, 2017, 5:58pm UTC](https://discuss.elastic.co/t/how-do-i-assign-a-second-analyzer-to-my-mapping/109728 "2017-12-01T17:58:31Z")

</div>

HI All, Here is my index so far: put fullsiteindex { "settings" : { "number\_of\_shards":3, "number\_of\_replicas":2, "analysis": { "filter": { "my\_stop": { …

---

## [Dynamic template mappins are failing on ELasticsearch 6.0](https://discuss.elastic.co/t/dynamic-template-mappins-are-failing-on-elasticsearch-6-0/109903)

<div class="topic-metadata">

**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 5:08pm UTC](https://discuss.elastic.co/t/dynamic-template-mappins-are-failing-on-elasticsearch-6-0/109903 "2017-12-01T17:08:08Z")

</div>

We rolled over to new indexes yesterday, and this is the first time we've rolled over after upgrading to ES6. Immediately we started getting exceptions from logstash and missing data with errors like this: \[2017-12-01T0…

---

## [Debugging X-Pack Reporting](https://discuss.elastic.co/t/debugging-x-pack-reporting/108001)

<div class="topic-metadata">

**Author:** [@tamisalex](https://discuss.elastic.co/u/tamisalex)\
**Replies:** 3\
**Last updated:** [December 1, 2017, 4:30pm UTC](https://discuss.elastic.co/t/debugging-x-pack-reporting/108001 "2017-12-01T16:30:50Z")

</div>

I have a very simple plugin that scrapes a website a displays some text, however when I try to export this visualization as a pdf I have this error. {"type":"log","@timestamp":"2017-11-16T18:48:12Z","tags":\["reporting"…

---

## [Curator cannot find existing Repository](https://discuss.elastic.co/t/curator-cannot-find-existing-repository/109833)

<div class="topic-metadata">

**Author:** [@ccampbell](https://discuss.elastic.co/u/ccampbell)\
**Replies:** 3\
**Last updated:** [December 1, 2017, 4:07pm UTC](https://discuss.elastic.co/t/curator-cannot-find-existing-repository/109833 "2017-12-01T16:07:57Z")

</div>

Trying to setup Curator to run automatic snapshots of old indices in my cluster, but I cannot get it to recognize an existing repository to start the snapshot process. On my test cluster, I have successfully created a r…

---

## [Remote reindex fail for HTTPS](https://discuss.elastic.co/t/remote-reindex-fail-for-https/109825)

<div class="topic-metadata">

**Author:** [@nkoothrappahli](https://discuss.elastic.co/u/nkoothrappahli)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 3:57pm UTC](https://discuss.elastic.co/t/remote-reindex-fail-for-https/109825 "2017-12-01T15:57:55Z")

</div>

I face this issue here with X-Pack (5.6.4): https://github.com/elastic/elasticsearch/issues/27267 I cannot remote reindex to a cluster protected with x-pack (https enabled) cause my ssl certificates are not trusted and …

---

## [Boost with more than one field is not behaving as expected](https://discuss.elastic.co/t/boost-with-more-than-one-field-is-not-behaving-as-expected/109019)

<div class="topic-metadata">

**Author:** [@pkpaul5](https://discuss.elastic.co/u/pkpaul5)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 3:45pm UTC](https://discuss.elastic.co/t/boost-with-more-than-one-field-is-not-behaving-as-expected/109019 "2017-12-01T15:45:19Z")

</div>

My requirement is to rank result based on multiple metadata fields. I have fields like category,country. The result should be ranked based on category and country. My query is provided below : {"query": {"bool": {"mus…

---

## [Creating existing processors in Java for pipeline injection](https://discuss.elastic.co/t/creating-existing-processors-in-java-for-pipeline-injection/109840)

<div class="topic-metadata">

**Author:** [@fnareva](https://discuss.elastic.co/u/fnareva)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 3:40pm UTC](https://discuss.elastic.co/t/creating-existing-processors-in-java-for-pipeline-injection/109840 "2017-12-01T15:40:09Z")

</div>

We are currently looking for a good way to create and set processors in our java app. Is there a JAVA API we are missing for this? Right now we are building the pipeline parameters using XContentBuilder. One suggestion…

---

## [Date sorting](https://discuss.elastic.co/t/date-sorting/109953)

<div class="topic-metadata">

**Author:** [@Maarten\_Vandermeiren](https://discuss.elastic.co/u/Maarten_Vandermeiren)\
**Replies:** 0\
**Last updated:** [December 1, 2017, 3:09pm UTC](https://discuss.elastic.co/t/date-sorting/109953 "2017-12-01T15:09:05Z")

</div>

Hello, I have a question on sorting the result of a query on a date field. The dates I have are stored as longs (epoch\_millis). When I only sort on this date column I want the hours, minutes,... to be taken into accou…

---

## [Ignore must term (6.0)](https://discuss.elastic.co/t/ignore-must-term-6-0/109864)

<div class="topic-metadata">

**Author:** [@AndyB](https://discuss.elastic.co/u/AndyB)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 3:03pm UTC](https://discuss.elastic.co/t/ignore-must-term-6-0/109864 "2017-12-01T15:03:10Z")

</div>

I have the following DSL: "filter" =\> array( "bool" =\> array( "must" =\> \[ array( "term" =\> array( "node" =\> $currentNodeId ) ), array( "term" =\> array( "type" =\> 'thread' ) ) \]…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1867)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1869)
