# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1871

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1872

---

## [ES-5x : JsonGenerationException in slow logs](https://discuss.elastic.co/t/es-5x-jsongenerationexception-in-slow-logs/108510)

<div class="topic-metadata">

**Author:** [@dimalini](https://discuss.elastic.co/u/dimalini)\
**Replies:** 5\
**Last updated:** [November 30, 2017, 10:08am UTC](https://discuss.elastic.co/t/es-5x-jsongenerationexception-in-slow-logs/108510 "2017-11-30T10:08:00Z")

</div>

Hi, As part of slow query investigation, we enabled search slow logs in our production environment\[ES version - 5.4.1\]. In few cases, i do see the original slow query getting logged. But there were many occurrences of J…

---

## [FSCrawler large document and indexing based on content](https://discuss.elastic.co/t/fscrawler-large-document-and-indexing-based-on-content/109609)

<div class="topic-metadata">

**Author:** [@Tom\_Corbett](https://discuss.elastic.co/u/Tom_Corbett)\
**Replies:** 3\
**Last updated:** [November 30, 2017, 10:06am UTC](https://discuss.elastic.co/t/fscrawler-large-document-and-indexing-based-on-content/109609 "2017-11-30T10:06:39Z")

</div>

Hi, Complete novice here. First post, Hi everyone, go easy on me :slight\_smile: I have setup FSCrawler today and it is awesome. Thanks for creating it for us. I do have an issue with content becoming truncated from la…

---

## ["query\_string" dosen't analyze wildcard queries](https://discuss.elastic.co/t/query-string-dosent-analyze-wildcard-queries/109533)

<div class="topic-metadata">

**Author:** [@Alexander\_Ott](https://discuss.elastic.co/u/Alexander_Ott)\
**Replies:** 4\
**Last updated:** [November 30, 2017, 9:50am UTC](https://discuss.elastic.co/t/query-string-dosent-analyze-wildcard-queries/109533 "2017-11-30T09:50:52Z")

</div>

Hi, after upgrade from ES 2.4.4 to ES 5.6.1 the following query dosen't get analyzed by our analyzer { "analyzer": { "default": { "type": "custom", "tokenizer": "fesadTokenizer", "char\_filter": …

---

## [Entity Centric index on two value](https://discuss.elastic.co/t/entity-centric-index-on-two-value/109678)

<div class="topic-metadata">

**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\
**Replies:** 2\
**Last updated:** [November 30, 2017, 9:48am UTC](https://discuss.elastic.co/t/entity-centric-index-on-two-value/109678 "2017-11-30T09:48:42Z")

</div>

Hi i have one basic question , i am using entity centric index to create entity index for salesman my data look like - "s1","salesman01","2017-06-22 00:00:00.000","2017-06-22 16:10:23.000","2017-06-22 16:11:44.000","5…

---

## [Failed to delete indices when curator configured for multiple hosts in same cluster](https://discuss.elastic.co/t/failed-to-delete-indices-when-curator-configured-for-multiple-hosts-in-same-cluster/109373)

<div class="topic-metadata">

**Author:** [@Shivanshu\_Bagga](https://discuss.elastic.co/u/Shivanshu_Bagga)\
**Replies:** 2\
**Last updated:** [November 30, 2017, 9:28am UTC](https://discuss.elastic.co/t/failed-to-delete-indices-when-curator-configured-for-multiple-hosts-in-same-cluster/109373 "2017-11-30T09:28:42Z")

</div>

Here is my curator.yml configuration- client: hosts: - 192.168.101.188 - 192.168.10.136 port: 9200 url\_prefix: use\_ssl: False certificate: client\_cert: client\_key: ssl\_no\_validate: False http\_a…

---

## [Sizing Elastic](https://discuss.elastic.co/t/sizing-elastic/109702)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 6\
**Last updated:** [November 30, 2017, 9:22am UTC](https://discuss.elastic.co/t/sizing-elastic/109702 "2017-11-30T09:22:02Z")

</div>

I am trying to define the right size for a project and need some advice. I checked the size of event after processing and mapping, inside Elasticsearch and the Average was 25KB. We have 35 different logs and we are pla…

---

## [Joins in ElasticSearch](https://discuss.elastic.co/t/joins-in-elasticsearch/108360)

<div class="topic-metadata">

**Author:** [@devil\_srj7](https://discuss.elastic.co/u/devil_srj7)\
**Replies:** 6\
**Last updated:** [November 30, 2017, 9:05am UTC](https://discuss.elastic.co/t/joins-in-elasticsearch/108360 "2017-11-30T09:05:49Z")

</div>

Now i need to create parent-child relation in my documents. There are 2 tables in MySQL. Employee +------+-------------+--------+------+ | id | name | salary | age | +------+-------------+--------…

---

## [Ingest Node Processor](https://discuss.elastic.co/t/ingest-node-processor/109616)

<div class="topic-metadata">

**Author:** [@annaK](https://discuss.elastic.co/u/annaK)\
**Replies:** 3\
**Last updated:** [November 30, 2017, 7:23am UTC](https://discuss.elastic.co/t/ingest-node-processor/109616 "2017-11-30T07:23:25Z")

</div>

Hi all, short question about the Processor. I am using a processor called monthlyindex, with the following settings: { "description": "monthly date-time index naming", "processors" : \[ { "date\_index\_name…

---

## [How to remove stopwords from query everywhere except phrase subquery?](https://discuss.elastic.co/t/how-to-remove-stopwords-from-query-everywhere-except-phrase-subquery/109687)

<div class="topic-metadata">

**Author:** [@anaym](https://discuss.elastic.co/u/anaym)\
**Replies:** 1\
**Last updated:** [November 30, 2017, 6:51am UTC](https://discuss.elastic.co/t/how-to-remove-stopwords-from-query-everywhere-except-phrase-subquery/109687 "2017-11-30T06:51:51Z")

</div>

the - single stopword in stop token filter. I search (by query\_string) The quick brown fox jumps "over the lazy" dog and I expect that the string should be transformed into quick brown fox jumps "over the lazy" dog, but…

---

## [Cant start ES after update from 5.6.2 to 6.0](https://discuss.elastic.co/t/cant-start-es-after-update-from-5-6-2-to-6-0/108843)

<div class="topic-metadata">

**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\
**Replies:** 11\
**Last updated:** [November 30, 2017, 6:11am UTC](https://discuss.elastic.co/t/cant-start-es-after-update-from-5-6-2-to-6-0/108843 "2017-11-30T06:11:59Z")

</div>

ENV: OS: Centos 7 ES : 56.2 to 6.0 After upgrade, i reinstall all plugin ES, after that start ES but got error Nov 23 15:50:33 elastic-04 systemd\[1\]: Unit elasticsearch.service entered failed state. Nov 23 15:53:07 e…

---

## [Nested aggregation query causing cluster failure](https://discuss.elastic.co/t/nested-aggregation-query-causing-cluster-failure/109595)

<div class="topic-metadata">

**Author:** [@AKwiro](https://discuss.elastic.co/u/AKwiro)\
**Replies:** 1\
**Last updated:** [November 30, 2017, 4:17am UTC](https://discuss.elastic.co/t/nested-aggregation-query-causing-cluster-failure/109595 "2017-11-30T04:17:31Z")

</div>

Hi all, I am using elasticsearch 5.6.4 in a cluster setup. Here's what my environment looks like: 5 nodes in the cluster. Each node has 16 GB of RAM and a VCPU with 4 cores. The setup is entirely hosted on the cloud. …

---

## [How do i sort before order with cardinalit aggs](https://discuss.elastic.co/t/how-do-i-sort-before-order-with-cardinalit-aggs/109500)

<div class="topic-metadata">

**Author:** [@truongdqse03303](https://discuss.elastic.co/u/truongdqse03303)\
**Replies:** 1\
**Last updated:** [November 30, 2017, 1:45am UTC](https://discuss.elastic.co/t/how-do-i-sort-before-order-with-cardinalit-aggs/109500 "2017-11-30T01:45:25Z")

</div>

Hi experts I have my query { "query": {"term": { "content\_level": "A" }}, "aggs": { "author": { "terms": {"field": "author\_name", "order": { "count.value" : "desc" }, "size" : 10}, "aggs": { "c…

---

## [Mapping type name \[\_mapping\] can't start with '\_'](https://discuss.elastic.co/t/mapping-type-name-mapping-cant-start-with/109672)

<div class="topic-metadata">

**Author:** [@Dannick\_Montanede](https://discuss.elastic.co/u/Dannick_Montanede)\
**Replies:** 2\
**Last updated:** [November 30, 2017, 1:31am UTC](https://discuss.elastic.co/t/mapping-type-name-mapping-cant-start-with/109672 "2017-11-30T01:31:12Z")

</div>

I don't understand why I can't update my index. I always have the same error : org.elasticsearch.indices.InvalidTypeNameException: mapping type name \[\_mapping\] can't start with '\_'

---

## [Geohash aggregation with parent/child documents (grouping by parent id)](https://discuss.elastic.co/t/geohash-aggregation-with-parent-child-documents-grouping-by-parent-id/109654)

<div class="topic-metadata">

**Author:** [@matt.veitas](https://discuss.elastic.co/u/matt.veitas)\
**Replies:** 0\
**Last updated:** [November 29, 2017, 10:56pm UTC](https://discuss.elastic.co/t/geohash-aggregation-with-parent-child-documents-grouping-by-parent-id/109654 "2017-11-29T22:56:11Z")

</div>

I am looking to do a geohash aggregation on a parent/child relationship. Our data model looks like the following: A contact can have multiple different types of locations associated with it (parent: contact, child: loca…

---

## [Question about recent snapshot bug (#27214)](https://discuss.elastic.co/t/question-about-recent-snapshot-bug-27214/109270)

<div class="topic-metadata">

**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\
**Replies:** 3\
**Last updated:** [November 29, 2017, 11:45pm UTC](https://discuss.elastic.co/t/question-about-recent-snapshot-bug-27214/109270 "2017-11-29T23:45:47Z")

</div>

Hi, Is it true that there is no resolution or workaround for this currently? We cannot take snapshots in our production environment right now and are not in a position to upgrade elastic in the immediate future. Link …

---

## [Setup-passwords runs multiple times. It's not supposed to?](https://discuss.elastic.co/t/setup-passwords-runs-multiple-times-its-not-supposed-to/109497)

<div class="topic-metadata">

**Author:** [@bradley](https://discuss.elastic.co/u/bradley)\
**Replies:** 7\
**Last updated:** [November 29, 2017, 11:37pm UTC](https://discuss.elastic.co/t/setup-passwords-runs-multiple-times-its-not-supposed-to/109497 "2017-11-29T23:37:55Z")

</div>

In the documentation on https://www.elastic.co/guide/en/x-pack/current/setting-up-authentication.html, it says, "After you set a password for the elastic user, the bootstrap password is no longer valid; you cannot run th…

---

## [Help with nested datatype or parent/child documents](https://discuss.elastic.co/t/help-with-nested-datatype-or-parent-child-documents/109658)

<div class="topic-metadata">

**Author:** [@Petar\_Pavlovic](https://discuss.elastic.co/u/Petar_Pavlovic)\
**Replies:** 0\
**Last updated:** [November 29, 2017, 11:03pm UTC](https://discuss.elastic.co/t/help-with-nested-datatype-or-parent-child-documents/109658 "2017-11-29T23:03:22Z")

</div>

I'm having a problem with organizing index, so I would appreciate your help. My data is like this: make model bodystyle trim package price Audi A3 hatchback 1.6TDI Package1 18000 Aud…

---

## [After upgrade elasticsearch version getting error no \[query\] registered for \[filter\]","line":1,"col":20}\],"type":"parsing\_exception","reason":"no \[query\] registered for \[filter\]","line":1,"col":20},"status":400}](https://discuss.elastic.co/t/after-upgrade-elasticsearch-version-getting-error-no-query-registered-for-filter-line-1-col-20-type-parsing-exception-reason-no-query-registered-for-filter-line-1-col-20-status-400/109571)

<div class="topic-metadata">

**Author:** [@ankitbhai](https://discuss.elastic.co/u/ankitbhai)\
**Replies:** 5\
**Last updated:** [November 29, 2017, 10:39pm UTC](https://discuss.elastic.co/t/after-upgrade-elasticsearch-version-getting-error-no-query-registered-for-filter-line-1-col-20-type-parsing-exception-reason-no-query-registered-for-filter-line-1-col-20-status-400/109571 "2017-11-29T22:39:32Z")

</div>

Elasticsearch version (bin/elasticsearch --version): 5.0 Plugins installed: \[\] NO JVM version (java -version): OS version (uname -a if on a Unix-like system): Linux Description of the problem including expected versu…

---

## [Time diffrence in painless script](https://discuss.elastic.co/t/time-diffrence-in-painless-script/109349)

<div class="topic-metadata">

**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\
**Replies:** 2\
**Last updated:** [November 29, 2017, 9:39pm UTC](https://discuss.elastic.co/t/time-diffrence-in-painless-script/109349 "2017-11-29T21:39:04Z")

</div>

Hi i am trying to create Entity centric index by using painless script , i able to create entity index and upload data , but now i am trying to calculate time difference between two date . my painless script looks like…

---

## [Best values for keep alive (search scroll api) and batch size (bulk api)](https://discuss.elastic.co/t/best-values-for-keep-alive-search-scroll-api-and-batch-size-bulk-api/109075)

<div class="topic-metadata">

**Author:** [@Natalia\_Kuleniuk](https://discuss.elastic.co/u/Natalia_Kuleniuk)\
**Replies:** 1\
**Last updated:** [November 29, 2017, 8:24pm UTC](https://discuss.elastic.co/t/best-values-for-keep-alive-search-scroll-api-and-batch-size-bulk-api/109075 "2017-11-29T20:24:31Z")

</div>

I need to reindex data in my ES index (150 million documents). I am going t use search and scroll API to get the data from old index it (I cannot use reindex API, because we have old ES version) and bulk API to copy it …

---

## [Springboot with local elasticsearch instance not working](https://discuss.elastic.co/t/springboot-with-local-elasticsearch-instance-not-working/109281)

<div class="topic-metadata">

**Author:** [@nadiGam](https://discuss.elastic.co/u/nadiGam)\
**Replies:** 2\
**Last updated:** [November 29, 2017, 7:51pm UTC](https://discuss.elastic.co/t/springboot-with-local-elasticsearch-instance-not-working/109281 "2017-11-29T19:51:58Z")

</div>

I've written a very elaborated question in 'stackoverflow' which i would like to refer you guys to it , maybe u can help :slight\_smile: Thanks !

---

## [How do I create a query to perform the following](https://discuss.elastic.co/t/how-do-i-create-a-query-to-perform-the-following/109400)

<div class="topic-metadata">

**Author:** [@iitgrad](https://discuss.elastic.co/u/iitgrad)\
**Replies:** 3\
**Last updated:** [November 29, 2017, 7:19pm UTC](https://discuss.elastic.co/t/how-do-i-create-a-query-to-perform-the-following/109400 "2017-11-29T19:19:26Z")

</div>

My docs contain a single key value pair where the value is an array of words. I would like to find all docs that contain at least one of say “foo”, “bar”, “cloud” but exclude any that might have these words but also othe…

---

## [Dynamically update mapping values](https://discuss.elastic.co/t/dynamically-update-mapping-values/109527)

<div class="topic-metadata">

**Author:** [@prabhu\_pandurangan](https://discuss.elastic.co/u/prabhu_pandurangan)\
**Replies:** 2\
**Last updated:** [November 29, 2017, 5:40pm UTC](https://discuss.elastic.co/t/dynamically-update-mapping-values/109527 "2017-11-29T17:40:06Z")

</div>

Hi Team, Below is my index mapping & i need to map 'has\_impact' property from 'key\_mapping' to the property in 'template\_mapping' during run\_time. How do i achieve that? Appreciate your help. { "index-name": { "…

---

## [ML What is the difference between by\_field\_name and partition\_field\_name](https://discuss.elastic.co/t/ml-what-is-the-difference-between-by-field-name-and-partition-field-name/108720)

<div class="topic-metadata">

**Author:** [@hym](https://discuss.elastic.co/u/hym)\
**Replies:** 1\
**Last updated:** [November 29, 2017, 5:28pm UTC](https://discuss.elastic.co/t/ml-what-is-the-difference-between-by-field-name-and-partition-field-name/108720 "2017-11-29T17:28:54Z")

</div>

Hi, In detector object configuration we have two fields by\_field\_name: used to split the data partition\_field\_name : used to segment the analyses what is the difference between them? Thanks in advance

---

## [Can i run rally on local elastic instance](https://discuss.elastic.co/t/can-i-run-rally-on-local-elastic-instance/109488)

<div class="topic-metadata">

**Author:** [@Ankit3](https://discuss.elastic.co/u/Ankit3)\
**Replies:** 8\
**Last updated:** [November 29, 2017, 5:14pm UTC](https://discuss.elastic.co/t/can-i-run-rally-on-local-elastic-instance/109488 "2017-11-29T17:14:28Z")

</div>

Hi , I am very new to elastic search and rally. I downloaded elastic on my local and running on 127.0.0.1:9200 Can i run rally on local elastic instance ? I tried few options even with target host but none worked. Ca…

---

## [ML memory hits hard\_limit - closed](https://discuss.elastic.co/t/ml-memory-hits-hard-limit-closed/108459)

<div class="topic-metadata">

**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\
**Replies:** 6\
**Last updated:** [November 29, 2017, 4:49pm UTC](https://discuss.elastic.co/t/ml-memory-hits-hard-limit-closed/108459 "2017-11-29T16:49:02Z")

</div>

I am running an ML job that keeps hitting the hard\_limit on memory status, closing this I'm assuming this has something to do with the variables I've chosen. I tried to set the model memory limit up from the default(40…

---

## [Scripts in elastic search gives error](https://discuss.elastic.co/t/scripts-in-elastic-search-gives-error/109526)

<div class="topic-metadata">

**Author:** [@anilagrawal6991](https://discuss.elastic.co/u/anilagrawal6991)\
**Replies:** 1\
**Last updated:** [November 29, 2017, 4:47pm UTC](https://discuss.elastic.co/t/scripts-in-elastic-search-gives-error/109526 "2017-11-29T16:47:04Z")

</div>

hello, I am using ES 2.3 on my system and create index on ES using sense PUT my\_index/my\_type/1 { "my\_field": 5 } and now i using script to search data GET my\_index/\_search { "script\_fields": { "my\_field": { "…

---

## [Labeling elastic nodes by API?](https://discuss.elastic.co/t/labeling-elastic-nodes-by-api/109119)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 5\
**Last updated:** [November 29, 2017, 4:46pm UTC](https://discuss.elastic.co/t/labeling-elastic-nodes-by-api/109119 "2017-11-29T16:46:01Z")

</div>

Hi, can the following attribute be set by API with 5.6.x? node.attr.box\_type Or only through the elastisearch.yml config?

---

## [\[.NET\] UAX URL Email Tokenizer Issue](https://discuss.elastic.co/t/net-uax-url-email-tokenizer-issue/109367)

<div class="topic-metadata">

**Author:** [@MT\_WSM](https://discuss.elastic.co/u/MT_WSM)\
**Replies:** 1\
**Last updated:** [November 29, 2017, 4:23pm UTC](https://discuss.elastic.co/t/net-uax-url-email-tokenizer-issue/109367 "2017-11-29T16:23:14Z")

</div>

Hi, I have been using Elasticsearch through Nest (.NET technology) for a while now. I am currently working on an application where the user can do some search and more precisely looking for someone by typing an email fo…

---

## [Unbalanced disk usage with ES 2.4.x](https://discuss.elastic.co/t/unbalanced-disk-usage-with-es-2-4-x/108591)

<div class="topic-metadata">

**Author:** [@hgfxng](https://discuss.elastic.co/u/hgfxng)\
**Replies:** 7\
**Last updated:** [November 29, 2017, 3:21pm UTC](https://discuss.elastic.co/t/unbalanced-disk-usage-with-es-2-4-x/108591 "2017-11-29T15:21:37Z")

</div>

Hi, On a 7 nodes cluster, I had to replace two of the nodes. For that I used cluster routing allocation exclusion lists to make shards be moved away of those two nodes in order to shutdown ES on both. Then I added new …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1870)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1872)
