# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1876 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1877 --- ## [Fire multiple queries based on the values returned from the previous query elasticsearch](https://discuss.elastic.co/t/fire-multiple-queries-based-on-the-values-returned-from-the-previous-query-elasticsearch/109205)
**Author:** [@ayushbij27](https://discuss.elastic.co/u/ayushbij27)\ **Replies:** 0\ **Last updated:** [November 27, 2017, 11:16am UTC](https://discuss.elastic.co/t/fire-multiple-queries-based-on-the-values-returned-from-the-previous-query-elasticsearch/109205 "2017-11-27T11:16:24Z")
Hi All, I am trying a scenario where based on results from previous queries I should be able to fire multiple queries on same index simultaneously. So Suppose,based on the previous query if I got the results like 'A','… --- ## [Max file descriptors \[4096\] for elasticsearch process is too low](https://discuss.elastic.co/t/max-file-descriptors-4096-for-elasticsearch-process-is-too-low/109195)
**Author:** [@manikesh](https://discuss.elastic.co/u/manikesh)\ **Replies:** 0\ **Last updated:** [November 27, 2017, 10:10am UTC](https://discuss.elastic.co/t/max-file-descriptors-4096-for-elasticsearch-process-is-too-low/109195 "2017-11-27T10:10:49Z")
I started getting this error when my services were rebooted today... post that seeing this error on both ES instance.. I am using elatstic - 5.1.2 on RHEL 6.8 version .. my cluster is made of two nodes only. I have rea… --- ## [Elasticsearch monitor Esearch query sent to Elasticsearch cluster](https://discuss.elastic.co/t/elasticsearch-monitor-esearch-query-sent-to-elasticsearch-cluster/109200)
**Author:** [@Prashant\_Agrawal](https://discuss.elastic.co/u/Prashant_Agrawal)\ **Replies:** 0\ **Last updated:** [November 27, 2017, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-monitor-esearch-query-sent-to-elasticsearch-cluster/109200 "2017-11-27T10:43:04Z")
Hi All, Is there a way where we can monitor the elastic search query along with the user details. We have the cluster running with xpack and wanted to log the search request along with user details so as to know which … --- ## [Error in Search Guard issue tracker](https://discuss.elastic.co/t/error-in-search-guard-issue-tracker/109197)
**Author:** [@dimalini](https://discuss.elastic.co/u/dimalini)\ **Replies:** 0\ **Last updated:** [November 27, 2017, 10:25am UTC](https://discuss.elastic.co/t/error-in-search-guard-issue-tracker/109197 "2017-11-27T10:25:08Z")
Hi, We are using ES5.4.1. In one of our production environment, a node left out of cluster and after it rejoined we are seeing master nodes giving these warning messages. Could anyone please take a look and clarify how … --- ## [Help with aggregations](https://discuss.elastic.co/t/help-with-aggregations/109012)
**Author:** [@sergios](https://discuss.elastic.co/u/sergios)\ **Replies:** 3\ **Last updated:** [November 27, 2017, 9:51am UTC](https://discuss.elastic.co/t/help-with-aggregations/109012 "2017-11-27T09:51:20Z")
Hello, I'm trying to build a query to get something like: SELECT \* FROM 'my\_index' WHERE field1 = 'value1' GROUP BY 'field2' ORDER BY 'timestamp' DESC LIMIT 1 Is this possible to do in Elasticsearch? I have tried to u… --- ## [\_id field limitations](https://discuss.elastic.co/t/id-field-limitations/109192)
**Author:** [@seilat](https://discuss.elastic.co/u/seilat)\ **Replies:** 1\ **Last updated:** [November 27, 2017, 9:49am UTC](https://discuss.elastic.co/t/id-field-limitations/109192 "2017-11-27T09:49:10Z")
Hi, When using the \_bulk API its possible to index a document with \_id which contains malformed url characters such as '' and white spaces. Later if one tries to use the GET API and reference the document \_id elastic … --- ## [Could not initialize class org.elasticsearch.http.netty3.Netty3HttpServerTransport](https://discuss.elastic.co/t/could-not-initialize-class-org-elasticsearch-http-netty3-netty3httpservertransport/109190)
**Author:** [@kanonlemon](https://discuss.elastic.co/u/kanonlemon)\ **Replies:** 0\ **Last updated:** [November 27, 2017, 9:16am UTC](https://discuss.elastic.co/t/could-not-initialize-class-org-elasticsearch-http-netty3-netty3httpservertransport/109190 "2017-11-27T09:16:20Z")
Caused by: java.lang.NoClassDefFoundError: Could not initialize class org.elasticsearch.http.netty3.Netty3HttpServerTransport at org.elasticsearch.transport.Netty3Plugin.getSettings(Netty3Plugin.java:54) ~\[transport-net… --- ## [Is an ingest node compulsory for x-pack, in an ES cluster?](https://discuss.elastic.co/t/is-an-ingest-node-compulsory-for-x-pack-in-an-es-cluster/109183)
**Author:** [@subin](https://discuss.elastic.co/u/subin)\ **Replies:** 3\ **Last updated:** [November 27, 2017, 9:03am UTC](https://discuss.elastic.co/t/is-an-ingest-node-compulsory-for-x-pack-in-an-es-cluster/109183 "2017-11-27T09:03:33Z")
Hi, I've an ES cluster of 3 (data and master-eligible nodes) and 1 (coordinating-only) node. I've installed x-pack on all. When I tried to start two nodes, it started throwing up the below: Caused by: org.elasticsearch… --- ## [TLS not working with x-pack for es cluster](https://discuss.elastic.co/t/tls-not-working-with-x-pack-for-es-cluster/109061)
**Author:** [@subin](https://discuss.elastic.co/u/subin)\ **Replies:** 8\ **Last updated:** [November 27, 2017, 8:56am UTC](https://discuss.elastic.co/t/tls-not-working-with-x-pack-for-es-cluster/109061 "2017-11-27T08:56:28Z")
Hi, I've a four-node es cluster with 3 data/master-eligible nodes and 1 coordinating-only node. I've installed x-pack on all of them. But, configuring the TLS part is where I'm lost. I'm following: https://www.elastic.… --- ## [Optimize Elastic Search Settings For Search Speed](https://discuss.elastic.co/t/optimize-elastic-search-settings-for-search-speed/108248)
**Author:** [@wpearson4](https://discuss.elastic.co/u/wpearson4)\ **Replies:** 5\ **Last updated:** [November 27, 2017, 8:29am UTC](https://discuss.elastic.co/t/optimize-elastic-search-settings-for-search-speed/108248 "2017-11-27T08:29:39Z")
I am in the process of rebuilding my search stack. I was running in Elastic Cloud and I am now using dedicated hardware. My new setup consist of the following: 2 Data/Master Nodes with the following configuration • P… --- ## [Document-level security query params](https://discuss.elastic.co/t/document-level-security-query-params/108693)
**Author:** [@hym](https://discuss.elastic.co/u/hym)\ **Replies:** 4\ **Last updated:** [November 27, 2017, 8:27am UTC](https://discuss.elastic.co/t/document-level-security-query-params/108693 "2017-11-27T08:27:02Z")
Hi all, I am new in x-pack security module. I was wondering, I can use parameters having in the main query inside Doc-level query. Actually, what I want to do is: Having application level users which are different fro… --- ## [Can't send email from x-pack to gmail](https://discuss.elastic.co/t/cant-send-email-from-x-pack-to-gmail/108257)
**Author:** [@tran\_canh\_khanh](https://discuss.elastic.co/u/tran_canh_khanh)\ **Replies:** 4\ **Last updated:** [November 27, 2017, 7:02am UTC](https://discuss.elastic.co/t/cant-send-email-from-x-pack-to-gmail/108257 "2017-11-27T07:02:08Z")
Hi guys. I'm using x-pack to alert but i can't send email from x-pack to gmail.When it send email it had error "MessagingException\[failed to send email with subject \[Watcher Notification\] via account \[gmail\_account\]\]; n… --- ## [Bucket script its not working in visualization](https://discuss.elastic.co/t/bucket-script-its-not-working-in-visualization/109174)
**Author:** [@sreenu](https://discuss.elastic.co/u/sreenu)\ **Replies:** 0\ **Last updated:** [November 27, 2017, 6:32am UTC](https://discuss.elastic.co/t/bucket-script-its-not-working-in-visualization/109174 "2017-11-27T06:32:54Z")
http://localhost:5601/app/kibana#/visualize/create?type=table&indexPattern=40de5dd0-d116-11e7-8753-9f799542eb51&\_g=(refreshInterval:('$$hashKey':'object:192',display:'5%20seconds',pause:!f,section:1,value:5000),time:(fro… --- ## [Please delete thread](https://discuss.elastic.co/t/please-delete-thread/109149)
**Author:** [@AndyB](https://discuss.elastic.co/u/AndyB)\ **Replies:** 1\ **Last updated:** [November 26, 2017, 8:50pm UTC](https://discuss.elastic.co/t/please-delete-thread/109149 "2017-11-26T20:50:19Z")
Please delete thread. --- ## [In es 6 one index can have many types?](https://discuss.elastic.co/t/in-es-6-one-index-can-have-many-types/109159)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 3\ **Last updated:** [November 27, 2017, 3:35am UTC](https://discuss.elastic.co/t/in-es-6-one-index-can-have-many-types/109159 "2017-11-27T03:35:11Z")
in es 6 one index can have many types? --- ## [Phrase\_prefix query is not resulting the first term in the term.In the scenerio in autocomplete](https://discuss.elastic.co/t/phrase-prefix-query-is-not-resulting-the-first-term-in-the-term-in-the-scenerio-in-autocomplete/107901)
**Author:** [@venkat2758](https://discuss.elastic.co/u/venkat2758)\ **Replies:** 1\ **Last updated:** [November 26, 2017, 10:20pm UTC](https://discuss.elastic.co/t/phrase-prefix-query-is-not-resulting-the-first-term-in-the-term-in-the-scenerio-in-autocomplete/107901 "2017-11-26T22:20:05Z")
Hi Team , I am facing the issue while doing autocomplete in elasticsearch. my Query: GET /gensuite/itemfacetdata/\_search { "size" : 100, "query" : { "match\_phrase\_prefix": { "3": "doo" } }, "highl… --- ## [Why not the \_ingest/pipeline/\_simulate api support custom pattern?](https://discuss.elastic.co/t/why-not-the-ingest-pipeline-simulate-api-support-custom-pattern/109135)
**Author:** [@felayman](https://discuss.elastic.co/u/felayman)\ **Replies:** 1\ **Last updated:** [November 26, 2017, 10:07pm UTC](https://discuss.elastic.co/t/why-not-the-ingest-pipeline-simulate-api-support-custom-pattern/109135 "2017-11-26T22:07:59Z")
when i use the \_ingest/pipeline/\_simulate api as flollow: POST \_ingest/pipeline/\_simulate { "pipeline": { "description": "转换成指定格式的日期格式字段", "processors": \[ { "date": { "field": "date", … --- ## [Installing Elasticsearch on CentOS using RPM](https://discuss.elastic.co/t/installing-elasticsearch-on-centos-using-rpm/109143)
**Author:** [@AndyB](https://discuss.elastic.co/u/AndyB)\ **Replies:** 7\ **Last updated:** [November 26, 2017, 8:23pm UTC](https://discuss.elastic.co/t/installing-elasticsearch-on-centos-using-rpm/109143 "2017-11-26T20:23:28Z")
Hello, I'm currently running ElasticSearch Version: 5.0.1 on my CentOS dedicated server. It also has cPanel, but I assume the easiest way for me to upgrade to ElasticSearch 6.0.0 is to use the RPM instruction located he… --- ## [Elastic xpack security](https://discuss.elastic.co/t/elastic-xpack-security/108885)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 2\ **Last updated:** [November 26, 2017, 5:24pm UTC](https://discuss.elastic.co/t/elastic-xpack-security/108885 "2017-11-26T17:24:49Z")
Hi All, Am trying to enable the xpack security in my elastic stack machine, but iam unable to do so initially i tried to generate the auto password using bin/x-pack/setup-passwords auto i received some default passwo… --- ## [Elasticsearch disk threshold decider](https://discuss.elastic.co/t/elasticsearch-disk-threshold-decider/109116)
**Author:** [@hanbj](https://discuss.elastic.co/u/hanbj)\ **Replies:** 8\ **Last updated:** [November 26, 2017, 4:22pm UTC](https://discuss.elastic.co/t/elasticsearch-disk-threshold-decider/109116 "2017-11-26T16:22:29Z")
This problem is found in our production cluster： Due to the large amount of data, there are several nodes of the disk usage of more than 90%, check the ES log discovery: High disk watermark \[90%\] exceeded on \[XR6DsFmbQ… --- ## [\_analyze on multiple documents](https://discuss.elastic.co/t/analyze-on-multiple-documents/108487)
**Author:** [@seanlyu](https://discuss.elastic.co/u/seanlyu)\ **Replies:** 6\ **Last updated:** [November 26, 2017, 12:34pm UTC](https://discuss.elastic.co/t/analyze-on-multiple-documents/108487 "2017-11-26T12:34:14Z")
Sorry for the Korean values that could confuse you. But it wouldn't be that hard to understand when you are reading this. I am using the index named sliced\_data and it his milions of documents in it. I am using Kibana … --- ## [Simple sql type query in multiple index](https://discuss.elastic.co/t/simple-sql-type-query-in-multiple-index/109118)
**Author:** [@Naqib\_Faiyaz](https://discuss.elastic.co/u/Naqib_Faiyaz)\ **Replies:** 3\ **Last updated:** [November 26, 2017, 8:38am UTC](https://discuss.elastic.co/t/simple-sql-type-query-in-multiple-index/109118 "2017-11-26T08:38:04Z")
Hello, Sorry to bother you guys. I've searched a lot and couldn't find a concrete answer regarding multiple index search. I know elasticsearch does not do well with join type query. Still I want to know if there is any … --- ## [Implementing Blacklist with Terms Lookup](https://discuss.elastic.co/t/implementing-blacklist-with-terms-lookup/107920)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 2\ **Last updated:** [November 25, 2017, 11:36pm UTC](https://discuss.elastic.co/t/implementing-blacklist-with-terms-lookup/107920 "2017-11-25T23:36:14Z")
Hi all, I have a set of documents representing data of a phone call, basically from, to, duration I want to implement a watcher that if a document with certain from number is being inserted an alarm is raised. So I de… --- ## [Should I move ES to Docker?](https://discuss.elastic.co/t/should-i-move-es-to-docker/109110)
**Author:** [@prophoto](https://discuss.elastic.co/u/prophoto)\ **Replies:** 5\ **Last updated:** [November 25, 2017, 8:58pm UTC](https://discuss.elastic.co/t/should-i-move-es-to-docker/109110 "2017-11-25T20:58:39Z")
I have ES 5.3 and Logstash 5.3 installed on a Centos 7 VM. Lately I've started using Docker for more projects and starting to like it. I need to move ES off of the current host machine onto another so I can use it for an… --- ## [Unable to start elasticsearch service](https://discuss.elastic.co/t/unable-to-start-elasticsearch-service/108800)
**Author:** [@sitilge](https://discuss.elastic.co/u/sitilge)\ **Replies:** 4\ **Last updated:** [November 25, 2017, 6:12pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-service/108800 "2017-11-25T18:12:10Z")
Running arch 4.13.12, elasticsearch Version: 6.0.0, Build: 8f0685b/2017-11-10T18:41:22.859Z, JVM: 1.8.0\_144 I am unable to # systemctl start elasticsearch. The logs output elasticsearch.service: PID file /run/elasticse… --- ## [Prevent /var/log/messages](https://discuss.elastic.co/t/prevent-var-log-messages/109004)
**Author:** [@Balaji\_V](https://discuss.elastic.co/u/Balaji_V)\ **Replies:** 1\ **Last updated:** [November 25, 2017, 8:43am UTC](https://discuss.elastic.co/t/prevent-var-log-messages/109004 "2017-11-25T08:43:54Z")
Hi All, I am using Elasticsearch 5.6.0 docker image which was working fine for sometime and suddenly /var file system got filled up with elasticsearch log files in messages file. I've already configured path.log /apps/… --- ## [Query string query ngrams and wildcards or fuzziness or proximity searches](https://discuss.elastic.co/t/query-string-query-ngrams-and-wildcards-or-fuzziness-or-proximity-searches/108650)
**Author:** [@adyjayex](https://discuss.elastic.co/u/adyjayex)\ **Replies:** 6\ **Last updated:** [November 25, 2017, 4:51am UTC](https://discuss.elastic.co/t/query-string-query-ngrams-and-wildcards-or-fuzziness-or-proximity-searches/108650 "2017-11-25T04:51:44Z")
Hello, GIven the following analysis settings: "analysis": { "tokenizer": { "ngram\_tokenizer": { "type": "ngram", "min\_gram": 3, "max\_gram": 3, "token\_chars": \[\] … --- ## [High cpu load on only one node](https://discuss.elastic.co/t/high-cpu-load-on-only-one-node/109090)
**Author:** [@xlc](https://discuss.elastic.co/u/xlc)\ **Replies:** 1\ **Last updated:** [November 25, 2017, 4:08am UTC](https://discuss.elastic.co/t/high-cpu-load-on-only-one-node/109090 "2017-11-25T04:08:39Z")
Hi,all I have a cluster with 21 nodes,es5.3.0(31.9G heapsize).Only one has high cpu load around 90%,and load average about 30 while the others are 10% 5. The nodes are all using ssd data store,and gc well. Any ideas fo… --- ## [GCS Repository creation Issue](https://discuss.elastic.co/t/gcs-repository-creation-issue/109070)
**Author:** [@Hanish\_Bansal](https://discuss.elastic.co/u/Hanish_Bansal)\ **Replies:** 2\ **Last updated:** [November 25, 2017, 2:28am UTC](https://discuss.elastic.co/t/gcs-repository-creation-issue/109070 "2017-11-25T02:28:46Z")
Hi, We have recently upgraded our ES version from 5.6 to 6.0. After that we are facing issue in taking snapshot of data. In 6.0 ES, service.account option from repository has been removed so we need to add authenticat… --- ## [Spring data elasticsearch and @JsonRootName](https://discuss.elastic.co/t/spring-data-elasticsearch-and-jsonrootname/109072)
**Author:** [@ArunANayagam](https://discuss.elastic.co/u/ArunANayagam)\ **Replies:** 2\ **Last updated:** [November 24, 2017, 10:41pm UTC](https://discuss.elastic.co/t/spring-data-elasticsearch-and-jsonrootname/109072 "2017-11-24T22:41:26Z")
Hi, I use spring-boot-starter-data-elasticsearch dependency in my Java spring project to query ES 2.4.0 My json's look like this, { "event":{ "eventName":"Man U vs Arsenal", "eventDateTime":"Mon 24 Oct … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1875) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1877)