# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1884 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1885 --- ## [Parsing exception after upgrade to version 6](https://discuss.elastic.co/t/parsing-exception-after-upgrade-to-version-6/108157)
**Author:** [@Nadir](https://discuss.elastic.co/u/Nadir)\ **Replies:** 1\ **Last updated:** [November 18, 2017, 9:31am UTC](https://discuss.elastic.co/t/parsing-exception-after-upgrade-to-version-6/108157 "2017-11-18T09:31:26Z")
After upgrading my cluster to version 6 I got a lot of problems with the queries. What is wrong with this query ? {"search\_type":"query\_then\_fetch","ignore\_unavailable":true,"index":\["metricbeat-2017.11.17"\]} {"size":… --- ## [Deploying Elastic Stack on application servers](https://discuss.elastic.co/t/deploying-elastic-stack-on-application-servers/108154)
**Author:** [@Shreyas\_Gade](https://discuss.elastic.co/u/Shreyas_Gade)\ **Replies:** 1\ **Last updated:** [November 18, 2017, 9:25am UTC](https://discuss.elastic.co/t/deploying-elastic-stack-on-application-servers/108154 "2017-11-18T09:25:34Z")
I have tried Elastic stack on my laptop (single machine) with command line and Beats inputs. Can anyone tell me how to deploy Elastic Stack on application servers? What are the various ways I can deploy these component… --- ## [How to model schema in Elasticsearch when a particular entity contains both metadata and content](https://discuss.elastic.co/t/how-to-model-schema-in-elasticsearch-when-a-particular-entity-contains-both-metadata-and-content/108082)
**Author:** [@aniketkk](https://discuss.elastic.co/u/aniketkk)\ **Replies:** 6\ **Last updated:** [November 18, 2017, 7:53am UTC](https://discuss.elastic.co/t/how-to-model-schema-in-elasticsearch-when-a-particular-entity-contains-both-metadata-and-content/108082 "2017-11-18T07:53:58Z")
Hi, I am indexing articles information into Elasticsearch. The article information has metadata(article title, authors, viewCount ) and the article content itself. Metadata is of smaller size around 20KB. And article c… --- ## [Book search, Parent & child mapping multiple author](https://discuss.elastic.co/t/book-search-parent-child-mapping-multiple-author/108223)
**Author:** [@amitava82](https://discuss.elastic.co/u/amitava82)\ **Replies:** 1\ **Last updated:** [November 18, 2017, 7:47am UTC](https://discuss.elastic.co/t/book-search-parent-child-mapping-multiple-author/108223 "2017-11-18T07:47:27Z")
Hi, I'm looking at at an example of Parent & child mapping with Book and Author. But how do I design index where a book has multiple authors and I'd like to search for books with certain tags and author. Desired query: … --- ## [MultiGet in RestHighLevelClient](https://discuss.elastic.co/t/multiget-in-resthighlevelclient/108225)
**Author:** [@sinaavakh](https://discuss.elastic.co/u/sinaavakh)\ **Replies:** 1\ **Last updated:** [November 18, 2017, 7:41am UTC](https://discuss.elastic.co/t/multiget-in-resthighlevelclient/108225 "2017-11-18T07:41:14Z")
How do perform a multi-get request in RestHighLevelClient java? --- ## [Slow aggregation queries while ingesting data](https://discuss.elastic.co/t/slow-aggregation-queries-while-ingesting-data/108212)
**Author:** [@premieredigital](https://discuss.elastic.co/u/premieredigital)\ **Replies:** 1\ **Last updated:** [November 18, 2017, 6:31am UTC](https://discuss.elastic.co/t/slow-aggregation-queries-while-ingesting-data/108212 "2017-11-18T06:31:27Z")
I have a large aggregation query that becomes incredibly slow when I am updating my data. I am not saving the data to a tmp index (and then renaming it when it's done) but saving it directly to the index I'm querying. W… --- ## [CROSS REALM support for yaml role mapping file](https://discuss.elastic.co/t/cross-realm-support-for-yaml-role-mapping-file/108123)
**Author:** [@vcgadade](https://discuss.elastic.co/u/vcgadade)\ **Replies:** 2\ **Last updated:** [November 18, 2017, 6:07am UTC](https://discuss.elastic.co/t/cross-realm-support-for-yaml-role-mapping-file/108123 "2017-11-18T06:07:33Z")
Is there provision to integrate CROSS REALM (Active Directory) in role mapping file. some users are accessing from one active directory server and some are from other. Can you let me know the is there any option or only… --- ## [Got error when installing X-Pack](https://discuss.elastic.co/t/got-error-when-installing-x-pack/108211)
**Author:** [@jxz](https://discuss.elastic.co/u/jxz)\ **Replies:** 4\ **Last updated:** [November 18, 2017, 12:52am UTC](https://discuss.elastic.co/t/got-error-when-installing-x-pack/108211 "2017-11-18T00:52:01Z")
Hi, I got the error "Error: Could not find or load main class Xms4g -Xmx4g" when trying to install X-Pack with the command "bin\\elasticsearch-plugin install C:\\Users\\xzhang\\Downloads\\x-pack-5.2.2.zip" under %ES\_HOME% on… --- ## [ElasticSearch scroll over all documents always returns same 10 results](https://discuss.elastic.co/t/elasticsearch-scroll-over-all-documents-always-returns-same-10-results/107315)
**Author:** [@Natalia\_Kuleniuk](https://discuss.elastic.co/u/Natalia_Kuleniuk)\ **Replies:** 1\ **Last updated:** [November 17, 2017, 11:15pm UTC](https://discuss.elastic.co/t/elasticsearch-scroll-over-all-documents-always-returns-same-10-results/107315 "2017-11-17T23:15:36Z")
I have index and type with, lets say, 1000 documents. I would like to retrieve all documents using SCROLL API and then perform some action on them. I created query to get scroll id. Then in the loop, I am using scroll i… --- ## [How to restore all indices from a snapshot location?](https://discuss.elastic.co/t/how-to-restore-all-indices-from-a-snapshot-location/107185)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [November 17, 2017, 11:00pm UTC](https://discuss.elastic.co/t/how-to-restore-all-indices-from-a-snapshot-location/107185 "2017-11-17T23:00:44Z")
Hi, I have created a snapshot and below is the structure of my snapshots using GET /\_snapshot/ESSnapshots/\* command. { "snapshots": \[ { "snapshot": "mylogs1backup-20170920000007", "uuid": "XRpT\_8feTne… --- ## [Android Studio 3.0 elasticSearch library error when building android project](https://discuss.elastic.co/t/android-studio-3-0-elasticsearch-library-error-when-building-android-project/107085)
**Author:** [@hughboi](https://discuss.elastic.co/u/hughboi)\ **Replies:** 1\ **Last updated:** [November 17, 2017, 10:57pm UTC](https://discuss.elastic.co/t/android-studio-3-0-elasticsearch-library-error-when-building-android-project/107085 "2017-11-17T22:57:14Z")
Hello, I am trying to include org.elasticSearch:elasticSearch\ as a library to my android project. Right now I am using android studio 3.0, and am getting the following errors no matter how old/new of a version … --- ## [\[PHP\] expected \[END\_OBJECT\] but got \[FIELD\_NAME\], possibly too many query clauses](https://discuss.elastic.co/t/php-expected-end-object-but-got-field-name-possibly-too-many-query-clauses/107047)
**Author:** [@chrisan](https://discuss.elastic.co/u/chrisan)\ **Replies:** 1\ **Last updated:** [November 17, 2017, 10:50pm UTC](https://discuss.elastic.co/t/php-expected-end-object-but-got-field-name-possibly-too-many-query-clauses/107047 "2017-11-17T22:50:51Z")
Elasticsearch 2.4.5 PHP 7.0 I have the following aggregation query that works via curl but fails when I convert to PHP. I feel like I'm missing something stupid/easy and just looking for another set of eyes curl -XPO… --- ## [About reindexing using new topic library](https://discuss.elastic.co/t/about-reindexing-using-new-topic-library/107024)
**Author:** [@julie](https://discuss.elastic.co/u/julie)\ **Replies:** 1\ **Last updated:** [November 17, 2017, 10:47pm UTC](https://discuss.elastic.co/t/about-reindexing-using-new-topic-library/107024 "2017-11-17T22:47:02Z")
Is there any way to reindex using new topic (or semantic, or sentiment) library? --- ## [Numeric value in query\_string](https://discuss.elastic.co/t/numeric-value-in-query-string/106997)
**Author:** [@Binit\_kumar](https://discuss.elastic.co/u/Binit_kumar)\ **Replies:** 1\ **Last updated:** [November 17, 2017, 10:44pm UTC](https://discuss.elastic.co/t/numeric-value-in-query-string/106997 "2017-11-17T22:44:31Z")
{ "size":0, "query":{ "query\_string":{ "default\_field" : "machinename", "query": "clm-pun", "default\_operator":"AND" } } I am able to search all the machine names (e.g. clm-pun-03857,clm-pun-03452) from above qu… --- ## [Curator, delete old indices when cluster disk threshold is hit](https://discuss.elastic.co/t/curator-delete-old-indices-when-cluster-disk-threshold-is-hit/107400)
**Author:** [@elvarb](https://discuss.elastic.co/u/elvarb)\ **Replies:** 5\ **Last updated:** [November 17, 2017, 9:56pm UTC](https://discuss.elastic.co/t/curator-delete-old-indices-when-cluster-disk-threshold-is-hit/107400 "2017-11-17T21:56:43Z")
Reading the curator documentation I can create a filter that is hit if total size of the cluster goes over X amount, and I can delete old indices if they are over a certain size. I can not for the life of me figure out … --- ## [\_forcemerge blocking at the node or cluster level](https://discuss.elastic.co/t/forcemerge-blocking-at-the-node-or-cluster-level/108199)
**Author:** [@JonathanAaron](https://discuss.elastic.co/u/JonathanAaron)\ **Replies:** 3\ **Last updated:** [November 17, 2017, 9:33pm UTC](https://discuss.elastic.co/t/forcemerge-blocking-at-the-node-or-cluster-level/108199 "2017-11-17T21:33:07Z")
When the documentation says it's blocking messages. Is this at the node or cluster level. If I'm forcemerging one index will I be able to index into other indices? --- ## [X-pack ML job gives the following](https://discuss.elastic.co/t/x-pack-ml-job-gives-the-following/108027)
**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\ **Replies:** 3\ **Last updated:** [November 17, 2017, 9:26pm UTC](https://discuss.elastic.co/t/x-pack-ml-job-gives-the-following/108027 "2017-11-17T21:26:01Z")
2 weeks and probably about 15,000,000 records in a ML Job giving me the following error- \[2017-03-24T11:38:07,458\]\[WARN \]\[o.e.m.j.JvmGcMonitorService\] \[es154.162.client2\] \[gc\]\[816\] overhead, spent \[925ms\] collecting in … --- ## [Update by query using two indices](https://discuss.elastic.co/t/update-by-query-using-two-indices/107554)
**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\ **Replies:** 1\ **Last updated:** [November 17, 2017, 9:06pm UTC](https://discuss.elastic.co/t/update-by-query-using-two-indices/107554 "2017-11-17T21:06:14Z")
I have a index named "netdata" and the document looks likes this. { "\_index": "netdata", "\_type": "logs", "\_id": "AV-6k3aG0ecAB0dXdmTW", "\_score": 1, "\_source": { "Location": "Bangalore", … --- ## [Elasticsearch Handshake](https://discuss.elastic.co/t/elasticsearch-handshake/108186)
**Author:** [@grantcurell](https://discuss.elastic.co/u/grantcurell)\ **Replies:** 1\ **Last updated:** [November 17, 2017, 7:38pm UTC](https://discuss.elastic.co/t/elasticsearch-handshake/108186 "2017-11-17T19:38:33Z")
I'm trying to set up elasticsearch in a docker container across multiple hosts and cannot for the life of me get these guys to talk to each other. Most lately, I'm getting a handshake failed, but the IP address / port co… --- ## [Index failed to process cluster event (put-mapping) within 30s](https://discuss.elastic.co/t/index-failed-to-process-cluster-event-put-mapping-within-30s/108047)
**Author:** [@mahade01](https://discuss.elastic.co/u/mahade01)\ **Replies:** 3\ **Last updated:** [November 17, 2017, 7:32pm UTC](https://discuss.elastic.co/t/index-failed-to-process-cluster-event-put-mapping-within-30s/108047 "2017-11-17T19:32:04Z")
org.elasticsearch.cluster.metadata.ProcessClusterEventTimeoutException: failed to process cluster event (put-mapping) within 30s at org.elasticsearch.cluster.service.ClusterService.lambda$onTimeout$5(ClusterService.java… --- ## [Elasticsearch 5.3.2 Merge Spikes and Searchability Delay](https://discuss.elastic.co/t/elasticsearch-5-3-2-merge-spikes-and-searchability-delay/108031)
**Author:** [@sila5](https://discuss.elastic.co/u/sila5)\ **Replies:** 0\ **Last updated:** [November 16, 2017, 10:18pm UTC](https://discuss.elastic.co/t/elasticsearch-5-3-2-merge-spikes-and-searchability-delay/108031 "2017-11-16T22:18:24Z")
I need some help in diagnosing the performance of my elasticsearch cluster. I'm seeing large spikes in merge times and size at the same times each day during busy hours. As a result documents are taking hours sometimes… --- ## [ES 6.0 - Scripted Field HourOfDay with Timezone - error](https://discuss.elastic.co/t/es-6-0-scripted-field-hourofday-with-timezone-error/107792)
**Author:** [@mazoutte](https://discuss.elastic.co/u/mazoutte)\ **Replies:** 2\ **Last updated:** [November 17, 2017, 6:42pm UTC](https://discuss.elastic.co/t/es-6-0-scripted-field-hourofday-with-timezone-error/107792 "2017-11-17T18:42:43Z")
Hello, First Post Here, I will try to do my best to make a clear presentation. I recently upgraded ELK on my UAT node from 5.6 to 6.0 OS : 2012r2 ; single node. ELK : 6.0.0 Java : 1.8.0\_151 I was running a painles… --- ## [/usr/share/elasticsearch/data isn't in-line with the FHS (filesystem hierarchy standard)?](https://discuss.elastic.co/t/usr-share-elasticsearch-data-isnt-in-line-with-the-fhs-filesystem-hierarchy-standard/104090)
**Author:** [@JPvRiel](https://discuss.elastic.co/u/JPvRiel)\ **Replies:** 3\ **Last updated:** [November 17, 2017, 6:39pm UTC](https://discuss.elastic.co/t/usr-share-elasticsearch-data-isnt-in-line-with-the-fhs-filesystem-hierarchy-standard/104090 "2017-11-17T18:39:18Z")
As per Filesystem Hierarchy Standard The /usr/share hierarchy is for all read-only architecture independent data files. The example from elasticsearch at Install Elasticsearch with Docker | Elasticsearch Guide \[8.11\]… --- ## [OpsGenie Integration with elasticsearch](https://discuss.elastic.co/t/opsgenie-integration-with-elasticsearch/108184)
**Author:** [@Michael.Craig](https://discuss.elastic.co/u/Michael.Craig)\ **Replies:** 0\ **Last updated:** [November 17, 2017, 6:22pm UTC](https://discuss.elastic.co/t/opsgenie-integration-with-elasticsearch/108184 "2017-11-17T18:22:14Z")
Hello I am trying to print out the value which triggered my watcher to fire on OpsGenie. I can put the following fields into the alert fields as seen in the image \[upload\] After studying the json object in the logs f… --- ## [integTestCluster waitCondition](https://discuss.elastic.co/t/integtestcluster-waitcondition/107272)
**Author:** [@jvemugunta](https://discuss.elastic.co/u/jvemugunta)\ **Replies:** 1\ **Last updated:** [November 17, 2017, 6:03pm UTC](https://discuss.elastic.co/t/integtestcluster-waitcondition/107272 "2017-11-17T18:03:19Z")
integTestCluster { dependsOn buildZip setting "xpack.monitoring.enabled", "false" // monitoring depends on painless which is not available to us setting "xpack.ml.enabled", "false" // ml has named writeables and the c… --- ## [Bucket script parsing\_exception error](https://discuss.elastic.co/t/bucket-script-parsing-exception-error/107203)
**Author:** [@Frank\_Matera](https://discuss.elastic.co/u/Frank_Matera)\ **Replies:** 1\ **Last updated:** [November 17, 2017, 5:59pm UTC](https://discuss.elastic.co/t/bucket-script-parsing-exception-error/107203 "2017-11-17T17:59:25Z")
I am trying to calculate the percentage of 2 aggregated fields. The aggs return the expected values, but when I add the bucket script, I am receiving an error "Unknown key for a START\_OBJECT in \[Computing\_ASR\].", I am re… --- ## [Optimizing Speed of Searches/Visualizations](https://discuss.elastic.co/t/optimizing-speed-of-searches-visualizations/108164)
**Author:** [@CDR](https://discuss.elastic.co/u/CDR)\ **Replies:** 1\ **Last updated:** [November 17, 2017, 4:35pm UTC](https://discuss.elastic.co/t/optimizing-speed-of-searches-visualizations/108164 "2017-11-17T16:35:21Z")
In my Elastic Stack we are running Elasticsearch, Logstash and Kibana. The Elasticsearch instance has 171,802,946 log lines in it. The issue that I am running into is that when I try to create a visualization/dashboard a… --- ## [Unable to Run elasticsearch on docker with different configuration file](https://discuss.elastic.co/t/unable-to-run-elasticsearch-on-docker-with-different-configuration-file/108163)
**Author:** [@namratha\_bv](https://discuss.elastic.co/u/namratha_bv)\ **Replies:** 0\ **Last updated:** [November 17, 2017, 4:26pm UTC](https://discuss.elastic.co/t/unable-to-run-elasticsearch-on-docker-with-different-configuration-file/108163 "2017-11-17T16:26:52Z")
I have below configurations in /etc/elasticsearch/elasticsearch-5-6.yml ################################### User Details start ################################### cluster.name: immunedata-cluster-5-6 node.name: "immu… --- ## [How to configure Tokenization Dictionary](https://discuss.elastic.co/t/how-to-configure-tokenization-dictionary/108158)
**Author:** [@duanhv](https://discuss.elastic.co/u/duanhv)\ **Replies:** 0\ **Last updated:** [November 17, 2017, 4:08pm UTC](https://discuss.elastic.co/t/how-to-configure-tokenization-dictionary/108158 "2017-11-17T16:08:20Z")
Hi everyone, I use icu\_tokenizer for my index, data is Traditional Chinese Normally keyword "珍珠奶茶" will be tokenized into 2 words "珍珠" and "奶茶" it's good with almost keywords I have but with some keywords (~200 keywo… --- ## [How can I host elastic search(5.3.3) on https?](https://discuss.elastic.co/t/how-can-i-host-elastic-search-5-3-3-on-https/108105)
**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\ **Replies:** 9\ **Last updated:** [November 17, 2017, 3:35pm UTC](https://discuss.elastic.co/t/how-can-i-host-elastic-search-5-3-3-on-https/108105 "2017-11-17T15:35:53Z")
Not able to find an proper solution on this can anyone help me stepwise how to do it? [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1883) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1885)