# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1887

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1888

---

## [Current Time](https://discuss.elastic.co/t/current-time/107863)

<div class="topic-metadata">

**Author:** [@hamrio](https://discuss.elastic.co/u/hamrio)\
**Replies:** 2\
**Last updated:** [November 16, 2017, 6:57am UTC](https://discuss.elastic.co/t/current-time/107863 "2017-11-16T06:57:27Z")

</div>

Hi, Is there someway to get current time at script fields? Usually for getting in range I can use now, but for scripted query it returns as string. I've searched some topic and it said, it must be send by params. Is the…

---

## [Elasticsearch QueryStringBuilder using wildcards](https://discuss.elastic.co/t/elasticsearch-querystringbuilder-using-wildcards/107870)

<div class="topic-metadata">

**Author:** [@Ganapathy](https://discuss.elastic.co/u/Ganapathy)\
**Replies:** 0\
**Last updated:** [November 16, 2017, 6:40am UTC](https://discuss.elastic.co/t/elasticsearch-querystringbuilder-using-wildcards/107870 "2017-11-16T06:40:49Z")

</div>

I am using elasticsearch2.3.2 in which I stumbled on the following use case where we are not getting the expected result while using QueryStringBuilder. Following is an example of what we did, 1) Created an index with …

---

## [Watcher: How to convert the execution\_time to epoch time](https://discuss.elastic.co/t/watcher-how-to-convert-the-execution-time-to-epoch-time/105569)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 5\
**Last updated:** [November 16, 2017, 6:18am UTC](https://discuss.elastic.co/t/watcher-how-to-convert-the-execution-time-to-epoch-time/105569 "2017-11-16T06:18:45Z")

</div>

How to convert "execution\_time" : "2017-10-27T07:09:14.666Z" of watcher to unix epoch time so that the converted epoch time can be used in the action.

---

## [How to compute sum of field1 / sum of fileld2？](https://discuss.elastic.co/t/how-to-compute-sum-of-field1-sum-of-fileld2/107754)

<div class="topic-metadata">

**Author:** [@freebsdly](https://discuss.elastic.co/u/freebsdly)\
**Replies:** 3\
**Last updated:** [November 16, 2017, 2:36am UTC](https://discuss.elastic.co/t/how-to-compute-sum-of-field1-sum-of-fileld2/107754 "2017-11-16T02:36:28Z")

</div>

hi，all： i use elasticsearch2.4、logstash5.6.3 and grafana to monitoring network devices by netflow。but when i create dashboard in grafana to watch output port in someone device, i found sometimes the flow capacity large …

---

## [How to connect sql server 2016 with Elastic Search](https://discuss.elastic.co/t/how-to-connect-sql-server-2016-with-elastic-search/107837)

<div class="topic-metadata">

**Author:** [@Bhanu\_Y](https://discuss.elastic.co/u/Bhanu_Y)\
**Replies:** 1\
**Last updated:** [November 16, 2017, 1:07am UTC](https://discuss.elastic.co/t/how-to-connect-sql-server-2016-with-elastic-search/107837 "2017-11-16T01:07:43Z")

</div>

Hi, Can anyone help me in finding solution for integrating sql server 2016 with elastic search. I tried this http://hintdesk.com/how-to-connect-elasticsearch-to-ms-sql-server/ but didn't work out. Any help is appreciat…

---

## [Error Starting Elastic service](https://discuss.elastic.co/t/error-starting-elastic-service/107836)

<div class="topic-metadata">

**Author:** [@as9876](https://discuss.elastic.co/u/as9876)\
**Replies:** 1\
**Last updated:** [November 15, 2017, 11:04pm UTC](https://discuss.elastic.co/t/error-starting-elastic-service/107836 "2017-11-15T23:04:23Z")

</div>

service elasticsearch status shows me: failed (Result: exit-code) ... main ERROR Null object returned for RollingFile in Appenders. I couldn't find another thread which solves this issue. Thanks,

---

## [Upgrade from 1.x to 5.x](https://discuss.elastic.co/t/upgrade-from-1-x-to-5-x/107834)

<div class="topic-metadata">

**Author:** [@Tomasz\_Kulig](https://discuss.elastic.co/u/Tomasz_Kulig)\
**Replies:** 2\
**Last updated:** [November 15, 2017, 10:31pm UTC](https://discuss.elastic.co/t/upgrade-from-1-x-to-5-x/107834 "2017-11-15T22:31:26Z")

</div>

Hi, I'm wondering. We are going to upgrade our ES server soon. I see two option here: migrate from 1.x to 2.4, then use the migration tool, reindex and upgrade to 5.x, create a new server, install ES5 there and just…

---

## [Search for any word without mappings using URI query](https://discuss.elastic.co/t/search-for-any-word-without-mappings-using-uri-query/107487)

<div class="topic-metadata">

**Author:** [@elasticuser1](https://discuss.elastic.co/u/elasticuser1)\
**Replies:** 6\
**Last updated:** [November 15, 2017, 6:37pm UTC](https://discuss.elastic.co/t/search-for-any-word-without-mappings-using-uri-query/107487 "2017-11-15T18:37:24Z")

</div>

Hi, I am indexing very big json and it do not have mappings defined. My requirement is to search for any word in this json. I have created nGram tokenizer like below - { "index": { "index": "my\_idx", "type":…

---

## [Relevance is acting strange on sort and \_routing does not seem to help](https://discuss.elastic.co/t/relevance-is-acting-strange-on-sort-and-routing-does-not-seem-to-help/107823)

<div class="topic-metadata">

**Author:** [@Galim\_Kaudinov](https://discuss.elastic.co/u/Galim_Kaudinov)\
**Replies:** 1\
**Last updated:** [November 15, 2017, 10:05pm UTC](https://discuss.elastic.co/t/relevance-is-acting-strange-on-sort-and-routing-does-not-seem-to-help/107823 "2017-11-15T22:05:43Z")

</div>

I came across a strange issue with our elastic search index, where the same query with particular sorting returns different results. My index is on 4 shards and also in the mapping I have specified "\_routing": { "requir…

---

## [Security\_exception - action \[cluster:monitor/main\] is unauthorized for user \[p595200\]](https://discuss.elastic.co/t/security-exception-action-cluster-monitor-main-is-unauthorized-for-user-p595200/107756)

<div class="topic-metadata">

**Author:** [@Vivek\_Unni](https://discuss.elastic.co/u/Vivek_Unni)\
**Replies:** 1\
**Last updated:** [November 15, 2017, 8:41pm UTC](https://discuss.elastic.co/t/security-exception-action-cluster-monitor-main-is-unauthorized-for-user-p595200/107756 "2017-11-15T20:41:29Z")

</div>

When we try to hit ES directly with a header, we are getting the below 403 response. Can someone please let me know what could be the issue. {"error":{"root\_cause":\[{"type":"security\_exception","reason":"action \[cluste…

---

## [New Ingestor 6.x Update to alexander-reelsen blog](https://discuss.elastic.co/t/new-ingestor-6-x-update-to-alexander-reelsen-blog/107824)

<div class="topic-metadata">

**Author:** [@Joe](https://discuss.elastic.co/u/Joe)\
**Replies:** 0\
**Last updated:** [November 15, 2017, 8:37pm UTC](https://discuss.elastic.co/t/new-ingestor-6-x-update-to-alexander-reelsen-blog/107824 "2017-11-15T20:37:03Z")

</div>

Will there be an update to the "Writing Your Own Ingest Processor" blog from November 2016? And/Or Would like recommendation for tools (jupyter notebooks?) required for development box (Windows) ! I have a working Ecli…

---

## [Best practice to save aggregated data to elasticsearch for long time storage?](https://discuss.elastic.co/t/best-practice-to-save-aggregated-data-to-elasticsearch-for-long-time-storage/107822)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 0\
**Last updated:** [November 15, 2017, 8:22pm UTC](https://discuss.elastic.co/t/best-practice-to-save-aggregated-data-to-elasticsearch-for-long-time-storage/107822 "2017-11-15T20:22:27Z")

</div>

Hi, We have a lot of data in ES and we have a retention time of 30 days to have all detail data available. We've imported the bare logs into ES (parsed some fields, etc of course). In our dashboards we are doing a lot…

---

## [Inconsistent result order (same score)](https://discuss.elastic.co/t/inconsistent-result-order-same-score/107817)

<div class="topic-metadata">

**Author:** [@ParitoshBh](https://discuss.elastic.co/u/ParitoshBh)\
**Replies:** 0\
**Last updated:** [November 15, 2017, 7:44pm UTC](https://discuss.elastic.co/t/inconsistent-result-order-same-score/107817 "2017-11-15T19:44:27Z")

</div>

Here's what I am trying to accomplish, Documents are categorized into category names and I am trying to fetch all documents under a certain category. This works out as expected using the following snippet, 'index' =\> '…

---

## [Query is acting strange since 6.0 update](https://discuss.elastic.co/t/query-is-acting-strange-since-6-0-update/107816)

<div class="topic-metadata">

**Author:** [@TheReal1604](https://discuss.elastic.co/u/TheReal1604)\
**Replies:** 0\
**Last updated:** [November 15, 2017, 7:42pm UTC](https://discuss.elastic.co/t/query-is-acting-strange-since-6-0-update/107816 "2017-11-15T19:42:51Z")

</div>

Hi guys, using the following lucene query in grafana on my new updated 6.0 elasticsearch node: !exists:"retweeted\_status.user.screen\_name" AND !exists:"quoted\_status.user.screen\_name" This should filter all documents …

---

## [Model Number Search engine not showing exact match](https://discuss.elastic.co/t/model-number-search-engine-not-showing-exact-match/107804)

<div class="topic-metadata">

**Author:** [@jstrocel](https://discuss.elastic.co/u/jstrocel)\
**Replies:** 0\
**Last updated:** [November 15, 2017, 6:47pm UTC](https://discuss.elastic.co/t/model-number-search-engine-not-showing-exact-match/107804 "2017-11-15T18:47:29Z")

</div>

Hello, I am using elasticsearch to query a database of product numbers. Unfortunately, when I enter a part number like GC720, it appears at the bottom of the list of first page results. How can I get the exact match to …

---

## [ES 5.6.3: Can we still not update the data type of a field?](https://discuss.elastic.co/t/es-5-6-3-can-we-still-not-update-the-data-type-of-a-field/107480)

<div class="topic-metadata">

**Author:** [@suchitgupta](https://discuss.elastic.co/u/suchitgupta)\
**Replies:** 2\
**Last updated:** [November 15, 2017, 6:41pm UTC](https://discuss.elastic.co/t/es-5-6-3-can-we-still-not-update-the-data-type-of-a-field/107480 "2017-11-15T18:41:35Z")

</div>

I am using ES 5.6.6 and want to know is it possible to change the data type of a field? I guess it was not possible in past so we use to create new field with new data type and then copy the values of existing field to …

---

## [6.0 rc2 packages are newer than 6.0 GA](https://discuss.elastic.co/t/6-0-rc2-packages-are-newer-than-6-0-ga/107766)

<div class="topic-metadata">

**Author:** [@Badger](https://discuss.elastic.co/u/Badger)\
**Replies:** 2\
**Last updated:** [November 15, 2017, 6:22pm UTC](https://discuss.elastic.co/t/6-0-rc2-packages-are-newer-than-6-0-ga/107766 "2017-11-15T18:22:53Z")

</div>

I upgraded to 6.0.0-rc2 on Monday. This morning, when I tried to upgrade to 6.0 GA with "rpm -Uvh" it tells me the rc2 packages are newer than the GA packages (except for logstash). I guess I need to "rpm -e ; rpm -i" in…

---

## [Index, Alias, and Type Confusion](https://discuss.elastic.co/t/index-alias-and-type-confusion/107799)

<div class="topic-metadata">

**Author:** [@bbaronas](https://discuss.elastic.co/u/bbaronas)\
**Replies:** 0\
**Last updated:** [November 15, 2017, 6:12pm UTC](https://discuss.elastic.co/t/index-alias-and-type-confusion/107799 "2017-11-15T18:12:23Z")

</div>

I'm trying to better understand aliases and how they may work across multiple indices. I'm trying to practice one mapping per index in preparation for future Elasticsearch without types. As a result, I presently have 5 …

---

## [Elasticsearch Remove remove duplicae and descending order](https://discuss.elastic.co/t/elasticsearch-remove-remove-duplicae-and-descending-order/107761)

<div class="topic-metadata">

**Author:** [@tushar\_chevulkar](https://discuss.elastic.co/u/tushar_chevulkar)\
**Replies:** 2\
**Last updated:** [November 15, 2017, 6:02pm UTC](https://discuss.elastic.co/t/elasticsearch-remove-remove-duplicae-and-descending-order/107761 "2017-11-15T18:02:35Z")

</div>

I have news articles form multiple sources saved and each source have different category I need to write a query which will reverse time sort the article also i don't need more than 3 articles from a particular source …

---

## [Splitting small amount of data over multiple vs a single index?](https://discuss.elastic.co/t/splitting-small-amount-of-data-over-multiple-vs-a-single-index/107797)

<div class="topic-metadata">

**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\
**Replies:** 0\
**Last updated:** [November 15, 2017, 5:53pm UTC](https://discuss.elastic.co/t/splitting-small-amount-of-data-over-multiple-vs-a-single-index/107797 "2017-11-15T17:53:57Z")

</div>

We are in the process of jumping from ES 2.3.2 to 6.0. As part of this work, we are breaking up our monolithic index into multiple indexes. The index we have is split into 23 shards, each of which is about 50 GB. We a…

---

## [Truststore.secure\_password is not configured](https://discuss.elastic.co/t/truststore-secure-password-is-not-configured/107607)

<div class="topic-metadata">

**Author:** [@slm](https://discuss.elastic.co/u/slm)\
**Replies:** 2\
**Last updated:** [November 15, 2017, 5:25pm UTC](https://discuss.elastic.co/t/truststore-secure-password-is-not-configured/107607 "2017-11-15T17:25:10Z")

</div>

I am getting the following error when I try to start the cluster with the PKI realm. \> \[2017-11-14T13:08:04,841\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[prdpywdcstt5301\] fatal error in thread \[main\], exitin…

---

## [Merge Old indices with New indices](https://discuss.elastic.co/t/merge-old-indices-with-new-indices/107790)

<div class="topic-metadata">

**Author:** [@kevinray0030](https://discuss.elastic.co/u/kevinray0030)\
**Replies:** 0\
**Last updated:** [November 15, 2017, 4:57pm UTC](https://discuss.elastic.co/t/merge-old-indices-with-new-indices/107790 "2017-11-15T16:57:04Z")

</div>

Hello all, I have recently run into an issue where our Graylog Server wasn't able to bring up search results and it seemed that our ElasticSearch service crashed. When it crashed, I noticed that we were running an olde…

---

## [Can not connect to standalone node using TransportClient with es 5.5](https://discuss.elastic.co/t/can-not-connect-to-standalone-node-using-transportclient-with-es-5-5/107739)

<div class="topic-metadata">

**Author:** [@dobrien](https://discuss.elastic.co/u/dobrien)\
**Replies:** 3\
**Last updated:** [November 15, 2017, 4:39pm UTC](https://discuss.elastic.co/t/can-not-connect-to-standalone-node-using-transportclient-with-es-5-5/107739 "2017-11-15T16:39:12Z")

</div>

Using elasticsearch 5.5.2, I can not connect using the TransportClient. The elasticsearch instance is standalone (My node with 5 indexes look fine using head and Kibana). I have transport.type:local, node.master:true,…

---

## [Elasticsearch snapshot repo permissions](https://discuss.elastic.co/t/elasticsearch-snapshot-repo-permissions/105601)

<div class="topic-metadata">

**Author:** [@Maekee](https://discuss.elastic.co/u/Maekee)\
**Replies:** 5\
**Last updated:** [November 15, 2017, 4:39pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-repo-permissions/105601 "2017-11-15T16:39:09Z")

</div>

Hi, I am going to create a snapshot repo in a UNC share. (WIndows Servers) What should i give permission on the network share? I dont use any service account for Elasticsearch. I have given the computer accounts for …

---

## [Search pool per work load types](https://discuss.elastic.co/t/search-pool-per-work-load-types/107751)

<div class="topic-metadata">

**Author:** [@Eli\_Revach](https://discuss.elastic.co/u/Eli_Revach)\
**Replies:** 1\
**Last updated:** [November 15, 2017, 4:30pm UTC](https://discuss.elastic.co/t/search-pool-per-work-load-types/107751 "2017-11-15T16:30:32Z")

</div>

Hi , We have very hugh cluster implementation (1.7.5) , we basically have 2 different work loads in our cluster Simple and short queries Massive aggregations As we don't have native routing key , when query…

---

## [Elastic Search Access denied exception](https://discuss.elastic.co/t/elastic-search-access-denied-exception/105338)

<div class="topic-metadata">

**Author:** [@sathishkumaru](https://discuss.elastic.co/u/sathishkumaru)\
**Replies:** 7\
**Last updated:** [November 15, 2017, 4:09pm UTC](https://discuss.elastic.co/t/elastic-search-access-denied-exception/105338 "2017-11-15T16:09:51Z")

</div>

Hi, I am using ES 2.4. while indexing from MongoDb to elastic search by using mongoConnector i got some exception mention below. i am having around 16000 to 20000 records while pushing those records to elastic search a…

---

## [Index queue gets full after starting using parent/child](https://discuss.elastic.co/t/index-queue-gets-full-after-starting-using-parent-child/107649)

<div class="topic-metadata">

**Author:** [@toka](https://discuss.elastic.co/u/toka)\
**Replies:** 2\
**Last updated:** [November 15, 2017, 3:56pm UTC](https://discuss.elastic.co/t/index-queue-gets-full-after-starting-using-parent-child/107649 "2017-11-15T15:56:43Z")

</div>

Hello, We started using parent/child to filter users in our app, this means a lot of children are created per user (depending on the case, thousands). Since we started using it we are getting the next error: \[es\_reje…

---

## [ElasticSearch High Level Client ClassNotFoundError](https://discuss.elastic.co/t/elasticsearch-high-level-client-classnotfounderror/107778)

<div class="topic-metadata">

**Author:** [@pocguy](https://discuss.elastic.co/u/pocguy)\
**Replies:** 1\
**Last updated:** [November 15, 2017, 3:45pm UTC](https://discuss.elastic.co/t/elasticsearch-high-level-client-classnotfounderror/107778 "2017-11-15T15:45:56Z")

</div>

ElasticSearch Version: 5.6.4 JAVA JDK 1.8 Spring Boot 1.5.8 Caused by: java.lang.ClassNotFoundException: org.elasticsearch.action.main.MainRequest at java.net.URLClassLoader.findClass(URLClassLoader.java:381) at jav…

---

## [Sending query via classic asp works one way but not another](https://discuss.elastic.co/t/sending-query-via-classic-asp-works-one-way-but-not-another/107205)

<div class="topic-metadata">

**Author:** [@bilpor](https://discuss.elastic.co/u/bilpor)\
**Replies:** 6\
**Last updated:** [November 15, 2017, 3:35pm UTC](https://discuss.elastic.co/t/sending-query-via-classic-asp-works-one-way-but-not-another/107205 "2017-11-15T15:35:05Z")

</div>

HI All, If I send a simple query to Elastic using the following code construct, in the response back I obtain my expected results: webaddress = "http://localhost:9200/" + index + "/\_search?q='hello world'" set xml = s…

---

## [Elastic document count mismatch - SQL to ES](https://discuss.elastic.co/t/elastic-document-count-mismatch-sql-to-es/107648)

<div class="topic-metadata">

**Author:** [@RSundareswaran](https://discuss.elastic.co/u/RSundareswaran)\
**Replies:** 3\
**Last updated:** [November 15, 2017, 3:26pm UTC](https://discuss.elastic.co/t/elastic-document-count-mismatch-sql-to-es/107648 "2017-11-15T15:26:14Z")

</div>

Hi, I am trying to bulk index from MS-SQL data to ES (5.6.3). The SQL query in SSMS gives 16284 as total count but after getting indexed, Kibana gets the total count as 15768.However the stats in API gets shows both cou…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1886)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1888)
