# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1890

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1891

---

## [ElasticSearch doesn't start after installing 5.6.4](https://discuss.elastic.co/t/elasticsearch-doesnt-start-after-installing-5-6-4/107444)

<div class="topic-metadata">

**Author:** [@tomsk](https://discuss.elastic.co/u/tomsk)\
**Replies:** 5\
**Last updated:** [November 13, 2017, 11:24pm UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-start-after-installing-5-6-4/107444 "2017-11-13T23:24:10Z")

</div>

Hello, I just installed Elasticsearch 5.6.4 from Download Elasticsearch | Elastic via DEB (I use Debian 9) package using these commands: wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.6.4.de…

---

## [Class Not Found, for a local jar I try to add to a plugin](https://discuss.elastic.co/t/class-not-found-for-a-local-jar-i-try-to-add-to-a-plugin/104369)

<div class="topic-metadata">

**Author:** [@Junaid03](https://discuss.elastic.co/u/Junaid03)\
**Replies:** 14\
**Last updated:** [November 13, 2017, 10:56pm UTC](https://discuss.elastic.co/t/class-not-found-for-a-local-jar-i-try-to-add-to-a-plugin/104369 "2017-11-13T22:56:09Z")

</div>

I am getting a class not found exception for a local jar file I add to my project using Gradle. So here are more details: Using mvn command to install the jar to local repo: mvn install:install-file -Dfile=/Users/prim…

---

## [Splitting indices to reduce heap usage?](https://discuss.elastic.co/t/splitting-indices-to-reduce-heap-usage/106931)

<div class="topic-metadata">

**Author:** [@cjbottaro](https://discuss.elastic.co/u/cjbottaro)\
**Replies:** 8\
**Last updated:** [November 13, 2017, 9:57pm UTC](https://discuss.elastic.co/t/splitting-indices-to-reduce-heap-usage/106931 "2017-11-13T21:57:53Z")

</div>

Hello. We have an Es cluster where the document count continues to grow over time. The heap usage seems to grow with the document count. At some point, the cluster craps out. We were wondering if we split our indices…

---

## [Associating LDAP Roles to Tags](https://discuss.elastic.co/t/associating-ldap-roles-to-tags/107246)

<div class="topic-metadata">

**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\
**Replies:** 7\
**Last updated:** [November 13, 2017, 9:48pm UTC](https://discuss.elastic.co/t/associating-ldap-roles-to-tags/107246 "2017-11-13T21:48:59Z")

</div>

I'm trying to use the list of Roles associated to an ldap user as a DLS security option. Currently we mark logs with tags upstream and I'm trying to use the template that's in your docs. I have gotten certain things to m…

---

## [How should I format a post\_filter query to match a string inside of a string?](https://discuss.elastic.co/t/how-should-i-format-a-post-filter-query-to-match-a-string-inside-of-a-string/107464)

<div class="topic-metadata">

**Author:** [@simonstiph](https://discuss.elastic.co/u/simonstiph)\
**Replies:** 0\
**Last updated:** [November 13, 2017, 9:14pm UTC](https://discuss.elastic.co/t/how-should-i-format-a-post-filter-query-to-match-a-string-inside-of-a-string/107464 "2017-11-13T21:14:30Z")

</div>

I have an array of articles (i.e. from newspapers) in a MongoDB database that is indexed into Elasticsearch. Each article has any number of authors, like: \['John Doe', 'Jane Doe'\]. In Es, I have aggregation by author wo…

---

## [Sudden 100% CPU spike on a data node with Kibana becoming unresponsive](https://discuss.elastic.co/t/sudden-100-cpu-spike-on-a-data-node-with-kibana-becoming-unresponsive/107454)

<div class="topic-metadata">

**Author:** [@xgantan](https://discuss.elastic.co/u/xgantan)\
**Replies:** 1\
**Last updated:** [November 13, 2017, 7:51pm UTC](https://discuss.elastic.co/t/sudden-100-cpu-spike-on-a-data-node-with-kibana-becoming-unresponsive/107454 "2017-11-13T19:51:43Z")

</div>

Hello, We have an ElasticSearch cluster with 3 master nodes and 4 data nodes. Earlier today, one of the data nodes, 04, suddenly reached 100% CPU usage and stopped responding to any requests, including Kibana metrics re…

---

## [Create ES Client without port in Java](https://discuss.elastic.co/t/create-es-client-without-port-in-java/107436)

<div class="topic-metadata">

**Author:** [@Natalia\_Kuleniuk](https://discuss.elastic.co/u/Natalia_Kuleniuk)\
**Replies:** 3\
**Last updated:** [November 13, 2017, 6:02pm UTC](https://discuss.elastic.co/t/create-es-client-without-port-in-java/107436 "2017-11-13T18:02:19Z")

</div>

I have ES endpoint on AWS for my ElasticSearch String endPoint = "https://.........amazonaws.com"; I would like to create Client using Java. https://www.elastic.co/guide/en/elasticsearch/client/java-api/1.7/transport…

---

## [IndexMissingException when creating Client using Java](https://discuss.elastic.co/t/indexmissingexception-when-creating-client-using-java/107445)

<div class="topic-metadata">

**Author:** [@Natalia\_Kuleniuk](https://discuss.elastic.co/u/Natalia_Kuleniuk)\
**Replies:** 1\
**Last updated:** [November 13, 2017, 5:36pm UTC](https://discuss.elastic.co/t/indexmissingexception-when-creating-client-using-java/107445 "2017-11-13T17:36:36Z")

</div>

I am getting IndexMissingExeption all time I try to perform search using Java. Exception in thread "main" org.elasticsearch.indices.IndexMissingException: \[myindex\] missing The Exception is occurred on line, where I…

---

## [How get the Action ID in script](https://discuss.elastic.co/t/how-get-the-action-id-in-script/107206)

<div class="topic-metadata">

**Author:** [@RomainXie](https://discuss.elastic.co/u/RomainXie)\
**Replies:** 4\
**Last updated:** [November 13, 2017, 5:30pm UTC](https://discuss.elastic.co/t/how-get-the-action-id-in-script/107206 "2017-11-13T17:30:52Z")

</div>

Hi, In the Watcher, I have two actions which output to Slack. In the payload send to Slack, I want to inside the current Action ID. But I don't find a var contain the action id in the ctx. I want get the ID of the act…

---

## [Cannot use mapping file with index analyzer settings](https://discuss.elastic.co/t/cannot-use-mapping-file-with-index-analyzer-settings/107227)

<div class="topic-metadata">

**Author:** [@Pierig\_LeSaux](https://discuss.elastic.co/u/Pierig_LeSaux)\
**Replies:** 2\
**Last updated:** [November 13, 2017, 5:26pm UTC](https://discuss.elastic.co/t/cannot-use-mapping-file-with-index-analyzer-settings/107227 "2017-11-13T17:26:27Z")

</div>

Hello, I get RequestError(400, 'mapper\_parsing\_exception', {'error': {'reason': "Failed to parse mapping \[settings\]: Root mapping definition has unsupported parameters ... When trying to use a mapping file with settin…

---

## [Optimize is blowing up index size](https://discuss.elastic.co/t/optimize-is-blowing-up-index-size/107432)

<div class="topic-metadata">

**Author:** [@morphers82](https://discuss.elastic.co/u/morphers82)\
**Replies:** 5\
**Last updated:** [November 13, 2017, 5:04pm UTC](https://discuss.elastic.co/t/optimize-is-blowing-up-index-size/107432 "2017-11-13T17:04:17Z")

</div>

So i'm on 1.7.x and i did an optimize on a large 10's of TBs index (haven't done one in a while) and all went well, the index size went down. I am currently optimizing another, however, the size has gone up amost 25% so…

---

## [No number-of-replicas/shards ... what then?](https://discuss.elastic.co/t/no-number-of-replicas-shards-what-then/107386)

<div class="topic-metadata">

**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\
**Replies:** 2\
**Last updated:** [November 13, 2017, 12:39pm UTC](https://discuss.elastic.co/t/no-number-of-replicas-shards-what-then/107386 "2017-11-13T12:39:23Z")

</div>

Hi again community! I have just created a small cluster of VMs to keep with my experiments with new ELK5 and filebeat, and, to my surprise, I was unable to start EL until I removed shards/replica config from yml file... …

---

## [Translate pseudo code in ES scripts](https://discuss.elastic.co/t/translate-pseudo-code-in-es-scripts/107442)

<div class="topic-metadata">

**Author:** [@DedMorozzz.kh](https://discuss.elastic.co/u/DedMorozzz.kh)\
**Replies:** 0\
**Last updated:** [November 13, 2017, 4:56pm UTC](https://discuss.elastic.co/t/translate-pseudo-code-in-es-scripts/107442 "2017-11-13T16:56:40Z")

</div>

Hi all, i can\`t create correct code for next task: I have some audience items with different information. For example "Audience": \[ { "AgeGroup1": "13-17", "AgePercentage1": 5.52, "AgeGroup2": "18-24", "AgePercent…

---

## [Rollup strategy in Elastic](https://discuss.elastic.co/t/rollup-strategy-in-elastic/107438)

<div class="topic-metadata">

**Author:** [@John\_Doe1](https://discuss.elastic.co/u/John_Doe1)\
**Replies:** 0\
**Last updated:** [November 13, 2017, 4:46pm UTC](https://discuss.elastic.co/t/rollup-strategy-in-elastic/107438 "2017-11-13T16:46:42Z")

</div>

I am looking for a feasible way to rollup data I have stored in Elasticsearch. The records I have are time series based, and can be grouped by a timestamp, host, and path of a URL. What I had in mind was a cron job that …

---

## [Unkown setting error (illegal\_argument\_exception)](https://discuss.elastic.co/t/unkown-setting-error-illegal-argument-exception/107437)

<div class="topic-metadata">

**Author:** [@Jens\_van\_der\_Wateren](https://discuss.elastic.co/u/Jens_van_der_Wateren)\
**Replies:** 0\
**Last updated:** [November 13, 2017, 4:45pm UTC](https://discuss.elastic.co/t/unkown-setting-error-illegal-argument-exception/107437 "2017-11-13T16:45:47Z")

</div>

Hi, I'm stuck with something when creating a new index and putting the data in. I'm trying to figure out Elasticsearch.. but Google has not really helped me yet. I'm running on Elastic version 5.6.3. This is my index: …

---

## [Excluding fields from \_source to avoid storing files](https://discuss.elastic.co/t/excluding-fields-from-source-to-avoid-storing-files/107241)

<div class="topic-metadata">

**Author:** [@fnareva](https://discuss.elastic.co/u/fnareva)\
**Replies:** 5\
**Last updated:** [November 13, 2017, 4:07pm UTC](https://discuss.elastic.co/t/excluding-fields-from-source-to-avoid-storing-files/107241 "2017-11-13T16:07:42Z")

</div>

Is there anything horribly wrong with that? I'm trying to get files indexed (via ingest attachment plugin)and searchable, but not stored in ES. Likeso: "\_source": { "excludes":\[ "data","attach…

---

## [Range Type - null values](https://discuss.elastic.co/t/range-type-null-values/106217)

<div class="topic-metadata">

**Author:** [@morphers82](https://discuss.elastic.co/u/morphers82)\
**Replies:** 2\
**Last updated:** [November 13, 2017, 4:18pm UTC](https://discuss.elastic.co/t/range-type-null-values/106217 "2017-11-13T16:18:28Z")

</div>

How is a null value handled in a given range type , ie if doc has field with gte=null and lte=5 and a query looks for the value 4 in the range, will it bring up the doc with the given ranges or not?

---

## [Headache with RestHighLevelClient and bulkprocessor](https://discuss.elastic.co/t/headache-with-resthighlevelclient-and-bulkprocessor/106072)

<div class="topic-metadata">

**Author:** [@Derrick](https://discuss.elastic.co/u/Derrick)\
**Replies:** 2\
**Last updated:** [November 13, 2017, 4:17pm UTC](https://discuss.elastic.co/t/headache-with-resthighlevelclient-and-bulkprocessor/106072 "2017-11-13T16:17:41Z")

</div>

BulkProcessor.Builder builder = BulkProcessor.builder(client::bulkAsync, new BulkProcessorListener()); this line is complaining The target type of this expression must be a functional interface the error is this part:…

---

## [Use ELK stack for Jenkins Metrics Data visualization](https://discuss.elastic.co/t/use-elk-stack-for-jenkins-metrics-data-visualization/107430)

<div class="topic-metadata">

**Author:** [@Shailesh\_Vaidya](https://discuss.elastic.co/u/Shailesh_Vaidya)\
**Replies:** 0\
**Last updated:** [November 13, 2017, 4:11pm UTC](https://discuss.elastic.co/t/use-elk-stack-for-jenkins-metrics-data-visualization/107430 "2017-11-13T16:11:10Z")

</div>

Hello, I am newbie in ELK and I am trying to use ELK stack for Jenkins data visualization. I am planning to use Jenkins remote API https://wiki.jenkins.io/display/JENKINS/Remote+access+API for fetching data. Could you …

---

## [Elasticsearch snapshot on more than one shared filesystem](https://discuss.elastic.co/t/elasticsearch-snapshot-on-more-than-one-shared-filesystem/107184)

<div class="topic-metadata">

**Author:** [@Arvind\_Rao](https://discuss.elastic.co/u/Arvind_Rao)\
**Replies:** 3\
**Last updated:** [November 13, 2017, 4:07pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-on-more-than-one-shared-filesystem/107184 "2017-11-13T16:07:44Z")

</div>

We have a multi-node ES 5.2.2 cluster running on Centos 6.x. We want to register a shared filesystem repository to take a snapshot. However due to some infra constraints, we are unable to provide a single volume of the…

---

## [ElasticSearch doesn't start after upgrade from 2.3.1 to 5.6.4](https://discuss.elastic.co/t/elasticsearch-doesnt-start-after-upgrade-from-2-3-1-to-5-6-4/107371)

<div class="topic-metadata">

**Author:** [@tomsk](https://discuss.elastic.co/u/tomsk)\
**Replies:** 4\
**Last updated:** [November 13, 2017, 1:59pm UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-start-after-upgrade-from-2-3-1-to-5-6-4/107371 "2017-11-13T13:59:33Z")

</div>

Hello, I was running on elasticsearch 2.3.1, but I had to upgrade to 5.6.4 (because of kibana), but Elasticsearch won't start anymore. This is log from Elasticsearch: java.lang.IllegalStateException: The index \[\[cycl…

---

## [MatchQuery using java rest](https://discuss.elastic.co/t/matchquery-using-java-rest/107250)

<div class="topic-metadata">

**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\
**Replies:** 3\
**Last updated:** [November 13, 2017, 3:43pm UTC](https://discuss.elastic.co/t/matchquery-using-java-rest/107250 "2017-11-13T15:43:33Z")

</div>

anyone have an example of how to use a match query, with fuzziness, using the java rest api. vesion 5.6.3(current). The ES documentation is a bit confusing. I can perform a reqular search no problem: String encodedBy…

---

## [Parent and child together](https://discuss.elastic.co/t/parent-and-child-together/107420)

<div class="topic-metadata">

**Author:** [@mPanasiewicz](https://discuss.elastic.co/u/mPanasiewicz)\
**Replies:** 0\
**Last updated:** [November 13, 2017, 3:43pm UTC](https://discuss.elastic.co/t/parent-and-child-together/107420 "2017-11-13T15:43:21Z")

</div>

Hello, I've got two documents with different types: Sth like this: { "mappings": { "owner": { "properties": { "Id": { "type": "text", "fields": { "keywo…

---

## [Sorting Context Suggester](https://discuss.elastic.co/t/sorting-context-suggester/107416)

<div class="topic-metadata">

**Author:** [@Apostol\_Marinov](https://discuss.elastic.co/u/Apostol_Marinov)\
**Replies:** 0\
**Last updated:** [November 13, 2017, 3:31pm UTC](https://discuss.elastic.co/t/sorting-context-suggester/107416 "2017-11-13T15:31:12Z")

</div>

Hi everyone! First I'll explain what my setup is and what the result I'm looking for is. I'm looking to use the following functionality in an autocomplete manner. The records in my index have a contentType. I need to g…

---

## [Indexing \\n as \\n in elasticsearch](https://discuss.elastic.co/t/indexing-n-as-n-in-elasticsearch/107415)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 0\
**Last updated:** [November 13, 2017, 3:29pm UTC](https://discuss.elastic.co/t/indexing-n-as-n-in-elasticsearch/107415 "2017-11-13T15:29:00Z")

</div>

Hi all..... Here i am trying to index \\n as a field values in elasticsearch here is my mapping PUT my\_index { "mappings": { "my\_type": { "properties": { "city": { "type": "text" …

---

## [Unable to get geoip.location to a geo\_point in ES](https://discuss.elastic.co/t/unable-to-get-geoip-location-to-a-geo-point-in-es/107252)

<div class="topic-metadata">

**Author:** [@Tony\_Skalski](https://discuss.elastic.co/u/Tony_Skalski)\
**Replies:** 6\
**Last updated:** [November 13, 2017, 3:19pm UTC](https://discuss.elastic.co/t/unable-to-get-geoip-location-to-a-geo-point-in-es/107252 "2017-11-13T15:19:22Z")

</div>

I've read dozens of posts about doing this but am still unable to get a location into ES as a geo\_point. I am using the following logstash conf snippet: input { stdin {}} filter { geoip { source =\> "message" } } output …

---

## [How to enable the deletion of .watches index dynamically?](https://discuss.elastic.co/t/how-to-enable-the-deletion-of-watches-index-dynamically/107374)

<div class="topic-metadata">

**Author:** [@Sarra\_Bouhenni](https://discuss.elastic.co/u/Sarra_Bouhenni)\
**Replies:** 2\
**Last updated:** [November 13, 2017, 2:52pm UTC](https://discuss.elastic.co/t/how-to-enable-the-deletion-of-watches-index-dynamically/107374 "2017-11-13T14:52:37Z")

</div>

Hello, I'm having this index with a red status from yesterday and since I didn't create any watches yet, I found that deleting it would be the best solution but when trying to do so, I get the following error: { "er…

---

## [Fuzziness match query issue](https://discuss.elastic.co/t/fuzziness-match-query-issue/107397)

<div class="topic-metadata">

**Author:** [@ArturKLB](https://discuss.elastic.co/u/ArturKLB)\
**Replies:** 0\
**Last updated:** [November 13, 2017, 1:17pm UTC](https://discuss.elastic.co/t/fuzziness-match-query-issue/107397 "2017-11-13T13:17:24Z")

</div>

I have "region" field of text type with standard analyzer. Here is my "should" query: "bool": { "minimum\_should\_match": 1, "should": \[ { "match": { "region": { "query": "Київ", …

---

## [What other Master eligible Nodes do](https://discuss.elastic.co/t/what-other-master-eligible-nodes-do/107403)

<div class="topic-metadata">

**Author:** [@paragsagdeo](https://discuss.elastic.co/u/paragsagdeo)\
**Replies:** 0\
**Last updated:** [November 13, 2017, 1:50pm UTC](https://discuss.elastic.co/t/what-other-master-eligible-nodes-do/107403 "2017-11-13T13:50:23Z")

</div>

Hi, I have three Master Eligible nodes, I made them dedicated master nodes with below config: node.master: true node.data: false node.ingest: false I also have one Coordinating node with below config: node.master: …

---

## [How to perform sql group by and sum query in elasticsearch](https://discuss.elastic.co/t/how-to-perform-sql-group-by-and-sum-query-in-elasticsearch/107399)

<div class="topic-metadata">

**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\
**Replies:** 0\
**Last updated:** [November 13, 2017, 1:28pm UTC](https://discuss.elastic.co/t/how-to-perform-sql-group-by-and-sum-query-in-elasticsearch/107399 "2017-11-13T13:28:58Z")

</div>

Hi Team, I want to perform below query in elasticsearch using dev tool in kibana: select pd.product,sum(wallet) wallet\_2,sum(revenue) revenue\_2,ef.time\_id from entity\_fact ef inner join product\_dim pd on pd.product\_id…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1889)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1891)
