# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1891 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1892 --- ## [Elasticsearch health goes from green to red](https://discuss.elastic.co/t/elasticsearch-health-goes-from-green-to-red/107398)
**Author:** [@jannesvh](https://discuss.elastic.co/u/jannesvh)\ **Replies:** 0\ **Last updated:** [November 13, 2017, 1:22pm UTC](https://discuss.elastic.co/t/elasticsearch-health-goes-from-green-to-red/107398 "2017-11-13T13:22:05Z")
Hi. With all nodes running the health is green, but the moment I stop 1 node it goes to red. Any suggestions on how I can fix it? This started happening after upgrading from 5.5.2 to 5.6.4 Thanks. --- ## [Document not matched](https://discuss.elastic.co/t/document-not-matched/107392)
**Author:** [@Lukas\_Tilch](https://discuss.elastic.co/u/Lukas_Tilch)\ **Replies:** 0\ **Last updated:** [November 13, 2017, 12:57pm UTC](https://discuss.elastic.co/t/document-not-matched/107392 "2017-11-13T12:57:21Z")
Hello i have a Document indexed with a custom analyzer. the string is "MKS-Integrity11.1\_Software-FAQ.docx" it gets tokenized into { "tokens": \[ { "token": "mks", "start\_offset": 0, "end\_offset… --- ## [Network timeout exceptions on single node cluster](https://discuss.elastic.co/t/network-timeout-exceptions-on-single-node-cluster/107388)
**Author:** [@johnny11](https://discuss.elastic.co/u/johnny11)\ **Replies:** 2\ **Last updated:** [November 13, 2017, 12:33pm UTC](https://discuss.elastic.co/t/network-timeout-exceptions-on-single-node-cluster/107388 "2017-11-13T12:33:47Z")
I'm trying to deploy a single node cluster on a VM. I'm getting a lot of INFO \[elasticsearch.client.transport elasticsearch\[The Angel\]\[generic\]\[T#1\]\] \[The Angel\] failed to get node info for \[#transport#-1\]\[huha-demo\]\[i… --- ## [Rapidly create, query and delete or purge on 100s of small indices](https://discuss.elastic.co/t/rapidly-create-query-and-delete-or-purge-on-100s-of-small-indices/107384)
**Author:** [@shoaib\_javed](https://discuss.elastic.co/u/shoaib_javed)\ **Replies:** 1\ **Last updated:** [November 13, 2017, 12:12pm UTC](https://discuss.elastic.co/t/rapidly-create-query-and-delete-or-purge-on-100s-of-small-indices/107384 "2017-11-13T12:12:05Z")
Hi My usecase requires me to index small volumes of varied data (less than 500 documents with about 20 fields) as separate indices, query on them and immediately destroy them or delete the data in them. Following steps… --- ## [Elastic Search : Wrong document count of a index every time](https://discuss.elastic.co/t/elastic-search-wrong-document-count-of-a-index-every-time/107385)
**Author:** [@testuser123](https://discuss.elastic.co/u/testuser123)\ **Replies:** 0\ **Last updated:** [November 13, 2017, 12:08pm UTC](https://discuss.elastic.co/t/elastic-search-wrong-document-count-of-a-index-every-time/107385 "2017-11-13T12:08:34Z")
Hi , I am trying to get the total count of document in a index preceded by index creation operation. With different runs count keep on varies. No unassigned shards during this process and cluster health for that index … --- ## [Subquery?](https://discuss.elastic.co/t/subquery/107376)
**Author:** [@mark-wade](https://discuss.elastic.co/u/mark-wade)\ **Replies:** 0\ **Last updated:** [November 13, 2017, 11:37am UTC](https://discuss.elastic.co/t/subquery/107376 "2017-11-13T11:37:43Z")
I have an index which contains posts made by a user: { "user": 1, "thread": 1, "content": "This is the first post in a thread", }, { "user": 2, "thread": 1, "content": "This is the second post in… --- ## [Upgrading to 5.6.2 make GC time go through the roof](https://discuss.elastic.co/t/upgrading-to-5-6-2-make-gc-time-go-through-the-roof/107367)
**Author:** [@moffe42](https://discuss.elastic.co/u/moffe42)\ **Replies:** 0\ **Last updated:** [November 13, 2017, 10:41am UTC](https://discuss.elastic.co/t/upgrading-to-5-6-2-make-gc-time-go-through-the-roof/107367 "2017-11-13T10:41:23Z")
We recently upgraded our cluster from 5.4.1 to 5.6.2 and the GC time has started to skyrocket. The GC time has over the course of 4 weeks risen 200%. Restarting the individual nodes lowers the GC time to pre-update times… --- ## [Find bottleneck when use elastic for write large amount of data](https://discuss.elastic.co/t/find-bottleneck-when-use-elastic-for-write-large-amount-of-data/107366)
**Author:** [@hossein\_ey](https://discuss.elastic.co/u/hossein_ey)\ **Replies:** 0\ **Last updated:** [November 13, 2017, 10:40am UTC](https://discuss.elastic.co/t/find-bottleneck-when-use-elastic-for-write-large-amount-of-data/107366 "2017-11-13T10:40:11Z")
We want to use elastic for a system with large amount of data. now we index 60k/s data in our single node elasticsearch. I want to understand what is the max performance we can reach in single node. and which parameter… --- ## [Indexing strategy for sparse data](https://discuss.elastic.co/t/indexing-strategy-for-sparse-data/107356)
**Author:** [@dandrestor](https://discuss.elastic.co/u/dandrestor)\ **Replies:** 2\ **Last updated:** [November 13, 2017, 10:03am UTC](https://discuss.elastic.co/t/indexing-strategy-for-sparse-data/107356 "2017-11-13T10:03:38Z")
Hello, I have a design-related conundrum, and I'm hoping somebody might have already come across the same problem. We have set up ELK to ingest logs from a variety of sources. These come in different types (such as lin… --- ## [Match query doesn\`t find my string?](https://discuss.elastic.co/t/match-query-doesn-t-find-my-string/106267)
**Author:** [@hubo3085632](https://discuss.elastic.co/u/hubo3085632)\ **Replies:** 4\ **Last updated:** [November 13, 2017, 9:23am UTC](https://discuss.elastic.co/t/match-query-doesn-t-find-my-string/106267 "2017-11-13T09:23:15Z")
Hi all: I indexed a string "3L-LEEMARK LOGISTIC LTD." using "ik" analyzer, when i use "3l" to query the string can not be find, what\`s the problem? Here is my DSL : "match" : { "name" : { "query" : "3l", "type" : … --- ## [X-Pack Watcher Webhook malformed json with backslashes](https://discuss.elastic.co/t/x-pack-watcher-webhook-malformed-json-with-backslashes/107194)
**Author:** [@lctrcl](https://discuss.elastic.co/u/lctrcl)\ **Replies:** 1\ **Last updated:** [November 13, 2017, 8:59am UTC](https://discuss.elastic.co/t/x-pack-watcher-webhook-malformed-json-with-backslashes/107194 "2017-11-13T08:59:01Z")
legend: As part of payload, I'm grabbing one field, which contains backslashes "C:\\Windows\\System32\\wbem\\WmiPrvSE.exe" But when I'm trying to send it to webhook in json, it doesn't escape it properly, so in the end I'… --- ## [High Level Rest Client - admin API?](https://discuss.elastic.co/t/high-level-rest-client-admin-api/100461)
**Author:** [@Dan\_Markhasin](https://discuss.elastic.co/u/Dan_Markhasin)\ **Replies:** 6\ **Last updated:** [November 13, 2017, 8:54am UTC](https://discuss.elastic.co/t/high-level-rest-client-admin-api/100461 "2017-11-13T08:54:06Z")
Does the new High Level Rest Client provide an admin API for creating/deleting/updating indices? The documentation indicates that it has no support for admin operations, but I wanted to make sure. --- ## [Break down of Time points](https://discuss.elastic.co/t/break-down-of-time-points/107166)
**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\ **Replies:** 2\ **Last updated:** [November 13, 2017, 8:50am UTC](https://discuss.elastic.co/t/break-down-of-time-points/107166 "2017-11-13T08:50:34Z")
status\_start\_time | status\_end\_time | status | product\_id 2017-11-08 12:43:40.742361+00 | 2017-11-08 13:00:03.618945+00 | 1 | 264 2017-11-08 13:00:03.6755+00 | 2017-11-08 13:00:03.6757… --- ## [Groovy and Replica performance issue](https://discuss.elastic.co/t/groovy-and-replica-performance-issue/107355)
**Author:** [@liorisme6](https://discuss.elastic.co/u/liorisme6)\ **Replies:** 0\ **Last updated:** [November 13, 2017, 8:34am UTC](https://discuss.elastic.co/t/groovy-and-replica-performance-issue/107355 "2017-11-13T08:34:57Z")
Hi there, I'll start by confessing that we're still using an ancient version of ES (1.7.2) - please don't laugh :blush: We have plans to upgrade real soon. We receive about 30k events every minute with the following d… --- ## [Arabic stemmer and synonymous](https://discuss.elastic.co/t/arabic-stemmer-and-synonymous/107122)
**Author:** [@Manal\_ALnef](https://discuss.elastic.co/u/Manal_ALnef)\ **Replies:** 3\ **Last updated:** [November 13, 2017, 8:28am UTC](https://discuss.elastic.co/t/arabic-stemmer-and-synonymous/107122 "2017-11-13T08:28:30Z")
Hello everyone, I am doing a comparison between Elasticsearch and Apache Solr in handling the Arabic language and I know that Solr use light 10 stemmer and doesn't have synonymous for Arabic, I see this answer " Elasti… --- ## [Can anyone share their live/ published client facing elasticsearch?](https://discuss.elastic.co/t/can-anyone-share-their-live-published-client-facing-elasticsearch/107350)
**Author:** [@concise](https://discuss.elastic.co/u/concise)\ **Replies:** 0\ **Last updated:** [November 13, 2017, 8:26am UTC](https://discuss.elastic.co/t/can-anyone-share-their-live-published-client-facing-elasticsearch/107350 "2017-11-13T08:26:26Z")
I'd be interested to see the end result for anyone that has used elasticsearch for a text based search purpose? I think that large vendors like netflix use elasticsearch but I'd be interested to see more SME's using it … --- ## [Index in key and value form](https://discuss.elastic.co/t/index-in-key-and-value-form/107128)
**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\ **Replies:** 5\ **Last updated:** [November 13, 2017, 8:24am UTC](https://discuss.elastic.co/t/index-in-key-and-value-form/107128 "2017-11-13T08:24:12Z")
How can I get result like this..."search\_data": \[ .... "string\_facet": \[ { "facet-name": "manufacturer", "facet-value": "Fortis" }, { "facet-name": "hammer\_weight", "facet-value": "1000" } \], "number\_facet": … --- ## [Newbie here: basic question on how elasticsearch works pls?](https://discuss.elastic.co/t/newbie-here-basic-question-on-how-elasticsearch-works-pls/107348)
**Author:** [@concise](https://discuss.elastic.co/u/concise)\ **Replies:** 0\ **Last updated:** [November 13, 2017, 8:23am UTC](https://discuss.elastic.co/t/newbie-here-basic-question-on-how-elasticsearch-works-pls/107348 "2017-11-13T08:23:42Z")
Hi - I am interested in using elasticsearch for our directory. What I would like to do is include events data (of conferences, meetings etc) that is taken from eventbrite.com, meetup.com and facebook.com API and for tha… --- ## [Aggregation on nested node and stats on parent fields](https://discuss.elastic.co/t/aggregation-on-nested-node-and-stats-on-parent-fields/107298)
**Author:** [@Chandan\_GB](https://discuss.elastic.co/u/Chandan_GB)\ **Replies:** 0\ **Last updated:** [November 12, 2017, 11:29am UTC](https://discuss.elastic.co/t/aggregation-on-nested-node-and-stats-on-parent-fields/107298 "2017-11-12T11:29:33Z")
I am new to elasticsearch please help me Please find the mapping so that I can explain what is the out put required. PUT /myproject/contact/\_mapping { "contact": { "properties": { "emailid": { "type" :"text", "fi… --- ## [Sorting issue with space](https://discuss.elastic.co/t/sorting-issue-with-space/106461)
**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\ **Replies:** 8\ **Last updated:** [November 13, 2017, 3:34am UTC](https://discuss.elastic.co/t/sorting-issue-with-space/106461 "2017-11-13T03:34:18Z")
After Sort I am getting result like this Adfgsdh Bhdfaf Dbsdf Z Edfghf Mkjldfhd Zdhgj Word Z Edfghf came on wrong place. When I removed space it came on proper place ElasticsearchResponse objElasticResponse = obj… --- ## [What is the best way to do wildcards with booleans?](https://discuss.elastic.co/t/what-is-the-best-way-to-do-wildcards-with-booleans/107321)
**Author:** [@mrblue](https://discuss.elastic.co/u/mrblue)\ **Replies:** 0\ **Last updated:** [November 13, 2017, 2:01am UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-do-wildcards-with-booleans/107321 "2017-11-13T02:01:20Z")
Hi everybody, we are using ES for some time now, and most searches we do are boolean multi match querys. Usually, we search trough 3 or 4 fields with a bool/must/multimatch query. We then add 0-10 boolean filter (usual… --- ## [Problem in connecting to SQL Server using JDBC](https://discuss.elastic.co/t/problem-in-connecting-to-sql-server-using-jdbc/107309)
**Author:** [@avenky](https://discuss.elastic.co/u/avenky)\ **Replies:** 2\ **Last updated:** [November 13, 2017, 12:54am UTC](https://discuss.elastic.co/t/problem-in-connecting-to-sql-server-using-jdbc/107309 "2017-11-13T00:54:01Z")
Hi All, I have installed elasticsearch 5.6.4 on windows and have installed JDBC plugin from http://xbib.org/repository/org/xbib/elasticsearch/importer/elasticsearch-jdbc/ (version 2.3.4.1). When I tried to build an ind… --- ## [Retryable exceptions in elasticsearch](https://discuss.elastic.co/t/retryable-exceptions-in-elasticsearch/107312)
**Author:** [@ckant](https://discuss.elastic.co/u/ckant)\ **Replies:** 0\ **Last updated:** [November 12, 2017, 5:03pm UTC](https://discuss.elastic.co/t/retryable-exceptions-in-elasticsearch/107312 "2017-11-12T17:03:06Z")
Hi, Elasticsearch can throw exceptions for many reasons. I want to retry on those failures that are intermittent like network failure because I dont want my to let my pipeline redo the whole computation just because t… --- ## [How to assign an unassigned shards](https://discuss.elastic.co/t/how-to-assign-an-unassigned-shards/107307)
**Author:** [@vishu.kolki](https://discuss.elastic.co/u/vishu.kolki)\ **Replies:** 1\ **Last updated:** [November 12, 2017, 4:57pm UTC](https://discuss.elastic.co/t/how-to-assign-an-unassigned-shards/107307 "2017-11-12T16:57:16Z")
Hi, When i check my elasticsearch health status, i find one unassigned\_shard. So how can i assign it manually, since it is a prod environment, i cannot afford down time. Thank you --- ## [Autocomplete performance improvements](https://discuss.elastic.co/t/autocomplete-performance-improvements/107304)
**Author:** [@mikevic](https://discuss.elastic.co/u/mikevic)\ **Replies:** 0\ **Last updated:** [November 12, 2017, 2:06pm UTC](https://discuss.elastic.co/t/autocomplete-performance-improvements/107304 "2017-11-12T14:06:37Z")
I have an index with about 2M records that is currently really hurting the CPU, when autocomplete queries are sent. I was looking at creating a new index just for autocomplete and seeding just the names instead of the h… --- ## [The security index is not yet available - no role mappings can be loaded](https://discuss.elastic.co/t/the-security-index-is-not-yet-available-no-role-mappings-can-be-loaded/107295)
**Author:** [@Sarra\_Bouhenni](https://discuss.elastic.co/u/Sarra_Bouhenni)\ **Replies:** 4\ **Last updated:** [November 12, 2017, 12:31pm UTC](https://discuss.elastic.co/t/the-security-index-is-not-yet-available-no-role-mappings-can-be-loaded/107295 "2017-11-12T12:31:23Z")
Hello X-Pack community, After installing an elasticsearch cluster 5.6.3 on Kubernetes for about one week. One of my data nodes crushed and I can't access to the cluster anymore. The master reports the following error: … --- ## [Skip indexing based on field value](https://discuss.elastic.co/t/skip-indexing-based-on-field-value/107280)
**Author:** [@beng](https://discuss.elastic.co/u/beng)\ **Replies:** 6\ **Last updated:** [November 12, 2017, 3:19am UTC](https://discuss.elastic.co/t/skip-indexing-based-on-field-value/107280 "2017-11-12T03:19:34Z")
We're doing some nested indexing on an events property. Some of the events we don't need in elasticsearch and are causing for a large amount of unneeded internal documents. Is there a way to skip indexing a field based … --- ## [About ingest-geoip error](https://discuss.elastic.co/t/about-ingest-geoip-error/107277)
**Author:** [@lljstar](https://discuss.elastic.co/u/lljstar)\ **Replies:** 2\ **Last updated:** [November 11, 2017, 9:52pm UTC](https://discuss.elastic.co/t/about-ingest-geoip-error/107277 "2017-11-11T21:52:28Z")
if I change the account: elastic password:changeme to a new pasword , the es start will be resport this error: if I remeve the plugin ingest-geoip, the es can running have no error; I think the ingest-geoip must… --- ## [Specifying many fields in query string query vs. using the \_all field](https://discuss.elastic.co/t/specifying-many-fields-in-query-string-query-vs-using-the-all-field/107283)
**Author:** [@kabcampbell](https://discuss.elastic.co/u/kabcampbell)\ **Replies:** 0\ **Last updated:** [November 11, 2017, 8:31pm UTC](https://discuss.elastic.co/t/specifying-many-fields-in-query-string-query-vs-using-the-all-field/107283 "2017-11-11T20:31:01Z")
I'm trying to figure out the best way to search using a query string query where each document in my index has several hundred fields/properties. For, for example, let's say this is a document: { "employeeID": 123, "f… --- ## [Terms aggregation in the same document](https://discuss.elastic.co/t/terms-aggregation-in-the-same-document/107282)
**Author:** [@yeela](https://discuss.elastic.co/u/yeela)\ **Replies:** 0\ **Last updated:** [November 11, 2017, 6:39pm UTC](https://discuss.elastic.co/t/terms-aggregation-in-the-same-document/107282 "2017-11-11T18:39:53Z")
Hi, Is that possible to count the value of fields in the same document? for example, i have this data: "hits": { "total": 3, "max\_score": 1, "hits": \[ { "\_index": "yeela\_checks", "\_ty… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1890) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1892)