# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1904

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1905

---

## [Elasticsearch for Apache Hadoop 6.0.0-rc2 released](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-6-0-0-rc2-released/105942)

<div class="topic-metadata">

**Author:** [@james.baiera](https://discuss.elastic.co/u/james.baiera)\
**Replies:** 0\
**Last updated:** [October 31, 2017, 6:50pm UTC](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-6-0-0-rc2-released/105942 "2017-10-31T18:50:11Z")

</div>

ES-Hadoop 6.0.0-rc2 has been released. Please note this is a beta release. You can read more about these releases in this blog post.

---

## [Term position](https://discuss.elastic.co/t/term-position/105927)

<div class="topic-metadata">

**Author:** [@Atul\_Harsha](https://discuss.elastic.co/u/Atul_Harsha)\
**Replies:** 2\
**Last updated:** [October 31, 2017, 6:31pm UTC](https://discuss.elastic.co/t/term-position/105927 "2017-10-31T18:31:31Z")

</div>

Data: POST /my\_index/my\_type/\_bulk { "index": { "\_id": 1 }} { "title": "The quick brown fox" } { "index": { "\_id": 2 }} { "title": "The quick brown fox jumps over the lazy dog" } { "index": { "\_id": 3 }} { "title": "The…

---

## [putScript issue](https://discuss.elastic.co/t/putscript-issue/105939)

<div class="topic-metadata">

**Author:** [@jacktuck](https://discuss.elastic.co/u/jacktuck)\
**Replies:** 1\
**Last updated:** [October 31, 2017, 6:25pm UTC](https://discuss.elastic.co/t/putscript-issue/105939 "2017-10-31T18:25:55Z")

</div>

const s = await client.putScript({ id: 'appendToDirectChat', lang: 'painless', body: { script: 'ctx.\_source.directChats = (ctx.\_source.directChats) ? ctx.\_source.directChats + user : \[user\]' …

---

## [Configuring ML Anomaly Detection](https://discuss.elastic.co/t/configuring-ml-anomaly-detection/105900)

<div class="topic-metadata">

**Author:** [@mping](https://discuss.elastic.co/u/mping)\
**Replies:** 1\
**Last updated:** [October 31, 2017, 6:16pm UTC](https://discuss.elastic.co/t/configuring-ml-anomaly-detection/105900 "2017-10-31T18:16:45Z")

</div>

What kind of fine tune is available for Anomaly Detection? I'll give an example: Suppose we have a timeseries where we are expecting a certain events (eg: 1000-5000) per day; On our evaluation, if we have a stream of v…

---

## [Elastic search cluster is down](https://discuss.elastic.co/t/elastic-search-cluster-is-down/105937)

<div class="topic-metadata">

**Author:** [@mende81](https://discuss.elastic.co/u/mende81)\
**Replies:** 0\
**Last updated:** [October 31, 2017, 5:52pm UTC](https://discuss.elastic.co/t/elastic-search-cluster-is-down/105937 "2017-10-31T17:52:42Z")

</div>

Hi Guys, I have installed elasticseach and kibana fine on AWS. I can access Kibana from remote server fine. However when making API calls using nodejs i get the following error: Request error: connect ECONNREFUSED \[ip…

---

## [Creating indexes on a weekly basis without using Logastash - possible?](https://discuss.elastic.co/t/creating-indexes-on-a-weekly-basis-without-using-logastash-possible/105920)

<div class="topic-metadata">

**Author:** [@X\_Calibur](https://discuss.elastic.co/u/X_Calibur)\
**Replies:** 1\
**Last updated:** [October 31, 2017, 5:50pm UTC](https://discuss.elastic.co/t/creating-indexes-on-a-weekly-basis-without-using-logastash-possible/105920 "2017-10-31T17:50:07Z")

</div>

Hi, see topic please. Is it possible? If so, where could I find more info on how to config? Thanks X

---

## [How to query multiple indexes in ElasticSearch 5.6 when they have different parent-child mappings?](https://discuss.elastic.co/t/how-to-query-multiple-indexes-in-elasticsearch-5-6-when-they-have-different-parent-child-mappings/105300)

<div class="topic-metadata">

**Author:** [@sclaggett](https://discuss.elastic.co/u/sclaggett)\
**Replies:** 2\
**Last updated:** [October 31, 2017, 5:47pm UTC](https://discuss.elastic.co/t/how-to-query-multiple-indexes-in-elasticsearch-5-6-when-they-have-different-parent-child-mappings/105300 "2017-10-31T17:47:00Z")

</div>

We're attempting to retrieve results from several different Elasticsearch indexes and sort them by a common field. The way we're approaching this is to create a boolean query that is composed of multiple should statement…

---

## [Error when installing basic license for x-pack on ES 5.6.2](https://discuss.elastic.co/t/error-when-installing-basic-license-for-x-pack-on-es-5-6-2/103731)

<div class="topic-metadata">

**Author:** [@moriol](https://discuss.elastic.co/u/moriol)\
**Replies:** 5\
**Last updated:** [October 31, 2017, 5:37pm UTC](https://discuss.elastic.co/t/error-when-installing-basic-license-for-x-pack-on-es-5-6-2/103731 "2017-10-31T17:37:11Z")

</div>

I get the following when trying to install x-pack on ES 5.6.2 "error":{"root\_cause":\[{"type":"action\_not\_found\_transport\_exception","reason":"No handler for action \[cluster:admin/xpack/license/put\]"}\],"type":"action\_no…

---

## [How to Retrieve Documents Indexed Per Second, Python API](https://discuss.elastic.co/t/how-to-retrieve-documents-indexed-per-second-python-api/105934)

<div class="topic-metadata">

**Author:** [@andyiscoding](https://discuss.elastic.co/u/andyiscoding)\
**Replies:** 0\
**Last updated:** [October 31, 2017, 5:28pm UTC](https://discuss.elastic.co/t/how-to-retrieve-documents-indexed-per-second-python-api/105934 "2017-10-31T17:28:51Z")

</div>

I am attempting to retrieve data for how many documents are being ingested into the cluster per second. I am currently using the elasticsearch python API 5.4 on elasticsearch and kibana docker images: docker.elastic.co/e…

---

## [Intermittent index creation failure on 6.0.0-rc1](https://discuss.elastic.co/t/intermittent-index-creation-failure-on-6-0-0-rc1/105615)

<div class="topic-metadata">

**Author:** [@loren](https://discuss.elastic.co/u/loren)\
**Replies:** 13\
**Last updated:** [October 31, 2017, 5:07pm UTC](https://discuss.elastic.co/t/intermittent-index-creation-failure-on-6-0-0-rc1/105615 "2017-10-31T17:07:18Z")

</div>

I have an integration test that creates a half dozen indices and then tests a bunch of stuff. A few times now, the index fails to get created and I see this in the logs: \[2017-10-26T13:07:34,690\]\[INFO \]\[o.e.c.m.MetaData…

---

## [Node memory \> 95 % rest nodes are below 60%](https://discuss.elastic.co/t/node-memory-95-rest-nodes-are-below-60/105886)

<div class="topic-metadata">

**Author:** [@Rohit\_Singh](https://discuss.elastic.co/u/Rohit_Singh)\
**Replies:** 0\
**Last updated:** [October 31, 2017, 12:59pm UTC](https://discuss.elastic.co/t/node-memory-95-rest-nodes-are-below-60/105886 "2017-10-31T12:59:24Z")

</div>

I have a 3 node cluster, all nodes are master data enabled. this cluster is running from past 4 days and receiving data. Today when i noticed node stats , one node was particulay showing memory usage \> 95% while other no…

---

## [Elasticsearch-hadoop inserting query as field](https://discuss.elastic.co/t/elasticsearch-hadoop-inserting-query-as-field/104192)

<div class="topic-metadata">

**Author:** [@avlach](https://discuss.elastic.co/u/avlach)\
**Replies:** 1\
**Last updated:** [October 31, 2017, 4:19pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-inserting-query-as-field/104192 "2017-10-31T16:19:28Z")

</div>

Hello, I am trying to use elasticsearch-hadoop v5.6.2 with pyspark and I have the following issue. The sample code is very simple just to det the hang of it: df = spark.read.format('org.elasticsearch.spark.sql').load('…

---

## [Kibana displaying datetime in future (1h difference)](https://discuss.elastic.co/t/kibana-displaying-datetime-in-future-1h-difference/105913)

<div class="topic-metadata">

**Author:** [@seeva](https://discuss.elastic.co/u/seeva)\
**Replies:** 0\
**Last updated:** [October 31, 2017, 3:43pm UTC](https://discuss.elastic.co/t/kibana-displaying-datetime-in-future-1h-difference/105913 "2017-10-31T15:43:13Z")

</div>

Hi, Recently we change ou time by +1h , after this change kibana is displying date time in future instead of correct date time of my server or browser. how can i change this ? Please find a screen capture à took recentl…

---

## [GC spending too much time on elastic injest node](https://discuss.elastic.co/t/gc-spending-too-much-time-on-elastic-injest-node/105903)

<div class="topic-metadata">

**Author:** [@Zeeshan\_Alam](https://discuss.elastic.co/u/Zeeshan_Alam)\
**Replies:** 1\
**Last updated:** [October 31, 2017, 2:51pm UTC](https://discuss.elastic.co/t/gc-spending-too-much-time-on-elastic-injest-node/105903 "2017-10-31T14:51:21Z")

</div>

Hi All, I am running elastic 5.5 and my set up is having 3 client node, \[data: false, master:false\] and I am sending bulk request of 15000 from Logstash to client nodes. I have: 3 Master 3 Client 10 Data 1 Logstas…

---

## [Anamoly score calculation method](https://discuss.elastic.co/t/anamoly-score-calculation-method/105737)

<div class="topic-metadata">

**Author:** [@anomalyml](https://discuss.elastic.co/u/anomalyml)\
**Replies:** 1\
**Last updated:** [October 31, 2017, 1:14pm UTC](https://discuss.elastic.co/t/anamoly-score-calculation-method/105737 "2017-10-31T13:14:02Z")

</div>

Hi, I have a sample server data for which I'm trying to use the machine learning pack and calculate anomalies in it. I have fed the data into database and created a single metric job to perform the analysis. The job was…

---

## [Question about query](https://discuss.elastic.co/t/question-about-query/105355)

<div class="topic-metadata">

**Author:** [@Javier](https://discuss.elastic.co/u/Javier)\
**Replies:** 4\
**Last updated:** [October 31, 2017, 11:46am UTC](https://discuss.elastic.co/t/question-about-query/105355 "2017-10-31T11:46:41Z")

</div>

Hello. I have a problem with a query. I´m trying to add several fields and only one of them is permit. QUERY='{"query":{"bool":{"must":\[{"range":{"@timestamp":{"gte":"now-'$RELATIVE\_START\_TIME\_TO\_SEARCH'/d","lt":"now/d…

---

## [Multi\_search: "Unknown key for a START\_OBJECT in \[multi\_match\]."](https://discuss.elastic.co/t/multi-search-unknown-key-for-a-start-object-in-multi-match/105856)

<div class="topic-metadata">

**Author:** [@Atul\_Harsha](https://discuss.elastic.co/u/Atul_Harsha)\
**Replies:** 2\
**Last updated:** [October 31, 2017, 10:55am UTC](https://discuss.elastic.co/t/multi-search-unknown-key-for-a-start-object-in-multi-match/105856 "2017-10-31T10:55:28Z")

</div>

Data: PUT /my\_index/my\_type/1 { "title": "Quick brown rabbits", "body": "Brown rabbits are commonly seen." } PUT /my\_index/my\_type/2 { "title": "Keeping pets healthy", "body": "My quick brown fox eats…

---

## [Master and data nodes using the same data path?](https://discuss.elastic.co/t/master-and-data-nodes-using-the-same-data-path/105867)

<div class="topic-metadata">

**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\
**Replies:** 0\
**Last updated:** [October 31, 2017, 10:39am UTC](https://discuss.elastic.co/t/master-and-data-nodes-using-the-same-data-path/105867 "2017-10-31T10:39:10Z")

</div>

The docs; state that Blockquote Never run different node types (i.e. master, data) from the same data directory. This can lead to unexpected data loss. Does anyone have an further insight into "unexpected data lo…

---

## [Prefix query with whitespaces](https://discuss.elastic.co/t/prefix-query-with-whitespaces/105864)

<div class="topic-metadata">

**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\
**Replies:** 1\
**Last updated:** [October 31, 2017, 10:20am UTC](https://discuss.elastic.co/t/prefix-query-with-whitespaces/105864 "2017-10-31T10:20:52Z")

</div>

Hi. Why does the following prefix query return zero results: { "prefix": { "some\_field": { "value": "hello wor" } } } Whereas the simple\_query\_string seems do what I want (and return the relevant res…

---

## [After install x-pack plugin elasticsearch can't work](https://discuss.elastic.co/t/after-install-x-pack-plugin-elasticsearch-cant-work/105852)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 1\
**Last updated:** [October 31, 2017, 9:28am UTC](https://discuss.elastic.co/t/after-install-x-pack-plugin-elasticsearch-cant-work/105852 "2017-10-31T09:28:16Z")

</div>

As title. ES and Kibana version are all 5.6.2 and this is log (omit) . . . \[2017-10-31T16:36:41,363\]\[INFO \]\[o.e.c.s.ClusterService \] \[Ku2xA7C\] new\_master {Ku2xA7C}{Ku2xA7CoTzec-5hieGRJgg}{YWdKj7-dTxykKc12EQdVwA}…

---

## [ES-5.6.0 RPM installation, cluster not adding more than 5-nodes](https://discuss.elastic.co/t/es-5-6-0-rpm-installation-cluster-not-adding-more-than-5-nodes/105845)

<div class="topic-metadata">

**Author:** [@vishaljain000](https://discuss.elastic.co/u/vishaljain000)\
**Replies:** 2\
**Last updated:** [October 31, 2017, 9:22am UTC](https://discuss.elastic.co/t/es-5-6-0-rpm-installation-cluster-not-adding-more-than-5-nodes/105845 "2017-10-31T09:22:32Z")

</div>

HI, I have setup ES-5.6.0 using RPM (on OEL-7.3), I have setup 7-nodes in cluter. Issue: I am able to start the ES services on all 7-nodes but when I am listing cluster nodes using curl command then I am getting on 5-n…

---

## [X-pack license couldn't update](https://discuss.elastic.co/t/x-pack-license-couldnt-update/105844)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 5\
**Last updated:** [October 31, 2017, 8:58am UTC](https://discuss.elastic.co/t/x-pack-license-couldnt-update/105844 "2017-10-31T08:58:16Z")

</div>

C:\\Users\\infoblox\\Downloads\\curl\>curl -XPUT -u elastic "http://localhost:9200/\_xpack/license" -H "Content-Type: application/json" -d "@C:\\Users\\infoblox\\Downloads\\license.json" Enter host password for user 'elastic': {…

---

## [Rollback documents and index](https://discuss.elastic.co/t/rollback-documents-and-index/105835)

<div class="topic-metadata">

**Author:** [@nkdev89](https://discuss.elastic.co/u/nkdev89)\
**Replies:** 2\
**Last updated:** [October 31, 2017, 8:36am UTC](https://discuss.elastic.co/t/rollback-documents-and-index/105835 "2017-10-31T08:36:14Z")

</div>

Hi , I'm new to ES , I'm looking for Rollback functionality to rollback new index and a document from another index if any exception occurred during the process. How can i do this ? , Can you please help me with this . …

---

## [What "index\_time\_in\_millis" means?](https://discuss.elastic.co/t/what-index-time-in-millis-means/105842)

<div class="topic-metadata">

**Author:** [@trelo](https://discuss.elastic.co/u/trelo)\
**Replies:** 0\
**Last updated:** [October 31, 2017, 7:03am UTC](https://discuss.elastic.co/t/what-index-time-in-millis-means/105842 "2017-10-31T07:03:23Z")

</div>

Hi! I've a cluster with 3 nodes(3 master/2 data). This cluster is monitoring by Zabbix several weeks and now I notice, that metric "index\_time\_in\_millis"(curl -s http://localhost:9200/index\_name/\_stats?pretty | jq ".\_a…

---

## [Issue with node discovery](https://discuss.elastic.co/t/issue-with-node-discovery/105547)

<div class="topic-metadata">

**Author:** [@Vivek\_Samaga](https://discuss.elastic.co/u/Vivek_Samaga)\
**Replies:** 4\
**Last updated:** [October 31, 2017, 7:01am UTC](https://discuss.elastic.co/t/issue-with-node-discovery/105547 "2017-10-31T07:01:27Z")

</div>

I have a 2 node ES cluster setup for testing purpose (i know this is not recommended) everything was working fine until i increased the JVM heap to 8G for performance purpose. Now this is throwing below exception To ad…

---

## [How many numbers of record maximum get in ES 1.7.2](https://discuss.elastic.co/t/how-many-numbers-of-record-maximum-get-in-es-1-7-2/105733)

<div class="topic-metadata">

**Author:** [@Rahul\_Saxena](https://discuss.elastic.co/u/Rahul_Saxena)\
**Replies:** 10\
**Last updated:** [October 31, 2017, 5:14am UTC](https://discuss.elastic.co/t/how-many-numbers-of-record-maximum-get-in-es-1-7-2/105733 "2017-10-31T05:14:37Z")

</div>

Hello there, I am new in Elastic Search and install and configured 1.7.2 last month using Rest in .net C#. Now I upgrade in 5.6.3. But while fetching records it shows some error of record limit. If I change query in s…

---

## [Windows Server 2012 - Bootstrap Check Fail- Unable to lock memory](https://discuss.elastic.co/t/windows-server-2012-bootstrap-check-fail-unable-to-lock-memory/105834)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 0\
**Last updated:** [October 31, 2017, 4:55am UTC](https://discuss.elastic.co/t/windows-server-2012-bootstrap-check-fail-unable-to-lock-memory/105834 "2017-10-31T04:55:13Z")

</div>

Hi All, I am running ES 5.4.1 on Windows Server R12 and I have enabled bootstrap.mlock :true in elasticsearch.yml file and during boot up i get the below error and ES doesn't start. \[2017-10-30T21:35:37,484\]\[INFO \]\[o.…

---

## [Data retention - low resolution option?](https://discuss.elastic.co/t/data-retention-low-resolution-option/105824)

<div class="topic-metadata">

**Author:** [@ben5556](https://discuss.elastic.co/u/ben5556)\
**Replies:** 1\
**Last updated:** [October 31, 2017, 3:21am UTC](https://discuss.elastic.co/t/data-retention-low-resolution-option/105824 "2017-10-31T03:21:29Z")

</div>

Hi, Is there an option to maintain data, older than 3 months and up to a year, within indices at a lower resolution level and maintain rich data detail for data up to 3 months ? Low resolution level could show data at …

---

## [org.elasticsearch.cluster.block.ClusterBlockException: blocked by: \[SERVICE\_UNAVAILABLE/1/state not recovered / initialized\]](https://discuss.elastic.co/t/org-elasticsearch-cluster-block-clusterblockexception-blocked-by-service-unavailable-1-state-not-recovered-initialized/105822)

<div class="topic-metadata">

**Author:** [@Naftoli\_Gugenheim](https://discuss.elastic.co/u/Naftoli_Gugenheim)\
**Replies:** 1\
**Last updated:** [October 31, 2017, 3:13am UTC](https://discuss.elastic.co/t/org-elasticsearch-cluster-block-clusterblockexception-blocked-by-service-unavailable-1-state-not-recovered-initialized/105822 "2017-10-31T03:13:40Z")

</div>

Hi, I'm using elasticsearch with graylog. I previously had elasticsearch 2, now I upgraded it to 5. I run it using docker-compose. I'm only using one instance. Here's the service definition: elasticsearch: …

---

## [Passing varied parameters to BMI25 instead of 1 set](https://discuss.elastic.co/t/passing-varied-parameters-to-bmi25-instead-of-1-set/105626)

<div class="topic-metadata">

**Author:** [@ESlearner](https://discuss.elastic.co/u/ESlearner)\
**Replies:** 3\
**Last updated:** [October 31, 2017, 3:05am UTC](https://discuss.elastic.co/t/passing-varied-parameters-to-bmi25-instead-of-1-set/105626 "2017-10-31T03:05:24Z")

</div>

Continuing the discussion from Tweaking BM25 parameters efficiently: I was wondering if its possible to pass multiple k1 and b values to BMI25 in order to determine the ideal parameters , instead of going through the pa…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1903)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1905)
