# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1918

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1919

---

## [How to make query output data format in 1 string](https://discuss.elastic.co/t/how-to-make-query-output-data-format-in-1-string/104159)

<div class="topic-metadata">

**Author:** [@Joyce\_Feng](https://discuss.elastic.co/u/Joyce_Feng)\
**Replies:** 8\
**Last updated:** [October 17, 2017, 4:27pm UTC](https://discuss.elastic.co/t/how-to-make-query-output-data-format-in-1-string/104159 "2017-10-17T16:27:26Z")

</div>

In ES2.2, the output source is 1 single line/string: "hits" : \[ { "\_index" : "ise", "\_type" : "contextrepo", "\_id" : "da:d8:54:41:ee:23", "\_score" : 1.0, "\_source":{"AuthenticationMethod":"Wired","AuthorizationPol…

---

## [Check if an ingest pipeline exists](https://discuss.elastic.co/t/check-if-an-ingest-pipeline-exists/104256)

<div class="topic-metadata">

**Author:** [@ESCoder](https://discuss.elastic.co/u/ESCoder)\
**Replies:** 1\
**Last updated:** [October 17, 2017, 4:16pm UTC](https://discuss.elastic.co/t/check-if-an-ingest-pipeline-exists/104256 "2017-10-17T16:16:12Z")

</div>

Hi, I have a scenario where I have to create an ingest pipeline if it doesn't already exists. So I issue a get pipeline call with the id to check if it already exists but it returns the following: Invalid NEST respons…

---

## [ES6 RC1: get aliases of non existent index](https://discuss.elastic.co/t/es6-rc1-get-aliases-of-non-existent-index/104267)

<div class="topic-metadata">

**Author:** [@frankshad](https://discuss.elastic.co/u/frankshad)\
**Replies:** 1\
**Last updated:** [October 17, 2017, 3:17pm UTC](https://discuss.elastic.co/t/es6-rc1-get-aliases-of-non-existent-index/104267 "2017-10-17T15:17:03Z")

</div>

I have an installer script that checks whether an index is already installed, by asking for the aliases of the index by its alias name, equivalent to: curl "http://192.168.0.153:9200/dev\_userdetail/\_aliases" (if it wer…

---

## [Where data is stored?](https://discuss.elastic.co/t/where-data-is-stored/98441)

<div class="topic-metadata">

**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\
**Replies:** 68\
**Last updated:** [October 17, 2017, 2:53pm UTC](https://discuss.elastic.co/t/where-data-is-stored/98441 "2017-10-17T14:53:11Z")

</div>

Hello. When I send my Windows Event Logs using “Winlogbeat” directly to “Elastic” then where is my data stored? I mean is something like file. Thank you.

---

## [Types of full-text search with examples](https://discuss.elastic.co/t/types-of-full-text-search-with-examples/104260)

<div class="topic-metadata">

**Author:** [@Sergius\_Master](https://discuss.elastic.co/u/Sergius_Master)\
**Replies:** 0\
**Last updated:** [October 17, 2017, 2:17pm UTC](https://discuss.elastic.co/t/types-of-full-text-search-with-examples/104260 "2017-10-17T14:17:43Z")

</div>

Hello. Is there well-structured guide "howto search this or this"? When to use that type of full-text search or that (match, match\_query, term, query\_string, etc.)? For example, why I can find if array has one element …

---

## [Analyzer and search\_analyzer for common tokens](https://discuss.elastic.co/t/analyzer-and-search-analyzer-for-common-tokens/104254)

<div class="topic-metadata">

**Author:** [@cjost1988](https://discuss.elastic.co/u/cjost1988)\
**Replies:** 0\
**Last updated:** [October 17, 2017, 1:56pm UTC](https://discuss.elastic.co/t/analyzer-and-search-analyzer-for-common-tokens/104254 "2017-10-17T13:56:14Z")

</div>

Hello guys, I've an issue with a match query on a text field that contains a product title. Product titles: A: Spezial-Träger B: Träger If someone searches for Spezial-Träger only A should match since it's the mos…

---

## [Error while querying elasticsearch](https://discuss.elastic.co/t/error-while-querying-elasticsearch/100634)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 10\
**Last updated:** [October 17, 2017, 1:44pm UTC](https://discuss.elastic.co/t/error-while-querying-elasticsearch/100634 "2017-10-17T13:44:05Z")

</div>

Ho to overcome the following issue? Whether increasing the search queue capacity or any other config parameter will help? Error: Request to Elasticsearch failed: {"error":{"root\_cause":\[\],"type":"search\_phase\_execution\_…

---

## [Rolling restart master election takes 2min](https://discuss.elastic.co/t/rolling-restart-master-election-takes-2min/104099)

<div class="topic-metadata">

**Author:** [@AlexW](https://discuss.elastic.co/u/AlexW)\
**Replies:** 6\
**Last updated:** [October 17, 2017, 1:43pm UTC](https://discuss.elastic.co/t/rolling-restart-master-election-takes-2min/104099 "2017-10-17T13:43:11Z")

</div>

Hi! On my Elasticsearch 5.3.2 cluster it takes nearly 2min to elect a new master. My screnario is a rolling restart. The master is restarted last. Once it gets restarted the cluster "panics" and searches for a new maste…

---

## [High Disk Read I/O in Elasticsearch](https://discuss.elastic.co/t/high-disk-read-i-o-in-elasticsearch/104232)

<div class="topic-metadata">

**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\
**Replies:** 0\
**Last updated:** [October 17, 2017, 11:21am UTC](https://discuss.elastic.co/t/high-disk-read-i-o-in-elasticsearch/104232 "2017-10-17T11:21:20Z")

</div>

I am observing a high disk read i/o in a elasticsearch node. I am using one node cluster with 5 shards. Environment Elasticssearch 2.3.1 Disk SSD Cores - 16 RAM - 64 GB Segments and merging could be one of the issue.…

---

## [Kafak to elastic....index result in %{host} %{message}](https://discuss.elastic.co/t/kafak-to-elastic-index-result-in-host-message/104250)

<div class="topic-metadata">

**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\
**Replies:** 0\
**Last updated:** [October 17, 2017, 1:17pm UTC](https://discuss.elastic.co/t/kafak-to-elastic-index-result-in-host-message/104250 "2017-10-17T13:17:04Z")

</div>

I first transfer data from mysql to kafka topics...and then kafka to elastic for index using logstash... But when I saw my index..result is showing like this...\[resultshow\] my conf file of kafka to elastic is \[consumer…

---

## [Nested attachments struggle](https://discuss.elastic.co/t/nested-attachments-struggle/104059)

<div class="topic-metadata">

**Author:** [@Rutger](https://discuss.elastic.co/u/Rutger)\
**Replies:** 3\
**Last updated:** [October 17, 2017, 12:57pm UTC](https://discuss.elastic.co/t/nested-attachments-struggle/104059 "2017-10-17T12:57:19Z")

</div>

Hi there, I'm having a (very) hard time mapping and indexing nested attachments. What I have so far: Elasticsearch vesion: 5.5 Mapping: { "mappings": { "entry": { "properties": { …

---

## [NEST Driver compatibility](https://discuss.elastic.co/t/nest-driver-compatibility/104076)

<div class="topic-metadata">

**Author:** [@Stefano\_Ghisaura](https://discuss.elastic.co/u/Stefano_Ghisaura)\
**Replies:** 2\
**Last updated:** [October 17, 2017, 12:46pm UTC](https://discuss.elastic.co/t/nest-driver-compatibility/104076 "2017-10-17T12:46:39Z")

</div>

Hi, I'm going crazy looking for any documentation about drivers versions and compatibility with Elastic. Is there anywhere something about this? Like "NEST version 2.4 is compatible with Elastic 2.5"... Thanks in advan…

---

## [Upgrading to v2.4.6](https://discuss.elastic.co/t/upgrading-to-v2-4-6/104106)

<div class="topic-metadata">

**Author:** [@juanito](https://discuss.elastic.co/u/juanito)\
**Replies:** 5\
**Last updated:** [October 17, 2017, 12:36pm UTC](https://discuss.elastic.co/t/upgrading-to-v2-4-6/104106 "2017-10-17T12:36:08Z")

</div>

Hi I am trying to upgrade to 2.4.6 and when I am starting elastic, I am getting this error, Why is that? \[2017-10-16 16:48:46,938\]\[ERROR\]\[gateway \] \[Arkus\] failed to read local state, exiting... java…

---

## [Separate logging file for pluging](https://discuss.elastic.co/t/separate-logging-file-for-pluging/104216)

<div class="topic-metadata">

**Author:** [@ov7a](https://discuss.elastic.co/u/ov7a)\
**Replies:** 0\
**Last updated:** [October 17, 2017, 9:30am UTC](https://discuss.elastic.co/t/separate-logging-file-for-pluging/104216 "2017-10-17T09:30:36Z")

</div>

According to similar topic: you cannot have more than one log4j config file. \[...\] otherwise you'd need a dedicated log file per plugin. However, according to docs, X-Pack plugin has exactly that: You configure a…

---

## [Elasticsearch is not working after x-pack installation](https://discuss.elastic.co/t/elasticsearch-is-not-working-after-x-pack-installation/104217)

<div class="topic-metadata">

**Author:** [@sarit](https://discuss.elastic.co/u/sarit)\
**Replies:** 1\
**Last updated:** [October 17, 2017, 11:36am UTC](https://discuss.elastic.co/t/elasticsearch-is-not-working-after-x-pack-installation/104217 "2017-10-17T11:36:05Z")

</div>

Hello, I'm trying to add monitoring to logstash I have elasticsearch,logstash and kibana installed on one server (version 5.5). I installed x-pack on logstash and since then i cannot start elasticsearch. After that I…

---

## [How to enable X-Pack subscription](https://discuss.elastic.co/t/how-to-enable-x-pack-subscription/104177)

<div class="topic-metadata">

**Author:** [@abhisek](https://discuss.elastic.co/u/abhisek)\
**Replies:** 3\
**Last updated:** [October 17, 2017, 9:18am UTC](https://discuss.elastic.co/t/how-to-enable-x-pack-subscription/104177 "2017-10-17T09:18:35Z")

</div>

Hi Team, I have installed X-Pack on my machine which support (Monitoring, security, reporting, graph, machine learning) and my 30 days trial version is going to end and i want to do the subscription which will help me w…

---

## [Bool term filter slow](https://discuss.elastic.co/t/bool-term-filter-slow/104112)

<div class="topic-metadata">

**Author:** [@David\_Sedeno](https://discuss.elastic.co/u/David_Sedeno)\
**Replies:** 1\
**Last updated:** [October 17, 2017, 7:20am UTC](https://discuss.elastic.co/t/bool-term-filter-slow/104112 "2017-10-17T07:20:25Z")

</div>

I have a bool query with a filter that took ~260ms. If I simply remove the filter (just a term filter) the query take ~60ms. The index has around 16Mill of docs and the filters takes out around 1Mill. it's possible that…

---

## [Upgrading indexes to elasticsearch 5.x](https://discuss.elastic.co/t/upgrading-indexes-to-elasticsearch-5-x/104205)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 0\
**Last updated:** [October 17, 2017, 8:19am UTC](https://discuss.elastic.co/t/upgrading-indexes-to-elasticsearch-5-x/104205 "2017-10-17T08:19:40Z")

</div>

Hi, I'm preparing to upgrade an elasticsearch 2.x cluster to 5.6.3. I'm comfortable with the process generally but have a query regarding the handling of mappings which I hope someone can clarify for me... That is, if …

---

## [Enquiry on Aggregations regarding Case Differences](https://discuss.elastic.co/t/enquiry-on-aggregations-regarding-case-differences/104203)

<div class="topic-metadata">

**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\
**Replies:** 0\
**Last updated:** [October 17, 2017, 8:13am UTC](https://discuss.elastic.co/t/enquiry-on-aggregations-regarding-case-differences/104203 "2017-10-17T08:13:52Z")

</div>

I have a set of documents consisting of unstructured text with an "Entities" attribute. This attribute contains a list of entities which were extracted from the unstructured text by an entity extractor. When performing …

---

## [Premature end of Benchmark run](https://discuss.elastic.co/t/premature-end-of-benchmark-run/102684)

<div class="topic-metadata">

**Author:** [@sanketshinde](https://discuss.elastic.co/u/sanketshinde)\
**Replies:** 9\
**Last updated:** [October 17, 2017, 8:06am UTC](https://discuss.elastic.co/t/premature-end-of-benchmark-run/102684 "2017-10-17T08:06:34Z")

</div>

The rally I run to benchmark a remote cluster ends with a following warning: \[WARNING\] No throughput metrics available for \[index-append\]. Likely cause: The benchmark ended already during warmup. I initially used warm…

---

## [How to identify the proper query distribution across the nodes](https://discuss.elastic.co/t/how-to-identify-the-proper-query-distribution-across-the-nodes/104199)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 0\
**Last updated:** [October 17, 2017, 7:49am UTC](https://discuss.elastic.co/t/how-to-identify-the-proper-query-distribution-across-the-nodes/104199 "2017-10-17T07:49:01Z")

</div>

We have a multinode elasticsearch setup and wanted to know when a query has been executed from Kibana or when the Kibana Dashborad is executed, how the query request has been distributed across the hot and warm data node…

---

## [Not able to see the entry in index\_search\_slowlog.log file](https://discuss.elastic.co/t/not-able-to-see-the-entry-in-index-search-slowlog-log-file/104196)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 0\
**Last updated:** [October 17, 2017, 7:28am UTC](https://discuss.elastic.co/t/not-able-to-see-the-entry-in-index-search-slowlog-log-file/104196 "2017-10-17T07:28:54Z")

</div>

I am looking for the search queries entries in the search log file to see if the distribution across the data nodes is proper. But I am not able to see any entries in the search file \[cluster\_name\]\_index\_search\_slowlog.l…

---

## [Gc overhead on startup](https://discuss.elastic.co/t/gc-overhead-on-startup/104064)

<div class="topic-metadata">

**Author:** [@iliasse](https://discuss.elastic.co/u/iliasse)\
**Replies:** 6\
**Last updated:** [October 17, 2017, 7:19am UTC](https://discuss.elastic.co/t/gc-overhead-on-startup/104064 "2017-10-17T07:19:06Z")

</div>

Hi, I'm using Elastic V 5.6.3 on Docker I am using the official Elastic image. I start the process with -Xms31g and -Xmx31g I hava enough RAM on the host machine (256 GB). I have 5TB of data with 1 600 000 000 docs. O…

---

## [Unbalanced CPU load on every time](https://discuss.elastic.co/t/unbalanced-cpu-load-on-every-time/104162)

<div class="topic-metadata">

**Author:** [@YangYongZhi](https://discuss.elastic.co/u/YangYongZhi)\
**Replies:** 3\
**Last updated:** [October 17, 2017, 5:52am UTC](https://discuss.elastic.co/t/unbalanced-cpu-load-on-every-time/104162 "2017-10-17T05:52:35Z")

</div>

There are 4 nodes in my cluster, like this: 192.168.90.2 (master eligible : true, node: true) 192.168.90.3 (master eligible : true, node: true) 192.168.90.4 (master eligible : true, node: true) 192.168.90.5 (master …

---

## [After applying custom analyzer not able to add data into the index](https://discuss.elastic.co/t/after-applying-custom-analyzer-not-able-to-add-data-into-the-index/104175)

<div class="topic-metadata">

**Author:** [@sidra\_89](https://discuss.elastic.co/u/sidra_89)\
**Replies:** 0\
**Last updated:** [October 17, 2017, 5:33am UTC](https://discuss.elastic.co/t/after-applying-custom-analyzer-not-able-to-add-data-into-the-index/104175 "2017-10-17T05:33:27Z")

</div>

i want to use ngram tokenizer for searching any substring in a word this is custom analyzer code is "analysis" =\> \[ "analyzer" =\> \[ "ngram\_analyzer" =\> \[ …

---

## [ElasticCloud in AWS integration with OpenLdap](https://discuss.elastic.co/t/elasticcloud-in-aws-integration-with-openldap/104131)

<div class="topic-metadata">

**Author:** [@Carlos\_Andres\_Zambra](https://discuss.elastic.co/u/Carlos_Andres_Zambra)\
**Replies:** 2\
**Last updated:** [October 17, 2017, 5:28am UTC](https://discuss.elastic.co/t/elasticcloud-in-aws-integration-with-openldap/104131 "2017-10-17T05:28:21Z")

</div>

I am working with elastic cloud deploy for aws service, i want to integrate it with an openldap in order to control the users to access to kibana, when i tried to put the configuration in the field to YML it apperas ILE…

---

## [BulkProcessor 'bulk' operation for indexing](https://discuss.elastic.co/t/bulkprocessor-bulk-operation-for-indexing/104169)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 0\
**Last updated:** [October 17, 2017, 5:00am UTC](https://discuss.elastic.co/t/bulkprocessor-bulk-operation-for-indexing/104169 "2017-10-17T05:00:45Z")

</div>

Version: 5.6.2 We are trying to use BulkProcessor (Async) for indexing, the operation has millions of documents. On the application client side we are using High Level REST Client and ThreadPool. We are able to generat…

---

## [How can wildcard be used in a phrase query?](https://discuss.elastic.co/t/how-can-wildcard-be-used-in-a-phrase-query/104042)

<div class="topic-metadata">

**Author:** [@esuser1027](https://discuss.elastic.co/u/esuser1027)\
**Replies:** 2\
**Last updated:** [October 17, 2017, 4:15am UTC](https://discuss.elastic.co/t/how-can-wildcard-be-used-in-a-phrase-query/104042 "2017-10-17T04:15:10Z")

</div>

What are the possible options for a phrase query to include wildcards using query\_string ? Without the wildcard below query returns some result. However, adding wildcard in any part of the query will no longer work. I…

---

## [Es5.4.3 timed out when collecting data](https://discuss.elastic.co/t/es5-4-3-timed-out-when-collecting-data/104155)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 2\
**Last updated:** [October 17, 2017, 2:59am UTC](https://discuss.elastic.co/t/es5-4-3-timed-out-when-collecting-data/104155 "2017-10-17T02:59:53Z")

</div>

\[2017-10-17T08:47:28,635\]\[ERROR\]\[o.e.x.m.c.i.IndexStatsCollector\] \[hostname\] collector \[index-stats\] timed out when collecting data \[2017-10-17T08:50:19,008\]\[ERROR\]\[o.e.x.m.c.c.ClusterStatsCollector\] \[hostname\] collector…

---

## [\[URGENT\] Local Tranport Client - ElasticSearch 1.7](https://discuss.elastic.co/t/urgent-local-tranport-client-elasticsearch-1-7/104161)

<div class="topic-metadata">

**Author:** [@patelprakashp](https://discuss.elastic.co/u/patelprakashp)\
**Replies:** 0\
**Last updated:** [October 17, 2017, 2:38am UTC](https://discuss.elastic.co/t/urgent-local-tranport-client-elasticsearch-1-7/104161 "2017-10-17T02:38:08Z")

</div>

\[URGENT\] - ES 1.7 testing with local transport client I am trying to create local transport client using Scala 2.9.1 and ElasticSearch 1.7 for testing , getting error org.elasticsearch.client.transport.NoNodeAvailableE…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1917)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1919)
