# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1919

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1920

---

## [Start/ Stop script in Linux environment for elastic search](https://discuss.elastic.co/t/start-stop-script-in-linux-environment-for-elastic-search/104157)

<div class="topic-metadata">

**Author:** [@Sumit\_Gupta1](https://discuss.elastic.co/u/Sumit_Gupta1)\
**Replies:** 1\
**Last updated:** [October 17, 2017, 1:46am UTC](https://discuss.elastic.co/t/start-stop-script-in-linux-environment-for-elastic-search/104157 "2017-10-17T01:46:17Z")

</div>

I want to start elastic search using service in linux. Now i'm starting elastic search by elasticsearch search script which placed under /app/elasticsearch-2.3.4/bin/ folder. Any Doc are here? Thanks

---

## [What happens when multiple users index into same index and type with same document ids?](https://discuss.elastic.co/t/what-happens-when-multiple-users-index-into-same-index-and-type-with-same-document-ids/104144)

<div class="topic-metadata">

**Author:** [@sramalin](https://discuss.elastic.co/u/sramalin)\
**Replies:** 2\
**Last updated:** [October 17, 2017, 1:19am UTC](https://discuss.elastic.co/t/what-happens-when-multiple-users-index-into-same-index-and-type-with-same-document-ids/104144 "2017-10-17T01:19:28Z")

</div>

All, I am curious to know what happens in the following case, Two users indexing into same index, say Index1 same type, say Type1 and they both try to index a document specifying the same id say id1. What happens i…

---

## [Apache struts Vulnerability](https://discuss.elastic.co/t/apache-struts-vulnerability/104147)

<div class="topic-metadata">

**Author:** [@rajatgupta](https://discuss.elastic.co/u/rajatgupta)\
**Replies:** 1\
**Last updated:** [October 16, 2017, 9:38pm UTC](https://discuss.elastic.co/t/apache-struts-vulnerability/104147 "2017-10-16T21:38:52Z")

</div>

Hi, Is any version of elastic search affected by apache struts vulnerability? Thanks

---

## [Action.search.shard\_count.limit appears to be cluster scoped rather than node scoped](https://discuss.elastic.co/t/action-search-shard-count-limit-appears-to-be-cluster-scoped-rather-than-node-scoped/104141)

<div class="topic-metadata">

**Author:** [@Emilie\_Lavigne](https://discuss.elastic.co/u/Emilie_Lavigne)\
**Replies:** 0\
**Last updated:** [October 16, 2017, 9:04pm UTC](https://discuss.elastic.co/t/action-search-shard-count-limit-appears-to-be-cluster-scoped-rather-than-node-scoped/104141 "2017-10-16T21:04:24Z")

</div>

I'm confused about the property action.search.shard\_count.limit. I assumed it was a node property, but we have started encountering it when querying time series data spread across multiple nodes. The total goes over the …

---

## [How does multi matching with \_all work?](https://discuss.elastic.co/t/how-does-multi-matching-with-all-work/104121)

<div class="topic-metadata">

**Author:** [@Nina\_s](https://discuss.elastic.co/u/Nina_s)\
**Replies:** 1\
**Last updated:** [October 16, 2017, 8:38pm UTC](https://discuss.elastic.co/t/how-does-multi-matching-with-all-work/104121 "2017-10-16T20:38:06Z")

</div>

Hi everyone, I wanted to know how multi matching with \_all work. Let 's say I have the following query: "multi\_match": { "query": x, "type": "phra…

---

## [X-pack custom security realm dependencies](https://discuss.elastic.co/t/x-pack-custom-security-realm-dependencies/102891)

<div class="topic-metadata">

**Author:** [@asanderson](https://discuss.elastic.co/u/asanderson)\
**Replies:** 2\
**Last updated:** [October 16, 2017, 5:39pm UTC](https://discuss.elastic.co/t/x-pack-custom-security-realm-dependencies/102891 "2017-10-16T17:39:12Z")

</div>

Looking at the shield-custom-realm-example build.gradle dependencies, it references "org.elasticsearch.plugin:x-pack-api:${version}", but looking at the x-pack-6.0.0-rc1 distro, all I see is x-pack-6.0.0-rc1.jar. Is the…

---

## [Checking Setting for Fielddata Cache](https://discuss.elastic.co/t/checking-setting-for-fielddata-cache/104120)

<div class="topic-metadata">

**Author:** [@hannahmimi](https://discuss.elastic.co/u/hannahmimi)\
**Replies:** 0\
**Last updated:** [October 16, 2017, 4:25pm UTC](https://discuss.elastic.co/t/checking-setting-for-fielddata-cache/104120 "2017-10-16T16:25:42Z")

</div>

Hi! I've updated my elasticsearch.yml file to set indices.fielddata.cache.size, but not sure if that change actually got applied by my cluster. I am working with Elasticsearch 2.4

---

## [Upgrading ES from 2.3 to 5.6 - Java](https://discuss.elastic.co/t/upgrading-es-from-2-3-to-5-6-java/104109)

<div class="topic-metadata">

**Author:** [@tgragg](https://discuss.elastic.co/u/tgragg)\
**Replies:** 0\
**Last updated:** [October 16, 2017, 3:28pm UTC](https://discuss.elastic.co/t/upgrading-es-from-2-3-to-5-6-java/104109 "2017-10-16T15:28:02Z")

</div>

I'm trying to update a Java service using the elasticsearch library. Upgrading from "org.elasticsearch" % "elasticsearch" % "2.3.2", to "org.elasticsearch" % "elasticsearch" % "5.6.3", The compiler is complaining ab…

---

## [Nested Inner Hits not showing inside a function, why?](https://discuss.elastic.co/t/nested-inner-hits-not-showing-inside-a-function-why/104102)

<div class="topic-metadata">

**Author:** [@kenneth\_Canet](https://discuss.elastic.co/u/kenneth_Canet)\
**Replies:** 2\
**Last updated:** [October 16, 2017, 3:25pm UTC](https://discuss.elastic.co/t/nested-inner-hits-not-showing-inside-a-function-why/104102 "2017-10-16T15:25:05Z")

</div>

Hello Everyone, I'm working on upgrading the query from ES 2.X to 5.6. But i'm having problem with inner hits inside the function, see my query below. Mappings: PUT test { "mappings": { "doc": { "properti…

---

## [The error rate is 100%](https://discuss.elastic.co/t/the-error-rate-is-100/102117)

<div class="topic-metadata">

**Author:** [@luolinsun](https://discuss.elastic.co/u/luolinsun)\
**Replies:** 4\
**Last updated:** [October 16, 2017, 3:02pm UTC](https://discuss.elastic.co/t/the-error-rate-is-100/102117 "2017-10-16T15:02:00Z")

</div>

I use the geonames and the challenge is append-no-conflicts-index-only. the command: ./esrally race --offline --track=geonames --pipeline=benchmark-only --target-hosts=10.202.7.169:9200,10.202.7.170:9200,10.202.7.171:92…

---

## [Java BulkAPI Slowness](https://discuss.elastic.co/t/java-bulkapi-slowness/103618)

<div class="topic-metadata">

**Author:** [@esuser22](https://discuss.elastic.co/u/esuser22)\
**Replies:** 4\
**Last updated:** [October 16, 2017, 2:29pm UTC](https://discuss.elastic.co/t/java-bulkapi-slowness/103618 "2017-10-16T14:29:04Z")

</div>

I'm seeing occasional pauses/hangs that last a few seconds each when sending data to Elastic via the Java BulkAPI. They are happening frequently, sometimes every few seconds. I'm not sending nearly enough data that I wo…

---

## [Unable to start Elastic Search after space issue](https://discuss.elastic.co/t/unable-to-start-elastic-search-after-space-issue/102273)

<div class="topic-metadata">

**Author:** [@alexandernomad](https://discuss.elastic.co/u/alexandernomad)\
**Replies:** 4\
**Last updated:** [October 16, 2017, 1:03pm UTC](https://discuss.elastic.co/t/unable-to-start-elastic-search-after-space-issue/102273 "2017-10-16T13:03:20Z")

</div>

Hello, We have had ES running for few months now and noticed recently the E drive on Windows was running really low on space. After adding 100GB to the E drive, tried restarting the service and server multiple times but…

---

## [XPack and LDAP with StartTLS](https://discuss.elastic.co/t/xpack-and-ldap-with-starttls/104089)

<div class="topic-metadata">

**Author:** [@khba](https://discuss.elastic.co/u/khba)\
**Replies:** 0\
**Last updated:** [October 16, 2017, 12:24pm UTC](https://discuss.elastic.co/t/xpack-and-ldap-with-starttls/104089 "2017-10-16T12:24:35Z")

</div>

Hello, I'm trying out XPack and trying to integrate it with our LDAP server, which uses Start TLS encryption instead of ldaps protocol and is well integrated with several clients. In Xpack documentation https://www.ela…

---

## [Search after and icu collation how to convert string to sort value](https://discuss.elastic.co/t/search-after-and-icu-collation-how-to-convert-string-to-sort-value/104017)

<div class="topic-metadata">

**Author:** [@Alexey\_Melnikov](https://discuss.elastic.co/u/Alexey_Melnikov)\
**Replies:** 1\
**Last updated:** [October 16, 2017, 12:05pm UTC](https://discuss.elastic.co/t/search-after-and-icu-collation-how-to-convert-string-to-sort-value/104017 "2017-10-16T12:05:45Z")

</div>

Good day. I have a big index with 10 million records and for pagination I'm using searchAfter property from query with some sorting. Sorting is done on a field with type 'icu\_collation\_keyword' It works very fine. But…

---

## [Force-deleting index that is being snapshotted](https://discuss.elastic.co/t/force-deleting-index-that-is-being-snapshotted/104079)

<div class="topic-metadata">

**Author:** [@vicpav](https://discuss.elastic.co/u/vicpav)\
**Replies:** 0\
**Last updated:** [October 16, 2017, 10:32am UTC](https://discuss.elastic.co/t/force-deleting-index-that-is-being-snapshotted/104079 "2017-10-16T10:32:46Z")

</div>

Our system is using Elastic Cloud service to host Elasticsearch cluster. A few days ago, to identify the root cause of an issue with our logging system, Logstash log-level was switched to DEBUG. That has resulted in 52GB…

---

## [Groupby on dynamic fields](https://discuss.elastic.co/t/groupby-on-dynamic-fields/104056)

<div class="topic-metadata">

**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\
**Replies:** 3\
**Last updated:** [October 16, 2017, 10:26am UTC](https://discuss.elastic.co/t/groupby-on-dynamic-fields/104056 "2017-10-16T10:26:03Z")

</div>

Hi I have doc like below doc1: "url":{ "http://hello.com":10, "http://hello2.com":20, } doc2: "url":{ "http://hello3.com":10, "http://hello2.com":20, "http://hello4.com":10, "http://hello6.com":20 } I want to group b…

---

## [Getting all last documents with the same value?](https://discuss.elastic.co/t/getting-all-last-documents-with-the-same-value/102668)

<div class="topic-metadata">

**Author:** [@ddorian43](https://discuss.elastic.co/u/ddorian43)\
**Replies:** 2\
**Last updated:** [October 16, 2017, 10:25am UTC](https://discuss.elastic.co/t/getting-all-last-documents-with-the-same-value/102668 "2017-10-16T10:25:07Z")

</div>

Hi friends, Is it possible when sorting by a field, that we get all documents with the same value in the end (even if they are more than size value total docs returned ? Meaning, if we have size:2 and values that we so…

---

## [Filter Aggegation with a lot of aggs](https://discuss.elastic.co/t/filter-aggegation-with-a-lot-of-aggs/103523)

<div class="topic-metadata">

**Author:** [@rvanginneken](https://discuss.elastic.co/u/rvanginneken)\
**Replies:** 8\
**Last updated:** [October 16, 2017, 10:03am UTC](https://discuss.elastic.co/t/filter-aggegation-with-a-lot-of-aggs/103523 "2017-10-16T10:03:56Z")

</div>

I have a pretty specific usecase, which I have working at the moment, but I'm just wondering if there is a better, cleaner way to do it. I have 10 aggs For all aggs filters can and will be applied Results should be fil…

---

## [Master and client node role clarifications](https://discuss.elastic.co/t/master-and-client-node-role-clarifications/104036)

<div class="topic-metadata">

**Author:** [@giomanda](https://discuss.elastic.co/u/giomanda)\
**Replies:** 5\
**Last updated:** [October 16, 2017, 9:21am UTC](https://discuss.elastic.co/t/master-and-client-node-role-clarifications/104036 "2017-10-16T09:21:14Z")

</div>

I am quite new to elasticsearch and i have read the documentation and the online book. However , some things are still not clear to me and unfortunately i haven't found the exact answers i am looking for. Lets assume th…

---

## [Get result after created a action JIRA](https://discuss.elastic.co/t/get-result-after-created-a-action-jira/103931)

<div class="topic-metadata">

**Author:** [@RomainXie](https://discuss.elastic.co/u/RomainXie)\
**Replies:** 2\
**Last updated:** [October 16, 2017, 9:19am UTC](https://discuss.elastic.co/t/get-result-after-created-a-action-jira/103931 "2017-10-16T09:19:41Z")

</div>

Hi, all In the watcher, we want to send a email to user with the JIRA issue number, which create by the same action in the watcher. That means we want to this workflow. run a alert; create a jira issue in action sec…

---

## [Got internal error in transform script](https://discuss.elastic.co/t/got-internal-error-in-transform-script/103843)

<div class="topic-metadata">

**Author:** [@RomainXie](https://discuss.elastic.co/u/RomainXie)\
**Replies:** 5\
**Last updated:** [October 16, 2017, 9:14am UTC](https://discuss.elastic.co/t/got-internal-error-in-transform-script/103843 "2017-10-16T09:14:20Z")

</div>

Hi, all I am a newbie for painless. I wrote a watcher, snippet of the transform bellow: "transform":{ "script": "string hosts=''; for (item in ctx.payload.aggregations.whichHost.buckets.entrySet()) {hosts = hosts …

---

## [X-Pack Watcher: multiple emails in to/cc fields via template](https://discuss.elastic.co/t/x-pack-watcher-multiple-emails-in-to-cc-fields-via-template/76058)

<div class="topic-metadata">

**Author:** [@sova](https://discuss.elastic.co/u/sova)\
**Replies:** 9\
**Last updated:** [October 16, 2017, 9:11am UTC](https://discuss.elastic.co/t/x-pack-watcher-multiple-emails-in-to-cc-fields-via-template/76058 "2017-10-16T09:11:09Z")

</div>

Hello all, Brief intro: I'm creating watcher alerts with send email actions. Email fields TO and CC are calculatable, so known only after watch execution and can be transformed before the action. As noted in the documen…

---

## [X-pack offline installation problem: Connection refused: connect](https://discuss.elastic.co/t/x-pack-offline-installation-problem-connection-refused-connect/104018)

<div class="topic-metadata">

**Author:** [@frumat\_l](https://discuss.elastic.co/u/frumat_l)\
**Replies:** 4\
**Last updated:** [October 16, 2017, 7:59am UTC](https://discuss.elastic.co/t/x-pack-offline-installation-problem-connection-refused-connect/104018 "2017-10-16T07:59:08Z")

</div>

Hi, I have standalone windows 2012 r2 server with Elasticsearch, Kibana and Logstash (5.6.3) The server is not connected to the internet I download the x-pack zip file for offline installation. I succeeded to install…

---

## [How to remove specific element from array](https://discuss.elastic.co/t/how-to-remove-specific-element-from-array/104057)

<div class="topic-metadata">

**Author:** [@dbrezoev](https://discuss.elastic.co/u/dbrezoev)\
**Replies:** 0\
**Last updated:** [October 16, 2017, 7:47am UTC](https://discuss.elastic.co/t/how-to-remove-specific-element-from-array/104057 "2017-10-16T07:47:41Z")

</div>

I have a document with field, which is array of many objects (id and name). How can I delete one of these objects? I am using javascript api and ES 5.5. I know I can just update the whole document, but the array is reall…

---

## [Retrieve string date and long date from query result](https://discuss.elastic.co/t/retrieve-string-date-and-long-date-from-query-result/104043)

<div class="topic-metadata">

**Author:** [@Lian](https://discuss.elastic.co/u/Lian)\
**Replies:** 3\
**Last updated:** [October 16, 2017, 7:19am UTC](https://discuss.elastic.co/t/retrieve-string-date-and-long-date-from-query-result/104043 "2017-10-16T07:19:35Z")

</div>

I have a date field defined in index as "\_reportDate": { "type": "date", "format": "yyyy-MM-dd HH:mm:ss||yyyy-MM-dd||epoch\_millis" } and I have a query to que…

---

## [Or like in and](https://discuss.elastic.co/t/or-like-in-and/104026)

<div class="topic-metadata">

**Author:** [@rishi\_jag](https://discuss.elastic.co/u/rishi_jag)\
**Replies:** 3\
**Last updated:** [October 16, 2017, 6:19am UTC](https://discuss.elastic.co/t/or-like-in-and/104026 "2017-10-16T06:19:35Z")

</div>

Need to convert this query in ElasticSearch WHERE (colD like 'abc%' OR colC like '%abc%') AND (colA IN ('a','b') OR colB IN ('a','b'))

---

## [Disable jar hell](https://discuss.elastic.co/t/disable-jar-hell/104029)

<div class="topic-metadata">

**Author:** [@bendg25](https://discuss.elastic.co/u/bendg25)\
**Replies:** 8\
**Last updated:** [October 16, 2017, 6:06am UTC](https://discuss.elastic.co/t/disable-jar-hell/104029 "2017-10-16T06:06:01Z")

</div>

Hi, Is there any way to disable jar hell?

---

## [Fscrawler injest node pipeline](https://discuss.elastic.co/t/fscrawler-injest-node-pipeline/104044)

<div class="topic-metadata">

**Author:** [@Jackson\_Pollock](https://discuss.elastic.co/u/Jackson_Pollock)\
**Replies:** 1\
**Last updated:** [October 16, 2017, 5:15am UTC](https://discuss.elastic.co/t/fscrawler-injest-node-pipeline/104044 "2017-10-16T05:15:19Z")

</div>

Using elasticsearch 5.x, fscrawler 2.4 fscrawler https://github.com/dadoonet/fscrawler#using-ingest-node-pipeline generates default fields like "content", and offers an injest node pipline per above link. I am unclear…

---

## [Bulk API does not work in 5.6.1](https://discuss.elastic.co/t/bulk-api-does-not-work-in-5-6-1/102692)

<div class="topic-metadata">

**Author:** [@fillic2002](https://discuss.elastic.co/u/fillic2002)\
**Replies:** 6\
**Last updated:** [October 16, 2017, 5:13am UTC](https://discuss.elastic.co/t/bulk-api-does-not-work-in-5-6-1/102692 "2017-10-16T05:13:37Z")

</div>

I tried using the \_bulk api with the data provided in sample data section. However the bulk API always throwing error. I know earlier it was working like charm. I used fiddler to call \_bulk api and attached the file. Th…

---

## [Need a term frequency Report across the entire Index](https://discuss.elastic.co/t/need-a-term-frequency-report-across-the-entire-index/103992)

<div class="topic-metadata">

**Author:** [@bragboy](https://discuss.elastic.co/u/bragboy)\
**Replies:** 0\
**Last updated:** [October 14, 2017, 1:22pm UTC](https://discuss.elastic.co/t/need-a-term-frequency-report-across-the-entire-index/103992 "2017-10-14T13:22:45Z")

</div>

I would like to get a term frequency report for a relatively large index. This is the background of what I am trying to do. I have formulated something called a grouping which is nothing but result sets. Say my index is…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1918)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1920)
