# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1935

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1936

---

## [To apply filters to the aggregation](https://discuss.elastic.co/t/to-apply-filters-to-the-aggregation/102280)

<div class="topic-metadata">

**Author:** [@11114](https://discuss.elastic.co/u/11114)\
**Replies:** 0\
**Last updated:** [September 29, 2017, 4:13pm UTC](https://discuss.elastic.co/t/to-apply-filters-to-the-aggregation/102280 "2017-09-29T16:13:07Z")

</div>

How can I make I have aggregation at the prices, example range | count 0 - 10000 | 100 10000 - 20000 | 20 If you choose 0 - 10000 then the filter will apply and in the aggregation will not be 1…

---

## [What is the difference between evicting field data, and triggering the breaker?](https://discuss.elastic.co/t/what-is-the-difference-between-evicting-field-data-and-triggering-the-breaker/102278)

<div class="topic-metadata">

**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\
**Replies:** 0\
**Last updated:** [September 29, 2017, 3:43pm UTC](https://discuss.elastic.co/t/what-is-the-difference-between-evicting-field-data-and-triggering-the-breaker/102278 "2017-09-29T15:43:15Z")

</div>

We recently had a field data issue at my work, and came across these two (I assume common) options for managing it on your cluster: • indices.breaker.fielddata.limit 60% # The actual limit, after which you can no longer…

---

## [Slow recovery speeds](https://discuss.elastic.co/t/slow-recovery-speeds/102277)

<div class="topic-metadata">

**Author:** [@avaneeshr](https://discuss.elastic.co/u/avaneeshr)\
**Replies:** 0\
**Last updated:** [September 29, 2017, 3:43pm UTC](https://discuss.elastic.co/t/slow-recovery-speeds/102277 "2017-09-29T15:43:15Z")

</div>

Hi all! ES v2.4.0 I am using a AWS i3.4xlarge instance (NVMe SSDs) which is IO optimized and has high Network throughput Single node cluster- 16 cores, 120G memory, 10gbps network link I try to restore a snapshot fro…

---

## [Calculating a metric based off a pipeline aggregation](https://discuss.elastic.co/t/calculating-a-metric-based-off-a-pipeline-aggregation/102270)

<div class="topic-metadata">

**Author:** [@Michael.Craig](https://discuss.elastic.co/u/Michael.Craig)\
**Replies:** 0\
**Last updated:** [September 29, 2017, 2:08pm UTC](https://discuss.elastic.co/t/calculating-a-metric-based-off-a-pipeline-aggregation/102270 "2017-09-29T14:08:17Z")

</div>

Hello, We want to keep track of the record maximum daily searches. I have a metric visualization that does this with max bucket agg but I want to add extra functionality and I am finding it difficult. Is it possible fo…

---

## [Config elastic 2.2.0 with 5 nodes](https://discuss.elastic.co/t/config-elastic-2-2-0-with-5-nodes/102149)

<div class="topic-metadata">

**Author:** [@jeannot](https://discuss.elastic.co/u/jeannot)\
**Replies:** 13\
**Last updated:** [September 29, 2017, 2:42pm UTC](https://discuss.elastic.co/t/config-elastic-2-2-0-with-5-nodes/102149 "2017-09-29T14:42:38Z")

</div>

Hi all, I'm new in elastic. I thought number of master should be a quorum of data nodes ( so 3 master for 5 nodes) In fact I have 5 nodes for an elastic cluster and only one master. Is it a correct config ? May I hav…

---

## [Problem with X-Pack Machine Learning](https://discuss.elastic.co/t/problem-with-x-pack-machine-learning/102096)

<div class="topic-metadata">

**Author:** [@Arun\_Raj](https://discuss.elastic.co/u/Arun_Raj)\
**Replies:** 9\
**Last updated:** [September 29, 2017, 2:10pm UTC](https://discuss.elastic.co/t/problem-with-x-pack-machine-learning/102096 "2017-09-29T14:10:34Z")

</div>

Hi All I am new to X-Pack and I tried to create a Single metric viewer for that I selected the aggregation as count then I tried to select the options from 'field' dropbox but there is no functions or values present i…

---

## [Fetch only matching result fields from Search query](https://discuss.elastic.co/t/fetch-only-matching-result-fields-from-search-query/102265)

<div class="topic-metadata">

**Author:** [@Paddy\_Mahadeva](https://discuss.elastic.co/u/Paddy_Mahadeva)\
**Replies:** 0\
**Last updated:** [September 29, 2017, 1:44pm UTC](https://discuss.elastic.co/t/fetch-only-matching-result-fields-from-search-query/102265 "2017-09-29T13:44:03Z")

</div>

Hi, I have a document with many text fields. I am running a search query on these fields using the below query { "query": { "multi\_match": { "query": "abc", "fields": \["UserName", "Company", "Email", …

---

## [Curator 3.5 + RHEL5](https://discuss.elastic.co/t/curator-3-5-rhel5/102221)

<div class="topic-metadata">

**Author:** [@Lchamoin](https://discuss.elastic.co/u/Lchamoin)\
**Replies:** 2\
**Last updated:** [September 29, 2017, 1:43pm UTC](https://discuss.elastic.co/t/curator-3-5-rhel5/102221 "2017-09-29T13:43:15Z")

</div>

Hello, I am trying to use curator 3.5 with ES 1.7.6 for a customer. We would like to install curator on a RHEL5 server, but unfortunately i can only find package for RHEL 6 or 7. Is there a package for RHEL 5 for curat…

---

## [Exposing 'transport.tcp.port' to outside world](https://discuss.elastic.co/t/exposing-transport-tcp-port-to-outside-world/102232)

<div class="topic-metadata">

**Author:** [@NikhilJoshi2](https://discuss.elastic.co/u/NikhilJoshi2)\
**Replies:** 5\
**Last updated:** [September 29, 2017, 1:38pm UTC](https://discuss.elastic.co/t/exposing-transport-tcp-port-to-outside-world/102232 "2017-09-29T13:38:35Z")

</div>

In elasticsearch.yml file of version 5.5.0, I have below: http.port: 1180 transport.tcp.port: 1183 Then I went through various Elasticsearch documentation (this and this) and able to expose port 1180 to outside worl…

---

## [Unable to install Custom realm file in X-pack extension](https://discuss.elastic.co/t/unable-to-install-custom-realm-file-in-x-pack-extension/102255)

<div class="topic-metadata">

**Author:** [@Vivek\_Unni](https://discuss.elastic.co/u/Vivek_Unni)\
**Replies:** 0\
**Last updated:** [September 29, 2017, 12:03pm UTC](https://discuss.elastic.co/t/unable-to-install-custom-realm-file-in-x-pack-extension/102255 "2017-09-29T12:03:37Z")

</div>

Hi, I am trying to install the example custom realm in one of the nodes...but keeps getting this NoSuchFileException. Can someone pls throw some light on it. -bash-4.1$ ./extension install file:///auto/users-10/e62386…

---

## [Enabling File Data while using \_bulk API](https://discuss.elastic.co/t/enabling-file-data-while-using-bulk-api/102023)

<div class="topic-metadata">

**Author:** [@Atul\_Harsha](https://discuss.elastic.co/u/Atul_Harsha)\
**Replies:** 6\
**Last updated:** [September 29, 2017, 11:56am UTC](https://discuss.elastic.co/t/enabling-file-data-while-using-bulk-api/102023 "2017-09-29T11:56:24Z")

</div>

Hi all, I am elastic search beginner and i am stuck in the following code. Please Help me out POST /cars/transactions/\_bulk { "index": {}} { "price" : 10000, "color" : "red", "make" : "honda", "sold" : "2014-10-28" } …

---

## [Connect Error with JAVA - NoNodeAvailableException\[None of the configured nodes are available](https://discuss.elastic.co/t/connect-error-with-java-nonodeavailableexception-none-of-the-configured-nodes-are-available/102238)

<div class="topic-metadata">

**Author:** [@Tony\_Lam](https://discuss.elastic.co/u/Tony_Lam)\
**Replies:** 1\
**Last updated:** [September 29, 2017, 11:41am UTC](https://discuss.elastic.co/t/connect-error-with-java-nonodeavailableexception-none-of-the-configured-nodes-are-available/102238 "2017-09-29T11:41:01Z")

</div>

Hi Everyone, I have provision a Elastic Cloud for my programmers, they are using Native Elasticsearch binary protocal but found these errors It is able to connect to it and find out its nodes below: 54.254.97.95:9343 …

---

## [Autocomplete from multiple fields](https://discuss.elastic.co/t/autocomplete-from-multiple-fields/101478)

<div class="topic-metadata">

**Author:** [@Paddy\_Mahadeva](https://discuss.elastic.co/u/Paddy_Mahadeva)\
**Replies:** 1\
**Last updated:** [September 29, 2017, 11:24am UTC](https://discuss.elastic.co/t/autocomplete-from-multiple-fields/101478 "2017-09-29T11:24:08Z")

</div>

Hi, I have an Elasticsearch index that has documents with a field StringField1, StringField2, NumberField1 etc. I need to build an autocomplete functionality that searches on all the 3 fields. ie. if user inputs pa …

---

## [Sizing the ELK stack](https://discuss.elastic.co/t/sizing-the-elk-stack/102224)

<div class="topic-metadata">

**Author:** [@ericd](https://discuss.elastic.co/u/ericd)\
**Replies:** 6\
**Last updated:** [September 29, 2017, 10:31am UTC](https://discuss.elastic.co/t/sizing-the-elk-stack/102224 "2017-09-29T10:31:42Z")

</div>

Hello to everyone, I have a need to design a ELK stack and two not-heavy web applications (served by nginx). Ingress rate for logstash will be around 1000EPS (later maybe up to 2000EPS). How i can monitor this rate wi…

---

## [Not enough master nodes discovered during pinging](https://discuss.elastic.co/t/not-enough-master-nodes-discovered-during-pinging/102240)

<div class="topic-metadata">

**Author:** [@Joy4fun](https://discuss.elastic.co/u/Joy4fun)\
**Replies:** 1\
**Last updated:** [September 29, 2017, 10:29am UTC](https://discuss.elastic.co/t/not-enough-master-nodes-discovered-during-pinging/102240 "2017-09-29T10:29:58Z")

</div>

I have 3 aws ec2 instances(sink1,sink2,sink3)in us-west-2a, us-west-2b, us-west-2c respectively, each of the instance has only one elasticsearch service (5.6.2)that I tryna start up to form a 3 nodes-cluster. Three mach…

---

## [Date format in format Wed Jan 13 2016 18:28:28 GMT+0100](https://discuss.elastic.co/t/date-format-in-format-wed-jan-13-2016-18-28-28-gmt-0100/102244)

<div class="topic-metadata">

**Author:** [@AshishThakur](https://discuss.elastic.co/u/AshishThakur)\
**Replies:** 0\
**Last updated:** [September 29, 2017, 10:29am UTC](https://discuss.elastic.co/t/date-format-in-format-wed-jan-13-2016-18-28-28-gmt-0100/102244 "2017-09-29T10:29:25Z")

</div>

Input for my elastic has some dates in format below. Though I can use "date\_detection": false but using that I can't use range filters etc as the date would be indexed as string. Is there a preprocessor using which I ca…

---

## [Include an attribute of top level item on inner\_hits result set?](https://discuss.elastic.co/t/include-an-attribute-of-top-level-item-on-inner-hits-result-set/102199)

<div class="topic-metadata">

**Author:** [@dezmathio](https://discuss.elastic.co/u/dezmathio)\
**Replies:** 1\
**Last updated:** [September 29, 2017, 10:09am UTC](https://discuss.elastic.co/t/include-an-attribute-of-top-level-item-on-inner-hits-result-set/102199 "2017-09-29T10:09:56Z")

</div>

Here are the mapping, query & result set: https://gist.github.com/dezmathio/40c397c40c5f7ee864126acc1416e828 To take the relevant snippets from the link: part of mapping I care about: "vendor\_portfolio\_items": { …

---

## [How to conditionally update a nested object?](https://discuss.elastic.co/t/how-to-conditionally-update-a-nested-object/102217)

<div class="topic-metadata">

**Author:** [@prapan](https://discuss.elastic.co/u/prapan)\
**Replies:** 0\
**Last updated:** [September 29, 2017, 7:04am UTC](https://discuss.elastic.co/t/how-to-conditionally-update-a-nested-object/102217 "2017-09-29T07:04:11Z")

</div>

I am trying to conditionally update nested object, but some how not able to do it. My index mapping looks like PUT in\_index { "mappings": { "tyepe\_index": { "properties": { "name":{ "type": "text" }, "id":{ "t…

---

## [ESRally Metrics Definition](https://discuss.elastic.co/t/esrally-metrics-definition/101850)

<div class="topic-metadata">

**Author:** [@sanketshinde](https://discuss.elastic.co/u/sanketshinde)\
**Replies:** 2\
**Last updated:** [September 29, 2017, 9:29am UTC](https://discuss.elastic.co/t/esrally-metrics-definition/101850 "2017-09-29T09:29:57Z")

</div>

I am working with ESRally and would like to understand what the various metrics mean. I tried reading the documentation provided here: http://esrally.readthedocs.io/en/latest/summary\_report.html, but it does not convey d…

---

## [How to create an index and push data into an elastic cluster with dedicated Master, Data and co-ordinate only nodes?](https://discuss.elastic.co/t/how-to-create-an-index-and-push-data-into-an-elastic-cluster-with-dedicated-master-data-and-co-ordinate-only-nodes/102231)

<div class="topic-metadata">

**Author:** [@iam.Carrot](https://discuss.elastic.co/u/iam.Carrot)\
**Replies:** 0\
**Last updated:** [September 29, 2017, 9:08am UTC](https://discuss.elastic.co/t/how-to-create-an-index-and-push-data-into-an-elastic-cluster-with-dedicated-master-data-and-co-ordinate-only-nodes/102231 "2017-09-29T09:08:06Z")

</div>

Hi I am using a 7 node structure. I have 3 Master nodes, then 2 Co-ordinate only nodes and 2 Data Nodes. I am wondering how do I push data into elasticsearch? I mean which node should I be hitting the curl request? I t…

---

## [How can install exactly vesion ELK stack](https://discuss.elastic.co/t/how-can-install-exactly-vesion-elk-stack/102225)

<div class="topic-metadata">

**Author:** [@truongdqse03303](https://discuss.elastic.co/u/truongdqse03303)\
**Replies:** 3\
**Last updated:** [September 29, 2017, 8:54am UTC](https://discuss.elastic.co/t/how-can-install-exactly-vesion-elk-stack/102225 "2017-09-29T08:54:58Z")

</div>

Hi experts. I have install ELK stack version 5.4.1 but now when i have install new logstash and kibana, how can i install exactly 5.4.1 version because the kibana 5.6.1 not working with elastic 5.4.1 and i no longer con…

---

## [Saving and loading setup data](https://discuss.elastic.co/t/saving-and-loading-setup-data/99556)

<div class="topic-metadata">

**Author:** [@jeffrey](https://discuss.elastic.co/u/jeffrey)\
**Replies:** 3\
**Last updated:** [September 29, 2017, 8:43am UTC](https://discuss.elastic.co/t/saving-and-loading-setup-data/99556 "2017-09-29T08:43:09Z")

</div>

I have been investigating how to export setup data - elastic (indices, mappings) and kibana (visualisations, dashboards, searches, index patterns) then import it on a fresh installation. I have found several useful art…

---

## [Fail to get access token](https://discuss.elastic.co/t/fail-to-get-access-token/101960)

<div class="topic-metadata">

**Author:** [@Wu\_Chun\_Wa](https://discuss.elastic.co/u/Wu_Chun_Wa)\
**Replies:** 4\
**Last updated:** [September 29, 2017, 8:28am UTC](https://discuss.elastic.co/t/fail-to-get-access-token/101960 "2017-09-29T08:28:55Z")

</div>

Hi Sir, i just follow the doc. https://www.elastic.co/guide/en/elasticsearch/reference/5.6/security-api-tokens.html Call the following command POST /\_xpack/security/oauth2/token { "grant\_type" : "password", "usern…

---

## [How to diagnose rejected execution exception?](https://discuss.elastic.co/t/how-to-diagnose-rejected-execution-exception/101995)

<div class="topic-metadata">

**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\
**Replies:** 1\
**Last updated:** [September 29, 2017, 8:22am UTC](https://discuss.elastic.co/t/how-to-diagnose-rejected-execution-exception/101995 "2017-09-29T08:22:47Z")

</div>

How to diagnose es\_rejected\_execution\_exception? I see a number of threads about running out of threads (ha ha) but I didn't find one that answers the following question: I don't think there's that much going on on the…

---

## [ElasticSearch no query hits on long field type](https://discuss.elastic.co/t/elasticsearch-no-query-hits-on-long-field-type/102222)

<div class="topic-metadata">

**Author:** [@dominik.safaric](https://discuss.elastic.co/u/dominik.safaric)\
**Replies:** 0\
**Last updated:** [September 29, 2017, 8:02am UTC](https://discuss.elastic.co/t/elasticsearch-no-query-hits-on-long-field-type/102222 "2017-09-29T08:02:40Z")

</div>

I'm having a custom query plugin that aims at classifying documents as hit or not using a long field. The custom query has been implemented by extending the Lucene MultiTermQuery. Details may be found here. When I exec…

---

## [Help to convert SQL to ElasticSearch](https://discuss.elastic.co/t/help-to-convert-sql-to-elasticsearch/102083)

<div class="topic-metadata">

**Author:** [@irfanh94](https://discuss.elastic.co/u/irfanh94)\
**Replies:** 5\
**Last updated:** [September 29, 2017, 7:40am UTC](https://discuss.elastic.co/t/help-to-convert-sql-to-elasticsearch/102083 "2017-09-29T07:40:31Z")

</div>

Hey guys, can somone help me to convert this sql query to elasticsearch query: SELECT id, supplier FROM s\_articles WHERE supplier NOT IN (1,2) OR id IN (1,2,3,4,5,6)

---

## [Can I update a graph?](https://discuss.elastic.co/t/can-i-update-a-graph/101991)

<div class="topic-metadata">

**Author:** [@Badger](https://discuss.elastic.co/u/Badger)\
**Replies:** 5\
**Last updated:** [September 29, 2017, 7:09am UTC](https://discuss.elastic.co/t/can-i-update-a-graph/101991 "2017-09-29T07:09:25Z")

</div>

I am trying to use the Graph feature and it does not work in the way I expect. I have IIS logs indexed, and I used the logstash useragent plugin to parse the UA strings. I start with a new graph (in a 5.6.1 stack), and a…

---

## [Elasticsearch operational issue due to garbage collector](https://discuss.elastic.co/t/elasticsearch-operational-issue-due-to-garbage-collector/102158)

<div class="topic-metadata">

**Author:** [@chitender](https://discuss.elastic.co/u/chitender)\
**Replies:** 6\
**Last updated:** [September 29, 2017, 7:06am UTC](https://discuss.elastic.co/t/elasticsearch-operational-issue-due-to-garbage-collector/102158 "2017-09-29T07:06:33Z")

</div>

running a 4 node elasticsearch cluster. which has one client node and 3 data nodes. data nodes are also configured as master eligible node. elasticsearch version is 2.3.5 lucene version is 5.5.0 JAVA is openjdk versio…

---

## [Bootstrap checks - memory is not locked](https://discuss.elastic.co/t/bootstrap-checks-memory-is-not-locked/102218)

<div class="topic-metadata">

**Author:** [@matthew\_maclean](https://discuss.elastic.co/u/matthew_maclean)\
**Replies:** 0\
**Last updated:** [September 29, 2017, 7:05am UTC](https://discuss.elastic.co/t/bootstrap-checks-memory-is-not-locked/102218 "2017-09-29T07:05:04Z")

</div>

Hi guys, I'm having problems with the bootstrap check on a RedHat box. I've searched around the forums and tried \[2017-09-20T11:40:41,836\]\[ERROR\]\[o.e.b.Bootstrap \] \[node1\] node validation exception \[2\] bootstr…

---

## [IndexOutOfBoundsException while accessing a field value using leafdoclookup.get(fieldname+".keyword")](https://discuss.elastic.co/t/indexoutofboundsexception-while-accessing-a-field-value-using-leafdoclookup-get-fieldname-keyword/101979)

<div class="topic-metadata">

**Author:** [@shashanksheela](https://discuss.elastic.co/u/shashanksheela)\
**Replies:** 0\
**Last updated:** [September 27, 2017, 12:47pm UTC](https://discuss.elastic.co/t/indexoutofboundsexception-while-accessing-a-field-value-using-leafdoclookup-get-fieldname-keyword/101979 "2017-09-27T12:47:48Z")

</div>

Caused by: java.lang.IndexOutOfBoundsException: -1 at java.nio.DirectByteBuffer.get(DirectByteBuffer.java:253) ~\[?:1.8.0\_131\] at org.apache.lucene.store.ByteBufferGuard.getByte(ByteBufferGuard.java:118) ~\[lucene-core-6…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1934)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1936)
