# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1939 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1940 --- ## [Elasticsearch Restore snapshot from different azure account](https://discuss.elastic.co/t/elasticsearch-restore-snapshot-from-different-azure-account/101815)
**Author:** [@Narmatha](https://discuss.elastic.co/u/Narmatha)\ **Replies:** 3\ **Last updated:** [September 26, 2017, 11:52am UTC](https://discuss.elastic.co/t/elasticsearch-restore-snapshot-from-different-azure-account/101815 "2017-09-26T11:52:49Z")
I need to copy data from the production server into the test server. How to do this ? The snapshot is created in production using azure cloud plugin. Is it possible to restore data from one azure storage to another az… --- ## [Watcher and Moogsoft](https://discuss.elastic.co/t/watcher-and-moogsoft/101636)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [September 26, 2017, 11:52am UTC](https://discuss.elastic.co/t/watcher-and-moogsoft/101636 "2017-09-26T11:52:11Z")
Whether webhook needs to be used integrate with Moogsoft? Or is there any other option? --- ## [Keyword Query Does not Work](https://discuss.elastic.co/t/keyword-query-does-not-work/101687)
**Author:** [@Ibrahim\_ozgon](https://discuss.elastic.co/u/Ibrahim_ozgon)\ **Replies:** 3\ **Last updated:** [September 26, 2017, 11:34am UTC](https://discuss.elastic.co/t/keyword-query-does-not-work/101687 "2017-09-26T11:34:39Z")
Hello everyone, I have a problem with keyword query. I want to filter categoryProperties by key and value. key is"color" and value contains "mavi" But it gives me document it contains key is "color" and value contain… --- ## [Failed to execute fetch phase org.elasticsearch.transport.RemoteTransportException](https://discuss.elastic.co/t/failed-to-execute-fetch-phase-org-elasticsearch-transport-remotetransportexception/101829)
**Author:** [@dedosan](https://discuss.elastic.co/u/dedosan)\ **Replies:** 2\ **Last updated:** [September 26, 2017, 11:15am UTC](https://discuss.elastic.co/t/failed-to-execute-fetch-phase-org-elasticsearch-transport-remotetransportexception/101829 "2017-09-26T11:15:25Z")
Hi I am new to ELK Stack. Server details - 4 Vcpu , 16GB RAM here i am quering application log files (java applications) Im getting following error on elasticsearch log file It comes when i access Dashboard (It has… --- ## [Elasticsearch DSL queries : how to handle search if some documents doesn't have the specific field](https://discuss.elastic.co/t/elasticsearch-dsl-queries-how-to-handle-search-if-some-documents-doesnt-have-the-specific-field/101826)
**Author:** [@maralbe](https://discuss.elastic.co/u/maralbe)\ **Replies:** 0\ **Last updated:** [September 26, 2017, 10:30am UTC](https://discuss.elastic.co/t/elasticsearch-dsl-queries-how-to-handle-search-if-some-documents-doesnt-have-the-specific-field/101826 "2017-09-26T10:30:12Z")
Hi, I have documents that have not same structure, I mean some of my documents have some fields that other doesn't, so I want to search in those fields that may or may not exists.. I wrote a bool query with filter and … --- ## [How to get transaction id the greatest value elastic](https://discuss.elastic.co/t/how-to-get-transaction-id-the-greatest-value-elastic/101817)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 1\ **Last updated:** [September 26, 2017, 10:29am UTC](https://discuss.elastic.co/t/how-to-get-transaction-id-the-greatest-value-elastic/101817 "2017-09-26T10:29:19Z")
Hi, I have around 5 logs per transaction, every log has a timestamp and all 5 logs in a transactionId has a unique Id I am trying to find the latest (largest) timestamp for every transaction Id. Many thanks --- ## [Filter by histogram bucket key](https://discuss.elastic.co/t/filter-by-histogram-bucket-key/101344)
**Author:** [@tomisu](https://discuss.elastic.co/u/tomisu)\ **Replies:** 4\ **Last updated:** [September 26, 2017, 9:43am UTC](https://discuss.elastic.co/t/filter-by-histogram-bucket-key/101344 "2017-09-26T09:43:54Z")
Hello, everyone! Setup ElasticSearch 5.4 I have 2 types of document: Contact, and Message. Both with a created\_on field. Message's parent is Contact. Goal I'm trying to make a date histogram with 2 values nested in e… --- ## [Getting Error while Nuxeo Client trying to access Elasticsearch on same host or localhost](https://discuss.elastic.co/t/getting-error-while-nuxeo-client-trying-to-access-elasticsearch-on-same-host-or-localhost/101790)
**Author:** [@mvk786](https://discuss.elastic.co/u/mvk786)\ **Replies:** 7\ **Last updated:** [September 26, 2017, 9:09am UTC](https://discuss.elastic.co/t/getting-error-while-nuxeo-client-trying-to-access-elasticsearch-on-same-host-or-localhost/101790 "2017-09-26T09:09:44Z")
\[2017-09-26 11:43:02,429\]\[INFO \]\[cluster.routing.allocation\] \[nuxeo\] Cluster health status changed from \[RED\] to \[YELLOW\] (reason: \[shards started \[\[.marvel-es-1-2017.09.25\]\[0\], \[.marvel-es-data-1\]\[0\], \[.marvel-es-1-2017… --- ## [Spark structured streaming Elasticsearch integration issue. Data source es does not support streamed writing](https://discuss.elastic.co/t/spark-structured-streaming-elasticsearch-integration-issue-data-source-es-does-not-support-streamed-writing/101805)
**Author:** [@Jagannadh](https://discuss.elastic.co/u/Jagannadh)\ **Replies:** 0\ **Last updated:** [September 26, 2017, 8:52am UTC](https://discuss.elastic.co/t/spark-structured-streaming-elasticsearch-integration-issue-data-source-es-does-not-support-streamed-writing/101805 "2017-09-26T08:52:30Z")
I am writing a Spark structured streaming application in which data processed with Spark needs be sink'ed to elastic search. This is my development environment, hence I have a standalone Elastic search. I have tried fo… --- ## [Custom tokenizer doesn't work on reindex/index api, only \_analyze endpoint](https://discuss.elastic.co/t/custom-tokenizer-doesnt-work-on-reindex-index-api-only--analyze-endpoint/101715)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 7\ **Last updated:** [September 26, 2017, 8:41am UTC](https://discuss.elastic.co/t/custom-tokenizer-doesnt-work-on-reindex-index-api-only--analyze-endpoint/101715 "2017-09-26T08:41:20Z")
I've written a custom tokenizer. It was hard (Building a custom tokenizer: "Could not find suitable constructor"), nevertheless I persevered. I created an index with it configured: "analysis":{ "analy… --- ## [Fail to start after upgrade](https://discuss.elastic.co/t/fail-to-start-after-upgrade/101796)
**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\ **Replies:** 1\ **Last updated:** [September 26, 2017, 8:13am UTC](https://discuss.elastic.co/t/fail-to-start-after-upgrade/101796 "2017-09-26T08:13:57Z")
Hi, i get the following in my log after i upgraded from 5.2.2 to 5.6.1 \[2017-09-26T09:47:50,477\]\[WARN \]\[o.e.c.l.LogConfigurator \] ignoring unsupported logging configuration file \[/etc/elasticsearch/logging.yml\], logg… --- ## [Wrong question](https://discuss.elastic.co/t/wrong-question/101792)
**Author:** [@John\_ax](https://discuss.elastic.co/u/John_ax)\ **Replies:** 0\ **Last updated:** [September 26, 2017, 6:56am UTC](https://discuss.elastic.co/t/wrong-question/101792 "2017-09-26T06:56:59Z")
my bad, I have solved the problem --- ## [Elasticsearch 2.4.6 Performance Optimizations](https://discuss.elastic.co/t/elasticsearch-2-4-6-performance-optimizations/101791)
**Author:** [@apenen](https://discuss.elastic.co/u/apenen)\ **Replies:** 1\ **Last updated:** [September 26, 2017, 6:58am UTC](https://discuss.elastic.co/t/elasticsearch-2-4-6-performance-optimizations/101791 "2017-09-26T06:58:44Z")
Hi everyone! We have 3 nodes with 64 Cores, 128Gb of RAM and 3TB on SSD. We are receiving more than 1k log messages per second. And we have 1494 indexes opened with 5 shards per index. On Logstash and marvel agent som… --- ## [Can i aggregate a nested field content?](https://discuss.elastic.co/t/can-i-aggregate-a-nested-field-content/101709)
**Author:** [@sharongur](https://discuss.elastic.co/u/sharongur)\ **Replies:** 1\ **Last updated:** [September 26, 2017, 6:52am UTC](https://discuss.elastic.co/t/can-i-aggregate-a-nested-field-content/101709 "2017-09-26T06:52:43Z")
Hi all! Im trying to do and aggregation of the values in a nested query, on an earlier query. I managed to do the following: POST /flow\_test/sometest POST flow\_test/\_mapping/sometest { "properties": { "cerdenti… --- ## [How to add Authentication Information into a Connection Request?](https://discuss.elastic.co/t/how-to-add-authentication-information-into-a-connection-request/101275)
**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\ **Replies:** 2\ **Last updated:** [September 26, 2017, 2:06am UTC](https://discuss.elastic.co/t/how-to-add-authentication-information-into-a-connection-request/101275 "2017-09-26T02:06:06Z")
I have a dockerised container of Elasticsearch and it comes by default with X-Pack security. The application will connect to the dockerised Elasticsearch container using a Elasticsearch-ReactJS library called Searchkit… --- ## [\[v5.6.1 java transport client\] org.elasticsearch.client.transport.NoNodeAvailableException: None of the configured nodes were available](https://discuss.elastic.co/t/v5-6-1-java-transport-client-org-elasticsearch-client-transport-nonodeavailableexception-none-of-the-configured-nodes-were-available/101767)
**Author:** [@Roman\_Selmeci](https://discuss.elastic.co/u/Roman_Selmeci)\ **Replies:** 1\ **Last updated:** [September 26, 2017, 1:18am UTC](https://discuss.elastic.co/t/v5-6-1-java-transport-client-org-elasticsearch-client-transport-nonodeavailableexception-none-of-the-configured-nodes-were-available/101767 "2017-09-26T01:18:15Z")
Hi, my name is Roman. I'm really hopeless. I'm trying to use elastic cloud, but it does not work correctly and I'm getting randomly java error on transport client after update to 5.6.1 version (cluster and client). M… --- ## [Shard recovery fails after resizing Google Cloud Platform's Persistent Disk](https://discuss.elastic.co/t/shard-recovery-fails-after-resizing-google-cloud-platforms-persistent-disk/99936)
**Author:** [@singhpratyush](https://discuss.elastic.co/u/singhpratyush)\ **Replies:** 12\ **Last updated:** [September 25, 2017, 10:37pm UTC](https://discuss.elastic.co/t/shard-recovery-fails-after-resizing-google-cloud-platforms-persistent-disk/99936 "2017-09-25T22:37:59Z")
I am running Elasticsearch inside Kubernetes cluster on Google Cloud Platform. The index is stored on a persistent disk. \[Kubernetes Configuration\] Elasticsearch version is 2.0.0. Recently, the disk was full and I resi… --- ## [Does Rally support benchmarking partial updates (doc\_as\_upsert)](https://discuss.elastic.co/t/does-rally-support-benchmarking-partial-updates-doc-as-upsert/101081)
**Author:** [@Zixuan\_Liu](https://discuss.elastic.co/u/Zixuan_Liu)\ **Replies:** 2\ **Last updated:** [September 25, 2017, 8:27pm UTC](https://discuss.elastic.co/t/does-rally-support-benchmarking-partial-updates-doc-as-upsert/101081 "2017-09-25T20:27:53Z")
Hi team, I have a use case where I need to do partial updates to a document. Example POST /index/mapping/1/\_update { "doc" : { "name" : "A", }, "doc\_as\_upsert" : true } POST /index/mapping/1/\_update { "doc" :… --- ## [If your plugin build breaks when upgrading to 5.6+](https://discuss.elastic.co/t/if-your-plugin-build-breaks-when-upgrading-to-5-6/101752)
**Author:** [@loren](https://discuss.elastic.co/u/loren)\ **Replies:** 1\ **Last updated:** [September 25, 2017, 8:12pm UTC](https://discuss.elastic.co/t/if-your-plugin-build-breaks-when-upgrading-to-5-6/101752 "2017-09-25T20:12:18Z")
I built a custom ingest plugin with the helpful cookiecutter and now want to upgrade it from 5.5.1 to use 5.6.1 but the build failed with: \> Must specify license and notice file for project : \> Cannot get property… --- ## [Expected numeric type on field \[timestamp\], but got \[string\]](https://discuss.elastic.co/t/expected-numeric-type-on-field-timestamp-but-got-string/101031)
**Author:** [@Radhakrishnan](https://discuss.elastic.co/u/Radhakrishnan)\ **Replies:** 4\ **Last updated:** [September 25, 2017, 3:17pm UTC](https://discuss.elastic.co/t/expected-numeric-type-on-field-timestamp-but-got-string/101031 "2017-09-25T15:17:46Z")
\[DEBUG\]\[action.search \] \[Hit-Maker\] All shards failed for phase: \[query\] RemoteTransportException\[\[Hit-Maker\]\[127.0.0.1:9300\]\[indices:data/read/search\[phase/query\]\]\]; nested: IllegalArgumentException\[Expected… --- ## [Elasticsearch 2.4.5 Very slow updates of date fields](https://discuss.elastic.co/t/elasticsearch-2-4-5-very-slow-updates-of-date-fields/101725)
**Author:** [@Leon\_Brodsky](https://discuss.elastic.co/u/Leon_Brodsky)\ **Replies:** 0\ **Last updated:** [September 25, 2017, 3:14pm UTC](https://discuss.elastic.co/t/elasticsearch-2-4-5-very-slow-updates-of-date-fields/101725 "2017-09-25T15:14:06Z")
Hi, I am having a problem with updates of date fields using bulk updates with upsert. I am running bulk of 2000 docs (may be same documents in the same bulk to be updated). and it takes a long long time to accomplish … --- ## [Setting up a custom analyzer](https://discuss.elastic.co/t/setting-up-a-custom-analyzer/101480)
**Author:** [@Karolinebryn](https://discuss.elastic.co/u/Karolinebryn)\ **Replies:** 5\ **Last updated:** [September 25, 2017, 2:50pm UTC](https://discuss.elastic.co/t/setting-up-a-custom-analyzer/101480 "2017-09-25T14:50:49Z")
Hi! I am creating a custom analyzer for one of my indexes, and I have some questions about the lowercase and standard token filters. In the documentation it says this about the lowecase tokenizer The lowercase tokeni… --- ## [Return parents with or without children](https://discuss.elastic.co/t/return-parents-with-or-without-children/101721)
**Author:** [@benjes](https://discuss.elastic.co/u/benjes)\ **Replies:** 0\ **Last updated:** [September 25, 2017, 2:39pm UTC](https://discuss.elastic.co/t/return-parents-with-or-without-children/101721 "2017-09-25T14:39:12Z")
Hi, I've got a parent child model (see Reindexing Elasticsearch index with parent and child relationship) and I want to run a query that returns a list of all (or filtered) documents. In that list I want to have inner\_h… --- ## [ELK Architecture and requirements](https://discuss.elastic.co/t/elk-architecture-and-requirements/101075)
**Author:** [@Nelson\_Pita](https://discuss.elastic.co/u/Nelson_Pita)\ **Replies:** 5\ **Last updated:** [September 25, 2017, 2:25pm UTC](https://discuss.elastic.co/t/elk-architecture-and-requirements/101075 "2017-09-25T14:25:02Z")
Hi guys, I need to create an ELK architecture but I don't know how many servers and requirements (CPU, RAM,Disk space) I will need. I will need to send syslog and logfiles from 15 servers (total around 500MB/day) to th… --- ## [Building a custom tokenizer: "Could not find suitable constructor"](https://discuss.elastic.co/t/building-a-custom-tokenizer-could-not-find-suitable-constructor/101138)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 15\ **Last updated:** [September 25, 2017, 2:13pm UTC](https://discuss.elastic.co/t/building-a-custom-tokenizer-could-not-find-suitable-constructor/101138 "2017-09-25T14:13:08Z")
I'm building a custom tokenizer in response to this: Performance of doc\_values field vs analysed field None of this API appears to be documented (?), so I'm going off of code samples from other plugins/tokenizers, but w… --- ## [Certgen and the "Extended Key Usage" field](https://discuss.elastic.co/t/certgen-and-the-extended-key-usage-field/100536)
**Author:** [@Cornoualis](https://discuss.elastic.co/u/Cornoualis)\ **Replies:** 2\ **Last updated:** [September 25, 2017, 1:07pm UTC](https://discuss.elastic.co/t/certgen-and-the-extended-key-usage-field/100536 "2017-09-25T13:07:05Z")
In a previous topic, there was a discussion about the "Extended Key Usage" field that was left blank by certgen, when generating a CSR: Since we know in advance that the certificate will be used for both server and cl… --- ## [Is it possible to restore snapshot from newer version to older version?](https://discuss.elastic.co/t/is-it-possible-to-restore-snapshot-from-newer-version-to-older-version/101703)
**Author:** [@rinu](https://discuss.elastic.co/u/rinu)\ **Replies:** 2\ **Last updated:** [September 25, 2017, 12:53pm UTC](https://discuss.elastic.co/t/is-it-possible-to-restore-snapshot-from-newer-version-to-older-version/101703 "2017-09-25T12:53:42Z")
Is it possible to restore snapshot created on 5.6.0 to 5.1.1 ? --- ## [Indexing throttling in Elasticsearch](https://discuss.elastic.co/t/indexing-throttling-in-elasticsearch/101602)
**Author:** [@itasyurt](https://discuss.elastic.co/u/itasyurt)\ **Replies:** 3\ **Last updated:** [September 25, 2017, 11:51am UTC](https://discuss.elastic.co/t/indexing-throttling-in-elasticsearch/101602 "2017-09-25T11:51:40Z")
Hello all, We have number of periodic indexing tasks that perform bulk indexing of a few(let's say 10) million documents daily partitioned into pages of size 5K ( we have 200 tasks each having a page of 5K documents). … --- ## [Java REST client returning long value in Exponential](https://discuss.elastic.co/t/java-rest-client-returning-long-value-in-exponential/100681)
**Author:** [@Paddy\_Mahadeva](https://discuss.elastic.co/u/Paddy_Mahadeva)\ **Replies:** 4\ **Last updated:** [September 25, 2017, 11:44am UTC](https://discuss.elastic.co/t/java-rest-client-returning-long-value-in-exponential/100681 "2017-09-25T11:44:58Z")
Hi, I am using java REST client of Elasticsearch. I have a requirement where i need to find the max value of a long field from all the documents in an Index. I ran a POST http://localhost:9200/myIndex/myType/\_search?si… --- ## [How to change the cluster\_update\_settings time?](https://discuss.elastic.co/t/how-to-change-the-cluster-update-settings-time/101648)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 11\ **Last updated:** [September 25, 2017, 11:38am UTC](https://discuss.elastic.co/t/how-to-change-the-cluster-update-settings-time/101648 "2017-09-25T11:38:03Z")
the default is 30s ,but in big cluster this is small? how to change the time thanks. { "error" : { "root\_cause" : \[ { "type" : "process\_cluster\_event\_timeout\_exception", "reason" : "failed t… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1938) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1940)