# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1944

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1945

---

## [Mapping a field that contains hexadecimal number?](https://discuss.elastic.co/t/mapping-a-field-that-contains-hexadecimal-number/101212)

<div class="topic-metadata">

**Author:** [@avidane](https://discuss.elastic.co/u/avidane)\
**Replies:** 1\
**Last updated:** [September 20, 2017, 5:30pm UTC](https://discuss.elastic.co/t/mapping-a-field-that-contains-hexadecimal-number/101212 "2017-09-20T17:30:05Z")

</div>

I have a document that looks like the following: "\_index": "bla", "\_type": "blu", "\_source": { "id": "0x090256c0" } The 'id' field is an integer in hexadecimal format. If I try to use the following mapping for it: …

---

## [Elasticsearch token\_vector analysis over an entire field](https://discuss.elastic.co/t/elasticsearch-token-vector-analysis-over-an-entire-field/101036)

<div class="topic-metadata">

**Author:** [@MPurcell](https://discuss.elastic.co/u/MPurcell)\
**Replies:** 3\
**Last updated:** [September 20, 2017, 4:38pm UTC](https://discuss.elastic.co/t/elasticsearch-token-vector-analysis-over-an-entire-field/101036 "2017-09-20T16:38:57Z")

</div>

Hello I'm writing this question in the hopes for some clarity regarding token\_vector analysis. I am looking to get a count of unique tokens in a text/keyword field. So for example in the token\_vector query below: GET …

---

## [Elasticsearch stopped indexing after upgrading to 5.6](https://discuss.elastic.co/t/elasticsearch-stopped-indexing-after-upgrading-to-5-6/101083)

<div class="topic-metadata">

**Author:** [@imortalsolitude](https://discuss.elastic.co/u/imortalsolitude)\
**Replies:** 3\
**Last updated:** [September 20, 2017, 4:11pm UTC](https://discuss.elastic.co/t/elasticsearch-stopped-indexing-after-upgrading-to-5-6/101083 "2017-09-20T16:11:26Z")

</div>

Recently upgraded Elasticsearch ,logstash and kibana to 5.6.1with x-pack and since then indexes are failing to be built . Filebeat is running on windows server sending logs to logstash any pointer to look for specific er…

---

## [All suggestions are not coming after using completion suggester](https://discuss.elastic.co/t/all-suggestions-are-not-coming-after-using-completion-suggester/101198)

<div class="topic-metadata">

**Author:** [@Sayan\_Bhattacharya](https://discuss.elastic.co/u/Sayan_Bhattacharya)\
**Replies:** 0\
**Last updated:** [September 20, 2017, 3:15pm UTC](https://discuss.elastic.co/t/all-suggestions-are-not-coming-after-using-completion-suggester/101198 "2017-09-20T15:15:27Z")

</div>

Suppose I have 27 rows for (select \* from table where name like "s%") and while testing the API using elasticsearch with query as only "s" it is giving me only 11 names.Same behaviour is happening for other single chara…

---

## [ElasticSearch Java REST Client - Singleton or one instance per user](https://discuss.elastic.co/t/elasticsearch-java-rest-client-singleton-or-one-instance-per-user/101176)

<div class="topic-metadata">

**Author:** [@Rajesh\_Kumar](https://discuss.elastic.co/u/Rajesh_Kumar)\
**Replies:** 0\
**Last updated:** [September 20, 2017, 1:50pm UTC](https://discuss.elastic.co/t/elasticsearch-java-rest-client-singleton-or-one-instance-per-user/101176 "2017-09-20T13:50:26Z")

</div>

Hi, I am planning to use Java REST client in our application. Ours is a Java RESTful application running on Tomcat. We will have lot of search requests to ElasticSearch per second from different users. What is the best…

---

## [Kerberos support](https://discuss.elastic.co/t/kerberos-support/101166)

<div class="topic-metadata">

**Author:** [@adesouza](https://discuss.elastic.co/u/adesouza)\
**Replies:** 1\
**Last updated:** [September 20, 2017, 12:58pm UTC](https://discuss.elastic.co/t/kerberos-support/101166 "2017-09-20T12:58:59Z")

</div>

Hi, I see from this post that Kerberos support is on your roadmap, I was just wondering if you had an idea of when it might be included in X-Pack?

---

## [setShouldStoreResult doesn't store the tasks results](https://discuss.elastic.co/t/setshouldstoreresult-doesnt-store-the-tasks-results/101112)

<div class="topic-metadata">

**Author:** [@an.secure](https://discuss.elastic.co/u/an.secure)\
**Replies:** 1\
**Last updated:** [September 20, 2017, 12:44pm UTC](https://discuss.elastic.co/t/setshouldstoreresult-doesnt-store-the-tasks-results/101112 "2017-09-20T12:44:40Z")

</div>

I am trying to run a reindex job in async mode using reindexRequestBuilder.execute() method. I have also set reindexRequestBuilder.setShouldStoreResult(true) so that I can retrieve the results later on. Also I have set …

---

## [Index data size is too big](https://discuss.elastic.co/t/index-data-size-is-too-big/101140)

<div class="topic-metadata">

**Author:** [@w11th](https://discuss.elastic.co/u/w11th)\
**Replies:** 4\
**Last updated:** [September 20, 2017, 11:28am UTC](https://discuss.elastic.co/t/index-data-size-is-too-big/101140 "2017-09-20T11:28:28Z")

</div>

\[55\] I deploy an ELK system on Ubuntu, use Filebeat to collect logs. But the index size is too huge. I can't figure out why... This is my Logstash setting: input { beats { port =\> 8903 } } output { elasti…

---

## [Not able to hit target throughput](https://discuss.elastic.co/t/not-able-to-hit-target-throughput/101137)

<div class="topic-metadata">

**Author:** [@sharathr83](https://discuss.elastic.co/u/sharathr83)\
**Replies:** 3\
**Last updated:** [September 20, 2017, 9:27am UTC](https://discuss.elastic.co/t/not-able-to-hit-target-throughput/101137 "2017-09-20T09:27:59Z")

</div>

Hi, I have a benchmark which kinda looks like this: { "name": "standard-benchmark", "description": "Measure ES performance in standard use cases", "default": true, "schedule": \[ {…

---

## [Performance issue with Elastic](https://discuss.elastic.co/t/performance-issue-with-elastic/100780)

<div class="topic-metadata">

**Author:** [@manikesh](https://discuss.elastic.co/u/manikesh)\
**Replies:** 10\
**Last updated:** [September 20, 2017, 10:50am UTC](https://discuss.elastic.co/t/performance-issue-with-elastic/100780 "2017-09-20T10:50:07Z")

</div>

we are using elastic for very efficient search but it seems to be taking ~800ms for one simple search.. this is when we hit directly using elastic API.. we have our own cluster with 3 nodes where one is as master and ot…

---

## [ElasticSearch Query Issue for Alphanumeric Values](https://discuss.elastic.co/t/elasticsearch-query-issue-for-alphanumeric-values/101145)

<div class="topic-metadata">

**Author:** [@rahulm6](https://discuss.elastic.co/u/rahulm6)\
**Replies:** 0\
**Last updated:** [September 20, 2017, 10:12am UTC](https://discuss.elastic.co/t/elasticsearch-query-issue-for-alphanumeric-values/101145 "2017-09-20T10:12:47Z")

</div>

I am new to ElasticSearch NEST and trying to integrate in my application. One issue i am facing while searching with Alphanumeric feild like I have one feild UniqueID whose value starts with 'h' and followed by some in…

---

## [Create monthly index for metricbeat daily data](https://discuss.elastic.co/t/create-monthly-index-for-metricbeat-daily-data/101096)

<div class="topic-metadata">

**Author:** [@pasifus](https://discuss.elastic.co/u/pasifus)\
**Replies:** 8\
**Last updated:** [September 20, 2017, 10:18am UTC](https://discuss.elastic.co/t/create-monthly-index-for-metricbeat-daily-data/101096 "2017-09-20T10:18:22Z")

</div>

Hi My cluster get data from metricbeat and save daily elasticsearch indexes. I'm intresting in best way to convert daily to monthly indexes. The goal is to decreas index storage size and show monthly view of performan…

---

## [Writing watcher alerts back to elastic](https://discuss.elastic.co/t/writing-watcher-alerts-back-to-elastic/101139)

<div class="topic-metadata">

**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\
**Replies:** 1\
**Last updated:** [September 20, 2017, 9:40am UTC](https://discuss.elastic.co/t/writing-watcher-alerts-back-to-elastic/101139 "2017-09-20T09:40:15Z")

</div>

Hi, I'm trying to create watcher alerts for netflow data that I have. At present, by watching the official elastic video on youtube, I understand that once can log the alert on the logfile apart from send out emails / s…

---

## [Distributing the load test driver seems to be stuck (?)](https://discuss.elastic.co/t/distributing-the-load-test-driver-seems-to-be-stuck/100812)

<div class="topic-metadata">

**Author:** [@sharathr83](https://discuss.elastic.co/u/sharathr83)\
**Replies:** 3\
**Last updated:** [September 20, 2017, 9:37am UTC](https://discuss.elastic.co/t/distributing-the-load-test-driver-seems-to-be-stuck/100812 "2017-09-20T09:37:58Z")

</div>

I am trying to benchmark my ES cluster using multiple load test drivers (actually 1 load test driver) I have followed the documentation (for 0.7.1) and have done the following : I have 2 rally runner nodes. I am using 1…

---

## [Date format error with "epoch\_millis||epoch\_second"](https://discuss.elastic.co/t/date-format-error-with-epoch-millis-epoch-second/101135)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 1\
**Last updated:** [September 20, 2017, 9:33am UTC](https://discuss.elastic.co/t/date-format-error-with-epoch-millis-epoch-second/101135 "2017-09-20T09:33:14Z")

</div>

Hi all.... Here i am trying to define mapping for a field which stores epoch date values in it. PUT my\_index11 { "mappings": { "my\_type": { "properties": { "date": { "type": "date", …

---

## [Performance of doc\_values field vs analysed field](https://discuss.elastic.co/t/performance-of-doc-values-field-vs-analysed-field/99445)

<div class="topic-metadata">

**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\
**Replies:** 3\
**Last updated:** [September 20, 2017, 9:31am UTC](https://discuss.elastic.co/t/performance-of-doc-values-field-vs-analysed-field/99445 "2017-09-20T09:31:56Z")

</div>

Hi! We have an elasticsearch that contains over half a billion documents that each have a url field that stores a URL. The url field mapping currently has the settings: { index: not\_analyzed doc\_values: true …

---

## [Counting document frequency of keywords](https://discuss.elastic.co/t/counting-document-frequency-of-keywords/100970)

<div class="topic-metadata">

**Author:** [@Tommy\_Monk](https://discuss.elastic.co/u/Tommy_Monk)\
**Replies:** 1\
**Last updated:** [September 20, 2017, 9:24am UTC](https://discuss.elastic.co/t/counting-document-frequency-of-keywords/100970 "2017-09-20T09:24:17Z")

</div>

I'm performing some statistical analysis on keywords and have been stumped trying to query for count of occurrences. Here's a simplified example of what I wish to achieve; Example Documents { "Colour": "Red" } { "Colo…

---

## [Dynamically cancel processing in pipeline script (painless)](https://discuss.elastic.co/t/dynamically-cancel-processing-in-pipeline-script-painless/99429)

<div class="topic-metadata">

**Author:** [@Guillaume\_S](https://discuss.elastic.co/u/Guillaume_S)\
**Replies:** 3\
**Last updated:** [September 19, 2017, 10:03pm UTC](https://discuss.elastic.co/t/dynamically-cancel-processing-in-pipeline-script-painless/99429 "2017-09-19T22:03:01Z")

</div>

Hi, I’m working on a file system crawler and indexer, using combination of FS Crawler and pipeline (painless scripts) to do transformation/computations on text extracted from documents, My question is : is it possible …

---

## [Elasticdump copy \_template between hosts](https://discuss.elastic.co/t/elasticdump-copy--template-between-hosts/101128)

<div class="topic-metadata">

**Author:** [@LazPix](https://discuss.elastic.co/u/LazPix)\
**Replies:** 0\
**Last updated:** [September 20, 2017, 8:02am UTC](https://discuss.elastic.co/t/elasticdump-copy--template-between-hosts/101128 "2017-09-20T08:02:16Z")

</div>

I'm trying to copy the content of \_template from one host to another using elasticdump with the following command, but it fails: elasticdump --input=http://host1:9200/\_template --output=http://host2:9200/\_template Any …

---

## [Unassigned shards found](https://discuss.elastic.co/t/unassigned-shards-found/100864)

<div class="topic-metadata">

**Author:** [@zjzhiqian](https://discuss.elastic.co/u/zjzhiqian)\
**Replies:** 1\
**Last updated:** [September 20, 2017, 7:34am UTC](https://discuss.elastic.co/t/unassigned-shards-found/100864 "2017-09-20T07:34:34Z")

</div>

curl \_cluster/allocation/explain find unsigned shards , why and how to fix it { "index": "merge\_tran\_2017\_09\_07", "shard": 0, "primary": false, "current\_state": "unassigned", "unassigned\_info": {…

---

## [Shards and replicas in Elasticsearch](https://discuss.elastic.co/t/shards-and-replicas-in-elasticsearch/101115)

<div class="topic-metadata">

**Author:** [@johnybashqa](https://discuss.elastic.co/u/johnybashqa)\
**Replies:** 1\
**Last updated:** [September 20, 2017, 7:21am UTC](https://discuss.elastic.co/t/shards-and-replicas-in-elasticsearch/101115 "2017-09-20T07:21:26Z")

</div>

I am endeavoring to comprehend what shard and copy is in Elasticsearch, however I don't figure out how to comprehend it. In the event that I download Elasticsearch and run the content, at that point from what I know I ha…

---

## [Logstash output to elasticsearch event missing](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-event-missing/101109)

<div class="topic-metadata">

**Author:** [@bns\_frankpoon](https://discuss.elastic.co/u/bns_frankpoon)\
**Replies:** 0\
**Last updated:** [September 20, 2017, 6:37am UTC](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-event-missing/101109 "2017-09-20T06:37:17Z")

</div>

Hi, I'm trying the elk stack for analyze and visualize data. I tried to configure logstash for standard output and elastisearch. If I only output to screen, it shows 5 records, perfect. If I set the output to elasticsea…

---

## [Data is not coming in kibana Dashborad](https://discuss.elastic.co/t/data-is-not-coming-in-kibana-dashborad/100874)

<div class="topic-metadata">

**Author:** [@Manik\_Mahajan](https://discuss.elastic.co/u/Manik_Mahajan)\
**Replies:** 2\
**Last updated:** [September 20, 2017, 5:02am UTC](https://discuss.elastic.co/t/data-is-not-coming-in-kibana-dashborad/100874 "2017-09-20T05:02:40Z")

</div>

Elasticsearch version:2..4.6 kibana version:4.6.2 Searchguard version:2.4.6 Headers: Request URL:https://192.168.0.221:5602/elasticsearch/isp\_vodafone\_cdncache\*/\_field\_stats?level=indices Request Method:POST Status…

---

## [SQL query in elastic search using SQL4ES driver](https://discuss.elastic.co/t/sql-query-in-elastic-search-using-sql4es-driver/101098)

<div class="topic-metadata">

**Author:** [@SachArora](https://discuss.elastic.co/u/SachArora)\
**Replies:** 0\
**Last updated:** [September 20, 2017, 4:30am UTC](https://discuss.elastic.co/t/sql-query-in-elastic-search-using-sql4es-driver/101098 "2017-09-20T04:30:38Z")

</div>

I'm using Sql4ES driver for Connecting my application with the Elastic search. The connection made successfully but when I'm Query to Elasticsearch to getting data the ResultSet only contains fields of my table, not any …

---

## [Can't start service elasticsearch](https://discuss.elastic.co/t/cant-start-service-elasticsearch/100570)

<div class="topic-metadata">

**Author:** [@TK\_CyberOne](https://discuss.elastic.co/u/TK_CyberOne)\
**Replies:** 6\
**Last updated:** [September 20, 2017, 4:30am UTC](https://discuss.elastic.co/t/cant-start-service-elasticsearch/100570 "2017-09-20T04:30:04Z")

</div>

\[root@localhost ~\]# systemctl status elasticsearch ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; disabled; vendor preset: disabled) Active: failed (Result: exi…

---

## [How to search with full Json query using Java API](https://discuss.elastic.co/t/how-to-search-with-full-json-query-using-java-api/100628)

<div class="topic-metadata">

**Author:** [@AntonQUT](https://discuss.elastic.co/u/AntonQUT)\
**Replies:** 2\
**Last updated:** [September 20, 2017, 12:16am UTC](https://discuss.elastic.co/t/how-to-search-with-full-json-query-using-java-api/100628 "2017-09-20T00:16:56Z")

</div>

I need to be able to perform searches with the full JSON queries that you would normally use with CURL. How can I do this using the Java API. My current approach is not working: A sample query (which works directly…

---

## [How frequently is the circuit breaker tripped metric in /\_node/stats API refreshed?](https://discuss.elastic.co/t/how-frequently-is-the-circuit-breaker-tripped-metric-in--node-stats-api-refreshed/100956)

<div class="topic-metadata">

**Author:** [@srinivasc](https://discuss.elastic.co/u/srinivasc)\
**Replies:** 1\
**Last updated:** [September 19, 2017, 10:37pm UTC](https://discuss.elastic.co/t/how-frequently-is-the-circuit-breaker-tripped-metric-in--node-stats-api-refreshed/100956 "2017-09-19T22:37:21Z")

</div>

Even though field data breaker was triggered on my cluster, the metric still shows it as 0. curl localhost:9200/\_nodes/stats/breaker?pretty { "\_nodes" : { "total" : 1, "successful" : 1, "failed" : 0 }, "cluster\_n…

---

## [Getting Multiple exceptions while restarting ES](https://discuss.elastic.co/t/getting-multiple-exceptions-while-restarting-es/101007)

<div class="topic-metadata">

**Author:** [@Shubham\_Mahajan](https://discuss.elastic.co/u/Shubham_Mahajan)\
**Replies:** 4\
**Last updated:** [September 19, 2017, 9:10pm UTC](https://discuss.elastic.co/t/getting-multiple-exceptions-while-restarting-es/101007 "2017-09-19T21:10:18Z")

</div>

Caused by: org.elasticsearch.transport.RemoteTransportException: \[g5kxvHK\]\[10.140.29.50:9300\]\[internal:gateway/local/started\_shards\[n\]\] Caused by: org.elasticsearch.ElasticsearchException: failed to load started shards …

---

## [Two elastic search docker images not working](https://discuss.elastic.co/t/two-elastic-search-docker-images-not-working/101073)

<div class="topic-metadata">

**Author:** [@ravid](https://discuss.elastic.co/u/ravid)\
**Replies:** 0\
**Last updated:** [September 19, 2017, 8:34pm UTC](https://discuss.elastic.co/t/two-elastic-search-docker-images-not-working/101073 "2017-09-19T20:34:11Z")

</div>

I have an environment where I need to create two elk instances using docker. When I spin up both (stage-live) I was able to retreive logs for live but not for stage. I was able to open kibana but it is not able to recog…

---

## [Discrepancy with Data Indexing, Processed records and Time Stamp for ML Job](https://discuss.elastic.co/t/discrepancy-with-data-indexing-processed-records-and-time-stamp-for-ml-job/100907)

<div class="topic-metadata">

**Author:** [@Rohithnama](https://discuss.elastic.co/u/Rohithnama)\
**Replies:** 8\
**Last updated:** [September 19, 2017, 7:05pm UTC](https://discuss.elastic.co/t/discrepancy-with-data-indexing-processed-records-and-time-stamp-for-ml-job/100907 "2017-09-19T19:05:58Z")

</div>

I'm working towards creating an ML job through the Kibana UI as well as using the ML wrapper API that we developed internally. Using the wrapper, first I'm indexing all the test data and then starting the job as well as…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1943)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1945)
