# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1945

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1946

---

## [X-PACK Features](https://discuss.elastic.co/t/x-pack-features/101040)

<div class="topic-metadata">

**Author:** [@sagar](https://discuss.elastic.co/u/sagar)\
**Replies:** 6\
**Last updated:** [September 19, 2017, 6:38pm UTC](https://discuss.elastic.co/t/x-pack-features/101040 "2017-09-19T18:38:22Z")

</div>

I have a question about X-PACK. So to use all the X-PACK features do we need KIbana to be installed with elastic search or we can use without the whole ELK stack. Thank You

---

## [Elasticsearch unresponsive with too many users](https://discuss.elastic.co/t/elasticsearch-unresponsive-with-too-many-users/101039)

<div class="topic-metadata">

**Author:** [@dsb](https://discuss.elastic.co/u/dsb)\
**Replies:** 7\
**Last updated:** [September 19, 2017, 6:27pm UTC](https://discuss.elastic.co/t/elasticsearch-unresponsive-with-too-many-users/101039 "2017-09-19T18:27:33Z")

</div>

Elastichsearch randomly becomes unresponsive with too many requests ( aprox. 250 requests per second) and I don't have any idea why. Only the "indice" index is being used. Tried increasing the node heap size to no avai…

---

## [How to fetch data using sql query with elastic search through Sql4es jdbc\_driver?](https://discuss.elastic.co/t/how-to-fetch-data-using-sql-query-with-elastic-search-through-sql4es-jdbc-driver/100991)

<div class="topic-metadata">

**Author:** [@SachArora](https://discuss.elastic.co/u/SachArora)\
**Replies:** 0\
**Last updated:** [September 19, 2017, 8:52am UTC](https://discuss.elastic.co/t/how-to-fetch-data-using-sql-query-with-elastic-search-through-sql4es-jdbc-driver/100991 "2017-09-19T08:52:50Z")

</div>

We are trying to get data from the Elasticsearch using SQL queries but if I query for 'select \* from table' it only returns fields name without field\_data. here I'm using sql4es with its jdbc\_driver for connection. cass…

---

## [Updating existing fields with new data pulled from .csv](https://discuss.elastic.co/t/updating-existing-fields-with-new-data-pulled-from-csv/100800)

<div class="topic-metadata">

**Author:** [@kahelek](https://discuss.elastic.co/u/kahelek)\
**Replies:** 0\
**Last updated:** [September 17, 2017, 6:13pm UTC](https://discuss.elastic.co/t/updating-existing-fields-with-new-data-pulled-from-csv/100800 "2017-09-17T18:13:48Z")

</div>

Hi, I'm trying to update existing fields with new data, and I'm not clear upsert or update API is the way to go (and a little confused on how exactly to implement those, for my use case) Every week, I run the following…

---

## [Context aware shard distribution across nodes](https://discuss.elastic.co/t/context-aware-shard-distribution-across-nodes/100957)

<div class="topic-metadata">

**Author:** [@tanner-bruce](https://discuss.elastic.co/u/tanner-bruce)\
**Replies:** 2\
**Last updated:** [September 19, 2017, 4:54pm UTC](https://discuss.elastic.co/t/context-aware-shard-distribution-across-nodes/100957 "2017-09-19T16:54:16Z")

</div>

Hello, I have a number of indices where I would like elasticsearch to disperse the shards across all data nodes as much as possible. Is this possible?

---

## [Explicit Mapping Types in Elasticsearch are Ignored](https://discuss.elastic.co/t/explicit-mapping-types-in-elasticsearch-are-ignored/99898)

<div class="topic-metadata">

**Author:** [@guardhunt](https://discuss.elastic.co/u/guardhunt)\
**Replies:** 6\
**Last updated:** [September 19, 2017, 3:37pm UTC](https://discuss.elastic.co/t/explicit-mapping-types-in-elasticsearch-are-ignored/99898 "2017-09-19T15:37:07Z")

</div>

Hey folks, So here is my situation: Log Creation I am setting up the Elasicstack to process, search, and monitor error logs from a Laravel PHP Web application. My current build is using the Monolog library (built into L…

---

## [Multiple data paths, Force Merge API and Disk Size](https://discuss.elastic.co/t/multiple-data-paths-force-merge-api-and-disk-size/100795)

<div class="topic-metadata">

**Author:** [@soaguru](https://discuss.elastic.co/u/soaguru)\
**Replies:** 2\
**Last updated:** [September 19, 2017, 3:34pm UTC](https://discuss.elastic.co/t/multiple-data-paths-force-merge-api-and-disk-size/100795 "2017-09-19T15:34:09Z")

</div>

I have few questions relating to multiple data paths Assume I have multiple data paths like below path.data: /mnt/first,/mnt/second Does Force Merge API work ( max\_num\_segments = 1 ) in this scenario (where index da…

---

## [Curl localhost port 3128: Connection refused](https://discuss.elastic.co/t/curl-localhost-port-3128-connection-refused/101011)

<div class="topic-metadata">

**Author:** [@Maxclac](https://discuss.elastic.co/u/Maxclac)\
**Replies:** 6\
**Last updated:** [September 19, 2017, 1:51pm UTC](https://discuss.elastic.co/t/curl-localhost-port-3128-connection-refused/101011 "2017-09-19T13:51:04Z")

</div>

Hello everyone! I am currently using Elasticsearch 5.6.1 and I have the following problem: curl -X GET http://localhost:9200/ curl: (7) Failed to connect to localhost port 3128: Connection refused What is this port 31…

---

## [Opening custom links in same tab](https://discuss.elastic.co/t/opening-custom-links-in-same-tab/100848)

<div class="topic-metadata">

**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\
**Replies:** 4\
**Last updated:** [September 19, 2017, 12:06pm UTC](https://discuss.elastic.co/t/opening-custom-links-in-same-tab/100848 "2017-09-19T12:06:34Z")

</div>

Hello, I am using x-pack and have just begun with machine learning elements. In the metric viewer page, at the bottom, I see a table that contains the data pertaining to the anomalies detected. I was playing around with…

---

## [ES Performance Issues with shards being unassigned during initial creation](https://discuss.elastic.co/t/es-performance-issues-with-shards-being-unassigned-during-initial-creation/100550)

<div class="topic-metadata">

**Author:** [@rahulnadella](https://discuss.elastic.co/u/rahulnadella)\
**Replies:** 7\
**Last updated:** [September 19, 2017, 12:05pm UTC](https://discuss.elastic.co/t/es-performance-issues-with-shards-being-unassigned-during-initial-creation/100550 "2017-09-19T12:05:59Z")

</div>

We are currently running into issues with shards being unassigned during the creation process (Logstash with template). This previously was not occurring in the cluster which has been operational for over a 1 yr. We wer…

---

## [Mapping prevents documents from being accepted](https://discuss.elastic.co/t/mapping-prevents-documents-from-being-accepted/101016)

<div class="topic-metadata">

**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\
**Replies:** 0\
**Last updated:** [September 19, 2017, 11:53am UTC](https://discuss.elastic.co/t/mapping-prevents-documents-from-being-accepted/101016 "2017-09-19T11:53:54Z")

</div>

I have documents that appear to fail to be indexed / stored by Elasticsearch when I modify the mapping. The mapping as a gist I am running Elasticsearch 5.5 and if I delete the mapping then the documents are indexed (do…

---

## [Crash after a few days](https://discuss.elastic.co/t/crash-after-a-few-days/100224)

<div class="topic-metadata">

**Author:** [@Maekee](https://discuss.elastic.co/u/Maekee)\
**Replies:** 4\
**Last updated:** [September 19, 2017, 10:06am UTC](https://discuss.elastic.co/t/crash-after-a-few-days/100224 "2017-09-19T10:06:11Z")

</div>

Hello everybody, I have run the ELK-stack on a single server for testing purposes that last week. Everything has worked fine, but i have seen more and more WARN rows in the elasticsearchlogs. And today this happened: …

---

## [Unassigned Shards, No Curl Access](https://discuss.elastic.co/t/unassigned-shards-no-curl-access/100702)

<div class="topic-metadata">

**Author:** [@MultiplierMultiplier](https://discuss.elastic.co/u/MultiplierMultiplier)\
**Replies:** 2\
**Last updated:** [September 19, 2017, 9:49am UTC](https://discuss.elastic.co/t/unassigned-shards-no-curl-access/100702 "2017-09-19T09:49:56Z")

</div>

Hello, MY ES cluster state is red and there are 4 unassigned shards. I have read a lot online about solutions to this problem, however they all use Curl commands. Due to my ES instance being on a client site, I can't us…

---

## [X-pack security Native authentication is free?](https://discuss.elastic.co/t/x-pack-security-native-authentication-is-free/101000)

<div class="topic-metadata">

**Author:** [@Varun\_Patel](https://discuss.elastic.co/u/Varun_Patel)\
**Replies:** 2\
**Last updated:** [September 19, 2017, 9:36am UTC](https://discuss.elastic.co/t/x-pack-security-native-authentication-is-free/101000 "2017-09-19T09:36:20Z")

</div>

I have install x-pack and just want to use authentication security feature for kibana and elasticsearch. What feature of x-pack are free?

---

## [Delete documents completely from Elasticsearch](https://discuss.elastic.co/t/delete-documents-completely-from-elasticsearch/99416)

<div class="topic-metadata">

**Author:** [@elk\_user1](https://discuss.elastic.co/u/elk_user1)\
**Replies:** 2\
**Last updated:** [September 19, 2017, 8:58am UTC](https://discuss.elastic.co/t/delete-documents-completely-from-elasticsearch/99416 "2017-09-19T08:58:10Z")

</div>

Hi, I am trying to free up disk space by using delete by query API. However, no disk is getting freed up and found that deletion only marks these documents as deleted in lucene. Our disk is already 87% full and hence o…

---

## [Query for large numbers](https://discuss.elastic.co/t/query-for-large-numbers/100986)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 4\
**Last updated:** [September 19, 2017, 8:54am UTC](https://discuss.elastic.co/t/query-for-large-numbers/100986 "2017-09-19T08:54:23Z")

</div>

Hi I am trying to query for around 500K transactions per 5 minutes therefor I did: curl -XGET '192.168.1.116:9200/filebeat-\*/log/\_search?pretty&size=500000' -H 'Content-Type: application/json' -d' but I get null... whe…

---

## [Elastic 5.6 dynamic template mappings \_default\_](https://discuss.elastic.co/t/elastic-5-6-dynamic-template-mappings--default-/100988)

<div class="topic-metadata">

**Author:** [@gabriel\_tessier](https://discuss.elastic.co/u/gabriel_tessier)\
**Replies:** 2\
**Last updated:** [September 19, 2017, 8:43am UTC](https://discuss.elastic.co/t/elastic-5-6-dynamic-template-mappings--default-/100988 "2017-09-19T08:43:11Z")

</div>

Hi, I'm little confused with the mapping deprecation, I read here: https://www.elastic.co/guide/en/elasticsearch/reference/6.x/default-mapping.html I'm creating a new app using the last 5.6 elastic and I have dynamic …

---

## [Ansible-elasticsearch and network.bind\_host array](https://discuss.elastic.co/t/ansible-elasticsearch-and-network-bind-host-array/100987)

<div class="topic-metadata">

**Author:** [@dopch](https://discuss.elastic.co/u/dopch)\
**Replies:** 0\
**Last updated:** [September 19, 2017, 8:22am UTC](https://discuss.elastic.co/t/ansible-elasticsearch-and-network-bind-host-array/100987 "2017-09-19T08:22:25Z")

</div>

Good Morning, Simple question for ansible-elasticsearch configuration for the network.bind\_host array How to setup array of interface properly with ansible ? Her is part of my yml hosts: LIST user: USER1 roles: …

---

## [Not able to create a cluster with ES 5.6?](https://discuss.elastic.co/t/not-able-to-create-a-cluster-with-es-5-6/100917)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 8\
**Last updated:** [September 19, 2017, 8:18am UTC](https://discuss.elastic.co/t/not-able-to-create-a-cluster-with-es-5-6/100917 "2017-09-19T08:18:21Z")

</div>

Hi Experts , I got 2 nodes for testing purpose and I have new installation of ES 5.6 . I am using below elasticsearch.yml on both the machines . First node cluster.name: e-2 path.logs: /opt/es/2/es\_logs bootstrap.memo…

---

## [Can't push decimal numbers](https://discuss.elastic.co/t/cant-push-decimal-numbers/100960)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 6\
**Last updated:** [September 19, 2017, 8:12am UTC](https://discuss.elastic.co/t/cant-push-decimal-numbers/100960 "2017-09-19T08:12:41Z")

</div>

Hi, I am having a problem getting decimal numbers in the ES as shown below: \[image\] I have an "ASR" that is 0.9, but when I use the following query: GET filebeat-\*/log/\_search { "query": { "bool":{ "mu…

---

## [Ideal CPU spec configuration for a 2 node and a 4 node cluster](https://discuss.elastic.co/t/ideal-cpu-spec-configuration-for-a-2-node-and-a-4-node-cluster/100963)

<div class="topic-metadata">

**Author:** [@iam.Carrot](https://discuss.elastic.co/u/iam.Carrot)\
**Replies:** 3\
**Last updated:** [September 19, 2017, 8:11am UTC](https://discuss.elastic.co/t/ideal-cpu-spec-configuration-for-a-2-node-and-a-4-node-cluster/100963 "2017-09-19T08:11:35Z")

</div>

Hi, I am working on elasticsearch and I would want to scale up to an ideal setup for a 2 node or a 4 node cluster. Can someone please inform me about what should be the idea CPU configuration for: 2 Nodes: Both nodes w…

---

## [Reindex from Remote 1.7 to 5.5 Transport Exception](https://discuss.elastic.co/t/reindex-from-remote-1-7-to-5-5-transport-exception/100980)

<div class="topic-metadata">

**Author:** [@Faizan\_Sofi](https://discuss.elastic.co/u/Faizan_Sofi)\
**Replies:** 0\
**Last updated:** [September 19, 2017, 7:58am UTC](https://discuss.elastic.co/t/reindex-from-remote-1-7-to-5-5-transport-exception/100980 "2017-09-19T07:58:09Z")

</div>

I have to transfer one index from an ElasticSearch 1.7 cluster to ElasticSearch 5.x .I found the Reindex from Remote API , whitelisted that in the elasticsearch.yml file . curl -XPOST 'host:port/\_reindex?pretty' -H 'Con…

---

## [Caused by: java.lang.ClassNotFoundException: org.elasticsearch.plugins.spi.NamedXContentProvider](https://discuss.elastic.co/t/caused-by-java-lang-classnotfoundexception-org-elasticsearch-plugins-spi-namedxcontentprovider/100977)

<div class="topic-metadata">

**Author:** [@liuhongyang108](https://discuss.elastic.co/u/liuhongyang108)\
**Replies:** 0\
**Last updated:** [September 19, 2017, 7:35am UTC](https://discuss.elastic.co/t/caused-by-java-lang-classnotfoundexception-org-elasticsearch-plugins-spi-namedxcontentprovider/100977 "2017-09-19T07:35:00Z")

</div>

Caused by: java.lang.ClassNotFoundException: org.elasticsearch.plugins.spi.NamedXContentProvider at java.net.URLClassLoader.findClass(URLClassLoader.java:381) at java.lang.ClassLoader.loadClass(ClassLoader.java:424) a…

---

## [Limitation of client node (Tribe node)](https://discuss.elastic.co/t/limitation-of-client-node-tribe-node/100790)

<div class="topic-metadata">

**Author:** [@Amin1](https://discuss.elastic.co/u/Amin1)\
**Replies:** 14\
**Last updated:** [September 19, 2017, 6:13am UTC](https://discuss.elastic.co/t/limitation-of-client-node-tribe-node/100790 "2017-09-19T06:13:16Z")

</div>

Hello All, This is my configuration : curl -XGET 172.24.69.19:9200/\_cat/nodes : 172.24.69.14 16 36 0 0.00 0.01 0.05 - - es-client-02 172.24.69.18 95 97 20 1.64 1.28 1.25 d - es-data-03 172.24.69.20 15 36 0 0.05 0…

---

## [Rally metrics store](https://discuss.elastic.co/t/rally-metrics-store/100741)

<div class="topic-metadata">

**Author:** [@sharathr83](https://discuss.elastic.co/u/sharathr83)\
**Replies:** 3\
**Last updated:** [September 19, 2017, 6:06am UTC](https://discuss.elastic.co/t/rally-metrics-store/100741 "2017-09-19T06:06:18Z")

</div>

How can I configure the metrics store for my rally results ? The documentation says that we can use a separate ES cluster for this, where and how can I configure this ? Thanks !

---

## [Transfering indices marked cold to the cold nodes cause GC overhead and other issues](https://discuss.elastic.co/t/transfering-indices-marked-cold-to-the-cold-nodes-cause-gc-overhead-and-other-issues/99529)

<div class="topic-metadata">

**Author:** [@John\_ax](https://discuss.elastic.co/u/John_ax)\
**Replies:** 11\
**Last updated:** [September 19, 2017, 6:01am UTC](https://discuss.elastic.co/t/transfering-indices-marked-cold-to-the-cold-nodes-cause-gc-overhead-and-other-issues/99529 "2017-09-19T06:01:00Z")

</div>

Hi,I am using ES 5.5 with the hot-cold architecture, by marking indices cold, he transfer indices to the cold nodes from hot nodes automatically. the cold nodes using 30GB jvm memory setting, still having the the follow…

---

## [Async execution of reindex using transport client](https://discuss.elastic.co/t/async-execution-of-reindex-using-transport-client/100959)

<div class="topic-metadata">

**Author:** [@an.secure](https://discuss.elastic.co/u/an.secure)\
**Replies:** 0\
**Last updated:** [September 19, 2017, 5:48am UTC](https://discuss.elastic.co/t/async-execution-of-reindex-using-transport-client/100959 "2017-09-19T05:48:04Z")

</div>

When we call the rest endpoint for reindexing with wait\_for\_completion=false, we get the task id to track the progress on the reindexing task later on. How can we achieve the same using Transport client from the Java co…

---

## [Reindex From Remote : TransportException](https://discuss.elastic.co/t/reindex-from-remote-transportexception/100833)

<div class="topic-metadata">

**Author:** [@Faizan\_Sofi](https://discuss.elastic.co/u/Faizan_Sofi)\
**Replies:** 0\
**Last updated:** [September 18, 2017, 7:52am UTC](https://discuss.elastic.co/t/reindex-from-remote-transportexception/100833 "2017-09-18T07:52:01Z")

</div>

I have to transfer one index from an ElasticSearch 1.7 cluster to ElasticSearch 5.x .I found the Reindex from Remote API , whitelisted that in the elasticsearch.yml file . curl -XPOST 'localhost:9200/\_reindex?pretty' -H…

---

## [Index not created correct](https://discuss.elastic.co/t/index-not-created-correct/100053)

<div class="topic-metadata">

**Author:** [@madalin](https://discuss.elastic.co/u/madalin)\
**Replies:** 5\
**Last updated:** [September 19, 2017, 4:14am UTC](https://discuss.elastic.co/t/index-not-created-correct/100053 "2017-09-19T04:14:57Z")

</div>

Hi guys I'm new in ELK and I need your help. I want to see my log4j2 logs into Kibana. For that i created and index in ES trying to map the fields from my log : curl -XPUT localhost:9200/log\_index -d ' { "settings"…

---

## [Using ignore\_malformed with Bulk API](https://discuss.elastic.co/t/using-ignore-malformed-with-bulk-api/100949)

<div class="topic-metadata">

**Author:** [@austinried](https://discuss.elastic.co/u/austinried)\
**Replies:** 0\
**Last updated:** [September 19, 2017, 1:02am UTC](https://discuss.elastic.co/t/using-ignore-malformed-with-bulk-api/100949 "2017-09-19T01:02:02Z")

</div>

I'm trying to use the bulk API to push log files from AWS CloudWatch to Elasticsearch, and I'm running into issues because the Lambda function we're using (which is the one AWS generates for pushing logs from CW to ES) i…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1944)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1946)
