# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1946

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1947

---

## [Curl: (6) Couldn't resolve host ''](https://discuss.elastic.co/t/curl-6-couldnt-resolve-host/100745)

<div class="topic-metadata">

**Author:** [@saliormoon](https://discuss.elastic.co/u/saliormoon)\
**Replies:** 8\
**Last updated:** [September 19, 2017, 12:58am UTC](https://discuss.elastic.co/t/curl-6-couldnt-resolve-host/100745 "2017-09-19T00:58:15Z")

</div>

Elasticsearch version:5.5.2 OS version: Suse Linux When I create a index and its mapping with the command line as follow : curl -XPUT http://10.62.179.32:9200/shakespeare -d ' { "mappings" : { "default" : { "proper…

---

## [Cannot divide multiple context values in Elasticsearch watcher](https://discuss.elastic.co/t/cannot-divide-multiple-context-values-in-elasticsearch-watcher/100652)

<div class="topic-metadata">

**Author:** [@jpchenot](https://discuss.elastic.co/u/jpchenot)\
**Replies:** 2\
**Last updated:** [September 18, 2017, 11:40pm UTC](https://discuss.elastic.co/t/cannot-divide-multiple-context-values-in-elasticsearch-watcher/100652 "2017-09-18T23:40:33Z")

</div>

I have created a watch in Elasticsearch to alert me if the ratio of http errors is greater than 15% of total requests over 60 minutes. I am using chain inputs to generate the dividend and divisor values for my ratio calc…

---

## [Elasticsearch: how to remove one path.data](https://discuss.elastic.co/t/elasticsearch-how-to-remove-one-path-data/98111)

<div class="topic-metadata">

**Author:** [@danielmotaleite](https://discuss.elastic.co/u/danielmotaleite)\
**Replies:** 3\
**Last updated:** [September 18, 2017, 10:29pm UTC](https://discuss.elastic.co/t/elasticsearch-how-to-remove-one-path-data/98111 "2017-09-18T22:29:02Z")

</div>

I have a elasticsearch setup that started with normal HD, but later i added 2 more SSD in the path.data Now i’m happy with the SSD and want to remove the HD. How to do it? My logic says that “transient.cluster.routing…

---

## [Elasticsearch for Apache Hadoop 5.6.1 released](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-5-6-1-released/100938)

<div class="topic-metadata">

**Author:** [@james.baiera](https://discuss.elastic.co/u/james.baiera)\
**Replies:** 0\
**Last updated:** [September 18, 2017, 9:56pm UTC](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-5-6-1-released/100938 "2017-09-18T21:56:45Z")

</div>

I am proud to announce that ES-Hadoop 5.6.1 has been released! You can read more about these releases here.

---

## [Filebeat works for sometime then stops working - fails to parse date](https://discuss.elastic.co/t/filebeat-works-for-sometime-then-stops-working-fails-to-parse-date/100931)

<div class="topic-metadata">

**Author:** [@mmugabo](https://discuss.elastic.co/u/mmugabo)\
**Replies:** 0\
**Last updated:** [September 18, 2017, 8:46pm UTC](https://discuss.elastic.co/t/filebeat-works-for-sometime-then-stops-working-fails-to-parse-date/100931 "2017-09-18T20:46:17Z")

</div>

Hello there at Elastic S. and Filebeat, any help here is appreciated. I send app logs to elasticsearch using filebeat, this can work fine for weeks, then fails, saying "unable to parse date". My env is like this: Fileb…

---

## [ElasticSearch not working on Ubuntu 16.04](https://discuss.elastic.co/t/elasticsearch-not-working-on-ubuntu-16-04/100873)

<div class="topic-metadata">

**Author:** [@DakshMiglani](https://discuss.elastic.co/u/DakshMiglani)\
**Replies:** 1\
**Last updated:** [September 18, 2017, 7:54pm UTC](https://discuss.elastic.co/t/elasticsearch-not-working-on-ubuntu-16-04/100873 "2017-09-18T19:54:22Z")

</div>

Hello, I Installed ElasticSearch using DigitalOcean's guide on both my vultr and digitalocean droplets which both of them are giving errors root@temp1hr:~# sudo service elasticsearch status ● elasticsearch.service - El…

---

## [How to inject node object in elasticsearch 5.1.1 native script plugin](https://discuss.elastic.co/t/how-to-inject-node-object-in-elasticsearch-5-1-1-native-script-plugin/99393)

<div class="topic-metadata">

**Author:** [@Chandan\_Kar](https://discuss.elastic.co/u/Chandan_Kar)\
**Replies:** 3\
**Last updated:** [September 18, 2017, 7:43pm UTC](https://discuss.elastic.co/t/how-to-inject-node-object-in-elasticsearch-5-1-1-native-script-plugin/99393 "2017-09-18T19:43:08Z")

</div>

i am trying to create a elasticsearch native script plugin. The plugin should be able to execute some search query, something like “GetResponse response = client.prepareGet(lookupIndex, lookupType, fieldValue).setFields(…

---

## [Date format parsing exception](https://discuss.elastic.co/t/date-format-parsing-exception/100892)

<div class="topic-metadata">

**Author:** [@swaplogstash](https://discuss.elastic.co/u/swaplogstash)\
**Replies:** 5\
**Last updated:** [September 18, 2017, 7:41pm UTC](https://discuss.elastic.co/t/date-format-parsing-exception/100892 "2017-09-18T19:41:09Z")

</div>

I have create\_date column as timestamp in database and need create\_date value in elastic as "MM/DD/YYYY" or "yyyy-MM-dd" . I am getting below error exception while loading data from oracle database using lo…

---

## [Vastly different query times between nodes](https://discuss.elastic.co/t/vastly-different-query-times-between-nodes/100919)

<div class="topic-metadata">

**Author:** [@Jeff\_I](https://discuss.elastic.co/u/Jeff_I)\
**Replies:** 0\
**Last updated:** [September 18, 2017, 7:09pm UTC](https://discuss.elastic.co/t/vastly-different-query-times-between-nodes/100919 "2017-09-18T19:09:01Z")

</div>

I am seeing orders of magnitude difference between the same query run against each individual node. Below are the average query times (where node-5 and node-2 are far more performant) and the allocation output. The datas…

---

## [Add an index within a snapshot](https://discuss.elastic.co/t/add-an-index-within-a-snapshot/100885)

<div class="topic-metadata">

**Author:** [@joao](https://discuss.elastic.co/u/joao)\
**Replies:** 3\
**Last updated:** [September 18, 2017, 5:52pm UTC](https://discuss.elastic.co/t/add-an-index-within-a-snapshot/100885 "2017-09-18T17:52:25Z")

</div>

Hi, good morning. Can I add another index within a snapshot that already exists? Thank you.

---

## [Geo\_point & index\_templates not working](https://discuss.elastic.co/t/geo-point-index-templates-not-working/100742)

<div class="topic-metadata">

**Author:** [@cptnclvn](https://discuss.elastic.co/u/cptnclvn)\
**Replies:** 4\
**Last updated:** [September 18, 2017, 5:19pm UTC](https://discuss.elastic.co/t/geo-point-index-templates-not-working/100742 "2017-09-18T17:19:39Z")

</div>

I have been trying to get the GeoIP working for visualization of my firewall logs and I can't get the geo\_point type to stick. I have read through this article and took some information from it. I have an index template …

---

## [Problem Re-indexing AFTER ES Upgrade 2.x to 5.x](https://discuss.elastic.co/t/problem-re-indexing-after-es-upgrade-2-x-to-5-x/100902)

<div class="topic-metadata">

**Author:** [@N00b](https://discuss.elastic.co/u/N00b)\
**Replies:** 0\
**Last updated:** [September 18, 2017, 4:45pm UTC](https://discuss.elastic.co/t/problem-re-indexing-after-es-upgrade-2-x-to-5-x/100902 "2017-09-18T16:45:28Z")

</div>

Hi There ES Community, I upgraded my ES Cluster from 2.x to 5.x. However, in the midst of a busy morning I forgot to run the migration tools. The upgrade went smoothly, re-configured my ES and launched it only to find …

---

## [Advice on force merge](https://discuss.elastic.co/t/advice-on-force-merge/100781)

<div class="topic-metadata">

**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\
**Replies:** 3\
**Last updated:** [September 18, 2017, 4:40pm UTC](https://discuss.elastic.co/t/advice-on-force-merge/100781 "2017-09-18T16:40:01Z")

</div>

We have been seeing degraded search performance on our 2.3.2 cluster. In looking at our main index, some of the shards are more than 50% deleted documents, and there are 1,610 segments. This index has 360 million docum…

---

## [Slow bulk api requests (ES 6.0 beta2)](https://discuss.elastic.co/t/slow-bulk-api-requests-es-6-0-beta2/100859)

<div class="topic-metadata">

**Author:** [@Jayme](https://discuss.elastic.co/u/Jayme)\
**Replies:** 0\
**Last updated:** [September 18, 2017, 10:45am UTC](https://discuss.elastic.co/t/slow-bulk-api-requests-es-6-0-beta2/100859 "2017-09-18T10:45:43Z")

</div>

Hi, I'm using 6.0 for testing.. but seeing that bulk update requests are very slow. : A bulk update request with 300 items takes around 10 seconds average.. :frowning: on a 800M docs index. Having a 8 node cluster wi…

---

## [How to write a common Watcher for all indices?](https://discuss.elastic.co/t/how-to-write-a-common-watcher-for-all-indices/99244)

<div class="topic-metadata">

**Author:** [@mjm](https://discuss.elastic.co/u/mjm)\
**Replies:** 2\
**Last updated:** [September 18, 2017, 3:17pm UTC](https://discuss.elastic.co/t/how-to-write-a-common-watcher-for-all-indices/99244 "2017-09-18T15:17:14Z")

</div>

Hello ! I want to create a common Watcher for all indices. In this case i am not sure how to mention all the indices. i tried indices: \[ \* \], this is not working for me. Thanks

---

## [Disable indexing on all fields](https://discuss.elastic.co/t/disable-indexing-on-all-fields/100893)

<div class="topic-metadata">

**Author:** [@bharath\_phatak](https://discuss.elastic.co/u/bharath_phatak)\
**Replies:** 0\
**Last updated:** [September 18, 2017, 2:58pm UTC](https://discuss.elastic.co/t/disable-indexing-on-all-fields/100893 "2017-09-18T14:58:01Z")

</div>

Hi All, The documents contains around 30+ fields.I want to indexing to be done only on 4 fields and disable indexing on all fields. Please can some one point me what would the template ? Thanks, Bharath

---

## [Elastic Search Plugin Red - Kibana Timeout error request](https://discuss.elastic.co/t/elastic-search-plugin-red-kibana-timeout-error-request/100579)

<div class="topic-metadata">

**Author:** [@pavithrakc](https://discuss.elastic.co/u/pavithrakc)\
**Replies:** 3\
**Last updated:** [September 18, 2017, 2:36pm UTC](https://discuss.elastic.co/t/elastic-search-plugin-red-kibana-timeout-error-request/100579 "2017-09-18T14:36:09Z")

</div>

Hello All, I started using the community catalog entry of elasticsearch under Rancher . It is a cluster of 2 data nodes, 1 master node, 1 client node. I started seeing a disconnect of Elasticsearch changing to status …

---

## [\[Highlighting\] Performance & Simplicity](https://discuss.elastic.co/t/highlighting-performance-simplicity/99751)

<div class="topic-metadata">

**Author:** [@mmaqsood](https://discuss.elastic.co/u/mmaqsood)\
**Replies:** 2\
**Last updated:** [September 18, 2017, 1:37pm UTC](https://discuss.elastic.co/t/highlighting-performance-simplicity/99751 "2017-09-18T13:37:06Z")

</div>

I have a scenario where I am forced to use a strict query filter, to filter my results, without a query block, and therefore cannot use highlighting without a highlight\_query as there is no query block in my main query. …

---

## [Elasticsearch Curator and Amazon S3 filename](https://discuss.elastic.co/t/elasticsearch-curator-and-amazon-s3-filename/100697)

<div class="topic-metadata">

**Author:** [@leoponton](https://discuss.elastic.co/u/leoponton)\
**Replies:** 2\
**Last updated:** [September 18, 2017, 12:36pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-and-amazon-s3-filename/100697 "2017-09-18T12:36:51Z")

</div>

I have seen the following closed topic: https://discuss.elastic.co/t/curator-snapshot-and-s3-file-name/87185 My use case is similar. Each day I snapshot the previous five days and push them to S3. The plan was to overw…

---

## [Elasticsearch scroll id can't decode](https://discuss.elastic.co/t/elasticsearch-scroll-id-cant-decode/100857)

<div class="topic-metadata">

**Author:** [@shijiebei2009](https://discuss.elastic.co/u/shijiebei2009)\
**Replies:** 0\
**Last updated:** [September 18, 2017, 10:44am UTC](https://discuss.elastic.co/t/elasticsearch-scroll-id-cant-decode/100857 "2017-09-18T10:44:44Z")

</div>

in Kibana first GET action\_log\_2017/action\_log\_2017/\_search?scroll=5m { "query": { "range": { "IDX": { "gte": 100, "lte": 201709160000802655 } } }, "sort": \[ { "IDX": { "order": "desc" } } \], "size": 1…

---

## [Missing Client Nodes in v5.6](https://discuss.elastic.co/t/missing-client-nodes-in-v5-6/100464)

<div class="topic-metadata">

**Author:** [@iam.Carrot](https://discuss.elastic.co/u/iam.Carrot)\
**Replies:** 39\
**Last updated:** [September 18, 2017, 10:46am UTC](https://discuss.elastic.co/t/missing-client-nodes-in-v5-6/100464 "2017-09-18T10:46:17Z")

</div>

Hi I upgraded to elastic version 5.6, Now in the yml file when I put node.client: true it says there is nothing called as client. And when I searched online, I don't find anything with client node in the v5.6 instead i g…

---

## [Will Java built with Elasticsearch 5.2.2 libraries work in Elasticsearch 5.5.0/XPACK](https://discuss.elastic.co/t/will-java-built-with-elasticsearch-5-2-2-libraries-work-in-elasticsearch-5-5-0-xpack/100543)

<div class="topic-metadata">

**Author:** [@adldev](https://discuss.elastic.co/u/adldev)\
**Replies:** 1\
**Last updated:** [September 18, 2017, 10:41am UTC](https://discuss.elastic.co/t/will-java-built-with-elasticsearch-5-2-2-libraries-work-in-elasticsearch-5-5-0-xpack/100543 "2017-09-18T10:41:08Z")

</div>

I have built some NiFI custom processors using java libraries for Elasticsearch 5.2.2 and X-Pack with a maven build, which worked fine. We just recently updated to Elasticsearch 5.5.0 with X-Pack 5.5.0 but the Elasticse…

---

## [Elasticsearch 5.6.0 not starting (no logs in logfiles made)](https://discuss.elastic.co/t/elasticsearch-5-6-0-not-starting-no-logs-in-logfiles-made/100836)

<div class="topic-metadata">

**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\
**Replies:** 3\
**Last updated:** [September 18, 2017, 9:30am UTC](https://discuss.elastic.co/t/elasticsearch-5-6-0-not-starting-no-logs-in-logfiles-made/100836 "2017-09-18T09:30:58Z")

</div>

I am having trouble starting elasticsearch. I upgraded it to 5.6.0 2 days ago. Today, I stopped it, and installed searchguard for 5.6.0. Now, when I started elasticsearch, it is not getting started. No logs are being…

---

## [Elasticsearch red cluster & index](https://discuss.elastic.co/t/elasticsearch-red-cluster-index/100769)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 2\
**Last updated:** [September 18, 2017, 9:13am UTC](https://discuss.elastic.co/t/elasticsearch-red-cluster-index/100769 "2017-09-18T09:13:49Z")

</div>

I'm using elasticsearch 5.5.1 in 4 node cluster and I just noticed following: # curl --silent --request GET elk:9200/\_cat/health 1505576198 15:36:38 X red 4 4 991 831 0 0 691 0 - 58.9% # & # curl --silent --request G…

---

## [Dynamic Mapping getting messed up](https://discuss.elastic.co/t/dynamic-mapping-getting-messed-up/100492)

<div class="topic-metadata">

**Author:** [@moneisha](https://discuss.elastic.co/u/moneisha)\
**Replies:** 2\
**Last updated:** [September 18, 2017, 8:33am UTC](https://discuss.elastic.co/t/dynamic-mapping-getting-messed-up/100492 "2017-09-18T08:33:11Z")

</div>

I am using JDBC input plugin to connect to MySQL databases and get the data to elastic search . I have two configurations to connect to two different databases from the same server .Both config files have different inde…

---

## [Is it safe to clear pagecache](https://discuss.elastic.co/t/is-it-safe-to-clear-pagecache/98948)

<div class="topic-metadata">

**Author:** [@596375269](https://discuss.elastic.co/u/596375269)\
**Replies:** 3\
**Last updated:** [September 18, 2017, 7:59am UTC](https://discuss.elastic.co/t/is-it-safe-to-clear-pagecache/98948 "2017-09-18T07:59:41Z")

</div>

Hi., to All. Good Evening. Generally elasticsearch occupies a lot of pagecache, does it safe to use the command ’echo 3 \> /proc/sys/vm/drop\_caches’ to clear pagecache? even when data is indexing? Thanks to you all. …

---

## [How to read excel file and push data into elasticsearch](https://discuss.elastic.co/t/how-to-read-excel-file-and-push-data-into-elasticsearch/100644)

<div class="topic-metadata">

**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\
**Replies:** 0\
**Last updated:** [September 15, 2017, 6:32am UTC](https://discuss.elastic.co/t/how-to-read-excel-file-and-push-data-into-elasticsearch/100644 "2017-09-15T06:32:14Z")

</div>

I have implemented below solution but it is taking long time to push all data to elasticsearch. I have created hashmap and I am reading file row wise. I want column name as key and respective row as value in hashmap. If…

---

## [How to make terms aggregation case insensitive?](https://discuss.elastic.co/t/how-to-make-terms-aggregation-case-insensitive/100746)

<div class="topic-metadata">

**Author:** [@patrickian](https://discuss.elastic.co/u/patrickian)\
**Replies:** 1\
**Last updated:** [September 18, 2017, 5:05am UTC](https://discuss.elastic.co/t/how-to-make-terms-aggregation-case-insensitive/100746 "2017-09-18T05:05:14Z")

</div>

I have a field called user\_name. Examples of entries are "user", "User" and "someuser". When I aggrrgate by terms, the result treats "user" and "User" as 2 different results. Rightly so, for obvious reasons. However, is …

---

## [PUT request in 5.5 much slower than 1.7.0](https://discuss.elastic.co/t/put-request-in-5-5-much-slower-than-1-7-0/100813)

<div class="topic-metadata">

**Author:** [@yaoqijun](https://discuss.elastic.co/u/yaoqijun)\
**Replies:** 0\
**Last updated:** [September 18, 2017, 4:18am UTC](https://discuss.elastic.co/t/put-request-in-5-5-much-slower-than-1-7-0/100813 "2017-09-18T04:18:04Z")

</div>

i test 5.5 version bulk is much slower than 1.7.0.

---

## [PreBuiltXPackTransportClient 5.4.3 does not throw any exceptions on wrong username and password](https://discuss.elastic.co/t/prebuiltxpacktransportclient-5-4-3-does-not-throw-any-exceptions-on-wrong-username-and-password/99517)

<div class="topic-metadata">

**Author:** [@ThejanRupasinghe](https://discuss.elastic.co/u/ThejanRupasinghe)\
**Replies:** 5\
**Last updated:** [September 18, 2017, 4:12am UTC](https://discuss.elastic.co/t/prebuiltxpacktransportclient-5-4-3-does-not-throw-any-exceptions-on-wrong-username-and-password/99517 "2017-09-18T04:12:04Z")

</div>

I'm using PreBuiltXPackTransportClient v5.4.3 to access a elasticsearch cluster protected with xpack. I'm adding my credentials as , Settings xpack\_settings = Settings.builder() .put("cluster.name", "my-…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1945)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1947)
