# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1955 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1956 --- ## [Systemd can not start elasticsearch](https://discuss.elastic.co/t/systemd-can-not-start-elasticsearch/99765)
**Author:** [@ajstark123](https://discuss.elastic.co/u/ajstark123)\ **Replies:** 6\ **Last updated:** [September 8, 2017, 7:05pm UTC](https://discuss.elastic.co/t/systemd-can-not-start-elasticsearch/99765 "2017-09-08T19:05:24Z")
We can start eleacticsearch 5.5.2 out side of systemd and it runs with out issue. But when we start eleacticsearch 5.5.2 with systemd it fails with the following error. \[1\] bootstrap checks failed \[1\]: max file descrip… --- ## [Trying to understand the data in Array or with Nested Objects](https://discuss.elastic.co/t/trying-to-understand-the-data-in-array-or-with-nested-objects/99883)
**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\ **Replies:** 0\ **Last updated:** [September 8, 2017, 6:12pm UTC](https://discuss.elastic.co/t/trying-to-understand-the-data-in-array-or-with-nested-objects/99883 "2017-09-08T18:12:44Z")
For searches I search in, for example, the fields field2 and field3, but I need to score with the field3 of the first group. For example, sequence 1 has more value than sequence 2, and is more than 3 if it exists. There … --- ## [70MB csv file becomes 32GB index](https://discuss.elastic.co/t/70mb-csv-file-becomes-32gb-index/99859)
**Author:** [@nielsbuyens](https://discuss.elastic.co/u/nielsbuyens)\ **Replies:** 1\ **Last updated:** [September 8, 2017, 4:55pm UTC](https://discuss.elastic.co/t/70mb-csv-file-becomes-32gb-index/99859 "2017-09-08T16:55:42Z")
So I have a csv file that contains about 720.000 lines like these: 75.00,-179.75,20170101,-16.69,-9.84,-24.39,5.98,0.38,0.38,0.24,0.0,0.0,5.74,-16.69,12.83,1.34 Which I'm loading into an elasticsearch index with the fo… --- ## [Elasticsearch 5.4.2 process periodically dying with high CPU load and kernel message pgtable-generic.c:33: bad pmd](https://discuss.elastic.co/t/elasticsearch-5-4-2-process-periodically-dying-with-high-cpu-load-and-kernel-message-pgtable-generic-c-33-bad-pmd/92239)
**Author:** [@Ruslan\_Lutsenko](https://discuss.elastic.co/u/Ruslan_Lutsenko)\ **Replies:** 1\ **Last updated:** [September 8, 2017, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-5-4-2-process-periodically-dying-with-high-cpu-load-and-kernel-message-pgtable-generic-c-33-bad-pmd/92239 "2017-09-08T16:21:53Z")
Maybe someone faced similar problem. Data nodes (cluster 4xdata nodes) periodically dying with dmesg message: \[Fri Jul 7 02:19:34 2017\] /home/kernel/COD/linux/mm/pgtable-generic.c:33: bad pmd ffff95e5b0039500(0000001b… --- ## [Watcher, action transform, Help getting "value" from this response](https://discuss.elastic.co/t/watcher-action-transform-help-getting-value-from-this-response/99163)
**Author:** [@Ross\_C](https://discuss.elastic.co/u/Ross_C)\ **Replies:** 2\ **Last updated:** [September 8, 2017, 3:32pm UTC](https://discuss.elastic.co/t/watcher-action-transform-help-getting-value-from-this-response/99163 "2017-09-08T15:32:35Z")
I want to alert on error\_percent \> 9, but I don’t know how to reference value under the field in the response. transactioncount, errorcount, error\_percent Can someone help? Below is the response from my aggregation … --- ## [How to find the Anomalies created documents list](https://discuss.elastic.co/t/how-to-find-the-anomalies-created-documents-list/98976)
**Author:** [@sujithlal](https://discuss.elastic.co/u/sujithlal)\ **Replies:** 1\ **Last updated:** [September 8, 2017, 3:09pm UTC](https://discuss.elastic.co/t/how-to-find-the-anomalies-created-documents-list/98976 "2017-09-08T15:09:16Z")
I am using elastic search x-pack Anomalies detection ,Once an anomaly is detected, X-Pack machine learning features will give only time,severity,detectors etc. can we get Anomalies created documents list. --- ## [Anomaly Explorer uses different timezone for Anomaly timeline and Anomalies](https://discuss.elastic.co/t/anomaly-explorer-uses-different-timezone-for-anomaly-timeline-and-anomalies/99577)
**Author:** [@Vitaly\_il](https://discuss.elastic.co/u/Vitaly_il)\ **Replies:** 6\ **Last updated:** [September 8, 2017, 1:24pm UTC](https://discuss.elastic.co/t/anomaly-explorer-uses-different-timezone-for-anomaly-timeline-and-anomalies/99577 "2017-09-08T13:24:09Z")
ML "Anomaly Explorer" screen presents two visualizations: " Anomaly timeline" map and "Anomalies" graph. They use different timezones - " Anomaly timeline" uses UTC, while "Anomalies" - my local timezone. IMHO, suc… --- ## [Getting a "No data nodes with HTTP-enabled available" error when writing from Spark to elasticsearch on Google Dataproc](https://discuss.elastic.co/t/getting-a-no-data-nodes-with-http-enabled-available-error-when-writing-from-spark-to-elasticsearch-on-google-dataproc/96631)
**Author:** [@bw2](https://discuss.elastic.co/u/bw2)\ **Replies:** 6\ **Last updated:** [September 8, 2017, 12:30pm UTC](https://discuss.elastic.co/t/getting-a-no-data-nodes-with-http-enabled-available-error-when-writing-from-spark-to-elasticsearch-on-google-dataproc/96631 "2017-09-08T12:30:13Z")
I’m trying to export data from Spark =\> elasticsearch cluster running on Google Container Engine (GKE). I’ve deployed an ES cluster using configs from https://github.com/pires/kubernetes-elasticsearch-cluster/tree/mast… --- ## [Elastic 5.5.2 NoNodeAvailableException None of the configured nodes are available:](https://discuss.elastic.co/t/elastic-5-5-2-nonodeavailableexception-none-of-the-configured-nodes-are-available/99820)
**Author:** [@NehaD](https://discuss.elastic.co/u/NehaD)\ **Replies:** 2\ **Last updated:** [September 8, 2017, 12:02pm UTC](https://discuss.elastic.co/t/elastic-5-5-2-nonodeavailableexception-none-of-the-configured-nodes-are-available/99820 "2017-09-08T12:02:59Z")
Application setup is as follows: -\> ElasticSearch Server = 5.5.2 -\> Dependency Jars = elasticsearch-5.2.0.jar, kucene\*.jars 6.4.0, transport-5.2.0 -\> Both the elasticsearch server and the java client are running on sa… --- ## [How to use "SQL(ROW\_NUMBER())" as same as for ElasticSearch Query using C#?](https://discuss.elastic.co/t/how-to-use-sql-row-number-as-same-as-for-elasticsearch-query-using-c/97346)
**Author:** [@Ashish\_Christian](https://discuss.elastic.co/u/Ashish_Christian)\ **Replies:** 3\ **Last updated:** [September 8, 2017, 12:02pm UTC](https://discuss.elastic.co/t/how-to-use-sql-row-number-as-same-as-for-elasticsearch-query-using-c/97346 "2017-09-08T12:02:06Z")
We have implemented ElasticSearch in our product. Our experience with the ElasticSearch is really great and interesting. We are likely to use more and more in our website, but facing some issues in Development. We have … --- ## [elastic-5.4.1Transportclient does not work sniff](https://discuss.elastic.co/t/elastic-5-4-1transportclient-does-not-work-sniff/99837)
**Author:** [@Tilakkumar](https://discuss.elastic.co/u/Tilakkumar)\ **Replies:** 0\ **Last updated:** [September 8, 2017, 11:27am UTC](https://discuss.elastic.co/t/elastic-5-4-1transportclient-does-not-work-sniff/99837 "2017-09-08T11:27:29Z")
Hi, The issue Elastic 5.4.0 TransportClient does not work is not fixed 5.4.1 --- ## [Elasticsearch php help](https://discuss.elastic.co/t/elasticsearch-php-help/99803)
**Author:** [@Akhil\_Prashar](https://discuss.elastic.co/u/Akhil_Prashar)\ **Replies:** 5\ **Last updated:** [September 8, 2017, 10:30am UTC](https://discuss.elastic.co/t/elasticsearch-php-help/99803 "2017-09-08T10:30:42Z")
I am getting all the results of elasticsearch through my php interface. Now I need to show 20 results per page, and idea is total number of hits divided by 20 equals number of pages. And as I need 20 results per page can… --- ## [Are objects searchable after updates?](https://discuss.elastic.co/t/are-objects-searchable-after-updates/98562)
**Author:** [@artelk](https://discuss.elastic.co/u/artelk)\ **Replies:** 18\ **Last updated:** [September 8, 2017, 10:07am UTC](https://discuss.elastic.co/t/are-objects-searchable-after-updates/98562 "2017-09-08T10:07:47Z")
Imagine you have an object with a property X. The initial value of the property is 13. The object is searchable by a predicate “X \> 10”. Someone modifies the property value to 42. Do we have guarantees that the objec… --- ## [Script in action section of watcher](https://discuss.elastic.co/t/script-in-action-section-of-watcher/99821)
**Author:** [@gchakkalakkal](https://discuss.elastic.co/u/gchakkalakkal)\ **Replies:** 1\ **Last updated:** [September 8, 2017, 9:30am UTC](https://discuss.elastic.co/t/script-in-action-section-of-watcher/99821 "2017-09-08T09:30:34Z")
Can we execute painless script in action of watcher. If yes please provide some example/syntax as i would like iterate through payload in the execution context. --- ## [X-Pack Alerting](https://discuss.elastic.co/t/x-pack-alerting/98833)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 9\ **Last updated:** [September 8, 2017, 9:10am UTC](https://discuss.elastic.co/t/x-pack-alerting/98833 "2017-09-08T09:10:21Z")
In a multi node elastic cluster which node (master, hot and warm data nodes, client nodes) the following mail configuration needs to be entered for X-Pack alerting. xpack.notification.email.account: work: profile: gm… --- ## [Export and Import of Watchers](https://discuss.elastic.co/t/export-and-import-of-watchers/99373)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 1\ **Last updated:** [September 8, 2017, 9:02am UTC](https://discuss.elastic.co/t/export-and-import-of-watchers/99373 "2017-09-08T09:02:32Z")
Is it possible to Export and Import the Watchers from one environment to other? --- ## [Watcher alert when count is zero for a bucket](https://discuss.elastic.co/t/watcher-alert-when-count-is-zero-for-a-bucket/99368)
**Author:** [@gautamv](https://discuss.elastic.co/u/gautamv)\ **Replies:** 1\ **Last updated:** [September 8, 2017, 8:58am UTC](https://discuss.elastic.co/t/watcher-alert-when-count-is-zero-for-a-bucket/99368 "2017-09-08T08:58:56Z")
Hi, I’m trying out watcher and I am having a little trouble in understanding how it works. I’m looking to get alerted when log count for a specific log type becomes zero between the latest timestamp ingested and 5 mins… --- ## [Watcher and Shield integration issue](https://discuss.elastic.co/t/watcher-and-shield-integration-issue/98879)
**Author:** [@Boozehound77](https://discuss.elastic.co/u/Boozehound77)\ **Replies:** 5\ **Last updated:** [September 8, 2017, 8:49am UTC](https://discuss.elastic.co/t/watcher-and-shield-integration-issue/98879 "2017-09-08T08:49:47Z")
Hello, we are running Elasticsearch 2.4.1 with Shield and trying to configure watcher. Plugin installation was successfull, plugin itself is running. { "watcher\_state": "started", "watch\_count": 0, "execution\_threa… --- ## [No handler found for uri for /\_search/scroll?](https://discuss.elastic.co/t/no-handler-found-for-uri-for--search-scroll/99695)
**Author:** [@MarioZ](https://discuss.elastic.co/u/MarioZ)\ **Replies:** 2\ **Last updated:** [September 8, 2017, 7:22am UTC](https://discuss.elastic.co/t/no-handler-found-for-uri-for--search-scroll/99695 "2017-09-08T07:22:17Z")
Hello, I am a newbe. When I try to use the rest interface with scroll and scroll\_id, I receive this error: HTTP protocol error 400 (Bad Request): No handler found for uri \[/…/…/\_search/scroll? My goal to archive is to… --- ## [Management expects password after disabling security in X-Pack 6.0.0-beta2](https://discuss.elastic.co/t/management-expects-password-after-disabling-security-in-x-pack-6-0-0-beta2/99756)
**Author:** [@John\_Sobanski](https://discuss.elastic.co/u/John_Sobanski)\ **Replies:** 2\ **Last updated:** [September 8, 2017, 7:15am UTC](https://discuss.elastic.co/t/management-expects-password-after-disabling-security-in-x-pack-6-0-0-beta2/99756 "2017-09-08T07:15:12Z")
Expected Behavior: Disabling X-Pack security on Elasticsearch obviates the need for a Logstash management password Observed Behavior: Logstash complains that it needs a management password I installed X-Pack on Elasti… --- ## [Maximum size limit of payload to be sent to elasticSearch for a search query](https://discuss.elastic.co/t/maximum-size-limit-of-payload-to-be-sent-to-elasticsearch-for-a-search-query/99802)
**Author:** [@NavalKK](https://discuss.elastic.co/u/NavalKK)\ **Replies:** 2\ **Last updated:** [September 8, 2017, 6:54am UTC](https://discuss.elastic.co/t/maximum-size-limit-of-payload-to-be-sent-to-elasticsearch-for-a-search-query/99802 "2017-09-08T06:54:33Z")
I want to know if there is any limit to size of the request payload in search query to be sent to elasticsearch. --- ## [Get distinct values from a field in ElasticSearch](https://discuss.elastic.co/t/get-distinct-values-from-a-field-in-elasticsearch/99783)
**Author:** [@stackf01](https://discuss.elastic.co/u/stackf01)\ **Replies:** 2\ **Last updated:** [September 8, 2017, 6:44am UTC](https://discuss.elastic.co/t/get-distinct-values-from-a-field-in-elasticsearch/99783 "2017-09-08T06:44:13Z")
Hello, I have the following URI which should retrieve all values from the Gender field. http://localhost:9200/persons/\_search?\_source=Gender However, it does not return me all the data in the index of the Gender field… --- ## [How to Configured ElasticSearch in Windows platform?](https://discuss.elastic.co/t/how-to-configured-elasticsearch-in-windows-platform/99794)
**Author:** [@Ashish\_Christian](https://discuss.elastic.co/u/Ashish_Christian)\ **Replies:** 10\ **Last updated:** [September 8, 2017, 5:57am UTC](https://discuss.elastic.co/t/how-to-configured-elasticsearch-in-windows-platform/99794 "2017-09-08T05:57:11Z")
Can you please guide how to configured latest version of ElasticSearch and Kibana Configured? --- ## [Logs Not displaying in kibana while using newly created index but displaying when using default logstash-\*](https://discuss.elastic.co/t/logs-not-displaying-in-kibana-while-using-newly-created-index-but-displaying-when-using-default-logstash/99729)
**Author:** [@fazi347](https://discuss.elastic.co/u/fazi347)\ **Replies:** 8\ **Last updated:** [September 8, 2017, 5:35am UTC](https://discuss.elastic.co/t/logs-not-displaying-in-kibana-while-using-newly-created-index-but-displaying-when-using-default-logstash/99729 "2017-09-08T05:35:33Z")
Hi, i am configured server with fluentd, elasticsearch and kibana to ship logs to server from client node and display in kibana. When i am configuring kibana index using default logstash-\* index logs are displaying in … --- ## [Logstash Elasticsearch Connection Refused](https://discuss.elastic.co/t/logstash-elasticsearch-connection-refused/99680)
**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\ **Replies:** 8\ **Last updated:** [September 8, 2017, 4:57am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-connection-refused/99680 "2017-09-08T04:57:34Z")
I have 2 machine with both have logstash. When I try to connect to Elasticsearch, it results to Connection Refused in next couple of minutes. I also tried to open 2 ports in and port forward it to my es, but still the … --- ## [Fastest way to delete specific indexes](https://discuss.elastic.co/t/fastest-way-to-delete-specific-indexes/99755)
**Author:** [@NonameGK](https://discuss.elastic.co/u/NonameGK)\ **Replies:** 2\ **Last updated:** [September 8, 2017, 3:45am UTC](https://discuss.elastic.co/t/fastest-way-to-delete-specific-indexes/99755 "2017-09-08T03:45:24Z")
Hi, I am trying to delete specific index with below lines of code using groovy and grails finalIndexName.each { // DeleteIndexResponse deleteResponse = client.admin().indices().delete(new DeleteIndexR… --- ## [Query filter not working](https://discuss.elastic.co/t/query-filter-not-working/99771)
**Author:** [@sunmesiav](https://discuss.elastic.co/u/sunmesiav)\ **Replies:** 2\ **Last updated:** [September 8, 2017, 1:00am UTC](https://discuss.elastic.co/t/query-filter-not-working/99771 "2017-09-08T01:00:01Z")
Hi Team, Iam trying to build a simple query and filter but its not working. { "query": { "bool": { "must": \[ { "match": { "some\_entry": "Not in" }} \], "filter": \[ { "term": { "some\_area": "XXX\_YY" }} … --- ## [X-Pack watch for storage usage (disk usage)](https://discuss.elastic.co/t/x-pack-watch-for-storage-usage-disk-usage/99762)
**Author:** [@FlorinAndrei](https://discuss.elastic.co/u/FlorinAndrei)\ **Replies:** 1\ **Last updated:** [September 7, 2017, 11:06pm UTC](https://discuss.elastic.co/t/x-pack-watch-for-storage-usage-disk-usage/99762 "2017-09-07T23:06:25Z")
I’m looking at this example: https://www.elastic.co/guide/en/x-pack/current/watch-cluster-status.html PUT \_xpack/watcher/watch/cluster\_health\_watch { "trigger" : { "schedule" : { "interval" : "10s" } }, "inpu… --- ## [Elasticsearch document locking concept](https://discuss.elastic.co/t/elasticsearch-document-locking-concept/95924)
**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\ **Replies:** 4\ **Last updated:** [September 7, 2017, 9:43pm UTC](https://discuss.elastic.co/t/elasticsearch-document-locking-concept/95924 "2017-09-07T21:43:53Z")
Hi, This is how i creates lock for particular document with the help of \_id PUT logstash-titanic123/lock { "create": { "\_id": 879}, { "process\_id": 321 } } response is { "took": 573, "errors": false, "items": \[… --- ## [List of DELETED files from windows event log](https://discuss.elastic.co/t/list-of-deleted-files-from-windows-event-log/96936)
**Author:** [@tellus83](https://discuss.elastic.co/u/tellus83)\ **Replies:** 1\ **Last updated:** [September 7, 2017, 9:38pm UTC](https://discuss.elastic.co/t/list-of-deleted-files-from-windows-event-log/96936 "2017-09-07T21:38:02Z")
How can I make a query to get a list of DELETED files from windows event log? The event structure is a bit complex. An event whit event\_id:4660 telling “An object was deleted.”. but not what object. The complexity is e… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1954) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1956)