# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1958

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1959

---

## [Issue Querying on Specified Fields](https://discuss.elastic.co/t/issue-querying-on-specified-fields/99472)

<div class="topic-metadata">

**Author:** [@mlilien](https://discuss.elastic.co/u/mlilien)\
**Replies:** 1\
**Last updated:** [September 6, 2017, 12:22pm UTC](https://discuss.elastic.co/t/issue-querying-on-specified-fields/99472 "2017-09-06T12:22:16Z")

</div>

I’m having an issue with a very specific set of circumstances that isn’t making a whole lot of sense to me. I’ve done some digging and couldn’t find anything, but if I’m missing something obvious, I do apologize. I have…

---

## [ElasticSearch not connecting to local IP address](https://discuss.elastic.co/t/elasticsearch-not-connecting-to-local-ip-address/99572)

<div class="topic-metadata">

**Author:** [@Ratnakar\_Sadasyula](https://discuss.elastic.co/u/Ratnakar_Sadasyula)\
**Replies:** 1\
**Last updated:** [September 6, 2017, 12:08pm UTC](https://discuss.elastic.co/t/elasticsearch-not-connecting-to-local-ip-address/99572 "2017-09-06T12:08:20Z")

</div>

Hi I am using ElasticSearch 5.5.x, now when I don’t make changes in elasticsearch.yml and start it. It runs fine. And I am able to access using curl http://localhost:9200 with no issue However if I change network.ho…

---

## [Unable to perform Offline X-Pack Installation](https://discuss.elastic.co/t/unable-to-perform-offline-x-pack-installation/99549)

<div class="topic-metadata">

**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\
**Replies:** 1\
**Last updated:** [September 6, 2017, 11:15am UTC](https://discuss.elastic.co/t/unable-to-perform-offline-x-pack-installation/99549 "2017-09-06T11:15:44Z")

</div>

I have downloaded x-pack 5.5.2.zip and extracted it into a folder in Windows. The setup is an offline one and I followed the instructions at: \[https://www.elastic.co/guide/en/elasticsearch/reference/5.5/installing-xpack…

---

## [Change thread pool search queue\_size? yes or not?](https://discuss.elastic.co/t/change-thread-pool-search-queue-size-yes-or-not/97284)

<div class="topic-metadata">

**Author:** [@mitabrev](https://discuss.elastic.co/u/mitabrev)\
**Replies:** 12\
**Last updated:** [September 6, 2017, 8:20am UTC](https://discuss.elastic.co/t/change-thread-pool-search-queue-size-yes-or-not/97284 "2017-09-06T08:20:52Z")

</div>

Got one question. Working on my elastic stack. Basically it’s “developing production”. Got one server with 16GB of RAM, 4 CPUs, ELK 5.4.0. No cluster or extra nodes. Got no problems with adding data and searching, the …

---

## [Error on importing ES with python](https://discuss.elastic.co/t/error-on-importing-es-with-python/99480)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 1\
**Last updated:** [September 6, 2017, 7:32am UTC](https://discuss.elastic.co/t/error-on-importing-es-with-python/99480 "2017-09-06T07:32:19Z")

</div>

Hi, I am getting an error: "No module named elasticsearch" I saw in many answers to check if the pip installed the correct version of python and ES. I installed ES through rpm and python through yum install… What may …

---

## [Get the internal representation of a record](https://discuss.elastic.co/t/get-the-internal-representation-of-a-record/99462)

<div class="topic-metadata">

**Author:** [@PascalTurbo](https://discuss.elastic.co/u/PascalTurbo)\
**Replies:** 1\
**Last updated:** [September 6, 2017, 7:31am UTC](https://discuss.elastic.co/t/get-the-internal-representation-of-a-record/99462 "2017-09-06T07:31:10Z")

</div>

Hi, I want to understand, how elasticsearch stores its data - especially text data. Is there a way to say “show me the internal representation of a specific record”? Bests Pascal

---

## [None of configured nodes available](https://discuss.elastic.co/t/none-of-configured-nodes-available/99522)

<div class="topic-metadata">

**Author:** [@basanagouda](https://discuss.elastic.co/u/basanagouda)\
**Replies:** 0\
**Last updated:** [September 6, 2017, 6:27am UTC](https://discuss.elastic.co/t/none-of-configured-nodes-available/99522 "2017-09-06T06:27:37Z")

</div>

Continuing the discussion from Elastic 5.4.0 TransportClient does not work: i am getting the below exception Exception in thread “main” NoNodeAvailableException\[None of the configured nodes are available: \[{#transpor…

---

## [Whitespace tokenizer doesn't allow lowercase search?](https://discuss.elastic.co/t/whitespace-tokenizer-doesnt-allow-lowercase-search/99478)

<div class="topic-metadata">

**Author:** [@truesecure](https://discuss.elastic.co/u/truesecure)\
**Replies:** 1\
**Last updated:** [September 6, 2017, 5:24am UTC](https://discuss.elastic.co/t/whitespace-tokenizer-doesnt-allow-lowercase-search/99478 "2017-09-06T05:24:33Z")

</div>

Hello, I want to use the whitespace tokenizer and be able to have my search be case insensitive. However, I am unable to do case insensitive searches when using the whitespace tokenizer. This is what my settings look l…

---

## [How does the elasticsearch expand capacity and shrink capacity？](https://discuss.elastic.co/t/how-does-the-elasticsearch-expand-capacity-and-shrink-capacity/99396)

<div class="topic-metadata">

**Author:** [@saliormoon](https://discuss.elastic.co/u/saliormoon)\
**Replies:** 16\
**Last updated:** [September 6, 2017, 2:50am UTC](https://discuss.elastic.co/t/how-does-the-elasticsearch-expand-capacity-and-shrink-capacity/99396 "2017-09-06T02:50:33Z")

</div>

elasticsearch version: 5.5.2 OS: Linux A cluster of 3 nodes. How does elasticsearch reduce capacity and scale out capacity? Is there any operation command?

---

## [About performance using has\_child query for filtering](https://discuss.elastic.co/t/about-performance-using-has-child-query-for-filtering/98197)

<div class="topic-metadata">

**Author:** [@toka](https://discuss.elastic.co/u/toka)\
**Replies:** 4\
**Last updated:** [September 6, 2017, 1:25am UTC](https://discuss.elastic.co/t/about-performance-using-has-child-query-for-filtering/98197 "2017-09-06T01:25:26Z")

</div>

Hi guys, I have to filter users that already interacted with each other, so they don’t appear in search anymore. I’m planning to do this filtering using a has\_child query. The main user document will be the parent, and…

---

## [Aggregation to find new weekly logs](https://discuss.elastic.co/t/aggregation-to-find-new-weekly-logs/99048)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 3\
**Last updated:** [September 6, 2017, 12:58am UTC](https://discuss.elastic.co/t/aggregation-to-find-new-weekly-logs/99048 "2017-09-06T00:58:41Z")

</div>

I’ve been trying to figure this out, but I seem to keep getting stuck and would love a nudge in the right direction. I have logs coming in each week, some logs have been occurring for the past several weeks, and others …

---

## [Post migration ELK issue](https://discuss.elastic.co/t/post-migration-elk-issue/99449)

<div class="topic-metadata">

**Author:** [@harish.g](https://discuss.elastic.co/u/harish.g)\
**Replies:** 2\
**Last updated:** [September 6, 2017, 12:30am UTC](https://discuss.elastic.co/t/post-migration-elk-issue/99449 "2017-09-06T00:30:15Z")

</div>

We have completed the migration of 3 nodes elasticsearch (2.2 to 5.5) , before migration we took the snapshot of all the indices which around 1TB and 3756 shards . After the migration when we monitoring on the cerebro …

---

## [Insert List of nested datatype using Java API](https://discuss.elastic.co/t/insert-list-of-nested-datatype-using-java-api/99493)

<div class="topic-metadata">

**Author:** [@Pritom\_Ahmed](https://discuss.elastic.co/u/Pritom_Ahmed)\
**Replies:** 0\
**Last updated:** [September 5, 2017, 9:58pm UTC](https://discuss.elastic.co/t/insert-list-of-nested-datatype-using-java-api/99493 "2017-09-05T21:58:51Z")

</div>

Hi, I have an ArrayList of objects. Say the objects are of the following format public class S { String ID; Date startTime; Long duration; List\<Tag\> tags; Process process; } Here, Tag and Process…

---

## [How aggs by id and order result by title?](https://discuss.elastic.co/t/how-aggs-by-id-and-order-result-by-title/99486)

<div class="topic-metadata">

**Author:** [@Gaz](https://discuss.elastic.co/u/Gaz)\
**Replies:** 0\
**Last updated:** [September 5, 2017, 8:41pm UTC](https://discuss.elastic.co/t/how-aggs-by-id-and-order-result-by-title/99486 "2017-09-05T20:41:30Z")

</div>

Mapping: { "mappings": { "post": { "properties": { "tags": { "type": "nested" } } } } } Posts: { "title": "some title", "message": "some message", "tags": \[ …

---

## [Compile error when trying to use tf() in script\_score](https://discuss.elastic.co/t/compile-error-when-trying-to-use-tf-in-script-score/99467)

<div class="topic-metadata">

**Author:** [@mundek88](https://discuss.elastic.co/u/mundek88)\
**Replies:** 1\
**Last updated:** [September 5, 2017, 7:24pm UTC](https://discuss.elastic.co/t/compile-error-when-trying-to-use-tf-in-script-score/99467 "2017-09-05T19:24:27Z")

</div>

Hi, my mappings currently looks like this (Python code) { 'meeting': { 'properties': { 'user': {'type': 'float'}, 'subject': {'type': 'string',}, 'notes': {'type': 'text'}, …

---

## [Unable to upgrade X-Pack license](https://discuss.elastic.co/t/unable-to-upgrade-x-pack-license/99282)

<div class="topic-metadata">

**Author:** [@patbre](https://discuss.elastic.co/u/patbre)\
**Replies:** 4\
**Last updated:** [September 5, 2017, 7:10pm UTC](https://discuss.elastic.co/t/unable-to-upgrade-x-pack-license/99282 "2017-09-05T19:10:39Z")

</div>

Hello, I have been using 30 days trial for X-Pack, which now has expired. I have registered and downloaded the Basic License and tried to upgrade it through license API (like in the Docs), but I encountered a problem. T…

---

## [Unable to apply multiple analyzer](https://discuss.elastic.co/t/unable-to-apply-multiple-analyzer/99293)

<div class="topic-metadata">

**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\
**Replies:** 1\
**Last updated:** [September 5, 2017, 4:07pm UTC](https://discuss.elastic.co/t/unable-to-apply-multiple-analyzer/99293 "2017-09-05T16:07:02Z")

</div>

Hi, I have created custom analyzer like this: PUT /historical\_new\_one/\_settings { “settings”: { “analysis”: { “filter”: { “StopFilterFactory”: { “type”: “stop”, “stopwords”: “english”, “ignoreCase”: true }, …

---

## [Verify x-pack running](https://discuss.elastic.co/t/verify-x-pack-running/99330)

<div class="topic-metadata">

**Author:** [@nh45](https://discuss.elastic.co/u/nh45)\
**Replies:** 3\
**Last updated:** [September 5, 2017, 3:20pm UTC](https://discuss.elastic.co/t/verify-x-pack-running/99330 "2017-09-05T15:20:24Z")

</div>

Hi, Already have a production cluster on which X-Pack is installed and running. But some logstash nodes are not showing in the monitoring tab. So how can I log into specific logstash nodes to verify if x-pack is running…

---

## [Prevent curator to delete certain indices](https://discuss.elastic.co/t/prevent-curator-to-delete-certain-indices/99379)

<div class="topic-metadata">

**Author:** [@tyyko](https://discuss.elastic.co/u/tyyko)\
**Replies:** 2\
**Last updated:** [September 5, 2017, 2:09pm UTC](https://discuss.elastic.co/t/prevent-curator-to-delete-certain-indices/99379 "2017-09-05T14:09:28Z")

</div>

Hello all, we are using the curator to rotate logs ( curator delete indices --older-than XX ) but I was wondering if we could ‘lock’ certain indices from the automated deletion to allow RCA of an outage without risking…

---

## [Master not discovered exception in my cluster](https://discuss.elastic.co/t/master-not-discovered-exception-in-my-cluster/99350)

<div class="topic-metadata">

**Author:** [@bigfool1988](https://discuss.elastic.co/u/bigfool1988)\
**Replies:** 2\
**Last updated:** [September 5, 2017, 1:14pm UTC](https://discuss.elastic.co/t/master-not-discovered-exception-in-my-cluster/99350 "2017-09-05T13:14:58Z")

</div>

---

## [Not able to connect elastic search server remotly](https://discuss.elastic.co/t/not-able-to-connect-elastic-search-server-remotly/99423)

<div class="topic-metadata">

**Author:** [@gauravgarg](https://discuss.elastic.co/u/gauravgarg)\
**Replies:** 2\
**Last updated:** [September 5, 2017, 1:05pm UTC](https://discuss.elastic.co/t/not-able-to-connect-elastic-search-server-remotly/99423 "2017-09-05T13:05:54Z")

</div>

Hi Team, I am not able to connect to elastic-search server remotely from another machine. my ES configuration on server side is: on my elastic search server: /etc/elasticsearch/elasticsearch.yml cluster.name: elastic…

---

## [Number is being changed](https://discuss.elastic.co/t/number-is-being-changed/99042)

<div class="topic-metadata">

**Author:** [@mmangold](https://discuss.elastic.co/u/mmangold)\
**Replies:** 6\
**Last updated:** [September 5, 2017, 12:26pm UTC](https://discuss.elastic.co/t/number-is-being-changed/99042 "2017-09-05T12:26:07Z")

</div>

Hello! I’m having some problems with large numbers in my database. They’re large, but well within the limit for the long type. Here’s a simple example that shows it 100% of the time: POST numbertest/bleh/ { "bleh" …

---

## [Subtracting term X from log a from term Y from log b?](https://discuss.elastic.co/t/subtracting-term-x-from-log-a-from-term-y-from-log-b/99407)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 1\
**Last updated:** [September 5, 2017, 12:23pm UTC](https://discuss.elastic.co/t/subtracting-term-x-from-log-a-from-term-y-from-log-b/99407 "2017-09-05T12:23:51Z")

</div>

Hi after watching this video, made by @Mark\_Harwood. I understood that for every period of time I have to send the logs regarding a certain entity to a new index. for example for every message, I have 6 logs and I need …

---

## [Watcher - Groovy User Guide](https://discuss.elastic.co/t/watcher-groovy-user-guide/98832)

<div class="topic-metadata">

**Author:** [@vincentmarian](https://discuss.elastic.co/u/vincentmarian)\
**Replies:** 7\
**Last updated:** [September 5, 2017, 11:35am UTC](https://discuss.elastic.co/t/watcher-groovy-user-guide/98832 "2017-09-05T11:35:54Z")

</div>

We have created a Watcher script to calculate daily summary of details in our log and stored the output in a new index. This newly created index is not readable by Kibana. After some googling I came to know that we need…

---

## [INTERNAL\_SERVER\_ERROR null\_pointer\_exception while percolating a document](https://discuss.elastic.co/t/internal-server-error-null-pointer-exception-while-percolating-a-document/99311)

<div class="topic-metadata">

**Author:** [@jazz](https://discuss.elastic.co/u/jazz)\
**Replies:** 12\
**Last updated:** [September 5, 2017, 11:31am UTC](https://discuss.elastic.co/t/internal-server-error-null-pointer-exception-while-percolating-a-document/99311 "2017-09-05T11:31:01Z")

</div>

We have an index with 10 shards on 10 nodes, and sometimes when a document is percolated, some nodes fail with a null\_pointer\_exception. A second try does not reproduce the exception. status: 'INTERNAL\_SERVER\_ERROR', re…

---

## [Elasticsearch --\> Cassandra](https://discuss.elastic.co/t/elasticsearch-cassandra/99405)

<div class="topic-metadata">

**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\
**Replies:** 1\
**Last updated:** [September 5, 2017, 10:56am UTC](https://discuss.elastic.co/t/elasticsearch-cassandra/99405 "2017-09-05T10:56:09Z")

</div>

I want to transfer all my data in elasticsearch to cassandra. Is there a way to transfer from es to cassandra? i checked logstash, but there’s no plugin for it.

---

## [Setting number\_of\_shards but couldn't resolve host](https://discuss.elastic.co/t/setting-number-of-shards-but-couldnt-resolve-host/99399)

<div class="topic-metadata">

**Author:** [@saliormoon](https://discuss.elastic.co/u/saliormoon)\
**Replies:** 7\
**Last updated:** [September 5, 2017, 10:53am UTC](https://discuss.elastic.co/t/setting-number-of-shards-but-couldnt-resolve-host/99399 "2017-09-05T10:53:22Z")

</div>

when I set the shards number, it throws such problem: curl -XPUT ‘l0.62.179.32:9200/my\_index/pretty’ -H ‘Content-Type: application/json’ -d’ { “settings”: { “number\_of\_shards” : 2, “number\_of\_replicas” : 0 } } ' …

---

## [Query checking difference of two terms in a log](https://discuss.elastic.co/t/query-checking-difference-of-two-terms-in-a-log/99381)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 9\
**Last updated:** [September 5, 2017, 10:29am UTC](https://discuss.elastic.co/t/query-checking-difference-of-two-terms-in-a-log/99381 "2017-09-05T10:29:03Z")

</div>

Hi, I have two terms in a log that we will call X and Y from date format. I want to send a query that will show me all logs that the value of (X-Y) is greater than 3 (seconds). How can I do this?

---

## [Thread\_pool \[management\]](https://discuss.elastic.co/t/thread-pool-management/98628)

<div class="topic-metadata">

**Author:** [@nestorbolivar](https://discuss.elastic.co/u/nestorbolivar)\
**Replies:** 6\
**Last updated:** [September 5, 2017, 9:38am UTC](https://discuss.elastic.co/t/thread-pool-management/98628 "2017-09-05T09:38:30Z")

</div>

Could anyone explain what this thread does?! It seems that only this thread is consuming the most resources on my cluster yet I can’t find how to tune it.

---

## [Import JSON into ElasticSearch](https://discuss.elastic.co/t/import-json-into-elasticsearch/97725)

<div class="topic-metadata">

**Author:** [@adityosn](https://discuss.elastic.co/u/adityosn)\
**Replies:** 8\
**Last updated:** [September 5, 2017, 8:11am UTC](https://discuss.elastic.co/t/import-json-into-elasticsearch/97725 "2017-09-05T08:11:00Z")

</div>

I would like to know how to import JSON data into ElasticSearch. I have used this command but it won’t work: curl -XPOST 'http://myipaddress:9200/demo-shop/items/' -H 'Content-Type: application/json' --data-binary @data…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1957)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1959)
