# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1965 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1966 --- ## [CorruptIndexException after node restart](https://discuss.elastic.co/t/corruptindexexception-after-node-restart/98649)
**Author:** [@Bernt\_Rostad](https://discuss.elastic.co/u/Bernt_Rostad)\ **Replies:** 4\ **Last updated:** [August 29, 2017, 8:20am UTC](https://discuss.elastic.co/t/corruptindexexception-after-node-restart/98649 "2017-08-29T08:20:06Z")
Hi, We’re in the process of upgrading the firmware on a number of Debian servers hosting our 12-node Elasticsearch cluster; we’ve been taking down one server at a time, always making sure the ES cluster was back to gree… --- ## [Lots of deleted documents above 40%](https://discuss.elastic.co/t/lots-of-deleted-documents-above-40/96841)
**Author:** [@Slava\_G](https://discuss.elastic.co/u/Slava_G)\ **Replies:** 40\ **Last updated:** [August 29, 2017, 8:07am UTC](https://discuss.elastic.co/t/lots-of-deleted-documents-above-40/96841 "2017-08-29T08:07:09Z")
Hi, In my index I recently removed many documents, but after 3 weeks I still see that index has above 40% of deleted documents, I know that merger somehow, eventually should clean this, but it’s not happened yet and ind… --- ## [Snapshot and Restore in ElasticSearch Cloud](https://discuss.elastic.co/t/snapshot-and-restore-in-elasticsearch-cloud/98632)
**Author:** [@mathew](https://discuss.elastic.co/u/mathew)\ **Replies:** 1\ **Last updated:** [August 29, 2017, 7:51am UTC](https://discuss.elastic.co/t/snapshot-and-restore-in-elasticsearch-cloud/98632 "2017-08-29T07:51:56Z")
Hello, I am trying the to restore snapshot to another cluster in same region but a later version. I am getting error, ‘The index is still open’. I tried after closing the index, but the same error. Regards Mathew --- ## [Update doc using aggretaion result](https://discuss.elastic.co/t/update-doc-using-aggretaion-result/98642)
**Author:** [@Ravi\_Randev\_Singh](https://discuss.elastic.co/u/Ravi_Randev_Singh)\ **Replies:** 0\ **Last updated:** [August 29, 2017, 7:42am UTC](https://discuss.elastic.co/t/update-doc-using-aggretaion-result/98642 "2017-08-29T07:42:15Z")
Hi Everyone, I want to know is there a way to update doc with result of the aggregation, something like this POST /index/type/\_update\_by\_query { “query”:{ “match\_all”: {} }, “aggs” : { “count\_years” : {“cardinali… --- ## [Troubles when upgrading from 5.2.2 to 5.5.2](https://discuss.elastic.co/t/troubles-when-upgrading-from-5-2-2-to-5-5-2/98370)
**Author:** [@aeryaguzov](https://discuss.elastic.co/u/aeryaguzov)\ **Replies:** 5\ **Last updated:** [August 29, 2017, 6:55am UTC](https://discuss.elastic.co/t/troubles-when-upgrading-from-5-2-2-to-5-5-2/98370 "2017-08-29T06:55:41Z")
Hi! I'm adding new node to existing ES cluster. This cluster is running under 5.2.2 I'm install ES through Debian packages, so latest version for now is 5.5.2. Node was added successfully, but when I enable relocation… --- ## [SSLHandshakeException while using webhook action in watcher](https://discuss.elastic.co/t/sslhandshakeexception-while-using-webhook-action-in-watcher/94906)
**Author:** [@biswars](https://discuss.elastic.co/u/biswars)\ **Replies:** 13\ **Last updated:** [August 29, 2017, 6:26am UTC](https://discuss.elastic.co/t/sslhandshakeexception-while-using-webhook-action-in-watcher/94906 "2017-08-29T06:26:18Z")
Version: 5.4.2 I do have the CA cert used in the target host in the webhook action url and it is tested using curl --cacert option and works well. Followed the followings However, I still get "SSLHandshakeException\[… --- ## [Elasticsearch ignores jvm.options file not in default folder](https://discuss.elastic.co/t/elasticsearch-ignores-jvm-options-file-not-in-default-folder/98629)
**Author:** [@Bican](https://discuss.elastic.co/u/Bican)\ **Replies:** 1\ **Last updated:** [August 29, 2017, 6:15am UTC](https://discuss.elastic.co/t/elasticsearch-ignores-jvm-options-file-not-in-default-folder/98629 "2017-08-29T06:15:24Z")
Hi, I’m experiencing a problem with jvm.options file. We use Elasticsearch 5.4 . I specify parameter path.conf during startup. Something along lines: nohup $ES\_HOME/bin/elasticsearch -Epath.conf=$CFG\_DIR/$cluster\_n… --- ## [MasterNotDiscovered Error](https://discuss.elastic.co/t/masternotdiscovered-error/98183)
**Author:** [@Orkuncakilkaya](https://discuss.elastic.co/u/Orkuncakilkaya)\ **Replies:** 2\ **Last updated:** [August 29, 2017, 5:42am UTC](https://discuss.elastic.co/t/masternotdiscovered-error/98183 "2017-08-29T05:42:40Z")
Hi, first of all sorry for my bad English. I need help for Elasticsearch server. I got 1 Node and 1 Cluster on the same server. I am using Elasticsearch with Laravel. I am getting this error when i try to communicate wi… --- ## [Elastic Search Cluster Infrastructure](https://discuss.elastic.co/t/elastic-search-cluster-infrastructure/98558)
**Author:** [@Hitesh\_Chavhan](https://discuss.elastic.co/u/Hitesh_Chavhan)\ **Replies:** 2\ **Last updated:** [August 29, 2017, 5:32am UTC](https://discuss.elastic.co/t/elastic-search-cluster-infrastructure/98558 "2017-08-29T05:32:47Z")
Hi, I want to set up an production environment for my App, which uses elastic search. Please comment the necessary pointers to be kept in mind while designing. Thanks in advance --- ## [How to build java api to query against multiple fields with some fields with boost](https://discuss.elastic.co/t/how-to-build-java-api-to-query-against-multiple-fields-with-some-fields-with-boost/98243)
**Author:** [@rinu](https://discuss.elastic.co/u/rinu)\ **Replies:** 0\ **Last updated:** [August 24, 2017, 1:44pm UTC](https://discuss.elastic.co/t/how-to-build-java-api-to-query-against-multiple-fields-with-some-fields-with-boost/98243 "2017-08-24T13:44:23Z")
I’m trying to upgrade from ES 2.2.0 to 5.5.0. Before we used build prepareSearch with querystring and fields as jsonstring to query as setQuery(jsonstring), now setQuery(QueryBuilders) is only supported. Can someone help… --- ## [Xpack default user unable to logout](https://discuss.elastic.co/t/xpack-default-user-unable-to-logout/98533)
**Author:** [@vasanth12](https://discuss.elastic.co/u/vasanth12)\ **Replies:** 4\ **Last updated:** [August 29, 2017, 4:55am UTC](https://discuss.elastic.co/t/xpack-default-user-unable-to-logout/98533 "2017-08-29T04:55:48Z")
We have installed Kiabna5.4.3 and installed the plugin Xpack, logged in as default xpack user . but we are facing an issue with logout. After logging out , if we access the same kibana url in another tab, the user is l… --- ## [Can we use split processor with painless scripting](https://discuss.elastic.co/t/can-we-use-split-processor-with-painless-scripting/98536)
**Author:** [@vinay\_garg](https://discuss.elastic.co/u/vinay_garg)\ **Replies:** 4\ **Last updated:** [August 29, 2017, 4:16am UTC](https://discuss.elastic.co/t/can-we-use-split-processor-with-painless-scripting/98536 "2017-08-29T04:16:23Z")
Hi, Can we use split processor with painless scripting as we can use in java or groovy? value of RequestIntime = "ReqestIn\_2017-08-21T12:10:10" def String request = doc\[‘RequestInTime’\].value; Seperator shoud be base… --- ## [Elasticsearch on Hadoop VERTEX FAILURE](https://discuss.elastic.co/t/elasticsearch-on-hadoop-vertex-failure/98622)
**Author:** [@thesynapses](https://discuss.elastic.co/u/thesynapses)\ **Replies:** 0\ **Last updated:** [August 29, 2017, 3:20am UTC](https://discuss.elastic.co/t/elasticsearch-on-hadoop-vertex-failure/98622 "2017-08-29T03:20:33Z")
I have integrated my ES with hadoop. Using HIVE “Select \* from EXTERNAL\_ES\_TABLE limit 100” works great with external elasticsearch cluster. I have LLAP enabled and am using TEZ. I have also listed webhcat.proxyuser.a… --- ## [Server generated field value](https://discuss.elastic.co/t/server-generated-field-value/98616)
**Author:** [@amccool](https://discuss.elastic.co/u/amccool)\ **Replies:** 1\ **Last updated:** [August 29, 2017, 2:27am UTC](https://discuss.elastic.co/t/server-generated-field-value/98616 "2017-08-29T02:27:34Z")
Im using Elasticsearch.Net and I would like the server to supply a value to a field when I create a document in a index. specifically time. I want the client to supply a time value (generated on the client), and I wa… --- ## [Help with regexp query syntax](https://discuss.elastic.co/t/help-with-regexp-query-syntax/98294)
**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\ **Replies:** 4\ **Last updated:** [August 29, 2017, 12:26am UTC](https://discuss.elastic.co/t/help-with-regexp-query-syntax/98294 "2017-08-29T00:26:01Z")
Hello, i need help with a regexp query. I am trying to filter OUT computers from the winlogbeat event\_data.TargetUserName field. I believe this is an elasticsearch query syntax problem, not a kibana or winlogbeat pro… --- ## [String index out of range: -1](https://discuss.elastic.co/t/string-index-out-of-range-1/98612)
**Author:** [@saliormoon](https://discuss.elastic.co/u/saliormoon)\ **Replies:** 0\ **Last updated:** [August 29, 2017, 12:00am UTC](https://discuss.elastic.co/t/string-index-out-of-range-1/98612 "2017-08-29T00:00:41Z")
Elasticsearch-master from https://github.com/saliormoon/elasticsearch Operating System: Windows Gradle version: 3.5 When I build elasticsearch source code with gradle. it has a such exception: FAILURE: Build failed w… --- ## [\> Project :benchmarks declares a dependency from configuration 'compile' t configuration 'default' which is not declared in the descriptor for project :c re](https://discuss.elastic.co/t/project-benchmarks-declares-a-dependency-from-configuration-compile-t-configuration-default-which-is-not-declared-in-the-descriptor-for-project-c-re/98518)
**Author:** [@saliormoon](https://discuss.elastic.co/u/saliormoon)\ **Replies:** 0\ **Last updated:** [August 28, 2017, 8:06am UTC](https://discuss.elastic.co/t/project-benchmarks-declares-a-dependency-from-configuration-compile-t-configuration-default-which-is-not-declared-in-the-descriptor-for-project-c-re/98518 "2017-08-28T08:06:25Z")
elasticsearch version: 5.5.2 Operating System: Windows Gradle version: 3.5 When I use gradle 3.5 to build elasticsearch source code 5.5.2, it has a exception, like this: What went wrong: ould not determine the depen… --- ## [Merge Documents based on field value?](https://discuss.elastic.co/t/merge-documents-based-on-field-value/98579)
**Author:** [@noah](https://discuss.elastic.co/u/noah)\ **Replies:** 1\ **Last updated:** [August 28, 2017, 11:24pm UTC](https://discuss.elastic.co/t/merge-documents-based-on-field-value/98579 "2017-08-28T23:24:42Z")
I have multiple Documents within an Index, each have the following fields: id serviceName Type Now, stupidly, id is not unique and I want to change that. I want to use Kibana/Elasticsearch to query the data so that I h… --- ## [Strange, very slow performance despite of lots of CPU/RAM resources](https://discuss.elastic.co/t/strange-very-slow-performance-despite-of-lots-of-cpu-ram-resources/98378)
**Author:** [@woytekm](https://discuss.elastic.co/u/woytekm)\ **Replies:** 2\ **Last updated:** [August 28, 2017, 10:22pm UTC](https://discuss.elastic.co/t/strange-very-slow-performance-despite-of-lots-of-cpu-ram-resources/98378 "2017-08-28T22:22:02Z")
Hello, i have migrated ELK cluster to new hardware, and also upgraded ELK to 5.5.2. Cluster consists of: master node 2CPU 5G RAM 12 data nodes with 6 CPU/12G RAM 3 ingest nodes with 6 CPU/6G RAM 3 logstash nodes with … --- ## [Dealing with large documents (architecture question)](https://discuss.elastic.co/t/dealing-with-large-documents-architecture-question/98404)
**Author:** [@lauraerinmann](https://discuss.elastic.co/u/lauraerinmann)\ **Replies:** 3\ **Last updated:** [August 28, 2017, 9:39pm UTC](https://discuss.elastic.co/t/dealing-with-large-documents-architecture-question/98404 "2017-08-28T21:39:51Z")
Hi, ElasticSearch’s documentation makes it very clear that it’s meant to index large documents. I have a document that when in the moderate case is about 15MB and millions of objects. The mapping looks like this: { … --- ## [I need advice on this new use case - IOC](https://discuss.elastic.co/t/i-need-advice-on-this-new-use-case-ioc/98504)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 3\ **Last updated:** [August 28, 2017, 9:39pm UTC](https://discuss.elastic.co/t/i-need-advice-on-this-new-use-case-ioc/98504 "2017-08-28T21:39:17Z")
Hi Guys, I need your inputs or advice on the my use case. I have mulitple sources of malicious IP addresses and domain names. That means daily I am getting almost 1k -2 k such entries. Now my use case is if I could ind… --- ## ["Elasticsearch" multi inputs](https://discuss.elastic.co/t/elasticsearch-multi-inputs/98443)
**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Replies:** 5\ **Last updated:** [August 28, 2017, 9:38pm UTC](https://discuss.elastic.co/t/elasticsearch-multi-inputs/98443 "2017-08-28T21:38:39Z")
Hello. I like to install “winlogbeat” on two servers and send my windows Event Logs directly two “Elasticsearch” that I installed it on my Linux box. How can I configure “Elasticsearch” for multi inputs? my current con… --- ## [Elasticsearch indices](https://discuss.elastic.co/t/elasticsearch-indices/98245)
**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\ **Replies:** 8\ **Last updated:** [August 28, 2017, 7:18pm UTC](https://discuss.elastic.co/t/elasticsearch-indices/98245 "2017-08-28T19:18:15Z")
Hello, I have installed ELK 5.5.x on Windows 2012 with winlogbeat, it works but logs in ..\\Elasticsearch\\data\\nodes\\0\\indices look like this 5uv-yuK5T4CNkTC2G7x4Mg but they should look like this winlogbeat-2017.08.24. W… --- ## [Double Filter Search](https://discuss.elastic.co/t/double-filter-search/98593)
**Author:** [@nishanthrs](https://discuss.elastic.co/u/nishanthrs)\ **Replies:** 0\ **Last updated:** [August 28, 2017, 6:00pm UTC](https://discuss.elastic.co/t/double-filter-search/98593 "2017-08-28T18:00:25Z")
I have an AWS Elasticsearch cluster and a single index inside the cluster. The index contains around a thousand documents, with each document representing a JSON. It has fields like id, description, data, etc. However, o… --- ## [Security in elasticsearch without Xpack](https://discuss.elastic.co/t/security-in-elasticsearch-without-xpack/98412)
**Author:** [@njkl](https://discuss.elastic.co/u/njkl)\ **Replies:** 2\ **Last updated:** [August 28, 2017, 5:06pm UTC](https://discuss.elastic.co/t/security-in-elasticsearch-without-xpack/98412 "2017-08-28T17:06:31Z")
Hi, This is only a clarification request. Is it possible to manage security without Xpack ? (create role, assign role, create users, assign user, assign role to specific functions, etc ?) Also, is the xpack the only pl… --- ## [Execute a script on GET requests](https://discuss.elastic.co/t/execute-a-script-on-get-requests/98461)
**Author:** [@ddorian43](https://discuss.elastic.co/u/ddorian43)\ **Replies:** 4\ **Last updated:** [August 28, 2017, 4:47pm UTC](https://discuss.elastic.co/t/execute-a-script-on-get-requests/98461 "2017-08-28T16:47:06Z")
I have fairly large documents and I’d like to execute a script on GET to return a subset of it (can’t do with just specifying fields unfortunately). Is this possible ? Thanks --- ## [Async/Availability of a Doc Update via Get (Java API)](https://discuss.elastic.co/t/async-availability-of-a-doc-update-via-get-java-api/98496)
**Author:** [@esuser22](https://discuss.elastic.co/u/esuser22)\ **Replies:** 1\ **Last updated:** [August 28, 2017, 3:19pm UTC](https://discuss.elastic.co/t/async-availability-of-a-doc-update-via-get-java-api/98496 "2017-08-28T15:19:59Z")
In a simple 3 node cluster (all nodes master eligible, one elected master) I’m seeing some strange results when updating documents via Java API. It appears as though rapid updates to the same document via many concurren… --- ## [\[o.e.d.r.RestController \] Content type detection for rest requests is deprecated. Specify the content type using the \[Content-Type\] header](https://discuss.elastic.co/t/o-e-d-r-restcontroller-content-type-detection-for-rest-requests-is-deprecated-specify-the-content-type-using-the-content-type-header/98564)
**Author:** [@zheng\_mao\_Peng](https://discuss.elastic.co/u/zheng_mao_Peng)\ **Replies:** 1\ **Last updated:** [August 28, 2017, 2:36pm UTC](https://discuss.elastic.co/t/o-e-d-r-restcontroller-content-type-detection-for-rest-requests-is-deprecated-specify-the-content-type-using-the-content-type-header/98564 "2017-08-28T14:36:25Z")
my Elasticearch version 5.5.2 OS：centos 6.5 Java version:openjdk version “1.8.0\_51” Elasticearch status: yellow xxxx\_deprecation.log: \[2017-08-28T20:05:36,357\]\[WARN \]\[o.e.d.r.RestController \] Content type detectio… --- ## [Manual installation of site plugin (ES migration 1.x to 2.x) on my node ( which currently has ES 1.x)](https://discuss.elastic.co/t/manual-installation-of-site-plugin-es-migration-1-x-to-2-x-on-my-node-which-currently-has-es-1-x/98281)
**Author:** [@wvitte](https://discuss.elastic.co/u/wvitte)\ **Replies:** 0\ **Last updated:** [August 24, 2017, 7:13pm UTC](https://discuss.elastic.co/t/manual-installation-of-site-plugin-es-migration-1-x-to-2-x-on-my-node-which-currently-has-es-1-x/98281 "2017-08-24T19:13:50Z")
I am currently on ES 1.x and I have manually copied the (\_site) directory to my plugins directory on my nodes (my directory structure has “./plugins/migration/\_site”) and did a rolling restart. From what I read, it shou… --- ## [Template .monitoring-es conflicts with my template](https://discuss.elastic.co/t/template-monitoring-es-conflicts-with-my-template/97506)
**Author:** [@John\_ax](https://discuss.elastic.co/u/John_ax)\ **Replies:** 3\ **Last updated:** [August 28, 2017, 1:33pm UTC](https://discuss.elastic.co/t/template-monitoring-es-conflicts-with-my-template/97506 "2017-08-28T13:33:42Z")
By using ES 5.5 with x-pack installed, I got so many error log telling timestamp mapper conflicts: \[2017-08-18T11:43:24,474\]\[WARN \]\[o.e.x.m.e.l.LocalExporter\] unexpected error while indexing monitoring document org.elas… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1964) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1966)