# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1976

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1977

---

## [How to manage elasticsearch data directory](https://discuss.elastic.co/t/how-to-manage-elasticsearch-data-directory/97452)

<div class="topic-metadata">

**Author:** [@mohit214721](https://discuss.elastic.co/u/mohit214721)\
**Replies:** 3\
**Last updated:** [August 18, 2017, 6:03am UTC](https://discuss.elastic.co/t/how-to-manage-elasticsearch-data-directory/97452 "2017-08-18T06:03:52Z")

</div>

I am using ELK stack in UAT environment along with the filebeat functionality (installed in various webservers). While using it, i could see that directory /elasticsearch-5.2.2/data/nodes directory is getting increased …

---

## [How can we use multiple analyzer to the same field or all field?](https://discuss.elastic.co/t/how-can-we-use-multiple-analyzer-to-the-same-field-or-all-field/97515)

<div class="topic-metadata">

**Author:** [@Vinothkumar](https://discuss.elastic.co/u/Vinothkumar)\
**Replies:** 0\
**Last updated:** [August 18, 2017, 5:59am UTC](https://discuss.elastic.co/t/how-can-we-use-multiple-analyzer-to-the-same-field-or-all-field/97515 "2017-08-18T05:59:02Z")

</div>

Hi We want to use multiple analyzer to the index in every individual fields . Mainly these two analyzer “Tern analyzer”,“Synonym analyzer” And to all fields I need to apply both the analyzer First It has to go with te…

---

## [Elasticsearch bool query formation with multiple must clause](https://discuss.elastic.co/t/elasticsearch-bool-query-formation-with-multiple-must-clause/97509)

<div class="topic-metadata">

**Author:** [@Milind\_Karandikar](https://discuss.elastic.co/u/Milind_Karandikar)\
**Replies:** 2\
**Last updated:** [August 18, 2017, 5:14am UTC](https://discuss.elastic.co/t/elasticsearch-bool-query-formation-with-multiple-must-clause/97509 "2017-08-18T05:14:20Z")

</div>

I have a query like the following - { "query": { "bool": { "must": { "bool" : { "should": \[ { "match": { "camp\_id": "Elasticsearch" }}, …

---

## [Elasticsearch 5.x use heap size not go to the max 32g?](https://discuss.elastic.co/t/elasticsearch-5-x-use-heap-size-not-go-to-the-max-32g/97510)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 5\
**Last updated:** [August 18, 2017, 5:02am UTC](https://discuss.elastic.co/t/elasticsearch-5-x-use-heap-size-not-go-to-the-max-32g/97510 "2017-08-18T05:02:44Z")

</div>

in x-pack monitoring why the use heap size line not like a straight line,can't use the max 32g when go to 24g the next secondes go to 9.2g how i can change it

---

## [How to delete a node with api? when the machine is power off in elasticsearch 5.3](https://discuss.elastic.co/t/how-to-delete-a-node-with-api-when-the-machine-is-power-off-in-elasticsearch-5-3/97330)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 7\
**Last updated:** [August 18, 2017, 3:18am UTC](https://discuss.elastic.co/t/how-to-delete-a-node-with-api-when-the-machine-is-power-off-in-elasticsearch-5-3/97330 "2017-08-18T03:18:46Z")

</div>

how to delete a node with api? elasticsearch 5.3 ,when the matchine is offline. thanks.

---

## [Understanding off-heap usage](https://discuss.elastic.co/t/understanding-off-heap-usage/97176)

<div class="topic-metadata">

**Author:** [@erikstephens](https://discuss.elastic.co/u/erikstephens)\
**Replies:** 5\
**Last updated:** [August 18, 2017, 2:21am UTC](https://discuss.elastic.co/t/understanding-off-heap-usage/97176 "2017-08-18T02:21:14Z")

</div>

After upgrading a cluster from 2.3 to 5.5, I’m noticing an increase in total memory. I don’t have enough data yet, but it also looks to grow (slowly) unbounded until OOM. I’ve read other accounts (not strictly elastics…

---

## [Elasticsearch.yml automatically reloaded?](https://discuss.elastic.co/t/elasticsearch-yml-automatically-reloaded/97313)

<div class="topic-metadata">

**Author:** [@nkoothrappahli](https://discuss.elastic.co/u/nkoothrappahli)\
**Replies:** 5\
**Last updated:** [August 18, 2017, 12:25am UTC](https://discuss.elastic.co/t/elasticsearch-yml-automatically-reloaded/97313 "2017-08-18T00:25:58Z")

</div>

Are changes done in elasticsearch.yml automatically applied to the respective node (in other words: Is elasticsearch.yml watched by the elasticsearch process and reloaded upon change?) Wondering if i can change network,…

---

## [Elasticsearch ingest processor to test for field type](https://discuss.elastic.co/t/elasticsearch-ingest-processor-to-test-for-field-type/97325)

<div class="topic-metadata">

**Author:** [@htandra](https://discuss.elastic.co/u/htandra)\
**Replies:** 2\
**Last updated:** [August 17, 2017, 11:12pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-processor-to-test-for-field-type/97325 "2017-08-17T23:12:06Z")

</div>

Hello all, I am looking for a way to check if a field is “array” or “object” datatype before a document is ingested. For example, PUT my\_id2/\_create { “locations” : { “first” : { … } } } PUT my\_id1/\_create { …

---

## [Could not find or load main class org.elasticsearch.plugins.PluginManagerCliParser](https://discuss.elastic.co/t/could-not-find-or-load-main-class-org-elasticsearch-plugins-pluginmanagercliparser/97474)

<div class="topic-metadata">

**Author:** [@whuang2](https://discuss.elastic.co/u/whuang2)\
**Replies:** 3\
**Last updated:** [August 17, 2017, 10:38pm UTC](https://discuss.elastic.co/t/could-not-find-or-load-main-class-org-elasticsearch-plugins-pluginmanagercliparser/97474 "2017-08-17T22:38:03Z")

</div>

I am trying to upgrade ES from 2.0.1 to 5.5.1, elasticsearch-5.5.1.jar giving follow error: Could not find or load main class org.elasticsearch.plugins.PluginManagerCliParser What is the proper way to upgrade ES from 2…

---

## [How to Make Elasticsearch Receive Nested Json](https://discuss.elastic.co/t/how-to-make-elasticsearch-receive-nested-json/97496)

<div class="topic-metadata">

**Author:** [@jpool](https://discuss.elastic.co/u/jpool)\
**Replies:** 0\
**Last updated:** [August 17, 2017, 10:36pm UTC](https://discuss.elastic.co/t/how-to-make-elasticsearch-receive-nested-json/97496 "2017-08-17T22:36:08Z")

</div>

Hello all, I have a chunk of data of the format below. I am trying to store this data in Elasticsearch. I understand how to get this data through logstash, but I am not sure how to construct a template that will properl…

---

## [Failed to parse date field with query validator](https://discuss.elastic.co/t/failed-to-parse-date-field-with-query-validator/97487)

<div class="topic-metadata">

**Author:** [@telebh](https://discuss.elastic.co/u/telebh)\
**Replies:** 0\
**Last updated:** [August 17, 2017, 9:07pm UTC](https://discuss.elastic.co/t/failed-to-parse-date-field-with-query-validator/97487 "2017-08-17T21:07:15Z")

</div>

Hi there, I am trying to validate ELasticsearch query for a date field, but it fails raising error as follows \<\< localhost:8020/myindex/\_validate/query?explain { "query": { "term": { "docproperties.esindextime":…

---

## [Monitoring Elasticsearch with custom metrics](https://discuss.elastic.co/t/monitoring-elasticsearch-with-custom-metrics/97485)

<div class="topic-metadata">

**Author:** [@gthm777](https://discuss.elastic.co/u/gthm777)\
**Replies:** 0\
**Last updated:** [August 17, 2017, 8:58pm UTC](https://discuss.elastic.co/t/monitoring-elasticsearch-with-custom-metrics/97485 "2017-08-17T20:58:20Z")

</div>

Hello Team, Apart from the generic health dashboards for monitoring the health of the elasticsearch, is there anyway to measure the following metrics through API calls ? The number of active users in the elasticsearc…

---

## [How to retrieve bulk document from elasticsearch using Java HTTP client](https://discuss.elastic.co/t/how-to-retrieve-bulk-document-from-elasticsearch-using-java-http-client/97464)

<div class="topic-metadata">

**Author:** [@murman](https://discuss.elastic.co/u/murman)\
**Replies:** 3\
**Last updated:** [August 17, 2017, 8:47pm UTC](https://discuss.elastic.co/t/how-to-retrieve-bulk-document-from-elasticsearch-using-java-http-client/97464 "2017-08-17T20:47:19Z")

</div>

Hi, We have around billions of documents in elastic search, we would like to do bulk retrieval from elastic using Java HTTP client. Can someone recommend best approach of doing this. It would be really helpful if any sa…

---

## [Please Disable snapshots for 8195b9](https://discuss.elastic.co/t/please-disable-snapshots-for-8195b9/97363)

<div class="topic-metadata">

**Author:** [@lukmdo](https://discuss.elastic.co/u/lukmdo)\
**Replies:** 4\
**Last updated:** [August 17, 2017, 8:20pm UTC](https://discuss.elastic.co/t/please-disable-snapshots-for-8195b9/97363 "2017-08-17T20:20:05Z")

</div>

This cluster is used as build node only and because of async snapshots sometimes it fails build with {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"Cannot delete indices that are being snapshotte…

---

## [Storm EsSpout from read once to read repeatedly](https://discuss.elastic.co/t/storm-esspout-from-read-once-to-read-repeatedly/97444)

<div class="topic-metadata">

**Author:** [@Jeff\_Bolle](https://discuss.elastic.co/u/Jeff_Bolle)\
**Replies:** 2\
**Last updated:** [August 17, 2017, 7:30pm UTC](https://discuss.elastic.co/t/storm-esspout-from-read-once-to-read-repeatedly/97444 "2017-08-17T19:30:19Z")

</div>

The existing Apache Storm EsSpout is designed to use a scroll to search through ES once and then exit. It appears to do this very well and quite reliably. However, in my application I’d like to be able to repeatedly ru…

---

## [Elasticsearch query with @timestamp range](https://discuss.elastic.co/t/elasticsearch-query-with-timestamp-range/97469)

<div class="topic-metadata">

**Author:** [@Dee](https://discuss.elastic.co/u/Dee)\
**Replies:** 1\
**Last updated:** [August 17, 2017, 7:28pm UTC](https://discuss.elastic.co/t/elasticsearch-query-with-timestamp-range/97469 "2017-08-17T19:28:28Z")

</div>

Hi, What am I doing wrong in my query? I’m getting response: “reason” : “failed to parse date field \[August 17th 2017, 21:59:28.000\] with format \[strict\_date\_optional\_time||epoch\_millis\]”, “caused\_by” : { “type” : “i…

---

## [Elasticsearch for Apache Hadoop 5.5.2 released](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-5-5-2-released/97465)

<div class="topic-metadata">

**Author:** [@james.baiera](https://discuss.elastic.co/u/james.baiera)\
**Replies:** 0\
**Last updated:** [August 17, 2017, 6:15pm UTC](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-5-5-2-released/97465 "2017-08-17T18:15:32Z")

</div>

I am proud to announce that both ES-Hadoop 5.5.2 has been released! ES-Hadoop 5.5.2 is primarily a compatibility release, tested specifically against the newest Elasticsearch 5.5.2.

---

## [Change aggregates based on filtered query](https://discuss.elastic.co/t/change-aggregates-based-on-filtered-query/97423)

<div class="topic-metadata">

**Author:** [@Brian\_Santisi](https://discuss.elastic.co/u/Brian_Santisi)\
**Replies:** 1\
**Last updated:** [August 17, 2017, 5:27pm UTC](https://discuss.elastic.co/t/change-aggregates-based-on-filtered-query/97423 "2017-08-17T17:27:06Z")

</div>

Hi all, I’m using aggregates to create some filters on a search, but I want to be able to update the filters after a filter has been applied to only show aggregates that the filtered result list has. Is there any way to…

---

## [Machine Learning Real-Time Job stopping after initial run](https://discuss.elastic.co/t/machine-learning-real-time-job-stopping-after-initial-run/96524)

<div class="topic-metadata">

**Author:** [@jcspino](https://discuss.elastic.co/u/jcspino)\
**Replies:** 8\
**Last updated:** [August 17, 2017, 5:23pm UTC](https://discuss.elastic.co/t/machine-learning-real-time-job-stopping-after-initial-run/96524 "2017-08-17T17:23:35Z")

</div>

Hello, I am working to create some real-time machine learning jobs and I am having a problem getting the jobs to continue running after their initial analysis. I have looked through some similar postings for troubleshoo…

---

## [Curator issue - No actionable item](https://discuss.elastic.co/t/curator-issue-no-actionable-item/97234)

<div class="topic-metadata">

**Author:** [@xon](https://discuss.elastic.co/u/xon)\
**Replies:** 7\
**Last updated:** [August 17, 2017, 4:10pm UTC](https://discuss.elastic.co/t/curator-issue-no-actionable-item/97234 "2017-08-17T16:10:08Z")

</div>

Hi All, I am running ES 5.x.x and I am having the following action file actions: 1: action: snapshot description: \>- Snapshot logstash- prefixed indices older than 100 day (based on index creation\_date) with the d…

---

## [Convert string to numeric?](https://discuss.elastic.co/t/convert-string-to-numeric/97449)

<div class="topic-metadata">

**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\
**Replies:** 2\
**Last updated:** [August 17, 2017, 3:43pm UTC](https://discuss.elastic.co/t/convert-string-to-numeric/97449 "2017-08-17T15:43:01Z")

</div>

I’ve got data being ingested into Elasticsearch which arrives in the incoming JSON as a string containing a floating point number, eg “myfield”: “1234.56” So I’ve set a mapping for it “myfield”: { “type”: “double” } …

---

## [Ingestion rate in a elastic cluster](https://discuss.elastic.co/t/ingestion-rate-in-a-elastic-cluster/97394)

<div class="topic-metadata">

**Author:** [@armsepehr](https://discuss.elastic.co/u/armsepehr)\
**Replies:** 1\
**Last updated:** [August 17, 2017, 3:24pm UTC](https://discuss.elastic.co/t/ingestion-rate-in-a-elastic-cluster/97394 "2017-08-17T15:24:06Z")

</div>

I have a small cluster with only two nodes. Both nodes have all roles, and I am using bulk java API to index data. First of all, I optimized a single node cluster and gained 25M/s, then, I hoped that we can increase inge…

---

## [Cannot start Elasticsearch when using repository-s3 plugin](https://discuss.elastic.co/t/cannot-start-elasticsearch-when-using-repository-s3-plugin/96318)

<div class="topic-metadata">

**Author:** [@ps\_tom](https://discuss.elastic.co/u/ps_tom)\
**Replies:** 7\
**Last updated:** [August 17, 2017, 3:13pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-when-using-repository-s3-plugin/96318 "2017-08-17T15:13:40Z")

</div>

I am using ES 5.5.1 running within Docker containers spread across 3 AWS EC2 instances. These are run based on the official Elastic Docker image from docker.elastic.co/elasticsearch/elasticsearch:5.5.1, with the reposito…

---

## [Question on REST Client and Java API](https://discuss.elastic.co/t/question-on-rest-client-and-java-api/96831)

<div class="topic-metadata">

**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\
**Replies:** 4\
**Last updated:** [August 16, 2017, 6:57am UTC](https://discuss.elastic.co/t/question-on-rest-client-and-java-api/96831 "2017-08-16T06:57:07Z")

</div>

I am comparing the performance of Elasticsearch REST Client and the Java APIs using Load Runner (using a load of 50 users at a rate of 7 queries/s) Just a quick background on the data indexed. They consist of news/wiki …

---

## [Unable to update the nested field in elasticsearch](https://discuss.elastic.co/t/unable-to-update-the-nested-field-in-elasticsearch/96959)

<div class="topic-metadata">

**Author:** [@Chitrank\_Dixit](https://discuss.elastic.co/u/Chitrank_Dixit)\
**Replies:** 1\
**Last updated:** [August 17, 2017, 2:07pm UTC](https://discuss.elastic.co/t/unable-to-update-the-nested-field-in-elasticsearch/96959 "2017-08-17T14:07:35Z")

</div>

I am working to dump and update the Elasticsearch data, I am able to properly dump the data but I am not able to update the records for example when I do GET test/users/3985882 I would get the following response { "…

---

## [Elaticsearch index shrink issue](https://discuss.elastic.co/t/elaticsearch-index-shrink-issue/97360)

<div class="topic-metadata">

**Author:** [@sreejithps303](https://discuss.elastic.co/u/sreejithps303)\
**Replies:** 3\
**Last updated:** [August 17, 2017, 12:51pm UTC](https://discuss.elastic.co/t/elaticsearch-index-shrink-issue/97360 "2017-08-17T12:51:41Z")

</div>

Hi , I am trying to shrink the indices in elasticsearch. Currenrly i have 5 primary shards and 1 replica . I want to change it to 1 primary and 1 replica shards. i have executed the steps mention in Shrink Index | Ela…

---

## [setAggregations method of SearchRequestBuilder not returning buckets for histogram aggregation](https://discuss.elastic.co/t/setaggregations-method-of-searchrequestbuilder-not-returning-buckets-for-histogram-aggregation/97411)

<div class="topic-metadata">

**Author:** [@prsdSp](https://discuss.elastic.co/u/prsdSp)\
**Replies:** 0\
**Last updated:** [August 17, 2017, 12:31pm UTC](https://discuss.elastic.co/t/setaggregations-method-of-searchrequestbuilder-not-returning-buckets-for-histogram-aggregation/97411 "2017-08-17T12:31:40Z")

</div>

I am trying to use histogram aggregation to create buckets. setAggregations(Map aggregations) method of SearchRequestBuilder is not working as expected. The parameter I am passing to the method is a map, where a single…

---

## [Difference between primary node and replica node](https://discuss.elastic.co/t/difference-between-primary-node-and-replica-node/97366)

<div class="topic-metadata">

**Author:** [@Tushar\_Sharma1](https://discuss.elastic.co/u/Tushar_Sharma1)\
**Replies:** 7\
**Last updated:** [August 17, 2017, 11:35am UTC](https://discuss.elastic.co/t/difference-between-primary-node-and-replica-node/97366 "2017-08-17T11:35:21Z")

</div>

difference between primary-replica node and primary -replica shards ?. as mention on page link given below: https://www.elastic.co/cloud/as-a-service/pricing

---

## [Explain me what is all wrong in Devtool?](https://discuss.elastic.co/t/explain-me-what-is-all-wrong-in-devtool/96975)

<div class="topic-metadata">

**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\
**Replies:** 4\
**Last updated:** [August 17, 2017, 11:25am UTC](https://discuss.elastic.co/t/explain-me-what-is-all-wrong-in-devtool/96975 "2017-08-17T11:25:35Z")

</div>

Hello, I upload lots of data in my els cluster. When i display indice in kibana (GET indices) i find anormal result no ? It’s normal for you ? : green open cra-2017.08.14 eu\_NMngAQrmySQVz7\_XWqA 3 1 690924 173436 295.…

---

## [Will Elasticsearch run on 0.5gb memory?](https://discuss.elastic.co/t/will-elasticsearch-run-on-0-5gb-memory/97309)

<div class="topic-metadata">

**Author:** [@mortenbock](https://discuss.elastic.co/u/mortenbock)\
**Replies:** 4\
**Last updated:** [August 17, 2017, 10:56am UTC](https://discuss.elastic.co/t/will-elasticsearch-run-on-0-5gb-memory/97309 "2017-08-17T10:56:41Z")

</div>

Hi. I am running a low budget website, that is sitting on a windows VM with 2gb of ram. The current memory footprint of the OS and website in total is around 1.3 gb. The reason I want to use Elasticsearch is to have f…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1975)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1977)
