# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1983

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1984

---

## [Snapshot Strategy for archival](https://discuss.elastic.co/t/snapshot-strategy-for-archival/96672)

<div class="topic-metadata">

**Author:** [@cgspohn](https://discuss.elastic.co/u/cgspohn)\
**Replies:** 2\
**Last updated:** [August 10, 2017, 9:27pm UTC](https://discuss.elastic.co/t/snapshot-strategy-for-archival/96672 "2017-08-10T21:27:42Z")

</div>

Hello, for disclamer: I am well aware that snapshots created on a certain version of elasticsearch may only be restored in a cluster of the same version, and that snapshots are not a real archival full-proof solution, b…

---

## [How to execute save search from REST API in elasticsearch](https://discuss.elastic.co/t/how-to-execute-save-search-from-rest-api-in-elasticsearch/96671)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 1\
**Last updated:** [August 10, 2017, 9:07pm UTC](https://discuss.elastic.co/t/how-to-execute-save-search-from-rest-api-in-elasticsearch/96671 "2017-08-10T21:07:21Z")

</div>

Hi all i would like to know is it possible to execute save search (which is created in kibana) through REST API to get save search result as we can do that in kibana Discover page Thank you

---

## [\_bulk occasionally failing, not giving me enough info](https://discuss.elastic.co/t/-bulk-occasionally-failing-not-giving-me-enough-info/96491)

<div class="topic-metadata">

**Author:** [@roborich](https://discuss.elastic.co/u/roborich)\
**Replies:** 3\
**Last updated:** [August 10, 2017, 9:00pm UTC](https://discuss.elastic.co/t/-bulk-occasionally-failing-not-giving-me-enough-info/96491 "2017-08-10T21:00:26Z")

</div>

I am importing data from a csv -\> logstash -\> elasticsearch and about 1% of my data ends up vanishing. Logstash doesn’t have anything showing up in the logs. However elasticsearch is showing this error for each missing…

---

## [ELastic Stack Installation](https://discuss.elastic.co/t/elastic-stack-installation/96591)

<div class="topic-metadata">

**Author:** [@Vineeth604](https://discuss.elastic.co/u/Vineeth604)\
**Replies:** 1\
**Last updated:** [August 10, 2017, 8:55pm UTC](https://discuss.elastic.co/t/elastic-stack-installation/96591 "2017-08-10T20:55:16Z")

</div>

I am not that much familiar to elastic stack and linux. My machine’s os is CentOS release 6.8 . Previously I installed elastic stack in lower machines using root user and started the service using the same. The stack …

---

## [Elastic search is failed for correct username and password](https://discuss.elastic.co/t/elastic-search-is-failed-for-correct-username-and-password/96668)

<div class="topic-metadata">

**Author:** [@woodson](https://discuss.elastic.co/u/woodson)\
**Replies:** 1\
**Last updated:** [August 10, 2017, 8:50pm UTC](https://discuss.elastic.co/t/elastic-search-is-failed-for-correct-username-and-password/96668 "2017-08-10T20:50:42Z")

</div>

Hi All, I am new to elastic search. installed elastic search V5.5.1 as service. While accessing localhost:9200 its asking username and password. i gave correct credential and still its failed. i Know most of people f…

---

## [Machine Learning - Single Metric Job - Empty 'Field' combobox](https://discuss.elastic.co/t/machine-learning-single-metric-job-empty-field-combobox/96596)

<div class="topic-metadata">

**Author:** [@kmaci3k](https://discuss.elastic.co/u/kmaci3k)\
**Replies:** 3\
**Last updated:** [August 10, 2017, 6:46pm UTC](https://discuss.elastic.co/t/machine-learning-single-metric-job-empty-field-combobox/96596 "2017-08-10T18:46:57Z")

</div>

Hi, I'm trying to set up a single metric machine learning job but after selecting 'index' and 'Aggregation' the 'Field' combobox is just empty. Here is my json: { "\_index": "metrics-2017.08.10", "\_type": "log", "\_…

---

## [Facing Bulk queue rejection on index requests](https://discuss.elastic.co/t/facing-bulk-queue-rejection-on-index-requests/95426)

<div class="topic-metadata">

**Author:** [@darthburrito](https://discuss.elastic.co/u/darthburrito)\
**Replies:** 4\
**Last updated:** [August 10, 2017, 6:37pm UTC](https://discuss.elastic.co/t/facing-bulk-queue-rejection-on-index-requests/95426 "2017-08-10T18:37:17Z")

</div>

Hi All, Stack trace Error: \[es\_rejected\_execution\_exception\] rejected execution of org.elasticsearch.transport.TransportService$7@1b3a4fac on EsThreadPoolExecutor\[bulk, queue capacity = 1000, org.elasticsearch.common.ut…

---

## [Not able to run elasticsearch: elasticsearch dead but subsys locked](https://discuss.elastic.co/t/not-able-to-run-elasticsearch-elasticsearch-dead-but-subsys-locked/96640)

<div class="topic-metadata">

**Author:** [@shashwat](https://discuss.elastic.co/u/shashwat)\
**Replies:** 1\
**Last updated:** [August 10, 2017, 6:24pm UTC](https://discuss.elastic.co/t/not-able-to-run-elasticsearch-elasticsearch-dead-but-subsys-locked/96640 "2017-08-10T18:24:35Z")

</div>

Hi, I installed elasticsearch 5.5.1. After installation , I was able to run it properly on linux machine. Just, I wanted to access it from my remote windows machine. So, I modified /etc/elasticsearch/elasticsearch.yml f…

---

## [How to delete elasticsearch cross cluster search seed 5.5.1-1](https://discuss.elastic.co/t/how-to-delete-elasticsearch-cross-cluster-search-seed-5-5-1-1/96459)

<div class="topic-metadata">

**Author:** [@chartley42](https://discuss.elastic.co/u/chartley42)\
**Replies:** 3\
**Last updated:** [August 10, 2017, 5:42pm UTC](https://discuss.elastic.co/t/how-to-delete-elasticsearch-cross-cluster-search-seed-5-5-1-1/96459 "2017-08-10T17:42:06Z")

</div>

I’m running elasticsearch 5.5.1-1 and x-pack for monitoring. Elasticsearch’s documentation say’s I should be able to add the following code to my elasticsearch.yml file for cross cluster search seeding: search: rem…

---

## [Trouble with Phrase Suggester](https://discuss.elastic.co/t/trouble-with-phrase-suggester/96511)

<div class="topic-metadata">

**Author:** [@nikhiltri](https://discuss.elastic.co/u/nikhiltri)\
**Replies:** 2\
**Last updated:** [August 10, 2017, 5:07pm UTC](https://discuss.elastic.co/t/trouble-with-phrase-suggester/96511 "2017-08-10T17:07:05Z")

</div>

I’m having some trouble implementing the Phrase Suggester using the examples provided in the documentation (https://www.elastic.co/guide/en/elasticsearch/reference/current/search-suggesters-phrase.html). I’ve got this m…

---

## [Es 5.5.1 \[size\] query malformed, no start\_object after query name](https://discuss.elastic.co/t/es-5-5-1-size-query-malformed-no-start-object-after-query-name/96635)

<div class="topic-metadata">

**Author:** [@JnKollo](https://discuss.elastic.co/u/JnKollo)\
**Replies:** 0\
**Last updated:** [August 10, 2017, 3:12pm UTC](https://discuss.elastic.co/t/es-5-5-1-size-query-malformed-no-start-object-after-query-name/96635 "2017-08-10T15:12:38Z")

</div>

Hello Es community ! We are upgrading Elasticsearch 1.7 to 5.5 in my company. Always got this exceptions : {"error":{"root\_cause":\[{"type":"parsing\_exception","reason":"\[size\] query malformed, no start\_object after qu…

---

## [Prioritize a Master node in ES Cluster](https://discuss.elastic.co/t/prioritize-a-master-node-in-es-cluster/96588)

<div class="topic-metadata">

**Author:** [@sukeshss](https://discuss.elastic.co/u/sukeshss)\
**Replies:** 3\
**Last updated:** [August 10, 2017, 3:56pm UTC](https://discuss.elastic.co/t/prioritize-a-master-node-in-es-cluster/96588 "2017-08-10T15:56:08Z")

</div>

Hi, My ES Cluster contains 3 Master nodes (01,02 and 03) and 3 Data nodes (04,05 and 06). When Master 01 goes down, either of the Master nodes 02 or 03 will act as Master. Current Situation : When Master 01 comes onli…

---

## [Invalid snapshot name \[\_restore\], must not start with '\_'](https://discuss.elastic.co/t/invalid-snapshot-name--restore-must-not-start-with--/96622)

<div class="topic-metadata">

**Author:** [@EpiqSty](https://discuss.elastic.co/u/EpiqSty)\
**Replies:** 4\
**Last updated:** [August 10, 2017, 3:50pm UTC](https://discuss.elastic.co/t/invalid-snapshot-name--restore-must-not-start-with--/96622 "2017-08-10T15:50:06Z")

</div>

Hello, I tried to restore data from elasticsearch 2.4.3 cluster to new 5.5.1, and faced with strange issue: New ES 5.5.1 seen the snapshots itself: $ curl -XGET 'localhost:9200/\_snapshot/backup/sl-backup-2017.08.10?pr…

---

## [Is REST Client for Elasticsearch the only way to go in the future?](https://discuss.elastic.co/t/is-rest-client-for-elasticsearch-the-only-way-to-go-in-the-future/93233)

<div class="topic-metadata">

**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\
**Replies:** 14\
**Last updated:** [August 10, 2017, 2:55pm UTC](https://discuss.elastic.co/t/is-rest-client-for-elasticsearch-the-only-way-to-go-in-the-future/93233 "2017-08-10T14:55:59Z")

</div>

I recently attended an Elasticsearch Developers course and understand that the Java API will be dropped in the near future and the Java REST client is the way to go. A Elasticsearch blog post seemed to confirm this too…

---

## [java.security.AccessControlException for plugin](https://discuss.elastic.co/t/java-security-accesscontrolexception-for-plugin/96235)

<div class="topic-metadata">

**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\
**Replies:** 7\
**Last updated:** [August 10, 2017, 1:13pm UTC](https://discuss.elastic.co/t/java-security-accesscontrolexception-for-plugin/96235 "2017-08-10T13:13:32Z")

</div>

I build a plugin of my own and the plugin layout is below: ${plugin\_root}/dict(this is a folder) ${plugin\_root}/plugin-descriptor.properties ${plugin\_root}/plugin-security.policy ${plugin\_root}/a.jar ${plugin\_root}/…

---

## [Elasticsearch setting a start node](https://discuss.elastic.co/t/elasticsearch-setting-a-start-node/96230)

<div class="topic-metadata">

**Author:** [@bilpor](https://discuss.elastic.co/u/bilpor)\
**Replies:** 1\
**Last updated:** [August 10, 2017, 1:12pm UTC](https://discuss.elastic.co/t/elasticsearch-setting-a-start-node/96230 "2017-08-10T13:12:36Z")

</div>

HI All, I have a directory structure: w:\\docs w:\\docs\\set1 w:\\docs\\set2 etc. In my config W:\\docs is set as my root directory for elasticsearch. For most searches starting here is fine, but On some searches I know t…

---

## [Elastic Search not getting installed in CentOS](https://discuss.elastic.co/t/elastic-search-not-getting-installed-in-centos/96609)

<div class="topic-metadata">

**Author:** [@Vineeth604](https://discuss.elastic.co/u/Vineeth604)\
**Replies:** 1\
**Last updated:** [August 10, 2017, 1:12pm UTC](https://discuss.elastic.co/t/elastic-search-not-getting-installed-in-centos/96609 "2017-08-10T13:12:06Z")

</div>

While installing elastic search, we are facing issue related to the logging and following error message is getting displayed: Unable to create file /var/log/elasticsearch/elasticsearch.log java.io.IOException: Could not…

---

## [ES slower after memory upgrade](https://discuss.elastic.co/t/es-slower-after-memory-upgrade/96307)

<div class="topic-metadata">

**Author:** [@Nicolas\_Garfinkiel](https://discuss.elastic.co/u/Nicolas_Garfinkiel)\
**Replies:** 3\
**Last updated:** [August 10, 2017, 12:42pm UTC](https://discuss.elastic.co/t/es-slower-after-memory-upgrade/96307 "2017-08-10T12:42:05Z")

</div>

Hello, I just upgraded the memory of my 3 nodes cluster from 16GB each to 64GB and notice that performance has declined by 30%. Furthermore, at some random points some requests take 100 times more to finish than it usua…

---

## [Merging two indexes by a common field](https://discuss.elastic.co/t/merging-two-indexes-by-a-common-field/96576)

<div class="topic-metadata">

**Author:** [@marwa](https://discuss.elastic.co/u/marwa)\
**Replies:** 11\
**Last updated:** [August 10, 2017, 12:04pm UTC](https://discuss.elastic.co/t/merging-two-indexes-by-a-common-field/96576 "2017-08-10T12:04:36Z")

</div>

Hi, I have an index named ‘transactions’ and an other one called ‘costs’ the transactions indexe contains { product\_id: “1111”, price\_unit: “23.56”, customer\_name:“Marda Elbin” } the costs index contains the id of ea…

---

## [Java transport client doing chinese match query hit nothing](https://discuss.elastic.co/t/java-transport-client-doing-chinese-match-query-hit-nothing/96571)

<div class="topic-metadata">

**Author:** [@douxf](https://discuss.elastic.co/u/douxf)\
**Replies:** 6\
**Last updated:** [August 10, 2017, 10:47am UTC](https://discuss.elastic.co/t/java-transport-client-doing-chinese-match-query-hit-nothing/96571 "2017-08-10T10:47:50Z")

</div>

Elasticsearch version (bin/elasticsearch --version): Version: 2.4.4, Build: fcbb46d/2017-01-03T11:33:16Z, JVM: 1.8.0\_112 Plugins installed: \[\] ik, head JVM version (java -version): JVM: 1.8.0\_112 OS version (uname …

---

## [Suggesters with count of items](https://discuss.elastic.co/t/suggesters-with-count-of-items/95915)

<div class="topic-metadata">

**Author:** [@MegaClicker](https://discuss.elastic.co/u/MegaClicker)\
**Replies:** 1\
**Last updated:** [August 10, 2017, 10:24am UTC](https://discuss.elastic.co/t/suggesters-with-count-of-items/95915 "2017-08-10T10:24:38Z")

</div>

Hello, How to implement Suggesters with count? like this - I do not know how to take count with Suggesters in one request -thank you in advance

---

## [Threadpool.bulk.queue\_size is not working in ES 5.5.1](https://discuss.elastic.co/t/threadpool-bulk-queue-size-is-not-working-in-es-5-5-1/96443)

<div class="topic-metadata">

**Author:** [@sukeshss](https://discuss.elastic.co/u/sukeshss)\
**Replies:** 2\
**Last updated:** [August 10, 2017, 10:22am UTC](https://discuss.elastic.co/t/threadpool-bulk-queue-size-is-not-working-in-es-5-5-1/96443 "2017-08-10T10:22:25Z")

</div>

Hi, I am using ES 5.5.1. how I can configure threadpool.bulk.queue\_size. When I added this, ES failed to start.

---

## [Elasticsearch 5.5 Jar hell problem](https://discuss.elastic.co/t/elasticsearch-5-5-jar-hell-problem/96281)

<div class="topic-metadata">

**Author:** [@sankard](https://discuss.elastic.co/u/sankard)\
**Replies:** 3\
**Last updated:** [August 10, 2017, 9:28am UTC](https://discuss.elastic.co/t/elasticsearch-5-5-jar-hell-problem/96281 "2017-08-10T09:28:41Z")

</div>

Hello I build elasticsearch 5.5.1 rpm using alsticsearch tar file, I see below error while trying to start elasticsearch service. Could not able find the reason. Please help me \[2017-08-08T12:52:52,615\]\[ERROR\]\[o.e.b.B…

---

## [Elasticsearch won't index any documents after installing X-Pack](https://discuss.elastic.co/t/elasticsearch-wont-index-any-documents-after-installing-x-pack/96468)

<div class="topic-metadata">

**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\
**Replies:** 1\
**Last updated:** [August 10, 2017, 8:49am UTC](https://discuss.elastic.co/t/elasticsearch-wont-index-any-documents-after-installing-x-pack/96468 "2017-08-10T08:49:17Z")

</div>

After installing X-Pack and restarting Elasticsearch I’m getting thousands of lines of exceptions in the Elasticsearch logs, and none of my input documents that I’m expecting are getting indexed. I’ve got a vast number …

---

## [AWS Cloud Trail Logs](https://discuss.elastic.co/t/aws-cloud-trail-logs/96277)

<div class="topic-metadata">

**Author:** [@bmanilkumar](https://discuss.elastic.co/u/bmanilkumar)\
**Replies:** 1\
**Last updated:** [August 10, 2017, 8:22am UTC](https://discuss.elastic.co/t/aws-cloud-trail-logs/96277 "2017-08-10T08:22:02Z")

</div>

Hi Team, I am trying to configure AWS Cloud Trail log in Elastic Search using logstash and Kibana, can you please guide me how to configure the same. Regard

---

## [URL with special characters when searched not working in ElasticSearch 5.2.2](https://discuss.elastic.co/t/url-with-special-characters-when-searched-not-working-in-elasticsearch-5-2-2/96552)

<div class="topic-metadata">

**Author:** [@abhisekdg](https://discuss.elastic.co/u/abhisekdg)\
**Replies:** 2\
**Last updated:** [August 10, 2017, 8:15am UTC](https://discuss.elastic.co/t/url-with-special-characters-when-searched-not-working-in-elasticsearch-5-2-2/96552 "2017-08-10T08:15:43Z")

</div>

I am not able to search URL’s which contains special characters like http://example.sample.com/guide/Analyzers\_Terms\_and\_Analysis\_(ABC)\_Guide Suppose I have indexed 4 noteText http://example.sample.com/guide/Analyzer…

---

## [Starting elasticsearch: which: no java in (/sbin:/usr/sbin:/bin:/usr/bin) Could not find any executable java binary. Please install java in your PATH or set JAVA\_HOME](https://discuss.elastic.co/t/starting-elasticsearch-which-no-java-in-sbin-usr-sbin-bin-usr-bin-could-not-find-any-executable-java-binary-please-install-java-in-your-path-or-set-java-home/96546)

<div class="topic-metadata">

**Author:** [@shashwat](https://discuss.elastic.co/u/shashwat)\
**Replies:** 2\
**Last updated:** [August 10, 2017, 8:16am UTC](https://discuss.elastic.co/t/starting-elasticsearch-which-no-java-in-sbin-usr-sbin-bin-usr-bin-could-not-find-any-executable-java-binary-please-install-java-in-your-path-or-set-java-home/96546 "2017-08-10T08:16:45Z")

</div>

Hi, I am installing elasticsearch 5.5.1 on Linux 64 bit machine without root access. After installation, When I run following command to start service : sudo -i service elasticsearch start I get this error message: S…

---

## [Type =\> "logstash-indexer-input"](https://discuss.elastic.co/t/type-logstash-indexer-input/96298)

<div class="topic-metadata">

**Author:** [@fabio-fiorentino](https://discuss.elastic.co/u/fabio-fiorentino)\
**Replies:** 1\
**Last updated:** [August 10, 2017, 8:15am UTC](https://discuss.elastic.co/t/type-logstash-indexer-input/96298 "2017-08-10T08:15:59Z")

</div>

Hi all logstash keeps on complaining about the syntax i used in the type definition inside the file i created logstash-rabbit.conf, pls can you tell me the correct type to use? thanks

---

## [RED Status Cluster - UNASSIGNED CLUSTER\_RECOVERED](https://discuss.elastic.co/t/red-status-cluster-unassigned-cluster-recovered/96304)

<div class="topic-metadata">

**Author:** [@ELK\_GB](https://discuss.elastic.co/u/ELK_GB)\
**Replies:** 2\
**Last updated:** [August 10, 2017, 8:15am UTC](https://discuss.elastic.co/t/red-status-cluster-unassigned-cluster-recovered/96304 "2017-08-10T08:15:39Z")

</div>

Hi, I have read many resources on red cluster, but I would really appreciate it if someone can tell me what to do here, as I’m stuck at this point not knowing what could work. \*\*\*Please note I took out cluster status d…

---

## [Cross Index Migration](https://discuss.elastic.co/t/cross-index-migration/96316)

<div class="topic-metadata">

**Author:** [@chandu507.m](https://discuss.elastic.co/u/chandu507.m)\
**Replies:** 1\
**Last updated:** [August 10, 2017, 8:14am UTC](https://discuss.elastic.co/t/cross-index-migration/96316 "2017-08-10T08:14:53Z")

</div>

Hello, I am trying to migrate my Indexes with version upgrade. The challenge here is I want to migrate the data to a modified index i.e. with less number fields and change in Field type on need basis. Example: If Ind…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1982)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1984)
