# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1985

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1986

---

## [Elasticsearch plugin installation error](https://discuss.elastic.co/t/elasticsearch-plugin-installation-error/96386)

<div class="topic-metadata">

**Author:** [@groot](https://discuss.elastic.co/u/groot)\
**Replies:** 1\
**Last updated:** [August 9, 2017, 7:33am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-installation-error/96386 "2017-08-09T07:33:36Z")

</div>

Hi , While I’m try to install a package such “license & shield” via command “bin/elasticsearch-plugin install” I’m getting error : ERROR: Unknown plugin license I tried to install the packed as written in your documen…

---

## [Balancing between different size of nodes?](https://discuss.elastic.co/t/balancing-between-different-size-of-nodes/96362)

<div class="topic-metadata">

**Author:** [@yongtao](https://discuss.elastic.co/u/yongtao)\
**Replies:** 1\
**Last updated:** [August 9, 2017, 6:57am UTC](https://discuss.elastic.co/t/balancing-between-different-size-of-nodes/96362 "2017-08-09T06:57:32Z")

</div>

Hi, I have a small cluster with 2 nodes. It’s overloaded, and the only resource I have is a “half” node (with half of RAM). I added it to the cluster, hoping that it will help at least a bit. It ends up with 10% more da…

---

## [ElasticSearch segment size too small](https://discuss.elastic.co/t/elasticsearch-segment-size-too-small/96268)

<div class="topic-metadata">

**Author:** [@bforevdr](https://discuss.elastic.co/u/bforevdr)\
**Replies:** 1\
**Last updated:** [August 9, 2017, 5:59am UTC](https://discuss.elastic.co/t/elasticsearch-segment-size-too-small/96268 "2017-08-09T05:59:03Z")

</div>

We have a Elasticsearch cluster of four nodes, each allocated more than 32gb memory, but we found that we got too many small size segments which is about 20mb. We had tried some settings like: indices.memory.index\_buffe…

---

## [Index Management considerations on ES used as search agent on top of cassandra](https://discuss.elastic.co/t/index-management-considerations-on-es-used-as-search-agent-on-top-of-cassandra/96366)

<div class="topic-metadata">

**Author:** [@Naren\_Sree](https://discuss.elastic.co/u/Naren_Sree)\
**Replies:** 1\
**Last updated:** [August 9, 2017, 4:55am UTC](https://discuss.elastic.co/t/index-management-considerations-on-es-used-as-search-agent-on-top-of-cassandra/96366 "2017-08-09T04:55:40Z")

</div>

Hi We are using ES as our search engine for our Cassandra DB. We are dumping our business model data to both Cassandra and Elastic search. I want to design an index management strategy for this scenario. How would I do …

---

## [Handling unique field (Other than the ID)](https://discuss.elastic.co/t/handling-unique-field-other-than-the-id/96034)

<div class="topic-metadata">

**Author:** [@mattkallo](https://discuss.elastic.co/u/mattkallo)\
**Replies:** 2\
**Last updated:** [August 9, 2017, 4:35am UTC](https://discuss.elastic.co/t/handling-unique-field-other-than-the-id/96034 "2017-08-09T04:35:14Z")

</div>

Hi All Need help/suggestions on how to handle this From what I understand reading documentation and previous forum postings, ES supports only the ID field as an unique value field. Pls correct me if I am wrong. We are…

---

## [Field names with '.' vs. object data type hierarchy](https://discuss.elastic.co/t/field-names-with-vs-object-data-type-hierarchy/94941)

<div class="topic-metadata">

**Author:** [@earl.lapus](https://discuss.elastic.co/u/earl.lapus)\
**Replies:** 1\
**Last updated:** [August 9, 2017, 1:37am UTC](https://discuss.elastic.co/t/field-names-with-vs-object-data-type-hierarchy/94941 "2017-08-09T01:37:25Z")

</div>

Object data type hierarchy is expressed by putting ‘.’ characters between object names, as described here I was wondering how this would affect fields in a document that have ‘.’ characters between them but are not mean…

---

## [Elasticsearch 5.2.2 X-Pack: Failed to load plugin class \[org.elasticsearch.xpack.XPackPlugin\]](https://discuss.elastic.co/t/elasticsearch-5-2-2-x-pack-failed-to-load-plugin-class-org-elasticsearch-xpack-xpackplugin/96174)

<div class="topic-metadata">

**Author:** [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\
**Replies:** 4\
**Last updated:** [August 8, 2017, 10:27pm UTC](https://discuss.elastic.co/t/elasticsearch-5-2-2-x-pack-failed-to-load-plugin-class-org-elasticsearch-xpack-xpackplugin/96174 "2017-08-08T22:27:03Z")

</div>

Hi, I have installed X-Pack 5.2.2 on Elasticsearch 5.2.2. I connect from java code to Elastic Search cluster, with none SSL connection. JDK is 1.8.102, I have all X-Pack jars at client classpath. I have use…

---

## [Update multiple documents by java client](https://discuss.elastic.co/t/update-multiple-documents-by-java-client/96343)

<div class="topic-metadata">

**Author:** [@Jessec](https://discuss.elastic.co/u/Jessec)\
**Replies:** 0\
**Last updated:** [August 8, 2017, 9:07pm UTC](https://discuss.elastic.co/t/update-multiple-documents-by-java-client/96343 "2017-08-08T21:07:48Z")

</div>

In my project I want to update multiple documents that match a filter. I look up “Update” in the official references and found: “Note that as of this writing, updates can only be performed on a single document at a time…

---

## [Getting a "RDD element of type java.util.HashMap cannot be used" error](https://discuss.elastic.co/t/getting-a-rdd-element-of-type-java-util-hashmap-cannot-be-used-error/96134)

<div class="topic-metadata">

**Author:** [@Antonio\_Ye](https://discuss.elastic.co/u/Antonio_Ye)\
**Replies:** 6\
**Last updated:** [August 8, 2017, 8:17pm UTC](https://discuss.elastic.co/t/getting-a-rdd-element-of-type-java-util-hashmap-cannot-be-used-error/96134 "2017-08-08T20:17:27Z")

</div>

I am using pyspark and I have an RDD of complex JSON strings that I converted to JSON using python’s json.loads. When I try to save this to elasticsearch using rdd.saveAsNewAPIHadoopFile I get a “RDD element of type java…

---

## [Elasticsearch for Apache Hadoop 6.0.0-beta1 released](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-6-0-0-beta1-released/96335)

<div class="topic-metadata">

**Author:** [@james.baiera](https://discuss.elastic.co/u/james.baiera)\
**Replies:** 0\
**Last updated:** [August 8, 2017, 8:15pm UTC](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-6-0-0-beta1-released/96335 "2017-08-08T20:15:22Z")

</div>

ES-Hadoop 6.0.0-beta1 has been released. Please note this is a beta release. You can read more about these releases in this blog post.

---

## [How to query by size/length of nested property](https://discuss.elastic.co/t/how-to-query-by-size-length-of-nested-property/96334)

<div class="topic-metadata">

**Author:** [@bploetz](https://discuss.elastic.co/u/bploetz)\
**Replies:** 0\
**Last updated:** [August 8, 2017, 7:53pm UTC](https://discuss.elastic.co/t/how-to-query-by-size-length-of-nested-property/96334 "2017-08-08T19:53:59Z")

</div>

Assume the following mapping - A user has a nested array of “posts” objects: PUT users { "settings": { ... }, "mappings": { "user": { "dynamic": false, "\_all": {"enabled": false }, "properties": { "g…

---

## [Bug: Invalid role definition \[null\]](https://discuss.elastic.co/t/bug-invalid-role-definition-null/95837)

<div class="topic-metadata">

**Author:** [@suckowbiz](https://discuss.elastic.co/u/suckowbiz)\
**Replies:** 1\
**Last updated:** [August 8, 2017, 6:52pm UTC](https://discuss.elastic.co/t/bug-invalid-role-definition-null/95837 "2017-08-08T18:52:06Z")

</div>

I was asked to move a bug report here (https://github.com/elastic/elasticsearch/issues/26053): Elasticsearch version (bin/elasticsearch --version): 5.5.1 Plugins installed: \[x-pack\] JVM version (java -version): Java …

---

## [Odd timestamp in syslog gives formatting error in ingest pipeline](https://discuss.elastic.co/t/odd-timestamp-in-syslog-gives-formatting-error-in-ingest-pipeline/95894)

<div class="topic-metadata">

**Author:** [@abd.wsu](https://discuss.elastic.co/u/abd.wsu)\
**Replies:** 1\
**Last updated:** [August 8, 2017, 6:38pm UTC](https://discuss.elastic.co/t/odd-timestamp-in-syslog-gives-formatting-error-in-ingest-pipeline/95894 "2017-08-08T18:38:43Z")

</div>

Hello, The timestamp in my syslog has two spaces between month and day. So my ingets pipeline works fine for days from 10 - 31, but fails for dates 1 - 9. Since these are single dates and not two digits. Is there anywa…

---

## [Missing query vs missing aggregation in Elasticsearch 5.x](https://discuss.elastic.co/t/missing-query-vs-missing-aggregation-in-elasticsearch-5-x/96320)

<div class="topic-metadata">

**Author:** [@dhondup](https://discuss.elastic.co/u/dhondup)\
**Replies:** 0\
**Last updated:** [August 8, 2017, 6:02pm UTC](https://discuss.elastic.co/t/missing-query-vs-missing-aggregation-in-elasticsearch-5-x/96320 "2017-08-08T18:02:08Z")

</div>

Why is missing field in missing query deprecated while it is still being used in missing aggregation? Syntax looks similar, yet one is deprecated while the other is not. Missing query: https://www.elastic.co/guide/en/el…

---

## [What is the advantage of using Ingest Node?](https://discuss.elastic.co/t/what-is-the-advantage-of-using-ingest-node/96308)

<div class="topic-metadata">

**Author:** [@rajesh](https://discuss.elastic.co/u/rajesh)\
**Replies:** 2\
**Last updated:** [August 8, 2017, 5:46pm UTC](https://discuss.elastic.co/t/what-is-the-advantage-of-using-ingest-node/96308 "2017-08-08T17:46:55Z")

</div>

Hi, Can someone explain me the advantage of using Ingest Node? Does it improve Ingestion performance? I am working on Cluster with 4 nodes(3 data nodes and Kiaban and Coordinating node on same box). Thanks in advance…

---

## ["highlight" in query cause long delay](https://discuss.elastic.co/t/highlight-in-query-cause-long-delay/96165)

<div class="topic-metadata">

**Author:** [@sliu](https://discuss.elastic.co/u/sliu)\
**Replies:** 1\
**Last updated:** [August 8, 2017, 4:55pm UTC](https://discuss.elastic.co/t/highlight-in-query-cause-long-delay/96165 "2017-08-08T16:55:01Z")

</div>

Use ElasticSearch 5.4.1. I have a query on a small index (about 30k documents) that takes over one second in search time. I find that once I remove the “highlight” block, the search time is down to about 50ms! “highlig…

---

## [Elasticsearch problem downloading on Windows](https://discuss.elastic.co/t/elasticsearch-problem-downloading-on-windows/96295)

<div class="topic-metadata">

**Author:** [@amish\_ralhan](https://discuss.elastic.co/u/amish_ralhan)\
**Replies:** 2\
**Last updated:** [August 8, 2017, 4:43pm UTC](https://discuss.elastic.co/t/elasticsearch-problem-downloading-on-windows/96295 "2017-08-08T16:43:28Z")

</div>

Hey, When running .\\elasticsearch.bat, I get the following error. \_Elasticsearch requires at least Java 8 but your Java version from “C:\\Program Files\\Java\\jdk1.8.0\_111\\bin\\java.exe” does \_ not meet this requirement I…

---

## [Can you ingest Spring boot logs directly from the App into elastic via TCP](https://discuss.elastic.co/t/can-you-ingest-spring-boot-logs-directly-from-the-app-into-elastic-via-tcp/96302)

<div class="topic-metadata">

**Author:** [@Rob\_Davidson](https://discuss.elastic.co/u/Rob_Davidson)\
**Replies:** 0\
**Last updated:** [August 8, 2017, 3:46pm UTC](https://discuss.elastic.co/t/can-you-ingest-spring-boot-logs-directly-from-the-app-into-elastic-via-tcp/96302 "2017-08-08T15:46:38Z")

</div>

I'm investigating feasability of sending spring boot application logs directly into Elasticsearch. Without using filebeats or logstash. But with the Ingest plugin. I'm wondering if this is possible? If it is possible…

---

## [Alternative to Source Fields](https://discuss.elastic.co/t/alternative-to-source-fields/96279)

<div class="topic-metadata">

**Author:** [@imaravin](https://discuss.elastic.co/u/imaravin)\
**Replies:** 3\
**Last updated:** [August 8, 2017, 3:03pm UTC](https://discuss.elastic.co/t/alternative-to-source-fields/96279 "2017-08-08T15:03:41Z")

</div>

Hi all, I have been thinking about a different approach for source field. Instead of single source field why can’t we store each fields as stored field individually So that we can avoid JSON parsing time. As loading o…

---

## [Help with webhook action body format](https://discuss.elastic.co/t/help-with-webhook-action-body-format/95077)

<div class="topic-metadata">

**Author:** [@devans](https://discuss.elastic.co/u/devans)\
**Replies:** 4\
**Last updated:** [August 8, 2017, 3:01pm UTC](https://discuss.elastic.co/t/help-with-webhook-action-body-format/95077 "2017-08-08T15:01:22Z")

</div>

I’m having problems formatting the json correctly in the body of a webhook action. I’m trying to index a new document into a different index. { "trigger": { "schedule": { "interval": "5m" } }, "inpu…

---

## [Get difference between 2 string arrays](https://discuss.elastic.co/t/get-difference-between-2-string-arrays/96283)

<div class="topic-metadata">

**Author:** [@olegb](https://discuss.elastic.co/u/olegb)\
**Replies:** 0\
**Last updated:** [August 8, 2017, 2:09pm UTC](https://discuss.elastic.co/t/get-difference-between-2-string-arrays/96283 "2017-08-08T14:09:49Z")

</div>

Hi All, I’ve a documents contains an array fields names “my\_tag” and “unique\_id”. I’d like to get differences between 2 unique\_ids with values like { “uid”:1, my\_tag: \[“va1”,“val2”, “val10”\]} and { “uid”:2, my\_tag: \[“va…

---

## [How to do "where field1 exists or field2 does not exist"](https://discuss.elastic.co/t/how-to-do-where-field1-exists-or-field2-does-not-exist/95626)

<div class="topic-metadata">

**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\
**Replies:** 2\
**Last updated:** [August 8, 2017, 1:56pm UTC](https://discuss.elastic.co/t/how-to-do-where-field1-exists-or-field2-does-not-exist/95626 "2017-08-08T13:56:07Z")

</div>

I have a case where I can have bad data I am looking for to correct. The data can either be missing a field called “time” or it can have a field called “bad\_data”. I’m having trouble building the query that would give …

---

## [X-pack installation for elasticsearch fails](https://discuss.elastic.co/t/x-pack-installation-for-elasticsearch-fails/96169)

<div class="topic-metadata">

**Author:** [@ny2359](https://discuss.elastic.co/u/ny2359)\
**Replies:** 2\
**Last updated:** [August 8, 2017, 1:46pm UTC](https://discuss.elastic.co/t/x-pack-installation-for-elasticsearch-fails/96169 "2017-08-08T13:46:24Z")

</div>

installation of x-pack using elasticsearch-plugin.bat install file:\\\\e:\\x-pack-5.5.0.zip generates Exception in thread “main” java.netConnectException: Connection timed out: connect installation for kibana work…

---

## [Elastic search multiple instances or multiple nodes on the same machine](https://discuss.elastic.co/t/elastic-search-multiple-instances-or-multiple-nodes-on-the-same-machine/96254)

<div class="topic-metadata">

**Author:** [@arunvijayam](https://discuss.elastic.co/u/arunvijayam)\
**Replies:** 1\
**Last updated:** [August 8, 2017, 12:44pm UTC](https://discuss.elastic.co/t/elastic-search-multiple-instances-or-multiple-nodes-on-the-same-machine/96254 "2017-08-08T12:44:45Z")

</div>

Hi All, Is there any opportunity to run multiple instances or multiple nodes of elasticsearch in the same machine. I am getting below on running below command. start “ElasticSearch1” /I “cmd” “D:\\SWTOOLS\\Apache\\Serve…

---

## [How to make fuzzy only query with completion suggester?](https://discuss.elastic.co/t/how-to-make-fuzzy-only-query-with-completion-suggester/96264)

<div class="topic-metadata">

**Author:** [@digitalsmile](https://discuss.elastic.co/u/digitalsmile)\
**Replies:** 0\
**Last updated:** [August 8, 2017, 12:02pm UTC](https://discuss.elastic.co/t/how-to-make-fuzzy-only-query-with-completion-suggester/96264 "2017-08-08T12:02:45Z")

</div>

I don’t want completion suggester to touch the exact matches withn the suggest text, i want only typo matches, is it possible?

---

## [Has\_child query with multiple clauses](https://discuss.elastic.co/t/has-child-query-with-multiple-clauses/96256)

<div class="topic-metadata">

**Author:** [@Atul\_Bagga](https://discuss.elastic.co/u/Atul_Bagga)\
**Replies:** 1\
**Last updated:** [August 8, 2017, 11:42am UTC](https://discuss.elastic.co/t/has-child-query-with-multiple-clauses/96256 "2017-08-08T11:42:28Z")

</div>

I am trying to query for parent documents containing children which match my query clauses. Query could be of the form A AND B or A OR B etc. On forming a query for find parents where children name or Description conta…

---

## [Security Policy: AccessControlException](https://discuss.elastic.co/t/security-policy-accesscontrolexception/96116)

<div class="topic-metadata">

**Author:** [@daneitz](https://discuss.elastic.co/u/daneitz)\
**Replies:** 4\
**Last updated:** [August 8, 2017, 11:01am UTC](https://discuss.elastic.co/t/security-policy-accesscontrolexception/96116 "2017-08-08T11:01:11Z")

</div>

I’m building a plugin for Elasticsearch and I have a need to call an external REST API. The current elasticsearch security policy is making this difficult. I get the following error: java.security.AccessControlException…

---

## [Elasticsreach5 for SQL server 2012](https://discuss.elastic.co/t/elasticsreach5-for-sql-server-2012/95932)

<div class="topic-metadata">

**Author:** [@Ahmed.O](https://discuss.elastic.co/u/Ahmed.O)\
**Replies:** 3\
**Last updated:** [August 8, 2017, 10:18am UTC](https://discuss.elastic.co/t/elasticsreach5-for-sql-server-2012/95932 "2017-08-08T10:18:27Z")

</div>

Hi ELK Team, I have been looking for getting SQL server data into elasticsearch, i have gone through several links, nothing worked (JDBC importer also seams doesn’t work with elasticsearch5). can anybody from team assis…

---

## [Don't found value by search request](https://discuss.elastic.co/t/dont-found-value-by-search-request/96124)

<div class="topic-metadata">

**Author:** [@denis.peshkov](https://discuss.elastic.co/u/denis.peshkov)\
**Replies:** 5\
**Last updated:** [August 8, 2017, 10:11am UTC](https://discuss.elastic.co/t/dont-found-value-by-search-request/96124 "2017-08-08T10:11:10Z")

</div>

Hi All, I have a next search request: GET /my\_index/my\_type/\_search { "query": { "bool": { "filter": \[{ "bool": { "should": \[{ "bool": { "must": \[{ …

---

## [Float and integer fields' datatypes](https://discuss.elastic.co/t/float-and-integer-fields-datatypes/96025)

<div class="topic-metadata">

**Author:** [@begemot](https://discuss.elastic.co/u/begemot)\
**Replies:** 4\
**Last updated:** [August 8, 2017, 9:53am UTC](https://discuss.elastic.co/t/float-and-integer-fields-datatypes/96025 "2017-08-08T09:53:30Z")

</div>

https://www.elastic.co/guide/en/elasticsearch/reference/current/number.html and https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping-types.html point that the following numeric data types are suppor…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1984)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1986)
