# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1999

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 2000

---

## [Run issue elasticsearch](https://discuss.elastic.co/t/run-issue-elasticsearch/94674)

<div class="topic-metadata">

**Author:** [@marwa](https://discuss.elastic.co/u/marwa)\
**Replies:** 2\
**Last updated:** [July 27, 2017, 11:45am UTC](https://discuss.elastic.co/t/run-issue-elasticsearch/94674 "2017-07-27T11:45:10Z")

</div>

i installed elasticsearch 5.5.0 tar.gz then i configured it i have no error when i run it but the web page doesn’t appear when enter the IP adress and the port 9200 this is the result when i run it \[2017-07-26T18:23:5…

---

## [Reindexing 1.7 to 2.4.4 fails](https://discuss.elastic.co/t/reindexing-1-7-to-2-4-4-fails/94702)

<div class="topic-metadata">

**Author:** [@Marjana](https://discuss.elastic.co/u/Marjana)\
**Replies:** 8\
**Last updated:** [July 27, 2017, 10:44am UTC](https://discuss.elastic.co/t/reindexing-1-7-to-2-4-4-fails/94702 "2017-07-27T10:44:40Z")

</div>

Hi, I am using migration plugin to reindex 1.7.1 indices to 2.4.4, so we can migrate to 5.x. I managed to reindex some indices but most of them are failing. New index gets created but reindex fails. I tried to do it ma…

---

## [Is refresh interval call is sync or async call in elasticsearch](https://discuss.elastic.co/t/is-refresh-interval-call-is-sync-or-async-call-in-elasticsearch/94639)

<div class="topic-metadata">

**Author:** [@krishnaraj221193](https://discuss.elastic.co/u/krishnaraj221193)\
**Replies:** 10\
**Last updated:** [July 27, 2017, 10:28am UTC](https://discuss.elastic.co/t/is-refresh-interval-call-is-sync-or-async-call-in-elasticsearch/94639 "2017-07-27T10:28:26Z")

</div>

hello sir, I'm new to elastic search I needed to know how the refresh interval works internally. lets say resfresh interval is 1 second so after 10 seconds how many refresh call will happen if each refresh completes 5 se…

---

## [Synonyms not working with diacritic chars](https://discuss.elastic.co/t/synonyms-not-working-with-diacritic-chars/94623)

<div class="topic-metadata">

**Author:** [@wiert](https://discuss.elastic.co/u/wiert)\
**Replies:** 1\
**Last updated:** [July 27, 2017, 10:20am UTC](https://discuss.elastic.co/t/synonyms-not-working-with-diacritic-chars/94623 "2017-07-27T10:20:47Z")

</div>

Hi, I'm using ES 5.5 and I'm unable to put some words into the synonyms file (støvmaske, buntebånd, etc). When putting the filter { "settings": { "analysis": { "analyzer": { "synonym\_analyzer": { "t…

---

## [ELK - Time taking to parse](https://discuss.elastic.co/t/elk-time-taking-to-parse/94738)

<div class="topic-metadata">

**Author:** [@paulachinthpaul](https://discuss.elastic.co/u/paulachinthpaul)\
**Replies:** 17\
**Last updated:** [July 27, 2017, 9:59am UTC](https://discuss.elastic.co/t/elk-time-taking-to-parse/94738 "2017-07-27T09:59:34Z")

</div>

I am new to ELK \[ Elasticsearch Logstash and Kibana\]. I have three machines having 30 GB RAM and around 400 GB space I have millions of file to parse \[size is around 300 GB\] I have split the files and placed in thr…

---

## [Tool for monitoring elasticsearch internal operations](https://discuss.elastic.co/t/tool-for-monitoring-elasticsearch-internal-operations/94724)

<div class="topic-metadata">

**Author:** [@krishnaraj221193](https://discuss.elastic.co/u/krishnaraj221193)\
**Replies:** 1\
**Last updated:** [July 27, 2017, 9:21am UTC](https://discuss.elastic.co/t/tool-for-monitoring-elasticsearch-internal-operations/94724 "2017-07-27T09:21:40Z")

</div>

Hello sir, I wanted to know is there any tool for monitoring internal operations of elasticsearch like refresh triggered or CRUD operations triggered

---

## [Elastic\_sql](https://discuss.elastic.co/t/elastic-sql/94734)

<div class="topic-metadata">

**Author:** [@rapolu\_vinod](https://discuss.elastic.co/u/rapolu_vinod)\
**Replies:** 1\
**Last updated:** [July 27, 2017, 9:21am UTC](https://discuss.elastic.co/t/elastic-sql/94734 "2017-07-27T09:21:08Z")

</div>

Hi, I want to get the distinct values using elastic-sql. How can I get that. select distinct column\_name from tablename this query giving total data of that column,but i need distinct values. thanks …

---

## [Percentile based on already aggregated data](https://discuss.elastic.co/t/percentile-based-on-already-aggregated-data/94744)

<div class="topic-metadata">

**Author:** [@blayneliu](https://discuss.elastic.co/u/blayneliu)\
**Replies:** 1\
**Last updated:** [July 27, 2017, 8:14am UTC](https://discuss.elastic.co/t/percentile-based-on-already-aggregated-data/94744 "2017-07-27T08:14:44Z")

</div>

Hi all, There is a requirement from my project that we need to compute percentiles based on aggregated data. For instance we have the following data records: throughput count 100 5 200 1 800 4 So ideally,…

---

## [Ingest pipeline context modification inconsistent](https://discuss.elastic.co/t/ingest-pipeline-context-modification-inconsistent/94516)

<div class="topic-metadata">

**Author:** [@andrask](https://discuss.elastic.co/u/andrask)\
**Replies:** 2\
**Last updated:** [July 27, 2017, 7:53am UTC](https://discuss.elastic.co/t/ingest-pipeline-context-modification-inconsistent/94516 "2017-07-27T07:53:43Z")

</div>

I'm trying to setup an ingest pipeline that enhances the metricbeat dataset. Here are two example processors that expose the peculiarity (this is a test setup): "script": { "inline": "if (ctx.system.process.use…

---

## [Unable to create geopoint field for mapping in Kibana](https://discuss.elastic.co/t/unable-to-create-geopoint-field-for-mapping-in-kibana/94720)

<div class="topic-metadata">

**Author:** [@David9](https://discuss.elastic.co/u/David9)\
**Replies:** 0\
**Last updated:** [July 27, 2017, 1:23am UTC](https://discuss.elastic.co/t/unable-to-create-geopoint-field-for-mapping-in-kibana/94720 "2017-07-27T01:23:25Z")

</div>

Relatively new user to ES and Kibana, latest versions. I can't resolve how to configure things so that Kibana can map geopoints. We're using the ingest-geoip processor and know how to make that take an ip address field…

---

## [ES5.5 warning "Content type detection for rest requests is deprecated. Specify the content type using the \[Content-Type\] header." even though the Content-Type header is present](https://discuss.elastic.co/t/es5-5-warning-content-type-detection-for-rest-requests-is-deprecated-specify-the-content-type-using-the-content-type-header-even-though-the-content-type-header-is-present/94502)

<div class="topic-metadata">

**Author:** [@adammichalik](https://discuss.elastic.co/u/adammichalik)\
**Replies:** 1\
**Last updated:** [July 27, 2017, 7:32am UTC](https://discuss.elastic.co/t/es5-5-warning-content-type-detection-for-rest-requests-is-deprecated-specify-the-content-type-using-the-content-type-header-even-though-the-content-type-header-is-present/94502 "2017-07-27T07:32:55Z")

</div>

I see a very weird behaviour after I upgraded from ES 2.3.5 to 5.5.0. I'm using Perl Search::Elasticsearch v. 5.02 (newest available) for sending logs directly to ES. Most of the time all looks fine, but for some request…

---

## [Problem Copyping data from one index to other](https://discuss.elastic.co/t/problem-copyping-data-from-one-index-to-other/94653)

<div class="topic-metadata">

**Author:** [@swatititame](https://discuss.elastic.co/u/swatititame)\
**Replies:** 2\
**Last updated:** [July 27, 2017, 6:52am UTC](https://discuss.elastic.co/t/problem-copyping-data-from-one-index-to-other/94653 "2017-07-27T06:52:41Z")

</div>

Hi, I am trying to copy data from source index(sap-trace-app-logs-k8p) to target index k8pindex but I can't see all the data in kibana.I can see only few records.Please let me know what is wrong here. In my source inde…

---

## [Search Sort using Manual Format Date](https://discuss.elastic.co/t/search-sort-using-manual-format-date/94739)

<div class="topic-metadata">

**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\
**Replies:** 0\
**Last updated:** [July 27, 2017, 5:10am UTC](https://discuss.elastic.co/t/search-sort-using-manual-format-date/94739 "2017-07-27T05:10:54Z")

</div>

I index a manually formatted date: "logtime": "07/26/2017 05:30:00" How to parse this so that I can use this field in sort during my search. TIA

---

## [Synonym multi word issue](https://discuss.elastic.co/t/synonym-multi-word-issue/94736)

<div class="topic-metadata">

**Author:** [@jimmycho](https://discuss.elastic.co/u/jimmycho)\
**Replies:** 0\
**Last updated:** [July 27, 2017, 4:28am UTC](https://discuss.elastic.co/t/synonym-multi-word-issue/94736 "2017-07-27T04:28:41Z")

</div>

I drafted are email for synonym multi word issue. If I want search "lol" to get results has "lol" and "laughing out loud". My index setting: PUT /synonym\_index { "settings": { "analysis" : { "analyzer" : { "my\_a…

---

## [Timeout while resolving the host name](https://discuss.elastic.co/t/timeout-while-resolving-the-host-name/94527)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 2\
**Last updated:** [July 27, 2017, 4:22am UTC](https://discuss.elastic.co/t/timeout-while-resolving-the-host-name/94527 "2017-07-27T04:22:01Z")

</div>

\[2017-07-25T17:42:42,422\]\[WARN \]\[o.e.d.z.UnicastZenPing \] \[node-master-2\] timed out after \[5s\] resolving host \[master-node-1.server.com\] \[2017-07-25T17:42:45,447\]\[INFO \]\[o.e.c.s.ClusterService \] \[node-master-2\] new\_m…

---

## [Querying a complex doc in elasticsearch](https://discuss.elastic.co/t/querying-a-complex-doc-in-elasticsearch/94729)

<div class="topic-metadata">

**Author:** [@pika](https://discuss.elastic.co/u/pika)\
**Replies:** 0\
**Last updated:** [July 27, 2017, 3:54am UTC](https://discuss.elastic.co/t/querying-a-complex-doc-in-elasticsearch/94729 "2017-07-27T03:54:10Z")

</div>

Hello, I am new in the world of elasticsearch. We are dealing in our project with complex docs that we store in our elasticsearch database. This is a part of our doc: "AAA": \[ { "SSS": { …

---

## [ES 5.5.0 will not start up with gce discovery](https://discuss.elastic.co/t/es-5-5-0-will-not-start-up-with-gce-discovery/94541)

<div class="topic-metadata">

**Author:** [@svanschalkwyk](https://discuss.elastic.co/u/svanschalkwyk)\
**Replies:** 21\
**Last updated:** [July 27, 2017, 2:14am UTC](https://discuss.elastic.co/t/es-5-5-0-will-not-start-up-with-gce-discovery/94541 "2017-07-27T02:14:12Z")

</div>

My elasticsearch.yml looks like this: cluster.name: gce-cluster discovery.zen.ping.unicast.hosts: - 104.198.44.16 - 35.184.239.42 http.port: 9200 network.host: \_gce\_ node.data: false node.master: true transport.tcp.po…

---

## [Completion suggester fuzziness ranks typos over exact matches](https://discuss.elastic.co/t/completion-suggester-fuzziness-ranks-typos-over-exact-matches/94717)

<div class="topic-metadata">

**Author:** [@manjhari](https://discuss.elastic.co/u/manjhari)\
**Replies:** 0\
**Last updated:** [July 27, 2017, 12:54am UTC](https://discuss.elastic.co/t/completion-suggester-fuzziness-ranks-typos-over-exact-matches/94717 "2017-07-27T00:54:44Z")

</div>

Hi, I am using the completion suggester for predictive search with fuzziness enabled and am finding that the ranking is favouring typos over exact matches. I.e. in Kiban I use this GET /index/typeahead/\_search { "\_sour…

---

## [Does ElasticSearch support \_bulk API with update\_by\_query](https://discuss.elastic.co/t/does-elasticsearch-support--bulk-api-with-update-by-query/94716)

<div class="topic-metadata">

**Author:** [@begemot](https://discuss.elastic.co/u/begemot)\
**Replies:** 0\
**Last updated:** [July 27, 2017, 12:33am UTC](https://discuss.elastic.co/t/does-elasticsearch-support--bulk-api-with-update-by-query/94716 "2017-07-27T00:33:53Z")

</div>

We would like to use bulk APIs to create/update/delete documents. Is possible to write update statements in \_bulk base on updateby\_query?

---

## [Bulk Indexing performance 10 indices of 1 shard vs 1 index of 10 shards](https://discuss.elastic.co/t/bulk-indexing-performance-10-indices-of-1-shard-vs-1-index-of-10-shards/94404)

<div class="topic-metadata">

**Author:** [@jakesjohn](https://discuss.elastic.co/u/jakesjohn)\
**Replies:** 5\
**Last updated:** [July 27, 2017, 12:07am UTC](https://discuss.elastic.co/t/bulk-indexing-performance-10-indices-of-1-shard-vs-1-index-of-10-shards/94404 "2017-07-27T00:07:14Z")

</div>

From docs, i read that query performance remains same if queried on 10 indices of 1 shard Vs 1 index of 10 shards. What about bulk indexing performance for the same situation: Bulk indexing on 10 indices of 1 shard …

---

## [Elasticsearch and picklists?](https://discuss.elastic.co/t/elasticsearch-and-picklists/94706)

<div class="topic-metadata">

**Author:** [@esearch](https://discuss.elastic.co/u/esearch)\
**Replies:** 3\
**Last updated:** [July 26, 2017, 11:01pm UTC](https://discuss.elastic.co/t/elasticsearch-and-picklists/94706 "2017-07-26T23:01:25Z")

</div>

Is there a way to use Elasticsearch to implement picklists WITHOUT storing all the data? For example, say I have the following data: POST food/dessert/1 { "name" : "banana creme pie", "type" : "pie" } POST f…

---

## [How do I get my Kibana/Elasticsearch 5.4 Server to get logs/graphs for an ISILON OneFS v7.2](https://discuss.elastic.co/t/how-do-i-get-my-kibana-elasticsearch-5-4-server-to-get-logs-graphs-for-an-isilon-onefs-v7-2/94676)

<div class="topic-metadata">

**Author:** [@elJoeyJojo](https://discuss.elastic.co/u/elJoeyJojo)\
**Replies:** 3\
**Last updated:** [July 26, 2017, 10:41pm UTC](https://discuss.elastic.co/t/how-do-i-get-my-kibana-elasticsearch-5-4-server-to-get-logs-graphs-for-an-isilon-onefs-v7-2/94676 "2017-07-26T22:41:49Z")

</div>

Hello, Anybody know how I can get my Kibana/Elasticsearch 5.4 running on Ubuntu 16.04 Xenial to get logs/stats from an ISILON Cluster running OneFS 7.2? I know how to get data/logs/stats from other Linux distribution…

---

## [Combining nested query with bool query](https://discuss.elastic.co/t/combining-nested-query-with-bool-query/94701)

<div class="topic-metadata">

**Author:** [@Velusamy\_Velu](https://discuss.elastic.co/u/Velusamy_Velu)\
**Replies:** 4\
**Last updated:** [July 26, 2017, 10:18pm UTC](https://discuss.elastic.co/t/combining-nested-query-with-bool-query/94701 "2017-07-26T22:18:44Z")

</div>

I'm using ElasticSearch 5.5.1. I want to query a document that has nested objects. I will quote a popular example documented well in the ElasticSearch community. The nested documents are: \[ { "name":"Bob…

---

## [One index for each type, or force all documents to fit one type in one index?](https://discuss.elastic.co/t/one-index-for-each-type-or-force-all-documents-to-fit-one-type-in-one-index/94463)

<div class="topic-metadata">

**Author:** [@Karolinebryn](https://discuss.elastic.co/u/Karolinebryn)\
**Replies:** 1\
**Last updated:** [July 26, 2017, 8:34pm UTC](https://discuss.elastic.co/t/one-index-for-each-type-or-force-all-documents-to-fit-one-type-in-one-index/94463 "2017-07-26T20:34:29Z")

</div>

Hi! I have an index in ES 1.7 and I am working on moving it to ES 5.x. This index has 8 types with very different mappings. Just a few fields are shared across the different types and some of these have different schem…

---

## [Query from ES 2.3 to 5.5](https://discuss.elastic.co/t/query-from-es-2-3-to-5-5/94695)

<div class="topic-metadata">

**Author:** [@mmbtenorio](https://discuss.elastic.co/u/mmbtenorio)\
**Replies:** 2\
**Last updated:** [July 26, 2017, 8:28pm UTC](https://discuss.elastic.co/t/query-from-es-2-3-to-5-5/94695 "2017-07-26T20:28:22Z")

</div>

We're upgrading from ELK 2.3 to ELK 5.5, I'm trying to make this query work, tried to follow the query changes from ES 2.3 to 5.5 but every time I tweak something in it, different errors came up. Maybe someone can help m…

---

## [Elasticsearch query result consensus across replica nodes](https://discuss.elastic.co/t/elasticsearch-query-result-consensus-across-replica-nodes/94472)

<div class="topic-metadata">

**Author:** [@NathanBaulch](https://discuss.elastic.co/u/NathanBaulch)\
**Replies:** 1\
**Last updated:** [July 26, 2017, 8:20pm UTC](https://discuss.elastic.co/t/elasticsearch-query-result-consensus-across-replica-nodes/94472 "2017-07-26T20:20:43Z")

</div>

I'm working on a project that uses Elasticsearch as a primary data store for sensitive data that needs to be resilient to corruption. The indexes are split into 5 shards with 2 replicas across 3 machines. Is there a bu…

---

## [Following elasticstack installation instructions and got hung up](https://discuss.elastic.co/t/following-elasticstack-installation-instructions-and-got-hung-up/94507)

<div class="topic-metadata">

**Author:** [@lucasjkr](https://discuss.elastic.co/u/lucasjkr)\
**Replies:** 8\
**Last updated:** [July 26, 2017, 8:07pm UTC](https://discuss.elastic.co/t/following-elasticstack-installation-instructions-and-got-hung-up/94507 "2017-07-26T20:07:19Z")

</div>

I'm using an Ubuntu VM, and following the instructions listed here: https://www.elastic.co/guide/en/elasticsearch/reference/5.5/deb.html Here is a complete list of the commands I've executed (post Ubuntu installation): …

---

## [Delay before being able to retrieve indexed documents](https://discuss.elastic.co/t/delay-before-being-able-to-retrieve-indexed-documents/94681)

<div class="topic-metadata">

**Author:** [@keithag](https://discuss.elastic.co/u/keithag)\
**Replies:** 1\
**Last updated:** [July 26, 2017, 7:58pm UTC](https://discuss.elastic.co/t/delay-before-being-able-to-retrieve-indexed-documents/94681 "2017-07-26T19:58:21Z")

</div>

Observation: Using the Java client, after I index a document then I must wait a short time (less than a second) before a wildcard search succeeds. On the other hand, immediately retrieving by document id works. I'm usi…

---

## [JSON Query via REST from Java client](https://discuss.elastic.co/t/json-query-via-rest-from-java-client/93760)

<div class="topic-metadata">

**Author:** [@Velusamy\_Velu](https://discuss.elastic.co/u/Velusamy_Velu)\
**Replies:** 4\
**Last updated:** [July 26, 2017, 7:22pm UTC](https://discuss.elastic.co/t/json-query-via-rest-from-java-client/93760 "2017-07-26T19:22:21Z")

</div>

Friends: I want to know the way to send a query in JSON format to ES from Java via a REST API. For example one of my query is given below the signature line. I want to construct an end point in my Java client like this…

---

## [RemoteTransportException triggered by parent circuit breaker](https://discuss.elastic.co/t/remotetransportexception-triggered-by-parent-circuit-breaker/94690)

<div class="topic-metadata">

**Author:** [@bwdezend](https://discuss.elastic.co/u/bwdezend)\
**Replies:** 0\
**Last updated:** [July 26, 2017, 7:02pm UTC](https://discuss.elastic.co/t/remotetransportexception-triggered-by-parent-circuit-breaker/94690 "2017-07-26T19:02:20Z")

</div>

The indices.breaker.total.limit setting in Elasticsearch 5.5.0 seems to trap and break for network transport. We had set the parent breaker very low (20% of heap) trying to debug a different issue, and during the overnig…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1998)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=2000)
