# Timestamp and \_timestamp

**URL:** <https://discuss.elastic.co/t/timestamp-and--timestamp/15147>\
**Category:** Elasticsearch\
**Created:** [January 8, 2014, 4:50pm UTC](https://discuss.elastic.co/t/timestamp-and--timestamp/15147 "2014-01-08T16:50:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![11124](https://avatars.discourse-cdn.com/v4/letter/1/b5a626/32.png) [@11124](https://discuss.elastic.co/u/11124)\
**Post date:** [January 8, 2014, 4:50pm UTC](https://discuss.elastic.co/t/timestamp-and--timestamp/15147/1 "2014-01-08T16:50:40Z")

</div>

Hi all,  
I have a ES cluster with four nodes and 157 indexes. There are about 140  
mln. entries that occupy around 50 GB size (1 primary index with one  
replica). There are 2 data nodes, one pure master and one client node that  
serve as gate for web requests.  
Last days I started to observe that the cluster becomes very unstable and  
every few hours one of the data server stop unexpectedly. The only solution  
was to reboot all data nodes to be able to process future logging.  
My mapping contains this definitions:  
"Timestamp": {  
"type": "date",  
"format": "date\_time"  
}  
and  
"\_timestamp" : { "enabled" : true, "path" : "Timestamp" },

After some tests I discovered that if I do request with filtering on  
Timestamp the CPU load becomes very high and the cluster gets unstable. All  
incoming events are rejected.  
While when I make requests filtering on \_timestamp everything works well as  
expected.

My question is: why this is happening and what is the source of this  
behavior?  
Any ideas how to fix it?

Thanks in advance,  
Nickolay Kolev

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/2a4cfa7b-fdfe-45a4-8bd2-906d8587a4f4%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/2a4cfa7b-fdfe-45a4-8bd2-906d8587a4f4%40googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:57am UTC](https://discuss.elastic.co/t/timestamp-and--timestamp/15147/2 "2017-07-06T01:57:55Z")

</div>

Closed on July 6, 2017, 1:57am UTC