# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1008 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1009 --- ## [Ignore a multi\_field based on some condition](https://discuss.elastic.co/t/ignore-a-multi-field-based-on-some-condition/220380)
**Author:** [@Emil](https://discuss.elastic.co/u/Emil)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 9:36am UTC](https://discuss.elastic.co/t/ignore-a-multi-field-based-on-some-condition/220380 "2020-02-24T09:36:30Z")
Hi, I'm looking for a way to ignore part of a multi-field based on the value, like ignore\_above does for strings that are too long. Bit vague, so I'll explain my use case first: I have a field in which information is … --- ## [Strange behaviour of one node in a cluster of 33 nodes](https://discuss.elastic.co/t/strange-behaviour-of-one-node-in-a-cluster-of-33-nodes/220603)
**Author:** [@dantonag](https://discuss.elastic.co/u/dantonag)\ **Replies:** 0\ **Last updated:** [February 24, 2020, 9:16am UTC](https://discuss.elastic.co/t/strange-behaviour-of-one-node-in-a-cluster-of-33-nodes/220603 "2020-02-24T09:16:36Z")
Hello, we have a cluster with 33 nodes (8 of which are data nodes) that shows a strange behaviour on one of the instances (named esdn3\_1-v6). At 1.00 in the night, this instance seems to take almost all the write load … --- ## [Elasticsearch cluster configuration help](https://discuss.elastic.co/t/elasticsearch-cluster-configuration-help/217511)
**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 9:03am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-configuration-help/217511 "2020-02-24T09:03:34Z")
i am trying creating ELK cluster but getting confusion at 1 point how exactly these below parameter should be filled? ---------------------------------- Network ----------------------------------- Set the bind address… --- ## [Elast Alert](https://discuss.elastic.co/t/elast-alert/220577)
**Author:** [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 8:56am UTC](https://discuss.elastic.co/t/elast-alert/220577 "2020-02-24T08:56:15Z")
Hi all, I am new to elastic search. I want my ELK stack to generate an alert on the basic of 3 login failed attempts. Can any one help me out that how to achieve this. Need guidance on this. --- ## [I am trying to install elasticsearch on google cloud the status is active although it isn’t letting me connect to 9200 port](https://discuss.elastic.co/t/i-am-trying-to-install-elasticsearch-on-google-cloud-the-status-is-active-although-it-isn-t-letting-me-connect-to-9200-port/220451)
**Author:** [@ms94](https://discuss.elastic.co/u/ms94)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 8:46am UTC](https://discuss.elastic.co/t/i-am-trying-to-install-elasticsearch-on-google-cloud-the-status-is-active-although-it-isn-t-letting-me-connect-to-9200-port/220451 "2020-02-24T08:46:06Z")
I am trying to install elasticsearch on google cloud the status is active although it isn’t letting me connect to 9200 port --- ## [For indexing product attributes, more short text fields vs fewer fields with more words](https://discuss.elastic.co/t/for-indexing-product-attributes-more-short-text-fields-vs-fewer-fields-with-more-words/220548)
**Author:** [@Fong\_Ng](https://discuss.elastic.co/u/Fong_Ng)\ **Replies:** 0\ **Last updated:** [February 23, 2020, 12:35pm UTC](https://discuss.elastic.co/t/for-indexing-product-attributes-more-short-text-fields-vs-fewer-fields-with-more-words/220548 "2020-02-23T12:35:12Z")
I am planning to use elasticsearch to index product attributes. Each document should have around 60 fixed fields. I was reading the documentation about tuning for search speed. It mentions that when query\_string or multi… --- ## [Authentication failed for an OpenID integration](https://discuss.elastic.co/t/authentication-failed-for-an-openid-integration/220390)
**Author:** [@sencer](https://discuss.elastic.co/u/sencer)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 8:10am UTC](https://discuss.elastic.co/t/authentication-failed-for-an-openid-integration/220390 "2020-02-24T08:10:36Z")
Hello, I am using OIDC with Elasticsearch and Kibana. My configuration is as follows: xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification\_mode: certificate … --- ## [Install index mapping stored in a file - elasticsearch 7.x](https://discuss.elastic.co/t/install-index-mapping-stored-in-a-file-elasticsearch-7-x/220355)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 7:38am UTC](https://discuss.elastic.co/t/install-index-mapping-stored-in-a-file-elasticsearch-7-x/220355 "2020-02-24T07:38:56Z")
Hi there, I have a json file with an index mapping definition in it. What is the best way to import it into elasticsearch? I would like to do it via curl / CLI. Cheers! --- ## [Elasticsearch fails to start when xpack security is enabled](https://discuss.elastic.co/t/elasticsearch-fails-to-start-when-xpack-security-is-enabled/220514)
**Author:** [@ljacobs7211](https://discuss.elastic.co/u/ljacobs7211)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 6:06am UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-when-xpack-security-is-enabled/220514 "2020-02-24T06:06:23Z")
Caused by: java.lang.IllegalStateException: failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin\] at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:614) ~\[elasticsearch-7.5.0.ja… --- ## [Quantitative Cluster Sizing](https://discuss.elastic.co/t/quantitative-cluster-sizing/219850)
**Author:** [@sks1234](https://discuss.elastic.co/u/sks1234)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 5:35am UTC](https://discuss.elastic.co/t/quantitative-cluster-sizing/219850 "2020-02-24T05:35:21Z")
Hi I am looking for Sizing Elastic Search Cluster and came across below session which is very informative. https://www.elastic.co/webinars/elasticsearch-sizing-and-capacity-planning I have few questions regarding the se… --- ## [Curator image not working with centos 8 base image](https://discuss.elastic.co/t/curator-image-not-working-with-centos-8-base-image/219970)
**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\ **Replies:** 5\ **Last updated:** [February 24, 2020, 5:27am UTC](https://discuss.elastic.co/t/curator-image-not-working-with-centos-8-base-image/219970 "2020-02-24T05:27:35Z")
Hi, I am trying to build curator image with centos 8 base image. Image is getting built but it is throwing below error while running: Traceback (most recent call last): File "/home/buh/.local/lib/python3.6/site-pack… --- ## [Elasticsearch mappings for ASA](https://discuss.elastic.co/t/elasticsearch-mappings-for-asa/220515)
**Author:** [@digger86](https://discuss.elastic.co/u/digger86)\ **Replies:** 9\ **Last updated:** [February 23, 2020, 9:03pm UTC](https://discuss.elastic.co/t/elasticsearch-mappings-for-asa/220515 "2020-02-23T21:03:18Z")
I am new to using the Elastic stack. What is most important to me is to collect firewall logs from an ASA. One of the challenges is that I cannot not search for networks in the logs because the IP addresses are mapped to… --- ## [Elasticsearch ec2 plugin configuration fail](https://discuss.elastic.co/t/elasticsearch-ec2-plugin-configuration-fail/219432)
**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\ **Replies:** 12\ **Last updated:** [February 23, 2020, 4:09pm UTC](https://discuss.elastic.co/t/elasticsearch-ec2-plugin-configuration-fail/219432 "2020-02-23T16:09:30Z")
I am trying to configure an elasticsearch cluster in aws using the ec2 discovery plugin. I am running on Elasticsearch 7.6 . I have attached an instance-profile that has all the access for ec2. The logs are saying \*\* mas… --- ## [Executing elasticsearch-sql using painless script](https://discuss.elastic.co/t/executing-elasticsearch-sql-using-painless-script/220488)
**Author:** [@yoavb](https://discuss.elastic.co/u/yoavb)\ **Replies:** 1\ **Last updated:** [February 23, 2020, 4:02pm UTC](https://discuss.elastic.co/t/executing-elasticsearch-sql-using-painless-script/220488 "2020-02-23T16:02:36Z")
Hello, \_xpack/sql?format=txt enable to run sql queries using curl. I was wondering if it is possible to run sql queries using painless script. If it is possible , kindly share an example Thanks Yoav --- ## [Increasing replicas vs increasing machine](https://discuss.elastic.co/t/increasing-replicas-vs-increasing-machine/220552)
**Author:** [@royal\_man](https://discuss.elastic.co/u/royal_man)\ **Replies:** 0\ **Last updated:** [February 23, 2020, 1:32pm UTC](https://discuss.elastic.co/t/increasing-replicas-vs-increasing-machine/220552 "2020-02-23T13:32:41Z")
I want to get opinion on increasing the number of replicas vs increasing machine size. Configuration: 1 node 1 shard architecture and I want to double the load on my Elasticsearch cluster. Increasing replicas: If I ma… --- ## [Disk space full elasticsearch](https://discuss.elastic.co/t/disk-space-full-elasticsearch/220037)
**Author:** [@Ilija\_Angeloski](https://discuss.elastic.co/u/Ilija_Angeloski)\ **Replies:** 10\ **Last updated:** [February 23, 2020, 11:00am UTC](https://discuss.elastic.co/t/disk-space-full-elasticsearch/220037 "2020-02-23T11:00:35Z")
After I deleted all the indices the disk space is still almost full, no place is freed up. I tried \`\`\` curl -XPOST 'http://localhost:9200/\_forcemerge?only\_expunge\_deletes=true', but still the disk has same amount. Is th… --- ## [Count of Elastic Search index varying when querying through Presto](https://discuss.elastic.co/t/count-of-elastic-search-index-varying-when-querying-through-presto/220537)
**Author:** [@Mananpreet\_Singh](https://discuss.elastic.co/u/Mananpreet_Singh)\ **Replies:** 0\ **Last updated:** [February 23, 2020, 9:48am UTC](https://discuss.elastic.co/t/count-of-elastic-search-index-varying-when-querying-through-presto/220537 "2020-02-23T09:48:41Z")
--- ## [ElasticSearch won’t install](https://discuss.elastic.co/t/elasticsearch-won-t-install/220493)
**Author:** [@GulfTower](https://discuss.elastic.co/u/GulfTower)\ **Replies:** 1\ **Last updated:** [February 22, 2020, 5:10pm UTC](https://discuss.elastic.co/t/elasticsearch-won-t-install/220493 "2020-02-22T17:10:58Z")
Trying to install Elasticsearch 7.6 on my Win10 laptop. Getting the error below i've bolded: C:\\WINDOWS\\system32\>cd C:\\ELK Stack\\elasticsearch-7.6.0\\bin C:\\ELK Stack\\elasticsearch-7.6.0\\bin\>elasticsearch.bat "could n… --- ## [How to remove fuzziness in Simple Query String?](https://discuss.elastic.co/t/how-to-remove-fuzziness-in-simple-query-string/220078)
**Author:** [@photocurio](https://discuss.elastic.co/u/photocurio)\ **Replies:** 7\ **Last updated:** [February 22, 2020, 4:31pm UTC](https://discuss.elastic.co/t/how-to-remove-fuzziness-in-simple-query-string/220078 "2020-02-22T16:31:00Z")
I am trying to disable fuzziness in my ElasticSearch query. The issue is that a search for medication returns lots of hits for medical. My query is below. The fuzzy\_max\_expansions arg doesn't have any effect. If I ad… --- ## [Elasticsearch index policy creation best practice/performance](https://discuss.elastic.co/t/elasticsearch-index-policy-creation-best-practice-performance/220499)
**Author:** [@Yoandy\_Perez\_Villazo](https://discuss.elastic.co/u/Yoandy_Perez_Villazo)\ **Replies:** 1\ **Last updated:** [February 22, 2020, 4:01pm UTC](https://discuss.elastic.co/t/elasticsearch-index-policy-creation-best-practice-performance/220499 "2020-02-22T16:01:41Z")
He folks, I am designing a search system based on ElasticSearch, after reading a lot I have seen that some systems such as logs use a policy of multiple indexes to save the same content, similar to mylogs-12-02-2020 and… --- ## [Is ElasticSearch meant for long term storage of large datasets?](https://discuss.elastic.co/t/is-elasticsearch-meant-for-long-term-storage-of-large-datasets/220477)
**Author:** [@Basman](https://discuss.elastic.co/u/Basman)\ **Replies:** 2\ **Last updated:** [February 22, 2020, 1:34pm UTC](https://discuss.elastic.co/t/is-elasticsearch-meant-for-long-term-storage-of-large-datasets/220477 "2020-02-22T13:34:16Z")
I have users that all have hundreds of GB’s of documents (pdf, word, etc). I want to use Elastic with the ingest-attachment plugin to make the plaintext contents of these documents searchable. It’s unlikely these documen… --- ## [Help with Boolean query](https://discuss.elastic.co/t/help-with-boolean-query/220483)
**Author:** [@abhijith\_chandran](https://discuss.elastic.co/u/abhijith_chandran)\ **Replies:** 0\ **Last updated:** [February 22, 2020, 12:05pm UTC](https://discuss.elastic.co/t/help-with-boolean-query/220483 "2020-02-22T12:05:08Z")
Hi, I am currently using the following query - { "\_source": \[ "title", "bench", "id\_", "court", "date", "content" \], "size": 15, "from": 0, "query": {… --- ## [\[Query\] Count exist field in elasticsearch](https://discuss.elastic.co/t/query-count-exist-field-in-elasticsearch/220475)
**Author:** [@nathlee](https://discuss.elastic.co/u/nathlee)\ **Replies:** 0\ **Last updated:** [February 22, 2020, 9:07am UTC](https://discuss.elastic.co/t/query-count-exist-field-in-elasticsearch/220475 "2020-02-22T09:07:19Z")
Hi, I have 2 indices which store logs of two events. Now I want to find how many percents user do event A continue do event B so I count userIDs in index A and I want to count userIDs in index B that exist in index A (I… --- ## [Java High Level Rest Create Index API](https://discuss.elastic.co/t/java-high-level-rest-create-index-api/218517)
**Author:** [@andrewmk](https://discuss.elastic.co/u/andrewmk)\ **Replies:** 2\ **Last updated:** [February 22, 2020, 3:42am UTC](https://discuss.elastic.co/t/java-high-level-rest-create-index-api/218517 "2020-02-22T03:42:49Z")
I'm getting the error: Type mismatch: cannot convert from org.elasticsearch.action.admin.indices.create.CreateIndexResponse to org.elasticsearch.client.indices.CreateIndexResponse CreateIndexRequest request = new Creat… --- ## [Timezone in \_sql query](https://discuss.elastic.co/t/timezone-in-sql-query/220358)
**Author:** [@valerica\_georgescu](https://discuss.elastic.co/u/valerica_georgescu)\ **Replies:** 1\ **Last updated:** [February 22, 2020, 2:29am UTC](https://discuss.elastic.co/t/timezone-in-sql-query/220358 "2020-02-22T02:29:35Z")
Hi I use in my etl the \_sql function to select some data from elastic. One simple example: POST \_sql?format=txt { "query": "select max("@timestamp"),monitor.id, monitor.ip, monitor.status from "heartbeat" where "@time… --- ## [7.6.0 with AdoptOpenJDK 13](https://discuss.elastic.co/t/7-6-0-with-adoptopenjdk-13/220053)
**Author:** [@nealef](https://discuss.elastic.co/u/nealef)\ **Replies:** 2\ **Last updated:** [February 21, 2020, 10:19pm UTC](https://discuss.elastic.co/t/7-6-0-with-adoptopenjdk-13/220053 "2020-02-21T22:19:17Z")
I built elasticsearch-oss 7.6.0 cleanly using AdoptOpenJDK 13. However, when I start it I get: org.elasticsearch.transport.BindTransportException: Failed to bind to \[9300-9400\] at org.elasticsearch.transport.Tcp… --- ## [Error loading data - Request to Elasticsearch failed](https://discuss.elastic.co/t/error-loading-data-request-to-elasticsearch-failed/217629)
**Author:** [@Gelinski](https://discuss.elastic.co/u/Gelinski)\ **Replies:** 6\ **Last updated:** [February 21, 2020, 9:02pm UTC](https://discuss.elastic.co/t/error-loading-data-request-to-elasticsearch-failed/217629 "2020-02-21T21:02:43Z")
Hi, I need help to understand what is causing this error in my environment. Tks! Error loading data Request to Elasticsearch failed: {"error":{}} Error: Request to Elasticsearch failed: {"error":{}} at http://elk… --- ## [ES 7.0.1 : Unassigned Shards : Clarifications on how reroute API with retry\_failed parameter works and its side-effects](https://discuss.elastic.co/t/es-7-0-1-unassigned-shards-clarifications-on-how-reroute-api-with-retry-failed-parameter-works-and-its-side-effects/219740)
**Author:** [@Muthukumaran\_Kothand](https://discuss.elastic.co/u/Muthukumaran_Kothand)\ **Replies:** 5\ **Last updated:** [February 21, 2020, 7:57pm UTC](https://discuss.elastic.co/t/es-7-0-1-unassigned-shards-clarifications-on-how-reroute-api-with-retry-failed-parameter-works-and-its-side-effects/219740 "2020-02-21T19:57:52Z")
ES Version : 7.0.1 Cluster Details: 3 physical nodes each running 4 instances of ES - total 12 instances of Cluster Problem description: As part of testing, performed a full cluster-reboot, noticed that some shards (… --- ## [Template ERROR reason: Root mapping definition has unsupported parameters](https://discuss.elastic.co/t/template-error-reason-root-mapping-definition-has-unsupported-parameters/220411)
**Author:** [@Rama\_Krishna\_S](https://discuss.elastic.co/u/Rama_Krishna_S)\ **Replies:** 1\ **Last updated:** [February 21, 2020, 7:16pm UTC](https://discuss.elastic.co/t/template-error-reason-root-mapping-definition-has-unsupported-parameters/220411 "2020-02-21T19:16:20Z")
unable to create template following is my template. #! Deprecation: \[types removal\] The parameter include\_type\_name should be explicitly specified in get template requests to prepare for 7.0. In 7.0 include\_type\_name wi… --- ## ["Your trial license is expired"](https://discuss.elastic.co/t/your-trial-license-is-expired/217361)
**Author:** [@yoavb](https://discuss.elastic.co/u/yoavb)\ **Replies:** 4\ **Last updated:** [February 21, 2020, 6:17pm UTC](https://discuss.elastic.co/t/your-trial-license-is-expired/217361 "2020-02-21T18:17:54Z")
I am getting the following message : \[2020-01-31T11:42:39,671\]\[ERROR\]\[o.e.x.s.a.f.SecurityActionFilter\] \[elk74\] blocking \[cluster:monitor/stats\] operation due to expired license. I have run : curl -uelastic -XPOST 'h… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1007) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1009)