# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1042 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1043 --- ## [Master not discovered or elected yet, an election requires at least 2 nodes](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes/213412)
**Author:** [@li-peng](https://discuss.elastic.co/u/li-peng)\ **Replies:** 4\ **Last updated:** [January 20, 2020, 3:16am UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes/213412 "2020-01-20T03:16:03Z")
\[2019-12-31T14:29:23,954\]\[WARN \]\[o.e.c.c.ClusterFormationFailureHelper\] \[node1\] master not discovered or elected yet, an election requires at least 2 nodes with ids from \[5e3LlD8QTHmGaJDhlKY-8w, cJyHBa9ATf-2vg8Tnt7KeQ,… --- ## [Enable Soundex query](https://discuss.elastic.co/t/enable-soundex-query/215633)
**Author:** [@somesh1980](https://discuss.elastic.co/u/somesh1980)\ **Replies:** 0\ **Last updated:** [January 19, 2020, 5:07pm UTC](https://discuss.elastic.co/t/enable-soundex-query/215633 "2020-01-19T17:07:46Z")
I am using elasticsearch 7.0.1 and trying to enable soundex query First I tried to add following config in elasticsearch.yml index: analysis: analyzer: search\_soundex: type: custom tokenizer: soundex\_filter filt… --- ## [GC allocation failure causing shard to fail](https://discuss.elastic.co/t/gc-allocation-failure-causing-shard-to-fail/215628)
**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\ **Replies:** 0\ **Last updated:** [January 19, 2020, 3:56pm UTC](https://discuss.elastic.co/t/gc-allocation-failure-causing-shard-to-fail/215628 "2020-01-19T15:56:35Z")
In Elastic log I can see master (node-2) removing node-3 and adding multiple times. At around the same time, I see long GC cycles on node-3. \[2020-01-17T01:33:49,904\]\[INFO \]\[o.e.c.s.ClusterApplierService\] \[node-2\] rem… --- ## [Make Elasticsearch understand date/time field Nginx/apache logs](https://discuss.elastic.co/t/make-elasticsearch-understand-date-time-field-nginx-apache-logs/214968)
**Author:** [@spacecabbie](https://discuss.elastic.co/u/spacecabbie)\ **Replies:** 2\ **Last updated:** [January 19, 2020, 2:57pm UTC](https://discuss.elastic.co/t/make-elasticsearch-understand-date-time-field-nginx-apache-logs/214968 "2020-01-19T14:57:50Z")
I am sending my logs from apache and nginx to elasticsearch via rsyslog. Parsing to json: version=2 rule=:%remote\_addr:word% %ident:word% %auth:word% \[%@timestamp:char-to:\]%\] "%method:word% %request:word% HTTP/%httpver… --- ## [A performance issue about elasticsearch on k8s](https://discuss.elastic.co/t/a-performance-issue-about-elasticsearch-on-k8s/214692)
**Author:** [@ftyuuu](https://discuss.elastic.co/u/ftyuuu)\ **Replies:** 10\ **Last updated:** [January 19, 2020, 12:56pm UTC](https://discuss.elastic.co/t/a-performance-issue-about-elasticsearch-on-k8s/214692 "2020-01-19T12:56:38Z")
I'm experiencing an es on k8s performance issue that confuses me, and this is my test environment. First, I have a k8s cluster with 4 nodes, of which 1 master and 3 nodes: NAME STATUS ROLES AGE … --- ## [How the python 2.6.8 to connect the Elasticsearch?](https://discuss.elastic.co/t/how-the-python-2-6-8-to-connect-the-elasticsearch/215561)
**Author:** [@sunnut](https://discuss.elastic.co/u/sunnut)\ **Replies:** 2\ **Last updated:** [January 19, 2020, 12:26pm UTC](https://discuss.elastic.co/t/how-the-python-2-6-8-to-connect-the-elasticsearch/215561 "2020-01-19T12:26:45Z")
The python version is 2.6.8 that ssl has not create\_default\_context. how can i skip the ssl or another method to tansport the ssl certificates besides above --- ## [Meeting a ConnectionError when python connect the elasticsearch?](https://discuss.elastic.co/t/meeting-a-connectionerror-when-python-connect-the-elasticsearch/215621)
**Author:** [@sunnut](https://discuss.elastic.co/u/sunnut)\ **Replies:** 0\ **Last updated:** [January 19, 2020, 12:06pm UTC](https://discuss.elastic.co/t/meeting-a-connectionerror-when-python-connect-the-elasticsearch/215621 "2020-01-19T12:06:14Z")
Code: from elasticsearch import Elasticsearch from ssl import create\_default\_context context = create\_default\_context(cafile="XXX.pem") es = Elasticsearch("https://IP:9200", ssl\_context=context, http\_auth=('username'… --- ## [Slow Ingestion](https://discuss.elastic.co/t/slow-ingestion/215601)
**Author:** [@Kaarthick](https://discuss.elastic.co/u/Kaarthick)\ **Replies:** 2\ **Last updated:** [January 19, 2020, 11:34am UTC](https://discuss.elastic.co/t/slow-ingestion/215601 "2020-01-19T11:34:14Z")
Hi Team, We added a data node in current elasticsearch cluster , currently the shards are getting relocated, i want know because of this whether the ingestion process gets slow thanks in advance --- ## [JavaApi Json representation differs from http Json representation](https://discuss.elastic.co/t/javaapi-json-representation-differs-from-http-json-representation/215618)
**Author:** [@MarcoAbi](https://discuss.elastic.co/u/MarcoAbi)\ **Replies:** 0\ **Last updated:** [January 19, 2020, 11:28am UTC](https://discuss.elastic.co/t/javaapi-json-representation-differs-from-http-json-representation/215618 "2020-01-19T11:28:57Z")
Hi all, I'm using a little BE proxy in nodeJs to redirect FE search request to ES the results I'm getting are like a direct call to http ES endpoint. The result looks like this: where aggregations have names like "2"… --- ## [Elastalert - Connection aborted](https://discuss.elastic.co/t/elastalert-connection-aborted/215587)
**Author:** [@Newtoelastic](https://discuss.elastic.co/u/Newtoelastic)\ **Replies:** 2\ **Last updated:** [January 19, 2020, 10:44am UTC](https://discuss.elastic.co/t/elastalert-connection-aborted/215587 "2020-01-19T10:44:16Z")
Hey there guys, first time trying to work with Elastalert. I am attempting to use the elastalert-create-index command and I getting an odd response back. I used the same host and port on all my other config files and e… --- ## [Cluster Optiomization](https://discuss.elastic.co/t/cluster-optiomization/215610)
**Author:** [@ragian](https://discuss.elastic.co/u/ragian)\ **Replies:** 2\ **Last updated:** [January 19, 2020, 10:21am UTC](https://discuss.elastic.co/t/cluster-optiomization/215610 "2020-01-19T10:21:26Z")
I need to optimize my elasticsearch cluster to have better performance on all kind of queries. The current configuration of the cluster is: Elastic 6.4.0 3 nodes (master, data, ingest) 4 core 16 GB ram (heap 8GB) 1 … --- ## [Wildcard uses](https://discuss.elastic.co/t/wildcard-uses/215613)
**Author:** [@georz](https://discuss.elastic.co/u/georz)\ **Replies:** 0\ **Last updated:** [January 19, 2020, 10:15am UTC](https://discuss.elastic.co/t/wildcard-uses/215613 "2020-01-19T10:15:39Z")
I am using ElasticSearch 5.6.3 I am using text fields, and wants to use wildcard query on that field for every words, i am typing also it should be case insensitive. Lets say i have "Sales & Management", I am typing a… --- ## [Query index in Elasticsearch cluster](https://discuss.elastic.co/t/query-index-in-elasticsearch-cluster/215603)
**Author:** [@bdn](https://discuss.elastic.co/u/bdn)\ **Replies:** 2\ **Last updated:** [January 19, 2020, 9:50am UTC](https://discuss.elastic.co/t/query-index-in-elasticsearch-cluster/215603 "2020-01-19T09:50:20Z")
I've configured an Elasticsearch Cluster of 3 nodes. Now I'm planning to write a bash script which will query for the index from the curl command without mentioning the ES node name as this cluster setup allows up to 1 … --- ## [Installing Elasticsearch on Ubuntu Server on AWS](https://discuss.elastic.co/t/installing-elasticsearch-on-ubuntu-server-on-aws/215585)
**Author:** [@droidus](https://discuss.elastic.co/u/droidus)\ **Replies:** 0\ **Last updated:** [January 19, 2020, 12:56am UTC](https://discuss.elastic.co/t/installing-elasticsearch-on-ubuntu-server-on-aws/215585 "2020-01-19T00:56:34Z")
I am trying to Install Elasticsearch on Ubuntu Server 16. When I run this command: sudo apt-get install elasticsearch, it fails, saying "could not find java; set JAVA\_HOME". An echo of that variable returns "/opt/jdk-1… --- ## [Field\_value\_factor wrong depending on index](https://discuss.elastic.co/t/field-value-factor-wrong-depending-on-index/215567)
**Author:** [@nicolas-t](https://discuss.elastic.co/u/nicolas-t)\ **Replies:** 1\ **Last updated:** [January 18, 2020, 9:53pm UTC](https://discuss.elastic.co/t/field-value-factor-wrong-depending-on-index/215567 "2020-01-18T21:53:28Z")
Hello, I have two similar documents in two different indices. My score is correct in only one of them. This is my document : { "id": 1, "colors": { "colorA": { "hue": 50, "population": 0.5 }, … --- ## [Index writer memory Continue to rise](https://discuss.elastic.co/t/index-writer-memory-continue-to-rise/213514)
**Author:** [@ITzhangqiang](https://discuss.elastic.co/u/ITzhangqiang)\ **Replies:** 21\ **Last updated:** [January 15, 2020, 4:08pm UTC](https://discuss.elastic.co/t/index-writer-memory-continue-to-rise/213514 "2020-01-15T16:08:11Z")
hi，all： I have a question that has puzzled me for a long time。 One node in the cluster has too much index writer memory (other node is fline), and it keeps going up,and it lead to index throttling . And then I adju… --- ## [Elasticsearch-keystore reference in kibana.yml](https://discuss.elastic.co/t/elasticsearch-keystore-reference-in-kibana-yml/215572)
**Author:** [@kiyapedia](https://discuss.elastic.co/u/kiyapedia)\ **Replies:** 0\ **Last updated:** [January 18, 2020, 6:38pm UTC](https://discuss.elastic.co/t/elasticsearch-keystore-reference-in-kibana-yml/215572 "2020-01-18T18:38:22Z")
Hello — I've got Elasticsearch and Kibana running with docker-compose with no issues. In my kibana.yml file, my password is exposed as such: server.name: kibana server.host: "0" elasticsearch.hosts: \[ "http://elasticse… --- ## [Error- Geo Distance Sorting](https://discuss.elastic.co/t/error-geo-distance-sorting/215329)
**Author:** [@Wa\_ed\_AL-Sawarieh](https://discuss.elastic.co/u/Wa_ed_AL-Sawarieh)\ **Replies:** 1\ **Last updated:** [January 18, 2020, 6:04pm UTC](https://discuss.elastic.co/t/error-geo-distance-sorting/215329 "2020-01-18T18:04:19Z")
Hello , let body = { "query": { "bool": { "should": \[ { "match": { } }, { "geo\_distance": { "distance": targetDistance+"km", "location": { "lat": location.lat, "lon": location.lon } } } \] } }, "sort"… --- ## [Jvm.option file issue](https://discuss.elastic.co/t/jvm-option-file-issue/215553)
**Author:** [@Sergey\_Mucha](https://discuss.elastic.co/u/Sergey_Mucha)\ **Replies:** 2\ **Last updated:** [January 18, 2020, 1:28pm UTC](https://discuss.elastic.co/t/jvm-option-file-issue/215553 "2020-01-18T13:28:25Z")
Hi Elastic 7.5.1 was installed from tar.gz Config is : export ES\_HOME=/var/vcap/jobs/elasticsearch export ES\_PATH\_CONF=${ES\_HOME}/config I have following issue Exception in thread "main" java.nio.file.NoSuchFileExc… --- ## [Calculating metric based on certain buckets in a histogram aggregation](https://discuss.elastic.co/t/calculating-metric-based-on-certain-buckets-in-a-histogram-aggregation/215554)
**Author:** [@leewadhams](https://discuss.elastic.co/u/leewadhams)\ **Replies:** 0\ **Last updated:** [January 18, 2020, 9:40am UTC](https://discuss.elastic.co/t/calculating-metric-based-on-certain-buckets-in-a-histogram-aggregation/215554 "2020-01-18T09:40:18Z")
A simplified version of our price index is as follows: PUT price-example { "mappings": { "properties": { "skuId": { "type": "keyword" }, "supplierId": { "type": "keyword" … --- ## [Elasticsearh internals](https://discuss.elastic.co/t/elasticsearh-internals/215367)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 2\ **Last updated:** [January 18, 2020, 8:26am UTC](https://discuss.elastic.co/t/elasticsearh-internals/215367 "2020-01-18T08:26:57Z")
Hello Team, How can i learn elasticsearch internals like Index creation and storage , cross cluster code, storage API, text analysis etc. Thank you, Aditya --- ## [Multi-word, multi-term querystring query](https://discuss.elastic.co/t/multi-word-multi-term-querystring-query/215509)
**Author:** [@David\_Von\_Lehman](https://discuss.elastic.co/u/David_Von_Lehman)\ **Replies:** 1\ **Last updated:** [January 18, 2020, 7:59am UTC](https://discuss.elastic.co/t/multi-word-multi-term-querystring-query/215509 "2020-01-18T07:59:37Z")
When running a multi-term querystring query with multiple search fields, I get different results depending on if there is a boolean operator present. For example if I have the following document: { title: "Car", … --- ## [Index is not rolling over](https://discuss.elastic.co/t/index-is-not-rolling-over/215546)
**Author:** [@asrinivasan](https://discuss.elastic.co/u/asrinivasan)\ **Replies:** 0\ **Last updated:** [January 18, 2020, 6:01am UTC](https://discuss.elastic.co/t/index-is-not-rolling-over/215546 "2020-01-18T06:01:08Z")
I created a lifec cycle policy to rollover after size reaches 30G, i then changed it to 100MB, however this did not take effect and the index did not rollover Running GET xxx-filemgr-000004/\_ilm/explain Gives { "i… --- ## [Object mapping \[channels.channel\_people\] can't be changed from nested to non-nested](https://discuss.elastic.co/t/object-mapping-channels-channel-people-cant-be-changed-from-nested-to-non-nested/215543)
**Author:** [@Abhilash\_Sathe1](https://discuss.elastic.co/u/Abhilash_Sathe1)\ **Replies:** 0\ **Last updated:** [January 18, 2020, 4:47am UTC](https://discuss.elastic.co/t/object-mapping-channels-channel-people-cant-be-changed-from-nested-to-non-nested/215543 "2020-01-18T04:47:04Z")
I first created a mapping. PUT /my\_index/ { "mappings": { "properties": { "channels": { "type": "object", "properties": { "channel\_people": { "type": "nested", … --- ## [QUERY - not working](https://discuss.elastic.co/t/query-not-working/215538)
**Author:** [@GuessMyName](https://discuss.elastic.co/u/GuessMyName)\ **Replies:** 0\ **Last updated:** [January 18, 2020, 1:10am UTC](https://discuss.elastic.co/t/query-not-working/215538 "2020-01-18T01:10:38Z")
Hey @ll I don't understand why this query is not bringing any results data.win.eventdata.parentImage: "C:\\Windows\\explorer.exe" or data.win.eventdata.parentImage: "explorer.exe" data is there... Thank you! --- ## [Security Exception when Running Sample Security Plugin](https://discuss.elastic.co/t/security-exception-when-running-sample-security-plugin/214671)
**Author:** [@YanbangLiuUiPath](https://discuss.elastic.co/u/YanbangLiuUiPath)\ **Replies:** 4\ **Last updated:** [January 17, 2020, 5:28pm UTC](https://discuss.elastic.co/t/security-exception-when-running-sample-security-plugin/214671 "2020-01-17T17:28:50Z")
I have followed the steps from This post But at the step to authenticate using this command: curl "localhost:9200/\_xpack/security/\_authenticate" -H "x-web-store-claims: $ClaimJson" -H "x-web-store-sig: $ClaimSig" I … --- ## [Sorting lists in painless](https://discuss.elastic.co/t/sorting-lists-in-painless/215530)
**Author:** [@ncrmro](https://discuss.elastic.co/u/ncrmro)\ **Replies:** 0\ **Last updated:** [January 17, 2020, 10:21pm UTC](https://discuss.elastic.co/t/sorting-lists-in-painless/215530 "2020-01-17T22:21:22Z")
In a script\_field I'm trying sort and array of objects by a sub field. What is the correct way to sort these. Eg each locations has a distance field and i'd like to order the objects in the list by distance. List locat… --- ## [Port forwarding to ELK Application in Ubuntu](https://discuss.elastic.co/t/port-forwarding-to-elk-application-in-ubuntu/215226)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 1\ **Last updated:** [January 17, 2020, 6:24pm UTC](https://discuss.elastic.co/t/port-forwarding-to-elk-application-in-ubuntu/215226 "2020-01-17T18:24:23Z")
I am trying to make my kibana webpage application accessible to other computer from outside network. In Port forwarding, what should be the Host Ip, Host Port, Guest Ip, and Guest port? --- ## [Bulk Export More Than 10k Events](https://discuss.elastic.co/t/bulk-export-more-than-10k-events/215497)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 0\ **Last updated:** [January 17, 2020, 5:07pm UTC](https://discuss.elastic.co/t/bulk-export-more-than-10k-events/215497 "2020-01-17T17:07:09Z")
I occasionally have the need to pull events out of Elasticsearch. I built a script using PowerShell that utilizes scroll to pull all the records. The problem I have though is that I can only pull 10k events per request… --- ## [Index parent-child with \_id](https://discuss.elastic.co/t/index-parent-child-with-id/215491)
**Author:** [@johnkary](https://discuss.elastic.co/u/johnkary)\ **Replies:** 0\ **Last updated:** [January 17, 2020, 4:00pm UTC](https://discuss.elastic.co/t/index-parent-child-with-id/215491 "2020-01-17T16:00:46Z")
Hi all! I use parent-child model in my index "npk" and here are some questions basically on the ways i can search. I studied has-child and has-parent queries but i don't get any results for the docs i inserted to this in… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1041) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1043)