# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1046

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1047

---

## [Find similarity between two fields of an index](https://discuss.elastic.co/t/find-similarity-between-two-fields-of-an-index/215060)

<div class="topic-metadata">

**Author:** [@prathako](https://discuss.elastic.co/u/prathako)\
**Replies:** 0\
**Last updated:** [January 15, 2020, 12:09am UTC](https://discuss.elastic.co/t/find-similarity-between-two-fields-of-an-index/215060 "2020-01-15T00:09:41Z")

</div>

My index: {"var1": "abc", "var2": "ert","var3": "ca","var4": "sdf"} {"var1": "ert", "var2": "abc","var3": "La","var4": "abc"} {"var1": "vbn", "var2": "fgh","var3": "ert","var4": "vbh"} {"var1": "fgh", "var2": "tyu","…

---

## [Running custom docker image with cloud-on-k8s operator](https://discuss.elastic.co/t/running-custom-docker-image-with-cloud-on-k8s-operator/215036)

<div class="topic-metadata">

**Author:** [@sarthakn](https://discuss.elastic.co/u/sarthakn)\
**Replies:** 0\
**Last updated:** [January 14, 2020, 7:27pm UTC](https://discuss.elastic.co/t/running-custom-docker-image-with-cloud-on-k8s-operator/215036 "2020-01-14T19:27:10Z")

</div>

I'm trying to use the cloud-on-k8s operator to deploy ES on k8s. However, I need to use a different docker image as I need to use Ubuntu instead of CentOS for compatibility with some of our packages and I also need to us…

---

## [Checking elasticsearch health during rolling restart](https://discuss.elastic.co/t/checking-elasticsearch-health-during-rolling-restart/215023)

<div class="topic-metadata">

**Author:** [@lag13](https://discuss.elastic.co/u/lag13)\
**Replies:** 2\
**Last updated:** [January 14, 2020, 5:56pm UTC](https://discuss.elastic.co/t/checking-elasticsearch-health-during-rolling-restart/215023 "2020-01-14T17:56:46Z")

</div>

Hello! When doing a rolling upgrade (Rolling upgrades | Elasticsearch Guide \[7.3\] | Elastic), is checking that there are 0 initializing and relocating shards a reliable way to determine if you can restart the next node a…

---

## [How to schedule a Watcher in local timezone?](https://discuss.elastic.co/t/how-to-schedule-a-watcher-in-local-timezone/214953)

<div class="topic-metadata">

**Author:** [@fim](https://discuss.elastic.co/u/fim)\
**Replies:** 1\
**Last updated:** [January 14, 2020, 4:42pm UTC](https://discuss.elastic.co/t/how-to-schedule-a-watcher-in-local-timezone/214953 "2020-01-14T16:42:26Z")

</div>

Hello Community, I'm bit confused why my watcher is not calculating the local timezone automatically. The below watcher should trigger hourly from 05:00 until 17:00. When I check the log in Kibana, the Watcher starts t…

---

## [Latency buffer for Rollup jobs - recommended delay and/or what it depends on](https://discuss.elastic.co/t/latency-buffer-for-rollup-jobs-recommended-delay-and-or-what-it-depends-on/214819)

<div class="topic-metadata">

**Author:** [@alter](https://discuss.elastic.co/u/alter)\
**Replies:** 3\
**Last updated:** [January 14, 2020, 4:26pm UTC](https://discuss.elastic.co/t/latency-buffer-for-rollup-jobs-recommended-delay-and-or-what-it-depends-on/214819 "2020-01-14T16:26:54Z")

</div>

Hi! We are using real-time rollup job to aggregare events into metrics. The scenario: events are coming from logstash, peak ingestion flow is around 100k-120k events per minute rollup job is scheduled to run every min…

---

## [Disable machine learning process creation](https://discuss.elastic.co/t/disable-machine-learning-process-creation/214913)

<div class="topic-metadata">

**Author:** [@musician](https://discuss.elastic.co/u/musician)\
**Replies:** 6\
**Last updated:** [January 14, 2020, 3:35pm UTC](https://discuss.elastic.co/t/disable-machine-learning-process-creation/214913 "2020-01-14T15:35:29Z")

</div>

I am using Elasticsearch 7.1.1 and noticed that when I start it, a process controller.exe (part of Elasticsearch machine learning) is spawned automatically. How do I disable creation of this process since I do not use ma…

---

## [Need help in setting up curator in the current ELK stack](https://discuss.elastic.co/t/need-help-in-setting-up-curator-in-the-current-elk-stack/214999)

<div class="topic-metadata">

**Author:** [@Shubham\_Mer](https://discuss.elastic.co/u/Shubham_Mer)\
**Replies:** 0\
**Last updated:** [January 14, 2020, 2:02pm UTC](https://discuss.elastic.co/t/need-help-in-setting-up-curator-in-the-current-elk-stack/214999 "2020-01-14T14:02:51Z")

</div>

Hi All, I need a little help in my current setup.Actually i have a 3 node Elastic search server but with days the amount of data is increasing so i want to set up one warm node like an archive node that should not hold …

---

## [Failed status while using Public IP on my office](https://discuss.elastic.co/t/failed-status-while-using-public-ip-on-my-office/214987)

<div class="topic-metadata">

**Author:** [@gilang\_bilbisri](https://discuss.elastic.co/u/gilang_bilbisri)\
**Replies:** 1\
**Last updated:** [January 14, 2020, 12:34pm UTC](https://discuss.elastic.co/t/failed-status-while-using-public-ip-on-my-office/214987 "2020-01-14T12:34:07Z")

</div>

hello everyone am new in elasticsearch program. i need your help for my installation progress. for my configuration in /etc/elasticsearch/elasticsearch.yml network.host : localhost http.port: 9200 it's successfull ru…

---

## [All shards failed-yellow status](https://discuss.elastic.co/t/all-shards-failed-yellow-status/214919)

<div class="topic-metadata">

**Author:** [@Deny7](https://discuss.elastic.co/u/Deny7)\
**Replies:** 4\
**Last updated:** [January 14, 2020, 11:16am UTC](https://discuss.elastic.co/t/all-shards-failed-yellow-status/214919 "2020-01-14T11:16:00Z")

</div>

ELK: version 6.6.2 Hi, my elasticsearch stopped working after couple weeks. Im monitoring cca 10 tomcat logs ondifferent servers. I run ELK with Logstash on same server(SINGLE NODE). In log there is still repeating: …

---

## [External version control with update\_by\_query](https://discuss.elastic.co/t/external-version-control-with-update-by-query/214975)

<div class="topic-metadata">

**Author:** [@uddhav](https://discuss.elastic.co/u/uddhav)\
**Replies:** 0\
**Last updated:** [January 14, 2020, 10:51am UTC](https://discuss.elastic.co/t/external-version-control-with-update-by-query/214975 "2020-01-14T10:51:32Z")

</div>

I have a use-case where I want to have an external version control with update\_by\_query. The same document might get updated a million times so retrying on version conflict is not an option. Any pointers on how to implem…

---

## [ELK Watcher Alarms](https://discuss.elastic.co/t/elk-watcher-alarms/213566)

<div class="topic-metadata">

**Author:** [@rj23495](https://discuss.elastic.co/u/rj23495)\
**Replies:** 6\
**Last updated:** [January 14, 2020, 9:45am UTC](https://discuss.elastic.co/t/elk-watcher-alarms/213566 "2020-01-14T09:45:41Z")

</div>

Hey, I am trying to create alarms in elk watcher with the following parameters like 5 datapoints in 20 min for value \> 10 but i cannot see anything apart from average median, etc. How can we achieve this type pf alarm co…

---

## [Getting specific Repo for Linux](https://discuss.elastic.co/t/getting-specific-repo-for-linux/214762)

<div class="topic-metadata">

**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\
**Replies:** 2\
**Last updated:** [January 14, 2020, 9:19am UTC](https://discuss.elastic.co/t/getting-specific-repo-for-linux/214762 "2020-01-14T09:19:38Z")

</div>

Hi Team, How to get a specific version repo. of elasticsearch for Red Hat. thanks

---

## [Different behavior with minimum\_should\_match on ES2.4 and ES7.1](https://discuss.elastic.co/t/different-behavior-with-minimum-should-match-on-es2-4-and-es7-1/214960)

<div class="topic-metadata">

**Author:** [@oalfonso](https://discuss.elastic.co/u/oalfonso)\
**Replies:** 0\
**Last updated:** [January 14, 2020, 9:03am UTC](https://discuss.elastic.co/t/different-behavior-with-minimum-should-match-on-es2-4-and-es7-1/214960 "2020-01-14T09:03:07Z")

</div>

Hi, First of all, disclaimer: we had to move long before to ES7.X but we are doing right now, from 2.4, shame on us. Well, my case: I've found that minimum\_should\_match has a different behavior when the param given is …

---

## [Elasticsearch(7.5) error of Connection refused when curl http request with real IP address](https://discuss.elastic.co/t/elasticsearch-7-5-error-of-connection-refused-when-curl-http-request-with-real-ip-address/214948)

<div class="topic-metadata">

**Author:** [@longfei.li](https://discuss.elastic.co/u/longfei.li)\
**Replies:** 2\
**Last updated:** [January 14, 2020, 9:00am UTC](https://discuss.elastic.co/t/elasticsearch-7-5-error-of-connection-refused-when-curl-http-request-with-real-ip-address/214948 "2020-01-14T09:00:14Z")

</div>

After installing the elasticserach(7.5) on ubuntu 18.04 successfully, I try to send the curl request but get error message. |- curl http://10.13.2.111:9200 curl: (7) Failed to connect to 10.13.2.111 port 9200: Connecti…

---

## [Enrich Processor, Lookups: how to Update once through Enrich Pipeline generated document](https://discuss.elastic.co/t/enrich-processor-lookups-how-to-update-once-through-enrich-pipeline-generated-document/214958)

<div class="topic-metadata">

**Author:** [@Mattteo](https://discuss.elastic.co/u/Mattteo)\
**Replies:** 0\
**Last updated:** [January 14, 2020, 8:59am UTC](https://discuss.elastic.co/t/enrich-processor-lookups-how-to-update-once-through-enrich-pipeline-generated-document/214958 "2020-01-14T08:59:51Z")

</div>

We have many Lookup-indexes and one enrich pipeline to decode some values. Data will be imported from a DB using logstash and a pipeline parameter within elasticsearch plugin. output { elasticsearch { index =\> "custo…

---

## [Partial search of attributes(Substring, Case insensitive and special chars included)](https://discuss.elastic.co/t/partial-search-of-attributes-substring-case-insensitive-and-special-chars-included/214883)

<div class="topic-metadata">

**Author:** [@Shail](https://discuss.elastic.co/u/Shail)\
**Replies:** 1\
**Last updated:** [January 14, 2020, 8:41am UTC](https://discuss.elastic.co/t/partial-search-of-attributes-substring-case-insensitive-and-special-chars-included/214883 "2020-01-14T08:41:19Z")

</div>

We are using ElasticSearch version 7.2 in our project with following characteristics: The main index mapping contains attributes, embedded objects as well as few nested (array) types. Analyzer : Standard analyzer The…

---

## [Scripting Query for returning cases where array size is larger than X](https://discuss.elastic.co/t/scripting-query-for-returning-cases-where-array-size-is-larger-than-x/214892)

<div class="topic-metadata">

**Author:** [@spdoes](https://discuss.elastic.co/u/spdoes)\
**Replies:** 2\
**Last updated:** [January 14, 2020, 8:36am UTC](https://discuss.elastic.co/t/scripting-query-for-returning-cases-where-array-size-is-larger-than-x/214892 "2020-01-14T08:36:20Z")

</div>

I want to make a query that counts how many elements there are in the field that is a array of jsons objects. When I run: {script: { script: "doc\['field\_name'\].values.length() \> 0"}} I get: "No field found for \[field…

---

## [Error reports failures when exporting documents](https://discuss.elastic.co/t/error-reports-failures-when-exporting-documents/214717)

<div class="topic-metadata">

**Author:** [@Suniel](https://discuss.elastic.co/u/Suniel)\
**Replies:** 3\
**Last updated:** [January 14, 2020, 8:32am UTC](https://discuss.elastic.co/t/error-reports-failures-when-exporting-documents/214717 "2020-01-14T08:32:07Z")

</div>

Caused by: org.elasticsearch.xpack.monitoring.exporter.ExportException: bulk \[default\_local\] reports failures when exporting documents at org.elasticsearch.xpack.monitoring.exporter.local.LocalBulk.throwExportException(…

---

## [Unable to make any request to elastic cloud](https://discuss.elastic.co/t/unable-to-make-any-request-to-elastic-cloud/214805)

<div class="topic-metadata">

**Author:** [@portal](https://discuss.elastic.co/u/portal)\
**Replies:** 5\
**Last updated:** [January 14, 2020, 8:28am UTC](https://discuss.elastic.co/t/unable-to-make-any-request-to-elastic-cloud/214805 "2020-01-14T08:28:57Z")

</div>

Hi, I have been working with elasticsearch for about a year now in development using version 7.1 and the high level rest client (java), deployed my application to azure and created a free trial elastic deployment but una…

---

## [Possible to use custom dhparam for tls?](https://discuss.elastic.co/t/possible-to-use-custom-dhparam-for-tls/214946)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 0\
**Last updated:** [January 14, 2020, 8:17am UTC](https://discuss.elastic.co/t/possible-to-use-custom-dhparam-for-tls/214946 "2020-01-14T08:17:21Z")

</div>

Hi, can I use an individual dhparm file with elasticserach tls? If possible I want to be able to use a cusrtom dhparam for rest api and for transport. Do I need to append dhparam fragment to the cert (if using pem mode…

---

## [Nodes randomly disconnected from the ES cluster](https://discuss.elastic.co/t/nodes-randomly-disconnected-from-the-es-cluster/23028)

<div class="topic-metadata">

**Author:** [@Anil\_Karaka](https://discuss.elastic.co/u/Anil_Karaka)\
**Replies:** 9\
**Last updated:** [January 14, 2020, 7:14am UTC](https://discuss.elastic.co/t/nodes-randomly-disconnected-from-the-es-cluster/23028 "2020-01-14T07:14:31Z")

</div>

I greped for "removed" in master node and these are the logs that I see. \[2015-04-01 05:32:55,813\]\[INFO \]\[cluster.service \] \[ESBigNode3\] removed {\[ES30GBNode2\]\[Yf8ODQh0TE2\_0hQ35Y0M\_w\]\[ip-153-31-43-55\]\[ine…

---

## [Maximum RAM recommended for data node](https://discuss.elastic.co/t/maximum-ram-recommended-for-data-node/214928)

<div class="topic-metadata">

**Author:** [@malshan](https://discuss.elastic.co/u/malshan)\
**Replies:** 5\
**Last updated:** [January 14, 2020, 7:11am UTC](https://discuss.elastic.co/t/maximum-ram-recommended-for-data-node/214928 "2020-01-14T07:11:40Z")

</div>

Hi all, I'm new here, for please forgive for any changes from expected format. ES version: 7.5 I'm going to deploy a hot-warm-cold architecture, with dedicated data, master and ingest nodes. However, even our 'hot' se…

---

## [Reset elasticsearch password](https://discuss.elastic.co/t/reset-elasticsearch-password/214281)

<div class="topic-metadata">

**Author:** [@talsantos](https://discuss.elastic.co/u/talsantos)\
**Replies:** 2\
**Last updated:** [January 14, 2020, 5:53am UTC](https://discuss.elastic.co/t/reset-elasticsearch-password/214281 "2020-01-14T05:53:05Z")

</div>

Hi, I need to reset the password of elasticsearch because I don't know it. And the person who know it, doesn´t work at the company anymore. How can I reset the password? Thank you. Tânia

---

## [Possibility to 'join' data in Elasticsearch / Kibana](https://discuss.elastic.co/t/possibility-to-join-data-in-elasticsearch-kibana/214695)

<div class="topic-metadata">

**Author:** [@Matthias\_Seidl](https://discuss.elastic.co/u/Matthias_Seidl)\
**Replies:** 0\
**Last updated:** [January 11, 2020, 8:23am UTC](https://discuss.elastic.co/t/possibility-to-join-data-in-elasticsearch-kibana/214695 "2020-01-11T08:23:08Z")

</div>

Hi guys, this has been on my mind for a few days now. I have 2 indices, indA and indB. IndA has a field called "Magic" and indB has a field called "Magic". This is what I'd use in a relational DB to make the join betwe…

---

## [Stackoverflow rooms for discussion](https://discuss.elastic.co/t/stackoverflow-rooms-for-discussion/214771)

<div class="topic-metadata">

**Author:** [@rakmo](https://discuss.elastic.co/u/rakmo)\
**Replies:** 1\
**Last updated:** [January 14, 2020, 3:21am UTC](https://discuss.elastic.co/t/stackoverflow-rooms-for-discussion/214771 "2020-01-14T03:21:59Z")

</div>

I have created Stackoverflow rooms for Elastic related discussions. I am completely aware that Elastic maintains it's own discussion platform which is awesome, and I am completely in favor of this platform. Stackoverflow…

---

## [Right configuration to send email (SES) alerts in ELK](https://discuss.elastic.co/t/right-configuration-to-send-email-ses-alerts-in-elk/214893)

<div class="topic-metadata">

**Author:** [@vpuvvala](https://discuss.elastic.co/u/vpuvvala)\
**Replies:** 2\
**Last updated:** [January 13, 2020, 10:02pm UTC](https://discuss.elastic.co/t/right-configuration-to-send-email-ses-alerts-in-elk/214893 "2020-01-13T22:02:03Z")

</div>

Hello, I'm trying to configure email notification alerts from Elasticsearch using SES SMTP server. Elasticsearch version: 7.4.2 Configuration: volumeMounts: - name: keystore mountPath: /usr/share/e…

---

## [Refresh Field List](https://discuss.elastic.co/t/refresh-field-list/214899)

<div class="topic-metadata">

**Author:** [@mannam14387](https://discuss.elastic.co/u/mannam14387)\
**Replies:** 0\
**Last updated:** [January 13, 2020, 8:47pm UTC](https://discuss.elastic.co/t/refresh-field-list/214899 "2020-01-13T20:47:20Z")

</div>

Some times we fail to see any data in kibana for some indices but once i refresh the fields on that particular index it starts to show the data again , do i need to change the field types in this case or I am missing so…

---

## [Adding master nodes to Existing cluster](https://discuss.elastic.co/t/adding-master-nodes-to-existing-cluster/214880)

<div class="topic-metadata">

**Author:** [@surya2](https://discuss.elastic.co/u/surya2)\
**Replies:** 6\
**Last updated:** [January 13, 2020, 6:55pm UTC](https://discuss.elastic.co/t/adding-master-nodes-to-existing-cluster/214880 "2020-01-13T18:55:30Z")

</div>

Hello All, I have 14 node elasticsearch cluster in which all nodes are data,master,client. Now i want to have separate master nodes. How do i achieve this without causing splitbrain or down time. I can bring one node at…

---

## [Native controller process has stopped : no new native processes can be started](https://discuss.elastic.co/t/native-controller-process-has-stopped-no-new-native-processes-can-be-started/214077)

<div class="topic-metadata">

**Author:** [@StepBat](https://discuss.elastic.co/u/StepBat)\
**Replies:** 5\
**Last updated:** [January 13, 2020, 6:10pm UTC](https://discuss.elastic.co/t/native-controller-process-has-stopped-no-new-native-processes-can-be-started/214077 "2020-01-13T18:10:19Z")

</div>

Hello support I need your help in order to fix a crash of elasticsearch just after the starting with the message 'Native controller process has stopped - no new native processes can be started" Elasticsearch is started…

---

## [Connection reset by peer in 6.8 ES with 6.1.4 client](https://discuss.elastic.co/t/connection-reset-by-peer-in-6-8-es-with-6-1-4-client/209605)

<div class="topic-metadata">

**Author:** [@nikuland](https://discuss.elastic.co/u/nikuland)\
**Replies:** 6\
**Last updated:** [January 13, 2020, 5:59pm UTC](https://discuss.elastic.co/t/connection-reset-by-peer-in-6-8-es-with-6-1-4-client/209605 "2020-01-13T17:59:40Z")

</div>

Often we are seeing "Connection reset by Peer" after migrating to ES 6.8. We are still using ES 6.1.4 client. It recovers, but often there is Connection reset by Peer. Any solution or how can this be debugged.

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1045)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1047)
