# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1053

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1054

---

## [Need assistance with visualizing multiple queries in Kibana](https://discuss.elastic.co/t/need-assistance-with-visualizing-multiple-queries-in-kibana/213972)

<div class="topic-metadata">

**Author:** [@kibana\_user\_2020](https://discuss.elastic.co/u/kibana_user_2020)\
**Replies:** 0\
**Last updated:** [January 7, 2020, 4:17am UTC](https://discuss.elastic.co/t/need-assistance-with-visualizing-multiple-queries-in-kibana/213972 "2020-01-07T04:17:22Z")

</div>

Hi all. I am new to Kibana and still trying to get my head around the documentation. This is what I want to achieve - I have a query for successful requests and another for all the requests, I am looking to visualize a h…

---

## [o.e.c.c.ClusterFormationFailureHelper\] \[Master-node\] master not discovered or elected yet, an election requires a node with id \[Y11KbKB-SX2HIYM77Z1Zqg\], have discovered](https://discuss.elastic.co/t/o-e-c-c-clusterformationfailurehelper-master-node-master-not-discovered-or-elected-yet-an-election-requires-a-node-with-id-y11kbkb-sx2hiym77z1zqg-have-discovered/213829)

<div class="topic-metadata">

**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\
**Replies:** 6\
**Last updated:** [January 7, 2020, 3:47am UTC](https://discuss.elastic.co/t/o-e-c-c-clusterformationfailurehelper-master-node-master-not-discovered-or-elected-yet-an-election-requires-a-node-with-id-y11kbkb-sx2hiym77z1zqg-have-discovered/213829 "2020-01-07T03:47:43Z")

</div>

Hello, I am trying to form a 3 node ES cluster but i am getting a above mentioned error. I have one master node and 2 data nodes. My ES configurations are as follows: \*\*For master node:\*\* cluster.name: InTouc…

---

## [Write queue continue to rise](https://discuss.elastic.co/t/write-queue-continue-to-rise/213652)

<div class="topic-metadata">

**Author:** [@ITzhangqiang](https://discuss.elastic.co/u/ITzhangqiang)\
**Replies:** 22\
**Last updated:** [January 7, 2020, 2:21am UTC](https://discuss.elastic.co/t/write-queue-continue-to-rise/213652 "2020-01-07T02:21:59Z")

</div>

One es node write queue continue to rise from about 08:00。But I set thread\_pool.write.queue\_size: 2000，why this node's write queue more than 2000? And why queue Sudden rise?I check bulk request not much changed as usua…

---

## [Elasticsearch query on a nested field with condition](https://discuss.elastic.co/t/elasticsearch-query-on-a-nested-field-with-condition/213642)

<div class="topic-metadata">

**Author:** [@Noctis17](https://discuss.elastic.co/u/Noctis17)\
**Replies:** 5\
**Last updated:** [January 7, 2020, 1:22am UTC](https://discuss.elastic.co/t/elasticsearch-query-on-a-nested-field-with-condition/213642 "2020-01-07T01:22:05Z")

</div>

Elasticsearch v7.0 Hello and good day! I'm trying to create a query that will have a condition: if a nested field has only 1 element, get that first element, if a nested field has 2 more or elements, get a matching nes…

---

## [ES1 vs ES7 - Different results when dis\_max wrapped with should](https://discuss.elastic.co/t/es1-vs-es7-different-results-when-dis-max-wrapped-with-should/213951)

<div class="topic-metadata">

**Author:** [@xlisfo](https://discuss.elastic.co/u/xlisfo)\
**Replies:** 0\
**Last updated:** [January 6, 2020, 10:40pm UTC](https://discuss.elastic.co/t/es1-vs-es7-different-results-when-dis-max-wrapped-with-should/213951 "2020-01-06T22:40:41Z")

</div>

Hi, I have a question for the Elasticsearch query below. The dis\_max clause actually returns 0 results for both Elasticsearch 1.7 and 7.4. Then when I use bool-\>should wrap the dis\_max clause, for Elasticsearch 1.7, al…

---

## [Elasticsearch 7.5.1 RPM update prevents restart of service](https://discuss.elastic.co/t/elasticsearch-7-5-1-rpm-update-prevents-restart-of-service/213636)

<div class="topic-metadata">

**Author:** [@erempel](https://discuss.elastic.co/u/erempel)\
**Replies:** 3\
**Last updated:** [January 6, 2020, 10:17pm UTC](https://discuss.elastic.co/t/elasticsearch-7-5-1-rpm-update-prevents-restart-of-service/213636 "2020-01-06T22:17:44Z")

</div>

Updating an existing install of elasticsearch 7.x with the RPM package provided for ES 7.5.1-1 removes the group permissions on /etc/elasticsearch which results in an error when trying to start elasticsearch. rpm -qlv e…

---

## [Removing stop words from shingleFilter](https://discuss.elastic.co/t/removing-stop-words-from-shinglefilter/212206)

<div class="topic-metadata">

**Author:** [@Abdulaziz\_Al\_Qattan](https://discuss.elastic.co/u/Abdulaziz_Al_Qattan)\
**Replies:** 1\
**Last updated:** [January 6, 2020, 9:06pm UTC](https://discuss.elastic.co/t/removing-stop-words-from-shinglefilter/212206 "2020-01-06T21:06:04Z")

</div>

Dear All Does anybody know how to remove shingles that contain stop words completely using ShingleFilter \>\>\> I tried to use positionalIncrements in Shingle Filter but It is not available in (Elastic) \>\> I am still look…

---

## [Exclamation triangles intermittently in Canvas - looks like ES problem](https://discuss.elastic.co/t/exclamation-triangles-intermittently-in-canvas-looks-like-es-problem/213734)

<div class="topic-metadata">

**Author:** [@kevinpd](https://discuss.elastic.co/u/kevinpd)\
**Replies:** 2\
**Last updated:** [January 6, 2020, 7:22pm UTC](https://discuss.elastic.co/t/exclamation-triangles-intermittently-in-canvas-looks-like-es-problem/213734 "2020-01-06T19:22:45Z")

</div>

I asked this in the Canvas forum and was advised to ask here instead.. Canvas Forum Question I routinely get a few exclamation triangles in my canvas display. Thanks.

---

## [How to add truststore to classpath in Hive](https://discuss.elastic.co/t/how-to-add-truststore-to-classpath-in-hive/212959)

<div class="topic-metadata">

**Author:** [@oranciog](https://discuss.elastic.co/u/oranciog)\
**Replies:** 1\
**Last updated:** [January 6, 2020, 5:57pm UTC](https://discuss.elastic.co/t/how-to-add-truststore-to-classpath-in-hive/212959 "2020-01-06T17:57:12Z")

</div>

Hi, According to documentation, es.net.ssl.truststore.location is trust store location (typically a URL, without a prefix it is interpreted as a classpath entry) My question is how to add a truststore in a hive cli …

---

## [Unable to index documents into Elastic Cloud hosted managed service on GCP using Spark](https://discuss.elastic.co/t/unable-to-index-documents-into-elastic-cloud-hosted-managed-service-on-gcp-using-spark/212135)

<div class="topic-metadata">

**Author:** [@devender2601](https://discuss.elastic.co/u/devender2601)\
**Replies:** 5\
**Last updated:** [January 6, 2020, 5:47pm UTC](https://discuss.elastic.co/t/unable-to-index-documents-into-elastic-cloud-hosted-managed-service-on-gcp-using-spark/212135 "2020-01-06T17:47:33Z")

</div>

Hi, I am trying to insert documents in the index after reading documents from GCP storage. My Elasticsearch flavour on GCP is elastic cloud service hosted by elastic. for this, I am using version 7.5.0. and my Gradle d…

---

## [Spark to AWS ElasticSearch Service](https://discuss.elastic.co/t/spark-to-aws-elasticsearch-service/212246)

<div class="topic-metadata">

**Author:** [@yarch](https://discuss.elastic.co/u/yarch)\
**Replies:** 1\
**Last updated:** [January 6, 2020, 5:43pm UTC](https://discuss.elastic.co/t/spark-to-aws-elasticsearch-service/212246 "2020-01-06T17:43:16Z")

</div>

I am running spark on my local machine. I have Elastic Search up and running in AWS-ElasticSearch service. I am trying to follow the documentation specified here: https://www.elastic.co/guide/en/elasticsearch/hadoop/mast…

---

## [NEST - Using client.Get to find a document across all indices](https://discuss.elastic.co/t/nest-using-client-get-to-find-a-document-across-all-indices/213928)

<div class="topic-metadata">

**Author:** [@xolab](https://discuss.elastic.co/u/xolab)\
**Replies:** 0\
**Last updated:** [January 6, 2020, 5:30pm UTC](https://discuss.elastic.co/t/nest-using-client-get-to-find-a-document-across-all-indices/213928 "2020-01-06T17:30:38Z")

</div>

Hello - using NEST v6.4.2 I need to fire off a client.Get across all indices. I cannot figure out how to use the Get API specifically to do this. My code looks as follows var client = //initialize a ElasticClient her…

---

## [Control of ES log directory](https://discuss.elastic.co/t/control-of-es-log-directory/212975)

<div class="topic-metadata">

**Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\
**Replies:** 0\
**Last updated:** [December 24, 2019, 5:34pm UTC](https://discuss.elastic.co/t/control-of-es-log-directory/212975 "2019-12-24T17:34:25Z")

</div>

ES: 6.1.1 OS: Windows 10.0.14393 I have set up our elasticsearch.yml file, as shown below, to direct logging to a different drive than the C: drive where the executable runs. However, I still see stdout and stderr bei…

---

## [How best to index giant .jl file](https://discuss.elastic.co/t/how-best-to-index-giant-jl-file/213918)

<div class="topic-metadata">

**Author:** [@johnbchron](https://discuss.elastic.co/u/johnbchron)\
**Replies:** 0\
**Last updated:** [January 6, 2020, 4:25pm UTC](https://discuss.elastic.co/t/how-best-to-index-giant-jl-file/213918 "2020-01-06T16:25:53Z")

</div>

Hello, everyone! So I have an elasticsearch-kibana setup, fresh out of the box. I need to index the entirety of the contents of a massive json lines file, and I don't know what is the most efficient way to do this. The …

---

## [After ML node accidentally restart, Datafeed not working properly](https://discuss.elastic.co/t/after-ml-node-accidentally-restart-datafeed-not-working-properly/213025)

<div class="topic-metadata">

**Author:** [@EunBae\_Park](https://discuss.elastic.co/u/EunBae_Park)\
**Replies:** 8\
**Last updated:** [January 6, 2020, 3:29pm UTC](https://discuss.elastic.co/t/after-ml-node-accidentally-restart-datafeed-not-working-properly/213025 "2020-01-06T15:29:11Z")

</div>

Hi, This is Jason. I'm using ELK 6.8 with ML. Yesterday, One of our ELK nodes, which is for ML, was incidentally restarted, then Some of ML Jobs not working. I mean "Not Working" is Job is still "Open" and datafeed is…

---

## [Index template automation](https://discuss.elastic.co/t/index-template-automation/213910)

<div class="topic-metadata">

**Author:** [@kumar6](https://discuss.elastic.co/u/kumar6)\
**Replies:** 0\
**Last updated:** [January 6, 2020, 3:23pm UTC](https://discuss.elastic.co/t/index-template-automation/213910 "2020-01-06T15:23:37Z")

</div>

Hi, I have a requirement to automate index template across various stacks. Are there any tools for index template automation?

---

## [Call ES API from angular](https://discuss.elastic.co/t/call-es-api-from-angular/213899)

<div class="topic-metadata">

**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\
**Replies:** 0\
**Last updated:** [January 6, 2020, 2:15pm UTC](https://discuss.elastic.co/t/call-es-api-from-angular/213899 "2020-01-06T14:15:16Z")

</div>

hi i am trying to call ES API from angular JS , but i am getting the error localhost/:1 Access to XMLHttpRequest at '' from origin 'http://localhost:4200' has been blocked by CORS policy: Response to preflight request…

---

## [Elasticsearch (5.6.2) : cannot find x-pack-transport-5.6.2!](https://discuss.elastic.co/t/elasticsearch-5-6-2-cannot-find-x-pack-transport-5-6-2/213898)

<div class="topic-metadata">

**Author:** [@cohavisi](https://discuss.elastic.co/u/cohavisi)\
**Replies:** 0\
**Last updated:** [January 6, 2020, 2:12pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-2-cannot-find-x-pack-transport-5-6-2/213898 "2020-01-06T14:12:50Z")

</div>

https://www.elastic.co/guide/en/elasticsearch/reference/5.6/setup-xpack-client.html Hi, I want to use the x-pack-transport for the elasticsearch (5.6.2) - cannot find the jar. only 5.6.1 is available and when using g…

---

## [Elasticsearch 7.5 and Xpack](https://discuss.elastic.co/t/elasticsearch-7-5-and-xpack/213897)

<div class="topic-metadata">

**Author:** [@gurdipe](https://discuss.elastic.co/u/gurdipe)\
**Replies:** 0\
**Last updated:** [January 6, 2020, 2:11pm UTC](https://discuss.elastic.co/t/elasticsearch-7-5-and-xpack/213897 "2020-01-06T14:11:21Z")

</div>

Hi I am installing Elasticsearch 7.5, Logstash 7.5 and Kibana 7.5 and I would like to enable Xpack that then configure it Do I enable Xpack after I have I installed Elasticsearch 7.5, Logstash 7.5 and Kibana 7.5 or can…

---

## ["Master not Discovered yet" on GCP](https://discuss.elastic.co/t/master-not-discovered-yet-on-gcp/213716)

<div class="topic-metadata">

**Author:** [@Aleksei\_Saiko](https://discuss.elastic.co/u/Aleksei_Saiko)\
**Replies:** 3\
**Last updated:** [January 6, 2020, 2:09pm UTC](https://discuss.elastic.co/t/master-not-discovered-yet-on-gcp/213716 "2020-01-06T14:09:20Z")

</div>

Hi there! I'm trying to install ES cluster on GCP VMs. Only for test purposes, I'm trying to see if discovery works with 2 machines, and ES 7.5.1 My elasticsearch.yml is: # ======================== Elasticsearch Conf…

---

## [Why is such a difference between the time of a query request within the kibana console and the query request from a python script](https://discuss.elastic.co/t/why-is-such-a-difference-between-the-time-of-a-query-request-within-the-kibana-console-and-the-query-request-from-a-python-script/213876)

<div class="topic-metadata">

**Author:** [@aianau](https://discuss.elastic.co/u/aianau)\
**Replies:** 0\
**Last updated:** [January 6, 2020, 10:51am UTC](https://discuss.elastic.co/t/why-is-such-a-difference-between-the-time-of-a-query-request-within-the-kibana-console-and-the-query-request-from-a-python-script/213876 "2020-01-06T10:51:05Z")

</div>

I am trying to retrieve a lot of data from kibana using a python script. But I get unsatisfactory query time of execution, so I tried querying from within the dev\_tools/console inside kibana. Doing a DSL query from c…

---

## [ECS and my personal fight](https://discuss.elastic.co/t/ecs-and-my-personal-fight/213875)

<div class="topic-metadata">

**Author:** [@pdeelman](https://discuss.elastic.co/u/pdeelman)\
**Replies:** 0\
**Last updated:** [January 6, 2020, 10:41am UTC](https://discuss.elastic.co/t/ecs-and-my-personal-fight/213875 "2020-01-06T10:41:02Z")

</div>

Hi all, So recently we've started out our journey with Elastic 7.4.x and what a joy it has been. We wanted to implement ECS as it seems the right way forward. However Beats, logstash, kibana and elastic is not a combina…

---

## [Elasticsearch 7.4.2 run as service in Linux environment](https://discuss.elastic.co/t/elasticsearch-7-4-2-run-as-service-in-linux-environment/213552)

<div class="topic-metadata">

**Author:** [@abhishek1989](https://discuss.elastic.co/u/abhishek1989)\
**Replies:** 5\
**Last updated:** [January 6, 2020, 9:58am UTC](https://discuss.elastic.co/t/elasticsearch-7-4-2-run-as-service-in-linux-environment/213552 "2020-01-06T09:58:58Z")

</div>

Hi, I have installed elasticsearch 7.4.2 .zip in centos system but after running elasticsearch i got error in console which has mentioned below Error in status : elasticsearch-7.4.2.service - Elasticsearch-7.4.2 Loa…

---

## [ES 672 - downloaded, unzip, run and error - UseAVX=2 is not supported + java.security.AccessControlException](https://discuss.elastic.co/t/es-672-downloaded-unzip-run-and-error-useavx-2-is-not-supported-java-security-accesscontrolexception/213840)

<div class="topic-metadata">

**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\
**Replies:** 0\
**Last updated:** [January 6, 2020, 7:43am UTC](https://discuss.elastic.co/t/es-672-downloaded-unzip-run-and-error-useavx-2-is-not-supported-java-security-accesscontrolexception/213840 "2020-01-06T07:43:08Z")

</div>

Hi all, I setup an new VM Win Server 19 and want to run es 672 to use in combination with kibana 672. I use OpenJDK8U last Build 8u232b09 So I downloaded es, unzipped and run but: first log entry: OpenJDK 64-Bit Se…

---

## [Recommended setup using ILM to implement a document retention of n days](https://discuss.elastic.co/t/recommended-setup-using-ilm-to-implement-a-document-retention-of-n-days/213284)

<div class="topic-metadata">

**Author:** [@anderssonjohan](https://discuss.elastic.co/u/anderssonjohan)\
**Replies:** 3\
**Last updated:** [January 6, 2020, 8:10am UTC](https://discuss.elastic.co/t/recommended-setup-using-ilm-to-implement-a-document-retention-of-n-days/213284 "2020-01-06T08:10:22Z")

</div>

What is the recommended setup using ILM to implement a document retention of n days? I'm trying to get ILM working with data retention based on number of days since document @timestamp to offer a log service where n day…

---

## [Java client with security](https://discuss.elastic.co/t/java-client-with-security/213505)

<div class="topic-metadata">

**Author:** [@wl105500396](https://discuss.elastic.co/u/wl105500396)\
**Replies:** 4\
**Last updated:** [January 6, 2020, 7:10am UTC](https://discuss.elastic.co/t/java-client-with-security/213505 "2020-01-06T07:10:37Z")

</div>

Hi there, I'm now using ES java client to communicate with a secured ( x-pack ) es cluster, my java code is like below, @Bean(destroyMethod = "close") public RestHighLevelClient getRestHighLevelClient() { List\<HttpHos…

---

## [Exclude null containing key (records) while executing range Query in Elastic search JAVA Rest client](https://discuss.elastic.co/t/exclude-null-containing-key-records-while-executing-range-query-in-elastic-search-java-rest-client/213705)

<div class="topic-metadata">

**Author:** [@Aswini\_Kumar\_Rout](https://discuss.elastic.co/u/Aswini_Kumar_Rout)\
**Replies:** 2\
**Last updated:** [January 6, 2020, 6:48am UTC](https://discuss.elastic.co/t/exclude-null-containing-key-records-while-executing-range-query-in-elastic-search-java-rest-client/213705 "2020-01-06T06:48:17Z")

</div>

Let, I have below six records in my index. { "min": "300", "max": "350", "contentName": "Dabangg 5" }, { "min": "150", "max": "200", "contentName": "Dabangg 2" …

---

## [Need help on solr to elastic converstion](https://discuss.elastic.co/t/need-help-on-solr-to-elastic-converstion/213322)

<div class="topic-metadata">

**Author:** [@santhosh\_kumar2](https://discuss.elastic.co/u/santhosh_kumar2)\
**Replies:** 2\
**Last updated:** [January 6, 2020, 5:52am UTC](https://discuss.elastic.co/t/need-help-on-solr-to-elastic-converstion/213322 "2020-01-06T05:52:05Z")

</div>

I want help on below solr function how to handle in elastic elastic. 1)group.field 2)group.sort=geodist() example: group.format=simple&sort=duration+asc&indent=on&group.limit=1&wt=json&rows=365&fl=airportname,id,Date…

---

## [How to index only the newest version of the document](https://discuss.elastic.co/t/how-to-index-only-the-newest-version-of-the-document/213821)

<div class="topic-metadata">

**Author:** [@AdrianOverbury](https://discuss.elastic.co/u/AdrianOverbury)\
**Replies:** 1\
**Last updated:** [January 6, 2020, 4:28am UTC](https://discuss.elastic.co/t/how-to-index-only-the-newest-version-of-the-document/213821 "2020-01-06T04:28:52Z")

</div>

I'm trying to figure out if what I'm trying to do is even possible, or if I've gone totally off track. We have a series of timers we collect throughout a transaction lifecycle in a separate system, and we're trying to e…

---

## [Regular expression has redundant nested repeat operator](https://discuss.elastic.co/t/regular-expression-has-redundant-nested-repeat-operator/213540)

<div class="topic-metadata">

**Author:** [@adrianalfonso](https://discuss.elastic.co/u/adrianalfonso)\
**Replies:** 2\
**Last updated:** [January 6, 2020, 2:56am UTC](https://discuss.elastic.co/t/regular-expression-has-redundant-nested-repeat-operator/213540 "2020-01-06T02:56:54Z")

</div>

Can anyone describe what does this error mean? and how to resolve it. thank you. regular expression has redundant nested repeat operator \* /(?:(?:\\\[(?\<TIMESTAMP\_ISO8601:elasticsearch.server.timestamp\>(?:(?\>\\d\\d){1,2})-…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1052)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1054)
