# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1095

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1096

---

## [JVM Heap size too large?](https://discuss.elastic.co/t/jvm-heap-size-too-large/207312)

<div class="topic-metadata">

**Author:** [@bruce289](https://discuss.elastic.co/u/bruce289)\
**Replies:** 4\
**Last updated:** [November 14, 2019, 4:42am UTC](https://discuss.elastic.co/t/jvm-heap-size-too-large/207312 "2019-11-14T04:42:33Z")

</div>

Hi, The heap size on all our nodes is set to 30GB, but having read A Heap of Trouble, and looking at the graphs in the Kibana Stack Monitoring application, I believe our heap size is likely too large: The graphs for …

---

## [Http minimum compression size](https://discuss.elastic.co/t/http-minimum-compression-size/207800)

<div class="topic-metadata">

**Author:** [@Jason\_Wee](https://discuss.elastic.co/u/Jason_Wee)\
**Replies:** 0\
**Last updated:** [November 14, 2019, 3:01am UTC](https://discuss.elastic.co/t/http-minimum-compression-size/207800 "2019-11-14T03:01:44Z")

</div>

Hi, when configuration http.compression set to true, but with another configuration to specify for instance, http.compression.min\_size = 2048 where elasticsearch will only apply compression if the filesize is greater th…

---

## [Handling index\_not\_found\_exception in Elasticsearch.Net 7.4.0](https://discuss.elastic.co/t/handling-index-not-found-exception-in-elasticsearch-net-7-4-0/207773)

<div class="topic-metadata">

**Author:** [@lakario](https://discuss.elastic.co/u/lakario)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 8:23pm UTC](https://discuss.elastic.co/t/handling-index-not-found-exception-in-elasticsearch-net-7-4-0/207773 "2019-11-13T20:23:41Z")

</div>

In Elasticsearch.Net 7.4.0 when searching an index or alias which does not exist (HttpStatusCode:404), what is the correct way to resolve the index\_not\_found\_exception which is emitted by the server? Elasticsearch.Net …

---

## [Indexing date field in elasticsearch](https://discuss.elastic.co/t/indexing-date-field-in-elasticsearch/207383)

<div class="topic-metadata">

**Author:** [@RITZ\_VERMA](https://discuss.elastic.co/u/RITZ_VERMA)\
**Replies:** 5\
**Last updated:** [November 14, 2019, 12:15am UTC](https://discuss.elastic.co/t/indexing-date-field-in-elasticsearch/207383 "2019-11-14T00:15:11Z")

</div>

i have applied following mapping in my index PUT prince2/ { "mappings": { "properties": { "account\_id": { "type": "long" }, "created\_at": { "type": "date" }, "email": { "type": "text", "fields": { "keyword"…

---

## [Default sort all score 0](https://discuss.elastic.co/t/default-sort-all-score-0/207787)

<div class="topic-metadata">

**Author:** [@Alifost](https://discuss.elastic.co/u/Alifost)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 10:20pm UTC](https://discuss.elastic.co/t/default-sort-all-score-0/207787 "2019-11-13T22:20:54Z")

</div>

Hello, I just transferred a site from elasticsearch 2.3 to version 6.8.4 . With simple query(filter) , all scores are 0 (same with version 2.3) however, the order of the elements returned is not the same Would the de…

---

## [Best way to update all documents in an index](https://discuss.elastic.co/t/best-way-to-update-all-documents-in-an-index/207785)

<div class="topic-metadata">

**Author:** [@Nox](https://discuss.elastic.co/u/Nox)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 10:03pm UTC](https://discuss.elastic.co/t/best-way-to-update-all-documents-in-an-index/207785 "2019-11-13T22:03:50Z")

</div>

Hi, I added two new properties (type = double) to a mapping. What is the best way to update all the documents in an index with that mapping in Elasticsearch 6.3. Thanks,

---

## [Max Size of query result for bool queries](https://discuss.elastic.co/t/max-size-of-query-result-for-bool-queries/207725)

<div class="topic-metadata">

**Author:** [@DRoeming](https://discuss.elastic.co/u/DRoeming)\
**Replies:** 1\
**Last updated:** [November 13, 2019, 9:34pm UTC](https://discuss.elastic.co/t/max-size-of-query-result-for-bool-queries/207725 "2019-11-13T21:34:39Z")

</div>

Hi, we use nest and we want to display the count of query result. But unfortunatelly the max size for bool query is 10000. How can I increase the number of max results for bool queries. Otherwise is there another way to…

---

## [Compare Pf\_sense rule logs with a list](https://discuss.elastic.co/t/compare-pf-sense-rule-logs-with-a-list/207777)

<div class="topic-metadata">

**Author:** [@athos\_camargo](https://discuss.elastic.co/u/athos_camargo)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 8:56pm UTC](https://discuss.elastic.co/t/compare-pf-sense-rule-logs-with-a-list/207777 "2019-11-13T20:56:05Z")

</div>

I am trying to do a specific dashboard based on PFSENSE rules logs, follow stack that I am using: Pfsense send logs via syslog, the log server have a fluent.d receiving that logs, then send to elastic. What I am alread…

---

## [Storing logs containing several different XML types/schemas into ES](https://discuss.elastic.co/t/storing-logs-containing-several-different-xml-types-schemas-into-es/207764)

<div class="topic-metadata">

**Author:** [@zenluiz](https://discuss.elastic.co/u/zenluiz)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 6:59pm UTC](https://discuss.elastic.co/t/storing-logs-containing-several-different-xml-types-schemas-into-es/207764 "2019-11-13T18:59:49Z")

</div>

Hi, I have millions of lines of logs that I want to index in ES, using Filebeat + Logstash. Each log line can have a different XML that represents a SOAP message that has been received by a WebService and logged, like …

---

## [Querying multiple condition on same field](https://discuss.elastic.co/t/querying-multiple-condition-on-same-field/207233)

<div class="topic-metadata">

**Author:** [@rsganesh83](https://discuss.elastic.co/u/rsganesh83)\
**Replies:** 2\
**Last updated:** [November 13, 2019, 6:49pm UTC](https://discuss.elastic.co/t/querying-multiple-condition-on-same-field/207233 "2019-11-13T18:49:44Z")

</div>

These are the sample documents(event based) indexed in my ES cluster version 6.8 { "user\_id": "user1", "account\_id": "account1", "event\_name": "event-1", "created\_dt": "2019-09-30T08:40:42.297Z" } { "user\_id": …

---

## [Indexing articles with attachments](https://discuss.elastic.co/t/indexing-articles-with-attachments/207419)

<div class="topic-metadata">

**Author:** [@bruinjoe](https://discuss.elastic.co/u/bruinjoe)\
**Replies:** 4\
**Last updated:** [November 13, 2019, 6:44pm UTC](https://discuss.elastic.co/t/indexing-articles-with-attachments/207419 "2019-11-13T18:44:16Z")

</div>

We are using a knowledge management system that allows authors to write articles and attach documents. The article contains the following fields. title description content locale categories issue date attachment…

---

## [Combining Clarifai image search with Elasticsearch](https://discuss.elastic.co/t/combining-clarifai-image-search-with-elasticsearch/207760)

<div class="topic-metadata">

**Author:** [@Paul\_Johnson](https://discuss.elastic.co/u/Paul_Johnson)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 6:23pm UTC](https://discuss.elastic.co/t/combining-clarifai-image-search-with-elasticsearch/207760 "2019-11-13T18:23:03Z")

</div>

Is there some way to combine an external image search system like Clarifai with Elasticsearch? Basically using the external image search system to provide document ids and ordering that can then be filtered by additional…

---

## [OpenID error after authenticating against AWS Cognito](https://discuss.elastic.co/t/openid-error-after-authenticating-against-aws-cognito/206018)

<div class="topic-metadata">

**Author:** [@nahojkap](https://discuss.elastic.co/u/nahojkap)\
**Replies:** 15\
**Last updated:** [November 13, 2019, 6:03pm UTC](https://discuss.elastic.co/t/openid-error-after-authenticating-against-aws-cognito/206018 "2019-11-13T18:03:44Z")

</div>

Attempting to configure a Elastic Cloud Kibana instance to use AWS Cognito for login but running into a the below error after successful login at the OP (AWS Cognito) side. {"statusCode":401,"error":"Unauthorized","mess…

---

## [Why is preference a parameter only and not part of the request body itself?](https://discuss.elastic.co/t/why-is-preference-a-parameter-only-and-not-part-of-the-request-body-itself/207740)

<div class="topic-metadata">

**Author:** [@usteidj](https://discuss.elastic.co/u/usteidj)\
**Replies:** 4\
**Last updated:** [November 13, 2019, 5:24pm UTC](https://discuss.elastic.co/t/why-is-preference-a-parameter-only-and-not-part-of-the-request-body-itself/207740 "2019-11-13T17:24:20Z")

</div>

I'd like to be able to pass in preference as part of the body of the request, like "from", "size", "\_source", "query", etc., but it appears that is not an option. Why?

---

## [Alert triggered without any buckets in aggregation](https://discuss.elastic.co/t/alert-triggered-without-any-buckets-in-aggregation/207682)

<div class="topic-metadata">

**Author:** [@\_heiko](https://discuss.elastic.co/u/_heiko)\
**Replies:** 2\
**Last updated:** [November 13, 2019, 5:23pm UTC](https://discuss.elastic.co/t/alert-triggered-without-any-buckets-in-aggregation/207682 "2019-11-13T17:23:27Z")

</div>

Hi, I'm trying to build an alert that goes off when an instance of a service skipped 10 heartbeats within the last minute. I'm using the following adapted version of what I found in another post. I am aggregating using…

---

## [Elasticsearch Node scalability on K8s](https://discuss.elastic.co/t/elasticsearch-node-scalability-on-k8s/207751)

<div class="topic-metadata">

**Author:** [@sreenivasulu](https://discuss.elastic.co/u/sreenivasulu)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 5:04pm UTC](https://discuss.elastic.co/t/elasticsearch-node-scalability-on-k8s/207751 "2019-11-13T17:04:17Z")

</div>

Hi Team, The ES running successfully in our environment. But don't have a scalability of this cluster, it may go down any point of time. So what would be the best way to configure node scalability on kubernetes to maint…

---

## [Filebeat ILM duplicating index when rolling from hot to warm](https://discuss.elastic.co/t/filebeat-ilm-duplicating-index-when-rolling-from-hot-to-warm/207719)

<div class="topic-metadata">

**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\
**Replies:** 3\
**Last updated:** [November 13, 2019, 4:39pm UTC](https://discuss.elastic.co/t/filebeat-ilm-duplicating-index-when-rolling-from-hot-to-warm/207719 "2019-11-13T16:39:19Z")

</div>

We are shipping server events using filebeat and metrics using metricbeat to our Elastic Cloud cluster that has a hot server and a warm server. The cluster is set up with no redundancy, ie just a single hot and a singl…

---

## [Inner Hits and Rescoring](https://discuss.elastic.co/t/inner-hits-and-rescoring/207745)

<div class="topic-metadata">

**Author:** [@ravensedge](https://discuss.elastic.co/u/ravensedge)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 4:24pm UTC](https://discuss.elastic.co/t/inner-hits-and-rescoring/207745 "2019-11-13T16:24:39Z")

</div>

Hi all, I have the following problem: I want to do filtering on a nested field, then rescore based on the fields that matched the filter. In the minimum working example below, the query returns a score of 9000. However…

---

## [Building elasticsearch source code](https://discuss.elastic.co/t/building-elasticsearch-source-code/207540)

<div class="topic-metadata">

**Author:** [@mamadly](https://discuss.elastic.co/u/mamadly)\
**Replies:** 3\
**Last updated:** [November 13, 2019, 3:40pm UTC](https://discuss.elastic.co/t/building-elasticsearch-source-code/207540 "2019-11-13T15:40:12Z")

</div>

Hi, This is my first time trying to build elasticsearch source code. Wiki is saying that at least java12 is require to build source code. I am running ubuntu 18.04. From the google that I have done it doesn't seem that …

---

## [Cannot change similarity with put\_mapping: conflict with existing mapping](https://discuss.elastic.co/t/cannot-change-similarity-with-put-mapping-conflict-with-existing-mapping/206653)

<div class="topic-metadata">

**Author:** [@winklefr](https://discuss.elastic.co/u/winklefr)\
**Replies:** 5\
**Last updated:** [November 13, 2019, 2:48pm UTC](https://discuss.elastic.co/t/cannot-change-similarity-with-put-mapping-conflict-with-existing-mapping/206653 "2019-11-13T14:48:52Z")

</div>

Hello, I recently set up an elastic search cluster. I have created an index with some text field. I managed to add a new text field using the put\_mapping API. But I cannot update the related similarity. I get the follo…

---

## [Dedicated private temporary directory cleanup policy](https://discuss.elastic.co/t/dedicated-private-temporary-directory-cleanup-policy/207720)

<div class="topic-metadata">

**Author:** [@imrimt](https://discuss.elastic.co/u/imrimt)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 2:21pm UTC](https://discuss.elastic.co/t/dedicated-private-temporary-directory-cleanup-policy/207720 "2019-11-13T14:21:02Z")

</div>

As per this documentation: https://www.elastic.co/guide/en/elasticsearch/reference/6.8/es-tmpdir.html, we should configure a dedicated temp directory when running Elasticsearch on Linux using the tar.gz distribution so t…

---

## [CLUSTER\_RECOVERED and unassigned](https://discuss.elastic.co/t/cluster-recovered-and-unassigned/207717)

<div class="topic-metadata">

**Author:** [@jiangchenghua](https://discuss.elastic.co/u/jiangchenghua)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 2:13pm UTC](https://discuss.elastic.co/t/cluster-recovered-and-unassigned/207717 "2019-11-13T14:13:47Z")

</div>

reason:"cluster\_recovered" allocate\_explanation:cannot allocate because a previous copy of the primary shard existed but can no longer be found on node in the cluster

---

## [No handlers could be found for logger "curator.actions.snapshot"](https://discuss.elastic.co/t/no-handlers-could-be-found-for-logger-curator-actions-snapshot/206947)

<div class="topic-metadata">

**Author:** [@tharu85](https://discuss.elastic.co/u/tharu85)\
**Replies:** 3\
**Last updated:** [November 13, 2019, 1:40pm UTC](https://discuss.elastic.co/t/no-handlers-could-be-found-for-logger-curator-actions-snapshot/206947 "2019-11-13T13:40:51Z")

</div>

Hi I am getting following error while I run a python script and the script failed to create the snapshot. How can I fix this No handlers could be found for logger "curator.actions.snapshot" NOTE: The python script use…

---

## [Different Replica settings per Hot/Warm Nodes](https://discuss.elastic.co/t/different-replica-settings-per-hot-warm-nodes/207701)

<div class="topic-metadata">

**Author:** [@999chris](https://discuss.elastic.co/u/999chris)\
**Replies:** 1\
**Last updated:** [November 13, 2019, 1:14pm UTC](https://discuss.elastic.co/t/different-replica-settings-per-hot-warm-nodes/207701 "2019-11-13T13:14:06Z")

</div>

Hi All, My Cluster status is currently yellow. This is due to shards reaching the end of the lifecycle in the hot nodes and being moved to the warm node, however the replica shards cannot be created as there is only one…

---

## [Unexpected error while indexing monitoring document, lots of queued tasks](https://discuss.elastic.co/t/unexpected-error-while-indexing-monitoring-document-lots-of-queued-tasks/204407)

<div class="topic-metadata">

**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\
**Replies:** 1\
**Last updated:** [November 13, 2019, 12:10pm UTC](https://discuss.elastic.co/t/unexpected-error-while-indexing-monitoring-document-lots-of-queued-tasks/204407 "2019-11-13T12:10:14Z")

</div>

Hello, Seems like my cluster has some issues since last two days. It appears that no new documents has been submitted since Oct 18th 21:30, even though i have multiple pipelines up and running in Logstash. I have 202 in…

---

## [Device log size per day](https://discuss.elastic.co/t/device-log-size-per-day/207695)

<div class="topic-metadata">

**Author:** [@DavidLevi](https://discuss.elastic.co/u/DavidLevi)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 12:00pm UTC](https://discuss.elastic.co/t/device-log-size-per-day/207695 "2019-11-13T12:00:08Z")

</div>

Hello All, I want to see the log size of each log sources per day. How can I do that? Many thanks,

---

## [Order of result in complain autho-suggest](https://discuss.elastic.co/t/order-of-result-in-complain-autho-suggest/207694)

<div class="topic-metadata">

**Author:** [@v81](https://discuss.elastic.co/u/v81)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 11:48am UTC](https://discuss.elastic.co/t/order-of-result-in-complain-autho-suggest/207694 "2019-11-13T11:48:36Z")

</div>

Hi, I have a problem with the order of result in compain autho-suggest. I created index with mapping: { "properties": { "suggest": { "type": "completion", "analyzer": "pattern", "preserve\_separ…

---

## [Can I get the response stream?](https://discuss.elastic.co/t/can-i-get-the-response-stream/207693)

<div class="topic-metadata">

**Author:** [@jspate](https://discuss.elastic.co/u/jspate)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 11:45am UTC](https://discuss.elastic.co/t/can-i-get-the-response-stream/207693 "2019-11-13T11:45:52Z")

</div>

Hi, This may seem like a silly question, but with C# and Nest or the ElasticSearch.net clients is it possible to just get the Stream that comes from Elastic and use it with out the IElasticResponse? What I want to do i…

---

## [Order of upgrading client and upgrading cluster?](https://discuss.elastic.co/t/order-of-upgrading-client-and-upgrading-cluster/207679)

<div class="topic-metadata">

**Author:** [@111222](https://discuss.elastic.co/u/111222)\
**Replies:** 1\
**Last updated:** [November 13, 2019, 11:40am UTC](https://discuss.elastic.co/t/order-of-upgrading-client-and-upgrading-cluster/207679 "2019-11-13T11:40:36Z")

</div>

I'm going to upgrade my 6.8.2 cluster to 7.4.1 and also rest high level client. There might be a time window when client version and cluster version are different: client 6.8.2 with cluster 7.4.1, if I upgrade cluster…

---

## [\[Error\] Setup-passwords: Failed to determine the health of the cluster](https://discuss.elastic.co/t/error-setup-passwords-failed-to-determine-the-health-of-the-cluster/207649)

<div class="topic-metadata">

**Author:** [@cjsjyh](https://discuss.elastic.co/u/cjsjyh)\
**Replies:** 2\
**Last updated:** [November 13, 2019, 11:00am UTC](https://discuss.elastic.co/t/error-setup-passwords-failed-to-determine-the-health-of-the-cluster/207649 "2019-11-13T11:00:59Z")

</div>

I get this error when trying to setup password: /usr/share/elasticsearch/bin# sudo ./elasticsearch-setup-passwords interactive Failed to determine the health of the cluster running at http://172.31.47.37:9200 Unexpecte…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1094)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1096)
