# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1119

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1120

---

## [Trial license not basic](https://discuss.elastic.co/t/trial-license-not-basic/204206)

<div class="topic-metadata">

**Author:** [@tpetersen](https://discuss.elastic.co/u/tpetersen)\
**Replies:** 2\
**Last updated:** [October 21, 2019, 5:06am UTC](https://discuss.elastic.co/t/trial-license-not-basic/204206 "2019-10-21T05:06:27Z")

</div>

Hi there, Been setting up HTTPS security on a cluster (version 6.8.0) and I have this in my eleasticsearch.yml xpack.license.self\_generated.type: basic But I see this when I check the logs \[2019-10-18T12:36:14,091\]\[…

---

## [Clarity on doc values vs ordinals and effect on refresh time?](https://discuss.elastic.co/t/clarity-on-doc-values-vs-ordinals-and-effect-on-refresh-time/204395)

<div class="topic-metadata">

**Author:** [@nishant.saini](https://discuss.elastic.co/u/nishant.saini)\
**Replies:** 0\
**Last updated:** [October 21, 2019, 4:35am UTC](https://discuss.elastic.co/t/clarity-on-doc-values-vs-ordinals-and-effect-on-refresh-time/204395 "2019-10-21T04:35:31Z")

</div>

I have been going through elastic documentation and definitive guide to understand the use of doc values, ordinals and field data. While going through, I was unable to get a clear picture on in which scenario the one is …

---

## [Can elasticsearch-head be configured to connect to secured ES?](https://discuss.elastic.co/t/can-elasticsearch-head-be-configured-to-connect-to-secured-es/204386)

<div class="topic-metadata">

**Author:** [@Nee\_Defeng](https://discuss.elastic.co/u/Nee_Defeng)\
**Replies:** 0\
**Last updated:** [October 21, 2019, 12:37am UTC](https://discuss.elastic.co/t/can-elasticsearch-head-be-configured-to-connect-to-secured-es/204386 "2019-10-21T00:37:06Z")

</div>

I referred the instruction from this link: https://github.com/mobz/elasticsearch-head and tried to use 'http://localhost:9100/?auth\_user=elastic&auth\_password=changeme' but failed. Anyone has done before successfully? T…

---

## [Why one node has no shard at all](https://discuss.elastic.co/t/why-one-node-has-no-shard-at-all/204348)

<div class="topic-metadata">

**Author:** [@Nee\_Defeng](https://discuss.elastic.co/u/Nee_Defeng)\
**Replies:** 2\
**Last updated:** [October 20, 2019, 8:53pm UTC](https://discuss.elastic.co/t/why-one-node-has-no-shard-at-all/204348 "2019-10-20T20:53:59Z")

</div>

One index was created as Unassigned: /localhost:9200/\_cat/shards?v index shard prirep state docs store ip node .kibana\_task\_manager\_1 0 p STARTED 2 46.1kb…

---

## [Received ban for the parent](https://discuss.elastic.co/t/received-ban-for-the-parent/204376)

<div class="topic-metadata">

**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\
**Replies:** 1\
**Last updated:** [October 20, 2019, 8:08pm UTC](https://discuss.elastic.co/t/received-ban-for-the-parent/204376 "2019-10-20T20:08:20Z")

</div>

Hi guys, Periodically in debug logs we can see: \[2019-10-20T18:07:48,342\]\[DEBUG\]\[o.e.a.a.c.n.t.c.TransportCancelTasksAction\] \[node-00\] Received ban for the parent \[s8jcicF9TDy\_iIzFgH07zw:10741071\] on the node \[A9AdXLb5…

---

## [Partial Replication of Index](https://discuss.elastic.co/t/partial-replication-of-index/204373)

<div class="topic-metadata">

**Author:** [@esdev1978](https://discuss.elastic.co/u/esdev1978)\
**Replies:** 0\
**Last updated:** [October 20, 2019, 5:30pm UTC](https://discuss.elastic.co/t/partial-replication-of-index/204373 "2019-10-20T17:30:55Z")

</div>

Hello, I am pretty new to ES , I have the following question regarding replication. We have a central cluster with a large index with all the products. All the updates take place on this cluster. Each product has a mu…

---

## ["node.name" value not being applied](https://discuss.elastic.co/t/node-name-value-not-being-applied/204367)

<div class="topic-metadata">

**Author:** [@mcohen](https://discuss.elastic.co/u/mcohen)\
**Replies:** 1\
**Last updated:** [October 20, 2019, 5:08pm UTC](https://discuss.elastic.co/t/node-name-value-not-being-applied/204367 "2019-10-20T17:08:22Z")

</div>

I'm testing with an internal cluster, 3 nodes on the same VM. Env: Ubuntu 18.04.3 LTS, elasticsearch-7.3.2-amd64.deb (Debian) To simulate multiple nodes, I've replicated the /etc/elasticsearch directory, results are as…

---

## [Sort aggregations by sum of sub aggregations?](https://discuss.elastic.co/t/sort-aggregations-by-sum-of-sub-aggregations/204329)

<div class="topic-metadata">

**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\
**Replies:** 2\
**Last updated:** [October 20, 2019, 3:35pm UTC](https://discuss.elastic.co/t/sort-aggregations-by-sum-of-sub-aggregations/204329 "2019-10-20T15:35:11Z")

</div>

Hi, The query at the bottom of this thread returns data in this shape, ordered by the key value asc: Is there a way for me to sort the aggregations by the sum of the user\_count values per key? I want the data to sta…

---

## [Snapshot name patterns](https://discuss.elastic.co/t/snapshot-name-patterns/204314)

<div class="topic-metadata">

**Author:** [@wyllys66](https://discuss.elastic.co/u/wyllys66)\
**Replies:** 2\
**Last updated:** [October 20, 2019, 1:30pm UTC](https://discuss.elastic.co/t/snapshot-name-patterns/204314 "2019-10-20T13:30:49Z")

</div>

In elasticsearch 7.4.0, I have a snapshot policy that has the snapshot name pattern set to ""\<snapshot-{now/d}\>", however when the snapshots are taken, they have extra characters appended to the name, for example: snap…

---

## [Index template not being applied](https://discuss.elastic.co/t/index-template-not-being-applied/204277)

<div class="topic-metadata">

**Author:** [@John\_Doe3](https://discuss.elastic.co/u/John_Doe3)\
**Replies:** 6\
**Last updated:** [October 20, 2019, 12:13pm UTC](https://discuss.elastic.co/t/index-template-not-being-applied/204277 "2019-10-20T12:13:49Z")

</div>

To achieve my goal - map geo location data from nginx logs to a map - I added a index template to ES with command like this: PUT \_template/nginx-default { "template": "nginx-\*", "order": 0, "index\_patterns" : \[ "nginx…

---

## [Deprecation warnings since the upgrade to 7.4.0](https://discuss.elastic.co/t/deprecation-warnings-since-the-upgrade-to-7-4-0/201917)

<div class="topic-metadata">

**Author:** [@Yakir\_Gibraltar](https://discuss.elastic.co/u/Yakir_Gibraltar)\
**Replies:** 7\
**Last updated:** [October 20, 2019, 9:59am UTC](https://discuss.elastic.co/t/deprecation-warnings-since-the-upgrade-to-7-4-0/201917 "2019-10-20T09:59:36Z")

</div>

Hi, since the upgrade from 7.3.2 to 7.4.0, i see many errors of: \[WARN \]\[o.e.d.t.TransportInfo \] \[es-data001.tab.com\] transport.publish\_address was printed as \[ip:port\] instead of \[hostname/ip:port\]. This format is d…

---

## [Aggregation sum for all keys within field](https://discuss.elastic.co/t/aggregation-sum-for-all-keys-within-field/204345)

<div class="topic-metadata">

**Author:** [@Hammad\_Ali\_Khan](https://discuss.elastic.co/u/Hammad_Ali_Khan)\
**Replies:** 0\
**Last updated:** [October 20, 2019, 9:53am UTC](https://discuss.elastic.co/t/aggregation-sum-for-all-keys-within-field/204345 "2019-10-20T09:53:39Z")

</div>

Hi there, Just curious if there is a better way for aggregation sum for a structure like this { "combiner\_energy" : { "INV1-CB1-kWh" : 121.15685325833331, "INV1-CB2-kWh" : 126.64289340000002, "INV1-CB3-kWh" : 111.2…

---

## [Searching Sorting](https://discuss.elastic.co/t/searching-sorting/204286)

<div class="topic-metadata">

**Author:** [@Bidzina\_Goginashvili](https://discuss.elastic.co/u/Bidzina_Goginashvili)\
**Replies:** 4\
**Last updated:** [October 19, 2019, 9:50pm UTC](https://discuss.elastic.co/t/searching-sorting/204286 "2019-10-19T21:50:32Z")

</div>

1)When I search for iphone xs 256GB it finds it succesfully, but not finds nothing on this case iphone 256GB xs 2)When I search for ACTIV A151-02 Fresh Line 6000mAh (green) it only finds this ACTIV A151-02 Fresh L…

---

## [Keyword search using Elastic search](https://discuss.elastic.co/t/keyword-search-using-elastic-search/204271)

<div class="topic-metadata">

**Author:** [@dharmil25](https://discuss.elastic.co/u/dharmil25)\
**Replies:** 2\
**Last updated:** [October 19, 2019, 6:10pm UTC](https://discuss.elastic.co/t/keyword-search-using-elastic-search/204271 "2019-10-19T18:10:47Z")

</div>

Hi, I am new to Elasticsearch and I am trying to achieve a text search functionality using Elasticsearch. I have over 100 documents and every document has lines starting with timestamp notations. Eg. 00:00:00 - 00:01:…

---

## [Elastic search extracts text inside title attribute of anchor tags while adding pdf attachment](https://discuss.elastic.co/t/elastic-search-extracts-text-inside-title-attribute-of-anchor-tags-while-adding-pdf-attachment/204255)

<div class="topic-metadata">

**Author:** [@sandeepv](https://discuss.elastic.co/u/sandeepv)\
**Replies:** 3\
**Last updated:** [October 19, 2019, 1:59pm UTC](https://discuss.elastic.co/t/elastic-search-extracts-text-inside-title-attribute-of-anchor-tags-while-adding-pdf-attachment/204255 "2019-10-19T13:59:40Z")

</div>

I have added a base64 encoded pdf file with pipeline= attachment using kibana into Elasticsearch when i queried the pdf with highlights i got the below result dan@1abmedia.com https://www.globenewswire.com/Tracker?da…

---

## [One node now failing after successful upgrade 6.8-\>7.4 day before](https://discuss.elastic.co/t/one-node-now-failing-after-successful-upgrade-6-8-7-4-day-before/204307)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 1\
**Last updated:** [October 19, 2019, 1:17pm UTC](https://discuss.elastic.co/t/one-node-now-failing-after-successful-upgrade-6-8-7-4-day-before/204307 "2019-10-19T13:17:51Z")

</div>

Did an upgrade yesterday from 6.8 to 7.1.1 to 7.4 Today I find one node out of 27 data nodes failing like below and wonder who and why are sending so large message(s): \[2019-10-19T13:53:43,380\]\[DEBUG\]\[o.e.a.a.c.n.i.Tra…

---

## [Replica shards are not involving while searching](https://discuss.elastic.co/t/replica-shards-are-not-involving-while-searching/203688)

<div class="topic-metadata">

**Author:** [@chanakagl](https://discuss.elastic.co/u/chanakagl)\
**Replies:** 6\
**Last updated:** [October 19, 2019, 12:48pm UTC](https://discuss.elastic.co/t/replica-shards-are-not-involving-while-searching/203688 "2019-10-19T12:48:07Z")

</div>

Hi, I have 3 node cluster with time series indices(per day). I have enabled allocation awareness and all nodes in AWS. Node2 is having Index1 all replica shards on it while primaries are assigned to other two nodes. wh…

---

## [Template inheritance: non-dynamic mappings](https://discuss.elastic.co/t/template-inheritance-non-dynamic-mappings/204306)

<div class="topic-metadata">

**Author:** [@jesus\_1](https://discuss.elastic.co/u/jesus_1)\
**Replies:** 2\
**Last updated:** [October 19, 2019, 12:15pm UTC](https://discuss.elastic.co/t/template-inheritance-non-dynamic-mappings/204306 "2019-10-19T12:15:14Z")

</div>

Hi, Using ES 7.0.0. I've been looking for docs/posts about this, but most info is very old or not clear, and after playing around with it I don't understand how it should work. I have different indexes that have a comm…

---

## [Time series visualization of logs -HELP](https://discuss.elastic.co/t/time-series-visualization-of-logs-help/204301)

<div class="topic-metadata">

**Author:** [@anusree\_arun](https://discuss.elastic.co/u/anusree_arun)\
**Replies:** 0\
**Last updated:** [October 19, 2019, 9:31am UTC](https://discuss.elastic.co/t/time-series-visualization-of-logs-help/204301 "2019-10-19T09:31:54Z")

</div>

how to perform time series visualization of logs / data using ML and the same has to be added in dashboard also. Any steps or docs available.

---

## [Spark-es too many request error - 429 error code](https://discuss.elastic.co/t/spark-es-too-many-request-error-429-error-code/204298)

<div class="topic-metadata">

**Author:** [@Vishnu\_Singhal](https://discuss.elastic.co/u/Vishnu_Singhal)\
**Replies:** 1\
**Last updated:** [October 19, 2019, 8:23am UTC](https://discuss.elastic.co/t/spark-es-too-many-request-error-429-error-code/204298 "2019-10-19T08:23:48Z")

</div>

Node Hot thread api gives following input ::: {appsec-es-master-0}{AAw21yu1Q1e5ZWMoBe2ZPA}{4IRnxBeST3ODTCHlLq\_FqA}{10.244.3.48}{10.244.3.48:9300}{ml.machine\_memory=2147483648, xpack.installed=true, ml.max\_open\_jobs=20} …

---

## [How to change Index.mapping.depth.limit](https://discuss.elastic.co/t/how-to-change-index-mapping-depth-limit/204233)

<div class="topic-metadata">

**Author:** [@planetracer](https://discuss.elastic.co/u/planetracer)\
**Replies:** 1\
**Last updated:** [October 19, 2019, 8:16am UTC](https://discuss.elastic.co/t/how-to-change-index-mapping-depth-limit/204233 "2019-10-19T08:16:16Z")

</div>

How would you set the index.mapping.depth.limit field? I have been getting this error: "status" : 400, "error" : { "type" : "illegal\_argument\_exception", "reason" : "Limit of mapping depth \[20\] in index \[durations2\] …

---

## [Optimising Elasticsearch for timeseries data with high search query QPS](https://discuss.elastic.co/t/optimising-elasticsearch-for-timeseries-data-with-high-search-query-qps/200715)

<div class="topic-metadata">

**Author:** [@viswanathk243](https://discuss.elastic.co/u/viswanathk243)\
**Replies:** 1\
**Last updated:** [October 19, 2019, 7:59am UTC](https://discuss.elastic.co/t/optimising-elasticsearch-for-timeseries-data-with-high-search-query-qps/200715 "2019-10-19T07:59:09Z")

</div>

Hey, We are using ElasticSearch 2.2.0 with an expected search QPS of 80K with an expected p99 of 180ms. Current cluster is of 40 nodes with 12 cores, 24 GB memory (12 GB heap size). Data is 150K documents, one shard wi…

---

## [How to restore the snapshot in Docker?](https://discuss.elastic.co/t/how-to-restore-the-snapshot-in-docker/204220)

<div class="topic-metadata">

**Author:** [@Nee\_Defeng](https://discuss.elastic.co/u/Nee_Defeng)\
**Replies:** 1\
**Last updated:** [October 19, 2019, 3:47am UTC](https://discuss.elastic.co/t/how-to-restore-the-snapshot-in-docker/204220 "2019-10-19T03:47:01Z")

</div>

I have setup a cluster on the docker, and after completed taking the snapshot successfully, I am trying to simulate the scenario to restore the snapshot. What are the steps to do so? I can't find the instructions from t…

---

## [Sorting data](https://discuss.elastic.co/t/sorting-data/204290)

<div class="topic-metadata">

**Author:** [@agus](https://discuss.elastic.co/u/agus)\
**Replies:** 1\
**Last updated:** [October 19, 2019, 12:28am UTC](https://discuss.elastic.co/t/sorting-data/204290 "2019-10-19T00:28:03Z")

</div>

can elasticsearch sorting handle full text like "microsoft office"

---

## [Reindexing from Remote Cluster Fails](https://discuss.elastic.co/t/reindexing-from-remote-cluster-fails/202219)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 2\
**Last updated:** [October 18, 2019, 11:41pm UTC](https://discuss.elastic.co/t/reindexing-from-remote-cluster-fails/202219 "2019-10-18T23:41:08Z")

</div>

I have two clusters running Elasticsearch & Kibana 7.3. I've been able to reindex documents to the same cluster without issue in the past, however when attempting to Reindex from Remote, it's been reindexing much more sl…

---

## [Restore 6.1.1 to 7.3.1 bug?](https://discuss.elastic.co/t/restore-6-1-1-to-7-3-1-bug/204288)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 1\
**Last updated:** [October 18, 2019, 11:34pm UTC](https://discuss.elastic.co/t/restore-6-1-1-to-7-3-1-bug/204288 "2019-10-18T23:34:46Z")

</div>

Is this a known issue? I was running 7.3.0 and restored ran fine. But now upgraded to 7.3.1, I'm getting unassigned shards.

---

## [Closed/Frozen indices behavior on cluster restart](https://discuss.elastic.co/t/closed-frozen-indices-behavior-on-cluster-restart/204272)

<div class="topic-metadata">

**Author:** [@lschmid](https://discuss.elastic.co/u/lschmid)\
**Replies:** 1\
**Last updated:** [October 18, 2019, 10:11pm UTC](https://discuss.elastic.co/t/closed-frozen-indices-behavior-on-cluster-restart/204272 "2019-10-18T22:11:56Z")

</div>

Hi, Say we have 3 frozen indices and 2 closed indices in a cluster. When the cluster restarts, will the frozen indices be unfrozen and the closed indices reopened? Thanks

---

## [ELK stack and topology map](https://discuss.elastic.co/t/elk-stack-and-topology-map/204284)

<div class="topic-metadata">

**Author:** [@Christopher\_Smith1](https://discuss.elastic.co/u/Christopher_Smith1)\
**Replies:** 0\
**Last updated:** [October 18, 2019, 9:58pm UTC](https://discuss.elastic.co/t/elk-stack-and-topology-map/204284 "2019-10-18T21:58:23Z")

</div>

Any dev work on frequently collecting SNMP/CDP/LLDP to automatically refresh topology map? Keen to connect, spin up, etc

---

## [Do \_refresh operation is very slow on my index](https://discuss.elastic.co/t/do-refresh-operation-is-very-slow-on-my-index/204007)

<div class="topic-metadata">

**Author:** [@DENGBO\_SUN](https://discuss.elastic.co/u/DENGBO_SUN)\
**Replies:** 4\
**Last updated:** [October 18, 2019, 7:32pm UTC](https://discuss.elastic.co/t/do-refresh-operation-is-very-slow-on-my-index/204007 "2019-10-18T19:32:52Z")

</div>

es version: 6.5.1 docker cluster machine: 3\* 16c64G kibana monitor show: status: I have a index, which has 196mill docs and the total size is 377GB, mapping data: { "mapping": { "t": { "properties": { …

---

## [Elasticsearch 7.3.2 not starting with security enabled](https://discuss.elastic.co/t/elasticsearch-7-3-2-not-starting-with-security-enabled/200458)

<div class="topic-metadata">

**Author:** [@fchiorascu](https://discuss.elastic.co/u/fchiorascu)\
**Replies:** 6\
**Last updated:** [October 18, 2019, 11:46am UTC](https://discuss.elastic.co/t/elasticsearch-7-3-2-not-starting-with-security-enabled/200458 "2019-10-18T11:46:34Z")

</div>

Dear all, Elasticsearch: \[root@fchiorascu-2 ~\]# cat /etc/elasticsearch/elasticsearch.yml cluster.name: fchiorascu-efk node.name: fchiorascu-2 path.data: /data/elasticsearch/fchiorascu-2 path.logs: /var/log/elastic…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1118)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1120)
