# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1128

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1129

---

## [Adding remote cluster failed](https://discuss.elastic.co/t/adding-remote-cluster-failed/202636)

<div class="topic-metadata">

**Author:** [@EunBae\_Park](https://discuss.elastic.co/u/EunBae_Park)\
**Replies:** 4\
**Last updated:** [October 11, 2019, 9:16am UTC](https://discuss.elastic.co/t/adding-remote-cluster-failed/202636 "2019-10-11T09:16:43Z")

</div>

Hi, This is Jason. I would like to add remote cluster which is free-tier 6.0 with our platinum-tier 6.8 cluster. But I have no success to add this remote cluster. I confirmed firewall is open so I can get remote clu…

---

## [Error code 429 - circuit\_breaking\_exception](https://discuss.elastic.co/t/error-code-429-circuit-breaking-exception/202494)

<div class="topic-metadata">

**Author:** [@worapojc](https://discuss.elastic.co/u/worapojc)\
**Replies:** 9\
**Last updated:** [October 11, 2019, 9:09am UTC](https://discuss.elastic.co/t/error-code-429-circuit-breaking-exception/202494 "2019-10-11T09:09:29Z")

</div>

Hi Elastic team, I got this error from Logstash logs. \[2019-10-07T07:40:55,341\]\[INFO \]\[logstash.outputs.elasticsearch\] retrying failed action with response code: 429 ({"type"=\>"circuit\_breaking\_exception", "reason"=\>"…

---

## [Monitoring of a log file directory](https://discuss.elastic.co/t/monitoring-of-a-log-file-directory/203183)

<div class="topic-metadata">

**Author:** [@RedHatDragon](https://discuss.elastic.co/u/RedHatDragon)\
**Replies:** 0\
**Last updated:** [October 11, 2019, 8:39am UTC](https://discuss.elastic.co/t/monitoring-of-a-log-file-directory/203183 "2019-10-11T08:39:31Z")

</div>

Hi all, i asked Uncle Google and also searched here to the last corner, but without success. So I hope I did not miss anything. I am already using the complete stack without any issues. But thinking about new usecases …

---

## [Elasticsearch, ELk Stack](https://discuss.elastic.co/t/elasticsearch-elk-stack/203162)

<div class="topic-metadata">

**Author:** [@juuuhuuu](https://discuss.elastic.co/u/juuuhuuu)\
**Replies:** 4\
**Last updated:** [October 11, 2019, 8:39am UTC](https://discuss.elastic.co/t/elasticsearch-elk-stack/203162 "2019-10-11T08:39:22Z")

</div>

Hi, I would like to ask you for help. We are already using Elasticsearch for search on the webpages. I want to start with Elastic Stack: Is it possible to use this Elasticsearch also for Elastic Stack .. ? Or do I have…

---

## [Elastic search not able to synch to each other in statefulset](https://discuss.elastic.co/t/elastic-search-not-able-to-synch-to-each-other-in-statefulset/203182)

<div class="topic-metadata">

**Author:** [@kshreyas](https://discuss.elastic.co/u/kshreyas)\
**Replies:** 0\
**Last updated:** [October 11, 2019, 8:36am UTC](https://discuss.elastic.co/t/elastic-search-not-able-to-synch-to-each-other-in-statefulset/203182 "2019-10-11T08:36:11Z")

</div>

zHm-bZyQ}{10.244.6.47}{10.244.6.47:9300}{dim}{xpack.installed=true}\] from last-known cluster state; node term 0, last-accepted version 0 in term 0" } {"type": "server", "timestamp": "2019-10-11T08:34:10,627+0000", "lev…

---

## [Elasticsearch Basic Security Setup](https://discuss.elastic.co/t/elasticsearch-basic-security-setup/203011)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 3\
**Last updated:** [October 11, 2019, 8:08am UTC](https://discuss.elastic.co/t/elasticsearch-basic-security-setup/203011 "2019-10-11T08:08:15Z")

</div>

Hello, I want to setup basic security in multi node cluster what should be discovery.type: single-node for a multi node cluster Since when i used a single node cluster my configuration was xpack.security.enabled: t…

---

## [Reading synonyms from a remote file](https://discuss.elastic.co/t/reading-synonyms-from-a-remote-file/203053)

<div class="topic-metadata">

**Author:** [@Ons](https://discuss.elastic.co/u/Ons)\
**Replies:** 1\
**Last updated:** [October 11, 2019, 8:07am UTC](https://discuss.elastic.co/t/reading-synonyms-from-a-remote-file/203053 "2019-10-11T08:07:51Z")

</div>

Hello, I would like to store the synonyms file in a remote repository (a GCS repository for example) and use it to configure synonyms in Elasticsearch. Is that possible ? I checked the official documentation and it onl…

---

## [Match\_phrase\_prefix different behavior in 6.7.0](https://discuss.elastic.co/t/match-phrase-prefix-different-behavior-in-6-7-0/202844)

<div class="topic-metadata">

**Author:** [@bdelbosc](https://discuss.elastic.co/u/bdelbosc)\
**Replies:** 2\
**Last updated:** [October 11, 2019, 8:02am UTC](https://discuss.elastic.co/t/match-phrase-prefix-different-behavior-in-6-7-0/202844 "2019-10-11T08:02:22Z")

</div>

Hi, I have a different search result when upgrading from 6.6.2 to 6.7.0. It looks like that since 6.7.0 a match\_phrase\_prefix query is now able to match a keyword field. I have read the changelog of 6.7 but I don't fi…

---

## [How to prefer match on a longer percentage of the doc over a longer match?](https://discuss.elastic.co/t/how-to-prefer-match-on-a-longer-percentage-of-the-doc-over-a-longer-match/203173)

<div class="topic-metadata">

**Author:** [@Lea\_Shallev](https://discuss.elastic.co/u/Lea_Shallev)\
**Replies:** 0\
**Last updated:** [October 11, 2019, 7:35am UTC](https://discuss.elastic.co/t/how-to-prefer-match-on-a-longer-percentage-of-the-doc-over-a-longer-match/203173 "2019-10-11T07:35:15Z")

</div>

Hi, I’m using elastic to search terms that were detected in a sentence of free text against an inner DB that was indexed. I have a problem when my query appears in the DB with some tokens repetition. For example: I se…

---

## [How to manage storage and purging elasticsearch](https://discuss.elastic.co/t/how-to-manage-storage-and-purging-elasticsearch/203171)

<div class="topic-metadata">

**Author:** [@cuaralan](https://discuss.elastic.co/u/cuaralan)\
**Replies:** 0\
**Last updated:** [October 11, 2019, 7:30am UTC](https://discuss.elastic.co/t/how-to-manage-storage-and-purging-elasticsearch/203171 "2019-10-11T07:30:23Z")

</div>

Hello, I am new to the forum although I have been working with ELK for a while now. I have done several tests and we are already thinking about implementing a real solution, but my bosses have had some doubts about how …

---

## [How can I order the paragraph contents according to the order in which they were added](https://discuss.elastic.co/t/how-can-i-order-the-paragraph-contents-according-to-the-order-in-which-they-were-added/203161)

<div class="topic-metadata">

**Author:** [@Reena\_Raghavan](https://discuss.elastic.co/u/Reena_Raghavan)\
**Replies:** 0\
**Last updated:** [October 11, 2019, 6:49am UTC](https://discuss.elastic.co/t/how-can-i-order-the-paragraph-contents-according-to-the-order-in-which-they-were-added/203161 "2019-10-11T06:49:58Z")

</div>

How can I order the paragraph contents according to the order in which they were added. In the image the result which i get is not ordered. I need the paragraph content to be in order in which they were added. Techn…

---

## [Index data - tokenizer](https://discuss.elastic.co/t/index-data-tokenizer/203133)

<div class="topic-metadata">

**Author:** [@abhishek.tripathi](https://discuss.elastic.co/u/abhishek.tripathi)\
**Replies:** 5\
**Last updated:** [October 11, 2019, 7:13am UTC](https://discuss.elastic.co/t/index-data-tokenizer/203133 "2019-10-11T07:13:40Z")

</div>

HI, I need to tokenize index data column into a new index. Please help me to achieve that

---

## [Sizing Elasticsearch](https://discuss.elastic.co/t/sizing-elasticsearch/203134)

<div class="topic-metadata">

**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\
**Replies:** 4\
**Last updated:** [October 11, 2019, 6:49am UTC](https://discuss.elastic.co/t/sizing-elasticsearch/203134 "2019-10-11T06:49:38Z")

</div>

Hi everyone, I want to plan the ES cluster reasonably: I have 15 nodes and each nodes have 125G RAM and 31 CPU; The total size of data is 30T(include replica); The total count of shards is 7100(include replica); Es ve…

---

## [Query Sorted nested documents in Elasticsearch](https://discuss.elastic.co/t/query-sorted-nested-documents-in-elasticsearch/203151)

<div class="topic-metadata">

**Author:** [@shwetha94](https://discuss.elastic.co/u/shwetha94)\
**Replies:** 0\
**Last updated:** [October 11, 2019, 6:17am UTC](https://discuss.elastic.co/t/query-sorted-nested-documents-in-elasticsearch/203151 "2019-10-11T06:17:53Z")

</div>

Hello everyone, I am a newbie to Elasticsearch and apologies if the query i am asking is very simple and straightforward. I am using following mapping of students with their education details, PUT students { …

---

## [Using S3 as storage for elasticsearch](https://discuss.elastic.co/t/using-s3-as-storage-for-elasticsearch/202986)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 2\
**Last updated:** [October 11, 2019, 6:02am UTC](https://discuss.elastic.co/t/using-s3-as-storage-for-elasticsearch/202986 "2019-10-11T06:02:54Z")

</div>

Is it possible to use the S3 as a data storage for elasticsearch? As the local storage and the EBS storage cost will be high in a scenario where TB/PB of data needs to be processed and indexed, using s3 as an option will…

---

## [3 node cluster](https://discuss.elastic.co/t/3-node-cluster/203122)

<div class="topic-metadata">

**Author:** [@Chinedum\_Nwuzor](https://discuss.elastic.co/u/Chinedum_Nwuzor)\
**Replies:** 2\
**Last updated:** [October 11, 2019, 5:48am UTC](https://discuss.elastic.co/t/3-node-cluster/203122 "2019-10-11T05:48:32Z")

</div>

I'm trying to setup a 3 node elasticsearch cluster but there appears to be no communication between the 3 nodes even after adding them severally to the discovery.seeds. Please logs below \[2019-10-10T21:44:34,251\]\[DEBUG\]…

---

## [Google SAML 401](https://discuss.elastic.co/t/google-saml-401/202903)

<div class="topic-metadata">

**Author:** [@Brad\_Wadsworth](https://discuss.elastic.co/u/Brad_Wadsworth)\
**Replies:** 3\
**Last updated:** [October 11, 2019, 5:12am UTC](https://discuss.elastic.co/t/google-saml-401/202903 "2019-10-11T05:12:16Z")

</div>

Having issues getting Google SAML SSO to work withe Elastic Cloud. I'm getting a 401 after I choose my Google identity. elasticsearch.yaml: xpack: security: authc: realms: saml: cloud-saml: order: 2 attributes.p…

---

## [Heap settings](https://discuss.elastic.co/t/heap-settings/203113)

<div class="topic-metadata">

**Author:** [@SirJune](https://discuss.elastic.co/u/SirJune)\
**Replies:** 1\
**Last updated:** [October 11, 2019, 3:02am UTC](https://discuss.elastic.co/t/heap-settings/203113 "2019-10-11T03:02:19Z")

</div>

My servers have 188GB RAM. I initially set heap to 16GB -Xms16g -Xmx16g Logs is showing: \[host04\] heap size \[15.8gb\], compressed ordinary object pointers \[true\] and Heap address: 0x0000000400000000, size: 16384 M…

---

## [What determines the size of SSD cache to install?](https://discuss.elastic.co/t/what-determines-the-size-of-ssd-cache-to-install/203129)

<div class="topic-metadata">

**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\
**Replies:** 5\
**Last updated:** [October 11, 2019, 2:59am UTC](https://discuss.elastic.co/t/what-determines-the-size-of-ssd-cache-to-install/203129 "2019-10-11T02:59:30Z")

</div>

I am running ES on a Synology NAS VM. My data and indexes are also stored on the same NAS (same volume). Bays in the NAS may be allocated to filesystem cache. "Elasticsearch heavily relies on the filesystem cache in o…

---

## [Elasticsearch alphanumeric range search](https://discuss.elastic.co/t/elasticsearch-alphanumeric-range-search/200620)

<div class="topic-metadata">

**Author:** [@Anurup\_Borah](https://discuss.elastic.co/u/Anurup_Borah)\
**Replies:** 10\
**Last updated:** [October 11, 2019, 1:55am UTC](https://discuss.elastic.co/t/elasticsearch-alphanumeric-range-search/200620 "2019-10-11T01:55:07Z")

</div>

Hi , I need some suggestion on how to search for any alphanumeric range search if its possible in elasticsearch. I have gone through the below link , I am not able to find any solution for alphanumeric search. https:/…

---

## [ElasticSearch Crashes after Grok test in Kibana 7.4.0](https://discuss.elastic.co/t/elasticsearch-crashes-after-grok-test-in-kibana-7-4-0/203123)

<div class="topic-metadata">

**Author:** [@Nicholas\_Penning](https://discuss.elastic.co/u/Nicholas_Penning)\
**Replies:** 0\
**Last updated:** [October 10, 2019, 10:56pm UTC](https://discuss.elastic.co/t/elasticsearch-crashes-after-grok-test-in-kibana-7-4-0/203123 "2019-10-10T22:56:05Z")

</div>

Playing around in our test cluster I think I may have uncovered an odd bug. I was testing some Grok expressions in Kibana Dev Tools and was able to crash a 3 node cluster with a simple pattern test. Can anyone else vali…

---

## [Can I use post\_filter with top\_hits?](https://discuss.elastic.co/t/can-i-use-post-filter-with-top-hits/203127)

<div class="topic-metadata">

**Author:** [@Arnab\_Banerjee](https://discuss.elastic.co/u/Arnab_Banerjee)\
**Replies:** 0\
**Last updated:** [October 11, 2019, 12:06am UTC](https://discuss.elastic.co/t/can-i-use-post-filter-with-top-hits/203127 "2019-10-11T00:06:41Z")

</div>

Hi, I am using top\_hits aggregation with sort aggregation and want to filter out some of the top\_hits based on a term. Can I use post filter to do that? If now how to use filter aggregation with top hits? So I've paste…

---

## [Using a missing aggregation for a Term, as opposed to a field](https://discuss.elastic.co/t/using-a-missing-aggregation-for-a-term-as-opposed-to-a-field/203118)

<div class="topic-metadata">

**Author:** [@ad\_rip](https://discuss.elastic.co/u/ad_rip)\
**Replies:** 0\
**Last updated:** [October 10, 2019, 10:04pm UTC](https://discuss.elastic.co/t/using-a-missing-aggregation-for-a-term-as-opposed-to-a-field/203118 "2019-10-10T22:04:34Z")

</div>

Hi all, I'm hoping this is the right place to ask this. I'm trying to get an aggregation of the items that don't contain a specific field. They're items with a nested field, as follow: "customFields": …

---

## [Curl response giving "missing authentication token for REST request" despite xpack.security.enabled: false in config file](https://discuss.elastic.co/t/curl-response-giving-missing-authentication-token-for-rest-request-despite-xpack-security-enabled-false-in-config-file/202925)

<div class="topic-metadata">

**Author:** [@lschmid](https://discuss.elastic.co/u/lschmid)\
**Replies:** 3\
**Last updated:** [October 10, 2019, 9:21pm UTC](https://discuss.elastic.co/t/curl-response-giving-missing-authentication-token-for-rest-request-despite-xpack-security-enabled-false-in-config-file/202925 "2019-10-10T21:21:08Z")

</div>

I installed xpack on an elasticsearch instance, and now the output from any curl is: { "error" : { "root\_cause" : \[ { "type" : "security\_exception", "reason" : "missing authentication token for REST request \[/?pret…

---

## [Unable to update ILM policy](https://discuss.elastic.co/t/unable-to-update-ilm-policy/199480)

<div class="topic-metadata">

**Author:** [@anirudhra10](https://discuss.elastic.co/u/anirudhra10)\
**Replies:** 4\
**Last updated:** [October 10, 2019, 9:18pm UTC](https://discuss.elastic.co/t/unable-to-update-ilm-policy/199480 "2019-10-10T21:18:46Z")

</div>

Hello, I have a hot-warm architecture cluster running in production containing 1000+ daily indices spanning 3 months. A single ILM policy moves indices from hot to warm after 4 days of creation, then to cold phase after…

---

## [When using Index Life Cycle Management, how to limit queries to hot indexes](https://discuss.elastic.co/t/when-using-index-life-cycle-management-how-to-limit-queries-to-hot-indexes/202088)

<div class="topic-metadata">

**Author:** [@seperman](https://discuss.elastic.co/u/seperman)\
**Replies:** 5\
**Last updated:** [October 10, 2019, 8:54pm UTC](https://discuss.elastic.co/t/when-using-index-life-cycle-management-how-to-limit-queries-to-hot-indexes/202088 "2019-10-10T20:54:50Z")

</div>

Hello, I'm using ILM to divide my time series data into hot, warm, cold indexes. The hot indexes use more expensive hardware. Warm is read-only and force-merged. And cold is frozen and contains data older than 60 days. …

---

## [Elasticsearch and Portworx](https://discuss.elastic.co/t/elasticsearch-and-portworx/201312)

<div class="topic-metadata">

**Author:** [@Nathan\_Julsrud](https://discuss.elastic.co/u/Nathan_Julsrud)\
**Replies:** 6\
**Last updated:** [October 10, 2019, 8:46pm UTC](https://discuss.elastic.co/t/elasticsearch-and-portworx/201312 "2019-10-10T20:46:43Z")

</div>

Hi All, Has anybody had success with using these two technologies together? We are running ES in a docker container, orchestrated by Hashicorp Nomad, and have successfully instantiated ES using portworx volumes. The …

---

## [Default value of Minimum should match in should clause](https://discuss.elastic.co/t/default-value-of-minimum-should-match-in-should-clause/202924)

<div class="topic-metadata">

**Author:** [@Seetha93](https://discuss.elastic.co/u/Seetha93)\
**Replies:** 2\
**Last updated:** [October 10, 2019, 7:55pm UTC](https://discuss.elastic.co/t/default-value-of-minimum-should-match-in-should-clause/202924 "2019-10-10T19:55:45Z")

</div>

Do we need to explicitly set minimum\_should\_match: 1, for bool query with only should clause?

---

## [Offline backup](https://discuss.elastic.co/t/offline-backup/203069)

<div class="topic-metadata">

**Author:** [@SirJune](https://discuss.elastic.co/u/SirJune)\
**Replies:** 4\
**Last updated:** [October 10, 2019, 6:27pm UTC](https://discuss.elastic.co/t/offline-backup/203069 "2019-10-10T18:27:33Z")

</div>

i would like to do an offline backup of nodes. Say, i stop elasticsearch on all nodes, rsync /data/elasticsearch/nodes/ to a remote NFS server. would i get the same data(indices, visualization,etc) if i rsync from…

---

## [Accepting late events after force-merge](https://discuss.elastic.co/t/accepting-late-events-after-force-merge/203034)

<div class="topic-metadata">

**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\
**Replies:** 4\
**Last updated:** [October 10, 2019, 6:02pm UTC](https://discuss.elastic.co/t/accepting-late-events-after-force-merge/203034 "2019-10-10T18:02:01Z")

</div>

As mentioned in docs, when we define force-merge as part of an ILM policy, it also makes the index read-only. I want to force-merge an index to compact it and get some size benefit but I don't want to make it read-only. …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1127)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1129)
