# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1144

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1145

---

## [Elasticsearch occasionally slow query problem](https://discuss.elastic.co/t/elasticsearch-occasionally-slow-query-problem/200997)

<div class="topic-metadata">

**Author:** [@binzhang](https://discuss.elastic.co/u/binzhang)\
**Replies:** 1\
**Last updated:** [September 25, 2019, 9:15am UTC](https://discuss.elastic.co/t/elasticsearch-occasionally-slow-query-problem/200997 "2019-09-25T09:15:26Z")

</div>

Basic configurations: cluster: two nodes as master eligible node and data node es version: 7.2.0 jvm heap size: 31GB per node node memory: 256GB per node primary/replica shards: 1/1 disk: 2TB+ per node deploy mode:…

---

## [How to rollback from 7.3 to 6.2.2](https://discuss.elastic.co/t/how-to-rollback-from-7-3-to-6-2-2/199971)

<div class="topic-metadata">

**Author:** [@Konathala\_Naveen](https://discuss.elastic.co/u/Konathala_Naveen)\
**Replies:** 2\
**Last updated:** [September 25, 2019, 8:59am UTC](https://discuss.elastic.co/t/how-to-rollback-from-7-3-to-6-2-2/199971 "2019-09-25T08:59:49Z")

</div>

After upgrade from 6.2.2 to 7.3 and if we face any issue , how to rollback to olderversion of 6.2.2 from 7.3?

---

## [Data Type to specify exact tokens to index](https://discuss.elastic.co/t/data-type-to-specify-exact-tokens-to-index/195637)

<div class="topic-metadata">

**Author:** [@robmartin11](https://discuss.elastic.co/u/robmartin11)\
**Replies:** 13\
**Last updated:** [September 25, 2019, 8:57am UTC](https://discuss.elastic.co/t/data-type-to-specify-exact-tokens-to-index/195637 "2019-09-25T08:57:36Z")

</div>

Is there any way to index content by specifying the exact tokens to index? For example: PUT /index/type/1 { “content”: “Some content to index”, “tokens”: \[ { “value”: “data” “start”: 5, “end”: 11 } \] } …

---

## [Formula to estimate optimal number of shards giving input parametes ( heap-size, average-index-size, etc...)](https://discuss.elastic.co/t/formula-to-estimate-optimal-number-of-shards-giving-input-parametes-heap-size-average-index-size-etc/200975)

<div class="topic-metadata">

**Author:** [@dbergamo](https://discuss.elastic.co/u/dbergamo)\
**Replies:** 0\
**Last updated:** [September 25, 2019, 7:27am UTC](https://discuss.elastic.co/t/formula-to-estimate-optimal-number-of-shards-giving-input-parametes-heap-size-average-index-size-etc/200975 "2019-09-25T07:27:01Z")

</div>

Hello guys, i have read some discussion topic on how to tune-up logstash configuration, and for what i have understand there are a bunch of variables and metrics that should be related. I.e: average shard's size shou…

---

## [Stuck with too many open files issue](https://discuss.elastic.co/t/stuck-with-too-many-open-files-issue/200809)

<div class="topic-metadata">

**Author:** [@yelabbas](https://discuss.elastic.co/u/yelabbas)\
**Replies:** 2\
**Last updated:** [September 25, 2019, 7:29am UTC](https://discuss.elastic.co/t/stuck-with-too-many-open-files-issue/200809 "2019-09-25T07:29:53Z")

</div>

Hello Elasticsearch community, We're stuck while trying to recover our Elasticsearch instance. Here's our situation : We deployed some months ago an instance (1 node only) of elasticsearch in a Kubernetes cluster. (…

---

## [Elastic migration](https://discuss.elastic.co/t/elastic-migration/200971)

<div class="topic-metadata">

**Author:** [@priiya21](https://discuss.elastic.co/u/priiya21)\
**Replies:** 3\
**Last updated:** [September 25, 2019, 7:20am UTC](https://discuss.elastic.co/t/elastic-migration/200971 "2019-09-25T07:20:43Z")

</div>

How to upgrade elastic search 2.4.1 to 7.3.2 without affecting the index ?

---

## [Max Timeout Reached While Re-Indexing](https://discuss.elastic.co/t/max-timeout-reached-while-re-indexing/200966)

<div class="topic-metadata">

**Author:** [@maryam\_abdullah](https://discuss.elastic.co/u/maryam_abdullah)\
**Replies:** 0\
**Last updated:** [September 25, 2019, 6:31am UTC](https://discuss.elastic.co/t/max-timeout-reached-while-re-indexing/200966 "2019-09-25T06:31:23Z")

</div>

Hey, I'm getting the following exception while re-indexing my data: Maximum timeout reached while retrying request. Call: Status code unknown from: POST /\_reindex?pretty=true&wait\_for\_completion=true What can I do in …

---

## [Circuit breaking EXception while using Reindex API](https://discuss.elastic.co/t/circuit-breaking-exception-while-using-reindex-api/200922)

<div class="topic-metadata">

**Author:** [@Siva\_Karan](https://discuss.elastic.co/u/Siva_Karan)\
**Replies:** 3\
**Last updated:** [September 25, 2019, 5:49am UTC](https://discuss.elastic.co/t/circuit-breaking-exception-while-using-reindex-api/200922 "2019-09-25T05:49:58Z")

</div>

Hi, while using Reindex API we are getting circuit breaking Exception "cause" : { "type" : "circuit\_breaking\_exception", "reason" : "\[parent\] Data too large, data for \[\<transport\_request\>\] would be \[388057197…

---

## [Can I force ES 7+ to use bundled JDK instead of the one in JAVA\_HOME?](https://discuss.elastic.co/t/can-i-force-es-7-to-use-bundled-jdk-instead-of-the-one-in-java-home/199622)

<div class="topic-metadata">

**Author:** [@mesztam](https://discuss.elastic.co/u/mesztam)\
**Replies:** 8\
**Last updated:** [September 25, 2019, 4:42am UTC](https://discuss.elastic.co/t/can-i-force-es-7-to-use-bundled-jdk-instead-of-the-one-in-java-home/199622 "2019-09-25T04:42:38Z")

</div>

Hi, is it possible to force ES to use the bundled JDK instead of the one pointed by JAVA\_HOME? In some environments, elder version of JAVA is already installed and used by other applications, and customers may refuse t…

---

## [Can't setup password for Elasticsearch cluster with multiple master nodes](https://discuss.elastic.co/t/cant-setup-password-for-elasticsearch-cluster-with-multiple-master-nodes/199686)

<div class="topic-metadata">

**Author:** [@avinash9999](https://discuss.elastic.co/u/avinash9999)\
**Replies:** 2\
**Last updated:** [September 25, 2019, 3:23am UTC](https://discuss.elastic.co/t/cant-setup-password-for-elasticsearch-cluster-with-multiple-master-nodes/199686 "2019-09-25T03:23:00Z")

</div>

Not able to setup password for Elasticsearch cluster with 3 (master + data) nodes. I took advice from various post of many Elasticsearch Engineers to create cluster with 3 minimum nodes so I have create my cluster with …

---

## [Why does ES 7.3.1 come with JDK 12.0.2, which is not LTS?](https://discuss.elastic.co/t/why-does-es-7-3-1-come-with-jdk-12-0-2-which-is-not-lts/199716)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 6\
**Last updated:** [September 25, 2019, 12:29am UTC](https://discuss.elastic.co/t/why-does-es-7-3-1-come-with-jdk-12-0-2-which-is-not-lts/199716 "2019-09-25T00:29:19Z")

</div>

The online guide recommends using LTS version of JDK. But the one it bundles with (12.0.2) is not LTS. Should I just use that version or downgrade? I got the bundled version from the official docker image for 7.3.1 …

---

## [Elasticsearch slows down over time](https://discuss.elastic.co/t/elasticsearch-slows-down-over-time/200324)

<div class="topic-metadata">

**Author:** [@mudricd](https://discuss.elastic.co/u/mudricd)\
**Replies:** 6\
**Last updated:** [September 24, 2019, 11:31pm UTC](https://discuss.elastic.co/t/elasticsearch-slows-down-over-time/200324 "2019-09-24T23:31:43Z")

</div>

Hi there, Our Elasticsearch started running very slow. After every restart I am able to use Kibana but it gradually slows down and eventually I get timed out. I found the following in the logs: Sep 20 08:58:02 localho…

---

## [Indexing nested props with NEST 7.1 leads to unqueryable $ref props in indexed docs?!](https://discuss.elastic.co/t/indexing-nested-props-with-nest-7-1-leads-to-unqueryable-ref-props-in-indexed-docs/200071)

<div class="topic-metadata">

**Author:** [@nielo](https://discuss.elastic.co/u/nielo)\
**Replies:** 3\
**Last updated:** [September 24, 2019, 10:09pm UTC](https://discuss.elastic.co/t/indexing-nested-props-with-nest-7-1-leads-to-unqueryable-ref-props-in-indexed-docs/200071 "2019-09-24T22:09:01Z")

</div>

Dear team and people out there, we just upgraded from 6.3 to 7.1 and after recreating our indices and reindexing our docs poco properties like \[Nest.Nested\] public Address Location { get { return HasAddress ? Addre…

---

## [1 of 3 shards failed](https://discuss.elastic.co/t/1-of-3-shards-failed/200936)

<div class="topic-metadata">

**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\
**Replies:** 0\
**Last updated:** [September 24, 2019, 9:15pm UTC](https://discuss.elastic.co/t/1-of-3-shards-failed/200936 "2019-09-24T21:15:53Z")

</div>

I just noticed an error message when I'm trying to visualize extracted fields from Discover tab. It says 1 of 3 shards failed. What's the reason behind this and where should I look to see why it's failing?

---

## [Client node-kibana not able to connect to elasticsearch](https://discuss.elastic.co/t/client-node-kibana-not-able-to-connect-to-elasticsearch/199763)

<div class="topic-metadata">

**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\
**Replies:** 1\
**Last updated:** [September 24, 2019, 9:01pm UTC](https://discuss.elastic.co/t/client-node-kibana-not-able-to-connect-to-elasticsearch/199763 "2019-09-24T21:01:48Z")

</div>

Hi , i am trying running kibana on GCP with just 1 data node and 1 client node. kibana.yml The Kibana server's name. This is used for display purposes. server.name: "elastic-cluster" The URLs of the Elasticsearch in…

---

## [Performance impact of running a cluster on SSL](https://discuss.elastic.co/t/performance-impact-of-running-a-cluster-on-ssl/199845)

<div class="topic-metadata">

**Author:** [@kapad](https://discuss.elastic.co/u/kapad)\
**Replies:** 1\
**Last updated:** [September 24, 2019, 8:59pm UTC](https://discuss.elastic.co/t/performance-impact-of-running-a-cluster-on-ssl/199845 "2019-09-24T20:59:43Z")

</div>

My organization is considering whether to run our ES clusters on SSL and I've been tasked with evaluating the performance impact of a cluster on SSL vs a cluster over plain TCP/HTTP. Since there are two modes of communi…

---

## [Kerberos, LDAP - Kibana](https://discuss.elastic.co/t/kerberos-ldap-kibana/200011)

<div class="topic-metadata">

**Author:** [@ivanavi](https://discuss.elastic.co/u/ivanavi)\
**Replies:** 4\
**Last updated:** [September 24, 2019, 8:52pm UTC](https://discuss.elastic.co/t/kerberos-ldap-kibana/200011 "2019-09-24T20:52:25Z")

</div>

Hello, is it possible to configure Kerberos for authentication and use AD/LDAP for authorization (user group membership is read from LDAP for assigning roles? When will be Kibana - Kerberos feature available? Thanks.

---

## [Unexpected result from field collapsing](https://discuss.elastic.co/t/unexpected-result-from-field-collapsing/200917)

<div class="topic-metadata">

**Author:** [@frankshad](https://discuss.elastic.co/u/frankshad)\
**Replies:** 2\
**Last updated:** [September 24, 2019, 8:44pm UTC](https://discuss.elastic.co/t/unexpected-result-from-field-collapsing/200917 "2019-09-24T20:44:51Z")

</div>

I have an index containing emails. These documents have a type field, one value of which is "pending" and another is "sent", with the obvious meanings. They also have a "batchid" by which multiple emails are grouped. The…

---

## [Monitoring services by elastic stack](https://discuss.elastic.co/t/monitoring-services-by-elastic-stack/199939)

<div class="topic-metadata">

**Author:** [@zmira\_meriem](https://discuss.elastic.co/u/zmira_meriem)\
**Replies:** 7\
**Last updated:** [September 24, 2019, 7:44pm UTC](https://discuss.elastic.co/t/monitoring-services-by-elastic-stack/199939 "2019-09-24T19:44:49Z")

</div>

hi plz some can help me: how can i monito services by elastic for example to monitor status of service if service like (httpd or mysql ) is up or down????

---

## [How can i change Elastic search 6.x shards to 1?](https://discuss.elastic.co/t/how-can-i-change-elastic-search-6-x-shards-to-1/200905)

<div class="topic-metadata">

**Author:** [@pamamolf](https://discuss.elastic.co/u/pamamolf)\
**Replies:** 4\
**Last updated:** [September 24, 2019, 7:23pm UTC](https://discuss.elastic.co/t/how-can-i-change-elastic-search-6-x-shards-to-1/200905 "2019-09-24T19:23:26Z")

</div>

Hello I would like to change from ssh the shards for latest Elastic search 6.x and my index name is "content". I was using something like: curl -XPUT http://localhost:9200/\_template/content -H 'Content-Type: applicati…

---

## [JVM heap tuning for percolators](https://discuss.elastic.co/t/jvm-heap-tuning-for-percolators/200915)

<div class="topic-metadata">

**Author:** [@dwilches](https://discuss.elastic.co/u/dwilches)\
**Replies:** 0\
**Last updated:** [September 24, 2019, 5:23pm UTC](https://discuss.elastic.co/t/jvm-heap-tuning-for-percolators/200915 "2019-09-24T17:23:55Z")

</div>

I've read in the docs that one shouldn't set the JVM's heap size over 50% of the physical memory, as ES needs to leave enough memory for filesystem caches and other things. But, given percolators don't index data into f…

---

## [Config paths not being respected](https://discuss.elastic.co/t/config-paths-not-being-respected/200908)

<div class="topic-metadata">

**Author:** [@mdavis](https://discuss.elastic.co/u/mdavis)\
**Replies:** 0\
**Last updated:** [September 24, 2019, 4:59pm UTC](https://discuss.elastic.co/t/config-paths-not-being-respected/200908 "2019-09-24T16:59:31Z")

</div>

I have a one node server setup, it works fine when the files are in the default location. I update /etc/elasticsearch/elasticsearch.yml to the new path and restart after moving the entire directory. Then the service fail…

---

## [Bucket Sort over Composite aggregation degrading the performance of query - Any better way?](https://discuss.elastic.co/t/bucket-sort-over-composite-aggregation-degrading-the-performance-of-query-any-better-way/199782)

<div class="topic-metadata">

**Author:** [@Santosh\_Singh1](https://discuss.elastic.co/u/Santosh_Singh1)\
**Replies:** 10\
**Last updated:** [September 24, 2019, 4:42pm UTC](https://discuss.elastic.co/t/bucket-sort-over-composite-aggregation-degrading-the-performance-of-query-any-better-way/199782 "2019-09-24T16:42:01Z")

</div>

We have a use case where we need to get the top 20 items, which has max sum of revenues. Lets consider the mapping below: PUT /my-index/\_mapping { "properties": { "item": { "type": "keyword" …

---

## [Permission Denied Error starting Elasticsearch 7.3 from RPM installation RedHat 6.7 Linux](https://discuss.elastic.co/t/permission-denied-error-starting-elasticsearch-7-3-from-rpm-installation-redhat-6-7-linux/200897)

<div class="topic-metadata">

**Author:** [@npm](https://discuss.elastic.co/u/npm)\
**Replies:** 4\
**Last updated:** [September 24, 2019, 4:37pm UTC](https://discuss.elastic.co/t/permission-denied-error-starting-elasticsearch-7-3-from-rpm-installation-redhat-6-7-linux/200897 "2019-09-24T16:37:07Z")

</div>

Installed Elasticsearch 7.3 from RPM on RedHat 6.7 machine as root. sudo rpm --install elasticsearch-7.3.0-x86\_64.rpm Attempted to start using the service commands: root@seismic-an10:/usr/share/elasticsearch\> chkconfi…

---

## [ES 6.8.2 Search slow when response payload \> 1 MB](https://discuss.elastic.co/t/es-6-8-2-search-slow-when-response-payload-1-mb/200899)

<div class="topic-metadata">

**Author:** [@Javier\_Luque](https://discuss.elastic.co/u/Javier_Luque)\
**Replies:** 2\
**Last updated:** [September 24, 2019, 3:12pm UTC](https://discuss.elastic.co/t/es-6-8-2-search-slow-when-response-payload-1-mb/200899 "2019-09-24T15:12:51Z")

</div>

Hi everyone, I was wondering if anyone has encountered this error. Upgraded from 6.5.2 to 6.8.2 and noticed our queries were running slow. Using insomnia to test Elasticsearch I was running some queries and noticed tha…

---

## [\[ES 7.3.2\] SSLHandshakeException: No available authentication scheme](https://discuss.elastic.co/t/es-7-3-2-sslhandshakeexception-no-available-authentication-scheme/200463)

<div class="topic-metadata">

**Author:** [@egallistw](https://discuss.elastic.co/u/egallistw)\
**Replies:** 5\
**Last updated:** [September 24, 2019, 2:59pm UTC](https://discuss.elastic.co/t/es-7-3-2-sslhandshakeexception-no-available-authentication-scheme/200463 "2019-09-24T14:59:53Z")

</div>

Both elasticsearch hosts are running 7.3.2. The scenario is that I am using the transport profile settings to connect the nodes using a certificate, created by following the setting up elastic security blog post. I can v…

---

## [Logstash to Master Node or Hot Node?](https://discuss.elastic.co/t/logstash-to-master-node-or-hot-node/200868)

<div class="topic-metadata">

**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\
**Replies:** 3\
**Last updated:** [September 24, 2019, 2:56pm UTC](https://discuss.elastic.co/t/logstash-to-master-node-or-hot-node/200868 "2019-09-24T14:56:43Z")

</div>

Hi, I need some clarification in the Master, Hot Node, Warm Node design I have setup a working cluster with a dedicated master Node thats not set to ingest any data. In my design I have a Hot-Node1 and Hot-Node2 and a…

---

## [Is it possible to change variable names through mapping?](https://discuss.elastic.co/t/is-it-possible-to-change-variable-names-through-mapping/200896)

<div class="topic-metadata">

**Author:** [@planetracer](https://discuss.elastic.co/u/planetracer)\
**Replies:** 0\
**Last updated:** [September 24, 2019, 2:53pm UTC](https://discuss.elastic.co/t/is-it-possible-to-change-variable-names-through-mapping/200896 "2019-09-24T14:53:21Z")

</div>

If I have the following: "categories":\[{"category":"TB","totaldur":55},{"category":"CPB","totaldur":568},{"category":"PP","totaldur":23} is it possible to change it so it's like this "categories":\[{"category":"TB","tb…

---

## [AWS S3 bucket ingestion to ES](https://discuss.elastic.co/t/aws-s3-bucket-ingestion-to-es/200890)

<div class="topic-metadata">

**Author:** [@sk545](https://discuss.elastic.co/u/sk545)\
**Replies:** 0\
**Last updated:** [September 24, 2019, 2:39pm UTC](https://discuss.elastic.co/t/aws-s3-bucket-ingestion-to-es/200890 "2019-09-24T14:39:47Z")

</div>

I have 20 folders and subfolders in AWS S3 bucket , 1) if i mention that bucket name in logstash's S3 plug-in input settings , does that logstash monitor all folders,subfolders ? 2) How do eliminate unwanted folders/…

---

## [Single node troubleshooting help required](https://discuss.elastic.co/t/single-node-troubleshooting-help-required/200428)

<div class="topic-metadata">

**Author:** [@Ian\_Miller](https://discuss.elastic.co/u/Ian_Miller)\
**Replies:** 2\
**Last updated:** [September 24, 2019, 2:33pm UTC](https://discuss.elastic.co/t/single-node-troubleshooting-help-required/200428 "2019-09-24T14:33:13Z")

</div>

Hi, We've had a single node running logstash, elasticsearch and kibana for about six months. Although it wasn't intended to be a production system, it's become essential for troubleshooting - we use it to capture firewa…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1143)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1145)
