# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1159

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1160

---

## [Tasks accumulating in management thread pool](https://discuss.elastic.co/t/tasks-accumulating-in-management-thread-pool/199093)

<div class="topic-metadata">

**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\
**Replies:** 3\
**Last updated:** [September 12, 2019, 6:51am UTC](https://discuss.elastic.co/t/tasks-accumulating-in-management-thread-pool/199093 "2019-09-12T06:51:04Z")

</div>

I have a data node that has its management thread pool filled up (like 5 active and hundreds or even thousands of queued jobs). The other nodes are fine (0 active, 0 in queue.) What kind of tasks get in to this pool? Ho…

---

## [Problems with "Top N" SQL query](https://discuss.elastic.co/t/problems-with-top-n-sql-query/199146)

<div class="topic-metadata">

**Author:** [@Brian\_Frantz](https://discuss.elastic.co/u/Brian_Frantz)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 6:39am UTC](https://discuss.elastic.co/t/problems-with-top-n-sql-query/199146 "2019-09-12T06:39:58Z")

</div>

I'm using Elasticsearch 6.7.1. From what I can tell in the documentation, what I want to do should be possible, but it's not working for me: Here's my query: SELECT location.country, COUNT(\*) AS count FROM my\_index GR…

---

## [Elasticsearch Yml configuration](https://discuss.elastic.co/t/elasticsearch-yml-configuration/198506)

<div class="topic-metadata">

**Author:** [@das\_santosh](https://discuss.elastic.co/u/das_santosh)\
**Replies:** 16\
**Last updated:** [September 12, 2019, 6:01am UTC](https://discuss.elastic.co/t/elasticsearch-yml-configuration/198506 "2019-09-12T06:01:08Z")

</div>

Hi , I am doing a 6 node elasticsearch cluster setup where 4 nodes i am taking as a master and 2 as a data node , but my cluster is not working as expected. can somebody please help me with complete cluster setup (ela…

---

## [Sorting not working properly](https://discuss.elastic.co/t/sorting-not-working-properly/199174)

<div class="topic-metadata">

**Author:** [@lucabes](https://discuss.elastic.co/u/lucabes)\
**Replies:** 3\
**Last updated:** [September 12, 2019, 6:01am UTC](https://discuss.elastic.co/t/sorting-not-working-properly/199174 "2019-09-12T06:01:06Z")

</div>

Hi I have problem with sorting imn ELK 7.3. My query: https://pastebin.com/uK4Ywrec for mapping: https://pastebin.com/fZ4eyhtm and index settings https://pastebin.com/X4SiecP8 For this query and mapping uI'm getting…

---

## [Elasticsearch monitoring bulk index issue](https://discuss.elastic.co/t/elasticsearch-monitoring-bulk-index-issue/199105)

<div class="topic-metadata">

**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\
**Replies:** 2\
**Last updated:** [September 12, 2019, 5:19am UTC](https://discuss.elastic.co/t/elasticsearch-monitoring-bulk-index-issue/199105 "2019-09-12T05:19:13Z")

</div>

Elasticsearch: 7.3.0 Kibana: 7.3.0 Hi i am getting elasticsearch monitoring index bulk issues, it's keep repeating the same issue multiple times, can someone please suggest me, thanks {\[.monitoring-es-7-2019.09.11\]\[\_…

---

## [Error: Kibana server is not ready](https://discuss.elastic.co/t/error-kibana-server-is-not-ready/195485)

<div class="topic-metadata">

**Author:** [@saravanakumar.mc](https://discuss.elastic.co/u/saravanakumar.mc)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 3:25am UTC](https://discuss.elastic.co/t/error-kibana-server-is-not-ready/195485 "2019-09-12T03:25:42Z")

</div>

Hi , we were tried to configure the ELK in distributed environment in AWS. all the stack installation are completed with out fails. But while accessing the kibana console we are getting "KIBANA SERVER IS NOT READY" and…

---

## [Find the cumulative time when no data was logged](https://discuss.elastic.co/t/find-the-cumulative-time-when-no-data-was-logged/199163)

<div class="topic-metadata">

**Author:** [@Saurav\_Sen](https://discuss.elastic.co/u/Saurav_Sen)\
**Replies:** 0\
**Last updated:** [September 12, 2019, 2:42am UTC](https://discuss.elastic.co/t/find-the-cumulative-time-when-no-data-was-logged/199163 "2019-09-12T02:42:02Z")

</div>

Hello I am trying to find how much outage we had for a particular application. So for an index we can see in the kibana dashboard the time when no data was logged. But would there be a way to find the total time when no …

---

## [Generate child indices out of an index](https://discuss.elastic.co/t/generate-child-indices-out-of-an-index/199152)

<div class="topic-metadata">

**Author:** [@murali12180](https://discuss.elastic.co/u/murali12180)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 2:41am UTC](https://discuss.elastic.co/t/generate-child-indices-out-of-an-index/199152 "2019-09-12T02:41:09Z")

</div>

Hi, I have an index "idx-2019-09" which carries "city" field. I'd like to break this index into separate indices by city. Before: idx-2019-09 { "city" : "boston", }, { "city": "new york", } After: idx-boston-2…

---

## [Bucket script format parameter](https://discuss.elastic.co/t/bucket-script-format-parameter/198759)

<div class="topic-metadata">

**Author:** [@Evan\_Something](https://discuss.elastic.co/u/Evan_Something)\
**Replies:** 2\
**Last updated:** [September 11, 2019, 8:09pm UTC](https://discuss.elastic.co/t/bucket-script-format-parameter/198759 "2019-09-11T20:09:43Z")

</div>

In the documentation it states the "format" parameter (format to apply to the output value of this aggregation) but I can't figure out how to use it? is it possible to have it format the result (a long) as a datetime? m…

---

## [Index Mapping Template Not Honoring Multiple Date Formats on Field](https://discuss.elastic.co/t/index-mapping-template-not-honoring-multiple-date-formats-on-field/199109)

<div class="topic-metadata">

**Author:** [@ruhrohshingo](https://discuss.elastic.co/u/ruhrohshingo)\
**Replies:** 8\
**Last updated:** [September 11, 2019, 8:36pm UTC](https://discuss.elastic.co/t/index-mapping-template-not-honoring-multiple-date-formats-on-field/199109 "2019-09-11T20:36:15Z")

</div>

I'm working with ES 6.8.1 (and ditto for the rest of the Elastic Stack) that's using an index template that Logstash sends to for indexing. There are some date fields in the index template where I'm seeing the declaratio…

---

## [Node management and values](https://discuss.elastic.co/t/node-management-and-values/198793)

<div class="topic-metadata">

**Author:** [@Philip\_Brown](https://discuss.elastic.co/u/Philip_Brown)\
**Replies:** 6\
**Last updated:** [September 11, 2019, 8:08pm UTC](https://discuss.elastic.co/t/node-management-and-values/198793 "2019-09-11T20:08:25Z")

</div>

Howdy, I'm new to elasticsearch, and I've tried to look up FAQs and things but no luck so far, so.... here goes. We have a 3+10 cluster I get to inherit administration of. 3 master nodes, 10 data. I need to add some …

---

## [Curator 5.7.6 unable to restore deleted index from snap](https://discuss.elastic.co/t/curator-5-7-6-unable-to-restore-deleted-index-from-snap/199136)

<div class="topic-metadata">

**Author:** [@WC\_IT](https://discuss.elastic.co/u/WC_IT)\
**Replies:** 0\
**Last updated:** [September 11, 2019, 7:54pm UTC](https://discuss.elastic.co/t/curator-5-7-6-unable-to-restore-deleted-index-from-snap/199136 "2019-09-11T19:54:06Z")

</div>

Hi there, When executing a restore yml action file to restore a deleted index from a snapshot located on a repository it fails with the following. Failed to complete action: restore. \<class 'curator.exceptions.FailedEx…

---

## [Document count is same but index size is growing every logstash run](https://discuss.elastic.co/t/document-count-is-same-but-index-size-is-growing-every-logstash-run/198984)

<div class="topic-metadata">

**Author:** [@Metehan\_Gulcicek](https://discuss.elastic.co/u/Metehan_Gulcicek)\
**Replies:** 2\
**Last updated:** [September 11, 2019, 7:53pm UTC](https://discuss.elastic.co/t/document-count-is-same-but-index-size-is-growing-every-logstash-run/198984 "2019-09-11T19:53:01Z")

</div>

input { jdbc { jdbc\_connection\_string =\> "jdbc:mysql://\*\*\*\*\*\*.rds.amazonaws.com:3306/" jdbc\_user =\> "user" jdbc\_password =\> "pass" jdbc\_driver\_library =\> "\*\*\*\*\\mysql-connector-java-5.1.46/mysql-connector-java-5.…

---

## [Can you suggest sources of information re: corpus-linguistic analysis using Kibana with Python](https://discuss.elastic.co/t/can-you-suggest-sources-of-information-re-corpus-linguistic-analysis-using-kibana-with-python/199128)

<div class="topic-metadata">

**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\
**Replies:** 0\
**Last updated:** [September 11, 2019, 7:25pm UTC](https://discuss.elastic.co/t/can-you-suggest-sources-of-information-re-corpus-linguistic-analysis-using-kibana-with-python/199128 "2019-09-11T19:25:35Z")

</div>

Can you suggest sources of information re: corpus-linguistic analysis using Kibana with Python

---

## [How to sort result set in order of matching words](https://discuss.elastic.co/t/how-to-sort-result-set-in-order-of-matching-words/199095)

<div class="topic-metadata">

**Author:** [@Yeldar\_Kossynbay](https://discuss.elastic.co/u/Yeldar_Kossynbay)\
**Replies:** 0\
**Last updated:** [September 11, 2019, 2:44pm UTC](https://discuss.elastic.co/t/how-to-sort-result-set-in-order-of-matching-words/199095 "2019-09-11T14:44:14Z")

</div>

Hi guys, I have a couple words "heinz meyer" my query returns: Heinz A. Meyer Heinz Meyer GmbH Heizung-Sanitär Heinz Meyer Karl-Heinz Meyer GmbH but i need, order by positions matching like next : Heinz Meyer Hein…

---

## [What should fscrawler mapping look like to index each pdf document as a single unit of text?](https://discuss.elastic.co/t/what-should-fscrawler-mapping-look-like-to-index-each-pdf-document-as-a-single-unit-of-text/198660)

<div class="topic-metadata">

**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\
**Replies:** 2\
**Last updated:** [September 11, 2019, 7:03pm UTC](https://discuss.elastic.co/t/what-should-fscrawler-mapping-look-like-to-index-each-pdf-document-as-a-single-unit-of-text/198660 "2019-09-11T19:03:03Z")

</div>

ref.: https://fscrawler.readthedocs.io/en/fscrawler-2.5/admin/fs/elasticsearch.html#creating-your-own-mapping-analyzers I have read through the above page but still don't know what to do. Below is the auto-generated ma…

---

## [Parse and send Java logs to the ELK 7.3](https://discuss.elastic.co/t/parse-and-send-java-logs-to-the-elk-7-3/199122)

<div class="topic-metadata">

**Author:** [@Saber.Tala](https://discuss.elastic.co/u/Saber.Tala)\
**Replies:** 0\
**Last updated:** [September 11, 2019, 6:54pm UTC](https://discuss.elastic.co/t/parse-and-send-java-logs-to-the-elk-7-3/199122 "2019-09-11T18:54:32Z")

</div>

Using Elasticsearch 7.3 on CentOS 7 and Java veriosn 11, I need to parse and find specific Error/Exception text in some Java Application log files, Should I use Filebeat or Metricbeat to parse and ship some text patterns…

---

## [Script\_score will be calculated multiple times](https://discuss.elastic.co/t/script-score-will-be-calculated-multiple-times/198885)

<div class="topic-metadata">

**Author:** [@sailxjx](https://discuss.elastic.co/u/sailxjx)\
**Replies:** 1\
**Last updated:** [September 11, 2019, 5:45pm UTC](https://discuss.elastic.co/t/script-score-will-be-calculated-multiple-times/198885 "2019-09-11T17:45:14Z")

</div>

I used script\_score to calculate the rank score of my documents, however the result was not in my expectations. I specified the score in 0 or 2. The search query was: GET my\_index/\_search { "query": { "function\_sc…

---

## [Verify if elasticsearch-keystore value changed](https://discuss.elastic.co/t/verify-if-elasticsearch-keystore-value-changed/199041)

<div class="topic-metadata">

**Author:** [@stujb](https://discuss.elastic.co/u/stujb)\
**Replies:** 1\
**Last updated:** [September 11, 2019, 5:39pm UTC](https://discuss.elastic.co/t/verify-if-elasticsearch-keystore-value-changed/199041 "2019-09-11T17:39:08Z")

</div>

We are using ansible to deploy elasticsearch. This involves configuring some elasticsearch-keystore settings - bootstrap.password keystore.seed s3.client.default.access\_key s3.client.default.secret\_key xpack.securit…

---

## [Start with alphabates when applied sort](https://discuss.elastic.co/t/start-with-alphabates-when-applied-sort/199089)

<div class="topic-metadata">

**Author:** [@Sagar\_Kayasth](https://discuss.elastic.co/u/Sagar_Kayasth)\
**Replies:** 1\
**Last updated:** [September 11, 2019, 4:20pm UTC](https://discuss.elastic.co/t/start-with-alphabates-when-applied-sort/199089 "2019-09-11T16:20:17Z")

</div>

Hello community, I want sort order in alphabetically when i select ascending order. I do this but doesn't get proper result. My query like { "query": { "match\_all": {} }, "sort":\[ { "Name":{ "order":"asc" } …

---

## [Full text query multi\_match document scores](https://discuss.elastic.co/t/full-text-query-multi-match-document-scores/199096)

<div class="topic-metadata">

**Author:** [@internet-media](https://discuss.elastic.co/u/internet-media)\
**Replies:** 1\
**Last updated:** [September 11, 2019, 4:18pm UTC](https://discuss.elastic.co/t/full-text-query-multi-match-document-scores/199096 "2019-09-11T16:18:17Z")

</div>

Hey ElasticSearch Community, I indexed documents of the following structure to ElasticSearch "mappings" =\> \[ "properties" =\> \[ "title" =\> \[ "type" =\> "text" \], "tags" =\> \[ …

---

## [Need Working ILM example](https://discuss.elastic.co/t/need-working-ilm-example/198427)

<div class="topic-metadata">

**Author:** [@P\_Larsen](https://discuss.elastic.co/u/P_Larsen)\
**Replies:** 8\
**Last updated:** [September 11, 2019, 3:31pm UTC](https://discuss.elastic.co/t/need-working-ilm-example/198427 "2019-09-11T15:31:15Z")

</div>

I have tried without success to get ILM working. Can someone post a working index template, rollover alias config, ILM config and anything else I am missing? It seems if you have one of these components incorrect IL…

---

## [How to close response or connection properly of RestClient](https://discuss.elastic.co/t/how-to-close-response-or-connection-properly-of-restclient/198760)

<div class="topic-metadata">

**Author:** [@ekotqryz](https://discuss.elastic.co/u/ekotqryz)\
**Replies:** 1\
**Last updated:** [September 11, 2019, 3:28pm UTC](https://discuss.elastic.co/t/how-to-close-response-or-connection-properly-of-restclient/198760 "2019-09-11T15:28:25Z")

</div>

From the document https://www.elastic.co/guide/en/elasticsearch/client/java-rest/7.3/java-rest-low-usage-initialization.html, we know that we should use one instance of RestClient for the whold application, and close() R…

---

## [Find out which process sends HTTP requests](https://discuss.elastic.co/t/find-out-which-process-sends-http-requests/199080)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 4\
**Last updated:** [September 11, 2019, 3:28pm UTC](https://discuss.elastic.co/t/find-out-which-process-sends-http-requests/199080 "2019-09-11T15:28:23Z")

</div>

Hi! I've enabled security on my cluster and more or less everything went as expected, except for one node (out of 10) where I get a long warning message every 5 minutes: \[2019-09-11T11:50:02,010\]\[WARN \]\[o.e.h.AbstractH…

---

## [Dedicated Master Node Cluster Communication](https://discuss.elastic.co/t/dedicated-master-node-cluster-communication/199039)

<div class="topic-metadata">

**Author:** [@internet-media](https://discuss.elastic.co/u/internet-media)\
**Replies:** 2\
**Last updated:** [September 11, 2019, 2:47pm UTC](https://discuss.elastic.co/t/dedicated-master-node-cluster-communication/199039 "2019-09-11T14:47:19Z")

</div>

Hi there ElasticSearch Community, we consider using a dedicated master node for our cluster. The master node wont hold any data, and is not involved in search processes. We are wondering about the communication workflow…

---

## [Index size is increasing during the forcemerge](https://discuss.elastic.co/t/index-size-is-increasing-during-the-forcemerge/199073)

<div class="topic-metadata">

**Author:** [@worapojc](https://discuss.elastic.co/u/worapojc)\
**Replies:** 4\
**Last updated:** [September 11, 2019, 1:52pm UTC](https://discuss.elastic.co/t/index-size-is-increasing-during-the-forcemerge/199073 "2019-09-11T13:52:12Z")

</div>

Hi Elastic team, I'm using hot-warm-cold ILM to manage my indexes. However, in forcemerge action, I'm curious why the index size is increasing during the forcemerge. From the picture below, the primary shard size is o…

---

## [Upgraded from 7.1.0 to 7.3.1 and stoped working](https://discuss.elastic.co/t/upgraded-from-7-1-0-to-7-3-1-and-stoped-working/198709)

<div class="topic-metadata">

**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\
**Replies:** 1\
**Last updated:** [September 11, 2019, 1:42pm UTC](https://discuss.elastic.co/t/upgraded-from-7-1-0-to-7-3-1-and-stoped-working/198709 "2019-09-11T13:42:31Z")

</div>

After upgrading ES to 7.3.1 when I start ES I've got in log: What can be wrong? \[2019-09-09T16:27:45,286\]\[DEBUG\]\[o.e.a.s.TransportSearchAction\] \[HV8\] All shards failed for phase: \[query\] \[2019-09-09T16:27:45,286\]\[DEBUG…

---

## [Setting index.search.slowlog.threshold.\* is not working](https://discuss.elastic.co/t/setting-index-search-slowlog-threshold-is-not-working/199083)

<div class="topic-metadata">

**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\
**Replies:** 0\
**Last updated:** [September 11, 2019, 1:27pm UTC](https://discuss.elastic.co/t/setting-index-search-slowlog-threshold-is-not-working/199083 "2019-09-11T13:27:15Z")

</div>

I have around 400 indices. Some time back I enabled full logging by below command. curl -XPUT -H 'Content-Type: application/json' 'http://localhost:9200/\_all/\_settings?preserve\_existing=true' -d '{ "index.indexing.sl…

---

## [ELK Stack for production](https://discuss.elastic.co/t/elk-stack-for-production/199081)

<div class="topic-metadata">

**Author:** [@Mai\_Waly](https://discuss.elastic.co/u/Mai_Waly)\
**Replies:** 2\
**Last updated:** [September 11, 2019, 1:22pm UTC](https://discuss.elastic.co/t/elk-stack-for-production/199081 "2019-09-11T13:22:56Z")

</div>

Hi All, I have been reading, learning about ELK Stack, I am stuck in the below: For a production environment is it better to have separate VMs for Elasticsearch, logstash, kibana, Filebeat using rpm installation. Or u…

---

## [Webhook and SSL issue](https://discuss.elastic.co/t/webhook-and-ssl-issue/198786)

<div class="topic-metadata">

**Author:** [@petedells](https://discuss.elastic.co/u/petedells)\
**Replies:** 6\
**Last updated:** [September 11, 2019, 1:17pm UTC](https://discuss.elastic.co/t/webhook-and-ssl-issue/198786 "2019-09-11T13:17:12Z")

</div>

I am generating a https webhook and receive the error below (I am using self-assigned certificates and added them already to the keystore) "actions": \[ { "id": "my\_webhook", "type": "webhook", "status": "failure", …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1158)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1160)
