# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1173 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1174 --- ## [Search template into painless script](https://discuss.elastic.co/t/search-template-into-painless-script/196553)
**Author:** [@mattia\_conversano](https://discuss.elastic.co/u/mattia_conversano)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 4:52pm UTC](https://discuss.elastic.co/t/search-template-into-painless-script/196553 "2019-08-30T16:52:58Z")
Hi Team, I'm new with Elasticsearch, I'll explain my problem; I currently have two types of documents in the "modsec" index the first has (in its fields) an array of strings like this: "m\_data": \[ "test@test.it' a… --- ## [Histogram aggregation on collapse result](https://discuss.elastic.co/t/histogram-aggregation-on-collapse-result/197440)
**Author:** [@mybluedog24](https://discuss.elastic.co/u/mybluedog24)\ **Replies:** 3\ **Last updated:** [August 30, 2019, 4:37pm UTC](https://discuss.elastic.co/t/histogram-aggregation-on-collapse-result/197440 "2019-08-30T16:37:54Z")
Hi, My question is that I need to find the first time login of each user, and then apply date\_histogram aggregation. I tried top\_hits aggregation, min aggregation and collapse. They all get the first time login of each … --- ## [Can we use SQL Join in elastic query?](https://discuss.elastic.co/t/can-we-use-sql-join-in-elastic-query/196378)
**Author:** [@Sajal](https://discuss.elastic.co/u/Sajal)\ **Replies:** 28\ **Last updated:** [August 30, 2019, 4:14pm UTC](https://discuss.elastic.co/t/can-we-use-sql-join-in-elastic-query/196378 "2019-08-30T16:14:40Z")
Hi Can we use join function in elastic query ? I want to join two indexes with one common field . How to do that ? BR// Sajal --- ## [Simulate recovery from snapshot](https://discuss.elastic.co/t/simulate-recovery-from-snapshot/197549)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 4:08pm UTC](https://discuss.elastic.co/t/simulate-recovery-from-snapshot/197549 "2019-08-30T16:08:25Z")
hi, I would like to know if you have any suggestion regarding the possibility to simulate a disaster event after which I should use snapshot recovery. I mean, is there a way to simulate the last part (restore operation… --- ## [Configuring Synonyms.txt in AWS hosted elastic search](https://discuss.elastic.co/t/configuring-synonyms-txt-in-aws-hosted-elastic-search/196947)
**Author:** [@selvarap1](https://discuss.elastic.co/u/selvarap1)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 4:05pm UTC](https://discuss.elastic.co/t/configuring-synonyms-txt-in-aws-hosted-elastic-search/196947 "2019-08-30T16:05:28Z")
I am trying to upload sysnonyms.txt in AWS hosted elastic search, but I couldn't find any feasible way to do that. All I have tried is the following. I am not supposed to use inline sysnonym, since i have a huge list of… --- ## [How to get current open shards?](https://discuss.elastic.co/t/how-to-get-current-open-shards/197528)
**Author:** [@Dmitry1](https://discuss.elastic.co/u/Dmitry1)\ **Replies:** 3\ **Last updated:** [August 30, 2019, 2:55pm UTC](https://discuss.elastic.co/t/how-to-get-current-open-shards/197528 "2019-08-30T14:55:58Z")
Hello, can't find where I can to see current open shards ? I want to make monitoring to avoid cases like this: this cluster currently has \[999\]/\[1000\] maximum shards open I can get maximum limit - max\_shards\_per\_node … --- ## [Mapping ip address to geolocation](https://discuss.elastic.co/t/mapping-ip-address-to-geolocation/197136)
**Author:** [@gr1sha](https://discuss.elastic.co/u/gr1sha)\ **Replies:** 11\ **Last updated:** [August 30, 2019, 3:34pm UTC](https://discuss.elastic.co/t/mapping-ip-address-to-geolocation/197136 "2019-08-30T15:34:10Z")
Hi there. I am trying to create a region map so that I can see the activity of users from different countries. I have an ip address field in my index and what I am trying to do is map it to geoip location to get fields l… --- ## [Identifying which node serviced a request via load balancer](https://discuss.elastic.co/t/identifying-which-node-serviced-a-request-via-load-balancer/197544)
**Author:** [@jmb](https://discuss.elastic.co/u/jmb)\ **Replies:** 0\ **Last updated:** [August 30, 2019, 3:15pm UTC](https://discuss.elastic.co/t/identifying-which-node-serviced-a-request-via-load-balancer/197544 "2019-08-30T15:15:33Z")
We have our cluster behind a generic HTTP load balancer, so can't readily determine which node a request is hitting initially. Is there any straightforward way to identify from an API response, which node actually servic… --- ## [How to remove \\n and \\t chars when using FS Crawler?](https://discuss.elastic.co/t/how-to-remove-n-and-t-chars-when-using-fs-crawler/197194)
**Author:** [@Danilo\_Felix](https://discuss.elastic.co/u/Danilo_Felix)\ **Replies:** 2\ **Last updated:** [August 30, 2019, 1:56pm UTC](https://discuss.elastic.co/t/how-to-remove-n-and-t-chars-when-using-fs-crawler/197194 "2019-08-30T13:56:30Z")
Hello all, I'm new with FS Crawler, so please be patient with me. Using version 2.6, I'm crawling many files from a big Windows's folders tree. There are PDF, XLS, DOC, etc. It's working, but the content attribute goe… --- ## [Java home](https://discuss.elastic.co/t/java-home/196509)
**Author:** [@mylyo](https://discuss.elastic.co/u/mylyo)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 1:54pm UTC](https://discuss.elastic.co/t/java-home/196509 "2019-08-30T13:54:54Z")
Hello, i'm working on elastic 7.2 install on redhat 7.6. My problem is that my service couldn't start due to error about java home. when i launch my service it return : could not find java in JAVA\_HOME or bundeled at /e… --- ## [Elasticsearch query result order based on matching position](https://discuss.elastic.co/t/elasticsearch-query-result-order-based-on-matching-position/196450)
**Author:** [@PrasathRajan](https://discuss.elastic.co/u/PrasathRajan)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 1:44pm UTC](https://discuss.elastic.co/t/elasticsearch-query-result-order-based-on-matching-position/196450 "2019-08-30T13:44:05Z")
I have two sentences. Model text Jug Model if I query for 'model' or 'del' result is coming in below order Jug Model Model Text Is there any way I can get "Model Text" first, since its the best match. I know about … --- ## [Index\_already\_exists\_exception while updating analyzer setting of existing index](https://discuss.elastic.co/t/index-already-exists-exception-while-updating-analyzer-setting-of-existing-index/197517)
**Author:** [@Mahesh\_Lawand](https://discuss.elastic.co/u/Mahesh_Lawand)\ **Replies:** 0\ **Last updated:** [August 30, 2019, 12:28pm UTC](https://discuss.elastic.co/t/index-already-exists-exception-while-updating-analyzer-setting-of-existing-index/197517 "2019-08-30T12:28:27Z")
I am trying to update analyzer of existing index. For that i have followed following steps - 1.Close index curl -X POST "http://server/index\_name/\_close" Update setting: curl -XPUT 'http://server/index\_name' -d '{ … --- ## [Mapping with nodejs](https://discuss.elastic.co/t/mapping-with-nodejs/197439)
**Author:** [@Aditya\_Kar](https://discuss.elastic.co/u/Aditya_Kar)\ **Replies:** 3\ **Last updated:** [August 30, 2019, 12:26pm UTC](https://discuss.elastic.co/t/mapping-with-nodejs/197439 "2019-08-30T12:26:35Z")
hello sir I am using node js to index data from mongo to elastic search. I want to know how to map my index. By using kibana or from my node application. --- ## [Pagination in Completion Suggestor](https://discuss.elastic.co/t/pagination-in-completion-suggestor/197512)
**Author:** [@hardikbathla](https://discuss.elastic.co/u/hardikbathla)\ **Replies:** 0\ **Last updated:** [August 30, 2019, 11:57am UTC](https://discuss.elastic.co/t/pagination-in-completion-suggestor/197512 "2019-08-30T11:57:24Z")
On text based search, elastic engine supply parameters called "from " and "size" to paginate over result but same is not supported when using completion/suggestion based search. Is it intentionally restricted by Elastic … --- ## [Unable to add new node in 3 node cluster](https://discuss.elastic.co/t/unable-to-add-new-node-in-3-node-cluster/197490)
**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\ **Replies:** 6\ **Last updated:** [August 30, 2019, 11:52am UTC](https://discuss.elastic.co/t/unable-to-add-new-node-in-3-node-cluster/197490 "2019-08-30T11:52:13Z")
I have elasticsearch 7.3 installed in 4 nodes, i have successfully configured 3 node cluster but the thing that disturbs me is every time i want to add new node i have to delete old data (i.e /var/lib/elasticsearch/) the… --- ## [Circuit breaker exception Elasticsearch](https://discuss.elastic.co/t/circuit-breaker-exception-elasticsearch/197011)
**Author:** [@cool\_guy99](https://discuss.elastic.co/u/cool_guy99)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 11:44am UTC](https://discuss.elastic.co/t/circuit-breaker-exception-elasticsearch/197011 "2019-08-30T11:44:52Z")
Im seeing the following errors while creating the index failed shard on node : failed recovery, failure RecoveryFailedException\[\[index\_1\]\[1\]: Recovery failed from {Node\_name}{Node\_name}{Node\_name}{NodeIP}{NodeIP:9300}{r… --- ## [Allocation Awareness with 3 DC](https://discuss.elastic.co/t/allocation-awareness-with-3-dc/196527)
**Author:** [@demudrol](https://discuss.elastic.co/u/demudrol)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 11:31am UTC](https://discuss.elastic.co/t/allocation-awareness-with-3-dc/196527 "2019-08-30T11:31:49Z")
Hi! Trying to make cluster.routing.allocation.awareness.force.zone.values with 3 DC. On every node make node.attr.zone with DC1 or DC2 or DC3 and on every master cluster.routing.allocation.awareness.attributes: zone … --- ## [Api to search from multiple index](https://discuss.elastic.co/t/api-to-search-from-multiple-index/197501)
**Author:** [@Aditya\_kumar\_kar](https://discuss.elastic.co/u/Aditya_kumar_kar)\ **Replies:** 0\ **Last updated:** [August 30, 2019, 10:59am UTC](https://discuss.elastic.co/t/api-to-search-from-multiple-index/197501 "2019-08-30T10:59:29Z")
I am using node js client for searching. I need some reference of search API with node js to search from multiple indexes and how to provide suggestion to the user. --- ## [IOException while reading synonyms\_path\_path](https://discuss.elastic.co/t/ioexception-while-reading-synonyms-path-path/197498)
**Author:** [@Meet\_Chaudhary](https://discuss.elastic.co/u/Meet_Chaudhary)\ **Replies:** 0\ **Last updated:** [August 30, 2019, 10:55am UTC](https://discuss.elastic.co/t/ioexception-while-reading-synonyms-path-path/197498 "2019-08-30T10:55:50Z")
I am using synonyms token filter with custom file installed elasticsearch 6.7 as a service on windows 10 machine my "synonyms.txt" is located at "C:\\ProgramData\\Elastic\\Elasticsearch\\config\\analysis\\synonyms.txt" here… --- ## [Returning Distinct Values in a query](https://discuss.elastic.co/t/returning-distinct-values-in-a-query/197361)
**Author:** [@jsariasgeek](https://discuss.elastic.co/u/jsariasgeek)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 1:34am UTC](https://discuss.elastic.co/t/returning-distinct-values-in-a-query/197361 "2019-08-30T01:34:42Z")
Hi there, I have the next elasticsearch query and I need to know how to get only distinct results for certain fields. (Like an sql distinct: SELECT DISTINCT column1 , column2, ... FROM table\_name :wink: Here is my … --- ## [Remove old index mapping](https://discuss.elastic.co/t/remove-old-index-mapping/197458)
**Author:** [@apiras](https://discuss.elastic.co/u/apiras)\ **Replies:** 2\ **Last updated:** [August 30, 2019, 9:42am UTC](https://discuss.elastic.co/t/remove-old-index-mapping/197458 "2019-08-30T09:42:09Z")
Hi all, I need to change the mapping of some indexes. I deleted them and modified their index template with PUT /\_template/template\_name {new content details...} The resulting mapping is the merge of new fields with th… --- ## [Third node is not joining ELK 7.0.1](https://discuss.elastic.co/t/third-node-is-not-joining-elk-7-0-1/197488)
**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\ **Replies:** 0\ **Last updated:** [August 30, 2019, 9:56am UTC](https://discuss.elastic.co/t/third-node-is-not-joining-elk-7-0-1/197488 "2019-08-30T09:56:53Z")
Hi, We have installed and configured new 3 node ELK 7.0.1 cluster on Ubuntu.Two nodes joined but third node is not joining giving the following error.Are we doing something wrong here. \[2019-08-30T02:54:14,508\]\[WARN… --- ## [Setting up TLS between nodes without data loss](https://discuss.elastic.co/t/setting-up-tls-between-nodes-without-data-loss/196775)
**Author:** [@74db36a597f21b891b3f](https://discuss.elastic.co/u/74db36a597f21b891b3f)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 10:10am UTC](https://discuss.elastic.co/t/setting-up-tls-between-nodes-without-data-loss/196775 "2019-08-30T10:10:26Z")
Hi there. I've read that setting up TLS between nodes in live cluster requires full cluster restart. When I set TLS on a node it will stop communicating with other nodes until they are reconfigured too. So could someon… --- ## [\[7.0.1\] New Circuitbreaker - Segment bigger than heap. Should this break?](https://discuss.elastic.co/t/7-0-1-new-circuitbreaker-segment-bigger-than-heap-should-this-break/195455)
**Author:** [@gna](https://discuss.elastic.co/u/gna)\ **Replies:** 9\ **Last updated:** [August 30, 2019, 9:02am UTC](https://discuss.elastic.co/t/7-0-1-new-circuitbreaker-segment-bigger-than-heap-should-this-break/195455 "2019-08-30T09:02:16Z")
Dear developers, I'm wondering how the new circuit breaker is supposed to work in relation to shard size. I see this circuitbreaker in my logs: \[2019-08-15T18:12:09,472\]\[WARN \]\[o.e.i.c.IndicesClusterStateService\] \[mes… --- ## [Help with query DSL](https://discuss.elastic.co/t/help-with-query-dsl/197469)
**Author:** [@Melok](https://discuss.elastic.co/u/Melok)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 9:02am UTC](https://discuss.elastic.co/t/help-with-query-dsl/197469 "2019-08-30T09:02:04Z")
Hello! Help make the right DSL query to search tags:windows AND ((tags:security AND (signature\_id:1102 OR signature\_id:1100)) OR (tags:os AND signature\_id:104)) --- ## [I am getting mapper\_parsing\_exception ,while integrating elastic stack with the Node application](https://discuss.elastic.co/t/i-am-getting-mapper-parsing-exception-while-integrating-elastic-stack-with-the-node-application/197135)
**Author:** [@Tapas\_Rai](https://discuss.elastic.co/u/Tapas_Rai)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 8:59am UTC](https://discuss.elastic.co/t/i-am-getting-mapper-parsing-exception-while-integrating-elastic-stack-with-the-node-application/197135 "2019-08-30T08:59:24Z")
Hi All, While integrating Node application with ELK i am getting below error , statusCode: 400, response: '{"error":{"root\_cause":\[{"type":"mapper\_parsing\_exception","reason":"No handler for type \[buffer\] declared on… --- ## [Unable to index data to Elasticsearch 7.2 after adding custom template](https://discuss.elastic.co/t/unable-to-index-data-to-elasticsearch-7-2-after-adding-custom-template/197423)
**Author:** [@estack](https://discuss.elastic.co/u/estack)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 8:35am UTC](https://discuss.elastic.co/t/unable-to-index-data-to-elasticsearch-7-2-after-adding-custom-template/197423 "2019-08-30T08:35:14Z")
I am trying to index data to elastic. Indexing does not happen when I have a mapping for 'uid' as keyword. But it works when there are no custom mappings defined for 7.2 version. Please help. Below is the custom templa… --- ## [Not able to get rid of circuit breaking exception](https://discuss.elastic.co/t/not-able-to-get-rid-of-circuit-breaking-exception/196233)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 9\ **Last updated:** [August 30, 2019, 8:34am UTC](https://discuss.elastic.co/t/not-able-to-get-rid-of-circuit-breaking-exception/196233 "2019-08-30T08:34:16Z")
Hi all, I am trying to index a 6 GB file to my cluster of three nodes. But i get circuit breaking exception every time. I have tried this increasing the limit by, "persistent" : { "indices.breaker.fielddata.limit" : "… --- ## [Contains Method Not Working in Sort Script](https://discuss.elastic.co/t/contains-method-not-working-in-sort-script/197241)
**Author:** [@djue](https://discuss.elastic.co/u/djue)\ **Replies:** 4\ **Last updated:** [August 30, 2019, 8:14am UTC](https://discuss.elastic.co/t/contains-method-not-working-in-sort-script/197241 "2019-08-30T08:14:56Z")
We have an old script in sort that seems to be no longer working and I can't quite figure out the case (other than we upgraded from Elastic 2 to 6), we have something like: "sort": \[ { "\_script": { "order": "desc"… --- ## [Unable to authenticate user \[\*\*\*\*\*\] for REST request \[/\]](https://discuss.elastic.co/t/unable-to-authenticate-user-for-rest-request/197461)
**Author:** [@akhil](https://discuss.elastic.co/u/akhil)\ **Replies:** 1\ **Last updated:** [August 30, 2019, 8:00am UTC](https://discuss.elastic.co/t/unable-to-authenticate-user-for-rest-request/197461 "2019-08-30T08:00:20Z")
Hi Team, \*I have created one user from kibana UI and also from elastic server using the REST API. Now when I'm trying to hit the API using my new user id and password I'm getting the error message - \*API that I'm usin… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1172) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1174)