# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1175

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1176

---

## [Not able to form 2 node cluster with SSL,version - 7.2.0](https://discuss.elastic.co/t/not-able-to-form-2-node-cluster-with-ssl-version-7-2-0/197122)

<div class="topic-metadata">

**Author:** [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\
**Replies:** 9\
**Last updated:** [August 29, 2019, 12:23pm UTC](https://discuss.elastic.co/t/not-able-to-form-2-node-cluster-with-ssl-version-7-2-0/197122 "2019-08-29T12:23:30Z")

</div>

Hi All, Im trying to create 2 node cluster with SSL but 2 nodes are running individually fine but not able form the cluster. Below are the details : Node-1 Config : http.port: 9200 node.name: node-1 cluster.name: de…

---

## [Elasticsearch indexing performance](https://discuss.elastic.co/t/elasticsearch-indexing-performance/197263)

<div class="topic-metadata">

**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\
**Replies:** 3\
**Last updated:** [August 29, 2019, 10:22am UTC](https://discuss.elastic.co/t/elasticsearch-indexing-performance/197263 "2019-08-29T10:22:37Z")

</div>

When indexing simple data of text type with elasticsearch, the performance difference is large according to each data size. 100byte -\> 2000/s(0.2MB/s) 1KB -\> 2000/s(2MB/s) 10KB -\> 2000/s(20MB/s) Why? What is the rea…

---

## [Delete documents based on search criteria from elasticsearch index](https://discuss.elastic.co/t/delete-documents-based-on-search-criteria-from-elasticsearch-index/197295)

<div class="topic-metadata">

**Author:** [@prataprajasekhar](https://discuss.elastic.co/u/prataprajasekhar)\
**Replies:** 1\
**Last updated:** [August 29, 2019, 10:01am UTC](https://discuss.elastic.co/t/delete-documents-based-on-search-criteria-from-elasticsearch-index/197295 "2019-08-29T10:01:52Z")

</div>

Hi All, We store below kind of data in elasticsearch index namely, mydevices. The index contains information for every few seconds related to the devices whether its up or not, which is like, if the document having stat…

---

## [Index data into another index from an ingest processor, for suggestion feature using a completion field](https://discuss.elastic.co/t/index-data-into-another-index-from-an-ingest-processor-for-suggestion-feature-using-a-completion-field/195941)

<div class="topic-metadata">

**Author:** [@rflores](https://discuss.elastic.co/u/rflores)\
**Replies:** 2\
**Last updated:** [August 29, 2019, 10:02am UTC](https://discuss.elastic.co/t/index-data-into-another-index-from-an-ingest-processor-for-suggestion-feature-using-a-completion-field/195941 "2019-08-29T10:02:25Z")

</div>

Hi all, I'm using Elasticsearch v6.6, and I have a suggest feature implemented in my app. I don't want to go ahead with the search\_as\_you\_type field at this moment (available in 7.2). I have a suggestions field \[^1\] wh…

---

## [Range query doesn't return all documents in index](https://discuss.elastic.co/t/range-query-doesnt-return-all-documents-in-index/197311)

<div class="topic-metadata">

**Author:** [@Alberto\_Ciolini](https://discuss.elastic.co/u/Alberto_Ciolini)\
**Replies:** 0\
**Last updated:** [August 29, 2019, 10:01am UTC](https://discuss.elastic.co/t/range-query-doesnt-return-all-documents-in-index/197311 "2019-08-29T10:01:55Z")

</div>

Hi, I've a problem. Each time Range query doesn't return the same number of documents. This is my query: GET muv-tweet-full\*/\_search { "query": { "range" : { "spam\_prediction\_probability" : { "gte" : 0.15, "lte"…

---

## [Create index with metadata](https://discuss.elastic.co/t/create-index-with-metadata/197303)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 1\
**Last updated:** [August 29, 2019, 10:01am UTC](https://discuss.elastic.co/t/create-index-with-metadata/197303 "2019-08-29T10:01:49Z")

</div>

Hi All, From Logstash 6.8.0 I push data to Elasticsearch 6.8.0 using a Logstash output like this. output { if "\_dissectfailure" in \[tags\] { file { path =\> '/opt/logstash/logs/dissectfailure.txt' codec…

---

## [\[Resolved\]Failed to index by helpers.bulk](https://discuss.elastic.co/t/resolved-failed-to-index-by-helpers-bulk/197296)

<div class="topic-metadata">

**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\
**Replies:** 1\
**Last updated:** [August 29, 2019, 9:53am UTC](https://discuss.elastic.co/t/resolved-failed-to-index-by-helpers-bulk/197296 "2019-08-29T09:53:32Z")

</div>

Hi team, below is the python code. from elasticsearch import helpers,Elasticsearch import csv es = Elasticsearch() with open('testcase0801.csv') as f: reader = csv.DictReader(f) helpers.bulk(es,reader,index='t…

---

## [Migrate ElasticSearch Data from 0.9 (embedded) to 7.x (standalone)](https://discuss.elastic.co/t/migrate-elasticsearch-data-from-0-9-embedded-to-7-x-standalone/197300)

<div class="topic-metadata">

**Author:** [@Arial](https://discuss.elastic.co/u/Arial)\
**Replies:** 0\
**Last updated:** [August 29, 2019, 9:24am UTC](https://discuss.elastic.co/t/migrate-elasticsearch-data-from-0-9-embedded-to-7-x-standalone/197300 "2019-08-29T09:24:25Z")

</div>

Hi! I'm quite a newbie when it comes to ElasticSearch. I had to update a project from the version 0.9 to 7.x everything went smoothly but now I have a little problem: How can I migrate the data from the old embedded Ela…

---

## [Using search\_after. Getting skipped count and rest count](https://discuss.elastic.co/t/using-search-after-getting-skipped-count-and-rest-count/197186)

<div class="topic-metadata">

**Author:** [@einfoman](https://discuss.elastic.co/u/einfoman)\
**Replies:** 2\
**Last updated:** [August 29, 2019, 9:19am UTC](https://discuss.elastic.co/t/using-search-after-getting-skipped-count-and-rest-count/197186 "2019-08-29T09:19:44Z")

</div>

Hi, everyone! I have an index of documents which search using sorting and search\_after parameter. Every page is an outer request. I need to know, how many documents is skipped for the current value of search\_after param…

---

## [About connecting aws DB to elastic search](https://discuss.elastic.co/t/about-connecting-aws-db-to-elastic-search/197294)

<div class="topic-metadata">

**Author:** [@pavan\_gandhi](https://discuss.elastic.co/u/pavan_gandhi)\
**Replies:** 0\
**Last updated:** [August 29, 2019, 9:07am UTC](https://discuss.elastic.co/t/about-connecting-aws-db-to-elastic-search/197294 "2019-08-29T09:07:27Z")

</div>

I am having AWS database which is deployed in sql server in my computer and how can i connect that AWS DB to elastic search

---

## [Similarity plugin in ES \> 6](https://discuss.elastic.co/t/similarity-plugin-in-es-6/196814)

<div class="topic-metadata">

**Author:** [@David\_G\_Ortega](https://discuss.elastic.co/u/David_G_Ortega)\
**Replies:** 3\
**Last updated:** [August 29, 2019, 9:03am UTC](https://discuss.elastic.co/t/similarity-plugin-in-es-6/196814 "2019-08-29T09:03:44Z")

</div>

Hi, can someone point me how I could build a plugin that introduces a new Lucene similarity class? So I can then call PUT /index { "settings" : { "index" : { "similarity" : { "dss…

---

## [Modeling data for Business Analytics](https://discuss.elastic.co/t/modeling-data-for-business-analytics/197289)

<div class="topic-metadata">

**Author:** [@metrica](https://discuss.elastic.co/u/metrica)\
**Replies:** 0\
**Last updated:** [August 29, 2019, 8:39am UTC](https://discuss.elastic.co/t/modeling-data-for-business-analytics/197289 "2019-08-29T08:39:20Z")

</div>

I'm building Analytics Dashboards in Kibana for understanding user behavior, creating funnels and that type of thing. I'm recording events associated with each user coming from different applications. I'm not sure how …

---

## [Strange problem about docs search](https://discuss.elastic.co/t/strange-problem-about-docs-search/197252)

<div class="topic-metadata">

**Author:** [@Shaqdan](https://discuss.elastic.co/u/Shaqdan)\
**Replies:** 3\
**Last updated:** [August 29, 2019, 8:11am UTC](https://discuss.elastic.co/t/strange-problem-about-docs-search/197252 "2019-08-29T08:11:28Z")

</div>

I have a strange problem about docs search need your help. I can see all my docs data in Kibana, but when I use dev tools or curl to search my docs, I can't found some devices log data every time which are produced by th…

---

## [Create Index using Java API (Elasticsearch 7.1 ) gives exception](https://discuss.elastic.co/t/create-index-using-java-api-elasticsearch-7-1-gives-exception/194650)

<div class="topic-metadata">

**Author:** [@anagha](https://discuss.elastic.co/u/anagha)\
**Replies:** 1\
**Last updated:** [August 29, 2019, 8:05am UTC](https://discuss.elastic.co/t/create-index-using-java-api-elasticsearch-7-1-gives-exception/194650 "2019-08-29T08:05:13Z")

</div>

I am trying to create index onto Elasticsearch 7.1 using below code snippet. private void createIndex(String indexName, String jsonFile) throws URISyntaxException, IOException { String jsonData = getJsonString(jsonFile…

---

## [Setting up 3 Nodes Cluster in Single Machine](https://discuss.elastic.co/t/setting-up-3-nodes-cluster-in-single-machine/196817)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 14\
**Last updated:** [August 29, 2019, 8:01am UTC](https://discuss.elastic.co/t/setting-up-3-nodes-cluster-in-single-machine/196817 "2019-08-29T08:01:01Z")

</div>

Hi, I am trying to setup 3 nodes cluster in my computer with 3 different paths Here is the elasticsearch configuration Node 1 : cluster.name: newcluster node.name: node-4 path.data: C:\\ELK Node1\\elasticsearch-7.2.1-w…

---

## [Elasticsearch filling up all it's memory and crushes - How to debug](https://discuss.elastic.co/t/elasticsearch-filling-up-all-its-memory-and-crushes-how-to-debug/197108)

<div class="topic-metadata">

**Author:** [@sancroth](https://discuss.elastic.co/u/sancroth)\
**Replies:** 1\
**Last updated:** [August 29, 2019, 7:59am UTC](https://discuss.elastic.co/t/elasticsearch-filling-up-all-its-memory-and-crushes-how-to-debug/197108 "2019-08-29T07:59:36Z")

</div>

We used to run Solr search on our project. I am part of the operations team. We noticed Solr crushing all the time with OOM-Exceptions. Since i have been using elasticsearch for centralised logging, monitoring, some cus…

---

## [ELK Watcher Response correct?](https://discuss.elastic.co/t/elk-watcher-response-correct/194988)

<div class="topic-metadata">

**Author:** [@rj23495](https://discuss.elastic.co/u/rj23495)\
**Replies:** 6\
**Last updated:** [August 29, 2019, 7:54am UTC](https://discuss.elastic.co/t/elk-watcher-response-correct/194988 "2019-08-29T07:54:34Z")

</div>

{ "\_id" : "metric\_DashOperations\_getUser\_success\_latency\_8d38ec7e-62f1-4b53-8e01-baacab7dad47-2019-08-13T08:57:38.355Z", "watch\_record" : { "watch\_id" : "metric\_DashOperations\_getUser\_success\_latency", "node"…

---

## [Slack channel for Elastic stack](https://discuss.elastic.co/t/slack-channel-for-elastic-stack/197193)

<div class="topic-metadata">

**Author:** [@sk545](https://discuss.elastic.co/u/sk545)\
**Replies:** 1\
**Last updated:** [August 29, 2019, 7:47am UTC](https://discuss.elastic.co/t/slack-channel-for-elastic-stack/197193 "2019-08-29T07:47:28Z")

</div>

Do we have any Slack channel for Elastic stack discussions ?

---

## [Creating two node cluster in elasticsearch](https://discuss.elastic.co/t/creating-two-node-cluster-in-elasticsearch/196087)

<div class="topic-metadata">

**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\
**Replies:** 13\
**Last updated:** [August 29, 2019, 7:41am UTC](https://discuss.elastic.co/t/creating-two-node-cluster-in-elasticsearch/196087 "2019-08-29T07:41:35Z")

</div>

I have two instances of gcp and both have elasticsearch 7.3 installed on it master node also have kibana 7.3 installed on the same machine, i have set same cluster name for both the nodes declare one as master and one as…

---

## [Is it possible to add a field to all document in an index which the field is an aggregation result?](https://discuss.elastic.co/t/is-it-possible-to-add-a-field-to-all-document-in-an-index-which-the-field-is-an-aggregation-result/197109)

<div class="topic-metadata">

**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\
**Replies:** 3\
**Last updated:** [August 29, 2019, 7:29am UTC](https://discuss.elastic.co/t/is-it-possible-to-add-a-field-to-all-document-in-an-index-which-the-field-is-an-aggregation-result/197109 "2019-08-29T07:29:24Z")

</div>

Hello all, I have data set as below: on\_time,off\_time,user,PC 2018-09-01 00:34:27.540,2018-09-01 03:40:34.870,wwwww,NA016F 2018-09-01 02:55:55.710,2018-09-01 02:58:55.860,dddddd,NB106F 2018-09-01 03:44:24.460,2018-09-0…

---

## [ElasticSearch for ETL - question about from-to requests and Scroll API](https://discuss.elastic.co/t/elasticsearch-for-etl-question-about-from-to-requests-and-scroll-api/197037)

<div class="topic-metadata">

**Author:** [@KindYAK](https://discuss.elastic.co/u/KindYAK)\
**Replies:** 3\
**Last updated:** [August 29, 2019, 7:26am UTC](https://discuss.elastic.co/t/elasticsearch-for-etl-question-about-from-to-requests-and-scroll-api/197037 "2019-08-29T07:26:55Z")

</div>

I am planning to use Elasticsearch for ETL. Airflow tasks are configured to read data from Elasticsearch in batches, process the data and load it back to Elastic. The problem is that processing takes a lot of time and …

---

## [ES Security : Get password metadata such as last password update time](https://discuss.elastic.co/t/es-security-get-password-metadata-such-as-last-password-update-time/196932)

<div class="topic-metadata">

**Author:** [@7171u](https://discuss.elastic.co/u/7171u)\
**Replies:** 1\
**Last updated:** [August 27, 2019, 10:57am UTC](https://discuss.elastic.co/t/es-security-get-password-metadata-such-as-last-password-update-time/196932 "2019-08-27T10:57:45Z")

</div>

Hi Is it possible view password metadata of native realm user someway, such as previous password updated dates? Thanks

---

## [Get only multi value in Elastic search](https://discuss.elastic.co/t/get-only-multi-value-in-elastic-search/197107)

<div class="topic-metadata">

**Author:** [@Ramesh\_balasubramani](https://discuss.elastic.co/u/Ramesh_balasubramani)\
**Replies:** 2\
**Last updated:** [August 29, 2019, 6:37am UTC](https://discuss.elastic.co/t/get-only-multi-value-in-elastic-search/197107 "2019-08-29T06:37:55Z")

</div>

"hits": \[ { "\_index": "logstash-ramesh-2019.08.28", "\_type": "doc", "\_id": "7XYH2GwBQhFmziR\_i09j", "\_score": null, "\_source": { "usernam…

---

## [Is it safe for read-only indices to have zero replicas?](https://discuss.elastic.co/t/is-it-safe-for-read-only-indices-to-have-zero-replicas/197237)

<div class="topic-metadata">

**Author:** [@walid](https://discuss.elastic.co/u/walid)\
**Replies:** 1\
**Last updated:** [August 29, 2019, 4:22am UTC](https://discuss.elastic.co/t/is-it-safe-for-read-only-indices-to-have-zero-replicas/197237 "2019-08-29T04:22:12Z")

</div>

We have date-partitioned indices (by month), previous months indices are only used for searching, but still hold important data. Would it be safe to remove the replicas for those old indices in terms of data integrity? …

---

## [Modifying response](https://discuss.elastic.co/t/modifying-response/197215)

<div class="topic-metadata">

**Author:** [@haroutk](https://discuss.elastic.co/u/haroutk)\
**Replies:** 7\
**Last updated:** [August 29, 2019, 5:34am UTC](https://discuss.elastic.co/t/modifying-response/197215 "2019-08-29T05:34:13Z")

</div>

We have a need to modify the response document(s) from a query before returning it to the user. For example, we might need to rename a document field to a more user-friendly name. I understand that elasticsearch has ex…

---

## [Search query without specifying the field](https://discuss.elastic.co/t/search-query-without-specifying-the-field/197254)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 1\
**Last updated:** [August 29, 2019, 5:04am UTC](https://discuss.elastic.co/t/search-query-without-specifying-the-field/197254 "2019-08-29T05:04:29Z")

</div>

Hi, How do you perform search query without specifying the field, basically to perform search on all fields. I realize that \_all is removed in elasticsearch 7. I tried query\_string with out fields but i get query\_sha…

---

## [Synonym Token Filter questions](https://discuss.elastic.co/t/synonym-token-filter-questions/196705)

<div class="topic-metadata">

**Author:** [@jjarthur](https://discuss.elastic.co/u/jjarthur)\
**Replies:** 9\
**Last updated:** [August 29, 2019, 5:04am UTC](https://discuss.elastic.co/t/synonym-token-filter-questions/196705 "2019-08-29T05:04:43Z")

</div>

I am attempting to implement synonyms into my search and ran into a couple of questions. Firstly, I have a synonyms.txt file with the following mappings: foo, bar, baz When "baz" is queried in elasticsearch, it corr…

---

## [Elaasticsearch query to compare a filed value of 2 documents in same index](https://discuss.elastic.co/t/elaasticsearch-query-to-compare-a-filed-value-of-2-documents-in-same-index/197258)

<div class="topic-metadata">

**Author:** [@Harish\_Malu](https://discuss.elastic.co/u/Harish_Malu)\
**Replies:** 0\
**Last updated:** [August 29, 2019, 4:47am UTC](https://discuss.elastic.co/t/elaasticsearch-query-to-compare-a-filed-value-of-2-documents-in-same-index/197258 "2019-08-29T04:47:53Z")

</div>

I have written below query to fetch latest two document to get few fields like #processor, allocated\_memory for a particular server. I want to extend the query to compare these fields i.e. #processor, allocated\_memory…

---

## [Available ports on a data node?](https://discuss.elastic.co/t/available-ports-on-a-data-node/197238)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 2\
**Last updated:** [August 29, 2019, 4:11am UTC](https://discuss.elastic.co/t/available-ports-on-a-data-node/197238 "2019-08-29T04:11:39Z")

</div>

What ports / access need to be open on a data node for it to join a cluster? Im attempting to join a data node to a master but am getting timeouts. From the data node I can get the 'all is well' curl response from port …

---

## [Upgrade elasticsearch , kibana - what should be flow and steps](https://discuss.elastic.co/t/upgrade-elasticsearch-kibana-what-should-be-flow-and-steps/196017)

<div class="topic-metadata">

**Author:** [@shappy123](https://discuss.elastic.co/u/shappy123)\
**Replies:** 18\
**Last updated:** [August 29, 2019, 4:05am UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-kibana-what-should-be-flow-and-steps/196017 "2019-08-29T04:05:48Z")

</div>

Hi guys, I am new to elastic search, can anyone plesae guide me and tel me what are the steps to upgrade from v 6.4.2 to the latest version and Kibana as well which is v 6.4.3.... A step by step or flow will actually h…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1174)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1176)
