# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1176 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1177 --- ## [Why are non shrunk indices smaller than shrunk indices?](https://discuss.elastic.co/t/why-are-non-shrunk-indices-smaller-than-shrunk-indices/197233)
**Author:** [@jmartori](https://discuss.elastic.co/u/jmartori)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 9:50pm UTC](https://discuss.elastic.co/t/why-are-non-shrunk-indices-smaller-than-shrunk-indices/197233 "2019-08-28T21:50:32Z")
Hi everyone, I have been shrinking old indices to reduce the amount of shards in our cluster, and I've noticed that the size of the indices before and after shrinking is not the same. The index size seems to have increa… --- ## [Elasticsearch 7.2 java client SSL configuration failing: bad\_certificate](https://discuss.elastic.co/t/elasticsearch-7-2-java-client-ssl-configuration-failing-bad-certificate/192766)
**Author:** [@Lucas\_montenegro\_car](https://discuss.elastic.co/u/Lucas_montenegro_car)\ **Replies:** 2\ **Last updated:** [August 28, 2019, 9:34pm UTC](https://discuss.elastic.co/t/elasticsearch-7-2-java-client-ssl-configuration-failing-bad-certificate/192766 "2019-08-28T21:34:15Z")
After updating my elasticsearch to 7.2 and updating kibana, and after enabling security and therefore SSL, my java (spring) application lost connection to it. Spring JPA still doesn't support ES 7 and security+SSL was a … --- ## [Getting "Authentication of \[elastic\] was terminated by realm \[reserved\] - failed to authenticate user \[elastic\]"](https://discuss.elastic.co/t/getting-authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/197230)
**Author:** [@niudaye123](https://discuss.elastic.co/u/niudaye123)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 9:31pm UTC](https://discuss.elastic.co/t/getting-authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/197230 "2019-08-28T21:31:22Z")
Hi, I am keep getting the above error in log of one of my master nodes. But I can run the following health check with no issue. \[root@awselsprdlap01 awselsprdlap01.est1933.com-esnode01\]# curl -u elastic -XGET 'http://a… --- ## [Get more facets, disregarding the max\_buckets setting?](https://discuss.elastic.co/t/get-more-facets-disregarding-the-max-buckets-setting/197190)
**Author:** [@uprise10](https://discuss.elastic.co/u/uprise10)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 7:35pm UTC](https://discuss.elastic.co/t/get-more-facets-disregarding-the-max-buckets-setting/197190 "2019-08-28T19:35:18Z")
For a price facet (represented by a histogram slider) I'd like to retrieve all my prices of the shop in an aggregated search. However, there is a max of the amount of buckets by the search.max\_buckets setting (10.000 by … --- ## [Does increasing index.highlight.max\_analyzed\_offset to a larger number hurt query performance? If so, how much, and why?](https://discuss.elastic.co/t/does-increasing-index-highlight-max-analyzed-offset-to-a-larger-number-hurt-query-performance-if-so-how-much-and-why/197202)
**Author:** [@jesserwright](https://discuss.elastic.co/u/jesserwright)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 7:33pm UTC](https://discuss.elastic.co/t/does-increasing-index-highlight-max-analyzed-offset-to-a-larger-number-hurt-query-performance-if-so-how-much-and-why/197202 "2019-08-28T19:33:14Z")
When I do a query for to my index, I am getting the following error: "The length of \[field\_21\] field of \[82213\] doc of \[jobs\] index has exceeded \[10000\] - maximum allowed to be analyzed for highlighting. This maximum ca… --- ## [Is elastic free version enough to get logs from different k8s clusters?](https://discuss.elastic.co/t/is-elastic-free-version-enough-to-get-logs-from-different-k8s-clusters/196951)
**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\ **Replies:** 5\ **Last updated:** [August 28, 2019, 6:37pm UTC](https://discuss.elastic.co/t/is-elastic-free-version-enough-to-get-logs-from-different-k8s-clusters/196951 "2019-08-28T18:37:43Z")
Hello, We would like to receive logs from several k8s clusters, but I wonder whether this would be possible with free elastic stack version. Please suggest Thanks and regards --- ## [Difficulties to make a request with elasticsearch](https://discuss.elastic.co/t/difficulties-to-make-a-request-with-elasticsearch/197159)
**Author:** [@JeromeS](https://discuss.elastic.co/u/JeromeS)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 5:32pm UTC](https://discuss.elastic.co/t/difficulties-to-make-a-request-with-elasticsearch/197159 "2019-08-28T17:32:38Z")
Hello, I encounter difficulties to make the request i would like. You will probably need the mapping of my index to understand what i want to do : { "camtest": { "aliases": {}, "mappings": { "propert… --- ## [org.elasticsearch.action.search.SearchPhaseExecutionException: all shards failed](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed/197178)
**Author:** [@vivekj\_11](https://discuss.elastic.co/u/vivekj_11)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 5:29pm UTC](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed/197178 "2019-08-28T17:29:35Z")
I tried to create a basic setup with one Elasticsearch pod. The jvm\_memorry for this pod is 8GB. index.number\_of\_shards: 3 I didn't notice the pod for some time and today I found that the above-mentioned error. it say… --- ## [How to use rest to display all the available indices?](https://discuss.elastic.co/t/how-to-use-rest-to-display-all-the-available-indices/197156)
**Author:** [@Bob94](https://discuss.elastic.co/u/Bob94)\ **Replies:** 3\ **Last updated:** [August 28, 2019, 4:35pm UTC](https://discuss.elastic.co/t/how-to-use-rest-to-display-all-the-available-indices/197156 "2019-08-28T16:35:26Z")
Hi Is there any way to list out all the indices by using rest api and java ? Some tutorial and example is really appreciated! --- ## [Cut off frequency deprecated](https://discuss.elastic.co/t/cut-off-frequency-deprecated/197115)
**Author:** [@hcapitaine](https://discuss.elastic.co/u/hcapitaine)\ **Replies:** 2\ **Last updated:** [August 28, 2019, 2:50pm UTC](https://discuss.elastic.co/t/cut-off-frequency-deprecated/197115 "2019-08-28T14:50:46Z")
Hi all, It's written in the doc that cut off frequency feature is deprecated in 7.3 as it's "included" in the match search. How is it included and how does it work? --- ## [Exporting Indexed Data](https://discuss.elastic.co/t/exporting-indexed-data/196969)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 5\ **Last updated:** [August 28, 2019, 2:49pm UTC](https://discuss.elastic.co/t/exporting-indexed-data/196969 "2019-08-28T14:49:57Z")
I am trying to export approximately 100 million indexed events to txt files but having a hard time finding out how to do so. Since I can't get the Elasticsearch input filter to work in Logstash (secured cluster, open ti… --- ## [Slack action for elastic cloud](https://discuss.elastic.co/t/slack-action-for-elastic-cloud/196719)
**Author:** [@Denis.topa](https://discuss.elastic.co/u/Denis.topa)\ **Replies:** 2\ **Last updated:** [August 28, 2019, 2:34pm UTC](https://discuss.elastic.co/t/slack-action-for-elastic-cloud/196719 "2019-08-28T14:34:35Z")
Hi, How to configure slack account for Elasticsearch 7.3 under the elastic.co cloud. Based on documentation editing elasticsearch.yml is disabled in versions higher than 7. In the documentation is specified " You can … --- ## [How to query 2 logs and show where session.id is missing in one of the logs?](https://discuss.elastic.co/t/how-to-query-2-logs-and-show-where-session-id-is-missing-in-one-of-the-logs/197126)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 1:50pm UTC](https://discuss.elastic.co/t/how-to-query-2-logs-and-show-where-session-id-is-missing-in-one-of-the-logs/197126 "2019-08-28T13:50:43Z")
Hi, I have 2 logs (httpd\_access and session log). Both logs have the field session.id. One httpd call can result in multiple sessionlog entries. I want to find out the following: which session ids have entries in s… --- ## [JVM heap size usage and causes](https://discuss.elastic.co/t/jvm-heap-size-usage-and-causes/196959)
**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\ **Replies:** 8\ **Last updated:** [August 28, 2019, 1:40pm UTC](https://discuss.elastic.co/t/jvm-heap-size-usage-and-causes/196959 "2019-08-28T13:40:00Z")
Hello, can someone explain to me what are the main causes of heap usage? Is it number of queries being run, the number of indexes / shards that are open or is it data ingestion? I ask because I have a 3 node cluster and… --- ## [ElasticSearch deleting data to comply with the GPDR](https://discuss.elastic.co/t/elasticsearch-deleting-data-to-comply-with-the-gpdr/193755)
**Author:** [@notStan](https://discuss.elastic.co/u/notStan)\ **Replies:** 3\ **Last updated:** [August 28, 2019, 1:08pm UTC](https://discuss.elastic.co/t/elasticsearch-deleting-data-to-comply-with-the-gpdr/193755 "2019-08-28T13:08:42Z")
Hello. I have a question/concern about the workings of Elasticsearch and the GPDR. In the GPDR you have the right to be forgotten. Let's say I am a server owner and I have some personal information, which the owner has … --- ## [Can we run two ES Instances on the same server](https://discuss.elastic.co/t/can-we-run-two-es-instances-on-the-same-server/196982)
**Author:** [@suvarna](https://discuss.elastic.co/u/suvarna)\ **Replies:** 6\ **Last updated:** [August 28, 2019, 12:23pm UTC](https://discuss.elastic.co/t/can-we-run-two-es-instances-on-the-same-server/196982 "2019-08-28T12:23:46Z")
Currently I have one cluster 1 node ES . I need few inputs on below points.. Can we run two ES instances on the same server ? if yes, how can we ensure, that the client have single endpoint . Is there any rever… --- ## [Total store size of index with only one shard and one replica is three times the size of primary](https://discuss.elastic.co/t/total-store-size-of-index-with-only-one-shard-and-one-replica-is-three-times-the-size-of-primary/196057)
**Author:** [@kmousikos](https://discuss.elastic.co/u/kmousikos)\ **Replies:** 11\ **Last updated:** [August 28, 2019, 11:50am UTC](https://discuss.elastic.co/t/total-store-size-of-index-with-only-one-shard-and-one-replica-is-three-times-the-size-of-primary/196057 "2019-08-28T11:50:35Z")
Is there any kind of background task that would reduce the total number of segments increasing the total store size while leaving the respective primary values unaffected, as shown in the graphs? Version: 6.8.0 --- ## [String contains Substring Search across one or more fields](https://discuss.elastic.co/t/string-contains-substring-search-across-one-or-more-fields/196828)
**Author:** [@TeraInferno](https://discuss.elastic.co/u/TeraInferno)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:29am UTC](https://discuss.elastic.co/t/string-contains-substring-search-across-one-or-more-fields/196828 "2019-08-28T11:29:23Z")
Hello. I am looking for analysis and mapping setting recommendations that would allow me to perform searches that answer 'does string Y contain substring X?'. For example, given the sample data: \[ { "name": { … --- ## [Dedup Help!](https://discuss.elastic.co/t/dedup-help/196823)
**Author:** [@cchooks2](https://discuss.elastic.co/u/cchooks2)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:25am UTC](https://discuss.elastic.co/t/dedup-help/196823 "2019-08-28T11:25:25Z")
Hello All, I am attempting to use DEDUP command in Kibana, via the Query DSL. { "exists": { "field": "TSID" }, "dedup": true } Getting this error: Discover: \[parsing\_exception\] \[exists\] malformed query, exp… --- ## [Unable to do range and script query on the same field](https://discuss.elastic.co/t/unable-to-do-range-and-script-query-on-the-same-field/196862)
**Author:** [@aniruddha.raje](https://discuss.elastic.co/u/aniruddha.raje)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:22am UTC](https://discuss.elastic.co/t/unable-to-do-range-and-script-query-on-the-same-field/196862 "2019-08-28T11:22:32Z")
I am trying to do a query which has range and script operations on a field, I am able to run the query only if use either of the range or script operation, but not together. Following is the query - GET /listings/\_se… --- ## [Fluentd is not able to forward data to elasticsearch](https://discuss.elastic.co/t/fluentd-is-not-able-to-forward-data-to-elasticsearch/196899)
**Author:** [@skdasari](https://discuss.elastic.co/u/skdasari)\ **Replies:** 0\ **Last updated:** [August 27, 2019, 8:21am UTC](https://discuss.elastic.co/t/fluentd-is-not-able-to-forward-data-to-elasticsearch/196899 "2019-08-27T08:21:42Z")
I am trying to forward my local server log from windows to an elasticsearch server in a linux machine and check these logs in the kibana. This is test environment currently. fuentd on either ends is not showing any issue… --- ## [How to apply condition on the aggregation bucket group\_doc hits](https://discuss.elastic.co/t/how-to-apply-condition-on-the-aggregation-bucket-group-doc-hits/196866)
**Author:** [@saurabh06](https://discuss.elastic.co/u/saurabh06)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:20am UTC](https://discuss.elastic.co/t/how-to-apply-condition-on-the-aggregation-bucket-group-doc-hits/196866 "2019-08-28T11:20:53Z")
Is their any way to apply condition on the aggregation bucket group\_doc hits in watcher Elastic search? --- ## [Send alert in mail text as json format using watcher API](https://discuss.elastic.co/t/send-alert-in-mail-text-as-json-format-using-watcher-api/196868)
**Author:** [@saurabh06](https://discuss.elastic.co/u/saurabh06)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:19am UTC](https://discuss.elastic.co/t/send-alert-in-mail-text-as-json-format-using-watcher-api/196868 "2019-08-28T11:19:49Z")
I wan to send the output of hits in mail in proper JSON format as text body instead of whole response combined into single text body in watcher --- ## [Problem with dynamic template](https://discuss.elastic.co/t/problem-with-dynamic-template/196922)
**Author:** [@Arnodl](https://discuss.elastic.co/u/Arnodl)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:18am UTC](https://discuss.elastic.co/t/problem-with-dynamic-template/196922 "2019-08-28T11:18:29Z")
Delete post --- ## [Can we set a fixed size for every shard?How?](https://discuss.elastic.co/t/can-we-set-a-fixed-size-for-every-shard-how/196885)
**Author:** [@lauea](https://discuss.elastic.co/u/lauea)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:16am UTC](https://discuss.elastic.co/t/can-we-set-a-fixed-size-for-every-shard-how/196885 "2019-08-28T11:16:43Z")
As the subject, can we set a fixed size for every shard? And How? Only can I search related documents to set the watermater based on total disk size. https://www.elastic.co/guide/en/elasticsearch/reference/6.7/disk-all… --- ## [What is Problem with Multiple Range Filter?](https://discuss.elastic.co/t/what-is-problem-with-multiple-range-filter/196974)
**Author:** [@Bidzina\_Goginashvili](https://discuss.elastic.co/u/Bidzina_Goginashvili)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:10am UTC](https://discuss.elastic.co/t/what-is-problem-with-multiple-range-filter/196974 "2019-08-28T11:10:54Z")
GET bliad4/\_search { "query":{ "bool":{ "filter":\[ { "terms":{ "categories.id":\[ 9 \] } }, { "terms":{ "deleted":\[ false \] } }, { "terms":{ "published":\[ true \] } }, { "range": { "VendorMinPric… --- ## [ElasticSearch - docs deleted count reduced](https://discuss.elastic.co/t/elasticsearch-docs-deleted-count-reduced/196729)
**Author:** [@moni15moni](https://discuss.elastic.co/u/moni15moni)\ **Replies:** 4\ **Last updated:** [August 28, 2019, 11:08am UTC](https://discuss.elastic.co/t/elasticsearch-docs-deleted-count-reduced/196729 "2019-08-28T11:08:03Z")
Hi For debugging I have checked one of currently writing indices shows the following results 4 days before the following response i got health status index … --- ## [Exact match on large float](https://discuss.elastic.co/t/exact-match-on-large-float/197091)
**Author:** [@carasel](https://discuss.elastic.co/u/carasel)\ **Replies:** 1\ **Last updated:** [August 28, 2019, 11:07am UTC](https://discuss.elastic.co/t/exact-match-on-large-float/197091 "2019-08-28T11:07:48Z")
I have a field mapped as a float, which is currently storing very large numbers. When I try to search for an exact match on this field, I often end up with results which are not exact matches: "query": { "constant\_sco… --- ## [Index lifecycle policies not working](https://discuss.elastic.co/t/index-lifecycle-policies-not-working/197092)
**Author:** [@L33T](https://discuss.elastic.co/u/L33T)\ **Replies:** 0\ **Last updated:** [August 28, 2019, 11:02am UTC](https://discuss.elastic.co/t/index-lifecycle-policies-not-working/197092 "2019-08-28T11:02:16Z")
Hi, I have a very simple setup at present, just a single rollover policy to create a new index every 4gb or 1day but it\`s not working and the index is still growing over that limit. Any help would be awesome :slight\_sm… --- ## [Cant start ES because too many shards](https://discuss.elastic.co/t/cant-start-es-because-too-many-shards/196792)
**Author:** [@chrism1](https://discuss.elastic.co/u/chrism1)\ **Replies:** 6\ **Last updated:** [August 28, 2019, 10:48am UTC](https://discuss.elastic.co/t/cant-start-es-because-too-many-shards/196792 "2019-08-28T10:48:23Z")
We have an ES installation where we have 4000 indexes and 40,000 shards. Its clear that this is not a good idea, but we cant get Elastic to start to do anything about it. Any ideas how we can get Elastic to start up? We… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1175) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1177)