# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1196

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1197

---

## [ES goes to red when node restarts](https://discuss.elastic.co/t/es-goes-to-red-when-node-restarts/193716)

<div class="topic-metadata">

**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\
**Replies:** 9\
**Last updated:** [August 9, 2019, 9:04am UTC](https://discuss.elastic.co/t/es-goes-to-red-when-node-restarts/193716 "2019-08-09T09:04:42Z")

</div>

Hi I am using ES 6.4 version. And I have 3 machines, Each of them have one instance of ES master and ES data node running as separate processes. totally 6 nodes, 3 master and 3 data nodes. Replication Factor is being se…

---

## [What must I do with the "type" feature that not available anymore when Migrating 5.6.2 to Latest Stable](https://discuss.elastic.co/t/what-must-i-do-with-the-type-feature-that-not-available-anymore-when-migrating-5-6-2-to-latest-stable/193811)

<div class="topic-metadata">

**Author:** [@emir](https://discuss.elastic.co/u/emir)\
**Replies:** 2\
**Last updated:** [August 9, 2019, 8:22am UTC](https://discuss.elastic.co/t/what-must-i-do-with-the-type-feature-that-not-available-anymore-when-migrating-5-6-2-to-latest-stable/193811 "2019-08-09T08:22:40Z")

</div>

Hi, We have a multi-tenant Elasticsearch index which works on 5.6.2 version. We have used the "type" feature that not available anymore. Now we want to migrate to the newest version but I think, we need some changes be…

---

## [Can I have multiple different types of analyzer for different fields?](https://discuss.elastic.co/t/can-i-have-multiple-different-types-of-analyzer-for-different-fields/194569)

<div class="topic-metadata">

**Author:** [@Adi\_Ti](https://discuss.elastic.co/u/Adi_Ti)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 8:06am UTC](https://discuss.elastic.co/t/can-i-have-multiple-different-types-of-analyzer-for-different-fields/194569 "2019-08-09T08:06:12Z")

</div>

I want to search a "word" or "partial word" on all the fields of documents of index. I also want to want maintain the order of search.Can use n-grams for the field a of index and edge grams on the other field of …

---

## [How to specify a list of required fields (must be in all documents) for a particular index?](https://discuss.elastic.co/t/how-to-specify-a-list-of-required-fields-must-be-in-all-documents-for-a-particular-index/194567)

<div class="topic-metadata">

**Author:** [@Melok](https://discuss.elastic.co/u/Melok)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 7:57am UTC](https://discuss.elastic.co/t/how-to-specify-a-list-of-required-fields-must-be-in-all-documents-for-a-particular-index/194567 "2019-08-09T07:57:36Z")

</div>

How to specify a list of required fields (must be in all documents) for a particular index?

---

## [Boolean coercion warnings for internal indices within the upgrade assistant](https://discuss.elastic.co/t/boolean-coercion-warnings-for-internal-indices-within-the-upgrade-assistant/194563)

<div class="topic-metadata">

**Author:** [@Sumit\_Kumar1](https://discuss.elastic.co/u/Sumit_Kumar1)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 7:46am UTC](https://discuss.elastic.co/t/boolean-coercion-warnings-for-internal-indices-within-the-upgrade-assistant/194563 "2019-08-09T07:46:37Z")

</div>

Coercion of boolean fields xg\_mlbrmanual\_log4j\_prod-000001 1 note Coercion of boolean fields No action required, but it is advised to read about the change. Read Documentation Details: \[\[type: doc, field: container…

---

## [\[x-pack\] enabled: Unable to communicate to Elasticsearch using only cacert from client machines](https://discuss.elastic.co/t/x-pack-enabled-unable-to-communicate-to-elasticsearch-using-only-cacert-from-client-machines/194280)

<div class="topic-metadata">

**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\
**Replies:** 18\
**Last updated:** [August 9, 2019, 6:48am UTC](https://discuss.elastic.co/t/x-pack-enabled-unable-to-communicate-to-elasticsearch-using-only-cacert-from-client-machines/194280 "2019-08-09T06:48:47Z")

</div>

Hi, i have upgraded my cluster from 6.7.0 to 6.8.2 to use x-pack opensource version, after enabling x-pack am able to communicate to elasticsearch using "cacert" and username, password, but i am trying to authenticate o…

---

## [Is indexing done in Logstash or Elasticsearch?](https://discuss.elastic.co/t/is-indexing-done-in-logstash-or-elasticsearch/194163)

<div class="topic-metadata">

**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\
**Replies:** 6\
**Last updated:** [August 9, 2019, 6:47am UTC](https://discuss.elastic.co/t/is-indexing-done-in-logstash-or-elasticsearch/194163 "2019-08-09T06:47:19Z")

</div>

Hi All, I am understanding the process of indexing. I have read this question and answer: https://stackoverflow.com/questions/38248757/which-elasticsearch-node-is-better-configured-in-logstash-elasticsearch-output-p W…

---

## [File base authentication doesn't work in elastic in version 7.0.0](https://discuss.elastic.co/t/file-base-authentication-doesnt-work-in-elastic-in-version-7-0-0/194213)

<div class="topic-metadata">

**Author:** [@George\_Wainwright](https://discuss.elastic.co/u/George_Wainwright)\
**Replies:** 3\
**Last updated:** [August 9, 2019, 6:30am UTC](https://discuss.elastic.co/t/file-base-authentication-doesnt-work-in-elastic-in-version-7-0-0/194213 "2019-08-09T06:30:49Z")

</div>

Hi I've configured the next users with roles and added them to elastic: /etc/elasticsearch/roles.yml readonly\_role: cluster: - monitor indices: - names: '\*' privileges: - read - view\_index\_metadata - monitor …

---

## [Master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster, and this node must discover master-eligible nodes but ips look ok](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-and-this-node-must-discover-master-eligible-nodes-but-ips-look-ok/194424)

<div class="topic-metadata">

**Author:** [@oobi89](https://discuss.elastic.co/u/oobi89)\
**Replies:** 8\
**Last updated:** [August 9, 2019, 6:26am UTC](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-and-this-node-must-discover-master-eligible-nodes-but-ips-look-ok/194424 "2019-08-09T06:26:47Z")

</div>

Hello, I am trying to run elasticsearch node on 1 server using docker compose and then another node on different server. My docker-compose file: version: '2.2' services: es01: image: docker.elastic.co/elasticsea…

---

## [\_cat/indices question](https://discuss.elastic.co/t/cat-indices-question/194421)

<div class="topic-metadata">

**Author:** [@pd\_tester](https://discuss.elastic.co/u/pd_tester)\
**Replies:** 3\
**Last updated:** [August 9, 2019, 6:22am UTC](https://discuss.elastic.co/t/cat-indices-question/194421 "2019-08-09T06:22:29Z")

</div>

Can I check the latest document created time upon calling \_cat/indices? Like for example i want to see if the latest document inside the index is 10 days older Thank you

---

## [List query must contain all elements](https://discuss.elastic.co/t/list-query-must-contain-all-elements/194297)

<div class="topic-metadata">

**Author:** [@jiboxiv](https://discuss.elastic.co/u/jiboxiv)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 6:12am UTC](https://discuss.elastic.co/t/list-query-must-contain-all-elements/194297 "2019-08-09T06:12:32Z")

</div>

Hi all, I have a question regarding a query I am attempting to do. Lets say we have a document: { "array": \["value1", "value2", "value3"\] } And I have two queries: Query 1: "array": \["value1", "value2", "value3", "v…

---

## [Error - RestClient java.lang.RuntimeException: error while performing request](https://discuss.elastic.co/t/error-restclient-java-lang-runtimeexception-error-while-performing-request/194303)

<div class="topic-metadata">

**Author:** [@venky003](https://discuss.elastic.co/u/venky003)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 6:09am UTC](https://discuss.elastic.co/t/error-restclient-java-lang-runtimeexception-error-while-performing-request/194303 "2019-08-09T06:09:53Z")

</div>

We are getting this error regularly in our production environment. We are building the RestClient using default configurations. public RestClient build() { if (this.failureListener == null) { …

---

## [Detect known bugs from Log Files by defining rules](https://discuss.elastic.co/t/detect-known-bugs-from-log-files-by-defining-rules/194545)

<div class="topic-metadata">

**Author:** [@ManuMP](https://discuss.elastic.co/u/ManuMP)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 6:09am UTC](https://discuss.elastic.co/t/detect-known-bugs-from-log-files-by-defining-rules/194545 "2019-08-09T06:09:31Z")

</div>

Our software logs heavily during functionality execution. Certain issues are repeating and there are fixed set of log entries to detect the issues. Is it possible to write rules in ELK stack to detect bugs based on patte…

---

## [Is it possible to specify search analyzer in python elasticsearch dsl?](https://discuss.elastic.co/t/is-it-possible-to-specify-search-analyzer-in-python-elasticsearch-dsl/194302)

<div class="topic-metadata">

**Author:** [@N\_Antech](https://discuss.elastic.co/u/N_Antech)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 6:07am UTC](https://discuss.elastic.co/t/is-it-possible-to-specify-search-analyzer-in-python-elasticsearch-dsl/194302 "2019-08-09T06:07:35Z")

</div>

I recently found that for a query I'm trying to run I need to specify the analyzer. This is easy enough via the REST api: GET index/\_search { "query": { "match": { "field": { "query": "ZR000041", …

---

## [Elasticsearch boost](https://discuss.elastic.co/t/elasticsearch-boost/194524)

<div class="topic-metadata">

**Author:** [@glen](https://discuss.elastic.co/u/glen)\
**Replies:** 2\
**Last updated:** [August 9, 2019, 6:05am UTC](https://discuss.elastic.co/t/elasticsearch-boost/194524 "2019-08-09T06:05:25Z")

</div>

Hi, I have a problem with elasticsearch boost. I use Node Js API, and my query looks something like this: query: { bool: { should: \[ { match: { "name": { query: args.text, boost: 10 }} }, …

---

## [Elasticsearch copy index data to a file](https://discuss.elastic.co/t/elasticsearch-copy-index-data-to-a-file/194330)

<div class="topic-metadata">

**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 6:04am UTC](https://discuss.elastic.co/t/elasticsearch-copy-index-data-to-a-file/194330 "2019-08-09T06:04:37Z")

</div>

Hi, I found the GET api and Multi Get api both definitely requires the id to retrieve the document. I want to get all the data in the index and save to a file (like a backup of index) without using the snaphost api sin…

---

## [OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/194349)

<div class="topic-metadata">

**Author:** [@CSt](https://discuss.elastic.co/u/CSt)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 6:01am UTC](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/194349 "2019-08-09T06:01:57Z")

</div>

I can't start elasticsearch with warning OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release. I don't know how can I start it

---

## [Indexing at 2 million events/s?](https://discuss.elastic.co/t/indexing-at-2-million-events-s/194422)

<div class="topic-metadata">

**Author:** [@Jitendra\_Kumhar](https://discuss.elastic.co/u/Jitendra_Kumhar)\
**Replies:** 3\
**Last updated:** [August 9, 2019, 5:14am UTC](https://discuss.elastic.co/t/indexing-at-2-million-events-s/194422 "2019-08-09T05:14:28Z")

</div>

I restarted 1 elasticsearch node.After restart data nodes started transfering among themselves. And it was 2 million events/s.while my todays index is indexing at 12 k events/s.The buffer is filled on logstash machine. …

---

## [Some confusion about Rebalancing](https://discuss.elastic.co/t/some-confusion-about-rebalancing/194535)

<div class="topic-metadata">

**Author:** [@KellyK313](https://discuss.elastic.co/u/KellyK313)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 3:27am UTC](https://discuss.elastic.co/t/some-confusion-about-rebalancing/194535 "2019-08-09T03:27:34Z")

</div>

I have read the shard-rebalancing-vs-shard-allocation and confused about "Rebalancing is about taking assigned shard copies ".Is es-rebalance not related to primary shard？ @DavidTurner look forward to receiving your rep…

---

## [Lost node communication then OOM JVM crash](https://discuss.elastic.co/t/lost-node-communication-then-oom-jvm-crash/194532)

<div class="topic-metadata">

**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\
**Replies:** 0\
**Last updated:** [August 9, 2019, 3:18am UTC](https://discuss.elastic.co/t/lost-node-communication-then-oom-jvm-crash/194532 "2019-08-09T03:18:44Z")

</div>

I am looking for any tips or advice on how to troubleshoot our Elasticsearch cluster. This cluster has been running flawlessly with only minor maintenance for a couple years. We suddenly experienced an outage a week ago …

---

## [ES Docker Container :: How to restart the ES service?](https://discuss.elastic.co/t/es-docker-container-how-to-restart-the-es-service/194316)

<div class="topic-metadata">

**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\
**Replies:** 2\
**Last updated:** [August 9, 2019, 2:06am UTC](https://discuss.elastic.co/t/es-docker-container-how-to-restart-the-es-service/194316 "2019-08-09T02:06:52Z")

</div>

Hi all, I have what is a Elasticsearch 101 question for those of us using the ES Docker Container. I've recently pulled and spun up the latest ES Docker container. (ver 7.3.0) Following the instructions on docker hub…

---

## [No Living connections - Elasticsearch node.js](https://discuss.elastic.co/t/no-living-connections-elasticsearch-node-js/194512)

<div class="topic-metadata">

**Author:** [@arodrigues](https://discuss.elastic.co/u/arodrigues)\
**Replies:** 0\
**Last updated:** [August 8, 2019, 10:59pm UTC](https://discuss.elastic.co/t/no-living-connections-elasticsearch-node-js/194512 "2019-08-08T22:59:59Z")

</div>

Hi, I have an application on nodejs and we are getting several errors as below in the elasticsearch: "No Living connections" Can someone help me?

---

## [Is there a way to explain the More Like This query? (not the result, but the pre-process)](https://discuss.elastic.co/t/is-there-a-way-to-explain-the-more-like-this-query-not-the-result-but-the-pre-process/194437)

<div class="topic-metadata">

**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\
**Replies:** 1\
**Last updated:** [August 8, 2019, 9:51pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-explain-the-more-like-this-query-not-the-result-but-the-pre-process/194437 "2019-08-08T21:51:32Z")

</div>

I am trying to find out how exactly the More Like This query works. In my scenario I have two indices: the first one is an official list of products, each one with a description and a barcode the other one is the clien…

---

## [Curator no longer working. I think it's related to a failed ILM setup](https://discuss.elastic.co/t/curator-no-longer-working-i-think-its-related-to-a-failed-ilm-setup/194489)

<div class="topic-metadata">

**Author:** [@dfinn](https://discuss.elastic.co/u/dfinn)\
**Replies:** 2\
**Last updated:** [August 8, 2019, 9:35pm UTC](https://discuss.elastic.co/t/curator-no-longer-working-i-think-its-related-to-a-failed-ilm-setup/194489 "2019-08-08T21:35:00Z")

</div>

A little while back I tried to setup ILM. It didn't go so well, I asked for help here but was unable to get it working: So it's kind of half setup but still giving errors about rolling indexes over. I've kind of lef…

---

## [Is 30GB of HEAP still the max recommended limit?](https://discuss.elastic.co/t/is-30gb-of-heap-still-the-max-recommended-limit/194473)

<div class="topic-metadata">

**Author:** [@o1o1o11o1](https://discuss.elastic.co/u/o1o1o11o1)\
**Replies:** 1\
**Last updated:** [August 8, 2019, 7:48pm UTC](https://discuss.elastic.co/t/is-30gb-of-heap-still-the-max-recommended-limit/194473 "2019-08-08T19:48:55Z")

</div>

Is GC pauses still an issue with data nodes having more than 32GB of memory allocated to Java ?

---

## [Elasticsearch optimal timeout for querying 2000-7000 indices](https://discuss.elastic.co/t/elasticsearch-optimal-timeout-for-querying-2000-7000-indices/194423)

<div class="topic-metadata">

**Author:** [@pd\_tester](https://discuss.elastic.co/u/pd_tester)\
**Replies:** 1\
**Last updated:** [August 8, 2019, 6:57pm UTC](https://discuss.elastic.co/t/elasticsearch-optimal-timeout-for-querying-2000-7000-indices/194423 "2019-08-08T18:57:39Z")

</div>

Hi may I ask your recommendations for optimal timeout for querying 2000 - 7000 indices in cloud? Thank you

---

## [CircuitBreaker: \[parent\] Data too large, data for \[\<transport\_request\>\]](https://discuss.elastic.co/t/circuitbreaker-parent-data-too-large-data-for-transport-request/193837)

<div class="topic-metadata">

**Author:** [@pjaikumar](https://discuss.elastic.co/u/pjaikumar)\
**Replies:** 1\
**Last updated:** [August 8, 2019, 4:19pm UTC](https://discuss.elastic.co/t/circuitbreaker-parent-data-too-large-data-for-transport-request/193837 "2019-08-08T16:19:23Z")

</div>

Hi, We are having a cluster running in Elastic search version 7.1.1 , details below. 1.) 4 node cluster where 3 nodes act as Data node and also is master-eligible and one node configured as coordinating only node. 2.) …

---

## [How to visualize large shapefiles on kibana which are greater than 50MB](https://discuss.elastic.co/t/how-to-visualize-large-shapefiles-on-kibana-which-are-greater-than-50mb/194468)

<div class="topic-metadata">

**Author:** [@Jayasri\_Cimba](https://discuss.elastic.co/u/Jayasri_Cimba)\
**Replies:** 0\
**Last updated:** [August 8, 2019, 4:18pm UTC](https://discuss.elastic.co/t/how-to-visualize-large-shapefiles-on-kibana-which-are-greater-than-50mb/194468 "2019-08-08T16:18:24Z")

</div>

I have shapefiles data (.shp, .dbf) which I wish to see it on kibana. Unfortunately Kibana can only allow 50MB at maximum. Can you please help me providing the possbilities of doing it.

---

## [100% CPU after upgrade (7.1.1 to 7.3)](https://discuss.elastic.co/t/100-cpu-after-upgrade-7-1-1-to-7-3/194116)

<div class="topic-metadata">

**Author:** [@icheishvili](https://discuss.elastic.co/u/icheishvili)\
**Replies:** 3\
**Last updated:** [August 8, 2019, 3:09pm UTC](https://discuss.elastic.co/t/100-cpu-after-upgrade-7-1-1-to-7-3/194116 "2019-08-08T15:09:48Z")

</div>

After upgrading to 7.3 over the weekend, I now have a node that constantly sits at full CPU utilization. \_nodes/hot\_threads is empty. The cluster has 25 indices, 250 total shards, and is made of up 3 machines, with each …

---

## [Error while loading shared libraries: libjli.so / Cannot Open Shared Object File](https://discuss.elastic.co/t/error-while-loading-shared-libraries-libjli-so-cannot-open-shared-object-file/194449)

<div class="topic-metadata">

**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\
**Replies:** 0\
**Last updated:** [August 8, 2019, 2:32pm UTC](https://discuss.elastic.co/t/error-while-loading-shared-libraries-libjli-so-cannot-open-shared-object-file/194449 "2019-08-08T14:32:58Z")

</div>

Hi, I am building elasticsearch buildah image. I am installing elasticsearch rpm (elasticsearch-oss-7.0.1-x86\_64.rpm) in my buildah script. command: rpm --root $mnt\_container -Uvh https://elasticsearch/elasticsearch-os…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1195)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1197)
