# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1203 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1204 --- ## [Number of shards on a ElasticSearch node](https://discuss.elastic.co/t/number-of-shards-on-a-elasticsearch-node/193648)
**Author:** [@Jitendra\_Kumhar](https://discuss.elastic.co/u/Jitendra_Kumhar)\ **Replies:** 5\ **Last updated:** [August 4, 2019, 7:39pm UTC](https://discuss.elastic.co/t/number-of-shards-on-a-elasticsearch-node/193648 "2019-08-04T19:39:06Z")
I have 4 data nodes.And for a given index I had set number of shards=4 What does these numbers in blue boxes means.Why it sums to more than 4? --- ## [How elasticsearch create rest api? Please explain?](https://discuss.elastic.co/t/how-elasticsearch-create-rest-api-please-explain/193676)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 2\ **Last updated:** [August 4, 2019, 1:52pm UTC](https://discuss.elastic.co/t/how-elasticsearch-create-rest-api-please-explain/193676 "2019-08-04T13:52:39Z")
i am new to use elasticsearch rest api. --- ## [How to get elastic logs in a binded docker volume?](https://discuss.elastic.co/t/how-to-get-elastic-logs-in-a-binded-docker-volume/193686)
**Author:** [@key](https://discuss.elastic.co/u/key)\ **Replies:** 0\ **Last updated:** [August 4, 2019, 2:45pm UTC](https://discuss.elastic.co/t/how-to-get-elastic-logs-in-a-binded-docker-volume/193686 "2019-08-04T14:45:55Z")
I want to access the logs of elasticsearch while it's running in a docker container. The goal is to keep track of possible errors while indexing documents. I'm using the following docker-compose and I run it with sudo d… --- ## [7.2 to 7.3 problems "does not have a Release file."](https://discuss.elastic.co/t/7-2-to-7-3-problems-does-not-have-a-release-file/193685)
**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\ **Replies:** 0\ **Last updated:** [August 4, 2019, 2:43pm UTC](https://discuss.elastic.co/t/7-2-to-7-3-problems-does-not-have-a-release-file/193685 "2019-08-04T14:43:13Z")
Ubuntu 16.04.6 LTS Trying to update elasticsearch from 7.2 to 7.3 ... W: The repository 'https://artifacts.elastic.co/packages/7.x/apt stable Release' does not have a Release file. N: Data from such a repository can't … --- ## [Elastic UTC time](https://discuss.elastic.co/t/elastic-utc-time/191877)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 5\ **Last updated:** [August 4, 2019, 1:46pm UTC](https://discuss.elastic.co/t/elastic-utc-time/191877 "2019-08-04T13:46:23Z")
I have a small issue with date time stamps. We currently pass date of birth to Elastic as YYYY-MM-DDT00:00:00 for example 2019-08-08T00:00:00 However, when in Kibana this is interpreted as UTC (looks like) because the … --- ## [\-XX:OnOutOfMemoryError not working if Elasticsearch starts with -d paramater](https://discuss.elastic.co/t/xx-onoutofmemoryerror-not-working-if-elasticsearch-starts-with-d-paramater/193675)
**Author:** [@Prashant\_Rana](https://discuss.elastic.co/u/Prashant_Rana)\ **Replies:** 0\ **Last updated:** [August 4, 2019, 1:09pm UTC](https://discuss.elastic.co/t/xx-onoutofmemoryerror-not-working-if-elasticsearch-starts-with-d-paramater/193675 "2019-08-04T13:09:03Z")
Hi, I am trying to execute a file when OutOfMemoryError occurs with -XX:OnOutOfMemoryError= option in jvm.options file. If I am starting elasticsearch without "-d" parameter from command line(elasticsearch) then it is … --- ## [Data too large, data for \[\_id\] would be \[12177806640/11.3gb\]](https://discuss.elastic.co/t/data-too-large-data-for-id-would-be-12177806640-11-3gb/193667)
**Author:** [@X\_Calibur](https://discuss.elastic.co/u/X_Calibur)\ **Replies:** 0\ **Last updated:** [August 4, 2019, 9:16am UTC](https://discuss.elastic.co/t/data-too-large-data-for-id-would-be-12177806640-11-3gb/193667 "2019-08-04T09:16:26Z")
Hi, Just had a cluster failure with the above error message. I understand I need to change or duplicate \_id field and disable fielddata on it. Couple of questions: 1 - How can I tell what search query\\dashboard etc h… --- ## [Hive integration with Elasticsearch 7.2](https://discuss.elastic.co/t/hive-integration-with-elasticsearch-7-2/192241)
**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\ **Replies:** 2\ **Last updated:** [August 2, 2019, 6:56am UTC](https://discuss.elastic.co/t/hive-integration-with-elasticsearch-7-2/192241 "2019-08-02T06:56:28Z")
Dear All, After several rounds of attempts I was able to get half way through with Integrating Hive & I have been trying to get Hive (Hive 1.2.1000.2.6.0.3-8) integrated with Elasticsearch 7.2 but not yet successful. I… --- ## [Will disabling shard allocation on one node affect cluster health?](https://discuss.elastic.co/t/will-disabling-shard-allocation-on-one-node-affect-cluster-health/192296)
**Author:** [@haotian9850](https://discuss.elastic.co/u/haotian9850)\ **Replies:** 2\ **Last updated:** [August 4, 2019, 7:58am UTC](https://discuss.elastic.co/t/will-disabling-shard-allocation-on-one-node-affect-cluster-health/192296 "2019-08-04T07:58:51Z")
Hey there! I am working on a project that automates elasticsearch cluster upgrade (7.1.1 =\> 7.2.0). From reading the documentations on cluster upgrading, it seems that a reasonable approach to upgrade the entire cluster … --- ## [How to get count of returned data in match query?](https://discuss.elastic.co/t/how-to-get-count-of-returned-data-in-match-query/193618)
**Author:** [@Bidzina\_Goginashvili](https://discuss.elastic.co/u/Bidzina_Goginashvili)\ **Replies:** 3\ **Last updated:** [August 4, 2019, 7:29am UTC](https://discuss.elastic.co/t/how-to-get-count-of-returned-data-in-match-query/193618 "2019-08-04T07:29:53Z")
GET index/\_search { "query": {"terms": { "id": \[ "114383" \] }} get the count of this matched data } and also get the count of this GET products/\_search { "query": { "match" : { "inStorage": "true" … --- ## [Get unique values from a field of all docs matching a top\_hits aggregation](https://discuss.elastic.co/t/get-unique-values-from-a-field-of-all-docs-matching-a-top-hits-aggregation/193638)
**Author:** [@rf91](https://discuss.elastic.co/u/rf91)\ **Replies:** 0\ **Last updated:** [August 3, 2019, 3:23pm UTC](https://discuss.elastic.co/t/get-unique-values-from-a-field-of-all-docs-matching-a-top-hits-aggregation/193638 "2019-08-03T15:23:44Z")
Hi, I'm new to ElasticSearch and am stuck with a query problem. I have docs of the following form (simplified): { ... "mailProvider": "gmail.com", "mxHost1": { "name": "aspmx.l.google.com", … --- ## [I have created two instance of elasticsearch in two different machine, both instance have same cluster name but still no.of nodes is one, but i want two node](https://discuss.elastic.co/t/i-have-created-two-instance-of-elasticsearch-in-two-different-machine-both-instance-have-same-cluster-name-but-still-no-of-nodes-is-one-but-i-want-two-node/192231)
**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\ **Replies:** 2\ **Last updated:** [August 3, 2019, 11:23am UTC](https://discuss.elastic.co/t/i-have-created-two-instance-of-elasticsearch-in-two-different-machine-both-instance-have-same-cluster-name-but-still-no-of-nodes-is-one-but-i-want-two-node/192231 "2019-08-03T11:23:51Z")
this is the output i am getting after using curl -X GET "localhost:9200/\_nodes" {"\_nodes":{"total":1,"successful":1,"failed":0},"cluster\_name":"ElasticsearchStagging","nodes":{"eLSFczi5TFOotlGdB9kpsw":{"name":"node-1",… --- ## [Painless sorting removing documents from results](https://discuss.elastic.co/t/painless-sorting-removing-documents-from-results/193215)
**Author:** [@santiaguzz](https://discuss.elastic.co/u/santiaguzz)\ **Replies:** 2\ **Last updated:** [August 3, 2019, 11:09am UTC](https://discuss.elastic.co/t/painless-sorting-removing-documents-from-results/193215 "2019-08-03T11:09:03Z")
Hi there; I'm trying to query three different indexes at a time, one of them have two mappings, as follows: price: { type: 'float' }, offer\_price: { type: 'float' } The next… --- ## [Shard size vs. query performance where all shard have the same terms](https://discuss.elastic.co/t/shard-size-vs-query-performance-where-all-shard-have-the-same-terms/193577)
**Author:** [@IanRC72](https://discuss.elastic.co/u/IanRC72)\ **Replies:** 5\ **Last updated:** [August 3, 2019, 10:35am UTC](https://discuss.elastic.co/t/shard-size-vs-query-performance-where-all-shard-have-the-same-terms/193577 "2019-08-03T10:35:27Z")
As I understand it, ES's query speed is a function of the term dictionary size, not the document count. In my scenario, I have a large set of data that can be distributed across any arbitrary number of shards. The terms… --- ## [How to select column name in my table?](https://discuss.elastic.co/t/how-to-select-column-name-in-my-table/193625)
**Author:** [@Huong\_Huong](https://discuss.elastic.co/u/Huong_Huong)\ **Replies:** 2\ **Last updated:** [August 3, 2019, 7:30am UTC](https://discuss.elastic.co/t/how-to-select-column-name-in-my-table/193625 "2019-08-03T07:30:20Z")
How to select column name in my table? --- ## [How to make elastic querying faster](https://discuss.elastic.co/t/how-to-make-elastic-querying-faster/193464)
**Author:** [@divyang](https://discuss.elastic.co/u/divyang)\ **Replies:** 5\ **Last updated:** [August 3, 2019, 5:30am UTC](https://discuss.elastic.co/t/how-to-make-elastic-querying-faster/193464 "2019-08-03T05:30:54Z")
Hi , I need to query a lot of data for a given elastic index . I cannot use fielddata true on the required index fields as it will increase the size of cached memory. Currently , it is taking approx 10 min to run the… --- ## [Elastalert on 7.2](https://discuss.elastic.co/t/elastalert-on-7-2/193563)
**Author:** [@geed](https://discuss.elastic.co/u/geed)\ **Replies:** 1\ **Last updated:** [August 2, 2019, 11:45pm UTC](https://discuss.elastic.co/t/elastalert-on-7-2/193563 "2019-08-02T23:45:06Z")
Hello, we have installed 'stable/elastalert 0.1.39', but that version apparently wont work with our 7.2 elasticsearch, as it has outdated python libs. The stable version only seems to support ES 6.x. How do we get a s… --- ## [Search response accuracy](https://discuss.elastic.co/t/search-response-accuracy/192309)
**Author:** [@David\_Castillo](https://discuss.elastic.co/u/David_Castillo)\ **Replies:** 1\ **Last updated:** [August 2, 2019, 10:02pm UTC](https://discuss.elastic.co/t/search-response-accuracy/192309 "2019-08-02T22:02:14Z")
Warning this is probably not a good use case for Elasticsearch but... I have an index which will containing millions of documents. We have built a real-time API which allows customers search and return less than 1000 … --- ## [DateRange Aggregation w/ a Script that produces the Dates instead of a static date field](https://discuss.elastic.co/t/daterange-aggregation-w-a-script-that-produces-the-dates-instead-of-a-static-date-field/193145)
**Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\ **Replies:** 2\ **Last updated:** [August 2, 2019, 9:52pm UTC](https://discuss.elastic.co/t/daterange-aggregation-w-a-script-that-produces-the-dates-instead-of-a-static-date-field/193145 "2019-08-02T21:52:58Z")
ES: 6.1.1 NEST: 6.1.0 Is it possible to create a DateRange Aggregation where, instead of specifying a field, I can specify a script which will produce a Date from a number of source fields? In my case, there's a "good… --- ## [Is it possible to Snapshot ElasticSearch cluster on the Local Pc Machine](https://discuss.elastic.co/t/is-it-possible-to-snapshot-elasticsearch-cluster-on-the-local-pc-machine/192232)
**Author:** [@Thilak](https://discuss.elastic.co/u/Thilak)\ **Replies:** 1\ **Last updated:** [August 2, 2019, 9:27pm UTC](https://discuss.elastic.co/t/is-it-possible-to-snapshot-elasticsearch-cluster-on-the-local-pc-machine/192232 "2019-08-02T21:27:09Z")
Hi i have been working on migrating elastic search cluster from one service to another.Experimenting snapshot elastic-search cluster for migration. Is it possible to snapshot elastic-search cluster on local pc machine. i… --- ## [Should we remove ilm policy first before switch to another?](https://discuss.elastic.co/t/should-we-remove-ilm-policy-first-before-switch-to-another/192216)
**Author:** [@LoadingZhang](https://discuss.elastic.co/u/LoadingZhang)\ **Replies:** 1\ **Last updated:** [August 2, 2019, 8:53pm UTC](https://discuss.elastic.co/t/should-we-remove-ilm-policy-first-before-switch-to-another/192216 "2019-08-02T20:53:56Z")
Would it get problem if switch another ilm policy directly, not remove first? --- ## [Append IP Addresses to "related.ip" ECS Field](https://discuss.elastic.co/t/append-ip-addresses-to-related-ip-ecs-field/192785)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 2\ **Last updated:** [August 2, 2019, 8:51pm UTC](https://discuss.elastic.co/t/append-ip-addresses-to-related-ip-ecs-field/192785 "2019-08-02T20:51:13Z")
I would like to take advantage of the "related.ip" field for pivoting around different sources. I have everything running through Logstash, and I am attempting to append all IP fields to related.ip. Unfortunately, I am o… --- ## [How execute AND query in elasticsearch and aggregate](https://discuss.elastic.co/t/how-execute-and-query-in-elasticsearch-and-aggregate/192208)
**Author:** [@elasticpatrick](https://discuss.elastic.co/u/elasticpatrick)\ **Replies:** 1\ **Last updated:** [August 2, 2019, 8:33pm UTC](https://discuss.elastic.co/t/how-execute-and-query-in-elasticsearch-and-aggregate/192208 "2019-08-02T20:33:43Z")
Hello, I have product\_supplier Index which contains products and its suppliers. I have given suppliers names and I want to get the products which are supplied by the given suppliers. For eg. I have given supplier "suppl… --- ## [Filtering/aggregating by a timezone field in each document instead of the same timezone for all documents](https://discuss.elastic.co/t/filtering-aggregating-by-a-timezone-field-in-each-document-instead-of-the-same-timezone-for-all-documents/193003)
**Author:** [@oeed](https://discuss.elastic.co/u/oeed)\ **Replies:** 1\ **Last updated:** [August 2, 2019, 8:21pm UTC](https://discuss.elastic.co/t/filtering-aggregating-by-a-timezone-field-in-each-document-instead-of-the-same-timezone-for-all-documents/193003 "2019-08-02T20:21:36Z")
I'm fairly new to Elasticsearch so I'm not 100% sure it's appropriate for our use case, so let me know if it isn't. We are performing some basic analytics for exposure time from specific locations. I want to be able to … --- ## [Cross-cluster search not returning all hits from IDs query, sometimes](https://discuss.elastic.co/t/cross-cluster-search-not-returning-all-hits-from-ids-query-sometimes/192323)
**Author:** [@loren](https://discuss.elastic.co/u/loren)\ **Replies:** 2\ **Last updated:** [August 2, 2019, 6:02pm UTC](https://discuss.elastic.co/t/cross-cluster-search-not-returning-all-hits-from-ids-query-sometimes/192323 "2019-08-02T18:02:13Z")
Why do my cross-cluster IDs queries sometimes return all but 1 or 2 of the results? I have a 7.2.0 cluster executing an IDs query across 3 remote clusters usually with 500-1000 IDs in each query. I set the size paramete… --- ## [Elastic as service](https://discuss.elastic.co/t/elastic-as-service/193395)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 4\ **Last updated:** [August 2, 2019, 4:11pm UTC](https://discuss.elastic.co/t/elastic-as-service/193395 "2019-08-02T16:11:37Z")
I have downloaded the ES tar file to install. How do i configure as init service to start and stop ES as a service. --- ## [Evidence/Benchmarking behind Shards/Datanode Recommendation](https://discuss.elastic.co/t/evidence-benchmarking-behind-shards-datanode-recommendation/193585)
**Author:** [@YKNFS](https://discuss.elastic.co/u/YKNFS)\ **Replies:** 1\ **Last updated:** [August 2, 2019, 3:53pm UTC](https://discuss.elastic.co/t/evidence-benchmarking-behind-shards-datanode-recommendation/193585 "2019-08-02T15:53:59Z")
I'm curious about the recommendation put forth in How many shards should I have in my Elasticsearch cluster? | Elastic Blog, specifically that A good rule-of-thumb is to ensure you keep the number of shards per node be… --- ## [Error while creating cluster](https://discuss.elastic.co/t/error-while-creating-cluster/193504)
**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\ **Replies:** 1\ **Last updated:** [August 2, 2019, 3:40pm UTC](https://discuss.elastic.co/t/error-while-creating-cluster/193504 "2019-08-02T15:40:26Z")
i need to create a cluster of 3 node on AWS but getting below error. "type" : "master\_not\_discovered\_exception". i am using elasticsearch as a service Please help in resolving the same. i am creating all 3 as master &… --- ## [Elastic Search snapshot backup with multi node and multiple indices](https://discuss.elastic.co/t/elastic-search-snapshot-backup-with-multi-node-and-multiple-indices/193556)
**Author:** [@Sony\_Anuja](https://discuss.elastic.co/u/Sony_Anuja)\ **Replies:** 3\ **Last updated:** [August 2, 2019, 3:19pm UTC](https://discuss.elastic.co/t/elastic-search-snapshot-backup-with-multi-node-and-multiple-indices/193556 "2019-08-02T15:19:19Z")
I have a set up with 6 elasticsearch nodes in production , my question is... if I take a snapshot, does that snapshot contain data from all nodes? , can anyone suggest me how to take backup on elasticsearch cluster and w… --- ## [Error :Current license is non-compliant for JDBC](https://discuss.elastic.co/t/error-current-license-is-non-compliant-for-jdbc/193290)
**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\ **Replies:** 5\ **Last updated:** [August 2, 2019, 3:00pm UTC](https://discuss.elastic.co/t/error-current-license-is-non-compliant-for-jdbc/193290 "2019-08-02T15:00:07Z")
why this error is coming please reply . is elastic search is paid service? if this is open source then why showing this error. Note:-i am trying to run through jdbc conn. [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1202) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1204)