# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1222 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1223 --- ## [Elasticsearch not handled more indexes, So goes to Read Only mode](https://discuss.elastic.co/t/elasticsearch-not-handled-more-indexes-so-goes-to-read-only-mode/190964)
**Author:** [@Ritesh\_Pradhan](https://discuss.elastic.co/u/Ritesh_Pradhan)\ **Replies:** 9\ **Last updated:** [July 18, 2019, 1:09pm UTC](https://discuss.elastic.co/t/elasticsearch-not-handled-more-indexes-so-goes-to-read-only-mode/190964 "2019-07-18T13:09:17Z")
Hi Team, I am configure kibana and elasticsearch to our server. If elastic search generate more log or I am not deleted last 10 days data or kibana memory full or elastic search not handled data, So Elastic search confi… --- ## [Whether to create one or multiple index](https://discuss.elastic.co/t/whether-to-create-one-or-multiple-index/190704)
**Author:** [@suhasgupta](https://discuss.elastic.co/u/suhasgupta)\ **Replies:** 0\ **Last updated:** [July 16, 2019, 9:55am UTC](https://discuss.elastic.co/t/whether-to-create-one-or-multiple-index/190704 "2019-07-16T09:55:15Z")
Hello Everyone, We have an index created with Fields viz. Product, leads. Now we want to add another column to it which is opportunity. But there will be cases when we have leads but not opportunity AND there will be ca… --- ## [How get distinct value in returned buckets](https://discuss.elastic.co/t/how-get-distinct-value-in-returned-buckets/191200)
**Author:** [@Ahmet\_Kartal](https://discuss.elastic.co/u/Ahmet_Kartal)\ **Replies:** 0\ **Last updated:** [July 18, 2019, 12:56pm UTC](https://discuss.elastic.co/t/how-get-distinct-value-in-returned-buckets/191200 "2019-07-18T12:56:50Z")
"Group3": { "buckets": \[ { "doc\_count": 1, "key": "sleep" } \], "doc\_count\_error\_… --- ## [Search Name match with specific Character and output comes in hierarchical Order](https://discuss.elastic.co/t/search-name-match-with-specific-character-and-output-comes-in-hierarchical-order/190902)
**Author:** [@nitesh313](https://discuss.elastic.co/u/nitesh313)\ **Replies:** 14\ **Last updated:** [July 18, 2019, 12:56pm UTC](https://discuss.elastic.co/t/search-name-match-with-specific-character-and-output-comes-in-hierarchical-order/190902 "2019-07-18T12:56:28Z")
Hello All, I am new in elasticsearch and straggle to get expected output and below is my query. Here i basically looking to get all Employee in "organization" index whose name start with "jo" and also the employee wh… --- ## [Curl: (56) Recv failure: Connection reset by peer with docker](https://discuss.elastic.co/t/curl-56-recv-failure-connection-reset-by-peer-with-docker/191199)
**Author:** [@ChenSijia](https://discuss.elastic.co/u/ChenSijia)\ **Replies:** 0\ **Last updated:** [July 18, 2019, 12:56pm UTC](https://discuss.elastic.co/t/curl-56-recv-failure-connection-reset-by-peer-with-docker/191199 "2019-07-18T12:56:02Z")
Hi,I user docker command docker run -itd -p 9200:9200 -p 9300:9300 --name elasticsearch -v /elasticsearch/data:/usr/share/elasticsearch/data --restart=always 45ff2ef9a219 the container is running but I use curl -GET loc… --- ## [Clustering question. HA cluster with 3 master and only 2 data nodes?](https://discuss.elastic.co/t/clustering-question-ha-cluster-with-3-master-and-only-2-data-nodes/191197)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 0\ **Last updated:** [July 18, 2019, 12:46pm UTC](https://discuss.elastic.co/t/clustering-question-ha-cluster-with-3-master-and-only-2-data-nodes/191197 "2019-07-18T12:46:22Z")
Hi, I want to deploy elasticsearch on bare metal kubernetes. I will use local storage as there is no fast and (by k8s) manageable storage provider available. My k8s cluster consists of 5 servers (1 master, 4 workers), … --- ## [Ionic/Angular client](https://discuss.elastic.co/t/ionic-angular-client/191097)
**Author:** [@crossmeister](https://discuss.elastic.co/u/crossmeister)\ **Replies:** 1\ **Last updated:** [July 18, 2019, 12:41pm UTC](https://discuss.elastic.co/t/ionic-angular-client/191097 "2019-07-18T12:41:38Z")
Hi, First post, so please be gentle :grinning: I'm currently evaluating Elasticsearch Cloud and am prototyping access from Ionic/Angular clients. My understanding is that the new JavaScript client is solely for node.j… --- ## [Find missing documents in index by id field](https://discuss.elastic.co/t/find-missing-documents-in-index-by-id-field/191188)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 0\ **Last updated:** [July 18, 2019, 11:44am UTC](https://discuss.elastic.co/t/find-missing-documents-in-index-by-id-field/191188 "2019-07-18T11:44:24Z")
I've imported over 250 millions documents in Elasticsearch from Oracle via Logstash and 45 docs hasn't been imported. Count on ES and count on ORA are not the same. I want to check which documents are missing. My doc\_id … --- ## [How to get single data from aggregation filter](https://discuss.elastic.co/t/how-to-get-single-data-from-aggregation-filter/191159)
**Author:** [@Ahmet\_Kartal](https://discuss.elastic.co/u/Ahmet_Kartal)\ **Replies:** 1\ **Last updated:** [July 18, 2019, 11:10am UTC](https://discuss.elastic.co/t/how-to-get-single-data-from-aggregation-filter/191159 "2019-07-18T11:10:35Z")
I need an idea that will help me to get only first data for related key. This is my output and I need elasticsearch to return each keyword only once. "Group3": { "buckets": \[ { … --- ## [Large garbage collection](https://discuss.elastic.co/t/large-garbage-collection/191160)
**Author:** [@Barak](https://discuss.elastic.co/u/Barak)\ **Replies:** 2\ **Last updated:** [July 18, 2019, 10:55am UTC](https://discuss.elastic.co/t/large-garbage-collection/191160 "2019-07-18T10:55:58Z")
Hi, I am running constant indexing of ~500/s and ~3000/s reads on my cluster, and during that I see big drops in heap usage on the data nodes: Cluster: 5 master nodes 7 data nodes 2 coordinator nodes Is that an e… --- ## [Elasticsearch Query performance while continuous ingestion](https://discuss.elastic.co/t/elasticsearch-query-performance-while-continuous-ingestion/190900)
**Author:** [@Jayabal\_K](https://discuss.elastic.co/u/Jayabal_K)\ **Replies:** 4\ **Last updated:** [July 18, 2019, 10:11am UTC](https://discuss.elastic.co/t/elasticsearch-query-performance-while-continuous-ingestion/190900 "2019-07-18T10:11:33Z")
At starting Elastic-search query performance is good, but it goes down while continuously ingesting data. when we query elastic-search and ingest data in parallel , query latency is high and performance is low. Please a… --- ## [Setting passwords for all built-in users](https://discuss.elastic.co/t/setting-passwords-for-all-built-in-users/191142)
**Author:** [@Hitesh\_Malhotra](https://discuss.elastic.co/u/Hitesh_Malhotra)\ **Replies:** 4\ **Last updated:** [July 18, 2019, 10:10am UTC](https://discuss.elastic.co/t/setting-passwords-for-all-built-in-users/191142 "2019-07-18T10:10:10Z")
Hi, When I am trying to setup password for kibana user using below command ./bin/elasticsearch-setup-passwords interactive I receive below error Unexpected response code \[403\] from calling GET http://127.0.0.1:9200/\_x… --- ## [Can't access elasticsearch on http://server-ip:9200/ but shows running on localhost when i do netstat](https://discuss.elastic.co/t/cant-access-elasticsearch-on-http-server-ip-9200-but-shows-running-on-localhost-when-i-do-netstat/189923)
**Author:** [@Garima\_Sharma](https://discuss.elastic.co/u/Garima_Sharma)\ **Replies:** 5\ **Last updated:** [July 18, 2019, 10:09am UTC](https://discuss.elastic.co/t/cant-access-elasticsearch-on-http-server-ip-9200-but-shows-running-on-localhost-when-i-do-netstat/189923 "2019-07-18T10:09:51Z")
Hello, elasticsearch-6.3.2 kibana-6.3.2 server- RHEL-7 I am not able to access http://server-ip:9200/ but it shows running when i do netstat in the terminal On curl localhost:9200 - it works curl 127.0.0.1:9200 - … --- ## [How convert this SQL query to Elasticsearch query?](https://discuss.elastic.co/t/how-convert-this-sql-query-to-elasticsearch-query/191133)
**Author:** [@psyapathy](https://discuss.elastic.co/u/psyapathy)\ **Replies:** 1\ **Last updated:** [July 18, 2019, 10:08am UTC](https://discuss.elastic.co/t/how-convert-this-sql-query-to-elasticsearch-query/191133 "2019-07-18T10:08:09Z")
Hello! I have this SQL query: SELECT time,targetuser, count(targetuser),ipaddress FROM \`test\_index\` WHERE \`event\_id\`=4444 AND \`status\`=\`0x10\` GROUP BY ipaddress,targetuser ORDER BY TIME DESC; How convert this SQL que… --- ## [What does this warning mean? Selector return prematurely](https://discuss.elastic.co/t/what-does-this-warning-mean-selector-return-prematurely/191171)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 0\ **Last updated:** [July 18, 2019, 9:33am UTC](https://discuss.elastic.co/t/what-does-this-warning-mean-selector-return-prematurely/191171 "2019-07-18T09:33:23Z")
I have nodejs server that is trying to push alot of docs into elasticsearch (single node). I get these messages in my elastic log: \[2019-07-18T12:36:50,705\]\[WARN \]\[i.n.c.n.NioEventLoop \] Selector.select() returned … --- ## [ES started but unable to open in browser (Linux)](https://discuss.elastic.co/t/es-started-but-unable-to-open-in-browser-linux/190746)
**Author:** [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\ **Replies:** 8\ **Last updated:** [July 18, 2019, 7:13am UTC](https://discuss.elastic.co/t/es-started-but-unable-to-open-in-browser-linux/190746 "2019-07-18T07:13:02Z")
Hi, My yml configuration looks like below : node.name: Cisco\_Dev\_Node cluster.name: Cisco\_Dev network.host: 192.168.0.10 discovery.seed\_hosts: \["192.168.0.10"\] http.port: 9201 cluster.initial\_master\_nodes: \["192.1… --- ## [Is the hits.total number in a search response accurate (ES 5,6)?](https://discuss.elastic.co/t/is-the-hits-total-number-in-a-search-response-accurate-es-5-6/190779)
**Author:** [@wboult](https://discuss.elastic.co/u/wboult)\ **Replies:** 4\ **Last updated:** [July 18, 2019, 8:56am UTC](https://discuss.elastic.co/t/is-the-hits-total-number-in-a-search-response-accurate-es-5-6/190779 "2019-07-18T08:56:16Z")
Hi All, In elasticsearch v5/6 - there is a field on a search response hits.total. Is this field intended to be completely accurate (i.e. with a healthy cluster + no changing data should we always be able to retrieve exa… --- ## [Handle Large Message Returned from Query](https://discuss.elastic.co/t/handle-large-message-returned-from-query/191162)
**Author:** [@lonzodc](https://discuss.elastic.co/u/lonzodc)\ **Replies:** 0\ **Last updated:** [July 18, 2019, 8:44am UTC](https://discuss.elastic.co/t/handle-large-message-returned-from-query/191162 "2019-07-18T08:44:34Z")
Hi, Is there a recommended way to query many large messages? Right now, we can only divide our expected query result per number of records but not per size (in bytes). For example, we "chop" our queries using "size":50… --- ## [Restore Snapshot from S3 Bucket](https://discuss.elastic.co/t/restore-snapshot-from-s3-bucket/191151)
**Author:** [@Selcuk\_KUBUR](https://discuss.elastic.co/u/Selcuk_KUBUR)\ **Replies:** 0\ **Last updated:** [July 18, 2019, 8:03am UTC](https://discuss.elastic.co/t/restore-snapshot-from-s3-bucket/191151 "2019-07-18T08:03:46Z")
Hi All, I have a problem when restoring elasticsearch snapshot from S3 Bucket. I can take snapshots to S3 I tried with snapshot\_1 and with other name , so I can put snapshots to bucket. When I try to restore my snapsh… --- ## [\[inner\_hits\] already contains an entry for key \[xxx\]](https://discuss.elastic.co/t/inner-hits-already-contains-an-entry-for-key-xxx/190853)
**Author:** [@Yuan\_Hong](https://discuss.elastic.co/u/Yuan_Hong)\ **Replies:** 1\ **Last updated:** [July 18, 2019, 7:47am UTC](https://discuss.elastic.co/t/inner-hits-already-contains-an-entry-for-key-xxx/190853 "2019-07-18T07:47:16Z")
Hi, I have an index worktop\_process with nested field: { "orderId": { "type": "integer" }, "shipments": { "type": "nested", "dynamic": "strict", "properties": { "estimatedReceivingDate": { … --- ## [Boost score if field exists with function score](https://discuss.elastic.co/t/boost-score-if-field-exists-with-function-score/191136)
**Author:** [@hangu\_choi](https://discuss.elastic.co/u/hangu_choi)\ **Replies:** 0\ **Last updated:** [July 18, 2019, 7:34am UTC](https://discuss.elastic.co/t/boost-score-if-field-exists-with-function-score/191136 "2019-07-18T07:34:03Z")
I want to boost score if some\_field\_4 is exists but it return error. How can I do this in elasticsearch 7 ? reason":"no \[query\] registered for \[function\_score\]" { "query": { "function\_score": { "query": {… --- ## [Es highlevel client do bulk operations java.lang. IllegalStateException happened](https://discuss.elastic.co/t/es-highlevel-client-do-bulk-operations-java-lang-illegalstateexception-happened/190849)
**Author:** [@chen\_steven](https://discuss.elastic.co/u/chen_steven)\ **Replies:** 6\ **Last updated:** [July 18, 2019, 6:44am UTC](https://discuss.elastic.co/t/es-highlevel-client-do-bulk-operations-java-lang-illegalstateexception-happened/190849 "2019-07-18T06:44:11Z")
ref url in github: env: CentOS7, Java 8, SpringBoot, Maven, ES highlevel jar Elasticsearch 6.7 which was running in docker on OSS service background: this is a data handler node which need to do some scheduled da… --- ## [Recover cluster after adding a data node](https://discuss.elastic.co/t/recover-cluster-after-adding-a-data-node/190956)
**Author:** [@viratag26](https://discuss.elastic.co/u/viratag26)\ **Replies:** 7\ **Last updated:** [July 18, 2019, 6:44am UTC](https://discuss.elastic.co/t/recover-cluster-after-adding-a-data-node/190956 "2019-07-18T06:44:00Z")
I have added a data node to my ES cluster which already had 4 nodes. After addition, the number of shards jumped from 4(2 primary, 2 replica) to 8(4 primary and 4 replica). The newly made 4 shards are unassigned and my c… --- ## [How to store date format as Simple date format instead of Timstamp while indexing](https://discuss.elastic.co/t/how-to-store-date-format-as-simple-date-format-instead-of-timstamp-while-indexing/190466)
**Author:** [@Lokesh\_Gorrela](https://discuss.elastic.co/u/Lokesh_Gorrela)\ **Replies:** 6\ **Last updated:** [July 18, 2019, 6:42am UTC](https://discuss.elastic.co/t/how-to-store-date-format-as-simple-date-format-instead-of-timstamp-while-indexing/190466 "2019-07-18T06:42:28Z")
In my table in database , date column having 2018-07-09 00:00:00 format date, but while indexing that date, It is stored as timestamp in elasticsearch. How I can store 04-20-2019 (Simple date format) instead of … --- ## [How to implement ETags?](https://discuss.elastic.co/t/how-to-implement-etags/191102)
**Author:** [@rpm1984](https://discuss.elastic.co/u/rpm1984)\ **Replies:** 2\ **Last updated:** [July 18, 2019, 12:56am UTC](https://discuss.elastic.co/t/how-to-implement-etags/191102 "2019-07-18T00:56:19Z")
Hi there! I have a setup like following: Clients (browser, mobile apps, etc) =\> API proxy =\> Elasticsearch I'd like to implement ETags, so that i can save bandwidth to the clients. In the past (e.g when hiting a RDMS… --- ## [Can you join indexes with different fields using an index pattern?](https://discuss.elastic.co/t/can-you-join-indexes-with-different-fields-using-an-index-pattern/190599)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 3\ **Last updated:** [July 17, 2019, 11:09pm UTC](https://discuss.elastic.co/t/can-you-join-indexes-with-different-fields-using-an-index-pattern/190599 "2019-07-17T23:09:30Z")
Problem: I have two indexes, stage-ath and stage-athena. I defined my index pattern as stage-ath\* to cover both index fields. stage-ath has customer\_name + customer\_id stage-athena has only customer\_id and other field… --- ## [Not able to connect using client.transport.sniff true on docker image](https://discuss.elastic.co/t/not-able-to-connect-using-client-transport-sniff-true-on-docker-image/191101)
**Author:** [@Ashutosh\_Tripathi](https://discuss.elastic.co/u/Ashutosh_Tripathi)\ **Replies:** 0\ **Last updated:** [July 17, 2019, 10:30pm UTC](https://discuss.elastic.co/t/not-able-to-connect-using-client-transport-sniff-true-on-docker-image/191101 "2019-07-17T22:30:46Z")
Hi, I have setup a docker container with following configuration version: '3' services: odfe-node1: image: amazon/opendistro-for-elasticsearch:0.9.0 container\_name: odfe-node1 environment: - clu… --- ## [Can you change the "type" of a token emitted by an analyzer?](https://discuss.elastic.co/t/can-you-change-the-type-of-a-token-emitted-by-an-analyzer/191100)
**Author:** [@stefanvuk](https://discuss.elastic.co/u/stefanvuk)\ **Replies:** 0\ **Last updated:** [July 17, 2019, 10:26pm UTC](https://discuss.elastic.co/t/can-you-change-the-type-of-a-token-emitted-by-an-analyzer/191100 "2019-07-17T22:26:53Z")
Question: Is there a way to change the type of token emitted by an analyzer? Context: I'm using the annotated text plugin to mark up some fields with annotations. I'd like to query these fields with "match" queries usi… --- ## [Bulk python hangs forever](https://discuss.elastic.co/t/bulk-python-hangs-forever/191094)
**Author:** [@mosco](https://discuss.elastic.co/u/mosco)\ **Replies:** 0\ **Last updated:** [July 17, 2019, 9:34pm UTC](https://discuss.elastic.co/t/bulk-python-hangs-forever/191094 "2019-07-17T21:34:16Z")
Hi all, I'm facing a problem with the bulk function of ElasticSearch python package. When i run the bulk function it hangs forever (maybe in a deadlock state). Here the details of the environment elasticsearch-6.4.3-… --- ## [Pipeline fails to match date field from JSON](https://discuss.elastic.co/t/pipeline-fails-to-match-date-field-from-json/191091)
**Author:** [@Dimitris\_S](https://discuss.elastic.co/u/Dimitris_S)\ **Replies:** 0\ **Last updated:** [July 17, 2019, 9:18pm UTC](https://discuss.elastic.co/t/pipeline-fails-to-match-date-field-from-json/191091 "2019-07-17T21:18:25Z")
Greetings. Some baseline info first. With a python script I'm sending simple messages formatted as JSON via UDP. The messages are of the form: {"timestamp": "2019-07-17T23:10:17.940Z", "hw\_stats": {"CPU\_usage": 28.5, "R… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1221) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1223)