# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1225 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1226 --- ## [Create view or limit fields returned by metadata](https://discuss.elastic.co/t/create-view-or-limit-fields-returned-by-metadata/190230)
**Author:** [@paulcarey](https://discuss.elastic.co/u/paulcarey)\ **Replies:** 1\ **Last updated:** [July 16, 2019, 2:31pm UTC](https://discuss.elastic.co/t/create-view-or-limit-fields-returned-by-metadata/190230 "2019-07-16T14:31:52Z")
Hi I have an ES index which contains about 3000 fields. A number of clients are interested in using Dremio to query this index, joining the results with queries against other data sources. Unfortunately, Dremio has a ha… --- ## [Elastic search not starting please help](https://discuss.elastic.co/t/elastic-search-not-starting-please-help/190650)
**Author:** [@Prashant\_dave](https://discuss.elastic.co/u/Prashant_dave)\ **Replies:** 5\ **Last updated:** [July 16, 2019, 2:05pm UTC](https://discuss.elastic.co/t/elastic-search-not-starting-please-help/190650 "2019-07-16T14:05:59Z")
● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Tue 2019-07-16 11:10:16 IST; 9s ago Docs… --- ## [Fluentd to elastic](https://discuss.elastic.co/t/fluentd-to-elastic/190427)
**Author:** [@Soumitra\_Ghosh](https://discuss.elastic.co/u/Soumitra_Ghosh)\ **Replies:** 14\ **Last updated:** [July 16, 2019, 1:37pm UTC](https://discuss.elastic.co/t/fluentd-to-elastic/190427 "2019-07-16T13:37:17Z")
I am shipping logs using fluentd in k8s cluster i see a bunch of the following messages and logs stop flowing to ES warn\]: \[elasticsearch\] failed to write data into buffer by buffer overflow action=:block Any thoughts … --- ## [Cluster block](https://discuss.elastic.co/t/cluster-block/190231)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 13\ **Last updated:** [July 16, 2019, 12:46pm UTC](https://discuss.elastic.co/t/cluster-block/190231 "2019-07-16T12:46:01Z")
We are getting cluster block exception way before our watermark is reached. \[2019-07-12T00:31:30,354\]\[WARN \]\[o.e.x.m.e.l.LocalExporter\] \[elkcoord02.ytz0\] unexpected error while indexing monitoring document org.elasticse… --- ## [Unbounded indices and infinite retention](https://discuss.elastic.co/t/unbounded-indices-and-infinite-retention/190733)
**Author:** [@Fr13d\_0kr4](https://discuss.elastic.co/u/Fr13d_0kr4)\ **Replies:** 0\ **Last updated:** [July 16, 2019, 12:21pm UTC](https://discuss.elastic.co/t/unbounded-indices-and-infinite-retention/190733 "2019-07-16T12:21:05Z")
I am being forced to build an ES cluster which will have new indexes created every few days without ever deleting any indices or docs (infinite retention). I’m going to leverage ILM so I can reduce long-term costs of ma… --- ## [Install ES license as config](https://discuss.elastic.co/t/install-es-license-as-config/190257)
**Author:** [@Plamen\_Iliev](https://discuss.elastic.co/u/Plamen_Iliev)\ **Replies:** 4\ **Last updated:** [July 16, 2019, 12:13pm UTC](https://discuss.elastic.co/t/install-es-license-as-config/190257 "2019-07-16T12:13:59Z")
Looking at the documentation it appears license can only be installed through the license API. In my use case it would be handy to reference the license as a setting inside elasticsearch.yaml. Essentially I would like … --- ## [How to split an existing large index into many smaller ones?](https://discuss.elastic.co/t/how-to-split-an-existing-large-index-into-many-smaller-ones/190731)
**Author:** [@Havana](https://discuss.elastic.co/u/Havana)\ **Replies:** 0\ **Last updated:** [July 16, 2019, 12:09pm UTC](https://discuss.elastic.co/t/how-to-split-an-existing-large-index-into-many-smaller-ones/190731 "2019-07-16T12:09:55Z")
Hi, We have a very large index(70GB+) and would like to split it into smaller ones based on the date field. More specifically, we could have an index for each week and in each small index, documents are created within … --- ## [Query String vs Bool Performance?](https://discuss.elastic.co/t/query-string-vs-bool-performance/190617)
**Author:** [@gposcidonio](https://discuss.elastic.co/u/gposcidonio)\ **Replies:** 2\ **Last updated:** [July 16, 2019, 11:55am UTC](https://discuss.elastic.co/t/query-string-vs-bool-performance/190617 "2019-07-16T11:55:06Z")
Background So for some context before my question, I have an enum, let's call it my\_enum. It has 5 possible values, all single characters: Z, Y, X, W, and V. My documents can have 0 or more of these values in their my\_en… --- ## [Find word position in large text](https://discuss.elastic.co/t/find-word-position-in-large-text/190370)
**Author:** [@josie\_kat](https://discuss.elastic.co/u/josie_kat)\ **Replies:** 2\ **Last updated:** [July 16, 2019, 11:44am UTC](https://discuss.elastic.co/t/find-word-position-in-large-text/190370 "2019-07-16T11:44:02Z")
is there a possibility to find the exact location of word or phrase found in large text field? --- ## [Analyzer difference between simple and standard](https://discuss.elastic.co/t/analyzer-difference-between-simple-and-standard/190710)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 1\ **Last updated:** [July 16, 2019, 11:27am UTC](https://discuss.elastic.co/t/analyzer-difference-between-simple-and-standard/190710 "2019-07-16T11:27:14Z")
What is the main difference between Simple Analyzer and standard analyzer they are looking alike did not get from documents --- ## [Elasticsearch One Cluster or Multiple Clusters?](https://discuss.elastic.co/t/elasticsearch-one-cluster-or-multiple-clusters/190631)
**Author:** [@cbille0](https://discuss.elastic.co/u/cbille0)\ **Replies:** 2\ **Last updated:** [July 16, 2019, 10:47am UTC](https://discuss.elastic.co/t/elasticsearch-one-cluster-or-multiple-clusters/190631 "2019-07-16T10:47:53Z")
Hello, My colleagues and I wish to store time series data (such as logs), as well as user data in a Elasticsearch 7.2.0 cluster. We cannot decide if we should use one big cluster (to store both time series data and use… --- ## [Running custom plugin queries in X-Pack enabled Elasticsearch](https://discuss.elastic.co/t/running-custom-plugin-queries-in-x-pack-enabled-elasticsearch/188279)
**Author:** [@ccnoufal](https://discuss.elastic.co/u/ccnoufal)\ **Replies:** 1\ **Last updated:** [July 16, 2019, 9:40am UTC](https://discuss.elastic.co/t/running-custom-plugin-queries-in-x-pack-enabled-elasticsearch/188279 "2019-07-16T09:40:37Z")
I am running queries against a custom plugin called join search plugin. This was working without enabling security using x-pack. But when security is enabled using x-pack I am not able to run the custom queries. I had … --- ## [JVM High Memory Usage - Min and Max Heap doesn't work](https://discuss.elastic.co/t/jvm-high-memory-usage-min-and-max-heap-doesnt-work/190691)
**Author:** [@JimL](https://discuss.elastic.co/u/JimL)\ **Replies:** 1\ **Last updated:** [July 16, 2019, 9:18am UTC](https://discuss.elastic.co/t/jvm-high-memory-usage-min-and-max-heap-doesnt-work/190691 "2019-07-16T09:18:15Z")
ES version: 7.1.1 I'd encountered a high memory consumption by JVM (roughly 2.5 GB) from Elastic Search and currently looking for a way to better control the memory consumption. (In case it goes up to very high) Method… --- ## [How can i apply minimum-should-match to a phonetic match query?](https://discuss.elastic.co/t/how-can-i-apply-minimum-should-match-to-a-phonetic-match-query/189963)
**Author:** [@mkoehler](https://discuss.elastic.co/u/mkoehler)\ **Replies:** 1\ **Last updated:** [July 16, 2019, 9:11am UTC](https://discuss.elastic.co/t/how-can-i-apply-minimum-should-match-to-a-phonetic-match-query/189963 "2019-07-16T09:11:11Z")
we have a field in our index that is analyzed with the Beider-Morse phonetic filter and when we query this field we sometimes get some very strange matches. For example, if you search for "Heine" you will find "Chatten"… --- ## [Is there a way to use update by query in template?](https://discuss.elastic.co/t/is-there-a-way-to-use-update-by-query-in-template/190681)
**Author:** [@Fahad\_Khan](https://discuss.elastic.co/u/Fahad_Khan)\ **Replies:** 0\ **Last updated:** [July 16, 2019, 8:26am UTC](https://discuss.elastic.co/t/is-there-a-way-to-use-update-by-query-in-template/190681 "2019-07-16T08:26:15Z")
Hi, I want to create a template which will take user's value and will search against those values and update those returned documents which matched the user given condition. plz see the following POST \_scripts/\ **Author:** [@pa101](https://discuss.elastic.co/u/pa101)\ **Replies:** 3\ **Last updated:** [July 16, 2019, 8:31am UTC](https://discuss.elastic.co/t/if-custom-routing-will-make-document-overwrited-by-same-id/190660 "2019-07-16T08:31:26Z") if Custom Routing will make document overwrited by same id , when there is a hash Collisions between routing? I found when routing produce same string by murmur hash, and documents with same id are overwited for examp… --- ## [JAVA failed; error='Cannot allocate memory'](https://discuss.elastic.co/t/java-failed-error-cannot-allocate-memory/187340)
**Author:** [@Deep\_Manavadaria](https://discuss.elastic.co/u/Deep_Manavadaria)\ **Replies:** 5\ **Last updated:** [July 16, 2019, 8:14am UTC](https://discuss.elastic.co/t/java-failed-error-cannot-allocate-memory/187340 "2019-07-16T08:14:13Z")
I tried to start ES using command sudo -i service elasticsearch start Got an error sudo -i service elasticsearch start Starting elasticsearch: warning: Falling back to java on path. This behavior is deprecated. Specify… --- ## [Config a role in roles.yml but cannot specify some privileges](https://discuss.elastic.co/t/config-a-role-in-roles-yml-but-cannot-specify-some-privileges/190096)
**Author:** [@xujohn](https://discuss.elastic.co/u/xujohn)\ **Replies:** 3\ **Last updated:** [July 16, 2019, 7:34am UTC](https://discuss.elastic.co/t/config-a-role-in-roles-yml-but-cannot-specify-some-privileges/190096 "2019-07-16T07:34:38Z")
I defined a customer role in roles.yml such as: my\_user\_role: cluster: \[ 'all' \] indices: - names: \[ '' \] privileges: \[ 'all' \] applications: \[''\] run\_as: \['\*'\] After starting elasticsearch and logged in kibana … --- ## [Elasticsearch 7.1.0 crash with bootstrap checks failed](https://discuss.elastic.co/t/elasticsearch-7-1-0-crash-with-bootstrap-checks-failed/190190)
**Author:** [@Karuppasamy\_K](https://discuss.elastic.co/u/Karuppasamy_K)\ **Replies:** 6\ **Last updated:** [July 16, 2019, 7:12am UTC](https://discuss.elastic.co/t/elasticsearch-7-1-0-crash-with-bootstrap-checks-failed/190190 "2019-07-16T07:12:22Z")
I tried to run elasticsearch docker image from private repository, but its getting crash with ERROR: \[1\] bootstrap checks failed. I found "bootstrap check should be enabled "Des.enforce.bootstrap.checks=true" in elasti… --- ## [How to change directory for path.data and path.logs in elasticsearch in cent Operating system 7.7?](https://discuss.elastic.co/t/how-to-change-directory-for-path-data-and-path-logs-in-elasticsearch-in-cent-operating-system-7-7/190505)
**Author:** [@Anam\_Alfiya](https://discuss.elastic.co/u/Anam_Alfiya)\ **Replies:** 4\ **Last updated:** [July 16, 2019, 7:11am UTC](https://discuss.elastic.co/t/how-to-change-directory-for-path-data-and-path-logs-in-elasticsearch-in-cent-operating-system-7-7/190505 "2019-07-16T07:11:41Z")
How to change directory for path.data and path.logs in elasticsearch in cent Operating system 7.7? I tried to change the path manually in yml file. But every time error is popping out and its failing due to configuratio… --- ## [How to shrink the Elasticsearch data directory?](https://discuss.elastic.co/t/how-to-shrink-the-elasticsearch-data-directory/190634)
**Author:** [@jsandri](https://discuss.elastic.co/u/jsandri)\ **Replies:** 5\ **Last updated:** [July 16, 2019, 7:08am UTC](https://discuss.elastic.co/t/how-to-shrink-the-elasticsearch-data-directory/190634 "2019-07-16T07:08:34Z")
Hi :slight\_smile: I deploy an ELK and Filebeat system on Centos 7, use Curator to remove old indices from Kibana. But the size of the data directory keeps growing so I conclude that this directory stores old indices yet… --- ## [Elasticsearch 6.x - CentOS7 - unable to apply custom path.data and path.logs](https://discuss.elastic.co/t/elasticsearch-6-x-centos7-unable-to-apply-custom-path-data-and-path-logs/190654)
**Author:** [@JKCode](https://discuss.elastic.co/u/JKCode)\ **Replies:** 2\ **Last updated:** [July 16, 2019, 6:40am UTC](https://discuss.elastic.co/t/elasticsearch-6-x-centos7-unable-to-apply-custom-path-data-and-path-logs/190654 "2019-07-16T06:40:43Z")
Hi All, RPM (yum) Installed Elasticsearch 6.8.0 (single instance) on CentOS 7.6 Server. The installation with default configuration tested successfully using systemctl command. GOAL: Save path.data and path.logs in 2 … --- ## [How to takes elasticsearch backup on closed indexes in a clustered environment](https://discuss.elastic.co/t/how-to-takes-elasticsearch-backup-on-closed-indexes-in-a-clustered-environment/190635)
**Author:** [@krishanr](https://discuss.elastic.co/u/krishanr)\ **Replies:** 3\ **Last updated:** [July 16, 2019, 6:30am UTC](https://discuss.elastic.co/t/how-to-takes-elasticsearch-backup-on-closed-indexes-in-a-clustered-environment/190635 "2019-07-16T06:30:23Z")
I've configured 3-node clustered ELK nodes and also configured snapshot feature. But I need to take a backup of closed indexes. Re-open & take a snapshot is not practical. Is there another way to do this? --- ## [Elastic Stack on OpenShift](https://discuss.elastic.co/t/elastic-stack-on-openshift/190490)
**Author:** [@vivek14](https://discuss.elastic.co/u/vivek14)\ **Replies:** 5\ **Last updated:** [July 16, 2019, 6:12am UTC](https://discuss.elastic.co/t/elastic-stack-on-openshift/190490 "2019-07-16T06:12:34Z")
Hi, I want to install the Elastic Stack on OpenShift Container Platform. To start with Elasticsearch, I deployed the official elasticsearch:7.2.0 image from docker hub on OCP but the pod does not start successfully. G… --- ## [Hardware/RAM requirements](https://discuss.elastic.co/t/hardware-ram-requirements/190621)
**Author:** [@xpro](https://discuss.elastic.co/u/xpro)\ **Replies:** 1\ **Last updated:** [July 16, 2019, 6:03am UTC](https://discuss.elastic.co/t/hardware-ram-requirements/190621 "2019-07-16T06:03:28Z")
Hello Everyone I'm very new to Elasticsearch. I am looking to use it for my website's autocomplete search function. The searchable data is about 80GBs. Would I need to install Elasticsearch on a machine that has more th… --- ## [How to search using boolean operators AND, OR or Not in dev tools?](https://discuss.elastic.co/t/how-to-search-using-boolean-operators-and-or-or-not-in-dev-tools/189485)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 21\ **Last updated:** [July 16, 2019, 5:59am UTC](https://discuss.elastic.co/t/how-to-search-using-boolean-operators-and-or-or-not-in-dev-tools/189485 "2019-07-16T05:59:47Z")
Hello, Can anyone help me to use Boolean search in dev tools query? Thanks, Priyanka --- ## [\[Watcher\]Are chains applied to each document individually?](https://discuss.elastic.co/t/watcher-are-chains-applied-to-each-document-individually/190646)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 0\ **Last updated:** [July 16, 2019, 5:33am UTC](https://discuss.elastic.co/t/watcher-are-chains-applied-to-each-document-individually/190646 "2019-07-16T05:33:29Z")
Hi, I want to make a Watch that compares hardware alerts with open support tickets and if no matching ticket exist, perform an action such as using webhook to forward data to Logstash or send a API call to my ticket sys… --- ## [ODBC Elasticsearch and Tableau](https://discuss.elastic.co/t/odbc-elasticsearch-and-tableau/190629)
**Author:** [@jl\_30](https://discuss.elastic.co/u/jl_30)\ **Replies:** 0\ **Last updated:** [July 16, 2019, 2:02am UTC](https://discuss.elastic.co/t/odbc-elasticsearch-and-tableau/190629 "2019-07-16T02:02:35Z")
Hello, I am new to Elasticsearch and I have a small issue using the connector between ES and Tableau. When I try to query the data, my string columns are limited to 15 characters. Anyone got this issue? Thank you, Jer… --- ## [ELK - How to provide permission to individual user on particular index](https://discuss.elastic.co/t/elk-how-to-provide-permission-to-individual-user-on-particular-index/190488)
**Author:** [@Nitendra1](https://discuss.elastic.co/u/Nitendra1)\ **Replies:** 1\ **Last updated:** [July 16, 2019, 2:39am UTC](https://discuss.elastic.co/t/elk-how-to-provide-permission-to-individual-user-on-particular-index/190488 "2019-07-16T02:39:25Z")
I have few index in my cluster index\_2019-01-01 index\_2019-01-02 index\_2019-01-03 index\_2019-01-04 index\_2019-01-05 index\_2019-01-06 There are two user USER1 & USER2 USER1 has full right to this index pattern. I… --- ## [Using Wildcard Cert with Elasticsearch](https://discuss.elastic.co/t/using-wildcard-cert-with-elasticsearch/189636)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 6\ **Last updated:** [July 16, 2019, 2:27am UTC](https://discuss.elastic.co/t/using-wildcard-cert-with-elasticsearch/189636 "2019-07-16T02:27:46Z")
We have a public CA wildcard cert that I want to use with elasticsearch. I have the cert and elasticsearch configured, but when I run elasticsearch, it fails because I don't have the IP address of the Elasticsearch serv… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1224) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1226)