# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1236

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1237

---

## [How to get extra params with completion suggester?](https://discuss.elastic.co/t/how-to-get-extra-params-with-completion-suggester/189299)

<div class="topic-metadata">

**Author:** [@iamazy](https://discuss.elastic.co/u/iamazy)\
**Replies:** 0\
**Last updated:** [July 8, 2019, 7:19am UTC](https://discuss.elastic.co/t/how-to-get-extra-params-with-completion-suggester/189299 "2019-07-08T07:19:44Z")

</div>

Hello, I set a parameter as "completion" type and when i query by completion suggester,i want the result contains others parameter‘s value。 for example, the index mapping as followed: PUT music { "mappings": { …

---

## [How to upgrade to 7.2 from 7.1.1](https://discuss.elastic.co/t/how-to-upgrade-to-7-2-from-7-1-1/189294)

<div class="topic-metadata">

**Author:** [@wenchaodu](https://discuss.elastic.co/u/wenchaodu)\
**Replies:** 2\
**Last updated:** [July 8, 2019, 6:57am UTC](https://discuss.elastic.co/t/how-to-upgrade-to-7-2-from-7-1-1/189294 "2019-07-08T06:57:33Z")

</div>

How to upgrade 7.2 from 7.1.1 ? I don't want to reinstall 7.2, is there any way to upgrade to 7.2 instead of reinstall ? Thanks Wayne

---

## [Splunk to Elastic query migration](https://discuss.elastic.co/t/splunk-to-elastic-query-migration/188708)

<div class="topic-metadata">

**Author:** [@ravitandur](https://discuss.elastic.co/u/ravitandur)\
**Replies:** 2\
**Last updated:** [July 8, 2019, 6:57am UTC](https://discuss.elastic.co/t/splunk-to-elastic-query-migration/188708 "2019-07-08T06:57:26Z")

</div>

We have below Splunk query: sourcetype=f5\_access\_log rescode=429 | transaction node,rescode maxevents=-1 maxpause=1s | search eventcount\>1 duration \> 1 | bin span=5 duration | top 100 duration Can some one please help …

---

## [Finding Sum Aggregation for the properties from a Nested Document](https://discuss.elastic.co/t/finding-sum-aggregation-for-the-properties-from-a-nested-document/188611)

<div class="topic-metadata">

**Author:** [@Thilak](https://discuss.elastic.co/u/Thilak)\
**Replies:** 2\
**Last updated:** [July 8, 2019, 6:15am UTC](https://discuss.elastic.co/t/finding-sum-aggregation-for-the-properties-from-a-nested-document/188611 "2019-07-08T06:15:02Z")

</div>

Hello I was trying to find the aggregate inside the nested document (interactionInfo) only for the title : segments { "interactionId": "a26617a0-0530-4b41-9db6-4ca53e83e63e", "interactionInfo": \[ { …

---

## [How to limit off-heap memory usage](https://discuss.elastic.co/t/how-to-limit-off-heap-memory-usage/189288)

<div class="topic-metadata">

**Author:** [@cherriod](https://discuss.elastic.co/u/cherriod)\
**Replies:** 0\
**Last updated:** [July 8, 2019, 5:52am UTC](https://discuss.elastic.co/t/how-to-limit-off-heap-memory-usage/189288 "2019-07-08T05:52:18Z")

</div>

Hi! I use ES 1.7 on Win2012R2 with store type mmapfs by default. It this case ES loads index in RAM and fills all of it. With a high load on the record index, after some time the product falls. I tried advice from th…

---

## [Master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster, and this node must discover master-eligible nodes](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-and-this-node-must-discover-master-eligible-nodes/188706)

<div class="topic-metadata">

**Author:** [@gowsalai](https://discuss.elastic.co/u/gowsalai)\
**Replies:** 2\
**Last updated:** [July 8, 2019, 5:35am UTC](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster-and-this-node-must-discover-master-eligible-nodes/188706 "2019-07-08T05:35:06Z")

</div>

Hi, We are getting the below error during eck operator (https://www.elastic.co/guide/en/cloud-on-k8s/0.8/k8s-quickstart.html) bring up with persistent volume. We don't see the issue without the persistent volume. boot…

---

## [Configuring security in Logstash 7.1 - Path to cacert giving exception "Pipeline aborted due to error {:pipeline\_id=\>"main", :exception=\>#\<Errno::EISDIR: Is a directory"](https://discuss.elastic.co/t/configuring-security-in-logstash-7-1-path-to-cacert-giving-exception-pipeline-aborted-due-to-error-pipeline-id-main-exception-errno-is-a-directory/188002)

<div class="topic-metadata">

**Author:** [@ymishra](https://discuss.elastic.co/u/ymishra)\
**Replies:** 1\
**Last updated:** [July 8, 2019, 5:34am UTC](https://discuss.elastic.co/t/configuring-security-in-logstash-7-1-path-to-cacert-giving-exception-pipeline-aborted-due-to-error-pipeline-id-main-exception-errno-is-a-directory/188002 "2019-07-08T05:34:25Z")

</div>

Hello, I am working on configuring security in ELK stack. I am using a trial license of Logstash 7.1, Kibana 7.1 and Elasticsearch 7.1 As per the instructions on configuring security in ELK, I have configured security…

---

## [Elastic Clustering - Issuw with Node](https://discuss.elastic.co/t/elastic-clustering-issuw-with-node/189250)

<div class="topic-metadata">

**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\
**Replies:** 7\
**Last updated:** [July 8, 2019, 5:20am UTC](https://discuss.elastic.co/t/elastic-clustering-issuw-with-node/189250 "2019-07-08T05:20:52Z")

</div>

I followed instructions to connect 2 separate physical machines to the same cluster, however I am getting this error on my data node. Note: My master node (which is also a data node) is up and running. All my Elastic ins…

---

## [Get a "illegal\_argument\_exception" error after upgrade](https://discuss.elastic.co/t/get-a-illegal-argument-exception-error-after-upgrade/189069)

<div class="topic-metadata">

**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\
**Replies:** 2\
**Last updated:** [July 8, 2019, 2:10am UTC](https://discuss.elastic.co/t/get-a-illegal-argument-exception-error-after-upgrade/189069 "2019-07-08T02:10:07Z")

</div>

Hi, everyone. I'm trying to upgrade ES from 5.4.0 to 6.8.0. According to official documents, I execute this method after upgrade: curl -XPUT -H "Content-Type:application/json" 172.16.1.133:9200/\_cluster/settings -d' …

---

## [How to create security certificate pem for elasticsearch an kibana](https://discuss.elastic.co/t/how-to-create-security-certificate-pem-for-elasticsearch-an-kibana/189249)

<div class="topic-metadata">

**Author:** [@mouna\_boujrad](https://discuss.elastic.co/u/mouna_boujrad)\
**Replies:** 21\
**Last updated:** [July 8, 2019, 12:55am UTC](https://discuss.elastic.co/t/how-to-create-security-certificate-pem-for-elasticsearch-an-kibana/189249 "2019-07-08T00:55:05Z")

</div>

I am trying to intall the helm chart of elasticsearch and kibana but in the security configuration I need to have : certificateAuthorities: /usr/share/kibana/config/certs/elastic-certificate.pem key: /usr/share/kiban…

---

## [I need more insights into how reindexing with parallel slicing works like about how it allocates slices](https://discuss.elastic.co/t/i-need-more-insights-into-how-reindexing-with-parallel-slicing-works-like-about-how-it-allocates-slices/189269)

<div class="topic-metadata">

**Author:** [@praveengadugin1](https://discuss.elastic.co/u/praveengadugin1)\
**Replies:** 0\
**Last updated:** [July 8, 2019, 12:05am UTC](https://discuss.elastic.co/t/i-need-more-insights-into-how-reindexing-with-parallel-slicing-works-like-about-how-it-allocates-slices/189269 "2019-07-08T00:05:34Z")

</div>

I have been using reindex api in kibana to reindex one of my index using "slice indexing with max set to 200". Out of 14 million documents (2.5 TB) of my source index, I've been able to index 10 million documents and s…

---

## [Elastic Search Node Configs](https://discuss.elastic.co/t/elastic-search-node-configs/189252)

<div class="topic-metadata">

**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\
**Replies:** 5\
**Last updated:** [July 7, 2019, 10:20pm UTC](https://discuss.elastic.co/t/elastic-search-node-configs/189252 "2019-07-07T22:20:36Z")

</div>

I have seen people using multiple nodes on the same physical/virtual machine, I wanted to ask if there is an advantage to this. Logically, the disk space will be used for 2 copies also if the disk (or the RAID array dies…

---

## [Making search request with Nest 7.0.1 not deserialized](https://discuss.elastic.co/t/making-search-request-with-nest-7-0-1-not-deserialized/189193)

<div class="topic-metadata">

**Author:** [@terstege](https://discuss.elastic.co/u/terstege)\
**Replies:** 2\
**Last updated:** [July 7, 2019, 9:53pm UTC](https://discuss.elastic.co/t/making-search-request-with-nest-7-0-1-not-deserialized/189193 "2019-07-07T21:53:17Z")

</div>

Setup: Elasticsearch 7.2 Elasticsearch.net 7.0.1 Elasticsearch .NEST 7.0.1 Code: var result = IndexClient.Search(s =\> s .MinScore(minimumScore) .From(skip) .Size(take) .Index(index) .Query(q =\> searchQuery) ); …

---

## [Fails to index doc after upgrading to 6.8.1 from 5.6](https://discuss.elastic.co/t/fails-to-index-doc-after-upgrading-to-6-8-1-from-5-6/189218)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 1\
**Last updated:** [July 7, 2019, 7:46pm UTC](https://discuss.elastic.co/t/fails-to-index-doc-after-upgrading-to-6-8-1-from-5-6/189218 "2019-07-07T19:46:32Z")

</div>

After upgrading my ELK from 5.6 to 6.8 I see index failure in my logstash processing from ala: \[2019-07-06T22:16:55,774\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :act…

---

## [Master not discovered exception with ELK 7](https://discuss.elastic.co/t/master-not-discovered-exception-with-elk-7/188818)

<div class="topic-metadata">

**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\
**Replies:** 8\
**Last updated:** [July 7, 2019, 5:15pm UTC](https://discuss.elastic.co/t/master-not-discovered-exception-with-elk-7/188818 "2019-07-07T17:15:28Z")

</div>

I am deploying ELK 7.0.1 in kubernetes environment via helm. I have: 3 master pods, 2 data and 3 client pods. efk-belk-elasticsearch-client-5f8455d6c5-wqggx efk-belk-elasticsearch-data-0 efk-belk-elasticsearch-maste…

---

## [Cannot Run Elasticsearch 7.2 As A Windows Service](https://discuss.elastic.co/t/cannot-run-elasticsearch-7-2-as-a-windows-service/189253)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [July 7, 2019, 4:36pm UTC](https://discuss.elastic.co/t/cannot-run-elasticsearch-7-2-as-a-windows-service/189253 "2019-07-07T16:36:27Z")

</div>

Running on a fresh install of Windows Server 2012 R2 with all the latest updates. The only changes made to the OS is turning off firewall(s), setting hostname, and setting IP address. Reproduction Unzip elasticsearch…

---

## [Elasticsearch seems to ignore settings in yaml file](https://discuss.elastic.co/t/elasticsearch-seems-to-ignore-settings-in-yaml-file/189243)

<div class="topic-metadata">

**Author:** [@elasticFox](https://discuss.elastic.co/u/elasticFox)\
**Replies:** 2\
**Last updated:** [July 7, 2019, 3:27pm UTC](https://discuss.elastic.co/t/elasticsearch-seems-to-ignore-settings-in-yaml-file/189243 "2019-07-07T15:27:04Z")

</div>

Hi, I have an ES cluster on a single machine consisting of five nodes: master, data1, data2, data3 and ingest. After upgrading from 5.5.1 to 6.8.1, I have managed to get the master node up and running, however, other no…

---

## [Where is the Alias data type in the elasticsearch python client?](https://discuss.elastic.co/t/where-is-the-alias-data-type-in-the-elasticsearch-python-client/189245)

<div class="topic-metadata">

**Author:** [@elasticpatrick](https://discuss.elastic.co/u/elasticpatrick)\
**Replies:** 1\
**Last updated:** [July 7, 2019, 1:54pm UTC](https://discuss.elastic.co/t/where-is-the-alias-data-type-in-the-elasticsearch-python-client/189245 "2019-07-07T13:54:53Z")

</div>

I'm creating a Document class in python and the Alias field is nowhere found neither in docs nor in your python client. How can I implement the Alias data type in python? Thanks.

---

## [Purge last N documents from ElasticSerach](https://discuss.elastic.co/t/purge-last-n-documents-from-elasticserach/189229)

<div class="topic-metadata">

**Author:** [@Dileep\_Mandapam](https://discuss.elastic.co/u/Dileep_Mandapam)\
**Replies:** 3\
**Last updated:** [July 7, 2019, 1:51pm UTC](https://discuss.elastic.co/t/purge-last-n-documents-from-elasticserach/189229 "2019-07-07T13:51:37Z")

</div>

Is there a way to purge last N documents from Elasticsearch?. Use-case is, Purging documents based on the count. For example, assume that the document count threshold was set to 1million and current document count is 1…

---

## [No Single metric viewer is being generated when I am creating jobs using advanced machine learning](https://discuss.elastic.co/t/no-single-metric-viewer-is-being-generated-when-i-am-creating-jobs-using-advanced-machine-learning/189201)

<div class="topic-metadata">

**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\
**Replies:** 3\
**Last updated:** [July 7, 2019, 10:58am UTC](https://discuss.elastic.co/t/no-single-metric-viewer-is-being-generated-when-i-am-creating-jobs-using-advanced-machine-learning/189201 "2019-07-07T10:58:05Z")

</div>

I am trying out DNS\_data\_exfiltration which is a part of machine learning recipes in elasticsearch .Below is my job configuration and i am running packetbeat in my machine. I am able to view Anamoly explorer But i …

---

## [Fetching only matching elements from an array in Elasticsearch](https://discuss.elastic.co/t/fetching-only-matching-elements-from-an-array-in-elasticsearch/189231)

<div class="topic-metadata">

**Author:** [@darsan55](https://discuss.elastic.co/u/darsan55)\
**Replies:** 1\
**Last updated:** [July 7, 2019, 6:40am UTC](https://discuss.elastic.co/t/fetching-only-matching-elements-from-an-array-in-elasticsearch/189231 "2019-07-07T06:40:50Z")

</div>

I have an String array (not nested type) . Where i want only values which all are matching only not full array. Lets say i have \['a','b','c','d'\]. But in return i want only \['a','b'\] which will matching with my query…

---

## [Hello, how should I initialization PreBuiltXPackTransportClient I opened the x - pack](https://discuss.elastic.co/t/hello-how-should-i-initialization-prebuiltxpacktransportclient-i-opened-the-x-pack/188983)

<div class="topic-metadata">

**Author:** [@zhaoyunxing92](https://discuss.elastic.co/u/zhaoyunxing92)\
**Replies:** 3\
**Last updated:** [July 7, 2019, 2:30am UTC](https://discuss.elastic.co/t/hello-how-should-i-initialization-prebuiltxpacktransportclient-i-opened-the-x-pack/188983 "2019-07-07T02:30:53Z")

</div>

Hello, how should I initialization PreBuiltXPackTransportClient I opened the x - pack Elasticsearch version : 6.5.4 Plugins installed : x-pack JVM version: jdk1.8 OS version : win10 Description of the problem in…

---

## [Looking for expert for some fun part time work (paid)](https://discuss.elastic.co/t/looking-for-expert-for-some-fun-part-time-work-paid/189219)

<div class="topic-metadata">

**Author:** [@Ken\_Snyder](https://discuss.elastic.co/u/Ken_Snyder)\
**Replies:** 0\
**Last updated:** [July 6, 2019, 8:38pm UTC](https://discuss.elastic.co/t/looking-for-expert-for-some-fun-part-time-work-paid/189219 "2019-07-06T20:38:40Z")

</div>

I run a startup in California. We are new but have growing cashflow. Our main stack does NOT include elasticsearch but I've educated myself to some level (book smart) and want a person with real life experience to sound-…

---

## [Contitional Analyzer](https://discuss.elastic.co/t/contitional-analyzer/189211)

<div class="topic-metadata">

**Author:** [@doublemax](https://discuss.elastic.co/u/doublemax)\
**Replies:** 2\
**Last updated:** [July 6, 2019, 8:54pm UTC](https://discuss.elastic.co/t/contitional-analyzer/189211 "2019-07-06T20:54:21Z")

</div>

This filter: https://www.elastic.co/guide/en/elasticsearch/reference/current/analysis-condition-tokenfilter.html I would like to apply the german stemmer if doc\['lang'\] == 'de' { "settings": { "analysis": { …

---

## [Conditional use of stemmer](https://discuss.elastic.co/t/conditional-use-of-stemmer/189214)

<div class="topic-metadata">

**Author:** [@doublemax](https://discuss.elastic.co/u/doublemax)\
**Replies:** 0\
**Last updated:** [July 6, 2019, 6:29pm UTC](https://discuss.elastic.co/t/conditional-use-of-stemmer/189214 "2019-07-06T18:29:10Z")

</div>

Simplified: { "language": "de", "title": "...", "description": "..." } Is there a chance to apply the german stemmer to title and description? Because the condition if doc\['language'\] == 'de' is true? Bes…

---

## [Elastic Search is not coming up due to missing max\_map\_count](https://discuss.elastic.co/t/elastic-search-is-not-coming-up-due-to-missing-max-map-count/189213)

<div class="topic-metadata">

**Author:** [@Shahin\_Ansari](https://discuss.elastic.co/u/Shahin_Ansari)\
**Replies:** 0\
**Last updated:** [July 6, 2019, 5:23pm UTC](https://discuss.elastic.co/t/elastic-search-is-not-coming-up-due-to-missing-max-map-count/189213 "2019-07-06T17:23:36Z")

</div>

Dear Team, I am trying to start elastic search but its throwing the below error. Error: \[2019-07-06T17:14:27,952\]\[INFO \]\[o.e.n.Node \] \[DESKTOP-8R2H9BA.localdomain1559241418966\] starting ... \[2019-07-06T…

---

## [Querying for fragment of string intersecting 2 words](https://discuss.elastic.co/t/querying-for-fragment-of-string-intersecting-2-words/189136)

<div class="topic-metadata">

**Author:** [@orokusaki](https://discuss.elastic.co/u/orokusaki)\
**Replies:** 5\
**Last updated:** [July 6, 2019, 5:00pm UTC](https://discuss.elastic.co/t/querying-for-fragment-of-string-intersecting-2-words/189136 "2019-07-06T17:00:28Z")

</div>

I have a document with a name field with the following made-up address value: 0615 Zaxsnzfugwbb Street, Obgnqjua, KI 22304 I'm testing Elasticsearch for functionality and performance at scale (adding 6 million property…

---

## [File System Cache Vs JVM](https://discuss.elastic.co/t/file-system-cache-vs-jvm/189057)

<div class="topic-metadata">

**Author:** [@amitmjadav](https://discuss.elastic.co/u/amitmjadav)\
**Replies:** 5\
**Last updated:** [July 6, 2019, 4:47pm UTC](https://discuss.elastic.co/t/file-system-cache-vs-jvm/189057 "2019-07-06T16:47:40Z")

</div>

Hi, Can anyone explain me the difference between File System Cache and JVM Memory and how it affects in searching speed performance ??

---

## [Intel/AMD dependency?](https://discuss.elastic.co/t/intel-amd-dependency/187687)

<div class="topic-metadata">

**Author:** [@frankshad](https://discuss.elastic.co/u/frankshad)\
**Replies:** 3\
**Last updated:** [July 6, 2019, 1:55pm UTC](https://discuss.elastic.co/t/intel-amd-dependency/187687 "2019-07-06T13:55:41Z")

</div>

I notice that the version 7 install packages, eg elasticsearch-7.2.0-amd64.deb have amd64 on the end. Does this mean (apart from the JVM, which I understand) there is now something that is not pure Java and will not inst…

---

## [Using wsl2 install elasticsearch cant' create vm.max\_map\_cout](https://discuss.elastic.co/t/using-wsl2-install-elasticsearch-cant-create-vm-max-map-cout/188594)

<div class="topic-metadata">

**Author:** [@rick\_zhang](https://discuss.elastic.co/u/rick_zhang)\
**Replies:** 3\
**Last updated:** [July 6, 2019, 9:56am UTC](https://discuss.elastic.co/t/using-wsl2-install-elasticsearch-cant-create-vm-max-map-cout/188594 "2019-07-06T09:56:24Z")

</div>

i have using wsl2 and debian 9.9 from windows appstore , install elasticsearch 7.2 and service elasticsearch start sucess but have a error ,when i startup another node from command, always have a same error . system ca…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1235)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1237)
