# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1248

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1249

---

## [Bucket return limit](https://discuss.elastic.co/t/bucket-return-limit/183729)

<div class="topic-metadata">

**Author:** [@ek9boy](https://discuss.elastic.co/u/ek9boy)\
**Replies:** 0\
**Last updated:** [May 31, 2019, 12:57pm UTC](https://discuss.elastic.co/t/bucket-return-limit/183729 "2019-05-31T12:57:30Z")

</div>

I am running a query and the aggs is only returning 10 buckets when there are much more than 10. how can i remove the default limit

---

## [Node Master not discovered if I active XPACK](https://discuss.elastic.co/t/node-master-not-discovered-if-i-active-xpack/187837)

<div class="topic-metadata">

**Author:** [@thewasta](https://discuss.elastic.co/u/thewasta)\
**Replies:** 0\
**Last updated:** [June 27, 2019, 1:19pm UTC](https://discuss.elastic.co/t/node-master-not-discovered-if-i-active-xpack/187837 "2019-06-27T13:19:57Z")

</div>

My ElasticSearch Version: 6.6.1 My Enviroment: 3 nodes in 3 differents servers Master: 192.168.1.142 Slave1: 192.168.1.144 Slave2: 192.168.1.146 Master Config YML: cluster.name: elasticppo node.name: ${HOSTNAME} pat…

---

## [\[discovery.seed\_hosts, discovery.seed\_providers, cluster.initial\_master\_nodes\] must be configured helm chart](https://discuss.elastic.co/t/discovery-seed-hosts-discovery-seed-providers-cluster-initial-master-nodes-must-be-configured-helm-chart/187648)

<div class="topic-metadata">

**Author:** [@mouna\_boujrad](https://discuss.elastic.co/u/mouna_boujrad)\
**Replies:** 4\
**Last updated:** [June 27, 2019, 1:11pm UTC](https://discuss.elastic.co/t/discovery-seed-hosts-discovery-seed-providers-cluster-initial-master-nodes-must-be-configured-helm-chart/187648 "2019-06-27T13:11:31Z")

</div>

hello I have installed elasticsearch using this helm chart , which is by default a version 6.7.0 of elasticsearch , I wanted to install version 7.1.1 so I changed the value file : appVersion: "7.1.1" image: rep…

---

## [Extended Stats Bucket - Using Top Hits Agg](https://discuss.elastic.co/t/extended-stats-bucket-using-top-hits-agg/184395)

<div class="topic-metadata">

**Author:** [@ek9boy](https://discuss.elastic.co/u/ek9boy)\
**Replies:** 0\
**Last updated:** [June 5, 2019, 2:48pm UTC](https://discuss.elastic.co/t/extended-stats-bucket-using-top-hits-agg/184395 "2019-06-05T14:48:34Z")

</div>

Hi, I am struggling to use a "Top Hits" aggregation and "extended\_stats\_bucket". From the buckets returned my "extended\_stats\_bucket" path cannot ready the metric value. Is there a way to do this? The image on the le…

---

## [Recover data after the lost of master \[7.1.1\]](https://discuss.elastic.co/t/recover-data-after-the-lost-of-master-7-1-1/187775)

<div class="topic-metadata">

**Author:** [@syavel](https://discuss.elastic.co/u/syavel)\
**Replies:** 5\
**Last updated:** [June 27, 2019, 12:57pm UTC](https://discuss.elastic.co/t/recover-data-after-the-lost-of-master-7-1-1/187775 "2019-06-27T12:57:36Z")

</div>

Hi, I have a cluster with 3 masters node and 3 data node. I've lost my 3 masters at the same time, is there a way to recover the data ? I've tried to promote my 3 data node to the master but I have this log: master n…

---

## [ES 6.x - Timeout by REST API operations](https://discuss.elastic.co/t/es-6-x-timeout-by-rest-api-operations/180773)

<div class="topic-metadata">

**Author:** [@EldrosKandar](https://discuss.elastic.co/u/EldrosKandar)\
**Replies:** 13\
**Last updated:** [June 27, 2019, 12:24pm UTC](https://discuss.elastic.co/t/es-6-x-timeout-by-rest-api-operations/180773 "2019-06-27T12:24:18Z")

</div>

This issue appears on ES 6.7 I've been trying to create an ILM policy to delete old indices. I used first the Kibana Console and got a 500 Internal Server Error back. So I tried the following curl call on the server: c…

---

## [Get documents where sum of values in filtered nested documents match a specified conditions](https://discuss.elastic.co/t/get-documents-where-sum-of-values-in-filtered-nested-documents-match-a-specified-conditions/187818)

<div class="topic-metadata">

**Author:** [@radix\_s](https://discuss.elastic.co/u/radix_s)\
**Replies:** 0\
**Last updated:** [June 27, 2019, 11:56am UTC](https://discuss.elastic.co/t/get-documents-where-sum-of-values-in-filtered-nested-documents-match-a-specified-conditions/187818 "2019-06-27T11:56:45Z")

</div>

I am tracking orders made by the shop visitors and for each order I put a document that goes into an index like this: DELETE visitor\_carts PUT visitor\_carts { "mappings" : { "\_doc": { "properties" : { …

---

## [Aggregate query: Elasticsearch:java.lang.OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/aggregate-query-elasticsearch-java-lang-outofmemoryerror-java-heap-space/187366)

<div class="topic-metadata">

**Author:** [@ErisDS](https://discuss.elastic.co/u/ErisDS)\
**Replies:** 7\
**Last updated:** [June 27, 2019, 11:05am UTC](https://discuss.elastic.co/t/aggregate-query-elasticsearch-java-lang-outofmemoryerror-java-heap-space/187366 "2019-06-27T11:05:25Z")

</div>

I have a single node on a 32GB RAM machine, running ES 5.6.2, which is collecting a reasonable volume of nginx logs. It's just about working well enough and we are in the process of moving over to a 3-node cluster with u…

---

## [Expand your time range](https://discuss.elastic.co/t/expand-your-time-range/187803)

<div class="topic-metadata">

**Author:** [@ks211988](https://discuss.elastic.co/u/ks211988)\
**Replies:** 1\
**Last updated:** [June 27, 2019, 10:15am UTC](https://discuss.elastic.co/t/expand-your-time-range/187803 "2019-06-27T10:15:34Z")

</div>

I am not getting anything in Discover as I have created the index I am getting below error Expand your time range One or more of the indices you’re looking at contains a date field. Your query may not match anything in…

---

## [Regarding Ingest Node Set Processor](https://discuss.elastic.co/t/regarding-ingest-node-set-processor/187606)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 2\
**Last updated:** [June 27, 2019, 9:09am UTC](https://discuss.elastic.co/t/regarding-ingest-node-set-processor/187606 "2019-06-27T09:09:13Z")

</div>

Hi, I'm looking at upgrading from 5.6.3 to 6.8.x and have come across a behaviour in an ingest node pipeline which I need to address before upgrading... I have the following processor defined in one of our pipelines: {…

---

## [Elastic search server startup fails with "java.lang.ArrayIndexOutOfBoundException" in 6.2](https://discuss.elastic.co/t/elastic-search-server-startup-fails-with-java-lang-arrayindexoutofboundexception-in-6-2/187691)

<div class="topic-metadata">

**Author:** [@shobhana](https://discuss.elastic.co/u/shobhana)\
**Replies:** 2\
**Last updated:** [June 27, 2019, 8:40am UTC](https://discuss.elastic.co/t/elastic-search-server-startup-fails-with-java-lang-arrayindexoutofboundexception-in-6-2/187691 "2019-06-27T08:40:32Z")

</div>

I have a 5-node cluster running in production already in GCP. Since the load has increased, I tried to add few more nodes to that cluster. To create new nodes, I used "Create similar" option provided by GCP. I updated al…

---

## [Search for different kind of service](https://discuss.elastic.co/t/search-for-different-kind-of-service/187781)

<div class="topic-metadata">

**Author:** [@Alexandre\_Piel](https://discuss.elastic.co/u/Alexandre_Piel)\
**Replies:** 0\
**Last updated:** [June 27, 2019, 8:30am UTC](https://discuss.elastic.co/t/search-for-different-kind-of-service/187781 "2019-06-27T08:30:38Z")

</div>

I am trying to find the best way to structure my index(es). I have different kind of services for pets: "veterinarian", "pet grooming", "pet caring" and so on. This services have some common property like name, address, …

---

## [Elasticsearch data values missing in index](https://discuss.elastic.co/t/elasticsearch-data-values-missing-in-index/187779)

<div class="topic-metadata">

**Author:** [@Sakthivanan](https://discuss.elastic.co/u/Sakthivanan)\
**Replies:** 0\
**Last updated:** [June 27, 2019, 8:16am UTC](https://discuss.elastic.co/t/elasticsearch-data-values-missing-in-index/187779 "2019-06-27T08:16:42Z")

</div>

In database,school\_id(field datatype:'string') values like this (0611,0391,0301,0311,0071,0651) but when i moves to elastic index via logstash then the school\_id(field datatype:'string') values shows like this (611,391,…

---

## [Version upgrade and Migration of Elasticsearch Cluster](https://discuss.elastic.co/t/version-upgrade-and-migration-of-elasticsearch-cluster/187119)

<div class="topic-metadata">

**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\
**Replies:** 1\
**Last updated:** [June 27, 2019, 8:16am UTC](https://discuss.elastic.co/t/version-upgrade-and-migration-of-elasticsearch-cluster/187119 "2019-06-27T08:16:28Z")

</div>

Hi, I currently have a cluster (2 data and 1 master node) running on AWS. The elasticsearch version of this cluster is 6.4.0. Due to some issues I have to move this cluster(data) to local machines. Also, I have to inst…

---

## [Using slack to show latest error message by domain](https://discuss.elastic.co/t/using-slack-to-show-latest-error-message-by-domain/187777)

<div class="topic-metadata">

**Author:** [@PeterV](https://discuss.elastic.co/u/PeterV)\
**Replies:** 0\
**Last updated:** [June 27, 2019, 8:11am UTC](https://discuss.elastic.co/t/using-slack-to-show-latest-error-message-by-domain/187777 "2019-06-27T08:11:14Z")

</div>

Hello there! We are currently using Elasticsearch in combination with Kibana and Filebeat to report errors to Slack. This is working perfectly but we would like to show the latest 5 errors in that same Slack message. T…

---

## [How to Run Elasticsearch & Kibana on Remote Machine](https://discuss.elastic.co/t/how-to-run-elasticsearch-kibana-on-remote-machine/187772)

<div class="topic-metadata">

**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Replies:** 0\
**Last updated:** [June 27, 2019, 7:28am UTC](https://discuss.elastic.co/t/how-to-run-elasticsearch-kibana-on-remote-machine/187772 "2019-06-27T07:28:07Z")

</div>

I have installed elasticsearch and kibana on windows 10 and its running fine i want to access both these on local remote machine please let me know how it is possible to run elastic search and kibana on remote machine. I…

---

## [Clone indexes](https://discuss.elastic.co/t/clone-indexes/187521)

<div class="topic-metadata">

**Author:** [@joao.nzuzi](https://discuss.elastic.co/u/joao.nzuzi)\
**Replies:** 2\
**Last updated:** [June 27, 2019, 7:27am UTC](https://discuss.elastic.co/t/clone-indexes/187521 "2019-06-27T07:27:01Z")

</div>

Hello guys. Is there a way to clone indexes from one server to another?

---

## [How to automatically delete older snapshot?](https://discuss.elastic.co/t/how-to-automatically-delete-older-snapshot/187711)

<div class="topic-metadata">

**Author:** [@aqiank](https://discuss.elastic.co/u/aqiank)\
**Replies:** 4\
**Last updated:** [June 27, 2019, 7:09am UTC](https://discuss.elastic.co/t/how-to-automatically-delete-older-snapshot/187711 "2019-06-27T07:09:30Z")

</div>

Hi, I'm wondering if there's a way to automate deletion of older snapshots? One of the ways I tried is to run this daily with systemd timer (the date is incremented by a day every day): DELETE /\_snapshot/backup/2019-02-…

---

## [Comparison between cloud services](https://discuss.elastic.co/t/comparison-between-cloud-services/187722)

<div class="topic-metadata">

**Author:** [@kmohd](https://discuss.elastic.co/u/kmohd)\
**Replies:** 1\
**Last updated:** [June 27, 2019, 6:28am UTC](https://discuss.elastic.co/t/comparison-between-cloud-services/187722 "2019-06-27T06:28:14Z")

</div>

Hello, i am interested in elasticsearch on cloud and would like to know what is the best option in terms of costs and features, between Elasticsearch Service on AWS, Elastic cloud, and Elasticsearch with private subscrip…

---

## [Elasticsearch Not Running on Linux](https://discuss.elastic.co/t/elasticsearch-not-running-on-linux/187712)

<div class="topic-metadata">

**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Replies:** 4\
**Last updated:** [June 27, 2019, 5:53am UTC](https://discuss.elastic.co/t/elasticsearch-not-running-on-linux/187712 "2019-06-27T05:53:34Z")

</div>

I am trying to install elasticsearch on Linux Enviroment . After unzip tar file of elasticsearch when i try to run the command of elasticsearch in linux it shows the following below error java.lang.RuntimeException: can…

---

## [Elasticsearch-head Connect elasticsearch via HTTPS](https://discuss.elastic.co/t/elasticsearch-head-connect-elasticsearch-via-https/187699)

<div class="topic-metadata">

**Author:** [@pengxu](https://discuss.elastic.co/u/pengxu)\
**Replies:** 2\
**Last updated:** [June 27, 2019, 5:44am UTC](https://discuss.elastic.co/t/elasticsearch-head-connect-elasticsearch-via-https/187699 "2019-06-27T05:44:16Z")

</div>

My cluster is basic on 7.1.1 , HTTPS is enabled in my cluster ,but elasticsearch-head cannot be connected through https. What should I do?

---

## [When using bulk to input data during rolling restart elasticsearch, error happens,primary shard is not active Timeout: \[1m\]](https://discuss.elastic.co/t/when-using-bulk-to-input-data-during-rolling-restart-elasticsearch-error-happens-primary-shard-is-not-active-timeout-1m/187704)

<div class="topic-metadata">

**Author:** [@luxx](https://discuss.elastic.co/u/luxx)\
**Replies:** 1\
**Last updated:** [June 27, 2019, 5:02am UTC](https://discuss.elastic.co/t/when-using-bulk-to-input-data-during-rolling-restart-elasticsearch-error-happens-primary-shard-is-not-active-timeout-1m/187704 "2019-06-27T05:02:48Z")

</div>

elasticsearch6.7.1 3 hosts 1：EsMaster 2：EsMaster、EsClient、EsNode1、EsNode2 3：EsMaster、EsClient、EsNode1、EsNode2 keep bulk data into es during rolling restart, my steps: 1.set "cluster.routing.allocation.enable": "n…

---

## [Elastic Search is not starting please help](https://discuss.elastic.co/t/elastic-search-is-not-starting-please-help/187329)

<div class="topic-metadata">

**Author:** [@Dhruv\_Patodia](https://discuss.elastic.co/u/Dhruv_Patodia)\
**Replies:** 1\
**Last updated:** [June 27, 2019, 4:12am UTC](https://discuss.elastic.co/t/elastic-search-is-not-starting-please-help/187329 "2019-06-27T04:12:16Z")

</div>

Can someone help me with elasticsearch, its not starting. when I check the status this is the response sudo systemctl status elasticsearch ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/syst…

---

## [Failed to join cluster](https://discuss.elastic.co/t/failed-to-join-cluster/187511)

<div class="topic-metadata">

**Author:** [@aqiank](https://discuss.elastic.co/u/aqiank)\
**Replies:** 4\
**Last updated:** [June 27, 2019, 2:03am UTC](https://discuss.elastic.co/t/failed-to-join-cluster/187511 "2019-06-27T02:03:00Z")

</div>

Hi, I removed a node (logs-data-2) and upgraded Elasticsearch to 7.2.0 and encountered this issue. Master node: \[2019-06-26T07:46:39,403\]\[WARN \]\[o.e.c.c.Coordinator \] \[logs-master-1\] failed to validate incoming jo…

---

## [Elasticsearch is stoping immediately after start](https://discuss.elastic.co/t/elasticsearch-is-stoping-immediately-after-start/185375)

<div class="topic-metadata">

**Author:** [@arunsaini](https://discuss.elastic.co/u/arunsaini)\
**Replies:** 1\
**Last updated:** [June 27, 2019, 1:42am UTC](https://discuss.elastic.co/t/elasticsearch-is-stoping-immediately-after-start/185375 "2019-06-27T01:42:57Z")

</div>

Hi all, When I am starting the elasticsearch it is stopping immediately. First time status showing active but immediately stops. the error is as- elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd…

---

## [How to calculate no. of request going to s3 while snapshot](https://discuss.elastic.co/t/how-to-calculate-no-of-request-going-to-s3-while-snapshot/186789)

<div class="topic-metadata">

**Author:** [@Sukanta\_Saha](https://discuss.elastic.co/u/Sukanta_Saha)\
**Replies:** 4\
**Last updated:** [June 27, 2019, 1:26am UTC](https://discuss.elastic.co/t/how-to-calculate-no-of-request-going-to-s3-while-snapshot/186789 "2019-06-27T01:26:17Z")

</div>

Hi We are running an elasticsearch cluster with 40 data nodes and 3 master nodes data nodes are i3.4xlarge and master nodes are m5.xlarge, using es version 5.4.0 We are taking daily backup on s3 using snapshot command…

---

## [How large can we increment index.max\_ngram\_diff?](https://discuss.elastic.co/t/how-large-can-we-increment-index-max-ngram-diff/187303)

<div class="topic-metadata">

**Author:** [@Keita\_Iwamoto](https://discuss.elastic.co/u/Keita_Iwamoto)\
**Replies:** 0\
**Last updated:** [June 25, 2019, 10:40am UTC](https://discuss.elastic.co/t/how-large-can-we-increment-index-max-ngram-diff/187303 "2019-06-25T10:40:53Z")

</div>

Hi, I have a question about NGramTokenizer . https://www.elastic.co/guide/en/elasticsearch/reference/current/index-modules.html I want to widen the difference between min\_gram and max\_gram. For example, min\_gram = 1 an…

---

## [Elasticsearch curator delete disk space](https://discuss.elastic.co/t/elasticsearch-curator-delete-disk-space/187450)

<div class="topic-metadata">

**Author:** [@ohollx](https://discuss.elastic.co/u/ohollx)\
**Replies:** 6\
**Last updated:** [June 27, 2019, 12:48am UTC](https://discuss.elastic.co/t/elasticsearch-curator-delete-disk-space/187450 "2019-06-27T00:48:33Z")

</div>

Hi. I'm trying to delete an index automatically using an elastic curator. I think the index is deleted when setting as below, but I do not understand exactly how it works. actions: One: action: delete\_indices optio…

---

## [Data node lost, all shards go to RED - Data node returns but shards lost forever](https://discuss.elastic.co/t/data-node-lost-all-shards-go-to-red-data-node-returns-but-shards-lost-forever/186761)

<div class="topic-metadata">

**Author:** [@LucasSh](https://discuss.elastic.co/u/LucasSh)\
**Replies:** 9\
**Last updated:** [June 26, 2019, 10:37pm UTC](https://discuss.elastic.co/t/data-node-lost-all-shards-go-to-red-data-node-returns-but-shards-lost-forever/186761 "2019-06-26T22:37:31Z")

</div>

This happened to me on a test bed running the 6.7 ELK stack on Kubernetes (3 ingest, 3 master, 3 32TB datanodes) with the configuration set to 5 Shards, 1 Replica. \*\* OBSERVATION Kibana renders a json "message":"all sh…

---

## [Index Lifecycle Policy getting assigned even after ILM is turned off](https://discuss.elastic.co/t/index-lifecycle-policy-getting-assigned-even-after-ilm-is-turned-off/187675)

<div class="topic-metadata">

**Author:** [@VeeT](https://discuss.elastic.co/u/VeeT)\
**Replies:** 4\
**Last updated:** [June 26, 2019, 9:38pm UTC](https://discuss.elastic.co/t/index-lifecycle-policy-getting-assigned-even-after-ilm-is-turned-off/187675 "2019-06-26T21:38:51Z")

</div>

I created an ILP and was able to succesfully add it. I no longer need the ILP so what I did is: removed the ILP from the index (POST index/\_ilm/remove) turned off ILM (POST \_ilm/stop) deleted the ILP completely I have…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1247)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1249)
