# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1257

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1258

---

## [7.1 Custom Analyzer \[...\] failed to find filter under name \[english\_morphology\]](https://discuss.elastic.co/t/7-1-custom-analyzer-failed-to-find-filter-under-name-english-morphology/186459)

<div class="topic-metadata">

**Author:** [@clgs](https://discuss.elastic.co/u/clgs)\
**Replies:** 3\
**Last updated:** [June 20, 2019, 10:07am UTC](https://discuss.elastic.co/t/7-1-custom-analyzer-failed-to-find-filter-under-name-english-morphology/186459 "2019-06-20T10:07:08Z")

</div>

In 5.6 was "analysis":{"analyzer":{"fast\_search":{"filter":\["lowercase","english\_morphology"\],"tokenizer":"standard"}}} But in 7.1 there is no english\_morphology plugin. Tell me how to be?

---

## [Elasticsearch - Poor cluster performance and stability](https://discuss.elastic.co/t/elasticsearch-poor-cluster-performance-and-stability/184846)

<div class="topic-metadata">

**Author:** [@Lior\_Yakobov](https://discuss.elastic.co/u/Lior_Yakobov)\
**Replies:** 7\
**Last updated:** [June 20, 2019, 8:48am UTC](https://discuss.elastic.co/t/elasticsearch-poor-cluster-performance-and-stability/184846 "2019-06-20T08:48:54Z")

</div>

Hello, I'm running a 27 nodes cluster (21 data nodes, 3 masters 3 kibanas) which stores around 60TB (10k total shards). Data nodes+kibanas 30GB heap, masters 8GB. RPM based installed cluster on physical Centos 7 serve…

---

## [03 node ELK cluster setup with v 7.1.x](https://discuss.elastic.co/t/03-node-elk-cluster-setup-with-v-7-1-x/186623)

<div class="topic-metadata">

**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\
**Replies:** 0\
**Last updated:** [June 20, 2019, 8:32am UTC](https://discuss.elastic.co/t/03-node-elk-cluster-setup-with-v-7-1-x/186623 "2019-06-20T08:32:17Z")

</div>

Hi Team, When I create 3 node cluster what would be the elaticsearch.yml and Kibana.yml configuration look like? My current configuration Node Host IP Node 1 app1 192.168.60.4 Node 2 app2 192.168.60.5 Node…

---

## [Kibana console showing Elastic Search as “Red” status & all shards failed error](https://discuss.elastic.co/t/kibana-console-showing-elastic-search-as-red-status-all-shards-failed-error/186233)

<div class="topic-metadata">

**Author:** [@Joseph\_Raj](https://discuss.elastic.co/u/Joseph_Raj)\
**Replies:** 8\
**Last updated:** [June 20, 2019, 7:55am UTC](https://discuss.elastic.co/t/kibana-console-showing-elastic-search-as-red-status-all-shards-failed-error/186233 "2019-06-20T07:55:51Z")

</div>

Hi All, I face error when i try to run kibana console from my virtual machine, screenshot attached for ref. Also i checked the logs, i could see below lines which i'm completely not aware . \[2019-06-18T11:19:17,974\]\[…

---

## [Unable to create jira issue in watcher action2](https://discuss.elastic.co/t/unable-to-create-jira-issue-in-watcher-action2/186594)

<div class="topic-metadata">

**Author:** [@manju134](https://discuss.elastic.co/u/manju134)\
**Replies:** 2\
**Last updated:** [June 20, 2019, 7:47am UTC](https://discuss.elastic.co/t/unable-to-create-jira-issue-in-watcher-action2/186594 "2019-06-20T07:47:01Z")

</div>

Hi All, Please help on this as i have ad-hoc project which needs to be finished today. I want to create jira action from kibana. i went through the below link - https://www.elastic.co/guide/en/elastic-stack-overview/…

---

## [How to search in nested query for below case](https://discuss.elastic.co/t/how-to-search-in-nested-query-for-below-case/186608)

<div class="topic-metadata">

**Author:** [@princesahu04](https://discuss.elastic.co/u/princesahu04)\
**Replies:** 0\
**Last updated:** [June 20, 2019, 7:02am UTC](https://discuss.elastic.co/t/how-to-search-in-nested-query-for-below-case/186608 "2019-06-20T07:02:39Z")

</div>

My mapping is: PUT bond\_covenant { "settings": { "index":{ "analysis":{ "filter":{ "synonym":{ "type":"synonym", "synonyms":"Some path" }, "engl…

---

## [What the high cpu components that take too much cpu?](https://discuss.elastic.co/t/what-the-high-cpu-components-that-take-too-much-cpu/186562)

<div class="topic-metadata">

**Author:** [@eightnoteight](https://discuss.elastic.co/u/eightnoteight)\
**Replies:** 1\
**Last updated:** [June 20, 2019, 6:03am UTC](https://discuss.elastic.co/t/what-the-high-cpu-components-that-take-too-much-cpu/186562 "2019-06-20T06:03:53Z")

</div>

Hi, Our ELK stack does heavy logs per day, almost 8 billion per day. and we have a hot/warm architecture where hot nodes index the todays logs and warm for retention, and a separate set of master nodes What components…

---

## [How to enable stemmer feature](https://discuss.elastic.co/t/how-to-enable-stemmer-feature/186358)

<div class="topic-metadata">

**Author:** [@ieiayaobb](https://discuss.elastic.co/u/ieiayaobb)\
**Replies:** 3\
**Last updated:** [June 20, 2019, 5:43am UTC](https://discuss.elastic.co/t/how-to-enable-stemmer-feature/186358 "2019-06-20T05:43:54Z")

</div>

Hi all, I'm new to Elastic Search. I'm working on applying stemmer feature on all my indexes, so I used the following code: settingMap.put("index.analysis.filter.english\_stemmer.type", "stemmer"); settingMap.put("index…

---

## [Issue with HighLevelRestClient with the host = xyz.com:8080/elasticsearch](https://discuss.elastic.co/t/issue-with-highlevelrestclient-with-the-host-xyz-com-8080-elasticsearch/186384)

<div class="topic-metadata">

**Author:** [@tanvi](https://discuss.elastic.co/u/tanvi)\
**Replies:** 7\
**Last updated:** [June 20, 2019, 5:40am UTC](https://discuss.elastic.co/t/issue-with-highlevelrestclient-with-the-host-xyz-com-8080-elasticsearch/186384 "2019-06-20T05:40:59Z")

</div>

If i'm using xyz.com as the host with HighLevelRestClient, it says unable to parse response body . If I'm using xyz.com:8080/elasticsearch as the host with HighLevelRestClient, it says UnknownHostException. I'm not su…

---

## [Number of open shards exceeds cluster soft limit](https://discuss.elastic.co/t/number-of-open-shards-exceeds-cluster-soft-limit/186582)

<div class="topic-metadata">

**Author:** [@amin.nugroho](https://discuss.elastic.co/u/amin.nugroho)\
**Replies:** 4\
**Last updated:** [June 20, 2019, 5:19am UTC](https://discuss.elastic.co/t/number-of-open-shards-exceeds-cluster-soft-limit/186582 "2019-06-20T05:19:28Z")

</div>

I am currently using ES 6.6.1 (3 nodes), all running on centos 7. I am planning an upgrade to 6.8 and then 7.1 The upgrade assistent says this: Number of open shards exceeds cluster soft limit There are \[3514\] open s…

---

## [POST update operation doubt](https://discuss.elastic.co/t/post-update-operation-doubt/186585)

<div class="topic-metadata">

**Author:** [@vyas.radhakrishnan](https://discuss.elastic.co/u/vyas.radhakrishnan)\
**Replies:** 1\
**Last updated:** [June 20, 2019, 4:42am UTC](https://discuss.elastic.co/t/post-update-operation-doubt/186585 "2019-06-20T04:42:48Z")

</div>

This doubt is regarding how POST update operation has to work, a) Create a document as following POST http://slc11zix.us.oracle.com:9200/students/documentType/s1 { "Name": "student1", "school": "school", "EmailAd…

---

## [Cluster issue when Master node has crashed](https://discuss.elastic.co/t/cluster-issue-when-master-node-has-crashed/186584)

<div class="topic-metadata">

**Author:** [@Neel.Gagan](https://discuss.elastic.co/u/Neel.Gagan)\
**Replies:** 1\
**Last updated:** [June 20, 2019, 4:39am UTC](https://discuss.elastic.co/t/cluster-issue-when-master-node-has-crashed/186584 "2019-06-20T04:39:51Z")

</div>

ES 6.4.3 . i had a cluster with two nodes my master node configured over a Virtual Machine is crashed. prior to the Crash the The monitoring of the cluster showed indexed data as 20 GB. which has reduced to half when i v…

---

## [Clustering in ES](https://discuss.elastic.co/t/clustering-in-es/186578)

<div class="topic-metadata">

**Author:** [@Neel.Gagan](https://discuss.elastic.co/u/Neel.Gagan)\
**Replies:** 1\
**Last updated:** [June 20, 2019, 4:39am UTC](https://discuss.elastic.co/t/clustering-in-es/186578 "2019-06-20T04:39:01Z")

</div>

ES 6.4.3 . i had a cluster with two nodes my master node configured over a Virtual Machine is crashed. prior to the Crash the The monitoring of the cluster showed indexed data as 20 GB. which has reduced to half when i v…

---

## [Help! ES do not trust the certificate](https://discuss.elastic.co/t/help-es-do-not-trust-the-certificate/186446)

<div class="topic-metadata">

**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\
**Replies:** 2\
**Last updated:** [June 20, 2019, 3:15am UTC](https://discuss.elastic.co/t/help-es-do-not-trust-the-certificate/186446 "2019-06-20T03:15:40Z")

</div>

Hi everyone, I try to connect Eleasticsearch 6.8.0 via TransportClient(enable TLS), I created ca with command "./bin/elasticsearch-certutil ca --pem", then I unzip the zip file, move the ca profile to elasticsearch/conf…

---

## [Using Network Drive](https://discuss.elastic.co/t/using-network-drive/186414)

<div class="topic-metadata">

**Author:** [@Min\_Mah](https://discuss.elastic.co/u/Min_Mah)\
**Replies:** 3\
**Last updated:** [June 20, 2019, 3:04am UTC](https://discuss.elastic.co/t/using-network-drive/186414 "2019-06-20T03:04:57Z")

</div>

Hi, I'm trying to use network drive for elasticsearch path.data in my elasticsearch.yml # ----------------------------------- Paths ------------------------------------ # # Path to directory where to store the data (s…

---

## [What does "restricted indices" means in Security:Has privileges API?](https://discuss.elastic.co/t/what-does-restricted-indices-means-in-security-has-privileges-api/185175)

<div class="topic-metadata">

**Author:** [@LoadingZhang](https://discuss.elastic.co/u/LoadingZhang)\
**Replies:** 7\
**Last updated:** [June 20, 2019, 3:03am UTC](https://discuss.elastic.co/t/what-does-restricted-indices-means-in-security-has-privileges-api/185175 "2019-06-20T03:03:03Z")

</div>

The document is here. What does "restricted indices" meas in "allow\_restricted\_indices" params?

---

## [Failed When Start Es node With ClusterBlockException](https://discuss.elastic.co/t/failed-when-start-es-node-with-clusterblockexception/186566)

<div class="topic-metadata">

**Author:** [@akira](https://discuss.elastic.co/u/akira)\
**Replies:** 3\
**Last updated:** [June 20, 2019, 1:45am UTC](https://discuss.elastic.co/t/failed-when-start-es-node-with-clusterblockexception/186566 "2019-06-20T01:45:02Z")

</div>

\[2019-06-20T09:34:23,716\]\[ERROR\]\[o.e.x.s.a.e.NativeUsersStore\] \[node-1\] failed to retrieve user \[oral\] org.elasticsearch.cluster.block.ClusterBlockException: blocked by: \[SERVICE\_UNAVAILABLE/1/state not recovered / init…

---

## [Elasticsearch cluster installation on Azure](https://discuss.elastic.co/t/elasticsearch-cluster-installation-on-azure/184936)

<div class="topic-metadata">

**Author:** [@ramuvr](https://discuss.elastic.co/u/ramuvr)\
**Replies:** 2\
**Last updated:** [June 20, 2019, 1:32am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-installation-on-azure/184936 "2019-06-20T01:32:06Z")

</div>

Hi, I am trying to deploy the Elasticsearch cluster on Azure. On the cluster settings page, I am able to select an existing Virtual network but none of the subsets appear. A pane appears to select the subnet (tried cre…

---

## [Regular expression won't work when next to character that's been escaped](https://discuss.elastic.co/t/regular-expression-wont-work-when-next-to-character-thats-been-escaped/186549)

<div class="topic-metadata">

**Author:** [@Jchris](https://discuss.elastic.co/u/Jchris)\
**Replies:** 2\
**Last updated:** [June 19, 2019, 10:26pm UTC](https://discuss.elastic.co/t/regular-expression-wont-work-when-next-to-character-thats-been-escaped/186549 "2019-06-19T22:26:52Z")

</div>

I'm trying to create a saved search and I have a field called "pipe\_name" and I need to find every time it equals \[back slash\]\[six lower case characters\]. An example is \\qudpcg. this query finds \\qudpcg: { "query": …

---

## [Ordering of reponse elements when using bulk api in 5.X](https://discuss.elastic.co/t/ordering-of-reponse-elements-when-using-bulk-api-in-5-x/186508)

<div class="topic-metadata">

**Author:** [@ganparse](https://discuss.elastic.co/u/ganparse)\
**Replies:** 3\
**Last updated:** [June 19, 2019, 6:10pm UTC](https://discuss.elastic.co/t/ordering-of-reponse-elements-when-using-bulk-api-in-5-x/186508 "2019-06-19T18:10:56Z")

</div>

I have found there seems to be inconsistency between various information sources about whether the response elements in the response to a bulk request should be returned in the same order as the elements in the request. …

---

## [How to enable Elastic-Search Security on one node Single cluster](https://discuss.elastic.co/t/how-to-enable-elastic-search-security-on-one-node-single-cluster/186470)

<div class="topic-metadata">

**Author:** [@BENMOHAMED\_Abdelkade](https://discuss.elastic.co/u/BENMOHAMED_Abdelkade)\
**Replies:** 1\
**Last updated:** [June 19, 2019, 5:47pm UTC](https://discuss.elastic.co/t/how-to-enable-elastic-search-security-on-one-node-single-cluster/186470 "2019-06-19T17:47:02Z")

</div>

Hey everyone ! I'm currently following these two tutorial to enable elasticsearch security which is now free, but in these two tutorials, it's specified only for two node-cluster and i only have one, my default elastic…

---

## [How to reindex a single index into several time-indexed indexes](https://discuss.elastic.co/t/how-to-reindex-a-single-index-into-several-time-indexed-indexes/186109)

<div class="topic-metadata">

**Author:** [@DigitalMachinist](https://discuss.elastic.co/u/DigitalMachinist)\
**Replies:** 12\
**Last updated:** [June 19, 2019, 5:22pm UTC](https://discuss.elastic.co/t/how-to-reindex-a-single-index-into-several-time-indexed-indexes/186109 "2019-06-19T17:22:58Z")

</div>

My company is running elastic 6.5.1 on Elastic Cloud. In the last couple of months our memory pressure maxed out our 2GB nodes, so we resized to 4GB. Very recently our memory pressure has maxed out again at 4GB and we're…

---

## [ES indexing times - ES v2.4.1](https://discuss.elastic.co/t/es-indexing-times-es-v2-4-1/185108)

<div class="topic-metadata">

**Author:** [@sukhmet](https://discuss.elastic.co/u/sukhmet)\
**Replies:** 10\
**Last updated:** [June 19, 2019, 4:32pm UTC](https://discuss.elastic.co/t/es-indexing-times-es-v2-4-1/185108 "2019-06-19T16:32:32Z")

</div>

Hi, We are using a cluster with total 5 nodes (3 master 2 data) setting . We plan to index a document as large as 100 MB in size. We look forward to expect around 50K rpm roughly this size and provide search capabilit…

---

## [What is purpose x-pack-logstash inside ElasticSearch?](https://discuss.elastic.co/t/what-is-purpose-x-pack-logstash-inside-elasticsearch/186426)

<div class="topic-metadata">

**Author:** [@NAHA](https://discuss.elastic.co/u/NAHA)\
**Replies:** 1\
**Last updated:** [June 19, 2019, 3:00pm UTC](https://discuss.elastic.co/t/what-is-purpose-x-pack-logstash-inside-elasticsearch/186426 "2019-06-19T15:00:13Z")

</div>

Hi , I am currently sending log data to ElasticSearch . When I installed ES, I saw that , in ElasticSearch there is modules file which contains a lot x-packs. There is one x-pack-logstash. I want to understand aim of t…

---

## [How to return data from the document tree](https://discuss.elastic.co/t/how-to-return-data-from-the-document-tree/186480)

<div class="topic-metadata">

**Author:** [@tomcomp](https://discuss.elastic.co/u/tomcomp)\
**Replies:** 0\
**Last updated:** [June 19, 2019, 1:53pm UTC](https://discuss.elastic.co/t/how-to-return-data-from-the-document-tree/186480 "2019-06-19T13:53:39Z")

</div>

Hello, I would like to ask you how to return data from the document tree. University =\> Faculty =\> Departments =\> Subjects =\> Annotation + syllabus. The document is stored in the ES "index": "university" =\> "fields": "Fa…

---

## [Modifying default \_id field](https://discuss.elastic.co/t/modifying-default-id-field/186479)

<div class="topic-metadata">

**Author:** [@Karlos](https://discuss.elastic.co/u/Karlos)\
**Replies:** 1\
**Last updated:** [June 19, 2019, 2:00pm UTC](https://discuss.elastic.co/t/modifying-default-id-field/186479 "2019-06-19T14:00:08Z")

</div>

Hello, We are working in an Index system with Elasticsearch.¡, and we would like to have our own \_id fields, using a unique identifier obtained from the document to be inserted, so Elasticsearch drops a new insert in ca…

---

## [Elastic search 7.0.0 geo\_shape performance](https://discuss.elastic.co/t/elastic-search-7-0-0-geo-shape-performance/184717)

<div class="topic-metadata">

**Author:** [@joel.ortin](https://discuss.elastic.co/u/joel.ortin)\
**Replies:** 12\
**Last updated:** [June 19, 2019, 1:45pm UTC](https://discuss.elastic.co/t/elastic-search-7-0-0-geo-shape-performance/184717 "2019-06-19T13:45:03Z")

</div>

Hi, We have now migrated to ES 7.0.0 from 6.4.0 and we removed the tree and precision values from geo\_shape field: "area": {"type": "geo\_shape", "tree": "quadtree", "precision": "2km"} =\> "area": {"type": "geo\_shape"} …

---

## [Centralization logs : load content of file in elasticsearch or attachments](https://discuss.elastic.co/t/centralization-logs-load-content-of-file-in-elasticsearch-or-attachments/186473)

<div class="topic-metadata">

**Author:** [@icirco](https://discuss.elastic.co/u/icirco)\
**Replies:** 0\
**Last updated:** [June 19, 2019, 1:15pm UTC](https://discuss.elastic.co/t/centralization-logs-load-content-of-file-in-elasticsearch-or-attachments/186473 "2019-06-19T13:15:43Z")

</div>

hello, My subject : Some agents supply every days multiple logs (\<50ko per file) on each server (100 servers windows or linux). I would like load logs in ES in order to consult easily the logs from a unique centraliz…

---

## [Get only latest version of document](https://discuss.elastic.co/t/get-only-latest-version-of-document/186403)

<div class="topic-metadata">

**Author:** [@nitin.anand](https://discuss.elastic.co/u/nitin.anand)\
**Replies:** 3\
**Last updated:** [June 19, 2019, 12:58pm UTC](https://discuss.elastic.co/t/get-only-latest-version-of-document/186403 "2019-06-19T12:58:13Z")

</div>

i experience an issue where the search returns all versions of a document randomly. Can this be controlled somehow, that i only get the latest version of document.

---

## [\[SOLVED\] Are antimatch possible?](https://discuss.elastic.co/t/solved-are-antimatch-possible/186461)

<div class="topic-metadata">

**Author:** [@key](https://discuss.elastic.co/u/key)\
**Replies:** 2\
**Last updated:** [June 19, 2019, 12:38pm UTC](https://discuss.elastic.co/t/solved-are-antimatch-possible/186461 "2019-06-19T12:38:25Z")

</div>

Hi, are antimatch pattern possible with ES ? For instance, take two documents {description : "I'm a flower"} {description : "I'm a blue flower"} And an analyzer with ascii folding, lowercase, edgnengram and maybe som…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1256)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1258)
