# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1280

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1281

---

## [RAM to storage ratio](https://discuss.elastic.co/t/ram-to-storage-ratio/183535)

<div class="topic-metadata">

**Author:** [@hkqjwyerkfjhalsdjkfh](https://discuss.elastic.co/u/hkqjwyerkfjhalsdjkfh)\
**Replies:** 3\
**Last updated:** [May 30, 2019, 6:42pm UTC](https://discuss.elastic.co/t/ram-to-storage-ratio/183535 "2019-05-30T18:42:25Z")

</div>

I found the recommendation of a 1:24 ratio of RAM to storage on another thread. Is that still what is recommended? I couldn't find much in official documentation about how much disk space you should have per node. What …

---

## [Elasticsearch 6.3 - SearchRequest timeout value in the SearchSource not honored](https://discuss.elastic.co/t/elasticsearch-6-3-searchrequest-timeout-value-in-the-searchsource-not-honored/183592)

<div class="topic-metadata">

**Author:** [@Eric\_Ding](https://discuss.elastic.co/u/Eric_Ding)\
**Replies:** 0\
**Last updated:** [May 30, 2019, 6:34pm UTC](https://discuss.elastic.co/t/elasticsearch-6-3-searchrequest-timeout-value-in-the-searchsource-not-honored/183592 "2019-05-30T18:34:14Z")

</div>

Referring this API doc page: https://www.elastic.co/guide/en/elasticsearch/client/java-rest/6.3/java-rest-high-search.html sourceBuilder.timeout(new TimeValue(60, TimeUnit.SECONDS)); "Set an optional timeout that co…

---

## [Delete Unassigned replica shards](https://discuss.elastic.co/t/delete-unassigned-replica-shards/182880)

<div class="topic-metadata">

**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\
**Replies:** 9\
**Last updated:** [May 30, 2019, 3:09pm UTC](https://discuss.elastic.co/t/delete-unassigned-replica-shards/182880 "2019-05-30T15:09:02Z")

</div>

After a cluster crash for filesystem corruption , I restarted the 5 nodes elasticsearch. Actually I have 30 Unassigned replica shards that elasticsearch try to reassign without success. I want to delete them without lo…

---

## [Populating name and email fields when using LDAP authentication](https://discuss.elastic.co/t/populating-name-and-email-fields-when-using-ldap-authentication/183532)

<div class="topic-metadata">

**Author:** [@jackjefferson](https://discuss.elastic.co/u/jackjefferson)\
**Replies:** 1\
**Last updated:** [May 30, 2019, 3:07pm UTC](https://discuss.elastic.co/t/populating-name-and-email-fields-when-using-ldap-authentication/183532 "2019-05-30T15:07:51Z")

</div>

I've set up LDAP authentication using a trial license of Elasticsearch 7.1. I've got the authentication working with user-search mode, but the "full\_name" and "email" attributes are null. How do I populate these with val…

---

## [During Snapshot Process in ES 5.1.2](https://discuss.elastic.co/t/during-snapshot-process-in-es-5-1-2/183142)

<div class="topic-metadata">

**Author:** [@saikettewary](https://discuss.elastic.co/u/saikettewary)\
**Replies:** 2\
**Last updated:** [May 30, 2019, 2:56pm UTC](https://discuss.elastic.co/t/during-snapshot-process-in-es-5-1-2/183142 "2019-05-30T14:56:35Z")

</div>

Hi, I have a script to do snapshot process set for a 5.1.2 cluster and it set to snap in every 15 min. This script first snaps if a snap is not already running and once completes successfully , it deletes old snaps from…

---

## [Elastic Java Scroll API Exception](https://discuss.elastic.co/t/elastic-java-scroll-api-exception/183541)

<div class="topic-metadata">

**Author:** [@matheusribeirogarcia](https://discuss.elastic.co/u/matheusribeirogarcia)\
**Replies:** 0\
**Last updated:** [May 30, 2019, 1:36pm UTC](https://discuss.elastic.co/t/elastic-java-scroll-api-exception/183541 "2019-05-30T13:36:50Z")

</div>

I am experiencing this error while using the Java Scroll API "root\_cause":\[{"type":"exception","reason":"Trying to create too many scroll contexts I do multiple searches multiple times inside different indexes, so I ne…

---

## [Query the sum of a filtered subset of nested documents](https://discuss.elastic.co/t/query-the-sum-of-a-filtered-subset-of-nested-documents/183512)

<div class="topic-metadata">

**Author:** [@Kazim\_Zaidi](https://discuss.elastic.co/u/Kazim_Zaidi)\
**Replies:** 0\
**Last updated:** [May 30, 2019, 11:23am UTC](https://discuss.elastic.co/t/query-the-sum-of-a-filtered-subset-of-nested-documents/183512 "2019-05-30T11:23:24Z")

</div>

Consider a document like this: { title: "I love ice cream!" comments: \[ { body: "me too!", reaction: 'positive', likes: 20 }, { body: "huh!…

---

## [Elasticsearch - Failed to acknowledge mapping update](https://discuss.elastic.co/t/elasticsearch-failed-to-acknowledge-mapping-update/183507)

<div class="topic-metadata">

**Author:** [@Kaloyan\_Dimov](https://discuss.elastic.co/u/Kaloyan_Dimov)\
**Replies:** 0\
**Last updated:** [May 30, 2019, 10:53am UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-acknowledge-mapping-update/183507 "2019-05-30T10:53:10Z")

</div>

I have the following error: {"error":{"root\_cause":\[{"type":"timeout\_exception","reason":"Failed to acknowledge mapping update within \[30s\]"}\],"type":"timeout\_exception","reason":"Failed to acknowledge mapping update wi…

---

## [Elasticsearch 7 (Nest): Failed to parse mapping \[\_doc\]: Root mapping definition has unsupported parameters:](https://discuss.elastic.co/t/elasticsearch-7-nest-failed-to-parse-mapping-doc-root-mapping-definition-has-unsupported-parameters/183284)

<div class="topic-metadata">

**Author:** [@Hooman\_Bahreini](https://discuss.elastic.co/u/Hooman_Bahreini)\
**Replies:** 2\
**Last updated:** [May 30, 2019, 9:23am UTC](https://discuss.elastic.co/t/elasticsearch-7-nest-failed-to-parse-mapping-doc-root-mapping-definition-has-unsupported-parameters/183284 "2019-05-30T09:23:54Z")

</div>

I am getting the above error in ES 7. I think this is because of: removal of mapping types. My code used to work in ES 6. Since I am using NEST to generate my index, I am not sure how should I fix the issue? This is m…

---

## [How to restart elasticsearch cluster in redhat linux](https://discuss.elastic.co/t/how-to-restart-elasticsearch-cluster-in-redhat-linux/183489)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 1\
**Last updated:** [May 30, 2019, 8:58am UTC](https://discuss.elastic.co/t/how-to-restart-elasticsearch-cluster-in-redhat-linux/183489 "2019-05-30T08:58:46Z")

</div>

Hi, I made some changes in elasticsearch.yml and want to restart my 3 node cluster. i tried this on each node. sudo systemctl stop elasticsearch.service | sudo /bin/systemctl daemon-reload | sudo /bin/systemctl enable…

---

## [Composite aggregation Pattern Support](https://discuss.elastic.co/t/composite-aggregation-pattern-support/183487)

<div class="topic-metadata">

**Author:** [@Sakshi\_Srivastava](https://discuss.elastic.co/u/Sakshi_Srivastava)\
**Replies:** 0\
**Last updated:** [May 30, 2019, 8:45am UTC](https://discuss.elastic.co/t/composite-aggregation-pattern-support/183487 "2019-05-30T08:45:39Z")

</div>

I want to get documents of a particular pattern in my aggregation. If I use termsAggregation then I can use "include" to mark a pattern but this is not the case with composite aggregation. I need use something like inclu…

---

## [Reject queries if it's sitting in the queue beyond a request\_timeout](https://discuss.elastic.co/t/reject-queries-if-its-sitting-in-the-queue-beyond-a-request-timeout/183485)

<div class="topic-metadata">

**Author:** [@Bukhtawar\_Khan](https://discuss.elastic.co/u/Bukhtawar_Khan)\
**Replies:** 0\
**Last updated:** [May 30, 2019, 8:08am UTC](https://discuss.elastic.co/t/reject-queries-if-its-sitting-in-the-queue-beyond-a-request-timeout/183485 "2019-05-30T08:08:22Z")

</div>

To prevent the backlog to build up espl when the cluster is slow it makes sense to reject queries waiting in the queue beyond a timeout as most of the times the client timeout might have occurred and a retry might alread…

---

## [Collecting logs - 75 days](https://discuss.elastic.co/t/collecting-logs-75-days/182582)

<div class="topic-metadata">

**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\
**Replies:** 5\
**Last updated:** [May 30, 2019, 7:38am UTC](https://discuss.elastic.co/t/collecting-logs-75-days/182582 "2019-05-30T07:38:53Z")

</div>

Hello, I have installed Windows ELK-6.4.0-0. It works almost fine but I can collect logs (..\\elasticsearch\\data\\nodes\\0\\indices) only for 75 days, I would like to collect logs for 180 days, what and where should I chang…

---

## [How to create build in user without interactive mode or auto](https://discuss.elastic.co/t/how-to-create-build-in-user-without-interactive-mode-or-auto/183420)

<div class="topic-metadata">

**Author:** [@Jiri\_Safar](https://discuss.elastic.co/u/Jiri_Safar)\
**Replies:** 4\
**Last updated:** [May 30, 2019, 7:30am UTC](https://discuss.elastic.co/t/how-to-create-build-in-user-without-interactive-mode-or-auto/183420 "2019-05-30T07:30:47Z")

</div>

Hi, I need to automate create build in user for which I should use /usr/share/elasticsearch/bin/elasticsearch-setup-passwords interactive or /usr/share/elasticsearch/bin/elasticsearch-setup-passwords auto In first scen…

---

## [Size is increasing after using shrink API](https://discuss.elastic.co/t/size-is-increasing-after-using-shrink-api/183475)

<div class="topic-metadata">

**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\
**Replies:** 0\
**Last updated:** [May 30, 2019, 7:12am UTC](https://discuss.elastic.co/t/size-is-increasing-after-using-shrink-api/183475 "2019-05-30T07:12:29Z")

</div>

below is the state of earthquake index yellow open earthquake VvP3SezoTGyFjSC8M4ufjQ 5 1 8313 0 8.8mb 8.8mb i ran shrink API on this with index.codec: best comp…

---

## [SSL Certificate error when connecting to elastic search from python](https://discuss.elastic.co/t/ssl-certificate-error-when-connecting-to-elastic-search-from-python/182977)

<div class="topic-metadata">

**Author:** [@udara](https://discuss.elastic.co/u/udara)\
**Replies:** 5\
**Last updated:** [May 30, 2019, 7:01am UTC](https://discuss.elastic.co/t/ssl-certificate-error-when-connecting-to-elastic-search-from-python/182977 "2019-05-30T07:01:40Z")

</div>

I have set up the elastic search 7.1 in my local server under port 9650. And Signed with a self-generated CA. We have connected kibana using the steps mentioned in the below documentation. https://www.elastic.co/guide/…

---

## [Unknown\_ca exception when using SSL in Elastic python-api](https://discuss.elastic.co/t/unknown-ca-exception-when-using-ssl-in-elastic-python-api/181228)

<div class="topic-metadata">

**Author:** [@gued](https://discuss.elastic.co/u/gued)\
**Replies:** 1\
**Last updated:** [May 30, 2019, 6:52am UTC](https://discuss.elastic.co/t/unknown-ca-exception-when-using-ssl-in-elastic-python-api/181228 "2019-05-30T06:52:53Z")

</div>

Hello. This is my engine client-side: es\_connection = Elasticsearch( f'https://{elastic\_config\["ip"\]}:{elastic\_config\["port"\]}', http\_auth=("user", "password"), use\_ssl=True, verify\_certs=False, sniff\_on\_start=True, sn…

---

## [ASCII value is not inserting to Elastic search index](https://discuss.elastic.co/t/ascii-value-is-not-inserting-to-elastic-search-index/183039)

<div class="topic-metadata">

**Author:** [@SudevPK](https://discuss.elastic.co/u/SudevPK)\
**Replies:** 4\
**Last updated:** [May 30, 2019, 4:27am UTC](https://discuss.elastic.co/t/ascii-value-is-not-inserting-to-elastic-search-index/183039 "2019-05-30T04:27:20Z")

</div>

I have 2 elastic search nodes, Elastic search NODE 1 ( version 6.5.1 ) Elastic search NODE 2 ( version 7.0.1 ) I am able to insert ASCII value in index in Elastic search NODE 1 but getting error while inserting to…

---

## [Elastic 7 is officially out, any thoughts?](https://discuss.elastic.co/t/elastic-7-is-officially-out-any-thoughts/183436)

<div class="topic-metadata">

**Author:** [@lovelash](https://discuss.elastic.co/u/lovelash)\
**Replies:** 0\
**Last updated:** [May 29, 2019, 11:54pm UTC](https://discuss.elastic.co/t/elastic-7-is-officially-out-any-thoughts/183436 "2019-05-29T23:54:02Z")

</div>

Looks like the cluster resilience is the most important feature for me, but I won't turn down the Kibana dark theme. 9Apps Cartoon HD

---

## [Need help mapping dynamic keys](https://discuss.elastic.co/t/need-help-mapping-dynamic-keys/183432)

<div class="topic-metadata">

**Author:** [@supritha.amudhu](https://discuss.elastic.co/u/supritha.amudhu)\
**Replies:** 0\
**Last updated:** [May 29, 2019, 11:33pm UTC](https://discuss.elastic.co/t/need-help-mapping-dynamic-keys/183432 "2019-05-29T23:33:39Z")

</div>

I checked out other topics here. I need help creating mappings in ElasticSearch for the following kind of JSON data: \[ { "type": "wizard", "id": "UUID String", "external\_id": null, "attributes": { "name": "Fleur D…

---

## [Python 3.6 and SSL issues](https://discuss.elastic.co/t/python-3-6-and-ssl-issues/183183)

<div class="topic-metadata">

**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\
**Replies:** 2\
**Last updated:** [May 29, 2019, 11:18pm UTC](https://discuss.elastic.co/t/python-3-6-and-ssl-issues/183183 "2019-05-29T23:18:18Z")

</div>

Hello, I keep on getting the following error elasticsearch.exceptions.SSLError: ConnectionError(\[SSL: CERTIFICATE\_VERIFY\_FAILED\] certificate verify failed (\_ssl.c:847)) caused by: SSLError(\[SSL: CERTIFICATE\_VERIFY\_FAIL…

---

## [Can I parse data with Elasticsearch?](https://discuss.elastic.co/t/can-i-parse-data-with-elasticsearch/182499)

<div class="topic-metadata">

**Author:** [@nicks1993](https://discuss.elastic.co/u/nicks1993)\
**Replies:** 4\
**Last updated:** [May 29, 2019, 9:24pm UTC](https://discuss.elastic.co/t/can-i-parse-data-with-elasticsearch/182499 "2019-05-29T21:24:52Z")

</div>

I am using the EFK stack at work. Mo one seems to know much about it. I struggled to get script fields working in kibana due to my field not being aggregatable I believe. I couldn't really figure out how to change the …

---

## [Review request for "Elasticsearch Survival Guide for Developers" blog post](https://discuss.elastic.co/t/review-request-for-elasticsearch-survival-guide-for-developers-blog-post/183411)

<div class="topic-metadata">

**Author:** [@vyazici](https://discuss.elastic.co/u/vyazici)\
**Replies:** 3\
**Last updated:** [May 29, 2019, 8:41pm UTC](https://discuss.elastic.co/t/review-request-for-elasticsearch-survival-guide-for-developers-blog-post/183411 "2019-05-29T20:41:18Z")

</div>

Hello, I have been working on a blog post titled Elasticsearch Survival Guide for Developers for some months and I have just published it. Before embarking for a PR in blogosphere, I would appreciate reviews of the belo…

---

## [Basic license - 3 node cluster ( Xpack security )](https://discuss.elastic.co/t/basic-license-3-node-cluster-xpack-security/183405)

<div class="topic-metadata">

**Author:** [@girishb](https://discuss.elastic.co/u/girishb)\
**Replies:** 1\
**Last updated:** [May 29, 2019, 7:40pm UTC](https://discuss.elastic.co/t/basic-license-3-node-cluster-xpack-security/183405 "2019-05-29T19:40:19Z")

</div>

We have a 3 node cluster with basic license setup. In elasticsearch.yml I have enabled "xpack.security.enabled: true" logs# curl -s 172.16.0.5:9200/\_xpack?pretty=true | grep -i security -A 5 "security" : { "descrip…

---

## [Cluster is down and master nodes are not coming up](https://discuss.elastic.co/t/cluster-is-down-and-master-nodes-are-not-coming-up/179441)

<div class="topic-metadata">

**Author:** [@mosiddi](https://discuss.elastic.co/u/mosiddi)\
**Replies:** 16\
**Last updated:** [May 29, 2019, 7:34pm UTC](https://discuss.elastic.co/t/cluster-is-down-and-master-nodes-are-not-coming-up/179441 "2019-05-29T19:34:17Z")

</div>

Looks like there was a connectivity issue due to which the nodes were not able to communicate with each other for some time and the cluster went into not available state. There are 3 master, 6 client and 156 data nodes.…

---

## [Filter match using a query](https://discuss.elastic.co/t/filter-match-using-a-query/183403)

<div class="topic-metadata">

**Author:** [@Paul\_Yeung](https://discuss.elastic.co/u/Paul_Yeung)\
**Replies:** 0\
**Last updated:** [May 29, 2019, 6:32pm UTC](https://discuss.elastic.co/t/filter-match-using-a-query/183403 "2019-05-29T18:32:12Z")

</div>

Hi there, I have the below query on a filter. There is also another query in the filter to makes up the filter. But it doesn't work at all. I mean the filter is not able use the names from "school" to filter on "male" t…

---

## [Source filtering ONLY on suggestions](https://discuss.elastic.co/t/source-filtering-only-on-suggestions/183401)

<div class="topic-metadata">

**Author:** [@leguma](https://discuss.elastic.co/u/leguma)\
**Replies:** 0\
**Last updated:** [May 29, 2019, 6:24pm UTC](https://discuss.elastic.co/t/source-filtering-only-on-suggestions/183401 "2019-05-29T18:24:33Z")

</div>

It seems very odd that source filtering is only allowed at the root of the \_search request. This should be legal: { "suggest": { "text": "A cool titl", "typeahead-suggest" : { "completion" :…

---

## [Shrink Index - add 'shrink' as a suffix](https://discuss.elastic.co/t/shrink-index-add-shrink-as-a-suffix/182982)

<div class="topic-metadata">

**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\
**Replies:** 5\
**Last updated:** [May 29, 2019, 5:02pm UTC](https://discuss.elastic.co/t/shrink-index-add-shrink-as-a-suffix/182982 "2019-05-29T17:02:37Z")

</div>

Hi, We recently enabled an ILM policy for our indices using the Kibana UI. We have enabled the shrink and force merge options as follows: The issue is, after rollover, the index (my-index-00001) is named as shrink-my…

---

## [Elasticsearch7.1.0 mappings problem](https://discuss.elastic.co/t/elasticsearch7-1-0-mappings-problem/183368)

<div class="topic-metadata">

**Author:** [@yymanager](https://discuss.elastic.co/u/yymanager)\
**Replies:** 1\
**Last updated:** [May 29, 2019, 4:58pm UTC](https://discuss.elastic.co/t/elasticsearch7-1-0-mappings-problem/183368 "2019-05-29T16:58:46Z")

</div>

{ "settings":{ "number\_of\_shards":3, "number\_of\_replicas":1 }, "mappings":{ "man":{ "properties":{ "name":{ "type":"text" }, "country":{ "type":"keyword" }, "age":{ "type":"integer" }, …

---

## [Scaling watchers to monitor a large number of environments](https://discuss.elastic.co/t/scaling-watchers-to-monitor-a-large-number-of-environments/183356)

<div class="topic-metadata">

**Author:** [@francisco.andrade](https://discuss.elastic.co/u/francisco.andrade)\
**Replies:** 0\
**Last updated:** [May 29, 2019, 2:12pm UTC](https://discuss.elastic.co/t/scaling-watchers-to-monitor-a-large-number-of-environments/183356 "2019-05-29T14:12:00Z")

</div>

Hi! Our organization is implementing a new monitor system and we want to use the Elastic Stack taking advantage of our previous experience using it as a log system for troubleshooting. Beside collect data, one of the …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1279)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1281)
