# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1302 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1303 --- ## [Setting up Multi-node Architecture of ELK for log monitoring](https://discuss.elastic.co/t/setting-up-multi-node-architecture-of-elk-for-log-monitoring/180707)
**Author:** [@Abhishek\_Dwivedi](https://discuss.elastic.co/u/Abhishek_Dwivedi)\ **Replies:** 5\ **Last updated:** [May 13, 2019, 5:34am UTC](https://discuss.elastic.co/t/setting-up-multi-node-architecture-of-elk-for-log-monitoring/180707 "2019-05-13T05:34:06Z")
Hi all, I have been taking care of ELK project for the last 2 years in my organization and had been running elasticsearch( version 6.x.x) and kibana as a part of our monitoring system. Recently we have to planned to … --- ## [Help modify response query elasticsearch](https://discuss.elastic.co/t/help-modify-response-query-elasticsearch/180726)
**Author:** [@Cyril1804](https://discuss.elastic.co/u/Cyril1804)\ **Replies:** 1\ **Last updated:** [May 13, 2019, 5:05am UTC](https://discuss.elastic.co/t/help-modify-response-query-elasticsearch/180726 "2019-05-13T05:05:16Z")
Hi all, I have a issue to modify response query.! Capture|258x500 \[Album\] Imgur … --- ## [Split Brain Scenario](https://discuss.elastic.co/t/split-brain-scenario/180658)
**Author:** [@Ganesh999](https://discuss.elastic.co/u/Ganesh999)\ **Replies:** 6\ **Last updated:** [May 13, 2019, 4:17am UTC](https://discuss.elastic.co/t/split-brain-scenario/180658 "2019-05-13T04:17:04Z")
Hi, We currently experienced split brain scenario in elasticsearch. After it happened we reseted the cluster setting and added that node to the cluster and did the required setting like master eligible node to 3 and min… --- ## [Alerting for multiple login failed in 10 minutes](https://discuss.elastic.co/t/alerting-for-multiple-login-failed-in-10-minutes/180502)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 2\ **Last updated:** [May 13, 2019, 3:50am UTC](https://discuss.elastic.co/t/alerting-for-multiple-login-failed-in-10-minutes/180502 "2019-05-13T03:50:22Z")
If there is multiple login failed in 10 minutes, how can I create alerting for it. Thanks, Regards --- ## [Monitoring ports in docker containers](https://discuss.elastic.co/t/monitoring-ports-in-docker-containers/179315)
**Author:** [@ksunil](https://discuss.elastic.co/u/ksunil)\ **Replies:** 3\ **Last updated:** [May 13, 2019, 3:14am UTC](https://discuss.elastic.co/t/monitoring-ports-in-docker-containers/179315 "2019-05-13T03:14:55Z")
Hi, I have few instances running on docker with ports 8080 and 8081. In kibana i create dashboard to monitor these ports but showing down and process is up and running on the server. --- ## [Ctx.payload.hits.hits not working](https://discuss.elastic.co/t/ctx-payload-hits-hits-not-working/180524)
**Author:** [@yagami23](https://discuss.elastic.co/u/yagami23)\ **Replies:** 2\ **Last updated:** [May 13, 2019, 2:09am UTC](https://discuss.elastic.co/t/ctx-payload-hits-hits-not-working/180524 "2019-05-13T02:09:24Z")
Hi, below is my watcher content, its not working when add in transform section into it, the whole looping for ctx.payload.hits.hits is not working, the email receive only showing " The alert condition for 'OSB - ni-ecomm… --- ## [How to take daily elasticaseach back ,we are using docker image ,kubernate and openshift](https://discuss.elastic.co/t/how-to-take-daily-elasticaseach-back-we-are-using-docker-image-kubernate-and-openshift/180694)
**Author:** [@Sanjeevk](https://discuss.elastic.co/u/Sanjeevk)\ **Replies:** 1\ **Last updated:** [May 13, 2019, 1:29am UTC](https://discuss.elastic.co/t/how-to-take-daily-elasticaseach-back-we-are-using-docker-image-kubernate-and-openshift/180694 "2019-05-13T01:29:46Z")
please anyone can help me to take elasticseach daily snapshot backup using daily cron job. --- ## [Image comparaison in ES](https://discuss.elastic.co/t/image-comparaison-in-es/180427)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 3\ **Last updated:** [May 12, 2019, 11:21pm UTC](https://discuss.elastic.co/t/image-comparaison-in-es/180427 "2019-05-12T23:21:49Z")
i can diplay image texte in kibana using fscrawler and teseract, but now i want to compare images and serach if a part in an image appears in the indexed images (like comparaison); is there any way to do that --- ## [River not ingesting data](https://discuss.elastic.co/t/river-not-ingesting-data/180657)
**Author:** [@KashiPashoria\_Tonny](https://discuss.elastic.co/u/KashiPashoria_Tonny)\ **Replies:** 4\ **Last updated:** [May 12, 2019, 11:19pm UTC](https://discuss.elastic.co/t/river-not-ingesting-data/180657 "2019-05-12T23:19:53Z")
I've elasticsearch 1.5 cluster. I was using river to ingest data in an index. I need to update the query in river. I deleted the river and created a new one but it doesn't ingest data in that index anymore. I've tested t… --- ## [Is there a way for Elasticsearch to initiate a spark job?](https://discuss.elastic.co/t/is-there-a-way-for-elasticsearch-to-initiate-a-spark-job/180714)
**Author:** [@NadavKal](https://discuss.elastic.co/u/NadavKal)\ **Replies:** 1\ **Last updated:** [May 12, 2019, 8:01pm UTC](https://discuss.elastic.co/t/is-there-a-way-for-elasticsearch-to-initiate-a-spark-job/180714 "2019-05-12T20:01:16Z")
i'm looking for a way for elastic to generate a spark job which will perform aggregations and write them back to elasticsearch and for them to be available for kibana to display. we're using kibana as a BI platform for … --- ## [How to bind searchResult from ElasticSearch into Gridview (C# ASP.NET) by using NEST](https://discuss.elastic.co/t/how-to-bind-searchresult-from-elasticsearch-into-gridview-c-asp-net-by-using-nest/180649)
**Author:** [@LawrenceSPK](https://discuss.elastic.co/u/LawrenceSPK)\ **Replies:** 1\ **Last updated:** [May 12, 2019, 5:29pm UTC](https://discuss.elastic.co/t/how-to-bind-searchresult-from-elasticsearch-into-gridview-c-asp-net-by-using-nest/180649 "2019-05-12T17:29:47Z")
I need to bind the search result from NEST (ElasticSearch) to a Gridview in ASP.NET (Webform). Code I get the result from ElasticSearch from using NEST: public class Address { public int SN { get; set; } publ… --- ## [I didnt find any way to serach images in elasticsearch and kibana](https://discuss.elastic.co/t/i-didnt-find-any-way-to-serach-images-in-elasticsearch-and-kibana/180699)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 0\ **Last updated:** [May 12, 2019, 3:28pm UTC](https://discuss.elastic.co/t/i-didnt-find-any-way-to-serach-images-in-elasticsearch-and-kibana/180699 "2019-05-12T15:28:38Z")
i am using elasticserach,kibana and fscrawler and until now i didnt find any method to serach indexed images (serach similar images) it is an important neeed can yu show me how ?? --- ## [Is it possible to Label Encode ES values in order to save space and increase speed?](https://discuss.elastic.co/t/is-it-possible-to-label-encode-es-values-in-order-to-save-space-and-increase-speed/180688)
**Author:** [@NadavKal](https://discuss.elastic.co/u/NadavKal)\ **Replies:** 2\ **Last updated:** [May 12, 2019, 5:16pm UTC](https://discuss.elastic.co/t/is-it-possible-to-label-encode-es-values-in-order-to-save-space-and-increase-speed/180688 "2019-05-12T17:16:20Z")
is there a way to "label encode" a field ("value" ==\> 1), only for it to be decoded in kibana display (1 ==\> "value") ? --- ## [Is it possible to extract text from audio files MP3](https://discuss.elastic.co/t/is-it-possible-to-extract-text-from-audio-files-mp3/180705)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 0\ **Last updated:** [May 12, 2019, 4:43pm UTC](https://discuss.elastic.co/t/is-it-possible-to-extract-text-from-audio-files-mp3/180705 "2019-05-12T16:43:28Z")
i am using tesseract-ocr to extract text from images and see the text in kibana, but i want to know if it is possible to extract words text from audio and diplay it in kibana thank you --- ## [Composite aggregations track\_total\_hits](https://discuss.elastic.co/t/composite-aggregations-track-total-hits/180500)
**Author:** [@klaus82](https://discuss.elastic.co/u/klaus82)\ **Replies:** 2\ **Last updated:** [May 12, 2019, 1:07pm UTC](https://discuss.elastic.co/t/composite-aggregations-track-total-hits/180500 "2019-05-12T13:07:44Z")
Hi all, For me is not clear what are the differences and when use: track\_total\_hits, search.max\_buckets and size in particular for composite aggregations. Can someone help? Thanks in advance --- ## [Best practices: CPU core count vs. no. active shards per node](https://discuss.elastic.co/t/best-practices-cpu-core-count-vs-no-active-shards-per-node/180638)
**Author:** [@IanRC72](https://discuss.elastic.co/u/IanRC72)\ **Replies:** 19\ **Last updated:** [May 12, 2019, 12:02pm UTC](https://discuss.elastic.co/t/best-practices-cpu-core-count-vs-no-active-shards-per-node/180638 "2019-05-12T12:02:55Z")
I've been reading Amazon's ES best practices guide here. Crunching the numbers, they are suggesting 2.56 cores per active shard. This reference recommends a 1:1 ratio. What does Elastic say about this? If I have say 1… --- ## [Adjusting threadpool queue size to reduce number rof rejected operations](https://discuss.elastic.co/t/adjusting-threadpool-queue-size-to-reduce-number-rof-rejected-operations/180623)
**Author:** [@michele\_crudele](https://discuss.elastic.co/u/michele_crudele)\ **Replies:** 14\ **Last updated:** [May 12, 2019, 11:10am UTC](https://discuss.elastic.co/t/adjusting-threadpool-queue-size-to-reduce-number-rof-rejected-operations/180623 "2019-05-12T11:10:08Z")
I'm looking for suggested values of threadpools possibly based on deployments size. More specifically, is there any suggested configuration for threadpools for a deployment like this? 6 nodes Elasticsearch 5.6 deploymen… --- ## [Can we have add/remove alias option in any phase of ILM?](https://discuss.elastic.co/t/can-we-have-add-remove-alias-option-in-any-phase-of-ilm/180685)
**Author:** [@Hitesh\_Baldaniya1](https://discuss.elastic.co/u/Hitesh_Baldaniya1)\ **Replies:** 0\ **Last updated:** [May 12, 2019, 7:19am UTC](https://discuss.elastic.co/t/can-we-have-add-remove-alias-option-in-any-phase-of-ilm/180685 "2019-05-12T07:19:47Z")
Hello All, In ILM policy of Elasticsearch, there are 4 phases and based on phases each have different actions. Is it possible to add more requests for actions like adding/removing aliases? Such requirements will be lik… --- ## [Add a field to json body when indexing](https://discuss.elastic.co/t/add-a-field-to-json-body-when-indexing/180339)
**Author:** [@davidbien](https://discuss.elastic.co/u/davidbien)\ **Replies:** 10\ **Last updated:** [May 12, 2019, 6:28am UTC](https://discuss.elastic.co/t/add-a-field-to-json-body-when-indexing/180339 "2019-05-12T06:28:36Z")
I have a lambda function which sends cloudtrail logs to elasticsearch whenever new data arrives in a bucket. This works fine, however I would like to add one extra field that is not found in standard cloudtrail logs. Thi… --- ## [Case-Insensitive regex-based search for text fields in ES 5.6.3](https://discuss.elastic.co/t/case-insensitive-regex-based-search-for-text-fields-in-es-5-6-3/180681)
**Author:** [@Umang\_Mishra](https://discuss.elastic.co/u/Umang_Mishra)\ **Replies:** 0\ **Last updated:** [May 12, 2019, 5:36am UTC](https://discuss.elastic.co/t/case-insensitive-regex-based-search-for-text-fields-in-es-5-6-3/180681 "2019-05-12T05:36:11Z")
I am trying to perform regex-based, case-insensitive search for text field. Here is my settings and mapping details. { "settings":{ "analysis":{ "analyzer":{ "text\_analyzer":{ "type":"custom", "tokenizer":"standa… --- ## [Working example for template based cluster deployment via REST API?](https://discuss.elastic.co/t/working-example-for-template-based-cluster-deployment-via-rest-api/180674)
**Author:** [@apaulsen](https://discuss.elastic.co/u/apaulsen)\ **Replies:** 0\ **Last updated:** [May 11, 2019, 10:04pm UTC](https://discuss.elastic.co/t/working-example-for-template-based-cluster-deployment-via-rest-api/180674 "2019-05-11T22:04:01Z")
I've created a custom Deployment template based on a custom Instance configuration. If I deploy a new cluster via UI it works. How can I create a new cluster based on my custom template vis REST API? I can't find a wo… --- ## [Starting elasticsearh.service gives : No such file or directory](https://discuss.elastic.co/t/starting-elasticsearh-service-gives-no-such-file-or-directory/180651)
**Author:** [@RRSR](https://discuss.elastic.co/u/RRSR)\ **Replies:** 1\ **Last updated:** [May 11, 2019, 9:50pm UTC](https://discuss.elastic.co/t/starting-elasticsearh-service-gives-no-such-file-or-directory/180651 "2019-05-11T21:50:43Z")
Hi all, My elasticsearch instance crashed all of a sudden and when I try to restart the elasticsearh.service it gives: Redirecting to /bin/systemctl status elasticsearh.service ● elasticsearh.service Loaded: not-found… --- ## [Two characters consider as one](https://discuss.elastic.co/t/two-characters-consider-as-one/180671)
**Author:** [@ali\_fazeli](https://discuss.elastic.co/u/ali_fazeli)\ **Replies:** 0\ **Last updated:** [May 11, 2019, 9:18pm UTC](https://discuss.elastic.co/t/two-characters-consider-as-one/180671 "2019-05-11T21:18:46Z")
Hi I have an elasticsearch server v.6.3 and an index of 100,000 posts of my wordpress site. My contents is in arabic and persian languages. My problem is that arabic and persian have similars characters that are not r… --- ## [Why my bulk request not using all cpus of others node?](https://discuss.elastic.co/t/why-my-bulk-request-not-using-all-cpus-of-others-node/180285)
**Author:** [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\ **Replies:** 26\ **Last updated:** [May 11, 2019, 8:35pm UTC](https://discuss.elastic.co/t/why-my-bulk-request-not-using-all-cpus-of-others-node/180285 "2019-05-11T20:35:04Z")
Hi Team, Below is my output of thread pool. I dont know why my only one node'cpu is being use for bulk request. curl -X GET "myhost:9200/\_cat/thread\_pool/?v" node\_name name active queue rejected node… --- ## [Cluster initial](https://discuss.elastic.co/t/cluster-initial/180667)
**Author:** [@Santi\_Santi](https://discuss.elastic.co/u/Santi_Santi)\ **Replies:** 0\ **Last updated:** [May 11, 2019, 5:53pm UTC](https://discuss.elastic.co/t/cluster-initial/180667 "2019-05-11T17:53:21Z")
Hi community, I'm starting a new cluster but I need yo help you about a couple questions, such as: How I create a new cluster in base a node-master and data-node?. So I need know the limitations of cluster, for exampl… --- ## [Elasticsearch is not running on linux](https://discuss.elastic.co/t/elasticsearch-is-not-running-on-linux/180659)
**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\ **Replies:** 2\ **Last updated:** [May 11, 2019, 4:09pm UTC](https://discuss.elastic.co/t/elasticsearch-is-not-running-on-linux/180659 "2019-05-11T16:09:25Z")
i am running elasticsearch-7.0.0 as ./elasticsearch on linux and getting below error. it was working file till yesterday. \[2019-05-11T15:51:43.284+0000\]\[341528\]\[safepoint \] Application time: 0.0000275 seconds \[2019… --- ## [I cant access S3 repo CEPH using repository-s3](https://discuss.elastic.co/t/i-cant-access-s3-repo-ceph-using-repository-s3/180621)
**Author:** [@Marcio\_Roberto\_Miran](https://discuss.elastic.co/u/Marcio_Roberto_Miran)\ **Replies:** 1\ **Last updated:** [May 11, 2019, 7:21am UTC](https://discuss.elastic.co/t/i-cant-access-s3-repo-ceph-using-repository-s3/180621 "2019-05-11T07:21:25Z")
Hi, im using the elasticsearch oss 6.4.3 and repository-s3. I want send my snapshots to a CEPH repository. My problem is i cant send, always is returned a error. IMO the pluging try create repository in amazon and not a… --- ## [Select and Update matching docs](https://discuss.elastic.co/t/select-and-update-matching-docs/180038)
**Author:** [@han1](https://discuss.elastic.co/u/han1)\ **Replies:** 7\ **Last updated:** [May 11, 2019, 1:56am UTC](https://discuss.elastic.co/t/select-and-update-matching-docs/180038 "2019-05-11T01:56:59Z")
Hi. We are trying to do the following and any help would be appreciated. Say you make a search and 100,000 documents match. We would like to increment a counter in each document that matched. Then at the same time sel… --- ## [Curator error when shrinking](https://discuss.elastic.co/t/curator-error-when-shrinking/180210)
**Author:** [@ramzey1981](https://discuss.elastic.co/u/ramzey1981)\ **Replies:** 11\ **Last updated:** [May 10, 2019, 10:01pm UTC](https://discuss.elastic.co/t/curator-error-when-shrinking/180210 "2019-05-10T22:01:17Z")
I am getting the following error message when shrinking 4 indexes via curator, I really can't tell from the DEBUG about if this is a python issue or a elasticsearch load issue, 2019-05-08 02:41:35,249 ERROR … --- ## [Help on curator](https://discuss.elastic.co/t/help-on-curator/179953)
**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Replies:** 5\ **Last updated:** [May 10, 2019, 9:59pm UTC](https://discuss.elastic.co/t/help-on-curator/179953 "2019-05-10T21:59:42Z")
I am bit confuse here!!!!!with the help of curator we actually delete the indices or we can delete the old documents from our indices???? [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1301) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1303)