# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1303 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1304 --- ## [Change default shard](https://discuss.elastic.co/t/change-default-shard/180615)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 4\ **Last updated:** [May 10, 2019, 8:54pm UTC](https://discuss.elastic.co/t/change-default-shard/180615 "2019-05-10T20:54:41Z")
in old ELK default number of shard was 5. I upgraded to 7.0.1 and now it is set to 1. how do I change this to default 5? --- ## [Elasticsearch crashes before it starts](https://discuss.elastic.co/t/elasticsearch-crashes-before-it-starts/180252)
**Author:** [@Sophivorus](https://discuss.elastic.co/u/Sophivorus)\ **Replies:** 6\ **Last updated:** [May 10, 2019, 8:41pm UTC](https://discuss.elastic.co/t/elasticsearch-crashes-before-it-starts/180252 "2019-05-10T20:41:01Z")
I'm trying to install Elasticsearch 6.5 on my DreamHost VPS running Ubuntu 14.04 (the "old" version of Elasticsearch is because I'm interested in installing a MediaWiki extension that requires it). I downloaded and extr… --- ## [Search.max\_buckets limit error on 7.0.1](https://discuss.elastic.co/t/search-max-buckets-limit-error-on-7-0-1/179989)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [May 10, 2019, 8:39pm UTC](https://discuss.elastic.co/t/search-max-buckets-limit-error-on-7-0-1/179989 "2019-05-10T20:39:34Z")
I have just upgraded to 7.0.1 now I get this error. how do I change this value? "Trying to create too many buckets. Must be less than or equal to: \[10000\] but was \[10001\]. This limit can be set by changing the \[search… --- ## [How can I check the status of an email from a watch](https://discuss.elastic.co/t/how-can-i-check-the-status-of-an-email-from-a-watch/179587)
**Author:** [@drivera](https://discuss.elastic.co/u/drivera)\ **Replies:** 4\ **Last updated:** [May 10, 2019, 5:29pm UTC](https://discuss.elastic.co/t/how-can-i-check-the-status-of-an-email-from-a-watch/179587 "2019-05-10T17:29:09Z")
Running ES 5.6 . Trying to setup the watch below but not receiving any email. How can I check the status of the email? I don't see anything in the logs. The watch is monitoring that the cluster is in a green state. Do y… --- ## [Prevent deletion of index](https://discuss.elastic.co/t/prevent-deletion-of-index/180596)
**Author:** [@Abhinaw](https://discuss.elastic.co/u/Abhinaw)\ **Replies:** 3\ **Last updated:** [May 10, 2019, 7:48pm UTC](https://discuss.elastic.co/t/prevent-deletion-of-index/180596 "2019-05-10T19:48:04Z")
HI, 'I am using elasticsearch in ubuntu server , how to prevent deletion of indices. Basically i want to limit the user activity, if a user is not allowed than should not be able to delete index. I have seen this post … --- ## [Is it possible to grant \_system user more permissions?](https://discuss.elastic.co/t/is-it-possible-to-grant-system-user-more-permissions/180603)
**Author:** [@bff](https://discuss.elastic.co/u/bff)\ **Replies:** 2\ **Last updated:** [May 10, 2019, 7:25pm UTC](https://discuss.elastic.co/t/is-it-possible-to-grant-system-user-more-permissions/180603 "2019-05-10T19:25:39Z")
Hello, We have a plugin running in 6.4.3 that uses the node client to make a series of calls to the Elasticsearch API. When security is enabled I see the error: org.elasticsearch.ElasticsearchSecurityException: action… --- ## [Slow terms aggregation speed on ~130M documents](https://discuss.elastic.co/t/slow-terms-aggregation-speed-on-130m-documents/118759)
**Author:** [@jdgenio](https://discuss.elastic.co/u/jdgenio)\ **Replies:** 33\ **Last updated:** [May 10, 2019, 6:58pm UTC](https://discuss.elastic.co/t/slow-terms-aggregation-speed-on-130m-documents/118759 "2019-05-10T18:58:04Z")
Environment: ES version: 5.3 Data nodes: 3 We are trying to, through elasticsearch, provide users pregenerated suggestions based on the current dataset (130M documents). The target is to get all unique values of a cer… --- ## [Slow Terms Aggregation](https://discuss.elastic.co/t/slow-terms-aggregation/136182)
**Author:** [@DumpCat](https://discuss.elastic.co/u/DumpCat)\ **Replies:** 3\ **Last updated:** [May 10, 2019, 7:01pm UTC](https://discuss.elastic.co/t/slow-terms-aggregation/136182 "2019-05-10T19:01:55Z")
Hi, I hava a problem with es query and aggregation. All es record count is about 0.1 billion, before adding a terms aggregation, my query is fast, only cost 75ms and all hit count is 105. But after adding a aggregation, … --- ## [Spring boot data Elastic Cloud integration](https://discuss.elastic.co/t/spring-boot-data-elastic-cloud-integration/176383)
**Author:** [@dahlsdata](https://discuss.elastic.co/u/dahlsdata)\ **Replies:** 4\ **Last updated:** [May 10, 2019, 6:55pm UTC](https://discuss.elastic.co/t/spring-boot-data-elastic-cloud-integration/176383 "2019-05-10T18:55:05Z")
Hi, We are using spring-boot 2.1.4 with spring-data-elasticsearch-starter This worked perfectly to our self-installed ES cluster running without x-pack. ES version 6.5.2 Then we signed up for Elastic Cloud and got a t… --- ## [Query sort vs aggs sort?](https://discuss.elastic.co/t/query-sort-vs-aggs-sort/180261)
**Author:** [@LoveToTrance](https://discuss.elastic.co/u/LoveToTrance)\ **Replies:** 2\ **Last updated:** [May 10, 2019, 6:25pm UTC](https://discuss.elastic.co/t/query-sort-vs-aggs-sort/180261 "2019-05-10T18:25:01Z")
Hi, what would be the difference between sorting on the top level query vs in the aggs vs doing both? Here is a sample query { "size": 0, "from": 0, "query": { "bool": { "must": \[ … --- ## [Must include query Json payload for ElasticSearch](https://discuss.elastic.co/t/must-include-query-json-payload-for-elasticsearch/180414)
**Author:** [@Vincent\_Stevenson](https://discuss.elastic.co/u/Vincent_Stevenson)\ **Replies:** 2\ **Last updated:** [May 10, 2019, 5:55pm UTC](https://discuss.elastic.co/t/must-include-query-json-payload-for-elasticsearch/180414 "2019-05-10T17:55:22Z")
Hi, I have a database where I want to see which countries an organization exists in (one organization can exist in multiple countries like USA and Mexico). What would the correct Json syntax be if I wanted to see organi… --- ## [ElasticSearch High-level client response is getting delay?](https://discuss.elastic.co/t/elasticsearch-high-level-client-response-is-getting-delay/179657)
**Author:** [@aashrithVarikuti](https://discuss.elastic.co/u/aashrithVarikuti)\ **Replies:** 5\ **Last updated:** [May 10, 2019, 5:39pm UTC](https://discuss.elastic.co/t/elasticsearch-high-level-client-response-is-getting-delay/179657 "2019-05-10T17:39:49Z")
I am using high-level client version 6.3 version. Whenever I hitting request I am getting response very quickly and sometimes it's delaying. I am not seeing standard load time for the same request: SearchResponse Durati… --- ## [User "elasticsearch"](https://discuss.elastic.co/t/user-elasticsearch/180183)
**Author:** [@vatolin](https://discuss.elastic.co/u/vatolin)\ **Replies:** 3\ **Last updated:** [May 10, 2019, 5:01pm UTC](https://discuss.elastic.co/t/user-elasticsearch/180183 "2019-05-10T17:01:28Z")
I have learned elasticsearch won't run on a Raspberry Pi. So I've purged it by sudo apt-get purge elasticsearch Now I 've tried to upgrade PHP. But it has failed by an user elasticsearch: pi@raspberrypi:~ $ sudo apt-ge… --- ## [Is CONTAINS deprecated in 7.x?](https://discuss.elastic.co/t/is-contains-deprecated-in-7-x/180001)
**Author:** [@tstirrat](https://discuss.elastic.co/u/tstirrat)\ **Replies:** 2\ **Last updated:** [May 10, 2019, 4:36pm UTC](https://discuss.elastic.co/t/is-contains-deprecated-in-7-x/180001 "2019-05-10T16:36:37Z")
I found documentation here that still references CONTAINS, but also includes a deprecation notice. The following doctype declaration works: "bounding\_box": { "type": "geo\_sha… --- ## [Help with reindex() function](https://discuss.elastic.co/t/help-with-reindex-function/180587)
**Author:** [@Sergio\_Peral\_Aguiler](https://discuss.elastic.co/u/Sergio_Peral_Aguiler)\ **Replies:** 0\ **Last updated:** [May 10, 2019, 4:01pm UTC](https://discuss.elastic.co/t/help-with-reindex-function/180587 "2019-05-10T16:01:49Z")
Hi Elastic team, I'm trying to make a Python reindexing script using the Elasticsearch library, but I'm not sure how reindex() function should be used. The script would be executed by typing: python auto\_reindex YYYY.M… --- ## [Return only high quality results in ElasticSearch query](https://discuss.elastic.co/t/return-only-high-quality-results-in-elasticsearch-query/180033)
**Author:** [@Shreya\_Jain](https://discuss.elastic.co/u/Shreya_Jain)\ **Replies:** 1\ **Last updated:** [May 10, 2019, 4:01pm UTC](https://discuss.elastic.co/t/return-only-high-quality-results-in-elasticsearch-query/180033 "2019-05-10T16:01:01Z")
I'm sending search queries to my ES index and get multiple results back. A lot of times the results with lower scores are irrelevant and I want to remove these results and return only high-quality results (which mostly h… --- ## [Find most frequent users on basis of captureTime](https://discuss.elastic.co/t/find-most-frequent-users-on-basis-of-capturetime/180015)
**Author:** [@Rashmi\_Nagpal](https://discuss.elastic.co/u/Rashmi_Nagpal)\ **Replies:** 1\ **Last updated:** [May 10, 2019, 3:52pm UTC](https://discuss.elastic.co/t/find-most-frequent-users-on-basis-of-capturetime/180015 "2019-05-10T15:52:39Z")
I want to fire a query, which should return most frequent users data on the basis of attribute - "CaptureTime", which is an array of variable sizes\[of timestamp field\]. I can't perform "update by query" because of some … --- ## [Data Loss in Elasticsearch](https://discuss.elastic.co/t/data-loss-in-elasticsearch/180249)
**Author:** [@Vinay\_G](https://discuss.elastic.co/u/Vinay_G)\ **Replies:** 6\ **Last updated:** [May 10, 2019, 3:17pm UTC](https://discuss.elastic.co/t/data-loss-in-elasticsearch/180249 "2019-05-10T15:17:22Z")
Hi, I have a Realtime Streaming Application where we are Updating Elasticsearch index on realtime. Currently the issue we are facing is data loss in Elasticsearch, please see below example scenario explaining what happ… --- ## [How to call stored script from another script?](https://discuss.elastic.co/t/how-to-call-stored-script-from-another-script/179920)
**Author:** [@mhmtnlr](https://discuss.elastic.co/u/mhmtnlr)\ **Replies:** 1\ **Last updated:** [May 10, 2019, 2:46pm UTC](https://discuss.elastic.co/t/how-to-call-stored-script-from-another-script/179920 "2019-05-10T14:46:07Z")
Hey, I have a stored script which does some calculation and returns a number. I'm using it to populate a scripted field. And I need to use the pretty much same script for filtering out the results. Firstly, I try to acc… --- ## [How to convert date to a single type in a Painless script?](https://discuss.elastic.co/t/how-to-convert-date-to-a-single-type-in-a-painless-script/179948)
**Author:** [@Hohol](https://discuss.elastic.co/u/Hohol)\ **Replies:** 1\ **Last updated:** [May 10, 2019, 2:42pm UTC](https://discuss.elastic.co/t/how-to-convert-date-to-a-single-type-in-a-painless-script/179948 "2019-05-10T14:42:39Z")
It's required for https://github.com/elastic/kibana/pull/25379 I need to access a date field in a Painless script, but I don't know what its type is. I know there are at least two possible types - Long (epoch milliseco… --- ## [Get alerting from \_stats](https://discuss.elastic.co/t/get-alerting-from-stats/180542)
**Author:** [@simple\_commentateur](https://discuss.elastic.co/u/simple_commentateur)\ **Replies:** 3\ **Last updated:** [May 10, 2019, 2:13pm UTC](https://discuss.elastic.co/t/get-alerting-from-stats/180542 "2019-05-10T14:13:36Z")
Hello, I want to get alerts if the size of data stored exceeds a certain threshold : ... "total" : { "store" : { "size\_in\_bytes" : 984869969 } } ... I don't know how to get \_stats hit in watcher and get "size\_in… --- ## [Elastic Stack for workflow tracing architecture](https://discuss.elastic.co/t/elastic-stack-for-workflow-tracing-architecture/179204)
**Author:** [@ben.dixon](https://discuss.elastic.co/u/ben.dixon)\ **Replies:** 5\ **Last updated:** [May 10, 2019, 2:09pm UTC](https://discuss.elastic.co/t/elastic-stack-for-workflow-tracing-architecture/179204 "2019-05-10T14:09:15Z")
I'm relatively new to the Elastic world and am currently working on a project to track the amount of time it takes to complete various workflows in our system. The typical workflow will be initiated from a user interacti… --- ## [Unable to connect local kibana to remote elasticsearch running in AWS VPC](https://discuss.elastic.co/t/unable-to-connect-local-kibana-to-remote-elasticsearch-running-in-aws-vpc/180489)
**Author:** [@kpiyush](https://discuss.elastic.co/u/kpiyush)\ **Replies:** 4\ **Last updated:** [May 10, 2019, 2:05pm UTC](https://discuss.elastic.co/t/unable-to-connect-local-kibana-to-remote-elasticsearch-running-in-aws-vpc/180489 "2019-05-10T14:05:32Z")
Hi, I am running elasticsearch in vpc using amazon elasticsearch service. I used the following article to access elasticsearch locally. Using the article, I am able to access ES using https://localhost:9200 using cu… --- ## [Data Writing into WARM nodes along with HOT nodes](https://discuss.elastic.co/t/data-writing-into-warm-nodes-along-with-hot-nodes/180444)
**Author:** [@chandukreddi](https://discuss.elastic.co/u/chandukreddi)\ **Replies:** 1\ **Last updated:** [May 10, 2019, 1:30pm UTC](https://discuss.elastic.co/t/data-writing-into-warm-nodes-along-with-hot-nodes/180444 "2019-05-10T13:30:47Z")
Hello Experts, I noticed one thing while exploring HOT & WARM Architecture as per below blog. This is my node config Node-1 "cluster\_name" : "elk-test", "nodes" : { "szZvzywsRuGCTEzXhLU2-Q" : { "name" : "elk-1", … --- ## [Question on \`index\_phrases\` behavior](https://discuss.elastic.co/t/question-on-index-phrases-behavior/180439)
**Author:** [@loren](https://discuss.elastic.co/u/loren)\ **Replies:** 2\ **Last updated:** [May 10, 2019, 1:24pm UTC](https://discuss.elastic.co/t/question-on-index-phrases-behavior/180439 "2019-05-10T13:24:24Z")
I'm looking at using \[index\_phrases\](https://www.elastic.co/guide/en/elasticsearch/reference/master/index-phrases.html) instead of explicitly creating a subfield with shingles, but I'm a little confused on the behavior. … --- ## [org.elasticsearch.xpack.core.security.SecurityExtension on Elasticsearch 7](https://discuss.elastic.co/t/org-elasticsearch-xpack-core-security-securityextension-on-elasticsearch-7/180351)
**Author:** [@jensborch](https://discuss.elastic.co/u/jensborch)\ **Replies:** 1\ **Last updated:** [May 10, 2019, 11:57am UTC](https://discuss.elastic.co/t/org-elasticsearch-xpack-core-security-securityextension-on-elasticsearch-7/180351 "2019-05-10T11:57:29Z")
I seems that org.elasticsearch.plugin:x-pack-core is no longer available in Elasticsearch 7. Is it still possible to implement a security extension (ie. org.elasticsearch.xpack.core.security.SecurityExtension) on Elasti… --- ## [Parse ingest pipeline \_simulate](https://discuss.elastic.co/t/parse-ingest-pipeline-simulate/180499)
**Author:** [@fim](https://discuss.elastic.co/u/fim)\ **Replies:** 2\ **Last updated:** [May 10, 2019, 11:34am UTC](https://discuss.elastic.co/t/parse-ingest-pipeline-simulate/180499 "2019-05-10T11:34:38Z")
I'm fighting against an ingest pipeline which might not work. The solution must be simple but I lost track. The following simulation don't work. The Dev Tools in Kibana throws a "bad string" error. But why? POST \_inge… --- ## [How to create alert for multiple login attemps (failed attempts) for every 10mins](https://discuss.elastic.co/t/how-to-create-alert-for-multiple-login-attemps-failed-attempts-for-every-10mins/180518)
**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\ **Replies:** 1\ **Last updated:** [May 10, 2019, 11:27am UTC](https://discuss.elastic.co/t/how-to-create-alert-for-multiple-login-attemps-failed-attempts-for-every-10mins/180518 "2019-05-10T11:27:49Z")
This is my watcher configuration: PUT \_xpack/watcher/watch/my-watch2 { "trigger" : { "schedule" : { "interval" : "10s" } }, "input" : { "search" : { "request" : { "indices" : \[ "firewall" \], "body": { "siz… --- ## [Understanding maping features](https://discuss.elastic.co/t/understanding-maping-features/180541)
**Author:** [@th31nitiate](https://discuss.elastic.co/u/th31nitiate)\ **Replies:** 0\ **Last updated:** [May 10, 2019, 11:11am UTC](https://discuss.elastic.co/t/understanding-maping-features/180541 "2019-05-10T11:11:28Z")
So I have a particular data structure getting imported into elastic search via as JSON. The issue we have is that when it comes to nesting the data itself contains a field that is not easily indexable and we would like t… --- ## [Failed to list shard for shard\_store on node on big environments](https://discuss.elastic.co/t/failed-to-list-shard-for-shard-store-on-node-on-big-environments/179749)
**Author:** [@kley](https://discuss.elastic.co/u/kley)\ **Replies:** 6\ **Last updated:** [May 10, 2019, 10:56am UTC](https://discuss.elastic.co/t/failed-to-list-shard-for-shard-store-on-node-on-big-environments/179749 "2019-05-10T10:56:05Z")
Hi! Before I ask my question, i'll tell you how the environment looks like: We do have a test environment with 6 elasticsearch nodes. Indices are set to two replicas each. Datawise, we have ~5TB of data on each node. … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1302) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1304)