# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1351 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1352 --- ## [Map absolute values to relative ones and store them in a new (transient) field](https://discuss.elastic.co/t/map-absolute-values-to-relative-ones-and-store-them-in-a-new-transient-field/174175)
**Author:** [@avduka](https://discuss.elastic.co/u/avduka)\ **Replies:** 0\ **Last updated:** [March 27, 2019, 4:44pm UTC](https://discuss.elastic.co/t/map-absolute-values-to-relative-ones-and-store-them-in-a-new-transient-field/174175 "2019-03-27T16:44:19Z")
Hello guys, I have recently gotten a requirement for an existing search functionality. I have gone through the official docs but haven't found a functionality which would work for this specific use case. In my index, t… --- ## [How to check number of threads used for Elasticseach indexing ,searching,merging](https://discuss.elastic.co/t/how-to-check-number-of-threads-used-for-elasticseach-indexing-searching-merging/174247)
**Author:** [@suvarna](https://discuss.elastic.co/u/suvarna)\ **Replies:** 1\ **Last updated:** [March 28, 2019, 6:38am UTC](https://discuss.elastic.co/t/how-to-check-number-of-threads-used-for-elasticseach-indexing-searching-merging/174247 "2019-03-28T06:38:55Z")
Hi I have started the Elasticsearch instance on 127.0.0.1:9200 . Started the rally with below command.. esrally --track=noaa --pipeline=benchmark-only --target-hosts=127.0.0.1:9200 --report-file=/LUCENE/rally\_reports/… --- ## [Queryable Frozen Indices](https://discuss.elastic.co/t/queryable-frozen-indices/174205)
**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\ **Replies:** 3\ **Last updated:** [March 28, 2019, 6:17am UTC](https://discuss.elastic.co/t/queryable-frozen-indices/174205 "2019-03-28T06:17:43Z")
The Elastic documentation: https://www.elastic.co/guide/en/elasticsearch/reference/current/frozen-indices.html States that frozen indices can be queried. I can curl Elasticsearch and return data from a frozen index, bu… --- ## [Using 6.6.1 docker image - strange settings for Xmx / Xms](https://discuss.elastic.co/t/using-6-6-1-docker-image-strange-settings-for-xmx-xms/174232)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 0\ **Last updated:** [March 28, 2019, 4:10am UTC](https://discuss.elastic.co/t/using-6-6-1-docker-image-strange-settings-for-xmx-xms/174232 "2019-03-28T04:10:11Z")
Im trying to bring up a cluster in kubernetes. Having issues getting anything like the kind of performance I would expect (these are big k8 machines with nothing else running). Looking at the elastic processes running on… --- ## [Connection Error while writing](https://discuss.elastic.co/t/connection-error-while-writing/174226)
**Author:** [@rajatbassi](https://discuss.elastic.co/u/rajatbassi)\ **Replies:** 0\ **Last updated:** [March 28, 2019, 3:40am UTC](https://discuss.elastic.co/t/connection-error-while-writing/174226 "2019-03-28T03:40:38Z")
Hi, During ES Write operations getting Connection Error, that seems to be because of huge data size being transferred from one node to other over network. Please suggest how to limit data packet size. PSB more details: … --- ## [How to freeze only certain indices with Freeze Index API](https://discuss.elastic.co/t/how-to-freeze-only-certain-indices-with-freeze-index-api/173654)
**Author:** [@mhasanbulli](https://discuss.elastic.co/u/mhasanbulli)\ **Replies:** 2\ **Last updated:** [March 28, 2019, 12:53am UTC](https://discuss.elastic.co/t/how-to-freeze-only-certain-indices-with-freeze-index-api/173654 "2019-03-28T00:53:11Z")
Hello, I am looking into freezing some of the indices in our cluster. Is there a way to freeze only specific range of indices? For example, those that are earlier than 2019. I tried to use freeze with range query but en… --- ## [Geohash\_grid in composite aggregation](https://discuss.elastic.co/t/geohash-grid-in-composite-aggregation/174193)
**Author:** [@sushmamagesh](https://discuss.elastic.co/u/sushmamagesh)\ **Replies:** 1\ **Last updated:** [March 28, 2019, 12:29am UTC](https://discuss.elastic.co/t/geohash-grid-in-composite-aggregation/174193 "2019-03-28T00:29:00Z")
Hi Is it possible to use geohash grid as part of a composite aggregation? Getting error - "type": "x\_content\_parse\_exception", "reason": "\[7:38\] \[composite\] failed to parse field \[sources\]" and "type": "parsing\_exc… --- ## [Elastic search is stopping](https://discuss.elastic.co/t/elastic-search-is-stopping/174212)
**Author:** [@arjunawc](https://discuss.elastic.co/u/arjunawc)\ **Replies:** 3\ **Last updated:** [March 28, 2019, 12:03am UTC](https://discuss.elastic.co/t/elastic-search-is-stopping/174212 "2019-03-28T00:03:43Z")
Hi, ES service is stopping after few seconds when starting. This is the log file I'm getting. \[2019-03-28T12:12:01,814\]\[INFO \]\[o.e.n.Node \] \[280bgZB\] starting ... \[2019-03-28T12:12:02,014\]\[ERROR\]\[o.e.b.… --- ## [Puppet-elasticsearch module not deploying elasticsearch.yml](https://discuss.elastic.co/t/puppet-elasticsearch-module-not-deploying-elasticsearch-yml/174015)
**Author:** [@Alex\_L](https://discuss.elastic.co/u/Alex_L)\ **Replies:** 6\ **Last updated:** [March 27, 2019, 10:55pm UTC](https://discuss.elastic.co/t/puppet-elasticsearch-module-not-deploying-elasticsearch-yml/174015 "2019-03-27T22:55:15Z")
I am trying to manage the elasticsearch.yml file at the default location of /etc/elasticsearch/elasticsearch.yml The following works fine, but isn't what I want: class { 'elasticsearch': version =\> '6.2.4', sta… --- ## [Puppet-elasticsearch service reports as started, but isn't started](https://discuss.elastic.co/t/puppet-elasticsearch-service-reports-as-started-but-isnt-started/174096)
**Author:** [@Alex\_L](https://discuss.elastic.co/u/Alex_L)\ **Replies:** 4\ **Last updated:** [March 27, 2019, 10:53pm UTC](https://discuss.elastic.co/t/puppet-elasticsearch-service-reports-as-started-but-isnt-started/174096 "2019-03-27T22:53:24Z")
I have created a manifest to install and configure elasticsearch via the puppetmodule that is referenced in the official documentation Everything is installed fine, but the service isn't started even though it should … --- ## [Looping through a logstash event in painless](https://discuss.elastic.co/t/looping-through-a-logstash-event-in-painless/174204)
**Author:** [@luksi1](https://discuss.elastic.co/u/luksi1)\ **Replies:** 0\ **Last updated:** [March 27, 2019, 9:09pm UTC](https://discuss.elastic.co/t/looping-through-a-logstash-event-in-painless/174204 "2019-03-27T21:09:52Z")
I'm attempting to loop through an event in the output elasticsearch plugin. I would like to be able to loop through a nested hash and add that information to the document. Right now I'm just grasping at straws... Loopi… --- ## [3 big indices with very slow query](https://discuss.elastic.co/t/3-big-indices-with-very-slow-query/172594)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 19\ **Last updated:** [March 27, 2019, 8:43pm UTC](https://discuss.elastic.co/t/3-big-indices-with-very-slow-query/172594 "2019-03-27T20:43:07Z")
I have 3 big indices (logs\_2016, logs\_2017 and logs\_2018). They are about 200gb size and 200000000 docs count. I'm doing 99% of my queries by parameter user\_id. Here's the mapping for logs\_2017 e.g.: { "logs\_2017": { … --- ## [CORS error when attempting to access Kibana/ElasticSearch URL](https://discuss.elastic.co/t/cors-error-when-attempting-to-access-kibana-elasticsearch-url/174201)
**Author:** [@Kehinde\_Owens](https://discuss.elastic.co/u/Kehinde_Owens)\ **Replies:** 0\ **Last updated:** [March 27, 2019, 8:29pm UTC](https://discuss.elastic.co/t/cors-error-when-attempting-to-access-kibana-elasticsearch-url/174201 "2019-03-27T20:29:17Z")
Hello, I'm dealing with an issue in which i'm trying to make a call to my Kibana URL from my localhost and it's being blocked. The error is Response to preflight request doesn't pass access control check: The value of … --- ## [Elasticsearch ILM Features](https://discuss.elastic.co/t/elasticsearch-ilm-features/174188)
**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\ **Replies:** 1\ **Last updated:** [March 27, 2019, 7:10pm UTC](https://discuss.elastic.co/t/elasticsearch-ilm-features/174188 "2019-03-27T19:10:09Z")
Does anyone happen to know within the cold ILM phase, is it possible to allocate and freeze at different time intervals? In other words allocate to cold nodes at X days and then freeze the index at Y days? --- ## [Location of ILM logs](https://discuss.elastic.co/t/location-of-ilm-logs/174180)
**Author:** [@mikemadden42](https://discuss.elastic.co/u/mikemadden42)\ **Replies:** 2\ **Last updated:** [March 27, 2019, 7:02pm UTC](https://discuss.elastic.co/t/location-of-ilm-logs/174180 "2019-03-27T19:02:51Z")
We've started setting up ILM in our Elastic Stack 6.6.1 cluster. I was wondering where ILM actions are logged. For example, if I setup ILM to delete certain indices older than 2 weeks, where can I see which indices whe… --- ## [Help| setup cluster on same mac](https://discuss.elastic.co/t/help-setup-cluster-on-same-mac/173806)
**Author:** [@vijaykriishna](https://discuss.elastic.co/u/vijaykriishna)\ **Replies:** 11\ **Last updated:** [March 27, 2019, 5:08pm UTC](https://discuss.elastic.co/t/help-setup-cluster-on-same-mac/173806 "2019-03-27T17:08:14Z")
Hello I want to set up cluster on the same machine I use for development purpose. After going though earlier posts, I found that setting node.max\_local\_storage\_nodes property with \>1 creates those many number of nodes l… --- ## [Elasticsearch Query String Query | Escaping double quotes](https://discuss.elastic.co/t/elasticsearch-query-string-query-escaping-double-quotes/173917)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 2\ **Last updated:** [March 27, 2019, 4:48pm UTC](https://discuss.elastic.co/t/elasticsearch-query-string-query-escaping-double-quotes/173917 "2019-03-27T16:48:48Z")
Hi, I am finding difficulties in searching over characters like double quotes using query string query. I have indexed a single document with the default standard analyzer. { "key" : " \\" " } My search query is : {… --- ## [Elasticsearch upgrade from 5.5 to 7](https://discuss.elastic.co/t/elasticsearch-upgrade-from-5-5-to-7/174163)
**Author:** [@Askia\_Mohamed\_Kadri](https://discuss.elastic.co/u/Askia_Mohamed_Kadri)\ **Replies:** 4\ **Last updated:** [March 27, 2019, 4:40pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-5-5-to-7/174163 "2019-03-27T16:40:02Z")
Hi everybody, We are using an old version of Elastic Stack (Elasticsearch, Logstash, Filebeat and Kibana) that we wanted to upgrade to lastest version (6.7) released yesterday (26/03). But we were wondering if we wouldn… --- ## [Count and visualize field cardinality greater than a given number](https://discuss.elastic.co/t/count-and-visualize-field-cardinality-greater-than-a-given-number/174171)
**Author:** [@elk\_user188](https://discuss.elastic.co/u/elk_user188)\ **Replies:** 0\ **Last updated:** [March 27, 2019, 4:15pm UTC](https://discuss.elastic.co/t/count-and-visualize-field-cardinality-greater-than-a-given-number/174171 "2019-03-27T16:15:11Z")
Hi there! Here's my question: let's say I have some documents with two fields FIELD\_1 and FIELD\_2. It might occur that for a certain FIELD\_1, there are more than one FIELD\_2 associated, so that some entries might be l… --- ## [addHighlightedField(java.lang.String) depricated from SearchRequestBuilder api in ES v5.6.2](https://discuss.elastic.co/t/addhighlightedfield-java-lang-string-depricated-from-searchrequestbuilder-api-in-es-v5-6-2/174152)
**Author:** [@utkarsh](https://discuss.elastic.co/u/utkarsh)\ **Replies:** 1\ **Last updated:** [March 27, 2019, 4:14pm UTC](https://discuss.elastic.co/t/addhighlightedfield-java-lang-string-depricated-from-searchrequestbuilder-api-in-es-v5-6-2/174152 "2019-03-27T16:14:40Z")
I am upgrading ES from v2.3.3 to v5.6.2. Given below is the code written using api in v2.3.3- SearchRequestBuilder searchBuilder = getSearchRequestBuilder().setQuery(query).setPostFilter(filterBuilder).setFetchSource(nu… --- ## [Multi\_match with no fields param try to match on not indexed fields, does it affect performance?](https://discuss.elastic.co/t/multi-match-with-no-fields-param-try-to-match-on-not-indexed-fields-does-it-affect-performance/174160)
**Author:** [@aspacca-gfg](https://discuss.elastic.co/u/aspacca-gfg)\ **Replies:** 0\ **Last updated:** [March 27, 2019, 3:21pm UTC](https://discuss.elastic.co/t/multi-match-with-no-fields-param-try-to-match-on-not-indexed-fields-does-it-affect-performance/174160 "2019-03-27T15:21:45Z")
Hello, I've a query with a multi\_match condition where I specify only the term and not the fields param {"profile":true,"from":0,"query":{"multi\_match":{"query":"test"}},"size":10} In the profile output I can see a lo… --- ## [How to boost higher ngrams?](https://discuss.elastic.co/t/how-to-boost-higher-ngrams/174159)
**Author:** [@xxviktor](https://discuss.elastic.co/u/xxviktor)\ **Replies:** 0\ **Last updated:** [March 27, 2019, 3:13pm UTC](https://discuss.elastic.co/t/how-to-boost-higher-ngrams/174159 "2019-03-27T15:13:06Z")
Hi, I am working on index where I need to provide results even for one letter search. Default tokenizer is currently set to ngram with range from 1 to 5. My search query is running across multiple fields and for some en… --- ## [Xpack.monitoring ExportException: failed to flush export bulks](https://discuss.elastic.co/t/xpack-monitoring-exportexception-failed-to-flush-export-bulks/174064)
**Author:** [@Michake](https://discuss.elastic.co/u/Michake)\ **Replies:** 1\ **Last updated:** [March 27, 2019, 2:37pm UTC](https://discuss.elastic.co/t/xpack-monitoring-exportexception-failed-to-flush-export-bulks/174064 "2019-03-27T14:37:51Z")
Hi team We have multiple clusters that export monitoring data to a remote cluster. All nodes were reporting timeouts when connecting to the monitoring cluster, some of the nodes with hight CPU uage(close to 100%), the… --- ## [Curator\_cli, indices, and a new server to me](https://discuss.elastic.co/t/curator-cli-indices-and-a-new-server-to-me/174138)
**Author:** [@bithead008](https://discuss.elastic.co/u/bithead008)\ **Replies:** 1\ **Last updated:** [March 27, 2019, 2:16pm UTC](https://discuss.elastic.co/t/curator-cli-indices-and-a-new-server-to-me/174138 "2019-03-27T14:16:22Z")
I turned on debug output because the indices don't seem to be getting cleaned and the machine is running out of disk space. This machine was restored from a backup and I believe that it wasn't quiesced so perhaps Elastic… --- ## [Index update events](https://discuss.elastic.co/t/index-update-events/174106)
**Author:** [@bert\_vervaele](https://discuss.elastic.co/u/bert_vervaele)\ **Replies:** 1\ **Last updated:** [March 27, 2019, 1:52pm UTC](https://discuss.elastic.co/t/index-update-events/174106 "2019-03-27T13:52:00Z")
Hey all, I was wondering if there is a way you can subscribe to a certain index and get events when something changes in the index? For example a doc is added or removed I would like to subscribe to such a things. Kin… --- ## ["non-retryable exception" and "no such index" errors](https://discuss.elastic.co/t/non-retryable-exception-and-no-such-index-errors/174130)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 0\ **Last updated:** [March 27, 2019, 1:10pm UTC](https://discuss.elastic.co/t/non-retryable-exception-and-no-such-index-errors/174130 "2019-03-27T13:10:12Z")
I get the following errors in my elasticsearch log: \[2019-03-06T03:47:45,952\]\[DEBUG\]\[o.e.a.b.TransportShardBulkAction\] \[streamname\]\[1\] failed to execute bulk item (index) BulkShardRequest \[\[streamname\]\[1\]\] containing \[… --- ## [Question on CCR feature on Elasticsearch 6.7](https://discuss.elastic.co/t/question-on-ccr-feature-on-elasticsearch-6-7/174062)
**Author:** [@Vikas\_Mestry](https://discuss.elastic.co/u/Vikas_Mestry)\ **Replies:** 13\ **Last updated:** [March 27, 2019, 1:21pm UTC](https://discuss.elastic.co/t/question-on-ccr-feature-on-elasticsearch-6-7/174062 "2019-03-27T13:21:14Z")
Hello, I had a quick question on CCR feature which is now GA in 6.7, based on the documentations & presentations available, we can now create two different clusters in two different regions, so going by this ideology. I… --- ## [Index.blocks.read\_only\_allow\_delete becomes true even if water mark is reached in one of the node in the cluster](https://discuss.elastic.co/t/index-blocks-read-only-allow-delete-becomes-true-even-if-water-mark-is-reached-in-one-of-the-node-in-the-cluster/174048)
**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\ **Replies:** 6\ **Last updated:** [March 27, 2019, 1:09pm UTC](https://discuss.elastic.co/t/index-blocks-read-only-allow-delete-becomes-true-even-if-water-mark-is-reached-in-one-of-the-node-in-the-cluster/174048 "2019-03-27T13:09:43Z")
I have multiple data nodes in my cluster with uneven disk capacities. While the data is being continuously being indexed, some nodes reach the 90% watermark (other nodes in the cluster do have sufficient remaining disk s… --- ## [Java spring boot API effect, elastic search IO performance?](https://discuss.elastic.co/t/java-spring-boot-api-effect-elastic-search-io-performance/174074)
**Author:** [@Ahmet\_Ozkul](https://discuss.elastic.co/u/Ahmet_Ozkul)\ **Replies:** 1\ **Last updated:** [March 27, 2019, 12:02pm UTC](https://discuss.elastic.co/t/java-spring-boot-api-effect-elastic-search-io-performance/174074 "2019-03-27T12:02:32Z")
I asked this question in stack over but I think asking from here is better. We developed a Java API to communicate with elastic search. We are sending post requests to API and it is checking data with elastic index and … --- ## [Refuse field type change in mapping](https://discuss.elastic.co/t/refuse-field-type-change-in-mapping/173059)
**Author:** [@mortenb123](https://discuss.elastic.co/u/mortenb123)\ **Replies:** 2\ **Last updated:** [March 27, 2019, 10:43am UTC](https://discuss.elastic.co/t/refuse-field-type-change-in-mapping/173059 "2019-03-27T10:43:58Z")
Hi Is it possible to ignore data not passing the mapping, like date type for @timestamp. It messes up my index pattern where 99% is all fine. Most of my index mappings looks like these, which are fine: { "mapping": { … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1350) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1352)