# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1415 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1416 --- ## [Matching phrase (one of many in single field)](https://discuss.elastic.co/t/matching-phrase-one-of-many-in-single-field/165713)
**Author:** [@mochocki](https://discuss.elastic.co/u/mochocki)\ **Replies:** 0\ **Last updated:** [January 25, 2019, 7:47am UTC](https://discuss.elastic.co/t/matching-phrase-one-of-many-in-single-field/165713 "2019-01-25T07:47:03Z")
I have an index with documents of following structure: { phrases: "fox, brown fox, brown fox jumps", target : "https://google.com" } In short it should match phrases to an url, but I have multiple phrases in single fie… --- ## [Slow log not working in ES6](https://discuss.elastic.co/t/slow-log-not-working-in-es6/165705)
**Author:** [@mannoj87](https://discuss.elastic.co/u/mannoj87)\ **Replies:** 1\ **Last updated:** [January 25, 2019, 7:12am UTC](https://discuss.elastic.co/t/slow-log-not-working-in-es6/165705 "2019-01-25T07:12:35Z")
Below are my settings in log4j2.properties, am using 6.3.0. But slow log doesn't log anything. appender.index\_indexing\_slowlog\_rolling.fileName = {sys:es.logs.base\_path}{sys:file.separator}{sys:es.logs.cluster\_name}\_in… --- ## [Parsing of audit log](https://discuss.elastic.co/t/parsing-of-audit-log/165184)
**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\ **Replies:** 1\ **Last updated:** [January 25, 2019, 5:22am UTC](https://discuss.elastic.co/t/parsing-of-audit-log/165184 "2019-01-25T05:22:08Z")
I got the following from logfile: "event.type":"transport", "event.action":"access\_granted", "user.name":"\_xpack\_security", "user.realm":"\_\_attach", "user.roles":\["superuser"\], "origin.type":"local\_node", "origin.addres… --- ## [Proactively Identify Field Type Conflicts](https://discuss.elastic.co/t/proactively-identify-field-type-conflicts/165681)
**Author:** [@ritchierich](https://discuss.elastic.co/u/ritchierich)\ **Replies:** 2\ **Last updated:** [January 24, 2019, 11:59pm UTC](https://discuss.elastic.co/t/proactively-identify-field-type-conflicts/165681 "2019-01-24T23:59:36Z")
Kibana can report conflicts in the Management / Kibana / Index Management : All Field Types Dropdown. Is there a way to identify conflicts with one Elasticsearch API, so I can monitor proactively? Cheers, Rich --- ## [Unable to grant "java.net.NetPermission" "getProxySelector" for plugin](https://discuss.elastic.co/t/unable-to-grant-java-net-netpermission-getproxyselector-for-plugin/165522)
**Author:** [@Li\_Xu](https://discuss.elastic.co/u/Li_Xu)\ **Replies:** 0\ **Last updated:** [January 24, 2019, 3:11am UTC](https://discuss.elastic.co/t/unable-to-grant-java-net-netpermission-getproxyselector-for-plugin/165522 "2019-01-24T03:11:25Z")
Hi, I added this to my plugin-security.policy: grant { ... permission java.net.NetPermission "getProxySelector"; } ES (docker 6.5.4) apparently loads it: \[INFO\] DOCKER\> \* java.lang.RuntimePermission accessDeclar… --- ## [Premium X-Pack license without API](https://discuss.elastic.co/t/premium-x-pack-license-without-api/165464)
**Author:** [@theringisbupkis](https://discuss.elastic.co/u/theringisbupkis)\ **Replies:** 3\ **Last updated:** [January 24, 2019, 10:07pm UTC](https://discuss.elastic.co/t/premium-x-pack-license-without-api/165464 "2019-01-24T22:07:31Z")
Background Im on ES v6.3.2 I have platinum license, and I know how to upgrade to it via licensing API Pertaining to question From the docs at elastic.co (docs): You can configure this licensing setting in the elas… --- ## [Intermittent response from master in Kubernetes](https://discuss.elastic.co/t/intermittent-response-from-master-in-kubernetes/165492)
**Author:** [@bladerunner512](https://discuss.elastic.co/u/bladerunner512)\ **Replies:** 1\ **Last updated:** [January 24, 2019, 10:03pm UTC](https://discuss.elastic.co/t/intermittent-response-from-master-in-kubernetes/165492 "2019-01-24T22:03:59Z")
Elasticsearch v6.2.1 on Ubuntu 16.04 Getting "connection refused" intermittently - no problems can be seen in log files. Reduced to running a single master, but got the same issue: NAME READY … --- ## [ID Limitations?](https://discuss.elastic.co/t/id-limitations/165195)
**Author:** [@Skeeve](https://discuss.elastic.co/u/Skeeve)\ **Replies:** 3\ **Last updated:** [January 24, 2019, 9:09pm UTC](https://discuss.elastic.co/t/id-limitations/165195 "2019-01-24T21:09:41Z")
Hi! I'm currently only experimenting with elasticsearch. Final goal will be to use it for our production data. While experimenting I came across the fact that you can supply the id yourself. I think this could be very … --- ## [API access to response collector service data](https://discuss.elastic.co/t/api-access-to-response-collector-service-data/165663)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 0\ **Last updated:** [January 24, 2019, 8:52pm UTC](https://discuss.elastic.co/t/api-access-to-response-collector-service-data/165663 "2019-01-24T20:52:28Z")
We have enabled adaptive replica selection due to a longstanding issue our cluster. With the feature turned on, I am curious what the statistics that are being collected are. The github issue for the feature is divided … --- ## [Does 1-2 nodes with consistently high(er) heap usage indicate a problem?](https://discuss.elastic.co/t/does-1-2-nodes-with-consistently-high-er-heap-usage-indicate-a-problem/165320)
**Author:** [@maxshortzp](https://discuss.elastic.co/u/maxshortzp)\ **Replies:** 5\ **Last updated:** [January 24, 2019, 6:54pm UTC](https://discuss.elastic.co/t/does-1-2-nodes-with-consistently-high-er-heap-usage-indicate-a-problem/165320 "2019-01-24T18:54:44Z")
Hi, We often see 1-2 nodes that have consistently high heap usage in our cluster. The other nodes typically follow a "saw tooth" pattern where heap usage climbs for a period of time until it is garbage collected. For e… --- ## [ES multiple network.host failed to bind](https://discuss.elastic.co/t/es-multiple-network-host-failed-to-bind/165620)
**Author:** [@Sylvain\_Attoumani](https://discuss.elastic.co/u/Sylvain_Attoumani)\ **Replies:** 1\ **Last updated:** [January 24, 2019, 6:34pm UTC](https://discuss.elastic.co/t/es-multiple-network-host-failed-to-bind/165620 "2019-01-24T18:34:53Z")
I'm working with elasticsearch and i'm trying to put multiple network.host but it doesn't seems to work. What I did is I changed elasticsearch.yml and adding network.host: \["127.0.0.1","xx.xx.xxx.xxx"\] But when I res… --- ## [Plugin-security.policy has not effect](https://discuss.elastic.co/t/plugin-security-policy-has-not-effect/165405)
**Author:** [@ninesalt](https://discuss.elastic.co/u/ninesalt)\ **Replies:** 9\ **Last updated:** [January 24, 2019, 11:18am UTC](https://discuss.elastic.co/t/plugin-security-policy-has-not-effect/165405 "2019-01-24T11:18:06Z")
I'm trying to build a plugin that needs the following permissions: grant { permission java.lang.RuntimePermission "accessDeclaredMembers"; }; When I install the plugin I get the warning saying that the plugin asks fo… --- ## [Cluster has become unresponsive](https://discuss.elastic.co/t/cluster-has-become-unresponsive/165485)
**Author:** [@connor](https://discuss.elastic.co/u/connor)\ **Replies:** 8\ **Last updated:** [January 24, 2019, 5:11pm UTC](https://discuss.elastic.co/t/cluster-has-become-unresponsive/165485 "2019-01-24T17:11:47Z")
Our ES service has all of a sudden become unresponsive. HEAD is unable to connect to it, I am able to execute cluster health against it, but any stats just remain spinning, ES does not return the results. Is there anyo… --- ## [API timeout](https://discuss.elastic.co/t/api-timeout/165632)
**Author:** [@thomashiron](https://discuss.elastic.co/u/thomashiron)\ **Replies:** 0\ **Last updated:** [January 24, 2019, 4:49pm UTC](https://discuss.elastic.co/t/api-timeout/165632 "2019-01-24T16:49:41Z")
Hello! I have a really strange random behavior since 48 hours, Elasticsearch stopped working. If I try to restart the service, it is very long to stop it, like it was waiting requests to terminate. When I finally make… --- ## [Help for painless iterate nested fields](https://discuss.elastic.co/t/help-for-painless-iterate-nested-fields/162394)
**Author:** [@Sky\_Iprd](https://discuss.elastic.co/u/Sky_Iprd)\ **Replies:** 3\ **Last updated:** [January 24, 2019, 4:17pm UTC](https://discuss.elastic.co/t/help-for-painless-iterate-nested-fields/162394 "2019-01-24T16:17:44Z")
This is my query, I have try few of them ( below ) trying to iterate the nested fields for compare the profit between 2017 and 2018 year. How can I iterate the nested fields ? Please help in advance... 1.for (int i=0; i\<… --- ## [Search returns nothing when use alias,When changing to original index can get data](https://discuss.elastic.co/t/search-returns-nothing-when-use-alias-when-changing-to-original-index-can-get-data/163390)
**Author:** [@simmonHuong](https://discuss.elastic.co/u/simmonHuong)\ **Replies:** 2\ **Last updated:** [January 24, 2019, 3:54pm UTC](https://discuss.elastic.co/t/search-returns-nothing-when-use-alias-when-changing-to-original-index-can-get-data/163390 "2019-01-24T15:54:11Z")
suppose I have a two alias index,created by the template alias. a\_wm\_201901 alias to wm\_201901 b\_wm\_201901 alias to wm\_201901 ##returns nothing when query like below {"index":"a\_wm\_201901","type":"doc","body":{"sort":\[{… --- ## [Elasticsearch Highlighting against specific query filters](https://discuss.elastic.co/t/elasticsearch-highlighting-against-specific-query-filters/165448)
**Author:** [@r111\_2019](https://discuss.elastic.co/u/r111_2019)\ **Replies:** 0\ **Last updated:** [January 23, 2019, 4:03pm UTC](https://discuss.elastic.co/t/elasticsearch-highlighting-against-specific-query-filters/165448 "2019-01-23T16:03:58Z")
My question is, can an Elastic Query be written, such that I can implement highlighting against specific filters that I write? For example, suppose I have the following bool filters applied to my query: { … --- ## [Elastic search configuration with load balacer](https://discuss.elastic.co/t/elastic-search-configuration-with-load-balacer/165625)
**Author:** [@Maddy\_M](https://discuss.elastic.co/u/Maddy_M)\ **Replies:** 1\ **Last updated:** [January 24, 2019, 3:24pm UTC](https://discuss.elastic.co/t/elastic-search-configuration-with-load-balacer/165625 "2019-01-24T15:24:52Z")
Hi, The have a 3 node cluster with 2 nodes(master and data) and 1 node as master only. I have a app connecting to this cluster and I would like to place a load balancer between app and ES cluster for high availability. … --- ## [Only first key of the bucket is resulted. In actions, how to return all the results?](https://discuss.elastic.co/t/only-first-key-of-the-bucket-is-resulted-in-actions-how-to-return-all-the-results/165449)
**Author:** [@shiv94](https://discuss.elastic.co/u/shiv94)\ **Replies:** 1\ **Last updated:** [January 24, 2019, 3:03pm UTC](https://discuss.elastic.co/t/only-first-key-of-the-bucket-is-resulted-in-actions-how-to-return-all-the-results/165449 "2019-01-24T15:03:01Z")
Hello , I would like get all the results in the bucket. for example, {{ctx.payload.aggregations.host.buckets.0.key}} returns only first key in the bucket, if we want other keys I can use {{ctx.payload.aggregations.host… --- ## [Best ETL tools for ingesting data from multiple data sources](https://discuss.elastic.co/t/best-etl-tools-for-ingesting-data-from-multiple-data-sources/165623)
**Author:** [@roryegerton](https://discuss.elastic.co/u/roryegerton)\ **Replies:** 1\ **Last updated:** [January 24, 2019, 2:46pm UTC](https://discuss.elastic.co/t/best-etl-tools-for-ingesting-data-from-multiple-data-sources/165623 "2019-01-24T14:46:47Z")
Hi All, I am looking for some advice for ETL options for a project that I am currently working on. Our data sets are generally things like (person, vehicle, dates, times, locations) … This data can come in multiple data… --- ## [How do I make the score calculation of nested hits independend of the amount of nested docs?](https://discuss.elastic.co/t/how-do-i-make-the-score-calculation-of-nested-hits-independend-of-the-amount-of-nested-docs/165249)
**Author:** [@randel](https://discuss.elastic.co/u/randel)\ **Replies:** 1\ **Last updated:** [January 24, 2019, 2:05pm UTC](https://discuss.elastic.co/t/how-do-i-make-the-score-calculation-of-nested-hits-independend-of-the-amount-of-nested-docs/165249 "2019-01-24T14:05:43Z")
Using GET /my\_index/\_doc/2416/\_explain to see how the score is calculated, I found out that the calculation depends on the amount of nested docs of a parent. The more nested docs, the lower the score of the hit. I use "s… --- ## [How to change default of Elasticsearch](https://discuss.elastic.co/t/how-to-change-default-of-elasticsearch/165356)
**Author:** [@waelco](https://discuss.elastic.co/u/waelco)\ **Replies:** 12\ **Last updated:** [January 24, 2019, 11:58am UTC](https://discuss.elastic.co/t/how-to-change-default-of-elasticsearch/165356 "2019-01-24T11:58:19Z")
HI how to change default of Elasticsearch 6.3 from five shards to more than 5 shards to kibana 5.1.1 Best regards --- ## [Weird kibana error - invalid code — missing end-of-block](https://discuss.elastic.co/t/weird-kibana-error-invalid-code-missing-end-of-block/165584)
**Author:** [@maineffort](https://discuss.elastic.co/u/maineffort)\ **Replies:** 0\ **Last updated:** [January 24, 2019, 11:31am UTC](https://discuss.elastic.co/t/weird-kibana-error-invalid-code-missing-end-of-block/165584 "2019-01-24T11:31:08Z")
I just started seeing this error on my kibana server : read err { Error: invalid code -- missing end-of-block at InflateRaw.zlibOnError (zlib.js:153:15) errno: -3, code: 'Z\_DATA\_ERROR' } There is no helpful informati… --- ## [Rolling over the index automatically](https://discuss.elastic.co/t/rolling-over-the-index-automatically/165019)
**Author:** [@akhilsai1499](https://discuss.elastic.co/u/akhilsai1499)\ **Replies:** 7\ **Last updated:** [January 24, 2019, 11:15am UTC](https://discuss.elastic.co/t/rolling-over-the-index-automatically/165019 "2019-01-24T11:15:18Z")
Rolling over the index automatically when the conditions wont satisfy. As of now i am explicitly using the conditions whenever i want to insert a document. Is there any way where we can automatically roll over the inde… --- ## [Unable to connect to Elastic search cloud with Transport client API](https://discuss.elastic.co/t/unable-to-connect-to-elastic-search-cloud-with-transport-client-api/165362)
**Author:** [@Shyju\_M](https://discuss.elastic.co/u/Shyju_M)\ **Replies:** 10\ **Last updated:** [January 24, 2019, 9:51am UTC](https://discuss.elastic.co/t/unable-to-connect-to-elastic-search-cloud-with-transport-client-api/165362 "2019-01-24T09:51:06Z")
Please help me to connect to the elastic cloud from the transport client pom.xml \ \org.elasticsearch\ \elasticsearch\ \ \ **Author:** [@Abhishek\_Wahi](https://discuss.elastic.co/u/Abhishek_Wahi)\ **Replies:** 5\ **Last updated:** [January 24, 2019, 10:23am UTC](https://discuss.elastic.co/t/snapshot-from-gcs-to-aws-cluster-repository-missing-exception/165373 "2019-01-24T10:23:43Z") Hi All, We are migrating our ES cluster from GCP to AWS. Now the repository we were using for snapshot and restore is of type gcs. My new ES cluster on AWS is running. And I want to restore the data that was snapshot by… --- ## [Elasticsearch on double servers](https://discuss.elastic.co/t/elasticsearch-on-double-servers/165557)
**Author:** [@Sylvain\_Attoumani](https://discuss.elastic.co/u/Sylvain_Attoumani)\ **Replies:** 5\ **Last updated:** [January 24, 2019, 10:03am UTC](https://discuss.elastic.co/t/elasticsearch-on-double-servers/165557 "2019-01-24T10:03:37Z")
Hi ! I'm a web developer and working with symfony. I have a problem and can't figure out how to solve it. So I have a database of product. You can search them using ES. Everytime I change something on a product I have a… --- ## [Snapshot not getting deleted](https://discuss.elastic.co/t/snapshot-not-getting-deleted/164906)
**Author:** [@Ram1](https://discuss.elastic.co/u/Ram1)\ **Replies:** 1\ **Last updated:** [January 24, 2019, 9:40am UTC](https://discuss.elastic.co/t/snapshot-not-getting-deleted/164906 "2019-01-24T09:40:50Z")
Hi, We had initiated a snapshot through curator and deleted it when the snapshot was in progress. But the snapshot is not getting deleted. If I check the status of the snapshot it shows as aborted. GET /\_snapshot///\_s… --- ## [Elasticsearch doesn't create logstash index](https://discuss.elastic.co/t/elasticsearch-doesnt-create-logstash-index/165552)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 0\ **Last updated:** [January 24, 2019, 8:22am UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-create-logstash-index/165552 "2019-01-24T08:22:19Z")
hi all, I am using logstash (rpm version 6.5.1) to ship logs into elasticsearch (rpm version 6.5.1). my configuration file is as following: input { file { path =\> "/home/srahimi/Oracle/Middleware/Oracle\_Home/user… --- ## [How to connect to docker instance of elasticsearch](https://discuss.elastic.co/t/how-to-connect-to-docker-instance-of-elasticsearch/163394)
**Author:** [@P.Satish\_Patro](https://discuss.elastic.co/u/P.Satish_Patro)\ **Replies:** 2\ **Last updated:** [January 24, 2019, 9:20am UTC](https://discuss.elastic.co/t/how-to-connect-to-docker-instance-of-elasticsearch/163394 "2019-01-24T09:20:00Z")
I have used elastic search(rest high level client) in spring boot. The local instance of my computer running fine. But, when I am trying to access the azure vm docker instance I can't able to use. I can able to get json … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1414) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1416)