# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1498

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1499

---

## [Hosting / Server requirements for data close to 1-2gb in size](https://discuss.elastic.co/t/hosting-server-requirements-for-data-close-to-1-2gb-in-size/154967)

<div class="topic-metadata">

**Author:** [@razorsharpshady](https://discuss.elastic.co/u/razorsharpshady)\
**Replies:** 1\
**Last updated:** [November 1, 2018, 8:24am UTC](https://discuss.elastic.co/t/hosting-server-requirements-for-data-close-to-1-2gb-in-size/154967 "2018-11-01T08:24:10Z")

</div>

Hi, I am new to Elasticsearch and trying to figure out the hardware specs that'll be enough for my usage. I have around 100k rows in a mysql table which I'll map with elasticsearch index, text search was good enough in…

---

## [Still has the problem that index pattern does not contain any of the following field types: geo\_point](https://discuss.elastic.co/t/still-has-the-problem-that-index-pattern-does-not-contain-any-of-the-following-field-types-geo-point/154737)

<div class="topic-metadata">

**Author:** [@tianchao-haohan](https://discuss.elastic.co/u/tianchao-haohan)\
**Replies:** 3\
**Last updated:** [November 1, 2018, 6:39am UTC](https://discuss.elastic.co/t/still-has-the-problem-that-index-pattern-does-not-contain-any-of-the-following-field-types-geo-point/154737 "2018-11-01T06:39:15Z")

</div>

logstash-6.2.4 elasticsearch-6.2.4 Here is the filter configuration in logstash: geoip { source =\> "src\_ip" target =\> "geoip" database =\> "/usr/share/GeoIP/GeoLite2-City.mmdb" add\_field =\> \[ "\[geoip\]\[coordinates\]"…

---

## [Managing indices post Rollover](https://discuss.elastic.co/t/managing-indices-post-rollover/154757)

<div class="topic-metadata">

**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\
**Replies:** 3\
**Last updated:** [November 1, 2018, 5:33am UTC](https://discuss.elastic.co/t/managing-indices-post-rollover/154757 "2018-11-01T05:33:51Z")

</div>

I know this question has been asked previously, but the answers provided earlier are outdated and do not apply to the current scenario. We have recently moved to using the Rollover API to create new indices in order to …

---

## [Preloading fielddata in c#](https://discuss.elastic.co/t/preloading-fielddata-in-c/154954)

<div class="topic-metadata">

**Author:** [@namprat](https://discuss.elastic.co/u/namprat)\
**Replies:** 0\
**Last updated:** [November 1, 2018, 4:30am UTC](https://discuss.elastic.co/t/preloading-fielddata-in-c/154954 "2018-11-01T04:30:33Z")

</div>

Trying to implement preloading fielddata using NEST. I have two questions How to preload fielddata for mapped child attachment object After preloading some of the fields, search is still slow for the first run. Pls so…

---

## [Remove field create by processor split target\_field](https://discuss.elastic.co/t/remove-field-create-by-processor-split-target-field/154595)

<div class="topic-metadata">

**Author:** [@Izek](https://discuss.elastic.co/u/Izek)\
**Replies:** 4\
**Last updated:** [November 1, 2018, 2:05am UTC](https://discuss.elastic.co/t/remove-field-create-by-processor-split-target-field/154595 "2018-11-01T02:05:38Z")

</div>

Here is my pipeline setting { "processors": \[ { "split": { "field": "service", "separator": "/", "target\_field": "test" } } { "script": { …

---

## [Handling Page breaks in Elasticsearch](https://discuss.elastic.co/t/handling-page-breaks-in-elasticsearch/154818)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 2\
**Last updated:** [November 1, 2018, 1:20am UTC](https://discuss.elastic.co/t/handling-page-breaks-in-elasticsearch/154818 "2018-11-01T01:20:42Z")

</div>

Hi team I've indexed pdf documents page by page into elasticsearch. Each json document represents on page. Whenever user search something I will return the top page to him. But I'm not sure how to handle the page brea…

---

## [What's wrong with my permissions?](https://discuss.elastic.co/t/whats-wrong-with-my-permissions/154880)

<div class="topic-metadata">

**Author:** [@monk](https://discuss.elastic.co/u/monk)\
**Replies:** 3\
**Last updated:** [October 31, 2018, 11:03pm UTC](https://discuss.elastic.co/t/whats-wrong-with-my-permissions/154880 "2018-10-31T23:03:50Z")

</div>

I installed elasticsearch using the APT instructions here. What follows is the fun I've had since. ubuntu@machine-es:~$ sudo elasticsearch \[2018-10-31T15:30:44,020\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[\]…

---

## [Nested query with filters](https://discuss.elastic.co/t/nested-query-with-filters/154688)

<div class="topic-metadata">

**Author:** [@ankurlathwal](https://discuss.elastic.co/u/ankurlathwal)\
**Replies:** 1\
**Last updated:** [October 31, 2018, 10:57pm UTC](https://discuss.elastic.co/t/nested-query-with-filters/154688 "2018-10-31T22:57:42Z")

</div>

I need to do a nested query which tries to search within an array of objects. Apart from this, I have other parameters as well that I need to search upon. I am using filters for those. How can I combine the filters and n…

---

## [Elasticsearch.keystore](https://discuss.elastic.co/t/elasticsearch-keystore/154051)

<div class="topic-metadata">

**Author:** [@Jockj](https://discuss.elastic.co/u/Jockj)\
**Replies:** 7\
**Last updated:** [October 31, 2018, 8:50pm UTC](https://discuss.elastic.co/t/elasticsearch-keystore/154051 "2018-10-31T20:50:31Z")

</div>

does anyone have one list of supported keys/values in elasticsearch.keystore? I'm trying to leverage elasticsearch.keystore, but I cannot find a document to know which keys/values of the settings is supported.

---

## [Plugin:elasticsearch@6.4.2 // Service Unavailable](https://discuss.elastic.co/t/plugin-elasticsearch-6-4-2-service-unavailable/154864)

<div class="topic-metadata">

**Author:** [@htwalid](https://discuss.elastic.co/u/htwalid)\
**Replies:** 1\
**Last updated:** [October 31, 2018, 8:31pm UTC](https://discuss.elastic.co/t/plugin-elasticsearch-6-4-2-service-unavailable/154864 "2018-10-31T20:31:25Z")

</div>

Hi All, I have deployed Logging chart in my k8s node. but the elasticsearch plugin remain unavailable!: elasticsearch\_ServUnavailable|690x323 . from logs file the logging-elasticsearch-clientcontainer failed to resolve…

---

## [ESRally Benchmarks - More nodes = Less throughput?](https://discuss.elastic.co/t/esrally-benchmarks-more-nodes-less-throughput/154840)

<div class="topic-metadata">

**Author:** [@GGFPC](https://discuss.elastic.co/u/GGFPC)\
**Replies:** 5\
**Last updated:** [October 31, 2018, 8:23pm UTC](https://discuss.elastic.co/t/esrally-benchmarks-more-nodes-less-throughput/154840 "2018-10-31T20:23:18Z")

</div>

Hi everyone, I have a class project where I'm trying to analyze ElasticSearch's scalability on Docker Swarm. To do that, I'm trying to use Rally to benchmark an ES cluster, and ideally I would like to see the throughput…

---

## [Elasticsearch is started after some time its stopped](https://discuss.elastic.co/t/elasticsearch-is-started-after-some-time-its-stopped/154873)

<div class="topic-metadata">

**Author:** [@jahaber\_sadhik](https://discuss.elastic.co/u/jahaber_sadhik)\
**Replies:** 1\
**Last updated:** [October 31, 2018, 8:17pm UTC](https://discuss.elastic.co/t/elasticsearch-is-started-after-some-time-its-stopped/154873 "2018-10-31T20:17:57Z")

</div>

● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; disabled; vendor preset: enabled) Active: failed (Result: exit-code) since Wed 2018-10-31 23:23:11 SGT; 11s ago Do…

---

## [Regarding Coordinator Node Heap Usage](https://discuss.elastic.co/t/regarding-coordinator-node-heap-usage/152080)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 25\
**Last updated:** [October 31, 2018, 8:11pm UTC](https://discuss.elastic.co/t/regarding-coordinator-node-heap-usage/152080 "2018-10-31T20:11:02Z")

</div>

Hi, I have a problem with coordinator node memory usage on one of our elasticsearch 5.6.3 clusters. We have 3 x coordinator nodes sitting in front of 6 data nodes. Normally, I size our coordinators with 8GB RAM and 5-6G…

---

## [\[solved\] Curator not giving any output](https://discuss.elastic.co/t/solved-curator-not-giving-any-output/154905)

<div class="topic-metadata">

**Author:** [@snewman](https://discuss.elastic.co/u/snewman)\
**Replies:** 2\
**Last updated:** [October 31, 2018, 7:43pm UTC](https://discuss.elastic.co/t/solved-curator-not-giving-any-output/154905 "2018-10-31T19:43:27Z")

</div>

I just download the curator prebuild windows executable. I can run it enough for it to tell me it can't find a certain file, but when I give it the correct files it does not produce any logging at all when set to default…

---

## [Query\_string case insensitive search on keyword field](https://discuss.elastic.co/t/query-string-case-insensitive-search-on-keyword-field/154819)

<div class="topic-metadata">

**Author:** [@Mahesh\_Reddy1](https://discuss.elastic.co/u/Mahesh_Reddy1)\
**Replies:** 1\
**Last updated:** [October 31, 2018, 7:04pm UTC](https://discuss.elastic.co/t/query-string-case-insensitive-search-on-keyword-field/154819 "2018-10-31T19:04:24Z")

</div>

I have a Keyword field that don't have any analyzers. I want to use query\_string query to do a case insensitive search on that field. "name":"Mary Johnosn" is indexed into elastic and name is a keyword field. I am using…

---

## [Painless QA query](https://discuss.elastic.co/t/painless-qa-query/154883)

<div class="topic-metadata">

**Author:** [@lask001](https://discuss.elastic.co/u/lask001)\
**Replies:** 1\
**Last updated:** [October 31, 2018, 6:52pm UTC](https://discuss.elastic.co/t/painless-qa-query/154883 "2018-10-31T18:52:54Z")

</div>

I'm trying to QA some documents with painless, hoping I could get a little help on what I'm doing wrong why my query. I have about a billion documents that are being used for application search. During the loading proce…

---

## [Exclude certain fields from free text search - Elasticsearch](https://discuss.elastic.co/t/exclude-certain-fields-from-free-text-search-elasticsearch/153010)

<div class="topic-metadata">

**Author:** [@pranav24](https://discuss.elastic.co/u/pranav24)\
**Replies:** 5\
**Last updated:** [October 24, 2018, 7:08am UTC](https://discuss.elastic.co/t/exclude-certain-fields-from-free-text-search-elasticsearch/153010 "2018-10-24T07:08:45Z")

</div>

Hi all, I have indexed documents with each over 100 field each analysed using Edge gram tokenizer to support Auto-Suggestion. I do require free text search that searches on all fields. When i am trying to do so, search…

---

## [Rest client persistent connection](https://discuss.elastic.co/t/rest-client-persistent-connection/154901)

<div class="topic-metadata">

**Author:** [@vishnugt](https://discuss.elastic.co/u/vishnugt)\
**Replies:** 0\
**Last updated:** [October 31, 2018, 5:40pm UTC](https://discuss.elastic.co/t/rest-client-persistent-connection/154901 "2018-10-31T17:40:35Z")

</div>

Hey all, While using low level rest client, a netstat revealed that a large number of TCP connections are in TIME\_WAIT state. While I understand that TIME\_WAIT is a proper TCP state and there is not going to be any imm…

---

## [How to filter results by host name](https://discuss.elastic.co/t/how-to-filter-results-by-host-name/154897)

<div class="topic-metadata">

**Author:** [@anveshdd](https://discuss.elastic.co/u/anveshdd)\
**Replies:** 1\
**Last updated:** [October 31, 2018, 5:58pm UTC](https://discuss.elastic.co/t/how-to-filter-results-by-host-name/154897 "2018-10-31T17:58:59Z")

</div>

I am working on ES 6.4.x.How can I filter the records by host name. Suppose I have a records like https://abc.com/ghi/123, https://abc.com/ghi/345,https://abc.com/jkl/567,https://abc.com/jkl/789. How can I filter result…

---

## [Searching on multiple fields from Index created by Fscrawler](https://discuss.elastic.co/t/searching-on-multiple-fields-from-index-created-by-fscrawler/153275)

<div class="topic-metadata">

**Author:** [@Jasmeet](https://discuss.elastic.co/u/Jasmeet)\
**Replies:** 5\
**Last updated:** [October 31, 2018, 5:42pm UTC](https://discuss.elastic.co/t/searching-on-multiple-fields-from-index-created-by-fscrawler/153275 "2018-10-31T17:42:23Z")

</div>

Hi, I am new to Elasticsearch and have tried out creating index with Fscrawler. After creating custom Analyzers, when i try to search on the fields"content.phonetic" and "content.shingle", i do not get a search hit. Can…

---

## [ES Cluster: relation between password error and disk utilization high](https://discuss.elastic.co/t/es-cluster-relation-between-password-error-and-disk-utilization-high/154871)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 4\
**Last updated:** [October 31, 2018, 4:52pm UTC](https://discuss.elastic.co/t/es-cluster-relation-between-password-error-and-disk-utilization-high/154871 "2018-10-31T16:52:37Z")

</div>

Hi All , Its a doubt, I am trying to co-relate one issue and a situation. My ES cluster (6.4 , 3 Master 2 Data) and kibana and logstash is working well . X-pack is enabled in ES and kibana ( elastic:changeme connec…

---

## [How can I add additional data node into the elastic cluster](https://discuss.elastic.co/t/how-can-i-add-additional-data-node-into-the-elastic-cluster/154881)

<div class="topic-metadata">

**Author:** [@rajkumar.m](https://discuss.elastic.co/u/rajkumar.m)\
**Replies:** 1\
**Last updated:** [October 31, 2018, 4:32pm UTC](https://discuss.elastic.co/t/how-can-i-add-additional-data-node-into-the-elastic-cluster/154881 "2018-10-31T16:32:05Z")

</div>

Hi Team, I need to add additional data node to my existing cluster. at present i have 3-master, 2-data, 2-kibana, 3-logstash. with 1-replica & 5-shard config. i am sending I would like to additional 4 nodes to the ex…

---

## [Term query performance issue with respect to size parameter in search query](https://discuss.elastic.co/t/term-query-performance-issue-with-respect-to-size-parameter-in-search-query/154765)

<div class="topic-metadata">

**Author:** [@Sekhar1](https://discuss.elastic.co/u/Sekhar1)\
**Replies:** 8\
**Last updated:** [October 31, 2018, 3:49pm UTC](https://discuss.elastic.co/t/term-query-performance-issue-with-respect-to-size-parameter-in-search-query/154765 "2018-10-31T15:49:30Z")

</div>

Hi, Due to size parameter, my application performance decreasing completely. No.of Nodes:1 Operating System : CentoOS 7 No.of Documents in ES : 1Million No.of fields in Each Document : 15 fields.Each Fields involved…

---

## [GET /\_cat/indices?v doesn't work after trial license expires](https://discuss.elastic.co/t/get-cat-indices-v-doesnt-work-after-trial-license-expires/154774)

<div class="topic-metadata">

**Author:** [@humalog](https://discuss.elastic.co/u/humalog)\
**Replies:** 1\
**Last updated:** [October 31, 2018, 3:01pm UTC](https://discuss.elastic.co/t/get-cat-indices-v-doesnt-work-after-trial-license-expires/154774 "2018-10-31T15:01:44Z")

</div>

Hello, i used the trial version for one moth. I am not able to show indices anymore. Is that normal? I guess before i started the trial version i was able to get indices via GET /\_cat/indices?v This is the message i g…

---

## [Use greedy regexes in Curator filter](https://discuss.elastic.co/t/use-greedy-regexes-in-curator-filter/154200)

<div class="topic-metadata">

**Author:** [@dr01](https://discuss.elastic.co/u/dr01)\
**Replies:** 6\
**Last updated:** [October 31, 2018, 2:58pm UTC](https://discuss.elastic.co/t/use-greedy-regexes-in-curator-filter/154200 "2018-10-31T14:58:35Z")

</div>

I have set up Curator to delete old indexes via this filter: (...) filters: - filtertype: pattern kind: regex value: '^xyz-us-(prod|preprod)-(.\*)-' exclude: - filtertype: age source: name direction: older ti…

---

## [Elastic search stops after a few minutes](https://discuss.elastic.co/t/elastic-search-stops-after-a-few-minutes/154686)

<div class="topic-metadata">

**Author:** [@Francois\_013](https://discuss.elastic.co/u/Francois_013)\
**Replies:** 2\
**Last updated:** [October 31, 2018, 2:14pm UTC](https://discuss.elastic.co/t/elastic-search-stops-after-a-few-minutes/154686 "2018-10-31T14:14:30Z")

</div>

Hi, I'm running an elasticsearch server 6.3 and i've upgraded it to 6.4.2. After the upgrade i'm running into the problem that service after a few minutes stops and fails. I can restart it without a problem When look…

---

## [Shard rebalancing vs shard allocation](https://discuss.elastic.co/t/shard-rebalancing-vs-shard-allocation/154492)

<div class="topic-metadata">

**Author:** [@HugoP](https://discuss.elastic.co/u/HugoP)\
**Replies:** 2\
**Last updated:** [October 31, 2018, 1:52pm UTC](https://discuss.elastic.co/t/shard-rebalancing-vs-shard-allocation/154492 "2018-10-31T13:52:11Z")

</div>

Hi, What is the difference/link between shard rebalancing and shard allocation ? Is it possible to have a shard rebalancing with a disable sharding allocation ? I don't think so but I need some confirmation. Furtherm…

---

## [Elasticserach 6.3 compatibility issue with Linux RHEL version 7.4](https://discuss.elastic.co/t/elasticserach-6-3-compatibility-issue-with-linux-rhel-version-7-4/154831)

<div class="topic-metadata">

**Author:** [@dashparthapratim](https://discuss.elastic.co/u/dashparthapratim)\
**Replies:** 2\
**Last updated:** [October 31, 2018, 1:50pm UTC](https://discuss.elastic.co/t/elasticserach-6-3-compatibility-issue-with-linux-rhel-version-7-4/154831 "2018-10-31T13:50:26Z")

</div>

Hi All, I have upgraded our Linux OS version from 7.2 to 7.4 currently . I was using Elasticsearch 2.2 version previously now upgraded this version to 6.3. During setting up the ELK stack I have also upgraded logstas…

---

## [SAML SSO - Associate the roles to the user (not groups)](https://discuss.elastic.co/t/saml-sso-associate-the-roles-to-the-user-not-groups/154810)

<div class="topic-metadata">

**Author:** [@bruno.henriques](https://discuss.elastic.co/u/bruno.henriques)\
**Replies:** 5\
**Last updated:** [October 31, 2018, 1:15pm UTC](https://discuss.elastic.co/t/saml-sso-associate-the-roles-to-the-user-not-groups/154810 "2018-10-31T13:15:01Z")

</div>

Hello, I have set up a IdP (simplesamlphp.org) with a User with the following attributes: 'email' =\> 'user1@system.com' 'User.fullname' =\> 'User 1' 'User.roles' =\> array('admin') And have setup elasticsearch's SAML s…

---

## [ElasticSearch ( 5.5.2 ) X-Pack Active Directory Authentication Fails](https://discuss.elastic.co/t/elasticsearch-5-5-2-x-pack-active-directory-authentication-fails/154648)

<div class="topic-metadata">

**Author:** [@ramkrishna.cignex](https://discuss.elastic.co/u/ramkrishna.cignex)\
**Replies:** 4\
**Last updated:** [October 31, 2018, 1:12pm UTC](https://discuss.elastic.co/t/elasticsearch-5-5-2-x-pack-active-directory-authentication-fails/154648 "2018-10-31T13:12:09Z")

</div>

Hi, I am using Elasticsearch and X-pack version 5.5.2. I am trying to configure X-Pack with Active directory and I am getting following error. \[2018-10-30T17:11:07,895\]\[WARN \]\[o.e.x.s.a.AuthenticationService\] \[local-…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1497)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1499)
