# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1513

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1514

---

## [The client site is going down due to after integrating Elastic search](https://discuss.elastic.co/t/the-client-site-is-going-down-due-to-after-integrating-elastic-search/152511)

<div class="topic-metadata">

**Author:** [@Ali\_Nouman](https://discuss.elastic.co/u/Ali_Nouman)\
**Replies:** 3\
**Last updated:** [October 18, 2018, 6:45am UTC](https://discuss.elastic.co/t/the-client-site-is-going-down-due-to-after-integrating-elastic-search/152511 "2018-10-18T06:45:43Z")

</div>

The cpu goes high the drupal site code is one Aws ec2 server and elastic search on another ec2 server. Can some one point me where i can check the logs what can be the issue?

---

## [Get results with distance filter](https://discuss.elastic.co/t/get-results-with-distance-filter/152245)

<div class="topic-metadata">

**Author:** [@elastic\_mostafa](https://discuss.elastic.co/u/elastic_mostafa)\
**Replies:** 4\
**Last updated:** [October 18, 2018, 6:41am UTC](https://discuss.elastic.co/t/get-results-with-distance-filter/152245 "2018-10-18T06:41:46Z")

</div>

Hello , I would like to get the results where coordinates are less than 15 km from this point for example: \[35.3,-2.5\] but I have this error : no \[query\] registered for \[station\_location\] my request is : here the r…

---

## [Changing codec for existing indexes](https://discuss.elastic.co/t/changing-codec-for-existing-indexes/152422)

<div class="topic-metadata">

**Author:** [@Neha\_Sharma1](https://discuss.elastic.co/u/Neha_Sharma1)\
**Replies:** 2\
**Last updated:** [October 18, 2018, 6:11am UTC](https://discuss.elastic.co/t/changing-codec-for-existing-indexes/152422 "2018-10-18T06:11:39Z")

</div>

We are upgrading our ES version to 6.4.2 and would set default compression to best\_comrpession. Problem is that when restoring index from a snapshot, the best-compression is not applied even when explicitly setting codec…

---

## [Need to join three indices on some columns to get the data](https://discuss.elastic.co/t/need-to-join-three-indices-on-some-columns-to-get-the-data/152613)

<div class="topic-metadata">

**Author:** [@Bharath\_Pusuluri](https://discuss.elastic.co/u/Bharath_Pusuluri)\
**Replies:** 7\
**Last updated:** [October 18, 2018, 5:55am UTC](https://discuss.elastic.co/t/need-to-join-three-indices-on-some-columns-to-get-the-data/152613 "2018-10-18T05:55:59Z")

</div>

Is joining the indices based on column to fetch the details is possible in Elasticsearch? If it is static data I would have done programming, my requirement is on data retreving from http requests.

---

## [How to quickly reduce the document count](https://discuss.elastic.co/t/how-to-quickly-reduce-the-document-count/152935)

<div class="topic-metadata">

**Author:** [@n21754](https://discuss.elastic.co/u/n21754)\
**Replies:** 0\
**Last updated:** [October 18, 2018, 5:28am UTC](https://discuss.elastic.co/t/how-to-quickly-reduce-the-document-count/152935 "2018-10-18T05:28:47Z")

</div>

I have an elasticsearch cluster with five shards where the shards are hitting the ~2B document limit. Looking at the logs, a large fraction of those documents are deleted documents and I am hoping that I can remove some …

---

## [Elasticsearch container exists with no logs](https://discuss.elastic.co/t/elasticsearch-container-exists-with-no-logs/152734)

<div class="topic-metadata">

**Author:** [@aysala](https://discuss.elastic.co/u/aysala)\
**Replies:** 1\
**Last updated:** [October 18, 2018, 1:58am UTC](https://discuss.elastic.co/t/elasticsearch-container-exists-with-no-logs/152734 "2018-10-18T01:58:58Z")

</div>

Hello Experts I'm working on setting up ELK stack on docker swarm. I'm trying to configure the official elastic search image with the ssl certs. The containers are failing with no logs. Can someone suggest what is wrong…

---

## [The write bulk is stuck for a long time, causing the node load to rise and the cluster cannot be written](https://discuss.elastic.co/t/the-write-bulk-is-stuck-for-a-long-time-causing-the-node-load-to-rise-and-the-cluster-cannot-be-written/151971)

<div class="topic-metadata">

**Author:** [@linyy](https://discuss.elastic.co/u/linyy)\
**Replies:** 3\
**Last updated:** [October 18, 2018, 1:58am UTC](https://discuss.elastic.co/t/the-write-bulk-is-stuck-for-a-long-time-causing-the-node-load-to-rise-and-the-cluster-cannot-be-written/151971 "2018-10-18T01:58:37Z")

</div>

Elasticsearch version: 6.4.1 JVM version: openjdk 1.8.0\_45 system: redhat 6.9 this task caused several nodes to load very high, and then the cluster could not write. Restart the node with high load to recover. Is ther…

---

## [Covariant help in nest 6.2](https://discuss.elastic.co/t/covariant-help-in-nest-6-2/150561)

<div class="topic-metadata">

**Author:** [@ggingras](https://discuss.elastic.co/u/ggingras)\
**Replies:** 1\
**Last updated:** [October 18, 2018, 12:44am UTC](https://discuss.elastic.co/t/covariant-help-in-nest-6-2/150561 "2018-10-18T00:44:06Z")

</div>

Hi, I have been using .Net Nest client since version 2.X with the following Poco objects public interface ILocation { long Id { get; set; } string CityName { get; set; } long CityId{ get; set; } …

---

## [Disable \_id Field](https://discuss.elastic.co/t/disable-id-field/152916)

<div class="topic-metadata">

**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\
**Replies:** 0\
**Last updated:** [October 17, 2018, 10:01pm UTC](https://discuss.elastic.co/t/disable-id-field/152916 "2018-10-17T22:01:14Z")

</div>

I know this is probably something most people don't want to do, but I have an issue with the \_id field taking up a significant amount of the JVM on my nodes. Is there a way to disable this? I don't need direct document l…

---

## [Does cluster reject queries when rolling restart?](https://discuss.elastic.co/t/does-cluster-reject-queries-when-rolling-restart/152907)

<div class="topic-metadata">

**Author:** [@Jianzhou\_Z](https://discuss.elastic.co/u/Jianzhou_Z)\
**Replies:** 3\
**Last updated:** [October 17, 2018, 9:38pm UTC](https://discuss.elastic.co/t/does-cluster-reject-queries-when-rolling-restart/152907 "2018-10-17T21:38:19Z")

</div>

Here is the post of rolling restarts: https://www.elastic.co/guide/en/elasticsearch/guide/master/\_rolling\_restarts.html Does it affect any queries running during this process? The process does not explicitly let cluste…

---

## [Index size explodes after \_split](https://discuss.elastic.co/t/index-size-explodes-after-split/150692)

<div class="topic-metadata">

**Author:** [@cdekker](https://discuss.elastic.co/u/cdekker)\
**Replies:** 3\
**Last updated:** [October 17, 2018, 8:59pm UTC](https://discuss.elastic.co/t/index-size-explodes-after-split/150692 "2018-10-17T20:59:25Z")

</div>

Recently I had to split an index that had grown to 100GB on a single shard. I used the Split API to split this into 8 shards which nearly instantly created the new index with all 8 shards on the same node. I deleted the …

---

## [ElasticSearch container without persistent volume](https://discuss.elastic.co/t/elasticsearch-container-without-persistent-volume/152903)

<div class="topic-metadata">

**Author:** [@Gora\_LEYE](https://discuss.elastic.co/u/Gora_LEYE)\
**Replies:** 0\
**Last updated:** [October 17, 2018, 7:08pm UTC](https://discuss.elastic.co/t/elasticsearch-container-without-persistent-volume/152903 "2018-10-17T19:08:33Z")

</div>

Hi, I would like to have an empty container when I restart ElasticSearch container. because i use test index, The following service persist data on disk, data remain if container starts elasticsearch: restart: alw…

---

## [Snapshot on S3, unable to change protocol from https to http](https://discuss.elastic.co/t/snapshot-on-s3-unable-to-change-protocol-from-https-to-http/152237)

<div class="topic-metadata">

**Author:** [@scch](https://discuss.elastic.co/u/scch)\
**Replies:** 1\
**Last updated:** [October 17, 2018, 7:02pm UTC](https://discuss.elastic.co/t/snapshot-on-s3-unable-to-change-protocol-from-https-to-http/152237 "2018-10-17T19:02:17Z")

</div>

Hi I am getting below error while creating repository, the endpoint is http so probable reason looks like protocol i have tried changing with below command ./elasticsearch-keystore add s3.client.default.protocol also, …

---

## [Elastic search size parameter ignored if put in query string in delete\_by\_query](https://discuss.elastic.co/t/elastic-search-size-parameter-ignored-if-put-in-query-string-in-delete-by-query/152900)

<div class="topic-metadata">

**Author:** [@bans\_239](https://discuss.elastic.co/u/bans_239)\
**Replies:** 0\
**Last updated:** [October 17, 2018, 6:49pm UTC](https://discuss.elastic.co/t/elastic-search-size-parameter-ignored-if-put-in-query-string-in-delete-by-query/152900 "2018-10-17T18:49:43Z")

</div>

The following query deletes all the data which meet the query criteria and ignores the size parameter in elastic search version 6.2 .This works as expected(only deletes maximum 20 items) in elastic search version 5.5. G…

---

## [Elasticsearch-setup-passwords](https://discuss.elastic.co/t/elasticsearch-setup-passwords/152883)

<div class="topic-metadata">

**Author:** [@rmadoori](https://discuss.elastic.co/u/rmadoori)\
**Replies:** 1\
**Last updated:** [October 17, 2018, 5:19pm UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords/152883 "2018-10-17T17:19:51Z")

</div>

Hi, Is there alternative for elasticsearch-setup-passwords . cause this looks like a manual process and passwords are plain text. Is there any option to generate keys and we can use the keys for kibana and logstash to…

---

## [Running benchmarks in a docker environment](https://discuss.elastic.co/t/running-benchmarks-in-a-docker-environment/152784)

<div class="topic-metadata">

**Author:** [@Rifat\_Erdem\_Sahin](https://discuss.elastic.co/u/Rifat_Erdem_Sahin)\
**Replies:** 1\
**Last updated:** [October 17, 2018, 4:40pm UTC](https://discuss.elastic.co/t/running-benchmarks-in-a-docker-environment/152784 "2018-10-17T16:40:31Z")

</div>

any examples using the rally over containerized environments. How can I point it to my elastic search cluster which is create with the docker-compose and residing in 9200 and 9300 ports. I wanna use rally when i need i…

---

## [Scripted fields for regex match](https://discuss.elastic.co/t/scripted-fields-for-regex-match/151753)

<div class="topic-metadata">

**Author:** [@ramji](https://discuss.elastic.co/u/ramji)\
**Replies:** 3\
**Last updated:** [October 17, 2018, 4:22pm UTC](https://discuss.elastic.co/t/scripted-fields-for-regex-match/151753 "2018-10-17T16:22:05Z")

</div>

doc1: message: Reconciliation for plan 141 - Line 3 is completed This is my case in a index doc2: message: Reconciliation for plan 141 - Line 3 is started doc3: message: Reconciliation for plan 141 - Line 3 is Fail…

---

## [Action \[indices:admin/mappings/get\] is unauthorized for user](https://discuss.elastic.co/t/action-indices-admin-mappings-get-is-unauthorized-for-user/152857)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 1\
**Last updated:** [October 17, 2018, 4:04pm UTC](https://discuss.elastic.co/t/action-indices-admin-mappings-get-is-unauthorized-for-user/152857 "2018-10-17T16:04:18Z")

</div>

i created a user with only read/write permission to .kibana and someindex-\* but i get that error when connecting grafana, what permissions are required for user to get mappings?

---

## [Snapshot directory with multiple jvm's](https://discuss.elastic.co/t/snapshot-directory-with-multiple-jvms/152873)

<div class="topic-metadata">

**Author:** [@jspeer](https://discuss.elastic.co/u/jspeer)\
**Replies:** 0\
**Last updated:** [October 17, 2018, 3:52pm UTC](https://discuss.elastic.co/t/snapshot-directory-with-multiple-jvms/152873 "2018-10-17T15:52:58Z")

</div>

I know it's not recommended to run multiple JVMs on a single node without virtualization, but we will have to, until we have added a hypervisor. In the mean time, if I am running multiple JVM's on the same node, do they …

---

## [ES not creating indexes based on template](https://discuss.elastic.co/t/es-not-creating-indexes-based-on-template/152851)

<div class="topic-metadata">

**Author:** [@jlixfeld](https://discuss.elastic.co/u/jlixfeld)\
**Replies:** 5\
**Last updated:** [October 17, 2018, 3:42pm UTC](https://discuss.elastic.co/t/es-not-creating-indexes-based-on-template/152851 "2018-10-17T15:42:30Z")

</div>

Hi there! I have a daily index that is created from an index template, but I made changes to the index template (increased the number of shards from 3 to 4) however the new indexes are still created with only 3 shards. …

---

## [How to use helpers.scan with python requests?](https://discuss.elastic.co/t/how-to-use-helpers-scan-with-python-requests/152871)

<div class="topic-metadata">

**Author:** [@elastic\_paul](https://discuss.elastic.co/u/elastic_paul)\
**Replies:** 0\
**Last updated:** [October 17, 2018, 3:27pm UTC](https://discuss.elastic.co/t/how-to-use-helpers-scan-with-python-requests/152871 "2018-10-17T15:27:09Z")

</div>

I have a working script to query my ES cluster, using the Requests library. I am using Requests because I have issues with both proxies and with HTTPS certificates. All of this works with Requests. eg; response = reque…

---

## [Fix the bug in Elasticsearch package name in version 5-6-12](https://discuss.elastic.co/t/fix-the-bug-in-elasticsearch-package-name-in-version-5-6-12/149471)

<div class="topic-metadata">

**Author:** [@sudhakar.pallela](https://discuss.elastic.co/u/sudhakar.pallela)\
**Replies:** 1\
**Last updated:** [October 17, 2018, 2:50pm UTC](https://discuss.elastic.co/t/fix-the-bug-in-elasticsearch-package-name-in-version-5-6-12/149471 "2018-10-17T14:50:22Z")

</div>

Hey, Could you please fix the package name in your code. When i trying to download latest package of major version 5.6 my code is failing. Could you please fix the package name in your code. The package name should be …

---

## [Reindex from Remote and forgetting ES 2.1 type](https://discuss.elastic.co/t/reindex-from-remote-and-forgetting-es-2-1-type/152841)

<div class="topic-metadata">

**Author:** [@boeledi01](https://discuss.elastic.co/u/boeledi01)\
**Replies:** 2\
**Last updated:** [October 17, 2018, 2:20pm UTC](https://discuss.elastic.co/t/reindex-from-remote-and-forgetting-es-2-1-type/152841 "2018-10-17T14:20:47Z")

</div>

Hi, I have an ES2.1 index with a type and I want to migrate to ES6.x (without a type but the \_doc). How can I proceeed as I want to get rid of the ES2.1 type ? At the moment, I am doing: POST \_reindex { "source"; { …

---

## [Single node with high cpu usage in large number of shards scenario](https://discuss.elastic.co/t/single-node-with-high-cpu-usage-in-large-number-of-shards-scenario/152743)

<div class="topic-metadata">

**Author:** [@howardhuang](https://discuss.elastic.co/u/howardhuang)\
**Replies:** 4\
**Last updated:** [October 17, 2018, 2:04pm UTC](https://discuss.elastic.co/t/single-node-with-high-cpu-usage-in-large-number-of-shards-scenario/152743 "2018-10-17T14:04:35Z")

</div>

Hi All, In my test environment, I setup a single ES 6.4.1 node, 1 core, 2GB memory (1GB heap). After creating 600 empty indices (without any data and read/write operation), each index has 20 shards, total 12000 shards,…

---

## [Shrink API sets index.allocation.max.retries to 1?](https://discuss.elastic.co/t/shrink-api-sets-index-allocation-max-retries-to-1/152856)

<div class="topic-metadata">

**Author:** [@cdekker](https://discuss.elastic.co/u/cdekker)\
**Replies:** 0\
**Last updated:** [October 17, 2018, 2:02pm UTC](https://discuss.elastic.co/t/shrink-api-sets-index-allocation-max-retries-to-1/152856 "2018-10-17T14:02:12Z")

</div>

I just noticed my ES 6.2.4 cluster not recovering from yellow after a recent node failure. Some shards would remain unassigned. Upon closer inspection, the affected indices had index.allocation.max\_retries set to 1, whi…

---

## [How to create grok filter on response field](https://discuss.elastic.co/t/how-to-create-grok-filter-on-response-field/152667)

<div class="topic-metadata">

**Author:** [@eyaldavid](https://discuss.elastic.co/u/eyaldavid)\
**Replies:** 4\
**Last updated:** [October 17, 2018, 2:02pm UTC](https://discuss.elastic.co/t/how-to-create-grok-filter-on-response-field/152667 "2018-10-17T14:02:12Z")

</div>

Hi Guys im having trouble to add filter on respons\_code in kibana im doing it easily : response\_code:\[400 TO 600\] how to translate it to grok and filter in filter.conf ? Thanks

---

## [IndexOutOfBoundsException after update from 6.2 to 6.4](https://discuss.elastic.co/t/indexoutofboundsexception-after-update-from-6-2-to-6-4/152670)

<div class="topic-metadata">

**Author:** [@daci](https://discuss.elastic.co/u/daci)\
**Replies:** 5\
**Last updated:** [October 17, 2018, 12:58pm UTC](https://discuss.elastic.co/t/indexoutofboundsexception-after-update-from-6-2-to-6-4/152670 "2018-10-17T12:58:31Z")

</div>

Hi, I have a big multi search query which contains pretty complicated aggregations. Recently I updated the Elasticsearch version from 6.2 to 6.4 and when this query is executed using the official PHP package, I am getti…

---

## [Deploying ElasticSearch with cloudformation](https://discuss.elastic.co/t/deploying-elasticsearch-with-cloudformation/152790)

<div class="topic-metadata">

**Author:** [@lrehman](https://discuss.elastic.co/u/lrehman)\
**Replies:** 0\
**Last updated:** [October 17, 2018, 9:45am UTC](https://discuss.elastic.co/t/deploying-elasticsearch-with-cloudformation/152790 "2018-10-17T09:45:09Z")

</div>

Hi, Looking for help how to deploy ElasticSearch using cloudFormation. I want to to automate the procedure of installing ElasticSearch on AWS EC2 instances (self-managed) for large deployment with cloudFormation. Tha…

---

## [ES 2.4 failed to discover master after hard disks ran full](https://discuss.elastic.co/t/es-2-4-failed-to-discover-master-after-hard-disks-ran-full/152838)

<div class="topic-metadata">

**Author:** [@nilsnolde](https://discuss.elastic.co/u/nilsnolde)\
**Replies:** 0\
**Last updated:** [October 17, 2018, 12:39pm UTC](https://discuss.elastic.co/t/es-2-4-failed-to-discover-master-after-hard-disks-ran-full/152838 "2018-10-17T12:39:53Z")

</div>

Hi, I'm fairly new to ES and have to use 2.4 within the framework of Pelias. A few days ago, I realized that ES wrote logs totalling \> 900GB on the entire cluster, both to log directory and syslog. Resulting in all dis…

---

## [Full code of bool qurry using java api](https://discuss.elastic.co/t/full-code-of-bool-qurry-using-java-api/152809)

<div class="topic-metadata">

**Author:** [@prashantmipl](https://discuss.elastic.co/u/prashantmipl)\
**Replies:** 1\
**Last updated:** [October 17, 2018, 12:17pm UTC](https://discuss.elastic.co/t/full-code-of-bool-qurry-using-java-api/152809 "2018-10-17T12:17:30Z")

</div>

boolQuery() .must(termQuery("content", "test1")) .must(termQuery("content", "test4")) .mustNot(termQuery("content", "test2")) .should(termQuery("content", "test3")) .filter(termQuery("content", "test5"));

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1512)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1514)
