# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1518

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1519

---

## [Does GC at snapshot affect performance? can users force GC?](https://discuss.elastic.co/t/does-gc-at-snapshot-affect-performance-can-users-force-gc/152374)

<div class="topic-metadata">

**Author:** [@Jianzhou\_Z](https://discuss.elastic.co/u/Jianzhou_Z)\
**Replies:** 0\
**Last updated:** [October 14, 2018, 6:54am UTC](https://discuss.elastic.co/t/does-gc-at-snapshot-affect-performance-can-users-force-gc/152374 "2018-10-14T06:54:25Z")

</div>

I observed that during snapshots, systems run GC. Here are some example GC logs that happened during snapshots. Node 1: \[2018-10-14T06:01:56,133\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[n1\] \[gc\]\[1121610\] overhead, spent …

---

## [Parent-Child Indices Getting Out of Sync](https://discuss.elastic.co/t/parent-child-indices-getting-out-of-sync/152281)

<div class="topic-metadata">

**Author:** [@TheConnMan](https://discuss.elastic.co/u/TheConnMan)\
**Replies:** 2\
**Last updated:** [October 14, 2018, 2:27pm UTC](https://discuss.elastic.co/t/parent-child-indices-getting-out-of-sync/152281 "2018-10-14T14:27:02Z")

</div>

Environment: 4 nodes, 124GB RAM total, ~.5TB of data, v5.6.8 Indices: 1 main index, 1 parent doc type, 3 child doc types, ~300 index operations/s on the primary shards Clients: Primarily the Java SDK Issue Symptoms Ou…

---

## [Map keyword field in kibana 6.3.0](https://discuss.elastic.co/t/map-keyword-field-in-kibana-6-3-0/151821)

<div class="topic-metadata">

**Author:** [@deepsing](https://discuss.elastic.co/u/deepsing)\
**Replies:** 20\
**Last updated:** [October 14, 2018, 2:24pm UTC](https://discuss.elastic.co/t/map-keyword-field-in-kibana-6-3-0/151821 "2018-10-14T14:24:03Z")

</div>

Hi In latest verson of kibana 6.3.0, there are separate fields. One is without "keyword" and another is with "keyword". I want to map both fields and showed a single one.

---

## [It is a 404 respones when query a index template which is not exist](https://discuss.elastic.co/t/it-is-a-404-respones-when-query-a-index-template-which-is-not-exist/152386)

<div class="topic-metadata">

**Author:** [@dongming](https://discuss.elastic.co/u/dongming)\
**Replies:** 1\
**Last updated:** [October 14, 2018, 2:16pm UTC](https://discuss.elastic.co/t/it-is-a-404-respones-when-query-a-index-template-which-is-not-exist/152386 "2018-10-14T14:16:16Z")

</div>

hi, i am using elasticsearch 6.4.0, when i start my application , i wanna firstly query whether the template exist or not. if it is not exits i will create it . so when i use the high level client , the code as follows: …

---

## [Elastic search Ngram search high latency](https://discuss.elastic.co/t/elastic-search-ngram-search-high-latency/152388)

<div class="topic-metadata">

**Author:** [@natali](https://discuss.elastic.co/u/natali)\
**Replies:** 0\
**Last updated:** [October 14, 2018, 1:40pm UTC](https://discuss.elastic.co/t/elastic-search-ngram-search-high-latency/152388 "2018-10-14T13:40:26Z")

</div>

Hi, Im using a few analyzers to query elastic\_search. until now we used the dbl\_metaphone analyzer and the keyword analyzer. Now we want to use the 3gram\_tokenizer and the query search takes 4 times more time then sear…

---

## [Elasticsearch Docker Container filling up disk](https://discuss.elastic.co/t/elasticsearch-docker-container-filling-up-disk/150904)

<div class="topic-metadata">

**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\
**Replies:** 5\
**Last updated:** [October 14, 2018, 1:07pm UTC](https://discuss.elastic.co/t/elasticsearch-docker-container-filling-up-disk/150904 "2018-10-14T13:07:04Z")

</div>

I've been doing some experimentation and development with Elasticsearch and Kibana running in the official docker containers. I've got the ElasticSearch /usr/share/elasticsearch/data mapped to a 1.5TB drive which seems …

---

## [Failed to ADD xpack.security.http.ssl.enabled](https://discuss.elastic.co/t/failed-to-add-xpack-security-http-ssl-enabled/152360)

<div class="topic-metadata">

**Author:** [@rmadoori](https://discuss.elastic.co/u/rmadoori)\
**Replies:** 3\
**Last updated:** [October 14, 2018, 12:40pm UTC](https://discuss.elastic.co/t/failed-to-add-xpack-security-http-ssl-enabled/152360 "2018-10-14T12:40:08Z")

</div>

Hi , I am trying to make elastic search http endpoints and HTTPS endpoints I generated certs from cert manager \[2018-10-13T21:07:50,096\]\[DEBUG\]\[o.e.x.c.s.SSLService \] \[es-coordinating\] using ssl settings \[SSLConfi…

---

## [Best approach to paginating grouped results](https://discuss.elastic.co/t/best-approach-to-paginating-grouped-results/152380)

<div class="topic-metadata">

**Author:** [@Vlad\_Dogarescu](https://discuss.elastic.co/u/Vlad_Dogarescu)\
**Replies:** 2\
**Last updated:** [October 14, 2018, 12:35pm UTC](https://discuss.elastic.co/t/best-approach-to-paginating-grouped-results/152380 "2018-10-14T12:35:48Z")

</div>

Hello, I need to query some properties of "rooms" documents that each belongs to a "Hotel". And finally I want to display the "hotels" paginated. The problem is that if I index the "rooms" then the pagination (using "s…

---

## [How to set two analyzer for a field](https://discuss.elastic.co/t/how-to-set-two-analyzer-for-a-field/152343)

<div class="topic-metadata">

**Author:** [@mhsankar](https://discuss.elastic.co/u/mhsankar)\
**Replies:** 2\
**Last updated:** [October 14, 2018, 11:40am UTC](https://discuss.elastic.co/t/how-to-set-two-analyzer-for-a-field/152343 "2018-10-14T11:40:25Z")

</div>

hi i have two analyzer. how i can set this two analyzer into a fields?

---

## [Fastest way to index huge data in elastic](https://discuss.elastic.co/t/fastest-way-to-index-huge-data-in-elastic/152375)

<div class="topic-metadata">

**Author:** [@kamal](https://discuss.elastic.co/u/kamal)\
**Replies:** 8\
**Last updated:** [October 14, 2018, 9:48am UTC](https://discuss.elastic.co/t/fastest-way-to-index-huge-data-in-elastic/152375 "2018-10-14T09:48:06Z")

</div>

I am asked to index more than 3\*10^12 documents in to elastic cluster, the cluster has 50 nodes with 40 cores, and 128G of memory. I was able to do it with \_bulk in python language (multi thread) but I could not reach m…

---

## [Can I define which shard to snapshot?](https://discuss.elastic.co/t/can-i-define-which-shard-to-snapshot/152372)

<div class="topic-metadata">

**Author:** [@Jianzhou\_Z](https://discuss.elastic.co/u/Jianzhou_Z)\
**Replies:** 1\
**Last updated:** [October 14, 2018, 7:07am UTC](https://discuss.elastic.co/t/can-i-define-which-shard-to-snapshot/152372 "2018-10-14T07:07:13Z")

</div>

The default setting of snapshot seems creating snapshots for all shards of an index. Can users define which shard to snapshot? I found creating snapshots can make system busy, and was wondering if I can create snapshot…

---

## [How to sub-aggregate an array that contains another field?](https://discuss.elastic.co/t/how-to-sub-aggregate-an-array-that-contains-another-field/152155)

<div class="topic-metadata">

**Author:** [@veqryn](https://discuss.elastic.co/u/veqryn)\
**Replies:** 3\
**Last updated:** [October 13, 2018, 5:51pm UTC](https://discuss.elastic.co/t/how-to-sub-aggregate-an-array-that-contains-another-field/152155 "2018-10-13T17:51:02Z")

</div>

So I have data that looks roughly like this: { "tags": \[ "date=09/26/18", "member=Y", "type=newsletter", "type=call" \] } I am making use of the fields mapping to create two additional fields: tags.key tags.…

---

## [Cannot install a \[GOLD\] license unless TLS is configured](https://discuss.elastic.co/t/cannot-install-a-gold-license-unless-tls-is-configured/152162)

<div class="topic-metadata">

**Author:** [@nenjotsu](https://discuss.elastic.co/u/nenjotsu)\
**Replies:** 1\
**Last updated:** [October 14, 2018, 3:27am UTC](https://discuss.elastic.co/t/cannot-install-a-gold-license-unless-tls-is-configured/152162 "2018-10-14T03:27:34Z")

</div>

I have a gold license but once i uploaded it via kibana \> management \> elasticsearch \> license management I get this error. Error encountered uploading license: Cannot install a \[GOLD\] license unless TLS is configured…

---

## [Elastic search recover index](https://discuss.elastic.co/t/elastic-search-recover-index/152178)

<div class="topic-metadata">

**Author:** [@shaheryar](https://discuss.elastic.co/u/shaheryar)\
**Replies:** 1\
**Last updated:** [October 14, 2018, 3:26am UTC](https://discuss.elastic.co/t/elastic-search-recover-index/152178 "2018-10-14T03:26:13Z")

</div>

when the disk size used goes above 90% elastic search index goes into read only mode. how to recover it?

---

## [Preload index to filesystem cache in Elasticsearch 1.4](https://discuss.elastic.co/t/preload-index-to-filesystem-cache-in-elasticsearch-1-4/152218)

<div class="topic-metadata">

**Author:** [@shums42](https://discuss.elastic.co/u/shums42)\
**Replies:** 1\
**Last updated:** [October 14, 2018, 3:18am UTC](https://discuss.elastic.co/t/preload-index-to-filesystem-cache-in-elasticsearch-1-4/152218 "2018-10-14T03:18:59Z")

</div>

In later versions of ES there is setting "index.store.preload". Is there a way to preload index to the filesystem cache in ES 1.4?

---

## [Is it possible to query multiple indices but only apply a bool to results from one of the indices?](https://discuss.elastic.co/t/is-it-possible-to-query-multiple-indices-but-only-apply-a-bool-to-results-from-one-of-the-indices/152286)

<div class="topic-metadata">

**Author:** [@swidge](https://discuss.elastic.co/u/swidge)\
**Replies:** 1\
**Last updated:** [October 14, 2018, 3:08am UTC](https://discuss.elastic.co/t/is-it-possible-to-query-multiple-indices-but-only-apply-a-bool-to-results-from-one-of-the-indices/152286 "2018-10-14T03:08:02Z")

</div>

My use case is this: I have an index items and an index userItems. In my query, I want to pull results that match a search term on both indices. HOWEVER, I want to only pull results from userItems that belong to the user…

---

## [Appending node exclusion from index IP](https://discuss.elastic.co/t/appending-node-exclusion-from-index-ip/152295)

<div class="topic-metadata">

**Author:** [@FreddyRaj](https://discuss.elastic.co/u/FreddyRaj)\
**Replies:** 1\
**Last updated:** [October 14, 2018, 2:58am UTC](https://discuss.elastic.co/t/appending-node-exclusion-from-index-ip/152295 "2018-10-14T02:58:09Z")

</div>

I’m trying to exclude index allocation ip through API, however how do we append a new node as a exclusion to an already existing allocation exclude ip?

---

## [How can I generate a full Elasticsearch configuration?](https://discuss.elastic.co/t/how-can-i-generate-a-full-elasticsearch-configuration/152012)

<div class="topic-metadata">

**Author:** [@JohnBlack](https://discuss.elastic.co/u/JohnBlack)\
**Replies:** 3\
**Last updated:** [October 14, 2018, 2:54am UTC](https://discuss.elastic.co/t/how-can-i-generate-a-full-elasticsearch-configuration/152012 "2018-10-14T02:54:25Z")

</div>

I have only basic settings in the elasticsearch.yml file. I configured the rest of the elasticsearch settings using the REST API. I wonder whether it is possible to generate a full configuration containing the settings s…

---

## [Partial update into large document](https://discuss.elastic.co/t/partial-update-into-large-document/151824)

<div class="topic-metadata">

**Author:** [@Bongsakorn](https://discuss.elastic.co/u/Bongsakorn)\
**Replies:** 5\
**Last updated:** [October 14, 2018, 2:52am UTC](https://discuss.elastic.co/t/partial-update-into-large-document/151824 "2018-10-14T02:52:07Z")

</div>

Hello, I'm facing the problem about performance. My application is about chatting. I designed mapping index with nested object like below. { "conversation\_id-v1": { "mappings": { "stream": { "prope…

---

## [How to get the file size of document what you search](https://discuss.elastic.co/t/how-to-get-the-file-size-of-document-what-you-search/151290)

<div class="topic-metadata">

**Author:** [@iamazy](https://discuss.elastic.co/u/iamazy)\
**Replies:** 2\
**Last updated:** [October 14, 2018, 2:23am UTC](https://discuss.elastic.co/t/how-to-get-the-file-size-of-document-what-you-search/151290 "2018-10-14T02:23:58Z")

</div>

I want to get the file size of result what i search for，how to write the dsl for it.

---

## [Specify Minor version when building from source](https://discuss.elastic.co/t/specify-minor-version-when-building-from-source/152291)

<div class="topic-metadata">

**Author:** [@Steph\_van\_Schalkwyk](https://discuss.elastic.co/u/Steph_van_Schalkwyk)\
**Replies:** 1\
**Last updated:** [October 13, 2018, 7:29pm UTC](https://discuss.elastic.co/t/specify-minor-version-when-building-from-source/152291 "2018-10-13T19:29:57Z")

</div>

Is there a way to specify a specific, e.g. 6.4.2 version when building from source? Also, remove the "-SNAPSHOT' " Tried all variations of ./gradlew assemble -Dorg.gradle.java.home=/usr/lib/jvm/jdk-11 -Pversion=6.4.2

---

## [Restart elasticsearch daemon necessarily?](https://discuss.elastic.co/t/restart-elasticsearch-daemon-necessarily/152348)

<div class="topic-metadata">

**Author:** [@pauldon2](https://discuss.elastic.co/u/pauldon2)\
**Replies:** 1\
**Last updated:** [October 13, 2018, 7:27pm UTC](https://discuss.elastic.co/t/restart-elasticsearch-daemon-necessarily/152348 "2018-10-13T19:27:51Z")

</div>

Is it possible to force elasticsearch to change the configuration without restarting the service?

---

## [Get all/equal from nested documents in elastic search](https://discuss.elastic.co/t/get-all-equal-from-nested-documents-in-elastic-search/152355)

<div class="topic-metadata">

**Author:** [@Pandit\_Biradar](https://discuss.elastic.co/u/Pandit_Biradar)\
**Replies:** 0\
**Last updated:** [October 13, 2018, 6:38pm UTC](https://discuss.elastic.co/t/get-all-equal-from-nested-documents-in-elastic-search/152355 "2018-10-13T18:38:59Z")

</div>

Hello Team, Please help me on this issue , I want to search all the nested documents which all are equals , my elastic search mapping look like this { "attribute\_search\_index": { "mappings": { …

---

## [Dashboard for visualizing elasticsearch .monitoring-es\* indices](https://discuss.elastic.co/t/dashboard-for-visualizing-elasticsearch-monitoring-es-indices/152352)

<div class="topic-metadata">

**Author:** [@Silas\_Hansen](https://discuss.elastic.co/u/Silas_Hansen)\
**Replies:** 0\
**Last updated:** [October 13, 2018, 5:54pm UTC](https://discuss.elastic.co/t/dashboard-for-visualizing-elasticsearch-monitoring-es-indices/152352 "2018-10-13T17:54:35Z")

</div>

Hi I'm really impressed with all the data that the elasticsearch basic monitoring is picking up and putting into the .monitoring-es\* indices. I'm guessing that visualizing that data would be a great resource for debuggi…

---

## [Parsing\_exception in kibana](https://discuss.elastic.co/t/parsing-exception-in-kibana/151431)

<div class="topic-metadata">

**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\
**Replies:** 3\
**Last updated:** [October 13, 2018, 10:16am UTC](https://discuss.elastic.co/t/parsing-exception-in-kibana/151431 "2018-10-13T10:16:19Z")

</div>

hi team may i know how to solve this bug Error: \[parsing\_excetion\] no \[query\] registere for \[aggs\], with {line=1 & col=590}

---

## [ML - how are bounds calculated](https://discuss.elastic.co/t/ml-how-are-bounds-calculated/152207)

<div class="topic-metadata">

**Author:** [@humalog](https://discuss.elastic.co/u/humalog)\
**Replies:** 1\
**Last updated:** [October 13, 2018, 9:03am UTC](https://discuss.elastic.co/t/ml-how-are-bounds-calculated/152207 "2018-10-13T09:03:26Z")

</div>

Hello, how is the boundary range in ML calculated? Is it possible to change the bounds manually?

---

## [Does AWS SES API work with watcher?](https://discuss.elastic.co/t/does-aws-ses-api-work-with-watcher/151810)

<div class="topic-metadata">

**Author:** [@Aftab\_Ali](https://discuss.elastic.co/u/Aftab_Ali)\
**Replies:** 4\
**Last updated:** [October 13, 2018, 5:45am UTC](https://discuss.elastic.co/t/does-aws-ses-api-work-with-watcher/151810 "2018-10-13T05:45:31Z")

</div>

Dear Team, I am a big fan of elk and your support team, but I have AWS SES email service so that is possible to configure email notification service via only AWS SES, please reply ASAP.

---

## [Elastic search cluster shards are not recover version is 1.7](https://discuss.elastic.co/t/elastic-search-cluster-shards-are-not-recover-version-is-1-7/152306)

<div class="topic-metadata">

**Author:** [@suresh\_itha](https://discuss.elastic.co/u/suresh_itha)\
**Replies:** 7\
**Last updated:** [October 13, 2018, 2:21am UTC](https://discuss.elastic.co/t/elastic-search-cluster-shards-are-not-recover-version-is-1-7/152306 "2018-10-13T02:21:06Z")

</div>

Hi Team, Unfortunately we have deleted one of the data folder in data node which is part of elastic search cluster after delete the data node our elastic search cluster is not recovered the shards and always status is …

---

## [How many threads does a typical search use?](https://discuss.elastic.co/t/how-many-threads-does-a-typical-search-use/150934)

<div class="topic-metadata">

**Author:** [@maxshortzp](https://discuss.elastic.co/u/maxshortzp)\
**Replies:** 8\
**Last updated:** [October 13, 2018, 12:36am UTC](https://discuss.elastic.co/t/how-many-threads-does-a-typical-search-use/150934 "2018-10-13T00:36:26Z")

</div>

I'm trying to figure out if expensive queries are causing our search queues to back up and have some questions related to how elasticsearch counts threads. When a search request fans over multiple shards, does it use th…

---

## [Distress: Elasticsearch 6.4.0 fails to start](https://discuss.elastic.co/t/distress-elasticsearch-6-4-0-fails-to-start/152296)

<div class="topic-metadata">

**Author:** [@rsmoorthy](https://discuss.elastic.co/u/rsmoorthy)\
**Replies:** 1\
**Last updated:** [October 12, 2018, 8:24pm UTC](https://discuss.elastic.co/t/distress-elasticsearch-6-4-0-fails-to-start/152296 "2018-10-12T20:24:30Z")

</div>

Elasticsearch 6.4.0 fails to start with Java IO exception: org.elasticsearch.ElasticsearchException: java.io.IOException: failed to read \[id:305, file:/var/lib/elasticsearch/nodes/0/\_state/global-305.st\] Please see D…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1517)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1519)
