# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1529

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1530

---

## [Curator job to take back up before deleting the index](https://discuss.elastic.co/t/curator-job-to-take-back-up-before-deleting-the-index/150943)

<div class="topic-metadata">

**Author:** [@chandra0651](https://discuss.elastic.co/u/chandra0651)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 8:54pm UTC](https://discuss.elastic.co/t/curator-job-to-take-back-up-before-deleting-the-index/150943 "2018-10-03T20:54:21Z")

</div>

Hello by using curator job i was able to successfully delete the index which are older than 90 days, but i want to take the back up of index before deleting into s3 bucket. Can any one please share the documentation or i…

---

## [Significant text on nested objects](https://discuss.elastic.co/t/significant-text-on-nested-objects/150732)

<div class="topic-metadata">

**Author:** [@philv](https://discuss.elastic.co/u/philv)\
**Replies:** 2\
**Last updated:** [October 3, 2018, 8:10pm UTC](https://discuss.elastic.co/t/significant-text-on-nested-objects/150732 "2018-10-03T20:10:15Z")

</div>

I note here https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-significanttext-aggregation.html that significant text doesn't work on nested objects. I have nested objects on es…

---

## [Multisearch API explaination](https://discuss.elastic.co/t/multisearch-api-explaination/150940)

<div class="topic-metadata">

**Author:** [@sareem](https://discuss.elastic.co/u/sareem)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 8:09pm UTC](https://discuss.elastic.co/t/multisearch-api-explaination/150940 "2018-10-03T20:09:17Z")

</div>

Hello all, I am using Elasticsearch since a while and wanted to use multisearch API, however, I didn't find resources to understand how ES executes the searches in parallel and how the concurrency parameters control the…

---

## [Extracting all search results from an index](https://discuss.elastic.co/t/extracting-all-search-results-from-an-index/150938)

<div class="topic-metadata">

**Author:** [@Peacoq](https://discuss.elastic.co/u/Peacoq)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 8:05pm UTC](https://discuss.elastic.co/t/extracting-all-search-results-from-an-index/150938 "2018-10-03T20:05:32Z")

</div>

Hello, In our use case we need the ability to been able to get all search results for a particular index. The problem is that multiple users (some automated ones) may do this (or attempts to do this) at the same time. F…

---

## [Understanding dis\_max query](https://discuss.elastic.co/t/understanding-dis-max-query/148690)

<div class="topic-metadata">

**Author:** [@keithag](https://discuss.elastic.co/u/keithag)\
**Replies:** 0\
**Last updated:** [September 15, 2018, 3:23am UTC](https://discuss.elastic.co/t/understanding-dis-max-query/148690 "2018-09-15T03:23:38Z")

</div>

I am trying to understand how dis\_max query works by trying the documentation example: https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-dis-max-query.html Specifically, I want to reproduce the d…

---

## [Cluster\_block\_exception: blocked by: \[SERVICE\_UNAVAILABLE/2/no master\]](https://discuss.elastic.co/t/cluster-block-exception-blocked-by-service-unavailable-2-no-master/150932)

<div class="topic-metadata">

**Author:** [@dhondup](https://discuss.elastic.co/u/dhondup)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 7:29pm UTC](https://discuss.elastic.co/t/cluster-block-exception-blocked-by-service-unavailable-2-no-master/150932 "2018-10-03T19:29:45Z")

</div>

I am seeing the following error on a 2x cluster with three master eligible nodes. EXCEPTION: 503 {"error":{"root\_cause":\[{"type":"cluster\_block\_exception","reason":"blocked by: \[SERVICE\_UNAVAILABLE/2/no master\];"}\],"typ…

---

## [Error connecting to elasticsearch hosted on AWS via AWS EC2 instance](https://discuss.elastic.co/t/error-connecting-to-elasticsearch-hosted-on-aws-via-aws-ec2-instance/150921)

<div class="topic-metadata">

**Author:** [@shashank123hr](https://discuss.elastic.co/u/shashank123hr)\
**Replies:** 3\
**Last updated:** [October 3, 2018, 6:51pm UTC](https://discuss.elastic.co/t/error-connecting-to-elasticsearch-hosted-on-aws-via-aws-ec2-instance/150921 "2018-10-03T18:51:17Z")

</div>

Hello Can anyone please help me with an issue I am facing with regards to connecting to elasticsearch hosted on AWS. I am using the High level Rest client to make requests and running the java application as Jar. Error…

---

## [Transport.tcp.compress slowing down shard relocation](https://discuss.elastic.co/t/transport-tcp-compress-slowing-down-shard-relocation/148033)

<div class="topic-metadata">

**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\
**Replies:** 2\
**Last updated:** [October 3, 2018, 6:32pm UTC](https://discuss.elastic.co/t/transport-tcp-compress-slowing-down-shard-relocation/148033 "2018-10-03T18:32:19Z")

</div>

Looks like enabling tcp compression actually slows down the transfer rate of shards. Setting this I'm basically stuck to 13Mbs even though I've set the max\_bytes\_per\_sec to -1 This has led to it taking about 1.2h to tran…

---

## [Curator - how to use extra\_settings to create alias after shrink](https://discuss.elastic.co/t/curator-how-to-use-extra-settings-to-create-alias-after-shrink/150930)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 6:12pm UTC](https://discuss.elastic.co/t/curator-how-to-use-extra-settings-to-create-alias-after-shrink/150930 "2018-10-03T18:12:25Z")

</div>

hi all, I'm working with curator to shrink specific indices (using creation date). After that I need to create an alias to be linked to the targer index using the source index's name. Currently I know that I should use…

---

## [How to connect elasitcsearch cloud in asp.net core](https://discuss.elastic.co/t/how-to-connect-elasitcsearch-cloud-in-asp-net-core/150929)

<div class="topic-metadata">

**Author:** [@kojang](https://discuss.elastic.co/u/kojang)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 5:58pm UTC](https://discuss.elastic.co/t/how-to-connect-elasitcsearch-cloud-in-asp-net-core/150929 "2018-10-03T17:58:44Z")

</div>

i want to try to use elasticsearch cloud, not in localhost, how to connect elasticsearch cloud in asp.net core?

---

## [Timeout collecting data X-Pack](https://discuss.elastic.co/t/timeout-collecting-data-x-pack/150928)

<div class="topic-metadata">

**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\
**Replies:** 1\
**Last updated:** [October 3, 2018, 5:58pm UTC](https://discuss.elastic.co/t/timeout-collecting-data-x-pack/150928 "2018-10-03T17:58:24Z")

</div>

Hello, We have problem with our Elasticsearch cluster. Architecture : 11 physical machines (128 Go RAM - 32 CPU - Hardware HDD) 3 data instances by machine 3 physical machines carry the master's instance in addition…

---

## ["http" "total\_opened" connection count is huge on data nodes](https://discuss.elastic.co/t/http-total-opened-connection-count-is-huge-on-data-nodes/150821)

<div class="topic-metadata">

**Author:** [@rajkumar.m](https://discuss.elastic.co/u/rajkumar.m)\
**Replies:** 5\
**Last updated:** [October 3, 2018, 5:33pm UTC](https://discuss.elastic.co/t/http-total-opened-connection-count-is-huge-on-data-nodes/150821 "2018-10-03T17:33:14Z")

</div>

Hi, I have observed that "http" "total\_opened" connection count is huge on data nodes. Please help. Thanks

---

## [ELK Node is showing incorrect free disk space](https://discuss.elastic.co/t/elk-node-is-showing-incorrect-free-disk-space/150922)

<div class="topic-metadata">

**Author:** [@emna](https://discuss.elastic.co/u/emna)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 4:53pm UTC](https://discuss.elastic.co/t/elk-node-is-showing-incorrect-free-disk-space/150922 "2018-10-03T16:53:16Z")

</div>

Hi, I'm working with a new ELK Node v 6.4.1 and it is showing incorrect free disk space on kibana also version 6.4.1 i'm not using any logstash or any kind of beats yet Can anyone help please Thanks, Emna.

---

## [Disabling certificate verification for watcher emails?](https://discuss.elastic.co/t/disabling-certificate-verification-for-watcher-emails/150719)

<div class="topic-metadata">

**Author:** [@Horaci\_Macias](https://discuss.elastic.co/u/Horaci_Macias)\
**Replies:** 8\
**Last updated:** [October 3, 2018, 4:06pm UTC](https://discuss.elastic.co/t/disabling-certificate-verification-for-watcher-emails/150719 "2018-10-03T16:06:10Z")

</div>

Is there any way to disable SSL certificate validation for emails sent through Watcher? I'm having trouble integrating with an SMTP server even after adding the certificate and CA certificate to the truststore. At leas…

---

## [Getting Error While trying to Upload Shakespeare.json](https://discuss.elastic.co/t/getting-error-while-trying-to-upload-shakespeare-json/150915)

<div class="topic-metadata">

**Author:** [@shreyhere8](https://discuss.elastic.co/u/shreyhere8)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 3:34pm UTC](https://discuss.elastic.co/t/getting-error-while-trying-to-upload-shakespeare-json/150915 "2018-10-03T15:34:43Z")

</div>

I am trying to upload shakespeare.json using curl -XPOST -H "Content-Type:application/json" "http://localhost:9200/shakespeare/\_bulk?pretty" --data-binary @shakespeare.json But i am getting the error as { "error" : { …

---

## [Pattern replace character filter and ingest attachment](https://discuss.elastic.co/t/pattern-replace-character-filter-and-ingest-attachment/150911)

<div class="topic-metadata">

**Author:** [@xpico](https://discuss.elastic.co/u/xpico)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 3:10pm UTC](https://discuss.elastic.co/t/pattern-replace-character-filter-and-ingest-attachment/150911 "2018-10-03T15:10:14Z")

</div>

Hi, I'm using the ingest attachment plugin to extract data from pdf. I want to use pattern\_replace character filter to change some characters from the content of pdf, but I can't get it work well. 1.- Create a pipeline …

---

## [Logs not visualised on kibana](https://discuss.elastic.co/t/logs-not-visualised-on-kibana/150908)

<div class="topic-metadata">

**Author:** [@shruti51](https://discuss.elastic.co/u/shruti51)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 2:53pm UTC](https://discuss.elastic.co/t/logs-not-visualised-on-kibana/150908 "2018-10-03T14:53:27Z")

</div>

HI, My logstash is working fine .But the output is not visible on Kibana. Warning message coming on logstash is: 08/29/2018 10:54:16.552 ##ddlap-w1intg04219.rmno.com:-1##name##MN\_I1273##null##f54c9fc3-8368-4b5b-9aac-5…

---

## [Cluster freeze](https://discuss.elastic.co/t/cluster-freeze/150581)

<div class="topic-metadata">

**Author:** [@Fabrice\_Granatieri](https://discuss.elastic.co/u/Fabrice_Granatieri)\
**Replies:** 10\
**Last updated:** [October 3, 2018, 1:08pm UTC](https://discuss.elastic.co/t/cluster-freeze/150581 "2018-10-03T13:08:49Z")

</div>

Hi. Our cluster is: 11 servers with each 128 GB RAM a total of 3 masters and 33 data with each 19 GB allowed for the heap So 3 or 4 (for the 3 masters nodes) nodes per server 53 TB of data for over 5 billions of doc…

---

## [Unable to perform search in Elasticsearch, error "Failed sniffing cluster state."](https://discuss.elastic.co/t/unable-to-perform-search-in-elasticsearch-error-failed-sniffing-cluster-state/150884)

<div class="topic-metadata">

**Author:** [@Aashish\_Upadhyay](https://discuss.elastic.co/u/Aashish_Upadhyay)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 12:13pm UTC](https://discuss.elastic.co/t/unable-to-perform-search-in-elasticsearch-error-failed-sniffing-cluster-state/150884 "2018-10-03T12:13:21Z")

</div>

I have been facing a strange problem with Elasticsearch where only Search API fails with message "Failed sniffing cluster state.". Other APIs like Bulk and CreateIndex etc work fine. The code works in other systems also,…

---

## [GET API performance](https://discuss.elastic.co/t/get-api-performance/150738)

<div class="topic-metadata">

**Author:** [@Justin\_Treher](https://discuss.elastic.co/u/Justin_Treher)\
**Replies:** 8\
**Last updated:** [October 3, 2018, 12:00pm UTC](https://discuss.elastic.co/t/get-api-performance/150738 "2018-10-03T12:00:49Z")

</div>

I was assuming that we could use elasticsearch as a sort of document store for high performance reads when accessing documents by id in addition to the amazing search engine. However, I am finding that when accessing a …

---

## [Kibana 5 scripted field for regex match](https://discuss.elastic.co/t/kibana-5-scripted-field-for-regex-match/150864)

<div class="topic-metadata">

**Author:** [@ramji](https://discuss.elastic.co/u/ramji)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 10:59am UTC](https://discuss.elastic.co/t/kibana-5-scripted-field-for-regex-match/150864 "2018-10-03T10:59:55Z")

</div>

Below is the 1st of the document which contains field name "message" which has value in a form of text. // message Reconciliation for plan 141 - Line 3 is completed Below is the second document which contains …

---

## [Unable to create client connection to Elasticsearch from Curator](https://discuss.elastic.co/t/unable-to-create-client-connection-to-elasticsearch-from-curator/150860)

<div class="topic-metadata">

**Author:** [@Pradnya](https://discuss.elastic.co/u/Pradnya)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 10:44am UTC](https://discuss.elastic.co/t/unable-to-create-client-connection-to-elasticsearch-from-curator/150860 "2018-10-03T10:44:36Z")

</div>

Hii, while running command: " /usr/bin/curator --config /app/software/curator/curator-config.yml /app/software/curator/curator-action.yml " getting error: 2018-10-03 16:11:25,641 INFO Preparing Action ID: 1, "del…

---

## [Filter and sort documents based on nested fields](https://discuss.elastic.co/t/filter-and-sort-documents-based-on-nested-fields/150859)

<div class="topic-metadata">

**Author:** [@allan\_benguigui](https://discuss.elastic.co/u/allan_benguigui)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 10:43am UTC](https://discuss.elastic.co/t/filter-and-sort-documents-based-on-nested-fields/150859 "2018-10-03T10:43:45Z")

</div>

Hi everyone, I'm using Elasticsearch to search easily people based on theirs skills. I tried to find answer of my question in related post, but I did not. Here is what a document looks likes: { "\_index" : "dann…

---

## [ElasticSearch to Query Google Cloud SQL](https://discuss.elastic.co/t/elasticsearch-to-query-google-cloud-sql/150852)

<div class="topic-metadata">

**Author:** [@matt1627](https://discuss.elastic.co/u/matt1627)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 9:48am UTC](https://discuss.elastic.co/t/elasticsearch-to-query-google-cloud-sql/150852 "2018-10-03T09:48:07Z")

</div>

Hi there, I'm new to ES, and have been given the challenge of deploying ES on my own google cloud instance (VM), and using it to query data held in google cloud SQL. It would all have to be done through the command line…

---

## [Detecting Account sharing with winlogbeat](https://discuss.elastic.co/t/detecting-account-sharing-with-winlogbeat/150851)

<div class="topic-metadata">

**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 9:36am UTC](https://discuss.elastic.co/t/detecting-account-sharing-with-winlogbeat/150851 "2018-10-03T09:36:51Z")

</div>

Hi There, Am trying to write a query for detecting the account shares among the users .I dont know how to execute it. I have field called event\_data.TargetUserName and event\_data.IpAddress, i would like to search for q…

---

## [Elasticsearch Connection Count](https://discuss.elastic.co/t/elasticsearch-connection-count/150848)

<div class="topic-metadata">

**Author:** [@sarankup](https://discuss.elastic.co/u/sarankup)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 9:22am UTC](https://discuss.elastic.co/t/elasticsearch-connection-count/150848 "2018-10-03T09:22:52Z")

</div>

Hi, Is there any API to check the number of open connections in the Elasticsearch cluster/node? My cluster performance goes slow at a frequent interval. so I want to check any number of open connection left without close…

---

## [How to write query for this case?](https://discuss.elastic.co/t/how-to-write-query-for-this-case/150649)

<div class="topic-metadata">

**Author:** [@ali\_houshyaripour](https://discuss.elastic.co/u/ali_houshyaripour)\
**Replies:** 0\
**Last updated:** [October 2, 2018, 6:18am UTC](https://discuss.elastic.co/t/how-to-write-query-for-this-case/150649 "2018-10-02T06:18:01Z")

</div>

I want to write a query which contains these three sections: a condition check like this: if ((A || B || C) && (D || E || F)) that each one of A, B, C and ... are a simple match term query several boolean filter like i…

---

## [Size limit for items within a document](https://discuss.elastic.co/t/size-limit-for-items-within-a-document/150825)

<div class="topic-metadata">

**Author:** [@Waleed\_Malik](https://discuss.elastic.co/u/Waleed_Malik)\
**Replies:** 1\
**Last updated:** [October 3, 2018, 8:01am UTC](https://discuss.elastic.co/t/size-limit-for-items-within-a-document/150825 "2018-10-03T08:01:02Z")

</div>

I am trying to retrieve a document from elastic-search that comprises of an entity that has a data-set of more than 10k items. I have already gone through scrolling, paging and other options but that only helps in retrie…

---

## [ES 6.4: Java RestClient and log4j2](https://discuss.elastic.co/t/es-6-4-java-restclient-and-log4j2/150838)

<div class="topic-metadata">

**Author:** [@LGans316](https://discuss.elastic.co/u/LGans316)\
**Replies:** 0\
**Last updated:** [October 3, 2018, 7:50am UTC](https://discuss.elastic.co/t/es-6-4-java-restclient-and-log4j2/150838 "2018-10-03T07:50:40Z")

</div>

src/main/resources/log4j2.xml \<?xml version="1.0" encoding="UTF-8"?\> \<Configuration status="info" monitorInterval="60"\> \<Appenders\> \<Console name="Console" target="SYSTEM\_OUT"\> \<PatternLayout pattern="%d{HH:mm:ss.…

---

## [Exception-“network/Elasticsearch cluster is not accessible or when targeting a WAN/Cloud instance”](https://discuss.elastic.co/t/exception-network-elasticsearch-cluster-is-not-accessible-or-when-targeting-a-wan-cloud-instance/150829)

<div class="topic-metadata">

**Author:** [@bpaul](https://discuss.elastic.co/u/bpaul)\
**Replies:** 2\
**Last updated:** [October 3, 2018, 7:13am UTC](https://discuss.elastic.co/t/exception-network-elasticsearch-cluster-is-not-accessible-or-when-targeting-a-wan-cloud-instance/150829 "2018-10-03T07:13:43Z")

</div>

I am trying to load data onto Elastic search index. The above given error is being thrown on the container log of hadoop. Map reduce operation is not happening . It is getting stuck and the elastic search master daemon i…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1528)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1530)
