# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1544 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1545 --- ## [Status Red for cluster](https://discuss.elastic.co/t/status-red-for-cluster/148835)
**Author:** [@Raghu\_Reddy](https://discuss.elastic.co/u/Raghu_Reddy)\ **Replies:** 7\ **Last updated:** [September 19, 2018, 7:40am UTC](https://discuss.elastic.co/t/status-red-for-cluster/148835 "2018-09-19T07:40:25Z")
Hi Team, I have created 3 server for the elasticsearch, one is master and data node and 2 are only data node. They are able to form the cluster, but when i use postman api to check i am getting status as red. also i u… --- ## [ElasticSearch append non matched docs at the end of the search result](https://discuss.elastic.co/t/elasticsearch-append-non-matched-docs-at-the-end-of-the-search-result/148926)
**Author:** [@anam](https://discuss.elastic.co/u/anam)\ **Replies:** 1\ **Last updated:** [September 19, 2018, 7:26am UTC](https://discuss.elastic.co/t/elasticsearch-append-non-matched-docs-at-the-end-of-the-search-result/148926 "2018-09-19T07:26:00Z")
Is there any way to append non matched docs at the end of the search result? I have been working on a project where we need to search docs by geolocation data but some docs don't have the geolocation data available. As … --- ## [Looking for a Better alternative than Highlighting feature with less impact on query time](https://discuss.elastic.co/t/looking-for-a-better-alternative-than-highlighting-feature-with-less-impact-on-query-time/148580)
**Author:** [@Jayaram\_Alla](https://discuss.elastic.co/u/Jayaram_Alla)\ **Replies:** 0\ **Last updated:** [September 14, 2018, 8:11am UTC](https://discuss.elastic.co/t/looking-for-a-better-alternative-than-highlighting-feature-with-less-impact-on-query-time/148580 "2018-09-14T08:11:23Z")
I want to know which value matched within the name array for a search query. Through searching online i found Highlighting can be used by making pre and post tags empty string. is there a better way to do this than High… --- ## [Basic License Machine learning](https://discuss.elastic.co/t/basic-license-machine-learning/149064)
**Author:** [@syauqi\_mujahidin](https://discuss.elastic.co/u/syauqi_mujahidin)\ **Replies:** 1\ **Last updated:** [September 19, 2018, 7:14am UTC](https://discuss.elastic.co/t/basic-license-machine-learning/149064 "2018-09-19T07:14:15Z")
How To activate Machine learning with basic license --- ## [Optimal structure for identifying users in log records](https://discuss.elastic.co/t/optimal-structure-for-identifying-users-in-log-records/149059)
**Author:** [@garbetjie](https://discuss.elastic.co/u/garbetjie)\ **Replies:** 0\ **Last updated:** [September 19, 2018, 6:03am UTC](https://discuss.elastic.co/t/optimal-structure-for-identifying-users-in-log-records/149059 "2018-09-19T06:03:52Z")
Hi there. I'm very new to Elasticsearch, so please forgive me if this is a question that has been answered elsewhere. In our application, we find it important to be able to look up the logs by a specific user ID. Howev… --- ## [Running out of space in /var/lib/elasticsearch](https://discuss.elastic.co/t/running-out-of-space-in-var-lib-elasticsearch/148398)
**Author:** [@popa](https://discuss.elastic.co/u/popa)\ **Replies:** 5\ **Last updated:** [September 19, 2018, 5:40am UTC](https://discuss.elastic.co/t/running-out-of-space-in-var-lib-elasticsearch/148398 "2018-09-19T05:40:03Z")
I currently have a single node Elastic Stack (with Winlogbeat) instance setup using mostly default settings. We're running out of storage space, so we need to add another location for Elasticsearch data nodes to store i… --- ## [Elastic search query](https://discuss.elastic.co/t/elastic-search-query/149037)
**Author:** [@Nikhil\_Nambiar](https://discuss.elastic.co/u/Nikhil_Nambiar)\ **Replies:** 2\ **Last updated:** [September 19, 2018, 5:18am UTC](https://discuss.elastic.co/t/elastic-search-query/149037 "2018-09-19T05:18:07Z")
Hi, Can any one help me with query, which will find phone number which will contain numbers in it For ex if elastic search engine has some phone number 7273456980,98347651238,7434568901 And when I query 3456 it should… --- ## [Scalability](https://discuss.elastic.co/t/scalability/148939)
**Author:** [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)\ **Replies:** 10\ **Last updated:** [September 19, 2018, 5:15am UTC](https://discuss.elastic.co/t/scalability/148939 "2018-09-19T05:15:13Z")
W hy is the graph as shown below in the attachment. Explain --- ## [Nested aggregation with sub-aggregation on parent fields](https://discuss.elastic.co/t/nested-aggregation-with-sub-aggregation-on-parent-fields/148694)
**Author:** [@krishnaps](https://discuss.elastic.co/u/krishnaps)\ **Replies:** 3\ **Last updated:** [September 19, 2018, 4:14am UTC](https://discuss.elastic.co/t/nested-aggregation-with-sub-aggregation-on-parent-fields/148694 "2018-09-19T04:14:54Z")
I have following mappings PUT prod\_nested { "mappings": { "default": { "properties": { "pkey": { "type": "keyword" }, "original\_price": { "type": "float" }… --- ## [Index size mismatch in Kibana and linux console](https://discuss.elastic.co/t/index-size-mismatch-in-kibana-and-linux-console/149048)
**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\ **Replies:** 0\ **Last updated:** [September 19, 2018, 3:12am UTC](https://discuss.elastic.co/t/index-size-mismatch-in-kibana-and-linux-console/149048 "2018-09-19T03:12:39Z")
I am using Elasticsearch 6.3.2 to index a bunch of log file which are around 1.8 to 2 GB in size. The disk size shown in Kibana are close the expected size (size of input) but a du -sh on the data folder via the console … --- ## [Calculate time difference between two logs linking with sameid](https://discuss.elastic.co/t/calculate-time-difference-between-two-logs-linking-with-sameid/149043)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 0\ **Last updated:** [September 19, 2018, 2:45am UTC](https://discuss.elastic.co/t/calculate-time-difference-between-two-logs-linking-with-sameid/149043 "2018-09-19T02:45:22Z")
hi there is there anyway to calculate time difference between two logs with same id? --- ## [Query per minute url request success rate](https://discuss.elastic.co/t/query-per-minute-url-request-success-rate/146792)
**Author:** [@tomoncle](https://discuss.elastic.co/u/tomoncle)\ **Replies:** 2\ **Last updated:** [August 31, 2018, 3:35am UTC](https://discuss.elastic.co/t/query-per-minute-url-request-success-rate/146792 "2018-08-31T03:35:30Z")
How to use Elastic search query per minute, nginx proxy URL request success rate, the time required to return is continuous, no data is added 0, just like Prometheus rate function? test data: { "took" : 0, "timed\_o… --- ## [Elasticsearch - retrying failed action with response code: 503](https://discuss.elastic.co/t/elasticsearch-retrying-failed-action-with-response-code-503/149036)
**Author:** [@Vivek\_Nigam](https://discuss.elastic.co/u/Vivek_Nigam)\ **Replies:** 0\ **Last updated:** [September 19, 2018, 1:19am UTC](https://discuss.elastic.co/t/elasticsearch-retrying-failed-action-with-response-code-503/149036 "2018-09-19T01:19:21Z")
I m ingesting very small data in elasticserach getting following error: elasticsearch - retrying failed action with response code: 503 ({"type"=\>"unavailable\_shards\_exception", "reason"=\>"\[mastercount\]\[0\] primary shard … --- ## [Can´t connect using https to Elastic Cloud on GCP with PHP](https://discuss.elastic.co/t/can-t-connect-using-https-to-elastic-cloud-on-gcp-with-php/149029)
**Author:** [@alexandregoes](https://discuss.elastic.co/u/alexandregoes)\ **Replies:** 0\ **Last updated:** [September 18, 2018, 9:37pm UTC](https://discuss.elastic.co/t/can-t-connect-using-https-to-elastic-cloud-on-gcp-with-php/149029 "2018-09-18T21:37:08Z")
I´m trying for a few days to setup a "Hello Word" with my trial account on Elastic Cloud using the Google Cloud Platform. I had set up the cloud servers and I can connect them directly with the browser on endpoint:https… --- ## [S3 Repository log location](https://discuss.elastic.co/t/s3-repository-log-location/148386)
**Author:** [@mishaua](https://discuss.elastic.co/u/mishaua)\ **Replies:** 1\ **Last updated:** [September 18, 2018, 7:54pm UTC](https://discuss.elastic.co/t/s3-repository-log-location/148386 "2018-09-18T19:54:09Z")
Hello I am working with the docker elkstack, and have installed the S3 repository plugin. When I try to create a repo via the command curl -X PUT "localhost:9200/\_snapshot/my\_s3\_repository" -H 'Content-Type: applicatio… --- ## [Elasticsearch search term contains special charaters](https://discuss.elastic.co/t/elasticsearch-search-term-contains-special-charaters/149010)
**Author:** [@fuwei1234](https://discuss.elastic.co/u/fuwei1234)\ **Replies:** 0\ **Last updated:** [September 18, 2018, 6:20pm UTC](https://discuss.elastic.co/t/elasticsearch-search-term-contains-special-charaters/149010 "2018-09-18T18:20:24Z")
Hi, I am working on the publication search with special characters, how could I search CD8+ but not CD8, CD4+but not CD4. At the same time, I do not want to lose the wildcard search function. --- ## [Order by most in common with array](https://discuss.elastic.co/t/order-by-most-in-common-with-array/148994)
**Author:** [@matthew-inamdar](https://discuss.elastic.co/u/matthew-inamdar)\ **Replies:** 0\ **Last updated:** [September 18, 2018, 2:21pm UTC](https://discuss.elastic.co/t/order-by-most-in-common-with-array/148994 "2018-09-18T14:21:19Z")
Hi everyone! I have an index with documents that have a keywords field which stores string values (as an array). When performing a search which includes a number of keywords that the document should have (only needs 1 … --- ## [How to change the system indices template](https://discuss.elastic.co/t/how-to-change-the-system-indices-template/148807)
**Author:** [@sivap](https://discuss.elastic.co/u/sivap)\ **Replies:** 3\ **Last updated:** [September 18, 2018, 2:11pm UTC](https://discuss.elastic.co/t/how-to-change-the-system-indices-template/148807 "2018-09-18T14:11:36Z")
Hi Team, I'm trying to change the System Indices template which is generating on a daily basis. As mentioned in the elastic blocks, already am using the below-mentioned common template. curl -XPUT "http://localhost:920… --- ## [ElasticSearch fatal error in thread \[main\] , exiting java.lang.NoSuchFieldError: INSTANCE](https://discuss.elastic.co/t/elasticsearch-fatal-error-in-thread-main-exiting-java-lang-nosuchfielderror-instance/148971)
**Author:** [@john34](https://discuss.elastic.co/u/john34)\ **Replies:** 0\ **Last updated:** [September 18, 2018, 11:57am UTC](https://discuss.elastic.co/t/elasticsearch-fatal-error-in-thread-main-exiting-java-lang-nosuchfielderror-instance/148971 "2018-09-18T11:57:53Z")
Hello everyone, I have download elasticsearch and I'm trying to run it but I've got a fatal error when I launch elasticsearch.bat (windows 10) I tried to install it thanks to the msi but the same error happen with elas… --- ## [Bucket Aggregation with min\_doc\_count: 0 returns old/non existent keys](https://discuss.elastic.co/t/bucket-aggregation-with-min-doc-count-0-returns-old-non-existent-keys/148978)
**Author:** [@yahuu](https://discuss.elastic.co/u/yahuu)\ **Replies:** 0\ **Last updated:** [September 18, 2018, 12:30pm UTC](https://discuss.elastic.co/t/bucket-aggregation-with-min-doc-count-0-returns-old-non-existent-keys/148978 "2018-09-18T12:30:46Z")
Hello, I am using a bucket aggregation with min\_doc\_count: 0 The results are keys that are not present in the database (were deleted). Where does the bucket aggregation get these keys from. Here my example (the keys … --- ## [Node stats null\_pointer\_exception error](https://discuss.elastic.co/t/node-stats-null-pointer-exception-error/148739)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 4\ **Last updated:** [September 18, 2018, 12:44pm UTC](https://discuss.elastic.co/t/node-stats-null-pointer-exception-error/148739 "2018-09-18T12:44:31Z")
I am trying to gen nodes stat, because I could not see any of them in Cerebro statistics. I receive this error. curl -s -X GET "localhost:9201/\_cat/nodes?v" | jq . { "error": { "root\_cause": \[ { "typ… --- ## [Integrating elastic search with sonarqube](https://discuss.elastic.co/t/integrating-elastic-search-with-sonarqube/148975)
**Author:** [@Farmer](https://discuss.elastic.co/u/Farmer)\ **Replies:** 0\ **Last updated:** [September 18, 2018, 12:21pm UTC](https://discuss.elastic.co/t/integrating-elastic-search-with-sonarqube/148975 "2018-09-18T12:21:09Z")
Event: Starting sonarqube Error message in sonarqube console & sonar.log: "Waiting for Elasticsearch to be up and running" Actions performed: 1. Started elastic search by running "elasticsearch.bat" in the "elasticse… --- ## [Elasticsearch Jest client add condition to json query using parser](https://discuss.elastic.co/t/elasticsearch-jest-client-add-condition-to-json-query-using-parser/148960)
**Author:** [@GBP](https://discuss.elastic.co/u/GBP)\ **Replies:** 0\ **Last updated:** [September 18, 2018, 10:39am UTC](https://discuss.elastic.co/t/elasticsearch-jest-client-add-condition-to-json-query-using-parser/148960 "2018-09-18T10:39:02Z")
I am using Elasticsearch 6.3 with Jest client 6.3 (Java API) Search search = new Search.Builder(jsonQueryString) .addIndex("SOME\_INDEX") .build(); SearchResult result = jestClient… --- ## [High disk read on one node out of 3](https://discuss.elastic.co/t/high-disk-read-on-one-node-out-of-3/148611)
**Author:** [@Pavel\_Prokopenko](https://discuss.elastic.co/u/Pavel_Prokopenko)\ **Replies:** 1\ **Last updated:** [September 18, 2018, 11:47am UTC](https://discuss.elastic.co/t/high-disk-read-on-one-node-out-of-3/148611 "2018-09-18T11:47:49Z")
Hi! I observe very high disk read rate on one of our elaticsearch 5.5.2 nodes. Other 2 nodes do not have such problem. iotop tool confirms that the disk reads are actually done by the elasticsearch threads: TID PRI… --- ## [Is there any way to set default date range in elasticsearch](https://discuss.elastic.co/t/is-there-any-way-to-set-default-date-range-in-elasticsearch/148963)
**Author:** [@BleedCode](https://discuss.elastic.co/u/BleedCode)\ **Replies:** 0\ **Last updated:** [September 18, 2018, 10:57am UTC](https://discuss.elastic.co/t/is-there-any-way-to-set-default-date-range-in-elasticsearch/148963 "2018-09-18T10:57:23Z")
Is there any way in elasticsearch to set a default date range if to and from fields are null. Like whenever to and from are empty, then elasticsearch should perform search on the basis of defined default range. I have wr… --- ## [Couldn't connect to elasticsearch cluster hosted in the cloud](https://discuss.elastic.co/t/couldnt-connect-to-elasticsearch-cluster-hosted-in-the-cloud/148955)
**Author:** [@IBenabd](https://discuss.elastic.co/u/IBenabd)\ **Replies:** 1\ **Last updated:** [September 18, 2018, 10:07am UTC](https://discuss.elastic.co/t/couldnt-connect-to-elasticsearch-cluster-hosted-in-the-cloud/148955 "2018-09-18T10:07:09Z")
In order to connect to elasticsearch hosted in the elastic cloud rather than using the local one, I added to httpbeat.full.yml those two lines of code but no connection had been established : \> cloud.id: "Ikbe… --- ## [How to sort the composite aggregation results by score?](https://discuss.elastic.co/t/how-to-sort-the-composite-aggregation-results-by-score/148952)
**Author:** [@betty](https://discuss.elastic.co/u/betty)\ **Replies:** 0\ **Last updated:** [September 18, 2018, 9:51am UTC](https://discuss.elastic.co/t/how-to-sort-the-composite-aggregation-results-by-score/148952 "2018-09-18T09:51:04Z")
Elasticsearch ver: 6.2.4 I have now got the results of composite aggregation by: GET index/\_search { "aggs": { "my\_buckets": { "composite": { "sources": \[ { "name": { … --- ## [Combining multiple Tokenizer features on single \_all field](https://discuss.elastic.co/t/combining-multiple-tokenizer-features-on-single-all-field/148288)
**Author:** [@cdekker](https://discuss.elastic.co/u/cdekker)\ **Replies:** 1\ **Last updated:** [September 18, 2018, 9:39am UTC](https://discuss.elastic.co/t/combining-multiple-tokenizer-features-on-single-all-field/148288 "2018-09-18T09:39:55Z")
We have several customer defined indices on ES 6 with 100+ fields, where each field has a copy\_to mapping to an \_all field. This allows us to perform full-text search over all user-defined fields in the index. I have se… --- ## [Separate of read and write indices](https://discuss.elastic.co/t/separate-of-read-and-write-indices/148608)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 4\ **Last updated:** [September 18, 2018, 9:14am UTC](https://discuss.elastic.co/t/separate-of-read-and-write-indices/148608 "2018-09-18T09:14:09Z")
is there any way to setup separate readonly schema and write schema. --- ## [Primary shard is not active Timeout: \[1m\]](https://discuss.elastic.co/t/primary-shard-is-not-active-timeout-1m/148434)
**Author:** [@clgs](https://discuss.elastic.co/u/clgs)\ **Replies:** 1\ **Last updated:** [September 18, 2018, 7:29am UTC](https://discuss.elastic.co/t/primary-shard-is-not-active-timeout-1m/148434 "2018-09-18T07:29:37Z")
Hello. Please tell me why this happens? We have three servers, all three masters, but we write only on one Server A. When Server B is disconnected, the cluster breaks up and Server A and Server C error: server\_a:9200 … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1543) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1545)