# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1550 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1551 --- ## [@Query annotation how to pass size](https://discuss.elastic.co/t/query-annotation-how-to-pass-size/148365)
**Author:** [@chandra0651](https://discuss.elastic.co/u/chandra0651)\ **Replies:** 0\ **Last updated:** [September 12, 2018, 6:00pm UTC](https://discuss.elastic.co/t/query-annotation-how-to-pass-size/148365 "2018-09-12T18:00:41Z")
Hello I am using @Query parameter in the spring data repository class to query the elastic search but by default it is giving me back only top ten records is there a way where i can pass "size" along with the query --- ## [Single node cluster in production, any suggestion?](https://discuss.elastic.co/t/single-node-cluster-in-production-any-suggestion/148281)
**Author:** [@arota](https://discuss.elastic.co/u/arota)\ **Replies:** 1\ **Last updated:** [September 12, 2018, 5:11pm UTC](https://discuss.elastic.co/t/single-node-cluster-in-production-any-suggestion/148281 "2018-09-12T17:11:58Z")
Hello, I am about using Elasticsearch as component of a standalone application, running on a single node. The application will run on a pretty decent dedicated consumer machine (i7 7xxx/2c/4t, 16/32 gb of RAM, pcie SSD),… --- ## [Elasticsearch 6.3 CPU load & Disk I/O increased](https://discuss.elastic.co/t/elasticsearch-6-3-cpu-load-disk-i-o-increased/148318)
**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\ **Replies:** 4\ **Last updated:** [September 12, 2018, 4:46pm UTC](https://discuss.elastic.co/t/elasticsearch-6-3-cpu-load-disk-i-o-increased/148318 "2018-09-12T16:46:31Z")
Hi, I'm working on upgrading our Elasticsearch cluster from 1.4.3 to 6.3.0 Both old & new cluster has 3 master nodes, 4 client (coordinating) nodes and 11 data nodes (total 18 nodes). Cluster runs on AWS. Instance typ… --- ## [What are the minimum nodes required for Elastic 5 cluster](https://discuss.elastic.co/t/what-are-the-minimum-nodes-required-for-elastic-5-cluster/148222)
**Author:** [@rajkumar.m](https://discuss.elastic.co/u/rajkumar.m)\ **Replies:** 2\ **Last updated:** [September 12, 2018, 3:24pm UTC](https://discuss.elastic.co/t/what-are-the-minimum-nodes-required-for-elastic-5-cluster/148222 "2018-09-12T15:24:41Z")
Hi, I have upgraded my cluster from Elastic 4 to Elastic 5. I have observed that my cluster is not coming until all the nodes comes up with elastic process. In my old version, i was able to bring up cluster with minim… --- ## [Failing to get number of hits in devtools in kibana](https://discuss.elastic.co/t/failing-to-get-number-of-hits-in-devtools-in-kibana/148347)
**Author:** [@tilak\_varma](https://discuss.elastic.co/u/tilak_varma)\ **Replies:** 0\ **Last updated:** [September 12, 2018, 3:04pm UTC](https://discuss.elastic.co/t/failing-to-get-number-of-hits-in-devtools-in-kibana/148347 "2018-09-12T15:04:51Z")
Hi im trying to get a particular record say session id where im getting all the hits ? Im able to drive it in Discover with 4 hits which is good But in dev tools im getting all the 56 hits GET contact-ivr-2018.09.10/\_… --- ## [Elasticsearch et al SSO with kerberos/AD and groups doesn't work](https://discuss.elastic.co/t/elasticsearch-et-al-sso-with-kerberos-ad-and-groups-doesnt-work/148057)
**Author:** [@hakan-carlsson](https://discuss.elastic.co/u/hakan-carlsson)\ **Replies:** 6\ **Last updated:** [September 12, 2018, 1:27pm UTC](https://discuss.elastic.co/t/elasticsearch-et-al-sso-with-kerberos-ad-and-groups-doesnt-work/148057 "2018-09-12T13:27:06Z")
Following this: https://www.elastic.co/blog/how-to-secure-your-elasticsearch-clusters-using-kerberos gets it working with users. However, the mapping of groups seems not to work. LDAP According to the log, with acti… --- ## [Invalid Snapshot Exception when using Curator to create snapshot](https://discuss.elastic.co/t/invalid-snapshot-exception-when-using-curator-to-create-snapshot/147651)
**Author:** [@rshetty](https://discuss.elastic.co/u/rshetty)\ **Replies:** 6\ **Last updated:** [September 12, 2018, 1:16pm UTC](https://discuss.elastic.co/t/invalid-snapshot-exception-when-using-curator-to-create-snapshot/147651 "2018-09-12T13:16:37Z")
Hi, I have the latest version of Curator installed in my Linux server using the YUM repo installation process. I have trying to re-create a snapshot action which I had used in my local windows system, it had worked fine… --- ## [How to read a specific data from elasticsearch](https://discuss.elastic.co/t/how-to-read-a-specific-data-from-elasticsearch/146177)
**Author:** [@vivekranjan](https://discuss.elastic.co/u/vivekranjan)\ **Replies:** 2\ **Last updated:** [September 12, 2018, 12:45pm UTC](https://discuss.elastic.co/t/how-to-read-a-specific-data-from-elasticsearch/146177 "2018-09-12T12:45:23Z")
What is the efficient way to read a specific data from elastic search. For Example we have 3 field namely, name, dob and gender and I want to get the value of each of them so that I can compare it with newly given values… --- ## [Query on two indices of elasticsearch database](https://discuss.elastic.co/t/query-on-two-indices-of-elasticsearch-database/148112)
**Author:** [@kaushik.vankayala](https://discuss.elastic.co/u/kaushik.vankayala)\ **Replies:** 2\ **Last updated:** [September 12, 2018, 12:13pm UTC](https://discuss.elastic.co/t/query-on-two-indices-of-elasticsearch-database/148112 "2018-09-12T12:13:29Z")
Hi There, I have a requirement to query on elasticsearch data and my operation is dependent on two indices at a time. select x.date,distinct(y.number) from index1 x,index2 y where x.id1=y.id1 and id2 in (select id2 fro… --- ## [Function score and default value](https://discuss.elastic.co/t/function-score-and-default-value/148175)
**Author:** [@sandstrom](https://discuss.elastic.co/u/sandstrom)\ **Replies:** 0\ **Last updated:** [September 11, 2018, 4:12pm UTC](https://discuss.elastic.co/t/function-score-and-default-value/148175 "2018-09-11T16:12:11Z")
EDIT This question was based on a misunderstanding on my part, and is no longer valid. Please ignore it :slight\_smile: QUESTION How can I set the origin/starting value for function scores, which is now 0.5? EXAMPLE I… --- ## [Aggregation shows 0 instead of actual value](https://discuss.elastic.co/t/aggregation-shows-0-instead-of-actual-value/147527)
**Author:** [@ciddan](https://discuss.elastic.co/u/ciddan)\ **Replies:** 1\ **Last updated:** [September 12, 2018, 10:30am UTC](https://discuss.elastic.co/t/aggregation-shows-0-instead-of-actual-value/147527 "2018-09-12T10:30:43Z")
Hey, I'm having a mysterious issue with my Kibana visualizations. For some reason the CPU and memory graphs flatline to 0 after a specific date. The data is there, though. Searching for it in Discover shows non-0 values… --- ## [How to view the race result?](https://discuss.elastic.co/t/how-to-view-the-race-result/148078)
**Author:** [@arvid](https://discuss.elastic.co/u/arvid)\ **Replies:** 1\ **Last updated:** [September 12, 2018, 9:36am UTC](https://discuss.elastic.co/t/how-to-view-the-race-result/148078 "2018-09-12T09:36:03Z")
hi, run the command esrally list races, we can compare the result by esrally compare --baseline=20160518T112057Z --contender=20160518T112341Z but how to view one of race results by race timestamp? --- ## [Why ES doesn't stop my aggregation but just crashes?](https://discuss.elastic.co/t/why-es-doesnt-stop-my-aggregation-but-just-crashes/148170)
**Author:** [@arota](https://discuss.elastic.co/u/arota)\ **Replies:** 4\ **Last updated:** [September 12, 2018, 8:53am UTC](https://discuss.elastic.co/t/why-es-doesnt-stop-my-aggregation-but-just-crashes/148170 "2018-09-12T08:53:46Z")
Hello, I am learning Elasticsearch basics and I am dealing with an Out of Memory error when performing aggregations with a large number of buckets. I already know that for aggregations with 10000+ bucket I should use co… --- ## [Elasticsearch cluster on the same physical machine](https://discuss.elastic.co/t/elasticsearch-cluster-on-the-same-physical-machine/148279)
**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\ **Replies:** 1\ **Last updated:** [September 12, 2018, 8:48am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-on-the-same-physical-machine/148279 "2018-09-12T08:48:06Z")
Hi there. I'm opening this topic to get some advice from your side since I'm designing a ELK platform having some constraints. In particular, we will have to stick using a single machine with 32 or 64 GB of RAM. The a… --- ## [Elasticsearch pointer doesn't work](https://discuss.elastic.co/t/elasticsearch-pointer-doesnt-work/148278)
**Author:** [@NIloufarVafaei](https://discuss.elastic.co/u/NIloufarVafaei)\ **Replies:** 0\ **Last updated:** [September 12, 2018, 8:31am UTC](https://discuss.elastic.co/t/elasticsearch-pointer-doesnt-work/148278 "2018-09-12T08:31:55Z")
hi i try to send one of my collection in mongodb data base to elastic search .actually elasticsearch read data over and over ,so how can i solve this and it is my conf file in logstash input { mongodb { uri =\> 'mongo… --- ## [Cross Cluster Search does not work after a restart](https://discuss.elastic.co/t/cross-cluster-search-does-not-work-after-a-restart/148276)
**Author:** [@Gok](https://discuss.elastic.co/u/Gok)\ **Replies:** 0\ **Last updated:** [September 12, 2018, 7:59am UTC](https://discuss.elastic.co/t/cross-cluster-search-does-not-work-after-a-restart/148276 "2018-09-12T07:59:57Z")
Configured the Cross Cluster Search in elasticsearch.yml with two remote clusters. Everything is fine for the first time it starts. But when the CCS node is restarted, it does not connect to the remote cluster and throw… --- ## [GET /.tasks/task/{taskId} is not availbale when update by query task is running](https://discuss.elastic.co/t/get-tasks-task-taskid-is-not-availbale-when-update-by-query-task-is-running/148271)
**Author:** [@seeyou2day](https://discuss.elastic.co/u/seeyou2day)\ **Replies:** 0\ **Last updated:** [September 12, 2018, 7:42am UTC](https://discuss.elastic.co/t/get-tasks-task-taskid-is-not-availbale-when-update-by-query-task-is-running/148271 "2018-09-12T07:42:24Z")
when update by query is running with wait\_for\_completion=false, I can't get the response with '/.tasks/task/{taskId}'. It works after the action has finished. If I want to check the status while update-by-query is run… --- ## [Dynamic Mapping for Logs](https://discuss.elastic.co/t/dynamic-mapping-for-logs/148260)
**Author:** [@panda2004](https://discuss.elastic.co/u/panda2004)\ **Replies:** 0\ **Last updated:** [September 12, 2018, 5:26am UTC](https://discuss.elastic.co/t/dynamic-mapping-for-logs/148260 "2018-09-12T05:26:19Z")
Background: We have dozens of servers in our system. All of them use log4stash, an extention plugin for log4net, in order to index exception logs into ElasticSearch. The exception message is logged, and log4stash parse … --- ## [Should I set up 2 nodes for ES?](https://discuss.elastic.co/t/should-i-set-up-2-nodes-for-es/148161)
**Author:** [@saisimo02](https://discuss.elastic.co/u/saisimo02)\ **Replies:** 1\ **Last updated:** [September 12, 2018, 7:45am UTC](https://discuss.elastic.co/t/should-i-set-up-2-nodes-for-es/148161 "2018-09-12T07:45:03Z")
Hello I would like to know if we can deploy logstash, elasticsearch and kibana in the same machine and also setting up 2 nodes of elasticsearch in this machine. The idea is I want to give 31Go Ram for each node and 4Go … --- ## [Issue with Okta SAML "Request must contain a kbn-xsrf header"](https://discuss.elastic.co/t/issue-with-okta-saml-request-must-contain-a-kbn-xsrf-header/148183)
**Author:** [@vegasaint](https://discuss.elastic.co/u/vegasaint)\ **Replies:** 1\ **Last updated:** [September 12, 2018, 6:16am UTC](https://discuss.elastic.co/t/issue-with-okta-saml-request-must-contain-a-kbn-xsrf-header/148183 "2018-09-12T06:16:35Z")
I am having issues setting up SSO via Okta with our Elasticsearch and Kibana. I get the following error: {"statusCode":400,"error":"Bad Request","message":"Request must contain a kbn-xsrf header."} In my kibana.yml I … --- ## [Need Index template and grok filter for uipath logs](https://discuss.elastic.co/t/need-index-template-and-grok-filter-for-uipath-logs/148263)
**Author:** [@suda\_amir](https://discuss.elastic.co/u/suda_amir)\ **Replies:** 0\ **Last updated:** [September 12, 2018, 6:08am UTC](https://discuss.elastic.co/t/need-index-template-and-grok-filter-for-uipath-logs/148263 "2018-09-12T06:08:59Z")
12:51:01.9504 Info {"message":"testing execution ended","level":"Information","logType":"Default","timeStamp":"2018-09-11T12:51:01.9284841+05:30","fingerprint":"5e95ec39-7812-4e66-b469-43e3d1c8e6fa","windowsIdentity":"us… --- ## [NEST 6.2 using wildcard in indices](https://discuss.elastic.co/t/nest-6-2-using-wildcard-in-indices/147042)
**Author:** [@\_kyllr](https://discuss.elastic.co/u/_kyllr)\ **Replies:** 10\ **Last updated:** [September 12, 2018, 4:09am UTC](https://discuss.elastic.co/t/nest-6-2-using-wildcard-in-indices/147042 "2018-09-12T04:09:36Z")
Hi, is there a way to use a wildcard query in indices using NEST? We have indices like: index-2018.08 index-2018.09 and we only want to use those indices in one query in c#. We used index-\* but it shows invalid resp… --- ## [Elasticsearch master node was suddenly down](https://discuss.elastic.co/t/elasticsearch-master-node-was-suddenly-down/148252)
**Author:** [@wyukawa](https://discuss.elastic.co/u/wyukawa)\ **Replies:** 2\ **Last updated:** [September 12, 2018, 3:47am UTC](https://discuss.elastic.co/t/elasticsearch-master-node-was-suddenly-down/148252 "2018-09-12T03:47:42Z")
move from https://github.com/elastic/elasticsearch/issues/33618 We have three master nodes and one of them was suddenly down but there is no meaningful log. I guess ExitOnOutOfMemoryError worked. Elasticsearch version… --- ## [Can i have 0 shards?](https://discuss.elastic.co/t/can-i-have-0-shards/148226)
**Author:** [@ana1](https://discuss.elastic.co/u/ana1)\ **Replies:** 2\ **Last updated:** [September 12, 2018, 3:45am UTC](https://discuss.elastic.co/t/can-i-have-0-shards/148226 "2018-09-12T03:45:07Z")
Hi guys, Sorry i am new in elastic and i didnt find my question, what happen if i only have one node and the size of my indices are small. Can i put 0 shards? i mean i didnt see the reason to put more, because if i put … --- ## [How can I create multi-index by ---track-params?](https://discuss.elastic.co/t/how-can-i-create-multi-index-by-track-params/148092)
**Author:** [@Todd](https://discuss.elastic.co/u/Todd)\ **Replies:** 2\ **Last updated:** [September 12, 2018, 2:42am UTC](https://discuss.elastic.co/t/how-can-i-create-multi-index-by-track-params/148092 "2018-09-12T02:42:41Z")
Now, the configuration file track.json is: {% set index\_count = 3 %} { "version": 2, "description": "max throughput with {{index\_count}} index", "indices": \[ {% set comma = joiner() %} {% for item in range… --- ## [Unable to fetch the data with help of QueryBuilders.termQuery](https://discuss.elastic.co/t/unable-to-fetch-the-data-with-help-of-querybuilders-termquery/148051)
**Author:** [@Arun\_S.P](https://discuss.elastic.co/u/Arun_S.P)\ **Replies:** 1\ **Last updated:** [September 12, 2018, 2:01am UTC](https://discuss.elastic.co/t/unable-to-fetch-the-data-with-help-of-querybuilders-termquery/148051 "2018-09-12T02:01:34Z")
I am a newcomer to elastic search I was trying to work with high-level Rest Client I am able to work with CRUD operations, With Search functionality, I got stuck up. My objective to bring all the data based on the book… --- ## [Sending context variable values as a parameter to a stored script](https://discuss.elastic.co/t/sending-context-variable-values-as-a-parameter-to-a-stored-script/147977)
**Author:** [@kungfu](https://discuss.elastic.co/u/kungfu)\ **Replies:** 1\ **Last updated:** [September 11, 2018, 11:46pm UTC](https://discuss.elastic.co/t/sending-context-variable-values-as-a-parameter-to-a-stored-script/147977 "2018-09-11T23:46:07Z")
I'm copying this message here since I sended it to ElasticSearch support on 9/4 but I have still no answers. Thanks. Hello. I'm creating watchers on ES. Since they will post a standard structure to a webhook I've cre… --- ## [How to create a watcher for average response time](https://discuss.elastic.co/t/how-to-create-a-watcher-for-average-response-time/148230)
**Author:** [@caleb.king](https://discuss.elastic.co/u/caleb.king)\ **Replies:** 0\ **Last updated:** [September 11, 2018, 10:41pm UTC](https://discuss.elastic.co/t/how-to-create-a-watcher-for-average-response-time/148230 "2018-09-11T22:41:31Z")
Hi folks! I am fairly new to ELK coming from Splunk. Our team would want an alert/watcher to send an email if the average response time of our service is greater than X seconds. Does anyone have a watcher.json example… --- ## [Querying indices that match an index pattern](https://discuss.elastic.co/t/querying-indices-that-match-an-index-pattern/148212)
**Author:** [@dwiz](https://discuss.elastic.co/u/dwiz)\ **Replies:** 0\ **Last updated:** [September 11, 2018, 7:57pm UTC](https://discuss.elastic.co/t/querying-indices-that-match-an-index-pattern/148212 "2018-09-11T19:57:12Z")
Trying to query all indices that match a given pattern, exact or partial (with \*). The aggregation on \_field doesn't work since that doesn't seem to match indices with no documents. And I looked into the \_cat/indices API… --- ## [Multiple elasticsearch python client sending bulk json data to single ES cluster](https://discuss.elastic.co/t/multiple-elasticsearch-python-client-sending-bulk-json-data-to-single-es-cluster/148210)
**Author:** [@Rahul1](https://discuss.elastic.co/u/Rahul1)\ **Replies:** 0\ **Last updated:** [September 11, 2018, 7:45pm UTC](https://discuss.elastic.co/t/multiple-elasticsearch-python-client-sending-bulk-json-data-to-single-es-cluster/148210 "2018-09-11T19:45:45Z")
I am planning to have elasticsearch python client on each of my ec2 servers (around 50-60 ec2 servers) send data to my single ES cluster. Each python client will send bulk json every second to the ES cluster. Total - 50… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1549) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1551)