# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1573

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1574

---

## [How to enable Highlighter](https://discuss.elastic.co/t/how-to-enable-highlighter/145426)

<div class="topic-metadata">

**Author:** [@askids](https://discuss.elastic.co/u/askids)\
**Replies:** 0\
**Last updated:** [August 21, 2018, 3:57pm UTC](https://discuss.elastic.co/t/how-to-enable-highlighter/145426 "2018-08-21T15:57:35Z")

</div>

hi, Is there any setting that has to be enabled to allow highlighter to work? Currently, I am not getting the highlight section itself in the response. I am using ES 5.5.1 on windows 2012. GET individual/\_search { …

---

## [Trial License for xpack](https://discuss.elastic.co/t/trial-license-for-xpack/145302)

<div class="topic-metadata">

**Author:** [@vishnuduttpv](https://discuss.elastic.co/u/vishnuduttpv)\
**Replies:** 4\
**Last updated:** [August 21, 2018, 3:50pm UTC](https://discuss.elastic.co/t/trial-license-for-xpack/145302 "2018-08-21T15:50:45Z")

</div>

Hi, Where can I get the trial license for the xpack? Request to advise

---

## [Esrally-elastic mutual TLS](https://discuss.elastic.co/t/esrally-elastic-mutual-tls/143515)

<div class="topic-metadata">

**Author:** [@fara](https://discuss.elastic.co/u/fara)\
**Replies:** 18\
**Last updated:** [August 21, 2018, 3:22pm UTC](https://discuss.elastic.co/t/esrally-elastic-mutual-tls/143515 "2018-08-21T15:22:50Z")

</div>

Hi, I am trying to use rally(1.0.1) to connect to elastic 6.1 using mutual tls. I am completely sure the client certificates and key as well as CA cert are properly generated. Debugging the code (client.py) class I h…

---

## [Collapsing Multiple Fields or Equivalent Effect](https://discuss.elastic.co/t/collapsing-multiple-fields-or-equivalent-effect/145257)

<div class="topic-metadata">

**Author:** [@mattjp213](https://discuss.elastic.co/u/mattjp213)\
**Replies:** 0\
**Last updated:** [August 20, 2018, 11:06pm UTC](https://discuss.elastic.co/t/collapsing-multiple-fields-or-equivalent-effect/145257 "2018-08-20T23:06:32Z")

</div>

I am fairly new to Elasticsearch, but I was recently given a task at work that will require its use and after 2 days of searching and experimenting I'm not sure if Elasticsearch will be able to accomplish what I'm trying…

---

## [Rollover or not](https://discuss.elastic.co/t/rollover-or-not/145404)

<div class="topic-metadata">

**Author:** [@JohanRask](https://discuss.elastic.co/u/JohanRask)\
**Replies:** 2\
**Last updated:** [August 21, 2018, 2:19pm UTC](https://discuss.elastic.co/t/rollover-or-not/145404 "2018-08-21T14:19:59Z")

</div>

Hi, My question is whether using Rollover API is useful even if we do not use a hot/warm hw setup (all our nodes have the same hardware). What we want to gain is: to have more equal sized shards without having to man…

---

## [Gateway timeout 504](https://discuss.elastic.co/t/gateway-timeout-504/145405)

<div class="topic-metadata">

**Author:** [@yonatan](https://discuss.elastic.co/u/yonatan)\
**Replies:** 0\
**Last updated:** [August 21, 2018, 2:09pm UTC](https://discuss.elastic.co/t/gateway-timeout-504/145405 "2018-08-21T14:09:53Z")

</div>

I updated some indices mapping to simply add a keyword field to a text property and reloaded Kibana's index patterns. I was told I should run this command at the end: POST 11ad.pi.prod.test-case-18/\_update\_by\_query?conf…

---

## [Spring data and elasticsearch (6+) release confusion](https://discuss.elastic.co/t/spring-data-and-elasticsearch-6-release-confusion/139789)

<div class="topic-metadata">

**Author:** [@kotek](https://discuss.elastic.co/u/kotek)\
**Replies:** 5\
**Last updated:** [August 21, 2018, 1:34pm UTC](https://discuss.elastic.co/t/spring-data-and-elasticsearch-6-release-confusion/139789 "2018-08-21T13:34:07Z")

</div>

Hi all! My first post here so hopefully i'll be right on spot. I'm new to ES and trying to integrate with a Spring Data for a production app, as I prefer using Spring Data vs. ES Java API client (java high level rest)…

---

## [\[BulkExport ES5.5.0\]When one node down, the index rate of the cluster almost drop to 0](https://discuss.elastic.co/t/bulkexport-es5-5-0-when-one-node-down-the-index-rate-of-the-cluster-almost-drop-to-0/145275)

<div class="topic-metadata">

**Author:** [@Holygost](https://discuss.elastic.co/u/Holygost)\
**Replies:** 3\
**Last updated:** [August 21, 2018, 1:30pm UTC](https://discuss.elastic.co/t/bulkexport-es5-5-0-when-one-node-down-the-index-rate-of-the-cluster-almost-drop-to-0/145275 "2018-08-21T13:30:21Z")

</div>

When one node down for some reasons from ES5.5.0 cluster, Then the index rate of the cluster almost drop to 0. After 10 minutes, the index rate resumed. And this situation happened every time when node down, any o…

---

## [MINUS Operator](https://discuss.elastic.co/t/minus-operator/145395)

<div class="topic-metadata">

**Author:** [@prabhu-ch](https://discuss.elastic.co/u/prabhu-ch)\
**Replies:** 0\
**Last updated:** [August 21, 2018, 1:21pm UTC](https://discuss.elastic.co/t/minus-operator/145395 "2018-08-21T13:21:01Z")

</div>

Hi , I am searching for "MINUS" Operator example. POST \_xpack/sql { "query":"SELECT user as t FROM my\_index WHERE activity = 1 MINUS SELECT user as t FROM my\_index WHERE activity = 2 " } Thanks in advance.

---

## [How to check what fields are used for index sorting?](https://discuss.elastic.co/t/how-to-check-what-fields-are-used-for-index-sorting/145334)

<div class="topic-metadata">

**Author:** [@porunov](https://discuss.elastic.co/u/porunov)\
**Replies:** 1\
**Last updated:** [August 21, 2018, 12:51pm UTC](https://discuss.elastic.co/t/how-to-check-what-fields-are-used-for-index-sorting/145334 "2018-08-21T12:51:17Z")

</div>

Hello, Since version 6.0 there was added a feature "Index Sorting": https://www.elastic.co/guide/en/elasticsearch/reference/master/index-modules-index-sorting.html Is there a possibility to check what fields are used …

---

## [Reindex api and date field](https://discuss.elastic.co/t/reindex-api-and-date-field/144943)

<div class="topic-metadata">

**Author:** [@guilherme\_maranhao](https://discuss.elastic.co/u/guilherme_maranhao)\
**Replies:** 5\
**Last updated:** [August 21, 2018, 12:43pm UTC](https://discuss.elastic.co/t/reindex-api-and-date-field/144943 "2018-08-21T12:43:55Z")

</div>

Dear all, I've used \_reindex and all the date fields were changed to "type": "text". In the source index, they are all declared as follow: my\_date\_field": { "type": "date", "format": "yyyy-MM-dd HH:mm:ss" } The reinde…

---

## [\[TO DELETE\] Elasticsearch-systemd-pre-exec (code=exited, status=203/EXEC)](https://discuss.elastic.co/t/to-delete-elasticsearch-systemd-pre-exec-code-exited-status-203-exec/145344)

<div class="topic-metadata">

**Author:** [@khl3o](https://discuss.elastic.co/u/khl3o)\
**Replies:** 0\
**Last updated:** [August 21, 2018, 9:35am UTC](https://discuss.elastic.co/t/to-delete-elasticsearch-systemd-pre-exec-code-exited-status-203-exec/145344 "2018-08-21T09:35:19Z")

</div>

Hello, I would like to start my elasticsearch service but I have the following error: Process: 23632 ExecStartPre=/usr/share/elasticsearch/bin/elasticsearch-systemd-pre-exec (code=exited, status=203/EXEC) Main PID: 282…

---

## [What is the difference between elasticsearch-oss and elasticsearch images?](https://discuss.elastic.co/t/what-is-the-difference-between-elasticsearch-oss-and-elasticsearch-images/145372)

<div class="topic-metadata">

**Author:** [@usherfu](https://discuss.elastic.co/u/usherfu)\
**Replies:** 1\
**Last updated:** [August 21, 2018, 12:23pm UTC](https://discuss.elastic.co/t/what-is-the-difference-between-elasticsearch-oss-and-elasticsearch-images/145372 "2018-08-21T12:23:42Z")

</div>

hi, I saw there are two different docker image for elasticsearch: docker.elastic.co/elasticsearch/elasticsearch docker.elastic.co/elasticsearch/elasticsearch-oss Is there any document explaining the difference? Than…

---

## [Too many open files in shards allocation](https://discuss.elastic.co/t/too-many-open-files-in-shards-allocation/145347)

<div class="topic-metadata">

**Author:** [@Edouard\_Fazenda](https://discuss.elastic.co/u/Edouard_Fazenda)\
**Replies:** 5\
**Last updated:** [August 21, 2018, 11:52am UTC](https://discuss.elastic.co/t/too-many-open-files-in-shards-allocation/145347 "2018-08-21T11:52:29Z")

</div>

Dear Community, I have the following issue since few days i have some unassigned shards due to allocation faillure, so the cluster goes to yellow and sometimes the cluster go to red as the elasticsearch service goes dow…

---

## [Generate a UUID using randomuuid in painless](https://discuss.elastic.co/t/generate-a-uuid-using-randomuuid-in-painless/144354)

<div class="topic-metadata">

**Author:** [@Yasser\_Ouakil](https://discuss.elastic.co/u/Yasser_Ouakil)\
**Replies:** 3\
**Last updated:** [August 21, 2018, 11:32am UTC](https://discuss.elastic.co/t/generate-a-uuid-using-randomuuid-in-painless/144354 "2018-08-21T11:32:43Z")

</div>

Hi, I need help please, i want to generate a UUID code with Painless language. I know that exists something like UUID.randomuuid() in Groovy, but is does not work in Painless. Thank you !

---

## [What happens to search when the X-Pack license expires?](https://discuss.elastic.co/t/what-happens-to-search-when-the-x-pack-license-expires/145369)

<div class="topic-metadata">

**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\
**Replies:** 1\
**Last updated:** [August 21, 2018, 11:16am UTC](https://discuss.elastic.co/t/what-happens-to-search-when-the-x-pack-license-expires/145369 "2018-08-21T11:16:43Z")

</div>

I have a licensed version of X-Pack for Elasticsearch. In the system, x-pack is used for role based security for document filtering. Lets say if I forget to renew the license of X-Pack and it expires, how will the searc…

---

## [\[elastic/elasticsearch\] Cannot bulk index a JSON file greater than 100MB in Elasticsearch. Tried changing HTTP content length but it doesn't work](https://discuss.elastic.co/t/elastic-elasticsearch-cannot-bulk-index-a-json-file-greater-than-100mb-in-elasticsearch-tried-changing-http-content-length-but-it-doesnt-work/144861)

<div class="topic-metadata">

**Author:** [@shwetha\_thakur](https://discuss.elastic.co/u/shwetha_thakur)\
**Replies:** 13\
**Last updated:** [August 21, 2018, 10:58am UTC](https://discuss.elastic.co/t/elastic-elasticsearch-cannot-bulk-index-a-json-file-greater-than-100mb-in-elasticsearch-tried-changing-http-content-length-but-it-doesnt-work/144861 "2018-08-21T10:58:51Z")

</div>

I am using Elasticsearch 6.3 latest version. I am not able to bulk index a JSON file with size greater than 100MB. when I run the below command to bulk index, there will be no error but the index will not be created. I t…

---

## [Complete logs does not load in kibana tool](https://discuss.elastic.co/t/complete-logs-does-not-load-in-kibana-tool/145365)

<div class="topic-metadata">

**Author:** [@FreddyRaj](https://discuss.elastic.co/u/FreddyRaj)\
**Replies:** 0\
**Last updated:** [August 21, 2018, 10:36am UTC](https://discuss.elastic.co/t/complete-logs-does-not-load-in-kibana-tool/145365 "2018-08-21T10:36:54Z")

</div>

Hi Team, I am seeking help to understand an issue noticed where in Kibana not all lines of the logs are printed but just 499 lines and then nothing after that. We have a job that runs daily and log file get created wit…

---

## [Visualizing Logstash Output](https://discuss.elastic.co/t/visualizing-logstash-output/145309)

<div class="topic-metadata">

**Author:** [@Priyaranjan\_Mudliar](https://discuss.elastic.co/u/Priyaranjan_Mudliar)\
**Replies:** 0\
**Last updated:** [August 21, 2018, 7:12am UTC](https://discuss.elastic.co/t/visualizing-logstash-output/145309 "2018-08-21T07:12:12Z")

</div>

Sorry if this has been discussed before, I am a newbie in ELK stack I have two application servers which has a bunch of log files that i collect and parse using logstash. Now i need Kibana to visualize those logs but th…

---

## [Elasticsearch-py not compatible with cross cluster search](https://discuss.elastic.co/t/elasticsearch-py-not-compatible-with-cross-cluster-search/140713)

<div class="topic-metadata">

**Author:** [@bbailey](https://discuss.elastic.co/u/bbailey)\
**Replies:** 3\
**Last updated:** [August 21, 2018, 10:30am UTC](https://discuss.elastic.co/t/elasticsearch-py-not-compatible-with-cross-cluster-search/140713 "2018-08-21T10:30:36Z")

</div>

We have been using the elasticsearch-py module for a couple of years to automate data analysis across a multiple clusters using tribe nodes. We have now replaced the tribe nodes with cross cluster search nodes but seem u…

---

## [Recursivity in ES structure](https://discuss.elastic.co/t/recursivity-in-es-structure/145320)

<div class="topic-metadata">

**Author:** [@Dave38](https://discuss.elastic.co/u/Dave38)\
**Replies:** 2\
**Last updated:** [August 21, 2018, 10:10am UTC](https://discuss.elastic.co/t/recursivity-in-es-structure/145320 "2018-08-21T10:10:49Z")

</div>

Hi everyone ! I have a question about es structure and complex objects. I need to create a complex structure with recursive objects. So I have defined a first object, for example "message", and inside message i put the…

---

## [Got error at time of bulk insert](https://discuss.elastic.co/t/got-error-at-time-of-bulk-insert/144989)

<div class="topic-metadata">

**Author:** [@dilip1](https://discuss.elastic.co/u/dilip1)\
**Replies:** 4\
**Last updated:** [August 21, 2018, 9:40am UTC](https://discuss.elastic.co/t/got-error-at-time-of-bulk-insert/144989 "2018-08-21T09:40:00Z")

</div>

my url -\> http://localhost:9200/schools/\_bulk post data -\> { "index":{ "\_index":"schools", "\_type":"school", "\_id":"1" } } { "name":"Central School", "description":"CBSE Affiliation", "street":"Nagan", "city":"pa…

---

## [Single metric viewer, greyed out](https://discuss.elastic.co/t/single-metric-viewer-greyed-out/145236)

<div class="topic-metadata">

**Author:** [@palace](https://discuss.elastic.co/u/palace)\
**Replies:** 1\
**Last updated:** [August 21, 2018, 9:18am UTC](https://discuss.elastic.co/t/single-metric-viewer-greyed-out/145236 "2018-08-21T09:18:34Z")

</div>

Hello, I made a few adjustments to the keywords by which I am partitioning the data on using painless. I am able to see the results through the anomaly explorer however I am unable to access the single metric viewer (it…

---

## [Snapshot with index pattern](https://discuss.elastic.co/t/snapshot-with-index-pattern/145196)

<div class="topic-metadata">

**Author:** [@rog\_NB](https://discuss.elastic.co/u/rog_NB)\
**Replies:** 3\
**Last updated:** [August 21, 2018, 9:10am UTC](https://discuss.elastic.co/t/snapshot-with-index-pattern/145196 "2018-08-21T09:10:04Z")

</div>

Hello I'm trying to create a python script to automaticly create snapshots. This is not a big deal. But will use kibanas "Index Pattern". You find that under kibana - Management /Kibana. there you may create a new Ind…

---

## [Elasticsearch failed after few seconds of start](https://discuss.elastic.co/t/elasticsearch-failed-after-few-seconds-of-start/145330)

<div class="topic-metadata">

**Author:** [@gymbo](https://discuss.elastic.co/u/gymbo)\
**Replies:** 0\
**Last updated:** [August 21, 2018, 8:36am UTC](https://discuss.elastic.co/t/elasticsearch-failed-after-few-seconds-of-start/145330 "2018-08-21T08:36:29Z")

</div>

I start Elasticsearch with command "systemctl start elasticsearch.service" Then i check if elasticsearch is running with "systemctl status elasticsearch.service" I have Ubuntu 18.04 and Elasticsearch 6.3 After 10-20 s…

---

## [Elasticsearch OR query with nested objects returns inner\_hits not matching the criteria](https://discuss.elastic.co/t/elasticsearch-or-query-with-nested-objects-returns-inner-hits-not-matching-the-criteria/142249)

<div class="topic-metadata">

**Author:** [@scarrascoso](https://discuss.elastic.co/u/scarrascoso)\
**Replies:** 1\
**Last updated:** [August 21, 2018, 9:05am UTC](https://discuss.elastic.co/t/elasticsearch-or-query-with-nested-objects-returns-inner-hits-not-matching-the-criteria/142249 "2018-08-21T09:05:23Z")

</div>

Hi: I'm getting weird results when querying nested objects. Imagine the following structure: { owner.name = "fred", ..., pets \[ { name = "daisy", ... }, { name = "flopsy", ... } \] } If I only have the do…

---

## [Restarting cluster takes long time. Update mapping times out](https://discuss.elastic.co/t/restarting-cluster-takes-long-time-update-mapping-times-out/144930)

<div class="topic-metadata">

**Author:** [@cdekker](https://discuss.elastic.co/u/cdekker)\
**Replies:** 3\
**Last updated:** [August 21, 2018, 8:48am UTC](https://discuss.elastic.co/t/restarting-cluster-takes-long-time-update-mapping-times-out/144930 "2018-08-21T08:48:48Z")

</div>

Whenever I restart my cluster completely, do a rolling restart or a node simply disconnects from the cluster due to a network hickup a lengthy recovery process is started that can take multiple hours to complete. All sha…

---

## [Uneven size per shards](https://discuss.elastic.co/t/uneven-size-per-shards/144852)

<div class="topic-metadata">

**Author:** [@lazam](https://discuss.elastic.co/u/lazam)\
**Replies:** 4\
**Last updated:** [August 21, 2018, 8:47am UTC](https://discuss.elastic.co/t/uneven-size-per-shards/144852 "2018-08-21T08:47:11Z")

</div>

Hello! I saw some previous posts about uneven shard distribution but I was unable to get information that I need. I have an index which has 2 Shards and 1 Replication: index-name 1 r STARTED 1510504 546.6…

---

## [Client.go:112: Failed to perform any bulk index operations: 406 Not Acceptable](https://discuss.elastic.co/t/client-go-failed-to-perform-any-bulk-index-operations-406-not-acceptable/145331)

<div class="topic-metadata">

**Author:** [@rituraj](https://discuss.elastic.co/u/rituraj)\
**Replies:** 0\
**Last updated:** [August 21, 2018, 8:45am UTC](https://discuss.elastic.co/t/client-go-failed-to-perform-any-bulk-index-operations-406-not-acceptable/145331 "2018-08-21T08:45:58Z")

</div>

Hi Team, I have done some changes on filebeat.yml to change index name for filebeat and visualize in kibana. but getting below error while restarting filebeat service. \[root@nagios-core filebeat\]# systemctl status fil…

---

## [Where is data stored in ES](https://discuss.elastic.co/t/where-is-data-stored-in-es/145315)

<div class="topic-metadata">

**Author:** [@amnon\_d](https://discuss.elastic.co/u/amnon_d)\
**Replies:** 7\
**Last updated:** [August 21, 2018, 8:13am UTC](https://discuss.elastic.co/t/where-is-data-stored-in-es/145315 "2018-08-21T08:13:29Z")

</div>

Hi there, Appologies if this question will sound stupid.... I am testing some high availability concepts and I am puzzled about one thing. For my test I am running an ES cluster with one master, two data nodes and one…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1572)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1574)
