# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1661 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1662 --- ## [Replica shards unassigned after Shards allocation filter applied](https://discuss.elastic.co/t/replica-shards-unassigned-after-shards-allocation-filter-applied/134630)
**Author:** [@Ghanshyam\_Singh](https://discuss.elastic.co/u/Ghanshyam_Singh)\ **Replies:** 8\ **Last updated:** [June 7, 2018, 5:14pm UTC](https://discuss.elastic.co/t/replica-shards-unassigned-after-shards-allocation-filter-applied/134630 "2018-06-07T17:14:30Z")
I want to upgrade operating system for my elasticsearch cluster so I Planned not to give downtime to my cluster so I followed below steps. pass below command to reallocate shards for one server from cluster, PUT \_clus… --- ## [DNS not working on Cross Cluster Search?](https://discuss.elastic.co/t/dns-not-working-on-cross-cluster-search/132893)
**Author:** [@xamox](https://discuss.elastic.co/u/xamox)\ **Replies:** 1\ **Last updated:** [June 7, 2018, 2:55pm UTC](https://discuss.elastic.co/t/dns-not-working-on-cross-cluster-search/132893 "2018-06-07T14:55:37Z")
Trying to setup cross cluster search with DNS and it appears to not be working, but working fine if I specify IP. I'm using Elasticsearch 6.1.1 I've confirmed the DNS is propagated and is mapped to the correct IP addre… --- ## [Must\_not filter not working in query\_string](https://discuss.elastic.co/t/must-not-filter-not-working-in-query-string/135012)
**Author:** [@veerabhadraiah](https://discuss.elastic.co/u/veerabhadraiah)\ **Replies:** 0\ **Last updated:** [June 7, 2018, 2:18pm UTC](https://discuss.elastic.co/t/must-not-filter-not-working-in-query-string/135012 "2018-06-07T14:18:22Z")
Hi , Created index my\_index with Created index with ngram analyser POST my\_index { "settings": { "analysis": { "filter": { "nGram\_filte… --- ## [Extend built-in analyzers](https://discuss.elastic.co/t/extend-built-in-analyzers/134778)
**Author:** [@yansal](https://discuss.elastic.co/u/yansal)\ **Replies:** 7\ **Last updated:** [June 7, 2018, 2:19pm UTC](https://discuss.elastic.co/t/extend-built-in-analyzers/134778 "2018-06-07T14:19:52Z")
My use case is to add the html\_strip char\_filter to an existing language analyzer. For example, I would like to create an index like this one: PUT /myindex { "settings": { "analysis": { "analyze… --- ## [Curator - Move daily indices into weekly](https://discuss.elastic.co/t/curator-move-daily-indices-into-weekly/135001)
**Author:** [@barryp](https://discuss.elastic.co/u/barryp)\ **Replies:** 2\ **Last updated:** [June 7, 2018, 2:16pm UTC](https://discuss.elastic.co/t/curator-move-daily-indices-into-weekly/135001 "2018-06-07T14:16:17Z")
What is the best method to move daily indices into a week index after 7 days? shrink reindex --- ## [Can't get an index to stay Open](https://discuss.elastic.co/t/cant-get-an-index-to-stay-open/134998)
**Author:** [@bobbo489](https://discuss.elastic.co/u/bobbo489)\ **Replies:** 1\ **Last updated:** [June 7, 2018, 1:49pm UTC](https://discuss.elastic.co/t/cant-get-an-index-to-stay-open/134998 "2018-06-07T13:49:52Z")
Hello, I am trying to access an old index to open up and stay open, however whenever I open it, through Kibana/DevOps using POST //\_open the index will open for approximately 10 seconds, then it will auto close. I need… --- ## [Action \[indices:admin/create\] is unauthorized for user \[kibana\]](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user-kibana/134958)
**Author:** [@RakshaChoudhary](https://discuss.elastic.co/u/RakshaChoudhary)\ **Replies:** 3\ **Last updated:** [June 7, 2018, 1:14pm UTC](https://discuss.elastic.co/t/action-indices-admin-create-is-unauthorized-for-user-kibana/134958 "2018-06-07T13:14:39Z")
Hi, I am new to ElasticSearch and Kibana. Installed elasticsearch and Kibana at my laptop. Installed xpack also. I ran elasticsearch and kibana batch. And the trying to run below line in Dev Tools of Kibana. PUT /scho… --- ## [Cross\_fields and boost - Is it feasible?](https://discuss.elastic.co/t/cross-fields-and-boost-is-it-feasible/134219)
**Author:** [@lapilit](https://discuss.elastic.co/u/lapilit)\ **Replies:** 14\ **Last updated:** [June 7, 2018, 12:42pm UTC](https://discuss.elastic.co/t/cross-fields-and-boost-is-it-feasible/134219 "2018-06-07T12:42:33Z")
Does it work-as-expected in common sense, when boosting individual fields of cross\_fields query? It looks like the following page states it's impractical to use boosting of cross\_fields query: Note that cross\_fields i… --- ## [Is it possible to use context suggester with multisearch API](https://discuss.elastic.co/t/is-it-possible-to-use-context-suggester-with-multisearch-api/134967)
**Author:** [@rs123](https://discuss.elastic.co/u/rs123)\ **Replies:** 0\ **Last updated:** [June 7, 2018, 11:27am UTC](https://discuss.elastic.co/t/is-it-possible-to-use-context-suggester-with-multisearch-api/134967 "2018-06-07T11:27:33Z")
I want to use multi search API with context suggester but I do not know is it possible or not. If possible can anyone suggest how to do. I did not find anything on the forum and multi search API page also have discussed … --- ## [Getting search.max\_buckets Warning message in deprecation.log file](https://discuss.elastic.co/t/getting-search-max-buckets-warning-message-in-deprecation-log-file/134851)
**Author:** [@sureshsubramaniyan](https://discuss.elastic.co/u/sureshsubramaniyan)\ **Replies:** 1\ **Last updated:** [June 7, 2018, 11:32am UTC](https://discuss.elastic.co/t/getting-search-max-buckets-warning-message-in-deprecation-log-file/134851 "2018-06-07T11:32:16Z")
while creating term aggregation in kibana , getting below error in elasticsearch deprecation.log file \[2018-06-06T17:40:58,684\]\[WARN \]\[o.e.d.s.a.MultiBucketConsumerService\] This aggregation creates too many buckets (100… --- ## [Size of Training Data](https://discuss.elastic.co/t/size-of-training-data/134829)
**Author:** [@Lazarbeam](https://discuss.elastic.co/u/Lazarbeam)\ **Replies:** 2\ **Last updated:** [June 7, 2018, 11:24am UTC](https://discuss.elastic.co/t/size-of-training-data/134829 "2018-06-07T11:24:56Z")
Is there any recommendation for the amount of training data to have available for ML? We currently store one week's worth of data in Elasticsearch, which totals about 100GB of total storage. We have a process that clean… --- ## [Facing issue in a query](https://discuss.elastic.co/t/facing-issue-in-a-query/134887)
**Author:** [@Ankit\_Garg](https://discuss.elastic.co/u/Ankit_Garg)\ **Replies:** 1\ **Last updated:** [June 7, 2018, 11:16am UTC](https://discuss.elastic.co/t/facing-issue-in-a-query/134887 "2018-06-07T11:16:28Z")
I am using multi-search query with a filter query . but I am getting no result after applying filter. { "query": { "bool": { "must": { "multi\_match": { "operator": "and", "query": "st", "fields": \[ "email", "f… --- ## [How to find children counts against each parent in ES using join field](https://discuss.elastic.co/t/how-to-find-children-counts-against-each-parent-in-es-using-join-field/134961)
**Author:** [@Syed\_ali\_abbas\_shah](https://discuss.elastic.co/u/Syed_ali_abbas_shah)\ **Replies:** 0\ **Last updated:** [June 7, 2018, 11:00am UTC](https://discuss.elastic.co/t/how-to-find-children-counts-against-each-parent-in-es-using-join-field/134961 "2018-06-07T11:00:00Z")
How to find children counts against each parent in ES using join field --- ## [The data in the index, how to achieve based on time to delete the content inside?](https://discuss.elastic.co/t/the-data-in-the-index-how-to-achieve-based-on-time-to-delete-the-content-inside/133999)
**Author:** [@wuwenjie\_cn](https://discuss.elastic.co/u/wuwenjie_cn)\ **Replies:** 2\ **Last updated:** [June 7, 2018, 10:54am UTC](https://discuss.elastic.co/t/the-data-in-the-index-how-to-achieve-based-on-time-to-delete-the-content-inside/133999 "2018-06-07T10:54:06Z")
The data in the index, how to achieve based on time to delete the content inside? --- ## [How to secure elasticsearch for adding new node](https://discuss.elastic.co/t/how-to-secure-elasticsearch-for-adding-new-node/134799)
**Author:** [@learnhub17](https://discuss.elastic.co/u/learnhub17)\ **Replies:** 5\ **Last updated:** [June 7, 2018, 10:30am UTC](https://discuss.elastic.co/t/how-to-secure-elasticsearch-for-adding-new-node/134799 "2018-06-07T10:30:34Z")
I know Elasticsearch can scale upto may nodes and connect to cluster based on clustername and master node info. if someone start a new node with by using same information cluster name and masternodes info the node will … --- ## [Painless regex does not match](https://discuss.elastic.co/t/painless-regex-does-not-match/134775)
**Author:** [@Santhosh\_ic](https://discuss.elastic.co/u/Santhosh_ic)\ **Replies:** 0\ **Last updated:** [June 6, 2018, 9:45am UTC](https://discuss.elastic.co/t/painless-regex-does-not-match/134775 "2018-06-06T09:45:48Z")
Hi, There are documents with content "..............6; ResponseTime: 0ms; RequestHeaders: ............." I have a scripted field with painless script, if(!doc\['Message.keyword'\].empty) { def m = /^(.\*?)(?=Response… --- ## [Delayed shards can not allocate on left\_node, due to ShardsLimitAllocationDecider or SameShardAllocationDecider after left\_node joined cluster](https://discuss.elastic.co/t/delayed-shards-can-not-allocate-on-left-node-due-to-shardslimitallocationdecider-or-sameshardallocationdecider-after-left-node-joined-cluster/134939)
**Author:** [@vsop\_479](https://discuss.elastic.co/u/vsop_479)\ **Replies:** 0\ **Last updated:** [June 7, 2018, 9:32am UTC](https://discuss.elastic.co/t/delayed-shards-can-not-allocate-on-left-node-due-to-shardslimitallocationdecider-or-sameshardallocationdecider-after-left-node-joined-cluster/134939 "2018-06-07T09:32:07Z")
After left\_node rejoined the cluster, somehow it will be allocated some other shards, but not the shards which delayed because its left. So delayed shards can not allocate on left\_node, due to ShardsLimitAllocationDeci… --- ## [How to find, monitor and recover the data loss in index](https://discuss.elastic.co/t/how-to-find-monitor-and-recover-the-data-loss-in-index/134930)
**Author:** [@Sathya20](https://discuss.elastic.co/u/Sathya20)\ **Replies:** 0\ **Last updated:** [June 7, 2018, 8:37am UTC](https://discuss.elastic.co/t/how-to-find-monitor-and-recover-the-data-loss-in-index/134930 "2018-06-07T08:37:33Z")
Hi, I would like to know is there any possibility to find the accidentally deleted data or rows in any our indexes. Here the data is not getting deleted by using DELETE APIs, instead we are losing some data while loadi… --- ## [Problem with accessing elasticsearch remotly](https://discuss.elastic.co/t/problem-with-accessing-elasticsearch-remotly/134779)
**Author:** [@Muneer\_Ahmad](https://discuss.elastic.co/u/Muneer_Ahmad)\ **Replies:** 9\ **Last updated:** [June 7, 2018, 8:35am UTC](https://discuss.elastic.co/t/problem-with-accessing-elasticsearch-remotly/134779 "2018-06-07T08:35:24Z")
Hi, i am trying to access elastic search using my server public ip address since last week but not able to do so. i have tried so many solutions but not succeeded. My elasticsearch.yml file settings are like: http.host… --- ## [Which is more efficient deleting an Index, or chunk wise bulk delete of docs](https://discuss.elastic.co/t/which-is-more-efficient-deleting-an-index-or-chunk-wise-bulk-delete-of-docs/134920)
**Author:** [@vmandke](https://discuss.elastic.co/u/vmandke)\ **Replies:** 6\ **Last updated:** [June 7, 2018, 8:17am UTC](https://discuss.elastic.co/t/which-is-more-efficient-deleting-an-index-or-chunk-wise-bulk-delete-of-docs/134920 "2018-06-07T08:17:50Z")
ES (1.7.5) From a GC, memeory point of view which is more efficient? I have multiple Indices in an ES cluster one of which has 19,809,064 documents. the cluster has 8 data nodes, and 3 masters. One shard per node per in… --- ## [Data not displayed in timelion](https://discuss.elastic.co/t/data-not-displayed-in-timelion/134803)
**Author:** [@Moka](https://discuss.elastic.co/u/Moka)\ **Replies:** 0\ **Last updated:** [June 6, 2018, 12:38pm UTC](https://discuss.elastic.co/t/data-not-displayed-in-timelion/134803 "2018-06-06T12:38:25Z")
Hello , I have created a new index in ES a week ago , I have been injecting data to my new created index using a logstash job every hour. So, When I used timelion to display the historic data for the last week , I get … --- ## [Display all Visualizations Using GET](https://discuss.elastic.co/t/display-all-visualizations-using-get/134893)
**Author:** [@Chaitanya\_Pawa](https://discuss.elastic.co/u/Chaitanya_Pawa)\ **Replies:** 1\ **Last updated:** [June 7, 2018, 7:35am UTC](https://discuss.elastic.co/t/display-all-visualizations-using-get/134893 "2018-06-07T07:35:10Z")
Hi, I am trying to access all the visualizations in my kibana though a GET command. ./kibana/visualization/\_search is not working. When i tried ./kibana/\_search, it shows type to be as "doc". Is there a way i can dir… --- ## [Modeling of data with parent-child relationship and fast query](https://discuss.elastic.co/t/modeling-of-data-with-parent-child-relationship-and-fast-query/134916)
**Author:** [@avner](https://discuss.elastic.co/u/avner)\ **Replies:** 0\ **Last updated:** [June 7, 2018, 7:33am UTC](https://discuss.elastic.co/t/modeling-of-data-with-parent-child-relationship-and-fast-query/134916 "2018-06-07T07:33:22Z")
I'm modeling our data and trying to decide on the best pattern to facilitate fast queries. I would be happy to get some input on best practice. I will try to explain the relationships and the type of queries we are perf… --- ## [How to configure logstash to send data to Elasticsearch cluster in 6.2](https://discuss.elastic.co/t/how-to-configure-logstash-to-send-data-to-elasticsearch-cluster-in-6-2/134869)
**Author:** [@Shailesh\_Vaidya](https://discuss.elastic.co/u/Shailesh_Vaidya)\ **Replies:** 3\ **Last updated:** [June 7, 2018, 7:00am UTC](https://discuss.elastic.co/t/how-to-configure-logstash-to-send-data-to-elasticsearch-cluster-in-6-2/134869 "2018-06-07T07:00:21Z")
Hello, I have setup elasticsearch cluster with two node. I need to use this as high availability cluster. Currently logstash is sending data to master node and it gets replicate to slave node. However if Master node go… --- ## [MS Azure - App Insights --\> Elastic](https://discuss.elastic.co/t/ms-azure-app-insights-elastic/134905)
**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\ **Replies:** 0\ **Last updated:** [June 7, 2018, 6:54am UTC](https://discuss.elastic.co/t/ms-azure-app-insights-elastic/134905 "2018-06-07T06:54:35Z")
Hi. I need to import logs from MS Azure App Insights into Elastic. Does anybody have experience in this and able to share? Thanks. --- ## [ELK on AWS](https://discuss.elastic.co/t/elk-on-aws/134162)
**Author:** [@sos](https://discuss.elastic.co/u/sos)\ **Replies:** 8\ **Last updated:** [June 7, 2018, 6:53am UTC](https://discuss.elastic.co/t/elk-on-aws/134162 "2018-06-07T06:53:14Z")
I have setup Elasticsearch kibana and logstash on different aws ec2 instances (All instances are on linux ). Both my elasticserach and kiaban instance are in green state. Also i am able to send logs from logstash into el… --- ## [How to calculate the total time a user was logged in/out per day?](https://discuss.elastic.co/t/how-to-calculate-the-total-time-a-user-was-logged-in-out-per-day/134895)
**Author:** [@elasticfour](https://discuss.elastic.co/u/elasticfour)\ **Replies:** 0\ **Last updated:** [June 7, 2018, 6:27am UTC](https://discuss.elastic.co/t/how-to-calculate-the-total-time-a-user-was-logged-in-out-per-day/134895 "2018-06-07T06:27:46Z")
Hi everyone! I've a simple log of users logging in and out, stored in Elasticsearch: | datetime | user | action | ----------------------------------------- | 2018-06-06 10:00:00 | john | in | | 2… --- ## [Why does reindex cause Updates?](https://discuss.elastic.co/t/why-does-reindex-cause-updates/134867)
**Author:** [@Matthew\_Field](https://discuss.elastic.co/u/Matthew_Field)\ **Replies:** 3\ **Last updated:** [June 7, 2018, 6:24am UTC](https://discuss.elastic.co/t/why-does-reindex-cause-updates/134867 "2018-06-07T06:24:13Z")
I am carrying out a reindex operation, to a new index, but get results like INFO:\_\_main\_\_:completed task Xp8tUzxiScenFu\_pV7gmQQ:1558654 INFO:\_\_main\_\_:{'deleted': 0, 'batches': 149, 'version\_conflicts': 0, 'total': 14816… --- ## [Has\_child script\_field query showing No such property: \_score](https://discuss.elastic.co/t/has-child-script-field-query-showing-no-such-property-score/134891)
**Author:** [@akhilmathew001](https://discuss.elastic.co/u/akhilmathew001)\ **Replies:** 0\ **Last updated:** [June 7, 2018, 5:43am UTC](https://discuss.elastic.co/t/has-child-script-field-query-showing-no-such-property-score/134891 "2018-06-07T05:43:34Z")
I was trying to run a script\_field in the has\_child query as follows. { "query": { "has\_child": { "type": "applications", "inner\_hits": { "script\_fields": { "parent": { "script": { "lang": "groovy", "file": "ap… --- ## [Storing a tree of documents](https://discuss.elastic.co/t/storing-a-tree-of-documents/134665)
**Author:** [@GeoffreyOnRails](https://discuss.elastic.co/u/GeoffreyOnRails)\ **Replies:** 4\ **Last updated:** [June 6, 2018, 10:52pm UTC](https://discuss.elastic.co/t/storing-a-tree-of-documents/134665 "2018-06-06T22:52:39Z")
I'd like to store elements related to a grid which consist of physical entities (mapped to an individual document in my model), and those entities follows a tree structure (A is a parent of B which is a parent of C...) t… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1660) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1662)