# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1664 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1665 --- ## [Version conflict coming without passing version es 5.6](https://discuss.elastic.co/t/version-conflict-coming-without-passing-version-es-5-6/132248)
**Author:** [@Dilip\_Kumar](https://discuss.elastic.co/u/Dilip_Kumar)\ **Replies:** 5\ **Last updated:** [June 5, 2018, 2:00pm UTC](https://discuss.elastic.co/t/version-conflict-coming-without-passing-version-es-5-6/132248 "2018-06-05T14:00:00Z")
Hi I am using elasticsearch with two nodes with both as master (elasticsearch 5.6). when i am sending update query with php client then getting error ; message '{"error":{"root\_cause":\[{"type":"version\_conflict\_engine\_… --- ## [One of the cluster nodes get crashing down when cluster was allocating shards](https://discuss.elastic.co/t/one-of-the-cluster-nodes-get-crashing-down-when-cluster-was-allocating-shards/134350)
**Author:** [@vincentduan](https://discuss.elastic.co/u/vincentduan)\ **Replies:** 1\ **Last updated:** [June 5, 2018, 1:53pm UTC](https://discuss.elastic.co/t/one-of-the-cluster-nodes-get-crashing-down-when-cluster-was-allocating-shards/134350 "2018-06-05T13:53:57Z")
Our cluster contains 3 master nodes and 4 data nodes ,with each node has 64G memory and 24 Cores. We have 57 indexs and 570 shards (one primary and one replic), the number of docs is about 30 Billion. The circumstances… --- ## [Retrieving more than 10K documents](https://discuss.elastic.co/t/retrieving-more-than-10k-documents/134612)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 2\ **Last updated:** [June 5, 2018, 1:48pm UTC](https://discuss.elastic.co/t/retrieving-more-than-10k-documents/134612 "2018-06-05T13:48:27Z")
I'm using ElasticSearch to generate reports, such as a data warehouse, unfortunately the default configuration of index.max\_result\_window dont allow more than 10K documents, indeed this is necessary for performance. How… --- ## [Limit in elasticsearch](https://discuss.elastic.co/t/limit-in-elasticsearch/134607)
**Author:** [@shafelis](https://discuss.elastic.co/u/shafelis)\ **Replies:** 3\ **Last updated:** [June 5, 2018, 1:29pm UTC](https://discuss.elastic.co/t/limit-in-elasticsearch/134607 "2018-06-05T13:29:03Z")
I get the below error while trying to create an index. What could be be problem? {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"Limit of total fields \[1000\] in index \[test\] has been exceeded"}\],"… --- ## [How percolator request ll works in multicluster](https://discuss.elastic.co/t/how-percolator-request-ll-works-in-multicluster/134623)
**Author:** [@Prabhakaran\_N](https://discuss.elastic.co/u/Prabhakaran_N)\ **Replies:** 0\ **Last updated:** [June 5, 2018, 1:00pm UTC](https://discuss.elastic.co/t/how-percolator-request-ll-works-in-multicluster/134623 "2018-06-05T13:00:50Z")
Hi Team, Hope you are doing well.. We are using elasticsearch mainly for his percolator features , so first we ll index abt 10 lakh queries then we ll throw doc's into that index one by one , then we ll collect return … --- ## [Node 2 doesn't work](https://discuss.elastic.co/t/node-2-doesnt-work/134408)
**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\ **Replies:** 3\ **Last updated:** [June 5, 2018, 12:43pm UTC](https://discuss.elastic.co/t/node-2-doesnt-work/134408 "2018-06-05T12:43:29Z")
Hi, \[root@frghcslnetv12 ~\]# curl http://localhost:9200/\_cat/nodes?pretty { "error" : { "root\_cause" : \[ { "type" : "master\_not\_discovered\_exception", "reason" : null } \], "type"… --- ## [Quiz for Elastic Users](https://discuss.elastic.co/t/quiz-for-elastic-users/134391)
**Author:** [@Matthew\_Carr](https://discuss.elastic.co/u/Matthew_Carr)\ **Replies:** 7\ **Last updated:** [June 5, 2018, 12:31pm UTC](https://discuss.elastic.co/t/quiz-for-elastic-users/134391 "2018-06-05T12:31:34Z")
We have launched our summer quiz based on #Elasticsearch. If you like to part simply go here and answer these questions for a chance to win a 100 EUR Amazon Voucher: https://goo.gl/vsE6kp How does it work? You have 10… --- ## [Not able to understand the mapping in elasticsearch](https://discuss.elastic.co/t/not-able-to-understand-the-mapping-in-elasticsearch/134388)
**Author:** [@roshni](https://discuss.elastic.co/u/roshni)\ **Replies:** 3\ **Last updated:** [June 5, 2018, 12:08pm UTC](https://discuss.elastic.co/t/not-able-to-understand-the-mapping-in-elasticsearch/134388 "2018-06-05T12:08:42Z")
Hi , I am very new to elasticsearch . Presently working in v5.4.3 I was ging through the concept of mapping but could not get much clarity on the different types of mapping . For example - #curl -XPUT 'http://localho… --- ## [Has MultiMatch's BestFields functionality changed?](https://discuss.elastic.co/t/has-multimatchs-bestfields-functionality-changed/134420)
**Author:** [@Drammy](https://discuss.elastic.co/u/Drammy)\ **Replies:** 7\ **Last updated:** [June 5, 2018, 11:37am UTC](https://discuss.elastic.co/t/has-multimatchs-bestfields-functionality-changed/134420 "2018-06-05T11:37:57Z")
Hi all, How can I tune this query so that the 4th result (see below) which matches on both words ('A61' & 'roundabout') appears first in the list? Or is there a better way to query for this altogether (note the mapping… --- ## [Scoring Problem with words of one letter](https://discuss.elastic.co/t/scoring-problem-with-words-of-one-letter/134167)
**Author:** [@Youssef1](https://discuss.elastic.co/u/Youssef1)\ **Replies:** 3\ **Last updated:** [June 5, 2018, 11:32am UTC](https://discuss.elastic.co/t/scoring-problem-with-words-of-one-letter/134167 "2018-06-05T11:32:45Z")
Hi Everyone , i'm a beginner in ElasticSearch, i have an application that use elasticSearch to look for ingredients in a given food or fruit... i'm facing a problem with scoring if the user for example tape : "Vitamine… --- ## [Collapsing Paging suppor?](https://discuss.elastic.co/t/collapsing-paging-suppor/134601)
**Author:** [@djkd](https://discuss.elastic.co/u/djkd)\ **Replies:** 0\ **Last updated:** [June 5, 2018, 11:16am UTC](https://discuss.elastic.co/t/collapsing-paging-suppor/134601 "2018-06-05T11:16:16Z")
hello ! my question is i use Collapsing to filter repeat data then how to Paging????? --- ## [What database is used for Elasticsearch](https://discuss.elastic.co/t/what-database-is-used-for-elasticsearch/134592)
**Author:** [@kuba72](https://discuss.elastic.co/u/kuba72)\ **Replies:** 1\ **Last updated:** [June 5, 2018, 11:09am UTC](https://discuss.elastic.co/t/what-database-is-used-for-elasticsearch/134592 "2018-06-05T11:09:46Z")
Hi all, An Elasticsearch cluster can contain multiple nodes. A node can have one or many Primary shards and replica shards. A shard is a Lucene index. What database is used to store the actual data (documents)? Is it a… --- ## [xPAck](https://discuss.elastic.co/t/xpack/134579)
**Author:** [@amritesh\_mishra](https://discuss.elastic.co/u/amritesh_mishra)\ **Replies:** 1\ **Last updated:** [June 5, 2018, 10:47am UTC](https://discuss.elastic.co/t/xpack/134579 "2018-06-05T10:47:45Z")
If we need to buy Xpack to install in our system or it is free plugin to use in ELK --- ## [How do I get \_value Webhook to be in Json format](https://discuss.elastic.co/t/how-do-i-get-value-webhook-to-be-in-json-format/134213)
**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\ **Replies:** 5\ **Last updated:** [June 5, 2018, 10:18am UTC](https://discuss.elastic.co/t/how-do-i-get-value-webhook-to-be-in-json-format/134213 "2018-06-05T10:18:46Z")
How do I get my "\_value" from my webhook to be in a Json format or even better would be just to display the output of the GET query in a Json format. Current watcher: { "trigger": { "schedule": { "interval"… --- ## [How do I query elasticsearch in a way that returns entire rows instead of nested buckets?](https://discuss.elastic.co/t/how-do-i-query-elasticsearch-in-a-way-that-returns-entire-rows-instead-of-nested-buckets/134583)
**Author:** [@dennis.1157](https://discuss.elastic.co/u/dennis.1157)\ **Replies:** 0\ **Last updated:** [June 5, 2018, 9:51am UTC](https://discuss.elastic.co/t/how-do-i-query-elasticsearch-in-a-way-that-returns-entire-rows-instead-of-nested-buckets/134583 "2018-06-05T09:51:45Z")
The request body for my data table with 7 columns on Kibana looks like this: { "aggs": { "2": { "terms": { "field": "efe\_board", "size": 999, "order": { "\_count": "desc" … --- ## [Phonetic Plugin for Elasticsearch Cloud](https://discuss.elastic.co/t/phonetic-plugin-for-elasticsearch-cloud/134566)
**Author:** [@vishwas\_jadav](https://discuss.elastic.co/u/vishwas_jadav)\ **Replies:** 2\ **Last updated:** [June 5, 2018, 9:45am UTC](https://discuss.elastic.co/t/phonetic-plugin-for-elasticsearch-cloud/134566 "2018-06-05T09:45:46Z")
I have deployed cluster on Elasticsearch Cloud . Now , I want to add phonetic search feature. For that I was putting this setting with php api : 'settings' =\> \[ 'analysis' =\> \[ 'normalizer' =\> \[ "lowercase\_normalize… --- ## [Analyzer \[suggester\] not found for field \[mark\_text\]](https://discuss.elastic.co/t/analyzer-suggester-not-found-for-field-mark-text/134207)
**Author:** [@vishwas\_jadav](https://discuss.elastic.co/u/vishwas_jadav)\ **Replies:** 1\ **Last updated:** [June 1, 2018, 12:41pm UTC](https://discuss.elastic.co/t/analyzer-suggester-not-found-for-field-mark-text/134207 "2018-06-01T12:41:28Z")
I have this index settings : { "phrase\_suggester" : { "aliases" : { }, "mappings" : { }, "settings" : { "index" : { "number\_of\_shards" : "5", "provided\_name" : "phrase\_suggester", "creation\_date" : "152785198777… --- ## [Merge 2 maps into single map](https://discuss.elastic.co/t/merge-2-maps-into-single-map/134452)
**Author:** [@leela\_kumili](https://discuss.elastic.co/u/leela_kumili)\ **Replies:** 1\ **Last updated:** [June 5, 2018, 8:54am UTC](https://discuss.elastic.co/t/merge-2-maps-into-single-map/134452 "2018-06-05T08:54:58Z")
Hi, Can someone help me how can I merge 2 maps into single map using painless script in watcher transform? I am building 2 maps where first map has data like this: \[ { "src": "A", "earlier": 34905 }, { "src": "… --- ## [How do I create an alert to for a specific behavior of a unique field value](https://discuss.elastic.co/t/how-do-i-create-an-alert-to-for-a-specific-behavior-of-a-unique-field-value/134489)
**Author:** [@Mobi](https://discuss.elastic.co/u/Mobi)\ **Replies:** 1\ **Last updated:** [June 5, 2018, 8:47am UTC](https://discuss.elastic.co/t/how-do-i-create-an-alert-to-for-a-specific-behavior-of-a-unique-field-value/134489 "2018-06-05T08:47:16Z")
Hi, I am new to ELK and have been doing a lot of reading lately. Now I have downloaded xpack and all is set. I have written some simple alerts which have worked. However, I want to write an alert that will notify an an… --- ## [Unable to delete index name](https://discuss.elastic.co/t/unable-to-delete-index-name/134554)
**Author:** [@wuwenjie\_cn](https://discuss.elastic.co/u/wuwenjie_cn)\ **Replies:** 0\ **Last updated:** [June 5, 2018, 8:01am UTC](https://discuss.elastic.co/t/unable-to-delete-index-name/134554 "2018-06-05T08:01:01Z")
The following operation is my operation in kibana "Dev Tools": Create an index called megacorp, then delete it with the delete index command: "DELETE /megacorp", and then use the query index command: "GET / Megacorp" to… --- ## [Realtime Streaming configuration](https://discuss.elastic.co/t/realtime-streaming-configuration/134564)
**Author:** [@babar](https://discuss.elastic.co/u/babar)\ **Replies:** 0\ **Last updated:** [June 5, 2018, 8:37am UTC](https://discuss.elastic.co/t/realtime-streaming-configuration/134564 "2018-06-05T08:37:48Z")
Dear All, If we have a 3 nodes cluster (1 x Master and 2 x Data Nodes) then what will be the URL in the Realtime Streaming configuration? I meant whether we should use the master node IP address or the data node IP add… --- ## [Jar Hell Error in 5.5.3](https://discuss.elastic.co/t/jar-hell-error-in-5-5-3/134562)
**Author:** [@aditi](https://discuss.elastic.co/u/aditi)\ **Replies:** 0\ **Last updated:** [June 5, 2018, 8:29am UTC](https://discuss.elastic.co/t/jar-hell-error-in-5-5-3/134562 "2018-06-05T08:29:46Z")
Hi, I am getting the below error after I tried start elasticsearch on a Linux RHEL 6 server with java -version openjdk version "1.8.0\_171". I have used the tar file for this app. \[2018-06-05T00:32:15,527\]\[WARN \]\[o.e… --- ## [Cluster (connect 2 nodes)](https://discuss.elastic.co/t/cluster-connect-2-nodes/134384)
**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\ **Replies:** 51\ **Last updated:** [June 5, 2018, 8:28am UTC](https://discuss.elastic.co/t/cluster-connect-2-nodes/134384 "2018-06-05T08:28:39Z")
Hi, I want to connecte 2 nodes Elastic search to make a cluster, the two nodes are on a different servers. Can someone help me to do this ? --- ## [Adding conditions on action in watcher](https://discuss.elastic.co/t/adding-conditions-on-action-in-watcher/134155)
**Author:** [@ishantanu](https://discuss.elastic.co/u/ishantanu)\ **Replies:** 4\ **Last updated:** [June 5, 2018, 8:19am UTC](https://discuss.elastic.co/t/adding-conditions-on-action-in-watcher/134155 "2018-06-05T08:19:15Z")
Hi, While I was going through docs for adding conditions on actions in Watcher, I had a few doubts. Is there any way I can access the payload.\_value of transform block inside the condition on watcher? Ex. "transform"… --- ## [Missing Value option NEST](https://discuss.elastic.co/t/missing-value-option-nest/134558)
**Author:** [@aaron.buhagiar](https://discuss.elastic.co/u/aaron.buhagiar)\ **Replies:** 0\ **Last updated:** [June 5, 2018, 8:17am UTC](https://discuss.elastic.co/t/missing-value-option-nest/134558 "2018-06-05T08:17:14Z")
Hi, I am currently trying to get data using aggregation based on a nullable date field. I am using NEST API with C#. Doing this using the low-level client it was possible to get the nullable items in a separate bucket u… --- ## [Offenders in Watcher](https://discuss.elastic.co/t/offenders-in-watcher/133678)
**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\ **Replies:** 3\ **Last updated:** [June 5, 2018, 8:14am UTC](https://discuss.elastic.co/t/offenders-in-watcher/133678 "2018-06-05T08:14:39Z")
Hi all, Would it be possible to run the following query on a regular basis perhaps in a watcher? And push the output via a webhook? GET \_cat/indices/\*?v&s=store.size&bytes=k&format=json Regards, Jason --- ## [GPG13 Queries?](https://discuss.elastic.co/t/gpg13-queries/134444)
**Author:** [@Barsbeh](https://discuss.elastic.co/u/Barsbeh)\ **Replies:** 2\ **Last updated:** [June 5, 2018, 8:05am UTC](https://discuss.elastic.co/t/gpg13-queries/134444 "2018-06-05T08:05:37Z")
Hi all, We're looking at the ELK stack as a possible SIEM solution. We need to be able to be GPG13 compliant with the SIEM. Obviously, we can build these queries ourselves but it would be a lot of dev work for each PMC … --- ## [Unexpected high disk usage](https://discuss.elastic.co/t/unexpected-high-disk-usage/134549)
**Author:** [@dshmatov](https://discuss.elastic.co/u/dshmatov)\ **Replies:** 0\ **Last updated:** [June 5, 2018, 7:48am UTC](https://discuss.elastic.co/t/unexpected-high-disk-usage/134549 "2018-06-05T07:48:04Z")
We heve Elasticsearch cluster setup with 3 client nodes and 15 data nodes. Index rotation happens once a day and something went wrong while indexes had been rotated. Disk IO has become 100% and was occupated by Elasticse… --- ## [Watcher email custom body html, how to show images using a local image](https://discuss.elastic.co/t/watcher-email-custom-body-html-how-to-show-images-using-a-local-image/133502)
**Author:** [@Sudheesh\_P](https://discuss.elastic.co/u/Sudheesh_P)\ **Replies:** 1\ **Last updated:** [June 5, 2018, 7:46am UTC](https://discuss.elastic.co/t/watcher-email-custom-body-html-how-to-show-images-using-a-local-image/133502 "2018-06-05T07:46:05Z")
I am using watcher to detect errors in the log and to fire emails based on the condition. All works perfectly. I have used a single line html to trigger emails. How can I embed a local image to the html template using im… --- ## [Is it possible or (and) a good practice to change queue\_size of bulk to unlimited?](https://discuss.elastic.co/t/is-it-possible-or-and-a-good-practice-to-change-queue-size-of-bulk-to-unlimited/134547)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 0\ **Last updated:** [June 5, 2018, 7:34am UTC](https://discuss.elastic.co/t/is-it-possible-or-and-a-good-practice-to-change-queue-size-of-bulk-to-unlimited/134547 "2018-06-05T07:34:22Z")
HI, I am running a 3 node ELK GA 5.0.0 cluster. I have the below setting (that I have queried using API). "bulk": { "type": "fixed", "min": 10, "max": 10, "queue\_size": 50 }, Each vm has 10 cores. Acording to the d… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1663) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1665)