# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1671

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1672

---

## [Unbalanced disk usage - ES 2.1](https://discuss.elastic.co/t/unbalanced-disk-usage-es-2-1/131219)

<div class="topic-metadata">

**Author:** [@varun\_arora](https://discuss.elastic.co/u/varun_arora)\
**Replies:** 29\
**Last updated:** [May 30, 2018, 6:06pm UTC](https://discuss.elastic.co/t/unbalanced-disk-usage-es-2-1/131219 "2018-05-30T18:06:21Z")

</div>

On a 5 node cluster, the shards are balanced, but the disk space used is unbalanced. Checking the directories, I found that the shards are taking around 10 times the size of the shard on the disk. //tickets\_v2 …

---

## [Having issues configuring SMTP for alerting/Watcher](https://discuss.elastic.co/t/having-issues-configuring-smtp-for-alerting-watcher/133921)

<div class="topic-metadata">

**Author:** [@ecamero2](https://discuss.elastic.co/u/ecamero2)\
**Replies:** 0\
**Last updated:** [May 30, 2018, 5:56pm UTC](https://discuss.elastic.co/t/having-issues-configuring-smtp-for-alerting-watcher/133921 "2018-05-30T17:56:33Z")

</div>

I have tried to configure smtp settings with the settings API but it doesn't seem to be working. Here is the settings from GET \_cluster/settings : { "persistent": { "xpack": { "notification": { "email": { "account…

---

## [How to do inplace update in elasticsearch alternate to script?](https://discuss.elastic.co/t/how-to-do-inplace-update-in-elasticsearch-alternate-to-script/133377)

<div class="topic-metadata">

**Author:** [@vasanth\_kumar](https://discuss.elastic.co/u/vasanth_kumar)\
**Replies:** 6\
**Last updated:** [May 30, 2018, 5:39pm UTC](https://discuss.elastic.co/t/how-to-do-inplace-update-in-elasticsearch-alternate-to-script/133377 "2018-05-30T17:39:44Z")

</div>

How to do inplace update in elasticsearch alternate to script? Use-case is, while indexing we need to do something similar to this, { total: 300\[emp\_1+emp\_2\] emp\_1: 100, emp\_2: 200, } We tried script(ctx.\_source.t…

---

## [Performance implications of using mongo id as elastic \_id](https://discuss.elastic.co/t/performance-implications-of-using-mongo-id-as-elastic-id/133731)

<div class="topic-metadata">

**Author:** [@Luke\_Rossy](https://discuss.elastic.co/u/Luke_Rossy)\
**Replies:** 3\
**Last updated:** [May 30, 2018, 4:24pm UTC](https://discuss.elastic.co/t/performance-implications-of-using-mongo-id-as-elastic-id/133731 "2018-05-30T16:24:24Z")

</div>

Hi, i am wondering if there is a performance issue when using a mongodb objectId as the \_id in elasticsearch instead of allowing elastic to autogenerate its own. I am using this to prevent duplicates when syncing, and I…

---

## [Elasticsearch Nest full text search with filters](https://discuss.elastic.co/t/elasticsearch-nest-full-text-search-with-filters/133912)

<div class="topic-metadata">

**Author:** [@ftaran](https://discuss.elastic.co/u/ftaran)\
**Replies:** 0\
**Last updated:** [May 30, 2018, 4:05pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-full-text-search-with-filters/133912 "2018-05-30T16:05:00Z")

</div>

I have created a search descriptor in order to be able to filter some data from elasticsearch, it seems that all my tests that excercise the filters functionality pass but they fail for the full text search. I have trie…

---

## [Esrally fetches incorrect tarball for distribution versions \<= 2.x](https://discuss.elastic.co/t/esrally-fetches-incorrect-tarball-for-distribution-versions-2-x/133766)

<div class="topic-metadata">

**Author:** [@TheFallenTech](https://discuss.elastic.co/u/TheFallenTech)\
**Replies:** 2\
**Last updated:** [May 30, 2018, 3:50pm UTC](https://discuss.elastic.co/t/esrally-fetches-incorrect-tarball-for-distribution-versions-2-x/133766 "2018-05-30T15:50:12Z")

</div>

Command Used: esrally --distribution-version=1.7.5 I have been trying to test on 1.7.5 which is located here: https://download.elastic.co/elasticsearch/elasticsearch/elasticsearch-1.7.5.tar.gz esrally seems to thi…

---

## [Why the synonym filter change in 6.0?](https://discuss.elastic.co/t/why-the-synonym-filter-change-in-6-0/133740)

<div class="topic-metadata">

**Author:** [@Justin\_Treher](https://discuss.elastic.co/u/Justin_Treher)\
**Replies:** 7\
**Last updated:** [May 30, 2018, 3:22pm UTC](https://discuss.elastic.co/t/why-the-synonym-filter-change-in-6-0/133740 "2018-05-30T15:22:54Z")

</div>

RE: https://github.com/elastic/elasticsearch/issues/27481 My company has been using Elasticsearch since 2013 to power site search. Our content editors have maintained a synonym configuration for ages via an admin UI tha…

---

## [Access to edit onwed dashboard](https://discuss.elastic.co/t/access-to-edit-onwed-dashboard/133880)

<div class="topic-metadata">

**Author:** [@abudaev](https://discuss.elastic.co/u/abudaev)\
**Replies:** 1\
**Last updated:** [May 30, 2018, 3:13pm UTC](https://discuss.elastic.co/t/access-to-edit-onwed-dashboard/133880 "2018-05-30T15:13:45Z")

</div>

Hello. Can I give rights to edit dashboards if users own it. And do not allow editing other people's dashboards?

---

## [Unified Highlighter is too slow](https://discuss.elastic.co/t/unified-highlighter-is-too-slow/133814)

<div class="topic-metadata">

**Author:** [@aslamy1](https://discuss.elastic.co/u/aslamy1)\
**Replies:** 8\
**Last updated:** [May 30, 2018, 2:49pm UTC](https://discuss.elastic.co/t/unified-highlighter-is-too-slow/133814 "2018-05-30T14:49:13Z")

</div>

Hi ! When I use Unified Highlighter it takes about 20-22 sec to retrieve the result but when I change it to fvh highlighter it takes about 2-3 sec. Why does elasticsearch recommend unified highlighter and has it as def…

---

## [Custom Script - Native Script IPV6 data type](https://discuss.elastic.co/t/custom-script-native-script-ipv6-data-type/133883)

<div class="topic-metadata">

**Author:** [@moni15moni](https://discuss.elastic.co/u/moni15moni)\
**Replies:** 0\
**Last updated:** [May 30, 2018, 1:51pm UTC](https://discuss.elastic.co/t/custom-script-native-script-ipv6-data-type/133883 "2018-05-30T13:51:34Z")

</div>

I have faced a issue while using Custom script in java using the AbstractDoubleSearchScript for IPV6 data type. @Override public Object run() { ScriptDocValues ipv6\_docValue = doc().get("src\_v6"); log.info(" IPV6 v…

---

## [Script aggregation yields wrong (but close) answer](https://discuss.elastic.co/t/script-aggregation-yields-wrong-but-close-answer/133744)

<div class="topic-metadata">

**Author:** [@rschwieb](https://discuss.elastic.co/u/rschwieb)\
**Replies:** 2\
**Last updated:** [May 30, 2018, 1:38pm UTC](https://discuss.elastic.co/t/script-aggregation-yields-wrong-but-close-answer/133744 "2018-05-30T13:38:15Z")

</div>

I put a single item into an index with a start field of value 1527619504.71632. Then I ran this search with an script in the aggregation: {"query": {"match\_all": {}}, "aggs": {"total": {"sum": {"script": {"source": "d…

---

## [Encrypting data at rest elastic search](https://discuss.elastic.co/t/encrypting-data-at-rest-elastic-search/133862)

<div class="topic-metadata">

**Author:** [@shaheryar](https://discuss.elastic.co/u/shaheryar)\
**Replies:** 1\
**Last updated:** [May 30, 2018, 1:22pm UTC](https://discuss.elastic.co/t/encrypting-data-at-rest-elastic-search/133862 "2018-05-30T13:22:46Z")

</div>

I want to encrypt data at rest. right now i am using elasticsearch-platinum docker image with security feature anabled on aws node. what step do i require to encrypt my data? I am mounting volumes to save my data and lo…

---

## [ES does not scale with Rally track http\_logs](https://discuss.elastic.co/t/es-does-not-scale-with-rally-track-http-logs/133795)

<div class="topic-metadata">

**Author:** [@esa](https://discuss.elastic.co/u/esa)\
**Replies:** 1\
**Last updated:** [May 30, 2018, 12:33pm UTC](https://discuss.elastic.co/t/es-does-not-scale-with-rally-track-http-logs/133795 "2018-05-30T12:33:52Z")

</div>

Hi, i have configured an Elasticsearch 6.2.4 cluster on Kubernetes in GCP. Kubernetes: 9 nodes in west3a,b,c 24 CPU's and 45 GB RAM per node Elasticsearch: 3 Master nodes each with 2 CPU's and 4 GB RAM 2 Coordinat…

---

## [Lost indices after restart cluster](https://discuss.elastic.co/t/lost-indices-after-restart-cluster/133829)

<div class="topic-metadata">

**Author:** [@josselinchevalay](https://discuss.elastic.co/u/josselinchevalay)\
**Replies:** 2\
**Last updated:** [May 30, 2018, 11:57am UTC](https://discuss.elastic.co/t/lost-indices-after-restart-cluster/133829 "2018-05-30T11:57:00Z")

</div>

Hello all, after a restart of indices a lost somes indice and data in my cluster. for exemple for my indice A mapping and datas are not up). How to solve this issue after cluster restart ? Regards

---

## [Role Management - Access to 1 index only](https://discuss.elastic.co/t/role-management-access-to-1-index-only/133763)

<div class="topic-metadata">

**Author:** [@tiagoverissimo](https://discuss.elastic.co/u/tiagoverissimo)\
**Replies:** 8\
**Last updated:** [May 30, 2018, 9:16am UTC](https://discuss.elastic.co/t/role-management-access-to-1-index-only/133763 "2018-05-30T09:16:05Z")

</div>

Hello, I'm using Elastic in a PoC and we are tying the 14-day period of X-Pack. One thing that we want to test is the ability to create users/roles and give them access only to the one index, for example. But I'm facin…

---

## [Elasticsearch Master not discovered exception](https://discuss.elastic.co/t/elasticsearch-master-not-discovered-exception/133599)

<div class="topic-metadata">

**Author:** [@gintokisama](https://discuss.elastic.co/u/gintokisama)\
**Replies:** 6\
**Last updated:** [May 30, 2018, 10:50am UTC](https://discuss.elastic.co/t/elasticsearch-master-not-discovered-exception/133599 "2018-05-30T10:50:04Z")

</div>

I'm running a 5 node elasticsearch cluster (2 data nodes, 2 master nodes, 1 kibana). I'm getting the following error when use the command curl -X GET "192.168.107.75:9200/\_cat/master?v" {"error":{"root\_cause":\[{"type"…

---

## [Ingest-attachment not parsing docx](https://discuss.elastic.co/t/ingest-attachment-not-parsing-docx/133671)

<div class="topic-metadata">

**Author:** [@ottadini](https://discuss.elastic.co/u/ottadini)\
**Replies:** 7\
**Last updated:** [May 30, 2018, 10:24am UTC](https://discuss.elastic.co/t/ingest-attachment-not-parsing-docx/133671 "2018-05-30T10:24:21Z")

</div>

I have ES 6.0.1 on my localhost, and the same on a AWS server. On my localhost I installed the ingest-attachment plugin, and tried to index some docx files. They are not parsed, and ES returns content-length of 0. On the…

---

## [Aggregation count of mail domains using elastisearch](https://discuss.elastic.co/t/aggregation-count-of-mail-domains-using-elastisearch/133806)

<div class="topic-metadata">

**Author:** [@rakeshallampati](https://discuss.elastic.co/u/rakeshallampati)\
**Replies:** 1\
**Last updated:** [May 30, 2018, 10:07am UTC](https://discuss.elastic.co/t/aggregation-count-of-mail-domains-using-elastisearch/133806 "2018-05-30T10:07:38Z")

</div>

I have following documents in my index: { "name":"rakesh" "age":"26" "email":"rakesh@gmail.com" } { "name":"sam" "age":"24" "email":"samjoe@elastic.com" } { "name":"joseph" "age":"26" …

---

## [Nested field and query/filter sur plusieurs champs en même temps](https://discuss.elastic.co/t/nested-field-and-query-filter-sur-plusieurs-champs-en-meme-temps/133554)

<div class="topic-metadata">

**Author:** [@Ugo\_Bourdon](https://discuss.elastic.co/u/Ugo_Bourdon)\
**Replies:** 5\
**Last updated:** [May 30, 2018, 10:04am UTC](https://discuss.elastic.co/t/nested-field-and-query-filter-sur-plusieurs-champs-en-meme-temps/133554 "2018-05-30T10:04:32Z")

</div>

Bonjour, Je dispose de données associant des identifiants quelconques à des zones géographiques et je veux pouvoir les requêter ensemble. Voici le mapping que j'ai déduis de mon besoin : "zones": { "type": "neste…

---

## [Nested objects with many keys](https://discuss.elastic.co/t/nested-objects-with-many-keys/133850)

<div class="topic-metadata">

**Author:** [@ergo](https://discuss.elastic.co/u/ergo)\
**Replies:** 0\
**Last updated:** [May 30, 2018, 10:03am UTC](https://discuss.elastic.co/t/nested-objects-with-many-keys/133850 "2018-05-30T10:03:32Z")

</div>

What are the limits for object keys in elasticsearch? Is it feasible for me to store objects with 200-500 keys in them on average - where there would be up to 2000 keys that can appear in the documents? I would store a…

---

## [How to generate all permutations of child documents in Elasticsearcherch](https://discuss.elastic.co/t/how-to-generate-all-permutations-of-child-documents-in-elasticsearcherch/133849)

<div class="topic-metadata">

**Author:** [@ergo](https://discuss.elastic.co/u/ergo)\
**Replies:** 0\
**Last updated:** [May 30, 2018, 10:01am UTC](https://discuss.elastic.co/t/how-to-generate-all-permutations-of-child-documents-in-elasticsearcherch/133849 "2018-05-30T10:01:01Z")

</div>

Hi I have following schema of user objects: curl -X PUT "localhost:9200/test\_example" -H 'Content-Type: application/json' -d' { "mappings": { "answer" : { "\_parent" : { "type" :…

---

## [Elasticsearch 6.x hardware sizing for an enterprise deployment](https://discuss.elastic.co/t/elasticsearch-6-x-hardware-sizing-for-an-enterprise-deployment/133816)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 1\
**Last updated:** [May 30, 2018, 10:00am UTC](https://discuss.elastic.co/t/elasticsearch-6-x-hardware-sizing-for-an-enterprise-deployment/133816 "2018-05-30T10:00:47Z")

</div>

Hey Guys, Have searched fully in Elastic portal and didn't find any document regarding hardware sizing of elasticsearch. We are planning to deploy elasticsearch on an enterprise level which includes around 4000+ server…

---

## [Elasticsearch - question about shards](https://discuss.elastic.co/t/elasticsearch-question-about-shards/133694)

<div class="topic-metadata">

**Author:** [@Rohlik](https://discuss.elastic.co/u/Rohlik)\
**Replies:** 3\
**Last updated:** [May 30, 2018, 9:57am UTC](https://discuss.elastic.co/t/elasticsearch-question-about-shards/133694 "2018-05-30T09:57:27Z")

</div>

Hi there! We have 2 ES instances in our environment with 2 daily index and we already have more than 7k shards. It is normal? If not, what are you suggest? /\_cat/health?v epoch timestamp cluster status nod…

---

## [Elastic Heap Size issue](https://discuss.elastic.co/t/elastic-heap-size-issue/133548)

<div class="topic-metadata">

**Author:** [@kapoorvarun23](https://discuss.elastic.co/u/kapoorvarun23)\
**Replies:** 12\
**Last updated:** [May 30, 2018, 9:16am UTC](https://discuss.elastic.co/t/elastic-heap-size-issue/133548 "2018-05-30T09:16:45Z")

</div>

Hi, I have elastic running on 2 nodes with 32 core, 16 core and 64 GB, 32 GB ram respectively. Heap allocated to elastic node 1 is 24 GB (node with 64 GB ram). Heap allocated to elastic node 2 is 15 GB (node with 32 GB…

---

## [Java REST Client Auth Security](https://discuss.elastic.co/t/java-rest-client-auth-security/133812)

<div class="topic-metadata">

**Author:** [@delly.set](https://discuss.elastic.co/u/delly.set)\
**Replies:** 1\
**Last updated:** [May 30, 2018, 8:47am UTC](https://discuss.elastic.co/t/java-rest-client-auth-security/133812 "2018-05-30T08:47:14Z")

</div>

Hi Reading below link to implement Basic Authentication for my application to integrate with ElasticSearch https://www.elastic.co/guide/en/elasticsearch/client/java-rest/current/\_basic\_authentication.html But, how to …

---

## [Lost index template cluster down](https://discuss.elastic.co/t/lost-index-template-cluster-down/133825)

<div class="topic-metadata">

**Author:** [@josselinchevalay](https://discuss.elastic.co/u/josselinchevalay)\
**Replies:** 0\
**Last updated:** [May 30, 2018, 8:40am UTC](https://discuss.elastic.co/t/lost-index-template-cluster-down/133825 "2018-05-30T08:40:54Z")

</div>

Hello all, I have a cluster with one master node and 6 data nodes this monday my cluster down after network issue caused a bad settings on IP (anyway) but afterrestart and re-up my cluster i remark index templates creat…

---

## [Sort order on a wildcard query with constant score](https://discuss.elastic.co/t/sort-order-on-a-wildcard-query-with-constant-score/133815)

<div class="topic-metadata">

**Author:** [@dimalini](https://discuss.elastic.co/u/dimalini)\
**Replies:** 0\
**Last updated:** [May 30, 2018, 8:09am UTC](https://discuss.elastic.co/t/sort-order-on-a-wildcard-query-with-constant-score/133815 "2018-05-30T08:09:34Z")

</div>

I noticed in a wildcard query on a particular field (type:string) with rewrite as 'constant\_score', the expanded results returned were in random order. I expected the results returned will be alphabetically ascending as …

---

## [Elastiseach Syslog-ng Parsing Problem](https://discuss.elastic.co/t/elastiseach-syslog-ng-parsing-problem/133813)

<div class="topic-metadata">

**Author:** [@sewox](https://discuss.elastic.co/u/sewox)\
**Replies:** 0\
**Last updated:** [May 30, 2018, 8:01am UTC](https://discuss.elastic.co/t/elastiseach-syslog-ng-parsing-problem/133813 "2018-05-30T08:01:58Z")

</div>

Hi Everyone, I parse logs with syslog-ng. I get a log4j error during the parse operation and do not write the records on ElasticSearch. Parser File -\> ############### Mapping Template -\> where is the problem, …

---

## [Build from source but NoClassDefFoundError:ExtendedPluginsClassLoader](https://discuss.elastic.co/t/build-from-source-but-noclassdeffounderror-extendedpluginsclassloader/132912)

<div class="topic-metadata">

**Author:** [@golmic](https://discuss.elastic.co/u/golmic)\
**Replies:** 4\
**Last updated:** [May 30, 2018, 7:58am UTC](https://discuss.elastic.co/t/build-from-source-but-noclassdeffounderror-extendedpluginsclassloader/132912 "2018-05-30T07:58:20Z")

</div>

Elasticsearch version (bin/elasticsearch --version): Version: 6.2.4 Plugins installed: \[\] None JVM version (java -version): java version "10.0.1" 2018-04-17 Java(TM) SE Runtime Environment 18.3 (build 10.0.1+10) J…

---

## [ES 5.5.1 extremely slow on multiple indices](https://discuss.elastic.co/t/es-5-5-1-extremely-slow-on-multiple-indices/133493)

<div class="topic-metadata">

**Author:** [@SimonC](https://discuss.elastic.co/u/SimonC)\
**Replies:** 1\
**Last updated:** [May 30, 2018, 6:54am UTC](https://discuss.elastic.co/t/es-5-5-1-extremely-slow-on-multiple-indices/133493 "2018-05-30T06:54:44Z")

</div>

Hi there, We're using ES 5.5.1 for archival purposes. Lately, the search engine has become extremely slow, some queries run for hours on end, until they finally time out, others time out rather quickly. In this one pa…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1670)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1672)
