# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1695

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1696

---

## [Login is currently disabled.issue](https://discuss.elastic.co/t/login-is-currently-disabled-issue/131003)

<div class="topic-metadata">

**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\
**Replies:** 8\
**Last updated:** [May 8, 2018, 5:25pm UTC](https://discuss.elastic.co/t/login-is-currently-disabled-issue/131003 "2018-05-08T17:25:05Z")

</div>

I am trying elastic 6 and elastic is running fine. But Kibana Login page is disabled. I didn't found anything in the kibana logs to resolve this issue. \[1111\] Got following error too \[root@915453-elastic2 elasticsearc…

---

## [Curator Elasticsearch 404 on delete\_snapshots action in AWS Elasticsearch](https://discuss.elastic.co/t/curator-elasticsearch-404-on-delete-snapshots-action-in-aws-elasticsearch/131019)

<div class="topic-metadata">

**Author:** [@timvisher](https://discuss.elastic.co/u/timvisher)\
**Replies:** 6\
**Last updated:** [May 8, 2018, 5:08pm UTC](https://discuss.elastic.co/t/curator-elasticsearch-404-on-delete-snapshots-action-in-aws-elasticsearch/131019 "2018-05-08T17:08:58Z")

</div>

I have a curator action file with the following contents: --- # Remember, leave a key empty if there is no value. None will be a string, # not a Python "NoneType" actions: 1: action: snapshot description: Tak…

---

## [Metricbeat system load query](https://discuss.elastic.co/t/metricbeat-system-load-query/131039)

<div class="topic-metadata">

**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\
**Replies:** 0\
**Last updated:** [May 8, 2018, 4:29pm UTC](https://discuss.elastic.co/t/metricbeat-system-load-query/131039 "2018-05-08T16:29:45Z")

</div>

Hi , I want to capture the doc carrying the system load details only. Could you please let me know what to add in the following query ? GET metricbeat-2018.05.08/\_search { "sort": \[ {"@timestamp": {"order": "desc"} …

---

## [Unable to get the position of a particular key in sorted bucket aggregation result](https://discuss.elastic.co/t/unable-to-get-the-position-of-a-particular-key-in-sorted-bucket-aggregation-result/131033)

<div class="topic-metadata">

**Author:** [@garima\_khaneja](https://discuss.elastic.co/u/garima_khaneja)\
**Replies:** 1\
**Last updated:** [May 8, 2018, 4:00pm UTC](https://discuss.elastic.co/t/unable-to-get-the-position-of-a-particular-key-in-sorted-bucket-aggregation-result/131033 "2018-05-08T16:00:14Z")

</div>

\<GET index/\_search { "query": { "bool": { "must": \[ { "terms": { "myIds": \[ "301", "302", "303" \] } } \] } }, "aggs": { "orders\_over\_time": { "date\_histogram": { "field": "order\_date", "interval": "mo…

---

## [Efficient storage of non-analysed text fields in Elasticsearch](https://discuss.elastic.co/t/efficient-storage-of-non-analysed-text-fields-in-elasticsearch/130415)

<div class="topic-metadata">

**Author:** [@i-like-robots](https://discuss.elastic.co/u/i-like-robots)\
**Replies:** 3\
**Last updated:** [May 8, 2018, 3:57pm UTC](https://discuss.elastic.co/t/efficient-storage-of-non-analysed-text-fields-in-elasticsearch/130415 "2018-05-08T15:57:53Z")

</div>

We have an Elasticsearch index with over 100 fields. We explicitly define only a small number of the fields in our index mapping and enable dynamic mapping for everything else. A number of the fields are chunks of marku…

---

## [Indexing a document with a HUGE String field](https://discuss.elastic.co/t/indexing-a-document-with-a-huge-string-field/131030)

<div class="topic-metadata">

**Author:** [@Daniel\_Zuluaga](https://discuss.elastic.co/u/Daniel_Zuluaga)\
**Replies:** 1\
**Last updated:** [May 8, 2018, 3:29pm UTC](https://discuss.elastic.co/t/indexing-a-document-with-a-huge-string-field/131030 "2018-05-08T15:29:07Z")

</div>

Hello everyone! I wanted to ask you guys from help, I'm trying to index a document containing some genetics information, the problem I have is that one of the fields in my document is a really big String (Thousands of c…

---

## [Phrase Highlighter](https://discuss.elastic.co/t/phrase-highlighter/131026)

<div class="topic-metadata">

**Author:** [@keremcan](https://discuss.elastic.co/u/keremcan)\
**Replies:** 0\
**Last updated:** [May 8, 2018, 2:41pm UTC](https://discuss.elastic.co/t/phrase-highlighter/131026 "2018-05-08T14:41:12Z")

</div>

Hi there, I'm trying to highlight a phrase not a word. When trying this, ES searching everyword in my query, and tags with \<em\>. I want to tag them as phrase not every single word. Here is an example: curl -X GET "local…

---

## [Refresh\_interval for denormalized views with high indexing load](https://discuss.elastic.co/t/refresh-interval-for-denormalized-views-with-high-indexing-load/130985)

<div class="topic-metadata">

**Author:** [@Pahomovda](https://discuss.elastic.co/u/Pahomovda)\
**Replies:** 1\
**Last updated:** [May 8, 2018, 2:29pm UTC](https://discuss.elastic.co/t/refresh-interval-for-denormalized-views-with-high-indexing-load/130985 "2018-05-08T14:29:27Z")

</div>

Hi! I am trying to create materialized view of relational data in Elasticsearch. Lets say i have child table and multiple parent tables (all backed by separated microservices with event queue). I need to find relevant c…

---

## [Handling relationships in elasticssearch 6.2 Version](https://discuss.elastic.co/t/handling-relationships-in-elasticssearch-6-2-version/130995)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 4\
**Last updated:** [May 8, 2018, 1:46pm UTC](https://discuss.elastic.co/t/handling-relationships-in-elasticssearch-6-2-version/130995 "2018-05-08T13:46:16Z")

</div>

Hi all I have small doubt regarding the above mentioned topic here we have Application-side joins, Data denormalization, Nested objects and Parent/child relationships.In document I couldn't found application-side joins a…

---

## [Display Elasticsearch Lucene Memory](https://discuss.elastic.co/t/display-elasticsearch-lucene-memory/130055)

<div class="topic-metadata">

**Author:** [@motts](https://discuss.elastic.co/u/motts)\
**Replies:** 2\
**Last updated:** [May 8, 2018, 12:57pm UTC](https://discuss.elastic.co/t/display-elasticsearch-lucene-memory/130055 "2018-05-08T12:57:24Z")

</div>

Is there a way to display the Lucene memory of Elasticsearch? I am using ES 2.4 on CentOS 6.9. I know it's found in /etc/sysconfig/elasticsearch, but is there a command I could use to check the lucene value? Thanks

---

## [We need to collect 5000 events/sec and we are choosing single node elasticsearch,What is the compute capacity (CPU,RAM) needed for logstash and elasticsearch?](https://discuss.elastic.co/t/we-need-to-collect-5000-events-sec-and-we-are-choosing-single-node-elasticsearch-what-is-the-compute-capacity-cpu-ram-needed-for-logstash-and-elasticsearch/131005)

<div class="topic-metadata">

**Author:** [@Suresh\_RS](https://discuss.elastic.co/u/Suresh_RS)\
**Replies:** 1\
**Last updated:** [May 8, 2018, 12:57pm UTC](https://discuss.elastic.co/t/we-need-to-collect-5000-events-sec-and-we-are-choosing-single-node-elasticsearch-what-is-the-compute-capacity-cpu-ram-needed-for-logstash-and-elasticsearch/131005 "2018-05-08T12:57:13Z")

</div>

We need to collect 5000 events/sec and we are choosing single node elasticsearch,What is the compute capacity (CPU,RAM) needed for logstash and elasticsearch?

---

## [Pagination implementation using java](https://discuss.elastic.co/t/pagination-implementation-using-java/130961)

<div class="topic-metadata">

**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\
**Replies:** 2\
**Last updated:** [May 8, 2018, 12:18pm UTC](https://discuss.elastic.co/t/pagination-implementation-using-java/130961 "2018-05-08T12:18:00Z")

</div>

Hi All, Could someone guide me with some code snippet on writing pagination logic using ES java rest high level client api. Thanks & Regards, Ram Prasad G

---

## [io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record:](https://discuss.elastic.co/t/io-netty-handler-ssl-notsslrecordexception-not-an-ssl-tls-record/130987)

<div class="topic-metadata">

**Author:** [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\
**Replies:** 1\
**Last updated:** [May 8, 2018, 11:57am UTC](https://discuss.elastic.co/t/io-netty-handler-ssl-notsslrecordexception-not-an-ssl-tls-record/130987 "2018-05-08T11:57:54Z")

</div>

Hello, I have installed x-pack and configured each and every node of my elastic cluster for SSL certificates using certutil tool provided by x-pack. A forwarder is configured to ingest data into elastic cluster, I chec…

---

## [Duplication in elasticsearch](https://discuss.elastic.co/t/duplication-in-elasticsearch/130193)

<div class="topic-metadata">

**Author:** [@Dinesh\_Vijay](https://discuss.elastic.co/u/Dinesh_Vijay)\
**Replies:** 9\
**Last updated:** [May 8, 2018, 10:43am UTC](https://discuss.elastic.co/t/duplication-in-elasticsearch/130193 "2018-05-08T10:43:13Z")

</div>

Hi, We have a logstash configuration for our logging application to show the logs on kibana dashboard. But we are having duplicate entries in elasticsearch. we did the workaround which is mentioned below blog. Our co…

---

## [org.elasticsearch.cluster.block.ClusterBlockException: blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\]](https://discuss.elastic.co/t/org-elasticsearch-cluster-block-clusterblockexception-blocked-by-forbidden-12-index-read-only-allow-delete-api/130963)

<div class="topic-metadata">

**Author:** [@rajibsoft](https://discuss.elastic.co/u/rajibsoft)\
**Replies:** 6\
**Last updated:** [May 8, 2018, 10:38am UTC](https://discuss.elastic.co/t/org-elasticsearch-cluster-block-clusterblockexception-blocked-by-forbidden-12-index-read-only-allow-delete-api/130963 "2018-05-08T10:38:20Z")

</div>

Hi, I am new to Elasticsearch. I am developing an application based on Spring boot (Version 2.0.1.RELEASE) and Elasticsearch (Version 6.2.4) My application is very simple, it just creates document in Elasticsearch inde…

---

## [Maintaining Order of logs with elastic-search search API](https://discuss.elastic.co/t/maintaining-order-of-logs-with-elastic-search-search-api/130962)

<div class="topic-metadata">

**Author:** [@shaheryar](https://discuss.elastic.co/u/shaheryar)\
**Replies:** 4\
**Last updated:** [May 8, 2018, 9:52am UTC](https://discuss.elastic.co/t/maintaining-order-of-logs-with-elastic-search-search-api/130962 "2018-05-08T09:52:11Z")

</div>

How can i retrieve logs from elastic search in the order they were generated?

---

## [Elasticsearch 5.6 Completion Suggester non-letter character problem](https://discuss.elastic.co/t/elasticsearch-5-6-completion-suggester-non-letter-character-problem/130960)

<div class="topic-metadata">

**Author:** [@Adam\_Krajcs](https://discuss.elastic.co/u/Adam_Krajcs)\
**Replies:** 1\
**Last updated:** [May 8, 2018, 9:20am UTC](https://discuss.elastic.co/t/elasticsearch-5-6-completion-suggester-non-letter-character-problem/130960 "2018-05-08T09:20:39Z")

</div>

Hi, We couldn't use the completion suggester for non-letter characters, like c++, or c#. The default analyzer of the completion suggester is the simple. So from the c# text itt will create the following token: { "tok…

---

## [Cold data node search performance](https://discuss.elastic.co/t/cold-data-node-search-performance/130844)

<div class="topic-metadata">

**Author:** [@farin99](https://discuss.elastic.co/u/farin99)\
**Replies:** 8\
**Last updated:** [May 8, 2018, 8:37am UTC](https://discuss.elastic.co/t/cold-data-node-search-performance/130844 "2018-05-08T08:37:16Z")

</div>

Hi, We are wondering regarding our search performance in our cold data nodes. We have a use case of searching a week which is built of 7 indexes (index per day) each index has 38 shards 22GB each. The query timeout aft…

---

## [Unable to send email using watcher on Xpack 6.2.1](https://discuss.elastic.co/t/unable-to-send-email-using-watcher-on-xpack-6-2-1/129764)

<div class="topic-metadata">

**Author:** [@maheshm](https://discuss.elastic.co/u/maheshm)\
**Replies:** 9\
**Last updated:** [May 8, 2018, 7:58am UTC](https://discuss.elastic.co/t/unable-to-send-email-using-watcher-on-xpack-6-2-1/129764 "2018-05-08T07:58:37Z")

</div>

Hi, we are seeing an error through the essential SMTP configuration and other email action settings are enabled using X-Pack 6.2.1. Below is the facing error message, \[image\] \[image\] Can someone please assist here? R…

---

## [Watcher: multiple email accounts](https://discuss.elastic.co/t/watcher-multiple-email-accounts/130835)

<div class="topic-metadata">

**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Replies:** 5\
**Last updated:** [May 8, 2018, 7:57am UTC](https://discuss.elastic.co/t/watcher-multiple-email-accounts/130835 "2018-05-08T07:57:23Z")

</div>

Hi ES experts, I'm trying to configure several Email accounts in elasticsearch.yml: xpack.notification.email.account: acc1: profile: standard email\_defaults: from: mail1@dom1.net smtp: auth: t…

---

## [How to compare ctx.payload.hits.total value to last ctx.payload.hits.total](https://discuss.elastic.co/t/how-to-compare-ctx-payload-hits-total-value-to-last-ctx-payload-hits-total/130756)

<div class="topic-metadata">

**Author:** [@addanuj](https://discuss.elastic.co/u/addanuj)\
**Replies:** 3\
**Last updated:** [May 8, 2018, 7:53am UTC](https://discuss.elastic.co/t/how-to-compare-ctx-payload-hits-total-value-to-last-ctx-payload-hits-total/130756 "2018-05-08T07:53:13Z")

</div>

HI @spinscale is their any way of comparing one ctx.payload.hits.total to another ctx.payload.hits.total like current value of ctx.payload.hits.total to last value of ctx.payload.hits.total for a watcher

---

## [Stop-Words analyzers does not work as expected](https://discuss.elastic.co/t/stop-words-analyzers-does-not-work-as-expected/130946)

<div class="topic-metadata">

**Author:** [@mahesh.maney](https://discuss.elastic.co/u/mahesh.maney)\
**Replies:** 0\
**Last updated:** [May 8, 2018, 7:35am UTC](https://discuss.elastic.co/t/stop-words-analyzers-does-not-work-as-expected/130946 "2018-05-08T07:35:50Z")

</div>

Hi, I’m facing an issue with implementing stop-words and synonyms on title and description fields. While the synonym works well, the stop-words filter fails. I have defined two custom analyzers namely, NGRAM and SYNONYM…

---

## [Maximum number of disks/storage size per data node](https://discuss.elastic.co/t/maximum-number-of-disks-storage-size-per-data-node/130940)

<div class="topic-metadata">

**Author:** [@Ali\_Nazemian](https://discuss.elastic.co/u/Ali_Nazemian)\
**Replies:** 1\
**Last updated:** [May 8, 2018, 6:53am UTC](https://discuss.elastic.co/t/maximum-number-of-disks-storage-size-per-data-node/130940 "2018-05-08T06:53:03Z")

</div>

I was wondering what the maximum recommended disk size/number of disks are per each data node. What would be the consequences of using big data nodes (24TB+) on a heavy indexing cluster?

---

## [Ignoring a field completely](https://discuss.elastic.co/t/ignoring-a-field-completely/130916)

<div class="topic-metadata">

**Author:** [@Prathap\_BN](https://discuss.elastic.co/u/Prathap_BN)\
**Replies:** 3\
**Last updated:** [May 8, 2018, 6:26am UTC](https://discuss.elastic.co/t/ignoring-a-field-completely/130916 "2018-05-08T06:26:38Z")

</div>

Is there a way in ES 6 to include a detail in Mapping where upon insertion the field is completely ignored by ES meaning it should neither be indexed nor be stored as part of '\_source'

---

## [Want to know what is the file are present in indecies](https://discuss.elastic.co/t/want-to-know-what-is-the-file-are-present-in-indecies/130808)

<div class="topic-metadata">

**Author:** [@Tamal\_Kundu](https://discuss.elastic.co/u/Tamal_Kundu)\
**Replies:** 15\
**Last updated:** [May 8, 2018, 6:06am UTC](https://discuss.elastic.co/t/want-to-know-what-is-the-file-are-present-in-indecies/130808 "2018-05-08T06:06:59Z")

</div>

.deleted store.size pri.store.size yellow open fuselog-2018.05.03 Ivek1mr5S9q1KiRDu-2NUg 5 1 30271526 0 111gb 111gb yellow open fuselog-2018.05.07 UQvSXBKlSjeJM\_bngM01wQ 5 1 241…

---

## [How to get all relevant data of anomaly into alert message](https://discuss.elastic.co/t/how-to-get-all-relevant-data-of-anomaly-into-alert-message/130489)

<div class="topic-metadata">

**Author:** [@admlko](https://discuss.elastic.co/u/admlko)\
**Replies:** 6\
**Last updated:** [May 8, 2018, 5:51am UTC](https://discuss.elastic.co/t/how-to-get-all-relevant-data-of-anomaly-into-alert-message/130489 "2018-05-08T05:51:00Z")

</div>

I am trying to write a python script in order to find anomalies and relay them forward into our monitoring system. What I am looking for is to get all the same information I can find from anomaly explorer (in the pictur…

---

## [How to elude error \[can't select channel size is 0 for types\]?](https://discuss.elastic.co/t/how-to-elude-error-cant-select-channel-size-is-0-for-types/130935)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 0\
**Last updated:** [May 8, 2018, 5:41am UTC](https://discuss.elastic.co/t/how-to-elude-error-cant-select-channel-size-is-0-for-types/130935 "2018-05-08T05:41:48Z")

</div>

Hello. I have came across below error while creating index pattern through kibana UI. I would appreciate if I could get some help to elude the error. \[2018-05-08T05:23:16,981\]\[WARN \]\[r.suppressed \] path: /.…

---

## [Space is getting filled. Need some information how to clear/re-claim the space](https://discuss.elastic.co/t/space-is-getting-filled-need-some-information-how-to-clear-re-claim-the-space/129647)

<div class="topic-metadata">

**Author:** [@Tamal\_Kundu](https://discuss.elastic.co/u/Tamal_Kundu)\
**Replies:** 28\
**Last updated:** [May 8, 2018, 5:40am UTC](https://discuss.elastic.co/t/space-is-getting-filled-need-some-information-how-to-clear-re-claim-the-space/129647 "2018-05-08T05:40:18Z")

</div>

Hi , We have Elasticserch for monitoring our services for business production. But the space is getting filled after a while. We are facing this issue quite often. Need to know if there is a way we can claim or clear th…

---

## [Using filter with Context Suggester](https://discuss.elastic.co/t/using-filter-with-context-suggester/130934)

<div class="topic-metadata">

**Author:** [@ahmadazimi](https://discuss.elastic.co/u/ahmadazimi)\
**Replies:** 0\
**Last updated:** [May 8, 2018, 5:35am UTC](https://discuss.elastic.co/t/using-filter-with-context-suggester/130934 "2018-05-08T05:35:03Z")

</div>

I wanna use Context Suggester with a geo filter. I mean I wanna get all suggestions within a polygon using INTERSECTS. Is it possible? BTW: I've used geo context but its not the right way!

---

## [ElasticSearch with SonataAdminBundle](https://discuss.elastic.co/t/elasticsearch-with-sonataadminbundle/130818)

<div class="topic-metadata">

**Author:** [@abdelilah](https://discuss.elastic.co/u/abdelilah)\
**Replies:** 1\
**Last updated:** [May 8, 2018, 1:12am UTC](https://discuss.elastic.co/t/elasticsearch-with-sonataadminbundle/130818 "2018-05-08T01:12:10Z")

</div>

Hello, I need to integrate Elasticsearch with the datagrieds of SonataAdminBundle, I downloaded sonata-project/admin-search-bundle, now i get an error when I want to execute this command line "php bin/console fos:elastic…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1694)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1696)
