# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1701 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1702 --- ## [Space requirements](https://discuss.elastic.co/t/space-requirements/130278)
**Author:** [@srividya](https://discuss.elastic.co/u/srividya)\ **Replies:** 1\ **Last updated:** [May 2, 2018, 3:23pm UTC](https://discuss.elastic.co/t/space-requirements/130278 "2018-05-02T15:23:17Z")
Is there any calculator for disk space requirement for ES? For example for each k number of docs with n number of fields we ll need x GB. Can you give an example? Also how do we specify the retention policy for the docu… --- ## [Adding nodes to existing node](https://discuss.elastic.co/t/adding-nodes-to-existing-node/130274)
**Author:** [@Malefo\_Monnanyana](https://discuss.elastic.co/u/Malefo_Monnanyana)\ **Replies:** 1\ **Last updated:** [May 2, 2018, 2:57pm UTC](https://discuss.elastic.co/t/adding-nodes-to-existing-node/130274 "2018-05-02T14:57:21Z")
Hi guys, how do I add two more nodes and how do I get to make the status GREEN, this is what i get when i run "GET \_cluster/health?pretty" { "cluster\_name": "nodes\_production", "status": "yellow", "timed\_out": false, … --- ## [Elasticsearch index deletion and disk space reclamation](https://discuss.elastic.co/t/elasticsearch-index-deletion-and-disk-space-reclamation/130001)
**Author:** [@chaloulo](https://discuss.elastic.co/u/chaloulo)\ **Replies:** 4\ **Last updated:** [May 2, 2018, 2:43pm UTC](https://discuss.elastic.co/t/elasticsearch-index-deletion-and-disk-space-reclamation/130001 "2018-05-02T14:43:37Z")
Hello, We are running a setup where we use daily indices for our logs. Then we delete a whole daily index when the disk becomes full. When I delete an index, elasticsearch responds with a json:{"acknowledged":true} My … --- ## [Minimum\_should\_match appears to default to 0 when not explicitly set](https://discuss.elastic.co/t/minimum-should-match-appears-to-default-to-0-when-not-explicitly-set/130255)
**Author:** [@elavigne](https://discuss.elastic.co/u/elavigne)\ **Replies:** 2\ **Last updated:** [May 2, 2018, 2:08pm UTC](https://discuss.elastic.co/t/minimum-should-match-appears-to-default-to-0-when-not-explicitly-set/130255 "2018-05-02T14:08:29Z")
I'm confused about the behaviour of a query with shoulds. I have the following query on a 6.2.3 cluster: GET reporting\_tags/\_search { "query": { "bool": { "must": \[ {"term": {"source": "analytics"}}… --- ## [Elastic cluster hardware estimation](https://discuss.elastic.co/t/elastic-cluster-hardware-estimation/130258)
**Author:** [@Jacob\_N](https://discuss.elastic.co/u/Jacob_N)\ **Replies:** 2\ **Last updated:** [May 2, 2018, 2:04pm UTC](https://discuss.elastic.co/t/elastic-cluster-hardware-estimation/130258 "2018-05-02T14:04:31Z")
Hi, We are interestead on using Elasticsearch in our production servers for indexing JBoss logs. My data estimation is about 26Gb/day every month day, except last month day where the data spikes up to 45Gb/day . Our dat… --- ## [Can you use slop and cut off frequency in the same multi match query?](https://discuss.elastic.co/t/can-you-use-slop-and-cut-off-frequency-in-the-same-multi-match-query/130259)
**Author:** [@sdickson](https://discuss.elastic.co/u/sdickson)\ **Replies:** 0\ **Last updated:** [May 2, 2018, 1:57pm UTC](https://discuss.elastic.co/t/can-you-use-slop-and-cut-off-frequency-in-the-same-multi-match-query/130259 "2018-05-02T13:57:12Z")
Can you use slop and cut off frequency in the same multi match query? "multi\_match": { "fields": \[ "title^1", "description^0.5" \], "query": "proc… --- ## [Failed to execute on node \[YK3h1SM5SZW2K-JloBdVCg\]](https://discuss.elastic.co/t/failed-to-execute-on-node-yk3h1sm5szw2k-jlobdvcg/130252)
**Author:** [@vincentduan](https://discuss.elastic.co/u/vincentduan)\ **Replies:** 3\ **Last updated:** [May 2, 2018, 1:39pm UTC](https://discuss.elastic.co/t/failed-to-execute-on-node-yk3h1sm5szw2k-jlobdvcg/130252 "2018-05-02T13:39:50Z")
I am using curl -H "Content-Type: application/x-ndjson" -XPOST http://192.168.1.102:9200/myindex/mytype/\_bulk --data-binary @file command to import json file into ES cluster. my master nodes contains : \[192.168.1.101, 1… --- ## [Are there bind variables in Elastic and if yes, how to use them?](https://discuss.elastic.co/t/are-there-bind-variables-in-elastic-and-if-yes-how-to-use-them/130247)
**Author:** [@scampsd](https://discuss.elastic.co/u/scampsd)\ **Replies:** 1\ **Last updated:** [May 2, 2018, 12:23pm UTC](https://discuss.elastic.co/t/are-there-bind-variables-in-elastic-and-if-yes-how-to-use-them/130247 "2018-05-02T12:23:13Z")
Good afternoon. In the past, I've been working with Oracle database, and there there was the usage of so-called "bind variables", let me explain: The handling of a query happens as follows: parse query (translate int… --- ## [Text classification with ES](https://discuss.elastic.co/t/text-classification-with-es/130065)
**Author:** [@sanketshinde](https://discuss.elastic.co/u/sanketshinde)\ **Replies:** 2\ **Last updated:** [May 2, 2018, 11:58am UTC](https://discuss.elastic.co/t/text-classification-with-es/130065 "2018-05-02T11:58:30Z")
Hello, I followed the blog and ran the classification on the 20 News Group dataset, however I had a surprising experience. When tested the classification on the indexed documents as the test set, the accuracy was surpri… --- ## [Email body - Mustache template with conditions](https://discuss.elastic.co/t/email-body-mustache-template-with-conditions/130215)
**Author:** [@Hamza\_BENNANI](https://discuss.elastic.co/u/Hamza_BENNANI)\ **Replies:** 0\ **Last updated:** [May 2, 2018, 9:35am UTC](https://discuss.elastic.co/t/email-body-mustache-template-with-conditions/130215 "2018-05-02T09:35:25Z")
I need to adapt the content of my watcher email based on a variable. In other words, I need to do a 'IF ELSE" statement in the email template. Is-it possible ? The definition of the watcher : { ... "trigger": { "sc… --- ## [Threadpool / processors setting and ec2](https://discuss.elastic.co/t/threadpool-processors-setting-and-ec2/130222)
**Author:** [@azar](https://discuss.elastic.co/u/azar)\ **Replies:** 0\ **Last updated:** [May 2, 2018, 9:55am UTC](https://discuss.elastic.co/t/threadpool-processors-setting-and-ec2/130222 "2018-05-02T09:55:16Z")
Hey, I was wondering if there are any recommendations for setting the processors config for aws ec2 instance type? I'm utilizing mostly r4 and some i3 instance types and I suspect the default processors config is over-… --- ## [Default\_operator not working](https://discuss.elastic.co/t/default-operator-not-working/129872)
**Author:** [@tfe2012](https://discuss.elastic.co/u/tfe2012)\ **Replies:** 5\ **Last updated:** [May 2, 2018, 9:55am UTC](https://discuss.elastic.co/t/default-operator-not-working/129872 "2018-05-02T09:55:07Z")
Hi, I try run: oracle AND san AND francisco AND hadoop Get total of 1118 matches. Then I try: oracle san francisco hadoop I get total of 59 matches. Query looks like: \[ 'query' =\> \[ 'function\_score' =\> \[ '… --- ## [Problem indexation mails to elasticsearch](https://discuss.elastic.co/t/problem-indexation-mails-to-elasticsearch/130210)
**Author:** [@rouchad\_rouchad](https://discuss.elastic.co/u/rouchad_rouchad)\ **Replies:** 0\ **Last updated:** [May 2, 2018, 8:54am UTC](https://discuss.elastic.co/t/problem-indexation-mails-to-elasticsearch/130210 "2018-05-02T08:54:00Z")
hi everyone , please i need ur help , i got this error every time when i run logstash ! i don't know why !! "from" =\> "Codecademy \", "@version" =\> "1", … --- ## [Copy daily indices with new mappings](https://discuss.elastic.co/t/copy-daily-indices-with-new-mappings/130212)
**Author:** [@cvj](https://discuss.elastic.co/u/cvj)\ **Replies:** 0\ **Last updated:** [May 2, 2018, 9:02am UTC](https://discuss.elastic.co/t/copy-daily-indices-with-new-mappings/130212 "2018-05-02T09:02:08Z")
Hi, I'm trying to reindex my data using the \_reindex feature. Prior to this I wan't to create the daily indices with new mappings. How can I automatically extract the current daily name, add \_v2 to the name and add a … --- ## [Email notification with source details](https://discuss.elastic.co/t/email-notification-with-source-details/129982)
**Author:** [@nikbhadane](https://discuss.elastic.co/u/nikbhadane)\ **Replies:** 3\ **Last updated:** [May 2, 2018, 8:48am UTC](https://discuss.elastic.co/t/email-notification-with-source-details/129982 "2018-05-02T08:48:26Z")
Hello, I am currently using Kibana version: 4.5.4 Elasticsearch version: 2.X logstash Version : 2.2 I have also added watcher plugin to get email notifications. Everything is working fine. I need to do some extra … --- ## [Multiple conditions on compare](https://discuss.elastic.co/t/multiple-conditions-on-compare/130141)
**Author:** [@mww1](https://discuss.elastic.co/u/mww1)\ **Replies:** 1\ **Last updated:** [May 2, 2018, 8:48am UTC](https://discuss.elastic.co/t/multiple-conditions-on-compare/130141 "2018-05-02T08:48:01Z")
how can we write multiple compare condition in xpack? "condition" : { "compare" : { "ctx.payload.status" : { "eq" : "red" } } } I want to have two conditions, one for eq:red and eq:green, either one sh… --- ## [Problem with indexation mails to elasticsearch](https://discuss.elastic.co/t/problem-with-indexation-mails-to-elasticsearch/129952)
**Author:** [@rouchad\_rouchad](https://discuss.elastic.co/u/rouchad_rouchad)\ **Replies:** 2\ **Last updated:** [May 2, 2018, 8:31am UTC](https://discuss.elastic.co/t/problem-with-indexation-mails-to-elasticsearch/129952 "2018-05-02T08:31:50Z")
Hi everyone please i need ur help i want to index my mail box into elasticsearch using logstash but i get this error : \[2018-04-19T18: 40: 44,429\] \[INFO\] \[logstash.outputs.elasticsearch\] réessayant une action ayant écho… --- ## [ES 5.2 Java API connection queries-Client Object](https://discuss.elastic.co/t/es-5-2-java-api-connection-queries-client-object/130202)
**Author:** [@jiouser](https://discuss.elastic.co/u/jiouser)\ **Replies:** 0\ **Last updated:** [May 2, 2018, 7:43am UTC](https://discuss.elastic.co/t/es-5-2-java-api-connection-queries-client-object/130202 "2018-05-02T07:43:05Z")
We are using ES 5.2 with XPack and Java client. I am curious to know the following points: Essentially, my cluster consist of 3 Coordinator/3 Master and 6 Data Nodes. Our client specifies IP/Port of all Coordinator node… --- ## [Elasticsearch running on openjdk in clefos-s390x](https://discuss.elastic.co/t/elasticsearch-running-on-openjdk-in-clefos-s390x/130145)
**Author:** [@vpram86](https://discuss.elastic.co/u/vpram86)\ **Replies:** 1\ **Last updated:** [May 2, 2018, 6:27am UTC](https://discuss.elastic.co/t/elasticsearch-running-on-openjdk-in-clefos-s390x/130145 "2018-05-02T06:27:08Z")
I am trying to run elasticsearch 5.6.5 on s390x/Clefos with OpenJDK 64-Bit Zero VM (25.161-b14) for linux-s390x JRE (1.8.0\_161-b14) which I got from official repo Index of /clefos/7/updates/s390x It seems to be dumping … --- ## [Performing analysis on synonym preprocessing](https://discuss.elastic.co/t/performing-analysis-on-synonym-preprocessing/130187)
**Author:** [@aclowkey](https://discuss.elastic.co/u/aclowkey)\ **Replies:** 0\ **Last updated:** [May 2, 2018, 6:23am UTC](https://discuss.elastic.co/t/performing-analysis-on-synonym-preprocessing/130187 "2018-05-02T06:23:52Z")
We have a bunch of SQL tables which defines the business's synonyms. And I'm working on migrating these synonyms to ElastiSearch. Often these synonyms are not tokenized and expanded forms of the same terms might appear … --- ## [Imported records in Elasticsearch surpassed the original count in csv](https://discuss.elastic.co/t/imported-records-in-elasticsearch-surpassed-the-original-count-in-csv/130185)
**Author:** [@StephenC](https://discuss.elastic.co/u/StephenC)\ **Replies:** 0\ **Last updated:** [May 2, 2018, 6:20am UTC](https://discuss.elastic.co/t/imported-records-in-elasticsearch-surpassed-the-original-count-in-csv/130185 "2018-05-02T06:20:44Z")
I am using Hive-Elasticsearch Integration to import csv of 500gb which consists of 550 million records. I have 5 nodes cluster, with index set as: Replica=0, shards=10., refresh\_interval = -1. My job ran for around 35 … --- ## [Hive read operation fails when stored as external table pointing to Elastic search location](https://discuss.elastic.co/t/hive-read-operation-fails-when-stored-as-external-table-pointing-to-elastic-search-location/130135)
**Author:** [@bvk](https://discuss.elastic.co/u/bvk)\ **Replies:** 3\ **Last updated:** [May 2, 2018, 6:07am UTC](https://discuss.elastic.co/t/hive-read-operation-fails-when-stored-as-external-table-pointing-to-elastic-search-location/130135 "2018-05-02T06:07:45Z")
Hi, I have 5.10.2 CDH Kerberos enabled 6 node Hadoop cluster and I have installed Elasticsearch 6.1.4 on Edge-node (Single node ES). I am trying to to load data from hive to Elasticsearch and read it in hive. for ex: … --- ## [Searching for newline or linebreak in a field](https://discuss.elastic.co/t/searching-for-newline-or-linebreak-in-a-field/130049)
**Author:** [@DoCoMeffen](https://discuss.elastic.co/u/DoCoMeffen)\ **Replies:** 1\ **Last updated:** [May 2, 2018, 2:53am UTC](https://discuss.elastic.co/t/searching-for-newline-or-linebreak-in-a-field/130049 "2018-05-02T02:53:52Z")
I (somehow) got some text fields that contain line breaks and/or newlines and I'm having trouble constructing a query to locate these. I've tried "query": { "regexp":{ "user.firstname": "\\n" } } and "query": { "… --- ## [Statistic in bro logs](https://discuss.elastic.co/t/statistic-in-bro-logs/130171)
**Author:** [@bz\_Os](https://discuss.elastic.co/u/bz_Os)\ **Replies:** 2\ **Last updated:** [May 2, 2018, 12:01am UTC](https://discuss.elastic.co/t/statistic-in-bro-logs/130171 "2018-05-02T00:01:37Z")
hello every One , i was send bro logs with elk ,when i visite the logs of bro in the path :/nsm/bro/logs/current i see top 10 http request and other statistic so i want to know if is bro which is responsible of this sta… --- ## [Need help with painless scripting](https://discuss.elastic.co/t/need-help-with-painless-scripting/130059)
**Author:** [@elasticuser1](https://discuss.elastic.co/u/elasticuser1)\ **Replies:** 3\ **Last updated:** [May 1, 2018, 8:41pm UTC](https://discuss.elastic.co/t/need-help-with-painless-scripting/130059 "2018-05-01T20:41:22Z")
Hi, I have data like this - curl -H "content-type: application/json" -XPUT "http://xxx:9200/currencylookup/inr/usd" -d' { "currency": "usd", "currencyname": "US Dollar", "units\_per\_inr": 0.016155969, "inr\_per\_unit… --- ## [ElasticSearch reports non-200 response on successful update](https://discuss.elastic.co/t/elasticsearch-reports-non-200-response-on-successful-update/130131)
**Author:** [@devj1988](https://discuss.elastic.co/u/devj1988)\ **Replies:** 0\ **Last updated:** [May 1, 2018, 3:36pm UTC](https://discuss.elastic.co/t/elasticsearch-reports-non-200-response-on-successful-update/130131 "2018-05-01T15:36:24Z")
What is the response code when a document is updated? AFAIK, the response code should be 200 for document update and 201 for creation. So, for something like : PUT index/type/doc?version=1 // body if update is succe… --- ## [ES results along with the analyzer used to get a match](https://discuss.elastic.co/t/es-results-along-with-the-analyzer-used-to-get-a-match/130169)
**Author:** [@SMK7](https://discuss.elastic.co/u/SMK7)\ **Replies:** 0\ **Last updated:** [May 1, 2018, 10:04pm UTC](https://discuss.elastic.co/t/es-results-along-with-the-analyzer-used-to-get-a-match/130169 "2018-05-01T22:04:50Z")
Is there way to get Analzer details along with search results. For example an index have multiple analyzers one is exact match and partial and fuzzy need to find out for a given string what matching pattern it used to g… --- ## [Curator, delete some data from within index](https://discuss.elastic.co/t/curator-delete-some-data-from-within-index/130041)
**Author:** [@papebadiane](https://discuss.elastic.co/u/papebadiane)\ **Replies:** 4\ **Last updated:** [May 1, 2018, 9:59pm UTC](https://discuss.elastic.co/t/curator-delete-some-data-from-within-index/130041 "2018-05-01T21:59:21Z")
Hello, i want to delete some rows older that 10 days from my index with Elastic Curator with the following action actions: 1: action: delete\_indices description: \>- Delete indices older than 10 days bas… --- ## [ML job for calendar date other than @timestamp](https://discuss.elastic.co/t/ml-job-for-calendar-date-other-than-timestamp/130163)
**Author:** [@georgezoto](https://discuss.elastic.co/u/georgezoto)\ **Replies:** 1\ **Last updated:** [May 1, 2018, 9:34pm UTC](https://discuss.elastic.co/t/ml-job-for-calendar-date-other-than-timestamp/130163 "2018-05-01T21:34:32Z")
Hello Machine Learning team, I went to all kinds of hoops :curly\_loop: to finally have x-pack and ML on the cloud (elastic cloud does not offer ML feature yet :disappointed\_relieved:) on a 3 node EC2 cluster. I have a… --- ## [Cannot allocate memory error, when I try to get the Elasticsearch version (v 5.6.8)](https://discuss.elastic.co/t/cannot-allocate-memory-error-when-i-try-to-get-the-elasticsearch-version-v-5-6-8/130081)
**Author:** [@Jose\_Enrique\_Hernand](https://discuss.elastic.co/u/Jose_Enrique_Hernand)\ **Replies:** 4\ **Last updated:** [May 1, 2018, 8:55pm UTC](https://discuss.elastic.co/t/cannot-allocate-memory-error-when-i-try-to-get-the-elasticsearch-version-v-5-6-8/130081 "2018-05-01T20:55:01Z")
Hello everyone, I am in the process of configuring an Elasticsearch environment. After set up the parameters according to the documentation, I get an error message when I try to get the version, even though there is fre… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1700) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1702)