# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1707

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1708

---

## [More Like This Help](https://discuss.elastic.co/t/more-like-this-help/129681)

<div class="topic-metadata">

**Author:** [@bdevaca](https://discuss.elastic.co/u/bdevaca)\
**Replies:** 0\
**Last updated:** [April 26, 2018, 1:21pm UTC](https://discuss.elastic.co/t/more-like-this-help/129681 "2018-04-26T13:21:02Z")

</div>

From initial testing, it appears that if documents have the same terms and you included them in like and unlike, they cancel each other out and no documents are returned. Can this be confirmed as expected behavior? For…

---

## [Trying to set up multi-node cluster on AWS EC2](https://discuss.elastic.co/t/trying-to-set-up-multi-node-cluster-on-aws-ec2/129677)

<div class="topic-metadata">

**Author:** [@DennisM](https://discuss.elastic.co/u/DennisM)\
**Replies:** 0\
**Last updated:** [April 26, 2018, 1:03pm UTC](https://discuss.elastic.co/t/trying-to-set-up-multi-node-cluster-on-aws-ec2/129677 "2018-04-26T13:03:28Z")

</div>

Hi, I'm sure I'm missing something basic here but I'm not sure what it is. I have a single-node cluster currently running on an Amazon EC2 instance that I am trying to expand to a three-node cluster. I have two more EC2…

---

## [Issue in ElasticSearch Cluster](https://discuss.elastic.co/t/issue-in-elasticsearch-cluster/129308)

<div class="topic-metadata">

**Author:** [@Rajashree\_Sekar](https://discuss.elastic.co/u/Rajashree_Sekar)\
**Replies:** 6\
**Last updated:** [April 26, 2018, 1:02pm UTC](https://discuss.elastic.co/t/issue-in-elasticsearch-cluster/129308 "2018-04-26T13:02:29Z")

</div>

Could not form a cluster with 1 master node and two data nodes . Im creating cluster inside vbox. Getting Handshake exception. Please help me to solve the issue. Master Node yml file: cluster.name: CRIST node.name: e…

---

## [Merges taking lots of space](https://discuss.elastic.co/t/merges-taking-lots-of-space/129671)

<div class="topic-metadata">

**Author:** [@Thomas\_Deweer](https://discuss.elastic.co/u/Thomas_Deweer)\
**Replies:** 0\
**Last updated:** [April 26, 2018, 12:55pm UTC](https://discuss.elastic.co/t/merges-taking-lots-of-space/129671 "2018-04-26T12:55:11Z")

</div>

Hello, I'll try to briefly explain the situation: We have a record which we update once, so we have lots of deleted documents to be left out during merges, however, after a million documents, we perform a rollover, whi…

---

## [Collector \[index-stats\] timed out when collecting data](https://discuss.elastic.co/t/collector-index-stats-timed-out-when-collecting-data/129667)

<div class="topic-metadata">

**Author:** [@vaishali1](https://discuss.elastic.co/u/vaishali1)\
**Replies:** 0\
**Last updated:** [April 26, 2018, 12:47pm UTC](https://discuss.elastic.co/t/collector-index-stats-timed-out-when-collecting-data/129667 "2018-04-26T12:47:44Z")

</div>

Hi, I am facing this issue when i try to run Logstash \[2018-04-26T03:08:20,208\]\[ERROR\]\[o.e.x.m.c.i.IndexStatsCollector\] \[EXb00G3\] collector \[index-stats\] timed out when collecting data\`\`\`

---

## [Error: Elasticsearch](https://discuss.elastic.co/t/error-elasticsearch/129644)

<div class="topic-metadata">

**Author:** [@jawad846](https://discuss.elastic.co/u/jawad846)\
**Replies:** 8\
**Last updated:** [April 26, 2018, 11:42am UTC](https://discuss.elastic.co/t/error-elasticsearch/129644 "2018-04-26T11:42:02Z")

</div>

Getting error, when starting elasticsearch root@ip-192-168-2-183:/usr/share/elasticsearch# ./bin/elasticsearch \[2018-04-26T10:42:39,743\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[node-1\] uncaught exception i…

---

## [Send metrics values via mail with watcher](https://discuss.elastic.co/t/send-metrics-values-via-mail-with-watcher/129640)

<div class="topic-metadata">

**Author:** [@Emerson](https://discuss.elastic.co/u/Emerson)\
**Replies:** 1\
**Last updated:** [April 26, 2018, 11:03am UTC](https://discuss.elastic.co/t/send-metrics-values-via-mail-with-watcher/129640 "2018-04-26T11:03:02Z")

</div>

Hi Team, is it possible to insert metrics values in body mail with watcher ? How can i do this please? Thanks you for your answers Emerson

---

## [New Node Cert Issue](https://discuss.elastic.co/t/new-node-cert-issue/129629)

<div class="topic-metadata">

**Author:** [@AndyT](https://discuss.elastic.co/u/AndyT)\
**Replies:** 1\
**Last updated:** [April 26, 2018, 10:32am UTC](https://discuss.elastic.co/t/new-node-cert-issue/129629 "2018-04-26T10:32:06Z")

</div>

Hi, I'm currently trying to add a new node to an existing cluster but appear to have issues with the certificates. Error log is stating the following. \[2018-04-10T12:08:54,945\]\[WARN \]\[o.e.x.s.t.n.SecurityNetty4Tran…

---

## [Adding a second node to cluster](https://discuss.elastic.co/t/adding-a-second-node-to-cluster/129511)

<div class="topic-metadata">

**Author:** [@L33T](https://discuss.elastic.co/u/L33T)\
**Replies:** 10\
**Last updated:** [April 26, 2018, 10:04am UTC](https://discuss.elastic.co/t/adding-a-second-node-to-cluster/129511 "2018-04-26T10:04:28Z")

</div>

Hi, Recently setup elastic on a windows host but performance is being hampered as its only a single node. I have setup a second node but cannot get it to see the cluster. both elasticsearch.yml configs below: Node 1: b…

---

## [Saving data to ES 5.4 blocked when ES is creating mapping and updating mapping](https://discuss.elastic.co/t/saving-data-to-es-5-4-blocked-when-es-is-creating-mapping-and-updating-mapping/129612)

<div class="topic-metadata">

**Author:** [@elasticyu](https://discuss.elastic.co/u/elasticyu)\
**Replies:** 10\
**Last updated:** [April 26, 2018, 9:27am UTC](https://discuss.elastic.co/t/saving-data-to-es-5-4-blocked-when-es-is-creating-mapping-and-updating-mapping/129612 "2018-04-26T09:27:45Z")

</div>

My workflow is: Reading data from kafka Saving data into Elastic Search 5.4 I checked the time spent at every method in my application, the following picture shows normal workflow: most time is spent at reading data f…

---

## [Search query over multiple indices find no hits when suggestions fail](https://discuss.elastic.co/t/search-query-over-multiple-indices-find-no-hits-when-suggestions-fail/129621)

<div class="topic-metadata">

**Author:** [@PatrickK](https://discuss.elastic.co/u/PatrickK)\
**Replies:** 0\
**Last updated:** [April 26, 2018, 9:07am UTC](https://discuss.elastic.co/t/search-query-over-multiple-indices-find-no-hits-when-suggestions-fail/129621 "2018-04-26T09:07:07Z")

</div>

Hello everybody! A (admittedly very) quick search of the forum, did not yield a result, so I hope this is not an already answered question. I have several indices with different fields, and while a request containing j…

---

## [Multimatch : keywords which occur several times](https://discuss.elastic.co/t/multimatch-keywords-which-occur-several-times/129616)

<div class="topic-metadata">

**Author:** [@Arth](https://discuss.elastic.co/u/Arth)\
**Replies:** 0\
**Last updated:** [April 26, 2018, 8:44am UTC](https://discuss.elastic.co/t/multimatch-keywords-which-occur-several-times/129616 "2018-04-26T08:44:01Z")

</div>

Hi, I'm using a multimatch query on 10 fields with Type.MOST\_FIELDS. Most of the fields are short (product name, main category, secondary categories, brand, seller,...) but two of them are long (description, technical…

---

## [Mysql DB sync of all tables in DB at once](https://discuss.elastic.co/t/mysql-db-sync-of-all-tables-in-db-at-once/129602)

<div class="topic-metadata">

**Author:** [@raghav1107](https://discuss.elastic.co/u/raghav1107)\
**Replies:** 1\
**Last updated:** [April 26, 2018, 8:09am UTC](https://discuss.elastic.co/t/mysql-db-sync-of-all-tables-in-db-at-once/129602 "2018-04-26T08:09:21Z")

</div>

Hi, We have mysql database which has 10 to 12 tables. Currently we are using log stash conf as below and jdbc plugin to sync the table data into elastic search. some tables has lakhs of records and might take time to sy…

---

## [Edit es config when I use org.elasticsearch.gradle:build-tools](https://discuss.elastic.co/t/edit-es-config-when-i-use-org-elasticsearch-gradle-build-tools/127772)

<div class="topic-metadata">

**Author:** [@8a98bb2968a03fe24acf](https://discuss.elastic.co/u/8a98bb2968a03fe24acf)\
**Replies:** 2\
**Last updated:** [April 26, 2018, 7:46am UTC](https://discuss.elastic.co/t/edit-es-config-when-i-use-org-elasticsearch-gradle-build-tools/127772 "2018-04-26T07:46:37Z")

</div>

hi I want to edit elasticsearch.yml when I use org.elasticsearch.gradle:build-tools when I run gradle clean run, it makes basic elasticsearch.yml like below and run node. cluster.name: \_run pidfile: path path.repo: pat…

---

## [Problem creating custom analyzer](https://discuss.elastic.co/t/problem-creating-custom-analyzer/129257)

<div class="topic-metadata">

**Author:** [@AccordISSupport](https://discuss.elastic.co/u/AccordISSupport)\
**Replies:** 1\
**Last updated:** [April 26, 2018, 7:25am UTC](https://discuss.elastic.co/t/problem-creating-custom-analyzer/129257 "2018-04-26T07:25:43Z")

</div>

Hi, I have ELK stack receiving logs from Winlogbeat but I have a problem whereby the standard analyzer is being used to process the fields and the text field 'event\_data.TargetUserName' sometimes contains a $ as it some…

---

## [Match a indexed field with array of strings](https://discuss.elastic.co/t/match-a-indexed-field-with-array-of-strings/129597)

<div class="topic-metadata">

**Author:** [@Moumita\_Mandal](https://discuss.elastic.co/u/Moumita_Mandal)\
**Replies:** 0\
**Last updated:** [April 26, 2018, 6:42am UTC](https://discuss.elastic.co/t/match-a-indexed-field-with-array-of-strings/129597 "2018-04-26T06:42:36Z")

</div>

Hello, Currently, I am using Elasticsearch version 5.3.2. I have multiple documents in the below format: { "id":"abc123" "question":"What is 1004 divided by 2?", "answer":" A. 52, B. 502, C. 520,D. 5002", "categor…

---

## [Established connections by elastic search](https://discuss.elastic.co/t/established-connections-by-elastic-search/129526)

<div class="topic-metadata">

**Author:** [@niaz](https://discuss.elastic.co/u/niaz)\
**Replies:** 1\
**Last updated:** [April 26, 2018, 6:23am UTC](https://discuss.elastic.co/t/established-connections-by-elastic-search/129526 "2018-04-26T06:23:20Z")

</div>

Hello, I am using elastic search on Windows as single node. That means I have set "transport.type: local" in config file. The number of opened connections that I see in TcpView is over 30. Elastic search is simply start…

---

## [Watch job for CPU usage](https://discuss.elastic.co/t/watch-job-for-cpu-usage/129513)

<div class="topic-metadata">

**Author:** [@mww1](https://discuss.elastic.co/u/mww1)\
**Replies:** 1\
**Last updated:** [April 26, 2018, 6:18am UTC](https://discuss.elastic.co/t/watch-job-for-cpu-usage/129513 "2018-04-26T06:18:54Z")

</div>

Hi, I want to make a watch job for getting emails if the CPU usage exceeds 35%. can you please help me with the condition body for checking all the nodes in the cluster? Thanks. :slight\_smile:

---

## [Xpack after success install Full of errors](https://discuss.elastic.co/t/xpack-after-success-install-full-of-errors/129251)

<div class="topic-metadata">

**Author:** [@omid](https://discuss.elastic.co/u/omid)\
**Replies:** 8\
**Last updated:** [April 26, 2018, 6:17am UTC](https://discuss.elastic.co/t/xpack-after-success-install-full-of-errors/129251 "2018-04-26T06:17:59Z")

</div>

im install after install successfully X-pack! but fully error! \[error%20xpack%20elk\] why !? how to solved error ?

---

## [Accessing search result (index\_out\_of\_bounds](https://discuss.elastic.co/t/accessing-search-result-index-out-of-bounds/129508)

<div class="topic-metadata">

**Author:** [@rickdegreef](https://discuss.elastic.co/u/rickdegreef)\
**Replies:** 6\
**Last updated:** [April 26, 2018, 5:42am UTC](https://discuss.elastic.co/t/accessing-search-result-index-out-of-bounds/129508 "2018-04-26T05:42:26Z")

</div>

Hi there, When trying out the watcher, we would like to add info we collected in the input to a webhook POST request. We are trying to use the ctx.payload.hits.hits (with or without any index number). Unfortunately, ev…

---

## [High-Level Rest Client | Response Issue](https://discuss.elastic.co/t/high-level-rest-client-response-issue/129249)

<div class="topic-metadata">

**Author:** [@Divya\_Dua](https://discuss.elastic.co/u/Divya_Dua)\
**Replies:** 4\
**Last updated:** [April 26, 2018, 5:26am UTC](https://discuss.elastic.co/t/high-level-rest-client-response-issue/129249 "2018-04-26T05:26:23Z")

</div>

Ciao, I am using High-level rest client to connect with Elasticsearch service and I am successfully able to insert the data in Elasticsearch. When I am inserting the data for the first time, it is showing 'created' in …

---

## [Datafeed is encountering errors extracting data. Search request encountered \[5\] unavailable shards](https://discuss.elastic.co/t/datafeed-is-encountering-errors-extracting-data-search-request-encountered-5-unavailable-shards/129503)

<div class="topic-metadata">

**Author:** [@tsullivan93](https://discuss.elastic.co/u/tsullivan93)\
**Replies:** 1\
**Last updated:** [April 25, 2018, 9:55pm UTC](https://discuss.elastic.co/t/datafeed-is-encountering-errors-extracting-data-search-request-encountered-5-unavailable-shards/129503 "2018-04-25T21:55:57Z")

</div>

I received the above error on one of my machine learning jobs and I'm looking into some insight into what exactly happened. There was a data interruption in the creation of the new daily index the job is analyzing, but a…

---

## [Terms with a list of elements to match](https://discuss.elastic.co/t/terms-with-a-list-of-elements-to-match/129563)

<div class="topic-metadata">

**Author:** [@r1go](https://discuss.elastic.co/u/r1go)\
**Replies:** 0\
**Last updated:** [April 25, 2018, 8:26pm UTC](https://discuss.elastic.co/t/terms-with-a-list-of-elements-to-match/129563 "2018-04-25T20:26:28Z")

</div>

Hi there! Just me trying my first steps with Elastic Search. Im writing some C# code and what i need it is to match many terms with some ID at Elastic S. Im trying something like these, but woth out no results :pensiv…

---

## [Zombie Search Tasks on 5.4.0](https://discuss.elastic.co/t/zombie-search-tasks-on-5-4-0/129554)

<div class="topic-metadata">

**Author:** [@umahida](https://discuss.elastic.co/u/umahida)\
**Replies:** 0\
**Last updated:** [April 25, 2018, 7:40pm UTC](https://discuss.elastic.co/t/zombie-search-tasks-on-5-4-0/129554 "2018-04-25T19:40:34Z")

</div>

Hi there, I have a situation were when searches are done or timedout and the cluster gathers search tasks which are visible by /\_cat/tasks | grep search. When i see the details via /\_task?actions=\*search&detailed i see…

---

## [Java Integration with Elasticsearch](https://discuss.elastic.co/t/java-integration-with-elasticsearch/129167)

<div class="topic-metadata">

**Author:** [@squanchydata](https://discuss.elastic.co/u/squanchydata)\
**Replies:** 5\
**Last updated:** [April 25, 2018, 7:53pm UTC](https://discuss.elastic.co/t/java-integration-with-elasticsearch/129167 "2018-04-25T19:53:22Z")

</div>

I am trying to integrate java api with elasticsearch and I'm getting confused by the documentation on the elastic.co website. So I downloaded maven but I don't know where to place the maven dependency, on what pom.xml fi…

---

## [While migrating index from ES2 to ES6 index size is gettting bigger](https://discuss.elastic.co/t/while-migrating-index-from-es2-to-es6-index-size-is-gettting-bigger/129463)

<div class="topic-metadata">

**Author:** [@manish\_mitra](https://discuss.elastic.co/u/manish_mitra)\
**Replies:** 1\
**Last updated:** [April 25, 2018, 7:49pm UTC](https://discuss.elastic.co/t/while-migrating-index-from-es2-to-es6-index-size-is-gettting-bigger/129463 "2018-04-25T19:49:16Z")

</div>

indent preformatted text by 4 spaces Hi, We are upgrading Elastic stack from Elastic search 2.3.4 to elastic search 6.2. When we are migrating index from ES2 to ES6, migrated index are taking more space in ES6 , we mig…

---

## [Tokenizers for common words](https://discuss.elastic.co/t/tokenizers-for-common-words/129556)

<div class="topic-metadata">

**Author:** [@subrato](https://discuss.elastic.co/u/subrato)\
**Replies:** 0\
**Last updated:** [April 25, 2018, 7:46pm UTC](https://discuss.elastic.co/t/tokenizers-for-common-words/129556 "2018-04-25T19:46:24Z")

</div>

Hi, I am using a whitespace analyzer on the content that I have but when I try to search for words which really belong together like (New York, San Francisco) Elastic Search breaks it up into 2 words and look for San o…

---

## [Map the structure of a directory (files and subdirectories) in an ES index](https://discuss.elastic.co/t/map-the-structure-of-a-directory-files-and-subdirectories-in-an-es-index/129512)

<div class="topic-metadata">

**Author:** [@Maxclac](https://discuss.elastic.co/u/Maxclac)\
**Replies:** 1\
**Last updated:** [April 25, 2018, 7:30pm UTC](https://discuss.elastic.co/t/map-the-structure-of-a-directory-files-and-subdirectories-in-an-es-index/129512 "2018-04-25T19:30:32Z")

</div>

Hello everyone! I am new to Elasticsearch and I have a general question: Is it possible to use ES as a search engine, where all the files of a given directory would be a document in a index? Is there a plugin for that? …

---

## [Help with query from Metricbeat index](https://discuss.elastic.co/t/help-with-query-from-metricbeat-index/129546)

<div class="topic-metadata">

**Author:** [@vonpelz](https://discuss.elastic.co/u/vonpelz)\
**Replies:** 0\
**Last updated:** [April 25, 2018, 6:20pm UTC](https://discuss.elastic.co/t/help-with-query-from-metricbeat-index/129546 "2018-04-25T18:20:05Z")

</div>

Hi, I'm new to Elastic stack, just set up a small cluster and sending metrics with Metricbeat from a few hosts. I'd like to create a watcher that will send an email if the disk space on a disk on a host goes below 9 GB…

---

## [Monitoring shows details of only one beat instance](https://discuss.elastic.co/t/monitoring-shows-details-of-only-one-beat-instance/127024)

<div class="topic-metadata">

**Author:** [@shsubramanian](https://discuss.elastic.co/u/shsubramanian)\
**Replies:** 2\
**Last updated:** [April 25, 2018, 6:19pm UTC](https://discuss.elastic.co/t/monitoring-shows-details-of-only-one-beat-instance/127024 "2018-04-25T18:19:37Z")

</div>

I am using Elastic / Logstash / Kibana (v6.2.3) and there are 22 instances of Filebeat (v6.1.2) configured to monitor. The monitoring page shows the Filebeat count as 22. But when I navigate to instance tab, only one of …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1706)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1708)
