# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1799

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1800

---

## [Getting Auto Password When Setting up Elasticsearch](https://discuss.elastic.co/t/getting-auto-password-when-setting-up-elasticsearch/118746)

<div class="topic-metadata">

**Author:** [@danlevy](https://discuss.elastic.co/u/danlevy)\
**Replies:** 1\
**Last updated:** [February 7, 2018, 7:27am UTC](https://discuss.elastic.co/t/getting-auto-password-when-setting-up-elasticsearch/118746 "2018-02-07T07:27:43Z")

</div>

I am trying to run elasticsearch using the instructions here. I call bin/elasticsearch-plugin install x-pack and everything goes smoothly. I then call bin/elasticsearch. When I go to http://localhost:9200, it prompts me …

---

## [Use DSL query to find out whether a file has a fixed value?](https://discuss.elastic.co/t/use-dsl-query-to-find-out-whether-a-file-has-a-fixed-value/118766)

<div class="topic-metadata">

**Author:** [@shubham\_kumar1](https://discuss.elastic.co/u/shubham_kumar1)\
**Replies:** 0\
**Last updated:** [February 7, 2018, 7:16am UTC](https://discuss.elastic.co/t/use-dsl-query-to-find-out-whether-a-file-has-a-fixed-value/118766 "2018-02-07T07:16:50Z")

</div>

Hi all, I have to check for a field in elasticsearch that whether it contains particular value or not. Suppose there are multiple files with entries:- 1:-message - request for connection 2:- message- response for con…

---

## [A Question about Indices recovery type](https://discuss.elastic.co/t/a-question-about-indices-recovery-type/118760)

<div class="topic-metadata">

**Author:** [@8a98bb2968a03fe24acf](https://discuss.elastic.co/u/8a98bb2968a03fe24acf)\
**Replies:** 0\
**Last updated:** [February 7, 2018, 6:35am UTC](https://discuss.elastic.co/t/a-question-about-indices-recovery-type/118760 "2018-02-07T06:35:44Z")

</div>

Hi there I checked indices recovery types of Elasticsearch In the document, the type of indices recovery is store, snapshot, replica, relocating. Here is a link. https://www.elastic.co/guide/en/elasticsearch/referenc…

---

## [Msearch speed](https://discuss.elastic.co/t/msearch-speed/117149)

<div class="topic-metadata">

**Author:** [@jdgenio](https://discuss.elastic.co/u/jdgenio)\
**Replies:** 3\
**Last updated:** [February 7, 2018, 6:32am UTC](https://discuss.elastic.co/t/msearch-speed/117149 "2018-02-07T06:32:42Z")

</div>

Hi, we're using elasticsearch 5.3.0 and noticed something weird. Here are my queries using \_msearch and \_search: \_msearch (/\_msearch) { "index": "us\_import", "type": "shipment", "preference": "\_replica\_first" } { "que…

---

## [Sequential write and random write for Elasticsearch](https://discuss.elastic.co/t/sequential-write-and-random-write-for-elasticsearch/118754)

<div class="topic-metadata">

**Author:** [@lukekingbru](https://discuss.elastic.co/u/lukekingbru)\
**Replies:** 0\
**Last updated:** [February 7, 2018, 6:14am UTC](https://discuss.elastic.co/t/sequential-write-and-random-write-for-elasticsearch/118754 "2018-02-07T06:14:59Z")

</div>

For HDD, There is a huge performance difference between sequential write and random write. I wonder if Elasticsearch also has this issue ? For instance, If I want to write 1M records, 1KB per record, into ES, how can …

---

## [Dynamic index mapping with pattern filter](https://discuss.elastic.co/t/dynamic-index-mapping-with-pattern-filter/118663)

<div class="topic-metadata">

**Author:** [@Shivanshu\_Bagga](https://discuss.elastic.co/u/Shivanshu_Bagga)\
**Replies:** 0\
**Last updated:** [February 6, 2018, 2:24pm UTC](https://discuss.elastic.co/t/dynamic-index-mapping-with-pattern-filter/118663 "2018-02-06T14:24:40Z")

</div>

Hi, I'm using my own custom analyzer with dynamic json mapping.Following substring pattern substring first 500 chars of string and send for analyzing. "index": { "analysis": { "char\_filter": { "…

---

## [Issue in POST request to Elastic Search using Nest in .NET](https://discuss.elastic.co/t/issue-in-post-request-to-elastic-search-using-nest-in-net/118578)

<div class="topic-metadata">

**Author:** [@saineshwar\_bageri](https://discuss.elastic.co/u/saineshwar_bageri)\
**Replies:** 7\
**Last updated:** [February 7, 2018, 4:54am UTC](https://discuss.elastic.co/t/issue-in-post-request-to-elastic-search-using-nest-in-net/118578 "2018-02-07T04:54:21Z")

</div>

In Get Request i get Data when i try using POSTMAN Client. \[image\] In same way if try the post request then i wont get data as response Valid NEST response built from a successful low level call on POST: /bankpayoutsu…

---

## [Mask first 5 digits of SSN in the Watcher alert email](https://discuss.elastic.co/t/mask-first-5-digits-of-ssn-in-the-watcher-alert-email/118536)

<div class="topic-metadata">

**Author:** [@saranyav](https://discuss.elastic.co/u/saranyav)\
**Replies:** 2\
**Last updated:** [February 7, 2018, 3:57am UTC](https://discuss.elastic.co/t/mask-first-5-digits-of-ssn-in-the-watcher-alert-email/118536 "2018-02-07T03:57:06Z")

</div>

Hello, I have configureda watcher to alert an event, when it happens it sends an email with Participant's SSN, Username, Ip address, Geolocation. The below action sends me the records. But I want to mask the first 5 d…

---

## [Issues related to elasticsearch authentication](https://discuss.elastic.co/t/issues-related-to-elasticsearch-authentication/118590)

<div class="topic-metadata">

**Author:** [@ahrtr](https://discuss.elastic.co/u/ahrtr)\
**Replies:** 7\
**Last updated:** [February 7, 2018, 1:30am UTC](https://discuss.elastic.co/t/issues-related-to-elasticsearch-authentication/118590 "2018-02-07T01:30:56Z")

</div>

I deployed elasticsearch into kubernetes cluster with 3 nodes, and the OS of each node is Oracle Linux 7.3. I started 3 elasticsearch instances (actually a POD in kubernetes cluster); one of them was elected as master n…

---

## [Optimizing elasticsearch index](https://discuss.elastic.co/t/optimizing-elasticsearch-index/118289)

<div class="topic-metadata">

**Author:** [@imortalsolitude](https://discuss.elastic.co/u/imortalsolitude)\
**Replies:** 6\
**Last updated:** [February 7, 2018, 12:50am UTC](https://discuss.elastic.co/t/optimizing-elasticsearch-index/118289 "2018-02-07T00:50:00Z")

</div>

Are there any articles on how to optimize elastic search index in 6.1, currently with the default setting and 600 MB of syslog data my index size is around 1.7G this is way larger than the actual file size. I disabled \_…

---

## [Setup-Passwords script fails when ssl.keystore.password is not set](https://discuss.elastic.co/t/setup-passwords-script-fails-when-ssl-keystore-password-is-not-set/118350)

<div class="topic-metadata">

**Author:** [@jupp](https://discuss.elastic.co/u/jupp)\
**Replies:** 3\
**Last updated:** [February 7, 2018, 12:33am UTC](https://discuss.elastic.co/t/setup-passwords-script-fails-when-ssl-keystore-password-is-not-set/118350 "2018-02-07T00:33:56Z")

</div>

Hi All, i installed ES 6.1.3 with X-Pack. The Steps: generate CA (with the Certutil) generate certs for each node signed y the CA in a pkc12 keystore with a password set. copied Elasticsearch on each node (tar.…

---

## [How many CPUs should be allocated to an Elasticsearch node that doesn't store data?](https://discuss.elastic.co/t/how-many-cpus-should-be-allocated-to-an-elasticsearch-node-that-doesnt-store-data/118729)

<div class="topic-metadata">

**Author:** [@shanim](https://discuss.elastic.co/u/shanim)\
**Replies:** 5\
**Last updated:** [February 7, 2018, 12:33am UTC](https://discuss.elastic.co/t/how-many-cpus-should-be-allocated-to-an-elasticsearch-node-that-doesnt-store-data/118729 "2018-02-07T00:33:38Z")

</div>

I raised this question on stackoverflow. Would you be able to help answer this? The Elasticsearch documentation recommends using multi-core processors for Elasticsearch nodes but doesn't recommend the number of CPU core…

---

## [How to hide the index for specific user](https://discuss.elastic.co/t/how-to-hide-the-index-for-specific-user/118262)

<div class="topic-metadata">

**Author:** [@srinivas\_patlolla](https://discuss.elastic.co/u/srinivas_patlolla)\
**Replies:** 5\
**Last updated:** [February 6, 2018, 11:59pm UTC](https://discuss.elastic.co/t/how-to-hide-the-index-for-specific-user/118262 "2018-02-06T23:59:28Z")

</div>

Hi, I am using ES 5.4 and Kibana 5.4 with xpack. would like to know how i can hide the index to specific user? Thank you.

---

## [Use group cn in LDAP role mapping](https://discuss.elastic.co/t/use-group-cn-in-ldap-role-mapping/118642)

<div class="topic-metadata">

**Author:** [@adam.laczynski](https://discuss.elastic.co/u/adam.laczynski)\
**Replies:** 1\
**Last updated:** [February 6, 2018, 11:55pm UTC](https://discuss.elastic.co/t/use-group-cn-in-ldap-role-mapping/118642 "2018-02-06T23:55:39Z")

</div>

I can use group dn in ldap role mapping but I would like to use group cn instead from maintainability perspective. In my LDAP setup group dn contain unique id while group cn is human oriented name. I have following LDAP…

---

## [Elasticsearch v6.0.1 (64 -bit) has stopped working](https://discuss.elastic.co/t/elasticsearch-v6-0-1-64-bit-has-stopped-working/118733)

<div class="topic-metadata">

**Author:** [@sparuchuri](https://discuss.elastic.co/u/sparuchuri)\
**Replies:** 1\
**Last updated:** [February 6, 2018, 11:32pm UTC](https://discuss.elastic.co/t/elasticsearch-v6-0-1-64-bit-has-stopped-working/118733 "2018-02-06T23:32:11Z")

</div>

I am working on elasticsearch v6.0.1 version. I installed elasticsearch service on my machine. It is working fine from past few days. I am able to create index files, able search those index files successfully, but sudde…

---

## [Enhancement on the Update by Query API](https://discuss.elastic.co/t/enhancement-on-the-update-by-query-api/118723)

<div class="topic-metadata">

**Author:** [@georgezoto](https://discuss.elastic.co/u/georgezoto)\
**Replies:** 0\
**Last updated:** [February 6, 2018, 10:04pm UTC](https://discuss.elastic.co/t/enhancement-on-the-update-by-query-api/118723 "2018-02-06T22:04:51Z")

</div>

Hello everyone, I have combed the web, GitHub issues and the discussion forums but I haven't seen something close to this. So I need some expert opinion on how challenging this feature would be. In terms of benefits, th…

---

## [Elasticsearch for Apache Hadoop 6.2.0 released](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-6-2-0-released/118715)

<div class="topic-metadata">

**Author:** [@james.baiera](https://discuss.elastic.co/u/james.baiera)\
**Replies:** 0\
**Last updated:** [February 6, 2018, 9:33pm UTC](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-6-2-0-released/118715 "2018-02-06T21:33:44Z")

</div>

I am proud to announce that ES-Hadoop 6.2.0 has been released! ES-Hadoop 6.2.0 introduces beta-level support for providing error handlers to intercept bulk write failures from Elasticsearch, and is tested specifically a…

---

## [How to implement this in elastic](https://discuss.elastic.co/t/how-to-implement-this-in-elastic/118255)

<div class="topic-metadata">

**Author:** [@aliyesami](https://discuss.elastic.co/u/aliyesami)\
**Replies:** 34\
**Last updated:** [February 6, 2018, 8:38pm UTC](https://discuss.elastic.co/t/how-to-implement-this-in-elastic/118255 "2018-02-06T20:38:02Z")

</div>

how can I implement these sql conditions in elastic ? select \* from \<index\_name\> where ACCTTYPE\_ACCT\_TYPE\_CODE != '07' and PLAZA\_PLAZA\_ID in ('009500', '009502') and emp\_emp\_code != '9985' and PURSTAT\_PUR\_STATUS\_CO…

---

## [ELK 6.1.1 indices document count mismatch](https://discuss.elastic.co/t/elk-6-1-1-indices-document-count-mismatch/118701)

<div class="topic-metadata">

**Author:** [@m1chael](https://discuss.elastic.co/u/m1chael)\
**Replies:** 0\
**Last updated:** [February 6, 2018, 6:33pm UTC](https://discuss.elastic.co/t/elk-6-1-1-indices-document-count-mismatch/118701 "2018-02-06T18:33:48Z")

</div>

Hello. I am running two ELK servers, one is running 5.5.3 and my new one is running 6.1.1. Now I started last week to index all data in my database which is the source for both servers. Eventually I will retire the 5.5…

---

## [Not Exists OR term match](https://discuss.elastic.co/t/not-exists-or-term-match/118691)

<div class="topic-metadata">

**Author:** [@dlalex83](https://discuss.elastic.co/u/dlalex83)\
**Replies:** 0\
**Last updated:** [February 6, 2018, 5:21pm UTC](https://discuss.elastic.co/t/not-exists-or-term-match/118691 "2018-02-06T17:21:03Z")

</div>

Hi there, I have an index where all docs up to yesterday don't have a field called "environment" and all the docs from today onward will have an "environment" field set. I'd like to write a query that returns all the d…

---

## [Parent/Child relationship with NEST on 6.x](https://discuss.elastic.co/t/parent-child-relationship-with-nest-on-6-x/116497)

<div class="topic-metadata">

**Author:** [@Carlo\_Arnaboldi](https://discuss.elastic.co/u/Carlo_Arnaboldi)\
**Replies:** 2\
**Last updated:** [February 6, 2018, 5:10pm UTC](https://discuss.elastic.co/t/parent-child-relationship-with-nest-on-6-x/116497 "2018-02-06T17:10:17Z")

</div>

Greetings. I've been tasked to gain some basic knowledge with NEST / Elastic search to verify if this product suits our needs. I've a C# / Relational databases background. I've installed Kibana (6.1.1) and Elastic searc…

---

## [Sorting on nested field with conditon](https://discuss.elastic.co/t/sorting-on-nested-field-with-conditon/118689)

<div class="topic-metadata">

**Author:** [@jsebrien](https://discuss.elastic.co/u/jsebrien)\
**Replies:** 0\
**Last updated:** [February 6, 2018, 5:10pm UTC](https://discuss.elastic.co/t/sorting-on-nested-field-with-conditon/118689 "2018-02-06T17:10:03Z")

</div>

Hello, I have the following document: { "mappings" : { "doc":{ "properties":{ ... "notations": { "type": "nested" } } } } } In "notations", I have elements like: { "key":"default" "grade":…

---

## [Elasticsearch snaphot](https://discuss.elastic.co/t/elasticsearch-snaphot/118687)

<div class="topic-metadata">

**Author:** [@Bobin\_Jose](https://discuss.elastic.co/u/Bobin_Jose)\
**Replies:** 0\
**Last updated:** [February 6, 2018, 4:59pm UTC](https://discuss.elastic.co/t/elasticsearch-snaphot/118687 "2018-02-06T16:59:39Z")

</div>

I am trying to take snapshot of the indices,the snapshot seems to be completed without any error.But snapshot shows empty.. \[root@test-9c4b58584-c257l /\]# curl -u admin:\*\*\* -XPUT 'http://elasticsearch:9200/\_snapshot/bac…

---

## [Not enough master nodes discovered during pingin on ES6.0.1 with docker](https://discuss.elastic.co/t/not-enough-master-nodes-discovered-during-pingin-on-es6-0-1-with-docker/118478)

<div class="topic-metadata">

**Author:** [@cloud\_sora](https://discuss.elastic.co/u/cloud_sora)\
**Replies:** 1\
**Last updated:** [February 6, 2018, 4:53pm UTC](https://discuss.elastic.co/t/not-enough-master-nodes-discovered-during-pingin-on-es6-0-1-with-docker/118478 "2018-02-06T16:53:41Z")

</div>

Hello all, im trying to setup elasticsearch cluster (elasticsearch-6.0.1-1.noarch) using docker and ec2-discovery plugin on ec2 instances(not one instance). my use case is creating the dockerfile with the needed packag…

---

## [Sizing/Capacity for ELK in Production](https://discuss.elastic.co/t/sizing-capacity-for-elk-in-production/118679)

<div class="topic-metadata">

**Author:** [@venkii](https://discuss.elastic.co/u/venkii)\
**Replies:** 1\
**Last updated:** [February 6, 2018, 4:46pm UTC](https://discuss.elastic.co/t/sizing-capacity-for-elk-in-production/118679 "2018-02-06T16:46:46Z")

</div>

Is there sizing/capacity calculators for ELK? Considering raw value, we are talking data ingestion of 280GB/per day. To get a high hourly rate, we are probably at 280/8=35GB per hour…Maybe 50 GB at our peak? And we ne…

---

## [Multi\_match/query string with nested and "non-nested" fields](https://discuss.elastic.co/t/multi-match-query-string-with-nested-and-non-nested-fields/118652)

<div class="topic-metadata">

**Author:** [@YeeP](https://discuss.elastic.co/u/YeeP)\
**Replies:** 5\
**Last updated:** [February 6, 2018, 3:50pm UTC](https://discuss.elastic.co/t/multi-match-query-string-with-nested-and-non-nested-fields/118652 "2018-02-06T15:50:13Z")

</div>

EDIT: This setup is using Elasticsearch 6.1.3 Can this be done? I am trying to set up a front-end search that looks through several fields, so the multi-match and or query-string. I would like to search in both the "nu…

---

## [Exception in thread "main" elasticsearchexception\[failed to initialize a trustmanagerfactory\]; nested: nosuchfileexception\[/etc/elasticsearch/certs/elastic-certificates.p12\]](https://discuss.elastic.co/t/exception-in-thread-main-elasticsearchexception-failed-to-initialize-a-trustmanagerfactory-nested-nosuchfileexception-etc-elasticsearch-certs-elastic-certificates-p12/118514)

<div class="topic-metadata">

**Author:** [@t.d.garland100](https://discuss.elastic.co/u/t.d.garland100)\
**Replies:** 2\
**Last updated:** [February 6, 2018, 2:36pm UTC](https://discuss.elastic.co/t/exception-in-thread-main-elasticsearchexception-failed-to-initialize-a-trustmanagerfactory-nested-nosuchfileexception-etc-elasticsearch-certs-elastic-certificates-p12/118514 "2018-02-06T14:36:03Z")

</div>

I am getting this message when I run the following command in the directory /usr/share/elasticsearch bin/x-pack/setup-passwords interactive Copy the applicable .p12 file into a directory within the Elasticsearch config…

---

## [Docker Compose for Elastic+Kibana? Errors when starting](https://discuss.elastic.co/t/docker-compose-for-elastic-kibana-errors-when-starting/118314)

<div class="topic-metadata">

**Author:** [@roybatty](https://discuss.elastic.co/u/roybatty)\
**Replies:** 5\
**Last updated:** [February 6, 2018, 1:56pm UTC](https://discuss.elastic.co/t/docker-compose-for-elastic-kibana-errors-when-starting/118314 "2018-02-06T13:56:16Z")

</div>

HI All, I tried to bring up elastic and kibana using docker, but it seems to have gone wrong. Does anyone have any suggestions for me? I took this docker compose file as my starting point: https://github.com/elastic/s…

---

## [Searching in nested objects without knowing the full path](https://discuss.elastic.co/t/searching-in-nested-objects-without-knowing-the-full-path/116776)

<div class="topic-metadata">

**Author:** [@Emilio\_Srougo](https://discuss.elastic.co/u/Emilio_Srougo)\
**Replies:** 6\
**Last updated:** [February 6, 2018, 1:11pm UTC](https://discuss.elastic.co/t/searching-in-nested-objects-without-knowing-the-full-path/116776 "2018-02-06T13:11:40Z")

</div>

Hi, I have a document that looks like this: "name": { "use": "official", "family": "Donald", "given": \[ "Duck" \] } And I'm making an API where the clients will send me queries like t…

---

## [Working with fields containing underline in painless scripts](https://discuss.elastic.co/t/working-with-fields-containing-underline-in-painless-scripts/118646)

<div class="topic-metadata">

**Author:** [@mh20](https://discuss.elastic.co/u/mh20)\
**Replies:** 3\
**Last updated:** [February 6, 2018, 12:57pm UTC](https://discuss.elastic.co/t/working-with-fields-containing-underline-in-painless-scripts/118646 "2018-02-06T12:57:51Z")

</div>

Hi, I am writing a painless script for removing values from arrays as described in https://discuss.elastic.co/t/removing-elements-from-an-array-in-a-document/10156 and https://stackoverflow.com/questions/45980054/how-to-…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1798)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1800)
