# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1833

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1834

---

## [Benchmarking a remote cluster - provisioning does not appear to be working?](https://discuss.elastic.co/t/benchmarking-a-remote-cluster-provisioning-does-not-appear-to-be-working/114616)

<div class="topic-metadata">

**Author:** [@matt.veitas](https://discuss.elastic.co/u/matt.veitas)\
**Replies:** 9\
**Last updated:** [January 9, 2018, 5:37pm UTC](https://discuss.elastic.co/t/benchmarking-a-remote-cluster-provisioning-does-not-appear-to-be-working/114616 "2018-01-09T17:37:00Z")

</div>

Hi I am following the docs to be able to benchmark a remote cluster as per: Tips and Tricks - Rally 2.10.0 documentation. It is my understanding that this should be able to create the ES node on the benchmark candidate …

---

## [Issue with s3 repository](https://discuss.elastic.co/t/issue-with-s3-repository/114542)

<div class="topic-metadata">

**Author:** [@paulglavin](https://discuss.elastic.co/u/paulglavin)\
**Replies:** 16\
**Last updated:** [January 9, 2018, 5:05pm UTC](https://discuss.elastic.co/t/issue-with-s3-repository/114542 "2018-01-09T17:05:31Z")

</div>

I've just upgraded our cluster from 5.6 to 6.1, everything is fine apart from accessing repositories in an s3 bucket. I've migrated the access key and secret key settings to the keystore using these two options s3.clie…

---

## [Elasticsearch auto creating index after startup without any documents](https://discuss.elastic.co/t/elasticsearch-auto-creating-index-after-startup-without-any-documents/114691)

<div class="topic-metadata">

**Author:** [@Shubham\_Mahajan](https://discuss.elastic.co/u/Shubham_Mahajan)\
**Replies:** 5\
**Last updated:** [January 9, 2018, 4:15pm UTC](https://discuss.elastic.co/t/elasticsearch-auto-creating-index-after-startup-without-any-documents/114691 "2018-01-09T16:15:15Z")

</div>

Hi team, I am facing the below issue whenever i start my elasticsearch server. it automatically creates an index and then throws below exceptions. Please provide your insight. \[image\]

---

## [How to index the word\_delimiter itself?](https://discuss.elastic.co/t/how-to-index-the-word-delimiter-itself/114727)

<div class="topic-metadata">

**Author:** [@lea](https://discuss.elastic.co/u/lea)\
**Replies:** 2\
**Last updated:** [January 9, 2018, 3:39pm UTC](https://discuss.elastic.co/t/how-to-index-the-word-delimiter-itself/114727 "2018-01-09T15:39:14Z")

</div>

When analyzing alpha+beta delta, I want the outcome of tokens to be \[ALPHA+BETA DELTA, ALPHABETADELTA, ALPHA, BETA, DELTA, ALPHA+, ALPHA+BETA\]. My anlyzer gives me the results that I am looking for, except for \[ALPHA+, A…

---

## [Fuzzy Searching Inconsistencies](https://discuss.elastic.co/t/fuzzy-searching-inconsistencies/114717)

<div class="topic-metadata">

**Author:** [@JD83](https://discuss.elastic.co/u/JD83)\
**Replies:** 0\
**Last updated:** [January 9, 2018, 2:32pm UTC](https://discuss.elastic.co/t/fuzzy-searching-inconsistencies/114717 "2018-01-09T14:32:14Z")

</div>

Hi all. (version: Elastic 5.5) I've been looking into "explanations" of fuzzy searches and it seems like there are some inconsistencies in what is matched under different circumstances. For example, we have a large in…

---

## [Trying to index text file into ES, but getting below error](https://discuss.elastic.co/t/trying-to-index-text-file-into-es-but-getting-below-error/114677)

<div class="topic-metadata">

**Author:** [@Pradeep1](https://discuss.elastic.co/u/Pradeep1)\
**Replies:** 1\
**Last updated:** [January 9, 2018, 3:15pm UTC](https://discuss.elastic.co/t/trying-to-index-text-file-into-es-but-getting-below-error/114677 "2018-01-09T15:15:33Z")

</div>

{ "error" : { "root\_cause" : \[ { "type" : "json\_parse\_exception", "reason" : "Unexpected character ('-' (code 45)): Expected space separating root-level values\\n at \[Source: org.elasticsearch.transport.netty4.ByteBu…

---

## [Is there any way i can see the requests made to elasticsearch?](https://discuss.elastic.co/t/is-there-any-way-i-can-see-the-requests-made-to-elasticsearch/114712)

<div class="topic-metadata">

**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\
**Replies:** 2\
**Last updated:** [January 9, 2018, 2:54pm UTC](https://discuss.elastic.co/t/is-there-any-way-i-can-see-the-requests-made-to-elasticsearch/114712 "2018-01-09T14:54:02Z")

</div>

By default are there any records Elasticsearch keeps of what http requests were made and when?

---

## [Trying to integrate elasticsearch into gitlab, create\_empty\_index fails](https://discuss.elastic.co/t/trying-to-integrate-elasticsearch-into-gitlab-create-empty-index-fails/114662)

<div class="topic-metadata">

**Author:** [@Kamikater](https://discuss.elastic.co/u/Kamikater)\
**Replies:** 2\
**Last updated:** [January 9, 2018, 11:20am UTC](https://discuss.elastic.co/t/trying-to-integrate-elasticsearch-into-gitlab-create-empty-index-fails/114662 "2018-01-09T11:20:08Z")

</div>

I am trying to use the elasticsearch tool for our gitlab repository. I follow this guide to integrate the gitlab data to the Elasticsearch index, however I already fail at the first step. Executing gitlab-rake gitlab:e…

---

## [Comples proximity searches using the simple\_query\_string](https://discuss.elastic.co/t/comples-proximity-searches-using-the-simple-query-string/114603)

<div class="topic-metadata">

**Author:** [@mgrishaber](https://discuss.elastic.co/u/mgrishaber)\
**Replies:** 1\
**Last updated:** [January 9, 2018, 2:00pm UTC](https://discuss.elastic.co/t/comples-proximity-searches-using-the-simple-query-string/114603 "2018-01-09T14:00:37Z")

</div>

Hello, I am trying to use the simple\_query\_string to perform a proximity search using the ~ operator. Something like the following works fine. "simple\_query\_string": {"query": ""Arizona Diamondbacks"~8", "default\_oper…

---

## [Data Loss in elasticsearch in high load](https://discuss.elastic.co/t/data-loss-in-elasticsearch-in-high-load/114515)

<div class="topic-metadata">

**Author:** [@paramlogicoy](https://discuss.elastic.co/u/paramlogicoy)\
**Replies:** 23\
**Last updated:** [January 9, 2018, 12:36pm UTC](https://discuss.elastic.co/t/data-loss-in-elasticsearch-in-high-load/114515 "2018-01-09T12:36:46Z")

</div>

Hi All, We are facing a strange and critical issue while testing elastic-search in high speed transaction monitoring. We are using Elastic-search for dumping high speed data coming from JMX MXbean. Our JMX listeners ar…

---

## [Get Document aggregation same as windows](https://discuss.elastic.co/t/get-document-aggregation-same-as-windows/114504)

<div class="topic-metadata">

**Author:** [@krishnaraj221193](https://discuss.elastic.co/u/krishnaraj221193)\
**Replies:** 1\
**Last updated:** [January 9, 2018, 12:27pm UTC](https://discuss.elastic.co/t/get-document-aggregation-same-as-windows/114504 "2018-01-09T12:27:52Z")

</div>

Hi sir I can see in windows if i go and select a folder and see the properties i can see total files (inside the folder + files inside subfolders + files till nth level) how can this be achived through elasticsearch

---

## [Custom 'pattern' analyzer for the field doesn't work](https://discuss.elastic.co/t/custom-pattern-analyzer-for-the-field-doesnt-work/114701)

<div class="topic-metadata">

**Author:** [@maria-grigorieva](https://discuss.elastic.co/u/maria-grigorieva)\
**Replies:** 3\
**Last updated:** [January 9, 2018, 12:18pm UTC](https://discuss.elastic.co/t/custom-pattern-analyzer-for-the-field-doesnt-work/114701 "2018-01-09T12:18:21Z")

</div>

Hi all, I need a piece of wisdom concerning analyzer usage. I want to use "pattern" analyzer with pattern "\\W|\_ " for "name" field in my index. So, I created the mapping file as the following: { "settings": { "analys…

---

## [Ctx.payload.hits.total returns zero](https://discuss.elastic.co/t/ctx-payload-hits-total-returns-zero/114275)

<div class="topic-metadata">

**Author:** [@ravirjn](https://discuss.elastic.co/u/ravirjn)\
**Replies:** 6\
**Last updated:** [January 9, 2018, 12:08pm UTC](https://discuss.elastic.co/t/ctx-payload-hits-total-returns-zero/114275 "2018-01-09T12:08:37Z")

</div>

Hi, I created a watcher in Kibana for sending an email alert on every failed login for root, but it's not working properly. Condition part returns zero hits even after giving wrong password for the root login. Below is…

---

## [How to Map IP type](https://discuss.elastic.co/t/how-to-map-ip-type/114357)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 1\
**Last updated:** [January 9, 2018, 10:59am UTC](https://discuss.elastic.co/t/how-to-map-ip-type/114357 "2018-01-09T10:59:54Z")

</div>

this is my IPV4\_DST\_ADDR field mapping: "IPV4\_DST\_ADDR":{"type":"text","norms":false,"fields":{"keyword":{"type":"keyword","ignore\_above":256}}} I want to change the type from text to IP, how can I do? thank you in ad…

---

## [Error in Re-Index Documentation](https://discuss.elastic.co/t/error-in-re-index-documentation/114668)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 1\
**Last updated:** [January 9, 2018, 9:34am UTC](https://discuss.elastic.co/t/error-in-re-index-documentation/114668 "2018-01-09T09:34:38Z")

</div>

https://www.elastic.co/guide/en/elasticsearch/reference/6.0/removal-of-types.html The script example here is apparently incorrect. ES does not accept the triple quotes. As far as I can see it should be single quotes wi…

---

## [Too many unassigned replica shards everyday](https://discuss.elastic.co/t/too-many-unassigned-replica-shards-everyday/112550)

<div class="topic-metadata">

**Author:** [@sbanagiri](https://discuss.elastic.co/u/sbanagiri)\
**Replies:** 10\
**Last updated:** [January 9, 2018, 9:33am UTC](https://discuss.elastic.co/t/too-many-unassigned-replica-shards-everyday/112550 "2018-01-09T09:33:51Z")

</div>

Hello, We have a ELK cluster setup with 35 nodes (3 masters and 32 data nodes). New indices get created everyday once. Approximately, 280 indices are created everyday. Number of shards per index is 24 with replicatio…

---

## [Xpack watcher : - Get Index name in action's email body](https://discuss.elastic.co/t/xpack-watcher-get-index-name-in-actions-email-body/114639)

<div class="topic-metadata">

**Author:** [@Shivanshu\_Bagga](https://discuss.elastic.co/u/Shivanshu_Bagga)\
**Replies:** 3\
**Last updated:** [January 9, 2018, 9:17am UTC](https://discuss.elastic.co/t/xpack-watcher-get-index-name-in-actions-email-body/114639 "2018-01-09T09:17:54Z")

</div>

Hi, I want to set a watcher to read last 3 indices name start with "logstash-\*" with number of documents per index.Then send a alert to admin user. Indices are created with current data format.For example index name for…

---

## [More\_like\_this documentation](https://discuss.elastic.co/t/more-like-this-documentation/114477)

<div class="topic-metadata">

**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\
**Replies:** 5\
**Last updated:** [January 9, 2018, 8:25am UTC](https://discuss.elastic.co/t/more-like-this-documentation/114477 "2018-01-09T08:25:47Z")

</div>

I'm a little confused by the documentation at https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-mlt-query.html. One issue is that I'm trying to do a query using other documents as reference for f…

---

## [Hash Child Query does not work when using with Child item v: 5.6](https://discuss.elastic.co/t/hash-child-query-does-not-work-when-using-with-child-item-v-5-6/114656)

<div class="topic-metadata">

**Author:** [@arifemre61](https://discuss.elastic.co/u/arifemre61)\
**Replies:** 0\
**Last updated:** [January 9, 2018, 7:51am UTC](https://discuss.elastic.co/t/hash-child-query-does-not-work-when-using-with-child-item-v-5-6/114656 "2018-01-09T07:51:34Z")

</div>

Hi All, I am using parent-child relationship in Elasticsearch 5.6 cluster İn my case I have a tree like Post (an object) Comment (comments of an object) CommentBlock (blocked users of a comment) I don't want to …

---

## [How to connect elasticsearch and sentry](https://discuss.elastic.co/t/how-to-connect-elasticsearch-and-sentry/114637)

<div class="topic-metadata">

**Author:** [@aliceup](https://discuss.elastic.co/u/aliceup)\
**Replies:** 0\
**Last updated:** [January 9, 2018, 4:43am UTC](https://discuss.elastic.co/t/how-to-connect-elasticsearch-and-sentry/114637 "2018-01-09T04:43:56Z")

</div>

I am using getsentry/onpremise version 8.22.0. I used docker to install sentry on my local MacBook. And i installed elasticsearch by docker on my local MacBook too. Elasticsearch's image is docker.elastic.co/elasticse…

---

## [How to map multiple field properties, including boolean search](https://discuss.elastic.co/t/how-to-map-multiple-field-properties-including-boolean-search/114394)

<div class="topic-metadata">

**Author:** [@gg4y](https://discuss.elastic.co/u/gg4y)\
**Replies:** 3\
**Last updated:** [January 9, 2018, 3:56am UTC](https://discuss.elastic.co/t/how-to-map-multiple-field-properties-including-boolean-search/114394 "2018-01-09T03:56:05Z")

</div>

Hi, I was able to obtain decent but not perfect results with ES v.1.4.0 on my local env, but then I have 5+ on production and results are worsened. Please help me understand how ElasticSearch maps a field that is an arr…

---

## [Indexing heavy lifting not well distributed](https://discuss.elastic.co/t/indexing-heavy-lifting-not-well-distributed/114340)

<div class="topic-metadata">

**Author:** [@rodaj](https://discuss.elastic.co/u/rodaj)\
**Replies:** 2\
**Last updated:** [January 8, 2018, 10:08pm UTC](https://discuss.elastic.co/t/indexing-heavy-lifting-not-well-distributed/114340 "2018-01-08T22:08:36Z")

</div>

Environment: Rancher 1.6.10, Docker 1.12.\*, ElasticSearch 5.5.1 (without x-pack). 15 es data nodes across a 5 rancher node (each rancher node is baremetal server). 3 es data nodes per rancher node in 3 rancher "servic…

---

## [Does slack action require that we add certs to keystore?](https://discuss.elastic.co/t/does-slack-action-require-that-we-add-certs-to-keystore/114056)

<div class="topic-metadata">

**Author:** [@Souciance\_Eqdam\_Rash](https://discuss.elastic.co/u/Souciance_Eqdam_Rash)\
**Replies:** 12\
**Last updated:** [January 8, 2018, 10:04pm UTC](https://discuss.elastic.co/t/does-slack-action-require-that-we-add-certs-to-keystore/114056 "2018-01-08T22:04:02Z")

</div>

Hello, I am trying to add a slack action to my watcher (using ES/Kibana 6.1.1). I am getting the error: \[2018-01-04T11:11:02,859\]\[ERROR\]\[o.e.x.n.s.SlackService \] \[SELULT4729\] failed to execute slack api http request …

---

## [TLS certs issue on Elastice search](https://discuss.elastic.co/t/tls-certs-issue-on-elastice-search/114529)

<div class="topic-metadata">

**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Replies:** 1\
**Last updated:** [January 8, 2018, 9:51pm UTC](https://discuss.elastic.co/t/tls-certs-issue-on-elastice-search/114529 "2018-01-08T21:51:49Z")

</div>

Hi , I have generated certificates for TLS on Elastic search cluster , after enabling below configuration , getting exceptions , \[2018-01-08T14:28:48,784\]\[WARN \]\[o.e.x.s.t.n.SecurityNetty4Transport\] \[ ES-Node-node01\] …

---

## [Highlighting without array](https://discuss.elastic.co/t/highlighting-without-array/114615)

<div class="topic-metadata">

**Author:** [@Naren\_Victor](https://discuss.elastic.co/u/Naren_Victor)\
**Replies:** 0\
**Last updated:** [January 8, 2018, 8:56pm UTC](https://discuss.elastic.co/t/highlighting-without-array/114615 "2018-01-08T20:56:18Z")

</div>

{ "from" : 0, "size" : 10, "query" : { "query\_string" : { "query" : "some query", "fields" : \[ "field1", "field2", ... \], "use\_dis\_max" : true } }, …

---

## [Email action fails with property message null](https://discuss.elastic.co/t/email-action-fails-with-property-message-null/114045)

<div class="topic-metadata">

**Author:** [@Souciance\_Eqdam\_Rash](https://discuss.elastic.co/u/Souciance_Eqdam_Rash)\
**Replies:** 3\
**Last updated:** [January 8, 2018, 8:52pm UTC](https://discuss.elastic.co/t/email-action-fails-with-property-message-null/114045 "2018-01-08T20:52:01Z")

</div>

Hello, I configured an e-mail action in Watcher in Kibana/Elasticsearch 6.1.1 and tried to send an e-mail. The error I get is: TypeError: Cannot read property 'message' of null at http://localhost:5601/bundles/kiba…

---

## [Elastic disk usage for a beginner](https://discuss.elastic.co/t/elastic-disk-usage-for-a-beginner/114306)

<div class="topic-metadata">

**Author:** [@wweeder](https://discuss.elastic.co/u/wweeder)\
**Replies:** 3\
**Last updated:** [January 8, 2018, 8:50pm UTC](https://discuss.elastic.co/t/elastic-disk-usage-for-a-beginner/114306 "2018-01-08T20:50:21Z")

</div>

Hello, I have a very basic question but one which I haven't seen asked or answered directly. Is elasticsearch disk usage intended to be infinite? apart from deleting indices or their data using a manual or manually cre…

---

## [Read\_only\_allow\_delete always set on true](https://discuss.elastic.co/t/read-only-allow-delete-always-set-on-true/114610)

<div class="topic-metadata">

**Author:** [@PerseiX](https://discuss.elastic.co/u/PerseiX)\
**Replies:** 0\
**Last updated:** [January 8, 2018, 8:23pm UTC](https://discuss.elastic.co/t/read-only-allow-delete-always-set-on-true/114610 "2018-01-08T20:23:31Z")

</div>

Hello, I have problem { "error": { "root\_cause": \[ { "type": "cluster\_block\_exception", "reason": "blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];" } \], "type": "cluster\_block\_exception", "rea…

---

## [Score boosting for terms query](https://discuss.elastic.co/t/score-boosting-for-terms-query/114607)

<div class="topic-metadata">

**Author:** [@lengerad](https://discuss.elastic.co/u/lengerad)\
**Replies:** 0\
**Last updated:** [January 8, 2018, 8:02pm UTC](https://discuss.elastic.co/t/score-boosting-for-terms-query/114607 "2018-01-08T20:02:48Z")

</div>

I would like to ask for help with following issue. My goal is to list events of followers and then sort the events by count of followers who are following the event. Mapping example: { "event": { "mappings": { …

---

## [Search text through multiple documents](https://discuss.elastic.co/t/search-text-through-multiple-documents/114594)

<div class="topic-metadata">

**Author:** [@siddharthaman](https://discuss.elastic.co/u/siddharthaman)\
**Replies:** 3\
**Last updated:** [January 8, 2018, 7:03pm UTC](https://discuss.elastic.co/t/search-text-through-multiple-documents/114594 "2018-01-08T19:03:17Z")

</div>

Hi All, I have around 3000 documents(these are text documents) that I have indexed in ElasticSearch. Now I want to retrieve the 5 or 10 best relevant documents on the basis of a particular query(which would be a 1 or 2…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1832)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1834)
