# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1911 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1912 --- ## [How many records a shard can have?](https://discuss.elastic.co/t/how-many-records-a-shard-can-have/105034)
**Author:** [@PinkiMondal](https://discuss.elastic.co/u/PinkiMondal)\ **Replies:** 19\ **Last updated:** [October 25, 2017, 5:20am UTC](https://discuss.elastic.co/t/how-many-records-a-shard-can-have/105034 "2017-10-25T05:20:09Z")
What space or records a shard can have? How to reallocate shards when primary shard is full? How much data a index can have? Thanks in advance --- ## [Which security rules for access snaphot api?](https://discuss.elastic.co/t/which-security-rules-for-access-snaphot-api/105146)
**Author:** [@RomainXie](https://discuss.elastic.co/u/RomainXie)\ **Replies:** 2\ **Last updated:** [October 25, 2017, 5:10am UTC](https://discuss.elastic.co/t/which-security-rules-for-access-snaphot-api/105146 "2017-10-25T05:10:53Z")
Hi, I don't find a build-in rule which approve a user to call "PUT \_snapshot/my-repository/snap-test-2017-10-21". And I had read the reference about snapshot and security, don't have any idea for it. Anyone can give m… --- ## [Highlight multiple matches in one sentence results in multiple hightligts](https://discuss.elastic.co/t/highlight-multiple-matches-in-one-sentence-results-in-multiple-hightligts/105151)
**Author:** [@Crespo\_Wang](https://discuss.elastic.co/u/Crespo_Wang)\ **Replies:** 0\ **Last updated:** [October 25, 2017, 4:39am UTC](https://discuss.elastic.co/t/highlight-multiple-matches-in-one-sentence-results-in-multiple-hightligts/105151 "2017-10-25T04:39:12Z")
I love the boundary\_scanner: sentence in ES 5.5, however it seems a problem that if multiple matches are found in one sentence, it then returns the highlights multiple times, rather than in one sentence. let's say we hav… --- ## [Full text vs multi fields](https://discuss.elastic.co/t/full-text-vs-multi-fields/104956)
**Author:** [@mkorayem](https://discuss.elastic.co/u/mkorayem)\ **Replies:** 1\ **Last updated:** [October 25, 2017, 4:10am UTC](https://discuss.elastic.co/t/full-text-vs-multi-fields/104956 "2017-10-25T04:10:23Z")
Hi, Which is better, as an example for logs (it will be Linux, windows, network devices, UPS, cameras, etc ...) Keep the message in one field and depend on full text search or grok them into multiple known fields such… --- ## [Elasticsearch java tuning](https://discuss.elastic.co/t/elasticsearch-java-tuning/104874)
**Author:** [@mkain](https://discuss.elastic.co/u/mkain)\ **Replies:** 1\ **Last updated:** [October 25, 2017, 3:34am UTC](https://discuss.elastic.co/t/elasticsearch-java-tuning/104874 "2017-10-25T03:34:58Z")
Hi, While running a single node ELK 5.6.2 recently I encountered JAVA memory heap error and it crashed the elasticsearch process. Upon restarting elasticsearch I can see following warning messages. Can someone pls conf… --- ## [How Deleting Snapshots works?](https://discuss.elastic.co/t/how-deleting-snapshots-works/104952)
**Author:** [@Bruce\_Carey](https://discuss.elastic.co/u/Bruce_Carey)\ **Replies:** 1\ **Last updated:** [October 25, 2017, 3:21am UTC](https://discuss.elastic.co/t/how-deleting-snapshots-works/104952 "2017-10-25T03:21:49Z")
Hi All, I have a question about snapshot behavior based on the following from the 5.02 docs: "A snapshot can be deleted from the repository using the following command: DELETE /\_snapshot/my\_backup/snapshot\_1 When a s… --- ## [TransportClient NoNodeAvailableException](https://discuss.elastic.co/t/transportclient-nonodeavailableexception/104990)
**Author:** [@itplayer](https://discuss.elastic.co/u/itplayer)\ **Replies:** 3\ **Last updated:** [October 25, 2017, 3:08am UTC](https://discuss.elastic.co/t/transportclient-nonodeavailableexception/104990 "2017-10-25T03:08:34Z")
Hi, I have a problem but no luck. I use Elasticsearch v5.4.0 and v5.4.2 on Linux server. Here is the situation, when my application start and construct using TransportClient tc = new PrebuiltTransportClient() At this… --- ## [Combining queries on different indices](https://discuss.elastic.co/t/combining-queries-on-different-indices/105130)
**Author:** [@mattkallo](https://discuss.elastic.co/u/mattkallo)\ **Replies:** 1\ **Last updated:** [October 25, 2017, 2:00am UTC](https://discuss.elastic.co/t/combining-queries-on-different-indices/105130 "2017-10-25T02:00:58Z")
This could be a very basic question. I am new to ES, couldn't get any good answer from my research. Hence posting it here. I have 2 indices that need to be searched with 2 separate sets of queries(keywords) eg: Index… --- ## [Delete .security index](https://discuss.elastic.co/t/delete-security-index/105113)
**Author:** [@developer\_apk](https://discuss.elastic.co/u/developer_apk)\ **Replies:** 2\ **Last updated:** [October 25, 2017, 1:54am UTC](https://discuss.elastic.co/t/delete-security-index/105113 "2017-10-25T01:54:58Z")
How can i delete .security index in 5.4? --- ## [Elasticsearch-2.0 parent-chid query returning empty results](https://discuss.elastic.co/t/elasticsearch-2-0-parent-chid-query-returning-empty-results/105138)
**Author:** [@zzalyp](https://discuss.elastic.co/u/zzalyp)\ **Replies:** 0\ **Last updated:** [October 25, 2017, 1:53am UTC](https://discuss.elastic.co/t/elasticsearch-2-0-parent-chid-query-returning-empty-results/105138 "2017-10-25T01:53:45Z")
I am using Elasticsearch version 2.0.0, query parent-child, but the result is empty, I do not know where the problem is, I refer to this examplehttps://stackoverflow.com/questions/29116935/elastic-search-parent-child-dat… --- ## [Version Conflict while using delete\_by\_query](https://discuss.elastic.co/t/version-conflict-while-using-delete-by-query/104831)
**Author:** [@Ayra\_Faceless](https://discuss.elastic.co/u/Ayra_Faceless)\ **Replies:** 5\ **Last updated:** [October 25, 2017, 1:11am UTC](https://discuss.elastic.co/t/version-conflict-while-using-delete-by-query/104831 "2017-10-25T01:11:26Z")
I'm using logstash to insert huge data to my elasticsearch,but sometimes the grok plugin fails and insert a message with tags =\_grokparsefailure. Now i'm going to remove all data contains this tag with the request below… --- ## [Any way to add properties to the User object?](https://discuss.elastic.co/t/any-way-to-add-properties-to-the-user-object/105135)
**Author:** [@TJ\_Martin](https://discuss.elastic.co/u/TJ_Martin)\ **Replies:** 2\ **Last updated:** [October 25, 2017, 12:07am UTC](https://discuss.elastic.co/t/any-way-to-add-properties-to-the-user-object/105135 "2017-10-25T00:07:57Z")
Using 5.3.3 I would like to add a first\_name field to the normal user properties of email/enabled/full\_name/roles/user\_name I was able to PUT the property onto the user object at the /.security/\_mapping/user endpoint… --- ## [Diff out all documents with the same hash key in 2 (or more) test runs](https://discuss.elastic.co/t/diff-out-all-documents-with-the-same-hash-key-in-2-or-more-test-runs/105124)
**Author:** [@Siegfried\_Hauenstein](https://discuss.elastic.co/u/Siegfried_Hauenstein)\ **Replies:** 0\ **Last updated:** [October 24, 2017, 8:38pm UTC](https://discuss.elastic.co/t/diff-out-all-documents-with-the-same-hash-key-in-2-or-more-test-runs/105124 "2017-10-24T20:38:57Z")
Hi Folks, I am pretty new to elastic search pattern and wonder if you can give me any hint if this is possible what I want. I collect system logs over daily regression tests. I generate a normalized hash key for e… --- ## [Disk space full, addition of a new disk and data folder path in elasticsearch.yml does not start ES](https://discuss.elastic.co/t/disk-space-full-addition-of-a-new-disk-and-data-folder-path-in-elasticsearch-yml-does-not-start-es/105117)
**Author:** [@shivalkarrahul](https://discuss.elastic.co/u/shivalkarrahul)\ **Replies:** 6\ **Last updated:** [October 24, 2017, 8:35pm UTC](https://discuss.elastic.co/t/disk-space-full-addition-of-a-new-disk-and-data-folder-path-in-elasticsearch-yml-does-not-start-es/105117 "2017-10-24T20:35:43Z")
Elasticsearch version (bin/elasticsearch --version): 2.1.11 JVM version (java -version): 1.8.0\_91 OS version (uname -a if on a Unix-like system): SLES 11 SP4 Description of the problem including expected versus actual… --- ## [Elasticsearch crashes with StackOverflowError](https://discuss.elastic.co/t/elasticsearch-crashes-with-stackoverflowerror/102896)
**Author:** [@praveenmak](https://discuss.elastic.co/u/praveenmak)\ **Replies:** 12\ **Last updated:** [October 24, 2017, 8:30pm UTC](https://discuss.elastic.co/t/elasticsearch-crashes-with-stackoverflowerror/102896 "2017-10-24T20:30:14Z")
Version Used: ElasticSearch 5.6.6 Mode: Single Node, Single Cluster - config is simple as shown below. node.master: true node.data: true transport.type: local # disable network bootstrap.memory\_lock: true thread\_po… --- ## [Serbian analyzer setup](https://discuss.elastic.co/t/serbian-analyzer-setup/104893)
**Author:** [@srda1989](https://discuss.elastic.co/u/srda1989)\ **Replies:** 3\ **Last updated:** [October 24, 2017, 6:44pm UTC](https://discuss.elastic.co/t/serbian-analyzer-setup/104893 "2017-10-24T18:44:38Z")
Hi guys, I am trying to implement elasticsearch on my website which has a lot of posts in Serbian language. The main problem occurs when people try to search words with our specific latin letters (šćž ... ). So I figured… --- ## [Looking for example of how to do bulk UPDATE or UPSERT with custom \_id in v5.6.\*](https://discuss.elastic.co/t/looking-for-example-of-how-to-do-bulk-update-or-upsert-with-custom-id-in-v5-6/105111)
**Author:** [@bw2](https://discuss.elastic.co/u/bw2)\ **Replies:** 0\ **Last updated:** [October 24, 2017, 6:33pm UTC](https://discuss.elastic.co/t/looking-for-example-of-how-to-do-bulk-update-or-upsert-with-custom-id-in-v5-6/105111 "2017-10-24T18:33:49Z")
I have an existing index and want to add several fields to the mapping, and then use UPDATE or UPSERT to add the data. What is the correct way to run bulk UPSERT or UPDATE with a custom key (eg. lets say I want to use a… --- ## [Indice Replica Configuration](https://discuss.elastic.co/t/indice-replica-configuration/104940)
**Author:** [@Kernel\_Panic](https://discuss.elastic.co/u/Kernel_Panic)\ **Replies:** 2\ **Last updated:** [October 24, 2017, 6:24pm UTC](https://discuss.elastic.co/t/indice-replica-configuration/104940 "2017-10-24T18:24:39Z")
Hello community I notice that ES 5 does not allow to configure the number of replicas from its configuration file anymore, so before I enable filebeat/metricbeat clients, which would be the procedure? Created the indic… --- ## [Will Elasticsearch -2.3.1-1 version cluster works across datacenter?](https://discuss.elastic.co/t/will-elasticsearch-2-3-1-1-version-cluster-works-across-datacenter/104953)
**Author:** [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)\ **Replies:** 3\ **Last updated:** [October 24, 2017, 6:18pm UTC](https://discuss.elastic.co/t/will-elasticsearch-2-3-1-1-version-cluster-works-across-datacenter/104953 "2017-10-24T18:18:13Z")
Hi Team, I have 7 node ELK cluster. Versions: elasticsearch-2.3.1-1.noarch logstash-2.3.1-1.noarch kibana-4.5.0-1.x86\_64 We are planing to add 7 more nodes to this cluster in different datacenter. But its not creat… --- ## [Change elasticsearch threadpool index queue\_size](https://discuss.elastic.co/t/change-elasticsearch-threadpool-index-queue-size/105006)
**Author:** [@patricia022](https://discuss.elastic.co/u/patricia022)\ **Replies:** 5\ **Last updated:** [October 24, 2017, 6:09pm UTC](https://discuss.elastic.co/t/change-elasticsearch-threadpool-index-queue-size/105006 "2017-10-24T18:09:58Z")
Hi everyone, I would like to ask if I can modify the index queue\_size from 200 to 1000 using API calls. "index": { "type": "fixed", "min": 2, "max": 2, "queue\_size": 200 } Thanks --- ## [Old indices being copied between nodes on recovery](https://discuss.elastic.co/t/old-indices-being-copied-between-nodes-on-recovery/105050)
**Author:** [@rob1727](https://discuss.elastic.co/u/rob1727)\ **Replies:** 2\ **Last updated:** [October 24, 2017, 5:59pm UTC](https://discuss.elastic.co/t/old-indices-being-copied-between-nodes-on-recovery/105050 "2017-10-24T17:59:16Z")
Hi all, am looking to put together a simple failover setup. Have 2 nodes, 1 shard , 1 replica. only departure from the elasticsearch.yml defaults are cluster.name: mycluster node.name: node1/node2 index.number\_of\_s… --- ## [Painless script - Can't use script params as regex pattern](https://discuss.elastic.co/t/painless-script-cant-use-script-params-as-regex-pattern/105045)
**Author:** [@David\_Jacob](https://discuss.elastic.co/u/David_Jacob)\ **Replies:** 1\ **Last updated:** [October 24, 2017, 5:52pm UTC](https://discuss.elastic.co/t/painless-script-cant-use-script-params-as-regex-pattern/105045 "2017-10-24T17:52:50Z")
Hi Team, I am trying to use regex patterns in scripts. My problem is the regex patterns are dynamic which I'll be passing it via params for script. In elasticsearch documentation, it is specified that only way to creat… --- ## [Struggling with 'getting started' tutorial](https://discuss.elastic.co/t/struggling-with-getting-started-tutorial/105084)
**Author:** [@basiclaser](https://discuss.elastic.co/u/basiclaser)\ **Replies:** 2\ **Last updated:** [October 24, 2017, 5:48pm UTC](https://discuss.elastic.co/t/struggling-with-getting-started-tutorial/105084 "2017-10-24T17:48:32Z")
Hi all, im following the elasticsearch 'getting started guide' and am having trouble with the logs example. I bulk import the logs.jsonl, added all the 3 mappings as provided (https://www.elastic.co/guide/en/kibana/curr… --- ## [Semi-Document Management System with Elasticsearh](https://discuss.elastic.co/t/semi-document-management-system-with-elasticsearh/105064)
**Author:** [@arnydo](https://discuss.elastic.co/u/arnydo)\ **Replies:** 1\ **Last updated:** [October 24, 2017, 5:45pm UTC](https://discuss.elastic.co/t/semi-document-management-system-with-elasticsearh/105064 "2017-10-24T17:45:01Z")
Hello, I am looking for some ideas on a project I am looking at starting. Big picture is I would like to build a semi-document management system. The primary goal is to have multiple indexes to search for the documents … --- ## [ComplexSearch](https://discuss.elastic.co/t/complexsearch/105069)
**Author:** [@KALPESH\_BADGUJAR](https://discuss.elastic.co/u/KALPESH_BADGUJAR)\ **Replies:** 1\ **Last updated:** [October 24, 2017, 5:44pm UTC](https://discuss.elastic.co/t/complexsearch/105069 "2017-10-24T17:44:23Z")
I have created ElasticSearch index with following mapping. I need to write Complex Search query like find relevant Items on query result. Ex.Find item having price= "100". Get ItemBrand from search result and then find o… --- ## [Better recovery information](https://discuss.elastic.co/t/better-recovery-information/105070)
**Author:** [@Chris\_Curvey](https://discuss.elastic.co/u/Chris_Curvey)\ **Replies:** 1\ **Last updated:** [October 24, 2017, 5:41pm UTC](https://discuss.elastic.co/t/better-recovery-information/105070 "2017-10-24T17:41:31Z")
I occasionally take a snapshot of production and restore it to my development server. (Not only for new development, but also to test the snapshot/restore process.) Is there a way to get more focused information on the… --- ## [My aggregate indices version 1, thoughts?](https://discuss.elastic.co/t/my-aggregate-indices-version-1-thoughts/105076)
**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\ **Replies:** 2\ **Last updated:** [October 24, 2017, 5:06pm UTC](https://discuss.elastic.co/t/my-aggregate-indices-version-1-thoughts/105076 "2017-10-24T17:06:20Z")
Hi, I have been looking for a good way to aggregate metrics data and terms counts for various index data I have been collecting. I'm mostly looking at infrastructure component performance and throughput metrics. I hav… --- ## [Query Return: Matching Children AND Matching Parents without Matching Children](https://discuss.elastic.co/t/query-return-matching-children-and-matching-parents-without-matching-children/104741)
**Author:** [@KrisMeister](https://discuss.elastic.co/u/KrisMeister)\ **Replies:** 5\ **Last updated:** [October 24, 2017, 12:26pm UTC](https://discuss.elastic.co/t/query-return-matching-children-and-matching-parents-without-matching-children/104741 "2017-10-24T12:26:15Z")
I'm an ES beginner, but longtime programmer. I'm currently planning a feature and needed some community advice. Our current NON-ES data structure looks like this: people: \[ { \_id: "1" name: "James B… --- ## [Unable to Run Several of the Tracks do to permissions errors](https://discuss.elastic.co/t/unable-to-run-several-of-the-tracks-do-to-permissions-errors/104748)
**Author:** [@Jim\_Finnessy](https://discuss.elastic.co/u/Jim_Finnessy)\ **Replies:** 3\ **Last updated:** [October 24, 2017, 3:11pm UTC](https://discuss.elastic.co/t/unable-to-run-several-of-the-tracks-do-to-permissions-errors/104748 "2017-10-24T15:11:33Z")
When running a few of the tracks, I get the following error trying to read/write to /proc/pid/io. ES Rally is running on Amazon Linux on a t2.medium. Any ideas? \[ec2-user@ip-XXX-XXX-XXX-XXX /\]$ esrally --track=geopoint… --- ## [Unable to upgrade to latest X-pack](https://discuss.elastic.co/t/unable-to-upgrade-to-latest-x-pack/105075)
**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\ **Replies:** 1\ **Last updated:** [October 24, 2017, 1:56pm UTC](https://discuss.elastic.co/t/unable-to-upgrade-to-latest-x-pack/105075 "2017-10-24T13:56:17Z")
Hello, all. I've upgraded my stack to version 5.6.3. However, when I try to upgrade X-pack, the reply is that the version (5.6.0) is incompatible with the installed (Kibana- or Elasticsearch-) 5.6.3. I note that X-pac… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1910) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1912)