# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1936 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1937 --- ## [How elastic cluster the number about nodes?](https://discuss.elastic.co/t/how-elastic-cluster-the-number-about-nodes/102050)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 9\ **Last updated:** [September 29, 2017, 6:21am UTC](https://discuss.elastic.co/t/how-elastic-cluster-the-number-about-nodes/102050 "2017-09-29T06:21:12Z")
how elasticsearch cluster plan? master data ingest coordinating the four nodes . how about Proportion about the fours nodes ? (as master:20% data: 60% ingest:10% coord:10%) can give a suggested reference … --- ## [Cluster health becomes red and and some shard is assigned and never be recoverd/assigned](https://discuss.elastic.co/t/cluster-health-becomes-red-and-and-some-shard-is-assigned-and-never-be-recoverd-assigned/102210)
**Author:** [@AlimShaikh](https://discuss.elastic.co/u/AlimShaikh)\ **Replies:** 1\ **Last updated:** [September 29, 2017, 6:14am UTC](https://discuss.elastic.co/t/cluster-health-becomes-red-and-and-some-shard-is-assigned-and-never-be-recoverd-assigned/102210 "2017-09-29T06:14:33Z")
We are creating large index around 90 crore documents, somehow at the time of index creation cluster health becomes red and some shard is not recoverd. Same problem occure us 2 times, first time we are indexed document … --- ## [Yellow cluster](https://discuss.elastic.co/t/yellow-cluster/102090)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 3\ **Last updated:** [September 29, 2017, 4:25am UTC](https://discuss.elastic.co/t/yellow-cluster/102090 "2017-09-29T04:25:18Z")
Hi, I am always getting a yellow cluster, even after I remove ES and Install it all over again. I will be happy for help upon how is it that even after a clean re-install I get a yellow cluster? I downloaded the ES rpm… --- ## [Single node ES 2.4.5 "cluster" locks up on reindex reads](https://discuss.elastic.co/t/single-node-es-2-4-5-cluster-locks-up-on-reindex-reads/101545)
**Author:** [@rrue](https://discuss.elastic.co/u/rrue)\ **Replies:** 8\ **Last updated:** [September 29, 2017, 3:38am UTC](https://discuss.elastic.co/t/single-node-es-2-4-5-cluster-locks-up-on-reindex-reads/101545 "2017-09-29T03:38:36Z")
Hello All, I've been flailing for some time on upgrading a two-node ES 1.x cluster to 5.x, finally hitting a wall after upgrading the indices in place from 0.20 (some of them, anyway) to 1.7 and then upgrading as far as… --- ## [Can I only install X-Pack for Kinbana](https://discuss.elastic.co/t/can-i-only-install-x-pack-for-kinbana/102125)
**Author:** [@feijiangnan](https://discuss.elastic.co/u/feijiangnan)\ **Replies:** 3\ **Last updated:** [September 28, 2017, 11:11pm UTC](https://discuss.elastic.co/t/can-i-only-install-x-pack-for-kinbana/102125 "2017-09-28T23:11:26Z")
Hi there, I installed x-pack for Kibana, Elasticsearch and Logstash twice, and it messed up my ELK twice. To my scenario, I only need protect Kibana. Can I only install x-pack for Kibana to make user has to login? Reg… --- ## [Elasticsearch endpoints using TLS/SSL for HTTPS without X-pack](https://discuss.elastic.co/t/elasticsearch-endpoints-using-tls-ssl-for-https-without-x-pack/102188)
**Author:** [@gomarivera](https://discuss.elastic.co/u/gomarivera)\ **Replies:** 1\ **Last updated:** [September 28, 2017, 11:06pm UTC](https://discuss.elastic.co/t/elasticsearch-endpoints-using-tls-ssl-for-https-without-x-pack/102188 "2017-09-28T23:06:00Z")
I have found only information pertaining to X-pack + elasticsearch for TLS/SSL and HTTPS. Does the X-Pack license need to be valid in order to allow elasticsearch services to use TLS/HTTPS ? Are there other tools or al… --- ## [Bulk API description for create operation behavior: duplicates based on \_id not index, right?](https://discuss.elastic.co/t/bulk-api-description-for-create-operation-behavior-duplicates-based-on-id-not-index-right/101741)
**Author:** [@Peter\_Portante](https://discuss.elastic.co/u/Peter_Portante)\ **Replies:** 1\ **Last updated:** [September 28, 2017, 10:47pm UTC](https://discuss.elastic.co/t/bulk-api-description-for-create-operation-behavior-duplicates-based-on-id-not-index-right/101741 "2017-09-28T22:47:26Z")
Hi Folks, I have a question about the Bulk API. In the description about the "create" operation, it reads \[1\]: "create will fail if a document with the same index and type exists already, whereas index will add or repl… --- ## [Default shards and replicas](https://discuss.elastic.co/t/default-shards-and-replicas/102141)
**Author:** [@ipv6only](https://discuss.elastic.co/u/ipv6only)\ **Replies:** 2\ **Last updated:** [September 28, 2017, 10:20pm UTC](https://discuss.elastic.co/t/default-shards-and-replicas/102141 "2017-09-28T22:20:13Z")
Hiho, I'am trying to get into ElasticSearch and set up a one-node cluster. Now everything seems to create indices (Kibana, x-pack, logstash, ...) with a configuration of more than one shard and at least one replica. Th… --- ## [Querying synonyms](https://discuss.elastic.co/t/querying-synonyms/102161)
**Author:** [@shiqizheng](https://discuss.elastic.co/u/shiqizheng)\ **Replies:** 1\ **Last updated:** [September 28, 2017, 9:48pm UTC](https://discuss.elastic.co/t/querying-synonyms/102161 "2017-09-28T21:48:07Z")
I'm trying to retrieve all documents using synonyms: PUT /my\_index { "settings": { "analysis": { "filter": { "my\_synonym\_filter": { "type": "synonym", "synonyms": \[ "british,english", "queen,monarch monarch" \] … --- ## [Discover: grey out field - multiple data sources in one index pattern](https://discuss.elastic.co/t/discover-grey-out-field-multiple-data-sources-in-one-index-pattern/102183)
**Author:** [@m1chael](https://discuss.elastic.co/u/m1chael)\ **Replies:** 0\ **Last updated:** [September 28, 2017, 9:31pm UTC](https://discuss.elastic.co/t/discover-grey-out-field-multiple-data-sources-in-one-index-pattern/102183 "2017-09-28T21:31:10Z")
Hello. First, I am brand new to Easticsearch, Kibana, logstash. I am working with it for a few days now and now I have to following problem. Please feel free to point out my mistakes and guide me in the right direction… --- ## [Custom Analyzers in 5.X After Node based in 2.X](https://discuss.elastic.co/t/custom-analyzers-in-5-x-after-node-based-in-2-x/102159)
**Author:** [@NickMeves](https://discuss.elastic.co/u/NickMeves)\ **Replies:** 1\ **Last updated:** [September 28, 2017, 9:00pm UTC](https://discuss.elastic.co/t/custom-analyzers-in-5-x-after-node-based-in-2-x/102159 "2017-09-28T21:00:17Z")
Hey all, I previously had node based definitions for a few custom Analyzers that were used in a few index template mappings. Now in 5.X that isn't OK, so I moved all those to my templates in the settings and new ones g… --- ## [Mapping / geoip misunderstanding](https://discuss.elastic.co/t/mapping-geoip-misunderstanding/102074)
**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\ **Replies:** 8\ **Last updated:** [September 28, 2017, 8:55pm UTC](https://discuss.elastic.co/t/mapping-geoip-misunderstanding/102074 "2017-09-28T20:55:00Z")
I am continuing to struggle with the GEO\_IP mapping when it comes to loading data. First, I will describe the steps I am taking in my build, then i will post my configs below that. Install ElasticSearch Install SearchG… --- ## [Date in script field](https://discuss.elastic.co/t/date-in-script-field/101951)
**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\ **Replies:** 2\ **Last updated:** [September 28, 2017, 8:05pm UTC](https://discuss.elastic.co/t/date-in-script-field/101951 "2017-09-28T20:05:37Z")
Good morning, I'm doing examples of script fields and I have read the documentation but I don't understand how I can use date fields. My idea is get the age using scripts: GET /prova/\_search { "\_source": {}, "script… --- ## [Nested Searching to Get Selective Return](https://discuss.elastic.co/t/nested-searching-to-get-selective-return/102177)
**Author:** [@guardhunt](https://discuss.elastic.co/u/guardhunt)\ **Replies:** 0\ **Last updated:** [September 28, 2017, 7:50pm UTC](https://discuss.elastic.co/t/nested-searching-to-get-selective-return/102177 "2017-09-28T19:50:33Z")
I am dealing with logs from a website, both traffic and error logs, and am attempting to get all traffic log documents (with "TrafficLog" as the messsage) to return that have the same ip as any error logs (all logs that … --- ## [Creation of an Index By Strongly Typed Classes](https://discuss.elastic.co/t/creation-of-an-index-by-strongly-typed-classes/102176)
**Author:** [@MarkG](https://discuss.elastic.co/u/MarkG)\ **Replies:** 0\ **Last updated:** [September 28, 2017, 7:49pm UTC](https://discuss.elastic.co/t/creation-of-an-index-by-strongly-typed-classes/102176 "2017-09-28T19:49:29Z")
I'm experimenting with creating an index but using the strongly typed classes. The basic desire is being able to specify an index WITHOUT using C# POCO document class. A tall order I realize since I can't use Mapping A… --- ## [Recovering a poor performing Elasticsearch install](https://discuss.elastic.co/t/recovering-a-poor-performing-elasticsearch-install/102146)
**Author:** [@paulglavin](https://discuss.elastic.co/u/paulglavin)\ **Replies:** 3\ **Last updated:** [September 28, 2017, 6:55pm UTC](https://discuss.elastic.co/t/recovering-a-poor-performing-elasticsearch-install/102146 "2017-09-28T18:55:42Z")
I've been trying to figure out why an elasticsearch install I've inherited is running poorly. My original thoughts were both hardware and cluster sizing. I'm in the position of not knowing alot of things about the inst… --- ## [Reporting Error](https://discuss.elastic.co/t/reporting-error/101323)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 5\ **Last updated:** [September 28, 2017, 5:53pm UTC](https://discuss.elastic.co/t/reporting-error/101323 "2017-09-28T17:53:58Z")
Have configured the automatic reporting with watcher. Seeing the following error while watch is getting executed. Watch\[report\_dashboard\] reporting\[Dashboard.pdf\] Error when polling pdf from host\[11.22.22.99\], port\[5601… --- ## [Having trouble running Elasticsearch](https://discuss.elastic.co/t/having-trouble-running-elasticsearch/102151)
**Author:** [@Brendinho](https://discuss.elastic.co/u/Brendinho)\ **Replies:** 0\ **Last updated:** [September 28, 2017, 5:12pm UTC](https://discuss.elastic.co/t/having-trouble-running-elasticsearch/102151 "2017-09-28T17:12:19Z")
Mostly just trying to run Elasticsearch and Kibana on my PC at first to test before potentially implementing to larger environment. Want to get the dashboard up and running. (So any advice if I should be doing something … --- ## [Mapping in index changes when data added](https://discuss.elastic.co/t/mapping-in-index-changes-when-data-added/102134)
**Author:** [@AJFleming](https://discuss.elastic.co/u/AJFleming)\ **Replies:** 0\ **Last updated:** [September 28, 2017, 2:50pm UTC](https://discuss.elastic.co/t/mapping-in-index-changes-when-data-added/102134 "2017-09-28T14:50:01Z")
Hi - I've recently come across a problem that's got me a little perplexed. I've got a script which deletes and then creates an index with an explict mapping which includes an explicit date field with a variety of diffe… --- ## [Problems with Tokenization](https://discuss.elastic.co/t/problems-with-tokenization/102126)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 2\ **Last updated:** [September 28, 2017, 2:48pm UTC](https://discuss.elastic.co/t/problems-with-tokenization/102126 "2017-09-28T14:48:33Z")
Hi, I'm seeing some surprising behaviour with the standard analyzer. I'm testing using the analyze api and the elasticsearch version is 2.2.0. Input data looks like this: { "analyzer": "standard", "tokenizer": "sta… --- ## [How to aggregate over or access top\_hits results in elasticsearch?](https://discuss.elastic.co/t/how-to-aggregate-over-or-access-top-hits-results-in-elasticsearch/102133)
**Author:** [@Mojtaba\_Tabatabaeipo](https://discuss.elastic.co/u/Mojtaba_Tabatabaeipo)\ **Replies:** 0\ **Last updated:** [September 28, 2017, 2:41pm UTC](https://discuss.elastic.co/t/how-to-aggregate-over-or-access-top-hits-results-in-elasticsearch/102133 "2017-09-28T14:41:47Z")
Here is an example: doc = { 'model': 'v1', 'dataset': 1, 'accuracy': 0.2, 'timestamp': "2017-09-28T14:15:08.817638", } doc = { 'model': 'v1', 'dataset': 2, 'accuracy': 0.8, 'timestamp': … --- ## [Index and Type creation](https://discuss.elastic.co/t/index-and-type-creation/102085)
**Author:** [@faoc](https://discuss.elastic.co/u/faoc)\ **Replies:** 3\ **Last updated:** [September 28, 2017, 2:28pm UTC](https://discuss.elastic.co/t/index-and-type-creation/102085 "2017-09-28T14:28:59Z")
Hi, I would like to ask you about some strategy about index and types. I will send to Elasticsearch about 1 million messages per day and i have 6 kind of messages. Should i creeate 6 types? And about index performance,… --- ## [Java process been swapped with mlockall True](https://discuss.elastic.co/t/java-process-been-swapped-with-mlockall-true/102127)
**Author:** [@DravenJohnson](https://discuss.elastic.co/u/DravenJohnson)\ **Replies:** 0\ **Last updated:** [September 28, 2017, 2:12pm UTC](https://discuss.elastic.co/t/java-process-been-swapped-with-mlockall-true/102127 "2017-09-28T14:12:49Z")
Our cluster is running with 0 Swap set and mlockall on, but we ran into a lot OOM-killed situation that system killed elasticsearch processes due to OOM. So we are thinking and testing the swappiness option After few d… --- ## [Elasticsearch snapshot and restore in S3](https://discuss.elastic.co/t/elasticsearch-snapshot-and-restore-in-s3/101933)
**Author:** [@arianayay](https://discuss.elastic.co/u/arianayay)\ **Replies:** 4\ **Last updated:** [September 28, 2017, 2:01pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-and-restore-in-s3/101933 "2017-09-28T14:01:07Z")
Hi All, Is it possible to restore a snapshot from one cluster to another? If so, what do we need to restore the snapshot from another cluster? Thanks! --- ## [Index aliases to allow switching out backend indices](https://discuss.elastic.co/t/index-aliases-to-allow-switching-out-backend-indices/102031)
**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\ **Replies:** 3\ **Last updated:** [September 28, 2017, 1:59pm UTC](https://discuss.elastic.co/t/index-aliases-to-allow-switching-out-backend-indices/102031 "2017-09-28T13:59:50Z")
Hi, I manage an elasticsearch cluster with about 25 different applications sending their logs to it. The naming convention for the index logging is this, apps-logs--yyyy.MM.dd. We have apps that do load testing and d… --- ## [After installing first time Kibana5.6 and elasticsearch-6.0-beta2," status is coming red" and "Unable to connect to Elasticsearch at http://localhost:9200" error](https://discuss.elastic.co/t/after-installing-first-time-kibana5-6-and-elasticsearch-6-0-beta2-status-is-coming-red-and-unable-to-connect-to-elasticsearch-at-http-localhost-9200-error/102121)
**Author:** [@Rajdeep\_Jaiswal](https://discuss.elastic.co/u/Rajdeep_Jaiswal)\ **Replies:** 1\ **Last updated:** [September 28, 2017, 1:48pm UTC](https://discuss.elastic.co/t/after-installing-first-time-kibana5-6-and-elasticsearch-6-0-beta2-status-is-coming-red-and-unable-to-connect-to-elasticsearch-at-http-localhost-9200-error/102121 "2017-09-28T13:48:28Z")
i am using elasticsearch 6.0-beTa2 .After installing first time Kibana5.6 , I am getting below error status is coming red and 2. Unable to connect to Elasticsearch at http://localhost:9200 error here is my kibana.… --- ## [FunctionScoreQueryBuilder.add() removed?](https://discuss.elastic.co/t/functionscorequerybuilder-add-removed/101770)
**Author:** [@sliu](https://discuss.elastic.co/u/sliu)\ **Replies:** 2\ **Last updated:** [September 28, 2017, 1:08pm UTC](https://discuss.elastic.co/t/functionscorequerybuilder-add-removed/101770 "2017-09-28T13:08:45Z")
I'm trying to implement function\_score in Java code. This is exactly what I'm looking for. This page also has similar examples: https://www.programcreek.com/java-api-examples/index.php?api=org.elasticsearch.index.qu… --- ## [How to get only one log per transaction that fits a match](https://discuss.elastic.co/t/how-to-get-only-one-log-per-transaction-that-fits-a-match/101997)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 3\ **Last updated:** [September 28, 2017, 1:03pm UTC](https://discuss.elastic.co/t/how-to-get-only-one-log-per-transaction-that-fits-a-match/101997 "2017-09-28T13:03:58Z")
Hi, I want to know how many transactions have fields value between 0 and 3. For this the following query is good: POST /filebeat-\*/log/\_search?scroll=1m&pretty { "size": 100, "query": { "bool":{ … --- ## [Get child, of child, of child etc](https://discuss.elastic.co/t/get-child-of-child-of-child-etc/102113)
**Author:** [@emillykkejensen](https://discuss.elastic.co/u/emillykkejensen)\ **Replies:** 0\ **Last updated:** [September 28, 2017, 12:24pm UTC](https://discuss.elastic.co/t/get-child-of-child-of-child-etc/102113 "2017-09-28T12:24:08Z")
Postet this question on stackoverflow as well, but hoping to get better answers here. I am trying to get all children and all parents of a doc id, where one child can be the parent, grandparent, grand grandparent etc. … --- ## [Query Related to Multiple Content Sources & Thumbnails for Web Content](https://discuss.elastic.co/t/query-related-to-multiple-content-sources-thumbnails-for-web-content/102102)
**Author:** [@vikram404](https://discuss.elastic.co/u/vikram404)\ **Replies:** 0\ **Last updated:** [September 28, 2017, 11:09am UTC](https://discuss.elastic.co/t/query-related-to-multiple-content-sources-thumbnails-for-web-content/102102 "2017-09-28T11:09:37Z")
Hi, I am clubbing two questions as part of this post: Question 01: Our customer is planning to migrate from Google Search Appliance and we are proposing Elastic Search as a replacement. The Use Case for Search here is… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1935) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1937)