# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1957

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1958

---

## [Is 20 shards per index ok?](https://discuss.elastic.co/t/is-20-shards-per-index-ok/99669)

<div class="topic-metadata">

**Author:** [@596375269](https://discuss.elastic.co/u/596375269)\
**Replies:** 1\
**Last updated:** [September 7, 2017, 7:03am UTC](https://discuss.elastic.co/t/is-20-shards-per-index-ok/99669 "2017-09-07T07:03:17Z")

</div>

Hi., to All. Good Evening. We have a indice with total size of 80G(28m documents),(5 shards ,2 replicas), and when do some queries ,commonly costs 40ms, but after we changed sharding number to 20, time costs decreased…

---

## [Number of connections keep increasing for every search](https://discuss.elastic.co/t/number-of-connections-keep-increasing-for-every-search/99425)

<div class="topic-metadata">

**Author:** [@vishnugt](https://discuss.elastic.co/u/vishnugt)\
**Replies:** 2\
**Last updated:** [September 7, 2017, 6:57am UTC](https://discuss.elastic.co/t/number-of-connections-keep-increasing-for-every-search/99425 "2017-09-07T06:57:50Z")

</div>

String clusterName = GridContactManager.getClusterName(ClusterType.ElasticSearch, clusterID); String esHosts = LogConf.getESUnicastHosts(clusterID); String\[\] masterNodes = esHosts.split(StringUtil.COMMA); HttpHost\[\] …

---

## [Cannot set eager in ES as by ES guide](https://discuss.elastic.co/t/cannot-set-eager-in-es-as-by-es-guide/97406)

<div class="topic-metadata">

**Author:** [@Mojster](https://discuss.elastic.co/u/Mojster)\
**Replies:** 8\
**Last updated:** [September 7, 2017, 6:55am UTC](https://discuss.elastic.co/t/cannot-set-eager-in-es-as-by-es-guide/97406 "2017-09-07T06:55:24Z")

</div>

Hi there. I’m running ES stack (ES, KB, LS, FB) version 5.5.1, Because I have 780 000 000 entries, we wanted to make some fields eager loaded. I’ve sticked to ES guide: https://www.elastic.co/guide/en/elasticsearch/gu…

---

## [Why elasticsearch does not come with a CLI?](https://discuss.elastic.co/t/why-elasticsearch-does-not-come-with-a-cli/99485)

<div class="topic-metadata">

**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\
**Replies:** 7\
**Last updated:** [September 7, 2017, 6:48am UTC](https://discuss.elastic.co/t/why-elasticsearch-does-not-come-with-a-cli/99485 "2017-09-07T06:48:05Z")

</div>

It has been 2-3 months I have been using elasticsearch. I often wonder why we elasticsearch has its own CLI ? Almost all other databases have a shell. I am not looking for a CLI. I just want to know why ? Is it not pos…

---

## [Best way to disable only one stopword in Elastic search](https://discuss.elastic.co/t/best-way-to-disable-only-one-stopword-in-elastic-search/99605)

<div class="topic-metadata">

**Author:** [@Ramchandram](https://discuss.elastic.co/u/Ramchandram)\
**Replies:** 7\
**Last updated:** [September 7, 2017, 6:44am UTC](https://discuss.elastic.co/t/best-way-to-disable-only-one-stopword-in-elastic-search/99605 "2017-09-07T06:44:32Z")

</div>

HI Team, As we know ‘AN’ is stopword in Elastic search. I have executed the below query. { “from”: 0, “size”: 100, “query”: { “bool”: { “must”: \[ { “match”: { “receiver”: { “query”: “AN”, “type”: “boolean” } …

---

## [Ignore unconfirmed accounts when sending mails in elastic watchers](https://discuss.elastic.co/t/ignore-unconfirmed-accounts-when-sending-mails-in-elastic-watchers/97765)

<div class="topic-metadata">

**Author:** [@dinaWork](https://discuss.elastic.co/u/dinaWork)\
**Replies:** 3\
**Last updated:** [September 7, 2017, 6:31am UTC](https://discuss.elastic.co/t/ignore-unconfirmed-accounts-when-sending-mails-in-elastic-watchers/97765 "2017-09-07T06:31:26Z")

</div>

I am using elastic search watcher, and send notifications via email. I have requested whitelisting for all workers in my company. I confirmed my own email (can’t confirm for other people. here is my action: "action…

---

## [How to clear the cache for a specific query?](https://discuss.elastic.co/t/how-to-clear-the-cache-for-a-specific-query/98027)

<div class="topic-metadata">

**Author:** [@henrilabarre](https://discuss.elastic.co/u/henrilabarre)\
**Replies:** 1\
**Last updated:** [September 7, 2017, 6:09am UTC](https://discuss.elastic.co/t/how-to-clear-the-cache-for-a-specific-query/98027 "2017-09-07T06:09:18Z")

</div>

Hi simple question : is it possible to clear/refresh the cache for a specific query? Thanks for your help Best

---

## [Conflict when creating mapping](https://discuss.elastic.co/t/conflict-when-creating-mapping/99665)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 2\
**Last updated:** [September 7, 2017, 6:08am UTC](https://discuss.elastic.co/t/conflict-when-creating-mapping/99665 "2017-09-07T06:08:12Z")

</div>

Hi, I have logstash shipping some csv based logs to elastic and I want to change to field type of some of them from string to long. I’ve delete all data and created the mapping below. However when I restart logstash ki…

---

## [Search not load balance](https://discuss.elastic.co/t/search-not-load-balance/99030)

<div class="topic-metadata">

**Author:** [@zjzhiqian](https://discuss.elastic.co/u/zjzhiqian)\
**Replies:** 1\
**Last updated:** [September 7, 2017, 5:02am UTC](https://discuss.elastic.co/t/search-not-load-balance/99030 "2017-09-07T05:02:37Z")

</div>

I have 7 elasticsearch instances , 2 of them are coordination nodes, I send many queries to coordination nodes, but the query loads not balanced. node 1 IO much nearly 200~300MB/s ,but other nodes IO nearly 0 . the repl…

---

## [Can't install x-pcak on elasticsearch](https://discuss.elastic.co/t/cant-install-x-pcak-on-elasticsearch/98984)

<div class="topic-metadata">

**Author:** [@irtizaur](https://discuss.elastic.co/u/irtizaur)\
**Replies:** 5\
**Last updated:** [September 7, 2017, 4:57am UTC](https://discuss.elastic.co/t/cant-install-x-pcak-on-elasticsearch/98984 "2017-09-07T04:57:52Z")

</div>

Hi, i am using Elasticsearch 5.5.2 and Kibana 5.5.2 on ubuntu 16.04 version. for both i have followed the Debian package installation. Now i am trying to install x-pack on both elasticsearch and kibana. but getting belo…

---

## [SSL Certificates Directory](https://discuss.elastic.co/t/ssl-certificates-directory/99047)

<div class="topic-metadata">

**Author:** [@lask001](https://discuss.elastic.co/u/lask001)\
**Replies:** 1\
**Last updated:** [September 7, 2017, 4:55am UTC](https://discuss.elastic.co/t/ssl-certificates-directory/99047 "2017-09-07T04:55:55Z")

</div>

Is there a reason why xpack requires all the certificates to be located within the /etc/elasticsearch directory, or am I doing something wrong? I have a few certs stored in /etc/pki/tls/private/… for other applications a…

---

## [Predicate pushdown in elasticsearch](https://discuss.elastic.co/t/predicate-pushdown-in-elasticsearch/98613)

<div class="topic-metadata">

**Author:** [@Pritom\_Ahmed](https://discuss.elastic.co/u/Pritom_Ahmed)\
**Replies:** 2\
**Last updated:** [September 7, 2017, 1:30am UTC](https://discuss.elastic.co/t/predicate-pushdown-in-elasticsearch/98613 "2017-09-07T01:30:39Z")

</div>

Is there any support for predicate pushdown in elasticsearch? I am using elasticsearch with Flink for stream processing. org.apache.flink flink-connector-elasticsearch5\_2.10 1.3.1 Thanks

---

## [ES (2 nodes) in Docker: Setup + connection](https://discuss.elastic.co/t/es-2-nodes-in-docker-setup-connection/99189)

<div class="topic-metadata">

**Author:** [@dencowboy](https://discuss.elastic.co/u/dencowboy)\
**Replies:** 5\
**Last updated:** [September 6, 2017, 9:19pm UTC](https://discuss.elastic.co/t/es-2-nodes-in-docker-setup-connection/99189 "2017-09-06T21:19:56Z")

</div>

I’ve setup an ES cluster inside docker like described here: version: '2' services: elasticsearch1: image: docker.elastic.co/elasticsearch/elasticsearch:5.5.2 container\_name: elasticsearch1 environment: …

---

## [Aggregations based on filtered nested fields](https://discuss.elastic.co/t/aggregations-based-on-filtered-nested-fields/99443)

<div class="topic-metadata">

**Author:** [@willcosgrove](https://discuss.elastic.co/u/willcosgrove)\
**Replies:** 8\
**Last updated:** [September 6, 2017, 8:30pm UTC](https://discuss.elastic.co/t/aggregations-based-on-filtered-nested-fields/99443 "2017-09-06T20:30:35Z")

</div>

I’m trying to construct a query with some aggregations based on filters of nested fields. Let me briefly explain my data models so the examples are easier to follow. I’ve got a Winery model, which has many Wine models.…

---

## [Plugins does not load ES 2.4](https://discuss.elastic.co/t/plugins-does-not-load-es-2-4/99497)

<div class="topic-metadata">

**Author:** [@wvitte](https://discuss.elastic.co/u/wvitte)\
**Replies:** 3\
**Last updated:** [September 6, 2017, 6:56pm UTC](https://discuss.elastic.co/t/plugins-does-not-load-es-2-4/99497 "2017-09-06T18:56:08Z")

</div>

I built the plugin (analysis-icu, version 2.4) and copied the jars (elasticsearch-analysis-icu\*.jar and its dependent jars) to ES directory (/Users/witte/Documents/elasticsearch-2.4.0/plugins). So my plugins directory l…

---

## [Machine Learning API](https://discuss.elastic.co/t/machine-learning-api/99563)

<div class="topic-metadata">

**Author:** [@Karni\_Sagi](https://discuss.elastic.co/u/Karni_Sagi)\
**Replies:** 2\
**Last updated:** [September 6, 2017, 6:35pm UTC](https://discuss.elastic.co/t/machine-learning-api/99563 "2017-09-06T18:35:44Z")

</div>

I'm new in Elastic stack. Looking on the Anomaly Detection in the X-pack package. I was wondering if setting up , configuring , ruining and displaying the job result can be fully done via API. I run across the API ref…

---

## [Best way to convert existing logstash indexes from 5 to 1 shards](https://discuss.elastic.co/t/best-way-to-convert-existing-logstash-indexes-from-5-to-1-shards/99609)

<div class="topic-metadata">

**Author:** [@Stuart\_Allen](https://discuss.elastic.co/u/Stuart_Allen)\
**Replies:** 3\
**Last updated:** [September 6, 2017, 6:17pm UTC](https://discuss.elastic.co/t/best-way-to-convert-existing-logstash-indexes-from-5-to-1-shards/99609 "2017-09-06T18:17:05Z")

</div>

I setup my logstash with defaults not knowing about the 5 shards per index default. I now have lots of days of logstash daily data and have over 1000 shards, so I’m running into the search issue with that threshold. Wha…

---

## [REST APIS for monitoring in](https://discuss.elastic.co/t/rest-apis-for-monitoring-in/99279)

<div class="topic-metadata">

**Author:** [@pkempia](https://discuss.elastic.co/u/pkempia)\
**Replies:** 1\
**Last updated:** [September 6, 2017, 5:53pm UTC](https://discuss.elastic.co/t/rest-apis-for-monitoring-in/99279 "2017-09-06T17:53:56Z")

</div>

Using 5.5 ELK. Trying to achieve the x-pack monitoring dashboard (say https://www.elastic.co/guide/en/x-pack/current/monitoring-details.html) thru APIs. This is to be used as a smoke test after the installation of ELK. …

---

## [Sorting on dynamic nested object field](https://discuss.elastic.co/t/sorting-on-dynamic-nested-object-field/99570)

<div class="topic-metadata">

**Author:** [@yesu](https://discuss.elastic.co/u/yesu)\
**Replies:** 2\
**Last updated:** [September 6, 2017, 5:07pm UTC](https://discuss.elastic.co/t/sorting-on-dynamic-nested-object-field/99570 "2017-09-06T17:07:56Z")

</div>

Can I use sort on dynamic nested object field, indexing data like below. Creating index like below with mappers. PUT dynamic\_index { "mappings": { "dynamic\_type": { "dynamic": true, "properti…

---

## [Aggregation not working on Scripted field](https://discuss.elastic.co/t/aggregation-not-working-on-scripted-field/99430)

<div class="topic-metadata">

**Author:** [@shaktigupta200](https://discuss.elastic.co/u/shaktigupta200)\
**Replies:** 1\
**Last updated:** [September 6, 2017, 4:45pm UTC](https://discuss.elastic.co/t/aggregation-not-working-on-scripted-field/99430 "2017-09-06T16:45:09Z")

</div>

Hi Folks, I am trying to perform bucket aggregation on scripted field but getting empty result while search result are coming fine but not aggregation result. "aggregations": { "level": { "doc\_count\_error\_upp…

---

## [Getting wrong search results](https://discuss.elastic.co/t/getting-wrong-search-results/99576)

<div class="topic-metadata">

**Author:** [@HritikJain](https://discuss.elastic.co/u/HritikJain)\
**Replies:** 1\
**Last updated:** [September 6, 2017, 4:33pm UTC](https://discuss.elastic.co/t/getting-wrong-search-results/99576 "2017-09-06T16:33:04Z")

</div>

Hi Guys, I am working with Elastic search 2.4.x. I am getting incorrect search results: When I search for “Bil” it returns “Billy Brag” before “Bill Bailey”. I need to have “Bill Bailey” First. Here is search query: …

---

## [Painless : Use variable as regex](https://discuss.elastic.co/t/painless-use-variable-as-regex/99606)

<div class="topic-metadata">

**Author:** [@airpons1](https://discuss.elastic.co/u/airpons1)\
**Replies:** 2\
**Last updated:** [September 6, 2017, 4:30pm UTC](https://discuss.elastic.co/t/painless-use-variable-as-regex/99606 "2017-09-06T16:30:17Z")

</div>

Hi. I’m starting to use painless script in my ES queries and I’m currently struggled to convert a parameter or a variable to a Pattern. GET ressources/\_search { "query": { "bool": { "must": { "scri…

---

## [Curator - delete all indices based on "alias" name (prefix+timestring)](https://discuss.elastic.co/t/curator-delete-all-indices-based-on-alias-name-prefix-timestring/99588)

<div class="topic-metadata">

**Author:** [@olc-olivier](https://discuss.elastic.co/u/olc-olivier)\
**Replies:** 5\
**Last updated:** [September 6, 2017, 4:10pm UTC](https://discuss.elastic.co/t/curator-delete-all-indices-based-on-alias-name-prefix-timestring/99588 "2017-09-06T16:10:01Z")

</div>

Hi, I would like delete all indices older than xxx days based on alias name (prefix+timestring) and not index name. Is it possible ? action: delete\_indices \>\>\> action: delete\_indices\_from\_alias ex: alias \> log-2017…

---

## [High disk watermark \[90%\] exceeded on node,shards will be relocated away from this node](https://discuss.elastic.co/t/high-disk-watermark-90-exceeded-on-node-shards-will-be-relocated-away-from-this-node/99473)

<div class="topic-metadata">

**Author:** [@shyamalaponnada](https://discuss.elastic.co/u/shyamalaponnada)\
**Replies:** 4\
**Last updated:** [September 6, 2017, 4:05pm UTC](https://discuss.elastic.co/t/high-disk-watermark-90-exceeded-on-node-shards-will-be-relocated-away-from-this-node/99473 "2017-09-06T16:05:07Z")

</div>

HI All, recently elasticsearch stops sending data to kibana as the disk space is exceeded.per day i can see 5 M documents are flowing from other server to Elasticsearch.Please find the error am getting \[2017-08-31T01:2…

---

## [False License Expiration Warning](https://discuss.elastic.co/t/false-license-expiration-warning/99049)

<div class="topic-metadata">

**Author:** [@kd5dbl](https://discuss.elastic.co/u/kd5dbl)\
**Replies:** 2\
**Last updated:** [September 6, 2017, 3:03pm UTC](https://discuss.elastic.co/t/false-license-expiration-warning/99049 "2017-09-06T15:03:38Z")

</div>

On one of my ELK installations recently, I got this warning: \[2017-08-29T00:02:06,815\]\[WARN \]\[o.e.l.LicenseService \] \[es\_ip-10-174-1-46\] # # License \[will expire\] on \[Saturday, September 02, 2017\]. If you have a new…

---

## [Bucket Scripting](https://discuss.elastic.co/t/bucket-scripting/99596)

<div class="topic-metadata">

**Author:** [@Tirthankar\_Sarkar](https://discuss.elastic.co/u/Tirthankar_Sarkar)\
**Replies:** 1\
**Last updated:** [September 6, 2017, 2:56pm UTC](https://discuss.elastic.co/t/bucket-scripting/99596 "2017-09-06T14:56:24Z")

</div>

How does ES bucket scripting work internally? Is it scalable to add multiple bucket scripts into the same aggregations …

---

## [Using the same instance of ES for different Gitlab instances](https://discuss.elastic.co/t/using-the-same-instance-of-es-for-different-gitlab-instances/99593)

<div class="topic-metadata">

**Author:** [@botergios](https://discuss.elastic.co/u/botergios)\
**Replies:** 1\
**Last updated:** [September 6, 2017, 2:42pm UTC](https://discuss.elastic.co/t/using-the-same-instance-of-es-for-different-gitlab-instances/99593 "2017-09-06T14:42:41Z")

</div>

I am a bit new to this technology but I was wondering if I could use the same ES instance for two different Gitlab environments. Let’s say that we have a Gitlab for dev and a Gitlab for prod. Is there any way we can use …

---

## [Passing requestId in ES logs](https://discuss.elastic.co/t/passing-requestid-in-es-logs/99498)

<div class="topic-metadata">

**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\
**Replies:** 3\
**Last updated:** [September 6, 2017, 2:24pm UTC](https://discuss.elastic.co/t/passing-requestid-in-es-logs/99498 "2017-09-06T14:24:51Z")

</div>

We use ES in production. We generate our own transactionId / requestId for each request, so that we can trace the query. However, if there is a 400 / 500 error returned by ES (because of client or server error), there is…

---

## [Configuring data location in a cluster](https://discuss.elastic.co/t/configuring-data-location-in-a-cluster/99585)

<div class="topic-metadata">

**Author:** [@shin1](https://discuss.elastic.co/u/shin1)\
**Replies:** 4\
**Last updated:** [September 6, 2017, 1:27pm UTC](https://discuss.elastic.co/t/configuring-data-location-in-a-cluster/99585 "2017-09-06T13:27:17Z")

</div>

Hi All, I’m new to ES and now building a cluster environment, which consists of multiple ES instances across multiple nodes. Where is index data location by default and is it changeable to share the same location in a …

---

## [ElasticSearch 6.0 beta2](https://discuss.elastic.co/t/elasticsearch-6-0-beta2/99176)

<div class="topic-metadata">

**Author:** [@questar](https://discuss.elastic.co/u/questar)\
**Replies:** 5\
**Last updated:** [September 6, 2017, 1:17pm UTC](https://discuss.elastic.co/t/elasticsearch-6-0-beta2/99176 "2017-09-06T13:17:45Z")

</div>

When will maven have the update for beta2 ? Thanks

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1956)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1958)
