# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1993

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1994

---

## [How to used suggest 5.x](https://discuss.elastic.co/t/how-to-used-suggest-5-x/95262)

<div class="topic-metadata">

**Author:** [@ridorido](https://discuss.elastic.co/u/ridorido)\
**Replies:** 0\
**Last updated:** [August 1, 2017, 1:37am UTC](https://discuss.elastic.co/t/how-to-used-suggest-5-x/95262 "2017-08-01T01:37:43Z")

</div>

I\`m converting 1.7.5 =\> 5.4.2 But completion suggest output disappeared. ex) Es 1.7.5 Suggest Mapping "test\_suggest" : { { "input": "bigbang", "payload": { …

---

## [Russian characters are returned in bad charset](https://discuss.elastic.co/t/russian-characters-are-returned-in-bad-charset/94714)

<div class="topic-metadata">

**Author:** [@avkosme](https://discuss.elastic.co/u/avkosme)\
**Replies:** 3\
**Last updated:** [August 2, 2017, 1:08am UTC](https://discuss.elastic.co/t/russian-characters-are-returned-in-bad-charset/94714 "2017-08-02T01:08:38Z")

</div>

On my Centos 7 workstation i have elasticsearch (ver.5.5.1) service by image: docker.elastic.co/elasticsearch/elasticsearch:5.5.1. Filesystem type on my workstation is xfs. I have .tar archive with /usr/share/elastic…

---

## [Unable to overwrite dataframe when documents have parent](https://discuss.elastic.co/t/unable-to-overwrite-dataframe-when-documents-have-parent/95283)

<div class="topic-metadata">

**Author:** [@Brendan\_Kerrison](https://discuss.elastic.co/u/Brendan_Kerrison)\
**Replies:** 3\
**Last updated:** [August 1, 2017, 10:42pm UTC](https://discuss.elastic.co/t/unable-to-overwrite-dataframe-when-documents-have-parent/95283 "2017-08-01T22:42:40Z")

</div>

I am trying to write a dataframe to Elasticsearch from Spark using ES-Hadoop 5.5.1. The documents are being written as children of pre-existing parent documents. Everything is working correctly the first time the DF is s…

---

## [Hive elasticsearch integration](https://discuss.elastic.co/t/hive-elasticsearch-integration/95365)

<div class="topic-metadata">

**Author:** [@aliyesami](https://discuss.elastic.co/u/aliyesami)\
**Replies:** 1\
**Last updated:** [August 1, 2017, 9:31pm UTC](https://discuss.elastic.co/t/hive-elasticsearch-integration/95365 "2017-08-01T21:31:15Z")

</div>

I am sure there are many people who are using this but I am not getting any response to my issue. please can someone guide me on my issue ? If I create a hive ES table on node 1 its creating es-index on node4 or node5 …

---

## [Choosing a size for nodes](https://discuss.elastic.co/t/choosing-a-size-for-nodes/95421)

<div class="topic-metadata">

**Author:** [@samdash](https://discuss.elastic.co/u/samdash)\
**Replies:** 0\
**Last updated:** [August 1, 2017, 9:24pm UTC](https://discuss.elastic.co/t/choosing-a-size-for-nodes/95421 "2017-08-01T21:24:13Z")

</div>

I have 3 node cluster with: data : true, master :true And my index size is 50GB. And i have default setting with 5 shards and 1 replica, I would like to know what is the optimal RAM and DiskSpace required?

---

## [Query\_string with \_all disabled still returns results](https://discuss.elastic.co/t/query-string-with--all-disabled-still-returns-results/93992)

<div class="topic-metadata">

**Author:** [@JeffH](https://discuss.elastic.co/u/JeffH)\
**Replies:** 2\
**Last updated:** [August 1, 2017, 7:26pm UTC](https://discuss.elastic.co/t/query-string-with--all-disabled-still-returns-results/93992 "2017-08-01T19:26:55Z")

</div>

I am running elasticsearch 5.3.1 and trying to understand the effects of disabling the all field, however, after disabling I am still getting results on querystring queries where no field is specified. This is the same …

---

## [Root mapping definition has unsupported parameters (mapper\_parsing\_exception)](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-mapper-parsing-exception/95399)

<div class="topic-metadata">

**Author:** [@Sheryar\_Ahmed](https://discuss.elastic.co/u/Sheryar_Ahmed)\
**Replies:** 0\
**Last updated:** [August 1, 2017, 6:44pm UTC](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-mapper-parsing-exception/95399 "2017-08-01T18:44:52Z")

</div>

I am new to elasticsearch and I am stucked in a problem from couple of days. I have tried different solution provided on stackoverflow ES forum and other websites but they didn’t work for me that’s why I am posting this …

---

## [Ingest pipeline KV processor failure](https://discuss.elastic.co/t/ingest-pipeline-kv-processor-failure/94691)

<div class="topic-metadata">

**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\
**Replies:** 2\
**Last updated:** [August 1, 2017, 6:07pm UTC](https://discuss.elastic.co/t/ingest-pipeline-kv-processor-failure/94691 "2017-08-01T18:07:27Z")

</div>

Hi, I'm running ES 5.4.1, I'm sending a file to my ingest nodes that looks like this. time:1500651652886|serial:RWGSIPA530083|appName:DataSyncTab|data:This is a string log message time:1500651652887|serial:RWGSIPA53008…

---

## [Get All Hits from index](https://discuss.elastic.co/t/get-all-hits-from-index/95376)

<div class="topic-metadata">

**Author:** [@baha1](https://discuss.elastic.co/u/baha1)\
**Replies:** 2\
**Last updated:** [August 1, 2017, 5:15pm UTC](https://discuss.elastic.co/t/get-all-hits-from-index/95376 "2017-08-01T17:15:02Z")

</div>

Hi there, How can i get All the hits i have in my index from url. i used to use like that:http: //localhost:9200/errors/\_search?size=50. but i don’t a specific size.i want all:the bigger size. Thanks for help.

---

## [ElasticSearch 5.3 filterer char\_filter. pattern\_replace not working](https://discuss.elastic.co/t/elasticsearch-5-3-filterer-char-filter-pattern-replace-not-working/95265)

<div class="topic-metadata">

**Author:** [@Galim\_Kaudinov](https://discuss.elastic.co/u/Galim_Kaudinov)\
**Replies:** 4\
**Last updated:** [August 1, 2017, 4:32pm UTC](https://discuss.elastic.co/t/elasticsearch-5-3-filterer-char-filter-pattern-replace-not-working/95265 "2017-08-01T16:32:57Z")

</div>

favorite I have a requirement where I need to query docs by phone number. Users can enter characters such as parenthesis and dashes in the search query string and they should be ignored.So, I have created a custom analy…

---

## [Voting Only Master Node](https://discuss.elastic.co/t/voting-only-master-node/95375)

<div class="topic-metadata">

**Author:** [@discomatt](https://discuss.elastic.co/u/discomatt)\
**Replies:** 0\
**Last updated:** [August 1, 2017, 3:53pm UTC](https://discuss.elastic.co/t/voting-only-master-node/95375 "2017-08-01T15:53:23Z")

</div>

Bringing this github conversation to this forum: https://github.com/elastic/elasticsearch/issues/14340 What is the best way to create a Master Node that can vote in a new Master Election, but itself will never get elect…

---

## [Test case for issue \[Ensure that releasing listener is called\](https://github.com/elastic/elasticsearch/pull/23310#issue-209518352)](https://discuss.elastic.co/t/test-case-for-issue-ensure-that-releasing-listener-is-called-https-github-com-elastic-elasticsearch-pull-23310-issue-209518352/95374)

<div class="topic-metadata">

**Author:** [@vsevolodk](https://discuss.elastic.co/u/vsevolodk)\
**Replies:** 0\
**Last updated:** [August 1, 2017, 3:32pm UTC](https://discuss.elastic.co/t/test-case-for-issue-ensure-that-releasing-listener-is-called-https-github-com-elastic-elasticsearch-pull-23310-issue-209518352/95374 "2017-08-01T15:32:19Z")

</div>

Hi, please help. Do exist test case which are used curl and /nodes/stats response for issue Ensure that releasing listener is called ? I have exception Caused by: org.elasticsearch.common.breaker.CircuitBreakingExce…

---

## [Suggestion: Adding diagnostic tools to the Elasticsearch Docker image](https://discuss.elastic.co/t/suggestion-adding-diagnostic-tools-to-the-elasticsearch-docker-image/95361)

<div class="topic-metadata">

**Author:** [@victorvess](https://discuss.elastic.co/u/victorvess)\
**Replies:** 0\
**Last updated:** [August 1, 2017, 2:48pm UTC](https://discuss.elastic.co/t/suggestion-adding-diagnostic-tools-to-the-elasticsearch-docker-image/95361 "2017-08-01T14:48:35Z")

</div>

I am working through an open support ticket, and one of the requests from the engineer was to pull diagnostics (GitHub - elastic/support-diagnostics: Support diagnostics utility for elasticsearch and logstash) for my clu…

---

## [\[Monitoring\] "Phantom" indices and yellow status](https://discuss.elastic.co/t/monitoring-phantom-indices-and-yellow-status/94932)

<div class="topic-metadata">

**Author:** [@Cornoualis](https://discuss.elastic.co/u/Cornoualis)\
**Replies:** 5\
**Last updated:** [August 1, 2017, 2:43pm UTC](https://discuss.elastic.co/t/monitoring-phantom-indices-and-yellow-status/94932 "2017-08-01T14:43:23Z")

</div>

Hi! I removed some .monitoring indices and I have a persistant error in Kibana telling me that my cluster status is yellow (even if it's green): In the indices view of Monitoring, I see the removed indices as "grey": …

---

## [Backup Restore to different Host - no snapshots](https://discuss.elastic.co/t/backup-restore-to-different-host-no-snapshots/94837)

<div class="topic-metadata">

**Author:** [@Bruce\_Carey](https://discuss.elastic.co/u/Bruce_Carey)\
**Replies:** 1\
**Last updated:** [August 1, 2017, 1:28pm UTC](https://discuss.elastic.co/t/backup-restore-to-different-host-no-snapshots/94837 "2017-08-01T13:28:00Z")

</div>

Hi, I’m doing this on ES 5.0.2 on Ubuntu 16.04 in Azure In order to do backups properly, I have a second machine with a 4TB area. I’m using a single repo with incremental snapshots. The connection is NFS. To test th…

---

## [Read cluster settings with Java API](https://discuss.elastic.co/t/read-cluster-settings-with-java-api/95341)

<div class="topic-metadata">

**Author:** [@chr7s](https://discuss.elastic.co/u/chr7s)\
**Replies:** 0\
**Last updated:** [August 1, 2017, 1:04pm UTC](https://discuss.elastic.co/t/read-cluster-settings-with-java-api/95341 "2017-08-01T13:04:53Z")

</div>

Hi everyone, is it possible to read cluster settings with Elasticsearch’s Java API? I want to read the value of the setting “cluster.routing.allocation.enable”. But I only find ways to update settings and not read a set…

---

## [Sparse index](https://discuss.elastic.co/t/sparse-index/95333)

<div class="topic-metadata">

**Author:** [@Spacefish](https://discuss.elastic.co/u/Spacefish)\
**Replies:** 2\
**Last updated:** [August 1, 2017, 12:51pm UTC](https://discuss.elastic.co/t/sparse-index/95333 "2017-08-01T12:51:01Z")

</div>

Hello, i have a ES Index with aprox. 10 Million documents. It is running on a three node cluster, with 6gb Java Heap per node… when i use this index in kibana i see considerate slowdown, it takes up to 20 seconds for a…

---

## [How does Cluster synchronisation works?](https://discuss.elastic.co/t/how-does-cluster-synchronisation-works/95337)

<div class="topic-metadata">

**Author:** [@freddy](https://discuss.elastic.co/u/freddy)\
**Replies:** 0\
**Last updated:** [August 1, 2017, 12:21pm UTC](https://discuss.elastic.co/t/how-does-cluster-synchronisation-works/95337 "2017-08-01T12:21:17Z")

</div>

Hello everyone, I wonder how the synchronisation between two clusters works. my two servers have the same cluster name and node name, so synchronisation wokrs fine. I have to use elasticsearch version 1.7.6 for a projec…

---

## [Unable to install elasticsearch 5.5.1 ,facing issues](https://discuss.elastic.co/t/unable-to-install-elasticsearch-5-5-1-facing-issues/95281)

<div class="topic-metadata">

**Author:** [@vijjun123](https://discuss.elastic.co/u/vijjun123)\
**Replies:** 6\
**Last updated:** [August 1, 2017, 12:15pm UTC](https://discuss.elastic.co/t/unable-to-install-elasticsearch-5-5-1-facing-issues/95281 "2017-08-01T12:15:13Z")

</div>

Hi All, Unable to install elasticsearch 5.5.1 and facing the below error. Could you please help me for further ERROR: \[2\] bootstrap checks failed \[1\]: max file descriptors \[4096\] for elasticsearch process is too low,…

---

## [Reporting Builder](https://discuss.elastic.co/t/reporting-builder/94773)

<div class="topic-metadata">

**Author:** [@mussa572](https://discuss.elastic.co/u/mussa572)\
**Replies:** 1\
**Last updated:** [August 1, 2017, 12:14pm UTC](https://discuss.elastic.co/t/reporting-builder/94773 "2017-08-01T12:14:10Z")

</div>

Hi Is there any possibility to format the report generated by Xpack reporting plugin . I have noticed that report is not created on the same format as the layout of the Dashboard . Any chance we can format the layout …

---

## [Change Polygon colour according a particular parameter in Elasticsearch](https://discuss.elastic.co/t/change-polygon-colour-according-a-particular-parameter-in-elasticsearch/95326)

<div class="topic-metadata">

**Author:** [@Fguti](https://discuss.elastic.co/u/Fguti)\
**Replies:** 0\
**Last updated:** [August 1, 2017, 11:21am UTC](https://discuss.elastic.co/t/change-polygon-colour-according-a-particular-parameter-in-elasticsearch/95326 "2017-08-01T11:21:53Z")

</div>

Hi all, What is the best way to show polygons on the map in Kibana 5.5 and change the colors of these polygons according to the value of particular parameter in Elasticsearch? Is it possible to do without plugins? If no…

---

## [Highlight query slow performance in ES 5.4.1 on specific index](https://discuss.elastic.co/t/highlight-query-slow-performance-in-es-5-4-1-on-specific-index/95317)

<div class="topic-metadata">

**Author:** [@Dan\_Markhasin](https://discuss.elastic.co/u/Dan_Markhasin)\
**Replies:** 0\
**Last updated:** [August 1, 2017, 10:37am UTC](https://discuss.elastic.co/t/highlight-query-slow-performance-in-es-5-4-1-on-specific-index/95317 "2017-08-01T10:37:47Z")

</div>

We’ve recently noticed a significant degradation in the search performance of our ES 5.4.1 cluster - when using Kibana, going to “Discover” and asking to display the last 15 minutes of data from a specific index, half t…

---

## [Indexing Speed Degrade With the Time](https://discuss.elastic.co/t/indexing-speed-degrade-with-the-time/95315)

<div class="topic-metadata">

**Author:** [@KnioX](https://discuss.elastic.co/u/KnioX)\
**Replies:** 0\
**Last updated:** [August 1, 2017, 10:27am UTC](https://discuss.elastic.co/t/indexing-speed-degrade-with-the-time/95315 "2017-08-01T10:27:14Z")

</div>

Hi, I am doing some performance tuning in elastic search for my project and I need some help in improving the elastic search indexing speed. I am using ES 5.1.1 and I have 2 nodes setup with 8 shards for the index. I ha…

---

## [Failed to verify minimum version \[5.0.0-beta1\] on the \[xpack.monitoring.exporters.id1\] monitoring cluster](https://discuss.elastic.co/t/failed-to-verify-minimum-version-5-0-0-beta1-on-the-xpack-monitoring-exporters-id1-monitoring-cluster/95186)

<div class="topic-metadata">

**Author:** [@sgarap](https://discuss.elastic.co/u/sgarap)\
**Replies:** 2\
**Last updated:** [August 1, 2017, 10:25am UTC](https://discuss.elastic.co/t/failed-to-verify-minimum-version-5-0-0-beta1-on-the-xpack-monitoring-exporters-id1-monitoring-cluster/95186 "2017-08-01T10:25:00Z")

</div>

Hi, I want to send the elasticsearch monitoring data to a separate monitoring cluster. Both the cluster have Elasticsearch 5.2.0. In the actual cluster, in elasticsearch.yml I added the following configuration. Note: Pa…

---

## [Create link for end user to ack watcher email](https://discuss.elastic.co/t/create-link-for-end-user-to-ack-watcher-email/94987)

<div class="topic-metadata">

**Author:** [@David\_Tomasheski](https://discuss.elastic.co/u/David_Tomasheski)\
**Replies:** 3\
**Last updated:** [July 31, 2017, 9:38pm UTC](https://discuss.elastic.co/t/create-link-for-end-user-to-ack-watcher-email/94987 "2017-07-31T21:38:40Z")

</div>

I have a watch that shoots off an email which works great. I would like to add a link to the email so the end user can click it to ack the email so he doesn’t keep getting emails about the same issue. Is there a way to …

---

## [:Courier fetch :shards failed](https://discuss.elastic.co/t/courier-fetch-shards-failed/95300)

<div class="topic-metadata">

**Author:** [@marwa](https://discuss.elastic.co/u/marwa)\
**Replies:** 0\
**Last updated:** [August 1, 2017, 8:32am UTC](https://discuss.elastic.co/t/courier-fetch-shards-failed/95300 "2017-08-01T08:32:33Z")

</div>

hi , if i run kibana ,this error appears i added this to elastiseaech.yml threadpool.search.queue\_size: 10000 but nothing changed

---

## [ElasticSearch Cluster Read or Write Intensive](https://discuss.elastic.co/t/elasticsearch-cluster-read-or-write-intensive/95296)

<div class="topic-metadata">

**Author:** [@Hafiz\_Ali](https://discuss.elastic.co/u/Hafiz_Ali)\
**Replies:** 0\
**Last updated:** [August 1, 2017, 8:05am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-read-or-write-intensive/95296 "2017-08-01T08:05:34Z")

</div>

Hi , i want to make a elasticsearch cluster . i want to know what is best architecture for read Intensive or Write Intensive ? any one has idea ?

---

## [Doc\_values disk usage](https://discuss.elastic.co/t/doc-values-disk-usage/94830)

<div class="topic-metadata">

**Author:** [@ananth](https://discuss.elastic.co/u/ananth)\
**Replies:** 1\
**Last updated:** [August 1, 2017, 6:39am UTC](https://discuss.elastic.co/t/doc-values-disk-usage/94830 "2017-08-01T06:39:46Z")

</div>

\[https://www.elastic.co/guide/en/elasticsearch/guide/current/\_deep\_dive\_on\_doc\_values.html\] From the above link (In general) number fields doc\_value will use less disk compare with string fields doc\_values. I tried a s…

---

## [Need Help Tuning ES for Large Data](https://discuss.elastic.co/t/need-help-tuning-es-for-large-data/91207)

<div class="topic-metadata">

**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\
**Replies:** 11\
**Last updated:** [August 1, 2017, 5:52am UTC](https://discuss.elastic.co/t/need-help-tuning-es-for-large-data/91207 "2017-08-01T05:52:56Z")

</div>

Hello Everyone, I have a relatively large data where we use a custom python script to ingest data using the bulk API. These are AWS Cloudtrail data for over 200 AWS Accounts aggregated in single s3 bucket. This has bee…

---

## [Using Top Hits aggregation for calculating time duration in each grouped field](https://discuss.elastic.co/t/using-top-hits-aggregation-for-calculating-time-duration-in-each-grouped-field/95166)

<div class="topic-metadata">

**Author:** [@Jenny\_Hsiao](https://discuss.elastic.co/u/Jenny_Hsiao)\
**Replies:** 4\
**Last updated:** [August 1, 2017, 5:42am UTC](https://discuss.elastic.co/t/using-top-hits-aggregation-for-calculating-time-duration-in-each-grouped-field/95166 "2017-08-01T05:42:34Z")

</div>

I am trying to get time duration between each grouped field. Example: My document is shown below: { "timestamp":"2017-07-31T15:05:04.563Z", "session\_id":"1", "user\_id":"jenny" } I want to get time duration in each se…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1992)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1994)
